Function at 0x4cfea1
Capabilities:
Query or enumerate registry value

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x10
push ebx
push esi
push edi
mov dword [ebp - 0xc], 0x602260
push 4
call fcn.005c95de
add esp, 4
mov esi, eax
push 0x617650
call fcn.004bbc70
add esp, 4
mov ebx, eax
push esi
call fcn.005c9640
add esp, 4
push eax
push ebx
push 0x80000002
call sub.ADVAPI32.dll_RegOpenKeyA
push ebx
call fcn.004bd1e0
add esp, 4
push 0
push esi
call fcn.005c9788
add esp, 8
mov dword [ebp - 0x10], eax
push 0x64
call fcn.005c95de
add esp, 4
mov esi, eax
push 4
call fcn.005c95de
add esp, 4
mov dword [ebp - 4], eax
push 4
call fcn.005c95de
add esp, 4
mov edi, eax
push 0
push 0
push edi
call fcn.005c97a1
add esp, 0xc
push 0x64
push 0
push dword [ebp - 4]
call fcn.005c97a1
add esp, 0xc
push 0x617690
call fcn.004bbc70
add esp, 4
mov ebx, eax
push dword [ebp - 4]
call fcn.005c9640
add esp, 4
push eax
push esi
call fcn.005c9640
add esp, 4
push eax
push edi
call fcn.005c9640
add esp, 4
push eax
push 0
push ebx
push dword [ebp - 0x10]
call sub.ADVAPI32.dll_RegQueryValueExA
push ebx
call fcn.004bd1e0
add esp, 4
mov edi, 0x602260
mov ebx, 0
push 0
push dword [ebp - 4]
call fcn.005c9788
add esp, 8
sub eax, 1
mov dword [ebp - 8], eax
jmp 0x4cffce
push ebx
push esi
call fcn.005c9712
add esp, 8
cmp eax, 0
jne 0x4cffac
jmp 0x4cffd3
push ebx
push esi
call fcn.005c9712
add esp, 8
push eax
call fcn.004bace0
add esp, 4
push eax
push edi
call fcn.004bb2f0
add esp, 8
mov edi, eax
add ebx, 1
cmp ebx, dword [ebp - 8]
jle 0x4cff9b
push dword [ebp - 0x10]
call sub.ADVAPI32.dll_RegCloseKey
mov ebx, edi
push 0x6176ac
push ebx
call fcn.004bb150
add esp, 8
cmp eax, 0
je 0x4d0266
push 0x6176cc
push ebx
call fcn.004bb150
add esp, 8
cmp eax, 0
je 0x4d0272
push 0x6176f0
push ebx
call fcn.004bb150
add esp, 8
cmp eax, 0
je 0x4d027e
push 0x617714
push ebx
call fcn.004bb150
add esp, 8
cmp eax, 0
je 0x4d028a
push 0x617738
push ebx
call fcn.004bb150
add esp, 8
cmp eax, 0
je 0x4d0296
push 0x61775c
push ebx
call fcn.004bb150
add esp, 8
cmp eax, 0
je 0x4d02a2
push 0x617780
push ebx
call fcn.004bb150
add esp, 8
cmp eax, 0
je 0x4d02ae
push 0x6177a4
push ebx
call fcn.004bb150
add esp, 8
cmp eax, 0
je 0x4d02ba
push 0x6177c8
push ebx
call fcn.004bb150
add esp, 8
cmp eax, 0
je 0x4d02c6
push 0x6177ec
push ebx
call fcn.004bb150
add esp, 8
cmp eax, 0
je 0x4d02d2
push 0x617810
push ebx
call fcn.004bb150
add esp, 8
cmp eax, 0
je 0x4d02de
push 0x617834
push ebx
call fcn.004bb150
add esp, 8
cmp eax, 0
je 0x4d02ea
push 0x617858
push ebx
call fcn.004bb150
add esp, 8
cmp eax, 0
je 0x4d02f6
push 0x61787c
push ebx
call fcn.004bb150
add esp, 8
cmp eax, 0
je 0x4d0302
push 0x6178a0
push ebx
call fcn.004bb150
add esp, 8
cmp eax, 0
je 0x4d030b
push 0x6178c4
push ebx
call fcn.004bb150
add esp, 8
cmp eax, 0
je 0x4d0314
push 0x6178e8
push ebx
call fcn.004bb150
add esp, 8
cmp eax, 0
je 0x4d031d
push 0x61790c
push ebx
call fcn.004bb150
add esp, 8
cmp eax, 0
je 0x4d0326
push 0x617930
push ebx
call fcn.004bb150
add esp, 8
cmp eax, 0
je 0x4d032f
push 0x617958
push ebx
call fcn.004bb150
add esp, 8
cmp eax, 0
je 0x4d0338
push 0x61797c
push ebx
call fcn.004bb150
add esp, 8
cmp eax, 0
je 0x4d0341
push 0x6179a4
push ebx
call fcn.004bb150
add esp, 8
cmp eax, 0
je 0x4d034a
push 0x6179c8
push ebx
call fcn.004bb150
add esp, 8
cmp eax, 0
je 0x4d0353
push 0x6179f0
push ebx
call fcn.004bb150
add esp, 8
cmp eax, 0
je 0x4d035c
push 0x617a14
push ebx
call fcn.004bb150
add esp, 8
cmp eax, 0
je 0x4d0365
push 0x617a38
push ebx
call fcn.004bb150
add esp, 8
cmp eax, 0
je 0x4d036e
push 0x617a60
push ebx
call fcn.004bb150
add esp, 8
cmp eax, 0
je 0x4d0377
push 0x617a84
push ebx
call fcn.004bb150
add esp, 8
cmp eax, 0
je 0x4d0380
jmp 0x4d0389
mov dword [ebp - 0xc], 0x617aac
jmp 0x4d0389
mov dword [ebp - 0xc], 0x617ac0
jmp 0x4d0389
mov dword [ebp - 0xc], 0x617ad4
jmp 0x4d0389
mov dword [ebp - 0xc], 0x617ad4
jmp 0x4d0389
mov dword [ebp - 0xc], 0x617ae8
jmp 0x4d0389
mov dword [ebp - 0xc], 0x617afc
jmp 0x4d0389
mov dword [ebp - 0xc], 0x617afc
jmp 0x4d0389
mov dword [ebp - 0xc], 0x617b10
jmp 0x4d0389
mov dword [ebp - 0xc], 0x617b24
jmp 0x4d0389
mov dword [ebp - 0xc], 0x617b38
jmp 0x4d0389
mov dword [ebp - 0xc], 0x617b4c
jmp 0x4d0389
mov dword [ebp - 0xc], 0x617b60
jmp 0x4d0389
mov dword [ebp - 0xc], 0x617b74
jmp 0x4d0389
mov dword [ebp - 0xc], 0x617b88
jmp 0x4d0389
mov dword [ebp - 0xc], 0x617b9c
jmp 0x4d0389
mov dword [ebp - 0xc], 0x617b9c
jmp 0x4d0389
mov dword [ebp - 0xc], 0x617bb0
jmp 0x4d0389
mov dword [ebp - 0xc], 0x617bc4
jmp 0x4d0389
mov dword [ebp - 0xc], 0x617bd8
jmp 0x4d0389
mov dword [ebp - 0xc], 0x617bd8
jmp 0x4d0389
mov dword [ebp - 0xc], 0x617bec
jmp 0x4d0389
mov dword [ebp - 0xc], 0x617bec
jmp 0x4d0389
mov dword [ebp - 0xc], 0x617c00
jmp 0x4d0389
mov dword [ebp - 0xc], 0x617c00
jmp 0x4d0389
mov dword [ebp - 0xc], 0x617c14
jmp 0x4d0389
mov dword [ebp - 0xc], 0x617c14
jmp 0x4d0389
mov dword [ebp - 0xc], 0x617c14
jmp 0x4d0389
mov dword [ebp - 0xc], 0x617c14
jmp 0x4d0389
mov eax, dword [ebp - 0xc]
jmp 0x4d038e
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret