Function at 0x468380
Capabilities:
Link many functions at runtime
Query or enumerate registry value

Disassembly:
push ebp
mov ebp, esp
add esp, 0xffffff4c
xor eax, eax
mov dword [ebp - 0xb4], eax
xor eax, eax
push ebp
push 0x468655
push dword fs:[eax]
mov dword fs:[eax], esp
mov dword [ebp - 0xb0], 0x94
lea eax, [ebp - 0xb0]
push eax
call sub.KERNEL32.DLL_GetVersionExA
cmp dword [ebp - 0xac], 3
jg 0x4683d0
cmp dword [ebp - 0xac], 3
jne 0x46843c
cmp dword [ebp - 0xa8], 0x33
jle 0x46843c
lea eax, [ebp - 8]
push eax
push 0x20019
push 0
push 0x468660
push 0x80000002
call sub.ADVAPI32.DLL_RegOpenKeyExA_1
test eax, eax
jne 0x46863c
mov dword [ebp - 0x18], 9
lea eax, [ebp - 0x18]
push eax
lea eax, [ebp - 0x11]
push eax
lea eax, [ebp - 0x1c]
push eax
push 0
push 0x468690
mov eax, dword [ebp - 8]
push eax
call sub.ADVAPI32.DLL_RegQueryValueExA_1
test eax, eax
jne 0x46863c
mov eax, dword [ebp - 8]
push eax
call sub.ADVAPI32.DLL_RegCloseKey_1
cmp byte [ebp - 0x11], 0x31
jne 0x46863c
cmp byte [ebp - 0x10], 0
jne 0x46863c
jmp 0x468455
push 0
push 0x468690
push 0x468698
call sub.KERNEL32.DLL_GetProfileIntA
test eax, eax
je 0x46863c
push 0x8001
call sub.KERNEL32.DLL_SetErrorMode
mov word [ebp - 2], ax
push 0x4686a0
call sub.KERNEL32.DLL_LoadLibraryA
mov dword [0x487f9c], eax
movzx eax, word [ebp - 2]
push eax
call sub.KERNEL32.DLL_SetErrorMode
cmp dword [0x487f9c], 0
jne 0x4684e2
push 0x8001
call sub.KERNEL32.DLL_SetErrorMode
mov word [ebp - 2], ax
xor eax, eax
push ebp
push 0x4684db
push dword fs:[eax]
mov dword fs:[eax], esp
push 0x4686a8
call sub.KERNEL32.DLL_LoadLibraryA
mov dword [0x487f9c], eax
cmp dword [0x487f9c], 0
jne 0x4684c3
call fcn.004035f4
jmp 0x46863c
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
push 0x4684e2
movzx eax, word [ebp - 2]
push eax
call sub.KERNEL32.DLL_SetErrorMode
ret
mov byte [0x487f98], 1
push 0x4686b4
mov eax, dword [0x487f9c]
push eax
call sub.KERNEL32.DLL_GetProcAddress
mov dword [0x487fa0], eax
push 0x4686c4
mov eax, dword [0x487f9c]
push eax
call sub.KERNEL32.DLL_GetProcAddress
mov dword [0x487fa4], eax
push 0x4686d0
mov eax, dword [0x487f9c]
push eax
call sub.KERNEL32.DLL_GetProcAddress
mov dword [0x487fa8], eax
push 0x4686dc
mov eax, dword [0x487f9c]
push eax
call sub.KERNEL32.DLL_GetProcAddress
mov dword [0x487fac], eax
push 0x4686ec
mov eax, dword [0x487f9c]
push eax
call sub.KERNEL32.DLL_GetProcAddress
mov dword [0x487fb0], eax
push 0x4686fc
mov eax, dword [0x487f9c]
push eax
call sub.KERNEL32.DLL_GetProcAddress
mov dword [0x487fb4], eax
push 0x46870c
mov eax, dword [0x487f9c]
push eax
call sub.KERNEL32.DLL_GetProcAddress
mov dword [0x487fb8], eax
push 0x46871c
mov eax, dword [0x487f9c]
push eax
call sub.KERNEL32.DLL_GetProcAddress
mov dword [0x487fbc], eax
push 0x46872c
mov eax, dword [0x487f9c]
push eax
call sub.KERNEL32.DLL_GetProcAddress
mov dword [0x487fc0], eax
push 0x468738
mov eax, dword [0x487f9c]
push eax
call sub.KERNEL32.DLL_GetProcAddress
mov dword [0x487fc4], eax
cmp dword [0x487fc0], 0
je 0x468615
cmp dword [0x487fbc], 0
je 0x468615
cmp dword [0x487fb8], 0
je 0x468615
cmp dword [0x487fb4], 0
je 0x468615
cmp dword [0x487fb0], 0
je 0x468615
cmp dword [0x487fac], 0
je 0x468615
cmp dword [0x487fa8], 0
je 0x468615
cmp dword [0x487fa4], 0
je 0x468615
cmp dword [0x487fa0], 0
je 0x468615
cmp dword [0x487fc4], 0
jne 0x46863c
lea edx, [ebp - 0xb4]
mov eax, 0x4682d4
call fcn.00404e68
mov ecx, dword [ebp - 0xb4]
mov dl, 1
mov eax, dword [0x468284]
call fcn.0040a7e4
call fcn.00403554
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
push 0x46865c
lea eax, [ebp - 0xb4]
call fcn.00403afc
ret