Function at 0x488280
Capabilities:
Query or enumerate registry value

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x551aee
mov eax, dword fs:[0]
push eax
sub esp, 0x350
mov eax, dword [0x599680]
xor eax, ebp
mov dword [ebp - 0x10], eax
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov dword [ebp - 0x31c], ecx
push 0x55a010
lea ecx, [ebp - 0x260]
call fcn.00402000
mov dword [ebp - 4], 0
lea eax, [ebp - 0x260]
push eax
mov ecx, dword [ebp - 0x31c]
call fcn.0040df80
mov ecx, dword [ebp - 0x31c]
mov dword [ecx + 0x258], eax
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x260]
call fcn.00401f60
push 0x55a028
lea ecx, [ebp - 0x278]
call fcn.00402000
mov dword [ebp - 4], 1
lea edx, [ebp - 0x278]
push edx
mov ecx, dword [ebp - 0x31c]
call fcn.0040df80
mov ecx, dword [ebp - 0x31c]
mov dword [ecx + 0x25c], eax
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x278]
call fcn.00401f60
push str.install_path
lea ecx, [ebp - 0x290]
call fcn.00402000
mov dword [ebp - 4], 2
lea edx, [ebp - 0x290]
push edx
mov ecx, dword [ebp - 0x31c]
call fcn.0040df80
mov ecx, dword [ebp - 0x31c]
mov dword [ecx + 0x260], eax
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x290]
call fcn.00401f60
push str.progress
lea ecx, [ebp - 0x2a8]
call fcn.00402000
mov dword [ebp - 4], 3
lea edx, [ebp - 0x2a8]
push edx
mov ecx, dword [ebp - 0x31c]
call fcn.0040df80
mov ecx, dword [ebp - 0x31c]
mov dword [ecx + 0x264], eax
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x2a8]
call fcn.00401f60
push 0x55a060
lea ecx, [ebp - 0x2c0]
call fcn.00402000
mov dword [ebp - 4], 4
lea edx, [ebp - 0x2c0]
push edx
mov ecx, dword [ebp - 0x31c]
call fcn.0040df80
mov ecx, dword [ebp - 0x31c]
mov dword [ecx + 0x268], eax
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x2c0]
call fcn.00401f60
push 0x55a074
lea ecx, [ebp - 0x2d8]
call fcn.00402000
mov dword [ebp - 4], 5
lea edx, [ebp - 0x2d8]
push edx
mov ecx, dword [ebp - 0x31c]
call fcn.0040df80
mov ecx, dword [ebp - 0x31c]
mov dword [ecx + 0x26c], eax
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x2d8]
call fcn.00401f60
push 0x55a094
lea ecx, [ebp - 0x2f0]
call fcn.00402000
mov dword [ebp - 4], 6
lea edx, [ebp - 0x2f0]
push edx
mov ecx, dword [ebp - 0x31c]
call fcn.0040df80
mov ecx, dword [ebp - 0x31c]
mov dword [ecx + 0x270], eax
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x2f0]
call fcn.00401f60
mov edx, dword [ebp - 0x31c]
mov dword [ebp - 0x320], edx
mov dword [ebp - 0x33c], 0x488750
mov dword [ebp - 0x338], 0
mov dword [ebp - 0x334], 0
push 0x55a05e
lea eax, [ebp - 0x320]
push eax
sub esp, 0xc
mov ecx, esp
mov edx, dword [ebp - 0x33c]
mov dword [ecx], edx
mov eax, dword [ebp - 0x338]
mov dword [ecx + 4], eax
mov edx, dword [ebp - 0x334]
mov dword [ecx + 8], edx
lea eax, [ebp - 0x35c]
push eax
call fcn.004874d0
add esp, 0x18
mov dword [ebp - 0x324], eax
mov ecx, dword [ebp - 0x324]
mov dword [ebp - 0x328], ecx
mov dword [ebp - 4], 7
mov edx, dword [ebp - 0x328]
push edx
lea ecx, [ebp - 0x318]
call fcn.00487320
mov byte [ebp - 4], 8
lea eax, [ebp - 0x318]
push eax
push 6
mov ecx, dword [ebp - 0x31c]
mov ecx, dword [ecx + 0x1c]
call fcn.00487f80
mov byte [ebp - 4], 7
lea ecx, [ebp - 0x318]
call fcn.00403cf0
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x35c]
call fcn.00487e10
push 1
call fcn.00485d80
mov ecx, eax
call fcn.00456b20
mov ecx, eax
call fcn.00480370
movzx edx, al
push edx
mov eax, dword [ebp - 0x31c]
mov ecx, dword [eax + 0x270]
mov edx, dword [ebp - 0x31c]
mov eax, dword [ecx]
mov ecx, dword [edx + 0x270]
mov edx, dword [eax + 0x184]
call edx
push 1
call fcn.00485d80
mov ecx, eax
call fcn.00456b20
mov ecx, eax
call fcn.0047ff40
movzx eax, al
push eax
mov ecx, dword [ebp - 0x31c]
mov edx, dword [ecx + 0x26c]
mov eax, dword [ebp - 0x31c]
mov edx, dword [edx]
mov ecx, dword [eax + 0x26c]
mov eax, dword [edx + 0x184]
call eax
push 1
call fcn.00485d80
mov ecx, eax
call fcn.00456b20
mov ecx, eax
call fcn.0047ff60
movzx ecx, al
push ecx
mov edx, dword [ebp - 0x31c]
mov eax, dword [edx + 0x268]
mov ecx, dword [ebp - 0x31c]
mov edx, dword [eax]
mov ecx, dword [ecx + 0x268]
mov eax, dword [edx + 0x184]
call eax
lea ecx, [ebp - 0x230]
call fcn.00402050
mov dword [ebp - 4], 9
mov dword [ebp - 0x330], 1
push 0x208
push 0
lea ecx, [ebp - 0x218]
push ecx
call fcn.0050c560
add esp, 0xc
mov dword [ebp - 0x32c], 0x208
lea edx, [ebp - 0x32c]
push edx
lea eax, [ebp - 0x218]
push eax
lea ecx, [ebp - 0x330]
push ecx
push str.InstallPath
push str.SOFTWAREjiebangbang
push reloc.OLEAUT32.dll_SysReAllocString
call dword [sym.imp.SHLWAPI.dll_SHGetValueW]
lea edx, [ebp - 0x218]
push edx
call dword [sym.imp.KERNEL32.dll_lstrlenW]
test eax, eax
jle 0x4886a9
lea eax, [ebp - 0x218]
push eax
lea ecx, [ebp - 0x230]
call fcn.00401f30
jmp 0x4886ef
push 0x2a
lea ecx, [ebp - 0x248]
push ecx
call fcn.00467fb0
add esp, 8
mov byte [ebp - 4], 0xa
push 0x55a0f0
lea ecx, [ebp - 0x248]
call fcn.004142e0
lea edx, [ebp - 0x248]
push edx
lea ecx, [ebp - 0x230]
call fcn.00405b60
mov byte [ebp - 4], 9
lea ecx, [ebp - 0x248]
call fcn.00401f60
lea eax, [ebp - 0x230]
push eax
mov ecx, dword [ebp - 0x31c]
mov ecx, dword [ecx + 0x260]
call fcn.0042e1c0
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x230]
call fcn.00401f60
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
mov ecx, dword [ebp - 0x10]
xor ecx, ebp
call fcn.00509f60
mov esp, ebp
pop ebp
ret