Function at 0x46b5a4
Capabilities:
Query or enumerate registry value

Disassembly:
push ebp
mov ebp, esp
add esp, 0xfffffbf0
push ebx
push esi
push edi
xor edx, edx
mov dword [ebp - 0xc], edx
mov dword [ebp - 0x10], edx
mov esi, eax
mov ebx, 0x473e10
mov edi, 0x473e14
xor eax, eax
push ebp
push 0x46b828
push dword fs:[eax]
mov dword fs:[eax], esp
lea eax, [ebp - 0xc]
call fcn.0040415c
lea eax, [ebp - 0x10]
call fcn.0040415c
lea eax, [ebp - 4]
push eax
push 0xf003f
push 0
push 0x46b838
push 0x80000002
call sub.advapi32.dll_RegOpenKeyExA_1
mov dword [ebp - 8], 0x400
mov eax, dword [edi]
call fcn.00402da8
add eax, 0x37949c
mov dword [ebx], eax
mov dword [ebx], 0xb16f3
call sub.kernel32.dll_GetTickCount_1
add eax, 0x23838b
mov dword [edi], eax
lea eax, [ebp - 8]
push eax
lea eax, [ebp - 0x410]
push eax
push 0
push 0
push 0x46b868
mov eax, dword [ebp - 4]
push eax
call sub.advapi32.dll_RegQueryValueExA_1
test eax, eax
jne 0x46b657
lea eax, [ebp - 0xc]
lea edx, [ebp - 0x410]
mov ecx, 0x400
call fcn.004043cc
lea eax, [ebp - 8]
push eax
lea eax, [ebp - 0x410]
push eax
push 0
push 0
push 0x46b874
mov eax, dword [ebp - 4]
push eax
call sub.advapi32.dll_RegQueryValueExA_1
test eax, eax
jne 0x46b6cb
lea eax, [ebp - 0x10]
lea edx, [ebp - 0x410]
mov ecx, 0x400
call fcn.004043cc
lea eax, [ebp - 0x10]
mov ecx, dword [ebp - 0x10]
mov edx, 0x46b888
call fcn.00404468
mov dword [ebx], 0x21975c
mov dword [edi], 0x32111a
mov dword [edi], 0x38ca79
mov dword [edi], 0x837a
mov dword [ebx], 0xdd7f2
mov dword [ebx], 0x147b74
mov dword [edi], 0x11a247
mov dword [edi], 0x1dead8
mov eax, dword [ebp - 4]
push eax
call sub.advapi32.dll_RegCloseKey_1
lea eax, [ebp - 4]
push eax
push 0xf003f
push 0
push 0x46b88c
push 0x80000002
call sub.advapi32.dll_RegOpenKeyExA_1
mov dword [ebp - 8], 0x400
lea eax, [ebp - 8]
push eax
lea eax, [ebp - 0x410]
push eax
push 0
push 0
push 0x46b868
mov eax, dword [ebp - 4]
push eax
call sub.advapi32.dll_RegQueryValueExA_1
test eax, eax
jne 0x46b729
lea eax, [ebp - 0xc]
lea edx, [ebp - 0x410]
mov ecx, 0x400
call fcn.004043cc
mov eax, dword [ebp - 4]
push eax
call sub.advapi32.dll_RegCloseKey_1
mov edx, dword [ebp - 0xc]
mov eax, 0x46b8c0
call fcn.00404760
dec eax
jne 0x46b754
lea eax, [ebp - 0xc]
mov ecx, 0x12
mov edx, 1
call fcn.004046bc
mov edx, dword [ebp - 0xc]
mov eax, 0x46b8dc
call fcn.00404760
dec eax
jne 0x46b776
lea eax, [ebp - 0xc]
mov ecx, 8
mov edx, 1
call fcn.004046bc
mov edx, dword [ebp - 0x10]
mov eax, 0x46b8f0
call fcn.00404760
dec eax
jne 0x46b7a8
lea eax, [ebp - 0x10]
mov ecx, 0xe
mov edx, 1
call fcn.004046bc
lea eax, [ebp - 0x10]
mov ecx, dword [ebp - 0x10]
mov edx, 0x46b908
call fcn.00404468
cmp dword [ebp - 0xc], 0
je 0x46b7bd
mov eax, esi
mov ecx, dword [ebp - 0x10]
mov edx, dword [ebp - 0xc]
call fcn.00404468
jmp 0x46b7c9
mov eax, esi
mov edx, 0x46b914
call fcn.004041b0
mov eax, dword [edi]
call fcn.00402da8
add eax, 0x19f02e
mov dword [ebx], eax
mov dword [ebx], 0x171070
mov dword [ebx], 0x3df5b1
mov dword [0x473c18], 0xc1323e4
mov dword [ebx], 0x2f8151
mov eax, dword [edi]
call fcn.00402da8
add eax, 0x19b90e
mov dword [ebx], eax
call sub.kernel32.dll_GetTickCount_1
add eax, 0x236acc
mov dword [edi], eax
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
push 0x46b82f
lea eax, [ebp - 0x10]
mov edx, 2
call fcn.00404180
ret