Function at 0x414ae0
Capabilities:
Query or enumerate registry value
Set registry value

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x13c
mov eax, dword [0x44e018]
xor eax, ebp
mov dword [ebp - 4], eax
lea eax, [ebp - 0x12c]
mov dword [ebp - 0x12c], 0
push eax
push 0x4464fc
push 0x80000001
call dword [sym.imp.ADVAPI32.dll_RegOpenKeyW]
test eax, eax
jne 0x414b9e
mov dword [ebp - 0x130], eax
lea eax, [ebp - 0x134]
push eax
lea eax, [ebp - 0x130]
mov dword [ebp - 0x138], 4
push eax
lea eax, [ebp - 0x138]
mov dword [ebp - 0x134], 4
push eax
push 0
push 0x448d5c
push dword [ebp - 0x12c]
call dword [sym.imp.ADVAPI32.dll_RegQueryValueExW]
test eax, eax
jne 0x414b92
cmp dword [ebp - 0x130], eax
je 0x414b92
push 4
lea eax, [ebp - 0x13c]
mov dword [ebp - 0x13c], 1
push eax
push 4
push 0
push str.CheckCrashRes
push dword [ebp - 0x12c]
call dword [sym.imp.ADVAPI32.dll_RegSetValueExW]
push dword [ebp - 0x12c]
call dword [sym.imp.ADVAPI32.dll_RegCloseKey]
cmp dword [0x45169c], 0
jne 0x414e6e
push 0x415120
call dword [sym.imp.KERNEL32.dll_SetUnhandledExceptionFilter]
push 0x4163e0
mov dword [0x45169c], eax
call fcn.0041bdde
push 0x4163e0
call fcn.00418301
add esp, 8
xor eax, eax
mov word [0x450e78], ax
push 0x103
push 0x450e78
push eax
call dword [sym.imp.KERNEL32.dll_GetModuleFileNameW]
push 0x5c
push 0x450e78
call fcn.00418572
add esp, 8
test eax, eax
je 0x414c03
xor ecx, ecx
mov word [eax], cx
add eax, 2
push eax
push 0x4516a0
call dword [sym.imp.KERNEL32.dll_lstrcpyW]
sub esp, 0x10
lea ecx, [ebp - 0x128]
push str.Data
push 0x450e78
call fcn.00407d90
lea ecx, [ebp - 0x128]
call fcn.004081f0
test al, al
je 0x414c60
cmp byte [ebp - 0xc], 0
lea eax, [ebp - 0x11c]
cmove eax, dword [ebp - 0x120]
add eax, 4
push eax
push 0x104
push 0x450e78
call fcn.0041fc78
add esp, 0xc
cmp byte [ebp - 0xc], 0
mov dword [ebp - method.t_str.virtual_0], vtable.t_str.0
jne 0x414c89
mov eax, dword [ebp - 0x120]
lea ecx, [ebp - 0x11c]
cmp eax, ecx
je 0x414c89
push eax
call fcn.0041fd4b
add esp, 4
push 0x450e78
push 0x104
push 0x451288
call fcn.0041fc78
push 0x4467c4
push 0x104
push 0x451288
call fcn.0041fcdc
push 0x4516a0
push 0x104
push 0x451288
call fcn.0041fcdc
push 0x451288
push 0x104
push 0x451080
call fcn.0041fc78
push 0x451080
push 0x104
push 0x450a68
call fcn.0041fc78
push 0x451288
push 0x104
push 0x450c70
call fcn.0041fc78
add esp, 0x44
mov ecx, 0x451080
call fcn.00414a30
mov ecx, 0x450a68
call fcn.00414a30
push 0x2e
push 0x451288
call fcn.00418572
add esp, 0xc
test eax, eax
je 0x414d40
push 0x448dc4
add eax, 2
push 4
push eax
call fcn.0041fc78
add esp, 0xc
jmp 0x414d6b
push 0x447050
push 0x104
push 0x451288
call fcn.0041fcdc
push 0x448dc4
push 0x104
push 0x451288
call fcn.0041fcdc
add esp, 0x18
push 0x2e
push 0x450c70
call fcn.00418572
add esp, 8
test eax, eax
je 0x414d93
push 0x448dcc
add eax, 2
push 4
push eax
call fcn.0041fc78
add esp, 0xc
jmp 0x414dbe
push 0x447050
push 0x104
push 0x450c70
call fcn.0041fcdc
push 0x448dcc
push 0x104
push 0x450c70
call fcn.0041fcdc
add esp, 0x18
push 0x2e
push 0x451080
call fcn.00418572
add esp, 8
test eax, eax
je 0x414de6
push 0x448dc4
add eax, 2
push 4
push eax
call fcn.0041fc78
add esp, 0xc
jmp 0x414e11
push 0x447050
push 0x104
push 0x451080
call fcn.0041fcdc
push 0x448dc4
push 0x104
push 0x451080
call fcn.0041fcdc
add esp, 0x18
push 0x2e
push 0x450a68
call fcn.00418572
add esp, 8
test eax, eax
je 0x414e39
push 0x448dcc
add eax, 2
push 4
push eax
call fcn.0041fc78
add esp, 0xc
jmp 0x414e64
push 0x447050
push 0x104
push 0x450a68
call fcn.0041fcdc
push 0x448dcc
push 0x104
push 0x450a68
call fcn.0041fcdc
add esp, 0x18
mov dword [0x450a54], 0
mov ecx, dword [ebp - 4]
mov eax, 0x451cc0
xor ecx, ebp
call fcn.00416855
mov esp, ebp
pop ebp
ret