Function at 0x45d240
Capabilities:
Contain obfuscated stackstrings
Set registry value

Disassembly:
push ebp
mov ebp, esp
and esp, 0xfffffff8
push 0xffffffffffffffff
push 0x514c58
mov eax, dword fs:[0]
push eax
sub esp, 0x50
push ebx
push esi
push edi
mov eax, dword [0x573be0]
xor eax, esp
push eax
lea eax, [esp + 0x60]
mov dword fs:[0], eax
mov ebx, ecx
mov dword [esp + 0x24], ebx
mov edi, dword [ebp + 8]
push str.keyParent
mov ecx, edi
call fcn.00439d60
cmp eax, 0x57b240
je 0x45e372
push str.keyParent
mov ecx, edi
call fcn.00439d60
cmp byte [eax + 8], 4
jne 0x45e372
push str.keyParent
mov ecx, edi
call fcn.00439d60
mov esi, eax
cmp byte [esi + 8], 4
je 0x45d2cd
push 0x2a9
push str...WebInstallerUtilsjson_value.cpp
push str.type___stringValue
call fcn.004ed740
add esp, 0xc
mov eax, dword [esi]
mov dword [esp + 0x34], eax
mov eax, dword [0x574ba4]
mov ecx, 0x574ba4
call dword [eax + 0xc]
lea esi, [eax + 0x10]
mov dword [esp + 0x1c], esi
mov dword [esp + 0x68], 4
mov eax, dword [esp + 0x34]
test eax, eax
je 0x45d320
test eax, 0xffff0000
jne 0x45d320
movzx eax, ax
mov ecx, eax
mov dword [esp + 0x34], eax
call fcn.0041fcd0
test eax, eax
je 0x45d32e
push dword [esp + 0x34]
lea ecx, [esp + 0x20]
push eax
call fcn.00420bb0
jmp 0x45d32a
push eax
lea ecx, [esp + 0x20]
call fcn.00420650
mov esi, dword [esp + 0x1c]
push str.keyName
mov ecx, edi
mov dword [esp + 0x6c], 5
call fcn.00439d60
cmp eax, 0x57b240
je 0x45e28f
push str.keyName
mov ecx, edi
call fcn.00439d60
cmp byte [eax + 8], 4
jne 0x45e28f
push str.keyName
mov ecx, edi
call fcn.00439d60
cmp byte [eax + 8], 4
mov dword [esp + 0x34], eax
je 0x45d394
push 0x2a9
push str...WebInstallerUtilsjson_value.cpp
push str.type___stringValue
call fcn.004ed740
mov eax, dword [esp + 0x40]
add esp, 0xc
mov eax, dword [eax]
mov dword [esp + 0x34], eax
mov eax, dword [0x574ba4]
mov ecx, 0x574ba4
call dword [eax + 0xc]
add eax, 0x10
mov dword [esp + 0x14], eax
mov byte [esp + 0x68], 0xa
mov eax, dword [esp + 0x34]
test eax, eax
je 0x45d3e4
test eax, 0xffff0000
jne 0x45d3e4
movzx eax, ax
mov ecx, eax
mov dword [esp + 0x34], eax
call fcn.0041fcd0
test eax, eax
je 0x45d3ee
push dword [esp + 0x34]
lea ecx, [esp + 0x18]
push eax
call fcn.00420bb0
jmp 0x45d3ee
push eax
lea ecx, [esp + 0x18]
call fcn.00420650
lea edx, [esp + 0x14]
mov ecx, edx
mov byte [esp + 0x68], 0xb
call fcn.0042c120
push 0x54d17c
push 0x550fd4
lea ecx, [esp + 0x1c]
call fcn.00421ef0
push str.valueName
mov ecx, edi
call fcn.00439d60
cmp eax, 0x57b240
je 0x45e1ac
push str.valueName
mov ecx, edi
call fcn.00439d60
cmp byte [eax + 8], 4
jne 0x45e1ac
push str.valueName
mov ecx, edi
call fcn.00439d60
cmp byte [eax + 8], 4
mov dword [esp + 0x34], eax
je 0x45d46f
push 0x2a9
push str...WebInstallerUtilsjson_value.cpp
push str.type___stringValue
call fcn.004ed740
mov eax, dword [esp + 0x40]
add esp, 0xc
mov eax, dword [eax]
mov dword [esp + 0x34], eax
mov eax, dword [0x574ba4]
mov ecx, 0x574ba4
call dword [eax + 0xc]
add eax, 0x10
mov dword [esp + 0x18], eax
mov byte [esp + 0x68], 0x10
mov eax, dword [esp + 0x34]
test eax, eax
je 0x45d4bf
test eax, 0xffff0000
jne 0x45d4bf
movzx eax, ax
mov ecx, eax
mov dword [esp + 0x34], eax
call fcn.0041fcd0
test eax, eax
je 0x45d4c9
push dword [esp + 0x34]
lea ecx, [esp + 0x1c]
push eax
call fcn.00420bb0
jmp 0x45d4c9
push eax
lea ecx, [esp + 0x1c]
call fcn.00420650
lea edx, [esp + 0x18]
mov ecx, edx
mov byte [esp + 0x68], 0x11
call fcn.0042c120
push str.value
mov ecx, edi
call fcn.00439d60
cmp eax, 0x57b240
jne 0x45d64e
push str.value_error
lea ecx, [esp + 0x28]
call fcn.00420550
push str.writeRegistry
lea ecx, [esp + 0x2c]
mov byte [esp + 0x6c], 0x12
call fcn.004204a0
mov byte [esp + 0x68], 0x13
mov eax, dword [0x574ba4]
mov ecx, 0x574ba4
call dword [eax + 0xc]
lea edi, [eax + 0x10]
mov dword [esp + 0x34], edi
lea eax, [esp + 0x24]
push eax
lea edx, [esp + 0x38]
lea ecx, [esp + 0x34]
mov byte [esp + 0x6c], 0x14
call fcn.00421890
add esp, 4
mov byte [esp + 0x68], 0x15
cmp dword [ebx + 0xc], 0
je 0x45d560
push 2
push eax
lea eax, [esp + 0x30]
push eax
lea eax, [ebx + 8]
push eax
call fcn.004219a0
mov byte [esp + 0x68], 0x14
mov edx, dword [esp + 0x30]
add edx, 0xfffffff0
or ebx, 0xffffffff
lea ecx, [edx + 0xc]
mov eax, ebx
lock xadd dword [ecx], eax
dec eax
test eax, eax
jg 0x45d585
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
add edi, 0xfffffff0
mov byte [esp + 0x68], 0x13
lea eax, [edi + 0xc]
mov ecx, ebx
lock xadd dword [eax], ecx
dec ecx
test ecx, ecx
jg 0x45d5a3
mov ecx, dword [edi]
push edi
mov eax, dword [ecx]
call dword [eax + 4]
mov byte [esp + 0x68], 0x12
mov edx, dword [esp + 0x28]
add edx, 0xfffffff0
mov ecx, ebx
lea eax, [edx + 0xc]
lock xadd dword [eax], ecx
dec ecx
test ecx, ecx
jg 0x45d5c5
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov byte [esp + 0x68], 0x11
mov edx, dword [esp + 0x24]
add edx, 0xfffffff0
mov ecx, ebx
lea eax, [edx + 0xc]
lock xadd dword [eax], ecx
dec ecx
test ecx, ecx
jg 0x45d5e7
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov byte [esp + 0x68], 0xb
mov edx, dword [esp + 0x18]
add edx, 0xfffffff0
mov ecx, ebx
lea eax, [edx + 0xc]
lock xadd dword [eax], ecx
dec ecx
test ecx, ecx
jg 0x45d609
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov byte [esp + 0x68], 5
mov edx, dword [esp + 0x14]
add edx, 0xfffffff0
mov ecx, ebx
lea eax, [edx + 0xc]
lock xadd dword [eax], ecx
dec ecx
test ecx, ecx
jg 0x45d62b
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
add esi, 0xfffffff0
mov dword [esp + 0x68], 0xffffffff
lea eax, [esi + 0xc]
lock xadd dword [eax], ebx
dec ebx
test ebx, ebx
jg 0x45e46d
mov ecx, dword [esi]
push esi
jmp 0x45e468
lea ebx, [esi - 0x10]
push ecx
mov ecx, dword [ebx]
mov dword [esp + 0x38], esp
mov eax, dword [ecx]
mov dword [esp + 0x2c], ebx
call dword [eax + 0x10]
cmp dword [ebx + 0xc], 0
lea edx, [ebx + 0xc]
mov ecx, eax
jl 0x45d67d
cmp ecx, dword [ebx]
jne 0x45d67d
mov esi, ebx
mov eax, 1
lock xadd dword [edx], eax
jmp 0x45d6ba
mov eax, dword [ecx]
push 2
push dword [ebx + 4]
call dword [eax]
mov esi, eax
test esi, esi
jne 0x45d691
call fcn.004208f0
mov eax, dword [ebx + 4]
mov dword [esi + 4], eax
mov ecx, dword [ebx + 4]
lea eax, [ecx*2 + 2]
push eax
lea eax, [ebx + 0x10]
push eax
lea eax, [ecx*2 + 2]
push eax
lea eax, [esi + 0x10]
push eax
call fcn.004ea3ef
add esp, 0x10
mov ecx, dword [esp + 0x38]
lea eax, [esi + 0x10]
mov dword [ecx], eax
call fcn.0042b930
mov esi, eax
add esp, 4
test esi, esi
jne 0x45d827
push str.undefined_keyParent_error
lea ecx, [esp + 0x30]
call fcn.00420550
push str.writeRegistry
lea ecx, [esp + 0x24]
mov byte [esp + 0x6c], 0x16
call fcn.004204a0
mov byte [esp + 0x68], 0x17
mov eax, dword [0x574ba4]
mov ecx, 0x574ba4
call dword [eax + 0xc]
lea esi, [eax + 0x10]
mov dword [esp + 0x34], esi
lea eax, [esp + 0x2c]
push eax
lea edx, [esp + 0x38]
lea ecx, [esp + 0x34]
mov byte [esp + 0x6c], 0x18
call fcn.00421890
add esp, 4
mov ecx, eax
mov byte [esp + 0x68], 0x19
mov eax, dword [esp + 0x24]
cmp dword [eax + 0xc], 0
je 0x45d74b
push 2
push ecx
lea ecx, [esp + 0x28]
push ecx
add eax, 8
push eax
call fcn.004219a0
mov byte [esp + 0x68], 0x18
mov edx, dword [esp + 0x30]
add edx, 0xfffffff0
or ebx, 0xffffffff
lea ecx, [edx + 0xc]
mov eax, ebx
lock xadd dword [ecx], eax
dec eax
test eax, eax
jg 0x45d770
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
add esi, 0xfffffff0
mov byte [esp + 0x68], 0x17
lea eax, [esi + 0xc]
mov ecx, ebx
lock xadd dword [eax], ecx
dec ecx
test ecx, ecx
jg 0x45d78e
mov ecx, dword [esi]
push esi
mov eax, dword [ecx]
call dword [eax + 4]
mov byte [esp + 0x68], 0x16
mov edx, dword [esp + 0x20]
add edx, 0xfffffff0
mov ecx, ebx
lea eax, [edx + 0xc]
lock xadd dword [eax], ecx
dec ecx
test ecx, ecx
jg 0x45d7b0
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov byte [esp + 0x68], 0x11
mov edx, dword [esp + 0x2c]
add edx, 0xfffffff0
mov ecx, ebx
lea eax, [edx + 0xc]
lock xadd dword [eax], ecx
dec ecx
test ecx, ecx
jg 0x45d7d2
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov byte [esp + 0x68], 0xb
mov edx, dword [esp + 0x18]
add edx, 0xfffffff0
mov ecx, ebx
lea eax, [edx + 0xc]
lock xadd dword [eax], ecx
dec ecx
test ecx, ecx
jg 0x45d7f4
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov byte [esp + 0x68], 5
mov edx, dword [esp + 0x14]
add edx, 0xfffffff0
mov ecx, ebx
lea eax, [edx + 0xc]
lock xadd dword [eax], ecx
dec ecx
test ecx, ecx
jg 0x45d816
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov dword [esp + 0x68], 0xffffffff
mov edx, dword [esp + 0x28]
jmp 0x45e459
mov dword [esp + 0x50], 0
mov dword [esp + 0x54], 0
mov dword [esp + 0x58], 0
lea eax, [esp + 0x2c]
push eax
push 0x2001f
mov byte [esp + 0x70], 0x1a
mov ebx, dword [esp + 0x1c]
push 0
push ebx
push esi
mov dword [esp + 0x40], 0
call dword [sym.imp.ADVAPI32.dll_RegOpenKeyExW]
mov dword [esp + 0x20], eax
test eax, eax
je 0x45d8a8
cmp eax, 2
jne 0x45de85
lea eax, [esp + 0x4c]
push eax
lea eax, [esp + 0x30]
push eax
push 0
push 0x2001f
push 0
push 0
push 0
push ebx
push esi
mov dword [esp + 0x50], 0
call dword [sym.imp.ADVAPI32.dll_RegCreateKeyExW]
mov dword [esp + 0x34], eax
test eax, eax
jne 0x45daef
mov eax, dword [esp + 0x2c]
push str.value
mov ecx, edi
mov dword [esp + 0x54], eax
mov dword [esp + 0x28], eax
mov dword [esp + 0x58], 0
call fcn.00439d60
mov al, byte [eax + 8]
mov edi, dword [esp + 0x18]
or esi, 0xffffffff
cmp al, 1
je 0x45d8e2
cmp al, 2
je 0x45d8e2
cmp al, 5
je 0x45d8e2
cmp al, 3
jne 0x45d91b
mov ecx, dword [ebp + 8]
push str.value
call fcn.00439d60
cmp byte [eax + 8], 5
je 0x45d91b
mov ecx, dword [ebp + 8]
push str.value
call fcn.00439d60
mov ecx, eax
call fcn.00439520
mov dword [esp + 0x34], eax
push 4
lea eax, [esp + 0x38]
push eax
push 4
jmp 0x45da7c
mov ecx, dword [ebp + 8]
push str.value
call fcn.00439d60
cmp byte [eax + 8], 4
mov ecx, dword [ebp + 8]
push str.value
jne 0x45da1a
call fcn.00439d60
mov esi, eax
cmp byte [esi + 8], 4
je 0x45d95e
push 0x2a9
push str...WebInstallerUtilsjson_value.cpp
push str.type___stringValue
call fcn.004ed740
add esp, 0xc
mov eax, dword [0x574ba4]
mov esi, dword [esi]
mov ecx, 0x574ba4
call dword [eax + 0xc]
add eax, 0x10
mov dword [esp + 0x20], eax
mov byte [esp + 0x68], 0x37
test esi, esi
je 0x45d9a0
test esi, 0xffff0000
jne 0x45d9a0
movzx esi, si
mov ecx, esi
call fcn.0041fcd0
test eax, eax
je 0x45d9aa
push esi
push eax
lea ecx, [esp + 0x28]
call fcn.00420bb0
jmp 0x45d9aa
push esi
lea ecx, [esp + 0x24]
call fcn.00420650
lea edx, [esp + 0x20]
mov ecx, edx
mov byte [esp + 0x68], 0x38
call fcn.0042c120
mov esi, dword [esp + 0x20]
xor eax, eax
test esi, esi
setne al
test eax, eax
je 0x45d9f7
mov ecx, esi
lea edx, [ecx + 2]
mov edi, edi
mov ax, word [ecx]
add ecx, 2
test ax, ax
jne 0x45d9d0
sub ecx, edx
sar ecx, 1
lea eax, [ecx*2 + 2]
push eax
push esi
push 1
push 0
push edi
push dword [esp + 0x38]
call dword [sym.imp.ADVAPI32.dll_RegSetValueExW]
lea edx, [esi - 0x10]
or esi, 0xffffffff
mov byte [esp + 0x68], 0x1a
lea eax, [edx + 0xc]
mov ecx, esi
lock xadd dword [eax], ecx
dec ecx
test ecx, ecx
jg 0x45da89
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
jmp 0x45da89
call fcn.00439d60
cmp byte [eax + 8], 5
jne 0x45da89
mov ecx, dword [ebp + 8]
push str.value
call fcn.00439d60
mov ecx, eax
call fcn.00439820
test al, al
mov edx, str.true
mov ecx, str.false
cmove edx, ecx
xor eax, eax
test edx, edx
setne al
test eax, eax
je 0x45da89
mov ecx, edx
lea eax, [ecx + 2]
mov dword [esp + 0x34], eax
lea esp, [esp]
mov ax, word [ecx]
add ecx, 2
test ax, ax
jne 0x45da60
sub ecx, dword [esp + 0x34]
sar ecx, 1
lea eax, [ecx*2 + 2]
push eax
push edx
push 1
push 0
push edi
push dword [esp + 0x38]
call dword [sym.imp.ADVAPI32.dll_RegSetValueExW]
mov eax, dword [esp + 0x24]
test eax, eax
je 0x45da98
push eax
call dword [sym.imp.ADVAPI32.dll_RegCloseKey]
add edi, 0xfffffff0
mov byte [esp + 0x68], 0xb
lea eax, [edi + 0xc]
mov ecx, esi
lock xadd dword [eax], ecx
dec ecx
test ecx, ecx
jg 0x45dab6
mov ecx, dword [edi]
push edi
mov eax, dword [ecx]
call dword [eax + 4]
add ebx, 0xfffffff0
mov byte [esp + 0x68], 5
lea eax, [ebx + 0xc]
mov ecx, esi
lock xadd dword [eax], ecx
dec ecx
test ecx, ecx
jg 0x45dad4
mov ecx, dword [ebx]
push ebx
mov eax, dword [ecx]
call dword [eax + 4]
mov dword [esp + 0x68], 0xffffffff
mov edx, dword [esp + 0x28]
lea eax, [edx + 0xc]
lock xadd dword [eax], esi
dec esi
test esi, esi
jmp 0x45e463
push 0x54b724
lea ecx, [esp + 0x34]
call fcn.004204a0
push 0x54b724
lea ecx, [esp + 0x24]
mov byte [esp + 0x6c], 0x1b
call fcn.004204a0
push str.WriteRefCreateKey
lea ecx, [esp + 0x30]
mov byte [esp + 0x6c], 0x1c
call fcn.004204a0
mov byte [esp + 0x68], 0x1d
mov eax, dword [0x574ba4]
mov ecx, 0x574ba4
call dword [eax + 0xc]
lea esi, [eax + 0x10]
mov dword [esp + 0x38], esi
lea eax, [esp + 0x2c]
push eax
lea edx, [esp + 0x3c]
lea ecx, [esp + 0x50]
mov byte [esp + 0x6c], 0x1e
call fcn.00421890
add esp, 4
lea ecx, [esp + 0x20]
push ecx
mov edx, eax
lea ecx, [esp + 0x4c]
mov byte [esp + 0x6c], 0x1f
call fcn.00421890
add esp, 4
lea ecx, [esp + 0x1c]
push ecx
mov edx, eax
lea ecx, [esp + 0x48]
mov byte [esp + 0x6c], 0x20
call fcn.00421890
add esp, 4
lea ecx, [esp + 0x30]
push ecx
mov edx, eax
lea ecx, [esp + 0x44]
mov byte [esp + 0x6c], 0x21
call fcn.00421890
add esp, 4
lea ecx, [esp + 0x14]
push ecx
mov edx, eax
lea ecx, [esp + 0x40]
mov byte [esp + 0x6c], 0x22
call fcn.00421890
add esp, 4
mov byte [esp + 0x68], 0x23
mov edx, dword [esp + 0x34]
mov ecx, eax
call fcn.00422960
mov byte [esp + 0x68], 0x22
mov edx, dword [esp + 0x3c]
add edx, 0xfffffff0
or edi, 0xffffffff
lea ecx, [edx + 0xc]
mov eax, edi
lock xadd dword [ecx], eax
dec eax
test eax, eax
jg 0x45dbeb
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov byte [esp + 0x68], 0x21
mov edx, dword [esp + 0x40]
add edx, 0xfffffff0
mov ecx, edi
lea eax, [edx + 0xc]
lock xadd dword [eax], ecx
dec ecx
test ecx, ecx
jg 0x45dc0d
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov byte [esp + 0x68], 0x20
mov edx, dword [esp + 0x44]
add edx, 0xfffffff0
mov ecx, edi
lea eax, [edx + 0xc]
lock xadd dword [eax], ecx
dec ecx
test ecx, ecx
jg 0x45dc2f
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov byte [esp + 0x68], 0x1f
mov edx, dword [esp + 0x48]
add edx, 0xfffffff0
mov ecx, edi
lea eax, [edx + 0xc]
lock xadd dword [eax], ecx
dec ecx
test ecx, ecx
jg 0x45dc51
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov byte [esp + 0x68], 0x1e
mov edx, dword [esp + 0x4c]
add edx, 0xfffffff0
mov ecx, edi
lea eax, [edx + 0xc]
lock xadd dword [eax], ecx
dec ecx
test ecx, ecx
jg 0x45dc73
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
add esi, 0xfffffff0
mov byte [esp + 0x68], 0x1d
lea eax, [esi + 0xc]
mov ecx, edi
lock xadd dword [eax], ecx
dec ecx
test ecx, ecx
jg 0x45dc91
mov ecx, dword [esi]
push esi
mov eax, dword [ecx]
call dword [eax + 4]
mov byte [esp + 0x68], 0x1c
mov edx, dword [esp + 0x2c]
add edx, 0xfffffff0
mov ecx, edi
lea eax, [edx + 0xc]
lock xadd dword [eax], ecx
dec ecx
test ecx, ecx
jg 0x45dcb3
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov byte [esp + 0x68], 0x1b
mov edx, dword [esp + 0x20]
add edx, 0xfffffff0
mov ecx, edi
lea eax, [edx + 0xc]
lock xadd dword [eax], ecx
dec ecx
test ecx, ecx
jg 0x45dcd5
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov byte [esp + 0x68], 0x1a
mov edx, dword [esp + 0x30]
add edx, 0xfffffff0
mov ecx, edi
lea eax, [edx + 0xc]
lock xadd dword [eax], ecx
dec ecx
test ecx, ecx
jg 0x45dcf7
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
push str.Create_error
lea ecx, [esp + 0x30]
call fcn.00420550
push str.writeRegistry
lea ecx, [esp + 0x34]
mov byte [esp + 0x6c], 0x24
call fcn.004204a0
mov byte [esp + 0x68], 0x25
mov eax, dword [0x574ba4]
mov ecx, 0x574ba4
call dword [eax + 0xc]
lea esi, [eax + 0x10]
mov dword [esp + 0x4c], esi
lea eax, [esp + 0x2c]
push eax
lea edx, [esp + 0x50]
lea ecx, [esp + 0x48]
mov byte [esp + 0x6c], 0x26
call fcn.00421890
add esp, 4
mov byte [esp + 0x68], 0x27
push dword [esp + 0x34]
mov edx, eax
lea ecx, [esp + 0x4c]
call fcn.00421800
add esp, 4
mov ecx, eax
mov byte [esp + 0x68], 0x28
mov eax, dword [esp + 0x24]
cmp dword [eax + 0xc], 0
je 0x45dd84
push 2
push ecx
lea ecx, [esp + 0x38]
push ecx
add eax, 8
push eax
call fcn.004219a0
mov byte [esp + 0x68], 0x27
mov edx, dword [esp + 0x48]
add edx, 0xfffffff0
mov ecx, edi
lea eax, [edx + 0xc]
lock xadd dword [eax], ecx
dec ecx
test ecx, ecx
jg 0x45dda6
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov byte [esp + 0x68], 0x26
mov edx, dword [esp + 0x44]
add edx, 0xfffffff0
mov ecx, edi
lea eax, [edx + 0xc]
lock xadd dword [eax], ecx
dec ecx
test ecx, ecx
jg 0x45ddc8
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
add esi, 0xfffffff0
mov byte [esp + 0x68], 0x25
lea eax, [esi + 0xc]
mov ecx, edi
lock xadd dword [eax], ecx
dec ecx
test ecx, ecx
jg 0x45dde6
mov ecx, dword [esi]
push esi
mov eax, dword [ecx]
call dword [eax + 4]
mov byte [esp + 0x68], 0x24
mov edx, dword [esp + 0x30]
add edx, 0xfffffff0
mov ecx, edi
lea eax, [edx + 0xc]
lock xadd dword [eax], ecx
dec ecx
test ecx, ecx
jg 0x45de08
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov byte [esp + 0x68], 0x1a
mov edx, dword [esp + 0x2c]
add edx, 0xfffffff0
mov ecx, edi
lea eax, [edx + 0xc]
lock xadd dword [eax], ecx
dec ecx
test ecx, ecx
jg 0x45de2a
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov byte [esp + 0x68], 0xb
mov edx, dword [esp + 0x18]
add edx, 0xfffffff0
mov ecx, edi
lea eax, [edx + 0xc]
lock xadd dword [eax], ecx
dec ecx
test ecx, ecx
jg 0x45de4c
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
add ebx, 0xfffffff0
mov byte [esp + 0x68], 5
lea eax, [ebx + 0xc]
mov ecx, edi
lock xadd dword [eax], ecx
dec ecx
test ecx, ecx
jg 0x45de6a
mov ecx, dword [ebx]
push ebx
mov eax, dword [ecx]
call dword [eax + 4]
mov dword [esp + 0x68], 0xffffffff
mov edx, dword [esp + 0x28]
lea eax, [edx + 0xc]
lock xadd dword [eax], edi
dec edi
test edi, edi
jmp 0x45e463
push 0x54b724
lea ecx, [esp + 0x30]
call fcn.004204a0
push 0x54b724
lea ecx, [esp + 0x34]
mov byte [esp + 0x6c], 0x29
call fcn.004204a0
push str.WriteRegOpenKey
lea ecx, [esp + 0x38]
mov byte [esp + 0x6c], 0x2a
call fcn.004204a0
mov byte [esp + 0x68], 0x2b
mov eax, dword [0x574ba4]
mov ecx, 0x574ba4
call dword [eax + 0xc]
lea esi, [eax + 0x10]
mov dword [esp + 0x4c], esi
lea eax, [esp + 0x34]
push eax
lea edx, [esp + 0x50]
lea ecx, [esp + 0x3c]
mov byte [esp + 0x6c], 0x2c
call fcn.00421890
add esp, 4
lea ecx, [esp + 0x30]
push ecx
mov edx, eax
lea ecx, [esp + 0x40]
mov byte [esp + 0x6c], 0x2d
call fcn.00421890
add esp, 4
lea ecx, [esp + 0x1c]
push ecx
mov edx, eax
lea ecx, [esp + 0x44]
mov byte [esp + 0x6c], 0x2e
call fcn.00421890
add esp, 4
lea ecx, [esp + 0x2c]
push ecx
mov edx, eax
lea ecx, [esp + 0x48]
mov byte [esp + 0x6c], 0x2f
call fcn.00421890
add esp, 4
lea ecx, [esp + 0x14]
push ecx
mov edx, eax
lea ecx, [esp + 0x4c]
mov byte [esp + 0x6c], 0x30
call fcn.00421890
add esp, 4
mov byte [esp + 0x68], 0x31
mov edx, dword [esp + 0x20]
mov ecx, eax
call fcn.00422960
mov byte [esp + 0x68], 0x30
mov edx, dword [esp + 0x48]
add edx, 0xfffffff0
or edi, 0xffffffff
lea ecx, [edx + 0xc]
mov eax, edi
lock xadd dword [ecx], eax
dec eax
test eax, eax
jg 0x45df81
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov byte [esp + 0x68], 0x2f
mov edx, dword [esp + 0x44]
add edx, 0xfffffff0
mov ecx, edi
lea eax, [edx + 0xc]
lock xadd dword [eax], ecx
dec ecx
test ecx, ecx
jg 0x45dfa3
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov byte [esp + 0x68], 0x2e
mov edx, dword [esp + 0x40]
add edx, 0xfffffff0
mov ecx, edi
lea eax, [edx + 0xc]
lock xadd dword [eax], ecx
dec ecx
test ecx, ecx
jg 0x45dfc5
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov byte [esp + 0x68], 0x2d
mov edx, dword [esp + 0x3c]
add edx, 0xfffffff0
mov ecx, edi
lea eax, [edx + 0xc]
lock xadd dword [eax], ecx
dec ecx
test ecx, ecx
jg 0x45dfe7
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov byte [esp + 0x68], 0x2c
mov edx, dword [esp + 0x38]
add edx, 0xfffffff0
mov ecx, edi
lea eax, [edx + 0xc]
lock xadd dword [eax], ecx
dec ecx
test ecx, ecx
jg 0x45e009
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
add esi, 0xfffffff0
mov byte [esp + 0x68], 0x2b
lea eax, [esi + 0xc]
mov ecx, edi
lock xadd dword [eax], ecx
dec ecx
test ecx, ecx
jg 0x45e027
mov ecx, dword [esi]
push esi
mov eax, dword [ecx]
call dword [eax + 4]
mov byte [esp + 0x68], 0x2a
mov edx, dword [esp + 0x34]
add edx, 0xfffffff0
mov ecx, edi
lea eax, [edx + 0xc]
lock xadd dword [eax], ecx
dec ecx
test ecx, ecx
jg 0x45e049
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov byte [esp + 0x68], 0x29
mov edx, dword [esp + 0x30]
add edx, 0xfffffff0
mov ecx, edi
lea eax, [edx + 0xc]
lock xadd dword [eax], ecx
dec ecx
test ecx, ecx
jg 0x45e06b
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov byte [esp + 0x68], 0x1a
mov edx, dword [esp + 0x2c]
add edx, 0xfffffff0
mov ecx, edi
lea eax, [edx + 0xc]
lock xadd dword [eax], ecx
dec ecx
test ecx, ecx
jg 0x45e08d
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
push str.Open_error
lea ecx, [esp + 0x34]
call fcn.00420550
push str.writeRegistry
lea ecx, [esp + 0x38]
mov byte [esp + 0x6c], 0x32
call fcn.004204a0
mov byte [esp + 0x68], 0x33
mov eax, dword [0x574ba4]
mov ecx, 0x574ba4
call dword [eax + 0xc]
lea esi, [eax + 0x10]
mov dword [esp + 0x4c], esi
lea eax, [esp + 0x30]
push eax
lea edx, [esp + 0x50]
lea ecx, [esp + 0x48]
mov byte [esp + 0x6c], 0x34
call fcn.00421890
add esp, 4
mov byte [esp + 0x68], 0x35
push dword [esp + 0x20]
mov edx, eax
lea ecx, [esp + 0x4c]
call fcn.00421800
add esp, 4
mov ecx, eax
mov byte [esp + 0x68], 0x36
mov eax, dword [esp + 0x24]
cmp dword [eax + 0xc], 0
je 0x45e11a
push 2
push ecx
lea ecx, [esp + 0x3c]
push ecx
add eax, 8
push eax
call fcn.004219a0
mov byte [esp + 0x68], 0x35
mov edx, dword [esp + 0x48]
add edx, 0xfffffff0
mov ecx, edi
lea eax, [edx + 0xc]
lock xadd dword [eax], ecx
dec ecx
test ecx, ecx
jg 0x45e13c
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov byte [esp + 0x68], 0x34
mov edx, dword [esp + 0x44]
add edx, 0xfffffff0
mov ecx, edi
lea eax, [edx + 0xc]
lock xadd dword [eax], ecx
dec ecx
test ecx, ecx
jg 0x45e15e
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
add esi, 0xfffffff0
mov byte [esp + 0x68], 0x33
lea eax, [esi + 0xc]
mov ecx, edi
lock xadd dword [eax], ecx
dec ecx
test ecx, ecx
jg 0x45e17c
mov ecx, dword [esi]
push esi
mov eax, dword [ecx]
call dword [eax + 4]
mov byte [esp + 0x68], 0x32
mov edx, dword [esp + 0x34]
add edx, 0xfffffff0
mov ecx, edi
lea eax, [edx + 0xc]
lock xadd dword [eax], ecx
dec ecx
test ecx, ecx
jg 0x45e19e
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov byte [esp + 0x68], 0x1a
mov edx, dword [esp + 0x30]
jmp 0x45de11
push str.valueName_error
lea ecx, [esp + 0x34]
call fcn.00420550
push str.writeRegistry
lea ecx, [esp + 0x38]
mov byte [esp + 0x6c], 0xc
call fcn.004204a0
mov byte [esp + 0x68], 0xd
mov eax, dword [0x574ba4]
mov ecx, 0x574ba4
call dword [eax + 0xc]
lea edi, [eax + 0x10]
mov dword [esp + 0x4c], edi
lea eax, [esp + 0x30]
push eax
lea edx, [esp + 0x50]
lea ecx, [esp + 0x4c]
mov byte [esp + 0x6c], 0xe
call fcn.00421890
add esp, 4
mov byte [esp + 0x68], 0xf
cmp dword [ebx + 0xc], 0
je 0x45e21c
push 2
push eax
lea eax, [esp + 0x3c]
push eax
lea eax, [ebx + 8]
push eax
call fcn.004219a0
mov byte [esp + 0x68], 0xe
mov edx, dword [esp + 0x48]
add edx, 0xfffffff0
or ebx, 0xffffffff
lea ecx, [edx + 0xc]
mov eax, ebx
lock xadd dword [ecx], eax
dec eax
test eax, eax
jg 0x45e241
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
add edi, 0xfffffff0
mov byte [esp + 0x68], 0xd
lea eax, [edi + 0xc]
mov ecx, ebx
lock xadd dword [eax], ecx
dec ecx
test ecx, ecx
jg 0x45e25f
mov ecx, dword [edi]
push edi
mov eax, dword [ecx]
call dword [eax + 4]
mov byte [esp + 0x68], 0xc
mov edx, dword [esp + 0x34]
add edx, 0xfffffff0
mov ecx, ebx
lea eax, [edx + 0xc]
lock xadd dword [eax], ecx
dec ecx
test ecx, ecx
jg 0x45e281
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov byte [esp + 0x68], 0xb
mov edx, dword [esp + 0x30]
jmp 0x45d5f0
push str.keyName_error
lea ecx, [esp + 0x34]
call fcn.00420550
push str.writeRegistry
lea ecx, [esp + 0x38]
mov byte [esp + 0x6c], 6
call fcn.004204a0
mov byte [esp + 0x68], 7
mov eax, dword [0x574ba4]
mov ecx, 0x574ba4
call dword [eax + 0xc]
lea edi, [eax + 0x10]
mov dword [esp + 0x4c], edi
lea eax, [esp + 0x30]
push eax
lea edx, [esp + 0x50]
lea ecx, [esp + 0x4c]
mov byte [esp + 0x6c], 8
call fcn.00421890
add esp, 4
mov byte [esp + 0x68], 9
cmp dword [ebx + 0xc], 0
je 0x45e2ff
push 2
push eax
lea eax, [esp + 0x3c]
push eax
lea eax, [ebx + 8]
push eax
call fcn.004219a0
mov byte [esp + 0x68], 8
mov edx, dword [esp + 0x48]
add edx, 0xfffffff0
or ebx, 0xffffffff
lea ecx, [edx + 0xc]
mov eax, ebx
lock xadd dword [ecx], eax
dec eax
test eax, eax
jg 0x45e324
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
add edi, 0xfffffff0
mov byte [esp + 0x68], 7
lea eax, [edi + 0xc]
mov ecx, ebx
lock xadd dword [eax], ecx
dec ecx
test ecx, ecx
jg 0x45e342
mov ecx, dword [edi]
push edi
mov eax, dword [ecx]
call dword [eax + 4]
mov byte [esp + 0x68], 6
mov edx, dword [esp + 0x34]
add edx, 0xfffffff0
mov ecx, ebx
lea eax, [edx + 0xc]
lock xadd dword [eax], ecx
dec ecx
test ecx, ecx
jg 0x45e364
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov byte [esp + 0x68], 5
mov edx, dword [esp + 0x30]
jmp 0x45d612
push str.keyParent_error
lea ecx, [esp + 0x34]
call fcn.00420550
push str.writeRegistry
lea ecx, [esp + 0x38]
mov dword [esp + 0x6c], 0
call fcn.004204a0
mov byte [esp + 0x68], 1
mov eax, dword [0x574ba4]
mov ecx, 0x574ba4
call dword [eax + 0xc]
lea esi, [eax + 0x10]
mov dword [esp + 0x4c], esi
lea eax, [esp + 0x30]
push eax
lea edx, [esp + 0x50]
lea ecx, [esp + 0x4c]
mov byte [esp + 0x6c], 2
call fcn.00421890
add esp, 4
mov byte [esp + 0x68], 3
cmp dword [ebx + 0xc], 0
je 0x45e3e5
push 2
push eax
lea eax, [esp + 0x3c]
push eax
lea eax, [ebx + 8]
push eax
call fcn.004219a0
mov byte [esp + 0x68], 2
mov edx, dword [esp + 0x48]
add edx, 0xfffffff0
or ebx, 0xffffffff
lea ecx, [edx + 0xc]
mov eax, ebx
lock xadd dword [ecx], eax
dec eax
test eax, eax
jg 0x45e40a
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
add esi, 0xfffffff0
mov byte [esp + 0x68], 1
lea eax, [esi + 0xc]
mov ecx, ebx
lock xadd dword [eax], ecx
dec ecx
test ecx, ecx
jg 0x45e428
mov ecx, dword [esi]
push esi
mov eax, dword [ecx]
call dword [eax + 4]
mov byte [esp + 0x68], 0
mov edx, dword [esp + 0x34]
add edx, 0xfffffff0
mov ecx, ebx
lea eax, [edx + 0xc]
lock xadd dword [eax], ecx
dec ecx
test ecx, ecx
jg 0x45e44a
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov dword [esp + 0x68], 0xffffffff
mov edx, dword [esp + 0x30]
add edx, 0xfffffff0
lea eax, [edx + 0xc]
lock xadd dword [eax], ebx
dec ebx
test ebx, ebx
jg 0x45e46d
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov ecx, dword [esp + 0x60]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 4