Function at 0x459130
Capabilities:
Query or enumerate registry key
Query or enumerate registry value

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x4e8
mov eax, dword [0x533014]
xor eax, ebp
mov dword [ebp - 8], eax
movups xmm0, xmmword [0x513dc8]
mov eax, dword [ebp + 8]
push ebx
movups xmmword [ebp - 0x4b4], xmm0
push esi
movups xmm0, xmmword [0x513db8]
push edi
mov dword [ebp - 0x4e0], edx
lea ebx, [ebp - 0x4b4]
movups xmmword [ebp - 0x4a4], xmm0
mov dword [ebp - 0x4c8], ecx
mov edi, 0x80004005
movups xmm0, xmmword [0x513da8]
mov dword [ebp - 0x4dc], eax
xor esi, esi
mov dword [ebp - 0x4cc], 0
movups xmmword [ebp - 0x494], xmm0
movups xmm0, xmmword [0x513d98]
movups xmmword [ebp - 0x484], xmm0
nop word [eax + eax]
cmp esi, 4
jae 0x459209
mov eax, dword [ecx]
lea edx, [ebp - 0x4cc]
push edx
push ebx
push ecx
call dword [eax]
mov ecx, dword [ebp - 0x4c8]
mov edi, eax
inc esi
add ebx, 0x10
test edi, edi
jne 0x4591b0
push dword [ebp - 0x4dc]
mov eax, dword [ebp - 0x4cc]
push dword [ebp - 0x4e0]
push 1
mov ecx, dword [eax]
push eax
call dword [ecx + 0x20]
mov edi, eax
mov eax, dword [ebp - 0x4cc]
push eax
mov ecx, dword [eax]
call dword [ecx + 8]
mov ecx, dword [ebp - 0x4c8]
test edi, edi
jne 0x4591b0
jmp 0x45943b
test edi, edi
je 0x45943b
push 0x200
lea eax, [ebp - 0x274]
mov dword [ebp - 0x4d4], 0
push 0
push eax
call fcn.00487ab0
movups xmm0, xmmword [str.Interface]
mov eax, dword [0x513d64]
add esp, 0xc
mov dword [ebp - 0xc], eax
lea eax, [ebp - 0x4d4]
movups xmmword [ebp - 0x1c], xmm0
movups xmm0, xmmword [str.IApplicationAssociationRegistrationInternal]
push eax
push 0x20019
movups xmmword [ebp - 0x74], xmm0
push 0
movups xmm0, xmmword [0x5139c0]
lea eax, [ebp - 0x1c]
push eax
movups xmmword [ebp - 0x64], xmm0
push 0x80000000
movups xmm0, xmmword [0x5139d0]
movups xmmword [ebp - 0x54], xmm0
movups xmm0, xmmword [0x5139e0]
movups xmmword [ebp - 0x44], xmm0
movups xmm0, xmmword [0x5139f0]
movups xmmword [ebp - 0x34], xmm0
movq xmm0, qword [0x513a00]
movq qword [ebp - 0x24], xmm0
call dword [sym.imp.ADVAPI32.dll_RegOpenKeyExW]
test eax, eax
jne 0x45943b
mov ebx, dword [ebp - 0x4c8]
xor esi, esi
push 0
push 0
push 0
push 0
lea eax, [ebp - 0x4e4]
mov dword [ebp - 0x4e4], 0x100
push eax
lea eax, [ebp - 0x274]
push eax
push esi
push dword [ebp - 0x4d4]
call dword [sym.imp.ADVAPI32.dll_RegEnumKeyExW]
inc esi
mov dword [ebp - 0x4c8], eax
mov dword [ebp - 0x4d0], esi
test eax, eax
jne 0x459420
mov dword [ebp - 0x4d8], eax
lea eax, [ebp - 0x4d8]
push eax
push 0x20019
push 0
lea eax, [ebp - 0x274]
push eax
push dword [ebp - 0x4d4]
call dword [sym.imp.ADVAPI32.dll_RegOpenKeyExW]
test eax, eax
jne 0x45941a
push 0x200
push eax
lea eax, [ebp - 0x474]
push eax
call fcn.00487ab0
add esp, 0xc
mov dword [ebp - 0x4e8], 0x200
lea eax, [ebp - 0x4e8]
push eax
lea eax, [ebp - 0x474]
push eax
push 0
push 0
push 0
push dword [ebp - 0x4d8]
call dword [sym.imp.ADVAPI32.dll_RegQueryValueExW]
push dword [ebp - 0x4d8]
mov esi, eax
call dword [sym.imp.ADVAPI32.dll_RegCloseKey]
test esi, esi
jne 0x459414
lea eax, [ebp - 0x74]
push eax
lea eax, [ebp - 0x474]
push eax
call dword [sym.imp.KERNEL32.dll_lstrcmpiW]
test eax, eax
jne 0x459414
mov dword [ebp - 0x4c4], eax
xorps xmm0, xmm0
mov dword [ebp - 0x4b8], eax
lea eax, [ebp - 0x4c4]
push eax
lea eax, [ebp - 0x274]
movq qword [ebp - 0x4c0], xmm0
push eax
call dword [sym.imp.ole32.dll_IIDFromString]
mov esi, dword [ebp - 0x4d0]
mov edi, eax
test edi, edi
jne 0x4592b5
mov eax, dword [ebx]
lea ecx, [ebp - 0x4cc]
push ecx
lea ecx, [ebp - 0x4c4]
push ecx
push ebx
call dword [eax]
mov edi, eax
test edi, edi
jne 0x4592b5
push dword [ebp - 0x4dc]
mov eax, dword [ebp - 0x4cc]
push dword [ebp - 0x4e0]
push 1
mov ecx, dword [eax]
push eax
call dword [ecx + 0x20]
mov edi, eax
mov eax, dword [ebp - 0x4cc]
push eax
mov ecx, dword [eax]
call dword [ecx + 8]
mov esi, dword [ebp - 0x4d0]
mov eax, dword [ebp - 0x4c8]
test edi, edi
je 0x45942f
cmp eax, 0x103
jne 0x4592b5
push dword [ebp - 0x4d4]
call dword [sym.imp.ADVAPI32.dll_RegCloseKey]
mov ecx, dword [ebp - 8]
mov eax, edi
pop edi
pop esi
xor ecx, ebp
pop ebx
call fcn.0046370d
mov esp, ebp
pop ebp
ret 4