Function at 0x410763
Capabilities:
Query or enumerate registry value
Set registry value

Disassembly:
push 0x634
mov eax, 0x43c311
call fcn.00423093
xor eax, eax
mov esi, 0x208
push esi
mov word [ebp - 0x634], ax
xor ebx, ebx
lea eax, [ebp - 0x632]
push ebx
push eax
call fcn.00422860
xor eax, eax
push esi
mov word [ebp - 0x21c], ax
lea eax, [ebp - 0x21a]
push ebx
push eax
call fcn.00422860
add esp, 0x18
mov dword [ebp - 0x63c], 0x104
lea eax, [ebp - 0x63c]
xor edi, edi
inc edi
mov esi, ebx
mov ebx, dword [sym.imp.SHLWAPI.dll_SHGetValueW]
push eax
lea eax, [ebp - 0x634]
mov dword [ebp - 0x640], edi
push eax
lea eax, [ebp - 0x640]
push eax
push 0x449b54
push str.SOFTWARE360Game5
push SysReAllocString
call ebx
test eax, eax
jne 0x410828
mov ecx, str.home
lea eax, [ebp - 0x634]
mov dx, word [eax]
cmp dx, word [ecx]
jne 0x410820
test dx, dx
je 0x41081c
mov dx, word [eax + 2]
cmp dx, word [ecx + 2]
jne 0x410820
add eax, 4
add ecx, 4
test dx, dx
jne 0x4107fa
xor eax, eax
jmp 0x410824
sbb eax, eax
or eax, edi
test eax, eax
jne 0x41082a
mov esi, edi
mov edi, dword [sym.imp.SHLWAPI.dll_SHSetValueW]
mov dword [ebp - 0x63c], 0x104
test esi, esi
je 0x4108a2
lea eax, [ebp - 0x63c]
push eax
lea eax, [ebp - 0x21c]
push eax
lea eax, [ebp - 0x640]
push eax
push 0x449b54
push str.SOFTWARE360Game
push SysReAllocString
call ebx
test eax, eax
jne 0x4108a2
lea ecx, [ebp - 0x21c]
xor esi, esi
lea edx, [ecx + 2]
mov ax, word [ecx]
add ecx, 2
cmp ax, si
jne 0x410873
sub ecx, edx
sar ecx, 1
lea eax, [ecx + ecx]
push eax
lea eax, [ebp - 0x21c]
push eax
push 1
push 0x449b54
push str.SOFTWARE360Game5
push SysReAllocString
call edi
jmp 0x410911
cmp word [ebp - 0x634], 0
jne 0x410911
call fcn.004083ea
push eax
lea ecx, [ebp - 0x638]
call fcn.00407e3b
xor eax, eax
push 0x45ec70
mov dword [ebp - 4], eax
lea eax, [ebp - 0x638]
push 0x448d64
push eax
call fcn.0040a280
mov esi, dword [ebp - 0x638]
add esp, 0xc
mov eax, dword [esi - 0xc]
add eax, eax
push eax
push esi
push 1
push 0x449b54
push str.SOFTWARE360Game5
push SysReAllocString
call edi
or dword [ebp - 4], 0xffffffff
lea ecx, [esi - 0x10]
mov dword [0x45e848], 1
call fcn.0040233b
call fcn.004083ea
push eax
lea ecx, [ebp - 0x638]
call fcn.00407e3b
push 0x45ea68
lea eax, [ebp - 0x638]
mov dword [ebp - 4], 1
push 0x448d64
push eax
call fcn.0040a280
add esp, 0xc
lea ecx, [ebp - 0x638]
push str.home
call fcn.00407dac
mov esi, dword [ebp - 0x638]
test eax, eax
jne 0x4109f7
xor eax, eax
push 0x208
push eax
mov word [ebp - 0x428], ax
lea eax, [ebp - 0x426]
push eax
call fcn.00422860
add esp, 0xc
mov dword [ebp - 0x640], 1
lea eax, [ebp - 0x63c]
mov dword [ebp - 0x63c], 0x104
push eax
lea eax, [ebp - 0x428]
push eax
lea eax, [ebp - 0x640]
push eax
push str.cpid
push str.SOFTWARE360Game5
push SysReAllocString
call ebx
test eax, eax
jne 0x4109f7
mov dword [ebp - 0x638], eax
lea ecx, [ebp - 0x428]
lea eax, [ebp - 0x638]
push eax
call fcn.004137c2
test eax, eax
jne 0x4109f7
cmp dword [ebp - 0x638], eax
je 0x4109f7
lea eax, [ebp - 0x428]
push str.home
push eax
call fcn.0041e921
pop ecx
pop ecx
test eax, eax
jne 0x410a11
mov eax, dword [esi - 0xc]
add eax, eax
push eax
push esi
push 1
push str.cpid
push str.SOFTWARE360Game5
push SysReAllocString
call edi
lea ecx, [esi - 0x10]
call fcn.0040233b
call fcn.00423042
ret