Function at 0x45f420
Capabilities:
Query or enumerate registry key

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x5dc918
mov eax, dword fs:[0]
push eax
sub esp, 0x54
push ebx
push esi
push edi
mov eax, dword [0x65bfd4]
xor eax, ebp
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov dword [ebp - 0x28], ecx
mov dword [ebp - 0x5c], 0
mov dword [ebp - 0x58], 0
mov dword [ebp - 0x54], 0
mov eax, dword [ebp + 0xc]
lea ecx, [ebp - 0x5c]
push 0x20019
mov dword [ebp - 4], 0
push dword [eax]
push dword [ebp + 8]
call fcn.0042fb10
test eax, eax
jne 0x45fe9c
xor esi, esi
mov dword [ebp - 0x34], 0x3e8
mov dword [ebp - 0x14], esi
mov dword [ebp - 0x40], esi
push 0x7d2
mov byte [ebp - 4], 1
call fcn.005b5958
mov edi, eax
add esp, 4
mov dword [ebp - 0x40], edi
mov ebx, dword [sym.imp.KERNEL32.dll_HeapFree]
nop
lea eax, [ebp - 0x50]
push eax
push 0
push 0
push 0
lea eax, [ebp - 0x34]
push eax
push edi
push esi
mov esi, dword [ebp - 0x5c]
push esi
call dword [sym.imp.ADVAPI32.dll_RegEnumKeyExW]
inc dword [ebp - 0x14]
test eax, eax
jne 0x45fe55
mov eax, dword [ebp - 0x34]
xor ecx, ecx
mov word [edi + eax*2], cx
mov eax, dword [ebp + 0xc]
mov eax, dword [eax]
mov ecx, dword [eax - 0x10]
lea esi, [eax - 0x10]
mov dword [ebp - 0x44], eax
mov eax, dword [ecx]
cmp eax, vtable.ATL::CAtlStringMgr.0
jne 0x45fed3
cmp dword [esi + 0xc], 0
lea eax, [esi + 0xc]
jl 0x45f50b
cmp ecx, dword [esi]
jne 0x45f50b
lock inc dword [eax]
jmp 0x45f53f
mov eax, dword [ecx]
lea ebx, [esi + 4]
push 2
push dword [ebx]
call dword [eax]
mov esi, eax
test esi, esi
je 0x45ff96
mov ecx, dword [ebx]
lea eax, [esi + 0x10]
mov dword [esi + 4], ecx
mov ecx, dword [ebx]
inc ecx
push ecx
push dword [ebp - 0x44]
push ecx
push eax
call fcn.004021b4
mov ebx, dword [sym.imp.KERNEL32.dll_HeapFree]
add esp, 0x10
lea eax, [esi + 0x10]
mov dword [ebp - 0x10], eax
mov byte [ebp - 4], 3
mov edx, dword [eax - 0x10]
test edx, edx
je 0x45f561
mov eax, dword [edx]
cmp eax, vtable.ATL::CAtlStringMgr.0
jne 0x45fedd
test edx, edx
jne 0x45f57d
call fcn.0040cb60
mov edx, eax
mov eax, dword [edx]
cmp eax, vtable.ATL::CAtlStringMgr.0
jne 0x45fee9
test edx, edx
je 0x45ff8c
mov ecx, dword [edx]
mov eax, dword [ecx + 0xc]
cmp ecx, vtable.ATL::CAtlStringMgr.0
jne 0x45fef5
lock inc dword [edx + 0x14]
lea eax, [edx + 8]
add eax, 0x10
mov dword [ebp - 0x30], eax
mov eax, 0x62f99c
mov byte [ebp - 4], 4
lea ecx, [ebp - 0x30]
test eax, 0xffff0000
jne 0x45f5b9
movzx eax, ax
push eax
call fcn.0040d3d0
jmp 0x45f5c3
push 0x62f99c
call fcn.0040ecc0
mov byte [ebp - 4], 5
lea ecx, [ebp - 0x10]
mov esi, dword [ebp - 0x30]
push dword [esi - 0xc]
push esi
call fcn.00404878
mov byte [ebp - 4], 3
add esi, 0xfffffff0
or eax, 0xffffffff
lock xadd dword [esi + 0xc], eax
dec eax
test eax, eax
jg 0x45f617
mov ecx, dword [esi]
push esi
mov eax, dword [ecx]
mov edx, dword [eax + 4]
cmp eax, vtable.ATL::CAtlStringMgr.0
jne 0x45fefe
mov ecx, dword [ecx + 4]
mov eax, dword [ecx]
mov edx, dword [eax + 4]
cmp eax, vtable.ATL::CWin32Heap.0
jne 0x45fefe
push 0
push dword [ecx + 4]
call ebx
test edi, edi
jne 0x45f61f
xor ecx, ecx
jmp 0x45f633
mov ecx, edi
lea edx, [ecx + 2]
mov ax, word [ecx]
add ecx, 2
test ax, ax
jne 0x45f624
sub ecx, edx
sar ecx, 1
push ecx
push edi
lea ecx, [ebp - 0x10]
call fcn.00404878
call fcn.0040cb60
mov ecx, eax
test ecx, ecx
je 0x45ff8c
mov eax, dword [ecx]
mov edx, dword [eax + 0xc]
cmp eax, vtable.ATL::CAtlStringMgr.0
jne 0x45ff05
lock inc dword [ecx + 0x14]
lea eax, [ecx + 8]
add eax, 0x10
mov dword [ebp - 0x2c], eax
mov byte [ebp - 4], 6
call fcn.0040cb60
mov ecx, eax
test ecx, ecx
je 0x45ff8c
mov eax, dword [ecx]
mov edx, dword [eax + 0xc]
cmp eax, vtable.ATL::CAtlStringMgr.0
jne 0x45ff0c
lock inc dword [ecx + 0x14]
lea eax, [ecx + 8]
lea esi, [eax + 0x10]
mov dword [ebp - 0x18], esi
mov ecx, 0x62f9a0
mov byte [ebp - 4], 7
test ecx, 0xffff0000
jne 0x45f6be
movzx eax, cx
lea ecx, [ebp - 0x18]
push eax
call fcn.0040d3d0
mov esi, dword [ebp - 0x18]
jmp 0x45f75b
mov eax, dword [esi - 0xc]
mov ebx, ecx
mov dword [ebp - 0x44], eax
sub ebx, esi
mov eax, dword [esi - 8]
mov ecx, 1
sub ecx, dword [esi - 4]
sub eax, 0xb
sar ebx, 1
or eax, ecx
jge 0x45f6e9
push 0xb
lea ecx, [ebp - 0x18]
call fcn.00401fd8
mov esi, dword [ebp - 0x18]
cmp ebx, dword [ebp - 0x44]
ja 0x45f731
mov eax, dword [esi - 8]
lea ecx, [esi + ebx*2]
test ecx, ecx
jne 0x45f70a
call fcn.005b0782
mov dword [eax], 0x16
call fcn.005b06a9
jmp 0x45f744
add eax, eax
cmp eax, 0x16
jae 0x45f723
call fcn.005b0782
mov dword [eax], 0x22
call fcn.005b06a9
jmp 0x45f744
push 0x16
push ecx
push esi
call fcn.005ad520
add esp, 0xc
jmp 0x45f744
push 0xb
push 0x62f9a0
push dword [esi - 8]
push esi
call fcn.004021b4
add esp, 0x10
cmp dword [esi - 8], 0xb
jl 0x45ff82
xor eax, eax
mov dword [esi - 0xc], 0xb
mov word [esi + 0x16], ax
mov ecx, dword [ebp + 8]
lea eax, [ebp - 0x2c]
push eax
lea eax, [ebp - 0x18]
mov byte [ebp - 4], 8
push eax
lea edx, [ebp - 0x10]
call fcn.0045eff0
add esp, 8
mov byte [ebp - 4], 6
add esi, 0xfffffff0
or eax, 0xffffffff
lock xadd dword [esi + 0xc], eax
dec eax
test eax, eax
jg 0x45f7ba
mov ecx, dword [esi]
push esi
mov eax, dword [ecx]
mov edx, dword [eax + 4]
cmp eax, vtable.ATL::CAtlStringMgr.0
jne 0x45ff13
mov ecx, dword [ecx + 4]
mov eax, dword [ecx]
mov edx, dword [eax + 4]
cmp eax, vtable.ATL::CWin32Heap.0
jne 0x45ff13
push 0
push dword [ecx + 4]
call dword [sym.imp.KERNEL32.dll_HeapFree]
call fcn.0040cb60
mov ecx, eax
test ecx, ecx
je 0x45ff8c
mov eax, dword [ecx]
mov edx, dword [eax + 0xc]
cmp eax, vtable.ATL::CAtlStringMgr.0
jne 0x45ff1a
lock inc dword [ecx + 0x14]
lea eax, [ecx + 8]
add eax, 0x10
mov dword [ebp - 0x3c], eax
mov byte [ebp - 4], 9
call fcn.0040cb60
mov ecx, eax
test ecx, ecx
je 0x45ff8c
mov eax, dword [ecx]
mov edx, dword [eax + 0xc]
cmp eax, vtable.ATL::CAtlStringMgr.0
jne 0x45ff21
lock inc dword [ecx + 0x14]
lea eax, [ecx + 8]
lea esi, [eax + 0x10]
mov dword [ebp - 0x1c], esi
mov ecx, str.DisplayVersion
mov byte [ebp - 4], 0xa
test ecx, 0xffff0000
jne 0x45f83b
movzx eax, cx
lea ecx, [ebp - 0x1c]
push eax
call fcn.0040d3d0
mov esi, dword [ebp - 0x1c]
jmp 0x45f8d8
mov eax, dword [esi - 0xc]
mov ebx, ecx
mov dword [ebp - 0x44], eax
sub ebx, esi
mov eax, dword [esi - 8]
mov ecx, 1
sub ecx, dword [esi - 4]
sub eax, 0xe
sar ebx, 1
or eax, ecx
jge 0x45f866
push 0xe
lea ecx, [ebp - 0x1c]
call fcn.00401fd8
mov esi, dword [ebp - 0x1c]
cmp ebx, dword [ebp - 0x44]
ja 0x45f8ae
mov eax, dword [esi - 8]
lea ecx, [esi + ebx*2]
test ecx, ecx
jne 0x45f887
call fcn.005b0782
mov dword [eax], 0x16
call fcn.005b06a9
jmp 0x45f8c1
add eax, eax
cmp eax, 0x1c
jae 0x45f8a0
call fcn.005b0782
mov dword [eax], 0x22
call fcn.005b06a9
jmp 0x45f8c1
push 0x1c
push ecx
push esi
call fcn.005ad520
add esp, 0xc
jmp 0x45f8c1
push 0xe
push str.DisplayVersion
push dword [esi - 8]
push esi
call fcn.004021b4
add esp, 0x10
cmp dword [esi - 8], 0xe
jl 0x45ff82
xor eax, eax
mov dword [esi - 0xc], 0xe
mov word [esi + 0x1c], ax
mov ecx, dword [ebp + 8]
lea eax, [ebp - 0x3c]
push eax
lea eax, [ebp - 0x1c]
mov byte [ebp - 4], 0xb
push eax
lea edx, [ebp - 0x10]
call fcn.0045eff0
add esp, 8
mov byte [ebp - 4], 9
add esi, 0xfffffff0
or eax, 0xffffffff
lock xadd dword [esi + 0xc], eax
dec eax
test eax, eax
jg 0x45f937
mov ecx, dword [esi]
push esi
mov eax, dword [ecx]
mov edx, dword [eax + 4]
cmp eax, vtable.ATL::CAtlStringMgr.0
jne 0x45ff28
mov ecx, dword [ecx + 4]
mov eax, dword [ecx]
mov edx, dword [eax + 4]
cmp eax, vtable.ATL::CWin32Heap.0
jne 0x45ff28
push 0
push dword [ecx + 4]
call dword [sym.imp.KERNEL32.dll_HeapFree]
call fcn.0040cb60
mov ecx, eax
test ecx, ecx
je 0x45ff8c
mov eax, dword [ecx]
mov edx, dword [eax + 0xc]
cmp eax, vtable.ATL::CAtlStringMgr.0
jne 0x45ff2f
lock inc dword [ecx + 0x14]
lea eax, [ecx + 8]
add eax, 0x10
mov dword [ebp - 0x38], eax
mov byte [ebp - 4], 0xc
call fcn.0040cb60
mov ecx, eax
test ecx, ecx
je 0x45ff8c
mov eax, dword [ecx]
mov edx, dword [eax + 0xc]
cmp eax, vtable.ATL::CAtlStringMgr.0
jne 0x45ff36
lock inc dword [ecx + 0x14]
lea eax, [ecx + 8]
lea esi, [eax + 0x10]
mov dword [ebp - 0x20], esi
mov ecx, str.Publisher
mov byte [ebp - 4], 0xd
test ecx, 0xffff0000
jne 0x45f9b8
movzx eax, cx
lea ecx, [ebp - 0x20]
push eax
call fcn.0040d3d0
mov esi, dword [ebp - 0x20]
jmp 0x45fa55
mov eax, dword [esi - 0xc]
mov ebx, ecx
mov dword [ebp - 0x44], eax
sub ebx, esi
mov eax, dword [esi - 8]
mov ecx, 1
sub ecx, dword [esi - 4]
sub eax, 9
sar ebx, 1
or eax, ecx
jge 0x45f9e3
push 9
lea ecx, [ebp - 0x20]
call fcn.00401fd8
mov esi, dword [ebp - 0x20]
cmp ebx, dword [ebp - 0x44]
ja 0x45fa2b
mov eax, dword [esi - 8]
lea ecx, [esi + ebx*2]
test ecx, ecx
jne 0x45fa04
call fcn.005b0782
mov dword [eax], 0x16
call fcn.005b06a9
jmp 0x45fa3e
add eax, eax
cmp eax, 0x12
jae 0x45fa1d
call fcn.005b0782
mov dword [eax], 0x22
call fcn.005b06a9
jmp 0x45fa3e
push 0x12
push ecx
push esi
call fcn.005ad520
add esp, 0xc
jmp 0x45fa3e
push 9
push str.Publisher
push dword [esi - 8]
push esi
call fcn.004021b4
add esp, 0x10
cmp dword [esi - 8], 9
jl 0x45ff82
xor eax, eax
mov dword [esi - 0xc], 9
mov word [esi + 0x12], ax
mov ecx, dword [ebp + 8]
lea eax, [ebp - 0x38]
push eax
lea eax, [ebp - 0x20]
mov byte [ebp - 4], 0xe
push eax
lea edx, [ebp - 0x10]
call fcn.0045eff0
add esp, 8
mov byte [ebp - 4], 0xc
add esi, 0xfffffff0
or eax, 0xffffffff
lock xadd dword [esi + 0xc], eax
dec eax
test eax, eax
jg 0x45fab4
mov ecx, dword [esi]
push esi
mov eax, dword [ecx]
mov edx, dword [eax + 4]
cmp eax, vtable.ATL::CAtlStringMgr.0
jne 0x45ff3d
mov ecx, dword [ecx + 4]
mov eax, dword [ecx]
mov edx, dword [eax + 4]
cmp eax, vtable.ATL::CWin32Heap.0
jne 0x45ff3d
push 0
push dword [ecx + 4]
call dword [sym.imp.KERNEL32.dll_HeapFree]
call fcn.0040cb60
mov ecx, eax
test ecx, ecx
je 0x45ff8c
mov eax, dword [ecx]
mov edx, dword [eax + 0xc]
cmp eax, vtable.ATL::CAtlStringMgr.0
jne 0x45ff44
lock inc dword [ecx + 0x14]
lea eax, [ecx + 8]
lea esi, [eax + 0x10]
mov dword [ebp - 0x24], esi
mov ecx, 0x62b480
mov byte [ebp - 4], 0xf
test ecx, 0xffff0000
jne 0x45fb05
movzx eax, cx
lea ecx, [ebp - 0x24]
push eax
call fcn.0040d3d0
mov esi, dword [ebp - 0x24]
jmp 0x45fba2
mov eax, dword [esi - 0xc]
mov ebx, ecx
mov dword [ebp - 0x44], eax
sub ebx, esi
mov eax, dword [esi - 8]
mov ecx, 1
sub ecx, dword [esi - 4]
sub eax, 7
sar ebx, 1
or eax, ecx
jge 0x45fb30
push 7
lea ecx, [ebp - 0x24]
call fcn.00401fd8
mov esi, dword [ebp - 0x24]
cmp ebx, dword [ebp - 0x44]
ja 0x45fb78
mov eax, dword [esi - 8]
lea ecx, [esi + ebx*2]
test ecx, ecx
jne 0x45fb51
call fcn.005b0782
mov dword [eax], 0x16
call fcn.005b06a9
jmp 0x45fb8b
add eax, eax
cmp eax, 0xe
jae 0x45fb6a
call fcn.005b0782
mov dword [eax], 0x22
call fcn.005b06a9
jmp 0x45fb8b
push 0xe
push ecx
push esi
call fcn.005ad520
add esp, 0xc
jmp 0x45fb8b
push 7
push 0x62b480
push dword [esi - 8]
push esi
call fcn.004021b4
add esp, 0x10
cmp dword [esi - 8], 7
jl 0x45ff82
xor eax, eax
mov dword [esi - 0xc], 7
mov word [esi + 0xe], ax
mov ecx, dword [ebp + 8]
lea eax, [ebp - 0x48]
push eax
lea eax, [ebp - 0x24]
mov byte [ebp - 4], 0x10
push eax
lea edx, [ebp - 0x10]
call fcn.0045f1e0
add esp, 8
mov byte [ebp - 4], 0xc
add esi, 0xfffffff0
or eax, 0xffffffff
lock xadd dword [esi + 0xc], eax
dec eax
test eax, eax
jg 0x45fc01
mov ecx, dword [esi]
push esi
mov eax, dword [ecx]
mov edx, dword [eax + 4]
cmp eax, vtable.ATL::CAtlStringMgr.0
jne 0x45ff4b
mov ecx, dword [ecx + 4]
mov eax, dword [ecx]
mov edx, dword [eax + 4]
cmp eax, vtable.ATL::CWin32Heap.0
jne 0x45ff4b
push 0
push dword [ecx + 4]
call dword [sym.imp.KERNEL32.dll_HeapFree]
mov esi, dword [ebp - 0x2c]
cmp dword [esi - 0xc], 0
je 0x45fd20
push 0x10
call fcn.004627a8
mov ebx, eax
add esp, 4
test ebx, ebx
je 0x45fc3f
mov ecx, ebx
mov byte [ebp - 4], 0x11
call fcn.0040ede0
lea ecx, [ebx + 4]
call fcn.0040ede0
lea ecx, [ebx + 0xc]
call fcn.0040ede0
mov byte [ebp - 4], 0xc
jmp 0x45fc41
xor ebx, ebx
lea eax, [ebp - 0x2c]
mov ecx, ebx
push eax
call fcn.00402159
lea eax, [ebp - 0x3c]
lea ecx, [ebx + 4]
push eax
call fcn.00402159
mov eax, dword [ebp - 0x48]
lea ecx, [ebx + 0xc]
mov dword [ebx + 8], eax
lea eax, [ebp - 0x38]
push eax
call fcn.00402159
mov edx, dword [ebp - 0x28]
cmp dword [edx + 0x10], 0
mov eax, dword [edx + 4]
mov dword [ebp - 0x44], eax
jne 0x45fcf6
mov eax, dword [edx + 0x14]
mov ecx, 0xc
mul ecx
mov ecx, eax
test edx, edx
ja 0x45ff78
jb 0x45fc98
cmp ecx, 0xffffffff
ja 0x45ff78
not eax
cmp eax, 8
jb 0x45ff78
add ecx, 8
push ecx
call fcn.005b5958
add esp, 4
test eax, eax
je 0x45ff78
mov edx, dword [ebp - 0x28]
mov ecx, dword [edx + 0xc]
mov dword [eax], ecx
mov dword [edx + 0xc], eax
mov edx, dword [edx + 0x14]
lea ecx, [edx*2 - 1]
add ecx, edx
add edx, 0xffffffff
lea ecx, [eax + ecx*4]
js 0x45fcf3
mov esi, dword [ebp - 0x28]
nop dword [eax]
mov eax, dword [esi + 0x10]
mov dword [ecx], eax
mov dword [esi + 0x10], ecx
sub ecx, 0xc
sub edx, 1
jns 0x45fce0
mov esi, dword [ebp - 0x2c]
mov edx, dword [ebp - 0x28]
mov ecx, dword [edx + 0x10]
mov eax, dword [ecx]
mov dword [ecx + 8], ebx
mov dword [edx + 0x10], eax
mov eax, dword [ebp - 0x44]
mov dword [ecx + 4], eax
mov dword [ecx], 0
inc dword [edx + 8]
mov eax, dword [edx + 4]
test eax, eax
je 0x45fd1b
mov dword [eax], ecx
jmp 0x45fd1d
mov dword [edx], ecx
mov dword [edx + 4], ecx
mov dword [ebp - 0x34], 0x3e8
or eax, 0xffffffff
mov byte [ebp - 4], 9
mov ecx, dword [ebp - 0x38]
add ecx, 0xfffffff0
lock xadd dword [ecx + 0xc], eax
dec eax
test eax, eax
jg 0x45fd6f
mov edx, dword [ecx]
push ecx
mov eax, dword [edx]
mov ebx, dword [eax + 4]
cmp eax, vtable.ATL::CAtlStringMgr.0
jne 0x45ff52
mov edx, dword [edx + 4]
mov eax, dword [edx]
mov ebx, dword [eax + 4]
cmp eax, vtable.ATL::CWin32Heap.0
jne 0x45ff52
push 0
push dword [edx + 4]
call dword [sym.imp.KERNEL32.dll_HeapFree]
mov byte [ebp - 4], 6
or eax, 0xffffffff
mov ecx, dword [ebp - 0x3c]
add ecx, 0xfffffff0
lock xadd dword [ecx + 0xc], eax
dec eax
test eax, eax
jg 0x45fdbb
mov edx, dword [ecx]
push ecx
mov eax, dword [edx]
mov ebx, dword [eax + 4]
cmp eax, vtable.ATL::CAtlStringMgr.0
jne 0x45ff5b
mov edx, dword [edx + 4]
mov eax, dword [edx]
mov ebx, dword [eax + 4]
cmp eax, vtable.ATL::CWin32Heap.0
jne 0x45ff5b
mov ebx, dword [sym.imp.KERNEL32.dll_HeapFree]
push 0
push dword [edx + 4]
call ebx
jmp 0x45fdc1
mov ebx, dword [sym.imp.KERNEL32.dll_HeapFree]
mov byte [ebp - 4], 3
add esi, 0xfffffff0
or eax, 0xffffffff
lock xadd dword [esi + 0xc], eax
dec eax
test eax, eax
jg 0x45fe02
mov ecx, dword [esi]
push esi
mov eax, dword [ecx]
mov edx, dword [eax + 4]
cmp eax, vtable.ATL::CAtlStringMgr.0
jne 0x45ff64
mov ecx, dword [ecx + 4]
mov eax, dword [ecx]
mov edx, dword [eax + 4]
cmp eax, vtable.ATL::CWin32Heap.0
jne 0x45ff64
push 0
push dword [ecx + 4]
call ebx
mov byte [ebp - 4], 1
or eax, 0xffffffff
mov ecx, dword [ebp - 0x10]
add ecx, 0xfffffff0
lock xadd dword [ecx + 0xc], eax
dec eax
mov esi, dword [ebp - 0x14]
test eax, eax
jg 0x45f4b0
mov edx, dword [ecx]
mov eax, dword [edx]
mov esi, dword [eax + 4]
cmp eax, vtable.ATL::CAtlStringMgr.0
jne 0x45ff6b
mov edx, dword [edx + 4]
mov eax, dword [edx]
mov esi, dword [eax + 4]
cmp eax, vtable.ATL::CWin32Heap.0
jne 0x45ff6b
push ecx
push 0
push dword [edx + 4]
call ebx
mov esi, dword [ebp - 0x14]
jmp 0x45f4b0
test esi, esi
je 0x45fe67
push esi
call dword [sym.imp.ADVAPI32.dll_RegCloseKey]
xor esi, esi
mov dword [ebp - 0x5c], esi
jmp 0x45fe6a
mov esi, dword [ebp - 0x5c]
push edi
mov dword [ebp - 0x58], 0
call fcn.005b3341
add esp, 4
mov dword [ebp - 0x40], 0
push 0
mov byte [ebp - 4], 0x12
call fcn.005b3341
add esp, 4
mov dword [ebp - 0x40], 0
mov byte [ebp - 4], 0
jmp 0x45fe9f
mov esi, dword [ebp - 0x5c]
mov dword [ebp - 4], 0xffffffff
test esi, esi
je 0x45feb8
push esi
call dword [sym.imp.ADVAPI32.dll_RegCloseKey]
mov dword [ebp - 0x5c], 0
mov dword [ebp - 0x58], 0
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 8
call dword [eax + 0x10]
mov ecx, eax
jmp 0x45f4f9
mov ecx, edx
call dword [eax + 0x10]
mov edx, eax
jmp 0x45f55d
mov ecx, edx
call dword [eax + 0x10]
mov edx, eax
jmp 0x45f575
mov ecx, edx
call eax
jmp 0x45f595
call edx
jmp 0x45f617
call edx
jmp 0x45f663
call edx
jmp 0x45f693
call edx
jmp 0x45f7ba
call edx
jmp 0x45f7e0
call edx
jmp 0x45f810
call edx
jmp 0x45f937
call edx
jmp 0x45f95d
call edx
jmp 0x45f98d
call edx
jmp 0x45fab4
call edx
jmp 0x45fada
call edx
jmp 0x45fc01
mov ecx, edx
call ebx
jmp 0x45fd6f
mov ecx, edx
call ebx
jmp 0x45fdbb
call edx
jmp 0x45fe02
push ecx
mov ecx, edx
call esi
mov esi, dword [ebp - 0x14]
jmp 0x45f4b0
push 0x8007000e
call fcn.004022df
push 0x80070057
call fcn.004022df
push 0x80004005
call fcn.004022df
call fcn.004021a9
int3