Function at 0x405b90
Capabilities:
Set registry value

Disassembly:
push ecx
mov eax, dword [esi + 0x5dc]
push ebx
push edi
mov edi, dword [sym.imp.USER32.dll_SendMessageA]
push 0
push 0
push pe_nt_image_headers32
push eax
call edi
mov edx, dword [0x4bb3cc]
mov ebx, dword [sym.imp.ADVAPI32.dll_RegSetValueExA]
push 4
lea ecx, [esp + 0xc]
push ecx
sub eax, 1
push 4
neg eax
push 0
sbb eax, eax
push str.CheckComReg
add eax, 1
push edx
mov dword [esp + 0x20], eax
call ebx
mov eax, dword [esi + 0x630]
push 0
push 0
push pe_nt_image_headers32
push eax
call edi
mov edx, dword [0x4bb3cc]
push 4
lea ecx, [esp + 0xc]
push ecx
sub eax, 1
push 4
neg eax
push 0
sbb eax, eax
push str.CheckUninstall
add eax, 1
push edx
mov dword [esp + 0x20], eax
call ebx
mov eax, dword [esi + 0x684]
push 0
push 0
push pe_nt_image_headers32
push eax
call edi
mov edx, dword [0x4bb3cc]
push 4
lea ecx, [esp + 0xc]
push ecx
sub eax, 1
push 4
neg eax
push 0
sbb eax, eax
push str.CheckAppPaths
add eax, 1
push edx
mov dword [esp + 0x20], eax
call ebx
mov eax, dword [esi + 0x6d8]
push 0
push 0
push pe_nt_image_headers32
push eax
call edi
push 4
sub eax, 1
lea ecx, [esp + 0xc]
push ecx
neg eax
push 4
sbb eax, eax
add eax, 1
push 0
mov dword [esp + 0x18], eax
push str.CheckFonts
mov edx, dword [0x4bb3cc]
push edx
call ebx
mov eax, dword [esi + 0x72c]
push 0
push 0
push pe_nt_image_headers32
push eax
call edi
mov edx, dword [0x4bb3cc]
push 4
lea ecx, [esp + 0xc]
push ecx
sub eax, 1
push 4
neg eax
push 0
sbb eax, eax
push str.CheckSharedFiles
add eax, 1
push edx
mov dword [esp + 0x20], eax
call ebx
mov eax, dword [esi + 0x780]
push 0
push 0
push pe_nt_image_headers32
push eax
call edi
mov edx, dword [0x4bb3cc]
push 4
lea ecx, [esp + 0xc]
push ecx
sub eax, 1
push 4
neg eax
push 0
sbb eax, eax
push str.CheckHelpDiles
add eax, 1
push edx
mov dword [esp + 0x20], eax
call ebx
mov eax, dword [esi + 0x7d4]
push 0
push 0
push pe_nt_image_headers32
push eax
call edi
mov edx, dword [0x4bb3cc]
push 4
lea ecx, [esp + 0xc]
push ecx
sub eax, 1
push 4
neg eax
push 0
sbb eax, eax
push str.CheckStartup
add eax, 1
push edx
mov dword [esp + 0x20], eax
call ebx
mov eax, dword [esi + 0x828]
push 0
push 0
push pe_nt_image_headers32
push eax
call edi
mov edx, dword [0x4bb3cc]
push 4
sub eax, 1
lea ecx, [esp + 0xc]
push ecx
neg eax
push 4
sbb eax, eax
add eax, 1
push 0
mov dword [esp + 0x18], eax
push str.CheckServices
push edx
call ebx
mov eax, dword [esi + 0x87c]
push 0
push 0
push pe_nt_image_headers32
push eax
call edi
mov edx, dword [0x4bb3cc]
push 4
lea ecx, [esp + 0xc]
push ecx
sub eax, 1
push 4
neg eax
push 0
sbb eax, eax
push str.CheckDrivers
add eax, 1
push edx
mov dword [esp + 0x20], eax
call ebx
mov eax, dword [esi + 0x8d0]
push 0
push 0
push pe_nt_image_headers32
push eax
call edi
mov edx, dword [0x4bb3cc]
push 4
lea ecx, [esp + 0xc]
push ecx
sub eax, 1
push 4
neg eax
push 0
sbb eax, eax
push str.CheckFileAss
add eax, 1
push edx
mov dword [esp + 0x20], eax
call ebx
mov eax, dword [esi + 0x924]
push 0
push 0
push pe_nt_image_headers32
push eax
call edi
mov edx, dword [0x4bb3cc]
push 4
lea ecx, [esp + 0xc]
push ecx
sub eax, 1
push 4
neg eax
push 0
sbb eax, eax
push str.CheckSounds
add eax, 1
push edx
mov dword [esp + 0x20], eax
call ebx
mov eax, dword [esi + 0x978]
push 0
push 0
push pe_nt_image_headers32
push eax
call edi
mov edx, dword [0x4bb3cc]
push 4
sub eax, 1
lea ecx, [esp + 0xc]
push ecx
push 4
neg eax
push 0
sbb eax, eax
add eax, 1
push str.CheckUser
mov dword [esp + 0x1c], eax
push edx
call ebx
mov eax, dword [esi + 0x9cc]
push 0
push 0
push pe_nt_image_headers32
push eax
call edi
mov edx, dword [0x4bb3cc]
push 4
lea ecx, [esp + 0xc]
push ecx
sub eax, 1
push 4
neg eax
push 0
sbb eax, eax
push str.CheckHistory
add eax, 1
push edx
mov dword [esp + 0x20], eax
call ebx
mov eax, dword [esi + 0xa20]
push 0
push 0
push pe_nt_image_headers32
push eax
call edi
mov edx, dword [0x4bb3cc]
push 4
lea ecx, [esp + 0xc]
push ecx
sub eax, 1
push 4
neg eax
push 0
sbb eax, eax
push str.CheckShortcuts
add eax, 1
push edx
mov dword [esp + 0x20], eax
call ebx
pop edi
pop ebx
pop ecx
ret