Function at 0x45becf
Capabilities:
Query or enumerate registry value

Disassembly:
push 0x430
mov eax, 0x494cd4
call fcn.0045cdd3
mov eax, dword [ebp + 8]
mov edi, str.SoftwareAdobeAdobe_AcrobatDCLanguageNext
mov esi, dword [sym.imp.ADVAPI32.dll_RegOpenKeyW]
mov ebx, SysReAllocString
mov dword [ebp - 0x42c], eax
lea eax, [ebp - 0x424]
push eax
push edi
push ebx
call esi
test eax, eax
je 0x45bf59
lea eax, [ebp - 0x424]
push eax
push edi
lea edi, [ebx + 1]
push edi
call esi
test eax, eax
je 0x45bf59
lea eax, [ebp - 0x424]
push eax
push str.SoftwareAdobeAcrobat_ReaderDCLanguageNext
push ebx
call esi
test eax, eax
je 0x45bf59
lea eax, [ebp - 0x424]
push eax
push str.SoftwareAdobeAcrobat_ReaderDCLanguageNext
push edi
call esi
test eax, eax
je 0x45bf59
lea eax, [ebp - 0x424]
push eax
push str.SoftwareAdobeAcrobat_ReaderDCLanguageCurrent
push edi
call esi
test eax, eax
je 0x45bf59
or eax, 0xffffffff
jmp 0x45c163
mov edi, 0x200
push edi
call fcn.0043231d
mov esi, eax
pop ecx
mov dword [ebp - 0x43c], esi
lea eax, [ebp - 0x430]
mov dword [ebp - 0x430], edi
push eax
push esi
lea eax, [ebp - 0x434]
xor ebx, ebx
push eax
push ebx
push ebx
push dword [ebp - 0x424]
mov dword [ebp - 4], ebx
call dword [sym.imp.ADVAPI32.dll_RegQueryValueExW]
push dword [ebp - 0x424]
mov edi, eax
call dword [sym.imp.ADVAPI32.dll_RegCloseKey]
mov eax, dword [ebp - 0x430]
shr eax, 1
mov dword [ebp - 0x424], ebx
mov dword [ebp - 0x438], eax
test edi, edi
jne 0x45c157
inc edi
cmp dword [ebp - 0x434], edi
jne 0x45c157
cmp eax, 4
jb 0x45c157
add eax, 0xfffffffc
xor ecx, ecx
push 0x4a7c14
mov word [esi + 0x1fe], cx
lea eax, [esi + eax*2]
push eax
mov dword [ebp - 0x428], eax
call dword [sym.imp.MSVCR120.dll__wcsicmp]
pop ecx
pop ecx
test eax, eax
je 0x45c153
push 0x4a7c1c
push dword [ebp - 0x428]
call dword [sym.imp.MSVCR120.dll__wcsicmp]
pop ecx
pop ecx
test eax, eax
je 0x45c153
push esi
call fcn.0043231d
pop ecx
test eax, eax
je 0x45c153
lea eax, [ebp - 0x428]
push eax
push 0x100
push esi
call fcn.0043231d
test eax, eax
js 0x45c153
push esi
push 0x104
lea eax, [ebp - 0x218]
push eax
call fcn.0043231d
test eax, eax
js 0x45c153
push 0x5c
push esi
call dword [sym.imp.MSVCR120.dll_wcsrchr]
pop ecx
pop ecx
test eax, eax
je 0x45c150
xor ecx, ecx
mov word [eax], cx
lea eax, [ebp - 0x428]
push eax
push dword [ebp + 0xc]
push dword [ebp - 0x42c]
call fcn.0043231d
test eax, eax
js 0x45c153
mov eax, dword [ebp - 0x428]
mov ecx, 0x104
inc eax
cmp eax, ecx
jae 0x45c150
push dword [ebp - 0x42c]
lea eax, [ebp - 0x420]
push ecx
push eax
call fcn.0043231d
test eax, eax
js 0x45c153
lea eax, [ebp - 0x428]
push eax
push 0x100
push esi
call fcn.0043231d
test eax, eax
js 0x45c153
mov eax, dword [ebp - 0x428]
inc eax
cmp eax, 0x104
jae 0x45c150
push esi
push dword [ebp + 0xc]
push dword [ebp - 0x42c]
call fcn.0043231d
test eax, eax
js 0x45c153
push 0x4a79a0
push dword [ebp + 0xc]
push dword [ebp - 0x42c]
call fcn.0043231d
test eax, eax
js 0x45c153
lea eax, [ebp - 0x420]
push eax
push dword [ebp + 0xc]
push dword [ebp - 0x42c]
call fcn.0043231d
test eax, eax
js 0x45c153
mov eax, dword [ebp - 0x438]
cmp eax, 5
jbe 0x45c157
lea eax, [ebp + eax*2 - 0x222]
push eax
push dword [ebp + 0xc]
push dword [ebp - 0x42c]
call fcn.0043231d
test eax, eax
js 0x45c153
jmp 0x45c15a
or ebx, 0xffffffff
mov edi, ebx
jmp 0x45c15a
or edi, 0xffffffff
push esi
call sub.MSVCR120.dll_void___cdecl_operator_delete_void__
pop ecx
mov eax, edi
call fcn.0045cd82
ret