Function at 0x456400
Capabilities:
Query or enumerate registry key
Query or enumerate registry value
Resolve function by parsing pe exports

Disassembly:
push 0xffffffffffffffff
push 0x4b4627
mov eax, dword fs:[0]
push eax
sub esp, 0xd30
mov eax, dword [0x4e1370]
xor eax, esp
mov dword [esp + 0xd28], eax
push ebx
push ebp
push esi
push edi
mov eax, dword [0x4e1370]
xor eax, esp
push eax
lea eax, [esp + 0xd44]
mov dword fs:[0], eax
mov eax, dword [esp + 0xd54]
lea ecx, [esp + 0x4c]
push ecx
mov dword [esp + 0x48], eax
call fcn.00443a00
xor ebx, ebx
lea edx, [esp + 0x1c]
mov dword [esp + 0xd4c], ebx
push edx
lea ecx, [esp + 0x50]
mov dword [esp + 0x20], ebx
call fcn.00481b5a
add esp, 4
test eax, eax
jne 0x45649a
mov eax, dword [esp + 0x58]
cmp eax, ebx
je 0x456490
mov edi, dword [esp + 0x5c]
call fcn.00436680
mov eax, dword [esp + 0x58]
push eax
call fcn.00490210
add esp, 4
mov ecx, dword [esp + 0x4c]
push ecx
jmp 0x45719e
push 0x206
lea eax, [esp + 0x932]
xor edx, edx
push ebx
push eax
mov word [esp + 0x938], dx
call fcn.00494b20
mov edi, dword [esp + 0x68]
mov esi, dword [esp + 0x64]
mov eax, edi
sub eax, esi
sar eax, 2
add esp, 0xc
mov dword [esp + 0xe0], eax
mov dword [esp + 0x28], ebx
cmp eax, ebx
jbe 0x457181
mov ebp, dword [esp + 0x44]
push 0x206
lea edx, [esp + 0xb3a]
xor ecx, ecx
push ebx
push edx
mov word [esp + 0xb40], cx
call fcn.00494b20
sub edi, esi
sar edi, 2
add esp, 0xc
mov dword [esp + 0x18], ebx
cmp dword [esp + 0x28], edi
jb 0x456518
call fcn.00490387
mov esi, dword [esp + 0x58]
mov eax, dword [esp + 0x28]
mov esi, dword [esi + eax*4]
lea eax, [esp + 0x92c]
mov ecx, eax
mov edx, 0x104
sub esi, ecx
nop
lea ecx, [edx + 0x7ffffefa]
test ecx, ecx
je 0x456550
movzx ecx, word [esi + eax]
cmp cx, bx
je 0x456550
mov word [eax], cx
add eax, 2
sub edx, 1
jne 0x456530
jmp 0x456554
cmp edx, ebx
jne 0x456557
sub eax, 2
xor edx, edx
mov word [eax], dx
lea eax, [esp + 0x92c]
push eax
push str.SOFTWAREMicrosoftWindowsCurrentVersionInstallerUserData_sComponents
mov edi, 0x208
lea ecx, [esp + 0xb3c]
push edi
push ecx
call fcn.004549b0
mov eax, dword [ebp + 0x1c]
add esp, 0x10
lea edx, [esp + 0x18]
push edx
or eax, 0x20019
push eax
push ebx
lea ecx, [esp + 0xb40]
push ecx
push reloc.OLEAUT32.dll_SysReAllocString
call dword [sym.imp.ADVAPI32.dll_RegOpenKeyExW]
test eax, eax
jne 0x457163
push 0x206
lea eax, [esp + 0x112]
xor edx, edx
push ebx
push eax
mov dword [esp + 0x44], ebx
mov word [esp + 0x118], dx
call fcn.00494b20
add esp, 0xc
push 0x206
lea edx, [esp + 0x72a]
xor ecx, ecx
push ebx
push edx
mov word [esp + 0x730], cx
call fcn.00494b20
mov edx, dword [esp + 0x24]
add esp, 0xc
push ebx
push ebx
push ebx
push ebx
lea eax, [esp + 0x50]
push eax
lea ecx, [esp + 0x738]
push ecx
push ebx
push edx
mov dword [esp + 0x60], 0x104
call dword [sym.imp.ADVAPI32.dll_RegEnumKeyExW]
test eax, eax
jne 0x457154
mov esi, dword [sym.imp.ADVAPI32.dll_RegEnumValueW]
mov eax, dword [ebp + 0xfc]
test eax, eax
jne 0x457154
mov edx, dword [ebp + 0x1c]
inc dword [esp + 0x38]
lea ecx, [esp + 0x2c]
push ecx
mov ecx, dword [esp + 0x1c]
or edx, 0x20019
push edx
push ebx
lea eax, [esp + 0x730]
push eax
push ecx
mov dword [esp + 0x54], edi
mov dword [esp + 0x40], ebx
call dword [sym.imp.ADVAPI32.dll_RegOpenKeyExW]
cmp eax, ebx
jne 0x45712b
push 0x206
lea eax, [esp + 0x31a]
xor edx, edx
push ebx
push eax
mov dword [esp + 0x40], 1
mov dword [esp + 0x48], ebx
mov word [esp + 0x320], dx
call fcn.00494b20
add esp, 0xc
push 0x206
lea edx, [esp + 0x522]
xor ecx, ecx
push ebx
push edx
mov dword [esp + 0x3c], edi
mov word [esp + 0x528], cx
call fcn.00494b20
add esp, 0xc
lea eax, [esp + 0x24]
push eax
lea ecx, [esp + 0x520]
push ecx
lea edx, [esp + 0x3c]
push edx
mov edx, dword [esp + 0x38]
push ebx
lea eax, [esp + 0x40]
push eax
lea ecx, [esp + 0x328]
push ecx
push ebx
push edx
mov dword [esp + 0x44], 0x410
call esi
test eax, eax
jne 0x45711c
lea ecx, [ecx]
mov eax, dword [ebp + 0xfc]
test eax, eax
jne 0x45711c
lea ecx, [esp + 0x724]
push ecx
call dword [sym.imp.KERNEL32.dll_lstrlenW]
test eax, eax
je 0x4570b4
cmp dword [esp + 0x34], 1
jne 0x4570b4
cmp dword [esp + 0x30], ebx
jne 0x45672f
cmp dword [esp + 0x24], ebx
je 0x4570b4
cmp word [esp + 0x51e], 0x3f
jne 0x456747
mov edx, 0x3a
mov word [esp + 0x51e], dx
lea eax, [esp + 0xb34]
mov ecx, 0x104
lea edx, [esp + 0x10c]
call fcn.0044c6a0
mov ecx, 0x104
lea eax, [esp + 0x10c]
jmp 0x456770
cmp word [eax], bx
je 0x45677f
add eax, 2
sub ecx, 1
jne 0x456770
jmp 0x4567a2
cmp ecx, ebx
je 0x4567a2
mov eax, 0x104
sub eax, ecx
mov ecx, 0x104
sub ecx, eax
lea edx, [esp + eax*2 + 0x10c]
mov eax, 0x4c8f90
call fcn.0045e530
mov ecx, 0x104
lea eax, [esp + 0x10c]
mov edi, edi
cmp word [eax], bx
je 0x4567bf
add eax, 2
sub ecx, 1
jne 0x4567b0
jmp 0x4567e4
cmp ecx, ebx
je 0x4567e4
mov eax, 0x104
sub eax, ecx
mov ecx, 0x104
sub ecx, eax
lea edx, [esp + eax*2 + 0x10c]
lea eax, [esp + 0x724]
call fcn.0045e530
mov eax, dword [ebp + 0x18]
lea ecx, [esp + 0x314]
push ecx
push eax
call fcn.004920dc
add esp, 8
cmp eax, ebx
jne 0x4570b4
lea edx, [esp + 0x14]
push edx
lea ecx, [esp + 0x520]
call fcn.00405a20
mov byte [esp + 0xd4c], 1
mov eax, dword [esp + 0x14]
push eax
call dword [sym.imp.SHLWAPI.dll_PathFindFileNameW]
lea ecx, [esp + 0x20]
push ecx
mov ecx, eax
call fcn.00405a20
mov byte [esp + 0xd4c], 2
mov edx, dword [esp + 0x14]
push edx
call dword [sym.imp.SHLWAPI.dll_PathFindExtensionW]
lea ecx, [esp + 0x64]
push ecx
mov ecx, eax
call fcn.00405a20
mov eax, dword [esp + 0x14]
cmp dword [eax - 0xc], ebx
jl 0x456879
push str.Microsoft.NETPrimary_Interop_Assemblies
push eax
call fcn.004915bc
add esp, 8
cmp eax, ebx
je 0x456879
sub eax, dword [esp + 0x14]
sar eax, 1
cmp eax, 0xffffffff
jne 0x45703d
mov edx, dword [esp + 0x64]
push str..TLB
push edx
call fcn.004920dc
add esp, 8
cmp eax, ebx
je 0x45703d
mov eax, dword [esp + 0x20]
push str.iphlpapi.dll
push eax
call fcn.004920dc
add esp, 8
cmp eax, ebx
je 0x45703d
mov ecx, dword [esp + 0x20]
push str.RICHINK.DLL
push ecx
call fcn.004920dc
add esp, 8
cmp eax, ebx
je 0x4568ef
mov edx, dword [esp + 0x20]
push str.MSDDSP.DLL
push edx
call fcn.004920dc
add esp, 8
cmp eax, ebx
je 0x4568ef
mov eax, dword [esp + 0x20]
push str.MSDDSLMP.DLL
push eax
call fcn.004920dc
add esp, 8
cmp eax, ebx
jne 0x456908
mov eax, dword [ebp + 0x18]
push str.4080110900063D11C8EF10054038389C
push eax
call fcn.004920dc
add esp, 8
cmp eax, ebx
je 0x45703d
mov eax, dword [ebp + 0x18]
push str.2020DEA5FA7BEDF43A4885C3BD5485B3
push eax
call fcn.004920dc
add esp, 8
cmp eax, ebx
je 0x45703d
lea esi, [esp + 0x6c]
call fcn.00454a20
mov byte [esp + 0xd4c], 4
mov ecx, dword [ebp + 0x1c]
lea edx, [esp + 0x10c]
lea edi, [esp + 0x78]
mov dword [esp + 0x6c], ecx
mov dword [esp + 0x74], reloc.OLEAUT32.dll_SysReAllocString
call fcn.004059e0
lea edx, [esp + 0x314]
lea edi, [esp + 0x7c]
call fcn.004059e0
cmp dword [ebp + 0x1c], 0x100
jne 0x456bff
lea edx, [esp + 0x104]
push edx
lea ecx, [esp + 0x318]
call fcn.00405a20
mov edi, eax
lea eax, [esp + 0x9c]
push eax
mov ecx, 0x4c8f90
mov byte [esp + 0xd50], 5
call fcn.00405a20
mov ebp, eax
lea ecx, [esp + 0xdc]
push ecx
lea ecx, [esp + 0x110]
mov byte [esp + 0xd50], 6
call fcn.00405a20
mov dword [esp + 0x1c], eax
lea edx, [esp + 0x94]
push edx
mov ecx, 0x4c8f90
mov byte [esp + 0xd50], 7
call fcn.00405a20
mov ebx, eax
lea eax, [esp + 0xfc]
mov byte [esp + 0xd4c], 8
mov esi, dword [esp + 0x74]
push eax
call fcn.00481ccf
add esp, 4
push ebx
lea ecx, [esp + 0xf4]
push ecx
mov ebx, eax
mov byte [esp + 0xd54], 9
call fcn.004537a0
mov byte [esp + 0xd54], 0xa
mov edx, dword [esp + 0x24]
push edx
lea ecx, [esp + 0xf4]
push ecx
mov ebx, eax
call fcn.004537a0
lea edx, [esp + 0xc4]
push ebp
push edx
mov ebx, eax
mov byte [esp + 0xd64], 0xb
call fcn.004537a0
lea ecx, [esp + 0xfc]
push edi
push ecx
mov ebx, eax
mov byte [esp + 0xd6c], 0xc
call fcn.004537a0
add esp, 0x20
lea edi, [esp + 0x84]
mov byte [esp + 0xd4c], 0xd
call fcn.0040d2b0
mov byte [esp + 0xd4c], 0xc
mov eax, dword [esp + 0xe4]
add eax, 0xfffffff0
lea edx, [eax + 0xc]
or ecx, 0xffffffff
lock xadd dword [edx], ecx
dec ecx
test ecx, ecx
jg 0x456a9e
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
mov byte [esp + 0xd4c], 0xb
mov eax, dword [esp + 0xb4]
add eax, 0xfffffff0
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x456ac9
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
mov byte [esp + 0xd4c], 0xa
mov eax, dword [esp + 0xe8]
add eax, 0xfffffff0
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x456af4
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
mov byte [esp + 0xd4c], 9
mov eax, dword [esp + 0xf0]
add eax, 0xfffffff0
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x456b1f
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
mov byte [esp + 0xd4c], 8
mov eax, dword [esp + 0xfc]
add eax, 0xfffffff0
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x456b4a
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
mov byte [esp + 0xd4c], 7
mov eax, dword [esp + 0x94]
add eax, 0xfffffff0
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x456b75
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
mov byte [esp + 0xd4c], 6
mov eax, dword [esp + 0xdc]
add eax, 0xfffffff0
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x456ba0
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
mov byte [esp + 0xd4c], 5
mov eax, dword [esp + 0x9c]
add eax, 0xfffffff0
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x456bcb
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
mov byte [esp + 0xd4c], 4
mov eax, dword [esp + 0x104]
add eax, 0xfffffff0
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x456faa
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
jmp 0x456faa
call dword [sym.imp.KERNEL32.dll_GetCurrentProcess]
push eax
call fcn.0047b711
add esp, 4
test eax, eax
je 0x456e31
lea ecx, [esp + 0x90]
push ecx
lea ecx, [esp + 0x318]
call fcn.00405a20
mov edi, eax
lea edx, [esp + 0x8c]
push edx
mov ecx, 0x4c8f90
mov byte [esp + 0xd50], 0xe
call fcn.00405a20
mov ebp, eax
lea eax, [esp + 0xd4]
push eax
lea ecx, [esp + 0x110]
mov byte [esp + 0xd50], 0xf
call fcn.00405a20
mov dword [esp + 0x48], eax
lea ecx, [esp + 0x108]
push ecx
mov ecx, 0x4c8f90
mov byte [esp + 0xd50], 0x10
call fcn.00405a20
mov dword [esp + 0xa4], eax
lea edx, [esp + 0xcc]
push edx
mov ecx, str.Wow6432Node
mov byte [esp + 0xd50], 0x11
call fcn.00405a20
mov dword [esp + 0x1c], eax
lea eax, [esp + 0xf4]
push eax
mov ecx, 0x4c8f90
mov byte [esp + 0xd50], 0x12
call fcn.00405a20
mov ebx, eax
lea ecx, [esp + 0xc4]
mov byte [esp + 0xd4c], 0x13
mov esi, dword [esp + 0x74]
push ecx
call fcn.00481ccf
add esp, 4
push ebx
lea edx, [esp + 0x104]
push edx
mov ebx, eax
mov byte [esp + 0xd54], 0x14
call fcn.004537a0
mov byte [esp + 0xd54], 0x15
mov ecx, dword [esp + 0x24]
push ecx
lea edx, [esp + 0xc8]
push edx
mov ebx, eax
call fcn.004537a0
mov ecx, dword [esp + 0xb4]
push ecx
lea edx, [esp + 0x100]
push edx
mov ebx, eax
mov byte [esp + 0xd64], 0x16
call fcn.004537a0
mov ecx, dword [esp + 0x60]
push ecx
lea edx, [esp + 0xa4]
push edx
mov ebx, eax
mov byte [esp + 0xd6c], 0x17
call fcn.004537a0
mov byte [esp + 0xd6c], 0x18
push ebp
lea ecx, [esp + 0x11c]
push ecx
mov ebx, eax
call fcn.004537a0
lea edx, [esp + 0xd4]
push edi
push edx
mov ebx, eax
mov byte [esp + 0xd7c], 0x19
call fcn.004537a0
add esp, 0x30
lea edi, [esp + 0x84]
mov byte [esp + 0xd4c], 0x1a
call fcn.0040d2b0
lea ecx, [esp + 0xac]
call fcn.00406090
lea ecx, [esp + 0xf8]
call fcn.00406090
lea ecx, [esp + 0x88]
call fcn.00406090
lea ecx, [esp + 0xec]
call fcn.00406090
lea ecx, [esp + 0xbc]
call fcn.00406090
lea ecx, [esp + 0x100]
call fcn.00406090
lea ecx, [esp + 0xc4]
call fcn.00406090
lea ecx, [esp + 0xf4]
call fcn.00406090
lea ecx, [esp + 0xcc]
call fcn.00406090
lea ecx, [esp + 0x108]
call fcn.00406090
lea ecx, [esp + 0xd4]
call fcn.00406090
lea ecx, [esp + 0x8c]
call fcn.00406090
lea ecx, [esp + 0x90]
jmp 0x456f9d
lea eax, [esp + 0xd8]
push eax
lea ecx, [esp + 0x318]
call fcn.00405a20
mov edi, eax
lea ecx, [esp + 0xd0]
push ecx
mov ecx, 0x4c8f90
mov byte [esp + 0xd50], 0x1b
call fcn.00405a20
mov ebp, eax
lea edx, [esp + 0xc8]
push edx
lea ecx, [esp + 0x110]
mov byte [esp + 0xd50], 0x1c
call fcn.00405a20
mov dword [esp + 0x48], eax
lea eax, [esp + 0xc0]
push eax
mov ecx, 0x4c8f90
mov byte [esp + 0xd50], 0x1d
call fcn.00405a20
mov ebx, eax
lea ecx, [esp + 0xb8]
mov byte [esp + 0xd4c], 0x1e
mov esi, dword [esp + 0x74]
push ecx
call fcn.00481ccf
add esp, 4
push ebx
lea edx, [esp + 0xb4]
push edx
mov ebx, eax
mov byte [esp + 0xd54], 0x1f
call fcn.004537a0
mov ecx, dword [esp + 0x50]
push ecx
lea edx, [esp + 0xb4]
push edx
mov ebx, eax
mov byte [esp + 0xd5c], 0x20
call fcn.004537a0
lea ecx, [esp + 0xb0]
push ebp
push ecx
mov ebx, eax
mov byte [esp + 0xd64], 0x21
call fcn.004537a0
lea edx, [esp + 0xb0]
push edi
push edx
mov ebx, eax
mov byte [esp + 0xd6c], 0x22
call fcn.004537a0
add esp, 0x20
lea edi, [esp + 0x84]
mov byte [esp + 0xd4c], 0x23
call fcn.0040d2b0
lea ecx, [esp + 0x98]
call fcn.00406090
lea ecx, [esp + 0xa0]
call fcn.00406090
lea ecx, [esp + 0xa8]
call fcn.00406090
lea ecx, [esp + 0xb0]
call fcn.00406090
lea ecx, [esp + 0xb8]
call fcn.00406090
lea ecx, [esp + 0xc0]
call fcn.00406090
lea ecx, [esp + 0xc8]
call fcn.00406090
lea ecx, [esp + 0xd0]
call fcn.00406090
lea ecx, [esp + 0xd8]
mov byte [esp + 0xd4c], 4
call fcn.00406090
lea edx, [esp + 0x314]
lea edi, [esp + 0x80]
call fcn.004059e0
mov esi, dword [esp + 0x44]
lea eax, [esp + 0x6c]
push eax
lea ebx, [esi + 0x54]
mov dword [esp + 0x74], 1
call fcn.0045bca0
lea ecx, [esp + 0x68]
push ecx
lea ecx, [esp + 0x520]
call fcn.00405a20
lea edi, [esi + 0x3c]
lea ebx, [esp + 0x68]
mov byte [esp + 0xd4c], 0x24
call fcn.00435eb0
mov byte [esp + 0xd4c], 4
mov eax, dword [esp + 0x68]
add eax, 0xfffffff0
lea edx, [eax + 0xc]
or ecx, 0xffffffff
lock xadd dword [edx], ecx
dec ecx
test ecx, ecx
jg 0x457023
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
lea esi, [esp + 0x6c]
call fcn.00454a90
mov ebp, dword [esp + 0x44]
mov esi, dword [sym.imp.ADVAPI32.dll_RegEnumValueW]
xor ebx, ebx
mov edi, 0x208
mov byte [esp + 0xd4c], 2
mov eax, dword [esp + 0x64]
add eax, 0xfffffff0
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x457065
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
mov byte [esp + 0xd4c], 1
mov eax, dword [esp + 0x20]
add eax, 0xfffffff0
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x45708d
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
mov byte [esp + 0xd4c], bl
mov eax, dword [esp + 0x14]
add eax, 0xfffffff0
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x4570b4
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
inc dword [esp + 0x3c]
push edi
lea ecx, [esp + 0x318]
push ebx
push ecx
call fcn.00494b20
add esp, 0xc
push edi
lea edx, [esp + 0x520]
push ebx
push edx
call fcn.00494b20
add esp, 0xc
lea eax, [esp + 0x24]
push eax
lea ecx, [esp + 0x520]
push ecx
lea edx, [esp + 0x3c]
push edx
mov edx, dword [esp + 0x48]
push ebx
lea eax, [esp + 0x40]
push eax
mov eax, dword [esp + 0x40]
lea ecx, [esp + 0x328]
push ecx
push edx
push eax
mov dword [esp + 0x50], edi
mov dword [esp + 0x44], 0x410
call esi
test eax, eax
je 0x4566f0
mov eax, dword [esp + 0x2c]
cmp eax, ebx
je 0x45712b
push eax
call dword [sym.imp.ADVAPI32.dll_RegCloseKey]
mov eax, dword [esp + 0x38]
push ebx
push ebx
push ebx
push ebx
lea ecx, [esp + 0x50]
push ecx
mov ecx, dword [esp + 0x2c]
lea edx, [esp + 0x738]
push edx
push eax
push ecx
call dword [sym.imp.ADVAPI32.dll_RegEnumKeyExW]
test eax, eax
je 0x456620
mov eax, dword [esp + 0x18]
cmp eax, ebx
je 0x457163
push eax
call dword [sym.imp.ADVAPI32.dll_RegCloseKey]
mov eax, dword [esp + 0x28]
mov edi, dword [esp + 0x5c]
mov esi, dword [esp + 0x58]
inc eax
mov dword [esp + 0x28], eax
cmp eax, dword [esp + 0xe0]
jb 0x4564e0
cmp esi, ebx
je 0x457199
mov eax, esi
call fcn.00436680
mov edx, dword [esp + 0x58]
push edx
call fcn.00490210
add esp, 4
mov eax, dword [esp + 0x4c]
push eax
mov dword [esp + 0x5c], ebx
mov dword [esp + 0x60], ebx
mov dword [esp + 0x64], ebx
call fcn.00490210
add esp, 4
mov ecx, dword [esp + 0xd44]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebp
pop ebx
mov ecx, dword [esp + 0xd28]
xor ecx, esp
call fcn.0049021b
add esp, 0xd3c
ret 4