Function at 0x405690
Capabilities:
Query or enumerate registry value
Set registry value

Disassembly:
sub esp, 8
push ebx
push ebp
mov ebp, dword [esp + 0x1c]
mov eax, ebp
push esi
lea edx, [eax + 1]
nop
mov cl, byte [eax]
inc eax
test cl, cl
jne 0x4056a0
sub eax, edx
add eax, 5
push eax
call fcn.0040baaf
push 0
push ebp
mov esi, eax
push str._s__d
push esi
call fcn.0040ba57
mov ebx, dword [esp + 0x30]
add esp, 0x14
lea eax, [esp + 0xc]
push eax
push ebx
push 0x80000000
call dword [0x413028]
test eax, eax
jne 0x405963
push edi
push ebx
call dword [0x4131ec]
mov ecx, dword [esp + 0x10]
inc eax
push eax
push ebx
push 1
push 0
push 0
push ecx
call dword [0x413004]
mov edx, dword [esp + 0x10]
push edx
mov edi, eax
call dword [section..rdata]
test eax, eax
jne 0x405962
test edi, edi
jne 0x405962
mov eax, ebx
lea edx, [eax + 1]
mov cl, byte [eax]
inc eax
test cl, cl
jne 0x405720
sub eax, edx
add eax, 0xd
push eax
call fcn.0040baaf
push ebx
mov edi, eax
push str._sDefaultIcon
push edi
call fcn.0040ba57
add esp, 0x10
lea eax, [esp + 0x10]
push eax
push edi
push 0x80000000
call dword [0x413028]
test eax, eax
jne 0x405788
push esi
call dword [0x4131ec]
mov ecx, dword [esp + 0x10]
inc eax
push eax
push esi
push 1
push 0
push 0
push ecx
call dword [0x413004]
mov edx, dword [esp + 0x10]
push edx
mov ebx, eax
call dword [section..rdata]
test eax, eax
jne 0x405788
test ebx, ebx
je 0x40579f
push edi
call fcn.0040b029
push esi
call fcn.0040b029
add esp, 8
pop edi
pop esi
pop ebp
pop ebx
add esp, 8
ret
push edi
call fcn.0040b029
push esi
call fcn.0040b029
mov eax, ebp
add esp, 8
lea edx, [eax + 1]
mov cl, byte [eax]
inc eax
test cl, cl
jne 0x4057b3
sub eax, edx
add eax, 7
push eax
call fcn.0040baaf
push str.___1_
push ebp
mov esi, eax
push str._s_s
push esi
call fcn.0040ba57
mov ebp, dword [esp + 0x30]
mov eax, ebp
add esp, 0x14
lea edx, [eax + 1]
mov cl, byte [eax]
inc eax
test cl, cl
jne 0x4057e4
sub eax, edx
add eax, 0x1b
push eax
call fcn.0040baaf
mov edi, eax
mov eax, dword [esp + 0x24]
push str.command
push eax
push str._s_shellopen_s
push edi
call fcn.0040ba57
add esp, 0x14
lea ecx, [esp + 0x10]
push ecx
push edi
push 0x80000000
call dword [0x413028]
test eax, eax
jne 0x405855
push esi
call dword [0x4131ec]
mov edx, dword [esp + 0x10]
inc eax
push eax
push esi
push 1
push 0
push 0
push edx
call dword [0x413004]
mov ebx, eax
mov eax, dword [esp + 0x10]
push eax
call dword [section..rdata]
test eax, eax
jne 0x405855
test ebx, ebx
je 0x40586c
push esi
call fcn.0040b029
push edi
call fcn.0040b029
add esp, 8
pop edi
pop esi
pop ebp
pop ebx
add esp, 8
ret
push esi
call fcn.0040b029
push edi
call fcn.0040b029
mov al, byte [ebp]
add esp, 8
test al, al
je 0x405962
push 0x208
mov dword [esp + 0x14], 0x208
call fcn.0040baaf
add esp, 4
lea ecx, [esp + 0x10]
push ecx
mov edi, eax
push edi
push ebp
push 0x80000000
call dword [0x41300c]
test eax, eax
jne 0x405901
mov eax, edi
lea edx, [eax + 1]
mov cl, byte [eax]
inc eax
test cl, cl
jne 0x4058b8
sub eax, edx
mov dword [esp + 0x14], eax
je 0x405901
mov esi, dword [esp + 0x20]
mov eax, edi
lea ecx, [ecx]
mov dl, byte [eax]
mov bl, byte [esi]
mov cl, dl
cmp dl, bl
jne 0x4058f8
test cl, cl
je 0x4058f4
mov dl, byte [eax + 1]
mov bl, byte [esi + 1]
mov cl, dl
cmp dl, bl
jne 0x4058f8
add eax, 2
add esi, 2
test cl, cl
jne 0x4058d0
xor eax, eax
jmp 0x4058fd
sbb eax, eax
sbb eax, 0xffffffff
test eax, eax
je 0x405959
mov eax, dword [esp + 0x20]
push 0
push eax
push ebp
call fcn.004055e0
add esp, 0xc
test al, al
je 0x405959
mov eax, ebp
lea edx, [eax + 1]
lea ebx, [ebx]
mov cl, byte [eax]
inc eax
test cl, cl
jne 0x405920
sub eax, edx
add eax, 0xa
push eax
call fcn.0040baaf
push ebp
mov esi, eax
push str._sShellNew
push esi
call fcn.0040ba57
push str.NullFile
push 0x413811
push edi
call fcn.004055e0
push esi
call fcn.0040b029
add esp, 0x20
push edi
call fcn.0040b029
add esp, 4
pop edi
pop esi
pop ebp
pop ebx
add esp, 8
ret