Function at 0x45ddb0
Capabilities:
Set registry value

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x574645
mov eax, dword fs:[0]
push eax
sub esp, 0x88
mov eax, dword [0x8f9064]
xor eax, ebp
mov dword [ebp - 0x14], eax
push ebx
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov dword [ebp - 0x10], esp
mov ebx, ecx
mov edi, dword [ebp + 8]
xor eax, eax
mov dword [ebp - 4], 0
mov edx, dword [ebx + 4]
mov ecx, edx
mov dword [ebp - 0x64], ebx
mov dword [ebp - 0x1c], 0
mov dword [ebp - 0x18], 7
mov word [ebp - 0x2c], ax
lea esi, [ecx + 2]
nop dword [eax]
mov ax, word [ecx]
add ecx, 2
test ax, ax
jne 0x45de10
sub ecx, esi
sar ecx, 1
push ecx
push edx
lea ecx, [ebp - 0x2c]
call fcn.0045e3d0
push 0
lea ecx, [ebp - 0x60]
mov byte [ebp - 4], 1
cmp dword [ebp - 0x18], 8
lea eax, [ebp - 0x2c]
push ecx
cmovae eax, dword [ebp - 0x2c]
push 0
push 0x2011f
push 0
push 0
push 0
push eax
push 0x80000001
mov dword [ebp - 0x60], 0
call dword [sym.imp.ADVAPI32.dll_RegCreateKeyExW]
test eax, eax
jne 0x45e043
mov esi, dword [ebp - 0x60]
mov dword [ebp - 0x60], esi
mov byte [ebp - 4], 3
mov edx, dword [ebp - 0x18]
cmp edx, 8
jb 0x45deac
mov ecx, dword [ebp - 0x2c]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x45dea2
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
jbe 0x45dea2
call dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
push edx
push ecx
call fcn.0056d673
add esp, 8
xor eax, eax
mov dword [ebp - 0x1c], 0
mov edx, edi
mov dword [ebp - 0x18], 7
lea ecx, [ebp - 0x5c]
mov word [ebp - 0x2c], ax
call fcn.00485ee0
mov edi, eax
mov byte [ebp - 4], 4
xor eax, eax
mov edx, dword [ebx + 0xc]
mov ecx, edx
mov dword [ebp - 0x34], 0
mov dword [ebp - 0x30], 7
mov word [ebp - 0x44], ax
lea ebx, [ecx + 2]
nop dword [eax]
mov ax, word [ecx]
add ecx, 2
test ax, ax
jne 0x45def0
sub ecx, ebx
sar ecx, 1
push ecx
push edx
lea ecx, [ebp - 0x44]
call fcn.0045e3d0
mov byte [ebp - 4], 5
cmp dword [edi + 0x14], 8
mov eax, dword [edi + 0x10]
lea ecx, [eax*2 + 2]
jb 0x45df1f
mov edi, dword [edi]
cmp dword [ebp - 0x30], 8
lea eax, [ebp - 0x44]
push ecx
cmovae eax, dword [ebp - 0x44]
push edi
push 1
push 0
push eax
push esi
call dword [sym.imp.ADVAPI32.dll_RegSetValueExW]
test eax, eax
jne 0x45e05f
mov edx, dword [ebp - 0x30]
cmp edx, 8
jb 0x45df7c
mov ecx, dword [ebp - 0x44]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x45df72
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
jbe 0x45df72
call dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
push edx
push ecx
call fcn.0056d673
add esp, 8
xor eax, eax
mov dword [ebp - 0x34], 0
lea ecx, [ebp - 0x5c]
mov dword [ebp - 0x30], 7
mov word [ebp - 0x44], ax
call fcn.0045e370
test esi, esi
je 0x45dfeb
cmp esi, 0x80000001
je 0x45dfeb
cmp esi, 0x80000002
je 0x45dfeb
cmp esi, 0x80000000
je 0x45dfeb
cmp esi, 0x80000005
je 0x45dfeb
cmp esi, 0x80000007
je 0x45dfeb
cmp esi, 0x80000004
je 0x45dfeb
cmp esi, 0x80000060
je 0x45dfeb
cmp esi, 0x80000050
je 0x45dfeb
cmp esi, 0x80000003
je 0x45dfeb
push esi
call dword [sym.imp.ADVAPI32.dll_RegCloseKey]
mov al, 1
jmp 0x45e025
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 0x14]
xor ecx, ebp
call fcn.0056d0b2
mov esp, ebp
pop ebp
ret 4
push str.RegCreateKeyExW_failed.
push eax
lea ecx, [ebp - 0x80]
call fcn.0045d9a0
push 0x8e4948
lea eax, [ebp - 0x80]
push eax
call sub.VCRUNTIME140.dll__CxxThrowException
push str.Cannot_write_string_value:_RegSetValueExW_failed.
push eax
lea ecx, [ebp - 0x94]
call fcn.0045d9a0
push 0x8e4948
lea eax, [ebp - 0x94]
push eax
call sub.VCRUNTIME140.dll__CxxThrowException
int3