Function at 0x12567c
Capabilities:
Delete registry value
Query or enumerate registry key
Query or enumerate registry value
Set registry value

Disassembly:
push ebp
mov ebp, esp
push ecx
mov ecx, 0x4b
push 0
push 0
dec ecx
jne 0x125685
push ecx
xchg dword [ebp - 4], ecx
push ebx
push esi
push edi
mov dword [ebp - 4], ecx
mov esi, edx
mov ebx, eax
lea edi, [ebp - 0x24]
xor eax, eax
push ebp
push 0x12637f
push dword fs:[eax]
mov dword fs:[eax], esp
mov eax, dword [ebp - 4]
call fcn.00013d18
push ebp
lea eax, [ebp - 0x34]
mov ecx, esi
mov edx, 0x126398
call fcn.00013ff4
mov eax, dword [ebp - 0x34]
call fcn.0012555c
pop ecx
xor eax, eax
mov dword [edi], eax
lea eax, [ebp - 0x18]
mov edx, 0x400
call fcn.000271f0
lea eax, [ebp - 0x28]
mov edx, 0x2800
call fcn.000271f0
push edi
mov eax, dword [0x2514d0]
mov eax, dword [eax]
add eax, 0xf003f
push eax
push 0
mov eax, ebx
call fcn.0001416c
push eax
push 0x80000002
call sub.advapi32.dll_RegOpenKeyExA_1
mov ebx, eax
test ebx, ebx
jne 0x1262d8
mov dword [ebp - 0x1c], 0x400
mov dword [ebp - 0x10], 0x2800
mov edx, dword [ebp - 0x1c]
mov eax, dword [ebp - 0x18]
call fcn.00018100
mov edx, dword [ebp - 0x10]
mov eax, dword [ebp - 0x28]
call fcn.00018100
xor eax, eax
mov dword [ebp - 0x14], eax
call fcn.0012500c
mov esi, eax
lea eax, [ebp - 0x38]
call fcn.000252ec
lea eax, [ebp - 0x38]
mov edx, 0x1263b0
call fcn.00013fb0
mov eax, dword [ebp - 0x38]
lea edx, [ebp - 0xc]
call fcn.000273cc
xor eax, eax
mov dword [ebp - 0x30], eax
push 0
push 0
push 0
push 0
lea eax, [ebp - 0x30]
push eax
push 0
push 0
push 0
push 0
push 0
push 0
mov eax, dword [edi]
push eax
call sub.advapi32.dll_RegQueryInfoKeyA
mov ebx, eax
test ebx, ebx
jne 0x125a4d
mov ebx, dword [ebp - 0x30]
cmp ebx, 0x3e8
jl 0x1257d3
push ebp
mov eax, dword [ebp - 0x30]
xor edx, edx
push edx
push eax
lea eax, [ebp - 0x40]
call fcn.00027444
mov ecx, dword [ebp - 0x40]
lea eax, [ebp - 0x3c]
mov edx, 0x1263c4
call fcn.00013ff4
mov eax, dword [ebp - 0x3c]
call fcn.001255ec
pop ecx
mov ebx, 0x3e8
jmp 0x125a02
push ebp
mov eax, dword [ebp - 0x30]
xor edx, edx
push edx
push eax
lea eax, [ebp - 0x48]
call fcn.00027444
mov ecx, dword [ebp - 0x48]
lea eax, [ebp - 0x44]
mov edx, 0x1263c4
call fcn.00013ff4
mov eax, dword [ebp - 0x44]
call fcn.0012555c
pop ecx
jmp 0x125a02
cmp dword [ebp - 0x14], 4
jne 0x1259d8
lea eax, [ebp - 0x4c]
mov edx, dword [ebp - 0x18]
call fcn.00013ee0
mov eax, dword [ebp - 0x4c]
lea edx, [ebp - 8]
call fcn.000273cc
mov edx, dword [ebp - 8]
mov eax, dword [ebp - 0xc]
call fcn.00014294
test eax, eax
jle 0x1258ba
lea edx, [ebp - 0x150]
movzx eax, si
call fcn.0002e7a8
lea edx, [ebp - 0x150]
lea eax, [ebp - 0x50]
call fcn.00013f4c
mov eax, dword [ebp - 0x50]
mov edx, dword [ebp - 8]
call fcn.00014294
test eax, eax
jne 0x1258ba
mov edx, dword [ebp - 8]
mov eax, 0x1263d8
call fcn.00014294
push eax
mov eax, dword [ebp - 8]
call fcn.00013fa8
sub eax, 3
pop edx
cmp edx, eax
jne 0x1258ba
push ebp
lea eax, [ebp - 0x158]
mov edx, dword [ebp - 0x18]
call fcn.00013ee0
mov ecx, dword [ebp - 0x158]
lea eax, [ebp - 0x154]
mov edx, 0x1263e8
call fcn.00013ff4
mov eax, dword [ebp - 0x154]
call fcn.0012555c
pop ecx
mov eax, dword [ebp - 0x18]
push eax
mov eax, dword [edi]
push eax
call sub.advapi32.dll_RegDeleteValueA
lea edx, [ebp - 0x15c]
mov eax, 0x1263fc
call fcn.000273cc
mov eax, dword [ebp - 0x15c]
mov edx, dword [ebp - 8]
call fcn.00014294
test eax, eax
jle 0x1259d8
lea edx, [ebp - 0x160]
mov eax, 0x126408
call fcn.000273cc
mov eax, dword [ebp - 0x160]
mov edx, dword [ebp - 8]
call fcn.00014294
test eax, eax
jle 0x1259d8
lea edx, [ebp - 0x164]
mov eax, 0x126418
call fcn.000273cc
mov eax, dword [ebp - 0x164]
mov edx, dword [ebp - 8]
call fcn.00014294
test eax, eax
jle 0x1259d8
push 0x126428
push 0
push 0x99
lea eax, [ebp - 0x170]
call fcn.00027444
push dword [ebp - 0x170]
push 0x126428
push 0
push 0x14
lea eax, [ebp - 0x174]
call fcn.00027444
push dword [ebp - 0x174]
push 0x126418
lea eax, [ebp - 0x16c]
mov edx, 5
call fcn.00014068
mov eax, dword [ebp - 0x16c]
lea edx, [ebp - 0x168]
call fcn.000273cc
mov eax, dword [ebp - 0x168]
mov edx, dword [ebp - 8]
call fcn.00014294
test eax, eax
jne 0x1259d8
push ebp
lea eax, [ebp - 0x17c]
mov edx, dword [ebp - 0x18]
call fcn.00013ee0
mov ecx, dword [ebp - 0x17c]
lea eax, [ebp - 0x178]
mov edx, 0x1263e8
call fcn.00013ff4
mov eax, dword [ebp - 0x178]
call fcn.0012555c
pop ecx
mov eax, dword [ebp - 0x18]
push eax
mov eax, dword [edi]
push eax
call sub.advapi32.dll_RegDeleteValueA
dec ebx
mov dword [ebp - 0x1c], 0x400
mov dword [ebp - 0x10], 0x2800
xor eax, eax
mov dword [ebp - 0x14], eax
mov edx, dword [ebp - 0x1c]
mov eax, dword [ebp - 0x18]
call fcn.00018100
mov edx, dword [ebp - 0x10]
mov eax, dword [ebp - 0x28]
call fcn.00018100
test ebx, ebx
jl 0x125a7d
lea eax, [ebp - 0x10]
push eax
mov eax, dword [ebp - 0x28]
push eax
lea eax, [ebp - 0x14]
push eax
push 0
lea eax, [ebp - 0x1c]
push eax
mov eax, dword [ebp - 0x18]
push eax
push ebx
mov eax, dword [edi]
push eax
call sub.advapi32.dll_RegEnumValueA
cmp eax, 0x103
jne 0x125801
mov eax, ebx
cdq
push edx
push eax
mov eax, dword [ebp - 0x30]
xor edx, edx
cmp edx, dword [esp + 4]
jne 0x125a43
cmp eax, dword [esp]
pop edx
pop eax
je 0x125801
jmp 0x125a7d
push ebp
lea edx, [ebp - 0x184]
mov eax, ebx
call fcn.00027478
mov ecx, dword [ebp - 0x184]
lea eax, [ebp - 0x180]
mov edx, 0x126434
call fcn.00013ff4
mov eax, dword [ebp - 0x180]
call fcn.001255ec
pop ecx
lea eax, [ebp - 0x18c]
call fcn.00027b40
mov eax, dword [ebp - 0x18c]
lea edx, [ebp - 0x188]
call fcn.00027578
lea eax, [ebp - 0x188]
push eax
lea eax, [ebp - 0x190]
call fcn.00025994
mov edx, dword [ebp - 0x190]
pop eax
call fcn.00013fb0
mov eax, dword [ebp - 0x188]
lea edx, [ebp - 0x2c]
call fcn.00027578
xor eax, eax
mov dword [ebp - 0x20], eax
lea eax, [ebp - 0xc]
mov ecx, 0x12644c
mov edx, dword [ebp - 0x2c]
call fcn.00013ff4
push 4
lea eax, [ebp - 0x20]
push eax
push 4
push 0
mov eax, dword [ebp - 0xc]
call fcn.0001416c
push eax
mov eax, dword [edi]
push eax
call sub.advapi32.dll_RegSetValueExA
mov ebx, eax
test ebx, ebx
je 0x125b33
push ebp
push dword [ebp - 0xc]
push 0x126464
lea edx, [ebp - 0x198]
mov eax, ebx
call fcn.00027478
push dword [ebp - 0x198]
lea eax, [ebp - 0x194]
mov edx, 3
call fcn.00014068
mov eax, dword [ebp - 0x194]
call fcn.001255ec
pop ecx
lea eax, [ebp - 0xc]
mov ecx, 0x126470
mov edx, dword [ebp - 0x2c]
call fcn.00013ff4
push 4
lea eax, [ebp - 0x20]
push eax
push 4
push 0
mov eax, dword [ebp - 0xc]
call fcn.0001416c
push eax
mov eax, dword [edi]
push eax
call sub.advapi32.dll_RegSetValueExA
mov ebx, eax
test ebx, ebx
je 0x125b9c
push ebp
push dword [ebp - 0xc]
push 0x126464
lea edx, [ebp - 0x1a0]
mov eax, ebx
call fcn.00027478
push dword [ebp - 0x1a0]
lea eax, [ebp - 0x19c]
mov edx, 3
call fcn.00014068
mov eax, dword [ebp - 0x19c]
call fcn.001255ec
pop ecx
lea eax, [ebp - 0x1a4]
call fcn.00046168
mov ecx, dword [ebp - 0x1a4]
lea eax, [ebp - 0xc]
mov edx, dword [ebp - 0x2c]
call fcn.00013ff4
push 4
lea eax, [ebp - 0x20]
push eax
push 4
push 0
mov eax, dword [ebp - 0xc]
call fcn.0001416c
push eax
mov eax, dword [edi]
push eax
call sub.advapi32.dll_RegSetValueExA
mov ebx, eax
test ebx, ebx
je 0x125c11
push ebp
push dword [ebp - 0xc]
push 0x126464
lea edx, [ebp - 0x1ac]
mov eax, ebx
call fcn.00027478
push dword [ebp - 0x1ac]
lea eax, [ebp - 0x1a8]
mov edx, 3
call fcn.00014068
mov eax, dword [ebp - 0x1a8]
call fcn.001255ec
pop ecx
lea eax, [ebp - 0x1b0]
call fcn.00046098
mov ecx, dword [ebp - 0x1b0]
lea eax, [ebp - 0xc]
mov edx, dword [ebp - 0x2c]
call fcn.00013ff4
push 4
lea eax, [ebp - 0x20]
push eax
push 4
push 0
mov eax, dword [ebp - 0xc]
call fcn.0001416c
push eax
mov eax, dword [edi]
push eax
call sub.advapi32.dll_RegSetValueExA
mov ebx, eax
test ebx, ebx
je 0x125c86
push ebp
push dword [ebp - 0xc]
push 0x126464
lea edx, [ebp - 0x1b8]
mov eax, ebx
call fcn.00027478
push dword [ebp - 0x1b8]
lea eax, [ebp - 0x1b4]
mov edx, 3
call fcn.00014068
mov eax, dword [ebp - 0x1b4]
call fcn.001255ec
pop ecx
lea eax, [ebp - 0x1bc]
call fcn.0002699c
mov ecx, dword [ebp - 0x1bc]
lea eax, [ebp - 0xc]
mov edx, dword [ebp - 0x2c]
call fcn.00013ff4
push 4
lea eax, [ebp - 0x20]
push eax
push 4
push 0
mov eax, dword [ebp - 0xc]
call fcn.0001416c
push eax
mov eax, dword [edi]
push eax
call sub.advapi32.dll_RegSetValueExA
mov ebx, eax
test ebx, ebx
je 0x125cfb
push ebp
push dword [ebp - 0xc]
push 0x126464
lea edx, [ebp - 0x1c4]
mov eax, ebx
call fcn.00027478
push dword [ebp - 0x1c4]
lea eax, [ebp - 0x1c0]
mov edx, 3
call fcn.00014068
mov eax, dword [ebp - 0x1c0]
call fcn.001255ec
pop ecx
lea eax, [ebp - 0x1c8]
call fcn.000461d8
mov ecx, dword [ebp - 0x1c8]
lea eax, [ebp - 0xc]
mov edx, dword [ebp - 0x2c]
call fcn.00013ff4
push 4
lea eax, [ebp - 0x20]
push eax
push 4
push 0
mov eax, dword [ebp - 0xc]
call fcn.0001416c
push eax
mov eax, dword [edi]
push eax
call sub.advapi32.dll_RegSetValueExA
mov ebx, eax
test ebx, ebx
je 0x125d70
push ebp
push dword [ebp - 0xc]
push 0x126464
lea edx, [ebp - 0x1d0]
mov eax, ebx
call fcn.00027478
push dword [ebp - 0x1d0]
lea eax, [ebp - 0x1cc]
mov edx, 3
call fcn.00014068
mov eax, dword [ebp - 0x1cc]
call fcn.001255ec
pop ecx
lea eax, [ebp - 0x1d4]
call fcn.00046030
mov ecx, dword [ebp - 0x1d4]
lea eax, [ebp - 0xc]
mov edx, dword [ebp - 0x2c]
call fcn.00013ff4
push 4
lea eax, [ebp - 0x20]
push eax
push 4
push 0
mov eax, dword [ebp - 0xc]
call fcn.0001416c
push eax
mov eax, dword [edi]
push eax
call sub.advapi32.dll_RegSetValueExA
mov ebx, eax
test ebx, ebx
je 0x125de5
push ebp
push dword [ebp - 0xc]
push 0x126464
lea edx, [ebp - 0x1dc]
mov eax, ebx
call fcn.00027478
push dword [ebp - 0x1dc]
lea eax, [ebp - 0x1d8]
mov edx, 3
call fcn.00014068
mov eax, dword [ebp - 0x1d8]
call fcn.001255ec
pop ecx
lea eax, [ebp - 0x1e0]
call fcn.00045f6c
mov ecx, dword [ebp - 0x1e0]
lea eax, [ebp - 0xc]
mov edx, dword [ebp - 0x2c]
call fcn.00013ff4
push 4
lea eax, [ebp - 0x20]
push eax
push 4
push 0
mov eax, dword [ebp - 0xc]
call fcn.0001416c
push eax
mov eax, dword [edi]
push eax
call sub.advapi32.dll_RegSetValueExA
mov ebx, eax
test ebx, ebx
je 0x125e5a
push ebp
push dword [ebp - 0xc]
push 0x126464
lea edx, [ebp - 0x1e8]
mov eax, ebx
call fcn.00027478
push dword [ebp - 0x1e8]
lea eax, [ebp - 0x1e4]
mov edx, 3
call fcn.00014068
mov eax, dword [ebp - 0x1e4]
call fcn.001255ec
pop ecx
lea eax, [ebp - 0x1ec]
call fcn.00046100
mov ecx, dword [ebp - 0x1ec]
lea eax, [ebp - 0xc]
mov edx, dword [ebp - 0x2c]
call fcn.00013ff4
push 4
lea eax, [ebp - 0x20]
push eax
push 4
push 0
mov eax, dword [ebp - 0xc]
call fcn.0001416c
push eax
mov eax, dword [edi]
push eax
call sub.advapi32.dll_RegSetValueExA
mov ebx, eax
test ebx, ebx
je 0x125ecf
push ebp
push dword [ebp - 0xc]
push 0x126464
lea edx, [ebp - 0x1f4]
mov eax, ebx
call fcn.00027478
push dword [ebp - 0x1f4]
lea eax, [ebp - 0x1f0]
mov edx, 3
call fcn.00014068
mov eax, dword [ebp - 0x1f0]
call fcn.001255ec
pop ecx
lea eax, [ebp - 0x1f8]
call fcn.00026a04
mov ecx, dword [ebp - 0x1f8]
lea eax, [ebp - 0xc]
mov edx, dword [ebp - 0x2c]
call fcn.00013ff4
push 4
lea eax, [ebp - 0x20]
push eax
push 4
push 0
mov eax, dword [ebp - 0xc]
call fcn.0001416c
push eax
mov eax, dword [edi]
push eax
call sub.advapi32.dll_RegSetValueExA
mov ebx, eax
test ebx, ebx
je 0x125f44
push ebp
push dword [ebp - 0xc]
push 0x126464
lea edx, [ebp - 0x200]
mov eax, ebx
call fcn.00027478
push dword [ebp - 0x200]
lea eax, [ebp - 0x1fc]
mov edx, 3
call fcn.00014068
mov eax, dword [ebp - 0x1fc]
call fcn.001255ec
pop ecx
lea eax, [ebp - 0x204]
call fcn.00026a68
mov ecx, dword [ebp - 0x204]
lea eax, [ebp - 0xc]
mov edx, dword [ebp - 0x2c]
call fcn.00013ff4
push 4
lea eax, [ebp - 0x20]
push eax
push 4
push 0
mov eax, dword [ebp - 0xc]
call fcn.0001416c
push eax
mov eax, dword [edi]
push eax
call sub.advapi32.dll_RegSetValueExA
mov ebx, eax
test ebx, ebx
je 0x125fb9
push ebp
push dword [ebp - 0xc]
push 0x126464
lea edx, [ebp - 0x20c]
mov eax, ebx
call fcn.00027478
push dword [ebp - 0x20c]
lea eax, [ebp - 0x208]
mov edx, 3
call fcn.00014068
mov eax, dword [ebp - 0x208]
call fcn.001255ec
pop ecx
lea eax, [ebp - 0x210]
call fcn.00026ad0
mov ecx, dword [ebp - 0x210]
lea eax, [ebp - 0xc]
mov edx, dword [ebp - 0x2c]
call fcn.00013ff4
push 4
lea eax, [ebp - 0x20]
push eax
push 4
push 0
mov eax, dword [ebp - 0xc]
call fcn.0001416c
push eax
mov eax, dword [edi]
push eax
call sub.advapi32.dll_RegSetValueExA
mov ebx, eax
test ebx, ebx
je 0x12602e
push ebp
push dword [ebp - 0xc]
push 0x126464
lea edx, [ebp - 0x218]
mov eax, ebx
call fcn.00027478
push dword [ebp - 0x218]
lea eax, [ebp - 0x214]
mov edx, 3
call fcn.00014068
mov eax, dword [ebp - 0x214]
call fcn.001255ec
pop ecx
lea eax, [ebp - 0x21c]
call fcn.00045e98
mov ecx, dword [ebp - 0x21c]
lea eax, [ebp - 0xc]
mov edx, dword [ebp - 0x2c]
call fcn.00013ff4
push 4
lea eax, [ebp - 0x20]
push eax
push 4
push 0
mov eax, dword [ebp - 0xc]
call fcn.0001416c
push eax
mov eax, dword [edi]
push eax
call sub.advapi32.dll_RegSetValueExA
mov ebx, eax
test ebx, ebx
je 0x1260a3
push ebp
push dword [ebp - 0xc]
push 0x126464
lea edx, [ebp - 0x224]
mov eax, ebx
call fcn.00027478
push dword [ebp - 0x224]
lea eax, [ebp - 0x220]
mov edx, 3
call fcn.00014068
mov eax, dword [ebp - 0x220]
call fcn.001255ec
pop ecx
lea eax, [ebp - 0x228]
call fcn.00045f04
mov ecx, dword [ebp - 0x228]
lea eax, [ebp - 0xc]
mov edx, dword [ebp - 0x2c]
call fcn.00013ff4
push 4
lea eax, [ebp - 0x20]
push eax
push 4
push 0
mov eax, dword [ebp - 0xc]
call fcn.0001416c
push eax
mov eax, dword [edi]
push eax
call sub.advapi32.dll_RegSetValueExA
mov ebx, eax
test ebx, ebx
je 0x126118
push ebp
push dword [ebp - 0xc]
push 0x126464
lea edx, [ebp - 0x230]
mov eax, ebx
call fcn.00027478
push dword [ebp - 0x230]
lea eax, [ebp - 0x22c]
mov edx, 3
call fcn.00014068
mov eax, dword [ebp - 0x22c]
call fcn.001255ec
pop ecx
lea eax, [ebp - 0x234]
call fcn.000267fc
mov ecx, dword [ebp - 0x234]
lea eax, [ebp - 0xc]
mov edx, dword [ebp - 0x2c]
call fcn.00013ff4
push 4
lea eax, [ebp - 0x20]
push eax
push 4
push 0
mov eax, dword [ebp - 0xc]
call fcn.0001416c
push eax
mov eax, dword [edi]
push eax
call sub.advapi32.dll_RegSetValueExA
mov ebx, eax
test ebx, ebx
je 0x12618d
push ebp
push dword [ebp - 0xc]
push 0x126464
lea edx, [ebp - 0x23c]
mov eax, ebx
call fcn.00027478
push dword [ebp - 0x23c]
lea eax, [ebp - 0x238]
mov edx, 3
call fcn.00014068
mov eax, dword [ebp - 0x238]
call fcn.001255ec
pop ecx
lea eax, [ebp - 0xc]
mov ecx, 0x126488
mov edx, dword [ebp - 0x2c]
call fcn.00013ff4
push 4
lea eax, [ebp - 0x20]
push eax
push 4
push 0
mov eax, dword [ebp - 0xc]
call fcn.0001416c
push eax
mov eax, dword [edi]
push eax
call sub.advapi32.dll_RegSetValueExA
mov ebx, eax
test ebx, ebx
je 0x1261f6
push ebp
push dword [ebp - 0xc]
push 0x126464
lea edx, [ebp - 0x244]
mov eax, ebx
call fcn.00027478
push dword [ebp - 0x244]
lea eax, [ebp - 0x240]
mov edx, 3
call fcn.00014068
mov eax, dword [ebp - 0x240]
call fcn.001255ec
pop ecx
lea eax, [ebp - 0xc]
mov edx, dword [0x25171c]
mov edx, dword [edx]
call fcn.00013db0
push 4
lea eax, [ebp - 0x20]
push eax
push 4
push 0
mov eax, dword [ebp - 0xc]
call fcn.0001416c
push eax
mov eax, dword [edi]
push eax
call sub.advapi32.dll_RegSetValueExA
mov ebx, eax
test ebx, ebx
je 0x12625f
push ebp
push dword [ebp - 0xc]
push 0x126464
lea edx, [ebp - 0x24c]
mov eax, ebx
call fcn.00027478
push dword [ebp - 0x24c]
lea eax, [ebp - 0x248]
mov edx, 3
call fcn.00014068
mov eax, dword [ebp - 0x248]
call fcn.001255ec
pop ecx
lea edx, [ebp - 0x250]
mov eax, esi
call fcn.00045de4
mov ecx, dword [ebp - 0x250]
lea eax, [ebp - 0xc]
mov edx, dword [ebp - 0x2c]
call fcn.00013ff4
push 4
lea eax, [ebp - 0x20]
push eax
push 4
push 0
mov eax, dword [ebp - 0xc]
call fcn.0001416c
push eax
mov eax, dword [edi]
push eax
call sub.advapi32.dll_RegSetValueExA
mov ebx, eax
test ebx, ebx
je 0x126308
push ebp
push dword [ebp - 0xc]
push 0x126464
lea edx, [ebp - 0x258]
mov eax, ebx
call fcn.00027478
push dword [ebp - 0x258]
lea eax, [ebp - 0x254]
mov edx, 3
call fcn.00014068
mov eax, dword [ebp - 0x254]
call fcn.001255ec
pop ecx
jmp 0x126308
push ebp
lea edx, [ebp - 0x260]
mov eax, ebx
call fcn.00027478
mov ecx, dword [ebp - 0x260]
lea eax, [ebp - 0x25c]
mov edx, 0x1264a0
call fcn.00013ff4
mov eax, dword [ebp - 0x25c]
call fcn.001255ec
pop ecx
lea eax, [ebp - 0x28]
mov edx, 0x2800
call fcn.00027218
lea eax, [ebp - 0x18]
mov edx, 0x400
call fcn.00027218
cmp dword [edi], 0
je 0x12632f
mov eax, dword [edi]
push eax
call sub.advapi32.dll_RegCloseKey_1
xor eax, eax
mov dword [edi], eax
push ebp
mov eax, 0x1264b0
call fcn.0012555c
pop ecx
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
push 0x126386
lea eax, [ebp - 0x260]
mov edx, 0x44
call fcn.00013d3c
lea eax, [ebp - 0x50]
mov edx, 8
call fcn.00013d3c
lea eax, [ebp - 0x2c]
call fcn.00013d18
lea eax, [ebp - 0xc]
mov edx, 2
call fcn.00013d3c
ret