Function at 0x45e2b8
Capabilities:
Query or enumerate registry value
Set registry value

Disassembly:
push ebp
mov ebp, esp
add esp, 0xffffffac
push ebx
push esi
push edi
xor ebx, ebx
mov dword [ebp - 0x48], ebx
mov dword [ebp - 0x50], ebx
mov dword [ebp - 0x54], ebx
mov dword [ebp - 0x4c], ebx
mov dword [ebp - 0x40], ebx
mov dword [ebp - 0x44], ebx
mov dword [ebp - 0x38], ebx
mov dword [ebp - 0x3c], ebx
mov dword [ebp - 0x1c], ebx
mov dword [ebp - 0x20], ebx
mov dword [ebp - 0xc], ecx
mov dword [ebp - 8], edx
mov dword [ebp - 4], eax
mov eax, dword [ebp - 4]
call fcn.00405410
mov eax, dword [ebp - 8]
call fcn.00405410
xor eax, eax
push ebp
push 0x45e66c
push dword fs:[eax]
mov dword fs:[eax], esp
mov byte [ebp - 0xd], 0
push 0
lea eax, [ebp - 0x3c]
push eax
mov ecx, 0x45e688
mov edx, 0x45e694
mov eax, dword [ebp - 4]
call fcn.00456d0c
mov eax, dword [ebp - 0x3c]
lea edx, [ebp - 0x38]
call fcn.004565a0
mov edx, dword [ebp - 0x38]
lea eax, [ebp - 4]
call fcn.00405008
push 0
lea eax, [ebp - 0x44]
push eax
mov ecx, 0x45e688
mov edx, 0x45e694
mov eax, dword [ebp - 8]
call fcn.00456d0c
mov eax, dword [ebp - 0x44]
lea edx, [ebp - 0x40]
call fcn.004565a0
mov edx, dword [ebp - 0x40]
lea eax, [ebp - 8]
call fcn.00405008
cmp dword [ebp - 4], 0
je 0x45e637
cmp dword [ebp - 8], 0
je 0x45e637
mov eax, dword [ebp - 4]
cmp byte [eax], 0x5c
jne 0x45e39a
lea eax, [ebp - 4]
push eax
mov ecx, 0x7fffffff
mov edx, 2
mov eax, dword [ebp - 4]
call fcn.00405480
mov eax, dword [ebp - 8]
cmp byte [eax], 0x5c
jne 0x45e3b8
lea eax, [ebp - 8]
push eax
mov ecx, 0x7fffffff
mov edx, 2
mov eax, dword [ebp - 8]
call fcn.00405480
mov eax, dword [ebp - 4]
mov edx, dword [ebp - 8]
call fcn.0040536c
jne 0x45e3d1
mov eax, dword [ebp + 0xc]
cmp eax, dword [ebp + 8]
je 0x45e637
mov edx, dword [ebp + 8]
mov eax, dword [ebp - 8]
call fcn.0045d42c
test al, al
jne 0x45e3f3
mov edx, dword [ebp + 8]
mov eax, dword [ebp - 8]
call fcn.0045d22c
test al, al
je 0x45e637
cmp dword [ebp - 0xc], 0
jle 0x45e4da
mov dl, 1
mov eax, dword [0x4159bc]
call fcn.00404150
mov dword [ebp - 0x30], eax
xor eax, eax
push ebp
push 0x45e4d3
push dword fs:[eax]
mov dword fs:[eax], esp
mov ecx, dword [ebp + 0xc]
mov edx, dword [ebp - 0x30]
mov eax, dword [ebp - 4]
call fcn.0045dae4
test al, al
jne 0x45e436
call fcn.004049f8
jmp 0x45e637
mov eax, dword [ebp - 0x30]
mov edx, dword [eax]
call dword [edx + 0x14]
mov esi, eax
dec esi
test esi, esi
jl 0x45e4bd
inc esi
xor ebx, ebx
mov eax, dword [ebp + 0xc]
push eax
mov eax, dword [ebp + 8]
push eax
push dword [ebp - 8]
push 0x45e688
lea ecx, [ebp - 0x4c]
mov edx, ebx
mov eax, dword [ebp - 0x30]
mov edi, dword [eax]
call dword [edi + 0xc]
push dword [ebp - 0x4c]
lea eax, [ebp - 0x48]
mov edx, 3
call fcn.004052e8
mov eax, dword [ebp - 0x48]
push eax
push dword [ebp - 4]
push 0x45e688
lea ecx, [ebp - 0x54]
mov edx, ebx
mov eax, dword [ebp - 0x30]
mov edi, dword [eax]
call dword [edi + 0xc]
push dword [ebp - 0x54]
lea eax, [ebp - 0x50]
mov edx, 3
call fcn.004052e8
mov eax, dword [ebp - 0x50]
mov ecx, dword [ebp - 0xc]
dec ecx
pop edx
call fcn.0045e2b8
test al, al
jne 0x45e4b9
call fcn.004049f8
jmp 0x45e637
inc ebx
dec esi
jne 0x45e448
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
push 0x45e4da
mov eax, dword [ebp - 0x30]
call fcn.00404180
ret
lea eax, [ebp + 0xc]
push eax
push 1
push 0
mov eax, dword [ebp - 4]
call fcn.00405420
push eax
mov eax, dword [ebp + 0xc]
push eax
call sub.advapi32.dll_RegOpenKeyExA
test eax, eax
jne 0x45e637
xor eax, eax
push ebp
push 0x45e62c
push dword fs:[eax]
mov dword fs:[eax], esp
xor eax, eax
mov dword [ebp - 0x14], eax
xor eax, eax
mov dword [ebp - 0x18], eax
cmp dword [ebp - 0x18], 0
jne 0x45e615
mov dword [ebp - 0x28], 0x400
mov dword [ebp - 0x24], 0x19000
lea eax, [ebp - 0x20]
mov edx, dword [ebp - 0x28]
call fcn.004055ac
lea eax, [ebp - 0x1c]
mov edx, dword [ebp - 0x24]
call fcn.004055ac
lea eax, [ebp - 0x24]
push eax
lea eax, [ebp - 0x1c]
call fcn.00405478
push eax
lea eax, [ebp - 0x2c]
push eax
push 0
lea eax, [ebp - 0x28]
push eax
lea eax, [ebp - 0x20]
call fcn.00405478
push eax
mov eax, dword [ebp - 0x14]
push eax
mov eax, dword [ebp + 0xc]
push eax
call sub.advapi32.dll_RegEnumValueA
mov dword [ebp - 0x18], eax
cmp dword [ebp - 0x18], 0
jne 0x45e60b
lea eax, [ebp - 0x34]
push eax
push 0xf003f
push 0
mov eax, dword [ebp - 8]
call fcn.00405420
push eax
mov eax, dword [ebp + 8]
push eax
call sub.advapi32.dll_RegOpenKeyExA
test eax, eax
je 0x45e5a7
call fcn.004049f8
jmp 0x45e637
xor eax, eax
push ebp
push 0x45e601
push dword fs:[eax]
mov dword fs:[eax], esp
mov eax, dword [ebp - 0x24]
push eax
lea eax, [ebp - 0x1c]
call fcn.00405478
push eax
mov eax, dword [ebp - 0x2c]
push eax
push 0
mov eax, dword [ebp - 0x20]
call fcn.00405420
push eax
mov eax, dword [ebp - 0x34]
push eax
call sub.advapi32.dll_RegSetValueExA
test eax, eax
je 0x45e5ea
call fcn.004049f8
call fcn.004049f8
jmp 0x45e637
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
push 0x45e608
mov eax, dword [ebp - 0x34]
push eax
call sub.advapi32.dll_RegCloseKey
ret
cmp dword [ebp - 0x18], 0
je 0x45e51e
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
push 0x45e633
mov eax, dword [ebp + 0xc]
push eax
call sub.advapi32.dll_RegCloseKey
ret
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
push 0x45e673
lea eax, [ebp - 0x54]
mov edx, 8
call fcn.00404f94
lea eax, [ebp - 0x20]
mov edx, 2
call fcn.00404f94
lea eax, [ebp - 8]
mov edx, 2
call fcn.00404f94
ret