Function at 0x4515f0
Capabilities:
Query or enumerate registry key
Query or enumerate registry value

Disassembly:
push 0x2cc
mov eax, 0x4c7017
call fcn.00496608
mov edi, dword [ebp + 8]
xor esi, esi
mov dword [ebp - 0x2d8], edi
xor eax, eax
mov dword [ebp - 0x2d0], esi
mov dword [edi], vtable.Cmm::CStringT_wchar_t_.0
mov dword [edi + 4], esi
mov dword [edi + 0x14], esi
mov dword [edi + 0x18], 7
mov word [edi + 4], ax
push 0x1b0
lea eax, [ebp - 0x2c0]
mov dword [ebp - 4], esi
push esi
push eax
mov dword [ebp - 0x2d0], 1
call fcn.00498440
add esp, 0xc
lea eax, [ebp - 0x2c0]
push eax
call dword [sym.imp.KERNEL32.dll_GetDynamicTimeZoneInformation]
lea eax, [ebp - 0x2c4]
mov dword [ebp - 0x2c4], esi
push eax
push 0x20019
push esi
push str.SOFTWAREMicrosoftWindows_NTCurrentVersionTime_Zones
push 0x80000002
call dword [sym.imp.ADVAPI32.dll_RegOpenKeyExW]
push 4
pop ebx
test eax, eax
jne 0x45181b
lea eax, [ebp - 0x2c8]
mov dword [ebp - 0x2c8], esi
push eax
push 0x20019
push esi
lea eax, [ebp - 0x214]
push eax
push dword [ebp - 0x2c4]
call dword [sym.imp.ADVAPI32.dll_RegOpenKeyExW]
test eax, eax
jne 0x4516cf
lea eax, [ebp - 0x214]
mov ecx, edi
push eax
call sym.ZoomOutlookMAPI.exe_public:_void___thiscall_Cmm::CStringT_wchar_t_::Assign_wchar_t_const__
push dword [ebp - 0x2c8]
call dword [sym.imp.ADVAPI32.dll_RegCloseKey]
jmp 0x45180f
push 0x80
lea eax, [ebp - 0x90]
mov ebx, esi
push esi
push eax
call fcn.00498440
add esp, 0xc
lea eax, [ebp - 0x2cc]
push esi
push esi
push esi
push esi
push eax
lea eax, [ebp - 0x90]
push eax
push esi
jmp 0x4517db
lea eax, [ebp - 0x2c8]
inc ebx
push eax
push 0x20019
push esi
lea eax, [ebp - 0x90]
push eax
push dword [ebp - 0x2c4]
call dword [sym.imp.ADVAPI32.dll_RegOpenKeyExW]
test eax, eax
jne 0x4517b3
push 0x80
lea eax, [ebp - 0x110]
push esi
push eax
call fcn.00498440
add esp, 0xc
mov dword [ebp - 0x2d4], 0x80
lea eax, [ebp - 0x2d4]
push eax
lea eax, [ebp - 0x110]
push eax
push esi
push 0xffff
push 0x4ed2e8
push esi
push dword [ebp - 0x2c8]
call dword [sym.imp.ADVAPI32.dll_RegGetValueW]
push dword [ebp - 0x2c8]
call dword [sym.imp.ADVAPI32.dll_RegCloseKey]
lea ecx, [ebp - 0x214]
lea eax, [ebp - 0x110]
mov dx, word [eax]
cmp dx, word [ecx]
jne 0x4517aa
test dx, dx
je 0x4517a6
mov dx, word [eax + 2]
cmp dx, word [ecx + 2]
jne 0x4517aa
add eax, 4
add ecx, 4
test dx, dx
jne 0x451784
mov eax, esi
jmp 0x4517af
sbb eax, eax
or eax, 1
test eax, eax
je 0x4517fe
push 0x80
lea eax, [ebp - 0x90]
push esi
push eax
call fcn.00498440
add esp, 0xc
lea eax, [ebp - 0x2cc]
push esi
push esi
push esi
push esi
push eax
lea eax, [ebp - 0x90]
push eax
push ebx
push dword [ebp - 0x2c4]
mov dword [ebp - 0x2cc], 0x40
call dword [sym.imp.ADVAPI32.dll_RegEnumKeyExW]
cmp eax, 0x103
jne 0x4516fe
jmp 0x45180c
lea eax, [ebp - 0x90]
mov ecx, edi
push eax
call sym.ZoomOutlookMAPI.exe_public:_void___thiscall_Cmm::CStringT_wchar_t_::Assign_wchar_t_const__
push 4
pop ebx
push dword [ebp - 0x2c4]
call dword [sym.imp.ADVAPI32.dll_RegCloseKey]
cmp dword [edi + 0x14], esi
jne 0x451b44
cmp dword [ebp + 0xc], 0
jne 0x451b38
mov ecx, str.Russia_TZ_1_Standard_Time
lea eax, [ebp - 0x214]
mov dx, word [eax]
cmp dx, word [ecx]
jne 0x45185d
test dx, dx
je 0x451859
mov dx, word [eax + 2]
cmp dx, word [ecx + 2]
jne 0x45185d
add eax, ebx
add ecx, ebx
test dx, dx
jne 0x451839
mov eax, esi
jmp 0x451862
sbb eax, eax
or eax, 1
test eax, eax
jne 0x451870
push str.Kaliningrad_Standard_Time
jmp 0x451b3d
mov ecx, str.Russia_TZ_2_Standard_Time
lea eax, [ebp - 0x214]
mov dx, word [eax]
cmp dx, word [ecx]
jne 0x45189f
test dx, dx
je 0x45189b
mov dx, word [eax + 2]
cmp dx, word [ecx + 2]
jne 0x45189f
add eax, ebx
add ecx, ebx
test dx, dx
jne 0x45187b
mov eax, esi
jmp 0x4518a4
sbb eax, eax
or eax, 1
test eax, eax
jne 0x4518b2
push str.Russian_Standard_Time
jmp 0x451b3d
mov ecx, str.Russia_TZ_4_Standard_Time
lea eax, [ebp - 0x214]
mov dx, word [eax]
cmp dx, word [ecx]
jne 0x4518e1
test dx, dx
je 0x4518dd
mov dx, word [eax + 2]
cmp dx, word [ecx + 2]
jne 0x4518e1
add eax, ebx
add ecx, ebx
test dx, dx
jne 0x4518bd
mov eax, esi
jmp 0x4518e6
sbb eax, eax
or eax, 1
test eax, eax
jne 0x4518f4
push str.Ekaterinburg_Standard_Time
jmp 0x451b3d
mov ecx, str.Russia_TZ_6_Standard_Time
lea eax, [ebp - 0x214]
mov dx, word [eax]
cmp dx, word [ecx]
jne 0x451923
test dx, dx
je 0x45191f
mov dx, word [eax + 2]
cmp dx, word [ecx + 2]
jne 0x451923
add eax, ebx
add ecx, ebx
test dx, dx
jne 0x4518ff
mov eax, esi
jmp 0x451928
sbb eax, eax
or eax, 1
test eax, eax
jne 0x451936
push str.North_Asia_Standard_Time
jmp 0x451b3d
mov ecx, str.Russia_TZ_7_Standard_Time
lea eax, [ebp - 0x214]
mov dx, word [eax]
cmp dx, word [ecx]
jne 0x451965
test dx, dx
je 0x451961
mov dx, word [eax + 2]
cmp dx, word [ecx + 2]
jne 0x451965
add eax, ebx
add ecx, ebx
test dx, dx
jne 0x451941
mov eax, esi
jmp 0x45196a
sbb eax, eax
or eax, 1
test eax, eax
jne 0x451978
push str.North_Asia_East_Standard_Time
jmp 0x451b3d
mov ecx, str.Russia_TZ_8_Standard_Time
lea eax, [ebp - 0x214]
mov dx, word [eax]
cmp dx, word [ecx]
jne 0x4519a7
test dx, dx
je 0x4519a3
mov dx, word [eax + 2]
cmp dx, word [ecx + 2]
jne 0x4519a7
add eax, ebx
add ecx, ebx
test dx, dx
jne 0x451983
mov eax, esi
jmp 0x4519ac
sbb eax, eax
or eax, 1
test eax, eax
jne 0x4519ba
push str.Yakutsk_Standard_Time
jmp 0x451b3d
mov ecx, str.Russia_TZ_9_Standard_Time
lea eax, [ebp - 0x214]
mov dx, word [eax]
cmp dx, word [ecx]
jne 0x4519e9
test dx, dx
je 0x4519e5
mov dx, word [eax + 2]
cmp dx, word [ecx + 2]
jne 0x4519e9
add eax, ebx
add ecx, ebx
test dx, dx
jne 0x4519c5
mov eax, esi
jmp 0x4519ee
sbb eax, eax
or eax, 1
test eax, eax
jne 0x4519fc
push str.Vladivostok_Standard_Time
jmp 0x451b3d
mov ecx, str.Coordinated_Universal_Time
lea eax, [ebp - 0x214]
mov dx, word [eax]
cmp dx, word [ecx]
jne 0x451a2b
test dx, dx
je 0x451a27
mov dx, word [eax + 2]
cmp dx, word [ecx + 2]
jne 0x451a2b
add eax, ebx
add ecx, ebx
test dx, dx
jne 0x451a07
mov eax, esi
jmp 0x451a30
sbb eax, eax
or eax, 1
test eax, eax
je 0x451b38
mov ecx, str.Cabo_Verde_Standard_Time
lea eax, [ebp - 0x214]
mov dx, word [eax]
cmp dx, word [ecx]
jne 0x451a67
test dx, dx
je 0x451a63
mov dx, word [eax + 2]
cmp dx, word [ecx + 2]
jne 0x451a67
add eax, ebx
add ecx, ebx
test dx, dx
jne 0x451a43
mov eax, esi
jmp 0x451a6c
sbb eax, eax
or eax, 1
test eax, eax
jne 0x451a7a
push str.Cape_Verde_Standard_Time
jmp 0x451b3d
mov ecx, str.Jerusalem_Standard_Time
lea eax, [ebp - 0x214]
mov dx, word [eax]
cmp dx, word [ecx]
jne 0x451aa9
test dx, dx
je 0x451aa5
mov dx, word [eax + 2]
cmp dx, word [ecx + 2]
jne 0x451aa9
add eax, ebx
add ecx, ebx
test dx, dx
jne 0x451a85
mov eax, esi
jmp 0x451aae
sbb eax, eax
or eax, 1
test eax, eax
jne 0x451abc
push str.Israel_Standard_Time
jmp 0x451b3d
mov ecx, str.Novosibirsk_Standard_Time
lea eax, [ebp - 0x214]
mov dx, word [eax]
cmp dx, word [ecx]
jne 0x451aeb
test dx, dx
je 0x451ae7
mov dx, word [eax + 2]
cmp dx, word [ecx + 2]
jne 0x451aeb
add eax, ebx
add ecx, ebx
test dx, dx
jne 0x451ac7
mov eax, esi
jmp 0x451af0
sbb eax, eax
or eax, 1
test eax, eax
jne 0x451afb
push str.N._Central_Asia_Standard_Time
jmp 0x451b3d
mov ecx, str.Malay_Peninsula_Standard_Time
lea eax, [ebp - 0x214]
mov dx, word [eax]
cmp dx, word [ecx]
jne 0x451b28
test dx, dx
je 0x451b2d
mov dx, word [eax + 2]
cmp dx, word [ecx + 2]
jne 0x451b28
add eax, ebx
add ecx, ebx
test dx, dx
jne 0x451b06
jmp 0x451b2d
sbb esi, esi
or esi, 1
test esi, esi
jne 0x451b44
push str.Singapore_Standard_Time
jmp 0x451b3d
push 0x4ed2f0
mov ecx, edi
call sym.ZoomOutlookMAPI.exe_public:_void___thiscall_Cmm::CStringT_wchar_t_::Assign_wchar_t_const__
mov eax, edi
call fcn.004965b7
ret