Function at 0x45e75286
Capabilities:
Query or enumerate registry key

Disassembly:
push 0x138
mov eax, 0x45fb6d81
call fcn.45fb1a70
xor ebx, ebx
mov dword [ebp - 0x130], ecx
mov esi, edx
mov dword [ebp - 0x12c], ebx
xor edi, edi
inc edi
mov dword [ebp - 4], edi
cmp esi, ebx
jne 0x45e752b4
jmp 0x45e75605
mov eax, 0x45db1998
call fcn.45e285b4
test eax, eax
je 0x45e752c7
jmp 0x45e75605
lea eax, [ebp - 0x12c]
push eax
push 0x45dc5694
push edi
push ebx
push 0x45db1f90
call dword [sym.imp.ole32.dll_CoCreateInstance]
cmp eax, ebx
jge 0x45e752e9
jmp 0x45e75605
mov eax, esi
mov dword [ebp - 0x128], eax
cmp dword [esi], ebx
jne 0x45e75379
cmp dword [ebp + 8], ebx
jne 0x45e75605
push 0x40
lea eax, [ebp - 0x114]
push eax
push dword [ebp - 0x130]
call dword [sym.imp.ole32.dll_StringFromGUID2]
mov dword [ebp - 0x13c], ebx
mov byte [ebp - 4], 6
lea eax, [ebp - 0x114]
push eax
call dword [sym.imp.KERNEL32.dll_lstrlenW]
mov edi, eax
inc edi
push ebx
mov eax, edi
cdq
push 2
push edx
push eax
mov dword [ebp - 0x128], edi
call fcn.45fb1c40
cmp edx, ebx
jg 0x45e75401
jl 0x45e75359
cmp eax, 0x7fffffff
ja 0x45e75401
push edx
push eax
lea ecx, [ebp - 0x128]
call fcn.45e26fd8
mov edi, dword [ebp - 0x128]
pop ecx
pop ecx
jmp 0x45e75406
mov eax, dword [ebp - 0x128]
mov esi, dword [eax + 4]
lea edi, [ebp - 0x124]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
lea edx, [ebp - 0x124]
movsd dword es:[edi], dword [esi]
push edx
push 1
push dword [ebp - 0x130]
movsd dword es:[edi], dword [esi]
cmp dword [ebp + 8], ebx
je 0x45e753d1
cmp dword [eax], 1
mov eax, dword [ebp - 0x12c]
mov ecx, dword [eax]
push eax
jne 0x45e753ad
call dword [ecx + 0x14]
jmp 0x45e753b0
call dword [ecx + 0x1c]
mov esi, eax
cmp esi, ebx
jge 0x45e753e7
or dword [ebp - 4], 0xffffffff
mov eax, dword [ebp - 0x12c]
cmp eax, ebx
je 0x45e753ca
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov eax, esi
jmp 0x45e7561b
cmp dword [eax], 1
mov eax, dword [ebp - 0x12c]
mov ecx, dword [eax]
push eax
jne 0x45e753e4
call dword [ecx + 0x18]
jmp 0x45e753e7
call dword [ecx + 0x20]
add dword [ebp - 0x128], 8
mov eax, dword [ebp - 0x128]
cmp dword [eax], ebx
jne 0x45e75373
jmp 0x45e752f9
mov eax, 0x80070057
cmp eax, ebx
jl 0x45e755f6
cmp edi, 0x400
jg 0x45e7542c
push edi
call fcn.45e26f23
pop ecx
test al, al
je 0x45e7542c
mov eax, edi
call fcn.45fb13c0
mov eax, esp
jmp 0x45e75438
push edi
lea esi, [ebp - 0x13c]
call fcn.45e26ee3
push 3
push edi
lea ecx, [ebp - 0x114]
push ecx
mov esi, eax
call fcn.45e26f9e
mov dword [ebp - 0x130], eax
cmp eax, ebx
je 0x45e755f6
push 0x45dc52c4
lea eax, [ebp - 0x94]
push 0x80
push eax
call dword [fcn.45db1414]
add esp, 0xc
push eax
call fcn.45e27001
pop ecx
push dword [ebp - 0x130]
lea eax, [ebp - 0x94]
push eax
call fcn.45e751b8
lea eax, [ebp - 0x94]
push 0x45dc52cc
push eax
call fcn.45e751b8
mov edi, SysReAllocStringLen
add esp, 0x10
mov dword [ebp - 0x144], edi
mov dword [ebp - 0x140], ebx
mov byte [ebp - 4], 7
mov dword [ebp - 0x138], ebx
mov dword [ebp - 0x134], ebx
mov byte [ebp - 4], 8
push 0x20019
lea eax, [ebp - 0x94]
push eax
push edi
lea ecx, [ebp - 0x138]
mov dword [ebp - 0x128], ebx
call fcn.45e751de
test eax, eax
jne 0x45e7552d
push ebx
push ebx
push ebx
push ebx
push ebx
push ebx
push ebx
lea eax, [ebp - 0x128]
push eax
push ebx
push ebx
push ebx
push dword [ebp - 0x138]
call dword [sym.imp.ADVAPI32.dll_RegQueryInfoKeyA]
lea ecx, [ebp - 0x138]
mov esi, eax
call fcn.45e25bf4
cmp esi, ebx
jne 0x45e7552d
cmp dword [ebp - 0x128], ebx
jne 0x45e7552d
lea eax, [ebp - 0x94]
push eax
lea esi, [ebp - 0x144]
call fcn.45e75226
push 0x45dc52c4
lea eax, [ebp - 0x94]
push 0x80
push eax
call dword [fcn.45db1414]
add esp, 0xc
push eax
call fcn.45e27001
pop ecx
push dword [ebp - 0x130]
lea eax, [ebp - 0x94]
push eax
call fcn.45e751b8
lea eax, [ebp - 0x94]
push 0x45dc52e4
push eax
call fcn.45e751b8
add esp, 0x10
push 0x20019
lea eax, [ebp - 0x94]
push eax
push edi
lea ecx, [ebp - 0x138]
call fcn.45e751de
cmp eax, ebx
jne 0x45e755d8
push ebx
push ebx
push ebx
push ebx
push ebx
push ebx
push ebx
lea eax, [ebp - 0x128]
push eax
push ebx
push ebx
push ebx
push dword [ebp - 0x138]
call dword [sym.imp.ADVAPI32.dll_RegQueryInfoKeyA]
lea ecx, [ebp - 0x138]
mov esi, eax
call fcn.45e25bf4
cmp esi, ebx
jne 0x45e755d8
cmp dword [ebp - 0x128], ebx
jne 0x45e755d8
lea eax, [ebp - 0x94]
push eax
lea esi, [ebp - 0x144]
call fcn.45e75226
mov byte [ebp - 4], 7
lea ecx, [ebp - 0x138]
call fcn.45e25bf4
mov byte [ebp - 4], 6
lea ecx, [ebp - 0x144]
call fcn.45e25bf4
mov byte [ebp - 4], 1
lea esi, [ebp - 0x13c]
call fcn.45e270ac
or dword [ebp - 4], 0xffffffff
mov eax, dword [ebp - 0x12c]
cmp eax, ebx
je 0x45e75619
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
xor eax, eax
lea esp, [ebp - 0x154]
call fcn.45fb1b02
ret 4