Function at 0x461680
Capabilities:
Link many functions at runtime
Query or enumerate registry value

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x5278a8
push 0x51e2be
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
sub esp, 0x21c
push ebx
push esi
push edi
mov dword [ebp - 0x18], esp
xor ebx, ebx
mov dword [ebp - 4], ebx
mov dword [ebp - 4], 1
call fcn.00519850
test eax, eax
je 0x461872
push 0x57e950
push 0x55dc80
push 0x55b108
call fcn.00461640
push 0x57e980
push 0x55dc6c
push 0x55b108
call fcn.00461640
push 0x57e97c
push 0x55dc54
push 0x55b108
call fcn.00461640
push 0x57e978
push 0x55dc40
push 0x55b108
call fcn.00461640
push 0x57e974
push 0x55dc28
push 0x55b108
call fcn.00461640
push 0x57e970
push 0x55dc10
push 0x55b108
call fcn.00461640
add esp, 0x48
push 0x57e8e4
push 0x55dbfc
push 0x55b108
call fcn.00461640
push 0x57e95c
push 0x55dbe4
push 0x55b108
call fcn.00461640
push 0x57e960
push 0x55dbcc
push 0x55b108
call fcn.00461640
push 0x57e968
push 0x55dbb8
push 0x55b108
call fcn.00461640
push 0x57e92c
push 0x55dba4
push 0x55db90
call fcn.00461640
push 0x57e920
push 0x55db78
push 0x55b108
call fcn.00461640
add esp, 0x48
push 0x57e944
push 0x55db5c
push 0x55b108
call fcn.00461640
push 0x57e918
push 0x55db44
push 0x55b108
call fcn.00461640
push 0x57e914
push 0x55db24
push 0x55b108
call fcn.00461640
push 0x57e910
push 0x55db08
push 0x55b108
call fcn.00461640
push 0x57e9a4
push 0x55daf0
push 0x55b144
call fcn.00461640
push 0x57e934
push 0x55dae0
push 0x55b108
call fcn.00461640
add esp, 0x48
push 0x57e930
push 0x55dad0
push 0x55b108
call fcn.00461640
push 0x57e96c
push 0x55dab8
push 0x55b108
call fcn.00461640
push 0x57e964
push 0x55daa8
push 0x55b108
call fcn.00461640
add esp, 0x24
call fcn.0051d313
call dword [sym.imp.KERNEL32.dll_GetCurrentThread]
push eax
call fcn.0051d6d7
push 0x460c50
push 0x57e900
call fcn.0051d746
mov word [ebp - 0x224], bx
mov ecx, 0x81
xor eax, eax
lea edi, [ebp - 0x222]
rep stosd dword es:[edi], eax
stosw word es:[edi], ax
push 0x55b084
push 0x57147c
push 0x53dc6c
push 0x103
lea eax, [ebp - 0x224]
push eax
call dword [sym.imp.MSVCRT.dll__snwprintf]
add esp, 0x14
push ebx
lea ecx, [ebp - 0x224]
push ecx
mov ecx, 0x571210
call fcn.0040ca30
test eax, eax
je 0x4618f6
lea edx, [ebp - 0x224]
push edx
call dword [sym.imp.KERNEL32.dll_LoadLibraryW]
mov dword [0x57e990], eax
cmp dword [0x57e94c], ebx
je 0x46190d
push 0x460ed0
push 0x57e94c
call fcn.0051d746
mov eax, dword [0x57e990]
cmp eax, ebx
je 0x4619b3
push 0x55da90
push eax
mov esi, dword [sym.imp.KERNEL32.dll_GetProcAddress]
call esi
mov dword [0x57e9a8], eax
cmp eax, ebx
je 0x461940
push 0x45e9e0
push 0x57e8fc
call fcn.0051d746
push 0x55da78
mov eax, dword [0x57e990]
push eax
call esi
mov dword [0x57e9ac], eax
cmp eax, ebx
je 0x461965
push 0x45ea50
push 0x57e8f8
call fcn.0051d746
push 0x55da5c
mov ecx, dword [0x57e990]
push ecx
call esi
mov dword [0x57e9b0], eax
cmp eax, ebx
je 0x46198b
push 0x45ea90
push 0x57e8f4
call fcn.0051d746
push 0x55da40
mov edx, dword [0x57e990]
push edx
call esi
mov dword [0x57e9b4], eax
cmp eax, ebx
je 0x4619b9
push 0x45eae0
push 0x57e8f0
call fcn.0051d746
jmp 0x4619b9
mov esi, dword [sym.imp.KERNEL32.dll_GetProcAddress]
push 0x55da28
call dword [sym.imp.KERNEL32.dll_GetModuleHandleW]
mov edi, eax
mov dword [ebp - 0x22c], edi
cmp edi, ebx
je 0x461a10
push 0x55da14
push edi
call esi
mov dword [0x57e99c], eax
cmp eax, ebx
je 0x4619f0
push 0x4609d0
push 0x57e99c
call fcn.0051d746
push 0x55da00
push edi
call esi
mov dword [0x57e9a0], eax
cmp eax, ebx
je 0x461a10
push 0x460a00
push 0x57e9a0
call fcn.0051d746
cmp dword [0x57e950], ebx
je 0x461a27
push 0x45ed50
push 0x57e950
call fcn.0051d746
cmp dword [0x58b508], ebx
jne 0x461a3f
cmp dword [0x58b50c], ebx
jne 0x461a3f
cmp dword [0x58b510], ebx
je 0x461a4e
push 0x461460
push 0x57e8ec
call fcn.0051d746
cmp dword [0x58b50c], ebx
je 0x461a65
push 0x461550
push 0x57e8e8
call fcn.0051d746
mov eax, 4
mov dword [ebp - 0x1c], eax
mov dword [ebp - 0x228], eax
lea eax, [ebp - 0x228]
push eax
push 0x56cf9c
lea ecx, [ebp - 0x1c]
push ecx
push 0x55d9e0
push 0x55d9c0
push reloc.OLEAUT32.dll_SysReAllocString
call dword [sym.imp.SHLWAPI.dll_SHGetValueW]
cmp dword [0x56cf9c], ebx
jne 0x461abf
push 0xffffffffffffffff
lea edx, [ebp - 0x10]
push edx
call sub.MSVCRT.dll__local_unwind2
add esp, 8
mov ecx, dword [ebp - 0x10]
mov dword fs:[0], ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret
cmp dword [0x57e91c], ebx
je 0x461ad6
push 0x460e60
push 0x57e91c
call fcn.0051d746
mov dword [ebp - 4], ebx
call fcn.00461ae0
jmp 0x461af1
mov dword [ebp - 4], 0xffffffff
mov ecx, dword [ebp - 0x10]
mov dword fs:[0], ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret