Function at 0x1000d4b7
Capabilities:
Query or enumerate registry value
Set registry value

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x10c
push ebx
push esi
mov esi, dword [sym.imp.USER32.dll_FindWindowA]
push edi
mov edi, str.Hello_World
xor ebx, ebx
push edi
push ebx
mov dword [ebp - 4], ebx
call esi
push edi
push ebx
call esi
push edi
push ebx
call esi
push edi
push ebx
call esi
push edi
push ebx
call esi
push edi
push ebx
call esi
push edi
push ebx
call esi
push edi
push ebx
call esi
push edi
push ebx
call esi
push ebx
push ebx
call dword [sym.imp.GDI32.dll_SelectObject]
push edi
push ebx
call esi
push ebx
push ebx
call dword [sym.imp.GDI32.dll_SelectObject]
push edi
push ebx
call esi
push ebx
push ebx
call dword [sym.imp.GDI32.dll_SelectObject]
push edi
push ebx
call esi
push ebx
push ebx
call dword [sym.imp.GDI32.dll_SelectObject]
push edi
push ebx
call esi
push ebx
push ebx
call dword [sym.imp.GDI32.dll_SelectObject]
push edi
push ebx
call esi
push ebx
push ebx
call dword [sym.imp.GDI32.dll_SelectObject]
push edi
push ebx
call esi
push ebx
push ebx
call dword [sym.imp.GDI32.dll_SelectObject]
push edi
push ebx
call esi
push ebx
push ebx
call dword [sym.imp.GDI32.dll_SelectObject]
push ebx
lea eax, [ebp - 4]
push eax
push ebx
push 0xf003f
push ebx
push ebx
push ebx
push dword [ebp + 0xc]
push dword [ebp + 8]
call dword [sym.imp.ADVAPI32.dll_RegCreateKeyExA]
test eax, eax
jne 0x1000d6ec
push edi
push ebx
mov dword [ebp - 8], 0x104
call esi
push edi
push ebx
call esi
push edi
push ebx
call esi
push edi
push ebx
call esi
push edi
push ebx
call esi
push edi
push ebx
call esi
push edi
push ebx
call esi
push edi
push ebx
call esi
push edi
push ebx
call esi
push ebx
push ebx
call dword [sym.imp.GDI32.dll_SelectObject]
push edi
push ebx
call esi
push ebx
push ebx
call dword [sym.imp.GDI32.dll_SelectObject]
push edi
push ebx
call esi
push ebx
push ebx
call dword [sym.imp.GDI32.dll_SelectObject]
push edi
push ebx
call esi
push ebx
push ebx
call dword [sym.imp.GDI32.dll_SelectObject]
push edi
push ebx
call esi
push ebx
push ebx
call dword [sym.imp.GDI32.dll_SelectObject]
push edi
push ebx
call esi
push ebx
push ebx
call dword [sym.imp.GDI32.dll_SelectObject]
push edi
push ebx
call esi
push ebx
push ebx
call dword [sym.imp.GDI32.dll_SelectObject]
push edi
push ebx
call esi
push ebx
push ebx
call dword [sym.imp.GDI32.dll_SelectObject]
push 0x104
lea eax, [ebp - 0x10c]
push ebx
push eax
call fcn.1000ff40
add esp, 0xc
lea eax, [ebp - 8]
push eax
lea eax, [ebp - 0x10c]
push eax
push ebx
push ebx
push dword [ebp + 0x10]
push dword [ebp - 4]
call dword [sym.imp.ADVAPI32.dll_RegQueryValueExA]
test eax, eax
jne 0x1000d646
push dword [ebp + 0x14]
lea eax, [ebp - 0x10c]
push eax
call dword [sym.imp.KERNEL32.dll_lstrcmpA]
test eax, eax
je 0x1000d6e3
push edi
push ebx
call esi
push edi
push ebx
call esi
push edi
push ebx
call esi
push edi
push ebx
call esi
push edi
push ebx
call esi
push edi
push ebx
call esi
push edi
push ebx
call esi
push edi
push ebx
call esi
push edi
push ebx
call esi
push ebx
push ebx
call dword [sym.imp.GDI32.dll_SelectObject]
push edi
push ebx
call esi
push ebx
push ebx
call dword [sym.imp.GDI32.dll_SelectObject]
push edi
push ebx
call esi
push ebx
push ebx
call dword [sym.imp.GDI32.dll_SelectObject]
push edi
push ebx
call esi
push ebx
push ebx
call dword [sym.imp.GDI32.dll_SelectObject]
push edi
push ebx
call esi
push ebx
push ebx
call dword [sym.imp.GDI32.dll_SelectObject]
push edi
push ebx
call esi
push ebx
push ebx
call dword [sym.imp.GDI32.dll_SelectObject]
push edi
push ebx
call esi
push ebx
push ebx
call dword [sym.imp.GDI32.dll_SelectObject]
push edi
push ebx
call esi
push ebx
push ebx
call dword [sym.imp.GDI32.dll_SelectObject]
push dword [ebp + 0x14]
call dword [sym.imp.KERNEL32.dll_lstrlenA]
inc eax
push eax
push dword [ebp + 0x14]
push 1
push ebx
push dword [ebp + 0x10]
push dword [ebp - 4]
call dword [sym.imp.ADVAPI32.dll_RegSetValueExA]
push dword [ebp - 4]
call dword [sym.imp.ADVAPI32.dll_RegCloseKey]
pop edi
pop esi
pop ebx
leave
ret