Function at 0x419760
Capabilities:
Set registry value

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x4b4886
mov eax, dword fs:[0]
push eax
sub esp, 0x218
mov eax, dword [0x5603e8]
xor eax, ebp
mov dword [ebp - 0x10], eax
push ebx
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
push 0x206
xor ebx, ebx
lea ecx, [ebp - 0x216]
xor eax, eax
push ebx
push ecx
mov word [ebp - 0x218], ax
call sub.MSVCR100.dll_memset
add esp, 0xc
push 0x104
lea edx, [ebp - 0x218]
push edx
push 1
push ebx
push 2
call fcn.0043baf0
cmp eax, ebx
jl 0x419a4e
cmp dword [ebp + 8], ebx
je 0x4199ef
lea edi, [ebp - 0x218]
add edi, 0xfffffffe
mov edi, edi
mov ax, word [edi + 2]
add edi, 2
cmp ax, bx
jne 0x4197e0
mov eax, dword [0x4c7780]
mov dword [edi], eax
lea eax, [ebp - 0x218]
add eax, 0xfffffffe
lea esp, [esp]
mov cx, word [eax + 2]
add eax, 2
cmp cx, bx
jne 0x419800
mov ecx, dword [0x4cb6d8]
mov edx, dword [0x4cb6dc]
mov dword [eax], ecx
mov ecx, dword [0x4cb6e0]
mov dword [eax + 4], edx
mov edx, dword [0x4cb6e4]
mov dword [eax + 8], ecx
mov ecx, dword [0x4cb6e8]
mov dword [eax + 0xc], edx
mov dx, word [0x4cb6ec]
mov dword [eax + 0x10], ecx
mov word [eax + 0x14], dx
mov dword [ebp - 0x224], ebx
mov dword [ebp - 0x220], ebx
mov dword [ebp - 0x21c], ebx
push ebx
push ebx
push 0x2001f
push ebx
push ebx
push str.TypeLib
push ebx
mov dword [ebp - 4], ebx
call fcn.0043b220
add esp, 4
push eax
lea ecx, [ebp - 0x224]
call fcn.004174b0
mov eax, dword [ebp - 0x224]
push ebx
push ebx
push 0x2001f
push ebx
push ebx
push str.4A1D9D13_2EC6_495b_A5B5_848228E0A1CE
push eax
lea ecx, [ebp - 0x224]
call fcn.004174b0
mov ecx, dword [ebp - 0x224]
push ebx
push ebx
push 0x2001f
push ebx
push ebx
push 0x4cb66c
push ecx
lea ecx, [ebp - 0x224]
call fcn.004174b0
mov esi, dword [sym.imp.KERNEL32.dll_lstrlenW]
push str.Upgrade_WPS_Office_3.0_Object_Library__Beta_
call esi
mov edi, dword [sym.imp.ADVAPI32.dll_RegSetValueExW]
lea edx, [eax + eax + 2]
mov eax, dword [ebp - 0x224]
push edx
push str.Upgrade_WPS_Office_3.0_Object_Library__Beta_
push 1
push ebx
push ebx
push eax
call edi
mov ecx, dword [ebp - 0x224]
push ebx
push ebx
push 0x2001f
push ebx
push ebx
push 0x4c9330
push ecx
lea ecx, [ebp - 0x224]
call fcn.004174b0
mov edx, dword [ebp - 0x224]
push ebx
push ebx
push 0x2001f
push ebx
push ebx
push str.win32
push edx
lea ecx, [ebp - 0x224]
call fcn.004174b0
lea eax, [ebp - 0x218]
push eax
call esi
lea ecx, [eax + eax + 2]
mov eax, dword [ebp - 0x224]
push ecx
lea edx, [ebp - 0x218]
push edx
push 1
push ebx
push ebx
push eax
call edi
push ebx
push ebx
push 0x2001f
push ebx
push ebx
push str.TypeLib
push ebx
call fcn.0043b220
add esp, 4
push eax
lea ecx, [ebp - 0x224]
call fcn.004174b0
mov ecx, dword [ebp - 0x224]
push ebx
push ebx
push 0x2001f
push ebx
push ebx
push str.4A1D9D13_2EC6_495b_A5B5_848228E0A1CE
push ecx
lea ecx, [ebp - 0x224]
call fcn.004174b0
mov edx, dword [ebp - 0x224]
push ebx
push ebx
push 0x2001f
push ebx
push ebx
push 0x4cb66c
push edx
lea ecx, [ebp - 0x224]
call fcn.004174b0
mov eax, dword [ebp - 0x224]
push ebx
push ebx
push 0x2001f
push ebx
push ebx
push str.FLAGS
push eax
lea ecx, [ebp - 0x224]
call fcn.004174b0
push 0x4c9330
call esi
mov esi, dword [ebp - 0x224]
lea ecx, [eax + eax + 2]
push ecx
push 0x4c9330
push 1
push ebx
push ebx
push esi
call edi
cmp esi, ebx
je 0x419a4c
push esi
jmp 0x419a46
mov dword [ebp - 0x224], ebx
mov dword [ebp - 0x220], ebx
mov dword [ebp - 0x21c], ebx
push 0x2001f
push str.TypeLib
push ebx
mov dword [ebp - 4], 1
call fcn.0043b220
add esp, 4
push eax
lea ecx, [ebp - 0x224]
call fcn.00412570
test eax, eax
jne 0x419a3b
push str.4A1D9D13_2EC6_495b_A5B5_848228E0A1CE
lea ecx, [ebp - 0x224]
call fcn.004194e0
mov eax, dword [ebp - 0x224]
cmp eax, ebx
je 0x419a4c
push eax
call dword [sym.imp.ADVAPI32.dll_RegCloseKey]
xor eax, eax
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 0x10]
xor ecx, ebp
call fcn.004b12f6
mov esp, ebp
pop ebp
ret