Function at 0x43a2c0
Capabilities:
Set registry value

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x630
mov eax, dword [0x481288]
xor eax, ebp
mov dword [ebp - 8], eax
push 0x208
push 0x104
lea eax, [ebp - 0x630]
push eax
call fcn.004420b0
add esp, 0xc
lea ecx, [ebp - 0x630]
push ecx
call fcn.00437cb0
add esp, 4
push 0x4722c4
lea edx, [ebp - 0x630]
push edx
push 0x4722e0
push 0x208
push 0x104
lea eax, [ebp - 0x420]
push eax
call fcn.004157ac
add esp, 0x18
lea ecx, [ebp - 0x420]
push ecx
push 0x4722ec
push 0x4722f0
push 0x472318
call dword [sym.imp.KERNEL32.dll_WritePrivateProfileStringW]
lea edx, [ebp - 0x210]
push edx
push 0x472328
call fcn.00438b10
add esp, 8
lea eax, [ebp - 0x214]
push eax
push 0x20006
push 0
lea ecx, [ebp - 0x210]
push ecx
push reloc.OLEAUT32.dll_SysReAllocString
call dword [sym.imp.ADVAPI32.dll_RegOpenKeyExW]
mov dword [ebp - 0x424], eax
cmp dword [ebp - 0x424], 0
je 0x43a39d
lea edx, [ebp - 0x214]
push edx
lea eax, [ebp - 0x210]
push eax
push reloc.OLEAUT32.dll_SysReAllocString
call dword [sym.imp.ADVAPI32.dll_RegCreateKeyW]
push 4
push 0x48a7e0
push 4
push 0
push str.nUseEnviroment
mov ecx, dword [ebp - 0x214]
push ecx
call dword [sym.imp.ADVAPI32.dll_RegSetValueExW]
mov dword [ebp - 0x424], eax
push 4
push 0x48a7e8
push 4
push 0
push str.nQQGame
mov edx, dword [ebp - 0x214]
push edx
call dword [sym.imp.ADVAPI32.dll_RegSetValueExW]
mov dword [ebp - 0x424], eax
push 4
push 0x48a7ec
push 4
push 0
push str.nQQCom
mov eax, dword [ebp - 0x214]
push eax
call dword [sym.imp.ADVAPI32.dll_RegSetValueExW]
mov dword [ebp - 0x424], eax
push 4
push 0x48a7f0
push 4
push 0
push str.nShortcutDesktop
mov ecx, dword [ebp - 0x214]
push ecx
call dword [sym.imp.ADVAPI32.dll_RegSetValueExW]
mov dword [ebp - 0x424], eax
push 4
push 0x48a7f4
push 4
push 0
push str.nShortcutQuickLaunch
mov edx, dword [ebp - 0x214]
push edx
call dword [sym.imp.ADVAPI32.dll_RegSetValueExW]
mov dword [ebp - 0x424], eax
push 4
push 0x48a7f8
push 4
push 0
push str.nRunExe
mov eax, dword [ebp - 0x214]
push eax
call dword [sym.imp.ADVAPI32.dll_RegSetValueExW]
mov dword [ebp - 0x424], eax
push 4
push 0x48a7fc
push 4
push 0
push str.nShowNewFeature
mov ecx, dword [ebp - 0x214]
push ecx
call dword [sym.imp.ADVAPI32.dll_RegSetValueExW]
mov dword [ebp - 0x424], eax
push 4
push 0x48a800
push 4
push 0
push str.nStartRunExe
mov edx, dword [ebp - 0x214]
push edx
call dword [sym.imp.ADVAPI32.dll_RegSetValueExW]
mov dword [ebp - 0x424], eax
lea eax, [ebp - 4]
push eax
push 0x20006
push 0
lea ecx, [ebp - 0x210]
push ecx
push connect
call dword [sym.imp.ADVAPI32.dll_RegOpenKeyExW]
mov dword [ebp - 0x424], eax
cmp dword [ebp - 0x424], 0
je 0x43a4f7
lea edx, [ebp - 4]
push edx
lea eax, [ebp - 0x210]
push eax
push reloc.OLEAUT32.dll_SysReAllocString
call dword [sym.imp.ADVAPI32.dll_RegCreateKeyW]
push 4
push 0x48a850
push 4
push 0
push 0x47242c
mov ecx, dword [ebp - 4]
push ecx
call dword [sym.imp.ADVAPI32.dll_RegSetValueExW]
mov dword [ebp - 0x424], eax
mov dword [ebp - 0x218], 0
cmp dword [0x48a868], 0
je 0x43a539
mov edx, dword [ebp - 0x218]
or edx, 1
mov dword [ebp - 0x218], edx
cmp dword [0x48a86c], 0
je 0x43a551
mov eax, dword [ebp - 0x218]
or eax, 2
mov dword [ebp - 0x218], eax
cmp dword [0x48a834], 0
je 0x43a572
cmp dword [0x48a868], 0
jne 0x43a572
mov ecx, dword [ebp - 0x218]
or ecx, 4
mov dword [ebp - 0x218], ecx
cmp dword [0x48a830], 0
je 0x43a593
cmp dword [0x48a86c], 0
jne 0x43a593
mov edx, dword [ebp - 0x218]
or edx, 8
mov dword [ebp - 0x218], edx
push 4
lea eax, [ebp - 0x218]
push eax
push 4
push 0
push str.nShowSo
mov ecx, dword [ebp - 0x214]
push ecx
call dword [sym.imp.ADVAPI32.dll_RegSetValueExW]
mov dword [ebp - 0x424], eax
mov edx, dword [ebp - 0x214]
push edx
call dword [sym.imp.ADVAPI32.dll_RegCloseKey]
mov eax, dword [ebp - 4]
push eax
call dword [sym.imp.ADVAPI32.dll_RegCloseKey]
mov eax, 1
mov ecx, dword [ebp - 8]
xor ecx, ebp
call fcn.004151d0
mov esp, ebp
pop ebp
ret