Function at 0x41120a
Capabilities:
Set registry value

Disassembly:
mov edi, edi
push ebp
mov ebp, esp
sub esp, 0x38
mov eax, dword [0x424210]
xor eax, ebp
mov dword [ebp - 4], eax
push ebx
push esi
mov esi, dword [0x425e0c]
xor ebx, ebx
push edi
push 0xffffffffffffffff
mov dword [ebp - 0x30], 0x2c
call dword [sym.imp.USER32.dll_SetThreadDpiAwarenessContext]
mov edi, eax
lea eax, [ebp - 0x30]
push eax
push esi
call dword [sym.imp.USER32.dll_GetWindowPlacement]
push edi
mov esi, eax
call dword [sym.imp.USER32.dll_SetThreadDpiAwarenessContext]
push 4
pop edi
test esi, esi
je 0x411276
xor esi, esi
mov edx, 0x424f68
mov ecx, esi
mov eax, dword [edx + ecx*4]
lea edi, [ebp - 0x14]
cmp eax, dword [edi + ecx*4]
push 4
pop edi
jne 0x411271
inc ecx
cmp ecx, edi
jne 0x41125c
jmp 0x411278
xor ebx, ebx
inc ebx
jmp 0x41129c
xor esi, esi
cmp dword [0x425bdc], ebx
jne 0x41129c
cmp dword [0x425be0], ebx
jne 0x41129c
cmp dword [0x425bd8], ebx
jne 0x41129c
cmp dword [0x425bd4], ebx
je 0x411644
lea eax, [ebp - 0x38]
push eax
push 0x402088
push 0x80000001
call dword [sym.imp.ADVAPI32.dll_RegCreateKeyW]
test eax, eax
jne 0x411644
cmp dword [0x425bd8], eax
je 0x411444
mov eax, dword [0x424ed8]
push edi
mov dword [ebp - 0x34], eax
lea eax, [ebp - 0x34]
push eax
push edi
push esi
push 0x4020c0
push dword [ebp - 0x38]
call dword [sym.imp.ADVAPI32.dll_RegSetValueExW]
mov eax, dword [0x424edc]
push edi
mov dword [ebp - 0x34], eax
lea eax, [ebp - 0x34]
push eax
push edi
push esi
push 0x4020dc
push dword [ebp - 0x38]
call dword [sym.imp.ADVAPI32.dll_RegSetValueExW]
mov eax, dword [0x424ee0]
push edi
mov dword [ebp - 0x34], eax
lea eax, [ebp - 0x34]
push eax
push edi
push esi
push 0x4020f8
push dword [ebp - 0x38]
call dword [sym.imp.ADVAPI32.dll_RegSetValueExW]
movzx eax, byte [0x424ee4]
push edi
mov dword [ebp - 0x34], eax
lea eax, [ebp - 0x34]
push eax
push edi
push esi
push 0x40210c
push dword [ebp - 0x38]
call dword [sym.imp.ADVAPI32.dll_RegSetValueExW]
movzx eax, byte [0x424ee5]
push edi
mov dword [ebp - 0x34], eax
lea eax, [ebp - 0x34]
push eax
push edi
push esi
push 0x402120
push dword [ebp - 0x38]
call dword [sym.imp.ADVAPI32.dll_RegSetValueExW]
movzx eax, byte [0x424ee6]
push edi
mov dword [ebp - 0x34], eax
lea eax, [ebp - 0x34]
push eax
push edi
push esi
push 0x402138
push dword [ebp - 0x38]
call dword [sym.imp.ADVAPI32.dll_RegSetValueExW]
movzx eax, byte [0x424ee7]
push edi
mov dword [ebp - 0x34], eax
lea eax, [ebp - 0x34]
push eax
push edi
push esi
push 0x402150
push dword [ebp - 0x38]
call dword [sym.imp.ADVAPI32.dll_RegSetValueExW]
movzx eax, byte [0x424ee8]
push edi
mov dword [ebp - 0x34], eax
lea eax, [ebp - 0x34]
push eax
push edi
push esi
push 0x402164
push dword [ebp - 0x38]
call dword [sym.imp.ADVAPI32.dll_RegSetValueExW]
movzx eax, byte [0x424ee9]
push edi
mov dword [ebp - 0x34], eax
lea eax, [ebp - 0x34]
push eax
push edi
push esi
push 0x402184
push dword [ebp - 0x38]
call dword [sym.imp.ADVAPI32.dll_RegSetValueExW]
movzx eax, byte [0x424eea]
push edi
mov dword [ebp - 0x34], eax
lea eax, [ebp - 0x34]
push eax
push edi
push esi
push 0x4021a4
push dword [ebp - 0x38]
call dword [sym.imp.ADVAPI32.dll_RegSetValueExW]
movzx eax, byte [0x424eeb]
push edi
mov dword [ebp - 0x34], eax
lea eax, [ebp - 0x34]
push eax
push edi
push esi
push 0x4021b8
push dword [ebp - 0x38]
call dword [sym.imp.ADVAPI32.dll_RegSetValueExW]
mov ecx, dword [ebp - 0x38]
mov edx, 0x4021dc
push 0x20
push 0x424eec
call fcn.004110b2
mov eax, dword [0x424318]
push edi
mov dword [ebp - 0x34], eax
lea eax, [ebp - 0x34]
push eax
push edi
push esi
push 0x4021f4
push dword [ebp - 0x38]
call dword [sym.imp.ADVAPI32.dll_RegSetValueExW]
cmp dword [0x425be0], 0
je 0x411487
mov eax, dword [0x425bf0]
push edi
mov dword [ebp - 0x34], eax
lea eax, [ebp - 0x34]
push eax
push edi
push esi
push 0x40220c
push dword [ebp - 0x38]
call dword [sym.imp.ADVAPI32.dll_RegSetValueExW]
mov eax, dword [0x425bfc]
push edi
mov dword [ebp - 0x34], eax
lea eax, [ebp - 0x34]
push eax
push edi
push esi
push 0x402218
push dword [ebp - 0x38]
call dword [sym.imp.ADVAPI32.dll_RegSetValueExW]
cmp dword [0x425bdc], 0
je 0x411530
mov ecx, dword [ebp - 0x38]
mov edx, 0x40222c
push 0x28
push 0x424f78
call fcn.004110b2
mov ecx, dword [ebp - 0x38]
mov edx, 0x402240
push 0x28
push 0x424fc8
call fcn.004110b2
mov eax, dword [0x424e70]
push edi
mov dword [ebp - 0x34], eax
lea eax, [ebp - 0x34]
push eax
push edi
push esi
push 0x402254
push dword [ebp - 0x38]
call dword [sym.imp.ADVAPI32.dll_RegSetValueExW]
mov eax, dword [0x424e78]
push edi
mov dword [ebp - 0x34], eax
lea eax, [ebp - 0x34]
push eax
push edi
push esi
push 0x40226c
push dword [ebp - 0x38]
call dword [sym.imp.ADVAPI32.dll_RegSetValueExW]
mov eax, dword [0x424e6c]
push edi
mov dword [ebp - 0x34], eax
lea eax, [ebp - 0x34]
push eax
push edi
push esi
push 0x402288
push dword [ebp - 0x38]
call dword [sym.imp.ADVAPI32.dll_RegSetValueExW]
mov eax, dword [0x424e74]
push edi
mov dword [ebp - 0x34], eax
lea eax, [ebp - 0x34]
push eax
push edi
push esi
push 0x4022a0
push dword [ebp - 0x38]
call dword [sym.imp.ADVAPI32.dll_RegSetValueExW]
test ebx, ebx
je 0x4115a6
mov eax, dword [ebp - 0x14]
push edi
mov dword [ebp - 0x34], eax
lea eax, [ebp - 0x34]
push eax
push edi
push esi
push 0x4022bc
push dword [ebp - 0x38]
call dword [sym.imp.ADVAPI32.dll_RegSetValueExW]
mov eax, dword [ebp - 0x10]
push edi
mov dword [ebp - 0x34], eax
lea eax, [ebp - 0x34]
push eax
push edi
push esi
push 0x4022d4
push dword [ebp - 0x38]
call dword [sym.imp.ADVAPI32.dll_RegSetValueExW]
mov eax, dword [ebp - 0xc]
sub eax, dword [ebp - 0x14]
push edi
mov dword [ebp - 0x34], eax
lea eax, [ebp - 0x34]
push eax
push edi
push esi
push 0x4022ec
push dword [ebp - 0x38]
call dword [sym.imp.ADVAPI32.dll_RegSetValueExW]
mov eax, dword [ebp - 8]
sub eax, dword [ebp - 0x10]
push edi
mov dword [ebp - 0x34], eax
lea eax, [ebp - 0x34]
push eax
push edi
push esi
push 0x402308
push dword [ebp - 0x38]
call dword [sym.imp.ADVAPI32.dll_RegSetValueExW]
cmp dword [0x425bd4], 0
je 0x41163b
movzx eax, byte [0x425e10]
push edi
mov dword [ebp - 0x34], eax
lea eax, [ebp - 0x34]
push eax
push edi
push esi
push 0x402324
push dword [ebp - 0x38]
call dword [sym.imp.ADVAPI32.dll_RegSetValueExW]
movzx eax, byte [0x425e11]
push edi
mov dword [ebp - 0x34], eax
lea eax, [ebp - 0x34]
push eax
push edi
push esi
push 0x402338
push dword [ebp - 0x38]
call dword [sym.imp.ADVAPI32.dll_RegSetValueExW]
movzx eax, byte [0x425e12]
push edi
mov dword [ebp - 0x34], eax
lea eax, [ebp - 0x34]
push eax
push edi
push esi
push 0x402350
push dword [ebp - 0x38]
call dword [sym.imp.ADVAPI32.dll_RegSetValueExW]
mov ecx, dword [ebp - 0x38]
mov esi, 0x80
push esi
push 0x425d00
mov edx, 0x402368
call fcn.004110b2
mov ecx, dword [ebp - 0x38]
mov edx, 0x402384
push esi
push 0x425c00
call fcn.004110b2
push dword [ebp - 0x38]
call dword [sym.imp.ADVAPI32.dll_RegCloseKey]
mov ecx, dword [ebp - 4]
pop edi
pop esi
xor ecx, ebp
pop ebx
call fcn.00421870
leave
ret