Function at 0x41a830
Capabilities:
Set registry value

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x4b499b
mov eax, dword fs:[0]
push eax
sub esp, 0x220
mov eax, dword [0x5603e8]
xor eax, ebp
mov dword [ebp - 0x10], eax
push ebx
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
xor ebx, ebx
xor esi, esi
mov dword [ebp - 0x228], esi
mov dword [ebp - 0x224], ebx
mov dword [ebp - 0x220], ebx
mov dword [ebp - 4], ebx
cmp dword [ebp + 8], ebx
je 0x41ab75
push ebx
call fcn.0043b220
add esp, 4
lea ecx, [ebp - 0x22c]
push ecx
lea edx, [ebp - 0x21c]
push edx
push ebx
push 2
push ebx
push ebx
push ebx
push str.CLSID00024512_0000_0000_C000_000000000046
push eax
mov dword [ebp - 0x21c], ebx
call dword [sym.imp.ADVAPI32.dll_RegCreateKeyExW]
cmp eax, ebx
jne 0x41aa96
mov esi, dword [ebp - 0x21c]
push 0x206
lea ecx, [ebp - 0x216]
xor eax, eax
push ebx
push ecx
mov dword [ebp - 0x228], esi
mov dword [ebp - 0x224], ebx
mov word [ebp - 0x218], ax
call sub.MSVCR100.dll_memset
add esp, 0xc
push 0x104
lea edx, [ebp - 0x218]
push edx
push 1
push ebx
push 2
call fcn.0043baf0
test eax, eax
jns 0x41a916
cmp esi, ebx
je 0x41a90c
push esi
call dword [sym.imp.ADVAPI32.dll_RegCloseKey]
mov eax, 0x80004005
jmp 0x41abdd
lea edi, [ebp - 0x218]
add edi, 0xfffffffe
nop
mov ax, word [edi + 2]
add edi, 2
cmp ax, bx
jne 0x41a920
mov ecx, 6
mov esi, str._refedit.dll
rep movsd dword es:[edi], dword [esi]
push 0x4c79ac
push str.RefEdit.Ctrl
push 0x4c79ac
lea ecx, [ebp - 0x228]
movsw word es:[edi], word [esi]
call fcn.00419460
push 0x4c79ac
push 0x4c79ac
push str.Control
lea ecx, [ebp - 0x228]
call fcn.00419460
push 0x4c79ac
lea eax, [ebp - 0x218]
push eax
push str.InprocServer32
lea ecx, [ebp - 0x228]
call fcn.00419460
push str.InprocServer32
lea ecx, [ebp - 0x218]
push ecx
push str.InprocServer32
lea ecx, [ebp - 0x228]
call fcn.00419460
push 0x4c79ac
push 0x4c9330
push str.MiscStatus
lea ecx, [ebp - 0x228]
call fcn.00419460
push 0x4c79ac
push str.131473
push str.MiscStatus1
lea ecx, [ebp - 0x228]
call fcn.00419460
push 0x4c79ac
push str.RefEdit.Ctrl
push str.ProgID
lea ecx, [ebp - 0x228]
call fcn.00419460
lea eax, [ebp - 0x218]
add eax, 0xfffffffe
lea ecx, [ecx]
mov cx, word [eax + 2]
add eax, 2
cmp cx, bx
jne 0x41aa00
mov edx, dword [0x4cb970]
mov cx, word [0x4cb974]
mov dword [eax], edx
push 0x4c79ac
lea edx, [ebp - 0x218]
push edx
mov word [eax + 4], cx
push str.ToolboxBitmap32
lea ecx, [ebp - 0x228]
call fcn.00419460
push 0x4c79ac
push str.55764DA4_BB0F_4781_8342_D85F1D800ACB
push str.TypeLib
lea ecx, [ebp - 0x228]
call fcn.00419460
push 0x4c79ac
push 0x4cb72c
push str.Version
lea ecx, [ebp - 0x228]
call fcn.00419460
mov eax, dword [ebp - 0x21c]
mov edi, dword [sym.imp.ADVAPI32.dll_RegCloseKey]
cmp eax, ebx
je 0x41aa88
push eax
call edi
mov dword [ebp - 0x228], ebx
mov esi, dword [ebp - 0x228]
mov dword [ebp - 0x224], ebx
jmp 0x41aa9c
mov edi, dword [sym.imp.ADVAPI32.dll_RegCloseKey]
push ebx
call fcn.0043b220
add esp, 4
lea ecx, [ebp - 0x22c]
push ecx
lea edx, [ebp - 0x21c]
push edx
push ebx
push 0xf003f
push ebx
push ebx
push ebx
push str.RefEdit.CtrlCLSID
push eax
mov dword [ebp - 0x21c], ebx
call dword [sym.imp.ADVAPI32.dll_RegCreateKeyExW]
cmp eax, ebx
jne 0x41abd4
xor eax, eax
cmp esi, ebx
je 0x41aadf
push esi
call edi
mov esi, dword [ebp - 0x21c]
mov dword [ebp - 0x228], esi
mov dword [ebp - 0x224], ebx
cmp eax, ebx
jne 0x41abce
push 0x206
lea ecx, [ebp - 0x216]
xor eax, eax
push ebx
push ecx
mov word [ebp - 0x218], ax
call sub.MSVCR100.dll_memset
add esp, 0xc
lea edx, [ebp - 0x21c]
push edx
push 0x4c79ac
lea eax, [ebp - 0x218]
push eax
lea ecx, [ebp - 0x228]
mov dword [ebp - 0x21c], 0x104
call fcn.00417550
test eax, eax
jne 0x41ab4f
cmp dword [ebp - 0x21c], ebx
ja 0x41abd4
push str.00024512_0000_0000_C000_000000000046
call dword [sym.imp.KERNEL32.dll_lstrlenW]
lea ecx, [eax + eax + 2]
push ecx
push str.00024512_0000_0000_C000_000000000046
push 1
push ebx
push 0x4c79ac
push esi
call dword [sym.imp.ADVAPI32.dll_RegSetValueExW]
jmp 0x41abd4
push str.CLSID00024512_0000_0000_C000_000000000046
push ebx
call fcn.0043b220
add esp, 4
push eax
call fcn.00435510
add esp, 8
lea edx, [ebp - 0x21c]
push edx
push 1
push ebx
push str.CLSID00024522_0000_0000_C000_000000000046
push ebx
mov dword [ebp - 0x21c], ebx
call fcn.0043b220
add esp, 4
push eax
call dword [sym.imp.ADVAPI32.dll_RegOpenKeyExW]
test eax, eax
je 0x41abdb
push str.RefEdit.Ctrl
push ebx
call fcn.0043b220
add esp, 4
push eax
call fcn.00435510
add esp, 8
jmp 0x41abdb
mov esi, dword [ebp - 0x228]
cmp esi, ebx
je 0x41abdb
push esi
call edi
xor eax, eax
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 0x10]
xor ecx, ebp
call fcn.004b12f6
mov esp, ebp
pop ebp
ret