Function at 0x100411f
Capabilities:
Set registry value

Disassembly:
mov edi, edi
push ebp
mov ebp, esp
sub esp, 0x4c
push ebx
push esi
lea eax, [ebp - 0xc]
push eax
lea eax, [ebp - 4]
push eax
xor esi, esi
push esi
push 0x20006
push esi
push esi
push esi
push 9
mov ebx, ecx
call fcn.010035fb
push eax
push 0x80000001
call dword [sym.imp.ADVAPI32.dll_RegCreateKeyExW]
test eax, eax
jne 0x10044c7
push edi
push dword [ebx]
mov edi, dword [sym.imp.USER32.dll_IsZoomed]
call edi
push dword [ebx]
neg eax
sbb eax, eax
and eax, 2
inc eax
mov dword [ebp - 0x10], eax
call edi
test eax, eax
jne 0x1004191
push dword [ebx]
call dword [sym.imp.USER32.dll_IsIconic]
test eax, eax
jne 0x1004191
lea eax, [ebp - 0x20]
push eax
push dword [ebx]
call dword [sym.imp.USER32.dll_GetWindowRect]
jmp 0x10041b0
lea eax, [ebp - 0x4c]
push eax
push dword [ebx]
mov dword [ebp - 0x4c], 0x2c
call dword [sym.imp.USER32.dll_GetWindowPlacement]
lea esi, [ebp - 0x30]
lea edi, [ebp - 0x20]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
xor esi, esi
push 4
pop edi
push edi
lea eax, [ebp - 0x10]
push eax
push edi
push esi
push 0xa
call fcn.010035fb
mov esi, dword [sym.imp.ADVAPI32.dll_RegSetValueExW]
push eax
push dword [ebp - 4]
call esi
push edi
lea eax, [ebp - 0x20]
push eax
push edi
push 0
push 0xb
call fcn.010035fb
push eax
push dword [ebp - 4]
call esi
push edi
lea eax, [ebp - 0x1c]
push eax
push edi
push 0
push 0xc
call fcn.010035fb
push eax
push dword [ebp - 4]
call esi
mov eax, dword [ebp - 0x18]
sub eax, dword [ebp - 0x20]
push edi
mov dword [ebp - 0xc], eax
lea eax, [ebp - 0xc]
push eax
push edi
push 0
push 0xd
call fcn.010035fb
push eax
push dword [ebp - 4]
call esi
mov eax, dword [ebp - 0x14]
sub eax, dword [ebp - 0x1c]
push edi
mov dword [ebp - 0xc], eax
lea eax, [ebp - 0xc]
push eax
push edi
push 0
push 0xe
call fcn.010035fb
push eax
push dword [ebp - 4]
call esi
mov eax, dword [ebx + 0xf60]
push edi
mov dword [ebp - 8], eax
lea eax, [ebp - 8]
push eax
push edi
push 0
push 0x15
call fcn.010035fb
push eax
push dword [ebp - 4]
call esi
mov eax, dword [ebx + 0xf64]
push edi
mov dword [ebp - 8], eax
lea eax, [ebp - 8]
push eax
push edi
push 0
push 0x16
call fcn.010035fb
push eax
push dword [ebp - 4]
call esi
mov eax, dword [ebx + 0xf68]
push edi
mov dword [ebp - 8], eax
lea eax, [ebp - 8]
push eax
push edi
push 0
push 0x17
call fcn.010035fb
push eax
push dword [ebp - 4]
call esi
mov eax, dword [ebx + 0xf6c]
push edi
mov dword [ebp - 8], eax
lea eax, [ebp - 8]
push eax
push edi
push 0
push 0x18
call fcn.010035fb
push eax
push dword [ebp - 4]
call esi
mov eax, dword [ebx + 0xf70]
push edi
mov dword [ebp - 8], eax
lea eax, [ebp - 8]
push eax
push edi
push 0
push 0x19
call fcn.010035fb
push eax
push dword [ebp - 4]
call esi
mov eax, dword [ebx + 0xf74]
push edi
mov dword [ebp - 8], eax
lea eax, [ebp - 8]
push eax
push edi
push 0
push 0x33
call fcn.010035fb
push eax
push dword [ebp - 4]
call esi
mov eax, dword [ebx + 4]
mov eax, dword [eax]
push edi
mov dword [ebp - 0xc], eax
lea eax, [ebp - 0xc]
push eax
push edi
push 0
push 0x31
call fcn.010035fb
push eax
push dword [ebp - 4]
call esi
push edi
lea eax, [ebx + 0xf80]
push eax
push edi
push 0
push 0x10015bc
push dword [ebp - 4]
call esi
push edi
lea eax, [ebx + 0xf84]
push eax
push edi
push 0
push 0x10015a8
push dword [ebp - 4]
call esi
push edi
lea eax, [ebx + 0xf88]
push eax
push edi
push 0
push 0x1001590
push dword [ebp - 4]
call esi
push edi
lea eax, [ebx + 0xf8c]
push eax
push edi
push 0
push 0x1001570
push dword [ebp - 4]
call esi
push edi
lea eax, [ebx + 0xf90]
push eax
push edi
push 0
push 0x100154c
push dword [ebp - 4]
call esi
push edi
lea eax, [ebx + 0xf94]
push eax
push edi
push 0
push 0x1001524
push dword [ebp - 4]
call esi
push edi
lea eax, [ebx + 0xf98]
push eax
push edi
push 0
push 0x1001504
push dword [ebp - 4]
call esi
push edi
lea eax, [ebx + 0xf9c]
push eax
push edi
push 0
push 0x10014e0
push dword [ebp - 4]
call esi
push edi
lea eax, [ebx + 0xfa0]
push eax
push edi
push 0
push 0x10014c8
push dword [ebp - 4]
call esi
push edi
lea eax, [ebx + 0xfa4]
push eax
push edi
push 0
push 0x10014ac
push dword [ebp - 4]
call esi
push edi
lea eax, [ebx + 0xfa8]
push eax
push edi
push 0
push 0x1001488
push dword [ebp - 4]
call esi
push edi
lea eax, [ebx + 0xfac]
push eax
push edi
push 0
push 0x1001460
push dword [ebp - 4]
call esi
push edi
lea eax, [ebx + 0xfb0]
push eax
push edi
push 0
push 0x1001434
push dword [ebp - 4]
call esi
push edi
lea eax, [ebx + 0xfb4]
push eax
push edi
push 0
push 0x1001410
push dword [ebp - 4]
call esi
push edi
lea eax, [ebx + 0xfb8]
push eax
push edi
push 0
push 0x10013e8
push dword [ebp - 4]
call esi
push edi
lea eax, [ebx + 0xfbc]
push eax
push edi
push 0
push 0x10013c8
push dword [ebp - 4]
call esi
push edi
lea eax, [ebx + 0xfc0]
push eax
push edi
push 0
push 0x10013a4
push dword [ebp - 4]
call esi
push edi
lea eax, [ebx + 0xfc4]
push eax
push edi
push 0
push 0x1001378
push dword [ebp - 4]
call esi
push edi
lea eax, [ebx + 0xfc8]
push eax
push edi
push 0
push 0x1001348
push dword [ebp - 4]
call esi
push edi
lea eax, [ebx + 0xfcc]
push eax
push edi
push 0
push 0x1001318
push dword [ebp - 4]
call esi
push edi
add ebx, 0xfd0
push ebx
push edi
push 0
push 0x10012ec
push dword [ebp - 4]
call esi
push dword [ebp - 4]
call dword [sym.imp.ADVAPI32.dll_RegCloseKey]
pop edi
pop esi
pop ebx
leave
ret