Function at 0x40e670
Capabilities:
Set registry value

Disassembly:
push ebp
mov ebp, esp
and esp, 0xfffffff8
push 0xffffffffffffffff
push 0x446ac8
mov eax, dword fs:[0]
push eax
sub esp, 0x5c
push ebx
push ebp
push esi
push edi
mov eax, dword [0x45c5b0]
xor eax, esp
push eax
lea eax, [esp + 0x70]
mov dword fs:[0], eax
mov esi, ecx
call fcn.00415790
xor ebx, ebx
push ebx
mov ecx, esi
call fcn.00417de9
mov eax, dword [esi + 0x20]
push ebx
push eax
call dword [sym.imp.USER32.dll_GetSystemMenu]
push eax
call fcn.00429d22
mov ebp, eax
cmp ebp, ebx
je 0x40e75b
call fcn.00412914
xor ecx, ecx
cmp eax, ebx
setne cl
cmp ecx, ebx
jne 0x40e6e3
push 0x80004005
call fcn.004025c0
mov edx, dword [eax]
mov ecx, eax
mov eax, dword [edx + 0xc]
call eax
lea edi, [eax + 0x10]
mov dword [esp + 0x24], edi
push 0x65
mov dword [esp + 0x7c], ebx
call fcn.0041307e
cmp eax, ebx
je 0x40e712
push 0x65
push eax
lea ecx, [esp + 0x2c]
call fcn.00401e90
mov edi, dword [esp + 0x24]
cmp dword [edi - 0xc], ebx
je 0x40e737
mov ecx, dword [ebp + 4]
push ebx
push ebx
mov ebx, dword [sym.imp.USER32.dll_AppendMenuA]
push 0x800
push ecx
call ebx
mov edx, dword [ebp + 4]
push edi
push 0x10
push 0
push edx
call ebx
xor ebx, ebx
lea eax, [edi - 0x10]
mov dword [esp + 0x78], 0xffffffff
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x40e75b
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
mov eax, dword [esi + 0x9c]
mov ecx, dword [esi + 0x20]
mov edi, dword [sym.imp.USER32.dll_SendMessageA]
push eax
push 1
push 0x80
push ecx
call edi
mov eax, dword [esi + 0x9c]
mov edx, dword [esi + 0x20]
push eax
push ebx
push 0x80
push edx
call edi
mov eax, dword [0x46ca74]
mov edx, dword [esi + 0x20]
lea ecx, [esp + 0x3c]
push ecx
push edx
mov dword [esi + 0x2a8], eax
mov dword [esi + 0x74], ebx
mov dword [esi + 0x94], ebx
call dword [sym.imp.USER32.dll_GetClientRect]
mov eax, dword [esp + 0x40]
mov ecx, dword [esp + 0x48]
mov edx, dword [esp + 0x44]
push ebx
sub ecx, eax
push ecx
mov ecx, dword [esp + 0x44]
sub edx, ecx
push edx
push eax
push ecx
lea ebp, [esi + 0x230]
push ebx
mov ecx, ebp
call fcn.0041b591
call fcn.00412914
xor ecx, ecx
cmp eax, ebx
setne cl
cmp ecx, ebx
jne 0x40e7ec
push 0x80004005
call fcn.004025c0
mov edx, dword [eax]
mov ecx, eax
mov eax, dword [edx + 0xc]
call eax
lea edi, [eax + 0x10]
mov dword [esp + 0x24], edi
mov dword [esp + 0x78], 1
call fcn.00412914
xor ecx, ecx
cmp eax, ebx
setne cl
cmp ecx, ebx
jne 0x40e81e
push 0x80004005
call fcn.004025c0
mov edx, dword [eax]
mov ecx, eax
mov eax, dword [edx + 0xc]
call eax
add eax, 0x10
mov dword [esp + 0x20], eax
mov byte [esp + 0x78], 2
mov eax, dword [edi - 8]
mov ecx, 1
sub ecx, dword [edi - 4]
sub eax, 0x104
or eax, ecx
jge 0x40e859
push 0x104
lea ecx, [esp + 0x28]
call fcn.00402380
mov edi, dword [esp + 0x24]
call fcn.0041528e
mov eax, dword [eax + 8]
push 0x104
push edi
push eax
call dword [sym.imp.KERNEL32.dll_GetModuleFileNameA]
mov eax, dword [edi - 8]
push eax
push edi
call fcn.00432126
add esp, 8
cmp eax, ebx
jl 0x40eaab
cmp eax, dword [edi - 8]
jg 0x40eaab
push edi
lea ecx, [esp + 0x24]
push str.res:___s_index.htm
mov dword [edi - 0xc], eax
push ecx
mov byte [eax + edi], 0
call fcn.00402100
add esp, 0xc
lea edx, [esp + 0x2c]
push edx
call fcn.00429eda
lea ecx, [esp + 0x20]
xor eax, eax
push ecx
mov byte [esp + 0x7c], 3
lea ecx, [esp + 0x50]
mov word [esp + 0x50], ax
call fcn.0042a2e7
push 3
push 0xe
lea ecx, [esp + 0x64]
mov byte [esp + 0x80], 4
call fcn.00429e1b
lea edx, [esp + 0x2c]
push edx
mov eax, edx
push eax
mov ecx, edx
push ecx
push edx
lea eax, [esp + 0x5c]
push eax
push str.LLLLL
push ebx
push ebx
push 1
push 0x1f4
push ebp
mov byte [esp + 0xa4], 5
call fcn.0041b38c
mov ebp, dword [sym.imp.ADVAPI32.dll_RegOpenKeyExA]
add esp, 0x2c
lea ecx, [esp + 0x18]
push ecx
push 0x2001f
push ebx
push str.SoftwareEnterSafe1ET199Auto_LYBank_key
push reloc.OLEAUT32.dll_SysReAllocString
mov dword [esp + 0x30], ebx
call ebp
cmp eax, ebx
je 0x40e96b
lea edx, [esp + 0x18]
push edx
push 0x2001f
push ebx
push str.Software
push reloc.OLEAUT32.dll_SysReAllocString
call ebp
mov ecx, dword [esp + 0x18]
push ebx
lea eax, [esp + 0x20]
push eax
push ebx
push 0xf003f
push 1
push ebx
push ebx
push str.EnterSafe1ET199Auto_LYBank_key
push ecx
call dword [sym.imp.ADVAPI32.dll_RegCreateKeyExA]
mov ecx, dword [esp + 0x1c]
cmp ecx, ebx
je 0x40e97f
mov eax, dword [esp + 0x18]
mov dword [esp + 0x18], ecx
mov dword [esp + 0x1c], eax
call fcn.00412914
xor ecx, ecx
cmp eax, ebx
setne cl
cmp ecx, ebx
jne 0x40e999
push 0x80004005
call fcn.004025c0
mov edx, dword [eax]
mov ecx, eax
mov eax, dword [edx + 0xc]
call eax
add eax, 0x10
mov dword [esp + 0x28], eax
mov byte [esp + 0x78], 6
mov ecx, dword [esi + 0x2a4]
push ecx
lea edx, [esp + 0x2c]
push 0x44de08
push edx
call fcn.00402100
add esp, 0xc
cmp dword [esi + 0x2a8], 1
mov eax, 0x44fa98
je 0x40e9da
mov eax, 0x44fa9c
push 0xa
push eax
mov eax, dword [esp + 0x20]
push 1
push ebx
push str.KeyType
push eax
call dword [sym.imp.ADVAPI32.dll_RegSetValueExA]
mov ecx, dword [esp + 0x1c]
mov esi, dword [sym.imp.ADVAPI32.dll_RegCloseKey]
push ecx
call esi
mov edx, dword [esp + 0x18]
push edx
call esi
call fcn.0040e5a0
mov byte [esp + 0x78], 5
mov eax, dword [esp + 0x28]
add eax, 0xfffffff0
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x40ea2e
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
mov esi, dword [sym.imp.OLEAUT32.dll_VariantCopy]
lea ecx, [esp + 0x5c]
push ecx
call esi
lea edx, [esp + 0x4c]
push edx
call esi
lea eax, [esp + 0x2c]
push eax
call esi
mov byte [esp + 0x78], 1
mov eax, dword [esp + 0x20]
add eax, 0xfffffff0
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x40ea6e
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
lea eax, [edi - 0x10]
mov dword [esp + 0x78], 0xffffffff
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x40ea92
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
mov eax, 1
mov ecx, dword [esp + 0x70]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebp
pop ebx
mov esp, ebp
pop ebp
ret
push 0x80070057
call fcn.004025c0
int3