Function at 0x405073
Capabilities:
Set registry value

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x26c
push edi
xor eax, eax
mov word [ebp - 0x26c], ax
push 0x1fe
push 0
lea eax, [ebp - 0x26a]
push eax
call sub.MSVCR110.dll_memset
add esp, 0xc
push 2
pop eax
shl eax, 2
push 0x77
pop ecx
mov word [ebp + eax - 0x20], cx
push 2
pop eax
imul eax, eax, 3
push 0x74
pop ecx
mov word [ebp + eax - 0x20], cx
push 2
pop eax
imul eax, eax, 9
xor ecx, ecx
mov word [ebp + eax - 0x20], cx
push 2
pop eax
shl eax, 1
push 0x66
pop ecx
mov word [ebp + eax - 0x20], cx
push 2
pop eax
shl eax, 3
push 0x5c
pop ecx
mov word [ebp + eax - 0x20], cx
push 2
pop eax
shl eax, 0
push 0x6f
pop ecx
mov word [ebp + eax - 0x20], cx
push 2
pop eax
imul eax, eax, 0
push 0x53
pop ecx
mov word [ebp + eax - 0x20], cx
push 2
pop eax
imul eax, eax, 7
push 0x65
pop ecx
mov word [ebp + eax - 0x20], cx
push 2
pop eax
imul eax, eax, 6
push 0x72
pop ecx
mov word [ebp + eax - 0x20], cx
push 2
pop eax
imul eax, eax, 5
push 0x61
pop ecx
mov word [ebp + eax - 0x20], cx
lea eax, [ebp - 0x20]
push eax
push 0x100
lea eax, [ebp - 0x26c]
push eax
call dword [sym.imp.MSVCR110.dll_wcscpy_s]
add esp, 0xc
push dword [0x412a28]
push 0x100
lea eax, [ebp - 0x26c]
push eax
call dword [sym.imp.MSVCR110.dll_wcscat_s]
add esp, 0xc
push 0
lea eax, [ebp - 4]
push eax
push 0
push 0xf003f
push 0
push 0
push 0
lea eax, [ebp - 0x26c]
push eax
push Ordinal_2
call fcn.0040e329
add esp, 0x24
test eax, eax
jne 0x405383
xor eax, eax
mov word [ebp - 0x6c], ax
xor eax, eax
lea edi, [ebp - 0x6a]
stosd dword es:[edi], eax
stosd dword es:[edi], eax
stosd dword es:[edi], eax
stosw word es:[edi], ax
and dword [ebp - 0xc], 0
xor eax, eax
mov dword [ebp - 8], eax
lea eax, [ebp - 0x6c]
push eax
call dword [sym.imp.KERNEL32.dll_GetSystemTime]
lea eax, [ebp - 0xc]
push eax
lea eax, [ebp - 0x6c]
push eax
call dword [sym.imp.KERNEL32.dll_SystemTimeToFileTime]
push 2
pop eax
imul eax, eax, 0xb
push 0x69
pop ecx
mov word [ebp + eax - 0x5c], cx
push 2
pop eax
imul eax, eax, 9
push 0x65
pop ecx
mov word [ebp + eax - 0x5c], cx
push 2
pop eax
imul eax, eax, 0
push 0x64
pop ecx
mov word [ebp + eax - 0x5c], cx
push 2
pop eax
imul eax, eax, 0xa
push 0x54
pop ecx
mov word [ebp + eax - 0x5c], cx
push 2
pop eax
imul eax, eax, 0xe
xor ecx, ecx
mov word [ebp + eax - 0x5c], cx
push 2
pop eax
imul eax, eax, 0xd
push 0x65
pop ecx
mov word [ebp + eax - 0x5c], cx
push 2
pop eax
imul eax, eax, 7
push 0x61
pop ecx
mov word [ebp + eax - 0x5c], cx
push 2
pop eax
shl eax, 2
push 0x67
pop ecx
mov word [ebp + eax - 0x5c], cx
push 2
pop eax
imul eax, eax, 5
push 0x68
pop ecx
mov word [ebp + eax - 0x5c], cx
push 2
pop eax
imul eax, eax, 0xc
push 0x6d
pop ecx
mov word [ebp + eax - 0x5c], cx
push 2
pop eax
imul eax, eax, 6
push 0x44
pop ecx
mov word [ebp + eax - 0x5c], cx
push 2
pop eax
shl eax, 0
push 0x77
pop ecx
mov word [ebp + eax - 0x5c], cx
push 2
pop eax
shl eax, 3
push 0x74
pop ecx
mov word [ebp + eax - 0x5c], cx
push 2
pop eax
shl eax, 1
push 0x48
pop ecx
mov word [ebp + eax - 0x5c], cx
push 2
pop eax
imul eax, eax, 3
push 0x69
pop ecx
mov word [ebp + eax - 0x5c], cx
push 4
lea eax, [ebp - 8]
push eax
push 4
push 0
lea eax, [ebp - 0x5c]
push eax
push dword [ebp - 4]
call dword [sym.imp.ADVAPI32.dll_RegSetValueExW]
push 2
pop eax
imul eax, eax, 3
push 0x6f
pop ecx
mov word [ebp + eax - 0x3c], cx
push 2
pop eax
imul eax, eax, 0xc
push 0x65
pop ecx
mov word [ebp + eax - 0x3c], cx
push 2
pop eax
imul eax, eax, 9
push 0x54
pop ecx
mov word [ebp + eax - 0x3c], cx
push 2
pop eax
shl eax, 1
push 0x4c
pop ecx
mov word [ebp + eax - 0x3c], cx
push 2
pop eax
imul eax, eax, 0xa
push 0x69
pop ecx
mov word [ebp + eax - 0x3c], cx
push 2
pop eax
imul eax, eax, 6
push 0x61
pop ecx
mov word [ebp + eax - 0x3c], cx
push 2
pop eax
shl eax, 0
push 0x77
pop ecx
mov word [ebp + eax - 0x3c], cx
push 2
pop eax
imul eax, eax, 0xd
xor ecx, ecx
mov word [ebp + eax - 0x3c], cx
push 2
pop eax
shl eax, 3
push 0x65
pop ecx
mov word [ebp + eax - 0x3c], cx
push 2
pop eax
imul eax, eax, 0
push 0x64
pop ecx
mov word [ebp + eax - 0x3c], cx
push 2
pop eax
shl eax, 2
push 0x77
pop ecx
mov word [ebp + eax - 0x3c], cx
push 2
pop eax
imul eax, eax, 0xb
push 0x6d
pop ecx
mov word [ebp + eax - 0x3c], cx
push 2
pop eax
imul eax, eax, 5
push 0x44
pop ecx
mov word [ebp + eax - 0x3c], cx
push 2
pop eax
imul eax, eax, 7
push 0x74
pop ecx
mov word [ebp + eax - 0x3c], cx
push 4
lea eax, [ebp - 0xc]
push eax
push 4
push 0
lea eax, [ebp - 0x3c]
push eax
push dword [ebp - 4]
call dword [sym.imp.ADVAPI32.dll_RegSetValueExW]
push dword [ebp - 4]
call dword [sym.imp.ADVAPI32.dll_RegCloseKey]
pop edi
leave
ret