Function at 0x41855a
Capabilities:
Set registry value

Disassembly:
push 0x270
mov eax, 0x448f24
call fcn.00433037
mov esi, ecx
call dword [sym.imp.SHELL32.dll_IsUserAnAdmin]
test eax, eax
je 0x418b2a
lea ecx, [esi + 0x944]
call fcn.0041bcac
mov edi, eax
xor eax, eax
push 0x206
push eax
mov word [ebp - 0x218], ax
lea eax, [ebp - 0x216]
push eax
call fcn.0042dec0
mov eax, dword [ebp + 8]
add esp, 0xc
sub eax, 0x14
je 0x4189c5
dec eax
je 0x418873
dec eax
je 0x41871c
dec eax
jne 0x418b2a
call fcn.0040ed69
test eax, eax
je 0x41860b
push 0xc38a
lea eax, [ebp - 0x270]
push eax
call fcn.0040291c
push 5
mov dword [ebp - 4], 0xf
mov eax, dword [eax]
mov edx, dword [esi + 0x964]
push 1
lea ecx, [esi + 0x24]
mov esi, dword [ecx]
push eax
push edx
call dword [esi + 8]
or dword [ebp - 4], 0xffffffff
mov eax, dword [ebp - 0x270]
jmp 0x4186bb
push 0xc38c
test edi, edi
je 0x418667
lea eax, [ebp - 0x228]
push eax
call fcn.0040291c
mov edi, eax
push 0x23
lea eax, [ebp - 0x27c]
push eax
mov dword [ebp - 4], 0x10
call fcn.0040291c
push 5
mov byte [ebp - 4], 0x11
mov edi, dword [edi]
mov eax, dword [eax]
push 1
lea ecx, [esi + 0x24]
mov edx, dword [ecx]
push edi
push eax
call dword [edx + 8]
mov eax, dword [ebp - 0x27c]
add eax, 0xfffffff0
call fcn.00406004
or dword [ebp - 4], 0xffffffff
mov eax, dword [ebp - 0x228]
jmp 0x4186bb
lea eax, [ebp - 0x230]
push eax
call fcn.0040291c
mov edi, eax
push 0xc36e
lea eax, [ebp - 0x268]
push eax
mov dword [ebp - 4], 0x12
call fcn.0040291c
push 5
mov byte [ebp - 4], 0x13
mov edi, dword [edi]
mov eax, dword [eax]
push 1
lea ecx, [esi + 0x24]
mov edx, dword [ecx]
push edi
push eax
call dword [edx + 8]
mov eax, dword [ebp - 0x268]
add eax, 0xfffffff0
call fcn.00406004
or dword [ebp - 4], 0xffffffff
mov eax, dword [ebp - 0x230]
add eax, 0xfffffff0
call fcn.00406004
push 4
lea eax, [ebp - 0x21c]
push eax
push 4
push str.ExitDlgRet
push str.SOFTWARE360Safe_stat
push reloc.OLEAUT32.dll_SysReAllocString
mov dword [ebp - 0x21c], 5
call dword [sym.imp.SHLWAPI.dll_SHSetValueW]
push 0xc3b9
lea eax, [ebp - 0x258]
push eax
call fcn.0040291c
mov edx, dword [eax]
lea ecx, [ebp - 0x218]
push ecx
mov eax, 0x104
call fcn.00406720
mov eax, dword [ebp - 0x258]
jmp 0x418b14
call fcn.0040ed69
test eax, eax
je 0x418762
push 0xc38a
lea eax, [ebp - 0x238]
push eax
call fcn.0040291c
push 5
mov dword [ebp - 4], 0xa
mov eax, dword [eax]
mov edx, dword [esi + 0x964]
push 1
lea ecx, [esi + 0x24]
mov esi, dword [ecx]
push eax
push edx
call dword [esi + 8]
or dword [ebp - 4], 0xffffffff
mov eax, dword [ebp - 0x238]
jmp 0x418812
push 0xc38b
test edi, edi
je 0x4187be
lea eax, [ebp - 0x240]
push eax
call fcn.0040291c
mov edi, eax
push 0x23
lea eax, [ebp - 0x278]
push eax
mov dword [ebp - 4], 0xb
call fcn.0040291c
push 5
mov byte [ebp - 4], 0xc
mov edi, dword [edi]
mov eax, dword [eax]
push 1
lea ecx, [esi + 0x24]
mov edx, dword [ecx]
push edi
push eax
call dword [edx + 8]
mov eax, dword [ebp - 0x278]
add eax, 0xfffffff0
call fcn.00406004
or dword [ebp - 4], 0xffffffff
mov eax, dword [ebp - 0x240]
jmp 0x418812
lea eax, [ebp - 0x248]
push eax
call fcn.0040291c
mov edi, eax
push 0xc36e
lea eax, [ebp - 0x260]
push eax
mov dword [ebp - 4], 0xd
call fcn.0040291c
push 5
mov byte [ebp - 4], 0xe
mov edi, dword [edi]
mov eax, dword [eax]
push 1
lea ecx, [esi + 0x24]
mov edx, dword [ecx]
push edi
push eax
call dword [edx + 8]
mov eax, dword [ebp - 0x260]
add eax, 0xfffffff0
call fcn.00406004
or dword [ebp - 4], 0xffffffff
mov eax, dword [ebp - 0x248]
add eax, 0xfffffff0
call fcn.00406004
push 4
lea eax, [ebp - 0x21c]
push eax
push 4
push str.ExitDlgRet
push str.SOFTWARE360Safe_stat
push reloc.OLEAUT32.dll_SysReAllocString
mov dword [ebp - 0x21c], 4
call dword [sym.imp.SHLWAPI.dll_SHSetValueW]
push 0xc3b8
lea eax, [ebp - 0x220]
push eax
call fcn.0040291c
mov edx, dword [eax]
lea ecx, [ebp - 0x218]
push ecx
mov eax, 0x104
call fcn.00406720
mov eax, dword [ebp - 0x220]
jmp 0x418b14
call fcn.0040ed69
push 0xc38a
test eax, eax
je 0x4188b9
lea eax, [ebp - 0x250]
push eax
call fcn.0040291c
push 5
mov dword [ebp - 4], 5
mov eax, dword [eax]
mov edx, dword [esi + 0x964]
push 1
lea ecx, [esi + 0x24]
mov esi, dword [ecx]
push eax
push edx
call dword [esi + 8]
or dword [ebp - 4], 0xffffffff
mov eax, dword [ebp - 0x250]
jmp 0x418964
test edi, edi
je 0x418910
lea eax, [ebp - 0x22c]
push eax
call fcn.0040291c
mov edi, eax
push 0x23
lea eax, [ebp - 0x224]
push eax
mov dword [ebp - 4], 6
call fcn.0040291c
push 5
mov byte [ebp - 4], 7
mov edi, dword [edi]
mov eax, dword [eax]
push 1
lea ecx, [esi + 0x24]
mov edx, dword [ecx]
push edi
push eax
call dword [edx + 8]
mov eax, dword [ebp - 0x224]
add eax, 0xfffffff0
call fcn.00406004
or dword [ebp - 4], 0xffffffff
mov eax, dword [ebp - 0x22c]
jmp 0x418964
lea eax, [ebp - 0x23c]
push eax
call fcn.0040291c
mov edi, eax
push 0xc36e
lea eax, [ebp - 0x234]
push eax
mov dword [ebp - 4], 8
call fcn.0040291c
push 5
mov byte [ebp - 4], 9
mov edi, dword [edi]
mov eax, dword [eax]
push 1
lea ecx, [esi + 0x24]
mov edx, dword [ecx]
push edi
push eax
call dword [edx + 8]
mov eax, dword [ebp - 0x234]
add eax, 0xfffffff0
call fcn.00406004
or dword [ebp - 4], 0xffffffff
mov eax, dword [ebp - 0x23c]
add eax, 0xfffffff0
call fcn.00406004
push 4
lea eax, [ebp - 0x21c]
push eax
push 4
push str.ExitDlgRet
push str.SOFTWARE360Safe_stat
push reloc.OLEAUT32.dll_SysReAllocString
mov dword [ebp - 0x21c], 3
call dword [sym.imp.SHLWAPI.dll_SHSetValueW]
push 0xc3b7
lea eax, [ebp - 0x244]
push eax
call fcn.0040291c
mov edx, dword [eax]
lea ecx, [ebp - 0x218]
push ecx
mov eax, 0x104
call fcn.00406720
mov eax, dword [ebp - 0x244]
jmp 0x418b14
call fcn.0040ed69
test eax, eax
je 0x418a08
push 0xc38a
lea eax, [ebp - 0x24c]
push eax
call fcn.0040291c
and dword [ebp - 4], 0
mov eax, dword [eax]
mov edx, dword [esi + 0x964]
push 5
push 1
lea ecx, [esi + 0x24]
mov esi, dword [ecx]
push eax
push edx
call dword [esi + 8]
or dword [ebp - 4], 0xffffffff
mov eax, dword [ebp - 0x24c]
jmp 0x418ab8
push 0xc389
test edi, edi
je 0x418a64
lea eax, [ebp - 0x25c]
push eax
call fcn.0040291c
mov edi, eax
push 0x23
lea eax, [ebp - 0x254]
push eax
mov dword [ebp - 4], 1
call fcn.0040291c
push 5
mov byte [ebp - 4], 2
mov edi, dword [edi]
mov eax, dword [eax]
push 1
lea ecx, [esi + 0x24]
mov edx, dword [ecx]
push edi
push eax
call dword [edx + 8]
mov eax, dword [ebp - 0x254]
add eax, 0xfffffff0
call fcn.00406004
or dword [ebp - 4], 0xffffffff
mov eax, dword [ebp - 0x25c]
jmp 0x418ab8
lea eax, [ebp - 0x26c]
push eax
call fcn.0040291c
mov edi, eax
push 0xc36e
lea eax, [ebp - 0x264]
push eax
mov dword [ebp - 4], 3
call fcn.0040291c
push 5
mov byte [ebp - 4], 4
mov edi, dword [edi]
mov eax, dword [eax]
push 1
lea ecx, [esi + 0x24]
mov edx, dword [ecx]
push edi
push eax
call dword [edx + 8]
mov eax, dword [ebp - 0x264]
add eax, 0xfffffff0
call fcn.00406004
or dword [ebp - 4], 0xffffffff
mov eax, dword [ebp - 0x26c]
add eax, 0xfffffff0
call fcn.00406004
push 4
lea eax, [ebp - 0x21c]
push eax
push 4
push str.ExitDlgRet
push str.SOFTWARE360Safe_stat
push reloc.OLEAUT32.dll_SysReAllocString
mov dword [ebp - 0x21c], 2
call dword [sym.imp.SHLWAPI.dll_SHSetValueW]
push 0xc3b6
lea eax, [ebp - 0x274]
push eax
call fcn.0040291c
mov edx, dword [eax]
lea ecx, [ebp - 0x218]
push ecx
mov eax, 0x104
call fcn.00406720
mov eax, dword [ebp - 0x274]
add eax, 0xfffffff0
call fcn.00406004
xor ecx, ecx
lea edx, [ebp - 0x218]
inc ecx
call fcn.00415017
call fcn.004330ba
ret 4