Function at 0x401110
Capabilities:
Create process on windows
Query or enumerate registry value
Set registry value

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x8ec
mov eax, dword [0x41b130]
xor eax, ebp
mov dword [ebp - 4], eax
push 0
call dword [sym.imp.ole32.dll_CoInitialize]
mov dword [ebp - 0x6ac], eax
push 0
push 0
push 0
push 0
call dword [sym.imp.USER32.dll_DefWindowProcW]
push 4
call fcn.00401ee0
add esp, 4
push 0
mov eax, dword [ebp + 8]
push eax
push 0
mov ecx, 0x41c0e0
call fcn.00401f10
mov dword [ebp - 0x6ac], eax
mov dword [ebp - 0x220], 0
mov ecx, dword [ebp + 0x10]
push ecx
lea ecx, [ebp - 0x8c4]
call fcn.00402430
lea ecx, [ebp - 0x6a8]
call fcn.004023f0
lea ecx, [ebp - 0x8c4]
call fcn.00401990
movzx edx, al
test edx, edx
je 0x4011a9
push str.http:__www.jisupdftoword.com__d
lea ecx, [ebp - 0x6a8]
call fcn.00402490
jmp 0x4011bb
lea eax, [ebp - 0x8c4]
push eax
lea ecx, [ebp - 0x6a8]
call fcn.004016c0
push str.http
push 4
lea ecx, [ebp - 0x8d8]
push ecx
lea ecx, [ebp - 0x6a8]
call fcn.00401900
push eax
call fcn.00401970
add esp, 8
mov byte [ebp - 0x8d1], al
lea ecx, [ebp - 0x8d8]
call fcn.00402470
movzx edx, byte [ebp - 0x8d1]
test edx, edx
je 0x401249
push 1
push 0
push 0
lea ecx, [ebp - 0x6a8]
call fcn.00405c30
push eax
push 0x4172ac
push 0
call dword [sym.imp.SHELL32.dll_ShellExecuteW]
mov dword [ebp - 0x8d0], eax
cmp dword [ebp - 0x8d0], 0x20
jg 0x401249
push 1
push 0
lea ecx, [ebp - 0x6a8]
call fcn.00405c30
push eax
push str.iexplore.exe
push str.open
push 0
call dword [sym.imp.SHELL32.dll_ShellExecuteW]
mov ax, word [0x4172e0]
mov word [ebp - 0x430], ax
push 0x206
push 0
lea ecx, [ebp - 0x42e]
push ecx
call fcn.0040a3e0
add esp, 0xc
mov dword [ebp - 0x6a4], 0x208
lea ecx, [ebp - 0x8cc]
call fcn.004023f0
lea edx, [ebp - 0x488]
push edx
call dword [sym.imp.KERNEL32.dll_GetLocalTime]
movzx eax, word [ebp - 0x482]
push eax
movzx ecx, word [ebp - 0x486]
push ecx
movzx edx, word [ebp - 0x488]
push edx
push str._d__d__d
lea eax, [ebp - 0x8cc]
push eax
call fcn.00403440
add esp, 0x14
lea ecx, [ebp - 0x6a4]
push ecx
lea edx, [ebp - 0x430]
push edx
push 0
push 0x4172f8
push 0x417304
push 0x80000001
call dword [sym.imp.SHLWAPI.dll_SHGetValueW]
test eax, eax
jne 0x401336
lea eax, [ebp - 0x430]
push eax
lea ecx, [ebp - 0x8cc]
push ecx
call fcn.00401970
add esp, 8
movzx edx, al
test edx, edx
je 0x401336
mov dword [ebp - 0x8dc], 0
lea ecx, [ebp - 0x8cc]
call fcn.00402470
lea ecx, [ebp - 0x6a8]
call fcn.00402470
lea ecx, [ebp - 0x8c4]
call fcn.00402470
mov eax, dword [ebp - 0x8dc]
jmp 0x4016a2
lea ecx, [ebp - 0x8cc]
call fcn.004024f0
shl eax, 1
push eax
lea ecx, [ebp - 0x8cc]
call fcn.00405c30
push eax
push 1
push str.rday
push str.SoftwareJisuPdfp2w
push 0x80000001
call dword [sym.imp.SHLWAPI.dll_SHSetValueW]
mov ax, word [0x417368]
mov word [ebp - 0x698], ax
push 0x206
push 0
lea ecx, [ebp - 0x696]
push ecx
call fcn.0040a3e0
add esp, 0xc
lea ecx, [ebp - 0x8c8]
call fcn.004023f0
lea ecx, [ebp - 0x214]
call fcn.004023f0
lea ecx, [ebp - 0x8c0]
call fcn.004023f0
lea edx, [ebp - 0x478]
push edx
push 0x104
lea eax, [ebp - 0x698]
push eax
call fcn.00408870
add esp, 0xc
lea ecx, [ebp - 0x698]
push ecx
lea ecx, [ebp - 0x8c8]
call fcn.00402490
call fcn.00408030
push eax
lea ecx, [ebp - 0x214]
call fcn.004025e0
lea edx, [ebp - 0x8c8]
push edx
lea ecx, [ebp - 0x214]
call fcn.004024b0
call fcn.00401c30
mov dword [ebp - 0x6a0], eax
push 0x40
push 0
lea eax, [ebp - 0x470]
push eax
call fcn.0040a3e0
add esp, 0xc
push 0
lea ecx, [ebp - 0x214]
call fcn.004024d0
mov dword [ebp - 0x474], eax
cmp dword [ebp - 0x474], 0
jne 0x401441
mov dword [ebp - 0x8e4], 0
jmp 0x4014b7
mov ecx, dword [ebp - 0x474]
push ecx
call dword [sym.imp.KERNEL32.dll_lstrlenW]
add eax, 1
mov dword [ebp - 0x218], eax
cmp dword [ebp - 0x218], 0x3fffffff
jle 0x40146f
mov dword [ebp - 0x8e8], 0
jmp 0x4014ab
mov eax, dword [ebp - 0x218]
shl eax, 1
call fcn.0040a4a0
mov dword [ebp - 0x8ec], esp
mov edx, dword [ebp - 0x6a0]
push edx
mov eax, dword [ebp - 0x218]
shl eax, 1
push eax
mov ecx, dword [ebp - 0x474]
push ecx
mov edx, dword [ebp - 0x8ec]
push edx
call fcn.00401c40
mov dword [ebp - 0x8e8], eax
mov eax, dword [ebp - 0x8e8]
mov dword [ebp - 0x8e4], eax
push 0x40
lea ecx, [ebp - 0x470]
push ecx
mov edx, dword [ebp - 0x8e4]
push edx
call fcn.00409e00
add esp, 0xc
push 0xffffffffffffffff
lea ecx, [ebp - 0x214]
call fcn.00402510
lea eax, [ebp - 0x470]
push eax
lea ecx, [ebp - 0x214]
call fcn.004025e0
push 0x208
push 0
lea ecx, [ebp - 0x210]
push ecx
call fcn.0040a3e0
add esp, 0xc
push 0x104
lea edx, [ebp - 0x210]
push edx
call fcn.00408a90
add esp, 8
lea eax, [ebp - 0x210]
push eax
lea ecx, [ebp - 0x8c0]
call fcn.00402490
push 0x41736c
push str..exe
lea ecx, [ebp - 0x8c0]
call fcn.00401720
mov cx, word [0x41737c]
mov word [ebp - 0x8b8], cx
push 0x206
push 0
lea edx, [ebp - 0x8b6]
push edx
call fcn.0040a3e0
add esp, 0xc
mov dword [ebp - 0x21c], 0x208
lea ecx, [ebp - 0x48c]
call fcn.004023f0
lea eax, [ebp - 0x21c]
push eax
lea ecx, [ebp - 0x8b8]
push ecx
push 0
push str.fday
push str.SoftwareJisuPdf
push 0x80000001
call dword [sym.imp.SHLWAPI.dll_SHGetValueW]
test eax, eax
jne 0x4015b5
lea edx, [ebp - 0x8b8]
push edx
lea ecx, [ebp - 0x48c]
call fcn.00402490
jmp 0x4015c7
lea eax, [ebp - 0x8cc]
push eax
lea ecx, [ebp - 0x48c]
call fcn.004016c0
lea ecx, [ebp - 0x69c]
call fcn.004023f0
mov ecx, dword [ebp - 0x48c]
push ecx
mov edx, dword [ebp - 0x8c0]
push edx
mov eax, dword [ebp - 0x8c8]
push eax
mov ecx, dword [ebp - 0x214]
push ecx
push str.http:__tj.jisupdftoword.com__regrunv1001mac_sos_sbr_sfday_s
lea edx, [ebp - 0x69c]
push edx
call fcn.00403440
add esp, 0x18
lea ecx, [ebp - 0x69c]
call fcn.00405c30
push eax
lea eax, [ebp - 0x224]
push eax
call section..text
add esp, 8
mov ecx, 0x41c0e0
call fcn.00402060
call dword [sym.imp.ole32.dll_CoUninitialize]
mov ecx, dword [ebp - 0x220]
mov dword [ebp - 0x8e0], ecx
lea ecx, [ebp - 0x224]
call fcn.00402470
lea ecx, [ebp - 0x69c]
call fcn.00402470
lea ecx, [ebp - 0x48c]
call fcn.00402470
lea ecx, [ebp - 0x8c0]
call fcn.00402470
lea ecx, [ebp - 0x214]
call fcn.00402470
lea ecx, [ebp - 0x8c8]
call fcn.00402470
lea ecx, [ebp - 0x8cc]
call fcn.00402470
lea ecx, [ebp - 0x6a8]
call fcn.00402470
lea ecx, [ebp - 0x8c4]
call fcn.00402470
mov eax, dword [ebp - 0x8e0]
lea esp, [ebp - 0x8ec]
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.0040a45a
mov esp, ebp
pop ebp
ret 0x10