Function at 0x4019f0
Capabilities:
Set registry value

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x405036
mov eax, dword fs:[0]
push eax
sub esp, 0x158
mov eax, dword [0x409008]
xor eax, ebp
mov dword [ebp - 0x14], eax
push ebx
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov dword [ebp - 0x10], esp
push 0xb0
lea eax, [ebp - 0xf0]
mov dword [ebp - 4], 0
push 0
push eax
call sub.VCRUNTIME140.dll_memset
push ecx
lea ecx, [ebp - 0xf0]
call fcn.00402a50
lea ecx, [ebp - 0xf0]
mov byte [ebp - 4], 1
call fcn.004031b0
push 0x4033d0
mov ecx, eax
call dword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______thiscall_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char_______cdecl___class_std::basic_ostream_char__struct_std::char_traits_char_____]
lea ecx, [ebp - 0xec]
call fcn.00402e90
test eax, eax
jne 0x401a8a
push eax
mov eax, dword [ebp - 0xf0]
lea ecx, [ebp - 0xf0]
push 2
add ecx, dword [eax + 4]
call dword [sym.imp.MSVCP140.dll_public:_void___thiscall_std::basic_ios_char__struct_std::char_traits_char__::setstate_int__bool_]
push 0x18
xor eax, eax
mov dword [ebp - 0x2c], 0
push str.SOFTWAREVSConsoleOutput
lea ecx, [ebp - 0x2c]
mov dword [ebp - 0x1c], 0
mov dword [ebp - 0x18], 7
mov word [ebp - 0x2c], ax
call fcn.00402f10
push 0
lea ecx, [ebp - 0xf4]
mov byte [ebp - 4], 2
cmp dword [ebp - 0x18], 8
lea eax, [ebp - 0x2c]
push ecx
cmovae eax, dword [ebp - 0x2c]
push 0
push 0x2001f
push 0
push 0
push 0
push eax
push 0x80000001
mov dword [ebp - 0xf4], 0
call dword [sym.imp.ADVAPI32.dll_RegCreateKeyExW]
test eax, eax
jne 0x401e38
mov esi, dword [ebp - 0xf4]
mov dword [ebp - 0x30], esi
mov byte [ebp - 4], 3
lea ecx, [ebp - 0xf8]
cmp dword [ebp - 0x18], 8
push ecx
mov dword [ebp - 0xf8], eax
lea eax, [ebp - 0x2c]
cmovae eax, dword [ebp - 0x2c]
push 0x2001f
push 0
push eax
push 0x80000001
call dword [sym.imp.ADVAPI32.dll_RegOpenKeyExW]
test eax, eax
jne 0x401e5a
test esi, esi
je 0x401b8a
cmp esi, 0x80000001
je 0x401b8a
cmp esi, 0x80000002
je 0x401b8a
cmp esi, 0x80000000
je 0x401b8a
cmp esi, 0x80000005
je 0x401b8a
cmp esi, 0x80000007
je 0x401b8a
cmp esi, 0x80000004
je 0x401b8a
cmp esi, 0x80000060
je 0x401b8a
cmp esi, 0x80000050
je 0x401b8a
cmp esi, 0x80000003
je 0x401b8a
push esi
call dword [sym.imp.ADVAPI32.dll_RegCloseKey]
mov edi, dword [ebp - 0xf8]
push str.kernel32.dll
mov dword [ebp - 0x30], edi
call dword [sym.imp.KERNEL32.dll_LoadLibraryW]
mov ebx, eax
xorps xmm0, xmm0
movlpd qword [ebp - 0x38], xmm0
movlpd qword [ebp - 0x40], xmm0
test ebx, ebx
je 0x401be2
mov esi, dword [sym.imp.KERNEL32.dll_GetProcAddress]
push str.LoadLibraryA
push ebx
call esi
push 0x4064c0
push ebx
mov dword [ebp - 0x38], eax
mov dword [ebp - 0x34], 0
call esi
push ebx
mov dword [ebp - 0x40], eax
mov dword [ebp - 0x3c], 0
call dword [sym.imp.KERNEL32.dll_FreeLibrary]
push 0x10
xor eax, eax
mov dword [ebp - 0x110], 0
push str.LoadLibraryA_x86
lea ecx, [ebp - 0x110]
mov dword [ebp - 0x100], 0
mov dword [ebp - 0xfc], 7
mov word [ebp - 0x110], ax
call fcn.00402f10
push 8
mov byte [ebp - 4], 4
lea ecx, [ebp - 0x38]
cmp dword [ebp - 0xfc], 8
lea eax, [ebp - 0x110]
mov esi, dword [sym.imp.ADVAPI32.dll_RegSetValueExW]
cmovae eax, dword [ebp - 0x110]
push ecx
push 0xb
push 0
push eax
push edi
call esi
test eax, eax
jne 0x401e7c
mov byte [ebp - 4], 3
mov ecx, dword [ebp - 0xfc]
cmp ecx, 8
jb 0x401c95
mov edx, dword [ebp - 0x110]
lea ecx, [ecx*2 + 2]
mov eax, edx
cmp ecx, 0x1000
jb 0x401c8b
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
jbe 0x401c8b
call dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
push ecx
push edx
call fcn.0040420d
add esp, 8
push 0x12
xor eax, eax
mov dword [ebp - 0x110], 0
push str.GetProcAddress_x86
lea ecx, [ebp - 0x110]
mov dword [ebp - 0x100], 0
mov dword [ebp - 0xfc], 7
mov word [ebp - 0x110], ax
call fcn.00402f10
push 8
lea ecx, [ebp - 0x40]
mov byte [ebp - 4], 5
cmp dword [ebp - 0xfc], 8
lea eax, [ebp - 0x110]
push ecx
cmovae eax, dword [ebp - 0x110]
push 0xb
push 0
push eax
push edi
call esi
test eax, eax
jne 0x401e9e
mov ecx, dword [ebp - 0xfc]
cmp ecx, 8
jb 0x401d3e
mov edx, dword [ebp - 0x110]
lea ecx, [ecx*2 + 2]
mov eax, edx
cmp ecx, 0x1000
jb 0x401d34
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
jbe 0x401d34
call dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
push ecx
push edx
call fcn.0040420d
add esp, 8
test edi, edi
je 0x401d91
cmp edi, 0x80000001
je 0x401d91
cmp edi, 0x80000002
je 0x401d91
cmp edi, 0x80000000
je 0x401d91
cmp edi, 0x80000005
je 0x401d91
cmp edi, 0x80000007
je 0x401d91
cmp edi, 0x80000004
je 0x401d91
cmp edi, 0x80000060
je 0x401d91
cmp edi, 0x80000050
je 0x401d91
cmp edi, 0x80000003
je 0x401d91
push edi
call dword [sym.imp.ADVAPI32.dll_RegCloseKey]
mov ecx, dword [ebp - 0x18]
cmp ecx, 8
jb 0x401dcd
mov edx, dword [ebp - 0x2c]
lea ecx, [ecx*2 + 2]
mov eax, edx
cmp ecx, 0x1000
jb 0x401dc3
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
jbe 0x401dc3
call dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
push ecx
push edx
call fcn.0040420d
add esp, 8
xor eax, eax
mov dword [ebp - 0x1c], 0
lea ecx, [ebp - 0xf0]
mov dword [ebp - 0x18], 7
mov word [ebp - 0x2c], ax
call fcn.00401ed0
xor eax, eax
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 0x14]
xor ecx, ebp
call fcn.004041cf
mov esp, ebp
pop ebp
ret
push str.RegCreateKeyEx_failed.
push eax
lea ecx, [ebp - 0x128]
call fcn.00401850
push 0x407658
lea eax, [ebp - 0x128]
push eax
call sub.VCRUNTIME140.dll__CxxThrowException
push str.RegOpenKeyExW_failed.
push eax
lea ecx, [ebp - 0x13c]
call fcn.00401850
push 0x407658
lea eax, [ebp - 0x13c]
push eax
call sub.VCRUNTIME140.dll__CxxThrowException
push str.Cannot_write_QWORD_value:_RegSetValueExW_failed.
push eax
lea ecx, [ebp - 0x150]
call fcn.00401850
push 0x407658
lea eax, [ebp - 0x150]
push eax
call sub.VCRUNTIME140.dll__CxxThrowException
push str.Cannot_write_QWORD_value:_RegSetValueExW_failed.
push eax
lea ecx, [ebp - 0x164]
call fcn.00401850
push 0x407658
lea eax, [ebp - 0x164]
push eax
call sub.VCRUNTIME140.dll__CxxThrowException
int3