Function at 0x6124f385
Capabilities:
Contain obfuscated stackstrings
Set registry value

Disassembly:
mov edi, edi
push ebp
mov ebp, esp
sub esp, 0x430
mov eax, dword [0x61253ebc]
push ebx
mov dword [ebp - 4], eax
movzx eax, word [ebp + 8]
push esi
push edi
push eax
lea eax, [ebp - 0x20c]
push 0x6124240c
push eax
mov dword [ebp - 0x430], 0x61242678
mov dword [ebp - 0x42c], 0x61242664
mov dword [ebp - 0x428], 0x61242650
call dword [sym.imp.USER32.dll_wsprintfW]
mov esi, dword [sym.imp.ADVAPI32.dll_RegSetValueExW]
mov edi, dword [sym.imp.KERNEL32.dll_lstrlenW]
add esp, 0xc
xor ebx, ebx
mov dword [ebp - 0x41c], ebx
mov eax, dword [ebp - 0x41c]
push 0x61242624
push dword [ebp + eax*4 - 0x430]
lea eax, [ebp - 0x414]
push eax
call dword [sym.imp.SHLWAPI.dll_PathCombineW]
test eax, eax
je 0x6124f61f
lea eax, [ebp - 0x424]
push eax
push 0x2001f
push ebx
lea eax, [ebp - 0x414]
push eax
push 0x80000003
call dword [sym.imp.ADVAPI32.dll_RegOpenKeyExW]
test eax, eax
jne 0x6124f48b
lea eax, [ebp - 0x20c]
push eax
call edi
lea eax, [eax + eax + 2]
push eax
lea eax, [ebp - 0x20c]
push eax
push 1
push ebx
push 0x61241c2c
push dword [ebp - 0x424]
call esi
test eax, eax
jne 0x6124f47f
lea eax, [ebp - 0x20c]
push eax
call edi
lea eax, [eax + eax + 2]
push eax
lea eax, [ebp - 0x20c]
push eax
push 1
push ebx
push str.MUILanguagePending
push dword [ebp - 0x424]
call esi
push dword [ebp - 0x424]
call dword [sym.imp.ADVAPI32.dll_RegCloseKey]
inc dword [ebp - 0x41c]
cmp dword [ebp - 0x41c], 3
jb 0x6124f3e7
lea eax, [ebp - 0x415]
push eax
push ebx
push 0x61241a18
mov ebx, 0x61242614
push ebx
call fcn.6124e7bc
test eax, eax
mov dword [ebp - 0x420], eax
je 0x6124f61f
lea eax, [ebp - 0x20c]
push eax
call edi
lea eax, [eax + eax + 2]
push eax
lea eax, [ebp - 0x20c]
push eax
push 1
push 0
push 0x61241c2c
push dword [ebp - 0x420]
call esi
test eax, eax
jne 0x6124f514
lea eax, [ebp - 0x20c]
push eax
call edi
lea eax, [eax + eax + 2]
push eax
lea eax, [ebp - 0x20c]
push eax
push 1
push 0
push str.MUILanguagePending
push dword [ebp - 0x420]
call esi
push dword [ebp - 0x420]
call dword [sym.imp.ADVAPI32.dll_RegCloseKey]
lea eax, [ebp - 0x415]
push eax
push ebx
call fcn.6124d406
cmp dword [0x61254084], 2
jne 0x6124f5fe
and dword [ebp - 0x41c], 0
mov dword [ebp - 0x42c], 0x612425f8
mov dword [ebp - 0x428], 0x612425d8
lea eax, [ebp - 0x415]
push eax
mov eax, dword [ebp - 0x41c]
push dword [ebp + eax*4 - 0x42c]
push 0x61241a18
push ebx
call fcn.6124e7bc
test eax, eax
mov dword [ebp - 0x420], eax
je 0x6124f61f
lea eax, [ebp - 0x20c]
push eax
call edi
lea eax, [eax + eax + 2]
push eax
lea eax, [ebp - 0x20c]
push eax
push 1
push 0
push 0x61241c2c
push dword [ebp - 0x420]
call esi
test eax, eax
jne 0x6124f5d2
lea eax, [ebp - 0x20c]
push eax
call edi
lea eax, [eax + eax + 2]
push eax
lea eax, [ebp - 0x20c]
push eax
push 1
push 0
push str.MUILanguagePending
push dword [ebp - 0x420]
call esi
push dword [ebp - 0x420]
call dword [sym.imp.ADVAPI32.dll_RegCloseKey]
lea eax, [ebp - 0x415]
push eax
push ebx
call fcn.6124d406
inc dword [ebp - 0x41c]
cmp dword [ebp - 0x41c], 2
jb 0x6124f555
movzx eax, word [ebp + 8]
xor ecx, ecx
push ecx
push 1
push ecx
push ecx
push eax
push ecx
call fcn.6124ee7b
mov ecx, dword [ebp - 4]
pop edi
pop esi
pop ebx
call fcn.6124ff04
leave
ret 4
xor eax, eax
jmp 0x6124f610