Function at 0x419a70
Capabilities:
Set registry value

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x4b4886
mov eax, dword fs:[0]
push eax
sub esp, 0x218
mov eax, dword [0x5603e8]
xor eax, ebp
mov dword [ebp - 0x10], eax
push ebx
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
push 0x206
xor ebx, ebx
lea ecx, [ebp - 0x216]
xor eax, eax
push ebx
push ecx
mov word [ebp - 0x218], ax
call sub.MSVCR100.dll_memset
add esp, 0xc
push 0x104
lea edx, [ebp - 0x218]
push edx
push 1
push ebx
push 2
call fcn.0043baf0
cmp eax, ebx
jl 0x419d34
cmp dword [ebp + 8], ebx
je 0x419cd5
lea edi, [ebp - 0x218]
add edi, 0xfffffffe
mov edi, edi
mov ax, word [edi + 2]
add edi, 2
cmp ax, bx
jne 0x419af0
mov eax, dword [0x4c7780]
mov dword [edi], eax
lea edi, [ebp - 0x218]
add edi, 0xfffffffe
lea esp, [esp]
mov ax, word [edi + 2]
add edi, 2
cmp ax, bx
jne 0x419b10
mov ecx, 6
mov esi, str.ksoapiv8.dll
rep movsd dword es:[edi], dword [esi]
movsw word es:[edi], word [esi]
mov dword [ebp - 0x224], ebx
mov dword [ebp - 0x220], ebx
mov dword [ebp - 0x21c], ebx
push ebx
push ebx
push 0x2001f
push ebx
push ebx
push str.TypeLib
push ebx
mov dword [ebp - 4], ebx
call fcn.0043b220
add esp, 4
push eax
lea ecx, [ebp - 0x224]
call fcn.004174b0
mov ecx, dword [ebp - 0x224]
push ebx
push ebx
push 0x2001f
push ebx
push ebx
push str.4A1D9D13_2EC6_495b_A5B5_848228E0A1CE
push ecx
lea ecx, [ebp - 0x224]
call fcn.004174b0
mov edx, dword [ebp - 0x224]
push ebx
push ebx
push 0x2001f
push ebx
push ebx
push 0x4cb72c
push edx
lea ecx, [ebp - 0x224]
call fcn.004174b0
mov esi, dword [sym.imp.KERNEL32.dll_lstrlenW]
push str.WPS_Office_1.0_Object_Library
call esi
mov ecx, dword [ebp - 0x224]
mov edi, dword [sym.imp.ADVAPI32.dll_RegSetValueExW]
inc eax
add eax, eax
push eax
push str.WPS_Office_1.0_Object_Library
push 1
push ebx
push ebx
push ecx
call edi
mov edx, dword [ebp - 0x224]
push ebx
push ebx
push 0x2001f
push ebx
push ebx
push 0x4c9330
push edx
lea ecx, [ebp - 0x224]
call fcn.004174b0
mov eax, dword [ebp - 0x224]
push ebx
push ebx
push 0x2001f
push ebx
push ebx
push str.win32
push eax
lea ecx, [ebp - 0x224]
call fcn.004174b0
lea ecx, [ebp - 0x218]
push ecx
call esi
lea edx, [eax + eax + 2]
push edx
lea eax, [ebp - 0x218]
mov ecx, dword [ebp - 0x224]
push eax
push 1
push ebx
push ebx
push ecx
call edi
push ebx
push ebx
push 0x2001f
push ebx
push ebx
push str.TypeLib
push ebx
call fcn.0043b220
add esp, 4
push eax
lea ecx, [ebp - 0x224]
call fcn.004174b0
mov edx, dword [ebp - 0x224]
push ebx
push ebx
push 0x2001f
push ebx
push ebx
push str.4A1D9D13_2EC6_495b_A5B5_848228E0A1CE
push edx
lea ecx, [ebp - 0x224]
call fcn.004174b0
mov eax, dword [ebp - 0x224]
push ebx
push ebx
push 0x2001f
push ebx
push ebx
push 0x4cb72c
push eax
lea ecx, [ebp - 0x224]
call fcn.004174b0
mov ecx, dword [ebp - 0x224]
push ebx
push ebx
push 0x2001f
push ebx
push ebx
push str.FLAGS
push ecx
lea ecx, [ebp - 0x224]
call fcn.004174b0
push 0x4c9330
call esi
mov esi, dword [ebp - 0x224]
lea edx, [eax + eax + 2]
push edx
push 0x4c9330
push 1
push ebx
push ebx
push esi
call edi
cmp esi, ebx
je 0x419d32
push esi
jmp 0x419d2c
mov dword [ebp - 0x224], ebx
mov dword [ebp - 0x220], ebx
mov dword [ebp - 0x21c], ebx
push 0x2001f
push str.TypeLib
push ebx
mov dword [ebp - 4], 1
call fcn.0043b220
add esp, 4
push eax
lea ecx, [ebp - 0x224]
call fcn.00412570
test eax, eax
jne 0x419d21
push str.4A1D9D13_2EC6_495b_A5B5_848228E0A1CE
lea ecx, [ebp - 0x224]
call fcn.004194e0
mov eax, dword [ebp - 0x224]
cmp eax, ebx
je 0x419d32
push eax
call dword [sym.imp.ADVAPI32.dll_RegCloseKey]
xor eax, eax
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 0x10]
xor ecx, ebp
call fcn.004b12f6
mov esp, ebp
pop ebp
ret