Function at 0x100037e9
Capabilities:
Set registry value

Disassembly:
push ebp
lea ebp, [esp - 0x2d8]
sub esp, 0x358
mov eax, dword [0x10071ef0]
xor eax, ebp
mov dword [ebp + 0x2d4], eax
push ebx
push esi
push edi
lea eax, [ebp - 0x7c]
push eax
mov ebx, 0xf013f
push ebx
xor edi, edi
push edi
push str.DAEMON.Tools.Lite
mov esi, SysReAllocStringLen
push esi
mov dword [ebp - 0x80], edi
call dword [sym.imp.ADVAPI32.dll_RegOpenKeyExW]
cmp dword [ebp - 0x7c], edi
jne 0x10003852
lea eax, [ebp - 0x80]
push eax
lea eax, [ebp - 0x7c]
push eax
push edi
push ebx
push edi
push edi
push edi
push str.DAEMON.Tools.Lite
push esi
call dword [sym.imp.ADVAPI32.dll_RegCreateKeyExW]
cmp dword [ebp - 0x7c], edi
jne 0x10003852
xor al, al
jmp 0x100039f3
cmp dword [ebp - 0x80], 1
jne 0x100039e8
push 0xfe
lea eax, [ebp + 0x1d6]
push edi
push eax
mov word [ebp + 0x1d4], di
call sub.MSVCR80.dll_memset
push 0x100721a0
lea eax, [ebp + 0x1d4]
push 0x80
push eax
call dword [sym.imp.MSVCR80.dll_wcscpy_s]
lea eax, [ebp + 0x1d4]
push eax
call dword [sym.imp.MSVCR80.dll_wcslen]
add esp, 0x1c
add eax, eax
push eax
lea eax, [ebp + 0x1d4]
push eax
push 1
push edi
push 0x10044d40
push dword [ebp - 0x7c]
call dword [sym.imp.ADVAPI32.dll_RegSetValueExW]
lea eax, [ebp - 0x78]
push eax
push ebx
push edi
mov esi, str.DefaultIcon
push esi
push dword [ebp - 0x7c]
mov dword [ebp - 0x78], edi
call dword [sym.imp.ADVAPI32.dll_RegOpenKeyExW]
cmp dword [ebp - 0x78], edi
jne 0x100038e8
push edi
lea eax, [ebp - 0x78]
push eax
push edi
push ebx
push edi
push edi
push edi
push esi
push dword [ebp - 0x7c]
call dword [sym.imp.ADVAPI32.dll_RegCreateKeyExW]
push 0x246
lea eax, [ebp - 0x72]
push edi
push eax
mov word [ebp - 0x74], di
call sub.MSVCR80.dll_memset
add esp, 0xc
cmp dword [ebp - 0x78], edi
mov esi, 0x124
je 0x10003956
push 0x10071f98
lea eax, [ebp - 0x74]
push esi
push eax
call dword [sym.imp.MSVCR80.dll_wcscpy_s]
push str.DTLite.exe_0
lea eax, [ebp - 0x74]
push esi
push eax
call dword [sym.imp.MSVCR80.dll_wcscat_s]
lea eax, [ebp - 0x74]
push eax
call dword [sym.imp.MSVCR80.dll_wcslen]
add esp, 0x1c
add eax, eax
push eax
lea eax, [ebp - 0x74]
push eax
push 1
push edi
push 0x10044d40
push dword [ebp - 0x78]
call dword [sym.imp.ADVAPI32.dll_RegSetValueExW]
push dword [ebp - 0x78]
call dword [sym.imp.ADVAPI32.dll_RegCloseKey]
lea eax, [ebp - 0x78]
push eax
push ebx
push edi
push 0x10044e84
push dword [ebp - 0x7c]
call dword [sym.imp.ADVAPI32.dll_RegOpenKeyExW]
cmp dword [ebp - 0x78], edi
jne 0x1000398c
push edi
lea eax, [ebp - 0x78]
push eax
push edi
push ebx
push edi
push edi
push edi
push 0x10044e84
push dword [ebp - 0x7c]
call dword [sym.imp.ADVAPI32.dll_RegCreateKeyExW]
cmp dword [ebp - 0x78], edi
je 0x100039e8
push 0x10044e80
lea eax, [ebp - 0x74]
push esi
push eax
call dword [sym.imp.MSVCR80.dll_wcscpy_s]
mov ebx, dword [sym.imp.MSVCR80.dll_wcscat_s]
push 0x10071f98
lea eax, [ebp - 0x74]
push esi
push eax
call ebx
push str.DTLite.exe___shellmount___1_
lea eax, [ebp - 0x74]
push esi
push eax
call ebx
lea eax, [ebp - 0x74]
push eax
call dword [sym.imp.MSVCR80.dll_wcslen]
add esp, 0x28
add eax, eax
push eax
lea eax, [ebp - 0x74]
push eax
push 1
push edi
push 0x10044d40
push dword [ebp - 0x78]
call dword [sym.imp.ADVAPI32.dll_RegSetValueExW]
push dword [ebp - 0x78]
call dword [sym.imp.ADVAPI32.dll_RegCloseKey]
push dword [ebp - 0x7c]
call dword [sym.imp.ADVAPI32.dll_RegCloseKey]
mov al, 1
mov ecx, dword [ebp + 0x2d4]
pop edi
pop esi
xor ecx, ebp
pop ebx
call fcn.1003e70b
add ebp, 0x2d8
leave
ret