Function at 0x1d10020
Capabilities:
Check if file exists
Set registry value

Disassembly:
mov eax, 0x1d57c82
call fcn.01d55708
sub esp, 0x3c
push ebx
push esi
mov ebx, ecx
push edi
lea ecx, [ebp - 0x18]
call dword [sym.imp.mfc100.dll_Ordinal_316]
and dword [ebp - 4], 0
lea ecx, [ebp - 0x1c]
call dword [sym.imp.mfc100.dll_Ordinal_316]
lea eax, [ebp - 0x18]
push eax
push 0x443
mov ecx, ebx
mov byte [ebp - 4], 1
call sub.mfc100.dll_Ordinal_4790
push 0xcc2b9f9
lea ecx, [ebp - 0x33]
call fcn.01d12c29
mov edi, eax
push 0x5c
lea ecx, [ebp - 0x18]
mov byte [ebp - 4], 2
call dword [sym.imp.mfc100.dll_Ordinal_11744]
push eax
lea eax, [ebp - 0x14]
push eax
lea ecx, [ebp - 0x18]
call dword [sym.imp.mfc100.dll_Ordinal_7487]
mov esi, eax
push 0x4391b593
lea ecx, [ebp - 0x26]
call fcn.01d12bee
push edi
push dword [esi]
mov esi, dword [sym.imp.mfc100.dll_Ordinal_4283]
push eax
lea eax, [ebp - 0x1c]
push eax
mov byte [ebp - 4], 4
call esi
xor eax, eax
lea edi, [ebp - 0x26]
stosd dword es:[edi], eax
add esp, 0x10
lea ecx, [ebp - 0x14]
stosw word es:[edi], ax
call dword [sym.imp.mfc100.dll_Ordinal_901]
lea ecx, [ebp - 0x48]
mov byte [ebp - 4], 1
call fcn.01d40d0f
lea ecx, [ebp - 0x1c]
mov byte [ebp - 4], 5
call dword [sym.imp.mfc100.dll_Ordinal_1448]
push eax
call dword [sym.imp.SHLWAPI.dll_PathFileExistsA]
test eax, eax
je 0x1d10559
lea eax, [ebp - 0x20]
push eax
lea ecx, [ebp - 0x1c]
call dword [sym.imp.mfc100.dll_Ordinal_1448]
push eax
lea ecx, [ebp - 0x48]
call fcn.01d40c3e
test eax, eax
je 0x1d10559
lea ecx, [ebp - 0x14]
call dword [sym.imp.mfc100.dll_Ordinal_316]
mov eax, 0x1d62278
sub eax, 0x64961c86
push eax
lea ecx, [ebp - 0x25]
call fcn.01d12c64
push dword [ebp - 0x20]
mov byte [ebp - 4], 7
push eax
lea eax, [ebp - 0x14]
push eax
call esi
mov eax, 0x1d62280
add esp, 0xc
sub eax, 0x52cde789
push eax
lea ecx, [ebp - 0x35]
call fcn.01d12ca1
push eax
lea ecx, [ebp - 0x14]
mov byte [ebp - 4], 8
call dword [sym.imp.mfc100.dll_Ordinal_2611]
neg eax
sbb al, al
inc al
je 0x1d10188
push 0x4e1cd2e3
lea ecx, [ebp - 0x25]
call fcn.01d12cde
push eax
push 0x45a
mov ecx, ebx
mov byte [ebp - 4], 9
call sub.mfc100.dll_Ordinal_4785
mov ecx, eax
call sub.mfc100.dll_Ordinal_12868
xor esi, esi
inc esi
jmp 0x1d1054e
mov eax, 0x1d62294
sub eax, 0x5277abb6
push eax
lea ecx, [ebp - 0x35]
call fcn.01d12d19
push eax
lea ecx, [ebp - 0x14]
mov byte [ebp - 4], 0xa
call dword [sym.imp.mfc100.dll_Ordinal_2611]
neg eax
sbb al, al
inc al
je 0x1d101e3
mov eax, str.__:8
sub eax, 0x3d6b0cbd
push eax
lea ecx, [ebp - 0x25]
call fcn.01d12d56
push eax
push 0x45a
mov ecx, ebx
mov byte [ebp - 4], 0xb
call sub.mfc100.dll_Ordinal_4785
mov ecx, eax
call sub.mfc100.dll_Ordinal_12868
push 2
jmp 0x1d10521
mov eax, 0x1d622a8
sub eax, 0x18fd9d23
push eax
lea ecx, [ebp - 0x35]
call fcn.01d12d91
push eax
lea ecx, [ebp - 0x14]
mov byte [ebp - 4], 0xc
call dword [sym.imp.mfc100.dll_Ordinal_2611]
neg eax
sbb al, al
inc al
je 0x1d1023e
mov eax, 0x1d622b4
sub eax, 0x172047a1
push eax
lea ecx, [ebp - 0x25]
call fcn.01d12dcc
push eax
push 0x45a
mov ecx, ebx
mov byte [ebp - 4], 0xd
call sub.mfc100.dll_Ordinal_4785
mov ecx, eax
call sub.mfc100.dll_Ordinal_12868
push 3
jmp 0x1d10521
mov eax, 0x1d622bc
sub eax, 0x3bb0d0c8
push eax
lea ecx, [ebp - 0x35]
call fcn.01d12e07
push eax
lea ecx, [ebp - 0x14]
mov byte [ebp - 4], 0xe
call dword [sym.imp.mfc100.dll_Ordinal_2611]
neg eax
sbb al, al
inc al
je 0x1d10299
mov eax, 0x1d622c8
sub eax, 0x1d7534b1
push eax
lea ecx, [ebp - 0x25]
call fcn.01d12e44
push eax
push 0x45a
mov ecx, ebx
mov byte [ebp - 4], 0xf
call sub.mfc100.dll_Ordinal_4785
mov ecx, eax
call sub.mfc100.dll_Ordinal_12868
push 4
jmp 0x1d10521
push 0x54ceb79a
lea ecx, [ebp - 0x35]
call fcn.01d12e81
push eax
lea ecx, [ebp - 0x14]
mov byte [ebp - 4], 0x10
call dword [sym.imp.mfc100.dll_Ordinal_2611]
neg eax
sbb al, al
inc al
je 0x1d102e8
push 0x4af1cf30
lea ecx, [ebp - 0x25]
call fcn.01d12ebc
push eax
push 0x45a
mov ecx, ebx
mov byte [ebp - 4], 0x11
call sub.mfc100.dll_Ordinal_4785
mov ecx, eax
call sub.mfc100.dll_Ordinal_12868
push 5
jmp 0x1d10521
mov eax, 0x1d622e4
sub eax, 0x7a734d3e
push eax
lea ecx, [ebp - 0x35]
call fcn.01d12ef7
push eax
lea ecx, [ebp - 0x14]
mov byte [ebp - 4], 0x12
call dword [sym.imp.mfc100.dll_Ordinal_2611]
neg eax
sbb al, al
inc al
je 0x1d1033d
push 0x45605371
lea ecx, [ebp - 0x25]
call fcn.01d12f34
push eax
push 0x45a
mov ecx, ebx
mov byte [ebp - 4], 0x13
call sub.mfc100.dll_Ordinal_4785
mov ecx, eax
call sub.mfc100.dll_Ordinal_12868
push 6
jmp 0x1d10521
mov eax, 0x1d622f8
sub eax, 0x62ad94b
push eax
lea ecx, [ebp - 0x35]
call fcn.01d12f6f
push eax
lea ecx, [ebp - 0x14]
mov byte [ebp - 4], 0x14
call dword [sym.imp.mfc100.dll_Ordinal_2611]
neg eax
sbb al, al
inc al
je 0x1d10392
push 0x6ed64232
lea ecx, [ebp - 0x25]
call fcn.01d12faa
push eax
push 0x45a
mov ecx, ebx
mov byte [ebp - 4], 0x15
call sub.mfc100.dll_Ordinal_4785
mov ecx, eax
call sub.mfc100.dll_Ordinal_12868
push 7
jmp 0x1d10521
push 0x421be32c
lea ecx, [ebp - 0x35]
call fcn.01d12fe5
push eax
lea ecx, [ebp - 0x14]
mov byte [ebp - 4], 0x16
call dword [sym.imp.mfc100.dll_Ordinal_2611]
neg eax
sbb al, al
inc al
je 0x1d103e1
push 0x769ebd7
lea ecx, [ebp - 0x25]
call fcn.01d13022
push eax
push 0x45a
mov ecx, ebx
mov byte [ebp - 4], 0x17
call sub.mfc100.dll_Ordinal_4785
mov ecx, eax
call sub.mfc100.dll_Ordinal_12868
push 8
jmp 0x1d10521
push 0x2bdff80b
lea ecx, [ebp - 0x35]
call fcn.01d1305f
push eax
lea ecx, [ebp - 0x14]
mov byte [ebp - 4], 0x18
call dword [sym.imp.mfc100.dll_Ordinal_2611]
neg eax
sbb al, al
inc al
je 0x1d10436
mov eax, 0x1d6232c
sub eax, 0x1d265e8d
push eax
lea ecx, [ebp - 0x25]
call fcn.01d1309c
push eax
push 0x45a
mov ecx, ebx
mov byte [ebp - 4], 0x19
call sub.mfc100.dll_Ordinal_4785
mov ecx, eax
call sub.mfc100.dll_Ordinal_12868
push 9
jmp 0x1d10521
push 0x13e4e3e3
lea ecx, [ebp - 0x35]
call fcn.01d130d9
push eax
lea ecx, [ebp - 0x14]
mov byte [ebp - 4], 0x1a
call dword [sym.imp.mfc100.dll_Ordinal_2611]
neg eax
sbb al, al
inc al
je 0x1d10485
push 0x2be6505c
lea ecx, [ebp - 0x25]
call fcn.01d13116
push eax
push 0x45a
mov ecx, ebx
mov byte [ebp - 4], 0x1b
call sub.mfc100.dll_Ordinal_4785
mov ecx, eax
call sub.mfc100.dll_Ordinal_12868
push 0xa
jmp 0x1d10521
push 0x58e844e9
lea ecx, [ebp - 0x35]
call fcn.01d13153
push eax
lea ecx, [ebp - 0x14]
mov byte [ebp - 4], 0x1c
call dword [sym.imp.mfc100.dll_Ordinal_2611]
neg eax
sbb al, al
inc al
je 0x1d104d1
push 0x6b1c350f
lea ecx, [ebp - 0x25]
call fcn.01d13190
push eax
push 0x45a
mov ecx, ebx
mov byte [ebp - 4], 0x1d
call sub.mfc100.dll_Ordinal_4785
mov ecx, eax
call sub.mfc100.dll_Ordinal_12868
push 0xb
jmp 0x1d10521
push 0x78ccff07
lea ecx, [ebp - 0x35]
call fcn.01d131cd
push eax
lea ecx, [ebp - 0x14]
mov byte [ebp - 4], 0x1e
call dword [sym.imp.mfc100.dll_Ordinal_2611]
neg eax
sbb al, al
inc al
lea ecx, [ebp - 0x25]
je 0x1d10524
mov eax, 0x1d62368
sub eax, 0xed75c2
push eax
call fcn.01d1320a
push eax
push 0x45a
mov ecx, ebx
mov byte [ebp - 4], 0x1f
call sub.mfc100.dll_Ordinal_4785
mov ecx, eax
call sub.mfc100.dll_Ordinal_12868
push 0xc
pop esi
jmp 0x1d1054e
mov eax, 0x1d62370
sub eax, 0x723df7c5
push eax
call fcn.01d13247
push eax
push 0x45a
mov ecx, ebx
mov byte [ebp - 4], 0x20
call sub.mfc100.dll_Ordinal_4785
mov ecx, eax
call sub.mfc100.dll_Ordinal_12868
xor esi, esi
lea ecx, [ebp - 0x14]
call dword [sym.imp.mfc100.dll_Ordinal_901]
jmp 0x1d10580
push 0x4bae2f78
lea ecx, [ebp - 0x25]
call fcn.01d13282
push eax
push 0x45a
mov ecx, ebx
mov byte [ebp - 4], 0x21
call sub.mfc100.dll_Ordinal_4785
mov ecx, eax
call sub.mfc100.dll_Ordinal_12868
xor esi, esi
mov eax, 0x1d62380
xor ebx, ebx
sub eax, 0x6180d1e7
push eax
lea ecx, [ebp - 0x3e]
mov dword [ebp - 0x2c], ebx
mov dword [ebp - 0x28], ebx
mov dword [ebp - 0x24], ebx
call fcn.01d0c163
push ebx
push ebx
push 0xf003f
push ebx
push ebx
push eax
push connect
lea ecx, [ebp - 0x2c]
call fcn.01d0c01b
mov eax, 0x1d62394
sub eax, 0x27eef134
push eax
lea ecx, [ebp - 0x33]
call fcn.01d132bf
push 1
lea ecx, [ebp - 0x18]
mov edi, eax
call dword [sym.imp.mfc100.dll_Ordinal_1448]
push eax
push edi
lea ecx, [ebp - 0x2c]
call fcn.01d0c0bb
push 0x5868433
lea ecx, [ebp - 0x3a]
call fcn.01d132fa
push 4
lea ecx, [ebp - 0x14]
push ecx
push 4
push ebx
push eax
push dword [ebp - 0x2c]
mov dword [ebp - 0x14], esi
call dword [sym.imp.ADVAPI32.dll_RegSetValueExA]
lea ecx, [ebp - 0x2c]
call fcn.01d078f0
lea ecx, [ebp - 0x2c]
call fcn.01d078f0
lea ecx, [ebp - 0x48]
mov byte [ebp - 4], 1
call fcn.01d40d21
lea ecx, [ebp - 0x1c]
call dword [sym.imp.mfc100.dll_Ordinal_901]
lea ecx, [ebp - 0x18]
call dword [sym.imp.mfc100.dll_Ordinal_901]
mov ecx, dword [ebp - 0xc]
pop edi
mov eax, esi
pop esi
pop ebx
mov dword fs:[0], ecx
leave
ret