Function at 0x41a710
Capabilities:
Set registry value

Disassembly:
mov eax, 0x2110
call fcn.00443830
push ebx
push ebp
push esi
push edi
lea eax, [esp + 0x120]
mov ebx, ecx
push eax
mov dword [esp + 0x14], ebx
call fcn.0041a560
test eax, eax
js 0x41aae3
mov esi, dword [sym.imp.KERNEL32.dll_lstrcmpiW]
lea eax, [esp + 0x120]
push 0x48e780
push eax
call esi
test eax, eax
jne 0x41a757
lea esi, [eax + 8]
jmp 0x41a7a3
push 0x48e784
lea eax, [esp + 0x124]
push eax
call esi
test eax, eax
jne 0x41a771
mov esi, 0x4008
jmp 0x41a7a3
push 0x48e788
lea eax, [esp + 0x124]
push eax
call esi
test eax, eax
jne 0x41a789
lea esi, [eax + 0x13]
jmp 0x41a7a3
push 0x48e78c
lea eax, [esp + 0x124]
push eax
call esi
test eax, eax
jne 0x41aade
lea esi, [eax + 0x11]
mov ecx, ebx
call fcn.0041a510
lea eax, [esp + 0x120]
mov ecx, ebx
push eax
call fcn.0041a560
test eax, eax
js 0x41aae3
cmp esi, 0x13
ja 0x41a972
je 0x41a940
cmp esi, 8
je 0x41a8f0
cmp esi, 0x11
jne 0x41aaba
lea ebx, [esp + 0x120]
lea ecx, [ebx + 2]
nop dword [eax]
mov ax, word [ebx]
add ebx, 2
test ax, ax
jne 0x41a7f0
sub ebx, ecx
sar ebx, 1
test bl, 1
jne 0x41a838
mov eax, ebx
mov dword [esp + 0x18], 0
cdq
sub eax, edx
mov ebp, eax
sar ebp, 1
cmp ebp, 0x100
jbe 0x41a84a
push ebp
lea ecx, [esp + 0x1c]
call fcn.0041bdd0
mov eax, dword [esp + 0x18]
test eax, eax
jne 0x41a852
lea ecx, [esp + 0x18]
call fcn.0041bdc0
mov eax, 0x80004005
pop edi
pop esi
pop ebp
pop ebx
add esp, 0x2110
ret 0xc
lea eax, [esp + 0x1c]
mov dword [esp + 0x18], eax
push ebp
push 0
push eax
call sym.GUIToGo.exe_memset
add esp, 0xc
xor edi, edi
test ebx, ebx
jle 0x41a8b3
movzx edx, word [esp + edi*2 + 0x120]
mov esi, edi
shr esi, 1
add esi, dword [esp + 0x18]
lea eax, [edx - 0x30]
cmp eax, 0x36
ja case.0x41a883.58
movzx eax, byte [eax + 0x41ab0c]
jmp dword [eax*4 + 0x41aafc]
sub dl, 0x30
jmp 0x41a89b
sub dl, 0x37
jmp 0x41a89b
sub dl, 0x57
jmp 0x41a89b
xor dl, dl
mov eax, edi
mov ecx, 4
and eax, 1
inc edi
shl eax, 2
sub ecx, eax
shl dl, cl
or byte [esi], dl
cmp edi, ebx
jl 0x41a864
mov eax, dword [esp + 0x2124]
push ebp
push dword [esp + 0x1c]
push 3
push 0
push dword [esp + 0x2138]
push dword [eax]
call dword [sym.imp.ADVAPI32.dll_RegSetValueExW]
mov edi, eax
lea eax, [esp + 0x1c]
cmp dword [esp + 0x18], eax
je 0x41aa9e
lea ecx, [esp + 0x18]
call fcn.0041bdc0
jmp 0x41aa9e
lea ecx, [esp + 0x120]
lea edx, [ecx + 2]
nop word [eax + eax]
mov ax, word [ecx]
add ecx, 2
test ax, ax
jne 0x41a900
sub ecx, edx
sar ecx, 1
lea eax, [ecx*2 + 2]
push eax
lea eax, [esp + 0x124]
push eax
push 1
mov eax, dword [esp + 0x2130]
push 0
push dword [esp + 0x2138]
push dword [eax]
call dword [sym.imp.ADVAPI32.dll_RegSetValueExW]
mov edi, eax
jmp 0x41aaa2
lea eax, [esp + 0x10]
push eax
push 0
push 0
lea eax, [esp + 0x12c]
push eax
call dword [sym.imp.OLEAUT32.dll_VarUI4FromDisp]
test eax, eax
js 0x41aae3
mov eax, dword [esp + 0x10]
mov dword [esp + 0x14], eax
lea eax, [esp + 0x14]
push 4
push eax
push 4
jmp 0x41a921
cmp esi, 0x4008
jne 0x41aaba
lea ecx, [esp + 0x120]
lea edx, [ecx + 2]
nop dword [eax + eax]
mov ax, word [ecx]
add ecx, 2
test ax, ax
jne 0x41a990
sub ecx, edx
mov dword [esp + 0x18], 0
sar ecx, 1
lea eax, [ecx + 2]
mov ecx, 2
mul ecx
test edx, edx
jne 0x41aaf0
cmp eax, 0xffffffff
ja 0x41aaf0
cmp eax, 0x100
jbe 0x41a9e3
push eax
lea ecx, [esp + 0x1c]
call fcn.0041bdd0
mov esi, dword [esp + 0x18]
test esi, esi
jne 0x41a9eb
lea edi, [esi + 0xe]
jmp 0x41aa8d
lea esi, [esp + 0x1c]
mov dword [esp + 0x18], esi
cmp word [esp + 0x120], 0
lea edi, [esp + 0x120]
je 0x41aa2f
mov ebx, dword [sym.imp.USER32.dll_CharNextW]
push edi
call ebx
movzx ecx, word [edi]
cmp ecx, 0x5c
jne 0x41aa20
cmp word [eax], 0x30
jne 0x41aa20
xor ecx, ecx
push eax
mov word [esi], cx
call ebx
mov edi, eax
jmp 0x41aa26
mov word [esi], cx
add edi, 2
add esi, 2
cmp word [edi], 0
jne 0x41aa03
xor eax, eax
mov dword [esi], eax
mov esi, dword [esp + 0x18]
test esi, esi
jne 0x41aa40
lea edi, [eax + 0xd]
jmp 0x41aa8d
xor ebx, ebx
mov edx, esi
mov ecx, edx
lea edi, [ecx + 2]
nop dword [eax]
mov ax, word [ecx]
add ecx, 2
test ax, ax
jne 0x41aa50
sub ecx, edi
sar ecx, 1
inc ecx
lea edx, [edx + ecx*2]
lea ebx, [ebx + ecx*2]
cmp ecx, 1
jne 0x41aa44
mov eax, dword [esp + 0x2124]
push ebx
push esi
push 7
push 0
push dword [esp + 0x2138]
push dword [eax]
call dword [sym.imp.ADVAPI32.dll_RegSetValueExW]
mov esi, dword [esp + 0x18]
mov edi, eax
lea eax, [esp + 0x1c]
cmp esi, eax
je 0x41aa9e
lea ecx, [esp + 0x18]
call fcn.0041bdc0
mov ebx, dword [esp + 0x10]
test edi, edi
je 0x41aaba
mov ecx, edi
call fcn.00419b50
pop edi
pop esi
pop ebp
pop ebx
add esp, 0x2110
ret 0xc
push dword [esp + 0x212c]
mov ecx, ebx
call fcn.0041a560
xor ecx, ecx
test eax, eax
cmovs ecx, eax
mov eax, ecx
pop edi
pop esi
pop ebp
pop ebx
add esp, 0x2110
ret 0xc
mov eax, 0x80020009
pop edi
pop esi
pop ebp
pop ebx
add esp, 0x2110
ret 0xc
push 0x80070216
call fcn.00474010
nop
mov ch, byte [eax - 0x5770ffbf]
inc ecx
add byte [eax + ebp*4 - 0x5766ffbf], dl
inc ecx
add byte [eax], al
add byte [eax], al
add byte [eax], al
add byte [eax], al
add byte [eax], al
add byte [ebx], al
add eax, dword [ebx]
add eax, dword [ebx]
add eax, dword [ebx]
add dword [ecx], eax
add dword [ecx], eax
add dword [ecx], eax
add eax, dword [ebx]
add eax, dword [ebx]
add eax, dword [ebx]
add eax, dword [ebx]
add eax, dword [ebx]
add eax, dword [ebx]
add eax, dword [ebx]
add eax, dword [ebx]
add eax, dword [ebx]
add eax, dword [ebx]
add eax, dword [ebx]
add eax, dword [ebx]
add eax, dword [ebx]
add al, byte [edx]
add al, byte [edx]
add al, byte [edx]
int3