Function at 0x410f47
Capabilities:
Set registry value

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x527af9
mov eax, dword fs:[0]
push eax
push ecx
mov eax, 0x20cc
call fcn.00514d40
mov eax, dword [0x59d300]
xor eax, ebp
mov dword [ebp - 0x18], eax
push ebx
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov dword [ebp - 0x10], esp
mov eax, dword [ebp + 8]
xor esi, esi
mov ebx, edx
mov dword [ebp - 0x2048], ebx
mov dword [ebp - 0x2040], ecx
mov dword [ebp - 0x2050], esi
mov dword [ebp - 0x204c], esi
push eax
mov dword [ebp - 4], esi
call fcn.0040ecec
mov edi, eax
cmp edi, esi
jne 0x410fd9
mov edi, 0x3e81
lea esi, [ebp - 0x2050]
call fcn.0040e486
mov eax, edi
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 0x18]
xor ecx, ebp
call fcn.004ffa47
leave
ret 4
lea eax, [ebp - 0x203c]
push eax
lea eax, [ebp - 0x201c]
push eax
push dword [ebp - 0x2040]
mov dword [ebp - 0x2050], edi
mov dword [ebp - 0x204c], esi
mov dword [ebp - 0x203c], 0x1000
call fcn.00411f74
cmp dword [ebx + 0x18], 8
jb 0x411019
mov eax, dword [ebx + 4]
mov dword [ebp - 0x203c], eax
jmp 0x411022
add ebx, 4
mov dword [ebp - 0x203c], ebx
lea ebx, [ebp - 0x201c]
push ebx
call dword [sym.imp.KERNEL32.dll_lstrlenW]
inc eax
lea ecx, [eax + eax]
add ebx, ecx
add esi, ecx
cmp eax, 1
jne 0x411028
push esi
lea eax, [ebp - 0x201c]
push eax
push 7
xor esi, esi
push esi
push dword [ebp - 0x203c]
push edi
call dword [sym.imp.ADVAPI32.dll_RegSetValueExW]
mov dword [ebp - 0x203c], eax
cmp eax, esi
jne 0x411072
push edi
call dword [sym.imp.ADVAPI32.dll_RegFlushKey]
mov edi, dword [ebp - 0x203c]
jmp 0x410fb0
call fcn.0040dbda
cmp byte [eax], 0
jne 0x411102
lea eax, [ebp - 0x20dc]
push eax
call fcn.0040d9e1
push dword [ebp - 0x2048]
mov ebx, 0x543368
push ecx
push ebx
push ecx
lea eax, [ebp - 0x20d4]
push str.CRegistry::setMultiValue_...___for_key
push eax
mov byte [ebp - 4], 1
call fcn.0040c0a0
add esp, 0xc
push eax
call fcn.0040c0a0
add esp, 0xc
push eax
call fcn.0040b612
pop ecx
pop ecx
lea eax, [ebp - 0x2038]
push eax
lea ecx, [ebp - 0x20dc]
call fcn.0040bf31
lea edi, [ebp - 0x2038]
mov byte [ebp - 4], 2
call fcn.0040ba4e
push esi
push 1
mov esi, edi
call fcn.0040dac5
lea eax, [ebp - 0x20dc]
mov byte [ebp - 4], 0
call fcn.0040c22b
jmp 0x411255
lea eax, [ebp - 0x20d4]
push eax
mov byte [ebp - 4], 3
call fcn.0040b935
mov byte [ebp - 4], 4
call fcn.0040dbda
lea ecx, [ebp - 0x2038]
call fcn.0040b84b
mov byte [ebp - 4], 5
cmp dword [eax + 0x18], 8
jb 0x411135
mov edi, dword [eax + 4]
jmp 0x411138
lea edi, [eax + 4]
lea eax, [ebp - 0x20d4]
push 0x54331c
push eax
call fcn.0040c0a0
pop ecx
pop ecx
push edi
push eax
call fcn.0040c0a0
pop ecx
pop ecx
push 0x543314
push eax
call fcn.0040c0a0
pop ecx
pop ecx
push str.CRegistry::setMultiValue_...___for_key
push eax
call fcn.0040c0a0
pop ecx
pop ecx
mov ebx, 0x543368
push ebx
push eax
call fcn.0040c0a0
pop ecx
pop ecx
push dword [ebp - 0x2048]
push eax
call fcn.0040b612
pop ecx
pop ecx
push esi
push 1
lea esi, [ebp - 0x2038]
mov byte [ebp - 4], 4
call fcn.0040dac5
lea eax, [ebp - 0x2044]
push eax
call sub.log4cplusU.dll_public:_static_class_log4cplus::Logger___cdecl_log4cplus::Logger::getRoot_void_
pop ecx
mov edi, 0x2710
push edi
lea ecx, [ebp - 0x2044]
mov byte [ebp - 4], 6
call sub.log4cplusU.dll_public:_bool___thiscall_log4cplus::Logger::isEnabledFor_int_const
test al, al
je 0x4111fe
lea eax, [ebp - 0x2038]
push eax
lea ecx, [ebp - 0x20d4]
call fcn.0040b831
push 0x112
push str..Registry.cpp
push eax
push edi
lea ecx, [ebp - 0x2044]
mov byte [ebp - 4], 7
call sub.log4cplusU.dll_public:_void___thiscall_log4cplus::Logger::forcedLog_int__class_std::basic_string_wchar_t__struct_std::char_traits_wchar_t___class_std::allocator_wchar_t___const___char_const___int_const
push 0
push 1
lea esi, [ebp - 0x2038]
call fcn.0040dac5
lea ecx, [ebp - 0x2044]
mov byte [ebp - 4], 4
call sub.log4cplusU.dll_public_virtual:_void___thiscall_log4cplus::Logger::destructor_void_
lea eax, [ebp - 0x20d4]
mov byte [ebp - 4], 3
call fcn.0040b8a0
and dword [ebp - 4], 0
jmp 0x41125a
mov edi, 0x2710
call fcn.0040dbda
cmp byte [eax], 0
jne 0x4112e0
lea eax, [ebp - 0x20dc]
push eax
call fcn.0040d9e1
mov byte [ebp - 4], 0xa
push dword [ebp - 0x203c]
lea eax, [ebp - 0x20d4]
push ecx
push ebx
push ecx
push str.CRegistry::setMultiValue_...___SetMultiStringValue_error
push eax
call fcn.0040c0a0
add esp, 0xc
push eax
call fcn.0040c0a0
add esp, 0xc
push eax
call fcn.00408e51
lea eax, [ebp - 0x2038]
push eax
lea ecx, [ebp - 0x20dc]
call fcn.0040bf31
lea edi, [ebp - 0x2038]
mov byte [ebp - 4], 0xb
call fcn.0040ba4e
push 0
push 1
mov esi, edi
call fcn.0040dac5
lea eax, [ebp - 0x20dc]
mov byte [ebp - 4], 0
call fcn.0040c22b
jmp 0x411067
lea eax, [ebp - 0x20d4]
push eax
mov byte [ebp - 4], 0xc
call fcn.0040b935
mov byte [ebp - 4], 0xd
call fcn.0040dbda
lea ecx, [ebp - 0x2038]
call fcn.0040b84b
mov byte [ebp - 4], 0xe
cmp dword [eax + 0x18], 8
jb 0x411313
mov esi, dword [eax + 4]
jmp 0x411316
lea esi, [eax + 4]
lea eax, [ebp - 0x20d4]
push 0x54331c
push eax
call fcn.0040c0a0
pop ecx
pop ecx
push esi
push eax
call fcn.0040c0a0
pop ecx
pop ecx
push 0x543314
push eax
call fcn.0040c0a0
pop ecx
pop ecx
push str.CRegistry::setMultiValue_...___SetMultiStringValue_error
push eax
call fcn.0040c0a0
pop ecx
pop ecx
push ebx
push eax
call fcn.0040c0a0
pop ecx
pop ecx
push dword [ebp - 0x203c]
push eax
call fcn.00408e51
push 0
push 1
lea esi, [ebp - 0x2038]
mov byte [ebp - 4], 0xd
call fcn.0040dac5
lea eax, [ebp - 0x2044]
push eax
call sub.log4cplusU.dll_public:_static_class_log4cplus::Logger___cdecl_log4cplus::Logger::getRoot_void_
pop ecx
push edi
lea ecx, [ebp - 0x2044]
mov byte [ebp - 4], 0xf
call sub.log4cplusU.dll_public:_bool___thiscall_log4cplus::Logger::isEnabledFor_int_const
test al, al
je 0x4113d1
lea eax, [ebp - 0x2038]
push eax
lea ecx, [ebp - 0x20d4]
call fcn.0040b831
push 0x113
push str..Registry.cpp
push eax
push edi
lea ecx, [ebp - 0x2044]
mov byte [ebp - 4], 0x10
call sub.log4cplusU.dll_public:_void___thiscall_log4cplus::Logger::forcedLog_int__class_std::basic_string_wchar_t__struct_std::char_traits_wchar_t___class_std::allocator_wchar_t___const___char_const___int_const
push 0
push 1
lea esi, [ebp - 0x2038]
call fcn.0040dac5
lea ecx, [ebp - 0x2044]
mov byte [ebp - 4], 0xd
call sub.log4cplusU.dll_public_virtual:_void___thiscall_log4cplus::Logger::destructor_void_
lea eax, [ebp - 0x20d4]
mov byte [ebp - 4], 0xc
call fcn.0040b8a0
jmp 0x411067