Function at 0x4146b0
Capabilities:
Set registry value

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x623b60
mov eax, dword fs:[0]
push eax
sub esp, 0x2c
mov eax, dword [0x6cd400]
xor eax, ebp
mov dword [ebp - 0x10], eax
push ebx
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
cmp byte [ebp + 0x14], 0
mov eax, dword [ebp + 0xc]
mov esi, dword [ebp + 8]
mov edi, dword [ebp + 0x10]
mov dword [ebp - 0x34], eax
je 0x4147da
cmp dword [esi + 0x14], 8
jb 0x4146fb
mov eax, dword [esi]
jmp 0x4146fd
mov eax, esi
lea ecx, [ebp - 0x30]
push ecx
push 0xf023f
push 0
push eax
push 0x80000002
call dword [sym.imp.ADVAPI32.dll_RegOpenKeyExW]
mov ebx, eax
cmp ebx, 2
jne 0x414773
call fcn.00401520
cmp dword [esi + 0x14], 8
lea ecx, [eax + 0xf8]
jb 0x414730
mov edx, dword [esi]
jmp 0x414732
mov edx, esi
mov eax, dword [ecx]
push edx
push 0x679d50
push 0x679c2c
push ecx
call dword [eax + 0x24]
add esp, 0x10
cmp dword [esi + 0x14], 8
jb 0x414750
mov eax, dword [esi]
jmp 0x414752
mov eax, esi
push 0
lea ecx, [ebp - 0x30]
push ecx
push 0
push 0xf013f
push 0
push 0
push 0
push eax
push 0x80000002
call dword [sym.imp.ADVAPI32.dll_RegCreateKeyExW]
mov ebx, eax
test ebx, ebx
je 0x4147af
call fcn.00401520
cmp dword [esi + 0x14], 8
lea ecx, [eax + 0xf8]
jb 0x41478a
mov esi, dword [esi]
mov eax, dword [ecx]
push esi
push ebx
push 0x679c48
push 0x679c2c
push ecx
call dword [eax + 0x24]
add esp, 0x14
push dword [ebp - 0x30]
call dword [sym.imp.ADVAPI32.dll_RegCloseKey]
xor al, al
jmp 0x41497e
push 0x679da0
lea ecx, [ebp - 0x28]
call fcn.004035b0
mov dword [ebp - 4], 0
mov ebx, dword [ebp - 0x34]
mov ecx, dword [ebx]
cmp ecx, 4
je 0x4148b1
push 4
push edi
push ecx
jmp 0x4148cd
cmp dword [esi + 0x14], 8
jb 0x4147e4
mov eax, dword [esi]
jmp 0x4147e6
mov eax, esi
lea ecx, [ebp - 0x30]
push ecx
push 0xf013f
push 0
push eax
push 0x80000002
call dword [sym.imp.ADVAPI32.dll_RegOpenKeyExW]
mov ebx, eax
cmp ebx, 2
jne 0x41485c
call fcn.00401520
cmp dword [esi + 0x14], 8
lea ecx, [eax + 0xf8]
jb 0x414819
mov edx, dword [esi]
jmp 0x41481b
mov edx, esi
mov eax, dword [ecx]
push edx
push 0x679d50
push 0x679c2c
push ecx
call dword [eax + 0x24]
add esp, 0x10
cmp dword [esi + 0x14], 8
jb 0x414839
mov eax, dword [esi]
jmp 0x41483b
mov eax, esi
push 0
lea ecx, [ebp - 0x30]
push ecx
push 0
push 0xf023f
push 0
push 0
push 0
push eax
push 0x80000002
call dword [sym.imp.ADVAPI32.dll_RegCreateKeyExW]
mov ebx, eax
test ebx, ebx
je 0x414898
call fcn.00401520
cmp dword [esi + 0x14], 8
lea ecx, [eax + 0xf8]
jb 0x414873
mov esi, dword [esi]
mov eax, dword [ecx]
push esi
push ebx
push 0x679c48
push 0x679c2c
push ecx
call dword [eax + 0x24]
add esp, 0x14
push dword [ebp - 0x30]
call dword [sym.imp.ADVAPI32.dll_RegCloseKey]
xor al, al
jmp 0x41497e
push 0x679da0
lea ecx, [ebp - 0x28]
call fcn.004035b0
mov dword [ebp - 4], 1
jmp 0x4147c3
cmp dword [edi + 0x14], 8
jb 0x4148b9
mov edi, dword [edi]
push edi
call fcn.005eaf27
add esp, 4
lea ecx, [ebp - 0x2c]
push 4
push ecx
push dword [ebx]
mov dword [ebp - 0x2c], eax
cmp dword [ebp - 0x14], 8
lea eax, [ebp - 0x28]
cmovae eax, dword [ebp - 0x28]
push 0
push eax
push dword [ebp - 0x30]
call dword [sym.imp.ADVAPI32.dll_RegSetValueExW]
mov edi, eax
test edi, edi
je 0x41494b
call fcn.00401520
cmp dword [esi + 0x14], 8
lea ecx, [eax + 0xf8]
jb 0x4148fd
mov esi, dword [esi]
mov eax, dword [ecx]
push esi
push edi
push 0x679ce8
push 0x679c2c
push ecx
call dword [eax + 0x24]
add esp, 0x14
push dword [ebp - 0x30]
call dword [sym.imp.ADVAPI32.dll_RegCloseKey]
mov dword [ebp - 4], 0xffffffff
cmp dword [ebp - 0x14], 8
jb 0x414933
push dword [ebp - 0x28]
call fcn.004c56c2
add esp, 4
xor eax, eax
mov word [ebp - 0x28], ax
xor al, al
mov dword [ebp - 0x18], 0
mov dword [ebp - 0x14], 7
jmp 0x41497e
mov dword [ebp - 4], 0xffffffff
cmp dword [ebp - 0x14], 8
jb 0x414963
push dword [ebp - 0x28]
call fcn.004c56c2
add esp, 4
push dword [ebp - 0x30]
xor eax, eax
mov dword [ebp - 0x18], eax
mov dword [ebp - 0x14], 7
mov word [ebp - 0x28], ax
call dword [sym.imp.ADVAPI32.dll_RegCloseKey]
mov al, 1
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 0x10]
xor ecx, ebp
call fcn.005e96ad
mov esp, ebp
pop ebp
ret 0x10