Function at 0x4146df
Capabilities:
Set registry value

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x14
mov eax, dword [ebp + 0x10]
push ebx
push esi
xor esi, esi
mov ebx, ecx
mov ecx, dword [ebp + 0xc]
push edi
mov edi, dword [ebp + 0x14]
inc esi
mov dword [ebp - 0xc], ebx
mov dword [ebp - 8], edx
mov dword [ebp - 0x10], eax
mov dword [ebp - 4], edi
cmp ecx, esi
jne 0x414726
mov edi, ebx
mov dword [ebx + 0x50], esi
call fcn.004157ed
mov ecx, dword [ebp - 4]
mov dword [ecx], eax
cmp dword [ebx + 0x50], 0
je 0x414ad2
mov eax, esi
jmp 0x414aeb
cmp ecx, 2
jne 0x41473d
mov edi, ebx
mov dword [ebx + 0x50], esi
call fcn.00415db0
mov eax, dword [ebp - 4]
and dword [eax], 0
jmp 0x414715
cmp ecx, 0x113
jne 0x414755
push edx
mov ecx, ebx
mov dword [ebx + 0x50], esi
call fcn.004173c5
and dword [edi], 0
jmp 0x414715
cmp ecx, 0x11
jne 0x41477e
mov esi, ebx
mov dword [ebx + 0x50], 1
call fcn.00418b32
mov ecx, edi
mov dword [ecx], eax
cmp dword [ebx + 0x50], 0
je 0x414ad2
xor eax, eax
inc eax
jmp 0x414aeb
cmp ecx, 0x4a
jne 0x4147a4
mov dword [ebx + 0x50], esi
test eax, eax
jne 0x41478e
xor eax, eax
jmp 0x41479d
mov esi, eax
mov edi, ebx
call fcn.00418b72
mov edi, dword [ebp - 4]
xor esi, esi
inc esi
mov dword [edi], eax
jmp 0x414715
cmp ecx, 0x218
jne 0x4147b9
push eax
push edx
push ebx
mov dword [ebx + 0x50], esi
call fcn.004196d1
jmp 0x41479d
cmp ecx, 0x2b1
jne 0x4147e9
mov dword [ebx + 0x50], esi
cmp edx, 7
jne 0x4147d1
call fcn.0040837a
mov dword [eax + 0x14], esi
cmp dword [ebp - 8], 8
jne 0x414750
call fcn.0040837a
and dword [eax + 0x14], 0
jmp 0x414750
cmp ecx, 0x4f3
jne 0x4147fe
push edx
mov eax, ebx
mov dword [ebx + 0x50], esi
call fcn.0041798d
jmp 0x41479d
cmp ecx, 0x778
jne 0x414812
mov ecx, ebx
mov dword [ebx + 0x50], esi
call fcn.00417b7b
jmp 0x41479d
cmp ecx, 0x591
jne 0x414839
mov dword [ebx + 0x50], esi
cmp edx, 0x6e
jne 0x41478a
add ebx, 0x64c
call fcn.004112de
mov ebx, dword [ebp - 0xc]
jmp 0x41479a
cmp ecx, 0x4f0
jne 0x414851
push eax
mov ecx, ebx
mov dword [ebx + 0x50], esi
call fcn.00418ef5
jmp 0x41479d
cmp ecx, 0xd64
jne 0x414870
cmp byte [ebx + 0x60], 0
mov dword [ebx + 0x50], esi
jne 0x414750
call fcn.004220de
jmp 0x414750
cmp ecx, 0x4ec
jne 0x414895
mov dword [ebx + 0x50], esi
call fcn.00419589
test eax, eax
jne 0x41478a
push dword [ebp - 8]
call fcn.0041961e
jmp 0x41479d
cmp ecx, 0x779
jne 0x4148ad
push edx
mov ecx, ebx
mov dword [ebx + 0x50], esi
call fcn.0041a042
jmp 0x41479d
cmp ecx, 0xd61
jne 0x4148d3
xor edi, edi
push edi
mov esi, ebx
mov dword [ebx + 0x50], 1
call fcn.0041816c
mov eax, dword [ebp - 4]
mov dword [eax], edi
cmp dword [ebx + 0x50], edi
jmp 0x414770
cmp ecx, 0x7e
jne 0x4148fd
push 2
push 0x44d7e0
push esi
push str.MontiorInfo
push str.SOFTWARE360SafeMsgCenter
push reloc.OLEAUT32.dll_SysReAllocString
mov dword [ebx + 0x50], esi
call dword [sym.imp.SHLWAPI.dll_SHSetValueW]
jmp 0x414750
cmp ecx, 0xd00
jne 0x414913
push ebx
mov dword [ebx + 0x50], esi
call fcn.00419cee
jmp 0x41479d
cmp ecx, 0xd02
jne 0x414935
push 0
push 0
mov dword [ebx + 0x50], esi
push 0xd09
push dword [ebx + 4]
call dword [sym.imp.USER32.dll_PostMessageW]
jmp 0x414750
cmp ecx, 0xd09
jne 0x414955
xor eax, eax
inc eax
push eax
mov esi, ebx
mov dword [ebx + 0x50], eax
call fcn.0041816c
mov eax, edi
and dword [eax], 0
jmp 0x41476c
cmp ecx, 0xd0a
jne 0x414974
lea eax, [ebx + 0x538]
push eax
mov dword [ebx + 0x50], esi
call fcn.00409539
push 0
push 0
push 0x10
jmp 0x414927
cmp ecx, 0xd04
jne 0x41498f
mov esi, ebx
mov dword [ebx + 0x50], 1
call fcn.00419c7b
jmp 0x414768
cmp ecx, 0xd03
jne 0x4149a5
push ebx
mov dword [ebx + 0x50], esi
call fcn.0041986b
jmp 0x41479d
cmp ecx, 0xd0b
jne 0x4149bb
push ebx
mov dword [ebx + 0x50], esi
call fcn.004197e5
jmp 0x41479d
cmp ecx, 0xd0d
jne 0x4149d4
push eax
push edx
mov ecx, ebx
mov dword [ebx + 0x50], esi
call fcn.004198f1
jmp 0x41479d
cmp ecx, 0xd05
jne 0x414a09
lea eax, [ebx + 0x944]
mov dword [ebx + 0x50], esi
call fcn.0041c47d
test eax, eax
je 0x4149f5
mov eax, esi
jmp 0x41479d
lea eax, [ebx + 0x944]
call fcn.0041c494
neg eax
sbb eax, eax
jmp 0x41479d
cmp ecx, 0xd01
jne 0x414a25
push edx
lea eax, [ebx + 0x538]
mov dword [ebx + 0x50], esi
call fcn.00409bd3
jmp 0x414750
cmp ecx, 0xd07
jne 0x414a4c
cmp dword [ebx + 0x508], 0
mov dword [ebx + 0x50], esi
je 0x414a44
mov eax, dword [ebx + 0x504]
jmp 0x41479d
or eax, 0xffffffff
jmp 0x41479d
cmp ecx, 0xd08
jne 0x414a62
push ebx
mov dword [ebx + 0x50], esi
call fcn.00419e4c
jmp 0x41479d
cmp ecx, 0xd60
jne 0x414a79
mov edi, ebx
mov dword [ebx + 0x50], esi
call fcn.00419f0e
jmp 0x414710
cmp ecx, 0xd62
jne 0x414ab2
cmp dword [0x45eac0], 0
mov dword [ebx + 0x50], esi
je 0x414750
lea edi, [ebp - 0x14]
mov ecx, ebx
call fcn.004172a7
test eax, eax
je 0x414aaa
mov eax, dword [ebp - 0x14]
call fcn.004171af
xor esi, esi
inc esi
mov edi, dword [ebp - 4]
jmp 0x414750
cmp ecx, 0xd63
jne 0x414ad2
mov dword [ebx + 0x50], esi
call fcn.00419f4d
mov ecx, edi
mov dword [ecx], eax
mov eax, ebx
cmp dword [eax + 0x50], 0
jne 0x414776
push dword [ebp - 4]
mov edx, dword [ebp - 0x10]
push dword [ebp - 8]
mov edi, dword [ebp + 0xc]
mov ecx, ebx
call fcn.004156b5
neg eax
sbb eax, eax
neg eax
pop edi
pop esi
pop ebx
leave
ret 0x10