Function at 0x4017e0
Capabilities:
Set registry value

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x48
mov dword [ebp - 0x20], 0x10
mov dword [ebp - 0x24], 2
mov dword [ebp - 0x28], 1
push 4
lea eax, [ebp - 0x20]
push eax
push 4
push str.Type
push 0x402538
push 1
call dword [sym.imp.ntdll.dll_RtlWriteRegistryValue]
mov dword [ebp - 0xc], eax
cmp dword [ebp - 0xc], 0
jge 0x401825
xor al, al
jmp 0x401a03
push 4
lea ecx, [ebp - 0x24]
push ecx
push 4
push str.Start
push 0x402538
push 1
call dword [sym.imp.ntdll.dll_RtlWriteRegistryValue]
mov dword [ebp - 0xc], eax
cmp dword [ebp - 0xc], 0
jge 0x40184f
xor al, al
jmp 0x401a03
push 4
lea edx, [ebp - 0x28]
push edx
push 4
push str.ErrorControl
push 0x402538
push 1
call dword [sym.imp.ntdll.dll_RtlWriteRegistryValue]
mov dword [ebp - 0xc], eax
cmp dword [ebp - 0xc], 0
jge 0x401879
xor al, al
jmp 0x401a03
mov eax, dword [str._C:Program_FilesHuaweiBusHuaweiBus.exe_]
mov dword [ebp - 0x10], eax
mov ecx, dword [ebp - 0x10]
add ecx, 2
mov dword [ebp - 0x2c], ecx
mov edx, dword [ebp - 0x10]
mov ax, word [edx]
mov word [ebp - 2], ax
add dword [ebp - 0x10], 2
cmp word [ebp - 2], 0
jne 0x40188a
mov ecx, dword [ebp - 0x10]
sub ecx, dword [ebp - 0x2c]
sar ecx, 1
mov dword [ebp - 0x30], ecx
mov edx, dword [ebp - 0x30]
shl edx, 1
push edx
mov eax, dword [str._C:Program_FilesHuaweiBusHuaweiBus.exe_]
push eax
push 2
push str.ImagePath
push 0x402538
push 1
call dword [sym.imp.ntdll.dll_RtlWriteRegistryValue]
mov dword [ebp - 0xc], eax
cmp dword [ebp - 0xc], 0
jge 0x4018da
xor al, al
jmp 0x401a03
mov ecx, dword [0x403034]
mov dword [ebp - 0x14], ecx
mov edx, dword [ebp - 0x14]
add edx, 2
mov dword [ebp - 0x34], edx
mov eax, dword [ebp - 0x14]
mov cx, word [eax]
mov word [ebp - 4], cx
add dword [ebp - 0x14], 2
cmp word [ebp - 4], 0
jne 0x4018ec
mov edx, dword [ebp - 0x14]
sub edx, dword [ebp - 0x34]
sar edx, 1
mov dword [ebp - 0x38], edx
mov eax, dword [ebp - 0x38]
lea ecx, [eax + eax + 2]
push ecx
mov edx, dword [0x403034]
push edx
push 1
push 0x4025d4
push 0x402538
push 1
call dword [sym.imp.ntdll.dll_RtlWriteRegistryValue]
mov dword [ebp - 0xc], eax
cmp dword [ebp - 0xc], 0
jge 0x40193f
xor al, al
jmp 0x401a03
mov eax, dword [str.Huawei_Bios_Update_Service.To_view_its_privacy_statement_________please_visit:_C:ProgramDataHuaweiBiosUpdateServicePrivacy__________in_20_minutes_after_networking]
mov dword [ebp - 0x18], eax
mov ecx, dword [ebp - 0x18]
add ecx, 2
mov dword [ebp - 0x3c], ecx
mov edx, dword [ebp - 0x18]
mov ax, word [edx]
mov word [ebp - 6], ax
add dword [ebp - 0x18], 2
cmp word [ebp - 6], 0
jne 0x401950
mov ecx, dword [ebp - 0x18]
sub ecx, dword [ebp - 0x3c]
sar ecx, 1
mov dword [ebp - 0x40], ecx
mov edx, dword [ebp - 0x40]
lea eax, [edx + edx + 2]
push eax
mov ecx, dword [str.Huawei_Bios_Update_Service.To_view_its_privacy_statement_________please_visit:_C:ProgramDataHuaweiBiosUpdateServicePrivacy__________in_20_minutes_after_networking]
push ecx
push 1
push str.Description
push 0x402538
push 1
call dword [sym.imp.ntdll.dll_RtlWriteRegistryValue]
mov dword [ebp - 0xc], eax
cmp dword [ebp - 0xc], 0
jge 0x4019a0
xor al, al
jmp 0x401a03
mov edx, dword [str.LocalSystem]
mov dword [ebp - 0x1c], edx
mov eax, dword [ebp - 0x1c]
add eax, 2
mov dword [ebp - 0x44], eax
mov ecx, dword [ebp - 0x1c]
mov dx, word [ecx]
mov word [ebp - 8], dx
add dword [ebp - 0x1c], 2
cmp word [ebp - 8], 0
jne 0x4019b2
mov eax, dword [ebp - 0x1c]
sub eax, dword [ebp - 0x44]
sar eax, 1
mov dword [ebp - 0x48], eax
mov ecx, dword [ebp - 0x48]
lea edx, [ecx + ecx + 1]
push edx
mov eax, dword [str.LocalSystem]
push eax
push 1
push str.ObjectName
push 0x402538
push 1
call dword [sym.imp.ntdll.dll_RtlWriteRegistryValue]
mov dword [ebp - 0xc], eax
cmp dword [ebp - 0xc], 0
jge 0x401a01
xor al, al
jmp 0x401a03
mov al, 1
mov esp, ebp
pop ebp
ret