Function at 0x41863e
Capabilities:
Set registry value

Disassembly:
push ebp
mov ebp, esp
and esp, 0xfffffff8
sub esp, 0x6c
mov eax, dword [0x5c2460]
xor eax, esp
mov dword [esp + 0x68], eax
and dword [esp + 4], 0
push ebx
xor ebx, ebx
push esi
xor esi, esi
inc ebx
cmp dword [0x7688d8], 5
push edi
mov edi, ecx
jne 0x418671
call fcn.0041ab4a
jmp 0x4186aa
call fcn.0041ab4a
cmp dword [0x7688d8], 3
jne 0x418688
cmp byte [0x7688d6], 0
je 0x4186aa
push 4
lea eax, [esp + 0x14]
mov dword [esp + 0x14], ebx
push eax
push 4
push 0x548938
push 0x53fc34
push SysReAllocString
call dword [sym.imp.SHLWAPI.dll_SHSetValueW]
call fcn.0041fa7f
cmp byte [eax + 0x30], 0
jne 0x4186bc
xor eax, eax
jmp 0x4188d0
call fcn.0041b35e
add eax, 0x2c
lea ecx, [esp + 0x14]
push eax
call fcn.00458f80
lea eax, [esp + 0x14]
push eax
lea ecx, [esp + 0x30]
call fcn.00409846
lea ecx, [esp + 0x14]
call fcn.00459030
lea eax, [esp + 0x44]
push eax
call fcn.0041fa7f
mov ecx, eax
call fcn.0041faa6
push ecx
push ecx
lea eax, [esp + 0x4c]
mov ecx, esp
push eax
call fcn.004050d6
push ecx
push ecx
lea eax, [esp + 0x3c]
mov ecx, esp
push eax
call fcn.004050d6
call fcn.0041859e
add esp, 0x10
test al, al
jne 0x418838
push ecx
push ecx
lea eax, [esp + 0x4c]
mov ecx, esp
push eax
call fcn.004050d6
lea ecx, [esp + 0x1c]
call fcn.00458fb0
xor edx, edx
mov ecx, eax
call fcn.00458200
mov bl, al
lea ecx, [esp + 0x14]
neg bl
sbb bl, bl
call fcn.00459030
inc bl
je 0x41876e
call fcn.0042eea1
push 0x259
push 0x1d
call fcn.0042f55d
xor esi, esi
inc esi
jmp 0x418838
lea eax, [edi + 0x48]
push eax
lea eax, [esp + 0x48]
push eax
lea eax, [esp + 0x34]
push eax
call fcn.004188e2
test al, al
jne 0x41879d
call fcn.0042eea1
push 0x25a
push 0x1d
call fcn.0042f55d
push 2
jmp 0x418837
push str.unpack_360se.exe
lea ecx, [esp + 0x18]
call fcn.004058f0
lea eax, [esp + 0x14]
push eax
lea eax, [esp + 0x48]
push eax
lea eax, [esp + 0x34]
push eax
call fcn.004188e2
mov bl, al
lea ecx, [esp + 0x14]
push 0
neg bl
push 1
sbb bl, bl
call fcn.0040536f
inc bl
je 0x4187eb
call fcn.0042eea1
push 0x25b
push 0x1d
call fcn.0042f55d
push 3
jmp 0x418837
push str.wow_helper.exe
lea ecx, [esp + 0x18]
call fcn.004058f0
lea eax, [esp + 0x14]
push eax
lea eax, [esp + 0x48]
push eax
lea eax, [esp + 0x34]
push eax
call fcn.004188e2
mov bl, al
lea ecx, [esp + 0x14]
push 0
neg bl
push 1
sbb bl, bl
call fcn.0040536f
inc bl
je 0x418838
call fcn.0042eea1
push 0x25c
push 0x1d
call fcn.0042f55d
push 4
pop esi
push ecx
push ecx
lea eax, [esp + 0x34]
mov ecx, esp
push eax
call fcn.004050d6
lea ecx, [esp + 0x64]
call fcn.00458fb0
lea eax, [esp + 0x14]
push eax
lea ecx, [esp + 0x60]
call fcn.00459820
push eax
lea ecx, [esp + 0x60]
call fcn.00459060
lea ecx, [esp + 0x14]
call fcn.00459030
push 0x54a6b8
lea ecx, [esp + 0x18]
call fcn.004058f0
push ecx
lea edx, [esp + 0x18]
lea ecx, [esp + 0x60]
call fcn.0045a720
pop ecx
push 0
push 1
lea ecx, [esp + 0x1c]
mov bl, al
call fcn.0040536f
test bl, bl
je 0x4188ab
mov dl, 1
lea ecx, [esp + 0x5c]
call fcn.004575a0
lea ecx, [esp + 0x5c]
call fcn.00459030
push 0
push 1
lea ecx, [esp + 0x4c]
call fcn.0040536f
push 0
push 1
lea ecx, [esp + 0x34]
call fcn.0040536f
mov eax, esi
mov ecx, dword [esp + 0x74]
pop edi
pop esi
pop ebx
xor ecx, esp
call fcn.00501d03
mov esp, ebp
pop ebp
ret