Function at 0x408ce4
Capabilities:
Hash data with crc32
Set registry value

Disassembly:
push ebp
mov ebp, esp
add esp, 0xfffffee0
push ebx
push esi
push edi
xor edx, edx
mov dword [ebp - 0x120], edx
mov dword [ebp - 0x11c], edx
mov dword [ebp - 0x114], edx
mov dword [ebp - 0x118], edx
mov dword [ebp - 0x110], edx
mov dword [ebp - 0x104], edx
mov dword [ebp - 4], edx
mov dword [ebp - 8], edx
mov dword [ebp - 0xc], edx
mov dword [ebp - 0x10], edx
mov ebx, eax
xor eax, eax
push ebp
push 0x4090f9
push dword fs:[eax]
mov dword fs:[eax], esp
call fcn.00408bb4
mov dword [ebp - 0x14], eax
lea ecx, [ebp - 0xd0]
lea eax, [ebp - 0x14]
mov edx, 4
call fcn.00408a3c
lea eax, [ebp - 0xd0]
lea ecx, [ebp - 4]
xor edx, edx
call fcn.00408ab8
mov eax, dword [ebp - 4]
call fcn.00403a40
push eax
mov eax, dword [ebp - 4]
call fcn.00403b8c
pop edx
call fcn.0040826c
lea eax, [ebp - 0xac]
push eax
call sub.kernel32.dll_GetLocalTime
lea eax, [ebp - 8]
push eax
mov dword [ebp - 0x100], ebx
mov byte [ebp - 0xfc], 0xb
movzx eax, word [ebp - 0xac]
mov dword [ebp - 0xf8], eax
mov byte [ebp - 0xf4], 0
movzx eax, word [ebp - 0xaa]
mov dword [ebp - 0xf0], eax
mov byte [ebp - 0xec], 0
movzx eax, word [ebp - 0xa6]
mov dword [ebp - 0xe8], eax
mov byte [ebp - 0xe4], 0
mov eax, ebx
call fcn.00403a40
push eax
mov eax, ebx
call fcn.00403b8c
push eax
push 0
call sub.ntdll.dll_RtlComputeCrc32
mov dword [ebp - 0xe0], eax
mov byte [ebp - 0xdc], 0
mov eax, dword [ebp - 0x14]
mov dword [ebp - 0xd8], eax
mov byte [ebp - 0xd4], 0
lea edx, [ebp - 0x100]
mov ecx, 5
mov eax, 0x409114
call fcn.00405db0
xor eax, eax
mov dword [ebp - 0x18], eax
mov eax, ebx
call fcn.00403a40
add eax, 2
push eax
mov eax, dword [ebp - 8]
call fcn.00403a40
mov ebx, eax
pop eax
sub ebx, eax
jl 0x408e45
inc ebx
mov edx, dword [ebp - 8]
movzx edx, byte [edx + eax - 1]
add dword [ebp - 0x18], edx
inc eax
dec ebx
jne 0x408e36
lea eax, [ebp - 0x104]
push eax
mov eax, dword [ebp - 0x18]
mov dword [ebp - 0x10c], eax
mov byte [ebp - 0x108], 0
lea edx, [ebp - 0x10c]
xor ecx, ecx
mov eax, 0x409138
call fcn.00405db0
mov edx, dword [ebp - 0x104]
lea eax, [ebp - 8]
call fcn.00403a48
mov eax, dword [ebp - 8]
call fcn.00403a40
shr eax, 3
mov dword [ebp - 0x18], eax
mov eax, dword [ebp - 8]
call fcn.00403a40
mov edx, dword [ebp - 0x18]
shl edx, 3
cmp eax, edx
je 0x408e9f
inc dword [ebp - 0x18]
mov eax, dword [ebp - 0x18]
shl eax, 3
mov dword [ebp - 0x1c], eax
mov eax, dword [ebp - 8]
call fcn.00403a40
mov edx, dword [ebp - 0x1c]
sub edx, eax
lea ecx, [ebp - 0x110]
xor eax, eax
call fcn.00403c88
mov edx, dword [ebp - 0x110]
lea eax, [ebp - 8]
call fcn.00403a48
lea eax, [ebp - 0x9c]
xor ecx, ecx
mov edx, dword [ebp - 0x1c]
call fcn.004028e0
lea eax, [ebp - 8]
call fcn.00403bdc
mov esi, eax
lea edi, [ebp - 0x9c]
mov ebx, dword [ebp - 0x18]
test ebx, ebx
jle 0x408f09
mov edx, edi
mov eax, esi
call fcn.004081ac
add esi, 8
add edi, 8
dec ebx
jne 0x408ef7
lea ecx, [ebp - 0x10]
lea eax, [ebp - 0x9c]
mov edx, dword [ebp - 0x1c]
call fcn.00408b2c
lea eax, [ebp - 4]
push eax
mov ecx, 0x12
mov edx, 1
mov eax, dword [ebp - 4]
call fcn.00403be4
lea edx, [ebp - 0xc0]
mov eax, dword [ebp - 4]
call fcn.00408a9c
lea eax, [ebp - 8]
push eax
mov eax, dword [ebp - 4]
mov dword [ebp - 0xd0], eax
mov byte [ebp - 0xcc], 0xb
push 0x10
lea eax, [ebp - 0xc0]
push eax
push 0
call sub.ntdll.dll_RtlComputeCrc32
xor eax, 0x20080902
xor edx, edx
push edx
push eax
lea edx, [ebp - 0x118]
xor eax, eax
call fcn.00405760
mov eax, dword [ebp - 0x118]
lea edx, [ebp - 0x114]
call fcn.00405574
mov eax, dword [ebp - 0x114]
mov dword [ebp - 0xc8], eax
mov byte [ebp - 0xc4], 0xb
lea edx, [ebp - 0xd0]
mov ecx, 1
mov eax, 0x409148
call fcn.00405db0
mov eax, dword [ebp - 8]
call fcn.00403a40
shr eax, 3
mov dword [ebp - 0x18], eax
mov eax, dword [ebp - 8]
call fcn.00403a40
mov edx, dword [ebp - 0x18]
shl edx, 3
cmp eax, edx
je 0x408fd4
inc dword [ebp - 0x18]
mov eax, dword [ebp - 0x18]
shl eax, 3
mov dword [ebp - 0x1c], eax
mov eax, dword [ebp - 8]
call fcn.00403a40
mov edx, dword [ebp - 0x1c]
sub edx, eax
lea ecx, [ebp - 0x11c]
xor eax, eax
call fcn.00403c88
mov edx, dword [ebp - 0x11c]
lea eax, [ebp - 8]
call fcn.00403a48
lea eax, [ebp - 0x9c]
xor ecx, ecx
mov edx, dword [ebp - 0x1c]
call fcn.004028e0
lea eax, [ebp - 8]
call fcn.00403bdc
mov esi, eax
lea edi, [ebp - 0x9c]
mov ebx, dword [ebp - 0x18]
test ebx, ebx
jle 0x40903e
mov edx, edi
mov eax, esi
call fcn.004081ac
add esi, 8
add edi, 8
dec ebx
jne 0x40902c
lea ecx, [ebp - 0x120]
lea eax, [ebp - 0x9c]
mov edx, dword [ebp - 0x1c]
call fcn.00408b2c
mov edx, dword [ebp - 0x120]
lea eax, [ebp - 0xc]
mov ecx, 0x40915c
call fcn.00403a8c
mov eax, dword [ebp - 0xc]
call fcn.00403a40
push eax
lea eax, [ebp - 0xc]
call fcn.00403bdc
push eax
push 7
push 0x409160
push 0x40916c
push 0x80000002
call sub.shlwapi.dll_SHSetValueA
test eax, eax
jne 0x4090bd
mov eax, dword [ebp - 0x10]
call fcn.00403a40
push eax
lea eax, [ebp - 0x10]
call fcn.00403bdc
push eax
push 7
push 0x409190
push 0x40916c
push 0x80000002
call sub.shlwapi.dll_SHSetValueA
test eax, eax
je 0x4090c1
xor ebx, ebx
jmp 0x4090c3
mov bl, 1
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
push 0x409100
lea eax, [ebp - 0x120]
mov edx, 5
call fcn.004037f0
lea eax, [ebp - 0x104]
call fcn.004037cc
lea eax, [ebp - 0x10]
mov edx, 4
call fcn.004037f0
ret