Function at 0x4019e8
Capabilities:
Set registry value

Disassembly:
push ebp
mov ebp, esp
add esp, 0xffffffec
push ebx
push esi
push edi
xor eax, eax
mov dword [ebp - 4], eax
jmp 0x401be5
mov edx, dword [ebp - 4]
shl edx, 2
lea edx, [edx + edx*4]
add edx, 0x40c590
mov dword [ebp - 8], edx
mov ecx, dword [ebp - 4]
shl ecx, 3
add ecx, 0x40c608
mov dword [ebp - 0xc], ecx
mov eax, dword [ebp - 8]
cmp dword [eax + 8], 0
je 0x401a4a
mov edx, dword [ebp - 8]
push dword [edx + 8]
call sub.KERNEL32.DLL_lstrlenW
inc eax
add eax, eax
push eax
mov ecx, dword [ebp - 8]
push dword [ecx + 8]
push 1
push 0
push 0
mov eax, dword [ebp - 0xc]
push dword [eax]
call sub.ADVAPI32.DLL_RegSetValueExW
mov edx, dword [ebp - 8]
cmp dword [edx + 0xc], 0
je 0x401ad0
xor ebx, ebx
jmp 0x401ac1
mov eax, dword [ebp - 8]
mov esi, dword [eax + 0xc]
mov eax, ebx
shl eax, 2
lea eax, [eax + eax*2]
add esi, eax
cmp byte [esi + 4], 0
je 0x401aab
cmp dword [esi + 8], 0
jne 0x401a7a
mov edx, 2
jmp 0x401a87
push dword [esi + 8]
call sub.KERNEL32.DLL_lstrlenW
mov edx, eax
inc edx
add edx, edx
push edx
cmp dword [esi + 8], 0
jne 0x401a95
mov eax, 0x40c228
jmp 0x401a98
mov eax, dword [esi + 8]
push eax
push 1
push 0
push dword [esi]
mov edx, dword [ebp - 0xc]
push dword [edx]
call sub.ADVAPI32.DLL_RegSetValueExW
jmp 0x401ac0
push 4
push dword [esi + 8]
push 4
push 0
push dword [esi]
mov ecx, dword [ebp - 0xc]
push dword [ecx]
call sub.ADVAPI32.DLL_RegSetValueExW
inc ebx
lea eax, [ebx + ebx*2]
mov edx, dword [ebp - 8]
mov ecx, dword [edx + 0xc]
cmp dword [ecx + eax*4], 0
jne 0x401a57
mov eax, dword [ebp - 0xc]
push dword [eax]
call sub.ADVAPI32.DLL_RegCloseKey
mov edx, dword [ebp - 0xc]
xor ecx, ecx
mov dword [edx], ecx
mov eax, dword [ebp - 8]
cmp dword [eax + 0x10], 0
je 0x401be2
xor edx, edx
mov dword [ebp - 0x10], edx
jmp 0x401bcc
mov eax, dword [ebp - 0x10]
mov ecx, dword [ebp - 8]
shl eax, 2
mov edx, dword [ebp - 0xc]
mov esi, dword [ecx + 0x10]
lea eax, [eax + eax*2]
add esi, eax
mov eax, dword [ebp - 0x10]
shl eax, 2
mov ecx, dword [edx + 4]
add ecx, eax
mov dword [ebp - 0x14], ecx
cmp dword [esi + 4], 0
je 0x401b3f
push dword [esi + 4]
call sub.KERNEL32.DLL_lstrlenW
inc eax
add eax, eax
push eax
push dword [esi + 4]
push 1
push 0
push 0
mov edx, dword [ebp - 0x14]
push dword [edx]
call sub.ADVAPI32.DLL_RegSetValueExW
cmp dword [esi + 8], 0
je 0x401bb8
xor edi, edi
jmp 0x401bac
mov ebx, edi
shl ebx, 2
lea ebx, [ebx + ebx*2]
add ebx, dword [esi + 8]
cmp byte [ebx + 4], 0
je 0x401b96
cmp dword [ebx + 8], 0
jne 0x401b67
mov eax, 2
jmp 0x401b72
push dword [ebx + 8]
call sub.KERNEL32.DLL_lstrlenW
inc eax
add eax, eax
push eax
cmp dword [ebx + 8], 0
jne 0x401b80
mov edx, 0x40c228
jmp 0x401b83
mov edx, dword [ebx + 8]
push edx
push 1
push 0
push dword [ebx]
mov eax, dword [ebp - 0x14]
push dword [eax]
call sub.ADVAPI32.DLL_RegSetValueExW
jmp 0x401bab
push 4
push dword [ebx + 8]
push 4
push 0
push dword [ebx]
mov ecx, dword [ebp - 0x14]
push dword [ecx]
call sub.ADVAPI32.DLL_RegSetValueExW
inc edi
lea eax, [edi + edi*2]
mov edx, dword [esi + 8]
cmp dword [edx + eax*4], 0
jne 0x401b49
mov ecx, dword [ebp - 0x14]
push dword [ecx]
call sub.ADVAPI32.DLL_RegCloseKey
mov eax, dword [ebp - 0x14]
xor edx, edx
mov dword [eax], edx
inc dword [ebp - 0x10]
mov ecx, dword [ebp - 0x10]
mov eax, dword [ebp - 8]
mov edx, dword [eax + 0x10]
lea ecx, [ecx + ecx*2]
cmp dword [edx + ecx*4], 0
jne 0x401af8
inc dword [ebp - 4]
mov ecx, dword [ebp - 4]
lea ecx, [ecx + ecx*4]
cmp dword [ecx*4 + 0x40c594], 0
jne 0x4019fb
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret