Function at 0x1d18c9a
Capabilities:
Check if file exists
Set registry value

Disassembly:
mov eax, 0x1d58868
call fcn.01d55708
sub esp, 0x250
push ebx
push esi
xor esi, esi
push edi
mov dword [ebp - 0x14], 0x200
mov dword [ebp - 0x50], esi
mov dword [ebp - 0x4c], esi
mov dword [ebp - 0x48], esi
push 0x2eaa5958
lea ecx, [ebp - 0x36]
mov dword [ebp - 4], esi
call fcn.01d13335
push esi
push esi
push 0xf003f
push esi
push esi
push eax
push connect
lea ecx, [ebp - 0x50]
call fcn.01d0c01b
push 0x4daf6729
lea ecx, [ebp - 0x3f]
call fcn.01d13372
lea ecx, [ebp - 0x14]
push ecx
lea ecx, [ebp - 0x25c]
push ecx
push eax
lea ecx, [ebp - 0x50]
call fcn.01d133c3
lea ecx, [ebp - 0x50]
call fcn.01d078f0
lea ecx, [ebp - 0x18]
call dword [sym.imp.mfc100.dll_Ordinal_316]
mov ebx, dword [sym.imp.mfc100.dll_Ordinal_4283]
lea eax, [ebp - 0x25c]
push eax
lea eax, [ebp - 0x18]
push 0x1d656b8
push eax
mov byte [ebp - 4], 1
call ebx
add esp, 0xc
lea ecx, [ebp - 0x1c]
call dword [sym.imp.mfc100.dll_Ordinal_316]
push 0xcc2ee4d
lea ecx, [ebp - 0x2b]
call fcn.01d12c29
mov dword [ebp - 0x14], eax
push 0x5c
lea ecx, [ebp - 0x18]
mov byte [ebp - 4], 3
call dword [sym.imp.mfc100.dll_Ordinal_11744]
push eax
lea eax, [ebp - 0x24]
push eax
lea ecx, [ebp - 0x18]
call dword [sym.imp.mfc100.dll_Ordinal_7487]
mov edi, eax
push 0x4391e9e7
lea ecx, [ebp - 0x3e]
call fcn.01d12bee
push dword [ebp - 0x14]
mov byte [ebp - 4], 5
push dword [edi]
push eax
lea eax, [ebp - 0x1c]
push eax
call ebx
add esp, 0x10
xor eax, eax
lea edi, [ebp - 0x3e]
stosd dword es:[edi], eax
stosw word es:[edi], ax
lea ecx, [ebp - 0x24]
call dword [sym.imp.mfc100.dll_Ordinal_901]
lea ecx, [ebp - 0x5c]
mov byte [ebp - 4], 2
call fcn.01d40d0f
lea ecx, [ebp - 0x1c]
mov byte [ebp - 4], 6
call dword [sym.imp.mfc100.dll_Ordinal_1448]
push eax
call dword [sym.imp.SHLWAPI.dll_PathFileExistsA]
test eax, eax
je 0x1d19031
lea eax, [ebp - 0x54]
push eax
lea ecx, [ebp - 0x1c]
call dword [sym.imp.mfc100.dll_Ordinal_1448]
push eax
lea ecx, [ebp - 0x5c]
call fcn.01d40c3e
test eax, eax
je 0x1d19031
lea ecx, [ebp - 0x14]
call dword [sym.imp.mfc100.dll_Ordinal_316]
mov eax, 0x1d656cc
sub eax, 0x64961c86
push eax
lea ecx, [ebp - 0x24]
call fcn.01d12c64
push dword [ebp - 0x54]
mov byte [ebp - 4], 8
push eax
lea eax, [ebp - 0x14]
push eax
call ebx
mov eax, 0x1d656d4
add esp, 0xc
sub eax, 0x52cde789
push eax
lea ecx, [ebp - 0x2d]
call fcn.01d12ca1
push eax
lea ecx, [ebp - 0x14]
mov byte [ebp - 4], 9
call dword [sym.imp.mfc100.dll_Ordinal_2611]
neg eax
sbb al, al
inc al
je 0x1d18e44
xor edi, edi
inc edi
jmp 0x1d19026
mov eax, 0x1d656e0
sub eax, 0x5277abb6
push eax
lea ecx, [ebp - 0x2d]
call fcn.01d12d19
push eax
lea ecx, [ebp - 0x14]
mov byte [ebp - 4], 0xa
call dword [sym.imp.mfc100.dll_Ordinal_2611]
neg eax
sbb al, al
inc al
je 0x1d18e74
push 2
jmp 0x1d18ff8
mov eax, str._____G
sub eax, 0x18fd9d23
push eax
lea ecx, [ebp - 0x2d]
call fcn.01d12d91
push eax
lea ecx, [ebp - 0x14]
mov byte [ebp - 4], 0xb
call dword [sym.imp.mfc100.dll_Ordinal_2611]
neg eax
sbb al, al
inc al
je 0x1d18ea4
push 3
jmp 0x1d18ff8
mov eax, 0x1d656f8
sub eax, 0x3bb0d0c8
push eax
lea ecx, [ebp - 0x2d]
call fcn.01d12e07
push eax
lea ecx, [ebp - 0x14]
mov byte [ebp - 4], 0xc
call dword [sym.imp.mfc100.dll_Ordinal_2611]
neg eax
sbb al, al
inc al
je 0x1d18ed4
push 4
jmp 0x1d18ff8
push 0x54ceebce
lea ecx, [ebp - 0x2d]
call fcn.01d12e81
push eax
lea ecx, [ebp - 0x14]
mov byte [ebp - 4], 0xd
call dword [sym.imp.mfc100.dll_Ordinal_2611]
neg eax
sbb al, al
inc al
je 0x1d18efe
push 5
jmp 0x1d18ff8
mov eax, 0x1d65710
sub eax, 0x7a734d3e
push eax
lea ecx, [ebp - 0x2d]
call fcn.01d12ef7
push eax
lea ecx, [ebp - 0x14]
mov byte [ebp - 4], 0xe
call dword [sym.imp.mfc100.dll_Ordinal_2611]
neg eax
sbb al, al
inc al
je 0x1d18f2e
push 6
jmp 0x1d18ff8
mov eax, 0x1d6571c
sub eax, 0x62ad94b
push eax
lea ecx, [ebp - 0x2d]
call fcn.01d12f6f
push eax
lea ecx, [ebp - 0x14]
mov byte [ebp - 4], 0xf
call dword [sym.imp.mfc100.dll_Ordinal_2611]
neg eax
sbb al, al
inc al
je 0x1d18f5e
push 7
jmp 0x1d18ff8
push 0x421c1748
lea ecx, [ebp - 0x2d]
call fcn.01d12fe5
push eax
lea ecx, [ebp - 0x14]
mov byte [ebp - 4], 0x10
call dword [sym.imp.mfc100.dll_Ordinal_2611]
neg eax
sbb al, al
inc al
je 0x1d18f85
push 8
jmp 0x1d18ff8
push 0x2be02c1f
lea ecx, [ebp - 0x2d]
call fcn.01d1305f
push eax
lea ecx, [ebp - 0x14]
mov byte [ebp - 4], 0x11
call dword [sym.imp.mfc100.dll_Ordinal_2611]
neg eax
sbb al, al
inc al
je 0x1d18fac
push 9
jmp 0x1d18ff8
push 0x13e517ef
lea ecx, [ebp - 0x2d]
call fcn.01d130d9
push eax
lea ecx, [ebp - 0x14]
mov byte [ebp - 4], 0x12
call dword [sym.imp.mfc100.dll_Ordinal_2611]
neg eax
sbb al, al
inc al
je 0x1d18fd3
push 0xa
jmp 0x1d18ff8
push 0x58e878ed
lea ecx, [ebp - 0x2d]
call fcn.01d13153
push eax
lea ecx, [ebp - 0x14]
mov byte [ebp - 4], 0x13
call dword [sym.imp.mfc100.dll_Ordinal_2611]
neg eax
sbb al, al
inc al
je 0x1d18ffb
push 0xb
pop edi
jmp 0x1d19026
push 0x78cd3303
lea ecx, [ebp - 0x2d]
call fcn.01d131cd
push eax
lea ecx, [ebp - 0x14]
mov byte [ebp - 4], 0x14
call dword [sym.imp.mfc100.dll_Ordinal_2611]
neg eax
sbb al, al
inc al
movzx edi, al
neg edi
sbb edi, edi
and edi, 0xc
lea ecx, [ebp - 0x14]
call dword [sym.imp.mfc100.dll_Ordinal_901]
jmp 0x1d19033
xor edi, edi
mov eax, 0x1d65764
sub eax, 0x6180d1e7
push eax
lea ecx, [ebp - 0x36]
mov dword [ebp - 0x44], esi
mov dword [ebp - 0x40], esi
mov dword [ebp - 0x3c], esi
call fcn.01d0c163
push esi
push esi
push 0xf003f
push esi
push esi
push eax
push connect
lea ecx, [ebp - 0x44]
call fcn.01d0c01b
mov eax, 0x1d65778
sub eax, 0x27eef134
push eax
lea ecx, [ebp - 0x2b]
call fcn.01d132bf
push 1
lea ecx, [ebp - 0x18]
mov ebx, eax
call dword [sym.imp.mfc100.dll_Ordinal_1448]
push eax
push ebx
lea ecx, [ebp - 0x44]
call fcn.01d0c0bb
push 0x586b817
lea ecx, [ebp - 0x32]
call fcn.01d132fa
push 4
lea ecx, [ebp - 0x24]
push ecx
push 4
push esi
push eax
push dword [ebp - 0x44]
mov dword [ebp - 0x24], edi
call dword [sym.imp.ADVAPI32.dll_RegSetValueExA]
lea ecx, [ebp - 0x44]
call fcn.01d078f0
lea ecx, [ebp - 0x44]
call fcn.01d078f0
lea ecx, [ebp - 0x5c]
mov byte [ebp - 4], 2
call fcn.01d40d21
lea ecx, [ebp - 0x1c]
call dword [sym.imp.mfc100.dll_Ordinal_901]
lea ecx, [ebp - 0x18]
call dword [sym.imp.mfc100.dll_Ordinal_901]
lea ecx, [ebp - 0x50]
call fcn.01d078f0
mov ecx, dword [ebp - 0xc]
mov eax, edi
pop edi
pop esi
pop ebx
mov dword fs:[0], ecx
leave
ret