Function at 0x40631f
Capabilities:
Set registry value

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x214
mov eax, dword [section..cdata]
mov ecx, dword [ebp + 8]
mov dword [ebp - 4], eax
mov eax, dword [ebp + 0x1c]
push esi
lea esi, [eax + ecx*8]
mov eax, dword [esi]
xor edx, edx
cmp eax, 0x23
mov dword [ebp - 0x208], edx
mov dword [ebp - 0x214], edx
jne 0x40625e
mov eax, dword [esi + 4]
mov dword [0x41c22c], eax
xor eax, eax
inc eax
jmp 0x406609
cmp dword [ebp + 0x10], edx
push ebx
push edi
push 0xa
pop edi
push 0xb
pop ebx
jne 0x406285
cmp eax, 9
je 0x406285
cmp eax, edi
je 0x406285
cmp eax, ebx
je 0x406285
mov ecx, dword [ebp + 0x14]
xor eax, eax
inc eax
mov dword [ecx], eax
jmp 0x406607
cmp eax, 0x1a
jg 0x4064aa
je 0x406529
cmp eax, 0xc
jg 0x406324
je 0x406604
cmp eax, edx
jle 0x4065f8
cmp eax, 8
jle 0x406604
cmp eax, 9
je 0x406306
cmp eax, edi
je 0x4062e7
cmp eax, ebx
jne 0x4065f8
mov eax, dword [ebp + 0xc]
mov eax, dword [eax]
mov ecx, dword [ebp + 0x18]
shl eax, 4
lea eax, [eax + ecx + 4]
mov ecx, dword [esi + 4]
shl ecx, 6
xor ecx, dword [eax]
and ecx, 0x1c0
jmp 0x406517
mov eax, dword [ebp + 0xc]
mov eax, dword [eax]
mov ecx, dword [ebp + 0x18]
shl eax, 4
lea eax, [eax + ecx + 4]
mov ecx, dword [esi + 4]
shl ecx, 2
xor ecx, dword [eax]
and ecx, 4
jmp 0x406517
mov eax, dword [ebp + 0xc]
mov eax, dword [eax]
mov ecx, dword [ebp + 0x18]
shl eax, 4
lea eax, [eax + ecx + 4]
mov ecx, dword [esi + 4]
add ecx, ecx
xor ecx, dword [eax]
and ecx, 2
jmp 0x406517
cmp eax, 0xe
je 0x406342
cmp eax, 0x15
je 0x4065af
cmp eax, 0x19
jne 0x4065f8
mov ebx, edi
jmp 0x406529
lea eax, [ebp - 0x210]
push eax
push dword [esi + 4]
mov dword [ebp - 0x210], edx
mov ebx, 0x9c42
call fcn.00405ed7
mov edi, dword [ebp - 0x210]
cmp edi, edx
pop ecx
pop ecx
je 0x40636b
mov ebx, dword [edi + 0x14]
lea eax, [ebp - 0x20c]
push eax
mov eax, dword [0x41c358]
push 0x401890
push 0x41c358
mov dword [ebp - 0x20c], edx
call dword [eax]
mov eax, dword [ebp - 0x20c]
mov ecx, dword [eax]
lea edx, [ebp - 0x214]
push edx
push dword [0x41c22c]
push dword [esi + 4]
push 1
push eax
call dword [ecx + 4]
lea eax, [ebp - 0x208]
push eax
push dword [ebp - 0x214]
push dword [ebp + 0x10]
push ebx
xor ebx, ebx
push ebx
push dword [0x41c22c]
push dword [esi + 4]
push 1
push dword [0x41c350]
call dword [sym.imp.MSO.DLL_Ordinal_383]
test eax, eax
je 0x4065af
mov eax, dword [ebp + 0xc]
mov eax, dword [eax]
mov ecx, dword [ebp - 0x208]
mov edx, dword [ebp + 0x18]
shl eax, 4
mov dword [eax + edx], ecx
cmp dword [ebp - 0x208], ebx
je 0x40642d
cmp edi, ebx
je 0x40642d
cmp dword [edi + 4], ebx
je 0x40642d
push 0xff
lea eax, [ebp - 0x204]
push eax
push dword [edi + 4]
push dword [0x41c310]
call dword [sym.imp.MSO.DLL_Ordinal_538]
mov eax, dword [ebp - 0x208]
mov ecx, dword [eax]
lea edx, [ebp - 0x204]
push edx
push eax
call dword [ecx + 0x54]
cmp dword [esi + 4], 0x8001
jne 0x406472
mov edi, dword [sym.imp.MSO.DLL_Ordinal_1833]
push 0x97
push dword [0x41c310]
call edi
push 0x9b
push dword [0x41c310]
mov ebx, eax
call edi
test ebx, ebx
je 0x406472
test eax, eax
je 0x406472
push 0xffffffffffffffff
push eax
push ebx
push 0
push dword [ebp - 0x208]
call dword [sym.imp.MSO.DLL_Ordinal_3357]
mov eax, dword [ebp - 0x208]
test eax, eax
je 0x4065f8
mov esi, dword [esi + 4]
cmp esi, 0x801b
je 0x406497
cmp esi, 0x801c
jne 0x4065f8
mov ecx, dword [eax]
push 0x2493
push eax
call dword [ecx + 0xc8]
jmp 0x4065f8
sub eax, 0x1b
je 0x406526
dec eax
je 0x406522
dec eax
je 0x40651e
sub eax, 4
je 0x406604
sub eax, 4
je 0x4064fd
sub eax, 8
je 0x4064e6
dec eax
jne 0x4065f8
mov eax, dword [ebp + 0xc]
mov eax, dword [eax]
mov ecx, dword [esi + 4]
mov edx, dword [ebp + 0x18]
shl eax, 4
mov dword [eax + edx + 0xc], ecx
jmp 0x406604
mov eax, dword [ebp + 0xc]
mov eax, dword [eax]
mov ecx, dword [esi + 4]
mov edx, dword [ebp + 0x18]
shl eax, 4
mov dword [eax + edx + 8], ecx
jmp 0x406604
mov eax, dword [ebp + 0xc]
mov eax, dword [eax]
mov ecx, dword [ebp + 0x18]
shl eax, 4
lea eax, [eax + ecx + 4]
mov ecx, dword [esi + 4]
shl ecx, 5
xor ecx, dword [eax]
and ecx, 0x20
xor dword [eax], ecx
jmp 0x406604
push 0xe
jmp 0x406528
push 0xd
jmp 0x406528
push 0xc
pop ebx
lea eax, [ebp - 0x210]
push eax
push dword [esi + 4]
call fcn.00405ea8
test eax, eax
pop ecx
pop ecx
je 0x4065af
lea eax, [ebp - 0x20c]
push eax
mov eax, dword [0x41c358]
push 0x401890
push 0x41c358
mov dword [ebp - 0x20c], edx
call dword [eax]
mov eax, dword [ebp - 0x20c]
mov ecx, dword [eax]
lea edx, [ebp - 0x214]
push edx
push dword [0x41c22c]
push dword [esi + 4]
push edi
push eax
call dword [ecx + 4]
mov eax, dword [ebp + 0xc]
mov eax, dword [eax]
mov esi, dword [esi + 4]
mov edi, dword [ebp - 0x210]
shl eax, 4
add eax, dword [ebp + 0x18]
push eax
push dword [ebp - 0x214]
push dword [ebp + 0x10]
push esi
push dword [edi + 8]
push 0
push esi
push ebx
push dword [0x41c350]
call dword [sym.imp.MSO.DLL_Ordinal_383]
test eax, eax
jne 0x4065bc
push dword [ebp + 0x18]
call dword [sym.imp.MSO.DLL_Ordinal_652]
xor eax, eax
jmp 0x406607
cmp dword [edi + 4], 0
je 0x4065f8
push 0xff
lea eax, [ebp - 0x204]
push eax
push dword [edi + 4]
push dword [0x41c310]
call dword [sym.imp.MSO.DLL_Ordinal_538]
mov eax, dword [ebp + 0xc]
mov eax, dword [eax]
mov ecx, dword [ebp + 0x18]
shl eax, 4
mov eax, dword [eax + ecx]
mov ecx, dword [eax]
lea edx, [ebp - 0x204]
push edx
push eax
call dword [ecx + 0x54]
mov eax, dword [ebp + 0xc]
inc dword [eax]
and dword [0x41c22c], 0
xor eax, eax
inc eax
pop edi
pop ebx
mov ecx, dword [ebp - 4]
pop esi
call fcn.00413c99
leave
ret