Function at 0x401acc
Capabilities:
Set registry value

Disassembly:
push ebp
mov ebp, esp
add esp, 0xffffffec
push ebx
push esi
push edi
xor eax, eax
mov dword [ebp - 4], eax
jmp 0x401cc9
mov edx, dword [ebp - 4]
shl edx, 2
lea edx, [edx + edx*4]
add edx, 0x40d4e8
mov dword [ebp - 8], edx
mov ecx, dword [ebp - 4]
shl ecx, 3
add ecx, 0x40d560
mov dword [ebp - 0xc], ecx
mov eax, dword [ebp - 8]
cmp dword [eax + 8], 0
je 0x401b2e
mov edx, dword [ebp - 8]
push dword [edx + 8]
call sub.KERNEL32.DLL_lstrlenW
inc eax
add eax, eax
push eax
mov ecx, dword [ebp - 8]
push dword [ecx + 8]
push 1
push 0
push 0
mov eax, dword [ebp - 0xc]
push dword [eax]
call sub.ADVAPI32.DLL_RegSetValueExW
mov edx, dword [ebp - 8]
cmp dword [edx + 0xc], 0
je 0x401bb4
xor ebx, ebx
jmp 0x401ba5
mov eax, dword [ebp - 8]
mov esi, dword [eax + 0xc]
mov eax, ebx
shl eax, 2
lea eax, [eax + eax*2]
add esi, eax
cmp byte [esi + 4], 0
je 0x401b8f
cmp dword [esi + 8], 0
jne 0x401b5e
mov edx, 2
jmp 0x401b6b
push dword [esi + 8]
call sub.KERNEL32.DLL_lstrlenW
mov edx, eax
inc edx
add edx, edx
push edx
cmp dword [esi + 8], 0
jne 0x401b79
mov eax, 0x40d160
jmp 0x401b7c
mov eax, dword [esi + 8]
push eax
push 1
push 0
push dword [esi]
mov edx, dword [ebp - 0xc]
push dword [edx]
call sub.ADVAPI32.DLL_RegSetValueExW
jmp 0x401ba4
push 4
push dword [esi + 8]
push 4
push 0
push dword [esi]
mov ecx, dword [ebp - 0xc]
push dword [ecx]
call sub.ADVAPI32.DLL_RegSetValueExW
inc ebx
lea eax, [ebx + ebx*2]
mov edx, dword [ebp - 8]
mov ecx, dword [edx + 0xc]
cmp dword [ecx + eax*4], 0
jne 0x401b3b
mov eax, dword [ebp - 0xc]
push dword [eax]
call sub.ADVAPI32.DLL_RegCloseKey
mov edx, dword [ebp - 0xc]
xor ecx, ecx
mov dword [edx], ecx
mov eax, dword [ebp - 8]
cmp dword [eax + 0x10], 0
je 0x401cc6
xor edx, edx
mov dword [ebp - 0x10], edx
jmp 0x401cb0
mov eax, dword [ebp - 0x10]
mov ecx, dword [ebp - 8]
shl eax, 2
mov edx, dword [ebp - 0xc]
mov esi, dword [ecx + 0x10]
lea eax, [eax + eax*2]
add esi, eax
mov eax, dword [ebp - 0x10]
shl eax, 2
mov ecx, dword [edx + 4]
add ecx, eax
mov dword [ebp - 0x14], ecx
cmp dword [esi + 4], 0
je 0x401c23
push dword [esi + 4]
call sub.KERNEL32.DLL_lstrlenW
inc eax
add eax, eax
push eax
push dword [esi + 4]
push 1
push 0
push 0
mov edx, dword [ebp - 0x14]
push dword [edx]
call sub.ADVAPI32.DLL_RegSetValueExW
cmp dword [esi + 8], 0
je 0x401c9c
xor edi, edi
jmp 0x401c90
mov ebx, edi
shl ebx, 2
lea ebx, [ebx + ebx*2]
add ebx, dword [esi + 8]
cmp byte [ebx + 4], 0
je 0x401c7a
cmp dword [ebx + 8], 0
jne 0x401c4b
mov eax, 2
jmp 0x401c56
push dword [ebx + 8]
call sub.KERNEL32.DLL_lstrlenW
inc eax
add eax, eax
push eax
cmp dword [ebx + 8], 0
jne 0x401c64
mov edx, 0x40d160
jmp 0x401c67
mov edx, dword [ebx + 8]
push edx
push 1
push 0
push dword [ebx]
mov eax, dword [ebp - 0x14]
push dword [eax]
call sub.ADVAPI32.DLL_RegSetValueExW
jmp 0x401c8f
push 4
push dword [ebx + 8]
push 4
push 0
push dword [ebx]
mov ecx, dword [ebp - 0x14]
push dword [ecx]
call sub.ADVAPI32.DLL_RegSetValueExW
inc edi
lea eax, [edi + edi*2]
mov edx, dword [esi + 8]
cmp dword [edx + eax*4], 0
jne 0x401c2d
mov ecx, dword [ebp - 0x14]
push dword [ecx]
call sub.ADVAPI32.DLL_RegCloseKey
mov eax, dword [ebp - 0x14]
xor edx, edx
mov dword [eax], edx
inc dword [ebp - 0x10]
mov ecx, dword [ebp - 0x10]
mov eax, dword [ebp - 8]
mov edx, dword [eax + 0x10]
lea ecx, [ecx + ecx*2]
cmp dword [edx + ecx*4], 0
jne 0x401bdc
inc dword [ebp - 4]
mov ecx, dword [ebp - 4]
lea ecx, [ecx + ecx*4]
cmp dword [ecx*4 + 0x40d4ec], 0
jne 0x401adf
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret