Function at 0x10610c0
Capabilities:
Resolve function by parsing pe exports

Disassembly:
mov eax, reloc.ADVAPI32.dll_AddAccessAllowedAce
call fcn.01077868
sub esp, 0x3c
mov eax, dword [0x10de03c]
push ebx
push esi
mov esi, dword [ebp + 0xc]
push edi
mov dword [ebp - 0x10], eax
call fcn.0102150d
mov dword [ebp - 0x30], eax
call fcn.01075fa4
mov ecx, dword [eax + 4]
call fcn.010584d3
mov edi, eax
xor ebx, ebx
cmp edi, ebx
mov dword [ebp - 0x2c], edi
je 0x1061857
mov eax, dword [esi]
xor ecx, ecx
inc ecx
cmp eax, ecx
jne 0x1061110
mov dword [edi + 0x80], ebx
jmp 0x106111a
cmp eax, ebx
jne 0x1061124
mov dword [edi + 0x80], ecx
mov eax, dword [ebp - 0x30]
mov word [eax + reloc.ADVAPI32.dll_RegDeleteValueW], cx
push ebx
lea ecx, [ebp - 0x48]
call fcn.01019ece
mov eax, dword [esi + 0x20]
cmp eax, ebx
je 0x1061148
push 0x1f
push eax
push dword [0x10e25b0]
push dword [0x10e25b4]
call fcn.01060fd6
mov eax, dword [esi + 0x24]
cmp eax, ebx
je 0x1061163
push 0x1e
push eax
push dword [0x10e25b0]
push dword [0x10e25b4]
call fcn.01060fd6
mov eax, dword [esi + 0x28]
cmp eax, ebx
je 0x106117c
push eax
push dword [0x10e25b0]
push dword [0x10e25b4]
call fcn.0106049c
mov eax, dword [esi + 0x10]
cmp eax, ebx
je 0x106118e
push eax
lea ecx, [edi + 0x74]
call fcn.01075f20
jmp 0x1061207
lea ecx, [ebp - 0x28]
call fcn.01075f2c
push ebx
push 2
lea eax, [ebp - 0x34]
push eax
lea ecx, [ebp - 0x44]
mov dword [ebp - 4], ebx
call fcn.010819d0
mov dword [ebp - 0x38], eax
push 2
lea eax, [ebp - 0x3c]
push eax
lea ecx, [ebp - 0x48]
mov byte [ebp - 4], 1
call fcn.01081d9f
mov ecx, dword [ebp - 0x38]
push dword [ecx]
mov byte [ebp - 4], 2
push dword [eax]
lea eax, [ebp - 0x28]
push 0x311
push eax
call fcn.010762e0
add esp, 0x10
lea ecx, [ebp - 0x3c]
mov byte [ebp - 4], 1
call fcn.01075ef0
lea ecx, [ebp - 0x34]
mov byte [ebp - 4], bl
call fcn.01075ef0
push dword [ebp - 0x28]
lea ecx, [edi + 0x74]
call fcn.01075f20
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x28]
call fcn.01075ef0
mov eax, dword [esi + 0x1c]
cmp eax, ebx
je 0x106121f
push eax
lea ecx, [edi + 0x9c]
call fcn.01075f20
jmp 0x10612a0
lea ecx, [ebp - 0x28]
call fcn.01075f2c
push ebx
push 2
lea eax, [ebp - 0x38]
push eax
lea ecx, [ebp - 0x44]
mov dword [ebp - 4], 3
call fcn.010819d0
mov dword [ebp - 0x34], eax
push 2
lea eax, [ebp - 0x3c]
push eax
lea ecx, [ebp - 0x48]
mov byte [ebp - 4], 4
call fcn.01081d9f
mov ecx, dword [ebp - 0x34]
push dword [ecx]
mov byte [ebp - 4], 5
push dword [eax]
lea eax, [ebp - 0x28]
push 0x4ea4
push eax
call fcn.010762e0
add esp, 0x10
lea ecx, [ebp - 0x3c]
mov byte [ebp - 4], 4
call fcn.01075ef0
lea ecx, [ebp - 0x38]
mov byte [ebp - 4], 3
call fcn.01075ef0
push dword [ebp - 0x28]
lea ecx, [edi + 0x9c]
call fcn.01075f20
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x28]
call fcn.01075ef0
mov eax, dword [esi + 8]
cmp eax, ebx
je 0x10612cb
push eax
lea ecx, [ebp - 0x34]
call fcn.01075f08
mov ecx, dword [ebp - 0x30]
push eax
add ecx, 0x8b8
mov dword [ebp - 4], 6
call fcn.01075efc
lea ecx, [ebp - 0x34]
jmp 0x10612fc
lea ecx, [ebp - 0x28]
call fcn.01075f2c
push 0x277a
lea ecx, [ebp - 0x28]
mov dword [ebp - 4], 7
call fcn.01075f5c
mov ecx, dword [ebp - 0x30]
lea eax, [ebp - 0x28]
push eax
add ecx, 0x8b8
call fcn.01075efc
lea ecx, [ebp - 0x28]
or dword [ebp - 4], 0xffffffff
call fcn.01075ef0
mov eax, dword [esi + 0x30]
cmp eax, ebx
je 0x1061314
push eax
mov ecx, edi
call fcn.0106006a
call fcn.01077cf5
test ax, ax
je 0x10616a7
mov eax, dword [esi + 0x2c]
cmp eax, ebx
jne 0x1061337
cmp dword [esi + 0x14], ebx
jne 0x1061337
cmp dword [esi + 0x18], ebx
je 0x10616a7
cmp eax, ebx
mov dword [ebp - 0x20], ebx
mov word [ebp - 0x1c], bx
mov word [ebp - 0x1a], bx
mov byte [ebp - 0x18], bl
mov byte [ebp - 0x17], bl
mov byte [ebp - 0x16], bl
mov byte [ebp - 0x15], bl
mov byte [ebp - 0x14], bl
mov byte [ebp - 0x13], bl
mov byte [ebp - 0x12], bl
mov byte [ebp - 0x11], bl
je 0x1061568
call fcn.01081f35
mov edi, eax
cmp edi, ebx
je 0x1061418
push edi
call fcn.01081f21
jmp 0x10613a2
mov eax, dword [ebp - 0x24]
cmp eax, ebx
je 0x10613f5
cmp word [eax + 0x1c], 1
jne 0x106139a
push dword [esi + 0x2c]
add eax, 0x48
push eax
call dword [sym.imp.msvcrt.dll__wcsicmp]
test eax, eax
pop ecx
pop ecx
je 0x10613ad
push dword [ebp - 0x24]
call fcn.01081f40
cmp dword [edi + 0x38], 3
mov dword [ebp - 0x24], eax
je 0x1061379
jmp 0x10613f5
lea eax, [edi + 0x3c]
push 0x50
push eax
call fcn.0102150d
push eax
call dword [sym.imp.msvcrt.dll_wcsncpy]
add esp, 0xc
call fcn.0102150d
mov ecx, dword [ebp - 0x2c]
mov word [eax + 0xa0], bx
push 2
pop eax
mov dword [ecx + 0x7c], eax
mov ecx, dword [ebp - 0x30]
mov dword [ecx + 0x2ac], eax
mov eax, dword [ebp - 0x24]
add eax, 0x38
push eax
call fcn.01077dcc
lea eax, [edi + 0x3c]
push eax
call fcn.0106098f
cmp dword [edi + 0x38], 3
jne 0x1061400
cmp dword [ebp - 0x24], ebx
jne 0x1061410
push edi
call fcn.01081f40
mov edi, eax
cmp edi, ebx
jne 0x1061371
cmp edi, ebx
jne 0x10614e6
call fcn.01081f35
mov edi, eax
cmp edi, ebx
je 0x10614c4
push edi
call fcn.01081f21
jmp 0x1061452
cmp dword [ebp - 0x24], ebx
je 0x10614a5
push dword [esi + 0x2c]
mov eax, dword [ebp - 0x24]
add eax, 0x48
push eax
call dword [sym.imp.msvcrt.dll__wcsicmp]
test eax, eax
pop ecx
pop ecx
je 0x106145d
push dword [ebp - 0x24]
call fcn.01081f40
cmp dword [edi + 0x38], 3
mov dword [ebp - 0x24], eax
je 0x106142f
jmp 0x10614a5
lea eax, [edi + 0x3c]
push 0x50
push eax
call fcn.0102150d
push eax
call dword [sym.imp.msvcrt.dll_wcsncpy]
add esp, 0xc
call fcn.0102150d
mov ecx, dword [ebp - 0x2c]
mov word [eax + 0xa0], bx
push 2
pop eax
mov dword [ecx + 0x7c], eax
mov ecx, dword [ebp - 0x30]
mov dword [ecx + 0x2ac], eax
mov eax, dword [ebp - 0x24]
add eax, 0x38
push eax
call fcn.01077dcc
lea eax, [edi + 0x3c]
push eax
call fcn.0106098f
cmp dword [edi + 0x38], 3
jne 0x10614b0
cmp dword [ebp - 0x24], ebx
jne 0x10614c0
push edi
call fcn.01081f40
mov edi, eax
cmp edi, ebx
jne 0x1061427
cmp edi, ebx
jne 0x10614e6
push ebx
push ebx
push ebx
call fcn.01050ed2
xor esi, esi
push 0x1f4
inc esi
push esi
push esi
push ebx
call fcn.01050ed2
push 0xc18
jmp 0x1061844
push dword [ebp - 0x24]
call fcn.01081f40
cmp eax, ebx
mov dword [ebp - 0x24], eax
jne 0x106153d
jmp 0x1061535
cmp dword [ebp - 0x24], ebx
jne 0x1061509
push edi
call fcn.01081f21
cmp eax, ebx
mov dword [ebp - 0x24], eax
je 0x1061535
mov eax, dword [ebp - 0x24]
cmp word [eax + 0x1c], 1
jne 0x1061526
push dword [esi + 0x2c]
add eax, 0x48
push eax
call dword [sym.imp.msvcrt.dll__wcsicmp]
test eax, eax
pop ecx
pop ecx
je 0x1061546
push dword [ebp - 0x24]
call fcn.01081f40
cmp eax, ebx
mov dword [ebp - 0x24], eax
jne 0x10614f7
push edi
call fcn.01081f40
mov edi, eax
cmp edi, ebx
jne 0x10614f7
jmp 0x10617b4
push ebx
push ebx
push ebx
call fcn.01050ed2
xor esi, esi
push 0x1f4
inc esi
push esi
push esi
push ebx
call fcn.01050ed2
push 0xc17
jmp 0x1061844
mov eax, dword [esi + 0x14]
cmp eax, ebx
je 0x10615be
push eax
call fcn.01082231
test eax, eax
je 0x1061641
push 0x50
push dword [esi + 0x14]
call fcn.0102150d
push eax
call dword [sym.imp.msvcrt.dll_wcsncpy]
add esp, 0xc
call fcn.0102150d
mov word [eax + 0xa0], bx
mov dword [edi + 0x7c], 2
call fcn.0102150d
push ebx
mov dword [eax + 0x2ac], 2
call fcn.01077dcc
push dword [esi + 0x14]
jmp 0x1061637
mov eax, dword [esi + 0x18]
cmp eax, ebx
je 0x10617b4
lea ecx, [ebp - 0x20]
push ecx
push eax
call dword [sym.imp.RPCRT4.dll_UuidFromStringW]
test eax, eax
jne 0x1061685
lea eax, [ebp - 0x20]
push eax
call fcn.01082342
cmp eax, ebx
je 0x1061663
push eax
call fcn.01082296
cmp eax, ebx
je 0x1061641
lea edi, [eax + 0x3c]
push 0x50
push edi
call fcn.0102150d
push eax
call dword [sym.imp.msvcrt.dll_wcsncpy]
add esp, 0xc
call fcn.0102150d
mov word [eax + 0xa0], bx
mov eax, dword [ebp - 0x2c]
mov dword [eax + 0x7c], 2
call fcn.0102150d
mov dword [eax + 0x2ac], 2
lea eax, [ebp - 0x20]
push eax
call fcn.01077dcc
push edi
call fcn.0106098f
jmp 0x10617b4
push ebx
push ebx
push ebx
call fcn.01050ed2
xor esi, esi
push 0x1f4
inc esi
push esi
push esi
push ebx
call fcn.01050ed2
push 0xc1f
jmp 0x1061844
push ebx
push ebx
push ebx
call fcn.01050ed2
xor esi, esi
push 0x1f4
inc esi
push esi
push esi
push ebx
call fcn.01050ed2
push 0xc1b
jmp 0x1061844
push ebx
push ebx
push ebx
call fcn.01050ed2
xor esi, esi
push 0x1f4
inc esi
push esi
push esi
push ebx
call fcn.01050ed2
push 0xc1e
jmp 0x1061844
cmp dword [esi + 0xc], ebx
je 0x1061827
call fcn.0108739a
push 0x104
push dword [esi + 0xc]
call fcn.0102150d
add eax, 0xa2
push eax
call dword [sym.imp.msvcrt.dll_wcsncpy]
add esp, 0xc
push dword [esi + 0xc]
call fcn.010872fb
lea ecx, [ebp - 0x24]
call fcn.01075f2c
push 0x4e9e
lea ecx, [ebp - 0x24]
mov dword [ebp - 4], 8
call fcn.01075f5c
push 0x50
push dword [ebp - 0x24]
call fcn.0102150d
push eax
call dword [sym.imp.msvcrt.dll_wcsncpy]
add esp, 0xc
call fcn.0102150d
mov word [eax + 0xa0], bx
call fcn.0104eff3
push dword [esi + 0xc]
lea ecx, [ebp - 0x40]
call fcn.01075f08
lea eax, [ebp - 0x40]
push eax
lea ecx, [edi + 0x78]
mov byte [ebp - 4], 9
call fcn.01075efc
lea ecx, [ebp - 0x40]
mov byte [ebp - 4], 8
call fcn.01075ef0
mov dword [edi + 0x7c], 1
call fcn.0102150d
xor edi, edi
inc edi
mov dword [eax + 0x2ac], edi
push dword [esi + 0xc]
call fcn.010608fc
call fcn.0104fbdf
cmp eax, edi
jne 0x10617a8
push ebx
push ebx
push ebx
call fcn.01050ed2
push 0x1f4
xor esi, esi
inc esi
push esi
push esi
push ebx
call fcn.01050ed2
push 0xc1b
push esi
push esi
push ebx
call fcn.01050ed2
push 8
push ebx
call fcn.01050ed2
or dword [ebp - 4], 0xffffffff
add esp, 0x34
lea ecx, [ebp - 0x24]
call fcn.01075ef0
jmp 0x1061857
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x24]
call fcn.01075ef0
mov esi, dword [esi + 4]
sub esi, ebx
je 0x1061815
dec esi
je 0x1061806
dec esi
je 0x10617f7
dec esi
je 0x10617e8
dec esi
je 0x10617d9
dec esi
jne 0x1061822
mov eax, dword [ebp - 0x2c]
mov dword [eax + 0x8c], 5
jmp 0x1061822
mov eax, dword [ebp - 0x2c]
mov dword [eax + 0x8c], 3
jmp 0x1061822
mov eax, dword [ebp - 0x2c]
mov dword [eax + 0x8c], 2
jmp 0x1061822
mov eax, dword [ebp - 0x2c]
mov dword [eax + 0x8c], 4
jmp 0x1061822
mov eax, dword [ebp - 0x2c]
mov dword [eax + 0x8c], 1
jmp 0x1061822
mov eax, dword [ebp - 0x2c]
mov dword [eax + 0x8c], 6
xor eax, eax
inc eax
jmp 0x1061859
push ebx
push ebx
push ebx
call fcn.01050ed2
xor esi, esi
push 0x1f4
inc esi
push esi
push esi
push ebx
call fcn.01050ed2
push 0xc1a
push esi
push esi
push ebx
call fcn.01050ed2
push 8
push ebx
call fcn.01050ed2
add esp, 0x34
xor eax, eax
mov ecx, dword [ebp - 0xc]
pop edi
pop esi
mov dword fs:[0], ecx
mov ecx, dword [ebp - 0x10]
pop ebx
call fcn.01075bbb
leave
ret 8