Function at 0x1006d330
Capabilities:
Set registry value

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x101300c6
mov eax, dword fs:[0]
push eax
sub esp, 0x110
mov eax, dword [0x1014a018]
xor eax, ebp
mov dword [ebp - 0x10], eax
push ebx
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
xor eax, eax
mov edi, ecx
mov ecx, dword [edi + 0x350]
mov dword [ebp - 0x1b], eax
mov dword [ebp - 0x17], eax
mov word [ebp - 0x13], ax
mov dword [ebp - 0x33], eax
mov dword [ebp - 0x2f], eax
mov dword [ebp - 0x2b], eax
mov dword [ebp - 0x27], eax
mov dword [ebp - 0x23], eax
push 0xb
lea eax, [ebp - 0x1c]
xor ebx, ebx
push eax
mov edx, 0x4217d0
mov dword [ebp - 0x114], edi
or esi, 0xffffffff
mov byte [ebp - 0x1c], bl
mov byte [ebp - 0x34], bl
call edx
mov ecx, dword [edi + 0x354]
push 0x15
lea eax, [ebp - 0x34]
push eax
mov edx, 0x4217d0
call edx
xor edi, edi
mov eax, edi
imul eax, eax, 0xb
lea ecx, [ebp - 0x1c]
add eax, 0x108c6bd4
mov dl, byte [eax]
cmp dl, byte [ecx]
jne 0x1006d3e1
cmp dl, bl
je 0x1006d3dd
mov dl, byte [eax + 1]
cmp dl, byte [ecx + 1]
jne 0x1006d3e1
add eax, 2
add ecx, 2
cmp dl, bl
jne 0x1006d3c1
xor eax, eax
jmp 0x1006d3e6
sbb eax, eax
sbb eax, 0xffffffff
cmp eax, ebx
jne 0x1006d42b
mov eax, edi
imul eax, eax, 0x15
lea ecx, [ebp - 0x34]
add eax, 0x108c6b68
mov dl, byte [eax]
cmp dl, byte [ecx]
jne 0x1006d417
cmp dl, bl
je 0x1006d413
mov dl, byte [eax + 1]
cmp dl, byte [ecx + 1]
jne 0x1006d417
add eax, 2
add ecx, 2
cmp dl, bl
jne 0x1006d3f7
xor eax, eax
jmp 0x1006d41c
sbb eax, eax
sbb eax, 0xffffffff
cmp eax, ebx
je 0x1006d7b3
mov esi, edi
mov edi, 5
inc edi
cmp edi, 5
jl 0x1006d3b4
cmp esi, 0xffffffff
jne 0x1006d46a
xor eax, eax
jmp 0x1006d440
mov ecx, eax
imul ecx, ecx, 0xb
cmp byte [ecx + 0x108c6bd4], bl
je 0x1006d45a
mov edx, eax
imul edx, edx, 0x15
cmp byte [edx + 0x108c6b68], bl
jne 0x1006d461
mov esi, eax
mov eax, 5
inc eax
cmp eax, 5
jl 0x1006d440
cmp esi, 0xffffffff
jle 0x1006d7b3
push 0x31
lea eax, [ebp - 0x9b]
push ebx
push eax
mov byte [ebp - 0x9c], bl
call sub.MSVCR100.dll_memset
push 0x31
lea ecx, [ebp - 0x67]
push ebx
push ecx
mov byte [ebp - 0x68], bl
call sub.MSVCR100.dll_memset
mov ecx, dword [ebp - 0x114]
mov ecx, dword [ecx + 0x350]
mov edx, esi
imul edx, edx, 0xb
add esp, 0x18
lea edi, [edx + 0x108c6bd4]
push 0xb
push edi
mov eax, 0x4217d0
call eax
mov ecx, dword [ebp - 0x114]
mov ecx, dword [ecx + 0x354]
mov edx, esi
imul edx, edx, 0x15
lea eax, [edx + 0x108c6b68]
push 0x15
mov dword [ebp - 0x118], eax
push eax
mov eax, 0x4217d0
call eax
lea edx, [ebp - 0x9c]
cmp esi, ebx
jle 0x1006d508
inc esi
push esi
push str.ID__d
call fcn.1006e580
push esi
push str.PW__d
lea edx, [ebp - 0x68]
call fcn.1006e580
add esp, 0x10
jmp 0x1006d522
push 0x10135e5c
call fcn.1006e580
push 0x10135e60
lea edx, [ebp - 0x68]
call fcn.1006e580
add esp, 8
mov eax, edi
mov dword [ebp - 0xdc], 0xf
mov dword [ebp - 0xe0], ebx
mov byte [ebp - 0xf0], bl
lea edx, [eax + 1]
lea ecx, [ecx]
mov cl, byte [eax]
inc eax
cmp cl, bl
jne 0x1006d540
sub eax, edx
mov esi, eax
mov eax, edi
lea ecx, [ebp - 0xf0]
call fcn.10003210
mov dword [ebp - 4], ebx
lea eax, [ebp - 0x9c]
mov dword [ebp - 0xa4], 0xf
mov dword [ebp - 0xa8], ebx
mov byte [ebp - 0xb8], bl
lea ecx, [eax + 1]
lea ebx, [ebx]
mov dl, byte [eax]
inc eax
cmp dl, bl
jne 0x1006d580
sub eax, ecx
mov esi, eax
lea eax, [ebp - 0x9c]
lea ecx, [ebp - 0xb8]
call fcn.10003210
mov esi, dword [ebp - 0xe0]
lea edx, [ebp - 0x114]
push edx
lea eax, [ebp - 0x110]
push eax
push ebx
push 0xf003f
push ebx
push ebx
push ebx
push str.SOFTWAREWebzenMuConfig
push connect
mov dword [ebp - 0x110], ebx
call dword [sym.imp.ADVAPI32.dll_RegCreateKeyExA]
mov edi, 0x10
test eax, eax
jne 0x1006d620
mov ecx, dword [ebp - 0xf0]
cmp dword [ebp - 0xdc], edi
jae 0x1006d5ec
lea ecx, [ebp - 0xf0]
mov eax, dword [ebp - 0xb8]
cmp dword [ebp - 0xa4], edi
jae 0x1006d600
lea eax, [ebp - 0xb8]
push esi
push ecx
mov ecx, dword [ebp - 0x110]
push 1
push ebx
push eax
push ecx
call dword [sym.imp.ADVAPI32.dll_RegSetValueExA]
mov edx, dword [ebp - 0x110]
push edx
call dword [sym.imp.ADVAPI32.dll_RegCloseKey]
cmp dword [ebp - 0xa4], edi
jb 0x1006d638
mov eax, dword [ebp - 0xb8]
push eax
call dword [sym.imp.MSVCR100.dll_void___cdecl_operator_delete_void__]
add esp, 4
mov esi, 0xf
mov dword [ebp - 4], 0xffffffff
mov dword [ebp - 0xa4], esi
mov dword [ebp - 0xa8], ebx
mov byte [ebp - 0xb8], bl
cmp dword [ebp - 0xdc], edi
jb 0x1006d66e
mov ecx, dword [ebp - 0xf0]
push ecx
call dword [sym.imp.MSVCR100.dll_void___cdecl_operator_delete_void__]
add esp, 4
mov edi, dword [ebp - 0x118]
mov eax, edi
mov dword [ebp - 0xf8], esi
mov dword [ebp - 0xfc], ebx
mov byte [ebp - 0x10c], bl
lea edx, [eax + 1]
jmp 0x1006d690
mov cl, byte [eax]
inc eax
cmp cl, bl
jne 0x1006d690
sub eax, edx
mov esi, eax
mov eax, edi
lea ecx, [ebp - 0x10c]
call fcn.10003210
mov dword [ebp - 4], 1
lea eax, [ebp - 0x68]
mov dword [ebp - 0xc0], 0xf
mov dword [ebp - 0xc4], ebx
mov byte [ebp - 0xd4], bl
lea ecx, [eax + 1]
jmp 0x1006d6d0
mov dl, byte [eax]
inc eax
cmp dl, bl
jne 0x1006d6d0
sub eax, ecx
mov esi, eax
lea eax, [ebp - 0x68]
lea ecx, [ebp - 0xd4]
call fcn.10003210
mov esi, dword [ebp - 0xfc]
lea edx, [ebp - 0x11c]
push edx
lea eax, [ebp - 0x110]
push eax
push ebx
push 0xf003f
push ebx
push ebx
push ebx
push str.SOFTWAREWebzenMuConfig
push connect
mov dword [ebp - 0x110], ebx
call dword [sym.imp.ADVAPI32.dll_RegCreateKeyExA]
mov edi, 0x10
test eax, eax
jne 0x1006d76d
mov ecx, dword [ebp - 0x10c]
cmp dword [ebp - 0xf8], edi
jae 0x1006d739
lea ecx, [ebp - 0x10c]
mov eax, dword [ebp - 0xd4]
cmp dword [ebp - 0xc0], edi
jae 0x1006d74d
lea eax, [ebp - 0xd4]
push esi
push ecx
mov ecx, dword [ebp - 0x110]
push 1
push ebx
push eax
push ecx
call dword [sym.imp.ADVAPI32.dll_RegSetValueExA]
mov edx, dword [ebp - 0x110]
push edx
call dword [sym.imp.ADVAPI32.dll_RegCloseKey]
cmp dword [ebp - 0xc0], edi
jb 0x1006d785
mov eax, dword [ebp - 0xd4]
push eax
call dword [sym.imp.MSVCR100.dll_void___cdecl_operator_delete_void__]
add esp, 4
mov dword [ebp - 0xc0], 0xf
mov dword [ebp - 0xc4], ebx
mov byte [ebp - 0xd4], bl
cmp dword [ebp - 0xf8], edi
jb 0x1006d7b3
mov ecx, dword [ebp - 0x10c]
push ecx
call dword [sym.imp.MSVCR100.dll_void___cdecl_operator_delete_void__]
add esp, 4
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 0x10]
xor ecx, ebp
call fcn.1012db16
mov esp, ebp
pop ebp
ret