Function at 0x1004eea5
Capabilities:
Set registry value

Disassembly:
mov eax, 0x10083b31
call fcn.100820a0
sub esp, 0x58
push ebx
push esi
push edi
mov edi, ecx
mov dword [ebp - 0x18], 0xddc85f70
xor ebx, ebx
lea ecx, [ebp - 0x54]
mov dword [ebp - 0x24], ebx
push 3
call fcn.100169ca
xor esi, esi
mov dword [ebp - 0x18], ebx
inc esi
jmp 0x1004eee3
mov eax, dword [ebp - 0x18]
mov dword [ebp + eax*4 - 0x28], 9
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], esi
jl 0x1004eed5
mov dword [ebp - 0x18], ebx
jmp 0x1004eef9
mov ecx, dword [ebp - 0x18]
mov eax, dword [ebp - 0x54]
mov dword [eax + ecx*4], esi
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], 3
jl 0x1004eeed
mov dword [ebp - 0x18], ebx
jmp 0x1004ef1a
mov byte [ebp - 0x11], bl
cmp byte [ebp - 0x11], bl
je 0x1004ef17
push 0x1f9e
call dword [sym.imp.KERNEL32.dll_SetErrorMode]
dec dword [ebp - 0x18]
cmp dword [ebp - 0x18], 0xffffffe7
je 0x1004ef04
mov dword [ebp - 0x18], 0x15
jmp 0x1004ef7b
mov dword [ebp - 0x24], 0xc58f
mov dword [ebp - 0x24], ebx
mov dword [ebp - 0x24], 0xeff3de03
mov dword [ebp - 0x24], 0x9214a9ba
mov dword [ebp - 0x1c], ebx
jmp 0x1004ef54
mov eax, dword [ebp - 0x1c]
mov dword [ebp + eax*4 - 0x30], 8
inc dword [ebp - 0x1c]
cmp dword [ebp - 0x1c], 2
jl 0x1004ef46
mov eax, dword [ebp - 0x54]
dec dword [eax]
mov byte [ebp - 0x11], bl
cmp byte [ebp - 0x11], bl
je 0x1004ef78
push ebx
push 0x171a
push 0x1109
call dword [sym.imp.KERNEL32.dll_GetCPInfoExW]
dec dword [ebp - 0x18]
cmp dword [ebp - 0x18], 0xffffffef
jl 0x1004ef29
lea ecx, [ebp - 0x54]
call fcn.100171bb
push edi
push esi
push 0x7d3a
push 0x29db
call fcn.100488e6
movdqa xmm0, xmmword [0x10007d30]
lea eax, [ebp - 0x54]
add esp, 0x10
mov dword [ebp - 0x18], 0xffff
mov dword [ebp - 0x1c], ebx
lea ecx, [ebp - 0x48]
movdqu xmmword [ebp - 0x64], xmm0
mov dword [ebp - 0x48], ebx
push dword [ebp - 0x28]
mov dword [ebp - 0x44], ebx
push eax
lea eax, [ebp - 0x64]
mov dword [ebp - 0x40], ebx
push eax
push ebx
call fcn.10017f1b
mov dword [ebp - 4], ebx
mov eax, dword [ebp - 0x18]
mov dword [ebp - 0x1c], eax
mov dword [ebp - 0x1c], ebx
jmp 0x1004f0dd
push esi
lea ecx, [ebp - 0x3c]
call fcn.100169ca
mov dword [ebp - 0x20], ebx
jmp 0x1004effc
mov ecx, dword [ebp - 0x20]
mov eax, dword [ebp - 0x3c]
mov dword [eax + ecx*4], ebx
inc dword [ebp - 0x20]
cmp dword [ebp - 0x20], esi
jl 0x1004eff0
mov byte [ebp - 0x11], bl
cmp byte [ebp - 0x11], 0
je 0x1004f012
push ebx
push ebx
call dword [sym.imp.KERNEL32.dll_FindNextFileW]
mov eax, dword [ebp - 0x18]
add eax, 0x220985a9
cmp eax, 0xb8ee41b
jle 0x1004f02f
mov eax, dword [ebp - 0x48]
mov dword [eax], 0x143e95aa
jmp 0x1004f0d2
mov dword [ebp - 0x20], 0xfa2e
mov dword [ebp - 0x24], esi
mov edx, dword [ebp - 0x20]
mov eax, dword [ebp - 0x3c]
add edx, 0x4159
neg edx
sbb edx, edx
inc edx
sub edx, dword [eax]
mov eax, dword [ebp - 0x20]
neg edx
sbb edx, edx
xor ecx, ecx
inc edx
sub edx, eax
mov eax, dword [ebp - 0x3c]
cmp dword [eax], 0xdc8d
setge cl
cmp ecx, edx
jge 0x1004f093
mov byte [ebp - 0x11], bl
cmp byte [ebp - 0x11], 0
je 0x1004f089
push 0xd1a
push ebx
push 0x1f0f
push 0xf38
push ebx
push ebx
call dword [sym.imp.ADVAPI32.dll_RegSetValueExW]
mov eax, dword [ebp - 0x3c]
mov eax, dword [eax]
mov dword [ebp - 0x24], eax
jmp 0x1004f0cf
mov dword [ebp - 0x18], ebx
cmp dword [ebp - 0x18], ebx
jg 0x1004f0cf
mov esi, dword [ebp - 0x48]
mov dword [ebp - 0x24], 0xfffffff7
mov byte [ebp - 0x11], bl
cmp byte [ebp - 0x11], 0
je 0x1004f0b5
push ebx
call dword [sym.imp.KERNEL32.dll_GetStartupInfoW]
mov ecx, dword [ebp - 0x18]
mov eax, dword [ebp - 0x3c]
mov eax, dword [eax + ecx*4]
mov dword [esi + 4], eax
mov dword [ebp - 0x24], eax
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], ebx
jle 0x1004f09e
xor esi, esi
inc esi
mov eax, dword [ebp - 0x3c]
lea ecx, [ebp - 0x3c]
call fcn.100171bb
dec dword [ebp - 0x1c]
cmp dword [ebp - 0x1c], 0xfffffffb
jge 0x1004efe2
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x48]
call fcn.100171bb
push edi
call fcn.100305fa
pop ecx
mov ecx, dword [ebp - 0xc]
pop edi
pop esi
mov dword fs:[0], ecx
pop ebx
mov esp, ebp
pop ebp
ret