Function at 0x1014e46
Capabilities:
Set registry value

Disassembly:
push ebp
mov ebp, esp
push ecx
push ecx
push edi
lea eax, [ebp - 4]
push eax
push 0x1001df0
push dword [ebp + 8]
mov edi, ecx
call dword [sym.imp.ADVAPI32.dll_RegCreateKeyW]
test eax, eax
jne 0x10154d8
cmp dword [ebp + 8], 0x80000002
push ebx
push esi
mov esi, dword [sym.imp.ADVAPI32.dll_RegSetValueExW]
push 4
pop ebx
jne 0x101525a
push ebx
lea eax, [edi + 0xf8]
push eax
push ebx
push 0
push 0x1002ed4
push dword [ebp - 4]
call esi
test eax, eax
jne 0x10154cd
push ebx
lea eax, [edi + 0x104]
push eax
push ebx
push 0
push 0x1002eb8
push dword [ebp - 4]
call esi
test eax, eax
jne 0x10154cd
push ebx
lea eax, [edi + 0x158]
push eax
push ebx
push 0
push 0x1002e9c
push dword [ebp - 4]
call esi
test eax, eax
jne 0x10154cd
push ebx
lea eax, [edi + 0x164]
push eax
push ebx
push 0
push 0x1002e7c
push dword [ebp - 4]
call esi
test eax, eax
jne 0x10154cd
push ebx
lea eax, [edi + 0x170]
push eax
push ebx
push 0
push 0x1002e60
push dword [ebp - 4]
call esi
test eax, eax
jne 0x10154cd
push ebx
lea eax, [edi + 0x140]
push eax
push ebx
push 0
push 0x1002e40
push dword [ebp - 4]
call esi
test eax, eax
jne 0x10154cd
push ebx
lea eax, [edi + 0x110]
push eax
push ebx
push 0
push 0x1002e28
push dword [ebp - 4]
call esi
test eax, eax
jne 0x10154cd
push ebx
lea eax, [edi + 0x11c]
push eax
push ebx
push 0
push 0x1002e10
push dword [ebp - 4]
call esi
test eax, eax
jne 0x10154cd
push ebx
lea eax, [edi + 0x128]
push eax
push ebx
push 0
push 0x1002dfc
push dword [ebp - 4]
call esi
test eax, eax
jne 0x10154cd
push ebx
lea eax, [edi + 0x134]
push eax
push ebx
push 0
push 0x1002de4
push dword [ebp - 4]
call esi
test eax, eax
jne 0x10154cd
push ebx
lea eax, [edi + 0x14c]
push eax
push ebx
push 0
push 0x1002dc4
push dword [ebp - 4]
call esi
test eax, eax
jne 0x10154cd
push ebx
lea eax, [edi + 0x17c]
push eax
push ebx
push 0
push 0x1002dac
push dword [ebp - 4]
call esi
test eax, eax
jne 0x10154cd
push ebx
lea eax, [edi + 0x188]
push eax
push ebx
push 0
push 0x1002d94
push dword [ebp - 4]
call esi
test eax, eax
jne 0x10154cd
push ebx
lea eax, [edi + 0x194]
push eax
push ebx
push 0
push 0x1002d78
push dword [ebp - 4]
call esi
test eax, eax
jne 0x10154cd
push ebx
lea eax, [edi + 0x1a0]
push eax
push ebx
push 0
push 0x1002d5c
push dword [ebp - 4]
call esi
test eax, eax
jne 0x10154cd
push ebx
lea eax, [edi + 0x1ac]
push eax
push ebx
push 0
push 0x1002d40
push dword [ebp - 4]
call esi
test eax, eax
jne 0x10154cd
push ebx
lea eax, [edi + 0x1b8]
push eax
push ebx
push 0
push 0x1002d24
push dword [ebp - 4]
call esi
test eax, eax
jne 0x10154cd
push ebx
lea eax, [edi + 0xfc]
push eax
push ebx
push 0
push 0x1002d04
push dword [ebp - 4]
call esi
test eax, eax
jne 0x10154cd
push ebx
lea eax, [edi + 0x108]
push eax
push ebx
push 0
push 0x1002ce8
push dword [ebp - 4]
call esi
test eax, eax
jne 0x10154cd
push ebx
lea eax, [edi + 0x15c]
push eax
push ebx
push 0
push 0x1002ccc
push dword [ebp - 4]
call esi
test eax, eax
jne 0x10154cd
push ebx
lea eax, [edi + 0x168]
push eax
push ebx
push 0
push 0x1002cac
push dword [ebp - 4]
call esi
test eax, eax
jne 0x10154cd
push ebx
lea eax, [edi + 0x174]
push eax
push ebx
push 0
push 0x1002c90
push dword [ebp - 4]
call esi
test eax, eax
jne 0x10154cd
push ebx
lea eax, [edi + 0x144]
push eax
push ebx
push 0
push 0x1002c70
push dword [ebp - 4]
call esi
test eax, eax
jne 0x10154cd
push ebx
lea eax, [edi + 0x114]
push eax
push ebx
push 0
push 0x1002c58
push dword [ebp - 4]
call esi
test eax, eax
jne 0x10154cd
push ebx
lea eax, [edi + 0x120]
push eax
push ebx
push 0
push 0x1002c40
push dword [ebp - 4]
call esi
test eax, eax
jne 0x10154cd
push ebx
lea eax, [edi + 0x12c]
push eax
push ebx
push 0
push 0x1002c2c
push dword [ebp - 4]
call esi
test eax, eax
jne 0x10154cd
push ebx
lea eax, [edi + 0x138]
push eax
push ebx
push 0
push 0x1002c14
push dword [ebp - 4]
call esi
test eax, eax
jne 0x10154cd
push ebx
lea eax, [edi + 0x150]
push eax
push ebx
push 0
push 0x1002bf4
push dword [ebp - 4]
call esi
test eax, eax
jne 0x10154cd
push ebx
lea eax, [edi + 0x180]
push eax
push ebx
push 0
push 0x1002bdc
push dword [ebp - 4]
call esi
test eax, eax
jne 0x10154cd
push ebx
lea eax, [edi + 0x18c]
push eax
push ebx
push 0
push 0x1002bc4
push dword [ebp - 4]
call esi
test eax, eax
jne 0x10154cd
push ebx
lea eax, [edi + 0x198]
push eax
push ebx
push 0
push 0x1002ba8
push dword [ebp - 4]
call esi
test eax, eax
jne 0x10154cd
push ebx
lea eax, [edi + 0x1a4]
push eax
push ebx
push 0
push 0x1002b8c
push dword [ebp - 4]
call esi
test eax, eax
jne 0x10154cd
push ebx
lea eax, [edi + 0x1b0]
push eax
push ebx
push 0
push 0x1002b70
push dword [ebp - 4]
call esi
test eax, eax
jne 0x10154cd
push ebx
lea eax, [edi + 0x1bc]
push eax
push ebx
push 0
push 0x1002b54
push dword [ebp - 4]
call esi
test eax, eax
jne 0x10154cd
push ebx
lea eax, [edi + 0x9c]
push eax
push ebx
push 0
push 0x1002b3c
push dword [ebp - 4]
call esi
test eax, eax
jne 0x10154cd
push ebx
lea eax, [edi + 0xa0]
push eax
push ebx
push 0
push 0x1002b28
push dword [ebp - 4]
call esi
test eax, eax
jne 0x10154cd
push ebx
lea eax, [edi + 0xbc]
push eax
push ebx
push 0
push 0x1002b14
push dword [ebp - 4]
call esi
test eax, eax
jne 0x10154cd
push ebx
lea eax, [edi + 0xc0]
push eax
push ebx
push 0
push 0x1002afc
push dword [ebp - 4]
call esi
test eax, eax
jne 0x10154cd
push ebx
lea eax, [edi + 0xc4]
push eax
push ebx
push 0
push 0x1002ae8
push dword [ebp - 4]
call esi
test eax, eax
jne 0x10154cd
push ebx
lea eax, [edi + 0xb4]
push eax
push ebx
push 0
push 0x1002ad0
push dword [ebp - 4]
call esi
test eax, eax
jne 0x10154cd
push ebx
lea eax, [edi + 0xa4]
push eax
push ebx
push 0
push 0x1002ac0
push dword [ebp - 4]
call esi
test eax, eax
jne 0x10154cd
push ebx
lea eax, [edi + 0xa8]
push eax
push ebx
push 0
push 0x1002ab0
push dword [ebp - 4]
call esi
test eax, eax
jne 0x10154cd
push ebx
lea eax, [edi + 0xac]
push eax
push ebx
push 0
push 0x1002aa4
push dword [ebp - 4]
call esi
test eax, eax
jne 0x10154cd
push ebx
lea eax, [edi + 0xb0]
push eax
push ebx
push 0
push 0x1002a94
push dword [ebp - 4]
call esi
test eax, eax
jne 0x10154cd
push ebx
lea eax, [edi + 0xb8]
push eax
push ebx
push 0
push 0x1002a7c
push dword [ebp - 4]
call esi
test eax, eax
jne 0x10154cd
push ebx
lea eax, [edi + 0xc8]
push eax
push ebx
push 0
push 0x1002a6c
push dword [ebp - 4]
call esi
test eax, eax
jne 0x10154cd
push ebx
lea eax, [edi + 0xe4]
push eax
push ebx
push 0
push 0x1002a5c
push dword [ebp - 4]
call esi
test eax, eax
jne 0x10154cd
push ebx
lea eax, [edi + 0xcc]
push eax
push ebx
push 0
push 0x1002a4c
push dword [ebp - 4]
call esi
test eax, eax
jne 0x10154cd
push ebx
lea eax, [edi + 0xd0]
push eax
push ebx
push 0
push 0x1002a38
push dword [ebp - 4]
call esi
test eax, eax
jne 0x10154cd
push ebx
lea eax, [edi + 0xd4]
push eax
push ebx
push 0
push 0x1002a24
push dword [ebp - 4]
call esi
test eax, eax
jne 0x10154cd
push ebx
lea eax, [edi + 0xd8]
push eax
push ebx
push 0
push 0x1002a10
push dword [ebp - 4]
call esi
test eax, eax
jne 0x10154cd
push ebx
lea eax, [edi + 0xdc]
push eax
push ebx
push 0
push 0x10029fc
push dword [ebp - 4]
call esi
test eax, eax
jne 0x10154cd
push ebx
lea eax, [edi + 0x8c]
push eax
push ebx
push 0
push 0x10029e4
push dword [ebp - 4]
call esi
test eax, eax
jne 0x10154cd
push ebx
lea eax, [edi + 0x98]
push eax
push ebx
push 0
push 0x10029c4
push dword [ebp - 4]
call esi
test eax, eax
jne 0x10154cd
push ebx
lea eax, [edi + 0x94]
push eax
push ebx
push 0
push 0x10029ac
push dword [ebp - 4]
call esi
test eax, eax
jne 0x10154cd
mov eax, dword [edi + 0x90]
neg eax
sbb eax, eax
add eax, 3
push ebx
mov dword [ebp - 8], eax
lea eax, [ebp - 8]
push eax
push ebx
push 0
push 0x1002998
push dword [ebp - 4]
call esi
push dword [ebp - 4]
call dword [sym.imp.ADVAPI32.dll_RegCloseKey]
pop esi
pop ebx
xor eax, eax
pop edi
leave
ret 4