Function at 0x104eddc
Capabilities:
Set registry value

Disassembly:
push 0x54
mov eax, 0x10cfeb8
call fcn.010b534f
xor esi, esi
mov dword [ebp - 0x14], 0x1001fd0
mov dword [ebp - 0x10], esi
mov edi, dword [ebp + 0xc]
cmp dword [edi + 0x18], 8
mov dword [ebp - 4], esi
jb 0x104ee05
mov eax, dword [edi + 4]
jmp 0x104ee08
lea eax, [edi + 4]
lea ecx, [ebp - 0x10]
push ecx
push 2
push esi
push eax
push dword [ebp + 8]
call dword [sym.imp.ADVAPI32.dll_RegOpenKeyExW]
mov dword [ebp + 0xc], eax
cmp eax, esi
je 0x104ef42
push esi
push 7
lea ecx, [ebp - 0x28]
call fcn.01033bfc
xor ebx, ebx
inc ebx
push 0x1011ef0
lea ecx, [ebp - 0x28]
mov byte [ebp - 4], bl
call fcn.01033c5d
push dword [ebp + 0xc]
lea eax, [ebp - 0x60]
push eax
call fcn.0103e9b9
push eax
lea eax, [ebp - 0x44]
push 0x1002328
push eax
mov byte [ebp - 4], 2
call fcn.01033a74
add esp, 0xc
push eax
lea ecx, [ebp - 0x24]
mov byte [ebp - 4], 3
call fcn.01033bb7
push esi
push ebx
lea ecx, [ebp - 0x44]
call fcn.01032f16
push esi
push ebx
lea ecx, [ebp - 0x60]
mov byte [ebp - 4], bl
call fcn.01032f16
push dword [ebp + 8]
lea eax, [ebp - 0x44]
push eax
call fcn.0103c59a
push eax
lea eax, [ebp - 0x60]
push 0x1002314
push eax
mov byte [ebp - 4], 4
call fcn.01033a74
add esp, 0xc
push eax
lea ecx, [ebp - 0x24]
mov byte [ebp - 4], 5
call fcn.01033bb7
push esi
push ebx
lea ecx, [ebp - 0x60]
call fcn.01032f16
push esi
push ebx
lea ecx, [ebp - 0x44]
mov byte [ebp - 4], bl
call fcn.01032f16
push edi
lea eax, [ebp - 0x60]
push 0x1002304
push eax
call fcn.01033a74
add esp, 0xc
push eax
lea ecx, [ebp - 0x24]
mov byte [ebp - 4], 6
call fcn.01033bb7
push esi
push ebx
lea ecx, [ebp - 0x60]
mov byte [ebp - 4], bl
call fcn.01032f16
push dword [ebp + 0x10]
push 0x10022f4
lea eax, [ebp - 0x60]
push eax
call fcn.01033a74
add esp, 0xc
push eax
lea ecx, [ebp - 0x24]
mov byte [ebp - 4], 7
call fcn.01033bb7
mov byte [ebp - 4], bl
push esi
push ebx
lea ecx, [ebp - 0x60]
call fcn.01032f16
lea eax, [ebp - 0x28]
push eax
lea ecx, [ebp - 0x3c]
call fcn.010907af
push 0x10de07c
lea eax, [ebp - 0x3c]
push eax
call fcn.010b4e4c
mov eax, dword [ebp + 0x14]
movzx eax, byte [eax]
mov dword [ebp + 0xc], eax
mov eax, dword [ebp + 0x10]
cmp dword [eax + 0x18], 8
jb 0x104ef59
mov eax, dword [eax + 4]
jmp 0x104ef5c
add eax, 4
push 4
lea ecx, [ebp + 0xc]
push ecx
push 4
push esi
push eax
push dword [ebp - 0x10]
call dword [sym.imp.ADVAPI32.dll_RegSetValueExW]
mov ebx, eax
cmp ebx, esi
je 0x104f07b
push esi
push 7
lea ecx, [ebp - 0x28]
call fcn.01033bfc
push 0x1011e78
lea ecx, [ebp - 0x28]
mov byte [ebp - 4], 8
call fcn.01033c5d
push ebx
lea eax, [ebp - 0x44]
push eax
call fcn.0103e9b9
push eax
lea eax, [ebp - 0x60]
push 0x1011e58
push eax
mov byte [ebp - 4], 9
call fcn.01033a74
add esp, 0xc
push eax
lea ecx, [ebp - 0x24]
mov byte [ebp - 4], 0xa
call fcn.01033bb7
xor ebx, ebx
push esi
inc ebx
push ebx
lea ecx, [ebp - 0x60]
call fcn.01032f16
push esi
push ebx
lea ecx, [ebp - 0x44]
mov byte [ebp - 4], 8
call fcn.01032f16
push dword [ebp + 8]
lea eax, [ebp - 0x44]
push eax
call fcn.0103c59a
push eax
lea eax, [ebp - 0x60]
push 0x1002314
push eax
mov byte [ebp - 4], 0xb
call fcn.01033a74
add esp, 0xc
push eax
lea ecx, [ebp - 0x24]
mov byte [ebp - 4], 0xc
call fcn.01033bb7
push esi
push ebx
lea ecx, [ebp - 0x60]
call fcn.01032f16
push esi
push ebx
lea ecx, [ebp - 0x44]
mov byte [ebp - 4], 8
call fcn.01032f16
push edi
lea eax, [ebp - 0x60]
push 0x1002304
push eax
call fcn.01033a74
add esp, 0xc
push eax
lea ecx, [ebp - 0x24]
mov byte [ebp - 4], 0xd
call fcn.01033bb7
push esi
push ebx
lea ecx, [ebp - 0x60]
mov byte [ebp - 4], 8
call fcn.01032f16
push dword [ebp + 0x10]
push 0x10022f4
lea eax, [ebp - 0x60]
push eax
call fcn.01033a74
add esp, 0xc
push eax
lea ecx, [ebp - 0x24]
mov byte [ebp - 4], 0xe
call fcn.01033bb7
mov byte [ebp - 4], 8
jmp 0x104ef1e
push dword [ebp - 0x10]
call dword [sym.imp.ADVAPI32.dll_RegFlushKey]
mov ebx, eax
cmp ebx, esi
je 0x104f190
push esi
push 7
lea ecx, [ebp - 0x28]
call fcn.01033bfc
push 0x1011de0
lea ecx, [ebp - 0x28]
mov byte [ebp - 4], 0xf
call fcn.01033c5d
push ebx
lea eax, [ebp - 0x44]
push eax
call fcn.0103e9b9
push eax
lea eax, [ebp - 0x60]
push 0x1011dc0
push eax
mov byte [ebp - 4], 0x10
call fcn.01033a74
add esp, 0xc
push eax
lea ecx, [ebp - 0x24]
mov byte [ebp - 4], 0x11
call fcn.01033bb7
xor ebx, ebx
push esi
inc ebx
push ebx
lea ecx, [ebp - 0x60]
call fcn.01032f16
push esi
push ebx
lea ecx, [ebp - 0x44]
mov byte [ebp - 4], 0xf
call fcn.01032f16
push dword [ebp + 8]
lea eax, [ebp - 0x44]
push eax
call fcn.0103c59a
push eax
lea eax, [ebp - 0x60]
push 0x1002314
push eax
mov byte [ebp - 4], 0x12
call fcn.01033a74
add esp, 0xc
push eax
lea ecx, [ebp - 0x24]
mov byte [ebp - 4], 0x13
call fcn.01033bb7
push esi
push ebx
lea ecx, [ebp - 0x60]
call fcn.01032f16
push esi
push ebx
lea ecx, [ebp - 0x44]
mov byte [ebp - 4], 0xf
call fcn.01032f16
push edi
lea eax, [ebp - 0x60]
push 0x1002304
push eax
call fcn.01033a74
add esp, 0xc
push eax
lea ecx, [ebp - 0x24]
mov byte [ebp - 4], 0x14
call fcn.01033bb7
push esi
push ebx
lea ecx, [ebp - 0x60]
mov byte [ebp - 4], 0xf
call fcn.01032f16
push dword [ebp + 0x10]
push 0x10022f4
lea eax, [ebp - 0x60]
push eax
call fcn.01033a74
add esp, 0xc
push eax
lea ecx, [ebp - 0x24]
mov byte [ebp - 4], 0x15
call fcn.01033bb7
mov byte [ebp - 4], 0xf
jmp 0x104ef1e
lea ecx, [ebp - 0x14]
mov dword [ebp - 0x14], 0x1001fd0
call fcn.0103431b
call fcn.010b543b
ret 0x10