Function at 0x10283b0
Capabilities:
Set registry value

Disassembly:
mov edi, edi
push ebp
mov ebp, esp
push ecx
push edi
xor eax, eax
push eax
mov edi, ecx
lea ecx, [ebp - 4]
push ecx
push eax
push 0xf003f
push eax
push eax
push eax
push 0x10049f0
push dword [ebp + 8]
call dword [sym.imp.ADVAPI32.dll_RegCreateKeyExW]
test eax, eax
jne 0x1028aeb
cmp dword [ebp + 8], 0x80000002
push ebx
push esi
mov esi, dword [sym.imp.ADVAPI32.dll_RegSetValueExW]
push 4
pop ebx
jne 0x10287d1
push ebx
lea eax, [edi + 0x12c]
push eax
push ebx
push 0
push 0x100fa00
push dword [ebp - 4]
call esi
test eax, eax
jne 0x1028ae0
push ebx
lea eax, [edi + 0x138]
push eax
push ebx
push 0
push 0x100f9e4
push dword [ebp - 4]
call esi
test eax, eax
jne 0x1028ae0
push ebx
lea eax, [edi + 0x18c]
push eax
push ebx
push 0
push 0x100f9c8
push dword [ebp - 4]
call esi
test eax, eax
jne 0x1028ae0
push ebx
lea eax, [edi + 0x198]
push eax
push ebx
push 0
push 0x100f9a8
push dword [ebp - 4]
call esi
test eax, eax
jne 0x1028ae0
push ebx
lea eax, [edi + 0x1a4]
push eax
push ebx
push 0
push 0x100f98c
push dword [ebp - 4]
call esi
test eax, eax
jne 0x1028ae0
push ebx
lea eax, [edi + 0x174]
push eax
push ebx
push 0
push 0x100f96c
push dword [ebp - 4]
call esi
test eax, eax
jne 0x1028ae0
push ebx
lea eax, [edi + 0x144]
push eax
push ebx
push 0
push 0x100f954
push dword [ebp - 4]
call esi
test eax, eax
jne 0x1028ae0
push ebx
lea eax, [edi + 0x150]
push eax
push ebx
push 0
push 0x100f93c
push dword [ebp - 4]
call esi
test eax, eax
jne 0x1028ae0
push ebx
lea eax, [edi + 0x15c]
push eax
push ebx
push 0
push 0x100f928
push dword [ebp - 4]
call esi
test eax, eax
jne 0x1028ae0
push ebx
lea eax, [edi + 0x168]
push eax
push ebx
push 0
push 0x100f910
push dword [ebp - 4]
call esi
test eax, eax
jne 0x1028ae0
push ebx
lea eax, [edi + 0x180]
push eax
push ebx
push 0
push 0x100f8f0
push dword [ebp - 4]
call esi
test eax, eax
jne 0x1028ae0
push ebx
lea eax, [edi + 0x1b0]
push eax
push ebx
push 0
push 0x100f8d8
push dword [ebp - 4]
call esi
test eax, eax
jne 0x1028ae0
push ebx
lea eax, [edi + 0x1bc]
push eax
push ebx
push 0
push 0x100f8c0
push dword [ebp - 4]
call esi
test eax, eax
jne 0x1028ae0
push ebx
lea eax, [edi + 0x1c8]
push eax
push ebx
push 0
push 0x100f8a4
push dword [ebp - 4]
call esi
test eax, eax
jne 0x1028ae0
push ebx
lea eax, [edi + 0x1d4]
push eax
push ebx
push 0
push 0x100f888
push dword [ebp - 4]
call esi
test eax, eax
jne 0x1028ae0
push ebx
lea eax, [edi + 0x1e0]
push eax
push ebx
push 0
push 0x100f86c
push dword [ebp - 4]
call esi
test eax, eax
jne 0x1028ae0
push ebx
lea eax, [edi + 0x1ec]
push eax
push ebx
push 0
push 0x100f850
push dword [ebp - 4]
call esi
test eax, eax
jne 0x1028ae0
push ebx
lea eax, [edi + 0x130]
push eax
push ebx
push 0
push 0x100f830
push dword [ebp - 4]
call esi
test eax, eax
jne 0x1028ae0
push ebx
lea eax, [edi + 0x13c]
push eax
push ebx
push 0
push 0x100f814
push dword [ebp - 4]
call esi
test eax, eax
jne 0x1028ae0
push ebx
lea eax, [edi + 0x190]
push eax
push ebx
push 0
push 0x100f7f8
push dword [ebp - 4]
call esi
test eax, eax
jne 0x1028ae0
push ebx
lea eax, [edi + 0x19c]
push eax
push ebx
push 0
push 0x100f7d8
push dword [ebp - 4]
call esi
test eax, eax
jne 0x1028ae0
push ebx
lea eax, [edi + 0x1a8]
push eax
push ebx
push 0
push 0x100f7bc
push dword [ebp - 4]
call esi
test eax, eax
jne 0x1028ae0
push ebx
lea eax, [edi + 0x178]
push eax
push ebx
push 0
push 0x100f79c
push dword [ebp - 4]
call esi
test eax, eax
jne 0x1028ae0
push ebx
lea eax, [edi + 0x148]
push eax
push ebx
push 0
push 0x100f784
push dword [ebp - 4]
call esi
test eax, eax
jne 0x1028ae0
push ebx
lea eax, [edi + 0x154]
push eax
push ebx
push 0
push 0x100f76c
push dword [ebp - 4]
call esi
test eax, eax
jne 0x1028ae0
push ebx
lea eax, [edi + 0x160]
push eax
push ebx
push 0
push 0x100f758
push dword [ebp - 4]
call esi
test eax, eax
jne 0x1028ae0
push ebx
lea eax, [edi + 0x16c]
push eax
push ebx
push 0
push 0x100f740
push dword [ebp - 4]
call esi
test eax, eax
jne 0x1028ae0
push ebx
lea eax, [edi + 0x184]
push eax
push ebx
push 0
push 0x100f720
push dword [ebp - 4]
call esi
test eax, eax
jne 0x1028ae0
push ebx
lea eax, [edi + 0x1b4]
push eax
push ebx
push 0
push 0x100f708
push dword [ebp - 4]
call esi
test eax, eax
jne 0x1028ae0
push ebx
lea eax, [edi + 0x1c0]
push eax
push ebx
push 0
push 0x100f6f0
push dword [ebp - 4]
call esi
test eax, eax
jne 0x1028ae0
push ebx
lea eax, [edi + 0x1cc]
push eax
push ebx
push 0
push 0x100f6d4
push dword [ebp - 4]
call esi
test eax, eax
jne 0x1028ae0
push ebx
lea eax, [edi + 0x1d8]
push eax
push ebx
push 0
push 0x100f6b8
push dword [ebp - 4]
call esi
test eax, eax
jne 0x1028ae0
push ebx
lea eax, [edi + 0x1e4]
push eax
push ebx
push 0
push 0x100f69c
push dword [ebp - 4]
call esi
test eax, eax
jne 0x1028ae0
push ebx
lea eax, [edi + 0x1f0]
push eax
push ebx
push 0
push 0x1011c00
push dword [ebp - 4]
call esi
test eax, eax
jne 0x1028ae0
push ebx
lea eax, [edi + 0x98]
push eax
push ebx
push 0
push 0x1004d14
push dword [ebp - 4]
call esi
test eax, eax
jne 0x1028ae0
push ebx
lea eax, [edi + 0x9c]
push eax
push ebx
push 0
push 0x1004d00
push dword [ebp - 4]
call esi
test eax, eax
jne 0x1028ae0
push ebx
lea eax, [edi + 0xb8]
push eax
push ebx
push 0
push 0x1004cec
push dword [ebp - 4]
call esi
test eax, eax
jne 0x1028ae0
push ebx
lea eax, [edi + 0xbc]
push eax
push ebx
push 0
push 0x1004cd4
push dword [ebp - 4]
call esi
test eax, eax
jne 0x1028ae0
push ebx
lea eax, [edi + 0xc0]
push eax
push ebx
push 0
push 0x1004cc0
push dword [ebp - 4]
call esi
test eax, eax
jne 0x1028ae0
push ebx
lea eax, [edi + 0xb0]
push eax
push ebx
push 0
push 0x1004ca8
push dword [ebp - 4]
call esi
test eax, eax
jne 0x1028ae0
push ebx
lea eax, [edi + 0xa0]
push eax
push ebx
push 0
push 0x1004c98
push dword [ebp - 4]
call esi
test eax, eax
jne 0x1028ae0
push ebx
lea eax, [edi + 0xa4]
push eax
push ebx
push 0
push 0x1004c88
push dword [ebp - 4]
call esi
test eax, eax
jne 0x1028ae0
push ebx
lea eax, [edi + 0xa8]
push eax
push ebx
push 0
push 0x1004c7c
push dword [ebp - 4]
call esi
test eax, eax
jne 0x1028ae0
push ebx
lea eax, [edi + 0xac]
push eax
push ebx
push 0
push 0x1004c6c
push dword [ebp - 4]
call esi
test eax, eax
jne 0x1028ae0
push ebx
lea eax, [edi + 0xb4]
push eax
push ebx
push 0
push 0x1004c54
push dword [ebp - 4]
call esi
test eax, eax
jne 0x1028ae0
push ebx
lea eax, [edi + 0xc4]
push eax
push ebx
push 0
push 0x1004c44
push dword [ebp - 4]
call esi
test eax, eax
jne 0x1028ae0
push ebx
lea eax, [edi + 0xe0]
push eax
push ebx
push 0
push 0x1004c34
push dword [ebp - 4]
call esi
test eax, eax
jne 0x1028ae0
push ebx
lea eax, [edi + 0xc8]
push eax
push ebx
push 0
push 0x1004c24
push dword [ebp - 4]
call esi
test eax, eax
jne 0x1028ae0
push ebx
lea eax, [edi + 0xcc]
push eax
push ebx
push 0
push 0x1004c10
push dword [ebp - 4]
call esi
test eax, eax
jne 0x1028ae0
push ebx
lea eax, [edi + 0xd0]
push eax
push ebx
push 0
push 0x1004bfc
push dword [ebp - 4]
call esi
test eax, eax
jne 0x1028ae0
push ebx
lea eax, [edi + 0xd4]
push eax
push ebx
push 0
push 0x1004be8
push dword [ebp - 4]
call esi
test eax, eax
jne 0x1028ae0
push ebx
lea eax, [edi + 0xd8]
push eax
push ebx
push 0
push 0x1004bd4
push dword [ebp - 4]
call esi
test eax, eax
jne 0x1028ae0
push ebx
lea eax, [edi + 0x248]
push eax
push ebx
push 0
push 0x1004bb8
push dword [ebp - 4]
call esi
test eax, eax
jne 0x1028ae0
push ebx
lea eax, [edi + 0x24c]
push eax
push ebx
push 0
push 0x1004b9c
push dword [ebp - 4]
call esi
test eax, eax
jne 0x1028ae0
push ebx
lea eax, [edi + 0x250]
push eax
push ebx
push 0
push 0x1004b88
push dword [ebp - 4]
call esi
test eax, eax
jne 0x1028ae0
push ebx
lea eax, [edi + 0xf0]
push eax
push ebx
push 0
push 0x1004b5c
push dword [ebp - 4]
call esi
test eax, eax
jne 0x1028ae0
push ebx
lea eax, [edi + 0xf4]
push eax
push ebx
push 0
push 0x1004b30
push dword [ebp - 4]
call esi
test eax, eax
jne 0x1028ae0
push ebx
lea eax, [edi + 0xf8]
push eax
push ebx
push 0
push 0x1004b08
push dword [ebp - 4]
call esi
test eax, eax
jne 0x1028ae0
push ebx
lea eax, [edi + 0x298]
push eax
push ebx
push 0
push 0x1004af4
push dword [ebp - 4]
call esi
test eax, eax
jne 0x1028ae0
push ebx
lea eax, [edi + 0x8c]
push eax
push ebx
push 0
push 0x1004adc
push dword [ebp - 4]
call esi
test eax, eax
jne 0x1028ae0
push ebx
lea eax, [edi + 0x94]
push eax
push ebx
push 0
push 0x1004abc
push dword [ebp - 4]
call esi
test eax, eax
jne 0x1028ae0
push ebx
add edi, 0x90
push edi
push ebx
push eax
push 0x1004aa4
push dword [ebp - 4]
call esi
push dword [ebp - 4]
call dword [sym.imp.ADVAPI32.dll_RegCloseKey]
pop esi
pop ebx
xor eax, eax
pop edi
leave
ret 4