Function at 0x1060fb5
Capabilities:
Resolve function by parsing pe exports

Disassembly:
mov eax, reloc.ADVAPI32.dll_AddAccessAllowedAce
call fcn.01077798
sub esp, 0x3c
mov eax, dword [0x10de03c]
push ebx
push esi
mov esi, dword [ebp + 0xc]
push edi
mov dword [ebp - 0x10], eax
call fcn.01021462
mov dword [ebp - 0x30], eax
call fcn.01075ed8
mov ecx, dword [eax + 4]
call fcn.010584c0
mov edi, eax
xor ebx, ebx
cmp edi, ebx
mov dword [ebp - 0x2c], edi
je 0x106174c
mov eax, dword [esi]
xor ecx, ecx
inc ecx
cmp eax, ecx
jne 0x1061005
mov dword [edi + 0x80], ebx
jmp 0x106100f
cmp eax, ebx
jne 0x1061019
mov dword [edi + 0x80], ecx
mov eax, dword [ebp - 0x30]
mov word [eax + reloc.ADVAPI32.dll_RegDeleteValueW], cx
push ebx
lea ecx, [ebp - 0x48]
call fcn.01019ea7
mov eax, dword [esi + 0x20]
cmp eax, ebx
je 0x106103d
push 0x1f
push eax
push dword [0x10e25b0]
push dword [0x10e25b4]
call fcn.01060ecb
mov eax, dword [esi + 0x24]
cmp eax, ebx
je 0x1061058
push 0x1e
push eax
push dword [0x10e25b0]
push dword [0x10e25b4]
call fcn.01060ecb
mov eax, dword [esi + 0x28]
cmp eax, ebx
je 0x1061071
push eax
push dword [0x10e25b0]
push dword [0x10e25b4]
call fcn.010605e8
mov eax, dword [esi + 0x10]
cmp eax, ebx
je 0x1061083
push eax
lea ecx, [edi + 0x74]
call fcn.01075e54
jmp 0x10610fc
lea ecx, [ebp - 0x28]
call fcn.01075e60
push ebx
push 2
lea eax, [ebp - 0x34]
push eax
lea ecx, [ebp - 0x44]
mov dword [ebp - 4], ebx
call fcn.010818de
mov dword [ebp - 0x38], eax
push 2
lea eax, [ebp - 0x3c]
push eax
lea ecx, [ebp - 0x48]
mov byte [ebp - 4], 1
call fcn.01081cad
mov ecx, dword [ebp - 0x38]
push dword [ecx]
mov byte [ebp - 4], 2
push dword [eax]
lea eax, [ebp - 0x28]
push 0x311
push eax
call fcn.01076214
add esp, 0x10
lea ecx, [ebp - 0x3c]
mov byte [ebp - 4], 1
call fcn.01075e24
lea ecx, [ebp - 0x34]
mov byte [ebp - 4], bl
call fcn.01075e24
push dword [ebp - 0x28]
lea ecx, [edi + 0x74]
call fcn.01075e54
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x28]
call fcn.01075e24
mov eax, dword [esi + 0x1c]
cmp eax, ebx
je 0x1061114
push eax
lea ecx, [edi + 0x9c]
call fcn.01075e54
jmp 0x1061195
lea ecx, [ebp - 0x28]
call fcn.01075e60
push ebx
push 2
lea eax, [ebp - 0x38]
push eax
lea ecx, [ebp - 0x44]
mov dword [ebp - 4], 3
call fcn.010818de
mov dword [ebp - 0x34], eax
push 2
lea eax, [ebp - 0x3c]
push eax
lea ecx, [ebp - 0x48]
mov byte [ebp - 4], 4
call fcn.01081cad
mov ecx, dword [ebp - 0x34]
push dword [ecx]
mov byte [ebp - 4], 5
push dword [eax]
lea eax, [ebp - 0x28]
push 0x4ea4
push eax
call fcn.01076214
add esp, 0x10
lea ecx, [ebp - 0x3c]
mov byte [ebp - 4], 4
call fcn.01075e24
lea ecx, [ebp - 0x38]
mov byte [ebp - 4], 3
call fcn.01075e24
push dword [ebp - 0x28]
lea ecx, [edi + 0x9c]
call fcn.01075e54
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x28]
call fcn.01075e24
mov eax, dword [esi + 8]
cmp eax, ebx
je 0x10611c0
push eax
lea ecx, [ebp - 0x34]
call fcn.01075e3c
mov ecx, dword [ebp - 0x30]
push eax
add ecx, 0x8b8
mov dword [ebp - 4], 6
call fcn.01075e30
lea ecx, [ebp - 0x34]
jmp 0x10611f1
lea ecx, [ebp - 0x28]
call fcn.01075e60
push 0x277a
lea ecx, [ebp - 0x28]
mov dword [ebp - 4], 7
call fcn.01075e90
mov ecx, dword [ebp - 0x30]
lea eax, [ebp - 0x28]
push eax
add ecx, 0x8b8
call fcn.01075e30
lea ecx, [ebp - 0x28]
or dword [ebp - 4], 0xffffffff
call fcn.01075e24
mov eax, dword [esi + 0x30]
cmp eax, ebx
je 0x1061209
push eax
mov ecx, edi
call fcn.01060213
call fcn.01077c25
test ax, ax
je 0x106159c
mov eax, dword [esi + 0x2c]
cmp eax, ebx
jne 0x106122c
cmp dword [esi + 0x14], ebx
jne 0x106122c
cmp dword [esi + 0x18], ebx
je 0x106159c
cmp eax, ebx
mov dword [ebp - 0x20], ebx
mov word [ebp - 0x1c], bx
mov word [ebp - 0x1a], bx
mov byte [ebp - 0x18], bl
mov byte [ebp - 0x17], bl
mov byte [ebp - 0x16], bl
mov byte [ebp - 0x15], bl
mov byte [ebp - 0x14], bl
mov byte [ebp - 0x13], bl
mov byte [ebp - 0x12], bl
mov byte [ebp - 0x11], bl
je 0x106145d
call fcn.01081e43
mov edi, eax
cmp edi, ebx
je 0x106130d
push edi
call fcn.01081e2f
jmp 0x1061297
mov eax, dword [ebp - 0x24]
cmp eax, ebx
je 0x10612ea
cmp word [eax + 0x1c], 1
jne 0x106128f
push dword [esi + 0x2c]
add eax, 0x48
push eax
call dword [sym.imp.msvcrt.dll__wcsicmp]
test eax, eax
pop ecx
pop ecx
je 0x10612a2
push dword [ebp - 0x24]
call fcn.01081e4e
cmp dword [edi + 0x38], 3
mov dword [ebp - 0x24], eax
je 0x106126e
jmp 0x10612ea
lea eax, [edi + 0x3c]
push 0x50
push eax
call fcn.01021462
push eax
call dword [sym.imp.msvcrt.dll_wcsncpy]
add esp, 0xc
call fcn.01021462
mov ecx, dword [ebp - 0x2c]
mov word [eax + 0xa0], bx
push 2
pop eax
mov dword [ecx + 0x7c], eax
mov ecx, dword [ebp - 0x30]
mov dword [ecx + 0x2ac], eax
mov eax, dword [ebp - 0x24]
add eax, 0x38
push eax
call fcn.01077cfc
lea eax, [edi + 0x3c]
push eax
call fcn.01060884
cmp dword [edi + 0x38], 3
jne 0x10612f5
cmp dword [ebp - 0x24], ebx
jne 0x1061305
push edi
call fcn.01081e4e
mov edi, eax
cmp edi, ebx
jne 0x1061266
cmp edi, ebx
jne 0x10613db
call fcn.01081e43
mov edi, eax
cmp edi, ebx
je 0x10613b9
push edi
call fcn.01081e2f
jmp 0x1061347
cmp dword [ebp - 0x24], ebx
je 0x106139a
push dword [esi + 0x2c]
mov eax, dword [ebp - 0x24]
add eax, 0x48
push eax
call dword [sym.imp.msvcrt.dll__wcsicmp]
test eax, eax
pop ecx
pop ecx
je 0x1061352
push dword [ebp - 0x24]
call fcn.01081e4e
cmp dword [edi + 0x38], 3
mov dword [ebp - 0x24], eax
je 0x1061324
jmp 0x106139a
lea eax, [edi + 0x3c]
push 0x50
push eax
call fcn.01021462
push eax
call dword [sym.imp.msvcrt.dll_wcsncpy]
add esp, 0xc
call fcn.01021462
mov ecx, dword [ebp - 0x2c]
mov word [eax + 0xa0], bx
push 2
pop eax
mov dword [ecx + 0x7c], eax
mov ecx, dword [ebp - 0x30]
mov dword [ecx + 0x2ac], eax
mov eax, dword [ebp - 0x24]
add eax, 0x38
push eax
call fcn.01077cfc
lea eax, [edi + 0x3c]
push eax
call fcn.01060884
cmp dword [edi + 0x38], 3
jne 0x10613a5
cmp dword [ebp - 0x24], ebx
jne 0x10613b5
push edi
call fcn.01081e4e
mov edi, eax
cmp edi, ebx
jne 0x106131c
cmp edi, ebx
jne 0x10613db
push ebx
push ebx
push ebx
call fcn.01050ebf
xor esi, esi
push 0x1f4
inc esi
push esi
push esi
push ebx
call fcn.01050ebf
push 0xc18
jmp 0x1061739
push dword [ebp - 0x24]
call fcn.01081e4e
cmp eax, ebx
mov dword [ebp - 0x24], eax
jne 0x1061432
jmp 0x106142a
cmp dword [ebp - 0x24], ebx
jne 0x10613fe
push edi
call fcn.01081e2f
cmp eax, ebx
mov dword [ebp - 0x24], eax
je 0x106142a
mov eax, dword [ebp - 0x24]
cmp word [eax + 0x1c], 1
jne 0x106141b
push dword [esi + 0x2c]
add eax, 0x48
push eax
call dword [sym.imp.msvcrt.dll__wcsicmp]
test eax, eax
pop ecx
pop ecx
je 0x106143b
push dword [ebp - 0x24]
call fcn.01081e4e
cmp eax, ebx
mov dword [ebp - 0x24], eax
jne 0x10613ec
push edi
call fcn.01081e4e
mov edi, eax
cmp edi, ebx
jne 0x10613ec
jmp 0x10616a9
push ebx
push ebx
push ebx
call fcn.01050ebf
xor esi, esi
push 0x1f4
inc esi
push esi
push esi
push ebx
call fcn.01050ebf
push 0xc17
jmp 0x1061739
mov eax, dword [esi + 0x14]
cmp eax, ebx
je 0x10614b3
push eax
call fcn.0108213f
test eax, eax
je 0x1061536
push 0x50
push dword [esi + 0x14]
call fcn.01021462
push eax
call dword [sym.imp.msvcrt.dll_wcsncpy]
add esp, 0xc
call fcn.01021462
mov word [eax + 0xa0], bx
mov dword [edi + 0x7c], 2
call fcn.01021462
push ebx
mov dword [eax + 0x2ac], 2
call fcn.01077cfc
push dword [esi + 0x14]
jmp 0x106152c
mov eax, dword [esi + 0x18]
cmp eax, ebx
je 0x10616a9
lea ecx, [ebp - 0x20]
push ecx
push eax
call dword [sym.imp.RPCRT4.dll_UuidFromStringW]
test eax, eax
jne 0x106157a
lea eax, [ebp - 0x20]
push eax
call fcn.01082250
cmp eax, ebx
je 0x1061558
push eax
call fcn.010821a4
cmp eax, ebx
je 0x1061536
lea edi, [eax + 0x3c]
push 0x50
push edi
call fcn.01021462
push eax
call dword [sym.imp.msvcrt.dll_wcsncpy]
add esp, 0xc
call fcn.01021462
mov word [eax + 0xa0], bx
mov eax, dword [ebp - 0x2c]
mov dword [eax + 0x7c], 2
call fcn.01021462
mov dword [eax + 0x2ac], 2
lea eax, [ebp - 0x20]
push eax
call fcn.01077cfc
push edi
call fcn.01060884
jmp 0x10616a9
push ebx
push ebx
push ebx
call fcn.01050ebf
xor esi, esi
push 0x1f4
inc esi
push esi
push esi
push ebx
call fcn.01050ebf
push 0xc1f
jmp 0x1061739
push ebx
push ebx
push ebx
call fcn.01050ebf
xor esi, esi
push 0x1f4
inc esi
push esi
push esi
push ebx
call fcn.01050ebf
push 0xc1b
jmp 0x1061739
push ebx
push ebx
push ebx
call fcn.01050ebf
xor esi, esi
push 0x1f4
inc esi
push esi
push esi
push ebx
call fcn.01050ebf
push 0xc1e
jmp 0x1061739
cmp dword [esi + 0xc], ebx
je 0x106171c
call fcn.01087250
push 0x104
push dword [esi + 0xc]
call fcn.01021462
add eax, 0xa2
push eax
call dword [sym.imp.msvcrt.dll_wcsncpy]
add esp, 0xc
push dword [esi + 0xc]
call fcn.010871b1
lea ecx, [ebp - 0x24]
call fcn.01075e60
push 0x4e9e
lea ecx, [ebp - 0x24]
mov dword [ebp - 4], 8
call fcn.01075e90
push 0x50
push dword [ebp - 0x24]
call fcn.01021462
push eax
call dword [sym.imp.msvcrt.dll_wcsncpy]
add esp, 0xc
call fcn.01021462
mov word [eax + 0xa0], bx
call fcn.0104efb2
push dword [esi + 0xc]
lea ecx, [ebp - 0x40]
call fcn.01075e3c
lea eax, [ebp - 0x40]
push eax
lea ecx, [edi + 0x78]
mov byte [ebp - 4], 9
call fcn.01075e30
lea ecx, [ebp - 0x40]
mov byte [ebp - 4], 8
call fcn.01075e24
mov dword [edi + 0x7c], 1
call fcn.01021462
xor edi, edi
inc edi
mov dword [eax + 0x2ac], edi
push dword [esi + 0xc]
call fcn.010607f1
call fcn.0104fb9e
cmp eax, edi
jne 0x106169d
push ebx
push ebx
push ebx
call fcn.01050ebf
push 0x1f4
xor esi, esi
inc esi
push esi
push esi
push ebx
call fcn.01050ebf
push 0xc1b
push esi
push esi
push ebx
call fcn.01050ebf
push 8
push ebx
call fcn.01050ebf
or dword [ebp - 4], 0xffffffff
add esp, 0x34
lea ecx, [ebp - 0x24]
call fcn.01075e24
jmp 0x106174c
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x24]
call fcn.01075e24
mov esi, dword [esi + 4]
sub esi, ebx
je 0x106170a
dec esi
je 0x10616fb
dec esi
je 0x10616ec
dec esi
je 0x10616dd
dec esi
je 0x10616ce
dec esi
jne 0x1061717
mov eax, dword [ebp - 0x2c]
mov dword [eax + 0x8c], 5
jmp 0x1061717
mov eax, dword [ebp - 0x2c]
mov dword [eax + 0x8c], 3
jmp 0x1061717
mov eax, dword [ebp - 0x2c]
mov dword [eax + 0x8c], 2
jmp 0x1061717
mov eax, dword [ebp - 0x2c]
mov dword [eax + 0x8c], 4
jmp 0x1061717
mov eax, dword [ebp - 0x2c]
mov dword [eax + 0x8c], 1
jmp 0x1061717
mov eax, dword [ebp - 0x2c]
mov dword [eax + 0x8c], 6
xor eax, eax
inc eax
jmp 0x106174e
push ebx
push ebx
push ebx
call fcn.01050ebf
xor esi, esi
push 0x1f4
inc esi
push esi
push esi
push ebx
call fcn.01050ebf
push 0xc1a
push esi
push esi
push ebx
call fcn.01050ebf
push 8
push ebx
call fcn.01050ebf
add esp, 0x34
xor eax, eax
mov ecx, dword [ebp - 0xc]
pop edi
pop esi
mov dword fs:[0], ecx
mov ecx, dword [ebp - 0x10]
pop ebx
call fcn.01075aef
leave
ret 8