Function at 0x1000b0e0
Capabilities:
Set registry value

Disassembly:
sub esp, 8
mov ecx, dword [0x100017fc]
push ebx
push ebp
mov ebx, dword [sym.imp.ADVAPI32.dll_RegCreateKeyExW]
push esi
push edi
xor ebp, ebp
push ebp
neg ecx
sbb ecx, ecx
lea eax, [esp + 0x14]
push eax
push ebp
and ecx, 0x100
add ecx, 0x20006
push ecx
push ebp
push ebp
push ebp
push 0x10002b08
push reloc.OLEAUT32.dll_SysReAllocString
mov dword [esp + 0x34], ebp
call ebx
mov esi, dword [sym.imp.ADVAPI32.dll_RegSetValueExW]
mov edi, dword [sym.imp.ADVAPI32.dll_RegCloseKey]
test eax, eax
jne 0x1000b17a
mov ecx, dword [esp + 0x10]
push 4
xor edx, edx
cmp dword [esp + 0x20], ebp
lea eax, [esp + 0x18]
push eax
push 4
sete dl
push ebp
push 0x10002ae0
push ecx
mov dword [esp + 0x2c], edx
call esi
cmp dword [esp + 0x1c], ebp
je 0x1000b173
mov eax, dword [esp + 0x10]
push 4
lea edx, [esp + 0x18]
push edx
push 4
push ebp
push 0x10002ab4
push eax
mov dword [esp + 0x2c], ebp
call esi
mov ecx, dword [esp + 0x10]
push ecx
call edi
cmp dword [esp + 0x1c], ebp
je 0x1000b428
mov eax, dword [0x100017fc]
push ebp
neg eax
sbb eax, eax
lea edx, [esp + 0x14]
push edx
push ebp
and eax, 0x100
add eax, 0x20006
push eax
push ebp
push ebp
push ebp
push 0x10002a68
push reloc.OLEAUT32.dll_SysReAllocString
call ebx
test eax, eax
jne 0x1000b1d3
mov edx, dword [esp + 0x10]
push 4
lea ecx, [esp + 0x18]
push ecx
push 4
push ebp
push 0x10002a3c
push edx
mov dword [esp + 0x2c], ebp
call esi
mov eax, dword [esp + 0x10]
push eax
call edi
mov edx, dword [0x100017fc]
push ebp
neg edx
sbb edx, edx
lea ecx, [esp + 0x14]
push ecx
push ebp
and edx, 0x100
add edx, 0x20006
push edx
push ebp
push ebp
push ebp
push 0x100029b0
push reloc.OLEAUT32.dll_SysReAllocString
call ebx
test eax, eax
jne 0x1000b225
mov ecx, dword [esp + 0x10]
push 4
lea eax, [esp + 0x18]
push eax
push 4
push ebp
push 0x10002988
push ecx
mov dword [esp + 0x2c], ebp
call esi
mov edx, dword [esp + 0x10]
push edx
call edi
mov ecx, dword [0x100017fc]
push ebp
neg ecx
sbb ecx, ecx
lea eax, [esp + 0x14]
push eax
push ebp
and ecx, 0x100
add ecx, 0x20006
push ecx
push ebp
push ebp
push ebp
push 0x10002908
push reloc.OLEAUT32.dll_SysReAllocString
call ebx
test eax, eax
jne 0x1000b273
mov eax, dword [esp + 0x10]
push 4
lea edx, [esp + 0x20]
push edx
push 4
push ebp
push 0x100028d4
push eax
call esi
mov ecx, dword [esp + 0x10]
push ecx
call edi
mov eax, dword [0x100017fc]
push ebp
neg eax
sbb eax, eax
lea edx, [esp + 0x14]
push edx
push ebp
and eax, 0x100
add eax, 0x20006
push eax
push ebp
push ebp
push ebp
push 0x10002868
push reloc.OLEAUT32.dll_SysReAllocString
call ebx
test eax, eax
jne 0x1000b2be
mov edx, dword [esp + 0x10]
push 4
lea ecx, [esp + 0x20]
push ecx
push 4
push ebp
push 0x10002838
push edx
call esi
mov eax, dword [esp + 0x10]
push eax
call edi
mov edx, dword [0x100017fc]
neg edx
sbb edx, edx
lea ecx, [esp + 0x10]
push ecx
and edx, 0x100
add edx, 0x20019
push edx
push ebp
push 0x100027c8
push reloc.OLEAUT32.dll_SysReAllocString
call dword [sym.imp.ADVAPI32.dll_RegOpenKeyExW]
test eax, eax
jne 0x1000b428
mov eax, dword [esp + 0x10]
push eax
call edi
mov edx, dword [0x100017fc]
push ebp
neg edx
sbb edx, edx
lea ecx, [esp + 0x14]
push ecx
push ebp
and edx, 0x100
add edx, 0x20006
push edx
push ebp
push ebp
push ebp
push 0x10002738
push reloc.OLEAUT32.dll_SysReAllocString
call ebx
test eax, eax
jne 0x1000b366
mov eax, dword [esp + 0x10]
push 0xe
push 0x10002728
push 1
push ebp
push 0x1000271c
push eax
call esi
mov edx, dword [esp + 0x10]
push 4
lea ecx, [esp + 0x18]
push ecx
push 4
push ebp
push 0x10002710
push edx
mov dword [esp + 0x2c], 3
call esi
mov eax, dword [esp + 0x10]
push eax
call edi
mov edx, dword [0x100017fc]
push ebp
neg edx
sbb edx, edx
lea ecx, [esp + 0x14]
push ecx
push ebp
and edx, 0x100
add edx, 0x20006
push edx
push ebp
push ebp
push ebp
push 0x10002680
push reloc.OLEAUT32.dll_SysReAllocString
call ebx
test eax, eax
jne 0x1000b3d2
mov eax, dword [esp + 0x10]
push 0xc
push 0x10002670
push 1
push ebp
push 0x1000271c
push eax
call esi
mov edx, dword [esp + 0x10]
push 4
lea ecx, [esp + 0x18]
push ecx
push 4
push ebp
push 0x10002710
push edx
mov dword [esp + 0x2c], 3
call esi
mov eax, dword [esp + 0x10]
push eax
call edi
mov edx, dword [0x100017fc]
push ebp
neg edx
sbb edx, edx
lea ecx, [esp + 0x14]
push ecx
push ebp
and edx, 0x100
add edx, 0x20006
push edx
push ebp
push ebp
push ebp
push 0x100025e8
push reloc.OLEAUT32.dll_SysReAllocString
call ebx
test eax, eax
jne 0x1000b428
mov ecx, dword [esp + 0x10]
push 4
lea eax, [esp + 0x18]
push eax
push 4
push ebp
push 0x10002710
push ecx
mov dword [esp + 0x2c], 0xffffffff
call esi
mov edx, dword [esp + 0x10]
push edx
call edi
pop edi
pop esi
pop ebp
pop ebx
add esp, 8
ret