Function at 0x6cb265d0
Capabilities:
Set registry value

Disassembly:
push ebp
mov ebp, esp
push edi
push esi
push ebx
sub esp, 0x44
mov ebx, dword [ebp + 8]
test byte [0x6cb2c14c], 8
jne 0x6cb26780
test ebx, ebx
je 0x6cb26635
mov eax, dword [ebx]
cmp eax, 1
je 0x6cb26652
cmp eax, 3
jne 0x6cb26635
mov eax, dword [ebx + 4]
test eax, eax
jne 0x6cb2660b
jmp 0x6cb26635
cmp dx, 0x7f
ja 0x6cb26635
add eax, 2
movzx edx, word [eax]
test dx, dx
jne 0x6cb26602
mov eax, dword [ebx + 8]
test eax, eax
je 0x6cb26652
movzx edx, word [eax]
test dx, dx
jne 0x6cb2662f
jmp 0x6cb26652
add eax, 2
movzx edx, word [eax]
test dx, dx
je 0x6cb26652
cmp dx, 0x7f
jbe 0x6cb26624
mov dword [esp], 0x57
xor esi, esi
call sym._SetLastError_4
sub esp, 4
lea esp, [ebp - 0xc]
mov eax, esi
pop ebx
pop esi
pop edi
pop ebp
ret 4
lea eax, [ebp - 0x14]
mov dword [esp + 0x20], 0
mov dword [esp + 0x1c], eax
mov dword [esp + 0x18], 0
mov dword [esp + 0x14], 0x20006
mov dword [esp + 0x10], 0
mov dword [esp + 0xc], 0
mov dword [esp + 8], 0
mov dword [esp + 4], str.SoftwareMicrosoftWindowsCurrentVersionInternet_SettingsConnections
mov dword [esp], 0x80000002
call sym._RegCreateKeyExW_36
sub esp, 0x24
mov esi, eax
test eax, eax
jne 0x6cb267c0
cmp dword [ebx], 3
mov dword [ebp - 0x1c], 0x14
je 0x6cb26813
call sym._GetProcessHeap_0
mov ecx, dword [ebp - 0x1c]
mov dword [esp + 4], 0
mov dword [esp], eax
mov dword [esp + 8], ecx
call sym._HeapAlloc_12
sub esp, 0xc
mov edi, eax
test eax, eax
je 0x6cb26763
mov dword [eax], 0x18
mov dword [eax + 4], 0
cmp dword [ebx], 3
je 0x6cb26840
mov dword [eax + 8], 1
mov dword [eax + 0xc], 0
mov dword [eax + 0x10], 0
mov eax, dword [ebp - 0x1c]
mov dword [esp + 0x10], edi
mov dword [esp + 0xc], 3
mov dword [esp + 0x14], eax
mov eax, dword [ebp - 0x14]
mov dword [esp + 8], 0
mov dword [esp + 4], str.WinHttpSettings
mov dword [esp], eax
call sym._RegSetValueExW_24
sub esp, 0x18
test eax, eax
je 0x6cb267d0
call sym._GetProcessHeap_0
mov dword [esp + 8], edi
mov dword [esp + 4], 0
mov dword [esp], eax
call sym._HeapFree_12
sub esp, 0xc
mov eax, dword [ebp - 0x14]
mov dword [esp], eax
call sym._RegCloseKey_4
mov eax, esi
sub esp, 4
lea esp, [ebp - 0xc]
pop ebx
pop esi
pop edi
pop ebp
ret 4
mov dword [esp + 0x18], ebx
mov dword [esp + 0x14], 0x6cb2fe2c
mov dword [esp + 0x10], 0x7a3
mov dword [esp + 0xc], str.WinHttpSetDefaultProxyConfiguration
mov dword [esp + 8], 0x6cb2fdb5
mov dword [esp + 4], 0x6cb2c14c
mov dword [esp], 3
call sym._ros_dbg_log
jmp 0x6cb265e9
lea esp, [ebp - 0xc]
xor esi, esi
pop ebx
mov eax, esi
pop esi
pop edi
pop ebp
ret 4
call sym._GetProcessHeap_0
mov dword [esp + 8], edi
mov esi, 1
mov dword [esp + 4], 0
mov dword [esp], eax
call sym._HeapFree_12
mov eax, dword [ebp - 0x14]
sub esp, 0xc
mov dword [esp], eax
call sym._RegCloseKey_4
sub esp, 4
mov dword [esp], 0
call sym._SetLastError_4
sub esp, 4
jmp 0x6cb26646
mov eax, dword [ebx + 4]
mov edi, dword [sym.imp.msvcrt.dll_wcslen]
mov dword [esp], eax
call edi
add eax, 0x14
mov dword [ebp - 0x1c], eax
mov eax, dword [ebx + 8]
test eax, eax
je 0x6cb266ba
mov dword [esp], eax
call edi
add dword [ebp - 0x1c], eax
jmp 0x6cb266ba
lea edx, [eax + 0x10]
mov dword [eax + 8], 2
mov eax, dword [ebx + 4]
mov dword [ebp - 0x20], edx
mov dword [esp], eax
mov eax, dword [sym.imp.msvcrt.dll_wcslen]
mov dword [ebp - 0x24], eax
call eax
mov edx, dword [ebp - 0x20]
mov dword [edi + 0xc], eax
mov ecx, dword [ebx + 4]
movzx eax, word [ecx]
test ax, ax
je 0x6cb26880
nop
add ecx, 2
mov byte [edx], al
add edx, 1
movzx eax, word [ecx]
test ax, ax
jne 0x6cb26870
mov eax, dword [ebx + 8]
test eax, eax
je 0x6cb268c5
lea ecx, [edx + 4]
mov dword [ebp - 0x28], edx
mov dword [esp], eax
mov eax, dword [ebp - 0x24]
mov dword [ebp - 0x20], ecx
call eax
mov edx, dword [ebp - 0x28]
mov dword [edx], eax
mov edx, dword [ebx + 8]
movzx eax, word [edx]
test ax, ax
je 0x6cb2670e
mov ecx, dword [ebp - 0x20]
nop
add edx, 2
mov byte [ecx], al
add ecx, 1
movzx eax, word [edx]
test ax, ax
jne 0x6cb268b0
jmp 0x6cb2670e
mov dword [edx], 0
jmp 0x6cb2670e