Function at 0x1028338
Capabilities:
Set registry value

Disassembly:
mov edi, edi
push ebp
mov ebp, esp
push ecx
push edi
xor eax, eax
push eax
mov edi, ecx
lea ecx, [ebp - 4]
push ecx
push eax
push 0xf003f
push eax
push eax
push eax
push 0x10049e8
push dword [ebp + 8]
call dword [sym.imp.ADVAPI32.dll_RegCreateKeyExW]
test eax, eax
jne 0x1028a73
cmp dword [ebp + 8], 0x80000002
push ebx
push esi
mov esi, dword [sym.imp.ADVAPI32.dll_RegSetValueExW]
push 4
pop ebx
jne 0x1028759
push ebx
lea eax, [edi + 0x12c]
push eax
push ebx
push 0
push 0x100fa18
push dword [ebp - 4]
call esi
test eax, eax
jne 0x1028a68
push ebx
lea eax, [edi + 0x138]
push eax
push ebx
push 0
push 0x100f9fc
push dword [ebp - 4]
call esi
test eax, eax
jne 0x1028a68
push ebx
lea eax, [edi + 0x18c]
push eax
push ebx
push 0
push 0x100f9e0
push dword [ebp - 4]
call esi
test eax, eax
jne 0x1028a68
push ebx
lea eax, [edi + 0x198]
push eax
push ebx
push 0
push 0x100f9c0
push dword [ebp - 4]
call esi
test eax, eax
jne 0x1028a68
push ebx
lea eax, [edi + 0x1a4]
push eax
push ebx
push 0
push 0x100f9a4
push dword [ebp - 4]
call esi
test eax, eax
jne 0x1028a68
push ebx
lea eax, [edi + 0x174]
push eax
push ebx
push 0
push 0x100f984
push dword [ebp - 4]
call esi
test eax, eax
jne 0x1028a68
push ebx
lea eax, [edi + 0x144]
push eax
push ebx
push 0
push 0x100f96c
push dword [ebp - 4]
call esi
test eax, eax
jne 0x1028a68
push ebx
lea eax, [edi + 0x150]
push eax
push ebx
push 0
push 0x100f954
push dword [ebp - 4]
call esi
test eax, eax
jne 0x1028a68
push ebx
lea eax, [edi + 0x15c]
push eax
push ebx
push 0
push 0x100f940
push dword [ebp - 4]
call esi
test eax, eax
jne 0x1028a68
push ebx
lea eax, [edi + 0x168]
push eax
push ebx
push 0
push 0x100f928
push dword [ebp - 4]
call esi
test eax, eax
jne 0x1028a68
push ebx
lea eax, [edi + 0x180]
push eax
push ebx
push 0
push 0x100f908
push dword [ebp - 4]
call esi
test eax, eax
jne 0x1028a68
push ebx
lea eax, [edi + 0x1b0]
push eax
push ebx
push 0
push 0x100f8f0
push dword [ebp - 4]
call esi
test eax, eax
jne 0x1028a68
push ebx
lea eax, [edi + 0x1bc]
push eax
push ebx
push 0
push 0x100f8d8
push dword [ebp - 4]
call esi
test eax, eax
jne 0x1028a68
push ebx
lea eax, [edi + 0x1c8]
push eax
push ebx
push 0
push 0x100f8bc
push dword [ebp - 4]
call esi
test eax, eax
jne 0x1028a68
push ebx
lea eax, [edi + 0x1d4]
push eax
push ebx
push 0
push 0x100f8a0
push dword [ebp - 4]
call esi
test eax, eax
jne 0x1028a68
push ebx
lea eax, [edi + 0x1e0]
push eax
push ebx
push 0
push 0x100f884
push dword [ebp - 4]
call esi
test eax, eax
jne 0x1028a68
push ebx
lea eax, [edi + 0x1ec]
push eax
push ebx
push 0
push 0x100f868
push dword [ebp - 4]
call esi
test eax, eax
jne 0x1028a68
push ebx
lea eax, [edi + 0x130]
push eax
push ebx
push 0
push 0x100f848
push dword [ebp - 4]
call esi
test eax, eax
jne 0x1028a68
push ebx
lea eax, [edi + 0x13c]
push eax
push ebx
push 0
push 0x100f82c
push dword [ebp - 4]
call esi
test eax, eax
jne 0x1028a68
push ebx
lea eax, [edi + 0x190]
push eax
push ebx
push 0
push 0x100f810
push dword [ebp - 4]
call esi
test eax, eax
jne 0x1028a68
push ebx
lea eax, [edi + 0x19c]
push eax
push ebx
push 0
push 0x100f7f0
push dword [ebp - 4]
call esi
test eax, eax
jne 0x1028a68
push ebx
lea eax, [edi + 0x1a8]
push eax
push ebx
push 0
push 0x100f7d4
push dword [ebp - 4]
call esi
test eax, eax
jne 0x1028a68
push ebx
lea eax, [edi + 0x178]
push eax
push ebx
push 0
push 0x100f7b4
push dword [ebp - 4]
call esi
test eax, eax
jne 0x1028a68
push ebx
lea eax, [edi + 0x148]
push eax
push ebx
push 0
push 0x100f79c
push dword [ebp - 4]
call esi
test eax, eax
jne 0x1028a68
push ebx
lea eax, [edi + 0x154]
push eax
push ebx
push 0
push 0x100f784
push dword [ebp - 4]
call esi
test eax, eax
jne 0x1028a68
push ebx
lea eax, [edi + 0x160]
push eax
push ebx
push 0
push 0x100f770
push dword [ebp - 4]
call esi
test eax, eax
jne 0x1028a68
push ebx
lea eax, [edi + 0x16c]
push eax
push ebx
push 0
push 0x100f758
push dword [ebp - 4]
call esi
test eax, eax
jne 0x1028a68
push ebx
lea eax, [edi + 0x184]
push eax
push ebx
push 0
push 0x100f738
push dword [ebp - 4]
call esi
test eax, eax
jne 0x1028a68
push ebx
lea eax, [edi + 0x1b4]
push eax
push ebx
push 0
push 0x100f720
push dword [ebp - 4]
call esi
test eax, eax
jne 0x1028a68
push ebx
lea eax, [edi + 0x1c0]
push eax
push ebx
push 0
push 0x100f708
push dword [ebp - 4]
call esi
test eax, eax
jne 0x1028a68
push ebx
lea eax, [edi + 0x1cc]
push eax
push ebx
push 0
push 0x100f6ec
push dword [ebp - 4]
call esi
test eax, eax
jne 0x1028a68
push ebx
lea eax, [edi + 0x1d8]
push eax
push ebx
push 0
push 0x100f6d0
push dword [ebp - 4]
call esi
test eax, eax
jne 0x1028a68
push ebx
lea eax, [edi + 0x1e4]
push eax
push ebx
push 0
push 0x100f6b4
push dword [ebp - 4]
call esi
test eax, eax
jne 0x1028a68
push ebx
lea eax, [edi + 0x1f0]
push eax
push ebx
push 0
push 0x1011c18
push dword [ebp - 4]
call esi
test eax, eax
jne 0x1028a68
push ebx
lea eax, [edi + 0x98]
push eax
push ebx
push 0
push 0x1004d0c
push dword [ebp - 4]
call esi
test eax, eax
jne 0x1028a68
push ebx
lea eax, [edi + 0x9c]
push eax
push ebx
push 0
push 0x1004cf8
push dword [ebp - 4]
call esi
test eax, eax
jne 0x1028a68
push ebx
lea eax, [edi + 0xb8]
push eax
push ebx
push 0
push 0x1004ce4
push dword [ebp - 4]
call esi
test eax, eax
jne 0x1028a68
push ebx
lea eax, [edi + 0xbc]
push eax
push ebx
push 0
push 0x1004ccc
push dword [ebp - 4]
call esi
test eax, eax
jne 0x1028a68
push ebx
lea eax, [edi + 0xc0]
push eax
push ebx
push 0
push 0x1004cb8
push dword [ebp - 4]
call esi
test eax, eax
jne 0x1028a68
push ebx
lea eax, [edi + 0xb0]
push eax
push ebx
push 0
push 0x1004ca0
push dword [ebp - 4]
call esi
test eax, eax
jne 0x1028a68
push ebx
lea eax, [edi + 0xa0]
push eax
push ebx
push 0
push 0x1004c90
push dword [ebp - 4]
call esi
test eax, eax
jne 0x1028a68
push ebx
lea eax, [edi + 0xa4]
push eax
push ebx
push 0
push 0x1004c80
push dword [ebp - 4]
call esi
test eax, eax
jne 0x1028a68
push ebx
lea eax, [edi + 0xa8]
push eax
push ebx
push 0
push 0x1004c74
push dword [ebp - 4]
call esi
test eax, eax
jne 0x1028a68
push ebx
lea eax, [edi + 0xac]
push eax
push ebx
push 0
push 0x1004c64
push dword [ebp - 4]
call esi
test eax, eax
jne 0x1028a68
push ebx
lea eax, [edi + 0xb4]
push eax
push ebx
push 0
push 0x1004c4c
push dword [ebp - 4]
call esi
test eax, eax
jne 0x1028a68
push ebx
lea eax, [edi + 0xc4]
push eax
push ebx
push 0
push 0x1004c3c
push dword [ebp - 4]
call esi
test eax, eax
jne 0x1028a68
push ebx
lea eax, [edi + 0xe0]
push eax
push ebx
push 0
push 0x1004c2c
push dword [ebp - 4]
call esi
test eax, eax
jne 0x1028a68
push ebx
lea eax, [edi + 0xc8]
push eax
push ebx
push 0
push 0x1004c1c
push dword [ebp - 4]
call esi
test eax, eax
jne 0x1028a68
push ebx
lea eax, [edi + 0xcc]
push eax
push ebx
push 0
push 0x1004c08
push dword [ebp - 4]
call esi
test eax, eax
jne 0x1028a68
push ebx
lea eax, [edi + 0xd0]
push eax
push ebx
push 0
push 0x1004bf4
push dword [ebp - 4]
call esi
test eax, eax
jne 0x1028a68
push ebx
lea eax, [edi + 0xd4]
push eax
push ebx
push 0
push 0x1004be0
push dword [ebp - 4]
call esi
test eax, eax
jne 0x1028a68
push ebx
lea eax, [edi + 0xd8]
push eax
push ebx
push 0
push 0x1004bcc
push dword [ebp - 4]
call esi
test eax, eax
jne 0x1028a68
push ebx
lea eax, [edi + 0x248]
push eax
push ebx
push 0
push 0x1004bb0
push dword [ebp - 4]
call esi
test eax, eax
jne 0x1028a68
push ebx
lea eax, [edi + 0x24c]
push eax
push ebx
push 0
push 0x1004b94
push dword [ebp - 4]
call esi
test eax, eax
jne 0x1028a68
push ebx
lea eax, [edi + 0x250]
push eax
push ebx
push 0
push 0x1004b80
push dword [ebp - 4]
call esi
test eax, eax
jne 0x1028a68
push ebx
lea eax, [edi + 0xf0]
push eax
push ebx
push 0
push 0x1004b54
push dword [ebp - 4]
call esi
test eax, eax
jne 0x1028a68
push ebx
lea eax, [edi + 0xf4]
push eax
push ebx
push 0
push 0x1004b28
push dword [ebp - 4]
call esi
test eax, eax
jne 0x1028a68
push ebx
lea eax, [edi + 0xf8]
push eax
push ebx
push 0
push 0x1004b00
push dword [ebp - 4]
call esi
test eax, eax
jne 0x1028a68
push ebx
lea eax, [edi + 0x298]
push eax
push ebx
push 0
push 0x1004aec
push dword [ebp - 4]
call esi
test eax, eax
jne 0x1028a68
push ebx
lea eax, [edi + 0x8c]
push eax
push ebx
push 0
push 0x1004ad4
push dword [ebp - 4]
call esi
test eax, eax
jne 0x1028a68
push ebx
lea eax, [edi + 0x94]
push eax
push ebx
push 0
push 0x1004ab4
push dword [ebp - 4]
call esi
test eax, eax
jne 0x1028a68
push ebx
add edi, 0x90
push edi
push ebx
push eax
push 0x1004a9c
push dword [ebp - 4]
call esi
push dword [ebp - 4]
call dword [sym.imp.ADVAPI32.dll_RegCloseKey]
pop esi
pop ebx
xor eax, eax
pop edi
leave
ret 4