Function at 0x10004b80
Capabilities:
Set registry value

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x10042b21
mov eax, dword fs:[0]
push eax
sub esp, 0xcc
mov eax, dword [0x1005b034]
xor eax, ebp
mov dword [ebp - 0x10], eax
push ebx
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
xor ebx, ebx
lea edi, [ebx + 0x2c]
mov eax, str.qX0CsT98NtiOya2f5CLBV2DtnOlfkcnhBtJnk0prI
lea esi, [ebp - 0x48]
mov dword [ebp - 0x34], 0xf
mov dword [ebp - 0x38], ebx
mov byte [ebp - 0x48], bl
call fcn.10002d20
mov eax, esi
push eax
lea ecx, [ebp - 0xd4]
push ecx
mov dword [ebp - 4], ebx
call fcn.10002580
add esp, 8
mov byte [ebp - 4], 2
cmp dword [ebp - 0x34], 0x10
jb 0x10004bf9
mov edx, dword [ebp - 0x48]
push edx
call dword [sym.imp.MSVCR100.dll_void___cdecl_operator_delete_void__]
add esp, 4
mov eax, 0xf
mov dword [ebp - 0x34], eax
mov dword [ebp - 0x18], eax
lea edi, [eax + 0x31]
mov eax, str.L3cM_2xsLGZda_2E0vqDNf9WxS6MGUqUzBgpSmGqrbVAIa74JNPybXKh1aKi22J
lea esi, [ebp - 0x2c]
mov dword [ebp - 0x38], ebx
mov byte [ebp - 0x48], 0
mov dword [ebp - 0x1c], ebx
mov byte [ebp - 0x2c], 0
call fcn.10002d20
mov eax, esi
push eax
lea ecx, [ebp - 0x9c]
push ecx
mov byte [ebp - 4], 3
call fcn.10002580
add esp, 8
mov byte [ebp - 4], 5
cmp dword [ebp - 0x18], 0x10
jb 0x10004c4f
mov edx, dword [ebp - 0x2c]
push edx
call dword [sym.imp.MSVCR100.dll_void___cdecl_operator_delete_void__]
add esp, 4
mov eax, 0xf
mov dword [ebp - 0x18], eax
mov dword [ebp - 0xa4], eax
lea edi, [eax + 9]
mov eax, str.VWAKo1nZieR6n2rU0rGfNA
lea esi, [ebp - 0xb8]
mov dword [ebp - 0x1c], ebx
mov byte [ebp - 0x2c], 0
mov dword [ebp - 0xa8], ebx
mov byte [ebp - 0xb8], 0
call fcn.10002d20
mov eax, esi
push eax
lea ecx, [ebp - 0x80]
push ecx
mov byte [ebp - 4], 6
call fcn.10002580
add esp, 8
mov edi, 0x10
mov byte [ebp - 4], 8
cmp dword [ebp - 0xa4], edi
jb 0x10004cb8
mov edx, dword [ebp - 0xb8]
push edx
call dword [sym.imp.MSVCR100.dll_void___cdecl_operator_delete_void__]
add esp, 4
mov eax, dword [ebp - 0xd4]
mov esi, 0xf
mov dword [ebp - 0xa4], esi
mov dword [ebp - 0xa8], ebx
mov byte [ebp - 0xb8], 0
cmp dword [ebp - 0xc0], edi
jae 0x10004ce4
lea eax, [ebp - 0xd4]
lea ecx, [ebp - 0xd8]
push ecx
push ebx
push 1
push eax
call dword [sym.imp.ADVAPI32.dll_CredReadA]
test eax, eax
je 0x10004f4d
mov eax, dword [ebp - 0xd8]
mov edi, dword [eax + 0x18]
mov eax, dword [eax + 0x1c]
mov dword [ebp - 0x34], esi
lea esi, [ebp - 0x48]
mov dword [ebp - 0x38], ebx
mov byte [ebp - 0x48], 0
call fcn.10002d20
mov edx, esi
push edx
lea eax, [ebp - 0x64]
mov bl, 9
push eax
mov byte [ebp - 4], bl
call fcn.10002580
add esp, 8
mov edi, eax
mov byte [ebp - 4], 0xa
call fcn.10003280
mov byte [ebp - 4], bl
mov ebx, 0x10
cmp dword [ebp - 0x50], ebx
jb 0x10004d54
mov ecx, dword [ebp - 0x64]
push ecx
call dword [sym.imp.MSVCR100.dll_void___cdecl_operator_delete_void__]
add esp, 4
lea edx, [ebp - 0x48]
push edx
lea eax, [ebp - 0x2c]
push eax
call fcn.10004a90
add esp, 8
lea edi, [ebp - 0x2c]
mov byte [ebp - 4], 0xb
call fcn.10004530
test al, al
je 0x10004ec1
mov ecx, dword [0x101774f0]
cmp dword [0x10177504], ebx
jae 0x10004d8b
mov ecx, 0x101774f0
mov eax, dword [ebp - 0x2c]
cmp dword [ebp - 0x18], ebx
jae 0x10004d96
lea eax, [ebp - 0x2c]
mov dl, byte [eax]
cmp dl, byte [ecx]
jne 0x10004db6
test dl, dl
je 0x10004db2
mov dl, byte [eax + 1]
cmp dl, byte [ecx + 1]
jne 0x10004db6
add eax, 2
add ecx, 2
test dl, dl
jne 0x10004d96
xor eax, eax
jmp 0x10004dbb
sbb eax, eax
sbb eax, 0xffffffff
test eax, eax
je 0x10004ed5
lea ecx, [ebp - 0x64]
push ecx
lea ecx, [ebp - 0x2c]
call fcn.10002420
add esp, 4
mov edi, eax
lea esi, [ebp - 0x2c]
mov byte [ebp - 4], 0xc
call fcn.10003280
mov byte [ebp - 4], 0xb
cmp dword [ebp - 0x50], ebx
jb 0x10004df6
mov edx, dword [ebp - 0x64]
push edx
call dword [sym.imp.MSVCR100.dll_void___cdecl_operator_delete_void__]
add esp, 4
mov eax, dword [ebp - 0x9c]
cmp dword [ebp - 0x88], ebx
jae 0x10004e0a
lea eax, [ebp - 0x9c]
push 0
push 0x10174190
push 0
push 0x20006
push 0
push 0
push 0
push eax
push closesocket
call dword [sym.imp.ADVAPI32.dll_RegCreateKeyExA]
test eax, eax
jne 0x10004ed0
mov ecx, dword [ebp - 0x2c]
cmp dword [ebp - 0x18], ebx
jae 0x10004e3d
lea ecx, [ebp - 0x2c]
mov eax, dword [ebp - 0x80]
cmp dword [ebp - 0x6c], ebx
jae 0x10004e48
lea eax, [ebp - 0x80]
mov edx, dword [ebp - 0x1c]
inc edx
push edx
push ecx
push 1
push 0
push eax
mov eax, dword [0x10174190]
push eax
call dword [sym.imp.ADVAPI32.dll_RegSetValueExA]
mov ecx, dword [0x10174190]
push ecx
call dword [sym.imp.ADVAPI32.dll_RegCloseKey]
lea edx, [ebp - 0x2c]
push edx
lea eax, [ebp - 0x64]
push eax
call fcn.10002580
add esp, 8
mov edi, eax
lea esi, [ebp - 0x2c]
mov byte [ebp - 4], 0xd
call fcn.10003280
lea ecx, [ebp - 0x64]
mov byte [ebp - 4], 0xb
call fcn.10003310
mov eax, dword [ebp - 0x2c]
cmp dword [ebp - 0x18], ebx
jae 0x10004ea0
mov eax, esi
mov ecx, eax
lea esi, [ecx + 1]
mov dl, byte [ecx]
inc ecx
test dl, dl
jne 0x10004ea5
sub ecx, esi
mov edi, ecx
mov esi, 0x101774f0
call fcn.10002d20
call fcn.10003620
jmp 0x10004ed0
call fcn.10003620
call fcn.10004890
call fcn.10004590
call fcn.10009890
mov ecx, dword [ebp - 0xd8]
push ecx
call dword [sym.imp.ADVAPI32.dll_CredFree]
lea edx, [ebp - 0x64]
push edx
lea ecx, [ebp - 0x48]
call fcn.10002420
add esp, 4
mov edi, eax
lea esi, [ebp - 0x48]
mov byte [ebp - 4], 0xe
call fcn.10003280
cmp dword [ebp - 0x50], ebx
jb 0x10004f11
mov eax, dword [ebp - 0x64]
push eax
call dword [sym.imp.MSVCR100.dll_void___cdecl_operator_delete_void__]
add esp, 4
cmp dword [ebp - 0x18], ebx
jb 0x10004f23
mov ecx, dword [ebp - 0x2c]
push ecx
call dword [sym.imp.MSVCR100.dll_void___cdecl_operator_delete_void__]
add esp, 4
mov byte [ebp - 4], 8
mov dword [ebp - 0x18], 0xf
mov dword [ebp - 0x1c], 0
mov byte [ebp - 0x2c], 0
cmp dword [ebp - 0x34], ebx
jb 0x10004f4b
mov edx, dword [ebp - 0x48]
push edx
call dword [sym.imp.MSVCR100.dll_void___cdecl_operator_delete_void__]
add esp, 4
xor ebx, ebx
lea eax, [ebp - 0x64]
push eax
lea ecx, [ebp - 0xd4]
call fcn.10002420
add esp, 4
mov edi, eax
lea esi, [ebp - 0xd4]
mov byte [ebp - 4], 0xf
call fcn.10003280
mov byte [ebp - 4], 8
cmp dword [ebp - 0x50], 0x10
jb 0x10004f87
mov ecx, dword [ebp - 0x64]
push ecx
call dword [sym.imp.MSVCR100.dll_void___cdecl_operator_delete_void__]
add esp, 4
lea edx, [ebp - 0x64]
push edx
lea ecx, [ebp - 0x9c]
call fcn.10002420
add esp, 4
mov edi, eax
lea esi, [ebp - 0x9c]
mov byte [ebp - 4], 0x10
call fcn.10003280
mov byte [ebp - 4], 8
cmp dword [ebp - 0x50], 0x10
jb 0x10004fc1
mov eax, dword [ebp - 0x64]
push eax
call dword [sym.imp.MSVCR100.dll_void___cdecl_operator_delete_void__]
add esp, 4
lea ecx, [ebp - 0x64]
push ecx
lea ecx, [ebp - 0x80]
call fcn.10002420
add esp, 4
mov edi, eax
lea esi, [ebp - 0x80]
mov byte [ebp - 4], 0x11
call fcn.10003280
mov edi, 0x10
cmp dword [ebp - 0x50], edi
jb 0x10004ff5
mov edx, dword [ebp - 0x64]
push edx
call dword [sym.imp.MSVCR100.dll_void___cdecl_operator_delete_void__]
add esp, 4
cmp dword [ebp - 0x6c], edi
jb 0x10005007
mov eax, dword [ebp - 0x80]
push eax
call dword [sym.imp.MSVCR100.dll_void___cdecl_operator_delete_void__]
add esp, 4
mov esi, 0xf
mov dword [ebp - 0x6c], esi
mov dword [ebp - 0x70], ebx
mov byte [ebp - 0x80], 0
cmp dword [ebp - 0x88], edi
jb 0x1000502e
mov ecx, dword [ebp - 0x9c]
push ecx
call dword [sym.imp.MSVCR100.dll_void___cdecl_operator_delete_void__]
add esp, 4
mov dword [ebp - 0x88], esi
mov dword [ebp - 0x8c], ebx
mov byte [ebp - 0x9c], 0
cmp dword [ebp - 0xc0], edi
jb 0x10005059
mov edx, dword [ebp - 0xd4]
push edx
call dword [sym.imp.MSVCR100.dll_void___cdecl_operator_delete_void__]
add esp, 4
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 0x10]
xor ecx, ebp
call fcn.1003e6b0
mov esp, ebp
pop ebp
ret