Function at 0x10002a00
Capabilities:
Set registry value

Disassembly:
push ecx
mov ecx, dword [0x1001eccc]
push ebx
push ebp
push esi
mov esi, dword [sym.imp.ADVAPI32.dll_RegSetValueExA]
push edi
push 4
lea eax, [esp + 0x14]
push eax
xor ebx, ebx
push 4
push ebx
push 0x1001e6d8
push ecx
mov dword [0x1001ee90], ebx
mov dword [0x1001ee48], ebx
mov dword [esp + 0x28], ebx
call esi
mov eax, dword [0x1001eccc]
push 4
lea edx, [esp + 0x14]
push edx
push 4
push ebx
push 0x1001e6dc
push eax
mov dword [0x1001ee4c], ebx
mov dword [esp + 0x28], ebx
call esi
mov edx, dword [0x1001eccc]
push 4
lea ecx, [esp + 0x14]
push ecx
push 4
push ebx
push 0x1001e6e0
push edx
mov dword [0x1001ee50], ebx
mov dword [esp + 0x28], ebx
call esi
mov ecx, dword [0x1001eccc]
push 4
lea eax, [esp + 0x14]
push eax
push 4
push ebx
push 0x1001e6e4
push ecx
mov dword [0x1001ee54], ebx
mov dword [esp + 0x28], ebx
call esi
mov eax, dword [0x1001eccc]
push 4
lea edx, [esp + 0x14]
push edx
push 4
push ebx
push 0x1001e6e8
push eax
mov dword [0x1001ee58], ebx
mov dword [esp + 0x28], ebx
call esi
mov edx, dword [0x1001eccc]
push 4
lea ecx, [esp + 0x14]
push ecx
push 4
push ebx
push 0x1001e6ec
push edx
mov dword [0x1001ee5c], ebx
mov dword [esp + 0x28], ebx
call esi
mov edi, 0x1000527c
call fcn.100027c0
push 4
push 0x1001ed14
mov ebp, 0x37f1
push 4
mov dword [0x1001ed14], ebp
push ebx
mov eax, dword [0x1001eccc]
push 0x1001e6f4
push eax
call esi
mov edx, dword [0x1001eccc]
push 4
lea ecx, [esp + 0x14]
push ecx
push 4
push ebx
push 0x1001e6f8
push edx
mov dword [0x1001ee60], ebx
mov dword [esp + 0x28], ebx
call esi
mov ecx, dword [0x1001eccc]
push 4
lea eax, [esp + 0x14]
push eax
push 4
push ebx
push 0x1001e6fc
push ecx
mov dword [0x1001ee64], ebx
mov dword [esp + 0x28], ebx
call esi
mov eax, dword [0x1001eccc]
push 4
lea edx, [esp + 0x14]
push edx
push 4
push ebx
push 0x1001e700
push eax
mov dword [0x1001ee68], ebx
mov dword [esp + 0x28], ebx
call esi
mov edx, dword [0x1001eccc]
push 4
lea ecx, [esp + 0x14]
push ecx
push 4
push ebx
push 0x1001e704
push edx
mov dword [0x1001ee6c], ebx
mov dword [esp + 0x28], ebx
call esi
call fcn.10002840
mov eax, dword [0x1001eccc]
push 4
push 0x1001ecd0
push 4
push ebx
push 0x1001e70c
push eax
mov dword [0x1001ecd0], ebp
call esi
mov edx, dword [0x1001eccc]
push 4
lea ecx, [esp + 0x14]
push ecx
push 4
push ebx
push 0x1001e710
push edx
mov dword [0x1001ee70], ebx
mov dword [esp + 0x28], ebx
call esi
mov ecx, dword [0x1001eccc]
push 4
lea eax, [esp + 0x14]
push eax
push 4
push ebx
push 0x1001e714
push ecx
mov dword [0x1001ee74], ebx
mov dword [esp + 0x28], ebx
call esi
mov dword [0x1001ee78], ebx
mov eax, dword [0x1001eccc]
push 4
lea edx, [esp + 0x14]
push edx
push 4
push ebx
push 0x1001e718
push eax
mov dword [esp + 0x28], ebx
call esi
mov edx, dword [0x1001eccc]
push 4
lea ecx, [esp + 0x14]
push ecx
push 4
push ebx
push 0x1001e71c
push edx
mov dword [0x1001ee7c], ebx
mov dword [esp + 0x28], ebx
call esi
call fcn.100028c0
mov eax, dword [0x1001eccc]
push 4
push 0x1001ed18
push 4
push ebx
push 0x1001e724
push eax
mov dword [0x1001ed18], ebp
call esi
mov edx, dword [0x1001eccc]
push 4
lea ecx, [esp + 0x14]
push ecx
push 4
push ebx
push 0x1001e728
push edx
mov dword [0x1001ee80], ebx
mov dword [esp + 0x28], ebx
call esi
mov ecx, dword [0x1001eccc]
push 4
lea eax, [esp + 0x14]
push eax
push 4
push ebx
push 0x1001e72c
push ecx
mov dword [0x1001ee84], ebx
mov dword [esp + 0x28], ebx
call esi
mov eax, dword [0x1001eccc]
push 4
lea edx, [esp + 0x14]
push edx
push 4
push ebx
push 0x1001e730
push eax
mov dword [0x1001ee88], ebx
mov dword [esp + 0x28], ebx
call esi
mov edx, dword [0x1001eccc]
push 4
lea ecx, [esp + 0x14]
push ecx
push 4
push ebx
push 0x1001e734
push edx
mov dword [0x1001ee8c], ebx
mov dword [esp + 0x28], ebx
call esi
call fcn.10002960
push 4
push 0x1001ecd8
push 4
mov dword [0x1001ecd8], ebp
push ebx
mov eax, dword [0x1001eccc]
push 0x1001e73c
push eax
call esi
push 0x32
push ebx
push 0x1001ec88
call sub.MSVCR90.dll_memset
add esp, 0xc
pop edi
pop esi
pop ebp
mov dword [0x1001ecbc], ebx
mov dword [0x1001ecc0], ebx
mov dword [0x1001ecc4], ebx
mov dword [0x1001ecc8], ebx
pop ebx
pop ecx
ret