Function at 0x1000af13
Capabilities:
Set registry value

Disassembly:
push ebx
mov edx, 0xd
sub esp, 4
mov dword [esp], 0
dec edx
jne 0x1000af19
call fcn.100b8f80
mov edx, dword [esp + 0x40]
lea ecx, [esp]
call fcn.10044060
mov edx, dword [esp + 0x44]
lea ecx, [esp + 4]
call fcn.10044060
mov edx, dword [esp + 0x48]
lea ecx, [esp + 8]
call fcn.10044060
mov edx, dword [esp + 0x50]
lea ecx, [esp + 0xc]
call fcn.10044060
push edx
call fcn.100b8e70
pop edx
push eax
push edx
call fcn.100b8e70
pop edx
push eax
push 1
push dword [esp + 0xc]
call fcn.100b6e90
call fcn.100b8f10
lea edx, [0x101f4b4c]
pop ecx
push ecx
call fcn.10044460
mov ecx, eax
call fcn.10044420
je 0x1000afc7
push edx
call fcn.100b8e70
pop edx
push eax
push edx
call fcn.100b8e70
pop edx
push eax
push dword [esp + 8]
call fcn.100b6b00
mov ebx, eax
dec ebx
push ebx
push dword [esp + 0xc]
call fcn.100b6f00
lea eax, [esp + 4]
push eax
call fcn.100b9010
push dword [esp + 0xc]
lea edx, [0x101f40a8]
pop ecx
call fcn.10044420
je 0x1000affb
lea eax, [esp + 0x14]
push eax
push 0xf003f
push 0
push dword [esp + 0xc]
push dword [esp + 0x4c]
call sub.ADVAPI32.DLL_RegOpenKeyExW
mov dword [esp + 0x10], eax
jmp 0x1000b031
lea eax, [esp + 0x24]
push eax
push dword [esp + 0x40]
push dword [esp + 0x14]
call sub.ADVAPI32.DLL_RegConnectRegistryW
mov dword [esp + 0x20], eax
lea eax, [esp + 0x14]
push eax
push 0xf003f
push 0
push dword [esp + 0xc]
push dword [esp + 0x34]
call sub.ADVAPI32.DLL_RegOpenKeyExW
mov dword [esp + 0x10], eax
mov ebx, dword [esp + 0x10]
and ebx, ebx
jne 0x1000b0f8
mov dword [esp + 0x18], 0xff
push edx
call fcn.100b8e70
pop edx
push eax
push edx
call fcn.100b8e70
pop edx
push eax
push 0xff
call fcn.100b65d0
lea eax, [esp + 0x20]
push eax
call fcn.100b9010
push dword [esp + 0x4c]
mov ebx, 1
cmp ebx, dword [esp]
jne 0x1000b0a3
push dword [esp + 0xc]
call fcn.100b6f80
push eax
mov eax, dword [esp + 0x10]
push eax
push 1
push 0
push dword [esp + 0x18]
push dword [esp + 0x2c]
call sub.ADVAPI32.DLL_RegSetValueExW
mov dword [esp + 0x14], eax
jmp 0x1000b0df
mov ebx, 4
cmp ebx, dword [esp]
jne 0x1000b0df
push dword [esp + 0xc]
call fcn.100b6860
mov dword [esp + 0x2c], eax
push 4
lea eax, [esp + 0x30]
push eax
push 4
push 0
push dword [esp + 0x18]
push dword [esp + 0x2c]
call sub.ADVAPI32.DLL_RegSetValueExW
mov dword [esp + 0x14], eax
pop eax
push dword [esp + 0x14]
call sub.ADVAPI32.DLL_RegCloseKey
mov eax, 1
jmp 0x1000b1b7
push dword [esp + 0x14]
call sub.ADVAPI32.DLL_RegCloseKey
lea eax, [esp + 0x30]
push eax
lea eax, [esp + 0x18]
push eax
push 0
push 0xf003f
push 0
push 0
push 0
push dword [esp + 0x1c]
push dword [esp + 0x5c]
call sub.ADVAPI32.DLL_RegCreateKeyExW
push dword [esp + 0x4c]
mov ebx, 1
cmp ebx, dword [esp]
jne 0x1000b16b
push dword [esp + 0xc]
call fcn.100b6f80
push eax
mov eax, dword [esp + 0x10]
push eax
push 1
push 0
push dword [esp + 0x18]
push dword [esp + 0x2c]
call sub.ADVAPI32.DLL_RegSetValueExW
mov dword [esp + 0x14], eax
jmp 0x1000b1a7
mov ebx, 4
cmp ebx, dword [esp]
jne 0x1000b1a7
push dword [esp + 0xc]
call fcn.100b6860
mov dword [esp + 0x2c], eax
push 4
lea eax, [esp + 0x30]
push eax
push 4
push 0
push dword [esp + 0x18]
push dword [esp + 0x2c]
call sub.ADVAPI32.DLL_RegSetValueExW
mov dword [esp + 0x14], eax
pop eax
push dword [esp + 0x14]
call sub.ADVAPI32.DLL_RegCloseKey
xor eax, eax
jmp 0x1000b1b7
push dword [esp + 0xc]
call fcn.100b8fe0
push dword [esp + 0x1c]
call fcn.100b8fe0
push dword [esp + 4]
call fcn.100b8fe0
push dword [esp]
call fcn.100b8fe0
push dword [esp + 8]
call fcn.100b8fe0
add esp, 0x34
pop ebx
ret 0x18