Function at 0x1001def0
Capabilities:
Set registry value

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x10064079
mov eax, dword fs:[0]
push eax
sub esp, 0xa34
mov eax, dword [0x100e57c0]
xor eax, ebp
mov dword [ebp - 0x10], eax
push ebx
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
push 0x1f4
lea eax, [ebp - 0xa00]
push 0x4b
xor ebx, ebx
push eax
mov dword [ebp - 0xa04], ebx
call fcn.1004bb60
mov ecx, 0x1f4
xor eax, eax
lea edi, [ebp - 0x80c]
add esp, 0xc
rep stosd dword es:[edi], eax
mov eax, dword [0x100da014]
mov dword [ebp - 4], ebx
mov dword [ebp - 0xa30], eax
mov dword [ebp - 0xa2c], eax
mov dword [ebp - 0xa3c], ebx
mov dword [ebp - 0xa38], ebx
mov dword [ebp - 0xa34], ebx
mov edi, dword [sym.imp.KERNEL32.dll_lstrlenW]
mov ecx, str.SYSTEMCurrentControlSetHardware_ProfilesCurrentSystemCurrentControlSetEnum
shr ecx, 0x10
mov byte [ebp - 4], 3
mov dword [ebp - 0xa08], eax
test ecx, ecx
jne 0x1001dfa3
mov edx, str.SYSTEMCurrentControlSetHardware_ProfilesCurrentSystemCurrentControlSetEnum
movzx eax, dx
push eax
lea ecx, [ebp - 0xa08]
call fcn.100018e0
jmp 0x1001dfdf
push str.SYSTEMCurrentControlSetHardware_ProfilesCurrentSystemCurrentControlSetEnum
call edi
mov esi, eax
test esi, esi
je 0x1001dfdf
push esi
lea ecx, [ebp - 0xa08]
call fcn.100010e0
test eax, eax
je 0x1001dfdf
lea eax, [esi + esi]
lea ecx, [eax + 2]
cmp ecx, eax
jb 0x1001dfdf
mov edx, dword [ebp - 0xa08]
push eax
push str.SYSTEMCurrentControlSetHardware_ProfilesCurrentSystemCurrentControlSetEnum
push edx
call fcn.1004b2e0
add esp, 0xc
mov eax, dword [0x100da014]
mov ecx, str.DirectSound
shr ecx, 0x10
mov byte [ebp - 4], 4
mov dword [ebp - 0xa28], eax
test ecx, ecx
jne 0x1001e010
mov edx, str.DirectSound
movzx eax, dx
push eax
lea ecx, [ebp - 0xa28]
call fcn.100018e0
jmp 0x1001e04c
push str.DirectSound
call edi
mov esi, eax
test esi, esi
je 0x1001e04c
push esi
lea ecx, [ebp - 0xa28]
call fcn.100010e0
test eax, eax
je 0x1001e04c
lea eax, [esi + esi]
lea ecx, [eax + 2]
cmp ecx, eax
jb 0x1001e04c
mov edx, dword [ebp - 0xa28]
push eax
push str.DirectSound
push edx
call fcn.1004b2e0
add esp, 0xc
mov eax, dword [0x100da014]
mov ecx, str.Speaker_Type
shr ecx, 0x10
mov byte [ebp - 4], 5
mov dword [ebp - 0xa10], eax
test ecx, ecx
jne 0x1001e07d
mov edx, str.Speaker_Type
movzx eax, dx
push eax
lea ecx, [ebp - 0xa10]
call fcn.100018e0
jmp 0x1001e0b9
push str.Speaker_Type
call edi
mov esi, eax
test esi, esi
je 0x1001e0b9
push esi
lea ecx, [ebp - 0xa10]
call fcn.100010e0
test eax, eax
je 0x1001e0b9
lea eax, [esi + esi]
lea ecx, [eax + 2]
cmp ecx, eax
jb 0x1001e0b9
mov edx, dword [ebp - 0xa10]
push eax
push str.Speaker_Type
push edx
call fcn.1004b2e0
add esp, 0xc
push 0x1006d27c
push 0x1006d270
lea ecx, [ebp - 0x3c]
mov byte [ebp - 4], 6
mov dword [ebp - 0xa40], 0x80004005
call fcn.10039cf0
cmp dword [ebp - 0x3c], 0xffffffff
mov edi, dword [sym.imp.KERNEL32.dll_InterlockedDecrement]
mov byte [ebp - 4], 7
je 0x1001e520
lea eax, [ebp - 0xa30]
push eax
lea ecx, [ebp - 0xa04]
push ecx
lea ecx, [ebp - 0x3c]
call fcn.10039d30
lea edx, [ebp - 0xa2c]
push edx
lea ecx, [ebp - 0x3c]
call fcn.10039df0
push 0x1006d2c8
lea ecx, [ebp - 0xa0c]
call fcn.1001bbb0
push 0x1006d2c8
lea ecx, [ebp - 0xa18]
mov byte [ebp - 4], 8
call fcn.1001bbb0
lea eax, [ebp - 0xa18]
push eax
lea ecx, [ebp - 0xa08]
push ecx
lea edx, [ebp - 0xa20]
push edx
mov byte [ebp - 4], 9
call fcn.1001d430
lea ecx, [ebp - 0xa30]
push ecx
push eax
lea edx, [ebp - 0xa24]
push edx
mov byte [ebp - 4], 0xa
call fcn.1001d430
lea ecx, [ebp - 0xa0c]
push ecx
push eax
lea edx, [ebp - 0xa14]
push edx
mov byte [ebp - 4], 0xb
call fcn.1001d430
lea ecx, [ebp - 0xa2c]
push ecx
push eax
lea edx, [ebp - 0xa1c]
push edx
mov byte [ebp - 4], 0xc
call fcn.1001d430
push eax
lea ecx, [ebp - 0xa08]
mov byte [ebp - 4], 0xd
call fcn.1001bc40
mov eax, dword [ebp - 0xa1c]
lea ecx, [eax - 0xc]
cmp ecx, dword [0x100da010]
je 0x1001e1d9
add eax, 0xfffffff4
push eax
call edi
test eax, eax
jg 0x1001e1d9
mov eax, dword [ebp - 0xa1c]
add eax, 0xfffffff4
push eax
call fcn.1004b641
add esp, 4
mov eax, dword [ebp - 0xa14]
lea edx, [eax - 0xc]
cmp edx, dword [0x100da010]
je 0x1001e206
add eax, 0xfffffff4
push eax
call edi
test eax, eax
jg 0x1001e206
mov eax, dword [ebp - 0xa14]
add eax, 0xfffffff4
push eax
call fcn.1004b641
add esp, 4
mov eax, dword [ebp - 0xa24]
lea ecx, [eax - 0xc]
cmp ecx, dword [0x100da010]
je 0x1001e233
add eax, 0xfffffff4
push eax
call edi
test eax, eax
jg 0x1001e233
mov eax, dword [ebp - 0xa24]
add eax, 0xfffffff4
push eax
call fcn.1004b641
add esp, 4
mov eax, dword [ebp - 0xa20]
lea edx, [eax - 0xc]
cmp edx, dword [0x100da010]
je 0x1001e260
add eax, 0xfffffff4
push eax
call edi
test eax, eax
jg 0x1001e260
mov eax, dword [ebp - 0xa20]
add eax, 0xfffffff4
push eax
call fcn.1004b641
add esp, 4
mov eax, dword [ebp - 0xa18]
lea ecx, [eax - 0xc]
cmp ecx, dword [0x100da010]
je 0x1001e284
lea esi, [eax - 0xc]
push esi
call edi
test eax, eax
jg 0x1001e284
push esi
call fcn.1004b641
add esp, 4
mov eax, dword [ebp - 0xa0c]
lea edx, [eax - 0xc]
mov byte [ebp - 4], 7
cmp edx, dword [0x100da010]
je 0x1001e2ac
lea esi, [eax - 0xc]
push esi
call edi
test eax, eax
jg 0x1001e2ac
push esi
call fcn.1004b641
add esp, 4
mov edi, dword [ebp - 0xa08]
push 0xf013f
push edi
push reloc.OLEAUT32.dll_SysReAllocString
lea ecx, [ebp - 0xa3c]
call fcn.100022e0
xor ebx, ebx
cmp eax, ebx
jne 0x1001e518
mov eax, dword [ebp - 0xa3c]
cmp eax, ebx
je 0x1001e2e9
push eax
call dword [sym.imp.ADVAPI32.dll_RegCloseKey]
mov dword [ebp - 0xa3c], ebx
push 0x1006d2c8
lea ecx, [ebp - 0xa1c]
mov dword [ebp - 0xa38], ebx
call fcn.1001bbb0
push 0x1006d2c8
lea ecx, [ebp - 0xa14]
mov byte [ebp - 4], 0xe
call fcn.1001bbb0
lea eax, [ebp - 0xa14]
push eax
lea ecx, [ebp - 0xa08]
push ecx
lea edx, [ebp - 0xa24]
push edx
mov byte [ebp - 4], 0xf
call fcn.1001d430
lea ecx, [ebp - 0xa28]
push ecx
push eax
lea edx, [ebp - 0xa20]
push edx
mov byte [ebp - 4], 0x10
call fcn.1001d430
lea ecx, [ebp - 0xa1c]
push ecx
push eax
lea edx, [ebp - 0xa18]
push edx
mov byte [ebp - 4], 0x11
call fcn.1001d430
lea ecx, [ebp - 0xa10]
push ecx
push eax
lea edx, [ebp - 0xa0c]
push edx
mov byte [ebp - 4], 0x12
call fcn.1001d430
push eax
lea ecx, [ebp - 0xa08]
mov byte [ebp - 4], 0x13
call fcn.1001bc40
mov eax, dword [ebp - 0xa0c]
mov edi, dword [sym.imp.KERNEL32.dll_InterlockedDecrement]
lea ecx, [eax - 0xc]
cmp ecx, dword [0x100da010]
je 0x1001e3bc
add eax, 0xfffffff4
push eax
call edi
test eax, eax
jg 0x1001e3bc
mov eax, dword [ebp - 0xa0c]
add eax, 0xfffffff4
push eax
call fcn.1004b641
add esp, 4
mov eax, dword [ebp - 0xa18]
lea edx, [eax - 0xc]
cmp edx, dword [0x100da010]
je 0x1001e3e9
add eax, 0xfffffff4
push eax
call edi
test eax, eax
jg 0x1001e3e9
mov eax, dword [ebp - 0xa18]
add eax, 0xfffffff4
push eax
call fcn.1004b641
add esp, 4
mov eax, dword [ebp - 0xa20]
lea ecx, [eax - 0xc]
cmp ecx, dword [0x100da010]
je 0x1001e416
add eax, 0xfffffff4
push eax
call edi
test eax, eax
jg 0x1001e416
mov eax, dword [ebp - 0xa20]
add eax, 0xfffffff4
push eax
call fcn.1004b641
add esp, 4
mov eax, dword [ebp - 0xa24]
lea edx, [eax - 0xc]
cmp edx, dword [0x100da010]
je 0x1001e443
add eax, 0xfffffff4
push eax
call edi
test eax, eax
jg 0x1001e443
mov eax, dword [ebp - 0xa24]
add eax, 0xfffffff4
push eax
call fcn.1004b641
add esp, 4
mov eax, dword [ebp - 0xa14]
lea ecx, [eax - 0xc]
cmp ecx, dword [0x100da010]
je 0x1001e467
lea esi, [eax - 0xc]
push esi
call edi
test eax, eax
jg 0x1001e467
push esi
call fcn.1004b641
add esp, 4
mov eax, dword [ebp - 0xa1c]
lea edx, [eax - 0xc]
cmp edx, dword [0x100da010]
je 0x1001e48b
lea esi, [eax - 0xc]
push esi
call edi
test eax, eax
jg 0x1001e48b
push esi
call fcn.1004b641
add esp, 4
mov edi, dword [ebp - 0xa08]
push ebx
push ebx
push 0xf013f
push ebx
push ebx
push edi
push reloc.OLEAUT32.dll_SysReAllocString
lea ecx, [ebp - 0xa3c]
call fcn.10002240
cmp eax, ebx
mov ebx, dword [ebp - 0xa3c]
jne 0x1001e4fd
mov edx, dword [ebp - 0xa10]
mov eax, dword [ebp + 8]
push 4
lea ecx, [ebp - 0xa0c]
push ecx
push 4
xor esi, esi
push esi
push edx
push ebx
mov dword [ebp - 0xa0c], eax
call dword [sym.imp.ADVAPI32.dll_RegSetValueExW]
cmp eax, esi
jne 0x1001e4e4
mov dword [ebp - 0xa40], esi
cmp ebx, esi
je 0x1001e4f7
push ebx
call dword [sym.imp.ADVAPI32.dll_RegCloseKey]
xor ebx, ebx
mov dword [ebp - 0xa3c], ebx
mov dword [ebp - 0xa38], esi
test ebx, ebx
je 0x1001e526
push ebx
call dword [sym.imp.ADVAPI32.dll_RegCloseKey]
xor ebx, ebx
mov dword [ebp - 0xa3c], ebx
mov dword [ebp - 0xa38], ebx
jmp 0x1001e526
mov ebx, dword [ebp - 0xa3c]
jmp 0x1001e526
mov edi, dword [ebp - 0xa08]
lea ecx, [ebp - 0x3c]
mov byte [ebp - 4], 6
call fcn.10039840
mov eax, dword [ebp - 0xa10]
add eax, 0xfffffff4
cmp eax, dword [0x100da010]
je 0x1001e560
mov esi, dword [ebp - 0xa10]
add esi, 0xfffffff4
push esi
call dword [sym.imp.KERNEL32.dll_InterlockedDecrement]
test eax, eax
jg 0x1001e560
push esi
call fcn.1004b641
add esp, 4
mov esi, dword [ebp - 0xa28]
lea ecx, [esi - 0xc]
cmp ecx, dword [0x100da010]
je 0x1001e588
add esi, 0xfffffff4
push esi
call dword [sym.imp.KERNEL32.dll_InterlockedDecrement]
test eax, eax
jg 0x1001e588
push esi
call fcn.1004b641
add esp, 4
lea edx, [edi - 0xc]
cmp edx, dword [0x100da010]
je 0x1001e5aa
lea esi, [edi - 0xc]
push esi
call dword [sym.imp.KERNEL32.dll_InterlockedDecrement]
test eax, eax
jg 0x1001e5aa
push esi
call fcn.1004b641
add esp, 4
xor edi, edi
cmp ebx, edi
je 0x1001e5b7
push ebx
call dword [sym.imp.ADVAPI32.dll_RegCloseKey]
mov eax, dword [ebp - 0xa2c]
lea ecx, [eax - 0xc]
cmp ecx, dword [0x100da010]
je 0x1001e5e8
add eax, 0xfffffff4
push eax
call dword [sym.imp.KERNEL32.dll_InterlockedDecrement]
test eax, eax
jg 0x1001e5e8
mov edx, dword [ebp - 0xa2c]
add edx, 0xfffffff4
push edx
call fcn.1004b641
add esp, 4
mov eax, dword [ebp - 0xa30]
lea ecx, [eax - 0xc]
cmp ecx, dword [0x100da010]
je 0x1001e619
add eax, 0xfffffff4
push eax
call dword [sym.imp.KERNEL32.dll_InterlockedDecrement]
test eax, eax
jg 0x1001e619
mov edx, dword [ebp - 0xa30]
add edx, 0xfffffff4
push edx
call fcn.1004b641
add esp, 4
xor esi, esi
cmp dword [ebp - 0xa04], edi
jbe 0x1001e647
mov eax, dword [ebp + esi*4 - 0x80c]
cmp eax, edi
je 0x1001e63e
push eax
call fcn.1004b207
add esp, 4
mov dword [ebp + esi*4 - 0x80c], edi
inc esi
cmp esi, dword [ebp - 0xa04]
jb 0x1001e623
mov eax, dword [ebp - 0xa40]
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 0x10]
xor ecx, ebp
call fcn.1004bb49
mov esp, ebp
pop ebp
ret 4