Function at 0x100065c8
Capabilities:
Set registry value

Disassembly:
mov eax, 0x100124b3
call fcn.10011420
mov eax, 0x1be4
call fcn.100115e0
mov eax, dword [0x1001b0f8]
push ebx
push esi
push edi
mov dword [ebp - 0x10], eax
lea eax, [ebp - 0x770]
push str.g_RedirectServers
push eax
mov edi, ecx
mov dword [ebp - 0x1bd0], 0x400
call sub.msvcrt.dll_strcpy
pop ecx
pop ecx
mov esi, 0x10013516
push esi
lea ecx, [ebp - 0x64]
call fcn.10001a30
xor ebx, ebx
push esi
lea ecx, [ebp - 0x48]
mov dword [ebp - 4], ebx
call fcn.10001a30
push ebx
lea eax, [ebp - 0x1bd0]
push eax
lea eax, [ebp - 0x770]
push eax
push 0xffff
push dword [edi]
mov byte [ebp - 4], 1
call dword [sym.imp.WININET.dll_HttpQueryInfoA]
xor edi, edi
inc edi
cmp eax, edi
jne 0x10004d3f
lea eax, [ebp - 0x1bb8]
push eax
push dword [ebp - 0x1bd0]
lea eax, [ebp - 0x770]
push eax
call fcn.10006d64
add esp, 0xc
push dword [ebp - 0x1bd0]
lea eax, [ebp - 0x1bb8]
push eax
lea ecx, [ebp - 0x2c]
call fcn.10003f45
cmp dword [ebp - 0x18], 6
mov byte [ebp - 4], 2
jbe 0x10004d2c
push edi
push ebx
lea eax, [ebp - 0x1bbc]
push eax
lea ecx, [ebp - 0x2c]
mov byte [ebp - 0x1bc0], 0x29
mov byte [ebp - 0x1bbc], 0x28
call fcn.10003a82
push edi
mov dword [ebp - 0x1bc8], eax
push ebx
lea eax, [ebp - 0x1bc4]
push eax
lea ecx, [ebp - 0x2c]
mov byte [ebp - 0x1bc4], 0x28
call fcn.10003a82
push edi
mov esi, eax
push ebx
lea eax, [ebp - 0x1bc0]
push eax
lea ecx, [ebp - 0x2c]
call fcn.10003a82
sub eax, dword [ebp - 0x1bc8]
lea ecx, [ebp - 0x2c]
dec eax
push eax
inc esi
push esi
lea eax, [ebp - 0x1bf0]
push eax
call fcn.100041a7
or esi, 0xffffffff
push esi
push ebx
push eax
lea ecx, [ebp - 0x64]
mov byte [ebp - 4], 3
call fcn.100018ef
push ebx
push edi
lea ecx, [ebp - 0x1bf0]
mov byte [ebp - 4], 2
call fcn.100016a3
push edi
push esi
lea eax, [ebp - 0x1bc0]
push eax
lea ecx, [ebp - 0x2c]
mov byte [ebp - 0x1bbc], 0x29
mov byte [ebp - 0x1bc0], 0x28
call fcn.10003b1d
push edi
mov dword [ebp - 0x1bc8], eax
push esi
lea eax, [ebp - 0x1bc4]
push eax
lea ecx, [ebp - 0x2c]
mov byte [ebp - 0x1bc4], 0x28
call fcn.10003b1d
push edi
mov dword [ebp - 0x1bcc], eax
push esi
lea eax, [ebp - 0x1bbc]
push eax
lea ecx, [ebp - 0x2c]
call fcn.10003b1d
sub eax, dword [ebp - 0x1bc8]
lea ecx, [ebp - 0x2c]
dec eax
push eax
mov eax, dword [ebp - 0x1bcc]
inc eax
push eax
lea eax, [ebp - 0x1bf0]
push eax
call fcn.100041a7
mov byte [ebp - 4], 4
push esi
push ebx
push eax
lea ecx, [ebp - 0x48]
call fcn.100018ef
push ebx
push edi
lea ecx, [ebp - 0x1bf0]
mov byte [ebp - 4], 2
call fcn.100016a3
cmp dword [ebp - 0x50], ebx
je 0x10004d2c
cmp dword [ebp - 0x34], ebx
je 0x10004d2c
push str.setupapi.dll
call dword [sym.imp.KERNEL32.dll_LoadLibraryA]
cmp eax, ebx
mov dword [ebp - 0x1bd4], eax
je 0x10004d2c
push str.IsUserAdmin
push eax
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
mov dword [ebp - 0x1bcc], eax
lea eax, [ebp - 0x370]
push eax
call fcn.10002d99
mov esi, dword [sym.imp.KERNEL32.dll_lstrcpyA]
lea eax, [ebp - 0x168]
mov dword [esp], str.SOFTWAREMicrosoft_
push eax
call esi
lea eax, [ebp - 0x370]
push eax
lea eax, [ebp - 0x168]
push eax
call dword [sym.imp.KERNEL32.dll_lstrcatA]
lea eax, [ebp - 0x1bc8]
push eax
push 0x20006
lea eax, [ebp - 0x168]
push ebx
push eax
call dword [ebp - 0x1bcc]
neg eax
sbb eax, eax
neg eax
add eax, 0x80000001
push eax
call dword [sym.imp.ADVAPI32.dll_RegOpenKeyExA]
test eax, eax
jne 0x10004d20
cmp dword [ebp - 0x4c], 0x10
mov eax, dword [ebp - 0x60]
jae 0x10004c6c
lea eax, [ebp - 0x60]
push eax
lea eax, [ebp - 0x17b8]
push eax
call esi
cmp dword [ebp - 0x30], 0x10
mov eax, dword [ebp - 0x44]
jae 0x10004c82
lea eax, [ebp - 0x44]
push eax
lea eax, [ebp - 0xf94]
push eax
call esi
mov esi, dword [sym.imp.KERNEL32.dll_lstrlenA]
lea eax, [ebp - 0x17b8]
push eax
call esi
inc eax
push eax
lea eax, [ebp - 0x17b8]
push 0x39
push eax
call fcn.10002cad
add esp, 0xc
lea eax, [ebp - 0xf94]
push eax
call esi
inc eax
push eax
lea eax, [ebp - 0xf94]
push 0x39
push eax
call fcn.10002cad
mov eax, dword [ebp - 0x50]
add esp, 0xc
inc eax
push eax
lea eax, [ebp - 0x17b8]
push eax
push 3
lea eax, [ebp - 0x26c]
push ebx
push eax
mov byte [ebp - 0x26c], bl
call fcn.10002ddd
mov esi, dword [sym.imp.ADVAPI32.dll_RegSetValueExA]
pop ecx
push eax
push dword [ebp - 0x1bc8]
call esi
mov eax, dword [ebp - 0x34]
inc eax
push eax
lea eax, [ebp - 0xf94]
push eax
push 3
lea eax, [ebp - 0x26c]
push ebx
push eax
call fcn.10002e24
pop ecx
push eax
push dword [ebp - 0x1bc8]
call esi
push dword [ebp - 0x1bd4]
call dword [sym.imp.KERNEL32.dll_FreeLibrary]
push ebx
push edi
lea ecx, [ebp - 0x2c]
call fcn.100016a3
mov byte [ebp - 0x1bbc], 1
jmp 0x10004d45
mov byte [ebp - 0x1bbc], bl
push ebx
push edi
lea ecx, [ebp - 0x48]
call fcn.100016a3
push ebx
push edi
lea ecx, [ebp - 0x64]
call fcn.100016a3
mov ecx, dword [ebp - 0xc]
mov al, byte [ebp - 0x1bbc]
pop edi
pop esi
mov dword fs:[0], ecx
mov ecx, dword [ebp - 0x10]
pop ebx
call fcn.100112e6
leave
ret
push esi
mov esi, ecx
call fcn.10004791
mov ecx, esi
call fcn.1000640e
mov ecx, esi
call fcn.1000485c
mov ecx, esi
pop esi
jmp 0x100049d6