Function at 0x1006b030
Capabilities:
Set registry value

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x100d844a
mov eax, dword fs:[0]
push eax
sub esp, 0x12c
mov eax, dword [0x101120a8]
xor eax, ebp
mov dword [ebp - 0x10], eax
push esi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
test ecx, ecx
je 0x1006b56e
push 0xa
push ecx
lea ecx, [ebp - 0xe4]
call sym.XNewLookSch.dll_public:_void___thiscall_LString::constructor_int__int_
lea eax, [ebp - 0x138]
mov dword [ebp - 4], 0
push eax
call sym.XNewLookSch.dll_public:_static_class_LString___cdecl_LString::generateUUID_void_
mov esi, eax
lea eax, [ebp - 0x11c]
mov byte [ebp - 4], 1
push eax
call sym.XNewLookSch.dll_public:_static_class_LString___cdecl_LString::generateUUID_void_
lea ecx, [ebp - 0xe4]
mov byte [ebp - 4], 2
push ecx
push eax
lea eax, [ebp - 0x100]
push eax
call sym.XNewLookSch.dll_class_LString___cdecl_operator_class_LString_const___class_LString_const__
push esi
push eax
lea eax, [ebp - 0xac]
mov byte [ebp - 4], 3
push eax
call sym.XNewLookSch.dll_class_LString___cdecl_operator_class_LString_const___class_LString_const__
add esp, 0x20
lea ecx, [ebp - 0x100]
call sym.XNewLookSch.dll_public_virtual:_void___thiscall_LString::destructor_void_
lea ecx, [ebp - 0x11c]
call sym.XNewLookSch.dll_public_virtual:_void___thiscall_LString::destructor_void_
lea ecx, [ebp - 0x138]
call sym.XNewLookSch.dll_public_virtual:_void___thiscall_LString::destructor_void_
lea ecx, [ebp - 0xe4]
mov byte [ebp - 4], 8
call sym.XNewLookSch.dll_public_virtual:_void___thiscall_LString::destructor_void_
lea ecx, [ebp - 0x90]
call sym.XNewLookSch.dll_public:_void___thiscall_LBsSamYi::constructor_void_
lea eax, [ebp - 0xac]
mov byte [ebp - 4], 9
push eax
lea eax, [ebp - 0x74]
push eax
lea ecx, [ebp - 0x90]
call sym.XNewLookSch.dll_public:_class_LString___thiscall_LBsSamYi::en_class_LString_const__
push 0x48
lea eax, [ebp - 0x58]
push 0
push eax
call fcn.1008da10
xor eax, eax
mov dword [ebp - 0x4c], vtable.LString.0
add esp, 0xc
mov dword [ebp - 0x38], 0
add dword [sym.XNewLookSch.dll_unsigned_int_LString::_ui_instance_count], 2
mov dword [ebp - 0x34], 7
mov word [ebp - 0x48], ax
mov dword [ebp - 0x30], vtable.LString.0
mov dword [ebp - 0x1c], eax
mov dword [ebp - 0x18], 7
mov word [ebp - 0x2c], ax
mov dword [ebp - 0x58], eax
mov byte [ebp - 0x54], al
push eax
push eax
push eax
mov byte [ebp - 4], 0xb
mov dword [ebp - 0x14], 0x200
push eax
push eax
push eax
push eax
push eax
push eax
push eax
push eax
push eax
push eax
push eax
push eax
push eax
push eax
push eax
push eax
push eax
push eax
push eax
push eax
push eax
push eax
push eax
push eax
push eax
push eax
push eax
push eax
push eax
push eax
push eax
push eax
push eax
push eax
push eax
push eax
push eax
push eax
push eax
push eax
push eax
push eax
push eax
push eax
push eax
push eax
sub esp, 0x34
lea ecx, [ebp - 0xc4]
push eax
push 0x65
push 0x74
push 0x71
push 0x72
push 0x72
push 0x4f
push 0x59
sub esp, 0x20
call fcn.1006d460
add esp, 0x138
xor ecx, ecx
mov dword [ebp - 0xe4], vtable.LString.0
mov dword [ebp - 0xd0], 0
mov dword [ebp - 0xcc], 7
mov word [ebp - 0xe0], cx
mov byte [ebp - 4], 0xd
lea ecx, [ebp - 0xe0]
inc dword [sym.XNewLookSch.dll_unsigned_int_LString::_ui_instance_count]
cmp ecx, eax
je 0x1006b21c
cmp dword [eax + 0x14], 8
mov ecx, eax
jb 0x1006b20d
mov ecx, dword [eax]
push dword [eax + 0x10]
push ecx
lea ecx, [ebp - 0xe0]
call fcn.10002b70
push 0x2001f
push connect
push 1
lea eax, [ebp - 0xe4]
mov byte [ebp - 4], 0xe
push eax
lea ecx, [ebp - 0x58]
call sym.XNewLookSch.dll_public:_bool___thiscall_LRegEdit::OpenDir_class_LString_const___bool__struct_HKEY_____unsigned_long_int_
lea ecx, [ebp - 0xe4]
call sym.XNewLookSch.dll_public_virtual:_void___thiscall_LString::destructor_void_
mov byte [ebp - 4], 0xb
mov edx, dword [ebp - 0xb0]
cmp edx, 8
jb 0x1006b28a
mov ecx, dword [ebp - 0xc4]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x1006b280
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x1006b588
push edx
push ecx
call fcn.1008bfe4
add esp, 8
xor eax, eax
mov dword [ebp - 0xc8], vtable.LString.0
mov dword [ebp - 0xb4], 0
mov dword [ebp - 0xb0], 7
mov word [ebp - 0xc4], ax
push 1
mov byte [ebp - 4], 0xf
lea ecx, [ebp - 0xc4]
inc dword [sym.XNewLookSch.dll_unsigned_int_LString::_ui_instance_count]
push 0x100f1670
call fcn.10002b70
mov byte [ebp - 4], 0xb
cmp byte [ebp - 0x54], 0
mov esi, dword [sym.imp.ADVAPI32.dll_RegSetValueExW]
mov dword [ebp - 0x58], 0
je 0x1006b31d
cmp dword [ebp - 0x5c], 8
lea edx, [ebp - 0x70]
mov eax, dword [ebp - 0x60]
lea ecx, [ebp - 0xc4]
cmovae edx, dword [ebp - 0x70]
cmp dword [ebp - 0xb0], 8
cmovae ecx, dword [ebp - 0xc4]
add eax, eax
push eax
push edx
push 1
push 0
push ecx
push dword [ebp - 0x50]
call esi
call dword [sym.imp.KERNEL32.dll_GetLastError]
mov dword [ebp - 0x58], eax
lea ecx, [ebp - 0xc8]
call sym.XNewLookSch.dll_public_virtual:_void___thiscall_LString::destructor_void_
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
sub esp, 0x34
lea ecx, [ebp - 0xc4]
push 0
push 0x65
push 0x74
push 0x71
push 0x72
push 0x72
push 0x4f
push 0x59
sub esp, 0x20
call fcn.1006d460
add esp, 0x138
xor ecx, ecx
mov dword [ebp - 0xe4], vtable.LString.0
mov dword [ebp - 0xd0], 0
mov dword [ebp - 0xcc], 7
mov word [ebp - 0xe0], cx
mov byte [ebp - 4], 0x11
lea ecx, [ebp - 0xe0]
inc dword [sym.XNewLookSch.dll_unsigned_int_LString::_ui_instance_count]
cmp ecx, eax
je 0x1006b405
cmp dword [eax + 0x14], 8
mov ecx, eax
jb 0x1006b3f6
mov ecx, dword [eax]
push dword [eax + 0x10]
push ecx
lea ecx, [ebp - 0xe0]
call fcn.10002b70
push 0x2001f
push reloc.OLEAUT32.dll_SysReAllocString
push 1
lea eax, [ebp - 0xe4]
mov byte [ebp - 4], 0x12
push eax
lea ecx, [ebp - 0x58]
call sym.XNewLookSch.dll_public:_bool___thiscall_LRegEdit::OpenDir_class_LString_const___bool__struct_HKEY_____unsigned_long_int_
lea ecx, [ebp - 0xe4]
call sym.XNewLookSch.dll_public_virtual:_void___thiscall_LString::destructor_void_
mov byte [ebp - 4], 0xb
mov edx, dword [ebp - 0xb0]
cmp edx, 8
jb 0x1006b473
mov ecx, dword [ebp - 0xc4]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x1006b469
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x1006b58d
push edx
push ecx
call fcn.1008bfe4
add esp, 8
xor eax, eax
mov dword [ebp - 0xc8], vtable.LString.0
mov dword [ebp - 0xb4], 0
mov dword [ebp - 0xb0], 7
mov word [ebp - 0xc4], ax
push 1
mov byte [ebp - 4], 0x13
lea ecx, [ebp - 0xc4]
inc dword [sym.XNewLookSch.dll_unsigned_int_LString::_ui_instance_count]
push 0x100f1670
call fcn.10002b70
cmp byte [ebp - 0x54], 0
mov dword [ebp - 0x58], 0
je 0x1006b4fc
cmp dword [ebp - 0x5c], 8
lea edx, [ebp - 0x70]
mov eax, dword [ebp - 0x60]
lea ecx, [ebp - 0xc4]
cmovae edx, dword [ebp - 0x70]
cmp dword [ebp - 0xb0], 8
cmovae ecx, dword [ebp - 0xc4]
add eax, eax
push eax
push edx
push 1
push 0
push ecx
push dword [ebp - 0x50]
call esi
call dword [sym.imp.KERNEL32.dll_GetLastError]
mov dword [ebp - 0x58], eax
lea ecx, [ebp - 0xc8]
call sym.XNewLookSch.dll_public_virtual:_void___thiscall_LString::destructor_void_
mov al, byte [ebp - 0x54]
mov esi, dword [sym.imp.ADVAPI32.dll_RegCloseKey]
mov dword [ebp - 0x58], 0
test al, al
je 0x1006b525
push dword [ebp - 0x50]
call esi
xor al, al
mov byte [ebp - 0x54], al
mov dword [ebp - 0x58], 0
test al, al
je 0x1006b540
push dword [ebp - 0x50]
call esi
mov dword [ebp - 0x58], 0
mov byte [ebp - 0x54], 0
lea ecx, [ebp - 0x30]
call sym.XNewLookSch.dll_public_virtual:_void___thiscall_LString::destructor_void_
lea ecx, [ebp - 0x4c]
call sym.XNewLookSch.dll_public_virtual:_void___thiscall_LString::destructor_void_
lea ecx, [ebp - 0x74]
call sym.XNewLookSch.dll_public_virtual:_void___thiscall_LString::destructor_void_
lea ecx, [ebp - 0x90]
call sym.XNewLookSch.dll_public_virtual:_void___thiscall_LString::destructor_void_
lea ecx, [ebp - 0xac]
call sym.XNewLookSch.dll_public_virtual:_void___thiscall_LString::destructor_void_
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop esi
mov ecx, dword [ebp - 0x10]
xor ecx, ebp
call fcn.1008bffe
mov esp, ebp
pop ebp
ret
call fcn.10092486
call fcn.10092486
int3