Function at 0x10011cd4
Capabilities:
Set registry value

Disassembly:
push ebp
mov ebp, esp
sub esp, 0xb00
mov eax, dword [0x1006a098]
xor eax, ebp
mov dword [ebp - 4], eax
mov eax, dword [ebp + 0xc]
push ebx
push esi
push edi
mov esi, 0xff
mov dword [ebp - 0xafc], eax
xor ebx, ebx
lea eax, [ebp - 0x6eb]
push esi
push ebx
push eax
mov byte [ebp - 0x6ec], bl
call fcn.10019f50
push esi
lea eax, [ebp - 0x1cb]
mov byte [ebp - 0x1cc], bl
push ebx
push eax
call fcn.10019f50
push 0x31
pop eax
push 0x45
mov word [ebp - 0xaf4], ax
lea eax, [ebp - 0x83]
push ebx
push eax
mov byte [ebp - 0x84], bl
call fcn.10019f50
push 0x45
lea eax, [ebp - 0xcb]
mov byte [ebp - 0xcc], bl
push ebx
push eax
call fcn.10019f50
push 0x41f
lea eax, [ebp - 0x5eb]
mov byte [ebp - 0x5ec], bl
push ebx
push eax
call fcn.10019f50
push dword [ebp + 8]
mov esi, str.Objective
lea edi, [ebp - 0x3c]
xor eax, eax
push str.Objective_d
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsw word es:[edi], word [esi]
lea edi, [ebp - 0x32]
or esi, 0xffffffff
stosd dword es:[edi], eax
push esi
push 0x14
stosd dword es:[edi], eax
stosw word es:[edi], ax
lea eax, [ebp - 0x3c]
push eax
call fcn.1001a28e
mov edi, dword [ebp - 0xafc]
add esp, 0x50
push str.Critical
push edi
call fcn.1001b558
pop ecx
pop ecx
test eax, eax
jne 0x10011dbc
push esi
push str.4321
jmp 0x10011e0c
push str.Priority
push edi
call fcn.1001b558
pop ecx
pop ecx
test eax, eax
jne 0x10011dd5
push esi
push 0x1004dda4
jmp 0x10011e0c
push str.Warning
push edi
call fcn.1001b558
pop ecx
pop ecx
test eax, eax
jne 0x10011dee
push esi
push 0x1004dda8
jmp 0x10011e0c
push str.Information
push edi
call fcn.1001b558
pop ecx
pop ecx
push esi
test eax, eax
jne 0x10011e07
push 0x1004ddac
jmp 0x10011e0c
push 0x1004e18c
lea eax, [ebp - 0xaf4]
push 2
push eax
call fcn.1001b6b8
add esp, 0x10
lea eax, [edi + 0xc]
push str.Success
push eax
call fcn.1001b7b0
push 0x10
pop ecx
test eax, eax
mov esi, ebx
lea eax, [edi + 0xc]
push str.Failure
push eax
cmovne esi, ecx
call fcn.1001b7b0
add esp, 0x10
test eax, eax
je 0x10011e4d
add esi, 8
lea eax, [edi + 0xc]
push str.Info
push eax
call fcn.1001b7b0
pop ecx
pop ecx
test eax, eax
je 0x10011e64
add esi, 2
lea eax, [edi + 0xc]
push str.Warn
push eax
call fcn.1001b7b0
pop ecx
pop ecx
test eax, eax
je 0x10011e79
inc esi
lea eax, [edi + 0xc]
push str.Error
push eax
call fcn.1001b7b0
pop ecx
pop ecx
push 4
pop ecx
test eax, eax
je 0x10011e92
add esi, ecx
lea eax, [edi + 0xc]
push str.Critical
push eax
call fcn.1001b7b0
pop ecx
pop ecx
push 0x20
pop ecx
test eax, eax
je 0x10011eab
add esi, ecx
lea eax, [edi + 0xc]
push str.Verbose
push eax
call fcn.1001b7b0
pop ecx
pop ecx
test eax, eax
je 0x10011ec2
add esi, 0x40
lea eax, [edi + 0xc]
push str.ActivityTracing
push eax
call fcn.1001b7b0
pop ecx
pop ecx
test eax, eax
je 0x10011ed9
sub esi, 0xffffff80
push 0xa
push 0x46
lea eax, [ebp - 0xcc]
push eax
push esi
call fcn.1001d9a0
lea eax, [edi + 0x52]
push 0x1004dde0
push eax
call fcn.1001b7b0
test eax, eax
mov esi, ebx
push 0x20
pop eax
cmovne esi, eax
lea eax, [edi + 0x52]
push 0x1004dde4
push eax
call fcn.1001b7b0
add esp, 0x20
test eax, eax
je 0x10011f1a
add esi, 0x10
lea eax, [edi + 0x52]
push 0x1004dde8
push eax
call fcn.1001b7b0
pop ecx
pop ecx
test eax, eax
je 0x10011f31
add esi, 8
lea eax, [edi + 0x52]
push 0x1004ddec
push eax
call fcn.1001b7b0
pop ecx
pop ecx
test eax, eax
je 0x10011f48
add esi, 4
lea eax, [edi + 0x52]
push 0x1004ddf0
push eax
call fcn.1001b7b0
pop ecx
pop ecx
test eax, eax
je 0x10011f5f
add esi, 2
lea eax, [edi + 0x52]
push 0x1004ddf4
push eax
call fcn.1001b7b0
pop ecx
pop ecx
test eax, eax
je 0x10011f74
inc esi
lea eax, [edi + 0x52]
push 0x1004ddf8
push eax
call fcn.1001b7b0
pop ecx
pop ecx
test eax, eax
je 0x10011f8b
sub esi, 0xffffff80
push 0xa
push 0x46
lea eax, [ebp - 0x84]
push eax
push esi
call fcn.1001d9a0
mov esi, 0x1004ddb0
lea eax, [edi + 0x498]
push esi
push eax
call fcn.1001b7b0
add esp, 0x18
test eax, eax
lea eax, [ebp - 0x10]
push 0xffffffffffffffff
je 0x10011fc1
push 0x1004ddac
jmp 0x10011fc6
push 0x1004e18c
push 0xa
push eax
call fcn.1001b6b8
add esp, 0x10
lea eax, [edi + 0x4a2]
push esi
push eax
call fcn.1001b7b0
pop ecx
pop ecx
test eax, eax
lea eax, [ebp - 0x28]
push 0xffffffffffffffff
je 0x10011ff0
push 0x1004ddac
jmp 0x10011ff5
push 0x1004e18c
push 0xa
push eax
call fcn.1001b6b8
add esp, 0x10
lea eax, [edi + 0x4ac]
push esi
push eax
call fcn.1001b7b0
pop ecx
pop ecx
test eax, eax
lea eax, [ebp - 0x1c]
push 0xffffffffffffffff
je 0x1001201f
push 0x1004ddac
jmp 0x10012024
push 0x1004e18c
push 0xa
push eax
call fcn.1001b6b8
lea edx, [edi + 0x98]
add esp, 0x10
mov ecx, edx
lea esi, [ecx + 1]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x1001203a
sub ecx, esi
lea eax, [ebp - 0x1cc]
push 0xffffffffffffffff
mov esi, pe_nt_image_headers32
jne 0x10012059
push 0x1004bbb4
jmp 0x1001205a
push edx
push esi
push eax
call fcn.1001b6b8
add esp, 0x10
lea eax, [edi + 0x198]
push 0xffffffffffffffff
push eax
lea eax, [ebp - 0x6ec]
push esi
push eax
call fcn.1001b6b8
push 0xffffffffffffffff
lea eax, [edi + 0x298]
push eax
lea eax, [ebp - 0x8ec]
push 0x200
push eax
call fcn.1001b6b8
push 0x202
lea eax, [ebp - 0xaf0]
push eax
lea eax, [ebp - 0x8ec]
push eax
call fcn.100178f7
push 0xffffffffffffffff
lea eax, [ebp - 0xaf4]
mov edi, 0x420
push eax
lea eax, [ebp - 0x5ec]
push edi
push eax
call fcn.1001b6b8
push 0xffffffffffffffff
mov esi, 0x1004cf14
lea eax, [ebp - 0x5ec]
push esi
push edi
push eax
call fcn.1001a319
add esp, 0x4c
lea eax, [ebp - 0xcc]
push 0xffffffffffffffff
push eax
lea eax, [ebp - 0x5ec]
push edi
push eax
call fcn.1001a319
push 0xffffffffffffffff
push esi
lea eax, [ebp - 0x5ec]
push edi
push eax
call fcn.1001a319
push 0xffffffffffffffff
lea eax, [ebp - 0x84]
push eax
lea eax, [ebp - 0x5ec]
push edi
push eax
call fcn.1001a319
push 0xffffffffffffffff
push esi
lea eax, [ebp - 0x5ec]
push edi
push eax
call fcn.1001a319
add esp, 0x40
lea eax, [ebp - 0x1cc]
push 0xffffffffffffffff
push eax
lea eax, [ebp - 0x5ec]
push edi
push eax
call fcn.1001a319
push 0xffffffffffffffff
push esi
lea eax, [ebp - 0x5ec]
push edi
push eax
call fcn.1001a319
push 0xffffffffffffffff
lea eax, [ebp - 0xaf0]
push eax
lea eax, [ebp - 0x5ec]
push edi
push eax
call fcn.1001a319
push 0xffffffffffffffff
push esi
lea eax, [ebp - 0x5ec]
push edi
push eax
call fcn.1001a319
add esp, 0x40
lea eax, [ebp - 0x10]
push 0xffffffffffffffff
push eax
lea eax, [ebp - 0x5ec]
push edi
push eax
call fcn.1001a319
push 0xffffffffffffffff
push esi
lea eax, [ebp - 0x5ec]
push edi
push eax
call fcn.1001a319
push 0xffffffffffffffff
lea eax, [ebp - 0x6ec]
push eax
lea eax, [ebp - 0x5ec]
push edi
push eax
call fcn.1001a319
push 0xffffffffffffffff
push esi
lea eax, [ebp - 0x5ec]
push edi
push eax
call fcn.1001a319
add esp, 0x40
lea eax, [ebp - 0x28]
push 0xffffffffffffffff
push eax
lea eax, [ebp - 0x5ec]
push edi
push eax
call fcn.1001a319
push 0xffffffffffffffff
push esi
lea eax, [ebp - 0x5ec]
push edi
push eax
call fcn.1001a319
push 0xffffffffffffffff
lea eax, [ebp - 0x1c]
push eax
lea eax, [ebp - 0x5ec]
push edi
push eax
call fcn.1001a319
add esp, 0x30
lea eax, [ebp - 0xaf8]
mov esi, 0xf003f
mov edi, str.SOFTWAREIntersect_AllianceAuditServiceObjective_
push eax
push esi
push ebx
push edi
push reloc.OLEAUT32.dll_SysReAllocString
call dword [sym.imp.ADVAPI32.dll_RegOpenKeyExA]
test eax, eax
je 0x1001224d
lea eax, [ebp - 0xb00]
push eax
lea eax, [ebp - 0xaf8]
push eax
push ebx
push esi
push ebx
push ebx
push ebx
push edi
push reloc.OLEAUT32.dll_SysReAllocString
call dword [sym.imp.ADVAPI32.dll_RegCreateKeyExA]
test eax, eax
je 0x1001224d
push 2
pop eax
jmp 0x10012290
lea ecx, [ebp - 0x5ec]
lea edx, [ecx + 1]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x10012256
sub ecx, edx
lea eax, [ebp - 0x5ec]
push ecx
push eax
push 1
push ebx
lea eax, [ebp - 0x3c]
push eax
push dword [ebp - 0xaf8]
call dword [sym.imp.ADVAPI32.dll_RegSetValueExA]
push 4
test eax, eax
pop eax
push dword [ebp - 0xaf8]
cmovne ebx, eax
call dword [sym.imp.ADVAPI32.dll_RegCloseKey]
mov eax, ebx
mov ecx, dword [ebp - 4]
pop edi
pop esi
xor ecx, ebp
pop ebx
call fcn.1001890f
mov esp, ebp
pop ebp
ret