Function at 0x1d464f3
Capabilities:
Set registry value

Disassembly:
push ebp
lea ebp, [esp - 0x78]
sub esp, 0xec4
push ebx
push esi
push 0xd
mov esi, ecx
call fcn.01d45841
xor ebx, ebx
push 0x3ff
lea eax, [ebp - 0xa4b]
push ebx
push eax
mov byte [ebp - 0xa4c], bl
call sub.MSVCR100.dll_memset
lea eax, [ebp + 0x68]
push eax
push 0x400
lea eax, [ebp - 0xa4c]
push eax
lea eax, [esi + 0xb1]
push 0x20
push eax
call fcn.01d46cb6
add esp, 0x20
test eax, eax
jne 0x1d4654f
xor al, al
jmp 0x1d469e2
push edi
mov edi, dword [ebp + 0x68]
push edi
lea eax, [ebp - 0xa4c]
push eax
mov ecx, esi
call fcn.01d45811
test eax, eax
jne 0x1d4656d
xor al, al
jmp 0x1d469e1
dec edi
push edi
lea eax, [ebp - 0xe4c]
push eax
lea eax, [ebp - 0xa4c]
push eax
movzx eax, byte [esi + 0xa8]
lea ecx, [esi + 0x1e4]
push eax
call fcn.01d40d85
mov eax, dword [ebp + 0x68]
dec eax
push eax
lea eax, [ebp - 0xe4c]
push eax
lea ecx, [esi + 0xf00]
call fcn.01d46c79
test al, al
je 0x1d469df
mov al, byte [esi + 0x103c]
mov cl, byte [esi + 0x103d]
mov edi, dword [esi + 0xf0c]
mov edx, dword [esi + 0x1040]
xor al, 0x24
xor cl, 0xda
xor edi, 0x96c57313
mov dword [ebp + 0x70], edx
test dl, 4
je 0x1d465fe
mov edx, dword [esi + 0xf04]
xor edx, 0x9b6b4131
mov dword [esi + 0x147a], edx
mov edx, dword [esi + 0xf08]
xor edx, 0x87dab161
mov dword [esi + 0x147e], edx
test byte [ebp + 0x70], 8
je 0x1d4660a
mov dword [esi + 0x14c2], edi
test byte [ebp + 0x70], 0x40
je 0x1d4661c
mov byte [esi + 0x1468], al
mov byte [esi + 0x1469], cl
push 0x77
lea eax, [ebp - 0x24b]
push ebx
push eax
mov byte [ebp - 0x24c], bl
call sub.MSVCR100.dll_memset
lea eax, [ebp - 0x24c]
push eax
lea eax, [esi + 0x340]
push eax
call fcn.01d3dca3
lea eax, [ebp - 0x24c]
add esp, 0x14
lea edi, [eax + 1]
mov cl, byte [eax]
inc eax
cmp cl, bl
jne 0x1d46650
sub eax, edi
test byte [ebp + 0x70], 0x10
mov dword [ebp + 0x74], eax
je 0x1d466cc
lea edi, [esi + 0xf10]
push edi
lea eax, [esi + 0x3b8]
push 0x78
push eax
call dword [sym.imp.MSVCR100.dll_strcpy_s]
push 0x77
lea eax, [ebp - 0x1b]
push ebx
push eax
mov byte [ebp - 0x1c], bl
call sub.MSVCR100.dll_memset
lea eax, [ebp - 0x1c]
push eax
push edi
call fcn.01d3dca3
lea eax, [ebp - 0x1c]
add esp, 0x20
lea edi, [eax + 1]
mov cl, byte [eax]
inc eax
cmp cl, bl
jne 0x1d4669a
sub eax, edi
mov edi, eax
lea eax, [edi + 1]
push eax
lea eax, [ebp - 0x1c]
push eax
mov eax, dword [ebp + 0x74]
lea eax, [eax + esi + 0x1574]
push eax
call sub.MSVCR100.dll_memcpy
mov eax, dword [ebp + 0x74]
add esp, 0xc
lea edi, [eax + edi + 0x121]
jmp 0x1d46707
push 0x77
lea eax, [ebp - 0x1b]
push ebx
push eax
mov byte [ebp - 0x1c], bl
call sub.MSVCR100.dll_memset
lea eax, [ebp - 0x1c]
push eax
lea eax, [esi + 0x3b8]
push eax
call fcn.01d3dca3
lea eax, [ebp - 0x1c]
add esp, 0x14
lea edi, [eax + 1]
mov cl, byte [eax]
inc eax
cmp cl, bl
jne 0x1d466f4
mov ecx, dword [ebp + 0x74]
sub eax, edi
lea edi, [ecx + eax + 0x121]
test byte [ebp + 0x70], 0x20
je 0x1d46772
lea eax, [esi + 0xf88]
push eax
lea eax, [esi + 0x430]
push eax
call fcn.01d46beb
push 0xb3
lea eax, [ebp - 0x57]
push ebx
push eax
mov byte [ebp - 0x58], bl
call sub.MSVCR100.dll_memset
lea eax, [ebp - 0x58]
push eax
lea eax, [esi + 0xf88]
push eax
call fcn.01d3dca3
lea eax, [ebp - 0x58]
add esp, 0x1c
lea ecx, [eax + 1]
mov dl, byte [eax]
inc eax
cmp dl, bl
jne 0x1d4674b
sub eax, ecx
mov dword [ebp + 0x74], eax
inc eax
push eax
lea eax, [ebp - 0x58]
push eax
lea eax, [edi + esi + 0x1454]
push eax
call sub.MSVCR100.dll_memcpy
mov eax, dword [ebp + 0x74]
add esp, 0xc
jmp 0x1d467a6
push 0xb3
lea eax, [ebp - 0x57]
push ebx
push eax
mov byte [ebp - 0x58], bl
call sub.MSVCR100.dll_memset
lea eax, [ebp - 0x58]
push eax
lea eax, [esi + 0x430]
push eax
call fcn.01d3dca3
lea eax, [ebp - 0x58]
add esp, 0x14
lea ecx, [eax + 1]
mov dl, byte [eax]
inc eax
cmp dl, bl
jne 0x1d4679d
sub eax, ecx
push 0x77
lea edi, [edi + eax + 1]
lea eax, [ebp - 0x1d3]
push ebx
push eax
mov byte [ebp - 0x1d4], bl
call sub.MSVCR100.dll_memset
lea eax, [ebp - 0x1d4]
push eax
lea eax, [esi + 0x4e4]
push eax
call fcn.01d3dca3
lea eax, [ebp - 0x1d4]
add esp, 0x14
lea ecx, [eax + 1]
mov dl, byte [eax]
inc eax
cmp dl, bl
jne 0x1d467de
sub eax, ecx
mov dword [ebp + 0x74], eax
inc eax
push eax
lea eax, [ebp - 0x1d4]
push eax
lea eax, [edi + esi + 0x1454]
push eax
call sub.MSVCR100.dll_memcpy
mov eax, dword [ebp + 0x74]
push 0x77
lea edi, [edi + eax + 1]
lea eax, [ebp - 0x15b]
push ebx
push eax
mov byte [ebp - 0x15c], bl
call sub.MSVCR100.dll_memset
lea eax, [ebp - 0x15c]
push eax
lea eax, [esi + 0x55c]
push eax
call fcn.01d3dca3
lea eax, [ebp - 0x15c]
add esp, 0x20
lea ecx, [eax + 1]
mov dl, byte [eax]
inc eax
cmp dl, bl
jne 0x1d4683b
sub eax, ecx
mov dword [ebp + 0x74], eax
inc eax
push eax
lea eax, [ebp - 0x15c]
push eax
lea eax, [edi + esi + 0x1454]
push eax
call sub.MSVCR100.dll_memcpy
mov eax, dword [ebp + 0x74]
push 0x77
lea edi, [edi + eax + 1]
lea eax, [ebp - 0xe3]
push ebx
push eax
mov byte [ebp - 0xe4], bl
call sub.MSVCR100.dll_memset
lea eax, [ebp - 0xe4]
push eax
lea eax, [esi + 0x5d4]
push eax
call fcn.01d3dca3
lea eax, [ebp - 0xe4]
add esp, 0x20
lea ecx, [eax + 1]
mov dl, byte [eax]
inc eax
cmp dl, bl
jne 0x1d46898
sub eax, ecx
mov dword [ebp + 0x74], eax
inc eax
push eax
lea eax, [ebp - 0xe4]
push eax
lea eax, [edi + esi + 0x1454]
push eax
call sub.MSVCR100.dll_memcpy
mov eax, dword [ebp + 0x74]
lea eax, [eax + edi + 2]
push 0x3ff
mov dword [esi + 0x1854], eax
lea eax, [ebp - 0x64b]
push ebx
push eax
mov byte [ebp - 0x64c], bl
call sub.MSVCR100.dll_memset
mov ax, word [esi + 0x1854]
add esp, 0x18
dec ax
movzx eax, ax
push eax
lea eax, [ebp - 0x64c]
push eax
lea eax, [esi + 0x1454]
push eax
movzx eax, byte [esi + 0xa8]
push eax
lea ecx, [esi + 0x1e4]
call fcn.01d40d4e
mov eax, dword [esi + 0x1854]
lea edi, [eax - 1]
xor ecx, ecx
xor edx, edx
test edi, edi
je 0x1d46937
lea edi, [eax - 1]
mov dword [ebp + 0x74], edi
movsx edi, byte [ebp + edx - 0x64c]
add ecx, edi
inc edx
cmp edx, dword [ebp + 0x74]
jb 0x1d46927
mov byte [ebp + eax - 0x64d], cl
mov cl, byte [esi + 0xa9]
mov byte [ebp + eax - 0x64c], cl
mov cl, byte [esi + 0xaa]
mov byte [ebp + eax - 0x64b], cl
mov cl, byte [esi + 0xab]
mov byte [ebp + eax - 0x64a], cl
mov cl, byte [esi + 0xac]
mov byte [ebp + eax - 0x649], cl
mov eax, 0x1d6e6c8
sub eax, 0x57bd9b5f
push eax
lea ecx, [ebp - 0x6a]
mov dword [ebp + 0x5c], ebx
mov dword [ebp + 0x60], ebx
mov dword [ebp + 0x64], ebx
call fcn.01d0c2c9
push ebx
push ebx
push 0x2001f
push ebx
push ebx
push eax
push connect
lea ecx, [ebp + 0x5c]
call fcn.01d0c01b
neg eax
sbb al, al
inc al
je 0x1d469cf
mov eax, dword [esi + 0x1854]
add eax, 4
push eax
lea eax, [ebp - 0x64c]
push eax
push 3
push ebx
push str.DokeeStr5
push dword [ebp + 0x5c]
call dword [sym.imp.ADVAPI32.dll_RegSetValueExA]
lea ecx, [ebp + 0x5c]
call fcn.01d078f0
lea ecx, [ebp + 0x5c]
call fcn.01d078f0
mov al, 1
pop edi
pop esi
pop ebx
add ebp, 0x78
leave
ret