Function at 0x1033b4e
Capabilities:
Set registry value

Disassembly:
push 0x14
push 0x1033f28
call fcn.010015a0
xor edi, edi
mov dword [ebp - 0x24], edi
mov dword [ebp - 0x1c], edi
mov dword [ebp - 0x20], edi
mov dword [ebp - 4], edi
mov eax, dword [0x10403c4]
mov eax, dword [eax + 0x7c]
push edi
lea ecx, [ebp - 0x24]
push ecx
push edi
push 0x20006
push edi
push edi
push edi
mov ebx, 0x1033e98
push ebx
push eax
mov esi, dword [sym.imp.API_MS_Win_Core_LocalRegistry_L1_1_0.dll_RegCreateKeyExW]
call esi
mov dword [ebp - 0x20], eax
cmp eax, edi
je 0x1033bd3
mov eax, dword [0x1040184]
cmp eax, 0x1040184
je 0x1033da1
test byte [eax + 0x1c], 0x20
je 0x1033da1
cmp byte [eax + 0x19], 2
jb 0x1033da1
push dword [ebp - 0x20]
push ebx
push 0x102605c
push 0xd
push dword [eax + 0x14]
push dword [eax + 0x10]
call fcn.0100d355
jmp 0x1033da1
mov ebx, dword [ebp + 8]
push edi
lea eax, [ebp - 0x1c]
push eax
push edi
push 0x20006
push edi
push edi
push edi
push dword [ebx + 4]
push dword [ebp - 0x24]
call esi
mov dword [ebp - 0x20], eax
cmp eax, edi
je 0x1033c26
mov eax, dword [0x1040184]
cmp eax, 0x1040184
je 0x1033da1
test byte [eax + 0x1c], 0x20
je 0x1033da1
cmp byte [eax + 0x19], 2
jb 0x1033da1
push dword [ebp - 0x20]
push dword [ebx + 4]
push 0x102605c
push 0xe
jmp 0x1033bc3
mov ecx, dword [ebx + 8]
cmp ecx, edi
je 0x1033c5b
mov eax, ecx
lea esi, [eax + 2]
mov dx, word [eax]
inc eax
inc eax
cmp dx, di
jne 0x1033c32
sub eax, esi
sar eax, 1
lea eax, [eax + eax + 2]
push eax
push ecx
push 1
push edi
push 0x1033e8c
push dword [ebp - 0x1c]
mov esi, dword [sym.imp.API_MS_Win_Core_LocalRegistry_L1_1_0.dll_RegSetValueExW]
call esi
jmp 0x1033c61
mov esi, dword [sym.imp.API_MS_Win_Core_LocalRegistry_L1_1_0.dll_RegSetValueExW]
mov ecx, dword [ebx + 0xc]
cmp ecx, edi
je 0x1033c92
mov eax, ecx
lea edx, [eax + 2]
mov dword [ebp + 8], edx
mov dx, word [eax]
inc eax
inc eax
cmp dx, di
jne 0x1033c70
sub eax, dword [ebp + 8]
sar eax, 1
lea eax, [eax + eax + 2]
push eax
push ecx
push 1
push edi
push 0x1033e80
push dword [ebp - 0x1c]
call esi
mov ecx, dword [ebx + 0x10]
cmp ecx, edi
je 0x1033cc3
mov eax, ecx
lea edx, [eax + 2]
mov dword [ebp + 8], edx
mov dx, word [eax]
inc eax
inc eax
cmp dx, di
jne 0x1033ca1
sub eax, dword [ebp + 8]
sar eax, 1
lea eax, [eax + eax + 2]
push eax
push ecx
push 1
push edi
push 0x1033e70
push dword [ebp - 0x1c]
call esi
mov ecx, dword [ebx + 0x14]
cmp ecx, edi
je 0x1033cf4
mov eax, ecx
lea edx, [eax + 2]
mov dword [ebp + 8], edx
mov dx, word [eax]
inc eax
inc eax
cmp dx, di
jne 0x1033cd2
sub eax, dword [ebp + 8]
sar eax, 1
lea eax, [eax + eax + 2]
push eax
push ecx
push 1
push edi
push 0x1033e54
push dword [ebp - 0x1c]
call esi
mov ecx, dword [ebx + 0x18]
cmp ecx, edi
je 0x1033d25
mov eax, ecx
lea edx, [eax + 2]
mov dword [ebp + 8], edx
mov dx, word [eax]
inc eax
inc eax
cmp dx, di
jne 0x1033d03
sub eax, dword [ebp + 8]
sar eax, 1
lea eax, [eax + eax + 2]
push eax
push ecx
push 1
push edi
push 0x1033e38
push dword [ebp - 0x1c]
call esi
push 4
lea eax, [ebx + 0x20]
push eax
push 4
push edi
push 0x1033e24
push dword [ebp - 0x1c]
call esi
push 4
lea eax, [ebx + 0x24]
push eax
push 4
push edi
push 0x1033e08
push dword [ebp - 0x1c]
call esi
push 4
lea eax, [ebx + 0x28]
push eax
push 4
push edi
push 0x1033df0
push dword [ebp - 0x1c]
call esi
push 4
lea eax, [ebx + 0x2c]
push eax
push 4
push edi
push 0x1033ddc
push dword [ebp - 0x1c]
call esi
mov eax, dword [0x1040184]
cmp eax, 0x1040184
je 0x1033da1
test byte [eax + 0x1c], 0x20
je 0x1033da1
cmp byte [eax + 0x19], 4
jb 0x1033da1
push dword [ebx + 0xc]
push dword [ebx + 8]
push 0x102605c
push 0xf
push dword [eax + 0x14]
push dword [eax + 0x10]
call fcn.01004481
mov dword [ebp - 4], 0xfffffffe
call fcn.01033dbf
mov eax, dword [ebp - 0x20]
call fcn.01001580
ret 4