Function at 0x101f704
Capabilities:
Set registry value

Disassembly:
push 0xad0
mov eax, 0x10304be
call fcn.0102ada8
mov eax, dword [ebp + 0xc]
mov dword [ebp - 0xab0], eax
mov eax, dword [ebp + 0x10]
mov dword [ebp - 0xad0], eax
mov eax, dword [ebp + 0x14]
mov dword [ebp - 0xacc], eax
mov eax, dword [ebp + 0x18]
mov edi, ecx
mov ecx, dword [ebp + 8]
xor ebx, ebx
mov dword [ebp - 0xaa8], ecx
mov dword [ebp - 0xadc], eax
mov dword [ebp - 0xaa0], 1
cmp eax, ebx
jne 0x101f76e
push 0x1007618
push ebx
push 0x10
push 0x1035128
call fcn.0102c6ab
mov eax, 0x80004003
jmp 0x101fc85
mov dword [eax], ebx
cmp dword [edi + 8], ebx
je 0x101fc6e
cmp dword [edi + 0xc], ebx
je 0x101fc6e
cmp word [ecx], 2
je 0x101f7f2
push 5
pop ecx
push 0x7ee
lea eax, [ebp - 0xa08]
push ebx
mov esi, 0x1007600
lea edi, [ebp - 0xa1c]
push eax
rep movsd dword es:[edi], dword [esi]
call sub.msvcrt.dll_memset
add esp, 0xc
push 2
push ebx
push ebx
push 0x401
lea eax, [ebp - 0xa1c]
push eax
push 0x10
push dword [ebp - 0xaa8]
call dword [sym.imp.WS2_32.dll_GetNameInfoW]
lea eax, [ebp - 0xa1c]
push eax
push 0x1007578
push 4
push 2
push 0x1035128
call fcn.0102c6ab
add esp, 0x14
mov eax, 0x80004005
jmp 0x101fc88
mov eax, dword [edi + 8]
mov ecx, dword [eax]
mov dword [ebp - 0xad4], ecx
mov ecx, dword [edi + 0xc]
mov edx, dword [ecx]
mov dword [ebp - 0xad8], edx
mov ecx, dword [ecx + 8]
mov eax, dword [eax + 8]
push ecx
push eax
push 0x10074e8
push 5
mov esi, 0x1035128
jmp 0x101f8a6
mov ecx, dword [edi + 0xc]
lea eax, [ebp - 0xad8]
push eax
call fcn.0102fe10
mov dword [ebp - 0xaac], eax
cmp eax, ebx
je 0x101fc66
push 0x80
lea eax, [ebp - 0xa9c]
push ebx
push eax
call sub.msvcrt.dll_memset
add esp, 0xc
lea eax, [ebp - 0xa9c]
push eax
push dword [ebp - 0xaa4]
call fcn.0101f4fb
cmp eax, ebx
jl 0x101f896
push 2
pop ecx
cmp word [ebp - 0xa9c], cx
jne 0x101f896
mov eax, dword [ebp - 0xaa8]
mov eax, dword [eax + 4]
cmp dword [ebp - 0xa98], eax
je 0x101f8d3
push eax
push dword [ebp - 0xa98]
push 0x1007410
push ecx
push ecx
jmp 0x101f8a8
movzx ecx, word [ebp - 0xa9c]
push ecx
push eax
push 0x1007318
push 2
push 2
push esi
call fcn.0102c6ab
mov ecx, dword [edi + 8]
add esp, 0x18
lea eax, [ebp - 0xad4]
push eax
call fcn.0102fe10
mov dword [ebp - 0xaa4], eax
cmp eax, ebx
jne 0x101f821
jmp 0x101fc66
push 0x1007268
push 4
push ecx
push esi
call fcn.0102c6ab
add esp, 0x10
mov dword [ebp - 0xaa0], ebx
mov dword [ebp - 0xac8], ebx
mov dword [ebp - 0xac4], ebx
mov dword [ebp - 0xac0], ebx
push 0x2001f
push 0x1002430
push 0x80000002
lea ecx, [ebp - 0xac8]
mov dword [ebp - 4], ebx
call fcn.0101c571
cmp eax, ebx
jne 0x101fc25
mov eax, dword [ebp - 0xaac]
push dword [eax]
mov dword [ebp - 0xaa8], ebx
push 0x10071e0
push 5
push 2
push esi
call fcn.0102c6ab
mov eax, dword [ebp - 0xaac]
mov eax, dword [eax]
add esp, 0x14
lea ecx, [ebp - 0xaa8]
push ecx
push eax
lea ecx, [ebp - 0xac8]
call fcn.0101f26b
cmp eax, ebx
je 0x101f992
jle 0x101f96c
and eax, 0xffff
or eax, 0x80070000
push eax
mov dword [ebp - 0xaa4], eax
mov eax, dword [ebp - 0xaac]
push dword [eax]
push 0x1007190
push 5
push 2
push esi
call fcn.0102c6ab
add esp, 0x18
jmp 0x101fc4a
push dword [ebp - 0xaa8]
mov edi, dword [ebp - 0xaac]
mov eax, dword [edi]
push eax
push 0x1007110
push ebx
push 0x10
push esi
call fcn.0102c6ab
xor eax, eax
add esp, 0x18
cmp dword [ebp - 0xaa8], 1
mov dword [ebp - 0xabc], ebx
sete al
mov dword [ebp - 0xab8], ebx
mov dword [ebp - 0xab4], ebx
mov dword [ebp - 0xaac], eax
push ebx
push ebx
push 0x2001f
push ebx
push ebx
push dword [ebp - 0xab0]
lea ecx, [ebp - 0xabc]
push dword [ebp - 0xac8]
mov byte [ebp - 4], 1
call fcn.0101c51c
cmp eax, ebx
je 0x101fa27
jle 0x101fa0a
and eax, 0xffff
or eax, 0x80070000
push eax
push 0x1007078
push ebx
push 0x10
push esi
mov dword [ebp - 0xaa0], eax
call fcn.0102c6ab
add esp, 0x14
jmp 0x101fc18
push dword [ebp - 0xaa4]
lea ecx, [ebp - 0xaa4]
call fcn.0101c9ba
push 1
push dword [ebp - 0xaa4]
lea ecx, [ebp - 0xabc]
push 0x1007060
mov byte [ebp - 4], 2
call fcn.0101c5d0
cmp eax, ebx
je 0x101fa87
jle 0x101fa64
and eax, 0xffff
or eax, 0x80070000
push eax
push dword [ebp - 0xaa4]
mov dword [ebp - 0xaa0], eax
push 0x1006f98
push ebx
push 0x10
push esi
call fcn.0102c6ab
add esp, 0x18
jmp 0x101fc0c
lea eax, [ebp - 0xab0]
push eax
lea eax, [ebp - 0x218]
push eax
push 0x1002100
lea ecx, [ebp - 0xabc]
mov dword [ebp - 0xab0], 0x104
call fcn.0101f2aa
test eax, eax
jne 0x101fb44
mov eax, dword [edi]
lea ecx, [ebp - 0x218]
push ecx
push eax
call dword [sym.imp.msvcrt.dll__wcsicmp]
pop ecx
pop ecx
test eax, eax
je 0x101fb44
lea eax, [ebp - 0xaa8]
push eax
lea eax, [ebp - 0x218]
push eax
lea ecx, [ebp - 0xac8]
call fcn.0101f26b
test eax, eax
jne 0x101fb44
cmp dword [ebp - 0xaa8], 2
jne 0x101fb44
push 4
lea eax, [ebp - 0xab0]
push eax
push 4
push ebx
lea eax, [ebp - 0x218]
push eax
push dword [ebp - 0xac8]
mov dword [ebp - 0xab0], 1
call dword [sym.imp.ADVAPI32.dll_RegSetValueExW]
test eax, eax
push 1
lea eax, [ebp - 0x218]
push eax
jne 0x101fb32
push 0x1006ed0
push 5
jmp 0x101fb39
push 0x1006e08
push 2
push 2
push esi
call fcn.0102c6ab
add esp, 0x18
mov eax, dword [edi]
push 1
push eax
push 0x1002100
lea ecx, [ebp - 0xabc]
call fcn.0101c5d0
cmp eax, ebx
je 0x101fb7c
jle 0x101fb69
and eax, 0xffff
or eax, 0x80070000
push eax
push dword [edi]
mov dword [ebp - 0xaa0], eax
push 0x1006d40
jmp 0x101fa76
push 1
push dword [ebp - 0xad0]
lea ecx, [ebp - 0xabc]
push 0x100262c
call fcn.0101c5d0
cmp eax, ebx
je 0x101fbbb
jle 0x101fba4
and eax, 0xffff
or eax, 0x80070000
push eax
push dword [ebp - 0xad0]
mov dword [ebp - 0xaa0], eax
push 0x1006c78
jmp 0x101fa76
push 1
push dword [ebp - 0xacc]
lea ecx, [ebp - 0xabc]
push 0x1006c50
call fcn.0101c5d0
cmp eax, ebx
je 0x101fbfa
jle 0x101fbe3
and eax, 0xffff
or eax, 0x80070000
push eax
push dword [ebp - 0xacc]
mov dword [ebp - 0xaa0], eax
push 0x1006b78
jmp 0x101fa76
cmp dword [ebp - 0xaac], ebx
je 0x101fc0c
mov eax, dword [edi]
mov ecx, dword [ebp - 0xadc]
mov dword [ecx], eax
push dword [ebp - 0xaa4]
call dword [sym.imp.OLEAUT32.dll_SysStringLen]
lea ecx, [ebp - 0xabc]
call fcn.0101c4fe
jmp 0x101fc5b
jle 0x101fc31
and eax, 0xffff
or eax, 0x80070000
push eax
push 0x1006ae8
push 5
push 2
push esi
mov dword [ebp - 0xaa4], eax
call fcn.0102c6ab
add esp, 0x14
cmp dword [edi + 0x40], ebx
jne 0x101fc5b
mov eax, dword [ebp - 0xaa4]
mov dword [ebp - 0xaa0], eax
lea ecx, [ebp - 0xac8]
call fcn.0101c4fe
mov eax, dword [ebp - 0xaa0]
jmp 0x101fc88
push 0x1006a60
push ebx
push 0x10
push 0x1035128
call fcn.0102c6ab
mov eax, 0x80070057
add esp, 0x10
call fcn.0102ae3a
ret 0x14