Function at 0x1006cd60
Capabilities:
Set registry value

Disassembly:
push ebp
mov ebp, esp
and esp, 0xfffffff8
mov eax, dword [0x100c67e8]
sub esp, 0x5c
push ebx
xor ebx, ebx
push esi
push edi
cmp eax, ebx
jne 0x1006cd9d
push 0x100c5a78
push 0xcc
call fcn.10085206
add esp, 8
cmp eax, ebx
je 0x1006cd96
mov esi, eax
call fcn.10064340
jmp 0x1006cd98
xor eax, eax
mov dword [0x100c67e8], eax
mov edi, eax
mov eax, dword [ebp + 8]
mov edx, dword [eax + 8]
mov dword [esp + 0x2c], edi
cmp edx, ebx
jne 0x1006cdb3
mov dword [esp + 0x20], ebx
jmp 0x1006cdd6
mov ecx, dword [edx + 0x10]
cmp ecx, ebx
jne 0x1006cdbe
xor eax, eax
jmp 0x1006cdd2
cmp dword [ecx + 0x34], ebx
sete al
cmp al, bl
sete al
movzx eax, al
neg eax
sbb eax, eax
and eax, ecx
mov dword [esp + 0x20], eax
cmp edx, ebx
jne 0x1006cde0
mov dword [esp + 0x28], ebx
jmp 0x1006ce03
mov ecx, dword [edx + 0xc]
cmp ecx, ebx
jne 0x1006cdeb
xor eax, eax
jmp 0x1006cdff
cmp dword [ecx + 0x34], ebx
sete al
cmp al, bl
sete al
movzx eax, al
neg eax
sbb eax, eax
and eax, ecx
mov dword [esp + 0x28], eax
mov dword [esp + 0x38], edi
mov dword [esp + 0x3c], ebx
mov dword [esp + 0x40], ebx
mov ecx, dword [edi + 0x38]
lea edx, [esp + 0x34]
push edx
mov dword [esp + 0x38], ecx
call fcn.10069b30
mov eax, dword [0x100bc66c]
mov ecx, dword [esp + 0x34]
mov dword [esp + 0x10], eax
mov dword [esp + 0xc], eax
xor eax, eax
cmp ecx, ebx
je 0x1006ce59
lea edx, [ecx + 0x1c]
cmp edx, ebx
je 0x1006ce47
mov eax, dword [edx + 0x10]
sub eax, dword [edx + 0xc]
sar eax, 3
lea edx, [ecx + 0x4c]
cmp edx, ebx
je 0x1006ce59
mov esi, dword [edx + 0x10]
sub esi, dword [edx + 0xc]
sar esi, 3
add eax, esi
xor edx, edx
cmp eax, ebx
sete dl
mov dword [esp + 0x18], ebx
mov eax, edx
mov dword [esp + 0x30], eax
cmp eax, ebx
jne 0x1006d038
xor eax, eax
mov dword [esp + 0x18], 1
cmp ecx, ebx
je 0x1006cea2
lea edx, [ecx + 0x1c]
cmp edx, ebx
je 0x1006ce90
mov eax, dword [edx + 0x10]
sub eax, dword [edx + 0xc]
sar eax, 3
lea edx, [ecx + 0x4c]
cmp edx, ebx
je 0x1006cea2
mov esi, dword [edx + 0x10]
sub esi, dword [edx + 0xc]
sar esi, 3
add eax, esi
lea edx, [ecx + 0x4c]
cmp edx, ebx
je 0x1006ceb4
mov ecx, dword [edx + 0x10]
sub ecx, dword [edx + 0xc]
sar ecx, 3
jmp 0x1006ceb6
xor ecx, ecx
cmp eax, ecx
jne 0x1006cf73
mov esi, dword [edi + 0x38]
mov eax, dword [esi + 0x5c]
sub eax, dword [esi + 0x58]
mov dword [esp + 0x18], 3
test eax, 0xfffffff8
jne 0x1006ceda
xor ecx, ecx
jmp 0x1006cef1
mov ecx, dword [esi + 0x5c]
sub ecx, dword [esi + 0x58]
sar ecx, 3
test ecx, ecx
ja 0x1006ceec
call fcn.100848cc
mov edx, dword [esi + 0x58]
mov ecx, dword [edx]
cmp dword [edi + 0x2c], ebx
je 0x1006d02b
mov eax, dword [edi + 0x2c]
mov edx, dword [eax]
push ecx
push eax
mov eax, dword [edx + 0xc]
call eax
mov esi, eax
cmp esi, ebx
je 0x1006d02b
mov ecx, dword [esi]
mov eax, dword [ecx + 0x98]
lea edx, [esp + 0x14]
push edx
push 0x100af2e4
push esi
mov dword [esp + 0x20], ebx
call eax
mov eax, dword [esp + 0x14]
cmp eax, ebx
je 0x1006cf3b
push eax
lea eax, [esp + 0x14]
call fcn.100035a0
mov ecx, dword [esi]
mov eax, dword [ecx + 0x98]
lea edx, [esp + 0x14]
push edx
push 0x100af30c
push esi
call eax
mov eax, dword [esp + 0x14]
cmp eax, ebx
je 0x1006d02b
push eax
lea eax, [esp + 0x10]
call fcn.100035a0
mov dword [esp + 0x14], 2
jmp 0x1006d169
mov esi, dword [ebp + 8]
mov ecx, dword [esi + 0x14]
push ecx
push ecx
call fcn.1004e950
add esp, 4
push eax
mov eax, 5
lea ecx, [esp + 0x1c]
call fcn.1004e840
mov edi, eax
lea eax, [esp + 0x10]
call fcn.10003840
mov eax, dword [esp + 0x14]
lea edx, [eax - 0xc]
cmp edx, 0x100bc65c
je 0x1006cfca
add eax, 0xfffffff4
push eax
call dword [sym.imp.KERNEL32.DLL_InterlockedDecrement]
test eax, eax
jg 0x1006cfca
mov eax, dword [esp + 0x14]
add eax, 0xfffffff4
push eax
call fcn.1008441c
add esp, 4
mov esi, dword [esi + 0x14]
call fcn.1004e950
push 5
call fcn.1004e8e0
cmp eax, ebx
jne 0x1006cfe4
mov ebx, 0x100a7638
jmp 0x1006cff1
mov ecx, dword [eax]
mov edx, dword [ecx + 8]
push ebx
push ebx
push esi
push eax
call edx
mov ebx, eax
lea edi, [esp + 0x14]
call fcn.100036f0
lea eax, [esp + 0xc]
call fcn.10003840
mov eax, dword [esp + 0x14]
lea ecx, [eax - 0xc]
cmp ecx, 0x100bc65c
je 0x1006d029
lea esi, [eax - 0xc]
push esi
call dword [sym.imp.KERNEL32.DLL_InterlockedDecrement]
test eax, eax
jg 0x1006d029
push esi
call fcn.1008441c
add esp, 4
xor ebx, ebx
mov dword [esp + 0x14], 2
jmp 0x1006d169
mov eax, 1
test byte [0x100c7d6c], al
jne 0x1006d069
or dword [0x100c7d6c], eax
call fcn.1004ecd0
push 0x100a3500
mov dword [0x100c7b34], ebx
mov dword [0x100c7b38], ebx
call fcn.1008416d
add esp, 4
call fcn.1004e130
push 0xb
mov eax, 0x100c7b14
call fcn.1004e8e0
cmp eax, ebx
jne 0x1006d085
mov ebx, 0x100a7638
jmp 0x1006d092
mov edx, dword [eax]
push ebx
push ebx
push ebx
push eax
mov eax, dword [edx + 4]
call eax
mov ebx, eax
lea edi, [esp + 0x14]
call fcn.100036f0
lea eax, [esp + 0x10]
call fcn.10003840
mov eax, dword [esp + 0x14]
lea ecx, [eax - 0xc]
cmp ecx, 0x100bc65c
je 0x1006d0ca
lea esi, [eax - 0xc]
push esi
call dword [sym.imp.KERNEL32.DLL_InterlockedDecrement]
test eax, eax
jg 0x1006d0ca
push esi
call fcn.1008441c
add esp, 4
mov eax, 1
test byte [0x100c7d6c], al
jne 0x1006d0fb
or dword [0x100c7d6c], eax
call fcn.1004ecd0
xor eax, eax
push 0x100a3500
mov dword [0x100c7b34], eax
mov dword [0x100c7b38], eax
call fcn.1008416d
add esp, 4
call fcn.1004e130
push 0xb
mov eax, 0x100c7b14
call fcn.1004e8e0
test eax, eax
jne 0x1006d117
mov ebx, 0x100a7638
jmp 0x1006d127
mov edx, dword [eax]
push 0
push 0
push 0
push eax
mov eax, dword [edx + 8]
call eax
mov ebx, eax
lea edi, [esp + 0x14]
call fcn.100036f0
lea eax, [esp + 0xc]
call fcn.10003840
mov eax, dword [esp + 0x14]
lea ecx, [eax - 0xc]
cmp ecx, 0x100bc65c
je 0x1006d15f
lea esi, [eax - 0xc]
push esi
call dword [sym.imp.KERNEL32.DLL_InterlockedDecrement]
test eax, eax
jg 0x1006d15f
push esi
call fcn.1008441c
add esp, 4
mov dword [esp + 0x14], 7
xor ebx, ebx
mov edx, dword [0x100bc66c]
xor eax, eax
mov dword [esp + 0x5c], edx
mov ecx, 0x40000000
lea edx, [esp + 0x44]
mov dword [esp + 0x58], 0x100ad260
mov dword [esp + 0x60], ebx
mov dword [esp + 0x64], ebx
mov dword [esp + 0x44], eax
mov dword [esp + 0x48], eax
mov dword [esp + 0x4c], eax
mov dword [esp + 0x50], eax
call fcn.10048790
mov edx, dword [esp + 0x34]
cmp edx, ebx
jne 0x1006d1b1
mov dword [esp + 0x1c], ebx
jmp 0x1006d1d9
lea ecx, [edx + 0x1c]
xor eax, eax
cmp ecx, ebx
je 0x1006d1c3
mov eax, dword [ecx + 0x10]
sub eax, dword [ecx + 0xc]
sar eax, 3
lea ecx, [edx + 0x4c]
cmp ecx, ebx
je 0x1006d1d5
mov edx, dword [ecx + 0x10]
sub edx, dword [ecx + 0xc]
sar edx, 3
add eax, edx
mov dword [esp + 0x1c], eax
mov eax, dword [0x100c67e8]
mov dword [esp + 0x24], ebx
cmp eax, ebx
jne 0x1006d20c
push 0x100c5a78
push 0xcc
call fcn.10085206
add esp, 8
cmp eax, ebx
je 0x1006d205
mov esi, eax
call fcn.10064340
jmp 0x1006d207
xor eax, eax
mov dword [0x100c67e8], eax
push eax
lea esi, [esp + 0x10]
lea edi, [esp + 0x14]
lea ebx, [esp + 0x28]
call fcn.10067c10
mov esi, dword [ebp + 8]
lea eax, [esi + 0x1c]
call fcn.1003b9f0
mov eax, dword [esp + 0x1c]
mov ecx, dword [esi + 0x14]
lea edx, [esp + 0x34]
push edx
mov dword [esp + 0x4c], eax
mov dword [esp + 0x54], ecx
mov dword [esp + 0x50], eax
call fcn.10068e90
cmp eax, 0xa
jge 0x1006d250
mov eax, 0xa
mov dword [esp + 0x44], eax
call fcn.10048950
mov eax, dword [esp + 0x5c]
push eax
push 0x10
lea ecx, [esp + 0x4c]
push ecx
push 0x100ad1e0
push 0x100ad1ec
call dword [sym.imp.KERNEL32.DLL_WritePrivateProfileStructW]
mov ebx, dword [sym.imp.SHLWAPI.DLL_SHSetValueW]
push 4
lea edx, [esp + 0x20]
push edx
push 4
push 0x100ad244
push 0x100ad214
push reloc.OLEAUT32.DLL_SysReAllocString
mov dword [esp + 0x34], 0
call ebx
lea eax, [esp + 0x34]
push eax
call fcn.10068e90
mov edi, eax
call fcn.10062bc0
mov esi, dword [esp + 0x20]
test esi, esi
je 0x1006d3c5
mov edi, dword [esp + 0x24]
mov ecx, dword [esp + 0x18]
mov eax, dword [esp + 0x14]
push edi
push 1
push ecx
mov ecx, esi
call fcn.10037e00
cmp edi, 1
jne 0x1006d2fa
call fcn.100125d0
push 4
lea edx, [esp + 0x28]
push edx
push 4
push 0x100a8874
push 0x100a8880
inc eax
push reloc.OLEAUT32.DLL_SysReAllocString
mov dword [esp + 0x3c], eax
call ebx
mov edx, dword [esp + 0xc]
cmp dword [edx - 0xc], 0
push ecx
lea ecx, [edx - 0xc]
mov eax, esp
jl 0x1006d315
push ecx
mov dword [eax], edx
call dword [sym.imp.KERNEL32.DLL_InterlockedIncrement]
jmp 0x1006d323
mov ecx, dword [0x100bc66c]
push edx
mov dword [eax], ecx
call fcn.100035a0
mov edx, dword [esp + 0x14]
cmp dword [edx - 0xc], 0
push ecx
lea ecx, [edx - 0xc]
mov eax, esp
jl 0x1006d33e
push ecx
mov dword [eax], edx
call dword [sym.imp.KERNEL32.DLL_InterlockedIncrement]
jmp 0x1006d34c
mov ecx, dword [0x100bc66c]
push edx
mov dword [eax], ecx
call fcn.100035a0
push esi
call fcn.10038300
mov ecx, dword [esp + 0x30]
mov edx, dword [esp + 0x2c]
mov eax, dword [edx + 0x38]
push ecx
mov ecx, esi
call fcn.10038470
mov eax, dword [esi + 0x6c]
test eax, eax
je 0x1006d3c5
mov edx, dword [eax]
mov edx, dword [edx + 0x108]
lea ecx, [esp + 0x18]
push ecx
push 1
push 0x1f6c
push eax
mov dword [esp + 0x28], 0
call edx
mov eax, dword [esp + 0x18]
test eax, eax
sete cl
test cl, cl
jne 0x1006d3b9
test eax, eax
jne 0x1006d3a6
push 0x80004003
call fcn.100830f0
mov ecx, dword [eax]
mov edx, dword [ecx + 0x5c]
push 0x10000000
push 0
push eax
call edx
mov eax, dword [esp + 0x18]
test eax, eax
je 0x1006d3c5
mov ecx, dword [eax]
mov edx, dword [ecx + 8]
push eax
call edx
mov ebx, dword [esp + 0x28]
test ebx, ebx
je 0x1006d43a
mov eax, dword [esp + 0x14]
mov ecx, ebx
call fcn.10042d20
mov edi, dword [esp + 0xc]
cmp dword [edi - 0xc], 0
push ecx
lea ecx, [edi - 0xc]
mov eax, esp
jl 0x1006d3f3
push ecx
mov dword [eax], edi
call dword [sym.imp.KERNEL32.DLL_InterlockedIncrement]
jmp 0x1006d401
mov ecx, dword [0x100bc66c]
push edi
mov dword [eax], ecx
call fcn.100035a0
mov esi, dword [esp + 0x14]
cmp dword [esi - 0xc], 0
push ecx
lea ecx, [esi - 0xc]
mov eax, esp
jl 0x1006d423
push ecx
mov dword [eax], esi
call dword [sym.imp.KERNEL32.DLL_InterlockedIncrement]
mov eax, ebx
call fcn.100451a0
jmp 0x1006d442
mov edx, dword [0x100bc66c]
push esi
mov dword [eax], edx
call fcn.100035a0
mov eax, ebx
call fcn.100451a0
jmp 0x1006d442
mov edi, dword [esp + 0xc]
mov esi, dword [esp + 0x10]
mov eax, dword [esp + 0x5c]
mov ebx, dword [sym.imp.KERNEL32.DLL_InterlockedDecrement]
lea ecx, [eax - 0xc]
mov dword [esp + 0x58], 0x100ad260
cmp ecx, 0x100bc65c
je 0x1006d479
add eax, 0xfffffff4
push eax
call ebx
test eax, eax
jg 0x1006d479
mov edx, dword [esp + 0x5c]
add edx, 0xfffffff4
push edx
call fcn.1008441c
add esp, 4
lea eax, [edi - 0xc]
cmp eax, 0x100bc65c
je 0x1006d496
add edi, 0xfffffff4
push edi
call ebx
test eax, eax
jg 0x1006d496
push edi
call fcn.1008441c
add esp, 4
lea ecx, [esi - 0xc]
cmp ecx, 0x100bc65c
je 0x1006d4b4
add esi, 0xfffffff4
push esi
call ebx
test eax, eax
jg 0x1006d4b4
push esi
call fcn.1008441c
add esp, 4
mov eax, dword [esp + 0x40]
test eax, eax
je 0x1006d4c4
mov edx, dword [eax]
push eax
mov eax, dword [edx + 8]
call eax
mov eax, dword [esp + 0x3c]
test eax, eax
je 0x1006d4d4
mov ecx, dword [eax]
mov edx, dword [ecx + 8]
push eax
call edx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 4