Function at 0x104e9ff
Capabilities:
Set registry value

Disassembly:
push 0x58
mov eax, 0x10cfde8
call fcn.010b534f
xor esi, esi
mov dword [ebp - 0x18], 0x1001fd0
mov dword [ebp - 0x14], esi
mov edi, dword [ebp + 0xc]
cmp dword [edi + 0x18], 8
mov dword [ebp - 4], esi
jb 0x104ea28
mov eax, dword [edi + 4]
jmp 0x104ea2b
lea eax, [edi + 4]
lea ecx, [ebp - 0x14]
push ecx
push 2
push esi
push eax
push dword [ebp + 8]
call dword [sym.imp.ADVAPI32.dll_RegOpenKeyExW]
mov dword [ebp - 0x10], eax
cmp eax, esi
je 0x104eb65
push esi
push 7
lea ecx, [ebp - 0x2c]
call fcn.01033bfc
xor ebx, ebx
inc ebx
push 0x1011ef0
lea ecx, [ebp - 0x2c]
mov byte [ebp - 4], bl
call fcn.01033c5d
push dword [ebp - 0x10]
lea eax, [ebp - 0x64]
push eax
call fcn.0103e9b9
push eax
lea eax, [ebp - 0x48]
push 0x1002328
push eax
mov byte [ebp - 4], 2
call fcn.01033a74
add esp, 0xc
push eax
lea ecx, [ebp - 0x28]
mov byte [ebp - 4], 3
call fcn.01033bb7
push esi
push ebx
lea ecx, [ebp - 0x48]
call fcn.01032f16
push esi
push ebx
lea ecx, [ebp - 0x64]
mov byte [ebp - 4], bl
call fcn.01032f16
push dword [ebp + 8]
lea eax, [ebp - 0x48]
push eax
call fcn.0103c59a
push eax
lea eax, [ebp - 0x64]
push 0x1002314
push eax
mov byte [ebp - 4], 4
call fcn.01033a74
add esp, 0xc
push eax
lea ecx, [ebp - 0x28]
mov byte [ebp - 4], 5
call fcn.01033bb7
push esi
push ebx
lea ecx, [ebp - 0x64]
call fcn.01032f16
push esi
push ebx
lea ecx, [ebp - 0x48]
mov byte [ebp - 4], bl
call fcn.01032f16
push edi
lea eax, [ebp - 0x64]
push 0x1002304
push eax
call fcn.01033a74
add esp, 0xc
push eax
lea ecx, [ebp - 0x28]
mov byte [ebp - 4], 6
call fcn.01033bb7
push esi
push ebx
lea ecx, [ebp - 0x64]
mov byte [ebp - 4], bl
call fcn.01032f16
push dword [ebp + 0x10]
push 0x10022f4
lea eax, [ebp - 0x64]
push eax
call fcn.01033a74
add esp, 0xc
push eax
lea ecx, [ebp - 0x28]
mov byte [ebp - 4], 7
call fcn.01033bb7
mov byte [ebp - 4], bl
push esi
push ebx
lea ecx, [ebp - 0x64]
call fcn.01032f16
lea eax, [ebp - 0x2c]
push eax
lea ecx, [ebp - 0x40]
call fcn.010907af
push 0x10de07c
lea eax, [ebp - 0x40]
push eax
call fcn.010b4e4c
mov edi, dword [ebp + 0x10]
cmp dword [edi + 0x18], 8
mov ecx, dword [ebp + 0x14]
mov eax, dword [ecx + 0x14]
jb 0x104eb79
mov edx, dword [edi + 4]
jmp 0x104eb7c
lea edx, [edi + 4]
lea eax, [eax + eax + 2]
push eax
push ecx
lea ecx, [ebp + 0xb]
mov dword [ebp + 0x10], edx
call fcn.0104e44b
push eax
xor ebx, ebx
inc ebx
push ebx
push esi
push dword [ebp + 0x10]
push dword [ebp - 0x14]
call dword [sym.imp.ADVAPI32.dll_RegSetValueExW]
mov dword [ebp - 0x10], eax
cmp eax, esi
je 0x104ecab
push esi
push 7
lea ecx, [ebp - 0x2c]
call fcn.01033bfc
push 0x1011e78
lea ecx, [ebp - 0x2c]
mov byte [ebp - 4], 8
call fcn.01033c5d
push dword [ebp - 0x10]
lea eax, [ebp - 0x48]
push eax
call fcn.0103e9b9
push eax
lea eax, [ebp - 0x64]
push 0x1011e58
push eax
mov byte [ebp - 4], 9
call fcn.01033a74
add esp, 0xc
push eax
lea ecx, [ebp - 0x28]
mov byte [ebp - 4], 0xa
call fcn.01033bb7
push esi
push ebx
lea ecx, [ebp - 0x64]
call fcn.01032f16
push esi
push ebx
lea ecx, [ebp - 0x48]
mov byte [ebp - 4], 8
call fcn.01032f16
push dword [ebp + 8]
lea eax, [ebp - 0x48]
push eax
call fcn.0103c59a
push eax
lea eax, [ebp - 0x64]
push 0x1002314
push eax
mov byte [ebp - 4], 0xb
call fcn.01033a74
add esp, 0xc
push eax
lea ecx, [ebp - 0x28]
mov byte [ebp - 4], 0xc
call fcn.01033bb7
push esi
push ebx
lea ecx, [ebp - 0x64]
call fcn.01032f16
push esi
push ebx
lea ecx, [ebp - 0x48]
mov byte [ebp - 4], 8
call fcn.01032f16
push dword [ebp + 0xc]
lea eax, [ebp - 0x64]
push 0x1002304
push eax
call fcn.01033a74
add esp, 0xc
push eax
lea ecx, [ebp - 0x28]
mov byte [ebp - 4], 0xd
call fcn.01033bb7
push esi
push ebx
lea ecx, [ebp - 0x64]
mov byte [ebp - 4], 8
call fcn.01032f16
push edi
push 0x10022f4
lea eax, [ebp - 0x64]
push eax
call fcn.01033a74
add esp, 0xc
push eax
lea ecx, [ebp - 0x28]
mov byte [ebp - 4], 0xe
call fcn.01033bb7
mov byte [ebp - 4], 8
jmp 0x104eb41
push dword [ebp - 0x14]
call dword [sym.imp.ADVAPI32.dll_RegFlushKey]
mov dword [ebp - 0x10], eax
cmp eax, esi
je 0x104edc0
push esi
push 7
lea ecx, [ebp - 0x2c]
call fcn.01033bfc
push 0x1011de0
lea ecx, [ebp - 0x2c]
mov byte [ebp - 4], 0xf
call fcn.01033c5d
push dword [ebp - 0x10]
lea eax, [ebp - 0x48]
push eax
call fcn.0103e9b9
push eax
lea eax, [ebp - 0x64]
push 0x1011dc0
push eax
mov byte [ebp - 4], 0x10
call fcn.01033a74
add esp, 0xc
push eax
lea ecx, [ebp - 0x28]
mov byte [ebp - 4], 0x11
call fcn.01033bb7
push esi
push ebx
lea ecx, [ebp - 0x64]
call fcn.01032f16
push esi
push ebx
lea ecx, [ebp - 0x48]
mov byte [ebp - 4], 0xf
call fcn.01032f16
push dword [ebp + 8]
lea eax, [ebp - 0x48]
push eax
call fcn.0103c59a
push eax
lea eax, [ebp - 0x64]
push 0x1002314
push eax
mov byte [ebp - 4], 0x12
call fcn.01033a74
add esp, 0xc
push eax
lea ecx, [ebp - 0x28]
mov byte [ebp - 4], 0x13
call fcn.01033bb7
push esi
push ebx
lea ecx, [ebp - 0x64]
call fcn.01032f16
push esi
push ebx
lea ecx, [ebp - 0x48]
mov byte [ebp - 4], 0xf
call fcn.01032f16
push dword [ebp + 0xc]
lea eax, [ebp - 0x64]
push 0x1002304
push eax
call fcn.01033a74
add esp, 0xc
push eax
lea ecx, [ebp - 0x28]
mov byte [ebp - 4], 0x14
call fcn.01033bb7
push esi
push ebx
lea ecx, [ebp - 0x64]
mov byte [ebp - 4], 0xf
call fcn.01032f16
push edi
push 0x10022f4
lea eax, [ebp - 0x64]
push eax
call fcn.01033a74
add esp, 0xc
push eax
lea ecx, [ebp - 0x28]
mov byte [ebp - 4], 0x15
call fcn.01033bb7
mov byte [ebp - 4], 0xf
jmp 0x104eb41
lea ecx, [ebp - 0x18]
mov dword [ebp - 0x18], 0x1001fd0
call fcn.0103431b
call fcn.010b543b
ret 0x10