Function at 0x10073fe
Capabilities:
Set registry value

Disassembly:
mov edi, edi
push ebp
mov ebp, esp
mov eax, 0x1a48
call fcn.01007dd0
mov eax, dword [0x100ae94]
xor eax, ebp
mov dword [ebp - 4], eax
mov eax, dword [ebp + 8]
push esi
mov esi, dword [ebp + 0x10]
mov dword [ebp - 0x1a44], eax
mov eax, dword [ebp + 0x14]
push edi
xor edi, edi
mov dword [ebp - 0x1a40], eax
lea eax, [ebp - 0x1a24]
push esi
push eax
mov dword [ebp - 0x1a34], esi
mov dword [ebp - 0x1a48], edi
mov dword [ebp - 0x1a38], edi
mov dword [ebp - 0x1a28], edi
mov dword [ebp - 0x1a30], edi
mov dword [ebp - 0x1a3c], edi
mov dword [ebp - 0x1a2c], edi
call fcn.01004673
cmp eax, edi
pop ecx
pop ecx
jne 0x100797e
cmp dword [ebp + 0xc], 1
push ebx
push 3
pop ebx
mov dword [0x100afe0], ebx
mov dword [0x100aff8], ebx
mov dword [0x100b010], ebx
mov dword [0x100b028], ebx
mov dword [0x100b040], ebx
mov dword [0x100b058], ebx
jne 0x100755f
mov edi, dword [fcn.01001140]
lea eax, [ebp - 0x11b4]
mov dword [0x100afe8], eax
lea eax, [ebp - 0x1164]
mov dword [0x100b000], eax
lea eax, [ebp - 0x1114]
mov dword [0x100b018], eax
lea eax, [ebp - 0x1a20]
mov dword [0x100b030], eax
lea eax, [ebp - 0x1918]
mov dword [0x100b048], eax
push 0xa
lea eax, [ebp - 0x1c]
push eax
push dword [ebp - 0x1810]
call edi
add esp, 0xc
push 0xa
lea eax, [ebp - 0x1c]
push eax
add esi, 0xe88
push esi
call dword [0x1001084]
push 0xa
lea eax, [ebp - 0x1c]
push eax
push dword [ebp - 0x180c]
call edi
add esp, 0xc
push 0x10019fc
push 0xa
push esi
call fcn.01002b28
lea eax, [ebp - 0x1c]
push eax
push 0xa
push esi
call fcn.01002b28
push dword [ebp - 0x1a34]
mov dword [0x100b060], esi
push 1
call fcn.01003beb
pop ecx
xor esi, esi
pop ecx
xor eax, eax
movzx ecx, word [eax + 0x10023ec]
mov word [ebp + eax - 0x680], cx
inc eax
inc eax
cmp cx, si
jne 0x1007547
jmp 0x10075c7
lea eax, [esi + 0xc30]
push esi
push 9
mov dword [0x100afe8], 0x10023a0
mov dword [0x100b000], 0x1002350
mov dword [0x100b018], eax
mov dword [0x100b030], 0x1002320
mov dword [0x100b048], 0x1002308
mov dword [0x100b060], 0x10022fc
call fcn.01003beb
lea edi, [ebp - 0x680]
pop ecx
dec edi
pop ecx
dec edi
mov ax, word [edi + 2]
inc edi
inc edi
test ax, ax
jne 0x10075ae
push 5
pop ecx
mov esi, 0x10022e4
rep movsd dword es:[edi], dword [esi]
movsw word es:[edi], word [esi]
xor esi, esi
call fcn.01003f7e
cmp eax, 1
jne 0x100760b
mov edi, 0x105
lea eax, [ebp - 0x480]
push edi
push eax
call fcn.01005112
cmp eax, esi
pop ecx
pop ecx
jne 0x100797d
lea eax, [ebp - 0x480]
push edi
push eax
call fcn.0100506b
test eax, eax
pop ecx
pop ecx
jne 0x100760b
call dword [0x10010a8]
jmp 0x100797d
lea eax, [ebp - 0x480]
mov dword [0x100aec8], eax
lea eax, [ebp - 0x680]
push 0x206
mov dword [0x100b1c8], eax
lea eax, [ebp - 0x272]
push esi
push eax
mov dword [0x100aec0], ebx
mov dword [0x100b1c0], ebx
mov word [ebp - 0x274], si
call fcn.01007dbe
add esp, 0xc
lea eax, [ebp - 0x1a48]
push eax
lea eax, [ebp - 0x274]
mov edi, 0x104
push eax
mov dword [ebp - 0x1a48], edi
call dword [0x100109c]
test eax, eax
jne 0x1007681
push edi
lea eax, [ebp - 0x480]
push eax
lea eax, [ebp - 0x274]
push eax
call dword [0x1001084]
mov eax, dword [ebp - 0x1a34]
add eax, 0x820
mov edx, 0x10016c0
mov ecx, eax
mov di, word [ecx]
cmp di, word [edx]
jne 0x10076b9
cmp di, si
je 0x10076b5
mov di, word [ecx + 2]
cmp di, word [edx + 2]
jne 0x10076b9
add ecx, 4
add edx, 4
cmp di, si
jne 0x1007693
xor ecx, ecx
jmp 0x10076be
sbb ecx, ecx
sbb ecx, 0xffffffff
cmp ecx, esi
je 0x100770d
lea edi, [ebp - 0x274]
dec edi
dec edi
mov cx, word [edi + 2]
inc edi
inc edi
cmp cx, si
jne 0x10076ca
mov esi, 0x10014b0
movsd dword es:[edi], dword [esi]
mov edx, eax
mov cx, word [eax]
inc eax
inc eax
test cx, cx
jne 0x10076dd
sub eax, edx
lea edi, [ebp - 0x274]
dec edi
dec edi
mov cx, word [edi + 2]
inc edi
inc edi
test cx, cx
jne 0x10076f1
mov ecx, eax
shr ecx, 2
mov esi, edx
rep movsd dword es:[edi], dword [esi]
mov ecx, eax
and ecx, ebx
rep movsb byte es:[edi], byte [esi]
xor esi, esi
cmp dword [ebp + 0xc], 1
lea eax, [ebp - 0x274]
mov dword [0x100b328], ebx
mov dword [0x100b118], ebx
mov ebx, dword [ebp - 0x1a34]
mov dword [0x100b330], eax
mov dword [0x100b120], 0x10022e0
jne 0x1007749
lea eax, [ebp - 0x1a24]
push eax
push ebx
call fcn.010034e1
pop ecx
pop ecx
lea eax, [ebp - 0xa94]
push 0x105
push eax
call fcn.01005699
cmp eax, esi
pop ecx
pop ecx
jne 0x100797d
xor eax, eax
movzx ecx, word [eax + 0x10015bc]
mov word [ebp + eax - 0x888], cx
inc eax
inc eax
cmp cx, si
jne 0x1007766
lea eax, [ebp - 0xa94]
push eax
push 0x104
lea eax, [ebp - 0x888]
push eax
call fcn.01002b28
lea eax, [ebp - 0x1a28]
push eax
push 0x1002708
lea eax, [ebp - 0x888]
push eax
call dword [0x100b508]
mov edi, eax
cmp edi, esi
jl 0x1007899
cmp dword [ebp + 0xc], 1
mov eax, dword [ebp - 0x1a28]
mov ecx, dword [eax]
lea edx, [ebp - 0x1a38]
push edx
lea edx, [ebx + 0x410]
jne 0x10077db
push 0x1f
push 0x100a760
jmp 0x10077e2
push 0x12
push 0x100ad28
push edx
push eax
call dword [ecx + 0x18]
mov edi, eax
cmp edi, esi
jge 0x1007820
and eax, 0xffff
cmp eax, 0x1392
jne 0x1007899
mov eax, dword [ebp - 0x1a28]
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
push ebx
push dword [ebp + 0xc]
push dword [ebp - 0x1a44]
call fcn.01006fbf
add esp, 0xc
jmp 0x100797d
mov eax, dword [ebp - 0x1a38]
mov ecx, dword [eax]
lea edx, [ebp - 0x1a30]
push edx
push 0x1002728
push eax
call dword [ecx]
mov edi, eax
cmp edi, esi
jl 0x1007899
push esi
push 1
push dword [ebp - 0x1a40]
push esi
push esi
push esi
push esi
push 0x10040000
push dword [ebp - 0x1a30]
call fcn.01005180
mov edi, eax
add esp, 0x24
cmp edi, esi
jne 0x1007899
mov eax, dword [ebp - 0x1a30]
mov ecx, dword [eax]
lea edx, [ebp - 0x1a3c]
push edx
push eax
call dword [ecx + 0x24]
mov edi, eax
cmp edi, esi
jne 0x1007899
mov eax, dword [ebp - 0x1a3c]
cmp eax, esi
je 0x10078ad
lea edx, [ebp - 0x6c]
sub edx, eax
movzx ecx, word [eax]
mov word [edx + eax], cx
inc eax
inc eax
cmp cx, si
jne 0x100788b
cmp dword [ebp - 0x1a3c], esi
je 0x10078ad
push dword [ebp - 0x1a3c]
call dword [0x100116c]
mov eax, dword [ebp - 0x1a30]
cmp eax, esi
je 0x10078bd
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov eax, dword [ebp - 0x1a38]
cmp eax, esi
je 0x10078cd
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov eax, dword [ebp - 0x1a28]
cmp eax, esi
je 0x10078dd
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
cmp edi, esi
jne 0x100797b
push ebx
push 1
mov dword [ebp - 0x1a2c], esi
call fcn.010033b4
pop ecx
pop ecx
lea eax, [ebp - 0x1a2c]
push eax
push 2
push esi
lea eax, [ebx + 0x618]
push eax
push dword [ebp - 0x1a44]
call dword [fcn.01001018]
mov edi, eax
cmp edi, esi
jne 0x1007967
lea eax, [ebp - 0x6c]
lea edx, [eax + 2]
mov cx, word [eax]
inc eax
inc eax
cmp cx, si
jne 0x100791e
sub eax, edx
sar eax, 1
add eax, eax
push eax
lea eax, [ebp - 0x6c]
push eax
push 1
push esi
push 0x10015a4
push dword [ebp - 0x1a2c]
call dword [0x100101c]
mov edi, eax
cmp edi, esi
jne 0x1007967
mov eax, dword [ebp - 0x1a40]
cmp eax, esi
jne 0x100795c
mov eax, str.LocalSystem
push ebx
push eax
call fcn.0100417e
pop ecx
pop ecx
mov edi, eax
cmp dword [ebp - 0x1a2c], esi
je 0x100797b
push dword [ebp - 0x1a2c]
call dword [fcn.01001010]
mov eax, edi
pop ebx
mov ecx, dword [ebp - 4]
pop edi
xor ecx, ebp
pop esi
call fcn.01007a04
leave
ret