Function at 0x1006bcc0
Capabilities:
Set registry value

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x100d85ef
mov eax, dword fs:[0]
push eax
sub esp, 0x110
mov eax, dword [0x101120a8]
xor eax, ebp
mov dword [ebp - 0x10], eax
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov edi, ecx
cmp dword [edi + 0x14], 0
je 0x1006c1de
lea eax, [ebp - 0x11c]
push eax
call sym.XNewLookSch.dll_public:_static_class_LString___cdecl_LString::generateUUID_void_
mov esi, eax
lea eax, [ebp - 0x100]
mov dword [ebp - 4], 0
push eax
call sym.XNewLookSch.dll_public:_static_class_LString___cdecl_LString::generateUUID_void_
push edi
push eax
lea eax, [ebp - 0xe4]
mov byte [ebp - 4], 1
push eax
call sym.XNewLookSch.dll_class_LString___cdecl_operator_class_LString_const___class_LString_const__
push esi
push eax
lea eax, [ebp - 0xac]
mov byte [ebp - 4], 2
push eax
call sym.XNewLookSch.dll_class_LString___cdecl_operator_class_LString_const___class_LString_const__
add esp, 0x20
lea ecx, [ebp - 0xe4]
call sym.XNewLookSch.dll_public_virtual:_void___thiscall_LString::destructor_void_
lea ecx, [ebp - 0x100]
call sym.XNewLookSch.dll_public_virtual:_void___thiscall_LString::destructor_void_
lea ecx, [ebp - 0x11c]
mov byte [ebp - 4], 6
call sym.XNewLookSch.dll_public_virtual:_void___thiscall_LString::destructor_void_
lea ecx, [ebp - 0x90]
call sym.XNewLookSch.dll_public:_void___thiscall_LBsSamYi::constructor_void_
lea eax, [ebp - 0xac]
mov byte [ebp - 4], 7
push eax
lea eax, [ebp - 0x74]
push eax
lea ecx, [ebp - 0x90]
call sym.XNewLookSch.dll_public:_class_LString___thiscall_LBsSamYi::en_class_LString_const__
push 0x48
lea eax, [ebp - 0x58]
push 0
push eax
call fcn.1008da10
xor eax, eax
mov dword [ebp - 0x4c], vtable.LString.0
add esp, 0xc
mov dword [ebp - 0x38], 0
add dword [sym.XNewLookSch.dll_unsigned_int_LString::_ui_instance_count], 2
mov dword [ebp - 0x34], 7
mov word [ebp - 0x48], ax
mov dword [ebp - 0x30], vtable.LString.0
mov dword [ebp - 0x1c], eax
mov dword [ebp - 0x18], 7
mov word [ebp - 0x2c], ax
mov dword [ebp - 0x58], eax
mov byte [ebp - 0x54], al
push eax
push eax
push eax
push eax
push eax
push eax
push eax
push eax
push eax
push eax
push eax
push eax
push eax
mov byte [ebp - 4], 9
mov dword [ebp - 0x14], 0x200
push eax
push eax
push eax
push eax
push eax
push eax
push eax
push eax
push eax
push eax
push eax
push eax
push eax
push eax
push eax
push eax
push eax
push eax
push eax
push eax
push eax
push eax
push eax
push eax
push eax
push eax
push eax
push eax
push eax
push eax
push eax
push eax
push eax
push eax
push eax
push eax
sub esp, 0x34
lea ecx, [ebp - 0xc4]
push eax
push 0x65
push 0x74
push 0x71
push 0x72
push 0x72
push 0x4f
push 0x59
sub esp, 0x20
call fcn.1006d460
add esp, 0x138
xor ecx, ecx
mov dword [ebp - 0xe4], vtable.LString.0
mov dword [ebp - 0xd0], 0
mov dword [ebp - 0xcc], 7
mov word [ebp - 0xe0], cx
mov byte [ebp - 4], 0xb
lea ecx, [ebp - 0xe0]
inc dword [sym.XNewLookSch.dll_unsigned_int_LString::_ui_instance_count]
cmp ecx, eax
je 0x1006be8e
cmp dword [eax + 0x14], 8
mov ecx, eax
jb 0x1006be7f
mov ecx, dword [eax]
push dword [eax + 0x10]
push ecx
lea ecx, [ebp - 0xe0]
call fcn.10002b70
push 0x2001f
push connect
push 1
lea eax, [ebp - 0xe4]
mov byte [ebp - 4], 0xc
push eax
lea ecx, [ebp - 0x58]
call sym.XNewLookSch.dll_public:_bool___thiscall_LRegEdit::OpenDir_class_LString_const___bool__struct_HKEY_____unsigned_long_int_
lea ecx, [ebp - 0xe4]
call sym.XNewLookSch.dll_public_virtual:_void___thiscall_LString::destructor_void_
mov byte [ebp - 4], 9
mov edx, dword [ebp - 0xb0]
cmp edx, 8
jb 0x1006befc
mov ecx, dword [ebp - 0xc4]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x1006bef2
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x1006c1f9
push edx
push ecx
call fcn.1008bfe4
add esp, 8
xor eax, eax
mov dword [ebp - 0xc8], vtable.LString.0
mov dword [ebp - 0xb4], 0
mov dword [ebp - 0xb0], 7
mov word [ebp - 0xc4], ax
push 1
mov byte [ebp - 4], 0xd
lea ecx, [ebp - 0xc4]
inc dword [sym.XNewLookSch.dll_unsigned_int_LString::_ui_instance_count]
push 0x100f1674
call fcn.10002b70
mov byte [ebp - 4], 9
cmp byte [ebp - 0x54], 0
mov esi, dword [sym.imp.ADVAPI32.dll_RegSetValueExW]
mov edi, dword [sym.imp.KERNEL32.dll_GetLastError]
mov dword [ebp - 0x58], 0
je 0x1006bf91
cmp dword [ebp - 0x5c], 8
lea edx, [ebp - 0x70]
mov eax, dword [ebp - 0x60]
lea ecx, [ebp - 0xc4]
cmovae edx, dword [ebp - 0x70]
cmp dword [ebp - 0xb0], 8
cmovae ecx, dword [ebp - 0xc4]
add eax, eax
push eax
push edx
push 1
push 0
push ecx
push dword [ebp - 0x50]
call esi
call edi
mov dword [ebp - 0x58], eax
lea ecx, [ebp - 0xc8]
call sym.XNewLookSch.dll_public_virtual:_void___thiscall_LString::destructor_void_
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
sub esp, 0x34
lea ecx, [ebp - 0xc4]
push 0
push 0x65
push 0x74
push 0x71
push 0x72
push 0x72
push 0x4f
push 0x59
sub esp, 0x20
call fcn.1006d460
add esp, 0x138
xor ecx, ecx
mov dword [ebp - 0xe4], vtable.LString.0
mov dword [ebp - 0xd0], 0
mov dword [ebp - 0xcc], 7
mov word [ebp - 0xe0], cx
mov byte [ebp - 4], 0xf
lea ecx, [ebp - 0xe0]
inc dword [sym.XNewLookSch.dll_unsigned_int_LString::_ui_instance_count]
cmp ecx, eax
je 0x1006c079
cmp dword [eax + 0x14], 8
mov ecx, eax
jb 0x1006c06a
mov ecx, dword [eax]
push dword [eax + 0x10]
push ecx
lea ecx, [ebp - 0xe0]
call fcn.10002b70
push 0x2001f
push reloc.OLEAUT32.dll_SysReAllocString
push 1
lea eax, [ebp - 0xe4]
mov byte [ebp - 4], 0x10
push eax
lea ecx, [ebp - 0x58]
call sym.XNewLookSch.dll_public:_bool___thiscall_LRegEdit::OpenDir_class_LString_const___bool__struct_HKEY_____unsigned_long_int_
lea ecx, [ebp - 0xe4]
call sym.XNewLookSch.dll_public_virtual:_void___thiscall_LString::destructor_void_
mov byte [ebp - 4], 9
mov edx, dword [ebp - 0xb0]
cmp edx, 8
jb 0x1006c0e7
mov ecx, dword [ebp - 0xc4]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x1006c0dd
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x1006c1fe
push edx
push ecx
call fcn.1008bfe4
add esp, 8
xor eax, eax
mov dword [ebp - 0xc8], vtable.LString.0
mov dword [ebp - 0xb4], 0
mov dword [ebp - 0xb0], 7
mov word [ebp - 0xc4], ax
push 1
mov byte [ebp - 4], 0x11
lea ecx, [ebp - 0xc4]
inc dword [sym.XNewLookSch.dll_unsigned_int_LString::_ui_instance_count]
push 0x100f1674
call fcn.10002b70
cmp byte [ebp - 0x54], 0
mov dword [ebp - 0x58], 0
je 0x1006c16c
cmp dword [ebp - 0x5c], 8
lea edx, [ebp - 0x70]
mov eax, dword [ebp - 0x60]
lea ecx, [ebp - 0xc4]
cmovae edx, dword [ebp - 0x70]
cmp dword [ebp - 0xb0], 8
cmovae ecx, dword [ebp - 0xc4]
add eax, eax
push eax
push edx
push 1
push 0
push ecx
push dword [ebp - 0x50]
call esi
call edi
mov dword [ebp - 0x58], eax
lea ecx, [ebp - 0xc8]
call sym.XNewLookSch.dll_public_virtual:_void___thiscall_LString::destructor_void_
mov al, byte [ebp - 0x54]
mov esi, dword [sym.imp.ADVAPI32.dll_RegCloseKey]
mov dword [ebp - 0x58], 0
test al, al
je 0x1006c195
push dword [ebp - 0x50]
call esi
xor al, al
mov byte [ebp - 0x54], al
mov dword [ebp - 0x58], 0
test al, al
je 0x1006c1b0
push dword [ebp - 0x50]
call esi
mov dword [ebp - 0x58], 0
mov byte [ebp - 0x54], 0
lea ecx, [ebp - 0x30]
call sym.XNewLookSch.dll_public_virtual:_void___thiscall_LString::destructor_void_
lea ecx, [ebp - 0x4c]
call sym.XNewLookSch.dll_public_virtual:_void___thiscall_LString::destructor_void_
lea ecx, [ebp - 0x74]
call sym.XNewLookSch.dll_public_virtual:_void___thiscall_LString::destructor_void_
lea ecx, [ebp - 0x90]
call sym.XNewLookSch.dll_public_virtual:_void___thiscall_LString::destructor_void_
lea ecx, [ebp - 0xac]
call sym.XNewLookSch.dll_public_virtual:_void___thiscall_LString::destructor_void_
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
mov ecx, dword [ebp - 0x10]
xor ecx, ebp
call fcn.1008bffe
mov esp, ebp
pop ebp
ret
call fcn.10092486
call fcn.10092486
int3