Function at 0x10006a74
Capabilities:
Set registry value

Disassembly:
push ebp
mov ebp, esp
sub esp, 0xb00
mov eax, dword [0x100ba410]
xor eax, ebp
mov dword [ebp - 4], eax
push ebx
push esi
push edi
xor eax, eax
mov dword [ebp - 0xafc], edx
mov esi, 0xff
mov byte [ebp - 0x6ec], al
push esi
push eax
lea eax, [ebp - 0x6eb]
mov ebx, ecx
push eax
call fcn.10023400
xor eax, eax
push esi
push eax
mov byte [ebp - 0x1cc], al
lea eax, [ebp - 0x1cb]
push eax
call fcn.10023400
push 0x31
pop eax
mov word [ebp - 0xaf4], ax
xor eax, eax
push 0x45
push eax
mov byte [ebp - 0x84], al
lea eax, [ebp - 0x83]
push eax
call fcn.10023400
xor eax, eax
push 0x45
push eax
mov byte [ebp - 0xcc], al
lea eax, [ebp - 0xcb]
push eax
call fcn.10023400
xor eax, eax
push 0x41f
push eax
mov byte [ebp - 0x5ec], al
lea eax, [ebp - 0x5eb]
push eax
call fcn.10023400
mov esi, str.Objective
lea edi, [ebp - 0x3c]
xor eax, eax
push ebx
push str.Objective_d
movsd dword es:[edi], dword [esi]
or ebx, 0xffffffff
push ebx
push 0x14
movsd dword es:[edi], dword [esi]
movsw word es:[edi], word [esi]
lea edi, [ebp - 0x32]
stosd dword es:[edi], eax
stosd dword es:[edi], eax
stosw word es:[edi], ax
lea eax, [ebp - 0x3c]
push eax
call fcn.1001f145
mov edi, dword [ebp - 0xafc]
add esp, 0x50
push str.Critical
push edi
call fcn.1001f912
pop ecx
pop ecx
test eax, eax
jne 0x10006b61
push ebx
push str.4321
jmp 0x10006bb1
push str.Priority
push edi
call fcn.1001f912
pop ecx
pop ecx
test eax, eax
jne 0x10006b7a
push ebx
push 0x1009fbe4
jmp 0x10006bb1
push str.Warning
push edi
call fcn.1001f912
pop ecx
pop ecx
test eax, eax
jne 0x10006b93
push ebx
push 0x1009fbe8
jmp 0x10006bb1
push str.Information
push edi
call fcn.1001f912
pop ecx
pop ecx
push ebx
test eax, eax
jne 0x10006bac
push 0x1009fbec
jmp 0x10006bb1
push 0x1009ffcc
lea eax, [ebp - 0xaf4]
push 2
push eax
call fcn.10021c86
add esp, 0x10
lea eax, [edi + 0xc]
push str.Success
push eax
call fcn.1001e670
push 0x10
pop ecx
xor ebx, ebx
test eax, eax
lea eax, [edi + 0xc]
mov esi, ebx
push str.Failure
push eax
cmovne esi, ecx
call fcn.1001e670
add esp, 0x10
test eax, eax
je 0x10006bf4
add esi, 8
lea eax, [edi + 0xc]
push str.Info
push eax
call fcn.1001e670
pop ecx
pop ecx
test eax, eax
je 0x10006c0b
add esi, 2
lea eax, [edi + 0xc]
push str.Warn
push eax
call fcn.1001e670
pop ecx
pop ecx
test eax, eax
je 0x10006c20
inc esi
lea eax, [edi + 0xc]
push str.Error
push eax
call fcn.1001e670
pop ecx
pop ecx
push 4
pop ecx
test eax, eax
je 0x10006c39
add esi, ecx
lea eax, [edi + 0xc]
push str.Critical
push eax
call fcn.1001e670
pop ecx
pop ecx
push 0x20
pop ecx
test eax, eax
je 0x10006c52
add esi, ecx
lea eax, [edi + 0xc]
push str.Verbose
push eax
call fcn.1001e670
pop ecx
pop ecx
test eax, eax
je 0x10006c69
add esi, 0x40
lea eax, [edi + 0xc]
push str.ActivityTracing
push eax
call fcn.1001e670
pop ecx
pop ecx
test eax, eax
je 0x10006c80
sub esi, 0xffffff80
push 0xa
push 0x46
lea eax, [ebp - 0xcc]
push eax
push esi
call fcn.10021e9f
lea eax, [edi + 0x52]
push 0x1009fc20
push eax
call fcn.1001e670
test eax, eax
mov esi, ebx
push 0x20
pop eax
cmovne esi, eax
lea eax, [edi + 0x52]
push 0x1009fc24
push eax
call fcn.1001e670
add esp, 0x20
test eax, eax
je 0x10006cc1
add esi, 0x10
lea eax, [edi + 0x52]
push 0x1009fc28
push eax
call fcn.1001e670
pop ecx
pop ecx
test eax, eax
je 0x10006cd8
add esi, 8
lea eax, [edi + 0x52]
push 0x1009fc2c
push eax
call fcn.1001e670
pop ecx
pop ecx
test eax, eax
je 0x10006cef
add esi, 4
lea eax, [edi + 0x52]
push 0x1009fc30
push eax
call fcn.1001e670
pop ecx
pop ecx
test eax, eax
je 0x10006d06
add esi, 2
lea eax, [edi + 0x52]
push 0x1009fc34
push eax
call fcn.1001e670
pop ecx
pop ecx
test eax, eax
je 0x10006d1b
inc esi
lea eax, [edi + 0x52]
push 0x1009fc38
push eax
call fcn.1001e670
pop ecx
pop ecx
test eax, eax
je 0x10006d32
sub esi, 0xffffff80
push 0xa
push 0x46
lea eax, [ebp - 0x84]
push eax
push esi
call fcn.10021e9f
mov esi, 0x1009fbf0
lea eax, [edi + 0x498]
push esi
push eax
call fcn.1001e670
add esp, 0x18
test eax, eax
lea eax, [ebp - 0x10]
push 0xffffffffffffffff
je 0x10006d68
push 0x1009fbec
jmp 0x10006d6d
push 0x1009ffcc
push 0xa
push eax
call fcn.10021c86
add esp, 0x10
lea eax, [edi + 0x4a2]
push esi
push eax
call fcn.1001e670
pop ecx
pop ecx
test eax, eax
lea eax, [ebp - 0x28]
push 0xffffffffffffffff
je 0x10006d97
push 0x1009fbec
jmp 0x10006d9c
push 0x1009ffcc
push 0xa
push eax
call fcn.10021c86
add esp, 0x10
lea eax, [edi + 0x4ac]
push esi
push eax
call fcn.1001e670
pop ecx
pop ecx
test eax, eax
lea eax, [ebp - 0x1c]
push 0xffffffffffffffff
je 0x10006dc6
push 0x1009fbec
jmp 0x10006dcb
push 0x1009ffcc
push 0xa
push eax
call fcn.10021c86
lea edx, [edi + 0x98]
add esp, 0x10
mov ecx, edx
lea esi, [ecx + 1]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x10006de1
sub ecx, esi
lea eax, [ebp - 0x1cc]
push 0xffffffffffffffff
mov esi, 0x100
jne 0x10006e00
push 0x1009daac
jmp 0x10006e01
push edx
push esi
push eax
call fcn.10021c86
add esp, 0x10
lea eax, [edi + 0x198]
push 0xffffffffffffffff
push eax
lea eax, [ebp - 0x6ec]
push esi
push eax
call fcn.10021c86
push 0xffffffffffffffff
lea eax, [edi + 0x298]
push eax
lea eax, [ebp - 0x8ec]
push 0x200
push eax
call fcn.10021c86
add esp, 0x1c
lea edx, [ebp - 0xaf0]
lea ecx, [ebp - 0x8ec]
call fcn.10018bbc
push 0xffffffffffffffff
lea eax, [ebp - 0xaf4]
mov edi, 0x420
push eax
lea eax, [ebp - 0x5ec]
push edi
push eax
call fcn.10021c86
push 0xffffffffffffffff
mov esi, 0x1009ee1c
lea eax, [ebp - 0x5ec]
push esi
push edi
push eax
call fcn.1001f294
push 0xffffffffffffffff
lea eax, [ebp - 0xcc]
push eax
lea eax, [ebp - 0x5ec]
push edi
push eax
call fcn.1001f294
push 0xffffffffffffffff
push esi
lea eax, [ebp - 0x5ec]
push edi
push eax
call fcn.1001f294
add esp, 0x44
lea eax, [ebp - 0x84]
push 0xffffffffffffffff
push eax
lea eax, [ebp - 0x5ec]
push edi
push eax
call fcn.1001f294
push 0xffffffffffffffff
push esi
lea eax, [ebp - 0x5ec]
push edi
push eax
call fcn.1001f294
push 0xffffffffffffffff
lea eax, [ebp - 0x1cc]
push eax
lea eax, [ebp - 0x5ec]
push edi
push eax
call fcn.1001f294
push 0xffffffffffffffff
push esi
lea eax, [ebp - 0x5ec]
push edi
push eax
call fcn.1001f294
add esp, 0x40
lea eax, [ebp - 0xaf0]
push 0xffffffffffffffff
push eax
lea eax, [ebp - 0x5ec]
push edi
push eax
call fcn.1001f294
push 0xffffffffffffffff
push esi
lea eax, [ebp - 0x5ec]
push edi
push eax
call fcn.1001f294
push 0xffffffffffffffff
lea eax, [ebp - 0x10]
push eax
lea eax, [ebp - 0x5ec]
push edi
push eax
call fcn.1001f294
push 0xffffffffffffffff
push esi
lea eax, [ebp - 0x5ec]
push edi
push eax
call fcn.1001f294
add esp, 0x40
lea eax, [ebp - 0x6ec]
push 0xffffffffffffffff
push eax
lea eax, [ebp - 0x5ec]
push edi
push eax
call fcn.1001f294
push 0xffffffffffffffff
push esi
lea eax, [ebp - 0x5ec]
push edi
push eax
call fcn.1001f294
push 0xffffffffffffffff
lea eax, [ebp - 0x28]
push eax
lea eax, [ebp - 0x5ec]
push edi
push eax
call fcn.1001f294
push 0xffffffffffffffff
push esi
lea eax, [ebp - 0x5ec]
push edi
push eax
call fcn.1001f294
add esp, 0x40
lea eax, [ebp - 0x1c]
push 0xffffffffffffffff
push eax
lea eax, [ebp - 0x5ec]
push edi
push eax
call fcn.1001f294
add esp, 0x10
lea eax, [ebp - 0xaf8]
mov esi, 0xf003f
mov edi, str.SOFTWAREIntersect_AllianceAuditServiceObjective_
push eax
push esi
push ebx
push edi
push reloc.OLEAUT32.dll_SysReAllocString
call dword [sym.imp.ADVAPI32.dll_RegOpenKeyExA]
test eax, eax
je 0x10006ff0
lea eax, [ebp - 0xb00]
push eax
lea eax, [ebp - 0xaf8]
push eax
push ebx
push esi
push ebx
push ebx
push ebx
push edi
push reloc.OLEAUT32.dll_SysReAllocString
call dword [sym.imp.ADVAPI32.dll_RegCreateKeyExA]
test eax, eax
je 0x10006ff0
push 2
pop eax
jmp 0x10007033
lea ecx, [ebp - 0x5ec]
lea edx, [ecx + 1]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x10006ff9
sub ecx, edx
lea eax, [ebp - 0x5ec]
push ecx
push eax
push 1
push ebx
lea eax, [ebp - 0x3c]
push eax
push dword [ebp - 0xaf8]
call dword [sym.imp.ADVAPI32.dll_RegSetValueExA]
push 4
test eax, eax
pop eax
push dword [ebp - 0xaf8]
cmovne ebx, eax
call dword [sym.imp.ADVAPI32.dll_RegCloseKey]
mov eax, ebx
mov ecx, dword [ebp - 4]
pop edi
pop esi
xor ecx, ebp
pop ebx
call fcn.1001e010
mov esp, ebp
pop ebp
ret