Function at 0x10020430
Capabilities:
Set registry value

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x1006f429
mov eax, dword fs:[0]
push eax
sub esp, 0xa34
mov eax, dword [0x100f38c4]
xor eax, ebp
mov dword [ebp - 0x10], eax
push ebx
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
push 0x1f4
lea eax, [ebp - 0xa00]
push 0x4b
xor ebx, ebx
push eax
mov dword [ebp - 0xa04], ebx
call fcn.10056000
mov ecx, 0x1f4
xor eax, eax
lea edi, [ebp - 0x80c]
add esp, 0xc
rep stosd dword es:[edi], eax
mov eax, dword [0x100e8014]
mov dword [ebp - 4], ebx
mov dword [ebp - 0xa30], eax
mov dword [ebp - 0xa2c], eax
mov dword [ebp - 0xa3c], ebx
mov dword [ebp - 0xa38], ebx
mov dword [ebp - 0xa34], ebx
mov edi, dword [sym.imp.KERNEL32.dll_lstrlenW]
mov ecx, str.SYSTEMCurrentControlSetHardware_ProfilesCurrentSystemCurrentControlSetEnum
shr ecx, 0x10
mov byte [ebp - 4], 3
mov dword [ebp - 0xa08], eax
test ecx, ecx
jne 0x100204e3
mov edx, str.SYSTEMCurrentControlSetHardware_ProfilesCurrentSystemCurrentControlSetEnum
movzx eax, dx
push eax
lea ecx, [ebp - 0xa08]
call fcn.100015c0
jmp 0x1002051f
push str.SYSTEMCurrentControlSetHardware_ProfilesCurrentSystemCurrentControlSetEnum
call edi
mov esi, eax
test esi, esi
je 0x1002051f
push esi
lea ecx, [ebp - 0xa08]
call fcn.10001200
test eax, eax
je 0x1002051f
lea eax, [esi + esi]
lea ecx, [eax + 2]
cmp ecx, eax
jb 0x1002051f
mov edx, dword [ebp - 0xa08]
push eax
push str.SYSTEMCurrentControlSetHardware_ProfilesCurrentSystemCurrentControlSetEnum
push edx
call fcn.100558b0
add esp, 0xc
mov eax, dword [0x100e8014]
mov ecx, str.DirectSound
shr ecx, 0x10
mov byte [ebp - 4], 4
mov dword [ebp - 0xa28], eax
test ecx, ecx
jne 0x10020550
mov edx, str.DirectSound
movzx eax, dx
push eax
lea ecx, [ebp - 0xa28]
call fcn.100015c0
jmp 0x1002058c
push str.DirectSound
call edi
mov esi, eax
test esi, esi
je 0x1002058c
push esi
lea ecx, [ebp - 0xa28]
call fcn.10001200
test eax, eax
je 0x1002058c
lea eax, [esi + esi]
lea ecx, [eax + 2]
cmp ecx, eax
jb 0x1002058c
mov edx, dword [ebp - 0xa28]
push eax
push str.DirectSound
push edx
call fcn.100558b0
add esp, 0xc
mov eax, dword [0x100e8014]
mov ecx, str.Speaker_Type
shr ecx, 0x10
mov byte [ebp - 4], 5
mov dword [ebp - 0xa10], eax
test ecx, ecx
jne 0x100205bd
mov edx, str.Speaker_Type
movzx eax, dx
push eax
lea ecx, [ebp - 0xa10]
call fcn.100015c0
jmp 0x100205f9
push str.Speaker_Type
call edi
mov esi, eax
test esi, esi
je 0x100205f9
push esi
lea ecx, [ebp - 0xa10]
call fcn.10001200
test eax, eax
je 0x100205f9
lea eax, [esi + esi]
lea ecx, [eax + 2]
cmp ecx, eax
jb 0x100205f9
mov edx, dword [ebp - 0xa10]
push eax
push str.Speaker_Type
push edx
call fcn.100558b0
add esp, 0xc
push 0x10078b24
push 0x10078b18
lea ecx, [ebp - 0x3c]
mov byte [ebp - 4], 6
mov dword [ebp - 0xa40], 0x80004005
call fcn.10041770
cmp dword [ebp - 0x3c], 0xffffffff
mov edi, dword [sym.imp.KERNEL32.dll_InterlockedDecrement]
mov byte [ebp - 4], 7
je 0x10020a60
lea eax, [ebp - 0xa30]
push eax
lea ecx, [ebp - 0xa04]
push ecx
lea ecx, [ebp - 0x3c]
call fcn.100417b0
lea edx, [ebp - 0xa2c]
push edx
lea ecx, [ebp - 0x3c]
call fcn.10041870
push 0x10078b70
lea ecx, [ebp - 0xa0c]
call fcn.1001e050
push 0x10078b70
lea ecx, [ebp - 0xa18]
mov byte [ebp - 4], 8
call fcn.1001e050
lea eax, [ebp - 0xa18]
push eax
lea ecx, [ebp - 0xa08]
push ecx
lea edx, [ebp - 0xa20]
push edx
mov byte [ebp - 4], 9
call fcn.1001fa00
lea ecx, [ebp - 0xa30]
push ecx
push eax
lea edx, [ebp - 0xa24]
push edx
mov byte [ebp - 4], 0xa
call fcn.1001fa00
lea ecx, [ebp - 0xa0c]
push ecx
push eax
lea edx, [ebp - 0xa14]
push edx
mov byte [ebp - 4], 0xb
call fcn.1001fa00
lea ecx, [ebp - 0xa2c]
push ecx
push eax
lea edx, [ebp - 0xa1c]
push edx
mov byte [ebp - 4], 0xc
call fcn.1001fa00
push eax
lea ecx, [ebp - 0xa08]
mov byte [ebp - 4], 0xd
call fcn.1001e0e0
mov eax, dword [ebp - 0xa1c]
lea ecx, [eax - 0xc]
cmp ecx, dword [0x100e8010]
je 0x10020719
add eax, 0xfffffff4
push eax
call edi
test eax, eax
jg 0x10020719
mov eax, dword [ebp - 0xa1c]
add eax, 0xfffffff4
push eax
call fcn.10055c11
add esp, 4
mov eax, dword [ebp - 0xa14]
lea edx, [eax - 0xc]
cmp edx, dword [0x100e8010]
je 0x10020746
add eax, 0xfffffff4
push eax
call edi
test eax, eax
jg 0x10020746
mov eax, dword [ebp - 0xa14]
add eax, 0xfffffff4
push eax
call fcn.10055c11
add esp, 4
mov eax, dword [ebp - 0xa24]
lea ecx, [eax - 0xc]
cmp ecx, dword [0x100e8010]
je 0x10020773
add eax, 0xfffffff4
push eax
call edi
test eax, eax
jg 0x10020773
mov eax, dword [ebp - 0xa24]
add eax, 0xfffffff4
push eax
call fcn.10055c11
add esp, 4
mov eax, dword [ebp - 0xa20]
lea edx, [eax - 0xc]
cmp edx, dword [0x100e8010]
je 0x100207a0
add eax, 0xfffffff4
push eax
call edi
test eax, eax
jg 0x100207a0
mov eax, dword [ebp - 0xa20]
add eax, 0xfffffff4
push eax
call fcn.10055c11
add esp, 4
mov eax, dword [ebp - 0xa18]
lea ecx, [eax - 0xc]
cmp ecx, dword [0x100e8010]
je 0x100207c4
lea esi, [eax - 0xc]
push esi
call edi
test eax, eax
jg 0x100207c4
push esi
call fcn.10055c11
add esp, 4
mov eax, dword [ebp - 0xa0c]
lea edx, [eax - 0xc]
mov byte [ebp - 4], 7
cmp edx, dword [0x100e8010]
je 0x100207ec
lea esi, [eax - 0xc]
push esi
call edi
test eax, eax
jg 0x100207ec
push esi
call fcn.10055c11
add esp, 4
mov edi, dword [ebp - 0xa08]
push 0xf013f
push edi
push reloc.OLEAUT32.dll_SysReAllocString
lea ecx, [ebp - 0xa3c]
call fcn.10001f80
xor ebx, ebx
cmp eax, ebx
jne 0x10020a58
mov eax, dword [ebp - 0xa3c]
cmp eax, ebx
je 0x10020829
push eax
call dword [sym.imp.ADVAPI32.dll_RegCloseKey]
mov dword [ebp - 0xa3c], ebx
push 0x10078b70
lea ecx, [ebp - 0xa1c]
mov dword [ebp - 0xa38], ebx
call fcn.1001e050
push 0x10078b70
lea ecx, [ebp - 0xa14]
mov byte [ebp - 4], 0xe
call fcn.1001e050
lea eax, [ebp - 0xa14]
push eax
lea ecx, [ebp - 0xa08]
push ecx
lea edx, [ebp - 0xa24]
push edx
mov byte [ebp - 4], 0xf
call fcn.1001fa00
lea ecx, [ebp - 0xa28]
push ecx
push eax
lea edx, [ebp - 0xa20]
push edx
mov byte [ebp - 4], 0x10
call fcn.1001fa00
lea ecx, [ebp - 0xa1c]
push ecx
push eax
lea edx, [ebp - 0xa18]
push edx
mov byte [ebp - 4], 0x11
call fcn.1001fa00
lea ecx, [ebp - 0xa10]
push ecx
push eax
lea edx, [ebp - 0xa0c]
push edx
mov byte [ebp - 4], 0x12
call fcn.1001fa00
push eax
lea ecx, [ebp - 0xa08]
mov byte [ebp - 4], 0x13
call fcn.1001e0e0
mov eax, dword [ebp - 0xa0c]
mov edi, dword [sym.imp.KERNEL32.dll_InterlockedDecrement]
lea ecx, [eax - 0xc]
cmp ecx, dword [0x100e8010]
je 0x100208fc
add eax, 0xfffffff4
push eax
call edi
test eax, eax
jg 0x100208fc
mov eax, dword [ebp - 0xa0c]
add eax, 0xfffffff4
push eax
call fcn.10055c11
add esp, 4
mov eax, dword [ebp - 0xa18]
lea edx, [eax - 0xc]
cmp edx, dword [0x100e8010]
je 0x10020929
add eax, 0xfffffff4
push eax
call edi
test eax, eax
jg 0x10020929
mov eax, dword [ebp - 0xa18]
add eax, 0xfffffff4
push eax
call fcn.10055c11
add esp, 4
mov eax, dword [ebp - 0xa20]
lea ecx, [eax - 0xc]
cmp ecx, dword [0x100e8010]
je 0x10020956
add eax, 0xfffffff4
push eax
call edi
test eax, eax
jg 0x10020956
mov eax, dword [ebp - 0xa20]
add eax, 0xfffffff4
push eax
call fcn.10055c11
add esp, 4
mov eax, dword [ebp - 0xa24]
lea edx, [eax - 0xc]
cmp edx, dword [0x100e8010]
je 0x10020983
add eax, 0xfffffff4
push eax
call edi
test eax, eax
jg 0x10020983
mov eax, dword [ebp - 0xa24]
add eax, 0xfffffff4
push eax
call fcn.10055c11
add esp, 4
mov eax, dword [ebp - 0xa14]
lea ecx, [eax - 0xc]
cmp ecx, dword [0x100e8010]
je 0x100209a7
lea esi, [eax - 0xc]
push esi
call edi
test eax, eax
jg 0x100209a7
push esi
call fcn.10055c11
add esp, 4
mov eax, dword [ebp - 0xa1c]
lea edx, [eax - 0xc]
cmp edx, dword [0x100e8010]
je 0x100209cb
lea esi, [eax - 0xc]
push esi
call edi
test eax, eax
jg 0x100209cb
push esi
call fcn.10055c11
add esp, 4
mov edi, dword [ebp - 0xa08]
push ebx
push ebx
push 0xf013f
push ebx
push ebx
push edi
push reloc.OLEAUT32.dll_SysReAllocString
lea ecx, [ebp - 0xa3c]
call fcn.10001ee0
cmp eax, ebx
mov ebx, dword [ebp - 0xa3c]
jne 0x10020a3d
mov edx, dword [ebp - 0xa10]
mov eax, dword [ebp + 8]
push 4
lea ecx, [ebp - 0xa0c]
push ecx
push 4
xor esi, esi
push esi
push edx
push ebx
mov dword [ebp - 0xa0c], eax
call dword [sym.imp.ADVAPI32.dll_RegSetValueExW]
cmp eax, esi
jne 0x10020a24
mov dword [ebp - 0xa40], esi
cmp ebx, esi
je 0x10020a37
push ebx
call dword [sym.imp.ADVAPI32.dll_RegCloseKey]
xor ebx, ebx
mov dword [ebp - 0xa3c], ebx
mov dword [ebp - 0xa38], esi
test ebx, ebx
je 0x10020a66
push ebx
call dword [sym.imp.ADVAPI32.dll_RegCloseKey]
xor ebx, ebx
mov dword [ebp - 0xa3c], ebx
mov dword [ebp - 0xa38], ebx
jmp 0x10020a66
mov ebx, dword [ebp - 0xa3c]
jmp 0x10020a66
mov edi, dword [ebp - 0xa08]
lea ecx, [ebp - 0x3c]
mov byte [ebp - 4], 6
call fcn.100412c0
mov eax, dword [ebp - 0xa10]
add eax, 0xfffffff4
cmp eax, dword [0x100e8010]
je 0x10020aa0
mov esi, dword [ebp - 0xa10]
add esi, 0xfffffff4
push esi
call dword [sym.imp.KERNEL32.dll_InterlockedDecrement]
test eax, eax
jg 0x10020aa0
push esi
call fcn.10055c11
add esp, 4
mov esi, dword [ebp - 0xa28]
lea ecx, [esi - 0xc]
cmp ecx, dword [0x100e8010]
je 0x10020ac8
add esi, 0xfffffff4
push esi
call dword [sym.imp.KERNEL32.dll_InterlockedDecrement]
test eax, eax
jg 0x10020ac8
push esi
call fcn.10055c11
add esp, 4
lea edx, [edi - 0xc]
cmp edx, dword [0x100e8010]
je 0x10020aea
lea esi, [edi - 0xc]
push esi
call dword [sym.imp.KERNEL32.dll_InterlockedDecrement]
test eax, eax
jg 0x10020aea
push esi
call fcn.10055c11
add esp, 4
xor edi, edi
cmp ebx, edi
je 0x10020af7
push ebx
call dword [sym.imp.ADVAPI32.dll_RegCloseKey]
mov eax, dword [ebp - 0xa2c]
lea ecx, [eax - 0xc]
cmp ecx, dword [0x100e8010]
je 0x10020b28
add eax, 0xfffffff4
push eax
call dword [sym.imp.KERNEL32.dll_InterlockedDecrement]
test eax, eax
jg 0x10020b28
mov edx, dword [ebp - 0xa2c]
add edx, 0xfffffff4
push edx
call fcn.10055c11
add esp, 4
mov eax, dword [ebp - 0xa30]
lea ecx, [eax - 0xc]
cmp ecx, dword [0x100e8010]
je 0x10020b59
add eax, 0xfffffff4
push eax
call dword [sym.imp.KERNEL32.dll_InterlockedDecrement]
test eax, eax
jg 0x10020b59
mov edx, dword [ebp - 0xa30]
add edx, 0xfffffff4
push edx
call fcn.10055c11
add esp, 4
xor esi, esi
cmp dword [ebp - 0xa04], edi
jbe 0x10020b87
mov eax, dword [ebp + esi*4 - 0x80c]
cmp eax, edi
je 0x10020b7e
push eax
call fcn.100557bf
add esp, 4
mov dword [ebp + esi*4 - 0x80c], edi
inc esi
cmp esi, dword [ebp - 0xa04]
jb 0x10020b63
mov eax, dword [ebp - 0xa40]
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 0x10]
xor ecx, ebp
call fcn.10055898
mov esp, ebp
pop ebp
ret 4