Function at 0x547230
Capabilities:
Set registry value

Disassembly:
sub esp, 0x4d0
mov eax, dword [0x6aae14]
xor eax, esp
mov dword [esp + 0x4cc], eax
push ebx
push esi
push edi
mov ecx, 0xe
mov esi, str.CLSID8cec58ae_07a1_11d9_b15e_000d56bfe6eeLocalServer32
lea edi, [esp + 0x154]
rep movsd dword es:[edi], dword [esi]
movsw word es:[edi], word [esi]
movsb byte es:[edi], byte [esi]
mov ecx, 0xe
mov esi, str.TypeLib8cec5860_07a1_11d9_b15e_000d56bfe6ee1.00win32
lea edi, [esp + 0x118]
rep movsd dword es:[edi], dword [esi]
movsw word es:[edi], word [esi]
movsb byte es:[edi], byte [esi]
mov ecx, 0xe
mov esi, str.TypeLib8cec5860_07a1_11d9_b15e_000d56bfe6ee1.00win64
lea edi, [esp + 0x190]
rep movsd dword es:[edi], dword [esi]
xor ebx, ebx
push 0x103
movsw word es:[edi], word [esi]
lea eax, [esp + 0x1d1]
push ebx
push eax
movsb byte es:[edi], byte [esi]
mov byte [esp + 0x1d8], bl
call fcn.005dfd60
add esp, 0xc
lea ecx, [esp + 0x1cc]
push ecx
call fcn.00503120
cmp byte [esp + 0x1cc], bl
je 0x547ab1
mov eax, dword [esp + 0x4e0]
push ebp
cmp eax, 1
jne 0x54769f
lea edx, [esp + 0x14]
push edx
lea eax, [esp + 0x1c]
push eax
push ebx
lea ecx, [esp + 0x164]
push ecx
mov ebp, 0x104
push connect
mov byte [esp + 0x2c], bl
mov dword [esp + 0x28], ebp
call fcn.004d5770
push ebx
lea edx, [esp + 0x1c]
push str.helppane.exe
push edx
call fcn.004f5880
mov esi, dword [sym.imp.ADVAPI32.dll_RegSetValueExA]
mov edi, dword [sym.imp.KERNEL32.dll_lstrlenA]
add esp, 0xc
cmp eax, 0xffffffff
je 0x54741b
lea eax, [esp + 0x1d0]
push eax
lea ecx, [esp + 0x15c]
push ecx
lea edx, [esp + 0x2dc]
push str.SUBINACL__keyreg__HKEY_CLASSES_ROOT_s___setowner_s
push edx
call fcn.005dfb23
push ebx
push ebx
push ebx
push 0xffffffffffffffff
push 2
lea eax, [esp + 0x2f8]
push 1
push eax
call fcn.00506de0
add esp, 0x2c
test eax, eax
jne 0x5473a2
lea ecx, [esp + 0x1d0]
push ecx
mov edx, ecx
push edx
lea eax, [esp + 0x160]
push eax
lea ecx, [esp + 0x2e0]
push str.SUBINACL__keyreg__HKEY_CLASSES_ROOT_s___setowner_s__grant_sf
push ecx
call fcn.005dfb23
push ebx
push ebx
push ebx
push 0xffffffffffffffff
push 2
lea edx, [esp + 0x2fc]
push 1
push edx
call fcn.00506de0
add esp, 0x30
lea eax, [esp + 0x10]
push eax
lea ecx, [esp + 0x15c]
push ecx
push connect
call dword [sym.imp.ADVAPI32.dll_RegCreateKeyA]
test eax, eax
jne 0x54741b
push str..ex_
lea edx, [esp + 0x1c]
push 0x631384
push edx
call fcn.004e9030
push ebx
lea eax, [esp + 0x28]
push str.SystemRoot
push eax
call fcn.004f5880
add esp, 0x18
lea ecx, [esp + 0x18]
push ecx
cmp eax, 0xffffffff
je 0x5473fc
call edi
inc eax
push eax
lea edx, [esp + 0x1c]
push edx
push 2
jmp 0x547407
call edi
inc eax
push eax
lea edx, [esp + 0x1c]
push edx
push 1
mov eax, dword [esp + 0x1c]
push ebx
push ebx
push eax
call esi
mov ecx, dword [esp + 0x10]
push ecx
call dword [sym.imp.ADVAPI32.dll_RegCloseKey]
lea edx, [esp + 0x14]
push edx
lea eax, [esp + 0x1c]
push eax
push ebx
lea ecx, [esp + 0x128]
push ecx
push connect
mov byte [esp + 0x2c], bl
mov dword [esp + 0x28], ebp
call fcn.004d5770
push ebx
lea edx, [esp + 0x1c]
push str.helppane.exe
push edx
call fcn.004f5880
add esp, 0xc
cmp eax, 0xffffffff
je 0x547552
lea eax, [esp + 0x1d0]
push eax
lea ecx, [esp + 0x120]
push ecx
lea edx, [esp + 0x2dc]
push str.SUBINACL__keyreg__HKEY_CLASSES_ROOT_s___setowner_s
push edx
call fcn.005dfb23
push ebx
push ebx
push ebx
push 0xffffffffffffffff
push 2
lea eax, [esp + 0x2f8]
push 1
push eax
call fcn.00506de0
add esp, 0x2c
test eax, eax
jne 0x5474d9
lea ecx, [esp + 0x1d0]
push ecx
mov edx, ecx
push edx
lea eax, [esp + 0x124]
push eax
lea ecx, [esp + 0x2e0]
push str.SUBINACL__keyreg__HKEY_CLASSES_ROOT_s___setowner_s__grant_sf
push ecx
call fcn.005dfb23
push ebx
push ebx
push ebx
push 0xffffffffffffffff
push 2
lea edx, [esp + 0x2fc]
push 1
push edx
call fcn.00506de0
add esp, 0x30
lea eax, [esp + 0x10]
push eax
lea ecx, [esp + 0x120]
push ecx
push connect
call dword [sym.imp.ADVAPI32.dll_RegCreateKeyA]
test eax, eax
jne 0x547552
push str..ex_
lea edx, [esp + 0x1c]
push 0x631384
push edx
call fcn.004e9030
push ebx
lea eax, [esp + 0x28]
push str.SystemRoot
push eax
call fcn.004f5880
add esp, 0x18
lea ecx, [esp + 0x18]
push ecx
cmp eax, 0xffffffff
je 0x547533
call edi
inc eax
push eax
lea edx, [esp + 0x1c]
push edx
push 2
jmp 0x54753e
call edi
inc eax
push eax
lea edx, [esp + 0x1c]
push edx
push 1
mov eax, dword [esp + 0x1c]
push ebx
push ebx
push eax
call esi
mov ecx, dword [esp + 0x10]
push ecx
call dword [sym.imp.ADVAPI32.dll_RegCloseKey]
call fcn.004d96c0
test eax, eax
je 0x547ab0
lea edx, [esp + 0x14]
push edx
lea eax, [esp + 0x1c]
push eax
push ebx
lea ecx, [esp + 0x1a0]
push ecx
push connect
mov byte [esp + 0x2c], bl
mov dword [esp + 0x28], ebp
call fcn.004d5770
push ebx
lea edx, [esp + 0x1c]
push str.helppane.exe
push edx
call fcn.004f5880
add esp, 0xc
cmp eax, 0xffffffff
je 0x547ab0
lea eax, [esp + 0x1d0]
push eax
lea ecx, [esp + 0x198]
push ecx
lea edx, [esp + 0x2dc]
push str.SUBINACL__keyreg__HKEY_CLASSES_ROOT_s___setowner_s
push edx
call fcn.005dfb23
push ebx
push ebx
push ebx
push 0xffffffffffffffff
push 2
lea eax, [esp + 0x2f8]
push 1
push eax
call fcn.00506de0
add esp, 0x2c
test eax, eax
jne 0x54761d
lea ecx, [esp + 0x1d0]
push ecx
mov edx, ecx
push edx
lea eax, [esp + 0x19c]
push eax
lea ecx, [esp + 0x2e0]
push str.SUBINACL__keyreg__HKEY_CLASSES_ROOT_s___setowner_s__grant_sf
push ecx
call fcn.005dfb23
push ebx
push ebx
push ebx
push 0xffffffffffffffff
push 2
lea edx, [esp + 0x2fc]
push 1
push edx
call fcn.00506de0
add esp, 0x30
lea eax, [esp + 0x10]
push eax
lea ecx, [esp + 0x198]
push ecx
push connect
call dword [sym.imp.ADVAPI32.dll_RegCreateKeyA]
test eax, eax
jne 0x547ab0
push str..ex_
lea edx, [esp + 0x1c]
push 0x631384
push edx
call fcn.004e9030
push ebx
lea eax, [esp + 0x28]
push str.SystemRoot
push eax
call fcn.004f5880
add esp, 0x18
lea ecx, [esp + 0x18]
push ecx
cmp eax, 0xffffffff
je 0x54767b
call edi
inc eax
push eax
lea edx, [esp + 0x1c]
push edx
push 2
jmp 0x547686
call edi
inc eax
push eax
lea edx, [esp + 0x1c]
push edx
push 1
mov eax, dword [esp + 0x1c]
push ebx
push ebx
push eax
call esi
mov ecx, dword [esp + 0x10]
push ecx
call dword [sym.imp.ADVAPI32.dll_RegCloseKey]
jmp 0x547ab0
cmp eax, ebx
jne 0x547ab0
lea edx, [esp + 0x14]
push edx
lea eax, [esp + 0x1c]
push eax
push ebx
lea ecx, [esp + 0x164]
push ecx
push connect
mov byte [esp + 0x2c], bl
mov dword [esp + 0x28], 0x104
call fcn.004d5770
push ebx
lea edx, [esp + 0x1c]
push str.helppane.ex_
push edx
call fcn.004f5880
mov ebp, dword [sym.imp.ADVAPI32.dll_RegCreateKeyA]
mov esi, dword [sym.imp.ADVAPI32.dll_RegSetValueExA]
mov edi, dword [sym.imp.KERNEL32.dll_lstrlenA]
add esp, 0xc
cmp eax, 0xffffffff
je 0x547807
lea eax, [esp + 0x10]
push eax
lea ecx, [esp + 0x15c]
push ecx
push connect
call ebp
test eax, eax
jne 0x547773
push 0x631384
lea edx, [esp + 0x1c]
push str..ex_
push edx
call fcn.004e9030
push ebx
lea eax, [esp + 0x28]
push str.SystemRoot
push eax
call fcn.004f5880
add esp, 0x18
lea ecx, [esp + 0x18]
push ecx
cmp eax, 0xffffffff
je 0x547754
call edi
inc eax
push eax
lea edx, [esp + 0x1c]
push edx
push 2
jmp 0x54775f
call edi
inc eax
push eax
lea edx, [esp + 0x1c]
push edx
push 1
mov eax, dword [esp + 0x1c]
push ebx
push ebx
push eax
call esi
mov ecx, dword [esp + 0x10]
push ecx
call dword [sym.imp.ADVAPI32.dll_RegCloseKey]
lea edx, [esp + 0x1d0]
push edx
mov eax, edx
push eax
lea ecx, [esp + 0x160]
push ecx
lea edx, [esp + 0x2e0]
push str.SUBINACL__keyreg__HKEY_CLASSES_ROOT_s___setowner_s__grant_sr
push edx
call fcn.005dfb23
push ebx
push ebx
push ebx
push 0xffffffffffffffff
push 2
lea eax, [esp + 0x2fc]
push 1
push eax
call fcn.00506de0
add esp, 0x30
call fcn.004d9b00
test eax, eax
je 0x5477d1
lea ecx, [esp + 0x158]
push ecx
push str.SUBINACL__keyreg__HKEY_CLASSES_ROOT_s___setowner_NT_SERVICETrustedInstaller_
lea edx, [esp + 0x2dc]
push edx
jmp 0x5477e6
lea eax, [esp + 0x158]
push eax
push str.SUBINACL__keyreg__HKEY_CLASSES_ROOT_s___setownerAdministrators
lea ecx, [esp + 0x2dc]
push ecx
call fcn.005dfb23
add esp, 0xc
push ebx
push ebx
push ebx
push 0xffffffffffffffff
push 2
lea edx, [esp + 0x2e8]
push 1
push edx
call fcn.00506de0
add esp, 0x1c
lea eax, [esp + 0x14]
push eax
lea ecx, [esp + 0x1c]
push ecx
push ebx
lea edx, [esp + 0x128]
push edx
push connect
mov byte [esp + 0x2c], bl
mov dword [esp + 0x28], 0x104
call fcn.004d5770
push ebx
lea eax, [esp + 0x1c]
push str.helppane.ex_
push eax
call fcn.004f5880
add esp, 0xc
cmp eax, 0xffffffff
je 0x547955
lea ecx, [esp + 0x10]
push ecx
lea edx, [esp + 0x120]
push edx
push connect
call ebp
test eax, eax
jne 0x5478c1
push 0x631384
lea eax, [esp + 0x1c]
push str..ex_
push eax
call fcn.004e9030
push ebx
lea ecx, [esp + 0x28]
push str.SystemRoot
push ecx
call fcn.004f5880
add esp, 0x18
lea edx, [esp + 0x18]
push edx
cmp eax, 0xffffffff
je 0x5478a2
call edi
inc eax
push eax
lea eax, [esp + 0x1c]
push eax
push 2
jmp 0x5478ad
call edi
inc eax
push eax
lea eax, [esp + 0x1c]
push eax
push 1
mov ecx, dword [esp + 0x1c]
push ebx
push ebx
push ecx
call esi
mov edx, dword [esp + 0x10]
push edx
call dword [sym.imp.ADVAPI32.dll_RegCloseKey]
lea eax, [esp + 0x1d0]
push eax
mov ecx, eax
push ecx
lea edx, [esp + 0x124]
push edx
lea eax, [esp + 0x2e0]
push str.SUBINACL__keyreg__HKEY_CLASSES_ROOT_s___setowner_s__grant_sr
push eax
call fcn.005dfb23
push ebx
push ebx
push ebx
push 0xffffffffffffffff
push 2
lea ecx, [esp + 0x2fc]
push 1
push ecx
call fcn.00506de0
add esp, 0x30
call fcn.004d9b00
test eax, eax
je 0x54791f
lea edx, [esp + 0x11c]
push edx
push str.SUBINACL__keyreg__HKEY_CLASSES_ROOT_s___setowner_NT_SERVICETrustedInstaller_
lea eax, [esp + 0x2dc]
push eax
jmp 0x547934
lea ecx, [esp + 0x11c]
push ecx
push str.SUBINACL__keyreg__HKEY_CLASSES_ROOT_s___setownerAdministrators
lea edx, [esp + 0x2dc]
push edx
call fcn.005dfb23
add esp, 0xc
push ebx
push ebx
push ebx
push 0xffffffffffffffff
push 2
lea eax, [esp + 0x2e8]
push 1
push eax
call fcn.00506de0
add esp, 0x1c
call fcn.004d96c0
test eax, eax
je 0x547ab0
lea ecx, [esp + 0x14]
push ecx
lea edx, [esp + 0x1c]
push edx
push ebx
lea eax, [esp + 0x1a0]
push eax
push connect
mov byte [esp + 0x2c], bl
mov dword [esp + 0x28], 0x104
call fcn.004d5770
push ebx
lea ecx, [esp + 0x1c]
push str.helppane.ex_
push ecx
call fcn.004f5880
add esp, 0xc
cmp eax, 0xffffffff
je 0x547ab0
lea edx, [esp + 0x10]
push edx
lea eax, [esp + 0x198]
push eax
push connect
call ebp
test eax, eax
jne 0x547a1c
push 0x631384
lea ecx, [esp + 0x1c]
push str..ex_
push ecx
call fcn.004e9030
push ebx
lea edx, [esp + 0x28]
push str.SystemRoot
push edx
call fcn.004f5880
add esp, 0x18
cmp eax, 0xffffffff
lea eax, [esp + 0x18]
push eax
je 0x5479fd
call edi
inc eax
push eax
lea ecx, [esp + 0x1c]
push ecx
push 2
jmp 0x547a08
call edi
inc eax
push eax
lea ecx, [esp + 0x1c]
push ecx
push 1
mov edx, dword [esp + 0x1c]
push ebx
push ebx
push edx
call esi
mov eax, dword [esp + 0x10]
push eax
call dword [sym.imp.ADVAPI32.dll_RegCloseKey]
lea ecx, [esp + 0x1d0]
push ecx
mov edx, ecx
push edx
lea eax, [esp + 0x19c]
push eax
lea ecx, [esp + 0x2e0]
push str.SUBINACL__keyreg__HKEY_CLASSES_ROOT_s___setowner_s__grant_sr
push ecx
call fcn.005dfb23
push ebx
push ebx
push ebx
push 0xffffffffffffffff
push 2
lea edx, [esp + 0x2fc]
push 1
push edx
call fcn.00506de0
add esp, 0x30
call fcn.004d9b00
test eax, eax
je 0x547a7a
lea eax, [esp + 0x194]
push eax
push str.SUBINACL__keyreg__HKEY_CLASSES_ROOT_s___setowner_NT_SERVICETrustedInstaller_
lea ecx, [esp + 0x2dc]
push ecx
jmp 0x547a8f
lea edx, [esp + 0x194]
push edx
push str.SUBINACL__keyreg__HKEY_CLASSES_ROOT_s___setownerAdministrators
lea eax, [esp + 0x2dc]
push eax
call fcn.005dfb23
add esp, 0xc
push ebx
push ebx
push ebx
push 0xffffffffffffffff
push 2
lea ecx, [esp + 0x2e8]
push 1
push ecx
call fcn.00506de0
add esp, 0x1c
pop ebp
mov ecx, dword [esp + 0x4d8]
pop edi
pop esi
pop ebx
xor ecx, esp
call fcn.005dfbbe
add esp, 0x4d0
ret