Function at 0x1000c7f4
Capabilities:
Set registry value

Disassembly:
push ebp
xor eax, eax
mov ebp, esp
sub esp, 0x138
push ebx
mov dword [ebp - 8], eax
push esi
mov dword [ebp - 4], eax
push edi
push dword [ebp + 0x18]
push dword [ebp + 0xc]
call fcn.1000c69f
add esp, 8
test eax, eax
jne 0x1000c821
xor eax, eax
jmp 0x1000cc4d
push dword [ebp + 8]
lea ecx, [ebp - 0x138]
push ecx
call dword [sym.imp.KERNEL32.dll_lstrcpyA]
push 0x100334e8
lea ecx, [ebp - 0x138]
push ecx
call dword [sym.imp.KERNEL32.dll_lstrcatA]
push dword [ebp + 0xc]
lea edx, [ebp - 0x138]
xor esi, esi
push edx
call dword [sym.imp.KERNEL32.dll_lstrcatA]
lea ecx, [ebp - 0xc]
lea edx, [ebp - 8]
push ecx
mov edi, 0x2001f
push edx
lea eax, [ebp - 0x138]
push esi
mov ebx, Ordinal_2
push edi
push esi
push 0x100334ec
push esi
push eax
push ebx
call dword [sym.imp.ADVAPI32.dll_RegCreateKeyExA]
test eax, eax
jne 0x1000cc14
push dword [ebp + 0xc]
push 0x100334f0
lea ecx, [ebp - 0x138]
push ecx
call dword [sym.imp.USER32.dll_wsprintfA]
add esp, 0xc
lea ecx, [ebp - 0x138]
push ecx
call dword [sym.imp.KERNEL32.dll_lstrlenA]
inc eax
lea ecx, [ebp - 0x138]
push eax
push ecx
push 1
push esi
push esi
push dword [ebp - 8]
call dword [sym.imp.ADVAPI32.dll_RegSetValueExA]
test eax, eax
jne 0x1000cc14
lea eax, [ebp - 0xc]
lea ecx, [ebp - 4]
push eax
push ecx
push esi
push edi
push esi
push 0x10033500
push esi
push 0x10033504
push dword [ebp - 8]
call dword [sym.imp.ADVAPI32.dll_RegCreateKeyExA]
test eax, eax
jne 0x1000cc14
lea eax, [ebp - 0x34]
push eax
push dword [ebp + 0x18]
call fcn.1000c654
add esp, 8
test eax, eax
je 0x1000cc14
lea eax, [ebp - 0x34]
push eax
call dword [sym.imp.KERNEL32.dll_lstrlenA]
inc eax
lea ecx, [ebp - 0x34]
push eax
push ecx
push 1
push esi
push esi
push dword [ebp - 4]
call dword [sym.imp.ADVAPI32.dll_RegSetValueExA]
test eax, eax
jne 0x1000cc14
push dword [ebp - 4]
call dword [sym.imp.ADVAPI32.dll_RegCloseKey]
lea eax, [ebp - 0xc]
lea ecx, [ebp - 4]
push eax
push ecx
push esi
push edi
push esi
push 0x1003350c
push esi
push str.CurVer
push dword [ebp - 8]
call dword [sym.imp.ADVAPI32.dll_RegCreateKeyExA]
test eax, eax
jne 0x1000cc14
push dword [ebp + 0x10]
push dword [ebp + 0xc]
push dword [ebp + 8]
push 0x10033518
lea eax, [ebp - 0x138]
push eax
call dword [sym.imp.USER32.dll_wsprintfA]
add esp, 0x14
lea ecx, [ebp - 0x138]
push ecx
call dword [sym.imp.KERNEL32.dll_lstrlenA]
inc eax
lea ecx, [ebp - 0x138]
push eax
push ecx
push 1
push esi
push esi
push dword [ebp - 4]
call dword [sym.imp.ADVAPI32.dll_RegSetValueExA]
test eax, eax
jne 0x1000cc14
push dword [ebp - 4]
call dword [sym.imp.ADVAPI32.dll_RegCloseKey]
push dword [ebp - 8]
call dword [sym.imp.ADVAPI32.dll_RegCloseKey]
lea eax, [ebp - 0xc]
lea ecx, [ebp - 8]
push eax
push ecx
push esi
lea edx, [ebp - 0x138]
push edi
push esi
push 0x10033524
push esi
push edx
push ebx
call dword [sym.imp.ADVAPI32.dll_RegCreateKeyExA]
test eax, eax
jne 0x1000cc14
push dword [ebp + 0xc]
push str.NetManage__s
lea ecx, [ebp - 0x138]
push ecx
call dword [sym.imp.USER32.dll_wsprintfA]
add esp, 0xc
lea ecx, [ebp - 0x138]
push ecx
call dword [sym.imp.KERNEL32.dll_lstrlenA]
inc eax
lea ecx, [ebp - 0x138]
push eax
push ecx
push 1
push esi
push esi
push dword [ebp - 8]
call dword [sym.imp.ADVAPI32.dll_RegSetValueExA]
test eax, eax
jne 0x1000cc14
lea eax, [ebp - 0xc]
lea ecx, [ebp - 4]
push eax
push ecx
push esi
push edi
push esi
push 0x10033538
push esi
push 0x1003353c
push dword [ebp - 8]
call dword [sym.imp.ADVAPI32.dll_RegCreateKeyExA]
test eax, eax
jne 0x1000cc14
lea eax, [ebp - 0x34]
push eax
call dword [sym.imp.KERNEL32.dll_lstrlenA]
inc eax
lea ecx, [ebp - 0x34]
push eax
push ecx
push 1
push esi
push esi
push dword [ebp - 4]
call dword [sym.imp.ADVAPI32.dll_RegSetValueExA]
test eax, eax
jne 0x1000cc14
push dword [ebp - 4]
call dword [sym.imp.ADVAPI32.dll_RegCloseKey]
push dword [ebp - 8]
call dword [sym.imp.ADVAPI32.dll_RegCloseKey]
lea eax, [ebp - 0x34]
push eax
push dword [ebp + 0x18]
call fcn.1000c654
add esp, 8
test eax, eax
je 0x1000cc14
lea eax, [ebp - 0x34]
lea ecx, [ebp - 0x138]
push eax
push 0x10033544
push ecx
call dword [sym.imp.USER32.dll_wsprintfA]
add esp, 0xc
lea ecx, [ebp - 0xc]
lea edx, [ebp - 8]
push ecx
push edx
lea eax, [ebp - 0x138]
push esi
push edi
push esi
push 0x10033550
push esi
push eax
push ebx
call dword [sym.imp.ADVAPI32.dll_RegCreateKeyExA]
test eax, eax
jne 0x1000cc14
lea eax, [ebp - 0xc]
lea ecx, [ebp - 4]
push eax
push ecx
push esi
push edi
push esi
push 0x10033554
push esi
push str.VersionIndependentProgID
push dword [ebp - 8]
call dword [sym.imp.ADVAPI32.dll_RegCreateKeyExA]
test eax, eax
jne 0x1000cc14
push dword [ebp + 0xc]
push dword [ebp + 8]
push 0x10033574
lea edx, [ebp - 0x138]
push edx
call dword [sym.imp.USER32.dll_wsprintfA]
add esp, 0x10
lea ecx, [ebp - 0x138]
push ecx
call dword [sym.imp.KERNEL32.dll_lstrlenA]
inc eax
lea ecx, [ebp - 0x138]
push eax
push ecx
push 1
push esi
push esi
push dword [ebp - 4]
call dword [sym.imp.ADVAPI32.dll_RegSetValueExA]
test eax, eax
jne 0x1000cc14
push dword [ebp - 4]
call dword [sym.imp.ADVAPI32.dll_RegCloseKey]
lea eax, [ebp - 0xc]
lea ecx, [ebp - 4]
push eax
push ecx
push esi
push edi
push esi
push 0x1003357c
push esi
push str.ProgID
push dword [ebp - 8]
call dword [sym.imp.ADVAPI32.dll_RegCreateKeyExA]
test eax, eax
jne 0x1000cc14
push dword [ebp + 0x10]
push dword [ebp + 0xc]
push dword [ebp + 8]
push 0x10033588
lea eax, [ebp - 0x138]
push eax
call dword [sym.imp.USER32.dll_wsprintfA]
add esp, 0x14
lea ecx, [ebp - 0x138]
push ecx
call dword [sym.imp.KERNEL32.dll_lstrlenA]
inc eax
lea ecx, [ebp - 0x138]
push eax
push ecx
push 1
push esi
push esi
push dword [ebp - 4]
call dword [sym.imp.ADVAPI32.dll_RegSetValueExA]
test eax, eax
jne 0x1000cc14
push dword [ebp - 4]
call dword [sym.imp.ADVAPI32.dll_RegCloseKey]
lea eax, [ebp - 0xc]
lea ecx, [ebp - 4]
push eax
push ecx
push esi
push edi
push esi
push 0x10033594
push esi
push 0x10033598
push dword [ebp - 8]
call dword [sym.imp.ADVAPI32.dll_RegCreateKeyExA]
lea ecx, [ebp - 0x34]
push ecx
push dword [ebp + 0x14]
call fcn.1000c654
add esp, 8
test eax, eax
je 0x1000cc14
lea eax, [ebp - 0x34]
push eax
call dword [sym.imp.KERNEL32.dll_lstrlenA]
inc eax
lea ecx, [ebp - 0x34]
push eax
push ecx
push 1
push esi
push esi
push dword [ebp - 4]
call dword [sym.imp.ADVAPI32.dll_RegSetValueExA]
test eax, eax
je 0x1000cc36
cmp dword [ebp - 8], 0
je 0x1000cc32
push dword [ebp - 4]
call dword [sym.imp.ADVAPI32.dll_RegCloseKey]
cmp dword [ebp - 8], 0
je 0x1000cc32
push dword [ebp - 8]
call dword [sym.imp.ADVAPI32.dll_RegCloseKey]
xor eax, eax
jmp 0x1000cc4d
push dword [ebp - 4]
call dword [sym.imp.ADVAPI32.dll_RegCloseKey]
push dword [ebp - 8]
call dword [sym.imp.ADVAPI32.dll_RegCloseKey]
mov eax, 1
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret