Function at 0x10006ab0
Capabilities:
Set registry value

Disassembly:
sub esp, 0x23c
mov eax, dword [str.Both]
mov cl, byte [0x10025090]
push ebx
push ebp
push esi
mov esi, dword [sym.imp.ADVAPI32.dll_RegCreateKeyA]
lea edx, [esp + 0x14]
push edi
push edx
xor ebp, ebp
push str.CLSID
push 0x80000000
mov dword [esp + 0x24], ebp
mov dword [esp + 0x20], ebp
mov dword [esp + 0x1c], ebp
mov dword [esp + 0x28], eax
mov byte [esp + 0x2c], cl
call esi
test eax, eax
jne 0x10006d52
mov ecx, dword [esp + 0x254]
lea eax, [esp + 0x24]
push 0x27
push eax
push ecx
call fcn.10006e30
mov ecx, dword [esp + 0x24]
add esp, 0xc
lea edx, [esp + 0x14]
lea eax, [esp + 0x24]
push edx
push eax
push ecx
call esi
test eax, eax
je 0x10006b41
mov edx, dword [esp + 0x18]
push edx
call dword [sym.imp.ADVAPI32.dll_RegCloseKey]
pop edi
pop esi
pop ebp
mov eax, 0x8000ffff
pop ebx
add esp, 0x23c
ret
mov esi, dword [esp + 0x258]
mov edi, dword [sym.imp.KERNEL32.dll_lstrlenA]
push esi
call edi
mov ebx, dword [sym.imp.ADVAPI32.dll_RegSetValueA]
push eax
mov eax, dword [esp + 0x18]
push esi
push 1
push ebp
push eax
call ebx
test eax, eax
je 0x10006b72
mov esi, dword [sym.imp.ADVAPI32.dll_RegCloseKey]
jmp 0x10006d44
mov ecx, dword [esp + 0x14]
lea eax, [esp + 0x10]
push eax
push str.InprocServer32
push ecx
call dword [sym.imp.ADVAPI32.dll_RegCreateKeyA]
test eax, eax
je 0x10006baf
mov edx, dword [esp + 0x18]
mov esi, dword [sym.imp.ADVAPI32.dll_RegCloseKey]
push edx
call esi
mov eax, dword [esp + 0x14]
push eax
call esi
pop edi
pop esi
pop ebp
mov eax, 0x8000ffff
pop ebx
add esp, 0x23c
ret
mov edx, dword [esp + 0x250]
lea ecx, [esp + 0x4c]
push 0x200
push ecx
push edx
call dword [sym.imp.KERNEL32.dll_GetModuleFileNameA]
test eax, eax
jne 0x10006bf6
mov eax, dword [esp + 0x18]
mov esi, dword [sym.imp.ADVAPI32.dll_RegCloseKey]
push eax
call esi
mov ecx, dword [esp + 0x14]
push ecx
call esi
mov edx, dword [esp + 0x10]
push edx
call esi
pop edi
pop esi
pop ebp
mov eax, 0x8000ffff
pop ebx
add esp, 0x23c
ret
lea eax, [esp + 0x4c]
push eax
call edi
mov edx, dword [esp + 0x10]
lea ecx, [esp + 0x4c]
push eax
push ecx
push 1
push ebp
push edx
call ebx
test eax, eax
je 0x10006c3c
mov eax, dword [esp + 0x18]
mov esi, dword [sym.imp.ADVAPI32.dll_RegCloseKey]
push eax
call esi
mov ecx, dword [esp + 0x14]
push ecx
call esi
mov edx, dword [esp + 0x10]
push edx
call esi
pop edi
pop esi
pop ebp
mov eax, 0x8000ffff
pop ebx
add esp, 0x23c
ret
mov ecx, dword [esp + 0x10]
lea eax, [esp + 0x1c]
push 5
push eax
push 1
push ebp
push str.ThreadingModel
push ecx
call dword [sym.imp.ADVAPI32.dll_RegSetValueExA]
mov esi, dword [sym.imp.ADVAPI32.dll_RegCloseKey]
test eax, eax
je 0x10006c85
mov edx, dword [esp + 0x18]
push edx
call esi
mov eax, dword [esp + 0x14]
push eax
call esi
mov ecx, dword [esp + 0x10]
push ecx
call esi
pop edi
pop esi
pop ebp
mov eax, 0x8000ffff
pop ebx
add esp, 0x23c
ret
mov edx, dword [esp + 0x10]
push edx
call esi
mov ecx, dword [esp + 0x14]
lea eax, [esp + 0x10]
push eax
push str.ProgID
push ecx
mov dword [esp + 0x1c], ebp
call dword [sym.imp.ADVAPI32.dll_RegCreateKeyA]
test eax, eax
je 0x10006cc7
mov edx, dword [esp + 0x18]
push edx
call esi
mov eax, dword [esp + 0x14]
push eax
call esi
pop edi
pop esi
pop ebp
mov eax, 0x8000ffff
pop ebx
add esp, 0x23c
ret
mov ebp, dword [esp + 0x260]
push ebp
call edi
mov ecx, dword [esp + 0x10]
push eax
push ebp
push 1
push 0
push ecx
call ebx
test eax, eax
je 0x10006d00
mov edx, dword [esp + 0x18]
push edx
call esi
mov eax, dword [esp + 0x14]
push eax
call esi
pop edi
pop esi
pop ebp
mov eax, 0x8000ffff
pop ebx
add esp, 0x23c
ret
mov ecx, dword [esp + 0x10]
push ecx
call esi
mov eax, dword [esp + 0x14]
lea edx, [esp + 0x10]
push edx
push str.VersionIndependentProgID
push eax
mov dword [esp + 0x1c], 0
call dword [sym.imp.ADVAPI32.dll_RegCreateKeyA]
test eax, eax
jne 0x10006d44
mov ebp, dword [esp + 0x25c]
push ebp
call edi
push eax
mov eax, dword [esp + 0x14]
push ebp
xor edi, edi
push 1
push edi
push eax
call ebx
test eax, eax
je 0x10006d62
mov ecx, dword [esp + 0x18]
push ecx
call esi
mov edx, dword [esp + 0x14]
push edx
call esi
pop edi
pop esi
pop ebp
mov eax, 0x8000ffff
pop ebx
add esp, 0x23c
ret
mov eax, dword [esp + 0x10]
push eax
call esi
mov ecx, dword [esp + 0x14]
mov dword [esp + 0x10], edi
push ecx
call esi
mov edx, dword [esp + 0x18]
mov dword [esp + 0x14], edi
push edx
call esi
pop edi
pop esi
pop ebp
xor eax, eax
pop ebx
add esp, 0x23c
ret