Function at 0x1016d297
Capabilities:
Set registry value

Disassembly:
sub esp, 0x170
mov eax, dword [0x1023904c]
xor eax, esp
mov dword [esp + 0x16c], eax
mov eax, dword [esp + 0x180]
or dword [esp], 0xffffffff
or dword [esp + 4], 0xffffffff
push ebx
mov ebx, dword [esp + 0x180]
push ebp
mov ebp, dword [esp + 0x17c]
mov dword [esp + 0x28], eax
mov eax, dword [esp + 0x18c]
push esi
mov dword [esp + 0x24], eax
movzx eax, word [ebx + 0x5a]
push edi
mov edi, dword [esp + 0x188]
push eax
movzx eax, word [ebx + 0x58]
push eax
lea eax, [esp + 0x3c]
push 0x1014cbc0
push eax
mov dword [esp + 0x34], ebp
mov dword [esp + 0x3c], edi
xor esi, esi
call dword [sym.imp.USER32.dll_wsprintfA]
add esp, 0x10
push str.Interface_
lea eax, [esp + 0x80]
push eax
call dword [sym.imp.kernel32.dll_lstrcpyA]
and dword [esp + 0x18], esi
test ebp, ebp
jle 0x1016d3bb
mov ebp, dword [sym.imp.ADVAPI32.dll_RegCloseKey]
mov esi, edi
mov edi, dword [sym.imp.kernel32.dll_lstrlenA]
mov dword [esp + 0x1c], esi
push str.Interface_
call edi
mov ecx, 0x100
sub ecx, eax
push ecx
push str.Interface_
call edi
lea eax, [esp + eax + 0x80]
push eax
push esi
call fcn.1015692e
cmp dword [ebx + 0x50], 0
je 0x1016d374
lea eax, [esp + 0x7c]
push eax
push SysReAllocString
call fcn.10169fc9
mov eax, dword [esp + 0x10]
mov dword [esp + 0x20], eax
lea eax, [esp + 0x10]
push eax
lea eax, [esp + 0x80]
push eax
push SysReAllocString
call fcn.1015692e
mov esi, eax
test esi, esi
je 0x1016d3d8
mov eax, dword [esp + 0x20]
mov dword [esp + 0x10], eax
cmp dword [esp + 0x10], 0xffffffff
je 0x1016d3ae
push dword [esp + 0x10]
call ebp
cmp dword [esp + 0x14], 0xffffffff
je 0x1016d3bb
push dword [esp + 0x14]
call ebp
mov ecx, dword [esp + 0x17c]
pop edi
mov eax, esi
pop esi
pop ebp
pop ebx
xor ecx, esp
call fcn.10001e57
add esp, 0x170
ret 0x14
push dword [ebx + 8]
call edi
push eax
push dword [ebx + 8]
push 1
push 0
push dword [esp + 0x20]
call dword [sym.imp.ADVAPI32.dll_RegSetValueA]
mov esi, eax
test esi, esi
jne 0x1016d3a1
mov esi, dword [esp + 0x28]
push esi
call edi
push eax
push esi
push 1
push str.ProxyStubClsid
push dword [esp + 0x20]
call dword [sym.imp.ADVAPI32.dll_RegSetValueA]
mov esi, eax
test esi, esi
jne 0x1016d3a1
mov esi, dword [esp + 0x28]
push esi
call edi
push eax
push esi
push 1
push str.ProxyStubClsid32
push dword [esp + 0x20]
call dword [sym.imp.ADVAPI32.dll_RegSetValueA]
mov esi, eax
test esi, esi
jne 0x1016d3a1
mov ecx, dword [esp + 0x24]
lea eax, [ecx - 1]
cmp dword [esp + 0x18], eax
jne 0x1016d4d8
cmp dword [ebx + 0x54], esi
je 0x1016d51b
mov eax, dword [esp + 0x14]
mov dword [esp + 0x20], eax
lea eax, [esp + 0x14]
push eax
push str.TypeLib
push dword [esp + 0x18]
call fcn.1015692e
mov esi, eax
test esi, esi
je 0x1016d481
mov eax, dword [esp + 0x20]
mov dword [esp + 0x14], eax
jmp 0x1016d3a1
mov esi, dword [esp + 0x30]
push esi
call edi
push eax
push esi
push 1
push 0
push dword [esp + 0x24]
call dword [sym.imp.ADVAPI32.dll_RegSetValueA]
mov esi, eax
test esi, esi
jne 0x1016d3a1
lea eax, [esp + 0x34]
push eax
call edi
push eax
lea eax, [esp + 0x38]
push eax
push 1
push esi
push 0x1014caf0
push dword [esp + 0x28]
call dword [sym.imp.ADVAPI32.dll_RegSetValueExA]
mov esi, eax
test esi, esi
jne 0x1016d3a1
push dword [esp + 0x14]
call ebp
or dword [esp + 0x14], 0xffffffff
jmp 0x1016d511
push 0x27
lea eax, [esp + 0x58]
push eax
mov eax, ecx
mov ecx, dword [esp + 0x34]
shl eax, 4
add ecx, 0xfffffff0
add eax, ecx
push eax
call fcn.1015692e
lea eax, [esp + 0x54]
push eax
call edi
push eax
lea eax, [esp + 0x58]
push eax
push 1
push str.Forward
push dword [esp + 0x20]
call dword [sym.imp.ADVAPI32.dll_RegSetValueA]
mov esi, eax
test esi, esi
jne 0x1016d3a1
push dword [esp + 0x10]
call ebp
or dword [esp + 0x10], 0xffffffff
mov esi, eax
test esi, esi
jne 0x1016d3ae
mov eax, dword [esp + 0x18]
add dword [esp + 0x1c], 0x10
inc eax
mov dword [esp + 0x18], eax
cmp eax, dword [esp + 0x24]
jge 0x1016d3bb
mov esi, dword [esp + 0x1c]
jmp 0x1016d33b