Function at 0x3163e463
Capabilities:
Set registry value

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x268
and dword [ebp - 8], 0
and dword [ebp - 4], 0
push esi
mov esi, dword [ebp + 0x24]
push esi
push dword [ebp + 0x10]
push dword [ebp + 0xc]
call fcn.3163e1d9
add esp, 0xc
test eax, eax
je 0x3163eb11
cmp dword [esi], 0xf0e42d60
push ebx
mov ebx, dword [sym.imp.KERNEL32.dll_lstrlenW]
push edi
jne 0x3163e4b1
push 4
pop ecx
mov edi, 0x31646060
xor eax, eax
repe cmpsd dword [esi], dword es:[edi]
je 0x3163e7ad
push dword [ebp + 8]
mov esi, 0x104
push esi
lea eax, [ebp - 0x268]
push eax
call fcn.3163806b
push 0x31646210
push esi
lea eax, [ebp - 0x268]
push eax
call fcn.3163ee01
push dword [ebp + 0xc]
lea eax, [ebp - 0x268]
push esi
push eax
call fcn.3163ee01
lea eax, [ebp - 0xc]
push eax
lea eax, [ebp - 8]
push eax
xor edi, edi
push edi
push 0x2001f
push edi
push 0x31646214
push edi
lea eax, [ebp - 0x268]
push eax
push SysAllocStringLen
call dword [sym.imp.ADVAPI32.dll_RegCreateKeyExW]
test eax, eax
jne 0x3163ea3e
cmp dword [ebp + 0x10], edi
lea eax, [ebp - 0x268]
jne 0x3163e53b
push dword [ebp + 0xc]
mov edi, dword [sym.imp.SHLWAPI.dll_wnsprintfW]
push 0x31646218
push esi
push eax
call edi
add esp, 0x10
jmp 0x3163e54b
push dword [ebp + 0x10]
push esi
push eax
call fcn.3163806b
mov edi, dword [sym.imp.SHLWAPI.dll_wnsprintfW]
lea eax, [ebp - 0x268]
push eax
call ebx
lea eax, [eax + eax + 2]
push eax
lea eax, [ebp - 0x268]
push eax
push 1
push 0
push 0
push dword [ebp - 8]
call dword [sym.imp.ADVAPI32.dll_RegSetValueExW]
test eax, eax
jne 0x3163ea3e
lea eax, [ebp - 0xc]
push eax
lea eax, [ebp - 4]
push eax
xor eax, eax
push eax
push 0x2001f
push eax
push 0x3164622c
push eax
push 0x31646230
push dword [ebp - 8]
call dword [sym.imp.ADVAPI32.dll_RegCreateKeyExW]
test eax, eax
jne 0x3163ea3e
push 0x28
lea eax, [ebp - 0x60]
push eax
push dword [ebp + 0x24]
call dword [sym.imp.ole32.dll_StringFromGUID2]
test eax, eax
je 0x3163ea3e
lea eax, [ebp - 0x60]
push eax
call ebx
lea eax, [eax + eax + 2]
push eax
lea eax, [ebp - 0x60]
push eax
push 1
push 0
push 0
push dword [ebp - 4]
call dword [sym.imp.ADVAPI32.dll_RegSetValueExW]
test eax, eax
jne 0x3163ea3e
push dword [ebp - 4]
call dword [sym.imp.ADVAPI32.dll_RegCloseKey]
lea eax, [ebp - 0xc]
push eax
lea eax, [ebp - 4]
push eax
xor eax, eax
push eax
push 0x2001f
push eax
push 0x3164623c
push eax
push str.CurVer
push dword [ebp - 8]
call dword [sym.imp.ADVAPI32.dll_RegCreateKeyExW]
test eax, eax
jne 0x3163ea3e
push dword [ebp + 8]
lea eax, [ebp - 0x268]
push 0x31646250
push esi
push eax
call edi
add esp, 0x10
push dword [ebp + 0xc]
lea eax, [ebp - 0x268]
push 0x31646258
push eax
call ebx
mov ecx, esi
sub ecx, eax
push ecx
lea eax, [ebp - 0x268]
push eax
call ebx
lea eax, [ebp + eax*2 - 0x268]
push eax
call edi
add esp, 0x10
push dword [ebp + 0x14]
lea eax, [ebp - 0x268]
push 0x31646260
push eax
call ebx
mov ecx, esi
sub ecx, eax
push ecx
lea eax, [ebp - 0x268]
push eax
call ebx
lea eax, [ebp + eax*2 - 0x268]
push eax
call edi
add esp, 0x10
lea eax, [ebp - 0x268]
push eax
call ebx
lea eax, [eax + eax + 2]
push eax
lea eax, [ebp - 0x268]
push eax
push 1
push 0
push 0
push dword [ebp - 4]
call dword [sym.imp.ADVAPI32.dll_RegSetValueExW]
test eax, eax
jne 0x3163ea3e
push dword [ebp - 4]
call dword [sym.imp.ADVAPI32.dll_RegCloseKey]
push dword [ebp - 8]
call dword [sym.imp.ADVAPI32.dll_RegCloseKey]
lea eax, [ebp - 0xc]
push eax
lea eax, [ebp - 8]
push eax
xor eax, eax
push eax
push 0x2001f
push eax
push 0x31646268
push eax
lea eax, [ebp - 0x268]
push eax
push SysAllocStringLen
call dword [sym.imp.ADVAPI32.dll_RegCreateKeyExW]
test eax, eax
jne 0x3163ea3e
cmp dword [ebp + 0x10], 0
lea eax, [ebp - 0x268]
jne 0x3163e710
push dword [ebp + 0xc]
push str._s_Object
push esi
push eax
call edi
add esp, 0x10
jmp 0x3163e71a
push dword [ebp + 0x10]
push esi
push eax
call fcn.3163806b
lea eax, [ebp - 0x268]
push eax
call ebx
lea eax, [eax + eax + 2]
push eax
lea eax, [ebp - 0x268]
push eax
push 1
push 0
push 0
push dword [ebp - 8]
call dword [sym.imp.ADVAPI32.dll_RegSetValueExW]
test eax, eax
jne 0x3163ea3e
lea eax, [ebp - 0xc]
push eax
lea eax, [ebp - 4]
push eax
xor eax, eax
push eax
push 0x2001f
push eax
push 0x31646280
push eax
push 0x31646284
push dword [ebp - 8]
call dword [sym.imp.ADVAPI32.dll_RegCreateKeyExW]
test eax, eax
jne 0x3163ea3e
lea eax, [ebp - 0x60]
push eax
call ebx
lea eax, [eax + eax + 2]
push eax
lea eax, [ebp - 0x60]
push eax
push 1
push 0
push 0
push dword [ebp - 4]
call dword [sym.imp.ADVAPI32.dll_RegSetValueExW]
test eax, eax
jne 0x3163ea3e
push dword [ebp - 4]
call dword [sym.imp.ADVAPI32.dll_RegCloseKey]
push dword [ebp - 8]
call dword [sym.imp.ADVAPI32.dll_RegCloseKey]
jmp 0x3163e7b8
mov edi, dword [sym.imp.SHLWAPI.dll_wnsprintfW]
mov esi, 0x104
push 0x28
lea eax, [ebp - 0x60]
push eax
push dword [ebp + 0x24]
call dword [sym.imp.ole32.dll_StringFromGUID2]
test eax, eax
je 0x3163ea3e
lea eax, [ebp - 0x60]
push eax
push 0x31646290
lea eax, [ebp - 0x268]
push esi
push eax
call edi
add esp, 0x10
lea eax, [ebp - 0xc]
push eax
lea eax, [ebp - 8]
push eax
xor eax, eax
push eax
push 0x2001f
push eax
push 0x316462a4
push eax
lea eax, [ebp - 0x268]
push eax
push SysAllocStringLen
call dword [sym.imp.ADVAPI32.dll_RegCreateKeyExW]
test eax, eax
jne 0x3163ea3e
mov eax, dword [ebp + 0x24]
cmp dword [eax], 0xf0e42d60
jne 0x3163e840
push 4
mov esi, eax
pop ecx
mov edi, 0x31646060
xor eax, eax
repe cmpsd dword [esi], dword es:[edi]
mov edi, dword [sym.imp.SHLWAPI.dll_wnsprintfW]
mov esi, 0x104
je 0x3163e9b2
lea eax, [ebp - 0xc]
push eax
lea eax, [ebp - 4]
push eax
xor eax, eax
push eax
push 0x2001f
push eax
push 0x316462a8
push eax
push str.VersionIndependentProgID
push dword [ebp - 8]
call dword [sym.imp.ADVAPI32.dll_RegCreateKeyExW]
test eax, eax
jne 0x3163ea3e
push dword [ebp + 8]
lea eax, [ebp - 0x268]
push 0x316462e0
push esi
push eax
call edi
add esp, 0x10
push dword [ebp + 0xc]
lea eax, [ebp - 0x268]
push 0x316462e8
push eax
call ebx
mov ecx, esi
sub ecx, eax
push ecx
lea eax, [ebp - 0x268]
push eax
call ebx
lea eax, [ebp + eax*2 - 0x268]
push eax
call edi
add esp, 0x10
lea eax, [ebp - 0x268]
push eax
call ebx
lea eax, [eax + eax + 2]
push eax
lea eax, [ebp - 0x268]
push eax
push 1
push 0
push 0
push dword [ebp - 4]
call dword [sym.imp.ADVAPI32.dll_RegSetValueExW]
test eax, eax
jne 0x3163ea3e
push dword [ebp - 4]
call dword [sym.imp.ADVAPI32.dll_RegCloseKey]
lea eax, [ebp - 0xc]
push eax
lea eax, [ebp - 4]
push eax
xor eax, eax
push eax
push 0x2001f
push eax
push 0x316462f0
push eax
push str.ProgID
push dword [ebp - 8]
call dword [sym.imp.ADVAPI32.dll_RegCreateKeyExW]
test eax, eax
jne 0x3163ea3e
push dword [ebp + 8]
lea eax, [ebp - 0x268]
push 0x31646304
push esi
push eax
call edi
add esp, 0x10
push dword [ebp + 0xc]
lea eax, [ebp - 0x268]
push 0x3164630c
push eax
call ebx
mov ecx, esi
sub ecx, eax
push ecx
lea eax, [ebp - 0x268]
push eax
call ebx
lea eax, [ebp + eax*2 - 0x268]
push eax
call edi
add esp, 0x10
push dword [ebp + 0x14]
lea eax, [ebp - 0x268]
push 0x31646314
push eax
call ebx
mov ecx, esi
sub ecx, eax
push ecx
lea eax, [ebp - 0x268]
push eax
call ebx
lea eax, [ebp + eax*2 - 0x268]
push eax
call edi
add esp, 0x10
lea eax, [ebp - 0x268]
push eax
call ebx
lea eax, [eax + eax + 2]
push eax
lea eax, [ebp - 0x268]
push eax
push 1
push 0
push 0
push dword [ebp - 4]
call dword [sym.imp.ADVAPI32.dll_RegSetValueExW]
test eax, eax
jne 0x3163ea3e
push dword [ebp - 4]
call dword [sym.imp.ADVAPI32.dll_RegCloseKey]
lea eax, [ebp - 0xc]
push eax
lea eax, [ebp - 4]
push eax
xor eax, eax
push eax
push 0x2001f
push eax
push 0x3164631c
push eax
push str.TypeLib
push dword [ebp - 8]
call dword [sym.imp.ADVAPI32.dll_RegCreateKeyExW]
push 0x28
lea eax, [ebp - 0x60]
push eax
push dword [ebp + 0x20]
call dword [sym.imp.ole32.dll_StringFromGUID2]
test eax, eax
je 0x3163ea3e
lea eax, [ebp - 0x60]
push eax
call ebx
lea eax, [eax + eax + 2]
push eax
lea eax, [ebp - 0x60]
push eax
push 1
push 0
push 0
push dword [ebp - 4]
call dword [sym.imp.ADVAPI32.dll_RegSetValueExW]
test eax, eax
jne 0x3163ea3e
push dword [ebp - 4]
call dword [sym.imp.ADVAPI32.dll_RegCloseKey]
lea eax, [ebp - 0xc]
push eax
lea eax, [ebp - 4]
push eax
xor eax, eax
push eax
push 0x2001f
push eax
push 0x31646330
push eax
push str.Version
push dword [ebp - 8]
call dword [sym.imp.ADVAPI32.dll_RegCreateKeyExW]
test eax, eax
je 0x3163ea61
cmp dword [ebp - 8], 0
je 0x3163ea5a
push dword [ebp - 4]
mov esi, dword [sym.imp.ADVAPI32.dll_RegCloseKey]
call esi
cmp dword [ebp - 8], 0
je 0x3163ea5a
push dword [ebp - 8]
call esi
xor eax, eax
jmp 0x3163eb0f
push dword [ebp + 0x18]
lea eax, [ebp - 0x268]
push str._ld.
push esi
push eax
call edi
add esp, 0x10
push dword [ebp + 0x1c]
lea eax, [ebp - 0x268]
push 0x31646350
push eax
call ebx
sub esi, eax
push esi
lea eax, [ebp - 0x268]
push eax
call ebx
lea eax, [ebp + eax*2 - 0x268]
push eax
call edi
add esp, 0x10
lea eax, [ebp - 0x268]
push eax
call ebx
lea eax, [eax + eax + 2]
push eax
lea eax, [ebp - 0x268]
push eax
xor edi, edi
inc edi
push edi
xor esi, esi
push esi
push esi
push dword [ebp - 4]
call dword [sym.imp.ADVAPI32.dll_RegSetValueExW]
lea eax, [ebp - 0x10]
push eax
push 0x31646eb8
push edi
push esi
push 0x31646cb8
call fcn.31640e83
add esp, 0x14
test eax, eax
jl 0x3163eafd
mov eax, dword [ebp - 0x10]
mov ecx, dword [eax]
push 0x31646c98
push edi
push dword [ebp + 0x24]
push eax
call dword [ecx + 0x14]
mov eax, dword [ebp - 0x10]
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
push dword [ebp - 4]
mov esi, dword [sym.imp.ADVAPI32.dll_RegCloseKey]
call esi
push dword [ebp - 8]
call esi
mov eax, edi
pop edi
pop ebx
pop esi
leave
ret