Function at 0x40b400
Capabilities:
Set registry value

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x41c
mov eax, dword [0x42701c]
xor eax, ebp
mov dword [ebp - 4], eax
push ebx
push esi
push edi
mov edi, dword [sym.imp.SHLWAPI.dll_wnsprintfW]
lea esi, [ecx + 4]
push esi
push str._sZona.exe
lea eax, [ebp - 0x20c]
push 0x104
push eax
call edi
push esi
push str._suninstall.exe
lea ecx, [ebp - 0x414]
push 0x104
push ecx
call edi
mov edi, dword [sym.imp.ADVAPI32.dll_RegCreateKeyExW]
add esp, 0x20
push 0
lea edx, [ebp - 0x418]
push edx
push 0
push 0xf003f
push 0
push 0
push 0
push str.SOFTWAREZona
push reloc.OLEAUT32.dll_SysReAllocString
call edi
mov ebx, dword [sym.imp.ADVAPI32.dll_RegSetValueExW]
test eax, eax
jne 0x40b4b9
mov eax, esi
lea edx, [eax + 2]
mov cx, word [eax]
add eax, 2
test cx, cx
jne 0x40b481
mov ecx, dword [ebp - 0x418]
sub eax, edx
sar eax, 1
lea eax, [eax + eax + 2]
push eax
push esi
push 1
push 0
push str.Path
push ecx
call ebx
mov edx, dword [ebp - 0x418]
mov esi, dword [sym.imp.ADVAPI32.dll_RegCloseKey]
push edx
call esi
jmp 0x40b4bf
mov esi, dword [sym.imp.ADVAPI32.dll_RegCloseKey]
push 0
lea eax, [ebp - 0x418]
push eax
push 0
push 0xf003f
push 0
push 0
push 0
push str.SOFTWAREMicrosoftWindowsCurrentVersionUninstallZona_
push reloc.OLEAUT32.dll_SysReAllocString
call edi
test eax, eax
jne 0x40b506
mov ecx, dword [ebp - 0x418]
push 0xa
push str.Zona
push 1
push eax
push str.DisplayName
push ecx
call ebx
mov edx, dword [ebp - 0x418]
push edx
call esi
push 0
lea eax, [ebp - 0x418]
push eax
push 0
push 0xf003f
push 0
push 0
push 0
push str.SOFTWAREMicrosoftWindowsCurrentVersionUninstallZona
push reloc.OLEAUT32.dll_SysReAllocString
call edi
test eax, eax
jne 0x40b54d
mov ecx, dword [ebp - 0x418]
push 0xa
push str.Zona
push 1
push eax
push str.DisplayName
push ecx
call ebx
mov edx, dword [ebp - 0x418]
push edx
call esi
push 0
lea eax, [ebp - 0x418]
push eax
push 0
push 0xf003f
push 0
push 0
push 0
push str.SOFTWAREMicrosoftWindowsCurrentVersionUninstallZona
push reloc.OLEAUT32.dll_SysReAllocString
call edi
test eax, eax
jne 0x40b594
mov ecx, dword [ebp - 0x418]
push 0x14
push str.Zona_Team
push 1
push eax
push str.Publisher
push ecx
call ebx
mov edx, dword [ebp - 0x418]
push edx
call esi
push 0
lea eax, [ebp - 0x418]
push eax
push 0
push 0xf003f
push 0
push 0
push 0
push str.SOFTWAREMicrosoftWindowsCurrentVersionUninstallZona
push reloc.OLEAUT32.dll_SysReAllocString
mov dword [ebp - 0x41c], 0x7800
call edi
test eax, eax
jne 0x40b5e7
mov edx, dword [ebp - 0x418]
push 4
lea ecx, [ebp - 0x41c]
push ecx
push 4
push eax
push str.EstimatedSize
push edx
call ebx
mov eax, dword [ebp - 0x418]
push eax
call esi
push 0
lea ecx, [ebp - 0x418]
push ecx
push 0
push 0xf003f
push 0
push 0
push 0
push str.SOFTWAREMicrosoftWindowsCurrentVersionUninstallZona
push reloc.OLEAUT32.dll_SysReAllocString
call edi
test eax, eax
jne 0x40b64c
lea eax, [ebp - 0x20c]
lea edx, [eax + 2]
mov cx, word [eax]
add eax, 2
test cx, cx
jne 0x40b616
mov ecx, dword [ebp - 0x418]
sub eax, edx
sar eax, 1
lea edx, [eax + eax + 2]
push edx
lea eax, [ebp - 0x20c]
push eax
push 1
push 0
push str.DisplayIcon
push ecx
call ebx
mov edx, dword [ebp - 0x418]
push edx
call esi
push 0
lea eax, [ebp - 0x418]
push eax
push 0
push 0xf003f
push 0
push 0
push 0
push str.SOFTWAREMicrosoftWindowsCurrentVersionUninstallZona
push reloc.OLEAUT32.dll_SysReAllocString
call edi
test eax, eax
jne 0x40b6b6
lea eax, [ebp - 0x414]
lea edx, [eax + 2]
jmp 0x40b680
mov cx, word [eax]
add eax, 2
test cx, cx
jne 0x40b680
sub eax, edx
sar eax, 1
lea ecx, [eax + eax + 2]
mov eax, dword [ebp - 0x418]
push ecx
lea edx, [ebp - 0x414]
push edx
push 1
push 0
push str.UninstallString
push eax
call ebx
mov ecx, dword [ebp - 0x418]
push ecx
call esi
push 0
lea edx, [ebp - 0x418]
push edx
push 0
push 0xf003f
push 0
push 0
push 0
push str.SOFTWAREMicrosoftWindowsCurrentVersionUninstallZona
push reloc.OLEAUT32.dll_SysReAllocString
mov dword [ebp - 0x41c], 1
call edi
test eax, eax
jne 0x40b70a
mov ecx, dword [ebp - 0x418]
push 4
lea eax, [ebp - 0x41c]
push eax
push 4
push 0
push str.NoModify
push ecx
call ebx
mov edx, dword [ebp - 0x418]
push edx
call esi
push 0
lea eax, [ebp - 0x418]
push eax
push 0
push 0xf003f
push 0
push 0
push 0
push str.SOFTWAREMicrosoftWindowsCurrentVersionUninstallZona
push reloc.OLEAUT32.dll_SysReAllocString
mov dword [ebp - 0x41c], 1
call edi
test eax, eax
jne 0x40b75d
mov edx, dword [ebp - 0x418]
push 4
lea ecx, [ebp - 0x41c]
push ecx
push 4
push eax
push str.NoRepair
push edx
call ebx
mov eax, dword [ebp - 0x418]
push eax
call esi
mov ecx, dword [ebp - 4]
pop edi
pop esi
xor ecx, ebp
pop ebx
call fcn.0040fa5b
mov esp, ebp
pop ebp
ret 0xc