Function at 0x10016610
Capabilities:
Set registry value

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x1008b220
mov eax, dword fs:[0]
push eax
sub esp, 0x394
mov eax, dword [0x100d0040]
xor eax, ebp
mov dword [ebp - 0x10], eax
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
lea edx, [ebp - 0x3a]
call fcn.10016260
test eax, eax
jne 0x10016650
xor ecx, ecx
jmp 0x100167a0
mov eax, dword [0x100bb9b8]
mov edi, dword [sym.imp.ADVAPI32.dll_RegCreateKeyExA]
mov dword [ebp - 0x40], eax
mov ax, word [0x100bb9bc]
mov word [ebp - 0x3c], ax
lea eax, [ebp - 0x3a0]
push eax
lea eax, [ebp - 0x39c]
push eax
push 0
push 0x20006
push 0
push 0
push 0
lea eax, [ebp - 0x40]
push eax
push SysReAllocString
call edi
xor ecx, ecx
test eax, eax
sete cl
mov dword [ebp - 0x394], ecx
test eax, eax
jne 0x100167a0
push 7
push str.Weasel
push 1
push eax
push eax
push dword [ebp - 0x39c]
call dword [sym.imp.ADVAPI32.dll_RegSetValueExA]
neg eax
sbb esi, esi
lea eax, [ebp - 0x3a0]
push eax
lea eax, [ebp - 0x398]
inc esi
and esi, dword [ebp - 0x394]
push eax
push 0
push 0x20006
push 0
push 0
push 0
push str.InprocServer32
push dword [ebp - 0x39c]
call edi
mov edi, dword [sym.imp.ADVAPI32.dll_RegCloseKey]
xor ecx, ecx
test eax, eax
cmove ecx, esi
mov dword [ebp - 0x394], ecx
test ecx, ecx
je 0x10016792
push 0x104
lea eax, [ebp - 0x188]
push eax
push dword [0x100d5538]
call dword [sym.imp.KERNEL32.dll_GetModuleFileNameA]
lea ecx, [ebp - 0x188]
mov dword [ebp - 0x3a0], eax
lea edx, [ecx + 1]
nop
mov al, byte [ecx]
inc ecx
test al, al
jne 0x10016730
sub ecx, edx
lea eax, [ecx + 1]
push eax
lea eax, [ebp - 0x188]
push eax
push 1
push 0
push 0
push dword [ebp - 0x398]
call dword [sym.imp.ADVAPI32.dll_RegSetValueExA]
push 0xa
push str.Apartment
push 1
neg eax
push 0
sbb esi, esi
push str.ThreadingModel
push dword [ebp - 0x398]
inc esi
and esi, dword [ebp - 0x394]
call dword [sym.imp.ADVAPI32.dll_RegSetValueExA]
push dword [ebp - 0x398]
xor ecx, ecx
test eax, eax
cmove ecx, esi
mov dword [ebp - 0x394], ecx
call edi
push dword [ebp - 0x39c]
call edi
mov ecx, dword [ebp - 0x394]
mov esi, dword [sym.imp.ole32.dll_CoCreateInstance]
test ecx, ecx
je 0x1001690a
push 0x104
lea eax, [ebp - 0x390]
push eax
push dword [0x100d5538]
call dword [sym.imp.KERNEL32.dll_GetModuleFileNameW]
mov edi, eax
mov dword [ebp - 0x394], 0
lea eax, [ebp - 0x394]
push eax
push 0x100bed24
push 0x17
push 0
push 0x100915d0
call esi
test eax, eax
jns 0x100167f9
mov dword [ebp - 4], 0
jmp 0x10016884
mov eax, dword [ebp - 0x394]
lea edx, [ebp - 0x390]
push 0
push 1
push 0
mov ecx, dword [eax]
push 0
push 0
push edi
push edx
push 3
push 0x100bed08
push 0x100bb978
push 0x804
push 0x100bb968
push eax
call dword [ecx + 0x20]
test eax, eax
jns 0x1001683a
mov dword [ebp - 4], 1
jmp 0x10016884
mov dword [ebp - 4], 2
mov eax, dword [ebp - 0x394]
test eax, eax
je 0x10016851
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
lea eax, [ebp - 0x394]
mov dword [ebp - 4], 0xffffffff
push eax
push 0x100bb888
push 1
push 0
push 0x100915c0
mov dword [ebp - 0x394], 0
call esi
test eax, eax
je 0x1001689d
mov dword [ebp - 4], 3
mov eax, dword [ebp - 0x394]
test eax, eax
je 0x10016894
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov dword [ebp - 4], 0xffffffff
jmp 0x1001690a
mov edi, 1
mov esi, 0x100d55a8
nop word [eax + eax]
mov eax, dword [ebp - 0x394]
push 0x100bb968
push esi
push 0x100bb968
mov ecx, dword [eax]
push eax
call dword [ecx + 0xc]
xor ecx, ecx
test eax, eax
cmove ecx, edi
add esi, 0x10
mov edi, ecx
cmp esi, 0x100d56a8
jne 0x100168b0
mov dword [ebp - 4], 4
mov eax, dword [ebp - 0x394]
test eax, eax
je 0x100168f2
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov dword [ebp - 4], 0xffffffff
test edi, edi
je 0x10016904
xor eax, eax
jmp 0x10016a61
mov esi, dword [sym.imp.ole32.dll_CoCreateInstance]
lea eax, [ebp - 0x394]
mov dword [ebp - 0x394], 0
push eax
push 0x100bed24
push 0x17
push 0
push 0x100915d0
call esi
test eax, eax
jns 0x10016938
mov dword [ebp - 4], 5
jmp 0x1001695c
mov eax, dword [ebp - 0x394]
push 0
push 0x100bb978
push 0x804
mov ecx, dword [eax]
push 0x100bb968
push eax
call dword [ecx + 0x24]
mov dword [ebp - 4], 6
mov eax, dword [ebp - 0x394]
test eax, eax
je 0x1001696c
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
lea eax, [ebp - 0x394]
mov dword [ebp - 4], 0xffffffff
push eax
push 0x100bb888
push 1
push 0
push 0x100915c0
mov dword [ebp - 0x394], 0
call esi
test eax, eax
jns 0x100169a1
mov dword [ebp - 4], 7
jmp 0x100169d9
mov esi, 0x100d55a8
nop word [eax + eax]
mov eax, dword [ebp - 0x394]
push 0x100bb968
push esi
push 0x100bb968
mov ecx, dword [eax]
push eax
call dword [ecx + 0x10]
add esi, 0x10
cmp esi, 0x100d56a8
jne 0x100169b0
mov dword [ebp - 4], 8
mov eax, dword [ebp - 0x394]
test eax, eax
je 0x100169e9
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
lea edx, [ebp - 0x3a]
mov dword [ebp - 4], 0xffffffff
call fcn.10016260
test eax, eax
je 0x10016a5c
mov eax, dword [0x100bb9b8]
lea edx, [ebp - 0x40]
mov dword [ebp - 0x40], eax
mov ecx, SysReAllocString
mov ax, word [0x100bb9bc]
mov word [ebp - 0x3c], ax
call fcn.100162c0
lea edx, [ebp - 0x6a]
call fcn.10016260
test eax, eax
je 0x10016a5c
movups xmm0, xmmword [str.SoftwareMicrosftCTFTIP_]
mov ax, word [0x100bb9e8]
lea edx, [ebp - 0x84]
mov ecx, SysReAllocString
mov word [ebp - 0x6c], ax
movups xmmword [ebp - 0x84], xmm0
movq xmm0, qword [0x100bb9e0]
movq qword [ebp - 0x74], xmm0
call fcn.100162c0
mov eax, 0x80004005
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
mov ecx, dword [ebp - 0x10]
xor ecx, ebp
call fcn.1005ca26
mov esp, ebp
pop ebp
ret