Function at 0x100013f0
Capabilities:
Set registry value

Disassembly:
push ebp
mov ebp, esp
push edi
push esi
mov esi, eax
push ebx
sub esp, 0x240
mov ebx, dword [eax + 0x28]
test ebx, ebx
je 0x10001760
lea eax, [ebp - 0x220]
mov dword [esp + 4], str.CLSID
mov ebx, dword [sym.imp.advapi32.dll_RegCreateKeyW]
mov dword [esp + 8], eax
mov dword [esp], 0x80000000
call ebx
sub esp, 0xc
test eax, eax
je 0x10001440
mov edi, 0x80070005
lea esp, [ebp - 0xc]
mov eax, edi
pop ebx
pop esi
pop edi
pop ebp
ret
lea eax, [ebp - 0x21c]
mov dword [esp + 8], eax
mov eax, dword [esi + 0x28]
mov dword [esp + 4], eax
mov eax, dword [ebp - 0x220]
mov dword [esp], eax
call ebx
mov edi, eax
mov eax, dword [ebp - 0x220]
sub esp, 0xc
mov dword [esp], eax
mov eax, dword [sym.imp.advapi32.dll_RegCloseKey]
mov dword [ebp - 0x228], eax
call eax
sub esp, 4
test edi, edi
jne 0x10001431
mov eax, dword [esi + 0xc]
lea edi, [ebp - 0x218]
mov ecx, dword [eax]
mov dword [esp + 0xc], edi
mov dword [esp + 8], 0
mov dword [esp + 4], 0
mov dword [esp], eax
call dword [ecx + 0x50]
sub esp, 0x10
mov edi, eax
test eax, eax
js 0x10001a30
mov eax, dword [ebp - 0x21c]
lea edi, [ebp - 0x224]
mov dword [esp + 4], 0x1000c058
mov dword [esp + 8], edi
mov dword [esp], eax
call ebx
sub esp, 0xc
test eax, eax
mov eax, dword [ebp - 0x218]
mov dword [esp], eax
je 0x10001a50
call dword [sym.imp.ole32.dll_CoTaskMemFree]
mov eax, dword [esi + 0x18]
sub esp, 4
test eax, eax
je 0x10001a10
mov edx, dword [sym.imp.ucrtbase.dll_wcslen]
mov dword [ebp - 0x22c], edx
mov edx, dword [sym.imp.advapi32.dll_RegSetValueExW]
mov dword [ebp - 0x230], edx
mov dword [esp], eax
mov eax, dword [ebp - 0x22c]
call eax
lea eax, [eax + eax + 2]
mov dword [esp + 0x14], eax
mov eax, dword [esi + 0x18]
mov dword [esp + 0xc], 1
mov dword [esp + 0x10], eax
mov eax, dword [ebp - 0x21c]
mov dword [esp + 8], 0
mov dword [esp], eax
mov eax, dword [ebp - 0x230]
mov dword [esp + 4], 0
call eax
sub esp, 0x18
mov ecx, eax
mov eax, dword [ebp - 0x21c]
test ecx, ecx
jne 0x10001a16
mov dword [esp + 8], edi
mov dword [esp + 4], str.InprocServer32
mov dword [esp], eax
call ebx
sub esp, 0xc
test eax, eax
jne 0x10001a10
mov eax, dword [0x1001900c]
lea ecx, [ebp - 0x214]
mov dword [esp + 8], 0x104
mov dword [esp + 4], ecx
mov dword [esp], eax
call dword [sym.imp.kernel32.dll_GetModuleFileNameW]
lea ecx, [ebp - 0x214]
mov eax, dword [ebp - 0x22c]
sub esp, 0xc
mov dword [esp], ecx
call eax
lea ecx, [ebp - 0x214]
mov dword [esp + 0xc], 1
lea eax, [eax + eax + 2]
mov dword [esp + 0x10], ecx
mov dword [esp + 0x14], eax
mov eax, dword [ebp - 0x224]
mov dword [esp + 8], 0
mov dword [esp], eax
mov eax, dword [ebp - 0x230]
mov dword [esp + 4], 0
call eax
mov dword [ebp - 0x234], eax
mov eax, dword [ebp - 0x224]
sub esp, 0x18
mov dword [esp], eax
mov eax, dword [ebp - 0x228]
call eax
mov ecx, dword [ebp - 0x234]
mov eax, dword [ebp - 0x21c]
sub esp, 4
test ecx, ecx
jne 0x10001a16
mov ecx, dword [esi + 0x20]
test ecx, ecx
je 0x100016bd
mov dword [esp + 8], edi
mov dword [esp + 4], str.ProgID
mov dword [esp], eax
call ebx
sub esp, 0xc
test eax, eax
jne 0x10001a10
mov eax, dword [esi + 0x20]
mov dword [esp], eax
mov eax, dword [ebp - 0x22c]
call eax
lea eax, [eax + eax + 2]
mov dword [esp + 0x14], eax
mov eax, dword [esi + 0x20]
mov dword [esp + 0xc], 1
mov dword [esp + 0x10], eax
mov eax, dword [ebp - 0x224]
mov dword [esp + 8], 0
mov dword [esp], eax
mov eax, dword [ebp - 0x230]
mov dword [esp + 4], 0
call eax
mov dword [ebp - 0x234], eax
mov eax, dword [ebp - 0x224]
sub esp, 0x18
mov dword [esp], eax
mov eax, dword [ebp - 0x228]
call eax
mov ecx, dword [ebp - 0x234]
mov eax, dword [ebp - 0x21c]
sub esp, 4
test ecx, ecx
jne 0x10001a16
mov edx, dword [esi + 0x1c]
test edx, edx
je 0x10001ae8
mov dword [esp + 8], edi
mov dword [esp + 4], str.VersionIndependentProgID
mov dword [esp], eax
call ebx
sub esp, 0xc
test eax, eax
jne 0x10001a10
mov eax, dword [esi + 0x1c]
mov dword [esp], eax
mov eax, dword [ebp - 0x22c]
call eax
lea eax, [eax + eax + 2]
mov dword [esp + 0x14], eax
mov eax, dword [esi + 0x1c]
mov dword [esp + 0xc], 1
mov dword [esp + 0x10], eax
mov eax, dword [ebp - 0x224]
mov dword [esp + 8], 0
mov dword [esp], eax
mov eax, dword [ebp - 0x230]
mov dword [esp + 4], 0
call eax
mov edi, dword [ebp - 0x228]
mov ebx, eax
mov eax, dword [ebp - 0x224]
sub esp, 0x18
mov dword [esp], eax
call edi
mov eax, dword [ebp - 0x21c]
sub esp, 4
mov dword [esp], eax
call edi
sub esp, 4
test ebx, ebx
jne 0x10001431
lea esi, [esi]
mov eax, dword [esi + 0x1c]
test eax, eax
je 0x100018a0
lea ecx, [ebp - 0x224]
mov dword [esp + 4], eax
mov ebx, dword [sym.imp.advapi32.dll_RegCreateKeyW]
mov dword [esp + 8], ecx
mov dword [esp], 0x80000000
call ebx
sub esp, 0xc
test eax, eax
jne 0x10001431
mov eax, dword [esi + 0x18]
test eax, eax
je 0x10001800
mov dword [esp], eax
call dword [sym.imp.ucrtbase.dll_wcslen]
lea eax, [eax + eax + 2]
mov dword [esp + 0x14], eax
mov eax, dword [esi + 0x18]
mov dword [esp + 0xc], 1
mov dword [esp + 0x10], eax
mov eax, dword [ebp - 0x224]
mov dword [esp + 8], 0
mov dword [esp + 4], 0
mov dword [esp], eax
call dword [sym.imp.advapi32.dll_RegSetValueExW]
sub esp, 0x18
test eax, eax
je 0x10001800
mov eax, dword [ebp - 0x224]
mov dword [esp], eax
call dword [sym.imp.advapi32.dll_RegCloseKey]
sub esp, 4
jmp 0x10001431
mov ecx, dword [esi + 0x28]
mov eax, dword [ebp - 0x224]
test ecx, ecx
je 0x100019e0
lea ecx, [ebp - 0x220]
mov dword [esp + 4], str.CLSID
mov dword [esp + 8], ecx
mov dword [esp], eax
call ebx
sub esp, 0xc
test eax, eax
jne 0x100017e0
mov eax, dword [esi + 0x28]
mov dword [esp], eax
call dword [sym.imp.ucrtbase.dll_wcslen]
lea eax, [eax + eax + 2]
mov dword [esp + 0x14], eax
mov eax, dword [esi + 0x28]
mov dword [esp + 0xc], 1
mov dword [esp + 0x10], eax
mov eax, dword [ebp - 0x220]
mov dword [esp + 8], 0
mov dword [esp + 4], 0
mov dword [esp], eax
call dword [sym.imp.advapi32.dll_RegSetValueExW]
mov edi, dword [sym.imp.advapi32.dll_RegCloseKey]
mov ebx, eax
mov eax, dword [ebp - 0x220]
sub esp, 0x18
mov dword [esp], eax
call edi
mov eax, dword [ebp - 0x224]
sub esp, 4
mov dword [esp], eax
call edi
sub esp, 4
test ebx, ebx
jne 0x10001431
mov eax, dword [esi + 0x20]
test eax, eax
je 0x100019ca
lea ecx, [ebp - 0x224]
mov dword [esp + 4], eax
mov ebx, dword [sym.imp.advapi32.dll_RegCreateKeyW]
mov dword [esp + 8], ecx
mov dword [esp], 0x80000000
call ebx
sub esp, 0xc
mov edi, eax
test eax, eax
jne 0x10001431
mov eax, dword [esi + 0x18]
test eax, eax
je 0x10001926
mov dword [esp], eax
call dword [sym.imp.ucrtbase.dll_wcslen]
lea eax, [eax + eax + 2]
mov dword [esp + 0x14], eax
mov eax, dword [esi + 0x18]
mov dword [esp + 0xc], 1
mov dword [esp + 0x10], eax
mov eax, dword [ebp - 0x224]
mov dword [esp + 8], 0
mov dword [esp + 4], 0
mov dword [esp], eax
call dword [sym.imp.advapi32.dll_RegSetValueExW]
sub esp, 0x18
test eax, eax
jne 0x100017e0
mov edx, dword [esi + 0x28]
mov eax, dword [ebp - 0x224]
test edx, edx
je 0x100019f8
lea ecx, [ebp - 0x220]
mov dword [esp + 4], str.CLSID
mov dword [esp + 8], ecx
mov dword [esp], eax
call ebx
sub esp, 0xc
test eax, eax
jne 0x100017e0
mov eax, dword [esi + 0x28]
mov dword [esp], eax
call dword [sym.imp.ucrtbase.dll_wcslen]
lea eax, [eax + eax + 2]
mov dword [esp + 0x14], eax
mov eax, dword [esi + 0x28]
mov dword [esp + 0xc], 1
mov dword [esp + 0x10], eax
mov eax, dword [ebp - 0x220]
mov dword [esp + 8], 0
mov dword [esp + 4], 0
mov dword [esp], eax
call dword [sym.imp.advapi32.dll_RegSetValueExW]
mov esi, dword [sym.imp.advapi32.dll_RegCloseKey]
mov ebx, eax
mov eax, dword [ebp - 0x220]
sub esp, 0x18
mov dword [esp], eax
call esi
mov eax, dword [ebp - 0x224]
sub esp, 4
mov dword [esp], eax
call esi
sub esp, 4
test ebx, ebx
jne 0x10001431
lea esp, [ebp - 0xc]
xor edi, edi
pop ebx
mov eax, edi
pop esi
pop edi
pop ebp
ret
mov dword [esp], eax
call dword [sym.imp.advapi32.dll_RegCloseKey]
sub esp, 4
jmp 0x100018a0
mov dword [esp], eax
call dword [sym.imp.advapi32.dll_RegCloseKey]
sub esp, 4
jmp 0x10001436
mov eax, dword [ebp - 0x21c]
mov dword [esp], eax
mov eax, dword [ebp - 0x228]
mov edi, 0x80070005
call eax
sub esp, 4
jmp 0x10001436
mov eax, dword [ebp - 0x21c]
mov dword [esp], eax
mov eax, dword [ebp - 0x228]
call eax
sub esp, 4
jmp 0x10001436
mov eax, dword [sym.imp.ucrtbase.dll_wcslen]
mov dword [ebp - 0x22c], eax
call eax
mov dword [esp + 0xc], 1
lea eax, [eax + eax + 2]
mov dword [esp + 8], 0
mov dword [esp + 0x14], eax
mov eax, dword [ebp - 0x218]
mov dword [esp + 4], 0
mov dword [esp + 0x10], eax
mov eax, dword [ebp - 0x224]
mov dword [esp], eax
mov eax, dword [sym.imp.advapi32.dll_RegSetValueExW]
mov dword [ebp - 0x230], eax
call eax
mov dword [ebp - 0x234], eax
mov eax, dword [ebp - 0x224]
sub esp, 0x18
mov dword [esp], eax
mov eax, dword [ebp - 0x228]
call eax
mov eax, dword [ebp - 0x218]
sub esp, 4
mov dword [esp], eax
call dword [sym.imp.ole32.dll_CoTaskMemFree]
mov eax, dword [esi + 0x18]
mov ecx, dword [ebp - 0x234]
sub esp, 4
test eax, eax
jne 0x1000150d
jmp 0x10001555
mov dword [esp], eax
mov eax, dword [ebp - 0x228]
call eax
sub esp, 4
jmp 0x10001760