Function at 0x1786ab0
Capabilities:
Set registry value

Disassembly:
sub esp, 0x23c
mov eax, dword [str.Both]
mov cl, byte [0x17a5090]
push ebx
push ebp
push esi
mov esi, dword [sym.imp.ADVAPI32.dll_RegCreateKeyA]
lea edx, [esp + 0x14]
push edi
push edx
xor ebp, ebp
push str.CLSID
push 0x80000000
mov dword [esp + 0x24], ebp
mov dword [esp + 0x20], ebp
mov dword [esp + 0x1c], ebp
mov dword [esp + 0x28], eax
mov byte [esp + 0x2c], cl
call esi
test eax, eax
jne 0x1786d52
mov ecx, dword [esp + 0x254]
lea eax, [esp + 0x24]
push 0x27
push eax
push ecx
call fcn.01786e30
mov ecx, dword [esp + 0x24]
add esp, 0xc
lea edx, [esp + 0x14]
lea eax, [esp + 0x24]
push edx
push eax
push ecx
call esi
test eax, eax
je 0x1786b41
mov edx, dword [esp + 0x18]
push edx
call dword [sym.imp.ADVAPI32.dll_RegCloseKey]
pop edi
pop esi
pop ebp
mov eax, 0x8000ffff
pop ebx
add esp, 0x23c
ret
mov esi, dword [esp + 0x258]
mov edi, dword [sym.imp.KERNEL32.dll_lstrlenA]
push esi
call edi
mov ebx, dword [sym.imp.ADVAPI32.dll_RegSetValueA]
push eax
mov eax, dword [esp + 0x18]
push esi
push 1
push ebp
push eax
call ebx
test eax, eax
je 0x1786b72
mov esi, dword [sym.imp.ADVAPI32.dll_RegCloseKey]
jmp 0x1786d44
mov ecx, dword [esp + 0x14]
lea eax, [esp + 0x10]
push eax
push str.InprocServer32
push ecx
call dword [sym.imp.ADVAPI32.dll_RegCreateKeyA]
test eax, eax
je 0x1786baf
mov edx, dword [esp + 0x18]
mov esi, dword [sym.imp.ADVAPI32.dll_RegCloseKey]
push edx
call esi
mov eax, dword [esp + 0x14]
push eax
call esi
pop edi
pop esi
pop ebp
mov eax, 0x8000ffff
pop ebx
add esp, 0x23c
ret
mov edx, dword [esp + 0x250]
lea ecx, [esp + 0x4c]
push 0x200
push ecx
push edx
call dword [sym.imp.KERNEL32.dll_GetModuleFileNameA]
test eax, eax
jne 0x1786bf6
mov eax, dword [esp + 0x18]
mov esi, dword [sym.imp.ADVAPI32.dll_RegCloseKey]
push eax
call esi
mov ecx, dword [esp + 0x14]
push ecx
call esi
mov edx, dword [esp + 0x10]
push edx
call esi
pop edi
pop esi
pop ebp
mov eax, 0x8000ffff
pop ebx
add esp, 0x23c
ret
lea eax, [esp + 0x4c]
push eax
call edi
mov edx, dword [esp + 0x10]
lea ecx, [esp + 0x4c]
push eax
push ecx
push 1
push ebp
push edx
call ebx
test eax, eax
je 0x1786c3c
mov eax, dword [esp + 0x18]
mov esi, dword [sym.imp.ADVAPI32.dll_RegCloseKey]
push eax
call esi
mov ecx, dword [esp + 0x14]
push ecx
call esi
mov edx, dword [esp + 0x10]
push edx
call esi
pop edi
pop esi
pop ebp
mov eax, 0x8000ffff
pop ebx
add esp, 0x23c
ret
mov ecx, dword [esp + 0x10]
lea eax, [esp + 0x1c]
push 5
push eax
push 1
push ebp
push str.ThreadingModel
push ecx
call dword [sym.imp.ADVAPI32.dll_RegSetValueExA]
mov esi, dword [sym.imp.ADVAPI32.dll_RegCloseKey]
test eax, eax
je 0x1786c85
mov edx, dword [esp + 0x18]
push edx
call esi
mov eax, dword [esp + 0x14]
push eax
call esi
mov ecx, dword [esp + 0x10]
push ecx
call esi
pop edi
pop esi
pop ebp
mov eax, 0x8000ffff
pop ebx
add esp, 0x23c
ret
mov edx, dword [esp + 0x10]
push edx
call esi
mov ecx, dword [esp + 0x14]
lea eax, [esp + 0x10]
push eax
push str.ProgID
push ecx
mov dword [esp + 0x1c], ebp
call dword [sym.imp.ADVAPI32.dll_RegCreateKeyA]
test eax, eax
je 0x1786cc7
mov edx, dword [esp + 0x18]
push edx
call esi
mov eax, dword [esp + 0x14]
push eax
call esi
pop edi
pop esi
pop ebp
mov eax, 0x8000ffff
pop ebx
add esp, 0x23c
ret
mov ebp, dword [esp + 0x260]
push ebp
call edi
mov ecx, dword [esp + 0x10]
push eax
push ebp
push 1
push 0
push ecx
call ebx
test eax, eax
je 0x1786d00
mov edx, dword [esp + 0x18]
push edx
call esi
mov eax, dword [esp + 0x14]
push eax
call esi
pop edi
pop esi
pop ebp
mov eax, 0x8000ffff
pop ebx
add esp, 0x23c
ret
mov ecx, dword [esp + 0x10]
push ecx
call esi
mov eax, dword [esp + 0x14]
lea edx, [esp + 0x10]
push edx
push str.VersionIndependentProgID
push eax
mov dword [esp + 0x1c], 0
call dword [sym.imp.ADVAPI32.dll_RegCreateKeyA]
test eax, eax
jne 0x1786d44
mov ebp, dword [esp + 0x25c]
push ebp
call edi
push eax
mov eax, dword [esp + 0x14]
push ebp
xor edi, edi
push 1
push edi
push eax
call ebx
test eax, eax
je 0x1786d62
mov ecx, dword [esp + 0x18]
push ecx
call esi
mov edx, dword [esp + 0x14]
push edx
call esi
pop edi
pop esi
pop ebp
mov eax, 0x8000ffff
pop ebx
add esp, 0x23c
ret
mov eax, dword [esp + 0x10]
push eax
call esi
mov ecx, dword [esp + 0x14]
mov dword [esp + 0x10], edi
push ecx
call esi
mov edx, dword [esp + 0x18]
mov dword [esp + 0x14], edi
push edx
call esi
pop edi
pop esi
pop ebp
xor eax, eax
pop ebx
add esp, 0x23c
ret