Function at 0x100240b0
Capabilities:
Delete registry value
Set registry value

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x21c
mov eax, dword [0x1004f0a8]
xor eax, ebp
mov dword [ebp - 4], eax
push ebx
push edi
call fcn.10023fb0
mov edi, eax
test edi, edi
jne 0x100240dc
mov ecx, 0x10053918
call fcn.1001b4a0
mov edi, eax
xor eax, eax
push 0x206
push eax
lea ecx, [ebp - 0x20a]
push ecx
mov word [ebp - 0x20c], ax
call fcn.1000ae30
add esp, 0xc
mov ecx, 0x10053908
mov dword [ebp - 0x210], 0
call fcn.1001b4a0
push eax
mov ecx, 0x100538e8
call fcn.1001b4a0
push eax
push 0x10041304
lea edx, [ebp - 0x20c]
push pe_nt_image_headers32
push edx
call fcn.1000c6df
add esp, 0x14
xor ebx, ebx
call fcn.1001ebe0
fst qword [ebp - 0x21c]
fcomp qword [0x10047518]
fnstsw ax
test ah, 1
jne 0x1002416d
mov ecx, 0x100538e8
call fcn.1001b4a0
push ebx
push 0x2001d
push eax
push SysReAllocString
call fcn.1001dc20
add esp, 0x10
mov ebx, eax
push 0
lea eax, [ebp - 0x210]
push eax
push 0
push 0x10002
push 0
push 0
push 0
lea ecx, [ebp - 0x20c]
push ecx
push SysReAllocString
call dword [sym.imp.ADVAPI32.dll_RegCreateKeyExW]
test eax, eax
je 0x100241e1
test ebx, ebx
je 0x100241cf
fld qword [0x10047518]
fcomp qword [ebp - 0x21c]
fnstsw ax
test ah, 0x41
jp 0x100241cf
mov ecx, 0x100538e8
call fcn.1001b4a0
push 0
push 0x20019
push eax
push SysReAllocString
call fcn.1001dc20
add esp, 0x10
pop edi
xor al, al
pop ebx
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.1000ae1e
mov esp, ebp
pop ebp
ret
mov edx, dword [ebp - 0x210]
push esi
push str.CodePage
push edx
call dword [sym.imp.ADVAPI32.dll_RegDeleteValueW]
mov eax, dword [ebp - 0x210]
mov esi, dword [sym.imp.ADVAPI32.dll_RegSetValueExW]
push 6
push 0x100474f8
push 1
push 0
push str.DisplayName
push eax
call esi
push 0x100474f8
push str.DisplayName:__s
push 6
call fcn.1001af20
mov eax, edi
add esp, 0xc
lea edx, [eax + 2]
lea esp, [esp]
mov cx, word [eax]
add eax, 2
test cx, cx
jne 0x10024230
sub eax, edx
mov edx, dword [ebp - 0x210]
sar eax, 1
lea ecx, [eax + eax + 2]
push ecx
push edi
push 1
push 0
push 0x100474d0
push edx
call esi
mov eax, dword [ebp - 0x210]
push 0x5e
push str.http:__apis.soso.com_wh.q_wsearchTermsjson
push 1
push 0
push str.SuggestionsURL_Json
push eax
call esi
mov edx, dword [ebp - 0x210]
push 4
lea ecx, [ebp - 0x214]
push ecx
push 4
push 0
push str.ShowSearchSuggestions
push edx
mov dword [ebp - 0x214], 1
call esi
mov eax, dword [ebp - 0x210]
test eax, eax
je 0x100242a6
push eax
call dword [sym.imp.ADVAPI32.dll_RegCloseKey]
mov ecx, 0x10053908
call fcn.1001b4a0
lea edx, [eax + 2]
mov cx, word [eax]
add eax, 2
test cx, cx
jne 0x100242b3
sub eax, edx
sar eax, 1
mov ecx, 0x10053908
mov esi, eax
call fcn.1001b4a0
mov ecx, 0x100538e8
mov edi, eax
call fcn.1001b4a0
lea ecx, [esi + esi + 2]
push ecx
push edi
push 1
push str.DefaultScope
push eax
push SysReAllocString
call dword [sym.imp.SHLWAPI.dll_SHSetValueW]
mov esi, eax
test ebx, ebx
je 0x1002432b
fld qword [0x10047518]
fcomp qword [ebp - 0x21c]
fnstsw ax
test ah, 0x41
jp 0x1002432b
mov ecx, 0x100538e8
call fcn.1001b4a0
push 0
push 0x20019
push eax
push SysReAllocString
call fcn.1001dc20
add esp, 0x10
mov ecx, dword [ebp - 4]
xor eax, eax
test esi, esi
pop esi
sete al
pop edi
xor ecx, ebp
pop ebx
call fcn.1000ae1e
mov esp, ebp
pop ebp
ret