Function at 0x1001a109
Capabilities:
Set registry value

Disassembly:
push ebp
mov ebp, esp
mov eax, 0x3324
call fcn.10038750
mov eax, dword [0x100b802c]
xor eax, ebp
mov dword [ebp - 4], eax
mov eax, dword [ebp + 8]
push ebx
mov ebx, dword [ebp + 0xc]
push esi
mov dword [ebp - 0x3320], eax
mov eax, dword [ebp + 0x18]
push edi
xor edi, edi
mov dword [ebp - 0x3318], eax
mov eax, dword [ebp + 0x1c]
mov dword [ebp - 0x3314], eax
cmp dword [ebp + 0x14], edi
je 0x1001a401
mov esi, 0x104
lea eax, [ebp - 0x108]
push esi
push edi
push eax
call fcn.10050310
mov eax, dword [ebp - 0x3318]
add esp, 0xc
push esi
test eax, eax
je 0x1001a198
lea ecx, [ebp - 0x108]
push ecx
push eax
call dword [sym.imp.KERNEL32.dll_GetShortPathNameA]
test eax, eax
jne 0x1001a1ba
mov eax, dword [ebp - 0x3318]
push eax
lea eax, [ebp - 0x108]
push esi
push eax
call fcn.100570c2
add esp, 0xc
jmp 0x1001a1ba
lea eax, [ebp - 0x108]
push eax
push dword [ebp - 0x3320]
call dword [sym.imp.KERNEL32.dll_GetModuleFileNameA]
push esi
lea eax, [ebp - 0x108]
push eax
push eax
call dword [sym.imp.KERNEL32.dll_GetShortPathNameA]
cmp dword [ebp - 0x3314], edi
je 0x1001a1ea
push 0x100937a8
lea eax, [ebp - 0x108]
push esi
push eax
call fcn.1005711c
push dword [ebp - 0x3314]
lea eax, [ebp - 0x108]
push esi
push eax
call fcn.1005711c
add esp, 0x18
cmp dword [ebp + 0x10], edi
je 0x1001a263
push 0xffffffffffffffff
lea eax, [ebp - 0x108]
xor edi, edi
push eax
push esi
lea eax, [ebp - 0x310]
mov dword [ebp - 0x3314], edi
push eax
lea eax, [ebp - 0x3318]
mov dword [ebp - 0x3318], edi
push eax
call fcn.100573e1
add esp, 0x14
lea eax, [ebp - 0x3314]
push eax
lea eax, [ebp - 0x310]
push eax
call dword [sym.imp.OLEAUT32.dll_LoadRegTypeLib]
test eax, eax
js 0x1001a4ed
push edi
lea eax, [ebp - 0x310]
push eax
push dword [ebp - 0x3314]
call dword [sym.imp.OLEAUT32.dll_QueryPathOfRegTypeLib]
mov ecx, dword [ebp - 0x3314]
mov edi, eax
push ecx
mov edx, dword [ecx]
call dword [edx + 8]
test edi, edi
js 0x1001a4ed
test ebx, ebx
je 0x1001a5b9
xor eax, eax
cmp dword [ebx + 0x10], 0xffffffff
mov dword [ebp - 0x331c], eax
je 0x1001a5b9
lea esi, [ebx + 4]
cmp dword [esi + 8], 0xffffffff
lea eax, [ebp - 0x108]
cmovne eax, dword [esi + 8]
cmp dword [esi - 4], 0
mov dword [ebp - 0x3314], eax
je 0x1001a2c3
mov eax, dword [esi - 4]
push dword [esi]
mov dword [ebp - 0x331c], eax
lea eax, [ebp - 0x2310]
push eax
call dword [sym.imp.KERNEL32.dll_lstrcpyA]
push dword [esi]
lea eax, [ebp - 0x1310]
push eax
call dword [sym.imp.KERNEL32.dll_lstrcpyA]
jmp 0x1001a306
lea eax, [ebp - 0x2310]
push eax
lea eax, [ebp - 0x1310]
push eax
call dword [sym.imp.KERNEL32.dll_lstrcpyA]
cmp byte [ebp - 0x1310], 0
je 0x1001a306
cmp dword [esi], 0
je 0x1001a306
push 0x100937ac
lea eax, [ebp - 0x1310]
push eax
call dword [sym.imp.KERNEL32.dll_lstrcatA]
push dword [esi]
lea eax, [ebp - 0x1310]
push eax
call dword [sym.imp.KERNEL32.dll_lstrcatA]
mov eax, dword [ebp - 0x331c]
test eax, eax
je 0x1001a3e2
test byte [esi + 0xc], 6
je 0x1001a33c
lea ecx, [ebp - 0x1310]
push ecx
push eax
call fcn.1001a024
pop ecx
pop ecx
test eax, eax
je 0x1001a336
cmp eax, 2
jne 0x1001a3db
mov eax, dword [ebp - 0x331c]
test byte [esi + 0xc], 2
jne 0x1001a3c9
cmp byte [ebp - 0x1310], 0
je 0x1001a3c9
lea ecx, [ebp - 0x3324]
push ecx
lea ecx, [ebp - 0x3318]
push ecx
xor ecx, ecx
push ecx
push 0x20006
push ecx
push ecx
push ecx
lea ecx, [ebp - 0x1310]
push ecx
push eax
call dword [sym.imp.ADVAPI32.dll_RegCreateKeyExA]
test eax, eax
jne 0x1001a3db
test byte [esi + 0xc], 8
je 0x1001a38d
push 4
lea eax, [ebp - 0x3314]
push eax
push 4
jmp 0x1001a3ac
cmp dword [ebp - 0x3314], 0
je 0x1001a3bd
push dword [ebp - 0x3314]
call dword [sym.imp.KERNEL32.dll_lstrlenA]
inc eax
push eax
push dword [ebp - 0x3314]
push 1
push 0
push dword [esi + 4]
push dword [ebp - 0x3318]
call dword [sym.imp.ADVAPI32.dll_RegSetValueExA]
push dword [ebp - 0x3318]
call dword [sym.imp.ADVAPI32.dll_RegCloseKey]
add esi, 0x14
cmp dword [esi + 0xc], 0xffffffff
jne 0x1001a280
jmp 0x1001a5b9
xor eax, eax
push eax
push eax
push eax
jmp 0x1001a3e8
push 0
push 0
push 0
push dword [ebp + 0x10]
push ebx
push dword [ebp - 0x3320]
call fcn.1001a109
mov eax, 0x80040201
jmp 0x1001a5bb
cmp dword [ebp + 0x10], edi
je 0x1001a4f7
mov esi, 0x104
lea eax, [ebp - 0x108]
push esi
push 0
push eax
call fcn.10050310
add esp, 0xc
lea eax, [ebp - 0x108]
push esi
push eax
push dword [ebp - 0x3320]
call dword [sym.imp.KERNEL32.dll_GetModuleFileNameA]
xor edi, edi
lea eax, [ebp - 0x310]
push 0x208
push edi
push eax
mov dword [ebp - 0x3314], edi
call fcn.10050310
push 0xffffffffffffffff
lea eax, [ebp - 0x108]
mov dword [ebp - 0x331c], edi
push eax
push esi
lea eax, [ebp - 0x310]
push eax
lea eax, [ebp - 0x331c]
push eax
call fcn.100573e1
add esp, 0x20
lea eax, [ebp - 0x3314]
push eax
lea eax, [ebp - 0x310]
push eax
call dword [sym.imp.OLEAUT32.dll_LoadRegTypeLib]
test eax, eax
js 0x1001a4ed
mov eax, dword [ebp - 0x3314]
lea edx, [ebp - 0x3318]
mov dword [ebp - 0x3318], edi
push edx
push eax
mov ecx, dword [eax]
call dword [ecx + 0x1c]
mov edi, eax
test edi, edi
js 0x1001a4dd
mov ecx, dword [ebp - 0x3318]
push dword [ecx + 0x14]
movzx eax, word [ecx + 0x1a]
push dword [ecx + 0x10]
push eax
movzx eax, word [ecx + 0x18]
push eax
push ecx
call dword [sym.imp.OLEAUT32.dll_VarDecFix]
push dword [ebp - 0x3318]
mov edi, eax
mov eax, dword [ebp - 0x3314]
push eax
mov ecx, dword [eax]
call dword [ecx + 0x30]
mov eax, dword [ebp - 0x3314]
push eax
mov ecx, dword [eax]
call dword [ecx + 8]
test edi, edi
jns 0x1001a4f7
mov edi, 0x80040200
jmp 0x1001a5b9
test ebx, ebx
je 0x1001a5b9
xor eax, eax
cmp dword [ebx + 0x10], 0xffffffff
mov dword [ebp - 0x3318], eax
je 0x1001a5b9
lea esi, [ebx + 4]
mov ebx, dword [sym.imp.KERNEL32.dll_lstrcpyA]
mov eax, dword [esi - 4]
test eax, eax
je 0x1001a53f
push dword [esi]
mov dword [ebp - 0x3318], eax
lea eax, [ebp - 0x3310]
push eax
call ebx
push dword [esi]
lea eax, [ebp - 0x2310]
push eax
call ebx
jmp 0x1001a57e
lea eax, [ebp - 0x3310]
push eax
lea eax, [ebp - 0x2310]
push eax
call ebx
cmp byte [ebp - 0x2310], 0
je 0x1001a57e
cmp dword [esi], 0
je 0x1001a57e
push 0x100937ac
lea eax, [ebp - 0x2310]
push eax
call dword [sym.imp.KERNEL32.dll_lstrcatA]
push dword [esi]
lea eax, [ebp - 0x2310]
push eax
call dword [sym.imp.KERNEL32.dll_lstrcatA]
mov eax, dword [ebp - 0x3318]
test eax, eax
je 0x1001a5ac
test byte [esi + 0xc], 3
jne 0x1001a5ac
lea ecx, [ebp - 0x2310]
push ecx
push eax
call fcn.1001a024
pop ecx
pop ecx
test eax, eax
je 0x1001a5ac
cmp eax, 2
mov eax, 0x80040201
cmovne edi, eax
add esi, 0x14
cmp dword [esi + 0xc], 0xffffffff
jne 0x1001a51a
mov eax, edi
mov ecx, dword [ebp - 4]
pop edi
pop esi
xor ecx, ebp
pop ebx
call fcn.10037f93
mov esp, ebp
pop ebp
ret 0x18