Function at 0x1000b870
Capabilities:
Set registry value

Disassembly:
push 0x130
mov eax, 0x100e42a0
call fcn.100bf4eb
mov eax, dword [ebp + 0xc]
mov ecx, dword [ebp + 8]
mov esi, dword [ebp + 0x1c]
mov ebx, dword [ebp + 0x20]
cmp eax, 0x64
jne 0x1000b8c2
test ebx, ebx
je 0x1000bb84
push ebx
call dword [sym.imp.OLEAUT32.dll_VariantClear]
push 4
pop eax
mov word [ebx], ax
movd xmm0, dword [0x1012039c]
cvtdq2ps xmm0, xmm0
divss xmm0, dword [0x10109458]
movss dword [ebx + 8], xmm0
jmp 0x1000b96b
cmp eax, 0x65
jne 0x1000b8ef
mov eax, dword [ecx + 8]
test eax, eax
je 0x1000b96b
push 0
push 0xf060
cmp dword [ecx + 0x10], 0
jbe 0x1000bfd0
push dword [ecx + 0x10]
push eax
call dword [sym.imp.USER32.dll_SendMessageW]
jmp 0x1000b96b
cmp eax, 0x68
jne 0x1000b904
mov eax, dword [ecx + 8]
test eax, eax
je 0x1000b96b
push 0
push 0xf020
jmp 0x1000b8d9
cmp eax, 0x6b
jne 0x1000b972
cmp dword [esi + 8], 1
je 0x1000b919
mov eax, 0x80004001
jmp 0x1000bb87
mov eax, dword [esi]
cmp word [eax], 0xb
jne 0x1000b90f
xor ebx, ebx
lea ecx, [ebp - 0x40]
push ebx
push str.ppmgr
call fcn.10003b5c
mov eax, dword [esi]
xor ecx, ecx
push 4
mov dword [ebp - 0x40], 0x100eb9bc
cmp word [eax + 8], bx
lea eax, [ebp - 0x120]
push eax
push 4
push ebx
push str.OnceInWeek
push dword [ebp - 0x3c]
setne cl
mov dword [ebp - 0x120], ecx
call dword [sym.imp.ADVAPI32.dll_RegSetValueExW]
lea ecx, [ebp - 0x40]
call fcn.10003b2a
xor eax, eax
jmp 0x1000bb87
cmp eax, 0x6c
jne 0x1000b9b0
test ebx, ebx
je 0x1000bb84
push 0
push str.ppmgr
lea ecx, [ebp - 0x40]
call fcn.10003b5c
push ebx
mov dword [ebp - 0x40], 0x100eb9bc
call dword [sym.imp.OLEAUT32.dll_VariantClear]
push 0xb
pop eax
lea ecx, [ebp - 0x40]
mov word [ebx], ax
call fcn.1000b3c4
mov word [ebx + 8], ax
jmp 0x1000b963
cmp eax, 0x6d
jne 0x1000ba05
call fcn.10002632
push eax
lea ecx, [ebp - 0x120]
call fcn.10002388
and dword [ebp - 4], 0
cmp dword [esi + 8], 1
jb 0x1000b9f0
mov esi, dword [esi]
cmp word [esi], 8
jne 0x1000b9f0
push dword [esi + 8]
call fcn.10002333
pop ecx
push eax
push dword [esi + 8]
lea ecx, [ebp - 0x120]
call fcn.100022bf
mov esi, dword [ebp - 0x120]
mov ecx, esi
call fcn.100160d3
lea ecx, [esi - 0x10]
jmp 0x1000bf67
cmp eax, 0x6e
jne 0x1000bcfb
call fcn.10002632
push eax
lea ecx, [ebp - 0x128]
call fcn.10002388
mov dword [ebp - 4], 1
call fcn.10002632
push eax
lea ecx, [ebp - 0x124]
call fcn.10002388
mov byte [ebp - 4], 2
call fcn.10002632
push eax
lea ecx, [ebp - 0x120]
call fcn.10002388
mov byte [ebp - 4], 3
call fcn.10002632
push eax
lea ecx, [ebp - 0x12c]
call fcn.10002388
push 0xf
xor ebx, ebx
pop edi
mov dword [ebp - 0x48], ebx
mov dword [ebp - 0x44], edi
mov byte [ebp - 0x58], bl
mov dword [ebp - 0x18], ebx
mov dword [ebp - 0x14], edi
mov byte [ebp - 0x28], bl
lea ecx, [ebp - 0x98]
mov byte [ebp - 4], 6
call fcn.1001ec0e
mov byte [ebp - 4], 7
cmp dword [esi + 8], 1
jb 0x1000bb31
mov esi, dword [esi]
push 8
pop eax
cmp word [esi], ax
jne 0x1000bb31
push dword [esi + 8]
call fcn.10002333
pop ecx
push eax
push dword [esi + 8]
lea ecx, [ebp - 0x128]
call fcn.100022bf
push 0xfde9
push dword [ebp - 0x128]
lea eax, [ebp - 0x118]
lea ecx, [ebp - 0x11c]
mov dword [ebp - 0x11c], eax
call fcn.1000c0ac
mov byte [ebp - 4], 8
lea ecx, [ebp - 0x40]
push dword [ebp - 0x11c]
mov dword [ebp - 0x30], ebx
mov dword [ebp - 0x2c], edi
mov byte [ebp - 0x40], bl
call fcn.1000b041
lea eax, [ebp - 0x118]
mov byte [ebp - 4], 0xa
cmp dword [ebp - 0x11c], eax
je 0x1000bb16
push dword [ebp - 0x11c]
call fcn.100c5ef6
pop ecx
lea eax, [ebp - 0x40]
push eax
lea ecx, [ebp - 0x98]
call fcn.1001f199
test al, al
jne 0x1000bb8f
lea ecx, [ebp - 0x40]
call fcn.1000b399
lea ecx, [ebp - 0x98]
call fcn.1001ecf3
lea ecx, [ebp - 0x28]
call fcn.1000b399
lea ecx, [ebp - 0x58]
call fcn.1000b399
mov ecx, dword [ebp - 0x12c]
lea ecx, [ecx - 0x10]
call fcn.100026dd
mov ecx, dword [ebp - 0x120]
lea ecx, [ecx - 0x10]
call fcn.100026dd
mov ecx, dword [ebp - 0x124]
add ecx, 0xfffffff0
call fcn.100026dd
mov ecx, dword [ebp - 0x128]
lea ecx, [ecx - 0x10]
call fcn.100026dd
xor eax, eax
inc eax
call fcn.100bf495
ret 0x24
push str.name
lea ecx, [ebp - 0x58]
call fcn.1000b041
lea eax, [ebp - 0x28]
push eax
lea eax, [ebp - 0x58]
push eax
lea ecx, [ebp - 0x98]
call fcn.1001f0d1
push 0x10
pop edi
test al, al
je 0x1000bbdd
cmp dword [ebp - 0x14], edi
lea eax, [ebp - 0x28]
cmovae eax, dword [ebp - 0x28]
push eax
call fcn.1001b298
mov esi, eax
push esi
call fcn.10002333
pop ecx
pop ecx
push eax
push esi
lea ecx, [ebp - 0x124]
call fcn.100022bf
push 0x101063d8
lea ecx, [ebp - 0x58]
call fcn.1000b041
cmp dword [ebp - 0x14], edi
lea eax, [ebp - 0x28]
mov dword [ebp - 0x18], ebx
lea ecx, [ebp - 0x98]
cmovae eax, dword [ebp - 0x28]
mov byte [eax], bl
lea eax, [ebp - 0x28]
push eax
lea eax, [ebp - 0x58]
push eax
call fcn.1001f0d1
test al, al
je 0x1000bc37
cmp dword [ebp - 0x14], edi
lea eax, [ebp - 0x28]
cmovae eax, dword [ebp - 0x28]
push eax
call fcn.1001b298
mov esi, eax
push esi
call fcn.10002333
pop ecx
pop ecx
push eax
push esi
lea ecx, [ebp - 0x120]
call fcn.100022bf
push str.iconurl
lea ecx, [ebp - 0x58]
call fcn.1000b041
cmp dword [ebp - 0x14], edi
lea eax, [ebp - 0x28]
mov dword [ebp - 0x18], ebx
lea ecx, [ebp - 0x98]
cmovae eax, dword [ebp - 0x28]
mov byte [eax], bl
lea eax, [ebp - 0x28]
push eax
lea eax, [ebp - 0x58]
push eax
call fcn.1001f0d1
test al, al
je 0x1000bc91
cmp dword [ebp - 0x14], edi
lea eax, [ebp - 0x28]
cmovae eax, dword [ebp - 0x28]
push eax
call fcn.1001b298
mov esi, eax
push esi
call fcn.10002333
pop ecx
pop ecx
push eax
push esi
lea ecx, [ebp - 0x12c]
call fcn.100022bf
mov esi, dword [ebp - 0x12c]
mov edi, dword [ebp - 0x120]
mov edx, edi
mov ecx, dword [ebp - 0x124]
push esi
call fcn.100161e9
pop ecx
lea ecx, [ebp - 0x40]
call fcn.1000b399
lea ecx, [ebp - 0x98]
call fcn.1001ecf3
lea ecx, [ebp - 0x28]
call fcn.1000b399
lea ecx, [ebp - 0x58]
call fcn.1000b399
lea ecx, [esi - 0x10]
call fcn.100026dd
lea ecx, [edi - 0x10]
call fcn.100026dd
mov ecx, dword [ebp - 0x124]
lea ecx, [ecx - 0x10]
call fcn.100026dd
mov ecx, dword [ebp - 0x128]
lea ecx, [ecx - 0x10]
jmp 0x1000bf67
cmp eax, 0x69
jne 0x1000bd17
mov eax, dword [ecx + 8]
test eax, eax
je 0x1000b96b
push 0
push 0xf030
jmp 0x1000b8d9
cmp eax, 0x6a
jne 0x1000bd33
mov eax, dword [ecx + 8]
test eax, eax
je 0x1000b96b
push 0
push 0xf120
jmp 0x1000b8d9
cmp eax, 0x6f
jne 0x1000bd5b
cmp dword [esi + 8], 1
jb 0x1000b96b
mov ecx, dword [esi]
cmp word [ecx], 8
jne 0x1000b96b
mov ecx, dword [ecx + 8]
call fcn.100163c9
jmp 0x1000b96b
cmp eax, 0x70
jne 0x1000bfb6
call fcn.10002632
push eax
lea ecx, [ebp - 0x120]
call fcn.10002388
mov dword [ebp - 4], 0xb
call fcn.10002632
push eax
lea ecx, [ebp - 0x12c]
call fcn.10002388
mov byte [ebp - 4], 0xc
call fcn.10002632
push eax
lea ecx, [ebp - 0x124]
call fcn.10002388
lea ecx, [ebp - 0x98]
mov byte [ebp - 4], 0xd
call fcn.1001ec0e
push 0xf
xor ebx, ebx
pop eax
mov dword [ebp - 0x48], ebx
mov dword [ebp - 0x44], eax
mov byte [ebp - 0x58], bl
mov dword [ebp - 0x18], ebx
mov dword [ebp - 0x14], eax
mov byte [ebp - 0x28], bl
mov byte [ebp - 4], 0x10
cmp dword [esi + 8], 1
jb 0x1000bf71
mov esi, dword [esi]
cmp word [esi], 8
jne 0x1000bf71
push dword [esi + 8]
call fcn.10002333
pop ecx
push eax
push dword [esi + 8]
lea ecx, [ebp - 0x120]
call fcn.100022bf
mov edi, dword [ebp - 0x120]
lea eax, [ebp - 0x118]
push 0xfde9
push edi
lea ecx, [ebp - 0x11c]
mov dword [ebp - 0x11c], eax
call fcn.1000c0ac
mov byte [ebp - 4], 0x11
lea ecx, [ebp - 0x40]
push dword [ebp - 0x11c]
mov dword [ebp - 0x30], ebx
mov dword [ebp - 0x2c], 0xf
mov byte [ebp - 0x40], bl
call fcn.1000b041
lea eax, [ebp - 0x118]
mov byte [ebp - 4], 0x13
cmp dword [ebp - 0x11c], eax
je 0x1000be5a
push dword [ebp - 0x11c]
call fcn.100c5ef6
pop ecx
lea eax, [ebp - 0x40]
push eax
lea ecx, [ebp - 0x98]
call fcn.1001f199
test al, al
jne 0x1000be7a
lea ecx, [ebp - 0x40]
call fcn.1000b399
jmp 0x1000bf77
push 0x101063d8
lea ecx, [ebp - 0x58]
call fcn.1000b041
cmp dword [ebp - 0x14], 0x10
lea eax, [ebp - 0x28]
mov dword [ebp - 0x18], ebx
lea ecx, [ebp - 0x98]
cmovae eax, dword [ebp - 0x28]
mov byte [eax], bl
lea eax, [ebp - 0x28]
push eax
lea eax, [ebp - 0x58]
push eax
call fcn.1001f0d1
test al, al
je 0x1000bed6
cmp dword [ebp - 0x14], 0x10
lea eax, [ebp - 0x28]
cmovae eax, dword [ebp - 0x28]
push eax
call fcn.1001b298
mov esi, eax
push esi
call fcn.10002333
pop ecx
pop ecx
push eax
push esi
lea ecx, [ebp - 0x12c]
call fcn.100022bf
push str.browser
lea ecx, [ebp - 0x58]
mov dword [ebp - 0x128], ebx
call fcn.1000b041
lea eax, [ebp - 0x128]
push eax
lea eax, [ebp - 0x58]
push eax
lea ecx, [ebp - 0x98]
call fcn.1001efd9
cmp dword [ebp - 0x128], 2
mov esi, dword [ebp - 0x12c]
jne 0x1000bf19
mov ecx, esi
call fcn.10016491
test eax, eax
jne 0x1000bf2b
mov ecx, esi
call fcn.10016608
test eax, eax
jne 0x1000bf2b
mov ecx, esi
call fcn.100163c9
lea ecx, [ebp - 0x40]
call fcn.1000b399
lea ecx, [ebp - 0x28]
call fcn.1000b399
lea ecx, [ebp - 0x58]
call fcn.1000b399
lea ecx, [ebp - 0x98]
call fcn.1001ecf3
mov ecx, dword [ebp - 0x124]
lea ecx, [ecx - 0x10]
call fcn.100026dd
lea ecx, [esi - 0x10]
call fcn.100026dd
lea ecx, [edi - 0x10]
call fcn.100026dd
jmp 0x1000b96b
mov edi, dword [ebp - 0x120]
lea ecx, [ebp - 0x28]
call fcn.1000b399
lea ecx, [ebp - 0x58]
call fcn.1000b399
lea ecx, [ebp - 0x98]
call fcn.1001ecf3
mov ecx, dword [ebp - 0x124]
lea ecx, [ecx - 0x10]
call fcn.100026dd
mov ecx, dword [ebp - 0x12c]
lea ecx, [ecx - 0x10]
call fcn.100026dd
lea ecx, [edi - 0x10]
jmp 0x1000bb7f
cmp eax, 0x66
jne 0x1000bfc3
mov eax, dword [ecx + 0xc]
jmp 0x1000b8ca
cmp eax, 0x67
jne 0x1000bfe1
mov eax, dword [ecx + 0xc]
jmp 0x1000b8f7
push 0x112
push eax
call dword [sym.imp.USER32.dll_PostMessageW]
jmp 0x1000b96b
cmp eax, 0x71
jne 0x1000c02b
test ebx, ebx
je 0x1000bb84
push ebx
call dword [sym.imp.OLEAUT32.dll_VariantClear]
call fcn.1001fd1a
xor ecx, ecx
test eax, eax
mov word [ebp - 0x20], cx
mov ecx, 0x10105f68
cmovne ecx, eax
push ecx
lea ecx, [ebp - 0x20]
call fcn.1000c344
mov ax, word [ebp - 0x20]
lea ecx, [ebp - 0x20]
mov word [ebx], ax
lea eax, [ebx + 8]
push eax
call fcn.1000c25f
lea eax, [ebp - 0x20]
jmp 0x1000c090
cmp eax, 0x72
jne 0x1000bb84
mov esi, dword [sym.imp.USER32.dll_GetSystemMetrics]
push 0
call esi
push 1
mov edi, eax
call esi
push ebx
mov esi, eax
call dword [sym.imp.OLEAUT32.dll_VariantClear]
push esi
push edi
push str._cx_:_d__cy_:_d
call fcn.1001b1f6
add esp, 0xc
xor ecx, ecx
mov word [ebp - 0x13c], cx
lea ecx, [ebp - 0x13c]
push eax
call fcn.1000c344
mov ax, word [ebp - 0x13c]
lea ecx, [ebp - 0x13c]
mov word [ebx], ax
lea eax, [ebx + 8]
push eax
call fcn.1000c25f
lea eax, [ebp - 0x13c]
push eax
call dword [sym.imp.OLEAUT32.dll_VariantCopy]
jmp 0x1000b96b