Function at 0x100a926
Capabilities:
Set registry value

Disassembly:
mov edi, edi
push ebp
mov ebp, esp
sub esp, 0x21c
mov eax, dword [section..data]
xor eax, ebp
mov dword [ebp - 4], eax
push ebx
push 2
xor ebx, ebx
push ebx
call dword [sym.imp.ole32.dll_CoInitializeEx]
test eax, eax
js 0x100ac1b
cmp dword [ebp + 8], ebx
jne 0x100a961
call fcn.010091b0
test eax, eax
jne 0x100ac15
push esi
push edi
push dword [ebp + 0x10]
mov byte [ebp - 0x211], bl
push dword [ebp + 8]
call fcn.01009a44
cmp dword [ebp + 8], ebx
je 0x100aa10
push dword [ebp + 0xc]
call fcn.01009881
lea eax, [ebp - 0x218]
push eax
lea eax, [ebp - 0x210]
push eax
push ebx
push 3
push ebx
push ebx
push ebx
mov esi, 0x1003ca8
push esi
push reloc.OLEAUT32.dll_SysReAllocString
call dword [sym.imp.ADVAPI32.dll_RegCreateKeyExW]
test eax, eax
jne 0x100aafe
lea eax, [ebp - 0x218]
push eax
lea eax, [ebp - 0x20c]
push eax
push ebx
push ebx
push dword [ebp - 0x210]
mov dword [ebp - 0x218], 0x208
call fcn.01009204
cmp dword [ebp + 0xc], ebx
jne 0x100a9e0
cmp eax, ebx
je 0x100a9ff
mov edi, 0x1003c8c
push edi
call dword [sym.imp.KERNEL32.dll_lstrlenW]
add eax, eax
push eax
push edi
push 1
push ebx
push dword [ebp - 0x210]
call dword [sym.imp.ADVAPI32.dll_RegSetValueW]
push dword [ebp - 0x210]
call dword [sym.imp.ADVAPI32.dll_RegCloseKey]
jmp 0x100aafe
lea eax, [ebp - 0x210]
push eax
push 3
push ebx
mov esi, 0x1003ca8
push esi
push reloc.OLEAUT32.dll_SysReAllocString
call dword [sym.imp.ADVAPI32.dll_RegOpenKeyExW]
test eax, eax
jne 0x100aa8f
lea eax, [ebp - 0x218]
push eax
lea eax, [ebp - 0x20c]
push eax
push ebx
push ebx
push dword [ebp - 0x210]
mov dword [ebp - 0x218], 0x208
call fcn.01009204
test eax, eax
jne 0x100aa83
lea eax, [ebp - 0x20c]
push eax
push 0x1003c8c
call dword [sym.imp.SHLWAPI.dll_StrCmpIW]
test eax, eax
jne 0x100aa83
push ebx
push 0x10014cc
push 1
push ebx
push dword [ebp - 0x210]
call dword [sym.imp.ADVAPI32.dll_RegSetValueW]
push dword [ebp - 0x210]
call dword [sym.imp.ADVAPI32.dll_RegCloseKey]
push ebx
push 1
lea eax, [ebp - 0x218]
push eax
push 2
mov dword [ebp - 0x218], 0x19
call fcn.0100a537
push 0x17
pop edi
push 1
push 2
lea eax, [ebp - 0x21c]
push eax
push 2
mov dword [ebp - 0x21c], edi
mov dword [ebp - 0x218], 6
call fcn.0100a537
push 1
push 1
lea eax, [ebp - 0x218]
push eax
push 4
mov dword [ebp - 0x218], edi
call fcn.0100a537
push edi
call fcn.0100a59f
push 0x1003cf0
call fcn.0100b151
mov byte [ebp - 0x211], 1
call fcn.01009298
test eax, eax
jne 0x100abdd
push 0x25
call dword [sym.imp.SHLWAPI.dll_IsOS]
test eax, eax
je 0x100aba9
cmp dword [ebp + 8], ebx
je 0x100ab2d
call fcn.0100cbc9
test al, al
jne 0x100abc2
lea eax, [ebp - 0x210]
push eax
push 3
push ebx
push esi
push SysReAllocString
call dword [sym.imp.ADVAPI32.dll_RegOpenKeyExW]
test eax, eax
jne 0x100abc2
lea eax, [ebp - 0x218]
push eax
lea eax, [ebp - 0x20c]
push eax
push ebx
push ebx
push dword [ebp - 0x210]
mov dword [ebp - 0x218], 0x208
call fcn.01009204
test eax, eax
jne 0x100ab9b
lea eax, [ebp - 0x20c]
push eax
push 0x1003c8c
call dword [sym.imp.SHLWAPI.dll_StrCmpIW]
test eax, eax
jne 0x100ab9b
push ebx
push 0x10014cc
push 1
push ebx
push dword [ebp - 0x210]
call dword [sym.imp.ADVAPI32.dll_RegSetValueW]
push dword [ebp - 0x210]
call dword [sym.imp.ADVAPI32.dll_RegCloseKey]
jmp 0x100abc2
cmp dword [ebp + 8], ebx
jne 0x100abc2
push ebx
push ebx
push ebx
mov edi, 0x1003c8c
mov edx, esi
mov ecx, SysReAllocString
call fcn.0100937d
push ebx
call fcn.0100a810
push dword [ebp + 8]
push 0x100ac30
call fcn.0100954b
push ebx
call fcn.0100925d
jmp 0x100abf0
push 0x1003d80
push ebx
push 0x1a
push 0xffff
call dword [sym.imp.USER32.dll_PostMessageW]
pop edi
pop esi
cmp byte [ebp - 0x211], bl
je 0x100ac08
push ebx
push ebx
push ebx
push 0x8000000
call dword [sym.imp.SHELL32.dll_SHChangeNotify]
push dword [ebp + 8]
push 0x1002470
call fcn.010096b5
call dword [sym.imp.ole32.dll_CoUninitialize]
mov ecx, dword [ebp - 4]
xor ecx, ebp
pop ebx
call fcn.0100305d
leave
ret 0xc