Function at 0x10009f29
Capabilities:
Set registry value

Disassembly:
mov eax, 0x10026854
call fcn.100255f0
sub esp, 0x618
push ebx
push esi
mov esi, dword [ebp + 8]
push edi
lea eax, [ebp - 0x214]
push 0x100
push eax
push dword [ebp + 0x18]
push dword [esi + 4]
call dword [sym.imp.USER32.dll_LoadStringW]
lea eax, [ebp - 0x41c]
push 0x104
push eax
push dword [esi + 4]
call dword [sym.imp.KERNEL32.dll_GetModuleFileNameW]
lea eax, [ebp - 0x14]
push eax
push dword [ebp + 0xc]
call dword [sym.imp.ole32.dll_StringFromCLSID]
mov eax, dword [ebp - 0x14]
lea ecx, [ebp - 0x214]
push ecx
mov dword [ebp - 0x10], eax
push dword [ebp + 0x10]
push eax
call fcn.1000a225
xor edi, edi
add esp, 0xc
cmp eax, edi
mov dword [ebp + 0x18], eax
jne 0x10009fb3
lea eax, [ebp - 0x214]
push eax
push dword [ebp + 0x14]
push dword [ebp - 0x10]
call fcn.1000a225
add esp, 0xc
mov dword [ebp + 0x18], eax
xor ebx, ebx
cmp dword [ebp + 0x18], edi
jne 0x1000a132
mov dword [ebp + 8], edi
mov ebx, 0x2001f
lea ecx, [ebp + 8]
push ebx
push str.CLSID
push SysReAllocString
mov dword [ebp - 4], edi
call fcn.1000a179
cmp eax, edi
mov dword [ebp + 0xc], eax
jne 0x1000a121
lea eax, [ebp - 0x10]
mov dword [ebp + 0xc], edi
push eax
lea eax, [ebp + 0xc]
push eax
push edi
push ebx
push edi
push edi
push edi
push dword [ebp - 0x10]
push dword [ebp + 8]
call dword [sym.imp.ADVAPI32.dll_RegCreateKeyExW]
cmp eax, edi
jne 0x1000a01d
xor eax, eax
cmp dword [ebp + 8], edi
je 0x1000a017
push dword [ebp + 8]
call dword [sym.imp.ADVAPI32.dll_RegCloseKey]
mov ecx, dword [ebp + 0xc]
mov dword [ebp + 8], ecx
cmp eax, edi
mov dword [ebp + 0xc], eax
jne 0x1000a121
lea eax, [ebp - 0x214]
push eax
call dword [sym.imp.KERNEL32.dll_lstrlenW]
lea eax, [eax + eax + 2]
push eax
lea eax, [ebp - 0x214]
push eax
push 1
push edi
push edi
push dword [ebp + 8]
call dword [sym.imp.ADVAPI32.dll_RegSetValueExW]
push edi
lea ecx, [ebp + 8]
push dword [ebp + 0x10]
push str.ProgID
call fcn.1000a1b7
push edi
lea ecx, [ebp + 8]
push dword [ebp + 0x14]
push 0x10029c98
call fcn.1000a1b7
cmp dword [esi + 4], edi
je 0x1000a0ca
push edi
call dword [sym.imp.KERNEL32.dll_GetModuleHandleW]
cmp dword [esi + 4], eax
je 0x1000a0ca
mov ebx, dword [ebp + 0x1c]
mov eax, str.AUTPRX32.DLL
test bl, 4
jne 0x1000a094
lea eax, [ebp - 0x41c]
push edi
mov esi, str.InprocServer32
push eax
push esi
lea ecx, [ebp + 8]
call fcn.1000a1b7
test bl, 2
je 0x1000a0b0
mov ebx, str.both
jmp 0x1000a0bd
and bl, 1
neg bl
sbb ebx, ebx
and ebx, str.Apartment
cmp ebx, edi
je 0x1000a121
push str.ThreadingModel
push ebx
push esi
jmp 0x1000a119
mov esi, 0x104
lea eax, [ebp - 0x624]
push esi
push eax
lea eax, [ebp - 0x41c]
push eax
call dword [sym.imp.KERNEL32.dll_GetShortPathNameW]
cmp eax, esi
jne 0x1000a0fd
cmp dword [ebp + 8], edi
je 0x1000a0f6
push dword [ebp + 8]
call dword [sym.imp.ADVAPI32.dll_RegCloseKey]
mov eax, 0x8007000e
jmp 0x1000a153
cmp eax, edi
je 0x1000a10c
cmp eax, 0x57
lea eax, [ebp - 0x624]
jne 0x1000a112
lea eax, [ebp - 0x41c]
push edi
push eax
push 0x10029c00
lea ecx, [ebp + 8]
call fcn.1000a1b7
cmp dword [ebp + 8], edi
je 0x1000a12f
push dword [ebp + 8]
call dword [sym.imp.ADVAPI32.dll_RegCloseKey]
mov ebx, dword [ebp + 0xc]
push dword [ebp - 0x14]
call dword [sym.imp.ole32.dll_CoTaskMemFree]
cmp ebx, edi
je 0x1000a150
jle 0x1000a14d
and ebx, 0xffff
or ebx, 0x80070000
mov dword [ebp + 0x18], ebx
mov eax, dword [ebp + 0x18]
mov ecx, dword [ebp - 0xc]
pop edi
pop esi
pop ebx
mov dword fs:[0], ecx
leave
ret 0x18