Function at 0x89b750
Capabilities:
Query or enumerate registry value
Set registry value

Disassembly:
push ebp
mov ebp, esp
push 0xfffffffffffffffe
push 0xb14168
push 0xa847a0
mov eax, dword fs:[0]
push eax
sub esp, 0x540
mov eax, dword [0xb196ec]
xor dword [ebp - 8], eax
xor eax, ebp
mov dword [ebp - 0x1c], eax
push ebx
push esi
push edi
push eax
lea eax, [ebp - 0x10]
mov dword fs:[0], eax
mov dword [ebp - 0x18], esp
mov edi, ecx
xor ebx, ebx
mov dword [ebp - 0x544], ebx
mov dword [ebp - 4], ebx
call fcn.00968930
test eax, eax
je 0x89b9b4
mov dword [ebp - 0x540], ebx
mov eax, dword [str.hide:appsfeatures]
mov dword [ebp - 0x30], eax
mov ecx, dword [0xac024c]
mov dword [ebp - 0x2c], ecx
mov edx, dword [0xac0250]
mov dword [ebp - 0x28], edx
mov eax, dword [0xac0254]
mov dword [ebp - 0x24], eax
mov cx, word [0xac0258]
mov word [ebp - 0x20], cx
mov byte [ebp - 0x539], bl
push str.SOFTWAREMicrosoftWindowsCurrentVersionPoliciesExplorer
lea edx, [ebp - 0x138]
push edx
call dword [sym.imp.KERNEL32.dll_lstrcpyA]
call fcn.00968110
mov esi, eax
neg esi
sbb esi, esi
and esi, 0x100
add esi, 0xf003f
lea eax, [ebp - 0x540]
push eax
push esi
lea ecx, [ebp - 0x138]
push ecx
push 0x80000002
call fcn.0097eda0
cmp eax, ebx
je 0x89b845
push ebx
lea edx, [ebp - 0x540]
push edx
push esi
push ebx
lea eax, [ebp - 0x138]
push eax
push 0x80000002
call fcn.0097ee40
cmp eax, ebx
jne 0x89b97c
mov byte [ebp - 0x538], bl
push 0x3ff
push ebx
lea ecx, [ebp - 0x537]
push ecx
call fcn.00a7ffb0
add esp, 0xc
mov dword [ebp - 0x548], 0x400
lea edx, [ebp - 0x548]
push edx
lea eax, [ebp - 0x538]
push eax
push ebx
push ebx
push str.SettingsPageVisibility
mov ecx, dword [ebp - 0x540]
push ecx
call dword [sym.imp.ADVAPI32.dll_RegQueryValueExA]
test eax, eax
jne 0x89b945
cmp edi, ebx
je 0x89b8f1
lea esi, [ebp - 0x30]
mov dword [ebp - 0x54c], esi
cmp byte [ebp - 0x538], bl
je 0x89b939
push ebx
push str.hide:
lea edx, [ebp - 0x538]
push edx
call fcn.0095c8c0
add esp, 0xc
cmp eax, 0xffffffff
je 0x89b939
push ebx
push str.appsfeatures
lea eax, [ebp - 0x538]
push eax
call fcn.0095c8c0
add esp, 0xc
cmp eax, 0xffffffff
jne 0x89b97c
push esi
call dword [sym.imp.KERNEL32.dll_lstrlenA]
inc eax
push eax
push esi
jmp 0x89b959
lea esi, [ebp - 0x539]
mov dword [ebp - 0x54c], esi
cmp byte [ebp - 0x538], bl
je 0x89b97c
push ebx
push str.hide:
lea ecx, [ebp - 0x538]
push ecx
call fcn.0095c8c0
add esp, 0xc
cmp eax, 0xffffffff
je 0x89b97c
push ebx
push str.appsfeatures
lea edx, [ebp - 0x538]
push edx
call fcn.0095c8c0
add esp, 0xc
cmp eax, 0xffffffff
je 0x89b97c
push esi
call dword [sym.imp.KERNEL32.dll_lstrlenA]
inc eax
push eax
push esi
jmp 0x89b959
cmp edi, ebx
je 0x89b97c
lea ecx, [ebp - 0x30]
push ecx
call dword [sym.imp.KERNEL32.dll_lstrlenA]
inc eax
push eax
lea edx, [ebp - 0x30]
push edx
push 1
push ebx
push str.SettingsPageVisibility
mov eax, dword [ebp - 0x540]
push eax
call dword [sym.imp.ADVAPI32.dll_RegSetValueExA]
test eax, eax
jne 0x89b97c
mov dword [ebp - 0x544], 1
mov eax, dword [ebp - 0x540]
cmp eax, ebx
je 0x89b9b4
push eax
call dword [sym.imp.ADVAPI32.dll_RegCloseKey]
mov dword [ebp - 0x540], ebx
jmp 0x89b9b4
mov dword [ebp - 4], 0xfffffffe
mov eax, dword [ebp - 0x544]
mov ecx, dword [ebp - 0x10]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 0x1c]
xor ecx, ebp
call fcn.00a78f21
mov esp, ebp
pop ebp
ret