Function at 0x10003710
Capabilities:
Query or enumerate registry key
Query or enumerate registry value

Disassembly:
sub esp, 0x93c
push ebx
push ebp
push edi
mov ecx, 9
xor eax, eax
lea edi, [esp + 0x20]
rep stosd dword es:[edi], eax
mov eax, dword [esp + 0x94c]
xor ebp, ebp
push 0x418
push eax
mov dword [esp + 0x24], 7
mov dword [esp + 0x2c], ebp
mov dword [esp + 0x44], ebp
call dword [sym.imp.USER32.dll_GetDlgItem]
mov ebx, eax
cmp ebx, ebp
mov dword [esp + 0x10], ebx
jne 0x10003761
pop edi
pop ebp
xor eax, eax
pop ebx
add esp, 0x93c
ret
lea ecx, [esp + 0xc]
push esi
push ecx
push 0xf003f
push ebp
push str.SoftwareMicrosoftInternet_ExplorerTypedURLs
push 0x80000001
call dword [sym.imp.ADVAPI32.dll_RegOpenKeyExA]
test eax, eax
jne 0x100038ae
push ebp
push ebp
mov edx, dword [esp + 0x18]
push ebp
push ebp
push 0x10013ae8
push ebp
push ebp
push ebp
push ebp
push ebp
push ebp
push edx
call dword [sym.imp.ADVAPI32.dll_RegQueryInfoKeyA]
mov eax, dword [esp + 0x10]
push eax
call dword [sym.imp.ADVAPI32.dll_RegCloseKey]
mov cl, byte [0x1001036c]
xor eax, eax
mov byte [esp + 0x48], cl
mov ecx, 0x40
lea edi, [esp + 0x49]
mov edx, dword [0x10013ae8]
rep stosd dword es:[edi], eax
stosw word es:[edi], ax
xor esi, esi
cmp edx, ebp
mov dword [0x10013af4], edx
mov dword [esp + 0x18], 1
stosb byte es:[edi], al
jbe 0x100038ae
mov ebp, dword [sym.imp.MSVCRT.dll__snprintf]
lea ebx, [esi + 1]
lea edx, [esp + 0x48]
push ebx
push str.url_d
push 0x103
push edx
call ebp
mov ecx, 0x200
xor eax, eax
lea edi, [esp + 0x15c]
add esp, 0x10
rep stosd dword es:[edi], eax
lea eax, [esp + 0x1c]
lea ecx, [esp + 0x14c]
push eax
lea edx, [esp + 0x1c]
push ecx
lea eax, [esp + 0x50]
push edx
push eax
push str.SoftwareMicrosoftInternet_ExplorerTypedURLs
push 0x80000001
mov dword [esp + 0x34], 0x800
call dword [sym.imp.SHLWAPI.dll_SHGetValueA]
test eax, eax
jne 0x10003899
lea ecx, [esp + 0x14c]
lea edi, [esp + 0x14c]
mov dword [esp + 0x34], ecx
or ecx, 0xffffffff
mov dword [esp + 0x24], esi
repne scasb al, byte es:[edi]
not ecx
dec ecx
je 0x10003899
mov al, byte [esp + 0x14d]
cmp al, 0x5c
je 0x1000387a
cmp al, 0x3a
mov dword [esp + 0x3c], 1
jne 0x10003882
mov dword [esp + 0x3c], 2
mov eax, dword [esp + 0x14]
lea edx, [esp + 0x20]
push edx
push 0
push 0x1007
push eax
call dword [sym.imp.USER32.dll_SendMessageA]
mov eax, dword [0x10013ae8]
mov esi, ebx
cmp esi, eax
jb 0x100037e8
mov ebx, dword [esp + 0x14]
xor ebp, ebp
call dword [sym.imp.KERNEL32.dll_GetACP]
cmp eax, 0x3a8
je 0x100038c6
cmp eax, 0x3b6
jne 0x10003979
call fcn.10003210
mov eax, dword [0x10013ad4]
cmp eax, ebp
je 0x100038de
mov ecx, dword [esp + 0x950]
push ecx
call eax
mov dl, byte [0x1001036c]
mov ecx, 0x1ff
xor eax, eax
lea edi, [esp + 0x14d]
mov byte [esp + 0x14c], dl
rep stosd dword es:[edi], eax
stosw word es:[edi], ax
stosb byte es:[edi], al
mov eax, dword [0x10013adc]
cmp eax, ebp
je 0x1000390e
call eax
mov dword [0x10013af0], eax
mov eax, dword [0x10013af0]
xor esi, esi
cmp eax, ebp
jbe 0x10003979
mov eax, dword [0x10013af4]
mov edx, dword [0x10013ae0]
add eax, esi
cmp edx, ebp
mov dword [esp + 0x24], eax
je 0x1000394e
mov ecx, 0x200
xor eax, eax
lea edi, [esp + 0x14c]
push 0x800
rep stosd dword es:[edi], eax
lea ecx, [esp + 0x150]
push ecx
push esi
call edx
lea eax, [esp + 0x20]
lea edx, [esp + 0x14c]
push eax
push ebp
push 0x1007
push ebx
mov dword [esp + 0x44], edx
mov dword [esp + 0x4c], ebp
call dword [sym.imp.USER32.dll_SendMessageA]
mov eax, dword [0x10013af0]
inc esi
cmp esi, eax
jb 0x10003919
mov ecx, dword [0x10013af0]
mov eax, dword [0x10013af4]
add eax, ecx
mov dword [0x10013af4], eax
jne 0x10003a39
mov dl, byte [0x1001036c]
mov ecx, 0x40
xor eax, eax
lea edi, [esp + 0x49]
mov byte [esp + 0x48], dl
mov dword [esp + 0x20], 1
rep stosd dword es:[edi], eax
stosw word es:[edi], ax
stosb byte es:[edi], al
mov eax, dword [esp + 0x954]
push 0x104
cmp eax, ebp
je 0x100039d6
mov ecx, dword [0x10013f14]
lea eax, [esp + 0x4c]
push eax
push 0x7db
push ecx
jmp 0x100039e6
mov eax, dword [0x10013f14]
lea edx, [esp + 0x4c]
push edx
push 0x8e
push eax
call dword [sym.imp.USER32.dll_LoadStringA]
mov esi, dword [sym.imp.USER32.dll_SendMessageA]
push ebp
push ebp
push 0x1036
push ebx
call esi
push ebp
push 1
lea ecx, [esp + 0x50]
push 0x1003
push ebx
mov dword [esp + 0x34], ebp
mov dword [esp + 0x44], ecx
mov dword [esp + 0x4c], 0xfffffffe
call esi
lea edx, [esp + 0x20]
push edx
push ebp
push 0x1007
push ebx
call esi
pop esi
pop edi
pop ebp
mov eax, 1
pop ebx
add esp, 0x93c
ret
mov eax, dword [esp + 0x950]
push 1
push 3
push eax
call dword [sym.imp.USER32.dll_GetDlgItem]
mov esi, dword [sym.imp.USER32.dll_EnableWindow]
push eax
call esi
mov edi, dword [esp + 0x950]
mov ebx, dword [sym.imp.USER32.dll_GetDlgItem]
push 1
push 4
push edi
call ebx
push eax
call esi
push 1
push 1
push edi
call ebx
push eax
call esi
pop esi
pop edi
pop ebp
mov eax, 1
pop ebx
add esp, 0x93c
ret