Function at 0x10023a10
Capabilities:
Query or enumerate registry value

Disassembly:
push ebp
mov ebp, esp
and esp, 0xfffffff8
push 0xffffffffffffffff
push 0x1004f156
mov eax, dword fs:[0]
push eax
sub esp, 0xd8
mov eax, dword [0x10067068]
xor eax, esp
mov dword [esp + 0xd0], eax
push ebx
push esi
push edi
mov eax, dword [0x10067068]
xor eax, esp
push eax
lea eax, [esp + 0xe8]
mov dword fs:[0], eax
mov esi, dword [ebp + 8]
mov eax, dword [ebp + 0x18]
mov ecx, dword [ebp + 0x1c]
mov edi, dword [ebp + 0xc]
xor ebx, ebx
mov dword [esp + 0x24], esi
mov dword [esp + 0x1c], eax
mov dword [esp + 0x18], ecx
cmp byte [esi + 0xc], bl
je 0x10023af4
mov dword [esp + 0x14], ebx
mov dword [esp + 0xf0], ebx
mov eax, dword [esi + 8]
mov edx, dword [eax]
mov edx, dword [edx]
lea ecx, [esp + 0x14]
push ecx
push 0x10052a2c
push eax
call edx
test eax, eax
js 0x10023ad9
mov edx, dword [esp + 0x18]
mov eax, dword [esp + 0x14]
mov ecx, dword [eax]
push edx
mov edx, dword [esp + 0x20]
push edx
mov edx, dword [ebp + 0x14]
push edx
mov edx, dword [ebp + 0x10]
push edx
push edi
push eax
mov eax, dword [ecx + 0x10]
call eax
mov esi, eax
mov dword [esp + 0xf0], 0xffffffff
mov eax, dword [esp + 0x14]
cmp eax, ebx
je 0x10023ad2
mov ecx, dword [eax]
mov edx, dword [ecx + 8]
push eax
call edx
mov eax, esi
jmp 0x10023f41
mov dword [esp + 0xf0], 0xffffffff
mov eax, dword [esp + 0x14]
cmp eax, ebx
je 0x10023af4
mov ecx, dword [eax]
mov edx, dword [ecx + 8]
push eax
call edx
cmp dword [esi + 0x18], ebx
je 0x10023f3c
xor edi, edi
mov dword [esp + 0x28], edi
mov dword [esp + 0x2c], ebx
mov dword [esp + 0x30], ebx
mov dword [esp + 0xf0], 1
xor eax, eax
mov word [esp + 0xb4], ax
push 0x37
mov eax, str.SoftwareMicrosoftWindowsCurrentVersionExtSettings_
lea esi, [esp + 0xb8]
mov dword [esp + 0xcc], 7
mov dword [esp + 0xc8], ebx
call fcn.1000cf60
push 0x26
mov eax, str.FB16E5C3_A9E2_47A2_8EFC_319E775E62CC
mov ecx, esi
mov byte [esp + 0xf4], 2
call fcn.10011b20
cmp dword [esp + 0xc8], 8
mov eax, dword [esp + 0xb4]
jae 0x10023b6e
mov eax, esi
lea ecx, [esp + 0x14]
push ecx
push 0x20019
push ebx
push eax
push SysReAllocString
mov dword [esp + 0x28], ebx
call dword [sym.imp.ADVAPI32.dll_RegOpenKeyExW]
cmp eax, ebx
jne 0x10023bdf
mov eax, dword [esp + 0x14]
lea edx, [esp + 0x1c]
push edx
lea ecx, [esp + 0x1c]
push ecx
lea edx, [esp + 0x28]
push edx
push ebx
push str.Flags
mov edi, eax
mov esi, 4
push eax
mov dword [esp + 0x40], edi
mov dword [esp + 0x44], ebx
mov dword [esp + 0x30], 1
mov dword [esp + 0x34], esi
call dword [sym.imp.ADVAPI32.dll_RegQueryValueExW]
cmp eax, ebx
jne 0x10023be5
cmp dword [esp + 0x20], esi
jne 0x10023be5
cmp dword [esp + 0x18], 1
jne 0x10023be5
mov byte [esp + 0x13], bl
jmp 0x10023bea
call dword [sym.imp.KERNEL32.dll_GetLastError]
mov byte [esp + 0x13], 1
mov byte [esp + 0xf0], 1
cmp dword [esp + 0xc8], 8
jb 0x10023c0d
mov eax, dword [esp + 0xb4]
push eax
call dword [sym.imp.MSVCR100.dll_void___cdecl_operator_delete_void__]
add esp, 4
xor ecx, ecx
mov dword [esp + 0xc8], 7
mov dword [esp + 0xc4], ebx
mov word [esp + 0xb4], cx
cmp edi, ebx
je 0x10023c34
push edi
call dword [sym.imp.ADVAPI32.dll_RegCloseKey]
xor edi, edi
mov dword [esp + 0x28], edi
mov dword [esp + 0x2c], ebx
mov dword [esp + 0x30], ebx
mov dword [esp + 0xf0], 3
xor edx, edx
push 0x37
mov eax, str.SoftwareMicrosoftWindowsCurrentVersionExtSettings_
lea esi, [esp + 0xb8]
mov dword [esp + 0xcc], 7
mov dword [esp + 0xc8], ebx
mov word [esp + 0xb8], dx
call fcn.1000cf60
push 0x26
mov eax, str.2F5C139F_79BD_4C84_A95A_E7140525BC55
mov ecx, esi
mov byte [esp + 0xf4], 4
call fcn.10011b20
mov eax, dword [esp + 0xb4]
mov esi, 8
cmp dword [esp + 0xc8], esi
jae 0x10023cae
lea eax, [esp + 0xb4]
lea ecx, [esp + 0x18]
push ecx
push 0x20019
push ebx
push eax
push SysReAllocString
mov dword [esp + 0x2c], ebx
call dword [sym.imp.ADVAPI32.dll_RegOpenKeyExW]
cmp eax, ebx
jne 0x10023d07
mov edi, dword [esp + 0x18]
lea edx, [esp + 0x20]
push edx
lea eax, [esp + 0x20]
push eax
lea ecx, [esp + 0x3c]
push ecx
push ebx
push str.Flags
push edi
mov dword [esp + 0x40], edi
mov dword [esp + 0x44], ebx
mov dword [esp + 0x34], 1
mov dword [esp + 0x38], 4
call dword [sym.imp.ADVAPI32.dll_RegQueryValueExW]
jmp 0x10023d0d
call dword [sym.imp.KERNEL32.dll_GetLastError]
mov byte [esp + 0xf0], 3
cmp dword [esp + 0xc8], esi
jb 0x10023d2f
mov edx, dword [esp + 0xb4]
push edx
call dword [sym.imp.MSVCR100.dll_void___cdecl_operator_delete_void__]
add esp, 4
xor eax, eax
or esi, 0xffffffff
mov dword [esp + 0xc8], 7
mov dword [esp + 0xc4], ebx
mov word [esp + 0xb4], ax
mov dword [esp + 0xf0], esi
cmp edi, ebx
je 0x10023d60
push edi
call dword [sym.imp.ADVAPI32.dll_RegCloseKey]
test byte [0x1006a340], 1
jne 0x10023d94
or dword [0x1006a340], 1
mov dword [esp + 0xf0], 5
call fcn.1001dc90
push 0x100511d0
call fcn.10048359
add esp, 4
mov dword [esp + 0xf0], esi
call dword [sym.imp.KERNEL32.dll_GetCurrentThreadId]
push eax
mov eax, 0x1006a288
call fcn.1001e240
cmp eax, ebx
je 0x10023f3c
cmp byte [esp + 0x13], bl
je 0x10023f3c
mov edi, dword [esp + 0x24]
lea ecx, [edi - 0xc]
call fcn.100237a0
test eax, eax
jns 0x10023f38
mov ecx, dword [edi + 0x24]
mov esi, dword [sym.imp.USER32.dll_FindWindowExW]
push ebx
push str.CommandBarClass
push ebx
push ecx
call esi
cmp eax, ebx
je 0x10023f3c
push ebx
push str.ReBarWindow32
push ebx
push eax
call esi
cmp eax, ebx
je 0x10023f3c
push ebx
push str.CommandToolbarBand
push ebx
push eax
call esi
mov esi, eax
mov dword [esp + 0x14], esi
cmp esi, ebx
je 0x10023f3c
lea ecx, [esp + 0x3c]
call dword [sym.imp.mfc100u.dll_CWnd::CWnd]
mov dword [esp + 0xf0], 6
mov edx, dword [edi + 0x24]
push edx
lea ecx, [esp + 0x40]
call dword [sym.imp.mfc100u.dll_CWnd::Attach]
lea eax, [esp + 0xd0]
push eax
push esi
mov dword [esp + 0xd8], ebx
mov dword [esp + 0xdc], ebx
mov dword [esp + 0xe0], ebx
mov dword [esp + 0xe4], ebx
call dword [sym.imp.USER32.dll_GetClientRect]
cmp dword [edi + 0x28], ebx
jne 0x10023ec8
push 0x184
call dword [sym.imp.MSVCR100.dll_void____cdecl_operator_new_unsigned_int_]
add esp, 4
mov dword [esp + 0x38], eax
mov byte [esp + 0xf0], 7
cmp eax, ebx
je 0x10023e92
lea edi, [esp + 0x3c]
mov esi, eax
call fcn.10018b60
mov edi, dword [esp + 0x24]
jmp 0x10023e94
xor eax, eax
mov byte [esp + 0xf0], 6
lea ecx, [esp + 0x3c]
mov dword [edi + 0x28], eax
mov edx, dword [eax]
mov edx, dword [edx + 0x16c]
push ecx
push 0xce
mov ecx, eax
call edx
mov esi, dword [edi + 0x18]
mov edi, dword [edi + 0x28]
call fcn.100196b0
mov esi, dword [esp + 0x14]
mov edi, dword [esp + 0x24]
mov ebx, dword [sym.imp.USER32.dll_ClientToScreen]
lea eax, [esp + 0xd8]
push eax
push esi
call ebx
lea ecx, [esp + 0xd0]
push ecx
push esi
call ebx
mov edx, dword [esp + 0xdc]
mov eax, dword [esp + 0xd8]
mov ecx, dword [edi + 0x28]
push 1
push 0x190
push 0x168
push edx
add eax, 0xfffffe98
push eax
call dword [sym.imp.mfc100u.dll_CWnd::MoveWindow]
mov ecx, dword [edi + 0x28]
push 5
call dword [sym.imp.mfc100u.dll_CWnd::ShowWindow]
lea ecx, [esp + 0x3c]
call dword [sym.imp.mfc100u.dll_CWnd::Detach]
lea ecx, [esp + 0x3c]
mov dword [esp + 0xf0], 0xffffffff
call dword [0x10052660]
xor eax, eax
jmp 0x10023f41
mov eax, 0x80004005
mov ecx, dword [esp + 0xe8]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov ecx, dword [esp + 0xd0]
xor ecx, esp
call fcn.10048188
mov esp, ebp
pop ebp
ret 0x18