Function at 0x10006b70
Capabilities:
Query or enumerate registry value

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x10068ff6
mov eax, dword fs:[0]
push eax
sub esp, 0x270
mov eax, dword [0x100891f4]
xor eax, ebp
mov dword [ebp - 0x14], eax
push ebx
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov dword [ebp - 0x10], esp
mov ebx, 1
mov dword [ebp - 0x27c], 0
mov dword [ebp - 0x270], ebx
mov dword [ebp - 0x278], 0
mov dword [ebp - 0x274], 0
mov eax, dword [0x1008b8c4]
mov dword [ebp - 4], 0
test bl, al
jne 0x10006beb
or eax, ebx
mov dword [0x1008b8c0], 0
mov dword [0x1008b8c4], eax
mov byte [ebp - 0x239], 0
lea eax, [ebp - 0x250]
mov byte [ebp - 4], 1
push eax
call fcn.1001c340
lea eax, [ebp - 0x250]
mov dword [ebp - 0x258], eax
lea eax, [ebp - 0x239]
mov dword [ebp - 0x254], eax
lea eax, [ebp - 0x258]
push eax
push 0x100067b0
push 0x1008b8c0
call fcn.1001c7f6
add esp, 0x10
test eax, eax
je 0x10007118
lea eax, [ebp - 0x250]
mov byte [ebp - 4], 3
push eax
call fcn.1001c37a
add esp, 4
mov byte [ebp - 4], 0
lea eax, [ebp - 0x268]
mov dword [ebp - 0x268], 0
push eax
push 0x20219
push 0
push 0x1008b8c8
push reloc.OLEAUT32.dll_SysReAllocString
call dword [sym.imp.ADVAPI32.dll_RegOpenKeyExW]
test eax, eax
jne 0x10006d19
mov esi, dword [ebp - 0x268]
push 0x200
push eax
lea eax, [ebp - 0x214]
mov dword [ebp - 0x27c], esi
push eax
mov dword [ebp - 0x278], 0x200
call fcn.10043b10
add esp, 0xc
mov dword [ebp - 0x240], 0x200
lea eax, [ebp - 0x240]
push eax
lea eax, [ebp - 0x214]
push eax
lea eax, [ebp - 0x248]
push eax
push 0
push str.InstallDate
push esi
call dword [sym.imp.ADVAPI32.dll_RegQueryValueExW]
test eax, eax
jne 0x10006d09
mov eax, dword [ebp - 0x248]
cmp eax, 1
je 0x10006cee
cmp eax, 2
jne 0x10006d09
mov eax, dword [ebp - 0x240]
test eax, eax
je 0x10006d37
test al, 1
jne 0x10006d09
shr eax, 1
cmp word [ebp + eax*2 - 0x216], 0
je 0x10006d40
mov ebx, 1
test esi, esi
je 0x10006d19
push esi
call dword [sym.imp.ADVAPI32.dll_RegCloseKey]
mov eax, ebx
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 0x14]
xor ecx, ebp
call fcn.100264cc
mov esp, ebp
pop ebp
ret
xor eax, eax
mov word [ebp - 0x214], ax
lea eax, [ebp - 0x244]
mov byte [ebp - 4], 6
push eax
lea eax, [ebp - 0x240]
mov dword [ebp - 0x25c], 0
push eax
lea eax, [ebp - 0x248]
mov dword [ebp - 0x260], 0
push eax
lea eax, [ebp - 0x264]
mov dword [ebp - 0x264], 0
push eax
lea eax, [ebp - 0x260]
mov dword [ebp - 0x248], 0
push eax
lea eax, [ebp - 0x25c]
mov dword [ebp - 0x240], 0
push eax
lea eax, [ebp - 0x214]
mov dword [ebp - 0x244], 0
push str._04d__02d__02d__02d:_02d:_02d
push eax
call fcn.10007200
add esp, 0x20
cmp eax, 6
jne 0x10006d0e
mov edx, dword [ebp - 0x25c]
mov eax, 0x76c
cmp edx, eax
cmovl edx, eax
mov eax, dword [ebp - 0x260]
mov dword [ebp - 0x25c], edx
cmp eax, 1
jl 0x10006ded
cmp eax, 0xc
jle 0x10006df8
mov eax, 1
mov dword [ebp - 0x260], eax
mov ecx, dword [ebp - 0x264]
cmp ecx, 1
jl 0x10006e08
cmp ecx, 0x1f
jle 0x10006e13
mov ecx, 1
mov dword [ebp - 0x264], ecx
mov edi, dword [ebp - 0x248]
test edi, edi
js 0x10006e22
cmp edi, 0x17
jle 0x10006e2a
xor edi, edi
mov dword [ebp - 0x248], edi
mov ebx, dword [ebp - 0x240]
test ebx, ebx
js 0x10006e39
cmp ebx, 0x3b
jle 0x10006e41
xor ebx, ebx
mov dword [ebp - 0x240], ebx
cmp dword [ebp - 0x244], 0
jl 0x10006e53
cmp dword [ebp - 0x244], 0x3b
jle 0x10006e5d
mov dword [ebp - 0x244], 0
cmp dword [ebp + 0xc], 0
je 0x10007009
cmp edx, 0x7b2
jl 0x1000713c
lea edi, [eax - 1]
cmp edi, 0xb
ja 0x10007146
lea eax, [ecx - 1]
cmp eax, 0x1e
ja 0x10007150
lea eax, [edx - 0x76c]
mov dword [ebp - 0x238], 0
mov dword [ebp - 0x224], eax
lea eax, [ebp - 0x238]
push eax
mov dword [ebp - 0x234], 0
mov dword [ebp - 0x230], 0
mov dword [ebp - 0x22c], ecx
mov dword [ebp - 0x228], edi
mov dword [ebp - 0x218], 0xffffffff
call fcn.10053006
mov ecx, eax
mov dword [ebp - 0x26c], eax
and ecx, edx
mov dword [ebp - 0x254], edx
add esp, 4
cmp ecx, 0xffffffff
je 0x1000715a
push 0
call fcn.1005309e
mov dword [ebp - 0x250], eax
lea eax, [ebp - 0x250]
push eax
lea eax, [ebp - 0x238]
mov dword [ebp - 0x24c], edx
push eax
call fcn.10052b37
add esp, 0xc
test eax, eax
jne 0x10006f2e
mov ebx, dword [ebp - 0x224]
add ebx, 0x76c
jmp 0x10006f30
xor ebx, ebx
lea eax, [ebp - 0x250]
push eax
lea eax, [ebp - 0x238]
push eax
call fcn.10052b37
add esp, 8
test eax, eax
jne 0x10006f53
mov edi, dword [ebp - 0x228]
inc edi
jmp 0x10006f55
xor edi, edi
lea eax, [ebp - 0x250]
push eax
lea eax, [ebp - 0x238]
push eax
call fcn.10052b37
xor ecx, ecx
add esp, 8
test eax, eax
cmove ecx, dword [ebp - 0x22c]
cmp ebx, 0x7b2
jl 0x10007164
dec edi
cmp edi, 0xb
ja 0x1000716e
lea eax, [ecx - 1]
cmp eax, 0x1e
ja 0x10007178
lea eax, [ebx - 0x76c]
mov dword [ebp - 0x238], 0
mov dword [ebp - 0x224], eax
lea eax, [ebp - 0x238]
push eax
mov dword [ebp - 0x234], 0
mov dword [ebp - 0x230], 0
mov dword [ebp - 0x22c], ecx
mov dword [ebp - 0x228], edi
mov dword [ebp - 0x218], 0xffffffff
call fcn.10053006
mov edi, eax
mov ebx, edx
mov ecx, edi
add esp, 4
and ecx, ebx
cmp ecx, 0xffffffff
je 0x10007182
sub edi, dword [ebp - 0x26c]
sbb ebx, dword [ebp - 0x254]
jmp 0x100070e7
cmp edx, 0x7b2
jl 0x1000718c
dec eax
mov dword [ebp - 0x254], eax
cmp eax, 0xb
ja 0x10007196
lea eax, [ecx - 1]
cmp eax, 0x1e
ja 0x100071a0
cmp edi, 0x17
ja 0x100071aa
cmp ebx, 0x3b
ja 0x100071b4
mov eax, dword [ebp - 0x244]
cmp eax, 0x3b
ja 0x100071be
mov dword [ebp - 0x238], eax
mov eax, dword [ebp - 0x254]
mov dword [ebp - 0x228], eax
lea eax, [edx - 0x76c]
mov dword [ebp - 0x224], eax
lea eax, [ebp - 0x238]
push eax
mov dword [ebp - 0x234], ebx
mov dword [ebp - 0x230], edi
mov dword [ebp - 0x22c], ecx
mov dword [ebp - 0x218], 0xffffffff
call fcn.10053006
mov ecx, eax
mov dword [ebp - 0x254], eax
and ecx, edx
mov dword [ebp - 0x26c], edx
add esp, 4
cmp ecx, 0xffffffff
je 0x100071c8
jmp 0x100070cd
push 0
call fcn.1005309e
add esp, 4
mov edi, eax
sub edi, dword [ebp - 0x254]
mov ebx, edx
sbb ebx, dword [ebp - 0x26c]
mov eax, dword [ebp + 8]
mov ecx, 0x18
imul ecx
push 0
push 0xe10
push edx
push eax
call fcn.10026550
cmp ebx, edx
jg 0x10006d09
jl 0x10007111
cmp edi, eax
jae 0x10006d09
xor ebx, ebx
jmp 0x10006d0e
lea eax, [ebp - 0x250]
mov byte [ebp - 4], 4
push eax
call fcn.1001c39b
add esp, 4
mov byte [ebp - 4], 2
test al, al
jne 0x100071d2
call fcn.1001c80e
push 0x80004005
call fcn.10002810
push 0x80004005
call fcn.10002810
push 0x80004005
call fcn.10002810
push 0x80070057
call fcn.10002810
push 0x80004005
call fcn.10002810
push 0x80004005
call fcn.10002810
push 0x80004005
call fcn.10002810
push 0x80070057
call fcn.10002810
push 0x80004005
call fcn.10002810
push 0x80004005
call fcn.10002810
push 0x80004005
call fcn.10002810
push 0x80004005
call fcn.10002810
push 0x80004005
call fcn.10002810
push 0x80004005
call fcn.10002810
push 0x80070057
call fcn.10002810
sub esp, 8
lea eax, [ebp - 0x250]
mov ecx, esp
push eax
call fcn.100024c0
call fcn.10004140
int3