Function at 0x100aa6dd
Capabilities:
Query or enumerate registry value

Disassembly:
push 0xc4
mov eax, 0x1010f8f6
call fcn.10062c32
mov edi, ecx
mov eax, dword [ebp + 0xc]
mov esi, dword [ebp + 8]
mov ebx, dword [edi]
mov dword [ebp - 0xb4], eax
mov eax, dword [edi + 4]
mov dword [ebp - 0xb8], esi
add eax, ebx
jmp 0x100aaa48
lea eax, [ebx + 1]
mov dword [ebp - 0x94], ebx
mov dword [ebp - 0x90], eax
lea edx, [ebx + 3]
movzx eax, word [eax]
mov ecx, ebx
add eax, 7
mov dword [ebp - 0x98], ebx
add eax, dword [edx]
add ebx, eax
mov dword [ebp - 0x8c], edx
lea eax, [ecx + 7]
push eax
lea ecx, [ebp - 0x40]
call fcn.1006ab4f
and dword [ebp - 4], 0
lea eax, [ebp - 0x40]
push eax
lea eax, [ebp - 0x28]
mov ecx, edi
push eax
call fcn.100a9e62
lea ecx, [ebp - 0x40]
mov byte [ebp - 4], 2
call fcn.1006af06
mov ecx, dword [ebp - 0xb4]
test ecx, ecx
je 0x100aa78e
cmp dword [ebp - 0x14], 8
lea eax, [ebp - 0x28]
jb 0x100aa777
mov eax, dword [ebp - 0x28]
xor edx, edx
push edx
push edx
push edx
push edx
push eax
push ecx
call dword [sym.imp.ADVAPI32.dll_RegQueryValueExW]
cmp eax, 2
je 0x100aaa37
mov eax, dword [ebp - 0x98]
movzx ecx, byte [eax]
mov eax, ecx
sub eax, 1
je 0x100aa9b3
sub eax, 1
je 0x100aa9b3
sub eax, 5
je 0x100aa7f2
mov edx, dword [ebp - 0x8c]
mov eax, dword [edx]
mov edx, dword [ebp - 0x94]
mov dword [ebp - 0x98], eax
add edx, 7
mov eax, dword [ebp - 0x90]
movzx eax, word [eax]
add eax, edx
cmp dword [ebp - 0x14], 8
lea edx, [ebp - 0x28]
jb 0x100aa7de
mov edx, dword [ebp - 0x28]
push dword [ebp - 0x98]
push eax
push ecx
mov ecx, esi
call fcn.100ab171
jmp 0x100aaa37
xor eax, eax
cmp dword [edi + 0x18], eax
jne 0x100aa85d
mov dword [ebp - 0xc4], eax
mov dword [ebp - 0xc0], eax
mov dword [ebp - 0xbc], eax
mov eax, dword [ebp - 0x90]
mov ecx, dword [ebp - 0x94]
mov edx, dword [ebp - 0x8c]
add ecx, 7
mov byte [ebp - 4], 3
movzx eax, word [eax]
add ecx, eax
lea eax, [ebp - 0xc4]
mov edx, dword [edx]
push eax
call fcn.100ab585
cmp dword [ebp - 0x14], 8
lea edx, [ebp - 0x28]
jb 0x100aa843
mov edx, dword [ebp - 0x28]
lea eax, [ebp - 0xc4]
push eax
push ecx
mov ecx, esi
call fcn.100aaffc
lea ecx, [ebp - 0xc4]
jmp 0x100aa9a9
mov dword [ebp - 0xd0], eax
mov dword [ebp - 0xcc], eax
mov dword [ebp - 0xc8], eax
mov dword [ebp - 0xb0], eax
mov dword [ebp - 0xac], eax
mov dword [ebp - 0xa8], eax
mov eax, dword [ebp - 0x90]
mov ecx, dword [ebp - 0x94]
mov edx, dword [ebp - 0x8c]
add ecx, 7
mov byte [ebp - 4], 5
movzx eax, word [eax]
add ecx, eax
lea eax, [ebp - 0xb0]
mov edx, dword [edx]
push eax
call fcn.100ab585
mov esi, dword [ebp - 0xb0]
cmp esi, dword [ebp - 0xac]
setne al
test al, al
je 0x100aa90b
push esi
lea ecx, [ebp - 0x40]
call fcn.1006e7cf
lea eax, [ebp - 0x40]
mov byte [ebp - 4], 6
push eax
lea eax, [ebp - 0x88]
mov ecx, edi
push eax
call fcn.100a9e62
push eax
lea ecx, [ebp - 0xd0]
mov byte [ebp - 4], 7
call fcn.10076164
lea ecx, [ebp - 0x88]
call fcn.1006af06
lea ecx, [ebp - 0x40]
mov byte [ebp - 4], 5
call fcn.1006af06
add esi, 0x18
jmp 0x100aa8b3
xor eax, eax
mov dword [ebp - 0xa4], eax
mov dword [ebp - 0xa0], eax
mov dword [ebp - 0x9c], eax
mov byte [ebp - 4], 8
lea eax, [ebp - 0x28]
cmp dword [ebp - 0x14], 8
jb 0x100aa92f
mov eax, dword [ebp - 0x28]
push eax
lea ecx, [ebp - 0x40]
call fcn.1006ab4f
mov esi, dword [ebp - 0xb8]
lea eax, [ebp - 0xa4]
push eax
lea edx, [ebp - 0x40]
mov byte [ebp - 4], 9
mov ecx, esi
call fcn.100aadfd
lea ecx, [ebp - 0x40]
mov byte [ebp - 4], 8
call fcn.1006af06
lea eax, [ebp - 0xd0]
push eax
lea eax, [ebp - 0xa4]
push eax
call fcn.100aa4ef
cmp dword [ebp - 0x14], 8
lea edx, [ebp - 0x28]
jb 0x100aa97e
mov edx, dword [ebp - 0x28]
lea eax, [ebp - 0xa4]
push eax
push ecx
mov ecx, esi
call fcn.100aaffc
lea ecx, [ebp - 0xa4]
call fcn.10075f96
lea ecx, [ebp - 0xb0]
call fcn.10075f96
lea ecx, [ebp - 0xd0]
call fcn.10075f96
jmp 0x100aaa37
mov eax, dword [ebp - 0x90]
lea ecx, [ebp - 0x70]
mov edx, dword [ebp - 0x94]
add edx, 7
movzx eax, word [eax]
add eax, edx
push eax
call fcn.1006ab4f
lea eax, [ebp - 0x70]
mov byte [ebp - 4], 0xa
push eax
lea eax, [ebp - 0x58]
mov ecx, edi
push eax
call fcn.100a9e62
lea ecx, [ebp - 0x70]
mov byte [ebp - 4], 0xc
call fcn.1006af06
cmp dword [ebp - 0x44], 8
mov eax, dword [ebp - 0x48]
lea eax, [eax*2 + 2]
mov dword [ebp - 0x8c], eax
lea eax, [ebp - 0x58]
jb 0x100aaa0b
mov eax, dword [ebp - 0x58]
cmp dword [ebp - 0x14], 8
lea edx, [ebp - 0x28]
mov ecx, dword [ebp - 0x98]
movzx ecx, byte [ecx]
jb 0x100aaa20
mov edx, dword [ebp - 0x28]
push dword [ebp - 0x8c]
push eax
push ecx
mov ecx, esi
call fcn.100ab171
lea ecx, [ebp - 0x58]
call fcn.1006af06
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x28]
call fcn.1006af06
mov eax, dword [edi]
add eax, dword [edi + 4]
cmp eax, ebx
ja 0x100aa70c
call fcn.10062bca
ret 8