Function at 0x1013d2b
Capabilities:
Query or enumerate registry value

Disassembly:
push 0x658
mov eax, 0x102f479
call fcn.01026060
mov eax, dword [ebp + 0x10]
mov dword [ebp - 0x664], eax
mov eax, dword [ebp + 0x14]
mov dword [ebp - 0x63c], eax
mov eax, 0x20a
xor ebx, ebx
mov esi, ecx
mov dword [ebp - 0x64c], 0x105
mov dword [ebp - 0x644], eax
mov dword [ebp - 0x660], eax
mov dword [ebp - 0x650], ebx
mov dword [ebp - 0x640], ebx
mov dword [ebp - 4], ebx
push 0x10016d0
lea ecx, [ebp - 0x648]
call dword [sym.imp.MFC80U.DLL_Ordinal_283]
mov byte [ebp - 4], 1
mov eax, dword [esi + 0x5c]
cmp byte [eax + 0x79], bl
jne 0x1013db1
lea ecx, [esi + 8]
call dword [sym.imp.MFC80U.DLL_Ordinal_870]
push eax
call fcn.0101cde5
test al, al
pop ecx
mov byte [ebp - 0x635], bl
je 0x1013db8
mov byte [ebp - 0x635], 1
xor ecx, ecx
mov eax, 0x10380ec
mov edx, dword [ebp + 8]
cmp dword [eax], edx
je 0x1013dd3
add eax, 0x10
inc ecx
cmp eax, 0x103811c
jl 0x1013dbf
jmp 0x1013de8
shl ecx, 4
push dword [ecx + 0x10380f0]
lea ecx, [ebp - 0x648]
call dword [sym.imp.MFC80U.DLL_Ordinal_776]
lea ecx, [ebp - 0x648]
call dword [sym.imp.MFC80U.DLL_Ordinal_2895]
test eax, eax
jne 0x1013e22
xor esi, esi
mov byte [ebp - 4], bl
lea ecx, [ebp - 0x648]
call dword [sym.imp.MFC80U.DLL_Ordinal_577]
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x640]
call fcn.010106e6
mov eax, esi
call fcn.010260f2
ret 0x10
mov eax, dword [esi + 4]
mov eax, dword [eax + 4]
mov edi, dword [eax + esi + 4]
push 1
push 0x8000c372
lea eax, [ebp - 0x640]
push eax
push 0x20019
push ebx
lea ecx, [ebp - 0x648]
add edi, 0x10
call dword [sym.imp.MFC80U.DLL_Ordinal_870]
push eax
push dword [ebp - 0x63c]
call dword [sym.imp.ADVAPI32.dll_RegOpenKeyExW]
push eax
mov eax, dword [esi + 4]
mov eax, dword [eax + 4]
lea ecx, [eax + esi + 4]
call dword [edi]
test al, al
je 0x1014118
mov eax, dword [esi + 4]
mov eax, dword [eax + 4]
mov edi, dword [eax + esi + 4]
push 1
push 0x8000c372
lea eax, [ebp - 0x644]
push eax
lea eax, [ebp - 0x21c]
push eax
push ebx
push ebx
lea eax, [ebp - 0x64c]
push eax
lea eax, [ebp - 0x634]
push eax
mov dword [ebp - 0x63c], ebx
push ebx
jmp 0x10140f4
mov eax, dword [ebp - 0x644]
shr eax, 1
mov word [ebp + eax*2 - 0x21c], bx
mov dword [ebp - 0x658], ebx
mov byte [ebp - 4], 2
mov dword [ebp - 0x654], ebx
mov byte [ebp - 4], 3
mov dword [ebp - 0x65c], ebx
mov byte [ebp - 4], 4
mov eax, dword [esi + 4]
mov eax, dword [eax + 4]
mov edi, dword [eax + esi + 4]
push 1
push 0xc000c35a
lea eax, [ebp - 0x658]
push eax
push 0x20019
push ebx
lea eax, [ebp - 0x21c]
push eax
push dword [ebp - 0x664]
add edi, 0x10
call dword [sym.imp.ADVAPI32.dll_RegOpenKeyExW]
push eax
mov eax, dword [esi + 4]
mov eax, dword [eax + 4]
lea ecx, [eax + esi + 4]
call dword [edi]
test al, al
je 0x1014071
mov eax, dword [esi + 4]
mov eax, dword [eax + 4]
mov edi, dword [eax + esi + 4]
push 1
push 0xc000c35d
lea eax, [ebp - 0x654]
push eax
push 0x20019
push ebx
push 0x1001e30
push dword [ebp - 0x658]
add edi, 0x10
call dword [sym.imp.ADVAPI32.dll_RegOpenKeyExW]
push eax
mov eax, dword [esi + 4]
mov eax, dword [eax + 4]
lea ecx, [eax + esi + 4]
call dword [edi]
test al, al
je 0x1014071
mov eax, dword [esi + 4]
mov eax, dword [eax + 4]
mov edi, dword [eax + esi + 4]
push ebx
push 0xc000c370
lea eax, [ebp - 0x65c]
push eax
push 0x20019
push ebx
push 0x1002f68
push dword [ebp - 0x654]
add edi, 0x10
call dword [sym.imp.ADVAPI32.dll_RegOpenKeyExW]
push eax
mov eax, dword [esi + 4]
mov eax, dword [eax + 4]
lea ecx, [eax + esi + 4]
call dword [edi]
test al, al
je 0x1014071
mov eax, dword [esi + 4]
mov eax, dword [eax + 4]
mov edi, dword [eax + esi + 4]
push ebx
push 0xc000c371
lea eax, [ebp - 0x660]
push eax
lea eax, [ebp - 0x428]
push eax
push ebx
push ebx
push 0x1002f68
push dword [ebp - 0x65c]
add edi, 0x10
call dword [sym.imp.ADVAPI32.dll_RegQueryValueExW]
push eax
mov eax, dword [esi + 4]
mov eax, dword [eax + 4]
lea ecx, [eax + esi + 4]
call dword [edi]
test al, al
je 0x1014071
lea eax, [ebp - 0x428]
push 0x1001868
push eax
call dword [sym.imp.MSVCR80.dll_wcsstr]
cmp eax, ebx
pop ecx
pop ecx
je 0x101401f
lea ecx, [ebp - 0x428]
sub eax, ecx
sar eax, 1
mov word [ebp + eax*2 - 0x428], bx
lea eax, [ebp - 0x428]
push eax
call dword [sym.imp.MSVCR80.dll__wtoi]
cmp eax, dword [esi + 0x10]
pop ecx
jne 0x1014071
cmp byte [ebp - 0x635], bl
je 0x101404c
lea eax, [ebp - 0x21c]
push eax
mov ecx, esi
call fcn.01012adf
test al, al
je 0x1014071
lea eax, [ebp - 0x21c]
push eax
push dword [ebp + 0xc]
lea eax, [ebp - 0x634]
push dword [ebp + 8]
mov ecx, esi
push eax
call fcn.0100ccbc
test al, al
je 0x1014071
inc dword [ebp - 0x650]
inc dword [ebp - 0x63c]
mov eax, 0x20a
mov dword [ebp - 0x660], eax
mov dword [ebp - 0x64c], 0x105
mov dword [ebp - 0x644], eax
mov byte [ebp - 4], 3
lea ecx, [ebp - 0x65c]
call fcn.010106e6
mov byte [ebp - 4], 2
lea ecx, [ebp - 0x654]
call fcn.010106e6
mov byte [ebp - 4], 1
lea ecx, [ebp - 0x658]
call fcn.010106e6
mov eax, dword [esi + 4]
mov eax, dword [eax + 4]
mov edi, dword [eax + esi + 4]
push 1
push 0x8000c372
lea eax, [ebp - 0x644]
push eax
lea eax, [ebp - 0x21c]
push eax
push ebx
push ebx
lea eax, [ebp - 0x64c]
push eax
lea eax, [ebp - 0x634]
push eax
push dword [ebp - 0x63c]
push dword [ebp - 0x640]
add edi, 0x10
call dword [sym.imp.ADVAPI32.dll_RegEnumValueW]
push eax
mov eax, dword [esi + 4]
mov eax, dword [eax + 4]
lea ecx, [eax + esi + 4]
call dword [edi]
test al, al
jne 0x1013eac
mov esi, dword [ebp - 0x650]
jmp 0x1013dfa