Function at 0x1003740c
Capabilities:
Query or enumerate registry key

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x1006a1d2
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
push ecx
sub esp, 0x64
push ebx
push esi
push edi
mov dword [ebp - 0x10], esp
movzx eax, byte [ebp + 0xc]
test eax, eax
je 0x10037497
mov eax, dword [ebp + 0x1c]
mov dword [ebp - 0x34], eax
lea eax, [ebp + 0x10]
mov dword [ebp - 0x30], eax
mov eax, dword [ebp - 0x30]
movzx eax, byte [eax]
test eax, eax
je 0x10037471
push 0
push 0xe0b
push 0x562
push 0x18b9
push 0xe0a
push 0x901
push 0
call dword [sym.imp.USER32.dll_TrackPopupMenu]
jmp 0x10037492
mov eax, dword [ebp - 0x34]
mov dword [ebp - 0x38], eax
mov eax, dword [ebp - 0x38]
mov dword [ebp - 0x3c], eax
mov eax, dword [ebp - 0x3c]
movzx eax, byte [eax]
test eax, eax
je 0x10037492
push 0x2649
call dword [sym.imp.KERNEL32.dll_TlsFree]
jmp 0x10037638
mov dword [ebp - 0x1c], 0x5cef
mov dword [ebp - 0x44], 0x1000aca4
cmp dword [ebp - 0x1c], 0x5e3e
jle 0x10037526
push 0
push 0
push 0x182d
push 0
call dword [sym.imp.USER32.dll_AppendMenuA]
and dword [ebp - 0x14], 0
jmp 0x100374cc
mov eax, dword [ebp - 0x14]
inc eax
mov dword [ebp - 0x14], eax
cmp dword [ebp - 0x14], 0x1da9
jge 0x10037526
and dword [ebp - 0x18], 0
jmp 0x100374e2
mov eax, dword [ebp - 0x18]
inc eax
mov dword [ebp - 0x18], eax
cmp dword [ebp - 0x18], 0x75c7
jge 0x10037524
mov eax, dword [ebp - 0x14]
and eax, dword [ebp - 0x18]
cdq
mov dword [ebp - 0x5c], eax
mov dword [ebp - 0x58], edx
push dword [ebp - 0x58]
push dword [ebp - 0x5c]
lea ecx, [ebp - 0x74]
call fcn.1000da20
pop ecx
pop ecx
mov dword [ebp - 0x40], eax
mov ecx, dword [ebp - 0x40]
call fcn.100104ec
push eax
call fcn.100540b6
pop ecx
lea ecx, [ebp - 0x74]
call fcn.100104e2
jmp 0x100374db
jmp 0x100374c5
lea eax, [ebp + 8]
mov dword [ebp - 0x50], eax
and dword [ebp - 4], 0
cmp dword [ebp - 0x1c], 0x59d9
jge 0x10037542
push dword [ebp - 0x44]
call fcn.100540b6
pop ecx
jmp 0x1003755e
or dword [ebp - 4], 0xffffffff
jmp 0x10037568
mov eax, dword [ebp + 0x14]
mov dword [ebp - 0x4c], eax
lea eax, [ebp + 0x18]
mov dword [ebp - 0x48], eax
mov eax, dword [ebp - 0x48]
movzx eax, byte [eax]
test eax, eax
je 0x1003761f
mov eax, dword [ebp - 0x4c]
mov dword [ebp - 0x20], eax
mov eax, dword [ebp - 0x50]
mov dword [ebp - 0x54], eax
mov eax, dword [ebp - 0x20]
mov eax, dword [eax + 4]
mov dword [ebp - 0x28], eax
mov eax, dword [ebp - 0x20]
mov eax, dword [eax]
push 8
pop ecx
imul ecx, ecx, 5
lea eax, [eax + ecx + 0x78]
mov dword [ebp - 0x24], eax
mov eax, dword [ebp - 0x24]
cmp dword [eax + 4], 0
jbe 0x1003761d
mov eax, dword [ebp - 0x24]
mov ecx, dword [ebp - 0x28]
add ecx, dword [eax]
mov dword [ebp - 0x2c], ecx
mov eax, dword [ebp - 0x2c]
cmp dword [eax], 0
jbe 0x1003761d
push dword [ebp - 0x28]
push 0x24cb
mov eax, dword [ebp - 0x54]
push dword [eax]
push 1
push 0x48fa
push 1
lea eax, [ebp - 0x2c]
push eax
push 1
push 0x6c7e
push 0x6377
push 0x3ef1
push 0x2ce5
push 0x4b7f
push 0x4085
push 0x220c
push 0x2ef9
push 0x5687
push 0x2e15
call fcn.10025ea5
add esp, 0x48
jmp 0x100375bd
jmp 0x10037638
push 0
push 0
push 0
push 0
push 0
push 0
push 0x6d9
push 0
call dword [sym.imp.ADVAPI32.dll_RegEnumKeyExW]
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret