Function at 0x10013c7
Capabilities:
Query or enumerate registry value

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x38
push ebx
mov ebx, dword [0x10010d4]
push esi
push edi
push 0x4a
call ebx
xor edi, edi
test eax, eax
jne 0x1002e51
call fcn.0100163c
test eax, eax
je 0x1002ed7
push str.INDICDLL
call dword [0x100102c]
cmp eax, edi
mov dword [0x10051c8], eax
je 0x1002ed7
mov esi, dword [0x1001034]
push 1
push eax
call esi
push 2
mov dword [0x1005034], eax
push dword [0x10051c8]
call esi
push 3
mov dword [0x1005038], eax
push dword [0x10051c8]
call esi
push 5
mov dword [0x100503c], eax
push dword [0x10051c8]
call esi
push 4
mov dword [0x1005170], eax
push dword [0x10051c8]
call esi
push 6
mov dword [0x100516c], eax
push dword [0x10051c8]
call esi
push 8
mov dword [0x1005050], eax
push dword [0x10051c8]
call esi
push 9
mov dword [0x1005168], eax
push dword [0x10051c8]
call esi
push 7
mov dword [0x1005040], eax
push dword [0x10051c8]
call esi
push 0xa
mov dword [0x10051e8], eax
push dword [0x10051c8]
call esi
push 0xb
mov dword [0x1005044], eax
push dword [0x10051c8]
call esi
push 0xd
mov dword [0x1005048], eax
push dword [0x10051c8]
call esi
push 0xe
mov dword [0x100504c], eax
push dword [0x10051c8]
call esi
push 0xf
mov dword [0x1005054], eax
push dword [0x10051c8]
call esi
push 0x10
mov dword [0x1005058], eax
push dword [0x10051c8]
call esi
cmp dword [0x1005034], edi
mov dword [0x100505c], eax
je 0x1002eb9
cmp dword [0x1005038], edi
je 0x1002eb9
cmp dword [0x100503c], edi
je 0x1002eb9
cmp dword [0x1005170], edi
je 0x1002eb9
cmp dword [0x100516c], edi
je 0x1002eb9
cmp dword [0x1005168], edi
je 0x1002eb9
cmp dword [0x1005040], edi
je 0x1002eb9
cmp dword [0x10051e8], edi
je 0x1002eb9
cmp dword [0x1005044], edi
je 0x1002eb9
cmp dword [0x1005048], edi
je 0x1002eb9
cmp dword [0x100504c], edi
je 0x1002eb9
cmp dword [0x1005054], edi
je 0x1002eb9
cmp dword [0x1005058], edi
je 0x1002eb9
cmp eax, edi
je 0x1002eb9
mov esi, dword [ebp + 8]
push esi
call dword [0x10010c4]
lea ecx, [ebp - 0x38]
push 1
push ecx
push edi
push edi
push eax
mov dword [ebp + 8], eax
call dword [0x1001178]
push eax
call dword [0x100116c]
push dword [ebp + 8]
mov eax, dword [ebp - 0x20]
mov dword [0x1005064], eax
push esi
call dword [0x10010c8]
push 0x31
call ebx
push 0x32
mov dword [0x10051d4], eax
call ebx
mov dword [0x10051d8], eax
call fcn.010016bf
push esi
call fcn.010017bf
call fcn.010017ee
push 1
push esi
call fcn.010021d8
cmp dword [0x1005158], edi
je 0x1002ed7
cmp dword [0x1005188], edi
je 0x1002ed7
push esi
call fcn.01001a98
test eax, eax
je 0x1002ed7
push edi
push 3
push 0x287
push 0xffff
call dword [0x1001114]
push edi
push esi
call fcn.01001aec
mov dword [0x1005060], eax
xor eax, eax
pop edi
pop esi
pop ebx
leave
ret 0xc
lea eax, [ebp - 4]
mov dword [ebp - 4], 0x14
push eax
lea eax, [ebp - 0x18]
push eax
push 0x10027ec
push 0x80000001
mov word [ebp - 0x18], di
call dword [0x1001218]
test eax, eax
jne 0x10013e4
cmp dword [ebp - 4], 9
jne 0x10013e4
cmp word [ebp - 0xc], 0x30
jne 0x10013e4
cmp word [ebp - 0xa], 0x31
je 0x1002eaa
cmp word [ebp - 0xa], 0x64
je 0x1002eaa
cmp word [ebp - 0xa], 0x44
jne 0x10013e4
mov dword [0x1005278], 0x80
jmp 0x10013e4
push dword [0x10051c8]
call dword [0x1001014]
mov dword [0x1005034], edi
mov dword [0x1005038], edi
mov dword [0x100503c], edi
or eax, 0xffffffff
jmp 0x1001635