Function at 0x1028fbb
Capabilities:
Query or enumerate registry key

Disassembly:
push 0x23c
mov eax, 0x10429f1
call fcn.01001615
mov ecx, dword [ebp + 8]
push 0x1002ebc
mov dword [ebp - 0x238], ecx
call fcn.01003693
mov esi, dword [sym.imp.ADVAPI32.dll_RegOpenKeyExW]
lea eax, [ebp - 0x22c]
push eax
push 0x20019
xor ebx, ebx
push ebx
push 0x10192a8
push reloc.OLEAUT32.dll_SysReAllocString
mov dword [ebp - 0x21c], ebx
call esi
push eax
call fcn.0100b113
cmp eax, ebx
mov dword [ebp - 0x228], eax
jl 0x10292a8
push 0x101931c
lea ecx, [ebp - 0x240]
mov dword [ebp - 0x23c], ebx
mov dword [ebp - 0x234], 0x104
call fcn.01003615
push ebx
push ebx
push ebx
push ebx
lea eax, [ebp - 0x234]
push eax
lea eax, [ebp - 0x218]
push eax
push ebx
push dword [ebp - 0x22c]
mov dword [ebp - 4], ebx
call dword [sym.imp.ADVAPI32.dll_RegEnumKeyExW]
cmp eax, ebx
mov dword [ebp - 0x224], eax
jne 0x102924c
inc dword [ebp - 0x23c]
lea eax, [ebp - 0x218]
push eax
lea ecx, [ebp - 0x220]
mov dword [ebp - 0x234], 0x104
call fcn.01003615
mov eax, dword [ebp - 0x240]
push dword [eax - 0xc]
lea eax, [ebp - 0x244]
push eax
lea ecx, [ebp - 0x220]
mov byte [ebp - 4], 1
call fcn.0100977f
push dword [ebp - 0x240]
mov edi, dword [ebp - 0x244]
push edi
mov byte [ebp - 4], 2
call dword [sym.imp.msvcrt.dll__wcsicmp]
test eax, eax
pop ecx
pop ecx
jne 0x10291e2
lea eax, [ebp - 0x230]
push eax
push 1
push ebx
lea eax, [ebp - 0x218]
push eax
push SysStringLen
call esi
test eax, eax
jne 0x102913f
lea eax, [ebp - 0x248]
push eax
push 1
push ebx
push 0x1019330
push dword [ebp - 0x230]
call esi
test eax, eax
jne 0x102912e
inc dword [ebp - 0x21c]
cmp dword [ebp - 0x21c], 1
jne 0x1029122
mov ecx, dword [ebp - 0x238]
lea eax, [ebp - 0x218]
push eax
call fcn.01003693
push dword [ebp - 0x248]
call dword [sym.imp.ADVAPI32.dll_RegCloseKey]
push dword [ebp - 0x230]
call dword [sym.imp.ADVAPI32.dll_RegCloseKey]
jmp 0x10291d9
lea eax, [ebp - 0x218]
push eax
push dword [ebp - 0x22c]
call fcn.01027f8f
cmp eax, ebx
mov dword [ebp - 0x228], eax
jl 0x102922e
push 0x10032fc
lea ecx, [ebp - 0x220]
call fcn.0101cbaf
push 0x1019330
lea ecx, [ebp - 0x220]
call fcn.0101cbaf
lea eax, [ebp - 0x230]
push eax
push 1
push ebx
push dword [ebp - 0x220]
push SysStringLen
call esi
test eax, eax
jne 0x10291c7
inc dword [ebp - 0x21c]
cmp dword [ebp - 0x21c], 1
jne 0x10291bb
mov ecx, dword [ebp - 0x238]
lea eax, [ebp - 0x218]
push eax
call fcn.01003693
push dword [ebp - 0x230]
call dword [sym.imp.ADVAPI32.dll_RegCloseKey]
lea eax, [ebp - 0x218]
push eax
push SysStringLen
call dword [sym.imp.ADVAPI32.dll_RegUnLoadKeyW]
cmp dword [ebp - 0x21c], 1
ja 0x102922e
lea ecx, [edi - 0x10]
call fcn.01002480
mov ecx, dword [ebp - 0x220]
add ecx, 0xfffffff0
mov byte [ebp - 4], bl
call fcn.01002480
push ebx
push ebx
push ebx
push ebx
lea eax, [ebp - 0x234]
push eax
lea eax, [ebp - 0x218]
push eax
push dword [ebp - 0x23c]
push dword [ebp - 0x22c]
call dword [sym.imp.ADVAPI32.dll_RegEnumKeyExW]
cmp eax, ebx
mov dword [ebp - 0x224], eax
jne 0x1029244
jmp 0x1029068
lea ecx, [edi - 0x10]
call fcn.01002480
mov ecx, dword [ebp - 0x220]
add ecx, 0xfffffff0
call fcn.01002480
cmp dword [ebp - 0x224], ebx
je 0x1029271
cmp dword [ebp - 0x224], 0x103
jne 0x1029260
mov dword [ebp - 0x228], ebx
jmp 0x1029271
push dword [ebp - 0x224]
call fcn.0100b113
mov dword [ebp - 0x228], eax
push dword [ebp - 0x22c]
call dword [sym.imp.ADVAPI32.dll_RegCloseKey]
mov ecx, dword [ebp - 0x240]
or dword [ebp - 4], 0xffffffff
add ecx, 0xfffffff0
call fcn.01002480
cmp dword [ebp - 0x21c], 1
jbe 0x10292a8
mov ecx, dword [ebp - 0x238]
push 0x1002ebc
call fcn.01003693
mov eax, dword [ebp - 0x228]
call fcn.01001652
ret 4