Function at 0x100dffa
Capabilities:
Query or enumerate registry value

Disassembly:
sub esp, 0x24
mov eax, dword [esp + 0x28]
push ebx
push ebp
mov ebp, dword [esp + 0x38]
xor ebx, ebx
cmp ebp, ebx
push esi
mov dword [0x103b708], eax
mov dword [esp + 0xc], ebx
je 0x100e03e
cmp byte [ebp], bl
je 0x100e03e
mov esi, dword [sym.imp.SHLWAPI.dll_StrCmpNIA]
push 2
push 0x1002238
push ebp
call esi
test eax, eax
je 0x100e03e
push 2
push 0x1002234
push ebp
call esi
test eax, eax
jne 0x100e096
push 0x1002210
push 1
push ebx
call dword [sym.imp.SHLWAPI.dll_Ordinal_305]
mov esi, eax
cmp esi, ebx
mov dword [esp + 0xc], esi
je 0x100e072
call dword [sym.imp.KERNEL32.dll_GetLastError]
cmp eax, 0xb7
jne 0x100e072
push esi
call dword [sym.imp.KERNEL32.dll_CloseHandle]
push ebx
push 0x8af5
jmp 0x100e086
call fcn.0102f0aa
shr eax, 0x10
cmp ax, 6
jae 0x100e096
push ebx
push 0x89a9
push ebx
call sub.IEAKENG.dll_ErrorMessageBox
mov eax, 0x4c7
jmp 0x100e333
mov esi, dword [esp + 0x34]
push edi
xor eax, eax
mov ecx, 0x84
mov edi, 0x103d7d0
rep stosd dword es:[edi], eax
push 0x10021f8
mov dword [0x103d7d4], esi
call dword [sym.imp.SHLWAPI.dll_Ordinal_309]
cmp eax, ebx
mov dword [0x103d7d0], eax
jne 0x100e0cd
mov eax, 0x4c7
jmp 0x100e332
push esi
call fcn.0100df99
test eax, eax
je 0x100e267
push ebx
push 0x103b738
push ebx
push 0xf003f
push ebx
push ebx
push ebx
push 0x10021bc
push 0x80000001
call dword [sym.imp.SHLWAPI.dll_Ordinal_120]
call dword [sym.imp.KERNEL32.dll_GetUserDefaultLCID]
and eax, 0xffff
push 7
mov dword [0x103b4fc], eax
call dword [sym.imp.SHLWAPI.dll_IsOS]
push ebx
mov dword [0x103d1a8], eax
call dword [sym.imp.ole32.dll_CoInitialize]
mov esi, 0x103d5c0
push esi
mov dword [esp + 0x18], eax
call fcn.0100b1f4
push esi
mov esi, dword [sym.imp.SHLWAPI.dll_StrCpyW]
mov edi, 0x103d3b8
push edi
call esi
push edi
call dword [sym.imp.SHLWAPI.dll_Ordinal_43]
push 0x104
push 0x103d1b0
push 0x88c0
push dword [0x103d7d0]
call dword [sym.imp.SHLWAPI.dll_Ordinal_107]
lea eax, [esp + 0x40]
push eax
push 0x103b70c
push ebx
push 0x10021b0
push 0x1001f10
push 0x80000002
mov dword [esp + 0x58], 4
call dword [sym.imp.SHLWAPI.dll_SHGetValueW]
test eax, eax
push 2
pop edi
je 0x100e193
mov dword [0x103b70c], edi
mov eax, dword [0x103b70c]
sub eax, ebx
je 0x100e1dc
dec eax
je 0x100e1c4
push 0x1001ea0
push 0x103b710
call esi
xor eax, eax
inc eax
mov dword [0x103e444], 4
mov dword [0x103e420], eax
mov dword [0x103e424], eax
jmp 0x100e200
push 0x10021a0
push 0x103b710
call esi
mov dword [0x103e420], 1
jmp 0x100e1ee
push 0x1002190
push 0x103b710
call esi
mov dword [0x103e420], ebx
mov dword [0x103e444], edi
mov dword [0x10924e0], ebx
mov dword [0x103e424], ebx
cmp ebp, ebx
mov word [0x103d188], bx
je 0x100e21a
cmp byte [ebp], bl
je 0x100e21a
push ebp
call fcn.0100b49f
test eax, eax
je 0x100e267
cmp word [0x103e208], bx
je 0x100e25a
push ebx
push 0x80
push 4
push ebx
push 1
push 0x40000000
push 0x103e208
call dword [sym.imp.SHLWAPI.dll_Ordinal_52]
cmp eax, ebx
mov dword [0x103e410], eax
jne 0x100e25a
push ebx
push ebx
push 0x1002164
push ebx
call dword [sym.imp.SHLWAPI.dll_Ordinal_340]
jmp 0x100e0c3
push dword [esp + 0x38]
call fcn.01007c7c
test eax, eax
jne 0x100e278
push dword [0x103d7d0]
call dword [sym.imp.KERNEL32.dll_FreeLibrary]
jmp 0x100e0c3
mov esi, dword [sym.imp.SHLWAPI.dll_Ordinal_79]
jmp 0x100e29a
cmp eax, ebx
je 0x100e2a9
lea eax, [esp + 0x18]
push eax
call dword [sym.imp.USER32.dll_TranslateMessage]
lea eax, [esp + 0x18]
push eax
call dword [sym.imp.SHLWAPI.dll_Ordinal_60]
push ebx
push ebx
lea eax, [esp + 0x20]
push ebx
push eax
call esi
cmp eax, 0xffffffff
jne 0x100e280
call fcn.0100caf0
cmp dword [esp + 0x14], ebx
jne 0x100e2ba
call dword [sym.imp.ole32.dll_CoUninitialize]
mov eax, dword [0x103e410]
cmp eax, ebx
mov edi, dword [sym.imp.KERNEL32.dll_CloseHandle]
je 0x100e2cc
push eax
call edi
mov esi, 0x103e000
push esi
call dword [sym.imp.KERNEL32.dll_lstrlenW]
test eax, eax
je 0x100e2e3
push ebx
push esi
call fcn.0102ecfe
push dword [0x103b738]
call dword [sym.imp.ADVAPI32.dll_RegCloseKey]
push ebx
call fcn.0101006c
mov eax, dword [0x103e88c]
cmp eax, ebx
je 0x100e309
push ebx
push ebx
push 0x10
push eax
call dword [sym.imp.SHLWAPI.dll_Ordinal_136]
push dword [0x103d7d0]
call dword [sym.imp.KERNEL32.dll_FreeLibrary]
cmp dword [esp + 0x10], ebx
je 0x100e321
push dword [esp + 0x10]
call edi
cmp dword [0x103e888], ebx
mov eax, 0x4c7
jne 0x100e332
mov eax, dword [esp + 0x20]
pop edi
pop esi
pop ebp
pop ebx
add esp, 0x24
ret 0x10