Function at 0x1025847
Capabilities:
Query or enumerate registry value

Disassembly:
mov edi, edi
push ebp
mov ebp, esp
sub esp, 0x428
mov eax, dword [0x1028058]
xor eax, ebp
mov dword [ebp - 4], eax
push ebx
push esi
mov esi, dword [ebp + 8]
xor ebx, ebx
mov dword [ebp - 0x428], esi
mov dword [ebp - 0x418], ebx
cmp esi, ebx
jne 0x1025689
xor eax, eax
jmp 0x1025de2
test dword [ebp + 0xc], 0xffffffe3
jne 0x1025682
push edi
mov edi, dword [ebp + 0x10]
cmp di, bx
jne 0x10256a5
test byte [ebp + 0xc], 0x10
jne 0x1025d0f
call fcn.01025191
mov dword [0x10286f0], eax
movzx eax, al
and eax, 0x20
or eax, 2
push eax
push 0
push esi
call dword [sym.imp.KERNEL32.dll_LoadLibraryExW]
mov dword [ebp - 0x414], eax
test eax, eax
je 0x1025d0f
test byte [0x10286f0], 0x20
jne 0x1025de1
lea eax, [ebp - 0x418]
push eax
lea eax, [ebp - 0x410]
push eax
push 0x104
push 0
push esi
push 0
call dword [sym.imp.KERNEL32.dll_SearchPathW]
test eax, eax
je 0x1025d03
mov eax, dword [ebp - 0x418]
test eax, eax
jne 0x1025721
and dword [ebp - 0x41c], ebx
lea eax, [ebp - 0x410]
mov dword [ebp - 0x418], eax
jmp 0x1025733
lea ecx, [ebp - 0x410]
mov dword [ebp - 0x41c], ecx
xor ecx, ecx
mov word [eax - 2], cx
push 0
push dword [ebp - 0x414]
call fcn.0102505c
test eax, eax
je 0x1025ceb
test di, di
jne 0x1025cc3
mov al, byte [0x10286f0]
test al, 4
je 0x1025ad2
call dword [sym.imp.KERNEL32.dll_GetUserDefaultUILanguage]
movzx eax, ax
mov ecx, 0x404
mov dword [ebp - 0x420], eax
cmp ax, cx
jne 0x1025785
call fcn.010252d0
movzx eax, ax
mov dword [ebp - 0x420], eax
mov eax, dword [ebp + 0xc]
and eax, 8
mov dword [ebp - 0x424], eax
cmp dword [ebp - 0x424], 0
je 0x102585b
lea eax, [ebp - 0x15c]
push eax
push dword [ebp - 0x420]
lea edi, [ebp - 0x208]
lea esi, [ebp - 0xb0]
call fcn.010254b4
test eax, eax
je 0x1025d4f
push dword [ebp - 0x41c]
mov eax, dword [ebp - 0x418]
mov ecx, dword [ebp - 0x414]
mov edx, esi
call fcn.010255f0
mov ebx, eax
test ebx, ebx
jne 0x1025d53
push dword [ebp - 0x41c]
mov eax, dword [ebp - 0x418]
mov ecx, dword [ebp - 0x414]
lea edx, [ebp - 0x15c]
call fcn.010255f0
mov ebx, eax
test ebx, ebx
jne 0x1025d53
cmp word [ebp - 0x208], ax
je 0x102583a
push dword [ebp - 0x41c]
mov eax, dword [ebp - 0x418]
mov ecx, dword [ebp - 0x414]
mov edx, edi
call fcn.010255f0
mov ebx, eax
test ebx, ebx
jne 0x1025d53
mov eax, 0xc04
cmp word [ebp - 0x420], ax
jne 0x1025a06
mov dword [ebp - 0x420], 0x404
jmp 0x1025791
movzx eax, word [ebp - 0x420]
push eax
push 0x1002f64
lea eax, [ebp - 0xb0]
push 0x55
push eax
call fcn.0101ff8b
mov eax, dword [ebp - 0x418]
mov ecx, dword [ebp - 0x414]
add esp, 0x10
push dword [ebp - 0x41c]
lea edx, [ebp - 0xb0]
call fcn.010255f0
mov ebx, eax
test ebx, ebx
jne 0x1025d53
lea eax, [ebp - 0x15c]
push eax
push dword [ebp - 0x420]
xor edi, edi
lea esi, [ebp - 0xb0]
call fcn.010254b4
test eax, eax
je 0x102590d
push 2
lea eax, [ebp - 0x15c]
push eax
call fcn.01025e5d
movzx eax, ax
test ax, ax
je 0x102590d
movzx eax, ax
push eax
push 0x1002f64
mov eax, esi
push 0x55
push eax
call fcn.0101ff8b
mov eax, dword [ebp - 0x418]
mov ecx, dword [ebp - 0x414]
add esp, 0x10
push dword [ebp - 0x41c]
mov edx, esi
call fcn.010255f0
mov ebx, eax
test ebx, ebx
jne 0x1025d53
mov eax, 0xc04
cmp word [ebp - 0x420], ax
je 0x102584c
call dword [sym.imp.KERNEL32.dll_GetSystemDefaultUILanguage]
movzx esi, ax
mov dword [ebp - 0x424], esi
cmp si, word [ebp - 0x420]
je 0x10259ea
movzx eax, si
push eax
push 0x1002f64
lea eax, [ebp - 0xb0]
push 0x55
push eax
call fcn.0101ff8b
mov eax, dword [ebp - 0x418]
mov ecx, dword [ebp - 0x414]
add esp, 0x10
push dword [ebp - 0x41c]
lea edx, [ebp - 0xb0]
call fcn.010255f0
mov ebx, eax
test ebx, ebx
jne 0x1025d53
lea eax, [ebp - 0x15c]
push eax
push esi
xor edi, edi
lea esi, [ebp - 0xb0]
call fcn.010254b4
test eax, eax
je 0x10259e4
push 2
lea eax, [ebp - 0x15c]
push eax
call fcn.01025e5d
movzx eax, ax
test ax, ax
je 0x10259e4
movzx eax, ax
push eax
push 0x1002f64
mov eax, esi
push 0x55
push eax
call fcn.0101ff8b
mov eax, dword [ebp - 0x418]
mov ecx, dword [ebp - 0x414]
add esp, 0x10
push dword [ebp - 0x41c]
mov edx, esi
call fcn.010255f0
mov ebx, eax
test ebx, ebx
jne 0x1025d53
mov esi, dword [ebp - 0x424]
mov eax, 0x409
mov ecx, eax
cmp cx, word [ebp - 0x420]
je 0x1025c9b
cmp ax, si
jmp 0x1025c73
call dword [sym.imp.KERNEL32.dll_GetSystemDefaultUILanguage]
movzx eax, ax
mov dword [ebp - 0x424], eax
cmp ax, word [ebp - 0x420]
je 0x1025ab9
lea ecx, [ebp - 0x15c]
push ecx
push eax
lea edi, [ebp - 0x208]
lea esi, [ebp - 0xb0]
call fcn.010254b4
test eax, eax
je 0x1025ceb
push dword [ebp - 0x41c]
mov eax, dword [ebp - 0x418]
mov ecx, dword [ebp - 0x414]
mov edx, esi
call fcn.010255f0
mov ebx, eax
test ebx, ebx
jne 0x1025d53
push dword [ebp - 0x41c]
mov eax, dword [ebp - 0x418]
mov ecx, dword [ebp - 0x414]
lea edx, [ebp - 0x15c]
call fcn.010255f0
mov ebx, eax
test ebx, ebx
jne 0x1025d53
cmp word [ebp - 0x208], ax
je 0x1025ab9
push dword [ebp - 0x41c]
mov eax, dword [ebp - 0x418]
mov ecx, dword [ebp - 0x414]
mov edx, edi
call fcn.010255f0
mov ebx, eax
test ebx, ebx
jne 0x1025d53
mov eax, 0x409
mov ecx, eax
cmp cx, word [ebp - 0x420]
je 0x1025c9b
jmp 0x1025b90
test al, 3
je 0x1025ceb
call fcn.01025339
test byte [ebp + 0xc], 8
movzx eax, ax
mov dword [ebp - 0x424], eax
je 0x1025bb9
lea ecx, [ebp - 0x15c]
push ecx
push eax
lea edi, [ebp - 0x208]
lea esi, [ebp - 0xb0]
call fcn.010254b4
test eax, eax
je 0x1025ceb
push dword [ebp - 0x41c]
mov eax, dword [ebp - 0x418]
mov ecx, dword [ebp - 0x414]
mov edx, esi
call fcn.010255f0
mov ebx, eax
test ebx, ebx
jne 0x1025d53
push dword [ebp - 0x41c]
mov eax, dword [ebp - 0x418]
mov ecx, dword [ebp - 0x414]
lea edx, [ebp - 0x15c]
call fcn.010255f0
mov ebx, eax
test ebx, ebx
jne 0x1025d53
cmp word [ebp - 0x208], ax
je 0x1025b89
push dword [ebp - 0x41c]
mov eax, dword [ebp - 0x418]
mov ecx, dword [ebp - 0x414]
mov edx, edi
call fcn.010255f0
mov ebx, eax
test ebx, ebx
jne 0x1025d53
mov eax, 0x409
mov ecx, eax
cmp cx, word [ebp - 0x424]
je 0x1025c9b
lea ecx, [ebp - 0x15c]
push ecx
push eax
xor edi, edi
lea esi, [ebp - 0xb0]
call fcn.010254b4
mov edx, esi
jmp 0x1025c7a
movzx eax, ax
push eax
push 0x1002f64
lea eax, [ebp - 0xb0]
push 0x55
push eax
call fcn.0101ff8b
mov eax, dword [ebp - 0x418]
mov ecx, dword [ebp - 0x414]
add esp, 0x10
push dword [ebp - 0x41c]
lea edx, [ebp - 0xb0]
call fcn.010255f0
mov ebx, eax
test ebx, ebx
jne 0x1025d53
lea eax, [ebp - 0x15c]
push eax
push dword [ebp - 0x424]
xor edi, edi
lea esi, [ebp - 0xb0]
call fcn.010254b4
test eax, eax
je 0x1025c67
push 2
lea eax, [ebp - 0x15c]
push eax
call fcn.01025e5d
movzx eax, ax
test ax, ax
je 0x1025c67
movzx eax, ax
push eax
push 0x1002f64
mov eax, esi
push 0x55
push eax
call fcn.0101ff8b
mov eax, dword [ebp - 0x418]
mov ecx, dword [ebp - 0x414]
add esp, 0x10
push dword [ebp - 0x41c]
mov edx, esi
call fcn.010255f0
mov ebx, eax
test ebx, ebx
jne 0x1025d53
mov eax, 0x409
cmp ax, word [ebp - 0x424]
je 0x1025c9b
mov edx, 0x1002f50
push dword [ebp - 0x41c]
mov eax, dword [ebp - 0x418]
mov ecx, dword [ebp - 0x414]
call fcn.010255f0
mov ebx, eax
test ebx, ebx
jne 0x1025d53
push dword [ebp - 0x41c]
mov eax, dword [ebp - 0x418]
mov ecx, dword [ebp - 0x414]
xor edx, edx
call fcn.010255f0
mov ebx, eax
test ebx, ebx
jne 0x1025d53
jmp 0x1025d4f
test byte [0x10286f0], 7
je 0x1025ceb
test byte [ebp + 0xc], 8
je 0x1025d16
lea eax, [ebp - 0x15c]
push eax
push edi
xor edi, edi
lea esi, [ebp - 0xb0]
call fcn.010254b4
test eax, eax
jne 0x1025d30
test byte [ebp + 0xc], 0x10
je 0x1025d63
push dword [ebp + 0x10]
push dword [ebp - 0x414]
call fcn.0102505c
test eax, eax
jne 0x1025d63
push dword [ebp - 0x414]
call dword [sym.imp.KERNEL32.dll_FreeLibrary]
xor eax, eax
jmp 0x1025de1
movzx eax, di
push eax
push 0x1002f64
lea eax, [ebp - 0xb0]
push 0x55
push eax
call fcn.0101ff8b
add esp, 0x10
push dword [ebp - 0x41c]
mov eax, dword [ebp - 0x418]
mov ecx, dword [ebp - 0x414]
lea edx, [ebp - 0xb0]
call fcn.010255f0
mov ebx, eax
test ebx, ebx
je 0x1025ceb
push dword [ebp - 0x414]
call dword [sym.imp.KERNEL32.dll_FreeLibrary]
mov eax, ebx
jmp 0x1025de1
test byte [ebp - 0x414], 1
je 0x1025ddb
push dword [ebp - 0x414]
call dword [sym.imp.KERNEL32.dll_FreeLibrary]
call fcn.01025191
test al, 0x38
je 0x1025db8
push dword [ebp - 0x418]
lea eax, [ebp - 0x410]
push dword [ebp - 0x41c]
push 0x1002f44
push 0x104
push eax
call fcn.0101ff8b
add esp, 0x14
push 0
push 1
lea eax, [ebp - 0x410]
push eax
call fcn.01025104
jmp 0x1025dd5
call fcn.01025191
push 0
and eax, 0x26
pop eax
setne al
push eax
push 0
push dword [ebp - 0x428]
call dword [sym.imp.KERNEL32.dll_LoadLibraryExW]
mov dword [ebp - 0x414], eax
mov eax, dword [ebp - 0x414]
pop edi
mov ecx, dword [ebp - 4]
pop esi
xor ecx, ebp
pop ebx
call fcn.01023ead
leave
ret 0xc