Function at 0x10028199
Capabilities:
Query or enumerate registry key

Disassembly:
push ebp
mov ebp, esp
and esp, 0xfffffff8
push 0xffffffffffffffff
push 0x10060cea
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
sub esp, 0x108
mov dword [esp + 0xc], ecx
push ebx
push esi
push edi
test dl, dl
je 0x10028361
mov dword [esp + 0xc], 0x6b83
cmp dword [esp + 0xc], 0x6d8f
push 0
pop ebx
jle 0x1002825d
push ebx
push 0x12ef
push 0x501
push 0x1a5c
push 0x4e
call dword [sym.imp.USER32.dll_SetScrollRange]
mov esi, ebx
mov edi, ebx
mov ecx, ebx
mov dword [esp + 0x10], ebx
mov eax, edi
cdq
idiv ecx
mov eax, esi
mov ecx, edx
sar eax, cl
lea ecx, [esp + 0xb0]
cdq
push edx
push eax
call fcn.10001af4
pop ecx
pop ecx
cmp dword [eax + 0x14], 0x10
jb 0x10028224
mov eax, dword [eax]
push eax
call fcn.10048e5f
pop ecx
push ebx
push 1
lea ecx, [esp + 0xb8]
call fcn.1000330e
mov ecx, dword [esp + 0x10]
inc ecx
mov dword [esp + 0x10], ecx
cmp ecx, 0x4700
jl 0x10028200
inc edi
cmp edi, 0x7ef5
jl 0x100281fa
inc esi
cmp esi, 0x2b2d
jl 0x100281f8
cmp dword [esp + 0xc], 0x68e5
jge 0x10028272
push str.dspxp_nnelpyre_pzss_lxud_cyrdchuh_pfvf_fapp_vhea_rrnyc_euysg_nsalgxuxb_rihqf_iwk_wchfi
call fcn.10048e5f
pop ecx
or dword [esp + 0x11c], 0xffffffff
cmp byte [ebp + 0x10], 0
je 0x1002828b
call dword [sym.imp.USER32.dll_CreateMenu]
jmp 0x1002897f
mov dword [esp + 0x1c], 0x49f7
cmp dword [esp + 0x1c], 0x4bc7
jle 0x10028329
push 0x1d37
push 0xe04
call dword [sym.imp.USER32.dll_SetParent]
mov esi, ebx
mov edi, ebx
mov eax, ebx
mov dword [esp + 0x10], ebx
mov ecx, ebx
mov dword [esp + 0xc], ebx
add eax, ecx
lea ecx, [esp + 0x80]
add eax, edi
xor eax, esi
cdq
push edx
push eax
call fcn.10001af4
pop ecx
pop ecx
cmp dword [eax + 0x14], 0x10
jb 0x100282e0
mov eax, dword [eax]
push eax
call fcn.10048e5f
pop ecx
push ebx
push 1
lea ecx, [esp + 0x88]
call fcn.1000330e
mov ecx, dword [esp + 0xc]
mov eax, dword [esp + 0x10]
inc ecx
mov dword [esp + 0xc], ecx
cmp ecx, 0x2fb1
jl 0x100282c1
inc eax
mov dword [esp + 0x10], eax
cmp eax, 0x346
jl 0x100282bb
inc edi
cmp edi, 0x3f64
jl 0x100282b5
inc esi
cmp esi, 0x769e
jl 0x100282b3
mov edx, dword [ebp + 0x14]
mov dword [edx], ebx
cmp dword [edx], 4
jge 0x10028349
mov esi, dword [esp + 0x18]
mov ecx, dword [edx]
mov eax, dword [esi]
mov dword [eax + ecx*4], 0xc34309e9
inc dword [edx]
cmp dword [edx], 4
jl 0x10028337
cmp dword [esp + 0x1c], 0x467d
jge 0x1002897f
push str.aixcyfdw_shn_ftiwjufwe_rgmgd
jmp 0x10028979
cmp byte [ebp + 0x18], 0
je 0x100288fb
xor ebx, ebx
mov dword [esp + 0x74], 7
xor eax, eax
mov dword [esp + 0x70], ebx
mov word [esp + 0x60], ax
push 0x1d3c
push 0x3875
push 0x6a11
mov dword [esp + 0x128], 4
lea edx, [esp + 0x37]
push 0x72bf
push ecx
mov dword [esp + 0x60], ebx
mov dword [esp + 0x58], 0xa754320e
push 0x28a4
mov dword [esp + 0x54], ebx
push ecx
mov dword [esp + 0x54], 0xffffffff
mov cl, 1
mov byte [esp + 0x47], bl
call fcn.1002a34c
add esp, 0x14
lea eax, [esp + 0x4c]
lea edx, [esp + 0x44]
push eax
lea eax, [esp + 0x58]
push eax
lea eax, [esp + 0x48]
push eax
call fcn.10029eba
add esp, 0x10
lea edx, [esp + 0x64]
lea ecx, [ebp + 0xc]
call fcn.10028ab7
push 0x1211
push ecx
push ecx
mov edx, 0x491e
mov dword [esp + 0x28], 0xffffffff
mov cl, 1
call fcn.10027dfd
push ebx
push 0x221f
push 1
push 0x1171
push 0x2b55
xor dl, dl
mov ecx, 0x90a
call fcn.10028199
mov eax, dword [0x10080928]
add esp, 0x24
test al, 1
jne 0x10028465
or eax, 1
mov dword [0x10080928], eax
push 0x3777
mov byte [esp + 0x120], 5
call fcn.10039739
pop ecx
mov word [0x10080914], ax
mov byte [esp + 0x11c], 4
mov dword [esp + 0x14], 0x4128
cmp dword [esp + 0x14], 0x41d9
jle 0x10028529
push ebx
call dword [sym.imp.KERNEL32.dll_ClearCommBreak]
mov esi, ebx
mov dword [esp + 0x20], ebx
mov eax, esi
mov dword [esp + 0xc], 0x62b5
mov dword [esp + 0x10], eax
mov edi, ebx
mov dword [esp + 0x1c], ebx
and eax, edi
mov esi, ebx
mov dword [esp + 0x18], eax
mov edi, eax
mov eax, edi
lea ecx, [esp + 0xe0]
xor eax, esi
cdq
push edx
push eax
call fcn.10001af4
pop ecx
pop ecx
cmp dword [eax + 0x14], 0x10
jb 0x100284c3
mov eax, dword [eax]
push eax
call fcn.10048e5f
pop ecx
push ebx
push 1
lea ecx, [esp + 0xe8]
call fcn.1000330e
inc esi
cmp esi, 0xfd6
jl 0x100284a6
mov edi, dword [esp + 0x1c]
mov eax, dword [esp + 0x10]
inc edi
mov dword [esp + 0x1c], edi
cmp edi, 0x6921
jl 0x1002849c
dec eax
dec dword [esp + 0xc]
mov dword [esp + 0x10], eax
jne 0x10028496
mov esi, dword [esp + 0x20]
inc esi
mov dword [esp + 0x20], esi
cmp esi, 0x53b6
jl 0x10028488
push ebx
push ebx
push ebx
push ebx
push ebx
push ebx
push 0xdd5
push ebx
call dword [sym.imp.ADVAPI32.dll_RegEnumKeyExW]
cmp dword [esp + 0x14], 0x4111
jge 0x1002853e
push str.bqzrrmb_ekrckyev_yabpi_hqnj_gggjkegx_tlhcq_iid_dui_obfy_nwl_nupvsyi
call fcn.10048e5f
pop ecx
mov dword [esp + 0x11c], 4
mov dword [esp + 0xc], 1
mov dword [esp + 0x18], 0x9b546158
mov dword [esp + 0x14], 0xb8c3ad3b
mov dword [esp + 0x14], 0x8748afa2
mov dword [esp + 0x14], 7
mov dword [esp + 0x14], 0x23e86f8c
mov dword [esp + 0x40], 0x97e780ca
mov dword [esp + 0xc], 0xffffffee
jmp 0x100285ae
mov dword [esp + 0x14], 0xffffffff
lea edx, [esp + 0x40]
mov dword [esp + 0x14], ebx
xor cl, cl
mov dword [esp + 0x14], ebx
call fcn.10027a69
mov eax, dword [esp + 0x18]
inc dword [esp + 0xc]
cmp dword [esp + 0xc], 6
jle 0x1002858b
mov eax, dword [0x10080928]
test al, 2
jne 0x100285e7
or eax, 2
mov dword [0x10080928], eax
push 0x516c
mov byte [esp + 0x120], 8
call fcn.10039739
pop ecx
mov word [0x10081cc0], ax
mov byte [esp + 0x11c], 4
mov dword [esp + 0x18], 0x1030
cmp dword [esp + 0x18], 0x11f4
jle 0x10028694
mov esi, ebx
mov dword [esp + 0x1c], ebx
mov eax, esi
mov dword [esp + 0x20], 0x13e0
mov dword [esp + 0x10], eax
mov edi, ebx
mov dword [esp + 0x14], ebx
mov ecx, edi
mov dword [esp + 0xc], eax
mov edi, eax
mov esi, ebx
sar edi, cl
mov eax, edi
lea ecx, [esp + 0x98]
or eax, esi
cdq
push edx
push eax
call fcn.10001af4
pop ecx
pop ecx
cmp dword [eax + 0x14], 0x10
jb 0x10028640
mov eax, dword [eax]
push eax
call fcn.10048e5f
pop ecx
push ebx
push 1
lea ecx, [esp + 0xa0]
call fcn.1000330e
inc esi
cmp esi, 0x6210
jl 0x10028623
mov edi, dword [esp + 0x14]
mov eax, dword [esp + 0x10]
inc edi
mov dword [esp + 0x14], edi
cmp edi, 0x5b10
jl 0x10028617
dec eax
dec dword [esp + 0x20]
mov dword [esp + 0x10], eax
jne 0x10028611
mov esi, dword [esp + 0x1c]
inc esi
mov dword [esp + 0x1c], esi
cmp esi, 0x1ab4
jl 0x10028603
mov esi, dword [ebp + 0xc]
test esi, esi
jmp 0x1002884f
mov dword [esp + 0xc], 0xccc90a35
mov dword [esp + 0xc], ebx
jmp 0x100286b8
mov eax, dword [esp + 0xc]
mov dword [esp + eax*4 + 0x78], ebx
inc dword [esp + 0xc]
cmp dword [esp + 0xc], 2
jl 0x100286ac
mov dword [esp + 0xc], 1
cmp dword [esp + 0xc], ebx
jl 0x100286f9
mov dword [esp + 0x10], 5
mov dword [esp + 0x10], 1
cmp dword [esp + 0x10], ebx
jl 0x100286f3
mov eax, dword [esp + 0xc]
cmp dword [esp + eax*4 + 0x78], ebx
jne 0x100286f3
dec dword [esp + 0x10]
jns 0x100286e3
dec dword [esp + 0xc]
jns 0x100286cd
call fcn.10027661
push 0x34
xor edx, edx
pop ecx
div ecx
mov dword [esp + 0x48], edx
mov dword [esp + 0x20], 0x6fce
cmp dword [esp + 0x20], 0x7203
jle 0x1002877e
mov edi, ebx
mov esi, ebx
mov eax, ebx
mov dword [esp + 0x14], ebx
add eax, esi
lea ecx, [esp + 0xc8]
add eax, edi
cdq
push edx
push eax
call fcn.10001af4
pop ecx
pop ecx
cmp dword [eax + 0x14], 0x10
jb 0x10028742
mov eax, dword [eax]
push eax
call fcn.10048e5f
pop ecx
push ebx
push 1
lea ecx, [esp + 0xd0]
call fcn.1000330e
mov eax, dword [esp + 0x14]
inc eax
mov dword [esp + 0x14], eax
cmp eax, 0x317a
jl 0x10028725
inc esi
cmp esi, 0x19b9
jl 0x1002871f
inc edi
cmp edi, 0x2afd
jl 0x1002871d
mov esi, dword [esp + 0x1c]
cmp dword [esp + 0x20], 0x6c35
jge 0x10028793
push str.yja_odirnt_danzt_dectawbsq_hvzu_oavsj_wvxptgay
call fcn.10048e5f
pop ecx
push 3
lea ecx, [esp + 0x58]
mov dword [esp + 0x120], 4
call fcn.10002fdf
lea eax, [esp + 0x54]
mov byte [esp + 0x11c], 0xb
mov dword [esp + 0x14], ebx
lea ecx, [esp + 0x34]
push eax
xor dl, dl
call fcn.10027d9d
pop ecx
mov dword [esp + 0x34], ebx
jmp 0x100287dc
mov eax, dword [esp + 0x34]
mov dword [esp + eax*4 + 0x24], 0x1cecb457
inc dword [esp + 0x34]
cmp dword [esp + 0x34], 1
jl 0x100287cc
mov dword [esp + 0x24], ebx
jmp 0x1002880c
mov ecx, dword [esp + 0x24]
mov eax, dword [esp + 0x54]
cmp dword [eax + ecx*4], ebx
jne 0x10028813
mov eax, dword [esp + 0x24]
mov edx, dword [esp + 0x24]
mov ecx, dword [esp + 0x54]
mov eax, dword [ecx + eax*4]
mov dword [ecx + edx*4], eax
inc dword [esp + 0x24]
cmp dword [esp + 0x24], 2
jle 0x100287e9
lea ecx, [esp + 0x54]
mov byte [esp + 0x11c], 4
call fcn.1000301b
push 0x10081cc0
lea eax, [esp + 0x64]
mov edx, 0x5544
push eax
push 0x10080914
lea eax, [esp + 0x54]
push eax
push ecx
push 0x3846
push ecx
xor cl, cl
call fcn.1002a34c
add esp, 0x1c
dec esi
mov dword [esp + 0x1c], esi
jne 0x1002869e
cmp dword [esp + 0x18], 0xc6b
jge 0x1002886e
push str.cdesdswdt_pkkx_rqvimazvu_ikpwmfa_yqx_xoueyu_vau_ggsxhg_asqxa_qiyjfautm_rhruabdq_ytnwavcc_srxoqzfc_dcnjtrlsu
call fcn.10048e5f
pop ecx
mov dword [esp + 0x11c], 4
mov dword [esp + 0x2c], 0xc03342eb
mov dword [esp + 0x50], 0xaed23b61
mov dword [esp + 0x2c], ebx
jmp 0x100288b6
call fcn.100289ce
lea eax, [esp + 0x2c]
xor dl, dl
push eax
lea eax, [esp + 0x54]
mov ecx, 0x2615
push eax
push 0x65ad
call fcn.10027817
add esp, 0xc
inc dword [esp + 0x2c]
cmp dword [esp + 0x2c], 0x12
jge 0x1002888f
push 1
lea eax, [esp + 0x30]
mov ecx, 0x6a3a
push eax
push 0x159a
call fcn.10027691
mov ecx, dword [ebp + 8]
lea eax, [esp + 0x6c]
add esp, 0xc
cmp ecx, eax
je 0x100288ea
push 0xffffffffffffffff
push ebx
push eax
call fcn.10003352
push ebx
push 1
lea ecx, [esp + 0x68]
call fcn.10003819
jmp 0x1002897f
mov dword [esp + 0x18], 0x2c7f
cmp dword [esp + 0x18], 0x2e85
push 0
pop ebx
jle 0x10028959
mov esi, ebx
mov edi, ebx
mov eax, edi
lea ecx, [esp + 0xf8]
and eax, esi
cdq
push edx
push eax
call fcn.10001af4
pop ecx
pop ecx
cmp dword [eax + 0x14], 0x10
jb 0x10028931
mov eax, dword [eax]
push eax
call fcn.10048e5f
pop ecx
push ebx
push 1
lea ecx, [esp + 0x100]
call fcn.1000330e
inc edi
cmp edi, 0x7893
jl 0x10028914
inc esi
cmp esi, 0x5b94
jl 0x10028912
push ecx
mov byte [esp + 0x37], bl
lea edx, [esp + 0x37]
push ecx
call fcn.10028bb4
cmp dword [esp + 0x20], 0x2b2a
pop ecx
pop ecx
jge 0x1002897f
push str.cdulaz_aaqlx_svmspihmz_pylenozy_rrtxszl
call fcn.10048e5f
pop ecx
mov ecx, dword [esp + 0x114]
pop edi
pop esi
mov dword fs:[0], ecx
pop ebx
mov esp, ebp
pop ebp
ret