Function at 0x1001ad38
Capabilities:
Query or enumerate registry value

Disassembly:
mov eax, 0x100811ad
call fcn.10080918
sub esp, 0x118
mov dword [ebp - 0x38], edx
xor eax, eax
inc eax
lea edx, [ebp - 0xa8]
mov dword [ebp - 0x14], eax
mov dword [ebp - 0x14], 0x4643
mov dword [ebp - 0x14], 0x59c17633
mov dword [ebp - 0x14], 9
mov dword [ebp - 0x14], 0x3fbb4ebb
mov dword [ebp - 0x14], 0x3e31551d
mov dword [ebp - 0x14], 0x49cec79e
push ebx
xor ebx, ebx
mov dword [ebp - 0x14], ebx
mov dword [ebp - 0x14], 0x71247adf
mov dword [ebp - 0x14], 0xc40ed3c1
mov dword [ebp - 0x14], 0xffffffff
mov dword [ebp - 0x14], 0xc87a7525
mov dword [ebp - 0x14], 0x9cf13e1
mov dword [ebp - 0x14], 0xd49fcfbc
push edi
mov edi, ecx
mov dword [ebp - 0x14], 0x44cf5927
mov dword [ebp - 0x14], 0xfffffffe
mov cl, al
push 0x4de7
mov dword [ebp - 0xa8], eax
call fcn.1001aa6b
pop ecx
cmp dword [edi + 0x10], ebx
jne 0x1001ade1
xor al, al
jmp 0x1001b4b2
mov dword [ebp - 0x10], 0x152c58fb
lea ecx, [ebp - 0xe4]
push 3
call fcn.100173c8
mov dword [ebp - 0x14], 5
mov dword [ebp - 0x20], ebx
mov dword [ebp - 0x18], 0xfffffffa
mov dword [ebp - 0x10], ebx
jmp 0x1001ae19
mov eax, dword [ebp - 0x10]
mov dword [ebp + eax*4 - 0x48], 0x58d32ffa
inc dword [ebp - 0x10]
cmp dword [ebp - 0x10], 1
jl 0x1001ae0b
mov dword [ebp - 0x10], ebx
jmp 0x1001ae37
mov ecx, dword [ebp - 0x10]
mov eax, dword [ebp - 0xe4]
mov dword [eax + ecx*4], 0x7c8748af
inc dword [ebp - 0x10]
cmp dword [ebp - 0x10], 3
jl 0x1001ae24
mov dword [ebp - 0x10], ebx
jmp 0x1001ae50
mov eax, dword [ebp - 0x10]
mov dword [ebp + eax*4 - 0x40], 0x364d
inc dword [ebp - 0x10]
cmp dword [ebp - 0x10], 1
jl 0x1001ae42
mov dword [ebp - 0x10], ebx
jmp 0x1001ae6c
mov eax, dword [ebp - 0x10]
mov dword [ebp + eax*4 - 0xc4], 0x2da3c3d
inc dword [ebp - 0x10]
cmp dword [ebp - 0x10], 2
jl 0x1001ae5b
mov eax, dword [ebp - 0x48]
mov edx, dword [ebp - 0xe4]
mov dword [ebp - 0x10], eax
mov eax, dword [ebp - 0x10]
mov dword [edx + 8], eax
mov eax, dword [ebp - 0x18]
mov dword [ebp - 0xc4], eax
inc dword [ebp - 0x18]
cmp dword [ebp - 0x40], 0xc7e7
je 0x1001aeb6
mov eax, dword [ebp - 0x40]
mov eax, dword [ebp - 0x20]
mov eax, dword [ebp - 0x48]
mov dword [ebp - 0xc4], eax
test eax, eax
je 0x1001aeb6
cmp dword [ebp - 0x10], ebx
je 0x1001aeb6
xor ecx, ecx
inc ecx
jmp 0x1001aeb8
mov ecx, ebx
xor eax, eax
mov dword [edx + 8], ecx
cmp ecx, 0xffffffff
push esi
sete al
xor ecx, ecx
cmp eax, 0x6c49a7e
setne cl
imul ecx, dword [ebp - 0x18]
mov dword [ebp - 0x10], ecx
lea ecx, [ebp - 0xe4]
call fcn.10017c88
mov eax, dword [ebp - 0x38]
mov dword [eax], ebx
cmp dword [edi + 0x14], 0x10
jb 0x1001aeef
mov esi, dword [edi]
jmp 0x1001aef1
mov esi, edi
cmp dword [edi + 0x14], 0x10
jb 0x1001aefb
mov ecx, dword [edi]
jmp 0x1001aefd
mov ecx, edi
mov eax, dword [edi + 0x10]
add eax, ecx
cmp esi, eax
je 0x1001b382
mov al, byte [esi]
cmp al, 0x30
jl 0x1001b0d1
cmp al, 0x39
jg 0x1001b0d1
mov dword [ebp - 0x30], 0x7f6af112
lea ecx, [ebp - 0xbc]
push 1
call fcn.100173c8
mov dword [ebp - 4], ebx
lea eax, [ebp - 0xbc]
mov dword [ebp - 0x44], 0x279e56
mov dword [ebp - 0xa4], 0x101aedf4
mov dword [ebp - 0x84], ebx
mov dword [ebp - 0xac], 0xfffffff9
push eax
mov dword [ebp - 0x88], 0xffffffff
lea eax, [ebp - 0x68]
mov dword [ebp - 0x74], 0xffffffff
mov dword [ebp - 0x8c], ebx
push 0x1a42
mov dword [ebp - 0x78], 1
push ebx
mov dword [ebp - 0x80], 7
mov dword [ebp - 0x64], 0xfffffffd
push eax
call fcn.1001d97b
add esp, 0x10
mov dword [ebp - 0x30], 0x1d
jmp 0x1001b057
push 2
lea ecx, [ebp - 0x54]
call fcn.100173c8
mov byte [ebp - 4], 1
mov dword [ebp - 0x90], 0xfffffffe
mov dword [ebp - 0x10], ebx
jmp 0x1001afcf
mov ecx, dword [ebp - 0x10]
mov eax, dword [ebp - 0x54]
or dword [eax + ecx*4], 0xffffffff
inc dword [ebp - 0x10]
cmp dword [ebp - 0x10], 2
jl 0x1001afc2
mov byte [ebp - 0x19], bl
cmp byte [ebp - 0x19], 0
je 0x1001afea
push ebx
push ebx
push ebx
push ebx
push ebx
push ebx
call dword [sym.imp.ADVAPI32.dll_RegQueryValueExW]
mov eax, dword [ebp - 0x54]
mov dword [eax + 4], ebx
jmp 0x1001b041
lea eax, [ebp - 0x54]
mov dword [ebp - 0xb0], 0xc93cc254
push eax
push 0x6f83
push 0xfde
lea eax, [ebp - 0x90]
mov dword [ebp - 0x70], 0x7d19fa5
push eax
lea eax, [ebp - 0x70]
push eax
lea eax, [ebp - 0x30]
push eax
lea eax, [ebp - 0xb0]
push eax
lea eax, [ebp - 0x44]
push eax
lea eax, [ebp - 0xbc]
push ebx
push eax
call fcn.1001e1f8
mov eax, dword [ebp - 0x54]
add esp, 0x28
inc dword [eax + 4]
mov eax, dword [ebp - 0x54]
cmp dword [eax + 4], ebx
jle 0x1001aff2
lea ecx, [ebp - 0x54]
mov byte [ebp - 4], bl
call fcn.10017c88
dec dword [ebp - 0x30]
cmp dword [ebp - 0x30], 0xffffffee
jne 0x1001afa5
lea eax, [ebp - 0x44]
push eax
lea eax, [ebp - 0xac]
push eax
lea eax, [ebp - 0x84]
push eax
lea eax, [ebp - 0x8c]
push eax
lea eax, [ebp - 0x74]
push eax
lea eax, [ebp - 0x78]
push eax
lea eax, [ebp - 0x64]
push eax
push ebx
lea eax, [ebp - 0x80]
push eax
lea eax, [ebp - 0xbc]
push eax
lea eax, [ebp - 0xa4]
push eax
lea eax, [ebp - 0x30]
push eax
lea eax, [ebp - 0x88]
push eax
call fcn.1001b500
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0xbc]
add esp, 0x34
call fcn.10017c88
mov edx, dword [ebp - 0x38]
movsx eax, byte [esi]
imul ecx, dword [edx], 0xa
add ecx, 0xffffffd0
add eax, ecx
inc esi
mov dword [edx], eax
jmp 0x1001aef1
push 2
pop esi
push esi
lea ecx, [ebp - 0x108]
call fcn.100173c8
mov dword [ebp - 4], esi
lea ecx, [ebp - 0xd8]
mov dword [ebp - 0x18], 0xfffffffe
push esi
call fcn.100173c8
mov byte [ebp - 4], 3
lea ecx, [ebp - 0xa0]
mov dword [ebp - 0x24], 0xa733e34b
mov dword [ebp - 0x34], 0xfffb
mov dword [ebp - 0x14], 0x1a6e483b
push 1
call fcn.100173c8
mov dword [ebp - 0x20], 0xffffffff
mov dword [ebp - 0x10], ebx
jmp 0x1001b13b
mov ecx, dword [ebp - 0x10]
mov eax, dword [ebp - 0x108]
mov dword [eax + ecx*4], 0xffff
inc dword [ebp - 0x10]
cmp dword [ebp - 0x10], esi
jl 0x1001b128
xor edx, edx
mov dword [ebp - 0x10], ebx
inc edx
cmp dword [ebp - 0x10], esi
jge 0x1001b15c
mov ecx, dword [ebp - 0x10]
mov eax, dword [ebp - 0xd8]
mov dword [eax + ecx*4], edx
inc dword [ebp - 0x10]
jmp 0x1001b146
mov dword [ebp - 0x10], ebx
jmp 0x1001b174
mov ecx, dword [ebp - 0x10]
mov eax, dword [ebp - 0xa0]
mov dword [eax + ecx*4], 0x904e20ee
inc dword [ebp - 0x10]
cmp dword [ebp - 0x10], edx
jl 0x1001b161
mov dword [ebp - 0x18], edx
cmp dword [ebp - 0x18], ebx
jl 0x1001b21c
mov dword [ebp - 0x3c], ebx
mov dword [ebp - 0x10], ebx
jmp 0x1001b19e
mov eax, dword [ebp - 0x10]
mov dword [ebp + eax*4 - 0xfc], 0xfffffff8
inc dword [ebp - 0x10]
cmp dword [ebp - 0x10], esi
jl 0x1001b18d
mov dword [ebp - 0x10], ebx
jmp 0x1001b1b9
mov eax, dword [ebp - 0x10]
mov dword [ebp + eax*4 - 0x124], 0xffffffff
inc dword [ebp - 0x10]
cmp dword [ebp - 0x10], 3
jl 0x1001b1a8
mov dword [ebp - 0x10], ebx
jmp 0x1001b1d1
mov eax, dword [ebp - 0x10]
mov dword [ebp + eax*4 - 0x94], ebx
inc dword [ebp - 0x10]
cmp dword [ebp - 0x10], edx
jl 0x1001b1c4
inc dword [ebp - 0x34]
xor ecx, ecx
mov eax, dword [ebp - 0x24]
mov eax, dword [ebp - 0x94]
mov eax, dword [ebp - 0x3c]
mov eax, dword [ebp - 0x124]
mov eax, dword [ebp - 0x24]
mov eax, dword [ebp - 0xf8]
test eax, eax
setg cl
xor eax, eax
cmp ecx, 0x77771fda
mov ecx, dword [ebp - 0x14]
setne al
add ecx, eax
mov eax, dword [ebp - 0xa0]
mov dword [eax], ecx
dec dword [ebp - 0x18]
jns 0x1001b185
cmp dword [ebp - 0x20], ebx
je 0x1001b235
cmp dword [ebp - 0x24], 0x799d45eb
jg 0x1001b22d
mov eax, dword [ebp - 0x34]
mov eax, dword [ebp - 0x20]
cmp dword [ebp - 0x18], eax
jne 0x1001b23c
mov eax, ebx
cmp dword [ebp - 0x34], ebx
je 0x1001b23e
mov eax, edx
push 0xfffffffffffffffd
pop esi
cmp esi, eax
mov eax, dword [ebp - 0xd8]
sbb ecx, ecx
neg ecx
add ecx, dword [eax]
mov eax, dword [ebp - 0xa0]
neg ecx
sbb ecx, ecx
neg ecx
mov edx, dword [eax]
mov eax, dword [ebp - 0x24]
imul edx, ecx
xor ecx, ecx
cmp edx, eax
mov eax, dword [ebp - 0xa0]
setl cl
mov dword [eax], ecx
lea ecx, [ebp - 0xa0]
call fcn.10017c88
lea ecx, [ebp - 0xd8]
call fcn.10017c88
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x108]
call fcn.10017c88
push 0x13ce
lea eax, [ebp - 0x38]
push ebx
push eax
call fcn.1001d30f
movdqa xmm0, xmmword [0x10008310]
lea eax, [ebp - 0x108]
add esp, 0xc
mov dword [ebp - 0x60], ebx
lea ecx, [ebp - 0x60]
mov dword [ebp - 0x5c], ebx
movdqu xmmword [ebp - 0x118], xmm0
mov dword [ebp - 0x58], ebx
push dword [ebp - 0x68]
push eax
lea eax, [ebp - 0x118]
push eax
push ebx
call fcn.10018a3b
mov dword [ebp - 0x24], 0x8b8ae505
xor ecx, ecx
inc ecx
mov dword [ebp - 0x20], ecx
mov dword [ebp - 0x20], 0xba75a592
mov dword [ebp - 0x20], 0xd3ecf04
mov dword [ebp - 0x14], esi
mov dword [ebp - 0x18], ebx
jmp 0x1001b30d
mov eax, dword [ebp - 0x18]
mov dword [ebp + eax*4 - 0x6c], 0x5ab0
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], ecx
jl 0x1001b2ff
mov esi, dword [ebp - 0x60]
cmp dword [esi + 0xc], ebx
je 0x1001b320
mov edi, ecx
cmp dword [esi], ebx
jne 0x1001b322
mov edi, ebx
cmp dword [ebp - 0x24], ebx
jne 0x1001b32c
cmp dword [esi + 0xc], ebx
je 0x1001b32e
mov ebx, ecx
xor edx, edx
mov dword [ebp - 0x20], ebx
mov ecx, dword [ebp - 0x20]
mov eax, dword [ebp - 0x24]
cmp ecx, eax
setg dl
xor ecx, ecx
mov dword [ebp - 0x20], edx
mov eax, dword [ebp - 0x20]
imul eax, dword [esi + 0xc]
cmp edi, eax
setl cl
xor edx, edx
mov dword [ebp - 0x20], ecx
mov eax, dword [ebp - 0x6c]
mov ecx, dword [ebp - 0x20]
sub ecx, eax
mov eax, dword [ebp - 0x60]
cmp ecx, dword [eax + 4]
lea ecx, [ebp - 0x60]
setne dl
sub edx, 0x4adc
neg edx
sbb edx, edx
inc edx
mov dword [ebp - 0x14], edx
call fcn.10017c88
xor al, al
jmp 0x1001b4b1
mov dword [ebp - 0x28], 0xc7894801
lea ecx, [ebp - 0xf4]
mov dword [ebp - 0x2c], 0x2aa53f0d
mov dword [ebp - 0x14], 0xe26
push 1
call fcn.100173c8
lea eax, [ebp - 0xe8]
mov dword [ebp - 4], 4
push eax
push 0xc5a
lea eax, [ebp - 0xf4]
push ebx
push eax
call fcn.1001bbd2
add esp, 0x10
cmp dword [ebp - 0x28], ebx
je 0x1001b3e3
push ebx
lea eax, [ebp - 0x28]
mov dword [ebp - 0x7c], 0x2fd4
push eax
lea eax, [ebp - 0x7c]
push eax
call fcn.1001e111
jmp 0x1001b45d
mov dword [ebp - 0x24], 0xbf38c088
mov dword [ebp - 0x18], ebx
jmp 0x1001b400
mov eax, dword [ebp - 0x18]
mov dword [ebp + eax*4 - 0xcc], 0xfffffffa
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], 2
jl 0x1001b3ef
cmp dword [ebp - 0x28], ebx
jne 0x1001b412
mov eax, dword [ebp - 0x24]
mov esi, ebx
jmp 0x1001b415
xor esi, esi
inc esi
cmp dword [ebp - 0x24], 7
mov eax, dword [ebp - 0x24]
sbb ecx, ecx
xor edx, edx
inc ecx
cmp eax, ecx
setg dl
mov dword [ebp - 0xc8], edx
mov dword [ebp - 0x28], esi
mov eax, dword [ebp - 0x2c]
sub eax, dword [ebp - 0x28]
lea eax, [edx + eax*8]
test eax, eax
je 0x1001b449
cmp dword [ebp - 0xc8], ebx
je 0x1001b449
xor eax, eax
inc eax
jmp 0x1001b44b
mov eax, ebx
push ebx
mov dword [ebp - 0x14], eax
lea eax, [ebp - 0x2c]
push 0x24b2
push eax
call fcn.1001e73e
add esp, 0xc
mov dword [ebp - 0x2c], ebx
jmp 0x1001b49e
mov dword [ebp - 0x14], 0xffffffff
mov dword [ebp - 0x28], ebx
cmp dword [ebp - 0x28], ebx
jl 0x1001b495
mov byte [ebp - 0x19], bl
cmp byte [ebp - 0x19], 0
je 0x1001b490
push 0x456a
push ebx
push 0x38c6
call fcn.1001b9a4
add esp, 0xc
dec dword [ebp - 0x28]
jns 0x1001b474
mov ecx, dword [ebp - 0x14]
mov dword [ebp - 0x28], ecx
inc dword [ebp - 0x2c]
cmp dword [ebp - 0x2c], 6
jl 0x1001b465
lea ecx, [ebp - 0xf4]
call fcn.10017c88
mov al, 1
pop esi
mov ecx, dword [ebp - 0xc]
pop edi
pop ebx
mov dword fs:[0], ecx
mov esp, ebp
pop ebp
ret