Function at 0x1022e840
Capabilities:
Query or enumerate registry value

Disassembly:
push ebp
mov ebp, esp
and esp, 0xfffffff8
sub esp, 0x2c
push ebx
push esi
push edi
push 0x105
mov edi, ecx
mov dword [esp + 0x38], 0
mov dword [esp + 0x2c], 0
mov dword [esp + 0x30], 0
call fcn.10450898
add esp, 4
mov dword [esp + 0x30], eax
test eax, eax
je 0x1022e87e
mov byte [eax], 0
inc dword [0x11d0d904]
lea ecx, [esp + 0x28]
and byte [edi + 0xad], 0xbf
push 0
push 0x1046e160
call fcn.101ffd90
test al, al
je 0x1022eb9e
mov eax, dword [esp + 0x2c]
mov esi, dword [sym.imp.ADVAPI32.dll_RegQueryValueExA]
mov dword [esp + 0x10], 0
mov dword [esp + 0x14], 4
test eax, eax
jne 0x1022e8f0
cmp dword [esp + 0x28], 0
jne 0x1022e8f0
mov ecx, dword [esp + 0x34]
test ecx, ecx
je 0x1022eb95
lea eax, [esp + 0x10]
push eax
push 0x1046f6a0
call fcn.10200690
test al, al
je 0x1022eb95
jmp 0x1022e994
lea ecx, [esp + 0x14]
push ecx
lea ecx, [esp + 0x24]
push ecx
lea ecx, [esp + 0x2c]
push ecx
push 0
push 0x1046f6a0
push eax
call esi
sub eax, 0
je 0x1022e98c
mov ecx, dword [esp + 0x28]
test ecx, ecx
je 0x1022e8c8
cmp byte [0x11d213c0], 0
je 0x1022e95e
lea eax, [esp + 0x18]
push eax
lea eax, [esp + 0x20]
push eax
push 0x1046f6a0
call fcn.100f6950
test al, al
je 0x1022eb95
cmp dword [esp + 0x18], 0
jne 0x1022eb95
lea eax, [esp + 0x10]
push eax
push dword [esp + 0x20]
call fcn.100f76e0
test al, al
je 0x1022eb95
jmp 0x1022e994
mov edx, 0x1046f6a0
call fcn.101ff260
test eax, eax
je 0x1022eb95
xor cl, cl
cmp word [eax + 2], 4
jne 0x1022e982
mov eax, dword [eax + 6]
mov cl, 1
mov dword [esp + 0x10], eax
test cl, cl
je 0x1022eb95
jmp 0x1022e994
mov eax, dword [esp + 0x20]
mov dword [esp + 0x10], eax
cmp dword [esp + 0x10], 0
jne 0x1022eb95
mov eax, dword [esp + 0x2c]
mov dword [esp + 0x20], 4
test eax, eax
jne 0x1022e9dd
cmp dword [esp + 0x28], eax
jne 0x1022e9dd
mov ecx, dword [esp + 0x34]
test ecx, ecx
je 0x1022eb95
lea eax, [esp + 0x10]
push eax
push 0x1046f6b0
call fcn.10200690
test al, al
je 0x1022eb95
jmp 0x1022ea81
lea ecx, [esp + 0x20]
push ecx
lea ecx, [esp + 0x18]
push ecx
lea ecx, [esp + 0x2c]
push ecx
push 0
push 0x1046f6b0
push eax
call esi
sub eax, 0
je 0x1022ea79
mov ecx, dword [esp + 0x28]
test ecx, ecx
je 0x1022e9b5
cmp byte [0x11d213c0], 0
je 0x1022ea4b
lea eax, [esp + 0x1c]
push eax
lea eax, [esp + 0x1c]
push eax
push 0x1046f6b0
call fcn.100f6950
test al, al
je 0x1022eb95
cmp dword [esp + 0x1c], 0
jne 0x1022eb95
lea eax, [esp + 0x10]
push eax
push dword [esp + 0x1c]
call fcn.100f76e0
test al, al
je 0x1022eb95
jmp 0x1022ea81
mov edx, 0x1046f6b0
call fcn.101ff260
test eax, eax
je 0x1022eb95
xor cl, cl
cmp word [eax + 2], 4
jne 0x1022ea6f
mov eax, dword [eax + 6]
mov cl, 1
mov dword [esp + 0x10], eax
test cl, cl
je 0x1022eb95
jmp 0x1022ea81
mov eax, dword [esp + 0x14]
mov dword [esp + 0x10], eax
cmp dword [esp + 0x10], 0x384
jae 0x1022eb95
push 0
push 0x3e8
push dword [edi + 0x4a4c]
push dword [edi + 0x4a48]
call fcn.10451250
mov ecx, dword [esp + 0x10]
add ecx, eax
mov dword [edi + 0x4a48], 0
mov dword [edi + 0x4a4c], 0
cmp byte [0x11d213c0], 0
mov dword [esp + 0x10], ecx
mov dword [esp + 0x14], ecx
je 0x1022eb14
cmp dword [esp + 0x28], 0
je 0x1022eb14
lea eax, [esp + 0x20]
push eax
lea eax, [esp + 0x20]
push eax
push 0x1046f6b0
call fcn.100f6950
test al, al
je 0x1022eb84
cmp dword [esp + 0x20], 0
jne 0x1022eb84
push dword [esp + 0x14]
mov ecx, 0x11d20670
push dword [esp + 0x20]
call fcn.100f8980
jmp 0x1022eb84
cmp dword [esp + 0x2c], 0
je 0x1022eb84
mov eax, dword [esp + 0x30]
xor ebx, ebx
push 0x1046de20
mov dword [esp + 0x24], eax
call dword [sym.imp.KERNEL32.dll_GetModuleHandleA]
mov esi, eax
call fcn.101fedc0
test al, al
je 0x1022eb84
test esi, esi
jne 0x1022eb55
call fcn.101ff770
push 0x1046de20
call dword [sym.imp.KERNEL32.dll_GetModuleHandleA]
mov esi, eax
test esi, esi
je 0x1022eb63
push 0x1046de30
push esi
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
mov ebx, eax
test ebx, ebx
je 0x1022eb84
call ebx
test eax, eax
je 0x1022eb84
mov eax, dword [eax + 8]
lea ecx, [esp + 0x14]
push 4
push ecx
push 4
push 0x1046f6b0
push dword [esp + 0x30]
call eax
cmp dword [esp + 0x10], 0x384
jae 0x1022eb95
or byte [edi + 0xad], 0x40
lea ecx, [esp + 0x28]
call fcn.102000a0
cmp dword [esp + 0x2c], 0
je 0x1022ebae
lea ecx, [esp + 0x28]
call fcn.102000a0
mov eax, dword [0x11d0d904]
dec eax
mov dword [0x11d0d904], eax
test eax, eax
jg 0x1022ec37
mov eax, dword [0x11d0d920]
mov dword [0x11d0d920], 0
test eax, eax
je 0x1022ebd9
push eax
call fcn.10450877
add esp, 4
mov eax, dword [0x11d0d918]
mov dword [0x11d0d918], 0
test eax, eax
je 0x1022ebf5
push eax
call fcn.10450877
add esp, 4
mov eax, dword [0x11d0d91c]
mov dword [0x11d0d91c], 0
test eax, eax
je 0x1022ec11
push eax
call fcn.10450877
add esp, 4
mov eax, dword [0x11d0d914]
mov dword [0x11d0d914], 0
test eax, eax
je 0x1022ec2d
push eax
call fcn.10450877
add esp, 4
mov dword [0x11d0d904], 0
mov eax, dword [esp + 0x30]
test eax, eax
je 0x1022ec48
push eax
call fcn.10450877
add esp, 4
mov esi, dword [esp + 0x34]
test esi, esi
je 0x1022ec62
mov ecx, esi
call fcn.101ffa20
push 0x10
push esi
call fcn.1045088a
add esp, 8
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret