Function at 0x10008527
Capabilities:
Query or enumerate registry value

Disassembly:
mov eax, 0x100623af
call fcn.10061a48
sub esp, 0x120
mov dword [ebp - 0x54], edx
mov byte [ebp - 0x40], cl
push ebx
push esi
push edi
mov dword [ebp - 0x10], esp
test cl, cl
je 0x10008daf
push dword [ebp - 0x44]
movdqa xmm0, xmmword [0x10070800]
lea eax, [ebp - 0xec]
mov dword [ebp - 0x98], 6
lea ecx, [ebp - 0x88]
mov dword [ebp - 0x6c], 0xfffffff6
xor ebx, ebx
mov dword [ebp - 0x58], 0x48abb75d
mov dword [ebp - 0x64], 0x5c22c920
push eax
mov dword [ebp - 0x78], 0x5e0e2bf3
lea eax, [ebp - 0xfc]
mov dword [ebp - 0x50], 0x82ba8d7d
push eax
mov dword [ebp - 0x18], 0xf21c9b6c
mov dword [ebp - 0x7c], ebx
mov dword [ebp - 0x70], 0xfffffff9
push ebx
movdqu xmmword [ebp - 0xfc], xmm0
mov dword [ebp - 0x88], ebx
mov dword [ebp - 0x84], ebx
mov dword [ebp - 0x80], ebx
call fcn.10007962
mov dword [ebp - 4], ebx
mov dword [ebp - 0x68], 0x7a30
mov dword [ebp - 0x1c], 0x6e14
cmp dword [ebp - 0x1c], 0x6f0e
jle 0x10008616
push ebx
push ebx
push ebx
push ebx
push ebx
push ebx
call dword [sym.imp.ADVAPI32.dll_RegQueryValueExW]
mov esi, ebx
mov edi, ebx
mov ecx, edi
mov eax, esi
shl eax, cl
mov ecx, 0x1007d9f8
cdq
push edx
push eax
call fcn.10004c38
inc edi
cmp edi, 0x27d5
jl 0x100085f1
inc esi
cmp esi, 0x7027
jl 0x100085ef
push 0x2bfb
lea eax, [ebp - 0x64]
push eax
push 1
push 0x1f2f
lea eax, [ebp - 0x68]
push eax
push 0x78a9
lea eax, [ebp - 0x58]
push eax
lea eax, [ebp - 0x78]
push eax
push ebx
lea eax, [ebp - 0x70]
push eax
lea eax, [ebp - 0x50]
push eax
lea eax, [ebp - 0x88]
push eax
lea eax, [ebp - 0x7c]
push 0x1695
push eax
lea edx, [ebp - 0x6c]
lea ecx, [ebp - 0x98]
call fcn.1000bafb
add esp, 0x38
mov byte [ebp - 4], 1
cmp dword [ebp - 0x1c], 0x6bdb
jge 0x1000869b
mov edx, str.wdevqle_acf_hhlr_wdz_rkayucvj_uybxiyxu_eaebathxu_rqlolx
mov ecx, 0x1007d9f8
call fcn.100070aa
jmp 0x1000869b
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x88]
call fcn.10004ee5
push dword [ebp + 8]
lea ecx, [ebp - 0xc8]
call fcn.10007e3c
push 3
pop eax
mov dword [ebp - 4], eax
lea ecx, [ebp - 0xb0]
push dword [ebp - 0x44]
movdqa xmm0, xmmword [0x100707d0]
mov dword [ebp - 0x14], eax
lea eax, [ebp - 0xfc]
push eax
lea eax, [ebp - 0x10c]
mov dword [ebp - 0xb0], ebx
push eax
push ebx
movdqu xmmword [ebp - 0x10c], xmm0
mov dword [ebp - 0xac], ebx
mov dword [ebp - 0xa8], ebx
call fcn.10007962
mov byte [ebp - 4], 4
mov dword [ebp - 0x74], 0x2b96ce02
mov dword [ebp - 0x18], ebx
mov dword [ebp - 0x14], 0xffffffeb
jmp 0x10008742
lea eax, [ebp - 0x74]
mov dword [ebp - 0x48], 0xffffffff
push eax
lea eax, [ebp - 0x48]
mov edx, 0x2c49
push eax
push ebx
mov ecx, 0x2e16
call fcn.1000ade8
mov eax, dword [ebp - 0x48]
add esp, 0xc
mov dword [ebp - 0x18], eax
inc dword [ebp - 0x14]
cmp dword [ebp - 0x14], 0x11
jge 0x10008717
lea ecx, [ebp - 0xb0]
mov byte [ebp - 4], 3
call fcn.10004ee5
push ecx
push dword [ebp + 0x1c]
lea ecx, [ebp - 0xc8]
call fcn.1000d3b2
mov dword [ebp - 0x30], eax
mov dword [ebp - 0x20], 0x20624039
mov dword [ebp - 0x20], 0xfffffffc
cmp dword [ebp - 0x20], 0xfffffff2
push 2
pop esi
jge 0x1000892d
xor ecx, ecx
inc ecx
mov dword [ebp - 0x24], 0xc0f8067e
mov dword [ebp - 0x18], ecx
mov dword [ebp - 0x18], 0xde9ab5c2
mov dword [ebp - 0x14], ebx
jmp 0x100087ae
mov eax, dword [ebp - 0x14]
mov dword [ebp + eax*4 - 0x114], 0xff55e00f
inc dword [ebp - 0x14]
cmp dword [ebp - 0x14], esi
jl 0x1000879d
mov dword [ebp - 0x24], ebx
jmp 0x10008917
mov dword [ebp - 0x1c], 0x79c4185a
mov dword [ebp - 0x18], 0xd0176df7
mov dword [ebp - 0x18], 0xd0f065f4
mov dword [ebp - 0x1c], ecx
cmp dword [ebp - 0x1c], ebx
jl 0x100088ff
push 4
pop edi
push esi
lea ecx, [ebp - 0xa4]
call fcn.10004e62
mov byte [ebp - 4], 5
lea ecx, [ebp - 0xec]
push edi
mov dword [ebp - 0x18], 0x643b8a27
call fcn.10004e62
push ecx
lea eax, [ebp - 0x5c]
mov byte [ebp - 4], 6
push eax
push ecx
push ecx
lea ecx, [ebp - 0xa4]
call fcn.10008ef4
add esp, 0x10
lea eax, [ebp - 0xec]
lea ecx, [ebp - 0x5c]
push eax
sub esp, 0x10
call fcn.10008e8a
mov eax, dword [ebp - 0xa4]
xor ecx, ecx
add esp, 0x14
inc ecx
mov dword [eax], ecx
mov dword [ebp - 0x18], 0xb9193c1d
mov dword [ebp - 0x18], 0x667f5aee
mov dword [ebp - 0x18], 0x4151c8b9
mov dword [ebp - 0x60], 0xffffffff
mov dword [ebp - 0x14], ebx
jmp 0x1000886d
mov eax, dword [ebp - 0x14]
mov dword [ebp + eax*4 - 0x94], 0xfffffff7
inc dword [ebp - 0x14]
cmp dword [ebp - 0x14], 3
jl 0x1000885c
mov dword [ebp - 0x94], ebx
jmp 0x100088ac
mov dword [ebp - 0x44], 0xd2f38d9
lea edx, [ebp - 0x60]
push ecx
mov dword [ebp - 0x18], 0xdffbe584
push ecx
mov dword [ebp - 0x18], edi
lea ecx, [ebp - 0x44]
mov dword [ebp - 0x18], 0xfffffff6
call fcn.1000b82e
add esp, 8
xor ecx, ecx
inc dword [ebp - 0x94]
inc ecx
cmp dword [ebp - 0x94], ecx
jle 0x1000887b
mov eax, dword [ebp - 0xa4]
dec dword [eax]
jns 0x1000883b
push ecx
push 0x5573
push ebx
push ecx
mov edx, 0x68be
mov ecx, 0x570f
call fcn.1000c625
add esp, 0x10
lea ecx, [ebp - 0xec]
call fcn.10004ee5
lea ecx, [ebp - 0xa4]
mov byte [ebp - 4], 3
call fcn.10004ee5
dec dword [ebp - 0x1c]
jns 0x100087df
mov byte [ebp - 0x25], bl
lea ecx, [ebp - 0x25]
push ebx
mov edx, 0x37b
call fcn.10009107
inc dword [ebp - 0x24]
pop ecx
xor ecx, ecx
inc ecx
cmp dword [ebp - 0x24], ecx
jle 0x100087bb
dec dword [ebp - 0x20]
cmp dword [ebp - 0x20], 0xfffffff2
jl 0x10008787
cmp dword [ebp - 0x30], 0xffffffff
je 0x10008a04
sub esp, 0xc
lea edx, [ebp - 0x30]
lea ecx, [ebp - 0xc8]
call fcn.10009353
mov dword [ebp - 0x20], 0x651e
add esp, 0xc
cmp dword [ebp - 0x20], 0x67d2
jle 0x100089c0
mov esi, ebx
mov dword [ebp - 0x1c], ebx
mov edi, ebx
mov eax, esi
mov dword [ebp - 0x18], ebx
cdq
idiv edi
mov esi, edx
mov ecx, ebx
mov eax, esi
shl eax, cl
mov ecx, 0x1007d9f8
cdq
push edx
push eax
call fcn.10004c38
inc ebx
cmp ebx, 0x226d
jl 0x1000896c
mov esi, dword [ebp - 0x1c]
inc edi
push 0
pop ebx
cmp edi, 0x238d
jl 0x10008962
inc esi
mov dword [ebp - 0x1c], esi
cmp esi, 0x86
jl 0x10008960
push 0xee6
push ebx
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_GetDC]
push eax
call dword [sym.imp.GDI32.dll_Polygon]
push 2
pop esi
mov byte [ebp - 4], 7
cmp dword [ebp - 0x20], 0x644a
jge 0x100089fd
mov edx, str.qjdtllzqh_semaxjcd_bnn_vra_jijxrog
mov ecx, 0x1007d9f8
call fcn.100070aa
jmp 0x100089fd
mov dword [ebp - 4], 3
push 3
lea ecx, [ebp - 0xe0]
call fcn.10004e62
push esi
lea ecx, [ebp - 0xd4]
mov byte [ebp - 4], 9
call fcn.10004e62
push 0x482c
push 0x68e6
lea eax, [ebp - 0xe0]
mov byte [ebp - 4], 0xa
push eax
push 1
lea eax, [ebp - 0x2c]
mov dword [ebp - 0x4c], 0xc5416513
push eax
push 0x42cc
mov edx, 0x6182
xor cl, cl
call fcn.10008527
add esp, 0x18
mov dword [ebp - 0x2c], ebx
jmp 0x10008a6f
mov ecx, dword [ebp - 0x2c]
mov eax, dword [ebp - 0xd4]
mov dword [eax + ecx*4], 9
inc dword [ebp - 0x2c]
cmp dword [ebp - 0x2c], esi
jl 0x10008a5c
mov edi, dword [ebp - 0xd4]
mov dword [edi], ebx
push ebx
push 0x4e42
push 0x1248
mov edx, 0x38ec
lea ecx, [ebp - 0x4c]
call fcn.1000b955
add esp, 0xc
inc dword [edi]
cmp dword [edi], esi
jle 0x10008a7c
push 0x6e48
lea eax, [ebp - 0x4c]
mov edx, 0x5d2c
push 0xda1
push eax
xor cl, cl
call fcn.1000bd3c
add esp, 0xc
lea ecx, [ebp - 0xd4]
call fcn.10004ee5
lea ecx, [ebp - 0xe0]
mov byte [ebp - 4], 3
call fcn.10004ee5
lea eax, [ebp - 0xc8]
push eax
push ebx
push dword [ebp + 0x1c]
push ecx
lea ecx, [ebp - 0x30]
call fcn.1000b494
mov dword [ebp - 0x18], 0x24f9
add esp, 0x10
cmp dword [ebp - 0x18], 0x12e4
jge 0x10008c0c
lea eax, [ebp - 0x3c]
mov dword [ebp - 0x34], ebx
push eax
lea eax, [ebp - 0x38]
mov dword [ebp - 0x38], ebx
push eax
lea eax, [ebp - 0x34]
mov dword [ebp - 0x3c], ebx
push eax
push str._d__d__d
call fcn.1004b4b3
mov edi, dword [ebp - 0x3c]
xor ecx, ecx
imul edi, dword [ebp - 0x38]
push 4
pop edx
imul edi, dword [ebp - 0x34]
mov dword [ebp - 0x18], edi
lea eax, [edi + 1]
mul edx
seto cl
neg ecx
or ecx, eax
push ecx
call fcn.10046451
mov edx, eax
xor ecx, ecx
inc ecx
mov dword [ebp - 0x1c], edx
add esp, 0x14
mov dword [edx + 4], ecx
cmp edi, esi
jl 0x10008b65
lea ecx, [edi - 1]
mov eax, esi
lea edi, [edx + 8]
rep stosd dword es:[edi], eax
mov edi, dword [ebp - 0x18]
xor ecx, ecx
inc ecx
mov eax, edi
cdq
sub eax, edx
sar eax, 1
mov dword [ebp - 0x18], eax
cmp eax, esi
jl 0x10008b90
mov ebx, dword [ebp - 0x1c]
lea edx, [esi + esi]
cmp edx, edi
jg 0x10008b89
inc dword [ebx + edx*4]
add edx, esi
cmp edx, edi
jle 0x10008b7d
mov eax, dword [ebp - 0x18]
inc esi
cmp esi, eax
jle 0x10008b76
xor ebx, ebx
mov eax, ebx
mov esi, ecx
mov dword [ebp - 0x20], eax
cmp dword [ebp - 0x34], ecx
jl 0x10008bff
mov ebx, dword [ebp - 0x1c]
cmp dword [ebp - 0x38], ecx
jl 0x10008bf4
mov edx, dword [ebp - 0x38]
mov eax, esi
shl eax, 2
mov edi, eax
mov dword [ebp - 0x18], edx
cmp dword [ebp - 0x3c], ecx
jl 0x10008bec
mov edx, dword [ebp - 0x3c]
lea eax, [edi + ebx]
mov ebx, dword [ebp - 0x20]
mov dword [ebp - 0x24], eax
mov dword [ebp - 0x14], edx
mov eax, dword [eax]
add eax, ebx
cdq
push 0x61
pop ebx
idiv ebx
mov eax, dword [ebp - 0x24]
add eax, edi
mov ebx, edx
dec dword [ebp - 0x14]
mov dword [ebp - 0x24], eax
jne 0x10008bc5
mov edx, dword [ebp - 0x18]
mov eax, esi
mov dword [ebp - 0x20], ebx
mov ebx, dword [ebp - 0x1c]
shl eax, 2
add edi, eax
dec edx
mov dword [ebp - 0x18], edx
jne 0x10008bb1
inc esi
cmp esi, dword [ebp - 0x34]
jle 0x10008b9f
mov eax, dword [ebp - 0x20]
xor ebx, ebx
push eax
push str._ld_n
call fcn.1004af7c
pop ecx
pop ecx
cmp dword [ebp - 0x30], 0xffffffff
je 0x10008d89
mov dword [ebp - 0x14], 0x38462751
mov dword [ebp - 0x1c], ebx
mov dword [ebp - 0x20], 0xfffffff7
mov eax, dword [ebp - 0x14]
mov dword [ebp - 0x1c], 1
mov eax, dword [ebp - 0x1c]
mov eax, dword [ebp - 0x14]
mov eax, dword [ebp - 0x14]
mov eax, dword [ebp - 0x14]
mov eax, dword [ebp - 0x14]
mov eax, dword [ebp - 0x14]
mov dword [ebp - 0x20], eax
cmp dword [ebp - 0x20], ebx
je 0x10008c4e
mov eax, dword [ebp - 0x1c]
mov eax, dword [ebp - 0x14]
lea edx, [ebp - 0x26]
mov eax, dword [ebp - 0x14]
xor cl, cl
mov eax, dword [ebp - 0x14]
mov eax, dword [ebp - 0x20]
mov eax, dword [ebp - 0x14]
mov byte [ebp - 0x26], bl
call fcn.10008e71
mov dword [ebp - 0x20], 0x5631
cmp dword [ebp - 0x20], 0x57a2
jle 0x10008cda
mov edi, ebx
mov esi, ebx
mov ecx, ebx
mov dword [ebp - 0x1c], 0x37ae
mov dword [ebp - 0x18], ecx
mov eax, edi
shl eax, cl
lea ecx, [ebp - 0x12c]
cdq
push edx
push eax
call fcn.10001a95
pop ecx
pop ecx
cmp dword [eax + 0x14], 0x10
jb 0x10008ca6
mov eax, dword [eax]
push eax
call fcn.1004af7c
pop ecx
push ebx
push 1
lea ecx, [ebp - 0x12c]
call fcn.10005365
mov ecx, dword [ebp - 0x18]
add ecx, esi
dec dword [ebp - 0x1c]
mov dword [ebp - 0x18], ecx
jne 0x10008c8a
inc esi
cmp esi, 0x7e8e
jl 0x10008c7e
inc edi
cmp edi, 0x639
jl 0x10008c7c
push 0x246a
lea eax, [ebp - 0xc8]
xor dl, dl
push 0x5d51
push eax
lea ecx, [ebp - 0x30]
call fcn.100093cb
add esp, 0xc
cmp dword [ebp - 0x20], 0x53b8
jge 0x10008d0c
push str.syog_nqjjon_mshdcdhg
call fcn.1004af7c
pop ecx
mov dword [ebp - 4], 3
mov dword [ebp - 0x18], 0x35d6
cmp dword [ebp - 0x18], 0x3972
jle 0x10008d48
mov esi, ebx
mov edi, esi
mov ebx, 0x1cd6
mov eax, edi
mov ecx, 0x1007d9f8
cdq
push edx
push eax
call fcn.10004c38
dec edi
dec ebx
jne 0x10008d2c
inc esi
cmp esi, 0x75a0
jl 0x10008d25
mov byte [ebp - 4], 0xf
cmp dword [ebp - 0x18], 0x33bb
jge 0x10008d82
mov edx, str.tfjc_xkoey_hmzfbrp_ayuv_raiee_sqs_amr_mjymbigm
mov ecx, 0x1007d9f8
call fcn.100070aa
jmp 0x10008d82
mov dword [ebp - 4], 3
mov ecx, dword [ebp - 0x54]
lea eax, [ebp - 0xc8]
cmp ecx, eax
je 0x10008d9f
push 0xffffffffffffffff
push ebx
push eax
call fcn.10006052
push ebx
push 1
lea ecx, [ebp - 0xc8]
call fcn.10005431
jmp 0x10008dd2
mov edx, dword [ebp + 0xc]
mov dword [edx], 0
cmp dword [edx], 3
jge 0x10008dd2
mov esi, dword [ebp + 0x14]
mov ecx, dword [edx]
mov eax, dword [esi]
mov dword [eax + ecx*4], 0xae9714a
inc dword [edx]
cmp dword [edx], 3
jl 0x10008dc0
mov ecx, dword [ebp - 0xc]
pop edi
pop esi
mov dword fs:[0], ecx
pop ebx
mov esp, ebp
pop ebp
ret