Function at 0x10531d5
Capabilities:
Query or enumerate registry key

Disassembly:
push 0x274
mov eax, 0x10ce35f
call fcn.01098a6e
push 0
sub esp, 0x58
mov ecx, esp
mov dword [ebp - 0x220], esp
push 0xff
push 1
push 0x3d6
mov ebx, 0x100a998
push ebx
mov edi, 0x100a284
push edi
mov esi, 0x100a218
push esi
call fcn.0109958e
lea ecx, [ebp - 0x26c]
call fcn.0109aa5f
xor eax, eax
mov dword [ebp - 4], eax
mov dword [ebp - 0x228], eax
mov dword [ebp - 0x224], eax
mov byte [ebp - 4], 2
cmp dword [0x10e3ff0], eax
jne 0x10535cf
push 0x14
call fcn.01098395
pop ecx
xor ecx, ecx
cmp eax, ecx
je 0x1053262
mov dword [eax + 4], ecx
mov dword [eax + 8], ecx
mov dword [eax + 0xc], ecx
mov dword [eax + 0x10], ecx
mov dword [eax], 0x1009900
jmp 0x1053264
xor eax, eax
mov dword [0x10e3ff0], eax
cmp eax, ecx
jne 0x10532a2
push 0x1009c44
push 0x8007000e
sub esp, 0x58
mov ecx, esp
mov dword [ebp - 0x220], esp
push 0xff
push 1
push 0x3e9
push ebx
push edi
push esi
call fcn.0109958e
lea eax, [ebp - 0x26c]
push eax
call fcn.0109b3d6
push 0x1009f8c
push 0x1009f40
push 0x1007028
lea eax, [ebp - 0x214]
push 0x100
push eax
call fcn.010475bf
add esp, 0x14
mov dword [ebp - 0x264], eax
test eax, eax
jge 0x1053300
push 0x1007038
push eax
sub esp, 0x58
mov ecx, esp
mov dword [ebp - 0x220], esp
push 0xff
push 1
push 0x3ef
push ebx
push edi
push esi
call fcn.0109958e
lea eax, [ebp - 0x26c]
push eax
call fcn.0109c5e0
lea eax, [ebp - 0x224]
push eax
push 0x20019
push 0
lea eax, [ebp - 0x214]
push eax
push 0x80000002
call dword [sym.imp.ADVAPI32.dll_RegOpenKeyExW]
test eax, eax
je 0x105336b
push 0x1009f8c
push 0x1009f40
push 0x100a938
jle 0x105333f
and eax, 0xffff
or eax, 0x80070000
push eax
sub esp, 0x58
mov ecx, esp
mov dword [ebp - 0x220], esp
push 0xff
push 1
push 0x3f8
push ebx
push edi
push esi
call fcn.0109958e
lea eax, [ebp - 0x26c]
push eax
call fcn.0109c5e0
and dword [ebp - 0x21c], 0
mov byte [ebp - 0x215], 0
cmp byte [ebp - 0x215], 0
jne 0x10535cf
lea eax, [ebp - 0x280]
push eax
xor eax, eax
push eax
push eax
push eax
lea eax, [ebp - 0x220]
push eax
lea eax, [ebp - 0x214]
push eax
push dword [ebp - 0x21c]
mov dword [ebp - 0x220], 0x100
push dword [ebp - 0x224]
call dword [sym.imp.ADVAPI32.dll_RegEnumKeyExW]
test eax, eax
je 0x1053429
cmp eax, 0x103
je 0x105341d
push dword [ebp - 0x21c]
lea ecx, [ebp - 0x214]
push ecx
push 0x1009f8c
push 0x1009f40
push 0x100a8f0
test eax, eax
jle 0x10533f1
and eax, 0xffff
or eax, 0x80070000
push eax
sub esp, 0x58
mov ecx, esp
mov dword [ebp - 0x21c], esp
push 0xff
push 1
push 0x435
push ebx
push edi
push esi
call fcn.0109958e
lea eax, [ebp - 0x26c]
push eax
call fcn.0109c5e0
mov byte [ebp - 0x215], 1
jmp 0x10534d6
lea eax, [ebp - 0x228]
push eax
lea eax, [ebp - 0x214]
push eax
push dword [ebp - 0x224]
call fcn.01051fd0
mov dword [ebp - 0x264], eax
test eax, eax
jge 0x1053490
push eax
lea eax, [ebp - 0x214]
push eax
push 0x100a880
sub esp, 0x58
mov ecx, esp
mov dword [ebp - 0x22c], esp
push 0xff
push 1
push 0x419
push ebx
push edi
push esi
call fcn.0109958e
lea eax, [ebp - 0x26c]
push eax
call fcn.0109a735
add esp, 0x68
and dword [ebp - 0x264], 0
jmp 0x10534d6
mov ecx, dword [0x10e3ff0]
lea eax, [ebp - 0x228]
push eax
add ecx, 4
call fcn.01092181
test eax, eax
jne 0x10534cf
push 0x100a468
push 0x8007000e
sub esp, 0x58
mov ecx, esp
mov dword [ebp - 0x22c], esp
push 0xff
push 1
push 0x426
jmp 0x105328e
and dword [ebp - 0x228], 0
inc dword [ebp - 0x21c]
jmp 0x1053379
mov dword [ebp - 4], 1
xor eax, eax
cmp dword [ebp - 0x224], eax
je 0x10535ec
push dword [ebp - 0x224]
call dword [sym.imp.ADVAPI32.dll_RegCloseKey]
test eax, eax
je 0x105362a
call dword [sym.imp.KERNEL32.dll_GetLastError]
push eax
push 0x100a820
sub esp, 0x58
mov ecx, esp
mov dword [ebp - 0x22c], esp
push 0xff
push 1
push 0x442
push ebx
push edi
push esi
call fcn.0109958e
lea eax, [ebp - 0x26c]
push eax
call fcn.0109a735
add esp, 0x64
cmp dword [ebp - 0x264], 0
jge 0x1053674
call fcn.01052fcb
push dword [ebp - 0x264]
push 0x100a7b8
push dword [ebp - 0x264]
sub esp, 0x58
mov ecx, esp
mov dword [ebp - 0x22c], esp
push 0xff
push 1
push 0x449
push ebx
push edi
push esi
call fcn.0109958e
lea eax, [ebp - 0x26c]
push eax
call fcn.0109b3d6
lea ecx, [ebp - 0x228]
mov byte [ebp - 4], 0
call fcn.01046e18
lea ecx, [ebp - 0x26c]
call fcn.0109ab18
call fcn.01098ad9
ret