Function at 0x10056c4
Capabilities:
Query or enumerate registry value

Disassembly:
mov edi, edi
push ebp
mov ebp, esp
sub esp, 0x48c
mov eax, dword [0x100ae94]
xor eax, ebp
mov dword [ebp - 4], eax
mov eax, dword [ebp + 8]
push ebx
mov ebx, dword [ebp + 0x20]
push esi
push edi
mov edi, dword [ebp + 0x18]
mov dword [ebp - 0x468], eax
mov eax, dword [ebp + 0xc]
xor esi, esi
push 0x50
mov dword [ebp - 0x46c], eax
lea eax, [ebp - 0x56]
push esi
push eax
mov dword [ebp - 0x474], esi
mov dword [ebp - 0x470], esi
mov dword [ebp - 0x478], esi
mov word [ebp - 0x58], si
call fcn.01007dbe
mov eax, dword [ebp - 0x46c]
mov word [eax], si
add esp, 0xc
lea eax, [ebp - 0x488]
push eax
call dword [0x1001174]
push edi
push dword [ebp + 0x14]
call fcn.010033b4
pop ecx
pop ecx
lea eax, [ebp - 0x470]
push eax
push 0x20019
push esi
lea eax, [edi + 0x618]
push eax
push dword [ebp - 0x468]
call dword [fcn.01001018]
cmp ebx, esi
je 0x1005762
mov dword [ebx], esi
cmp eax, esi
jne 0x10057aa
cmp ebx, esi
je 0x1005770
mov dword [ebx], 1
lea eax, [ebp - 0x478]
push eax
lea eax, [ebp - 0x58]
push eax
lea eax, [ebp - 0x48c]
push eax
push esi
push 0x10015a4
push dword [ebp - 0x470]
mov dword [ebp - 0x478], 0x50
call dword [fcn.01001014]
cmp eax, esi
mov word [ebp - 8], si
je 0x1005835
lea eax, [ebp - 0x464]
push 0x105
push eax
call fcn.01005699
cmp eax, esi
pop ecx
pop ecx
mov dword [ebp - 0x468], eax
jne 0x100590e
cmp dword [ebp + 0x1c], esi
mov ebx, dword [ebp + 0x10]
je 0x10057e5
push ebx
push 0x10015bc
push dword [ebp - 0x46c]
call dword [0x1001084]
push 0x100177c
push ebx
push dword [ebp - 0x46c]
call fcn.01002b61
add edi, 0x820
push edi
push ebx
push dword [ebp - 0x46c]
call fcn.01004bd7
add esp, 0xc
push 0x1001a4c
push ebx
push dword [ebp - 0x46c]
call fcn.01002b61
lea eax, [ebp - 0x464]
push eax
push ebx
push dword [ebp - 0x46c]
call fcn.01002b61
jmp 0x100590e
push 0x1001a30
mov edi, 0xff
push edi
lea eax, [ebp - 0x258]
push eax
call fcn.010028b5
cmp eax, esi
mov dword [ebp - 0x468], eax
jl 0x100590e
lea eax, [ebp - 0x58]
push eax
push edi
lea eax, [ebp - 0x258]
push eax
call fcn.01002b28
cmp eax, esi
mov dword [ebp - 0x468], eax
jl 0x100590e
push 0x1001a2c
push edi
lea eax, [ebp - 0x258]
push eax
call fcn.01002b28
cmp eax, esi
mov dword [ebp - 0x468], eax
jl 0x100590e
lea eax, [ebp - 0x474]
push eax
push 0x1002728
lea eax, [ebp - 0x258]
push eax
call dword [0x100b508]
cmp eax, esi
mov dword [ebp - 0x468], eax
jl 0x100590e
mov eax, dword [ebp - 0x474]
mov ecx, dword [eax]
lea edx, [ebp - 0x488]
push edx
push 0x10014e8
push eax
call dword [ecx + 0x3c]
cmp dword [ebp - 0x480], esi
mov dword [ebp - 0x468], eax
je 0x100590e
cmp dword [ebp + 0x1c], esi
je 0x10058f7
push dword [ebp + 0x10]
push 0x10015bc
push dword [ebp - 0x46c]
call dword [0x1001084]
push dword [ebp - 0x480]
push dword [ebp + 0x10]
push dword [ebp - 0x46c]
call fcn.01004bd7
add esp, 0xc
lea eax, [ebp - 0x488]
push eax
call dword [0x1001168]
cmp dword [ebp - 0x470], esi
je 0x100592f
push dword [ebp - 0x470]
call dword [fcn.01001010]
mov eax, dword [ebp - 0x474]
pop edi
cmp eax, esi
pop esi
pop ebx
je 0x1005942
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov ecx, dword [ebp - 4]
mov eax, dword [ebp - 0x468]
xor ecx, ebp
call fcn.01007a04
leave
ret