Function at 0x180cccb6
Capabilities:
Query or enumerate registry value

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x2ac
mov eax, dword [0x1822b00c]
xor eax, ebp
mov dword [ebp - 4], eax
push ebx
push esi
push edi
mov esi, 0x104
lea eax, [ebp - 0x110]
push esi
push 0
push eax
mov edi, edx
mov ebx, ecx
call fcn.181757a0
add esp, 0xc
mov dword [ebp - 0x2a4], esi
lea eax, [ebp - 0x2a4]
push eax
lea eax, [ebp - 0x110]
push eax
push 0
push 0x10002
push str.BuildLabEx
push str.SOFTWAREMicrosoftWindows_NTCurrentVersion
push 0x80000002
call dword [sym.imp.ADVAPI32.dll_RegGetValueA]
and dword [ebp - 0x130], 0
lea ecx, [ebp - 0x110]
mov dword [ebp - 0x12c], 0xf
lea edx, [ecx + 1]
mov byte [ebp - 0x140], 0
mov al, byte [ecx]
inc ecx
test al, al
jne 0x180ccd38
sub ecx, edx
lea eax, [ebp - 0x110]
push ecx
push eax
lea ecx, [ebp - 0x140]
call fcn.1801b1e1
push str.ntdll.dll
call dword [sym.imp.KERNEL32.dll_GetModuleHandleW]
test eax, eax
je 0x180ccd73
push str.RtlGetVersion
push eax
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
mov esi, eax
jmp 0x180ccd75
xor esi, esi
push 0x110
lea eax, [ebp - 0x29c]
mov dword [ebp - 0x2a0], 0x114
push 0
push eax
call fcn.181757a0
add esp, 0xc
test esi, esi
je 0x180cd05b
lea eax, [ebp - 0x2a0]
push eax
call esi
test eax, eax
js 0x180cd05b
push 0
push dword [ebp - 0x298]
lea ecx, [ebp - 0x170]
call fcn.180ac5d1
push 0
push dword [ebp - 0x29c]
lea ecx, [ebp - 0x188]
mov esi, eax
call fcn.180ac5d1
add esp, 0x10
mov ecx, eax
push 1
push 0x181f9970
call fcn.18020c75
xor ecx, ecx
mov byte [ebp - 0x2a4], cl
push dword [ebp - 0x2a4]
mov dword [ebp - 0x118], ecx
mov dword [ebp - 0x114], ecx
lea ecx, [ebp - 0x128]
push eax
call fcn.18012f5d
push esi
lea eax, [ebp - 0x128]
push eax
push dword [ebp - 0x2a4]
lea ecx, [ebp - 0x158]
call fcn.18079cb1
lea eax, [ebp - 0x158]
cmp ebx, eax
je 0x180cce52
mov ecx, ebx
call fcn.18012edc
mov byte [ebp - 0x2a4], 0
lea eax, [ebp - 0x158]
push dword [ebp - 0x2a4]
mov ecx, ebx
push eax
call fcn.18012f5d
lea ecx, [ebp - 0x158]
call fcn.18012edc
mov eax, dword [ebp - 0x114]
cmp eax, 0x10
jb 0x180cceac
mov ecx, dword [ebp - 0x128]
inc eax
mov dword [ebp - 0x2a8], eax
mov dword [ebp - 0x2a4], ecx
cmp eax, 0x1000
jb 0x180ccea3
lea eax, [ebp - 0x2a8]
push eax
lea eax, [ebp - 0x2a4]
push eax
call fcn.18007456
mov eax, dword [ebp - 0x2a8]
pop ecx
pop ecx
mov ecx, dword [ebp - 0x2a4]
push eax
push ecx
call fcn.18160b12
pop ecx
pop ecx
and dword [ebp - 0x118], 0
lea ecx, [ebp - 0x188]
mov dword [ebp - 0x114], 0xf
mov byte [ebp - 0x128], 0
call fcn.18012edc
lea ecx, [ebp - 0x170]
call fcn.18012edc
push 0
push dword [ebp - 0x294]
lea ecx, [ebp - 0x188]
call fcn.180ac5d1
push 0x181f9970
mov edx, ebx
lea ecx, [ebp - 0x170]
mov esi, eax
call fcn.180b4284
add esp, 0xc
lea ecx, [ebp - 0x158]
push esi
push eax
push dword [ebp - 0x2a4]
call fcn.18079cb1
lea eax, [ebp - 0x158]
cmp edi, eax
je 0x180ccf43
mov ecx, edi
call fcn.18012edc
mov byte [ebp - 0x2a4], 0
lea eax, [ebp - 0x158]
push dword [ebp - 0x2a4]
mov ecx, edi
push eax
call fcn.18012f5d
lea ecx, [ebp - 0x158]
call fcn.18012edc
lea ecx, [ebp - 0x170]
call fcn.18012edc
lea ecx, [ebp - 0x188]
call fcn.18012edc
push 0x181f9970
mov edx, ebx
lea ecx, [ebp - 0x170]
call fcn.180b4284
cmp dword [ebp - 0x12c], 0x10
pop ecx
lea ecx, [ebp - 0x140]
jb 0x180ccf8c
mov ecx, dword [ebp - 0x140]
push dword [ebp - 0x130]
push ecx
mov ecx, eax
call fcn.18020c75
xor ebx, ebx
lea ecx, [ebp - 0x128]
mov byte [ebp - 0x2a4], bl
push dword [ebp - 0x2a4]
mov dword [ebp - 0x118], ebx
push eax
mov dword [ebp - 0x114], ebx
call fcn.18012f5d
lea eax, [ebp - 0x128]
cmp edi, eax
je 0x180ccfeb
mov ecx, edi
call fcn.18012edc
mov byte [ebp - 0x2a4], bl
lea eax, [ebp - 0x128]
push dword [ebp - 0x2a4]
mov ecx, edi
push eax
call fcn.18012f5d
mov eax, dword [ebp - 0x114]
cmp eax, 0x10
jb 0x180cd03a
mov ecx, dword [ebp - 0x128]
inc eax
mov dword [ebp - 0x2a4], eax
mov dword [ebp - 0x2a8], ecx
cmp eax, 0x1000
jb 0x180cd031
lea eax, [ebp - 0x2a4]
push eax
lea eax, [ebp - 0x2a8]
push eax
call fcn.18007456
mov eax, dword [ebp - 0x2a4]
pop ecx
pop ecx
mov ecx, dword [ebp - 0x2a8]
push eax
push ecx
call fcn.18160b12
pop ecx
pop ecx
lea ecx, [ebp - 0x170]
mov dword [ebp - 0x118], ebx
mov dword [ebp - 0x114], 0xf
mov byte [ebp - 0x128], bl
call fcn.18012edc
mov eax, dword [ebp - 0x12c]
cmp eax, 0x10
jb 0x180cd0aa
mov ecx, dword [ebp - 0x140]
inc eax
mov dword [ebp - 0x2a4], eax
mov dword [ebp - 0x2a8], ecx
cmp eax, 0x1000
jb 0x180cd0a1
lea eax, [ebp - 0x2a4]
push eax
lea eax, [ebp - 0x2a8]
push eax
call fcn.18007456
mov eax, dword [ebp - 0x2a4]
pop ecx
pop ecx
mov ecx, dword [ebp - 0x2a8]
push eax
push ecx
call fcn.18160b12
pop ecx
pop ecx
mov ecx, dword [ebp - 4]
pop edi
pop esi
xor ecx, ebp
pop ebx
call fcn.181605f4
leave
ret