Function at 0x10025a4a
Capabilities:
Query or enumerate registry key

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x214
movzx eax, byte [ebp + 8]
test eax, eax
je 0x100267ad
mov eax, dword [ebp + 0x18]
mov dword [ebp - 0x74], eax
mov eax, dword [ebp + 0xc]
mov dword [ebp - 0x90], eax
mov eax, dword [ebp + 0x14]
mov dword [ebp - 0x4c], eax
mov dword [ebp - 0x48], 0xea5d6c05
mov dword [ebp - 0x1ec], 0x2cf415d7
mov dword [ebp - 0x1c8], 0xd210ec32
mov dword [ebp - 0x1d0], 0x31d14cd4
mov dword [ebp - 0x1e8], 0xa9b27fa
mov dword [ebp - 0x54], 0
jmp 0x10025ab3
mov eax, dword [ebp - 0x54]
inc eax
mov dword [ebp - 0x54], eax
cmp dword [ebp - 0x54], 3
jge 0x10025ac9
mov eax, dword [ebp - 0x54]
mov dword [ebp + eax*4 - 0x214], 0xffffffff
jmp 0x10025aac
mov dword [ebp - 0x48], 0xffffffec
jmp 0x10025ad9
mov eax, dword [ebp - 0x48]
inc eax
mov dword [ebp - 0x48], eax
cmp dword [ebp - 0x48], 0x1d
jne 0x10025c1b
mov dword [ebp - 0x1f0], 0x6e6f7fbf
mov dword [ebp - 0x1dc], 0xfffffff7
mov dword [ebp - 0x1f4], 0x2717f403
mov dword [ebp - 0x14], 0
jmp 0x10025b11
mov eax, dword [ebp - 0x14]
inc eax
mov dword [ebp - 0x14], eax
cmp dword [ebp - 0x14], 2
jge 0x10025b27
mov eax, dword [ebp - 0x14]
mov dword [ebp + eax*4 - 0x208], 0xde0b4074
jmp 0x10025b0a
mov dword [ebp - 0x14], 0
jmp 0x10025b37
mov eax, dword [ebp - 0x14]
inc eax
mov dword [ebp - 0x14], eax
cmp dword [ebp - 0x14], 2
jge 0x10025b4d
mov eax, dword [ebp - 0x14]
mov dword [ebp + eax*4 - 0x148], 1
jmp 0x10025b30
push 4
pop eax
imul eax, eax, 0
mov dword [ebp + eax - 0x148], 0
jmp 0x10025b7b
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x148]
inc eax
push 4
pop ecx
imul ecx, ecx, 0
mov dword [ebp + ecx - 0x148], eax
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x148], 1
jg 0x10025c16
mov dword [ebp - 0x194], 0xffffffff
mov dword [ebp - 0x190], 0xffffffff
mov dword [ebp - 0x18c], 0xffffffff
mov dword [ebp - 0x188], 0xffffffff
mov dword [ebp - 0x1a4], 0
mov dword [ebp - 0x1d4], 0xb1943c6f
mov dword [ebp - 0x1ac], 0xffffffff
mov dword [ebp - 0x1d8], 0x530a9bca
mov dword [ebp - 0xec], 0xffffffff
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x194]
dec eax
push 4
pop ecx
imul ecx, ecx, 0
mov dword [ebp + ecx - 0x194], eax
mov eax, dword [ebp - 0xec]
inc eax
mov dword [ebp - 0xec], eax
jmp 0x10025b60
jmp 0x10025ad2
mov eax, dword [ebp - 0x4c]
mov ecx, dword [ebp - 0x74]
mov ecx, dword [ecx + 0x10]
mov dword [eax], ecx
mov dword [ebp - 4], 0
mov dword [ebp - 0x58], 0
jmp 0x10025c3d
mov eax, dword [ebp - 0x58]
inc eax
mov dword [ebp - 0x58], eax
cmp dword [ebp - 0x58], 1
jge 0x10025c50
mov eax, dword [ebp - 0x58]
mov dword [ebp + eax*4 - 0x1c], 0x44c039ec
jmp 0x10025c36
mov eax, dword [ebp - 4]
mov dword [ebp - 0x1b4], eax
mov eax, dword [ebp - 4]
mov dword [ebp - 0x1e0], eax
cmp dword [ebp - 4], 0
jne 0x10025c7e
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x1c], 0
jne 0x10025c7e
and dword [ebp - 0x118], 0
jmp 0x10025c88
mov dword [ebp - 0x118], 1
mov eax, dword [ebp - 4]
add eax, dword [ebp - 0x118]
cmp eax, dword [ebp - 4]
jl 0x10025ca2
mov dword [ebp - 0x84], 1
jmp 0x10025ca9
and dword [ebp - 0x84], 0
mov eax, dword [ebp - 0x84]
inc eax
cmp eax, dword [ebp - 4]
jne 0x10025cc1
mov dword [ebp - 0x120], 1
jmp 0x10025cc8
and dword [ebp - 0x120], 0
cmp dword [ebp - 0x120], 1
je 0x10025e37
mov dword [ebp - 0x2c], 0x9dbc9b78
mov dword [ebp - 0xf4], 0x7e91
mov dword [ebp - 0x170], 0x35b5b06a
mov eax, dword [ebp - 0x2c]
mov dword [ebp - 0x1bc], eax
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x1c], 0
jne 0x10025d4c
cmp dword [ebp - 4], 0
jne 0x10025d24
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x2c]
cmp dword [ebp + eax - 0x1c], ecx
je 0x10025d24
and dword [ebp - 0x8c], 0
jmp 0x10025d2e
mov dword [ebp - 0x8c], 1
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x1c]
sub eax, dword [ebp - 0x8c]
sub eax, dword [ebp - 0x2c]
jne 0x10025d4c
and dword [ebp - 0x128], 0
jmp 0x10025d56
mov dword [ebp - 0x128], 1
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x1c]
cmp dword [ebp - 0x128], eax
jl 0x10025d74
mov dword [ebp - 0x94], 1
jmp 0x10025d7b
and dword [ebp - 0x94], 0
mov eax, dword [ebp - 0xf4]
add eax, dword [ebp - 0x94]
cmp eax, dword [ebp - 0x2c]
jge 0x10025d98
mov dword [ebp - 0x130], 1
jmp 0x10025d9f
and dword [ebp - 0x130], 0
cmp dword [ebp - 0x130], 0
jge 0x10025db4
mov dword [ebp - 0x9c], 1
jmp 0x10025dbb
and dword [ebp - 0x9c], 0
cmp dword [ebp - 0x9c], 0xadbe
jle 0x10025dd3
mov dword [ebp - 0x138], 1
jmp 0x10025dda
and dword [ebp - 0x138], 0
mov eax, dword [ebp - 0x138]
sub eax, 5
imul eax, eax, 0xffff
test eax, eax
jne 0x10025dfc
cmp dword [ebp - 0x2c], 0
jne 0x10025dfc
and dword [ebp - 0x168], 0
jmp 0x10025e06
mov dword [ebp - 0x168], 1
mov eax, dword [ebp - 0x2c]
add eax, 0x24d8
cmp eax, dword [ebp - 0xf4]
jge 0x10025e22
mov dword [ebp - 0xa4], 1
jmp 0x10025e29
and dword [ebp - 0xa4], 0
mov eax, dword [ebp - 0xa4]
mov dword [ebp - 0x170], eax
jmp 0x10025e7e
mov dword [ebp - 4], 0xf
jmp 0x10025e47
mov eax, dword [ebp - 4]
inc eax
mov dword [ebp - 4], eax
cmp dword [ebp - 4], 0x2d
jge 0x10025e7e
mov byte [ebp - 0x26], 0
movzx eax, byte [ebp - 0x26]
test eax, eax
je 0x10025e61
push 0
call fcn.100267d7
pop ecx
mov byte [ebp - 0x1d], 0
movzx eax, byte [ebp - 0x1d]
test eax, eax
je 0x10025e7c
push 0
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_ValidateRgn]
jmp 0x10025e40
mov dword [ebp - 4], 0
jmp 0x10025e8e
mov eax, dword [ebp - 4]
inc eax
mov dword [ebp - 4], eax
cmp dword [ebp - 4], 0
jg 0x10025ea4
mov eax, dword [ebp - 4]
mov ecx, dword [ebp - 4]
mov eax, dword [ebp + eax*4 - 0x1c]
mov dword [ebp + ecx*4 - 0x1c], eax
jmp 0x10025e87
mov eax, dword [ebp - 0x4c]
cmp dword [eax], 0
jne 0x100267ab
mov dword [ebp - 0x30], 0x57a7c203
mov dword [ebp - 0x34], 0xffffffff
mov dword [ebp - 0x24], 0xe26b5cfd
mov dword [ebp - 0x134], 0x99fa
mov dword [ebp - 0x50], 0
jmp 0x10025edf
mov eax, dword [ebp - 0x50]
inc eax
mov dword [ebp - 0x50], eax
cmp dword [ebp - 0x50], 2
jge 0x10025ef5
mov eax, dword [ebp - 0x50]
mov dword [ebp + eax*4 - 0x140], 0x7862fd41
jmp 0x10025ed8
mov dword [ebp - 0x30], 1
jmp 0x10025f05
mov eax, dword [ebp - 0x30]
dec eax
mov dword [ebp - 0x30], eax
cmp dword [ebp - 0x30], 0
jl 0x1002621b
mov dword [ebp - 0xdc], 0x17b4d2c2
mov dword [ebp - 0x60], 0
jmp 0x10025f29
mov eax, dword [ebp - 0x60]
inc eax
mov dword [ebp - 0x60], eax
cmp dword [ebp - 0x60], 4
jge 0x10025f3f
mov eax, dword [ebp - 0x60]
mov dword [ebp + eax*4 - 0x164], 0xa756
jmp 0x10025f22
mov eax, dword [ebp - 0x30]
mov dword [ebp - 0x198], eax
push 4
pop eax
imul eax, eax, 3
mov eax, dword [ebp + eax - 0x164]
mov dword [ebp - 0x1c4], eax
push 4
pop eax
imul eax, eax, 3
push 4
pop ecx
imul ecx, ecx, 0
mov ecx, dword [ebp + ecx - 0x164]
cmp dword [ebp + eax - 0x164], ecx
jne 0x10025f83
mov dword [ebp - 0xa8], 1
jmp 0x10025f8a
and dword [ebp - 0xa8], 0
mov eax, dword [ebp - 0xa8]
add eax, 0xfffb
push 4
pop ecx
shl ecx, 0
cmp eax, dword [ebp + ecx - 0x140]
jl 0x10025fb0
mov dword [ebp - 0x178], 1
jmp 0x10025fb7
and dword [ebp - 0x178], 0
mov dword [ebp - 0x34], 0xfffffffc
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x140]
cmp dword [ebp - 0x34], eax
jl 0x10025fdc
mov dword [ebp - 0xb0], 1
jmp 0x10025fe3
and dword [ebp - 0xb0], 0
push 4
pop eax
imul eax, eax, 3
mov eax, dword [ebp + eax - 0x164]
cmp dword [ebp - 0xb0], eax
jg 0x10026004
mov dword [ebp - 0xb4], 1
jmp 0x1002600b
and dword [ebp - 0xb4], 0
mov eax, dword [ebp - 0xb4]
mov dword [ebp - 0x24], eax
mov eax, dword [ebp - 0x134]
cmp dword [ebp - 0x24], eax
jg 0x1002602b
mov dword [ebp - 0xbc], 1
jmp 0x10026032
and dword [ebp - 0xbc], 0
mov eax, dword [ebp - 0x134]
cmp dword [ebp - 0xbc], eax
jne 0x1002604c
mov dword [ebp - 0xfc], 1
jmp 0x10026053
and dword [ebp - 0xfc], 0
cmp dword [ebp - 0xfc], 0x3ff14eb4
jle 0x1002606b
mov dword [ebp - 0xc4], 1
jmp 0x10026072
and dword [ebp - 0xc4], 0
cmp dword [ebp - 0xc4], 8
je 0x10026087
mov dword [ebp - 0x11c], 1
jmp 0x1002608e
and dword [ebp - 0x11c], 0
push 4
pop eax
imul eax, eax, 3
mov eax, dword [ebp + eax - 0x164]
sub eax, dword [ebp - 0x11c]
add eax, 9
push 4
pop ecx
imul ecx, ecx, 3
cmp eax, dword [ebp + ecx - 0x164]
jg 0x100260c1
push 4
pop eax
imul eax, eax, 3
cmp dword [ebp + eax - 0x164], 0
push 4
pop eax
imul eax, eax, 3
mov eax, dword [ebp + eax - 0x164]
push 4
pop ecx
shl ecx, 0
add eax, dword [ebp + ecx - 0x140]
je 0x1002613a
mov dword [ebp - 0x24], 1
jmp 0x100260ed
mov eax, dword [ebp - 0x24]
dec eax
mov dword [ebp - 0x24], eax
cmp dword [ebp - 0x24], 0
jl 0x10026121
mov eax, dword [ebp - 0x30]
cmp dword [ebp + eax*4 - 0x140], 0
jne 0x1002610c
mov dword [ebp - 0xcc], 1
jmp 0x10026113
and dword [ebp - 0xcc], 0
mov eax, dword [ebp - 0xcc]
mov dword [ebp - 0xdc], eax
jmp 0x100260e6
mov byte [ebp - 0x27], 0
movzx eax, byte [ebp - 0x27]
test eax, eax
je 0x10026135
push 1
call fcn.10025a10
pop ecx
jmp 0x10026216
mov dword [ebp - 0x5c], 0
jmp 0x1002614a
mov eax, dword [ebp - 0x5c]
inc eax
mov dword [ebp - 0x5c], eax
cmp dword [ebp - 0x5c], 1
jge 0x10026160
mov eax, dword [ebp - 0x5c]
mov dword [ebp + eax*4 - 0x184], 0x5d0
jmp 0x10026143
mov dword [ebp - 0x34], 0
jmp 0x10026170
mov eax, dword [ebp - 0x34]
inc eax
mov dword [ebp - 0x34], eax
cmp dword [ebp - 0x34], 1
jg 0x10026216
mov dword [ebp - 0x70], 0xffffffff
cmp dword [ebp - 0x70], 0
je 0x1002619c
mov eax, 0xd441
test eax, eax
je 0x1002619c
mov dword [ebp - 0x104], 1
jmp 0x100261a3
and dword [ebp - 0x104], 0
mov eax, dword [ebp - 0x70]
cmp eax, dword [ebp - 0x104]
jle 0x100261b7
mov dword [ebp - 0x64], 1
jmp 0x100261bb
and dword [ebp - 0x64], 0
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x64]
mov dword [ebp + eax - 0x184], ecx
mov eax, dword [ebp - 0x64]
inc eax
cmp dword [ebp - 0x24], eax
jge 0x100261e0
mov dword [ebp - 0xd4], 1
jmp 0x100261e7
and dword [ebp - 0xd4], 0
mov eax, dword [ebp - 0x70]
cmp dword [ebp - 0xd4], eax
jg 0x100261fe
mov dword [ebp - 0x12c], 1
jmp 0x10026205
and dword [ebp - 0x12c], 0
mov eax, dword [ebp - 0x12c]
mov dword [ebp - 0xdc], eax
jmp 0x10026169
jmp 0x10025efe
mov eax, dword [ebp - 0x74]
mov eax, dword [eax + 0x24]
and eax, 0x40
je 0x1002677f
mov dword [ebp - 0x18], 1
mov dword [ebp - 0x3c], 0xfffffffb
mov dword [ebp - 8], 0
jmp 0x10026248
mov eax, dword [ebp - 8]
inc eax
mov dword [ebp - 8], eax
cmp dword [ebp - 8], 1
jge 0x1002625b
mov eax, dword [ebp - 8]
mov dword [ebp + eax*4 - 0xc], 0
jmp 0x10026241
mov dword [ebp - 8], 0
jmp 0x1002626b
mov eax, dword [ebp - 8]
inc eax
mov dword [ebp - 8], eax
cmp dword [ebp - 8], 1
jge 0x1002627e
mov eax, dword [ebp - 8]
mov dword [ebp + eax*4 - 0x38], 0xa6d0811
jmp 0x10026264
mov dword [ebp - 8], 0
jmp 0x1002628e
mov eax, dword [ebp - 8]
inc eax
mov dword [ebp - 8], eax
cmp dword [ebp - 8], 3
jge 0x100262a4
mov eax, dword [ebp - 8]
mov dword [ebp + eax*4 - 0x154], 1
jmp 0x10026287
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0xc]
mov dword [ebp - 0x1e4], eax
mov eax, dword [ebp - 0x18]
push 4
pop ecx
imul ecx, ecx, 0
sub eax, dword [ebp + ecx - 0xc]
mov dword [ebp - 0x3c], eax
cmp dword [ebp - 0x3c], 0xebf8
jge 0x100262d9
mov dword [ebp - 0x10c], 1
jmp 0x100262e0
and dword [ebp - 0x10c], 0
cmp dword [ebp - 0x10c], 2
jl 0x100262f5
mov dword [ebp - 0xe4], 1
jmp 0x100262fc
and dword [ebp - 0xe4], 0
cmp dword [ebp - 0xe4], 0xc422
je 0x10026314
mov dword [ebp - 0x124], 1
jmp 0x1002631b
and dword [ebp - 0x124], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0xc]
cmp dword [ebp - 0x124], eax
jle 0x10026339
mov dword [ebp - 0x180], 1
jmp 0x10026340
and dword [ebp - 0x180], 0
mov eax, dword [ebp - 0x18]
mov dword [ebp - 0x1cc], eax
xor eax, eax
cmp eax, 0x1a6b719d
je 0x1002635b
mov dword [ebp - 0x78], 1
jmp 0x1002635f
and dword [ebp - 0x78], 0
cmp dword [ebp - 0x78], 0
jg 0x1002636e
mov dword [ebp - 0x68], 1
jmp 0x10026372
and dword [ebp - 0x68], 0
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x68]
mov dword [ebp + eax - 0x38], ecx
push 4
pop eax
imul eax, eax, 0
push 4
pop ecx
imul ecx, ecx, 0
mov ecx, dword [ebp + ecx - 0xc]
add ecx, dword [ebp - 0x68]
sub ecx, dword [ebp + eax - 0xc]
cmp ecx, dword [ebp - 0x18]
jle 0x100263a7
mov dword [ebp - 0x114], 1
jmp 0x100263ae
and dword [ebp - 0x114], 0
cmp dword [ebp - 0x114], 0xe2db58e4
ja 0x100266b4
mov dword [ebp - 0x10], 0
mov dword [ebp - 0x44], 7
mov dword [ebp - 0x6c], 0xc964b5ad
mov dword [ebp - 0x40], 0
jmp 0x100263e3
mov eax, dword [ebp - 0x40]
inc eax
mov dword [ebp - 0x40], eax
cmp dword [ebp - 0x40], 3
jge 0x100263f9
mov eax, dword [ebp - 0x40]
mov dword [ebp + eax*4 - 0x200], 0xfffffffc
jmp 0x100263dc
mov eax, dword [ebp - 0x18]
mov dword [ebp - 0x19c], eax
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x154]
dec eax
push 4
pop ecx
imul ecx, ecx, 0
imul eax, dword [ebp + ecx - 0x154]
cmp eax, 0xd6b22149
jb 0x10026431
mov dword [ebp - 0xac], 1
jmp 0x10026438
and dword [ebp - 0xac], 0
mov eax, dword [ebp - 0x10]
cmp dword [ebp - 0xac], eax
jg 0x1002644f
mov dword [ebp - 0xa0], 1
jmp 0x10026456
and dword [ebp - 0xa0], 0
mov eax, dword [ebp - 0x10]
cmp eax, dword [ebp - 0xa0]
jne 0x1002646d
mov dword [ebp - 0xb8], 1
jmp 0x10026474
and dword [ebp - 0xb8], 0
mov eax, dword [ebp - 0x10]
imul eax, dword [ebp - 0xb8]
add eax, 7
mov dword [ebp - 0x44], eax
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x10]
cmp dword [ebp + eax - 0xc], ecx
jge 0x1002649f
mov dword [ebp - 0xc0], 1
jmp 0x100264a6
and dword [ebp - 0xc0], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0xc]
cmp dword [ebp - 0xc0], eax
jg 0x100264c4
mov dword [ebp - 0xc8], 1
jmp 0x100264cb
and dword [ebp - 0xc8], 0
cmp dword [ebp - 0xc8], 0xc844fc3
jle 0x100264e3
mov dword [ebp - 0xd0], 1
jmp 0x100264ea
and dword [ebp - 0xd0], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x38]
cmp dword [ebp - 0xd0], eax
jle 0x10026508
mov dword [ebp - 0xd8], 1
jmp 0x1002650f
and dword [ebp - 0xd8], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0xc]
add eax, dword [ebp - 0xd8]
cmp eax, dword [ebp - 0x10]
je 0x10026530
mov dword [ebp - 0xe0], 1
jmp 0x10026537
and dword [ebp - 0xe0], 0
mov eax, dword [ebp - 0xe0]
mov dword [ebp - 0x10], eax
mov dword [ebp - 0x3c], 0x23fe2983
mov eax, dword [ebp - 0x3c]
mov dword [ebp - 0x10], eax
mov eax, dword [ebp - 0x10]
add eax, dword [ebp - 0x44]
cmp eax, dword [ebp - 0x44]
jl 0x10026564
mov dword [ebp - 0xe8], 1
jmp 0x1002656b
and dword [ebp - 0xe8], 0
push 4
pop eax
shl eax, 1
mov eax, dword [ebp + eax - 0x154]
add eax, dword [ebp - 0xe8]
je 0x10026583
cmp dword [ebp - 0x10], 0
mov eax, 0x32651ef2
cmp eax, 0xfffffff9
jge 0x10026599
mov dword [ebp - 0xf0], 1
jmp 0x100265a0
and dword [ebp - 0xf0], 0
mov eax, dword [ebp - 0xf0]
sub eax, 0xc575e2b
cmp eax, dword [ebp - 0x44]
jne 0x100265bc
mov dword [ebp - 0xf8], 1
jmp 0x100265c3
and dword [ebp - 0xf8], 0
mov eax, dword [ebp - 0xf8]
mov dword [ebp - 0x6c], eax
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0xc]
cmp dword [ebp - 0x6c], eax
jl 0x100265e7
mov dword [ebp - 0x16c], 1
jmp 0x100265ee
and dword [ebp - 0x16c], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x38]
mov dword [ebp - 0x1a0], eax
push 4
pop eax
shl eax, 1
mov eax, dword [ebp + eax - 0x154]
mov dword [ebp - 0x1a8], eax
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x154]
mov dword [ebp - 0x1b0], eax
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x154]
mov dword [ebp - 0x1b8], eax
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x38]
mov dword [ebp - 0x1c0], eax
cmp dword [ebp - 0x10], 0
jne 0x1002665b
cmp dword [ebp - 0x6c], 0
jne 0x1002665b
and dword [ebp - 0x100], 0
jmp 0x10026665
mov dword [ebp - 0x100], 1
cmp dword [ebp - 0x100], 0x594a39b7
je 0x1002667d
mov dword [ebp - 0x108], 1
jmp 0x10026684
and dword [ebp - 0x108], 0
cmp dword [ebp - 0x108], 7
ja 0x10026699
mov dword [ebp - 0x110], 1
jmp 0x100266a0
and dword [ebp - 0x110], 0
push 4
pop eax
shl eax, 1
mov ecx, dword [ebp - 0x110]
mov dword [ebp + eax - 0x200], ecx
jmp 0x100266d9
mov byte [ebp - 0x25], 0
movzx eax, byte [ebp - 0x25]
test eax, eax
je 0x100266d9
push 0
push 0
push 0
push 0
push 0
push 0
push 0x100a
push 0
call dword [sym.imp.ADVAPI32.dll_RegEnumKeyExW]
mov dword [ebp - 0x18], 0
jmp 0x100266e9
mov eax, dword [ebp - 0x18]
inc eax
mov dword [ebp - 0x18], eax
cmp dword [ebp - 0x18], 0
jg 0x1002676d
mov dword [ebp - 0x174], 0xb78960bd
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x38], 0
je 0x10026708
jmp 0x1002676d
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0xc], 0
je 0x10026727
mov eax, 0x7809
test eax, eax
je 0x10026727
mov dword [ebp - 0x7c], 1
jmp 0x1002672b
and dword [ebp - 0x7c], 0
mov eax, dword [ebp - 0x3c]
cmp dword [ebp - 0x7c], eax
je 0x1002673c
mov dword [ebp - 0x80], 1
jmp 0x10026740
and dword [ebp - 0x80], 0
cmp dword [ebp - 0x80], 0xffc8ecea
jne 0x10026755
mov dword [ebp - 0x88], 1
jmp 0x1002675c
and dword [ebp - 0x88], 0
mov eax, dword [ebp - 0x88]
mov dword [ebp - 0x174], eax
jmp 0x100266e2
mov eax, dword [ebp - 0x90]
mov eax, dword [eax]
mov ecx, dword [ebp - 0x4c]
mov eax, dword [eax + 0x20]
mov dword [ecx], eax
jmp 0x100267ab
mov eax, dword [ebp - 0x74]
mov eax, dword [eax + 0x24]
and eax, 0x80
je 0x100267ab
lea eax, [ebp - 0x90]
push eax
lea eax, [ebp - 0x4c]
push eax
push 0x437c
push 0x3004
push 0
call fcn.10026dc3
add esp, 0x14
jmp 0x100267d3
mov eax, dword [ebp + 0x10]
mov dword [ebp - 0x17c], eax
mov eax, dword [ebp - 0x17c]
mov dword [ebp - 0x98], eax
mov eax, dword [ebp - 0x98]
mov eax, dword [eax]
inc eax
mov ecx, dword [ebp - 0x98]
mov dword [ecx], eax
mov esp, ebp
pop ebp
ret