Function at 0x100576b8
Capabilities:
Query or enumerate registry key
Query or enumerate registry value

Disassembly:
push ebp
sub esp, 0x280
lea ebp, [esp - 4]
mov eax, dword [0x10113a30]
xor eax, ebp
mov dword [ebp + 0x280], eax
push 0x28
mov eax, 0x100bec04
call fcn.10092efa
push str._RC__RaWLAPI______MS80211::IsDuplicateProfileID___n
push 3
mov esi, ecx
call fcn.1000926a
xor ebx, ebx
push pe_nt_image_headers32
lea eax, [ebp]
push ebx
push eax
mov dword [ebp - 0x10], ebx
mov dword [ebp - 0x18], ebx
call fcn.1008ef90
lea eax, [ebp]
push eax
call fcn.1000a470
add esp, 0x18
add esi, 0x84
push esi
lea eax, [ebp]
push eax
call dword [sym.imp.KERNEL32.dll_lstrcatA]
lea eax, [ebp]
push eax
lea ecx, [ebp - 0x14]
call fcn.10007f0d
push str.ProfileStation
lea ecx, [ebp - 0x14]
mov dword [ebp - 4], ebx
call fcn.100139af
mov esi, dword [sym.imp.ADVAPI32.dll_RegOpenKeyExA]
lea eax, [ebp - 0x10]
push eax
push 0x20019
push ebx
push dword [ebp - 0x14]
mov edi, reloc.OLEAUT32.dll_SysReAllocString
push edi
call esi
test eax, eax
je 0x100331ac
push dword [ebp - 0x14]
lea eax, [ebp + 0x200]
push str.RegOpenKeyEx__hs_failed_n
push eax
call fcn.1008e5f7
lea eax, [ebp + 0x200]
push eax
push 1
call fcn.1000926a
mov ecx, dword [ebp - 0x14]
add esp, 0x14
add ecx, 0xfffffff0
call fcn.10001210
push 2
pop eax
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov ecx, dword [ebp + 0x280]
xor ecx, ebp
call fcn.1008e5e8
add ebp, 0x284
leave
ret 4
lea eax, [ebp - 0x34]
push eax
push ebx
push ebx
push ebx
lea eax, [ebp - 0x1c]
push eax
lea eax, [ebp + 0x180]
push eax
push ebx
push dword [ebp - 0x10]
mov dword [ebp - 0x24], ebx
mov byte [ebp + 0x180], bl
mov dword [ebp - 0x1c], 0x80
call dword [sym.imp.ADVAPI32.dll_RegEnumKeyExA]
test eax, eax
jne 0x1003338c
push 0x100cdb34
lea eax, [ebp - 0x14]
push eax
lea eax, [ebp - 0x28]
push eax
call fcn.1002a739
lea ecx, [ebp + 0x180]
push ecx
push eax
lea eax, [ebp - 0x20]
push eax
mov byte [ebp - 4], 1
call fcn.1002a739
add esp, 0x18
mov ecx, dword [ebp - 0x28]
add ecx, 0xfffffff0
mov byte [ebp - 4], 3
call fcn.10001210
lea eax, [ebp - 0x18]
push eax
push 0x20019
push ebx
push dword [ebp - 0x20]
push edi
call esi
test eax, eax
jne 0x1003331b
mov eax, 0x80
push eax
mov dword [ebp - 0x1c], eax
lea eax, [ebp + 0x100]
push ebx
push eax
call fcn.1008ef90
add esp, 0xc
lea eax, [ebp - 0x1c]
push eax
lea eax, [ebp + 0x100]
push eax
lea eax, [ebp - 0x2c]
push eax
push ebx
push str.ProfileID
push dword [ebp - 0x18]
call dword [sym.imp.ADVAPI32.dll_RegQueryValueExA]
test eax, eax
je 0x10033290
lea eax, [ebp + 0x200]
push str.RegQueryValueEx_REGSTR_PROFILE_IDENTITY_failed_n
push eax
call fcn.1008e5f7
lea eax, [ebp + 0x200]
push eax
push 1
call fcn.1000926a
add esp, 0x10
jmp 0x100332a9
lea eax, [ebp + 0x100]
push eax
call fcn.10091cb3
cmp eax, dword [ebp + 0x28c]
pop ecx
je 0x1003336e
cmp dword [ebp - 0x18], ebx
je 0x100332b7
push dword [ebp - 0x18]
call dword [sym.imp.ADVAPI32.dll_RegCloseKey]
mov ecx, dword [ebp - 0x20]
add ecx, 0xfffffff0
mov byte [ebp - 4], bl
call fcn.10001210
inc dword [ebp - 0x24]
lea eax, [ebp - 0x34]
push eax
push ebx
push ebx
push ebx
lea eax, [ebp - 0x1c]
push eax
lea eax, [ebp + 0x180]
push eax
push dword [ebp - 0x24]
mov byte [ebp + 0x180], bl
push dword [ebp - 0x10]
mov dword [ebp - 0x1c], 0x80
call dword [sym.imp.ADVAPI32.dll_RegEnumKeyExA]
test eax, eax
je 0x100331e0
cmp dword [ebp - 0x24], 0x100
jne 0x1003338c
cmp dword [ebp - 0x10], ebx
je 0x10033316
push dword [ebp - 0x10]
call dword [sym.imp.ADVAPI32.dll_RegCloseKey]
push 3
pop ebx
jmp 0x1003335c
push dword [ebp - 0x20]
lea eax, [ebp + 0x200]
push str.RegOpenKeyEx__hs_failed_n
push eax
call fcn.1008e5f7
lea eax, [ebp + 0x200]
push eax
push 1
call fcn.1000926a
add esp, 0x14
cmp dword [ebp - 0x10], ebx
je 0x1003334e
push dword [ebp - 0x10]
call dword [sym.imp.ADVAPI32.dll_RegCloseKey]
push 2
pop ebx
mov ecx, dword [ebp - 0x20]
add ecx, 0xfffffff0
call fcn.10001210
mov ecx, dword [ebp - 0x14]
add ecx, 0xfffffff0
call fcn.10001210
mov eax, ebx
jmp 0x10033187
cmp dword [ebp - 0x18], ebx
je 0x1003337c
push dword [ebp - 0x18]
call dword [sym.imp.ADVAPI32.dll_RegCloseKey]
cmp dword [ebp - 0x10], ebx
je 0x10033351
push dword [ebp - 0x10]
call dword [sym.imp.ADVAPI32.dll_RegCloseKey]
jmp 0x10033351
cmp dword [ebp - 0x10], ebx
je 0x1003339a
push dword [ebp - 0x10]
call dword [sym.imp.ADVAPI32.dll_RegCloseKey]
push 0x100df678
push 3
call fcn.1000926a
pop ecx
xor ebx, ebx
pop ecx
inc ebx
jmp 0x1003335c
cmp byte [0x1011c700], 0
jne 0x100576c6
push 2
pop eax
jmp 0x100576e6
push esi
mov esi, 0x1011c88c
push esi
call fcn.10001272
test eax, eax
pop ecx
je 0x100576e2
push esi
call fcn.10001b5e
test eax, eax
pop ecx
jne 0x100576e9
push 2
pop eax
pop esi
ret 4
mov ecx, dword [0x1011cc1c]
pop esi
jmp 0x100330b3