Function at 0x100017f0
Capabilities:
Query or enumerate registry key
Query or enumerate registry value

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x724
push ebx
push esi
push edi
lea eax, [ebp - 0x10]
mov dword [ebp - 0x18], 0
push eax
push 0x20219
push 0
mov ecx, str.ZnxzZ2JyZ3ZpflxQR1xGXFNHaWRcXVFcQkBpcEBBR1ZbR2NWR0BcXFtvfF1GR1RfWVZHb2BAUEFxUkFS
mov dword [ebp - 0xc], 0xff
call fcn.100013b0
mov esi, dword [sym.imp.ADVAPI32.dll_RegOpenKeyExA]
push eax
push 0x80000002
call esi
mov edi, dword [sym.imp.ADVAPI32.dll_RegCloseKey]
test eax, eax
jne 0x100019d5
mov ebx, dword [sym.imp.ADVAPI32.dll_RegEnumKeyExA]
lea eax, [ebp - 0xc]
push 0
push 0
push 0
push 0
push eax
lea eax, [ebp - 0x120]
push eax
push 0
push dword [ebp - 0x10]
call ebx
test eax, eax
jne 0x10001b7b
lea eax, [ebp - 0x120]
mov ecx, str.ZnxzZ2JyZ3ZpflxQR1xGXFNHaWRcXVFcQkBpcEBBR1ZbR2NWR0BcXFtvfF1GR1RfWVZHb2BAUEFxUkFS
push eax
call fcn.100013b0
push eax
push str._s_sProducts
lea eax, [ebp - 0x520]
push 0x200
push eax
call fcn.10001050
add esp, 0x14
lea eax, [ebp - 8]
push eax
push 0x20219
push 0
lea eax, [ebp - 0x520]
push eax
push 0x80000002
call esi
test eax, eax
jne 0x1000199a
xor esi, esi
mov dword [ebp - 4], 0xff
push esi
push esi
push esi
push esi
lea eax, [ebp - 4]
push eax
lea eax, [ebp - 0x220]
push eax
push esi
push dword [ebp - 8]
call ebx
test eax, eax
jne 0x1000198f
nop word [eax + eax]
lea eax, [ebp - 0x220]
push eax
lea eax, [ebp - 0x520]
push eax
push str._s_sInstallProperties
lea eax, [ebp - 0x720]
push 0x200
push eax
call fcn.10001050
add esp, 0x14
lea eax, [ebp - 0x14]
push eax
push 0x20219
push 0
lea eax, [ebp - 0x720]
push eax
push 0x80000002
call dword [sym.imp.ADVAPI32.dll_RegOpenKeyExA]
test eax, eax
jne 0x10001966
lea eax, [ebp - 0x1c]
mov dword [ebp - 0x1c], 0xff
push eax
lea eax, [ebp - 0x320]
mov ecx, str.cVpGQ1lSTH1UXlA
push eax
push 0
push 0
call fcn.100013b0
push eax
push dword [ebp - 0x14]
call dword [sym.imp.ADVAPI32.dll_RegQueryValueExA]
test eax, eax
jne 0x10001961
lea ecx, [ebp - 0x320]
call fcn.10001510
push dword [ebp - 0x14]
call edi
push 0
push 0
push 0
push 0
lea eax, [ebp - 4]
mov dword [ebp - 4], 0xff
push eax
lea eax, [ebp - 0x220]
inc esi
push eax
push esi
push dword [ebp - 8]
call ebx
test eax, eax
je 0x100018e0
push dword [ebp - 8]
call edi
mov esi, dword [sym.imp.ADVAPI32.dll_RegOpenKeyExA]
mov eax, dword [ebp - 0x18]
lea ecx, [ebp - 0xc]
push 0
push 0
push 0
push 0
push ecx
lea ecx, [ebp - 0x120]
mov dword [ebp - 0xc], 0xff
inc eax
push ecx
push eax
push dword [ebp - 0x10]
mov dword [ebp - 0x18], eax
call ebx
test eax, eax
je 0x10001863
push dword [ebp - 0x10]
call edi
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret
lea eax, [ebp - 0x10]
mov ecx, str.ZnxzZ2JyZ3ZpflxQR1xGXFNHaWRcXVFcQkBpcEBBR1ZbR2NWR0BcXFtvfF1GR1RfWVZHb2BAUEFxUkFS
push eax
push 0x20119
push 0
call fcn.100013b0
push eax
push 0x80000002
call esi
test eax, eax
jne 0x10001b7b
mov ebx, dword [sym.imp.ADVAPI32.dll_RegEnumKeyExA]
push eax
push eax
push eax
push eax
lea eax, [ebp - 0xc]
push eax
lea eax, [ebp - 0x120]
push eax
push 0
push dword [ebp - 0x10]
call ebx
test eax, eax
jne 0x10001b7b
nop
lea eax, [ebp - 0x120]
mov ecx, str.ZnxzZ2JyZ3ZpflxQR1xGXFNHaWRcXVFcQkBpcEBBR1ZbR2NWR0BcXFtvfF1GR1RfWVZHb2BAUEFxUkFS
push eax
call fcn.100013b0
push eax
push str._s_sProducts
lea eax, [ebp - 0x520]
push 0x200
push eax
call fcn.10001050
add esp, 0x14
lea eax, [ebp - 4]
push eax
push 0x20119
push 0
lea eax, [ebp - 0x520]
push eax
push 0x80000002
call esi
test eax, eax
jne 0x10001b4c
xor esi, esi
mov dword [ebp - 8], 0xff
push esi
push esi
push esi
push esi
lea eax, [ebp - 8]
push eax
lea eax, [ebp - 0x220]
push eax
push esi
push dword [ebp - 4]
call ebx
test eax, eax
jne 0x10001b41
lea eax, [ebp - 0x220]
push eax
lea eax, [ebp - 0x520]
push eax
push str._s_sInstallProperties
lea eax, [ebp - 0x720]
push 0x200
push eax
call fcn.10001050
add esp, 0x14
lea eax, [ebp - 0x14]
push eax
push 0x20119
push 0
lea eax, [ebp - 0x720]
push eax
push 0x80000002
call dword [sym.imp.ADVAPI32.dll_RegOpenKeyExA]
test eax, eax
jne 0x10001b18
lea eax, [ebp - 0x1c]
mov dword [ebp - 0x1c], 0xff
push eax
lea eax, [ebp - 0x320]
mov ecx, str.cVpGQ1lSTH1UXlA
push eax
push 0
push 0
call fcn.100013b0
push eax
push dword [ebp - 0x14]
call dword [sym.imp.ADVAPI32.dll_RegQueryValueExA]
test eax, eax
jne 0x10001b13
lea ecx, [ebp - 0x320]
call fcn.10001510
push dword [ebp - 0x14]
call edi
push 0
push 0
push 0
push 0
lea eax, [ebp - 8]
mov dword [ebp - 8], 0xff
push eax
lea eax, [ebp - 0x220]
inc esi
push eax
push esi
push dword [ebp - 4]
call ebx
test eax, eax
je 0x10001a92
push dword [ebp - 4]
call edi
mov esi, dword [sym.imp.ADVAPI32.dll_RegOpenKeyExA]
mov eax, dword [ebp - 0x18]
lea ecx, [ebp - 0xc]
push 0
push 0
push 0
push 0
push ecx
lea ecx, [ebp - 0x120]
mov dword [ebp - 0xc], 0xff
inc eax
push ecx
push eax
push dword [ebp - 0x10]
mov dword [ebp - 0x18], eax
call ebx
test eax, eax
je 0x10001a20
push dword [ebp - 0x10]
call edi
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret