Function at 0x100191b0
Capabilities:
Query or enumerate registry value
Set registry value

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x2f0
mov eax, dword [0x1008bb60]
xor eax, ebp
mov dword [ebp - 4], eax
mov dword [ebp - 0x240], 0x200
mov byte [ebp - 0x208], 0
push 0x1ff
push 0
lea eax, [ebp - 0x207]
push eax
call fcn.10041d70
add esp, 0xc
mov byte [ebp - 0x23c], 0
push 0x31
push 0
lea ecx, [ebp - 0x23b]
push ecx
call fcn.10041d70
add esp, 0xc
lea edx, [ebp - 0x23c]
push edx
call sym.PatchCore.dll_GetNetBiosMacAddresses
add esp, 4
push ecx
mov ecx, esp
mov dword [ebp - 0x298], esp
push str.IR_00:_r_n
call fcn.10002ce0
call fcn.1001c670
add esp, 4
lea eax, [ebp - 0x244]
push eax
push 0x2001f
push 0
push 0x10073c48
push reloc.OLEAUT32.dll_SysReAllocString
call dword [sym.imp.ADVAPI32.dll_RegOpenKeyExA]
test eax, eax
jne 0x1001950c
push ecx
mov ecx, esp
mov dword [ebp - 0x29c], esp
push 0x10073c64
call fcn.10002ce0
call fcn.1001c670
add esp, 4
lea ecx, [ebp - 0x240]
push ecx
lea edx, [ebp - 0x208]
push edx
push 0
push 0
push 0x10073c70
mov eax, dword [ebp - 0x244]
push eax
call dword [sym.imp.ADVAPI32.dll_RegQueryValueExA]
test eax, eax
jne 0x100194df
push ecx
mov ecx, esp
mov dword [ebp - 0x2a0], esp
push str.IR_02:_r_n
call fcn.10002ce0
call fcn.1001c670
add esp, 4
cmp dword [ebp + 8], 1
jne 0x100194df
push ecx
mov ecx, esp
mov dword [ebp - 0x2a4], esp
push 0x10073c84
call fcn.10002ce0
call fcn.1001c670
add esp, 4
call fcn.10019150
mov dword [ebp - 0x24c], eax
lea ecx, [ebp - 0x248]
call fcn.100016b0
cmp dword [ebp - 0x24c], 0xffffff9c
je 0x100194b9
mov ecx, dword [ebp - 0x24c]
push ecx
push str.IR_04:_d_r_n
lea edx, [ebp - 0x248]
push edx
call fcn.100030c0
add esp, 0xc
push ecx
mov ecx, esp
mov dword [ebp - 0x2a8], esp
lea eax, [ebp - 0x248]
push eax
call fcn.10002cc0
call fcn.1001c670
add esp, 4
lea ecx, [ebp - 0x268]
call fcn.100016b0
lea ecx, [ebp - 0x208]
push ecx
lea ecx, [ebp - 0x268]
call fcn.10001710
push 0x10073c9c
lea edx, [ebp - 0x268]
push edx
push 0x10073ca0
lea eax, [ebp - 0x2ac]
push eax
call fcn.10025a00
add esp, 0xc
push eax
lea ecx, [ebp - 0x2b0]
push ecx
call fcn.10002af0
add esp, 0xc
push eax
lea ecx, [ebp - 0x268]
call fcn.100016f0
lea ecx, [ebp - 0x2b0]
call fcn.100016d0
lea ecx, [ebp - 0x2ac]
call fcn.100016d0
call fcn.10001600
mov dword [ebp - 0x26c], eax
push 0
lea ecx, [ebp - 0x268]
call fcn.10001730
mov dword [ebp - 0x270], eax
cmp dword [ebp - 0x270], 0
jne 0x100193d8
mov dword [ebp - 0x2dc], 0
jmp 0x1001944c
mov edx, dword [ebp - 0x270]
push edx
call dword [sym.imp.KERNEL32.dll_lstrlenA]
add eax, 1
mov dword [ebp - 0x250], eax
cmp dword [ebp - 0x250], 0x3fffffff
jle 0x10019406
mov dword [ebp - 0x2e0], 0
jmp 0x10019440
mov eax, dword [ebp - 0x250]
shl eax, 1
call fcn.10041b20
mov dword [ebp - 0x2e4], esp
mov eax, dword [ebp - 0x26c]
push eax
mov ecx, dword [ebp - 0x250]
push ecx
mov edx, dword [ebp - 0x270]
push edx
mov eax, dword [ebp - 0x2e4]
push eax
call fcn.10001610
mov dword [ebp - 0x2e0], eax
mov ecx, dword [ebp - 0x2e0]
mov dword [ebp - 0x2dc], ecx
lea edx, [ebp - 0x260]
push edx
mov eax, dword [ebp - 0x2dc]
push eax
call dword [sym.imp.ole32.dll_CLSIDFromString]
sub esp, 0x10
mov ecx, esp
mov edx, dword [ebp - 0x260]
mov dword [ecx], edx
mov eax, dword [ebp - 0x25c]
mov dword [ecx + 4], eax
mov edx, dword [ebp - 0x258]
mov dword [ecx + 8], edx
mov eax, dword [ebp - 0x254]
mov dword [ecx + 0xc], eax
lea ecx, [ebp - 0x23c]
push ecx
push 1
mov edx, dword [ebp + 0xc]
push edx
call sym.PatchCore.dll_CreatePublicInfo
add esp, 0x1c
mov eax, dword [ebp - 0x24c]
push eax
call fcn.10017650
add esp, 4
lea ecx, [ebp - 0x268]
call fcn.100016d0
jmp 0x100194d4
push ecx
mov ecx, esp
mov dword [ebp - 0x2b4], esp
push str.IR_05:_r_n
call fcn.10002ce0
call fcn.1001c670
add esp, 4
lea ecx, [ebp - 0x248]
call fcn.100016d0
push ecx
mov ecx, esp
mov dword [ebp - 0x2b8], esp
push str.IR_06:_r_n
call fcn.10002ce0
call fcn.1001c670
add esp, 4
mov ecx, dword [ebp - 0x244]
push ecx
call dword [sym.imp.ADVAPI32.dll_RegCloseKey]
jmp 0x10019764
push ecx
mov ecx, esp
mov dword [ebp - 0x2bc], esp
push str.IR_07:_r_n
call fcn.10002ce0
call fcn.1001c670
add esp, 4
lea edx, [ebp - 0x244]
push edx
push 0x10073cc8
push reloc.OLEAUT32.dll_SysReAllocString
call dword [sym.imp.ADVAPI32.dll_RegCreateKeyA]
push 0x1008d608
call fcn.10041b50
add esp, 4
push eax
push 0x1008d608
push 1
push 0
push 0x10073ce4
mov eax, dword [ebp - 0x244]
push eax
call dword [sym.imp.ADVAPI32.dll_RegSetValueExA]
test eax, eax
jne 0x1001972e
push ecx
mov ecx, esp
mov dword [ebp - 0x2c0], esp
push str.IR_08:_r_n
call fcn.10002ce0
call fcn.1001c670
add esp, 4
lea ecx, [ebp - 0x28c]
call fcn.100016b0
push 0x1008d608
lea ecx, [ebp - 0x28c]
call fcn.10001710
push 0x10073cf8
lea ecx, [ebp - 0x28c]
push ecx
push 0x10073cfc
lea edx, [ebp - 0x2c4]
push edx
call fcn.10025a00
add esp, 0xc
push eax
lea eax, [ebp - 0x2c8]
push eax
call fcn.10002af0
add esp, 0xc
push eax
lea ecx, [ebp - 0x28c]
call fcn.100016f0
lea ecx, [ebp - 0x2c8]
call fcn.100016d0
lea ecx, [ebp - 0x2c4]
call fcn.100016d0
call fcn.10001600
mov dword [ebp - 0x290], eax
push 0
lea ecx, [ebp - 0x28c]
call fcn.10001730
mov dword [ebp - 0x294], eax
cmp dword [ebp - 0x294], 0
jne 0x1001962a
mov dword [ebp - 0x2e8], 0
jmp 0x1001969e
mov ecx, dword [ebp - 0x294]
push ecx
call dword [sym.imp.KERNEL32.dll_lstrlenA]
add eax, 1
mov dword [ebp - 0x274], eax
cmp dword [ebp - 0x274], 0x3fffffff
jle 0x10019658
mov dword [ebp - 0x2ec], 0
jmp 0x10019692
mov eax, dword [ebp - 0x274]
shl eax, 1
call fcn.10041b20
mov dword [ebp - 0x2f0], esp
mov edx, dword [ebp - 0x290]
push edx
mov eax, dword [ebp - 0x274]
push eax
mov ecx, dword [ebp - 0x294]
push ecx
mov edx, dword [ebp - 0x2f0]
push edx
call fcn.10001610
mov dword [ebp - 0x2ec], eax
mov eax, dword [ebp - 0x2ec]
mov dword [ebp - 0x2e8], eax
lea ecx, [ebp - 0x284]
push ecx
mov edx, dword [ebp - 0x2e8]
push edx
call dword [sym.imp.ole32.dll_CLSIDFromString]
sub esp, 0x10
mov eax, esp
mov ecx, dword [ebp - 0x284]
mov dword [eax], ecx
mov edx, dword [ebp - 0x280]
mov dword [eax + 4], edx
mov ecx, dword [ebp - 0x27c]
mov dword [eax + 8], ecx
mov edx, dword [ebp - 0x278]
mov dword [eax + 0xc], edx
lea eax, [ebp - 0x23c]
push eax
push 1
mov ecx, dword [ebp + 0xc]
push ecx
call sym.PatchCore.dll_CreatePublicInfo
add esp, 0x1c
push ecx
mov ecx, esp
mov dword [ebp - 0x2cc], esp
push str.IR_03:_r_n
call fcn.10002ce0
call fcn.1001c670
add esp, 4
push 0
call fcn.10017650
add esp, 4
mov edx, dword [ebp - 0x244]
push edx
call dword [sym.imp.ADVAPI32.dll_RegCloseKey]
lea ecx, [ebp - 0x28c]
call fcn.100016d0
jmp 0x10019749
push ecx
mov ecx, esp
mov dword [ebp - 0x2d0], esp
push str.IR_09:_r_n
call fcn.10002ce0
call fcn.1001c670
add esp, 4
push ecx
mov ecx, esp
mov dword [ebp - 0x2d4], esp
push str.IR_10:_r_n
call fcn.10002ce0
call fcn.1001c670
add esp, 4
push ecx
mov ecx, esp
mov dword [ebp - 0x2d8], esp
push str.IR_01:_r_n
call fcn.10002ce0
call fcn.1001c670
add esp, 4
call fcn.100176f0
lea esp, [ebp - 0x2f0]
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.10041acb
mov esp, ebp
pop ebp
ret