Function at 0x1001fadc
Capabilities:
Query or enumerate registry key

Disassembly:
mov eax, 0x1006465c
call fcn.10063468
sub esp, 0xd0
push ebx
push esi
mov dword [ebp - 0x14], 0x2d94
xor ebx, ebx
cmp dword [ebp - 0x14], 0x2e90
push edi
mov dword [ebp - 0x10], esp
jle 0x1001fb59
mov esi, ebx
mov edi, ebx
mov ecx, edi
mov eax, esi
sar eax, cl
lea ecx, [ebp - 0xc4]
cdq
push edx
push eax
call fcn.10002a87
pop ecx
pop ecx
cmp dword [eax + 0x14], 0x10
jb 0x1001fb26
mov eax, dword [eax]
push eax
call fcn.1004e245
pop ecx
push ebx
push 1
lea ecx, [ebp - 0xc4]
call fcn.10011503
inc edi
cmp edi, 0x5602
jl 0x1001fb08
inc esi
cmp esi, 0x6378
jl 0x1001fb06
push 0xc85
push ebx
call dword [sym.imp.USER32.dll_CharLowerBuffW]
cmp dword [ebp - 0x14], 0x29eb
jge 0x1001fb6d
push str.trm_petn_esrvbab
call fcn.1004e245
pop ecx
or dword [ebp - 4], 0xffffffff
cmp byte [ebp + 8], 0
je 0x1001fff4
mov edi, dword [ebp + 0xc]
lea eax, [ebp + 0x14]
mov dword [ebp - 0x24], 0xe1757117
lea ecx, [ebp - 0x94]
mov dword [ebp - 0x44], 0xffffffff
mov dword [ebp - 0x3c], 0x951bb35b
mov dword [ebp - 0x50], 0xffffffff
mov dword [ebp - 0x60], 1
push 4
mov dword [ebp - 0x4c], eax
mov dword [ebp - 0x40], edi
call fcn.10001ed2
push 2
pop esi
lea eax, [ebp - 0x98]
mov dword [ebp - 4], esi
push eax
lea eax, [ebp - 0x94]
mov ecx, 0x4577
push 1
push eax
call fcn.1001ecaa
add esp, 0xc
mov dword [ebp - 0x24], ebx
jmp 0x1001fc45
push 1
push ecx
mov dword [ebp - 0x64], 8
mov dword [ebp - 0x34], 0x1eb7e595
push ecx
mov dword [ebp - 0x58], 0xfffffff8
lea ecx, [ebp - 0x1d]
mov byte [ebp - 0x1d], bl
call fcn.1001f8aa
add esp, 0xc
lea eax, [ebp - 0x60]
mov dl, 1
push 0x2e47
push eax
push ecx
lea eax, [ebp - 0x3c]
push eax
lea eax, [ebp - 0x58]
push eax
lea eax, [ebp - 0x44]
push eax
lea eax, [ebp - 0x24]
push eax
lea eax, [ebp - 0x64]
push eax
push 0xd78
push ecx
lea eax, [ebp - 0x34]
push eax
lea eax, [ebp - 0x94]
push eax
lea ecx, [ebp - 0x50]
call fcn.1001f19d
add esp, 0x30
inc dword [ebp - 0x24]
cmp dword [ebp - 0x24], 4
je 0x1001fbdf
lea ecx, [ebp - 0x94]
call fcn.10001f55
xor eax, eax
mov dword [ebp - 0x74], 7
mov dword [ebp - 0x78], ebx
mov word [ebp - 0x88], ax
push 1
lea eax, [ebp - 0x54]
mov dword [ebp - 4], 3
push eax
mov dword [ebp - 0x54], 0x8bbca631
lea ecx, [ebp - 0x5c]
mov dword [ebp - 0x5c], 0xae77ab39
push 0x1cb1
call fcn.1001f4d6
push 0x702d
push 1
push 1
push 1
lea eax, [ebp - 0x88]
mov edx, 0x7963
push eax
push 0x2704
lea ecx, [ebp + 0x14]
call fcn.1001eced
add esp, 0x24
lea ecx, [ebp - 0x70]
push 1
call fcn.10001ed2
push 0x23fe
lea eax, [ebp - 0x70]
mov byte [ebp - 4], 4
push eax
push ecx
mov dword [ebp - 0x18], esi
lea edx, [ebp - 0x9c]
mov dword [ebp - 0x28], 0xe469
mov ecx, 0x25d
push 1
call fcn.1001effd
add esp, 0x10
mov byte [ebp - 0x1f], bl
lea edx, [ebp - 0x1f]
push ebx
push ecx
push ecx
push 0x1ab
push 0x772e
call fcn.1001f5d9
add esp, 0x14
mov dword [ebp - 0x18], ebx
jmp 0x1001fd89
mov dword [ebp - 0x14], 0x1fe77dd6
mov dword [ebp - 0x1c], ebx
mov dword [ebp - 0x14], ebx
cmp dword [ebp - 0x14], ebx
jl 0x1001fd86
push 1
push ecx
push ecx
lea eax, [ebp - 0x70]
mov dword [ebp - 0x2c], 0x8f3d4210
push eax
lea eax, [ebp - 0x2c]
mov edx, 0x43e1
push eax
call fcn.1001f5d9
add esp, 0x14
cmp dword [ebp - 0x14], ebx
je 0x1001fd74
mov eax, dword [ebp - 0x14]
xor ecx, ecx
mov eax, dword [ebp - 0x14]
mov esi, dword [ebp - 0x18]
mov edx, dword [ebp - 0x70]
mov eax, dword [ebp - 0x2c]
cmp dword [edx + esi*4], eax
setne cl
cmp ecx, 0x36d0
jl 0x1001fd68
mov eax, dword [ebp - 0x18]
mov eax, dword [ebp - 0x2c]
mov eax, dword [ebp - 0x18]
mov eax, dword [ebp - 0x28]
mov eax, dword [ebp - 0x18]
mov eax, dword [ebp - 0x18]
imul eax, dword [ebp - 0x14], 0xa1dd
mov dword [ebp - 0x1c], eax
dec dword [ebp - 0x14]
jns 0x1001fd21
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], ebx
jle 0x1001fd0f
lea ecx, [ebp - 0x70]
mov byte [ebp - 4], 3
call fcn.10001f55
mov eax, dword [0x1009d4e0]
test al, 1
jne 0x1001fdc4
or eax, 1
mov dword [0x1009d4e0], eax
push 0x2536
mov byte [ebp - 4], 5
call fcn.100109ba
pop ecx
mov word [0x1009c134], ax
mov byte [ebp - 4], 3
mov esi, ebx
mov dword [ebp - 0x28], ebx
mov eax, dword [ebp - 0x4c]
cmp esi, dword [eax]
jae 0x1001ffcc
push 4
lea ecx, [ebp - 0xac]
call fcn.10001ed2
push 0x698b
push 1
lea eax, [ebp - 0xac]
mov byte [ebp - 4], 6
push eax
push 0x1241
push 1
lea eax, [ebp - 0xa0]
mov dword [ebp - 0x14], ebx
push eax
push 1
mov edx, 0x6d3f
mov ecx, 0x6355
call fcn.1001f799
mov dword [ebp - 0x1c], 0x47ba
add esp, 0x1c
cmp dword [ebp - 0x1c], 0x4a53
jle 0x1001fec9
mov dword [ebp - 0x14], ebx
mov edi, ebx
mov dword [ebp - 0x30], ebx
mov esi, ebx
mov dword [ebp - 0x18], ebx
mov eax, edi
mov dword [ebp - 0x48], ebx
mov edi, dword [ebp - 0x14]
mov ecx, esi
shl eax, cl
mov esi, ebx
mov dword [ebp - 0x38], eax
and eax, esi
lea ecx, [ebp - 0xdc]
or eax, edi
cdq
push edx
push eax
call fcn.10002a87
pop ecx
pop ecx
cmp dword [eax + 0x14], 0x10
jb 0x1001fe66
mov eax, dword [eax]
push eax
call fcn.1004e245
pop ecx
push ebx
push 1
lea ecx, [ebp - 0xdc]
call fcn.10011503
mov eax, dword [ebp - 0x38]
inc esi
cmp esi, 0x29d
jl 0x1001fe4a
mov esi, dword [ebp - 0x18]
mov edi, dword [ebp - 0x30]
inc esi
mov dword [ebp - 0x18], esi
cmp esi, 0x1c8
jl 0x1001fe39
inc edi
mov dword [ebp - 0x30], edi
cmp edi, 0x1a86
jl 0x1001fe34
mov eax, dword [ebp - 0x14]
inc eax
mov dword [ebp - 0x14], eax
cmp eax, 0x6721
jl 0x1001fe2f
push ebx
push ebx
push ebx
push ebx
push ebx
push ebx
push 0x6db
push ebx
call dword [sym.imp.ADVAPI32.dll_RegEnumKeyExW]
cmp dword [ebp - 0x1c], 0x43e9
jge 0x1001fedd
push str.fpvbaahff_wfqsb_bmpt_nrdc_gfxalrq_nzjr
call fcn.1004e245
pop ecx
mov dword [ebp - 4], 6
mov dword [ebp - 0x14], 3
cmp dword [ebp - 0x14], ebx
jl 0x1001ff92
mov byte [ebp - 0x1e], bl
mov dword [ebp - 0x1c], 0x2a43
cmp dword [ebp - 0x1c], 0x2d16
jle 0x1001ff2d
mov esi, ebx
mov edi, ebx
mov ebx, 0x38d2
mov eax, edi
mov ecx, 0x10080838
cdq
push edx
push eax
call fcn.10010b40
add edi, esi
dec ebx
jne 0x1001ff10
inc esi
cmp esi, 0x40d0
jl 0x1001ff09
lea eax, [ebp - 0x1e]
mov edx, 0x3a2b
push eax
push ebx
mov ecx, 0x6471
call fcn.10020db0
pop ecx
mov byte [ebp - 4], 9
cmp dword [ebp - 0x1c], 0x2a2e
pop ecx
jge 0x1001ff83
mov edx, str.pdtbdmg_eiwdiulo_zry_mmruf_vruvpg
mov ecx, 0x10080838
call fcn.10013913
jmp 0x1001ff83
mov dword [ebp - 4], 6
dec dword [ebp - 0x14]
jmp 0x1001feeb
lea ecx, [ebp - 0xac]
mov byte [ebp - 4], 3
call fcn.10001f55
push 1
lea eax, [ebp - 0x88]
mov edx, 0x1009c134
push eax
push 1
push 1
mov ecx, 0x5942
call fcn.1001f902
mov esi, dword [ebp - 0x28]
add esp, 0x10
inc esi
mov dword [ebp - 0x28], esi
jmp 0x1001fdc9
mov edi, dword [ebp + 0xc]
lea eax, [ebp - 0x88]
cmp edi, eax
je 0x1001ffe4
push 0xffffffffffffffff
push ebx
push eax
mov ecx, edi
call fcn.100116ef
push ebx
push 1
lea ecx, [ebp - 0x88]
call fcn.10011831
jmp 0x10020012
mov eax, dword [ebp + 0x18]
cmp byte [eax], 0
je 0x10020012
push ecx
push 0x685b
push ecx
push 0x419c
xor cl, cl
call fcn.1001e2c2
add esp, 0x10
mov ecx, dword [ebp - 0xc]
pop edi
pop esi
mov dword fs:[0], ecx
pop ebx
mov esp, ebp
pop ebp
ret