Function at 0x75e912d4
Capabilities:
Query or enumerate registry key

Disassembly:
mov edi, edi
push ebp
mov ebp, esp
sub esp, 0xe7c
mov eax, dword [0x75ea0720]
xor eax, ebp
mov dword [ebp - 4], eax
push esi
xor esi, esi
xor edx, edx
lea ecx, [ebp - 0xe04]
mov eax, 0x100
push edi
xor edi, edi
mov word [ebp + edx*8 - 0xe74], di
mov edi, eax
mov dword [ebp + edx*8 - 0xe70], ecx
mov word [ebp + edx*8 - 0xe72], di
inc edx
add ecx, eax
cmp edx, 0xe
jb 0x75e912fa
movzx eax, word [ebp - 0xe6a]
push esi
shr eax, 1
push eax
push dword [ebp - 0xe68]
push 0x2cc
push dword [0x75ea0118]
call dword [0x75ea00e0]
add eax, eax
mov word [ebp - 0xe6c], ax
movzx eax, word [ebp - 0xe32]
push esi
shr eax, 1
push eax
push dword [ebp - 0xe30]
push 0x2e3
push dword [0x75ea0118]
call dword [0x75ea00e0]
add eax, eax
mov word [ebp - 0xe34], ax
movzx eax, word [ebp - 0xe2a]
push esi
shr eax, 1
push eax
push dword [ebp - 0xe28]
push 0x2e4
push dword [0x75ea0118]
call dword [0x75ea00e0]
add eax, eax
mov word [ebp - 0xe2c], ax
movzx eax, word [ebp - 0xe22]
push esi
shr eax, 1
push eax
push dword [ebp - 0xe20]
push 0x2e5
push dword [0x75ea0118]
call dword [0x75ea00e0]
add eax, eax
mov word [ebp - 0xe24], ax
movzx eax, word [ebp - 0xe1a]
push esi
shr eax, 1
push eax
push dword [ebp - 0xe18]
push 0x2e7
push dword [0x75ea0118]
call dword [0x75ea00e0]
add eax, eax
mov word [ebp - 0xe1c], ax
movzx eax, word [ebp - 0xe12]
push esi
shr eax, 1
push eax
push dword [ebp - 0xe10]
push 0x2e6
push dword [0x75ea0118]
call dword [0x75ea00e0]
add eax, eax
mov word [ebp - 0xe14], ax
movzx eax, word [ebp - 0xe3a]
shr eax, 1
push eax
push dword [ebp - 0xe38]
push 0x2e1
push dword [0x75ea0118]
call sym.USER32.dll_LoadStringW
add eax, eax
mov word [ebp - 0xe3c], ax
movzx eax, word [ebp - 0xe0a]
push esi
shr eax, 1
push eax
push dword [ebp - 0xe08]
push 0x2e8
push dword [0x75ea0118]
call dword [0x75ea00e0]
add eax, eax
push 0x75e918f8
mov word [ebp - 0xe0c], ax
push esi
mov edi, dword [sym.imp.ntdll.dll_RtlCheckRegistryKey]
call edi
test eax, eax
jge 0x75e914d7
push 0x75e91810
push esi
call edi
test eax, eax
jge 0x75e914d7
push 0x75e91748
push 5
call edi
test eax, eax
jge 0x75e914d7
mov eax, dword [0x7ffe02c8]
or eax, dword [0x7ffe02cc]
je 0x75e914c3
movzx eax, word [ebp - 0xe62]
push esi
shr eax, 1
push eax
push dword [ebp - 0xe60]
push 0x2cd
jmp 0x75e914ed
mov ecx, dword [ebp - 0xe60]
xor eax, eax
mov word [ebp - 0xe64], ax
mov word [ecx], ax
jmp 0x75e91502
movzx eax, word [ebp - 0xe62]
push esi
shr eax, 1
push eax
push dword [ebp - 0xe60]
push 0x2ce
push dword [0x75ea0118]
call dword [0x75ea00e0]
add eax, eax
mov word [ebp - 0xe64], ax
mov eax, dword [0x75ea0138]
mov ecx, dword [0x75ea013c]
add eax, 0x864
adc ecx, esi
mov dword [ebp - 0xe78], ecx
pop edi
cmp dword [eax], esi
jne 0x75e915bc
mov ecx, dword [ebp - 0xe58]
xor eax, eax
mov word [ebp - 0xe5c], ax
mov word [ecx], ax
movzx eax, word [ebp - 0xe52]
push esi
shr eax, 1
push eax
push dword [ebp - 0xe50]
push 0x2d0
push dword [0x75ea0118]
call dword [0x75ea00e0]
add eax, eax
mov word [ebp - 0xe54], ax
movzx eax, word [ebp - 0xe4a]
push esi
shr eax, 1
push eax
push dword [ebp - 0xe48]
push 0x2d1
push dword [0x75ea0118]
call dword [0x75ea00e0]
add eax, eax
mov word [ebp - 0xe4c], ax
call fcn.75e9a928
test eax, eax
je 0x75e9163b
movzx eax, word [ebp - 0xe5a]
push esi
shr eax, 1
push eax
push dword [ebp - 0xe58]
push 0x2e2
push dword [0x75ea0118]
call dword [0x75ea00e0]
jmp 0x75e915dc
movzx eax, word [ebp - 0xe5a]
shr eax, 1
push eax
push dword [ebp - 0xe58]
push 0x2cf
push dword [0x75ea0118]
call sym.USER32.dll_LoadStringW
add eax, eax
mov word [ebp - 0xe5c], ax
movzx eax, word [ebp - 0xe52]
push esi
shr eax, 1
push eax
push dword [ebp - 0xe50]
push 0x2d2
push dword [0x75ea0118]
call dword [0x75ea00e0]
add eax, eax
mov word [ebp - 0xe54], ax
movzx eax, word [ebp - 0xe4a]
push esi
shr eax, 1
push eax
push dword [ebp - 0xe48]
push 0x2d3
push dword [0x75ea0118]
call dword [0x75ea00e0]
add eax, eax
mov word [ebp - 0xe4c], ax
movzx eax, word [ebp - 0xe72]
push esi
shr eax, 1
push eax
push dword [ebp - 0xe70]
push 0x2cb
push dword [0x75ea0118]
call dword [0x75ea00e0]
mov ecx, dword [0x75ea013c]
add eax, eax
mov word [ebp - 0xe74], ax
mov eax, dword [0x75ea0138]
add eax, 0x8b8
adc ecx, esi
mov dword [ebp - 0xe78], ecx
cmp dword [eax], esi
je 0x75e91689
mov eax, 0x2e0
jmp 0x75e916ff
test byte [0x7ffe02d0], 0x40
je 0x75e91699
mov eax, 0x310
jmp 0x75e916ff
cmp dword [0x7ffe0264], 1
jne 0x75e916b6
mov eax, dword [0x7ffe02d0]
and eax, 0x200
or eax, 0x5a800
shr eax, 9
jmp 0x75e916ff
test byte [0x7ffe02d0], 0x80
je 0x75e916c6
mov eax, 0x2d8
jmp 0x75e916ff
test byte [0x7ffe02d0], 2
je 0x75e916d6
mov eax, 0x2d7
jmp 0x75e916ff
test dword [0x7ffe02d0], 0x400
je 0x75e916e9
mov eax, 0x2db
jmp 0x75e916ff
mov al, byte [0x7ffe02d0]
and al, 0x20
movzx eax, al
neg eax
sbb eax, eax
and eax, 9
add eax, 0x2d6
movzx ecx, word [ebp - 0xe42]
push esi
shr ecx, 1
push ecx
push dword [ebp - 0xe40]
push eax
push dword [0x75ea0118]
call dword [0x75ea00e0]
add eax, eax
mov word [ebp - 0xe44], ax
push 0x42
lea eax, [ebp - 0xe74]
push eax
call fcn.75e360d5
mov ecx, dword [ebp - 4]
xor ecx, ebp
pop esi
call fcn.75e36120
leave
ret