Function at 0x100aa32d
Capabilities:
Query or enumerate registry value

Disassembly:
push 0xc4
mov eax, 0x1010ef56
call fcn.10062882
mov edi, ecx
mov eax, dword [ebp + 0xc]
mov esi, dword [ebp + 8]
mov ebx, dword [edi]
mov dword [ebp - 0xb4], eax
mov eax, dword [edi + 4]
mov dword [ebp - 0xb8], esi
add eax, ebx
jmp 0x100aa698
lea eax, [ebx + 1]
mov dword [ebp - 0x94], ebx
mov dword [ebp - 0x90], eax
lea edx, [ebx + 3]
movzx eax, word [eax]
mov ecx, ebx
add eax, 7
mov dword [ebp - 0x98], ebx
add eax, dword [edx]
add ebx, eax
mov dword [ebp - 0x8c], edx
lea eax, [ecx + 7]
push eax
lea ecx, [ebp - 0x40]
call fcn.10051bfb
and dword [ebp - 4], 0
lea eax, [ebp - 0x40]
push eax
lea eax, [ebp - 0x28]
mov ecx, edi
push eax
call fcn.100a9ab2
lea ecx, [ebp - 0x40]
mov byte [ebp - 4], 2
call fcn.1006ab66
mov ecx, dword [ebp - 0xb4]
test ecx, ecx
je 0x100aa3de
cmp dword [ebp - 0x14], 8
lea eax, [ebp - 0x28]
jb 0x100aa3c7
mov eax, dword [ebp - 0x28]
xor edx, edx
push edx
push edx
push edx
push edx
push eax
push ecx
call dword [sym.imp.ADVAPI32.dll_RegQueryValueExW]
cmp eax, 2
je 0x100aa687
mov eax, dword [ebp - 0x98]
movzx ecx, byte [eax]
mov eax, ecx
sub eax, 1
je 0x100aa603
sub eax, 1
je 0x100aa603
sub eax, 5
je 0x100aa442
mov edx, dword [ebp - 0x8c]
mov eax, dword [edx]
mov edx, dword [ebp - 0x94]
mov dword [ebp - 0x98], eax
add edx, 7
mov eax, dword [ebp - 0x90]
movzx eax, word [eax]
add eax, edx
cmp dword [ebp - 0x14], 8
lea edx, [ebp - 0x28]
jb 0x100aa42e
mov edx, dword [ebp - 0x28]
push dword [ebp - 0x98]
push eax
push ecx
mov ecx, esi
call fcn.100aadc1
jmp 0x100aa687
xor eax, eax
cmp dword [edi + 0x18], eax
jne 0x100aa4ad
mov dword [ebp - 0xc4], eax
mov dword [ebp - 0xc0], eax
mov dword [ebp - 0xbc], eax
mov eax, dword [ebp - 0x90]
mov ecx, dword [ebp - 0x94]
mov edx, dword [ebp - 0x8c]
add ecx, 7
mov byte [ebp - 4], 3
movzx eax, word [eax]
add ecx, eax
lea eax, [ebp - 0xc4]
mov edx, dword [edx]
push eax
call fcn.100ab1d5
cmp dword [ebp - 0x14], 8
lea edx, [ebp - 0x28]
jb 0x100aa493
mov edx, dword [ebp - 0x28]
lea eax, [ebp - 0xc4]
push eax
push ecx
mov ecx, esi
call fcn.100aac4c
lea ecx, [ebp - 0xc4]
jmp 0x100aa5f9
mov dword [ebp - 0xd0], eax
mov dword [ebp - 0xcc], eax
mov dword [ebp - 0xc8], eax
mov dword [ebp - 0xb0], eax
mov dword [ebp - 0xac], eax
mov dword [ebp - 0xa8], eax
mov eax, dword [ebp - 0x90]
mov ecx, dword [ebp - 0x94]
mov edx, dword [ebp - 0x8c]
add ecx, 7
mov byte [ebp - 4], 5
movzx eax, word [eax]
add ecx, eax
lea eax, [ebp - 0xb0]
mov edx, dword [edx]
push eax
call fcn.100ab1d5
mov esi, dword [ebp - 0xb0]
cmp esi, dword [ebp - 0xac]
setne al
test al, al
je 0x100aa55b
push esi
lea ecx, [ebp - 0x40]
call fcn.10051bfb
lea eax, [ebp - 0x40]
mov byte [ebp - 4], 6
push eax
lea eax, [ebp - 0x88]
mov ecx, edi
push eax
call fcn.100a9ab2
push eax
lea ecx, [ebp - 0xd0]
mov byte [ebp - 4], 7
call fcn.10051bfb
lea ecx, [ebp - 0x88]
call fcn.1006ab66
lea ecx, [ebp - 0x40]
mov byte [ebp - 4], 5
call fcn.1006ab66
add esi, 0x18
jmp 0x100aa503
xor eax, eax
mov dword [ebp - 0xa4], eax
mov dword [ebp - 0xa0], eax
mov dword [ebp - 0x9c], eax
mov byte [ebp - 4], 8
lea eax, [ebp - 0x28]
cmp dword [ebp - 0x14], 8
jb 0x100aa57f
mov eax, dword [ebp - 0x28]
push eax
lea ecx, [ebp - 0x40]
call fcn.10051bfb
mov esi, dword [ebp - 0xb8]
lea eax, [ebp - 0xa4]
push eax
lea edx, [ebp - 0x40]
mov byte [ebp - 4], 9
mov ecx, esi
call fcn.100aaa4d
lea ecx, [ebp - 0x40]
mov byte [ebp - 4], 8
call fcn.1006ab66
lea eax, [ebp - 0xd0]
push eax
lea eax, [ebp - 0xa4]
push eax
call fcn.100aa13f
cmp dword [ebp - 0x14], 8
lea edx, [ebp - 0x28]
jb 0x100aa5ce
mov edx, dword [ebp - 0x28]
lea eax, [ebp - 0xa4]
push eax
push ecx
mov ecx, esi
call fcn.100aac4c
lea ecx, [ebp - 0xa4]
call fcn.10051bfb
lea ecx, [ebp - 0xb0]
call fcn.10051bfb
lea ecx, [ebp - 0xd0]
call fcn.10051bfb
jmp 0x100aa687
mov eax, dword [ebp - 0x90]
lea ecx, [ebp - 0x70]
mov edx, dword [ebp - 0x94]
add edx, 7
movzx eax, word [eax]
add eax, edx
push eax
call fcn.10051bfb
lea eax, [ebp - 0x70]
mov byte [ebp - 4], 0xa
push eax
lea eax, [ebp - 0x58]
mov ecx, edi
push eax
call fcn.100a9ab2
lea ecx, [ebp - 0x70]
mov byte [ebp - 4], 0xc
call fcn.1006ab66
cmp dword [ebp - 0x44], 8
mov eax, dword [ebp - 0x48]
lea eax, [eax*2 + 2]
mov dword [ebp - 0x8c], eax
lea eax, [ebp - 0x58]
jb 0x100aa65b
mov eax, dword [ebp - 0x58]
cmp dword [ebp - 0x14], 8
lea edx, [ebp - 0x28]
mov ecx, dword [ebp - 0x98]
movzx ecx, byte [ecx]
jb 0x100aa670
mov edx, dword [ebp - 0x28]
push dword [ebp - 0x8c]
push eax
push ecx
mov ecx, esi
call fcn.100aadc1
lea ecx, [ebp - 0x58]
call fcn.1006ab66
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x28]
call fcn.1006ab66
mov eax, dword [edi]
add eax, dword [edi + 4]
cmp eax, ebx
ja 0x100aa35c
call fcn.1006281a
ret 8