Function at 0x105319d
Capabilities:
Query or enumerate registry key

Disassembly:
push 0x274
mov eax, 0x10ce0cb
call fcn.0109887a
push 0
sub esp, 0x58
mov ecx, esp
mov dword [ebp - 0x220], esp
push 0xff
push 1
push 0x3d6
mov ebx, 0x100a9a0
push ebx
mov edi, 0x100a28c
push edi
mov esi, 0x100a220
push esi
call fcn.01099386
lea ecx, [ebp - 0x26c]
call fcn.0109a83a
xor eax, eax
mov dword [ebp - 4], eax
mov dword [ebp - 0x228], eax
mov dword [ebp - 0x224], eax
mov byte [ebp - 4], 2
cmp dword [0x10e3ff0], eax
jne 0x1053597
push 0x14
call fcn.010981a1
pop ecx
xor ecx, ecx
cmp eax, ecx
je 0x105322a
mov dword [eax + 4], ecx
mov dword [eax + 8], ecx
mov dword [eax + 0xc], ecx
mov dword [eax + 0x10], ecx
mov dword [eax], 0x1009908
jmp 0x105322c
xor eax, eax
mov dword [0x10e3ff0], eax
cmp eax, ecx
jne 0x105326a
push 0x1009c4c
push 0x8007000e
sub esp, 0x58
mov ecx, esp
mov dword [ebp - 0x220], esp
push 0xff
push 1
push 0x3e9
push ebx
push edi
push esi
call fcn.01099386
lea eax, [ebp - 0x26c]
push eax
call fcn.0109b1b1
push 0x1009f94
push 0x1009f48
push 0x1007030
lea eax, [ebp - 0x214]
push 0x100
push eax
call fcn.01047599
add esp, 0x14
mov dword [ebp - 0x264], eax
test eax, eax
jge 0x10532c8
push 0x1007040
push eax
sub esp, 0x58
mov ecx, esp
mov dword [ebp - 0x220], esp
push 0xff
push 1
push 0x3ef
push ebx
push edi
push esi
call fcn.01099386
lea eax, [ebp - 0x26c]
push eax
call fcn.0109c3bb
lea eax, [ebp - 0x224]
push eax
push 0x20019
push 0
lea eax, [ebp - 0x214]
push eax
push 0x80000002
call dword [sym.imp.ADVAPI32.dll_RegOpenKeyExW]
test eax, eax
je 0x1053333
push 0x1009f94
push 0x1009f48
push 0x100a940
jle 0x1053307
and eax, 0xffff
or eax, 0x80070000
push eax
sub esp, 0x58
mov ecx, esp
mov dword [ebp - 0x220], esp
push 0xff
push 1
push 0x3f8
push ebx
push edi
push esi
call fcn.01099386
lea eax, [ebp - 0x26c]
push eax
call fcn.0109c3bb
and dword [ebp - 0x21c], 0
mov byte [ebp - 0x215], 0
cmp byte [ebp - 0x215], 0
jne 0x1053597
lea eax, [ebp - 0x280]
push eax
xor eax, eax
push eax
push eax
push eax
lea eax, [ebp - 0x220]
push eax
lea eax, [ebp - 0x214]
push eax
push dword [ebp - 0x21c]
mov dword [ebp - 0x220], 0x100
push dword [ebp - 0x224]
call dword [sym.imp.ADVAPI32.dll_RegEnumKeyExW]
test eax, eax
je 0x10533f1
cmp eax, 0x103
je 0x10533e5
push dword [ebp - 0x21c]
lea ecx, [ebp - 0x214]
push ecx
push 0x1009f94
push 0x1009f48
push 0x100a8f8
test eax, eax
jle 0x10533b9
and eax, 0xffff
or eax, 0x80070000
push eax
sub esp, 0x58
mov ecx, esp
mov dword [ebp - 0x21c], esp
push 0xff
push 1
push 0x435
push ebx
push edi
push esi
call fcn.01099386
lea eax, [ebp - 0x26c]
push eax
call fcn.0109c3bb
mov byte [ebp - 0x215], 1
jmp 0x105349e
lea eax, [ebp - 0x228]
push eax
lea eax, [ebp - 0x214]
push eax
push dword [ebp - 0x224]
call fcn.01051f77
mov dword [ebp - 0x264], eax
test eax, eax
jge 0x1053458
push eax
lea eax, [ebp - 0x214]
push eax
push 0x100a888
sub esp, 0x58
mov ecx, esp
mov dword [ebp - 0x22c], esp
push 0xff
push 1
push 0x419
push ebx
push edi
push esi
call fcn.01099386
lea eax, [ebp - 0x26c]
push eax
call fcn.0109a510
add esp, 0x68
and dword [ebp - 0x264], 0
jmp 0x105349e
mov ecx, dword [0x10e3ff0]
lea eax, [ebp - 0x228]
push eax
add ecx, 4
call fcn.01075442
test eax, eax
jne 0x1053497
push 0x100a470
push 0x8007000e
sub esp, 0x58
mov ecx, esp
mov dword [ebp - 0x22c], esp
push 0xff
push 1
push 0x426
jmp 0x1053256
and dword [ebp - 0x228], 0
inc dword [ebp - 0x21c]
jmp 0x1053341
mov dword [ebp - 4], 1
xor eax, eax
cmp dword [ebp - 0x224], eax
je 0x10535b4
push dword [ebp - 0x224]
call dword [sym.imp.ADVAPI32.dll_RegCloseKey]
test eax, eax
je 0x10535f2
call dword [sym.imp.KERNEL32.dll_GetLastError]
push eax
push 0x100a828
sub esp, 0x58
mov ecx, esp
mov dword [ebp - 0x22c], esp
push 0xff
push 1
push 0x442
push ebx
push edi
push esi
call fcn.01099386
lea eax, [ebp - 0x26c]
push eax
call fcn.0109a510
add esp, 0x64
cmp dword [ebp - 0x264], 0
jge 0x105363c
call fcn.01052f93
push dword [ebp - 0x264]
push 0x100a7c0
push dword [ebp - 0x264]
sub esp, 0x58
mov ecx, esp
mov dword [ebp - 0x22c], esp
push 0xff
push 1
push 0x449
push ebx
push edi
push esi
call fcn.01099386
lea eax, [ebp - 0x26c]
push eax
call fcn.0109b1b1
lea ecx, [ebp - 0x228]
mov byte [ebp - 4], 0
call fcn.01046d51
lea ecx, [ebp - 0x26c]
call fcn.0109a8f3
call fcn.010988e5
ret