Function at 0x10001f6a
Capabilities:
Query or enumerate registry key

Disassembly:
push 0x2f4
mov eax, 0x100ac268
call fcn.10091010
lea eax, [ebp - 0x2c8]
xor ebx, ebx
push eax
push 0x20019
push ebx
push 0x100bc3cc
push 0x80000002
call dword [sym.imp.ADVAPI32.dll_RegOpenKeyExA]
test eax, eax
jne 0x100023c9
push 0xf
pop esi
mov dword [ebp - 0x220], esi
mov dword [ebp - 0x224], ebx
mov byte [ebp - 0x234], bl
mov dword [ebp - 4], ebx
mov dword [ebp - 0x250], esi
mov dword [ebp - 0x254], ebx
mov byte [ebp - 0x264], bl
mov dword [ebp - 0x2d8], ebx
mov dword [ebp - 0x2d4], ebx
mov dword [ebp - 0x2d0], ebx
lea eax, [ebp - 0x264]
mov byte [ebp - 4], 2
push eax
push eax
push 0x100bc400
push 0x100bc294
call fcn.10041280
mov ecx, eax
call fcn.100414ad
lea eax, [ebp - 0x264]
push eax
lea eax, [ebp - 0x24c]
push eax
call fcn.1004dd1f
pop ecx
pop ecx
push eax
lea ecx, [ebp - 0x264]
call fcn.10003002
push ebx
push 1
lea ecx, [ebp - 0x24c]
call fcn.100072c0
push 0x100bc120
lea ecx, [ebp - 0x27c]
call fcn.10006fbe
lea eax, [ebp - 0x2d8]
mov byte [ebp - 4], 3
push eax
lea edx, [ebp - 0x27c]
lea ecx, [ebp - 0x264]
call fcn.1004ded2
pop ecx
push ebx
push 1
lea ecx, [ebp - 0x27c]
mov byte [ebp - 4], 2
call fcn.100072c0
push 0x103
lea eax, [ebp - 0x21b]
mov byte [ebp - 0x21c], bl
push ebx
push eax
call fcn.10090560
add esp, 0xc
mov dword [ebp - 0x2e0], 0x104
lea eax, [ebp - 0x2e8]
mov dword [ebp - 0x2cc], ebx
push eax
lea eax, [ebp - 0x2f4]
push eax
lea eax, [ebp - 0x2ec]
push eax
lea eax, [ebp - 0x2f0]
push eax
lea eax, [ebp - 0x2f8]
push eax
lea eax, [ebp - 0x300]
push eax
lea eax, [ebp - 0x2fc]
push eax
lea eax, [ebp - 0x2cc]
push eax
push ebx
lea eax, [ebp - 0x2e0]
push eax
lea eax, [ebp - 0x21c]
push eax
push dword [ebp - 0x2c8]
call dword [sym.imp.ADVAPI32.dll_RegQueryInfoKeyA]
mov eax, dword [ebp - 0x2cc]
test eax, eax
je 0x1000235c
mov dword [ebp - 0x280], esi
mov dword [ebp - 0x284], ebx
mov byte [ebp - 0x294], bl
mov dword [ebp - 0x268], esi
mov dword [ebp - 0x26c], ebx
mov byte [ebp - 0x27c], bl
mov byte [ebp - 4], 5
mov esi, ebx
lea eax, [ebp - 0x2e8]
mov dword [ebp - 0x2dc], 0xff
push eax
push ebx
push ebx
push ebx
lea eax, [ebp - 0x2dc]
push eax
lea eax, [ebp - 0x114]
push eax
push esi
push dword [ebp - 0x2c8]
call dword [sym.imp.ADVAPI32.dll_RegEnumKeyExA]
test eax, eax
jne 0x1000232f
push 0x100bc40c
lea ecx, [ebp - 0x24c]
call fcn.10006fbe
lea eax, [ebp - 0x114]
mov byte [ebp - 4], 6
push eax
lea ecx, [ebp - 0x2ac]
call fcn.10006fbe
lea eax, [ebp - 0x294]
mov byte [ebp - 4], 7
mov ecx, dword [ebp - 0x2c8]
lea edx, [ebp - 0x2ac]
push eax
lea eax, [ebp - 0x24c]
push eax
call fcn.10001df8
mov bl, al
pop ecx
neg bl
pop ecx
sbb bl, bl
lea ecx, [ebp - 0x2ac]
xor edi, edi
push edi
push 1
call fcn.100072c0
push edi
push 1
lea ecx, [ebp - 0x24c]
mov byte [ebp - 4], 5
call fcn.100072c0
inc bl
je 0x100021e9
mov ebx, 0x100bc7cc
push ebx
call fcn.10006fa1
pop ecx
push eax
push ebx
lea ecx, [ebp - 0x294]
call fcn.10006f28
lea edx, [ebp - 0x2d8]
lea ecx, [ebp - 0x294]
call fcn.10001ee3
test al, al
je 0x1000232d
push 0x100bc418
lea ecx, [ebp - 0x2ac]
call fcn.10006fbe
lea eax, [ebp - 0x114]
mov byte [ebp - 4], 8
push eax
lea ecx, [ebp - 0x24c]
call fcn.10006fbe
lea eax, [ebp - 0x27c]
mov byte [ebp - 4], 9
mov ecx, dword [ebp - 0x2c8]
lea edx, [ebp - 0x24c]
push eax
lea eax, [ebp - 0x2ac]
push eax
call fcn.10001df8
pop ecx
pop ecx
push edi
push 1
lea ecx, [ebp - 0x24c]
mov bl, al
call fcn.100072c0
push edi
push 1
lea ecx, [ebp - 0x2ac]
mov byte [ebp - 4], 5
call fcn.100072c0
test bl, bl
je 0x1000232d
cmp dword [ebp - 0x224], 0
je 0x10002299
mov ebx, 0x100bc120
push ebx
call fcn.10006fa1
pop ecx
push eax
push ebx
lea ecx, [ebp - 0x234]
call fcn.10006a1b
lea eax, [ebp - 0x27c]
push eax
lea eax, [ebp - 0x2c4]
push 0x100bc430
push eax
call fcn.10004fb9
add esp, 0xc
push 0x100bc424
push eax
lea eax, [ebp - 0x2ac]
mov byte [ebp - 4], 0xa
push eax
call fcn.10005021
add esp, 0xc
lea ecx, [ebp - 0x294]
mov byte [ebp - 4], 0xb
push ecx
push eax
lea eax, [ebp - 0x24c]
push eax
call fcn.1000504e
add esp, 0xc
push 0xffffffffffffffff
xor ebx, ebx
mov byte [ebp - 4], 0xc
push ebx
push eax
lea ecx, [ebp - 0x234]
call fcn.10006abd
push ebx
push 1
lea ecx, [ebp - 0x24c]
call fcn.100072c0
push ebx
push 1
lea ecx, [ebp - 0x2ac]
call fcn.100072c0
push ebx
push 1
lea ecx, [ebp - 0x2c4]
mov byte [ebp - 4], 5
call fcn.100072c0
jmp 0x1000232f
xor ebx, ebx
inc esi
cmp esi, dword [ebp - 0x2cc]
jb 0x10002122
push ebx
push 1
lea ecx, [ebp - 0x27c]
call fcn.100072c0
push ebx
push 1
lea ecx, [ebp - 0x294]
mov byte [ebp - 4], 2
call fcn.100072c0
cmp dword [ebp - 0x220], 0x10
lea edi, [ebp - 0x234]
mov esi, dword [ebp - 0x224]
cmovae edi, dword [ebp - 0x234]
call fcn.10045657
push esi
push edi
push 0x100bc7cc
push 0x100bc438
mov ecx, eax
call fcn.10044d61
push dword [ebp - 0x2c8]
movzx eax, al
mov dword [0x100e0818], eax
call dword [sym.imp.ADVAPI32.dll_RegCloseKey]
lea ecx, [ebp - 0x2d8]
call fcn.10006bf5
push ebx
push 1
lea ecx, [ebp - 0x264]
call fcn.100072c0
push ebx
push 1
lea ecx, [ebp - 0x234]
call fcn.100072c0
call fcn.10090fbf
ret