Function at 0xed5b0
Capabilities:
Query or enumerate registry value

Disassembly:
push ebp
mov ebp, esp
mov ecx, 0x6b
push 0
push 0
dec ecx
jne 0xed5b8
push ecx
push ebx
push esi
push edi
mov dword [ebp - 4], eax
xor eax, eax
push ebp
push 0xedaff
push dword fs:[eax]
mov dword fs:[eax], esp
lea eax, [ebp - 0x3c]
mov edx, 0xedb18
call fcn.00013db0
lea eax, [ebp - 0x28]
mov edx, 0xedb18
call fcn.00013db0
lea eax, [ebp - 8]
mov edx, 0xedb18
call fcn.00013db0
mov eax, dword [ebp - 4]
call fcn.00013d18
lea eax, [ebp - 0x18]
mov edx, 0xedb18
call fcn.00013db0
lea eax, [ebp - 0x34]
mov edx, 0xedb18
call fcn.00013db0
lea eax, [ebp - 0x30]
mov edx, 0xedb18
call fcn.00013db0
lea eax, [ebp - 0xc]
mov edx, 0xedb18
call fcn.00013db0
xor eax, eax
push ebp
push 0xeda0e
push dword fs:[eax]
mov dword fs:[eax], esp
xor eax, eax
mov dword [ebp - 0x24], eax
lea eax, [ebp - 0x10]
push eax
lea eax, [ebp - 0x24]
push eax
push 0
mov eax, dword [0x2514d0]
mov eax, dword [eax]
add eax, case.0x1ffea.3
push eax
push 0
push 0
push 0
push 0xedb1c
push 0x80000002
call sub.advapi32.dll_RegCreateKeyExA
cmp dword [ebp - 0x24], 0
je 0xed9f0
lea eax, [ebp - 0x14]
mov edx, 0x400
call fcn.000271f0
mov dword [ebp - 0x2c], 0x3ff
xor eax, eax
mov dword [ebp - 0x20], eax
mov edx, 0x400
mov eax, dword [ebp - 0x14]
call fcn.00018100
lea eax, [ebp - 0x2c]
push eax
mov eax, dword [ebp - 0x14]
push eax
lea eax, [ebp - 0x20]
push eax
push 0
push 0xedb4c
mov eax, dword [ebp - 0x24]
push eax
call sub.advapi32.dll_RegQueryValueExA_1
test eax, eax
jne 0xed6e6
cmp dword [ebp - 0x20], 1
jne 0xed6e6
cmp dword [ebp - 0x2c], 0
jbe 0xed6e6
cmp dword [ebp - 0x2c], 0x3ff
jae 0xed6e6
lea eax, [ebp - 0x30]
mov edx, dword [ebp - 0x14]
call fcn.00013ee0
mov dword [ebp - 0x2c], 0x3ff
xor eax, eax
mov dword [ebp - 0x20], eax
mov edx, 0x400
mov eax, dword [ebp - 0x14]
call fcn.00018100
lea eax, [ebp - 0x2c]
push eax
mov eax, dword [ebp - 0x14]
push eax
lea eax, [ebp - 0x20]
push eax
push 0
push 0xedb58
mov eax, dword [ebp - 0x24]
push eax
call sub.advapi32.dll_RegQueryValueExA_1
test eax, eax
jne 0xed73f
cmp dword [ebp - 0x20], 1
jne 0xed73f
cmp dword [ebp - 0x2c], 0
jbe 0xed73f
cmp dword [ebp - 0x2c], 0x3ff
jae 0xed73f
lea eax, [ebp - 8]
mov edx, dword [ebp - 0x14]
call fcn.00013ee0
mov dword [ebp - 0x2c], 0x3ff
xor eax, eax
mov dword [ebp - 0x20], eax
mov edx, 0x400
mov eax, dword [ebp - 0x14]
call fcn.00018100
lea eax, [ebp - 0x2c]
push eax
mov eax, dword [ebp - 0x14]
push eax
lea eax, [ebp - 0x20]
push eax
push 0
push 0xedb64
mov eax, dword [ebp - 0x24]
push eax
call sub.advapi32.dll_RegQueryValueExA_1
test eax, eax
jne 0xed798
cmp dword [ebp - 0x20], 1
jne 0xed798
cmp dword [ebp - 0x2c], 0
jbe 0xed798
cmp dword [ebp - 0x2c], 0x3ff
jae 0xed798
lea eax, [ebp - 0x28]
mov edx, dword [ebp - 0x14]
call fcn.00013ee0
mov dword [ebp - 0x2c], 0x3ff
xor eax, eax
mov dword [ebp - 0x20], eax
mov edx, 0x400
mov eax, dword [ebp - 0x14]
call fcn.00018100
lea eax, [ebp - 0x2c]
push eax
mov eax, dword [ebp - 0x14]
push eax
lea eax, [ebp - 0x20]
push eax
push 0
push 0xedb78
mov eax, dword [ebp - 0x24]
push eax
call sub.advapi32.dll_RegQueryValueExA_1
test eax, eax
jne 0xed7f1
cmp dword [ebp - 0x20], 1
jne 0xed7f1
cmp dword [ebp - 0x2c], 0
jbe 0xed7f1
cmp dword [ebp - 0x2c], 0x3ff
jae 0xed7f1
lea eax, [ebp - 0x34]
mov edx, dword [ebp - 0x14]
call fcn.00013ee0
mov dword [ebp - 0x2c], 4
xor eax, eax
mov dword [ebp - 0x20], eax
xor eax, eax
mov dword [ebp - 0x1c], eax
lea eax, [ebp - 0x2c]
push eax
lea eax, [ebp - 0x1c]
push eax
lea eax, [ebp - 0x20]
push eax
push 0
push 0xedb88
mov eax, dword [ebp - 0x24]
push eax
call sub.advapi32.dll_RegQueryValueExA_1
test eax, eax
jne 0xed931
cmp dword [ebp - 0x20], 4
jne 0xed931
cmp dword [ebp - 0x2c], 4
jne 0xed931
mov eax, dword [ebp - 0x1c]
mov ecx, 0x15180
xor edx, edx
div ecx
mov dword [ebp - 0x38], eax
imul eax, dword [ebp - 0x38], 0x15180
mov ebx, dword [ebp - 0x1c]
sub ebx, eax
mov eax, ebx
mov ecx, 0xe10
xor edx, edx
div ecx
mov esi, eax
imul eax, esi, 0xe10
sub ebx, eax
mov eax, ebx
mov ecx, 0x3c
xor edx, edx
div ecx
mov edi, eax
imul eax, edi, 0x3c
sub ebx, eax
mov cx, 1
mov dx, 1
mov ax, 0x7b2
call fcn.0002908c
mov eax, dword [ebp - 0x38]
mov dword [ebp - 0x48], eax
xor eax, eax
mov dword [ebp - 0x44], eax
fild qword [ebp - 0x48]
faddp st(1)
add esp, 0xfffffff8
fstp qword [esp]
wait
lea eax, [ebp - 0x40]
call fcn.0002bb58
push dword [ebp - 0x40]
push 0xedb9c
lea edx, [ebp - 0x14c]
mov eax, esi
call fcn.00028680
lea edx, [ebp - 0x14c]
lea eax, [ebp - 0x4c]
call fcn.00013f4c
push dword [ebp - 0x4c]
push 0xedba8
lea edx, [ebp - 0x250]
mov eax, edi
call fcn.00028680
lea edx, [ebp - 0x250]
lea eax, [ebp - 0x150]
call fcn.00013f4c
push dword [ebp - 0x150]
push 0xedba8
lea edx, [ebp - 0x354]
mov eax, ebx
call fcn.00028680
lea edx, [ebp - 0x354]
lea eax, [ebp - 0x254]
call fcn.00013f4c
push dword [ebp - 0x254]
lea eax, [ebp - 0xc]
mov edx, 7
call fcn.00014068
mov dword [ebp - 0x2c], 0x3ff
xor eax, eax
mov dword [ebp - 0x20], eax
mov edx, 0x400
mov eax, dword [ebp - 0x14]
call fcn.00018100
lea eax, [ebp - 0x2c]
push eax
mov eax, dword [ebp - 0x14]
push eax
lea eax, [ebp - 0x20]
push eax
push 0
push 0xedbac
mov eax, dword [ebp - 0x24]
push eax
call sub.advapi32.dll_RegQueryValueExA_1
test eax, eax
jne 0xed98a
cmp dword [ebp - 0x20], 1
jne 0xed98a
cmp dword [ebp - 0x2c], 0
jbe 0xed98a
cmp dword [ebp - 0x2c], 0x3ff
jae 0xed98a
lea eax, [ebp - 0x18]
mov edx, dword [ebp - 0x14]
call fcn.00013ee0
mov dword [ebp - 0x2c], 0x3ff
xor eax, eax
mov dword [ebp - 0x20], eax
mov edx, 0x400
mov eax, dword [ebp - 0x14]
call fcn.00018100
lea eax, [ebp - 0x2c]
push eax
mov eax, dword [ebp - 0x14]
push eax
lea eax, [ebp - 0x20]
push eax
push 0
push 0xedbb8
mov eax, dword [ebp - 0x24]
push eax
call sub.advapi32.dll_RegQueryValueExA_1
test eax, eax
jne 0xed9e3
cmp dword [ebp - 0x20], 1
jne 0xed9e3
cmp dword [ebp - 0x2c], 0
jbe 0xed9e3
cmp dword [ebp - 0x2c], 0x3ff
jae 0xed9e3
lea eax, [ebp - 0x3c]
mov edx, dword [ebp - 0x14]
call fcn.00013ee0
lea eax, [ebp - 0x14]
mov edx, 0x400
call fcn.00027218
cmp dword [ebp - 0x24], 0
je 0xed9ff
mov eax, dword [ebp - 0x24]
push eax
call sub.advapi32.dll_RegCloseKey_1
xor eax, eax
mov dword [ebp - 0x24], eax
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0xeda18
push dword [ebp - 0x18]
push 0xedb9c
push dword [ebp - 0x34]
push 0xedbcc
push dword [ebp - 0x28]
push 0xedbd8
push dword [ebp - 0x30]
push 0xedbe4
push dword [ebp - 8]
push 0xedbf0
push dword [ebp - 0x3c]
push 0xedc08
push dword [ebp - 0xc]
push 0xedc20
mov eax, dword [ebp - 4]
mov edx, 0xe
call fcn.00014068
lea edx, [ebp - 0x35c]
mov eax, dword [ebp - 4]
mov eax, dword [eax]
call fcn.000ed560
mov eax, dword [ebp - 0x35c]
lea edx, [ebp - 0x358]
call fcn.0002e0b8
mov edx, dword [ebp - 0x358]
mov eax, dword [ebp - 4]
call fcn.00013d6c
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
push 0xedb06
lea eax, [ebp - 0x35c]
mov edx, 2
call fcn.00013d3c
lea eax, [ebp - 0x254]
call fcn.00013d18
lea eax, [ebp - 0x150]
call fcn.00013d18
lea eax, [ebp - 0x4c]
call fcn.00013d18
lea eax, [ebp - 0x40]
mov edx, 2
call fcn.00013d3c
lea eax, [ebp - 0x34]
mov edx, 2
call fcn.00013d3c
lea eax, [ebp - 0x28]
call fcn.00013d18
lea eax, [ebp - 0x18]
call fcn.00013d18
lea eax, [ebp - 0xc]
mov edx, 2
call fcn.00013d3c
ret