Function at 0x75b10107
Capabilities:
Query or enumerate registry key

Disassembly:
mov edi, edi
push ebp
mov ebp, esp
sub esp, 0x62c
mov eax, dword [0x75bc8d18]
xor eax, ebp
mov dword [ebp - 4], eax
mov eax, dword [ebp + 8]
mov dword [ebp - 0x610], eax
mov eax, dword [ebp + 0x18]
push ebx
mov dword [ebp - 0x624], eax
mov eax, dword [ebp + 0x1c]
push esi
push edi
mov edi, dword [ebp + 0xc]
mov dword [ebp - 0x620], eax
mov eax, dword [ebp + 0x20]
lea ecx, [ebp - 0x54]
mov dword [ebp - 0x618], edi
mov dword [ebp - 0x628], eax
call fcn.759b3c2d
lea ecx, [ebp - 0x70]
call fcn.759b3c2d
lea ecx, [ebp - 0x8c]
call fcn.759b3c2d
mov esi, dword [ebp + 0x10]
xor ebx, ebx
mov byte [ebp - 0x602], bl
mov byte [ebp - 0x601], 1
cmp esi, 1
jne 0x75b1026b
cmp edi, ebx
je 0x75b1028b
cmp word [edi], bx
je 0x75b1028b
push edi
call fcn.75b573a5
pop ecx
test al, al
jne 0x75b1028b
push dword [ebp - 0x610]
mov eax, 0x105
push 0x759b4a30
lea ecx, [ebp - 0x5f4]
push 0x759b4d84
push eax
mov dword [ebp - 0x5fc], eax
mov eax, ecx
push eax
mov byte [ebp - 0x601], bl
mov dword [ebp - 0x600], ecx
call fcn.759b4c31
add esp, 0x14
test eax, eax
jge 0x75b10236
lea ecx, [ebp - 0x600]
call fcn.759b6bcb
mov edi, 0x65b
lea ecx, [ebp - 0x8c]
call fcn.759b3c00
lea ecx, [ebp - 0x84]
call fcn.759b1681
lea ecx, [ebp - 0x70]
call fcn.759b3c00
lea ecx, [ebp - 0x68]
call fcn.759b1681
lea ecx, [ebp - 0x54]
call fcn.759b3c00
lea ecx, [ebp - 0x4c]
call fcn.759b1681
mov eax, edi
mov ecx, dword [ebp - 4]
pop edi
pop esi
xor ecx, ebp
pop ebx
call fcn.759b1748
leave
ret
push ebx
xor esi, esi
inc esi
push esi
push dword [0x75bc8b74]
lea eax, [ebp - 0x54]
push ebx
push eax
push dword [ebp - 0x600]
push ebx
push edi
call fcn.759b4b06
add esp, 0x20
lea ecx, [ebp - 0x600]
mov edi, eax
mov dword [ebp - 0x61c], esi
call fcn.759b6bcb
jmp 0x75b102a8
cmp esi, 3
jne 0x75b1028b
lea eax, [ebp - 0x61c]
push eax
push 0xffffffffffffffff
push ebx
lea eax, [ebp - 0x54]
push eax
push dword [ebp - 0x610]
call fcn.759c417f
jmp 0x75b102a3
push ebx
lea eax, [ebp - 0x54]
push eax
push dword [ebp - 0x610]
push edi
push esi
call fcn.75a6338a
mov dword [ebp - 0x61c], esi
mov edi, eax
add esp, 0x14
cmp edi, ebx
je 0x75b102bf
cmp edi, 2
jne 0x75b101ef
mov edi, 0x645
jmp 0x75b101ef
mov edi, dword [ebp - 0x54]
lea ecx, [ebp - 0x70]
call fcn.759b3e2d
push eax
push 0x20019
push ebx
mov esi, 0x759fcbe0
push esi
push edi
call fcn.759b3f15
add esp, 0x14
cmp eax, ebx
je 0x75b1037d
cmp eax, 2
jne 0x75b1033e
lea ecx, [ebp - 0x8c]
call fcn.759b3c00
lea ecx, [ebp - 0x84]
call fcn.759b1681
lea ecx, [ebp - 0x70]
call fcn.759b3c00
lea ecx, [ebp - 0x68]
call fcn.759b1681
lea ecx, [ebp - 0x54]
call fcn.759b3c00
lea ecx, [ebp - 0x4c]
call fcn.759b1681
xor eax, eax
cmp byte [ebp - 0x601], bl
sete al
dec eax
and eax, 0xfffffaa9
add eax, 0x65a
jmp 0x75b10227
mov esi, eax
lea ecx, [ebp - 0x8c]
call fcn.759b3c00
lea ecx, [ebp - 0x84]
call fcn.759b1681
lea ecx, [ebp - 0x70]
call fcn.759b3c00
lea ecx, [ebp - 0x68]
call fcn.759b1681
lea ecx, [ebp - 0x54]
call fcn.759b3c00
lea ecx, [ebp - 0x4c]
call fcn.759b1681
mov eax, esi
jmp 0x75b10227
push esi
push dword [ebp - 0x610]
mov eax, 0x104
push 0x759b4a30
lea ecx, [ebp - 0x3dc]
push 0x759b4c8c
push eax
mov dword [ebp - 0x3e4], eax
mov eax, ecx
push eax
mov dword [ebp - 0x3e8], ecx
call fcn.759b4c31
add esp, 0x18
test eax, eax
jge 0x75b103ca
lea ecx, [ebp - 0x3e8]
call fcn.759b170a
mov esi, 0x65b
jmp 0x75b10340
push ebx
push dword [ebp - 0x61c]
lea eax, [ebp - 0x8c]
push dword [0x75bc8b74]
push ebx
push eax
push dword [ebp - 0x3e8]
push dword [ebp - 0x610]
push dword [ebp - 0x618]
call fcn.759b4b06
add esp, 0x20
test eax, eax
jne 0x75b10404
mov byte [ebp - 0x602], 1
cmp byte [ebp + 0x24], bl
je 0x75b1066e
mov eax, dword [ebp - 0x620]
cmp eax, ebx
je 0x75b1041d
mov dword [eax], 1
push 0x76
pop eax
lea ecx, [ebp - 0x1c8]
mov dword [ebp - 0x1d0], eax
mov dword [ebp - 0x1d4], ecx
mov dword [ebp - 0x60c], ebx
mov dword [ebp - 0x620], ebx
cmp byte [ebp - 0x601], bl
jne 0x75b1044b
mov esi, 0x759f9f04
mov dword [ebp - 0x1cc], eax
lea eax, [ebp - 0x620]
push eax
lea eax, [ebp - 0x1d4]
push eax
lea eax, [ebp - 0x60c]
push eax
push ebx
push esi
push dword [ebp - 0x70]
call fcn.759b5885
add esp, 0x18
cmp eax, 2
jne 0x75b104c0
cmp byte [ebp - 0x601], bl
jne 0x75b104a0
lea ecx, [ebp - 0x1d4]
call fcn.75aff8c5
lea ecx, [ebp - 0x3e8]
call fcn.759b170a
mov esi, 0x65a
jmp 0x75b10340
lea ecx, [ebp - 0x1d4]
call fcn.75aff8c5
lea ecx, [ebp - 0x3e8]
call fcn.759b170a
mov esi, 0x103
jmp 0x75b10340
mov edi, dword [ebp - 0x1d4]
cmp byte [ebp - 0x601], bl
jne 0x75b104dc
cmp dword [ebp - 0x60c], 1
jne 0x75b104dc
cmp word [edi], bx
je 0x75b104a0
cmp eax, ebx
jne 0x75b105d4
cmp dword [ebp - 0x60c], 7
jne 0x75b105d4
mov esi, dword [ebp - 0x620]
shr esi, 1
mov dword [ebp - 0x608], ebx
cmp word [edi], bx
je 0x75b104a0
cmp esi, 0x20
jle 0x75b105d4
lea eax, [ebp - 0x614]
push eax
push 0x21
push edi
mov dword [ebp - 0x614], ebx
call fcn.759b4220
test eax, eax
jl 0x75b105d4
cmp dword [ebp - 0x614], 0x20
jne 0x75b105d4
push edi
push dword [ebp - 0x618]
push dword [ebp - 0x610]
push dword [ebp - 0x61c]
call fcn.75b0fe26
add esp, 0x10
test al, al
je 0x75b1055e
dec dword [ebp - 0x608]
jmp 0x75b105b1
push 0xc
pop eax
mov dword [ebp - 0x34], eax
mov dword [ebp - 0x30], eax
lea eax, [ebp - 0x38]
push eax
push 0x759fac68
push edi
push dword [ebp - 0x618]
lea ecx, [ebp - 0x2c]
push dword [ebp - 0x610]
mov dword [ebp - 0x38], ecx
push dword [ebp - 0x61c]
call fcn.75b0fa3e
add esp, 0x18
test eax, eax
jne 0x75b105a3
push dword [ebp - 0x38]
call fcn.75a1d5ab
pop ecx
cmp eax, 1
je 0x75b105a9
dec dword [ebp - 0x608]
lea ecx, [ebp - 0x38]
call fcn.75a2141a
mov eax, dword [ebp + 0x14]
cmp dword [ebp - 0x608], eax
je 0x75b105f4
add edi, 0x42
sub esi, 0x21
inc dword [ebp - 0x608]
cmp dword [ebp - 0x608], eax
jbe 0x75b104ff
lea ecx, [ebp - 0x1d4]
call fcn.75aff8c5
lea ecx, [ebp - 0x3e8]
call fcn.759b170a
mov esi, 0x64a
jmp 0x75b10340
push edi
push 0x21
push dword [ebp - 0x624]
call fcn.759b3cf5
test eax, eax
jne 0x75b105d4
push 0x20
push dword [ebp - 0x624]
call dword [sym.imp.USER32.dll_CharUpperBuffW]
cmp byte [ebp - 0x601], bl
je 0x75b10651
mov esi, dword [ebp - 0x628]
push ebx
push esi
lea eax, [ebp - 0x60c]
push eax
push ebx
push edi
push dword [ebp - 0x70]
call fcn.759b5885
add esp, 0x18
test eax, eax
jne 0x75b10645
cmp dword [ebp - 0x60c], 1
je 0x75b10651
cmp dword [esi + 4], ebx
je 0x75b10651
mov eax, dword [esi]
xor ecx, ecx
mov word [eax], cx
lea ecx, [ebp - 0x1d4]
call fcn.75aff8c5
lea ecx, [ebp - 0x3e8]
call fcn.759b170a
xor esi, esi
jmp 0x75b10340
cmp byte [ebp - 0x602], bl
jne 0x75b10680
test byte [ebp + 0x28], 1
je 0x75b104ab
lea eax, [ebp - 0xd0]
mov dword [ebp - 0xdc], eax
xor eax, eax
inc eax
xor edi, edi
lea ecx, [ebp - 8]
mov dword [ebp - 0x608], ebx
mov dword [ebp - 0x62c], ebx
mov dword [ebp - 0xd8], 0x21
mov dword [ebp - 0x10], eax
mov dword [ebp - 0x14], ecx
mov dword [ebp - 0x60c], ebx
cmp byte [ebp - 0x601], bl
je 0x75b106c3
test byte [ebp + 0x28], al
jne 0x75b106c9
mov dword [ebp - 0x60c], eax
push ebx
cmp dword [ebp - 0x60c], ebx
jne 0x75b10707
lea eax, [ebp - 0x14]
push eax
lea eax, [ebp - 0x62c]
push eax
push ebx
push ebx
lea eax, [ebp - 0xdc]
push eax
push edi
push dword [ebp - 0x70]
mov dword [ebp - 0xc], 1
mov dword [ebp - 0xd4], 0x21
call fcn.75a5c60a
add esp, 0x20
mov esi, eax
jmp 0x75b1073a
mov eax, dword [ebp - 0xd8]
push ebx
push ebx
push ebx
mov dword [ebp - 0x614], eax
lea eax, [ebp - 0x614]
push eax
push dword [ebp - 0xdc]
push edi
push dword [ebp - 0x8c]
call dword [sym.imp.ADVAPI32.dll_RegEnumKeyExW]
mov ecx, dword [ebp - 0x14]
mov esi, eax
xor eax, eax
mov word [ecx], ax
cmp esi, 2
jne 0x75b10744
mov esi, 0x103
cmp esi, 0x103
jne 0x75b10782
and dword [ebp + 0x28], 0xfffffffe
cmp dword [ebp - 0x60c], ebx
jne 0x75b10870
cmp byte [ebp - 0x602], bl
je 0x75b10870
cmp dword [ebp + 0x28], ebx
je 0x75b10870
mov dword [ebp - 0x60c], 1
xor edi, edi
jmp 0x75b106c9
cmp esi, ebx
jne 0x75b1086b
lea eax, [ebp - 0x614]
push eax
push 0x21
push dword [ebp - 0xdc]
inc edi
mov dword [ebp - 0x614], ebx
call fcn.759b4220
test eax, eax
jl 0x75b106c9
cmp dword [ebp - 0x614], 0x20
jne 0x75b106c9
push 0xc
pop eax
mov dword [ebp - 0x34], eax
mov dword [ebp - 0x30], eax
lea eax, [ebp - 0x38]
push eax
push 0x759fac68
push dword [ebp - 0xdc]
lea ecx, [ebp - 0x2c]
push dword [ebp - 0x618]
mov dword [ebp - 0x38], ecx
push dword [ebp - 0x610]
push dword [ebp - 0x61c]
call fcn.75b0fa3e
add esp, 0x18
test eax, eax
jne 0x75b10893
push dword [ebp - 0x38]
call fcn.75a1d5ab
mov esi, eax
pop ecx
cmp esi, ebx
je 0x75b10893
and eax, dword [ebp + 0x28]
cmp eax, esi
jne 0x75b1085e
cmp dword [ebp - 0x60c], ebx
jne 0x75b10821
cmp esi, 1
jne 0x75b1085e
cmp byte [ebp - 0x601], bl
je 0x75b1084d
push dword [ebp - 0xdc]
push dword [ebp - 0x618]
push dword [ebp - 0x610]
push dword [ebp - 0x61c]
call fcn.75b0fe26
add esp, 0x10
test al, al
jne 0x75b1085e
mov eax, dword [ebp - 0x608]
cmp eax, dword [ebp + 0x14]
je 0x75b108a2
inc dword [ebp - 0x608]
lea ecx, [ebp - 0x38]
call fcn.75a2141a
jmp 0x75b106c9
mov esi, 0x64a
lea ecx, [ebp - 0x14]
call fcn.759b1681
lea ecx, [ebp - 0xdc]
call fcn.759b3f40
lea ecx, [ebp - 0x3e8]
call fcn.759b170a
jmp 0x75b10340
lea ecx, [ebp - 0x38]
mov esi, 0x64a
call fcn.75a2141a
jmp 0x75b10870
mov eax, dword [ebp - 0x620]
cmp eax, ebx
je 0x75b108ae
mov dword [eax], esi
cmp esi, 1
je 0x75b108bb
mov ecx, dword [ebp - 0x14]
xor eax, eax
mov word [ecx], ax
mov eax, dword [ebp - 0x14]
cmp word [eax], bx
jne 0x75b10901
push 1
push 1
lea ecx, [ebp - 0x14]
call fcn.759c5bb8
test al, al
jne 0x75b10901
lea ecx, [ebp - 0x38]
call fcn.75a2141a
lea ecx, [ebp - 0x14]
call fcn.759b1681
lea ecx, [ebp - 0xdc]
call fcn.759b3f40
lea ecx, [ebp - 0x3e8]
call fcn.759b170a
push 0xe
pop esi
jmp 0x75b10340
mov esi, dword [ebp - 0x628]
push ebx
push dword [ebp - 0x10]
mov ecx, esi
call fcn.759b593b
test al, al
je 0x75b108d3
push dword [ebp - 0x14]
mov eax, dword [esi + 4]
mov esi, dword [esi]
push eax
push esi
call fcn.759b3cf5
test eax, eax
jge 0x75b10949
lea ecx, [ebp - 0x38]
call fcn.75a2141a
lea ecx, [ebp - 0x14]
call fcn.759b1681
lea ecx, [ebp - 0xdc]
call fcn.759b3f40
jmp 0x75b103b5
push dword [ebp - 0xdc]
push 0x21
push dword [ebp - 0x624]
call fcn.759b3cf5
test eax, eax
jl 0x75b10929
push 0x20
push dword [ebp - 0x624]
call dword [sym.imp.USER32.dll_CharUpperBuffW]
lea ecx, [ebp - 0x38]
call fcn.75a2141a
lea ecx, [ebp - 0x14]
call fcn.759b1681
lea ecx, [ebp - 0xdc]
call fcn.759b3f40
jmp 0x75b1065c