Function at 0x1002f781
Capabilities:
Query or enumerate registry key

Disassembly:
push ebp
sub esp, 0x7e0
lea ebp, [esp - 4]
mov eax, dword [0x10113a30]
xor eax, ebp
mov dword [ebp + 0x7e0], eax
push 0x34
mov eax, 0x100be8db
call fcn.10092efa
mov eax, dword [ebp + 0x7f0]
mov esi, dword [ebp + 0x7ec]
mov edi, ecx
xor ebx, ebx
mov dword [ebp - 0x28], edi
mov dword [ebp - 0x2c], esi
mov dword [ebp - 0x30], eax
mov dword [ebp - 0x10], ebx
call fcn.1006f7ae
push eax
lea ecx, [ebp - 0x18]
call fcn.10004d63
mov dword [ebp - 4], ebx
call fcn.1006f7ae
push eax
lea ecx, [ebp - 0x20]
call fcn.10004d63
lea eax, [ebp - 0x34]
push eax
mov byte [ebp - 4], 1
mov dword [ebp - 0x14], ebx
call fcn.10009e6a
mov dword [esp], pe_nt_image_headers32
lea eax, [ebp + 0x5bc]
push ebx
push eax
call fcn.1008ef90
add esp, 0xc
cmp dword [ebp - 0x34], 0xb
lea eax, [ebp + 0x6bc]
jl 0x1002f81a
push str.SYSTEMCurrentControlSetControlClass4D36E972_E325_11CE_BFC1_08002bE10318_
jmp 0x1002f81f
push str.SYSTEMCurrentControlSetServicesClassNet_
push eax
call dword [sym.imp.KERNEL32.dll_lstrcpyA]
add edi, 0x84
push edi
lea eax, [ebp + 0x6bc]
push eax
call dword [sym.imp.KERNEL32.dll_lstrcatA]
push str.WifiDirectWpseProfile
lea eax, [ebp + 0x6bc]
push eax
lea eax, [ebp - 0x18]
push 0x100cda14
push eax
call fcn.10005cfd
add esp, 0x10
lea eax, [ebp - 0x10]
push eax
push 0x20019
push ebx
push dword [ebp - 0x18]
push reloc.OLEAUT32.dll_SysReAllocString
call dword [sym.imp.ADVAPI32.dll_RegOpenKeyExA]
test eax, eax
je 0x1002f8d5
push dword [ebp - 0x18]
lea eax, [ebp + 0x5bc]
push str._RC__RaWLAPI__MS80211::GetWifiDirectWpseProfileList__:_RegOpenKeyEx__hs_failed_n
push eax
call fcn.1008e5f7
lea eax, [ebp + 0x5bc]
push eax
push 1
call fcn.1000926a
add esp, 0x14
mov ecx, dword [ebp - 0x20]
add ecx, 0xfffffff0
call fcn.10001210
mov ecx, dword [ebp - 0x18]
add ecx, 0xfffffff0
call fcn.10001210
mov eax, ebx
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov ecx, dword [ebp + 0x7e0]
xor ecx, ebp
call fcn.1008e5e8
add ebp, 0x7e4
leave
ret 0x10
lea eax, [ebp - 0x3c]
push eax
push ebx
push ebx
push ebx
lea eax, [ebp - 0x24]
push eax
lea eax, [ebp + 0x7bc]
push eax
push ebx
push dword [ebp - 0x10]
mov byte [ebp + 0x7bc], bl
mov dword [ebp - 0x24], 0x21
call dword [sym.imp.ADVAPI32.dll_RegEnumKeyExA]
test eax, eax
jne 0x1002f989
mov dword [ebp - 0x1c], esi
mov esi, 0x100cdb5f
mov edi, 0x5bc
lea eax, [ebp + 0x7bc]
push eax
lea ecx, [ebp - 0x20]
call fcn.10005cd8
push esi
push esi
push ecx
lea eax, [ebp - 0x20]
mov dword [ebp - 0x40], esp
mov ecx, esp
push eax
call fcn.1000ab53
mov ecx, dword [ebp - 0x28]
lea eax, [ebp]
push eax
call fcn.10026413
cmp dword [ebp - 0x2c], ebx
je 0x1002f954
push edi
lea eax, [ebp]
push eax
push dword [ebp - 0x1c]
call fcn.1008ebc0
add esp, 0xc
inc dword [ebp - 0x14]
add dword [ebp - 0x1c], edi
lea eax, [ebp - 0x3c]
push eax
push ebx
push ebx
push ebx
lea eax, [ebp - 0x24]
push eax
lea eax, [ebp + 0x7bc]
push eax
push dword [ebp - 0x14]
mov byte [ebp + 0x7bc], bl
push dword [ebp - 0x10]
mov dword [ebp - 0x24], 0x21
call dword [sym.imp.ADVAPI32.dll_RegEnumKeyExA]
test eax, eax
je 0x1002f913
cmp dword [ebp - 0x10], ebx
je 0x1002f99a
push dword [ebp - 0x10]
call dword [sym.imp.ADVAPI32.dll_RegCloseKey]
mov dword [ebp - 0x10], ebx
mov eax, dword [ebp - 0x14]
mov ecx, dword [ebp - 0x30]
xor ebx, ebx
mov dword [ecx], eax
inc ebx
jmp 0x1002f898