Function at 0x10018dc0
Capabilities:
Link many functions at runtime
Query or enumerate registry value

Disassembly:
sub esp, 0x220
mov eax, dword [0x1006f3c0]
xor eax, esp
mov dword [esp + 0x21c], eax
lea eax, [esp]
push eax
push 0x20019
push 0
push 0x10001308
push reloc.mswstr10.dll_Ordinal_2
call dword [sym.imp.ADVAPI32.dll_RegOpenKeyExA]
test eax, eax
je 0x10018e0a
xor eax, eax
mov ecx, dword [esp + 0x21c]
xor ecx, esp
call fcn.1005268d
add esp, 0x220
ret
push esi
lea eax, [esp + 8]
mov dword [esp + 8], 0x105
push eax
lea eax, [esp + 0x11c]
push eax
lea eax, [esp + 0x14]
push eax
push 0
push 0x1000132c
push dword [esp + 0x18]
call dword [sym.imp.ADVAPI32.dll_RegQueryValueExA]
push dword [esp + 4]
mov esi, eax
call dword [sym.imp.ADVAPI32.dll_RegCloseKey]
test esi, esi
jne 0x1001a17f
mov eax, dword [esp + 8]
test eax, eax
jle 0x1001a17f
cmp dword [esp + 0xc], 1
jne 0x1001a17f
cmp eax, 0x105
jae 0x1001a19c
push ebx
push ebp
push edi
mov byte [esp + eax + 0x124], 0
lea edi, [esp + 0x124]
mov eax, edi
push 0x3b
push eax
call fcn.100533f0
mov ebx, eax
add esp, 8
test ebx, ebx
je 0x10018f1d
mov ebp, dword [sym.imp.KERNEL32.dll_LoadLibraryA]
jmp 0x10018ea0
lea ecx, [esp + 0x1c]
mov esi, edi
mov eax, ecx
mov edx, 0x105
sub esi, eax
nop
lea eax, [edx + 0x7ffffef9]
test eax, eax
je 0x10018ec9
mov al, byte [esi + ecx]
test al, al
je 0x10018ec9
mov byte [ecx], al
inc ecx
dec edx
jne 0x10018eb0
jmp 0x10018ecd
test edx, edx
jne 0x10018ece
dec ecx
mov eax, ebx
mov byte [ecx], 0
sub eax, edi
cmp eax, 0x105
jae 0x1001a197
push 0x10001334
mov byte [esp + eax + 0x20], 0
lea eax, [esp + 0x20]
push 0x105
push eax
call fcn.1001a1d0
lea eax, [esp + 0x1c]
push eax
call ebp
mov dword [0x10070fec], eax
test eax, eax
jne 0x10018f4a
lea edi, [ebx + 1]
push 0x3b
push edi
call fcn.100533f0
mov ebx, eax
add esp, 8
test ebx, ebx
jne 0x10018ea0
push 0x10001334
lea eax, [esp + 0x22d]
sub eax, edi
push eax
push edi
call fcn.1001a1d0
push 8
push 0
push edi
call dword [sym.imp.KERNEL32.dll_LoadLibraryExA]
mov dword [0x10070fec], eax
test eax, eax
je 0x1001a147
mov esi, dword [sym.imp.KERNEL32.dll_GetProcAddress]
push 0x10001344
push eax
call esi
mov dword [0x10075ee0], eax
test eax, eax
je 0x1001a147
push 0x10001350
push dword [0x10070fec]
call esi
mov dword [0x10075ee4], eax
test eax, eax
je 0x1001a147
push 0x10001358
push dword [0x10070fec]
call esi
mov dword [0x10075ee8], eax
test eax, eax
je 0x1001a147
push 0x1000136c
push dword [0x10070fec]
call esi
mov dword [0x10075eec], eax
test eax, eax
je 0x1001a147
push 0x1000137c
push dword [0x10070fec]
call esi
mov dword [0x10075ef0], eax
test eax, eax
je 0x1001a147
push 0x10001390
push dword [0x10070fec]
call esi
mov dword [0x10075ef4], eax
test eax, eax
je 0x1001a147
push 0x100013a0
push dword [0x10070fec]
call esi
mov dword [0x10075ef8], eax
test eax, eax
je 0x1001a147
push 0x100013b0
push dword [0x10070fec]
call esi
mov dword [0x10075efc], eax
test eax, eax
je 0x1001a147
push 0x100013c0
push dword [0x10070fec]
call esi
mov dword [0x10075f00], eax
test eax, eax
je 0x1001a147
push 0x100013d4
push dword [0x10070fec]
call esi
mov dword [0x10075f04], eax
test eax, eax
je 0x1001a147
push 0x100013e8
push dword [0x10070fec]
call esi
mov dword [0x10075f08], eax
test eax, eax
je 0x1001a147
push 0x100013f8
push dword [0x10070fec]
call esi
mov dword [0x10075f0c], eax
test eax, eax
je 0x1001a147
push 0x10001408
push dword [0x10070fec]
call esi
mov dword [0x10075f10], eax
test eax, eax
je 0x1001a147
push 0x1000141c
push dword [0x10070fec]
call esi
mov dword [0x10075f14], eax
test eax, eax
je 0x1001a147
push 0x1000142c
push dword [0x10070fec]
call esi
mov dword [0x10075f18], eax
test eax, eax
je 0x1001a147
push 0x1000143c
push dword [0x10070fec]
call esi
mov dword [0x10075f1c], eax
test eax, eax
je 0x1001a147
push 0x1000144c
push dword [0x10070fec]
call esi
mov dword [0x10075f20], eax
test eax, eax
je 0x1001a147
push 0x10001460
push dword [0x10070fec]
call esi
mov dword [0x10075f24], eax
test eax, eax
je 0x1001a147
push 0x10001470
push dword [0x10070fec]
call esi
mov dword [0x10075f28], eax
test eax, eax
je 0x1001a147
push 0x10001484
push dword [0x10070fec]
call esi
mov dword [0x10075f2c], eax
test eax, eax
je 0x1001a147
push 0x10001498
push dword [0x10070fec]
call esi
mov dword [0x10075f30], eax
test eax, eax
je 0x1001a147
push 0x100014a8
push dword [0x10070fec]
call esi
mov dword [0x10075f34], eax
test eax, eax
je 0x1001a147
push 0x100014b8
push dword [0x10070fec]
call esi
mov dword [0x10075f38], eax
test eax, eax
je 0x1001a147
push 0x100014cc
push dword [0x10070fec]
call esi
mov dword [0x10075f3c], eax
test eax, eax
je 0x1001a147
push 0x100014e0
push dword [0x10070fec]
call esi
mov dword [0x10075f40], eax
test eax, eax
je 0x1001a147
push 0x100014f4
push dword [0x10070fec]
call esi
mov dword [0x10075f44], eax
test eax, eax
je 0x1001a147
push 0x10001508
push dword [0x10070fec]
call esi
mov dword [0x10075f48], eax
test eax, eax
je 0x1001a147
push 0x1000151c
push dword [0x10070fec]
call esi
mov dword [0x10075f4c], eax
test eax, eax
je 0x1001a147
push 0x10001530
push dword [0x10070fec]
call esi
mov dword [0x10075f50], eax
test eax, eax
je 0x1001a147
push 0x10001544
push dword [0x10070fec]
call esi
mov dword [0x10075f54], eax
test eax, eax
je 0x1001a147
push 0x1000155c
push dword [0x10070fec]
call esi
mov dword [0x10075f58], eax
test eax, eax
je 0x1001a147
push 0x10001570
push dword [0x10070fec]
call esi
mov dword [0x10075f5c], eax
test eax, eax
je 0x1001a147
push 0x10001588
push dword [0x10070fec]
call esi
mov dword [0x10075f60], eax
test eax, eax
je 0x1001a147
push 0x1000159c
push dword [0x10070fec]
call esi
mov dword [0x10075f64], eax
test eax, eax
je 0x1001a147
push 0x100015b4
push dword [0x10070fec]
call esi
mov dword [0x10075f68], eax
test eax, eax
je 0x1001a147
push 0x100015c8
push dword [0x10070fec]
call esi
mov dword [0x10075f6c], eax
test eax, eax
je 0x1001a147
push 0x100015d8
push dword [0x10070fec]
call esi
mov dword [0x10075f70], eax
test eax, eax
je 0x1001a147
push 0x100015e8
push dword [0x10070fec]
call esi
mov dword [0x10075f74], eax
test eax, eax
je 0x1001a147
push 0x100015fc
push dword [0x10070fec]
call esi
mov dword [0x10075f78], eax
test eax, eax
je 0x1001a147
push 0x10001610
push dword [0x10070fec]
call esi
mov dword [0x10075f7c], eax
test eax, eax
je 0x1001a147
push 0x10001624
push dword [0x10070fec]
call esi
mov dword [0x10075f80], eax
test eax, eax
je 0x1001a147
push 0x10001630
push dword [0x10070fec]
call esi
mov dword [0x10075f84], eax
test eax, eax
je 0x1001a147
push 0x1000163c
push dword [0x10070fec]
call esi
mov dword [0x10075f88], eax
test eax, eax
je 0x1001a147
push 0x10001650
push dword [0x10070fec]
call esi
mov dword [0x10075f8c], eax
test eax, eax
je 0x1001a147
push 0x10001668
push dword [0x10070fec]
call esi
mov dword [0x10075f90], eax
test eax, eax
je 0x1001a147
push 0x10001678
push dword [0x10070fec]
call esi
mov dword [0x10075f94], eax
test eax, eax
je 0x1001a147
push 0x10001688
push dword [0x10070fec]
call esi
mov dword [0x10075f98], eax
test eax, eax
je 0x1001a147
push 0x10001698
push dword [0x10070fec]
call esi
mov dword [0x10075f9c], eax
test eax, eax
je 0x1001a147
push 0x100016a8
push dword [0x10070fec]
call esi
mov dword [0x10075fa0], eax
test eax, eax
je 0x1001a147
push 0x100016bc
push dword [0x10070fec]
call esi
mov dword [0x10075fa4], eax
test eax, eax
je 0x1001a147
push 0x100016cc
push dword [0x10070fec]
call esi
mov dword [0x10075fa8], eax
test eax, eax
je 0x1001a147
push 0x100016e0
push dword [0x10070fec]
call esi
mov dword [0x10075fac], eax
test eax, eax
je 0x1001a147
push 0x100016f4
push dword [0x10070fec]
call esi
mov dword [0x10075fb0], eax
test eax, eax
je 0x1001a147
push 0x10001708
push dword [0x10070fec]
call esi
mov dword [0x10075fb4], eax
test eax, eax
je 0x1001a147
push 0x10001714
push dword [0x10070fec]
call esi
mov dword [0x10075fb8], eax
test eax, eax
je 0x1001a147
push 0x10001724
push dword [0x10070fec]
call esi
mov dword [0x10075fbc], eax
test eax, eax
je 0x1001a147
push 0x10001730
push dword [0x10070fec]
call esi
mov dword [0x10075fc0], eax
test eax, eax
je 0x1001a147
push 0x10001740
push dword [0x10070fec]
call esi
mov dword [0x10075fc4], eax
test eax, eax
je 0x1001a147
push 0x10001750
push dword [0x10070fec]
call esi
mov dword [0x10075fc8], eax
test eax, eax
je 0x1001a147
push 0x10001764
push dword [0x10070fec]
call esi
mov dword [0x10075fcc], eax
test eax, eax
je 0x1001a147
push 0x10001774
push dword [0x10070fec]
call esi
mov dword [0x10075fd0], eax
test eax, eax
je 0x1001a147
push 0x10001784
push dword [0x10070fec]
call esi
mov dword [0x10075fd4], eax
test eax, eax
je 0x1001a147
push 0x10001794
push dword [0x10070fec]
call esi
mov dword [0x10075fd8], eax
test eax, eax
je 0x1001a147
push 0x100017a0
push dword [0x10070fec]
call esi
mov dword [0x10075fdc], eax
test eax, eax
je 0x1001a147
push 0x100017b0
push dword [0x10070fec]
call esi
mov dword [0x10075fe0], eax
test eax, eax
je 0x1001a147
push 0x100017c0
push dword [0x10070fec]
call esi
mov dword [0x10075fe4], eax
test eax, eax
je 0x1001a147
push 0x100017d4
push dword [0x10070fec]
call esi
mov dword [0x10075fe8], eax
test eax, eax
je 0x1001a147
push 0x100017e8
push dword [0x10070fec]
call esi
mov dword [0x10075fec], eax
test eax, eax
je 0x1001a147
push 0x100017fc
push dword [0x10070fec]
call esi
mov dword [0x10075ff0], eax
test eax, eax
je 0x1001a147
push 0x10001810
push dword [0x10070fec]
call esi
mov dword [0x10075ff4], eax
test eax, eax
je 0x1001a147
push 0x10001820
push dword [0x10070fec]
call esi
mov dword [0x10075ff8], eax
test eax, eax
je 0x1001a147
push 0x10001838
push dword [0x10070fec]
call esi
mov dword [0x10075ffc], eax
test eax, eax
je 0x1001a147
push 0x10001848
push dword [0x10070fec]
call esi
mov dword [0x10076000], eax
test eax, eax
je 0x1001a147
push 0x10001858
push dword [0x10070fec]
call esi
mov dword [0x10076004], eax
test eax, eax
je 0x1001a147
push 0x10001868
push dword [0x10070fec]
call esi
mov dword [0x10076008], eax
test eax, eax
je 0x1001a147
push 0x10001878
push dword [0x10070fec]
call esi
mov dword [0x1007600c], eax
test eax, eax
je 0x1001a147
push 0x10001888
push dword [0x10070fec]
call esi
mov dword [0x10076010], eax
test eax, eax
je 0x1001a147
push 0x10001898
push dword [0x10070fec]
call esi
mov dword [0x10076014], eax
test eax, eax
je 0x1001a147
push 0x100018a8
push dword [0x10070fec]
call esi
mov dword [0x10076018], eax
test eax, eax
je 0x1001a147
push 0x100018bc
push dword [0x10070fec]
call esi
mov dword [0x1007601c], eax
test eax, eax
je 0x1001a147
push 0x100018c8
push dword [0x10070fec]
call esi
mov dword [0x10076020], eax
test eax, eax
je 0x1001a147
push 0x100018d8
push dword [0x10070fec]
call esi
mov dword [0x10076024], eax
test eax, eax
je 0x1001a147
push 0x100018ec
push dword [0x10070fec]
call esi
mov dword [0x10076028], eax
test eax, eax
je 0x1001a147
push 0x10001900
push dword [0x10070fec]
call esi
mov dword [0x1007602c], eax
test eax, eax
je 0x1001a147
push 0x10001910
push dword [0x10070fec]
call esi
mov dword [0x10076030], eax
test eax, eax
je 0x1001a147
push 0x10001920
push dword [0x10070fec]
call esi
mov dword [0x10076034], eax
test eax, eax
je 0x1001a147
push 0x10001930
push dword [0x10070fec]
call esi
mov dword [0x10076038], eax
test eax, eax
je 0x1001a147
push 0x10001944
push dword [0x10070fec]
call esi
mov dword [0x1007603c], eax
test eax, eax
je 0x1001a147
push 0x10001950
push dword [0x10070fec]
call esi
mov dword [0x10076040], eax
test eax, eax
je 0x1001a147
push 0x1000195c
push dword [0x10070fec]
call esi
mov dword [0x10076044], eax
test eax, eax
je 0x1001a147
push 0x1000196c
push dword [0x10070fec]
call esi
mov dword [0x10076048], eax
test eax, eax
je 0x1001a147
push 0x10001978
push dword [0x10070fec]
call esi
mov dword [0x1007604c], eax
test eax, eax
je 0x1001a147
push 0x10001988
push dword [0x10070fec]
call esi
mov dword [0x10076050], eax
test eax, eax
je 0x1001a147
push 0x10001994
push dword [0x10070fec]
call esi
mov dword [0x10076054], eax
test eax, eax
je 0x1001a147
push 0x100019a0
push dword [0x10070fec]
call esi
mov dword [0x10076058], eax
test eax, eax
je 0x1001a147
push 0x100019b0
push dword [0x10070fec]
call esi
mov dword [0x1007605c], eax
test eax, eax
je 0x1001a147
push 0x100019bc
push dword [0x10070fec]
call esi
mov dword [0x10076060], eax
test eax, eax
je 0x1001a147
push 0x100019d0
push dword [0x10070fec]
call esi
mov dword [0x10076064], eax
test eax, eax
je 0x1001a147
push 0x100019e0
push dword [0x10070fec]
call esi
mov dword [0x10076068], eax
test eax, eax
je 0x1001a147
push 0x100019f0
push dword [0x10070fec]
call esi
mov dword [0x1007606c], eax
test eax, eax
je 0x1001a147
push 0x100019fc
push dword [0x10070fec]
call esi
mov dword [0x10076070], eax
test eax, eax
je 0x1001a147
push 0x10001a0c
push dword [0x10070fec]
call esi
mov dword [0x10076074], eax
test eax, eax
je 0x1001a147
push 0x10001a1c
push dword [0x10070fec]
call esi
mov dword [0x10076078], eax
test eax, eax
je 0x1001a147
push 0x10001a34
push dword [0x10070fec]
call esi
mov dword [0x1007607c], eax
test eax, eax
je 0x1001a147
push 0x10001a4c
push dword [0x10070fec]
call esi
mov dword [0x10076080], eax
test eax, eax
je 0x1001a147
push 0x10001a5c
push dword [0x10070fec]
call esi
mov dword [0x10076084], eax
test eax, eax
je 0x1001a147
push 0x10001a70
push dword [0x10070fec]
call esi
mov dword [0x10076088], eax
test eax, eax
je 0x1001a147
push 0x10001a84
push dword [0x10070fec]
call esi
mov dword [0x1007608c], eax
test eax, eax
je 0x1001a147
push 0x10001a98
push dword [0x10070fec]
call esi
mov dword [0x10076090], eax
test eax, eax
je 0x1001a147
push 0x10001aac
push dword [0x10070fec]
call esi
mov dword [0x10076094], eax
test eax, eax
je 0x1001a147
push 0x10001abc
push dword [0x10070fec]
call esi
mov dword [0x10076098], eax
test eax, eax
je 0x1001a147
push 0x10001acc
push dword [0x10070fec]
call esi
mov dword [0x1007609c], eax
test eax, eax
je 0x1001a147
push 0x10001adc
push dword [0x10070fec]
call esi
mov dword [0x100760a0], eax
test eax, eax
je 0x1001a147
push 0x10001aec
push dword [0x10070fec]
call esi
mov dword [0x100760a4], eax
test eax, eax
je 0x1001a147
push 0x10001afc
push dword [0x10070fec]
call esi
mov dword [0x100760a8], eax
test eax, eax
je 0x1001a147
push 0x10001b0c
push dword [0x10070fec]
call esi
mov dword [0x100760ac], eax
test eax, eax
je 0x1001a147
push 0x10001b1c
push dword [0x10070fec]
call esi
mov dword [0x100760b0], eax
test eax, eax
je 0x1001a147
push 0x10001b2c
push dword [0x10070fec]
call esi
mov dword [0x100760b4], eax
test eax, eax
je 0x1001a147
push 0x10001b3c
push dword [0x10070fec]
call esi
mov dword [0x100760b8], eax
test eax, eax
je 0x1001a147
push 0x10001b4c
push dword [0x10070fec]
call esi
mov dword [0x100760bc], eax
test eax, eax
je 0x1001a147
push 0x10001b5c
push dword [0x10070fec]
call esi
mov dword [0x100760c0], eax
test eax, eax
je 0x1001a147
push 0x10001b70
push dword [0x10070fec]
call esi
mov dword [0x100760c4], eax
test eax, eax
je 0x1001a147
xor eax, eax
pop edi
pop ebp
pop ebx
pop esi
mov ecx, dword [esp + 0x21c]
xor ecx, esp
call fcn.1005268d
add esp, 0x220
ret
mov ecx, dword [esp + 0x220]
xor eax, eax
pop esi
xor ecx, esp
call fcn.1005268d
add esp, 0x220
ret
call fcn.10053308
call fcn.10053308
int3