Function at 0x1002ed00
Capabilities:
Query or enumerate registry key
Query or enumerate registry value

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x1006ffbd
mov eax, dword fs:[0]
push eax
sub esp, 0x45c
mov eax, dword [0x100f38c4]
xor eax, ebp
mov dword [ebp - 0x10], eax
push ebx
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov eax, dword [ebp + 8]
mov ebx, dword [ebp + 0xc]
mov edx, str.ProfileName
mov dword [ebp - 0x454], ecx
mov ecx, dword [0x100e8014]
shr edx, 0x10
mov dword [ebp - 0x43c], eax
mov dword [ebp - 0x468], ebx
mov dword [ebp - 0x430], ecx
test edx, edx
jne 0x1002ed7a
mov eax, str.ProfileName
movzx eax, ax
push eax
lea ecx, [ebp - 0x430]
call fcn.100015c0
mov edi, dword [sym.imp.KERNEL32.dll_lstrlenW]
jmp 0x1002edbc
mov edi, dword [sym.imp.KERNEL32.dll_lstrlenW]
push str.ProfileName
call edi
mov esi, eax
test esi, esi
je 0x1002edbc
push esi
lea ecx, [ebp - 0x430]
call fcn.10001200
test eax, eax
je 0x1002edbc
lea eax, [esi + esi]
lea ecx, [eax + 2]
cmp ecx, eax
jb 0x1002edbc
mov edx, dword [ebp - 0x430]
push eax
push str.ProfileName
push edx
call fcn.100558b0
add esp, 0xc
mov eax, dword [0x100e8014]
mov ecx, str.ProfileID
shr ecx, 0x10
mov dword [ebp - 4], 0
mov dword [ebp - 0x42c], eax
test ecx, ecx
jne 0x1002edf0
mov edx, str.ProfileID
movzx eax, dx
push eax
lea ecx, [ebp - 0x42c]
call fcn.100015c0
jmp 0x1002ee2c
push str.ProfileID
call edi
mov esi, eax
test esi, esi
je 0x1002ee2c
push esi
lea ecx, [ebp - 0x42c]
call fcn.10001200
test eax, eax
je 0x1002ee2c
lea eax, [esi + esi]
lea ecx, [eax + 2]
cmp ecx, eax
jb 0x1002ee2c
mov edx, dword [ebp - 0x42c]
push eax
push str.ProfileID
push edx
call fcn.100558b0
add esp, 0xc
mov eax, dword [0x100e8014]
mov ecx, str.SoftwareConexantSAEQ1
shr ecx, 0x10
mov byte [ebp - 4], 1
mov dword [ebp - 0x424], eax
test ecx, ecx
jne 0x1002ee5d
mov edx, str.SoftwareConexantSAEQ1
movzx eax, dx
push eax
lea ecx, [ebp - 0x424]
call fcn.100015c0
jmp 0x1002ee99
push str.SoftwareConexantSAEQ1
call edi
mov esi, eax
test esi, esi
je 0x1002ee99
push esi
lea ecx, [ebp - 0x424]
call fcn.10001200
test eax, eax
je 0x1002ee99
lea eax, [esi + esi]
lea ecx, [eax + 2]
cmp ecx, eax
jb 0x1002ee99
mov edx, dword [ebp - 0x424]
push eax
push str.SoftwareConexantSAEQ1
push edx
call fcn.100558b0
add esp, 0xc
mov edi, dword [0x100e8014]
mov dword [ebp - 0x440], 0
mov dword [ebp - 0x450], edi
mov ecx, dword [ebp - 0x424]
mov edx, dword [ebp - 0x43c]
mov esi, dword [sym.imp.ADVAPI32.dll_RegOpenKeyExW]
mov ebx, dword [ebx]
lea eax, [ebp - 0x438]
push eax
push 0x20019
push 0
push ecx
push edx
mov byte [ebp - 4], 3
call esi
test eax, eax
je 0x1002ef03
mov ecx, dword [ebp - 0x424]
mov edx, dword [ebp - 0x43c]
lea eax, [ebp - 0x438]
push eax
push 0x20119
push 0
push ecx
push edx
call esi
test eax, eax
jne 0x1002f1f8
mov ecx, dword [ebp - 0x438]
push 0x104
lea eax, [ebp - 0x420]
push eax
push 0
push ecx
call dword [sym.imp.ADVAPI32.dll_RegEnumKeyW]
test eax, eax
jne 0x1002f1e3
lea edx, [ebx + ebx]
mov dword [ebp - 0x44c], edx
mov edi, dword [0x100e8014]
inc dword [ebp - 0x440]
push 0x10078b70
mov dword [ebp - 0x428], edi
call dword [sym.imp.KERNEL32.dll_lstrlenA]
mov esi, eax
test esi, esi
je 0x1002efba
push esi
lea ecx, [ebp - 0x428]
call fcn.10001200
test eax, eax
je 0x1002efb4
lea eax, [esi + 1]
mov esi, dword [ebp - 0x428]
test eax, eax
jne 0x1002ef73
test esi, esi
jne 0x1002ef91
push eax
push esi
push 0xffffffffffffffff
push 0x10078b70
push 0
push 0
call dword [sym.imp.KERNEL32.dll_MultiByteToWideChar]
test eax, eax
jle 0x1002ef91
xor ecx, ecx
mov word [esi + eax*2 - 2], cx
lea ecx, [ebp - 0x428]
call fcn.10001480
mov edi, dword [ebp - 0x428]
push edi
call dword [sym.imp.KERNEL32.dll_lstrlenW]
xor edx, edx
mov dword [edi - 8], eax
mov word [edi + eax*2], dx
jmp 0x1002efba
mov edi, dword [ebp - 0x428]
lea eax, [ebp - 0x428]
push eax
lea ecx, [ebp - 0x424]
push ecx
lea edx, [ebp - 0x45c]
push edx
mov byte [ebp - 4], 4
call fcn.1001fa00
lea ecx, [ebp - 0x420]
push ecx
push eax
lea edx, [ebp - 0x448]
push edx
mov byte [ebp - 4], 5
call fcn.1001fa70
push eax
lea ecx, [ebp - 0x450]
mov byte [ebp - 4], 6
call fcn.1001e0e0
mov eax, dword [ebp - 0x448]
lea ecx, [eax - 0xc]
cmp ecx, dword [0x100e8010]
je 0x1002f031
add eax, 0xfffffff4
push eax
call dword [sym.imp.KERNEL32.dll_InterlockedDecrement]
test eax, eax
jg 0x1002f031
mov eax, dword [ebp - 0x448]
add eax, 0xfffffff4
push eax
call fcn.10055c11
add esp, 4
mov eax, dword [ebp - 0x45c]
lea edx, [eax - 0xc]
cmp edx, dword [0x100e8010]
je 0x1002f062
add eax, 0xfffffff4
push eax
call dword [sym.imp.KERNEL32.dll_InterlockedDecrement]
test eax, eax
jg 0x1002f062
mov eax, dword [ebp - 0x45c]
add eax, 0xfffffff4
push eax
call fcn.10055c11
add esp, 4
lea eax, [edi - 0xc]
mov byte [ebp - 4], 3
cmp eax, dword [0x100e8010]
je 0x1002f088
lea esi, [edi - 0xc]
push esi
call dword [sym.imp.KERNEL32.dll_InterlockedDecrement]
test eax, eax
jg 0x1002f088
push esi
call fcn.10055c11
add esp, 4
mov edi, dword [ebp - 0x450]
mov edx, dword [ebp - 0x43c]
mov esi, dword [sym.imp.ADVAPI32.dll_RegOpenKeyExW]
lea ecx, [ebp - 0x434]
push ecx
push 1
push 0
push edi
push edx
call esi
test eax, eax
je 0x1002f0cd
mov ecx, dword [ebp - 0x43c]
lea eax, [ebp - 0x434]
push eax
push 0x101
push 0
push edi
push ecx
call esi
test eax, eax
jne 0x1002f1bb
lea edx, [ebp - 0x460]
push edx
mov edx, dword [ebp - 0x430]
lea eax, [ebp - 0x218]
push eax
mov eax, dword [ebp - 0x434]
lea ecx, [ebp - 0x444]
push ecx
push 0
push edx
push eax
mov dword [ebp - 0x444], 1
mov dword [ebp - 0x460], 0x208
call dword [sym.imp.ADVAPI32.dll_RegQueryValueExW]
test eax, eax
jne 0x1002f139
mov ecx, dword [ebp - 0x454]
mov edx, dword [ecx + 0x54]
lea eax, [ebp - 0x218]
lea esi, [edx + ebx*4]
push eax
inc ebx
call dword [sym.imp.KERNEL32.dll_lstrlenW]
lea ecx, [ebp - 0x218]
push ecx
push eax
mov ecx, esi
call fcn.100014f0
mov eax, 4
mov dword [ebp - 0x444], eax
mov dword [ebp - 0x464], eax
lea edx, [ebp - 0x464]
push edx
mov edx, dword [ebp - 0x42c]
lea eax, [ebp - 0x458]
push eax
mov eax, dword [ebp - 0x434]
lea ecx, [ebp - 0x444]
push ecx
push 0
push edx
push eax
mov dword [ebp - 0x458], 0
call dword [sym.imp.ADVAPI32.dll_RegQueryValueExW]
test eax, eax
jne 0x1002f1ae
mov ecx, dword [ebp - 0x454]
mov eax, dword [ebp - 0x44c]
mov edx, dword [ecx + 0x58]
mov si, word [ebp - 0x458]
mov word [eax + edx], si
add eax, 2
mov dword [ebp - 0x44c], eax
movzx eax, word [ecx + 0x50]
cmp ebx, eax
jg 0x1002f1e3
mov ecx, dword [ebp - 0x434]
push ecx
call dword [sym.imp.ADVAPI32.dll_RegCloseKey]
mov eax, dword [ebp - 0x440]
mov ecx, dword [ebp - 0x438]
push 0x104
lea edx, [ebp - 0x420]
push edx
push eax
push ecx
call dword [sym.imp.ADVAPI32.dll_RegEnumKeyW]
test eax, eax
je 0x1002ef2f
mov edx, dword [ebp - 0x438]
push edx
call dword [sym.imp.ADVAPI32.dll_RegCloseKey]
mov eax, dword [ebp - 0x468]
mov dword [eax], ebx
lea ecx, [edi - 0xc]
cmp ecx, dword [0x100e8010]
je 0x1002f21a
lea esi, [edi - 0xc]
push esi
call dword [sym.imp.KERNEL32.dll_InterlockedDecrement]
test eax, eax
jg 0x1002f21a
push esi
call fcn.10055c11
add esp, 4
mov esi, dword [ebp - 0x424]
lea edx, [esi - 0xc]
cmp edx, dword [0x100e8010]
je 0x1002f242
add esi, 0xfffffff4
push esi
call dword [sym.imp.KERNEL32.dll_InterlockedDecrement]
test eax, eax
jg 0x1002f242
push esi
call fcn.10055c11
add esp, 4
mov esi, dword [ebp - 0x42c]
lea eax, [esi - 0xc]
cmp eax, dword [0x100e8010]
je 0x1002f26a
add esi, 0xfffffff4
push esi
call dword [sym.imp.KERNEL32.dll_InterlockedDecrement]
test eax, eax
jg 0x1002f26a
push esi
call fcn.10055c11
add esp, 4
mov esi, dword [ebp - 0x430]
lea ecx, [esi - 0xc]
cmp ecx, dword [0x100e8010]
je 0x1002f292
add esi, 0xfffffff4
push esi
call dword [sym.imp.KERNEL32.dll_InterlockedDecrement]
test eax, eax
jg 0x1002f292
push esi
call fcn.10055c11
add esp, 4
xor eax, eax
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 0x10]
xor ecx, ebp
call fcn.10055898
mov esp, ebp
pop ebp
ret 8