Function at 0x10003f40
Capabilities:
Query or enumerate registry key

Disassembly:
mov eax, 0x1024
call fcn.1000d8d0
lea eax, [esp]
push esi
xor esi, esi
push eax
push 8
push esi
push str.SOFTWAREAsusAI_SUITE_II
push reloc.OLEAUT32.dll_SysReAllocString
mov dword [esp + 0x18], esi
call dword [sym.imp.ADVAPI32.dll_RegOpenKeyExW]
test eax, eax
jne 0x1000421e
push edi
mov ecx, 0x1ff
lea edi, [esp + 0x2e]
mov word [esp + 0x2c], si
rep stosd dword es:[edi], eax
lea ecx, [esp + 0x24]
lea edx, [esp + 0x10]
push ecx
mov ecx, dword [esp + 0xc]
push esi
push esi
stosw word es:[edi], ax
push esi
lea eax, [esp + 0x3c]
push edx
push eax
push esi
push ecx
mov dword [esp + 0x30], 0x800
mov dword [esp + 0x38], 1
call dword [sym.imp.ADVAPI32.dll_RegEnumKeyExW]
test eax, eax
jne 0x10004205
push ebx
push ebp
mov ecx, 0x1ff
xor eax, eax
lea edi, [esp + 0x836]
mov word [esp + 0x834], si
rep stosd dword es:[edi], eax
lea edx, [esp + 0x34]
mov dword [esp + 0x18], 0x800
stosw word es:[edi], ax
push edx
push str.SOFTWAREAsusAI_SUITE_II
lea eax, [esp + 0x83c]
push str._s_s
push eax
mov dword [esp + 0x34], esi
call dword [sym.imp.USER32.dll_wsprintfW]
add esp, 0x10
lea ecx, [esp + 0x24]
lea edx, [esp + 0x834]
push ecx
push 1
push esi
push edx
push reloc.OLEAUT32.dll_SysReAllocString
call dword [sym.imp.ADVAPI32.dll_RegOpenKeyExW]
test eax, eax
jne 0x100041d2
push 0xc8
call fcn.1001f60c
mov ebp, eax
mov ecx, 0x32
xor eax, eax
mov edi, ebp
add esp, 4
mov dword [esp + 0x1c], ebp
rep stosd dword es:[edi], eax
lea eax, [esp + 0x34]
push eax
push ebp
call dword [sym.imp.KERNEL32.dll_lstrcpyW]
mov ecx, dword [esp + 0x24]
push ecx
call dword [sym.imp.ADVAPI32.dll_RegCloseKey]
mov eax, dword [0x10034130]
mov ebx, eax
cmp ebx, eax
mov dword [esp + 0x28], ebx
jl 0x100041b7
inc ebx
cmp ebx, esi
jne 0x100040a0
mov ecx, dword [0x1003412c]
cmp ecx, esi
je 0x1000408f
push ecx
mov dword [esp + 0x20], eax
call fcn.1001f635
add esp, 4
mov dword [0x1003412c], esi
mov dword [0x10034134], esi
mov dword [0x10034130], esi
jmp 0x100041b7
mov edi, dword [0x1003412c]
cmp edi, esi
jne 0x100040e5
lea esi, [ebx*4]
push esi
call fcn.1001f60c
mov ecx, esi
mov edi, eax
mov edx, ecx
xor eax, eax
shr ecx, 2
mov dword [0x1003412c], edi
add esp, 4
rep stosd dword es:[edi], eax
mov ecx, edx
and ecx, 3
rep stosb byte es:[edi], al
mov dword [0x10034134], ebx
mov dword [0x10034130], ebx
jmp 0x100041b5
mov esi, dword [0x10034134]
cmp ebx, esi
jg 0x1000411c
cmp eax, ebx
jge 0x10004109
mov ecx, ebx
lea edi, [edi + eax*4]
sub ecx, eax
xor eax, eax
rep stosd dword es:[edi], eax
mov dword [0x10034130], ebx
jmp 0x100041b5
jle 0x10004111
sub eax, ebx
mov dword [esp + 0x1c], eax
mov dword [0x10034130], ebx
jmp 0x100041b5
mov ecx, dword [0x10034138]
test ecx, ecx
jne 0x1000414a
cdq
and edx, 7
add eax, edx
mov ecx, eax
sar ecx, 3
cmp ecx, 4
jge 0x1000413d
mov ecx, 4
jmp 0x1000414a
cmp ecx, 0x400
jle 0x1000414a
mov ecx, 0x400
lea eax, [esi + ecx]
cmp ebx, eax
mov dword [esp + 0x14], eax
jl 0x10004159
mov dword [esp + 0x14], ebx
mov eax, dword [esp + 0x14]
lea ecx, [eax*4]
push ecx
call fcn.1001f60c
mov ecx, dword [0x10034130]
mov esi, dword [0x1003412c]
mov ebp, eax
mov edi, ebp
rep movsd dword es:[edi], dword [esi]
mov eax, dword [0x10034130]
mov ecx, ebx
sub ecx, eax
lea edi, [ebp + eax*4]
xor eax, eax
rep stosd dword es:[edi], eax
mov edx, dword [0x1003412c]
push edx
call fcn.1001f635
mov eax, dword [esp + 0x1c]
mov dword [0x1003412c], ebp
mov ebp, dword [esp + 0x24]
add esp, 8
mov dword [0x10034130], ebx
mov dword [0x10034134], eax
xor esi, esi
mov ecx, dword [0x1003412c]
mov edx, dword [esp + 0x28]
push ebp
push str.EnumerateAISuite2AP___Add__s
mov dword [ecx + edx*4], ebp
call fcn.10002680
add esp, 8
mov ecx, dword [esp + 0x20]
lea edx, [esp + 0x18]
mov eax, ecx
inc ecx
mov dword [esp + 0x20], ecx
lea ecx, [esp + 0x2c]
push ecx
push esi
push esi
push esi
lea ecx, [esp + 0x44]
push edx
mov edx, dword [esp + 0x24]
push ecx
push eax
push edx
call dword [sym.imp.ADVAPI32.dll_RegEnumKeyExW]
test eax, eax
je 0x10003fbc
pop ebp
pop ebx
mov eax, dword [esp + 8]
push eax
call dword [sym.imp.ADVAPI32.dll_RegCloseKey]
pop edi
mov eax, 1
pop esi
add esp, 0x1024
ret
mov eax, 1
pop esi
add esp, 0x1024
ret