Function at 0x3000dca4
Capabilities:
Query or enumerate registry value

Disassembly:
push ebp
mov ebp, esp
mov eax, 0x2824
call fcn.30014c94
mov eax, dword [0x30020490]
xor eax, ebp
mov dword [ebp - 4], eax
mov eax, dword [ebp + 0xc]
push ebx
push esi
mov dword [ebp - 0x2818], eax
mov eax, dword [ebp + 0x10]
push edi
mov edi, dword [ebp + 8]
mov dword [ebp - 0x2824], eax
mov eax, dword [ebp + 0x14]
xor ebx, ebx
mov esi, 0x25f8
push esi
mov dword [ebp - 0x2820], eax
mov dword [eax], ebx
lea eax, [ebp - 0x2810]
push ebx
push eax
mov dword [ebp - 0x281c], ebx
call fcn.30014b52
add esp, 0xc
push edi
push 0x80
lea eax, [ebp - 0x2808]
push eax
mov dword [ebp - 0x2810], esi
mov dword [ebp - 0x280c], 0x2f
call fcn.30005abb
mov edi, dword [sym.imp.ADVAPI32.dll_RegQueryValueExW]
lea eax, [ebp - 0x2814]
push eax
lea eax, [ebp - 0x2708]
push eax
push ebx
push ebx
push 0x3000216c
push dword [ebp - 0x2818]
mov dword [ebp - 0x2814], 0x208
call edi
cmp eax, ebx
jle 0x3000dd59
and eax, 0xffff
or eax, 0x80070000
mov esi, eax
cmp esi, 0x80070002
jne 0x3000dd7b
push 0x208
lea eax, [ebp - 0x2708]
push ebx
push eax
call fcn.30014b52
xor esi, esi
add esp, 0xc
inc esi
cmp esi, ebx
jl 0x3000e06b
lea eax, [ebp - 0x2814]
push eax
lea eax, [ebp - 0x2500]
push eax
push ebx
push ebx
push 0x30002144
push dword [ebp - 0x2818]
mov dword [ebp - 0x2814], 0x1048
call edi
cmp eax, ebx
jle 0x3000ddb8
and eax, 0xffff
or eax, 0x80070000
mov esi, eax
cmp esi, 0x80070002
jne 0x3000ddda
push 0x1048
lea eax, [ebp - 0x2500]
push ebx
push eax
call fcn.30014b52
xor esi, esi
add esp, 0xc
inc esi
cmp esi, ebx
jl 0x3000e06b
lea eax, [ebp - 0x2814]
push eax
lea eax, [ebp - 0x14a8]
push eax
push ebx
push ebx
push 0x300018a4
push dword [ebp - 0x2818]
mov dword [ebp - 0x2814], 4
call edi
cmp eax, ebx
jle 0x3000de17
and eax, 0xffff
or eax, 0x80070000
mov esi, eax
cmp esi, 0x80070002
jne 0x3000de2a
xor esi, esi
inc esi
mov dword [ebp - 0x14a8], esi
cmp esi, ebx
jl 0x3000e06b
lea eax, [ebp - 0x2814]
push eax
lea eax, [ebp - 0x14b8]
push eax
push ebx
push ebx
push 0x30002134
push dword [ebp - 0x2818]
mov dword [ebp - 0x2814], 4
call edi
cmp eax, ebx
jle 0x3000de67
and eax, 0xffff
or eax, 0x80070000
mov esi, eax
cmp esi, 0x80070002
jne 0x3000de7a
xor esi, esi
mov dword [ebp - 0x14b8], ebx
inc esi
cmp esi, ebx
jl 0x3000e06b
lea eax, [ebp - 0x2814]
push eax
lea eax, [ebp - 0x14b4]
push eax
push ebx
push ebx
push 0x30002120
push dword [ebp - 0x2818]
mov dword [ebp - 0x2814], 4
call edi
cmp eax, ebx
jle 0x3000deb7
and eax, 0xffff
or eax, 0x80070000
mov esi, eax
cmp esi, 0x80070002
jne 0x3000deca
xor esi, esi
mov dword [ebp - 0x14b4], ebx
inc esi
cmp esi, ebx
jl 0x3000e06b
cmp dword [ebp - 0x14b4], 0x8003
je 0x3000deea
cmp dword [ebp - 0x14b4], 0x8004
jne 0x3000df59
lea eax, [ebp - 0x2814]
push eax
lea eax, [ebp - 0x18]
push eax
push ebx
push ebx
push 0x30002114
push dword [ebp - 0x2818]
mov dword [ebp - 0x2814], 0x14
call edi
cmp eax, ebx
jle 0x3000df1c
and eax, 0xffff
or eax, 0x80070000
mov esi, eax
cmp esi, ebx
jne 0x3000df40
or dword [ebp - 0x280c], 0x10
lea eax, [ebp - 0x18]
mov dword [ebp - 0x14ac], eax
mov eax, dword [ebp - 0x2814]
mov dword [ebp - 0x14b0], eax
jmp 0x3000df59
cmp esi, 0x80070002
jne 0x3000df51
xor esi, esi
mov dword [ebp - 0x14ac], ebx
inc esi
cmp esi, ebx
jl 0x3000e06b
lea eax, [ebp - 0x2814]
push eax
lea eax, [ebp - 0x118]
push eax
push ebx
push ebx
push 0x300020f4
push dword [ebp - 0x2818]
mov dword [ebp - 0x2814], 0x100
call edi
cmp eax, ebx
jle 0x3000df8e
and eax, 0xffff
or eax, 0x80070000
mov esi, eax
cmp esi, 0x80070002
jne 0x3000dfb0
push 0x100
lea eax, [ebp - 0x118]
push ebx
push eax
call fcn.30014b52
xor esi, esi
add esp, 0xc
inc esi
cmp esi, ebx
jl 0x3000e06b
lea eax, [ebp - 0x2814]
push eax
lea eax, [ebp - 0x218]
push eax
push ebx
push ebx
push 0x300020d0
push dword [ebp - 0x2818]
mov dword [ebp - 0x2814], 0x100
call edi
cmp eax, ebx
jle 0x3000dfed
and eax, 0xffff
or eax, 0x80070000
mov esi, eax
cmp esi, 0x80070002
jne 0x3000e00f
push 0x100
lea eax, [ebp - 0x218]
push ebx
push eax
call fcn.30014b52
xor esi, esi
add esp, 0xc
inc esi
cmp esi, ebx
jl 0x3000e06b
lea eax, [ebp - 0x281c]
push eax
push ebx
lea eax, [ebp - 0x2810]
push eax
push dword [ebp - 0x2824]
call fcn.3000dc2f
mov esi, eax
cmp esi, ebx
jl 0x3000e06b
mov eax, dword [ebp - 0x281c]
mov ecx, dword [eax]
lea edx, [ebp - 0x218]
push edx
lea edx, [ebp - 0x118]
push edx
push eax
call dword [ecx + 0x78]
mov esi, eax
cmp esi, ebx
jl 0x3000e06b
mov eax, dword [ebp - 0x281c]
mov ecx, dword [ebp - 0x2820]
mov dword [ecx], eax
xor eax, eax
mov dword [ebp - 0x281c], eax
jmp 0x3000e071
mov eax, dword [ebp - 0x281c]
cmp eax, ebx
je 0x3000e085
mov ecx, dword [eax + 4]
mov ecx, dword [ecx + 4]
lea eax, [ecx + eax + 4]
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov ecx, dword [ebp - 4]
pop edi
mov eax, esi
pop esi
xor ecx, ebp
pop ebx
call fcn.30014af0
leave
ret 0x10