Function at 0x1003380f
Capabilities:
Query or enumerate registry key

Disassembly:
mov eax, 0x1006270b
call fcn.100612c8
sub esp, 0x58
push ebx
push esi
mov dword [ebp - 0x28], 0x2c6c
xor esi, esi
cmp dword [ebp - 0x28], 0x2d2e
push edi
mov dword [ebp - 0x10], esp
mov dword [ebp - 0x30], edx
mov dword [ebp - 0x2c], ecx
jle 0x100338b1
mov dword [ebp - 0x18], esi
mov edi, esi
mov dword [ebp - 0x24], esi
mov ebx, esi
mov ecx, edi
mov dword [ebp - 0x20], 0x5650
mov edi, dword [ebp - 0x18]
mov dword [ebp - 0x1c], ecx
mov eax, edi
shl eax, cl
lea ecx, [ebp - 0x48]
cdq
push edx
push eax
call fcn.10001a31
pop ecx
pop ecx
cmp dword [eax + 0x14], 0x10
jb 0x1003386c
mov eax, dword [eax]
push eax
call fcn.100490c6
pop ecx
push esi
push 1
lea ecx, [ebp - 0x48]
call fcn.1000209f
mov ecx, dword [ebp - 0x1c]
add ecx, ebx
dec dword [ebp - 0x20]
mov dword [ebp - 0x1c], ecx
jne 0x10033853
mov edi, dword [ebp - 0x24]
dec ebx
cmp ebx, 0xffffe8a1
jg 0x10033844
inc edi
mov dword [ebp - 0x24], edi
cmp edi, 0x54f3
jl 0x10033842
mov eax, dword [ebp - 0x18]
inc eax
mov dword [ebp - 0x18], eax
cmp eax, 0x58ed
jl 0x1003383d
cmp dword [ebp - 0x28], 0x29e0
jge 0x100338c5
push str.bxoayuckr_sdqphsr_aubkhlp_fccjhwrr_mvrvbrrhc_xsc_fcqxuez_pycyea_osz_gkpkq_clvmusgzq_vvmwiro
call fcn.100490c6
pop ecx
or dword [ebp - 4], 0xffffffff
cmp byte [ebp + 8], 0
je 0x1003396d
mov dword [ebp - 0x28], 0x3190
cmp dword [ebp - 0x28], 0x31c6
jle 0x10033908
mov edi, esi
mov ebx, edi
mov esi, 0x11fb
mov eax, ebx
mov ecx, 0x1007cab8
cdq
push edx
push eax
call fcn.10001cb3
dec ebx
dec esi
jne 0x100338ec
inc edi
cmp edi, 0x4194
jl 0x100338e5
mov dword [ebp - 4], 2
cmp dword [ebp - 0x28], 0x30e6
jge 0x10033945
mov edx, str.brvsdb_xsromji_ahitti_kjt_thojrmzqd_rnshcq_ilx_qgduxun_wxxd_kjxkpl
mov ecx, 0x1007cab8
call fcn.100036f5
jmp 0x10033945
mov edx, dword [ebp + 0x10]
mov dword [edx], esi
cmp dword [edx], 2
jge 0x10033a80
mov esi, dword [ebp - 0x2c]
mov ecx, dword [edx]
mov eax, dword [esi]
mov dword [eax + ecx*4], 7
inc dword [edx]
cmp dword [edx], 2
jl 0x10033956
jmp 0x10033a80
mov dword [ebp - 0x1c], 0x5d5f
cmp dword [ebp - 0x1c], 0x5e93
jle 0x100339ee
push esi
push esi
push esi
push esi
push esi
push esi
push 0x2362
push esi
call dword [sym.imp.ADVAPI32.dll_RegEnumKeyExW]
mov dword [ebp - 0x20], esi
mov ebx, esi
mov dword [ebp - 0x24], 0x5bf
mov dword [ebp - 0x28], ebx
mov edi, ebx
mov ebx, 0x3062
mov eax, edi
lea ecx, [ebp - 0x60]
cdq
push edx
push eax
call fcn.10001a31
pop ecx
pop ecx
cmp dword [eax + 0x14], 0x10
jb 0x100339bc
mov eax, dword [eax]
push eax
call fcn.100490c6
pop ecx
push esi
push 1
lea ecx, [ebp - 0x60]
call fcn.1000209f
inc edi
dec ebx
jne 0x100339a5
mov ebx, dword [ebp - 0x28]
mov edi, dword [ebp - 0x20]
add ebx, edi
dec dword [ebp - 0x24]
mov dword [ebp - 0x28], ebx
jne 0x1003399e
inc edi
mov dword [ebp - 0x20], edi
cmp edi, 0x62f
jl 0x10033992
mov dword [ebp - 0x24], 0x3931
cmp dword [ebp - 0x24], 0x3c46
jle 0x10033a3f
mov edi, esi
mov dword [ebp - 0x28], esi
mov ebx, esi
mov eax, edi
mov edi, 0x4896
cdq
idiv ebx
mov esi, edx
mov eax, esi
mov ecx, 0x1007cab8
cdq
push edx
push eax
call fcn.10001cb3
inc esi
dec edi
jne 0x10033a11
mov edi, dword [ebp - 0x28]
inc ebx
cmp ebx, 0x429e
jl 0x10033a05
inc edi
mov dword [ebp - 0x28], edi
push 0
pop esi
cmp edi, 0x234
jl 0x10033a03
mov eax, dword [ebp - 0x30]
mov eax, dword [eax]
mov eax, dword [ebp + 0x14]
mov dword [eax], 1
mov dword [ebp - 4], 4
cmp dword [ebp - 0x24], 0x3828
jge 0x10033a6c
mov edx, str.qbk_swv_qsu_folznbfq_hbkbvwldc_vtxcn_tjaonv_jmytgukpt_gptiddlx_fzmgagea_tvxrb
mov ecx, 0x1007cab8
call fcn.100036f5
cmp dword [ebp - 0x1c], 0x5a2b
jge 0x10033a80
push str.uaeucq_qkcnywbg_uop_kfawx_rklew
call fcn.100490c6
pop ecx
mov ecx, dword [ebp - 0xc]
pop edi
pop esi
mov dword fs:[0], ecx
pop ebx
mov esp, ebp
pop ebp
ret