Function at 0x100077fb
Capabilities:
Query or enumerate registry value
Read .ini file

Disassembly:
push ebp
mov ebp, esp
mov eax, 0x1434
call fcn.10022c40
push esi
push edi
lea edi, [ebp - 0x1434]
mov ecx, 0x50d
mov eax, 0xcccccccc
rep stosd dword es:[edi], eax
mov dword [ebp - 4], 0
mov esi, esp
lea eax, [ebp - 4]
push eax
push 8
push 0
push 0x100f3a6c
push reloc.OLEAUT32.dll_SysReAllocString
call dword [sym.imp.ADVAPI32.dll_RegOpenKeyExW]
cmp esi, esp
call fcn.10021b10
test eax, eax
jne 0x10007abb
mov word [ebp - 0x1004], 0
mov ecx, 0x1ff
xor eax, eax
lea edi, [ebp - 0x1002]
rep stosd dword es:[edi], eax
stosw word es:[edi], ax
mov dword [ebp - 0x100c], 0x800
mov dword [ebp - 0x1008], 0
mov word [ebp - 0x804], 0
mov ecx, 0x1ff
xor eax, eax
lea edi, [ebp - 0x802]
rep stosd dword es:[edi], eax
stosw word es:[edi], ax
mov word [ebp - 0x1214], 0
mov ecx, 0x81
xor eax, eax
lea edi, [ebp - 0x1212]
rep stosd dword es:[edi], eax
stosw word es:[edi], ax
mov esi, esp
mov ecx, dword [ebp + 8]
push ecx
push str.SOFTWAREAsusAI_SUITE_II
push 0x100f3ad4
lea edx, [ebp - 0x804]
push edx
call dword [sym.imp.USER32.dll_wsprintfW]
add esp, 0x10
cmp esi, esp
call fcn.10021b10
mov esi, esp
lea eax, [ebp - 0x1008]
push eax
push 1
push 0
lea ecx, [ebp - 0x804]
push ecx
push reloc.OLEAUT32.dll_SysReAllocString
call dword [sym.imp.ADVAPI32.dll_RegOpenKeyExW]
cmp esi, esp
call fcn.10021b10
test eax, eax
jne 0x10007aa8
push 0xc8
call fcn.1006b3a0
add esp, 4
mov dword [ebp - 0x142c], eax
mov edx, dword [ebp - 0x142c]
mov dword [ebp - 0x1428], edx
push 0xc8
push 0
mov eax, dword [ebp - 0x1428]
push eax
call fcn.10021ab0
add esp, 0xc
mov esi, esp
lea ecx, [ebp - 0x1004]
push ecx
mov edx, dword [ebp - 0x1428]
push edx
call dword [sym.imp.KERNEL32.dll_lstrcpyW]
cmp esi, esp
call fcn.10021b10
mov dword [ebp - 0x1424], 0x208
mov esi, esp
lea eax, [ebp - 0x1424]
push eax
lea ecx, [ebp - 0x1214]
push ecx
lea edx, [ebp - 0x1420]
push edx
push 0
push str.AppSetup
mov eax, dword [ebp - 0x1008]
push eax
call dword [sym.imp.ADVAPI32.dll_RegQueryValueExW]
cmp esi, esp
call fcn.10021b10
test eax, eax
jne 0x100079ae
cmp dword [ebp - 0x1420], 1
jne 0x100079ae
mov ecx, dword [ebp - 0x1214]
and ecx, 0xffff
test ecx, ecx
jne 0x100079e6
mov edx, dword [ebp - 0x1428]
mov dword [ebp - 0x1430], edx
mov eax, dword [ebp - 0x1430]
push eax
call fcn.1006b3e9
add esp, 4
mov esi, esp
mov ecx, dword [ebp - 0x1008]
push ecx
call dword [sym.imp.ADVAPI32.dll_RegCloseKey]
cmp esi, esp
call fcn.10021b10
xor eax, eax
jmp 0x10007abd
mov word [ebp - 0x141c], 0
mov ecx, 0x81
xor eax, eax
lea edi, [ebp - 0x141a]
rep stosd dword es:[edi], eax
stosw word es:[edi], ax
mov esi, esp
lea edx, [ebp - 0x1214]
push edx
push str._sAppSetup.ini
lea eax, [ebp - 0x141c]
push eax
call dword [sym.imp.USER32.dll_wsprintfW]
add esp, 0xc
cmp esi, esp
call fcn.10021b10
mov esi, esp
lea ecx, [ebp - 0x141c]
push ecx
mov edx, dword [ebp + 0x10]
push edx
mov eax, dword [ebp + 0xc]
push eax
push 0x10107d04
push 0x100f3b14
push str.Setup
call dword [sym.imp.KERNEL32.dll_GetPrivateProfileStringW]
cmp esi, esp
call fcn.10021b10
test eax, eax
jne 0x10007a8b
mov ecx, dword [ebp - 0x1428]
mov dword [ebp - 0x1434], ecx
mov edx, dword [ebp - 0x1434]
push edx
call fcn.1006b3e9
add esp, 4
mov esi, esp
mov eax, dword [ebp - 0x1008]
push eax
call dword [sym.imp.ADVAPI32.dll_RegCloseKey]
cmp esi, esp
call fcn.10021b10
xor eax, eax
jmp 0x10007abd
mov esi, esp
mov ecx, dword [ebp - 0x1008]
push ecx
call dword [sym.imp.ADVAPI32.dll_RegCloseKey]
cmp esi, esp
call fcn.10021b10
mov eax, 1
jmp 0x10007abd
mov esi, esp
mov edx, dword [ebp - 4]
push edx
call dword [sym.imp.ADVAPI32.dll_RegCloseKey]
cmp esi, esp
call fcn.10021b10
xor eax, eax
pop edi
pop esi
add esp, 0x1434
cmp ebp, esp
call fcn.10021b10
mov esp, ebp
pop ebp
ret