Function at 0x1000ba00
Capabilities:
Query or enumerate registry value

Disassembly:
push ebp
mov ebp, esp
push edi
push esi
push ebx
sub esp, 0x378
test byte [0x10013318], 8
jne 0x1000ba60
call sym._SECUR32_initSchannelSP
call sym._load_auth_packages
lea eax, [ebp - 0x358]
mov dword [esp + 0xc], 0x20019
mov dword [esp + 0x10], eax
mov dword [esp + 8], 0
mov dword [esp + 4], 0x10016dd8
mov dword [esp], 0x80000002
call dword [sym.imp.advapi32.dll_RegOpenKeyExW]
sub esp, 0x14
test eax, eax
je 0x1000ba90
lea esp, [ebp - 0xc]
pop ebx
pop esi
pop edi
pop ebp
ret
mov dword [esp + 0xc], 0x10016dd4
mov dword [esp + 8], str.SECUR32_initializeProviders
mov dword [esp + 4], 0x10013318
mov dword [esp], 3
call sym._wine_dbg_log.constprop.0_3
jmp 0x1000ba15
lea eax, [ebp - 0x354]
mov dword [esp + 8], 0
mov dword [esp + 0x14], eax
lea eax, [ebp - 0x214]
mov dword [esp + 0x10], eax
lea eax, [ebp - 0x350]
mov dword [esp + 0xc], eax
mov eax, dword [ebp - 0x358]
mov dword [ebp - 0x354], 0x208
mov dword [esp + 4], str.SecurityProviders
mov dword [esp], eax
call dword [sym.imp.advapi32.dll_RegQueryValueExW]
sub esp, 0x18
test eax, eax
jne 0x1000bd16
cmp dword [ebp - 0x350], 1
jne 0x1000bd16
mov eax, dword [ebp - 0x354]
lea edi, [ebp - 0x214]
shr eax, 1
lea esi, [ebp + eax*2 - 0x214]
mov dword [ebp - 0x354], eax
cmp esi, edi
jbe 0x1000bd16
lea esi, [esi]
movzx eax, word [edi]
cmp ax, 0x2c
je 0x1000be26
mov ecx, edi
test ax, ax
je 0x1000be1c
movzx ebx, word [ecx + 2]
add ecx, 2
test bx, bx
je 0x1000bd30
cmp bx, 0x2c
jne 0x1000bb30
xor eax, eax
mov word [ecx], ax
movzx eax, word [edi]
jmp 0x1000bb54
movzx eax, word [ebx + 2]
test ax, ax
je 0x1000be10
mov dword [esp], eax
mov ebx, edi
call dword [sym.imp.ucrtbase.dll_iswspace]
cmp edi, esi
lea edi, [edi + 2]
setb dl
test eax, eax
setne al
test dl, al
jne 0x1000bb50
mov dword [esp], ebx
call dword [sym.imp.kernel32.dll_LoadLibraryW]
sub esp, 4
mov edi, eax
test eax, eax
je 0x1000bd40
mov esi, dword [sym.imp.kernel32.dll_GetProcAddress]
mov dword [esp + 4], str.InitSecurityInterfaceW
mov dword [esp], edi
call esi
sub esp, 8
mov dword [ebp - 0x35c], eax
mov dword [esp + 4], str.InitSecurityInterfaceA
mov dword [esp], edi
call esi
sub esp, 8
mov esi, eax
test byte [0x10013318], 8
jne 0x1000be88
mov eax, dword [ebp - 0x35c]
or eax, esi
je 0x1000bcd8
mov dword [ebp - 0x34c], 0
mov dword [ebp - 0x348], 0
mov dword [ebp - 0x344], 0
test esi, esi
je 0x1000bfda
call esi
mov esi, eax
mov eax, dword [ebp - 0x35c]
test eax, eax
je 0x1000c22a
call eax
mov dword [ebp - 0x35c], eax
test eax, eax
je 0x1000bc27
mov eax, dword [eax + 4]
test eax, eax
jne 0x1000c003
test esi, esi
je 0x1000bc5a
mov eax, dword [esi + 4]
test eax, eax
je 0x1000bc5a
cmp esi, 0x10013260
je 0x1000c294
lea edx, [ebp - 0x348]
mov dword [esp + 4], edx
lea edx, [ebp - 0x34c]
mov dword [esp], edx
call eax
sub esp, 8
test eax, eax
jne 0x1000bcd8
mov eax, dword [ebp - 0x34c]
test eax, eax
je 0x1000bcd8
mov ecx, dword [ebp - 0x344]
test ecx, ecx
je 0x1000c253
mov dword [esp + 8], ebx
mov dword [esp + 4], 0
mov dword [esp], 0
call sym._SECUR32_addProvider
test eax, eax
je 0x1000bcb4
mov edx, dword [ebp - 0x344]
mov dword [esp], eax
mov dword [esp + 0xc], edx
mov edx, dword [ebp - 0x348]
mov dword [esp + 8], edx
mov edx, dword [ebp - 0x34c]
mov dword [esp + 4], edx
call sym._SECUR32_addPackages
mov eax, dword [ebp - 0x344]
test eax, eax
je 0x1000c377
mov dword [esp], eax
mov eax, dword [ebp - 0x35c]
call dword [eax + 0x40]
sub esp, 4
lea esi, [esi]
mov dword [esp], edi
call dword [sym.imp.kernel32.dll_FreeLibrary]
sub esp, 4
cmp word [ebx], 0
je 0x1000c56a
mov edx, ebx
add edx, 2
cmp word [edx], 0
jne 0x1000bcf0
sub edx, ebx
add edx, 2
mov eax, dword [ebp - 0x354]
lea edi, [ebx + edx]
lea esi, [ebp + eax*2 - 0x214]
cmp esi, edi
ja 0x1000bb18
mov eax, dword [ebp - 0x358]
mov dword [esp], eax
call dword [sym.imp.advapi32.dll_RegCloseKey]
sub esp, 4
lea esp, [ebp - 0xc]
pop ebx
pop esi
pop edi
pop ebp
ret
cmp bx, 0x2c
jne 0x1000bb5d
jmp 0x1000bb46
test byte [0x10013318], 4
je 0x1000bce4
mov eax, ebx
shr eax, 0x10
je 0x1000c270
mov dword [esp + 4], 0xffffffff
mov dword [esp], ebx
call dword [sym.imp.kernel32.dll_IsBadStringPtrW]
mov edx, 0x10016d8a
sub esp, 8
test eax, eax
jne 0x1000be5b
cmp word [ebx], 0
je 0x1000c3ac
nop
mov edx, eax
lea eax, [eax + 1]
cmp word [ebx + edx*2 + 2], 0
jne 0x1000bd80
mov eax, 0x224c
mov edi, ebx
lea esi, [ebp - 0x33e]
mov word [ebp - 0x340], ax
jmp 0x1000bddb
cmp ax, 9
je 0x1000c219
cmp ax, 0xa
jne 0x1000c1a6
mov eax, 0x6e5c
add esi, 2
mov word [esi - 2], ax
lea esi, [esi]
nop
lea eax, [edx - 1]
test edx, edx
jle 0x1000be2d
lea ecx, [ebp - 0x21e]
cmp esi, ecx
ja 0x1000be2d
mov edx, eax
movzx eax, word [edi]
add edi, 2
cmp ax, 0xd
je 0x1000c208
jbe 0x1000bda3
cmp ax, 0x22
je 0x1000c1f7
cmp ax, 0x5c
jne 0x1000c199
mov eax, 0x5c5c
add esi, 2
mov word [esi - 2], ax
jmp 0x1000bdc8
mov ebx, edi
mov edx, 2
jmp 0x1000bcfe
cmp ax, 0x2c
jne 0x1000bb54
mov ecx, edi
jmp 0x1000bb46
mov byte [esi], 0x22
test eax, eax
jle 0x1000c3c2
mov edi, 0x2e2e
mov byte [esi + 3], 0x2e
lea eax, [esi + 4]
mov word [esi + 1], di
mov byte [eax], 0
lea eax, [ebp - 0x340]
mov dword [esp], eax
call sym.___wine_dbg_strdup
mov edx, eax
mov dword [esp + 0x10], edx
mov dword [esp + 0xc], str.failed_to_load__s_n
mov dword [esp + 8], str._tryLoadProvider
mov dword [esp + 4], 0x10013318
mov dword [esp], 2
call sym._wine_dbg_log.constprop.0_3
jmp 0x1000bce4
mov eax, ebx
shr eax, 0x10
je 0x1000c239
mov dword [esp + 4], 0xffffffff
mov dword [esp], ebx
call dword [sym.imp.kernel32.dll_IsBadStringPtrW]
mov edx, 0x10016d8a
sub esp, 8
test eax, eax
jne 0x1000bf9f
cmp word [ebx], 0
je 0x1000c38b
nop
mov edx, eax
lea eax, [eax + 1]
cmp word [ebx + edx*2 + 2], 0
jne 0x1000bec0
mov ecx, 0x224c
mov dword [ebp - 0x364], esi
mov esi, ebx
mov word [ebp - 0x340], cx
lea ecx, [ebp - 0x33e]
mov dword [ebp - 0x360], edi
mov dword [ebp - 0x368], ebx
jmp 0x1000bf2b
cmp ax, 9
je 0x1000c119
cmp ax, 0xa
jne 0x1000c137
mov eax, 0x6e5c
add ecx, 2
mov word [ecx - 2], ax
lea esi, [esi]
lea eax, [edx - 1]
test edx, edx
jle 0x1000bf5f
lea edi, [ebp - 0x21e]
cmp ecx, edi
ja 0x1000bf5f
mov edx, eax
movzx eax, word [esi]
add esi, 2
cmp ax, 0xd
je 0x1000c108
jbe 0x1000bef5
cmp ax, 0x22
je 0x1000c188
cmp ax, 0x5c
jne 0x1000c12a
mov ebx, 0x5c5c
add ecx, 2
mov word [ecx - 2], bx
jmp 0x1000bf18
mov edi, dword [ebp - 0x360]
mov esi, dword [ebp - 0x364]
mov byte [ecx], 0x22
mov ebx, dword [ebp - 0x368]
test eax, eax
jle 0x1000c3a4
mov edx, 0x2e2e
mov byte [ecx + 3], 0x2e
lea eax, [ecx + 4]
mov word [ecx + 1], dx
mov byte [eax], 0
lea eax, [ebp - 0x340]
mov dword [esp], eax
call sym.___wine_dbg_strdup
mov edx, eax
mov eax, dword [ebp - 0x35c]
mov dword [esp + 0x14], esi
mov dword [esp + 0x10], edx
mov dword [esp + 0x18], eax
mov dword [esp + 0xc], str.loaded__s__InitSecurityInterfaceA_is__p__InitSecurityInterfaceW_is__p_n
mov dword [esp + 8], str._tryLoadProvider
mov dword [esp + 4], 0x10013318
mov dword [esp], 3
call sym._wine_dbg_log.constprop.0_3
jmp 0x1000bbca
mov eax, dword [ebp - 0x35c]
call eax
mov dword [ebp - 0x35c], eax
test eax, eax
je 0x1000bc5a
mov eax, dword [ebp - 0x35c]
xor esi, esi
mov eax, dword [eax + 4]
test eax, eax
je 0x1000bc5a
lea edx, [ebp - 0x344]
cmp dword [ebp - 0x35c], 0x100131e0
jne 0x1000bc44
test byte [0x10013318], 8
je 0x1000bc5a
mov eax, ebx
shr eax, 0x10
je 0x1000c3e4
mov dword [esp + 4], 0xffffffff
mov dword [esp], ebx
call dword [sym.imp.kernel32.dll_IsBadStringPtrW]
push ecx
push ecx
test eax, eax
jne 0x1000c495
cmp word [ebx], 0
je 0x1000c574
mov edx, eax
lea eax, [eax + 1]
cmp word [ebx + edx*2 + 2], 0
jne 0x1000c056
mov dword [ebp - 0x364], edx
lea eax, [ebp - 0x33e]
mov word [ebp - 0x340], 0x224c
mov dword [ebp - 0x360], ebx
mov dword [ebp - 0x368], ebx
jmp 0x1000c0c7
cmp dx, 9
je 0x1000c3d7
cmp dx, 0xa
jne 0x1000c42d
mov word [eax], 0x6e5c
add eax, 2
mov ecx, dword [ebp - 0x364]
lea ebx, [ebp - 0x21e]
lea edx, [ecx - 1]
cmp eax, ebx
ja 0x1000c54b
test ecx, ecx
jle 0x1000c54b
mov dword [ebp - 0x364], edx
add dword [ebp - 0x360], 2
mov ecx, dword [ebp - 0x360]
movzx edx, word [ecx - 2]
cmp dx, 0xd
je 0x1000c3ca
jbe 0x1000c086
cmp dx, 0x22
je 0x1000c47e
cmp dx, 0x5c
jne 0x1000c424
mov word [eax], 0x5c5c
add eax, 2
jmp 0x1000c0a2
mov eax, 0x725c
add ecx, 2
mov word [ecx - 2], ax
jmp 0x1000bf18
mov eax, 0x745c
add ecx, 2
mov word [ecx - 2], ax
jmp 0x1000bf18
lea edi, [eax - 0x20]
cmp di, 0x5e
jbe 0x1000c266
mov edi, eax
mov byte [ecx], 0x5c
add ecx, 5
shr di, 0xc
movzx edi, di
movzx ebx, byte [edi + str.0123456789abcdefAddSecurityPackageA]
mov edi, eax
shr di, 8
and edi, 0xf
mov byte [ecx - 4], bl
movzx ebx, byte [edi + str.0123456789abcdefAddSecurityPackageA]
mov edi, eax
and eax, 0xf
shr di, 4
movzx eax, byte [eax + str.0123456789abcdefAddSecurityPackageA]
and edi, 0xf
mov byte [ecx - 3], bl
movzx ebx, byte [edi + str.0123456789abcdefAddSecurityPackageA]
mov byte [ecx - 1], al
mov byte [ecx - 2], bl
jmp 0x1000bf18
mov edi, 0x225c
add ecx, 2
mov word [ecx - 2], di
jmp 0x1000bf18
lea ecx, [eax - 0x20]
cmp cx, 0x5e
jbe 0x1000c28a
mov ecx, eax
mov byte [esi], 0x5c
add esi, 5
shr cx, 0xc
movzx ecx, cx
movzx ecx, byte [ecx + str.0123456789abcdefAddSecurityPackageA]
mov byte [esi - 4], cl
mov ecx, eax
shr cx, 8
and ecx, 0xf
movzx ecx, byte [ecx + str.0123456789abcdefAddSecurityPackageA]
mov byte [esi - 3], cl
mov ecx, eax
and eax, 0xf
shr cx, 4
movzx eax, byte [eax + str.0123456789abcdefAddSecurityPackageA]
and ecx, 0xf
movzx ecx, byte [ecx + str.0123456789abcdefAddSecurityPackageA]
mov byte [esi - 1], al
mov byte [esi - 2], cl
jmp 0x1000bdc8
mov eax, 0x225c
add esi, 2
mov word [esi - 2], ax
jmp 0x1000bdc8
mov eax, 0x725c
add esi, 2
mov word [esi - 2], ax
jmp 0x1000bdc8
mov eax, 0x745c
add esi, 2
mov word [esi - 2], ax
jmp 0x1000bdc8
mov dword [ebp - 0x35c], 0
jmp 0x1000bc27
movzx eax, bx
mov dword [esp], 0x10016d94
mov dword [esp + 4], eax
call sym._wine_dbg_sprintf
mov edx, eax
jmp 0x1000bf9f
mov edx, dword [ebp - 0x348]
test edx, edx
jne 0x1000bc72
jmp 0x1000bcd8
mov byte [ecx], al
add ecx, 1
jmp 0x1000bf18
movzx eax, bx
mov dword [esp], 0x10016d94
mov dword [esp + 4], eax
call sym._wine_dbg_sprintf
mov edx, eax
jmp 0x1000be5b
mov byte [esi], al
add esi, 1
jmp 0x1000bdc8
test byte [0x10013318], 8
je 0x1000bc5a
mov eax, ebx
shr eax, 0x10
je 0x1000c3e4
mov dword [esp + 4], 0xffffffff
mov dword [esp], ebx
call dword [sym.imp.kernel32.dll_IsBadStringPtrW]
push edx
push edx
test eax, eax
jne 0x1000c495
cmp word [ebx], 0
je 0x1000c574
mov edx, eax
lea eax, [eax + 1]
cmp word [ebx + edx*2 + 2], 0
jne 0x1000c2d1
mov dword [ebp - 0x364], edx
lea eax, [ebp - 0x33e]
mov word [ebp - 0x340], 0x224c
mov dword [ebp - 0x360], ebx
jmp 0x1000c33c
cmp dx, 9
je 0x1000c4f0
cmp dx, 0xa
jne 0x1000c49f
mov word [eax], 0x6e5c
add eax, 2
mov ecx, dword [ebp - 0x364]
lea edx, [ecx - 1]
test ecx, ecx
jle 0x1000c50a
lea ecx, [ebp - 0x21e]
cmp eax, ecx
ja 0x1000c50a
mov dword [ebp - 0x364], edx
add dword [ebp - 0x360], 2
mov ecx, dword [ebp - 0x360]
movzx edx, word [ecx - 2]
cmp dx, 0xd
je 0x1000c4fd
jbe 0x1000c2fb
cmp dx, 0x22
je 0x1000c55d
cmp dx, 0x5c
jne 0x1000c534
mov word [eax], 0x5c5c
add eax, 2
jmp 0x1000c317
mov eax, dword [ebp - 0x348]
mov dword [esp], eax
call dword [esi + 0x40]
sub esp, 4
jmp 0x1000bcd8
mov edx, 0x224c
mov byte [ebp - 0x33e], 0x22
lea ecx, [ebp - 0x33e]
mov word [ebp - 0x340], dx
lea eax, [ecx + 1]
jmp 0x1000bf8c
mov word [ebp - 0x340], 0x224c
lea esi, [ebp - 0x33e]
mov byte [ebp - 0x33e], 0x22
lea eax, [esi + 1]
jmp 0x1000be48
mov word [eax], 0x725c
add eax, 2
jmp 0x1000c0a2
mov word [eax], 0x745c
add eax, 2
jmp 0x1000c0a2
movzx eax, bx
mov dword [esp], 0x10016d94
mov dword [esp + 4], eax
call sym._wine_dbg_sprintf
mov dword [esp + 0x10], eax
mov dword [esp + 0xc], str._s_has_built_in_providers__skip_adding_n
mov dword [esp + 8], str._tryLoadProvider
mov dword [esp + 4], 0x10013318
mov dword [esp], 3
call sym._wine_dbg_log.constprop.0_3
jmp 0x1000bc5a
lea ecx, [edx - 0x20]
cmp cx, 0x5e
jbe 0x1000c48b
mov ecx, edx
mov byte [eax], 0x5c
add eax, 5
shr cx, 0xc
movzx ecx, cx
movzx ecx, byte [ecx + str.0123456789abcdefAddSecurityPackageA]
mov byte [eax - 4], cl
mov ecx, edx
shr cx, 8
and ecx, 0xf
movzx ecx, byte [ecx + str.0123456789abcdefAddSecurityPackageA]
mov byte [eax - 3], cl
mov ecx, edx
and edx, 0xf
shr cx, 4
movzx edx, byte [edx + str.0123456789abcdefAddSecurityPackageA]
and ecx, 0xf
movzx ecx, byte [ecx + str.0123456789abcdefAddSecurityPackageA]
mov byte [eax - 1], dl
mov byte [eax - 2], cl
jmp 0x1000c0a2
mov word [eax], 0x225c
add eax, 2
jmp 0x1000c0a2
mov byte [eax], dl
add eax, 1
jmp 0x1000c0a2
mov eax, 0x10016d8a
jmp 0x1000c3f7
mov ecx, edx
mov byte [eax], 0x5c
add eax, 5
shr cx, 0xc
movzx ecx, cx
movzx ecx, byte [ecx + str.0123456789abcdefAddSecurityPackageA]
mov byte [eax - 4], cl
mov ecx, edx
shr cx, 8
and ecx, 0xf
movzx ecx, byte [ecx + str.0123456789abcdefAddSecurityPackageA]
mov byte [eax - 3], cl
mov ecx, edx
and edx, 0xf
shr cx, 4
movzx edx, byte [edx + str.0123456789abcdefAddSecurityPackageA]
and ecx, 0xf
movzx ecx, byte [ecx + str.0123456789abcdefAddSecurityPackageA]
mov byte [eax - 1], dl
mov byte [eax - 2], cl
jmp 0x1000c317
mov word [eax], 0x745c
add eax, 2
jmp 0x1000c317
mov word [eax], 0x725c
add eax, 2
jmp 0x1000c317
mov byte [eax], 0x22
test edx, edx
jle 0x1000c558
mov word [eax + 1], 0x2e2e
lea edx, [eax + 4]
mov byte [eax + 3], 0x2e
lea eax, [ebp - 0x340]
mov byte [edx], 0
mov dword [esp], eax
call sym.___wine_dbg_strdup
jmp 0x1000c3f7
lea ecx, [edx - 0x20]
cmp cx, 0x5e
ja 0x1000c49f
mov byte [eax], dl
add eax, 1
jmp 0x1000c317
mov ebx, dword [ebp - 0x368]
mov byte [eax], 0x22
test edx, edx
jg 0x1000c511
lea edx, [eax + 1]
jmp 0x1000c51e
mov word [eax], 0x225c
add eax, 2
jmp 0x1000c317
mov edx, 2
jmp 0x1000bcfe
mov word [ebp - 0x340], 0x224c
lea eax, [ebp - 0x33e]
mov byte [ebp - 0x33e], 0x22
jmp 0x1000c558