Function at 0x719e0106
Capabilities:
Query or enumerate registry key

Disassembly:
mov edi, edi
push ebp
mov ebp, esp
sub esp, 0x22c
mov eax, dword [0x719f7264]
push ebx
push esi
mov esi, dword [ebp + 8]
mov dword [ebp - 4], eax
mov eax, dword [ebp + 0xc]
push edi
mov dword [ebp - 0x220], eax
lea eax, [ebp - 0x224]
push eax
push 0x20019
xor ebx, ebx
push ebx
push 0x719d5cc0
push reloc.WS2__32_Coverage_C_WINDOWS_system32.DLL_Ordinal_2
call dword [sym.imp._CADVAPI.DLL_RegOpenKeyExW]
test eax, eax
jne 0x719e01e8
mov edi, dword [sym.imp._CADVAPI.DLL_RegEnumKeyExW]
lea eax, [ebp - 0x22c]
push eax
push ebx
push ebx
push ebx
lea eax, [ebp - 0x21c]
push eax
lea eax, [ebp - 0x204]
push eax
mov dword [ebp - 0x218], ebx
push ebx
jmp 0x719e01c6
lea eax, [ebp - 0x214]
push eax
lea eax, [ebp - 0x204]
push eax
call sym.MSWSOCK.dll_GetTypeByNameW
test eax, eax
jne 0x719e01a2
lea eax, [ebp - 0x214]
push eax
push esi
call fcn.719e4c7a
test eax, eax
jne 0x719e028c
inc dword [ebp - 0x218]
lea eax, [ebp - 0x22c]
push eax
push ebx
push ebx
push ebx
lea eax, [ebp - 0x21c]
push eax
lea eax, [ebp - 0x204]
push eax
push dword [ebp - 0x218]
push dword [ebp - 0x224]
mov dword [ebp - 0x21c], 0xff
call edi
test eax, eax
je 0x719e0176
push dword [ebp - 0x224]
call dword [sym.imp._CADVAPI.DLL_RegCloseKey]
mov eax, dword [esi]
and eax, 0xffff0000
cmp eax, 0x90000
jne 0x719e02d8
cmp word [esi + 4], bx
jne 0x719e02d8
cmp byte [esi + 8], 0xc0
jne 0x719e02d8
cmp byte [esi + 9], bl
jne 0x719e02d8
cmp byte [esi + 0xa], bl
jne 0x719e02d8
cmp byte [esi + 0xb], bl
jne 0x719e02d8
cmp byte [esi + 0xc], bl
jne 0x719e02d8
cmp byte [esi + 0xd], bl
jne 0x719e02d8
cmp byte [esi + 0xe], bl
jne 0x719e02d8
cmp byte [esi + 0xf], 0x46
jne 0x719e02d8
push 0x719d5a74
xor eax, eax
mov ax, word [esi]
push eax
call sub.WS2__32_Coverage_C_WINDOWS_system32.DLL_Ordinal_9
movzx eax, ax
push eax
call sub.WS2__32_Coverage_C_WINDOWS_system32.DLL_Ordinal_56
cmp eax, ebx
je 0x719e0348
push dword [eax]
push dword [ebp + 0x10]
push dword [ebp - 0x220]
call fcn.719dfe47
test eax, eax
je 0x719e037e
jmp 0x719e0392
push dword [ebp - 0x224]
call dword [sym.imp._CADVAPI.DLL_RegCloseKey]
lea eax, [ebp - 0x204]
push eax
call dword [sym.imp._Cmvrt.DLL_wcslen]
pop ecx
lea ecx, [eax + eax + 2]
cmp dword [ebp + 0x10], ecx
mov dword [ebp - 0x21c], ecx
jb 0x719e037e
mov edi, dword [ebp - 0x220]
mov eax, ecx
shr ecx, 2
lea esi, [ebp - 0x204]
rep movsd dword es:[edi], dword [esi]
mov ecx, eax
and ecx, 3
rep movsb byte es:[edi], byte [esi]
jmp 0x719e0392
cmp eax, 0xa0000
jne 0x719e0319
cmp word [esi + 4], bx
jne 0x719e0319
cmp byte [esi + 8], 0xc0
jne 0x719e0319
cmp byte [esi + 9], bl
jne 0x719e0319
cmp byte [esi + 0xa], bl
jne 0x719e0319
cmp byte [esi + 0xb], bl
jne 0x719e0319
cmp byte [esi + 0xc], bl
jne 0x719e0319
cmp byte [esi + 0xd], bl
jne 0x719e0319
cmp byte [esi + 0xe], bl
jne 0x719e0319
cmp byte [esi + 0xf], 0x46
jne 0x719e0319
push 0x719d5a70
jmp 0x719e0253
mov dword [ebp - 0x218], 0x719f79dc
xor edi, edi
push dword [ebp - 0x218]
push esi
call fcn.719e4c7a
test eax, eax
jne 0x719e0365
add dword [ebp - 0x218], 0x14
add edi, 0x14
inc ebx
cmp edi, 0x1a4
jb 0x719e0325
push 0x424
call dword [sym.imp._CKERNEL.DLL_SetLastError]
or eax, 0xffffffff
mov ecx, dword [ebp - 4]
pop edi
pop esi
pop ebx
call fcn.719c15f6
leave
ret 0xc
lea esi, [ebx + ebx*4]
lea esi, [esi*4 + 0x719f79d8]
push dword [esi]
call dword [sym.imp._Cmvrt.DLL_wcslen]
inc eax
cmp eax, dword [ebp + 0x10]
pop ecx
jbe 0x719e0382
push 0x7a
jmp 0x719e034d
push dword [esi]
push dword [ebp - 0x220]
call dword [sym.imp._Cmvrt.DLL_wcscpy]
pop ecx
pop ecx
xor eax, eax
jmp 0x719e0356