Function at 0x79a49d
Capabilities:
Query or enumerate registry value

Disassembly:
push ebp
lea ebp, reloc.ws2_32.dll_WSASetLastError
mov eax, 0x1c78
call fcn.007c1eb0
mov eax, dword [0x830e54]
xor eax, ebp
mov dword [ebp + reloc.ws2_32.dll_WSASetLastError], eax
mov eax, dword [ebp + reloc.ws2_32.dll_WSASetLastError]
push ebx
mov dword [ebp - 0x7c], eax
mov eax, dword [ebp + reloc.ws2_32.dll_WSASetLastError]
push esi
mov esi, dword [ebp + reloc.ws2_32.dll_WSASetLastError]
mov dword [ebp - 0x60], eax
mov eax, dword [ebp + reloc.ws2_32.dll_WSASetLastError]
push edi
mov edi, dword [ebp + reloc.ws2_32.dll_WSASetLastError]
push dword [edi]
mov dword [ebp - 0x70], eax
mov eax, dword [ebp + reloc.ws2_32.dll_WSASetLastError]
xor ebx, ebx
mov dword [ebp - 0x74], eax
mov dword [ebp - 0x68], ebx
mov dword [ebp - 0x6c], ebx
mov dword [ebp - 0x64], ebx
call fcn.0077858a
push dword [ebp - 0x60]
mov dword [ebp - 0x78], 0x400
mov byte [ebp + 0x3b4], bl
mov byte [ebp - 0x5c], bl
mov byte [ebp + 0x17f4], bl
mov byte [ebp + 0xbd4], bl
mov byte [ebp + 0x13e4], bl
mov byte [ebp + 0xfd4], bl
mov byte [ebp + 0x7c4], bl
mov dword [esi], ebx
call fcn.007c7760
push eax
lea eax, [ebp - 0x5c]
push eax
push dword [ebp - 0x60]
push edi
call fcn.0077a809
lea eax, reloc.ws2_32.dll_WSASetLastError
push eax
lea eax, [ebp - 0x5c]
push eax
push edi
call fcn.0077abb5
add esp, 0x24
mov dword [ebp - 0x60], ebx
push dword [ebp - 0x7c]
lea eax, reloc.ws2_32.dll_WSASetLastError
push eax
call fcn.007c9c00
lea eax, reloc.ws2_32.dll_WSASetLastError
push 0x7f4e4c
push eax
call fcn.007c9c10
push dword [ebp - 0x60]
lea eax, reloc.ws2_32.dll_WSASetLastError
push eax
lea eax, reloc.ws2_32.dll_WSASetLastError
push 0x7f4e44
push eax
call fcn.007e5e9e
add esp, 0x20
lea eax, [ebp - 0x80]
push eax
lea eax, reloc.ws2_32.dll_WSASetLastError
push eax
push 0x80000002
call dword [sym.imp.advapi32.dll_RegOpenKeyA]
test eax, eax
jne 0x79a667
lea eax, [ebp - 0x78]
push eax
lea eax, reloc.ws2_32.dll_WSASetLastError
push eax
lea eax, reloc.ws2_32.dll_WSASetLastError
push eax
push 0x80000002
call dword [sym.imp.advapi32.dll_RegQueryValueA]
test eax, eax
jne 0x79a667
push 0x5f
push ebx
lea eax, reloc.ws2_32.dll_WSASetLastError
push ebx
push eax
call fcn.007c7760
pop ecx
push eax
lea eax, reloc.ws2_32.dll_WSASetLastError
push eax
lea eax, reloc.ws2_32.dll_WSASetLastError
push eax
push edi
call fcn.0079515a
push dword [ebp - 0x74]
lea eax, reloc.ws2_32.dll_WSASetLastError
push eax
push edi
call fcn.0077a2bf
mov eax, dword [ebp - 0x74]
add esp, 0x28
cmp dword [eax], reloc.ws2_32.dll_WSASetLastError
je 0x79a655
cmp dword [eax + 4], ebx
je 0x79a655
lea ecx, reloc.ws2_32.dll_WSASetLastError
push ecx
add eax, 8
push eax
push edi
call fcn.0077abb5
lea eax, reloc.ws2_32.dll_WSASetLastError
push eax
lea eax, reloc.ws2_32.dll_WSASetLastError
push eax
call fcn.007c9d20
add esp, 0x14
test eax, eax
je 0x79a679
inc dword [ebp - 0x64]
jmp 0x79a667
cmp dword [ebp - 0x68], ebx
jne 0x79a667
mov eax, dword [ebp - 0x60]
mov dword [ebp - 0x68], 1
mov dword [ebp - 0x6c], eax
inc dword [ebp - 0x60]
cmp dword [ebp - 0x60], 0x32
jl 0x79a55e
mov eax, dword [ebp - 0x70]
jmp 0x79a687
mov ecx, dword [ebp - 0x60]
mov eax, dword [ebp - 0x70]
mov dword [eax], ecx
mov dword [esi], 1
cmp dword [esi], ebx
jne 0x79a6b9
cmp dword [ebp - 0x68], 1
jne 0x79a69c
mov ecx, dword [ebp - 0x6c]
mov dword [esi], reloc.ws2_32.dll_WSASetLastError
jmp 0x79a6b7
mov ecx, dword [ebp - 0x64]
cmp ecx, 0x32
jne 0x79a6af
mov dword [esi], reloc.ws2_32.dll_WSASetLastError
or dword [eax], reloc.ws2_32.dll_WSASetLastError
cmp ecx, ecx
jge 0x79a6b9
mov dword [esi], reloc.ws2_32.dll_WSASetLastError
mov dword [eax], ecx
cmp dword [esi], 1
jne 0x79a6c4
mov dword [esi], reloc.ws2_32.dll_WSASetLastError
mov ecx, dword [ebp + reloc.ws2_32.dll_WSASetLastError]
pop edi
pop esi
xor ecx, ebp
xor eax, eax
pop ebx
call fcn.007c1e9d
add ebp, 0x1bf8
leave
ret