Function at 0x75555f81
Capabilities:
Query or enumerate registry value

Disassembly:
add byte [eax], al
add byte [eax], al
add byte [eax], al
add byte [eax], al
add byte [eax], al
add byte [eax], al
add byte [eax], al
add byte [eax], al
add byte [eax], al
add byte [eax], al
add byte [eax], al
add byte [eax], al
add byte [eax], al
add byte [eax], al
add byte [eax], al
add byte [eax], al
add byte [eax], al
add byte [eax], al
add byte [eax], al
add byte [eax], al
add byte [eax], al
add byte [eax], al
add byte [eax], al
add byte [eax], al
add byte [eax], al
add byte [eax], al
add byte [eax], al
add byte [eax], al
add byte [eax], al
add byte [eax], al
add byte [eax], al
add byte [eax], al
add byte [eax], al
add byte [eax], al
add byte [eax], al
add byte [eax], al
add byte [eax], al
add byte [eax], al
add byte [eax], al
add byte [eax], al
add byte [eax], al
add byte [eax], al
add byte [eax], al
add byte [eax], al
add byte [eax], al
add byte [eax], al
add byte [eax], al
add byte [eax], al
add byte [eax], al
add byte [eax], al
add byte [eax], al
add byte [eax], al
add byte [eax], al
add byte [eax], al
add byte [eax], al
add byte [eax], al
add byte [eax], al
add byte [eax], al
add byte [eax], al
add byte [eax], al
add byte [eax], al
add byte [eax], al
add byte [eax], al
add byte [eax], al
mov edi, str.SOFTWAREMicrosoftCryptographyDefaultsProvider_TypesType
mov eax, edi
lea edx, [eax + 1]
mov cl, byte [eax]
inc eax
cmp cl, bl
jne 0x7555600b
sub eax, edx
lea esi, [eax + 6]
push esi
push 0x40
call dword [sym.imp.API_MS_Win_Core_Misc_L1_1_0.dll_LocalAlloc]
mov dword [ebp - 0x30], eax
cmp eax, ebx
jne 0x7555602e
push 8
jmp 0x755560e8
push edi
push esi
push eax
call sub.ntdll.dll_strcpy_s
add esp, 0xc
lea ecx, [ebp - 0x28]
mov eax, dword [ebp + 8]
call fcn.7555426e
lea eax, [ebp - 0x23]
push eax
push esi
push dword [ebp - 0x30]
call sub.ntdll.dll_strcat_s
add esp, 0xc
lea eax, [ebp - 0x2c]
push eax
push 0x20019
push ebx
push dword [ebp - 0x30]
push 0x80000002
call sub.API_MS_Win_Core_LocalRegistry_L1_1_0.dll_RegOpenKeyExA
cmp eax, ebx
jne 0x755560e6
lea eax, [ebp - 0x34]
push eax
push ebx
lea eax, [ebp - 0x44]
push eax
push ebx
mov esi, 0x755516a8
push esi
push dword [ebp - 0x2c]
call sub.API_MS_Win_Core_LocalRegistry_L1_1_0.dll_RegQueryValueExA
cmp eax, ebx
jne 0x755560e6
mov eax, dword [ebp - 0x34]
cmp dword [ebp - 0x40], ebx
jne 0x755560a1
mov ecx, dword [ebp - 0x3c]
mov dword [ecx], eax
mov dword [ebp - 0x38], 1
jmp 0x755560ee
mov edi, dword [ebp - 0x3c]
cmp eax, dword [edi]
jbe 0x755560b1
mov dword [edi], eax
push 0xea
jmp 0x755560e8
lea eax, [ebp - 0x34]
push eax
push dword [ebp - 0x40]
lea eax, [ebp - 0x44]
push eax
push ebx
push esi
push dword [ebp - 0x2c]
call sub.API_MS_Win_Core_LocalRegistry_L1_1_0.dll_RegQueryValueExA
cmp eax, ebx
jne 0x755560e6
mov eax, dword [ebp - 0x34]
mov dword [edi], eax
mov dword [ebp - 4], 0xfffffffe
mov dword [ebp - 0x38], 1
jmp 0x7555611f
push 0x57
call dword [sym.imp.API_MS_Win_Core_ErrorHandling_L1_1_0.dll_SetLastError]
mov dword [ebp - 4], 0xfffffffe
jmp 0x7555611f
cmp dword [ebp - 0x2c], ebx
je 0x7555612c
push dword [ebp - 0x2c]
call sub.API_MS_Win_Core_LocalRegistry_L1_1_0.dll_RegCloseKey
cmp dword [ebp - 0x30], ebx
je 0x7555613a
push dword [ebp - 0x30]
call dword [sym.imp.API_MS_Win_Core_Misc_L1_1_0.dll_LocalFree]
mov eax, dword [ebp - 0x38]
call fcn.75558b50
ret 0x14