Function at 0x1008f030
Capabilities:
Query or enumerate registry key
Query or enumerate registry value

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x478
mov eax, dword [0x100ff900]
xor eax, ebp
mov dword [ebp - 4], eax
push esi
push edi
lea eax, [ebp - 0x460]
push eax
mov edi, ecx
push str.software_asio
xor esi, esi
push reloc.WSOCK32.dll_bind
mov dword [ebp - 0x470], edi
mov dword [ebp - 0x460], 0
mov dword [edi + 4], esi
mov dword [edi], esi
call dword [sym.imp.ADVAPI32.dll_RegOpenKeyA]
test eax, eax
jne 0x1008f2ba
lea ecx, [ecx]
mov edx, dword [ebp - 0x460]
push 0x80
lea ecx, [ebp - 0x84]
push ecx
push esi
push edx
call dword [sym.imp.ADVAPI32.dll_RegEnumKeyA]
inc esi
mov dword [ebp - 0x478], eax
mov dword [ebp - 0x474], esi
test eax, eax
jne 0x1008f2ba
mov esi, dword [edi]
test esi, esi
jne 0x1008f27f
mov edx, dword [ebp - 0x460]
lea eax, [ebp - 0x464]
push eax
push 0x20019
push esi
lea ecx, [ebp - 0x84]
push ecx
push edx
call dword [sym.imp.ADVAPI32.dll_RegOpenKeyExA]
test eax, eax
jne 0x1008f2a4
lea eax, [ebp - 0x46c]
push eax
mov eax, dword [ebp - 0x464]
lea ecx, [ebp - 0x184]
push ecx
lea edx, [ebp - 0x468]
push edx
push esi
push str.clsid
push eax
mov dword [ebp - 0x468], 1
mov dword [ebp - 0x46c], 0x100
call dword [sym.imp.ADVAPI32.dll_RegQueryValueExA]
test eax, eax
jne 0x1008f270
lea ecx, [ebp - 0x44c]
push 0x200
push ecx
lea edi, [ebp - 0x184]
call fcn.1008eb70
add esp, 8
test eax, eax
jne 0x1008f26a
mov edx, dword [0x100fecc0]
mov ecx, dword [edx + 4]
push eax
push 0x4d
push str..._src_asio_asiolist.cpp
push 0x29c
call fcn.10075b20
mov esi, eax
test esi, esi
je 0x1008f26a
push 0x29c
push 0
push esi
call fcn.100c6660
add esp, 0xc
push 0x64
lea eax, [ebp - 0x24c]
push eax
push 0xffffffffffffffff
mov ecx, edi
push ecx
push 0
push 0
mov dword [esi], 0
call dword [sym.imp.KERNEL32.dll_MultiByteToWideChar]
lea edx, [ebp - 0x45c]
push edx
lea eax, [ebp - 0x24c]
push eax
call dword [sym.imp.ole32.dll_CLSIDFromString]
test eax, eax
jne 0x1008f1d7
mov ecx, dword [ebp - 0x45c]
mov dword [esi + 4], ecx
mov edx, dword [ebp - 0x458]
mov dword [esi + 8], edx
mov eax, dword [ebp - 0x454]
mov dword [esi + 0xc], eax
mov ecx, dword [ebp - 0x450]
mov dword [esi + 0x10], ecx
lea edx, [ebp - 0x46c]
push edx
mov edx, dword [ebp - 0x464]
lea eax, [ebp - 0x184]
push eax
lea ecx, [ebp - 0x468]
push ecx
push 0
push str.description
push edx
mov dword [ebp - 0x468], 1
mov dword [ebp - 0x46c], 0x100
call dword [sym.imp.ADVAPI32.dll_RegQueryValueExA]
mov ecx, esi
test eax, eax
jne 0x1008f24f
lea eax, [ebp - 0x184]
mov edx, eax
sub ecx, edx
lea edx, [ecx + 0x214]
lea ebx, [ebx]
mov cl, byte [eax]
mov byte [edx + eax], cl
inc eax
test cl, cl
jne 0x1008f230
mov eax, dword [ebp - 0x464]
mov edi, dword [ebp - 0x470]
push eax
call dword [sym.imp.ADVAPI32.dll_RegCloseKey]
jmp 0x1008f2a4
lea eax, [ebp - 0x84]
mov edx, eax
sub ecx, edx
lea edx, [ecx + 0x214]
nop
mov cl, byte [eax]
mov byte [edx + eax], cl
inc eax
test cl, cl
jne 0x1008f260
mov edi, dword [ebp - 0x470]
mov eax, dword [ebp - 0x464]
push eax
call dword [sym.imp.ADVAPI32.dll_RegCloseKey]
jmp 0x1008f2a4
mov ecx, dword [esi + 0x298]
mov eax, dword [ebp - 0x460]
push ecx
push 1
lea edx, [ebp - 0x84]
push edx
push eax
call fcn.1008eda0
add esp, 0x10
mov dword [esi + 0x298], eax
mov eax, dword [ebp - 0x478]
mov dword [edi], esi
mov esi, dword [ebp - 0x474]
test eax, eax
je 0x1008f080
mov eax, dword [ebp - 0x460]
test eax, eax
je 0x1008f2cb
push eax
call dword [sym.imp.ADVAPI32.dll_RegCloseKey]
mov eax, dword [edi]
test eax, eax
je 0x1008f2e2
mov ecx, dword [edi + 4]
inc ecx
mov dword [edi + 4], ecx
mov eax, dword [eax + 0x298]
test eax, eax
jne 0x1008f2d4
cmp dword [edi + 4], 0
je 0x1008f2f0
push 0
call dword [sym.imp.ole32.dll_CoInitialize]
mov ecx, dword [ebp - 4]
mov eax, edi
pop edi
xor ecx, ebp
pop esi
call fcn.100c5f50
mov esp, ebp
pop ebp
ret