Function at 0x19f0a4dd
Capabilities:
Query or enumerate registry key
Query or enumerate registry value

Disassembly:
push 0x498
mov eax, 0x19f1971e
call fcn.19e70fdc
mov edi, dword [ebp + 0x10]
mov ecx, dword [ebp + 0x14]
mov eax, dword [ebp + 8]
xor ebx, ebx
mov dword [ebp - 0x450], edi
mov dword [ebp - 0x474], ecx
cmp edi, ebx
je 0x19f0a664
mov dword [edi], ebx
mov dword [edi + 4], ebx
mov dword [ebp - 0x464], ebx
mov dword [ebp - 0x460], ebx
mov dword [ebp - 0x45c], ebx
mov dword [ebp - 4], ebx
mov dword [ebp - 0x470], ebx
mov dword [ebp - 0x46c], ebx
mov dword [ebp - 0x468], ebx
push 0x20119
lea ecx, [ebp - 0x464]
push ecx
push eax
mov byte [ebp - 4], 1
mov dword [ebp - 0x444], ebx
mov dword [ebp - 0x440], ebx
call fcn.19f0b90c
cmp eax, ebx
mov dword [ebp - 0x478], eax
jl 0x19f0a835
xor eax, eax
mov esi, 0x206
push esi
mov word [ebp - 0x218], ax
lea eax, [ebp - 0x216]
push ebx
push eax
call sub.msvcrt.dll_memset
xor eax, eax
push esi
mov word [ebp - 0x420], ax
lea eax, [ebp - 0x41e]
push ebx
push eax
call sub.msvcrt.dll_memset
add esp, 0x18
mov dword [ebp - 0x448], ebx
mov dword [ebp - 0x47c], ebx
mov dword [ebp - 0x454], ebx
mov dword [ebp - 0x438], ebx
cmp dword [ebp - 0x438], ebx
jne 0x19f0a824
lea ecx, [ebp - 0x470]
mov dword [ebp - 0x44c], 0x104
call fcn.19e7b423
mov dword [ebp - 0x438], eax
cmp eax, ebx
jne 0x19f0a5b5
push ebx
push ebx
push ebx
push ebx
lea eax, [ebp - 0x44c]
push eax
lea eax, [ebp - 0x218]
push eax
push dword [ebp - 0x448]
push dword [ebp - 0x464]
call dword [sym.imp.KERNEL32.dll_RegEnumKeyExW]
mov dword [ebp - 0x438], eax
cmp eax, ebx
jne 0x19f0a5b5
inc dword [ebp - 0x448]
lea eax, [ebp - 0x218]
push eax
call dword [sym.imp.msvcrt.dll__wtoi]
cmp eax, ebx
pop ecx
mov dword [ebp - 0x484], eax
jl 0x19f0a5b5
test dword [ebp + 0xc], eax
je 0x19f0a5b5
push 0x20019
lea eax, [ebp - 0x218]
push eax
push dword [ebp - 0x464]
lea ecx, [ebp - 0x470]
call fcn.19e7b496
mov dword [ebp - 0x438], eax
cmp eax, ebx
jne 0x19f0a5b5
mov dword [ebp - 0x43c], ebx
jmp 0x19f0a674
mov eax, 0x80070057
jmp 0x19f0a851
mov edi, dword [ebp - 0x450]
cmp dword [ebp - 0x438], ebx
jne 0x19f0a80f
lea eax, [ebp - 0x454]
push eax
lea eax, [ebp - 0x420]
push eax
lea eax, [ebp - 0x47c]
push eax
push ebx
lea eax, [ebp - 0x44c]
push eax
lea eax, [ebp - 0x218]
push eax
push dword [ebp - 0x43c]
mov dword [ebp - 0x44c], 0x104
push dword [ebp - 0x470]
mov dword [ebp - 0x454], 0x208
call dword [sym.imp.ADVAPI32.dll_RegEnumValueW]
mov dword [ebp - 0x438], eax
cmp eax, ebx
jne 0x19f0a674
inc dword [ebp - 0x43c]
lea eax, [ebp - 0x218]
mov ecx, 0x19e6f118
mov dx, word [ecx]
cmp dx, word [eax]
jne 0x19f0a70b
cmp dx, bx
je 0x19f0a707
mov dx, word [ecx + 2]
cmp dx, word [eax + 2]
jne 0x19f0a70b
add ecx, 4
add eax, 4
cmp dx, bx
jne 0x19f0a6e5
xor eax, eax
jmp 0x19f0a710
sbb eax, eax
sbb eax, 0xffffffff
cmp eax, ebx
jne 0x19f0a75b
lea eax, [ebp - 0x420]
push eax
call dword [sym.imp.msvcrt.dll__wtoi64]
cmp dword [ebp - 0x440], edx
pop ecx
jg 0x19f0a674
jl 0x19f0a73c
cmp dword [ebp - 0x444], eax
ja 0x19f0a674
lea eax, [ebp - 0x420]
push eax
call dword [sym.imp.msvcrt.dll__wtoi64]
pop ecx
mov dword [ebp - 0x444], eax
mov dword [ebp - 0x440], edx
jmp 0x19f0a674
mov eax, dword [ebp - 0x484]
mov esi, 0x19e63e8c
lea edi, [ebp - 0x434]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
mov dword [ebp - 0x424], eax
lea eax, [ebp - 0x434]
push eax
lea eax, [ebp - 0x218]
push eax
call dword [sym.imp.ole32.dll_CLSIDFromString]
test eax, eax
jl 0x19f0a66e
lea eax, [ebp - 0x420]
push eax
lea ecx, [ebp - 0x480]
call fcn.19e80ba7
push eax
lea ecx, [ebp - 0x458]
mov byte [ebp - 4], 2
call fcn.19f07abe
lea eax, [ebp - 0x458]
push eax
lea eax, [ebp - 0x434]
push eax
lea ecx, [ebp - 0x4a4]
mov byte [ebp - 4], 3
call fcn.19f08d74
mov ecx, dword [ebp - 0x474]
push eax
lea eax, [ebp - 0x48c]
push eax
mov byte [ebp - 4], 4
call fcn.19f0a0b0
push dword [ebp - 0x490]
mov esi, dword [sym.imp.OLEAUT32.dll_SysStringLen]
call esi
push dword [ebp - 0x458]
call esi
push dword [ebp - 0x480]
mov byte [ebp - 4], 1
call esi
jmp 0x19f0a66e
cmp dword [ebp - 0x438], 0x103
jne 0x19f0a5b5
jmp 0x19f0a5af
mov eax, dword [ebp - 0x444]
mov dword [edi], eax
mov eax, dword [ebp - 0x440]
mov dword [edi + 4], eax
lea ecx, [ebp - 0x470]
call fcn.19e7b423
lea ecx, [ebp - 0x464]
call fcn.19e7b423
mov eax, dword [ebp - 0x478]
call fcn.19e7106e
ret 0x10