Function at 0x410a50
Capabilities:
Query or enumerate registry value

Disassembly:
push 0xffffffffffffffff
push 0x436457
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
sub esp, 0x244
mov eax, dword [0x4540d0]
push ebx
push ebp
push esi
push edi
mov dword [esp + 0x30], ecx
mov dword [esp + 0x1c], eax
mov ecx, dword [esp + 0x264]
mov edi, dword [sym.imp.ADVAPI32.dll_RegQueryValueExA]
xor ebx, ebx
xor esi, esi
mov eax, dword [ecx + 8]
mov dword [esp + 0x25c], ebx
cmp eax, ebx
mov dword [esp + 0x44], esi
mov ebp, 0x100
jle 0x4110d5
mov edx, dword [esp + 0x264]
mov eax, dword [edx + 4]
lea edx, [esp + 0x3c]
lea ecx, [eax + esi*4]
push ecx
push str.Enum_
push edx
call fcn.0042bb13
mov ecx, dword [esp + 0x3c]
lea eax, [esp + 0x18]
push eax
push 1
push ebx
push ecx
push reloc.WSOCK32.dll_bind
mov byte [esp + 0x270], 1
call dword [sym.imp.ADVAPI32.dll_RegOpenKeyExA]
cmp eax, ebx
jne 0x4110b0
lea edx, [esp + 0x10]
lea eax, [esp + 0x54]
push edx
mov edx, dword [esp + 0x1c]
lea ecx, [esp + 0x18]
push eax
push ecx
push ebx
push str.Class
push edx
mov dword [esp + 0x28], ebp
call edi
cmp eax, ebx
jne 0x4110a5
lea eax, [esp + 0x54]
lea ecx, [esp + 0x1c]
push eax
call fcn.0042b993
mov ecx, dword [esp + 0x1c]
push 0x453604
push ecx
call fcn.00416a17
add esp, 8
test eax, eax
jne 0x4110a5
mov ecx, dword [esp + 0x30]
mov dword [esp + 0x10], ebp
mov eax, dword [ecx + 4]
mov edx, eax
shl edx, 6
inc eax
lea esi, [edx + ecx + 8]
mov dword [ecx + 4], eax
lea edx, [esp + 0x10]
lea eax, [esp + 0x54]
push edx
mov edx, dword [esp + 0x1c]
lea ecx, [esp + 0x18]
push eax
push ecx
push ebx
push str.DeviceDesc
push edx
mov dword [esp + 0x38], esi
call edi
test eax, eax
jne 0x410b85
lea eax, [esp + 0x54]
mov ecx, esi
push eax
call fcn.0042b993
lea ecx, [esp + 0x10]
lea edx, [esp + 0x54]
push ecx
mov ecx, dword [esp + 0x1c]
lea eax, [esp + 0x18]
push edx
push eax
push ebx
push 0x4531c8
push ecx
mov dword [esp + 0x28], ebp
call edi
test eax, eax
jne 0x410bb6
lea edx, [esp + 0x54]
lea ecx, [esi + 4]
push edx
call fcn.0042b993
lea eax, [esp + 0x10]
lea ecx, [esp + 0x54]
push eax
mov eax, dword [esp + 0x1c]
lea edx, [esp + 0x18]
push ecx
push edx
push ebx
push str.Driver
push eax
mov dword [esp + 0x28], ebp
call edi
cmp eax, ebx
jne 0x410cda
mov ecx, dword [0x4540d0]
mov dword [esp + 0x28], ecx
lea edx, [esp + 0x54]
lea eax, [esp + 0x28]
push edx
push str.SystemCurrentControlSetServicesClass_s
push eax
mov byte [esp + 0x268], 2
call fcn.00426a41
mov edx, dword [esp + 0x34]
add esp, 0xc
lea ecx, [esp + 0x34]
mov dword [esp + 0x10], ebp
push ecx
push 1
push ebx
push edx
push reloc.WSOCK32.dll_bind
call dword [sym.imp.ADVAPI32.dll_RegOpenKeyExA]
cmp eax, ebx
jne 0x410cc9
lea eax, [esp + 0x10]
lea ecx, [esp + 0x54]
push eax
mov eax, dword [esp + 0x38]
lea edx, [esp + 0x18]
push ecx
push edx
push ebx
push str.DriverDesc
push eax
mov dword [esp + 0x28], ebp
call edi
test eax, eax
jne 0x410c5c
lea ecx, [esp + 0x54]
push ecx
lea ecx, [esi + 8]
call fcn.0042b993
lea edx, [esp + 0x10]
lea eax, [esp + 0x54]
push edx
mov edx, dword [esp + 0x38]
lea ecx, [esp + 0x18]
push eax
push ecx
push ebx
push str.ProviderName
push edx
mov dword [esp + 0x28], ebp
call edi
test eax, eax
jne 0x410c8d
lea eax, [esp + 0x54]
lea ecx, [esi + 0xc]
push eax
call fcn.0042b993
lea ecx, [esp + 0x10]
lea edx, [esp + 0x54]
push ecx
mov ecx, dword [esp + 0x38]
lea eax, [esp + 0x18]
push edx
push eax
push ebx
push str.DeviceVxDs
push ecx
mov dword [esp + 0x28], ebp
call edi
cmp eax, ebx
jne 0x410cbe
lea edx, [esp + 0x54]
lea ecx, [esi + 0x10]
push edx
call fcn.0042b993
mov eax, dword [esp + 0x34]
push eax
call dword [sym.imp.ADVAPI32.dll_RegCloseKey]
lea ecx, [esp + 0x28]
mov byte [esp + 0x25c], 1
call fcn.0042b856
mov edx, dword [esp + 0x18]
lea ecx, [esp + 0x40]
push ecx
push 1
push ebx
push str.Bindings
push edx
call dword [sym.imp.ADVAPI32.dll_RegOpenKeyExA]
cmp eax, ebx
jne 0x411096
mov dword [esp + 0x28], ebx
mov edx, dword [esp + 0x28]
push ebx
push ebx
push ebx
lea eax, [esp + 0x5c]
push ebx
lea ecx, [esp + 0x164]
push eax
mov eax, dword [esp + 0x54]
push ecx
push edx
push eax
mov dword [esp + 0x70], ebp
call dword [sym.imp.ADVAPI32.dll_RegEnumValueA]
cmp eax, ebx
jne 0x411096
lea ecx, [esp + 0x154]
push ecx
lea ecx, [esp + 0x20]
call fcn.0042b993
lea edx, [esp + 0x1c]
lea eax, [esp + 0x48]
push edx
push str.EnumNetwork_
push eax
call fcn.0042bb13
push eax
lea ecx, [esp + 0x20]
mov byte [esp + 0x260], 3
call fcn.0042b943
lea ecx, [esp + 0x48]
mov byte [esp + 0x25c], 1
call fcn.0042b856
mov edx, dword [esp + 0x1c]
lea ecx, [esp + 0x38]
push ecx
push 1
push ebx
push edx
push reloc.WSOCK32.dll_bind
call dword [sym.imp.ADVAPI32.dll_RegOpenKeyExA]
cmp eax, ebx
jne 0x411082
lea eax, [esp + 0x10]
lea ecx, [esp + 0x54]
push eax
mov eax, dword [esp + 0x3c]
lea edx, [esp + 0x18]
push ecx
push edx
push ebx
push str.DeviceDesc
push eax
mov dword [esp + 0x28], ebp
call edi
test eax, eax
jne 0x410dc8
mov eax, dword [esi + 0x28]
lea ecx, [esi + 0x20]
lea edx, [esp + 0x54]
push edx
push eax
call fcn.00426ff3
lea eax, [esp + 0x10]
lea ecx, [esp + 0x54]
push eax
mov eax, dword [esp + 0x3c]
lea edx, [esp + 0x18]
push ecx
push edx
push ebx
push str.Driver
push eax
mov dword [esp + 0x28], ebp
call edi
cmp eax, ebx
jne 0x411082
lea ecx, [esp + 0x54]
push ecx
lea ecx, [esp + 0x20]
call fcn.0042b993
lea edx, [esp + 0x1c]
lea eax, [esp + 0x4c]
push edx
push str.SystemCurrentControlSetServicesClass_
push eax
call fcn.0042bb13
push eax
lea ecx, [esp + 0x20]
mov byte [esp + 0x260], 4
call fcn.0042b943
lea ecx, [esp + 0x4c]
mov byte [esp + 0x25c], 1
call fcn.0042b856
mov edx, dword [esp + 0x1c]
lea ecx, [esp + 0x24]
push ecx
push 1
push ebx
push edx
push reloc.WSOCK32.dll_bind
mov dword [esp + 0x24], ebp
call dword [sym.imp.ADVAPI32.dll_RegOpenKeyExA]
cmp eax, ebx
jne 0x411082
lea eax, [esp + 0x10]
lea ecx, [esp + 0x54]
push eax
mov eax, dword [esp + 0x28]
lea edx, [esp + 0x18]
push ecx
push edx
push ebx
push str.DriverDesc
push eax
mov dword [esp + 0x28], ebp
call edi
cmp eax, ebx
jne 0x411077
mov esi, str.TCP_IP
lea eax, [esp + 0x54]
mov dl, byte [eax]
mov cl, dl
cmp dl, byte [esi]
jne 0x410eae
cmp cl, bl
je 0x410eaa
mov dl, byte [eax + 1]
mov cl, dl
cmp dl, byte [esi + 1]
jne 0x410eae
add eax, 2
add esi, 2
cmp cl, bl
jne 0x410e8a
xor eax, eax
jmp 0x410eb3
sbb eax, eax
sbb eax, 0xffffffff
cmp eax, ebx
jne 0x410f63
lea eax, [esp + 0x10]
lea ecx, [esp + 0x54]
push eax
mov eax, dword [esp + 0x28]
lea edx, [esp + 0x18]
push ecx
push edx
push ebx
push str.IPAddress
push eax
mov dword [esp + 0x28], ebp
call edi
test eax, eax
jne 0x410ef0
mov edx, dword [esp + 0x20]
lea ecx, [esp + 0x54]
push ecx
lea ecx, [edx + 0x3c]
call fcn.0042b993
lea eax, [esp + 0x10]
lea ecx, [esp + 0x54]
push eax
mov eax, dword [esp + 0x28]
lea edx, [esp + 0x18]
push ecx
push edx
push ebx
push str.IPMask
push eax
mov dword [esp + 0x28], ebp
call edi
test eax, eax
jne 0x410f25
mov edx, dword [esp + 0x20]
lea ecx, [esp + 0x54]
push ecx
lea ecx, [edx + 0x38]
call fcn.0042b993
lea eax, [esp + 0x10]
lea ecx, [esp + 0x54]
push eax
mov eax, dword [esp + 0x28]
lea edx, [esp + 0x18]
push ecx
push edx
push ebx
push str.DefaultGateway
push eax
mov dword [esp + 0x28], ebp
call edi
cmp eax, ebx
jne 0x411073
mov edx, dword [esp + 0x20]
lea ecx, [esp + 0x54]
push ecx
lea ecx, [edx + 0x34]
call fcn.0042b993
jmp 0x411073
lea eax, [esp + 0x54]
push str.IPX_SPX
push eax
call fcn.00417df0
add esp, 8
test eax, eax
je 0x411073
lea ecx, [esp + 0x10]
lea edx, [esp + 0x54]
push ecx
mov ecx, dword [esp + 0x28]
lea eax, [esp + 0x18]
push edx
push eax
push ebx
push str.Frame_Type
push ecx
mov dword [esp + 0x28], ebp
call edi
test eax, eax
jne 0x411009
mov edx, dword [esp + 0x20]
lea eax, [esp + 0x54]
push eax
lea esi, [edx + 0x1c]
mov ecx, esi
call fcn.0042b993
mov edx, dword [esp + 0x24]
lea ecx, [esp + 0x2c]
push ecx
push 1
push ebx
push str.NdiparamsFrame_Typeenum
push edx
call dword [sym.imp.ADVAPI32.dll_RegOpenKeyExA]
test eax, eax
jne 0x411009
lea ecx, [esp + 0x10]
lea edx, [esp + 0x54]
push ecx
lea ecx, [esp + 0x18]
mov dword [esp + 0x14], ebp
mov eax, dword [esi]
push edx
mov edx, dword [esp + 0x34]
push ecx
push ebx
push eax
push edx
call edi
test eax, eax
jne 0x410ffe
lea eax, [esp + 0x54]
mov ecx, esi
push eax
call fcn.0042b993
mov ecx, dword [esp + 0x2c]
push ecx
call dword [sym.imp.ADVAPI32.dll_RegCloseKey]
mov eax, dword [esp + 0x24]
lea edx, [esp + 0x2c]
push edx
push 1
push ebx
push str.NdiparamsNetwork_Id
push eax
mov dword [esp + 0x24], ebp
call dword [sym.imp.ADVAPI32.dll_RegOpenKeyExA]
cmp eax, ebx
jne 0x411073
mov ecx, dword [esp + 0x20]
push 0x45352c
lea esi, [ecx + 0x18]
mov ecx, esi
call fcn.0042b993
lea edx, [esp + 0x10]
lea eax, [esp + 0x54]
push edx
mov edx, dword [esp + 0x30]
lea ecx, [esp + 0x18]
push eax
push ecx
push ebx
push ebx
push edx
mov dword [esp + 0x28], ebp
call edi
cmp eax, ebx
jne 0x411068
lea eax, [esp + 0x54]
mov ecx, esi
push eax
call fcn.0042b993
mov ecx, dword [esp + 0x2c]
push ecx
call dword [sym.imp.ADVAPI32.dll_RegCloseKey]
mov esi, dword [esp + 0x20]
mov edx, dword [esp + 0x24]
push edx
call dword [sym.imp.ADVAPI32.dll_RegCloseKey]
mov eax, dword [esp + 0x38]
push eax
call dword [sym.imp.ADVAPI32.dll_RegCloseKey]
inc dword [esp + 0x28]
jmp 0x410cfe
mov ecx, dword [esp + 0x40]
push ecx
call dword [sym.imp.ADVAPI32.dll_RegCloseKey]
mov esi, dword [esp + 0x44]
mov edx, dword [esp + 0x18]
push edx
call dword [sym.imp.ADVAPI32.dll_RegCloseKey]
lea ecx, [esp + 0x3c]
mov byte [esp + 0x25c], bl
call fcn.0042b856
mov eax, dword [esp + 0x264]
inc esi
mov dword [esp + 0x44], esi
cmp esi, dword [eax + 8]
jl 0x410aa8
lea ecx, [esp + 0x18]
push ecx
push 1
push ebx
push str.SystemCurrentControlSetServicesVxdVNETSUP
push reloc.WSOCK32.dll_bind
call dword [sym.imp.ADVAPI32.dll_RegOpenKeyExA]
cmp eax, ebx
jne 0x4111a6
lea edx, [esp + 0x10]
lea eax, [esp + 0x54]
push edx
mov edx, dword [esp + 0x1c]
lea ecx, [esp + 0x18]
push eax
push ecx
push ebx
push str.Comment
push edx
mov dword [esp + 0x28], ebp
call edi
test eax, eax
jne 0x41112f
mov esi, dword [esp + 0x30]
lea eax, [esp + 0x54]
push eax
lea ecx, [esi + 0x290]
call fcn.0042b993
jmp 0x411133
mov esi, dword [esp + 0x30]
lea ecx, [esp + 0x10]
lea edx, [esp + 0x54]
push ecx
mov ecx, dword [esp + 0x1c]
lea eax, [esp + 0x18]
push edx
push eax
push ebx
push str.ComputerName
push ecx
mov dword [esp + 0x28], ebp
call edi
test eax, eax
jne 0x411167
lea edx, [esp + 0x54]
lea ecx, [esi + 0x28c]
push edx
call fcn.0042b993
lea eax, [esp + 0x10]
lea ecx, [esp + 0x54]
push eax
mov eax, dword [esp + 0x1c]
lea edx, [esp + 0x18]
push ecx
push edx
push ebx
push str.Workgroup
push eax
mov dword [esp + 0x28], ebp
call edi
cmp eax, ebx
jne 0x41119b
lea ecx, [esp + 0x54]
push ecx
lea ecx, [esi + 0x288]
call fcn.0042b993
mov edx, dword [esp + 0x18]
push edx
call dword [sym.imp.ADVAPI32.dll_RegCloseKey]
lea ecx, [esp + 0x1c]
mov dword [esp + 0x25c], 0xffffffff
call fcn.0042b856
mov ecx, dword [esp + 0x254]
pop edi
pop esi
pop ebp
mov al, 1
pop ebx
mov dword fs:[0], ecx
add esp, 0x250
ret 4