Function at 0x4366af
Capabilities:
Query or enumerate registry key
Query or enumerate registry value

Disassembly:
push 0x8c4
mov eax, 0x4f7572
call fcn.004cb654
mov eax, edx
mov dword [ebp - 0x8c4], eax
mov dword [ebp - 0x8c0], ecx
mov edx, dword [ebp + 8]
mov ecx, eax
mov dword [ebp - 0x8c8], edx
call fcn.0044282f
mov ecx, edx
call fcn.0044282f
mov esi, reloc.OLEAUT32.dll_SysReAllocString
lea ecx, [ebp - 0x834]
push str.SYSTEMCurrentControlSetControlClass4D36E972_E325_11CE_BFC1_08002bE10318
mov dword [ebp - 0x8b4], esi
call fcn.004408e0
xor ebx, ebx
lea ecx, [ebp - 0x818]
mov dword [ebp - 4], ebx
call fcn.004402d1
lea ecx, [ebp - 0x8a4]
mov dword [ebp - 0x8b8], 0x100
call fcn.004402d1
mov byte [ebp - 4], 2
lea ecx, [ebp - 0x8b4]
cmp dword [ebp - 0x81c], 8
lea eax, [ebp - 0x830]
push ecx
cmovae eax, dword [ebp - 0x830]
push 0x20019
push ebx
push eax
push esi
mov dword [ebp - 0x8a8], 0x3e8
call dword [sym.imp.ADVAPI32.dll_RegOpenKeyExW]
test eax, eax
jne 0x436a3b
mov edi, dword [sym.imp.ADVAPI32.dll_RegCloseKey]
mov esi, ebx
lea eax, [ebp - 0x8d0]
mov dword [ebp - 0x8b8], 0x100
push eax
push ebx
push ebx
push ebx
lea eax, [ebp - 0x8b8]
push eax
lea eax, [ebp - 0x7e0]
push eax
push esi
push dword [ebp - 0x8b4]
call dword [sym.imp.ADVAPI32.dll_RegEnumKeyExW]
mov dword [ebp - 0x8bc], eax
test eax, eax
jne 0x436916
lea eax, [ebp - 0x7e0]
push eax
lea ecx, [ebp - 0x7fc]
call fcn.004408e0
push 0x51c19c
lea ecx, [ebp - 0x850]
mov byte [ebp - 4], 3
call fcn.00440806
lea eax, [ebp - 0x850]
mov byte [ebp - 4], 4
push eax
lea edx, [ebp - 0x834]
lea ecx, [ebp - 0x888]
call fcn.0044310b
lea ecx, [ebp - 0x7fc]
mov byte [ebp - 4], 5
push ecx
mov edx, eax
lea ecx, [ebp - 0x86c]
call fcn.0044310b
pop ecx
pop ecx
add eax, 4
mov byte [ebp - 4], 6
push eax
lea ecx, [ebp - 0x814]
call fcn.0044341f
lea ecx, [ebp - 0x86c]
call fcn.00440d86
lea ecx, [ebp - 0x888]
call fcn.00440d86
lea ecx, [ebp - 0x850]
call fcn.00440d86
lea ecx, [ebp - 0x7fc]
mov byte [ebp - 4], 2
call fcn.00440d86
cmp dword [ebp - 0x800], 8
lea ecx, [ebp - 0x8ac]
push ecx
push 0x20019
lea eax, [ebp - 0x814]
mov edx, reloc.OLEAUT32.dll_SysReAllocString
cmovae eax, dword [ebp - 0x814]
push ebx
push eax
push edx
mov dword [ebp - 0x8ac], edx
call dword [sym.imp.ADVAPI32.dll_RegOpenKeyExW]
test eax, eax
jne 0x436910
mov eax, 0x3e8
mov dword [ebp - 0x8b0], 1
push eax
mov dword [ebp - 0x8a8], eax
lea eax, [ebp - 0x3f8]
push ebx
push eax
call fcn.004cd440
add esp, 0xc
lea eax, [ebp - 0x8a8]
push eax
lea eax, [ebp - 0x3f8]
push eax
lea eax, [ebp - 0x8b0]
push eax
push ebx
push str.NetCfgInstanceId
push dword [ebp - 0x8ac]
call dword [sym.imp.ADVAPI32.dll_RegQueryValueExW]
lea eax, [ebp - 0x3f8]
push eax
lea ecx, [ebp - 0x7fc]
call fcn.004408e0
mov edx, dword [ebp - 0x8c0]
lea ecx, [ebp - 0x7f8]
lea edx, [edx + 4]
call fcn.00443756
lea ecx, [ebp - 0x7fc]
mov bl, al
call fcn.00440d86
test bl, bl
jne 0x436924
push dword [ebp - 0x8ac]
call edi
xor ebx, ebx
mov eax, dword [ebp - 0x8bc]
inc esi
test eax, eax
je 0x43676a
jmp 0x436a33
mov eax, 0x3e8
xor esi, esi
push eax
mov dword [ebp - 0x8a8], eax
xor ebx, ebx
lea eax, [ebp - 0x3f8]
inc ebx
push esi
push eax
mov dword [ebp - 0x8b0], ebx
call fcn.004cd440
add esp, 0xc
lea eax, [ebp - 0x8a8]
push eax
lea eax, [ebp - 0x3f8]
push eax
lea eax, [ebp - 0x8b0]
push eax
push esi
push str.DriverDesc
push dword [ebp - 0x8ac]
call dword [sym.imp.ADVAPI32.dll_RegQueryValueExW]
lea eax, [ebp - 0x3f8]
push eax
lea ecx, [ebp - 0x7fc]
call fcn.004408e0
mov ecx, dword [ebp - 0x8c4]
lea eax, [ebp - 0x7f8]
push eax
add ecx, 4
mov byte [ebp - 4], 7
call fcn.0044341f
lea ecx, [ebp - 0x7fc]
mov byte [ebp - 4], 2
call fcn.00440d86
mov eax, 0x3e8
mov dword [ebp - 0x8b0], ebx
push eax
mov dword [ebp - 0x8a8], eax
lea eax, [ebp - 0x3f8]
push esi
push eax
call fcn.004cd440
add esp, 0xc
lea eax, [ebp - 0x8a8]
push eax
lea eax, [ebp - 0x3f8]
push eax
lea eax, [ebp - 0x8b0]
push eax
push esi
push str.ProviderName
push dword [ebp - 0x8ac]
call dword [sym.imp.ADVAPI32.dll_RegQueryValueExW]
lea eax, [ebp - 0x3f8]
push eax
lea ecx, [ebp - 0x7fc]
call fcn.004408e0
mov ecx, dword [ebp - 0x8c8]
lea eax, [ebp - 0x7f8]
push eax
add ecx, 4
mov byte [ebp - 4], 8
call fcn.0044341f
lea ecx, [ebp - 0x7fc]
call fcn.00440d86
push dword [ebp - 0x8ac]
call edi
push dword [ebp - 0x8b4]
call edi
lea ecx, [ebp - 0x8a4]
call fcn.00440d86
lea ecx, [ebp - 0x818]
call fcn.00440d86
lea ecx, [ebp - 0x834]
call fcn.00440d86
mov al, bl
call fcn.004cb5fe
ret