Function at 0x4136f0
Capabilities:
Query or enumerate registry key
Query or enumerate registry value

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x838
mov eax, dword [0x448070]
xor eax, ebp
mov dword [ebp - 4], eax
mov eax, dword [ebp + 0xc]
push ebx
push esi
mov esi, dword [ebp + 8]
push str.Enter____GetNetCfgInstanceId___n
push 0x44aca0
mov dword [ebp - 0x838], eax
call sym.SetupBD.exe_public:_void___cdecl_CNcsDebug::Print_wchar_t_const__
xor eax, eax
push 0x1fe
push eax
mov word [ebp - 0x614], ax
lea eax, [ebp - 0x612]
push eax
call fcn.0041c090
push 0x208
lea eax, [ebp - 0x20c]
push 0
push eax
call fcn.0041c090
push str.SYSTEMCurrentControlSetEnumPCI
lea eax, [ebp - 0x20c]
push 0x104
push eax
call fcn.0041c1ed
push 0x431fe0
lea eax, [ebp - 0x20c]
push 0x104
push eax
call fcn.0041d6ab
push esi
lea eax, [ebp - 0x20c]
push 0x104
push eax
call fcn.0041d6ab
add esp, 0x44
mov dword [ebp - 0x834], 0x100
xor eax, eax
mov word [ebp - 6], ax
mov dword [ebp - 0x824], eax
push esi
push 0x44aca0
mov dword [ebp - 0x820], eax
call sym.SetupBD.exe_public:_void___cdecl_CNcsDebug::Print_wchar_t_const__
mov ebx, dword [sym.imp.ADVAPI32.dll_RegOpenKeyExW]
lea eax, [ebp - 0x824]
add esp, 8
push eax
push 8
push 0
lea eax, [ebp - 0x20c]
push eax
push reloc.OLEAUT32.dll_SysReAllocString
call ebx
test eax, eax
jne 0x41399a
push edi
push eax
push eax
push eax
push eax
lea eax, [ebp - 0x834]
push eax
lea eax, [ebp - 0x614]
push eax
push 0
push dword [ebp - 0x824]
call dword [sym.imp.ADVAPI32.dll_RegEnumKeyExW]
mov edi, dword [sym.imp.ADVAPI32.dll_RegCloseKey]
test eax, eax
jne 0x413991
push 0x431fe0
lea eax, [ebp - 0x20c]
push 0x104
push eax
call fcn.0041d6ab
lea eax, [ebp - 0x614]
push eax
lea eax, [ebp - 0x20c]
push 0x104
push eax
call fcn.0041d6ab
add esp, 0x18
lea eax, [ebp - 0x820]
push eax
push 0x20019
push 0
lea eax, [ebp - 0x20c]
push eax
push reloc.OLEAUT32.dll_SysReAllocString
call ebx
test eax, eax
jne 0x413991
lea eax, [ebp - 0x82c]
push eax
push 0
push 0
push 0
push str.Driver
push dword [ebp - 0x820]
call dword [sym.imp.ADVAPI32.dll_RegQueryValueExW]
test eax, eax
jne 0x413989
mov esi, dword [ebp - 0x82c]
add esi, 5
push esi
call fcn.0041bff6
push esi
mov ebx, eax
push 0
push ebx
call fcn.0041c090
mov esi, dword [sym.imp.ADVAPI32.dll_RegQueryValueExW]
lea eax, [ebp - 0x82c]
add esp, 0x10
push eax
push ebx
push 0
push 0
push str.Driver
push dword [ebp - 0x820]
call esi
test eax, eax
jne 0x413980
push str.SYSTEMCurrentControlSetControlClass
lea eax, [ebp - 0x414]
push 0x104
push eax
call fcn.0041c1ed
push 0x431fe0
lea eax, [ebp - 0x414]
push 0x104
push eax
call fcn.0041d6ab
push ebx
lea eax, [ebp - 0x414]
push 0x104
push eax
call fcn.0041d6ab
add esp, 0x24
lea eax, [ebp - 0x828]
push eax
push 0x20019
push 0
lea eax, [ebp - 0x414]
push eax
push reloc.OLEAUT32.dll_SysReAllocString
call dword [sym.imp.ADVAPI32.dll_RegOpenKeyExW]
test eax, eax
jne 0x413980
lea eax, [ebp - 0x830]
mov dword [ebp - 0x830], 0x104
push eax
lea eax, [ebp - 0x81c]
push eax
push 0
push 0
push str.NetCfgInstanceId
push dword [ebp - 0x828]
call esi
test eax, eax
jne 0x413978
lea eax, [ebp - 0x81c]
push eax
push dword [ebp + 0x10]
push dword [ebp - 0x838]
call fcn.0041c1ed
add esp, 0xc
push dword [ebp - 0x828]
call edi
push ebx
call fcn.0041abe1
add esp, 4
push dword [ebp - 0x820]
call edi
push dword [ebp - 0x824]
call edi
pop edi
push str.Exit____GetNetCfgInstanceId___n
push 0x44aca0
call sym.SetupBD.exe_public:_void___cdecl_CNcsDebug::Print_wchar_t_const__
mov ecx, dword [ebp - 4]
add esp, 8
xor ecx, ebp
xor eax, eax
pop esi
pop ebx
call fcn.0041b486
mov esp, ebp
pop ebp
ret