Function at 0x4329a0
Capabilities:
Query or enumerate registry value

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x224
push ebx
push esi
push edi
mov esi, ecx
xor eax, eax
mov ecx, 0x43
lea edi, [ebp - 0x224]
rep stosd dword es:[edi], eax
xor ebx, ebx
mov ecx, 0x41
lea edi, [ebp - 0x118]
rep stosd dword es:[edi], eax
lea eax, [ebp - 0x118]
push ebx
push eax
mov dword [ebp - 0xc], esi
mov dword [ebp - 4], ebx
mov dword [ebp - 0x14], ebx
mov dword [ebp - 8], 3
mov dword [ebp - 0x10], 0x10c
call fcn.00416990
lea ecx, [ebp - 0x118]
push ecx
push str.CAutoDisplayProfile::ValidateAdapterIdentifier_._SubKey__s_n
call fcn.0040acd0
add esp, 0x10
lea edx, [ebp - 4]
push edx
push 0x2001f
push ebx
mov ebx, dword [ebp + 8]
lea eax, [ebp - 0x118]
push eax
push ebx
call dword [sym.imp.ADVAPI32.dll_RegOpenKeyExA]
test eax, eax
je 0x432a69
lea ecx, [ebp - 0x14]
push ecx
lea edx, [ebp - 4]
push edx
push 0
push 0x2001f
push 0
push 0
push 0
lea eax, [ebp - 0x118]
push eax
push ebx
call dword [sym.imp.ADVAPI32.dll_RegCreateKeyExA]
test eax, eax
je 0x432a69
lea ecx, [ebp - 0x118]
push ecx
push str.ValidateAdapterIdentifier._Failed_to_open_registry_key__s.
call fcn.0040acd0
add esp, 8
pop edi
pop esi
xor eax, eax
pop ebx
mov esp, ebp
pop ebp
ret 4
lea edx, [ebp - 0x10]
push edx
mov edx, dword [ebp - 4]
lea eax, [ebp - 0x224]
push eax
lea ecx, [ebp - 8]
push ecx
push 0
push str.AdapterInfo
push edx
mov byte [ebp + 0xb], 0
call dword [sym.imp.ADVAPI32.dll_RegQueryValueExA]
test eax, eax
jne 0x432b33
mov edi, esi
mov ecx, 0x43
lea esi, [ebp - 0x224]
xor eax, eax
repe cmpsd dword [esi], dword es:[edi]
je 0x432b2d
mov eax, dword [0x49b618]
test eax, eax
jne 0x432b2d
push str.ValidateAdapterIdentifier._The_existing_profile_contains_different_adapter_information._Delete_all_profiles_n
call fcn.0040acd0
mov edx, dword [0x4878fc]
xor eax, eax
mov ecx, 0x41
lea edi, [ebp - 0x118]
rep stosd dword es:[edi], eax
mov ecx, dword [str.HKEY_CURRENT_USER_]
mov eax, dword [0x487900]
mov dword [ebp - 0x118], ecx
mov ecx, dword [0x487904]
mov dword [ebp - 0x10c], ecx
mov dword [ebp - 0x114], edx
mov dx, word [0x487908]
mov dword [ebp - 0x110], eax
mov al, byte [0x48790a]
lea ecx, [ebp - 0x118]
push 0
push ecx
mov word [ebp - 0x108], dx
mov byte [ebp - 0x106], al
call fcn.00416990
lea edx, [ebp - 0x118]
push edx
jmp 0x432ba9
mov byte [ebp + 0xb], 1
jmp 0x432bb1
push str.ValidateAdapterIdentifier._RegQueryValueEx_failed_n
call fcn.0040acd0
mov edx, dword [0x487900]
xor eax, eax
mov ecx, 0x41
lea edi, [ebp - 0x118]
rep stosd dword es:[edi], eax
mov eax, dword [str.HKEY_CURRENT_USER_]
mov ecx, dword [0x4878fc]
mov dword [ebp - 0x118], eax
mov eax, dword [0x487904]
mov dword [ebp - 0x10c], eax
mov dword [ebp - 0x114], ecx
mov cx, word [0x487908]
mov dword [ebp - 0x110], edx
mov dl, byte [0x48790a]
lea eax, [ebp - 0x118]
push 0
push eax
mov word [ebp - 0x108], cx
mov byte [ebp - 0x106], dl
call fcn.00416990
lea ecx, [ebp - 0x118]
push ecx
call fcn.00414080
add esp, 0x10
mov edx, dword [ebp - 4]
push edx
call dword [sym.imp.ADVAPI32.dll_RegCloseKey]
mov al, byte [ebp + 0xb]
test al, al
mov dword [ebp - 4], 0
jne 0x432bd8
mov ecx, dword [ebp - 0xc]
push ebx
call fcn.004328c0
test eax, eax
setne byte [ebp + 0xb]
movzx eax, byte [ebp + 0xb]
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 4