Function at 0x411933
Capabilities:
Query or enumerate registry key
Query or enumerate registry value

Disassembly:
push 0x8c4
mov eax, 0x486522
call fcn.0045e574
mov eax, edx
mov dword [ebp - 0x8c4], eax
mov dword [ebp - 0x8c0], ecx
mov edx, dword [ebp + 8]
mov ecx, eax
mov dword [ebp - 0x8c8], edx
call fcn.0041d511
mov ecx, edx
call fcn.0041d511
mov esi, reloc.OLEAUT32.dll_SysReAllocString
lea ecx, [ebp - 0x834]
push str.SYSTEMCurrentControlSetControlClass4D36E972_E325_11CE_BFC1_08002bE10318
mov dword [ebp - 0x8b4], esi
call fcn.0041b69b
xor ebx, ebx
lea ecx, [ebp - 0x818]
mov dword [ebp - 4], ebx
call fcn.0041b087
lea ecx, [ebp - 0x8a4]
mov dword [ebp - 0x8b8], 0x100
call fcn.0041b087
mov byte [ebp - 4], 2
lea ecx, [ebp - 0x8b4]
cmp dword [ebp - 0x81c], 8
lea eax, [ebp - 0x830]
push ecx
cmovae eax, dword [ebp - 0x830]
push 0x20019
push ebx
push eax
push esi
mov dword [ebp - 0x8a8], 0x3e8
call dword [sym.imp.ADVAPI32.dll_RegOpenKeyExW]
test eax, eax
jne 0x411cbf
mov edi, dword [sym.imp.ADVAPI32.dll_RegCloseKey]
mov esi, ebx
lea eax, [ebp - 0x8d0]
mov dword [ebp - 0x8b8], 0x100
push eax
push ebx
push ebx
push ebx
lea eax, [ebp - 0x8b8]
push eax
lea eax, [ebp - 0x7e0]
push eax
push esi
push dword [ebp - 0x8b4]
call dword [sym.imp.ADVAPI32.dll_RegEnumKeyExW]
mov dword [ebp - 0x8bc], eax
test eax, eax
jne 0x411b9a
lea eax, [ebp - 0x7e0]
push eax
lea ecx, [ebp - 0x7fc]
call fcn.0041b69b
push 0x49cc14
lea ecx, [ebp - 0x850]
mov byte [ebp - 4], 3
call fcn.0041b5c1
lea eax, [ebp - 0x850]
mov byte [ebp - 4], 4
push eax
lea edx, [ebp - 0x834]
lea ecx, [ebp - 0x888]
call fcn.0041dde9
lea ecx, [ebp - 0x7fc]
mov byte [ebp - 4], 5
push ecx
mov edx, eax
lea ecx, [ebp - 0x86c]
call fcn.0041dde9
pop ecx
pop ecx
add eax, 4
mov byte [ebp - 4], 6
push eax
lea ecx, [ebp - 0x814]
call fcn.0041e21c
lea ecx, [ebp - 0x86c]
call fcn.0041bb22
lea ecx, [ebp - 0x888]
call fcn.0041bb22
lea ecx, [ebp - 0x850]
call fcn.0041bb22
lea ecx, [ebp - 0x7fc]
mov byte [ebp - 4], 2
call fcn.0041bb22
cmp dword [ebp - 0x800], 8
lea ecx, [ebp - 0x8ac]
push ecx
push 0x20019
lea eax, [ebp - 0x814]
mov edx, reloc.OLEAUT32.dll_SysReAllocString
cmovae eax, dword [ebp - 0x814]
push ebx
push eax
push edx
mov dword [ebp - 0x8ac], edx
call dword [sym.imp.ADVAPI32.dll_RegOpenKeyExW]
test eax, eax
jne 0x411b94
mov eax, 0x3e8
mov dword [ebp - 0x8b0], 1
push eax
mov dword [ebp - 0x8a8], eax
lea eax, [ebp - 0x3f8]
push ebx
push eax
call fcn.0045fe80
add esp, 0xc
lea eax, [ebp - 0x8a8]
push eax
lea eax, [ebp - 0x3f8]
push eax
lea eax, [ebp - 0x8b0]
push eax
push ebx
push str.NetCfgInstanceId
push dword [ebp - 0x8ac]
call dword [sym.imp.ADVAPI32.dll_RegQueryValueExW]
lea eax, [ebp - 0x3f8]
push eax
lea ecx, [ebp - 0x7fc]
call fcn.0041b69b
mov edx, dword [ebp - 0x8c0]
lea ecx, [ebp - 0x7f8]
lea edx, [edx + 4]
call fcn.0041e8f1
lea ecx, [ebp - 0x7fc]
mov bl, al
call fcn.0041bb22
test bl, bl
jne 0x411ba8
push dword [ebp - 0x8ac]
call edi
xor ebx, ebx
mov eax, dword [ebp - 0x8bc]
inc esi
test eax, eax
je 0x4119ee
jmp 0x411cb7
mov eax, 0x3e8
xor esi, esi
push eax
mov dword [ebp - 0x8a8], eax
xor ebx, ebx
lea eax, [ebp - 0x3f8]
inc ebx
push esi
push eax
mov dword [ebp - 0x8b0], ebx
call fcn.0045fe80
add esp, 0xc
lea eax, [ebp - 0x8a8]
push eax
lea eax, [ebp - 0x3f8]
push eax
lea eax, [ebp - 0x8b0]
push eax
push esi
push str.DriverDesc
push dword [ebp - 0x8ac]
call dword [sym.imp.ADVAPI32.dll_RegQueryValueExW]
lea eax, [ebp - 0x3f8]
push eax
lea ecx, [ebp - 0x7fc]
call fcn.0041b69b
mov ecx, dword [ebp - 0x8c4]
lea eax, [ebp - 0x7f8]
push eax
add ecx, 4
mov byte [ebp - 4], 7
call fcn.0041e21c
lea ecx, [ebp - 0x7fc]
mov byte [ebp - 4], 2
call fcn.0041bb22
mov eax, 0x3e8
mov dword [ebp - 0x8b0], ebx
push eax
mov dword [ebp - 0x8a8], eax
lea eax, [ebp - 0x3f8]
push esi
push eax
call fcn.0045fe80
add esp, 0xc
lea eax, [ebp - 0x8a8]
push eax
lea eax, [ebp - 0x3f8]
push eax
lea eax, [ebp - 0x8b0]
push eax
push esi
push 0x49cc18
push dword [ebp - 0x8ac]
call dword [sym.imp.ADVAPI32.dll_RegQueryValueExW]
lea eax, [ebp - 0x3f8]
push eax
lea ecx, [ebp - 0x7fc]
call fcn.0041b69b
mov ecx, dword [ebp - 0x8c8]
lea eax, [ebp - 0x7f8]
push eax
add ecx, 4
mov byte [ebp - 4], 8
call fcn.0041e21c
lea ecx, [ebp - 0x7fc]
call fcn.0041bb22
push dword [ebp - 0x8ac]
call edi
push dword [ebp - 0x8b4]
call edi
lea ecx, [ebp - 0x8a4]
call fcn.0041bb22
lea ecx, [ebp - 0x818]
call fcn.0041bb22
lea ecx, [ebp - 0x834]
call fcn.0041bb22
mov al, bl
call fcn.0045e51e
ret