Function at 0x411d0e
Capabilities:
Query or enumerate registry key
Query or enumerate registry value

Disassembly:
push 0x8c4
mov eax, 0x486cfd
call fcn.0045edb6
mov eax, edx
mov dword [ebp - 0x8c4], eax
mov dword [ebp - 0x8c0], ecx
mov edx, dword [ebp + 8]
mov ecx, eax
mov dword [ebp - 0x8c8], edx
call fcn.0041d920
mov ecx, edx
call fcn.0041d920
mov esi, reloc.OLEAUT32.dll_SysReAllocString
lea ecx, [ebp - 0x834]
push str.SYSTEMCurrentControlSetControlClass4D36E972_E325_11CE_BFC1_08002bE10318
mov dword [ebp - 0x8b4], esi
call fcn.0041ba7d
xor ebx, ebx
lea ecx, [ebp - 0x818]
mov dword [ebp - 4], ebx
call fcn.0041b469
lea ecx, [ebp - 0x8a4]
mov dword [ebp - 0x8b8], 0x100
call fcn.0041b469
mov byte [ebp - 4], 2
lea ecx, [ebp - 0x8b4]
cmp dword [ebp - 0x81c], 8
lea eax, [ebp - 0x830]
push ecx
cmovae eax, dword [ebp - 0x830]
push 0x20019
push ebx
push eax
push esi
mov dword [ebp - 0x8a8], 0x3e8
call dword [sym.imp.ADVAPI32.dll_RegOpenKeyExW]
test eax, eax
jne 0x41209a
mov edi, dword [sym.imp.ADVAPI32.dll_RegCloseKey]
mov esi, ebx
lea eax, [ebp - 0x8d0]
mov dword [ebp - 0x8b8], 0x100
push eax
push ebx
push ebx
push ebx
lea eax, [ebp - 0x8b8]
push eax
lea eax, [ebp - 0x7e0]
push eax
push esi
push dword [ebp - 0x8b4]
call dword [sym.imp.ADVAPI32.dll_RegEnumKeyExW]
mov dword [ebp - 0x8bc], eax
test eax, eax
jne 0x411f75
lea eax, [ebp - 0x7e0]
push eax
lea ecx, [ebp - 0x7fc]
call fcn.0041ba7d
push 0x49dc6c
lea ecx, [ebp - 0x850]
mov byte [ebp - 4], 3
call fcn.0041b9a3
lea eax, [ebp - 0x850]
mov byte [ebp - 4], 4
push eax
lea edx, [ebp - 0x834]
lea ecx, [ebp - 0x888]
call fcn.0041e1f8
lea ecx, [ebp - 0x7fc]
mov byte [ebp - 4], 5
push ecx
mov edx, eax
lea ecx, [ebp - 0x86c]
call fcn.0041e1f8
pop ecx
pop ecx
add eax, 4
mov byte [ebp - 4], 6
push eax
lea ecx, [ebp - 0x814]
call fcn.0041e62b
lea ecx, [ebp - 0x86c]
call fcn.0041bf1b
lea ecx, [ebp - 0x888]
call fcn.0041bf1b
lea ecx, [ebp - 0x850]
call fcn.0041bf1b
lea ecx, [ebp - 0x7fc]
mov byte [ebp - 4], 2
call fcn.0041bf1b
cmp dword [ebp - 0x800], 8
lea ecx, [ebp - 0x8ac]
push ecx
push 0x20019
lea eax, [ebp - 0x814]
mov edx, reloc.OLEAUT32.dll_SysReAllocString
cmovae eax, dword [ebp - 0x814]
push ebx
push eax
push edx
mov dword [ebp - 0x8ac], edx
call dword [sym.imp.ADVAPI32.dll_RegOpenKeyExW]
test eax, eax
jne 0x411f6f
mov eax, 0x3e8
mov dword [ebp - 0x8b0], 1
push eax
mov dword [ebp - 0x8a8], eax
lea eax, [ebp - 0x3f8]
push ebx
push eax
call fcn.004606c0
add esp, 0xc
lea eax, [ebp - 0x8a8]
push eax
lea eax, [ebp - 0x3f8]
push eax
lea eax, [ebp - 0x8b0]
push eax
push ebx
push str.NetCfgInstanceId
push dword [ebp - 0x8ac]
call dword [sym.imp.ADVAPI32.dll_RegQueryValueExW]
lea eax, [ebp - 0x3f8]
push eax
lea ecx, [ebp - 0x7fc]
call fcn.0041ba7d
mov edx, dword [ebp - 0x8c0]
lea ecx, [ebp - 0x7f8]
lea edx, [edx + 4]
call fcn.0041ed00
lea ecx, [ebp - 0x7fc]
mov bl, al
call fcn.0041bf1b
test bl, bl
jne 0x411f83
push dword [ebp - 0x8ac]
call edi
xor ebx, ebx
mov eax, dword [ebp - 0x8bc]
inc esi
test eax, eax
je 0x411dc9
jmp 0x412092
mov eax, 0x3e8
xor esi, esi
push eax
mov dword [ebp - 0x8a8], eax
xor ebx, ebx
lea eax, [ebp - 0x3f8]
inc ebx
push esi
push eax
mov dword [ebp - 0x8b0], ebx
call fcn.004606c0
add esp, 0xc
lea eax, [ebp - 0x8a8]
push eax
lea eax, [ebp - 0x3f8]
push eax
lea eax, [ebp - 0x8b0]
push eax
push esi
push str.DriverDesc
push dword [ebp - 0x8ac]
call dword [sym.imp.ADVAPI32.dll_RegQueryValueExW]
lea eax, [ebp - 0x3f8]
push eax
lea ecx, [ebp - 0x7fc]
call fcn.0041ba7d
mov ecx, dword [ebp - 0x8c4]
lea eax, [ebp - 0x7f8]
push eax
add ecx, 4
mov byte [ebp - 4], 7
call fcn.0041e62b
lea ecx, [ebp - 0x7fc]
mov byte [ebp - 4], 2
call fcn.0041bf1b
mov eax, 0x3e8
mov dword [ebp - 0x8b0], ebx
push eax
mov dword [ebp - 0x8a8], eax
lea eax, [ebp - 0x3f8]
push esi
push eax
call fcn.004606c0
add esp, 0xc
lea eax, [ebp - 0x8a8]
push eax
lea eax, [ebp - 0x3f8]
push eax
lea eax, [ebp - 0x8b0]
push eax
push esi
push 0x49dc70
push dword [ebp - 0x8ac]
call dword [sym.imp.ADVAPI32.dll_RegQueryValueExW]
lea eax, [ebp - 0x3f8]
push eax
lea ecx, [ebp - 0x7fc]
call fcn.0041ba7d
mov ecx, dword [ebp - 0x8c8]
lea eax, [ebp - 0x7f8]
push eax
add ecx, 4
mov byte [ebp - 4], 8
call fcn.0041e62b
lea ecx, [ebp - 0x7fc]
call fcn.0041bf1b
push dword [ebp - 0x8ac]
call edi
push dword [ebp - 0x8b4]
call edi
lea ecx, [ebp - 0x8a4]
call fcn.0041bf1b
lea ecx, [ebp - 0x818]
call fcn.0041bf1b
lea ecx, [ebp - 0x834]
call fcn.0041bf1b
mov al, bl
call fcn.0045ed60
ret