Function at 0x10013d6b
Capabilities:
Query or enumerate registry value

Disassembly:
push 0xa94
mov eax, 0x1004e0f4
call fcn.10035b95
mov eax, dword [ebp + 0x24]
mov dword [ebp - 0xa6c], eax
xor ebx, ebx
lea eax, [ebp - 0xa84]
mov dword [ebp - 4], ebx
push eax
mov dword [ebp - 0xa58], ebx
call fcn.100140c3
mov byte [ebp - 4], 1
cmp dword [ebp + 0x20], 8
mov eax, dword [ebp + 0xc]
jae 0x10013daa
lea eax, [ebp + 0xc]
lea ecx, [ebp - 0xa58]
push ecx
push 1
push ebx
push eax
push 0x80000002
call dword [sym.imp.ADVAPI32.dll_RegOpenKeyExW]
test eax, eax
jne 0x1001403d
push 0x206
mov word [ebp - 0x218], ax
lea eax, [ebp - 0x216]
push ebx
push eax
mov dword [ebp - 0xa68], ebx
call fcn.10035680
add esp, 0xc
xor eax, eax
push 0x7fe
mov word [ebp - 0xa18], ax
lea eax, [ebp - 0xa16]
push ebx
push eax
mov dword [ebp - 0xa5c], 0x104
mov dword [ebp - 0xa64], ebx
call fcn.10035680
add esp, 0xc
push 7
pop esi
push ebx
lea ecx, [ebp - 0xa50]
mov dword [ebp - 0xa60], 0x400
mov dword [ebp - 0xa38], esi
call fcn.10002cd5
push ebx
lea ecx, [ebp - 0xa34]
mov dword [ebp - 0xa1c], esi
call fcn.10002cd5
lea eax, [ebp - 0xa60]
push eax
lea eax, [ebp - 0xa18]
push eax
lea eax, [ebp - 0xa64]
push eax
push ebx
lea eax, [ebp - 0xa5c]
push eax
lea eax, [ebp - 0x218]
push eax
mov byte [ebp - 4], 3
mov esi, dword [sym.imp.ADVAPI32.dll_RegEnumValueW]
push ebx
jmp 0x10013f4d
inc dword [ebp - 0xa68]
cmp dword [ebp - 0xa64], 1
jne 0x10013ee5
cmp dword [ebp - 0xa5c], ebx
jbe 0x10013ee5
cmp dword [ebp - 0xa60], 3
jbe 0x10013ee5
lea eax, [ebp - 0x218]
push eax
push str.NetCfgInstanceId
call fcn.10032f4a
pop ecx
pop ecx
test eax, eax
jne 0x10013ebc
lea ecx, [ebp - 0xa34]
jmp 0x10013ed9
lea eax, [ebp - 0x218]
push eax
push str.DeviceInstanceID
call fcn.10032f4a
pop ecx
pop ecx
test eax, eax
jne 0x10013ee5
lea ecx, [ebp - 0xa50]
lea eax, [ebp - 0xa18]
push eax
call fcn.100028fc
push 0x208
lea eax, [ebp - 0x218]
push ebx
push eax
call fcn.10035680
add esp, 0xc
push 0x800
lea eax, [ebp - 0xa18]
push ebx
push eax
call fcn.10035680
add esp, 0xc
lea eax, [ebp - 0xa60]
push eax
lea eax, [ebp - 0xa18]
push eax
lea eax, [ebp - 0xa64]
push eax
push ebx
lea eax, [ebp - 0xa5c]
push eax
lea eax, [ebp - 0x218]
push eax
push dword [ebp - 0xa68]
mov dword [ebp - 0xa5c], 0x104
mov dword [ebp - 0xa60], 0x400
push dword [ebp - 0xa58]
call esi
test eax, eax
je 0x10013e7d
push dword [ebp - 0xa58]
call dword [sym.imp.ADVAPI32.dll_RegCloseKey]
push 3
push ebx
lea eax, [ebp - 0xaa0]
push eax
lea ecx, [ebp - 0xa50]
call fcn.100026b7
cmp dword [eax + 0x18], 8
jb 0x10013f89
mov eax, dword [eax + 4]
jmp 0x10013f8c
add eax, 4
push 0x10054e48
push eax
call fcn.10032f4a
pop ecx
neg eax
sbb al, al
pop ecx
xor esi, esi
push ebx
inc al
inc esi
push esi
lea ecx, [ebp - 0xaa0]
mov byte [ebp - 0xa51], al
call fcn.100029d6
cmp byte [ebp - 0xa51], bl
je 0x10014023
mov ecx, dword [ebp - 0xa6c]
push 0xffffffffffffffff
push ebx
lea eax, [ebp - 0xa34]
push eax
call fcn.10002869
push ebx
push esi
lea ecx, [ebp - 0xa34]
call fcn.100029d6
push ebx
push esi
lea ecx, [ebp - 0xa50]
call fcn.100029d6
mov byte [ebp - 0xa51], 1
lea esi, [ebp - 0xa84]
call fcn.1000e7e6
push dword [ebp - 0xa84]
call fcn.10032a5e
pop ecx
push ebx
push 1
lea ecx, [ebp + 8]
call fcn.100029d6
mov al, byte [ebp - 0xa51]
call fcn.10035c18
ret 0x20
push ebx
push esi
lea ecx, [ebp - 0xa34]
call fcn.100029d6
push ebx
push esi
lea ecx, [ebp - 0xa50]
call fcn.100029d6
mov byte [ebp - 0xa51], bl
jmp 0x10013ff3