Function at 0x4102ab
Capabilities:
Query or enumerate registry value

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x98
mov byte [ebp - 3], 0
push str.EnumSCSI_
lea eax, [ebp - 0x98]
push eax
call fcn.00419100
add esp, 8
mov dword [ebp - 8], 0
jmp 0x4102de
mov ecx, dword [ebp - 8]
add ecx, 1
mov dword [ebp - 8], ecx
cmp dword [ebp - 8], 8
jge 0x410384
mov edx, dword [ebp + 8]
add edx, dword [ebp - 8]
xor eax, eax
mov al, byte [edx + 0xb0]
cmp eax, 0x20
je 0x41030d
mov ecx, dword [ebp + 8]
add ecx, dword [ebp - 8]
xor edx, edx
mov dl, byte [ecx + 0xb0]
test edx, edx
jne 0x410323
push 0x4716e4
lea eax, [ebp - 0x98]
push eax
call fcn.00419110
add esp, 8
jmp 0x41037f
mov ecx, dword [ebp + 8]
add ecx, dword [ebp - 8]
movsx edx, byte [ecx + 0xb0]
cmp edx, 0x60
jl 0x41035d
mov eax, dword [ebp + 8]
add eax, dword [ebp - 8]
movsx ecx, byte [eax + 0xb0]
cmp ecx, 0x7a
jg 0x41035d
mov edx, dword [ebp + 8]
add edx, dword [ebp - 8]
xor eax, eax
mov al, byte [edx + 0xb0]
sub eax, 0x20
mov byte [ebp - 4], al
jmp 0x41036c
mov ecx, dword [ebp + 8]
add ecx, dword [ebp - 8]
mov dl, byte [ecx + 0xb0]
mov byte [ebp - 4], dl
lea eax, [ebp - 4]
push eax
lea ecx, [ebp - 0x98]
push ecx
call fcn.00419110
add esp, 8
jmp 0x4102d5
mov dword [ebp - 8], 0
jmp 0x410396
mov edx, dword [ebp - 8]
add edx, 1
mov dword [ebp - 8], edx
cmp dword [ebp - 8], 0x10
jge 0x41043c
mov eax, dword [ebp + 8]
add eax, dword [ebp - 8]
xor ecx, ecx
mov cl, byte [eax + 0x9c]
cmp ecx, 0x20
je 0x4103c5
mov edx, dword [ebp + 8]
add edx, dword [ebp - 8]
xor eax, eax
mov al, byte [edx + 0x9c]
test eax, eax
jne 0x4103db
push 0x4716e8
lea ecx, [ebp - 0x98]
push ecx
call fcn.00419110
add esp, 8
jmp 0x410437
mov edx, dword [ebp + 8]
add edx, dword [ebp - 8]
movsx eax, byte [edx + 0x9c]
cmp eax, 0x60
jl 0x410415
mov ecx, dword [ebp + 8]
add ecx, dword [ebp - 8]
movsx edx, byte [ecx + 0x9c]
cmp edx, 0x7a
jg 0x410415
mov eax, dword [ebp + 8]
add eax, dword [ebp - 8]
xor ecx, ecx
mov cl, byte [eax + 0x9c]
sub ecx, 0x20
mov byte [ebp - 4], cl
jmp 0x410424
mov edx, dword [ebp + 8]
add edx, dword [ebp - 8]
mov al, byte [edx + 0x9c]
mov byte [ebp - 4], al
lea ecx, [ebp - 4]
push ecx
lea edx, [ebp - 0x98]
push edx
call fcn.00419110
add esp, 8
jmp 0x41038d
mov eax, dword [ebp + 8]
movsx ecx, byte [eax + 0xb8]
cmp ecx, 0x60
jl 0x41046d
mov edx, dword [ebp + 8]
movsx eax, byte [edx + 0xb8]
cmp eax, 0x7a
jg 0x41046d
mov ecx, dword [ebp + 8]
xor edx, edx
mov dl, byte [ecx + 0xb8]
sub edx, 0x20
mov byte [ebp - 4], dl
jmp 0x410479
mov eax, dword [ebp + 8]
mov cl, byte [eax + 0xb8]
mov byte [ebp - 4], cl
lea edx, [ebp - 4]
push edx
lea eax, [ebp - 0x98]
push eax
call fcn.00419110
add esp, 8
mov ecx, dword [ebp + 0x10]
and ecx, 0xff
test ecx, ecx
je 0x4104af
push str.USBSTORSFLOPPYVEN_
lea edx, [ebp - 0x98]
push edx
call fcn.00419110
add esp, 8
jmp 0x4104c3
push str.USBSTORDISKVEN_
lea eax, [ebp - 0x98]
push eax
call fcn.00419110
add esp, 8
mov dword [ebp - 0x14], 0
mov dword [ebp - 8], 0
jmp 0x4104dc
mov ecx, dword [ebp - 8]
add ecx, 1
mov dword [ebp - 8], ecx
cmp dword [ebp - 8], 8
jge 0x4105a2
mov edx, dword [ebp + 8]
add edx, dword [ebp - 8]
xor eax, eax
mov al, byte [edx + 0xb0]
cmp eax, 0x20
je 0x41058e
mov ecx, dword [ebp + 8]
add ecx, dword [ebp - 8]
xor edx, edx
mov dl, byte [ecx + 0xb0]
test edx, edx
je 0x41058e
cmp dword [ebp - 0x14], 0
je 0x410530
mov dword [ebp - 0x14], 0
push 0x471718
lea eax, [ebp - 0x98]
push eax
call fcn.00419110
add esp, 8
mov ecx, dword [ebp + 8]
add ecx, dword [ebp - 8]
movsx edx, byte [ecx + 0xb0]
cmp edx, 0x60
jl 0x41056a
mov eax, dword [ebp + 8]
add eax, dword [ebp - 8]
movsx ecx, byte [eax + 0xb0]
cmp ecx, 0x7a
jg 0x41056a
mov edx, dword [ebp + 8]
add edx, dword [ebp - 8]
xor eax, eax
mov al, byte [edx + 0xb0]
sub eax, 0x20
mov byte [ebp - 4], al
jmp 0x410579
mov ecx, dword [ebp + 8]
add ecx, dword [ebp - 8]
mov dl, byte [ecx + 0xb0]
mov byte [ebp - 4], dl
lea eax, [ebp - 4]
push eax
lea ecx, [ebp - 0x98]
push ecx
call fcn.00419110
add esp, 8
jmp 0x41059d
cmp dword [ebp - 0x14], 0
je 0x410596
jmp 0x4105a2
mov dword [ebp - 0x14], 1
jmp 0x4104d3
push str.PROD_
lea edx, [ebp - 0x98]
push edx
call fcn.00419110
add esp, 8
mov dword [ebp - 0x14], 0
mov dword [ebp - 8], 0
jmp 0x4105cf
mov eax, dword [ebp - 8]
add eax, 1
mov dword [ebp - 8], eax
cmp dword [ebp - 8], 0x10
jge 0x410695
mov ecx, dword [ebp + 8]
add ecx, dword [ebp - 8]
xor edx, edx
mov dl, byte [ecx + 0x9c]
cmp edx, 0x20
je 0x410681
mov eax, dword [ebp + 8]
add eax, dword [ebp - 8]
xor ecx, ecx
mov cl, byte [eax + 0x9c]
test ecx, ecx
je 0x410681
cmp dword [ebp - 0x14], 0
je 0x410623
mov dword [ebp - 0x14], 0
push 0x471724
lea edx, [ebp - 0x98]
push edx
call fcn.00419110
add esp, 8
mov eax, dword [ebp + 8]
add eax, dword [ebp - 8]
movsx ecx, byte [eax + 0x9c]
cmp ecx, 0x60
jl 0x41065d
mov edx, dword [ebp + 8]
add edx, dword [ebp - 8]
movsx eax, byte [edx + 0x9c]
cmp eax, 0x7a
jg 0x41065d
mov ecx, dword [ebp + 8]
add ecx, dword [ebp - 8]
xor edx, edx
mov dl, byte [ecx + 0x9c]
sub edx, 0x20
mov byte [ebp - 4], dl
jmp 0x41066c
mov eax, dword [ebp + 8]
add eax, dword [ebp - 8]
mov cl, byte [eax + 0x9c]
mov byte [ebp - 4], cl
lea edx, [ebp - 4]
push edx
lea eax, [ebp - 0x98]
push eax
call fcn.00419110
add esp, 8
jmp 0x410690
cmp dword [ebp - 0x14], 0
je 0x410689
jmp 0x410695
mov dword [ebp - 0x14], 1
jmp 0x4105c6
push str.REV_
lea ecx, [ebp - 0x98]
push ecx
call fcn.00419110
add esp, 8
mov dword [ebp - 8], 0
jmp 0x4106bb
mov edx, dword [ebp - 8]
add edx, 1
mov dword [ebp - 8], edx
cmp dword [ebp - 8], 4
jge 0x41074b
mov eax, dword [ebp + 8]
add eax, dword [ebp - 8]
xor ecx, ecx
mov cl, byte [eax + 0xb8]
cmp ecx, 0x20
je 0x410746
mov edx, dword [ebp + 8]
add edx, dword [ebp - 8]
xor eax, eax
mov al, byte [edx + 0xb8]
test eax, eax
je 0x410746
mov ecx, dword [ebp + 8]
add ecx, dword [ebp - 8]
movsx edx, byte [ecx + 0xb8]
cmp edx, 0x60
jl 0x410724
mov eax, dword [ebp + 8]
add eax, dword [ebp - 8]
movsx ecx, byte [eax + 0xb8]
cmp ecx, 0x7a
jg 0x410724
mov edx, dword [ebp + 8]
add edx, dword [ebp - 8]
xor eax, eax
mov al, byte [edx + 0xb8]
sub eax, 0x20
mov byte [ebp - 4], al
jmp 0x410733
mov ecx, dword [ebp + 8]
add ecx, dword [ebp - 8]
mov dl, byte [ecx + 0xb8]
mov byte [ebp - 4], dl
lea eax, [ebp - 4]
push eax
lea ecx, [ebp - 0x98]
push ecx
call fcn.00419110
add esp, 8
jmp 0x4106b2
push 0x471730
lea edx, [ebp - 0x98]
push edx
call fcn.00419110
add esp, 8
mov dword [ebp - 8], 2
jmp 0x410771
mov eax, dword [ebp - 8]
add eax, 1
mov dword [ebp - 8], eax
cmp dword [ebp - 8], 0x1a
jge 0x4107d2
mov ecx, dword [ebp + 8]
add ecx, dword [ebp - 8]
movsx edx, byte [ecx + 0x60]
cmp edx, 0x60
jl 0x4107a8
mov eax, dword [ebp + 8]
add eax, dword [ebp - 8]
movsx ecx, byte [eax + 0x60]
cmp ecx, 0x7a
jg 0x4107a8
mov edx, dword [ebp + 8]
add edx, dword [ebp - 8]
xor eax, eax
mov al, byte [edx + 0x60]
sub eax, 0x20
mov byte [ebp - 4], al
jmp 0x4107b4
mov ecx, dword [ebp + 8]
add ecx, dword [ebp - 8]
mov dl, byte [ecx + 0x60]
mov byte [ebp - 4], dl
lea eax, [ebp - 4]
push eax
lea ecx, [ebp - 0x98]
push ecx
call fcn.00419110
add esp, 8
mov edx, dword [ebp - 8]
add edx, 1
mov dword [ebp - 8], edx
jmp 0x410768
mov eax, dword [ebp + 0xc]
and eax, 0xff
test eax, eax
je 0x4107f4
push str.100
lea ecx, [ebp - 0x98]
push ecx
call fcn.00419110
add esp, 8
jmp 0x410808
push str.000
lea edx, [ebp - 0x98]
push edx
call fcn.00419110
add esp, 8
lea eax, [ebp - 0x18]
push eax
push 0xf003f
push 0
lea ecx, [ebp - 0x98]
push ecx
push 0x80000002
call dword [sym.imp.ADVAPI32.dll_RegOpenKeyExA]
mov dword [ebp - 0x10], eax
mov dword [ebp - 0xc], 5
lea edx, [ebp - 0xc]
push edx
lea eax, [ebp - 0x20]
push eax
push 0
push 0
push str.CurrentDriveLetterAssignment
mov ecx, dword [ebp - 0x18]
push ecx
call dword [sym.imp.ADVAPI32.dll_RegQueryValueExA]
mov edx, dword [ebp - 0x18]
push edx
call dword [sym.imp.ADVAPI32.dll_RegCloseKey]
mov al, byte [ebp - 0x20]
mov esp, ebp
pop ebp
ret