Function at 0x4047c8
Capabilities:
Query or enumerate registry value

Disassembly:
push ebp
mov ebp, esp
mov eax, 0x841c
call fcn.0040ba90
mov dword [ebp - 0xc], edi
mov dword [ebp - 8], esi
mov dword [ebp - 4], ebx
mov esi, 0x41ba40
mov ecx, 0x1000
lea edi, [ebp - 0x841c]
mov eax, ecx
shr ecx, 2
rep movsd dword es:[edi], dword [esi]
mov ecx, eax
and ecx, 3
rep movsb byte es:[edi], byte [esi]
lea edi, [ebp - 0x731c]
mov esi, 0x41cb40
mov ecx, 0x1000
mov eax, ecx
shr ecx, 2
rep movsd dword es:[edi], dword [esi]
mov ecx, eax
and ecx, 3
rep movsb byte es:[edi], byte [esi]
lea edi, [ebp - 0x621c]
mov esi, 0x41dc40
mov ecx, 0x1000
mov eax, ecx
shr ecx, 2
rep movsd dword es:[edi], dword [esi]
mov ecx, eax
and ecx, 3
rep movsb byte es:[edi], byte [esi]
lea edi, [ebp - 0x511c]
mov esi, 0x41ed40
mov ecx, 0x1000
mov eax, ecx
shr ecx, 2
rep movsd dword es:[edi], dword [esi]
mov ecx, eax
and ecx, 3
rep movsb byte es:[edi], byte [esi]
lea edi, [ebp - 0x401c]
mov esi, 0x41fe40
mov ecx, 0x1000
mov eax, ecx
shr ecx, 2
rep movsd dword es:[edi], dword [esi]
mov ecx, eax
and ecx, 3
rep movsb byte es:[edi], byte [esi]
lea edi, [ebp - 0x2f1c]
mov esi, 0x420f40
mov ecx, 0x1000
mov eax, ecx
shr ecx, 2
rep movsd dword es:[edi], dword [esi]
mov ecx, eax
and ecx, 3
rep movsb byte es:[edi], byte [esi]
lea edi, [ebp - 0x1e1c]
mov esi, 0x422040
mov ecx, 0x1000
mov eax, ecx
shr ecx, 2
rep movsd dword es:[edi], dword [esi]
mov ecx, eax
and ecx, 3
rep movsb byte es:[edi], byte [esi]
lea edi, [ebp - 0xd1c]
mov esi, 0x423140
mov ecx, 0x100
mov eax, ecx
shr ecx, 2
rep movsd dword es:[edi], dword [esi]
mov ecx, eax
and ecx, 3
rep movsb byte es:[edi], byte [esi]
mov dword [ebp - 0xc1c], 0x80
lea edi, [ebp - 0xc18]
mov esi, 0x423240
mov ecx, 0xc00
mov eax, ecx
shr ecx, 2
rep movsd dword es:[edi], dword [esi]
mov ecx, eax
and ecx, 3
rep movsb byte es:[edi], byte [esi]
push dword [ebp + 8]
mov dword [ebp - 0x18], 0xc00
push str.SOFTWAREMicrosoftWindows_NTCurrentVersionNetworkCards
push str._s_s
push 0x4500e0
xor eax, eax
xor ebx, ebx
mov dword [ebp - 0x14], eax
mov dword [ebp - 0x10], eax
mov word [0x4500e0], ax
xor edi, edi
xor esi, esi
call dword [sym.imp.MSVCR71.dll_swprintf]
add esp, 0x10
lea eax, [ebp - 0x10]
push eax
push 0x20019
push 0
push 0x4500e0
push 0x80000002
call dword [sym.imp.ADVAPI32.dll_RegOpenKeyExW]
test eax, eax
jne 0x404da3
lea ecx, [ebp - 0x14]
lea edx, [ebp - 0xc18]
lea eax, [ebp - 0x18]
push eax
push edx
push ecx
push 0
lea eax, [ebp - 0xc1c]
push eax
lea eax, [ebp - 0xd1c]
push eax
push ebx
push dword [ebp - 0x10]
call dword [sym.imp.ADVAPI32.dll_RegEnumValueW]
test eax, eax
jne 0x40499e
mov eax, dword [ebp - 0x18]
cmp eax, 2
ja 0x404db0
mov dword [ebp - 0xc1c], 0x80
add ebx, 1
mov dword [ebp - 0x18], 0xc00
jmp 0x40494f
push dword [ebp - 0x10]
call dword [sym.imp.ADVAPI32.dll_RegCloseKey]
test edi, edi
je 0x404da3
test esi, esi
jne 0x404da3
lea edx, [ebp - 0x621c]
lea eax, [ebp - 0x841c]
push eax
push edx
call fcn.00405600
mov ebx, eax
lea edx, [ebp - 0x2f1c]
push 0x800
push dword [ebx]
push edx
call dword [sym.imp.MSVCR71.dll_wcsncpy]
lea ecx, [ebp - 0x621c]
push ecx
xor edx, edx
mov word [ebp - 0x1f1e], dx
call fcn.00404ecc
lea edx, [ebp - 0x511c]
push 0x800
push eax
push edx
call dword [sym.imp.MSVCR71.dll_wcsncpy]
add esp, 0x24
xor edx, edx
mov word [ebp - 0x411e], dx
lea edx, [ebp - 0x511c]
push edx
call dword [sym.imp.MSVCR71.dll_wcslen]
pop ecx
test eax, eax
je 0x404a58
push 0x4440dc
lea edx, [ebp - 0x511c]
push edx
call dword [sym.imp.MSVCR71.dll_wcscmp]
add esp, 8
test eax, eax
je 0x404a58
push str.0.0.0.0
lea edx, [ebp - 0x511c]
push edx
call dword [sym.imp.MSVCR71.dll_wcscmp]
add esp, 8
test eax, eax
jne 0x404a79
lea edx, [ebp - 0x511c]
push 0x800
push dword [ebx + 4]
push edx
call dword [sym.imp.MSVCR71.dll_wcsncpy]
add esp, 0xc
xor edx, edx
mov word [ebp - 0x411e], dx
lea edx, [ebp - 0x621c]
push edx
call fcn.00404f88
lea edx, [ebp - 0x401c]
push 0x800
push eax
push edx
call dword [sym.imp.MSVCR71.dll_wcsncpy]
add esp, 0x10
xor edx, edx
mov word [ebp - 0x301e], dx
lea edx, [ebp - 0x401c]
push edx
call dword [sym.imp.MSVCR71.dll_wcslen]
pop ecx
test eax, eax
je 0x404ae8
push 0x4440dc
lea edx, [ebp - 0x401c]
push edx
call dword [sym.imp.MSVCR71.dll_wcscmp]
add esp, 8
test eax, eax
je 0x404ae8
push str.0.0.0.0
lea edx, [ebp - 0x401c]
push edx
call dword [sym.imp.MSVCR71.dll_wcscmp]
add esp, 8
test eax, eax
jne 0x404b09
lea edx, [ebp - 0x401c]
push 0x800
push dword [ebx + 8]
push edx
call dword [sym.imp.MSVCR71.dll_wcsncpy]
add esp, 0xc
xor eax, eax
mov word [ebp - 0x301e], ax
lea eax, [ebp - 0x731c]
push eax
call dword [sym.imp.MSVCR71.dll_wcslen]
pop ecx
test eax, eax
je 0x404b34
push 0x4440dc
lea eax, [ebp - 0x731c]
push eax
call dword [sym.imp.MSVCR71.dll_wcscmp]
add esp, 8
test eax, eax
jne 0x404b4b
lea edx, [ebp - 0x731c]
lea eax, [ebp - 0x841c]
push eax
push edx
call dword [sym.imp.MSVCR71.dll_wcscpy]
add esp, 8
mov eax, dword [0x44e880]
test eax, eax
jne 0x404baa
lea eax, [ebp - 0x511c]
push eax
call dword [sym.imp.MSVCR71.dll_wcslen]
pop ecx
test eax, eax
je 0x404baa
push 0x4440dc
lea eax, [ebp - 0x511c]
push eax
call dword [sym.imp.MSVCR71.dll_wcscmp]
add esp, 8
test eax, eax
je 0x404baa
lea eax, [ebp - 0x511c]
push eax
call fcn.00405898
lea edx, [ebp - 0x1e1c]
push 0x800
push eax
push edx
call dword [sym.imp.MSVCR71.dll_wcsncpy]
add esp, 0x10
xor eax, eax
mov word [ebp - 0xe1e], ax
mov eax, dword [0x44c3a8]
test eax, eax
je 0x404bbe
push str.Network_Interface_Card
call fcn.00402db0
pop ecx
mov eax, dword [0x44e880]
test eax, eax
je 0x404bce
mov eax, 0x4434c0
jmp 0x404bd3
mov eax, str.SUBCOMPONENT
push eax
call fcn.00402e10
pop ecx
mov eax, dword [0x44e880]
test eax, eax
jne 0x404bfd
je 0x404bec
mov eax, str.ROWSET_TABLE_MGMT_ECM_HW_NIC__CONFIG_TRUE_
jmp 0x404bf1
mov eax, str.NETWORK_INTERFACE_CARD
push eax
call fcn.00402e10
pop ecx
mov eax, dword [0x44e880]
test eax, eax
je 0x404c08
mov eax, 0x444940
jmp 0x404c0d
mov eax, 0x4434c0
push eax
call fcn.00402e10
lea eax, [ebp - 0x621c]
push 0x80
push eax
push str.NAME
call fcn.00402e68
push 0x400
push 0
push str.FLAGS
call fcn.00402e68
lea eax, [ebp - 0x621c]
push eax
call fcn.00405180
push eax
push str.MAX_TRANSFER_UNIT
call fcn.00403054
lea eax, [ebp - 0x511c]
push 0x14
push eax
push str.INET_ADDRESS
call fcn.00402e68
lea eax, [ebp - 0x401c]
push 0x14
push eax
push str.MASK
call fcn.00402e68
push 0x14
push 0
push str.BROADCAST_ADDRESS
call fcn.00402e68
lea eax, [ebp - 0x2f1c]
push 0x14
push eax
push str.MAC_ADDRESS
call fcn.00402e68
lea eax, [ebp - 0x1e1c]
push 0xfa0
push eax
push str.HOSTNAME_ALIASES
call fcn.00402e68
push str.10.1.0.2
push 0x449880
call dword [sym.imp.MSVCR71.dll_wcscmp]
add esp, 0x6c
test eax, eax
jl 0x404d4d
mov eax, dword [0x44e880]
test eax, eax
je 0x404cd9
mov edx, str.DESCRIPTION
jmp 0x404cde
mov edx, 0x4434c0
lea eax, [ebp - 0x841c]
push 0x1f4
push eax
push edx
call fcn.00402e68
lea eax, [ebp - 0x621c]
push eax
call fcn.00405044
add esp, 0x10
mov edx, dword [0x44e880]
test edx, edx
je 0x404d10
mov edx, str.DEFAULT_GATEWAY
jmp 0x404d15
mov edx, 0x4434c0
push 0x14
push eax
push edx
call fcn.00402e68
lea eax, [ebp - 0x621c]
push eax
call fcn.00405100
add esp, 0x10
mov edx, dword [0x44e880]
test edx, edx
je 0x404d3e
mov edx, str.DHCP_ENABLED
jmp 0x404d43
mov edx, 0x4434c0
push eax
push edx
call fcn.004031a8
add esp, 8
mov eax, dword [0x44e880]
test eax, eax
je 0x404d5d
mov eax, 0x444940
jmp 0x404d62
mov eax, 0x4434c0
push eax
call fcn.0040322c
pop ecx
mov eax, dword [0x44e880]
test eax, eax
jne 0x404d8c
je 0x404d7b
mov eax, str.ROWSET_TABLE_MGMT_ECM_HW_NIC__CONFIG_TRUE_
jmp 0x404d80
mov eax, str.NETWORK_INTERFACE_CARD
push eax
call fcn.0040322c
pop ecx
mov eax, dword [0x44e880]
test eax, eax
je 0x404d97
mov eax, 0x4434c0
jmp 0x404d9c
mov eax, str.SUBCOMPONENT
push eax
call fcn.0040322c
pop ecx
mov ebx, dword [ebp - 4]
mov esi, dword [ebp - 8]
mov edi, dword [ebp - 0xc]
mov esp, ebp
pop ebp
ret
push str.ProductName
lea eax, [ebp - 0xd1c]
push eax
call dword [sym.imp.MSVCR71.dll_wcscmp]
add esp, 8
test eax, eax
jne 0x404dfb
mov eax, dword [ebp - 0x14]
cmp eax, 1
jne 0x404dfb
lea edx, [ebp - 0x731c]
lea eax, [ebp - 0xc18]
push 0x800
push eax
push edx
call dword [sym.imp.MSVCR71.dll_wcsncpy]
add esp, 0xc
xor eax, eax
mov word [ebp - 0x631e], ax
jmp 0x404988
push str.ServiceName
lea eax, [ebp - 0xd1c]
push eax
call dword [sym.imp.MSVCR71.dll_wcscmp]
add esp, 8
test eax, eax
jne 0x404e4b
mov eax, dword [ebp - 0x14]
cmp eax, 1
jne 0x404e4b
lea edx, [ebp - 0x621c]
lea eax, [ebp - 0xc18]
push 0x800
mov edi, 1
push eax
push edx
call dword [sym.imp.MSVCR71.dll_wcsncpy]
add esp, 0xc
xor eax, eax
mov word [ebp - 0x521e], ax
jmp 0x404988
push str.Description
lea eax, [ebp - 0xd1c]
push eax
call dword [sym.imp.MSVCR71.dll_wcscmp]
add esp, 8
test eax, eax
jne 0x404e96
mov eax, dword [ebp - 0x14]
cmp eax, 1
jne 0x404e96
lea edx, [ebp - 0x841c]
lea eax, [ebp - 0xc18]
push 0x800
push eax
push edx
call dword [sym.imp.MSVCR71.dll_wcsncpy]
add esp, 0xc
xor eax, eax
mov word [ebp - 0x741e], ax
jmp 0x404988
push str.Hidden
lea eax, [ebp - 0xd1c]
push eax
call dword [sym.imp.MSVCR71.dll_wcscmp]
add esp, 8
test eax, eax
jne 0x404988
mov eax, dword [ebp - 0x14]
cmp eax, 4
jne 0x404988
mov esi, 1
jmp 0x404988