Function at 0x429cf0
Capabilities:
Query or enumerate registry key
Query or enumerate registry value

Disassembly:
mov eax, dword fs:[0]
push 0xffffffffffffffff
push 0x4b5a4f
push eax
mov dword fs:[0], esp
sub esp, 0x334
lea eax, [esp + 0xc]
push esi
mov esi, dword [sym.imp.ADVAPI32.dll_RegOpenKeyExW]
push eax
push 0x20019
push 0
push str.SystemCurrentControlSetControlClass4d36e972_e325_11ce_bfc1_08002be10318
push reloc.WS2_32.dll_bind
call esi
test eax, eax
je 0x429d46
xor eax, eax
pop esi
mov ecx, dword [esp + 0x334]
mov dword fs:[0], ecx
add esp, 0x340
ret
push ebx
mov eax, dword [esp + 0x14]
push ebp
push edi
push 0
push 0
push 0
lea ecx, [esp + 0x20]
push 0
lea edx, [esp + 0x154]
push ecx
push edx
mov ebp, 0x100
push 0
push eax
mov dword [esp + 0x34], ebp
mov dword [esp + 0x4c], 1
call dword [sym.imp.ADVAPI32.dll_RegEnumKeyExW]
test eax, eax
jne 0x42a0c7
mov eax, dword [esp + 0x1c]
lea ecx, [esp + 0x20]
push ecx
push 0x20019
lea edx, [esp + 0x14c]
push 0
push edx
push eax
call esi
test eax, eax
jne 0x42a08f
mov edx, dword [esp + 0x20]
lea ecx, [esp + 0x34]
push ecx
push 0x20019
push eax
push str.NdiInterfaces
push edx
call esi
test eax, eax
jne 0x42a084
mov edi, dword [sym.imp.ADVAPI32.dll_RegQueryValueExW]
lea eax, [esp + 0x14]
lea ecx, [esp + 0x44]
push eax
mov eax, dword [esp + 0x38]
lea edx, [esp + 0x2c]
push ecx
push edx
push 0
push str.LowerRange
push eax
mov dword [esp + 0x2c], ebp
call edi
test eax, eax
jne 0x42a073
mov esi, str.ethernet
lea eax, [esp + 0x44]
mov dl, byte [eax]
mov bl, byte [esi]
mov cl, dl
cmp dl, bl
jne 0x429e29
test cl, cl
je 0x429e22
mov dl, byte [eax + 1]
mov bl, byte [esi + 1]
mov cl, dl
cmp dl, bl
jne 0x429e29
add eax, 2
add esi, 2
test cl, cl
jne 0x429dfe
xor eax, eax
or ebx, 0xffffffff
jmp 0x429e32
sbb eax, eax
mov ebx, 0xffffffff
sbb eax, ebx
test eax, eax
jne 0x42a073
lea eax, [esp + 0x14]
lea ecx, [esp + 0x44]
push eax
mov eax, dword [esp + 0x24]
lea edx, [esp + 0x2c]
push ecx
push edx
push 0
push str.DriverDesc
push eax
mov dword [esp + 0x2c], ebp
call edi
test eax, eax
jne 0x42a073
push 0x60
call sub.MFC42u.DLL_operatornew
mov esi, eax
add esp, 4
mov dword [esp + 0x30], esi
test esi, esi
mov dword [esp + 0x34c], 0
je 0x429f09
mov cl, byte [esp + 0x13]
push 0
mov byte [esi], cl
mov ecx, esi
call dword [sym.imp.MSVCP60.dll_private:_void___thiscall_std::basic_string_unsigned_short_int__struct_std::char_traits_unsigned_short_int___class_std::allocator_unsigned_short_int__::_Tidy_bool_]
mov dl, byte [esp + 0x13]
lea ecx, [esi + 0x10]
push 0
mov byte [esp + 0x350], 1
mov byte [ecx], dl
call dword [sym.imp.MSVCP60.dll_private:_void___thiscall_std::basic_string_unsigned_short_int__struct_std::char_traits_unsigned_short_int___class_std::allocator_unsigned_short_int__::_Tidy_bool_]
lea eax, [esp + 0x13]
lea ecx, [esi + 0x20]
push eax
mov byte [esp + 0x350], 2
call dword [sym.imp.MSVCP60.dll_public:_void___thiscall_std::basic_string_unsigned_short_int__struct_std::char_traits_unsigned_short_int___class_std::allocator_unsigned_short_int__::constructor_class_std::allocator_unsigned_short_int__const__]
lea ecx, [esp + 0x27]
mov byte [esp + 0x34c], 3
push ecx
lea ecx, [esi + 0x30]
call dword [sym.imp.MSVCP60.dll_public:_void___thiscall_std::basic_string_unsigned_short_int__struct_std::char_traits_unsigned_short_int___class_std::allocator_unsigned_short_int__::constructor_class_std::allocator_unsigned_short_int__const__]
lea edx, [esp + 0x26]
lea ecx, [esi + 0x40]
push edx
mov byte [esp + 0x350], 4
call dword [sym.imp.MSVCP60.dll_public:_void___thiscall_std::basic_string_unsigned_short_int__struct_std::char_traits_unsigned_short_int___class_std::allocator_unsigned_short_int__::constructor_class_std::allocator_unsigned_short_int__const__]
lea eax, [esp + 0x25]
lea ecx, [esi + 0x50]
push eax
mov byte [esp + 0x350], 5
call dword [sym.imp.MSVCP60.dll_public:_void___thiscall_std::basic_string_unsigned_short_int__struct_std::char_traits_unsigned_short_int___class_std::allocator_unsigned_short_int__::constructor_class_std::allocator_unsigned_short_int__const__]
jmp 0x429f0b
xor esi, esi
lea ecx, [esp + 0x44]
lea edx, [esp + 0x3c]
push ecx
push edx
mov dword [esp + 0x354], ebx
mov dword [esp + 0x20], esi
call fcn.00428ae0
mov ebp, dword [eax]
mov eax, dword [esp + 0x20]
push ebp
mov dword [esp + 0x358], 6
lea esi, [eax + 0x10]
call dword [sym.imp.MSVCRT.dll_wcslen]
add esp, 0xc
mov edi, eax
mov ecx, esi
push 1
push edi
call dword [sym.imp.MSVCP60.dll_private:_bool___thiscall_std::basic_string_unsigned_short_int__struct_std::char_traits_unsigned_short_int___class_std::allocator_unsigned_short_int__::_Grow_unsigned_int__bool_]
test al, al
je 0x429f6b
mov eax, dword [esi + 4]
push edi
push ebp
push eax
call fcn.0040a5a0
add esp, 0xc
mov ecx, esi
push edi
call dword [sym.imp.MSVCP60.dll_private:_void___thiscall_std::basic_string_unsigned_short_int__struct_std::char_traits_unsigned_short_int___class_std::allocator_unsigned_short_int__::_Eos_unsigned_int_]
lea ecx, [esp + 0x3c]
mov dword [esp + 0x34c], ebx
call sub.MFC42u.DLL_CString::CString
lea ecx, [esp + 0x44]
push ecx
lea ecx, [esp + 0x44]
call sub.MFC42u.DLL_CString::CString_2
lea edx, [esp + 0x14]
lea eax, [esp + 0x44]
push edx
mov edx, dword [esp + 0x24]
lea ecx, [esp + 0x2c]
push eax
push ecx
push 0
push str.NetCfgInstanceID
push edx
mov dword [esp + 0x364], 7
mov dword [esp + 0x2c], 0x100
call dword [sym.imp.ADVAPI32.dll_RegQueryValueExW]
test eax, eax
jne 0x42a047
lea eax, [esp + 0x44]
lea ecx, [esp + 0x38]
push eax
push ecx
call fcn.00428ae0
mov ebp, dword [eax]
mov esi, dword [esp + 0x20]
push ebp
mov byte [esp + 0x358], 8
call dword [sym.imp.MSVCRT.dll_wcslen]
add esp, 0xc
mov edi, eax
mov ecx, esi
push 1
push edi
call dword [sym.imp.MSVCP60.dll_private:_bool___thiscall_std::basic_string_unsigned_short_int__struct_std::char_traits_unsigned_short_int___class_std::allocator_unsigned_short_int__::_Grow_unsigned_int__bool_]
test al, al
je 0x42a01a
mov eax, dword [esi + 4]
push edi
push ebp
push eax
call fcn.0040a5a0
mov edx, dword [esi + 4]
mov dword [esi + 8], edi
add esp, 0xc
mov word [edx + edi*2], 0
lea eax, [edx + edi*2]
lea ecx, [esp + 0x38]
mov byte [esp + 0x34c], 7
call sub.MFC42u.DLL_CString::CString
mov eax, dword [esp + 0x354]
mov edx, dword [esp + 0x18]
push eax
lea ecx, [esp + 0x48]
push 0
push ecx
push edx
call fcn.0042a1e0
add esp, 0x10
mov eax, dword [0x9b0230]
lea ecx, [esp + 0x18]
push ecx
push 1
push eax
mov ecx, 0x9b0228
call fcn.0042d080
lea ecx, [esp + 0x40]
mov dword [esp + 0x34c], ebx
call sub.MFC42u.DLL_CString::CString
mov ebp, 0x100
mov edx, dword [esp + 0x34]
push edx
call dword [sym.imp.ADVAPI32.dll_RegCloseKey]
mov esi, dword [sym.imp.ADVAPI32.dll_RegOpenKeyExW]
mov eax, dword [esp + 0x20]
push eax
call dword [sym.imp.ADVAPI32.dll_RegCloseKey]
mov ecx, dword [esp + 0x2c]
push 0
mov eax, ecx
inc ecx
mov dword [esp + 0x30], ecx
push 0
push 0
lea ecx, [esp + 0x20]
push 0
lea edx, [esp + 0x154]
push ecx
push edx
push eax
mov eax, dword [esp + 0x38]
push eax
mov dword [esp + 0x34], ebp
call dword [sym.imp.ADVAPI32.dll_RegEnumKeyExW]
test eax, eax
je 0x429d84
mov ecx, dword [esp + 0x1c]
push ecx
call dword [sym.imp.ADVAPI32.dll_RegCloseKey]
mov ecx, dword [0x9b022c]
mov edx, dword [0x9b0230]
test ecx, ecx
jne 0x42a0e6
xor eax, eax
jmp 0x42a0ed
mov eax, edx
sub eax, ecx
sar eax, 2
lea ebp, [eax - 1]
test ebp, ebp
jl 0x42a19c
mov edi, 0xd
mov bl, 9
mov esi, dword [ecx + ebp*4]
test esi, esi
mov dword [esp + 0x30], esi
je 0x42a18f
push 1
lea ecx, [esi + 0x50]
mov dword [esp + 0x350], edi
call dword [sym.imp.MSVCP60.dll_private:_void___thiscall_std::basic_string_unsigned_short_int__struct_std::char_traits_unsigned_short_int___class_std::allocator_unsigned_short_int__::_Tidy_bool_]
push 1
lea ecx, [esi + 0x40]
mov byte [esp + 0x350], 0xc
call dword [sym.imp.MSVCP60.dll_private:_void___thiscall_std::basic_string_unsigned_short_int__struct_std::char_traits_unsigned_short_int___class_std::allocator_unsigned_short_int__::_Tidy_bool_]
push 1
lea ecx, [esi + 0x30]
mov byte [esp + 0x350], 0xb
call dword [sym.imp.MSVCP60.dll_private:_void___thiscall_std::basic_string_unsigned_short_int__struct_std::char_traits_unsigned_short_int___class_std::allocator_unsigned_short_int__::_Tidy_bool_]
push 1
lea ecx, [esi + 0x20]
mov byte [esp + 0x350], 0xa
call dword [sym.imp.MSVCP60.dll_private:_void___thiscall_std::basic_string_unsigned_short_int__struct_std::char_traits_unsigned_short_int___class_std::allocator_unsigned_short_int__::_Tidy_bool_]
push 1
lea ecx, [esi + 0x10]
mov byte [esp + 0x350], bl
call dword [sym.imp.MSVCP60.dll_private:_void___thiscall_std::basic_string_unsigned_short_int__struct_std::char_traits_unsigned_short_int___class_std::allocator_unsigned_short_int__::_Tidy_bool_]
push 1
mov ecx, esi
mov dword [esp + 0x350], 0xffffffff
call dword [sym.imp.MSVCP60.dll_private:_void___thiscall_std::basic_string_unsigned_short_int__struct_std::char_traits_unsigned_short_int___class_std::allocator_unsigned_short_int__::_Tidy_bool_]
push esi
call sub.MFC42u.DLL_operatordelete
mov ecx, dword [0x9b022c]
add esp, 4
dec ebp
jns 0x42a0ff
mov edx, dword [0x9b0230]
mov eax, edx
pop edi
pop ebp
cmp eax, edx
pop ebx
je 0x42a1b3
mov esi, dword [eax]
add eax, 4
mov dword [ecx], esi
add ecx, 4
cmp eax, edx
jne 0x42a1a5
mov edx, dword [0x9b0230]
mov dword [0x9b0230], ecx
mov ecx, dword [esp + 0x338]
mov dword [esp + 0x24], edx
mov eax, 1
pop esi
mov dword fs:[0], ecx
add esp, 0x340
ret