Function at 0x1000a931
Capabilities:
Query or enumerate registry value

Disassembly:
push ebp
mov ebp, esp
sub esp, 0xc70
push esi
push edi
lea edi, [ebp - 0xc70]
mov ecx, 0x31c
mov eax, 0xcccccccc
rep stosd dword es:[edi], eax
mov esi, esp
push 6
push 0
push 0
push 0
call dword [sym.imp.SETUPAPI.dll_SetupDiGetClassDevsW]
cmp esi, esp
call fcn.10021b10
mov dword [ebp - 0xc60], eax
cmp dword [ebp - 0xc60], 0xffffffff
jne 0x1000a97e
mov eax, 1
jmp 0x1000ae18
mov word [ebp - 0x830], 0
mov ecx, 0xff
xor eax, eax
lea edi, [ebp - 0x82e]
rep stosd dword es:[edi], eax
stosw word es:[edi], ax
mov dword [ebp - 0x20], 0x400
mov dword [ebp - 0xc5c], 0
mov dword [ebp - 0x42c], 0
mov word [ebp - 0xc58], 0
mov ecx, 0xff
xor eax, eax
lea edi, [ebp - 0xc56]
rep stosd dword es:[edi], eax
stosw word es:[edi], ax
mov dword [ebp - 0x424], 0
mov dword [ebp - 0x428], 0
mov dword [ebp - 0x430], 0
mov dword [ebp - 0x858], 0
mov dword [ebp - 0x850], 0
mov dword [ebp - 0x84c], 0x1c
mov dword [ebp - 0x854], 0
jmp 0x1000aa24
mov eax, dword [ebp - 0x854]
add eax, 1
mov dword [ebp - 0x854], eax
mov esi, esp
lea ecx, [ebp - 0x84c]
push ecx
mov edx, dword [ebp - 0x854]
push edx
mov eax, dword [ebp - 0xc60]
push eax
call dword [sym.imp.SETUPAPI.dll_SetupDiEnumDeviceInfo]
cmp esi, esp
call fcn.10021b10
test eax, eax
je 0x1000add0
mov dword [ebp - 0x430], 0
mov dword [ebp - 0x858], 0
mov esi, esp
lea ecx, [ebp - 0x858]
push ecx
mov edx, dword [ebp - 0x858]
push edx
mov eax, dword [ebp - 0x430]
push eax
lea ecx, [ebp - 4]
push ecx
push 1
lea edx, [ebp - 0x84c]
push edx
mov eax, dword [ebp - 0xc60]
push eax
call dword [sym.imp.SETUPAPI.dll_SetupDiGetDeviceRegistryPropertyW]
cmp esi, esp
call fcn.10021b10
test eax, eax
jne 0x1000ab28
mov esi, esp
call dword [sym.imp.KERNEL32.dll_GetLastError]
cmp esi, esp
call fcn.10021b10
cmp eax, 0x7a
jne 0x1000ab21
cmp dword [ebp - 0x430], 0
je 0x1000aae6
mov ecx, dword [ebp - 0x430]
mov dword [ebp - 0xc64], ecx
mov edx, dword [ebp - 0xc64]
push edx
call fcn.1006b3e9
add esp, 4
mov dword [ebp - 0x430], 0
mov eax, dword [ebp - 0x858]
push eax
call fcn.1006b3a0
add esp, 4
mov dword [ebp - 0xc68], eax
mov ecx, dword [ebp - 0xc68]
mov dword [ebp - 0x430], ecx
mov edx, dword [ebp - 0x858]
push edx
push 0
mov eax, dword [ebp - 0x430]
push eax
call fcn.10021ab0
add esp, 0xc
jmp 0x1000ab23
jmp 0x1000ab28
jmp 0x1000aa64
cmp dword [ebp - 0x430], 0
je 0x1000adcb
push 0x204
call fcn.1006b3a0
add esp, 4
mov dword [ebp - 0xc6c], eax
mov ecx, dword [ebp - 0xc6c]
mov dword [ebp - 0x850], ecx
push 4
push 0
mov edx, dword [ebp - 0x850]
push edx
call fcn.10021ab0
add esp, 0xc
push 0x100
mov eax, dword [ebp - 0x430]
push eax
mov ecx, dword [ebp - 0x850]
push ecx
call fcn.100223f0
add esp, 0xc
push 0xc8
push 0
mov edx, dword [ebp - 0x850]
add edx, 0x100
push edx
call fcn.10021ab0
add esp, 0xc
push 0x3c
push 0
mov eax, dword [ebp - 0x850]
add eax, 0x1c8
push eax
call fcn.10021ab0
add esp, 0xc
mov dword [ebp - 0x20], 0x400
mov esi, esp
lea ecx, [ebp - 0x20]
push ecx
mov edx, dword [ebp - 0x20]
push edx
lea eax, [ebp - 0x830]
push eax
lea ecx, [ebp - 4]
push ecx
push 9
lea edx, [ebp - 0x84c]
push edx
mov eax, dword [ebp - 0xc60]
push eax
call dword [sym.imp.SETUPAPI.dll_SetupDiGetDeviceRegistryPropertyW]
cmp esi, esp
call fcn.10021b10
mov esi, esp
lea ecx, [ebp - 0x830]
push ecx
push 0x100f4814
push 0x100f4864
lea edx, [ebp - 0xc58]
push edx
call dword [sym.imp.USER32.dll_wsprintfW]
add esp, 0x10
cmp esi, esp
call fcn.10021b10
mov esi, esp
lea eax, [ebp - 0x42c]
push eax
lea ecx, [ebp - 0xc5c]
push ecx
push 0
push 0xf003f
push 0
push 0
push 0
lea edx, [ebp - 0xc58]
push edx
push reloc.OLEAUT32.dll_SysReAllocString
call dword [sym.imp.ADVAPI32.dll_RegCreateKeyExW]
cmp esi, esp
call fcn.10021b10
test eax, eax
jne 0x1000ad95
mov dword [ebp - 0x428], 8
mov esi, esp
lea eax, [ebp - 0x428]
push eax
lea ecx, [ebp - 0x1c]
push ecx
lea edx, [ebp - 0x424]
push edx
push 0
push str.DriverDateData
mov eax, dword [ebp - 0xc5c]
push eax
call dword [sym.imp.ADVAPI32.dll_RegQueryValueExW]
cmp esi, esp
call fcn.10021b10
test eax, eax
jne 0x1000aceb
mov esi, esp
lea ecx, [ebp - 0x14]
push ecx
lea edx, [ebp - 0x1c]
push edx
call dword [sym.imp.KERNEL32.dll_FileTimeToSystemTime]
cmp esi, esp
call fcn.10021b10
mov eax, dword [ebp - 0x14]
and eax, 0xffff
mov esi, esp
push eax
mov ecx, dword [ebp - 0xe]
and ecx, 0xffff
push ecx
mov edx, dword [ebp - 0x12]
and edx, 0xffff
push edx
push str._02d__02d__04d
mov eax, dword [ebp - 0x850]
add eax, 0x1c8
push eax
call dword [sym.imp.USER32.dll_wsprintfW]
add esp, 0x14
cmp esi, esp
call fcn.10021b10
push 0x400
push 0
lea ecx, [ebp - 0x420]
push ecx
call fcn.10021ab0
add esp, 0xc
mov dword [ebp - 0x428], 0x400
mov esi, esp
lea edx, [ebp - 0x428]
push edx
lea eax, [ebp - 0x420]
push eax
lea ecx, [ebp - 0x424]
push ecx
push 0
push str.DriverVersion
mov edx, dword [ebp - 0xc5c]
push edx
call dword [sym.imp.ADVAPI32.dll_RegQueryValueExW]
cmp esi, esp
call fcn.10021b10
test eax, eax
jne 0x1000ad64
mov esi, esp
lea eax, [ebp - 0x420]
push eax
mov ecx, dword [ebp - 0x850]
add ecx, 0x100
push ecx
call dword [sym.imp.KERNEL32.dll_lstrcpyW]
cmp esi, esp
call fcn.10021b10
lea edx, [ebp - 0x420]
push edx
mov eax, dword [ebp - 0x850]
push eax
push str.EnumerateSystemHWID____s__ver:__s
call fcn.10003f70
add esp, 0xc
mov esi, esp
mov ecx, dword [ebp - 0xc5c]
push ecx
call dword [sym.imp.ADVAPI32.dll_RegCloseKey]
cmp esi, esp
call fcn.10021b10
mov edx, dword [ebp - 0x850]
push edx
mov ecx, 0x101070b0
call fcn.1000fa50
mov eax, dword [ebp - 0x430]
mov dword [ebp - 0xc70], eax
mov ecx, dword [ebp - 0xc70]
push ecx
call fcn.1006b3e9
add esp, 4
mov dword [ebp - 0x430], 0
jmp 0x1000aa15
mov esi, esp
call dword [sym.imp.KERNEL32.dll_GetLastError]
cmp esi, esp
call fcn.10021b10
test eax, eax
je 0x1000adfd
mov esi, esp
call dword [sym.imp.KERNEL32.dll_GetLastError]
cmp esi, esp
call fcn.10021b10
cmp eax, 0x103
je 0x1000adfd
xor eax, eax
jmp 0x1000ae18
mov esi, esp
mov edx, dword [ebp - 0xc60]
push edx
call dword [sym.imp.SETUPAPI.dll_SetupDiDestroyDeviceInfoList]
cmp esi, esp
call fcn.10021b10
mov eax, 1
pop edi
pop esi
add esp, 0xc70
cmp ebp, esp
call fcn.10021b10
mov esp, ebp
pop ebp
ret