Function at 0x4111d0
Capabilities:
Set registry value

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x4afad8
mov eax, dword fs:[0]
push eax
mov eax, 0x1064
call fcn.00476910
mov eax, dword [0x503074]
xor eax, ebp
mov dword [ebp - 0x10], eax
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
push 0x4c965c
push str.GetNetDevCtUnchanged
push 0
call fcn.00422b80
push eax
call fcn.0047bd80
xor esi, esi
add esp, 0x10
mov dword [ebp - 0x1048], esi
mov dword [ebp - 4], esi
call fcn.00422b80
mov al, byte [eax + 0x38]
test al, al
je 0x411262
push 0x28
call fcn.00475970
mov esi, eax
add esp, 4
mov dword [ebp - 0x1044], esi
push str.GetNetDevCtUnchanged
mov byte [ebp - 4], 1
call fcn.00422b80
push eax
mov ecx, esi
call fcn.00477bf0
mov esi, eax
mov dword [ebp - 0x1048], esi
mov dword [ebp - 0x1044], 0
mov dword [ebp - 0x104c], 0
mov dword [ebp - 0x1070], 0
mov dword [ebp - 0x106c], 0
mov dword [ebp - 0x1068], 0
xor edi, edi
mov dword [ebp - 0x1058], edi
mov dword [ebp - 0x1054], edi
mov dword [ebp - 0x1050], edi
lea eax, [ebp - 0x1030]
mov byte [ebp - 4], 3
push eax
lea eax, [ebp - 0x1034]
mov dword [ebp - 0x1034], edi
push eax
push edi
push 0x2001f
push edi
push edi
push edi
push str.SOFTWAREPoliciesHPHP_CASL_Framework
push reloc.OLEAUT32.dll_SysReAllocString
call dword [sym.imp.ADVAPI32.dll_RegCreateKeyExW]
test eax, eax
jne 0x411652
mov eax, dword [ebp - 0x1034]
mov dword [ebp - 0x1070], eax
mov dword [ebp - 0x106c], edi
test eax, eax
je 0x411652
lea ecx, [ebp - 0x1030]
mov dword [ebp - 0x1034], edi
push ecx
lea ecx, [ebp - 0x1034]
push ecx
push edi
push 0x2001f
push edi
push edi
push edi
push str.9C66BD86_EFC3_4A20_AD40_9FB9DD6A615F
push eax
call dword [sym.imp.ADVAPI32.dll_RegCreateKeyExW]
test eax, eax
jne 0x411652
mov edi, dword [ebp - 0x1034]
mov dword [ebp - 0x1058], edi
mov dword [ebp - 0x1054], eax
test edi, edi
je 0x411652
lea eax, [ebp - 0x104c]
push eax
push str.NetworkDeviceCount
lea ecx, [ebp - 0x1058]
call fcn.0041ad30
push 2
push 0
push 0
push 0x4cb428
call dword [sym.imp.SETUPAPI.dll_SetupDiGetClassDevsW]
lea ecx, [ebp - 0x102c]
mov dword [ebp - 0x1034], eax
push ecx
xor edi, edi
mov dword [ebp - 0x102c], 0x1c
xorps xmm0, xmm0
mov dword [ebp - 0x1030], 0
push edi
push eax
movups xmmword [ebp - 0x1028], xmm0
movq qword [ebp - 0x1018], xmm0
call dword [sym.imp.SETUPAPI.dll_SetupDiEnumDeviceInfo]
test eax, eax
je 0x411416
xor esi, esi
push 0x1000
lea eax, [ebp - 0x1010]
push 0
push eax
call fcn.0048b3f0
add esp, 0xc
lea eax, [ebp - 0x1010]
push 0
push 0x1000
push eax
push 0
push 0xd
lea eax, [ebp - 0x102c]
push eax
push dword [ebp - 0x1034]
call dword [sym.imp.SETUPAPI.dll_SetupDiGetDeviceRegistryPropertyW]
test eax, eax
je 0x4113f1
inc esi
lea eax, [ebp - 0x102c]
inc edi
push eax
push edi
push dword [ebp - 0x1034]
call dword [sym.imp.SETUPAPI.dll_SetupDiEnumDeviceInfo]
test eax, eax
jne 0x4113b1
mov dword [ebp - 0x1030], esi
mov esi, dword [ebp - 0x1048]
mov eax, dword [ebp - 0x1030]
mov edi, dword [ebp - 0x1058]
cmp eax, dword [ebp - 0x104c]
jne 0x411439
mov dword [ebp - 0x1044], 1
jmp 0x411646
push 4
mov dword [ebp - 0x1030], eax
lea eax, [ebp - 0x1030]
push eax
push 4
push 0
push str.NetworkDeviceCount
push edi
call dword [sym.imp.ADVAPI32.dll_RegSetValueExW]
xor eax, eax
lea ecx, [ebp - 0x1040]
mov word [ebp - 0x1040], ax
lea edx, [ecx + 2]
nop word [eax + eax]
mov ax, word [ecx]
add ecx, 2
test ax, ax
jne 0x411470
sub ecx, edx
sar ecx, 1
lea eax, [ecx*2 + 2]
push eax
lea eax, [ebp - 0x1040]
push eax
push 1
push 0
push str.Wireless.GlobalChanged.2.0
push edi
call dword [sym.imp.ADVAPI32.dll_RegSetValueExW]
push str.SOFTWAREPoliciesHPHP_CASL_Framework5B628A51_2568_411B_9C6A_EF10FA7DB830
lea ecx, [ebp - 0x1038]
call fcn.0041ac40
push 0x4ce720
lea ecx, [ebp - 0x103c]
mov byte [ebp - 4], 4
call fcn.0041ac40
push 0xc
mov byte [ebp - 4], 5
call fcn.00475970
add esp, 4
mov dword [ebp - 0x1030], eax
mov byte [ebp - 4], 6
test eax, eax
je 0x4114f5
lea ecx, [ebp - 0x103c]
push ecx
lea ecx, [ebp - 0x1038]
push ecx
mov ecx, eax
call fcn.0041aae0
jmp 0x4114f7
xor eax, eax
mov dword [ebp - 0x1030], eax
mov byte [ebp - 4], 5
test eax, eax
jne 0x41150f
push 0x8007000e
call fcn.004754d0
lea ecx, [ebp - 0x1038]
call fcn.0041abd0
mov eax, dword [ebp - 0x1030]
lea ecx, [ebp - 0x103c]
mov dword [ebp - 0x1038], eax
mov byte [ebp - 4], 4
call fcn.0041abd0
push 0x4c9db0
lea ecx, [ebp - 0x1030]
call fcn.0041ac40
push 0xc
mov byte [ebp - 4], 7
call fcn.00475970
add esp, 4
mov dword [ebp - 0x103c], eax
mov byte [ebp - 4], 8
test eax, eax
je 0x411578
lea ecx, [ebp - 0x1030]
push ecx
lea ecx, [ebp - 0x1038]
push ecx
mov ecx, eax
call fcn.0041aae0
jmp 0x41157a
xor eax, eax
mov dword [ebp - 0x103c], eax
mov byte [ebp - 4], 7
test eax, eax
jne 0x411592
push 0x8007000e
call fcn.004754d0
lea ecx, [ebp - 0x1038]
call fcn.0041abd0
mov eax, dword [ebp - 0x103c]
lea ecx, [ebp - 0x1030]
mov dword [ebp - 0x1038], eax
call fcn.0041abd0
lea eax, [ebp - 0x1030]
mov dword [ebp - 0x1064], 0
push eax
mov eax, dword [ebp - 0x103c]
push 0x2001f
push 0
mov dword [ebp - 0x1060], 0
push dword [eax]
mov dword [ebp - 0x105c], 0
push reloc.OLEAUT32.dll_SysReAllocString
mov dword [ebp - 0x1030], 0
call dword [sym.imp.ADVAPI32.dll_RegOpenKeyExW]
test eax, eax
jne 0x411637
mov eax, dword [ebp - 0x1030]
mov dword [ebp - 0x1064], eax
mov dword [ebp - 0x1060], 0
test eax, eax
je 0x411637
push 0x4cc284
lea ecx, [ebp - 0x1064]
call fcn.0041a970
push dword [ebp - 0x1030]
call dword [sym.imp.ADVAPI32.dll_RegCloseKey]
lea ecx, [ebp - 0x1038]
mov byte [ebp - 4], 3
call fcn.0041abd0
push dword [ebp - 0x1034]
call dword [sym.imp.SETUPAPI.dll_SetupDiDestroyDeviceInfoList]
cmp dword [ebp - 0x1044], 0
mov ecx, 0x4cc288
mov eax, str.TRUE
cmove eax, ecx
push eax
push str.bUnchanged:__s
push str.GetNetDevCtUnchanged
push 1
call fcn.00422b80
push eax
call fcn.0047bd80
add esp, 0x14
test edi, edi
je 0x411690
push edi
mov edi, dword [sym.imp.ADVAPI32.dll_RegCloseKey]
call edi
jmp 0x411696
mov edi, dword [sym.imp.ADVAPI32.dll_RegCloseKey]
mov eax, dword [ebp - 0x1070]
test eax, eax
je 0x4116a3
push eax
call edi
test esi, esi
je 0x4116b9
mov ecx, esi
call fcn.00478c00
push 0x28
push esi
call fcn.00475d73
add esp, 8
mov eax, dword [ebp - 0x1044]
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
mov ecx, dword [ebp - 0x10]
xor ecx, ebp
call fcn.004756da
mov esp, ebp
pop ebp
ret