Function at 0x425c30
Capabilities:
Query or enumerate registry key
Query or enumerate registry value

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x704
mov eax, dword [0x4a39f8]
xor eax, ebp
mov dword [ebp - 4], eax
push esi
push edi
xor eax, eax
mov esi, ecx
push 0x62
push eax
lea ecx, [ebp - 0xca]
push ecx
mov dword [ebp - 0x6f4], esi
mov word [ebp - 0xcc], ax
call fcn.00405300
xor edx, edx
push 0x208
push edx
lea eax, [ebp - 0x2d6]
push eax
mov word [ebp - 0x2d8], dx
call fcn.00405300
xor ecx, ecx
push 0x62
push ecx
lea edx, [ebp - 0x66]
push edx
xor edi, edi
mov word [ebp - 0x68], cx
call fcn.00405300
add esp, 0x24
mov dword [ebp - 0x6e4], 0x32
test esi, esi
jne 0x425ccb
push str.state
push str.QueryBroadcomTeamingStateReg:__s_failed_n
push 1
call fcn.004343f0
add esp, 0xc
pop edi
xor eax, eax
pop esi
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.0040506e
mov esp, ebp
pop ebp
ret
cmp dword [ebp + 8], 0x8534
je 0x425cdb
push str.stateSize__sizeof_state
jmp 0x425caa
mov esi, dword [esi + 8]
test esi, esi
jg 0x425ce9
push str.state__numAdapters___0
jmp 0x425caa
cmp esi, 0x40
jle 0x425cf5
push str.state__numAdapters___VNET_BRSTATE_NUM_ADAPTERS
jmp 0x425caa
push 0x32
lea eax, [ebp - 0xcc]
push eax
push 0x478b08
call dword [0x4653b0]
test eax, eax
jne 0x425d2e
push str.cant_convert_guid_to_string
push 1
call fcn.004343f0
add esp, 8
pop edi
xor eax, eax
pop esi
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.0040506e
mov esp, ebp
pop ebp
ret
lea ecx, [ebp - 0xcc]
push ecx
push str.SYSTEMCurrentControlSetControlClass_s
lea edx, [ebp - 0x2d8]
push 0x105
push edx
call fcn.00457d45
add esp, 0x10
lea eax, [ebp - 0x6e0]
push eax
push 9
push 0
lea ecx, [ebp - 0x2d8]
push ecx
push 0x80000002
call dword [0x4650cc]
mov esi, eax
test esi, esi
je 0x425d9a
call dword [0x4651b0]
push eax
push esi
push str.QueryBroadcomTeamingStateReg:_couldnt_open_net_class_adapter:_0x_08x_0x_08x
push 1
call fcn.004343f0
add esp, 0x10
pop edi
xor eax, eax
pop esi
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.0040506e
mov esp, ebp
pop ebp
ret
lea edx, [ebp - 0x704]
push edx
mov edx, dword [ebp - 0x6e0]
push 0
push 0
push 0
lea eax, [ebp - 0x6e4]
push eax
lea ecx, [ebp - 0x68]
push ecx
push 0
push edx
call dword [0x465090]
test eax, eax
jne 0x4260a9
push ebx
lea ebx, [ebx]
xor eax, eax
push 0x3fe
push eax
lea ecx, [ebp - 0x6d6]
inc edi
push ecx
mov dword [ebp - 0x6f8], edi
mov word [ebp - 0x6d8], ax
call fcn.00405300
mov ecx, dword [ebp - 0x6e0]
add esp, 0xc
lea edx, [ebp - 0x6dc]
push edx
push 1
push 0
lea eax, [ebp - 0x68]
push eax
push ecx
mov dword [ebp - 0x6f0], 0x400
mov dword [ebp - 0x6e4], 0x32
call dword [0x4650cc]
mov esi, eax
test esi, esi
je 0x425e4b
call dword [0x4651b0]
lea edx, [ebp - 0x68]
push edx
push eax
push esi
push str.QueryBroadcomTeamingStateReg:_could_not_open_adapter_key:_0x_08x_0x_08x__S
push 1
call fcn.004343f0
add esp, 0x14
jmp 0x426074
mov edi, dword [ebp - 0x6dc]
mov ebx, str.Broadcom
mov esi, str.ProviderName
call fcn.00424880
test eax, eax
jne 0x425e7f
push str.QueryBroadcomTeamingStateReg:_Provider_isnt_broadcom
push 4
call fcn.004343f0
mov eax, dword [ebp - 0x6dc]
add esp, 8
push eax
jmp 0x42606e
push str.QueryBroadcomTeamingStateReg:_Provider_is_broadcom
push 0x10
call fcn.004343f0
mov edi, dword [ebp - 0x6dc]
add esp, 8
mov ebx, str.blfm
mov esi, str.ComponentId
call fcn.00424880
test eax, eax
jne 0x425eef
mov edi, dword [ebp - 0x6dc]
mov esi, str.MatchingDeviceId
call fcn.00424880
test eax, eax
jne 0x425eef
mov edi, dword [ebp - 0x6dc]
mov ebx, str.BASP_Virtual
mov esi, str.DriverDesc
call fcn.00424880
test eax, eax
jne 0x425eef
push str.QueryBroadcomTeamingStateReg:_Broadcom_device_isnt_BASP
push 4
call fcn.004343f0
mov ecx, dword [ebp - 0x6dc]
add esp, 8
push ecx
jmp 0x42606e
push str.QueryBroadcomTeamingStateReg:_device_is_BASP
push 0x10
call fcn.004343f0
mov ebx, dword [0x4650c4]
add esp, 8
lea edx, [ebp - 0x6fc]
push edx
mov edx, dword [ebp - 0x6dc]
lea eax, [ebp - 0x6ec]
push eax
lea ecx, [ebp - 0x6e8]
push ecx
xor esi, esi
push esi
push str.TeamType
push edx
mov dword [ebp - 0x6ec], esi
mov dword [ebp - 0x6fc], 4
mov dword [ebp - 0x6e8], esi
call ebx
mov edi, eax
cmp edi, esi
jne 0x426049
cmp dword [ebp - 0x6e8], 4
jne 0x426049
mov eax, dword [ebp - 0x6ec]
cmp eax, esi
je 0x425f7d
push eax
push str.QueryBroadcomTeamingStateReg:_team_type_isnt_SLB:_0x_08x
push 0x20
call fcn.004343f0
mov eax, dword [ebp - 0x6dc]
add esp, 0xc
push eax
jmp 0x42606e
mov eax, dword [ebp - 0x6dc]
lea ecx, [ebp - 0x6f0]
push ecx
lea edx, [ebp - 0x6d8]
push edx
push esi
push esi
push str.NetCfgInstanceId
push eax
call ebx
mov edi, eax
cmp edi, esi
je 0x425fc4
call dword [0x4651b0]
push eax
push edi
push str.QueryBroadcomTeamingStateReg:_couldnt_query_instance_ID_for_adapter:_0x_08x_0x_08x
push 4
call fcn.004343f0
mov ecx, dword [ebp - 0x6dc]
add esp, 0x10
push ecx
jmp 0x42606e
mov edx, dword [ebp - 0x6dc]
push edx
call dword [0x4650d0]
mov edi, dword [ebp - 0x6f4]
xor eax, eax
cmp esi, dword [edi + 8]
mov word [ebp - 0x2da], ax
jge 0x426031
lea ebx, [edi + 0x40]
lea ecx, [ebp - 0x6d8]
push ecx
push ebx
call fcn.00457c9a
add esp, 8
test eax, eax
jne 0x42600a
inc esi
add ebx, 0x214
cmp esi, dword [edi + 8]
jl 0x425fe8
jmp 0x42602c
push esi
push str.QueryBroadcomTeamingStateReg:_found_match_for_registry_and_state:_offset__d
push 0x10
call fcn.004343f0
mov edx, esi
imul edx, edx, 0x214
lea eax, [edx + edi + 0x3c]
add esp, 0xc
or dword [eax], 0x180
cmp esi, dword [edi + 8]
jl 0x426074
lea eax, [ebp - 0x6d8]
push eax
push str.QueryBroadcomTeamingStateReg:_didnt_find_bcom_match_for__S
push 1
call fcn.004343f0
add esp, 0xc
jmp 0x426074
call dword [0x4651b0]
mov ecx, dword [ebp - 0x6e8]
push ecx
push eax
push edi
push str.QueryBroadcomTeamingStateReg:_Error_reading_teamtype:_0x_08x_0x_08x_0x_08x
push 4
call fcn.004343f0
mov edx, dword [ebp - 0x6dc]
add esp, 0x14
push edx
call dword [0x4650d0]
mov edi, dword [ebp - 0x6f8]
lea eax, [ebp - 0x704]
push eax
mov eax, dword [ebp - 0x6e0]
push 0
push 0
push 0
lea ecx, [ebp - 0x6e4]
push ecx
lea edx, [ebp - 0x68]
push edx
push edi
push eax
call dword [0x465090]
test eax, eax
je 0x425dd0
pop ebx
mov ecx, dword [ebp - 0x6e0]
push ecx
call dword [0x4650d0]
mov ecx, dword [ebp - 4]
pop edi
xor ecx, ebp
mov eax, 1
pop esi
call fcn.0040506e
mov esp, ebp
pop ebp
ret