Function at 0x401140
Capabilities:
Query or enumerate registry value
Set registry value

Disassembly:
sub esp, 0x108
push ebx
push ebp
push esi
push edi
mov edx, 0x1c
mov ecx, 6
xor eax, eax
lea edi, [esp + 0x24]
mov dword [esp + 0x20], edx
mov dword [esp + 0x7c], 0x9c
rep stosd dword es:[edi], eax
mov ecx, 0x26
lea edi, [esp + 0x80]
rep stosd dword es:[edi], eax
mov ecx, 6
lea edi, [esp + 0x48]
mov dword [esp + 0x44], edx
mov dword [esp + 0x60], edx
rep stosd dword es:[edi], eax
mov ecx, 6
lea edi, [esp + 0x64]
rep stosd dword es:[edi], eax
mov eax, dword [esp + 0x11c]
xor esi, esi
cmp eax, esi
mov dword [esp + 0x1c], esi
mov dword [esp + 0x14], esi
mov dword [esp + 0x10], esi
mov dword [esp + 0x3c], 1
je 0x40168a
cmp byte [eax], 0
je 0x40168a
mov ebp, dword [esp + 0x12c]
cmp ebp, esi
je 0x40168a
mov ebx, dword [esp + 0x130]
cmp ebx, esi
je 0x40168a
mov edi, dword [0x403090]
push 4
push ebx
call edi
test eax, eax
jne 0x40168a
mov eax, dword [ebx]
test eax, eax
jbe 0x401205
push eax
push ebp
call edi
test eax, eax
jne 0x40168a
push 2
push 0
push str.HDAUDIO
push 0x403158
call dword [0x4030c4]
mov ebp, eax
cmp ebp, 0xffffffff
mov dword [esp + 0x14], ebp
je 0x401695
lea eax, [esp + 0x20]
mov dword [esp + 0x18], 0
push eax
push 0
push ebp
call dword [0x4030c0]
test eax, eax
je 0x401312
mov eax, dword [esp + 0x128]
test eax, eax
je 0x401331
lea ecx, [esp + 0x10]
lea edx, [esp + 0x20]
push ecx
push 0
push 0
push 0
push 1
push edx
push ebp
call dword [0x4030bc]
mov eax, dword [esp + 0x10]
test eax, eax
je 0x4012f4
mov ebx, dword [0x40308c]
push eax
push 8
call ebx
push eax
call dword [0x403088]
mov edi, eax
test edi, edi
je 0x40168a
mov eax, dword [esp + 0x10]
mov edx, dword [esp + 0x14]
push 0
push eax
push edi
push 0
lea ecx, [esp + 0x30]
push 1
push ecx
push edx
call dword [0x4030bc]
test eax, eax
je 0x4012e2
mov al, byte [edi]
mov esi, edi
test al, al
je 0x4012dd
mov eax, dword [esp + 0x128]
push eax
push esi
call dword [0x403064]
test eax, eax
je 0x4012dd
push esi
call dword [0x403084]
lea esi, [esi + eax + 1]
cmp byte [esi], 0
jne 0x4012ba
cmp byte [esi], 0
jne 0x40131d
push edi
push 0
call ebx
push eax
call dword [0x403080]
mov ebp, dword [esp + 0x14]
xor esi, esi
mov eax, dword [esp + 0x18]
lea ecx, [esp + 0x20]
inc eax
push ecx
push eax
push ebp
mov dword [esp + 0x24], eax
call dword [0x4030c0]
test eax, eax
jne 0x401246
call dword [0x40307c]
jmp 0x401674
push edi
push 0
call ebx
push eax
call dword [0x403080]
mov ebp, dword [esp + 0x14]
xor esi, esi
jmp 0x401337
mov ebx, dword [0x40308c]
push 0x20019
push 2
push 0
lea edx, [esp + 0x2c]
push 1
push edx
push ebp
call dword [0x4030b8]
mov edi, eax
cmp edi, 0xffffffff
je 0x40167a
mov eax, dword [esp + 0x130]
mov ecx, dword [esp + 0x12c]
push eax
push ecx
push 0
push 0
push str.DriverDesc
push edi
call dword [0x40300c]
push edi
call dword [0x403008]
mov edi, dword [0x403078]
lea edx, [esp + 0x7c]
push edx
call edi
test eax, eax
jne 0x4013a8
lea eax, [esp + 0x7c]
mov dword [esp + 0x7c], 0x94
push eax
call edi
test eax, eax
je 0x40167a
cmp dword [esp + 0x80], 5
jbe 0x4013bf
mov dword [esp + 0x1c], 1
jmp 0x40167a
mov ecx, dword [esp + 0x124]
mov edx, dword [esp + 0x120]
mov eax, dword [esp + 0x11c]
push ecx
push edx
push eax
call fcn.004016b0
add esp, 0xc
test eax, eax
jl 0x40167a
cmp eax, 1
jg 0x40167a
mov edi, dword [0x4030c8]
lea ecx, [esp + 0x10]
push ecx
push 0
lea edx, [esp + 0x28]
push 0
push edx
push ebp
mov dword [esp + 0x24], 0
call edi
mov eax, dword [esp + 0x10]
test eax, eax
je 0x40167a
push eax
push 8
call ebx
push eax
call dword [0x403088]
mov ebx, eax
test ebx, ebx
mov dword [esp + 0x40], ebx
je 0x401674
mov eax, dword [esp + 0x10]
push 0
push eax
lea ecx, [esp + 0x28]
push ebx
push ecx
push ebp
call edi
test eax, eax
je 0x401664
push 0x10
push 0
push ebx
push section.PAGECONS
call dword [0x4030c4]
mov edi, eax
cmp edi, 0xffffffff
je 0x40151b
lea edx, [esp + 0x44]
mov dword [esp + 0x18], 0
push edx
push 0
push edi
call dword [0x4030c0]
test eax, eax
je 0x401514
mov ebx, dword [0x4030b4]
lea eax, [esp + 0x60]
xor ebp, ebp
push eax
push ebp
lea ecx, [esp + 0x4c]
push section.PAGECONS
push ecx
push edi
call ebx
test eax, eax
je 0x4014f2
push 2
lea edx, [esp + 0x64]
push 0
push edx
push edi
call dword [0x4030b0]
mov esi, eax
cmp esi, 0xffffffff
je 0x4014da
lea eax, [esp + 0x3c]
push 4
push eax
push 4
push 0
push str.Reserved
push esi
call dword [0x403004]
push esi
call dword [0x403008]
lea ecx, [esp + 0x60]
inc ebp
push ecx
push ebp
lea edx, [esp + 0x4c]
push section.PAGECONS
push edx
push edi
call ebx
test eax, eax
jne 0x4014a5
mov eax, dword [esp + 0x18]
lea ecx, [esp + 0x44]
inc eax
push ecx
push eax
push edi
mov dword [esp + 0x24], eax
call dword [0x4030c0]
test eax, eax
jne 0x40148c
mov ebp, dword [esp + 0x14]
mov ebx, dword [esp + 0x40]
push edi
call dword [0x4030ac]
mov esi, dword [0x40308c]
push ebx
push 0
call esi
push eax
call dword [0x403080]
mov edx, dword [esp + 0x34]
push 0
push edx
call dword [0x403040]
lea eax, [esp + 0x10]
mov edi, dword [0x4030bc]
push eax
push 0
push 0
push 0
lea ecx, [esp + 0x30]
push 0x11
push ecx
push ebp
mov dword [esp + 0x2c], 0
call edi
mov eax, dword [esp + 0x10]
test eax, eax
jbe 0x401602
mov ebx, dword [esp + 0x11c]
mov ebp, dword [0x403084]
push ebx
call ebp
mov edx, dword [esp + 0x10]
lea eax, [edx + eax + 1]
push eax
push 8
mov dword [esp + 0x18], eax
call esi
push eax
call dword [0x403088]
mov esi, eax
test esi, esi
je 0x40168a
mov eax, dword [esp + 0x10]
mov edx, dword [esp + 0x14]
push 0
push eax
push esi
push 0
lea ecx, [esp + 0x30]
push 0x11
push ecx
push edx
call edi
test eax, eax
je 0x401674
mov al, byte [esi]
mov edi, esi
test al, al
je 0x4015db
push ebx
push edi
call dword [0x403064]
test eax, eax
je 0x4015db
push edi
call ebp
lea edi, [edi + eax + 1]
cmp byte [edi], 0
jne 0x4015c3
cmp byte [edi], 0
jne 0x40164d
push ebx
push edi
call dword [0x403074]
mov eax, dword [esp + 0x10]
mov edx, dword [esp + 0x14]
push eax
push esi
lea ecx, [esp + 0x28]
push 0x11
push ecx
push edx
call dword [0x4030cc]
jmp 0x40164d
mov edi, dword [esp + 0x11c]
push edi
call dword [0x403084]
add eax, 2
push eax
push 8
mov dword [esp + 0x18], eax
call esi
push eax
call dword [0x403088]
mov esi, eax
test esi, esi
je 0x40168a
push edi
push esi
call dword [0x403074]
mov eax, dword [esp + 0x10]
mov edx, dword [esp + 0x14]
push eax
push esi
lea ecx, [esp + 0x28]
push 0x11
push ecx
push edx
call dword [0x4030cc]
test eax, eax
je 0x401674
mov eax, dword [esp + 0x34]
push 0
push eax
call dword [0x403044]
mov dword [esp + 0x1c], 1
jmp 0x401674
push ebx
push 0
call dword [0x40308c]
push eax
call dword [0x403080]
mov ebx, dword [0x40308c]
test esi, esi
je 0x40168a
push esi
push 0
call ebx
push eax
call dword [0x403080]
mov ecx, dword [esp + 0x14]
push ecx
call dword [0x4030ac]
mov eax, dword [esp + 0x1c]
pop edi
pop esi
pop ebp
pop ebx
add esp, 0x108
ret