Function at 0x43cc20
Capabilities:
Check if file exists
Query or enumerate registry value

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x220
mov eax, dword [0x4e7018]
xor eax, ebp
mov dword [ebp - 4], eax
push ebx
mov ebx, dword [ebp + 8]
lea eax, [ebp - 0x210]
push esi
mov esi, dword [ebp + 0xc]
push edi
mov edi, dword [ebp + 0x14]
push 0x20a
push 0
push eax
call fcn.0040f160
add esp, 0xc
mov dword [ebp - 0x218], 0
mov dword [ebp - 0x21c], 4
mov dword [ebp - 0x214], 0
test ebx, ebx
jne 0x43cc9e
push str.guid
push str.ReadAdapterBridgeFlag:__s_failed_n
push 1
call fcn.004439a0
add esp, 0xc
xor eax, eax
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.00401bf1
mov esp, ebp
pop ebp
ret
test esi, esi
jne 0x43ccc9
push str.keyName
push str.ReadAdapterBridgeFlag:__s_failed_n
push 1
call fcn.004439a0
add esp, 0xc
xor eax, eax
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.00401bf1
mov esp, ebp
pop ebp
ret
test edi, edi
jne 0x43ccf4
push str.regValue
push str.ReadAdapterBridgeFlag:__s_failed_n
push 1
call fcn.004439a0
add esp, 0xc
xor eax, eax
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.00401bf1
mov esp, ebp
pop ebp
ret
mov eax, dword [ebp + 0x10]
push ebx
push str.VMnetBridge
push str.SYSTEMCurrentControlSetServices
push str._s_sParametersAdapters_s
mov dword [edi], eax
lea eax, [ebp - 0x210]
push 0x105
push eax
call fcn.004159a0
add esp, 0x18
lea eax, [ebp - 0x220]
push eax
push 1
push 0
lea eax, [ebp - 0x210]
push eax
push reloc.OLEAUT32.dll_SysReAllocString
call dword [sym.imp.ADVAPI32.dll_RegOpenKeyExW]
mov ebx, eax
test ebx, ebx
je 0x43cd9f
call dword [sym.imp.KERNEL32.dll_GetLastError]
cmp ebx, 2
je 0x43cd76
push eax
push ebx
lea eax, [ebp - 0x210]
push eax
push str.ReadAdapterBridgeFlag:_could_not_open_bridge_param_key__S:_0x_08x_0x_08x
push 1
call fcn.004439a0
add esp, 0x14
xor eax, eax
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.00401bf1
mov esp, ebp
pop ebp
ret
lea eax, [ebp - 0x210]
push eax
push str.ReadAdapterBridgeFlag:_bridge_param_key_doesnt_exist:__S
push 4
call fcn.004439a0
add esp, 0xc
xor eax, eax
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.00401bf1
mov esp, ebp
pop ebp
ret
lea eax, [ebp - 0x21c]
push eax
lea eax, [ebp - 0x218]
push eax
lea eax, [ebp - 0x214]
push eax
push 0
push esi
push dword [ebp - 0x220]
call dword [sym.imp.ADVAPI32.dll_RegQueryValueExW]
mov ebx, eax
test ebx, ebx
jne 0x43cdfa
cmp dword [ebp - 0x214], 4
jne 0x43cdfa
push dword [ebp - 0x220]
call dword [sym.imp.ADVAPI32.dll_RegCloseKey]
mov eax, dword [ebp - 0x218]
mov dword [edi], eax
lea eax, [ebx + 1]
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.00401bf1
mov esp, ebp
pop ebp
ret
call dword [sym.imp.KERNEL32.dll_GetLastError]
cmp ebx, 2
je 0x43ce1f
push dword [ebp - 0x214]
push eax
push ebx
push esi
push str.ReadAdapterBridgeFlag:_could_not_query_bridge_adapter_key__S:_0x_08x_0x_08x_0x_08x
push 1
call fcn.004439a0
add esp, 0x18
jmp 0x43ce2f
push esi
push str.ReadAdapterBridgeFlag:_bridge_adapter_value__S_doesnt_exist
push 4
call fcn.004439a0
add esp, 0xc
push dword [ebp - 0x220]
call dword [sym.imp.ADVAPI32.dll_RegCloseKey]
mov ecx, dword [ebp - 4]
xor eax, eax
pop edi
pop esi
xor ecx, ebp
pop ebx
call fcn.00401bf1
mov esp, ebp
pop ebp
ret