Function at 0x408cbb
Capabilities:
Query or enumerate registry value

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x450
push ebx
push esi
mov esi, dword [ebp + 8]
xor ebx, ebx
push ebx
mov ecx, esi
mov eax, dword [esi + 0xc]
mov dword [ebp - 0x10], eax
call fcn.00429001
lea eax, [ebp - 0x40]
push eax
lea eax, [ebp - 0x50]
push 1
push eax
push 0x4a0518
call dword [sym.imp.SETUPAPI.dll_SetupDiClassGuidsFromNameA]
test eax, eax
jne 0x408d00
call dword [sym.imp.KERNEL32.dll_GetLastError]
push eax
push str.SetupDiClassGuidsFromName___ERROR_d
jmp 0x408d21
push 0xa
push ebx
lea eax, [ebp - 0x50]
push ebx
push eax
call dword [sym.imp.SETUPAPI.dll_SetupDiGetClassDevsA]
cmp eax, ebx
mov dword [ebp - 4], eax
jne 0x408d33
call dword [sym.imp.KERNEL32.dll_GetLastError]
push eax
push str.SetupDiGetClassDevs___ERROR_d
push 0x4ae550
call fcn.00428736
add esp, 0xc
jmp 0x408f41
push edi
push 6
pop ecx
xor eax, eax
lea edi, [ebp - 0x38]
mov dword [ebp - 8], ebx
rep stosd dword es:[edi], eax
lea eax, [ebp - 0x3c]
mov dword [ebp - 0x3c], 0x1c
push eax
push ebx
push dword [ebp - 4]
call dword [sym.imp.SETUPAPI.dll_SetupDiEnumDeviceInfo]
test eax, eax
je 0x408ef9
mov esi, 0x200
push ebx
lea eax, [ebp - 0x250]
mov edi, dword [sym.imp.SETUPAPI.dll_SetupDiGetDeviceRegistryPropertyA]
push esi
push eax
push ebx
lea eax, [ebp - 0x3c]
push 0x16
push eax
mov byte [ebp - 0x250], bl
push dword [ebp - 4]
call edi
test eax, eax
jne 0x408d96
call dword [sym.imp.KERNEL32.dll_GetLastError]
push eax
push str.SetupDiGetDeviceRegistryProperty_SPDRP_ENMERATOR_NAME__ERROR_d
jmp 0x408deb
lea eax, [ebp - 0x250]
push 0x4a0488
push eax
call dword [sym.imp.MSVCRT.dll__stricmp]
pop ecx
test eax, eax
pop ecx
lea eax, [ebp - 0x250]
je 0x408dcc
push eax
push dword [ebp - 8]
push str.AddAdrs_2__u__s
push 0x4ae550
call fcn.0042874e
jmp 0x408e52
push ebx
push esi
push eax
push ebx
lea eax, [ebp - 0x3c]
push 9
push eax
push dword [ebp - 4]
call edi
test eax, eax
jne 0x408dfd
call dword [sym.imp.KERNEL32.dll_GetLastError]
push eax
push str.SetupDiGetDeviceRegistryProperty_SPDRP_DRIVER__ERROR_d
push 0x4ae550
call fcn.00428736
add esp, 0xc
jmp 0x408eca
lea eax, [ebp - 0x250]
push eax
push str.SystemCurrentControlSetControlClass
lea eax, [ebp - 0x450]
push 0x4a0410
push eax
call dword [sym.imp.USER32.dll_wsprintfA]
add esp, 0x10
lea eax, [ebp - 0xc]
push eax
push 1
lea eax, [ebp - 0x450]
push ebx
push eax
push reloc.WS2_32.dll_bind
call dword [sym.imp.ADVAPI32.dll_RegOpenKeyExA]
cmp eax, ebx
je 0x408e57
push eax
lea eax, [ebp - 0x450]
push eax
push str.RegOpenKey__s__Error_d
push 0x4ae550
call fcn.00428736
add esp, 0x10
jmp 0x408eca
lea eax, [ebp - 0x18]
mov dword [ebp - 0x18], esi
push eax
lea eax, [ebp - 0x250]
push eax
lea eax, [ebp - 0x14]
push eax
push ebx
push str.NetCfgInstanceId
mov byte [ebp - 0x250], bl
push dword [ebp - 0xc]
call dword [sym.imp.ADVAPI32.dll_RegQueryValueExA]
cmp eax, ebx
jne 0x408eae
cmp dword [ebp - 0x14], 1
jne 0x408eae
lea eax, [ebp - 0x20]
push eax
lea eax, [ebp - 0x250]
push eax
call fcn.00408f45
pop ecx
test al, al
pop ecx
je 0x408ec1
mov ecx, dword [ebp + 8]
lea eax, [ebp - 0x20]
push 6
push eax
call fcn.00428fab
jmp 0x408ec1
push eax
push str.RegQueryValueEx__NetCfgInstanceId___ERROR_d
push 0x4ae550
call fcn.00428736
add esp, 0xc
push dword [ebp - 0xc]
call dword [sym.imp.ADVAPI32.dll_RegCloseKey]
inc dword [ebp - 8]
push 6
pop ecx
xor eax, eax
lea edi, [ebp - 0x38]
rep stosd dword es:[edi], eax
lea eax, [ebp - 0x3c]
mov dword [ebp - 0x3c], 0x1c
push eax
push dword [ebp - 8]
push dword [ebp - 4]
call dword [sym.imp.SETUPAPI.dll_SetupDiEnumDeviceInfo]
test eax, eax
jne 0x408d63
mov esi, dword [ebp + 8]
call dword [sym.imp.KERNEL32.dll_GetLastError]
cmp eax, 0x103
je 0x408f19
push eax
push str.SetupDiEnumDeviceInfo___ERROR_d
push 0x4ae550
call fcn.00428736
add esp, 0xc
push dword [ebp - 4]
call dword [sym.imp.SETUPAPI.dll_SetupDiDestroyDeviceInfoList]
mov eax, dword [esi + 0xc]
mov edi, dword [ebp - 0x10]
sub eax, edi
push 6
sub eax, 4
xor edx, edx
pop ecx
div ecx
mov ecx, esi
mov ebx, eax
mov eax, dword [esi]
call dword [eax + 0x14]
mov dword [eax + edi], ebx
pop edi
pop esi
pop ebx
leave
ret