Function at 0x41b2c0
Capabilities:
Persist via windows service
Set registry value

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x634
mov eax, dword [0x4a39f8]
xor eax, ebp
mov dword [ebp - 4], eax
push edi
push 0x208
xor edi, edi
lea ecx, [ebp - 0x20e]
xor eax, eax
push edi
push ecx
mov word [ebp - 0x210], ax
call fcn.00405300
push 0x208
lea eax, [ebp - 0x41a]
xor edx, edx
push edi
push eax
mov word [ebp - 0x41c], dx
call fcn.00405300
push str.VNL_SetDHCPFilePaths:
call fcn.00434640
push str.VNL_SetDHCPFilePaths:__no_args_
push 0x80
call fcn.004343f0
push 1
push str.vmnetdhcp.conf
lea ecx, [ebp - 0x210]
push 0x105
push ecx
call fcn.00417260
add esp, 0x34
test eax, eax
jne 0x41b364
push str.VNL_SetDHCPFilePaths:_couldnt_obtain_config_file_path
push 1
call fcn.004343f0
add esp, 8
xor eax, eax
pop edi
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.0040506e
mov esp, ebp
pop ebp
ret
lea edx, [ebp - 0x210]
push edx
push str.VNL_SetDHCPFilePaths:_got_config_path:__S
push 0x10
call fcn.004343f0
push 1
push str.vmnetdhcp.leases
lea eax, [ebp - 0x41c]
push 0x105
push eax
call fcn.00417260
add esp, 0x1c
test eax, eax
jne 0x41b3b6
push str.VNL_SetDHCPFilePaths:_couldnt_obtain_lease_file_path
push 1
call fcn.004343f0
add esp, 8
xor eax, eax
pop edi
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.0040506e
mov esp, ebp
pop ebp
ret
lea ecx, [ebp - 0x41c]
push ecx
push str.VNL_SetDHCPFilePaths:_got_lease_path:__S
push 0x10
call fcn.004343f0
lea eax, [ebp - 0x210]
add esp, 0xc
lea ecx, [eax + 2]
mov dx, word [eax]
add eax, 2
cmp dx, di
jne 0x41b3d5
sub eax, ecx
push ebx
mov ebx, dword [0x4651b0]
sar eax, 1
push esi
lea esi, [eax + 1]
cmp esi, edi
je 0x41b50b
push 0x208
lea eax, [ebp - 0x626]
xor edx, edx
push edi
push eax
mov dword [ebp - 0x630], edi
mov word [ebp - 0x628], dx
call fcn.00405300
lea ecx, [ebp - 0x630]
push ecx
lea edx, [ebp - 0x62c]
push edx
push 7
push str.SYSTEMCurrentControlSetServicesVMnetDHCPParameters
push 0x80000002
call fcn.00410720
mov edi, eax
add esp, 0x20
test edi, edi
je 0x41b464
call ebx
push str.SYSTEMCurrentControlSetServicesVMnetDHCPParameters
push eax
push edi
push str.SetDHCPServiceParameter:_Could_not_create_open_DHCP_REG_PATH_key:_0x_08x_0x_08x__S
push 1
call fcn.004343f0
mov dword [ebp - 0x62c], 0
jmp 0x41b52a
mov edi, 1
push str.SYSTEMCurrentControlSetServicesVMnetDHCPParameters
cmp dword [ebp - 0x630], edi
jne 0x41b47f
push str.SetDHCPServiceParameter:_created_new_key:__S
push 2
jmp 0x41b486
push str.SetDHCPServiceParameter:_opened_existing_key:__S
push 0x20
call fcn.004343f0
mov edx, dword [ebp - 0x62c]
add esp, 0xc
lea eax, [esi + esi]
push eax
lea ecx, [ebp - 0x210]
push ecx
push 2
push 0
push str.ConfFile
push edx
call dword [0x465094]
test eax, eax
je 0x41b4e2
call ebx
push eax
push str.ConfFile
push str.SetDHCPServiceParameter:_Could_not_set_key_for_DHCP_parameter__S:_0x_08x
push edi
call fcn.004343f0
mov eax, dword [ebp - 0x62c]
add esp, 0x10
push eax
call dword [0x4650d0]
mov dword [ebp - 0x62c], 0
jmp 0x41b52d
push str.ConfFile
push str.SetDHCPServiceParameter:_set_key_for_DHCP__S
push 0x10
call fcn.004343f0
mov ecx, dword [ebp - 0x62c]
add esp, 0xc
push ecx
call dword [0x4650d0]
mov dword [ebp - 0x62c], edi
jmp 0x41b52d
push edi
lea edx, [ebp - 0x210]
push edx
push str.ConfFile
push str.SetDHCPServiceParameter:_invalid_parameters:_0x_08x_0x_08x_0x_08x
push 1
call fcn.004343f0
mov dword [ebp - 0x62c], edi
add esp, 0x14
lea eax, [ebp - 0x41c]
lea edx, [eax + 2]
mov cx, word [eax]
add eax, 2
test cx, cx
jne 0x41b536
sub eax, edx
sar eax, 1
lea edi, [eax + 1]
xor esi, esi
cmp edi, esi
je 0x41b653
push 0x208
lea ecx, [ebp - 0x626]
xor eax, eax
push esi
push ecx
mov dword [ebp - 0x634], esi
mov word [ebp - 0x628], ax
call fcn.00405300
lea edx, [ebp - 0x634]
push edx
lea eax, [ebp - 0x630]
push eax
push 7
push str.SYSTEMCurrentControlSetServicesVMnetDHCPParameters
push 0x80000002
call fcn.00410720
mov esi, eax
add esp, 0x20
test esi, esi
je 0x41b5ba
call ebx
push str.SYSTEMCurrentControlSetServicesVMnetDHCPParameters
push eax
push esi
push str.SetDHCPServiceParameter:_Could_not_create_open_DHCP_REG_PATH_key:_0x_08x_0x_08x__S
push 1
call fcn.004343f0
add esp, 0x14
xor esi, esi
jmp 0x41b66f
mov esi, 1
push str.SYSTEMCurrentControlSetServicesVMnetDHCPParameters
cmp dword [ebp - 0x634], esi
jne 0x41b5d5
push str.SetDHCPServiceParameter:_created_new_key:__S
push 2
jmp 0x41b5dc
push str.SetDHCPServiceParameter:_opened_existing_key:__S
push 0x20
call fcn.004343f0
mov eax, dword [ebp - 0x630]
add esp, 0xc
lea ecx, [edi + edi]
push ecx
lea edx, [ebp - 0x41c]
push edx
push 2
push 0
push str.LeaseFile
push eax
call dword [0x465094]
test eax, eax
je 0x41b630
call ebx
push eax
push str.LeaseFile
push str.SetDHCPServiceParameter:_Could_not_set_key_for_DHCP_parameter__S:_0x_08x
push esi
call fcn.004343f0
mov ecx, dword [ebp - 0x630]
add esp, 0x10
push ecx
call dword [0x4650d0]
xor esi, esi
jmp 0x41b66f
push str.LeaseFile
push str.SetDHCPServiceParameter:_set_key_for_DHCP__S
push 0x10
call fcn.004343f0
mov edx, dword [ebp - 0x630]
add esp, 0xc
push edx
call dword [0x4650d0]
jmp 0x41b66f
push esi
lea eax, [ebp - 0x41c]
push eax
push str.LeaseFile
push str.SetDHCPServiceParameter:_invalid_parameters:_0x_08x_0x_08x_0x_08x
push 1
call fcn.004343f0
add esp, 0x14
call fcn.00434690
cmp dword [ebp - 0x62c], 0
je 0x41b697
test esi, esi
je 0x41b697
pop esi
pop ebx
mov eax, 1
pop edi
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.0040506e
mov esp, ebp
pop ebp
ret
mov ecx, dword [ebp - 4]
pop esi
pop ebx
xor ecx, ebp
xor eax, eax
pop edi
call fcn.0040506e
mov esp, ebp
pop ebp
ret