Function at 0x10005ceb
Capabilities:
Get local ipv4 addresses
Query or enumerate registry value

Disassembly:
push ebp
lea ebp, [esp - 0x1b0]
sub esp, 0x230
mov eax, dword [0x100120b4]
xor eax, ebp
mov dword [ebp + 0x1ac], eax
mov eax, dword [ebp + 0x1b8]
push ebx
push esi
push edi
mov edi, dword [sym.imp.advapi32.dll_RegOpenKeyExA]
mov dword [ebp - 0x78], eax
mov eax, dword [ebp + 0x1bc]
mov dword [ebp - 0x80], eax
lea eax, [ebp - 0x5c]
push eax
push 0x20019
xor ebx, ebx
push ebx
push str.SYSTEMCurrentControlSetServicesTcpipParameters
push reloc.ws2_32.dll_bind
mov dword [ebp - 0x7c], ebx
call edi
mov esi, dword [sym.imp.advapi32.dll_RegQueryValueExA]
test eax, eax
jne 0x10005d9d
lea eax, [ebp - 0x58]
push eax
lea eax, [ebp + 0xac]
push eax
lea eax, [ebp - 0x64]
push eax
push ebx
push str.SearchList
push dword [ebp - 0x5c]
mov dword [ebp - 0x58], pe_nt_image_headers32
call esi
test eax, eax
jne 0x10005d94
lea eax, [ebp + 0xac]
push eax
call sub.msvcr100.dll_strlen
pop ecx
test eax, eax
je 0x10005d94
lea eax, [ebp + 0xac]
push eax
push dword [ebp - 0x78]
call fcn.10005c98
pop ecx
pop ecx
mov dword [ebp - 0x7c], 1
push dword [ebp - 0x5c]
call dword [sym.imp.advapi32.dll_RegCloseKey]
mov eax, 0x288
push eax
mov dword [ebp - 0x70], eax
call dword [sym.imp.msvcr100.dll_malloc]
pop ecx
mov dword [ebp - 0x60], eax
cmp eax, ebx
jne 0x10005dbc
or eax, 0xffffffff
jmp 0x10005f8e
lea ecx, [ebp - 0x70]
push ecx
push eax
call sub.IPHLPAPI.DLL_GetAdaptersInfo
cmp eax, 0x6f
jne 0x10005df6
push dword [ebp - 0x70]
push dword [ebp - 0x60]
call dword [sym.imp.msvcr100.dll_realloc]
pop ecx
pop ecx
cmp eax, ebx
jne 0x10005de9
push dword [ebp - 0x60]
call dword [sym.imp.msvcr100.dll_free]
pop ecx
jmp 0x10005db4
lea ecx, [ebp - 0x70]
push ecx
push eax
mov dword [ebp - 0x60], eax
call sub.IPHLPAPI.DLL_GetAdaptersInfo
cmp eax, ebx
jne 0x10005f7d
mov eax, dword [ebp - 0x60]
mov dword [ebp - 0x74], eax
cmp eax, ebx
je 0x10005f8c
mov eax, dword [ebp - 0x74]
add eax, 8
push eax
lea eax, [ebp - 0x54]
push str.SYSTEMCurrentControlSetServicesTcpipParametersInterfaces_s
push eax
call dword [sym.imp.msvcr100.dll_sprintf]
add esp, 0xc
lea eax, [ebp - 0x5c]
push eax
push 0x20019
push ebx
lea eax, [ebp - 0x54]
push eax
push reloc.ws2_32.dll_bind
call edi
test eax, eax
jne 0x10005f6d
lea eax, [ebp - 0x58]
push eax
lea eax, [ebp - 0x6c]
push eax
lea eax, [ebp - 0x64]
push eax
push ebx
push str.EnableDhcp
push dword [ebp - 0x5c]
mov dword [ebp - 0x6c], ebx
mov dword [ebp - 0x58], 4
call esi
cmp dword [ebp - 0x7c], ebx
jne 0x10005ee6
lea eax, [ebp - 0x58]
push eax
lea eax, [ebp + 0xac]
push eax
lea eax, [ebp - 0x64]
push eax
push ebx
push str.Domain
push dword [ebp - 0x5c]
mov byte [ebp + 0xac], bl
mov dword [ebp - 0x58], pe_nt_image_headers32
call esi
mov dword [ebp - 0x68], eax
cmp eax, ebx
jne 0x10005ea7
lea eax, [ebp + 0xac]
push eax
call sub.msvcr100.dll_strlen
pop ecx
test eax, eax
jne 0x10005ed5
cmp dword [ebp - 0x6c], ebx
je 0x10005ed0
lea eax, [ebp - 0x58]
push eax
lea eax, [ebp + 0xac]
push eax
lea eax, [ebp - 0x64]
push eax
push ebx
push str.DhcpDomain
push dword [ebp - 0x5c]
mov dword [ebp - 0x58], pe_nt_image_headers32
call esi
mov dword [ebp - 0x68], eax
cmp dword [ebp - 0x68], ebx
jne 0x10005ee6
lea eax, [ebp + 0xac]
push eax
push dword [ebp - 0x78]
call fcn.10005c98
pop ecx
pop ecx
lea eax, [ebp - 0x58]
push eax
lea eax, [ebp + 0xac]
push eax
lea eax, [ebp - 0x64]
push eax
push ebx
push str.NameServer
push dword [ebp - 0x5c]
mov byte [ebp + 0xac], bl
mov dword [ebp - 0x58], pe_nt_image_headers32
call esi
mov dword [ebp - 0x68], eax
cmp eax, ebx
jne 0x10005f25
lea eax, [ebp + 0xac]
push eax
call sub.msvcr100.dll_strlen
pop ecx
test eax, eax
jne 0x10005f53
cmp dword [ebp - 0x6c], ebx
je 0x10005f4e
lea eax, [ebp - 0x58]
push eax
lea eax, [ebp + 0xac]
push eax
lea eax, [ebp - 0x64]
push eax
push ebx
push str.DhcpNameServer
push dword [ebp - 0x5c]
mov dword [ebp - 0x58], pe_nt_image_headers32
call esi
mov dword [ebp - 0x68], eax
cmp dword [ebp - 0x68], ebx
jne 0x10005f64
lea eax, [ebp + 0xac]
push eax
push dword [ebp - 0x80]
call fcn.10005c98
pop ecx
pop ecx
push dword [ebp - 0x5c]
call dword [sym.imp.advapi32.dll_RegCloseKey]
mov eax, dword [ebp - 0x74]
mov eax, dword [eax]
mov dword [ebp - 0x74], eax
cmp eax, ebx
jne 0x10005e0c
cmp dword [ebp - 0x60], ebx
je 0x10005f8c
push dword [ebp - 0x60]
call dword [sym.imp.msvcr100.dll_free]
pop ecx
xor eax, eax
mov ecx, dword [ebp + 0x1ac]
pop edi
pop esi
xor ecx, ebp
pop ebx
call fcn.1000c212
add ebp, 0x1b0
leave
ret