Function at 0x429450
Capabilities:
Query or enumerate registry value

Disassembly:
sub esp, 0xc4
lea eax, [esp + 0x10]
push ebx
push eax
push str.AssumeConnected
xor ebx, ebx
push str.softwareGator.comGatordynSettings
push reloc.WSOCK32.dll_bind
mov dword [esp + 0x24], ebx
call fcn.0042a020
mov eax, dword [esp + 0x24]
add esp, 0x10
cmp eax, ebx
je 0x42948e
mov eax, 1
pop ebx
add esp, 0xc4
ret
mov dword [esp + 0xc], 1
call fcn.00429380
test eax, eax
je 0x4296ba
lea ecx, [esp + 0x10]
push ecx
push 0x20019
push ebx
push str.SoftwareMicrosoftWindowsCurrentVersionInternet_Settings
push closesocket
call dword [sym.imp.ADVAPI32.dll_RegOpenKeyExA]
test eax, eax
jne 0x4296ba
push ebp
mov ebp, dword [sym.imp.ADVAPI32.dll_RegQueryValueExA]
push esi
lea edx, [esp + 0x20]
push edi
lea eax, [esp + 0x2c]
push edx
mov edx, dword [esp + 0x20]
lea ecx, [esp + 0x34]
push eax
push ecx
push ebx
push str.EnableAutodial
push edx
mov dword [esp + 0x3c], 4
call ebp
test eax, eax
jne 0x4296ac
cmp dword [esp + 0x2c], ebx
je 0x4296ac
mov eax, dword [0x479ef8]
mov edi, dword [sym.imp.KERNEL32.dll_GlobalAlloc]
cmp eax, 0xffffffff
jne 0x42959c
push 0x108
push 0x40
mov dword [0x479ef8], ebx
call edi
mov esi, eax
lea eax, [esp + 0x10]
lea ecx, [esp + 0x14]
push eax
push ecx
push esi
push ebx
mov dword [esi], 0x108
push ebx
mov dword [esp + 0x28], 0x108
mov dword [esp + 0x24], ebx
call dword [0x487b04]
cmp eax, 0x25b
jne 0x429581
push esi
call dword [sym.imp.KERNEL32.dll_GlobalFree]
mov edx, dword [esp + 0x14]
push edx
push 0x40
call edi
mov esi, eax
lea eax, [esp + 0x10]
lea ecx, [esp + 0x14]
push eax
push ecx
push esi
push ebx
push ebx
mov dword [esi], 0x108
call dword [0x487b04]
cmp eax, ebx
jne 0x429595
cmp dword [esp + 0x10], ebx
je 0x429595
mov dword [0x479ef8], 1
push esi
call dword [sym.imp.KERNEL32.dll_GlobalFree]
cmp dword [0x479ef8], ebx
je 0x4296ac
lea edx, [esp + 0x24]
lea eax, [esp + 0x28]
push edx
mov edx, dword [esp + 0x20]
lea ecx, [esp + 0x34]
push eax
push ecx
push ebx
push str.NoNetAutodial
push edx
mov dword [esp + 0x40], ebx
call ebp
cmp dword [esp + 0x28], ebx
je 0x4295f0
cmp dword [0x4879b8], ebx
je 0x4295f0
mov eax, dword [0x487970]
cmp eax, ebx
je 0x4295f0
lea ecx, [esp + 0x10]
push ebx
push ecx
call eax
mov dword [esp + 0x18], eax
jmp 0x4296ac
push 0x19c
push 0x40
call edi
mov esi, eax
lea edx, [esp + 0x14]
lea eax, [esp + 0x10]
push edx
push eax
mov dword [esi], 0x19c
push esi
mov dword [esp + 0x1c], 0x19c
mov dword [esp + 0x20], ebx
call dword [0x487afc]
cmp eax, 0x25b
jne 0x42964e
push esi
call dword [sym.imp.KERNEL32.dll_GlobalFree]
mov ecx, dword [esp + 0x10]
push ecx
push 0x40
call edi
mov esi, eax
lea edx, [esp + 0x14]
lea eax, [esp + 0x10]
push edx
push eax
push esi
mov dword [esi], 0x19c
call dword [0x487afc]
cmp eax, ebx
jne 0x4296a5
mov eax, dword [esp + 0x14]
mov dword [esp + 0x18], ebx
cmp eax, ebx
je 0x4296a5
xor edi, edi
cmp eax, ebx
jbe 0x4296a5
lea ebx, [esi + 4]
mov ebp, 0xa0
mov edx, dword [ebx]
lea ecx, [esp + 0x34]
push ecx
push edx
mov dword [esp + 0x3c], ebp
call dword [0x487b00]
test eax, eax
jne 0x42968c
cmp dword [esp + 0x38], 0x2000
je 0x42969d
mov eax, dword [esp + 0x14]
inc edi
add ebx, 0x19c
cmp edi, eax
jb 0x42966c
jmp 0x4296a5
mov dword [esp + 0x18], 1
push esi
call dword [sym.imp.KERNEL32.dll_GlobalFree]
mov eax, dword [esp + 0x1c]
push eax
call dword [sym.imp.ADVAPI32.dll_RegCloseKey]
pop edi
pop esi
pop ebp
mov eax, dword [esp + 0xc]
pop ebx
add esp, 0xc4
ret