Function at 0x4231d4
Capabilities:
Query or enumerate registry value

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x838
push esi
mov esi, 0x280
push esi
call sub.MSVCRT.dll_malloc
pop ecx
mov dword [ebp - 4], eax
lea ecx, [ebp - 8]
mov dword [ebp - 8], esi
push ecx
push eax
call sub.iphlpapi.dll_GetAdaptersInfo
cmp eax, 0x6f
jne 0x423214
push dword [ebp - 4]
call sub.MSVCRT.dll_free
push dword [ebp - 8]
call sub.MSVCRT.dll_malloc
pop ecx
mov dword [ebp - 4], eax
pop ecx
mov esi, dword [ebp - 4]
lea eax, [ebp - 8]
push eax
push esi
call sub.iphlpapi.dll_GetAdaptersInfo
test eax, eax
jne 0x4234af
test esi, esi
mov dword [ebp - 0xc], esi
je 0x4234ba
push ebx
push edi
mov esi, dword [ebp - 0xc]
cmp dword [esi + 0x1a0], 0x17
jne 0x42349a
and byte [ebp - 0x838], 0
mov ecx, 0x103
xor eax, eax
lea edi, [ebp - 0x837]
rep stosd dword es:[edi], eax
and byte [ebp - 0x220], 0
mov edx, 0x81
stosw word es:[edi], ax
stosb byte es:[edi], al
mov ecx, edx
xor eax, eax
lea edi, [ebp - 0x21f]
and byte [ebp - 0x428], 0
rep stosd dword es:[edi], eax
stosw word es:[edi], ax
stosb byte es:[edi], al
mov ecx, edx
xor eax, eax
lea edi, [ebp - 0x427]
add esi, 8
rep stosd dword es:[edi], eax
stosw word es:[edi], ax
stosb byte es:[edi], al
push esi
push str.SYSTEMCurrentControlSetServicesTcpipParametersInterfaces_
lea eax, [ebp - 0x838]
push 0x436a00
push eax
mov dword [ebp - 0x14], 0x208
mov dword [ebp - 0x10], 1
call sub.MSVCRT.dll_sprintf
add esp, 0x10
lea eax, [ebp - 0x14]
mov edi, dword [sym.imp.SHLWAPI.dll_SHGetValueA]
mov ebx, reloc.WS2_32.dll_bind
push eax
lea eax, [ebp - 0x220]
push eax
lea eax, [ebp - 0x10]
push eax
lea eax, [ebp - 0x838]
push str.NameServer
push eax
push ebx
call edi
test eax, eax
jne 0x4233aa
lea eax, [ebp - 0x220]
push 0x4369c0
push eax
call sub.MSVCRT.dll_strstr
pop ecx
test eax, eax
pop ecx
je 0x4233aa
cmp dword [0x441ff4], 0
je 0x42339b
mov eax, dword [0x441fd4]
mov eax, dword [eax]
cmp eax, 3
je 0x423330
mov ecx, dword [0x441fdc]
cmp dword [ecx], 0
jne 0x42339b
cmp eax, 3
jle 0x42339b
call dword [sym.imp.WS2_32.dll_WSAGetLastError]
mov edi, eax
call dword [sym.imp.KERNEL32.dll_GetLastError]
cmp dword [0x43d8ac], 0
mov ebx, eax
jge 0x423353
mov eax, dword [0x441fa0]
mov dword [0x43d8ac], eax
call fcn.0041c4b1
test eax, eax
je 0x42338d
push 3
push dword [0x43d8ac]
push 0x66b
push str.C:_build_rel_sp_8_4_6_2_srcwindowsSHAREDutility_apiext.cpp
call fcn.0041c4e1
lea eax, [ebp - 0x220]
push eax
push esi
push str.Save_PPP_DNS:_adapter_is__s__dns_is__s._n
call fcn.0041c506
add esp, 0x1c
call fcn.0041c4cc
push edi
call dword [sym.imp.WS2_32.dll_WSASetLastError]
push ebx
call dword [sym.imp.KERNEL32.dll_SetLastError]
push 1
push 0
lea eax, [ebp - 0x220]
jmp 0x423490
lea eax, [ebp - 0x18]
mov dword [ebp - 0x18], 0x208
push eax
lea eax, [ebp - 0x428]
push eax
lea eax, [ebp - 0x10]
push eax
lea eax, [ebp - 0x838]
push str.DhcpNameServer
push eax
push ebx
call edi
test eax, eax
jne 0x42349a
lea eax, [ebp - 0x428]
push 0x4369c0
push eax
call sub.MSVCRT.dll_strstr
pop ecx
test eax, eax
pop ecx
je 0x42349a
cmp dword [0x441ff4], 0
je 0x423486
mov eax, dword [0x441fd4]
mov eax, dword [eax]
cmp eax, 3
je 0x42341b
mov ecx, dword [0x441fdc]
cmp dword [ecx], 0
jne 0x423486
cmp eax, 3
jle 0x423486
call dword [sym.imp.WS2_32.dll_WSAGetLastError]
mov edi, eax
call dword [sym.imp.KERNEL32.dll_GetLastError]
cmp dword [0x43d8ac], 0
mov ebx, eax
jge 0x42343e
mov eax, dword [0x441fa0]
mov dword [0x43d8ac], eax
call fcn.0041c4b1
test eax, eax
je 0x423478
push 3
push dword [0x43d8ac]
push 0x674
push str.C:_build_rel_sp_8_4_6_2_srcwindowsSHAREDutility_apiext.cpp
call fcn.0041c4e1
lea eax, [ebp - 0x428]
push eax
push esi
push str.Save_PPP_DNS:_adapter_is__s__dns_is__s._n
call fcn.0041c506
add esp, 0x1c
call fcn.0041c4cc
push edi
call dword [sym.imp.WS2_32.dll_WSASetLastError]
push ebx
call dword [sym.imp.KERNEL32.dll_SetLastError]
push 1
push 1
lea eax, [ebp - 0x428]
push eax
push esi
call fcn.00422f88
add esp, 0x10
mov eax, dword [ebp - 0xc]
mov eax, dword [eax]
test eax, eax
mov dword [ebp - 0xc], eax
jne 0x423236
mov esi, dword [ebp - 4]
pop edi
pop ebx
test esi, esi
je 0x4234ba
push esi
call sub.MSVCRT.dll_free
pop ecx
pop esi
leave
ret