Function at 0x42ecd0
Capabilities:
Query or enumerate registry key
Query or enumerate registry value

Disassembly:
push ebp
mov ebp, esp
mov eax, 0x2268
call fcn.004bd3e0
mov eax, dword [0x53d190]
xor eax, ebp
mov dword [ebp - 4], eax
push ebx
push esi
lea eax, [ebp - 0x225c]
mov dword [ebp - 0x2268], ecx
push eax
push 0x20019
xor ebx, ebx
mov dword [ebp - 0x225c], 0
push ebx
push str.SOFTWAREK7_ComputingK7TotalSecurityProductsFireWallNetWorks
push reloc.OLEAUT32.dll_SysReAllocString
or esi, 0xffffffff
mov dword [ebp - 0x2258], 0
call dword [sym.imp.ADVAPI32.dll_RegOpenKeyExW]
test eax, eax
jne 0x42f086
push edi
push 0x2000
push 1
call fcn.004c9fda
mov edi, eax
add esp, 8
mov dword [ebp - 0x2264], edi
test edi, edi
je 0x42f085
push 0x535bec
push edi
call fcn.00422df0
add esp, 8
lea esi, [edi + eax]
xor edi, edi
push 0x104
lea eax, [ebp - 0x24c]
push eax
push edi
push dword [ebp - 0x225c]
call dword [sym.imp.ADVAPI32.dll_RegEnumKeyW]
test eax, eax
jne 0x42f054
lea eax, [ebp - 0x2258]
inc edi
push eax
push 0x20019
push 0
lea eax, [ebp - 0x24c]
push eax
push dword [ebp - 0x225c]
call dword [sym.imp.ADVAPI32.dll_RegOpenKeyExW]
test eax, eax
jne 0x42f054
mov dword [ebp - 0x2254], eax
lea eax, [ebp - 0x2250]
push eax
lea eax, [ebp - 0x2254]
mov dword [ebp - 0x2250], 4
push eax
push 0
push 0
push 0x535bf0
push dword [ebp - 0x2258]
call dword [sym.imp.ADVAPI32.dll_RegQueryValueExW]
test eax, eax
jne 0x42f01d
cmp dword [ebp - 0x2254], eax
je 0x42f01d
test ebx, ebx
mov ecx, 0x2c
mov eax, 0x20
cmovne eax, ecx
push eax
push str._c
push esi
call fcn.00422df0
add esp, 0xc
mov dword [ebp - 0x2250], 0x40
add esi, eax
inc ebx
lea eax, [ebp - 0x2250]
push eax
lea eax, [ebp - 0x44]
push eax
push 0
push 0
push str.GatewayPhyAddr
push dword [ebp - 0x2258]
call dword [sym.imp.ADVAPI32.dll_RegQueryValueExA]
test eax, eax
jne 0x42ee97
push 0x1000
push eax
lea eax, [ebp - 0x124c]
push eax
call fcn.004beb60
lea edx, [ebp - 0x44]
mov dword [ebp - 0x2260], 0x1000
add esp, 0xc
lea ecx, [edx + 1]
mov al, byte [edx]
inc edx
test al, al
jne 0x42ee66
lea eax, [ebp - 0x2260]
sub edx, ecx
push eax
lea eax, [ebp - 0x124c]
inc edx
push eax
lea ecx, [ebp - 0x44]
call fcn.00422ac0
push eax
push str._GWMAC_:___s__
push esi
call fcn.00422df0
add esp, 0x14
add esi, eax
lea eax, [ebp - 0x2250]
mov dword [ebp - 0x2250], 0x40
push eax
lea eax, [ebp - 0x44]
push eax
push 0
push 0
push str.DHCPSrvPhyAddr
push dword [ebp - 0x2258]
call dword [sym.imp.ADVAPI32.dll_RegQueryValueExA]
test eax, eax
jne 0x42ef21
push 0x1000
push eax
lea eax, [ebp - 0x224c]
push eax
call fcn.004beb60
lea edx, [ebp - 0x44]
mov dword [ebp - 0x2260], 0x1000
add esp, 0xc
lea ecx, [edx + 1]
nop word [eax + eax]
mov al, byte [edx]
inc edx
test al, al
jne 0x42eef0
lea eax, [ebp - 0x2260]
sub edx, ecx
push eax
lea eax, [ebp - 0x224c]
inc edx
push eax
lea ecx, [ebp - 0x44]
call fcn.00422ac0
push eax
push str._DHMAC_:___s__
push esi
call fcn.00422df0
add esp, 0x14
add esi, eax
lea eax, [ebp - 0x2250]
mov dword [ebp - 0x2254], 0
push eax
lea eax, [ebp - 0x2254]
mov dword [ebp - 0x2250], 4
push eax
push 0
push 0
push str.InternetConnection
push dword [ebp - 0x2258]
call dword [sym.imp.ADVAPI32.dll_RegQueryValueExA]
test eax, eax
jne 0x42ef72
push dword [ebp - 0x2254]
push str._INET_:__u_
push esi
call fcn.00422df0
add esp, 0xc
add esi, eax
lea eax, [ebp - 0x2250]
mov dword [ebp - 0x2254], 0
push eax
lea eax, [ebp - 0x2254]
mov dword [ebp - 0x2250], 4
push eax
push 0
push 0
push str.WiFiSecure
push dword [ebp - 0x2258]
call dword [sym.imp.ADVAPI32.dll_RegQueryValueExA]
test eax, eax
jne 0x42efc3
push dword [ebp - 0x2254]
push str._WIFI_:__u_
push esi
call fcn.00422df0
add esp, 0xc
add esi, eax
lea eax, [ebp - 0x2250]
mov dword [ebp - 0x2254], 0
push eax
lea eax, [ebp - 0x2254]
mov dword [ebp - 0x2250], 4
push eax
push 0
push 0
push str.AdapterType
push dword [ebp - 0x2258]
call dword [sym.imp.ADVAPI32.dll_RegQueryValueExA]
push dword [ebp - 0x2254]
push str._IFTYPE_:__u
push esi
call fcn.00422df0
add esi, eax
push 0x5344f0
push esi
call fcn.00422df0
add esp, 0x14
add esi, eax
push dword [ebp - 0x2258]
call dword [sym.imp.ADVAPI32.dll_RegCloseKey]
push 0x104
lea eax, [ebp - 0x24c]
mov dword [ebp - 0x2258], 0
push eax
push edi
push dword [ebp - 0x225c]
call dword [sym.imp.ADVAPI32.dll_RegEnumKeyW]
test eax, eax
je 0x42ed81
push 0x535ca4
push esi
call fcn.00422df0
mov eax, dword [ebp - 0x2264]
add esp, 8
test ebx, ebx
je 0x42f076
mov ecx, dword [ebp - 0x2268]
mov dword [ecx], eax
xor eax, eax
xor esi, esi
test eax, eax
je 0x42f085
push eax
call fcn.004c4990
add esp, 4
pop edi
mov ecx, dword [ebp - 0x225c]
test ecx, ecx
je 0x42f097
push ecx
call dword [sym.imp.ADVAPI32.dll_RegCloseKey]
mov ecx, dword [ebp - 4]
mov eax, esi
pop esi
xor ecx, ebp
pop ebx
call fcn.004bcc56
mov esp, ebp
pop ebp
ret