Function at 0x419d80
Capabilities:
Get networking parameters
Query environment variable

Disassembly:
push ebp
mov ebp, eax
push edi
push esi
push ebx
sub esp, 0xec
mov dword [eax], 0
mov eax, dword [0x49082c]
mov dword [esp + 0x38], 0
mov ebx, dword [0x491480]
mov dword [esp + 0x3c], 0
mov dword [esp + 0x40], 0
mov dword [esp + 0x44], 0x491490
mov dword [esp + 0x48], 0x490848
mov dword [esp + 0x4c], 0x490834
test eax, eax
jne 0x419e50
test ebx, ebx
je 0x419ea0
lea eax, [esp + 0x50]
mov dword [esp + 0x24], eax
mov eax, dword [0x4908d0]
test eax, eax
je 0x419e40
mov eax, dword [esp + 0x24]
mov dword [esp + 0xc], 0
mov dword [esp], ebx
mov dword [esp + 0x14], eax
lea eax, [esp + 0x38]
mov dword [esp + 0x10], eax
mov eax, dword [0x491488]
mov dword [esp + 8], eax
mov eax, dword [0x491484]
mov dword [esp + 4], eax
call fcn.0043a720
test eax, eax
je 0x41a260
mov dword [ebp], eax
xor ebx, ebx
add esp, 0xec
mov eax, ebx
pop ebx
pop esi
pop edi
pop ebp
ret
mov dword [0x4908d0], 0x1e
jmp 0x419dea
mov dword [0x49082c], 0
test ebx, ebx
je 0x419ea0
xor eax, eax
mov ecx, 0x24
mov edi, 0x491480
mov edx, dword [0x491488]
mov esi, dword [0x491484]
rep stosd dword es:[edi], eax
mov dword [esp], edx
call fcn.00435f10
mov dword [esp], esi
call fcn.00433050
mov dword [esp], ebx
call fcn.00433d60
mov ebx, dword [0x491480]
test ebx, ebx
jne 0x419dd9
nop
lea edi, [esp + 0x50]
xor eax, eax
mov ecx, 0x24
mov dword [esp + 0x24], edi
rep stosd dword es:[edi], eax
lea eax, [esp + 0x30]
mov dword [esp], eax
call fcn.00433b50
mov dword [esp + 0x28], eax
mov dword [esp + 0x50], eax
test eax, eax
je 0x41a2f0
mov edi, dword [0x4908bc]
test edi, edi
je 0x41a0a0
cmp byte [0x490880], 0
je 0x41a1a0
mov eax, dword [0x490828]
test eax, eax
je 0x41a24c
mov dword [esp + 4], 0x490880
mov dword [esp], str.__s_:53
call fcn.00457890
mov dword [esp + 0x28], eax
test eax, eax
je 0x41a270
mov dword [esp + 4], eax
mov eax, dword [esp + 0x50]
mov dword [esp], eax
call fcn.00433de0
call fcn.00419c80
mov ebx, eax
test eax, eax
jne 0x41a286
mov eax, dword [esp + 0x50]
mov dword [eax + 0x5c4], 2
mov eax, dword [esp + 0x28]
mov dword [esp], eax
call sub.libgcrypt_20.dll_gcry_free
mov eax, dword [0x490828]
mov dword [esp + 4], str.127.0.0.1
mov dword [esp], str.__s_:_d
mov dword [esp + 8], eax
call fcn.00457890
mov dword [esp + 0x28], eax
test eax, eax
je 0x41a344
mov dword [esp + 4], eax
lea eax, [esp + 0x60]
mov dword [esp], eax
call fcn.00433de0
call fcn.00419c80
mov ebx, eax
test eax, eax
jne 0x41a35c
lea eax, [esp + 0x30]
mov dword [esp], eax
call fcn.00433010
mov dword [esp + 0x54], eax
test eax, eax
je 0x41a381
mov dword [esp], str.SystemRoot
call sub.msvcrt.dll_getenv
mov dword [esp], str._sSystem32driversetchosts
mov dword [esp + 4], eax
call fcn.00457890
mov esi, eax
test eax, eax
je 0x41a3b0
mov dword [esp + 4], eax
mov eax, dword [esp + 0x54]
mov dword [esp], eax
call fcn.00433780
mov dword [esp], esi
mov dword [esp + 0x30], eax
call sub.libgcrypt_20.dll_gcry_free
mov eax, dword [esp + 0x30]
test eax, eax
jne 0x41a320
mov esi, dword [0x4908c4]
mov edx, dword [0x4908c0]
mov eax, dword [esp + 0x50]
test esi, esi
je 0x41a2c0
mov byte [eax + 0x5c1], 0
test edx, edx
je 0x41a2d7
lea ecx, [esp + 0x30]
mov dword [esp], eax
mov dword [esp + 4], ecx
call fcn.004360b0
mov dword [esp + 0x58], eax
test eax, eax
je 0x41a43e
mov ecx, 0x24
mov edi, 0x491480
mov esi, dword [esp + 0x24]
rep movsd dword es:[edi], dword [esi]
mov ecx, dword [0x4908d4]
test ecx, ecx
je 0x41a07e
mov edx, dword [0x4908bc]
mov eax, str.__tor_mode_
mov dword [esp], str.dns:_libdns_initialized_s_n
test edx, edx
mov edx, 0x480ee8
cmove eax, edx
mov dword [esp + 4], eax
call fcn.0044ddd0
mov eax, dword [esp + 0x28]
mov dword [esp], eax
call sub.libgcrypt_20.dll_gcry_free
test ebx, ebx
jne 0x419e29
mov ebx, dword [0x491480]
jmp 0x419de1
mov dword [esp], 0x800
mov dword [esp + 0x34], 0x800
call sub.libgcrypt_20.dll_gcry_malloc
mov dword [esp + 0x28], eax
test eax, eax
je 0x41a3e0
mov esi, eax
lea eax, [esp + 0x34]
mov dword [esp], esi
add esi, 0x10c
mov dword [esp + 4], eax
call sub.IPHLPAPI.DLL_GetNetworkParams
sub esp, 8
test eax, eax
jne 0x41a400
mov eax, dword [0x4908d4]
lea ebx, [esi + 4]
test eax, eax
jne 0x41a183
mov eax, edi
mov dword [esp + 4], ebx
shl eax, 7
add eax, dword [esp + 0x50]
mov dword [esp], eax
call fcn.00433de0
call fcn.00419c80
mov edx, eax
test eax, eax
jne 0x41a140
mov esi, dword [esi]
add edi, 1
test esi, esi
je 0x41a121
cmp edi, 2
jbe 0x41a0e3
mov eax, dword [esp + 0x28]
mov ebx, edx
mov dword [esp], eax
call sub.libgcrypt_20.dll_gcry_free
mov dword [esp + 0x28], 0
jmp 0x419f96
mov dword [esp], eax
mov dword [esp + 0x2c], eax
call sub.libgpg_error_0.dll_gpg_strerror
mov dword [esp + 8], ebx
mov dword [esp + 0xc], eax
mov dword [esp + 4], edi
mov dword [esp], str.failed_to_set_nameserver__d___s:__s_n
call fcn.0044dbb0
cmp edi, 2
mov esi, dword [esi]
mov edx, dword [esp + 0x2c]
ja 0x41a121
test esi, esi
je 0x41a121
mov eax, dword [0x4908d4]
lea ebx, [esi + 4]
test eax, eax
je 0x41a0f3
mov dword [esp + 8], ebx
mov dword [esp + 4], edi
mov dword [esp], str.dns:_dnsserver__d___s_n
call fcn.0044ddd0
jmp 0x41a0f3
xor eax, eax
mov dword [0x490880], 0x2e382e38
mov dword [0x490884], 0x382e38
mov dword [0x490888], 0
mov dword [0x49088c], 0
mov dword [0x490890], 0
mov dword [0x490894], 0
mov dword [0x490898], 0
mov dword [0x49089c], 0
mov dword [0x4908a0], 0
mov dword [0x4908a4], 0
mov dword [0x4908a8], 0
mov dword [0x4908ac], 0
mov dword [0x4908b0], 0
mov dword [0x4908b4], 0
mov word [0x4908b8], ax
mov byte [0x4908ba], 0
mov byte [0x4908bb], 0
mov dword [0x49082c], 1
mov dword [0x490828], 0x235a
jmp 0x419ef5
mov eax, dword [esp + 0x50]
call fcn.00419c80
mov ebx, eax
jmp 0x419e29
call sub.libgpg_error_0.dll_gpg_err_code_from_syserror
test eax, eax
je 0x419f34
movzx ebx, ax
or ebx, 0xa000000
mov dword [esp], ebx
call sub.libgpg_error_0.dll_gpg_strerror
mov dword [esp], str.failed_to_set_nameserver__s:__s_n
mov dword [esp + 8], eax
mov eax, dword [esp + 0x28]
mov dword [esp + 4], eax
call fcn.0044dbb0
mov eax, dword [esp + 0x28]
mov dword [esp], eax
call sub.libgcrypt_20.dll_gcry_free
add esp, 0xec
mov eax, ebx
pop ebx
pop esi
pop edi
pop ebp
ret
test edx, edx
je 0x41a2d0
mov byte [eax + 0x5c1], 1
jmp 0x41a023
mov byte [eax + 0x5c1], 0
lea ecx, [esp + 0x30]
mov dword [esp], eax
mov dword [esp + 4], ecx
call fcn.00436340
jmp 0x41a033
mov eax, dword [esp + 0x30]
call fcn.00419c80
mov dword [esp], eax
mov ebx, eax
call sub.libgpg_error_0.dll_gpg_strerror
mov dword [esp], str.failed_to_allocate_DNS_resconf_object:__s_n
mov dword [esp + 4], eax
call fcn.0044dbb0
jmp 0x41a07e
call fcn.00419c80
xor ebx, ebx
mov dword [esp], eax
call sub.libgpg_error_0.dll_gpg_strerror
mov dword [esp], str.failed_to_load_hosts_file:__s_n
mov dword [esp + 4], eax
call fcn.0044dbb0
jmp 0x419ffc
call sub.libgpg_error_0.dll_gpg_err_code_from_syserror
mov ebx, eax
test eax, eax
je 0x419f96
movzx ebx, ax
or ebx, 0xa000000
mov dword [esp], ebx
call sub.libgpg_error_0.dll_gpg_strerror
mov dword [esp], str.failed_to_set_socks_server__s:__s_n
mov dword [esp + 8], eax
mov eax, dword [esp + 0x28]
mov dword [esp + 4], eax
call fcn.0044dbb0
jmp 0x41a2a6
mov eax, dword [esp + 0x30]
call fcn.00419c80
mov dword [esp], eax
mov ebx, eax
call sub.libgpg_error_0.dll_gpg_strerror
mov dword [esp], str.failed_to_initialize_hosts_file:__s_n
mov dword [esp + 4], eax
call fcn.0044dbb0
jmp 0x41a07e
call sub.libgpg_error_0.dll_gpg_err_code_from_syserror
test eax, eax
jne 0x41a3d0
mov eax, dword [esp + 0x28]
mov dword [esp], eax
call sub.libgcrypt_20.dll_gcry_free
mov ebx, dword [0x491480]
jmp 0x419de1
movzx ebx, ax
or ebx, 0xa000000
jmp 0x41a2a6
call sub.libgpg_error_0.dll_gpg_err_code_from_syserror
test eax, eax
jne 0x41a3d0
mov dword [esp], 0
call sub.libgcrypt_20.dll_gcry_free
mov ebx, dword [0x491480]
jmp 0x419de1
mov dword [esp], 0xffffffff
mov ebx, 0xa000001
call fcn.004471f0
mov dword [esp], str.GetNetworkParms_failed:__s_n
mov dword [esp + 4], eax
call fcn.0044dbb0
mov eax, dword [esp + 0x28]
mov dword [esp], eax
call sub.libgcrypt_20.dll_gcry_free
mov dword [esp], 0
call sub.libgcrypt_20.dll_gcry_free
jmp 0x419e29
mov eax, dword [esp + 0x30]
call fcn.00419c80
mov dword [esp], eax
mov ebx, eax
call sub.libgpg_error_0.dll_gpg_strerror
mov dword [esp], str.failed_to_load_DNS_hints:__s_n
mov dword [esp + 4], eax
call fcn.0044dbb0
jmp 0x41a07e