Function at 0x100465a0
Capabilities:
Get proxy
Get routing table
Query or enumerate registry value

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x1005f918
mov eax, dword fs:[0]
push eax
mov eax, 0x22b4
call fcn.1005cad0
mov eax, dword [0x1007b00c]
xor eax, ebp
mov dword [ebp - 0x10], eax
push ebx
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov ebx, eax
mov eax, dword [0x1007c35c]
test eax, eax
je 0x100465f7
mov ecx, ebx
sub ecx, dword [0x1007dfa8]
cmp ecx, 0x3e8
jb 0x100468bc
push 0x3c
mov dword [ebp - 0x22bc], 0
call dword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_malloc]
mov edi, eax
add esp, 4
test edi, edi
jne 0x1004661c
mov eax, dword [0x1007c35c]
jmp 0x100468bc
push 0
lea eax, [ebp - 0x22bc]
push eax
push edi
call dword [sym.imp.IPHLPAPI.DLL_GetIpForwardTable]
mov esi, dword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_free]
cmp eax, 0x7a
jne 0x1004666a
push edi
call esi
mov eax, dword [ebp - 0x22bc]
add esp, 4
cmp eax, 0xb2c
ja 0x10046674
push eax
call dword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_malloc]
mov edi, eax
add esp, 4
test edi, edi
je 0x10046612
push 0
lea eax, [ebp - 0x22bc]
push eax
push edi
call dword [sym.imp.IPHLPAPI.DLL_GetIpForwardTable]
test eax, eax
je 0x10046688
push edi
call esi
add esp, 4
mov dword [0x1007c35c], 1
mov eax, 1
jmp 0x100468b6
mov edx, dword [edi]
xor ecx, ecx
test edx, edx
je 0x100466a6
lea eax, [edi + 4]
cmp dword [eax], 0
jne 0x1004669e
cmp dword [eax + 4], 0
je 0x1004666e
inc ecx
add eax, 0x38
cmp ecx, edx
jb 0x10046693
push 8
mov dword [ebp - 0x14], 0
call fcn.1005b6ec
mov esi, eax
mov dword [ebp - 0x22c0], esi
mov dword [ebp - 4], 0
xorps xmm0, xmm0
push 0x1007da74
movq qword [esi], xmm0
push 0xc
mov dword [esi], vtable.QMConfigFile::CQMCommonConfig.0
call fcn.1005be2e
add esp, 0xc
mov dword [ebp - 0x1c], eax
mov byte [ebp - 4], 1
test eax, eax
je 0x100466f3
mov ecx, eax
call fcn.1000cdb0
jmp 0x100466f5
xor eax, eax
push 0x200a
mov dword [esi + 4], eax
lea eax, [ebp - 0x22b0]
push 0
push eax
mov dword [ebp - 4], 0xffffffff
call sub.VCRUNTIME140.dll_memset
push 0x42
lea eax, [ebp - 0x2a4]
push 0
push eax
call sub.VCRUNTIME140.dll_memset
push 0x42
lea eax, [ebp - 0x262]
push 0
push eax
call sub.VCRUNTIME140.dll_memset
push 0x202
lea eax, [ebp - 0x220]
push 0
push eax
call sub.VCRUNTIME140.dll_memset
add esp, 0x30
mov dword [ebp - 0x22b4], 0
xor eax, eax
lea ecx, [ebp - 0x22b4]
mov word [ebp - 0x2a6], ax
mov eax, dword [esi]
push 0
push 4
push ecx
push str.ConfigProxyType
mov ecx, esi
call dword [eax + 0xc]
test eax, eax
je 0x1004688b
mov eax, dword [ebp - 0x22b4]
cmp eax, 1
jne 0x1004687a
lea eax, [ebp - 0x22b8]
mov dword [ebp - 0x22b8], 0
push eax
push 0x20019
push 0
push str.SOFTWAREMicrosoftWindowsCurrentVersionInternet_Settings
push SysReAllocString
call dword [sym.imp.ADVAPI32.dll_RegOpenKeyExW]
test eax, eax
jne 0x1004688b
mov dword [ebp - 0x1c], eax
lea eax, [ebp - 0x18]
push eax
lea eax, [ebp - 0x1c]
mov dword [ebp - 0x18], 4
push eax
push 0
push 0
push str.ProxyEnable
push dword [ebp - 0x22b8]
call dword [sym.imp.ADVAPI32.dll_RegQueryValueExW]
cmp dword [ebp - 0x1c], 0
je 0x1004686c
lea ecx, [ebp - 0x14]
mov dword [ebp - 0x14], 0
call fcn.100397c0
mov dword [ebp - 4], 2
mov ecx, 1
mov esi, dword [ebp - 0x14]
mov eax, dword [esi - 8]
sub ecx, dword [esi - 4]
sub eax, 0x800
or ecx, eax
jge 0x10046827
push 0x800
lea ecx, [ebp - 0x14]
call fcn.1002e420
mov esi, dword [ebp - 0x14]
lea eax, [ebp - 0x18]
mov dword [ebp - 0x18], 0x1000
push eax
push esi
push 0
push 0
push str.ProxyServer
push dword [ebp - 0x22b8]
call dword [sym.imp.ADVAPI32.dll_RegQueryValueExW]
push ecx
lea ecx, [ebp - 0x14]
call fcn.10047cb0
mov esi, dword [esi - 0xc]
lea ecx, [ebp - 0x14]
call fcn.1002a970
xor eax, eax
test esi, esi
mov esi, dword [ebp - 0x22c0]
setne al
mov dword [ebp - 0x14], eax
push dword [ebp - 0x22b8]
call dword [sym.imp.ADVAPI32.dll_RegCloseKey]
jmp 0x1004688b
cmp eax, 2
je 0x10046884
cmp eax, 3
jne 0x1004688b
mov dword [ebp - 0x14], 1
mov edx, dword [esi]
mov ecx, esi
push 1
call dword [edx + 0x60]
mov ecx, dword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_free]
push edi
call ecx
add esp, 4
cmp dword [ebp - 0x14], 0
jne 0x10046674
mov dword [0x1007c35c], 0
xor eax, eax
mov dword [0x1007dfa8], ebx
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 0x10]
xor ecx, ebp
call fcn.1005b6db
mov esp, ebp
pop ebp
ret