Function at 0x431a80
Capabilities:
Query or enumerate registry key
Query or enumerate registry value

Disassembly:
push ebp
mov ebp, esp
mov eax, 0x1810
call fcn.004bb4f0
mov eax, dword [0x66bf78]
xor eax, ebp
mov dword [ebp - 4], eax
push edi
push str.SYSTEMCurrentControlSetServicesTcpipParameters
lea eax, [ebp - 0x1004]
push 0x800
push eax
call fcn.004b54a0
mov edi, dword [sym.imp.ADVAPI32.dll_RegOpenKeyExA]
lea eax, [ebp - 0x180c]
add esp, 0xc
push eax
push 0x20019
push 0
lea eax, [ebp - 0x1004]
push eax
push reloc.WS2_32.dll_bind
call edi
test eax, eax
je 0x431b00
cmp dword [0x66a978], 0
je 0x431d52
push str.mass_dns:_warning:_Error_opening_registry_to_read_DNS_servers._Try_using___system_dns_or_specify_valid_servers_with___dns_servers
call fcn.00431e00
add esp, 4
pop edi
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.004bb11e
mov esp, ebp
pop ebp
ret
push esi
mov esi, dword [sym.imp.ADVAPI32.dll_RegQueryValueExA]
lea eax, [ebp - 0x1808]
push eax
lea eax, [ebp - 0x804]
mov dword [ebp - 0x1808], 0x800
push eax
push 0
push 0
push str.NameServer
push dword [ebp - 0x180c]
call esi
test eax, eax
jne 0x431b43
lea eax, [ebp - 0x804]
push eax
call fcn.0042de20
add esp, 4
lea eax, [ebp - 0x1808]
mov dword [ebp - 0x1808], 0x800
push eax
lea eax, [ebp - 0x804]
push eax
push 0
push 0
push str.DhcpNameServer
push dword [ebp - 0x180c]
call esi
test eax, eax
jne 0x431b7f
lea eax, [ebp - 0x804]
push eax
call fcn.0042de20
add esp, 4
push ebx
push dword [ebp - 0x180c]
mov ebx, dword [sym.imp.ADVAPI32.dll_RegCloseKey]
call ebx
push str.SYSTEMCurrentControlSetServicesTcpipParametersInterfaces
lea eax, [ebp - 0x1004]
push 0x800
push eax
call fcn.004b54a0
add esp, 0xc
lea eax, [ebp - 0x180c]
push eax
push 8
push 0
lea eax, [ebp - 0x1004]
push eax
push reloc.WS2_32.dll_bind
call edi
test eax, eax
jne 0x431d50
xor edi, edi
mov dword [ebp - 0x1808], 0x800
push edi
push edi
push edi
push edi
lea eax, [ebp - 0x1808]
push eax
lea eax, [ebp - 0x804]
push eax
push edi
push dword [ebp - 0x180c]
call dword [sym.imp.ADVAPI32.dll_RegEnumKeyExA]
cmp eax, 0x103
je 0x431d48
mov edi, edi
cmp byte [0x67dfec], 0
je 0x431c47
lea eax, [ebp - 0x804]
push eax
call fcn.0042f010
add esp, 4
test al, al
jne 0x431c47
cmp dword [0x67dff0], 1
jle 0x431d0f
lea eax, [ebp - 0x804]
push eax
push str.Interface__s_is_not_known__ignoring_its_nameservers._n
push 0x405
call fcn.00454c40
add esp, 0xc
jmp 0x431d0f
lea eax, [ebp - 0x804]
push eax
push str.SYSTEMCurrentControlSetServicesTcpipParametersInterfaces_s
lea eax, [ebp - 0x1804]
push 0x800
push eax
call fcn.004b54a0
add esp, 0x10
lea eax, [ebp - 0x1810]
push eax
push 0x20019
push 0
lea eax, [ebp - 0x1804]
push eax
push reloc.WS2_32.dll_bind
call dword [sym.imp.ADVAPI32.dll_RegOpenKeyExA]
test eax, eax
jne 0x431d0f
lea eax, [ebp - 0x1808]
mov dword [ebp - 0x1808], 0x800
push eax
lea eax, [ebp - 0x804]
push eax
push 0
push 0
push str.DhcpNameServer
push dword [ebp - 0x1810]
call esi
test eax, eax
jne 0x431ccb
lea eax, [ebp - 0x804]
push eax
call fcn.0042de20
add esp, 4
lea eax, [ebp - 0x1808]
mov dword [ebp - 0x1808], 0x800
push eax
lea eax, [ebp - 0x804]
push eax
push 0
push 0
push str.NameServer
push dword [ebp - 0x1810]
call esi
test eax, eax
jne 0x431d07
lea eax, [ebp - 0x804]
push eax
call fcn.0042de20
add esp, 4
push dword [ebp - 0x1810]
call ebx
push 0
push 0
push 0
push 0
lea eax, [ebp - 0x1808]
mov dword [ebp - 0x1808], 0x800
push eax
lea eax, [ebp - 0x804]
inc edi
push eax
push edi
push dword [ebp - 0x180c]
call dword [sym.imp.ADVAPI32.dll_RegEnumKeyExA]
cmp eax, 0x103
jne 0x431c00
push dword [ebp - 0x180c]
call ebx
pop ebx
pop esi
mov ecx, dword [ebp - 4]
xor ecx, ebp
pop edi
call fcn.004bb11e
mov esp, ebp
pop ebp
ret