Function at 0x6d66471e
Capabilities:
Get local ipv4 addresses
Query or enumerate registry value

Disassembly:
push ebp
lea ebp, [esp - 0x1b0]
sub esp, 0x230
mov eax, dword [0x6d671098]
xor eax, ebp
mov dword [ebp + 0x1ac], eax
mov eax, dword [ebp + 0x1b8]
push ebx
push esi
push edi
mov edi, dword [sym.imp.advapi32.dll_RegOpenKeyExA]
mov dword [ebp - 0x78], eax
mov eax, dword [ebp + 0x1bc]
mov dword [ebp - 0x80], eax
lea eax, [ebp - 0x5c]
push eax
push 0x20019
xor ebx, ebx
push ebx
push str.SYSTEMCurrentControlSetServicesTcpipParameters
push reloc.ws2_32.dll_bind
mov dword [ebp - 0x7c], ebx
call edi
mov esi, dword [sym.imp.advapi32.dll_RegQueryValueExA]
test eax, eax
jne 0x6d6647d0
lea eax, [ebp - 0x58]
push eax
lea eax, [ebp + 0xac]
push eax
lea eax, [ebp - 0x64]
push eax
push ebx
push str.SearchList
push dword [ebp - 0x5c]
mov dword [ebp - 0x58], 0x100
call esi
test eax, eax
jne 0x6d6647c7
lea eax, [ebp + 0xac]
push eax
call sub.msvcr100.dll_strlen
pop ecx
test eax, eax
je 0x6d6647c7
lea eax, [ebp + 0xac]
push eax
push dword [ebp - 0x78]
call fcn.6d6646cb
pop ecx
pop ecx
mov dword [ebp - 0x7c], 1
push dword [ebp - 0x5c]
call dword [sym.imp.advapi32.dll_RegCloseKey]
mov eax, 0x288
push eax
mov dword [ebp - 0x70], eax
call dword [sym.imp.msvcr100.dll_malloc]
pop ecx
lea ecx, [ebp - 0x70]
push ecx
push eax
mov dword [ebp - 0x68], eax
call sub.IPHLPAPI.DLL_GetAdaptersInfo
cmp eax, 0x6f
jne 0x6d66480d
push dword [ebp - 0x70]
push dword [ebp - 0x68]
call dword [sym.imp.msvcr100.dll_realloc]
pop ecx
pop ecx
lea ecx, [ebp - 0x70]
push ecx
push eax
mov dword [ebp - 0x68], eax
call sub.IPHLPAPI.DLL_GetAdaptersInfo
cmp eax, ebx
jne 0x6d664994
mov eax, dword [ebp - 0x68]
mov dword [ebp - 0x74], eax
cmp eax, ebx
je 0x6d6649a3
mov eax, dword [ebp - 0x74]
add eax, 8
push eax
lea eax, [ebp - 0x54]
push str.SYSTEMCurrentControlSetServicesTcpipParametersInterfaces_s
push eax
call dword [sym.imp.msvcr100.dll_sprintf]
add esp, 0xc
lea eax, [ebp - 0x5c]
push eax
push 0x20019
push ebx
lea eax, [ebp - 0x54]
push eax
push reloc.ws2_32.dll_bind
call edi
test eax, eax
jne 0x6d664984
lea eax, [ebp - 0x58]
push eax
lea eax, [ebp - 0x6c]
push eax
lea eax, [ebp - 0x64]
push eax
push ebx
push str.EnableDhcp
push dword [ebp - 0x5c]
mov dword [ebp - 0x6c], ebx
mov dword [ebp - 0x58], 4
call esi
cmp dword [ebp - 0x7c], ebx
jne 0x6d6648fd
lea eax, [ebp - 0x58]
push eax
lea eax, [ebp + 0xac]
push eax
lea eax, [ebp - 0x64]
push eax
push ebx
push str.Domain
push dword [ebp - 0x5c]
mov byte [ebp + 0xac], bl
mov dword [ebp - 0x58], 0x100
call esi
mov dword [ebp - 0x60], eax
cmp eax, ebx
jne 0x6d6648be
lea eax, [ebp + 0xac]
push eax
call sub.msvcr100.dll_strlen
pop ecx
test eax, eax
jne 0x6d6648ec
cmp dword [ebp - 0x6c], ebx
je 0x6d6648e7
lea eax, [ebp - 0x58]
push eax
lea eax, [ebp + 0xac]
push eax
lea eax, [ebp - 0x64]
push eax
push ebx
push str.DhcpDomain
push dword [ebp - 0x5c]
mov dword [ebp - 0x58], 0x100
call esi
mov dword [ebp - 0x60], eax
cmp dword [ebp - 0x60], ebx
jne 0x6d6648fd
lea eax, [ebp + 0xac]
push eax
push dword [ebp - 0x78]
call fcn.6d6646cb
pop ecx
pop ecx
lea eax, [ebp - 0x58]
push eax
lea eax, [ebp + 0xac]
push eax
lea eax, [ebp - 0x64]
push eax
push ebx
push str.NameServer
push dword [ebp - 0x5c]
mov byte [ebp + 0xac], bl
mov dword [ebp - 0x58], 0x100
call esi
mov dword [ebp - 0x60], eax
cmp eax, ebx
jne 0x6d66493c
lea eax, [ebp + 0xac]
push eax
call sub.msvcr100.dll_strlen
pop ecx
test eax, eax
jne 0x6d66496a
cmp dword [ebp - 0x6c], ebx
je 0x6d664965
lea eax, [ebp - 0x58]
push eax
lea eax, [ebp + 0xac]
push eax
lea eax, [ebp - 0x64]
push eax
push ebx
push str.DhcpNameServer
push dword [ebp - 0x5c]
mov dword [ebp - 0x58], 0x100
call esi
mov dword [ebp - 0x60], eax
cmp dword [ebp - 0x60], ebx
jne 0x6d66497b
lea eax, [ebp + 0xac]
push eax
push dword [ebp - 0x80]
call fcn.6d6646cb
pop ecx
pop ecx
push dword [ebp - 0x5c]
call dword [sym.imp.advapi32.dll_RegCloseKey]
mov eax, dword [ebp - 0x74]
mov eax, dword [eax]
mov dword [ebp - 0x74], eax
cmp eax, ebx
jne 0x6d664823
cmp dword [ebp - 0x68], ebx
je 0x6d6649a3
push dword [ebp - 0x68]
call dword [sym.imp.msvcr100.dll_free]
pop ecx
mov ecx, dword [ebp + 0x1ac]
pop edi
pop esi
xor ecx, ebp
xor eax, eax
pop ebx
call fcn.6d66b1da
add ebp, 0x1b0
leave
ret