Function at 0x41b160
Capabilities:
Query or enumerate registry value

Disassembly:
sub esp, 0xc8
push ebx
xor ebx, ebx
lea eax, [esp + 0x20]
push ebx
push eax
push str.AssumeConnected
push str.softwareGator.comGatordynSettings
push reloc.WSOCK32.dll_bind
mov dword [esp + 0x34], ebx
call fcn.00410440
mov eax, dword [esp + 0x34]
add esp, 0x14
cmp eax, ebx
je 0x41b19f
mov eax, 1
pop ebx
add esp, 0xc8
ret
lea ecx, [esp + 0x18]
push ebx
push ecx
push str.UseInternetGetConnectedState
push str.softwareGator.comGatordynSettings
push reloc.WSOCK32.dll_bind
mov dword [esp + 0x2c], ebx
call fcn.00410440
mov eax, dword [esp + 0x2c]
add esp, 0x14
cmp eax, ebx
je 0x41b1ed
cmp dword [0x439afc], ebx
je 0x41b1ed
mov eax, dword [0x439ab0]
cmp eax, ebx
je 0x41b1ed
lea edx, [esp + 0xc]
push ebx
push edx
mov dword [esp + 0x14], ebx
call eax
pop ebx
add esp, 0xc8
ret
mov eax, dword [0x439c3c]
mov dword [esp + 0x10], 1
cmp eax, ebx
je 0x41b419
lea eax, [esp + 0x14]
push eax
push 0x20019
push ebx
push str.SoftwareMicrosoftWindowsCurrentVersionInternet_Settings
push closesocket
call dword [sym.imp.ADVAPI32.dll_RegOpenKeyExA]
test eax, eax
jne 0x41b419
push ebp
mov ebp, dword [sym.imp.ADVAPI32.dll_RegQueryValueExA]
push esi
lea ecx, [esp + 0x24]
push edi
lea edx, [esp + 0x30]
push ecx
mov ecx, dword [esp + 0x24]
lea eax, [esp + 0x38]
push edx
push eax
push ebx
push str.EnableAutodial
push ecx
mov dword [esp + 0x40], 4
call ebp
test eax, eax
jne 0x41b40b
cmp dword [esp + 0x30], ebx
je 0x41b40b
mov eax, dword [0x4353f4]
mov edi, dword [sym.imp.KERNEL32.dll_GlobalAlloc]
cmp eax, 0xffffffff
jne 0x41b2fb
push 0x108
push 0x40
mov dword [0x4353f4], ebx
call edi
mov esi, eax
lea edx, [esp + 0x10]
lea eax, [esp + 0x14]
push edx
push eax
push esi
push ebx
mov dword [esi], 0x108
push ebx
mov dword [esp + 0x28], 0x108
mov dword [esp + 0x24], ebx
call dword [0x439c48]
cmp eax, 0x25b
jne 0x41b2e0
push esi
call dword [sym.imp.KERNEL32.dll_GlobalFree]
mov ecx, dword [esp + 0x14]
push ecx
push 0x40
call edi
mov esi, eax
lea edx, [esp + 0x10]
lea eax, [esp + 0x14]
push edx
push eax
push esi
push ebx
push ebx
mov dword [esi], 0x108
call dword [0x439c48]
cmp eax, ebx
jne 0x41b2f4
cmp dword [esp + 0x10], ebx
je 0x41b2f4
mov dword [0x4353f4], 1
push esi
call dword [sym.imp.KERNEL32.dll_GlobalFree]
cmp dword [0x4353f4], ebx
je 0x41b40b
lea ecx, [esp + 0x28]
lea edx, [esp + 0x18]
push ecx
mov ecx, dword [esp + 0x24]
lea eax, [esp + 0x38]
push edx
push eax
push ebx
push str.NoNetAutodial
push ecx
mov dword [esp + 0x30], ebx
call ebp
cmp dword [esp + 0x18], ebx
je 0x41b34f
cmp dword [0x439afc], ebx
je 0x41b34f
mov eax, dword [0x439ab0]
cmp eax, ebx
je 0x41b34f
lea edx, [esp + 0x10]
push ebx
push edx
call eax
mov dword [esp + 0x1c], eax
jmp 0x41b40b
push 0x19c
push 0x40
call edi
mov esi, eax
lea eax, [esp + 0x14]
lea ecx, [esp + 0x10]
push eax
push ecx
mov dword [esi], 0x19c
push esi
mov dword [esp + 0x1c], 0x19c
mov dword [esp + 0x20], ebx
call dword [0x439c40]
cmp eax, 0x25b
jne 0x41b3ad
push esi
call dword [sym.imp.KERNEL32.dll_GlobalFree]
mov edx, dword [esp + 0x10]
push edx
push 0x40
call edi
mov esi, eax
lea eax, [esp + 0x14]
lea ecx, [esp + 0x10]
push eax
push ecx
push esi
mov dword [esi], 0x19c
call dword [0x439c40]
cmp eax, ebx
jne 0x41b404
mov eax, dword [esp + 0x14]
mov dword [esp + 0x1c], ebx
cmp eax, ebx
je 0x41b404
xor edi, edi
cmp eax, ebx
jbe 0x41b404
lea ebx, [esi + 4]
mov ebp, 0xa0
mov eax, dword [ebx]
lea edx, [esp + 0x38]
push edx
push eax
mov dword [esp + 0x40], ebp
call dword [0x439c44]
test eax, eax
jne 0x41b3eb
cmp dword [esp + 0x3c], 0x2000
je 0x41b3fc
mov eax, dword [esp + 0x14]
inc edi
add ebx, 0x19c
cmp edi, eax
jb 0x41b3cb
jmp 0x41b404
mov dword [esp + 0x1c], 1
push esi
call dword [sym.imp.KERNEL32.dll_GlobalFree]
mov ecx, dword [esp + 0x20]
push ecx
call dword [sym.imp.ADVAPI32.dll_RegCloseKey]
pop edi
pop esi
pop ebp
mov eax, dword [esp + 0x10]
pop ebx
add esp, 0xc8
ret