Function at 0x4d8bef
Capabilities:
Query or enumerate registry key

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x512fb9
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
sub esp, 0x228
lea ecx, [ebp - 0x110]
call sub.MFC42.DLL_CString::CString_3
mov dword [ebp - 4], 0
mov dword [ebp - 0x218], 0
mov dword [ebp - 0x214], 0
push 0x5964fc
push str.SystemCurrentControlSetServicesVxDMSTCP
push 0x80000002
lea eax, [ebp - 0x21c]
push eax
call fcn.00402f37
add esp, 0x10
mov dword [ebp - 0x224], eax
mov ecx, dword [ebp - 0x224]
mov dword [ebp - 0x228], ecx
mov byte [ebp - 4], 1
mov edx, dword [ebp - 0x228]
push edx
lea ecx, [ebp - 0x110]
call sub.MFC42.DLL_CString::operator_1
mov byte [ebp - 4], 0
lea ecx, [ebp - 0x21c]
call sub.MFC42.DLL_CString::CString
push 0x596534
lea ecx, [ebp - 0x110]
call fcn.0050f0b0
push eax
call dword [sym.imp.MSVCRT.dll_strstr]
add esp, 8
test eax, eax
jne 0x4d91a2
push 0x596544
lea ecx, [ebp - 0x110]
call fcn.0050f0b0
push eax
call dword [sym.imp.MSVCRT.dll_strstr]
add esp, 8
test eax, eax
jne 0x4d91a2
push 0x596554
lea ecx, [ebp - 0x110]
call fcn.0050f0b0
push eax
call dword [sym.imp.MSVCRT.dll_strstr]
add esp, 8
test eax, eax
jne 0x4d91a2
push 0x596564
lea ecx, [ebp - 0x110]
call fcn.0050f0b0
push eax
call dword [sym.imp.MSVCRT.dll_strstr]
add esp, 8
test eax, eax
jne 0x4d91a2
push 0x596574
lea ecx, [ebp - 0x110]
call fcn.0050f0b0
push eax
call dword [sym.imp.MSVCRT.dll_strstr]
add esp, 8
test eax, eax
jne 0x4d91a2
push 0x596584
lea ecx, [ebp - 0x110]
call fcn.0050f0b0
push eax
call dword [sym.imp.MSVCRT.dll_strstr]
add esp, 8
test eax, eax
jne 0x4d91a2
push 0x596594
lea ecx, [ebp - 0x110]
call fcn.0050f0b0
push eax
call dword [sym.imp.MSVCRT.dll_strstr]
add esp, 8
test eax, eax
jne 0x4d91a2
push 0x5965a4
lea ecx, [ebp - 0x110]
call fcn.0050f0b0
push eax
call dword [sym.imp.MSVCRT.dll_strstr]
add esp, 8
test eax, eax
jne 0x4d91a2
push 0x5965b4
lea ecx, [ebp - 0x110]
call fcn.0050f0b0
push eax
call dword [sym.imp.MSVCRT.dll_strstr]
add esp, 8
test eax, eax
jne 0x4d91a2
push 0x5965c4
lea ecx, [ebp - 0x110]
call fcn.0050f0b0
push eax
call dword [sym.imp.MSVCRT.dll_strstr]
add esp, 8
test eax, eax
jne 0x4d91a2
push 0x5965d4
lea ecx, [ebp - 0x110]
call fcn.0050f0b0
push eax
call dword [sym.imp.MSVCRT.dll_strstr]
add esp, 8
test eax, eax
jne 0x4d91a2
push str.85.255.0.0
lea ecx, [ebp - 0x110]
call fcn.0050f0b0
push eax
call dword [sym.imp.MSVCRT.dll_strstr]
add esp, 8
test eax, eax
jne 0x4d91a2
push 0x5965f0
lea ecx, [ebp - 0x110]
call fcn.0050f0b0
push eax
call dword [sym.imp.MSVCRT.dll_strstr]
add esp, 8
test eax, eax
jne 0x4d91a2
push 0x5965fc
lea ecx, [ebp - 0x110]
call fcn.0050f0b0
push eax
call dword [sym.imp.MSVCRT.dll_strstr]
add esp, 8
test eax, eax
jne 0x4d91a2
push 0x596608
lea ecx, [ebp - 0x110]
call fcn.0050f0b0
push eax
call dword [sym.imp.MSVCRT.dll_strstr]
add esp, 8
test eax, eax
jne 0x4d91a2
push 0x596614
lea ecx, [ebp - 0x110]
call fcn.0050f0b0
push eax
call dword [sym.imp.MSVCRT.dll_strstr]
add esp, 8
test eax, eax
jne 0x4d91a2
push 0x596620
lea ecx, [ebp - 0x110]
call fcn.0050f0b0
push eax
call dword [sym.imp.MSVCRT.dll_strstr]
add esp, 8
test eax, eax
jne 0x4d91a2
push 0x59662c
lea ecx, [ebp - 0x110]
call fcn.0050f0b0
push eax
call dword [sym.imp.MSVCRT.dll_strstr]
add esp, 8
test eax, eax
jne 0x4d91a2
push 0x596638
lea ecx, [ebp - 0x110]
call fcn.0050f0b0
push eax
call dword [sym.imp.MSVCRT.dll_strstr]
add esp, 8
test eax, eax
jne 0x4d91a2
push 0x596644
lea ecx, [ebp - 0x110]
call fcn.0050f0b0
push eax
call dword [sym.imp.MSVCRT.dll_strstr]
add esp, 8
test eax, eax
jne 0x4d91a2
push 0x596650
lea ecx, [ebp - 0x110]
call fcn.0050f0b0
push eax
call dword [sym.imp.MSVCRT.dll_strstr]
add esp, 8
test eax, eax
jne 0x4d91a2
push 0x59665c
lea ecx, [ebp - 0x110]
call fcn.0050f0b0
push eax
call dword [sym.imp.MSVCRT.dll_strstr]
add esp, 8
test eax, eax
jne 0x4d91a2
push 0x596668
lea ecx, [ebp - 0x110]
call fcn.0050f0b0
push eax
call dword [sym.imp.MSVCRT.dll_strstr]
add esp, 8
test eax, eax
jne 0x4d91a2
push 0x596674
lea ecx, [ebp - 0x110]
call fcn.0050f0b0
push eax
call dword [sym.imp.MSVCRT.dll_strstr]
add esp, 8
test eax, eax
jne 0x4d91a2
push 0x596680
lea ecx, [ebp - 0x110]
call fcn.0050f0b0
push eax
call dword [sym.imp.MSVCRT.dll_strstr]
add esp, 8
test eax, eax
jne 0x4d91a2
push 0x59668c
lea ecx, [ebp - 0x110]
call fcn.0050f0b0
push eax
call dword [sym.imp.MSVCRT.dll_strstr]
add esp, 8
test eax, eax
jne 0x4d91a2
push 0x596698
lea ecx, [ebp - 0x110]
call fcn.0050f0b0
push eax
call dword [sym.imp.MSVCRT.dll_strstr]
add esp, 8
test eax, eax
jne 0x4d91a2
push 0x5966a4
lea ecx, [ebp - 0x110]
call fcn.0050f0b0
push eax
call dword [sym.imp.MSVCRT.dll_strstr]
add esp, 8
test eax, eax
jne 0x4d91a2
push str.93.190.143.128
lea ecx, [ebp - 0x110]
call fcn.0050f0b0
push eax
call dword [sym.imp.MSVCRT.dll_strstr]
add esp, 8
test eax, eax
jne 0x4d91a2
push str.93.190.143.164
lea ecx, [ebp - 0x110]
call fcn.0050f0b0
push eax
call dword [sym.imp.MSVCRT.dll_strstr]
add esp, 8
test eax, eax
jne 0x4d91a2
push 0x5966d0
lea ecx, [ebp - 0x110]
call fcn.0050f0b0
push eax
call dword [sym.imp.MSVCRT.dll_strstr]
add esp, 8
test eax, eax
jne 0x4d91a2
push 0x5966dc
lea ecx, [ebp - 0x110]
call fcn.0050f0b0
push eax
call dword [sym.imp.MSVCRT.dll_strstr]
add esp, 8
test eax, eax
jne 0x4d91a2
push 0x5966ec
lea ecx, [ebp - 0x110]
call fcn.0050f0b0
push eax
call dword [sym.imp.MSVCRT.dll_strstr]
add esp, 8
test eax, eax
jne 0x4d91a2
push 0x5966fc
lea ecx, [ebp - 0x110]
call fcn.0050f0b0
push eax
call dword [sym.imp.MSVCRT.dll_strstr]
add esp, 8
test eax, eax
jne 0x4d91a2
push 0x59670c
lea ecx, [ebp - 0x110]
call fcn.0050f0b0
push eax
call dword [sym.imp.MSVCRT.dll_strstr]
add esp, 8
test eax, eax
jne 0x4d91a2
push 0x59671c
lea ecx, [ebp - 0x110]
call fcn.0050f0b0
push eax
call dword [sym.imp.MSVCRT.dll_strstr]
add esp, 8
test eax, eax
jne 0x4d91a2
push 0x59672c
lea ecx, [ebp - 0x110]
call fcn.0050f0b0
push eax
call dword [sym.imp.MSVCRT.dll_strstr]
add esp, 8
test eax, eax
jne 0x4d91a2
push 0x59673c
lea ecx, [ebp - 0x110]
call fcn.0050f0b0
push eax
call dword [sym.imp.MSVCRT.dll_strstr]
add esp, 8
test eax, eax
jne 0x4d91a2
push 0x59674c
lea ecx, [ebp - 0x110]
call fcn.0050f0b0
push eax
call dword [sym.imp.MSVCRT.dll_strstr]
add esp, 8
test eax, eax
je 0x4d921c
push 0x59675c
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
lea ecx, [ebp - 0x110]
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x59679c
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
cmp dword [0x5b851c], 0
jne 0x4d91f6
push 0
push 0
push 0x5b6504
call sub.MFC42.DLL_AfxMessageBox
push 0x5b6504
mov ecx, 0x5b5b78
call fcn.0050f680
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x110]
call sub.MFC42.DLL_CString::CString
jmp 0x4d9859
push str.SYSTEMCurrentControlSetServicesTcpipParametersInterfaces
lea eax, [ebp - 0x210]
push eax
call sub.MSVCRT.dll_strcpy
add esp, 8
lea ecx, [ebp - 0x218]
push ecx
push 0x20119
push 0
lea edx, [ebp - 0x210]
push edx
push 0x80000002
call dword [sym.imp.ADVAPI32.dll_RegOpenKeyExA]
test eax, eax
jne 0x4d9847
mov dword [ebp - 0x214], 0
push 0x100
lea eax, [ebp - 0x10c]
push eax
mov ecx, dword [ebp - 0x214]
mov dword [ebp - 0x22c], ecx
mov edx, dword [ebp - 0x22c]
push edx
mov eax, dword [ebp - 0x218]
push eax
mov ecx, dword [ebp - 0x214]
add ecx, 1
mov dword [ebp - 0x214], ecx
call dword [sym.imp.ADVAPI32.dll_RegEnumKeyA]
test eax, eax
je 0x4d92a6
jmp 0x4d983a
lea edx, [ebp - 0x10c]
push edx
lea eax, [ebp - 0x210]
push eax
push 0x5967e0
push 0x5b6504
call dword [sym.imp.MSVCRT.dll_sprintf]
add esp, 0x10
push str.NameServer
push 0x5b6504
push 0x80000002
lea ecx, [ebp - 0x220]
push ecx
call fcn.00402f37
add esp, 0x10
mov dword [ebp - 0x230], eax
mov edx, dword [ebp - 0x230]
mov dword [ebp - 0x234], edx
mov byte [ebp - 4], 2
mov eax, dword [ebp - 0x234]
push eax
lea ecx, [ebp - 0x110]
call sub.MFC42.DLL_CString::operator_1
mov byte [ebp - 4], 0
lea ecx, [ebp - 0x220]
call sub.MFC42.DLL_CString::CString
push str.69.31.80.244
lea ecx, [ebp - 0x110]
call fcn.0050f0b0
push eax
call dword [sym.imp.MSVCRT.dll_strstr]
add esp, 8
test eax, eax
jne 0x4d97d0
push str.69.50.161.131
lea ecx, [ebp - 0x110]
call fcn.0050f0b0
push eax
call dword [sym.imp.MSVCRT.dll_strstr]
add esp, 8
test eax, eax
jne 0x4d97d0
push str.69.50.166.94
lea ecx, [ebp - 0x110]
call fcn.0050f0b0
push eax
call dword [sym.imp.MSVCRT.dll_strstr]
add esp, 8
test eax, eax
jne 0x4d97d0
push str.69.50.168.179
lea ecx, [ebp - 0x110]
call fcn.0050f0b0
push eax
call dword [sym.imp.MSVCRT.dll_strstr]
add esp, 8
test eax, eax
jne 0x4d97d0
push str.69.50.176.156
lea ecx, [ebp - 0x110]
call fcn.0050f0b0
push eax
call dword [sym.imp.MSVCRT.dll_strstr]
add esp, 8
test eax, eax
jne 0x4d97d0
push str.69.50.176.196
lea ecx, [ebp - 0x110]
call fcn.0050f0b0
push eax
call dword [sym.imp.MSVCRT.dll_strstr]
add esp, 8
test eax, eax
jne 0x4d97d0
push str.69.50.176.198
lea ecx, [ebp - 0x110]
call fcn.0050f0b0
push eax
call dword [sym.imp.MSVCRT.dll_strstr]
add esp, 8
test eax, eax
jne 0x4d97d0
push str.69.50.184.84
lea ecx, [ebp - 0x110]
call fcn.0050f0b0
push eax
call dword [sym.imp.MSVCRT.dll_strstr]
add esp, 8
test eax, eax
jne 0x4d97d0
push str.69.50.188.180
lea ecx, [ebp - 0x110]
call fcn.0050f0b0
push eax
call dword [sym.imp.MSVCRT.dll_strstr]
add esp, 8
test eax, eax
jne 0x4d97d0
push str.69.57.146.14
lea ecx, [ebp - 0x110]
call fcn.0050f0b0
push eax
call dword [sym.imp.MSVCRT.dll_strstr]
add esp, 8
test eax, eax
jne 0x4d97d0
push str.69.57.147.175
lea ecx, [ebp - 0x110]
call fcn.0050f0b0
push eax
call dword [sym.imp.MSVCRT.dll_strstr]
add esp, 8
test eax, eax
jne 0x4d97d0
push str.85.255.112.
lea ecx, [ebp - 0x110]
call fcn.0050f0b0
push eax
call dword [sym.imp.MSVCRT.dll_strstr]
add esp, 8
test eax, eax
jne 0x4d97d0
push str.85.255.113.
lea ecx, [ebp - 0x110]
call fcn.0050f0b0
push eax
call dword [sym.imp.MSVCRT.dll_strstr]
add esp, 8
test eax, eax
jne 0x4d97d0
push str.85.255.114.
lea ecx, [ebp - 0x110]
call fcn.0050f0b0
push eax
call dword [sym.imp.MSVCRT.dll_strstr]
add esp, 8
test eax, eax
jne 0x4d97d0
push str.85.255.115.
lea ecx, [ebp - 0x110]
call fcn.0050f0b0
push eax
call dword [sym.imp.MSVCRT.dll_strstr]
add esp, 8
test eax, eax
jne 0x4d97d0
push str.85.255.116.
lea ecx, [ebp - 0x110]
call fcn.0050f0b0
push eax
call dword [sym.imp.MSVCRT.dll_strstr]
add esp, 8
test eax, eax
jne 0x4d97d0
push str.85.255.117.
lea ecx, [ebp - 0x110]
call fcn.0050f0b0
push eax
call dword [sym.imp.MSVCRT.dll_strstr]
add esp, 8
test eax, eax
jne 0x4d97d0
push str.85.255.118.
lea ecx, [ebp - 0x110]
call fcn.0050f0b0
push eax
call dword [sym.imp.MSVCRT.dll_strstr]
add esp, 8
test eax, eax
jne 0x4d97d0
push str.85.255.119.
lea ecx, [ebp - 0x110]
call fcn.0050f0b0
push eax
call dword [sym.imp.MSVCRT.dll_strstr]
add esp, 8
test eax, eax
jne 0x4d97d0
push str.85.255.120.
lea ecx, [ebp - 0x110]
call fcn.0050f0b0
push eax
call dword [sym.imp.MSVCRT.dll_strstr]
add esp, 8
test eax, eax
jne 0x4d97d0
push str.85.255.121.
lea ecx, [ebp - 0x110]
call fcn.0050f0b0
push eax
call dword [sym.imp.MSVCRT.dll_strstr]
add esp, 8
test eax, eax
jne 0x4d97d0
push str.85.255.122.
lea ecx, [ebp - 0x110]
call fcn.0050f0b0
push eax
call dword [sym.imp.MSVCRT.dll_strstr]
add esp, 8
test eax, eax
jne 0x4d97d0
push str.85.255.123.
lea ecx, [ebp - 0x110]
call fcn.0050f0b0
push eax
call dword [sym.imp.MSVCRT.dll_strstr]
add esp, 8
test eax, eax
jne 0x4d97d0
push str.85.255.124.
lea ecx, [ebp - 0x110]
call fcn.0050f0b0
push eax
call dword [sym.imp.MSVCRT.dll_strstr]
add esp, 8
test eax, eax
jne 0x4d97d0
push str.85.255.125.
lea ecx, [ebp - 0x110]
call fcn.0050f0b0
push eax
call dword [sym.imp.MSVCRT.dll_strstr]
add esp, 8
test eax, eax
jne 0x4d97d0
push str.85.255.126.
lea ecx, [ebp - 0x110]
call fcn.0050f0b0
push eax
call dword [sym.imp.MSVCRT.dll_strstr]
add esp, 8
test eax, eax
jne 0x4d97d0
push str.85.255.127.
lea ecx, [ebp - 0x110]
call fcn.0050f0b0
push eax
call dword [sym.imp.MSVCRT.dll_strstr]
add esp, 8
test eax, eax
jne 0x4d97d0
push 0x596964
lea ecx, [ebp - 0x110]
call fcn.0050f0b0
push eax
call dword [sym.imp.MSVCRT.dll_strstr]
add esp, 8
test eax, eax
jne 0x4d97d0
push str.192.225.176.3
lea ecx, [ebp - 0x110]
call fcn.0050f0b0
push eax
call dword [sym.imp.MSVCRT.dll_strstr]
add esp, 8
test eax, eax
jne 0x4d97d0
push str.192.225.176.31
lea ecx, [ebp - 0x110]
call fcn.0050f0b0
push eax
call dword [sym.imp.MSVCRT.dll_strstr]
add esp, 8
test eax, eax
jne 0x4d97d0
push str.193.227.227.218
lea ecx, [ebp - 0x110]
call fcn.0050f0b0
push eax
call dword [sym.imp.MSVCRT.dll_strstr]
add esp, 8
test eax, eax
jne 0x4d97d0
push str.195.95.218.4
lea ecx, [ebp - 0x110]
call fcn.0050f0b0
push eax
call dword [sym.imp.MSVCRT.dll_strstr]
add esp, 8
test eax, eax
jne 0x4d97d0
push str.195.95.218.100
lea ecx, [ebp - 0x110]
call fcn.0050f0b0
push eax
call dword [sym.imp.MSVCRT.dll_strstr]
add esp, 8
test eax, eax
jne 0x4d97d0
push str.195.225.176.31
lea ecx, [ebp - 0x110]
call fcn.0050f0b0
push eax
call dword [sym.imp.MSVCRT.dll_strstr]
add esp, 8
test eax, eax
jne 0x4d97d0
push str.195.225.176.37
lea ecx, [ebp - 0x110]
call fcn.0050f0b0
push eax
call dword [sym.imp.MSVCRT.dll_strstr]
add esp, 8
test eax, eax
jne 0x4d97d0
push str.216.127.92.38
lea ecx, [ebp - 0x110]
call fcn.0050f0b0
push eax
call dword [sym.imp.MSVCRT.dll_strstr]
add esp, 8
test eax, eax
je 0x4d9835
push str.Se_ha_detectado_que_el_Servidor_DNS_no_es_el_de_su_ISP._n_IPs:
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
lea ecx, [ebp - 0x110]
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x596a30
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
cmp dword [0x5b851c], 0
jne 0x4d9824
push 0
push 0
push 0x5b6504
call sub.MFC42.DLL_AfxMessageBox
push 0x5b6504
mov ecx, 0x5b5b78
call fcn.0050f680
jmp 0x4d983a
jmp 0x4d9262
mov ecx, dword [ebp - 0x218]
push ecx
call dword [sym.imp.ADVAPI32.dll_RegCloseKey]
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x110]
call sub.MFC42.DLL_CString::CString
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
mov esp, ebp
pop ebp
ret