Function at 0x6d77471e
Capabilities:
Get local ipv4 addresses
Query or enumerate registry value

Disassembly:
push ebp
lea ebp, [esp - 0x1b0]
sub esp, 0x230
mov eax, dword [0x6d781098]
xor eax, ebp
mov dword [ebp + 0x1ac], eax
mov eax, dword [ebp + 0x1b8]
push ebx
push esi
push edi
mov edi, dword [sym.imp.advapi32.dll_RegOpenKeyExA]
mov dword [ebp - 0x78], eax
mov eax, dword [ebp + 0x1bc]
mov dword [ebp - 0x80], eax
lea eax, [ebp - 0x5c]
push eax
push 0x20019
xor ebx, ebx
push ebx
push str.SYSTEMCurrentControlSetServicesTcpipParameters
push reloc.ws2_32.dll_bind
mov dword [ebp - 0x7c], ebx
call edi
mov esi, dword [sym.imp.advapi32.dll_RegQueryValueExA]
test eax, eax
jne 0x6d7747d0
lea eax, [ebp - 0x58]
push eax
lea eax, [ebp + 0xac]
push eax
lea eax, [ebp - 0x64]
push eax
push ebx
push str.SearchList
push dword [ebp - 0x5c]
mov dword [ebp - 0x58], 0x100
call esi
test eax, eax
jne 0x6d7747c7
lea eax, [ebp + 0xac]
push eax
call sub.msvcr100.dll_strlen
pop ecx
test eax, eax
je 0x6d7747c7
lea eax, [ebp + 0xac]
push eax
push dword [ebp - 0x78]
call fcn.6d7746cb
pop ecx
pop ecx
mov dword [ebp - 0x7c], 1
push dword [ebp - 0x5c]
call dword [sym.imp.advapi32.dll_RegCloseKey]
mov eax, 0x288
push eax
mov dword [ebp - 0x70], eax
call dword [sym.imp.msvcr100.dll_malloc]
pop ecx
lea ecx, [ebp - 0x70]
push ecx
push eax
mov dword [ebp - 0x68], eax
call sub.IPHLPAPI.DLL_GetAdaptersInfo
cmp eax, 0x6f
jne 0x6d77480d
push dword [ebp - 0x70]
push dword [ebp - 0x68]
call dword [sym.imp.msvcr100.dll_realloc]
pop ecx
pop ecx
lea ecx, [ebp - 0x70]
push ecx
push eax
mov dword [ebp - 0x68], eax
call sub.IPHLPAPI.DLL_GetAdaptersInfo
cmp eax, ebx
jne 0x6d774994
mov eax, dword [ebp - 0x68]
mov dword [ebp - 0x74], eax
cmp eax, ebx
je 0x6d7749a3
mov eax, dword [ebp - 0x74]
add eax, 8
push eax
lea eax, [ebp - 0x54]
push str.SYSTEMCurrentControlSetServicesTcpipParametersInterfaces_s
push eax
call dword [sym.imp.msvcr100.dll_sprintf]
add esp, 0xc
lea eax, [ebp - 0x5c]
push eax
push 0x20019
push ebx
lea eax, [ebp - 0x54]
push eax
push reloc.ws2_32.dll_bind
call edi
test eax, eax
jne 0x6d774984
lea eax, [ebp - 0x58]
push eax
lea eax, [ebp - 0x6c]
push eax
lea eax, [ebp - 0x64]
push eax
push ebx
push str.EnableDhcp
push dword [ebp - 0x5c]
mov dword [ebp - 0x6c], ebx
mov dword [ebp - 0x58], 4
call esi
cmp dword [ebp - 0x7c], ebx
jne 0x6d7748fd
lea eax, [ebp - 0x58]
push eax
lea eax, [ebp + 0xac]
push eax
lea eax, [ebp - 0x64]
push eax
push ebx
push str.Domain
push dword [ebp - 0x5c]
mov byte [ebp + 0xac], bl
mov dword [ebp - 0x58], 0x100
call esi
mov dword [ebp - 0x60], eax
cmp eax, ebx
jne 0x6d7748be
lea eax, [ebp + 0xac]
push eax
call sub.msvcr100.dll_strlen
pop ecx
test eax, eax
jne 0x6d7748ec
cmp dword [ebp - 0x6c], ebx
je 0x6d7748e7
lea eax, [ebp - 0x58]
push eax
lea eax, [ebp + 0xac]
push eax
lea eax, [ebp - 0x64]
push eax
push ebx
push str.DhcpDomain
push dword [ebp - 0x5c]
mov dword [ebp - 0x58], 0x100
call esi
mov dword [ebp - 0x60], eax
cmp dword [ebp - 0x60], ebx
jne 0x6d7748fd
lea eax, [ebp + 0xac]
push eax
push dword [ebp - 0x78]
call fcn.6d7746cb
pop ecx
pop ecx
lea eax, [ebp - 0x58]
push eax
lea eax, [ebp + 0xac]
push eax
lea eax, [ebp - 0x64]
push eax
push ebx
push str.NameServer
push dword [ebp - 0x5c]
mov byte [ebp + 0xac], bl
mov dword [ebp - 0x58], 0x100
call esi
mov dword [ebp - 0x60], eax
cmp eax, ebx
jne 0x6d77493c
lea eax, [ebp + 0xac]
push eax
call sub.msvcr100.dll_strlen
pop ecx
test eax, eax
jne 0x6d77496a
cmp dword [ebp - 0x6c], ebx
je 0x6d774965
lea eax, [ebp - 0x58]
push eax
lea eax, [ebp + 0xac]
push eax
lea eax, [ebp - 0x64]
push eax
push ebx
push str.DhcpNameServer
push dword [ebp - 0x5c]
mov dword [ebp - 0x58], 0x100
call esi
mov dword [ebp - 0x60], eax
cmp dword [ebp - 0x60], ebx
jne 0x6d77497b
lea eax, [ebp + 0xac]
push eax
push dword [ebp - 0x80]
call fcn.6d7746cb
pop ecx
pop ecx
push dword [ebp - 0x5c]
call dword [sym.imp.advapi32.dll_RegCloseKey]
mov eax, dword [ebp - 0x74]
mov eax, dword [eax]
mov dword [ebp - 0x74], eax
cmp eax, ebx
jne 0x6d774823
cmp dword [ebp - 0x68], ebx
je 0x6d7749a3
push dword [ebp - 0x68]
call dword [sym.imp.msvcr100.dll_free]
pop ecx
mov ecx, dword [ebp + 0x1ac]
pop edi
pop esi
xor ecx, ebp
xor eax, eax
pop ebx
call fcn.6d77b1da
add ebp, 0x1b0
leave
ret