Function at 0x4051e0
Capabilities:
Persist via windows service
Query or enumerate registry value
Set registry value

Disassembly:
mov eax, dword fs:[0]
push 0xffffffffffffffff
push 0x431f9b
push eax
mov eax, dword [0x441a30]
mov dword fs:[0], esp
sub esp, 0x63c
push ebx
push ebp
xor ebp, ebp
push esi
cmp eax, ebp
push edi
jg 0x405211
mov al, 1
jmp 0x405f13
mov eax, dword [0x441e0c]
mov ebx, str.SystemCurrentControlSetServicesVxDMSTCP
cmp eax, ebp
jne 0x405224
mov ebx, str.SYSTEMCurrentControlSetServicesTcpipParameters
lea eax, [esp + 0x30]
lea ecx, [esp + 0x14]
push eax
push ecx
push ebp
push 0x2001f
push ebp
push ebp
push ebp
push ebx
push reloc.WS2_32.dll_bind
mov dword [esp + 0x60], 0x208
mov dword [esp + 0x38], ebp
mov dword [esp + 0x50], ebp
mov byte [esp + 0x35], 0
mov dword [esp + 0x54], ebp
call dword [sym.imp.ADVAPI32.dll_RegCreateKeyExA]
mov esi, eax
cmp esi, ebp
je 0x405319
push 0x2c
mov ecx, 0x442408
call fcn.0042053a
push ebp
push ebp
push ebp
push ebp
push 2
push 0x11
call fcn.0041e7ec
mov eax, dword [0x441ff4]
add esp, 0x18
cmp eax, ebp
je 0x405312
mov edx, dword [0x441fd4]
mov eax, dword [edx]
cmp eax, 1
je 0x4052ab
mov ecx, dword [0x441fdc]
cmp dword [ecx], ebp
jne 0x405312
cmp eax, 1
jle 0x405312
call dword [sym.imp.WS2_32.dll_WSAGetLastError]
mov edi, eax
call dword [sym.imp.KERNEL32.dll_GetLastError]
mov ebp, eax
mov eax, dword [0x436030]
test eax, eax
jge 0x4052d0
mov edx, dword [0x441fa0]
mov dword [0x436030], edx
call fcn.0041c4b1
test eax, eax
je 0x405304
mov eax, dword [0x436030]
push 1
push eax
push 0x4ea
push str.C:_build_rel_sp_8_4_6_2_srcwindows_atpclient_arr_srvsAdaptCof.cpp
call fcn.0041c4e1
push esi
push ebx
push str.Failed_to_open_reg:_s__error_d_n
call fcn.0041c506
add esp, 0x1c
call fcn.0041c4cc
push edi
call dword [sym.imp.WS2_32.dll_WSASetLastError]
push ebp
call dword [sym.imp.KERNEL32.dll_SetLastError]
xor al, al
jmp 0x405f13
mov eax, dword [esp + 0x30]
mov ecx, dword [sym.imp.WS2_32.dll_WSAGetLastError]
mov edi, dword [sym.imp.KERNEL32.dll_GetLastError]
cmp eax, 1
mov eax, dword [0x441ff4]
jne 0x4053a7
cmp eax, ebp
je 0x405424
mov edx, dword [0x441fd4]
mov eax, dword [edx]
cmp eax, 3
je 0x40535f
mov edx, dword [0x441fdc]
cmp dword [edx], ebp
jne 0x405424
cmp eax, 3
jle 0x405424
call ecx
mov esi, eax
call edi
mov edi, eax
mov eax, dword [0x436030]
cmp eax, ebp
jge 0x40537a
mov eax, dword [0x441fa0]
mov dword [0x436030], eax
call fcn.0041c4b1
test eax, eax
je 0x405416
mov ecx, dword [0x436030]
push 3
push ecx
push 0x4f0
push str.C:_build_rel_sp_8_4_6_2_srcwindows_atpclient_arr_srvsAdaptCof.cpp
call fcn.0041c4e1
push ebx
push str.Key_created:__s_n
jmp 0x405409
cmp eax, ebp
je 0x405424
mov edx, dword [0x441fd4]
mov eax, dword [edx]
cmp eax, 3
je 0x4053c7
mov edx, dword [0x441fdc]
cmp dword [edx], ebp
jne 0x405424
cmp eax, 3
jle 0x405424
call ecx
mov esi, eax
call edi
mov edi, eax
mov eax, dword [0x436030]
cmp eax, ebp
jge 0x4053e2
mov eax, dword [0x441fa0]
mov dword [0x436030], eax
call fcn.0041c4b1
test eax, eax
je 0x405416
mov ecx, dword [0x436030]
push 3
push ecx
push 0x4f4
push str.C:_build_rel_sp_8_4_6_2_srcwindows_atpclient_arr_srvsAdaptCof.cpp
call fcn.0041c4e1
push ebx
push str.Key_opened:__s_n
call fcn.0041c506
add esp, 0x18
call fcn.0041c4cc
push esi
call dword [sym.imp.WS2_32.dll_WSASetLastError]
push edi
call dword [sym.imp.KERNEL32.dll_SetLastError]
mov edx, dword [0x441a30]
add edx, 0x208
push edx
call sub.MFC42.DLL_operatornew
mov ebp, eax
mov eax, dword [0x441a30]
mov edi, ebp
add esp, 4
lea ecx, [eax + 0x208]
xor eax, eax
mov edx, ecx
mov dword [esp + 0x38], ebp
shr ecx, 2
rep stosd dword es:[edi], eax
mov ecx, edx
and ecx, 3
rep stosb byte es:[edi], al
mov ecx, dword [0x441a30]
mov esi, dword [0x441a34]
mov eax, ecx
mov edi, ebp
shr ecx, 2
rep movsd dword es:[edi], dword [esi]
mov ecx, eax
and ecx, 3
rep movsb byte es:[edi], byte [esi]
mov edx, dword [esp + 0x14]
lea ecx, [esp + 0x3c]
push ecx
push 0x441820
push 0
push 0
push str.SearchList
push edx
call dword [sym.imp.ADVAPI32.dll_RegQueryValueExA]
test eax, eax
jne 0x405ae1
call fcn.004011b0
test al, al
jne 0x405ae8
mov edi, 0x441820
or ecx, 0xffffffff
xor eax, eax
repne scasb al, byte es:[edi]
not ecx
dec ecx
mov edi, 0x441820
je 0x4054e9
or ecx, 0xffffffff
repne scasb al, byte es:[edi]
not ecx
sub edi, ecx
mov esi, edi
mov edx, ecx
mov edi, ebp
or ecx, 0xffffffff
repne scasb al, byte es:[edi]
mov ecx, edx
dec edi
shr ecx, 2
rep movsd dword es:[edi], dword [esi]
mov ecx, edx
and ecx, 3
rep movsb byte es:[edi], byte [esi]
jmp 0x405ae8
or ecx, 0xffffffff
xor eax, eax
repne scasb al, byte es:[edi]
not ecx
dec ecx
jne 0x405ae8
mov eax, dword [0x441ff4]
test eax, eax
je 0x40558b
mov eax, dword [0x441fd4]
mov eax, dword [eax]
cmp eax, 3
je 0x405522
mov ecx, dword [0x441fdc]
cmp dword [ecx], 0
jne 0x40558b
cmp eax, 3
jle 0x40558b
call dword [sym.imp.WS2_32.dll_WSAGetLastError]
mov ebx, dword [sym.imp.KERNEL32.dll_GetLastError]
mov esi, eax
call ebx
mov edi, eax
mov eax, dword [0x436030]
test eax, eax
jge 0x405549
mov edx, dword [0x441fa0]
mov dword [0x436030], edx
call fcn.0041c4b1
test eax, eax
je 0x40557b
mov eax, dword [0x436030]
push 3
push eax
push 0x507
push str.C:_build_rel_sp_8_4_6_2_srcwindows_atpclient_arr_srvsAdaptCof.cpp
call fcn.0041c4e1
push str.DNS_suffix_search_list_is_null__n
call fcn.0041c506
add esp, 0x14
call fcn.0041c4cc
push esi
call dword [sym.imp.WS2_32.dll_WSASetLastError]
push edi
call dword [sym.imp.KERNEL32.dll_SetLastError]
jmp 0x405591
mov ebx, dword [sym.imp.KERNEL32.dll_GetLastError]
mov ecx, 0x82
xor eax, eax
lea edi, [esp + 0x41]
mov byte [esp + 0x40], 0
rep stosd dword es:[edi], eax
lea ecx, [esp + 0x28]
lea edx, [esp + 0x40]
push ecx
push edx
push eax
push eax
mov eax, dword [esp + 0x24]
push str.NV_Domain
push eax
mov byte [esp + 0x2a], 0x2c
mov byte [esp + 0x2b], 0
mov dword [esp + 0x40], 0x208
call dword [sym.imp.ADVAPI32.dll_RegQueryValueExA]
test eax, eax
jne 0x4056bd
mov eax, dword [0x441ff4]
test eax, eax
je 0x40565f
mov ecx, dword [0x441fd4]
mov eax, dword [ecx]
cmp eax, 3
je 0x4055ff
mov edx, dword [0x441fdc]
cmp dword [edx], 0
jne 0x40565f
cmp eax, 3
jle 0x40565f
call dword [sym.imp.WS2_32.dll_WSAGetLastError]
mov esi, eax
call ebx
mov edi, eax
mov eax, dword [0x436030]
test eax, eax
jge 0x40561e
mov eax, dword [0x441fa0]
mov dword [0x436030], eax
call fcn.0041c4b1
test eax, eax
je 0x405651
mov ecx, dword [0x436030]
push 3
push ecx
push 0x50e
push str.C:_build_rel_sp_8_4_6_2_srcwindows_atpclient_arr_srvsAdaptCof.cpp
call fcn.0041c4e1
push str.Add_primary_DNS_suffix__n
call fcn.0041c506
add esp, 0x14
call fcn.0041c4cc
push esi
call dword [sym.imp.WS2_32.dll_WSASetLastError]
push edi
call dword [sym.imp.KERNEL32.dll_SetLastError]
lea edi, [esp + 0x40]
or ecx, 0xffffffff
xor eax, eax
repne scasb al, byte es:[edi]
not ecx
dec ecx
je 0x4056bd
lea edi, [esp + 0x40]
or ecx, 0xffffffff
repne scasb al, byte es:[edi]
not ecx
sub edi, ecx
mov esi, edi
mov edx, ecx
mov edi, ebp
or ecx, 0xffffffff
repne scasb al, byte es:[edi]
mov ecx, edx
dec edi
shr ecx, 2
rep movsd dword es:[edi], dword [esi]
mov ecx, edx
and ecx, 3
rep movsb byte es:[edi], byte [esi]
lea edi, [esp + 0x12]
or ecx, 0xffffffff
repne scasb al, byte es:[edi]
not ecx
sub edi, ecx
mov esi, edi
mov edx, ecx
mov edi, ebp
or ecx, 0xffffffff
repne scasb al, byte es:[edi]
mov ecx, edx
dec edi
shr ecx, 2
rep movsd dword es:[edi], dword [esi]
mov ecx, edx
and ecx, 3
rep movsb byte es:[edi], byte [esi]
push str.iphlpapi.dll
call dword [sym.imp.KERNEL32.dll_LoadLibraryA]
mov dword [esp + 0x34], eax
test eax, eax
mov eax, dword [0x441ff4]
je 0x405a53
test eax, eax
je 0x40575a
mov eax, dword [0x441fd4]
mov eax, dword [eax]
cmp eax, 3
je 0x4056f9
mov ecx, dword [0x441fdc]
cmp dword [ecx], 0
jne 0x40575a
cmp eax, 3
jle 0x40575a
call dword [sym.imp.WS2_32.dll_WSAGetLastError]
mov esi, eax
call ebx
mov edi, eax
mov eax, dword [0x436030]
test eax, eax
jge 0x40571a
mov edx, dword [0x441fa0]
mov dword [0x436030], edx
call fcn.0041c4b1
test eax, eax
je 0x40574c
mov eax, dword [0x436030]
push 3
push eax
push 0x519
push str.C:_build_rel_sp_8_4_6_2_srcwindows_atpclient_arr_srvsAdaptCof.cpp
call fcn.0041c4e1
push str.Add_connection_specific_DNS_suffix__n
call fcn.0041c506
add esp, 0x14
call fcn.0041c4cc
push esi
call dword [sym.imp.WS2_32.dll_WSASetLastError]
push edi
call dword [sym.imp.KERNEL32.dll_SetLastError]
mov ecx, dword [esp + 0x34]
push str.GetAdaptersInfo
push ecx
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
mov esi, eax
test esi, esi
je 0x4059ad
push 0x280
mov dword [esp + 0x28], 0x280
call sub.MFC42.DLL_operatornew
add esp, 4
lea edx, [esp + 0x24]
mov edi, eax
push edx
push edi
mov dword [esp + 0x24], edi
call esi
cmp eax, 0x6f
jne 0x4057b3
push edi
call sub.MFC42.DLL_operatordelete
mov eax, dword [esp + 0x28]
push eax
call sub.MFC42.DLL_operatornew
add esp, 8
mov dword [esp + 0x1c], eax
mov edi, dword [esp + 0x1c]
lea ecx, [esp + 0x24]
push ecx
push edi
mov ebx, edi
call esi
test eax, eax
jne 0x405994
xor esi, esi
cmp edi, esi
je 0x405994
cmp dword [ebx + 0x1a0], 6
jne 0x40598a
push 0x441e2c
lea ecx, [esp + 0x1c]
call fcn.00431b90
lea edx, [ebx + 8]
lea eax, [esp + 0x18]
push edx
push str.SYSTEMCurrentControlSetServicesTcpipParametersInterfaces_s
push eax
mov dword [esp + 0x660], esi
call sub.MFC42.DLL_CString::Format
mov edx, dword [esp + 0x24]
add esp, 0xc
lea ecx, [esp + 0x20]
mov dword [esp + 0x20], esi
push ecx
push 0x2001f
push esi
push edx
push reloc.WS2_32.dll_bind
call dword [sym.imp.ADVAPI32.dll_RegOpenKeyExA]
test eax, eax
jne 0x4058d4
mov ecx, 0x82
lea edi, [esp + 0x40]
rep stosd dword es:[edi], eax
mov edx, dword [esp + 0x20]
lea ecx, [esp + 0x40]
stosb byte es:[edi], al
lea eax, [esp + 0x28]
mov dword [esp + 0x28], 0x208
push eax
push ecx
push 0
push 0
push str.Domain
push edx
call dword [sym.imp.ADVAPI32.dll_RegQueryValueExA]
test eax, eax
jne 0x4058c4
lea edi, [esp + 0x40]
or ecx, 0xffffffff
repne scasb al, byte es:[edi]
not ecx
dec ecx
je 0x4058c4
lea edi, [esp + 0x40]
or ecx, 0xffffffff
repne scasb al, byte es:[edi]
not ecx
sub edi, ecx
mov esi, edi
mov edx, ecx
mov edi, ebp
or ecx, 0xffffffff
repne scasb al, byte es:[edi]
mov ecx, edx
dec edi
shr ecx, 2
rep movsd dword es:[edi], dword [esi]
mov ecx, edx
and ecx, 3
rep movsb byte es:[edi], byte [esi]
lea edi, [esp + 0x12]
or ecx, 0xffffffff
repne scasb al, byte es:[edi]
not ecx
sub edi, ecx
mov esi, edi
mov edx, ecx
mov edi, ebp
or ecx, 0xffffffff
repne scasb al, byte es:[edi]
mov ecx, edx
dec edi
shr ecx, 2
rep movsd dword es:[edi], dword [esi]
mov ecx, edx
and ecx, 3
rep movsb byte es:[edi], byte [esi]
mov eax, dword [esp + 0x20]
push eax
call dword [sym.imp.ADVAPI32.dll_RegCloseKey]
jmp 0x405970
cmp dword [0x441ff4], esi
je 0x405970
mov ecx, dword [0x441fd4]
mov eax, dword [ecx]
cmp eax, 1
je 0x4058fd
mov edx, dword [0x441fdc]
cmp dword [edx], 0
jne 0x405970
cmp eax, 1
jle 0x405970
call dword [sym.imp.WS2_32.dll_WSAGetLastError]
mov esi, eax
call dword [sym.imp.KERNEL32.dll_GetLastError]
mov edi, eax
mov eax, dword [0x436030]
test eax, eax
jge 0x405920
mov eax, dword [0x441fa0]
mov dword [0x436030], eax
call fcn.0041c4b1
test eax, eax
je 0x405962
mov ecx, dword [0x436030]
push 1
push ecx
push 0x53e
push str.C:_build_rel_sp_8_4_6_2_srcwindows_atpclient_arr_srvsAdaptCof.cpp
call fcn.0041c4e1
add esp, 0x10
call dword [sym.imp.KERNEL32.dll_GetLastError]
mov edx, dword [esp + 0x18]
push eax
push edx
push str.Failed_to_open_reg:_s__error_d_n
call fcn.0041c506
add esp, 0xc
call fcn.0041c4cc
push esi
call dword [sym.imp.WS2_32.dll_WSASetLastError]
push edi
call dword [sym.imp.KERNEL32.dll_SetLastError]
lea ecx, [esp + 0x18]
mov dword [esp + 0x654], 0xffffffff
call sub.MFC42.DLL_CString::CString
mov edi, dword [esp + 0x1c]
xor esi, esi
mov ebx, dword [ebx]
cmp ebx, esi
jne 0x4057d3
push edi
call sub.MFC42.DLL_operatordelete
mov ecx, dword [esp + 0x38]
add esp, 4
push ecx
call dword [sym.imp.KERNEL32.dll_FreeLibrary]
jmp 0x405ae8
mov eax, dword [0x441ff4]
test eax, eax
je 0x405a43
mov eax, dword [0x441fd4]
mov eax, dword [eax]
cmp eax, 1
je 0x4059d6
mov ecx, dword [0x441fdc]
cmp dword [ecx], 0
jne 0x405a43
cmp eax, 1
jle 0x405a43
call dword [sym.imp.WS2_32.dll_WSAGetLastError]
mov ebx, dword [sym.imp.KERNEL32.dll_GetLastError]
mov esi, eax
call ebx
mov edi, eax
mov eax, dword [0x436030]
test eax, eax
jge 0x4059fd
mov edx, dword [0x441fa0]
mov dword [0x436030], edx
call fcn.0041c4b1
test eax, eax
je 0x405a35
mov eax, dword [0x436030]
push 1
push eax
push 0x549
push str.C:_build_rel_sp_8_4_6_2_srcwindows_atpclient_arr_srvsAdaptCof.cpp
call fcn.0041c4e1
add esp, 0x10
call ebx
push eax
push str.Get_function_address_failed._Error___d_n
call fcn.0041c506
add esp, 8
call fcn.0041c4cc
push esi
call dword [sym.imp.WS2_32.dll_WSASetLastError]
push edi
call dword [sym.imp.KERNEL32.dll_SetLastError]
mov ecx, dword [esp + 0x34]
push ecx
call dword [sym.imp.KERNEL32.dll_FreeLibrary]
jmp 0x405ae8
test eax, eax
je 0x405aee
mov edx, dword [0x441fd4]
mov eax, dword [edx]
cmp eax, 1
je 0x405a78
mov ecx, dword [0x441fdc]
cmp dword [ecx], 0
jne 0x405aee
cmp eax, 1
jle 0x405aee
call dword [sym.imp.WS2_32.dll_WSAGetLastError]
mov esi, eax
call ebx
mov edi, eax
mov eax, dword [0x436030]
test eax, eax
jge 0x405a99
mov edx, dword [0x441fa0]
mov dword [0x436030], edx
call fcn.0041c4b1
test eax, eax
je 0x405ad1
mov eax, dword [0x436030]
push 1
push eax
push 0x54f
push str.C:_build_rel_sp_8_4_6_2_srcwindows_atpclient_arr_srvsAdaptCof.cpp
call fcn.0041c4e1
add esp, 0x10
call ebx
push eax
push str.Load_library_failed._Error___d_n
call fcn.0041c506
add esp, 8
call fcn.0041c4cc
push esi
call dword [sym.imp.WS2_32.dll_WSASetLastError]
push edi
call dword [sym.imp.KERNEL32.dll_SetLastError]
jmp 0x405aee
mov byte [0x441820], 0
mov ebx, dword [sym.imp.KERNEL32.dll_GetLastError]
push 0x441ce0
push 0x436d98
push str.Array_Networks
lea ecx, [esp + 0x258]
push str.Software_s_s_s
push ecx
call dword [sym.imp.MSVCRT.dll_sprintf]
add esp, 0x14
lea edx, [esp + 0x2c]
lea eax, [esp + 0x24c]
push edx
push 0x2001f
push 0
push eax
push reloc.WS2_32.dll_bind
call dword [sym.imp.ADVAPI32.dll_RegOpenKeyExA]
test eax, eax
je 0x405be8
push 0x54
mov ecx, 0x442408
call fcn.0042053a
push 0
push 0
push 0
push 0
push 2
push 0x11
call fcn.0041e7ec
mov eax, dword [0x441ff4]
add esp, 0x18
test eax, eax
je 0x405ee4
mov ecx, dword [0x441fd4]
mov eax, dword [ecx]
cmp eax, 1
je 0x405b8c
mov edx, dword [0x441fdc]
cmp dword [edx], 0
jne 0x405ee4
cmp eax, 1
jle 0x405ee4
call dword [sym.imp.WS2_32.dll_WSAGetLastError]
mov esi, eax
call ebx
mov edi, eax
mov eax, dword [0x436030]
test eax, eax
jge 0x405bab
mov eax, dword [0x441fa0]
mov dword [0x436030], eax
call fcn.0041c4b1
test eax, eax
je 0x405ed6
mov ecx, dword [0x436030]
push 1
push ecx
push 0x55e
push str.C:_build_rel_sp_8_4_6_2_srcwindows_atpclient_arr_srvsAdaptCof.cpp
call fcn.0041c4e1
add esp, 0x10
call ebx
lea edx, [esp + 0x24c]
push eax
push edx
push str.Failed_to_open_registry_for_this_version__s__error_d_n
jmp 0x405ec9
mov edi, 0x441820
or ecx, 0xffffffff
xor eax, eax
mov ebp, dword [sym.imp.ADVAPI32.dll_RegSetValueExA]
repne scasb al, byte es:[edi]
not ecx
push ecx
push 0x441820
push 1
push eax
mov eax, dword [esp + 0x3c]
push str.OrigSearchList
push eax
call ebp
test eax, eax
jne 0x405e28
mov eax, dword [0x441ff4]
test eax, eax
je 0x405cac
mov ecx, dword [0x441fd4]
mov eax, dword [ecx]
cmp eax, 3
je 0x405c43
mov edx, dword [0x441fdc]
cmp dword [edx], 0
jne 0x405cac
cmp eax, 3
jle 0x405cac
call dword [sym.imp.WS2_32.dll_WSAGetLastError]
mov esi, eax
call dword [sym.imp.KERNEL32.dll_GetLastError]
mov edi, eax
mov eax, dword [0x436030]
test eax, eax
jge 0x405c66
mov eax, dword [0x441fa0]
mov dword [0x436030], eax
call fcn.0041c4b1
test eax, eax
je 0x405c9e
mov ecx, dword [0x436030]
push 3
push ecx
push 0x564
push str.C:_build_rel_sp_8_4_6_2_srcwindows_atpclient_arr_srvsAdaptCof.cpp
call fcn.0041c4e1
push 0x441820
push str.Original_Domain_Search_List:__s_n
call fcn.0041c506
add esp, 0x18
call fcn.0041c4cc
push esi
call dword [sym.imp.WS2_32.dll_WSASetLastError]
push edi
call dword [sym.imp.KERNEL32.dll_SetLastError]
mov ebx, dword [esp + 0x38]
or ecx, 0xffffffff
mov edi, ebx
xor eax, eax
mov byte [0x441e1c], 1
mov edx, dword [esp + 0x14]
repne scasb al, byte es:[edi]
not ecx
push ecx
push ebx
push 1
push eax
push str.SearchList
push edx
call ebp
test eax, eax
jne 0x405d74
mov eax, dword [0x441ff4]
test eax, eax
je 0x405d6a
mov eax, dword [0x441fd4]
mov eax, dword [eax]
cmp eax, 3
je 0x405d04
mov ecx, dword [0x441fdc]
cmp dword [ecx], 0
jne 0x405d6a
cmp eax, 3
jle 0x405d6a
call dword [sym.imp.WS2_32.dll_WSAGetLastError]
mov esi, eax
call dword [sym.imp.KERNEL32.dll_GetLastError]
mov edi, eax
mov eax, dword [0x436030]
test eax, eax
jge 0x405d29
mov edx, dword [0x441fa0]
mov dword [0x436030], edx
call fcn.0041c4b1
test eax, eax
je 0x405d5c
mov eax, dword [0x436030]
push 3
push eax
push 0x573
push str.C:_build_rel_sp_8_4_6_2_srcwindows_atpclient_arr_srvsAdaptCof.cpp
call fcn.0041c4e1
push ebx
push str.Domain_Search_List:__s_n
call fcn.0041c506
add esp, 0x18
call fcn.0041c4cc
push esi
call dword [sym.imp.WS2_32.dll_WSASetLastError]
push edi
call dword [sym.imp.KERNEL32.dll_SetLastError]
mov byte [esp + 0x11], 1
jmp 0x405ee4
push 0x2a
mov ecx, 0x442408
call fcn.0042053a
push 0
push 0
push 0
push 0
push 2
push 0x11
call fcn.0041e7ec
mov eax, dword [0x441ff4]
add esp, 0x18
test eax, eax
je 0x405ee4
mov ecx, dword [0x441fd4]
mov eax, dword [ecx]
cmp eax, 1
je 0x405dc6
mov edx, dword [0x441fdc]
cmp dword [edx], 0
jne 0x405ee4
cmp eax, 1
jle 0x405ee4
call dword [sym.imp.WS2_32.dll_WSAGetLastError]
mov ebp, dword [sym.imp.KERNEL32.dll_GetLastError]
mov esi, eax
call ebp
mov edi, eax
mov eax, dword [0x436030]
test eax, eax
jge 0x405deb
mov eax, dword [0x441fa0]
mov dword [0x436030], eax
call fcn.0041c4b1
test eax, eax
je 0x405ed6
mov ecx, dword [0x436030]
push 1
push ecx
push 0x57a
push str.C:_build_rel_sp_8_4_6_2_srcwindows_atpclient_arr_srvsAdaptCof.cpp
call fcn.0041c4e1
add esp, 0x10
call ebp
push eax
push str.Failed_to_set_domain_search_list__error_d_n
call fcn.0041c506
add esp, 8
jmp 0x405ed1
push 0x55
mov ecx, 0x442408
call fcn.0042053a
push 0
push 0
push 0
push 0
push 2
push 0x11
call fcn.0041e7ec
mov eax, dword [0x441ff4]
add esp, 0x18
test eax, eax
je 0x405ee4
mov edx, dword [0x441fd4]
mov eax, dword [edx]
cmp eax, 1
je 0x405e72
mov ecx, dword [0x441fdc]
cmp dword [ecx], 0
jne 0x405ee4
cmp eax, 1
jle 0x405ee4
call dword [sym.imp.WS2_32.dll_WSAGetLastError]
mov ebp, dword [sym.imp.KERNEL32.dll_GetLastError]
mov esi, eax
call ebp
mov edi, eax
mov eax, dword [0x436030]
test eax, eax
jge 0x405e99
mov edx, dword [0x441fa0]
mov dword [0x436030], edx
call fcn.0041c4b1
test eax, eax
je 0x405ed6
mov eax, dword [0x436030]
push 1
push eax
push 0x56a
push str.C:_build_rel_sp_8_4_6_2_srcwindows_atpclient_arr_srvsAdaptCof.cpp
call fcn.0041c4e1
add esp, 0x10
call ebp
push eax
push 0x441820
push str.Failed_to_save_orginal_domain_search_list__s__error_d_n
call fcn.0041c506
add esp, 0xc
call fcn.0041c4cc
push esi
call dword [sym.imp.WS2_32.dll_WSASetLastError]
push edi
call dword [sym.imp.KERNEL32.dll_SetLastError]
mov eax, dword [esp + 0x2c]
test eax, eax
je 0x405ef3
push eax
call dword [sym.imp.ADVAPI32.dll_RegCloseKey]
mov eax, dword [esp + 0x14]
test eax, eax
je 0x405f02
push eax
call dword [sym.imp.ADVAPI32.dll_RegCloseKey]
mov ecx, dword [esp + 0x38]
push ecx
call sub.MFC42.DLL_operatordelete
mov al, byte [esp + 0x15]
add esp, 4
mov ecx, dword [esp + 0x64c]
pop edi
pop esi
pop ebp
pop ebx
mov dword fs:[0], ecx
add esp, 0x648
ret