Function at 0x441e0d
Capabilities:
Query or enumerate registry value

Disassembly:
push ebp
mov ebp, esp
add esp, 0xfffff198
push esi
push edi
xor eax, eax
mov dword [ebp - 0x44], eax
xor edx, edx
mov dword [ebp - 0x48], edx
mov esi, str.KFC_
lea edi, [ebp - 0xe68]
mov ecx, 0x100
rep movsd dword es:[edi], dword [esi]
push dword [ebp + 8]
push 0x6996be
push 0x10c
lea eax, [ebp - 0x264]
push eax
call fcn.00441ca2
add esp, 0x10
push 0x5c
lea edx, [ebp - 0x264]
push edx
call fcn.004c0c30
add esp, 8
mov dword [ebp - 4], eax
cmp dword [ebp - 4], 0
jne 0x441e75
lea ecx, [ebp - 0x264]
mov dword [ebp - 4], ecx
jmp 0x441e79
add dword [ebp - 4], 2
lea eax, [ebp - 0xe68]
push eax
call fcn.004c0bac
pop ecx
push eax
lea edx, [ebp - 0xe68]
push edx
push dword [ebp - 4]
call fcn.004c0c04
add esp, 0xc
test eax, eax
jne 0x441eaf
lea ecx, [ebp - 0xe68]
push ecx
call fcn.004c0bac
pop ecx
add eax, eax
add dword [ebp - 4], eax
lea eax, [ebp - 0x18]
push eax
push 0x20019
push 0
push 0x6996c4
push reloc.OLEAUT32.DLL_SysReAllocString
call sub.ADVAPI32.DLL_RegOpenKeyExW
test eax, eax
jne 0x441efd
lea edx, [ebp - 0x14]
push edx
push 0x20019
push 0
push dword [ebp - 4]
push dword [ebp - 0x18]
call sub.ADVAPI32.DLL_RegOpenKeyExW
mov dword [ebp - 0x1c], eax
cmp dword [ebp - 0x1c], 0
je 0x441fe3
push dword [ebp - 0x18]
call sub.ADVAPI32.DLL_RegCloseKey
jmp 0x4424e4
lea ecx, [ebp - 8]
push ecx
push 0x20019
push 0
push str.SYSTEMCurrentControlSetServices
push reloc.OLEAUT32.DLL_SysReAllocString
call sub.ADVAPI32.DLL_RegOpenKeyExW
mov dword [ebp - 0x1c], eax
cmp dword [ebp - 0x1c], 0
jne 0x4424e4
lea eax, [ebp - 0xc]
push eax
push 0x20019
push 0
push dword [ebp - 4]
push dword [ebp - 8]
call sub.ADVAPI32.DLL_RegOpenKeyExW
mov dword [ebp - 0x1c], eax
cmp dword [ebp - 0x1c], 0
je 0x441f58
push dword [ebp - 8]
call sub.ADVAPI32.DLL_RegCloseKey
push dword [ebp - 0x18]
call sub.ADVAPI32.DLL_RegCloseKey
jmp 0x4424e4
push dword [ebp - 8]
call sub.ADVAPI32.DLL_RegCloseKey
lea edx, [ebp - 0x10]
push edx
push 0x20019
push 0
push str.Parameters
push dword [ebp - 0xc]
call sub.ADVAPI32.DLL_RegOpenKeyExW
mov dword [ebp - 0x1c], eax
cmp dword [ebp - 0x1c], 0
je 0x441f96
push dword [ebp - 0xc]
call sub.ADVAPI32.DLL_RegCloseKey
push dword [ebp - 0x18]
call sub.ADVAPI32.DLL_RegCloseKey
jmp 0x4424e4
push dword [ebp - 0xc]
call sub.ADVAPI32.DLL_RegCloseKey
lea ecx, [ebp - 0x14]
push ecx
push 0x20019
push 0
push str.TcpIp
push dword [ebp - 0x10]
call sub.ADVAPI32.DLL_RegOpenKeyExW
mov dword [ebp - 0x1c], eax
cmp dword [ebp - 0x1c], 0
je 0x441fd4
push dword [ebp - 0x10]
call sub.ADVAPI32.DLL_RegCloseKey
push dword [ebp - 0x18]
call sub.ADVAPI32.DLL_RegCloseKey
jmp 0x4424e4
push dword [ebp - 0x10]
call sub.ADVAPI32.DLL_RegCloseKey
mov dword [ebp - 0x24], 0x802
mov dword [ebp - 0x24], 4
lea eax, [ebp - 0x24]
push eax
lea edx, [ebp - 0x40]
push edx
lea ecx, [ebp - 0x20]
push ecx
push 0
push str.UseZeroBroadcast
push dword [ebp - 0x14]
call sub.ADVAPI32.DLL_RegQueryValueExW
mov dword [ebp - 0x1c], eax
cmp dword [ebp - 0x1c], 0
je 0x442013
xor eax, eax
mov dword [ebp - 0x40], eax
mov dword [ebp - 0x24], 4
lea edx, [ebp - 0x24]
push edx
lea ecx, [ebp - 0x28]
push ecx
lea eax, [ebp - 0x20]
push eax
push 0
push str.EnableDHCP
push dword [ebp - 0x14]
call sub.ADVAPI32.DLL_RegQueryValueExW
mov dword [ebp - 0x1c], eax
cmp dword [ebp - 0x1c], 0
je 0x442043
xor edx, edx
mov dword [ebp - 0x28], edx
cmp dword [ebp - 0x28], 0
je 0x44228d
xor ecx, ecx
mov dword [ebp - 0x34], ecx
mov dword [ebp - 0x24], 0x802
lea eax, [ebp - 0x24]
push eax
lea edx, [ebp - 0xa68]
push edx
lea ecx, [ebp - 0x20]
push ecx
push 0
push str.DhcpIPAddress
push dword [ebp - 0x14]
call sub.ADVAPI32.DLL_RegQueryValueExW
mov dword [ebp - 0x1c], eax
cmp dword [ebp - 0x1c], 0
je 0x442095
push dword [ebp - 0x14]
call sub.ADVAPI32.DLL_RegCloseKey
push dword [ebp - 0x18]
call sub.ADVAPI32.DLL_RegCloseKey
jmp 0x4424e4
xor eax, eax
mov dword [ebp - 0x3c], eax
push 0x188
push 0x40
call sub.KERNEL32.DLL_GlobalAlloc
push eax
call sub.KERNEL32.DLL_GlobalLock
mov dword [ebp - 0x4c], eax
cmp dword [ebp - 0x4c], 0
je 0x4424e4
mov edx, dword [ebp - 0x4c]
xor ecx, ecx
mov dword [edx + 0x180], ecx
mov eax, dword [ebp - 0x4c]
mov dword [ebp - 0x2c], eax
mov edx, dword [ebp - 0x3c]
add edx, edx
lea ecx, [ebp - 0xa68]
add edx, ecx
push edx
call fcn.00442f2b
pop ecx
mov edx, dword [ebp - 0x2c]
mov dword [edx + 4], eax
mov eax, dword [ebp - 0x2c]
cmp dword [eax + 4], 0xffffffff
je 0x44217c
mov ecx, dword [ebp - 0x2c]
mov word [ecx], 2
mov eax, dword [ebp - 0x4c]
add eax, 0x100
mov dword [ebp - 0x30], eax
mov edx, dword [ebp - 0x30]
mov word [edx], 2
cmp dword [ebp - 0x40], 0
jne 0x44211e
mov ecx, dword [ebp - 0x30]
mov dword [ecx + 4], 0xffffffff
jmp 0x44212b
mov eax, dword [ebp - 0x30]
xor edx, edx
mov dword [eax + 4], edx
jmp 0x44212b
inc dword [ebp - 0x3c]
mov ecx, dword [ebp - 0x3c]
cmp word [ebp + ecx*2 - 0xa68], 0
jne 0x442128
inc dword [ebp - 0x3c]
cmp dword [ebp - 0x44], 0
jne 0x44214a
mov eax, dword [ebp - 0x4c]
mov dword [ebp - 0x44], eax
jmp 0x442156
mov edx, dword [ebp - 0x48]
mov ecx, dword [ebp - 0x4c]
mov dword [edx + 0x180], ecx
mov eax, dword [ebp - 0x4c]
mov dword [ebp - 0x48], eax
inc dword [ebp - 0x34]
mov edx, dword [ebp - 0x3c]
cmp word [ebp + edx*2 - 0xa68], 0
je 0x44219d
mov ecx, dword [ebp - 0x3c]
add ecx, ecx
cmp ecx, dword [ebp - 0x24]
jae 0x44219d
jmp 0x44209a
push dword [ebp - 0x4c]
call sub.KERNEL32.DLL_GlobalHandle
push eax
call sub.KERNEL32.DLL_GlobalUnlock
push dword [ebp - 0x4c]
call sub.KERNEL32.DLL_GlobalHandle
push eax
call sub.KERNEL32.DLL_GlobalFree
xor eax, eax
mov dword [ebp - 0x4c], eax
mov dword [ebp - 0x24], 0x802
lea edx, [ebp - 0x24]
push edx
lea ecx, [ebp - 0xa68]
push ecx
lea eax, [ebp - 0x20]
push eax
push 0
push str.DhcpSubnetMask
push dword [ebp - 0x14]
call sub.ADVAPI32.DLL_RegQueryValueExW
mov dword [ebp - 0x1c], eax
cmp dword [ebp - 0x1c], 0
je 0x4421e0
push dword [ebp - 0x14]
call sub.ADVAPI32.DLL_RegCloseKey
push dword [ebp - 0x18]
call sub.ADVAPI32.DLL_RegCloseKey
jmp 0x4424e4
xor edx, edx
mov dword [ebp - 0x3c], edx
xor ecx, ecx
mov dword [ebp - 0x38], ecx
mov eax, dword [ebp - 0x44]
mov dword [ebp - 0x4c], eax
cmp dword [ebp - 0x4c], 0
je 0x4424e4
mov edx, dword [ebp - 0x4c]
add edx, 0x80
mov dword [ebp - 0x2c], edx
mov ecx, dword [ebp - 0x3c]
add ecx, ecx
lea eax, [ebp - 0xa68]
add ecx, eax
push ecx
call fcn.00442f2b
pop ecx
mov edx, dword [ebp - 0x2c]
mov dword [edx + 4], eax
cmp eax, 0xffffffff
je 0x44226c
mov edx, dword [ebp - 0x2c]
mov word [edx], 2
jmp 0x442232
inc dword [ebp - 0x3c]
mov ecx, dword [ebp - 0x3c]
cmp word [ebp + ecx*2 - 0xa68], 0
jne 0x44222f
inc dword [ebp - 0x3c]
mov eax, dword [ebp - 0x4c]
mov edx, dword [eax + 0x180]
mov dword [ebp - 0x4c], edx
inc dword [ebp - 0x38]
mov ecx, dword [ebp - 0x3c]
cmp word [ebp + ecx*2 - 0xa68], 0
je 0x44226c
mov eax, dword [ebp - 0x3c]
add eax, eax
cmp eax, dword [ebp - 0x24]
jae 0x44226c
jmp 0x4421f0
mov edx, dword [ebp - 0x38]
cmp edx, dword [ebp - 0x34]
je 0x4424c2
push dword [ebp - 0x14]
call sub.ADVAPI32.DLL_RegCloseKey
push dword [ebp - 0x18]
call sub.ADVAPI32.DLL_RegCloseKey
jmp 0x4424e4
xor ecx, ecx
mov dword [ebp - 0x34], ecx
mov dword [ebp - 0x24], 0x802
lea eax, [ebp - 0x24]
push eax
lea edx, [ebp - 0xa68]
push edx
lea ecx, [ebp - 0x20]
push ecx
push 0
push str.IPAddress
push dword [ebp - 0x14]
call sub.ADVAPI32.DLL_RegQueryValueExW
mov dword [ebp - 0x1c], eax
cmp dword [ebp - 0x1c], 0
je 0x4422d5
push dword [ebp - 0x14]
call sub.ADVAPI32.DLL_RegCloseKey
push dword [ebp - 0x18]
call sub.ADVAPI32.DLL_RegCloseKey
jmp 0x4424e4
xor eax, eax
mov dword [ebp - 0x3c], eax
push 0x188
push 0x40
call sub.KERNEL32.DLL_GlobalAlloc
push eax
call sub.KERNEL32.DLL_GlobalLock
mov dword [ebp - 0x4c], eax
cmp dword [ebp - 0x4c], 0
je 0x4424e4
mov edx, dword [ebp - 0x4c]
xor ecx, ecx
mov dword [edx + 0x180], ecx
mov eax, dword [ebp - 0x4c]
mov dword [ebp - 0x2c], eax
mov edx, dword [ebp - 0x3c]
add edx, edx
lea ecx, [ebp - 0xa68]
add edx, ecx
push edx
call fcn.00442f2b
pop ecx
mov edx, dword [ebp - 0x2c]
mov dword [edx + 4], eax
cmp eax, 0xffffffff
je 0x4423b8
mov ecx, dword [ebp - 0x2c]
mov word [ecx], 2
mov eax, dword [ebp - 0x4c]
add eax, 0x100
mov dword [ebp - 0x30], eax
mov edx, dword [ebp - 0x30]
mov word [edx], 2
cmp dword [ebp - 0x40], 0
jne 0x44235a
mov ecx, dword [ebp - 0x30]
mov dword [ecx + 4], 0xffffffff
jmp 0x442367
mov eax, dword [ebp - 0x30]
xor edx, edx
mov dword [eax + 4], edx
jmp 0x442367
inc dword [ebp - 0x3c]
mov ecx, dword [ebp - 0x3c]
cmp word [ebp + ecx*2 - 0xa68], 0
jne 0x442364
inc dword [ebp - 0x3c]
cmp dword [ebp - 0x44], 0
jne 0x442386
mov eax, dword [ebp - 0x4c]
mov dword [ebp - 0x44], eax
jmp 0x442392
mov edx, dword [ebp - 0x48]
mov ecx, dword [ebp - 0x4c]
mov dword [edx + 0x180], ecx
mov eax, dword [ebp - 0x4c]
mov dword [ebp - 0x48], eax
inc dword [ebp - 0x34]
mov edx, dword [ebp - 0x3c]
cmp word [ebp + edx*2 - 0xa68], 0
je 0x4423d9
mov ecx, dword [ebp - 0x3c]
add ecx, ecx
cmp ecx, dword [ebp - 0x24]
jae 0x4423d9
jmp 0x4422da
push dword [ebp - 0x4c]
call sub.KERNEL32.DLL_GlobalHandle
push eax
call sub.KERNEL32.DLL_GlobalUnlock
push dword [ebp - 0x4c]
call sub.KERNEL32.DLL_GlobalHandle
push eax
call sub.KERNEL32.DLL_GlobalFree
xor eax, eax
mov dword [ebp - 0x4c], eax
mov dword [ebp - 0x24], 0x802
lea edx, [ebp - 0x24]
push edx
lea ecx, [ebp - 0xa68]
push ecx
lea eax, [ebp - 0x20]
push eax
push 0
push str.SubnetMask
push dword [ebp - 0x14]
call sub.ADVAPI32.DLL_RegQueryValueExW
mov dword [ebp - 0x1c], eax
cmp dword [ebp - 0x1c], 0
je 0x44241c
push dword [ebp - 0x14]
call sub.ADVAPI32.DLL_RegCloseKey
push dword [ebp - 0x18]
call sub.ADVAPI32.DLL_RegCloseKey
jmp 0x4424e4
xor edx, edx
mov dword [ebp - 0x3c], edx
xor ecx, ecx
mov dword [ebp - 0x38], ecx
mov eax, dword [ebp - 0x44]
mov dword [ebp - 0x4c], eax
cmp dword [ebp - 0x4c], 0
je 0x4424e4
mov edx, dword [ebp - 0x4c]
add edx, 0x80
mov dword [ebp - 0x2c], edx
mov ecx, dword [ebp - 0x3c]
add ecx, ecx
lea eax, [ebp - 0xa68]
add ecx, eax
push ecx
call fcn.00442f2b
pop ecx
mov edx, dword [ebp - 0x2c]
mov dword [edx + 4], eax
cmp eax, 0xffffffff
je 0x4424a8
mov edx, dword [ebp - 0x2c]
mov word [edx], 2
jmp 0x44246e
inc dword [ebp - 0x3c]
mov ecx, dword [ebp - 0x3c]
cmp word [ebp + ecx*2 - 0xa68], 0
jne 0x44246b
inc dword [ebp - 0x3c]
mov eax, dword [ebp - 0x4c]
mov edx, dword [eax + 0x180]
mov dword [ebp - 0x4c], edx
inc dword [ebp - 0x38]
mov ecx, dword [ebp - 0x3c]
cmp word [ebp + ecx*2 - 0xa68], 0
je 0x4424a8
mov eax, dword [ebp - 0x3c]
add eax, eax
cmp eax, dword [ebp - 0x24]
jae 0x4424a8
jmp 0x44242c
mov edx, dword [ebp - 0x38]
cmp edx, dword [ebp - 0x34]
je 0x4424c2
push dword [ebp - 0x14]
call sub.ADVAPI32.DLL_RegCloseKey
push dword [ebp - 0x18]
call sub.ADVAPI32.DLL_RegCloseKey
jmp 0x4424e4
push dword [ebp - 0x14]
call sub.ADVAPI32.DLL_RegCloseKey
push dword [ebp - 0x18]
call sub.ADVAPI32.DLL_RegCloseKey
cmp dword [ebp - 0x1c], 0
jne 0x4424e4
mov ecx, dword [ebp + 0xc]
mov eax, dword [ebp - 0x44]
mov dword [ecx], eax
mov al, 1
jmp 0x442520
cmp dword [ebp - 0x44], 0
je 0x44251e
mov edx, dword [ebp - 0x44]
mov ecx, dword [edx + 0x180]
mov dword [ebp - 0x4c], ecx
push dword [ebp - 0x44]
call sub.KERNEL32.DLL_GlobalHandle
push eax
call sub.KERNEL32.DLL_GlobalUnlock
push dword [ebp - 0x44]
call sub.KERNEL32.DLL_GlobalHandle
push eax
call sub.KERNEL32.DLL_GlobalFree
mov eax, dword [ebp - 0x4c]
mov dword [ebp - 0x44], eax
cmp dword [ebp - 0x44], 0
jne 0x4424ea
xor eax, eax
pop edi
pop esi
mov esp, ebp
pop ebp
ret