Function at 0x4185fe
Capabilities:
Persist via run registry key

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x28
mov ebx, dword [0x78a47b]
call fcn.004011ea
push ebx
push ecx
mov eax, dword [ebp + 8]
dec eax
jns 0x418627
push 4
call fcn.0043fb89
add esp, 4
pop ecx
pop ebx
cmp eax, ecx
jl 0x41863a
push 1
call fcn.0043fb89
add esp, 4
shl eax, 2
add ebx, eax
mov ebx, dword [ebx]
add ebx, 4
mov dword [ebp - 4], ebx
push 0x74404b
mov ebx, dword [ebp - 4]
push dword [ebx]
call fcn.004016b2
add esp, 8
cmp eax, 0
jne 0x418850
mov ebx, dword [0x78a47b]
call fcn.004011ea
push ebx
push ecx
mov eax, dword [ebp + 8]
dec eax
jns 0x418682
push 4
call fcn.0043fb89
add esp, 4
pop ecx
pop ebx
cmp eax, ecx
jl 0x418695
push 1
call fcn.0043fb89
add esp, 4
shl eax, 2
add ebx, eax
mov ebx, dword [ebx]
add ebx, 8
mov dword [ebp - 4], ebx
push 0x80000004
push 0
mov ebx, dword [ebp - 4]
mov eax, dword [ebx]
test eax, eax
jne 0x4186b7
mov eax, 0x478de2
push eax
push 1
mov ebx, 0x9dc
call fcn.00440110
add esp, 0x10
mov dword [ebp - 8], eax
mov ebx, dword [0x78a47b]
call fcn.004011ea
push ebx
push ecx
mov eax, dword [ebp + 8]
dec eax
jns 0x4186ed
push 4
call fcn.0043fb89
add esp, 4
pop ecx
pop ebx
cmp eax, ecx
jl 0x418700
push 1
call fcn.0043fb89
add esp, 4
shl eax, 2
add ebx, eax
mov ebx, dword [ebx]
add ebx, 0xc
mov dword [ebp - 0xc], ebx
mov ebx, dword [0x78a47b]
call fcn.004011ea
push ebx
push ecx
mov eax, dword [ebp + 8]
dec eax
jns 0x41872d
push 4
call fcn.0043fb89
add esp, 4
pop ecx
pop ebx
cmp eax, ecx
jl 0x418740
push 1
call fcn.0043fb89
add esp, 4
shl eax, 2
add ebx, eax
mov ebx, dword [ebx]
add ebx, 0x10
mov dword [ebp - 0x10], ebx
push 0x80000004
push 0
mov ebx, dword [ebp - 0x10]
mov eax, dword [ebx]
test eax, eax
jne 0x418762
mov eax, 0x478de2
push eax
push 1
mov ebx, 0x9dc
call fcn.00440110
add esp, 0x10
push 0x80000301
push 0
push eax
push 0x80000004
push 0
mov ebx, dword [ebp - 0xc]
mov eax, dword [ebx]
test eax, eax
jne 0x418792
mov eax, 0x478de2
push eax
push 0x80000301
push 0
push dword [ebp - 8]
push 3
mov ebx, 0x6a4
call fcn.00443de0
add esp, 0x28
mov dword [ebp - 0x1c], eax
cmp dword [ebp - 0x1c], 0
jne 0x41884b
push 0x80000301
push 0
push dword [ebp + 8]
push 1
mov ebx, 0x168
call fcn.00441470
add esp, 0x10
mov dword [ebp - 4], eax
push 0x744054
push dword [ebp - 4]
push 0x744068
mov ecx, 3
call fcn.00402ed8
add esp, 0xc
mov dword [ebp - 8], eax
mov ebx, dword [ebp - 4]
test ebx, ebx
je 0x418808
push ebx
call fcn.0043fb83
add esp, 4
push 0x80000004
push 0
mov eax, dword [ebp - 8]
test eax, eax
jne 0x41881b
mov eax, 0x478de2
push eax
push 0x80000301
push 0
push dword [0x78a37b]
push 2
mov ebx, 0x2a0
call fcn.004443f0
add esp, 0x1c
mov ebx, dword [ebp - 8]
test ebx, ebx
je 0x41884b
push ebx
call fcn.0043fb83
add esp, 4
jmp 0x419daf
mov ebx, dword [0x78a47b]
call fcn.004011ea
push ebx
push ecx
mov eax, dword [ebp + 8]
dec eax
jns 0x418870
push 4
call fcn.0043fb89
add esp, 4
pop ecx
pop ebx
cmp eax, ecx
jl 0x418883
push 1
call fcn.0043fb89
add esp, 4
shl eax, 2
add ebx, eax
mov ebx, dword [ebx]
add ebx, 4
mov dword [ebp - 4], ebx
push 0x74406c
mov ebx, dword [ebp - 4]
push dword [ebx]
call fcn.004016b2
add esp, 8
cmp eax, 0
jne 0x418a49
mov ebx, dword [0x78a47b]
call fcn.004011ea
push ebx
push ecx
mov eax, dword [ebp + 8]
dec eax
jns 0x4188cb
push 4
call fcn.0043fb89
add esp, 4
pop ecx
pop ebx
cmp eax, ecx
jl 0x4188de
push 1
call fcn.0043fb89
add esp, 4
shl eax, 2
add ebx, eax
mov ebx, dword [ebx]
add ebx, 8
mov dword [ebp - 4], ebx
push 0x80000004
push 0
mov ebx, dword [ebp - 4]
mov eax, dword [ebx]
test eax, eax
jne 0x418900
mov eax, 0x478de2
push eax
push 1
mov ebx, 0x174
call fcn.00444560
add esp, 0x10
mov dword [ebp - 8], eax
push 0x80000004
push 0
mov eax, dword [ebp - 8]
test eax, eax
jne 0x418929
mov eax, 0x478de2
push eax
push 1
mov ebx, 0x24c
call fcn.004410b0
add esp, 0x10
mov dword [ebp - 0xc], eax
mov ebx, dword [ebp - 8]
test ebx, ebx
je 0x41894f
push ebx
call fcn.0043fb83
add esp, 4
cmp dword [ebp - 0xc], 0
je 0x418a44
mov ebx, dword [0x78a47b]
call fcn.004011ea
push ebx
push ecx
mov eax, dword [ebp + 8]
dec eax
jns 0x418979
push 4
call fcn.0043fb89
add esp, 4
pop ecx
pop ebx
cmp eax, ecx
jl 0x41898c
push 1
call fcn.0043fb89
add esp, 4
shl eax, 2
add ebx, eax
mov ebx, dword [ebx]
add ebx, 8
mov dword [ebp - 4], ebx
push 0x80000004
push 0
mov ebx, dword [ebp - 4]
mov eax, dword [ebx]
test eax, eax
jne 0x4189ae
mov eax, 0x478de2
push eax
push 1
mov ebx, 0x174
call fcn.00444560
add esp, 0x10
mov dword [ebp - 8], eax
push 0x743bad
push dword [ebp - 8]
push str.regsvr32.exe__u__s__
mov ecx, 3
call fcn.00402ed8
add esp, 0xc
mov dword [ebp - 0xc], eax
mov ebx, dword [ebp - 8]
test ebx, ebx
je 0x4189f1
push ebx
call fcn.0043fb83
add esp, 4
push 0x80000301
push 0
push 1
push 0x80000002
push 0
push 1
push 0x80000004
push 0
mov eax, dword [ebp - 0xc]
test eax, eax
jne 0x418a1c
mov eax, 0x478de2
push eax
push 3
mov ebx, 0x2c0
call fcn.004445f0
add esp, 0x28
mov ebx, dword [ebp - 0xc]
test ebx, ebx
je 0x418a3f
push ebx
call fcn.0043fb83
add esp, 4
jmp 0x418a44
jmp 0x419daf
mov ebx, dword [0x78a47b]
call fcn.004011ea
push ebx
push ecx
mov eax, dword [ebp + 8]
dec eax
jns 0x418a69
push 4
call fcn.0043fb89
add esp, 4
pop ecx
pop ebx
cmp eax, ecx
jl 0x418a7c
push 1
call fcn.0043fb89
add esp, 4
shl eax, 2
add ebx, eax
mov ebx, dword [ebx]
add ebx, 4
mov dword [ebp - 4], ebx
push 0x74408a
mov ebx, dword [ebp - 4]
push dword [ebx]
call fcn.004016b2
add esp, 8
cmp eax, 0
jne 0x418ca5
mov ebx, dword [0x78a47b]
call fcn.004011ea
push ebx
push ecx
mov eax, dword [ebp + 8]
dec eax
jns 0x418ac4
push 4
call fcn.0043fb89
add esp, 4
pop ecx
pop ebx
cmp eax, ecx
jl 0x418ad7
push 1
call fcn.0043fb89
add esp, 4
shl eax, 2
add ebx, eax
mov ebx, dword [ebx]
add ebx, 8
mov dword [ebp - 4], ebx
push 0x80000004
push 0
mov ebx, dword [ebp - 4]
mov eax, dword [ebx]
test eax, eax
jne 0x418af9
mov eax, 0x478de2
push eax
push 1
mov ebx, 0x174
call fcn.00444560
add esp, 0x10
mov dword [ebp - 8], eax
push 0x80000004
push 0
mov eax, dword [ebp - 8]
test eax, eax
jne 0x418b22
mov eax, 0x478de2
push eax
push 1
mov ebx, 0x24c
call fcn.004410b0
add esp, 0x10
mov dword [ebp - 0xc], eax
mov ebx, dword [ebp - 8]
test ebx, ebx
je 0x418b48
push ebx
call fcn.0043fb83
add esp, 4
cmp dword [ebp - 0xc], 0
je 0x418ca0
mov ebx, dword [0x78a47b]
call fcn.004011ea
push ebx
push ecx
mov eax, dword [ebp + 8]
dec eax
jns 0x418b72
push 4
call fcn.0043fb89
add esp, 4
pop ecx
pop ebx
cmp eax, ecx
jl 0x418b85
push 1
call fcn.0043fb89
add esp, 4
shl eax, 2
add ebx, eax
mov ebx, dword [ebx]
add ebx, 8
mov dword [ebp - 4], ebx
push 0x80000004
push 0
mov ebx, dword [ebp - 4]
mov eax, dword [ebx]
test eax, eax
jne 0x418ba7
mov eax, 0x478de2
push eax
push 1
mov ebx, 0x174
call fcn.00444560
add esp, 0x10
mov dword [ebp - 8], eax
push 0x80000301
push 0
push 0x20
push 0x80000004
push 0
mov eax, dword [ebp - 8]
test eax, eax
jne 0x418bdc
mov eax, 0x478de2
push eax
push 2
mov ebx, 0x260
call fcn.00443ca0
add esp, 0x1c
mov ebx, dword [ebp - 8]
test ebx, ebx
je 0x418bff
push ebx
call fcn.0043fb83
add esp, 4
mov ebx, dword [0x78a47b]
call fcn.004011ea
push ebx
push ecx
mov eax, dword [ebp + 8]
dec eax
jns 0x418c1f
push 4
call fcn.0043fb89
add esp, 4
pop ecx
pop ebx
cmp eax, ecx
jl 0x418c32
push 1
call fcn.0043fb89
add esp, 4
shl eax, 2
add ebx, eax
mov ebx, dword [ebx]
add ebx, 8
mov dword [ebp - 4], ebx
push 0x80000004
push 0
mov ebx, dword [ebp - 4]
mov eax, dword [ebx]
test eax, eax
jne 0x418c54
mov eax, 0x478de2
push eax
push 1
mov ebx, 0x174
call fcn.00444560
add esp, 0x10
mov dword [ebp - 8], eax
push 0x80000004
push 0
mov eax, dword [ebp - 8]
test eax, eax
jne 0x418c7d
mov eax, 0x478de2
push eax
push 1
mov ebx, 0x244
call fcn.00440b60
add esp, 0x10
mov ebx, dword [ebp - 8]
test ebx, ebx
je 0x418ca0
push ebx
call fcn.0043fb83
add esp, 4
jmp 0x419daf
mov ebx, dword [0x78a47b]
call fcn.004011ea
push ebx
push ecx
mov eax, dword [ebp + 8]
dec eax
jns 0x418cc5
push 4
call fcn.0043fb89
add esp, 4
pop ecx
pop ebx
cmp eax, ecx
jl 0x418cd8
push 1
call fcn.0043fb89
add esp, 4
shl eax, 2
add ebx, eax
mov ebx, dword [ebx]
add ebx, 4
mov dword [ebp - 4], ebx
push 0x744093
mov ebx, dword [ebp - 4]
push dword [ebx]
call fcn.004016b2
add esp, 8
cmp eax, 0
jne 0x418fae
mov ebx, dword [0x78a47b]
call fcn.004011ea
push ebx
push ecx
mov eax, dword [ebp + 8]
dec eax
jns 0x418d20
push 4
call fcn.0043fb89
add esp, 4
pop ecx
pop ebx
cmp eax, ecx
jl 0x418d33
push 1
call fcn.0043fb89
add esp, 4
shl eax, 2
add ebx, eax
mov ebx, dword [ebx]
add ebx, 0x10
mov dword [ebp - 4], ebx
push 0x80000004
push 0
mov ebx, dword [ebp - 4]
mov eax, dword [ebx]
test eax, eax
jne 0x418d55
mov eax, 0x478de2
push eax
push 1
mov ebx, 0x174
call fcn.00444560
add esp, 0x10
mov dword [ebp - 8], eax
lea eax, [ebp - 8]
push eax
call fcn.00419db5
mov ebx, dword [ebp - 8]
test ebx, ebx
je 0x418d84
push ebx
call fcn.0043fb83
add esp, 4
mov ebx, dword [0x78a47b]
call fcn.004011ea
push ebx
push ecx
mov eax, dword [ebp + 8]
dec eax
jns 0x418da4
push 4
call fcn.0043fb89
add esp, 4
pop ecx
pop ebx
cmp eax, ecx
jl 0x418db7
push 1
call fcn.0043fb89
add esp, 4
shl eax, 2
add ebx, eax
mov ebx, dword [ebx]
add ebx, 0x10
mov dword [ebp - 4], ebx
mov ebx, dword [0x78a47b]
call fcn.004011ea
push ebx
push ecx
mov eax, dword [ebp + 8]
dec eax
jns 0x418de4
push 4
call fcn.0043fb89
add esp, 4
pop ecx
pop ebx
cmp eax, ecx
jl 0x418df7
push 1
call fcn.0043fb89
add esp, 4
shl eax, 2
add ebx, eax
mov ebx, dword [ebx]
add ebx, 0xc
mov dword [ebp - 8], ebx
mov ebx, dword [ebp - 8]
push dword [ebx]
mov ebx, dword [ebp - 4]
push dword [ebx]
mov ecx, 2
call fcn.00402ed8
add esp, 8
mov dword [ebp - 0xc], eax
mov ebx, dword [0x78a47b]
call fcn.004011ea
push ebx
push ecx
mov eax, dword [ebp + 8]
dec eax
jns 0x418e3e
push 4
call fcn.0043fb89
add esp, 4
pop ecx
pop ebx
cmp eax, ecx
jl 0x418e51
push 1
call fcn.0043fb89
add esp, 4
shl eax, 2
add ebx, eax
mov ebx, dword [ebx]
add ebx, 0xc
mov dword [ebp - 0x10], ebx
push dword [ebp - 0x10]
call fcn.004172f7
mov dword [ebp - 0x14], eax
push 0x80000005
push 0
mov eax, dword [ebp - 0x14]
test eax, eax
jne 0x418e7c
mov eax, 0x4788ac
push eax
push 0x80000004
push 0
mov eax, dword [ebp - 0xc]
test eax, eax
jne 0x418e90
mov eax, 0x478de2
push eax
push 2
mov ebx, 0x26c
call fcn.00441130
add esp, 0x1c
mov dword [ebp - 0x18], eax
mov ebx, dword [ebp - 0xc]
test ebx, ebx
je 0x418eb6
push ebx
call fcn.0043fb83
add esp, 4
mov ebx, dword [ebp - 0x14]
test ebx, ebx
je 0x418ec6
push ebx
call fcn.0043fb83
add esp, 4
cmp dword [ebp - 0x18], 0
jne 0x418fa9
push 0x80000301
push 0
push dword [ebp + 8]
push 1
mov ebx, 0x168
call fcn.00441470
add esp, 0x10
mov dword [ebp - 4], eax
mov ebx, dword [0x78a47b]
call fcn.004011ea
push ebx
push ecx
mov eax, dword [ebp + 8]
dec eax
jns 0x418f0f
push 4
call fcn.0043fb89
add esp, 4
pop ecx
pop ebx
cmp eax, ecx
jl 0x418f22
push 1
call fcn.0043fb89
add esp, 4
shl eax, 2
add ebx, eax
mov ebx, dword [ebx]
add ebx, 0xc
mov dword [ebp - 8], ebx
push 0x74409c
mov ebx, dword [ebp - 8]
push dword [ebx]
push 0x7440a4
push dword [ebp - 4]
push 0x744068
mov ecx, 5
call fcn.00402ed8
add esp, 0x14
mov dword [ebp - 0xc], eax
mov ebx, dword [ebp - 4]
test ebx, ebx
je 0x418f66
push ebx
call fcn.0043fb83
add esp, 4
push 0x80000004
push 0
mov eax, dword [ebp - 0xc]
test eax, eax
jne 0x418f79
mov eax, 0x478de2
push eax
push 0x80000301
push 0
push dword [0x78a37b]
push 2
mov ebx, 0x2a0
call fcn.004443f0
add esp, 0x1c
mov ebx, dword [ebp - 0xc]
test ebx, ebx
je 0x418fa9
push ebx
call fcn.0043fb83
add esp, 4
jmp 0x419daf
mov ebx, dword [0x78a47b]
call fcn.004011ea
push ebx
push ecx
mov eax, dword [ebp + 8]
dec eax
jns 0x418fce
push 4
call fcn.0043fb89
add esp, 4
pop ecx
pop ebx
cmp eax, ecx
jl 0x418fe1
push 1
call fcn.0043fb89
add esp, 4
shl eax, 2
add ebx, eax
mov ebx, dword [ebx]
add ebx, 4
mov dword [ebp - 4], ebx
push 0x7440b0
mov ebx, dword [ebp - 4]
push dword [ebx]
call fcn.004016b2
add esp, 8
cmp eax, 0
jne 0x419236
mov ebx, dword [0x78a47b]
call fcn.004011ea
push ebx
push ecx
mov eax, dword [ebp + 8]
dec eax
jns 0x419029
push 4
call fcn.0043fb89
add esp, 4
pop ecx
pop ebx
cmp eax, ecx
jl 0x41903c
push 1
call fcn.0043fb89
add esp, 4
shl eax, 2
add ebx, eax
mov ebx, dword [ebx]
add ebx, 8
mov dword [ebp - 4], ebx
push 0x80000004
push 0
mov ebx, dword [ebp - 4]
mov eax, dword [ebx]
test eax, eax
jne 0x41905e
mov eax, 0x478de2
push eax
push 1
mov ebx, 0x174
call fcn.00444560
add esp, 0x10
mov dword [ebp - 8], eax
push 0x80000004
push 0
mov eax, dword [ebp - 8]
test eax, eax
jne 0x419087
mov eax, 0x478de2
push eax
push 1
mov ebx, 0x24c
call fcn.004410b0
add esp, 0x10
mov dword [ebp - 0xc], eax
mov ebx, dword [ebp - 8]
test ebx, ebx
je 0x4190ad
push ebx
call fcn.0043fb83
add esp, 4
cmp dword [ebp - 0xc], 0
je 0x4191a2
mov ebx, dword [0x78a47b]
call fcn.004011ea
push ebx
push ecx
mov eax, dword [ebp + 8]
dec eax
jns 0x4190d7
push 4
call fcn.0043fb89
add esp, 4
pop ecx
pop ebx
cmp eax, ecx
jl 0x4190ea
push 1
call fcn.0043fb89
add esp, 4
shl eax, 2
add ebx, eax
mov ebx, dword [ebx]
add ebx, 8
mov dword [ebp - 4], ebx
push 0x80000004
push 0
mov ebx, dword [ebp - 4]
mov eax, dword [ebx]
test eax, eax
jne 0x41910c
mov eax, 0x478de2
push eax
push 1
mov ebx, 0x174
call fcn.00444560
add esp, 0x10
mov dword [ebp - 8], eax
push 0x743bad
push dword [ebp - 8]
push str.regedit.exe__s__
mov ecx, 3
call fcn.00402ed8
add esp, 0xc
mov dword [ebp - 0xc], eax
mov ebx, dword [ebp - 8]
test ebx, ebx
je 0x41914f
push ebx
call fcn.0043fb83
add esp, 4
push 0x80000301
push 0
push 1
push 0x80000002
push 0
push 1
push 0x80000004
push 0
mov eax, dword [ebp - 0xc]
test eax, eax
jne 0x41917a
mov eax, 0x478de2
push eax
push 3
mov ebx, 0x2c0
call fcn.004445f0
add esp, 0x28
mov ebx, dword [ebp - 0xc]
test ebx, ebx
je 0x41919d
push ebx
call fcn.0043fb83
add esp, 4
jmp 0x419231
push 0x80000301
push 0
push dword [ebp + 8]
push 1
mov ebx, 0x168
call fcn.00441470
add esp, 0x10
mov dword [ebp - 4], eax
push 0x7440ca
push dword [ebp - 4]
push 0x744068
mov ecx, 3
call fcn.00402ed8
add esp, 0xc
mov dword [ebp - 8], eax
mov ebx, dword [ebp - 4]
test ebx, ebx
je 0x4191ee
push ebx
call fcn.0043fb83
add esp, 4
push 0x80000004
push 0
mov eax, dword [ebp - 8]
test eax, eax
jne 0x419201
mov eax, 0x478de2
push eax
push 0x80000301
push 0
push dword [0x78a37b]
push 2
mov ebx, 0x2a0
call fcn.004443f0
add esp, 0x1c
mov ebx, dword [ebp - 8]
test ebx, ebx
je 0x419231
push ebx
call fcn.0043fb83
add esp, 4
jmp 0x419daf
mov ebx, dword [0x78a47b]
call fcn.004011ea
push ebx
push ecx
mov eax, dword [ebp + 8]
dec eax
jns 0x419256
push 4
call fcn.0043fb89
add esp, 4
pop ecx
pop ebx
cmp eax, ecx
jl 0x419269
push 1
call fcn.0043fb89
add esp, 4
shl eax, 2
add ebx, eax
mov ebx, dword [ebx]
add ebx, 4
mov dword [ebp - 4], ebx
push 0x7440e4
mov ebx, dword [ebp - 4]
push dword [ebx]
call fcn.004016b2
add esp, 8
cmp eax, 0
jne 0x4194be
mov ebx, dword [0x78a47b]
call fcn.004011ea
push ebx
push ecx
mov eax, dword [ebp + 8]
dec eax
jns 0x4192b1
push 4
call fcn.0043fb89
add esp, 4
pop ecx
pop ebx
cmp eax, ecx
jl 0x4192c4
push 1
call fcn.0043fb89
add esp, 4
shl eax, 2
add ebx, eax
mov ebx, dword [ebx]
add ebx, 8
mov dword [ebp - 4], ebx
push 0x80000004
push 0
mov ebx, dword [ebp - 4]
mov eax, dword [ebx]
test eax, eax
jne 0x4192e6
mov eax, 0x478de2
push eax
push 1
mov ebx, 0x174
call fcn.00444560
add esp, 0x10
mov dword [ebp - 8], eax
push 0x80000004
push 0
mov eax, dword [ebp - 8]
test eax, eax
jne 0x41930f
mov eax, 0x478de2
push eax
push 1
mov ebx, 0x24c
call fcn.004410b0
add esp, 0x10
mov dword [ebp - 0xc], eax
mov ebx, dword [ebp - 8]
test ebx, ebx
je 0x419335
push ebx
call fcn.0043fb83
add esp, 4
cmp dword [ebp - 0xc], 0
je 0x41942a
mov ebx, dword [0x78a47b]
call fcn.004011ea
push ebx
push ecx
mov eax, dword [ebp + 8]
dec eax
jns 0x41935f
push 4
call fcn.0043fb89
add esp, 4
pop ecx
pop ebx
cmp eax, ecx
jl 0x419372
push 1
call fcn.0043fb89
add esp, 4
shl eax, 2
add ebx, eax
mov ebx, dword [ebx]
add ebx, 8
mov dword [ebp - 4], ebx
push 0x80000004
push 0
mov ebx, dword [ebp - 4]
mov eax, dword [ebx]
test eax, eax
jne 0x419394
mov eax, 0x478de2
push eax
push 1
mov ebx, 0x174
call fcn.00444560
add esp, 0x10
mov dword [ebp - 8], eax
push 0x743bad
push dword [ebp - 8]
push str.regsvr32.exe__s__
mov ecx, 3
call fcn.00402ed8
add esp, 0xc
mov dword [ebp - 0xc], eax
mov ebx, dword [ebp - 8]
test ebx, ebx
je 0x4193d7
push ebx
call fcn.0043fb83
add esp, 4
push 0x80000301
push 0
push 1
push 0x80000002
push 0
push 1
push 0x80000004
push 0
mov eax, dword [ebp - 0xc]
test eax, eax
jne 0x419402
mov eax, 0x478de2
push eax
push 3
mov ebx, 0x2c0
call fcn.004445f0
add esp, 0x28
mov ebx, dword [ebp - 0xc]
test ebx, ebx
je 0x419425
push ebx
call fcn.0043fb83
add esp, 4
jmp 0x4194b9
push 0x80000301
push 0
push dword [ebp + 8]
push 1
mov ebx, 0x168
call fcn.00441470
add esp, 0x10
mov dword [ebp - 4], eax
push 0x7440ff
push dword [ebp - 4]
push 0x744068
mov ecx, 3
call fcn.00402ed8
add esp, 0xc
mov dword [ebp - 8], eax
mov ebx, dword [ebp - 4]
test ebx, ebx
je 0x419476
push ebx
call fcn.0043fb83
add esp, 4
push 0x80000004
push 0
mov eax, dword [ebp - 8]
test eax, eax
jne 0x419489
mov eax, 0x478de2
push eax
push 0x80000301
push 0
push dword [0x78a37b]
push 2
mov ebx, 0x2a0
call fcn.004443f0
add esp, 0x1c
mov ebx, dword [ebp - 8]
test ebx, ebx
je 0x4194b9
push ebx
call fcn.0043fb83
add esp, 4
jmp 0x419daf
mov ebx, dword [0x78a47b]
call fcn.004011ea
push ebx
push ecx
mov eax, dword [ebp + 8]
dec eax
jns 0x4194de
push 4
call fcn.0043fb89
add esp, 4
pop ecx
pop ebx
cmp eax, ecx
jl 0x4194f1
push 1
call fcn.0043fb89
add esp, 4
shl eax, 2
add ebx, eax
mov ebx, dword [ebx]
add ebx, 4
mov dword [ebp - 4], ebx
push 0x744117
mov ebx, dword [ebp - 4]
push dword [ebx]
call fcn.004016b2
add esp, 8
cmp eax, 0
jne 0x41963e
mov ebx, dword [0x78a47b]
call fcn.004011ea
push ebx
push ecx
mov eax, dword [ebp + 8]
dec eax
jns 0x419539
push 4
call fcn.0043fb89
add esp, 4
pop ecx
pop ebx
cmp eax, ecx
jl 0x41954c
push 1
call fcn.0043fb89
add esp, 4
shl eax, 2
add ebx, eax
mov ebx, dword [ebx]
add ebx, 8
mov dword [ebp - 4], ebx
push 0x80000004
push 0
mov ebx, dword [ebp - 4]
mov eax, dword [ebx]
test eax, eax
jne 0x41956e
mov eax, 0x478de2
push eax
push 1
mov ebx, 0x174
call fcn.00444560
add esp, 0x10
mov dword [ebp - 8], eax
lea eax, [ebp - 8]
push eax
call fcn.00419db5
mov dword [ebp - 0xc], eax
mov ebx, dword [ebp - 8]
test ebx, ebx
je 0x4195a0
push ebx
call fcn.0043fb83
add esp, 4
cmp dword [ebp - 0xc], 0
jne 0x419639
push 0x80000301
push 0
push dword [ebp + 8]
push 1
mov ebx, 0x168
call fcn.00441470
add esp, 0x10
mov dword [ebp - 4], eax
push 0x744120
push dword [ebp - 4]
push 0x744068
mov ecx, 3
call fcn.00402ed8
add esp, 0xc
mov dword [ebp - 8], eax
mov ebx, dword [ebp - 4]
test ebx, ebx
je 0x4195f6
push ebx
call fcn.0043fb83
add esp, 4
push 0x80000004
push 0
mov eax, dword [ebp - 8]
test eax, eax
jne 0x419609
mov eax, 0x478de2
push eax
push 0x80000301
push 0
push dword [0x78a37b]
push 2
mov ebx, 0x2a0
call fcn.004443f0
add esp, 0x1c
mov ebx, dword [ebp - 8]
test ebx, ebx
je 0x419639
push ebx
call fcn.0043fb83
add esp, 4
jmp 0x419daf
mov ebx, dword [0x78a47b]
call fcn.004011ea
push ebx
push ecx
mov eax, dword [ebp + 8]
dec eax
jns 0x41965e
push 4
call fcn.0043fb89
add esp, 4
pop ecx
pop ebx
cmp eax, ecx
jl 0x419671
push 1
call fcn.0043fb89
add esp, 4
shl eax, 2
add ebx, eax
mov ebx, dword [ebx]
add ebx, 4
mov dword [ebp - 4], ebx
push 0x744136
mov ebx, dword [ebp - 4]
push dword [ebx]
call fcn.004016b2
add esp, 8
cmp eax, 0
jne 0x419a31
mov ebx, dword [0x78a47b]
call fcn.004011ea
push ebx
push ecx
mov eax, dword [ebp + 8]
dec eax
jns 0x4196b9
push 4
call fcn.0043fb89
add esp, 4
pop ecx
pop ebx
cmp eax, ecx
jl 0x4196cc
push 1
call fcn.0043fb89
add esp, 4
shl eax, 2
add ebx, eax
mov ebx, dword [ebx]
add ebx, 8
mov dword [ebp - 4], ebx
push 0x80000004
push 0
mov ebx, dword [ebp - 4]
mov eax, dword [ebx]
test eax, eax
jne 0x4196ee
mov eax, 0x478de2
push eax
push 1
mov ebx, 0x174
call fcn.00444560
add esp, 0x10
mov dword [ebp - 8], eax
push 0x80000004
push 0
mov eax, dword [ebp - 8]
test eax, eax
jne 0x419717
mov eax, 0x478de2
push eax
push 1
mov ebx, 0x24c
call fcn.004410b0
add esp, 0x10
mov dword [ebp - 0xc], eax
mov ebx, dword [ebp - 8]
test ebx, ebx
je 0x41973d
push ebx
call fcn.0043fb83
add esp, 4
cmp dword [ebp - 0xc], 0
je 0x419758
cmp dword [0x78a37f], 1
je 0x419758
xor eax, eax
jmp 0x41975d
mov eax, 1
test eax, eax
je 0x419a2c
mov ebx, dword [0x78a47b]
call fcn.004011ea
push ebx
push ecx
mov eax, dword [ebp + 8]
dec eax
jns 0x419785
push 4
call fcn.0043fb89
add esp, 4
pop ecx
pop ebx
cmp eax, ecx
jl 0x419798
push 1
call fcn.0043fb89
add esp, 4
shl eax, 2
add ebx, eax
mov ebx, dword [ebx]
add ebx, 8
mov dword [ebp - 4], ebx
push 0x80000004
push 0
mov ebx, dword [ebp - 4]
mov eax, dword [ebx]
test eax, eax
jne 0x4197ba
mov eax, 0x478de2
push eax
push 1
mov ebx, 0x174
call fcn.00444560
add esp, 0x10
mov dword [ebp - 8], eax
push 0x80000301
push 0
push 0x20
push 0x80000004
push 0
mov eax, dword [ebp - 8]
test eax, eax
jne 0x4197ef
mov eax, 0x478de2
push eax
push 2
mov ebx, 0x260
call fcn.00443ca0
add esp, 0x1c
mov ebx, dword [ebp - 8]
test ebx, ebx
je 0x419812
push ebx
call fcn.0043fb83
add esp, 4
mov ebx, dword [0x78a47b]
call fcn.004011ea
push ebx
push ecx
mov eax, dword [ebp + 8]
dec eax
jns 0x419832
push 4
call fcn.0043fb89
add esp, 4
pop ecx
pop ebx
cmp eax, ecx
jl 0x419845
push 1
call fcn.0043fb89
add esp, 4
shl eax, 2
add ebx, eax
mov ebx, dword [ebx]
add ebx, 8
mov dword [ebp - 4], ebx
push 0x80000004
push 0
mov ebx, dword [ebp - 4]
mov eax, dword [ebx]
test eax, eax
jne 0x419867
mov eax, 0x478de2
push eax
push 1
mov ebx, 0x174
call fcn.00444560
add esp, 0x10
mov dword [ebp - 8], eax
push 0x80000004
push 0
mov eax, dword [ebp - 8]
test eax, eax
jne 0x419890
mov eax, 0x478de2
push eax
push 1
mov ebx, 0x244
call fcn.00440b60
add esp, 0x10
mov ebx, dword [ebp - 8]
test ebx, ebx
je 0x4198b3
push ebx
call fcn.0043fb83
add esp, 4
mov ebx, dword [0x78a47b]
call fcn.004011ea
push ebx
push ecx
mov eax, dword [ebp + 8]
dec eax
jns 0x4198d3
push 4
call fcn.0043fb89
add esp, 4
pop ecx
pop ebx
cmp eax, ecx
jl 0x4198e6
push 1
call fcn.0043fb89
add esp, 4
shl eax, 2
add ebx, eax
mov ebx, dword [ebx]
add ebx, 8
mov dword [ebp - 4], ebx
mov ebx, dword [0x78a47b]
call fcn.004011ea
push ebx
push ecx
mov eax, dword [ebp + 8]
dec eax
jns 0x419913
push 4
call fcn.0043fb89
add esp, 4
pop ecx
pop ebx
cmp eax, ecx
jl 0x419926
push 1
call fcn.0043fb89
add esp, 4
shl eax, 2
add ebx, eax
mov ebx, dword [ebx]
add ebx, 0xc
mov dword [ebp - 8], ebx
mov ebx, dword [0x78a47b]
call fcn.004011ea
push ebx
push ecx
mov eax, dword [ebp + 8]
dec eax
jns 0x419953
push 4
call fcn.0043fb89
add esp, 4
pop ecx
pop ebx
cmp eax, ecx
jl 0x419966
push 1
call fcn.0043fb89
add esp, 4
shl eax, 2
add ebx, eax
mov ebx, dword [ebx]
add ebx, 0x10
mov dword [ebp - 0xc], ebx
mov ebx, dword [0x78a47b]
call fcn.004011ea
push ebx
push ecx
mov eax, dword [ebp + 8]
dec eax
jns 0x419993
push 4
call fcn.0043fb89
add esp, 4
pop ecx
pop ebx
cmp eax, ecx
jl 0x4199a6
push 1
call fcn.0043fb89
add esp, 4
shl eax, 2
add ebx, eax
mov ebx, dword [ebx]
add ebx, 0x18
mov dword [ebp - 0x10], ebx
mov dword [ebp - 0x14], 0
push 0
push dword [ebp - 0x14]
mov dword [ebp - 0x18], 0
push 0
lea eax, [ebp - 0x18]
push eax
mov dword [ebp - 0x1c], 0
push 0
lea eax, [ebp - 0x1c]
push eax
push 1
push dword [ebp - 0x10]
push 1
mov eax, 0x478de2
mov dword [ebp - 0x20], eax
lea eax, [ebp - 0x20]
push eax
push 1
push dword [ebp - 0xc]
push dword [ebp - 8]
push dword [ebp - 4]
call fcn.00414271
mov ebx, dword [ebp - 0x20]
test ebx, ebx
je 0x419a0c
push ebx
call fcn.0043fb83
add esp, 4
mov ebx, dword [ebp - 0x1c]
test ebx, ebx
je 0x419a1c
push ebx
call fcn.0043fb83
add esp, 4
mov ebx, dword [ebp - 0x18]
test ebx, ebx
je 0x419a2c
push ebx
call fcn.0043fb83
add esp, 4
jmp 0x419daf
mov ebx, dword [0x78a47b]
call fcn.004011ea
push ebx
push ecx
mov eax, dword [ebp + 8]
dec eax
jns 0x419a51
push 4
call fcn.0043fb89
add esp, 4
pop ecx
pop ebx
cmp eax, ecx
jl 0x419a64
push 1
call fcn.0043fb89
add esp, 4
shl eax, 2
add ebx, eax
mov ebx, dword [ebx]
add ebx, 4
mov dword [ebp - 4], ebx
push 0x74413f
mov ebx, dword [ebp - 4]
push dword [ebx]
call fcn.004016b2
add esp, 8
cmp eax, 0
jne 0x419c9b
mov ebx, dword [0x78a47b]
call fcn.004011ea
push ebx
push ecx
mov eax, dword [ebp + 8]
dec eax
jns 0x419aac
push 4
call fcn.0043fb89
add esp, 4
pop ecx
pop ebx
cmp eax, ecx
jl 0x419abf
push 1
call fcn.0043fb89
add esp, 4
shl eax, 2
add ebx, eax
mov ebx, dword [ebx]
add ebx, 8
mov dword [ebp - 4], ebx
push 0x80000004
push 0
mov ebx, dword [ebp - 4]
mov eax, dword [ebx]
test eax, eax
jne 0x419ae1
mov eax, 0x478de2
push eax
push 1
mov ebx, 0x174
call fcn.00444560
add esp, 0x10
mov dword [ebp - 8], eax
push dword [ebp - 8]
push str.SOFTWAREMicrosoftWindowsCurrentVersionRun_
mov ecx, 2
call fcn.00402ed8
add esp, 8
mov dword [ebp - 0xc], eax
mov ebx, dword [ebp - 8]
test ebx, ebx
je 0x419b1f
push ebx
call fcn.0043fb83
add esp, 4
mov ebx, dword [0x78a47b]
call fcn.004011ea
push ebx
push ecx
mov eax, dword [ebp + 8]
dec eax
jns 0x419b3f
push 4
call fcn.0043fb89
add esp, 4
pop ecx
pop ebx
cmp eax, ecx
jl 0x419b52
push 1
call fcn.0043fb89
add esp, 4
shl eax, 2
add ebx, eax
mov ebx, dword [ebx]
add ebx, 0xc
mov dword [ebp - 0x10], ebx
push 0x80000004
push 0
mov ebx, dword [ebp - 0x10]
mov eax, dword [ebx]
test eax, eax
jne 0x419b74
mov eax, 0x478de2
push eax
push 1
mov ebx, 0x174
call fcn.00444560
add esp, 0x10
mov dword [ebp - 0x14], eax
mov ebx, dword [0x78a47b]
call fcn.004011ea
push ebx
push ecx
mov eax, dword [ebp + 8]
dec eax
jns 0x419baa
push 4
call fcn.0043fb89
add esp, 4
pop ecx
pop ebx
cmp eax, ecx
jl 0x419bbd
push 1
call fcn.0043fb89
add esp, 4
shl eax, 2
add ebx, eax
mov ebx, dword [ebx]
add ebx, 0x18
mov dword [ebp - 0x18], ebx
push 0x80000004
push 0
mov ebx, dword [ebp - 0x18]
mov eax, dword [ebx]
test eax, eax
jne 0x419bdf
mov eax, 0x478de2
push eax
push 1
mov ebx, 0x174
call fcn.00444560
add esp, 0x10
mov dword [ebp - 0x1c], eax
push dword [ebp - 0x1c]
push 0x744148
push dword [ebp - 0x14]
mov ecx, 3
call fcn.00402ed8
add esp, 0xc
mov dword [ebp - 0x20], eax
mov ebx, dword [ebp - 0x14]
test ebx, ebx
je 0x419c20
push ebx
call fcn.0043fb83
add esp, 4
mov ebx, dword [ebp - 0x1c]
test ebx, ebx
je 0x419c30
push ebx
call fcn.0043fb83
add esp, 4
push 0x80000004
push 0
mov eax, dword [ebp - 0x20]
test eax, eax
jne 0x419c43
mov eax, 0x478de2
push eax
push 0x80000004
push 0
mov eax, dword [ebp - 0xc]
test eax, eax
jne 0x419c57
mov eax, 0x478de2
push eax
push 0x80000301
push 0
push 4
push 3
mov ebx, 0x6a4
call fcn.00443de0
add esp, 0x28
mov ebx, dword [ebp - 0xc]
test ebx, ebx
je 0x419c86
push ebx
call fcn.0043fb83
add esp, 4
mov ebx, dword [ebp - 0x20]
test ebx, ebx
je 0x419c96
push ebx
call fcn.0043fb83
add esp, 4
jmp 0x419daf
mov ebx, dword [0x78a47b]
call fcn.004011ea
push ebx
push ecx
mov eax, dword [ebp + 8]
dec eax
jns 0x419cbb
push 4
call fcn.0043fb89
add esp, 4
pop ecx
pop ebx
cmp eax, ecx
jl 0x419cce
push 1
call fcn.0043fb89
add esp, 4
shl eax, 2
add ebx, eax
mov ebx, dword [ebx]
add ebx, 4
mov dword [ebp - 0x24], ebx
push 0x74414a
mov ebx, dword [ebp - 0x24]
push dword [ebx]
call fcn.004016b2
add esp, 8
cmp eax, 0
jne 0x419daf
mov ebx, dword [0x78a47b]
call fcn.004011ea
push ebx
push ecx
mov eax, dword [ebp + 8]
dec eax
jns 0x419d16
push 4
call fcn.0043fb89
add esp, 4
pop ecx
pop ebx
cmp eax, ecx
jl 0x419d29
push 1
call fcn.0043fb89
add esp, 4
shl eax, 2
add ebx, eax
mov ebx, dword [ebx]
add ebx, 8
mov dword [ebp - 4], ebx
push 0x80000004
push 0
mov ebx, dword [ebp - 4]
mov eax, dword [ebx]
test eax, eax
jne 0x419d4b
mov eax, 0x478de2
push eax
push 1
mov ebx, 0x174
call fcn.00444560
add esp, 0x10
mov dword [ebp - 8], eax
push 0x80000301
push 0
push 1
push 0x80000002
push 0
push 1
push 0x80000004
push 0
mov eax, dword [ebp - 8]
test eax, eax
jne 0x419d8c
mov eax, 0x478de2
push eax
push 3
mov ebx, 0x2c0
call fcn.004445f0
add esp, 0x28
mov ebx, dword [ebp - 8]
test ebx, ebx
je 0x419daf
push ebx
call fcn.0043fb83
add esp, 4
mov esp, ebp
pop ebp
ret 4