Function at 0x100090f2
Capabilities:
Set registry value

Disassembly:
lea ecx, [ebp - 0x30]
call fcn.1000103b
cmp dword [ebx], 0x82
movzx eax, word [esi]
mov byte [ebp - 4], 3
mov dword [ebp - 0x10], eax
jne 0x10008e71
movzx ecx, ah
mov ch, al
mov eax, ecx
mov dword [ebp - 0x10], eax
cmp eax, 0x2d
jne 0x10008e91
test edi, edi
je 0x10008e86
push eax
lea ebp, [ebp - 0x3c]
call fcn.1000110f
mov eax, dword [ebp - 0x10]
push eax
lea ecx, [ebp - 0x3c]
call fcn.1000110f
jmp 0x10008ea3
cmp eax, 0x2b
jne 0x10008ec0
push 0x10017578
lea ecx, [ebp - 0x3c]
call fcn.100010f2
mov eax, dword [ebx]
and eax, 7
xor edi, edi
add esi, eax
dec dword [ebp - 0x18]
lea ecx, [ebp - 0x30]
mov byte [ebp - 4], 2
call fcn.1000102d
jmp 0x10009513
cmp eax, 0x7f
jae 0x10008f0d
cmp eax, 0x20
jbe 0x10008e86
movsx eax, al
push eax
push dword [0x1001cbf0]
call sub.MSVCRT.dll_strchr
test eax, eax
pop ecx
pop ecx
jne 0x10008e83
movsx eax, byte [ebp - 0x10]
push eax
push str.____._:_
call sub.MSVCRT.dll_strchr
test eax, eax
pop ecx
pop ecx
jne 0x10008e83
movsx eax, byte [ebp - 0x10]
push eax
push str.____________UTF_7
call sub.MSVCRT.dll_strchr
test eax, eax
pop ecx
pop ecx
jne 0x10008e83
lea ecx, [ebp - 0x30]
call fcn.10001048
xor eax, eax
inc eax
mov dword [ebp + 0x14], eax
mov dword [ebp - 0x24], eax
jmp 0x100090bb
cmp dword [ebx], 0x82
movzx eax, word [esi]
mov dword [ebp - 0x10], eax
jne 0x10008f3b
movzx ecx, ah
mov ch, al
mov eax, dword [ecx - 0x77]
inc ebp
invalid
cmp eax, 0x80
jae 0x10008fb9
cmp eax, 0x20
jbe 0x100090c5
movsx eax, al
push eax
push dword [0x1001cbe0]
call sub.MSVCRT.dll_strchr
test eax, eax
pop ecx
pop ecx
jne 0x100090c5
movsx eax, byte [ebp - 0x10]
push eax
push str.____._:_
call sub.MSVCRT.dll_strchr
test eax, eax
pop ecx
pop ecx
jne 0x100090c5
movsx eax, byte [ebp - 0x10]
push eax
push str.____________UTF_7
call sub.MSVCRT.dll_strchr
test eax, eax
pop ecx
pop ecx
jne 0x102090c5
push eax
lea ecx, [ebp - 0x30]
call fcn.1000110f
push dword [ebp - 0x10]
lea ecx, [ebp - 0x30]
call fcn.1000110f
mov eax, dword [ebx]
and eax, 7
add esi, eax
jmp [ebp - 0x18]
cmp dword [ebp - 0x18], 0
je 0x100090c5
cmp eax, 0x80
jb 0x1000900b
shr eax, 8
push eax
lea ecx, [ebp - 0x30]
call fcn.1000110f
push dword [ebp - 0x10]
lea ecx, [ebp - 0x30]
call fcn.1000110f
mov ecx, dword [ebx]
mov eax, ecx
and eax, 7
add esi, eax
movzx eax, word [esi]
sti
dec ebp
call 0x10838975
and byte [eax], al
mov dword [ebp - 0x10], eax
jne 0x10009005
movzx ecx, ah
mov ch, al
mov eax, ecx
mov dword [ebp - 0x10], eax
int3
cmp dword [ebp - 0x18], 0
jne 0x10008fc3
cmp dword [ebp - 0x18], 0
je 0x100090c5
cmp eax, 0x2b
je 0x10009078
clc
sub esi, dword [esi + ebx*2 - 0x7d]
clc
sub eax, 0x803d2674
add byte [eax], al
add byte [edi], cl
adc dword [ecx + 0xf000000], 0xffffffbe
rcl byte [eax - 1], 0x35
loopne 0x10008ffd
cmp eax, 0x2d
je 0x10009045
cmp eax, 0x80
jae 0x100090bb
movsx eax, al
push eax
push dword [0x5001cbe0]
call sub.MSVCRT.dll_strchr
test eax, eax
pop ecx
pop ecx
jne 0x10009045
add dword [eax - 0x18], edx
adc dword [ebx - 0x3f7b0000], 0x6755959
cmp dword [ebp - 0x10], 0x2d
jne 0x100090bb
lea ecx, [ebp - 0x30]
call fcn.1000112f
push 6
pop ecx
xor edx, edx
lea ecx, [eax*8 + 5]
div ecx
lea ecx, [ebp - 0x30]
mov edi, eax
inc edi
call fcn.1000112f
push 6
xor edx, edx
pop ecx
lea eax, [eax*8 + 0x15]
div ecx
cmp edi, eax
jb 0x100090bb
lea ebx, [ebp - 0x30]
push 0
call fcn.1000110f
push dword [ebp - 0x10]
lea ecx, [ebp - 0x30]
call fcn.1000110f
mov ecx, dword [ebx]
mov eax, ecx
and eax, 7
add esi, eax
movzx eax, word [esi]
dec dword [ebp - 0x18]
cmp ecx, 0xffffff82
add byte [eax], al
add byte [ecx + 0xa75f045], cl
movzx ecx, ah
mov ch, al
mov eax, ecx
mov dword [ebp - 0x10], eax
cmp dword [ebp - 0x18], 0
jne 0x10009016
cmp dword [ebp - 0x18], 0
jne 0x10008f23
push 0x2b
lea ecx, [ebp - 0x3c]
call fcn.1000110f
xor edi, edi
push edi
push edi
lea eax, [ebp - 0x3c]
push eax
lea eax, [ebp - 0x30]
push eax
call fcn.10010e23
add esp, 0x10
push 0x2d
lea ecx, [ebp - 0x3c]
call fcn.1000110f
cmp dword [ebp + 0x10], edi
je 0x10009104
push 0x10017570
push dword [ebp + 0x10]
call sub.MSVCRT.dll_strcpy
pop ecx
pop ecx
mov dword [ebp + 0x10], edi
lea ecx, [ebp - 0x30]
mov byte [ebp - 4], 2
call fcn.1000102d
mov edi, dword [ebp + 0x14]
cmp dword [ebp - 0x18], 0
jne 0x10008e4d
test edi, edi
je 0x100092f8
push 0x2d
lea ecx, [ebp - 0x3c]
call fcn.1000110f
lea eax, [ebp - 0x208]
push eax
push 1
push ebx
push 0x10017638
push dword [ebp - 4]
call esi
push edi
call 0x100223a6
pop ecx
inc eax
push eax
push edi
push 1
push ebx
push str.Sender
push dword [ebp - 4]
call esi
test eax, eax
je 0x10009558
cmp byte [0x10023708], bl
jne 0x1000983f
push str.Error_in_setting_sender_address_value_in_the_registry_n
jmp 0x10009839
cmp byte [0x1001d840], bl
je 0x1000b6b1
push 0x10013748
push 0x1001d840
ljmp 0xc085
call sub.MSVCRT.dll_printf
pop ecx
push 0xb
pop eax
jmp 0x100098c9
pop edi
pop esi
pop ebx
leave
ret
jmp [eax - 0x14]