Function at 0x41a648
Capabilities:
Copy file
Persist via run registry key
Set file attributes
Set registry value

Disassembly:
mov eax, 0x463be2
call fcn.00433ae8
mov eax, 0x129c
call fcn.00434210
push ebx
push esi
push edi
mov dword [ebp - 0x20], ecx
call fcn.0040104a
mov dword [ebp - 0x10], eax
xor ebx, ebx
mov ecx, 0xff
xor eax, eax
lea edi, [ebp - 0x6a7]
mov byte [ebp - 0x6a8], bl
rep stosd dword es:[edi], eax
mov ecx, dword [ebp - 0x10]
stosw word es:[edi], ax
stosb byte es:[edi], al
call fcn.004287d6
test eax, eax
jne 0x41a7e1
lea ecx, [ebp - 0xc8]
call fcn.00401c1f
mov ecx, 0x485720
mov dword [ebp - 4], ebx
call fcn.0040198d
push eax
lea eax, [ebp - 0x6a8]
push 0x485b50
push eax
call fcn.0042fa35
mov esi, dword [sym.imp.KERNEL32.dll_CopyFileA]
lea eax, [ebp - 0x6a8]
push ebx
push eax
push 0x484b48
call esi
lea eax, [ebp - 0x6a8]
push 0x80
push eax
call dword [sym.imp.KERNEL32.dll_SetFileAttributesA]
lea eax, [ebp - 0x6a8]
lea ecx, [ebp - 0xc8]
push eax
call fcn.00402090
xor eax, eax
lea edi, [ebp - 0xdb]
mov byte [ebp - 0xdc], bl
push dword [0x485168]
stosd dword es:[edi], eax
stosd dword es:[edi], eax
stosd dword es:[edi], eax
stosd dword es:[edi], eax
stosw word es:[edi], ax
stosb byte es:[edi], al
lea eax, [ebp - 0xdc]
push 0x47bcf8
push eax
call dword [sym.imp.USER32.dll_wsprintfA]
add esp, 0xc
lea eax, [ebp - 0xea8]
push eax
lea eax, [ebp - 0x12a8]
push eax
push 0x484b48
call fcn.0042f7ef
lea eax, [ebp - 0xdc]
push eax
lea eax, [ebp - 0x12a8]
push eax
lea eax, [ebp - 0xea8]
push eax
call fcn.0042fa35
lea eax, [ebp - 0xea8]
push 0x47cbdc
push eax
call dword [sym.imp.KERNEL32.dll_lstrcatA]
mov ecx, 0xff
xor eax, eax
lea edi, [ebp - 0xaa7]
mov byte [ebp - 0xaa8], bl
rep stosd dword es:[edi], eax
stosw word es:[edi], ax
stosb byte es:[edi], al
lea eax, [ebp - 0xdc]
push eax
lea eax, [ebp - 0xaa8]
push 0x485b50
push eax
call fcn.0042fa35
lea eax, [ebp - 0xaa8]
push 0x47cbdc
push eax
call dword [sym.imp.KERNEL32.dll_lstrcatA]
lea eax, [ebp - 0xaa8]
push ebx
push eax
lea eax, [ebp - 0xea8]
push eax
call esi
lea eax, [ebp - 0xaa8]
push eax
lea ecx, [ebp - 0xc8]
call fcn.00402090
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0xc8]
call fcn.00401c4c
jmp 0x41a7f3
lea eax, [ebp - 0x6a8]
push 0x484b48
push eax
call dword [sym.imp.KERNEL32.dll_lstrcpyA]
push 1
lea eax, [ebp - 0x2a]
pop esi
lea ecx, [ebp - 0x168]
push esi
push eax
push dword [0x469704]
call fcn.0040175f
lea eax, [ebp - 0x29]
push esi
push eax
lea ecx, [ebp - 0x140]
push dword [0x4696d0]
mov dword [ebp - 4], esi
call fcn.0040175f
mov ecx, dword [ebp - 0x10]
push 0xa
lea eax, [ebp - 0x168]
push ebx
push eax
lea eax, [ebp - 0x140]
push eax
mov byte [ebp - 4], 2
call fcn.0042a082
lea ecx, [ebp - 0x140]
mov dword [ebp - 0x34], eax
mov byte [ebp - 4], 1
call fcn.00401bc2
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x168]
call fcn.00401bc2
lea eax, [ebp - 0x29]
mov esi, 0x469580
mov edi, 0x469578
push ebx
push eax
lea ecx, [ebp - 0x118]
mov dword [ebp - 0x118], esi
mov dword [ebp - 0xf8], edi
call fcn.00402b2c
mov dword [ebp - 4], 3
mov dword [ebp - 0x18], ebx
lea eax, [ebp - 0x29]
push ebx
push eax
lea ecx, [ebp - 0x1b8]
mov byte [ebp - 4], 4
mov dword [ebp - 0x1b8], esi
mov dword [ebp - 0x198], edi
call fcn.00402b2c
mov eax, dword [ebp - 0x34]
mov byte [ebp - 4], 5
sub eax, ebx
je 0x41a93d
dec eax
je 0x41a900
dec eax
jne 0x41a978
lea eax, [ebp - 0x2a]
push 1
push eax
push 0x47baac
lea ecx, [ebp - 0x140]
call fcn.00402caf
lea eax, [ebp - 0x140]
lea ecx, [ebp - 0x1b8]
push eax
mov byte [ebp - 4], 8
call fcn.0040200f
mov byte [ebp - 4], 5
lea ecx, [ebp - 0x140]
jmp 0x41a936
lea eax, [ebp - 0x2b]
push 1
push eax
push 0x47cba8
lea ecx, [ebp - 0x168]
call fcn.00402caf
lea eax, [ebp - 0x168]
lea ecx, [ebp - 0x1b8]
push eax
mov byte [ebp - 4], 7
call fcn.0040200f
mov byte [ebp - 4], 5
lea ecx, [ebp - 0x168]
call fcn.00401f95
jmp 0x41a982
lea eax, [ebp - 0x2c]
push 1
push eax
push 0x47cb74
lea ecx, [ebp - 0x190]
call fcn.00402caf
lea eax, [ebp - 0x190]
lea ecx, [ebp - 0x1b8]
push eax
mov byte [ebp - 4], 6
call fcn.0040200f
lea ecx, [ebp - 0x190]
mov byte [ebp - 4], 5
call fcn.00401f95
cmp dword [ebp - 0x34], 3
je 0x41b0d0
lea ecx, [ebp - 0x1b8]
call fcn.0040305e
lea ecx, [ebp - 0x1c]
mov dword [ebp - 0x1c], ebx
push ecx
push 0xf003f
push ebx
push eax
push reloc.OLEAUT32.dll_SysReAllocString
call dword [sym.imp.ADVAPI32.dll_RegOpenKeyExA]
cmp eax, ebx
jne 0x41b0d0
lea ecx, [ebp - 0x18]
call fcn.0040d6e6
mov ecx, dword [ebp - 0x1c]
cmp eax, ebx
mov dword [ebp - 0x18], ecx
jne 0x41b0d0
lea eax, [ebp + 0xb]
push 1
push eax
lea ecx, [ebp - 0x190]
push dword [ebp + 8]
call fcn.00402caf
cmp dword [ebp + 0xc], ebx
mov byte [ebp - 4], 9
je 0x41a9fd
push 0x47cb54
call fcn.0043423f
pop ecx
push eax
push 0x47cb54
lea ecx, [ebp - 0x18c]
call fcn.00412a0a
lea eax, [ebp + 0xf]
push ebx
push eax
lea ecx, [ebp - 0x60]
mov dword [ebp - 0x60], esi
mov dword [ebp - 0x40], edi
call fcn.00402b2c
mov eax, dword [ebp - 0x10]
mov byte [ebp - 4], 0xa
mov eax, dword [eax + 0x14]
dec eax
je 0x41aaee
dec eax
je 0x41aa9c
dec eax
je 0x41aa45
dec eax
je 0x41aa3b
dec eax
jne 0x41ab07
mov eax, 0x47cb4c
jmp 0x41aaf3
mov eax, 0x47cb44
jmp 0x41aaf3
mov ecx, dword [ebp - 0x10]
lea eax, [ebp - 0x2a8]
push 9
push eax
call fcn.004083bc
push eax
lea eax, [ebp - 0x94]
push 0x47cb3c
push eax
mov byte [ebp - 4], 0xd
call fcn.004214eb
add esp, 0xc
push eax
lea ecx, [ebp - 0x60]
mov byte [ebp - 4], 0xe
call fcn.0040200f
lea ecx, [ebp - 0x94]
mov byte [ebp - 4], 0xd
call fcn.00401f95
mov byte [ebp - 4], 0xa
lea ecx, [ebp - 0x2a8]
call fcn.00401f95
jmp 0x41ab07
mov ecx, dword [ebp - 0x10]
lea eax, [ebp - 0xbc]
push 9
push eax
call fcn.004083bc
push eax
lea eax, [ebp - 0x258]
push 0x47cb34
push eax
mov byte [ebp - 4], 0xb
call fcn.004214eb
add esp, 0xc
push eax
lea ecx, [ebp - 0x60]
mov byte [ebp - 4], 0xc
call fcn.0040200f
lea ecx, [ebp - 0x258]
mov byte [ebp - 4], 0xb
call fcn.00401f95
mov byte [ebp - 4], 0xa
lea ecx, [ebp - 0xbc]
jmp 0x41aa95
mov eax, 0x47cb2c
mov ecx, eax
test ecx, ecx
jne 0x41aafe
mov eax, 0x483644
push eax
lea ecx, [ebp - 0x60]
call fcn.00403f87
mov ecx, dword [ebp - 0x10]
call fcn.004287d6
test eax, eax
mov eax, 0x47cb24
jne 0x41ab1d
mov eax, 0x483644
cmp eax, ebx
mov dword [ebp - 0x208], esi
mov dword [ebp - 0x1e8], edi
jne 0x41ab32
mov eax, 0x483644
lea ecx, [ebp - 0x2c]
push ebx
push ecx
push eax
lea ecx, [ebp - 0x208]
call fcn.00403ed5
mov ecx, dword [ebp - 0x10]
lea eax, [ebp - 0x2b]
push 1
push eax
mov byte [ebp - 4], 0xf
call fcn.00426b5d
push eax
lea ecx, [ebp - 0x230]
call fcn.00402caf
mov ecx, dword [ebp - 0x10]
lea eax, [ebp - 0x2a]
push 1
push eax
mov byte [ebp - 4], 0x10
call fcn.00426d19
push eax
lea ecx, [ebp - 0x140]
call fcn.00402caf
lea eax, [ebp - 0x37]
push 1
push eax
push 0x485b50
lea ecx, [ebp - 0x168]
mov byte [ebp - 4], 0x11
call fcn.00402caf
mov ecx, dword [ebp - 0x10]
mov byte [ebp - 4], 0x12
call fcn.004287d6
test eax, eax
je 0x41ac22
mov eax, dword [ebp - 0x20]
cmp dword [eax + 0x38], ebx
jne 0x41ac22
mov edx, dword [ebp - 0x200]
mov eax, 0x46959c
cmp edx, ebx
jne 0x41abc2
mov edx, eax
mov ecx, dword [ebp - 0x188]
mov dword [ebp - 0x1c], eax
cmp ecx, ebx
je 0x41abd2
mov dword [ebp - 0x1c], ecx
mov ecx, dword [ebp - 0x160]
mov dword [ebp - 0x30], eax
cmp ecx, ebx
je 0x41abe2
mov dword [ebp - 0x30], ecx
mov ecx, dword [ebp - 0x138]
mov dword [ebp - 0x20], eax
cmp ecx, ebx
je 0x41abf2
mov dword [ebp - 0x20], ecx
mov ecx, dword [ebp - 0x58]
cmp ecx, ebx
jne 0x41abfb
mov ecx, eax
cmp dword [ebp - 0x228], ebx
je 0x41ac09
mov eax, dword [ebp - 0x228]
push edx
push dword [ebp - 0x1c]
push dword [ebp - 0x30]
push dword [ebp - 0x20]
push dword [0x485168]
push ecx
push eax
push 0x47cacc
jmp 0x41ac91
mov edx, dword [ebp - 0x200]
mov eax, 0x46959c
cmp edx, ebx
jne 0x41ac33
mov edx, eax
mov ecx, dword [ebp - 0x188]
mov dword [ebp - 0x20], eax
cmp ecx, ebx
je 0x41ac43
mov dword [ebp - 0x20], ecx
mov ecx, dword [ebp - 0x160]
mov dword [ebp - 0x30], eax
cmp ecx, ebx
je 0x41ac53
mov dword [ebp - 0x30], ecx
mov ecx, dword [ebp - 0x138]
mov dword [ebp - 0x1c], eax
cmp ecx, ebx
je 0x41ac63
mov dword [ebp - 0x1c], ecx
mov ecx, dword [ebp - 0x58]
cmp ecx, ebx
jne 0x41ac6c
mov ecx, eax
cmp dword [ebp - 0x228], ebx
je 0x41ac7a
mov eax, dword [ebp - 0x228]
push edx
push dword [ebp - 0x20]
push dword [ebp - 0x30]
push dword [ebp - 0x1c]
push dword [0x485168]
push ecx
push eax
push 0x47ca80
lea eax, [ebp - 0x118]
push eax
call fcn.0042005f
mov eax, dword [ebp - 0x10]
add esp, 0x24
cmp dword [eax + 0x69c], ebx
je 0x41ad26
add eax, 0x690
push eax
lea eax, [ebp - 0x258]
push 0x47ca68
push eax
call fcn.00421450
push 0x47bdd8
push eax
lea eax, [ebp - 0xbc]
mov byte [ebp - 4], 0x13
push eax
call fcn.00421586
add esp, 0x18
mov eax, dword [eax + 8]
mov byte [ebp - 4], 0x14
cmp eax, ebx
mov dword [ebp - 0x1c], 0x469558
je 0x41acf0
mov dword [ebp - 0x1c], eax
push dword [ebp - 0x1c]
call fcn.0043423f
pop ecx
push eax
lea ecx, [ebp - 0x114]
push dword [ebp - 0x1c]
call fcn.00412a0a
lea ecx, [ebp - 0xbc]
mov byte [ebp - 4], 0x13
call fcn.00401bc2
lea ecx, [ebp - 0x258]
mov byte [ebp - 4], 0x12
call fcn.00401bc2
cmp dword [ebp - 0x34], 1
jne 0x41ad62
lea eax, [ebp - 0x30]
mov dword [ebp - 0x20], ebx
push eax
lea eax, [ebp - 0x20]
push eax
push ebx
push 0xf003f
push ebx
push ebx
push ebx
push 0x47ca60
push reloc.OLEAUT32.dll_SysReAllocString
call dword [sym.imp.ADVAPI32.dll_RegCreateKeyExA]
cmp eax, ebx
jne 0x41ad62
lea ecx, [ebp - 0x18]
call fcn.0040d6e6
mov eax, dword [ebp - 0x20]
mov dword [ebp - 0x18], eax
lea eax, [ebp - 0x190]
push ebx
push eax
lea ecx, [ebp - 0xf0]
mov dword [ebp - 0xf0], esi
mov dword [ebp - 0xd0], edi
call fcn.00403e42
mov ecx, dword [ebp - 0x10]
lea eax, [ebp - 0x36]
push 1
push eax
mov byte [ebp - 4], 0x15
call fcn.00426d19
push eax
lea ecx, [ebp - 0x280]
call fcn.00402caf
lea eax, [ebp - 0x35]
push 1
push eax
push 0x485b50
lea ecx, [ebp - 0x1e0]
mov byte [ebp - 4], 0x16
call fcn.00402caf
cmp dword [ebp - 0x274], ebx
mov byte [ebp - 4], 0x17
je 0x41ade3
lea eax, [ebp - 0xbc]
push ebx
push eax
lea ecx, [ebp - 0x280]
call fcn.004128e9
lea ecx, [ebp - 0xbc]
call fcn.00401f95
cmp dword [ebp - 0x1d4], ebx
je 0x41ae09
lea eax, [ebp - 0xbc]
push ebx
push eax
lea ecx, [ebp - 0x1e0]
call fcn.004128e9
lea ecx, [ebp - 0xbc]
call fcn.00401f95
mov esi, dword [ebp - 0x110]
cmp esi, ebx
jne 0x41ae18
mov esi, 0x46959c
lea eax, [ebp - 0x11]
push 1
push eax
push 0x47c25c
lea ecx, [ebp - 0xbc]
call fcn.0040175f
mov eax, dword [eax + 8]
mov byte [ebp - 4], 0x18
cmp eax, ebx
jne 0x41ae3e
mov eax, 0x469558
mov dword [ebp - 0x24], eax
push esi
lea eax, [ebp - 0x24]
push 0x47ca1c
push eax
mov dword [ebp - 0x20], 0x6c6
call fcn.004084c8
add esp, 0xc
lea ecx, [ebp - 0xbc]
mov byte [ebp - 4], 0x17
call fcn.00401bc2
mov dword [ebp - 0x28], ebx
lea eax, [ebp - 0x20]
mov byte [ebp - 4], 0x19
push eax
push 0xf003f
push ebx
push 0x47bbf0
push reloc.OLEAUT32.dll_SysReAllocString
mov dword [ebp - 0x20], ebx
call dword [sym.imp.ADVAPI32.dll_RegOpenKeyExA]
mov edi, dword [sym.imp.ADVAPI32.dll_RegSetValueExA]
mov esi, dword [sym.imp.KERNEL32.dll_lstrlenA]
cmp eax, ebx
jne 0x41b007
lea ecx, [ebp - 0x28]
call fcn.0040d6e6
mov ecx, dword [ebp - 0x20]
cmp eax, ebx
mov dword [ebp - 0x28], ecx
jne 0x41b007
lea ecx, [ebp - 0x280]
call fcn.0040305e
push eax
mov dword [ebp - 0x20], eax
call esi
inc eax
push eax
push dword [ebp - 0x20]
push 1
push ebx
push 0x47baec
push dword [ebp - 0x28]
call edi
lea ecx, [ebp - 0x1e0]
call fcn.0040305e
push eax
mov dword [ebp - 0x20], eax
call esi
inc eax
push eax
push dword [ebp - 0x20]
push 1
push ebx
push 0x47bc1c
push dword [ebp - 0x28]
call edi
cmp dword [ebp - 0xe4], ebx
je 0x41af28
lea ecx, [ebp - 0xf0]
call fcn.0040305e
push eax
mov dword [ebp - 0x20], eax
call esi
inc eax
push eax
push dword [ebp - 0x20]
push 1
push ebx
push 0x47ba94
push dword [ebp - 0x28]
call edi
cmp dword [ebp - 0x28], ebx
je 0x41af39
push dword [ebp - 0x28]
call dword [sym.imp.ADVAPI32.dll_RegCloseKey]
mov dword [ebp - 0x28], ebx
lea eax, [ebp - 0x11]
push 1
push eax
push 0x47baec
lea ecx, [ebp - 0x94]
call fcn.004023fe
lea eax, [ebp - 0x94]
lea ecx, [ebp - 0x118]
push eax
lea eax, [ebp - 0x280]
push eax
mov byte [ebp - 4], 0x1a
call fcn.00403fb0
lea ecx, [ebp - 0x94]
mov byte [ebp - 4], 0x19
call fcn.00401f95
lea eax, [ebp - 0x11]
push 1
push eax
push 0x47bc1c
lea ecx, [ebp - 0x94]
call fcn.004023fe
lea eax, [ebp - 0x94]
lea ecx, [ebp - 0x118]
push eax
lea eax, [ebp - 0x1e0]
push eax
mov byte [ebp - 4], 0x1b
call fcn.00403fb0
lea ecx, [ebp - 0x94]
mov byte [ebp - 4], 0x19
call fcn.00401f95
cmp dword [ebp - 0xe4], ebx
je 0x41b007
lea eax, [ebp - 0x11]
push 1
push eax
push 0x47ba94
lea ecx, [ebp - 0x94]
call fcn.004023fe
lea eax, [ebp - 0x94]
lea ecx, [ebp - 0x118]
push eax
lea eax, [ebp - 0xf0]
push eax
mov byte [ebp - 4], 0x1c
call fcn.00403fb0
lea ecx, [ebp - 0x94]
mov byte [ebp - 4], 0x19
call fcn.00401f95
lea ecx, [ebp - 0x118]
call fcn.0040305e
push eax
mov dword [ebp - 0x20], eax
call esi
inc eax
push eax
push dword [ebp - 0x20]
push 1
push ebx
push 0x47baa4
push dword [ebp - 0x18]
call edi
cmp dword [ebp - 0x18], ebx
je 0x41b03b
push dword [ebp - 0x18]
call dword [sym.imp.ADVAPI32.dll_RegCloseKey]
mov dword [ebp - 0x18], ebx
cmp dword [ebp - 0x28], ebx
je 0x41b04c
push dword [ebp - 0x28]
call dword [sym.imp.ADVAPI32.dll_RegCloseKey]
mov dword [ebp - 0x28], ebx
lea ecx, [ebp - 0x1e0]
mov byte [ebp - 4], 0x16
call fcn.00401f95
lea ecx, [ebp - 0x280]
mov byte [ebp - 4], 0x15
call fcn.00401f95
lea ecx, [ebp - 0xf0]
mov byte [ebp - 4], 0x12
call fcn.00401f95
lea ecx, [ebp - 0x168]
mov byte [ebp - 4], 0x11
call fcn.00401f95
lea ecx, [ebp - 0x140]
mov byte [ebp - 4], 0x10
call fcn.00401f95
lea ecx, [ebp - 0x230]
mov byte [ebp - 4], 0xf
call fcn.00401f95
lea ecx, [ebp - 0x208]
mov byte [ebp - 4], 0xa
call fcn.00401f95
lea ecx, [ebp - 0x60]
mov byte [ebp - 4], 9
call fcn.00401f95
lea ecx, [ebp - 0x190]
mov byte [ebp - 4], 5
call fcn.00401f95
xor eax, eax
lea edi, [ebp - 0x6b]
mov byte [ebp - 0x6c], bl
push 1
stosd dword es:[edi], eax
stosd dword es:[edi], eax
stosb byte es:[edi], al
lea eax, [ebp + 0xb]
lea ecx, [ebp - 0x94]
push eax
push dword [0x4696e0]
call fcn.0040175f
mov ecx, dword [ebp - 0x10]
lea eax, [ebp - 0x258]
push 6
push eax
mov byte [ebp - 4], 0x1d
call fcn.004083bc
lea ecx, [ebp - 0xbc]
mov byte [ebp - 4], 0x1e
push ecx
mov ecx, eax
call fcn.0041fe90
push 0xa
lea ecx, [ebp - 0x94]
push ebx
push ecx
mov ecx, dword [ebp - 0x10]
push eax
mov byte [ebp - 4], 0x1f
call fcn.0042a082
lea ecx, [ebp - 0xbc]
mov esi, eax
mov byte [ebp - 4], 0x1e
call fcn.00401bc2
lea ecx, [ebp - 0x258]
mov byte [ebp - 4], 0x1d
call fcn.00401f95
lea ecx, [ebp - 0x94]
mov byte [ebp - 4], 5
call fcn.00401bc2
mov ecx, dword [ebp - 0x10]
push 0xc
call fcn.00408397
test al, al
jne 0x41b17b
cmp esi, 1
je 0x41b17b
cmp esi, 2
jne 0x41b20a
push 4
lea eax, [ebp - 0x6c]
push 0x47ca18
push eax
call dword [sym.imp.USER32.dll_wsprintfA]
add esp, 0xc
lea ecx, [ebp - 0x58]
call fcn.00402671
lea eax, [ebp - 0x6a8]
lea ecx, [ebp - 0x58]
push eax
mov byte [ebp - 4], 0x20
call fcn.004026b9
mov ecx, dword [ebp - 0x10]
lea eax, [ebp - 0xbc]
push 6
push eax
call fcn.004083bc
mov ecx, eax
mov byte [ebp - 4], 0x21
call fcn.0040305e
lea ecx, [ebp - 0x6c]
push ecx
lea ecx, [ebp - 0x58]
push dword [0x4696e0]
push eax
call fcn.004026f8
lea ecx, [ebp - 0xbc]
mov byte [ebp - 4], 0x20
call fcn.00401f95
lea ecx, [ebp - 0x58]
call fcn.004026e5
push 1
lea ecx, [ebp - 0x48]
mov byte [ebp - 4], 0x22
call fcn.00402af0
lea ecx, [ebp - 0x58]
mov byte [ebp - 4], 5
call fcn.00403ae0
cmp dword [ebp - 0x34], 3
je 0x41b22a
cmp dword [0x485f58], ebx
je 0x41b21f
call fcn.0043014d
jmp 0x41b22a
push 0x453
call fcn.0042f0ac
pop ecx
lea ecx, [ebp - 0x1b8]
mov byte [ebp - 4], 4
call fcn.00401f95
cmp dword [ebp - 0x18], ebx
je 0x41b24a
push dword [ebp - 0x18]
call dword [sym.imp.ADVAPI32.dll_RegCloseKey]
mov dword [ebp - 0x18], ebx
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x118]
call fcn.00401f95
mov ecx, dword [ebp - 0xc]
pop edi
pop esi
pop ebx
mov dword fs:[0], ecx
leave
ret 8