Function at 0x4018f5
Capabilities:
Set registry value

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x234
mov dword [ebp - 0x234], ecx
mov dword [ebp - 0x220], 0
mov dword [ebp - 0x22c], 0
mov dword [ebp - 0x230], 0
mov dword [ebp - 0x228], 0
mov dword [ebp - 0x224], 0
mov dword [ebp - 0x110], 0
mov dword [ebp - 0x21c], 0
mov dword [ebp - 0x114], 0
mov dword [ebp - 0x108], 0
mov byte [ebp - 0x10c], 0
push 0x101
lea eax, [ebp - 0x104]
push eax
push 0
call dword [sym.imp.KERNEL32.dll_GetModuleFileNameA]
lea ecx, [ebp - 0x104]
push ecx
call fcn.0041c968
add esp, 4
mov dword [ebp - 0x218], eax
jmp 0x40199f
mov edx, dword [ebp - 0x218]
sub edx, 1
mov dword [ebp - 0x218], edx
cmp dword [ebp - 0x218], 0
jle 0x4019ce
mov eax, dword [ebp - 0x218]
xor ecx, ecx
mov cl, byte [ebp + eax - 0x104]
cmp ecx, 0x5c
jne 0x4019cc
mov edx, dword [ebp - 0x218]
mov byte [ebp + edx - 0x103], 0
jmp 0x4019ce
jmp 0x401990
push str.k95.exe
lea eax, [ebp - 0x104]
push eax
call fcn.0041c8ae
add esp, 8
lea ecx, [ebp - 0x220]
push ecx
push 0x2001f
push 0
push 0x44a230
push Ordinal_3
call dword [sym.imp.ADVAPI32.dll_RegOpenKeyExA]
test eax, eax
je 0x401a57
lea edx, [ebp - 0x114]
push edx
lea eax, [ebp - 0x220]
push eax
push 0
push 0x2001f
push 0
push 0
push 0
push str.telnet
push Ordinal_3
call dword [sym.imp.ADVAPI32.dll_RegCreateKeyExA]
test eax, eax
je 0x401a3a
xor al, al
jmp 0x401ce7
cmp dword [ebp - 0x114], 1
je 0x401a57
mov ecx, dword [ebp - 0x220]
push ecx
call dword [sym.imp.ADVAPI32.dll_RegCloseKey]
xor al, al
jmp 0x401ce7
push 0x10
push 0x44a240
push 1
push 0
push 0x4520b8
mov edx, dword [ebp - 0x220]
push edx
call dword [sym.imp.ADVAPI32.dll_RegSetValueExA]
push 1
lea eax, [ebp - 0x104]
push eax
push 0x44a250
lea ecx, [ebp - 0x214]
push ecx
call fcn.0041c750
add esp, 0x10
push 0x100
lea edx, [ebp - 0x214]
push edx
push 1
push 0
push 0x44a258
mov eax, dword [ebp - 0x220]
push eax
call dword [sym.imp.ADVAPI32.dll_RegSetValueExA]
lea ecx, [ebp - 0x22c]
push ecx
push 0x2001f
push 0
push 0x44a264
mov edx, dword [ebp - 0x220]
push edx
call dword [sym.imp.ADVAPI32.dll_RegOpenKeyExA]
test eax, eax
je 0x401b39
lea eax, [ebp - 0x114]
push eax
lea ecx, [ebp - 0x22c]
push ecx
push 0
push 0x2001f
push 0
push 0
push 0
push 0x44a26c
mov edx, dword [ebp - 0x220]
push edx
call dword [sym.imp.ADVAPI32.dll_RegCreateKeyExA]
test eax, eax
je 0x401b0f
xor al, al
jmp 0x401ce7
cmp dword [ebp - 0x114], 1
je 0x401b39
mov eax, dword [ebp - 0x22c]
push eax
call dword [sym.imp.ADVAPI32.dll_RegCloseKey]
mov ecx, dword [ebp - 0x220]
push ecx
call dword [sym.imp.ADVAPI32.dll_RegCloseKey]
xor al, al
jmp 0x401ce7
lea edx, [ebp - 0x230]
push edx
push 0x2001f
push 0
push 0x44a274
mov eax, dword [ebp - 0x22c]
push eax
call dword [sym.imp.ADVAPI32.dll_RegOpenKeyExA]
test eax, eax
je 0x401bcc
lea ecx, [ebp - 0x114]
push ecx
lea edx, [ebp - 0x230]
push edx
push 0
push 0x2001f
push 0
push 0
push 0
push 0x44a27c
mov eax, dword [ebp - 0x22c]
push eax
call dword [sym.imp.ADVAPI32.dll_RegCreateKeyExA]
test eax, eax
je 0x401b95
xor al, al
jmp 0x401ce7
cmp dword [ebp - 0x114], 1
je 0x401bcc
mov ecx, dword [ebp - 0x230]
push ecx
call dword [sym.imp.ADVAPI32.dll_RegCloseKey]
mov edx, dword [ebp - 0x22c]
push edx
call dword [sym.imp.ADVAPI32.dll_RegCloseKey]
mov eax, dword [ebp - 0x220]
push eax
call dword [sym.imp.ADVAPI32.dll_RegCloseKey]
xor al, al
jmp 0x401ce7
lea ecx, [ebp - 0x228]
push ecx
push 0x2001f
push 0
push 0x44a284
mov edx, dword [ebp - 0x230]
push edx
call dword [sym.imp.ADVAPI32.dll_RegOpenKeyExA]
test eax, eax
je 0x401c69
lea eax, [ebp - 0x114]
push eax
lea ecx, [ebp - 0x228]
push ecx
push 0
push 0x2001f
push 0
push 0
push 0
push 0x44a28c
mov edx, dword [ebp - 0x230]
push edx
call dword [sym.imp.ADVAPI32.dll_RegCreateKeyExA]
test eax, eax
je 0x401c28
xor al, al
jmp 0x401ce7
cmp dword [ebp - 0x114], 1
je 0x401c69
mov eax, dword [ebp - 0x228]
push eax
call dword [sym.imp.ADVAPI32.dll_RegCloseKey]
mov ecx, dword [ebp - 0x230]
push ecx
call dword [sym.imp.ADVAPI32.dll_RegCloseKey]
mov edx, dword [ebp - 0x22c]
push edx
call dword [sym.imp.ADVAPI32.dll_RegCloseKey]
mov eax, dword [ebp - 0x220]
push eax
call dword [sym.imp.ADVAPI32.dll_RegCloseKey]
xor al, al
jmp 0x401ce7
lea ecx, [ebp - 0x104]
push ecx
push str._s__J____1_
lea edx, [ebp - 0x214]
push edx
call fcn.0041c750
add esp, 0xc
lea eax, [ebp - 0x214]
push eax
call fcn.0041c968
add esp, 4
push eax
lea ecx, [ebp - 0x214]
push ecx
push 1
push 0
push 0x4520bc
mov edx, dword [ebp - 0x228]
push edx
call dword [sym.imp.ADVAPI32.dll_RegSetValueExA]
mov eax, dword [ebp - 0x228]
push eax
call dword [sym.imp.ADVAPI32.dll_RegCloseKey]
mov ecx, dword [ebp - 0x230]
push ecx
call dword [sym.imp.ADVAPI32.dll_RegCloseKey]
mov edx, dword [ebp - 0x22c]
push edx
call dword [sym.imp.ADVAPI32.dll_RegCloseKey]
mov eax, dword [ebp - 0x220]
push eax
call dword [sym.imp.ADVAPI32.dll_RegCloseKey]
mov al, 1
mov esp, ebp
pop ebp
ret