Function at 0x41df40
Capabilities:
Contain obfuscated stackstrings
Query or enumerate registry value

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x51ec1b
mov eax, dword fs:[0]
push eax
sub esp, 0x294
mov eax, dword [0x57c8b4]
xor eax, ebp
mov dword [ebp - 0x14], eax
push ebx
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov dword [ebp - 0x10], esp
push 0x208
lea eax, [ebp - 0x250]
mov ebx, 1
push 0
push eax
mov dword [ebp - 0x2a0], ebx
call fcn.004a99f0
add esp, 0xc
mov dword [ebp - 0x298], 0x104
mov dword [ebp - 0x29c], ebx
mov dword [ebp - 0x48], 0x6f0053
mov dword [ebp - 0x44], 0x740066
mov dword [ebp - 0x40], 0x610077
mov dword [ebp - 0x3c], 0x650072
mov dword [ebp - 0x38], 0x33005c
mov dword [ebp - 0x34], 0x300036
mov dword [ebp - 0x30], 0x610057
mov dword [ebp - 0x2c], str.7_Of
mov dword [ebp - 0x28], 0x610050
mov dword [ebp - 0x24], 0x650070
mov dword [ebp - 0x20], 0x450072
mov dword [ebp - 0x1c], 0x650076
mov dword [ebp - 0x18], 0x72
call fcn.0040b790
mov ecx, eax
test ecx, ecx
je 0x41e2ed
mov eax, dword [ecx]
call dword [eax + 0xc]
add eax, 0x10
mov dword [ebp - 0x27c], eax
lea eax, [ebp - 0x48]
mov dword [ebp - 4], 0
push eax
lea ecx, [ebp - 0x27c]
call fcn.0040ac20
test al, al
jne 0x41e05f
lea ecx, [ebp - 0x48]
lea edx, [ecx + 2]
nop word [eax + eax]
mov ax, word [ecx]
add ecx, 2
test ax, ax
jne 0x41e040
sub ecx, edx
lea eax, [ebp - 0x48]
sar ecx, 1
push ecx
push eax
lea ecx, [ebp - 0x27c]
call fcn.0040a4c0
mov esi, dword [ebp - 0x27c]
lea eax, [ebp - 0x298]
push eax
lea eax, [ebp - 0x250]
mov dword [ebp - 4], 0xffffffff
push eax
lea eax, [ebp - 0x29c]
push eax
push str.unistdate
push esi
push SysReAllocString
call dword [sym.imp.SHLWAPI.dll_SHGetValueW]
test eax, eax
setne byte [ebp - 0x275]
add esi, 0xfffffff0
or eax, 0xffffffff
lock xadd dword [esi + 0xc], eax
dec eax
test eax, eax
jg 0x41e0b3
mov ecx, dword [esi]
push esi
mov eax, dword [ecx]
call dword [eax + 4]
cmp byte [ebp - 0x275], 0
jne 0x41e2ca
lea eax, [ebp - 0x290]
mov dword [ebp - 4], 1
push eax
lea eax, [ebp - 0x28c]
mov dword [ebp - 0x27c], 0
push eax
lea eax, [ebp - 0x288]
mov dword [ebp - 0x280], 0
push eax
lea eax, [ebp - 0x284]
mov dword [ebp - 0x284], 0
push eax
lea eax, [ebp - 0x280]
mov dword [ebp - 0x288], 0
push eax
lea eax, [ebp - 0x27c]
mov dword [ebp - 0x28c], 0
push eax
lea eax, [ebp - 0x250]
mov dword [ebp - 0x290], 0
push str._04d__02d__02d__02d:_02d:_02d
push eax
call fcn.00420530
add esp, 0x20
cmp eax, 6
jne 0x41e2cf
mov ebx, dword [ebp - 0x27c]
mov eax, 0x76c
cmp ebx, eax
cmovl ebx, eax
mov eax, dword [ebp - 0x280]
mov dword [ebp - 0x27c], ebx
cmp eax, 1
jl 0x41e170
cmp eax, 0xc
jle 0x41e17b
mov eax, 1
mov dword [ebp - 0x280], eax
mov ecx, dword [ebp - 0x284]
cmp ecx, 1
jl 0x41e18b
cmp ecx, 0x1f
jle 0x41e196
mov ecx, 1
mov dword [ebp - 0x284], ecx
mov edx, dword [ebp - 0x288]
test edx, edx
js 0x41e1a5
cmp edx, 0x17
jle 0x41e1ad
xor edx, edx
mov dword [ebp - 0x288], edx
mov esi, dword [ebp - 0x28c]
test esi, esi
js 0x41e1bc
cmp esi, 0x3b
jle 0x41e1c4
xor esi, esi
mov dword [ebp - 0x28c], esi
mov edi, dword [ebp - 0x290]
test edi, edi
js 0x41e1d3
cmp edi, 0x3b
jle 0x41e1db
xor edi, edi
mov dword [ebp - 0x290], edi
cmp ebx, 0x7b2
jl 0x41e2f7
dec eax
mov dword [ebp - 0x294], eax
cmp eax, 0xb
ja 0x41e301
lea eax, [ecx - 1]
cmp eax, 0x1e
ja 0x41e30b
cmp edx, 0x17
ja 0x41e315
cmp esi, 0x3b
ja 0x41e31f
cmp edi, 0x3b
ja 0x41e329
mov eax, dword [ebp - 0x294]
mov dword [ebp - 0x264], eax
lea eax, [ebx - 0x76c]
mov dword [ebp - 0x260], eax
lea eax, [ebp - 0x274]
push eax
mov dword [ebp - 0x274], edi
mov dword [ebp - 0x270], esi
mov dword [ebp - 0x26c], edx
mov dword [ebp - 0x268], ecx
mov dword [ebp - 0x254], 0xffffffff
call fcn.004d69da
mov ebx, eax
add esp, 4
mov eax, edx
mov ecx, ebx
and ecx, eax
mov dword [ebp - 0x294], eax
cmp ecx, 0xffffffff
je 0x41e333
jmp 0x41e28e
push 0
call fcn.004d6b8d
add esp, 4
mov edi, eax
mov eax, dword [ebp + 8]
mov esi, edx
sub edi, ebx
mov ecx, 0x18
sbb esi, dword [ebp - 0x294]
imul ecx
push 0
push 0xe10
push edx
push eax
call fcn.00490780
cmp esi, edx
jg 0x41e2ca
jl 0x41e2c6
cmp edi, eax
jae 0x41e2ca
xor ebx, ebx
jmp 0x41e2cf
mov ebx, 1
mov eax, ebx
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 0x14]
xor ecx, ebp
call fcn.00490238
mov esp, ebp
pop ebp
ret
push 0x80004005
call fcn.00408b70
push 0x80004005
call fcn.00408b70
push 0x80004005
call fcn.00408b70
push 0x80004005
call fcn.00408b70
push 0x80004005
call fcn.00408b70
push 0x80004005
call fcn.00408b70
push 0x80004005
call fcn.00408b70
push 0x80070057
call fcn.00408b70
int3