Function at 0x4088fb
Capabilities:
Contain obfuscated stackstrings

Disassembly:
mov eax, 0x482757
call fcn.00469aac
sub esp, 0x114
push ebx
push esi
push edi
mov edi, ecx
lea ecx, [ebp - 0x120]
call fcn.0045cf4c
push 0
and dword [ebp - 4], 0
sub esp, 0x28
lea eax, [ebp - 0xf]
mov ecx, esp
mov dword [ebp - 0x1c], esp
push 1
pop ebx
push ebx
push eax
push 0x4a31fc
call fcn.00403975
sub esp, 0x28
lea eax, [edi + 0x108]
mov ecx, esp
mov dword [ebp - 0x14], esp
push ebx
push eax
mov byte [ebp - 4], bl
call fcn.0040858e
and byte [ebp - 4], 0
lea ecx, [ebp - 0x120]
call fcn.0045d2a6
test al, al
jne 0x40896d
xor bl, bl
jmp 0x409042
push 4
lea eax, [ebp - 0xf]
sub esp, 0x28
mov ecx, esp
mov dword [ebp - 0x14], esp
push ebx
push eax
push 0x4a3560
call fcn.00403975
sub esp, 0x28
lea eax, [ebp - 0xd]
mov ecx, esp
mov dword [ebp - 0x1c], esp
push ebx
mov esi, 0x4a3370
push eax
push esi
mov byte [ebp - 4], 2
call fcn.00403975
and byte [ebp - 4], 0
lea ecx, [ebp - 0x120]
call fcn.0045de8b
sub esp, 0x28
mov dword [edi + 0x44], eax
mov ecx, esp
mov dword [ebp - 0x14], esp
lea eax, [ebp - 0xd]
push ebx
push eax
push 0x4afc0c
call fcn.00404b1b
sub esp, 0x28
lea eax, [ebp - 0xf]
mov ecx, esp
mov dword [ebp - 0x1c], esp
push ebx
push eax
push 0x4a3550
mov byte [ebp - 4], 3
call fcn.00403975
sub esp, 0x28
lea eax, [ebp - 0xe]
mov ecx, esp
mov dword [ebp - 0x18], esp
push ebx
push eax
push esi
mov byte [ebp - 4], 4
call fcn.00403975
and byte [ebp - 4], 0
lea eax, [ebp - 0x6c]
push eax
lea ecx, [ebp - 0x120]
call fcn.0045dd9e
push eax
lea ecx, [edi + 0x1a8]
mov byte [ebp - 4], 5
call fcn.0040309e
and byte [ebp - 4], 0
lea ecx, [ebp - 0x6c]
call fcn.00403024
cmp dword [edi + 0x44], 4
mov dword [ebp - 0x1c], str.RegSetValueExW
jne 0x408a40
mov dword [ebp - 0x1c], 0x4a3538
sub esp, 0x28
lea eax, [ebp - 0xe]
mov ecx, esp
mov dword [ebp - 0x18], esp
push ebx
push eax
push 0x4afc0c
call fcn.00404b1b
sub esp, 0x28
lea eax, [ebp - 0xd]
mov ecx, esp
mov dword [ebp - 0x14], esp
push ebx
push eax
push dword [ebp - 0x1c]
mov byte [ebp - 4], 6
call fcn.00403975
sub esp, 0x28
lea eax, [ebp - 0xf]
mov ecx, esp
mov dword [ebp - 0x1c], esp
push ebx
push eax
push esi
mov byte [ebp - 4], 7
call fcn.00403975
and byte [ebp - 4], 0
lea eax, [ebp - 0x6c]
push eax
lea ecx, [ebp - 0x120]
call fcn.0045dd9e
push eax
lea ecx, [edi + 0x248]
mov byte [ebp - 4], 8
call fcn.0040309e
and byte [ebp - 4], 0
lea ecx, [ebp - 0x6c]
call fcn.00403024
cmp dword [edi + 0x44], 4
jne 0x409032
push 0
lea eax, [ebp - 0xe]
sub esp, 0x28
mov ecx, esp
mov dword [ebp - 0x18], esp
push ebx
push eax
push 0x4a3520
call fcn.00403975
sub esp, 0x28
lea eax, [ebp - 0xd]
mov ecx, esp
mov dword [ebp - 0x14], esp
push ebx
push eax
push esi
mov byte [ebp - 4], 9
call fcn.00403975
and byte [ebp - 4], 0
lea ecx, [ebp - 0x120]
call fcn.0045de8b
push ebx
mov dword [edi + 0x28], eax
sub esp, 0x28
lea eax, [ebp - 0xe]
mov ecx, esp
mov dword [ebp - 0x18], esp
push ebx
push eax
push 0x4a3510
call fcn.00403975
sub esp, 0x28
lea eax, [ebp - 0xd]
mov ecx, esp
mov dword [ebp - 0x14], esp
push ebx
push eax
push esi
mov byte [ebp - 4], 0xa
call fcn.00403975
and byte [ebp - 4], 0
lea ecx, [ebp - 0x120]
call fcn.0045de8b
push 5
mov dword [edi + 0x2c], eax
sub esp, 0x28
lea eax, [ebp - 0xe]
mov ecx, esp
mov dword [ebp - 0x18], esp
push ebx
push eax
push 0x4a34f8
call fcn.00403975
sub esp, 0x28
lea eax, [ebp - 0xd]
mov ecx, esp
mov dword [ebp - 0x14], esp
push ebx
push eax
push esi
mov byte [ebp - 4], 0xb
call fcn.00403975
and byte [ebp - 4], 0
lea ecx, [ebp - 0x120]
call fcn.0045de8b
mov dword [edi + 0x24], eax
call fcn.0046085b
push eax
lea eax, [ebp - 0xe]
sub esp, 0x28
mov ecx, esp
mov dword [ebp - 0x18], esp
push ebx
push eax
push 0x4a34e4
call fcn.00403975
mov byte [ebp - 4], 0xc
sub esp, 0x28
lea eax, [ebp - 0xd]
mov ecx, esp
mov dword [ebp - 0x14], esp
push ebx
push eax
push esi
call fcn.00403975
and byte [ebp - 4], 0
lea ecx, [ebp - 0x120]
call fcn.0045e000
push 0
mov byte [edi + 0xe], al
sub esp, 0x28
lea eax, [ebp - 0xe]
mov ecx, esp
mov dword [ebp - 0x18], esp
push ebx
push eax
push 0x4a34c8
call fcn.00403975
sub esp, 0x28
lea eax, [ebp - 0xd]
mov ecx, esp
mov dword [ebp - 0x14], esp
push ebx
push eax
push esi
mov byte [ebp - 4], 0xd
call fcn.00403975
and byte [ebp - 4], 0
lea ecx, [ebp - 0x120]
call fcn.0045e000
push 0
mov byte [edi + 8], al
sub esp, 0x28
lea eax, [ebp - 0xe]
mov ecx, esp
mov dword [ebp - 0x18], esp
push ebx
push eax
push 0x4a34a0
call fcn.00403975
sub esp, 0x28
lea eax, [ebp - 0xd]
mov ecx, esp
mov dword [ebp - 0x14], esp
push ebx
push eax
push esi
mov byte [ebp - 4], 0xe
call fcn.00403975
and byte [ebp - 4], 0
lea ecx, [ebp - 0x120]
call fcn.0045e000
push ebx
mov byte [edi + 0xa], al
sub esp, 0x28
lea eax, [ebp - 0xe]
mov ecx, esp
mov dword [ebp - 0x18], esp
push ebx
push eax
push 0x4a348c
call fcn.00403975
sub esp, 0x28
lea eax, [ebp - 0xd]
mov ecx, esp
mov dword [ebp - 0x14], esp
push ebx
push eax
push esi
mov byte [ebp - 4], 0xf
call fcn.00403975
and byte [ebp - 4], 0
lea ecx, [ebp - 0x120]
call fcn.0045e000
mov byte [edi + 0xb], al
sub esp, 0x28
lea eax, [ebp - 0xe]
mov ecx, esp
mov dword [ebp - 0x18], esp
push ebx
push eax
push 0x4afc0c
call fcn.00404b1b
sub esp, 0x28
lea eax, [ebp - 0xd]
mov ecx, esp
mov dword [ebp - 0x14], esp
push ebx
push eax
push 0x4a3474
mov byte [ebp - 4], 0x10
call fcn.00403975
sub esp, 0x28
lea eax, [ebp - 0xf]
mov ecx, esp
mov dword [ebp - 0x1c], esp
push ebx
push eax
push esi
mov byte [ebp - 4], 0x11
call fcn.00403975
and byte [ebp - 4], 0
lea eax, [ebp - 0x44]
push eax
lea ecx, [ebp - 0x120]
call fcn.0045dd9e
push eax
lea ecx, [edi + 0x1d0]
mov byte [ebp - 4], 0x12
call fcn.0040309e
and byte [ebp - 4], 0
lea ecx, [ebp - 0x44]
call fcn.00403024
sub esp, 0x28
lea eax, [ebp - 0xe]
mov ecx, esp
mov dword [ebp - 0x18], esp
push ebx
push eax
push 0x4afc0c
call fcn.00404b1b
sub esp, 0x28
lea eax, [ebp - 0xd]
mov ecx, esp
mov dword [ebp - 0x14], esp
push ebx
push eax
push 0x4a345c
mov byte [ebp - 4], 0x13
call fcn.00403975
sub esp, 0x28
lea eax, [ebp - 0xf]
mov ecx, esp
mov dword [ebp - 0x1c], esp
push ebx
push eax
push esi
mov byte [ebp - 4], 0x14
call fcn.00403975
and byte [ebp - 4], 0
lea eax, [ebp - 0x44]
push eax
lea ecx, [ebp - 0x120]
call fcn.0045dd9e
push eax
lea ecx, [edi + 0x1f8]
mov byte [ebp - 4], 0x15
call fcn.0040309e
and byte [ebp - 4], 0
lea ecx, [ebp - 0x44]
call fcn.00403024
sub esp, 0x28
lea eax, [ebp - 0xe]
mov ecx, esp
mov dword [ebp - 0x18], esp
push ebx
push eax
push 0x4afc0c
call fcn.00404b1b
sub esp, 0x28
lea eax, [ebp - 0xd]
mov ecx, esp
mov dword [ebp - 0x14], esp
push ebx
push eax
push 0x4a3450
mov byte [ebp - 4], 0x16
call fcn.00403975
sub esp, 0x28
lea eax, [ebp - 0xf]
mov ecx, esp
mov dword [ebp - 0x1c], esp
push ebx
push eax
push esi
mov byte [ebp - 4], 0x17
call fcn.00403975
and byte [ebp - 4], 0
lea eax, [ebp - 0x44]
push eax
lea ecx, [ebp - 0x120]
call fcn.0045dd9e
push eax
lea ecx, [edi + 0x220]
mov byte [ebp - 4], 0x18
call fcn.0040309e
and byte [ebp - 4], 0
lea ecx, [ebp - 0x44]
call fcn.00403024
sub esp, 0x28
lea eax, [ebp - 0xe]
mov ecx, esp
mov dword [ebp - 0x18], esp
push ebx
push eax
push 0x4a33f4
call fcn.00404b1b
sub esp, 0x28
lea eax, [ebp - 0xd]
mov ecx, esp
mov dword [ebp - 0x14], esp
push ebx
push eax
push 0x4a33d4
mov byte [ebp - 4], 0x19
call fcn.00403975
sub esp, 0x28
lea eax, [ebp - 0xf]
mov ecx, esp
mov dword [ebp - 0x1c], esp
push ebx
push eax
push esi
mov byte [ebp - 4], 0x1a
call fcn.00403975
and byte [ebp - 4], 0
lea eax, [ebp - 0x44]
push eax
lea ecx, [ebp - 0x120]
call fcn.0045dd9e
push eax
lea ecx, [edi + 0xe0]
mov byte [ebp - 4], 0x1b
call fcn.0040309e
and byte [ebp - 4], 0
lea ecx, [ebp - 0x44]
call fcn.00403024
sub esp, 0x28
lea eax, [edi + 0x180]
mov dword [ebp - 0x18], esp
mov ecx, esp
push 0
push eax
mov dword [ecx], 0x48c648
mov dword [ecx + 0x20], 0x48c640
call fcn.0040486a
sub esp, 0x28
lea eax, [ebp - 0xe]
mov ecx, esp
mov dword [ebp - 0x14], esp
push ebx
push eax
push 0x4a33bc
mov byte [ebp - 4], 0x1c
call fcn.00403975
sub esp, 0x28
lea eax, [ebp - 0xd]
mov ecx, esp
mov dword [ebp - 0x1c], esp
push ebx
push eax
push esi
mov byte [ebp - 4], 0x1d
call fcn.00403975
and byte [ebp - 4], 0
lea eax, [ebp - 0x44]
push eax
lea ecx, [ebp - 0x120]
call fcn.0045dd9e
push eax
lea ecx, [edi + 0x180]
mov byte [ebp - 4], 0x1e
call fcn.0040309e
and byte [ebp - 4], 0
lea ecx, [ebp - 0x44]
call fcn.00403024
sub esp, 0x28
lea eax, [ebp - 0xe]
mov ecx, esp
mov dword [ebp - 0x18], esp
push ebx
push eax
push 0x4a33b0
call fcn.00404b1b
sub esp, 0x28
lea eax, [ebp - 0xd]
mov ecx, esp
mov dword [ebp - 0x14], esp
push ebx
push eax
push 0x4a3394
mov byte [ebp - 4], 0x1f
call fcn.00403975
sub esp, 0x28
lea eax, [ebp - 0xf]
mov ecx, esp
mov dword [ebp - 0x1c], esp
push ebx
push eax
push esi
mov byte [ebp - 4], 0x20
call fcn.00403975
and byte [ebp - 4], 0
lea eax, [ebp - 0x44]
push eax
lea ecx, [ebp - 0x120]
call fcn.0045dd9e
mov byte [ebp - 4], 0x21
push eax
lea ecx, [edi + 0x270]
call fcn.0040309e
and byte [ebp - 4], 0
lea ecx, [ebp - 0x44]
call fcn.00403024
sub esp, 0x28
lea eax, [ebp - 0xe]
mov ecx, esp
mov dword [ebp - 0x18], esp
push ebx
push eax
push 0x4afc0c
call fcn.00404b1b
sub esp, 0x28
lea eax, [ebp - 0xd]
mov ecx, esp
mov dword [ebp - 0x14], esp
push ebx
push eax
push 0x4a3384
mov byte [ebp - 4], 0x22
call fcn.00403975
sub esp, 0x28
lea eax, [ebp - 0xf]
mov ecx, esp
mov dword [ebp - 0x1c], esp
push ebx
push eax
push esi
mov byte [ebp - 4], 0x23
call fcn.00403975
and byte [ebp - 4], 0
lea eax, [ebp - 0x6c]
push eax
lea ecx, [ebp - 0x120]
call fcn.0045dd9e
xor esi, esi
mov byte [ebp - 4], 0x24
cmp dword [ebp - 0x60], esi
je 0x409026
lea eax, [ebp - 0x6c]
mov ecx, edi
push eax
call fcn.00409062
cmp dword [ebp - 0x60], esi
je 0x409026
lea eax, [ebp - 0x6c]
push eax
lea eax, [ebp - 0x44]
push 0x4a3380
push eax
call fcn.0040cb47
add esp, 0xc
push dword [0x48c650]
mov ecx, eax
add eax, 4
mov byte [ebp - 4], 0x25
neg ecx
sbb ecx, ecx
push esi
and ecx, eax
push ecx
lea ecx, [edi + 0x94]
call fcn.0040bbd0
lea ecx, [ebp - 0x44]
mov byte [ebp - 4], 0x24
call fcn.00403024
and byte [ebp - 4], 0
lea ecx, [ebp - 0x6c]
call fcn.00403024
lea eax, [ebp - 0x120]
mov ecx, edi
push eax
call fcn.00409c3f
mov bl, al
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x120]
call fcn.0045d232
mov ecx, dword [ebp - 0xc]
pop edi
mov al, bl
pop esi
mov dword fs:[0], ecx
pop ebx
leave
ret