Function at 0x10042e24
Capabilities:
Set registry value

Disassembly:
mov eax, 0x1006299d
call fcn.10060f20
sub esp, 0x144
push ebx
push esi
mov byte [ebp - 0x40], cl
xor ebx, ebx
mov dword [ebp - 0x18], 0x52d
cmp dword [ebp - 0x18], 0x634
push edi
mov dword [ebp - 0x10], esp
jle 0x10042ec2
push ebx
call dword [sym.imp.KERNEL32.dll_EncodePointer]
mov edi, ebx
xor esi, esi
mov dword [ebp - 0x14], edi
inc esi
mov eax, edi
mov dword [ebp - 0x1c], 0x2124
mov dword [ebp - 0x20], eax
mov edi, ebx
mov ecx, edi
sar eax, cl
lea ecx, [ebp - 0x150]
cdq
push edx
push eax
call fcn.10002bac
pop ecx
pop ecx
cmp dword [eax + 0x14], 0x10
jb 0x10042e88
mov eax, dword [eax]
push eax
call fcn.1004a753
pop ecx
push ebx
push esi
lea ecx, [ebp - 0x150]
call fcn.10014850
mov eax, dword [ebp - 0x20]
inc edi
cmp edi, 0x1885
jl 0x10042e6c
dec eax
dec dword [ebp - 0x1c]
mov dword [ebp - 0x20], eax
jne 0x10042e6a
mov edi, dword [ebp - 0x14]
inc edi
mov dword [ebp - 0x14], edi
cmp edi, 0x60f3
jl 0x10042e5e
jmp 0x10042ec5
xor esi, esi
inc esi
cmp dword [ebp - 0x18], 0x25b
jge 0x10042ed9
push str.bnujeob_vokvkna_lwyavk_oiijapxr_ypfzwp_viqv
call fcn.1004a753
pop ecx
or dword [ebp - 4], 0xffffffff
cmp byte [ebp - 0x40], 0
je 0x10043797
lea eax, [ebp + 0x10]
mov dword [ebp - 0xe8], 7
mov dword [ebp - 0x94], eax
mov eax, dword [ebp + 8]
mov dword [ebp - 0x90], eax
xor eax, eax
mov dword [ebp - 0xec], ebx
mov word [ebp - 0xfc], ax
mov dword [ebp - 4], 2
mov dword [ebp - 0x14], ebx
jmp 0x10042f2f
mov eax, dword [ebp - 0x14]
mov dword [ebp + eax*4 - 0xc8], 0xfffffffe
inc dword [ebp - 0x14]
cmp dword [ebp - 0x14], 4
jl 0x10042f1e
mov dword [ebp - 0xc0], ebx
jmp 0x10042f60
mov byte [ebp - 0x35], bl
cmp byte [ebp - 0x35], 0
je 0x10042f5a
push ecx
push 0x1aeb
push esi
mov ecx, 0x39a3
call fcn.10041c72
add esp, 0xc
inc dword [ebp - 0xc0]
cmp dword [ebp - 0xc0], 0xf
je 0x10042f3d
push dword [ebp + 0x10]
lea ecx, [ebp - 0xfc]
call fcn.10013ee9
push 2
lea ecx, [ebp - 0xac]
call fcn.100021e9
push 0xfffffffffffffff7
pop edi
mov dword [ebp - 0x18], edi
mov dword [ebp - 0x20], 0xbb0f55f5
mov dword [ebp - 0x1c], 0xa280505b
mov dword [ebp - 0x18], 0xe72b4cd9
mov dword [ebp - 0x18], 0xdda3982a
mov dword [ebp - 0x2c], ebx
mov dword [ebp - 0x14], ebx
jmp 0x10042fc1
mov ecx, dword [ebp - 0x14]
mov eax, dword [ebp - 0xac]
mov dword [eax + ecx*4], 0x13dd33a4
inc dword [ebp - 0x14]
cmp dword [ebp - 0x14], 2
jl 0x10042fae
mov dword [ebp - 0x14], ebx
jmp 0x10042fda
mov eax, dword [ebp - 0x14]
mov dword [ebp + eax*4 - 0x30], 0x278b7212
inc dword [ebp - 0x14]
cmp dword [ebp - 0x14], esi
jl 0x10042fcc
mov dword [ebp - 0x14], ebx
jmp 0x10042ff5
mov eax, dword [ebp - 0x14]
mov dword [ebp + eax*4 - 0x138], 0xb43b78c3
inc dword [ebp - 0x14]
cmp dword [ebp - 0x14], 4
jl 0x10042fe4
mov eax, dword [ebp - 0xac]
mov dword [ebp - 0x14], eax
mov dword [eax + 4], ebx
mov eax, dword [ebp - 0x30]
mov eax, dword [ebp - 0x30]
mov dword [ebp - 0x18], eax
mov eax, dword [ebp - 0x18]
mov eax, dword [ebp - 0x20]
mov eax, dword [ebp - 0x1c]
cmp dword [ebp - 0x20], ebx
jne 0x10043025
mov ecx, ebx
cmp dword [ebp - 0x1c], ebx
je 0x10043027
mov ecx, esi
mov eax, dword [ebp - 0xac]
xor edx, edx
cmp ecx, dword [eax]
mov eax, dword [ebp - 0x30]
setle dl
xor ecx, ecx
cmp edx, eax
mov edx, dword [ebp - 0x14]
setne cl
cmp ecx, esi
sbb eax, eax
xor ecx, ecx
inc eax
mov dword [ebp - 0x1c], eax
mov eax, dword [ebp - 0x1c]
mov dword [ebp - 0x20], eax
mov eax, dword [ebp - 0x20]
cmp eax, dword [edx + 4]
setge cl
mov dword [ebp - 0x138], ecx
mov eax, dword [ebp - 0x30]
mov edx, dword [edx + 4]
xor eax, eax
test edx, edx
setne al
xor ecx, ecx
cmp eax, edx
setge cl
sub ecx, 0x71eb
neg ecx
sbb ecx, ecx
xor eax, eax
inc ecx
cmp ecx, edx
setne al
xor edx, edx
imul ecx, eax, 0x5619
mov eax, dword [ebp - 0x30]
cmp ecx, eax
mov eax, dword [ebp - 0x14]
mov ecx, 0xa11ad519
setg dl
sub edx, 0x491
neg edx
sbb edx, edx
inc edx
mov dword [eax + 4], edx
mov eax, dword [ebp - 0x30]
mov dword [ebp - 0x18], esi
mov eax, dword [ebp - 0x18]
cmp ecx, eax
mov ecx, 0xacb588f4
sbb eax, eax
neg eax
mov dword [ebp - 0x18], eax
mov eax, dword [ebp - 0x18]
cmp ecx, eax
mov eax, dword [ebp - 0x30]
sbb ecx, ecx
xor edx, edx
inc ecx
add ecx, eax
mov eax, dword [ebp - 0x30]
cmp eax, ecx
mov eax, 0xf90bf567
setge dl
cmp eax, edx
sbb eax, eax
xor edx, edx
inc eax
cmp eax, 2
mov eax, dword [ebp - 0x30]
setne dl
xor ecx, ecx
sub edx, 3
cmp edx, eax
setne cl
mov dword [ebp - 0x2c], ecx
lea ecx, [ebp - 0xac]
mov byte [ebp - 4], 2
call fcn.10002246
mov eax, dword [0x1007df54]
test al, 1
jne 0x10043139
or eax, esi
mov dword [0x1007df54], eax
push 0x7d1
mov byte [ebp - 4], 4
call fcn.1001394f
mov word [0x1007f2e8], ax
mov byte [ebp - 4], 2
mov eax, dword [0x1007df54]
pop ecx
test al, 2
jne 0x1004315e
or eax, 2
mov dword [0x1007df54], eax
push 0x136b
mov byte [ebp - 4], 5
call fcn.1001394f
pop ecx
mov word [0x1007f2f8], ax
mov byte [ebp - 4], 2
mov dword [ebp - 0x28], 5
mov dword [ebp - 0x20], 0x901516ea
mov dword [ebp - 0x34], esi
mov dword [ebp - 0x2c], 0x9c2d
mov dword [ebp - 0x3c], 0xfffa
mov dword [ebp - 0x14], ebx
jmp 0x10043190
mov eax, dword [ebp - 0x14]
mov dword [ebp + eax*4 - 0x64], 0x41b3c692
inc dword [ebp - 0x14]
cmp dword [ebp - 0x14], 3
jl 0x10043182
mov dword [ebp - 0x28], 2
cmp dword [ebp - 0x28], ebx
jl 0x1004326f
mov dword [ebp - 0x14], esi
mov dword [ebp - 0x8c], 0xfffffffd
mov eax, dword [ebp - 0x28]
cmp dword [ebp + eax*4 - 0x64], ebx
je 0x1004320f
mov dword [ebp - 0x18], 0xacf25792
xor edx, edx
mov dword [ebp - 0x1c], 0xa652065c
mov eax, dword [ebp - 0x5c]
mov eax, dword [ebp - 0x1c]
mov eax, dword [ebp - 0x14]
mov eax, dword [ebp - 0x1c]
mov eax, dword [ebp - 0x64]
mov eax, dword [ebp - 0x28]
mov dword [ebp - 0x18], ebx
mov ecx, dword [ebp - 0x1c]
add ecx, dword [ebp - 0x18]
mov eax, dword [ebp - 0x14]
neg ecx
cmp ecx, eax
setne dl
xor ebx, ebx
add edx, dword [ebp - 0x1c]
mov eax, dword [ebp - 0x28]
cmp edx, eax
mov eax, dword [ebp - 0x64]
setl bl
xor ecx, ecx
cmp ebx, eax
setle cl
xor ebx, ebx
mov dword [ebp - 0x1c], ecx
jmp 0x10043257
mov dword [ebp - 0x18], esi
mov dword [ebp - 0x14], ebx
jmp 0x10043251
push esi
lea eax, [ebp - 0x84]
mov dword [ebp - 0x84], esi
inc dword [ebp - 0x18]
lea ecx, [ebp - 0x28]
push eax
push 0x3cad
push 0x20e8
push 0x7914
push esi
push ebx
push 0x888
mov edx, 0x7443
call fcn.10042c21
add esp, 0x20
inc dword [ebp - 0x14]
cmp dword [ebp - 0x14], 2
jle 0x10043217
lea eax, [ebp - 0x8c]
push esi
push eax
call fcn.10041df4
dec dword [ebp - 0x28]
pop ecx
pop ecx
jns 0x100431a6
mov eax, dword [ebp - 0x34]
neg eax
mov dword [ebp - 0x1c], ebx
sbb eax, eax
inc eax
mov dword [ebp - 0x28], eax
mov eax, dword [ebp - 0x28]
mov eax, dword [ebp - 0x5c]
mov eax, dword [ebp - 0x20]
mov eax, dword [ebp - 0x20]
mov eax, dword [ebp - 0x3c]
mov eax, dword [ebp - 0x5c]
mov eax, dword [ebp - 0x5c]
mov eax, dword [ebp - 0x2c]
mov edx, dword [ebp - 0x34]
mov ecx, dword [ebp - 0x64]
inc edx
mov eax, dword [ebp - 0x2c]
neg edx
sbb edx, edx
add ecx, 0x31381660
neg edx
add eax, edx
add eax, ecx
neg eax
sbb eax, eax
inc eax
mov dword [ebp - 0x20], eax
mov eax, ebx
mov ecx, dword [ebp - 0x94]
cmp eax, dword [ecx]
jae 0x10043770
push 2
lea ecx, [ebp - 0xa0]
call fcn.100021e9
mov byte [ebp - 4], 6
lea ecx, [ebp - 0xe4]
mov dword [ebp - 0x20], ebx
mov dword [ebp - 0x44], 0x2263126f
push 3
call fcn.100021e9
mov byte [ebp - 4], 7
mov dword [ebp - 0x18], 0x489d
cmp dword [ebp - 0x18], 0x4bbd
jle 0x10043350
mov esi, ebx
mov dword [ebp - 0x34], ebx
mov edi, ebx
mov dword [ebp - 0x2c], ebx
mov eax, esi
cdq
idiv edi
mov edi, 0x299
mov esi, edx
mov eax, esi
mov ecx, 0x1007cc18
cdq
push edx
push eax
call fcn.10013d0a
dec esi
dec edi
jne 0x10043319
mov edi, dword [ebp - 0x2c]
mov esi, dword [ebp - 0x34]
inc edi
mov dword [ebp - 0x2c], edi
cmp edi, 0x38c2
jl 0x1004330d
inc esi
mov dword [ebp - 0x34], esi
cmp esi, 0x7324
jl 0x10043308
xor esi, esi
push 0xfffffffffffffff7
inc esi
pop edi
mov dword [ebp - 0x2c], esi
mov byte [ebp - 4], 8
cmp dword [ebp - 0x18], 0x4701
jge 0x100434c7
mov edx, str.jjgitavz_uhhgod_fhiarpr_cyra_rpwdkm_oceokeiek_teqd_acinrvjeh
mov ecx, 0x1007cc18
call fcn.1001875a
jmp 0x100434c7
mov dword [ebp - 4], 7
lea eax, [ebp - 0x24]
push ebx
mov dword [ebp - 0x34], 0x4b79a97a
lea edx, [ebp - 0xa0]
push 0x7f82
mov dword [ebp - 0xd8], edi
mov ecx, 0xe36
push eax
mov dword [ebp - 0xd4], edi
mov dword [ebp - 0xd0], edi
mov dword [ebp - 0xcc], edi
push 0x3b3f
call fcn.10043aa8
add esp, 0x10
mov dword [ebp - 0x24], ebx
jmp 0x10043522
mov eax, dword [ebp - 0x24]
mov dword [ebp + eax*4 - 0x48], 0x9aed23b6
inc dword [ebp - 0x24]
cmp dword [ebp - 0x24], esi
jl 0x10043514
push 0x3bec
push ecx
lea eax, [ebp - 0xe4]
push eax
push esi
lea ecx, [ebp - 0x24]
call fcn.10041e14
add esp, 0x10
mov dword [ebp - 0x24], ebx
jmp 0x10043556
mov eax, dword [ebp - 0x24]
mov dword [ebp + eax*4 - 0x128], 0x1ca72764
inc dword [ebp - 0x24]
cmp dword [ebp - 0x24], 4
jl 0x10043545
push esi
push 0x101e
lea eax, [ebp - 0x44]
mov edx, 0x65ed
push eax
push 0x9e4
push 0x41c2
push esi
push esi
push 0x168b
mov ecx, 0x4f4a
call fcn.10042c21
add esp, 0x20
cmp dword [ebp - 0x48], ebx
jne 0x1004362e
mov eax, dword [ebp - 0x44]
mov eax, dword [ebp - 0x44]
mov eax, dword [ebp - 0x44]
mov ecx, dword [ebp - 0xa0]
mov dword [ebp - 0x3c], ecx
cmp dword [ecx + 4], 0xbf7c
jl 0x100435b0
mov eax, dword [ebp - 0x2c]
mov eax, dword [ebp - 0x48]
xor edx, edx
cmp eax, 0x1ebc
mov eax, dword [ebp - 0x48]
setne dl
sub edx, dword [ecx + 4]
neg edx
sbb edx, edx
xor ecx, ecx
inc edx
cmp edx, eax
mov edx, dword [ebp - 0x3c]
setge cl
xor eax, eax
cmp ecx, 0xe01afec1
mov ecx, dword [ebp - 0x20]
setne al
imul ecx, eax
mov eax, dword [ebp - 0x48]
neg ecx
sbb ecx, ecx
neg ecx
lea eax, [ecx + 1]
xor ecx, ecx
cmp eax, dword [edx + 4]
setge cl
mov dword [ebp - 0x20], ecx
mov eax, dword [ebp - 0x20]
mov eax, dword [ebp - 0x34]
mov eax, dword [ebp - 0xe4]
mov ecx, dword [ebp - 0x2c]
dec dword [eax + 4]
mov eax, dword [ebp - 0xa0]
mov dword [ebp - 0x48], ecx
mov eax, dword [eax]
imul eax, ecx
mov dword [ebp - 0xd0], eax
mov eax, dword [ebp - 0x44]
cmp dword [edx + 4], 0xd7e3c239
mov edx, ebx
je 0x10043630
mov edx, esi
mov eax, dword [ebp - 0x34]
xor ecx, ecx
cmp edx, eax
setge cl
cmp ecx, dword [ebp - 0x44]
je 0x10043649
mov eax, esi
cmp dword [ebp - 0xd0], ebx
jne 0x1004364b
mov eax, ebx
mov dword [ebp - 0x11c], eax
lea ecx, [ebp - 0xe4]
call fcn.10002246
lea ecx, [ebp - 0xa0]
mov byte [ebp - 4], 2
call fcn.10002246
call fcn.100418a3
push 0x24
pop ecx
xor edx, edx
div ecx
push 4
mov dword [ebp - 0x88], edx
lea ecx, [ebp - 0xb8]
mov dword [ebp - 0x68], 0xc70c
mov dword [ebp - 0x54], 0xffffffff
mov dword [ebp - 0x50], 0x849f845d
call fcn.100021e9
lea eax, [ebp - 0x100]
mov byte [ebp - 4], 0xc
push eax
push esi
push 0x1d2b
push esi
push 0x213d
lea eax, [ebp - 0xb8]
mov dword [ebp - 0x58], 0xffffffff
push eax
push 0x7cac
mov edx, 0x51c9
xor cl, cl
call fcn.1004253e
add esp, 0x1c
lea eax, [ebp - 0x58]
lea edx, [ebp - 0x50]
push eax
push 0x2bc3
push esi
lea eax, [ebp - 0xb8]
push eax
push ecx
lea eax, [ebp - 0x54]
push eax
lea eax, [ebp - 0x68]
push eax
call fcn.10043bad
add esp, 0x18
lea eax, [ebp - 0x50]
lea edx, [ebp - 0x54]
push eax
push ecx
lea eax, [ebp - 0x68]
push eax
lea eax, [ebp - 0xb8]
push eax
push esi
lea eax, [ebp - 0x58]
push eax
push 0x5b25
push ecx
call fcn.10043a12
add esp, 0x24
mov byte [ebp - 4], 2
lea ecx, [ebp - 0xb8]
call fcn.10002246
lea eax, [ebp - 0x88]
mov edx, 0x4c24
push eax
push 0x3af4
push esi
push esi
lea eax, [ebp - 0xfc]
mov ecx, 0x1007f2e8
push eax
push 0x1007f2f8
push 0x128f
push esi
call fcn.10042da6
mov eax, dword [ebp - 0x1c]
add esp, 0x20
inc eax
mov dword [ebp - 0x1c], eax
jmp 0x100432b9
mov eax, dword [ebp + 8]
lea ecx, [ebp - 0xfc]
cmp eax, ecx
je 0x10043788
push 0xffffffffffffffff
push ebx
push ecx
mov ecx, eax
call fcn.10014a45
push ebx
push esi
lea ecx, [ebp - 0xfc]
call fcn.10014b87
jmp 0x100437af
push 0x2683
push ebx
push 0x1073
push 0x2593
push ebx
push ebx
call dword [sym.imp.ADVAPI32.dll_RegSetValueExW]
mov ecx, dword [ebp - 0xc]
pop edi
pop esi
mov dword fs:[0], ecx
pop ebx
mov esp, ebp
pop ebp
ret