Function at 0x10001160
Capabilities:
Enumerate pe sections

Disassembly:
push ebp
mov ebp, esp
sub esp, 0xc
mov eax, dword [sym.imp.ADVAPI32.dll_RegOpenKeyA]
mov dword [ebp - 0xc], eax
mov dword [ebp - 8], str.KLIOY240LhK7vsoZCTJoUW4VOLYbKLxek4NpSzSTlPjz9R3w
mov ecx, dword [ebp - 8]
mov byte [ecx], 0x9c
mov edx, dword [ebp - 8]
movzx eax, byte [edx]
sub eax, 0x33
mov ecx, dword [ebp - 8]
mov byte [ecx], al
mov edx, dword [ebp - 8]
mov byte [edx + 1], 0xa1
mov eax, dword [ebp - 8]
movzx ecx, byte [eax + 1]
sub ecx, 0x33
mov edx, dword [ebp - 8]
mov byte [edx + 1], cl
mov eax, dword [ebp - 8]
mov byte [eax + 2], 0xa7
mov ecx, dword [ebp - 8]
movzx edx, byte [ecx + 2]
sub edx, 0x33
mov eax, dword [ebp - 8]
mov byte [eax + 2], dl
mov ecx, dword [ebp - 8]
mov byte [ecx + 3], 0x98
mov edx, dword [ebp - 8]
movzx eax, byte [edx + 3]
sub eax, 0x33
mov ecx, dword [ebp - 8]
mov byte [ecx + 3], al
mov edx, dword [ebp - 8]
mov byte [edx + 4], 0xa5
mov eax, dword [ebp - 8]
movzx ecx, byte [eax + 4]
sub ecx, 0x33
mov edx, dword [ebp - 8]
mov byte [edx + 4], cl
mov eax, dword [ebp - 8]
mov byte [eax + 5], 0x99
mov ecx, dword [ebp - 8]
movzx edx, byte [ecx + 5]
sub edx, 0x33
mov eax, dword [ebp - 8]
mov byte [eax + 5], dl
mov ecx, dword [ebp - 8]
mov byte [ecx + 6], 0x94
mov edx, dword [ebp - 8]
movzx eax, byte [edx + 6]
sub eax, 0x33
mov ecx, dword [ebp - 8]
mov byte [ecx + 6], al
mov edx, dword [ebp - 8]
mov byte [edx + 7], 0x96
mov eax, dword [ebp - 8]
movzx ecx, byte [eax + 7]
sub ecx, 0x33
mov edx, dword [ebp - 8]
mov byte [edx + 7], cl
mov eax, dword [ebp - 8]
mov byte [eax + 8], 0x98
mov ecx, dword [ebp - 8]
movzx edx, byte [ecx + 8]
sub edx, 0x33
mov eax, dword [ebp - 8]
mov byte [eax + 8], dl
mov ecx, dword [ebp - 8]
mov byte [ecx + 9], 0x8f
mov edx, dword [ebp - 8]
movzx eax, byte [edx + 9]
sub eax, 0x33
mov ecx, dword [ebp - 8]
mov byte [ecx + 9], al
mov edx, dword [ebp - 8]
mov byte [edx + 0xa], 0xae
mov eax, dword [ebp - 8]
movzx ecx, byte [eax + 0xa]
sub ecx, 0x33
mov edx, dword [ebp - 8]
mov byte [edx + 0xa], cl
mov eax, dword [ebp - 8]
mov byte [eax + 0xb], 0x95
mov ecx, dword [ebp - 8]
movzx edx, byte [ecx + 0xb]
sub edx, 0x33
mov eax, dword [ebp - 8]
mov byte [eax + 0xb], dl
mov ecx, dword [ebp - 8]
mov byte [ecx + 0xc], 0x64
mov edx, dword [ebp - 8]
movzx eax, byte [edx + 0xc]
sub eax, 0x33
mov ecx, dword [ebp - 8]
mov byte [ecx + 0xc], al
mov edx, dword [ebp - 8]
mov byte [edx + 0xd], 0x6c
mov eax, dword [ebp - 8]
movzx ecx, byte [eax + 0xd]
sub ecx, 0x33
mov edx, dword [ebp - 8]
mov byte [edx + 0xd], cl
mov eax, dword [ebp - 8]
mov byte [eax + 0xe], 0x69
mov ecx, dword [ebp - 8]
movzx edx, byte [ecx + 0xe]
sub edx, 0x33
mov eax, dword [ebp - 8]
mov byte [eax + 0xe], dl
mov ecx, dword [ebp - 8]
mov byte [ecx + 0xf], 0x95
mov edx, dword [ebp - 8]
movzx eax, byte [edx + 0xf]
sub eax, 0x33
mov ecx, dword [ebp - 8]
mov byte [ecx + 0xf], al
mov edx, dword [ebp - 8]
mov byte [edx + 0x10], 0x65
mov eax, dword [ebp - 8]
movzx ecx, byte [eax + 0x10]
sub ecx, 0x33
mov edx, dword [ebp - 8]
mov byte [edx + 0x10], cl
mov eax, dword [ebp - 8]
mov byte [eax + 0x11], 0x6b
mov ecx, dword [ebp - 8]
movzx edx, byte [ecx + 0x11]
sub edx, 0x33
mov eax, dword [ebp - 8]
mov byte [eax + 0x11], dl
mov ecx, dword [ebp - 8]
mov byte [ecx + 0x12], 0x6a
mov edx, dword [ebp - 8]
movzx eax, byte [edx + 0x12]
sub eax, 0x33
mov ecx, dword [ebp - 8]
mov byte [ecx + 0x12], al
mov edx, dword [ebp - 8]
mov byte [edx + 0x13], 0x60
mov eax, dword [ebp - 8]
movzx ecx, byte [eax + 0x13]
sub ecx, 0x33
mov edx, dword [ebp - 8]
mov byte [edx + 0x13], cl
mov eax, dword [ebp - 8]
mov byte [eax + 0x14], 0x95
mov ecx, dword [ebp - 8]
movzx edx, byte [ecx + 0x14]
sub edx, 0x33
mov eax, dword [ebp - 8]
mov byte [eax + 0x14], dl
mov ecx, dword [ebp - 8]
mov byte [ecx + 0x15], 0x94
mov edx, dword [ebp - 8]
movzx eax, byte [edx + 0x15]
sub eax, 0x33
mov ecx, dword [ebp - 8]
mov byte [ecx + 0x15], al
mov edx, dword [ebp - 8]
mov byte [edx + 0x16], 0x95
mov eax, dword [ebp - 8]
movzx ecx, byte [eax + 0x16]
sub ecx, 0x33
mov edx, dword [ebp - 8]
mov byte [edx + 0x16], cl
mov eax, dword [ebp - 8]
mov byte [eax + 0x17], 0x67
mov ecx, dword [ebp - 8]
movzx edx, byte [ecx + 0x17]
sub edx, 0x33
mov eax, dword [ebp - 8]
mov byte [eax + 0x17], dl
mov ecx, dword [ebp - 8]
mov byte [ecx + 0x18], 0x60
mov edx, dword [ebp - 8]
movzx eax, byte [edx + 0x18]
sub eax, 0x33
mov ecx, dword [ebp - 8]
mov byte [ecx + 0x18], al
mov edx, dword [ebp - 8]
mov byte [edx + 0x19], 0x64
mov eax, dword [ebp - 8]
movzx ecx, byte [eax + 0x19]
sub ecx, 0x33
mov edx, dword [ebp - 8]
mov byte [edx + 0x19], cl
mov eax, dword [ebp - 8]
mov byte [eax + 0x1a], 0x63
mov ecx, dword [ebp - 8]
movzx edx, byte [ecx + 0x1a]
sub edx, 0x33
mov eax, dword [ebp - 8]
mov byte [eax + 0x1a], dl
mov ecx, dword [ebp - 8]
mov byte [ecx + 0x1b], 0x64
mov edx, dword [ebp - 8]
movzx eax, byte [edx + 0x1b]
sub eax, 0x33
mov ecx, dword [ebp - 8]
mov byte [ecx + 0x1b], al
mov edx, dword [ebp - 8]
mov byte [edx + 0x1c], 0x94
mov eax, dword [ebp - 8]
movzx ecx, byte [eax + 0x1c]
sub ecx, 0x33
mov edx, dword [ebp - 8]
mov byte [edx + 0x1c], cl
mov eax, dword [ebp - 8]
mov byte [eax + 0x1d], 0x60
mov ecx, dword [ebp - 8]
movzx edx, byte [ecx + 0x1d]
sub edx, 0x33
mov eax, dword [ebp - 8]
mov byte [eax + 0x1d], dl
mov ecx, dword [ebp - 8]
mov byte [ecx + 0x1e], 0x95
mov edx, dword [ebp - 8]
movzx eax, byte [edx + 0x1e]
sub eax, 0x33
mov ecx, dword [ebp - 8]
mov byte [ecx + 0x1e], al
mov edx, dword [ebp - 8]
mov byte [edx + 0x1f], 0x69
mov eax, dword [ebp - 8]
movzx ecx, byte [eax + 0x1f]
sub ecx, 0x33
mov edx, dword [ebp - 8]
mov byte [edx + 0x1f], cl
mov eax, dword [ebp - 8]
mov byte [eax + 0x20], 0x6c
mov ecx, dword [ebp - 8]
movzx edx, byte [ecx + 0x20]
sub edx, 0x33
mov eax, dword [ebp - 8]
mov byte [eax + 0x20], dl
mov ecx, dword [ebp - 8]
mov byte [ecx + 0x21], 0x96
mov edx, dword [ebp - 8]
movzx eax, byte [edx + 0x21]
sub eax, 0x33
mov ecx, dword [ebp - 8]
mov byte [ecx + 0x21], al
mov edx, dword [ebp - 8]
mov byte [edx + 0x22], 0x60
mov eax, dword [ebp - 8]
movzx ecx, byte [eax + 0x22]
sub ecx, 0x33
mov edx, dword [ebp - 8]
mov byte [edx + 0x22], cl
mov eax, dword [ebp - 8]
mov byte [eax + 0x23], 0x63
mov ecx, dword [ebp - 8]
movzx edx, byte [ecx + 0x23]
sub edx, 0x33
mov eax, dword [ebp - 8]
mov byte [eax + 0x23], dl
mov ecx, dword [ebp - 8]
mov byte [ecx + 0x24], 0x63
mov edx, dword [ebp - 8]
movzx eax, byte [edx + 0x24]
sub eax, 0x33
mov ecx, dword [ebp - 8]
mov byte [ecx + 0x24], al
mov edx, dword [ebp - 8]
mov byte [edx + 0x25], 0x94
mov eax, dword [ebp - 8]
movzx ecx, byte [eax + 0x25]
sub ecx, 0x33
mov edx, dword [ebp - 8]
mov byte [edx + 0x25], cl
mov eax, dword [ebp - 8]
mov byte [eax + 0x26], 0x94
mov ecx, dword [ebp - 8]
movzx edx, byte [ecx + 0x26]
sub edx, 0x33
mov eax, dword [ebp - 8]
mov byte [eax + 0x26], dl
mov ecx, dword [ebp - 8]
mov byte [ecx + 0x27], 0x63
mov edx, dword [ebp - 8]
movzx eax, byte [edx + 0x27]
sub eax, 0x33
mov ecx, dword [ebp - 8]
mov byte [ecx + 0x27], al
mov edx, dword [ebp - 8]
mov byte [edx + 0x28], 0x63
mov eax, dword [ebp - 8]
movzx ecx, byte [eax + 0x28]
sub ecx, 0x33
mov edx, dword [ebp - 8]
mov byte [edx + 0x28], cl
mov eax, dword [ebp - 8]
mov byte [eax + 0x29], 0x66
mov ecx, dword [ebp - 8]
movzx edx, byte [ecx + 0x29]
sub edx, 0x33
mov eax, dword [ebp - 8]
mov byte [eax + 0x29], dl
mov ecx, dword [ebp - 8]
mov byte [ecx + 0x2a], 0x67
mov edx, dword [ebp - 8]
movzx eax, byte [edx + 0x2a]
sub eax, 0x33
mov ecx, dword [ebp - 8]
mov byte [ecx + 0x2a], al
mov edx, dword [ebp - 8]
mov byte [edx + 0x2b], 0x64
mov eax, dword [ebp - 8]
movzx ecx, byte [eax + 0x2b]
sub ecx, 0x33
mov edx, dword [ebp - 8]
mov byte [edx + 0x2b], cl
mov eax, dword [ebp - 8]
mov byte [eax + 0x2c], 0x97
mov ecx, dword [ebp - 8]
movzx edx, byte [ecx + 0x2c]
sub edx, 0x33
mov eax, dword [ebp - 8]
mov byte [eax + 0x2c], dl
mov ecx, dword [ebp - 8]
mov byte [ecx + 0x2d], 0x63
mov edx, dword [ebp - 8]
movzx eax, byte [edx + 0x2d]
sub eax, 0x33
mov ecx, dword [ebp - 8]
mov byte [ecx + 0x2d], al
mov edx, dword [ebp - 8]
mov byte [edx + 0x2e], 0x6a
mov eax, dword [ebp - 8]
movzx ecx, byte [eax + 0x2e]
sub ecx, 0x33
mov edx, dword [ebp - 8]
mov byte [edx + 0x2e], cl
mov eax, dword [ebp - 8]
mov byte [eax + 0x2f], 0xb0
mov ecx, dword [ebp - 8]
movzx edx, byte [ecx + 0x2f]
sub edx, 0x33
mov eax, dword [ebp - 8]
mov byte [eax + 0x2f], dl
call fcn.10001150
jmp 0x100015c9
push 0x1017b138
mov ecx, dword [ebp - 8]
push ecx
mov edx, dword [section..data]
sub edx, 0x74ea8
push edx
call dword [ebp - 0xc]
mov dword [ebp - 4], eax
cmp dword [ebp - 4], 0
je 0x100015f6
mov eax, 1
test eax, eax
je 0x100015f6
jmp 0x100015eb
mov esp, ebp
pop ebp
ret