Function at 0x4243e7
Capabilities:
Contain obfuscated stackstrings
Set registry value

Disassembly:
mov edi, edi
push ebp
mov ebp, esp
sub esp, 0x14c
mov eax, dword [section..data]
xor eax, ebp
mov dword [ebp - 4], eax
push ebx
push esi
mov esi, dword [ebp + 8]
push edi
xor ebx, ebx
push ebx
push 0x2001f
push 0x424b70
push 0x80000000
lea ecx, [ebp - 0x140]
mov dword [ebp - 0x140], ebx
mov dword [ebp - 0x13c], ebx
mov dword [ebp - 0x138], ebx
call fcn.004243aa
mov edi, eax
cmp edi, ebx
jge 0x424449
lea ecx, [ebp - 0x140]
call fcn.00405a22
mov eax, edi
jmp 0x424b16
push ebx
push 0x20006
push esi
push dword [ebp - 0x140]
lea ecx, [ebp - 0x14c]
mov dword [ebp - 0x14c], ebx
mov dword [ebp - 0x148], ebx
mov dword [ebp - 0x144], ebx
call fcn.004243aa
mov esi, eax
cmp esi, ebx
jge 0x424496
lea ecx, [ebp - 0x14c]
call fcn.00405a22
lea ecx, [ebp - 0x140]
call fcn.00405a22
mov eax, esi
jmp 0x424b16
mov byte [ebp - 0x134], 1
mov byte [ebp - 0x133], bl
mov byte [ebp - 0x132], 4
mov byte [ebp - 0x131], 0x80
mov byte [ebp - 0x130], 0x84
mov byte [ebp - 0x12f], bl
mov byte [ebp - 0x12e], bl
mov byte [ebp - 0x12d], bl
mov byte [ebp - 0x12c], 0x94
mov byte [ebp - 0x12b], bl
mov byte [ebp - 0x12a], bl
mov byte [ebp - 0x129], bl
mov byte [ebp - 0x128], bl
mov byte [ebp - 0x127], bl
mov byte [ebp - 0x126], bl
mov byte [ebp - 0x125], bl
mov byte [ebp - 0x124], 0x14
mov byte [ebp - 0x123], bl
mov byte [ebp - 0x122], bl
mov byte [ebp - 0x121], bl
mov byte [ebp - 0x120], 2
mov byte [ebp - 0x11f], bl
mov byte [ebp - 0x11e], 0x70
mov byte [ebp - 0x11d], bl
mov byte [ebp - 0x11c], 5
mov byte [ebp - 0x11b], bl
mov byte [ebp - 0x11a], bl
mov byte [ebp - 0x119], bl
mov byte [ebp - 0x118], bl
mov byte [ebp - 0x117], bl
mov byte [ebp - 0x116], 0x18
mov byte [ebp - 0x115], bl
mov byte [ebp - 0x114], 0x1f
mov byte [ebp - 0x113], bl
mov byte [ebp - 0x112], bl
mov byte [ebp - 0x111], bl
mov byte [ebp - 0x110], 1
mov byte [ebp - 0x10f], 2
mov byte [ebp - 0x10e], bl
mov byte [ebp - 0x10d], bl
mov byte [ebp - 0x10c], bl
mov byte [ebp - 0x10b], bl
mov byte [ebp - 0x10a], bl
mov byte [ebp - 0x109], 5
mov byte [ebp - 0x108], 0x20
mov byte [ebp - 0x107], bl
mov byte [ebp - 0x106], bl
mov byte [ebp - 0x105], bl
mov byte [ebp - 0x104], 0x20
mov byte [ebp - 0x103], 2
mov byte [ebp - 0x102], bl
mov byte [ebp - 0x101], bl
mov byte [ebp - 0x100], bl
mov byte [ebp - 0xff], bl
mov byte [ebp - 0xfe], 0x14
mov byte [ebp - 0xfd], bl
mov byte [ebp - 0xfc], 0xb
mov byte [ebp - 0xfb], bl
mov byte [ebp - 0xfa], bl
mov byte [ebp - 0xf9], bl
mov byte [ebp - 0xf8], 1
mov byte [ebp - 0xf7], 1
mov byte [ebp - 0xf6], bl
mov byte [ebp - 0xf5], bl
mov byte [ebp - 0xf4], bl
mov byte [ebp - 0xf3], bl
mov byte [ebp - 0xf2], bl
mov byte [ebp - 0xf1], 5
mov byte [ebp - 0xf0], 4
mov byte [ebp - 0xef], bl
mov byte [ebp - 0xee], bl
mov byte [ebp - 0xed], bl
mov byte [ebp - 0xec], bl
mov byte [ebp - 0xeb], bl
mov byte [ebp - 0xea], 0x14
mov byte [ebp - 0xe9], bl
mov byte [ebp - 0xe8], 0xb
mov byte [ebp - 0xe7], bl
mov byte [ebp - 0xe6], bl
mov byte [ebp - 0xe5], bl
mov byte [ebp - 0xe4], 1
mov byte [ebp - 0xe3], 1
mov byte [ebp - 0xe2], bl
mov byte [ebp - 0xe1], bl
mov byte [ebp - 0xe0], bl
mov byte [ebp - 0xdf], bl
mov byte [ebp - 0xde], bl
mov byte [ebp - 0xdd], 5
mov byte [ebp - 0xdc], 0x13
mov byte [ebp - 0xdb], bl
mov byte [ebp - 0xda], bl
mov byte [ebp - 0xd9], bl
mov byte [ebp - 0xd8], bl
mov byte [ebp - 0xd7], bl
mov byte [ebp - 0xd6], 0x14
mov byte [ebp - 0xd5], bl
mov byte [ebp - 0xd4], 0xb
mov byte [ebp - 0xd3], bl
mov byte [ebp - 0xd2], bl
mov byte [ebp - 0xd1], bl
mov byte [ebp - 0xd0], 1
mov byte [ebp - 0xcf], 1
mov byte [ebp - 0xce], bl
mov byte [ebp - 0xcd], bl
mov byte [ebp - 0xcc], bl
mov byte [ebp - 0xcb], bl
mov byte [ebp - 0xca], bl
mov byte [ebp - 0xc9], 5
mov byte [ebp - 0xc8], 0x14
mov byte [ebp - 0xc7], bl
mov byte [ebp - 0xc6], bl
mov byte [ebp - 0xc5], bl
mov byte [ebp - 0xc4], bl
mov byte [ebp - 0xc3], bl
mov byte [ebp - 0xc2], 0x14
mov byte [ebp - 0xc1], bl
mov byte [ebp - 0xc0], 0xb
mov byte [ebp - 0xbf], bl
mov byte [ebp - 0xbe], bl
mov byte [ebp - 0xbd], bl
mov byte [ebp - 0xbc], 1
mov byte [ebp - 0xbb], 1
mov byte [ebp - 0xba], bl
mov byte [ebp - 0xb9], bl
mov byte [ebp - 0xb8], bl
mov byte [ebp - 0xb7], bl
mov byte [ebp - 0xb6], bl
mov byte [ebp - 0xb5], 5
mov byte [ebp - 0xb4], 0x12
mov byte [ebp - 0xb3], bl
mov byte [ebp - 0xb2], bl
mov byte [ebp - 0xb1], bl
mov byte [ebp - 0xb0], 1
mov byte [ebp - 0xaf], 2
mov byte [ebp - 0xae], bl
mov byte [ebp - 0xad], bl
mov byte [ebp - 0xac], bl
mov byte [ebp - 0xab], bl
mov byte [ebp - 0xaa], bl
mov byte [ebp - 0xa9], 5
mov byte [ebp - 0xa8], 0x20
mov byte [ebp - 0xa7], bl
mov byte [ebp - 0xa6], bl
mov byte [ebp - 0xa5], bl
mov byte [ebp - 0xa4], 0x20
mov byte [ebp - 0xa3], 2
mov byte [ebp - 0xa2], bl
mov byte [ebp - 0xa1], bl
mov byte [ebp - 0xa0], 1
mov byte [ebp - 0x9f], 2
mov byte [ebp - 0x9e], bl
mov byte [ebp - 0x9d], bl
mov byte [ebp - 0x9c], bl
mov byte [ebp - 0x9b], bl
mov byte [ebp - 0x9a], bl
mov byte [ebp - 0x99], 5
mov byte [ebp - 0x98], 0x20
mov byte [ebp - 0x97], bl
mov byte [ebp - 0x96], bl
mov byte [ebp - 0x95], bl
mov byte [ebp - 0x94], 0x20
mov byte [ebp - 0x93], 2
mov esi, dword [sym.imp.ADVAPI32.dll_RegSetValueExW]
push 0xa4
lea eax, [ebp - 0x134]
push eax
push 3
push ebx
push 0x424b4c
push dword [ebp - 0x14c]
mov byte [ebp - 0x92], bl
mov byte [ebp - 0x91], bl
call esi
mov edi, eax
cmp edi, ebx
jge 0x4248db
lea ecx, [ebp - 0x14c]
call fcn.00405a22
jmp 0x424437
mov byte [ebp - 0x90], 1
mov byte [ebp - 0x8f], bl
mov byte [ebp - 0x8e], 4
mov byte [ebp - 0x8d], 0x80
mov byte [ebp - 0x8c], 0x6c
mov byte [ebp - 0x8b], bl
mov byte [ebp - 0x8a], bl
mov byte [ebp - 0x89], bl
mov byte [ebp - 0x88], 0x7c
mov byte [ebp - 0x87], bl
mov byte [ebp - 0x86], bl
mov byte [ebp - 0x85], bl
mov byte [ebp - 0x84], bl
mov byte [ebp - 0x83], bl
mov byte [ebp - 0x82], bl
mov byte [ebp - 0x81], bl
mov byte [ebp - 0x80], 0x14
mov byte [ebp - 0x7f], bl
mov byte [ebp - 0x7e], bl
mov byte [ebp - 0x7d], bl
mov byte [ebp - 0x7c], 2
mov byte [ebp - 0x7b], bl
mov byte [ebp - 0x7a], 0x58
mov byte [ebp - 0x79], bl
mov byte [ebp - 0x78], 4
mov byte [ebp - 0x77], bl
mov byte [ebp - 0x76], bl
mov byte [ebp - 0x75], bl
mov byte [ebp - 0x74], bl
mov byte [ebp - 0x73], bl
mov byte [ebp - 0x72], 0x14
mov byte [ebp - 0x71], bl
mov byte [ebp - 0x70], 3
mov byte [ebp - 0x6f], bl
mov byte [ebp - 0x6e], bl
mov byte [ebp - 0x6d], bl
mov byte [ebp - 0x6c], 1
mov byte [ebp - 0x6b], 1
mov byte [ebp - 0x6a], bl
mov byte [ebp - 0x69], bl
mov byte [ebp - 0x68], bl
mov byte [ebp - 0x67], bl
mov byte [ebp - 0x66], bl
mov byte [ebp - 0x65], 5
mov byte [ebp - 0x64], 0x13
mov byte [ebp - 0x63], bl
mov byte [ebp - 0x62], bl
mov byte [ebp - 0x61], bl
mov byte [ebp - 0x60], bl
mov byte [ebp - 0x5f], bl
mov byte [ebp - 0x5e], 0x14
mov byte [ebp - 0x5d], bl
mov byte [ebp - 0x5c], 3
mov byte [ebp - 0x5b], bl
mov byte [ebp - 0x5a], bl
mov byte [ebp - 0x59], bl
mov byte [ebp - 0x58], 1
mov byte [ebp - 0x57], 1
mov byte [ebp - 0x56], bl
mov byte [ebp - 0x55], bl
mov byte [ebp - 0x54], bl
mov byte [ebp - 0x53], bl
mov byte [ebp - 0x52], bl
mov byte [ebp - 0x51], 5
mov byte [ebp - 0x50], 0x14
mov byte [ebp - 0x4f], bl
mov byte [ebp - 0x4e], bl
mov byte [ebp - 0x4d], bl
mov byte [ebp - 0x4c], bl
mov byte [ebp - 0x4b], bl
mov byte [ebp - 0x4a], 0x14
mov byte [ebp - 0x49], bl
mov byte [ebp - 0x48], 7
mov byte [ebp - 0x47], bl
mov byte [ebp - 0x46], bl
mov byte [ebp - 0x45], bl
mov byte [ebp - 0x44], 1
mov byte [ebp - 0x43], 1
mov byte [ebp - 0x42], bl
mov byte [ebp - 0x41], bl
mov byte [ebp - 0x40], bl
push 0x8c
lea eax, [ebp - 0x90]
push eax
push 3
push ebx
push 0x424b28
push dword [ebp - 0x14c]
mov byte [ebp - 0x3f], bl
mov byte [ebp - 0x3e], bl
mov byte [ebp - 0x3d], 5
mov byte [ebp - 0x3c], 0xa
mov byte [ebp - 0x3b], bl
mov byte [ebp - 0x3a], bl
mov byte [ebp - 0x39], bl
mov byte [ebp - 0x38], bl
mov byte [ebp - 0x37], bl
mov byte [ebp - 0x36], 0x14
mov byte [ebp - 0x35], bl
mov byte [ebp - 0x34], 3
mov byte [ebp - 0x33], bl
mov byte [ebp - 0x32], bl
mov byte [ebp - 0x31], bl
mov byte [ebp - 0x30], 1
mov byte [ebp - 0x2f], 1
mov byte [ebp - 0x2e], bl
mov byte [ebp - 0x2d], bl
mov byte [ebp - 0x2c], bl
mov byte [ebp - 0x2b], bl
mov byte [ebp - 0x2a], bl
mov byte [ebp - 0x29], 5
mov byte [ebp - 0x28], 0x12
mov byte [ebp - 0x27], bl
mov byte [ebp - 0x26], bl
mov byte [ebp - 0x25], bl
mov byte [ebp - 0x24], 1
mov byte [ebp - 0x23], 2
mov byte [ebp - 0x22], bl
mov byte [ebp - 0x21], bl
mov byte [ebp - 0x20], bl
mov byte [ebp - 0x1f], bl
mov byte [ebp - 0x1e], bl
mov byte [ebp - 0x1d], 5
mov byte [ebp - 0x1c], 0x20
mov byte [ebp - 0x1b], bl
mov byte [ebp - 0x1a], bl
mov byte [ebp - 0x19], bl
mov byte [ebp - 0x18], 0x20
mov byte [ebp - 0x17], 2
mov byte [ebp - 0x16], bl
mov byte [ebp - 0x15], bl
mov byte [ebp - 0x14], 1
mov byte [ebp - 0x13], 2
mov byte [ebp - 0x12], bl
mov byte [ebp - 0x11], bl
mov byte [ebp - 0x10], bl
mov byte [ebp - 0xf], bl
mov byte [ebp - 0xe], bl
mov byte [ebp - 0xd], 5
mov byte [ebp - 0xc], 0x20
mov byte [ebp - 0xb], bl
mov byte [ebp - 0xa], bl
mov byte [ebp - 9], bl
mov byte [ebp - 8], 0x20
mov byte [ebp - 7], 2
mov byte [ebp - 6], bl
mov byte [ebp - 5], bl
call esi
cmp eax, ebx
jge 0x424afe
mov ebx, eax
lea ecx, [ebp - 0x14c]
call fcn.00405a22
lea ecx, [ebp - 0x140]
call fcn.00405a22
mov eax, ebx
mov ecx, dword [ebp - 4]
pop edi
pop esi
xor ecx, ebp
pop ebx
call fcn.004013d7
leave
ret 4