Function at 0x408af1
Capabilities:
Set registry value

Disassembly:
mov eax, 0x426258
call fcn.0041bdc0
sub esp, 0x20
push ebx
push esi
push edi
lea ecx, [ebp - 0x2c]
call fcn.00402ccc
xor ebx, ebx
lea ecx, [ebp - 0x20]
mov dword [ebp - 4], ebx
call fcn.00402ccc
mov esi, str.SOFTWARE_
lea ecx, [ebp - 0x2c]
push esi
mov byte [ebp - 4], 1
call fcn.00402f0a
push str.Public_DomainBlat
lea ecx, [ebp - 0x2c]
call fcn.00402e0f
mov edi, dword [ebp + 8]
lea ecx, [edi + 4]
call fcn.00409563
cmp word [eax], bx
je 0x408b5e
push 0x42a210
lea ecx, [ebp - 0x2c]
call fcn.00402e0f
lea eax, [edi + 4]
lea ecx, [ebp - 0x2c]
push eax
call fcn.00402e48
lea eax, [ebp - 0x14]
lea ecx, [ebp - 0x2c]
push eax
lea eax, [ebp - 0x10]
push eax
push ebx
push 0x20006
push ebx
push ebx
push ebx
call fcn.00409563
push eax
push dword [ebp + 0xc]
call dword [sym.imp.ADVAPI32.dll_RegCreateKeyExW]
cmp eax, ebx
mov dword [ebp + 8], eax
je 0x408bff
push esi
lea ecx, [ebp - 0x2c]
call fcn.00402f0a
push str.ClassesVirtualStoreMACHINE_
lea ecx, [ebp - 0x2c]
call fcn.00402e0f
push esi
lea ecx, [ebp - 0x2c]
call fcn.00402e0f
push str.Public_DomainBlat
lea ecx, [ebp - 0x2c]
call fcn.00402e0f
lea esi, [edi + 4]
mov ecx, esi
call fcn.00409563
cmp word [eax], bx
je 0x408bd9
push 0x42a210
lea ecx, [ebp - 0x2c]
call fcn.00402e0f
push esi
lea ecx, [ebp - 0x2c]
call fcn.00402e48
lea eax, [ebp - 0x14]
lea ecx, [ebp - 0x2c]
push eax
lea eax, [ebp - 0x10]
push eax
push ebx
push 0x20006
push ebx
push ebx
push ebx
call fcn.00409563
push eax
push dword [ebp + 0xc]
call dword [sym.imp.ADVAPI32.dll_RegCreateKeyExW]
mov dword [ebp + 8], eax
lea ecx, [ebp - 0x2c]
call fcn.00402d02
cmp dword [ebp + 8], ebx
je 0x408c3e
cmp word [edi + 0x35e], bx
jne 0x408c36
cmp dword [ebp + 8], 0x3f5
je 0x408c2b
cmp dword [ebp + 8], 5
je 0x408c2b
push str.Error_in_creating_blat_key_in_the_registry_n
jmp 0x408c30
push str.Write_access_to_the_registry_was_denied._n
call fcn.0041b83f
pop ecx
push 0xa
pop esi
jmp 0x40953b
lea ecx, [edi + 0xc8]
call fcn.00402eb2
mov esi, 0x100
cmp eax, esi
jbe 0x408c6f
lea ecx, [edi + 0xc8]
call fcn.00409563
lea ecx, [edi + 0xc8]
mov word [eax + 0x200], bx
call fcn.00402ebf
lea ecx, [edi + 0xd4]
call fcn.00402eb2
cmp eax, esi
jbe 0x408c9b
lea ecx, [edi + 0xd4]
call fcn.00409563
lea ecx, [edi + 0xd4]
mov word [eax + 0x200], bx
call fcn.00402ebf
lea ecx, [edi + 0xe0]
call fcn.00402eb2
cmp eax, esi
jbe 0x408cc7
lea ecx, [edi + 0xe0]
call fcn.00409563
lea ecx, [edi + 0xe0]
mov word [eax + 0x200], bx
call fcn.00402ebf
lea ecx, [edi + 0xec]
call fcn.00402eb2
cmp eax, esi
jbe 0x408cf3
lea ecx, [edi + 0xec]
call fcn.00409563
lea ecx, [edi + 0xec]
mov word [eax + 0x200], bx
call fcn.00402ebf
lea ecx, [edi + 0x64]
call fcn.00402eb2
cmp eax, esi
jbe 0x408d16
lea ecx, [edi + 0x64]
call fcn.00409563
lea ecx, [edi + 0x64]
mov word [eax + 0x200], bx
call fcn.00402ebf
lea ecx, [edi + 0x70]
call fcn.00402eb2
cmp eax, esi
jbe 0x408d39
lea ecx, [edi + 0x70]
call fcn.00409563
lea ecx, [edi + 0x70]
mov word [eax + 0x200], bx
call fcn.00402ebf
lea ecx, [edi + 0x98]
call fcn.00402eb2
cmp eax, esi
jbe 0x408d65
lea ecx, [edi + 0x98]
call fcn.00409563
lea ecx, [edi + 0x98]
mov word [eax + 0x200], bx
call fcn.00402ebf
lea ecx, [edi + 0xa4]
call fcn.00402eb2
cmp eax, esi
jbe 0x408d91
lea ecx, [edi + 0xa4]
call fcn.00409563
lea ecx, [edi + 0xa4]
mov word [eax + 0x200], bx
call fcn.00402ebf
lea ecx, [edi + 0x11c]
call fcn.00402eb2
cmp eax, esi
jbe 0x408dbd
lea ecx, [edi + 0x11c]
call fcn.00409563
lea ecx, [edi + 0x11c]
mov word [eax + 0x200], bx
call fcn.00402ebf
lea ecx, [edi + 0x128]
call fcn.00402eb2
cmp eax, esi
jbe 0x408de7
lea esi, [edi + 0x128]
mov ecx, esi
call fcn.00409563
mov ecx, esi
mov word [eax + 0x200], bx
call fcn.00402ebf
lea ecx, [edi + 0xc8]
call fcn.00409563
cmp word [eax], bx
mov esi, dword [sym.imp.ADVAPI32.dll_RegSetValueExW]
je 0x40900e
push 0x427dc8
lea ecx, [edi + 0xc8]
call fcn.00409563
push eax
call fcn.0041b0d0
pop ecx
test eax, eax
pop ecx
jne 0x408e33
lea ecx, [edi + 0xc8]
call fcn.00402cd9
lea ecx, [edi + 0xd4]
call fcn.00402cd9
lea ecx, [edi + 0xc8]
call fcn.00402eb2
lea eax, [eax + eax + 2]
lea ecx, [edi + 0xc8]
push eax
call fcn.00409563
push eax
push 1
push ebx
push str.SMTP_Server
push dword [ebp - 0x10]
call esi
cmp eax, ebx
je 0x408e77
cmp word [edi + 0x35e], bx
jne 0x409456
push str.Error_in_setting_SMTP_server_value_in_the_registry_n
jmp 0x409450
lea ecx, [edi + 0xd4]
call fcn.00402eb2
lea eax, [eax + eax + 2]
lea ecx, [edi + 0xd4]
push eax
call fcn.00409563
push eax
push 1
push ebx
push str.SMTP_Port
push dword [ebp - 0x10]
call esi
cmp eax, ebx
jne 0x409442
lea ecx, [edi + 0x11c]
call fcn.00402eb2
lea eax, [eax + eax + 2]
lea ecx, [edi + 0x11c]
push eax
call fcn.00409563
push eax
push 1
push ebx
push 0x429e84
push dword [ebp - 0x10]
call esi
cmp eax, ebx
je 0x408eec
cmp word [edi + 0x35e], bx
jne 0x409456
push str.Error_in_setting_number_of_try_value_in_the_registry_n
jmp 0x409450
lea ecx, [ebp - 0x20]
call fcn.00402cd9
lea ecx, [edi + 0x104]
call fcn.00402eb2
shl eax, 1
push eax
lea ecx, [ebp - 0x20]
call fcn.00402d7a
push ebx
lea ecx, [ebp - 0x20]
call fcn.00409563
push eax
lea ecx, [edi + 0x104]
call fcn.00409563
push eax
call fcn.00409566
add esp, 0xc
lea ecx, [ebp - 0x20]
call fcn.00402ebf
lea ecx, [ebp - 0x20]
call fcn.00402eb2
lea eax, [eax + eax + 2]
lea ecx, [ebp - 0x20]
push eax
call fcn.00409563
push eax
push 1
push ebx
push str.Login
push dword [ebp - 0x10]
call esi
lea ecx, [ebp - 0x20]
call fcn.00402d02
lea ecx, [ebp - 0x20]
call fcn.00402cd9
lea ecx, [edi + 0x110]
call fcn.00402eb2
shl eax, 1
push eax
lea ecx, [ebp - 0x20]
call fcn.00402d7a
push ebx
lea ecx, [ebp - 0x20]
call fcn.00409563
push eax
lea ecx, [edi + 0x110]
call fcn.00409563
push eax
call fcn.00409566
add esp, 0xc
lea ecx, [ebp - 0x20]
call fcn.00402ebf
lea ecx, [ebp - 0x20]
call fcn.00402eb2
lea eax, [eax + eax + 2]
lea ecx, [ebp - 0x20]
push eax
call fcn.00409563
push eax
push 1
push ebx
push 0x429e6c
push dword [ebp - 0x10]
call esi
lea ecx, [ebp - 0x20]
call fcn.00402d02
lea ecx, [edi + 0x128]
call fcn.00402eb2
lea eax, [eax + eax + 2]
lea ecx, [edi + 0x128]
push eax
call fcn.00409563
push eax
push 1
push ebx
push str.Sender
push dword [ebp - 0x10]
call esi
cmp eax, ebx
je 0x40900e
cmp word [edi + 0x35e], bx
jne 0x409456
push str.Error_in_setting_sender_address_value_in_the_registry_n
jmp 0x409450
lea ecx, [edi + 0xe0]
call fcn.00409563
cmp word [eax], bx
je 0x409209
push 0x427dc8
lea ecx, [edi + 0xe0]
call fcn.00409563
push eax
call fcn.0041b0d0
pop ecx
test eax, eax
pop ecx
jne 0x409054
lea ecx, [edi + 0xe0]
call fcn.00402cd9
lea ecx, [edi + 0xec]
call fcn.00402cd9
lea ecx, [edi + 0xe0]
call fcn.00402eb2
lea eax, [eax + eax + 2]
lea ecx, [edi + 0xe0]
push eax
call fcn.00409563
push eax
push 1
push ebx
push str.NNTP_Server
push dword [ebp - 0x10]
call esi
cmp eax, ebx
je 0x409098
cmp word [edi + 0x35e], bx
jne 0x409456
push str.Error_in_setting_NNTP_server_value_in_the_registry_n
jmp 0x409450
lea ecx, [edi + 0xec]
call fcn.00402eb2
lea eax, [eax + eax + 2]
lea ecx, [edi + 0xec]
push eax
call fcn.00409563
push eax
push 1
push ebx
push str.NNTP_Port
push dword [ebp - 0x10]
call esi
cmp eax, ebx
jne 0x409442
lea ecx, [edi + 0x11c]
call fcn.00402eb2
lea eax, [eax + eax + 2]
lea ecx, [edi + 0x11c]
push eax
call fcn.00409563
push eax
push 1
push ebx
push 0x429e84
push dword [ebp - 0x10]
call esi
cmp eax, ebx
jne 0x408ed5
lea ecx, [ebp - 0x20]
call fcn.00402cd9
lea ecx, [edi + 0x104]
call fcn.00402eb2
shl eax, 1
push eax
lea ecx, [ebp - 0x20]
call fcn.00402d7a
push ebx
lea ecx, [ebp - 0x20]
call fcn.00409563
push eax
lea ecx, [edi + 0x104]
call fcn.00409563
push eax
call fcn.00409566
add esp, 0xc
lea ecx, [ebp - 0x20]
call fcn.00402ebf
lea ecx, [ebp - 0x20]
call fcn.00402eb2
lea eax, [eax + eax + 2]
lea ecx, [ebp - 0x20]
push eax
call fcn.00409563
push eax
push 1
push ebx
push str.Login
push dword [ebp - 0x10]
call esi
lea ecx, [ebp - 0x20]
call fcn.00402d02
lea ecx, [ebp - 0x20]
call fcn.00402cd9
lea ecx, [edi + 0x110]
call fcn.00402eb2
shl eax, 1
push eax
lea ecx, [ebp - 0x20]
call fcn.00402d7a
push ebx
lea ecx, [ebp - 0x20]
call fcn.00409563
push eax
lea ecx, [edi + 0x110]
call fcn.00409563
push eax
call fcn.00409566
add esp, 0xc
lea ecx, [ebp - 0x20]
call fcn.00402ebf
lea ecx, [ebp - 0x20]
call fcn.00402eb2
lea eax, [eax + eax + 2]
lea ecx, [ebp - 0x20]
push eax
call fcn.00409563
push eax
push 1
push ebx
push 0x429e6c
push dword [ebp - 0x10]
call esi
lea ecx, [ebp - 0x20]
call fcn.00402d02
lea ecx, [edi + 0x128]
call fcn.00402eb2
lea eax, [eax + eax + 2]
lea ecx, [edi + 0x128]
push eax
call fcn.00409563
push eax
push 1
push ebx
push str.Sender
push dword [ebp - 0x10]
call esi
cmp eax, ebx
jne 0x408ff7
lea ecx, [edi + 0x64]
call fcn.00409563
cmp word [eax], bx
je 0x409392
push 0x427dc8
lea ecx, [edi + 0x64]
call fcn.00409563
push eax
call fcn.0041b0d0
pop ecx
test eax, eax
pop ecx
jne 0x409243
lea ecx, [edi + 0x64]
call fcn.00402cd9
lea ecx, [edi + 0x70]
call fcn.00402cd9
lea ecx, [edi + 0x64]
call fcn.00402eb2
lea eax, [eax + eax + 2]
lea ecx, [edi + 0x64]
push eax
call fcn.00409563
push eax
push 1
push ebx
push str.POP3_Server
push dword [ebp - 0x10]
call esi
cmp eax, ebx
je 0x409281
cmp word [edi + 0x35e], bx
jne 0x409456
push str.Error_in_setting_POP3_server_value_in_the_registry_n
jmp 0x409450
lea ecx, [edi + 0x70]
call fcn.00402eb2
lea eax, [eax + eax + 2]
lea ecx, [edi + 0x70]
push eax
call fcn.00409563
push eax
push 1
push ebx
push str.POP3_Port
push dword [ebp - 0x10]
call esi
cmp eax, ebx
jne 0x409442
lea ecx, [ebp - 0x20]
call fcn.00402cd9
lea ecx, [edi + 0x7c]
call fcn.00402eb2
shl eax, 1
push eax
lea ecx, [ebp - 0x20]
call fcn.00402d7a
push ebx
lea ecx, [ebp - 0x20]
call fcn.00409563
push eax
lea ecx, [edi + 0x7c]
call fcn.00409563
push eax
call fcn.00409566
add esp, 0xc
lea ecx, [ebp - 0x20]
call fcn.00402ebf
lea ecx, [ebp - 0x20]
call fcn.00409563
push eax
call fcn.0041b566
pop ecx
lea eax, [eax + eax + 2]
push eax
lea ecx, [ebp - 0x20]
call fcn.00409563
push eax
push 1
push ebx
push str.POP3_Login
push dword [ebp - 0x10]
call esi
lea ecx, [ebp - 0x20]
call fcn.00402d02
lea ecx, [ebp - 0x20]
call fcn.00402cd9
lea ecx, [edi + 0x88]
call fcn.00402eb2
shl eax, 1
push eax
lea ecx, [ebp - 0x20]
call fcn.00402d7a
push ebx
lea ecx, [ebp - 0x20]
call fcn.00409563
push eax
lea ecx, [edi + 0x88]
call fcn.00409563
push eax
call fcn.00409566
add esp, 0xc
lea ecx, [ebp - 0x20]
call fcn.00402ebf
lea ecx, [ebp - 0x20]
call fcn.00409563
push eax
call fcn.0041b566
pop ecx
lea eax, [eax + eax + 2]
push eax
lea ecx, [ebp - 0x20]
call fcn.00409563
push eax
push 1
push ebx
push str.POP3_Pwd
push dword [ebp - 0x10]
call esi
lea ecx, [ebp - 0x20]
call fcn.00402d02
lea ecx, [edi + 0x98]
call fcn.00409563
cmp word [eax], bx
je 0x409539
push 0x427dc8
lea ecx, [edi + 0x98]
call fcn.00409563
push eax
call fcn.0041b0d0
pop ecx
test eax, eax
pop ecx
jne 0x4093d8
lea ecx, [edi + 0x98]
call fcn.00402cd9
lea ecx, [edi + 0xa4]
call fcn.00402cd9
lea ecx, [edi + 0x98]
call fcn.00402eb2
lea eax, [eax + eax + 2]
lea ecx, [edi + 0x98]
push eax
call fcn.00409563
push eax
push 1
push ebx
push str.IMAP_Server
push dword [ebp - 0x10]
call esi
cmp eax, ebx
je 0x409415
cmp word [edi + 0x35e], bx
jne 0x409456
push str.Error_in_setting_IMAP_server_value_in_the_registry_n
jmp 0x409450
lea ecx, [edi + 0xa4]
call fcn.00402eb2
lea eax, [eax + eax + 2]
lea ecx, [edi + 0xa4]
push eax
call fcn.00409563
push eax
push 1
push ebx
push str.IMAP_Port
push dword [ebp - 0x10]
call esi
cmp eax, ebx
je 0x40945d
cmp word [edi + 0x35e], bx
jne 0x409456
push str.Error_in_setting_port_value_in_the_registry_n
call fcn.0041b83f
pop ecx
push 0xb
jmp 0x408c38
lea ecx, [ebp - 0x20]
call fcn.00402cd9
lea ecx, [edi + 0xb0]
call fcn.00402eb2
shl eax, 1
push eax
lea ecx, [ebp - 0x20]
call fcn.00402d7a
push ebx
lea ecx, [ebp - 0x20]
call fcn.00409563
push eax
lea ecx, [edi + 0xb0]
call fcn.00409563
push eax
call fcn.00409566
add esp, 0xc
lea ecx, [ebp - 0x20]
call fcn.00402ebf
lea ecx, [ebp - 0x20]
call fcn.00402eb2
lea eax, [eax + eax + 2]
lea ecx, [ebp - 0x20]
push eax
call fcn.00409563
push eax
push 1
push ebx
push str.IMAP_Login
push dword [ebp - 0x10]
call esi
lea ecx, [ebp - 0x20]
call fcn.00402d02
lea ecx, [ebp - 0x20]
call fcn.00402cd9
add edi, 0xbc
mov ecx, edi
call fcn.00402eb2
shl eax, 1
push eax
lea ecx, [ebp - 0x20]
call fcn.00402d7a
push ebx
lea ecx, [ebp - 0x20]
call fcn.00409563
push eax
mov ecx, edi
call fcn.00409563
push eax
call fcn.00409566
add esp, 0xc
lea ecx, [ebp - 0x20]
call fcn.00402ebf
lea ecx, [ebp - 0x20]
call fcn.00402eb2
lea eax, [eax + eax + 2]
lea ecx, [ebp - 0x20]
push eax
call fcn.00409563
push eax
push 1
push ebx
push str.IMAP_Pwd
push dword [ebp - 0x10]
call esi
lea ecx, [ebp - 0x20]
call fcn.00402d02
xor esi, esi
lea ecx, [ebp - 0x20]
mov byte [ebp - 4], bl
call fcn.00402cbe
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x2c]
call fcn.00402cbe
mov ecx, dword [ebp - 0xc]
mov eax, esi
pop edi
pop esi
pop ebx
mov dword fs:[0], ecx
leave
ret