Function at 0x440080
Capabilities:
Contain obfuscated stackstrings

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x467a68
mov eax, dword fs:[0]
push eax
sub esp, 0x84
mov eax, dword [0x4a402c]
xor eax, ebp
mov dword [ebp - 0x10], eax
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov edi, dword [ebp + 8]
mov al, 0x23
mov dword [ebp - 0x5c], edi
mov edx, 0x46
mov dword [ebp - 0x58], 0x700023
xor ecx, ecx
mov dword [ebp - 0x54], 0x65006c
mov dword [ebp - 0x50], 0x740077
mov dword [ebp - 0x4c], 0x710062
mov dword [ebp - 0x48], 0x7f0066
mov dword [ebp - 0x44], 0x420075
mov dword [ebp - 0x40], 0x55004f
mov dword [ebp - 0x3c], 0x7f0046
mov dword [ebp - 0x38], 0x570070
mov dword [ebp - 0x34], 0x420046
mov dword [ebp - 0x30], 0x4e
nop dword [eax]
cbw
xor word [ebp + ecx*2 - 0x56], ax
inc ecx
cmp ecx, 0x14
jae 0x440122
mov al, byte [ebp - 0x58]
jmp 0x440110
xor eax, eax
lea ecx, [ebp - 0x8c]
mov word [ebp - 0x2e], ax
lea eax, [ebp - 0x56]
push eax
call fcn.00404cb0
cmp dword [ebp - 0x78], 8
lea ecx, [ebp - 0x2c]
push 0
push ecx
push 0
push 0x2011f
push 0
push 0
lea eax, [ebp - 0x8c]
mov dword [ebp - 4], 0
cmovae eax, dword [ebp - 0x8c]
push 0
push eax
push 0x80000001
mov dword [ebp - 0x2c], 0
call dword [sym.imp.ADVAPI32.dll_RegCreateKeyExW]
test eax, eax
jne 0x4403fc
mov eax, dword [ebp - 0x2c]
mov dword [ebp - 0x2c], eax
mov ecx, dword [ebp - 0x78]
mov byte [ebp - 4], 2
cmp ecx, 8
jb 0x4401c4
mov edx, dword [ebp - 0x8c]
lea ecx, [ecx*2 + 2]
mov eax, edx
cmp ecx, 0x1000
jb 0x4401ba
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x440418
push ecx
push edx
call fcn.004418b1
add esp, 8
xor eax, eax
mov dword [ebp - 0x7c], 0
mov word [ebp - 0x8c], ax
mov al, 0x69
movsx dx, al
mov dword [ebp - 0x78], 7
mov word [ebp - 0x70], 0x69
mov eax, edx
mov ecx, edx
xor eax, 0x3a
xor ecx, 0xc
mov word [ebp - 0x6e], ax
mov eax, edx
xor eax, 0x1d
mov word [ebp - 0x6a], cx
mov word [ebp - 0x6c], ax
mov eax, edx
xor eax, 8
mov word [ebp - 0x60], cx
mov word [ebp - 0x68], ax
lea ecx, [ebp - 0x44]
mov eax, edx
xor eax, 4
mov word [ebp - 0x66], ax
mov eax, edx
xor eax, 0x2c
xor edx, 0x11
mov word [ebp - 0x64], ax
xor eax, eax
mov word [ebp - 0x5e], ax
lea eax, [ebp - 0x6e]
push eax
mov word [ebp - 0x62], dx
call fcn.00404cb0
lea eax, [ebp - 0x44]
mov byte [ebp - 4], 3
push eax
lea eax, [ebp - 0x28]
push eax
lea ecx, [ebp - 0x2c]
call fcn.0043f8b0
mov ecx, dword [ebp - 0x30]
mov byte [ebp - 4], 5
cmp ecx, 8
jb 0x44028c
mov edx, dword [ebp - 0x44]
lea ecx, [ecx*2 + 2]
mov eax, edx
cmp ecx, 0x1000
jb 0x440282
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x44041d
push ecx
push edx
call fcn.004418b1
add esp, 8
mov edx, dword [ebp - 0x14]
lea esi, [ebp - 0x28]
mov ecx, dword [ebp - 0x28]
xor eax, eax
xorps xmm0, xmm0
mov word [ebp - 0x44], ax
cmp edx, 8
mov dword [ebp - 0x34], 0
movups xmmword [edi], xmm0
mov dword [edi + 0x10], eax
cmovae esi, ecx
mov dword [edi + 0x14], eax
mov eax, dword [ebp - 0x18]
mov dword [ebp - 0x30], 7
mov dword [ebp - 0x74], eax
mov dword [ebp - 0x5c], esi
cmp eax, 0x7ffffffe
ja 0x440422
mov dword [edi + 0x14], 7
cmp eax, 8
jae 0x4402e6
mov dword [edi + 0x10], eax
movups xmm0, xmmword [esi]
movups xmmword [edi], xmm0
jmp 0x440341
mov esi, eax
or esi, 7
cmp esi, 0x7ffffffe
jbe 0x4402fa
mov esi, 0x7ffffffe
jmp 0x440304
mov eax, 0xa
cmp esi, eax
cmovb esi, eax
xor ecx, ecx
mov eax, esi
add eax, 1
setb cl
neg ecx
or ecx, eax
push ecx
mov ecx, edi
call fcn.00406330
mov ecx, eax
mov dword [edi + 0x14], esi
mov eax, dword [ebp - 0x74]
mov dword [edi + 0x10], eax
mov dword [edi], ecx
lea eax, [eax*2 + 2]
push eax
push dword [ebp - 0x5c]
push ecx
call fcn.00445f60
mov edx, dword [ebp - 0x14]
add esp, 0xc
mov ecx, dword [ebp - 0x28]
cmp edx, 8
jb 0x440375
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x44036b
mov ecx, dword [eax - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x440427
push edx
push ecx
call fcn.004418b1
add esp, 8
mov ecx, dword [ebp - 0x2c]
xor eax, eax
mov dword [ebp - 0x18], 0
mov dword [ebp - 0x14], 7
mov word [ebp - 0x28], ax
test ecx, ecx
je 0x4403df
cmp ecx, 0x80000001
je 0x4403df
cmp ecx, 0x80000002
je 0x4403df
cmp ecx, 0x80000000
je 0x4403df
cmp ecx, 0x80000005
je 0x4403df
cmp ecx, 0x80000007
je 0x4403df
cmp ecx, 0x80000004
je 0x4403df
cmp ecx, 0x80000060
je 0x4403df
cmp ecx, 0x80000050
je 0x4403df
cmp ecx, 0x80000003
je 0x4403df
push ecx
call dword [sym.imp.ADVAPI32.dll_RegCloseKey]
mov eax, edi
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
mov ecx, dword [ebp - 0x10]
xor ecx, ebp
call fcn.00441873
mov esp, ebp
pop ebp
ret
push str.RegCreateKeyExW_failed.
push eax
lea ecx, [ebp - 0x70]
call fcn.0043f2c0
push 0x4a0be4
lea eax, [ebp - 0x70]
push eax
call fcn.00445b3c
call fcn.00449a39
call fcn.00449a39
call fcn.00401780
call fcn.00449a39
int3