Function at 0x8471fe0
Capabilities:
Contain obfuscated stackstrings
Delete registry value

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x154
mov eax, dword [0x184002c0]
xor eax, ebp
mov dword [ebp - 4], eax
push ebx
push esi
push edi
call fcn.08471520
test eax, eax
jne 0x8472015
mov eax, 0x80004005
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.0849cd1e
mov esp, ebp
pop ebp
ret
xorps xmm0, xmm0
mov dword [ebp - 0x13c], 0
movq qword [ebp - 0x144], xmm0
mov dword [ebp - 0x144], 0
mov dword [ebp - 0x140], 0
mov dword [ebp - 0x13c], 0
mov dword [ebp - 0x138], 0x31385447
mov dword [ebp - 0x134], 0x4c595147
mov dword [ebp - 0x130], 0x5a386844
mov dword [ebp - 0x12c], 0x6968334e
mov dword [ebp - 0x128], 0x32344859
mov dword [ebp - 0x124], 0x3451444e
mov dword [ebp - 0x120], 0x2b596e50
mov dword [ebp - 0x11c], 0x77517764
mov dword [ebp - 0x118], 0x4a416750
mov dword [ebp - 0x114], 0x4151534f
mov dword [ebp - 0x110], 0x3974584b
mov dword [ebp - 0x10c], 0x68637759
mov dword [ebp - 0x108], 0x766b434b
mov dword [ebp - 0x104], 0x71704148
mov dword [ebp - 0x100], 0x6a77434a
mov dword [ebp - 0xfc], 0x6734774a
mov dword [ebp - 0xf8], 0x7467695a
mov dword [ebp - 0xf4], 0x4667774a
mov dword [ebp - 0xf0], 0x78737a42
mov dword [ebp - 0xec], 0x6a515743
mov dword [ebp - 0xe8], 0x41344361
mov dword [ebp - 0xe4], 0x795a5150
mov dword [ebp - 0xe0], 0x47737766
mov dword [ebp - 0xdc], 0x67463346
mov dword [ebp - 0xd8], 0x656b5349
mov dword [ebp - 0xd4], 0x48674265
mov dword [ebp - 0xd0], 0x506f4849
mov dword [ebp - 0xcc], 0x7a30544d
mov dword [ebp - 0xc8], 0x4b494749
mov dword [ebp - 0xc4], 0x7634684f
mov dword [ebp - 0xc0], 0x574d5159
mov dword [ebp - 0xbc], 0x4263544a
mov dword [ebp - 0xb8], 0x4841695a
mov dword [ebp - 0xb4], 0x65776741
mov dword [ebp - 0xb0], 0x58415149
mov dword [ebp - 0xac], 0x78556a46
mov dword [ebp - 0xa8], 0x7655794a
mov dword [ebp - 0xa4], 0x3359514a
mov dword [ebp - 0xa0], 0x3241674f
mov dword [ebp - 0x9c], 0x3039514f
mov dword [ebp - 0x98], 0x32644344
mov dword [ebp - 0x94], 0x4a305348
mov dword [ebp - 0x90], 0x694d5365
mov dword [ebp - 0x8c], 0x36515149
mov dword [ebp - 0x88], 0x66496745
mov dword [ebp - 0x84], 0x6d55784c
mov dword [ebp - 0x80], 0x306c6847
mov dword [ebp - 0x7c], 0x63304241
mov dword [ebp - 0x78], 0x6945784c
mov dword [ebp - 0x74], 0x42384249
mov dword [ebp - 0x70], 0x43555359
mov dword [ebp - 0x6c], 0x6f51534a
mov dword [ebp - 0x68], 0x4a304749
mov dword [ebp - 0x64], 0x6874434a
mov dword [ebp - 0x60], 0x36456a50
mov dword [ebp - 0x5c], 0x466f7845
mov dword [ebp - 0x58], 0x626b515a
mov dword [ebp - 0x54], 0x6a77784a
mov dword [ebp - 0x50], 0x746b6d5a
mov dword [ebp - 0x4c], 0x6734784e
mov dword [ebp - 0x48], 0x31495749
mov dword [ebp - 0x44], 0x526f544d
mov dword [ebp - 0x40], 0x42345465
mov dword [ebp - 0x3c], 0x6d567759
mov dword [ebp - 0x38], 0x3045524b
mov dword [ebp - 0x34], 0x44414265
mov dword [ebp - 0x30], 0x56344245
mov dword [ebp - 0x2c], 0x6e68414d
mov dword [ebp - 0x28], 0x444d6d41
mov dword [ebp - 0x24], 0x47385443
mov dword [ebp - 0x20], 0x686f6744
mov dword [ebp - 0x1c], 0x4a775161
mov dword [ebp - 0x18], 0x5430514c
mov dword [ebp - 0x14], 0x7134694e
mov dword [ebp - 0x10], 0x336f4445
push 0x20006
sub esp, 0xc
mov dword [ebp - 0xc], 0x41414141
mov ecx, esp
mov word [ebp - 8], 0x4133
lea eax, [ebp - 6]
push dword [ebp - 0x148]
mov dword [ecx], 0
push eax
lea eax, [ebp - 0x138]
mov dword [ecx + 4], 0
push eax
push 0
mov dword [ecx + 8], 0
call fcn.08405280
lea eax, [ebp - 0x154]
push eax
call fcn.0844ba20
add esp, 0x10
mov ecx, dword [eax]
mov eax, dword [eax + 4]
sub eax, ecx
sar eax, 1
je 0x8472629
push ecx
push SysReAllocStringLen
lea ecx, [ebp - 0x144]
call fcn.084657b0
mov ecx, dword [ebp - 0x154]
mov esi, eax
test ecx, ecx
je 0x8472366
push ecx
call fcn.0849b460
add esp, 4
mov ebx, dword [sym.imp.ADVAPI32.dll_RegCloseKey]
mov edi, dword [ebp - 0x144]
test esi, esi
je 0x8472386
push esi
call fcn.084498b0
add esp, 4
mov esi, eax
jmp 0x847260f
push 0x20006
xorps xmm0, xmm0
mov dword [ebp - 0x13c], 0
push str.4031db0c_b05e_43bd_ac1b_e1f4d5da0516
movq qword [ebp - 0x144], xmm0
lea ecx, [ebp - 0x144]
push edi
mov dword [ebp - 0x144], 0
mov dword [ebp - 0x140], 0
mov dword [ebp - 0x13c], 0
call fcn.084657b0
mov ebx, dword [ebp - 0x144]
test eax, eax
je 0x84723e7
push eax
call fcn.084498b0
add esp, 4
jmp 0x84725f8
sub esp, 0xc
mov dword [ebp - 0xd4], 0x6d414346
mov ecx, esp
mov dword [ebp - 0xd0], 0x5234534d
lea eax, [ebp - 8]
mov dword [ebp - 0xcc], 0x6773694c
mov dword [ebp - 0xc8], 0x336f4350
push dword [ebp - 0x148]
mov dword [ebp - 0xc4], 0x6b305450
push eax
lea eax, [ebp - 0xd4]
mov dword [ebp - 0xc0], 0x5a516a4a
mov dword [ebp - 0xbc], 0x6d38535a
mov dword [ebp - 0xb8], 0x77674346
mov dword [ebp - 0xb4], 0x3368435a
mov dword [ebp - 0xb0], 0x7434434e
mov dword [ebp - 0xac], 0x5034584f
mov dword [ebp - 0xa8], 0x79456849
mov dword [ebp - 0xa4], 0x486f5742
mov dword [ebp - 0xa0], 0x63455150
mov dword [ebp - 0x9c], 0x34495443
mov dword [ebp - 0x98], 0x73516a41
mov dword [ebp - 0x94], 0x3177685a
mov dword [ebp - 0x90], 0x6d687741
mov dword [ebp - 0x8c], 0x31554241
mov dword [ebp - 0x88], 0x31387949
mov dword [ebp - 0x84], 0x41305346
mov dword [ebp - 0x80], 0x36566945
mov dword [ebp - 0x7c], 0x6a746a49
mov dword [ebp - 0x78], 0x6a704442
mov dword [ebp - 0x74], 0x79387a4e
mov dword [ebp - 0x70], 0x516b424b
mov dword [ebp - 0x6c], 0x3259675a
mov dword [ebp - 0x68], 0x31455144
mov dword [ebp - 0x64], 0x6d675159
mov dword [ebp - 0x60], 0x37304359
mov dword [ebp - 0x5c], 0x6977794d
mov dword [ebp - 0x58], 0x33646a45
mov dword [ebp - 0x54], 0x62454749
mov dword [ebp - 0x50], 0x6c305348
mov dword [ebp - 0x4c], 0x6d73774b
mov dword [ebp - 0x48], 0x51677a63
mov dword [ebp - 0x44], 0x34417961
mov dword [ebp - 0x40], 0x4c634246
mov dword [ebp - 0x3c], 0x6d30424d
mov dword [ebp - 0x38], 0x68686a4d
mov dword [ebp - 0x34], 0x686b7842
mov dword [ebp - 0x30], 0x49347748
mov dword [ebp - 0x2c], 0x52556a5a
mov dword [ebp - 0x28], 0x62384365
mov dword [ebp - 0x24], 0x4d637941
mov dword [ebp - 0x20], 0x716b4741
mov dword [ebp - 0x1c], 0x68745149
mov dword [ebp - 0x18], 0x4173534a
mov dword [ebp - 0x14], 0x2b454741
mov dword [ebp - 0x10], 0x41736e45
mov dword [ebp - 0xc], 0x4a434141
push eax
push 0
mov dword [ecx], 0
mov dword [ecx + 4], 0
mov dword [ecx + 8], 0
call fcn.08405280
lea eax, [ebp - 0x154]
push eax
call fcn.0844ba20
add esp, 0x10
mov ecx, dword [eax]
mov eax, dword [eax + 4]
sub eax, ecx
sar eax, 1
je 0x8472633
push ecx
push ebx
call dword [sym.imp.ADVAPI32.dll_RegDeleteValueW]
mov eax, dword [ebp - 0x154]
test eax, eax
je 0x84725f1
push eax
call fcn.0849b460
add esp, 4
push 0
call fcn.08478220
mov esi, eax
test ebx, ebx
je 0x8472609
push ebx
mov ebx, dword [sym.imp.ADVAPI32.dll_RegCloseKey]
call ebx
jmp 0x847260f
mov ebx, dword [sym.imp.ADVAPI32.dll_RegCloseKey]
test edi, edi
je 0x8472616
push edi
call ebx
mov ecx, dword [ebp - 4]
mov eax, esi
pop edi
pop esi
xor ecx, ebp
pop ebx
call fcn.0849cd1e
mov esp, ebp
pop ebp
ret
push str.invalid_vector_T__subscript
call fcn.0847ecf2
push str.invalid_vector_T__subscript
call fcn.0847ecf2
int3