0042BE2C CC INT3
0042BE2D CC INT3
0042BE2E CC INT3
0042BE2F CC INT3
0042BE30 . 6A FF PUSH -1
0042BE32 . 68 3A144E00 PUSH 4E143A ; SE handler installation
0042BE37 . 64:A1 0000000>MOV EAX,DWORD PTR FS:[0]
0042BE3D . 50 PUSH EAX
0042BE3E . 64:8925 00000>MOV DWORD PTR FS:[0],ESP
0042BE45 . 81EC 18050000 SUB ESP,518
0042BE4B . 53 PUSH EBX
0042BE4C . 56 PUSH ESI
0042BE4D . 6A FF PUSH -1
0042BE4F . 8BF1 MOV ESI,ECX
0042BE51 . 68 DB0A4F00 PUSH 4F0ADB
0042BE56 . 8D4C24 20 LEA ECX,DWORD PTR SS:[ESP+20]
0042BE5A . E8 41DB0400 CALL 004799A0 ; Registry.004799A0
0042BE5F . C78424 280500>MOV DWORD PTR SS:[ESP+528],0
0042BE6A . 6A FF PUSH -1
0042BE6C . 68 DB0A4F00 PUSH 4F0ADB
0042BE71 . 8D4C24 2C LEA ECX,DWORD PTR SS:[ESP+2C]
0042BE75 . E8 26DB0400 CALL 004799A0 ; Registry.004799A0
0042BE7A . C68424 280500>MOV BYTE PTR SS:[ESP+528],1
0042BE82 . 8D4C24 54 LEA ECX,DWORD PTR SS:[ESP+54]
0042BE86 . E8 A5CD0400 CALL 00478C30 ; Registry.00478C30
0042BE8B . C68424 280500>MOV BYTE PTR SS:[ESP+528],2
0042BE93 . 8D4C24 3C LEA ECX,DWORD PTR SS:[ESP+3C]
0042BE97 . E8 94CD0400 CALL 00478C30 ; Registry.00478C30
0042BE9C . C68424 280500>MOV BYTE PTR SS:[ESP+528],3
0042BEA4 . 8D4C24 30 LEA ECX,DWORD PTR SS:[ESP+30]
0042BEA8 . E8 83CD0400 CALL 00478C30 ; Registry.00478C30
0042BEAD . C68424 280500>MOV BYTE PTR SS:[ESP+528],4
0042BEB5 . 8D4C24 48 LEA ECX,DWORD PTR SS:[ESP+48]
0042BEB9 . E8 72CD0400 CALL 00478C30 ; Registry.00478C30
0042BEBE . C68424 280500>MOV BYTE PTR SS:[ESP+528],5
0042BEC6 . 8B86 38060000 MOV EAX,DWORD PTR DS:[ESI+638]
0042BECC . 50 PUSH EAX
0042BECD . 8D4C24 1C LEA ECX,DWORD PTR SS:[ESP+1C]
0042BED1 . E8 EAD00400 CALL 00478FC0 ; Registry.00478FC0
0042BED6 . 8B8E 88060000 MOV ECX,DWORD PTR DS:[ESI+688]
0042BEDC . 51 PUSH ECX
0042BEDD . 8D4C24 28 LEA ECX,DWORD PTR SS:[ESP+28]
0042BEE1 . E8 DAD00400 CALL 00478FC0 ; Registry.00478FC0
0042BEE6 . 8B96 D8060000 MOV EDX,DWORD PTR DS:[ESI+6D8]
0042BEEC . 52 PUSH EDX
0042BEED . 8D4C24 58 LEA ECX,DWORD PTR SS:[ESP+58]
0042BEF1 . E8 CAD00400 CALL 00478FC0 ; Registry.00478FC0
0042BEF6 . 8B86 28070000 MOV EAX,DWORD PTR DS:[ESI+728]
0042BEFC . 50 PUSH EAX
0042BEFD . 8D4C24 40 LEA ECX,DWORD PTR SS:[ESP+40]
0042BF01 . E8 BAD00400 CALL 00478FC0 ; Registry.00478FC0
0042BF06 . 8B8E 78070000 MOV ECX,DWORD PTR DS:[ESI+778]
0042BF0C . 51 PUSH ECX
0042BF0D . 8D4C24 34 LEA ECX,DWORD PTR SS:[ESP+34]
0042BF11 . E8 AAD00400 CALL 00478FC0 ; Registry.00478FC0
0042BF16 . 8B96 C8070000 MOV EDX,DWORD PTR DS:[ESI+7C8]
0042BF1C . 52 PUSH EDX
0042BF1D . 8D4C24 4C LEA ECX,DWORD PTR SS:[ESP+4C]
0042BF21 . E8 9AD00400 CALL 00478FC0 ; Registry.00478FC0
0042BF26 . 8D4C24 18 LEA ECX,DWORD PTR SS:[ESP+18]
0042BF2A . E8 E1D00400 CALL 00479010 ; Registry.00479010
0042BF2F . 8D4C24 24 LEA ECX,DWORD PTR SS:[ESP+24]
0042BF33 . E8 D8D00400 CALL 00479010 ; Registry.00479010
0042BF38 . 6A FF PUSH -1
0042BF3A . 68 DB0A4F00 PUSH 4F0ADB
0042BF3F . 8D4C24 14 LEA ECX,DWORD PTR SS:[ESP+14]
0042BF43 . E8 58DA0400 CALL 004799A0 ; Registry.004799A0
0042BF48 . B3 06 MOV BL,6
0042BF4A . 889C24 280500>MOV BYTE PTR SS:[ESP+528],BL
0042BF51 . 8D4424 54 LEA EAX,DWORD PTR SS:[ESP+54]
0042BF55 . 50 PUSH EAX
0042BF56 . 8D4C24 10 LEA ECX,DWORD PTR SS:[ESP+10]
0042BF5A . E8 41D80400 CALL 004797A0 ; Registry.004797A0
0042BF5F . 68 B8354F00 PUSH 4F35B8
0042BF64 . 8D4C24 10 LEA ECX,DWORD PTR SS:[ESP+10]
0042BF68 . E8 A3D80400 CALL 00479810 ; Registry.00479810
0042BF6D . 8D4C24 3C LEA ECX,DWORD PTR SS:[ESP+3C]
0042BF71 . 51 PUSH ECX
0042BF72 . 8D4C24 10 LEA ECX,DWORD PTR SS:[ESP+10]
0042BF76 . E8 25D80400 CALL 004797A0 ; Registry.004797A0
0042BF7B . 68 B8354F00 PUSH 4F35B8
0042BF80 . 8D4C24 10 LEA ECX,DWORD PTR SS:[ESP+10]
0042BF84 . E8 87D80400 CALL 00479810 ; Registry.00479810
0042BF89 . 8D5424 30 LEA EDX,DWORD PTR SS:[ESP+30]
0042BF8D . 52 PUSH EDX
0042BF8E . 8D4C24 10 LEA ECX,DWORD PTR SS:[ESP+10]
0042BF92 . E8 09D80400 CALL 004797A0 ; Registry.004797A0
0042BF97 . 68 B8354F00 PUSH 4F35B8
0042BF9C . 8D4C24 10 LEA ECX,DWORD PTR SS:[ESP+10]
0042BFA0 . E8 6BD80400 CALL 00479810 ; Registry.00479810
0042BFA5 . 8D4424 48 LEA EAX,DWORD PTR SS:[ESP+48]
0042BFA9 . 50 PUSH EAX
0042BFAA . 8D4C24 10 LEA ECX,DWORD PTR SS:[ESP+10]
0042BFAE . E8 EDD70400 CALL 004797A0 ; Registry.004797A0
0042BFB3 . 8D4C24 0C LEA ECX,DWORD PTR SS:[ESP+C]
0042BFB7 . E8 54D00400 CALL 00479010 ; Registry.00479010
0042BFBC . 83EC 0C SUB ESP,0C
0042BFBF . 8D5424 18 LEA EDX,DWORD PTR SS:[ESP+18]
0042BFC3 . 8BCC MOV ECX,ESP
0042BFC5 . 896424 6C MOV DWORD PTR SS:[ESP+6C],ESP
0042BFC9 . 52 PUSH EDX
0042BFCA . E8 81CD0400 CALL 00478D50 ; Registry.00478D50
0042BFCF . C68424 340500>MOV BYTE PTR SS:[ESP+534],7
0042BFD7 . 83EC 0C SUB ESP,0C
0042BFDA . 8D4424 3C LEA EAX,DWORD PTR SS:[ESP+3C]
0042BFDE . 8BCC MOV ECX,ESP
0042BFE0 . 896424 20 MOV DWORD PTR SS:[ESP+20],ESP
0042BFE4 . 50 PUSH EAX
0042BFE5 . E8 66CD0400 CALL 00478D50 ; Registry.00478D50
0042BFEA . C68424 400500>MOV BYTE PTR SS:[ESP+540],8
0042BFF2 . 83EC 0C SUB ESP,0C
0042BFF5 . 8D5424 3C LEA EDX,DWORD PTR SS:[ESP+3C]
0042BFF9 . 8BCC MOV ECX,ESP
0042BFFB . 896424 2C MOV DWORD PTR SS:[ESP+2C],ESP
0042BFFF . 52 PUSH EDX
0042C000 . E8 4BCD0400 CALL 00478D50 ; Registry.00478D50
0042C005 . 889C24 4C0500>MOV BYTE PTR SS:[ESP+54C],BL ; |
0042C00C . 8BCE MOV ECX,ESI ; |
[COLOR=Blue]0042C00E [/COLOR]. E8 2D080000 CALL 0042C840 ; \Registry.0042C840
0042C013 . 83EC 0C SUB ESP,0C
0042C016 . 85C0 TEST EAX,EAX ; |
0042C018 . 896424 14 MOV DWORD PTR SS:[ESP+14],ESP ; |
0042C01C . 75 3C JNZ SHORT 0042C05A ; |Registry.0042C05A
0042C01E . 8BC4 MOV EAX,ESP ; |
0042C020 . 68 20574F00 PUSH 4F5720 ; |/Arg4 = 004F5720 support@netgate.sk."
0042C025 . 68 0C574F00 PUSH 4F570C ; ||Arg3 = 004F570C ASCII "DL_N_101_261"
0042C02A . 68 A0324F00 PUSH 4F32A0 ; ||Arg2 = 004F32A0 ASCII "Language"
0042C02F . 50 PUSH EAX ; ||Arg1
0042C030 . 8D8E C8080000 LEA ECX,DWORD PTR DS:[ESI+8C8] ; ||
0042C036 . E8 F524FEFF CALL 0040E530 ; |\Registry.0040E530
0042C03B . 889C24 340500>MOV BYTE PTR SS:[ESP+534],BL ; |
0042C042 . 8D4C24 70 LEA ECX,DWORD PTR SS:[ESP+70] ; |
0042C046 . E8 15040000 CALL 0042C460 ; \Registry.0042C460
0042C04B . C68424 280500>MOV BYTE PTR SS:[ESP+528],0B
0042C053 . 68 BE000000 PUSH 0BE
0042C058 . EB 3A JMP SHORT 0042C094 ; Registry.0042C094
0042C05A > 8BCC MOV ECX,ESP ; |
0042C05C . 68 C0564F00 PUSH 4F56C0 ; |/Arg4 = 004F56C0 ASCII "Your version of Netgate Registry Cleaner has been successfully registered."
0042C061 . 68 B0564F00 PUSH 4F56B0 ; ||Arg3 = 004F56B0 ASCII "DL_N_101_262"
0042C066 . 68 A0324F00 PUSH 4F32A0 ; ||Arg2 = 004F32A0 ASCII "Language"
0042C06B . 51 PUSH ECX ; ||Arg1
0042C06C . 8D8E C8080000 LEA ECX,DWORD PTR DS:[ESI+8C8] ; ||
0042C072 . E8 B924FEFF CALL 0040E530 ; |\Registry.0040E530
0042C077 . 889C24 340500>MOV BYTE PTR SS:[ESP+534],BL ; |
0042C07E . 8D4C24 70 LEA ECX,DWORD PTR SS:[ESP+70] ; |
0042C082 . E8 D9030000 CALL 0042C460 ; \Registry.0042C460
0042C087 . C68424 280500>MOV BYTE PTR SS:[ESP+528],0D
0042C08F . 68 C7000000 PUSH 0C7
0042C094 > 8D4C24 68 LEA ECX,DWORD PTR SS:[ESP+68]
0042C098 . E8 435E0500 CALL 00481EE0 ; Registry.00481EE0
0042C09D . 889C24 280500>MOV BYTE PTR SS:[ESP+528],BL
0042C0A4 . 8D4C24 64 LEA ECX,DWORD PTR SS:[ESP+64]
0042C0A8 . E8 A3000000 CALL 0042C150 ; Registry.0042C150
0042C0AD . C68424 280500>MOV BYTE PTR SS:[ESP+528],5
0042C0B5 . 8D4C24 0C LEA ECX,DWORD PTR SS:[ESP+C]
0042C0B9 . E8 C2CC0400 CALL 00478D80 ; Registry.00478D80
0042C0BE . C68424 280500>MOV BYTE PTR SS:[ESP+528],4
0042C0C6 . 8D4C24 48 LEA ECX,DWORD PTR SS:[ESP+48]
0042C0CA . E8 B1CC0400 CALL 00478D80 ; Registry.00478D80
0042C0CF . C68424 280500>MOV BYTE PTR SS:[ESP+528],3
0042C0D7 . 8D4C24 30 LEA ECX,DWORD PTR SS:[ESP+30]
0042C0DB . E8 A0CC0400 CALL 00478D80 ; Registry.00478D80
0042C0E0 . C68424 280500>MOV BYTE PTR SS:[ESP+528],2
0042C0E8 . 8D4C24 3C LEA ECX,DWORD PTR SS:[ESP+3C]
0042C0EC . E8 8FCC0400 CALL 00478D80 ; Registry.00478D80
0042C0F1 . C68424 280500>MOV BYTE PTR SS:[ESP+528],1
0042C0F9 . 8D4C24 54 LEA ECX,DWORD PTR SS:[ESP+54]
0042C0FD . E8 7ECC0400 CALL 00478D80 ; Registry.00478D80
0042C102 . C68424 280500>MOV BYTE PTR SS:[ESP+528],0
0042C10A . 8D4C24 24 LEA ECX,DWORD PTR SS:[ESP+24]
0042C10E . E8 6DCC0400 CALL 00478D80 ; Registry.00478D80
0042C113 . C78424 280500>MOV DWORD PTR SS:[ESP+528],-1
0042C11E . 8D4C24 18 LEA ECX,DWORD PTR SS:[ESP+18]
0042C122 . E8 59CC0400 CALL 00478D80 ; Registry.00478D80
0042C127 . 8B8C24 200500>MOV ECX,DWORD PTR SS:[ESP+520]
0042C12E . 5E POP ESI
0042C12F . B8 01000000 MOV EAX,1
0042C134 . 64:890D 00000>MOV DWORD PTR FS:[0],ECX
0042C13B . 5B POP EBX
0042C13C . 81C4 24050000 ADD ESP,524
0042C142 . C3 RETN