Function at 0x475340
Capabilities:
Query or enumerate registry value
Set registry value

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x63efb0
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
sub esp, 0xc
push ebx
push esi
push edi
xor ebx, ebx
mov dword [ebp - 0x10], esp
push ebx
push ebx
push ebx
push ebx
push ebx
mov esi, ecx
push 0x454600
mov dword [ebp - 4], ebx
call fcn.00626cae
push ebx
call fcn.0060b449
mov dword [esi + 0x14e8], eax
mov al, byte [esi + 0x202]
add esp, 4
cmp al, bl
jne 0x475431
mov ecx, esi
call fcn.004742a0
cmp eax, ebx
je 0x4753c0
mov eax, dword [esi + 0x1c]
mov edi, dword [sym.imp.USER32.dll_SetTimer]
push ebx
push 0xea60
push 5
push eax
call edi
cmp eax, ebx
je 0x4753c6
mov byte [esi + 0x202], 1
jmp 0x4753c6
mov edi, dword [sym.imp.USER32.dll_SetTimer]
mov eax, dword [0x6fcafc]
lea ecx, [ebp - 0x18]
lea edx, [ebp - 0x14]
push ecx
push edx
push ebx
push ebx
push str.radxcnt
push eax
mov dword [ebp - 0x14], ebx
mov dword [ebp - 0x18], 4
call dword [sym.imp.ADVAPI32.dll_RegQueryValueExA]
test eax, eax
jne 0x47540e
mov eax, dword [ebp - 0x14]
cmp eax, 0xc
jbe 0x47540e
xor edx, edx
mov ecx, 3
div ecx
test edx, edx
je 0x47540e
mov dword [0x6fcc20], 1
mov edx, dword [ebp - 0x14]
mov eax, dword [0x6fcafc]
inc edx
push 4
mov dword [ebp - 0x14], edx
lea edx, [ebp - 0x14]
push edx
push 4
push ebx
push str.radxcnt
push eax
call dword [sym.imp.ADVAPI32.dll_RegSetValueExA]
jmp 0x475437
mov edi, dword [sym.imp.USER32.dll_SetTimer]
cmp byte [esi + 0x209], bl
jne 0x475463
mov ecx, esi
call fcn.0047ffa0
cmp eax, ebx
je 0x475463
mov ecx, dword [esi + 0x1c]
push ebx
push 0x2710
push 0x11
push ecx
call edi
cmp eax, ebx
je 0x475463
mov byte [esi + 0x209], 1
mov dword [0x6fd094], ebx
mov al, byte [esi + 0x20a]
cmp al, bl
jne 0x475495
call fcn.005315d0
cmp eax, ebx
jne 0x475495
mov edx, dword [esi + 0x1c]
push ebx
push 0x2bf20
push 0x15
push edx
call edi
cmp eax, ebx
je 0x475495
mov byte [esi + 0x20a], 1
cmp byte [esi + 0x214], bl
jne 0x4754b6
mov eax, dword [esi + 0x1c]
push ebx
push 0x124f80
push 0x25
push eax
call edi
cmp eax, ebx
je 0x4754b6
mov byte [esi + 0x214], 1
cmp dword [0x6cdb00], ebx
jne 0x4754fb
mov ecx, esi
call fcn.00474330
cmp eax, ebx
jne 0x4754ec
cmp byte [esi + 0x203], bl
jne 0x4754f3
mov ecx, dword [esi + 0x1c]
push ebx
push 0xea60
push 6
push ecx
call edi
test eax, eax
je 0x4754f3
mov byte [esi + 0x203], 1
jmp 0x4754f3
mov ecx, esi
call fcn.00482710
cmp dword [0x6cdb00], ebx
je 0x475526
cmp byte [esi + 0x207], bl
jne 0x47554f
cmp byte [esi + 0x20e], bl
jne 0x47554f
mov edx, dword [esi + 0x1c]
push ebx
push 0x182b8
push 0x1e
push edx
call edi
test eax, eax
je 0x47554f
mov byte [esi + 0x20e], 1
jmp 0x47554f
cmp dword [0x6fcc20], ebx
je 0x47554f
cmp byte [esi + 0x20f], bl
jne 0x47554f
mov eax, dword [esi + 0x1c]
push ebx
push 0x1d8a8
push 0x1f
push eax
call edi
test eax, eax
je 0x47554f
mov byte [esi + 0x20f], 1
cmp byte [esi + 0x212], bl
jne 0x475570
mov ecx, dword [esi + 0x1c]
push ebx
push 0x36ee8
push 0x22
push ecx
call edi
test eax, eax
je 0x475570
mov byte [esi + 0x212], 1
cmp byte [esi + 0x213], bl
jne 0x475591
mov edx, dword [esi + 0x1c]
push ebx
push 0x3e418
push 0x23
push edx
call edi
test eax, eax
je 0x475591
mov byte [esi + 0x213], 1
mov ecx, dword [ebp - 0xc]
pop edi
pop esi
mov dword fs:[0], ecx
pop ebx
mov esp, ebp
pop ebp
ret