Function at 0x434590
Capabilities:
Set registry value

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x14
push ebx
push esi
push edi
push 0xa
pop esi
mov ebx, ecx
push esi
mov dword [ebp - 0x10], ebx
call fcn.00405e3a
sub eax, 4
pop ecx
je 0x434904
sub eax, 4
je 0x4348ee
dec eax
je 0x4348d0
and dword [ebp - 8], 0
push 1
pop esi
cmp dword [ebx + 0x68], esi
jne 0x4345d7
call fcn.0042f3c0
jmp 0x434887
and dword [ebp - 4], 0
lea edi, [ebx + 0xb0]
mov ecx, dword [edi + 4]
test ecx, ecx
jne 0x4345ec
xor eax, eax
jmp 0x4345f4
mov eax, dword [edi + 8]
sub eax, ecx
sar eax, 2
dec eax
cmp dword [ebp - 4], eax
jae 0x434615
push dword [ebp - 4]
mov ecx, edi
call fcn.00435dac
mov eax, dword [eax]
mov ecx, ebx
push eax
mov dword [eax], esi
call fcn.0043259d
inc dword [ebp - 4]
jmp 0x4345e1
push 0
push esi
call fcn.0043407b
pop ecx
pop ecx
push esi
lea ecx, [ebx + 0x128]
call fcn.00442d57
xor edi, edi
push edi
push esi
call fcn.00433566
lea eax, [ebp - 0xc]
push edi
push eax
push esi
mov dword [ebp - 0xc], edi
call fcn.0043204c
mov eax, dword [ebp - 0xc]
add esp, 0x14
cmp eax, edi
je 0x434653
cmp eax, esi
je 0x434653
mov dword [ebp - 8], eax
call fcn.0040c647
test eax, eax
je 0x434665
call fcn.0040c6a1
test eax, eax
je 0x4346c9
call fcn.0040bd94
test eax, eax
jne 0x4346c9
lea eax, [ebp - 4]
push edi
push eax
lea eax, [ebp - 0x14]
push eax
push esi
mov dword [ebp - 4], edi
call fcn.00431d1b
mov eax, dword [ebp - 4]
add esp, 0x10
cmp eax, edi
je 0x434691
cmp eax, esi
je 0x434691
mov dword [ebp - 8], eax
lea eax, [ebp - 4]
push edi
push eax
push esi
call fcn.00431f68
mov eax, dword [ebp - 4]
add esp, 0xc
cmp eax, edi
je 0x4346ad
cmp eax, esi
je 0x4346ad
mov dword [ebp - 8], eax
lea eax, [ebp - 4]
push edi
push eax
push esi
call fcn.00433dfa
mov eax, dword [ebp - 4]
add esp, 0xc
cmp eax, edi
je 0x4346c9
cmp eax, esi
je 0x4346c9
mov dword [ebp - 8], eax
call fcn.0040c647
test eax, eax
je 0x4346df
call fcn.0040c6a1
test eax, eax
je 0x434778
call fcn.0040bd94
test eax, eax
jne 0x434778
lea eax, [ebp - 4]
push 4
push eax
push 4
mov ebx, str.SOFTWARE360Safe_safemon
push 0x471680
mov edi, 0x80000002
mov dword [ebp - 4], esi
mov esi, dword [0x464444]
push ebx
push edi
call esi
lea eax, [ebp - 4]
push 4
push eax
push 4
push str.IMEPRO
push ebx
push edi
mov dword [ebp - 4], 1
call esi
lea eax, [ebp - 4]
push 4
push eax
push 4
push 0x471a58
push ebx
push edi
mov dword [ebp - 4], 1
call esi
lea eax, [ebp - 4]
push 4
push eax
push 4
push str.DefaultBrowserLock
push ebx
push edi
mov dword [ebp - 4], 1
call esi
lea eax, [ebp - 4]
push 4
push eax
push 4
push 0x471b60
push ebx
push edi
mov dword [ebp - 4], 1
call esi
mov ebx, dword [ebp - 0x10]
push 1
pop esi
xor edi, edi
push edi
lea edi, [ebx + 0xb0]
mov ecx, edi
call fcn.00435dac
mov eax, dword [eax]
mov dword [ebp - 4], eax
call fcn.00405c1a
cmp eax, esi
je 0x4347a2
mov eax, dword [ebp - 4]
mov ecx, ebx
push eax
and dword [eax], 0
call fcn.0043259d
push esi
mov ecx, edi
call fcn.00435dac
mov eax, dword [eax]
mov dword [ebp - 4], eax
call fcn.00406130
cmp eax, esi
je 0x4347c6
mov eax, dword [ebp - 4]
mov ecx, ebx
push eax
and dword [eax], 0
call fcn.0043259d
push 2
mov ecx, edi
call fcn.00435dac
mov eax, dword [eax]
mov dword [ebp - 4], eax
call fcn.0040aeb1
cmp eax, esi
je 0x4347eb
mov eax, dword [ebp - 4]
mov ecx, ebx
push eax
and dword [eax], 0
call fcn.0043259d
call fcn.0040c647
test eax, eax
je 0x4347fd
call fcn.0040c6a1
test eax, eax
je 0x434822
push 3
mov ecx, edi
call fcn.00435dac
mov eax, dword [eax]
mov dword [ebp - 4], eax
call fcn.0043182b
cmp eax, esi
je 0x434822
mov eax, dword [ebp - 4]
mov ecx, ebx
push eax
and dword [eax], 0
call fcn.0043259d
push 6
mov ecx, edi
call fcn.00435dac
mov eax, dword [eax]
mov ecx, ebx
mov dword [ebp - 4], eax
call fcn.00435b03
test eax, eax
jne 0x434852
push eax
push eax
call fcn.00433566
mov eax, dword [ebp - 4]
pop ecx
pop ecx
and dword [eax], 0
push eax
mov ecx, ebx
call fcn.0043259d
mov ecx, ebx
call fcn.00434243
call fcn.0040c647
test eax, eax
je 0x43486b
call fcn.0040c6a1
test eax, eax
je 0x434874
call fcn.0040bd94
test eax, eax
je 0x434891
push esi
mov ecx, edi
call fcn.00435dac
mov eax, dword [eax]
cmp dword [eax], 0
je 0x434923
push 0x475800
push esi
push 0xa
jmp 0x4348e4
xor ebx, ebx
mov ecx, dword [edi + 4]
test ecx, ecx
jne 0x43489e
xor eax, eax
jmp 0x4348a6
mov eax, dword [edi + 8]
sub eax, ecx
sar eax, 2
dec eax
cmp ebx, eax
jae 0x434887
push ebx
mov ecx, edi
call fcn.00435dac
mov eax, dword [eax]
cmp dword [eax], 0
jne 0x4348bf
cmp ebx, 6
jne 0x4348c2
inc ebx
jmp 0x434893
push 0
push dword [ebp - 8]
push 0xa
call fcn.0043225f
jmp 0x4348e9
push 0x4757f8
call fcn.00406e4c
mov dword [esp], 0x4757dc
push 1
push esi
call fcn.0040d2e2
add esp, 0xc
jmp 0x434923
push 0x4757f8
push 0x471978
call fcn.00406f30
push 0x4757c4
jmp 0x434918
push 0x4757f8
push 0x475098
call fcn.00406f30
push str.NOCgP
push 1
push esi
call fcn.0040d2e2
add esp, 0x14
pop edi
pop esi
xor eax, eax
pop ebx
leave
ret 0x10