Function at 0x433b5b
Capabilities:
Set registry value

Disassembly:
push 0x10
mov eax, 0x460422
call fcn.0045cea5
mov edi, ecx
push str.CScannerApp::NortonProductUpsell
lea ecx, [ebp - 0x18]
call fcn.00407111
xor ebx, ebx
mov dword [ebp - 4], ebx
mov byte [ebp - 0xd], bl
mov dword [ebp - 0x14], ebx
lea eax, [ebp - 0x14]
push eax
mov ecx, edi
mov byte [ebp - 4], 1
call fcn.004337e6
test al, al
jne 0x433bae
lea ecx, [ebp - 0x14]
call fcn.00402e14
lea ecx, [ebp - 0x18]
call fcn.00407157
mov al, bl
call fcn.0045cf7d
ret 4
mov eax, dword [ebp + 8]
dec eax
je 0x433d35
dec eax
je 0x433ca3
dec eax
je 0x433c4a
dec eax
jne 0x433de1
lea eax, [ebp + 8]
push eax
mov esi, str.UpsellDone
push esi
lea ecx, [ebp - 0x14]
mov dword [ebp + 8], ebx
call fcn.0041ed51
test eax, eax
jne 0x433de1
cmp dword [ebp + 8], ebx
je 0x433de1
push 4
lea eax, [ebp - 0x1c]
push eax
push 4
push ebx
push esi
push dword [ebp - 0x14]
mov dword [ebp + 8], ebx
mov dword [ebp - 0x1c], ebx
call dword [sym.imp.ADVAPI32.dll_RegSetValueExW]
test eax, eax
je 0x433ddd
mov eax, dword [0x488018]
cmp eax, 0x488018
je 0x433de1
test byte [eax + 0x1c], 1
je 0x433de1
cmp byte [eax + 0x19], 2
jb 0x433de1
push dword [ebp + 8]
push 0x46e4ec
push 0xae
jmp 0x433d9d
push 4
lea eax, [ebp + 8]
push eax
push 4
push ebx
push str.UpsellDone
push dword [ebp - 0x14]
xor esi, esi
inc esi
mov dword [ebp + 8], esi
call dword [sym.imp.ADVAPI32.dll_RegSetValueExW]
test eax, eax
je 0x433ddd
mov eax, dword [0x488018]
cmp eax, 0x488018
je 0x433de1
test byte [eax + 0x1c], 1
je 0x433de1
cmp byte [eax + 0x19], 2
jb 0x433de1
push esi
push 0x46e4ec
push 0xad
jmp 0x433d9d
lea eax, [ebp + 8]
push eax
push str.UpsellDone
lea ecx, [ebp - 0x14]
mov dword [ebp + 8], ebx
call fcn.0041ed51
test eax, eax
jne 0x433cf4
cmp dword [ebp + 8], ebx
je 0x433ddd
mov eax, dword [0x488018]
cmp eax, 0x488018
je 0x433de1
test byte [eax + 0x1c], 1
je 0x433de1
cmp byte [eax + 0x19], 4
jb 0x433de1
push 0x46e4ec
push 0xab
jmp 0x433d22
mov eax, dword [0x488018]
cmp eax, 0x488018
je 0x433de1
test byte [eax + 0x1c], 1
je 0x433de1
cmp byte [eax + 0x19], 2
jb 0x433de1
push 0x46e4ec
push 0xac
push dword [eax + 0x14]
push dword [eax + 0x10]
call fcn.00406feb
add esp, 0x10
jmp 0x433de1
lea eax, [ebp + 8]
push eax
mov esi, str.UpsellDone
push esi
lea ecx, [ebp - 0x14]
mov dword [ebp + 8], ebx
call fcn.0041ed51
test eax, eax
je 0x433dad
mov ecx, edi
call fcn.0042b5c4
neg al
push 4
sbb eax, eax
neg eax
mov dword [ebp + 8], eax
mov dword [ebp - 0x1c], eax
lea eax, [ebp - 0x1c]
push eax
push 4
push ebx
push esi
push dword [ebp - 0x14]
call dword [sym.imp.ADVAPI32.dll_RegSetValueExW]
test eax, eax
je 0x433ddd
mov eax, dword [0x488018]
cmp eax, 0x488018
je 0x433de1
test byte [eax + 0x1c], 1
je 0x433de1
cmp byte [eax + 0x19], 2
jb 0x433de1
push dword [ebp + 8]
push 0x46e4ec
push 0xa9
push dword [eax + 0x14]
push dword [eax + 0x10]
call fcn.004213e2
add esp, 0x14
jmp 0x433de1
mov eax, dword [0x488018]
cmp eax, 0x488018
je 0x433ddd
test byte [eax + 0x1c], 1
je 0x433ddd
cmp byte [eax + 0x19], 4
jb 0x433ddd
push 0x46e4ec
push 0xaa
push dword [eax + 0x14]
push dword [eax + 0x10]
call fcn.00406feb
add esp, 0x10
mov byte [ebp - 0xd], 1
lea ecx, [ebp - 0x14]
call fcn.00402e14
mov bl, byte [ebp - 0xd]
jmp 0x433b94