Function at 0x433270
Capabilities:
Set registry value

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x4cad48
mov eax, dword fs:[0]
push eax
sub esp, 0x28
push ebx
push esi
push edi
mov eax, dword [0x524ee0]
xor eax, ebp
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov dword [ebp - 4], 2
call fcn.004338b0
test al, al
jne 0x433300
movd xmm4, dword [0x526340]
movsd xmm3, qword [0x4e1680]
movsd xmm6, qword [0x4e1688]
movsd xmm5, qword [0x4e1678]
xorps xmm2, xmm2
cvtdq2pd xmm4, xmm4
nop
addsd xmm2, xmm3
movapd xmm0, xmm2
mulsd xmm0, xmm2
comisd xmm0, xmm4
jbe 0x4332ea
subsd xmm2, xmm3
divsd xmm3, xmm6
movapd xmm1, xmm2
mulsd xmm1, xmm2
movapd xmm0, xmm4
subsd xmm0, xmm1
comisd xmm0, xmm5
ja 0x4332d0
mov eax, dword [0x524ab0]
xor ebx, ebx
cmp byte [0x526b68], bl
mov ecx, 0x524ab0
sete bl
add ebx, 0x80000001
call dword [eax + 0xc]
add eax, 0x10
mov dword [ebp - 0x18], eax
or edi, 0xffffffff
cmp byte [ebp + 0x14], 0
mov byte [ebp - 4], 3
je 0x433394
cmp byte [0x52024c], 0
jne 0x433394
mov eax, dword [0x526ce0]
cmp dword [eax - 0xc], 0
jne 0x43334c
mov ebx, SysReAllocStringLen
jmp 0x433394
push 0x4dfbc0
lea eax, [ebp - 0x14]
push 0x526ce0
push eax
mov ebx, VariantInit
call fcn.0040b6c0
add esp, 0xc
push eax
lea ecx, [ebp - 0x18]
mov byte [ebp - 4], 4
call fcn.00402ab0
mov edx, dword [ebp - 0x14]
add edx, 0xfffffff0
mov byte [ebp - 4], 3
lea eax, [edx + 0xc]
mov ecx, edi
lock xadd dword [eax], ecx
dec ecx
test ecx, ecx
jg 0x433394
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov dword [ebp - 0x34], 0
mov dword [ebp - 0x30], 0
mov dword [ebp - 0x2c], 0
mov eax, dword [0x524ab0]
mov ecx, 0x524ab0
mov byte [ebp - 4], 5
call dword [eax + 0xc]
add eax, 0x10
mov dword [ebp - 0x14], eax
mov eax, str.Software_
mov byte [ebp - 4], 6
test eax, 0xffff0000
jne 0x4333ee
movzx esi, ax
push 0
push esi
call fcn.00403b10
add esp, 8
test eax, eax
je 0x4333fb
push esi
push eax
lea ecx, [ebp - 0x14]
call fcn.004074c0
jmp 0x4333fb
push str.Software_
lea ecx, [ebp - 0x14]
call fcn.0040b3b0
lea eax, [ebp - 0x14]
push eax
lea eax, [ebp - 0x18]
push eax
lea eax, [ebp - 0x28]
push eax
mov byte [ebp - 4], 7
call fcn.0040b600
push 0x526ce4
push eax
lea eax, [ebp - 0x24]
push eax
mov byte [ebp - 4], 8
call fcn.0040b600
push 0x4dfbc0
push eax
lea eax, [ebp - 0x20]
push eax
mov byte [ebp - 4], 9
call fcn.0040b6c0
lea ecx, [ebp + 8]
push ecx
push eax
lea eax, [ebp - 0x1c]
push eax
mov byte [ebp - 4], 0xa
call fcn.0040b600
add esp, 0x30
lea ecx, [ebp - 0x34]
push 0
push 0
push 0x20006
push 0
push 0
push dword [eax]
push ebx
call fcn.004315e0
mov esi, dword [ebp - 0x1c]
add esi, 0xfffffff0
mov ebx, eax
lea ecx, [esi + 0xc]
mov edx, edi
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x433481
mov ecx, dword [esi]
push esi
mov eax, dword [ecx]
call dword [eax + 4]
mov edx, dword [ebp - 0x20]
add edx, 0xfffffff0
mov byte [ebp - 4], 9
lea eax, [edx + 0xc]
mov ecx, edi
lock xadd dword [eax], ecx
dec ecx
test ecx, ecx
jg 0x4334a1
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov edx, dword [ebp - 0x24]
add edx, 0xfffffff0
mov byte [ebp - 4], 8
lea eax, [edx + 0xc]
mov ecx, edi
lock xadd dword [eax], ecx
dec ecx
test ecx, ecx
jg 0x4334c1
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov edx, dword [ebp - 0x28]
add edx, 0xfffffff0
mov byte [ebp - 4], 7
lea eax, [edx + 0xc]
mov ecx, edi
lock xadd dword [eax], ecx
dec ecx
test ecx, ecx
jg 0x4334e1
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov edx, dword [ebp - 0x14]
add edx, 0xfffffff0
mov byte [ebp - 4], 5
lea eax, [edx + 0xc]
mov ecx, edi
lock xadd dword [eax], ecx
dec ecx
test ecx, ecx
jg 0x433501
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
call fcn.00433970
test al, al
jne 0x433510
inc dword [0x526b8c]
mov esi, dword [ebp - 0x34]
test ebx, ebx
mov ebx, dword [sym.imp.ADVAPI32.dll_RegCloseKey]
jne 0x4335c5
mov eax, dword [ebp + 0x10]
xor ecx, ecx
test eax, eax
setne cl
test ecx, ecx
je 0x433577
mov edx, eax
lea ecx, [edx + 2]
mov dword [ebp - 0x14], ecx
mov cx, word [edx]
add edx, 2
test cx, cx
jne 0x433537
sub edx, dword [ebp - 0x14]
sar edx, 1
lea ecx, [edx*2 + 2]
push ecx
push eax
push 1
push 0
push dword [ebp + 0xc]
push esi
call dword [sym.imp.ADVAPI32.dll_RegSetValueExW]
test eax, eax
jne 0x433577
mov ebx, dword [sym.imp.ADVAPI32.dll_RegCloseKey]
test esi, esi
je 0x433571
push esi
call ebx
xor esi, esi
mov byte [ebp - 0xd], 1
jmp 0x4335c9
test esi, esi
je 0x433580
push esi
call ebx
xor esi, esi
mov ecx, dword [0x526340]
lea edx, [ecx + 1]
mov eax, edx
imul eax, ecx
and eax, 0x8000000f
jns 0x43359a
dec eax
or eax, 0xfffffff0
inc eax
cmp eax, 9
jne 0x4335c5
sub ecx, 0
je 0x4335bb
dec ecx
je 0x4335af
mov dword [0x526340], edx
jmp 0x4335c5
mov dword [0x526340], 0
jmp 0x4335c5
mov dword [0x526340], 2
mov byte [ebp - 0xd], 0
test esi, esi
je 0x4335d0
push esi
call ebx
mov edx, dword [ebp - 0x18]
add edx, 0xfffffff0
mov byte [ebp - 4], 2
lea eax, [edx + 0xc]
mov ecx, edi
lock xadd dword [eax], ecx
dec ecx
test ecx, ecx
jg 0x4335f0
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov edx, dword [ebp + 8]
add edx, 0xfffffff0
mov byte [ebp - 4], 1
lea eax, [edx + 0xc]
mov ecx, edi
lock xadd dword [eax], ecx
dec ecx
test ecx, ecx
jg 0x433610
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov edx, dword [ebp + 0xc]
add edx, 0xfffffff0
mov byte [ebp - 4], 0
lea eax, [edx + 0xc]
mov ecx, edi
lock xadd dword [eax], ecx
dec ecx
test ecx, ecx
jg 0x433630
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov esi, dword [ebp + 0x10]
add esi, 0xfffffff0
mov dword [ebp - 4], 0xffffffff
lea eax, [esi + 0xc]
lock xadd dword [eax], edi
dec edi
test edi, edi
jg 0x433651
mov ecx, dword [esi]
push esi
mov edx, dword [ecx]
call dword [edx + 4]
mov al, byte [ebp - 0xd]
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret