Function at 0x433570
Capabilities:
Set registry value

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x553b9a
mov eax, dword fs:[0]
push eax
sub esp, 0xfc
mov eax, dword [0x5932e0]
xor eax, ebp
mov dword [ebp - 0x10], eax
push esi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
cmp dword [ecx + 0x1c0], 0x10
lea eax, [ecx + 0x1ac]
jb 0x4335b1
mov eax, dword [ecx + 0x1ac]
push 6
push 0x571448
push dword [ecx + 0x1bc]
push eax
call fcn.0042a3f0
add esp, 0x10
test al, al
je 0x433b0c
push 2
push 0x571450
lea ecx, [ebp - 0xbc]
mov dword [ebp - 0xac], 0
mov dword [ebp - 0xa8], 0xf
mov byte [ebp - 0xbc], 0
call fcn.00409ab0
mov dword [ebp - 4], 0
lea ecx, [ebp - 0xa4]
push 8
push 0x571454
mov dword [ebp - 0x94], 0
mov dword [ebp - 0x90], 0xf
mov byte [ebp - 0xa4], 0
call fcn.00409ab0
mov byte [ebp - 4], 1
lea ecx, [ebp - 0x8c]
push 0xb
push 0x571460
mov dword [ebp - 0x7c], 0
mov dword [ebp - 0x78], 0xf
mov byte [ebp - 0x8c], 0
call fcn.00409ab0
mov byte [ebp - 4], 2
lea ecx, [ebp - 0x74]
push 6
push 0x57146c
mov dword [ebp - 0x64], 0
mov dword [ebp - 0x60], 0xf
mov byte [ebp - 0x74], 0
call fcn.00409ab0
mov byte [ebp - 4], 3
lea ecx, [ebp - 0x5c]
push 4
push 0x571474
mov dword [ebp - 0x4c], 0
mov dword [ebp - 0x48], 0xf
mov byte [ebp - 0x5c], 0
call fcn.00409ab0
lea eax, [ebp - 0x74]
mov byte [ebp - 4], 4
push eax
lea edx, [ebp - 0x5c]
lea ecx, [ebp - 0x108]
call fcn.00409da0
lea ecx, [ebp - 0x8c]
mov byte [ebp - 4], 5
push ecx
mov edx, eax
lea ecx, [ebp - 0xf0]
call fcn.00409da0
lea ecx, [ebp - 0xa4]
mov byte [ebp - 4], 6
push ecx
mov edx, eax
lea ecx, [ebp - 0xd8]
call fcn.00409da0
sub esp, 0xc
mov byte [ebp - 4], 7
lea edx, [ebp - 0xbc]
mov ecx, esp
push edx
mov edx, eax
call fcn.00409da0
add esp, 4
mov ecx, 0x80000002
call fcn.004090c0
mov byte [ebp - 4], 6
add esp, 0x18
mov edx, dword [ebp - 0xc4]
mov esi, eax
cmp edx, 0x10
jb 0x433752
mov ecx, dword [ebp - 0xd8]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x433748
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x433b26
push edx
push ecx
call fcn.005150f8
add esp, 8
mov byte [ebp - 4], 5
mov edx, dword [ebp - 0xdc]
mov dword [ebp - 0xc8], 0
mov dword [ebp - 0xc4], 0xf
mov byte [ebp - 0xd8], 0
cmp edx, 0x10
jb 0x4337ab
mov ecx, dword [ebp - 0xf0]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x4337a1
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x433b2b
push edx
push ecx
call fcn.005150f8
add esp, 8
mov byte [ebp - 4], 4
mov edx, dword [ebp - 0xf4]
mov dword [ebp - 0xe0], 0
mov dword [ebp - 0xdc], 0xf
mov byte [ebp - 0xf0], 0
cmp edx, 0x10
jb 0x433804
mov ecx, dword [ebp - 0x108]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x4337fa
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x433b30
push edx
push ecx
call fcn.005150f8
add esp, 8
mov byte [ebp - 4], 3
mov edx, dword [ebp - 0x48]
mov dword [ebp - 0xf8], 0
mov dword [ebp - 0xf4], 0xf
mov byte [ebp - 0x108], 0
cmp edx, 0x10
jb 0x433857
mov ecx, dword [ebp - 0x5c]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x43384d
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x433b35
push edx
push ecx
call fcn.005150f8
add esp, 8
mov byte [ebp - 4], 2
mov edx, dword [ebp - 0x60]
mov dword [ebp - 0x4c], 0
mov dword [ebp - 0x48], 0xf
mov byte [ebp - 0x5c], 0
cmp edx, 0x10
jb 0x4338a1
mov ecx, dword [ebp - 0x74]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x433897
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x433b3a
push edx
push ecx
call fcn.005150f8
add esp, 8
mov byte [ebp - 4], 1
mov edx, dword [ebp - 0x78]
mov dword [ebp - 0x64], 0
mov dword [ebp - 0x60], 0xf
mov byte [ebp - 0x74], 0
cmp edx, 0x10
jb 0x4338ee
mov ecx, dword [ebp - 0x8c]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x4338e4
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x433b3f
push edx
push ecx
call fcn.005150f8
add esp, 8
mov byte [ebp - 4], 0
mov edx, dword [ebp - 0x90]
mov dword [ebp - 0x7c], 0
mov dword [ebp - 0x78], 0xf
mov byte [ebp - 0x8c], 0
cmp edx, 0x10
jb 0x433941
mov ecx, dword [ebp - 0xa4]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x433937
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x433b44
push edx
push ecx
call fcn.005150f8
add esp, 8
mov dword [ebp - 4], 0xffffffff
mov edx, dword [ebp - 0xa8]
mov dword [ebp - 0x94], 0
mov dword [ebp - 0x90], 0xf
mov byte [ebp - 0xa4], 0
cmp edx, 0x10
jb 0x43399d
mov ecx, dword [ebp - 0xbc]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x433993
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x433b49
push edx
push ecx
call fcn.005150f8
add esp, 8
mov dword [ebp - 0xac], 0
mov dword [ebp - 0xa8], 0xf
mov byte [ebp - 0xbc], 0
test esi, esi
je 0x433b0c
push 0x39
push str.https:__go.mail.ru_search_frpsqsearchTermsgp844110
lea ecx, [ebp - 0x2c]
mov dword [ebp - 0x14], 1
mov dword [ebp - 0x1c], 0
mov dword [ebp - 0x18], 0xf
mov byte [ebp - 0x2c], 0
call fcn.00409ab0
mov dword [ebp - 4], 8
lea ecx, [ebp - 0x44]
push 0x1c
push str.DefaultSearchProviderEnabled
mov dword [ebp - 0x34], 0
mov dword [ebp - 0x30], 0xf
mov byte [ebp - 0x44], 0
call fcn.00409ab0
cmp dword [ebp - 0x30], 0x10
lea ecx, [ebp - 0x14]
push 4
push ecx
push 4
lea eax, [ebp - 0x44]
cmovae eax, dword [ebp - 0x44]
push 0
push eax
push esi
call dword [sym.imp.ADVAPI32.dll_RegSetValueExA]
mov edx, dword [ebp - 0x30]
cmp edx, 0x10
jb 0x433a61
mov ecx, dword [ebp - 0x44]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x433a57
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x433b4e
push edx
push ecx
call fcn.005150f8
add esp, 8
push 0x1e
push str.DefaultSearchProviderSearchURL
lea ecx, [ebp - 0x44]
mov dword [ebp - 0x34], 0
mov dword [ebp - 0x30], 0xf
mov byte [ebp - 0x44], 0
call fcn.00409ab0
push dword [ebp - 0x1c]
cmp dword [ebp - 0x18], 0x10
lea ecx, [ebp - 0x2c]
lea eax, [ebp - 0x44]
cmovae ecx, dword [ebp - 0x2c]
cmp dword [ebp - 0x30], 0x10
push ecx
cmovae eax, dword [ebp - 0x44]
push 1
push 0
push eax
push esi
call dword [sym.imp.ADVAPI32.dll_RegSetValueExA]
mov edx, dword [ebp - 0x30]
cmp edx, 0x10
jb 0x433adc
mov ecx, dword [ebp - 0x44]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x433ad2
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x433b53
push edx
push ecx
call fcn.005150f8
add esp, 8
mov edx, dword [ebp - 0x18]
cmp edx, 0x10
jb 0x433b0c
mov ecx, dword [ebp - 0x2c]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x433b02
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x433b58
push edx
push ecx
call fcn.005150f8
add esp, 8
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop esi
mov ecx, dword [ebp - 0x10]
xor ecx, ebp
call fcn.00514e1d
mov esp, ebp
pop ebp
ret
call fcn.00519e03
call fcn.00519e03
call fcn.00519e03
call fcn.00519e03
call fcn.00519e03
call fcn.00519e03
call fcn.00519e03
call fcn.00519e03
call fcn.00519e03
call fcn.00519e03
call fcn.00519e03
int3