Function at 0x4330d2
Capabilities:
Gather softx-ftp information
Query or enumerate registry value

Disassembly:
push ebp
mov ebp, esp
mov eax, 0x2cc4
call fcn.00612c90
mov eax, dword [0x6ffe74]
xor eax, ebp
mov dword [ebp - 4], eax
push ebx
push esi
push edi
push 6
mov dword [ebp - 0x2cbc], ecx
lea edi, [ebp - 0x198]
pop ecx
mov esi, str.SoftwareFTPClientSites
lea eax, [ebp - 0x17f]
rep movsd dword es:[edi], dword [esi]
push 0xaf
push 0
push eax
movsb byte es:[edi], byte [esi]
call fcn.006390b0
add esp, 0xc
lea edi, [ebp - 0xd0]
mov esi, str.SoftwareSoftX.orgFTPClientSites
lea eax, [ebp - 0xad]
push 8
pop ecx
rep movsd dword es:[edi], dword [esi]
push 0xa5
push 0
push eax
movsw word es:[edi], word [esi]
movsb byte es:[edi], byte [esi]
call fcn.006390b0
mov ebx, dword [sym.imp.ADVAPI32.dll_RegEnumValueA]
lea edi, [ebp - 0x198]
add esp, 0xc
mov dword [ebp - 0x2cb8], edi
mov dword [ebp - 0x2cb4], 2
lea eax, [ebp - 0x2cb0]
push eax
push 0x20019
push 0
push edi
push SysReAllocString
call dword [sym.imp.ADVAPI32.dll_RegOpenKeyExA]
test eax, eax
jne 0x43323f
xor ecx, ecx
mov dword [ebp - 0x2cac], 0x3e8
push ecx
push ecx
push ecx
push ecx
lea eax, [ebp - 0x2cac]
mov esi, ecx
push eax
lea eax, [ebp - 0x598]
push eax
push ecx
push dword [ebp - 0x2cb0]
call ebx
cmp eax, 0x103
je 0x43323f
mov edi, dword [ebp - 0x2cbc]
test eax, eax
jne 0x433239
lea eax, [ebp - 0x2cac]
mov dword [ebp - 0x2cac], 0x2710
push eax
lea eax, [ebp - 0x2ca8]
push eax
lea eax, [ebp - 0x2cc0]
push eax
push 0
lea eax, [ebp - 0x598]
push eax
push dword [ebp - 0x2cb0]
call dword [sym.imp.ADVAPI32.dll_RegQueryValueExA]
test eax, eax
jne 0x43320a
push dword [ebp - 0x2cac]
lea eax, [ebp - 0x2ca8]
mov ecx, edi
push eax
call fcn.00432f9d
xor eax, eax
mov dword [ebp - 0x2cac], 0x3e8
push eax
push eax
push eax
push eax
lea eax, [ebp - 0x2cac]
inc esi
push eax
lea eax, [ebp - 0x598]
push eax
push esi
push dword [ebp - 0x2cb0]
call ebx
cmp eax, 0x103
jne 0x4331ba
mov edi, dword [ebp - 0x2cb8]
add edi, 0xc8
sub dword [ebp - 0x2cb4], 1
mov dword [ebp - 0x2cb8], edi
jne 0x43315e
push dword [ebp - 0x2cb0]
mov ebx, dword [sym.imp.ADVAPI32.dll_RegCloseKey]
call ebx
lea esi, [ebp - 0x198]
push 2
mov dword [ebp - 0x2cb4], esi
pop ebx
lea eax, [ebp - 0x2cb0]
push eax
push 0x20019
push 0
push esi
push reloc.OLEAUT32.dll_SysReAllocString
call dword [sym.imp.ADVAPI32.dll_RegOpenKeyExA]
test eax, eax
jne 0x433366
xor ecx, ecx
mov dword [ebp - 0x2cac], 0x3e8
push ecx
push ecx
push ecx
push ecx
lea eax, [ebp - 0x2cac]
mov edi, ecx
push eax
lea eax, [ebp - 0x598]
push eax
push ecx
push dword [ebp - 0x2cb0]
call dword [sym.imp.ADVAPI32.dll_RegEnumValueA]
cmp eax, 0x103
je 0x433366
mov esi, dword [ebp - 0x2cbc]
test eax, eax
jne 0x433360
lea eax, [ebp - 0x2cac]
mov dword [ebp - 0x2cac], 0x2710
push eax
lea eax, [ebp - 0x2ca8]
push eax
lea eax, [ebp - 0x2cc0]
push eax
push 0
lea eax, [ebp - 0x598]
push eax
push dword [ebp - 0x2cb0]
call dword [sym.imp.ADVAPI32.dll_RegQueryValueExA]
test eax, eax
jne 0x433329
push dword [ebp - 0x2cac]
lea eax, [ebp - 0x2ca8]
mov ecx, esi
push eax
call fcn.00432f9d
xor eax, eax
mov dword [ebp - 0x2cac], 0x3e8
push eax
push eax
push eax
push eax
lea eax, [ebp - 0x2cac]
inc edi
push eax
lea eax, [ebp - 0x598]
push eax
push edi
push dword [ebp - 0x2cb0]
call dword [sym.imp.ADVAPI32.dll_RegEnumValueA]
cmp eax, 0x103
jne 0x4332d5
mov esi, dword [ebp - 0x2cb4]
add esi, 0xc8
mov dword [ebp - 0x2cb4], esi
sub ebx, 1
jne 0x433275
push dword [ebp - 0x2cb0]
mov ebx, dword [sym.imp.ADVAPI32.dll_RegCloseKey]
call ebx
mov ecx, dword [ebp - 4]
xor eax, eax
pop edi
pop esi
xor ecx, ebp
inc eax
pop ebx
call fcn.006122f0
leave
ret