Function at 0x43d9a0
Capabilities:
Set registry value

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x4cbdfe
mov eax, dword fs:[0]
push eax
sub esp, 0x1c4
mov eax, dword [0x5036e8]
xor eax, ebp
mov dword [ebp - 0x10], eax
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
cmp dword [0x502294], 0
mov edx, dword [ebp + 8]
mov edi, dword [ebp + 0x10]
mov eax, dword [ebp + 0x18]
mov esi, dword [ebp + 0xc]
mov dword [ebp - 0xe4], edx
mov dword [ebp - 0xf0], edi
mov dword [ebp - 0xec], eax
mov byte [ebp - 0xdd], 0
mov dword [ebp - 0xdc], 0
je 0x43daf8
push str.GetNativeSystemInfo
push 0x4d3574
call dword [sym.imp.KERNEL32.dll_GetModuleHandleW]
push eax
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
test eax, eax
je 0x43dae8
xorps xmm0, xmm0
mov dword [ebp - 0xb8], 0
lea ecx, [ebp - 0xd8]
push ecx
movups xmmword [ebp - 0xd8], xmm0
movups xmmword [ebp - 0xc8], xmm0
call eax
mov ax, word [ebp - 0xd8]
cmp ax, 9
je 0x43dade
cmp ax, 6
je 0x43dade
cmp ax, 0xc
je 0x43dade
push str.IsWow64Process2
push 0x4d3850
mov dword [ebp - 0xb0], 0
mov dword [ebp - 0xac], 0
call dword [sym.imp.KERNEL32.dll_GetModuleHandleW]
push eax
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
mov dword [ebp - 0xe8], eax
test eax, eax
je 0x43dad5
lea eax, [ebp - 0xac]
push eax
lea eax, [ebp - 0xb0]
push eax
call dword [sym.imp.KERNEL32.dll_GetCurrentProcess]
push eax
call dword [ebp - 0xe8]
test eax, eax
je 0x43dad5
xor eax, eax
mov ecx, 0xaa64
cmp word [ebp - 0xac], cx
sete al
mov dword [0x508554], eax
jmp 0x43dae8
xor eax, eax
mov dword [0x508554], eax
jmp 0x43dae8
mov dword [0x508554], 1
mov edx, dword [ebp - 0xe4]
mov dword [0x502294], 0
cmp dword [0x508554], 0
mov ecx, 2
mov eax, 0x102
cmove eax, ecx
cmp dword [esi + 0x14], 8
mov ecx, esi
jb 0x43db16
mov ecx, dword [esi]
lea edi, [ebp - 0xdc]
push edi
push eax
push 0
push ecx
push edx
call dword [sym.imp.ADVAPI32.dll_RegOpenKeyExW]
mov edi, dword [ebp - 0xf0]
mov dword [ebp - 0xb4], eax
test eax, eax
jne 0x43db46
mov eax, dword [ebp - 0xdc]
test eax, eax
jne 0x43e02e
call fcn.0046fbc0
mov ecx, eax
push 1
mov eax, dword [ecx]
mov eax, dword [eax + 8]
call eax
movzx eax, al
sub eax, 1
jne 0x43dec6
push 0x6b
push str.d:jenkins.jenkinsworkspacepay_group_sys_clean_sys_clean_clientclient_sys_clean_srcwin_update_utils.cc
lea ecx, [ebp - 0xcc]
mov dword [ebp - 0xbc], eax
mov dword [ebp - 0xb8], 0xf
mov byte [ebp - 0xcc], al
call fcn.0040ecb0
push 3
push 0x4d3b60
lea ecx, [ebp - 0x120]
mov dword [ebp - 4], 0
mov dword [ebp - 0x110], 0
mov dword [ebp - 0x10c], 0xf
mov byte [ebp - 0x120], 0
call fcn.0040ecb0
push 1
push 2
lea ecx, [ebp - 0x1d0]
mov byte [ebp - 4], 1
call fcn.0040a370
push 0xffffffffffffffff
push 0x4d3824
lea ecx, [ebp - 0xcc]
mov byte [ebp - 4], 2
call fcn.0040ff80
push 0xffffffffffffffff
push 0x4d3828
lea ecx, [ebp - 0xcc]
mov dword [ebp - 0xb0], eax
call fcn.0040ff80
push 0x64
mov dword [ebp - 0xe8], eax
lea eax, [ebp - 0x74]
push 0
push eax
call fcn.004990f0
mov ecx, dword [ebp - 0xe8]
add esp, 0xc
cmp ecx, 0xffffffff
je 0x43dd22
mov edx, dword [ebp - 0xb0]
lea eax, [ecx - 1]
cmp edx, eax
jae 0x43dd22
lea eax, [edx + 1]
mov dword [ebp - 0xf8], 0
mov dword [ebp - 0xac], eax
mov eax, dword [ebp - 0xbc]
mov dword [ebp - 0xf4], 0xf
mov byte [ebp - 0x108], 0
cmp eax, dword [ebp - 0xac]
jb 0x43e31d
sub eax, dword [ebp - 0xac]
sub ecx, edx
dec ecx
cmp eax, ecx
cmovb ecx, eax
cmp dword [ebp - 0xb8], 0x10
lea eax, [ebp - 0xcc]
cmovae eax, dword [ebp - 0xcc]
add eax, dword [ebp - 0xac]
push ecx
push eax
lea ecx, [ebp - 0x108]
call fcn.0040ecb0
cmp dword [ebp - 0xf4], 0x10
lea eax, [ebp - 0x108]
cmovae eax, dword [ebp - 0x108]
push eax
push 0x1be
lea eax, [ebp - 0x74]
push str.__4d___s_
push eax
call fcn.00409e10
mov edx, dword [ebp - 0xf4]
add esp, 0x10
cmp edx, 0x10
jb 0x43dd05
mov ecx, dword [ebp - 0x108]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x43dcfb
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x43e322
push edx
push ecx
call fcn.004776ff
add esp, 8
mov dword [ebp - 0xf8], 0
mov dword [ebp - 0xf4], 0xf
mov byte [ebp - 0x108], 0
jmp 0x43dd38
push 0x1be
lea eax, [ebp - 0x74]
push str.__4d_
push eax
call fcn.00409e10
add esp, 0xc
cmp dword [ebp - 0x10c], 0x10
lea eax, [ebp - 0x120]
cmovae eax, dword [ebp - 0x120]
push eax
lea eax, [ebp - 0x1d0]
push eax
call fcn.0040b5c0
lea eax, [ebp - 0x74]
push eax
lea eax, [ebp - 0x1d0]
push eax
call fcn.0040b5c0
lea eax, [ebp - 0x1d0]
mov byte [ebp - 4], 3
push str._error__set_reg_value__open_reg_failed__root:
push eax
call fcn.0040b5c0
add esp, 0x18
lea ecx, [ebp - 0x1d0]
push dword [ebp - 0xe4]
call fcn.004144d0
lea eax, [ebp - 0x1d0]
push str.__path:
push eax
call fcn.0040b5c0
add esp, 8
mov ecx, esi
cmp dword [esi + 0x14], 8
jb 0x43ddb0
mov ecx, dword [esi]
test ecx, ecx
mov eax, str._null_
cmovne eax, ecx
push eax
lea eax, [ebp - 0x1d0]
push eax
call fcn.00409890
lea eax, [ebp - 0x1d0]
push 0x4d639c
push eax
call fcn.0040b5c0
add esp, 0x10
lea ecx, [ebp - 0x1d0]
push dword [ebp - 0xb4]
call fcn.00420070
lea eax, [ebp - 0x1d0]
push str.__will_create:
push eax
call fcn.0040b5c0
add esp, 8
lea ecx, [ebp - 0x1d0]
push dword [ebp + 0x20]
call fcn.004201d0
call fcn.0046fbc0
lea ecx, [ebp - 0x1d0]
push ecx
mov ecx, eax
mov edx, dword [eax]
call dword [edx + 0x1c]
lea ecx, [ebp - 0x1d0]
call fcn.0040b820
mov edx, dword [ebp - 0x10c]
mov byte [ebp - 4], 0
cmp edx, 0x10
jb 0x43de6a
mov ecx, dword [ebp - 0x120]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x43de60
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x43e327
push edx
push ecx
call fcn.004776ff
add esp, 8
mov edx, dword [ebp - 0xb8]
mov dword [ebp - 0x110], 0
mov dword [ebp - 0x10c], 0xf
mov byte [ebp - 0x120], 0
mov dword [ebp - 4], 0xffffffff
cmp edx, 0x10
jb 0x43dec6
mov ecx, dword [ebp - 0xcc]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x43debc
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x43e32c
push edx
push ecx
call fcn.004776ff
add esp, 8
cmp byte [ebp + 0x20], 0
je 0x43e2eb
cmp dword [0x502294], 0
mov dword [ebp - 0xb0], 0
je 0x43dfd0
push str.GetNativeSystemInfo
push 0x4d3574
call dword [sym.imp.KERNEL32.dll_GetModuleHandleW]
push eax
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
test eax, eax
je 0x43dfc6
xorps xmm0, xmm0
mov dword [ebp - 0xb8], 0
lea ecx, [ebp - 0xd8]
push ecx
movups xmmword [ebp - 0xd8], xmm0
movups xmmword [ebp - 0xc8], xmm0
call eax
mov ax, word [ebp - 0xd8]
cmp ax, 9
je 0x43dfbc
cmp ax, 6
je 0x43dfbc
cmp ax, 0xc
je 0x43dfbc
push str.IsWow64Process2
push 0x4d3850
mov dword [ebp - 0xb4], 0
mov dword [ebp - 0xac], 0
call dword [sym.imp.KERNEL32.dll_GetModuleHandleW]
push eax
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
mov dword [ebp - 0xe8], eax
test eax, eax
je 0x43dfb3
lea eax, [ebp - 0xac]
push eax
lea eax, [ebp - 0xb4]
push eax
call dword [sym.imp.KERNEL32.dll_GetCurrentProcess]
push eax
call dword [ebp - 0xe8]
test eax, eax
je 0x43dfb3
xor eax, eax
mov ecx, 0xaa64
cmp word [ebp - 0xac], cx
sete al
mov dword [0x508554], eax
jmp 0x43dfc6
xor eax, eax
mov dword [0x508554], eax
jmp 0x43dfc6
mov dword [0x508554], 1
mov dword [0x502294], 0
cmp dword [0x508554], 0
mov eax, 2
mov ecx, 0x102
cmove ecx, eax
cmp dword [esi + 0x14], 8
mov eax, esi
jb 0x43dfee
mov eax, dword [esi]
lea edx, [ebp - 0xb0]
push edx
lea edx, [ebp - 0xdc]
push edx
push 0
push ecx
push 0
push 0
push 0
push eax
push dword [ebp - 0xe4]
call dword [sym.imp.ADVAPI32.dll_RegCreateKeyExW]
mov dword [ebp - 0xb4], eax
test eax, eax
jne 0x43e1c0
mov eax, dword [ebp - 0xdc]
test eax, eax
je 0x43e1c0
cmp dword [edi + 0x14], 8
mov ecx, edi
jb 0x43e038
mov ecx, dword [edi]
push dword [ebp + 0x1c]
push dword [ebp - 0xec]
push dword [ebp + 0x14]
push 0
push ecx
push eax
call dword [sym.imp.ADVAPI32.dll_RegSetValueExW]
mov dword [ebp - 0xec], eax
test eax, eax
je 0x43e1b4
call fcn.0046fbc0
mov ecx, eax
push 1
mov eax, dword [ecx]
mov eax, dword [eax + 8]
call eax
movzx eax, al
sub eax, 1
jne 0x43e2eb
push 0x6b
push str.d:jenkins.jenkinsworkspacepay_group_sys_clean_sys_clean_clientclient_sys_clean_srcwin_update_utils.cc
lea ecx, [ebp - 0x138]
mov dword [ebp - 0x128], eax
mov dword [ebp - 0x124], 0xf
mov byte [ebp - 0x138], al
call fcn.0040ecb0
push 3
push 0x4d3b60
lea ecx, [ebp - 0x108]
mov dword [ebp - 4], 7
mov dword [ebp - 0xf8], 0
mov dword [ebp - 0xf4], 0xf
mov byte [ebp - 0x108], 0
call fcn.0040ecb0
push 0x1d5
lea eax, [ebp - 0x138]
mov byte [ebp - 4], 8
push eax
lea eax, [ebp - 0x108]
push eax
lea ecx, [ebp - 0xa8]
call fcn.0040a7e0
mov edi, eax
push str._error__set_reg_value_failed__root:
push edi
mov byte [ebp - 4], 9
call fcn.0040b5c0
add esp, 8
mov ecx, edi
push dword [ebp - 0xe4]
call fcn.004144d0
push str.__path:
push edi
call fcn.0040b5c0
add esp, 8
cmp dword [esi + 0x14], 8
jb 0x43e12d
mov esi, dword [esi]
test esi, esi
mov eax, str._null_
cmovne eax, esi
push eax
push edi
call fcn.00409890
push str.__key:
push edi
call fcn.0040b5c0
mov eax, dword [ebp - 0xf0]
add esp, 0x10
cmp dword [eax + 0x14], 8
jb 0x43e15a
mov eax, dword [eax]
test eax, eax
mov ecx, str._null_
cmovne ecx, eax
push ecx
push edi
call fcn.00409890
push 0x4d639c
push edi
call fcn.0040b5c0
add esp, 0x10
mov ecx, edi
push dword [ebp - 0xec]
call fcn.00420070
call fcn.0046fbc0
push edi
mov ecx, eax
mov edx, dword [eax]
call dword [edx + 0x1c]
lea ecx, [ebp - 0xa8]
call fcn.0040b820
lea ecx, [ebp - 0x108]
call fcn.0040afe0
lea ecx, [ebp - 0x138]
jmp 0x43e2e6
mov byte [ebp - 0xdd], 1
jmp 0x43e2eb
call fcn.0046fbc0
mov ecx, eax
push 1
mov eax, dword [ecx]
mov eax, dword [eax + 8]
call eax
movzx eax, al
sub eax, 1
jne 0x43e2eb
push 0x6b
push str.d:jenkins.jenkinsworkspacepay_group_sys_clean_sys_clean_clientclient_sys_clean_srcwin_update_utils.cc
lea ecx, [ebp - 0x120]
mov dword [ebp - 0x110], eax
mov dword [ebp - 0x10c], 0xf
mov byte [ebp - 0x120], al
call fcn.0040ecb0
push 3
push 0x4d3b60
lea ecx, [ebp - 0xcc]
mov dword [ebp - 4], 4
mov dword [ebp - 0xbc], 0
mov dword [ebp - 0xb8], 0xf
mov byte [ebp - 0xcc], 0
call fcn.0040ecb0
push 0x1c9
lea eax, [ebp - 0x120]
mov byte [ebp - 4], 5
push eax
lea eax, [ebp - 0xcc]
push eax
lea ecx, [ebp - 0x1d0]
call fcn.0040a7e0
mov edi, eax
push str._error__set_reg_value__create_key_failed__root:
push edi
mov byte [ebp - 4], 6
call fcn.0040b5c0
add esp, 8
mov ecx, edi
push dword [ebp - 0xe4]
call fcn.004144d0
push str.__path:
push edi
call fcn.0040b5c0
add esp, 8
cmp dword [esi + 0x14], 8
jb 0x43e291
mov esi, dword [esi]
test esi, esi
mov eax, str._null_
cmovne eax, esi
push eax
push edi
call fcn.00409890
push 0x4d639c
push edi
call fcn.0040b5c0
add esp, 0x10
mov ecx, edi
push dword [ebp - 0xb4]
call fcn.00420070
call fcn.0046fbc0
push edi
mov ecx, eax
mov edx, dword [eax]
call dword [edx + 0x1c]
lea ecx, [ebp - 0x1d0]
call fcn.0040b820
lea ecx, [ebp - 0xcc]
call fcn.0040afe0
lea ecx, [ebp - 0x120]
call fcn.0040afe0
mov ecx, dword [ebp - 0xdc]
test ecx, ecx
je 0x43e2fc
push ecx
call dword [sym.imp.ADVAPI32.dll_RegCloseKey]
mov al, byte [ebp - 0xdd]
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
mov ecx, dword [ebp - 0x10]
xor ecx, ebp
call fcn.004779c3
mov esp, ebp
pop ebp
ret
call fcn.0040e580
call fcn.0049c66a
call fcn.0049c66a
call fcn.0049c66a
int3