Function at 0x403170
Capabilities:
Set registry value

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x43c46e
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
sub esp, 0x5c
push esi
push edi
mov dword [ebp - 0x1c], 0
mov edi, ecx
push 0x12
xorps xmm0, xmm0
mov dword [ebp - 0x20], edx
push str.SOFTWAREPAIDMEMES
lea ecx, [ebp - 0x50]
mov dword [ebp - 0x40], 0
movups xmmword [ebp - 0x50], xmm0
mov dword [ebp - 0x3c], 0
call fcn.00401ef0
lea eax, [ebp - 0x50]
mov dword [ebp - 4], 0
push eax
push 0x80000001
lea ecx, [ebp - 0x18]
call fcn.00402b40
mov byte [ebp - 4], 2
mov ecx, dword [ebp - 0x3c]
cmp ecx, 8
jb 0x403213
mov edx, dword [ebp - 0x50]
lea ecx, [ecx*2 + 2]
mov eax, edx
cmp ecx, 0x1000
jb 0x403209
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x4033f8
push ecx
push edx
call fcn.0041fc4a
add esp, 8
mov esi, dword [ebp - 0x18]
xor eax, eax
mov dword [ebp - 0x40], 0
mov dword [ebp - 0x3c], 7
mov word [ebp - 0x50], ax
test esi, esi
je 0x40338e
push 6
xorps xmm0, xmm0
mov dword [ebp - 0x58], eax
push str.PUBLIC
lea ecx, [ebp - 0x68]
mov dword [ebp - 0x54], eax
movups xmmword [ebp - 0x68], xmm0
call fcn.00401ef0
mov byte [ebp - 4], 3
mov eax, 1
cmp dword [edi + 0x14], 8
mov dword [ebp - 0x14], eax
mov dword [ebp - 0x1c], eax
mov eax, dword [edi + 0x10]
lea ecx, [eax*2 + 2]
jb 0x40326f
mov edi, dword [edi]
cmp dword [ebp - 0x54], 8
lea eax, [ebp - 0x68]
push ecx
cmovae eax, dword [ebp - 0x68]
push edi
mov edi, dword [sym.imp.ADVAPI32.dll_RegSetValueExW]
push 1
push 0
push eax
push esi
call edi
test eax, eax
jne 0x4032e4
push 7
xorps xmm0, xmm0
mov dword [ebp - 0x28], eax
push str.PRIVATE
lea ecx, [ebp - 0x38]
mov dword [ebp - 0x24], eax
movups xmmword [ebp - 0x38], xmm0
call fcn.00401ef0
mov ecx, dword [ebp - 0x20]
mov eax, 3
mov dword [ebp - 0x14], eax
cmp dword [ecx + 0x14], 8
mov eax, dword [ecx + 0x10]
lea edx, [eax*2 + 2]
jb 0x4032c7
mov ecx, dword [ecx]
cmp dword [ebp - 0x24], 8
lea eax, [ebp - 0x38]
push edx
cmovae eax, dword [ebp - 0x38]
push ecx
push 1
push 0
push eax
push esi
call edi
mov byte [ebp - 0xd], 1
test eax, eax
je 0x4032e8
mov byte [ebp - 0xd], 0
mov eax, dword [ebp - 0x14]
test al, 2
je 0x403346
mov ecx, dword [ebp - 0x24]
and eax, 0xfffffffd
mov dword [ebp - 0x14], eax
cmp ecx, 8
jb 0x403332
mov edx, dword [ebp - 0x38]
lea ecx, [ecx*2 + 2]
mov eax, edx
cmp ecx, 0x1000
jb 0x403325
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x4033fd
push ecx
push edx
call fcn.0041fc4a
mov eax, dword [ebp - 0x14]
add esp, 8
xor ecx, ecx
mov dword [ebp - 0x28], 0
mov dword [ebp - 0x24], 7
mov word [ebp - 0x38], cx
test al, 1
je 0x403384
mov ecx, dword [ebp - 0x54]
cmp ecx, 8
jb 0x403384
mov edx, dword [ebp - 0x68]
lea ecx, [ecx*2 + 2]
mov eax, edx
cmp ecx, 0x1000
jb 0x40337a
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x4033fd
push ecx
push edx
call fcn.0041fc4a
add esp, 8
cmp byte [ebp - 0xd], 0
mov byte [ebp - 0xd], 1
jne 0x403392
mov byte [ebp - 0xd], 0
test esi, esi
je 0x4033e5
cmp esi, 0x80000001
je 0x4033e5
cmp esi, 0x80000002
je 0x4033e5
cmp esi, 0x80000000
je 0x4033e5
cmp esi, 0x80000005
je 0x4033e5
cmp esi, 0x80000007
je 0x4033e5
cmp esi, 0x80000004
je 0x4033e5
cmp esi, 0x80000060
je 0x4033e5
cmp esi, 0x80000050
je 0x4033e5
cmp esi, 0x80000003
je 0x4033e5
push esi
call dword [sym.imp.ADVAPI32.dll_RegCloseKey]
mov ecx, dword [ebp - 0xc]
mov al, byte [ebp - 0xd]
pop edi
pop esi
mov dword fs:[0], ecx
mov esp, ebp
pop ebp
ret
call fcn.0042c24f
call fcn.0042c24f
int3