Function at 0x437b50
Capabilities:
Set registry value

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x539588
mov eax, dword fs:[0]
push eax
sub esp, 0x3c
mov eax, dword [0x597644]
xor eax, ebp
mov dword [ebp - 0x10], eax
push esi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
lea eax, [ebp - 0x28]
mov dword [ebp - 0x44], 3
push 0x10
push eax
call fcn.00432bf0
add esp, 8
cmp dword [eax + 0x14], 8
jb 0x437b96
mov eax, dword [eax]
mov esi, dword [sym.imp.SHLWAPI.dll_SHSetValueW]
lea ecx, [ebp - 0x44]
push 4
push ecx
push 4
push str.showtype
push eax
push SysReAllocString
call esi
mov edx, dword [ebp - 0x14]
cmp edx, 8
jb 0x437beb
mov ecx, dword [ebp - 0x28]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x437be1
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x437fe0
push edx
push ecx
call fcn.00497eef
add esp, 8
lea eax, [ebp - 0x28]
push 0x14
push eax
call fcn.00432bf0
add esp, 8
cmp dword [eax + 0x14], 8
jb 0x437c01
mov eax, dword [eax]
push 4
lea ecx, [ebp - 0x44]
push ecx
push 4
push str.showtype
push eax
push SysReAllocString
call esi
mov edx, dword [ebp - 0x14]
cmp edx, 8
jb 0x437c50
mov ecx, dword [ebp - 0x28]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x437c46
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x437fe5
push edx
push ecx
call fcn.00497eef
add esp, 8
lea eax, [ebp - 0x28]
push 0x13
push eax
call fcn.00432bf0
add esp, 8
cmp dword [eax + 0x14], 8
jb 0x437c66
mov eax, dword [eax]
push 4
lea ecx, [ebp - 0x44]
push ecx
push 4
push str.showtype
push eax
push SysReAllocString
call esi
mov edx, dword [ebp - 0x14]
cmp edx, 8
jb 0x437cb5
mov ecx, dword [ebp - 0x28]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x437cab
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x437fea
push edx
push ecx
call fcn.00497eef
add esp, 8
lea eax, [ebp - 0x28]
push 0x15
push eax
call fcn.00432bf0
add esp, 8
cmp dword [eax + 0x14], 8
jb 0x437ccb
mov eax, dword [eax]
push 4
lea ecx, [ebp - 0x44]
push ecx
push 4
push str.showtype
push eax
push SysReAllocString
call esi
mov edx, dword [ebp - 0x14]
cmp edx, 8
jb 0x437d1a
mov ecx, dword [ebp - 0x28]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x437d10
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x437fef
push edx
push ecx
call fcn.00497eef
add esp, 8
lea eax, [ebp - 0x28]
push 0x16
push eax
call fcn.00432bf0
add esp, 8
cmp dword [eax + 0x14], 8
jb 0x437d30
mov eax, dword [eax]
push 4
lea ecx, [ebp - 0x44]
push ecx
push 4
push str.showtype
push eax
push SysReAllocString
call esi
mov edx, dword [ebp - 0x14]
cmp edx, 8
jb 0x437d7f
mov ecx, dword [ebp - 0x28]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x437d75
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x437ff4
push edx
push ecx
call fcn.00497eef
add esp, 8
lea eax, [ebp - 0x28]
push 0x17
push eax
call fcn.00432bf0
add esp, 8
cmp dword [eax + 0x14], 8
jb 0x437d95
mov eax, dword [eax]
push 4
lea ecx, [ebp - 0x44]
push ecx
push 4
push str.showtype
push eax
push SysReAllocString
call esi
mov edx, dword [ebp - 0x14]
cmp edx, 8
jb 0x437de4
mov ecx, dword [ebp - 0x28]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x437dda
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x437ff9
push edx
push ecx
call fcn.00497eef
add esp, 8
lea eax, [ebp - 0x28]
mov dword [ebp - 0x44], 0
push 0x18
push eax
call fcn.00432bf0
add esp, 8
cmp dword [eax + 0x14], 8
jb 0x437e01
mov eax, dword [eax]
push 4
lea ecx, [ebp - 0x44]
push ecx
push 4
push str.lds_show
push eax
push SysReAllocString
call esi
mov edx, dword [ebp - 0x14]
cmp edx, 8
jb 0x437e50
mov ecx, dword [ebp - 0x28]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x437e46
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x437ffe
push edx
push ecx
call fcn.00497eef
add esp, 8
lea eax, [ebp - 0x28]
push 0x1a
push eax
call fcn.00432bf0
add esp, 8
cmp dword [eax + 0x14], 8
jb 0x437e66
mov eax, dword [eax]
push 4
lea ecx, [ebp - 0x44]
push ecx
push 4
push str.show
push eax
push SysReAllocString
call esi
mov edx, dword [ebp - 0x14]
cmp edx, 8
jb 0x437eb5
mov ecx, dword [ebp - 0x28]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x437eab
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x438003
push edx
push ecx
call fcn.00497eef
add esp, 8
lea eax, [ebp - 0x28]
push 0x19
push eax
call fcn.00432bf0
add esp, 8
cmp dword [eax + 0x14], 8
jb 0x437ecb
mov eax, dword [eax]
push 4
lea ecx, [ebp - 0x44]
push ecx
push 4
push str.lite_show
push eax
push SysReAllocString
call esi
mov edx, dword [ebp - 0x14]
cmp edx, 8
jb 0x437f1a
mov ecx, dword [ebp - 0x28]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x437f10
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x438008
push edx
push ecx
call fcn.00497eef
add esp, 8
lea eax, [ebp - 0x40]
push 0x1b
push eax
call fcn.00432bf0
add esp, 8
cmp dword [eax + 0x14], 8
jb 0x437f30
mov eax, dword [eax]
push 4
lea ecx, [ebp - 0x44]
push ecx
push 4
push str.desktop_show
push eax
push SysReAllocString
call esi
mov edx, dword [ebp - 0x2c]
cmp edx, 8
jb 0x437f7f
mov ecx, dword [ebp - 0x40]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x437f75
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x43800d
push edx
push ecx
call fcn.00497eef
add esp, 8
xor eax, eax
mov dword [ebp - 0x30], 0
push eax
sub esp, 0x28
mov word [ebp - 0x40], ax
mov eax, esp
mov dword [ebp - 0x2c], 7
mov dword [ebp - 0x48], esp
mov dword [eax + 0x24], 0
push 0
push 0
push str.close_mininews_show
mov dword [ebp - 4], 0
call fcn.0042e040
mov ecx, eax
mov dword [ebp - 4], 0xffffffff
call fcn.004239a0
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop esi
mov ecx, dword [ebp - 0x10]
xor ecx, ebp
call fcn.004982ff
mov esp, ebp
pop ebp
ret
call fcn.004e9178
call fcn.004e9178
call fcn.004e9178
call fcn.004e9178
call fcn.004e9178
call fcn.004e9178
call fcn.004e9178
call fcn.004e9178
call fcn.004e9178
call fcn.004e9178
int3