Function at 0x42d760
Capabilities:
Set registry value

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x47fb3e
mov eax, dword fs:[0]
push eax
sub esp, 0x40
mov eax, dword [0x4ac084]
xor eax, ebp
mov dword [ebp - 0x10], eax
push ebx
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov esi, edx
mov edi, ecx
call fcn.0043b2a0
mov ecx, esi
call fcn.0043c460
push str.PCKeeper.exe
push str.8000D876_0620_4072_AD0A_7D402167FF98
push str.73534974_C058_4AAD_B0CD_CF8A011A87EA
mov ecx, 0x4b0624
call fcn.00448b60
push str.PCKeeper.exe
push str.29650533_2E1B_4517_9D0C_B7243F12DF94
push str.299FFF17_0FDF_47F4_A894_1DADF0D98007
mov ecx, 0x4b062c
call fcn.00448b60
push str.PCKAV.exe
push str.6D62ECA7_CC77_47AF_AA5C_FE6B72350139
push str.FE88A67B_BBC2_49A8_B12F_3504144E1044
mov ecx, 0x4b0634
call fcn.00448b60
push str.AccountService.exe
push str.88359144_2AD6_4DD8_A3C5_680BD50AD321
push str.FDDE8CC8_A372_459C_8C41_4263EDDA260E
mov ecx, 0x4b063c
call fcn.00448b60
cmp word [0x4b0614], 0
jne 0x42d86d
cmp word [0x4b0616], 0
jne 0x42d86d
cmp word [0x4b0618], 0
jne 0x42d86d
cmp word [0x4b061a], 0
jne 0x42d86d
cmp dword [0x4b04d4], 0
jne 0x42d86d
push str.AccountService
lea eax, [ebp - 0x28]
push eax
call fcn.00416d70
mov eax, dword [ebp - 0x28]
cmp dword [eax - 0xc], 0
je 0x42d855
push eax
mov ecx, 0x4b0614
call fcn.0044aba0
mov eax, dword [ebp - 0x28]
lea edx, [eax - 0x10]
or eax, 0xffffffff
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x42d86d
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
cmp word [0x4b0604], 0
jne 0x42d8db
cmp word [0x4b0606], 0
jne 0x42d8db
cmp word [0x4b0608], 0
jne 0x42d8db
cmp word [0x4b060a], 0
jne 0x42d8db
cmp dword [0x4b04d0], 0
jne 0x42d8db
push str.PCKeeper
lea eax, [ebp - 0x28]
push eax
call fcn.00416d70
mov eax, dword [ebp - 0x28]
cmp dword [eax - 0xc], 0
je 0x42d8c3
push eax
mov ecx, 0x4b0604
call fcn.0044aba0
mov eax, dword [ebp - 0x28]
lea edx, [eax - 0x10]
or eax, 0xffffffff
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x42d8db
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov dx, word [0x4b060c]
mov cx, word [0x4b060e]
test dx, dx
jne 0x42d959
test cx, cx
jne 0x42d959
cmp word [0x4b0610], cx
jne 0x42d959
cmp word [0x4b0612], cx
jne 0x42d959
cmp dword [0x4b04cc], 0
jne 0x42d959
push str.PCKSecurity
lea eax, [ebp - 0x28]
push eax
call fcn.00416d70
mov eax, dword [ebp - 0x28]
cmp dword [eax - 0xc], 0
je 0x42d933
push eax
mov ecx, 0x4b060c
call fcn.0044aba0
mov eax, dword [ebp - 0x28]
lea edx, [eax - 0x10]
or eax, 0xffffffff
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x42d94b
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov dx, word [0x4b060c]
mov cx, word [0x4b060e]
mov eax, dword [0x4b05d0]
cmp eax, 0x21
jne 0x42d9bb
cmp word [0x4b0604], 0
jne 0x42da00
cmp word [0x4b0606], 0
jne 0x42da00
cmp word [0x4b0608], 0
jne 0x42da00
cmp word [0x4b060a], 0
jne 0x42da00
test dx, dx
jne 0x42d9af
test cx, cx
jne 0x42d9af
cmp word [0x4b0610], cx
jne 0x42d9af
cmp word [0x4b0612], cx
je 0x42da00
mov dword [0x4b04a0], 0x20
jmp 0x42da11
cmp eax, 0x20
jne 0x42da0c
test dx, dx
jne 0x42d9af
test cx, cx
jne 0x42d9af
cmp word [0x4b0610], cx
jne 0x42d9af
cmp word [0x4b0612], cx
jne 0x42d9af
cmp word [0x4b0604], cx
jne 0x42da00
cmp word [0x4b0606], cx
jne 0x42da00
cmp word [0x4b0608], cx
jne 0x42da00
cmp word [0x4b060a], cx
je 0x42d9af
mov dword [0x4b04a0], 0x21
jmp 0x42da11
mov dword [0x4b04a0], eax
cmp dword [0x4b04c0], 0
jne 0x42dad1
cmp word [0x4b062c], 0
jne 0x42dab4
cmp word [0x4b062e], 0
jne 0x42dab4
cmp word [0x4b0630], 0
jne 0x42dab4
cmp word [0x4b0632], 0
jne 0x42dab4
cmp word [0x4b0634], 0
jne 0x42dab4
cmp word [0x4b0636], 0
jne 0x42dab4
cmp word [0x4b0638], 0
jne 0x42dab4
cmp word [0x4b063a], 0
jne 0x42dab4
cmp word [0x4b063c], 0
jne 0x42dab4
cmp word [0x4b063e], 0
jne 0x42dab4
cmp word [0x4b0640], 0
jne 0x42dab4
cmp word [0x4b0642], 0
jne 0x42dab4
mov eax, dword [0x4b0644]
cmp dword [eax - 0xc], 0
jne 0x42dab4
mov esi, dword [0x4b04dc]
xor eax, eax
mov dword [0x4b049c], eax
jmp 0x42dabe
mov eax, dword [0x4b049c]
mov esi, 1
xor ebx, ebx
cmp dword [0x4b04b4], ebx
cmovne esi, ebx
mov dword [0x4b04dc], esi
jmp 0x42dad6
mov eax, dword [0x4b049c]
test dx, dx
jne 0x42daf2
test cx, cx
jne 0x42daf2
cmp word [0x4b0610], cx
jne 0x42daf2
cmp word [0x4b0612], cx
je 0x42db2a
cmp word [0x4b0604], 0
jne 0x42db2a
cmp word [0x4b0606], 0
jne 0x42db2a
cmp word [0x4b0608], 0
jne 0x42db2a
cmp word [0x4b060a], 0
jne 0x42db2a
xor ebx, ebx
test eax, eax
setne bl
lea ebx, [ebx*4 + 0x44e]
jmp 0x42db34
xor ebx, ebx
test eax, eax
setne bl
add ebx, 0x70
push 0x11
push str.STRING_NOT_FOUND_
mov ecx, 0x4b0650
call fcn.004039c0
mov eax, dword [0x4b048c]
lea eax, [eax + eax*8]
movzx eax, word [eax*4 + 0x4ac960]
push eax
push ebx
push ecx
mov ecx, 0x4b0650
call fcn.00415350
test eax, eax
jne 0x42db7a
movzx eax, word [0x4ac960]
push eax
push ebx
push ecx
mov ecx, 0x4b0650
call fcn.00415350
push 0x17
push str.PCKInstaller_1.1.1149.8
mov ecx, 0x4b064c
call fcn.004039c0
mov eax, dword [0x4b0644]
mov dword [0x4b0494], edi
mov ecx, dword [eax - 0xc]
test ecx, ecx
je 0x42dc16
mov eax, dword [0x4b05c0]
cmp dword [eax - 0xc], 0
jne 0x42dbc4
push 0x30
push dword [0x4b0650]
push str.The_TidExt_param_cannot_be_used_without_the_TidExt_url
push 0
call dword [sym.imp.USER32.dll_MessageBoxW]
xor eax, eax
jmp 0x42e01c
test ecx, ecx
je 0x42dc16
cmp dword [0x4ac918], 0
jne 0x42dbed
push 0x30
push dword [0x4b0650]
push str.The_TidExt_param_cannot_be_used_with_no_self_update_param
push 0
call dword [sym.imp.USER32.dll_MessageBoxW]
xor eax, eax
jmp 0x42e01c
test ecx, ecx
je 0x42dc16
cmp dword [0x4b049c], 0
je 0x42dc23
push 0x30
push dword [0x4b0650]
push str.The_TidExt_param_cannot_be_used_in_the_update_mode
push 0
call dword [sym.imp.USER32.dll_MessageBoxW]
xor eax, eax
jmp 0x42e01c
cmp dword [0x4b049c], 0
jne 0x42dd10
cmp word [0x4b0634], 0
jne 0x42dd10
cmp word [0x4b0636], 0
jne 0x42dd10
cmp word [0x4b0638], 0
jne 0x42dd10
cmp word [0x4b063a], 0
jne 0x42dd10
mov ecx, 0x4b060c
call fcn.0044ac00
test eax, eax
je 0x42dd10
lea ecx, [ebp - 0x28]
call fcn.00403180
lea ecx, [ebp - 0x28]
mov dword [ebp - 4], 0
call fcn.0042b7b0
mov dword [0x4b04c8], eax
test eax, eax
je 0x42dcee
sub esp, 8
mov dword [ebp - 0x3c], 0
mov dword [ebp - 0x38], 0
mov dword [ebp - 0x34], 0
push 0x102
push 0
push ecx
push str.SoftwareEssentwarePCKAVSettingsRtp
push reloc.OLEAUT32.dll_SysReAllocString
lea ecx, [ebp - 0x3c]
call fcn.0042e8d0
push 4
lea eax, [ebp - 0x30]
mov dword [ebp - 0x30], 0
push eax
push 4
push 0
push 0x490710
push dword [ebp - 0x3c]
call dword [sym.imp.ADVAPI32.dll_RegSetValueExW]
lea ecx, [ebp - 0x3c]
call fcn.00403020
lea ecx, [ebp - 0x3c]
call fcn.00403050
mov dword [ebp - 4], 0xffffffff
or eax, 0xffffffff
mov edx, dword [ebp - 0x28]
add edx, 0xfffffff0
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x42dd10
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
lea ecx, [ebp - 0x24]
call fcn.00409f70
mov dword [ebp - 4], 1
lea ecx, [ebp - 0x44]
push 0x4b05f4
mov dword [ebp - 0x30], 0
call fcn.0042e050
push 0
mov byte [ebp - 4], 2
push 0
mov dword [ebp - 0x38], 0
mov dword [ebp - 0x34], 0
call fcn.004176a0
mov ecx, eax
mov dword [ebp - 0x28], ecx
mov dword [ebp - 0x38], ecx
mov byte [ebp - 4], 3
lea edi, [ebp - 0x14]
xor ebx, ebx
nop
mov eax, dword [edi]
sub eax, 0x10
push eax
call fcn.00402e80
lea esi, [eax + 0x10]
mov dword [ebp - 0x2c], esi
mov byte [ebp - 4], 4
lea ecx, [ebp - 0x48]
mov eax, dword [ebp - 0x44]
mov edx, edi
push dword [ebp - 0x2c]
push eax
push dword [eax]
call fcn.0042e6a0
mov eax, dword [ebp - 0x48]
add esp, 0x10
cmp eax, dword [ebp - 0x44]
je 0x42ddce
mov eax, dword [ebp - 0x28]
push edi
push dword [eax + 4]
push eax
call fcn.004179c0
mov edx, dword [ebp - 0x34]
mov ecx, 0x15555554
sub ecx, edx
mov dword [ebp - 0x4c], eax
cmp ecx, 1
jb 0x42de58
mov ecx, dword [ebp - 0x28]
inc edx
mov dword [ebp - 0x34], edx
mov dword [ecx + 4], eax
mov eax, dword [eax + 4]
mov ecx, dword [ebp - 0x4c]
mov dword [eax], ecx
mov eax, dword [ebp - 0x38]
mov dword [ebp - 0x28], eax
mov byte [ebp - 4], 3
add esi, 0xfffffff0
or eax, 0xffffffff
lock xadd dword [esi + 0xc], eax
dec eax
test eax, eax
jg 0x42ddea
mov ecx, dword [esi]
push esi
mov eax, dword [ecx]
call dword [eax + 4]
inc ebx
add edi, 4
cmp ebx, 1
jl 0x42dd60
mov edx, dword [ebp - 0x28]
mov esi, dword [edx]
cmp esi, edx
je 0x42df7a
nop dword [eax]
nop dword [eax + eax]
cmp dword [0x4b049c], 0
jne 0x42df4a
cmp dword [0x4b0498], 0
jne 0x42df4a
mov eax, dword [esi + 8]
mov ecx, str.ZoomDiagnosticsPC
mov dx, word [eax]
cmp dx, word [ecx]
jne 0x42de62
test dx, dx
je 0x42de54
mov dx, word [eax + 2]
cmp dx, word [ecx + 2]
jne 0x42de62
add eax, 4
add ecx, 4
test dx, dx
jne 0x42de32
xor eax, eax
jmp 0x42de67
push str.list_T__too_long
call fcn.00455e72
sbb eax, eax
or eax, 1
test eax, eax
sete al
test al, al
je 0x42df47
call fcn.0042af20
test eax, eax
jne 0x42df47
mov eax, dword [0x4acc10]
test eax, eax
je 0x42dea3
nop word [eax + eax]
cmp dword [eax + 8], 0x467
je 0x42df47
mov eax, dword [eax]
test eax, eax
jne 0x42de90
push ecx
mov edi, esp
mov dword [ebp - 0x2c], edi
mov eax, dword [esi + 8]
sub eax, 0x10
push eax
call fcn.00402e80
add esp, 4
lea ecx, [ebp - 0x24]
add eax, 0x10
mov dword [edi], eax
call fcn.0040a1e0
test al, al
jne 0x42df47
mov ebx, dword [ebp - 0x30]
cmp ebx, 3
jge 0x42df47
mov edi, dword [0x4acc14]
call fcn.0042e610
mov ecx, dword [0x4acc20]
mov dword [ebp - 0x2c], ecx
mov eax, dword [ecx]
mov dword [ecx + 8], 0x467
mov dword [0x4acc20], eax
mov dword [ecx + 4], edi
mov dword [ecx], 0
inc dword [0x4acc18]
mov eax, dword [0x4acc14]
test eax, eax
je 0x42df13
mov dword [eax], ecx
jmp 0x42df19
mov dword [0x4acc10], ecx
push 1
push ecx
mov edi, esp
mov dword [0x4acc14], ecx
mov dword [ebp - 0x2c], edi
mov eax, dword [esi + 8]
sub eax, 0x10
push eax
call fcn.00402e80
add esp, 4
lea ecx, [ebp - 0x24]
add eax, 0x10
mov dword [edi], eax
call fcn.0040a2b0
inc ebx
mov dword [ebp - 0x30], ebx
mov edx, dword [ebp - 0x28]
cmp dword [0x4acc18], 1
jbe 0x42df70
mov ecx, dword [0x4acc10]
xor eax, eax
test ecx, ecx
setne al
test eax, eax
je 0x42e038
mov eax, dword [ecx + 8]
mov dword [0x4b0480], eax
mov esi, dword [esi]
cmp esi, edx
jne 0x42de10
cmp dword [0x4b04c0], 0
je 0x42df9f
cmp byte [0x4b05cc], 0
je 0x42df9f
call fcn.0043cd60
cmp dword [0x4b049c], 0
je 0x42df9f
call fcn.0043d370
lea ecx, [ebp - 0x38]
call fcn.004170d0
push dword [ebp - 0x38]
call fcn.00458d3c
add esp, 4
lea ecx, [ebp - 0x44]
call fcn.004170d0
push dword [ebp - 0x44]
call fcn.00458d3c
add esp, 4
push fcn.004031b0
push 1
push 4
lea eax, [ebp - 0x14]
mov dword [ebp - 4], 5
push eax
call fcn.004594f5
mov edi, dword [ebp - 0x1c]
lea ecx, [ebp - 0x1c]
mov esi, dword [edi]
mov dword [ebp - 0x30], esi
call fcn.0040a4a0
mov edi, dword [ebp - 0x1c]
push edi
call fcn.00458d3c
mov eax, dword [ebp - 0x24]
lea ecx, [ebp - 0x24]
add esp, 4
push eax
push dword [eax]
lea eax, [ebp - 0x2c]
push eax
call fcn.0040a3e0
push dword [ebp - 0x24]
call fcn.00458d3c
add esp, 4
mov eax, 1
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 0x10]
xor ecx, ebp
call fcn.00458d41
mov esp, ebp
pop ebp
ret
push 0x80004005
call fcn.004039a0
int3