Function at 0x43cb5c
Capabilities:
Set registry value

Disassembly:
push ebp
mov ebp, esp
push ebx
push esi
push edi
push 0x133f
sub esp, 0x70
push fcn.0043cb5c
xor esi, esi
xor edi, edi
mov ecx, 0x48
push esi
dec ecx
jne 0x43cb78
push 0
push 0
push 0
xor eax, eax
lea ebx, [esp + 4]
push ebx
mov dword [ebx], eax
lea ebx, [ebp - 0x9c]
mov dword [ebx], esi
push ebx
push 0
fild dword [0x186d63c]
fild dword [0x186cde8]
call fcn.0045c11c
call fcn.0045c2a2
push eax
push 0
push 0
push 0
mov edx, 0x18683d4
call fcn.0045d0ba
lea ebx, [esp + 0x1c]
call fcn.0045c36b
fild qword [0x186d0cc]
call fcn.0045c2a2
push eax
call dword [sym.imp.ADVAPI32.DLL_RegCreateKeyExA]
push eax
mov ebx, esp
mov eax, dword [ebx + 4]
call fcn.00457d88
pop eax
add esp, 8
mov esi, dword [ebp - 0x9c]
fldcw word [ebp - 0x10]
pop dword [ebp - 0x30]
cmp eax, dword [ebp - 0x30]
je 0x43cc01
jmp 0x43d0eb
mov ebx, 0x186029c
call fcn.0045ce8d
call fcn.0045d088
test eax, eax
je 0x43cc3d
mov ebx, 0x186029c
call fcn.0045ce8d
lea ebx, [ebp - 0x1a4]
mov ecx, 0x104
call fcn.0045ced6
mov edi, 1
jmp 0x43cc5d
mov edx, 0x18609c8
call fcn.0045d0ba
lea ebx, [ebp - 0x1a4]
mov ecx, 0x104
call fcn.0045ced6
mov edi, 0
push 0
push 0
lea ebx, [ebp - 0x1a4]
call fcn.0045ce8d
call fcn.0045d088
push eax
lea ebx, [ebp - 0x1a4]
push ebx
push 1
push 0
mov edx, 0x18683ec
call fcn.0045d0ba
lea ebx, [esp + 0x10]
call fcn.0045c36b
mov eax, esi
push eax
call dword [sym.imp.ADVAPI32.DLL_RegSetValueExA]
push eax
mov ebx, esp
mov eax, dword [ebx + 4]
call fcn.00457d88
pop eax
add esp, 4
fldcw word [ebp - 0x10]
pop dword [ebp - 0x30]
cmp eax, dword [ebp - 0x30]
je 0x43ccc8
mov eax, esi
push eax
call dword [sym.imp.ADVAPI32.DLL_RegCloseKey]
fldcw word [ebp - 0x10]
jmp 0x43d0eb
push 0
push 0
push 4
lea ebx, [ebp - 0xa0]
mov dword [ebx], edi
push ebx
push 4
push 0
mov edx, 0x18683fc
call fcn.0045d0ba
lea ebx, [esp + 0x10]
call fcn.0045c36b
mov eax, esi
push eax
call dword [sym.imp.ADVAPI32.DLL_RegSetValueExA]
push eax
mov ebx, esp
mov eax, dword [ebx + 4]
call fcn.00457d88
pop eax
add esp, 4
mov edi, dword [ebp - 0xa0]
fldcw word [ebp - 0x10]
pop dword [ebp - 0x30]
cmp eax, dword [ebp - 0x30]
je 0x43cd2c
mov eax, esi
push eax
call dword [sym.imp.ADVAPI32.DLL_RegCloseKey]
fldcw word [ebp - 0x10]
jmp 0x43d0eb
mov ebx, 0x1860378
call fcn.0045ce8d
call fcn.0045d088
test eax, eax
je 0x43cd68
mov ebx, 0x1860378
call fcn.0045ce8d
lea ebx, [ebp - 0x1a4]
mov ecx, 0x104
call fcn.0045ced6
mov edi, 1
jmp 0x43cd88
mov edx, 0x18609c8
call fcn.0045d0ba
lea ebx, [ebp - 0x1a4]
mov ecx, 0x104
call fcn.0045ced6
mov edi, 0
push 0
push 0
lea ebx, [ebp - 0x1a4]
call fcn.0045ce8d
call fcn.0045d088
push eax
lea ebx, [ebp - 0x1a4]
push ebx
push 1
push 0
mov edx, 0x186840c
call fcn.0045d0ba
lea ebx, [esp + 0x10]
call fcn.0045c36b
mov eax, esi
push eax
call dword [sym.imp.ADVAPI32.DLL_RegSetValueExA]
push eax
mov ebx, esp
mov eax, dword [ebx + 4]
call fcn.00457d88
pop eax
add esp, 4
fldcw word [ebp - 0x10]
pop dword [ebp - 0x30]
cmp eax, dword [ebp - 0x30]
je 0x43cdf3
mov eax, esi
push eax
call dword [sym.imp.ADVAPI32.DLL_RegCloseKey]
fldcw word [ebp - 0x10]
jmp 0x43d0eb
push 0
push 0
push 4
lea ebx, [ebp - 0xa0]
mov dword [ebx], edi
push ebx
push 4
push 0
mov edx, 0x186841c
call fcn.0045d0ba
lea ebx, [esp + 0x10]
call fcn.0045c36b
mov eax, esi
push eax
call dword [sym.imp.ADVAPI32.DLL_RegSetValueExA]
push eax
mov ebx, esp
mov eax, dword [ebx + 4]
call fcn.00457d88
pop eax
add esp, 4
mov edi, dword [ebp - 0xa0]
fldcw word [ebp - 0x10]
pop dword [ebp - 0x30]
cmp eax, dword [ebp - 0x30]
je 0x43ce57
mov eax, esi
push eax
call dword [sym.imp.ADVAPI32.DLL_RegCloseKey]
fldcw word [ebp - 0x10]
jmp 0x43d0eb
lea ebx, [ebp + 8]
call fcn.0045ce8d
lea ebx, [ebp - 0x1a4]
mov ecx, 0x104
call fcn.0045ced6
lea ebx, [ebp - 0x1a4]
call fcn.0045ce8d
xor eax, eax
call fcn.0045300c
lea ebx, [ebp - 0x1a4]
mov ecx, 0x104
call fcn.0045ced6
push 0
push 0
lea ebx, [ebp - 0x1a4]
call fcn.0045ce8d
call fcn.0045d088
push eax
lea ebx, [ebp - 0x1a4]
push ebx
push 1
push 0
mov edx, 0x186842c
call fcn.0045d0ba
lea ebx, [esp + 0x10]
call fcn.0045c36b
mov eax, esi
push eax
call dword [sym.imp.ADVAPI32.DLL_RegSetValueExA]
push eax
mov ebx, esp
mov eax, dword [ebx + 4]
call fcn.00457d88
pop eax
add esp, 4
fldcw word [ebp - 0x10]
pop dword [ebp - 0x30]
cmp eax, dword [ebp - 0x30]
je 0x43cefc
mov eax, esi
push eax
call dword [sym.imp.ADVAPI32.DLL_RegCloseKey]
fldcw word [ebp - 0x10]
jmp 0x43d0eb
lea ebx, [ebp - 0x1a4]
call fcn.0045ce8d
mov edx, 0x1861cd8
call fcn.0045d0ba
call fcn.0045b2a4
mov edi, eax
push 0
push 0
push 4
lea ebx, [ebp - 0xa0]
mov dword [ebx], edi
push ebx
push 4
push 0
mov edx, 0x186843c
call fcn.0045d0ba
lea ebx, [esp + 0x10]
call fcn.0045c36b
mov eax, esi
push eax
call dword [sym.imp.ADVAPI32.DLL_RegSetValueExA]
push eax
mov ebx, esp
mov eax, dword [ebx + 4]
call fcn.00457d88
pop eax
add esp, 4
mov edi, dword [ebp - 0xa0]
fldcw word [ebp - 0x10]
pop dword [ebp - 0x30]
cmp eax, dword [ebp - 0x30]
je 0x43cf7c
mov eax, esi
push eax
call dword [sym.imp.ADVAPI32.DLL_RegCloseKey]
fldcw word [ebp - 0x10]
jmp 0x43d0eb
mov edx, 0x18609c8
call fcn.0045d0ba
lea ebx, [ebp - 0x1a4]
mov ecx, 0x104
call fcn.0045ced6
push 0
push 0
lea ebx, [ebp - 0x1a4]
call fcn.0045ce8d
call fcn.0045d088
push eax
lea ebx, [ebp - 0x1a4]
push ebx
push 1
push 0
mov edx, 0x186844c
call fcn.0045d0ba
lea ebx, [esp + 0x10]
call fcn.0045c36b
mov eax, esi
push eax
call dword [sym.imp.ADVAPI32.DLL_RegSetValueExA]
push eax
mov ebx, esp
mov eax, dword [ebx + 4]
call fcn.00457d88
pop eax
add esp, 4
fldcw word [ebp - 0x10]
pop dword [ebp - 0x30]
cmp eax, dword [ebp - 0x30]
je 0x43d001
mov eax, esi
push eax
call dword [sym.imp.ADVAPI32.DLL_RegCloseKey]
fldcw word [ebp - 0x10]
jmp 0x43d0eb
mov edi, 0
push 0
push 0
push 4
lea ebx, [ebp - 0xa0]
mov dword [ebx], edi
push ebx
push 4
push 0
mov edx, 0x1868460
call fcn.0045d0ba
lea ebx, [esp + 0x10]
call fcn.0045c36b
mov eax, esi
push eax
call dword [sym.imp.ADVAPI32.DLL_RegSetValueExA]
push eax
mov ebx, esp
mov eax, dword [ebx + 4]
call fcn.00457d88
pop eax
add esp, 4
mov edi, dword [ebp - 0xa0]
fldcw word [ebp - 0x10]
pop dword [ebp - 0x30]
cmp eax, dword [ebp - 0x30]
je 0x43d06b
mov eax, esi
push eax
call dword [sym.imp.ADVAPI32.DLL_RegCloseKey]
fldcw word [ebp - 0x10]
jmp 0x43d0eb
mov edi, 1
push 0
push 0
push 4
lea ebx, [ebp - 0xa0]
mov dword [ebx], edi
push ebx
push 4
push 0
mov edx, 0x1868478
call fcn.0045d0ba
lea ebx, [esp + 0x10]
call fcn.0045c36b
mov eax, esi
push eax
call dword [sym.imp.ADVAPI32.DLL_RegSetValueExA]
push eax
mov ebx, esp
mov eax, dword [ebx + 4]
call fcn.00457d88
pop eax
add esp, 4
mov edi, dword [ebp - 0xa0]
fldcw word [ebp - 0x10]
pop dword [ebp - 0x30]
cmp eax, dword [ebp - 0x30]
je 0x43d0d5
mov eax, esi
push eax
call dword [sym.imp.ADVAPI32.DLL_RegCloseKey]
fldcw word [ebp - 0x10]
jmp 0x43d0eb
mov dword [ebp - 0x98], 1
mov eax, esi
push eax
call dword [sym.imp.ADVAPI32.DLL_RegCloseKey]
fldcw word [ebp - 0x10]
mov eax, dword [ebp - 0x98]
lea esp, [ebp - 0xc]
pop edi
pop esi
pop ebx
pop ebp
ret 0x200