Function at 0x42d9f0
Capabilities:
Set registry value

Disassembly:
push ecx
push esi
mov esi, ecx
mov edx, dword [esp + 0xc]
lea eax, [esp + 4]
lea ecx, [esp + 0xc]
push eax
push ecx
push 0
push 0x20006
push 0
push 0x4fbe40
push 0
push edx
push 0x80000001
call dword [sym.imp.advapi32.dll_RegCreateKeyExA]
test eax, eax
je 0x42da29
xor eax, eax
pop esi
pop ecx
ret 4
mov ecx, dword [esp + 0xc]
push ebx
push ebp
push edi
mov edi, dword [sym.imp.advapi32.dll_RegSetValueExA]
lea eax, [esi + 0x1c]
push 4
push eax
push 3
push 0
push 0x4ef750
push ecx
call edi
mov eax, dword [esp + 0x18]
lea edx, [esi + 0x134]
push 4
push edx
push 3
push 0
push 0x4ef744
push eax
call edi
mov edx, dword [esp + 0x18]
lea ecx, [esi + 0x1d0]
push 4
push ecx
push 3
push 0
push 0x4ef73c
push edx
call edi
mov ecx, dword [esp + 0x18]
lea eax, [esi + 0x1d4]
push 4
push eax
push 3
push 0
push 0x4ef734
push ecx
call edi
mov edx, dword [esp + 0x18]
push 4
push esi
push 3
push 0
push 0x4ef728
push edx
call edi
mov ecx, dword [esp + 0x18]
lea eax, [esi + 8]
push 4
push eax
push 3
push 0
push 0x4ef71c
push ecx
call edi
mov eax, dword [esp + 0x18]
lea edx, [esi + 0x168]
push 4
push edx
push 3
push 0
push 0x4ef710
push eax
call edi
mov edx, dword [esp + 0x18]
lea ecx, [esi + 0x16c]
push 4
push ecx
push 3
push 0
push 0x4ef700
push edx
call edi
lea eax, [esi + 0x170]
push 4
push eax
push 3
push 0
push 0x4ef6f4
mov ecx, dword [esp + 0x2c]
push ecx
call edi
mov eax, dword [esp + 0x18]
lea edx, [esi + 0x174]
push 4
push edx
push 3
push 0
push 0x4ef6e8
push eax
call edi
mov edx, dword [esp + 0x18]
lea ecx, [esi + 0x178]
push 4
push ecx
push 3
push 0
push 0x4ef6dc
push edx
call edi
mov ecx, dword [esp + 0x18]
lea eax, [esi + 0x17c]
push 4
push eax
push 3
push 0
push 0x4ef6d0
push ecx
call edi
mov eax, dword [esp + 0x18]
lea edx, [esi + 0x180]
push 4
push edx
push 3
push 0
push 0x4ef6c4
push eax
call edi
mov edx, dword [esp + 0x18]
lea ecx, [esi + 0x184]
push 4
push ecx
push 3
push 0
push 0x4ef6b8
push edx
call edi
mov ecx, dword [esp + 0x18]
lea eax, [esi + 0x1d8]
push 8
push eax
push 3
push 0
push 0x4ef6a8
push ecx
call edi
mov eax, dword [esp + 0x18]
lea edx, [esi + 0x224]
push 4
push edx
push 3
push 0
push 0x4ef698
push eax
call edi
mov edx, dword [esp + 0x18]
lea ecx, [esi + 0x228]
push 4
push ecx
push 3
push 0
push 0x4ef688
push edx
call edi
lea eax, [esi + 0x22c]
push 4
push eax
push 3
push 0
push 0x4ef67c
mov ecx, dword [esp + 0x2c]
push ecx
call edi
mov eax, dword [esp + 0x18]
lea edx, [esi + 0x230]
push 4
push edx
push 3
push 0
push 0x4ef66c
push eax
call edi
mov edx, dword [esp + 0x18]
lea ecx, [esi + 0x234]
push 4
push ecx
push 3
push 0
push 0x4ef658
push edx
call edi
mov ecx, dword [esp + 0x18]
lea eax, [esi + 0x238]
push 4
push eax
push 3
push 0
push 0x4ef648
push ecx
call edi
mov eax, dword [esp + 0x18]
lea edx, [esi + 0x23c]
push 4
push edx
push 3
push 0
push 0x4ef634
push eax
call edi
mov edx, dword [esp + 0x18]
lea ecx, [esi + 0x218]
push 4
push ecx
push 3
push 0
push 0x4ef624
push edx
call edi
mov ecx, dword [esp + 0x18]
lea eax, [esi + 0x21c]
push 4
push eax
push 3
push 0
push 0x4ef614
push ecx
call edi
mov eax, dword [esp + 0x18]
lea edx, [esi + 0x220]
push 4
push edx
push 3
push 0
push 0x4ef608
push eax
call edi
mov edx, dword [esp + 0x18]
lea ecx, [esi + 0x2bc]
push 4
push ecx
push 3
push 0
push 0x4ef5f8
push edx
call edi
lea eax, [esi + 0x2b8]
push 4
push eax
push 3
push 0
push 0x4ef5e8
mov ecx, dword [esp + 0x2c]
push ecx
call edi
mov eax, dword [esp + 0x18]
lea edx, [esi + 0x2c5]
push 0x30
push edx
push 3
push 0
push 0x4ef5dc
push eax
call edi
mov edx, dword [esp + 0x18]
lea ecx, [esi + 0x2f8]
push 0x3c
push ecx
push 3
push 0
push 0x4ef5cc
push edx
call edi
mov ecx, dword [esp + 0x18]
lea eax, [esi + 0x338]
push 4
push eax
push 3
push 0
push 0x4ef5bc
push ecx
call edi
mov eax, dword [esp + 0x18]
lea edx, [esi + 0x33c]
push 4
push edx
push 3
push 0
push 0x4ef5ac
push eax
call edi
mov edx, dword [esp + 0x18]
lea ecx, [esi + 0x560]
push 4
push ecx
push 3
push 0
push 0x4ef59c
push edx
call edi
mov ecx, dword [esp + 0x18]
lea eax, [esi + 0x564]
push 4
push eax
push 3
push 0
push 0x4ef58c
push ecx
call edi
mov eax, dword [esp + 0x18]
lea edx, [esi + 0x568]
push 4
push edx
push 3
push 0
push 0x4ef57c
push eax
call edi
mov edx, dword [esp + 0x18]
lea ecx, [esi + 0x56c]
push 4
push ecx
push 3
push 0
push 0x4ef568
push edx
call edi
lea eax, [esi + 0x578]
push 4
push eax
push 3
push 0
push 0x4ef558
mov ecx, dword [esp + 0x2c]
push ecx
call edi
mov eax, dword [esp + 0x18]
lea edx, [esi + 0x57c]
push 4
push edx
push 3
push 0
push 0x4ef548
push eax
call edi
mov edx, dword [esp + 0x18]
lea ecx, [esi + 0x5e0]
push 0x10
push ecx
push 3
push 0
push 0x4ef53c
push edx
call edi
mov ecx, dword [esp + 0x18]
lea eax, [esi + 0x5f4]
push 0xc
push eax
push 3
push 0
push 0x4ef530
push ecx
call edi
mov eax, dword [esp + 0x18]
lea edx, [esi + 0x604]
push 4
push edx
push 3
push 0
push 0x4ef524
push eax
call edi
mov edx, dword [esp + 0x18]
lea ecx, [esi + 0x1b8]
push 0x18
push ecx
push 3
push 0
push 0x4ef518
push edx
call edi
mov ecx, dword [esp + 0x18]
lea eax, [esi + 0x188]
push 0x18
push eax
push 3
push 0
push 0x4ef508
push ecx
call edi
mov eax, dword [esp + 0x18]
lea edx, [esi + 0x1a0]
push 0x18
push edx
push 3
push 0
push 0x4ef4fc
push eax
call edi
mov ebp, dword [sym.imp.kernel32.dll_lstrlen]
lea ebx, [esi + 0x340]
push ebx
call ebp
mov ecx, dword [esp + 0x18]
inc eax
push eax
push ebx
push 1
push 0
push 0x4ef4e8
push ecx
call edi
mov eax, dword [esi + 0x24]
test eax, eax
je 0x42de9b
add esi, 0x28
push esi
call ebp
mov edx, dword [esp + 0x18]
inc eax
push eax
push esi
push 1
push 0
push 0x4ef4dc
push edx
call edi
mov eax, dword [esp + 0x18]
push eax
call dword [sym.imp.advapi32.dll_RegCloseKey]
pop edi
pop ebp
pop ebx
mov eax, 1
pop esi
pop ecx
ret 4