Function at 0x443310
Capabilities:
Disable system features via registry on windows
Set registry value

Disassembly:
sub esp, 0xc
lea eax, [esp]
push ebx
push ebp
push esi
mov esi, dword [sym.imp.ADVAPI32.dll_RegCreateKeyExW]
push edi
push 0
push eax
push 0
push 0xf013f
push 0
push 0
push 0
push 0x4b1d18
push 0x80000001
call esi
mov edi, dword [sym.imp.user32.dll_SendMessageW]
mov ebx, dword [sym.imp.user32.dll_GetDlgItem]
mov ebp, dword [sym.imp.ADVAPI32.dll_RegSetValueExW]
test eax, eax
jne 0x44338f
push 0
push 0
push 0xf0
push 0x2901
push dword [0x4def88]
call ebx
push eax
call edi
push 4
mov dword [esp + 0x18], eax
lea eax, [esp + 0x18]
push eax
push 4
push 0
push 0x4b3014
push dword [esp + 0x24]
call ebp
push dword [esp + 0x10]
call dword [sym.imp.ADVAPI32.dll_RegCloseKey]
push 0
lea eax, [esp + 0x14]
push eax
push 0
push 0xf013f
push 0
push 0
push 0
push 0x4b1d18
push 0x80000001
call esi
test eax, eax
jne 0x4433ee
push eax
push eax
push 0xf0
push 0x2902
push dword [0x4def88]
call ebx
push eax
call edi
push 4
mov dword [esp + 0x18], eax
lea eax, [esp + 0x18]
push eax
push 4
push 0
push 0x4b3028
push dword [esp + 0x24]
call ebp
push dword [esp + 0x10]
call dword [sym.imp.ADVAPI32.dll_RegCloseKey]
push 0
lea eax, [esp + 0x14]
push eax
push 0
push 0xf013f
push 0
push 0
push 0
push 0x4b1d18
push 0x80000001
call esi
test eax, eax
jne 0x44344d
push eax
push eax
push 0xf0
push 0x2903
push dword [0x4def88]
call ebx
push eax
call edi
push 4
mov dword [esp + 0x18], eax
lea eax, [esp + 0x18]
push eax
push 4
push 0
push 0x4b3054
push dword [esp + 0x24]
call ebp
push dword [esp + 0x10]
call dword [sym.imp.ADVAPI32.dll_RegCloseKey]
push 0
lea eax, [esp + 0x14]
push eax
push 0
push 0xf013f
push 0
push 0
push 0
push 0x4b1d18
push 0x80000001
call esi
test eax, eax
jne 0x4434ac
push eax
push eax
push 0xf0
push 0x2904
push dword [0x4def88]
call ebx
push eax
call edi
push 4
mov dword [esp + 0x18], eax
lea eax, [esp + 0x18]
push eax
push 4
push 0
push 0x4b3078
push dword [esp + 0x24]
call ebp
push dword [esp + 0x10]
call dword [sym.imp.ADVAPI32.dll_RegCloseKey]
push 0
lea eax, [esp + 0x14]
push eax
push 0
push 0xf013f
push 0
push 0
push 0
push 0x4b1d18
push 0x80000001
call esi
test eax, eax
jne 0x44350b
push eax
push eax
push 0xf0
push 0x2905
push dword [0x4def88]
call ebx
push eax
call edi
push 4
mov dword [esp + 0x18], eax
lea eax, [esp + 0x18]
push eax
push 4
push 0
push 0x4b30a4
push dword [esp + 0x24]
call ebp
push dword [esp + 0x10]
call dword [sym.imp.ADVAPI32.dll_RegCloseKey]
push 0
lea eax, [esp + 0x18]
push eax
push 0
push 0xf013f
push 0
push 0
push 0
push 0x4b15f0
push 0x80000001
call esi
test eax, eax
jne 0x44356a
push eax
push eax
push 0xf0
push 0x2906
push dword [0x4def88]
call ebx
push eax
call edi
push 4
mov dword [esp + 0x1c], eax
lea eax, [esp + 0x1c]
push eax
push 4
push 0
push 0x4b30cc
push dword [esp + 0x28]
call ebp
push dword [esp + 0x14]
call dword [sym.imp.ADVAPI32.dll_RegCloseKey]
push 0
lea eax, [esp + 0x18]
push eax
push 0
push 0xf013f
push 0
push 0
push 0
push 0x4b15f0
push 0x80000001
call esi
test eax, eax
jne 0x4435c9
push eax
push eax
push 0xf0
push 0x2907
push dword [0x4def88]
call ebx
push eax
call edi
push 4
mov dword [esp + 0x1c], eax
lea eax, [esp + 0x1c]
push eax
push 4
push 0
push 0x4b30f0
push dword [esp + 0x28]
call ebp
push dword [esp + 0x14]
call dword [sym.imp.ADVAPI32.dll_RegCloseKey]
push 0
lea eax, [esp + 0x18]
push eax
push 0
push 0xf013f
push 0
push 0
push 0
push 0x4b15f0
push 0x80000001
call esi
test eax, eax
jne 0x443628
push eax
push eax
push 0xf0
push 0x2908
push dword [0x4def88]
call ebx
push eax
call edi
push 4
mov dword [esp + 0x1c], eax
lea eax, [esp + 0x1c]
push eax
push 4
push 0
push 0x4b313c
push dword [esp + 0x28]
call ebp
push dword [esp + 0x14]
call dword [sym.imp.ADVAPI32.dll_RegCloseKey]
push 0
lea eax, [esp + 0x18]
push eax
push 0
push 0xf013f
push 0
push 0
push 0
push 0x4b1d18
push 0x80000001
call esi
test eax, eax
jne 0x443687
push eax
push eax
push 0xf0
push 0x2909
push dword [0x4def88]
call ebx
push eax
call edi
push 4
mov dword [esp + 0x1c], eax
lea eax, [esp + 0x1c]
push eax
push 4
push 0
push 0x4b3154
push dword [esp + 0x28]
call ebp
push dword [esp + 0x14]
call dword [sym.imp.ADVAPI32.dll_RegCloseKey]
pop edi
pop esi
pop ebp
pop ebx
add esp, 0xc
ret