Function at 0x4d708
Capabilities:
Set registry value

Disassembly:
push ebp
mov ebp, esp
add esp, 0xffffffec
push ebx
push esi
push edi
xor edx, edx
mov dword [ebp - 0x14], edx
mov dword [ebp - 0x10], edx
lea ebx, [ebp - 8]
xor edx, edx
push ebp
push 0x4d9ff
push dword fs:[edx]
mov dword fs:[edx], esp
xor edx, edx
push ebp
push 0x4d9da
push dword fs:[edx]
mov dword fs:[edx], esp
test al, al
je 0x4d773
lea eax, [ebp - 4]
push eax
push ebx
push 0
mov eax, dword [0x2514d0]
mov eax, dword [eax]
add eax, 0xf003f
push eax
push 0
push 0
push 0
lea eax, [ebp - 0x10]
call fcn.00026f34
mov eax, dword [ebp - 0x10]
call fcn.0001416c
push eax
push 0x80000002
call sub.advapi32.dll_RegCreateKeyExA
jmp 0x4d79e
push ebx
mov eax, dword [0x2514d0]
mov eax, dword [eax]
add eax, 0xf003f
push eax
push 0
lea eax, [ebp - 0x14]
call fcn.00026f34
mov eax, dword [ebp - 0x14]
call fcn.0001416c
push eax
push 0x80000002
call sub.advapi32.dll_RegOpenKeyExA_1
cmp dword [ebx], 0
je 0x4d9d0
mov dword [ebp - 0xc], 1
push 4
lea eax, [ebp - 0xc]
push eax
push 4
push 0
push 0x4da10
mov eax, dword [ebx]
push eax
call sub.advapi32.dll_RegSetValueExA
mov eax, dword [ebx]
push eax
call sub.advapi32.dll_RegCloseKey_1
lea eax, [ebp - 4]
push eax
push ebx
push 0
mov eax, dword [0x2514d0]
mov eax, dword [eax]
add eax, 0xf003f
push eax
push 0
push 0
push 0
push 0x4da1c
push 0x80000002
call sub.advapi32.dll_RegCreateKeyExA
cmp dword [ebx], 0
je 0x4d819
mov dword [ebp - 0xc], 1
push 4
lea eax, [ebp - 0xc]
push eax
push 4
push 0
push 0x4da5c
mov eax, dword [ebx]
push eax
call sub.advapi32.dll_RegSetValueExA
cmp dword [ebx], 0
je 0x4d826
mov eax, dword [ebx]
push eax
call sub.advapi32.dll_RegCloseKey_1
xor eax, eax
mov dword [ebx], eax
lea eax, [ebp - 4]
push eax
push ebx
push 0
mov eax, dword [0x2514d0]
mov eax, dword [eax]
add eax, 0xf003f
push eax
push 0
push 0
push 0
push 0x4da78
push 0x80000002
call sub.advapi32.dll_RegCreateKeyExA
cmp dword [ebx], 0
je 0x4d8f0
mov dword [ebp - 0xc], 0x1869f
push 4
lea eax, [ebp - 0xc]
push eax
push 4
push 0
push 0x4dab4
mov eax, dword [ebx]
push eax
call sub.advapi32.dll_RegSetValueExA
xor eax, eax
mov dword [ebp - 0xc], eax
push 4
lea eax, [ebp - 0xc]
push eax
push 4
push 0
push 0x4dac8
mov eax, dword [ebx]
push eax
call sub.advapi32.dll_RegSetValueExA
mov dword [ebp - 0xc], 1
push 4
lea eax, [ebp - 0xc]
push eax
push 4
push 0
push 0x4dadc
mov eax, dword [ebx]
push eax
call sub.advapi32.dll_RegSetValueExA
mov dword [ebp - 0xc], 1
push 4
lea eax, [ebp - 0xc]
push eax
push 4
push 0
push 0x4dae8
mov eax, dword [ebx]
push eax
call sub.advapi32.dll_RegSetValueExA
mov dword [ebp - 0xc], 5
push 4
lea eax, [ebp - 0xc]
push eax
push 4
push 0
push 0x4daf8
mov eax, dword [ebx]
push eax
call sub.advapi32.dll_RegSetValueExA
cmp dword [ebx], 0
je 0x4d8fd
mov eax, dword [ebx]
push eax
call sub.advapi32.dll_RegCloseKey_1
xor eax, eax
mov dword [ebx], eax
lea eax, [ebp - 4]
push eax
push ebx
push 0
mov eax, dword [0x2514d0]
mov eax, dword [eax]
add eax, 0xf003f
push eax
push 0
push 0
push 0
push 0x4db04
push 0x80000002
call sub.advapi32.dll_RegCreateKeyExA
cmp dword [ebx], 0
je 0x4d969
mov dword [ebp - 0xc], 1
push 4
lea eax, [ebp - 0xc]
push eax
push 4
push 0
push 0x4db3c
mov eax, dword [ebx]
push eax
call sub.advapi32.dll_RegSetValueExA
xor eax, eax
mov dword [ebp - 0xc], eax
push 4
lea eax, [ebp - 0xc]
push eax
push 4
push 0
push 0x4db54
mov eax, dword [ebx]
push eax
call sub.advapi32.dll_RegSetValueExA
cmp dword [ebx], 0
je 0x4d976
mov eax, dword [ebx]
push eax
call sub.advapi32.dll_RegCloseKey_1
xor eax, eax
mov dword [ebx], eax
lea eax, [ebp - 4]
push eax
push ebx
push 0
mov eax, dword [0x2514d0]
mov eax, dword [eax]
add eax, 0xf003f
push eax
push 0
push 0
push 0
push 0x4db60
push 0x80000002
call sub.advapi32.dll_RegCreateKeyExA
xor eax, eax
mov dword [ebp - 0xc], eax
push 4
lea eax, [ebp - 0xc]
push eax
push 4
push 0
push 0x4dba8
mov eax, dword [ebx]
push eax
call sub.advapi32.dll_RegSetValueExA
cmp dword [ebx], 0
je 0x4d9cc
mov eax, dword [ebx]
push eax
call sub.advapi32.dll_RegCloseKey_1
xor eax, eax
mov dword [ebx], eax
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0x4d9e4
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
push 0x4da06
lea eax, [ebp - 0x14]
mov edx, 2
call fcn.00013d3c
ret