Function at 0x4d29f0
Capabilities:
Set registry value

Disassembly:
push ebp
mov ebp, esp
movzx eax, word [ebp + 8]
sub esp, 0xc
sub eax, 1
push ebx
mov bx, word [ebp + 0x10]
je 0x4d2a21
sub eax, 1
je 0x4d2bb7
sub eax, 1
jne 0x4d2bc1
cmp word [ebp + 0xc], 0x1e
ja 0x4d2bc1
mov dx, word [ebp + 0x14]
cmp dx, 0x18
jae 0x4d2bc1
mov cx, word [ebp + 0x18]
cmp cx, 0x3c
jae 0x4d2bc1
movzx ax, bl
movzx dx, dl
shl ax, 8
push esi
movzx esi, byte [ebp + 0xc]
shl dx, 8
movzx eax, ax
or eax, esi
mov esi, dword [sym.imp.ADVAPI32.dll_RegCreateKeyA]
movzx edx, dx
movzx ecx, cl
or edx, ecx
shl eax, 0x10
add eax, edx
xor ebx, ebx
xor edx, edx
push edi
mov edi, dword [sym.imp.SHLWAPI.dll_SHSetValueA]
mov dword [ebp - 0xc], eax
cmp dword [0x5993b0], ebx
jne 0x4d2bc8
cmp edx, str.software360TotalSecurity
je 0x4d2b18
xor eax, eax
cmp eax, str.TrashClean
je 0x4d2b18
xor ecx, ecx
cmp ecx, str.Scheme
je 0x4d2b18
mov edx, dword [0x599458]
mov eax, dword [edx + 0xc]
mov ecx, 0x599458
call eax
push str.TrashClean
push str.software360TotalSecurity
lea ecx, [ebp - 8]
add eax, 0x10
push str._s_s
push ecx
mov dword [ebp - 8], eax
call fcn.004a19c0
add esp, 0x10
lea edx, [ebp - 4]
push edx
push str.software360TotalSecurity
push SysReAllocString
mov dword [ebp - 4], ebx
call esi
test eax, eax
jne 0x4d2af8
mov eax, dword [ebp - 4]
push eax
call dword [sym.imp.ADVAPI32.dll_RegCloseKey]
mov dword [ebp - 4], ebx
mov edx, dword [ebp - 8]
push 4
lea ecx, [ebp - 0xc]
push ecx
push 4
push str.Scheme
push edx
push SysReAllocString
call edi
lea ecx, [ebp - 8]
call fcn.00443d90
movzx eax, word [ebp + 8]
mov dword [ebp - 0xc], eax
xor eax, eax
cmp eax, str.software360TotalSecurity
je 0x4d2d11
xor ecx, ecx
cmp ecx, str.TrashClean
je 0x4d2d11
xor edx, edx
cmp edx, str.Period
je 0x4d2d11
mov eax, dword [0x599458]
mov edx, dword [eax + 0xc]
mov ecx, 0x599458
call edx
push str.TrashClean
add eax, 0x10
push str.software360TotalSecurity
mov dword [ebp - 8], eax
lea eax, [ebp - 8]
push str._s_s
push eax
call fcn.004a19c0
add esp, 0x10
lea ecx, [ebp + 8]
push ecx
push str.software360TotalSecurity
push SysReAllocString
mov dword [ebp + 8], ebx
call esi
test eax, eax
jne 0x4d2b9c
mov edx, dword [ebp + 8]
push edx
call dword [sym.imp.ADVAPI32.dll_RegCloseKey]
mov dword [ebp + 8], ebx
mov ecx, dword [ebp - 8]
push 4
lea eax, [ebp - 0xc]
push eax
push 4
push str.Period
push ecx
push SysReAllocString
jmp 0x4d2cf6
cmp bx, 6
jbe 0x4d2a21
xor eax, eax
pop ebx
mov esp, ebp
pop ebp
ret
cmp edx, str.software360TotalSecurity
je 0x4d2c5c
xor eax, eax
cmp eax, str.TrashClean
je 0x4d2c5c
xor ecx, ecx
cmp ecx, str.Scheme
je 0x4d2c5c
mov edx, dword [0x599458]
mov eax, dword [edx + 0xc]
mov ecx, 0x599458
call eax
push str.TrashClean
push str.software360TotalSecurity
lea ecx, [ebp - 4]
add eax, 0x10
push str._s_s
push ecx
mov dword [ebp - 4], eax
call fcn.004a19c0
add esp, 0x10
lea edx, [ebp - 8]
push edx
push str.software360TotalSecurity
push reloc.OLEAUT32.dll_SysReAllocString
mov dword [ebp - 8], ebx
call esi
test eax, eax
jne 0x4d2c3c
mov eax, dword [ebp - 8]
push eax
call dword [sym.imp.ADVAPI32.dll_RegCloseKey]
mov dword [ebp - 8], ebx
mov edx, dword [ebp - 4]
push 4
lea ecx, [ebp - 0xc]
push ecx
push 4
push str.Scheme
push edx
push reloc.OLEAUT32.dll_SysReAllocString
call edi
lea ecx, [ebp - 4]
call fcn.00443d90
movzx eax, word [ebp + 8]
mov dword [ebp - 0xc], eax
xor eax, eax
cmp eax, str.software360TotalSecurity
je 0x4d2d11
xor ecx, ecx
cmp ecx, str.TrashClean
je 0x4d2d11
xor edx, edx
cmp edx, str.Period
je 0x4d2d11
mov eax, dword [0x599458]
mov edx, dword [eax + 0xc]
mov ecx, 0x599458
call edx
push str.TrashClean
add eax, 0x10
push str.software360TotalSecurity
mov dword [ebp - 8], eax
lea eax, [ebp - 8]
push str._s_s
push eax
call fcn.004a19c0
add esp, 0x10
lea ecx, [ebp + 8]
push ecx
push str.software360TotalSecurity
push reloc.OLEAUT32.dll_SysReAllocString
mov dword [ebp + 8], ebx
call esi
test eax, eax
jne 0x4d2ce0
mov edx, dword [ebp + 8]
push edx
call dword [sym.imp.ADVAPI32.dll_RegCloseKey]
mov dword [ebp + 8], ebx
mov ecx, dword [ebp - 8]
push 4
lea eax, [ebp - 0xc]
push eax
push 4
push str.Period
push ecx
push reloc.OLEAUT32.dll_SysReAllocString
call edi
test eax, eax
lea ecx, [ebp - 8]
sete bl
call fcn.00443d90
pop edi
mov al, bl
pop esi
movzx eax, al
pop ebx
mov esp, ebp
pop ebp
ret
pop edi
xor al, al
pop esi
movzx eax, al
pop ebx
mov esp, ebp
pop ebp
ret