Function at 0x4c2ca4
Capabilities:
Set registry value

Disassembly:
push ebx
push esi
push edi
push ebp
push ecx
mov esi, 0x504a33
mov edi, 0x4fb8f0
mov ebp, esp
push ebp
push edi
push 0x80000000
call sub.ADVAPI32.dll_RegCreateKeyA
mov ebx, eax
test ebx, ebx
je 0x4c2cce
xor eax, eax
jmp 0x4c2eb0
push esi
push edi
lea eax, [edi + 6]
mov edi, esi
mov esi, eax
mov eax, edi
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsb byte es:[edi], byte [esi]
pop edi
pop esi
push esi
call fcn.00401318
pop ecx
inc eax
push eax
push esi
push 1
lea edx, [edi + 0x10]
push edx
mov ecx, dword [ebp]
push ecx
call sub.ADVAPI32.dll_RegSetValueA
mov ebx, eax
mov eax, dword [ebp]
push eax
call sub.ADVAPI32.dll_RegCloseKey
test ebx, ebx
je 0x4c2d0d
xor eax, eax
jmp 0x4c2eb0
push ebp
lea edx, [edi + 0x12]
push edx
push 0x80000000
call sub.ADVAPI32.dll_RegCreateKeyA
mov ebx, eax
test ebx, ebx
je 0x4c2d29
xor eax, eax
jmp 0x4c2eb0
push esi
push edi
lea eax, [edi + 0x19]
mov edi, esi
mov esi, eax
mov eax, edi
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsb byte es:[edi], byte [esi]
pop edi
pop esi
push esi
call fcn.00401318
pop ecx
inc eax
push eax
push esi
push 1
lea edx, [edi + 0x23]
push edx
mov ecx, dword [ebp]
push ecx
call sub.ADVAPI32.dll_RegSetValueA
mov ebx, eax
mov eax, dword [ebp]
push eax
call sub.ADVAPI32.dll_RegCloseKey
test ebx, ebx
je 0x4c2d68
xor eax, eax
jmp 0x4c2eb0
push esi
push edi
lea eax, [edi + 0x25]
mov edi, esi
mov esi, eax
mov eax, edi
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsb byte es:[edi], byte [esi]
pop edi
pop esi
push ebp
push esi
push 0x80000000
call sub.ADVAPI32.dll_RegCreateKeyA
mov ebx, eax
test ebx, ebx
je 0x4c2d91
xor eax, eax
jmp 0x4c2eb0
push esi
push edi
lea eax, [edi + 0x2f]
mov edi, esi
mov esi, eax
mov eax, edi
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsw word es:[edi], word [esi]
pop edi
pop esi
push esi
call fcn.00401318
pop ecx
inc eax
push eax
push esi
push 1
lea edx, [edi + 0x3a]
push edx
mov ecx, dword [ebp]
push ecx
call sub.ADVAPI32.dll_RegSetValueA
mov ebx, eax
mov eax, dword [ebp]
push eax
call sub.ADVAPI32.dll_RegCloseKey
test ebx, ebx
je 0x4c2dd1
xor eax, eax
jmp 0x4c2eb0
push esi
push edi
lea eax, [edi + 0x3c]
mov edi, esi
mov esi, eax
mov eax, edi
mov ecx, 5
rep movsd dword es:[edi], dword [esi]
movsb byte es:[edi], byte [esi]
pop edi
pop esi
push ebp
push esi
push 0x80000000
call sub.ADVAPI32.dll_RegCreateKeyA
mov ebx, eax
test ebx, ebx
je 0x4c2dff
xor eax, eax
jmp 0x4c2eb0
push 0x4f7cec
lea edx, [edi + 0x52]
push edx
push esi
call sub.USER32.dll_wsprintfA
add esp, 0xc
push esi
call fcn.00401318
pop ecx
inc eax
push eax
push esi
push 1
lea ecx, [edi + 0x63]
push ecx
mov eax, dword [ebp]
push eax
call sub.ADVAPI32.dll_RegSetValueA
mov ebx, eax
mov eax, dword [ebp]
push eax
call sub.ADVAPI32.dll_RegCloseKey
test ebx, ebx
je 0x4c2e3d
xor eax, eax
jmp 0x4c2eb0
push esi
push edi
lea eax, [edi + 0x65]
mov edi, esi
mov esi, eax
mov eax, edi
mov ecx, 7
rep movsd dword es:[edi], dword [esi]
pop edi
pop esi
push ebp
push esi
push 0x80000000
call sub.ADVAPI32.dll_RegCreateKeyA
mov ebx, eax
test ebx, ebx
je 0x4c2e67
xor eax, eax
jmp 0x4c2eb0
push 0x4f7cec
lea edx, [edi + 0x82]
push edx
push esi
call sub.USER32.dll_wsprintfA
add esp, 0xc
push esi
call fcn.00401318
pop ecx
inc eax
push eax
push esi
push 1
lea ecx, [edi + 0x97]
push ecx
mov eax, dword [ebp]
push eax
call sub.ADVAPI32.dll_RegSetValueA
mov ebx, eax
mov eax, dword [ebp]
push eax
call sub.ADVAPI32.dll_RegCloseKey
test ebx, ebx
je 0x4c2eab
xor eax, eax
jmp 0x4c2eb0
mov eax, 1
pop edx
pop ebp
pop edi
pop esi
pop ebx
ret