Function at 0x449342
Capabilities:
Set registry value

Disassembly:
push ebx
push edi
mov edx, 0x8a
sub esp, 4
mov dword [esp], 0
dec edx
jne 0x449349
mov edx, dword [esp + 0x238]
lea ecx, [esp]
call fcn.00401000
mov edx, dword [esp + 0x23c]
lea ecx, [esp + 4]
call fcn.00401000
mov edx, dword [esp + 0x240]
lea ecx, [esp + 8]
call fcn.00401000
mov edx, dword [esp + 0x248]
lea ecx, [esp + 0xc]
call fcn.00401000
mov dword [0x442510], 0
push dword [0x4430a4]
push dword [0x4430a4]
push 1
push dword [esp + 0xc]
call fcn.00407d20
add dword [0x4430a4], 2
mov edx, 0x43f2f8
pop ecx
mov dword [0x4430a4], ecx
add ecx, dword [0x441b5c]
call fcn.00401010
je 0x449405
push dword [0x4430a4]
push dword [0x4430a4]
push dword [esp + 8]
call fcn.00407d90
mov ebx, eax
dec ebx
push ebx
push dword [esp + 0xc]
call fcn.00408140
lea eax, [esp + 4]
push eax
call fcn.00409250
push dword [0x4430a4]
push dword [0x4430a4]
push 1
push dword [esp + 0xc]
call fcn.00408140
add dword [0x4430a4], 2
mov edx, 0x43f2f8
pop ecx
mov dword [0x4430a4], ecx
add ecx, dword [0x441b5c]
call fcn.00401010
je 0x44946b
push dword [0x4430a4]
push dword [0x4430a4]
push dword [esp + 8]
call fcn.00407d90
mov ebx, eax
dec ebx
push ebx
push dword [esp + 0xc]
call fcn.00407d20
lea eax, [esp + 4]
push eax
call fcn.00409250
push dword [esp + 0xc]
mov edx, 0x43f028
pop ecx
call fcn.00401010
je 0x4494a1
lea eax, [esp + 0x10]
push eax
push 0xf003f
push 0
push dword [esp + 0xc]
push dword [esp + 0x244]
call sub.ADVAPI32.dll_RegOpenKeyExW
mov dword [esp + 0x18], eax
jmp 0x449510
lea eax, [esp + 0x14]
push eax
push dword [esp + 0x238]
push dword [esp + 0x14]
call sub.ADVAPI32.dll_RegConnectRegistryW
mov dword [esp + 0x18], eax
mov ebx, dword [esp + 0x18]
and ebx, ebx
je 0x4494f0
push dword [esp + 0x18]
pop eax
mov dword [0x442510], eax
push dword [0x4430a4]
push dword [0x442510]
call fcn.004452b0
lea eax, [0x442540]
push eax
call fcn.00409250
xor eax, eax
jmp 0x449641
lea eax, [esp + 0x10]
push eax
push 0xf003f
push 0
push dword [esp + 0xc]
push dword [esp + 0x24]
call sub.ADVAPI32.dll_RegOpenKeyExW
mov dword [esp + 0x18], eax
mov ebx, dword [esp + 0x18]
and ebx, ebx
jne 0x4495f1
mov dword [esp + 0x220], 0xff
push dword [esp + 0x244]
mov ebx, 1
cmp ebx, dword [esp]
jne 0x44956b
push dword [esp + 0xc]
call fcn.00407d90
mov ebx, eax
shl ebx, 1
add ebx, 2
push ebx
mov eax, dword [esp + 0x10]
push eax
push 1
push 0
push dword [esp + 0x18]
push dword [esp + 0x28]
call sub.ADVAPI32.dll_RegSetValueExW
mov dword [esp + 0x1c], eax
jmp 0x4495ad
mov ebx, 4
cmp ebx, dword [esp]
jne 0x4495ad
push dword [esp + 0xc]
call fcn.00408480
mov dword [esp + 0x228], eax
push 4
lea eax, [esp + 0x22c]
push eax
push 4
push 0
push dword [esp + 0x18]
push dword [esp + 0x28]
call sub.ADVAPI32.dll_RegSetValueExW
mov dword [esp + 0x1c], eax
pop eax
mov ebx, dword [esp + 0x18]
and ebx, ebx
jne 0x4495c0
mov dword [esp + 0x1c], 1
jmp 0x4495ef
push dword [esp + 0x18]
pop eax
mov dword [0x442510], eax
push dword [0x4430a4]
push dword [0x442510]
call fcn.004452b0
lea eax, [0x442540]
push eax
call fcn.00409250
mov dword [esp + 0x1c], 0
jmp 0x449620
push dword [esp + 0x18]
pop eax
mov dword [0x442510], eax
push dword [0x4430a4]
push dword [0x442510]
call fcn.004452b0
lea eax, [0x442540]
push eax
call fcn.00409250
mov dword [esp + 0x1c], 0
push dword [esp + 0x10]
call sub.ADVAPI32.dll_RegCloseKey
cmp dword [esp + 0x14], 0
je 0x449639
push dword [esp + 0x14]
call sub.ADVAPI32.dll_RegCloseKey
mov eax, dword [esp + 0x1c]
jmp 0x449641
push dword [esp + 0xc]
call fcn.00409360
push dword [esp + 4]
call fcn.00409360
push dword [esp]
call fcn.00409360
push dword [esp + 8]
call fcn.00409360
add esp, 0x228
pop edi
pop ebx
ret 0x18