Function at 0x4a78cc
Capabilities:
Set registry value

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x110
mov eax, dword [0x6a9a60]
xor eax, ebp
mov dword [ebp - 4], eax
push ebx
push esi
push edi
mov edi, ecx
lea ecx, [ebp - 0x101]
call fcn.00402610
xor ebx, ebx
lea ecx, [ebp - 0x101]
push 7
pop eax
mov dword [ebp - 0x34], ebx
mov dword [ebp - 0x24], ebx
mov dword [ebp - 0x20], eax
mov dword [ebp - 0x1c], ebx
mov dword [ebp - 0xc], ebx
mov dword [ebp - 8], eax
call fcn.004292f8
mov esi, eax
lea ecx, [ebp - 0x101]
mov dword [ebp - 0x108], esi
call fcn.00429a19
test eax, eax
je 0x4a7937
lea eax, [ebp - 0x34]
push eax
lea ecx, [ebp - 0x101]
call fcn.004296a3
test esi, esi
je 0x4a796b
lea eax, [ebp - 0x10c]
mov dword [ebp - 0x10c], esi
push eax
lea eax, [ebp - 0x108]
mov ecx, edi
push eax
call fcn.0049f562
lea eax, [ebp - 0x1c]
push eax
push dword [ebp - 0x10c]
lea ecx, [ebp - 0x101]
call fcn.004290df
push ebx
push str.SOFTWAREkingsoft_antiviruslkinfo
push reloc.OLEAUT32.dll_SysReAllocString
lea ecx, [ebp - 0x110]
mov dword [ebp - 0x110], ebx
call fcn.0042f912
test eax, eax
jne 0x4a7a73
cmp dword [ebp - 0x110], ebx
je 0x4a79a3
push dword [ebp - 0x110]
call dword [sym.imp.ADVAPI32.dll_RegCloseKey]
mov eax, dword [ebp - 8]
mov esi, 0x1000
mov dword [ebp - 0x110], ebx
cmp eax, 8
jb 0x4a79fa
mov ecx, dword [ebp - 0x1c]
lea eax, [eax*2 + 2]
mov dword [ebp - 0x10c], eax
mov dword [ebp - 0x108], ecx
cmp eax, esi
jb 0x4a79f1
lea eax, [ebp - 0x10c]
push eax
lea eax, [ebp - 0x108]
push eax
call fcn.00402840
mov eax, dword [ebp - 0x10c]
pop ecx
pop ecx
mov ecx, dword [ebp - 0x108]
push eax
push ecx
call fcn.004b2fe8
pop ecx
pop ecx
xor eax, eax
mov dword [ebp - 0xc], ebx
push 7
mov word [ebp - 0x1c], ax
mov eax, dword [ebp - 0x20]
pop edi
mov dword [ebp - 8], edi
cmp eax, 8
jb 0x4a7a55
mov ecx, dword [ebp - 0x34]
lea eax, [eax*2 + 2]
mov dword [ebp - 0x108], eax
mov dword [ebp - 0x10c], ecx
cmp eax, esi
jb 0x4a7a4c
lea eax, [ebp - 0x108]
push eax
lea eax, [ebp - 0x10c]
push eax
call fcn.00402840
mov eax, dword [ebp - 0x108]
pop ecx
pop ecx
mov ecx, dword [ebp - 0x10c]
push eax
push ecx
call fcn.004b2fe8
pop ecx
pop ecx
xor eax, eax
mov dword [ebp - 0x24], ebx
lea ecx, [ebp - 0x101]
mov dword [ebp - 0x20], edi
mov word [ebp - 0x34], ax
call fcn.00414c10
xor al, al
jmp 0x4a7d5d
mov edi, dword [sym.imp.ADVAPI32.dll_RegSetValueExW]
cmp dword [ebp - 0x24], ebx
je 0x4a7b66
cmp dword [ebp - 0x20], 8
lea eax, [ebp - 0x34]
lea ecx, [ebp - 0xfc]
cmovae eax, dword [ebp - 0x34]
push 3
mov dword [ebp - 0x100], ecx
lea ecx, [ebp - 0x100]
push eax
call fcn.0040b6f4
push dword [ebp - 0x100]
lea ecx, [ebp - 0x4c]
call fcn.00403990
lea eax, [ebp - 0xfc]
cmp dword [ebp - 0x100], eax
je 0x4a7ad0
push dword [ebp - 0x100]
call dword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_free]
pop ecx
cmp dword [ebp - 0x38], 0x10
lea eax, [ebp - 0x4c]
push dword [ebp - 0x3c]
cmovae eax, dword [ebp - 0x4c]
push eax
lea eax, [ebp - 0x7c]
push eax
call fcn.004b20db
mov ebx, eax
add esp, 0xc
lea eax, [ebp - 0x4c]
cmp eax, ebx
je 0x4a7b04
mov ecx, eax
call fcn.00403900
push ebx
lea ecx, [ebp - 0x4c]
call fcn.004111a3
lea ecx, [ebp - 0x7c]
call fcn.00403900
cmp dword [ebp - 0x38], 0x10
lea eax, [ebp - 0x4c]
lea ecx, [ebp - 0x108]
cmovae eax, dword [ebp - 0x4c]
push eax
call fcn.00404000
cmp dword [ebp - 0x110], 0
mov ebx, dword [eax]
je 0x4a7b50
push ebx
call dword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_wcslen]
pop ecx
lea eax, [eax*2 + 2]
push eax
push ebx
push 1
push 0
push 0x626f58
push dword [ebp - 0x110]
call edi
mov ecx, dword [ebp - 0x108]
lea ecx, [ecx - 0x10]
call fcn.004023e0
lea ecx, [ebp - 0x4c]
call fcn.00403900
cmp dword [ebp - 0xc], 0
je 0x4a7c7d
cmp dword [ebp - 8], 8
lea eax, [ebp - 0x1c]
lea ecx, [ebp - 0xfc]
cmovae eax, dword [ebp - 0x1c]
push 3
mov dword [ebp - 0x100], ecx
lea ecx, [ebp - 0x100]
push eax
call fcn.0040b6f4
push dword [ebp - 0x100]
lea ecx, [ebp - 0x64]
call fcn.00403990
lea eax, [ebp - 0xfc]
cmp dword [ebp - 0x100], eax
je 0x4a7bbe
push dword [ebp - 0x100]
call dword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_free]
pop ecx
cmp dword [ebp - 0x50], 0x10
lea eax, [ebp - 0x64]
push dword [ebp - 0x54]
cmovae eax, dword [ebp - 0x64]
push eax
lea eax, [ebp - 0x7c]
push eax
call fcn.004b20db
mov ebx, eax
add esp, 0xc
lea eax, [ebp - 0x64]
cmp eax, ebx
je 0x4a7bf2
mov ecx, eax
call fcn.00403900
push ebx
lea ecx, [ebp - 0x64]
call fcn.004111a3
lea ecx, [ebp - 0x7c]
call fcn.00403900
cmp dword [ebp - 0x110], 0
mov dword [ebp - 0x108], esi
je 0x4a7c23
push 4
lea eax, [ebp - 0x108]
push eax
push 4
push 0
push 0x626f60
push dword [ebp - 0x110]
call edi
cmp dword [ebp - 0x50], 0x10
lea eax, [ebp - 0x64]
lea ecx, [ebp - 0x108]
cmovae eax, dword [ebp - 0x64]
push eax
call fcn.00404000
cmp dword [ebp - 0x110], 0
mov esi, dword [eax]
je 0x4a7c67
push esi
call dword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_wcslen]
pop ecx
lea eax, [eax*2 + 2]
push eax
push esi
push 1
push 0
push 0x626f68
push dword [ebp - 0x110]
call edi
mov ecx, dword [ebp - 0x108]
lea ecx, [ecx - 0x10]
call fcn.004023e0
lea ecx, [ebp - 0x64]
call fcn.00403900
cmp dword [ebp - 0x110], 0
je 0x4a7c92
push dword [ebp - 0x110]
call dword [sym.imp.ADVAPI32.dll_RegCloseKey]
mov eax, dword [ebp - 8]
xor ebx, ebx
mov dword [ebp - 0x110], ebx
mov esi, 0x1000
cmp eax, 8
jb 0x4a7ceb
mov ecx, dword [ebp - 0x1c]
lea eax, [eax*2 + 2]
mov dword [ebp - 0x108], eax
mov dword [ebp - 0x10c], ecx
cmp eax, esi
jb 0x4a7ce2
lea eax, [ebp - 0x108]
push eax
lea eax, [ebp - 0x10c]
push eax
call fcn.00402840
mov eax, dword [ebp - 0x108]
pop ecx
pop ecx
mov ecx, dword [ebp - 0x10c]
push eax
push ecx
call fcn.004b2fe8
pop ecx
pop ecx
xor eax, eax
mov dword [ebp - 0xc], ebx
push 7
mov word [ebp - 0x1c], ax
mov eax, dword [ebp - 0x20]
pop edi
mov dword [ebp - 8], edi
cmp eax, 8
jb 0x4a7d46
mov ecx, dword [ebp - 0x34]
lea eax, [eax*2 + 2]
mov dword [ebp - 0x108], eax
mov dword [ebp - 0x10c], ecx
cmp eax, esi
jb 0x4a7d3d
lea eax, [ebp - 0x108]
push eax
lea eax, [ebp - 0x10c]
push eax
call fcn.00402840
mov eax, dword [ebp - 0x108]
pop ecx
pop ecx
mov ecx, dword [ebp - 0x10c]
push eax
push ecx
call fcn.004b2fe8
pop ecx
pop ecx
xor eax, eax
mov dword [ebp - 0x24], ebx
lea ecx, [ebp - 0x101]
mov dword [ebp - 0x20], edi
mov word [ebp - 0x34], ax
call fcn.00414c10
mov ecx, dword [ebp - 4]
pop edi
pop esi
xor ecx, ebp
pop ebx
call fcn.004b3004
leave
ret