Function at 0x442980
Capabilities:
Disable system features via registry on windows
Set registry value

Disassembly:
sub esp, 0xc
lea eax, [esp]
push ebx
push ebp
push esi
mov esi, dword [sym.imp.ADVAPI32.dll_RegCreateKeyExW]
push edi
push 0
push eax
push 0
push 0xf013f
push 0
push 0
push 0
push 0x4b15f0
push 0x80000001
call esi
mov ebp, dword [sym.imp.user32.dll_SendMessageW]
mov edi, dword [sym.imp.ADVAPI32.dll_RegSetValueExW]
mov ebx, dword [sym.imp.ADVAPI32.dll_RegCloseKey]
test eax, eax
jne 0x4429ff
push 0
push 0
push 0xf0
push 0x28e6
push dword [0x4def88]
call dword [sym.imp.user32.dll_GetDlgItem]
push eax
call ebp
push 4
mov dword [esp + 0x18], eax
lea eax, [esp + 0x18]
push eax
push 4
push 0
push 0x4b2c20
push dword [esp + 0x24]
call edi
push dword [esp + 0x10]
call ebx
push 0
lea eax, [esp + 0x14]
push eax
push 0
push 0xf013f
push 0
push 0
push 0
push 0x4b15f0
push 0x80000001
call esi
test eax, eax
jne 0x442a5e
push eax
push eax
push 0xf0
push 0x28e7
push dword [0x4def88]
call dword [sym.imp.user32.dll_GetDlgItem]
push eax
call ebp
push 4
mov dword [esp + 0x18], eax
lea eax, [esp + 0x18]
push eax
push 4
push 0
push 0x4b2c44
push dword [esp + 0x24]
call edi
push dword [esp + 0x10]
call ebx
push 0
lea eax, [esp + 0x14]
push eax
push 0
push 0xf013f
push 0
push 0
push 0
push 0x4b15f0
push 0x80000001
call esi
test eax, eax
jne 0x442ac4
push eax
push eax
push 0xf0
push 0x28e8
push dword [0x4def88]
call dword [sym.imp.user32.dll_GetDlgItem]
push eax
call ebp
neg eax
push 4
sbb eax, eax
and eax, 0xfffffffb
mov dword [esp + 0x18], eax
lea eax, [esp + 0x18]
push eax
push 4
push 0
push 0x4b2c5c
push dword [esp + 0x24]
call edi
push dword [esp + 0x10]
call ebx
push 0
lea eax, [esp + 0x14]
push eax
push 0
push 0xf013f
push 0
push 0
push 0
push 0x4b15f0
push 0x80000001
call esi
test eax, eax
jne 0x442b23
push eax
push eax
push 0xf0
push 0x28e9
push dword [0x4def88]
call dword [sym.imp.user32.dll_GetDlgItem]
push eax
call ebp
push 4
mov dword [esp + 0x18], eax
lea eax, [esp + 0x18]
push eax
push 4
push 0
push 0x4b2c70
push dword [esp + 0x24]
call edi
push dword [esp + 0x10]
call ebx
push 0
lea eax, [esp + 0x14]
push eax
push 0
push 0xf013f
push 0
push 0
push 0
push 0x4b15f0
push 0x80000001
call esi
test eax, eax
jne 0x442b82
push eax
push eax
push 0xf0
push 0x28ea
push dword [0x4def88]
call dword [sym.imp.user32.dll_GetDlgItem]
push eax
call ebp
push 4
mov dword [esp + 0x18], eax
lea eax, [esp + 0x18]
push eax
push 4
push 0
push 0x4b2c90
push dword [esp + 0x24]
call edi
push dword [esp + 0x10]
call ebx
push 0
lea eax, [esp + 0x14]
push eax
push 0
push 0xf013f
push 0
push 0
push 0
push 0x4b15f0
push 0x80000001
call esi
test eax, eax
jne 0x442be1
push eax
push eax
push 0xf0
push 0x28eb
push dword [0x4def88]
call dword [sym.imp.user32.dll_GetDlgItem]
push eax
call ebp
push 4
mov dword [esp + 0x18], eax
lea eax, [esp + 0x18]
push eax
push 4
push 0
push 0x4b167c
push dword [esp + 0x24]
call edi
push dword [esp + 0x10]
call ebx
push 0
lea eax, [esp + 0x14]
push eax
push 0
push 0xf013f
push 0
push 0
push 0
push 0x4b2cb8
push 0x80000001
call esi
test eax, eax
jne 0x442c4c
push eax
push eax
push 0xf0
push 0x28ec
push dword [0x4def88]
call dword [sym.imp.user32.dll_GetDlgItem]
push eax
call ebp
push 4
mov dword [esp + 0x18], eax
test eax, eax
lea eax, [esp + 0x18]
push eax
push 4
push 0
push 0x4b2d40
push dword [esp + 0x24]
je 0x442c44
mov dword [esp + 0x2c], 3
call edi
push dword [esp + 0x10]
call ebx
push 0
lea eax, [esp + 0x18]
push eax
push 0
push 0xf013f
push 0
push 0
push 0
push 0x4b15f0
push 0x80000001
call esi
test eax, eax
jne 0x442cab
push eax
push eax
push 0xf0
push 0x28ed
push dword [0x4def88]
call dword [sym.imp.user32.dll_GetDlgItem]
push eax
call ebp
push 4
mov dword [esp + 0x1c], eax
lea eax, [esp + 0x1c]
push eax
push 4
push 0
push 0x4b2d4c
push dword [esp + 0x28]
call edi
push dword [esp + 0x14]
call ebx
push 0
lea eax, [esp + 0x18]
push eax
push 0
push 0xf013f
push 0
push 0
push 0
push 0x4b2d90
push 0x80000001
call esi
test eax, eax
jne 0x442d0a
push eax
push eax
push 0xf0
push 0x28ee
push dword [0x4def88]
call dword [sym.imp.user32.dll_GetDlgItem]
push eax
call ebp
push 4
mov dword [esp + 0x1c], eax
lea eax, [esp + 0x1c]
push eax
push 4
push 0
push 0x4b2d74
push dword [esp + 0x28]
call edi
push dword [esp + 0x14]
call ebx
pop edi
pop esi
pop ebp
pop ebx
add esp, 0xc
ret