Function at 0x453de0
Capabilities:
Set registry value

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x124
mov eax, dword [0x4ea5e0]
xor eax, ebp
mov dword [ebp - 4], eax
push ebx
mov ebx, ecx
cmp dword [ebx + 0x114], 0
push esi
push edi
je 0x45428e
cmp dword [ebx + 0x110], 0
je 0x453e97
lea eax, [ebp - 0x110]
call fcn.0045dd00
test eax, eax
je 0x45428e
mov esi, 0x4ce44c
lea ecx, [ebp - 0x110]
mov al, byte [ecx]
cmp al, byte [esi]
jne 0x453e50
test al, al
je 0x453e4c
mov al, byte [ecx + 1]
cmp al, byte [esi + 1]
jne 0x453e50
add ecx, 2
add esi, 2
test al, al
jne 0x453e30
xor eax, eax
jmp 0x453e55
sbb eax, eax
sbb eax, 0xffffffff
test eax, eax
je 0x45428e
mov esi, dword [sym.imp.ADVAPI32.dll_RegCreateKeyExA]
lea eax, [ebp - 0x120]
push eax
lea ecx, [ebp - 0x124]
push ecx
push 0
push 0x2001f
push 0
push 0
push 0
push 0x4d3f84
push reloc.WS2_32.dll_accept
call esi
test eax, eax
jne 0x45428e
jmp 0x453f33
mov esi, dword [sym.imp.ADVAPI32.dll_RegCreateKeyExA]
lea edx, [ebp - 0x120]
push edx
lea eax, [ebp - 0x114]
push eax
push 0
push 0x20019
push 0
push 0
push 0
push 0x4d3f84
push reloc.WS2_32.dll_bind
call esi
test eax, eax
je 0x453eed
push 0x517ee0
push 0x518d24
xor eax, eax
call fcn.00409310
add esp, 8
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.004a8a2f
mov esp, ebp
pop ebp
ret
mov eax, dword [ebp - 0x114]
lea ecx, [ebp - 0x120]
push ecx
lea edx, [ebp - 0x124]
push edx
push 0
push 0x2001f
push 0
push 0
push 0
push str.Default
push eax
call esi
test eax, eax
je 0x453f26
mov ecx, dword [ebp - 0x114]
push ecx
jmp 0x454288
mov edx, dword [ebp - 0x114]
push edx
call dword [sym.imp.ADVAPI32.dll_RegCloseKey]
mov edi, dword [ebp - 0x124]
mov ecx, ebx
call fcn.004542a0
mov eax, dword [ebp - 0x124]
mov edi, dword [sym.imp.ADVAPI32.dll_RegCloseKey]
push eax
call edi
push reloc.WS2_32.dll_accept
call edi
lea ecx, [ebp - 0x120]
push ecx
lea edx, [ebp - 0x118]
push edx
push 0
push 0x2001f
push 0
push 0
push 0
push 0x4d3f84
push reloc.WS2_32.dll_bind
call esi
test eax, eax
jne 0x45428e
mov edx, dword [ebp - 0x118]
lea eax, [ebp - 0x120]
push eax
lea ecx, [ebp - 0x11c]
push ecx
push 0
push 0x2001f
push 0
push 0
push 0
push str.Default
push edx
call esi
test eax, eax
je 0x453fbc
mov dword [ebp - 0x11c], 0
mov edx, dword [ebp - 0x118]
mov eax, dword [0x4ecb0c]
mov esi, dword [sym.imp.ADVAPI32.dll_RegSetValueExA]
push 4
lea ecx, [ebp - 0x114]
push ecx
push 4
push 0
push str.DebugMode
push edx
mov dword [ebp - 0x114], eax
call esi
movzx eax, byte [0x4ecd19]
mov edx, dword [ebp - 0x118]
push 4
lea ecx, [ebp - 0x114]
push ecx
push 4
push 0
push str.Avilog
push edx
mov dword [ebp - 0x114], eax
call esi
call fcn.00449ed0
mov ecx, dword [ebp - 0x118]
push str.path
push ecx
mov edx, eax
call fcn.00453d20
mov ecx, dword [ebp - 0x118]
mov edx, dword [0x4ecb10]
push 4
lea eax, [ebp - 0x114]
push eax
push 4
push 0
push str.DebugLevel
push ecx
mov dword [ebp - 0x114], edx
call esi
mov ecx, dword [ebx + 0x10c]
mov edx, dword [ecx]
mov eax, dword [edx + 0x1cc]
call eax
mov edx, dword [ebp - 0x118]
push 4
lea ecx, [ebp - 0x114]
push ecx
push 4
push 0
push str.AllowLoopback
push edx
mov dword [ebp - 0x114], eax
call esi
mov ecx, dword [ebx + 0x10c]
mov eax, dword [ecx]
mov edx, dword [eax + 0x168]
call edx
mov ecx, dword [ebp - 0x118]
push 4
mov dword [ebp - 0x114], eax
lea eax, [ebp - 0x114]
push eax
push 4
push 0
push 0x4d5660
push ecx
call esi
mov eax, dword [ebp - 0x11c]
test eax, eax
je 0x45412a
mov edx, dword [ebx + 0x118]
push 4
lea ecx, [ebp - 0x114]
push ecx
push 4
push 0
push str.AllowShutdown
push eax
mov dword [ebp - 0x114], edx
call esi
mov ecx, dword [ebp - 0x11c]
mov edx, dword [ebx + 0x114]
push 4
lea eax, [ebp - 0x114]
push eax
push 4
push 0
push str.AllowProperties
push ecx
mov dword [ebp - 0x114], edx
call esi
mov ecx, dword [ebp - 0x11c]
mov edx, dword [ebx + 0x11c]
push 4
lea eax, [ebp - 0x114]
push eax
push 4
push 0
push str.AllowEditClients
push ecx
mov dword [ebp - 0x114], edx
call esi
mov ecx, dword [ebx + 0x10c]
mov edx, dword [ecx]
mov eax, dword [edx + 0x170]
call eax
mov edx, dword [ebp - 0x118]
push 4
lea ecx, [ebp - 0x114]
push ecx
push 4
push 0
push 0x4d5650
push edx
mov dword [ebp - 0x114], eax
call esi
mov ecx, dword [ebx + 0x10c]
mov eax, dword [ecx]
mov edx, dword [eax + 0x220]
call edx
mov ecx, dword [ebp - 0x118]
push 4
mov dword [ebp - 0x114], eax
lea eax, [ebp - 0x114]
push eax
push 4
push 0
push str.MSLogonRequired
push ecx
call esi
mov ecx, dword [ebx + 0x10c]
mov edx, dword [ecx]
mov eax, dword [edx + 0x228]
call eax
mov edx, dword [ebp - 0x118]
push 4
lea ecx, [ebp - 0x114]
push ecx
push 4
push 0
push str.NewMSLogon
push edx
mov dword [ebp - 0x114], eax
call esi
mov ecx, dword [ebx + 0x10c]
mov eax, dword [ecx]
mov edx, dword [eax + 0x240]
call edx
mov ecx, dword [ebp - 0x118]
push 4
mov dword [ebp - 0x114], eax
lea eax, [ebp - 0x114]
push eax
push 4
push 0
push str.UseDSMPlugin
push ecx
call esi
mov ecx, dword [ebx + 0x10c]
mov edx, dword [ecx]
mov eax, dword [edx + 0x158]
call eax
mov edx, dword [ebp - 0x118]
push 4
lea ecx, [ebp - 0x114]
push ecx
push 4
push 0
push str.ConnectPriority
push edx
mov dword [ebp - 0x114], eax
call esi
mov ecx, dword [ebx + 0x10c]
mov eax, dword [ecx]
mov edx, dword [eax + 0x248]
call edx
push pe_nt_image_headers32
push eax
mov eax, dword [ebp - 0x118]
push 3
push 0
push str.DSMPlugin
push eax
call esi
mov ebx, dword [ebx + 0x10c]
mov edx, dword [ebx]
mov eax, dword [edx + 0x25c]
mov ecx, ebx
call eax
mov ecx, dword [ebp - 0x118]
push str.DSMPluginConfig
push ecx
mov edx, eax
call fcn.00453d20
mov eax, dword [ebp - 0x11c]
test eax, eax
je 0x45427d
push eax
call dword [sym.imp.ADVAPI32.dll_RegCloseKey]
mov eax, dword [ebp - 0x118]
test eax, eax
je 0x45428e
push eax
call dword [sym.imp.ADVAPI32.dll_RegCloseKey]
mov ecx, dword [ebp - 4]
pop edi
pop esi
xor ecx, ebp
pop ebx
call fcn.004a8a2f
mov esp, ebp
pop ebp
ret