Function at 0x443130
Capabilities:
Set registry value

Disassembly:
sub esp, 0xc
lea eax, [esp]
push ebx
push ebp
push esi
mov esi, dword [sym.imp.ADVAPI32.dll_RegCreateKeyExW]
push edi
push 0
push eax
push 0
push 0xf013f
push 0
push 0
push 0
push str.SoftwareMicrosoftWindowsCurrentVersionPoliciesExplorer
push 0x80000001
call esi
mov edi, dword [sym.imp.USER32.dll_SendMessageW]
mov ebx, dword [sym.imp.USER32.dll_GetDlgItem]
mov ebp, dword [sym.imp.ADVAPI32.dll_RegSetValueExW]
test eax, eax
jne 0x4431af
push 0
push 0
push 0xf0
push 0x28f8
push dword [0x4def88]
call ebx
push eax
call edi
push 4
mov dword [esp + 0x18], eax
lea eax, [esp + 0x18]
push eax
push 4
push 0
push str.NoPrinterTabs
push dword [esp + 0x24]
call ebp
push dword [esp + 0x10]
call dword [sym.imp.ADVAPI32.dll_RegCloseKey]
push 0
lea eax, [esp + 0x14]
push eax
push 0
push 0xf013f
push 0
push 0
push 0
push str.SoftwareMicrosoftWindowsCurrentVersionPoliciesExplorer
push 0x80000001
call esi
test eax, eax
jne 0x44320e
push eax
push eax
push 0xf0
push 0x28f9
push dword [0x4def88]
call ebx
push eax
call edi
push 4
mov dword [esp + 0x18], eax
lea eax, [esp + 0x18]
push eax
push 4
push 0
push str.NoDeletePrinter
push dword [esp + 0x24]
call ebp
push dword [esp + 0x10]
call dword [sym.imp.ADVAPI32.dll_RegCloseKey]
push 0
lea eax, [esp + 0x14]
push eax
push 0
push 0xf013f
push 0
push 0
push 0
push str.SoftwareMicrosoftWindowsCurrentVersionPoliciesExplorer
push 0x80000001
call esi
test eax, eax
jne 0x44326d
push eax
push eax
push 0xf0
push 0x28fa
push dword [0x4def88]
call ebx
push eax
call edi
push 4
mov dword [esp + 0x18], eax
lea eax, [esp + 0x18]
push eax
push 4
push 0
push str.NoAddPrinter
push dword [esp + 0x24]
call ebp
push dword [esp + 0x10]
call dword [sym.imp.ADVAPI32.dll_RegCloseKey]
push 0
lea eax, [esp + 0x14]
push eax
push 0
push 0xf013f
push 0
push 0
push 0
push str.SoftwareMicrosoftWindowsCurrentVersionPoliciesExplorer
push 0x80000001
call esi
test eax, eax
jne 0x4432cc
push eax
push eax
push 0xf0
push 0x28fb
push dword [0x4def88]
call ebx
push eax
call edi
push 4
mov dword [esp + 0x18], eax
lea eax, [esp + 0x18]
push eax
push 4
push 0
push str.NoPrinters
push dword [esp + 0x24]
call ebp
push dword [esp + 0x10]
call dword [sym.imp.ADVAPI32.dll_RegCloseKey]
push 0
lea eax, [esp + 0x18]
push eax
push 0
push 0xf013f
push 0
push 0
push 0
push str.SOFTWAREPoliciesMicrosoftWindows_NTPrinters
push 0x80000002
call esi
test eax, eax
jne 0x44332b
push eax
push eax
push 0xf0
push 0x28fc
push dword [0x4def88]
call ebx
push eax
call edi
push 4
mov dword [esp + 0x1c], eax
lea eax, [esp + 0x1c]
push eax
push 4
push 0
push str.DisableWebPrinting
push dword [esp + 0x28]
call ebp
push dword [esp + 0x14]
call dword [sym.imp.ADVAPI32.dll_RegCloseKey]
push 0x28fd
push str.DisableServerThread
mov edx, str.SystemCurrentControlSetControlPrint
mov ecx, 0x80000002
call fcn.0043da20
push 0x28fe
push str.BeepEnabled
mov edx, str.SYSTEMCurrentControlSetControlPrint
mov ecx, 0x80000002
call fcn.0043da20
push 0x28ff
push str.NoWideTextPrinting
mov edx, str.SoftwareMicrosoftOffice10.0WordOptions
mov ecx, 0x80000001
call fcn.0043da20
push 0x2900
push str.EventLog
mov edx, str.SYSTEMCurrentControlSetControlPrintProviders
mov ecx, 0x80000002
call fcn.0043da20
add esp, 0x20
pop edi
pop esi
pop ebp
pop ebx
add esp, 0xc
ret