Function at 0x477cdc
Capabilities:
Get common file path
Set registry value

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x638
push 0x104
lea eax, [ebp - 0x628]
push eax
call dword [sym.imp.KERNEL32.dll_GetSystemDirectoryA]
test eax, eax
jne 0x477d02
xor eax, eax
jmp 0x477f56
lea ecx, [ebp - 0x51c]
call fcn.00411d80
lea ecx, [ebp - 0x51c]
push ecx
lea edx, [ebp - 0x628]
push edx
call fcn.004a8f3a
test eax, eax
jne 0x477d2b
xor eax, eax
jmp 0x477f56
mov eax, dword [ebp + 8]
push eax
call dword [sym.imp.KERNEL32.dll_lstrlenA]
mov dword [ebp - 0x524], eax
mov ecx, dword [ebp + 0x10]
mov edx, dword [ebp - 0x524]
lea eax, [edx + ecx + 0x1d]
cmp eax, 0x400
jbe 0x477d56
xor eax, eax
jmp 0x477f56
lea ecx, [ebp - 0x630]
push ecx
push 0x504848
push reloc.WSOCK32.dll_accept
call dword [sym.imp.ADVAPI32.dll_RegOpenKeyA]
test eax, eax
je 0x477d93
lea edx, [ebp - 0x630]
push edx
push 0x504870
push reloc.WSOCK32.dll_accept
call dword [sym.imp.ADVAPI32.dll_RegCreateKeyA]
test eax, eax
je 0x477d93
xor eax, eax
jmp 0x477f56
mov al, byte [ebp - 0x524]
mov byte [ebp - 0x520], al
mov dword [ebp - 0x62c], 0
push 0x18
push 0x5047ac
lea ecx, [ebp - 0x404]
push ecx
call fcn.0048f2e0
add esp, 0xc
mov edx, dword [ebp - 0x62c]
add edx, 0x18
mov dword [ebp - 0x62c], edx
push 4
lea eax, [ebp - 0x51c]
push eax
mov ecx, dword [ebp - 0x62c]
lea edx, [ebp + ecx - 0x404]
push edx
call fcn.0048f2e0
add esp, 0xc
mov eax, dword [ebp - 0x62c]
add eax, 4
mov dword [ebp - 0x62c], eax
push 1
lea ecx, [ebp - 0x520]
push ecx
mov edx, dword [ebp - 0x62c]
lea eax, [ebp + edx - 0x404]
push eax
call fcn.0048f2e0
add esp, 0xc
mov ecx, dword [ebp - 0x62c]
add ecx, 1
mov dword [ebp - 0x62c], ecx
mov edx, dword [ebp - 0x524]
push edx
mov eax, dword [ebp + 8]
push eax
mov ecx, dword [ebp - 0x62c]
lea edx, [ebp + ecx - 0x404]
push edx
call fcn.0048f2e0
add esp, 0xc
mov eax, dword [ebp - 0x62c]
add eax, dword [ebp - 0x524]
mov dword [ebp - 0x62c], eax
mov cl, byte [ebp + 0x10]
mov byte [ebp - 0x520], cl
push 1
lea edx, [ebp - 0x520]
push edx
mov eax, dword [ebp - 0x62c]
lea ecx, [ebp + eax - 0x404]
push ecx
call fcn.0048f2e0
add esp, 0xc
mov edx, dword [ebp - 0x62c]
add edx, 1
mov dword [ebp - 0x62c], edx
mov eax, dword [ebp + 0x10]
push eax
mov ecx, dword [ebp + 0xc]
push ecx
mov edx, dword [ebp - 0x62c]
lea eax, [ebp + edx - 0x404]
push eax
call fcn.0048f2e0
add esp, 0xc
mov ecx, dword [ebp - 0x62c]
add ecx, dword [ebp + 0x10]
mov dword [ebp - 0x62c], ecx
mov edx, dword [ebp - 0x62c]
push edx
call fcn.004a7fba
add esp, 4
mov dword [ebp - 0x634], eax
mov eax, dword [ebp - 0x634]
mov dword [ebp - 4], eax
push 0x18
push 0x5047ac
mov ecx, dword [ebp - 4]
push ecx
mov edx, dword [ebp - 0x62c]
push edx
lea eax, [ebp - 0x404]
push eax
push 0x18
push 0x5047ac
push 1
push 1
call fcn.00473650
add esp, 0x24
mov ecx, dword [ebp - 0x62c]
push ecx
mov edx, dword [ebp - 4]
push edx
push 3
push 0
push 0x504898
mov eax, dword [ebp - 0x630]
push eax
call dword [sym.imp.ADVAPI32.dll_RegSetValueExA]
mov ecx, dword [ebp - 4]
mov dword [ebp - 0x638], ecx
mov edx, dword [ebp - 0x638]
push edx
call fcn.004a7fe3
add esp, 4
mov eax, dword [ebp - 0x630]
push eax
call dword [sym.imp.ADVAPI32.dll_RegCloseKey]
mov eax, 1
mov esp, ebp
pop ebp
ret