Function at 0x442a10
Capabilities:
Disable system features via registry on windows
Set registry value

Disassembly:
sub esp, 0xc
lea eax, [esp]
push ebx
push ebp
push esi
mov esi, dword [sym.imp.ADVAPI32.dll_RegCreateKeyExW]
push edi
push 0
push eax
push 0
push 0xf013f
push 0
push 0
push 0
push str.SoftwareMicrosoftWindowsCurrentVersionPoliciesExplorer
push 0x80000001
call esi
mov ebp, dword [sym.imp.USER32.dll_SendMessageW]
mov edi, dword [sym.imp.ADVAPI32.dll_RegSetValueExW]
mov ebx, dword [sym.imp.ADVAPI32.dll_RegCloseKey]
test eax, eax
jne 0x442a8f
push 0
push 0
push 0xf0
push 0x28e6
push dword [0x4def88]
call dword [sym.imp.USER32.dll_GetDlgItem]
push eax
call ebp
push 4
mov dword [esp + 0x18], eax
lea eax, [esp + 0x18]
push eax
push 4
push 0
push str.NoViewContextMenu
push dword [esp + 0x24]
call edi
push dword [esp + 0x10]
call ebx
push 0
lea eax, [esp + 0x14]
push eax
push 0
push 0xf013f
push 0
push 0
push 0
push str.SoftwareMicrosoftWindowsCurrentVersionPoliciesExplorer
push 0x80000001
call esi
test eax, eax
jne 0x442aee
push eax
push eax
push 0xf0
push 0x28e7
push dword [0x4def88]
call dword [sym.imp.USER32.dll_GetDlgItem]
push eax
call ebp
push 4
mov dword [esp + 0x18], eax
lea eax, [esp + 0x18]
push eax
push 4
push 0
push str.NoFileMenu
push dword [esp + 0x24]
call edi
push dword [esp + 0x10]
call ebx
push 0
lea eax, [esp + 0x14]
push eax
push 0
push 0xf013f
push 0
push 0
push 0
push str.SoftwareMicrosoftWindowsCurrentVersionPoliciesExplorer
push 0x80000001
call esi
test eax, eax
jne 0x442b54
push eax
push eax
push 0xf0
push 0x28e8
push dword [0x4def88]
call dword [sym.imp.USER32.dll_GetDlgItem]
push eax
call ebp
neg eax
push 4
sbb eax, eax
and eax, 0xfffffffb
mov dword [esp + 0x18], eax
lea eax, [esp + 0x18]
push eax
push 4
push 0
push str.NoDrives
push dword [esp + 0x24]
call edi
push dword [esp + 0x10]
call ebx
push 0
lea eax, [esp + 0x14]
push eax
push 0
push 0xf013f
push 0
push 0
push 0
push str.SoftwareMicrosoftWindowsCurrentVersionPoliciesExplorer
push 0x80000001
call esi
test eax, eax
jne 0x442bb3
push eax
push eax
push 0xf0
push 0x28e9
push dword [0x4def88]
call dword [sym.imp.USER32.dll_GetDlgItem]
push eax
call ebp
push 4
mov dword [esp + 0x18], eax
lea eax, [esp + 0x18]
push eax
push 4
push 0
push str.NoControlPanel
push dword [esp + 0x24]
call edi
push dword [esp + 0x10]
call ebx
push 0
lea eax, [esp + 0x14]
push eax
push 0
push 0xf013f
push 0
push 0
push 0
push str.SoftwareMicrosoftWindowsCurrentVersionPoliciesExplorer
push 0x80000001
call esi
test eax, eax
jne 0x442c12
push eax
push eax
push 0xf0
push 0x28ea
push dword [0x4def88]
call dword [sym.imp.USER32.dll_GetDlgItem]
push eax
call ebp
push 4
mov dword [esp + 0x18], eax
lea eax, [esp + 0x18]
push eax
push 4
push 0
push str.NoShellSearchButton
push dword [esp + 0x24]
call edi
push dword [esp + 0x10]
call ebx
push 0
lea eax, [esp + 0x14]
push eax
push 0
push 0xf013f
push 0
push 0
push 0
push str.SoftwareMicrosoftWindowsCurrentVersionPoliciesExplorer
push 0x80000001
call esi
test eax, eax
jne 0x442c71
push eax
push eax
push 0xf0
push 0x28eb
push dword [0x4def88]
call dword [sym.imp.USER32.dll_GetDlgItem]
push eax
call ebp
push 4
mov dword [esp + 0x18], eax
lea eax, [esp + 0x18]
push eax
push 4
push 0
push str.NoActiveDesktop
push dword [esp + 0x24]
call edi
push dword [esp + 0x10]
call ebx
push 0
lea eax, [esp + 0x14]
push eax
push 0
push 0xf013f
push 0
push 0
push 0
push str.SoftwareMicrosoftWindowsCurrentVersionInternet_SettingsZones3
push 0x80000001
call esi
test eax, eax
jne 0x442cdc
push eax
push eax
push 0xf0
push 0x28ec
push dword [0x4def88]
call dword [sym.imp.USER32.dll_GetDlgItem]
push eax
call ebp
push 4
mov dword [esp + 0x18], eax
test eax, eax
lea eax, [esp + 0x18]
push eax
push 4
push 0
push str.1803
push dword [esp + 0x24]
je 0x442cd4
mov dword [esp + 0x2c], 3
call edi
push dword [esp + 0x10]
call ebx
push 0
lea eax, [esp + 0x18]
push eax
push 0
push 0xf013f
push 0
push 0
push 0
push str.SoftwareMicrosoftWindowsCurrentVersionPoliciesExplorer
push 0x80000001
call esi
test eax, eax
jne 0x442d3b
push eax
push eax
push 0xf0
push 0x28ed
push dword [0x4def88]
call dword [sym.imp.USER32.dll_GetDlgItem]
push eax
call ebp
push 4
mov dword [esp + 0x1c], eax
lea eax, [esp + 0x1c]
push eax
push 4
push 0
push str.NoToolbarCustomize
push dword [esp + 0x28]
call edi
push dword [esp + 0x14]
call ebx
push 0
lea eax, [esp + 0x18]
push eax
push 0
push 0xf013f
push 0
push 0
push 0
push str.SoftwareMicrosoftWindowsCurrentVersionInternet_SettingsCache
push 0x80000001
call esi
test eax, eax
jne 0x442d9a
push eax
push eax
push 0xf0
push 0x28ee
push dword [0x4def88]
call dword [sym.imp.USER32.dll_GetDlgItem]
push eax
call ebp
push 4
mov dword [esp + 0x1c], eax
lea eax, [esp + 0x1c]
push eax
push 4
push 0
push str.Persistent
push dword [esp + 0x28]
call edi
push dword [esp + 0x14]
call ebx
pop edi
pop esi
pop ebp
pop ebx
add esp, 0xc
ret