Function at 0x471232
Capabilities:
Set registry value

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x572d2a
mov eax, dword fs:[0]
push eax
push ecx
mov eax, 0x20cc
call fcn.0055c750
mov eax, dword [0x601328]
xor eax, ebp
mov dword [ebp - 0x18], eax
push ebx
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov dword [ebp - 0x10], esp
mov eax, dword [ebp + 8]
xor ebx, ebx
mov edi, edx
mov dword [ebp - 0x2048], edi
mov dword [ebp - 0x2040], ecx
mov dword [ebp - 0x2050], ebx
mov dword [ebp - 0x204c], ebx
push eax
mov dword [ebp - 4], ebx
call fcn.0046f12f
mov esi, eax
cmp esi, ebx
jne 0x4712c4
mov edi, 0x3e81
lea esi, [ebp - 0x2050]
call fcn.00415e80
mov eax, edi
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 0x18]
xor ecx, ebp
call fcn.0054677c
leave
ret 4
lea eax, [ebp - 0x203c]
push eax
lea eax, [ebp - 0x201c]
push eax
push dword [ebp - 0x2040]
mov dword [ebp - 0x2050], esi
mov dword [ebp - 0x204c], ebx
mov dword [ebp - 0x203c], 0x1000
call fcn.004718fe
cmp dword [edi + 0x18], 8
jb 0x471304
mov eax, dword [edi + 4]
mov dword [ebp - 0x203c], eax
jmp 0x47130d
add edi, 4
mov dword [ebp - 0x203c], edi
lea edi, [ebp - 0x201c]
push edi
call dword [sym.imp.KERNEL32.dll_lstrlenW]
inc eax
lea ecx, [eax + eax]
add edi, ecx
add ebx, ecx
cmp eax, 1
jne 0x471313
push ebx
lea eax, [ebp - 0x201c]
push eax
push 7
push 0
push dword [ebp - 0x203c]
push esi
call dword [sym.imp.ADVAPI32.dll_RegSetValueExW]
mov dword [ebp - 0x203c], eax
test eax, eax
jne 0x47135c
push esi
call dword [sym.imp.ADVAPI32.dll_RegFlushKey]
mov edi, dword [ebp - 0x203c]
jmp 0x47129b
call fcn.00462c28
cmp byte [eax], 0
jne 0x4713ec
lea eax, [ebp - 0x20dc]
push eax
call fcn.00409b60
push dword [ebp - 0x2048]
mov edi, 0x5967ac
push ecx
push edi
push ecx
lea eax, [ebp - 0x20d4]
push str.CRegistry::setMultiValue_...___for_key
push eax
mov byte [ebp - 4], 1
call fcn.00407390
add esp, 0xc
push eax
call fcn.00407390
add esp, 0xc
push eax
call fcn.00411b20
pop ecx
pop ecx
lea ecx, [ebp - 0x2038]
lea eax, [ebp - 0x20dc]
call fcn.00407170
lea ecx, [ebp - 0x2038]
mov byte [ebp - 4], 2
call fcn.00406a80
lea ecx, [ebp - 0x2038]
call fcn.00409c40
lea eax, [ebp - 0x20dc]
mov byte [ebp - 4], 0
call fcn.00407660
jmp 0x47153d
lea eax, [ebp - 0x20d4]
push eax
mov byte [ebp - 4], 3
call fcn.004068d0
mov byte [ebp - 4], 4
call fcn.00462c28
lea esi, [ebp - 0x2038]
call fcn.00406720
mov byte [ebp - 4], 5
cmp dword [eax + 0x18], 8
jb 0x47141f
mov esi, dword [eax + 4]
jmp 0x471422
lea esi, [eax + 4]
lea eax, [ebp - 0x20d4]
push 0x5950f8
push eax
call fcn.00407390
pop ecx
pop ecx
push esi
push eax
call fcn.00407390
pop ecx
pop ecx
push 0x5950f0
push eax
call fcn.00407390
pop ecx
pop ecx
push str.CRegistry::setMultiValue_...___for_key
push eax
call fcn.00407390
pop ecx
pop ecx
mov edi, 0x5967ac
push edi
push eax
call fcn.00407390
pop ecx
pop ecx
push dword [ebp - 0x2048]
push eax
call fcn.00411b20
pop ecx
pop ecx
lea ecx, [ebp - 0x2038]
mov byte [ebp - 4], 4
call fcn.00409c40
lea eax, [ebp - 0x2044]
push eax
call sub.log4cplusU.dll_public:_static_class_log4cplus::Logger___cdecl_log4cplus::Logger::getRoot_void_
pop ecx
mov ebx, 0x2710
push ebx
lea ecx, [ebp - 0x2044]
mov byte [ebp - 4], 6
call sub.log4cplusU.dll_public:_bool___thiscall_log4cplus::Logger::isEnabledFor_int_const
test al, al
je 0x4714e0
lea ecx, [ebp - 0x2038]
lea eax, [ebp - 0x20d4]
call fcn.00406700
push 0x112
push str..Registry.cpp
push eax
push ebx
lea ecx, [ebp - 0x2044]
mov byte [ebp - 4], 7
call sub.log4cplusU.dll_public:_void___thiscall_log4cplus::Logger::forcedLog_int__class_std::basic_string_wchar_t__struct_std::char_traits_wchar_t___class_std::allocator_wchar_t___const___char_const___int_const
lea ecx, [ebp - 0x2038]
call fcn.00409c40
lea ecx, [ebp - 0x2044]
mov byte [ebp - 4], 4
call sub.log4cplusU.dll_public_virtual:_void___thiscall_log4cplus::Logger::destructor_void_
lea eax, [ebp - 0x20d4]
mov byte [ebp - 4], 3
call fcn.004067e0
and dword [ebp - 4], 0
jmp 0x471542
mov ebx, 0x2710
call fcn.00462c28
cmp byte [eax], 0
jne 0x4715c7
lea eax, [ebp - 0x20dc]
push eax
call fcn.00409b60
mov byte [ebp - 4], 0xa
push dword [ebp - 0x203c]
lea eax, [ebp - 0x20d4]
push ecx
push edi
push ecx
push str.CRegistry::setMultiValue_...___SetMultiStringValue_error
push eax
call fcn.00407390
add esp, 0xc
push eax
call fcn.00407390
add esp, 0xc
push eax
call fcn.004155d0
lea ecx, [ebp - 0x2038]
lea eax, [ebp - 0x20dc]
call fcn.00407170
lea ecx, [ebp - 0x2038]
mov byte [ebp - 4], 0xb
call fcn.00406a80
lea ecx, [ebp - 0x2038]
call fcn.00409c40
lea eax, [ebp - 0x20dc]
mov byte [ebp - 4], 0
call fcn.00407660
jmp 0x471351
lea eax, [ebp - 0x20d4]
push eax
mov byte [ebp - 4], 0xc
call fcn.004068d0
mov byte [ebp - 4], 0xd
call fcn.00462c28
lea esi, [ebp - 0x2038]
call fcn.00406720
mov byte [ebp - 4], 0xe
cmp dword [eax + 0x18], 8
jb 0x4715fa
mov esi, dword [eax + 4]
jmp 0x4715fd
lea esi, [eax + 4]
lea eax, [ebp - 0x20d4]
push 0x5950f8
push eax
call fcn.00407390
pop ecx
pop ecx
push esi
push eax
call fcn.00407390
pop ecx
pop ecx
push 0x5950f0
push eax
call fcn.00407390
pop ecx
pop ecx
push str.CRegistry::setMultiValue_...___SetMultiStringValue_error
push eax
call fcn.00407390
pop ecx
pop ecx
push edi
push eax
call fcn.00407390
pop ecx
pop ecx
push dword [ebp - 0x203c]
push eax
call fcn.004155d0
lea ecx, [ebp - 0x2038]
mov byte [ebp - 4], 0xd
call fcn.00409c40
lea eax, [ebp - 0x2044]
push eax
call sub.log4cplusU.dll_public:_static_class_log4cplus::Logger___cdecl_log4cplus::Logger::getRoot_void_
pop ecx
push ebx
lea ecx, [ebp - 0x2044]
mov byte [ebp - 4], 0xf
call sub.log4cplusU.dll_public:_bool___thiscall_log4cplus::Logger::isEnabledFor_int_const
test al, al
je 0x4716af
lea ecx, [ebp - 0x2038]
lea eax, [ebp - 0x20d4]
call fcn.00406700
push 0x113
push str..Registry.cpp
push eax
push ebx
lea ecx, [ebp - 0x2044]
mov byte [ebp - 4], 0x10
call sub.log4cplusU.dll_public:_void___thiscall_log4cplus::Logger::forcedLog_int__class_std::basic_string_wchar_t__struct_std::char_traits_wchar_t___class_std::allocator_wchar_t___const___char_const___int_const
lea ecx, [ebp - 0x2038]
call fcn.00409c40
lea ecx, [ebp - 0x2044]
mov byte [ebp - 4], 0xd
call sub.log4cplusU.dll_public_virtual:_void___thiscall_log4cplus::Logger::destructor_void_
lea eax, [ebp - 0x20d4]
mov byte [ebp - 4], 0xc
call fcn.004067e0
jmp 0x471351