Function at 0x4477e4
Capabilities:
Set registry value

Disassembly:
push ebp
mov ebp, esp
add esp, 0xffffffd0
push ebx
push esi
push edi
xor ebx, ebx
mov dword [ebp - 0x28], ebx
mov dword [ebp - 0x30], ebx
mov dword [ebp - 0x2c], ebx
mov dword [ebp - 0x24], ebx
mov dword [ebp - 0x1c], ebx
mov dword [ebp - 0x20], ebx
mov dword [ebp - 0xc], ecx
mov dword [ebp - 8], edx
mov dword [ebp - 4], eax
mov edi, dword [ebp + 0xc]
mov esi, dword [ebp + 0x10]
xor eax, eax
push ebp
push 0x447a03
push dword fs:[eax]
mov dword fs:[eax], esp
mov eax, dword [ebp + 8]
call sub.rtl160.bpl__System__UStrLen_qqrx20System_UnicodeString
mov ebx, eax
sar ebx, 1
jns 0x44782f
adc ebx, 0
push ebx
call sub.rtl160.bpl__System_GetMemory_qi
pop ecx
mov dword [ebp - 0x10], eax
xor ecx, ecx
push ebp
push 0x4479e1
push dword fs:[ecx]
mov dword fs:[ecx], esp
mov eax, dword [ebp + 8]
call sub.rtl160.bpl__System__UStrToPWChar_qqrx20System_UnicodeString
mov ecx, ebx
mov edx, dword [ebp - 0x10]
call sub.rtl160.bpl__System_Classes_HexToBin_qqrpbpvi
lea eax, [ebp - 0x18]
push eax
mov eax, edi
or eax, 0xf003f
push eax
push 0
mov eax, dword [ebp - 0xc]
push eax
mov eax, dword [ebp - 8]
push eax
call sub.advapi32.dll_RegOpenKeyExW
test eax, eax
je 0x4478e4
lea eax, [ebp - 0x14]
push eax
lea eax, [ebp - 0x18]
push eax
push 0
or edi, 0xf003f
push edi
push 0
push 0
push 0
mov eax, dword [ebp - 0xc]
push eax
mov eax, dword [ebp - 8]
push eax
call sub.advapi32.dll_RegCreateKeyExW
mov edi, eax
test edi, edi
je 0x4478e4
lea eax, [ebp - 0x1c]
push eax
lea eax, [ebp - 0x20]
mov edx, dword [ebp - 0xc]
call sub.rtl160.bpl__System__UStrFromPWChar_qqrr20System_UnicodeStringpb
mov ecx, dword [ebp - 0x20]
mov edx, dword [ebp - 8]
mov eax, dword [ebp - 4]
call fcn.00445e38
mov eax, dword [ebp - 0x1c]
mov edx, dword [sym.imp.rtl160.bpl__System_Sysutils_EmptyStr]
mov edx, dword [edx]
mov ecx, dword [sym.imp.rtl160.bpl__System_Sysutils_EmptyStr]
mov ecx, dword [ecx]
push ecx
mov ecx, dword [sym.imp.rtl160.bpl__System_Sysutils_EmptyStr]
mov ecx, dword [ecx]
push ecx
push edi
xor ecx, ecx
call fcn.00445344
xor eax, eax
push ebp
push 0x4479c2
push dword fs:[eax]
mov dword fs:[eax], esp
cmp esi, 1
je 0x4478fc
cmp esi, 2
jne 0x44790b
cmp ebx, 2
jl 0x44791f
mov eax, dword [ebp - 0x10]
cmp byte [eax + ebx - 2], 0
jne 0x44791f
cmp esi, 7
jne 0x44794c
cmp ebx, 4
jl 0x44791f
mov eax, dword [ebp - 0x10]
cmp byte [eax + ebx - 4], 0
je 0x44794c
mov eax, ebx
add eax, eax
push eax
lea eax, [ebp - 0x24]
mov edx, dword [ebp - 0x10]
call sub.rtl160.bpl__System__UStrFromPChar_qqrr20System_UnicodeStringpc
mov eax, dword [ebp - 0x24]
call sub.rtl160.bpl__System__UStrToPWChar_qqrx20System_UnicodeString
push eax
push esi
push 0
mov eax, dword [ebp + 0x14]
push eax
mov eax, dword [ebp - 0x18]
push eax
call sub.advapi32.dll_RegSetValueExW
mov edi, eax
jmp 0x447963
push ebx
mov eax, dword [ebp - 0x10]
push eax
push esi
push 0
mov eax, dword [ebp + 0x14]
push eax
mov eax, dword [ebp - 0x18]
push eax
call sub.advapi32.dll_RegSetValueExW
mov edi, eax
test edi, edi
je 0x4479ab
mov eax, dword [ebp + 8]
push eax
mov eax, dword [sym.imp.rtl160.bpl__System_Sysutils_EmptyStr]
mov eax, dword [eax]
push eax
push edi
lea eax, [ebp - 0x28]
push eax
lea eax, [ebp - 0x2c]
mov edx, dword [ebp - 0xc]
call sub.rtl160.bpl__System__UStrFromPWChar_qqrr20System_UnicodeStringpb
mov ecx, dword [ebp - 0x2c]
mov edx, dword [ebp - 8]
mov eax, dword [ebp - 4]
call fcn.00445e38
mov eax, dword [ebp - 0x28]
push eax
lea eax, [ebp - 0x30]
mov edx, dword [ebp + 0x14]
call sub.rtl160.bpl__System__UStrFromPWChar_qqrr20System_UnicodeStringpb
mov edx, dword [ebp - 0x30]
mov ecx, esi
pop eax
call fcn.00445344
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
push 0x4479c9
mov eax, dword [ebp - 0x18]
push eax
call sub.advapi32.dll_RegCloseKey
ret