Function at 0x452b10
Capabilities:
Set registry value

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x563335
mov eax, dword fs:[0]
push eax
sub esp, 0x90
mov eax, dword [0x5c9c4c]
xor eax, ebp
mov dword [ebp - 0x10], eax
push ebx
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
call fcn.00444160
mov ecx, eax
call fcn.0043d870
mov esi, eax
call fcn.00444160
mov ecx, eax
call fcn.0043d810
mov edi, eax
call fcn.00444160
mov ecx, eax
call fcn.0043da90
mov ebx, eax
call fcn.00444160
mov ecx, eax
call fcn.0043f420
test eax, eax
mov edx, 0x57f25c
mov ecx, 0x57e108
cmove ecx, edx
push ecx
lea ecx, [ebp - 0x90]
call fcn.0040e030
lea eax, [ebp - 0x9c]
mov dword [ebp - 4], 0
push eax
call fcn.00444160
mov ecx, eax
call fcn.0043d9b0
mov byte [ebp - 4], 1
call fcn.00444160
mov ecx, eax
call fcn.0043d850
mov dword [ebp - 0x60], reloc.OLEAUT32.dll_SysReAllocString
mov dword [ebp - 0x5c], str.SOFTWARELudashi
mov dword [ebp - 0x58], str.VendorID
mov ecx, dword [esi]
mov dword [ebp - 0x88], eax
mov dword [ebp - 0x54], ecx
mov dword [ebp - 0x50], 1
mov dword [ebp - 0x4c], reloc.OLEAUT32.dll_SysReAllocString
mov dword [ebp - 0x48], str.SOFTWARELudashi
mov dword [ebp - 0x44], str.AppType
mov eax, dword [edi]
mov dword [ebp - 0x40], eax
mov dword [ebp - 0x3c], 1
mov dword [ebp - 0x38], reloc.OLEAUT32.dll_SysReAllocString
mov dword [ebp - 0x34], str.SOFTWARELudashi
mov dword [ebp - 0x30], str.Type
mov eax, dword [ebx]
mov dword [ebp - 0x2c], eax
mov eax, dword [ebp - 0x90]
mov dword [ebp - 0x28], 1
mov dword [ebp - 0x24], reloc.OLEAUT32.dll_SysReAllocString
mov dword [ebp - 0x20], str.SOFTWARELudashi
mov dword [ebp - 0x1c], 0x58005c
mov dword [ebp - 0x18], eax
mov dword [ebp - 0x14], 1
call fcn.00444160
cmp dword [eax + 0x60], 0
jne 0x452c94
call fcn.00444160
mov ecx, eax
call fcn.0043f420
test eax, eax
je 0x452c94
mov dword [ebp - 0x74], reloc.OLEAUT32.dll_SysReAllocString
mov dword [ebp - 0x70], str.SOFTWARELudashi
mov dword [ebp - 0x6c], str.CreateShortcut
mov dword [ebp - 0x68], 0x57e108
mov dword [ebp - 0x64], 1
call fcn.0046ebb0
lea edx, [ebp - 0x74]
push edx
push eax
mov ecx, dword [eax]
call dword [ecx + 0x48]
lea esi, [ebp - 0x60]
mov edi, 4
nop dword [eax]
call fcn.0046ebb0
push esi
push eax
mov ecx, dword [eax]
call dword [ecx + 0x48]
add esi, 0x14
sub edi, 1
jne 0x452ca0
call fcn.00444160
mov ecx, eax
call fcn.0043da70
push eax
lea ecx, [ebp - 0x94]
call fcn.00410760
mov esi, dword [ebp - 0x94]
mov byte [ebp - 4], 2
cmp dword [esi - 0xc], edi
je 0x452d09
mov dword [ebp - 0x74], reloc.OLEAUT32.dll_SysReAllocString
mov dword [ebp - 0x70], str.SOFTWARELudashi
mov dword [ebp - 0x6c], str.tagID
mov dword [ebp - 0x68], esi
mov dword [ebp - 0x64], 1
call fcn.0046ebb0
lea edx, [ebp - 0x74]
push edx
push eax
mov ecx, dword [eax]
call dword [ecx + 0x48]
call fcn.00444160
mov ecx, eax
call fcn.0043da60
push eax
lea ecx, [ebp - 0x98]
call fcn.00410760
mov edi, dword [ebp - 0x98]
mov byte [ebp - 4], 3
cmp dword [edi - 0xc], 0
je 0x452d5f
mov dword [ebp - 0x74], reloc.OLEAUT32.dll_SysReAllocString
mov dword [ebp - 0x70], str.SOFTWARELudashi
mov dword [ebp - 0x6c], str.softID
mov dword [ebp - 0x68], edi
mov dword [ebp - 0x64], 1
call fcn.0046ebb0
lea edx, [ebp - 0x74]
push edx
push eax
mov ecx, dword [eax]
call dword [ecx + 0x48]
call fcn.0040cd20
mov ecx, eax
test ecx, ecx
je 0x4530c3
mov eax, dword [ecx]
call dword [eax + 0xc]
lea edx, [eax + 0x10]
mov dword [ebp - 0x7c], edx
mov eax, dword [edx - 8]
mov ecx, 1
sub ecx, dword [edx - 4]
sub eax, 0x104
or eax, ecx
mov byte [ebp - 4], 4
jge 0x452da1
push 0x104
lea ecx, [ebp - 0x7c]
call fcn.0040b1b0
mov edx, dword [ebp - 0x7c]
cmp dword [edx - 8], 0x104
jl 0x4530cd
mov dword [edx - 0xc], 0x104
xor ecx, ecx
mov eax, dword [ebp - 0x7c]
push 0x104
push edx
mov word [eax + 0x208], cx
call fcn.004b5b20
mov eax, dword [ebp - 0x7c]
push dword [eax - 8]
push eax
call fcn.00532fc0
mov edx, eax
add esp, 8
test edx, edx
js 0x4530cd
mov ecx, dword [ebp - 0x7c]
cmp edx, dword [ecx - 8]
jg 0x4530cd
mov dword [ecx - 0xc], edx
xor ecx, ecx
mov eax, dword [ebp - 0x7c]
mov word [eax + edx*2], cx
call fcn.0040cd20
mov ecx, eax
test ecx, ecx
je 0x4530d7
mov eax, dword [ecx]
call dword [eax + 0xc]
add eax, 0x10
mov dword [ebp - 0x84], eax
mov eax, 0x57e108
mov byte [ebp - 4], 5
lea ecx, [ebp - 0x84]
test eax, 0xffff0000
jne 0x452e3b
movzx eax, ax
push eax
call fcn.0040d6b0
jmp 0x452e47
push 1
push 0x57e108
call fcn.0040d860
lea eax, [ebp - 0x7c]
mov byte [ebp - 4], 6
push eax
lea eax, [ebp - 0x84]
push eax
lea eax, [ebp - 0x8c]
push eax
call fcn.004ab840
add esp, 0xc
mov edx, dword [ebp - 0x84]
or ebx, 0xffffffff
mov byte [ebp - 4], 8
add edx, 0xfffffff0
mov eax, ebx
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x452e89
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov eax, dword [ebp - 0x8c]
cmp dword [eax - 0xc], 0
je 0x452ec3
mov dword [ebp - 0x74], reloc.OLEAUT32.dll_SysReAllocString
mov dword [ebp - 0x70], str.SOFTWARELudashi
mov dword [ebp - 0x6c], str.VipLevel
mov dword [ebp - 0x68], eax
mov dword [ebp - 0x64], 1
call fcn.0046ebb0
lea edx, [ebp - 0x74]
push edx
push eax
mov ecx, dword [eax]
call dword [ecx + 0x48]
mov eax, dword [ebp - 0x88]
mov ecx, 0x57aa4c
mov eax, dword [eax]
mov dx, word [eax]
cmp dx, word [ecx]
jne 0x452ef6
test dx, dx
je 0x452ef2
mov dx, word [eax + 2]
cmp dx, word [ecx + 2]
jne 0x452ef6
add eax, 4
add ecx, 4
test dx, dx
jne 0x452ed0
xor eax, eax
jmp 0x452efb
sbb eax, eax
or eax, 1
test eax, eax
je 0x452fef
lea eax, [ebp - 0x78]
push 1
push eax
call fcn.004385e0
mov edx, dword [ebp - 0x64]
add esp, 8
cmp edx, 8
jb 0x452f4b
mov ecx, dword [ebp - 0x78]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x452f41
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x4530e1
push edx
push ecx
call fcn.004a975e
add esp, 8
lea eax, [ebp - 0x78]
push 1
push eax
call fcn.004385e0
mov ecx, eax
add esp, 8
mov eax, dword [ebp - 0x88]
cmp dword [ecx + 0x14], 8
mov edx, dword [eax]
mov eax, dword [edx - 0xc]
jb 0x452f6e
mov ecx, dword [ecx]
add eax, eax
push eax
push edx
push 1
push str.oldversion
push ecx
push reloc.OLEAUT32.dll_SysReAllocString
call dword [sym.imp.SHLWAPI.dll_SHSetValueW]
mov edx, dword [ebp - 0x64]
test eax, eax
setne al
mov byte [ebp - 0x7d], al
cmp edx, 8
jb 0x452fca
mov ecx, dword [ebp - 0x78]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x452fbd
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x4530e6
push edx
push ecx
call fcn.004a975e
mov al, byte [ebp - 0x7d]
add esp, 8
xor ecx, ecx
mov dword [ebp - 0x68], 0
mov dword [ebp - 0x64], 7
mov word [ebp - 0x78], cx
test al, al
je 0x452fef
push str.write_register_oldversion_is_failed
call fcn.0044c0c0
add esp, 4
mov edx, dword [ebp - 0x8c]
mov eax, ebx
mov byte [ebp - 4], 4
add edx, 0xfffffff0
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x453010
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov edx, dword [ebp - 0x7c]
mov eax, ebx
mov byte [ebp - 4], 3
add edx, 0xfffffff0
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x45302e
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov byte [ebp - 4], 2
add edi, 0xfffffff0
mov eax, ebx
lock xadd dword [edi + 0xc], eax
dec eax
test eax, eax
jg 0x453049
mov ecx, dword [edi]
push edi
mov eax, dword [ecx]
call dword [eax + 4]
mov byte [ebp - 4], 1
add esi, 0xfffffff0
mov eax, ebx
lock xadd dword [esi + 0xc], eax
dec eax
test eax, eax
jg 0x453064
mov ecx, dword [esi]
push esi
mov eax, dword [ecx]
call dword [eax + 4]
mov edx, dword [ebp - 0x9c]
mov eax, ebx
mov byte [ebp - 4], 0
add edx, 0xfffffff0
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x453085
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov edx, dword [ebp - 0x90]
mov dword [ebp - 4], 0xffffffff
add edx, 0xfffffff0
lock xadd dword [edx + 0xc], ebx
dec ebx
test ebx, ebx
jg 0x4530a7
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 0x10]
xor ecx, ebp
call fcn.004a9748
mov esp, ebp
pop ebp
ret
push 0x80004005
call fcn.0040ad60
push 0x80070057
call fcn.0040ad60
push 0x80004005
call fcn.0040ad60
call fcn.005241f3
call fcn.005241f3
int3