Function at 0x453b94
Capabilities:
Check if file exists
Delete file
Get common file path
Set registry value

Disassembly:
push 0x27c
mov eax, 0x5b3e16
call fcn.00580ed4
lea esi, [ebp - 0x288]
call fcn.00476200
xor ebx, ebx
mov dword [ebp - 4], ebx
xor eax, eax
push 0x208
mov word [ebp - 0x220], ax
lea eax, [ebp - 0x21e]
push ebx
push eax
call fcn.005783f0
add esp, 0xc
push 0x104
lea eax, [ebp - 0x220]
push eax
call dword [sym.imp.KERNEL32.dll_GetSystemDirectoryW]
lea eax, [ebp - 0x220]
push eax
lea eax, [ebp - 0x25c]
push eax
call fcn.00408561
mov byte [ebp - 4], 1
lea ecx, [ebp - 0x268]
push 0x67cc0c
push ecx
mov ecx, eax
call fcn.0040fc53
pop ecx
pop ecx
mov byte [ebp - 4], 3
lea ecx, [ebp - 0x25c]
call fcn.004085a2
push dword [ebp - 0x268]
call dword [sym.imp.SHLWAPI.dll_PathFileExistsW]
test eax, eax
je 0x453f28
lea eax, [ebp - 0x264]
push eax
call fcn.0046f870
mov byte [ebp - 4], 4
lea ecx, [ebp - 0x25c]
mov dword [esp], 0x67a8dc
push ecx
mov ecx, eax
call fcn.0040fc53
pop ecx
pop ecx
mov byte [ebp - 4], 5
push dword [eax]
mov esi, dword [sym.imp.KERNEL32.dll_DeleteFileW]
call esi
mov byte [ebp - 4], 4
lea ecx, [ebp - 0x25c]
call fcn.004085a2
mov byte [ebp - 4], 3
lea ecx, [ebp - 0x264]
call fcn.004085a2
lea eax, [ebp - 0x264]
push eax
call fcn.0046f870
mov byte [ebp - 4], 6
lea ecx, [ebp - 0x25c]
mov dword [esp], 0x67a8e8
push ecx
mov ecx, eax
call fcn.0040fc53
pop ecx
pop ecx
mov byte [ebp - 4], 7
push dword [eax]
call esi
mov byte [ebp - 4], 6
lea ecx, [ebp - 0x25c]
call fcn.004085a2
mov byte [ebp - 4], 3
lea ecx, [ebp - 0x264]
call fcn.004085a2
lea eax, [ebp - 0x264]
push eax
call fcn.0046f870
mov byte [ebp - 4], 8
lea ecx, [ebp - 0x25c]
mov dword [esp], 0x67a8fc
push ecx
mov ecx, eax
call fcn.0040fc53
pop ecx
pop ecx
mov byte [ebp - 4], 9
push dword [eax]
call esi
mov byte [ebp - 4], 8
lea ecx, [ebp - 0x25c]
call fcn.004085a2
mov byte [ebp - 4], 3
lea ecx, [ebp - 0x264]
call fcn.004085a2
push dword [ebp - 0x268]
call esi
lea ecx, [ebp - 0x258]
call fcn.00423374
mov byte [ebp - 4], 0xa
xor edi, edi
lea eax, [ebp - 0x258]
call fcn.004260b2
mov esi, eax
lea eax, [ebp - 0x280]
push eax
mov byte [ebp - 0x25d], 0
call fcn.004137bf
mov byte [ebp - 4], 0xb
cmp word [esi], bx
je 0x453f06
mov ecx, str.msbtsc
mov eax, esi
mov dx, word [eax]
cmp dx, word [ecx]
jne 0x453d92
cmp dx, bx
je 0x453d8e
mov dx, word [eax + 2]
cmp dx, word [ecx + 2]
jne 0x453d92
add eax, 4
add ecx, 4
cmp dx, bx
jne 0x453d6c
xor eax, eax
jmp 0x453d97
sbb eax, eax
sbb eax, 0xffffffff
cmp eax, ebx
jne 0x453da4
mov byte [ebp - 0x25d], 1
jmp 0x453ded
push esi
lea eax, [ebp - 0x25c]
push eax
call fcn.00408561
mov byte [ebp - 4], 0xc
lea eax, [ebp - 0x25c]
push eax
lea eax, [ebp - 0x280]
call fcn.0041395f
mov byte [ebp - 4], 0xb
lea ecx, [ebp - 0x25c]
call fcn.004085a2
mov eax, esi
lea edx, [eax + 2]
mov cx, word [eax]
inc eax
inc eax
cmp cx, bx
jne 0x453ddb
sub eax, edx
sar eax, 1
lea edi, [edi + eax + 1]
mov eax, esi
lea edx, [eax + 2]
mov cx, word [eax]
inc eax
inc eax
cmp cx, bx
jne 0x453df2
sub eax, edx
sar eax, 1
lea esi, [esi + eax*2 + 2]
cmp word [esi], bx
jne 0x453d65
cmp byte [ebp - 0x25d], 0
je 0x453f06
inc edi
push edi
lea esi, [ebp - 0x23c]
call fcn.0042b336
mov byte [ebp - 4], 0xd
mov eax, dword [ebp - 0x270]
sub eax, dword [ebp - 0x274]
mov dword [ebp - 0x25c], ebx
sar eax, 2
mov dword [ebp - 0x264], ebx
test eax, eax
jbe 0x453ec6
xor edi, edi
lea eax, [ebp - 0x23c]
call fcn.004260b2
mov edi, dword [ebp - 0x264]
mov ebx, eax
add ebx, dword [ebp - 0x25c]
lea esi, [ebp - 0x280]
call fcn.00413946
mov eax, dword [eax]
movzx ecx, word [eax]
inc eax
mov word [ebx], cx
inc eax
inc ebx
inc ebx
test cx, cx
jne 0x453e72
mov edi, dword [ebp - 0x264]
lea esi, [ebp - 0x280]
call fcn.00413946
mov eax, dword [eax]
mov eax, dword [eax - 0xc]
mov ecx, dword [ebp - 0x25c]
inc dword [ebp - 0x264]
lea eax, [ecx + eax*2 + 2]
mov dword [ebp - 0x25c], eax
mov eax, dword [ebp - 0x270]
sub eax, dword [ebp - 0x274]
sar eax, 2
cmp dword [ebp - 0x264], eax
jb 0x453e4a
xor ebx, ebx
mov eax, dword [ebp - 0x228]
add eax, eax
push eax
xor edi, edi
lea eax, [ebp - 0x23c]
call fcn.004260b2
push eax
push 7
push str.BootExecute
push str.SYSTEMCurrentControlSetControlSession_Manager
push reloc.OLEAUT32.dll_SysReAllocString
call dword [sym.imp.SHLWAPI.dll_SHSetValueW]
mov byte [ebp - 4], 0xb
push ebx
push 1
lea esi, [ebp - 0x23c]
call fcn.00409c0f
mov byte [ebp - 4], 0xa
lea eax, [ebp - 0x280]
push eax
call fcn.0041391c
mov byte [ebp - 4], 3
push ebx
push 1
lea esi, [ebp - 0x258]
call fcn.00409c0f
mov byte [ebp - 4], 0
lea ecx, [ebp - 0x268]
call fcn.004085a2
or dword [ebp - 4], 0xffffffff
lea esi, [ebp - 0x288]
call fcn.00476240
call fcn.00580f57
ret