Function at 0x4230c0
Capabilities:
Set registry value

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x73c
mov eax, dword [0x559410]
xor eax, ebp
mov dword [ebp - 4], eax
push 0x104
lea eax, [ebp - 0x108]
push 0
push eax
call fcn.00455160
push 0x208
lea eax, [ebp - 0x518]
push 0
push eax
call fcn.00455160
add esp, 0x18
lea eax, [ebp - 0x73c]
push eax
push 0x524ca8
push reloc.OLEAUT32.dll_SysReAllocString
call dword [sym.imp.ADVAPI32.dll_RegCreateKeyW]
test eax, eax
je 0x423133
push dword [ebp - 0x73c]
call dword [sym.imp.ADVAPI32.dll_RegCloseKey]
xor eax, eax
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.00453c72
mov esp, ebp
pop ebp
ret
push ebx
push esi
push edi
push 0x208
lea eax, [ebp - 0x720]
push 0
push eax
call fcn.00455160
push 0x104
lea eax, [ebp - 0x310]
push 0
push eax
call fcn.00455160
cmp dword [0x5591f0], 8
mov ebx, 0x5591dc
mov eax, ebx
cmovae eax, dword [0x5591dc]
push str.InpaintMAX.exe
push eax
lea eax, [ebp - 0x720]
push 0x524af0
push eax
call fcn.00421970
mov edi, dword [sym.imp.KERNEL32.dll_WideCharToMultiByte]
lea eax, [ebp - 0x310]
add esp, 0x28
push 0
push 0
push 0x104
push eax
push 0xffffffffffffffff
lea eax, [ebp - 0x720]
push eax
push 0
push 0
call edi
push 0x104
lea eax, [ebp - 0x20c]
push 0
push eax
call fcn.00455160
lea eax, [ebp - 0x20c]
push eax
lea eax, [ebp - 0x310]
push eax
call fcn.004248f0
cmp dword [0x5591f0], 8
mov eax, ebx
push str.InpaintMAX.exe
cmovae eax, dword [0x5591dc]
push eax
lea eax, [ebp - 0x518]
push 0x524af0
push eax
call fcn.00421970
add esp, 0x24
lea eax, [ebp - 0x108]
push 0
push 0
push 0x104
push eax
push 0xffffffffffffffff
lea eax, [ebp - 0x518]
push eax
push 0
push 0
call edi
lea ecx, [ebp - 0x108]
lea edx, [ecx + 1]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x423228
mov esi, dword [sym.imp.ADVAPI32.dll_RegSetValueExA]
lea eax, [ebp - 0x108]
sub ecx, edx
push ecx
push eax
push 1
push 0
push 0x524d28
push dword [ebp - 0x73c]
call esi
push 0x104
lea eax, [ebp - 0x108]
push 0
push eax
call fcn.00455160
add esp, 0xc
mov dword [ebp - 0x724], 7
xor eax, eax
mov dword [ebp - 0x728], 0
lea ecx, [ebp - 0x738]
mov word [ebp - 0x738], ax
push 5
push 0x524c64
call fcn.004197f0
cmp dword [ebp - 0x724], 8
lea ecx, [ebp - 0x108]
push 0
push 0
push 0x104
push ecx
push 0xffffffffffffffff
lea eax, [ebp - 0x738]
cmovae eax, dword [ebp - 0x738]
push eax
push 0
push 0
call edi
lea ecx, [ebp - 0x108]
lea edx, [ecx + 1]
jmp 0x4232d0
mov al, byte [ecx]
inc ecx
test al, al
jne 0x4232d0
sub ecx, edx
lea eax, [ebp - 0x108]
push ecx
push eax
push 1
push 0
push 0x524d34
push dword [ebp - 0x73c]
call esi
lea ecx, [ebp - 0x20c]
lea edx, [ecx + 1]
jmp 0x423300
mov al, byte [ecx]
inc ecx
test al, al
jne 0x423300
sub ecx, edx
lea eax, [ebp - 0x20c]
push ecx
push eax
push 1
push 0
push 0x524d40
push dword [ebp - 0x73c]
call esi
push 0
push 0
push 0x104
lea eax, [ebp - 0x108]
push eax
push 0xffffffffffffffff
push str.Shanghai_ZiXin_NetWork_Studio_Co._Ltd.
push 0
push 0
call edi
lea ecx, [ebp - 0x108]
lea edx, [ecx + 1]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x423348
sub ecx, edx
lea eax, [ebp - 0x108]
push ecx
push eax
push 1
push 0
push 0x524da0
push dword [ebp - 0x73c]
call esi
cmp dword [0x5591f0], 8
lea eax, [ebp - 0x518]
push str.uninst.exe
cmovae ebx, dword [0x5591dc]
push ebx
push 0x524af0
push eax
call fcn.00421970
add esp, 0x10
lea eax, [ebp - 0x108]
push 0
push 0
push 0x104
push eax
push 0xffffffffffffffff
lea eax, [ebp - 0x518]
push eax
push 0
push 0
call edi
lea ecx, [ebp - 0x108]
lea edx, [ecx + 1]
lea ebx, [ebx]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x4233c0
sub ecx, edx
lea eax, [ebp - 0x108]
push ecx
push eax
push 1
push 0
push 0x524dac
push dword [ebp - 0x73c]
call esi
push 0
push 0
push 0x104
lea eax, [ebp - 0x108]
push eax
push 0xffffffffffffffff
push 0x524a84
push 0
push 0
call edi
lea ecx, [ebp - 0x108]
lea edx, [ecx + 1]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x423408
sub ecx, edx
lea eax, [ebp - 0x108]
push ecx
push eax
push 1
push 0
push 0x524dbc
push dword [ebp - 0x73c]
call esi
push dword [ebp - 0x73c]
call dword [sym.imp.ADVAPI32.dll_RegCloseKey]
cmp dword [ebp - 0x724], 8
pop edi
pop esi
pop ebx
jb 0x423450
push dword [ebp - 0x738]
call fcn.00406890
add esp, 4
mov ecx, dword [ebp - 4]
mov eax, 1
xor ecx, ebp
call fcn.00453c72
mov esp, ebp
pop ebp
ret