Function at 0x451570
Capabilities:
Persist via run registry key

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x461574
mov eax, dword fs:[0]
push eax
sub esp, 0x4dc
mov eax, dword [0x47ea94]
xor eax, ebp
mov dword [ebp - 0x10], eax
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov dword [ebp - 0x4e8], ecx
push 0
push 0
push 0
push 0
push 0
push str.CQMRepairApp::CreateLnkInProgramFolder
lea ecx, [ebp - 0x4a0]
call fcn.00407b80
mov dword [ebp - 4], 0
mov dword [ebp - 0x4a4], 0
push 0x46b390
lea eax, [ebp - 0x4a4]
push eax
call fcn.004355e0
add esp, 8
test eax, eax
je 0x45160b
mov dword [ebp - 0x4b4], 0
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x4a0]
call fcn.00407aa0
mov eax, dword [ebp - 0x4b4]
jmp 0x451ba8
mov dword [ebp - 0x4c0], 0
mov dword [ebp - 0x4bc], 0
mov dword [ebp - 0x4b8], 0
mov dword [ebp - 0x4ac], 0
lea ecx, [ebp - 0x4ac]
push ecx
lea edx, [ebp - 0x4b8]
push edx
lea eax, [ebp - 0x4bc]
push eax
lea ecx, [ebp - 0x4c0]
push ecx
call fcn.00434f90
add esp, 0x10
test eax, eax
je 0x45168e
cmp dword [ebp - 0x4ac], 0xbb9
jne 0x45168e
mov dword [ebp - 0x4c4], 0x1194
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x4a0]
call fcn.00407aa0
mov eax, dword [ebp - 0x4c4]
jmp 0x451ba8
mov dword [ebp - 0x4a8], 0
call fcn.00435190
mov dword [ebp - 0x4a8], eax
cmp dword [ebp - 0x4a8], 0
jne 0x4516d3
mov dword [ebp - 0x4c8], 0x10b
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x4a0]
call fcn.00407aa0
mov eax, dword [ebp - 0x4c8]
jmp 0x451ba8
push 0x412
push 0
lea edx, [ebp - 0x424]
push edx
call sub.VCRUNTIME140.dll_memset
add esp, 0xc
mov eax, dword [ebp - 0x4a8]
push eax
push 0x208
lea ecx, [ebp - 0x424]
push ecx
call dword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_wcscpy_s]
add esp, 0xc
push str.QQPCTRAY.EXE
lea edx, [ebp - 0x424]
push edx
call dword [sym.imp.SHLWAPI.dll_PathAppendW]
lea eax, [ebp - 0x424]
push eax
call fcn.0043df60
add esp, 4
test eax, eax
jne 0x451751
mov dword [ebp - 0x4cc], 2
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x4a0]
call fcn.00407aa0
mov eax, dword [ebp - 0x4cc]
jmp 0x451ba8
lea ecx, [ebp - 0x43c]
call fcn.00408ae0
mov byte [ebp - 4], 1
lea ecx, [ebp - 0x49c]
call fcn.00408ae0
mov byte [ebp - 4], 2
lea ecx, [ebp - 0x484]
call fcn.00408ae0
mov byte [ebp - 4], 3
lea ecx, [ebp - 0x46c]
call fcn.00408ae0
mov byte [ebp - 4], 4
lea ecx, [ebp - 0x454]
call fcn.00408ae0
mov byte [ebp - 4], 5
lea ecx, [ebp - 0x424]
push ecx
lea ecx, [ebp - 0x484]
call fcn.00408a70
push str._showui
lea ecx, [ebp - 0x454]
call fcn.00408a70
mov edx, dword [ebp - 0x4a8]
push edx
lea ecx, [ebp - 0x46c]
call fcn.00408a70
lea eax, [ebp - 0x43c]
push eax
push str.Programs
push str.SOFTWAREMicrosoftWindowsCurrentVersionexplorerShell_Folders
push SysReAllocString
call fcn.0043c1b0
add esp, 0x10
test eax, eax
je 0x451864
mov dword [ebp - 0x4d0], 0x10b
mov byte [ebp - 4], 4
lea ecx, [ebp - 0x454]
call fcn.00405b50
mov byte [ebp - 4], 3
lea ecx, [ebp - 0x46c]
call fcn.00405b50
mov byte [ebp - 4], 2
lea ecx, [ebp - 0x484]
call fcn.00405b50
mov byte [ebp - 4], 1
lea ecx, [ebp - 0x49c]
call fcn.00405b50
mov byte [ebp - 4], 0
lea ecx, [ebp - 0x43c]
call fcn.00405b50
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x4a0]
call fcn.00407aa0
mov eax, dword [ebp - 0x4d0]
jmp 0x451ba8
lea ecx, [ebp - 0x43c]
call fcn.00405f70
test eax, eax
jne 0x4518e5
mov dword [ebp - 0x4d4], 0x10b
mov byte [ebp - 4], 4
lea ecx, [ebp - 0x454]
call fcn.00405b50
mov byte [ebp - 4], 3
lea ecx, [ebp - 0x46c]
call fcn.00405b50
mov byte [ebp - 4], 2
lea ecx, [ebp - 0x484]
call fcn.00405b50
mov byte [ebp - 4], 1
lea ecx, [ebp - 0x49c]
call fcn.00405b50
mov byte [ebp - 4], 0
lea ecx, [ebp - 0x43c]
call fcn.00405b50
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x4a0]
call fcn.00407aa0
mov eax, dword [ebp - 0x4d4]
jmp 0x451ba8
lea ecx, [ebp - 0x43c]
call fcn.00405b40
push eax
push 0x208
lea ecx, [ebp - 0x424]
push ecx
call dword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_wcscpy_s]
add esp, 0xc
push 0x46b3cc
lea edx, [ebp - 0x424]
push edx
call dword [sym.imp.SHLWAPI.dll_PathAppendW]
lea eax, [ebp - 0x424]
push eax
call fcn.0043df60
add esp, 4
test eax, eax
jne 0x45199d
mov dword [ebp - 0x4d8], 2
mov byte [ebp - 4], 4
lea ecx, [ebp - 0x454]
call fcn.00405b50
mov byte [ebp - 4], 3
lea ecx, [ebp - 0x46c]
call fcn.00405b50
mov byte [ebp - 4], 2
lea ecx, [ebp - 0x484]
call fcn.00405b50
mov byte [ebp - 4], 1
lea ecx, [ebp - 0x49c]
call fcn.00405b50
mov byte [ebp - 4], 0
lea ecx, [ebp - 0x43c]
call fcn.00405b50
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x4a0]
call fcn.00407aa0
mov eax, dword [ebp - 0x4d8]
jmp 0x451ba8
push 0x46b464
lea ecx, [ebp - 0x424]
push ecx
call dword [sym.imp.SHLWAPI.dll_PathAppendW]
lea edx, [ebp - 0x424]
push edx
call fcn.0043df60
add esp, 4
test eax, eax
je 0x451a56
mov dword [ebp - 0x4a4], 1
push 0x46b478
mov eax, dword [ebp - 0x4a4]
push eax
call fcn.00435600
add esp, 8
mov dword [ebp - 0x4dc], 0x50
mov byte [ebp - 4], 4
lea ecx, [ebp - 0x454]
call fcn.00405b50
mov byte [ebp - 4], 3
lea ecx, [ebp - 0x46c]
call fcn.00405b50
mov byte [ebp - 4], 2
lea ecx, [ebp - 0x484]
call fcn.00405b50
mov byte [ebp - 4], 1
lea ecx, [ebp - 0x49c]
call fcn.00405b50
mov byte [ebp - 4], 0
lea ecx, [ebp - 0x43c]
call fcn.00405b50
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x4a0]
call fcn.00407aa0
mov eax, dword [ebp - 0x4dc]
jmp 0x451ba8
lea ecx, [ebp - 0x424]
push ecx
lea ecx, [ebp - 0x43c]
call fcn.00408a70
mov dword [ebp - 0x4b0], 0
lea edx, [ebp - 0x46c]
push edx
push 1
lea eax, [ebp - 0x49c]
push eax
lea ecx, [ebp - 0x43c]
push ecx
lea edx, [ebp - 0x454]
push edx
lea eax, [ebp - 0x484]
push eax
call fcn.0043fab0
add esp, 0x18
cmp dword [ebp - 0x4b0], 0
jne 0x451b39
mov dword [ebp - 0x4a4], 1
push str.ProgramLnk
mov ecx, dword [ebp - 0x4a4]
push ecx
call fcn.00435600
add esp, 8
mov dword [ebp - 0x4e0], 0
mov byte [ebp - 4], 4
lea ecx, [ebp - 0x454]
call fcn.00405b50
mov byte [ebp - 4], 3
lea ecx, [ebp - 0x46c]
call fcn.00405b50
mov byte [ebp - 4], 2
lea ecx, [ebp - 0x484]
call fcn.00405b50
mov byte [ebp - 4], 1
lea ecx, [ebp - 0x49c]
call fcn.00405b50
mov byte [ebp - 4], 0
lea ecx, [ebp - 0x43c]
call fcn.00405b50
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x4a0]
call fcn.00407aa0
mov eax, dword [ebp - 0x4e0]
jmp 0x451ba8
mov edx, dword [ebp - 0x4b0]
mov dword [ebp - 0x4e4], edx
mov byte [ebp - 4], 4
lea ecx, [ebp - 0x454]
call fcn.00405b50
mov byte [ebp - 4], 3
lea ecx, [ebp - 0x46c]
call fcn.00405b50
mov byte [ebp - 4], 2
lea ecx, [ebp - 0x484]
call fcn.00405b50
mov byte [ebp - 4], 1
lea ecx, [ebp - 0x49c]
call fcn.00405b50
mov byte [ebp - 4], 0
lea ecx, [ebp - 0x43c]
call fcn.00405b50
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x4a0]
call fcn.00407aa0
mov eax, dword [ebp - 0x4e4]
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
mov ecx, dword [ebp - 0x10]
xor ecx, ebp
call fcn.0045be1b
mov esp, ebp
pop ebp
ret