Function at 0x429c60
Capabilities:
Query or enumerate registry value

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x428
mov eax, dword [0x469340]
xor eax, ebp
mov dword [ebp - 8], eax
mov dword [ebp - 0x428], ecx
mov ecx, dword [ebp + 0xc]
call fcn.00421420
test eax, eax
jne 0x429c91
mov ecx, dword [ebp + 8]
call fcn.00421420
test eax, eax
je 0x429c98
xor eax, eax
jmp 0x429fd5
mov ecx, dword [ebp - 0x428]
add ecx, 8
call fcn.00421420
test eax, eax
je 0x429ce7
push 0x104
push 0x104
mov ecx, dword [ebp - 0x428]
add ecx, 8
call fcn.0042a900
push eax
mov eax, dword [ebp - 0x428]
mov ecx, dword [eax]
mov edx, dword [ebp - 0x428]
push edx
mov eax, dword [ecx + 0x14]
call eax
push 0xffffffffffffffff
mov ecx, dword [ebp - 0x428]
add ecx, 8
call fcn.0040cdd0
mov ecx, dword [ebp - 0x428]
add ecx, 4
call fcn.00421420
test eax, eax
je 0x429d97
push 0x208
push 0
lea ecx, [ebp - 0x210]
push ecx
call fcn.0042b460
add esp, 0xc
push 0x104
lea edx, [ebp - 0x210]
push edx
push 0
call dword [sym.imp.KERNEL32.dll_GetModuleFileNameW]
lea eax, [ebp - 0x210]
push eax
call dword [sym.imp.SHLWAPI.dll_PathRemoveFileSpecW]
lea ecx, [ebp - 0x210]
push ecx
call dword [sym.imp.SHLWAPI.dll_PathRemoveFileSpecW]
push 0x45ddb0
lea edx, [ebp - 0x210]
push edx
call dword [sym.imp.SHLWAPI.dll_PathAppendW]
push 0x104
push 0x104
mov ecx, dword [ebp - 0x428]
add ecx, 4
call fcn.0042a900
push eax
lea eax, [ebp - 0x210]
push eax
mov ecx, dword [ebp - 0x428]
mov edx, dword [ecx]
mov eax, dword [ebp - 0x428]
push eax
mov ecx, dword [edx + 4]
call ecx
push 0xffffffffffffffff
mov ecx, dword [ebp - 0x428]
add ecx, 4
call fcn.0040cdd0
mov ecx, dword [ebp - 0x428]
add ecx, 0x10
call fcn.00421420
test eax, eax
je 0x429e04
mov dword [ebp - 0x218], 0x104
mov dword [ebp - 0x214], 1
lea edx, [ebp - 0x218]
push edx
push 0x104
mov ecx, dword [ebp - 0x428]
add ecx, 0x10
call fcn.0042a900
push eax
lea eax, [ebp - 0x214]
push eax
push str.VendorID
push str.SOFTWARELudashi
push reloc.OLEAUT32.dll_SysReAllocString
call dword [sym.imp.SHLWAPI.dll_SHGetValueW]
push 0xffffffffffffffff
mov ecx, dword [ebp - 0x428]
add ecx, 0x10
call fcn.0040cdd0
mov ecx, dword [ebp - 0x428]
add ecx, 0x14
call fcn.00421420
test eax, eax
je 0x429e84
push 0x208
push 0
lea ecx, [ebp - 0x420]
push ecx
call fcn.0042b460
add esp, 0xc
push 0x104
lea edx, [ebp - 0x420]
push edx
push 0
call dword [sym.imp.KERNEL32.dll_GetModuleFileNameW]
push 0x104
push 0x104
mov ecx, dword [ebp - 0x428]
add ecx, 0x14
call fcn.0042a900
push eax
lea eax, [ebp - 0x420]
push eax
mov ecx, dword [ebp - 0x428]
mov edx, dword [ecx]
mov eax, dword [ebp - 0x428]
push eax
mov ecx, dword [edx + 4]
call ecx
push 0xffffffffffffffff
mov ecx, dword [ebp - 0x428]
add ecx, 0x14
call fcn.0040cdd0
push str.http:__s1.ludashi.com_url2_pidpidtypetypeactionactionappververmodvermodvermidmid
lea ecx, [ebp - 4]
call fcn.0040ca80
push 0x45dee0
lea ecx, [ebp - 4]
call fcn.0042a870
test eax, eax
jle 0x429eb8
mov ecx, dword [ebp + 8]
call fcn.0040c890
push eax
push str.type
lea ecx, [ebp - 4]
call fcn.0042a600
push 0x45df00
lea ecx, [ebp - 4]
call fcn.0042a870
test eax, eax
jle 0x429edf
mov ecx, dword [ebp + 0xc]
call fcn.0040c890
push eax
push str.action
lea ecx, [ebp - 4]
call fcn.0042a600
push 0x45df28
lea ecx, [ebp - 4]
call fcn.0042a870
test eax, eax
jle 0x429f0c
mov ecx, dword [ebp - 0x428]
add ecx, 4
call fcn.0040c890
push eax
push str.ver
lea ecx, [ebp - 4]
call fcn.0042a600
push 0x45df40
lea ecx, [ebp - 4]
call fcn.0042a870
test eax, eax
jle 0x429f39
mov ecx, dword [ebp - 0x428]
add ecx, 0x14
call fcn.0040c890
push eax
push str.modver
lea ecx, [ebp - 4]
call fcn.0042a600
push 0x45df68
lea ecx, [ebp - 4]
call fcn.0042a870
test eax, eax
jle 0x429f66
mov ecx, dword [ebp - 0x428]
add ecx, 8
call fcn.0040c890
push eax
push str.mid
lea ecx, [ebp - 4]
call fcn.0042a600
push 0x45df80
lea ecx, [ebp - 4]
call fcn.0042a870
test eax, eax
jle 0x429f93
mov ecx, dword [ebp - 0x428]
add ecx, 0x10
call fcn.0040c890
push eax
push str.pid
lea ecx, [ebp - 4]
call fcn.0042a600
cmp dword [ebp + 0x10], 0
je 0x429fa5
mov edx, dword [ebp + 0x10]
push edx
lea ecx, [ebp - 4]
call fcn.0040f3a0
lea ecx, [ebp - 4]
call fcn.0040c890
push eax
mov eax, dword [ebp - 0x428]
mov ecx, dword [eax]
mov edx, dword [ebp - 0x428]
push edx
mov eax, dword [ecx]
call eax
mov dword [ebp - 0x424], eax
lea ecx, [ebp - 4]
call fcn.0040c8a0
mov eax, dword [ebp - 0x424]
mov ecx, dword [ebp - 8]
xor ecx, ebp
call fcn.0042b4da
mov esp, ebp
pop ebp
ret 0xc