Function at 0x452900
Capabilities:
Set registry value

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x563095
mov eax, dword fs:[0]
push eax
sub esp, 0x90
mov eax, dword [0x5c9c4c]
xor eax, ebp
mov dword [ebp - 0x10], eax
push ebx
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
call fcn.00443f50
mov ecx, eax
call fcn.0043d680
mov esi, eax
call fcn.00443f50
mov ecx, eax
call fcn.0043d620
mov edi, eax
call fcn.00443f50
mov ecx, eax
call fcn.0043d8a0
mov ebx, eax
call fcn.00443f50
mov ecx, eax
call fcn.0043f230
test eax, eax
mov edx, 0x57f25c
mov ecx, 0x57e108
cmove ecx, edx
push ecx
lea ecx, [ebp - 0x90]
call fcn.0040e030
lea eax, [ebp - 0x9c]
mov dword [ebp - 4], 0
push eax
call fcn.00443f50
mov ecx, eax
call fcn.0043d7c0
mov byte [ebp - 4], 1
call fcn.00443f50
mov ecx, eax
call fcn.0043d660
mov dword [ebp - 0x60], reloc.OLEAUT32.dll_SysReAllocString
mov dword [ebp - 0x5c], str.SOFTWARELudashi
mov dword [ebp - 0x58], str.VendorID
mov ecx, dword [esi]
mov dword [ebp - 0x88], eax
mov dword [ebp - 0x54], ecx
mov dword [ebp - 0x50], 1
mov dword [ebp - 0x4c], reloc.OLEAUT32.dll_SysReAllocString
mov dword [ebp - 0x48], str.SOFTWARELudashi
mov dword [ebp - 0x44], str.AppType
mov eax, dword [edi]
mov dword [ebp - 0x40], eax
mov dword [ebp - 0x3c], 1
mov dword [ebp - 0x38], reloc.OLEAUT32.dll_SysReAllocString
mov dword [ebp - 0x34], str.SOFTWARELudashi
mov dword [ebp - 0x30], str.Type
mov eax, dword [ebx]
mov dword [ebp - 0x2c], eax
mov eax, dword [ebp - 0x90]
mov dword [ebp - 0x28], 1
mov dword [ebp - 0x24], reloc.OLEAUT32.dll_SysReAllocString
mov dword [ebp - 0x20], str.SOFTWARELudashi
mov dword [ebp - 0x1c], 0x58005c
mov dword [ebp - 0x18], eax
mov dword [ebp - 0x14], 1
call fcn.00443f50
cmp dword [eax + 0x60], 0
jne 0x452a84
call fcn.00443f50
mov ecx, eax
call fcn.0043f230
test eax, eax
je 0x452a84
mov dword [ebp - 0x74], reloc.OLEAUT32.dll_SysReAllocString
mov dword [ebp - 0x70], str.SOFTWARELudashi
mov dword [ebp - 0x6c], str.CreateShortcut
mov dword [ebp - 0x68], 0x57e108
mov dword [ebp - 0x64], 1
call fcn.0046e930
lea edx, [ebp - 0x74]
push edx
push eax
mov ecx, dword [eax]
call dword [ecx + 0x48]
lea esi, [ebp - 0x60]
mov edi, 4
nop dword [eax]
call fcn.0046e930
push esi
push eax
mov ecx, dword [eax]
call dword [ecx + 0x48]
add esi, 0x14
sub edi, 1
jne 0x452a90
call fcn.00443f50
mov ecx, eax
call fcn.0043d880
push eax
lea ecx, [ebp - 0x94]
call fcn.00410760
mov esi, dword [ebp - 0x94]
mov byte [ebp - 4], 2
cmp dword [esi - 0xc], edi
je 0x452af9
mov dword [ebp - 0x74], reloc.OLEAUT32.dll_SysReAllocString
mov dword [ebp - 0x70], str.SOFTWARELudashi
mov dword [ebp - 0x6c], str.tagID
mov dword [ebp - 0x68], esi
mov dword [ebp - 0x64], 1
call fcn.0046e930
lea edx, [ebp - 0x74]
push edx
push eax
mov ecx, dword [eax]
call dword [ecx + 0x48]
call fcn.00443f50
mov ecx, eax
call fcn.0043d870
push eax
lea ecx, [ebp - 0x98]
call fcn.00410760
mov edi, dword [ebp - 0x98]
mov byte [ebp - 4], 3
cmp dword [edi - 0xc], 0
je 0x452b4f
mov dword [ebp - 0x74], reloc.OLEAUT32.dll_SysReAllocString
mov dword [ebp - 0x70], str.SOFTWARELudashi
mov dword [ebp - 0x6c], str.softID
mov dword [ebp - 0x68], edi
mov dword [ebp - 0x64], 1
call fcn.0046e930
lea edx, [ebp - 0x74]
push edx
push eax
mov ecx, dword [eax]
call dword [ecx + 0x48]
call fcn.0040cd20
mov ecx, eax
test ecx, ecx
je 0x452eb3
mov eax, dword [ecx]
call dword [eax + 0xc]
lea edx, [eax + 0x10]
mov dword [ebp - 0x7c], edx
mov eax, dword [edx - 8]
mov ecx, 1
sub ecx, dword [edx - 4]
sub eax, 0x104
or eax, ecx
mov byte [ebp - 4], 4
jge 0x452b91
push 0x104
lea ecx, [ebp - 0x7c]
call fcn.0040b1b0
mov edx, dword [ebp - 0x7c]
cmp dword [edx - 8], 0x104
jl 0x452ebd
mov dword [edx - 0xc], 0x104
xor ecx, ecx
mov eax, dword [ebp - 0x7c]
push 0x104
push edx
mov word [eax + 0x208], cx
call fcn.004b58f0
mov eax, dword [ebp - 0x7c]
push dword [eax - 8]
push eax
call fcn.00532d90
mov edx, eax
add esp, 8
test edx, edx
js 0x452ebd
mov ecx, dword [ebp - 0x7c]
cmp edx, dword [ecx - 8]
jg 0x452ebd
mov dword [ecx - 0xc], edx
xor ecx, ecx
mov eax, dword [ebp - 0x7c]
mov word [eax + edx*2], cx
call fcn.0040cd20
mov ecx, eax
test ecx, ecx
je 0x452ec7
mov eax, dword [ecx]
call dword [eax + 0xc]
add eax, 0x10
mov dword [ebp - 0x84], eax
mov eax, 0x57e108
mov byte [ebp - 4], 5
lea ecx, [ebp - 0x84]
test eax, 0xffff0000
jne 0x452c2b
movzx eax, ax
push eax
call fcn.0040d6b0
jmp 0x452c37
push 1
push 0x57e108
call fcn.0040d860
lea eax, [ebp - 0x7c]
mov byte [ebp - 4], 6
push eax
lea eax, [ebp - 0x84]
push eax
lea eax, [ebp - 0x8c]
push eax
call fcn.004ab610
add esp, 0xc
mov edx, dword [ebp - 0x84]
or ebx, 0xffffffff
mov byte [ebp - 4], 8
add edx, 0xfffffff0
mov eax, ebx
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x452c79
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov eax, dword [ebp - 0x8c]
cmp dword [eax - 0xc], 0
je 0x452cb3
mov dword [ebp - 0x74], reloc.OLEAUT32.dll_SysReAllocString
mov dword [ebp - 0x70], str.SOFTWARELudashi
mov dword [ebp - 0x6c], str.VipLevel
mov dword [ebp - 0x68], eax
mov dword [ebp - 0x64], 1
call fcn.0046e930
lea edx, [ebp - 0x74]
push edx
push eax
mov ecx, dword [eax]
call dword [ecx + 0x48]
mov eax, dword [ebp - 0x88]
mov ecx, 0x57aa4c
mov eax, dword [eax]
mov dx, word [eax]
cmp dx, word [ecx]
jne 0x452ce6
test dx, dx
je 0x452ce2
mov dx, word [eax + 2]
cmp dx, word [ecx + 2]
jne 0x452ce6
add eax, 4
add ecx, 4
test dx, dx
jne 0x452cc0
xor eax, eax
jmp 0x452ceb
sbb eax, eax
or eax, 1
test eax, eax
je 0x452ddf
lea eax, [ebp - 0x78]
push 1
push eax
call fcn.004383e0
mov edx, dword [ebp - 0x64]
add esp, 8
cmp edx, 8
jb 0x452d3b
mov ecx, dword [ebp - 0x78]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x452d31
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x452ed1
push edx
push ecx
call fcn.004a952e
add esp, 8
lea eax, [ebp - 0x78]
push 1
push eax
call fcn.004383e0
mov ecx, eax
add esp, 8
mov eax, dword [ebp - 0x88]
cmp dword [ecx + 0x14], 8
mov edx, dword [eax]
mov eax, dword [edx - 0xc]
jb 0x452d5e
mov ecx, dword [ecx]
add eax, eax
push eax
push edx
push 1
push str.oldversion
push ecx
push reloc.OLEAUT32.dll_SysReAllocString
call dword [sym.imp.SHLWAPI.dll_SHSetValueW]
mov edx, dword [ebp - 0x64]
test eax, eax
setne al
mov byte [ebp - 0x7d], al
cmp edx, 8
jb 0x452dba
mov ecx, dword [ebp - 0x78]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x452dad
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x452ed6
push edx
push ecx
call fcn.004a952e
mov al, byte [ebp - 0x7d]
add esp, 8
xor ecx, ecx
mov dword [ebp - 0x68], 0
mov dword [ebp - 0x64], 7
mov word [ebp - 0x78], cx
test al, al
je 0x452ddf
push str.write_register_oldversion_is_failed
call fcn.0044beb0
add esp, 4
mov edx, dword [ebp - 0x8c]
mov eax, ebx
mov byte [ebp - 4], 4
add edx, 0xfffffff0
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x452e00
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov edx, dword [ebp - 0x7c]
mov eax, ebx
mov byte [ebp - 4], 3
add edx, 0xfffffff0
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x452e1e
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov byte [ebp - 4], 2
add edi, 0xfffffff0
mov eax, ebx
lock xadd dword [edi + 0xc], eax
dec eax
test eax, eax
jg 0x452e39
mov ecx, dword [edi]
push edi
mov eax, dword [ecx]
call dword [eax + 4]
mov byte [ebp - 4], 1
add esi, 0xfffffff0
mov eax, ebx
lock xadd dword [esi + 0xc], eax
dec eax
test eax, eax
jg 0x452e54
mov ecx, dword [esi]
push esi
mov eax, dword [ecx]
call dword [eax + 4]
mov edx, dword [ebp - 0x9c]
mov eax, ebx
mov byte [ebp - 4], 0
add edx, 0xfffffff0
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x452e75
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov edx, dword [ebp - 0x90]
mov dword [ebp - 4], 0xffffffff
add edx, 0xfffffff0
lock xadd dword [edx + 0xc], ebx
dec ebx
test ebx, ebx
jg 0x452e97
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 0x10]
xor ecx, ebp
call fcn.004a9518
mov esp, ebp
pop ebp
ret
push 0x80004005
call fcn.0040ad60
push 0x80070057
call fcn.0040ad60
push 0x80004005
call fcn.0040ad60
call fcn.00523fc4
call fcn.00523fc4
int3