Function at 0x4052d0
Capabilities:
Create process on windows
Query or enumerate registry value

Disassembly:
push ebp
mov ebp, esp
and esp, 0xfffffff8
sub esp, 0x974
mov eax, dword [ebp + 8]
push ebx
push esi
mov esi, 1
cmp eax, esi
push edi
mov dword [esp + 0x14], 0
je 0x405301
cmp eax, 2
je 0x40531c
xor eax, eax
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret
push str.2304
push str.2.30
call fcn.00404990
add esp, 8
cmp eax, esi
je 0x4052f8
cmp eax, 2
je 0x4052f8
lea eax, [esp + 0x10]
push eax
push 0x20019
push 0
push str.SOFTWARECanonVDCSETUP
push reloc.OLEAUT32.dll_SysReAllocString
call dword [sym.imp.ADVAPI32.dll_RegOpenKeyExA]
test eax, eax
jne 0x40555c
mov ecx, 0x41
lea edi, [esp + 0x78]
rep stosd dword es:[edi], eax
lea ecx, [esp + 0x18]
push ecx
mov ecx, dword [esp + 0x14]
lea edx, [esp + 0x7c]
push edx
lea eax, [esp + 0x24]
push eax
push 0
push str.Path
push ecx
mov dword [esp + 0x34], esi
mov dword [esp + 0x30], 0x104
call dword [sym.imp.ADVAPI32.dll_RegQueryValueExA]
test eax, eax
jne 0x405551
cmp dword [ebp + 0xc], esi
mov ebx, dword [sym.imp.USER32.dll_wsprintfA]
jne 0x4053bd
lea edx, [esp + 0x78]
push edx
lea eax, [esp + 0x184]
push str.CURRENT_DIRECTORY_PATH:__s_
push eax
call ebx
mov esi, dword [sym.imp.USER32.dll_MessageBoxA]
add esp, 0xc
push 0
push str.Tool_VDCServiceControl__000
lea ecx, [esp + 0x188]
push ecx
push 0
call esi
jmp 0x4053c3
mov esi, dword [sym.imp.USER32.dll_MessageBoxA]
lea eax, [esp + 0x78]
lea edx, [eax + 1]
lea ebx, [ebx]
mov cl, byte [eax]
inc eax
test cl, cl
jne 0x4053d0
sub eax, edx
cmp byte [esp + eax + 0x77], 0x5c
push str.AuVDC.EXE
je 0x4053f9
lea edx, [esp + 0x7c]
push edx
push 0x44bbe8
lea eax, [esp + 0x58c]
push eax
jmp 0x40540b
lea ecx, [esp + 0x7c]
push ecx
push 0x44bbd0
lea edx, [esp + 0x58c]
push edx
call ebx
mov eax, dword [ebp + 8]
mov edx, 1
add esp, 0x10
cmp eax, edx
jne 0x405446
lea edi, [esp + 0x580]
dec edi
mov al, byte [edi + 1]
inc edi
test al, al
jne 0x405424
mov eax, dword [str.__stop]
mov cx, word [0x44bcb4]
mov dword [edi], eax
mov al, byte [0x44bcb6]
mov word [edi + 4], cx
mov byte [edi + 6], al
cmp dword [ebp + 0xc], edx
jne 0x40547d
lea ecx, [esp + 0x580]
push ecx
lea edx, [esp + 0x184]
push str.Command_Line:__s_
push edx
call ebx
add esp, 0xc
push 0
push str.Tool_VDCServiceControl__001
lea eax, [esp + 0x188]
push eax
push 0
call esi
mov edx, 1
xor eax, eax
mov ecx, 0x11
lea edi, [esp + 0x20]
rep stosd dword es:[edi], eax
lea ecx, [esp + 0x68]
push ecx
mov dword [esp + 0x50], edx
lea edx, [esp + 0x24]
push edx
lea eax, [esp + 0x80]
push eax
push 0
push 0x4000020
push 0
push 0
push 0
lea ecx, [esp + 0x5a0]
push ecx
push 0
mov dword [esp + 0x48], 0x44
mov word [esp + 0x78], 5
call dword [sym.imp.KERNEL32.dll_CreateProcessA]
test eax, eax
mov dword [esp + 0x14], eax
je 0x40551f
cmp dword [ebp + 8], 1
jne 0x40550b
mov esi, dword [sym.imp.KERNEL32.dll_Sleep]
mov edi, dword [sym.imp.USER32.dll_FindWindowA]
xor ebx, ebx
push 0x3e8
call esi
push str.VdcDispatcher
push str.VdcAppClass
call edi
test eax, eax
je 0x405505
inc ebx
cmp ebx, 0x3c
jl 0x4054e8
mov esi, dword [sym.imp.USER32.dll_MessageBoxA]
cmp dword [ebp + 0xc], 1
jne 0x405551
push 0
push str.Tool_VDCServiceControl__002
push str.CreateProcess_OK
jmp 0x40554d
call dword [sym.imp.KERNEL32.dll_GetLastError]
cmp dword [ebp + 0xc], 1
jne 0x405551
push eax
lea edx, [esp + 0x184]
push str.CreateProcess_ERROR:__d_
push edx
call ebx
add esp, 0xc
push 0
push str.Tool_VDCServiceControl__003
lea eax, [esp + 0x188]
push eax
push 0
call esi
mov ecx, dword [esp + 0x10]
push ecx
call dword [sym.imp.ADVAPI32.dll_RegCloseKey]
mov eax, dword [esp + 0x14]
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret