Function at 0x42a3b0
Capabilities:
Accept command line arguments
Set registry value
Terminate process

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x5c
mov dword [ebp - 0x58], ecx
push 0
push 0
push 0x800000
mov ecx, dword [ebp - 0x58]
add ecx, 0x30
call fcn.00433db0
mov ecx, 0x535320
call fcn.004168d0
test eax, eax
je 0x42a3e3
mov ecx, dword [ebp - 0x58]
call fcn.00429700
call fcn.00451f20
push eax
mov eax, dword [ebp - 0x58]
mov ecx, dword [eax + 0x30]
push ecx
mov ecx, dword [ebp - 0x58]
add ecx, 0x198
call fcn.0041d850
call dword [sym.imp.KERNEL32.dll_GetCommandLineW]
push eax
lea ecx, [ebp - 0xc]
call fcn.0040f510
lea ecx, [ebp - 0xc]
call fcn.00416e70
push 0
push str._repairmain
lea ecx, [ebp - 0xc]
call fcn.0040f570
cmp eax, 0xffffffff
je 0x42a446
push str.Repair_Mode__Begin_Repair_n
call fcn.00420df0
add esp, 4
mov ecx, dword [ebp - 0x58]
add ecx, 0x198
call fcn.0041dbb0
jmp 0x42a454
mov ecx, dword [ebp - 0x58]
add ecx, 0x198
call fcn.0041db70
mov ecx, 0x535320
call fcn.00416960
mov ecx, 0x535320
call fcn.00416920
mov edx, dword [ebp - 0x58]
mov dword [edx + 0x2d4], eax
mov ecx, dword [ebp - 0x58]
call fcn.00430300
mov eax, dword [ebp - 0x58]
mov ecx, dword [eax + 0x30]
push ecx
mov ecx, 0x535320
call fcn.00414ef0
mov ecx, dword [ebp - 0x58]
call fcn.0042b760
mov ecx, 0x535320
call fcn.00416800
mov dword [ebp - 8], eax
push 4
lea edx, [ebp - 8]
push edx
push 4
push str.IsPrefetch
push str.Software360Safe
push SysReAllocString
call dword [sym.imp.SHLWAPI.dll_SHSetValueW]
mov ecx, dword [ebp - 0x58]
call fcn.0042bb90
test eax, eax
jne 0x42a556
push 0x14
push 0x80
lea eax, [ebp - 0x24]
push eax
call fcn.00438f30
add esp, 8
mov ecx, eax
call fcn.0044ea20
push eax
push 0x83
lea ecx, [ebp - 0x28]
push ecx
call fcn.00438f30
add esp, 8
mov ecx, eax
call fcn.0044ea20
push eax
push 0
call dword [sym.imp.USER32.dll_MessageBoxW]
xor edx, edx
cmp eax, 6
sete dl
mov byte [ebp - 0x1d], dl
lea ecx, [ebp - 0x28]
call fcn.004335b0
lea ecx, [ebp - 0x24]
call fcn.004335b0
movzx eax, byte [ebp - 0x1d]
test eax, eax
je 0x42a530
call fcn.0049d260
push 0
call dword [sym.imp.KERNEL32.dll_GetCurrentProcess]
push eax
call dword [sym.imp.KERNEL32.dll_TerminateProcess]
mov dword [ebp - 0x2c], 0
lea ecx, [ebp - 0xc]
call fcn.004335b0
mov eax, dword [ebp - 0x2c]
jmp 0x42a998
mov ecx, dword [ebp - 0x58]
add ecx, 0x158
call fcn.0044ea20
push eax
call fcn.00420640
mov ecx, eax
call fcn.00420720
mov ecx, dword [ebp - 0x58]
mov dword [ecx + 0x2d8], 0
mov ecx, dword [ebp - 0x58]
call fcn.0042ef00
test eax, eax
je 0x42a592
mov ecx, dword [ebp - 0x58]
call fcn.0042ef80
mov edx, dword [ebp - 0x58]
push edx
mov eax, dword [ebp - 0x58]
add eax, 0xa4
push eax
mov ecx, dword [ebp - 0x58]
add ecx, 0xbc
call fcn.00441890
push 0x538e3c
push 0x20
call fcn.004ede92
add esp, 8
mov dword [ebp - 0x30], eax
cmp dword [ebp - 0x30], 0
je 0x42a5e3
push 0
push 0
push 1
push 0
mov ecx, dword [ebp - 0x58]
push ecx
push 0x432120
mov ecx, dword [ebp - 0x30]
call fcn.004209d0
mov dword [ebp - 0x5c], eax
jmp 0x42a5ea
mov dword [ebp - 0x5c], 0
mov edx, dword [ebp - 0x58]
mov eax, dword [ebp - 0x5c]
mov dword [edx + 0x2cc], eax
mov ecx, dword [ebp - 0x58]
cmp dword [ecx + 0x2cc], 0
je 0x42a610
mov edx, dword [ebp - 0x58]
mov ecx, dword [edx + 0x2cc]
call fcn.00420ab0
mov ecx, 0x535320
call fcn.00416800
test eax, eax
je 0x42a68c
mov dword [ebp - 0x10], 0
push 4
lea eax, [ebp - 0x10]
push eax
push 4
push str.IsPrefetch
push str.Software360Safe
push SysReAllocString
call dword [sym.imp.SHLWAPI.dll_SHSetValueW]
mov ecx, dword [ebp - 0x58]
call fcn.00429610
test eax, eax
jne 0x42a675
lea ecx, [ebp - 0x11]
call fcn.0044a210
lea ecx, [ebp - 0x11]
call fcn.0044a4e0
push 0
call dword [sym.imp.KERNEL32.dll_GetCurrentProcess]
push eax
call dword [sym.imp.KERNEL32.dll_TerminateProcess]
lea ecx, [ebp - 0x11]
call fcn.0044a220
mov dword [ebp - 0x34], 1
lea ecx, [ebp - 0xc]
call fcn.004335b0
mov eax, dword [ebp - 0x34]
jmp 0x42a998
mov ecx, 0x535320
call fcn.00416850
test eax, eax
je 0x42a6b1
mov dword [ebp - 0x38], 1
lea ecx, [ebp - 0xc]
call fcn.004335b0
mov eax, dword [ebp - 0x38]
jmp 0x42a998
mov ecx, 0x535320
call fcn.004168d0
test eax, eax
jne 0x42a7b9
push 0
mov ecx, dword [ebp - 0x58]
add ecx, 0x30
call fcn.004221d0
mov ecx, 0x535320
call fcn.00416890
test eax, eax
jne 0x42a719
push 5
mov ecx, dword [ebp - 0x58]
add ecx, 0x30
call fcn.00427da0
push 3
push 0
push 0
push 0
push 0
push 0xffffffffffffffff
mov ecx, dword [ebp - 0x58]
add ecx, 0x30
call fcn.00433c90
push 3
push 0
push 0
push 0
push 0
push 0xfffffffffffffffe
mov ecx, dword [ebp - 0x58]
add ecx, 0x30
call fcn.00433c90
call fcn.00454710
mov ecx, eax
call fcn.00455ec0
call dword [sym.imp.KERNEL32.dll_GetCommandLineW]
push eax
lea ecx, [ebp - 0x3c]
call fcn.0040f510
lea ecx, [ebp - 0x3c]
push ecx
mov ecx, dword [ebp - 0x58]
call fcn.0042ec10
lea ecx, [ebp - 0x3c]
call fcn.004335b0
call dword [sym.imp.USER32.dll_DisableProcessWindowsGhosting]
push 0
push 0x3e8
push 0x3e8
mov ecx, dword [ebp - 0x58]
add ecx, 0x30
call fcn.00427de0
call fcn.00454710
mov ecx, eax
call fcn.00455500
test eax, eax
je 0x42a7a2
push 0
push 0x64
push 0x3ec
mov ecx, dword [ebp - 0x58]
add ecx, 0x30
call fcn.00427de0
push 0
push 0x1f4
push 0x3ee
mov ecx, dword [ebp - 0x58]
add ecx, 0x30
call fcn.00427de0
jmp 0x42a7b9
push 0
push 0x7d0
push 0x3ed
mov ecx, dword [ebp - 0x58]
add ecx, 0x30
call fcn.00427de0
mov edx, dword [ebp - 0x58]
mov eax, dword [edx + 0x30]
push eax
call fcn.00456720
mov ecx, eax
call fcn.00456e80
mov ecx, dword [ebp - 0x58]
mov edx, dword [ecx + 0x30]
push edx
call fcn.0044eef0
mov ecx, eax
call fcn.0044f7b0
call fcn.0044eef0
mov ecx, eax
call fcn.0044f0e0
push 0
push 0x7d0
push 0x3f2
mov ecx, dword [ebp - 0x58]
add ecx, 0x30
call fcn.00427de0
call fcn.004a01e0
mov ecx, eax
call fcn.004ac030
test eax, eax
jne 0x42a852
mov ecx, dword [ebp - 0x58]
add ecx, 0x314
call fcn.004498c0
test eax, eax
je 0x42a832
mov ecx, dword [ebp - 0x58]
add ecx, 0x314
call fcn.004498f0
push str.funnametijian
call dword [sym.imp.KERNEL32.dll_GetCommandLineW]
push eax
call dword [sym.imp.SHLWAPI.dll_StrStrIW]
test eax, eax
jne 0x42a852
push 1
mov ecx, dword [ebp - 0x58]
call fcn.00430960
push 1
push 0xf290
mov eax, dword [ebp - 0x58]
add eax, 0x64
push ecx
mov ecx, esp
push eax
call fcn.004529c0
lea ecx, [ebp - 0x44]
push ecx
call fcn.004280b0
add esp, 0x10
push eax
mov ecx, dword [ebp - 0x58]
add ecx, 0x98
call fcn.00436220
lea ecx, [ebp - 0x44]
call fcn.0049a2d0
mov ecx, dword [ebp - 0x58]
add ecx, 0x98
call fcn.00426390
movzx edx, al
test edx, edx
je 0x42a927
push 0
mov ecx, dword [ebp - 0x58]
add ecx, 0x98
call fcn.0044ea20
push eax
call fcn.00451ea0
add esp, 8
push 1
push 0xf292
lea eax, [ebp - 0x48]
push eax
mov ecx, dword [ebp - 0x58]
add ecx, 0x98
call fcn.00439180
mov ecx, eax
call fcn.004225b0
push eax
lea ecx, [ebp - 0x18]
call fcn.004263b0
lea ecx, [ebp - 0x48]
call fcn.0049a2d0
lea ecx, [ebp - 0x18]
call fcn.00426390
movzx ecx, al
test ecx, ecx
je 0x42a91f
mov dword [ebp - 0x1c], 0
lea edx, [ebp - 0x1c]
push edx
push 0x50ca1c
mov eax, dword [ebp - 0x58]
push eax
lea ecx, [ebp - 0x18]
call fcn.0044ea20
push eax
call fcn.00419b50
lea ecx, [ebp - 0x18]
call fcn.0049a2d0
push 1
push 0xf251
mov ecx, dword [ebp - 0x58]
add ecx, 0x64
push ecx
mov edx, esp
push ecx
mov ecx, edx
call fcn.004529c0
lea eax, [ebp - 0x50]
push eax
call fcn.004280b0
add esp, 0x10
push eax
lea ecx, [ebp - 4]
call fcn.004263b0
lea ecx, [ebp - 0x50]
call fcn.0049a2d0
lea ecx, [ebp - 4]
call fcn.00426390
movzx ecx, al
test ecx, ecx
je 0x42a97e
push 0
lea ecx, [ebp - 4]
call fcn.0044ea20
push eax
call fcn.00451ea0
add esp, 8
mov dword [ebp - 0x54], 1
lea ecx, [ebp - 4]
call fcn.0049a2d0
lea ecx, [ebp - 0xc]
call fcn.004335b0
mov eax, dword [ebp - 0x54]
mov esp, ebp
pop ebp
ret 4