Function at 0x46f7d0
Capabilities:
Set registry value

Disassembly:
push ebp
mov ebp, esp
mov eax, 0x1014
call fcn.004e1f60
mov eax, dword [0x55e2f4]
xor eax, ebp
mov dword [ebp - 4], eax
mov ecx, dword [ebp + 0xc]
lea edx, [ebp - 0x100c]
push esi
mov esi, dword [ebp + 8]
sub edx, ecx
mov dword [ebp - 0x1010], 0
mov dword [ebp - 0x1014], 0
nop word [eax + eax]
movzx eax, word [ecx]
lea ecx, [ecx + 2]
mov word [edx + ecx - 2], ax
test ax, ax
jne 0x46f810
lea eax, [ebp - 0x100c]
push eax
call fcn.0041eee0
push str.SoftwareMicrosoftWindowsCurrentVersionUninstallCnCrypt
push str.ADDING_REG
push esi
call fcn.004721e0
add esp, 0x10
lea eax, [ebp - 0x1014]
push eax
lea eax, [ebp - 0x1010]
push eax
push 0
push 0x20006
push 0
push 0
push 0
push str.SoftwareMicrosoftWindowsCurrentVersionUninstallCnCrypt
push reloc.OLEAUT32.dll_SysReAllocString
call dword [sym.imp.ADVAPI32.dll_RegCreateKeyExW]
test eax, eax
jne 0x46fb56
lea eax, [ebp - 0x100c]
push eax
lea eax, [ebp - 0x808]
push str.__sCnCrypt.exe___setup__u
push eax
call fcn.004054c0
lea ecx, [ebp - 0x808]
add esp, 0xc
lea edx, [ecx + 2]
mov ax, word [ecx]
add ecx, 2
test ax, ax
jne 0x46f896
mov esi, dword [sym.imp.ADVAPI32.dll_RegSetValueExW]
sub ecx, edx
sar ecx, 1
lea eax, [ecx*2 + 2]
push eax
lea eax, [ebp - 0x808]
push eax
push 1
push 0
push str.UninstallString
push dword [ebp - 0x1010]
call esi
test eax, eax
jne 0x46fb56
lea eax, [ebp - 0x100c]
push eax
lea eax, [ebp - 0x808]
push str.__sCnCrypt.exe___setup__c
push eax
call fcn.004054c0
lea ecx, [ebp - 0x808]
add esp, 0xc
lea edx, [ecx + 2]
mov ax, word [ecx]
add ecx, 2
test ax, ax
jne 0x46f8f7
sub ecx, edx
sar ecx, 1
lea eax, [ecx*2 + 2]
push eax
lea eax, [ebp - 0x808]
push eax
push 1
push 0
push str.ModifyPath
push dword [ebp - 0x1010]
call esi
test eax, eax
jne 0x46fb56
lea eax, [ebp - 0x100c]
push eax
lea eax, [ebp - 0x808]
push str.__sCnCrypt.exe_
push eax
call fcn.004054c0
lea ecx, [ebp - 0x808]
add esp, 0xc
lea edx, [ecx + 2]
mov ax, word [ecx]
add ecx, 2
test ax, ax
jne 0x46f952
sub ecx, edx
sar ecx, 1
lea eax, [ecx*2 + 2]
push eax
lea eax, [ebp - 0x808]
push eax
push 1
push 0
push str.DisplayIcon
push dword [ebp - 0x1010]
call esi
test eax, eax
jne 0x46fb56
mov eax, 0xc
call fcn.004e1f60
mov eax, esp
push 3
push 5
push 0x518f70
push eax
call fcn.00405530
lea edx, [ebp - 0x808]
sub edx, eax
nop dword [eax]
movzx ecx, word [eax]
lea eax, [eax + 2]
mov word [edx + eax - 2], cx
test cx, cx
jne 0x46f9b0
lea ecx, [ebp - 0x808]
lea edx, [ecx + 2]
nop dword [eax]
mov ax, word [ecx]
add ecx, 2
test ax, ax
jne 0x46f9d0
sub ecx, edx
sar ecx, 1
lea eax, [ecx*2 + 2]
push eax
lea eax, [ebp - 0x808]
push eax
push 1
push 0
push str.DisplayVersion
push dword [ebp - 0x1010]
call esi
test eax, eax
jne 0x46fb56
xor ecx, ecx
nop dword [eax]
movzx eax, word [ecx + 0x51a1d0]
lea ecx, [ecx + 2]
mov word [ebp + ecx - 0x80a], ax
test ax, ax
jne 0x46fa10
lea ecx, [ebp - 0x808]
lea edx, [ecx + 2]
mov ax, word [ecx]
add ecx, 2
test ax, ax
jne 0x46fa30
sub ecx, edx
sar ecx, 1
lea eax, [ecx*2 + 2]
push eax
lea eax, [ebp - 0x808]
push eax
push 1
push 0
push str.DisplayName
push dword [ebp - 0x1010]
call esi
test eax, eax
jne 0x46fb56
xor ecx, ecx
nop dword [eax]
movzx eax, word [ecx + 0x524344]
lea ecx, [ecx + 2]
mov word [ebp + ecx - 0x80a], ax
test ax, ax
jne 0x46fa70
lea ecx, [ebp - 0x808]
lea edx, [ecx + 2]
mov ax, word [ecx]
add ecx, 2
test ax, ax
jne 0x46fa90
sub ecx, edx
sar ecx, 1
lea eax, [ecx*2 + 2]
push eax
lea eax, [ebp - 0x808]
push eax
push 1
push 0
push str.Publisher
push dword [ebp - 0x1010]
call esi
test eax, eax
jne 0x46fb56
mov eax, 0x30
call fcn.004e1f60
mov eax, esp
push 3
push 0x18
push str.http:__www.cncrypt.com_
push eax
call fcn.00405530
lea edx, [ebp - 0x808]
sub edx, eax
nop word [eax + eax]
movzx ecx, word [eax]
lea eax, [eax + 2]
mov word [edx + eax - 2], cx
test cx, cx
jne 0x46faf0
lea ecx, [ebp - 0x808]
lea edx, [ecx + 2]
nop dword [eax]
mov ax, word [ecx]
add ecx, 2
test ax, ax
jne 0x46fb10
sub ecx, edx
sar ecx, 1
lea eax, [ecx*2 + 2]
push eax
lea eax, [ebp - 0x808]
push eax
push 1
push 0
push str.URLInfoAbout
push dword [ebp - 0x1010]
call esi
test eax, eax
jne 0x46fb56
push dword [ebp - 0x1010]
call dword [sym.imp.ADVAPI32.dll_RegCloseKey]
mov eax, 1
jmp 0x46fb78
call dword [sym.imp.KERNEL32.DLL_GetLastError]
mov ecx, dword [ebp - 0x1010]
mov esi, eax
test ecx, ecx
je 0x46fb6f
push ecx
call dword [sym.imp.ADVAPI32.dll_RegCloseKey]
push esi
call dword [sym.imp.KERNEL32.DLL_SetLastError]
xor eax, eax
lea esp, [ebp - 0x1018]
pop esi
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.004e1f40
mov esp, ebp
pop ebp
ret