Function at 0x405160
Capabilities:
Set registry value

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x42beb5
mov eax, dword fs:[0]
push eax
sub esp, 0x280
mov eax, dword [0x434090]
xor eax, ebp
mov dword [ebp - 0x10], eax
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov dword [ebp - 0x21c], ecx
mov ecx, 0x21
mov esi, 0x42f910
lea edi, [ebp - 0x14c]
rep movsd dword es:[edi], dword [esi]
mov eax, dword [str.DisplayIcon]
mov dword [ebp - 0x180], eax
mov ecx, dword [0x42f998]
mov dword [ebp - 0x17c], ecx
mov edx, dword [0x42f99c]
mov dword [ebp - 0x178], edx
mov eax, dword [0x42f9a0]
mov dword [ebp - 0x174], eax
mov ecx, dword [0x42f9a4]
mov dword [ebp - 0x170], ecx
mov edx, dword [0x42f9a8]
mov dword [ebp - 0x16c], edx
mov eax, dword [str.DisplayName]
mov dword [ebp - 0x1e8], eax
mov ecx, dword [0x42f9b0]
mov dword [ebp - 0x1e4], ecx
mov edx, dword [0x42f9b4]
mov dword [ebp - 0x1e0], edx
mov eax, dword [0x42f9b8]
mov dword [ebp - 0x1dc], eax
mov ecx, dword [0x42f9bc]
mov dword [ebp - 0x1d8], ecx
mov edx, dword [0x42f9c0]
mov dword [ebp - 0x1d4], edx
mov ecx, 7
mov esi, str.DisplayVersion
lea edi, [ebp - 0x208]
rep movsd dword es:[edi], dword [esi]
movsw word es:[edi], word [esi]
mov eax, dword [str.HelpLink]
mov dword [ebp - 0x164], eax
mov ecx, dword [0x42f9e8]
mov dword [ebp - 0x160], ecx
mov edx, dword [0x42f9ec]
mov dword [ebp - 0x15c], edx
mov eax, dword [0x42f9f0]
mov dword [ebp - 0x158], eax
mov cx, word [0x42f9f4]
mov word [ebp - 0x154], cx
mov edx, dword [str.Publisher]
mov dword [ebp - 0x40], edx
mov eax, dword [0x42f9fc]
mov dword [ebp - 0x3c], eax
mov ecx, dword [0x42fa00]
mov dword [ebp - 0x38], ecx
mov edx, dword [0x42fa04]
mov dword [ebp - 0x34], edx
mov eax, dword [0x42fa08]
mov dword [ebp - 0x30], eax
mov ecx, 8
mov esi, str.UninstallString
lea edi, [ebp - 0x60]
rep movsd dword es:[edi], dword [esi]
mov ecx, 0x10
mov esi, str.http:__www.hao123.com_desk.html
lea edi, [ebp - 0xbc]
rep movsd dword es:[edi], dword [esi]
mov ecx, dword [0x42fa70]
mov dword [ebp - 0x18c], ecx
mov dx, word [0x42fa74]
mov word [ebp - 0x188], dx
mov eax, dword [0x42fa78]
mov dword [ebp - 0x78], eax
mov ecx, dword [0x42fa7c]
mov dword [ebp - 0x74], ecx
mov edx, dword [0x42fa80]
mov dword [ebp - 0x70], edx
mov eax, dword [0x42fa84]
mov dword [ebp - 0x6c], eax
mov ecx, dword [0x42fa88]
mov dword [ebp - 0x68], ecx
mov dx, word [0x42fa8c]
mov word [ebp - 0x64], dx
mov ax, word [0x42fa2c]
mov word [ebp - 0x150], ax
push 0x42fa90
lea ecx, [ebp - 0x1d0]
call fcn.00405d10
mov dword [ebp - 4], 0
push 0x42fab0
lea ecx, [ebp - 0x2c]
call fcn.00405d10
mov byte [ebp - 4], 1
push 0x42fac0
lea ecx, [ebp - 0x1a8]
call fcn.00405d10
mov byte [ebp - 4], 2
push str.gretech_pay_hp_88_hao123_jp
lea ecx, [ebp - 0x1a8]
call fcn.00405df0
lea ecx, [ebp - 0x168]
push ecx
mov ecx, dword [ebp - 0x21c]
call fcn.00404ed0
mov byte [ebp - 4], 3
lea ecx, [ebp - 0x1a8]
call fcn.00405ea0
push ecx
mov ecx, esp
mov dword [ebp - 0x20c], esp
push eax
call fcn.00405970
mov dword [ebp - 0x220], eax
mov edx, dword [ebp - 0x220]
mov dword [ebp - 0x224], edx
mov byte [ebp - 4], 4
push ecx
mov ecx, esp
mov dword [ebp - 0x210], esp
lea eax, [ebp - 0x168]
push eax
call fcn.00405950
mov dword [ebp - 0x228], eax
mov byte [ebp - 4], 3
lea ecx, [ebp - 0x181]
call fcn.00402530
mov dword [ebp - 0x22c], eax
mov byte [ebp - 4], 5
push 0
lea ecx, [ebp - 0xc0]
push ecx
push 0
push 0x2001f
push 0
push 0
push 0
lea edx, [ebp - 0x14c]
push edx
push 0x80000001
call dword [sym.imp.ADVAPI32.dll_RegCreateKeyExW]
mov dword [ebp - 0x1b4], eax
cmp dword [ebp - 0x1b4], 0
je 0x405487
mov dword [ebp - 0x214], 0
mov byte [ebp - 4], 3
lea ecx, [ebp - 0x181]
call fcn.004017d0
mov byte [ebp - 4], 2
lea ecx, [ebp - 0x168]
call fcn.004059f0
mov byte [ebp - 4], 1
lea ecx, [ebp - 0x1a8]
call fcn.00405d90
mov byte [ebp - 4], 0
lea ecx, [ebp - 0x2c]
call fcn.00405d90
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x1d0]
call fcn.00405d90
mov eax, dword [ebp - 0x214]
jmp 0x405912
lea ecx, [ebp - 0x1b0]
call fcn.00405930
mov byte [ebp - 4], 6
push 0x42fb00
lea ecx, [ebp - 0x1b0]
call fcn.00405a10
lea eax, [ebp - 0x168]
push eax
lea ecx, [ebp - 0x1b0]
call fcn.00405a30
push 0x42fb04
lea ecx, [ebp - 0x1b0]
call fcn.00405a50
lea ecx, [ebp - 0x1a8]
call fcn.00405ea0
mov dword [ebp - 0x230], eax
mov ecx, dword [ebp - 0x230]
add ecx, 2
mov dword [ebp - 0x234], ecx
mov edx, dword [ebp - 0x230]
mov ax, word [edx]
mov word [ebp - 0x236], ax
add dword [ebp - 0x230], 2
cmp word [ebp - 0x236], 0
jne 0x4054e8
mov ecx, dword [ebp - 0x230]
sub ecx, dword [ebp - 0x234]
sar ecx, 1
mov dword [ebp - 0x23c], ecx
mov edx, dword [ebp - 0x23c]
lea eax, [edx + edx + 2]
push eax
lea ecx, [ebp - 0x1a8]
call fcn.00405ea0
push eax
push 1
push 0
lea ecx, [ebp - 0x18c]
push ecx
mov edx, dword [ebp - 0xc0]
push edx
call dword [sym.imp.ADVAPI32.dll_RegSetValueExW]
mov dword [ebp - 0x1b4], eax
lea ecx, [ebp - 0x1b0]
call fcn.00405bc0
lea eax, [eax + eax + 2]
push eax
lea ecx, [ebp - 0x1b0]
call fcn.00406040
push eax
push 1
push 0
lea ecx, [ebp - 0x180]
push ecx
mov edx, dword [ebp - 0xc0]
push edx
call dword [sym.imp.ADVAPI32.dll_RegSetValueExW]
mov dword [ebp - 0x1b4], eax
lea ecx, [ebp - 0x1d0]
call fcn.00405ea0
mov dword [ebp - 0x240], eax
mov eax, dword [ebp - 0x240]
add eax, 2
mov dword [ebp - 0x244], eax
mov ecx, dword [ebp - 0x240]
mov dx, word [ecx]
mov word [ebp - 0x246], dx
add dword [ebp - 0x240], 2
cmp word [ebp - 0x246], 0
jne 0x4055ac
mov eax, dword [ebp - 0x240]
sub eax, dword [ebp - 0x244]
sar eax, 1
mov dword [ebp - 0x24c], eax
mov ecx, dword [ebp - 0x24c]
lea edx, [ecx + ecx + 2]
push edx
lea ecx, [ebp - 0x1d0]
call fcn.00405ea0
push eax
push 1
push 0
lea eax, [ebp - 0x1e8]
push eax
mov ecx, dword [ebp - 0xc0]
push ecx
call dword [sym.imp.ADVAPI32.dll_RegSetValueExW]
mov dword [ebp - 0x1b4], eax
mov dword [ebp - 0x250], 0x42fb08
mov edx, dword [ebp - 0x250]
add edx, 2
mov dword [ebp - 0x254], edx
mov eax, dword [ebp - 0x250]
mov cx, word [eax]
mov word [ebp - 0x256], cx
add dword [ebp - 0x250], 2
cmp word [ebp - 0x256], 0
jne 0x40562f
mov edx, dword [ebp - 0x250]
sub edx, dword [ebp - 0x254]
sar edx, 1
mov dword [ebp - 0x25c], edx
mov eax, dword [ebp - 0x25c]
lea ecx, [eax + eax + 2]
push ecx
push str.2.1.0.63
push 1
push 0
lea edx, [ebp - 0x208]
push edx
mov eax, dword [ebp - 0xc0]
push eax
call dword [sym.imp.ADVAPI32.dll_RegSetValueExW]
mov dword [ebp - 0x1b4], eax
lea ecx, [ebp - 0xbc]
mov dword [ebp - 0x260], ecx
mov edx, dword [ebp - 0x260]
add edx, 2
mov dword [ebp - 0x264], edx
mov eax, dword [ebp - 0x260]
mov cx, word [eax]
mov word [ebp - 0x266], cx
add dword [ebp - 0x260], 2
cmp word [ebp - 0x266], 0
jne 0x4056ad
mov edx, dword [ebp - 0x260]
sub edx, dword [ebp - 0x264]
sar edx, 1
mov dword [ebp - 0x26c], edx
mov eax, dword [ebp - 0x26c]
lea ecx, [eax + eax + 2]
push ecx
lea edx, [ebp - 0xbc]
push edx
push 1
push 0
lea eax, [ebp - 0x164]
push eax
mov ecx, dword [ebp - 0xc0]
push ecx
call dword [sym.imp.ADVAPI32.dll_RegSetValueExW]
mov dword [ebp - 0x1b4], eax
lea ecx, [ebp - 0x2c]
call fcn.00405ea0
mov dword [ebp - 0x270], eax
mov edx, dword [ebp - 0x270]
add edx, 2
mov dword [ebp - 0x274], edx
mov eax, dword [ebp - 0x270]
mov cx, word [eax]
mov word [ebp - 0x276], cx
add dword [ebp - 0x270], 2
cmp word [ebp - 0x276], 0
jne 0x40572f
mov edx, dword [ebp - 0x270]
sub edx, dword [ebp - 0x274]
sar edx, 1
mov dword [ebp - 0x27c], edx
mov eax, dword [ebp - 0x27c]
lea ecx, [eax + eax + 2]
push ecx
lea ecx, [ebp - 0x2c]
call fcn.00405ea0
push eax
push 1
push 0
lea edx, [ebp - 0x40]
push edx
mov eax, dword [ebp - 0xc0]
push eax
call dword [sym.imp.ADVAPI32.dll_RegSetValueExW]
mov dword [ebp - 0x1b4], eax
lea ecx, [ebp - 0x1ac]
call fcn.00405930
mov byte [ebp - 4], 7
push 0x42fb30
lea ecx, [ebp - 0x1ac]
call fcn.00405a10
lea ecx, [ebp - 0x168]
push ecx
lea ecx, [ebp - 0x1ac]
call fcn.00405a30
push 0x42fb34
lea ecx, [ebp - 0x1ac]
call fcn.00405a50
lea edx, [ebp - 0x78]
push edx
lea ecx, [ebp - 0x1ac]
call fcn.00405a50
push 0x42fb3c
lea ecx, [ebp - 0x1ac]
call fcn.00405a50
lea eax, [ebp - 0x150]
push eax
lea ecx, [ebp - 0x1ac]
call fcn.00405a50
lea ecx, [ebp - 0x1ac]
call fcn.00406040
mov dword [ebp - 0x280], eax
mov ecx, dword [ebp - 0x280]
add ecx, 2
mov dword [ebp - 0x284], ecx
mov edx, dword [ebp - 0x280]
mov ax, word [edx]
mov word [ebp - 0x286], ax
add dword [ebp - 0x280], 2
cmp word [ebp - 0x286], 0
jne 0x405825
mov ecx, dword [ebp - 0x280]
sub ecx, dword [ebp - 0x284]
sar ecx, 1
mov dword [ebp - 0x28c], ecx
mov edx, dword [ebp - 0x28c]
lea eax, [edx + edx + 2]
push eax
lea ecx, [ebp - 0x1ac]
call fcn.00406040
push eax
push 1
push 0
lea ecx, [ebp - 0x60]
push ecx
mov edx, dword [ebp - 0xc0]
push edx
call dword [sym.imp.ADVAPI32.dll_RegSetValueExW]
mov dword [ebp - 0x1b4], eax
mov eax, dword [ebp - 0xc0]
push eax
call dword [sym.imp.ADVAPI32.dll_RegCloseKey]
mov dword [ebp - 0x218], 1
mov byte [ebp - 4], 6
lea ecx, [ebp - 0x1ac]
call fcn.004059f0
mov byte [ebp - 4], 5
lea ecx, [ebp - 0x1b0]
call fcn.004059f0
mov byte [ebp - 4], 3
lea ecx, [ebp - 0x181]
call fcn.004017d0
mov byte [ebp - 4], 2
lea ecx, [ebp - 0x168]
call fcn.004059f0
mov byte [ebp - 4], 1
lea ecx, [ebp - 0x1a8]
call fcn.00405d90
mov byte [ebp - 4], 0
lea ecx, [ebp - 0x2c]
call fcn.00405d90
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x1d0]
call fcn.00405d90
mov eax, dword [ebp - 0x218]
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
mov ecx, dword [ebp - 0x10]
xor ecx, ebp
call fcn.00419bfc
mov esp, ebp
pop ebp
ret