Function at 0x458fd7
Capabilities:
Persist via default file association registry key
Set registry value

Disassembly:
push ebp
mov ebp, esp
mov eax, 0x104c
call fcn.0052d050
push ebx
push esi
push edi
push dword [ebp + 8]
lea edi, [ebp - 0x82c]
call fcn.00458711
call fcn.00457d18
test al, al
mov eax, edi
push eax
push dword [ebp + 8]
push str.CapabilitiesFileAssociations
je 0x459024
call fcn.00444a92
push 0x549180
push str.ApplicationDescription
push str.Capabilities
call fcn.00444a92
jmp 0x45903d
call fcn.00444b22
push 0x549180
push str.ApplicationDescription
push str.Capabilities
call fcn.00444b22
call fcn.00457d18
neg al
sbb eax, eax
neg eax
add eax, 0x80000001
mov dword [ebp - 4], eax
call fcn.004012f6
test al, al
je 0x459070
push str.SoftwareNCH_SoftwareExpressBurnCapabilities
push 0x548bf4
push str.SoftwareRegisteredApplications
push dword [ebp - 4]
call fcn.00423784
lea eax, [ebp - 0x82c]
push eax
mov ebx, str.SoftwareClasses_s
push ebx
mov esi, 0x104
lea edi, [ebp - 0x624]
call fcn.0044b138
push dword [ebp + 8]
lea eax, [ebp - 0xc3c]
push ebx
push eax
call fcn.00401000
add esp, 0x14
push 0x53ec98
xor ebx, ebx
push ebx
lea eax, [ebp - 0xc3c]
push eax
push dword [ebp - 4]
lea eax, [ebp - 0xa34]
call fcn.004010db
mov eax, dword [ebp + 0xc]
cmp word [eax], bx
jne 0x459123
cmp word [ebp - 0xa34], bx
jne 0x4590e7
mov eax, dword [ebp + 8]
add eax, 2
push eax
push str._sfile
lea edi, [ebp - 0xa34]
call fcn.0044b138
pop ecx
pop ecx
lea eax, [ebp - 0xa34]
push eax
lea eax, [ebp - 0xe44]
push str.SoftwareClasses_s
push eax
call fcn.00401000
add esp, 0xc
push 0x53ec98
push ebx
lea eax, [ebp - 0xe44]
push eax
push dword [ebp - 4]
lea eax, [ebp - 0x104c]
call fcn.004010db
lea eax, [ebp - 0x104c]
push eax
push ebx
lea eax, [ebp - 0x624]
push eax
push dword [ebp - 4]
call fcn.00423784
lea eax, [ebp - 0x624]
push eax
push str._sDefaultIcon
lea edi, [ebp - 0x214]
call fcn.0044b138
push dword [ebp + 0x14]
lea edi, [ebp - 0x41c]
push dword [ebp + 0x10]
push str._s__d
call fcn.0044b138
add esp, 0x14
mov eax, edi
push eax
push ebx
lea eax, [ebp - 0x214]
push eax
push dword [ebp - 4]
call fcn.00423784
lea eax, [ebp - 0x624]
push eax
push str._s_shell
lea edi, [ebp - 0x214]
call fcn.0044b138
pop ecx
pop ecx
push str.Open
push ebx
mov eax, edi
push eax
push dword [ebp - 4]
call fcn.00423784
lea eax, [ebp - 0x624]
push eax
push str._s_shellopencommand
call fcn.0044b138
push dword [ebp + 0x10]
lea edi, [ebp - 0x41c]
push str.__s_____L_
call fcn.0044b138
add esp, 0x10
mov eax, edi
push eax
push ebx
lea eax, [ebp - 0x214]
push eax
push dword [ebp - 4]
call fcn.00423784
mov eax, edi
push eax
push ebx
push str.SoftwareClassesApplicationsexpressburn.exe_shellopencommand
push dword [ebp - 4]
call fcn.00423784
push str.Open
push ebx
push str.SoftwareClassesApplicationsexpressburn.exe_shell
push dword [ebp - 4]
call fcn.00423784
push dword [ebp + 0x14]
push dword [ebp + 0x10]
push str._s__d
call fcn.0044b138
add esp, 0xc
mov eax, edi
push eax
push ebx
push str.SoftwareClassesApplicationsexpressburn.exeDefaultIcon
push dword [ebp - 4]
call fcn.00423784
push 0x549180
push ebx
push str.SoftwareClassesApplicationsexpressburn.exe
push dword [ebp - 4]
call fcn.00423784
push dword [ebp + 8]
push str.SoftwareClasses_sOpenWithProgIds
lea edi, [ebp - 0x214]
call fcn.0044b138
pop ecx
pop ecx
lea eax, [ebp - 0xc]
push eax
lea eax, [ebp - 8]
push eax
push ebx
push 2
push ebx
push ebx
push ebx
mov eax, edi
push eax
push dword [ebp - 4]
call dword [sym.imp.ADVAPI32.dll_RegCreateKeyExW]
test eax, eax
jne 0x459286
push ebx
push ebx
push ebx
push ebx
lea eax, [ebp - 0x82c]
push eax
push dword [ebp - 8]
call dword [sym.imp.ADVAPI32.dll_RegSetValueExW]
push dword [ebp - 8]
call dword [sym.imp.ADVAPI32.dll_RegCloseKey]
pop edi
pop esi
pop ebx
leave
ret 0x10