Function at 0x4053d1
Capabilities:
Check if file exists
Create process on windows
Delete registry value
Open clipboard
Set registry value
Switch active desktop

Disassembly:
push ebp
mov ebp, esp
mov eax, 0x16ac
call fcn.004690d0
mov eax, dword [0x493040]
xor eax, ebp
mov dword [ebp - 4], eax
push ebx
push esi
push edi
push str.curssp
mov esi, str.Softwareprojone_secshare_
push esi
mov edi, ecx
push reloc.OLEAUT32.dll_SysReAllocString
mov dword [ebp - 0x1650], edi
call dword [sym.imp.SHLWAPI.dll_SHDeleteValueW]
push edi
call dword [sym.imp.SHLWAPI.dll_PathFileExistsW]
test eax, eax
je 0x405698
push str..ssp
push edi
call fcn.0040cdf3
test eax, eax
je 0x405698
xor ebx, ebx
push 0xffc
lea eax, [ebp - 0x1644]
push ebx
push eax
mov dword [ebp - 0x1648], ebx
call fcn.0045f510
add esp, 0xc
push 7
xor eax, eax
mov byte [ebp - 0x2c], bl
pop ecx
lea edi, [ebp - 0x2b]
rep stosd dword es:[edi], eax
mov ecx, dword [ebp - 0x1650]
stosw word es:[edi], ax
stosb byte es:[edi], al
lea eax, [ebp - 0x2c]
push eax
lea edx, [ebp - 0x1648]
call fcn.00404b73
pop ecx
test al, al
jne 0x40547a
push 2
pop eax
jmp 0x40569b
call fcn.00404e18
test al, al
jne 0x405487
push 3
jmp 0x405474
mov ecx, dword [ebp - 0x1650]
lea eax, [ebp - 0x164c]
push eax
lea eax, [ebp - 0x2c]
push eax
call fcn.00407307
mov edi, eax
pop ecx
pop ecx
cmp edi, ebx
je 0x4054ce
push 0x10
push ecx
push str.error
push str.common
call fcn.004170c5
add esp, 0xc
push eax
mov eax, edi
call fcn.00404820
push eax
push ebx
call dword [sym.imp.USER32.dll_MessageBoxW]
push 4
jmp 0x405474
push dword [ebp - 0x164c]
call fcn.00404e91
pop ecx
test eax, eax
je 0x4054f0
push ebx
push dword [ebp - 0x164c]
call fcn.004075b6
pop ecx
pop ecx
push 5
jmp 0x405474
push 0x1000
lea eax, [ebp - 0x1648]
push eax
push 3
push str.curssp
push esi
push reloc.OLEAUT32.dll_SysReAllocString
call dword [sym.imp.SHLWAPI.dll_SHSetValueW]
movsx ax, byte [ebp - 0x164c]
mov word [ebp - 0xc], ax
xor eax, eax
lea edi, [ebp - 0xa]
stosd dword es:[edi], eax
push str.curVS
stosw word es:[edi], ax
push esi
lea esi, [ebp - 0xc]
mov edi, reloc.OLEAUT32.dll_SysReAllocString
call fcn.0040cf1c
push ebx
push 0x1ff
push ebx
push ebx
push ebx
mov esi, str.FAE4601B_F5F7_4609_80EF_44D9E650022D
push esi
call dword [sym.imp.USER32.dll_CreateDesktopW]
push 0x104
lea eax, [ebp - 0x238]
push eax
push ebx
call dword [sym.imp.KERNEL32.dll_GetModuleHandleW]
push eax
call dword [sym.imp.KERNEL32.dll_GetModuleFileNameW]
movsx eax, byte [ebp - 0x164c]
push eax
lea eax, [ebp - 0x238]
push eax
push str.__s__vsl__c
lea eax, [ebp - 0x648]
push 0x208
push eax
call dword [sym.imp.SHLWAPI.dll_wnsprintfW]
add esp, 0x14
push 0x40
lea eax, [ebp - 0x16a4]
push ebx
push eax
mov dword [ebp - 0x16a8], 0x44
call fcn.0045f510
xor eax, eax
mov dword [ebp - 0x1660], ebx
lea edi, [ebp - 0x165c]
stosd dword es:[edi], eax
add esp, 0xc
stosd dword es:[edi], eax
stosd dword es:[edi], eax
lea eax, [ebp - 0x1660]
push eax
lea eax, [ebp - 0x16a8]
push eax
push ebx
push ebx
push ebx
push ebx
push ebx
push ebx
lea eax, [ebp - 0x648]
push eax
push ebx
mov dword [ebp - 0x16a0], esi
call dword [sym.imp.KERNEL32.dll_CreateProcessW]
test eax, eax
jne 0x4055ee
push 0x65
jmp 0x405474
push dword [ebp - 0x165c]
call dword [sym.imp.KERNEL32.dll_CloseHandle]
push 0xffffffffffffffff
push dword [ebp - 0x1660]
call dword [sym.imp.KERNEL32.dll_WaitForSingleObject]
push dword [ebp - 0x10ac]
push dword [ebp - 0x164c]
call fcn.004075b6
pop ecx
pop ecx
mov esi, eax
call dword [sym.imp.KERNEL32.dll_GetCurrentThreadId]
push eax
call dword [sym.imp.USER32.dll_GetThreadDesktop]
push eax
call dword [sym.imp.USER32.dll_SwitchDesktop]
push ebx
call dword [sym.imp.USER32.dll_OpenClipboard]
test eax, eax
je 0x405648
call dword [sym.imp.USER32.dll_EmptyClipboard]
call dword [sym.imp.USER32.dll_CloseClipboard]
cmp dword [ebp - 0x10ac], ebx
je 0x405694
cmp esi, ebx
jne 0x405673
push ebx
push 0x47ddf8
push 0x47de00
push ebx
call dword [sym.imp.USER32.dll_MessageBoxW]
mov edi, dword [ebp - 0x1650]
call fcn.0040d3e8
jmp 0x405694
push esi
push ecx
mov eax, esi
call fcn.00404820
pop ecx
push eax
push 0x47de40
push 0x10
mov edi, 0x47de60
xor esi, esi
call fcn.0040bb5f
add esp, 0x10
xor eax, eax
jmp 0x40569b
xor eax, eax
inc eax
mov ecx, dword [ebp - 4]
pop edi
pop esi
xor ecx, ebp
pop ebx
call fcn.0045d55f
leave
ret