Function at 0x448560
Capabilities:
Access peb ldr_data

Disassembly:
push 0xffffffffffffffff
push 0x53f6a3
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
sub esp, 0x19c
mov eax, dword [0x5ab980]
push ebp
push esi
push edi
mov edi, ecx
mov dword [esp + 0x14], eax
mov dword [esp + 0x1b0], 0
mov dword [esp + 0xc], eax
mov dword [esp + 0x18], eax
mov dword [esp + 0x10], eax
mov dword [esp + 0x20], eax
mov dword [esp + 0x1c], eax
mov dword [esp + 0x24], eax
push str.HKEY_LOCAL_MACHINESoftwareMicrosoftWindowsCurrentVersionApp_Paths_
lea ecx, [esp + 0x34]
mov byte [esp + 0x1b4], 6
call fcn.00512952
mov ebp, dword [esp + 0x1b8]
mov byte [esp + 0x1b0], 7
push ebp
push eax
lea eax, [esp + 0x30]
push eax
call fcn.00512b79
push eax
lea ecx, [esp + 0x18]
mov byte [esp + 0x1b4], 8
call fcn.00512a1d
lea ecx, [esp + 0x28]
mov byte [esp + 0x1b0], 7
call fcn.005128e4
lea ecx, [esp + 0x30]
mov byte [esp + 0x1b0], 6
call fcn.005128e4
mov edx, dword [esp + 0x14]
lea ecx, [esp + 0x10]
push 0
push ecx
push 0
push edx
call fcn.0041efa0
mov esi, eax
add esp, 0x10
test esi, esi
jle 0x44869b
lea eax, [esp + 0x10]
mov ecx, edi
push eax
call fcn.00495d30
lea ecx, [esp + 0x18]
push str..EXE
lea edx, [esp + 0x10]
push ecx
push edx
push ecx
lea eax, [esp + 0x20]
mov ecx, esp
mov dword [esp + 0x3c], esp
push eax
call fcn.00512659
call fcn.00421200
add esp, 0x10
test eax, eax
jg 0x44871c
lea ecx, [esp + 0x18]
push str..COM
lea edx, [esp + 0x10]
push ecx
push edx
push ecx
lea eax, [esp + 0x20]
mov ecx, esp
mov dword [esp + 0x3c], esp
push eax
call fcn.00512659
call fcn.00421200
mov esi, eax
add esp, 0x10
test esi, esi
jg 0x44871c
lea ecx, [esp + 0x24]
mov byte [esp + 0x1b0], 5
call fcn.005128e4
lea ecx, [esp + 0x1c]
mov byte [esp + 0x1b0], 4
call fcn.005128e4
lea ecx, [esp + 0x20]
mov byte [esp + 0x1b0], 3
call fcn.005128e4
lea ecx, [esp + 0x10]
mov byte [esp + 0x1b0], 2
call fcn.005128e4
lea ecx, [esp + 0x18]
mov byte [esp + 0x1b0], 1
call fcn.005128e4
lea ecx, [esp + 0xc]
mov byte [esp + 0x1b0], 0
call fcn.005128e4
lea ecx, [esp + 0x14]
mov dword [esp + 0x1b0], 0xffffffff
call fcn.005128e4
mov eax, esi
jmp 0x448920
lea ecx, [esp + 0x68]
lea edx, [esp + 0xc]
push ecx
push edx
call fcn.00421fb0
mov eax, dword [esp + 0x90]
add esp, 8
test eax, eax
jne 0x4487cd
mov eax, dword [esp + 0x84]
test eax, eax
jne 0x4487cd
lea ecx, [esp + 0x24]
mov byte [esp + 0x1b0], 5
call fcn.005128e4
lea ecx, [esp + 0x1c]
mov byte [esp + 0x1b0], 4
call fcn.005128e4
lea ecx, [esp + 0x20]
mov byte [esp + 0x1b0], 3
call fcn.005128e4
lea ecx, [esp + 0x10]
mov byte [esp + 0x1b0], 2
call fcn.005128e4
lea ecx, [esp + 0x18]
mov byte [esp + 0x1b0], 1
call fcn.005128e4
lea ecx, [esp + 0xc]
mov byte [esp + 0x1b0], 0
call fcn.005128e4
lea ecx, [esp + 0x14]
mov dword [esp + 0x1b0], 0xffffffff
call fcn.005128e4
xor eax, eax
jmp 0x448920
mov esi, dword [esp + 0x1bc]
lea eax, [esp + 0xc]
push eax
push ebp
push esi
mov ecx, edi
call fcn.00448090
lea ecx, [esp + 0x1c]
lea edx, [esp + 0xc]
push ecx
push edx
mov ecx, edi
call fcn.00492f60
test eax, eax
jne 0x4488a1
lea eax, [esp + 0x20]
lea ecx, [esp + 0xc]
push eax
push ecx
mov ecx, edi
call fcn.00492ec0
test eax, eax
jne 0x4488a1
push ebp
mov ecx, esi
call fcn.00444cd0
mov esi, eax
test esi, esi
je 0x4488a1
lea edx, [esp + 0x1c]
lea ecx, [esi + 0xc]
push edx
call fcn.00512a1d
lea eax, [esp + 0x20]
lea ecx, [esi + 8]
push eax
call fcn.00512a1d
lea ecx, [esp + 0x34]
lea edx, [esp + 0xc]
push ecx
push edx
call fcn.004c62d0
add esp, 8
test eax, eax
jne 0x44886e
mov eax, dword [esp + 0x40]
mov dword [esi + 0x28], eax
mov ecx, dword [esp + 0x3c]
mov dword [esi + 0x2c], ecx
mov edx, dword [esp + 0x48]
mov dword [esi + 0x30], edx
mov eax, dword [esp + 0x44]
mov dword [esi + 0x34], eax
mov ecx, dword [esp + 0x6c]
mov dword [esi + 0x10], ecx
mov edx, dword [esp + 0x70]
mov dword [esi + 0x14], edx
mov eax, dword [esp + 0x7c]
mov dword [esi + 0x18], eax
mov ecx, dword [esp + 0x80]
mov dword [esi + 0x1c], ecx
mov edx, dword [esp + 0x84]
mov dword [esi + 0x24], edx
mov eax, dword [esp + 0x88]
mov dword [esi + 0x20], eax
lea ecx, [esp + 0x24]
mov byte [esp + 0x1b0], 5
call fcn.005128e4
lea ecx, [esp + 0x1c]
mov byte [esp + 0x1b0], 4
call fcn.005128e4
lea ecx, [esp + 0x20]
mov byte [esp + 0x1b0], 3
call fcn.005128e4
lea ecx, [esp + 0x10]
mov byte [esp + 0x1b0], 2
call fcn.005128e4
lea ecx, [esp + 0x18]
mov byte [esp + 0x1b0], 1
call fcn.005128e4
lea ecx, [esp + 0xc]
mov byte [esp + 0x1b0], 0
call fcn.005128e4
lea ecx, [esp + 0x14]
mov dword [esp + 0x1b0], 0xffffffff
call fcn.005128e4
mov eax, 1
mov ecx, dword [esp + 0x1a8]
pop edi
pop esi
mov dword fs:[0], ecx
pop ebp
add esp, 0x1a8
ret 8