Function at 0x4520d0
Capabilities:
Persist via windows service
Set registry value

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x41c
mov eax, dword [0x4ed018]
xor eax, ebp
mov dword [ebp - 4], eax
push esi
push edi
mov edi, dword [ebp + 8]
lea eax, [ebp - 0x210]
push 0x20c
push 0
push eax
mov esi, ecx
call fcn.00411960
add esp, 0xc
mov dword [ebp - 0x41c], 0
test edi, edi
jne 0x452131
push str.DriverInstallerInfo::WriteToRegistry:_Got_bad_serviceName_param
push 1
call fcn.00446b80
add esp, 8
xor eax, eax
pop edi
pop esi
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.00401bd5
mov esp, ebp
pop ebp
ret 4
cmp dword [esi + 4], 0
jne 0x452147
push edi
push str.DriverInstallerInfo::WriteToRegistry:__S_reg_value_is_uptodate
push 2
call fcn.00446b80
add esp, 0xc
cmp dword [esi + 0x20], 0
mov dword [esi + 4], 0
jne 0x4521d9
push str.No_installers_to_write__deleting.
call fcn.004481c0
lea eax, [esi + 0x10]
add esp, 4
cmp dword [eax + 0x14], 8
jb 0x452170
mov eax, dword [eax]
cmp dword [esi + 8], 0
mov ecx, 0x4ca240
push eax
mov eax, ecx
mov edx, 0x4ca244
cmove eax, edx
cmp dword [esi + 0xc], 0
push eax
cmove ecx, edx
mov eax, str.stale
cmp dword [esi + 4], 0
push ecx
mov ecx, str.uptodate
cmove eax, ecx
cmp dword [esi], 0
push eax
mov ecx, str.invalid
mov eax, str.valid
cmove eax, ecx
push eax
push str.DriverInstallerInfo::Print:_Installers___s__:_Reg_is__s_Windows__s_present_:_Msi__s_present_:__S_
push 2
call fcn.00446b80
push 1
push edi
call fcn.0044b1f0
add esp, 0x24
pop edi
pop esi
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.00401bd5
mov esp, ebp
pop ebp
ret 4
push edi
push str.SYSTEMCurrentControlSetServices
push 0x4a190c
lea eax, [ebp - 0x418]
push 0x104
push eax
call fcn.00419510
add esp, 0x14
test eax, eax
js 0x45232e
cmp eax, 0x104
jae 0x45232e
lea eax, [ebp - 0x41c]
push eax
lea eax, [ebp - 0x418]
push 2
push eax
call fcn.0044d660
add esp, 0xc
test eax, eax
je 0x452344
add esi, 0x10
cmp dword [esi + 0x14], 8
jb 0x452236
mov esi, dword [esi]
push 0x104
lea eax, [ebp - 0x210]
push esi
push eax
call fcn.0048418a
add esp, 0xc
lea esi, [ebp - 0x210]
xor eax, eax
lea ecx, [esi + 2]
mov word [ebp - 8], ax
nop word [eax + eax]
mov ax, word [esi]
add esi, 2
test ax, ax
jne 0x452260
lea eax, [ebp - 0x210]
sub esi, ecx
push 0x3b
push eax
sar esi, 1
call fcn.00413d0b
add esp, 8
test eax, eax
je 0x45229b
xor ecx, ecx
mov word [eax], cx
add eax, 2
push 0x3b
push eax
call fcn.00413d0b
add esp, 8
test eax, eax
jne 0x452284
lea eax, [esi*2 + 2]
cmp eax, 0x20c
jae 0x452358
xor ecx, ecx
lfence
mov word [ebp + eax - 0x210], cx
lea eax, [esi*2 + 4]
push eax
lea eax, [ebp - 0x210]
push eax
push 7
push ecx
push str.vwdk.installers
push dword [ebp - 0x41c]
call dword [sym.imp.ADVAPI32.dll_RegSetValueExW]
push dword [ebp - 0x41c]
mov esi, eax
call dword [sym.imp.ADVAPI32.dll_RegCloseKey]
test esi, esi
je 0x452317
push edi
push str.DriverInstallerInfo::WriteToRegistry:_Failed_to_set_installers_info_for_driver__S
push esi
push 1
lfence
call fcn.00447040
add esp, 0x10
xor eax, eax
pop edi
pop esi
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.00401bd5
mov esp, ebp
pop ebp
ret 4
pop edi
mov eax, 1
pop esi
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.00401bd5
mov esp, ebp
pop ebp
ret 4
push eax
push 0x104
push edi
push str.DriverBaseInfo::OpenDriverInfoParentKey:_Failed_to_generate_service_key__S__u___d_
push 2
call fcn.00446b80
add esp, 0x14
mov ecx, dword [ebp - 4]
xor eax, eax
pop edi
xor ecx, ebp
pop esi
call fcn.00401bd5
mov esp, ebp
pop ebp
ret 4
call fcn.00401d05
int3