Function at 0x41d8dc
Capabilities:
Accept command line arguments
Delete registry value
Set registry value

Disassembly:
mov eax, 0x47507d
call fcn.00444d58
sub esp, 0x320
push ebx
push esi
push edi
mov dword [ebp - 0x24], ecx
call fcn.0040104a
mov dword [ebp - 0x14], eax
xor edi, edi
lea eax, [ebp - 0x25]
mov ebx, 0x47b5a0
mov esi, 0x47b598
push edi
push eax
lea ecx, [ebp - 0x88]
mov dword [ebp - 0x88], ebx
mov dword [ebp - 0x68], esi
call fcn.00402b2c
mov ecx, dword [ebp - 0x14]
mov dword [ebp - 4], edi
call fcn.00432040
test al, al
je 0x41de61
lea eax, [ebp - 0x2c]
mov ecx, dword [ebp - 0x24]
push eax
lea eax, [ebp - 0x8c]
push 1
push eax
lea eax, [ebp - 0x30]
push eax
lea eax, [ebp - 0x88]
push eax
call fcn.0041c815
test eax, eax
je 0x41de77
mov eax, str.ScriptDriven
mov dword [ebp - 0x58], 0x47b560
mov ecx, eax
mov dword [ebp - 0x38], 0x47b558
test ecx, ecx
jne 0x41d978
mov eax, 0x498d9c
lea ecx, [ebp - 0xd]
push edi
push ecx
push eax
lea ecx, [ebp - 0x58]
call fcn.00408d40
lea eax, [ebp - 0x16]
push 1
push eax
lea ecx, [ebp - 0xdc]
push dword [0x47b6f8]
mov byte [ebp - 4], 1
call fcn.0040175f
mov ecx, dword [ebp - 0x14]
push 0xa
lea eax, [ebp - 0x58]
push edi
push eax
lea eax, [ebp - 0xdc]
push eax
mov byte [ebp - 4], 2
call fcn.004323eb
cmp eax, 3
lea ecx, [ebp - 0xdc]
sete byte [ebp - 0x15]
mov byte [ebp - 4], 1
call fcn.00401bc2
and byte [ebp - 4], 0
lea ecx, [ebp - 0x58]
call fcn.00401bc2
cmp byte [ebp - 0x15], 0
je 0x41daf3
and byte [ebp - 0x50], 0
push 7
pop ecx
xor eax, eax
lea edi, [ebp - 0x4f]
and byte [ebp - 0x32c], 0
rep stosd dword es:[edi], eax
stosb byte es:[edi], al
push 0x7f
xor eax, eax
pop ecx
lea edi, [ebp - 0x32b]
rep stosd dword es:[edi], eax
stosw word es:[edi], ax
stosb byte es:[edi], al
lea eax, [ebp - 0x32c]
push eax
lea eax, [ebp - 0x50]
push eax
push str.Msi.DLL
call fcn.00440429
lea eax, [ebp - 0x50]
push eax
push str.4.05.0.0
call fcn.00440d95
add esp, 0x14
test eax, eax
jge 0x41daf1
mov eax, 0x6b1
push eax
mov dword [0x49b6ec], eax
call fcn.00440087
cmp byte [0x498990], 0
pop ecx
jne 0x41da62
cmp byte [0x49bca8], 0
je 0x41dcc7
lea eax, [ebp - 0x16]
push 1
push eax
push str.C:CodeBasesisdev_srcRuntimeMSISharedSetupmsiaction.cpp
lea ecx, [ebp - 0xdc]
call fcn.0040175f
mov eax, str.Windows_Installer_4.5_or_newer_is_required_to_run_this_installation_but_is_not_present_on_the_machine._Setup_will_now_exit.
mov byte [ebp - 4], 3
mov ecx, eax
mov dword [ebp - 0xb4], 0x47b560
test ecx, ecx
mov dword [ebp - 0x94], 0x47b558
jne 0x41daa0
mov eax, 0x498d9c
lea ecx, [ebp - 0xd]
push 0
push ecx
push eax
lea ecx, [ebp - 0xb4]
call fcn.00408d40
lea eax, [ebp - 0xdc]
push 0x408
push eax
lea eax, [ebp - 0xb4]
push eax
mov byte [ebp - 4], 4
call fcn.0046a430
lea ecx, [ebp - 0xb4]
mov byte [ebp - 4], 3
call fcn.00401bc2
and byte [ebp - 4], 0
lea ecx, [ebp - 0xdc]
call fcn.00401bc2
jmp 0x41dcc7
xor edi, edi
cmp dword [ebp - 0x2c], edi
jne 0x41db57
mov ecx, dword [ebp - 0x14]
cmp byte [ecx + 0x17e], 0
je 0x41db57
lea eax, [ebp - 0x104]
push 6
push eax
call fcn.004083bc
lea ecx, [ebp - 0x88]
mov byte [ebp - 4], 5
push ecx
mov ecx, dword [ebp - 0x24]
push eax
call fcn.00423008
mov ebx, eax
lea ecx, [ebp - 0x104]
neg ebx
sbb bl, bl
and byte [ebp - 4], 0
inc bl
call fcn.00401f95
test bl, bl
je 0x41db50
mov ecx, dword [ebp - 0x24]
call fcn.00425075
xor esi, esi
jmp 0x41de4e
mov ebx, 0x47b5a0
xor edi, edi
mov dword [ebp - 0x1c], edi
lea eax, [ebp - 0x16]
push edi
push eax
lea ecx, [ebp - 0x12c]
mov byte [ebp - 4], 6
mov dword [ebp - 0x12c], ebx
mov dword [ebp - 0x10c], esi
call fcn.00402b2c
mov ecx, dword [ebp - 0x14]
lea eax, [ebp - 0x104]
push eax
mov byte [ebp - 4], 7
call fcn.004328fd
mov eax, dword [eax + 8]
mov byte [ebp - 4], 8
cmp eax, edi
jne 0x41db9d
mov eax, 0x47b5bc
push eax
lea eax, [ebp - 0x12c]
push 0x48fc60
push eax
call fcn.00414f6e
add esp, 0xc
lea ecx, [ebp - 0x104]
mov byte [ebp - 4], 7
call fcn.00401f95
mov ecx, dword [ebp - 0x14]
call fcn.00432cba
test al, al
je 0x41dd03
mov ecx, dword [ebp - 0x14]
cmp dword [ecx + 0x24], edi
jne 0x41dd03
push 0x12
call fcn.00408397
test al, al
je 0x41dd03
mov dword [ebp - 0x20], edi
lea eax, [ebp - 0x20]
mov ecx, dword [ebp - 0x24]
push eax
lea eax, [ebp - 0x88]
push eax
lea eax, [ebp - 0x58]
push eax
mov byte [ebp - 4], 9
call fcn.0041e5fd
mov ebx, dword [ebp - 0x50]
mov byte [ebp - 4], 0xa
cmp ebx, edi
mov esi, 0x47b578
jne 0x41dc1c
mov ebx, esi
lea eax, [ebp - 0xd]
push 1
push eax
push str.C:CodeBasesisdev_srcRuntimeMSISharedSetupmsiaction.cpp
lea ecx, [ebp - 0x104]
call fcn.0040175f
mov eax, dword [eax + 8]
mov byte [ebp - 4], 0xb
cmp eax, edi
jne 0x41dc3f
mov eax, esi
mov dword [ebp - 0x60], eax
push ebx
lea eax, [ebp - 0x60]
push str.Installing_silent_prerequisites_for_features:__s
push eax
mov dword [ebp - 0x5c], 0x422
call fcn.004084c8
add esp, 0xc
lea ecx, [ebp - 0x104]
mov byte [ebp - 4], 0xa
call fcn.00401bc2
cmp dword [ebp - 0x4c], edi
je 0x41dcdd
mov ecx, dword [ebp - 0x14]
lea eax, [ebp - 0x20]
push eax
lea eax, [ebp - 0x58]
push 1
push eax
push edi
call fcn.0042fa23
test eax, eax
je 0x41dcdd
mov ecx, dword [ebp - 0x24]
call fcn.00425075
lea ecx, [ebp - 0x58]
mov byte [ebp - 4], 9
call fcn.00401bc2
cmp dword [ebp - 0x20], edi
je 0x41dca7
push dword [ebp - 0x20]
call fcn.0044413c
lea ecx, [ebp - 0x12c]
mov byte [ebp - 4], 6
call fcn.00401f95
cmp dword [ebp - 0x1c], edi
je 0x41dcc7
push dword [ebp - 0x1c]
call dword [sym.imp.ADVAPI32.dll_RegCloseKey]
mov dword [ebp - 0x1c], edi
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x88]
call fcn.00401f95
xor eax, eax
jmp 0x41de88
lea ecx, [ebp - 0x58]
mov byte [ebp - 4], 9
call fcn.00401bc2
cmp dword [ebp - 0x20], edi
mov byte [ebp - 4], 7
je 0x41ddfd
push dword [ebp - 0x20]
call fcn.0044413c
jmp 0x41ddfd
mov ecx, dword [ebp - 0x14]
push 0x12
call fcn.00408397
test al, al
je 0x41ddfd
push 0xf003f
push str.SoftwareMicrosoftWindowsCurrentVersion
push SysFreeString
lea ecx, [ebp - 0x1c]
call fcn.00417ceb
test eax, eax
jne 0x41ddfd
lea eax, [ebp - 0xd]
push edi
push eax
lea ecx, [ebp - 0xdc]
mov dword [ebp - 0xdc], ebx
mov dword [ebp - 0xbc], esi
call fcn.00402b2c
mov ecx, dword [ebp - 0x14]
lea eax, [ebp - 0xb4]
push 0x15
push eax
mov byte [ebp - 4], 0xc
call fcn.004083bc
cmp dword [ebp - 0xa8], edi
mov byte [ebp - 4], 0xd
jne 0x41ddae
lea eax, [ebp - 0x15]
push 1
push eax
call dword [sym.imp.KERNEL32.dll_GetCommandLineA]
push eax
lea ecx, [ebp - 0x104]
call fcn.00402caf
lea eax, [ebp - 0x104]
lea ecx, [ebp - 0xb4]
push eax
mov byte [ebp - 4], 0xe
call fcn.0040200f
lea ecx, [ebp - 0x104]
mov byte [ebp - 4], 0xd
call fcn.00401f95
lea ecx, [ebp - 0xb4]
call fcn.0040305e
lea ecx, [ebp - 0x12c]
mov esi, eax
call fcn.0040305e
push esi
mov ebx, eax
call dword [sym.imp.KERNEL32.dll_lstrlenA]
inc eax
push eax
push esi
push 1
push edi
push ebx
push dword [ebp - 0x1c]
call dword [sym.imp.ADVAPI32.dll_RegSetValueExA]
lea ecx, [ebp - 0xb4]
mov byte [ebp - 4], 0xc
call fcn.00401f95
lea ecx, [ebp - 0xdc]
mov byte [ebp - 4], 7
call fcn.00401f95
push dword [ebp - 0x2c]
mov ecx, dword [ebp - 0x24]
lea eax, [ebp - 0x88]
push dword [ebp - 0x30]
push eax
call fcn.0041f51f
cmp dword [ebp - 0x1c], edi
mov esi, eax
je 0x41de2e
lea ecx, [ebp - 0x12c]
call fcn.0040305e
push eax
push dword [ebp - 0x1c]
call dword [sym.imp.ADVAPI32.dll_RegDeleteValueA]
lea ecx, [ebp - 0x12c]
mov byte [ebp - 4], 6
call fcn.00401f95
cmp dword [ebp - 0x1c], edi
je 0x41de4e
push dword [ebp - 0x1c]
call dword [sym.imp.ADVAPI32.dll_RegCloseKey]
mov dword [ebp - 0x1c], edi
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x88]
call fcn.00401f95
mov eax, esi
jmp 0x41de88
mov ecx, dword [ebp - 0x14]
call fcn.00432097
test al, al
je 0x41de77
mov ecx, dword [ebp - 0x14]
call fcn.00432103
mov edi, eax
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x88]
call fcn.00401f95
mov eax, edi
mov ecx, dword [ebp - 0xc]
pop edi
pop esi
pop ebx
mov dword fs:[0], ecx
leave
ret