Function at 0x5755cf
Capabilities:
Set registry value

Disassembly:
push 0x78
mov eax, 0x58e0c4
call fcn.00532159
mov ebx, ecx
mov dword [ebp - 0x3c], ebx
call fcn.00571272
sub esp, 0x18
mov dword [0x5ff58c], 1
mov ecx, esp
mov dword [ebp - 0x38], esp
mov esi, str.sessioncode
push esi
call fcn.004036e4
and dword [ebp - 4], 0
sub esp, 0x18
mov ecx, esp
mov dword [ebp - 0x14], esp
push esi
call fcn.004036e4
xor ecx, ecx
mov byte [ebp - 4], 1
call fcn.00579897
mov ecx, eax
mov byte [ebp - 4], 0
call fcn.00579726
or eax, 1
xor ecx, ecx
push eax
call fcn.00579897
or edi, 0xffffffff
mov ecx, eax
mov dword [ebp - 4], edi
call fcn.00579652
sub esp, 0x18
mov ecx, esp
mov dword [ebp - 0x14], esp
push 0x5c6650
call fcn.004036e4
lea eax, [ebp - 0x84]
mov dword [ebp - 4], 2
push eax
xor ecx, ecx
call fcn.00579897
mov ecx, eax
mov dword [ebp - 4], edi
call fcn.005797a8
sub esp, 0x18
mov dword [ebp - 4], 3
mov esi, esp
push eax
push str.intent
sub esp, 0x18
mov ecx, esp
mov dword [ebp - 0x14], esp
push 0x5c713c
call fcn.004036e4
lea eax, [ebp - 0x6c]
mov byte [ebp - 4], 4
push eax
xor ecx, ecx
call fcn.00579897
mov ecx, eax
mov byte [ebp - 4], 3
call fcn.005797a8
push eax
mov edx, str.transactionid
mov byte [ebp - 4], 5
lea ecx, [ebp - 0x54]
call fcn.004043cc
pop ecx
mov edx, eax
mov byte [ebp - 4], 6
lea ecx, [ebp - 0x30]
call fcn.0040406c
pop ecx
mov byte [ebp - 4], 7
mov edx, eax
mov ecx, esi
call fcn.004051f9
pop ecx
mov ecx, 0x4b0
call fcn.00572cc5
add esp, 0x18
lea ecx, [ebp - 0x30]
push 0
push 1
call fcn.00403a36
push 0
push 1
lea ecx, [ebp - 0x54]
call fcn.00403a36
push 0
push 1
lea ecx, [ebp - 0x6c]
call fcn.00403a36
push 0
push 1
lea ecx, [ebp - 0x84]
mov dword [ebp - 4], edi
call fcn.00403a36
sub esp, 0x18
mov ecx, esp
push str.AREA_EVALUATEINSTALL
call fcn.004036e4
call fcn.00571fcb
add esp, 0x18
call fcn.00576f11
mov esi, eax
test esi, esi
je 0x575755
mov dword [0x5ff58c], 2
jmp 0x575b4b
sub esp, 0x18
mov esi, str.sessioncode
mov ecx, esp
mov dword [ebp - 0x14], esp
push esi
call fcn.004036e4
sub esp, 0x18
mov dword [ebp - 4], 8
mov ecx, esp
mov dword [ebp - 0x38], esp
push esi
call fcn.004036e4
xor ecx, ecx
mov byte [ebp - 4], 9
call fcn.00579897
mov ecx, eax
mov byte [ebp - 4], 8
call fcn.00579726
or eax, 2
xor ecx, ecx
push eax
call fcn.00579897
mov ecx, eax
mov dword [ebp - 4], edi
call fcn.00579652
sub esp, 0x18
mov dword [0x5ff58c], 3
mov ecx, esp
push str.AREA_GETSETTINGS
call fcn.004036e4
call fcn.00571fcb
add esp, 0x18
mov ecx, ebx
call fcn.00576a71
mov esi, eax
test esi, esi
je 0x5757e5
mov dword [0x5ff58c], 4
jmp 0x575b4b
sub esp, 0x18
mov dword [0x5ff58c], 0x15
mov ecx, esp
push str.AREA_WAITFORUSER
call fcn.004036e4
call fcn.00571fcb
add esp, 0x18
call fcn.005766ba
mov esi, eax
test esi, esi
je 0x575820
mov dword [0x5ff58c], 0x16
jmp 0x575b4b
sub esp, 0x18
mov dword [0x5ff58c], 5
mov ecx, esp
push str.AREA_PREINSTALL
call fcn.004036e4
call fcn.00571fcb
add esp, 0x18
call fcn.0057615b
mov esi, eax
test esi, esi
je 0x57585b
mov dword [0x5ff58c], 6
jmp 0x575b4b
sub esp, 0x18
mov dword [0x5ff58c], 9
mov ecx, esp
push 0x5c5ffc
call fcn.004035e2
mov ecx, 0x4bb
call fcn.00572cc5
mov ecx, esp
push str.AREA_DOWNLOAD
call fcn.004036e4
call fcn.00571fcb
mov ecx, esp
mov dword [ebp - 0x14], esp
mov esi, str.askoffer
push esi
call fcn.004036e4
push 0
xor ecx, ecx
mov dword [ebp - 4], 0xa
call fcn.00579897
mov ecx, eax
mov dword [ebp - 4], edi
call fcn.00579652
sub esp, 0x18
mov ecx, esp
mov dword [ebp - 0x14], esp
push esi
call fcn.004036e4
xor ecx, ecx
mov dword [ebp - 4], 0xb
call fcn.00579897
mov ecx, eax
mov dword [ebp - 4], edi
call fcn.00579726
cmp eax, 1
jne 0x575980
mov edx, 0x5701c4
lea ecx, [ebp - 0x38]
call fcn.00409693
mov esi, eax
mov dword [ebp - 4], 0xc
lea edi, [ebp - 0x2c]
xor eax, eax
lea ecx, [ebp - 0x2c]
stosd dword es:[edi], eax
stosd dword es:[edi], eax
stosd dword es:[edi], eax
stosd dword es:[edi], eax
stosd dword es:[edi], eax
call fcn.0040adbf
mov eax, dword [esi]
and dword [esi], 0
mov dword [ebp - 0x2c], 0x5c7d54
mov dword [ebp - 0x1c], eax
lea eax, [ebp - 0x18]
mov byte [ebp - 4], 0xd
push eax
lea ecx, [ebp - 0x2c]
call fcn.0040af5e
cmp dword [ebp - 0x1c], 0
je 0x575941
push 4
push dword [ebp - 0x1c]
call fcn.00531eab
pop ecx
pop ecx
lea ecx, [ebp - 0x2c]
call fcn.0040aebe
cmp dword [ebp - 0x38], 0
je 0x57595b
push 4
push dword [ebp - 0x38]
call fcn.00531eab
pop ecx
pop ecx
lea ecx, [ebp - 0x18]
mov dword [ebp - 4], 0xe
call fcn.004108b0
or edi, 0xffffffff
mov dword [ebp - 4], edi
cmp dword [ebp - 0x14], 0
setne al
test al, al
je 0x575980
call fcn.005558eb
mov ecx, ebx
call fcn.0057685f
mov esi, eax
test esi, esi
je 0x57599c
mov dword [0x5ff58c], 0xa
jmp 0x575b4b
sub esp, 0x18
mov ecx, esp
mov dword [ebp - 0x14], esp
push str.askoffer
call fcn.004036e4
xor ecx, ecx
mov dword [ebp - 4], 0xf
call fcn.00579897
mov ecx, eax
mov dword [ebp - 4], edi
call fcn.00579726
cmp eax, 1
jne 0x575abc
xor eax, eax
lea edi, [ebp - 0x24]
stosd dword es:[edi], eax
stosd dword es:[edi], eax
stosd dword es:[edi], eax
xor eax, eax
mov dword [ebp - 0x24], eax
mov dword [ebp - 0x20], eax
mov dword [ebp - 0x1c], eax
push 0x20006
sub esp, 0x18
mov dword [ebp - 4], 0x10
mov ecx, esp
mov dword [ebp - 0x14], esp
push str.package
call fcn.004036e4
lea eax, [ebp - 0x54]
mov byte [ebp - 4], 0x11
push eax
xor ecx, ecx
call fcn.00579897
mov ecx, eax
mov byte [ebp - 4], 0x10
call fcn.005797a8
mov esi, eax
push 0x5c6258
lea ecx, [ebp - 0x6c]
mov byte [ebp - 4], 0x12
call fcn.004035e2
push esi
mov edx, eax
mov byte [ebp - 4], 0x13
lea ecx, [ebp - 0x84]
call fcn.004051f9
pop ecx
cmp dword [eax + 0x14], 8
jb 0x575a48
mov eax, dword [eax]
push eax
push SysReAllocString
lea ecx, [ebp - 0x24]
call fcn.004031a2
test eax, eax
lea ecx, [ebp - 0x84]
push 0
push 1
sete bl
call fcn.00403a36
push 0
push 1
lea ecx, [ebp - 0x6c]
call fcn.00403a36
push 0
push 1
lea ecx, [ebp - 0x54]
call fcn.00403a36
test bl, bl
je 0x575aad
push 4
lea eax, [ebp - 0x34]
mov dword [ebp - 0x34], 1
push eax
push 4
push 0
push str.DoneDwl
push dword [ebp - 0x24]
call dword [sym.imp.ADVAPI32.dll_RegSetValueExW]
lea ecx, [ebp - 0x24]
call fcn.0040321c
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x24]
call fcn.0040321c
mov ebx, dword [ebp - 0x3c]
sub esp, 0x18
mov dword [0x5ff58c], 0xb
mov ecx, esp
push 0x5c5ffc
call fcn.004035e2
mov ecx, 0x4bc
call fcn.00572cc5
mov ecx, esp
push str.AREA_INSTALL
call fcn.004036e4
call fcn.00571fcb
add esp, 0x18
mov ecx, ebx
call fcn.00576365
mov esi, eax
test esi, esi
je 0x575b0c
mov dword [0x5ff58c], 0xc
jmp 0x575b4b
sub esp, 0x18
mov dword [0x5ff58c], 0xf
mov ecx, esp
push str.AREA_POSTINSTALL
call fcn.004036e4
call fcn.00571fcb
add esp, 0x18
call fcn.00575e83
mov esi, eax
test esi, esi
je 0x575b44
mov dword [0x5ff58c], 0x10
jmp 0x575b4b
mov ecx, ebx
call fcn.00576510
mov eax, esi
call fcn.00532103
ret