Function at 0x510520
Capabilities:
Set registry value

Disassembly:
push ebp
mov ebp, esp
push ebx
push edi
push esi
and esp, 0xfffffff8
sub esp, 0x100
mov esi, esp
mov dword [esi + 0xe8], ebp
mov dword [esi + 0xec], esp
mov dword [esi + 0xf8], 0xffffffff
mov dword [esi + 0xf4], 0x513560
lea eax, [esi + 0xf0]
mov ecx, dword fs:[0]
mov dword [esi + 0xf0], ecx
mov dword fs:[0], eax
mov dword [esi], 0
mov dword [esi + 0x24], 1
mov dword [esi + 0x20], 0
mov dword [esi + 0x3c], 7
mov dword [esi + 0x38], 0
mov word [esi + 0x28], 0
sub esp, 0xc
mov al, byte [esi + 8]
lea ecx, [esi + 0x28]
mov byte [esp + 4], al
mov dword [esp + 8], str.bIsUserEntitled
mov dword [esp], 0xf
call fcn.00405590
mov dword [esi + 0x1c], 7
mov dword [esi + 0x18], 0
mov word [esi + 8], 0
mov dword [esi + 0xf8], 2
sub esp, 0xc
mov al, byte [esi + 4]
lea ecx, [esi + 8]
mov byte [esp + 4], al
mov dword [esp + 8], 0x65b6e0
mov dword [esp], 0x2b
call fcn.00405590
lea eax, [esi + 0x20]
mov dword [esi + 0xf8], 3
push eax
lea eax, [esi + 0x28]
push eax
lea eax, [esi + 8]
push eax
push 0x80000001
call fcn.004114c0
add esp, 0x10
mov ecx, dword [esi + 0x1c]
mov ebx, eax
cmp ecx, 8
jb 0x510652
mov eax, dword [esi + 8]
lea edx, [ecx + ecx + 2]
cmp edx, 0x1000
jb 0x510648
mov edx, eax
mov eax, dword [eax - 4]
add edx, 0xfffffffc
sub edx, eax
cmp edx, 0x20
jae 0x510749
add ecx, ecx
add ecx, 0x25
mov edx, ecx
push edx
push eax
call fcn.005d319e
add esp, 8
mov ecx, dword [esi + 0x3c]
cmp ecx, 8
jb 0x51068d
mov eax, dword [esi + 0x28]
lea edx, [ecx + ecx + 2]
cmp edx, 0x1000
jb 0x510683
mov edx, eax
mov eax, dword [eax - 4]
add edx, 0xfffffffc
sub edx, eax
cmp edx, 0x20
jae 0x510758
add ecx, ecx
add ecx, 0x25
mov edx, ecx
push edx
push eax
call fcn.005d319e
add esp, 8
test bl, bl
jne 0x510735
mov eax, esi
mov dword [esi + 0xf8], 0xffffffff
push eax
push 0x65b6e0
push 0x80000001
call dword [sym.imp.ADVAPI32.dll_RegCreateKeyW]
test eax, eax
jne 0x510735
lea eax, [esi + 0x24]
push 4
push eax
push 4
push 0
push str.bIsUserEntitled
push dword [esi]
call dword [sym.imp.ADVAPI32.dll_RegSetValueExW]
test eax, eax
jne 0x510722
push 0
call fcn.00410ec0
add esp, 4
test al, al
je 0x510718
lea ecx, [esi + 0x28]
push 0
push 0x2a0
push str.policy_configurator.cpp
call fcn.0041f9f0
lea eax, [esi + 0x38]
mov dword [esi + 0xf8], 4
push str.Registry_set_for_Kaizen_Purchase_from_Browser
push eax
call fcn.005df800
add esp, 8
lea ecx, [esi + 0x28]
call fcn.00424810
jmp 0x510722
push 0
call fcn.00410ec0
add esp, 4
mov eax, dword [esi]
mov dword [esi + 0xf8], 0xffffffff
push eax
call dword [sym.imp.ADVAPI32.dll_RegCloseKey]
mov eax, dword [esi + 0xf0]
mov dword fs:[0], eax
lea esp, [ebp - 0xc]
pop esi
pop edi
pop ebx
pop ebp
ret
mov dword [esi + 0xf8], 0
call fcn.006207e0
mov dword [esi + 0xf8], 1
call fcn.006207e0
nop word [eax + eax]
push ebp
sub esp, 0x18
lea esi, [ebp - 0xfc]
mov ebp, dword [esi + 0xe8]
call fcn.0061de80
nop word cs:[eax + eax]
nop
push ebp
sub esp, 0x18
lea esi, [ebp - 0xfc]
mov ebp, dword [esi + 0xe8]
call fcn.0061de80
nop word cs:[eax + eax]
nop
push ebp
sub esp, 0x18
lea esi, [ebp - 0xfc]
mov ebp, dword [esi + 0xe8]
mov ecx, dword [esi + 0x1c]
cmp ecx, 8
jb 0x5107f7
mov eax, dword [esi + 8]
lea edx, [ecx + ecx + 2]
cmp edx, 0x1000
jb 0x5107ed
mov edx, eax
mov eax, dword [eax - 4]
add edx, 0xfffffffc
sub edx, eax
cmp edx, 0x20
jae 0x510810
add ecx, ecx
add ecx, 0x25
mov edx, ecx
push edx
push eax
call fcn.005d319e
add esp, 8
mov dword [esi + 0x18], 0
mov dword [esi + 0x1c], 7
mov word [esi + 8], 0
add esp, 0x18
pop ebp
ret
call fcn.006207e0
nop word cs:[eax + eax]
nop
push ebp
sub esp, 0x18
lea esi, [ebp - 0xfc]
mov ebp, dword [esi + 0xe8]
mov ecx, dword [esi + 0x3c]
cmp ecx, 8
jb 0x510867
mov eax, dword [esi + 0x28]
lea edx, [ecx + ecx + 2]
cmp edx, 0x1000
jb 0x51085d
mov edx, eax
mov eax, dword [eax - 4]
add edx, 0xfffffffc
sub edx, eax
cmp edx, 0x20
jae 0x51086c
add ecx, ecx
add ecx, 0x25
mov edx, ecx
push edx
push eax
call fcn.005d319e
add esp, 8
add esp, 0x18
pop ebp
ret
call fcn.006207e0
nop word cs:[eax + eax]
nop dword [eax + eax]
push ebp
sub esp, 0x18
lea esi, [ebp - 0xfc]
mov ebp, dword [esi + 0xe8]
lea ecx, [esi + 0x28]
call fcn.00424810
add esp, 0x18
pop ebp
ret