Function at 0x407f08
Capabilities:
Query or enumerate registry value

Disassembly:
push ebp
mov ebp, esp
and esp, 0xfffffff8
push 0xffffffffffffffff
push 0x45c3ca
mov eax, dword fs:[0]
push eax
sub esp, 0x30
push ebx
push esi
push edi
mov eax, dword [0x477cb0]
xor eax, esp
push eax
lea eax, [esp + 0x40]
mov dword fs:[0], eax
mov edi, 0x47d010
mov esi, str.installScanInitiated
mov edx, 0x464838
mov ecx, edi
mov dword [esp + 0x10], 0x8000ffff
mov dword [esp + 0x2c], esi
mov dword [esp + 0x18], str.configurationError
call fcn.004029b1
mov ebx, eax
test ebx, ebx
je 0x408318
push str.installScanTimeout
mov ecx, 0x47cfe4
mov dword [esp + 0x14], 0x80004005
mov dword [esp + 0x20], 0x2ee0
call fcn.00419cf0
test eax, eax
je 0x407fa4
push eax
call fcn.0043a7ce
pop ecx
lea ecx, [eax - 1]
cmp ecx, 0x77
ja 0x407fa4
imul eax, eax, 0x3e8
mov dword [esp + 0x1c], eax
mov eax, dword [0x47cfe0]
test eax, eax
je 0x407fb9
push esi
push str.InstallerScan_LI
push eax
call fcn.00415529
mov esi, dword [ebp + 8]
push 0
push 0xbdd
call fcn.00408561
push ecx
mov ecx, esp
mov dword [esp + 0x38], esp
push ebx
call fcn.0040151c
and dword [esp + 0x4c], 0
or dword [esp + 0x4c], 0xffffffff
lea ebx, [esp + 0x18]
call fcn.00416b9f
pop ecx
mov dword [esp + 0x48], 1
push 0x5c
mov esi, ebx
call fcn.004087e6
push eax
lea eax, [esp + 0x28]
push eax
mov ecx, ebx
call fcn.00408928
mov byte [esp + 0x48], 2
mov eax, dword [esp + 0x14]
mov eax, dword [eax - 0xc]
mov ecx, dword [esp + 0x24]
sub eax, dword [ecx - 0xc]
mov ecx, ebx
dec eax
push eax
lea eax, [esp + 0x3c]
push eax
call fcn.00408807
mov byte [esp + 0x48], 3
call fcn.00408629
push 0x22
mov ecx, ebx
call fcn.00403fe3
push str.__installscan
mov ecx, ebx
call fcn.00408a6c
mov edx, str.LaunchAs
mov ecx, edi
call fcn.004029b1
xor edi, edi
cmp eax, edi
je 0x4080ac
push str.AsInvoker
push eax
call fcn.0043a0da
test eax, eax
pop ecx
pop ecx
je 0x4080ac
call fcn.00416b31
test al, al
je 0x4080ac
push dword [esp + 0x14]
push dword [esp + 0x28]
push dword [esp + 0x40]
call fcn.00417de0
add esp, 0xc
cmp eax, edi
mov dword [esp + 0x10], eax
jge 0x4080ac
mov eax, dword [0x47cfe0]
cmp eax, edi
je 0x4080ac
push str.installScanInitiated
push str.asInvoker
push dword [esp + 0x18]
push eax
call fcn.004154a8
cmp dword [esp + 0x10], edi
mov ebx, dword [sym.imp.KERNEL32.dll_CloseHandle]
mov dword [esp + 0x18], str.asInstaller
jge 0x4080f9
lea eax, [esp + 0x14]
push eax
call fcn.00415ff2
mov esi, eax
pop ecx
mov dword [esp + 0x34], esi
mov byte [esp + 0x48], 4
cmp esi, edi
je 0x4080e0
mov dword [esp + 0x10], edi
jmp 0x4080e9
call fcn.004030e7
mov dword [esp + 0x10], eax
mov byte [esp + 0x48], 3
cmp esi, edi
je 0x4080f9
push esi
call ebx
mov dword [esp + 0x34], edi
push 0xffffffffffffffff
lea ecx, [esp + 0x18]
call fcn.004053eb
push 0xffffffffffffffff
lea ecx, [esp + 0x28]
call fcn.004053eb
cmp dword [esp + 0x10], edi
jl 0x4082ee
mov dword [esp + 0x18], str.waitingOnAppStart
mov dword [esp + 0x20], edi
mov byte [esp + 0x48], 5
push dword [esp + 0x1c]
mov eax, dword [ebp + 8]
push dword [esp + 0x20]
lea edi, [esp + 0x28]
push dword [ebp + 0xc]
call fcn.00407d3d
xor esi, esi
cmp eax, esi
mov dword [esp + 0x10], eax
jl 0x4082d8
mov eax, dword [0x47cfe0]
cmp eax, esi
mov ecx, str.installScanInProgress
mov dword [esp + 0x2c], ecx
mov dword [esp + 0x18], esi
je 0x408171
push ecx
push str.InstallerScan_LI
push eax
call fcn.00415529
lea eax, [esp + 0x20]
push eax
push dword [esp + 0x20]
push dword [esp + 0x24]
push dword [ebp + 8]
call fcn.00407e1d
cmp eax, esi
mov dword [esp + 0x10], eax
jl 0x4082d8
mov eax, dword [0x47cfe0]
cmp eax, esi
mov ecx, str.installScanCompleted
mov dword [esp + 0x2c], ecx
mov dword [esp + 0x18], str.gettingResultId
je 0x4081b8
push ecx
push str.InstallerScan_LI
push eax
call fcn.00415529
lea ecx, [esp + 0x28]
call fcn.0041845d
mov byte [esp + 0x48], 6
lea eax, [esp + 0x34]
push eax
push 0x47ce68
call fcn.0040dd7d
mov byte [esp + 0x48], 7
push dword [eax]
lea eax, [esp + 0x2c]
push str.SOFTWARESlimWare_Utilities_Inc_s
push eax
call fcn.00402009
add esp, 0xc
mov byte [esp + 0x48], 6
lea ecx, [esp + 0x34]
call fcn.0041253c
mov dword [esp + 0x1c], esi
mov byte [esp + 0x48], 8
lea eax, [esp + 0x10]
push eax
push 0x20019
push esi
push dword [esp + 0x34]
mov dword [esp + 0x20], esi
push SysReAllocStringLen
call dword [sym.imp.ADVAPI32.dll_RegOpenKeyExW]
cmp eax, esi
jne 0x4082b3
lea ecx, [esp + 0x1c]
call fcn.00408911
cmp eax, esi
mov ecx, dword [esp + 0x10]
mov dword [esp + 0x1c], ecx
jne 0x4082b3
lea eax, [esp + 0x34]
push eax
lea eax, [esp + 0x34]
push eax
lea eax, [esp + 0x18]
push eax
push esi
push str.InstallScanID
push ecx
mov dword [esp + 0x28], esi
mov dword [esp + 0x48], 0x80004005
mov dword [esp + 0x4c], 4
call dword [sym.imp.ADVAPI32.dll_RegQueryValueExW]
cmp eax, esi
je 0x40827b
cmp eax, 0xea
jne 0x4082b3
mov eax, dword [esp + 0x10]
dec eax
je 0x40829f
sub eax, 3
je 0x408291
mov dword [esp + 0x10], 0x80028ca0
jmp 0x4082bc
mov eax, dword [esp + 0x30]
mov dword [esp + 0x18], str.app_side_error
jmp 0x4082b8
mov eax, dword [esp + 0x34]
neg eax
sbb eax, eax
and eax, 0x5ffefffe
add eax, 0xa0010002
jmp 0x4082b8
call fcn.00408979
mov dword [esp + 0x10], eax
mov byte [esp + 0x48], 6
lea ecx, [esp + 0x1c]
call fcn.00408911
mov byte [esp + 0x48], 5
lea ecx, [esp + 0x28]
call fcn.0041253c
mov byte [esp + 0x48], 3
cmp dword [esp + 0x20], esi
je 0x4082ee
push dword [esp + 0x20]
call ebx
and dword [esp + 0x20], 0
mov byte [esp + 0x48], 2
lea ecx, [esp + 0x38]
call fcn.0041253c
mov byte [esp + 0x48], 1
lea ecx, [esp + 0x24]
call fcn.0041253c
or dword [esp + 0x48], 0xffffffff
lea ecx, [esp + 0x14]
call fcn.0041253c
mov esi, dword [ebp + 8]
push 0x64
push 0xbdd
call fcn.00408561
xor ecx, ecx
cmp dword [0x47cf10], ecx
jne 0x408336
cmp dword [esi + 0x58], ecx
je 0x40833e
mov dword [esp + 0x10], 0x800704c7
cmp dword [esp + 0x10], ecx
jge 0x40835f
mov eax, dword [0x47cfe0]
cmp eax, ecx
je 0x40835f
push dword [esp + 0x2c]
push dword [esp + 0x1c]
push dword [esp + 0x18]
push eax
call fcn.004154a8
mov eax, dword [esp + 0x10]
mov ecx, dword [esp + 0x40]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 8