Function at 0x42cfe9
Capabilities:
Check if file exists
Get file attributes
Query or enumerate registry key
Resolve function by parsing pe exports

Disassembly:
push ebp
mov ebp, esp
and esp, 0xfffffff8
push 0xffffffffffffffff
push 0x460126
mov eax, dword fs:[0]
push eax
sub esp, 0x4f8
mov eax, dword [0x4a1d50]
xor eax, esp
mov dword [esp + 0x4f0], eax
push ebx
push esi
push edi
mov eax, dword [0x4a1d50]
xor eax, esp
push eax
lea eax, [esp + 0x508]
mov dword fs:[0], eax
mov eax, dword [ebp + 8]
mov esi, ecx
xor ebx, ebx
push str.InitProduct...
lea ecx, [esp + 0x2c]
mov dword [esp + 0x50], esi
mov dword [esp + 0xd4], eax
mov dword [esp + 0x44], ebx
call fcn.0040130b
push ebx
lea eax, [esp + 0x2c]
push eax
push 2
mov dword [esp + 0x51c], ebx
call fcn.0040fcf3
or dword [esp + 0x51c], 0xffffffff
mov ecx, dword [esp + 0x34]
add esp, 0xc
add ecx, 0xfffffff0
call fcn.004017c4
lea eax, [esp + 0x54]
push eax
push 8
push ebx
push dword [0x4a65e8]
mov dword [esp + 0x60], ebx
push 0x80000002
call dword [sym.imp.ADVAPI32.dll_RegOpenKeyExW]
test eax, eax
jne 0x42df1f
mov dword [esp + 0x28], ebx
jmp 0x42d0a7
mov esi, dword [esp + 0x4c]
xor eax, eax
lea edi, [esp + 0xe8]
push 0x206
mov dword [esp + 0xe8], ebx
stosd dword es:[edi], eax
mov word [esp + 0x2f8], ax
lea eax, [esp + 0x2fa]
push ebx
push eax
call fcn.00448000
add esp, 0xc
lea eax, [esp + 0xe4]
push eax
push ebx
push ebx
push ebx
lea eax, [esp + 0x44]
push eax
lea eax, [esp + 0x308]
push eax
push dword [esp + 0x40]
mov dword [esp + 0x50], 0x104
push dword [esp + 0x70]
call dword [sym.imp.ADVAPI32.dll_RegEnumKeyExW]
mov edi, eax
cmp edi, ebx
je 0x42d158
mov esi, 0x103
cmp edi, esi
je 0x42dede
push str.Error_while_reading_product_registry:
lea ecx, [esp + 0xac]
call fcn.0040130b
push 2
pop eax
push edi
lea ecx, [esp + 0xac]
push ecx
push eax
mov dword [esp + 0x51c], eax
call fcn.0040fcf3
add esp, 0xc
or dword [esp + 0x510], 0xffffffff
mov ecx, dword [esp + 0xa8]
jmp 0x42dec6
lea edi, [esi + 0x78]
mov ecx, edi
call fcn.00401556
lea ecx, [esi + 0x68]
mov dword [esp + 0x38], ecx
call fcn.00401556
lea ecx, [esi + 0x60]
mov dword [esp + 0x1c], ecx
call fcn.00401556
lea ecx, [esi + 0x64]
call fcn.00401556
lea ecx, [esi + 0x44]
call fcn.00401556
lea eax, [esp + 0x2f4]
push eax
lea ecx, [esp + 0x18]
call fcn.0040130b
push str.Started_Product:
lea ecx, [esp + 0x6c]
mov dword [esp + 0x514], 3
call fcn.0040130b
push ebx
lea eax, [esp + 0x18]
push eax
lea eax, [esp + 0x70]
push eax
push 2
mov byte [esp + 0x520], 4
call fcn.0040f821
mov byte [esp + 0x520], 3
mov ecx, dword [esp + 0x78]
add esp, 0x10
add ecx, 0xfffffff0
call fcn.004017c4
lea eax, [esp + 0x14]
push eax
call fcn.0042cf7e
mov dword [esp + 0x24], eax
mov eax, dword [esp + 0x14]
cmp dword [eax - 0xc], 0x26
je 0x42d23a
push str.Invalid_Product_GUID:
lea ecx, [esp + 0x84]
call fcn.0040130b
push ebx
lea eax, [esp + 0x18]
push eax
lea eax, [esp + 0x88]
push eax
push 2
mov byte [esp + 0x520], 5
call fcn.0040f821
mov ecx, dword [esp + 0x90]
add esp, 0x10
jmp 0x42deb2
mov esi, dword [esp + 0xd0]
mov ecx, dword [esi]
cmp dword [ecx - 0xc], ebx
je 0x42d28c
push eax
mov ecx, esi
call fcn.00406240
test eax, eax
je 0x42d28c
push str.Found_Product_does_not_match_requested_Product
lea ecx, [esp + 0xa8]
call fcn.0040130b
push ebx
lea eax, [esp + 0xa8]
push eax
push 2
mov byte [esp + 0x51c], 6
call fcn.0040fcf3
mov ecx, dword [esp + 0xb0]
add esp, 0xc
jmp 0x42deb2
mov eax, dword [esi]
cmp dword [eax - 0xc], ebx
jne 0x42d2d1
cmp dword [esp + 0x24], ebx
je 0x42d2d7
push str.Skipping_previously_checked_Product
lea ecx, [esp + 0xb0]
call fcn.0040130b
push ebx
lea eax, [esp + 0xb0]
push eax
push 2
mov byte [esp + 0x51c], 7
call fcn.0040fcf3
mov ecx, dword [esp + 0xb8]
add esp, 0xc
jmp 0x42deb2
cmp dword [esp + 0x24], ebx
jne 0x42d2ee
mov esi, dword [esp + 0x4c]
lea ecx, [esi + 0x30]
mov eax, dword [ecx + 8]
lea edx, [esp + 0x14]
push edx
push eax
call fcn.0043887b
jmp 0x42d2f2
mov esi, dword [esp + 0x4c]
lea eax, [esp + 0x14]
push eax
mov ecx, edi
call fcn.004063a1
push 0x46de14
lea eax, [esp + 0xdc]
push 0x4a65e8
push eax
call fcn.004061c9
add esp, 0xc
lea ecx, [esp + 0x14]
push ecx
push eax
lea eax, [esp + 0x18]
push eax
mov byte [esp + 0x51c], 8
call fcn.00401025
add esp, 0xc
mov byte [esp + 0x510], 0xa
mov ecx, dword [esp + 0xd8]
add ecx, 0xfffffff0
call fcn.004017c4
push dword [esp + 0x38]
mov edi, 0x80000002
push 0x48f238
push dword [esp + 0x18]
push edi
call fcn.0042eccb
add esp, 0x10
test eax, eax
jne 0x42de7c
mov eax, dword [esp + 0x38]
mov eax, dword [eax]
cmp dword [eax - 0xc], ebx
je 0x42de7c
push dword [esp + 0x1c]
push str.ProductCode
push dword [esp + 0x18]
push edi
call fcn.0042eccb
add esp, 0x10
test eax, eax
jne 0x42de53
mov eax, dword [esp + 0x1c]
mov eax, dword [eax]
cmp dword [eax - 0xc], ebx
je 0x42de53
call fcn.004366fe
push eax
lea ecx, [esp + 0x5c]
call fcn.00411d53
lea eax, [esp + 0x58]
push eax
push str.InstalledValidate
mov byte [esp + 0x518], 0xd
push dword [esp + 0x18]
push edi
call fcn.0042eccb
mov edi, dword [esp + 0x68]
add esp, 0x10
test eax, eax
jne 0x42de1e
cmp dword [edi - 0xc], ebx
je 0x42de1e
push ebx
lea eax, [esp + 0x5c]
push eax
push 2
call fcn.0040fcf3
add esp, 0xc
push 0x48578c
push edi
call fcn.00449327
pop ecx
pop ecx
xor ecx, ecx
cmp eax, ebx
sete cl
mov dword [esp + 0x38], ecx
cmp dword [0x4a66d0], ebx
je 0x42d48b
lea eax, [esi + 0x64]
push eax
push 0x48f2fc
push dword [esp + 0x18]
push 0x80000002
call fcn.0042eccb
add esp, 0x10
test eax, eax
jne 0x42d446
mov eax, dword [esi + 0x64]
cmp dword [eax - 0xc], ebx
jne 0x42d5a4
push str.Invalid_ProductVersion
lea ecx, [esp + 0xc8]
call fcn.0040130b
push ebx
lea eax, [esp + 0xc8]
push eax
push 1
mov byte [esp + 0x51c], 0xf
call fcn.0040fcf3
mov ecx, dword [esp + 0xd0]
add esp, 0xc
add ecx, 0xfffffff0
call fcn.004017c4
add edi, 0xfffffff0
mov ecx, edi
jmp 0x42dea9
cmp dword [esp + 0x38], ebx
je 0x42d535
xor eax, eax
push 0x206
mov word [esp + 0xf0], ax
lea eax, [esp + 0xf2]
push ebx
push eax
mov dword [esp + 0x40], 0x104
call fcn.00448000
mov eax, dword [esi + 0x60]
add esp, 0xc
lea ecx, [esp + 0x34]
push ecx
lea ecx, [esp + 0xf0]
push ecx
push str.VersionString
push eax
call sub.msi.dll_MsiGetPropertyW
mov dword [esp + 0x1c], eax
lea eax, [esp + 0xec]
push eax
lea ecx, [esi + 0x64]
call fcn.0040137f
cmp dword [esp + 0x1c], ebx
jne 0x42d4fe
mov eax, dword [esi + 0x64]
cmp dword [eax - 0xc], ebx
jne 0x42d5a4
lea ecx, [esi + 0x64]
call fcn.00401556
push str.Could_not_collect_Version
lea ecx, [esp + 0x74]
call fcn.0040130b
mov byte [esp + 0x510], 0x10
push dword [esp + 0x1c]
lea eax, [esp + 0x74]
push eax
push 1
call fcn.0040fcf3
mov ecx, dword [esp + 0x7c]
jmp 0x42d476
push edi
call dword [sym.imp.KERNEL32.dll_GetFileAttributesW]
cmp eax, 0xffffffff
jne 0x42d576
push str.product_installed_state_is_not_confirmed
lea ecx, [esp + 0xb4]
call fcn.0040130b
push ebx
lea eax, [esp + 0xb4]
push eax
push 1
mov byte [esp + 0x51c], 0x11
call fcn.0040fcf3
mov ecx, dword [esp + 0xbc]
jmp 0x42d476
lea eax, [esi + 0x64]
push eax
push 0x48f2fc
push dword [esp + 0x18]
push 0x80000002
call fcn.0042eccb
add esp, 0x10
test eax, eax
jne 0x42dde9
mov eax, dword [esi + 0x64]
cmp dword [eax - 0xc], ebx
je 0x42dde9
lea eax, [esi + 0x44]
push eax
push str.ManifestURL
push dword [esp + 0x18]
push 0x80000002
call fcn.0042eccb
add esp, 0x10
test eax, eax
jne 0x42ddb4
mov eax, dword [esi + 0x44]
cmp dword [eax - 0xc], ebx
je 0x42ddb4
lea eax, [esi + 0x48]
push eax
push 0x48e774
push dword [esp + 0x18]
mov dword [eax], ebx
push 0x80000002
call fcn.0042ed7d
add esp, 0x10
test eax, eax
jne 0x42dd7f
cmp dword [esi + 0x48], 1
jb 0x42dd7f
lea eax, [esi + 0x4c]
push eax
push str.Mode
push dword [esp + 0x18]
push 0x80000002
call fcn.0042ed7d
add esp, 0x10
test eax, eax
jne 0x42dd4a
mov eax, dword [esi + 0x4c]
cmp eax, 1
jb 0x42dd4a
cmp eax, 4
ja 0x42dd4a
cmp dword [0x4a66d0], ebx
jne 0x42d7be
call fcn.004366fe
push eax
lea ecx, [esp + 0x40]
call fcn.00411d53
lea eax, [esp + 0x3c]
push eax
push str.EULA
mov byte [esp + 0x518], 0x16
push dword [esp + 0x18]
push 0x80000002
call fcn.0042eccb
mov esi, dword [esp + 0x4c]
add esp, 0x10
cmp dword [esi - 0xc], ebx
je 0x42d7aa
push ebx
push 0x3b
lea ecx, [esp + 0x44]
call fcn.00419a32
mov dword [esp + 0x24], eax
call fcn.004366fe
push eax
lea ecx, [esp + 0x24]
call fcn.00411d53
mov byte [esp + 0x510], 0x17
call fcn.004366fe
push eax
lea ecx, [esp + 0x34]
call fcn.00411d53
cmp dword [esp + 0x24], 0xffffffff
mov byte [esp + 0x510], 0x18
je 0x42d8f9
push dword [esp + 0x24]
lea eax, [esp + 0xe4]
push eax
lea ecx, [esp + 0x44]
call fcn.00407796
push eax
lea ecx, [esp + 0x24]
mov byte [esp + 0x514], 0x19
call fcn.004063a1
mov byte [esp + 0x510], 0x18
mov ecx, dword [esp + 0xe0]
add ecx, 0xfffffff0
call fcn.004017c4
mov eax, dword [esi - 0xc]
sub eax, dword [esp + 0x24]
lea ecx, [esp + 0x3c]
dec eax
push eax
lea eax, [esp + 0xe0]
push eax
call fcn.0040774f
push eax
lea ecx, [esp + 0x34]
mov byte [esp + 0x514], 0x1a
call fcn.004063a1
mov byte [esp + 0x510], 0x18
mov ecx, dword [esp + 0xdc]
add ecx, 0xfffffff0
call fcn.004017c4
mov eax, dword [esp + 0x20]
cmp dword [eax - 0xc], ebx
je 0x42d8d0
mov ecx, dword [esp + 0x30]
cmp dword [ecx - 0xc], ebx
je 0x42d8d0
or dword [esp + 0x78], 0xffffffff
lea edx, [esp + 0x78]
push edx
push ecx
push eax
push 0x80000001
call fcn.0042ed7d
add esp, 0x10
test eax, eax
jne 0x42d875
cmp dword [esp + 0x78], 1
jb 0x42d875
mov ecx, dword [esp + 0x30]
add ecx, 0xfffffff0
call fcn.004017c4
mov ecx, dword [esp + 0x20]
add ecx, 0xfffffff0
call fcn.004017c4
lea ecx, [esi - 0x10]
mov byte [esp + 0x510], 0xd
call fcn.004017c4
mov esi, dword [esp + 0x4c]
call fcn.004366fe
push eax
lea ecx, [esp + 0x30]
call fcn.00411d53
lea eax, [esp + 0x2c]
push eax
push str.PolicyDisableUpdater
mov byte [esp + 0x518], 0x1e
push dword [esp + 0x18]
push 0x80000002
call fcn.0042eccb
mov eax, dword [esp + 0x3c]
add esp, 0x10
cmp dword [eax - 0xc], ebx
je 0x42d92e
or dword [esp + 0x1c], 0xffffffff
lea ecx, [esp + 0x1c]
push ecx
push str.bUpdater
push eax
push 0x80000002
call fcn.0042ed7d
add esp, 0x10
test eax, eax
jne 0x42d92e
cmp dword [esp + 0x1c], ebx
jne 0x42d92e
push str.bUpdater_policy_set_to_disable_Updater_in
lea ecx, [esp + 0x8c]
call fcn.0040130b
push ebx
lea eax, [esp + 0x30]
push eax
lea eax, [esp + 0x90]
push eax
push 1
mov byte [esp + 0x520], 0x1f
call fcn.0040f821
mov ecx, dword [esp + 0x98]
add esp, 0x10
add ecx, 0xfffffff0
call fcn.004017c4
mov ecx, dword [esp + 0x2c]
jmp 0x42d479
push str.EULA_is_not_accepted
lea ecx, [esp + 0xd0]
call fcn.0040130b
push ebx
lea eax, [esp + 0xd0]
push eax
push 1
mov byte [esp + 0x51c], 0x1c
call fcn.0040fcf3
mov ecx, dword [esp + 0xd8]
add esp, 0xc
add ecx, 0xfffffff0
call fcn.004017c4
mov ecx, dword [esp + 0x30]
add ecx, 0xfffffff0
call fcn.004017c4
mov ecx, dword [esp + 0x20]
add ecx, 0xfffffff0
call fcn.004017c4
lea ecx, [esi - 0x10]
jmp 0x42d47c
push str.Invalid_registered_EULA_value
lea ecx, [esp + 0x60]
call fcn.0040130b
push ebx
lea eax, [esp + 0x60]
push eax
push 1
mov byte [esp + 0x51c], 0x1b
call fcn.0040fcf3
mov ecx, dword [esp + 0x68]
jmp 0x42d8a5
push str.Invalid_registered_EULA_value
lea ecx, [esp + 0xbc]
call fcn.0040130b
push ebx
lea eax, [esp + 0xbc]
push eax
push 1
mov byte [esp + 0x51c], 0x1d
call fcn.0040fcf3
mov ecx, dword [esp + 0xc4]
jmp 0x42d8a5
lea eax, [esi + 0x70]
push eax
push str.INSTALLDIR
push dword [esp + 0x18]
push 0x80000002
call fcn.0042eccb
lea eax, [esi + 0x7c]
push eax
push str.DataModulePath
push dword [esp + 0x28]
push 0x80000002
call fcn.0042eccb
lea eax, [esi + 0x80]
push eax
push str.DataModuleUsage
push dword [esp + 0x38]
push 0x80000002
call fcn.0042eccb
lea eax, [esi + 0x74]
push eax
push 0x46d30c
push dword [esp + 0x48]
push 0x80000002
call fcn.0042eccb
mov eax, dword [esi + 0x74]
add esp, 0x40
cmp dword [eax - 0xc], ebx
jne 0x42d99e
push esi
call fcn.0042c9d1
lea eax, [esp + 0xc8]
push eax
push str.DisableAnyUI
push dword [esp + 0x18]
mov dword [esp + 0xd4], ebx
push 0x80000002
call fcn.0042ed7d
add esp, 0x10
test eax, eax
jne 0x42da63
cmp dword [esp + 0xc8], ebx
jbe 0x42da63
push str.DisableAnyUI_is_registered
lea ecx, [esp + 0x94]
call fcn.0040130b
push ebx
lea eax, [esp + 0x94]
push eax
push 2
mov byte [esp + 0x51c], 0x20
call fcn.0040fcf3
mov byte [esp + 0x51c], 0x1e
mov ecx, dword [esp + 0x9c]
add esp, 0xc
add ecx, 0xfffffff0
call fcn.004017c4
cmp dword [esi + 0x4c], 3
je 0x42da59
push str.Skipping_product___not_Full_Auto_mode
lea ecx, [esp + 0xc4]
call fcn.0040130b
push ebx
lea eax, [esp + 0xc4]
push eax
push 2
mov byte [esp + 0x51c], 0x21
call fcn.0040fcf3
mov ecx, dword [esp + 0xcc]
add esp, 0xc
jmp 0x42d864
mov dword [esi + 0xec], 1
cmp dword [esp + 0x38], ebx
je 0x42db26
xor eax, eax
push 0x206
mov word [esp + 0xf0], ax
lea eax, [esp + 0xf2]
push ebx
push eax
call fcn.00448000
mov eax, dword [esi + 0x60]
add esp, 0xc
lea ecx, [esp + 0x34]
push ecx
lea ecx, [esp + 0xf0]
push ecx
push str.AuthorizedLUAApp
push eax
mov dword [esp + 0x44], 0x104
call sub.msi.dll_MsiGetPropertyW
cmp eax, ebx
jne 0x42daea
lea eax, [esp + 0xec]
push eax
lea ecx, [esp + 0xd8]
call fcn.0040130b
mov byte [esp + 0x510], 0x22
or dword [esp + 0x40], 1
push 0x46bd84
mov ecx, eax
call fcn.00406240
mov byte [esp + 0x1b], 1
test eax, eax
je 0x42daee
mov byte [esp + 0x1b], bl
mov dword [esp + 0x510], 0x1e
test byte [esp + 0x40], 1
je 0x42db14
mov ecx, dword [esp + 0xd4]
and dword [esp + 0x40], 0xfffffffe
add ecx, 0xfffffff0
call fcn.004017c4
cmp byte [esp + 0x1b], bl
je 0x42db26
mov dword [esi + 0xa4], 1
jmp 0x42db2c
mov dword [esi + 0xa4], ebx
lea eax, [esi + 0x68]
push eax
mov ecx, 0x4a66e0
call fcn.004063a1
push str.ProductCode:
lea ecx, [esp + 0x9c]
call fcn.0040130b
push ebx
lea eax, [esi + 0x60]
push eax
lea eax, [esp + 0xa0]
push eax
push 2
mov byte [esp + 0x520], 0x23
call fcn.0040f821
mov byte [esp + 0x520], 0x1e
mov ecx, dword [esp + 0xa8]
add esp, 0x10
add ecx, 0xfffffff0
call fcn.004017c4
push str.ProductName:
lea ecx, [esp + 0xb8]
call fcn.0040130b
push ebx
lea eax, [esi + 0x68]
push eax
lea eax, [esp + 0xbc]
push eax
push 2
mov byte [esp + 0x520], 0x24
call fcn.0040f821
mov byte [esp + 0x520], 0x1e
mov ecx, dword [esp + 0xc4]
add esp, 0x10
add ecx, 0xfffffff0
call fcn.004017c4
push str.ProductVersion:
lea ecx, [esp + 0xa4]
call fcn.0040130b
push ebx
lea eax, [esi + 0x64]
push eax
lea eax, [esp + 0xa8]
push eax
push 2
mov byte [esp + 0x520], 0x25
call fcn.0040f821
mov byte [esp + 0x520], 0x1e
mov ecx, dword [esp + 0xb0]
add esp, 0x10
add ecx, 0xfffffff0
call fcn.004017c4
push str.Product_UI_Language:
lea ecx, [esp + 0xc0]
call fcn.0040130b
push ebx
lea eax, [esi + 0x74]
push eax
lea eax, [esp + 0xc4]
push eax
push 2
mov byte [esp + 0x520], 0x26
call fcn.0040f821
mov byte [esp + 0x520], 0x1e
mov ecx, dword [esp + 0xcc]
add esp, 0x10
add ecx, 0xfffffff0
call fcn.004017c4
push str.ProductInstallDir:
lea ecx, [esp + 0x64]
call fcn.0040130b
lea eax, [esi + 0x70]
push ebx
push eax
mov byte [esp + 0x518], 0x27
lea eax, [esp + 0x68]
push eax
push 2
call fcn.0040f821
mov byte [esp + 0x520], 0x1e
mov ecx, dword [esp + 0x70]
add esp, 0x10
add ecx, 0xfffffff0
call fcn.004017c4
mov eax, str.enabled
cmp dword [esi + 0xa4], ebx
jne 0x42dca6
mov eax, str.disabled
push eax
lea ecx, [esp + 0x70]
call fcn.0040130b
push str.ProductUACPatching:
lea ecx, [esp + 0x68]
mov byte [esp + 0x514], 0x28
call fcn.0040130b
push ebx
lea eax, [esp + 0x70]
push eax
lea eax, [esp + 0x6c]
push eax
push 2
mov byte [esp + 0x520], 0x29
call fcn.0040f821
mov ecx, dword [esp + 0x74]
add esp, 0x10
add ecx, 0xfffffff0
call fcn.004017c4
mov byte [esp + 0x510], 0x1e
mov ecx, dword [esp + 0x6c]
add ecx, 0xfffffff0
call fcn.004017c4
push str.Product_initialized:
lea ecx, [esp + 0x78]
call fcn.0040130b
push ebx
lea eax, [esp + 0x18]
push eax
lea eax, [esp + 0x7c]
push eax
push 2
mov byte [esp + 0x520], 0x2a
call fcn.0040f821
mov ecx, dword [esp + 0x84]
add esp, 0x10
add ecx, 0xfffffff0
call fcn.004017c4
mov dword [esp + 0x50], 1
jmp 0x42d86c
push str.Invalid_Mode
lea ecx, [esp + 0x80]
call fcn.0040130b
push ebx
lea eax, [esp + 0x80]
push eax
push 1
mov byte [esp + 0x51c], 0x15
call fcn.0040fcf3
mov ecx, dword [esp + 0x88]
jmp 0x42d476
push str.Invalid_Check
lea ecx, [esp + 0x88]
call fcn.0040130b
push ebx
lea eax, [esp + 0x88]
push eax
push 1
mov byte [esp + 0x51c], 0x14
call fcn.0040fcf3
mov ecx, dword [esp + 0x90]
jmp 0x42d476
push str.Invalid_ManifestURL
lea ecx, [esp + 0x90]
call fcn.0040130b
push ebx
lea eax, [esp + 0x90]
push eax
push 1
mov byte [esp + 0x51c], 0x13
call fcn.0040fcf3
mov ecx, dword [esp + 0x98]
jmp 0x42d476
push str.Invalid_ProductVersion
lea ecx, [esp + 0x98]
call fcn.0040130b
push ebx
lea eax, [esp + 0x98]
push eax
push 1
mov byte [esp + 0x51c], 0x12
call fcn.0040fcf3
mov ecx, dword [esp + 0xa0]
jmp 0x42d476
push str.InstalledValidate_not_found
lea ecx, [esp + 0xa0]
call fcn.0040130b
push ebx
lea eax, [esp + 0xa0]
push eax
push 1
mov byte [esp + 0x51c], 0xe
call fcn.0040fcf3
mov ecx, dword [esp + 0xa8]
jmp 0x42d476
push str.Invalid_ProductCode
lea ecx, [esp + 0x48]
call fcn.0040130b
push ebx
lea eax, [esp + 0x48]
push eax
push 1
mov byte [esp + 0x51c], 0xc
call fcn.0040fcf3
mov ecx, dword [esp + 0x50]
jmp 0x42dea3
push str.Invalid_ProductName
lea ecx, [esp + 0x4c]
call fcn.0040130b
push ebx
lea eax, [esp + 0x4c]
push eax
push 1
mov byte [esp + 0x51c], 0xb
call fcn.0040fcf3
mov ecx, dword [esp + 0x54]
add esp, 0xc
add ecx, 0xfffffff0
call fcn.004017c4
mov ecx, dword [esp + 0x10]
add ecx, 0xfffffff0
call fcn.004017c4
or dword [esp + 0x510], 0xffffffff
mov ecx, dword [esp + 0x14]
add ecx, 0xfffffff0
call fcn.004017c4
inc dword [esp + 0x28]
cmp dword [esp + 0x50], ebx
je 0x42d0a3
jmp 0x42df13
push str.Finished_search_for_registered_products:
lea ecx, [esp + 0x4c]
call fcn.0040130b
push esi
lea eax, [esp + 0x4c]
push eax
push 2
mov dword [esp + 0x51c], 1
call fcn.0040fcf3
mov ecx, dword [esp + 0x54]
add esp, 0xc
add ecx, 0xfffffff0
call fcn.004017c4
push dword [esp + 0x54]
call dword [sym.imp.ADVAPI32.dll_RegCloseKey]
jmp 0x42df54
push str.Unable_to_query_Products
lea ecx, [esp + 0x48]
call fcn.0040130b
push ebx
lea eax, [esp + 0x48]
push eax
push 2
mov dword [esp + 0x51c], 0x2b
call fcn.0040fcf3
mov ecx, dword [esp + 0x50]
add esp, 0xc
add ecx, 0xfffffff0
call fcn.004017c4
mov eax, dword [esp + 0x50]
mov ecx, dword [esp + 0x508]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov ecx, dword [esp + 0x4f0]
xor ecx, esp
call fcn.004472d5
mov esp, ebp
pop ebp
ret 4