Function at 0x56e620
Capabilities:
Query or enumerate registry value

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x73ed08
mov eax, dword fs:[0]
push eax
sub esp, 0x74
mov eax, dword [0x857060]
xor eax, ebp
mov dword [ebp - 0x10], eax
push esi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov esi, dword [ebp + 8]
lea ecx, [ebp - 0x3c]
push 6
xor eax, eax
mov dword [ebp - 0x2c], 0
push str.10.0.0
mov dword [ebp - 0x28], 7
mov word [ebp - 0x3c], ax
call fcn.00426d40
lea ecx, [ebp - 0x20]
mov dword [ebp - 4], 0
call fcn.0065a8b0
lea edx, [ebp - 0x4c]
lea ecx, [ebp - 0x3c]
call fcn.0065ac00
mov eax, dword [ebp - 0x20]
cmp eax, dword [ebp - 0x4c]
jl 0x56e798
jg 0x56e6b1
mov eax, dword [ebp - 0x1c]
cmp eax, dword [ebp - 0x48]
jl 0x56e798
jg 0x56e6b1
mov eax, dword [ebp - 0x18]
cmp eax, dword [ebp - 0x44]
jl 0x56e798
call dword [sym.imp.SHELL32.dll_IsUserAnAdmin]
test eax, eax
jne 0x56e72b
mov dword [ebp - 0x18], eax
mov dword [ebp - 0x14], eax
lea eax, [ebp - 0x24]
push eax
lea eax, [ebp - 0x14]
mov dword [ebp - 0x24], 4
push eax
lea eax, [ebp - 0x18]
push eax
push str.EnableLUA
push str.SOFTWAREMicrosoftWindowsCurrentVersionPoliciesSystem
push reloc.OLEAUT32.dll_SysReAllocString
call dword [sym.imp.SHLWAPI.dll_SHGetValueW]
test eax, eax
jne 0x56e6f2
cmp dword [ebp - 0x14], eax
jne 0x56e72b
push str.Not_an_admin_process_and_UAC_is_disabled.
push 0x799430
push 0x799430
push str.ApplicationContext
push 0x799430
push 0x32
call fcn.0056c500
add esp, 0x18
mov ecx, esi
push 0x90
push str.You_need_to_turn_on_User_Account_Control_first._Search_for__UAC__in_your_Windows_taskbar_to_learn_how._When_the_UAC_is_on__try_to_install_again.
call fcn.00426d40
jmp 0x56e851
lea edx, [ebp - 0x18]
mov dword [ebp - 0x14], 0x40
lea ecx, [ebp - 0x14]
call fcn.0065a6f0
cmp dword [ebp - 0x14], 0x20
jne 0x56e78f
push str.you_are_running_an_incompatible_os__32bit_
push 0x799430
push 0x799430
push str.ApplicationContext
push 0x799430
push 0x32
call fcn.0056c500
lea edx, [ebp - 0x3c]
lea ecx, [ebp - 0x4c]
call fcn.0065ac50
lea eax, [ebp - 0x3c]
mov edx, str.OS_does_not_meet_the_minimum_system_requirements_for_this_installer.
push eax
lea ecx, [ebp - 0x80]
call fcn.00457400
add esp, 0x1c
push 0x32
mov byte [ebp - 4], 2
push str.__64bit__is_the_minimum_required_for_installation.
jmp 0x56e7e2
mov byte [ebp - 0x3d], 1
jmp 0x56e855
push str.you_are_running_an_incompatible_os_version
push 0x799430
push 0x799430
push str.ApplicationContext
push 0x799430
push 0x32
call fcn.0056c500
lea edx, [ebp - 0x3c]
lea ecx, [ebp - 0x4c]
call fcn.0065ac50
lea eax, [ebp - 0x3c]
mov edx, str.OS_does_not_meet_the_minimum_system_requirements_for_this_installer.
push eax
lea ecx, [ebp - 0x80]
call fcn.00457400
add esp, 0x1c
push 0x2a
mov byte [ebp - 4], 1
push str._is_the_minimum_required_for_installation.
mov ecx, eax
call fcn.0044a2e0
xor ecx, ecx
movups xmm0, xmmword [eax]
movups xmmword [ebp - 0x50], xmm0
movups xmmword [ebp - 0x68], xmm0
movq xmm0, qword [eax + 0x10]
mov dword [eax + 0x10], ecx
mov dword [eax + 0x14], 7
mov word [eax], cx
lea eax, [ebp - 0x68]
movq qword [ebp - 0x58], xmm0
movq qword [ebp - 0x1c], xmm0
cmp esi, eax
je 0x56e841
mov ecx, esi
call fcn.00426ce0
movups xmm0, xmmword [ebp - 0x50]
xor eax, eax
mov dword [ebp - 0x54], 7
mov word [ebp - 0x68], ax
movups xmmword [esi], xmm0
mov dword [ebp - 0x58], eax
movq xmm0, qword [ebp - 0x1c]
movq qword [esi + 0x10], xmm0
lea ecx, [ebp - 0x68]
call fcn.00426ce0
lea ecx, [ebp - 0x80]
call fcn.00426ce0
mov byte [ebp - 0x3d], 0
lea ecx, [ebp - 0x3c]
call fcn.00426ce0
mov al, byte [ebp - 0x3d]
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop esi
mov ecx, dword [ebp - 0x10]
xor ecx, ebp
call fcn.006d0965
mov esp, ebp
pop ebp
ret 4