Function at 0x40e260
Capabilities:
Query or enumerate registry value

Disassembly:
push ebp
mov ebp, esp
sub esp, 0xd4
mov dword [ebp - 0xd4], ecx
push 0
mov eax, dword [ebp + 8]
push eax
mov ecx, dword [ebp - 0xd4]
call fcn.0040e500
lea ecx, [ebp - 4]
call dword [sym.imp.DENKIPM.dll_Ordinal_1255]
lea ecx, [ebp - 4]
call dword [sym.imp.DENKIPM.dll_Ordinal_1154]
jmp 0x40e29d
lea ecx, [ebp - 4]
call dword [sym.imp.DENKIPM.dll_Ordinal_1156]
lea ecx, [ebp - 4]
call dword [sym.imp.DENKIPM.dll_Ordinal_1155]
movzx ecx, al
test ecx, ecx
jne 0x40e460
lea ecx, [ebp - 4]
call dword [sym.imp.DENKIPM.dll_Ordinal_1259]
mov dword [ebp - 0x14], eax
mov ecx, dword [ebp - 0x14]
call dword [sym.imp.DENKIPM.dll_Ordinal_1168]
movzx edx, al
test edx, edx
jne 0x40e2cf
jmp 0x40e294
mov eax, dword [ebp - 0x14]
push eax
mov ecx, dword [ebp + 8]
call dword [sym.imp.DENKIPM.dll_Ordinal_1277]
movzx ecx, al
test ecx, ecx
jne 0x40e2e5
jmp 0x40e294
mov edx, dword [ebp + 8]
push edx
mov ecx, dword [ebp - 0x14]
call dword [sym.imp.DENKIPM.dll_Ordinal_1278]
mov dword [ebp - 8], eax
cmp dword [ebp - 8], 4
jle 0x40e301
cmp dword [ebp - 8], 6
jle 0x40e319
mov eax, dword [ebp - 0x14]
push eax
call fcn.00412b00
add esp, 4
movzx ecx, al
test ecx, ecx
jne 0x40e319
jmp 0x40e294
mov byte [ebp - 9], 0
lea edx, [ebp - 0x10]
push edx
push 1
push 0x42b71c
mov ecx, dword [ebp - 0x14]
call dword [sym.imp.DENKIPM.dll_Ordinal_1478]
test eax, eax
je 0x40e440
lea eax, [ebp - 0x18]
push eax
push 1
push 0x42b71c
mov ecx, dword [ebp + 8]
call dword [sym.imp.DENKIPM.dll_Ordinal_1478]
test eax, eax
jne 0x40e431
mov dword [ebp - 0x1c], 0x32
lea ecx, [ebp - 0x1c]
push ecx
lea edx, [ebp - 0x50]
push edx
push 0
push 0
push str.ProductCode
mov eax, dword [ebp - 0x18]
push eax
call dword [sym.imp.ADVAPI32.dll_RegQueryValueExA]
test eax, eax
jne 0x40e427
mov dword [ebp - 0xd0], 0
mov ecx, dword [ebp - 0x14]
call dword [sym.imp.DENKIPM.dll_Ordinal_1169]
push eax
lea ecx, [ebp - 0xcc]
push ecx
call dword [sym.imp.KERNEL32.dll_lstrcpyA]
lea edx, [ebp - 0xcc]
mov dword [ebp - 0x7c], edx
mov eax, dword [ebp - 0x7c]
movsx ecx, byte [eax]
test ecx, ecx
jne 0x40e3b9
cmp dword [ebp - 0x7c], 0
jne 0x40e3d9
mov edx, dword [ebp - 0x7c]
movsx eax, byte [edx]
cmp eax, 0x2d
jne 0x40e3ca
mov ecx, dword [ebp - 0x7c]
mov byte [ecx], 0x5f
mov edx, dword [ebp - 0x7c]
push edx
call dword [sym.imp.USER32.dll_CharNextA]
mov dword [ebp - 0x7c], eax
jmp 0x40e3a9
lea eax, [ebp - 0x78]
push eax
lea ecx, [ebp - 0xa4]
push ecx
mov edx, dword [ebp - 0xd0]
push edx
lea eax, [ebp - 0x50]
push eax
call sub.msi.dll_MsiEvaluateConditionA
test eax, eax
jne 0x40e427
lea ecx, [ebp - 0xa4]
push ecx
lea edx, [ebp - 0xcc]
push edx
call dword [sym.imp.KERNEL32.dll_lstrcmpiA]
test eax, eax
jne 0x40e416
mov byte [ebp - 9], 1
jmp 0x40e427
mov eax, dword [ebp - 0xd0]
add eax, 1
mov dword [ebp - 0xd0], eax
jmp 0x40e3d9
mov ecx, dword [ebp - 0x18]
push ecx
call dword [sym.imp.ADVAPI32.dll_RegCloseKey]
movzx edx, byte [ebp - 9]
test edx, edx
jne 0x40e43e
jmp 0x40e294
jmp 0x40e44a
mov eax, dword [ebp - 0x10]
push eax
call dword [sym.imp.ADVAPI32.dll_RegCloseKey]
push 1
mov ecx, dword [ebp - 0x14]
push ecx
mov ecx, dword [ebp - 0xd4]
call fcn.0040e500
jmp 0x40e294
mov edx, dword [ebp - 0xd4]
mov dword [edx + 0x14], 0xa
mov eax, dword [ebp - 0xd4]
mov dword [eax + 0x18], 0x7d
mov ecx, dword [ebp - 0xd4]
mov dword [ecx + 0x1c], 0x96
mov edx, dword [ebp - 0xd4]
mov dword [edx + 0x20], 0xaf
mov eax, dword [ebp - 0xd4]
mov dword [eax + 0x24], 0xc8
mov ecx, dword [ebp - 0xd4]
add ecx, 0x14
push ecx
push 5
push 0xcb
push 0x41e
mov edx, dword [ebp - 0xd4]
mov eax, dword [edx + 4]
push eax
call dword [sym.imp.USER32.dll_SendDlgItemMessageA]
push 1
push 0
push 0x41e
mov ecx, dword [ebp - 0xd4]
mov edx, dword [ecx + 4]
push edx
call dword [sym.imp.USER32.dll_GetDlgItem]
push eax
call dword [sym.imp.USER32.dll_InvalidateRect]
lea ecx, [ebp - 4]
call dword [sym.imp.DENKIPM.dll_Ordinal_1257]
mov esp, ebp
pop ebp
ret 4