Function at 0x40fa10
Capabilities:
Get installed programs

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x449507
mov eax, dword fs:[0]
push eax
push ecx
mov eax, 0x5ad4
call fcn.00434bf0
mov eax, dword [0x460cd0]
xor eax, ebp
mov dword [ebp - 0x18], eax
push ebx
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov dword [ebp - 0x10], esp
mov eax, dword [ebp + 8]
mov dword [ebp - 0x5a70], eax
mov dword [ebp - 0x5a6c], ecx
xor ebx, ebx
mov dword [ebp - 0x2234], ebx
mov byte [ebp - 0x2230], bl
mov dword [ebp - 0x222c], ebx
push 0x800
push ebx
lea edx, [ebp - 0x2228]
push edx
call fcn.00430500
add esp, 0xc
mov dword [ebp - 4], 1
lea eax, [ebp - 0x5a54]
push eax
call fcn.00416720
mov byte [ebp - 4], 2
mov dword [ebp - 0x5a80], ebx
mov dword [ebp - 0x5a7c], ebx
mov dword [ebp - 0x5a78], ebx
mov byte [ebp - 4], 3
push str.__searchMSUninstall___is_started
mov ecx, 0x466338
call fcn.0041a690
add esp, 4
mov byte [ebp - 4], 4
push 0x80000002
mov ebx, str.SOFTWAREMicrosoftWindowsCurrentVersionUninstall
lea eax, [ebp - 0x2234]
call fcn.0041ad10
test eax, eax
je 0x40fb07
push str.Registry_Init_Error
mov ecx, 0x466338
call fcn.0041a690
add esp, 4
mov dword [ebp - 0x5a94], 0
push 0x459a68
lea ecx, [ebp - 0x5a94]
push ecx
call fcn.00430c48
lea edx, [ebp - 0x5a84]
push edx
xor edx, edx
mov ecx, dword [ebp - 0x2234]
call fcn.00416500
add esp, 4
test eax, eax
je 0x40fb4f
push str.Ms_Key_Registry_Enum_Error
mov ecx, 0x466338
call fcn.0041a690
add esp, 4
mov dword [ebp - 0x5a8c], 0
push 0x459a68
lea eax, [ebp - 0x5a8c]
push eax
call fcn.00430c48
lea esi, [ebp - 0x5a64]
lea edi, [ebp - 0x5a84]
call fcn.0040a410
lea esi, [ebp - 0x5aa4]
lea edi, [ebp - 0x5a84]
call fcn.0040a430
mov esi, eax
lea edi, [ebp - 0x5a64]
call fcn.0040a3f0
test al, al
je 0x41084b
push 0x381c
push 0
lea ecx, [ebp - 0x5a54]
push ecx
call fcn.00430500
add esp, 0xc
push 0x800
push 0
lea edx, [ebp - 0x1224]
push edx
call fcn.00430500
add esp, 0xc
push 0x44eccc
mov esi, dword [ebp - 0x5a6c]
push esi
call fcn.0042f75b
add esp, 8
test eax, eax
jne 0x40fbe5
push 0x3ff
push str.UninstallString_LenovoSilent
push 0x400
lea eax, [ebp - 0x1224]
push eax
jmp 0x40fc7f
push 0x44ecdc
push esi
call fcn.0042f75b
add esp, 8
test eax, eax
jne 0x40fc03
push 0x3ff
push str.UninstallString_CCTSilent
jmp 0x40fc73
push 0x4500d0
push esi
call fcn.0042f75b
add esp, 8
test eax, eax
jne 0x40fc2d
push 0x3ff
push str.UninstallString_XeroxSilent
push 0x400
lea edx, [ebp - 0x1224]
push edx
jmp 0x40fc7f
push str.Hewlett_Packard
push esi
call fcn.0042f75b
add esp, 8
test eax, eax
je 0x40fc69
push 0x44ed04
push esi
call fcn.0042f75b
add esp, 8
test eax, eax
je 0x40fc69
push 0x3ff
push str.UninstallString_SamsungSilent
push 0x400
lea eax, [ebp - 0x1224]
push eax
jmp 0x40fc7f
push 0x3ff
push str.UninstallString_HPSilent
push 0x400
lea ecx, [ebp - 0x1224]
push ecx
call fcn.0042f011
add esp, 0x10
lea esi, [ebp - 0x5a64]
call fcn.004058f0
mov ebx, 8
cmp dword [eax + 0x18], ebx
jb 0x40fca1
mov eax, dword [eax + 4]
jmp 0x40fca4
add eax, 4
push 1
push 0x800
lea edx, [ebp - 0x4a54]
push edx
lea ecx, [ebp - 0x1224]
push ecx
mov edx, dword [ebp - 0x2234]
push edx
mov edx, eax
call fcn.0041ad70
add esp, 0x14
test eax, eax
jne 0x410835
lea eax, [ebp - 0x4a54]
lea edx, [eax + 2]
jmp 0x40fce0
mov cx, word [eax]
add eax, 2
test cx, cx
jne 0x40fce0
sub eax, edx
sar eax, 1
je 0x410835
lea eax, [ebp - 0x4a54]
call fcn.00405910
test al, al
je 0x410835
lea esi, [ebp - 0x5a64]
call fcn.004058f0
cmp dword [eax + 0x18], ebx
jb 0x40fd1d
mov eax, dword [eax + 4]
jmp 0x40fd20
add eax, 4
push 0x3ff
push eax
push 0x400
lea eax, [ebp - 0x5a54]
push eax
call fcn.0042f011
add esp, 0x10
lea esi, [ebp - 0x5a64]
call fcn.004058f0
cmp dword [eax + 0x18], ebx
jb 0x40fd4f
mov eax, dword [eax + 4]
jmp 0x40fd52
add eax, 4
push 1
push 0x800
lea ecx, [ebp - 0x5254]
push ecx
push str.DisplayName
mov edx, dword [ebp - 0x2234]
push edx
mov edx, eax
call fcn.0041ad70
add esp, 0x14
test eax, eax
je 0x40fdac
lea esi, [ebp - 0x5a64]
call fcn.004058f0
cmp dword [eax + 0x18], ebx
jb 0x40fd8f
mov eax, dword [eax + 4]
jmp 0x40fd92
add eax, 4
push 0x3ff
push eax
push 0x400
lea eax, [ebp - 0x5254]
push eax
call fcn.0042f011
add esp, 0x10
lea esi, [ebp - 0x5a64]
call fcn.004058f0
cmp dword [eax + 0x18], ebx
jb 0x40fdc1
mov edx, dword [eax + 4]
jmp 0x40fdc4
lea edx, [eax + 4]
push 1
push 0x800
lea ecx, [ebp - 0x3a54]
push ecx
push str.DisplayIcon
mov eax, dword [ebp - 0x2234]
push eax
call fcn.0041ad70
add esp, 0x14
test eax, eax
je 0x40fe00
push 0x800
push 0
lea ecx, [ebp - 0x3a54]
push ecx
call fcn.00430500
add esp, 0xc
lea edi, [ebp - 0x3a54]
lea esi, [ebp - 0x224c]
call fcn.00414560
mov dword [ebp - 0x5a88], 0
lea esi, [ebp - 0x5a64]
call fcn.004058f0
cmp dword [eax + 0x18], ebx
jb 0x40fe30
mov eax, dword [eax + 4]
jmp 0x40fe33
add eax, 4
push 4
push 4
lea edx, [ebp - 0x5a88]
push edx
push str.Description_ID
mov ecx, dword [ebp - 0x2234]
push ecx
mov edx, eax
call fcn.0041ad70
add esp, 0x14
test eax, eax
je 0x41003b
lea esi, [ebp - 0x5a64]
call fcn.004058f0
cmp dword [eax + 0x18], ebx
jb 0x40fe71
mov edx, dword [eax + 4]
jmp 0x40fe74
lea edx, [eax + 4]
lea eax, [ebp - 0x5adc]
call fcn.0040b3d0
mov byte [ebp - 4], 5
mov ebx, dword [ebp - 0x5a70]
add ebx, 0xe1f4
push ebx
lea ecx, [ebp - 0x5adc]
call fcn.00409040
cmp dword [eax + 0x18], 8
jb 0x40fea6
mov eax, dword [eax + 4]
jmp 0x40fea9
add eax, 4
lea edx, [eax + 2]
lea esp, [esp]
mov cx, word [eax]
add eax, 2
test cx, cx
jne 0x40feb0
sub eax, edx
sar eax, 1
mov edi, eax
mov byte [ebp - 4], 4
lea esi, [ebp - 0x5adc]
call fcn.0040b3a0
lea esi, [ebp - 0x5a64]
call fcn.004058f0
test edi, edi
mov edi, 8
je 0x40ff80
cmp dword [eax + 0x18], edi
jb 0x40fef2
mov edx, dword [eax + 4]
jmp 0x40fef5
lea edx, [eax + 4]
lea eax, [ebp - 0x5ac0]
call fcn.0040b3d0
mov byte [ebp - 4], 6
push ebx
lea ecx, [ebp - 0x5ac0]
call fcn.00409040
cmp dword [eax + 0x18], edi
jb 0x40ff1a
mov eax, dword [eax + 4]
jmp 0x40ff1d
add eax, 4
push 0x3ff
push eax
push 0x400
lea edx, [ebp - 0x3254]
push edx
call fcn.0042f011
add esp, 0x10
mov byte [ebp - 4], 4
lea esi, [ebp - 0x5ac0]
call fcn.0040b3a0
lea esi, [ebp - 0x5a64]
call fcn.004058f0
cmp dword [eax + 0x18], edi
jb 0x40ff6b
mov eax, dword [eax + 4]
lea ecx, [ebp - 0x3254]
push ecx
push eax
push str.__s_description_in_Default_table:__s_
jmp 0x4100ac
add eax, 4
lea ecx, [ebp - 0x3254]
push ecx
push eax
push str.__s_description_in_Default_table:__s_
jmp 0x4100ac
cmp dword [eax + 0x18], edi
jb 0x40ff8a
mov edx, dword [eax + 4]
jmp 0x40ff8d
lea edx, [eax + 4]
push 1
push 0x800
lea eax, [ebp - 0x3254]
push eax
push str.Description
mov ecx, dword [ebp - 0x2234]
push ecx
call fcn.0041ad70
add esp, 0x14
test eax, eax
je 0x410007
push 0x3ff
lea edx, [ebp - 0x5254]
push edx
push 0x400
lea eax, [ebp - 0x3254]
push eax
call fcn.0042f011
add esp, 0x10
lea esi, [ebp - 0x5a64]
call fcn.004058f0
cmp dword [eax + 0x18], edi
jb 0x40ffe8
mov eax, dword [eax + 4]
jmp 0x40ffeb
add eax, 4
lea ecx, [ebp - 0x3254]
push ecx
push eax
push str.__s_description_just_displayName_:__s_
mov ecx, 0x466338
call fcn.0041a690
jmp 0x4100bb
lea esi, [ebp - 0x5a64]
call fcn.004058f0
cmp dword [eax + 0x18], edi
jb 0x41001c
mov eax, dword [eax + 4]
jmp 0x41001f
add eax, 4
lea edx, [ebp - 0x3254]
push edx
push eax
push str.__s_description_in_registry:__s_
mov ecx, 0x466338
call fcn.0041a690
jmp 0x4100bb
lea eax, [ebp - 0x5254]
push eax
mov ecx, dword [ebp - 0x5a88]
push ecx
lea edx, [ebp - 0x5a90]
push edx
call fcn.00418df0
add esp, 0xc
mov byte [ebp - 4], 7
mov eax, dword [eax]
push 0x3ff
push eax
push 0x400
lea eax, [ebp - 0x3254]
push eax
call fcn.0042f011
add esp, 0x10
mov byte [ebp - 4], 4
lea ecx, [ebp - 0x5a90]
call fcn.004036b0
lea esi, [ebp - 0x5a64]
call fcn.004058f0
cmp dword [eax + 0x18], ebx
jb 0x41009c
mov eax, dword [eax + 4]
jmp 0x41009f
add eax, 4
lea ecx, [ebp - 0x3254]
push ecx
push eax
push str.__s_description_with_resource_id:__s_
mov ecx, 0x466338
call fcn.0041a690
mov edi, 8
add esp, 0xc
lea esi, [ebp - 0x5a64]
call fcn.004058f0
cmp dword [eax + 0x18], edi
jb 0x4100d3
mov edx, dword [eax + 4]
jmp 0x4100d6
lea edx, [eax + 4]
push 1
push 0x800
lea eax, [ebp - 0x2a54]
push eax
push str.DisplayVersion
mov ecx, dword [ebp - 0x2234]
push ecx
call fcn.0041ad70
add esp, 0x14
test eax, eax
je 0x410112
push 0x800
push 0
lea edx, [ebp - 0x2a54]
push edx
call fcn.00430500
add esp, 0xc
mov byte [ebp - 0x2254], 0
mov dword [ebp - 0x5a58], 0
mov byte [ebp - 0x5a59], 0
push 0x800
push 0
lea eax, [ebp - 0x81c]
push eax
call fcn.00430500
add esp, 0xc
push 0x3ff
push str.SOFTWARE
push 0x400
lea ecx, [ebp - 0x81c]
push ecx
call fcn.0042f011
push 0x3ff
push 0x44e838
push 0x400
lea edx, [ebp - 0x81c]
push edx
call fcn.0042f0da
mov ebx, dword [ebp - 0x5a6c]
mov eax, ebx
lea ecx, [ebp - 0x81c]
call fcn.00402960
push 0x3ff
push 0x44e838
push 0x400
lea eax, [ebp - 0x81c]
push eax
call fcn.0042f0da
add esp, 0x30
lea esi, [ebp - 0x5a64]
call fcn.004058f0
cmp dword [eax + 0x18], edi
jb 0x4101bc
mov eax, dword [eax + 4]
jmp 0x4101bf
add eax, 4
lea ecx, [ebp - 0x81c]
call fcn.00402960
push 0x3ff
push 0x44e838
push 0x400
lea ecx, [ebp - 0x81c]
push ecx
call fcn.0042f0da
push 0x3ff
push str.InstallComponents
push 0x400
lea edx, [ebp - 0x81c]
push edx
call fcn.0042f0da
add esp, 0x20
lea eax, [ebp - 0x5a58]
push eax
lea ecx, [ebp - 0x81c]
push ecx
push 0x80000002
mov edi, dword [sym.imp.ADVAPI32.dll_RegOpenKeyW]
call edi
test eax, eax
jne 0x410228
push eax
jmp 0x41051d
push 0x800
push 0
lea ecx, [ebp - 0x81c]
push ecx
call fcn.00430500
add esp, 0xc
push 0x3ff
push str.SOFTWARE
push 0x400
lea edx, [ebp - 0x81c]
push edx
call fcn.0042f011
push 0x3ff
push 0x44e838
push 0x400
lea eax, [ebp - 0x81c]
push eax
call fcn.0042f0da
mov eax, ebx
lea ecx, [ebp - 0x81c]
call fcn.00402960
push 0x3ff
push 0x44e838
push 0x400
lea ecx, [ebp - 0x81c]
push ecx
call fcn.0042f0da
add esp, 0x30
lea esi, [ebp - 0x5a64]
call fcn.004058f0
cmp dword [eax + 0x18], 8
jb 0x4102b5
mov eax, dword [eax + 4]
jmp 0x4102b8
add eax, 4
lea ecx, [ebp - 0x81c]
call fcn.00402960
push 0x3ff
push 0x44e838
push 0x400
lea edx, [ebp - 0x81c]
push edx
call fcn.0042f0da
push 0x3ff
push str.InstalledItems
push 0x400
lea eax, [ebp - 0x81c]
push eax
call fcn.0042f0da
add esp, 0x20
lea ecx, [ebp - 0x5a58]
push ecx
lea edx, [ebp - 0x81c]
push edx
push 0x80000002
call edi
test eax, eax
jne 0x41033b
push 1
lea eax, [ebp - 0x5a59]
push eax
lea ecx, [ebp - 0x5a54]
mov edx, dword [ebp - 0x5a58]
call fcn.00413210
mov ecx, dword [ebp - 0x5a58]
push ecx
jmp 0x41053c
push 0x800
push 0
lea edx, [ebp - 0x81c]
push edx
call fcn.00430500
add esp, 0xc
push 0x3ff
push str.SOFTWARE
push 0x400
lea eax, [ebp - 0x81c]
push eax
call fcn.0042f011
push 0x3ff
push 0x44e838
push 0x400
lea ecx, [ebp - 0x81c]
push ecx
call fcn.0042f0da
mov eax, ebx
lea ecx, [ebp - 0x81c]
call fcn.00402960
push 0x3ff
push 0x44e838
push 0x400
lea edx, [ebp - 0x81c]
push edx
call fcn.0042f0da
add esp, 0x30
lea esi, [ebp - 0x5a64]
call fcn.004058f0
cmp dword [eax + 0x18], 8
jb 0x4103c8
mov eax, dword [eax + 4]
jmp 0x4103cb
add eax, 4
lea ecx, [ebp - 0x81c]
call fcn.00402960
push 0x3ff
push 0x44e838
push 0x400
lea eax, [ebp - 0x81c]
push eax
call fcn.0042f0da
push 0x3ff
push str.SEINst_InstallComponents
push 0x400
lea ecx, [ebp - 0x81c]
push ecx
call fcn.0042f0da
add esp, 0x20
lea edx, [ebp - 0x5a58]
push edx
lea eax, [ebp - 0x81c]
push eax
push 0x80000002
call edi
test eax, eax
jne 0x41044e
push 2
lea ecx, [ebp - 0x5a59]
push ecx
lea ecx, [ebp - 0x5a54]
mov edx, dword [ebp - 0x5a58]
call fcn.00413210
mov edx, dword [ebp - 0x5a58]
push edx
jmp 0x41053c
push 0x800
push 0
lea eax, [ebp - 0x81c]
push eax
call fcn.00430500
add esp, 0xc
mov ecx, dword [ebp - 0x5a70]
mov eax, dword [ecx + 0xe204]
push 0x3ff
push eax
push 0x400
lea edx, [ebp - 0x81c]
push edx
call fcn.0042f011
push 0x3ff
push 0x44e838
push 0x400
lea eax, [ebp - 0x81c]
push eax
call fcn.0042f0da
add esp, 0x20
lea esi, [ebp - 0x5a64]
call fcn.004058f0
cmp dword [eax + 0x18], 8
jb 0x4104bb
mov eax, dword [eax + 4]
jmp 0x4104be
add eax, 4
lea ecx, [ebp - 0x81c]
call fcn.00402960
push 0x3ff
push 0x44e838
push 0x400
lea ecx, [ebp - 0x81c]
push ecx
call fcn.0042f0da
push 0x3ff
push str.SEINst_InstallComponents
push 0x400
lea edx, [ebp - 0x81c]
push edx
call fcn.0042f0da
add esp, 0x20
lea eax, [ebp - 0x5a58]
push eax
lea ecx, [ebp - 0x81c]
push ecx
push 0x80000002
call edi
test eax, eax
jne 0x41054c
push 2
lea edx, [ebp - 0x5a59]
push edx
lea ecx, [ebp - 0x5a54]
mov edx, dword [ebp - 0x5a58]
call fcn.00413210
mov eax, dword [ebp - 0x5a58]
push eax
call dword [sym.imp.ADVAPI32.dll_RegCloseKey]
mov dword [ebp - 0x5a58], 0
lea esi, [ebp - 0x5a64]
call fcn.004058f0
cmp dword [eax + 0x18], 8
jb 0x410562
mov eax, dword [eax + 4]
jmp 0x410565
add eax, 4
lea ebx, [ebp - 0x5a54]
mov esi, eax
mov edi, dword [ebp - 0x5a70]
call fcn.00413e60
cmp dword [ebp - 0x2250], 1
jne 0x4107ec
push 0x800
push 0
lea ecx, [ebp - 0x81c]
push ecx
call fcn.00430500
add esp, 0xc
push 0x3ff
push str.SOFTWARE
push 0x400
lea edx, [ebp - 0x81c]
push edx
call fcn.0042f011
push 0x3ff
push 0x44e838
push 0x400
lea eax, [ebp - 0x81c]
push eax
call fcn.0042f0da
mov eax, dword [ebp - 0x5a6c]
lea ecx, [ebp - 0x81c]
call fcn.00402960
push 0x3ff
push 0x44e838
push 0x400
lea ecx, [ebp - 0x81c]
push ecx
call fcn.0042f0da
add esp, 0x30
lea esi, [ebp - 0x5a64]
call fcn.004058f0
mov ebx, 8
cmp dword [eax + 0x18], ebx
jb 0x41061a
mov eax, dword [eax + 4]
jmp 0x41061d
add eax, 4
lea ecx, [ebp - 0x81c]
call fcn.00402960
lea edx, [ebp - 0x5a58]
push edx
lea eax, [ebp - 0x81c]
push eax
push 0x80000002
call dword [sym.imp.ADVAPI32.dll_RegOpenKeyW]
test eax, eax
jne 0x4107ec
push 1
push 0x800
lea ecx, [ebp - 0x4254]
push ecx
push str.Dest_Dir
mov edx, dword [ebp - 0x5a58]
push edx
mov edx, str.InstallSetupProgram
call fcn.0041ad70
add esp, 0x14
test eax, eax
jne 0x410718
lea ecx, [ebp - 0x5a68]
call fcn.00403710
mov byte [ebp - 4], bl
lea eax, [ebp - 0x4254]
push eax
lea ecx, [ebp - 0x5a68]
call fcn.00403610
lea ecx, [ebp - 0x1a24]
call fcn.00414670
mov ecx, str._PROGRAM_FILES_DIR_
lea esi, [ebp - 0x5a68]
call fcn.00402590
cmp eax, 0xffffffff
jle 0x4106cc
lea ecx, [ebp - 0x1a24]
push ecx
push str._PROGRAM_FILES_DIR_
mov edx, esi
push edx
call fcn.00402370
push 0x3ff
mov eax, dword [ebp - 0x5a68]
push eax
push 0x400
lea ecx, [ebp - 0x4254]
push ecx
call fcn.0042f011
push 0x3ff
push str.Setup
push 0x400
lea edx, [ebp - 0x4254]
push edx
call fcn.0042f0da
add esp, 0x20
mov byte [ebp - 4], 4
lea ecx, [ebp - 0x5a68]
call fcn.004036b0
jmp 0x410740
push 0x800
push 0
lea eax, [ebp - 0x4254]
push eax
call fcn.00430500
add esp, 0xc
push str.data.szunInstCmdDir_is_empty
mov ecx, 0x466338
call fcn.0041a690
add esp, 4
lea eax, [ebp - 0x4254]
lea edx, [eax + 2]
lea esp, [esp]
mov cx, word [eax]
add eax, 2
test cx, cx
jne 0x410750
sub eax, edx
sar eax, 1
je 0x4107cd
push 0x103
lea ecx, [ebp - 0x4254]
push ecx
push 0x104
lea edx, [ebp - 0xa24]
push edx
call fcn.0042f011
push 0x103
push str.Setup_binMainInst.exe__s_D
push 0x104
lea eax, [ebp - 0xa24]
push eax
call fcn.0042f0da
add esp, 0x20
lea eax, [ebp - 0xa24]
call fcn.00405910
test al, al
je 0x4107df
push 0x3ff
lea ecx, [ebp - 0xa24]
push ecx
push 0x400
lea edx, [ebp - 0x4a54]
push edx
call fcn.0042f011
add esp, 0x10
jmp 0x4107df
push str.__s__dont_have_uninstall_command...
mov ecx, 0x466338
call fcn.0041a690
add esp, 4
mov eax, dword [ebp - 0x5a58]
push eax
call dword [sym.imp.ADVAPI32.dll_RegCloseKey]
lea eax, [ebp - 0x4a54]
call fcn.00405910
test al, al
je 0x41081c
lea eax, [ebp - 0x5a54]
call fcn.0040f770
lea edi, [ebp - 0x5a9c]
lea esi, [ebp - 0x5a64]
call fcn.004166f0
jmp 0x40fb60
lea ecx, [ebp - 0x4a54]
push ecx
push str.__s__is_invalid_command...
mov ecx, 0x466338
call fcn.0041a690
add esp, 8
lea edi, [ebp - 0x5a9c]
lea esi, [ebp - 0x5a64]
call fcn.004166f0
jmp 0x40fb60
mov dword [ebp - 4], 3
mov byte [ebp - 4], 2
mov eax, dword [ebp - 0x5a80]
xor ebx, ebx
cmp eax, ebx
je 0x410886
mov edx, dword [ebp - 0x5a74]
push edx
mov edi, dword [ebp - 0x5a7c]
call fcn.00409db0
add esp, 4
mov eax, dword [ebp - 0x5a80]
push eax
call fcn.0041e7a3
add esp, 4
mov dword [ebp - 0x5a80], ebx
mov dword [ebp - 0x5a7c], ebx
mov dword [ebp - 0x5a78], ebx
mov byte [ebp - 4], 1
lea ecx, [ebp - 0x5a54]
push ecx
call fcn.004099e0
mov dword [ebp - 4], 0xffffffff
cmp byte [ebp - 0x2230], bl
je 0x4108c8
mov eax, dword [ebp - 0x2234]
cmp eax, ebx
je 0x4108c8
push eax
call dword [sym.imp.ADVAPI32.dll_RegCloseKey]
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 0x18]
xor ecx, ebp
call fcn.0042f002
mov esp, ebp
pop ebp
ret 4