Function at 0x422817
Capabilities:
Get session user name
Set registry value

Disassembly:
push 0x2cc
mov eax, 0x43c4b2
call fcn.004380ee
mov edi, ecx
mov eax, dword [edi]
lea ecx, [ebp - 0x228]
push ecx
mov ecx, edi
call dword [eax + 0xe0]
xor ecx, ecx
push 7
pop ebx
mov dword [ebp - 4], ecx
cmp dword [eax + 0x14], ebx
jbe 0x422848
mov eax, dword [eax]
xor edx, edx
cmp byte [edi + 0x4d], cl
push ecx
push ecx
sete dl
lea ecx, [ebp - 0x2d8]
push eax
add edx, 0x80000001
call fcn.0041c3df
add esp, 0xc
lea ecx, [ebp - 0x228]
mov byte [ebp - 4], 2
call fcn.00402ab8
mov eax, dword [edi]
lea ecx, [ebp - 0x288]
push ecx
mov ecx, edi
call dword [eax + 0xdc]
mov esi, eax
mov byte [ebp - 4], 3
lea eax, [ebp - 0x2a0]
mov edx, dword [edi]
mov ecx, edi
push eax
call dword [edx + 0xa0]
mov ecx, eax
mov byte [ebp - 4], 4
cmp dword [esi + 0x14], ebx
jbe 0x4228ab
mov esi, dword [esi]
cmp dword [ecx + 0x14], ebx
jbe 0x4228b2
mov ecx, dword [ecx]
cmp byte [edi + 0x4d], 0
mov edx, str.__alluser
mov eax, 0x43ff90
cmove eax, edx
push eax
push esi
push ecx
lea eax, [ebp - 0x270]
push str.__s_s___uninstall_s
push eax
call fcn.0040f226
add esp, 0x14
lea ecx, [ebp - 0x2a0]
call fcn.00402ab8
lea ecx, [ebp - 0x288]
mov byte [ebp - 4], bl
call fcn.00402ab8
cmp dword [ebp - 0x25c], ebx
lea eax, [ebp - 0x270]
push 2
cmova eax, dword [ebp - 0x270]
lea ecx, [ebp - 0x2d8]
push eax
push str.UninstallString
call fcn.00405a63
mov edx, str.Failed_to_set_UninstallString_key
mov ecx, eax
call fcn.0041c232
xor esi, esi
lea ecx, [ebp - 0x2d8]
inc esi
push esi
push 0x44941c
push str.Publisher
call fcn.00405a63
mov edx, str.Failed_to_set_Publisher_key
mov ecx, eax
call fcn.0041c232
push esi
push str.http:__projex.zip
push str.URLInfoAbout
lea ecx, [ebp - 0x2d8]
call fcn.00405a63
mov edx, str.Failed_to_set_URLInfoAbout_key
mov ecx, eax
call fcn.0041c232
lea edx, [edi + 0xd4]
lea ecx, [ebp - 0x228]
call fcn.0040eeb3
mov byte [ebp - 4], 8
cmp dword [eax + 0x14], ebx
jbe 0x422988
mov eax, dword [eax]
push esi
push eax
push str.Comments
lea ecx, [ebp - 0x2d8]
call fcn.00405a63
mov edx, str.Failed_to_set_Comments_key
mov ecx, eax
call fcn.0041c232
lea ecx, [ebp - 0x228]
mov byte [ebp - 4], bl
call fcn.00402ab8
mov eax, dword [edi]
lea ecx, [ebp - 0x228]
push ecx
mov ecx, edi
call dword [eax + 0xa0]
mov byte [ebp - 4], 9
cmp dword [eax + 0x14], ebx
jbe 0x4229d0
mov eax, dword [eax]
push esi
push eax
push str.InstallLocation
lea ecx, [ebp - 0x2d8]
call fcn.00405a63
mov edx, str.Failed_to_set_InstallLocation_key
mov ecx, eax
call fcn.0041c232
lea ecx, [ebp - 0x228]
mov byte [ebp - 4], bl
call fcn.00402ab8
push 4
lea eax, [ebp - 0x2cc]
mov dword [ebp - 0x2cc], esi
mov esi, dword [sym.imp.ADVAPI32.dll_RegSetValueExW]
push eax
push 4
push 0
push str.NoModify
push dword [ebp - 0x2d8]
call esi
mov edx, str.Failed_to_set_NoModify_key
mov ecx, eax
call fcn.0041c232
push 4
lea eax, [ebp - 0x2cc]
mov dword [ebp - 0x2cc], 1
push eax
push 4
push 0
push str.NoRepair
push dword [ebp - 0x2d8]
call esi
mov edx, str.Failed_to_set_NoRepair_key
mov ecx, eax
call fcn.0041c232
mov eax, dword [edi]
lea ecx, [ebp - 0x2b8]
push ecx
mov ecx, edi
call dword [eax + 0xdc]
mov esi, eax
mov byte [ebp - 4], 0xa
lea eax, [ebp - 0x228]
mov edx, dword [edi]
mov ecx, edi
push eax
call dword [edx + 0xa0]
mov byte [ebp - 4], 0xb
cmp dword [esi + 0x14], ebx
jbe 0x422a91
mov esi, dword [esi]
cmp dword [eax + 0x14], ebx
jbe 0x422a98
mov eax, dword [eax]
push esi
push eax
lea eax, [ebp - 0x258]
push str._s_s_0
push eax
call fcn.0040f226
add esp, 0x10
lea ecx, [ebp - 0x228]
call fcn.00402ab8
lea ecx, [ebp - 0x2b8]
mov byte [ebp - 4], 0xe
call fcn.00402ab8
cmp dword [ebp - 0x244], ebx
lea eax, [ebp - 0x258]
push 1
cmova eax, dword [ebp - 0x258]
lea ecx, [ebp - 0x2d8]
push eax
push str.DisplayIcon
call fcn.00405a63
mov edx, str.Failed_to_set_IconPath_key
mov ecx, eax
call fcn.0041c232
lea eax, [ebp - 0x2c8]
push eax
call dword [sym.imp.KERNEL32.dll_GetLocalTime]
movzx eax, word [ebp - 0x2c2]
push eax
movzx eax, word [ebp - 0x2c6]
push eax
movzx eax, word [ebp - 0x2c8]
push eax
lea eax, [ebp - 0x288]
push str._04d_02d_02d
push eax
call fcn.0040f226
add esp, 0x14
mov byte [ebp - 4], 0xf
cmp dword [eax + 0x14], ebx
jbe 0x422b3e
mov eax, dword [eax]
push 1
push eax
push str.InstallDate
lea ecx, [ebp - 0x2d8]
call fcn.00405a63
mov edx, str.Failed_to_set_InstallDate_key
mov ecx, eax
call fcn.0041c232
lea ecx, [ebp - 0x288]
mov byte [ebp - 4], 0xe
call fcn.00402ab8
push str.ProjectX_Player
lea ecx, [ebp - 0x240]
call fcn.0040bc27
mov byte [ebp - 4], 0x10
cmp byte [edi + 0x4d], 0
je 0x422bcf
xor eax, eax
mov dword [ebp - 0x2cc], 0x100
mov word [ebp - 0x210], ax
lea eax, [ebp - 0x2cc]
push eax
lea eax, [ebp - 0x210]
push eax
call dword [sym.imp.ADVAPI32.dll_GetUserNameW]
push str._for
lea ecx, [ebp - 0x240]
call fcn.0041d838
lea eax, [ebp - 0x210]
push eax
lea ecx, [ebp - 0x240]
call fcn.0041d838
cmp dword [ebp - 0x22c], ebx
lea eax, [ebp - 0x240]
push 1
cmova eax, dword [ebp - 0x240]
lea ecx, [ebp - 0x2d8]
push eax
push str.DisplayName
call fcn.00405a63
mov edx, str.Failed_to_set_DisplayName_key
mov ecx, eax
call fcn.0041c232
lea ecx, [ebp - 0x240]
call fcn.00402ab8
lea ecx, [ebp - 0x258]
call fcn.00402ab8
lea ecx, [ebp - 0x270]
call fcn.00402ab8
lea ecx, [ebp - 0x2d8]
call fcn.004058ae
call fcn.0043809d
ret 4