Function at 0xc240e0
Capabilities:
Check if file exists
Read .ini file
Set registry value

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0xc494dd
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
sub esp, 0xfa4
mov eax, dword [0xc57104]
xor eax, ebp
mov dword [ebp - 0x10], eax
mov dword [ebp - 0xf98], ecx
mov ecx, dword [ebp - 0xf98]
call fcn.00c24c40
mov eax, dword [ebp - 0xf98]
add eax, 0x64
push eax
mov ecx, dword [ebp - 0xf98]
add ecx, 0xf10
call fcn.00c1e800
test eax, eax
jne 0xc2427e
mov ecx, dword [ebp - 0xf98]
call fcn.00c24c40
lea ecx, [ebp - 0xedd]
mov dword [ebp - 0xedc], ecx
push 0
push 0
lea ecx, [ebp - 0x434]
call fcn.00c01f20
mov dword [ebp - 4], 0
mov edx, dword [ebp - 0xf98]
add edx, 0x9c
mov dword [ebp - 0xee4], edx
mov eax, dword [ebp - 0xee4]
cmp dword [eax + 0x18], 0x10
jb 0xc24198
mov ecx, dword [ebp - 0xee4]
mov edx, dword [ecx + 4]
mov dword [ebp - 0xf9c], edx
jmp 0xc241a7
mov eax, dword [ebp - 0xee4]
add eax, 4
mov dword [ebp - 0xf9c], eax
mov ecx, dword [ebp - 0xf9c]
push ecx
mov edx, dword [ebp - 0xf98]
add edx, 0x310
push edx
push 0xc4bac4
lea eax, [ebp - 0x834]
push eax
call fcn.00c33974
add esp, 0x10
lea ecx, [ebp - 0x834]
push ecx
call fcn.00c332d0
add esp, 4
mov dword [ebp - 0xee8], eax
mov edx, dword [ebp - 0xee8]
push edx
lea eax, [ebp - 0x834]
push eax
lea ecx, [ebp - 0x434]
call fcn.00c01c50
mov dword [ebp - 0xe8c], 0
push 1
lea ecx, [ebp - 0x434]
push ecx
lea edx, [ebp - 0xe8c]
push edx
mov ecx, dword [ebp - 0xf98]
add ecx, 0xf10
call fcn.00c1ed20
mov eax, dword [ebp - 0xf98]
add eax, 0x64
push eax
mov ecx, dword [ebp - 0xf98]
add ecx, 0xf10
call fcn.00c1e800
mov ecx, dword [ebp - 0xf98]
mov dword [ecx + 0x1094], 1
mov dword [ebp - 0xe90], 2
mov dword [ebp - 4], 0xffffffff
push 0
push 1
lea ecx, [ebp - 0x434]
call fcn.00c01f20
mov eax, dword [ebp - 0xe90]
jmp 0xc24c22
mov edx, dword [ebp - 0xf98]
add edx, 0x9c
mov dword [ebp - 0xeec], edx
mov eax, dword [ebp - 0xeec]
cmp dword [eax + 0x18], 0x10
jb 0xc242ad
mov ecx, dword [ebp - 0xeec]
mov edx, dword [ecx + 4]
mov dword [ebp - 0xfa0], edx
jmp 0xc242bc
mov eax, dword [ebp - 0xeec]
add eax, 4
mov dword [ebp - 0xfa0], eax
mov ecx, dword [ebp - 0xfa0]
push ecx
mov edx, dword [ebp - 0xf98]
add edx, 0x310
push edx
push 0xc4bac4
lea eax, [ebp - 0x414]
push eax
call fcn.00c33974
add esp, 0x10
lea ecx, [ebp - 0x414]
push ecx
lea ecx, [ebp - 0xeac]
call fcn.00c01920
mov dword [ebp - 4], 1
push 1
lea edx, [ebp - 0xeac]
push edx
mov eax, dword [ebp - 0xf98]
add eax, 0xf10
push eax
mov ecx, dword [ebp - 0xf98]
add ecx, 0xf10
call fcn.00c1ed20
mov dword [ebp - 4], 0xffffffff
push 0
push 1
lea ecx, [ebp - 0xeac]
call fcn.00c01f20
mov ecx, dword [ebp - 0xf98]
add ecx, 0x64
push ecx
mov ecx, dword [ebp - 0xf98]
add ecx, 0xf10
call fcn.00c1e800
lea edx, [ebp - 0x414]
push edx
call dword [sym.imp.SHLWAPI.dll_PathFileExistsA]
test eax, eax
jne 0xc24510
mov dword [ebp - 0x940], 0
mov eax, dword [ebp - 0xf98]
add eax, 0x11e0
mov dword [ebp - 0xf00], eax
mov ecx, dword [ebp - 0xf00]
cmp dword [ecx + 0x18], 0x10
jb 0xc243a1
mov edx, dword [ebp - 0xf00]
mov eax, dword [edx + 4]
mov dword [ebp - 0xfa4], eax
jmp 0xc243b0
mov ecx, dword [ebp - 0xf00]
add ecx, 4
mov dword [ebp - 0xfa4], ecx
mov edx, dword [ebp - 0xfa4]
push edx
push str.software_neowizpmang
push str._s_s
lea eax, [ebp - 0x93c]
push eax
call dword [sym.imp.USER32.dll_wsprintfA]
add esp, 0x10
mov dword [ebp - 0xf04], 0
lea ecx, [ebp - 0xf04]
push ecx
push 0xf003f
push 0
lea edx, [ebp - 0x93c]
push edx
push bind
call dword [sym.imp.ADVAPI32.dll_RegOpenKeyExA]
mov dword [ebp - 0xf08], eax
cmp dword [ebp - 0xf08], 0
jne 0xc24452
mov dword [ebp - 0xf0c], 0
cmp dword [ebp - 0x940], 0
je 0xc2443a
mov eax, dword [ebp - 0x940]
push eax
call dword [sym.imp.ADVAPI32.dll_RegCloseKey]
mov dword [ebp - 0xf0c], eax
mov dword [ebp - 0x940], 0
mov ecx, dword [ebp - 0xf0c]
mov dword [ebp - 0xf08], ecx
mov edx, dword [ebp - 0xf04]
mov dword [ebp - 0x940], edx
mov dword [ebp - 0xf10], 0
push 4
lea eax, [ebp - 0xf10]
push eax
push 4
push 0
push str.Version
mov ecx, dword [ebp - 0x940]
push ecx
call dword [sym.imp.ADVAPI32.dll_RegSetValueExA]
mov dword [ebp - 0xf14], 0
cmp dword [ebp - 0x940], 0
je 0xc244ab
mov edx, dword [ebp - 0x940]
push edx
call dword [sym.imp.ADVAPI32.dll_RegCloseKey]
mov dword [ebp - 0xf14], eax
mov dword [ebp - 0x940], 0
mov eax, dword [ebp - 0xf98]
mov dword [eax + 0xf10], 0
mov ecx, dword [ebp - 0xf98]
mov dword [ecx + 0x1094], 1
mov dword [ebp - 0xeb0], 2
mov dword [ebp - 0xf18], 0
cmp dword [ebp - 0x940], 0
je 0xc24505
mov edx, dword [ebp - 0x940]
push edx
call dword [sym.imp.ADVAPI32.dll_RegCloseKey]
mov dword [ebp - 0xf18], eax
mov dword [ebp - 0x940], 0
mov eax, dword [ebp - 0xeb0]
jmp 0xc24c22
mov dword [ebp - 0x418], 0
mov dword [ebp - 4], 2
mov dword [ebp - 0xf1c], 0
lea eax, [ebp - 0xf1c]
push eax
push 0x2001f
push 0
push str.SoftwareNeoWizPMangInstall
push bind
call dword [sym.imp.ADVAPI32.dll_RegOpenKeyExA]
mov dword [ebp - 0xf20], eax
cmp dword [ebp - 0xf20], 0
jne 0xc245a0
mov dword [ebp - 0xf24], 0
cmp dword [ebp - 0x418], 0
je 0xc24588
mov ecx, dword [ebp - 0x418]
push ecx
call dword [sym.imp.ADVAPI32.dll_RegCloseKey]
mov dword [ebp - 0xf24], eax
mov dword [ebp - 0x418], 0
mov edx, dword [ebp - 0xf24]
mov dword [ebp - 0xf20], edx
mov eax, dword [ebp - 0xf1c]
mov dword [ebp - 0x418], eax
cmp dword [ebp - 0xf20], 0
jne 0xc249b6
mov dword [ebp - 0xb5c], 0x104
lea ecx, [ebp - 0xb5c]
push ecx
push str.root
lea edx, [ebp - 0xb54]
push edx
lea ecx, [ebp - 0x418]
call fcn.00c1ff80
mov eax, dword [ebp - 0xf98]
add eax, 0x1250
push eax
push 0x104
lea ecx, [ebp - 0xc6c]
push ecx
push 0xc4b60c
push str.Files
push str.NECESSARY
call dword [sym.imp.KERNEL32.dll_GetPrivateProfileStringA]
mov edx, dword [ebp - 0xf98]
add edx, 0x1250
push edx
push 0x104
lea eax, [ebp - 0xa4c]
push eax
push 0xc4b60c
push str.InstallPath
push str.PATH
call dword [sym.imp.KERNEL32.dll_GetPrivateProfileStringA]
lea ecx, [ebp - 0xc6c]
push ecx
lea ecx, [ebp - 0xd78]
call fcn.00c289a0
mov byte [ebp - 4], 3
mov edx, dword [0xc5b06c]
mov ecx, 0xc5b06c
call dword [edx + 0xc]
mov dword [ebp - 0xf38], eax
mov eax, dword [ebp - 0xf38]
add eax, 0x10
mov dword [ebp - 0xb58], eax
mov byte [ebp - 4], 4
mov dword [ebp - 0xb60], 0
lea ecx, [ebp - 0xb60]
push ecx
push 0xc4ca24
lea edx, [ebp - 0xeb4]
push edx
lea ecx, [ebp - 0xd78]
call fcn.00c28a70
mov dword [ebp - 0xfa8], eax
mov eax, dword [ebp - 0xfa8]
mov dword [ebp - 0xf3c], eax
mov byte [ebp - 4], 5
mov ecx, dword [ebp - 0xf3c]
push ecx
lea ecx, [ebp - 0xb58]
call fcn.00c28c40
mov byte [ebp - 4], 4
lea ecx, [ebp - 0xeb4]
call fcn.00c28c00
mov edx, dword [ebp - 0xb58]
mov dword [ebp - 0xf44], edx
push 0xc4b60c
mov eax, dword [ebp - 0xf44]
push eax
call fcn.00c344dd
add esp, 8
neg eax
sbb eax, eax
neg eax
movzx ecx, al
test ecx, ecx
je 0xc24998
mov edx, dword [ebp - 0xb58]
push edx
lea eax, [ebp - 0xa4c]
push eax
lea ecx, [ebp - 0xb54]
push ecx
push str._s_s_s
lea edx, [ebp - 0xd74]
push edx
call dword [sym.imp.USER32.dll_wsprintfA]
add esp, 0x14
push 0
lea eax, [ebp - 0xd74]
push eax
call fcn.00c34a85
add esp, 8
cmp eax, 0xffffffff
jne 0xc2493e
mov dword [ebp - 0xe88], 0
mov ecx, dword [ebp - 0xf98]
add ecx, 0x11e0
mov dword [ebp - 0xf48], ecx
mov edx, dword [ebp - 0xf48]
cmp dword [edx + 0x18], 0x10
jb 0xc2477a
mov eax, dword [ebp - 0xf48]
mov ecx, dword [eax + 4]
mov dword [ebp - 0xfac], ecx
jmp 0xc24789
mov edx, dword [ebp - 0xf48]
add edx, 4
mov dword [ebp - 0xfac], edx
mov eax, dword [ebp - 0xfac]
push eax
push str.software_neowizpmang
push str._s_s
lea ecx, [ebp - 0xe84]
push ecx
call dword [sym.imp.USER32.dll_wsprintfA]
add esp, 0x10
mov dword [ebp - 0xf4c], 0
lea edx, [ebp - 0xf4c]
push edx
push 0xf003f
push 0
lea eax, [ebp - 0xe84]
push eax
push bind
call dword [sym.imp.ADVAPI32.dll_RegOpenKeyExA]
mov dword [ebp - 0xf50], eax
cmp dword [ebp - 0xf50], 0
jne 0xc2482b
mov dword [ebp - 0xf54], 0
cmp dword [ebp - 0xe88], 0
je 0xc24813
mov ecx, dword [ebp - 0xe88]
push ecx
call dword [sym.imp.ADVAPI32.dll_RegCloseKey]
mov dword [ebp - 0xf54], eax
mov dword [ebp - 0xe88], 0
mov edx, dword [ebp - 0xf54]
mov dword [ebp - 0xf50], edx
mov eax, dword [ebp - 0xf4c]
mov dword [ebp - 0xe88], eax
mov dword [ebp - 0xf58], 0
push 4
lea ecx, [ebp - 0xf58]
push ecx
push 4
push 0
push str.Version
mov edx, dword [ebp - 0xe88]
push edx
call dword [sym.imp.ADVAPI32.dll_RegSetValueExA]
mov dword [ebp - 0xf5c], 0
cmp dword [ebp - 0xe88], 0
je 0xc24884
mov eax, dword [ebp - 0xe88]
push eax
call dword [sym.imp.ADVAPI32.dll_RegCloseKey]
mov dword [ebp - 0xf5c], eax
mov dword [ebp - 0xe88], 0
mov ecx, dword [ebp - 0xf98]
mov dword [ecx + 0x1094], 1
mov edx, dword [ebp - 0xf98]
mov dword [edx + 0xf10], 0
mov dword [ebp - 0xeb8], 2
mov dword [ebp - 0xf60], 0
cmp dword [ebp - 0xe88], 0
je 0xc248de
mov eax, dword [ebp - 0xe88]
push eax
call dword [sym.imp.ADVAPI32.dll_RegCloseKey]
mov dword [ebp - 0xf60], eax
mov dword [ebp - 0xe88], 0
mov byte [ebp - 4], 3
lea ecx, [ebp - 0xb58]
call fcn.00c28c00
mov byte [ebp - 4], 2
lea ecx, [ebp - 0xd78]
call fcn.00c28c00
mov dword [ebp - 4], 0xffffffff
mov dword [ebp - 0xf6c], 0
cmp dword [ebp - 0x418], 0
je 0xc24933
mov ecx, dword [ebp - 0x418]
push ecx
call dword [sym.imp.ADVAPI32.dll_RegCloseKey]
mov dword [ebp - 0xf6c], eax
mov dword [ebp - 0x418], 0
mov eax, dword [ebp - 0xeb8]
jmp 0xc24c22
lea edx, [ebp - 0xb60]
push edx
push 0xc4ca24
lea eax, [ebp - 0xebc]
push eax
lea ecx, [ebp - 0xd78]
call fcn.00c28a70
mov dword [ebp - 0xfb0], eax
mov ecx, dword [ebp - 0xfb0]
mov dword [ebp - 0xf70], ecx
mov byte [ebp - 4], 6
mov edx, dword [ebp - 0xf70]
push edx
lea ecx, [ebp - 0xb58]
call fcn.00c28c40
mov byte [ebp - 4], 4
lea ecx, [ebp - 0xebc]
call fcn.00c28c00
jmp 0xc246cc
mov byte [ebp - 4], 3
lea ecx, [ebp - 0xb58]
call fcn.00c28c00
mov byte [ebp - 4], 2
lea ecx, [ebp - 0xd78]
call fcn.00c28c00
mov eax, dword [ebp - 0xf98]
cmp dword [eax + 0xf14], 0xffffffff
jne 0xc24a21
mov ecx, dword [ebp - 0xf98]
mov dword [ecx + 0x1094], 1
mov dword [ebp - 0xec0], 2
mov dword [ebp - 4], 0xffffffff
mov dword [ebp - 0xf80], 0
cmp dword [ebp - 0x418], 0
je 0xc24a16
mov edx, dword [ebp - 0x418]
push edx
call dword [sym.imp.ADVAPI32.dll_RegCloseKey]
mov dword [ebp - 0xf80], eax
mov dword [ebp - 0x418], 0
mov eax, dword [ebp - 0xec0]
jmp 0xc24c22
mov eax, dword [ebp - 0xf98]
cmp dword [eax + 0xf14], 2
jne 0xc24a95
cmp dword [0xc59234], 1
jne 0xc24a95
mov ecx, dword [ebp - 0xf98]
mov dword [ecx + 0x1094], 1
mov dword [ebp - 0xec4], 2
mov dword [ebp - 4], 0xffffffff
mov dword [ebp - 0xf84], 0
cmp dword [ebp - 0x418], 0
je 0xc24a8a
mov edx, dword [ebp - 0x418]
push edx
call dword [sym.imp.ADVAPI32.dll_RegCloseKey]
mov dword [ebp - 0xf84], eax
mov dword [ebp - 0x418], 0
mov eax, dword [ebp - 0xec4]
jmp 0xc24c22
mov eax, dword [ebp - 0xf98]
mov ecx, dword [ebp - 0xf98]
mov edx, dword [eax + 0xf10]
cmp edx, dword [ecx + 0x3c]
jbe 0xc24b08
mov eax, dword [ebp - 0xf98]
mov dword [eax + 0x1094], 1
mov dword [ebp - 0xec8], 2
mov dword [ebp - 4], 0xffffffff
mov dword [ebp - 0xf88], 0
cmp dword [ebp - 0x418], 0
je 0xc24afd
mov ecx, dword [ebp - 0x418]
push ecx
call dword [sym.imp.ADVAPI32.dll_RegCloseKey]
mov dword [ebp - 0xf88], eax
mov dword [ebp - 0x418], 0
mov eax, dword [ebp - 0xec8]
jmp 0xc24c22
mov edx, dword [ebp - 0xf98]
mov eax, dword [ebp - 0xf98]
mov ecx, dword [edx + 0xf10]
cmp ecx, dword [eax + 0x40]
jae 0xc24b7b
mov edx, dword [ebp - 0xf98]
mov dword [edx + 0x1094], 1
mov dword [ebp - 0xecc], 2
mov dword [ebp - 4], 0xffffffff
mov dword [ebp - 0xf8c], 0
cmp dword [ebp - 0x418], 0
je 0xc24b70
mov eax, dword [ebp - 0x418]
push eax
call dword [sym.imp.ADVAPI32.dll_RegCloseKey]
mov dword [ebp - 0xf8c], eax
mov dword [ebp - 0x418], 0
mov eax, dword [ebp - 0xecc]
jmp 0xc24c22
mov ecx, dword [ebp - 0xf98]
mov edx, dword [ebp - 0xf98]
mov eax, dword [ecx + 0x3c]
cmp eax, dword [edx + 0xf10]
jbe 0xc24bdb
mov dword [ebp - 0xed0], 1
mov dword [ebp - 4], 0xffffffff
mov dword [ebp - 0xf90], 0
cmp dword [ebp - 0x418], 0
je 0xc24bd3
mov ecx, dword [ebp - 0x418]
push ecx
call dword [sym.imp.ADVAPI32.dll_RegCloseKey]
mov dword [ebp - 0xf90], eax
mov dword [ebp - 0x418], 0
mov eax, dword [ebp - 0xed0]
jmp 0xc24c22
mov dword [ebp - 0xed4], 0
mov dword [ebp - 4], 0xffffffff
mov dword [ebp - 0xf94], 0
cmp dword [ebp - 0x418], 0
je 0xc24c1c
mov edx, dword [ebp - 0x418]
push edx
call dword [sym.imp.ADVAPI32.dll_RegCloseKey]
mov dword [ebp - 0xf94], eax
mov dword [ebp - 0x418], 0
mov eax, dword [ebp - 0xed4]
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
mov ecx, dword [ebp - 0x10]
xor ecx, ebp
call fcn.00c32666
mov esp, ebp
pop ebp
ret