Function at 0x41f913
Capabilities:
Set registry value

Disassembly:
push 0x134
mov eax, 0x45eecb
call fcn.0045cea5
mov dword [ebp - 0x24], ecx
push str.CInstall::CreateRegKeyAfterInstall
lea ecx, [ebp - 0x38]
call fcn.00407111
mov esi, 0x48c1ac
xor ebx, ebx
push esi
lea ecx, [ebp - 0x2c]
mov dword [ebp - 4], ebx
call fcn.00405f70
push esi
lea ecx, [ebp - 0x1c]
mov byte [ebp - 4], 1
call fcn.00405f70
push esi
lea ecx, [ebp - 0x18]
mov byte [ebp - 4], 2
call fcn.00405f70
push esi
lea ecx, [ebp - 0x14]
mov byte [ebp - 4], 3
call fcn.00405f70
push esi
lea ecx, [ebp - 0x3c]
mov byte [ebp - 4], 4
call fcn.00405f70
push esi
lea ecx, [ebp - 0x34]
mov byte [ebp - 4], 5
call fcn.00405f70
push esi
lea ecx, [ebp - 0x20]
mov byte [ebp - 4], 6
call fcn.00405f70
mov ecx, dword [ebp - 0x24]
xor eax, eax
inc eax
mov dword [ebp - 0x30], eax
mov dword [ebp - 0x28], eax
lea eax, [ebp - 0x28]
push eax
mov byte [ebp - 4], 7
call fcn.0041f1dd
push str.LayoutType
lea ecx, [ebp - 0x2c]
call fcn.00404494
call fcn.0042ab82
lea ecx, [eax + 0x14]
call fcn.00426e36
test al, al
je 0x41f9d1
mov dword [ebp - 0x30], 2
push 0x46cda8
lea ecx, [ebp - 0x140]
call fcn.0041f4f2
push dword [eax]
lea ecx, [ebp - 0x1c]
mov byte [ebp - 4], 8
call fcn.00404494
lea eax, [ebp - 0x13c]
cmp dword [ebp - 0x140], eax
mov byte [ebp - 4], 7
je 0x41fa0e
push dword [ebp - 0x140]
call dword [sym.imp.MSVCR80.dll_free]
pop ecx
lea eax, [ebp - 0x10]
push eax
call fcn.0042ab82
mov ecx, eax
call fcn.0043234c
push eax
lea ecx, [ebp - 0x18]
mov byte [ebp - 4], 9
call fcn.00415c61
mov ecx, dword [ebp - 0x10]
add ecx, 0xfffffff0
mov byte [ebp - 4], 7
call fcn.00402703
cmp byte [ebp + 8], bl
mov eax, str.upgrade
jne 0x41fa49
mov eax, 0x46c8dc
push eax
lea ecx, [ebp - 0x20]
call fcn.00404494
push dword [ebp - 0x18]
mov esi, str.SOFTWARESymantecNorton_Security_Scan
push esi
lea eax, [ebp - 0x14]
push 0x46cd50
push eax
call fcn.00405b2b
add esp, 0x10
mov dword [ebp + 8], ebx
push ebx
push ebx
push 0x2001f
push ebx
push ebx
push esi
mov edi, reloc.OLEAUT32.dll_SysReAllocString
push edi
lea ecx, [ebp + 8]
mov byte [ebp - 4], 0xa
call fcn.00402e2b
test eax, eax
jne 0x41fb58
mov esi, dword [sym.imp.ADVAPI32.dll_RegSetValueExW]
push 4
lea eax, [ebp - 0x10]
push eax
push 4
push ebx
push str.DontShow
push dword [ebp + 8]
mov dword [ebp - 0x10], ebx
call esi
push ebx
push ebx
push 0x2001f
push ebx
push ebx
push dword [ebp - 0x14]
lea ecx, [ebp + 8]
push edi
call fcn.00402e2b
test eax, eax
jne 0x41fb1f
mov eax, dword [ebp - 0x30]
push 4
pop edi
push edi
mov dword [ebp - 0x10], eax
lea eax, [ebp - 0x10]
push eax
push edi
push ebx
push str.LayoutType
push dword [ebp + 8]
call esi
push 1
push dword [ebp - 0x1c]
lea ecx, [ebp + 8]
push str.Version
call fcn.00402ec8
mov eax, dword [ebp - 0x28]
push edi
mov dword [ebp - 0x10], eax
lea eax, [ebp - 0x10]
push eax
push edi
push ebx
push str.SubSKU
push dword [ebp + 8]
call esi
push 1
push dword [ebp - 0x20]
lea ecx, [ebp + 8]
push str.SatLevel
call fcn.00402ec8
jmp 0x41fb8f
mov eax, dword [0x488018]
cmp eax, 0x488018
je 0x41fb4c
test byte [eax + 0x1c], 1
je 0x41fb4c
cmp byte [eax + 0x19], 4
jb 0x41fb4c
push 0x46cb4c
push 0x22
push dword [eax + 0x14]
push dword [eax + 0x10]
call fcn.00406feb
add esp, 0x10
mov eax, dword [ebp - 0x24]
mov dword [eax + 4], 0x232b
jmp 0x41fb8f
mov eax, dword [0x488018]
cmp eax, 0x488018
je 0x41fb85
test byte [eax + 0x1c], 1
je 0x41fb85
cmp byte [eax + 0x19], 4
jb 0x41fb85
push 0x46cb4c
push 0x23
push dword [eax + 0x14]
push dword [eax + 0x10]
call fcn.00406feb
add esp, 0x10
mov eax, dword [ebp - 0x24]
mov dword [eax + 4], 0x232a
call fcn.0042ab82
mov ecx, eax
call fcn.00436c34
call fcn.0042ab82
mov ecx, eax
call fcn.0042d63c
test al, al
jne 0x41fbd8
mov eax, dword [0x488018]
cmp eax, 0x488018
je 0x41fbd8
test byte [eax + 0x1c], 1
je 0x41fbd8
cmp byte [eax + 0x19], 2
jb 0x41fbd8
push 0x46cb4c
push 0x24
push dword [eax + 0x14]
push dword [eax + 0x10]
call fcn.00406feb
add esp, 0x10
lea ecx, [ebp + 8]
call fcn.00402e14
lea ecx, [ebp + 8]
call fcn.00402e14
mov ecx, dword [ebp - 0x20]
add ecx, 0xfffffff0
call fcn.00402703
mov ecx, dword [ebp - 0x34]
add ecx, 0xfffffff0
call fcn.00402703
mov ecx, dword [ebp - 0x3c]
add ecx, 0xfffffff0
call fcn.00402703
mov ecx, dword [ebp - 0x14]
add ecx, 0xfffffff0
call fcn.00402703
mov ecx, dword [ebp - 0x18]
add ecx, 0xfffffff0
call fcn.00402703
mov ecx, dword [ebp - 0x1c]
add ecx, 0xfffffff0
call fcn.00402703
mov ecx, dword [ebp - 0x2c]
add ecx, 0xfffffff0
call fcn.00402703
lea ecx, [ebp - 0x38]
call fcn.00407157
call fcn.0045cf7d
ret 4