Function at 0x412dc0
Capabilities:
Set registry value

Disassembly:
push 0xffffffffffffffff
push 0x44f1e8
mov eax, dword fs:[0]
push eax
sub esp, 0x50
mov eax, dword [0x462408]
xor eax, esp
mov dword [esp + 0x48], eax
push ebx
push ebp
push esi
push edi
mov eax, dword [0x462408]
xor eax, esp
push eax
lea eax, [esp + 0x64]
mov dword fs:[0], eax
mov eax, dword [esp + 0x74]
mov edi, ecx
xor ebx, ebx
mov dword [esp + 0x6c], ebx
mov dword [esp + 0x58], 7
mov dword [esp + 0x54], ebx
mov word [esp + 0x44], bx
mov dword [esp + 0x24], ebx
mov dword [esp + 0x28], ebx
mov dword [esp + 0x2c], ebx
push ebx
lea ecx, [esp + 0x18]
push ecx
push ebx
push 0xf003f
push ebx
push ebx
push ebx
mov byte [esp + 0x88], 2
push eax
push 0x80000002
mov dword [esp + 0x40], 0x1000
mov dword [esp + 0x38], ebx
mov dword [esp + 0x3c], ebx
call dword [sym.imp.ADVAPI32.dll_RegCreateKeyExW]
cmp eax, ebx
jne 0x413046
mov edx, 0x4550dc
call fcn.00401d60
test eax, eax
je 0x412e70
mov ecx, 0x4550dc
call fcn.00401e00
jmp 0x412e7b
push edi
mov ecx, 0x4550e0
call fcn.00411170
mov ecx, eax
lea esi, [ecx + 2]
mov dx, word [ecx]
add ecx, 2
cmp dx, bx
jne 0x412e80
sub ecx, esi
mov esi, dword [sym.imp.ADVAPI32.dll_RegSetValueExW]
sar ecx, 1
lea edx, [ecx + ecx]
push edx
push eax
mov eax, dword [esp + 0x1c]
push 1
push ebx
push str.InstallPath
push eax
call esi
lea ecx, [esp + 0x40]
push ecx
call fcn.00422cd0
mov edx, dword [esp + 0x48]
add esp, 4
cmp dword [esp + 0x58], 8
jae 0x412ec5
lea edx, [esp + 0x44]
mov eax, edx
lea ebp, [eax + 2]
lea ebx, [ebx]
mov cx, word [eax]
add eax, 2
cmp cx, bx
jne 0x412ed0
mov ecx, dword [esp + 0x14]
sub eax, ebp
sar eax, 1
add eax, eax
push eax
push edx
push 1
push ebx
push str.Version
push ecx
call esi
cmp dword [edi + 0x34], ebx
mov edx, 0x454b10
jne 0x412f01
mov edx, 0x454b18
mov eax, edx
lea ebp, [eax + 2]
mov cx, word [eax]
add eax, 2
cmp cx, bx
jne 0x412f06
mov ecx, dword [esp + 0x14]
sub eax, ebp
sar eax, 1
add eax, eax
push eax
push edx
push 1
push ebx
push str.Reboot
push ecx
call esi
cmp dword [edi + 0x38], ebx
mov edx, str.success
je 0x412f37
mov edx, str.failure
mov eax, edx
lea ebp, [eax + 2]
lea esp, [esp]
mov cx, word [eax]
add eax, 2
cmp cx, bx
jne 0x412f40
mov ecx, dword [esp + 0x14]
sub eax, ebp
sar eax, 1
add eax, eax
push eax
push edx
push 1
push ebx
push str.Install
push ecx
call esi
mov edx, dword [edi + 0x24c]
mov eax, dword [edx]
add edi, 0x248
mov esi, edi
mov ebp, eax
mov dword [esp + 0x30], esi
mov dword [esp + 0x34], ebp
lea esp, [esp]
cmp esi, ebx
mov eax, dword [edi + 4]
mov dword [esp + 0x3c], eax
je 0x412f8f
cmp esi, edi
je 0x412f94
call fcn.0043641d
cmp ebp, dword [esp + 0x3c]
je 0x412fdc
cmp esi, ebx
jne 0x412fa3
call fcn.0043641d
cmp ebp, dword [esi + 4]
jne 0x412fad
call fcn.0043641d
cmp byte [ebp + 0x28], bl
je 0x412fc9
cmp ebp, dword [esi + 4]
jne 0x412fbc
call fcn.0043641d
add ebp, 0xc
push ebp
lea esi, [esp + 0x24]
call fcn.0040c080
lea esi, [esp + 0x30]
call fcn.00420a70
mov ebp, dword [esp + 0x34]
mov esi, dword [esp + 0x30]
jmp 0x412f80
xor ecx, ecx
mov eax, 0x1000
mov edx, 2
mul edx
seto cl
neg ecx
or ecx, eax
push ecx
call fcn.004348ff
mov esi, eax
add esp, 4
lea eax, [esp + 0x1c]
push eax
push esi
lea eax, [esp + 0x28]
call fcn.00432f10
mov ecx, dword [esp + 0x24]
mov eax, dword [esp + 0x1c]
add esp, 8
lea edx, [ecx + ecx]
push edx
push esi
push 7
push ebx
push str.InstallConfig
push eax
call dword [sym.imp.ADVAPI32.dll_RegSetValueExW]
push esi
call fcn.0043642d
mov eax, dword [esp + 0x18]
add esp, 4
cmp eax, ebx
je 0x413042
push eax
call dword [sym.imp.ADVAPI32.dll_RegCloseKey]
mov dword [esp + 0x14], ebx
mov eax, dword [esp + 0x24]
cmp eax, ebx
je 0x41306c
mov ecx, dword [esp + 0x1c]
mov edi, dword [esp + 0x28]
push ecx
call fcn.00410430
mov edx, dword [esp + 0x28]
add esp, 4
push edx
call fcn.0043642d
add esp, 4
cmp dword [esp + 0x58], 8
mov dword [esp + 0x24], ebx
mov dword [esp + 0x28], ebx
mov dword [esp + 0x2c], ebx
jb 0x41308c
mov eax, dword [esp + 0x44]
push eax
call fcn.0043642d
add esp, 4
mov eax, dword [esp + 0x14]
cmp eax, ebx
mov dword [esp + 0x58], 7
mov dword [esp + 0x54], ebx
mov word [esp + 0x44], bx
je 0x4130ac
push eax
call dword [sym.imp.ADVAPI32.dll_RegCloseKey]
mov ecx, dword [esp + 0x64]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebp
pop ebx
mov ecx, dword [esp + 0x48]
xor ecx, esp
call fcn.00434b37
add esp, 0x5c
ret 4