Function at 0x430a72
Capabilities:
Check if file exists
Get file attributes
Query or enumerate registry key
Resolve function by parsing pe exports

Disassembly:
push ebp
mov ebp, esp
and esp, 0xfffffff8
push 0xffffffffffffffff
push 0x4672a0
mov eax, dword fs:[0]
push eax
sub esp, 0x4f8
mov eax, dword [0x4add60]
xor eax, esp
mov dword [esp + 0x4f0], eax
push ebx
push esi
push edi
mov eax, dword [0x4add60]
xor eax, esp
push eax
lea eax, [esp + 0x508]
mov dword fs:[0], eax
mov eax, dword [ebp + 8]
mov esi, ecx
xor ebx, ebx
push str.InitProduct...
lea ecx, [esp + 0x2c]
mov dword [esp + 0x50], esi
mov dword [esp + 0xd4], eax
mov dword [esp + 0x40], ebx
call fcn.004012e2
push ebx
lea eax, [esp + 0x2c]
push eax
push 2
mov dword [esp + 0x51c], ebx
call fcn.00410d56
or dword [esp + 0x51c], 0xffffffff
mov ecx, dword [esp + 0x34]
add esp, 0xc
add ecx, 0xfffffff0
call fcn.004017ba
lea eax, [esp + 0x58]
push eax
push 8
push ebx
push dword [0x4b26b0]
mov dword [esp + 0x60], ebx
push reloc.OLEAUT32.dll_SysReAllocString
call dword [sym.imp.ADVAPI32.dll_RegOpenKeyExW]
test eax, eax
jne 0x4319cf
mov dword [esp + 0x28], ebx
jmp 0x430b30
mov esi, dword [esp + 0x4c]
xor eax, eax
lea edi, [esp + 0xe8]
push 0x206
mov dword [esp + 0xe8], ebx
stosd dword es:[edi], eax
mov word [esp + 0x2f8], ax
lea eax, [esp + 0x2fa]
push ebx
push eax
call fcn.0044e740
add esp, 0xc
lea eax, [esp + 0xe4]
push eax
push ebx
push ebx
push ebx
lea eax, [esp + 0x48]
push eax
lea eax, [esp + 0x308]
push eax
push dword [esp + 0x40]
mov dword [esp + 0x54], 0x104
push dword [esp + 0x74]
call dword [sym.imp.ADVAPI32.dll_RegEnumKeyExW]
mov edi, eax
cmp edi, ebx
je 0x430be1
mov esi, 0x103
cmp edi, esi
je 0x43198e
push str.Error_while_reading_product_registry:
lea ecx, [esp + 0xac]
call fcn.004012e2
push 2
pop eax
push edi
lea ecx, [esp + 0xac]
push ecx
push eax
mov dword [esp + 0x51c], eax
call fcn.00410d56
add esp, 0xc
or dword [esp + 0x510], 0xffffffff
mov ecx, dword [esp + 0xa8]
jmp 0x431976
lea edi, [esi + 0x70]
mov ecx, edi
call fcn.00401522
lea ecx, [esi + 0x58]
mov dword [esp + 0x54], ecx
call fcn.00401522
lea ecx, [esi + 0x50]
mov dword [esp + 0x1c], ecx
call fcn.00401522
lea ecx, [esi + 0x54]
call fcn.00401522
lea ecx, [esi + 0x74]
call fcn.00401522
lea eax, [esp + 0x2f4]
push eax
lea ecx, [esp + 0x18]
call fcn.004012e2
push str.Started_Product:
lea ecx, [esp + 0x6c]
mov dword [esp + 0x514], 3
call fcn.004012e2
push ebx
lea eax, [esp + 0x18]
push eax
lea eax, [esp + 0x70]
push eax
push 2
mov byte [esp + 0x520], 4
call fcn.00410886
mov byte [esp + 0x520], 3
mov ecx, dword [esp + 0x78]
add esp, 0x10
add ecx, 0xfffffff0
call fcn.004017ba
lea eax, [esp + 0x14]
push eax
call fcn.00430a07
mov dword [esp + 0x24], eax
mov eax, dword [esp + 0x14]
cmp dword [eax - 0xc], 0x26
je 0x430cc3
push str.Invalid_Product_GUID:
lea ecx, [esp + 0x84]
call fcn.004012e2
push ebx
lea eax, [esp + 0x18]
push eax
lea eax, [esp + 0x88]
push eax
push 2
mov byte [esp + 0x520], 5
call fcn.00410886
mov ecx, dword [esp + 0x90]
add esp, 0x10
jmp 0x431962
mov esi, dword [esp + 0xd0]
mov ecx, dword [esi]
cmp dword [ecx - 0xc], ebx
je 0x430d15
push eax
mov ecx, esi
call fcn.00406a03
test eax, eax
je 0x430d15
push str.Found_Product_does_not_match_requested_Product
lea ecx, [esp + 0xa8]
call fcn.004012e2
push ebx
lea eax, [esp + 0xa8]
push eax
push 2
mov byte [esp + 0x51c], 6
call fcn.00410d56
mov ecx, dword [esp + 0xb0]
add esp, 0xc
jmp 0x431962
mov eax, dword [esi]
cmp dword [eax - 0xc], ebx
jne 0x430d5a
cmp dword [esp + 0x24], ebx
je 0x430d60
push str.Skipping_previously_checked_Product
lea ecx, [esp + 0xb0]
call fcn.004012e2
push ebx
lea eax, [esp + 0xb0]
push eax
push 2
mov byte [esp + 0x51c], 7
call fcn.00410d56
mov ecx, dword [esp + 0xb8]
add esp, 0xc
jmp 0x431962
cmp dword [esp + 0x24], ebx
jne 0x430d77
mov esi, dword [esp + 0x4c]
lea ecx, [esi + 0x3c]
mov eax, dword [ecx + 8]
lea edx, [esp + 0x14]
push edx
push eax
call fcn.0043eff7
jmp 0x430d7b
mov esi, dword [esp + 0x4c]
lea eax, [esp + 0x14]
push eax
mov ecx, edi
call fcn.00406b64
push 0x475554
lea eax, [esp + 0xdc]
push 0x4b26b0
push eax
call fcn.00406977
add esp, 0xc
lea ecx, [esp + 0x14]
push ecx
push eax
lea eax, [esp + 0x18]
push eax
mov byte [esp + 0x51c], 8
call fcn.00401025
add esp, 0xc
mov byte [esp + 0x510], 0xa
mov ecx, dword [esp + 0xd8]
add ecx, 0xfffffff0
call fcn.004017ba
push dword [esp + 0x54]
mov edi, reloc.OLEAUT32.dll_SysReAllocString
push 0x499390
push dword [esp + 0x18]
push edi
call fcn.00432795
add esp, 0x10
test eax, eax
jne 0x43192c
mov eax, dword [esp + 0x54]
mov eax, dword [eax]
cmp dword [eax - 0xc], ebx
je 0x43192c
push dword [esp + 0x1c]
push str.ProductCode
push dword [esp + 0x18]
push edi
call fcn.00432795
add esp, 0x10
test eax, eax
jne 0x431903
mov eax, dword [esp + 0x1c]
mov eax, dword [eax]
cmp dword [eax - 0xc], ebx
je 0x431903
call fcn.0043ce9a
push eax
lea ecx, [esp + 0x4c]
call fcn.00413a25
lea eax, [esp + 0x48]
push eax
push str.InstalledValidate
mov byte [esp + 0x518], 0xd
push dword [esp + 0x18]
push edi
call fcn.00432795
mov edi, dword [esp + 0x58]
add esp, 0x10
test eax, eax
jne 0x4318ce
cmp dword [edi - 0xc], ebx
je 0x4318ce
push ebx
lea eax, [esp + 0x4c]
push eax
push 2
call fcn.00410d56
add esp, 0xc
push 0x48efd4
lea eax, [esp + 0x4c]
push eax
call fcn.00432206
neg eax
sbb eax, eax
inc eax
mov dword [esp + 0x54], eax
cmp dword [0x4b27a0], ebx
je 0x430f14
lea eax, [esi + 0x54]
push eax
push 0x499454
push dword [esp + 0x18]
push reloc.OLEAUT32.dll_SysReAllocString
call fcn.00432795
add esp, 0x10
test eax, eax
jne 0x430ecf
mov eax, dword [esi + 0x54]
cmp dword [eax - 0xc], ebx
jne 0x43102b
push str.Invalid_ProductVersion
lea ecx, [esp + 0xc8]
call fcn.004012e2
push ebx
lea eax, [esp + 0xc8]
push eax
push 1
mov byte [esp + 0x51c], 0xf
call fcn.00410d56
mov ecx, dword [esp + 0xd0]
add esp, 0xc
add ecx, 0xfffffff0
call fcn.004017ba
add edi, 0xfffffff0
mov ecx, edi
jmp 0x431959
cmp eax, ebx
je 0x430fbc
xor eax, eax
push 0x206
mov word [esp + 0xf0], ax
lea eax, [esp + 0xf2]
push ebx
push eax
mov dword [esp + 0x44], 0x104
call fcn.0044e740
mov eax, dword [esi + 0x50]
add esp, 0xc
lea ecx, [esp + 0x38]
push ecx
lea ecx, [esp + 0xf0]
push ecx
push str.VersionString
push eax
call sub.msi.dll_MsiGetPropertyW
mov dword [esp + 0x1c], eax
lea eax, [esp + 0xec]
push eax
lea ecx, [esi + 0x54]
call fcn.00401356
cmp dword [esp + 0x1c], ebx
jne 0x430f85
mov eax, dword [esi + 0x54]
cmp dword [eax - 0xc], ebx
jne 0x43102b
lea ecx, [esi + 0x54]
call fcn.00401522
push str.Could_not_collect_Version
lea ecx, [esp + 0x74]
call fcn.004012e2
mov byte [esp + 0x510], 0x10
push dword [esp + 0x1c]
lea eax, [esp + 0x74]
push eax
push 1
call fcn.00410d56
mov ecx, dword [esp + 0x7c]
jmp 0x430eff
push edi
call dword [sym.imp.KERNEL32.dll_GetFileAttributesW]
cmp eax, 0xffffffff
jne 0x430ffd
push str.product_installed_state_is_not_confirmed
lea ecx, [esp + 0xb4]
call fcn.004012e2
push ebx
lea eax, [esp + 0xb4]
push eax
push 1
mov byte [esp + 0x51c], 0x11
call fcn.00410d56
mov ecx, dword [esp + 0xbc]
jmp 0x430eff
lea eax, [esi + 0x54]
push eax
push 0x499454
push dword [esp + 0x18]
push reloc.OLEAUT32.dll_SysReAllocString
call fcn.00432795
add esp, 0x10
test eax, eax
jne 0x431899
mov eax, dword [esi + 0x54]
cmp dword [eax - 0xc], ebx
je 0x431899
lea ecx, [esi + 0x74]
call fcn.00401522
lea eax, [esi + 0x74]
push eax
push str.ManifestURL_2
push dword [esp + 0x18]
push reloc.OLEAUT32.dll_SysReAllocString
call fcn.00432795
lea eax, [esi + 0x74]
mov ecx, dword [eax]
add esp, 0x10
cmp dword [ecx - 0xc], ebx
jne 0x43106e
push eax
push str.ManifestURL
push dword [esp + 0x18]
push reloc.OLEAUT32.dll_SysReAllocString
call fcn.00432795
add esp, 0x10
mov eax, dword [esi + 0x74]
cmp dword [eax - 0xc], ebx
jne 0x4310a5
push str.Invalid_ManifestURL
lea ecx, [esp + 0x7c]
call fcn.004012e2
push ebx
lea eax, [esp + 0x7c]
push eax
push 1
mov byte [esp + 0x51c], 0x13
call fcn.00410d56
mov ecx, dword [esp + 0x84]
jmp 0x430eff
lea eax, [esi + 0xbc]
push eax
push 0x4988b4
push dword [esp + 0x18]
mov dword [eax], ebx
push reloc.OLEAUT32.dll_SysReAllocString
call fcn.00432847
add esp, 0x10
test eax, eax
jne 0x431864
cmp dword [esi + 0xbc], 1
jb 0x431864
lea eax, [esi + 0x84]
push eax
push str.Mode
push dword [esp + 0x18]
push reloc.OLEAUT32.dll_SysReAllocString
call fcn.00432847
add esp, 0x10
test eax, eax
jne 0x43182f
mov eax, dword [esi + 0x84]
cmp eax, 1
jb 0x43182f
cmp eax, 4
ja 0x43182f
cmp dword [0x4b27a0], ebx
jne 0x4312a6
call fcn.0043ce9a
push eax
lea ecx, [esp + 0x38]
call fcn.00413a25
lea eax, [esp + 0x34]
push eax
push str.EULA
mov byte [esp + 0x518], 0x16
push dword [esp + 0x18]
push reloc.OLEAUT32.dll_SysReAllocString
call fcn.00432795
mov esi, dword [esp + 0x44]
add esp, 0x10
cmp dword [esi - 0xc], ebx
je 0x431292
push ebx
push 0x3b
lea ecx, [esp + 0x3c]
call fcn.0041c512
mov dword [esp + 0x24], eax
call fcn.0043ce9a
push eax
lea ecx, [esp + 0x24]
call fcn.00413a25
mov byte [esp + 0x510], 0x17
call fcn.0043ce9a
push eax
lea ecx, [esp + 0x34]
call fcn.00413a25
cmp dword [esp + 0x24], 0xffffffff
mov byte [esp + 0x510], 0x18
je 0x4313e1
push dword [esp + 0x24]
lea eax, [esp + 0xe4]
push eax
lea ecx, [esp + 0x3c]
call fcn.00407f97
push eax
lea ecx, [esp + 0x24]
mov byte [esp + 0x514], 0x19
call fcn.00406b64
mov byte [esp + 0x510], 0x18
mov ecx, dword [esp + 0xe0]
add ecx, 0xfffffff0
call fcn.004017ba
mov eax, dword [esi - 0xc]
sub eax, dword [esp + 0x24]
lea ecx, [esp + 0x34]
dec eax
push eax
lea eax, [esp + 0xe0]
push eax
call fcn.00407f50
push eax
lea ecx, [esp + 0x34]
mov byte [esp + 0x514], 0x1a
call fcn.00406b64
mov byte [esp + 0x510], 0x18
mov ecx, dword [esp + 0xdc]
add ecx, 0xfffffff0
call fcn.004017ba
mov eax, dword [esp + 0x20]
cmp dword [eax - 0xc], ebx
je 0x4313af
mov ecx, dword [esp + 0x30]
cmp dword [ecx - 0xc], ebx
je 0x4313af
or dword [esp + 0xcc], 0xffffffff
lea edx, [esp + 0xcc]
push edx
push ecx
push eax
push SysReAllocString
call fcn.00432847
add esp, 0x10
test eax, eax
jne 0x43135d
cmp dword [esp + 0xcc], 1
jb 0x43135d
mov ecx, dword [esp + 0x30]
add ecx, 0xfffffff0
call fcn.004017ba
mov ecx, dword [esp + 0x20]
add ecx, 0xfffffff0
call fcn.004017ba
lea ecx, [esi - 0x10]
mov byte [esp + 0x510], 0xd
call fcn.004017ba
mov esi, dword [esp + 0x4c]
call fcn.0043ce9a
push eax
lea ecx, [esp + 0x30]
call fcn.00413a25
lea eax, [esp + 0x2c]
push eax
push str.PolicyDisableUpdater
mov byte [esp + 0x518], 0x1e
push dword [esp + 0x18]
push reloc.OLEAUT32.dll_SysReAllocString
call fcn.00432795
mov eax, dword [esp + 0x3c]
add esp, 0x10
cmp dword [eax - 0xc], ebx
je 0x431416
or dword [esp + 0x1c], 0xffffffff
lea ecx, [esp + 0x1c]
push ecx
push str.bUpdater
push eax
push reloc.OLEAUT32.dll_SysReAllocString
call fcn.00432847
add esp, 0x10
test eax, eax
jne 0x431416
cmp dword [esp + 0x1c], ebx
jne 0x431416
push str.bUpdater_policy_set_to_disable_Updater_in
lea ecx, [esp + 0xcc]
call fcn.004012e2
push ebx
lea eax, [esp + 0x30]
push eax
lea eax, [esp + 0xd0]
push eax
push 1
mov byte [esp + 0x520], 0x1f
call fcn.00410886
mov ecx, dword [esp + 0xd8]
add esp, 0x10
add ecx, 0xfffffff0
call fcn.004017ba
mov ecx, dword [esp + 0x2c]
jmp 0x430f02
push str.EULA_is_not_accepted
lea ecx, [esp + 0x60]
call fcn.004012e2
push ebx
lea eax, [esp + 0x60]
push eax
push 1
mov byte [esp + 0x51c], 0x1c
call fcn.00410d56
mov ecx, dword [esp + 0x68]
add esp, 0xc
add ecx, 0xfffffff0
call fcn.004017ba
mov ecx, dword [esp + 0x30]
add ecx, 0xfffffff0
call fcn.004017ba
mov ecx, dword [esp + 0x20]
add ecx, 0xfffffff0
call fcn.004017ba
lea ecx, [esi - 0x10]
jmp 0x430f05
push str.Invalid_registered_EULA_value
lea ecx, [esp + 0xbc]
call fcn.004012e2
push ebx
lea eax, [esp + 0xbc]
push eax
push 1
mov byte [esp + 0x51c], 0x1b
call fcn.00410d56
mov ecx, dword [esp + 0xc4]
jmp 0x431384
push str.Invalid_registered_EULA_value
lea ecx, [esp + 0x8c]
call fcn.004012e2
push ebx
lea eax, [esp + 0x8c]
push eax
push 1
mov byte [esp + 0x51c], 0x1d
call fcn.00410d56
mov ecx, dword [esp + 0x94]
jmp 0x431384
lea eax, [esi + 0x68]
push eax
push str.INSTALLDIR
push dword [esp + 0x18]
push reloc.OLEAUT32.dll_SysReAllocString
call fcn.00432795
lea eax, [esi + 0x78]
push eax
push str.DataModulePath
push dword [esp + 0x28]
push reloc.OLEAUT32.dll_SysReAllocString
call fcn.00432795
lea eax, [esi + 0x7c]
push eax
push str.DataModuleUsage
push dword [esp + 0x38]
push reloc.OLEAUT32.dll_SysReAllocString
call fcn.00432795
lea eax, [esi + 0x6c]
push eax
push 0x4749bc
push dword [esp + 0x48]
push reloc.OLEAUT32.dll_SysReAllocString
call fcn.00432795
mov eax, dword [esi + 0x6c]
add esp, 0x40
cmp dword [eax - 0xc], ebx
jne 0x431483
push esi
call fcn.00430476
lea eax, [esp + 0x90]
push eax
push str.DisableAnyUI
push dword [esp + 0x18]
mov dword [esp + 0x9c], ebx
push reloc.OLEAUT32.dll_SysReAllocString
call fcn.00432847
add esp, 0x10
test eax, eax
jne 0x43154b
cmp dword [esp + 0x90], ebx
jbe 0x43154b
push str.DisableAnyUI_is_registered
lea ecx, [esp + 0xc4]
call fcn.004012e2
push ebx
lea eax, [esp + 0xc4]
push eax
push 2
mov byte [esp + 0x51c], 0x20
call fcn.00410d56
mov byte [esp + 0x51c], 0x1e
mov ecx, dword [esp + 0xcc]
add esp, 0xc
add ecx, 0xfffffff0
call fcn.004017ba
cmp dword [esi + 0x84], 3
je 0x431541
push str.Skipping_product___not_Full_Auto_mode
lea ecx, [esp + 0x9c]
call fcn.004012e2
push ebx
lea eax, [esp + 0x9c]
push eax
push 2
mov byte [esp + 0x51c], 0x21
call fcn.00410d56
mov ecx, dword [esp + 0xa4]
add esp, 0xc
jmp 0x43134c
mov dword [esi + 0x9c], 1
cmp dword [esp + 0x54], ebx
je 0x43160e
xor eax, eax
push 0x206
mov word [esp + 0xf0], ax
lea eax, [esp + 0xf2]
push ebx
push eax
call fcn.0044e740
mov eax, dword [esi + 0x50]
add esp, 0xc
lea ecx, [esp + 0x38]
push ecx
lea ecx, [esp + 0xf0]
push ecx
push str.AuthorizedLUAApp
push eax
mov dword [esp + 0x48], 0x104
call sub.msi.dll_MsiGetPropertyW
cmp eax, ebx
jne 0x4315d2
lea eax, [esp + 0xec]
push eax
lea ecx, [esp + 0xd8]
call fcn.004012e2
mov byte [esp + 0x510], 0x22
or dword [esp + 0x3c], 1
push 0x4731d4
mov ecx, eax
call fcn.00406a03
mov byte [esp + 0x1b], 1
test eax, eax
je 0x4315d6
mov byte [esp + 0x1b], bl
mov dword [esp + 0x510], 0x1e
test byte [esp + 0x3c], 1
je 0x4315fc
mov ecx, dword [esp + 0xd4]
and dword [esp + 0x3c], 0xfffffffe
add ecx, 0xfffffff0
call fcn.004017ba
cmp byte [esp + 0x1b], bl
je 0x43160e
mov dword [esi + 0x88], 1
jmp 0x431614
mov dword [esi + 0x88], ebx
lea eax, [esi + 0x58]
push eax
mov ecx, 0x4b27b4
call fcn.00406b64
push str.ProductCode:
lea ecx, [esp + 0xb8]
call fcn.004012e2
push ebx
lea eax, [esi + 0x50]
push eax
lea eax, [esp + 0xbc]
push eax
push 2
mov byte [esp + 0x520], 0x23
call fcn.00410886
mov byte [esp + 0x520], 0x1e
mov ecx, dword [esp + 0xc4]
add esp, 0x10
add ecx, 0xfffffff0
call fcn.004017ba
push str.ProductName:
lea ecx, [esp + 0xa4]
call fcn.004012e2
push ebx
lea eax, [esi + 0x58]
push eax
lea eax, [esp + 0xa8]
push eax
push 2
mov byte [esp + 0x520], 0x24
call fcn.00410886
mov byte [esp + 0x520], 0x1e
mov ecx, dword [esp + 0xb0]
add esp, 0x10
add ecx, 0xfffffff0
call fcn.004017ba
push str.ProductVersion:
lea ecx, [esp + 0xc0]
call fcn.004012e2
push ebx
lea eax, [esi + 0x54]
push eax
lea eax, [esp + 0xc4]
push eax
push 2
mov byte [esp + 0x520], 0x25
call fcn.00410886
mov byte [esp + 0x520], 0x1e
mov ecx, dword [esp + 0xcc]
add esp, 0x10
add ecx, 0xfffffff0
call fcn.004017ba
push str.Product_UI_Language:
lea ecx, [esp + 0x64]
call fcn.004012e2
push ebx
lea eax, [esi + 0x6c]
push eax
lea eax, [esp + 0x68]
push eax
push 2
mov byte [esp + 0x520], 0x26
call fcn.00410886
mov byte [esp + 0x520], 0x1e
mov ecx, dword [esp + 0x70]
add esp, 0x10
add ecx, 0xfffffff0
call fcn.004017ba
push str.ProductInstallDir:
lea ecx, [esp + 0x68]
call fcn.004012e2
lea eax, [esi + 0x68]
push ebx
push eax
mov byte [esp + 0x518], 0x27
lea eax, [esp + 0x6c]
push eax
push 2
call fcn.00410886
mov byte [esp + 0x520], 0x1e
mov ecx, dword [esp + 0x74]
add esp, 0x10
add ecx, 0xfffffff0
call fcn.004017ba
mov eax, str.enabled
cmp dword [esi + 0x88], ebx
jne 0x431785
mov eax, str.disabled
push eax
lea ecx, [esp + 0x78]
call fcn.004012e2
push str.ProductUACPatching:
lea ecx, [esp + 0x70]
mov byte [esp + 0x514], 0x28
call fcn.004012e2
push ebx
lea eax, [esp + 0x78]
push eax
lea eax, [esp + 0x74]
push eax
push 2
mov byte [esp + 0x520], 0x29
call fcn.00410886
mov ecx, dword [esp + 0x7c]
add esp, 0x10
add ecx, 0xfffffff0
call fcn.004017ba
mov byte [esp + 0x510], 0x1e
mov ecx, dword [esp + 0x74]
add ecx, 0xfffffff0
call fcn.004017ba
push str.Product_initialized:
lea ecx, [esp + 0x80]
call fcn.004012e2
push ebx
lea eax, [esp + 0x18]
push eax
lea eax, [esp + 0x84]
push eax
push 2
mov byte [esp + 0x520], 0x2a
call fcn.00410886
mov ecx, dword [esp + 0x8c]
add esp, 0x10
add ecx, 0xfffffff0
call fcn.004017ba
mov dword [esp + 0x50], 1
jmp 0x431354
push str.Invalid_Mode
lea ecx, [esp + 0x88]
call fcn.004012e2
push ebx
lea eax, [esp + 0x88]
push eax
push 1
mov byte [esp + 0x51c], 0x15
call fcn.00410d56
mov ecx, dword [esp + 0x90]
jmp 0x430eff
push str.Invalid_Check
lea ecx, [esp + 0x90]
call fcn.004012e2
push ebx
lea eax, [esp + 0x90]
push eax
push 1
mov byte [esp + 0x51c], 0x14
call fcn.00410d56
mov ecx, dword [esp + 0x98]
jmp 0x430eff
push str.Invalid_ProductVersion
lea ecx, [esp + 0x98]
call fcn.004012e2
push ebx
lea eax, [esp + 0x98]
push eax
push 1
mov byte [esp + 0x51c], 0x12
call fcn.00410d56
mov ecx, dword [esp + 0xa0]
jmp 0x430eff
push str.InstalledValidate_not_found
lea ecx, [esp + 0xa0]
call fcn.004012e2
push ebx
lea eax, [esp + 0xa0]
push eax
push 1
mov byte [esp + 0x51c], 0xe
call fcn.00410d56
mov ecx, dword [esp + 0xa8]
jmp 0x430eff
push str.Invalid_ProductCode
lea ecx, [esp + 0x44]
call fcn.004012e2
push ebx
lea eax, [esp + 0x44]
push eax
push 1
mov byte [esp + 0x51c], 0xc
call fcn.00410d56
mov ecx, dword [esp + 0x4c]
jmp 0x431953
push str.Invalid_ProductName
lea ecx, [esp + 0x48]
call fcn.004012e2
push ebx
lea eax, [esp + 0x48]
push eax
push 1
mov byte [esp + 0x51c], 0xb
call fcn.00410d56
mov ecx, dword [esp + 0x50]
add esp, 0xc
add ecx, 0xfffffff0
call fcn.004017ba
mov ecx, dword [esp + 0x10]
add ecx, 0xfffffff0
call fcn.004017ba
or dword [esp + 0x510], 0xffffffff
mov ecx, dword [esp + 0x14]
add ecx, 0xfffffff0
call fcn.004017ba
inc dword [esp + 0x28]
cmp dword [esp + 0x50], ebx
je 0x430b2c
jmp 0x4319c3
push str.Finished_search_for_registered_products:
lea ecx, [esp + 0x48]
call fcn.004012e2
push esi
lea eax, [esp + 0x48]
push eax
push 2
mov dword [esp + 0x51c], 1
call fcn.00410d56
mov ecx, dword [esp + 0x50]
add esp, 0xc
add ecx, 0xfffffff0
call fcn.004017ba
push dword [esp + 0x58]
call dword [sym.imp.ADVAPI32.dll_RegCloseKey]
jmp 0x431a04
push str.Unable_to_query_Products
lea ecx, [esp + 0x44]
call fcn.004012e2
push ebx
lea eax, [esp + 0x44]
push eax
push 2
mov dword [esp + 0x51c], 0x2b
call fcn.00410d56
mov ecx, dword [esp + 0x4c]
add esp, 0xc
add ecx, 0xfffffff0
call fcn.004017ba
mov eax, dword [esp + 0x50]
mov ecx, dword [esp + 0x508]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov ecx, dword [esp + 0x4f0]
xor ecx, esp
call fcn.0044da13
mov esp, ebp
pop ebp
ret 4