Function at 0x4011fd
Capabilities:
Query or enumerate registry value
Set registry value

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x258
mov eax, dword [ebp + 0x10]
push ebx
push esi
push edi
push 2
xor ebx, ebx
cmp byte [eax], 0x2d
pop esi
jne 0x401235
mov al, byte [eax + 1]
cmp al, 0x42
jne 0x401221
xor esi, esi
jmp 0x401235
cmp al, 0x49
jne 0x40122a
push 1
pop esi
jmp 0x401235
cmp al, 0x4c
jne 0x401235
mov byte [0x812ba4], 1
lea eax, [ebp - 0x58]
push eax
push 0x401128
call sub.Msi.dll_MsiGetProductInfoFromScriptW
test eax, eax
jne 0x401578
lea eax, [ebp - 0x58]
push eax
call sub.Msi.dll_MsiRecordGetInteger
push 5
pop edi
cmp eax, edi
jne 0x401578
lea eax, [ebp - 4]
mov dword [ebp - 8], ebx
push eax
push 0x20019
push ebx
push 0x401150
push 0x80000001
call dword [sym.imp.ADVAPI32.dll_RegOpenKeyExA]
test eax, eax
jne 0x4012b2
lea eax, [ebp + 0x10]
mov dword [ebp + 0x10], 4
push eax
lea eax, [ebp - 0xc]
push eax
push ebx
push ebx
push 0x40117c
push dword [ebp - 4]
call dword [sym.imp.ADVAPI32.dll_RegQueryValueExA]
test eax, eax
jne 0x4012a9
mov eax, dword [ebp - 0xc]
mov dword [ebp - 8], eax
push dword [ebp - 4]
call dword [sym.imp.ADVAPI32.dll_RegCloseKey]
cmp esi, ebx
jne 0x4012bf
cmp dword [ebp - 8], ebx
jne 0x4015bb
mov dword [ebp - 0x10], ebx
call dword [sym.imp.COMCTL32.dll_InitCommonControls]
call fcn.00403e54
cmp eax, ebx
je 0x401323
cmp esi, 2
jne 0x401314
mov esi, dword [sym.imp.USER32.dll_LoadStringA]
mov edi, 0x100
lea ecx, [ebp - 0x158]
push edi
push ecx
push eax
push dword [ebp + 8]
call esi
lea eax, [ebp - 0x258]
push edi
push eax
push 4
push dword [ebp + 8]
call esi
lea eax, [ebp - 0x258]
push ebx
push eax
lea eax, [ebp - 0x158]
push eax
push ebx
call dword [sym.imp.USER32.dll_MessageBoxA]
mov dword [ebp - 0x10], 1
mov dword [ebp - 8], ebx
jmp 0x4014e8
cmp esi, 1
mov esi, dword [sym.imp.USER32.dll_GetDlgItem]
je 0x401490
push dword [ebp - 8]
push 0x40109c
push ebx
push 0x67
push dword [ebp + 8]
call dword [sym.imp.USER32.dll_CreateDialogParamA]
push dword [ebp + 0x14]
mov dword [ebp + 0x10], eax
push eax
call dword [sym.imp.USER32.dll_ShowWindow]
push dword [ebp + 0x10]
call dword [sym.imp.USER32.dll_UpdateWindow]
mov dword [ebp - 0xc], edi
mov edi, 0x100
cmp dword [0x412928], ebx
jne 0x40141e
lea eax, [ebp - 0x158]
push edi
push eax
push 1
push dword [ebp + 8]
call dword [sym.imp.USER32.dll_LoadStringA]
push dword [ebp - 0xc]
lea eax, [ebp - 0x158]
push eax
lea eax, [ebp - 0x258]
push eax
call dword [sym.imp.USER32.dll_wsprintfA]
add esp, 0xc
lea eax, [ebp - 0x258]
push eax
push 0x3eb
push dword [ebp + 0x10]
call esi
push eax
call dword [sym.imp.USER32.dll_SetWindowTextA]
mov dword [ebp + 0x14], ebx
cmp dword [0x412928], ebx
jne 0x401415
push 1
push ebx
push ebx
lea eax, [ebp - 0x30]
push ebx
push eax
call dword [sym.imp.USER32.dll_PeekMessageA]
test eax, eax
je 0x401404
cmp dword [ebp - 0x2c], 0x12
je 0x4014c5
lea eax, [ebp - 0x30]
push eax
push dword [ebp + 0x10]
call dword [sym.imp.USER32.dll_IsDialogMessageA]
test eax, eax
jne 0x4013c0
lea eax, [ebp - 0x30]
push eax
call dword [sym.imp.USER32.dll_TranslateMessage]
lea eax, [ebp - 0x30]
push eax
call dword [sym.imp.USER32.dll_DispatchMessageA]
jmp 0x4013c0
push 0x64
call dword [sym.imp.KERNEL32.dll_Sleep]
inc dword [ebp + 0x14]
cmp dword [ebp + 0x14], 0xa
jl 0x4013b8
dec dword [ebp - 0xc]
jne 0x401364
lea eax, [ebp - 0x158]
push edi
push eax
push 2
push dword [ebp + 8]
call dword [sym.imp.USER32.dll_LoadStringA]
lea eax, [ebp - 0x158]
push eax
push 0x3eb
push dword [ebp + 0x10]
call esi
push eax
call dword [sym.imp.USER32.dll_SetWindowTextA]
mov edi, 0x3e9
push ebx
push edi
push dword [ebp + 0x10]
call esi
push eax
call dword [sym.imp.USER32.dll_EnableWindow]
push 2
push dword [ebp + 0x10]
call esi
push eax
call dword [sym.imp.USER32.dll_SetFocus]
push 1
push ebx
push 0xf4
push edi
push dword [ebp + 0x10]
call esi
mov edi, dword [sym.imp.USER32.dll_SendMessageA]
push eax
call edi
push ebx
push 2
push 0x401
push dword [ebp + 0x10]
call edi
jmp 0x4014b8
push ebx
push 0x401104
push ebx
push 0x68
push dword [ebp + 8]
call dword [sym.imp.USER32.dll_CreateDialogParamA]
push dword [ebp + 0x14]
mov dword [ebp + 0x10], eax
push eax
call dword [sym.imp.USER32.dll_ShowWindow]
push dword [ebp + 0x10]
call dword [sym.imp.USER32.dll_UpdateWindow]
mov ecx, dword [ebp + 0x10]
mov edx, section..text
call fcn.00403c58
push ebx
push ebx
push 0xf0
push 0x3ea
push dword [ebp + 0x10]
call esi
push eax
call dword [sym.imp.USER32.dll_SendMessageA]
neg eax
sbb eax, eax
mov dword [ebp - 0x10], ebx
inc eax
mov dword [ebp - 8], eax
lea eax, [ebp - 0x14]
mov esi, dword [sym.imp.ADVAPI32.dll_RegCreateKeyExA]
push eax
lea eax, [ebp - 4]
push eax
push ebx
push 0x20006
push ebx
push 0x401188
push ebx
push 0x40118c
push 0x80000002
call esi
mov edi, dword [sym.imp.ADVAPI32.dll_RegSetValueExA]
test eax, eax
jne 0x401535
lea eax, [ebp - 0x10]
push 4
push eax
push 4
push ebx
push 0x4011b8
push dword [ebp - 4]
call edi
push dword [ebp - 4]
call dword [sym.imp.ADVAPI32.dll_RegCloseKey]
lea eax, [ebp - 0x14]
push eax
lea eax, [ebp - 4]
push eax
push ebx
push 0x20006
push ebx
push 0x4011c4
push ebx
push 0x4011c8
push 0x80000001
call esi
test eax, eax
jne 0x4015bb
lea eax, [ebp - 8]
push 4
push eax
push 4
push ebx
push 0x4011f4
push dword [ebp - 4]
call edi
push dword [ebp - 4]
call dword [sym.imp.ADVAPI32.dll_RegCloseKey]
jmp 0x4015bb
cmp esi, ebx
je 0x4015bb
mov esi, dword [sym.imp.USER32.dll_LoadStringA]
mov edi, 0x100
lea eax, [ebp - 0x158]
push edi
push eax
push 0xa
push dword [ebp + 8]
call esi
lea eax, [ebp - 0x258]
push edi
push eax
push 4
push dword [ebp + 8]
call esi
lea eax, [ebp - 0x258]
push ebx
push eax
lea eax, [ebp - 0x158]
push eax
push ebx
call dword [sym.imp.USER32.dll_MessageBoxA]
pop edi
pop esi
xor eax, eax
pop ebx
leave
ret 0x10