Function at 0x41d221
Capabilities:
Query or enumerate registry value
Set registry value

Disassembly:
sub esp, 0x5c4
mov eax, dword [0x514d34]
xor eax, esp
mov dword [esp + 0x5c0], eax
push ebx
push esi
mov esi, dword [esp + 0x5d4]
lea eax, [esp + 0xac]
push edi
test esi, esi
je 0x41d255
push esi
push eax
call fcn.00446f90
pop ecx
pop ecx
jmp 0x41d295
push eax
call fcn.0040e0d1
push 0x65
lea eax, [esp + 0x50]
push eax
mov eax, dword [0x50d234]
push dword [eax]
call fcn.00417596
lea eax, [esp + 0x58]
push eax
lea eax, [esp + 0xc4]
push eax
call fcn.00446fa0
lea eax, [esp + 0xc8]
push 0x4c8c74
push eax
call fcn.00446fa0
add esp, 0x20
lea eax, [esp + 0x28]
push str.axis_diplomat_2004
push eax
call fcn.00446f90
mov di, word [esp + 0x5dc]
xor ebx, ebx
pop ecx
pop ecx
test di, di
jne 0x41d2c4
mov byte [esp + 0xb0], bl
mov byte [esp + 0x48], bl
mov byte [esp + 0x28], bl
lea eax, [esp + 0x10]
push eax
push 3
push ebx
push str.Software_verypdfpdfcamp
push connect
call dword [sym.imp.ADVAPI32.dll_RegOpenKeyExA]
test eax, eax
jne 0x41d44e
push ebp
push 4
pop ebp
test di, di
push ebp
setne al
mov dword [esp + 0x14], eax
lea eax, [esp + 0x14]
push eax
push ebp
push ebx
mov ebx, dword [sym.imp.ADVAPI32.dll_RegSetValueExA]
push str.AutomaticOutput
push dword [esp + 0x28]
call ebx
push ebp
lea eax, [esp + 0x14]
mov dword [esp + 0x14], 2
push eax
push ebp
xor ebp, ebp
push ebp
push str.AutomaticValue
push dword [esp + 0x28]
call ebx
xor eax, eax
test esi, esi
push 4
pop esi
sete al
push esi
mov dword [esp + 0x14], eax
lea eax, [esp + 0x14]
push eax
push esi
push ebp
push str.AutoView
push dword [esp + 0x28]
call ebx
lea eax, [esp + 0xb4]
push eax
call fcn.00447230
pop ecx
inc eax
push eax
lea eax, [esp + 0xb8]
push eax
push 1
push ebp
push str.AutomaticDirectory
push dword [esp + 0x28]
call ebx
lea eax, [esp + 0x2c]
push eax
call fcn.00447230
pop ecx
inc eax
push eax
lea eax, [esp + 0x30]
push eax
push 1
push ebp
push str.Author
push dword [esp + 0x28]
call ebx
lea eax, [esp + 0x4c]
push eax
call fcn.00447230
pop ecx
inc eax
push eax
lea eax, [esp + 0x50]
push eax
push 1
push ebp
push str.Title
push dword [esp + 0x28]
call ebx
push 5
lea eax, [esp + 0x28]
push eax
push 0x4c9874
push str.pdfres
call fcn.0041506a
lea eax, [esp + 0x28]
push eax
lea eax, [esp + 0x38]
push 5
push eax
call fcn.00409892
add esp, 0x1c
test di, di
je 0x41d474
mov eax, dword [esp + 0x18]
test ax, ax
je 0x41d466
lea eax, [esp + 0x1c]
mov dword [esp + 0x1c], esi
push eax
lea eax, [esp + 0x14]
push eax
lea eax, [esp + 0x28]
push eax
push ebp
push str.Resolution
push dword [esp + 0x28]
call dword [sym.imp.ADVAPI32.dll_RegQueryValueExA]
mov ax, word [esp + 0x10]
mov word [0x532cec], ax
mov eax, dword [esp + 0x18]
test ax, ax
je 0x41d43c
movzx eax, ax
push esi
mov dword [esp + 0x14], eax
lea eax, [esp + 0x14]
push eax
push esi
push ebp
push str.Resolution
push dword [esp + 0x28]
call ebx
push dword [esp + 0x14]
call dword [sym.imp.ADVAPI32.dll_RegCloseKey]
mov word [0x5327cc], di
pop ebp
mov ecx, dword [esp + 0x5cc]
pop edi
pop esi
pop ebx
xor ecx, esp
call fcn.00441a5e
add esp, 0x5c4
ret
mov ecx, 0xffff
mov word [0x532cec], cx
jmp 0x41d41d
mov ax, word [0x532cec]
mov ecx, 0xffff
cmp ax, cx
je 0x41d419
movzx eax, ax
mov dword [esp + 0x18], eax
jmp 0x41d41d