Function at 0x448780
Capabilities:
Query or enumerate registry value

Disassembly:
sub esp, 0x8e4
push ebx
push ebp
push esi
mov esi, dword [0x655bd0]
xor eax, eax
push edi
mov ax, word [0x655b82]
push 0x448760
push 4
mov ecx, eax
push eax
lea edi, [esp + 0x2c0]
lea eax, [esp + 0x2c0]
rep movsd dword es:[edi], dword [esi]
push eax
call dword [sym.imp.MSVCRT.dll_qsort]
add esp, 0x10
lea ecx, [esp + 0x11c]
xor ebx, ebx
mov dword [esp + 0x11c], 0x94
push ecx
mov byte [esp + 0x20], bl
mov byte [esp + 0xa0], bl
call dword [sym.imp.KERNEL32.dll_GetVersionExA]
lea edx, [esp + 0x10]
push edx
push 0x20019
push ebx
push str.SOFTWAREConcept_SoftwareInPage_Urdu_ProfessionalProfessional
push reloc.HINSTD.dll_Ordinal_2
call dword [sym.imp.ADVAPI32.dll_RegOpenKeyExA]
test eax, eax
jne 0x448862
mov esi, dword [sym.imp.ADVAPI32.dll_RegQueryValueExA]
lea eax, [esp + 0x14]
lea ecx, [esp + 0x9c]
push eax
mov eax, dword [esp + 0x14]
lea edx, [esp + 0x1c]
push ecx
push edx
push ebx
mov edi, 0x80
push str.Name
push eax
mov dword [esp + 0x2c], edi
mov dword [esp + 0x30], 1
call esi
lea ecx, [esp + 0x14]
lea edx, [esp + 0x1c]
push ecx
mov ecx, dword [esp + 0x14]
lea eax, [esp + 0x1c]
push edx
push eax
push ebx
push str.Company
push ecx
mov dword [esp + 0x2c], edi
call esi
mov edx, dword [esp + 0x10]
push edx
call dword [sym.imp.ADVAPI32.dll_RegCloseKey]
mov esi, dword [esp + 0x8f8]
mov ebp, dword [sym.imp.USER32.dll_wsprintfA]
lea eax, [esp + 0x1c]
lea ecx, [esp + 0x9c]
push eax
push ecx
push str.Personalized_for__s_of__s
push esi
call ebp
mov edi, esi
or ecx, 0xffffffff
xor eax, eax
add esp, 0x10
repne scasb al, byte es:[edi]
mov al, byte [0x655e8a]
not ecx
dec ecx
test al, 0x10
je 0x4488b1
and ecx, 0xffff
push str._n
add ecx, esi
push ecx
call ebp
add esp, 8
jmp 0x4488d8
mov edx, dword [0x655aac]
neg edx
sbb dl, dl
and ecx, 0xffff
and dl, 3
add ecx, esi
add dl, 0x50
movsx eax, dl
push eax
push 0x504a8c
push ecx
call ebp
add esp, 0xc
cmp word [0x655b82], bx
je 0x4488fa
mov edi, esi
or ecx, 0xffffffff
xor eax, eax
push 0x504a88
repne scasb al, byte es:[edi]
not ecx
dec ecx
add ecx, esi
push ecx
call ebp
add esp, 8
mov ecx, dword [0x655e86]
mov eax, 0x504a80
cmp ecx, 0xff
jb 0x448912
mov eax, 0x504a78
push ecx
push eax
mov edi, esi
or ecx, 0xffffffff
xor eax, eax
repne scasb al, byte es:[edi]
not ecx
dec ecx
add ecx, esi
push ecx
call ebp
mov al, byte [0x655e8a]
add esp, 0xc
test al, 8
je 0x44894a
mov edi, esi
or ecx, 0xffffffff
xor eax, eax
push str._NP_
repne scasb al, byte es:[edi]
not ecx
dec ecx
add ecx, esi
push ecx
call ebp
add esp, 8
test byte [0x655e8a], 4
je 0x44896c
mov edi, esi
or ecx, 0xffffffff
xor eax, eax
push str._Arabic_
repne scasb al, byte es:[edi]
not ecx
dec ecx
add ecx, esi
push ecx
call ebp
add esp, 8
test byte [0x655e8a], 0x40
je 0x44898e
mov edi, esi
or ecx, 0xffffffff
xor eax, eax
push str._LAN_
repne scasb al, byte es:[edi]
not ecx
dec ecx
add ecx, esi
push ecx
call ebp
add esp, 8
mov eax, dword [0x655e8a]
test ah, 1
je 0x4489b1
mov edi, esi
or ecx, 0xffffffff
xor eax, eax
push str._EDUCATIONAL_
repne scasb al, byte es:[edi]
not ecx
dec ecx
add ecx, esi
push ecx
call ebp
add esp, 8
mov eax, dword [0x655e8a]
test ah, 0x10
je 0x4489d4
mov edi, esi
or ecx, 0xffffffff
xor eax, eax
push str._QURANIC_
repne scasb al, byte es:[edi]
not ecx
dec ecx
add ecx, esi
push ecx
call ebp
add esp, 8
mov eax, dword [0x655e8a]
test ah, 2
je 0x4489f7
mov edi, esi
or ecx, 0xffffffff
xor eax, eax
push str.Mr._Dongle__Paki_
repne scasb al, byte es:[edi]
not ecx
dec ecx
add ecx, esi
push ecx
call ebp
add esp, 8
mov edi, esi
or ecx, 0xffffffff
xor eax, eax
push 0x504a18
repne scasb al, byte es:[edi]
not ecx
dec ecx
add ecx, esi
push ecx
call ebp
mov ecx, dword [0x655b64]
push str.UK.1
push ecx
lea edx, [esp + 0x1c0]
push 0x504a08
push edx
call ebp
add esp, 0x18
lea eax, [esp + 0x1b0]
push ebx
push eax
call dword [sym.imp.KERNEL32.dll__lopen]
mov ebx, eax
cmp ebx, 0xffffffff
je 0x448a6c
mov edi, esi
or ecx, 0xffffffff
xor eax, eax
push str._nE_Mail:_languages_dial.pipex.com__Web:_concept_software.com
repne scasb al, byte es:[edi]
not ecx
dec ecx
add ecx, esi
push ecx
call ebp
add esp, 8
push ebx
call dword [sym.imp.KERNEL32.dll__lclose]
pop edi
pop esi
pop ebp
pop ebx
add esp, 0x8e4
ret
mov edi, esi
or ecx, 0xffffffff
xor eax, eax
push str._n____E_Mail:_ez007_mail.com_:_http:__urdusoft.webjump.com
repne scasb al, byte es:[edi]
not ecx
dec ecx
add ecx, esi
push ecx
call ebp
add esp, 8
pop edi
pop esi
pop ebp
pop ebx
add esp, 0x8e4
ret