Function at 0x404b10
Capabilities:
Query or enumerate registry value

Disassembly:
push ebp
mov ebp, esp
mov eax, 0x1018
call fcn.0054a430
mov eax, dword [0x5dbcc8]
xor eax, ebp
mov dword [ebp - 8], eax
mov eax, dword [ebp + 8]
push ebx
push esi
push edi
xor ebx, ebx
push 0x3ff
lea ecx, [ebp - 0x40b]
push ebx
push ecx
mov dword [ebp - 0x1018], eax
mov byte [ebp - 0x40c], bl
call fcn.00549e40
add esp, 0xc
test byte [0x5ee524], 1
jne 0x404b77
or dword [0x5ee524], 1
mov esi, 0x5ecd20
call fcn.00402150
push 0x578270
call fcn.00547602
add esp, 4
push 0x3ff
lea edx, [ebp - 0xc0b]
push ebx
push edx
mov byte [ebp - 0xc0c], bl
call fcn.00549e40
mov eax, dword [0x5edd20]
push 0x5edd24
push eax
push 0x5ed920
lea ecx, [ebp - 0x40c]
push str._s__lu__s
push ecx
call fcn.00546876
add esp, 0x20
mov dword [ebp - 0x1014], 0x400
mov ecx, 0x5a4fc6
mov eax, 0x5e4820
mov dl, byte [eax]
cmp dl, byte [ecx]
jne 0x404be7
cmp dl, bl
je 0x404be3
mov dl, byte [eax + 1]
cmp dl, byte [ecx + 1]
jne 0x404be7
add eax, 2
add ecx, 2
cmp dl, bl
jne 0x404bc7
xor eax, eax
jmp 0x404bec
sbb eax, eax
sbb eax, 0xffffffff
cmp eax, ebx
jne 0x404c9b
lea edx, [ebp - 0x1010]
push edx
push 1
push ebx
push str.SoftwareMicrosoftWindowsCurrentVersionApp_Paths1905Key.exe
push reloc.OLEAUT32.dll_SysReAllocString
call dword [sym.imp.ADVAPI32.dll_RegOpenKeyExA]
test eax, eax
jne 0x404c79
mov ecx, dword [ebp - 0x1010]
lea eax, [ebp - 0x1014]
push eax
push 0x5e4820
push ebx
push ebx
push 0x5a50e8
push ecx
call dword [sym.imp.ADVAPI32.dll_RegQueryValueExA]
test eax, eax
jne 0x404c79
mov edx, dword [ebp - 0x1010]
push edx
call dword [sym.imp.ADVAPI32.dll_RegCloseKey]
mov ecx, 0x5a4fc6
mov eax, 0x5e4820
lea ecx, [ecx]
mov dl, byte [eax]
cmp dl, byte [ecx]
jne 0x404c70
cmp dl, bl
je 0x404c6c
mov dl, byte [eax + 1]
cmp dl, byte [ecx + 1]
jne 0x404c70
add eax, 2
add ecx, 2
cmp dl, bl
jne 0x404c50
xor eax, eax
jmp 0x404c75
sbb eax, eax
sbb eax, 0xffffffff
cmp eax, ebx
jne 0x404c9b
mov eax, dword [str.19050000]
mov ecx, dword [0x5a5134]
mov dl, byte [0x5a5138]
mov dword [0x5e4820], eax
mov dword [0x5e4824], ecx
mov byte [0x5e4828], dl
push 0x5a5024
lea eax, [ebp - 0xc0c]
push str.1700__s_20150615001
push eax
call fcn.00546876
add esp, 0xc
mov ecx, 0x5a4fc6
mov eax, 0x5e4c20
mov edi, edi
mov dl, byte [eax]
cmp dl, byte [ecx]
jne 0x404ce0
cmp dl, bl
je 0x404cdc
mov dl, byte [eax + 1]
cmp dl, byte [ecx + 1]
jne 0x404ce0
add eax, 2
add ecx, 2
cmp dl, bl
jne 0x404cc0
xor eax, eax
jmp 0x404ce5
sbb eax, eax
sbb eax, 0xffffffff
cmp eax, ebx
jne 0x404d76
push 0x3ff
lea ecx, [ebp - 0x100b]
push ebx
push ecx
mov byte [ebp - 0x100c], bl
call fcn.00549e40
push 0x3ff
lea edx, [ebp - 0x80b]
push ebx
push edx
mov byte [ebp - 0x80c], bl
call fcn.00549e40
lea eax, [ebp - 0x40c]
push eax
lea ecx, [ebp - 0x80c]
push str._sm1905_2014
push ecx
call fcn.00546876
add esp, 0x24
lea edi, [ebp - 0x100c]
lea ecx, [ebp - 0x80c]
call fcn.00404470
xor esi, esi
jmp 0x404d50
movzx edx, byte [ebp + esi - 0x100c]
push edx
push 0x5e4c20
push str._s_02X
push 0x5e4c20
call fcn.00546876
inc esi
add esp, 0x10
cmp esi, 0x10
jl 0x404d50
mov edx, dword [ebp - 0x1018]
push 0x5e4c20
push 0x5ee124
lea eax, [ebp - 0xc0c]
push eax
push 0x5e4820
lea ecx, [ebp - 0x40c]
push ecx
push str.uid:_s_r_npid:_s_r_nver:_s_r_nsymtem:_s_r_npckey:_s_r_n
push edx
call fcn.00546876
mov ecx, dword [ebp - 8]
add esp, 0x1c
pop edi
pop esi
xor ecx, ebp
pop ebx
call fcn.00545eb2
mov esp, ebp
pop ebp
ret