Function at 0x418872
Capabilities:
Query or enumerate registry value

Disassembly:
push ebp
sub esp, 0x104
lea ebp, [esp - 4]
mov eax, dword [0x4fc5b0]
xor eax, ebp
mov dword [ebp + 0x104], eax
push 0x54
mov eax, 0x4bb71b
call fcn.00492516
mov eax, dword [ebp + 0x118]
mov esi, dword [ebp + 0x114]
mov edi, dword [ebp + 0x110]
mov dword [ebp - 0x20], eax
mov eax, dword [ebp + 0x11c]
push str.SoftwareRealNetworks_
lea ecx, [ebp - 0x44]
mov dword [ebp - 0x30], esi
mov dword [ebp - 0x14], eax
call fcn.00470680
xor ebx, ebx
push esi
lea ecx, [ebp - 0x44]
mov dword [ebp - 4], ebx
call fcn.00470ae0
push 0x4cfb78
lea ecx, [ebp - 0x44]
call fcn.00470ae0
push 0x103
lea eax, [ebp + 1]
push ebx
push eax
mov dword [ebp - 0x58], 0x104
mov byte [ebp], bl
call fcn.00491e90
add esp, 0xc
cmp byte [ebp - 0x3d], 0xff
lea eax, [ebp - 0x44]
jne 0x418907
mov eax, dword [ebp - 0x44]
lea ecx, [ebp - 0x58]
push ecx
lea ecx, [ebp]
push ecx
push eax
push edi
call dword [sym.imp.ADVAPI32.dll_RegQueryValueA]
cmp eax, ebx
jne 0x418998
cmp dword [ebp - 0x58], ebx
jle 0x418998
push dword [ebp - 0x20]
lea eax, [ebp]
push eax
lea eax, [ebp - 0x34]
push esi
push eax
call fcn.0040dd32
add esp, 0x10
cmp byte [ebp - 0x2d], 0xff
mov byte [ebp - 4], 1
lea eax, [ebp - 0x34]
jne 0x418944
mov eax, dword [ebp - 0x34]
push 1
push dword [ebp + 0x120]
push dword [ebp - 0x14]
push ebx
push eax
push edi
call fcn.00412ffa
add esp, 0x18
mov esi, eax
lea ecx, [ebp - 0x34]
mov byte [ebp - 4], bl
call fcn.00470660
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x44]
call fcn.00470660
mov eax, esi
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov ecx, dword [ebp + 0x104]
xor ecx, ebp
call fcn.00492093
add ebp, 0x108
leave
ret
lea ecx, [ebp - 0x2c]
call fcn.004703d0
push str.installerpkgversion
lea ecx, [ebp - 0x3c]
mov byte [ebp - 4], 2
call fcn.00470680
push 0x4d02f4
lea ecx, [ebp - 0x1c]
mov byte [ebp - 4], 3
call fcn.00470680
push ecx
push ecx
mov ecx, esp
mov dword [ebp - 0x48], esp
push 0x4d0330
mov byte [ebp - 4], 4
call fcn.00470680
lea eax, [ebp - 0x2c]
push eax
lea eax, [ebp - 0x3c]
push eax
lea eax, [ebp - 0x1c]
push eax
call fcn.00417de0
add esp, 0x14
lea ecx, [ebp - 0x1c]
mov byte [ebp - 4], 3
call fcn.00470660
lea ecx, [ebp - 0x3c]
mov byte [ebp - 4], 2
call fcn.00470660
push 4
lea eax, [ebp - 0x54]
push eax
lea ecx, [ebp - 0x2c]
call fcn.00470e50
cmp byte [ebp - 0x4d], 0xff
mov byte [ebp - 4], 5
lea eax, [ebp - 0x54]
jne 0x418a21
mov eax, dword [ebp - 0x54]
push dword [ebp - 0x20]
push eax
lea eax, [ebp - 0x4c]
push esi
push eax
call fcn.0040dd32
add esp, 0x10
cmp byte [ebp - 0x45], 0xff
mov byte [ebp - 4], 6
lea eax, [ebp - 0x4c]
jne 0x418a42
mov eax, dword [ebp - 0x4c]
xor esi, esi
inc esi
push esi
push dword [ebp + 0x120]
push dword [ebp - 0x14]
push ebx
push eax
push edi
call fcn.00412ffa
add esp, 0x18
mov byte [ebp - 4], 5
lea ecx, [ebp - 0x4c]
cmp eax, ebx
je 0x418a7e
call fcn.00470660
lea ecx, [ebp - 0x54]
mov byte [ebp - 4], 2
call fcn.00470660
lea ecx, [ebp - 0x2c]
jmp 0x41895f
call fcn.00470660
lea ecx, [ebp - 0x54]
mov byte [ebp - 4], 2
call fcn.00470660
push 3
lea eax, [ebp - 0x1c]
push eax
lea ecx, [ebp - 0x2c]
call fcn.00470e50
push 0x4d032c
push eax
mov byte [ebp - 4], 7
call fcn.0040d567
pop ecx
pop ecx
lea ecx, [ebp - 0x1c]
mov byte [ebp - 0xd], al
mov byte [ebp - 4], 2
call fcn.00470660
cmp byte [ebp - 0xd], bl
je 0x418b08
push dword [ebp - 0x20]
lea eax, [ebp - 0x24]
push str.17.0
push dword [ebp - 0x30]
push eax
call fcn.0040dd32
add esp, 0x10
cmp byte [ebp - 0x1d], 0xff
mov byte [ebp - 4], 8
lea eax, [ebp - 0x24]
jne 0x418ae9
mov eax, dword [ebp - 0x24]
push esi
push dword [ebp + 0x120]
push dword [ebp - 0x14]
push ebx
push eax
push edi
call fcn.00412ffa
add esp, 0x18
mov esi, eax
lea ecx, [ebp - 0x24]
jmp 0x418a6d
push 3
lea eax, [ebp - 0x1c]
push eax
lea ecx, [ebp - 0x2c]
call fcn.00470e50
push 0x4d0328
push eax
mov byte [ebp - 4], 9
call fcn.0040d567
pop ecx
pop ecx
lea ecx, [ebp - 0x1c]
mov byte [ebp - 0xd], al
mov byte [ebp - 4], 2
call fcn.00470660
cmp byte [ebp - 0xd], bl
je 0x418b81
push dword [ebp - 0x20]
lea eax, [ebp - 0x60]
push str.12.0
push dword [ebp - 0x30]
push eax
call fcn.0040dd32
add esp, 0x10
cmp byte [ebp - 0x59], 0xff
mov byte [ebp - 4], 0xa
lea eax, [ebp - 0x60]
jne 0x418b62
mov eax, dword [ebp - 0x60]
push esi
push dword [ebp + 0x120]
push dword [ebp - 0x14]
push ebx
push eax
push edi
call fcn.00412ffa
add esp, 0x18
mov esi, eax
lea ecx, [ebp - 0x60]
jmp 0x418a6d
push 4
lea eax, [ebp - 0x1c]
push eax
lea ecx, [ebp - 0x2c]
call fcn.00470e50
cmp byte [ebp - 0x15], 0xff
mov byte [ebp - 4], 0xb
lea eax, [ebp - 0x1c]
jne 0x418b9f
mov eax, dword [ebp - 0x1c]
push dword [ebp - 0x20]
push eax
push dword [ebp - 0x30]
lea eax, [ebp - 0x3c]
push eax
call fcn.0040dd32
add esp, 0x10
cmp byte [ebp - 0x35], 0xff
mov byte [ebp - 4], 0xc
lea eax, [ebp - 0x3c]
jne 0x418bc2
mov eax, dword [ebp - 0x3c]
push esi
push dword [ebp + 0x120]
push dword [ebp - 0x14]
push ebx
push eax
push edi
call fcn.00412ffa
add esp, 0x18
lea ecx, [ebp - 0x3c]
mov esi, eax
mov byte [ebp - 4], 0xb
call fcn.00470660
lea ecx, [ebp - 0x1c]
jmp 0x418a6d