Function at 0x4daaa0
Capabilities:
Set registry value

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x54ae37
mov eax, dword fs:[0]
push eax
sub esp, 0x15c
mov eax, dword [0x595c60]
xor eax, ebp
mov dword [ebp - 0x14], eax
push ebx
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov dword [ebp - 0x10], esp
mov edi, ecx
mov eax, dword [0x59e598]
mov dword [ebp - 0x34], edi
test al, 1
jne 0x4dab07
or eax, 1
mov dword [0x59e598], eax
mov dword [ebp - 4], 0
call fcn.004a08c0
push 0x54e860
call fcn.0050765d
add esp, 4
mov dword [ebp - 4], 0xffffffff
mov eax, dword [0x596f88]
test byte [eax + 0x1c], 2
je 0x4dab1c
cmp byte [eax + 0x19], 6
jb 0x4dab1c
mov al, 1
jmp 0x4dab1e
xor al, al
cmp byte [0x59e5a8], 0
jne 0x4dab38
cmp byte [0x59e5a9], 0
jne 0x4dab38
test al, al
je 0x4dac7c
sub esp, 8
mov dword [ebp - 4], 1
lea ecx, [ebp - 0xd0]
call fcn.0047b550
lea ecx, [ebp - 0x2c]
mov byte [ebp - 4], 2
call fcn.004a0cb0
mov edx, eax
mov byte [ebp - 4], 3
lea ecx, [ebp - 0xd0]
call fcn.0047eed0
mov edx, str.._telemetry.cpp
mov ecx, eax
call fcn.0047f130
mov edx, 0x56a378
mov ecx, eax
call fcn.0047f130
push 0xf3
mov ecx, eax
call fcn.0047b1b0
mov edx, 0x56a378
mov ecx, eax
call fcn.0047f130
mov edx, str.Setting_install_count
mov ecx, eax
call fcn.0047f130
push dword [edi + 0xc]
mov ecx, eax
call fcn.0047b350
mov edx, str._for_version
mov ecx, eax
call fcn.0047f130
lea edx, [edi + 0x4c]
mov ecx, eax
call fcn.004a0d80
mov byte [ebp - 4], 2
cmp dword [ebp - 0x18], 0x10
jb 0x4dabe0
mov eax, dword [ebp - 0x2c]
test eax, eax
je 0x4dabe0
push eax
call fcn.005074d4
add esp, 4
lea eax, [ebp - 0x2c]
push eax
lea ecx, [ebp - 0xd0]
call fcn.0047b6a0
mov esi, eax
mov byte [ebp - 4], 4
cmp dword [esi + 0x14], 0x10
jb 0x4dabfd
mov esi, dword [esi]
mov eax, dword [0x59e598]
test al, 1
jne 0x4dac28
or eax, 1
mov dword [0x59e598], eax
mov byte [ebp - 4], 5
call fcn.004a08c0
push 0x54e860
call fcn.0050765d
add esp, 4
mov byte [ebp - 4], 4
push esi
push 6
mov ecx, 0x59e5a8
call fcn.004a0b40
cmp dword [ebp - 0x18], 0x10
jb 0x4dac4b
mov eax, dword [ebp - 0x2c]
test eax, eax
je 0x4dac4b
push eax
call fcn.005074d4
add esp, 4
lea ecx, [ebp - 0x80]
mov byte [ebp - 4], 1
call fcn.0047b620
lea eax, [ebp - 0x80]
mov dword [ebp - 0x80], 0x56a6f8
push eax
call fcn.0052889f
add esp, 4
jmp 0x4dac75
mov dword [ebp - 4], 0xffffffff
lea eax, [ebp - 0x30]
push eax
push 0x20006
push 0
push 0x56c0e0
push reloc.OLEAUT32.dll_SysReAllocString
call dword [sym.imp.ADVAPI32.dll_RegOpenKeyExW]
test eax, eax
jne 0x4dae5e
cmp dword [edi + 0x60], 8
lea esi, [edi + 0x4c]
jb 0x4dacac
mov eax, dword [esi]
jmp 0x4dacae
mov eax, esi
push 4
add edi, 0xc
push edi
push 0
push 0
push eax
push dword [ebp - 0x30]
call dword [sym.imp.ADVAPI32.dll_RegSetValueExW]
test eax, eax
je 0x4dae33
mov eax, dword [0x59e598]
test al, 1
jne 0x4dacfb
or eax, 1
mov dword [0x59e598], eax
mov dword [ebp - 4], 7
call fcn.004a08c0
push 0x54e860
call fcn.0050765d
add esp, 4
mov dword [ebp - 4], 0xffffffff
mov eax, dword [0x596f88]
test byte [eax + 0x1c], 2
je 0x4dad10
cmp byte [eax + 0x19], 6
jb 0x4dad10
mov al, 1
jmp 0x4dad12
xor al, al
cmp byte [0x59e5a8], 0
jne 0x4dad2c
cmp byte [0x59e5a9], 0
jne 0x4dad2c
test al, al
je 0x4dae33
sub esp, 8
mov dword [ebp - 4], 8
lea ecx, [ebp - 0xd0]
call fcn.0047b550
lea ecx, [ebp - 0x2c]
mov byte [ebp - 4], 9
call fcn.004a0cb0
mov edx, eax
mov byte [ebp - 4], 0xa
lea ecx, [ebp - 0xd0]
call fcn.0047eed0
mov edx, str.._telemetry.cpp
mov ecx, eax
call fcn.0047f130
mov edx, 0x56a378
mov ecx, eax
call fcn.0047f130
push 0xf9
mov ecx, eax
call fcn.0047b1b0
mov edx, 0x56a378
mov ecx, eax
call fcn.0047f130
mov edx, str.Failed_to_write_install_count
mov ecx, eax
call fcn.0047f130
push dword [edi]
mov ecx, eax
call fcn.0047b350
mov edx, str._for_version
mov ecx, eax
call fcn.0047f130
mov edx, esi
mov ecx, eax
call fcn.004a0d80
mov byte [ebp - 4], 9
cmp dword [ebp - 0x18], 0x10
jb 0x4dadd2
mov eax, dword [ebp - 0x2c]
test eax, eax
je 0x4dadd2
push eax
call fcn.005074d4
add esp, 4
lea eax, [ebp - 0x2c]
push eax
lea ecx, [ebp - 0xd0]
call fcn.0047b6a0
mov esi, eax
mov byte [ebp - 4], 0xb
cmp dword [esi + 0x14], 0x10
jb 0x4dadef
mov esi, dword [esi]
call fcn.004a0950
push esi
push 6
mov ecx, eax
call fcn.004a0b40
cmp dword [ebp - 0x18], 0x10
jb 0x4dae14
mov eax, dword [ebp - 0x2c]
test eax, eax
je 0x4dae14
push eax
call fcn.005074d4
add esp, 4
lea ecx, [ebp - 0x80]
mov byte [ebp - 4], 8
call fcn.0047b620
lea eax, [ebp - 0x80]
mov dword [ebp - 0x80], 0x56a6f8
push eax
call fcn.0052889f
add esp, 4
push dword [ebp - 0x30]
call dword [sym.imp.ADVAPI32.dll_RegCloseKey]
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 0x14]
xor ecx, ebp
call fcn.00506c7d
mov esp, ebp
pop ebp
ret
mov eax, dword [0x59e598]
test al, 1
jne 0x4dae8f
or eax, 1
mov dword [0x59e598], eax
mov dword [ebp - 4], 0xd
call fcn.004a08c0
push 0x54e860
call fcn.0050765d
add esp, 4
mov dword [ebp - 4], 0xffffffff
mov eax, dword [0x596f88]
test byte [eax + 0x1c], 2
je 0x4daea4
cmp byte [eax + 0x19], 6
jb 0x4daea4
mov al, 1
jmp 0x4daea6
xor al, al
cmp byte [0x59e5a8], 0
jne 0x4daebc
cmp byte [0x59e5a9], 0
jne 0x4daebc
test al, al
je 0x4dae3c
sub esp, 8
mov dword [ebp - 4], 0xe
lea ecx, [ebp - 0x168]
call fcn.0047b550
lea ecx, [ebp - 0x2c]
mov byte [ebp - 4], 0xf
call fcn.004a0cb0
mov edx, eax
mov byte [ebp - 4], 0x10
lea ecx, [ebp - 0x168]
call fcn.0047eed0
mov edx, str.._telemetry.cpp
mov ecx, eax
call fcn.0047f130
mov edx, 0x56a378
mov ecx, eax
call fcn.0047f130
push 0x100
mov ecx, eax
call fcn.0047b1b0
mov edx, 0x56a378
mov ecx, eax
call fcn.0047f130
mov edx, str.Failed_to_open_reg_key
mov ecx, eax
call fcn.0047f130
mov edx, 0x56c0e0
mov ecx, eax
call fcn.004a0e50
mov byte [ebp - 4], 0xf
cmp dword [ebp - 0x18], 0x10
jb 0x4daf50
mov eax, dword [ebp - 0x2c]
test eax, eax
je 0x4daf50
push eax
call fcn.005074d4
add esp, 4
lea eax, [ebp - 0x2c]
push eax
lea ecx, [ebp - 0x168]
call fcn.0047b6a0
mov esi, eax
mov byte [ebp - 4], 0x11
cmp dword [esi + 0x14], 0x10
jb 0x4daf6d
mov esi, dword [esi]
mov eax, dword [0x59e598]
test al, 1
jne 0x4daf98
or eax, 1
mov dword [0x59e598], eax
mov byte [ebp - 4], 0x12
call fcn.004a08c0
push 0x54e860
call fcn.0050765d
add esp, 4
mov byte [ebp - 4], 0x11
push esi
push 6
mov ecx, 0x59e5a8
call fcn.004a0b40
cmp dword [ebp - 0x18], 0x10
jb 0x4dafbb
mov eax, dword [ebp - 0x2c]
test eax, eax
je 0x4dafbb
push eax
call fcn.005074d4
add esp, 4
lea ecx, [ebp - 0x118]
mov dword [ebp - 0x18], 0xf
mov dword [ebp - 0x1c], 0
mov byte [ebp - 0x2c], 0
mov byte [ebp - 4], 0xe
call fcn.0047b620
lea eax, [ebp - 0x118]
mov dword [ebp - 0x118], 0x56a6f8
push eax
call fcn.0052889f
add esp, 4
jmp 0x4dae3c