Function at 0x4b6fd0
Capabilities:
Create process on windows
Query or enumerate registry value

Disassembly:
sub esp, 0x160
mov eax, dword [0x5bd254]
xor eax, esp
mov dword [esp + 0x15c], eax
mov eax, dword [esp + 0x170]
push ebx
mov ebx, dword [esp + 0x168]
push esi
mov esi, dword [esp + 0x170]
push edi
mov edi, dword [esp + 0x178]
push eax
push edi
push esi
push ebx
call sym.convertifd.exe_IpQHelp
add esp, 0x10
test eax, eax
jne 0x4b72fa
mov eax, esi
sub eax, 0x110
je 0x4b7075
sub eax, 1
jne 0x4b7047
movzx eax, di
test eax, eax
jle 0x4b7047
cmp eax, 2
jle 0x4b704e
cmp eax, 0x2214
jne 0x4b7047
mov ecx, dword [0x60728c]
push 5
push ecx
call dword [sym.imp.KERNEL32.dll_WinExec]
xor eax, eax
jmp 0x4b72ff
mov edx, dword [0x60728c]
push edx
call fcn.00513a0e
add esp, 4
push 1
push ebx
mov dword [0x60728c], 0
call dword [sym.imp.USER32.dll_EndDialog]
jmp 0x4b72fa
cmp dword [0x6a2918], 0
je 0x4b7091
push 0x1901
push str.JavPrint.dll
push ebx
call sym.convertifd.exe_IpSetVersionInfo
add esp, 0xc
lea eax, [esp + 0xc]
push eax
push 1
push 0
push str.SOFTWAREMicrosoftShared_ToolsMSInfo
push reloc.JFTIFF32.dll_Ordinal_2
call dword [sym.imp.ADVAPI32.dll_RegOpenKeyExA]
mov esi, eax
test esi, esi
jne 0x4b70ff
mov ecx, dword [0x60728c]
push ecx
mov dword [esp + 0x14], 0x104
call fcn.00513a0e
push 0x104
call fcn.00513aeb
mov ecx, dword [esp + 0x14]
add esp, 8
lea edx, [esp + 0x10]
push edx
push eax
mov dword [0x60728c], eax
lea eax, [esp + 0x1c]
push eax
push esi
push str.Path
push ecx
call dword [sym.imp.ADVAPI32.dll_RegQueryValueExA]
mov edx, dword [esp + 0xc]
push edx
mov esi, eax
call dword [sym.imp.ADVAPI32.dll_RegCloseKey]
xor eax, eax
test esi, esi
sete al
push eax
push 0x2214
push ebx
call dword [sym.imp.USER32.dll_GetDlgItem]
push eax
call dword [sym.imp.USER32.dll_EnableWindow]
push 0x580cbb
push 0x80
lea ecx, [esp + 0xa0]
push ecx
push 0x580cbb
push str.User
push 0x580cbb
call sym.convertifd.exe_JfGetPrivateProfileString
push 0x580cbb
push 0x80
lea edx, [esp + 0x20]
push edx
push 0x580cbb
push str.Company
push 0x580cbb
call sym.convertifd.exe_JfGetPrivateProfileString
lea eax, [esp + 0x98]
add eax, 0xffffffff
lea ecx, [ecx]
mov cl, byte [eax + 1]
add eax, 1
test cl, cl
jne 0x4b7170
mov cx, word [0x58251c]
mov dl, byte [0x58251e]
mov word [eax], cx
mov byte [eax + 2], dl
lea eax, [esp + 0x18]
mov edx, eax
mov cl, byte [eax]
add eax, 1
test cl, cl
jne 0x4b7193
lea edi, [esp + 0x98]
sub eax, edx
add edi, 0xffffffff
mov cl, byte [edi + 1]
add edi, 1
test cl, cl
jne 0x4b71a8
mov ecx, eax
shr ecx, 2
mov esi, edx
rep movsd dword es:[edi], dword [esi]
mov ecx, eax
and ecx, 3
cmp dword [0x6a2a4c], 1
rep movsb byte es:[edi], byte [esi]
jne 0x4b7229
cmp dword [0x6a2a40], 1
jne 0x4b71fe
mov eax, dword [0x6a2a54]
mov ecx, dword [0x6a2a50]
push eax
push ecx
push 0x1902
call sym.convertifd.exe_IpGMessage
add esp, 4
push eax
lea edx, [esp + 0x24]
push edx
call fcn.005135ca
add esp, 0x10
jmp 0x4b724c
mov eax, dword [0x6a2a58]
push eax
sub eax, 1
neg eax
sbb eax, eax
add eax, 0x1903
push eax
call sym.convertifd.exe_IpGMessage
add esp, 4
push eax
lea eax, [esp + 0x20]
push eax
call fcn.005135ca
add esp, 0xc
jmp 0x4b724c
push 0x580cbb
push 0x80
lea ecx, [esp + 0x20]
push ecx
push 0x580cbb
push str.Serial
push 0x580cbb
call sym.convertifd.exe_JfGetPrivateProfileString
lea eax, [esp + 0x98]
add eax, 0xffffffff
mov cl, byte [eax + 1]
add eax, 1
test cl, cl
jne 0x4b7256
mov dx, word [0x58251c]
mov cl, byte [0x58251e]
mov word [eax], dx
mov byte [eax + 2], cl
lea eax, [esp + 0x18]
mov edx, eax
lea esp, [esp]
mov cl, byte [eax]
add eax, 1
test cl, cl
jne 0x4b7280
lea edi, [esp + 0x98]
sub eax, edx
add edi, 0xffffffff
mov cl, byte [edi + 1]
add edi, 1
test cl, cl
jne 0x4b7295
mov ecx, eax
shr ecx, 2
mov esi, edx
rep movsd dword es:[edi], dword [esi]
lea edx, [esp + 0x98]
mov ecx, eax
push edx
and ecx, 3
push 0x24af
rep movsb byte es:[edi], byte [esi]
mov esi, dword [sym.imp.USER32.dll_SetDlgItemTextA]
push ebx
call esi
push ebx
call sym.convertifd.exe_CenterDialog
mov eax, dword [0x607288]
add esp, 4
test eax, eax
je 0x4b72fa
lea ecx, [esp + 0x118]
push ecx
push 0x50
call eax
add esp, 8
test eax, eax
je 0x4b72fa
lea edx, [esp + 0x118]
push edx
push 0x26f5
push ebx
call esi
mov eax, 1
mov ecx, dword [esp + 0x168]
pop edi
pop esi
pop ebx
xor ecx, esp
call fcn.00511a80
add esp, 0x160
ret 0x10