Function at 0x461df0
Capabilities:
Link many functions at runtime
Query or enumerate registry value

Disassembly:
push 0xffffffffffffffff
push 0x4c8c62
mov eax, dword fs:[0]
push eax
sub esp, 0x290
mov eax, dword [0x50b384]
xor eax, esp
mov dword [esp + 0x28c], eax
push ebx
push ebp
push esi
push edi
mov eax, dword [0x50b384]
xor eax, esp
push eax
lea eax, [esp + 0x2a4]
mov dword fs:[0], eax
mov eax, dword [0x50dd18]
xor ebx, ebx
mov ebp, ecx
mov byte [esp + 0x17], bl
cmp eax, ebx
je 0x461e42
mov al, byte [eax + 0x31]
mov byte [ebp + 0x18], al
push 0x2d
xor eax, eax
mov edi, 7
push str.SoftwareAdobeRepairAcrobat_Reader10.0IOD
lea ecx, [esp + 0x80]
mov dword [esp + 0x98], edi
mov dword [esp + 0x94], ebx
mov word [esp + 0x84], ax
call fcn.00401ce4
xor ecx, ecx
push 0x30
mov word [esp + 0x64], cx
push str.SoftwareAdobeAcrobat_Reader10.0InstallerIOD
lea ecx, [esp + 0x64]
mov dword [esp + 0x2b4], ebx
mov dword [esp + 0x7c], edi
mov dword [esp + 0x78], ebx
call fcn.00401ce4
mov byte [esp + 0x2ac], 1
cmp byte [ebp + 0x18], bl
je 0x461ff1
push 0xd
xor edx, edx
push str.Adobe_Acrobat
lea ecx, [esp + 0x44]
mov dword [esp + 0x5c], edi
mov dword [esp + 0x58], ebx
mov word [esp + 0x48], dx
call fcn.00401ce4
push 0xe
xor eax, eax
push str.Acrobat_Reader
lea ecx, [esp + 0x24]
mov byte [esp + 0x2b4], 2
mov dword [esp + 0x3c], edi
mov dword [esp + 0x38], ebx
mov word [esp + 0x28], ax
call fcn.00401ce4
lea ecx, [esp + 0x3c]
push ecx
lea edx, [esp + 0x20]
push edx
lea eax, [esp + 0x80]
push ebx
push eax
mov byte [esp + 0x2bc], 3
call fcn.00445ae0
mov esi, 8
add esp, 0x10
cmp dword [esp + 0x34], esi
jb 0x461f2a
mov ecx, dword [esp + 0x20]
push ecx
call fcn.0048e976
add esp, 4
xor edx, edx
mov dword [esp + 0x34], edi
mov dword [esp + 0x30], ebx
mov word [esp + 0x20], dx
mov byte [esp + 0x2ac], 1
cmp dword [esp + 0x54], esi
jb 0x461f54
mov eax, dword [esp + 0x40]
push eax
call fcn.0048e976
add esp, 4
xor ecx, ecx
push 0xd
mov word [esp + 0x44], cx
push str.Adobe_Acrobat
lea ecx, [esp + 0x44]
mov dword [esp + 0x5c], edi
mov dword [esp + 0x58], ebx
call fcn.00401ce4
push 0xe
xor edx, edx
push str.Acrobat_Reader
lea ecx, [esp + 0x24]
mov byte [esp + 0x2b4], 4
mov dword [esp + 0x3c], edi
mov dword [esp + 0x38], ebx
mov word [esp + 0x28], dx
call fcn.00401ce4
lea eax, [esp + 0x3c]
push eax
lea ecx, [esp + 0x20]
push ecx
lea edx, [esp + 0x64]
push ebx
push edx
mov byte [esp + 0x2bc], 5
call fcn.00445ae0
add esp, 0x10
cmp dword [esp + 0x34], esi
jb 0x461fcd
mov eax, dword [esp + 0x20]
push eax
call fcn.0048e976
add esp, 4
xor ecx, ecx
mov dword [esp + 0x34], edi
mov dword [esp + 0x30], ebx
mov word [esp + 0x20], cx
cmp dword [esp + 0x54], esi
jb 0x461ff6
mov edx, dword [esp + 0x40]
push edx
call fcn.0048e976
add esp, 4
jmp 0x461ff6
mov esi, 8
mov eax, dword [esp + 0x7c]
cmp dword [esp + 0x90], esi
jae 0x462007
lea eax, [esp + 0x7c]
mov esi, dword [sym.imp.ADVAPI32.dll_RegOpenKeyExW]
lea ecx, [esp + 0x18]
push ecx
push 0x20019
push ebx
push eax
push reloc.OLEAUT32.dll_SysReAllocString
call esi
test eax, eax
je 0x46204e
cmp dword [esp + 0x74], 8
mov eax, dword [esp + 0x60]
jae 0x462033
lea eax, [esp + 0x60]
lea edx, [esp + 0x18]
push edx
push 0x20019
push ebx
push eax
push reloc.OLEAUT32.dll_SysReAllocString
call esi
test eax, eax
jne 0x462113
push 0x20a
lea eax, [esp + 0x98]
push ebx
push eax
call fcn.0048f0d0
add esp, 0xc
lea ecx, [esp + 0x38]
push ecx
mov ecx, dword [esp + 0x1c]
lea edx, [esp + 0x98]
push edx
lea eax, [esp + 0x60]
push eax
push ebx
push str.Library
push ecx
mov dword [esp + 0x50], 0x20a
mov dword [esp + 0x70], ebx
call dword [sym.imp.ADVAPI32.dll_RegQueryValueExW]
test eax, eax
jne 0x462108
lea edx, [esp + 0x94]
push edx
call dword [sym.imp.KERNEL32.dll_LoadLibraryW]
mov esi, eax
cmp esi, ebx
je 0x462108
mov edi, dword [sym.imp.KERNEL32.dll_GetProcAddress]
push str.MaintenanceRepair
push esi
call edi
mov dword [ebp], eax
cmp byte [ebp + 0x18], bl
je 0x4620f8
push str.AddJapaneseLanguageSupport
push esi
call edi
push str.AddChineseTLanguageSupport
push esi
mov dword [ebp + 4], eax
call edi
push str.AddChineseSLanguageSupport
push esi
mov dword [ebp + 8], eax
call edi
push str.AddKoreanLanguageSupport
push esi
mov dword [ebp + 0xc], eax
call edi
push str.AddExtendedLanguageSupport
push esi
mov dword [ebp + 0x10], eax
call edi
mov dword [ebp + 0x14], eax
mov ecx, ebp
call fcn.00461d80
mov byte [esp + 0x17], al
mov edi, 7
mov eax, dword [esp + 0x18]
push eax
call dword [sym.imp.ADVAPI32.dll_RegCloseKey]
mov esi, 8
cmp dword [esp + 0x74], esi
jb 0x46212b
mov ecx, dword [esp + 0x60]
push ecx
call fcn.0048e976
add esp, 4
xor edx, edx
mov dword [esp + 0x74], edi
mov dword [esp + 0x70], ebx
mov word [esp + 0x60], dx
cmp dword [esp + 0x90], esi
jb 0x462150
mov eax, dword [esp + 0x7c]
push eax
call fcn.0048e976
add esp, 4
mov al, byte [esp + 0x17]
mov ecx, dword [esp + 0x2a4]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebp
pop ebx
mov ecx, dword [esp + 0x28c]
xor ecx, esp
call fcn.0048ebcd
add esp, 0x29c
ret