Function at 0x4db7d0
Capabilities:
Query or enumerate registry value

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x54b719
mov eax, dword fs:[0]
push eax
sub esp, 0x374
mov eax, dword [0x596c60]
xor eax, ebp
mov dword [ebp - 0x14], eax
push ebx
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov dword [ebp - 0x10], esp
lea eax, [ebp - 0x23c]
mov dword [ebp - 0x240], ecx
push eax
push 0x20019
push 0
push 0x56d0e0
push reloc.OLEAUT32.dll_SysReAllocString
call dword [sym.imp.ADVAPI32.dll_RegOpenKeyExW]
test eax, eax
jne 0x4dbc39
xor edi, edi
xor ebx, ebx
mov dword [ebp - 0x234], edi
push 0
push 0
push 0
push 0
lea ecx, [ebp - 0x24c]
mov dword [ebp - 0x24c], 0xff
push ecx
lea ecx, [ebp - 0x218]
mov eax, ebx
push ecx
push eax
push dword [ebp - 0x23c]
inc ebx
mov dword [ebp - 0x248], ebx
call dword [sym.imp.ADVAPI32.dll_RegEnumValueW]
test eax, eax
jne 0x4dba83
mov dword [ebp - 0x238], eax
lea eax, [ebp - 0x244]
push eax
lea eax, [ebp - 0x238]
mov dword [ebp - 0x244], 4
push eax
push 0
push 0
lea eax, [ebp - 0x218]
push eax
push dword [ebp - 0x23c]
call dword [sym.imp.ADVAPI32.dll_RegQueryValueExW]
test eax, eax
je 0x4dba78
mov eax, dword [0x59f554]
test al, 1
jne 0x4db8e3
or eax, 1
mov dword [0x59f554], eax
mov dword [ebp - 4], 0
call fcn.004a1290
push 0x54f080
call fcn.00507cdd
add esp, 4
mov dword [ebp - 4], 0xffffffff
mov eax, dword [0x597f88]
test byte [eax + 0x1c], 2
je 0x4db8f8
cmp byte [eax + 0x19], 6
jb 0x4db8f8
mov al, 1
jmp 0x4db8fa
xor al, al
cmp byte [0x59f560], 0
jne 0x4db914
cmp byte [0x59f561], 0
jne 0x4db914
test al, al
je 0x4db837
sub esp, 8
mov dword [ebp - 4], 1
lea ecx, [ebp - 0x2e8]
call fcn.0047b4d0
lea ecx, [ebp - 0x230]
mov byte [ebp - 4], 2
call fcn.004a1680
mov edx, eax
mov byte [ebp - 4], 3
lea ecx, [ebp - 0x2e8]
call fcn.0047ee50
mov edx, str.._telemetry.cpp
mov ecx, eax
call fcn.0047f0b0
mov edx, 0x56b378
mov ecx, eax
call fcn.0047f0b0
push 0x119
mov ecx, eax
call fcn.0047b130
mov edx, 0x56b378
mov ecx, eax
call fcn.0047f0b0
mov edx, str.Failed_to_read_install_count_for_version
mov ecx, eax
call fcn.0047f0b0
lea edx, [ebp - 0x218]
mov ecx, eax
call fcn.004a1820
mov byte [ebp - 4], 2
cmp dword [ebp - 0x21c], 0x10
jb 0x4db9b2
mov eax, dword [ebp - 0x230]
test eax, eax
je 0x4db9b2
push eax
call fcn.00507b54
add esp, 4
lea eax, [ebp - 0x230]
push eax
lea ecx, [ebp - 0x2e8]
call fcn.0047b620
mov esi, eax
mov byte [ebp - 4], 4
cmp dword [esi + 0x14], 0x10
jb 0x4db9d2
mov esi, dword [esi]
mov eax, dword [0x59f554]
test al, 1
jne 0x4db9fd
or eax, 1
mov dword [0x59f554], eax
mov byte [ebp - 4], 5
call fcn.004a1290
push 0x54f080
call fcn.00507cdd
add esp, 4
mov byte [ebp - 4], 4
push esi
push 6
mov ecx, 0x59f560
call fcn.004a1510
cmp dword [ebp - 0x21c], 0x10
jb 0x4dba26
mov eax, dword [ebp - 0x230]
test eax, eax
je 0x4dba26
push eax
call fcn.00507b54
add esp, 4
lea ecx, [ebp - 0x298]
mov byte [ebp - 4], 1
call fcn.0047b5a0
lea eax, [ebp - 0x298]
mov dword [ebp - 0x298], 0x56b700
push eax
call fcn.00528f2f
add esp, 4
mov dword [ebp - 4], 0xffffffff
jmp 0x4db837
add edi, dword [ebp - 0x238]
jmp 0x4db831
test edi, edi
jne 0x4dbc0b
mov eax, dword [0x59f554]
test al, 1
jne 0x4dbabc
or eax, 1
mov dword [0x59f554], eax
mov dword [ebp - 4], 7
call fcn.004a1290
push 0x54f080
call fcn.00507cdd
add esp, 4
mov dword [ebp - 4], 0xffffffff
mov eax, dword [0x597f88]
test byte [eax + 0x1c], 2
je 0x4dbad1
cmp byte [eax + 0x19], 6
jb 0x4dbad1
mov al, 1
jmp 0x4dbad3
xor al, al
cmp byte [0x59f560], 0
jne 0x4dbaed
cmp byte [0x59f561], 0
jne 0x4dbaed
test al, al
je 0x4dbc0b
sub esp, 8
mov dword [ebp - 4], 8
lea ecx, [ebp - 0x2e8]
call fcn.0047b4d0
lea ecx, [ebp - 0x230]
mov byte [ebp - 4], 9
call fcn.004a1680
mov edx, eax
mov byte [ebp - 4], 0xa
lea ecx, [ebp - 0x2e8]
call fcn.0047ee50
mov edx, str.._telemetry.cpp
mov ecx, eax
call fcn.0047f0b0
mov edx, 0x56b378
mov ecx, eax
call fcn.0047f0b0
push 0x125
mov ecx, eax
call fcn.0047b130
mov edx, 0x56b378
mov ecx, eax
call fcn.0047f0b0
mov edx, str.Failed_to_enumerate_any_values_of
mov ecx, eax
call fcn.0047f0b0
mov edx, 0x56d0e0
mov ecx, eax
call fcn.004a1820
mov byte [ebp - 4], 9
cmp dword [ebp - 0x21c], 0x10
jb 0x4dbb8a
mov eax, dword [ebp - 0x230]
test eax, eax
je 0x4dbb8a
push eax
call fcn.00507b54
add esp, 4
lea eax, [ebp - 0x230]
push eax
lea ecx, [ebp - 0x2e8]
call fcn.0047b620
mov esi, eax
mov byte [ebp - 4], 0xb
cmp dword [esi + 0x14], 0x10
jb 0x4dbbaa
mov esi, dword [esi]
call fcn.004a1320
push esi
push 6
mov ecx, eax
call fcn.004a1510
cmp dword [ebp - 0x21c], 0x10
jb 0x4dbbd5
mov eax, dword [ebp - 0x230]
test eax, eax
je 0x4dbbd5
push eax
call fcn.00507b54
add esp, 4
lea ecx, [ebp - 0x298]
mov byte [ebp - 4], 8
call fcn.0047b5a0
lea eax, [ebp - 0x298]
mov dword [ebp - 0x298], 0x56b700
push eax
call fcn.00528f2f
add esp, 4
jmp 0x4dbc0b
mov eax, dword [ebp - 0x240]
mov dword [eax + 0x10], edi
mov eax, dword [ebp - 0x240]
inc dword [eax + 0x10]
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 0x14]
xor ecx, ebp
call fcn.005072fd
mov esp, ebp
pop ebp
ret
mov eax, dword [0x59f554]
test al, 1
jne 0x4dbc6a
or eax, 1
mov dword [0x59f554], eax
mov dword [ebp - 4], 0xd
call fcn.004a1290
push 0x54f080
call fcn.00507cdd
add esp, 4
mov dword [ebp - 4], 0xffffffff
mov eax, dword [0x597f88]
test byte [eax + 0x1c], 2
je 0x4dbc7f
cmp byte [eax + 0x19], 6
jb 0x4dbc7f
mov al, 1
jmp 0x4dbc81
xor al, al
cmp byte [0x59f560], 0
jne 0x4dbc9b
cmp byte [0x59f561], 0
jne 0x4dbc9b
test al, al
je 0x4dbc14
sub esp, 8
mov dword [ebp - 4], 0xe
lea ecx, [ebp - 0x380]
call fcn.0047b4d0
lea ecx, [ebp - 0x230]
mov byte [ebp - 4], 0xf
call fcn.004a1680
mov edx, eax
mov byte [ebp - 4], 0x10
lea ecx, [ebp - 0x380]
call fcn.0047ee50
mov edx, str.._telemetry.cpp
mov ecx, eax
call fcn.0047f0b0
mov edx, 0x56b378
mov ecx, eax
call fcn.0047f0b0
push 0x12c
mov ecx, eax
call fcn.0047b130
mov edx, 0x56b378
mov ecx, eax
call fcn.0047f0b0
mov edx, str.Failed_to_open_reg_key
mov ecx, eax
call fcn.0047f0b0
mov edx, 0x56d0e0
mov ecx, eax
call fcn.004a1820
mov byte [ebp - 4], 0xf
cmp dword [ebp - 0x21c], 0x10
jb 0x4dbd38
mov eax, dword [ebp - 0x230]
test eax, eax
je 0x4dbd38
push eax
call fcn.00507b54
add esp, 4
lea eax, [ebp - 0x230]
push eax
lea ecx, [ebp - 0x380]
call fcn.0047b620
mov esi, eax
mov byte [ebp - 4], 0x11
cmp dword [esi + 0x14], 0x10
jb 0x4dbd58
mov esi, dword [esi]
mov eax, dword [0x59f554]
test al, 1
jne 0x4dbd83
or eax, 1
mov dword [0x59f554], eax
mov byte [ebp - 4], 0x12
call fcn.004a1290
push 0x54f080
call fcn.00507cdd
add esp, 4
mov byte [ebp - 4], 0x11
push esi
push 6
mov ecx, 0x59f560
call fcn.004a1510
cmp dword [ebp - 0x21c], 0x10
jb 0x4dbdac
mov eax, dword [ebp - 0x230]
test eax, eax
je 0x4dbdac
push eax
call fcn.00507b54
add esp, 4
lea ecx, [ebp - 0x330]
mov dword [ebp - 0x21c], 0xf
mov dword [ebp - 0x220], 0
mov byte [ebp - 0x230], 0
mov byte [ebp - 4], 0xe
call fcn.0047b5a0
lea eax, [ebp - 0x330]
mov dword [ebp - 0x330], 0x56b700
push eax
call fcn.00528f2f
add esp, 4
jmp 0x4dbc14