Function at 0x4da6c0
Capabilities:
Query or enumerate registry value

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x54ad70
mov eax, dword fs:[0]
push eax
sub esp, 0x164
mov eax, dword [0x595c60]
xor eax, ebp
mov dword [ebp - 0x14], eax
push ebx
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov dword [ebp - 0x10], esp
mov esi, ecx
lea eax, [ebp - 0x34]
mov dword [ebp - 0x38], esi
push eax
push 0x20019
push 0
push 0x56c0e0
push reloc.OLEAUT32.dll_SysReAllocString
call dword [sym.imp.ADVAPI32.dll_RegOpenKeyExW]
test eax, eax
jne 0x4da8d0
cmp dword [esi + 0x60], 8
mov dword [ebp - 0x30], eax
mov dword [ebp - 0x3c], 4
jb 0x4da72e
mov eax, dword [esi + 0x4c]
jmp 0x4da731
lea eax, [esi + 0x4c]
lea ecx, [ebp - 0x3c]
push ecx
lea ecx, [ebp - 0x30]
push ecx
push 0
push 0
push eax
push dword [ebp - 0x34]
call dword [sym.imp.ADVAPI32.dll_RegQueryValueExW]
test eax, eax
je 0x4da8b8
mov eax, dword [0x59e598]
test al, 1
jne 0x4da780
or eax, 1
mov dword [0x59e598], eax
mov dword [ebp - 4], 0
call fcn.004a08c0
push 0x54e860
call fcn.0050765d
add esp, 4
mov dword [ebp - 4], 0xffffffff
mov eax, dword [0x596f88]
test byte [eax + 0x1c], 2
je 0x4da795
cmp byte [eax + 0x19], 6
jb 0x4da795
mov al, 1
jmp 0x4da797
xor al, al
cmp byte [0x59e5a8], 0
jne 0x4da7b1
cmp byte [0x59e5a9], 0
jne 0x4da7b1
test al, al
je 0x4da8b8
sub esp, 8
mov dword [ebp - 4], 1
lea ecx, [ebp - 0xd8]
call fcn.0047b550
lea ecx, [ebp - 0x2c]
mov byte [ebp - 4], 2
call fcn.004a0cb0
mov edx, eax
mov byte [ebp - 4], 3
lea ecx, [ebp - 0xd8]
call fcn.0047eed0
mov edx, str.._telemetry.cpp
mov ecx, eax
call fcn.0047f130
mov edx, 0x56a378
mov ecx, eax
call fcn.0047f130
push 0xdd
mov ecx, eax
call fcn.0047b1b0
mov edx, 0x56a378
mov ecx, eax
call fcn.0047f130
mov edx, str.Failed_to_read_install_count_for_version
mov ecx, eax
call fcn.0047f130
lea edx, [esi + 0x4c]
mov ecx, eax
call fcn.004a0d80
mov byte [ebp - 4], 2
cmp dword [ebp - 0x18], 0x10
jb 0x4da843
mov eax, dword [ebp - 0x2c]
test eax, eax
je 0x4da843
push eax
call fcn.005074d4
add esp, 4
lea eax, [ebp - 0x2c]
push eax
lea ecx, [ebp - 0xd8]
call fcn.0047b6a0
mov edi, eax
mov byte [ebp - 4], 4
cmp dword [edi + 0x14], 0x10
jb 0x4da860
mov edi, dword [edi]
call fcn.004a0950
push edi
push 6
mov ecx, eax
call fcn.004a0b40
cmp dword [ebp - 0x18], 0x10
jb 0x4da885
mov eax, dword [ebp - 0x2c]
test eax, eax
je 0x4da885
push eax
call fcn.005074d4
add esp, 4
lea ecx, [ebp - 0x88]
mov byte [ebp - 4], 1
call fcn.0047b620
lea eax, [ebp - 0x88]
mov dword [ebp - 0x88], 0x56a6f8
push eax
call fcn.0052889f
add esp, 4
jmp 0x4da8b8
mov eax, dword [ebp - 0x30]
push dword [ebp - 0x34]
inc eax
mov dword [ebp - 0x30], eax
mov dword [esi + 0xc], eax
call dword [sym.imp.ADVAPI32.dll_RegCloseKey]
jmp 0x4daa76
mov eax, dword [0x59e598]
test al, 1
jne 0x4da901
or eax, 1
mov dword [0x59e598], eax
mov dword [ebp - 4], 6
call fcn.004a08c0
push 0x54e860
call fcn.0050765d
add esp, 4
mov dword [ebp - 4], 0xffffffff
mov eax, dword [0x596f88]
test byte [eax + 0x1c], 2
je 0x4da916
cmp byte [eax + 0x19], 6
jb 0x4da916
mov al, 1
jmp 0x4da918
xor al, al
cmp byte [0x59e5a8], 0
jne 0x4da932
cmp byte [0x59e5a9], 0
jne 0x4da932
test al, al
je 0x4daa76
sub esp, 8
mov dword [ebp - 4], 7
lea ecx, [ebp - 0x170]
call fcn.0047b550
lea ecx, [ebp - 0x2c]
mov byte [ebp - 4], 8
call fcn.004a0cb0
mov edx, eax
mov byte [ebp - 4], 9
lea ecx, [ebp - 0x170]
call fcn.0047eed0
mov edx, str.._telemetry.cpp
mov ecx, eax
call fcn.0047f130
mov edx, 0x56a378
mov ecx, eax
call fcn.0047f130
push 0xe6
mov ecx, eax
call fcn.0047b1b0
mov edx, 0x56a378
mov ecx, eax
call fcn.0047f130
mov edx, str.Failed_to_open_reg_key
mov ecx, eax
call fcn.0047f130
mov edx, 0x56c0e0
mov ecx, eax
call fcn.004a0e50
mov byte [ebp - 4], 8
cmp dword [ebp - 0x18], 0x10
jb 0x4da9c6
mov eax, dword [ebp - 0x2c]
test eax, eax
je 0x4da9c6
push eax
call fcn.005074d4
add esp, 4
lea eax, [ebp - 0x2c]
push eax
lea ecx, [ebp - 0x170]
call fcn.0047b6a0
mov edi, eax
mov byte [ebp - 4], 0xa
cmp dword [edi + 0x14], 0x10
jb 0x4da9e3
mov edi, dword [edi]
mov eax, dword [0x59e598]
test al, 1
jne 0x4daa0e
or eax, 1
mov dword [0x59e598], eax
mov byte [ebp - 4], 0xb
call fcn.004a08c0
push 0x54e860
call fcn.0050765d
add esp, 4
mov byte [ebp - 4], 0xa
push edi
push 6
mov ecx, 0x59e5a8
call fcn.004a0b40
cmp dword [ebp - 0x18], 0x10
jb 0x4daa31
mov eax, dword [ebp - 0x2c]
test eax, eax
je 0x4daa31
push eax
call fcn.005074d4
add esp, 4
lea ecx, [ebp - 0x120]
mov dword [ebp - 0x18], 0xf
mov dword [ebp - 0x1c], 0
mov byte [ebp - 0x2c], 0
mov byte [ebp - 4], 7
call fcn.0047b620
lea eax, [ebp - 0x120]
mov dword [ebp - 0x120], 0x56a6f8
push eax
call fcn.0052889f
add esp, 4
jmp 0x4daa76
cmp dword [esi + 0xc], 0
jne 0x4daa83
mov dword [esi + 0xc], 1
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 0x14]
xor ecx, ebp
call fcn.00506c7d
mov esp, ebp
pop ebp
ret