Function at 0x4051e0
Capabilities:
Query or enumerate registry value

Disassembly:
push 0xffffffffffffffff
push 0x41a127
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
sub esp, 0x430
mov eax, dword [0x427880]
xor eax, dword [esp + 0x43c]
push ebx
push ebp
push esi
xor ebx, ebx
push edi
mov dword [esp + 0x43c], eax
mov dword [esp + 0x1c], ebx
call sub.MFC70U.DLL_Ordinal_972
mov esi, dword [eax + 4]
push str.SOFTWAREPlotSoftPDFill
lea ecx, [esp + 0x18]
call fcn.00404410
push 0x41e710
lea ecx, [esp + 0x14]
mov dword [esp + 0x44c], ebx
call fcn.00404410
mov ecx, esi
mov byte [esp + 0x448], 1
mov edi, 0x20019
call fcn.0040d790
test eax, eax
je 0x405260
mov edi, 0x20119
mov ecx, dword [esp + 0x14]
mov ebp, dword [sym.imp.ADVAPI32.dll_RegOpenKeyExW]
lea eax, [esp + 0x18]
push eax
push edi
push ebx
push ecx
push 0x80000002
call ebp
test eax, eax
jne 0x4052ce
mov ecx, dword [esp + 0x18]
lea edx, [esp + 0x20]
push edx
lea eax, [esp + 0x30]
push eax
push ebx
push ebx
push str.PATH
push ecx
mov dword [esp + 0x38], 0x208
call dword [sym.imp.ADVAPI32.dll_RegQueryValueExW]
test eax, eax
jne 0x4052ce
lea edx, [esp + 0x2c]
push edx
lea ecx, [esp + 0x20]
call fcn.00404410
push eax
lea ecx, [esp + 0x14]
mov byte [esp + 0x44c], 2
call fcn.00401510
mov eax, dword [esp + 0x1c]
jmp 0x40540d
mov esi, dword [sym.imp.MSVCR70.dll_wcslen]
push str.SOFTWAREPlotSoftPDFill_PDF_Tools
call esi
add esp, 4
push eax
push str.SOFTWAREPlotSoftPDFill_PDF_Tools
lea ecx, [esp + 0x1c]
call fcn.00401470
push 0x41e710
call esi
add esp, 4
push eax
push 0x41e710
lea ecx, [esp + 0x18]
call fcn.00401470
mov ecx, dword [esp + 0x14]
lea eax, [esp + 0x18]
push eax
push edi
push ebx
push ecx
push 0x80000002
call ebp
test eax, eax
jne 0x40536e
mov ecx, dword [esp + 0x18]
lea edx, [esp + 0x1c]
push edx
lea eax, [esp + 0x30]
push eax
push ebx
push ebx
push str.PATH
push ecx
mov dword [esp + 0x34], 0x208
call dword [sym.imp.ADVAPI32.dll_RegQueryValueExW]
test eax, eax
jne 0x40536e
lea edx, [esp + 0x2c]
push edx
lea ecx, [esp + 0x24]
call fcn.00404410
push eax
lea ecx, [esp + 0x14]
mov byte [esp + 0x44c], 3
call fcn.00401510
mov eax, dword [esp + 0x20]
jmp 0x40540d
push str.SOFTWAREPlotSoftPDFill
call esi
add esp, 4
push eax
push str.SOFTWAREPlotSoftPDFill
lea ecx, [esp + 0x1c]
call fcn.00401470
push 0x41e710
call esi
add esp, 4
push eax
push 0x41e710
lea ecx, [esp + 0x18]
call fcn.00401470
mov ecx, dword [esp + 0x14]
lea eax, [esp + 0x18]
push eax
push edi
push ebx
push ecx
push 0x80000001
call ebp
test eax, eax
jne 0x405458
mov ecx, dword [esp + 0x18]
lea edx, [esp + 0x28]
push edx
lea eax, [esp + 0x238]
push eax
push ebx
push ebx
push str.PATH
push ecx
mov dword [esp + 0x40], 0x208
call dword [sym.imp.ADVAPI32.dll_RegQueryValueExW]
test eax, eax
jne 0x405458
lea edx, [esp + 0x234]
push edx
lea ecx, [esp + 0x28]
call fcn.00404410
push eax
lea ecx, [esp + 0x14]
mov byte [esp + 0x44c], 4
call fcn.00401510
mov eax, dword [esp + 0x24]
add eax, 0xfffffff0
mov byte [esp + 0x448], 1
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x40542f
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
call dword [edx + 4]
mov eax, dword [esp + 0x18]
push eax
call dword [sym.imp.ADVAPI32.dll_RegCloseKey]
mov eax, dword [esp + 0x10]
add eax, 0xfffffff0
push eax
call fcn.004012c0
mov esi, dword [esp + 0x454]
add esp, 4
add eax, 0x10
mov dword [esi], eax
jmp 0x405477
push ebx
push ebx
push str.PDFill_Install_Path_cannot_be_found_Under_SOFTWAREPlotSoftPDFill___nPlease_Install_Again_or_turn_off_the_Anti_Virus_Software_
call sub.MFC70U.DLL_Ordinal_1009
mov esi, dword [esp + 0x450]
push 0x41e710
mov ecx, esi
call fcn.00404410
mov eax, dword [esp + 0x10]
add eax, 0xfffffff0
mov byte [esp + 0x448], bl
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x40549c
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
call dword [edx + 4]
mov eax, dword [esp + 0x14]
add eax, 0xfffffff0
mov dword [esp + 0x448], 0xffffffff
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x4054c5
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
call dword [edx + 4]
mov ecx, dword [esp + 0x440]
pop edi
mov dword fs:[0], ecx
mov ecx, dword [esp + 0x438]
xor ecx, dword [esp + 0x448]
mov eax, esi
pop esi
pop ebp
pop ebx
call fcn.00419c26
add esp, 0x43c
ret 4