Function at 0x407cb0
Capabilities:
Query or enumerate registry value

Disassembly:
sub esp, 0x5c
push ebx
push esi
push edi
push 0x50
call fcn.00408b84
mov ebx, eax
mov eax, dword [0x413ce0]
add esp, 4
cmp eax, 0x62
mov dword [esp + 0x14], 1
mov dword [esp + 0x10], 0x50
je 0x407f05
cmp eax, 0x7d0
jne 0x407ff0
mov edi, str.MHz
or ecx, 0xffffffff
xor eax, eax
push ebp
repne scasb al, byte es:[edi]
not ecx
sub edi, ecx
push str.Windows
mov eax, ecx
mov esi, edi
mov edi, 0x413dd4
push 0x41d
shr ecx, 2
rep movsd dword es:[edi], dword [esi]
mov ecx, eax
and ecx, 3
rep movsb byte es:[edi], byte [esi]
mov ecx, dword [0x413d00]
mov esi, dword [sym.imp.USER32.dll_GetDlgItem]
push ecx
call esi
mov edi, dword [sym.imp.USER32.dll_SetWindowTextA]
push eax
call edi
lea edx, [esp + 0x10]
push edx
push 0x20019
push 0
push str.SOFTWAREMicrosoftWindows_NTCurrentVersion
push 0x80000002
call dword [sym.imp.ADVAPI32.dll_RegOpenKeyExA]
mov edx, dword [esp + 0x10]
mov ebp, dword [sym.imp.ADVAPI32.dll_RegQueryValueExA]
lea eax, [esp + 0x14]
lea ecx, [esp + 0x18]
push eax
push ebx
push ecx
push 0
push str.ProductName
push edx
call ebp
test eax, eax
jne 0x407d9b
push ebx
lea eax, [esp + 0x20]
push 0x412738
push eax
call fcn.00408b32
mov edx, dword [0x413d00]
add esp, 0xc
lea ecx, [esp + 0x1c]
push ecx
push 0x41b
push edx
call esi
push eax
call edi
mov edx, dword [esp + 0x10]
lea eax, [esp + 0x14]
push eax
lea ecx, [esp + 0x1c]
push ebx
push ecx
push 0
push str.RegisteredOrganization
push edx
call ebp
test eax, eax
jne 0x407de1
push ebx
lea eax, [esp + 0x20]
push 0x412738
push eax
call fcn.00408b32
mov edx, dword [0x413d00]
add esp, 0xc
lea ecx, [esp + 0x1c]
push ecx
push 0x420
push edx
call esi
push eax
call edi
mov edx, dword [esp + 0x10]
lea eax, [esp + 0x14]
push eax
lea ecx, [esp + 0x1c]
push ebx
push ecx
push 0
push str.SourcePath
push edx
call ebp
test eax, eax
jne 0x407e27
push ebx
lea eax, [esp + 0x20]
push 0x412738
push eax
call fcn.00408b32
mov edx, dword [0x413d00]
add esp, 0xc
lea ecx, [esp + 0x1c]
push ecx
push 0x41c
push edx
call esi
push eax
call edi
mov edx, dword [esp + 0x10]
lea eax, [esp + 0x14]
push eax
lea ecx, [esp + 0x1c]
push ebx
push ecx
push 0
push str.RegisteredOwner
push edx
call ebp
test eax, eax
jne 0x407e6d
push ebx
lea eax, [esp + 0x20]
push 0x412738
push eax
call fcn.00408b32
mov edx, dword [0x413d00]
add esp, 0xc
lea ecx, [esp + 0x1c]
push ecx
push 0x41e
push edx
call esi
push eax
call edi
mov edx, dword [esp + 0x10]
lea eax, [esp + 0x14]
push eax
lea ecx, [esp + 0x1c]
push ebx
push ecx
push 0
push str.CurrentBuildNumber
push edx
call ebp
test eax, eax
jne 0x407eb3
push ebx
lea eax, [esp + 0x20]
push 0x412738
push eax
call fcn.00408b32
mov edx, dword [0x413d00]
add esp, 0xc
lea ecx, [esp + 0x1c]
push ecx
push 0x419
push edx
call esi
push eax
call edi
mov edx, dword [esp + 0x10]
lea eax, [esp + 0x14]
push eax
lea ecx, [esp + 0x1c]
push ebx
push ecx
push 0
push str.CurrentVersion
push edx
call ebp
test eax, eax
pop ebp
jne 0x407ff0
push ebx
lea eax, [esp + 0x1c]
push 0x412738
push eax
call fcn.00408b32
mov edx, dword [0x413d00]
add esp, 0xc
lea ecx, [esp + 0x18]
push ecx
push 0x41a
push edx
call esi
push eax
call edi
pop edi
pop esi
pop ebx
add esp, 0x5c
ret
mov edi, str.Identifier
or ecx, 0xffffffff
xor eax, eax
repne scasb al, byte es:[edi]
not ecx
sub edi, ecx
mov eax, ecx
mov esi, edi
mov edi, 0x413dd4
shr ecx, 2
rep movsd dword es:[edi], dword [esi]
mov ecx, eax
and ecx, 3
rep movsb byte es:[edi], byte [esi]
lea ecx, [esp + 0xc]
push ecx
push 0x20006
push 0
push str.SoftwareMicrosoftWindowsCurrentVersion
push 0x80000002
call dword [sym.imp.ADVAPI32.dll_RegOpenKeyExA]
push str.Version
call fcn.00408800
mov edx, dword [0x413d00]
mov esi, dword [sym.imp.USER32.dll_GetDlgItem]
add esp, 4
push eax
push 0x419
push edx
call esi
mov edi, dword [sym.imp.USER32.dll_SetWindowTextA]
push eax
call edi
push str.productname
call fcn.00408800
add esp, 4
push eax
mov eax, dword [0x413d00]
push 0x41b
push eax
call esi
push eax
call edi
push str.RegisteredOrganization
call fcn.00408800
mov ecx, dword [0x413d00]
add esp, 4
push eax
push 0x420
push ecx
call esi
push eax
call edi
push str.VersionNumber
call fcn.00408800
mov edx, dword [0x413d00]
add esp, 4
push eax
push 0x41a
push edx
call esi
push eax
call edi
push str.RegisteredOwner
call fcn.00408800
add esp, 4
push eax
mov eax, dword [0x413d00]
push 0x41e
push eax
call esi
push eax
call edi
call fcn.00408000
pop edi
pop esi
pop ebx
add esp, 0x5c
ret