Function at 0x49bacb
Capabilities:
Create process on windows
Query or enumerate registry value

Disassembly:
mov eax, 0x1090
call fcn.00441db0
mov eax, dword [0x514d34]
xor eax, esp
mov dword [esp + 0x108c], eax
push ebx
push ebp
push edi
mov edi, dword [esp + 0x10a0]
lea eax, [esp + 0xc]
push eax
xor ebp, ebp
xor ebx, ebx
inc ebp
push ebp
push ebx
push str.axrfile_shellopencommand
push connect
call dword [sym.imp.ADVAPI32.dll_RegOpenKeyExA]
test eax, eax
je 0x49bb1f
push str.The_AXIS_Report_Viewer_is_not_installed.
call fcn.00413845
pop ecx
xor eax, eax
jmp 0x49bf09
push esi
lea eax, [esp + 0x14]
mov esi, 0x519
push eax
lea eax, [esp + 0xb84]
mov dword [esp + 0x18], esi
push eax
push ebx
push ebx
push ebx
push dword [esp + 0x24]
call dword [sym.imp.ADVAPI32.dll_RegQueryValueExA]
test eax, eax
je 0x49bb61
push str.Failed_to_retrieve_the_command_line_for_the_AXIS_Report_Viewer.
call fcn.00413845
pop ecx
push dword [esp + 0x10]
call dword [sym.imp.ADVAPI32.dll_RegCloseKey]
jmp 0x49bc8b
mov eax, dword [esp + 0x14]
cmp eax, esi
jae 0x49bf21
push dword [esp + 0x10]
mov byte [esp + eax + 0xb84], bl
call dword [sym.imp.ADVAPI32.dll_RegCloseKey]
lea eax, [esp + 0x1c]
push eax
lea eax, [esp + 0x14c]
push ebx
push eax
call fcn.0040cd7f
movzx eax, ax
add esp, 0xc
test ax, ax
je 0x49bbb5
push eax
call fcn.0040cb9c
push eax
push str.The_error__str__occurred_while_attempting_to_create_a_temporary_file.
call fcn.00413979
add esp, 0xc
jmp 0x49bc8b
push dword [esp + 0x1c]
call fcn.0040cd10
lea eax, [esp + 0x14c]
push eax
call fcn.0040cc97
lea eax, [esp + 0x150]
push eax
call fcn.004a7840
lea eax, [esp + 0x154]
push str..AXR
push eax
call fcn.00446fa0
mov ecx, dword [edi + 0x231]
add esp, 0x14
mov ecx, dword [ecx + 0x71]
call fcn.00489b4a
movzx eax, ax
push eax
call fcn.00441cd2
pop ecx
mov ecx, dword [edi + 0x231]
mov esi, eax
mov eax, 0xffff
push eax
lea eax, [esp + 0x14c]
mov ecx, dword [ecx + 0x71]
push eax
push 0x42
call fcn.00489b4a
movzx ecx, ax
push ecx
push ebx
push 3
push esi
call fcn.0049f417
add esp, 0x1c
push esi
test ax, ax
jne 0x49bc4f
call fcn.00441cdb
lea eax, [esp + 0x14c]
push eax
call fcn.0040cc97
jmp 0x49bc89
push edi
call fcn.0049b68f
push esi
push 0x49ba8f
push edi
call fcn.00499fdc
movzx eax, ax
mov ecx, 0x30d6
add esp, 0x14
cmp ax, cx
jne 0x49bc92
call fcn.00416828
lea eax, [esp + 0x148]
push eax
call fcn.0040cc97
push esi
call fcn.00441cdb
pop ecx
pop ecx
xor eax, eax
jmp 0x49bf08
mov ecx, 0x30d5
cmp ax, cx
jne 0x49bcba
mov ebx, str.NIL_REPORT
push ebx
call fcn.00447230
push eax
push ebx
push esi
call fcn.00442cc0
push ebp
call fcn.004164e1
add esp, 0x14
xor ebx, ebx
mov ecx, dword [edi + 0x231]
test ecx, ecx
je 0x49bce0
mov ecx, dword [ecx + 0x71]
mov eax, 0xffff
push eax
call fcn.0048cae6
test ax, ax
je 0x49bce0
push esi
push edi
call fcn.0049b974
pop ecx
pop ecx
call fcn.00416828
push esi
call fcn.00441cdb
lea eax, [esp + 0xb84]
mov dword [esp], str.___1_
push eax
call fcn.004a6f48
pop ecx
pop ecx
movzx eax, ax
mov ecx, 0xffff
cmp ax, cx
je 0x49bd20
cmp eax, 0x519
jae 0x49bf21
mov byte [esp + eax + 0xb80], bl
lea eax, [esp + 0x40]
push 0x4c3f24
push eax
call fcn.00446f90
lea eax, [esp + 0x150]
push eax
lea eax, [esp + 0x4c]
push eax
call fcn.00446fa0
lea eax, [esp + 0x50]
push 0x22
push eax
call fcn.0040970e
lea eax, [esp + 0xb98]
push eax
lea eax, [esp + 0x680]
push eax
call fcn.00446f90
add esp, 0x20
cmp byte [esp + 0x664], 0x22
jne 0x49bda5
lea esi, [esp + 0x664]
mov eax, esi
push eax
call fcn.00447230
pop ecx
cmp byte [eax + esi - 1], 0x22
jne 0x49bda5
lea eax, [esp + 0x665]
push eax
mov eax, esi
push eax
call fcn.00446f90
mov eax, esi
push eax
call fcn.00447230
add esp, 0xc
mov byte [eax + esi - 1], bl
lea eax, [esp + 0x38]
push eax
lea eax, [esp + 0x668]
push eax
call fcn.0040d19a
pop ecx
pop ecx
test ax, ax
jne 0x49be26
push 0x4e8c04
lea ecx, [esp + 0x3c]
call fcn.0045a46f
test al, al
je 0x49be26
lea eax, [esp + 0x40]
push str.___f
push eax
call fcn.00446fa0
lea eax, [esp + 0x48]
push eax
call fcn.00447230
lea ecx, [esp + 0x4c]
add eax, ecx
push eax
call fcn.0040e171
lea esi, [esp + 0x50]
mov eax, esi
push eax
call fcn.00447230
add esp, 0x14
cmp byte [eax + esi - 1], 0x5c
jne 0x49be18
mov eax, esi
push eax
call fcn.00447230
pop ecx
mov byte [eax + esi - 1], bl
lea eax, [esp + 0x40]
push 0x22
push eax
call fcn.0040970e
pop ecx
pop ecx
cmp word [0x52d7fc], 0
je 0x49be41
lea eax, [esp + 0x40]
push 0x4e8cf8
push eax
call fcn.00446fa0
pop ecx
pop ecx
lea eax, [esp + 0x40]
push str.__d___t
push eax
call fcn.00446fa0
lea eax, [esp + 0x28]
push edi
push eax
call fcn.0049b9b7
add esp, 0x10
cmp dword [eax + 0x14], 0x10
jb 0x49be66
mov eax, dword [eax]
push eax
lea eax, [esp + 0x44]
push eax
call fcn.00446fa0
pop ecx
pop ecx
push ebx
push ebp
lea ecx, [esp + 0x28]
call fcn.0040758b
lea eax, [esp + 0x40]
push 0x22
push eax
call fcn.0040970e
pop ecx
pop ecx
push 5
push ebx
lea eax, [esp + 0x48]
push eax
lea eax, [esp + 0xb8c]
push eax
push ebx
push ebx
call dword [sym.imp.SHELL32.dll_ShellExecuteA]
mov dword [esp + 0x18], eax
cmp eax, 0x20
jae 0x49bf05
lea ecx, [esp + 0x20]
call fcn.00408368
lea eax, [esp + 0x18]
push eax
lea eax, [esp + 0x24]
push eax
call fcn.0040f956
cmp dword [esp + 0x3c], 0x10
lea eax, [esp + 0x28]
cmovae eax, dword [esp + 0x28]
push eax
push dword [esp + 0x24]
lea eax, [esp + 0xb90]
push eax
push str.Failed_to_start__str____error_code__dword__5____str_
call fcn.00413979
lea eax, [esp + 0x160]
push eax
call fcn.0040cc97
add esp, 0x1c
lea ecx, [esp + 0x20]
push ebx
push ebp
call fcn.0040758b
mov ax, bp
pop esi
mov ecx, dword [esp + 0x1098]
pop edi
pop ebp
pop ebx
xor ecx, esp
call fcn.00441a5e
add esp, 0x1090
ret
call fcn.00441f00
int3