Function at 0x42e1ad
Capabilities:
Get file version info
Query or enumerate registry value

Disassembly:
push ebp
mov ebp, esp
sub esp, 0xa80
push ebx
push esi
push edi
mov dword [ebp - 0x9e8], 0
mov dword [ebp - 4], 0
mov eax, dword [ebp + 8]
movsx eax, byte [eax + 1]
cmp eax, 0x3a
jne 0x42e1e5
mov eax, dword [ebp + 8]
mov dword [ebp - 4], eax
jmp 0x42e258
mov dword [ebp - 0x9ec], 1
mov edi, dword [ebp + 8]
mov ecx, 0xffffffff
sub eax, eax
repne scasb al, byte es:[edi]
not ecx
lea eax, [ecx - 1]
mov dword [ebp - 0x9f4], eax
mov eax, dword [ebp - 0x9ec]
cmp dword [ebp - 0x9f4], eax
jle 0x42e258
mov eax, dword [ebp - 0x9ec]
mov ecx, dword [ebp + 8]
movsx eax, byte [eax + ecx]
cmp eax, 0x3a
jne 0x42e24d
dec dword [ebp - 0x9ec]
mov eax, dword [ebp - 0x9ec]
add eax, dword [ebp + 8]
mov dword [ebp - 4], eax
mov eax, dword [ebp - 0x9f4]
inc eax
mov dword [ebp - 0x9ec], eax
inc dword [ebp - 0x9ec]
jmp 0x42e206
cmp dword [ebp - 4], 0
jne 0x42e267
jmp 0x42e659
lea eax, [ebp - 0x9e0]
push eax
push 0x9d0
push 0
mov eax, dword [ebp - 4]
push eax
call sub.VERSION.dll_GetFileVersionInfoA
mov dword [ebp - 0x9e4], eax
cmp dword [ebp - 0x9e4], 0
jne 0x42e2bb
cmp dword [0x45e03c], 0
je 0x42e2b6
mov eax, dword [ebp - 4]
push eax
call dword [sym.imp.KERNEL32.dll_GetLastError]
push eax
push str._r_nExhatch:_ABORTING_ERROR_OBTAINING_VERSION__d___s_
call fcn.00452380
add esp, 0xc
jmp 0x42e659
mov dword [ebp - 8], 0
lea eax, [ebp - 0x9e4]
push eax
lea eax, [ebp - 8]
push eax
push 0x478b98
lea eax, [ebp - 0x9e0]
push eax
call sub.VERSION.dll_VerQueryValueA
mov dword [ebp - 0x9f8], eax
cmp dword [ebp - 8], 0
je 0x42e659
mov eax, dword [ebp - 8]
mov eax, dword [eax + 8]
and eax, 0xffff0000
mov dword [ebp - 0x9e4], eax
sar dword [ebp - 0x9e4], 0x10
and dword [ebp - 0x9e4], 0xff
mov eax, dword [ebp - 8]
mov eax, dword [eax + 8]
mov dword [ebp - 0x9e8], eax
and dword [ebp - 0x9e8], 0xff
mov eax, dword [ebp - 0x9e8]
push eax
mov eax, dword [ebp - 0x9e4]
push eax
push str.SOFTWAREWOW6432NodeESRILicense_d._d
push 0x9d0
lea eax, [ebp - 0x9e0]
push eax
call fcn.00452660
add esp, 0x14
lea eax, [ebp - 0x10]
push eax
push 0x20019
push 0
lea eax, [ebp - 0x9e0]
push eax
push reloc.WS2_32.dll_bind
call dword [sym.imp.ADVAPI32.dll_RegOpenKeyExA]
mov dword [ebp - 0xc], eax
cmp dword [ebp - 0xc], 0
je 0x42e530
cmp dword [0x45e03c], 0
je 0x42e39c
lea eax, [ebp - 0x9e0]
push eax
mov eax, dword [ebp - 0xc]
push eax
push str._r_nEsriL.__d____s_
call fcn.00452380
add esp, 0xc
push str.SOFTWAREWOW6432NodeESRIArcGIS
push 0x9d0
lea eax, [ebp - 0x9e0]
push eax
call fcn.00452660
add esp, 0xc
lea eax, [ebp - 0x10]
push eax
push 0x20019
push 0
lea eax, [ebp - 0x9e0]
push eax
push reloc.WS2_32.dll_bind
call dword [sym.imp.ADVAPI32.dll_RegOpenKeyExA]
mov dword [ebp - 0xc], eax
cmp dword [ebp - 0xc], 0
jne 0x42e530
mov dword [ebp - 0x9f0], 0x9d0
mov byte [ebp - 0x9e0], 0
lea eax, [ebp - 0x9f0]
push eax
lea eax, [ebp - 0x9e0]
push eax
push 0
push 0
push str.RealVersion
mov eax, dword [ebp - 0x10]
push eax
call dword [sym.imp.ADVAPI32.dll_RegQueryValueExA]
mov dword [ebp - 0xc], eax
mov eax, dword [ebp - 0x10]
push eax
call dword [sym.imp.ADVAPI32.dll_RegCloseKey]
cmp dword [ebp - 0xc], 0
jne 0x42e530
mov dword [ebp - 0xa80], 0
mov dword [ebp - 0xa7c], 0
lea eax, [ebp - 0xa78]
mov dword [eax], 0
mov dword [eax + 4], 0
mov word [eax + 8], 0
mov eax, dword [ebp - 0xa80]
xor ecx, ecx
mov cl, byte [ebp + eax - 0x9e0]
test ecx, ecx
je 0x42e4e1
mov eax, dword [ebp - 0xa80]
xor ecx, ecx
mov cl, byte [ebp + eax - 0x9e0]
cmp ecx, 0x2e
jne 0x42e4d6
inc dword [ebp - 0xa7c]
cmp dword [ebp - 0xa7c], 2
jne 0x42e4d6
mov eax, dword [ebp - 0xa80]
mov byte [ebp + eax - 0x9e0], 0
lea edi, [ebp - 0x9e0]
mov ecx, 0xffffffff
sub eax, eax
repne scasb al, byte es:[edi]
not ecx
sub edi, ecx
mov eax, ecx
mov edx, edi
lea edi, [ebp - 0xa78]
mov esi, edx
shr ecx, 2
rep movsd dword es:[edi], dword [esi]
mov ecx, eax
and ecx, 3
rep movsb byte es:[edi], byte [esi]
dec dword [ebp - 0xa80]
inc dword [ebp - 0xa80]
jmp 0x42e455
movsx eax, byte [ebp - 0xa78]
test eax, eax
je 0x42e530
lea eax, [ebp - 0xa78]
push eax
push str.SOFTWAREWOW6432NodeESRILicense_s
push 0x9d0
lea eax, [ebp - 0x9e0]
push eax
call fcn.00452660
add esp, 0x10
lea eax, [ebp - 0x10]
push eax
push 0x20019
push 0
lea eax, [ebp - 0x9e0]
push eax
push reloc.WS2_32.dll_bind
call dword [sym.imp.ADVAPI32.dll_RegOpenKeyExA]
mov dword [ebp - 0xc], eax
cmp dword [ebp - 0xc], 0
jne 0x42e659
mov dword [ebp - 0x9f0], 0x9d0
mov byte [ebp - 0x9e0], 0
lea eax, [ebp - 0x9f0]
push eax
lea eax, [ebp - 0x9e0]
push eax
push 0
push 0
push str.SEAT_PREFERENCE
mov eax, dword [ebp - 0x10]
push eax
call dword [sym.imp.ADVAPI32.dll_RegQueryValueExA]
mov dword [ebp - 0xc], eax
xor eax, eax
mov al, byte [ebp - 0x9e0]
test eax, eax
je 0x42e64f
mov eax, dword [ebp + 0xc]
mov ecx, dword [0x478c3c]
mov dword [eax], ecx
push str.fixed
lea eax, [ebp - 0x9e0]
push eax
call fcn.00452540
add esp, 8
test eax, eax
jne 0x42e5c8
mov eax, str.SingleUse
lea ecx, [ebp - 0x9e0]
mov edx, dword [eax]
mov dword [ecx], edx
mov edx, dword [eax + 4]
mov dword [ecx + 4], edx
mov ax, word [eax + 8]
mov word [ecx + 8], ax
jmp 0x42e607
push str.float
lea eax, [ebp - 0x9e0]
push eax
call fcn.00452540
add esp, 8
test eax, eax
jne 0x42e607
mov eax, str.Concurrent
lea ecx, [ebp - 0x9e0]
mov edx, dword [eax]
mov dword [ecx], edx
mov edx, dword [eax + 4]
mov dword [ecx + 4], edx
mov dx, word [eax + 8]
mov word [ecx + 8], dx
mov al, byte [eax + 0xa]
mov byte [ecx + 0xa], al
lea edi, [ebp - 0x9e0]
mov ecx, 0xffffffff
sub eax, eax
repne scasb al, byte es:[edi]
not ecx
sub edi, ecx
mov edx, edi
mov ebx, ecx
mov edi, dword [ebp + 0xc]
mov ecx, 0xffffffff
sub eax, eax
repne scasb al, byte es:[edi]
dec edi
mov esi, edx
mov ecx, ebx
shr ecx, 2
rep movsd dword es:[edi], dword [esi]
mov ecx, ebx
and ecx, 3
rep movsb byte es:[edi], byte [esi]
mov edi, dword [ebp + 0xc]
mov ecx, 0xffffffff
sub eax, eax
repne scasb al, byte es:[edi]
mov eax, dword [0x478c68]
mov dword [edi - 1], eax
mov eax, dword [ebp - 0x10]
push eax
call dword [sym.imp.ADVAPI32.dll_RegCloseKey]
pop edi
pop esi
pop ebx
leave
ret