Function at 0x42c8b1
Capabilities:
Resolve function by parsing pe exports

Disassembly:
push ebp
mov ebp, esp
and esp, 0xfffffff8
push 0xffffffffffffffff
push 0x4d7874
mov eax, dword fs:[0]
push eax
sub esp, 0x88
push ebx
push esi
push edi
mov eax, dword [0x55c6c0]
xor eax, esp
push eax
lea eax, [esp + 0x98]
mov dword fs:[0], eax
mov ebx, ecx
mov dword [esp + 0x3c], ebx
mov eax, dword [ebx]
call dword [eax + 0x14]
call fcn.00461ea4
movzx esi, al
inc esi
xor eax, eax
cmp esi, eax
mov dword [esp + 0x5c], esi
mov dword [esp + 0x40], eax
jg 0x42c990
mov eax, dword [ebx]
mov ecx, ebx
call dword [eax + 0x18]
mov eax, ebx
call fcn.0040cd89
test eax, eax
jne 0x42d1fe
mov eax, dword [ebx]
mov ecx, ebx
call dword [eax + 0x1c]
mov eax, ebx
call fcn.0040cd89
test eax, eax
jne 0x42d1fe
call fcn.00461ea4
movzx eax, al
push eax
push ecx
mov ecx, esp
mov dword [esp + 0x28], esp
push str.HKEY_CLASSES_ROOT
call fcn.0040255d
mov eax, dword [ebx]
push 0x565b6c
push SysReAllocStringLen
mov ecx, ebx
call dword [eax + 0x20]
mov ecx, ebx
call fcn.0040e862
mov eax, ebx
call fcn.0040cd89
xor ecx, ecx
test eax, eax
setne cl
inc ecx
mov eax, ecx
mov ecx, dword [esp + 0x98]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret
xor eax, eax
mov dword [esp + 0x2c], eax
mov dword [esp + 0x34], eax
mov dword [esp + 0x38], eax
mov dword [esp + 0xa0], eax
call fcn.00461ea4
test al, al
je 0x42c9c2
mov eax, dword [esp + 0x40]
neg eax
sbb eax, eax
and eax, 0xffffff00
add eax, 0x200
mov dword [esp + 0x2c], eax
push dword [0x565b60]
mov eax, dword [esp + 0x30]
or eax, 0x20019
push reloc.OLEAUT32.dll_SysReAllocString
lea edi, [esp + 0x3c]
call fcn.00411f6e
test eax, eax
jne 0x42d188
lea ecx, [esp + 0x80]
call fcn.004956f5
lea ecx, [esp + 0x68]
mov byte [esp + 0xa0], 1
call fcn.004956f5
mov byte [esp + 0xa0], 2
call fcn.0048aa29
push eax
lea ecx, [esp + 0x20]
call fcn.00402840
mov byte [esp + 0xa0], 3
call fcn.0048aa29
push eax
lea ecx, [esp + 0x1c]
call fcn.00402840
mov byte [esp + 0xa0], 4
call fcn.0048aa29
push eax
lea ecx, [esp + 0x14]
call fcn.00402840
lea eax, [esp + 0x80]
push eax
mov byte [esp + 0xa4], 5
push dword [esp + 0x38]
call fcn.0040ca2d
pop ecx
pop ecx
mov ecx, edi
call fcn.00411faa
and dword [esp + 0x24], 0
cmp dword [esp + 0x88], 0
jle 0x42d13f
push 1
call dword [sym.imp.KERNEL32.dll_Sleep]
mov eax, ebx
call fcn.0040cd89
test eax, eax
jne 0x42d1ac
push dword [esp + 0x24]
lea ecx, [esp + 0x84]
call fcn.00434b30
push dword [eax]
lea eax, [esp + 0x20]
push dword [0x565b60]
push 0x5252d8
push eax
call fcn.00402a45
mov eax, dword [esp + 0x3c]
add esp, 0x10
push dword [esp + 0x1c]
or eax, 0x2001f
push reloc.OLEAUT32.dll_SysReAllocString
lea edi, [esp + 0x3c]
call fcn.00411f6e
test eax, eax
jne 0x42d12a
lea eax, [esp + 0x68]
push eax
push dword [esp + 0x38]
call fcn.0040cb68
xor esi, esi
cmp dword [esp + 0x70], esi
jle 0x42cb74
push esi
lea ecx, [esp + 0x6c]
call fcn.00434b30
push eax
lea ecx, [esp + 0x34]
call fcn.004025a1
lea edi, [esp + 0x30]
mov byte [esp + 0xa0], 6
call fcn.00411ade
push str.noremove
mov ecx, edi
call fcn.0040c675
test eax, eax
je 0x42ce10
push str.systemcomponent
mov ecx, edi
call fcn.0040c675
test eax, eax
je 0x42ce10
push str.windowscomponent
mov ecx, edi
call fcn.0040c675
test eax, eax
je 0x42ce10
mov byte [esp + 0xa0], 5
mov ecx, dword [esp + 0x30]
add ecx, 0xfffffff0
call fcn.00402883
inc esi
cmp esi, dword [esp + 0x70]
jl 0x42caf8
xor esi, esi
cmp dword [esp + 0x70], esi
je 0x42cfd9
cmp dword [esp + 0x70], 1
jne 0x42cb96
mov eax, dword [esp + 0x6c]
mov eax, dword [eax]
cmp dword [eax - 0xc], esi
je 0x42cfd9
lea ecx, [esp + 0x18]
call fcn.0040268b
mov ebx, 0x104
push ebx
lea ecx, [esp + 0x1c]
mov dword [esp + 0x18], ebx
call fcn.0040298b
push str.DisplayName
lea ecx, [esp + 0x38]
push ecx
lea esi, [esp + 0x1c]
mov edi, eax
call fcn.00411f06
push 0xffffffffffffffff
lea ecx, [esp + 0x1c]
call fcn.00411fca
lea ecx, [esp + 0x44]
call fcn.004956f5
mov esi, str.UninstallString
push esi
mov byte [esp + 0xa4], 0xc
push dword [esp + 0x50]
lea ecx, [esp + 0x4c]
call fcn.00495ad5
push str.QuietUninstallString
push dword [esp + 0x50]
lea ecx, [esp + 0x4c]
call fcn.00495ad5
push str.InstallSource
push dword [esp + 0x50]
lea ecx, [esp + 0x4c]
call fcn.00495ad5
push str.DisplayIcon
push dword [esp + 0x50]
lea ecx, [esp + 0x4c]
call fcn.00495ad5
push str.Installlocation
push dword [esp + 0x50]
lea ecx, [esp + 0x4c]
call fcn.00495ad5
push str.helpstring
push dword [esp + 0x50]
lea ecx, [esp + 0x4c]
call fcn.00495ad5
push str.readme
push dword [esp + 0x50]
lea ecx, [esp + 0x4c]
call fcn.00495ad5
lea ecx, [esp + 0x10]
call fcn.0040268b
push ebx
lea ecx, [esp + 0x14]
call fcn.0040298b
push esi
lea ecx, [esp + 0x38]
push ecx
lea esi, [esp + 0x1c]
mov edi, eax
call fcn.00411f06
push 0xffffffffffffffff
lea ecx, [esp + 0x14]
mov esi, eax
call fcn.00411fca
cmp esi, 2
jne 0x42ccea
mov eax, dword [esp + 0x10]
cmp dword [eax - 0xc], 0
jne 0x42ccea
lea ecx, [esp + 0x10]
call fcn.0040268b
push ebx
lea ecx, [esp + 0x14]
call fcn.0040298b
push str.QuietUninstallString
lea ecx, [esp + 0x38]
push ecx
lea esi, [esp + 0x1c]
mov edi, eax
call fcn.00411f06
push 0xffffffffffffffff
lea ecx, [esp + 0x14]
mov esi, eax
call fcn.00411fca
cmp esi, 2
jne 0x42ccea
mov eax, dword [esp + 0x10]
cmp dword [eax - 0xc], 0
je 0x42cf04
and dword [esp + 0x28], 0
cmp dword [esp + 0x4c], 0
jle 0x42cfc3
lea ecx, [esp + 0x10]
call fcn.0040268b
mov eax, 0x208
push eax
lea ecx, [esp + 0x14]
mov dword [esp + 0x18], eax
call fcn.0040298b
push dword [esp + 0x28]
lea ecx, [esp + 0x48]
mov edi, eax
call fcn.00434b30
push dword [eax]
lea eax, [esp + 0x38]
push eax
lea esi, [esp + 0x1c]
call fcn.00411f06
push 0xffffffffffffffff
lea ecx, [esp + 0x14]
mov esi, eax
call fcn.00411fca
xor ebx, ebx
cmp esi, ebx
jne 0x42ceed
mov eax, dword [esp + 0x10]
cmp dword [eax - 0xc], ebx
je 0x42ceed
mov edi, dword [esp + 0x3c]
xor esi, esi
inc esi
push esi
push esi
push ebx
push ebx
push esi
push esi
push esi
lea edx, [esp + 0x2c]
mov ecx, edi
call fcn.0040f5b2
test al, al
jne 0x42ceed
lea eax, [esp + 0x10]
push eax
lea eax, [edi + 0x202c]
push eax
lea eax, [esp + 0x84]
push eax
call fcn.00402163
add esp, 0xc
push ebx
push esi
push ebx
push ebx
push esi
push esi
push esi
mov edx, eax
mov ecx, edi
mov byte [esp + 0xbc], 0xd
call fcn.0040f5b2
mov bl, al
neg bl
mov byte [esp + 0xa0], 0xc
mov ecx, dword [esp + 0x7c]
sbb bl, bl
add ecx, 0xfffffff0
inc bl
call fcn.00402883
test bl, bl
je 0x42ceed
push dword [esp + 0x28]
lea ecx, [esp + 0x48]
call fcn.00434b30
push str.UninstallString
mov ecx, eax
call fcn.0040c675
test eax, eax
je 0x42ce29
push dword [esp + 0x28]
lea ecx, [esp + 0x48]
call fcn.00434b30
push str.QuietUninstallString
mov ecx, eax
call fcn.0040c675
test eax, eax
je 0x42ce29
push 0x2a
jmp 0x42ce2b
mov byte [esp + 0xa0], 5
mov ecx, dword [esp + 0x30]
add ecx, 0xfffffff0
call fcn.00402883
jmp 0x42d126
push 0x24
xor eax, eax
cmp dword [esp + 0x30], 0x200
pop esi
sete al
push eax
push ecx
mov ecx, esp
mov dword [esp + 0x1c], esp
push 0x520938
call fcn.0040255d
push ecx
mov byte [esp + 0xac], 0xe
lea eax, [esp + 0x1c]
mov dword [esp + 0x6c], esp
mov ecx, esp
push eax
call fcn.004025a1
push dword [esp + 0x34]
lea ecx, [esp + 0x54]
mov byte [esp + 0xb0], 0xf
call fcn.00434b30
push ecx
mov dword [esp + 0x68], esp
mov ecx, esp
push eax
call fcn.004025a1
push ecx
mov eax, esp
mov byte [esp + 0xb4], 0x10
mov dword [esp + 0x34], esp
lea ecx, [esp + 0x30]
push ecx
push str.HKEY_LOCAL_MACHINE_
push eax
call fcn.0040c5f2
add esp, 0xc
push edi
mov ecx, esi
mov byte [esp + 0xb8], 0xc
call fcn.0040d1c1
mov ebx, eax
mov eax, dword [esp + 0x18]
cmp dword [eax - 0xc], 0
je 0x42ceca
lea eax, [esp + 0x18]
jmp 0x42ceda
push dword [esp + 0x24]
lea ecx, [esp + 0x84]
call fcn.00434b30
push ecx
mov dword [esp + 0x24], esp
mov ecx, esp
push eax
call fcn.004025a1
push edi
call fcn.0040d964
inc dword [esp + 0x28]
mov eax, dword [esp + 0x28]
cmp eax, dword [esp + 0x4c]
jl 0x42ccfa
jmp 0x42cfc3
xor eax, eax
cmp dword [esp + 0x2c], 0x200
sete al
push eax
push ecx
mov ecx, esp
mov dword [esp + 0x28], esp
push 0x520938
call fcn.0040255d
push ecx
mov byte [esp + 0xac], 0x11
lea eax, [esp + 0x1c]
mov dword [esp + 0x64], esp
mov ecx, esp
push eax
call fcn.004025a1
push ecx
mov byte [esp + 0xb0], 0x12
mov ecx, esp
mov dword [esp + 0x70], esp
push str.UninstallString
call fcn.0040255d
push ecx
mov eax, esp
mov byte [esp + 0xb4], 0x13
mov dword [esp + 0x28], esp
lea ecx, [esp + 0x30]
push ecx
push str.HKEY_LOCAL_MACHINE_
push eax
call fcn.0040c5f2
add esp, 0xc
push dword [esp + 0x50]
mov byte [esp + 0xb8], 0xc
push 0x24
pop ecx
call fcn.0040d1c1
mov ebx, eax
mov eax, dword [esp + 0x18]
cmp dword [eax - 0xc], 0
je 0x42cf9d
lea eax, [esp + 0x18]
jmp 0x42cfad
push dword [esp + 0x24]
lea ecx, [esp + 0x84]
call fcn.00434b30
push ecx
mov dword [esp + 0x24], esp
mov ecx, esp
push eax
call fcn.004025a1
push dword [esp + 0x40]
call fcn.0040d964
lea ecx, [esp + 0x44]
mov byte [esp + 0xa0], 5
call fcn.00495921
jmp 0x42d119
push dword [esp + 0x2c]
lea eax, [esp + 0x20]
push ecx
mov dword [esp + 0x28], esp
mov ecx, esp
push eax
call fcn.004025a1
call fcn.0042d206
cmp eax, esi
jne 0x42d11d
cmp dword [0x55f224], esi
jne 0x42d11d
xor eax, eax
cmp dword [esp + 0x2c], 0x200
mov esi, 0x520938
sete al
push eax
push ecx
mov ecx, esp
mov dword [esp + 0x28], esp
push esi
call fcn.0040255d
push ecx
mov byte [esp + 0xac], 7
lea eax, [esp + 0x1c]
mov dword [esp + 0x64], esp
mov ecx, esp
push eax
call fcn.004025a1
push ecx
mov byte [esp + 0xb0], 8
mov ecx, esp
mov dword [esp + 0x70], esp
push str.UninstallString
call fcn.0040255d
push ecx
mov eax, esp
mov byte [esp + 0xb4], 9
mov dword [esp + 0x28], esp
lea ecx, [esp + 0x30]
push ecx
push str.HKEY_LOCAL_MACHINE_
push eax
call fcn.0040c5f2
add esp, 0xc
push ebx
push 0x23
pop ecx
mov byte [esp + 0xb8], 5
call fcn.0040d1c1
push dword [esp + 0x24]
lea ecx, [esp + 0x84]
mov edi, eax
call fcn.00434b30
push ecx
mov ecx, esp
mov dword [esp + 0x24], esp
push eax
push esi
push ecx
mov dword [esp + 0x24], ecx
mov ecx, esp
mov dword [esp + 0x30], esp
push str.RESOURCESTRING
call fcn.0040255d
push ecx
mov byte [esp + 0xb4], 0xa
mov ecx, esp
mov dword [esp + 0x6c], esp
push str.S9PT9_393
call fcn.0040255d
lea eax, [esp + 0x78]
push eax
mov byte [esp + 0xb8], 5
call fcn.00406e18
push eax
mov byte [esp + 0xac], 0xb
mov eax, dword [esp + 0x20]
push eax
call fcn.00402163
add esp, 0xc
push ebx
mov ebx, edi
call fcn.0040d964
mov byte [esp + 0xa0], 5
mov ecx, dword [esp + 0x64]
add ecx, 0xfffffff0
call fcn.00402883
mov ebx, dword [esp + 0x3c]
lea ecx, [esp + 0x34]
call fcn.00411faa
mov esi, dword [esp + 0x5c]
inc dword [esp + 0x24]
mov eax, dword [esp + 0x24]
cmp eax, dword [esp + 0x88]
jl 0x42ca7e
mov ecx, dword [esp + 0x10]
add ecx, 0xfffffff0
call fcn.00402883
mov ecx, dword [esp + 0x18]
add ecx, 0xfffffff0
call fcn.00402883
mov ecx, dword [esp + 0x1c]
add ecx, 0xfffffff0
call fcn.00402883
lea ecx, [esp + 0x68]
mov byte [esp + 0xa0], 1
call fcn.00495921
lea ecx, [esp + 0x80]
mov byte [esp + 0xa0], 0
call fcn.00495921
or dword [esp + 0xa0], 0xffffffff
lea ecx, [esp + 0x34]
call fcn.00411faa
inc dword [esp + 0x40]
cmp dword [esp + 0x40], esi
jl 0x42c98e
jmp 0x42c909
mov ecx, dword [esp + 0x10]
add ecx, 0xfffffff0
call fcn.00402883
mov ecx, dword [esp + 0x18]
add ecx, 0xfffffff0
call fcn.00402883
mov ecx, dword [esp + 0x1c]
add ecx, 0xfffffff0
call fcn.00402883
lea ecx, [esp + 0x68]
mov byte [esp + 0xa0], 1
call fcn.00495921
lea ecx, [esp + 0x80]
mov byte [esp + 0xa0], 0
call fcn.00495921
lea ecx, [esp + 0x34]
call fcn.00411faa
push 2
pop eax
jmp 0x42c978