Function at 0x413f00
Capabilities:
Query or enumerate registry value
Read .ini file

Disassembly:
sub esp, 0x138
push ebx
push ebp
push esi
mov esi, dword [esp + 0x148]
push edi
push 0
push esi
mov ebx, 1
mov dword [esp + 0x1c], 0x104
call fcn.00414d10
add esp, 8
cmp eax, 0xffffffff
jne 0x413f3b
mov eax, ebx
pop edi
pop esi
pop ebp
pop ebx
add esp, 0x138
ret
lea eax, [esp + 0x30]
push 4
push eax
call fcn.00414250
add esp, 8
lea ecx, [esp + 0x20]
push 4
push ecx
call fcn.00414250
mov eax, dword [str.SoftwareMicrosoftInternet_Explorer]
add esp, 8
lea edx, [esp + 0x18]
push edx
push 0x20019
push 0
push eax
push 0x80000002
call dword [sym.imp.ADVAPI32.dll_RegOpenKeyExA]
test eax, eax
je 0x413f87
xor eax, eax
pop edi
pop esi
pop ebp
pop ebx
add esp, 0x138
ret
lea ecx, [esp + 0x14]
lea edx, [esp + 0x44]
push ecx
mov ecx, dword [esp + 0x1c]
lea eax, [esp + 0x44]
push edx
push eax
push 0
push str.Version
push ecx
call dword [sym.imp.ADVAPI32.dll_RegQueryValueExA]
test eax, eax
je 0x413fb9
xor eax, eax
pop edi
pop esi
pop ebp
pop ebx
add esp, 0x138
ret
lea edx, [esp + 0x44]
lea eax, [esp + 0x30]
push edx
push 4
push eax
call fcn.004141b0
mov ecx, 0x41
xor eax, eax
lea edi, [esp + 0x50]
add esp, 0xc
mov ebp, dword [sym.imp.KERNEL32.dll_GetPrivateProfileStringA]
rep stosd dword es:[edi], eax
push esi
lea ecx, [esp + 0x48]
push 0x104
push ecx
push str.ERROR_FAILURE
push str.Version
push str.IE4Check
call ebp
mov esi, str.ERROR_FAILURE
lea eax, [esp + 0x44]
mov dl, byte [eax]
mov cl, dl
cmp dl, byte [esi]
jne 0x414029
test cl, cl
je 0x414025
mov dl, byte [eax + 1]
mov cl, dl
cmp dl, byte [esi + 1]
jne 0x414029
add eax, 2
add esi, 2
test cl, cl
jne 0x414005
xor eax, eax
jmp 0x41402e
sbb eax, eax
sbb eax, 0xffffffff
test eax, eax
je 0x41408e
lea eax, [esp + 0x44]
lea ecx, [esp + 0x20]
push eax
push 4
push ecx
call fcn.004141b0
mov edx, dword [esp + 0x3c]
mov eax, dword [esp + 0x2c]
add esp, 0xc
cmp edx, eax
mov ebx, 1
ja 0x41407d
xor eax, eax
mov ecx, dword [esp + eax + 0x30]
mov edx, dword [esp + eax + 0x20]
cmp ecx, edx
jb 0x41407b
add eax, 4
cmp eax, 0x10
je 0x41407d
mov edx, dword [esp + eax + 0x30]
mov ecx, dword [esp + eax + 0x20]
cmp edx, ecx
jbe 0x414059
jmp 0x41407d
xor ebx, ebx
test ebx, ebx
jne 0x41408e
xor eax, eax
pop edi
pop esi
pop ebp
pop ebx
add esp, 0x138
ret
mov ecx, 0x41
xor eax, eax
lea edi, [esp + 0x44]
rep stosd dword es:[edi], eax
mov eax, dword [esp + 0x14c]
lea ecx, [esp + 0x44]
push eax
push 0x104
push ecx
push str.ERROR_FAILURE
push str.Files
push str.IE4Check
call ebp
mov esi, str.ERROR_FAILURE
lea eax, [esp + 0x44]
mov dl, byte [eax]
mov cl, dl
cmp dl, byte [esi]
jne 0x4140eb
test cl, cl
je 0x4140e7
mov dl, byte [eax + 1]
mov cl, dl
cmp dl, byte [esi + 1]
jne 0x4140eb
add eax, 2
add esi, 2
test cl, cl
jne 0x4140c7
xor eax, eax
jmp 0x4140f0
sbb eax, eax
sbb eax, 0xffffffff
test eax, eax
je 0x414197
mov al, byte [esp + 0x44]
lea esi, [esp + 0x44]
test al, al
je 0x414197
cmp dword [0x4268d4], 1
jle 0x414121
movsx eax, byte [esi]
push 8
push eax
call fcn.004169b0
add esp, 8
jmp 0x414130
movsx ecx, byte [esi]
mov edx, dword [str.________________________________H]
mov al, byte [edx + ecx*2]
and eax, 8
test eax, eax
je 0x414137
inc esi
jmp 0x414108
mov al, byte [esi]
mov edi, esi
test al, al
je 0x41414b
cmp al, 0x2c
je 0x41414b
mov al, byte [esi + 1]
inc esi
test al, al
jne 0x41413f
mov al, byte [esi]
mov byte [esi], 0
cmp al, 0x2c
jne 0x414155
inc esi
mov edx, dword [esp + 0x14c]
lea eax, [esp + 0x1c]
lea ecx, [esp + 0x10]
push eax
push ecx
push edi
push str.IE4Check
push edx
call fcn.00414460
mov eax, dword [esp + 0x30]
mov ecx, dword [esp + 0x24]
add esp, 0x14
push eax
push ecx
push edi
call fcn.00414270
mov ebx, eax
add esp, 0xc
test ebx, ebx
je 0x414197
cmp byte [esi], 0
jne 0x414108
pop edi
pop esi
mov eax, ebx
pop ebp
pop ebx
add esp, 0x138
ret