Function at 0x42cce6
Capabilities:
Resolve function by parsing pe exports

Disassembly:
push ebp
mov ebp, esp
and esp, 0xfffffff8
push 0xffffffffffffffff
push 0x4e07d9
mov eax, dword fs:[0]
push eax
sub esp, 0x88
push ebx
push esi
push edi
mov eax, dword [0x56f710]
xor eax, esp
push eax
lea eax, [esp + 0x98]
mov dword fs:[0], eax
mov ebx, ecx
mov dword [esp + 0x3c], ebx
mov eax, dword [ebx]
call dword [eax + 0x14]
call fcn.0045d184
movzx esi, al
inc esi
xor eax, eax
cmp esi, eax
mov dword [esp + 0x5c], esi
mov dword [esp + 0x40], eax
jg 0x42cdc5
mov eax, dword [ebx]
mov ecx, ebx
call dword [eax + 0x18]
mov eax, ebx
call fcn.0040d171
test eax, eax
jne 0x42d633
mov eax, dword [ebx]
mov ecx, ebx
call dword [eax + 0x1c]
mov eax, ebx
call fcn.0040d171
test eax, eax
jne 0x42d633
call fcn.0045d184
movzx eax, al
push eax
push ecx
mov ecx, esp
mov dword [esp + 0x28], esp
push str.HKEY_CLASSES_ROOT
call fcn.0040254f
mov eax, dword [ebx]
push 0x5798b4
push SysReAllocStringLen
mov ecx, ebx
call dword [eax + 0x20]
mov ecx, ebx
call fcn.0040ec4a
mov eax, ebx
call fcn.0040d171
xor ecx, ecx
test eax, eax
setne cl
inc ecx
mov eax, ecx
mov ecx, dword [esp + 0x98]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret
xor eax, eax
mov dword [esp + 0x2c], eax
mov dword [esp + 0x34], eax
mov dword [esp + 0x38], eax
mov dword [esp + 0xa0], eax
call fcn.0045d184
test al, al
je 0x42cdf7
mov eax, dword [esp + 0x40]
neg eax
sbb eax, eax
and eax, 0xffffff00
add eax, 0x200
mov dword [esp + 0x2c], eax
push dword [0x5798a8]
mov eax, dword [esp + 0x30]
or eax, 0x20019
push reloc.OLEAUT32.dll_SysReAllocString
lea edi, [esp + 0x3c]
call fcn.0041236b
test eax, eax
jne 0x42d5bd
lea ecx, [esp + 0x80]
call fcn.0049ce85
lea ecx, [esp + 0x68]
mov byte [esp + 0xa0], 1
call fcn.0049ce85
mov byte [esp + 0xa0], 2
call fcn.0049219b
push eax
lea ecx, [esp + 0x20]
call fcn.00402802
mov byte [esp + 0xa0], 3
call fcn.0049219b
push eax
lea ecx, [esp + 0x1c]
call fcn.00402802
mov byte [esp + 0xa0], 4
call fcn.0049219b
push eax
lea ecx, [esp + 0x14]
call fcn.00402802
lea eax, [esp + 0x80]
push eax
mov byte [esp + 0xa4], 5
push dword [esp + 0x38]
call fcn.0040ce15
pop ecx
pop ecx
mov ecx, edi
call fcn.004123a7
and dword [esp + 0x24], 0
cmp dword [esp + 0x88], 0
jle 0x42d574
push 1
call dword [sym.imp.KERNEL32.dll_Sleep]
mov eax, ebx
call fcn.0040d171
test eax, eax
jne 0x42d5e1
push dword [esp + 0x24]
lea ecx, [esp + 0x84]
call fcn.0040cb47
push dword [eax]
lea eax, [esp + 0x20]
push dword [0x5798a8]
push 0x532878
push eax
call fcn.00402a07
mov eax, dword [esp + 0x3c]
add esp, 0x10
push dword [esp + 0x1c]
or eax, 0x2001f
push reloc.OLEAUT32.dll_SysReAllocString
lea edi, [esp + 0x3c]
call fcn.0041236b
test eax, eax
jne 0x42d55f
lea eax, [esp + 0x68]
push eax
push dword [esp + 0x38]
call fcn.0040cf50
xor esi, esi
cmp dword [esp + 0x70], esi
jle 0x42cfa9
push esi
lea ecx, [esp + 0x6c]
call fcn.0040cb47
push eax
lea ecx, [esp + 0x34]
call fcn.004022fa
lea edi, [esp + 0x30]
mov byte [esp + 0xa0], 6
call fcn.00411ec6
push str.noremove
mov ecx, edi
call fcn.0040ca34
test eax, eax
je 0x42d245
push str.systemcomponent
mov ecx, edi
call fcn.0040ca34
test eax, eax
je 0x42d245
push str.windowscomponent
mov ecx, edi
call fcn.0040ca34
test eax, eax
je 0x42d245
mov byte [esp + 0xa0], 5
mov ecx, dword [esp + 0x30]
add ecx, 0xfffffff0
call fcn.00402845
inc esi
cmp esi, dword [esp + 0x70]
jl 0x42cf2d
xor esi, esi
cmp dword [esp + 0x70], esi
je 0x42d40e
cmp dword [esp + 0x70], 1
jne 0x42cfcb
mov eax, dword [esp + 0x6c]
mov eax, dword [eax]
cmp dword [eax - 0xc], esi
je 0x42d40e
lea ecx, [esp + 0x18]
call fcn.0040264d
mov ebx, 0x104
push ebx
lea ecx, [esp + 0x1c]
mov dword [esp + 0x18], ebx
call fcn.0040294d
push str.DisplayName
lea ecx, [esp + 0x38]
push ecx
lea esi, [esp + 0x1c]
mov edi, eax
call fcn.00412303
push 0xffffffffffffffff
lea ecx, [esp + 0x1c]
call fcn.004123c7
lea ecx, [esp + 0x44]
call fcn.0049ce85
mov esi, str.UninstallString
push esi
mov byte [esp + 0xa4], 0xc
push dword [esp + 0x50]
lea ecx, [esp + 0x4c]
call fcn.0049d315
push str.QuietUninstallString
push dword [esp + 0x50]
lea ecx, [esp + 0x4c]
call fcn.0049d315
push str.InstallSource
push dword [esp + 0x50]
lea ecx, [esp + 0x4c]
call fcn.0049d315
push str.DisplayIcon
push dword [esp + 0x50]
lea ecx, [esp + 0x4c]
call fcn.0049d315
push str.Installlocation
push dword [esp + 0x50]
lea ecx, [esp + 0x4c]
call fcn.0049d315
push str.helpstring
push dword [esp + 0x50]
lea ecx, [esp + 0x4c]
call fcn.0049d315
push str.readme
push dword [esp + 0x50]
lea ecx, [esp + 0x4c]
call fcn.0049d315
lea ecx, [esp + 0x10]
call fcn.0040264d
push ebx
lea ecx, [esp + 0x14]
call fcn.0040294d
push esi
lea ecx, [esp + 0x38]
push ecx
lea esi, [esp + 0x1c]
mov edi, eax
call fcn.00412303
push 0xffffffffffffffff
lea ecx, [esp + 0x14]
mov esi, eax
call fcn.004123c7
cmp esi, 2
jne 0x42d11f
mov eax, dword [esp + 0x10]
cmp dword [eax - 0xc], 0
jne 0x42d11f
lea ecx, [esp + 0x10]
call fcn.0040264d
push ebx
lea ecx, [esp + 0x14]
call fcn.0040294d
push str.QuietUninstallString
lea ecx, [esp + 0x38]
push ecx
lea esi, [esp + 0x1c]
mov edi, eax
call fcn.00412303
push 0xffffffffffffffff
lea ecx, [esp + 0x14]
mov esi, eax
call fcn.004123c7
cmp esi, 2
jne 0x42d11f
mov eax, dword [esp + 0x10]
cmp dword [eax - 0xc], 0
je 0x42d339
and dword [esp + 0x28], 0
cmp dword [esp + 0x4c], 0
jle 0x42d3f8
lea ecx, [esp + 0x10]
call fcn.0040264d
mov eax, 0x208
push eax
lea ecx, [esp + 0x14]
mov dword [esp + 0x18], eax
call fcn.0040294d
push dword [esp + 0x28]
lea ecx, [esp + 0x48]
mov edi, eax
call fcn.0040cb47
push dword [eax]
lea eax, [esp + 0x38]
push eax
lea esi, [esp + 0x1c]
call fcn.00412303
push 0xffffffffffffffff
lea ecx, [esp + 0x14]
mov esi, eax
call fcn.004123c7
xor ebx, ebx
cmp esi, ebx
jne 0x42d322
mov eax, dword [esp + 0x10]
cmp dword [eax - 0xc], ebx
je 0x42d322
mov edi, dword [esp + 0x3c]
xor esi, esi
inc esi
push esi
push esi
push ebx
push ebx
push esi
push esi
push esi
lea edx, [esp + 0x2c]
mov ecx, edi
call fcn.0040f99a
test al, al
jne 0x42d322
lea eax, [esp + 0x10]
push eax
lea eax, [edi + 0x202c]
push eax
lea eax, [esp + 0x84]
push eax
call fcn.00402125
add esp, 0xc
push ebx
push esi
push ebx
push ebx
push esi
push esi
push esi
mov edx, eax
mov ecx, edi
mov byte [esp + 0xbc], 0xd
call fcn.0040f99a
mov bl, al
neg bl
mov byte [esp + 0xa0], 0xc
mov ecx, dword [esp + 0x7c]
sbb bl, bl
add ecx, 0xfffffff0
inc bl
call fcn.00402845
test bl, bl
je 0x42d322
push dword [esp + 0x28]
lea ecx, [esp + 0x48]
call fcn.0040cb47
push str.UninstallString
mov ecx, eax
call fcn.0040ca34
test eax, eax
je 0x42d25e
push dword [esp + 0x28]
lea ecx, [esp + 0x48]
call fcn.0040cb47
push str.QuietUninstallString
mov ecx, eax
call fcn.0040ca34
test eax, eax
je 0x42d25e
push 0x2a
jmp 0x42d260
mov byte [esp + 0xa0], 5
mov ecx, dword [esp + 0x30]
add ecx, 0xfffffff0
call fcn.00402845
jmp 0x42d55b
push 0x24
xor eax, eax
cmp dword [esp + 0x30], 0x200
pop esi
sete al
push eax
push ecx
mov ecx, esp
mov dword [esp + 0x1c], esp
push 0x52dc10
call fcn.0040254f
push ecx
mov byte [esp + 0xac], 0xe
lea eax, [esp + 0x1c]
mov dword [esp + 0x6c], esp
mov ecx, esp
push eax
call fcn.004022fa
push dword [esp + 0x34]
lea ecx, [esp + 0x54]
mov byte [esp + 0xb0], 0xf
call fcn.0040cb47
push ecx
mov dword [esp + 0x68], esp
mov ecx, esp
push eax
call fcn.004022fa
push ecx
mov eax, esp
mov byte [esp + 0xb4], 0x10
mov dword [esp + 0x34], esp
lea ecx, [esp + 0x30]
push ecx
push str.HKEY_LOCAL_MACHINE_
push eax
call fcn.0040c9b1
add esp, 0xc
push edi
mov ecx, esi
mov byte [esp + 0xb8], 0xc
call fcn.0040d5a9
mov ebx, eax
mov eax, dword [esp + 0x18]
cmp dword [eax - 0xc], 0
je 0x42d2ff
lea eax, [esp + 0x18]
jmp 0x42d30f
push dword [esp + 0x24]
lea ecx, [esp + 0x84]
call fcn.0040cb47
push ecx
mov dword [esp + 0x24], esp
mov ecx, esp
push eax
call fcn.004022fa
push edi
call fcn.0040dd4c
inc dword [esp + 0x28]
mov eax, dword [esp + 0x28]
cmp eax, dword [esp + 0x4c]
jl 0x42d12f
jmp 0x42d3f8
xor eax, eax
cmp dword [esp + 0x2c], 0x200
sete al
push eax
push ecx
mov ecx, esp
mov dword [esp + 0x28], esp
push 0x52dc10
call fcn.0040254f
push ecx
mov byte [esp + 0xac], 0x11
lea eax, [esp + 0x1c]
mov dword [esp + 0x64], esp
mov ecx, esp
push eax
call fcn.004022fa
push ecx
mov byte [esp + 0xb0], 0x12
mov ecx, esp
mov dword [esp + 0x70], esp
push str.UninstallString
call fcn.0040254f
push ecx
mov eax, esp
mov byte [esp + 0xb4], 0x13
mov dword [esp + 0x28], esp
lea ecx, [esp + 0x30]
push ecx
push str.HKEY_LOCAL_MACHINE_
push eax
call fcn.0040c9b1
add esp, 0xc
push dword [esp + 0x50]
mov byte [esp + 0xb8], 0xc
push 0x24
pop ecx
call fcn.0040d5a9
mov ebx, eax
mov eax, dword [esp + 0x18]
cmp dword [eax - 0xc], 0
je 0x42d3d2
lea eax, [esp + 0x18]
jmp 0x42d3e2
push dword [esp + 0x24]
lea ecx, [esp + 0x84]
call fcn.0040cb47
push ecx
mov dword [esp + 0x24], esp
mov ecx, esp
push eax
call fcn.004022fa
push dword [esp + 0x40]
call fcn.0040dd4c
lea ecx, [esp + 0x44]
mov byte [esp + 0xa0], 5
call fcn.0049d161
jmp 0x42d54e
push dword [esp + 0x2c]
lea eax, [esp + 0x20]
push ecx
mov dword [esp + 0x28], esp
mov ecx, esp
push eax
call fcn.004022fa
call fcn.0042d63b
cmp eax, esi
jne 0x42d552
cmp dword [0x5722a4], esi
jne 0x42d552
xor eax, eax
cmp dword [esp + 0x2c], 0x200
mov esi, 0x52dc10
sete al
push eax
push ecx
mov ecx, esp
mov dword [esp + 0x28], esp
push esi
call fcn.0040254f
push ecx
mov byte [esp + 0xac], 7
lea eax, [esp + 0x1c]
mov dword [esp + 0x64], esp
mov ecx, esp
push eax
call fcn.004022fa
push ecx
mov byte [esp + 0xb0], 8
mov ecx, esp
mov dword [esp + 0x70], esp
push str.UninstallString
call fcn.0040254f
push ecx
mov eax, esp
mov byte [esp + 0xb4], 9
mov dword [esp + 0x28], esp
lea ecx, [esp + 0x30]
push ecx
push str.HKEY_LOCAL_MACHINE_
push eax
call fcn.0040c9b1
add esp, 0xc
push ebx
push 0x23
pop ecx
mov byte [esp + 0xb8], 5
call fcn.0040d5a9
push dword [esp + 0x24]
lea ecx, [esp + 0x84]
mov edi, eax
call fcn.0040cb47
push ecx
mov ecx, esp
mov dword [esp + 0x24], esp
push eax
push esi
push ecx
mov dword [esp + 0x24], ecx
mov ecx, esp
mov dword [esp + 0x30], esp
push str.RESOURCESTRING
call fcn.0040254f
push ecx
mov byte [esp + 0xb4], 0xa
mov ecx, esp
mov dword [esp + 0x6c], esp
push str.IDS_INCOMPLETE_ENTRY
call fcn.0040254f
lea eax, [esp + 0x78]
push eax
mov byte [esp + 0xb8], 5
call fcn.00406eff
push eax
mov byte [esp + 0xac], 0xb
mov eax, dword [esp + 0x20]
push eax
call fcn.00402125
add esp, 0xc
push ebx
mov ebx, edi
call fcn.0040dd4c
mov byte [esp + 0xa0], 5
mov ecx, dword [esp + 0x64]
add ecx, 0xfffffff0
call fcn.00402845
mov ebx, dword [esp + 0x3c]
lea ecx, [esp + 0x34]
call fcn.004123a7
mov esi, dword [esp + 0x5c]
inc dword [esp + 0x24]
mov eax, dword [esp + 0x24]
cmp eax, dword [esp + 0x88]
jl 0x42ceb3
mov ecx, dword [esp + 0x10]
add ecx, 0xfffffff0
call fcn.00402845
mov ecx, dword [esp + 0x18]
add ecx, 0xfffffff0
call fcn.00402845
mov ecx, dword [esp + 0x1c]
add ecx, 0xfffffff0
call fcn.00402845
lea ecx, [esp + 0x68]
mov byte [esp + 0xa0], 1
call fcn.0049d161
lea ecx, [esp + 0x80]
mov byte [esp + 0xa0], 0
call fcn.0049d161
or dword [esp + 0xa0], 0xffffffff
lea ecx, [esp + 0x34]
call fcn.004123a7
inc dword [esp + 0x40]
cmp dword [esp + 0x40], esi
jl 0x42cdc3
jmp 0x42cd3e
mov ecx, dword [esp + 0x10]
add ecx, 0xfffffff0
call fcn.00402845
mov ecx, dword [esp + 0x18]
add ecx, 0xfffffff0
call fcn.00402845
mov ecx, dword [esp + 0x1c]
add ecx, 0xfffffff0
call fcn.00402845
lea ecx, [esp + 0x68]
mov byte [esp + 0xa0], 1
call fcn.0049d161
lea ecx, [esp + 0x80]
mov byte [esp + 0xa0], 0
call fcn.0049d161
lea ecx, [esp + 0x34]
call fcn.004123a7
push 2
pop eax
jmp 0x42cdad