Function at 0x4128c0
Capabilities:
Query or enumerate registry value
Read .ini file

Disassembly:
sub esp, 0x138
push ebx
push ebp
push esi
mov esi, dword [esp + 0x148]
push edi
push 0
push esi
mov ebx, 1
mov dword [esp + 0x1c], 0x104
call fcn.004136d0
add esp, 8
cmp eax, 0xffffffff
jne 0x4128fb
mov eax, ebx
pop edi
pop esi
pop ebp
pop ebx
add esp, 0x138
ret
lea eax, [esp + 0x30]
push 4
push eax
call fcn.00412c10
add esp, 8
lea ecx, [esp + 0x20]
push 4
push ecx
call fcn.00412c10
mov eax, dword [str.SoftwareMicrosoftInternet_Explorer]
add esp, 8
lea edx, [esp + 0x18]
push edx
push 0x20019
push 0
push eax
push 0x80000002
call dword [sym.imp.ADVAPI32.dll_RegOpenKeyExA]
test eax, eax
je 0x412947
xor eax, eax
pop edi
pop esi
pop ebp
pop ebx
add esp, 0x138
ret
lea ecx, [esp + 0x14]
lea edx, [esp + 0x44]
push ecx
mov ecx, dword [esp + 0x1c]
lea eax, [esp + 0x44]
push edx
push eax
push 0
push str.Version
push ecx
call dword [sym.imp.ADVAPI32.dll_RegQueryValueExA]
test eax, eax
je 0x412979
xor eax, eax
pop edi
pop esi
pop ebp
pop ebx
add esp, 0x138
ret
lea edx, [esp + 0x44]
lea eax, [esp + 0x30]
push edx
push 4
push eax
call fcn.00412b70
mov ecx, 0x41
xor eax, eax
lea edi, [esp + 0x50]
add esp, 0xc
mov ebp, dword [sym.imp.KERNEL32.dll_GetPrivateProfileStringA]
rep stosd dword es:[edi], eax
push esi
lea ecx, [esp + 0x48]
push 0x104
push ecx
push str.ERROR_FAILURE
push str.Version
push str.IE4Check
call ebp
mov esi, str.ERROR_FAILURE
lea eax, [esp + 0x44]
mov dl, byte [eax]
mov cl, dl
cmp dl, byte [esi]
jne 0x4129e9
test cl, cl
je 0x4129e5
mov dl, byte [eax + 1]
mov cl, dl
cmp dl, byte [esi + 1]
jne 0x4129e9
add eax, 2
add esi, 2
test cl, cl
jne 0x4129c5
xor eax, eax
jmp 0x4129ee
sbb eax, eax
sbb eax, 0xffffffff
test eax, eax
je 0x412a4e
lea eax, [esp + 0x44]
lea ecx, [esp + 0x20]
push eax
push 4
push ecx
call fcn.00412b70
mov edx, dword [esp + 0x3c]
mov eax, dword [esp + 0x2c]
add esp, 0xc
cmp edx, eax
mov ebx, 1
ja 0x412a3d
xor eax, eax
mov ecx, dword [esp + eax + 0x30]
mov edx, dword [esp + eax + 0x20]
cmp ecx, edx
jb 0x412a3b
add eax, 4
cmp eax, 0x10
je 0x412a3d
mov edx, dword [esp + eax + 0x30]
mov ecx, dword [esp + eax + 0x20]
cmp edx, ecx
jbe 0x412a19
jmp 0x412a3d
xor ebx, ebx
test ebx, ebx
jne 0x412a4e
xor eax, eax
pop edi
pop esi
pop ebp
pop ebx
add esp, 0x138
ret
mov ecx, 0x41
xor eax, eax
lea edi, [esp + 0x44]
rep stosd dword es:[edi], eax
mov eax, dword [esp + 0x14c]
lea ecx, [esp + 0x44]
push eax
push 0x104
push ecx
push str.ERROR_FAILURE
push str.Files
push str.IE4Check
call ebp
mov esi, str.ERROR_FAILURE
lea eax, [esp + 0x44]
mov dl, byte [eax]
mov cl, dl
cmp dl, byte [esi]
jne 0x412aab
test cl, cl
je 0x412aa7
mov dl, byte [eax + 1]
mov cl, dl
cmp dl, byte [esi + 1]
jne 0x412aab
add eax, 2
add esi, 2
test cl, cl
jne 0x412a87
xor eax, eax
jmp 0x412ab0
sbb eax, eax
sbb eax, 0xffffffff
test eax, eax
je 0x412b57
mov al, byte [esp + 0x44]
lea esi, [esp + 0x44]
test al, al
je 0x412b57
cmp dword [0x4237e4], 1
jle 0x412ae1
movsx eax, byte [esi]
push 8
push eax
call fcn.00415370
add esp, 8
jmp 0x412af0
movsx ecx, byte [esi]
mov edx, dword [str.________________________________H]
mov al, byte [edx + ecx*2]
and eax, 8
test eax, eax
je 0x412af7
inc esi
jmp 0x412ac8
mov al, byte [esi]
mov edi, esi
test al, al
je 0x412b0b
cmp al, 0x2c
je 0x412b0b
mov al, byte [esi + 1]
inc esi
test al, al
jne 0x412aff
mov al, byte [esi]
mov byte [esi], 0
cmp al, 0x2c
jne 0x412b15
inc esi
mov edx, dword [esp + 0x14c]
lea eax, [esp + 0x1c]
lea ecx, [esp + 0x10]
push eax
push ecx
push edi
push str.IE4Check
push edx
call fcn.00412e20
mov eax, dword [esp + 0x30]
mov ecx, dword [esp + 0x24]
add esp, 0x14
push eax
push ecx
push edi
call fcn.00412c30
mov ebx, eax
add esp, 0xc
test ebx, ebx
je 0x412b57
cmp byte [esi], 0
jne 0x412ac8
pop edi
pop esi
mov eax, ebx
pop ebp
pop ebx
add esp, 0x138
ret