Function at 0x42c8ee
Capabilities:
Resolve function by parsing pe exports

Disassembly:
push ebp
mov ebp, esp
and esp, 0xfffffff8
push 0xffffffffffffffff
push 0x4d7d72
mov eax, dword fs:[0]
push eax
sub esp, 0x88
push ebx
push esi
push edi
mov eax, dword [0x55f6c0]
xor eax, esp
push eax
lea eax, [esp + 0x98]
mov dword fs:[0], eax
mov ebx, ecx
mov dword [esp + 0x3c], ebx
mov eax, dword [ebx]
call dword [eax + 0x14]
call fcn.00460c64
movzx esi, al
inc esi
xor eax, eax
cmp esi, eax
mov dword [esp + 0x5c], esi
mov dword [esp + 0x40], eax
jg 0x42c9cd
mov eax, dword [ebx]
mov ecx, ebx
call dword [eax + 0x18]
mov eax, ebx
call fcn.0040cdbe
test eax, eax
jne 0x42d23b
mov eax, dword [ebx]
mov ecx, ebx
call dword [eax + 0x1c]
mov eax, ebx
call fcn.0040cdbe
test eax, eax
jne 0x42d23b
call fcn.00460c64
movzx eax, al
push eax
push ecx
mov ecx, esp
mov dword [esp + 0x28], esp
push str.HKEY_CLASSES_ROOT
call fcn.0040253e
mov eax, dword [ebx]
push 0x568e0c
push SysReAllocStringLen
mov ecx, ebx
call dword [eax + 0x20]
mov ecx, ebx
call fcn.0040e897
mov eax, ebx
call fcn.0040cdbe
xor ecx, ecx
test eax, eax
setne cl
inc ecx
mov eax, ecx
mov ecx, dword [esp + 0x98]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret
xor eax, eax
mov dword [esp + 0x2c], eax
mov dword [esp + 0x34], eax
mov dword [esp + 0x38], eax
mov dword [esp + 0xa0], eax
call fcn.00460c64
test al, al
je 0x42c9ff
mov eax, dword [esp + 0x40]
neg eax
sbb eax, eax
and eax, 0xffffff00
add eax, 0x200
mov dword [esp + 0x2c], eax
push dword [0x568e00]
mov eax, dword [esp + 0x30]
or eax, 0x20019
push reloc.OLEAUT32.dll_SysReAllocString
lea edi, [esp + 0x3c]
call fcn.00411f8b
test eax, eax
jne 0x42d1c5
lea ecx, [esp + 0x80]
call fcn.00495dfe
lea ecx, [esp + 0x68]
mov byte [esp + 0xa0], 1
call fcn.00495dfe
mov byte [esp + 0xa0], 2
call fcn.0048b151
push eax
lea ecx, [esp + 0x20]
call fcn.00402821
mov byte [esp + 0xa0], 3
call fcn.0048b151
push eax
lea ecx, [esp + 0x1c]
call fcn.00402821
mov byte [esp + 0xa0], 4
call fcn.0048b151
push eax
lea ecx, [esp + 0x14]
call fcn.00402821
lea eax, [esp + 0x80]
push eax
mov byte [esp + 0xa4], 5
push dword [esp + 0x38]
call fcn.0040ca62
pop ecx
pop ecx
mov ecx, edi
call fcn.00411fc7
and dword [esp + 0x24], 0
cmp dword [esp + 0x88], 0
jle 0x42d17c
push 1
call dword [sym.imp.KERNEL32.dll_Sleep]
mov eax, ebx
call fcn.0040cdbe
test eax, eax
jne 0x42d1e9
push dword [esp + 0x24]
lea ecx, [esp + 0x84]
call fcn.0040c7a1
push dword [eax]
lea eax, [esp + 0x20]
push dword [0x568e00]
push 0x5273e0
push eax
call fcn.00402a45
mov eax, dword [esp + 0x3c]
add esp, 0x10
push dword [esp + 0x1c]
or eax, 0x2001f
push reloc.OLEAUT32.dll_SysReAllocString
lea edi, [esp + 0x3c]
call fcn.00411f8b
test eax, eax
jne 0x42d167
lea eax, [esp + 0x68]
push eax
push dword [esp + 0x38]
call fcn.0040cb9d
xor esi, esi
cmp dword [esp + 0x70], esi
jle 0x42cbb1
push esi
lea ecx, [esp + 0x6c]
call fcn.0040c7a1
push eax
lea ecx, [esp + 0x34]
call fcn.00402582
lea edi, [esp + 0x30]
mov byte [esp + 0xa0], 6
call fcn.00411b13
push str.noremove
mov ecx, edi
call fcn.0040c68e
test eax, eax
je 0x42ce4d
push str.systemcomponent
mov ecx, edi
call fcn.0040c68e
test eax, eax
je 0x42ce4d
push str.windowscomponent
mov ecx, edi
call fcn.0040c68e
test eax, eax
je 0x42ce4d
mov byte [esp + 0xa0], 5
mov ecx, dword [esp + 0x30]
add ecx, 0xfffffff0
call fcn.00402883
inc esi
cmp esi, dword [esp + 0x70]
jl 0x42cb35
xor esi, esi
cmp dword [esp + 0x70], esi
je 0x42d016
cmp dword [esp + 0x70], 1
jne 0x42cbd3
mov eax, dword [esp + 0x6c]
mov eax, dword [eax]
cmp dword [eax - 0xc], esi
je 0x42d016
lea ecx, [esp + 0x18]
call fcn.0040266c
mov ebx, 0x104
push ebx
lea ecx, [esp + 0x1c]
mov dword [esp + 0x18], ebx
call fcn.0040298b
push str.DisplayName
lea ecx, [esp + 0x38]
push ecx
lea esi, [esp + 0x1c]
mov edi, eax
call fcn.00411f23
push 0xffffffffffffffff
lea ecx, [esp + 0x1c]
call fcn.00411fe7
lea ecx, [esp + 0x44]
call fcn.00495dfe
mov esi, str.UninstallString
push esi
mov byte [esp + 0xa4], 0xc
push dword [esp + 0x50]
lea ecx, [esp + 0x4c]
call fcn.004961de
push str.QuietUninstallString
push dword [esp + 0x50]
lea ecx, [esp + 0x4c]
call fcn.004961de
push str.InstallSource
push dword [esp + 0x50]
lea ecx, [esp + 0x4c]
call fcn.004961de
push str.DisplayIcon
push dword [esp + 0x50]
lea ecx, [esp + 0x4c]
call fcn.004961de
push str.Installlocation
push dword [esp + 0x50]
lea ecx, [esp + 0x4c]
call fcn.004961de
push str.helpstring
push dword [esp + 0x50]
lea ecx, [esp + 0x4c]
call fcn.004961de
push str.readme
push dword [esp + 0x50]
lea ecx, [esp + 0x4c]
call fcn.004961de
lea ecx, [esp + 0x10]
call fcn.0040266c
push ebx
lea ecx, [esp + 0x14]
call fcn.0040298b
push esi
lea ecx, [esp + 0x38]
push ecx
lea esi, [esp + 0x1c]
mov edi, eax
call fcn.00411f23
push 0xffffffffffffffff
lea ecx, [esp + 0x14]
mov esi, eax
call fcn.00411fe7
cmp esi, 2
jne 0x42cd27
mov eax, dword [esp + 0x10]
cmp dword [eax - 0xc], 0
jne 0x42cd27
lea ecx, [esp + 0x10]
call fcn.0040266c
push ebx
lea ecx, [esp + 0x14]
call fcn.0040298b
push str.QuietUninstallString
lea ecx, [esp + 0x38]
push ecx
lea esi, [esp + 0x1c]
mov edi, eax
call fcn.00411f23
push 0xffffffffffffffff
lea ecx, [esp + 0x14]
mov esi, eax
call fcn.00411fe7
cmp esi, 2
jne 0x42cd27
mov eax, dword [esp + 0x10]
cmp dword [eax - 0xc], 0
je 0x42cf41
and dword [esp + 0x28], 0
cmp dword [esp + 0x4c], 0
jle 0x42d000
lea ecx, [esp + 0x10]
call fcn.0040266c
mov eax, 0x208
push eax
lea ecx, [esp + 0x14]
mov dword [esp + 0x18], eax
call fcn.0040298b
push dword [esp + 0x28]
lea ecx, [esp + 0x48]
mov edi, eax
call fcn.0040c7a1
push dword [eax]
lea eax, [esp + 0x38]
push eax
lea esi, [esp + 0x1c]
call fcn.00411f23
push 0xffffffffffffffff
lea ecx, [esp + 0x14]
mov esi, eax
call fcn.00411fe7
xor ebx, ebx
cmp esi, ebx
jne 0x42cf2a
mov eax, dword [esp + 0x10]
cmp dword [eax - 0xc], ebx
je 0x42cf2a
mov edi, dword [esp + 0x3c]
xor esi, esi
inc esi
push esi
push esi
push ebx
push ebx
push esi
push esi
push esi
lea edx, [esp + 0x2c]
mov ecx, edi
call fcn.0040f5e7
test al, al
jne 0x42cf2a
lea eax, [esp + 0x10]
push eax
lea eax, [edi + 0x202c]
push eax
lea eax, [esp + 0x84]
push eax
call fcn.00402163
add esp, 0xc
push ebx
push esi
push ebx
push ebx
push esi
push esi
push esi
mov edx, eax
mov ecx, edi
mov byte [esp + 0xbc], 0xd
call fcn.0040f5e7
mov bl, al
neg bl
mov byte [esp + 0xa0], 0xc
mov ecx, dword [esp + 0x7c]
sbb bl, bl
add ecx, 0xfffffff0
inc bl
call fcn.00402883
test bl, bl
je 0x42cf2a
push dword [esp + 0x28]
lea ecx, [esp + 0x48]
call fcn.0040c7a1
push str.UninstallString
mov ecx, eax
call fcn.0040c68e
test eax, eax
je 0x42ce66
push dword [esp + 0x28]
lea ecx, [esp + 0x48]
call fcn.0040c7a1
push str.QuietUninstallString
mov ecx, eax
call fcn.0040c68e
test eax, eax
je 0x42ce66
push 0x2a
jmp 0x42ce68
mov byte [esp + 0xa0], 5
mov ecx, dword [esp + 0x30]
add ecx, 0xfffffff0
call fcn.00402883
jmp 0x42d163
push 0x24
xor eax, eax
cmp dword [esp + 0x30], 0x200
pop esi
sete al
push eax
push ecx
mov ecx, esp
mov dword [esp + 0x1c], esp
push 0x5229b8
call fcn.0040253e
push ecx
mov byte [esp + 0xac], 0xe
lea eax, [esp + 0x1c]
mov dword [esp + 0x6c], esp
mov ecx, esp
push eax
call fcn.00402582
push dword [esp + 0x34]
lea ecx, [esp + 0x54]
mov byte [esp + 0xb0], 0xf
call fcn.0040c7a1
push ecx
mov dword [esp + 0x68], esp
mov ecx, esp
push eax
call fcn.00402582
push ecx
mov eax, esp
mov byte [esp + 0xb4], 0x10
mov dword [esp + 0x34], esp
lea ecx, [esp + 0x30]
push ecx
push str.HKEY_LOCAL_MACHINE_
push eax
call fcn.0040c60b
add esp, 0xc
push edi
mov ecx, esi
mov byte [esp + 0xb8], 0xc
call fcn.0040d1f6
mov ebx, eax
mov eax, dword [esp + 0x18]
cmp dword [eax - 0xc], 0
je 0x42cf07
lea eax, [esp + 0x18]
jmp 0x42cf17
push dword [esp + 0x24]
lea ecx, [esp + 0x84]
call fcn.0040c7a1
push ecx
mov dword [esp + 0x24], esp
mov ecx, esp
push eax
call fcn.00402582
push edi
call fcn.0040d999
inc dword [esp + 0x28]
mov eax, dword [esp + 0x28]
cmp eax, dword [esp + 0x4c]
jl 0x42cd37
jmp 0x42d000
xor eax, eax
cmp dword [esp + 0x2c], 0x200
sete al
push eax
push ecx
mov ecx, esp
mov dword [esp + 0x28], esp
push 0x5229b8
call fcn.0040253e
push ecx
mov byte [esp + 0xac], 0x11
lea eax, [esp + 0x1c]
mov dword [esp + 0x64], esp
mov ecx, esp
push eax
call fcn.00402582
push ecx
mov byte [esp + 0xb0], 0x12
mov ecx, esp
mov dword [esp + 0x70], esp
push str.UninstallString
call fcn.0040253e
push ecx
mov eax, esp
mov byte [esp + 0xb4], 0x13
mov dword [esp + 0x28], esp
lea ecx, [esp + 0x30]
push ecx
push str.HKEY_LOCAL_MACHINE_
push eax
call fcn.0040c60b
add esp, 0xc
push dword [esp + 0x50]
mov byte [esp + 0xb8], 0xc
push 0x24
pop ecx
call fcn.0040d1f6
mov ebx, eax
mov eax, dword [esp + 0x18]
cmp dword [eax - 0xc], 0
je 0x42cfda
lea eax, [esp + 0x18]
jmp 0x42cfea
push dword [esp + 0x24]
lea ecx, [esp + 0x84]
call fcn.0040c7a1
push ecx
mov dword [esp + 0x24], esp
mov ecx, esp
push eax
call fcn.00402582
push dword [esp + 0x40]
call fcn.0040d999
lea ecx, [esp + 0x44]
mov byte [esp + 0xa0], 5
call fcn.0049602a
jmp 0x42d156
push dword [esp + 0x2c]
lea eax, [esp + 0x20]
push ecx
mov dword [esp + 0x28], esp
mov ecx, esp
push eax
call fcn.00402582
call fcn.0042d243
cmp eax, esi
jne 0x42d15a
cmp dword [0x562230], esi
jne 0x42d15a
xor eax, eax
cmp dword [esp + 0x2c], 0x200
mov esi, 0x5229b8
sete al
push eax
push ecx
mov ecx, esp
mov dword [esp + 0x28], esp
push esi
call fcn.0040253e
push ecx
mov byte [esp + 0xac], 7
lea eax, [esp + 0x1c]
mov dword [esp + 0x64], esp
mov ecx, esp
push eax
call fcn.00402582
push ecx
mov byte [esp + 0xb0], 8
mov ecx, esp
mov dword [esp + 0x70], esp
push str.UninstallString
call fcn.0040253e
push ecx
mov eax, esp
mov byte [esp + 0xb4], 9
mov dword [esp + 0x28], esp
lea ecx, [esp + 0x30]
push ecx
push str.HKEY_LOCAL_MACHINE_
push eax
call fcn.0040c60b
add esp, 0xc
push ebx
push 0x23
pop ecx
mov byte [esp + 0xb8], 5
call fcn.0040d1f6
push dword [esp + 0x24]
lea ecx, [esp + 0x84]
mov edi, eax
call fcn.0040c7a1
push ecx
mov ecx, esp
mov dword [esp + 0x24], esp
push eax
push esi
push ecx
mov dword [esp + 0x24], ecx
mov ecx, esp
mov dword [esp + 0x30], esp
push str.RESOURCESTRING
call fcn.0040253e
push ecx
mov byte [esp + 0xb4], 0xa
mov ecx, esp
mov dword [esp + 0x6c], esp
push str.SAFEPC_A393
call fcn.0040253e
lea eax, [esp + 0x78]
push eax
mov byte [esp + 0xb8], 5
call fcn.00406e20
push eax
mov byte [esp + 0xac], 0xb
mov eax, dword [esp + 0x20]
push eax
call fcn.00402163
add esp, 0xc
push ebx
mov ebx, edi
call fcn.0040d999
mov byte [esp + 0xa0], 5
mov ecx, dword [esp + 0x64]
add ecx, 0xfffffff0
call fcn.00402883
mov ebx, dword [esp + 0x3c]
lea ecx, [esp + 0x34]
call fcn.00411fc7
mov esi, dword [esp + 0x5c]
inc dword [esp + 0x24]
mov eax, dword [esp + 0x24]
cmp eax, dword [esp + 0x88]
jl 0x42cabb
mov ecx, dword [esp + 0x10]
add ecx, 0xfffffff0
call fcn.00402883
mov ecx, dword [esp + 0x18]
add ecx, 0xfffffff0
call fcn.00402883
mov ecx, dword [esp + 0x1c]
add ecx, 0xfffffff0
call fcn.00402883
lea ecx, [esp + 0x68]
mov byte [esp + 0xa0], 1
call fcn.0049602a
lea ecx, [esp + 0x80]
mov byte [esp + 0xa0], 0
call fcn.0049602a
or dword [esp + 0xa0], 0xffffffff
lea ecx, [esp + 0x34]
call fcn.00411fc7
inc dword [esp + 0x40]
cmp dword [esp + 0x40], esi
jl 0x42c9cb
jmp 0x42c946
mov ecx, dword [esp + 0x10]
add ecx, 0xfffffff0
call fcn.00402883
mov ecx, dword [esp + 0x18]
add ecx, 0xfffffff0
call fcn.00402883
mov ecx, dword [esp + 0x1c]
add ecx, 0xfffffff0
call fcn.00402883
lea ecx, [esp + 0x68]
mov byte [esp + 0xa0], 1
call fcn.0049602a
lea ecx, [esp + 0x80]
mov byte [esp + 0xa0], 0
call fcn.0049602a
lea ecx, [esp + 0x34]
call fcn.00411fc7
push 2
pop eax
jmp 0x42c9b5