Function at 0x411e10
Capabilities:
Read .ini file
Resolve function by parsing pe exports

Disassembly:
push 0xffffffffffffffff
push 0x41e0ae
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
sub esp, 0xabc
push ebx
push ebp
push esi
push edi
mov dword [esp + 0x4c], ecx
lea ecx, [esp + 0x20]
mov dword [esp + 0xad4], 1
call sub.MFC42.DLL_CString::CString_2
lea ecx, [esp + 0xa0]
mov byte [esp + 0xad4], 2
call sub.MFC42.DLL_CString::CString_2
lea ecx, [esp + 0x24]
mov byte [esp + 0xad4], 3
call sub.MFC42.DLL_CString::CString_2
lea ecx, [esp + 0x48]
mov byte [esp + 0xad4], 4
call sub.MFC42.DLL_CString::CString_2
lea eax, [esp + 0xadc]
lea ecx, [esp + 0x1c]
push eax
mov byte [esp + 0xad8], 5
call fcn.0041b7f4
mov ecx, dword [esp + 0x1c]
mov ebp, dword [sym.imp.MSVCRT.dll__mbscmp]
push str.HKCR
push ecx
mov byte [esp + 0xadc], 6
call ebp
add esp, 8
test eax, eax
jne 0x411ec5
push str.HKEY_CLASSES_ROOT
lea ecx, [esp + 0x28]
call fcn.0041b81e
mov edx, dword [esp + 0x1c]
push str.HKCU
push edx
call ebp
add esp, 8
test eax, eax
jne 0x411ee6
push str.HKEY_CURRENT_USER
lea ecx, [esp + 0x28]
call fcn.0041b81e
mov eax, dword [esp + 0x1c]
push str.HKLM
push eax
call ebp
add esp, 8
test eax, eax
jne 0x411f07
push str.HKEY_LOCAL_MACHINE
lea ecx, [esp + 0x28]
call fcn.0041b81e
mov ecx, dword [esp + 0x1c]
push 0x4296d4
push ecx
call ebp
add esp, 8
test eax, eax
jne 0x411f28
push str.HKEY_USERS
lea ecx, [esp + 0x28]
call fcn.0041b81e
call sub.MFC42.DLL_AfxGetModuleState
mov eax, dword [eax + 4]
lea ecx, [esp + 0x44]
mov dword [esp + 0x54], eax
add eax, 0xcc
push eax
call fcn.0041b7f4
lea ecx, [esp + 0x2c]
mov byte [esp + 0xad4], 7
call sub.MFC42.DLL_CString::CString_2
lea ecx, [esp + 0x3c]
mov byte [esp + 0xad4], 8
call sub.MFC42.DLL_CString::CString_2
lea ecx, [esp + 0x34]
mov byte [esp + 0xad4], 9
call sub.MFC42.DLL_CString::CString_2
mov byte [esp + 0xad4], 0xa
xor edi, edi
mov bl, 0x1a
push edi
lea edx, [esp + 0x38]
push 0x4290b8
push edx
call sub.MFC42.DLL_CString::Format
add esp, 0xc
lea eax, [esp + 0xadc]
lea ecx, [esp + 0x1c]
push eax
call fcn.0041b82a
lea ecx, [esp + 0x34]
lea edx, [esp + 0x1c]
push ecx
lea eax, [esp + 0x78]
push edx
push eax
call sub.MFC42.DLL_operator_2
push eax
lea ecx, [esp + 0x20]
mov byte [esp + 0xad8], 0xb
call fcn.0041b82a
lea ecx, [esp + 0x74]
mov byte [esp + 0xad4], 0xa
call sub.MFC42.DLL_CString::CString
mov ecx, dword [esp + 0x44]
mov eax, dword [esp + 0x1c]
push ecx
lea edx, [esp + 0xd0]
push 0x500
push edx
push 0x42a438
push eax
push str.Registry
call dword [sym.imp.KERNEL32.dll_GetPrivateProfileStringA]
inc edi
test eax, eax
mov dword [esp + 0x98], edi
je 0x412894
lea ecx, [esp + 0xcc]
push ecx
lea ecx, [esp + 0x24]
call fcn.0041b81e
push 0x5c
lea ecx, [esp + 0x24]
call sub.MFC42.DLL_CString::ReverseFind
mov esi, eax
lea edx, [esp + 0xc0]
push esi
push edx
lea ecx, [esp + 0x28]
call sub.MFC42.DLL_CString::Left
push eax
lea ecx, [esp + 0x4c]
mov byte [esp + 0xad8], 0xc
call fcn.0041b82a
lea ecx, [esp + 0xc0]
mov byte [esp + 0xad4], 0xa
call sub.MFC42.DLL_CString::CString
mov eax, dword [esp + 0x48]
push 0x42a438
push eax
call ebp
add esp, 8
test eax, eax
je 0x4120e5
lea ecx, [esp + 0x24]
push 0x429044
lea edx, [esp + 0xa0]
push ecx
push edx
call sub.MFC42.DLL_operator
lea ecx, [esp + 0x48]
lea edx, [esp + 0x64]
push ecx
push eax
push edx
mov byte [esp + 0xae0], 0xd
call sub.MFC42.DLL_operator_2
push eax
lea ecx, [esp + 0x30]
mov byte [esp + 0xad8], 0xe
call fcn.0041b82a
lea ecx, [esp + 0x64]
mov byte [esp + 0xad4], 0xd
call sub.MFC42.DLL_CString::CString
lea ecx, [esp + 0x9c]
mov byte [esp + 0xad4], 0xa
call sub.MFC42.DLL_CString::CString
jmp 0x4120f3
lea eax, [esp + 0x24]
lea ecx, [esp + 0x2c]
push eax
call fcn.0041b82a
mov ecx, dword [esp + 0x20]
lea edx, [esp + 0x6c]
mov eax, dword [ecx - 8]
lea ecx, [esp + 0x20]
sub eax, esi
dec eax
push eax
push edx
call sub.MFC42.DLL_CString::Right
push eax
lea ecx, [esp + 0x40]
mov byte [esp + 0xad8], 0xf
call fcn.0041b82a
lea ecx, [esp + 0x6c]
mov byte [esp + 0xad4], 0xa
call sub.MFC42.DLL_CString::CString
mov eax, dword [esp + 0xae0]
push str.Install
push eax
call dword [sym.imp.MSVCRT.dll__mbsicmp]
add esp, 8
test eax, eax
jne 0x41218c
push 1
push ecx
lea edx, [esp + 0x44]
mov ecx, esp
mov dword [esp + 0xb0], esp
push edx
call fcn.0041b7f4
push ecx
lea eax, [esp + 0x38]
mov ecx, esp
mov dword [esp + 0xbc], esp
push eax
mov byte [esp + 0xae4], 0x10
call fcn.0041b7f4
mov ecx, dword [esp + 0x58]
mov byte [esp + 0xae0], 0xa
call fcn.00411b00
lea ecx, [esp + 0x40]
call sub.MFC42.DLL_CString::CString_2
lea ecx, [esp + 0xadc]
lea edx, [esp + 0xa4]
push ecx
push str.REGISTRY:
push edx
mov byte [esp + 0xae0], 0x11
call sub.MFC42.DLL_operator_1
push 0x42954c
push eax
lea eax, [esp + 0x64]
mov byte [esp + 0xadc], 0x12
push eax
call sub.MFC42.DLL_operator
lea ecx, [esp + 0x20]
lea edx, [esp + 0xc4]
push ecx
push eax
push edx
mov byte [esp + 0xae0], 0x13
call sub.MFC42.DLL_operator_2
push eax
lea ecx, [esp + 0x44]
mov byte [esp + 0xad8], 0x14
call fcn.0041b82a
lea ecx, [esp + 0xc4]
mov byte [esp + 0xad4], 0x13
call sub.MFC42.DLL_CString::CString
lea ecx, [esp + 0x5c]
mov byte [esp + 0xad4], 0x12
call sub.MFC42.DLL_CString::CString
lea ecx, [esp + 0xa4]
mov byte [esp + 0xad4], 0x11
call sub.MFC42.DLL_CString::CString
mov eax, dword [esp + 0x44]
mov edx, dword [esp + 0x40]
push eax
lea ecx, [esp + 0x5d0]
push 0x500
push ecx
push edx
call dword [sym.imp.KERNEL32.dll_GetPrivateProfileSectionA]
test eax, eax
je 0x41287e
lea ecx, [esp + 0x18]
xor ebp, ebp
call sub.MFC42.DLL_CString::CString_2
lea ecx, [esp + 0x28]
mov byte [esp + 0xad4], 0x15
call sub.MFC42.DLL_CString::CString_2
lea ecx, [esp + 0x30]
mov byte [esp + 0xad4], 0x16
call sub.MFC42.DLL_CString::CString_2
lea ecx, [esp + 0x14]
mov byte [esp + 0xad4], 0x17
call sub.MFC42.DLL_CString::CString_2
lea ecx, [esp + 0x38]
mov byte [esp + 0xad4], 0x18
call sub.MFC42.DLL_CString::CString_2
mov byte [esp + 0xad4], 0x19
push ebp
lea eax, [esp + 0x38]
push 0x4290b8
push eax
call sub.MFC42.DLL_CString::Format
add esp, 0xc
lea ecx, [esp + 0x50]
push str.Value
call sub.MFC42.DLL_CString::CString_1
lea ecx, [esp + 0x34]
lea edx, [esp + 0x50]
push ecx
lea eax, [esp + 0x80]
push edx
push eax
mov byte [esp + 0xae0], bl
call sub.MFC42.DLL_operator_2
push eax
lea ecx, [esp + 0x54]
mov byte [esp + 0xad8], 0x1b
call fcn.0041b82a
lea ecx, [esp + 0x7c]
mov byte [esp + 0xad4], bl
call sub.MFC42.DLL_CString::CString
mov ecx, dword [esp + 0x44]
mov eax, dword [esp + 0x50]
push ecx
mov ecx, dword [esp + 0x44]
lea edx, [esp + 0xd0]
push 0x500
push edx
push 0x42a438
push eax
push ecx
call dword [sym.imp.KERNEL32.dll_GetPrivateProfileStringA]
mov edi, eax
inc ebp
test edi, edi
je 0x412803
lea edx, [esp + 0xcc]
lea ecx, [esp + 0x18]
push edx
call fcn.0041b81e
push 0x429094
lea ecx, [esp + 0x1c]
call sub.MFC42.DLL_CString::Find_1
mov esi, eax
lea eax, [esp + 0xbc]
push esi
push eax
lea ecx, [esp + 0x20]
call sub.MFC42.DLL_CString::Left
push eax
lea ecx, [esp + 0x2c]
mov byte [esp + 0xad8], 0x1c
call fcn.0041b82a
lea ecx, [esp + 0xbc]
mov byte [esp + 0xad4], bl
call sub.MFC42.DLL_CString::CString
mov ecx, dword [esp + 0x28]
push 0x429fc0
push ecx
call dword [sym.imp.MSVCRT.dll__mbscmp]
add esp, 8
test eax, eax
jne 0x4123c1
push 0x42a438
lea ecx, [esp + 0x2c]
call fcn.0041b81e
mov edx, dword [esp + 0x18]
lea ecx, [esp + 0x18]
mov eax, dword [edx - 8]
sub eax, esi
dec eax
push eax
lea eax, [esp + 0x88]
push eax
call sub.MFC42.DLL_CString::Right
push eax
lea ecx, [esp + 0x1c]
mov byte [esp + 0xad8], 0x1d
call fcn.0041b82a
lea ecx, [esp + 0x84]
mov byte [esp + 0xad4], bl
call sub.MFC42.DLL_CString::CString
push 0x429fbc
lea ecx, [esp + 0x1c]
call sub.MFC42.DLL_CString::Find_1
mov esi, eax
lea ecx, [esp + 0xac]
push esi
push ecx
lea ecx, [esp + 0x20]
call sub.MFC42.DLL_CString::Left
push eax
lea ecx, [esp + 0x34]
mov byte [esp + 0xad8], 0x1e
call fcn.0041b82a
lea ecx, [esp + 0xac]
mov byte [esp + 0xad4], bl
call sub.MFC42.DLL_CString::CString
mov edx, dword [esp + 0x18]
lea ecx, [esp + 0x18]
mov eax, dword [edx - 8]
sub eax, esi
dec eax
push eax
lea eax, [esp + 0x90]
push eax
call sub.MFC42.DLL_CString::Right
push eax
lea ecx, [esp + 0x18]
mov byte [esp + 0xad8], 0x1f
call fcn.0041b82a
lea ecx, [esp + 0x8c]
mov byte [esp + 0xad4], bl
call sub.MFC42.DLL_CString::CString
mov ecx, dword [esp + 0x30]
mov esi, dword [sym.imp.MSVCRT.dll__mbscmp]
push 0x429fb8
push ecx
call esi
add esp, 8
test eax, eax
jne 0x4124b1
push str.REG_SZ
lea ecx, [esp + 0x3c]
call fcn.0041b81e
mov edx, dword [esp + 0x30]
push 0x429fb4
push edx
call esi
add esp, 8
test eax, eax
jne 0x4124d2
push str.REG_BINARY
lea ecx, [esp + 0x3c]
call fcn.0041b81e
mov eax, dword [esp + 0x30]
push str.210
push eax
call esi
add esp, 8
test eax, eax
jne 0x4124f3
push str.REG_DWORD
lea ecx, [esp + 0x3c]
call fcn.0041b81e
mov ecx, dword [esp + 0xae0]
mov esi, dword [sym.imp.MSVCRT.dll__mbsicmp]
push str.Install
push ecx
call esi
add esp, 8
test eax, eax
jne 0x41277b
lea edx, [esp + 0xc8]
push 0x14
push edx
lea ecx, [esp + 0x1c]
call sub.MFC42.DLL_CString::Left
mov eax, dword [eax]
push str._DefaultInstallPath_
push eax
call esi
add esp, 8
lea ecx, [esp + 0xc8]
test eax, eax
sete byte [esp + 0x13]
call sub.MFC42.DLL_CString::CString
mov al, byte [esp + 0x13]
test al, al
je 0x412622
lea eax, [esp + 0x94]
push 0x14
push eax
lea ecx, [esp + 0x1c]
call sub.MFC42.DLL_CString::Mid
push eax
lea ecx, [esp + 0x18]
mov byte [esp + 0xad8], 0x20
call fcn.0041b82a
lea ecx, [esp + 0x94]
mov byte [esp + 0xad4], bl
call sub.MFC42.DLL_CString::CString
mov esi, dword [esp + 0x54]
push 0x429044
lea edx, [esp + 0x6c]
lea ecx, [esi + 0xc8]
push ecx
push edx
call sub.MFC42.DLL_operator
lea ecx, [esi + 0xd0]
lea edx, [esp + 0x60]
push ecx
push eax
push edx
mov byte [esp + 0xae0], 0x21
call sub.MFC42.DLL_operator_2
lea ecx, [esp + 0x14]
lea edx, [esp + 0xb4]
push ecx
push eax
push edx
mov byte [esp + 0xae0], 0x22
call sub.MFC42.DLL_operator_2
push eax
lea ecx, [esp + 0x18]
mov byte [esp + 0xad8], 0x23
call fcn.0041b82a
lea ecx, [esp + 0xb4]
mov byte [esp + 0xad4], 0x22
call sub.MFC42.DLL_CString::CString
lea ecx, [esp + 0x60]
mov byte [esp + 0xad4], 0x21
call sub.MFC42.DLL_CString::CString
lea ecx, [esp + 0x68]
mov byte [esp + 0xad4], bl
call sub.MFC42.DLL_CString::CString
jmp 0x412626
mov esi, dword [esp + 0x54]
lea eax, [esp + 0x70]
push 0xb
push eax
lea ecx, [esp + 0x1c]
call sub.MFC42.DLL_CString::Left
mov eax, dword [eax]
push str._SystemDir_
push eax
call dword [sym.imp.MSVCRT.dll__mbsicmp]
add esp, 8
lea ecx, [esp + 0x70]
test eax, eax
sete byte [esp + 0x13]
call sub.MFC42.DLL_CString::CString
mov al, byte [esp + 0x13]
test al, al
je 0x4126cf
lea ecx, [esp + 0x78]
push 0xb
push ecx
lea ecx, [esp + 0x1c]
call sub.MFC42.DLL_CString::Mid
push eax
lea ecx, [esp + 0x18]
mov byte [esp + 0xad8], 0x24
call fcn.0041b82a
lea ecx, [esp + 0x78]
mov byte [esp + 0xad4], bl
call sub.MFC42.DLL_CString::CString
lea edx, [esp + 0x14]
add esi, 0xe4
push edx
lea eax, [esp + 0x84]
push esi
push eax
call sub.MFC42.DLL_operator_2
push eax
lea ecx, [esp + 0x18]
mov byte [esp + 0xad8], 0x25
call fcn.0041b82a
lea ecx, [esp + 0x80]
mov byte [esp + 0xad4], bl
call sub.MFC42.DLL_CString::CString
push 1
push ecx
lea edx, [esp + 0x40]
mov ecx, esp
mov dword [esp + 0xb8], esp
push edx
call fcn.0041b7f4
push ecx
lea eax, [esp + 0x20]
mov ecx, esp
mov dword [esp + 0xb4], esp
push eax
mov byte [esp + 0xae4], 0x26
call fcn.0041b7f4
push ecx
lea edx, [esp + 0x38]
mov ecx, esp
mov dword [esp + 0xc8], esp
push edx
mov byte [esp + 0xae8], 0x27
call fcn.0041b7f4
lea eax, [esp + 0x3c]
push 0x429044
lea ecx, [esp + 0x9c]
push eax
push ecx
mov byte [esp + 0xaf0], 0x28
call sub.MFC42.DLL_operator
push ecx
lea ecx, [esp + 0x50]
mov edx, esp
mov dword [esp + 0x6c], esp
push ecx
push eax
push edx
mov byte [esp + 0xaf4], 0x29
call sub.MFC42.DLL_operator_2
mov ecx, dword [esp + 0x60]
mov byte [esp + 0xae8], 0x2a
call fcn.00411570
mov byte [esp + 0xad4], bl
lea ecx, [esp + 0x88]
jmp 0x4127fe
mov edx, dword [esp + 0xae0]
push str.Uninstall
push edx
call esi
add esp, 8
test eax, eax
jne 0x412803
push ecx
lea eax, [esp + 0x2c]
mov ecx, esp
mov dword [esp + 0x5c], esp
push eax
call fcn.0041b7f4
lea ecx, [esp + 0x30]
push 0x429044
lea edx, [esp + 0x98]
push ecx
push edx
mov byte [esp + 0xae4], 0x2b
call sub.MFC42.DLL_operator
push ecx
lea edx, [esp + 0x44]
mov ecx, esp
mov dword [esp + 0xc0], esp
push edx
push eax
push ecx
mov byte [esp + 0xae8], 0x2c
call sub.MFC42.DLL_operator_2
mov ecx, dword [esp + 0x54]
mov byte [esp + 0xadc], 0x2d
call fcn.00412c10
mov byte [esp + 0xad4], bl
lea ecx, [esp + 0x90]
call sub.MFC42.DLL_CString::CString
lea ecx, [esp + 0x50]
mov byte [esp + 0xad4], 0x19
call sub.MFC42.DLL_CString::CString
test edi, edi
jne 0x4122b1
lea ecx, [esp + 0x38]
mov byte [esp + 0xad4], 0x18
call sub.MFC42.DLL_CString::CString
lea ecx, [esp + 0x14]
mov byte [esp + 0xad4], 0x17
call sub.MFC42.DLL_CString::CString
lea ecx, [esp + 0x30]
mov byte [esp + 0xad4], 0x16
call sub.MFC42.DLL_CString::CString
lea ecx, [esp + 0x28]
mov byte [esp + 0xad4], 0x15
call sub.MFC42.DLL_CString::CString
lea ecx, [esp + 0x18]
mov byte [esp + 0xad4], 0x11
call sub.MFC42.DLL_CString::CString
mov ebp, dword [sym.imp.MSVCRT.dll__mbscmp]
mov edi, dword [esp + 0x98]
lea ecx, [esp + 0x40]
mov byte [esp + 0xad4], 0xa
call sub.MFC42.DLL_CString::CString
jmp 0x411f82
mov eax, dword [esp + 0xae0]
push str.Uninstall
push eax
call dword [sym.imp.MSVCRT.dll__mbsicmp]
add esp, 8
test eax, eax
jne 0x4128cb
push ecx
lea edx, [esp + 0xae0]
mov ecx, esp
mov dword [esp + 0x5c], esp
push edx
call fcn.0041b7f4
mov ecx, dword [esp + 0x50]
call fcn.00412e30
lea ecx, [esp + 0x34]
mov byte [esp + 0xad4], 9
call sub.MFC42.DLL_CString::CString
lea ecx, [esp + 0x3c]
mov byte [esp + 0xad4], 8
call sub.MFC42.DLL_CString::CString
lea ecx, [esp + 0x2c]
mov byte [esp + 0xad4], 7
call sub.MFC42.DLL_CString::CString
lea ecx, [esp + 0x44]
mov byte [esp + 0xad4], 6
call sub.MFC42.DLL_CString::CString
lea ecx, [esp + 0x1c]
mov byte [esp + 0xad4], 5
call sub.MFC42.DLL_CString::CString
lea ecx, [esp + 0x48]
mov byte [esp + 0xad4], 4
call sub.MFC42.DLL_CString::CString
lea ecx, [esp + 0x24]
mov byte [esp + 0xad4], 3
call sub.MFC42.DLL_CString::CString
lea ecx, [esp + 0xa0]
mov byte [esp + 0xad4], 2
call sub.MFC42.DLL_CString::CString
lea ecx, [esp + 0x20]
mov byte [esp + 0xad4], 1
call sub.MFC42.DLL_CString::CString
lea ecx, [esp + 0xadc]
mov byte [esp + 0xad4], 0
call sub.MFC42.DLL_CString::CString
lea ecx, [esp + 0xae0]
mov dword [esp + 0xad4], 0xffffffff
call sub.MFC42.DLL_CString::CString
mov ecx, dword [esp + 0xacc]
pop edi
pop esi
pop ebp
mov eax, 1
mov dword fs:[0], ecx
pop ebx
add esp, 0xac8
ret 8