Function at 0x43096a
Capabilities:
Resolve function by parsing pe exports

Disassembly:
push ebp
mov ebp, esp
and esp, 0xfffffff8
push 0xffffffffffffffff
push 0x4e3119
mov eax, dword fs:[0]
push eax
sub esp, 0x88
push ebx
push esi
push edi
mov eax, dword [0x57b750]
xor eax, esp
push eax
lea eax, [esp + 0x98]
mov dword fs:[0], eax
mov ebx, ecx
mov dword [esp + 0x3c], ebx
mov eax, dword [ebx]
call dword [eax + 0x14]
call fcn.0047380a
movzx esi, al
inc esi
xor eax, eax
cmp esi, eax
mov dword [esp + 0x5c], esi
mov dword [esp + 0x40], eax
jg 0x430a49
mov eax, dword [ebx]
mov ecx, ebx
call dword [eax + 0x18]
mov eax, ebx
call fcn.00410f23
test eax, eax
jne 0x4312b7
mov eax, dword [ebx]
mov ecx, ebx
call dword [eax + 0x1c]
mov eax, ebx
call fcn.00410f23
test eax, eax
jne 0x4312b7
call fcn.0047380a
movzx eax, al
push eax
push ecx
mov ecx, esp
mov dword [esp + 0x28], esp
push str.HKEY_CLASSES_ROOT
call fcn.004024df
mov eax, dword [ebx]
push 0x58513c
push SysReAllocString
mov ecx, ebx
call dword [eax + 0x20]
mov ecx, ebx
call fcn.004129fc
mov eax, ebx
call fcn.00410f23
xor ecx, ecx
test eax, eax
setne cl
inc ecx
mov eax, ecx
mov ecx, dword [esp + 0x98]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret
xor eax, eax
mov dword [esp + 0x2c], eax
mov dword [esp + 0x34], eax
mov dword [esp + 0x38], eax
mov dword [esp + 0xa0], eax
call fcn.0047380a
test al, al
je 0x430a7b
mov eax, dword [esp + 0x40]
neg eax
sbb eax, eax
and eax, 0xffffff00
add eax, 0x200
mov dword [esp + 0x2c], eax
push dword [0x585130]
mov eax, dword [esp + 0x30]
or eax, 0x20019
push reloc.OLEAUT32.dll_SysReAllocString
lea edi, [esp + 0x3c]
call fcn.00416053
test eax, eax
jne 0x431241
lea ecx, [esp + 0x80]
call fcn.004a451b
lea ecx, [esp + 0x68]
mov byte [esp + 0xa0], 1
call fcn.004a451b
mov byte [esp + 0xa0], 2
call fcn.00499991
push eax
lea ecx, [esp + 0x20]
call fcn.004727f7
mov byte [esp + 0xa0], 3
call fcn.00499991
push eax
lea ecx, [esp + 0x1c]
call fcn.004727f7
mov byte [esp + 0xa0], 4
call fcn.00499991
push eax
lea ecx, [esp + 0x14]
call fcn.004727f7
lea eax, [esp + 0x80]
push eax
mov byte [esp + 0xa4], 5
push dword [esp + 0x38]
call fcn.00410bc7
pop ecx
pop ecx
mov ecx, edi
call fcn.0041608f
and dword [esp + 0x24], 0
cmp dword [esp + 0x88], 0
jle 0x4311f8
push 1
call dword [sym.imp.KERNEL32.dll_Sleep]
mov eax, ebx
call fcn.00410f23
test eax, eax
jne 0x431265
push dword [esp + 0x24]
lea ecx, [esp + 0x84]
call fcn.0041090f
push dword [eax]
lea eax, [esp + 0x20]
push dword [0x585130]
push 0x5291b8
push eax
call fcn.00402967
mov eax, dword [esp + 0x3c]
add esp, 0x10
push dword [esp + 0x1c]
or eax, 0x2001f
push reloc.OLEAUT32.dll_SysReAllocString
lea edi, [esp + 0x3c]
call fcn.00416053
test eax, eax
jne 0x4311e3
lea eax, [esp + 0x68]
push eax
push dword [esp + 0x38]
call fcn.00410d02
xor esi, esi
cmp dword [esp + 0x70], esi
jle 0x430c2d
push esi
lea ecx, [esp + 0x6c]
call fcn.0041090f
push eax
lea ecx, [esp + 0x34]
call fcn.0040228a
lea edi, [esp + 0x30]
mov byte [esp + 0xa0], 6
call fcn.00415c5a
push str.noremove
mov ecx, edi
call fcn.004107fc
test eax, eax
je 0x430ec9
push str.systemcomponent
mov ecx, edi
call fcn.004107fc
test eax, eax
je 0x430ec9
push str.windowscomponent
mov ecx, edi
call fcn.004107fc
test eax, eax
je 0x430ec9
mov byte [esp + 0xa0], 5
mov ecx, dword [esp + 0x30]
add ecx, 0xfffffff0
call fcn.004027b0
inc esi
cmp esi, dword [esp + 0x70]
jl 0x430bb1
xor esi, esi
cmp dword [esp + 0x70], esi
je 0x431092
cmp dword [esp + 0x70], 1
jne 0x430c4f
mov eax, dword [esp + 0x6c]
mov eax, dword [eax]
cmp dword [eax - 0xc], esi
je 0x431092
lea ecx, [esp + 0x18]
call fcn.004025dd
mov ebx, 0x104
push ebx
lea ecx, [esp + 0x1c]
mov dword [esp + 0x18], ebx
call fcn.004028ad
push str.DisplayName
lea ecx, [esp + 0x38]
push ecx
lea esi, [esp + 0x1c]
mov edi, eax
call fcn.00415feb
push 0xffffffffffffffff
lea ecx, [esp + 0x1c]
call fcn.004160af
lea ecx, [esp + 0x44]
call fcn.004a451b
mov esi, str.UninstallString
push esi
mov byte [esp + 0xa4], 0xc
push dword [esp + 0x50]
lea ecx, [esp + 0x4c]
call fcn.004a49ab
push str.QuietUninstallString
push dword [esp + 0x50]
lea ecx, [esp + 0x4c]
call fcn.004a49ab
push str.InstallSource
push dword [esp + 0x50]
lea ecx, [esp + 0x4c]
call fcn.004a49ab
push str.DisplayIcon
push dword [esp + 0x50]
lea ecx, [esp + 0x4c]
call fcn.004a49ab
push str.Installlocation
push dword [esp + 0x50]
lea ecx, [esp + 0x4c]
call fcn.004a49ab
push str.helpstring
push dword [esp + 0x50]
lea ecx, [esp + 0x4c]
call fcn.004a49ab
push str.readme
push dword [esp + 0x50]
lea ecx, [esp + 0x4c]
call fcn.004a49ab
lea ecx, [esp + 0x10]
call fcn.004025dd
push ebx
lea ecx, [esp + 0x14]
call fcn.004028ad
push esi
lea ecx, [esp + 0x38]
push ecx
lea esi, [esp + 0x1c]
mov edi, eax
call fcn.00415feb
push 0xffffffffffffffff
lea ecx, [esp + 0x14]
mov esi, eax
call fcn.004160af
cmp esi, 2
jne 0x430da3
mov eax, dword [esp + 0x10]
cmp dword [eax - 0xc], 0
jne 0x430da3
lea ecx, [esp + 0x10]
call fcn.004025dd
push ebx
lea ecx, [esp + 0x14]
call fcn.004028ad
push str.QuietUninstallString
lea ecx, [esp + 0x38]
push ecx
lea esi, [esp + 0x1c]
mov edi, eax
call fcn.00415feb
push 0xffffffffffffffff
lea ecx, [esp + 0x14]
mov esi, eax
call fcn.004160af
cmp esi, 2
jne 0x430da3
mov eax, dword [esp + 0x10]
cmp dword [eax - 0xc], 0
je 0x430fbd
and dword [esp + 0x28], 0
cmp dword [esp + 0x4c], 0
jle 0x43107c
lea ecx, [esp + 0x10]
call fcn.004025dd
mov eax, 0x208
push eax
lea ecx, [esp + 0x14]
mov dword [esp + 0x18], eax
call fcn.004028ad
push dword [esp + 0x28]
lea ecx, [esp + 0x48]
mov edi, eax
call fcn.0041090f
push dword [eax]
lea eax, [esp + 0x38]
push eax
lea esi, [esp + 0x1c]
call fcn.00415feb
push 0xffffffffffffffff
lea ecx, [esp + 0x14]
mov esi, eax
call fcn.004160af
xor ebx, ebx
cmp esi, ebx
jne 0x430fa6
mov eax, dword [esp + 0x10]
cmp dword [eax - 0xc], ebx
je 0x430fa6
mov edi, dword [esp + 0x3c]
xor esi, esi
inc esi
push esi
push esi
push ebx
push ebx
push esi
push esi
push esi
lea edx, [esp + 0x2c]
mov ecx, edi
call fcn.0041374c
test al, al
jne 0x430fa6
lea eax, [esp + 0x10]
push eax
lea eax, [edi + 0x202c]
push eax
lea eax, [esp + 0x84]
push eax
call fcn.004020b5
add esp, 0xc
push ebx
push esi
push ebx
push ebx
push esi
push esi
push esi
mov edx, eax
mov ecx, edi
mov byte [esp + 0xbc], 0xd
call fcn.0041374c
mov bl, al
neg bl
mov byte [esp + 0xa0], 0xc
mov ecx, dword [esp + 0x7c]
sbb bl, bl
add ecx, 0xfffffff0
inc bl
call fcn.004027b0
test bl, bl
je 0x430fa6
push dword [esp + 0x28]
lea ecx, [esp + 0x48]
call fcn.0041090f
push str.UninstallString
mov ecx, eax
call fcn.004107fc
test eax, eax
je 0x430ee2
push dword [esp + 0x28]
lea ecx, [esp + 0x48]
call fcn.0041090f
push str.QuietUninstallString
mov ecx, eax
call fcn.004107fc
test eax, eax
je 0x430ee2
push 0x2a
jmp 0x430ee4
mov byte [esp + 0xa0], 5
mov ecx, dword [esp + 0x30]
add ecx, 0xfffffff0
call fcn.004027b0
jmp 0x4311df
push 0x24
xor eax, eax
cmp dword [esp + 0x30], 0x200
pop esi
sete al
push eax
push ecx
mov ecx, esp
mov dword [esp + 0x1c], esp
push 0x523938
call fcn.004024df
push ecx
mov byte [esp + 0xac], 0xe
lea eax, [esp + 0x1c]
mov dword [esp + 0x6c], esp
mov ecx, esp
push eax
call fcn.0040228a
push dword [esp + 0x34]
lea ecx, [esp + 0x54]
mov byte [esp + 0xb0], 0xf
call fcn.0041090f
push ecx
mov dword [esp + 0x68], esp
mov ecx, esp
push eax
call fcn.0040228a
push ecx
mov eax, esp
mov byte [esp + 0xb4], 0x10
mov dword [esp + 0x34], esp
lea ecx, [esp + 0x30]
push ecx
push str.HKEY_LOCAL_MACHINE_
push eax
call fcn.0040f56d
add esp, 0xc
push edi
mov ecx, esi
mov byte [esp + 0xb8], 0xc
call fcn.0041135b
mov ebx, eax
mov eax, dword [esp + 0x18]
cmp dword [eax - 0xc], 0
je 0x430f83
lea eax, [esp + 0x18]
jmp 0x430f93
push dword [esp + 0x24]
lea ecx, [esp + 0x84]
call fcn.0041090f
push ecx
mov dword [esp + 0x24], esp
mov ecx, esp
push eax
call fcn.0040228a
push edi
call fcn.00411afe
inc dword [esp + 0x28]
mov eax, dword [esp + 0x28]
cmp eax, dword [esp + 0x4c]
jl 0x430db3
jmp 0x43107c
xor eax, eax
cmp dword [esp + 0x2c], 0x200
sete al
push eax
push ecx
mov ecx, esp
mov dword [esp + 0x28], esp
push 0x523938
call fcn.004024df
push ecx
mov byte [esp + 0xac], 0x11
lea eax, [esp + 0x1c]
mov dword [esp + 0x64], esp
mov ecx, esp
push eax
call fcn.0040228a
push ecx
mov byte [esp + 0xb0], 0x12
mov ecx, esp
mov dword [esp + 0x70], esp
push str.UninstallString
call fcn.004024df
push ecx
mov eax, esp
mov byte [esp + 0xb4], 0x13
mov dword [esp + 0x28], esp
lea ecx, [esp + 0x30]
push ecx
push str.HKEY_LOCAL_MACHINE_
push eax
call fcn.0040f56d
add esp, 0xc
push dword [esp + 0x50]
mov byte [esp + 0xb8], 0xc
push 0x24
pop ecx
call fcn.0041135b
mov ebx, eax
mov eax, dword [esp + 0x18]
cmp dword [eax - 0xc], 0
je 0x431056
lea eax, [esp + 0x18]
jmp 0x431066
push dword [esp + 0x24]
lea ecx, [esp + 0x84]
call fcn.0041090f
push ecx
mov dword [esp + 0x24], esp
mov ecx, esp
push eax
call fcn.0040228a
push dword [esp + 0x40]
call fcn.00411afe
lea ecx, [esp + 0x44]
mov byte [esp + 0xa0], 5
call fcn.004a47f7
jmp 0x4311d2
push dword [esp + 0x2c]
lea eax, [esp + 0x20]
push ecx
mov dword [esp + 0x28], esp
mov ecx, esp
push eax
call fcn.0040228a
call fcn.004312bf
cmp eax, esi
jne 0x4311d6
cmp dword [0x57da18], esi
jne 0x4311d6
xor eax, eax
cmp dword [esp + 0x2c], 0x200
mov esi, 0x523938
sete al
push eax
push ecx
mov ecx, esp
mov dword [esp + 0x28], esp
push esi
call fcn.004024df
push ecx
mov byte [esp + 0xac], 7
lea eax, [esp + 0x1c]
mov dword [esp + 0x64], esp
mov ecx, esp
push eax
call fcn.0040228a
push ecx
mov byte [esp + 0xb0], 8
mov ecx, esp
mov dword [esp + 0x70], esp
push str.UninstallString
call fcn.004024df
push ecx
mov eax, esp
mov byte [esp + 0xb4], 9
mov dword [esp + 0x28], esp
lea ecx, [esp + 0x30]
push ecx
push str.HKEY_LOCAL_MACHINE_
push eax
call fcn.0040f56d
add esp, 0xc
push ebx
push 0x23
pop ecx
mov byte [esp + 0xb8], 5
call fcn.0041135b
push dword [esp + 0x24]
lea ecx, [esp + 0x84]
mov edi, eax
call fcn.0041090f
push ecx
mov ecx, esp
mov dword [esp + 0x24], esp
push eax
push esi
push ecx
mov dword [esp + 0x24], ecx
mov ecx, esp
mov dword [esp + 0x30], esp
push str.RESOURCESTRING
call fcn.004024df
push ecx
mov byte [esp + 0xb4], 0xa
mov ecx, esp
mov dword [esp + 0x6c], esp
push str.IDS_INCOMPLETE_ENTRY
call fcn.004024df
lea eax, [esp + 0x78]
push eax
mov byte [esp + 0xb8], 5
call fcn.004068e2
push eax
mov byte [esp + 0xac], 0xb
mov eax, dword [esp + 0x20]
push eax
call fcn.004020b5
add esp, 0xc
push ebx
mov ebx, edi
call fcn.00411afe
mov byte [esp + 0xa0], 5
mov ecx, dword [esp + 0x64]
add ecx, 0xfffffff0
call fcn.004027b0
mov ebx, dword [esp + 0x3c]
lea ecx, [esp + 0x34]
call fcn.0041608f
mov esi, dword [esp + 0x5c]
inc dword [esp + 0x24]
mov eax, dword [esp + 0x24]
cmp eax, dword [esp + 0x88]
jl 0x430b37
mov ecx, dword [esp + 0x10]
add ecx, 0xfffffff0
call fcn.004027b0
mov ecx, dword [esp + 0x18]
add ecx, 0xfffffff0
call fcn.004027b0
mov ecx, dword [esp + 0x1c]
add ecx, 0xfffffff0
call fcn.004027b0
lea ecx, [esp + 0x68]
mov byte [esp + 0xa0], 1
call fcn.004a47f7
lea ecx, [esp + 0x80]
mov byte [esp + 0xa0], 0
call fcn.004a47f7
or dword [esp + 0xa0], 0xffffffff
lea ecx, [esp + 0x34]
call fcn.0041608f
inc dword [esp + 0x40]
cmp dword [esp + 0x40], esi
jl 0x430a47
jmp 0x4309c2
mov ecx, dword [esp + 0x10]
add ecx, 0xfffffff0
call fcn.004027b0
mov ecx, dword [esp + 0x18]
add ecx, 0xfffffff0
call fcn.004027b0
mov ecx, dword [esp + 0x1c]
add ecx, 0xfffffff0
call fcn.004027b0
lea ecx, [esp + 0x68]
mov byte [esp + 0xa0], 1
call fcn.004a47f7
lea ecx, [esp + 0x80]
mov byte [esp + 0xa0], 0
call fcn.004a47f7
lea ecx, [esp + 0x34]
call fcn.0041608f
push 2
pop eax
jmp 0x430a31