Function at 0x4105b0
Capabilities:
Access peb ldr_data
Capture microphone audio
Read .ini file

Disassembly:
push 0xffffffffffffffff
mov eax, dword fs:[0]
push 0x4451f6
push eax
mov dword fs:[0], esp
sub esp, 0x10
push ebx
mov ebx, dword [sym.imp.KERNEL32.dll_lstrcpyA]
push ebp
push esi
push edi
mov edi, dword [esp + 0x30]
mov esi, ecx
push edi
lea eax, [esi + 0x3c]
push eax
mov dword [esi + 8], 0
call ebx
push edi
lea ecx, [esi + 0x62de9]
push ecx
call ebx
push edi
push 0
push 0x452318
push 0x452324
call dword [sym.imp.KERNEL32.dll_GetPrivateProfileIntA]
push 0
push 0
push 0
lea ebx, [esi + 0x167]
push ebx
lea ecx, [esi + 0xc]
push eax
push ecx
mov dword [esi + 0x62ddd], eax
call dword [sym.imp.WINMM.dll_waveInOpen]
mov ebp, eax
cmp ebp, 4
jne 0x410653
push 0
push 0x452334
push str.Your_SoundCard_is_Already_in_use_By_Another_Program__
push 0
call dword [sym.imp.USER32.dll_MessageBoxA]
xor eax, eax
mov ecx, dword [esp + 0x20]
pop edi
pop esi
pop ebp
pop ebx
mov dword fs:[0], ecx
add esp, 0x1c
ret 4
cmp ebp, 2
jne 0x410666
push 0
push 0x452374
push str.Bad_SoundCard_Device
jmp 0x410634
cmp ebp, 6
jne 0x410679
push 0
push 0x452394
push str.No_SoundCard_driver_
jmp 0x410634
cmp ebp, 7
jne 0x41068c
push 0
push 0x4523b4
push str.Not_enough_memory_for_SoundCard
jmp 0x410634
cmp ebp, 0x20
jne 0x41069f
push 0
push 0x4523dc
push str.Your_SoundCard_Driver_cannot_Support_the_Wave_Format
jmp 0x410634
push 1
push 0xa
call dword [sym.imp.KERNEL32.dll_SleepEx]
mov edx, dword [esi + 0x62ddd]
push 0
push 0
push 0
push ebx
lea eax, [esi + 0x163]
push edx
push eax
call dword [sym.imp.WINMM.dll_waveOutOpen]
xor ebx, ebx
cmp eax, ebx
je 0x4106d2
mov dword [esi + 0x157], ebx
jmp 0x4106dc
mov dword [esi + 0x157], 1
cmp dword [esi + 0x157], ebx
je 0x4106eb
push str.SoundCard:FULLDUPLEXYES
jmp 0x4106f0
push str.SoundCard:FULLDUPLEXNO
call fcn.00436550
mov eax, dword [esi + 0x157]
add esp, 4
cmp eax, ebx
je 0x41072b
push edi
push ebx
push 0x452450
push 0x452464
call dword [sym.imp.KERNEL32.dll_GetPrivateProfileIntA]
test eax, eax
jne 0x41072b
push str.FULLDUPLEX_DISABLED
mov dword [esi + 0x157], ebx
call fcn.00436550
add esp, 4
mov eax, dword [esi + 0xc]
push eax
call dword [sym.imp.WINMM.dll_waveInClose]
mov ecx, dword [esi + 0x163]
push ecx
call dword [sym.imp.WINMM.dll_waveOutClose]
cmp ebp, ebx
jne 0x41063c
push edi
push 0xa
lea edx, [esp + 0x18]
push edx
push 0x452488
push 0x45248c
mov ebp, 1
push 0x452494
mov dword [esi + 8], ebp
call dword [sym.imp.KERNEL32.dll_GetPrivateProfileStringA]
lea eax, [esp + 0x10]
push eax
lea ecx, [esi + 0x148]
call fcn.0040e4e0
push edi
push 0x4b0
push 0x4524a4
push 0x4524b4
call dword [sym.imp.KERNEL32.dll_GetPrivateProfileIntA]
cmp eax, 0x960
jg 0x41082e
je 0x410805
cmp eax, 0x12c
je 0x4107e0
cmp eax, 0x4b0
jne 0x41086e
push 0x84
call fcn.004394a2
add esp, 4
mov dword [esp + 0x30], eax
cmp eax, ebx
mov dword [esp + 0x28], ebp
je 0x41085e
push ebx
push edi
push esi
mov ecx, eax
call fcn.0042a630
jmp 0x410860
push 0x84
call fcn.004394a2
add esp, 4
mov dword [esp + 0x30], eax
cmp eax, ebx
mov dword [esp + 0x28], ebx
je 0x41085e
push ebx
push edi
push esi
mov ecx, eax
call fcn.0042a9f0
jmp 0x410860
push 0x84
call fcn.004394a2
add esp, 4
mov dword [esp + 0x30], eax
cmp eax, ebx
mov dword [esp + 0x28], 2
je 0x41085e
push ebx
push edi
push esi
mov ecx, eax
call fcn.0042a890
jmp 0x410860
cmp eax, 0x2580
jne 0x41086e
push 0x84
call fcn.004394a2
add esp, 4
mov dword [esp + 0x30], eax
cmp eax, ebx
mov dword [esp + 0x28], 3
je 0x41085e
push ebx
push edi
push esi
mov ecx, eax
call fcn.0042ab50
jmp 0x410860
xor eax, eax
mov dword [esp + 0x28], 0xffffffff
mov dword [esi + 0x140], eax
push edi
mov ecx, esi
call fcn.0040ff80
mov eax, ebp
jmp 0x41063e