Function at 0x40b250
Capabilities:
Read .ini file
Set registry value

Disassembly:
mov eax, 0x1380
call fcn.0040c270
mov eax, dword [0x41411c]
xor eax, esp
mov dword [esp + 0x137c], eax
push ebx
mov ebx, dword [esp + 0x1390]
push ebp
push esi
push edi
mov edi, dword [esp + 0x1394]
xor esi, esi
push 0x206
lea eax, [esp + 0xb72]
push esi
push eax
mov word [esp + 0xb78], si
call sub.MSVCR80.dll_memset
push 0x206
lea ecx, [esp + 0x76e]
push esi
push ecx
mov word [esp + 0x774], si
call sub.MSVCR80.dll_memset
push 0x206
lea edx, [esp + 0x11a2]
push esi
push edx
mov word [esp + 0x11a8], si
call sub.MSVCR80.dll_memset
add esp, 0x24
push 0x104
lea eax, [esp + 0x760]
push eax
push edi
call dword [sym.imp.KERNEL32.dll_GetModuleFileNameW]
lea ecx, [esp + 0x1c]
push ecx
lea edx, [esp + 0x1188]
push edx
push 0x104
lea eax, [esp + 0x768]
push eax
call dword [sym.imp.KERNEL32.dll_GetFullPathNameW]
mov ecx, dword [esp + 0x1c]
mov ebp, dword [sym.imp.KERNEL32.dll_lstrlenW]
push ecx
call ebp
lea edx, [esp + 0x75c]
mov edi, 1
push edx
sub edi, eax
call ebp
add eax, edi
push eax
lea eax, [esp + 0x760]
push eax
lea ecx, [esp + 0xb74]
push ecx
call dword [sym.imp.KERNEL32.dll_lstrcpynW]
push 0x206
lea edx, [esp + 0x96a]
push esi
push edx
mov word [esp + 0x970], si
call sub.MSVCR80.dll_memset
push 0x206
lea eax, [esp + 0xf8e]
push esi
push eax
mov word [esp + 0xf94], si
call sub.MSVCR80.dll_memset
push 0x40ef60
lea ecx, [esp + 0x980]
push ecx
lea edx, [esp + 0x30]
push edx
push ebx
xor ebp, ebp
mov dword [esp + 0x38], esi
call fcn.00401310
add esp, 0x28
cmp dword [esp + 0x10], 0xffffffff
je 0x40b3c4
push 0x40ef60
lea eax, [esp + 0xf80]
push eax
lea ecx, [esp + 0x18]
push ecx
push ebx
call fcn.00401310
lea edx, [esp + 0xf8c]
push edx
call dword [sym.imp.MSVCR80.dll__wtoi64]
add esp, 0x14
mov ebp, eax
push 0x206
lea eax, [esp + 0x55a]
push esi
push eax
mov word [esp + 0x554], si
mov dword [esp + 0x556], esi
mov dword [esp + 0x55a], esi
mov word [esp + 0x560], si
call sub.MSVCR80.dll_memset
lea ecx, [esp + 0xb78]
push ecx
lea edx, [esp + 0x558]
push edx
call fcn.004013a0
mov ebx, dword [sym.imp.KERNEL32.dll_lstrcpyW]
add esp, 0x14
lea eax, [esp + 0xb6c]
push eax
lea ecx, [esp + 0x558]
push ecx
call ebx
mov edi, dword [sym.imp.KERNEL32.dll_lstrcatW]
push str.Legal_
lea edx, [esp + 0x558]
push edx
call edi
lea eax, [esp + 0x548]
push eax
lea ecx, [esp + 0x558]
push ecx
call edi
push 0x40ef5c
lea edx, [esp + 0x558]
push edx
call edi
push 0x206
lea eax, [esp + 0xd7a]
push esi
push eax
mov dword [esp + 0x20], esi
mov word [esp + 0xd80], si
call sub.MSVCR80.dll_memset
add esp, 0xc
lea ecx, [esp + 0x554]
push ecx
lea edx, [esp + 0xd78]
push edx
call ebx
push str.eula.ini
lea eax, [esp + 0xd78]
push eax
call edi
lea ecx, [esp + 0xd74]
push ecx
push esi
push str.RightToLeft
push str.labels
call dword [sym.imp.KERNEL32.dll_GetPrivateProfileIntW]
test eax, eax
je 0x40b511
lea edx, [esp + 0x554]
push edx
lea eax, [esp + 0x968]
push eax
lea ecx, [esp + 0x28]
call fcn.004043e0
lea ecx, [esp + 0x20]
push ecx
lea edx, [esp + 0x2c]
push edx
push 0x4142a0
call fcn.00401d30
mov eax, dword [0x41426c]
push esi
push 0x404380
push ebp
push 0xca
push eax
call fcn.0040ada0
mov dword [esp + 0x34], vtable.CDlgEula_202_.1.0
mov dword [esp + 0x54], vtable.CDlgEula_202_.0
jmp 0x40b566
lea ecx, [esp + 0x554]
push ecx
lea edx, [esp + 0x968]
push edx
lea ecx, [esp + 0x28]
call fcn.00404460
lea eax, [esp + 0x20]
push eax
lea ecx, [esp + 0x2c]
push ecx
push 0x4142a0
call fcn.00401d30
mov edx, dword [0x41426c]
push esi
push 0x404380
push ebp
push 0xc9
push edx
call fcn.0040ada0
mov dword [esp + 0x34], vtable.CDlgEula_201_.1.0
mov dword [esp + 0x54], vtable.CDlgEula_201_.0
mov dword [esp + 0x28], eax
mov eax, dword [esp + 0x48]
add esp, 0x14
cmp eax, esi
je 0x40b57b
push eax
call fcn.0040bd64
cmp dword [esp + 0x14], esi
je 0x40b617
mov edi, dword [sym.imp.ADVAPI32.dll_RegCreateKeyExW]
lea eax, [esp + 0x18]
push eax
lea ecx, [esp + 0x14]
push ecx
push esi
push 0xf003f
push esi
push esi
push esi
push str.SoftwareAdobeAcrobat_Reader9.0AdobeViewer
push reloc.OLEAUT32.dll_SysReAllocString
call edi
test eax, eax
mov ebx, dword [sym.imp.ADVAPI32.dll_RegSetValueExW]
mov ebp, dword [sym.imp.ADVAPI32.dll_RegCloseKey]
jne 0x40b5d7
mov eax, dword [esp + 0x10]
push 4
lea edx, [esp + 0x18]
push edx
push 4
push esi
push str.EULA
push eax
call ebx
mov ecx, dword [esp + 0x10]
push ecx
call ebp
lea edx, [esp + 0x18]
push edx
lea eax, [esp + 0x14]
push eax
push esi
push 0xf003f
push esi
push esi
push esi
push str.SoftwareAdobeAcrobat_Reader9.0AdobeViewer
push SysReAllocStringLen
call edi
test eax, eax
jne 0x40b617
mov edx, dword [esp + 0x10]
push 4
lea ecx, [esp + 0x18]
push ecx
push 4
push esi
push str.EULA
push edx
call ebx
mov eax, dword [esp + 0x10]
push eax
call ebp
mov ecx, dword [esp + 0x138c]
xor eax, eax
cmp dword [esp + 0x14], esi
pop edi
pop esi
pop ebp
sete al
pop ebx
xor ecx, esp
call fcn.0040c1b6
add esp, 0x1380
ret 0x10