Function at 0x412dc0
Capabilities:
Query or enumerate registry value
Read .ini file

Disassembly:
sub esp, 0x138
push ebx
push ebp
push esi
mov esi, dword [esp + 0x148]
push edi
push 0
push esi
mov ebx, 1
mov dword [esp + 0x1c], 0x104
call fcn.00413bd0
add esp, 8
cmp eax, 0xffffffff
jne 0x412dfb
mov eax, ebx
pop edi
pop esi
pop ebp
pop ebx
add esp, 0x138
ret
lea eax, [esp + 0x30]
push 4
push eax
call fcn.00413110
add esp, 8
lea ecx, [esp + 0x20]
push 4
push ecx
call fcn.00413110
mov eax, dword [str.SoftwareMicrosoftInternet_Explorer]
add esp, 8
lea edx, [esp + 0x18]
push edx
push 0x20019
push 0
push eax
push 0x80000002
call dword [sym.imp.ADVAPI32.dll_RegOpenKeyExA]
test eax, eax
je 0x412e47
xor eax, eax
pop edi
pop esi
pop ebp
pop ebx
add esp, 0x138
ret
lea ecx, [esp + 0x14]
lea edx, [esp + 0x44]
push ecx
mov ecx, dword [esp + 0x1c]
lea eax, [esp + 0x44]
push edx
push eax
push 0
push str.Version
push ecx
call dword [sym.imp.ADVAPI32.dll_RegQueryValueExA]
test eax, eax
je 0x412e79
xor eax, eax
pop edi
pop esi
pop ebp
pop ebx
add esp, 0x138
ret
lea edx, [esp + 0x44]
lea eax, [esp + 0x30]
push edx
push 4
push eax
call fcn.00413070
mov ecx, 0x41
xor eax, eax
lea edi, [esp + 0x50]
add esp, 0xc
mov ebp, dword [sym.imp.KERNEL32.dll_GetPrivateProfileStringA]
rep stosd dword es:[edi], eax
push esi
lea ecx, [esp + 0x48]
push 0x104
push ecx
push str.ERROR_FAILURE
push str.Version
push str.IE4Check
call ebp
mov esi, str.ERROR_FAILURE
lea eax, [esp + 0x44]
mov dl, byte [eax]
mov cl, dl
cmp dl, byte [esi]
jne 0x412ee9
test cl, cl
je 0x412ee5
mov dl, byte [eax + 1]
mov cl, dl
cmp dl, byte [esi + 1]
jne 0x412ee9
add eax, 2
add esi, 2
test cl, cl
jne 0x412ec5
xor eax, eax
jmp 0x412eee
sbb eax, eax
sbb eax, 0xffffffff
test eax, eax
je 0x412f4e
lea eax, [esp + 0x44]
lea ecx, [esp + 0x20]
push eax
push 4
push ecx
call fcn.00413070
mov edx, dword [esp + 0x3c]
mov eax, dword [esp + 0x2c]
add esp, 0xc
cmp edx, eax
mov ebx, 1
ja 0x412f3d
xor eax, eax
mov ecx, dword [esp + eax + 0x30]
mov edx, dword [esp + eax + 0x20]
cmp ecx, edx
jb 0x412f3b
add eax, 4
cmp eax, 0x10
je 0x412f3d
mov edx, dword [esp + eax + 0x30]
mov ecx, dword [esp + eax + 0x20]
cmp edx, ecx
jbe 0x412f19
jmp 0x412f3d
xor ebx, ebx
test ebx, ebx
jne 0x412f4e
xor eax, eax
pop edi
pop esi
pop ebp
pop ebx
add esp, 0x138
ret
mov ecx, 0x41
xor eax, eax
lea edi, [esp + 0x44]
rep stosd dword es:[edi], eax
mov eax, dword [esp + 0x14c]
lea ecx, [esp + 0x44]
push eax
push 0x104
push ecx
push str.ERROR_FAILURE
push str.Files
push str.IE4Check
call ebp
mov esi, str.ERROR_FAILURE
lea eax, [esp + 0x44]
mov dl, byte [eax]
mov cl, dl
cmp dl, byte [esi]
jne 0x412fab
test cl, cl
je 0x412fa7
mov dl, byte [eax + 1]
mov cl, dl
cmp dl, byte [esi + 1]
jne 0x412fab
add eax, 2
add esi, 2
test cl, cl
jne 0x412f87
xor eax, eax
jmp 0x412fb0
sbb eax, eax
sbb eax, 0xffffffff
test eax, eax
je 0x413057
mov al, byte [esp + 0x44]
lea esi, [esp + 0x44]
test al, al
je 0x413057
cmp dword [0x4238b4], 1
jle 0x412fe1
movsx eax, byte [esi]
push 8
push eax
call fcn.00415870
add esp, 8
jmp 0x412ff0
movsx ecx, byte [esi]
mov edx, dword [str.________________________________H]
mov al, byte [edx + ecx*2]
and eax, 8
test eax, eax
je 0x412ff7
inc esi
jmp 0x412fc8
mov al, byte [esi]
mov edi, esi
test al, al
je 0x41300b
cmp al, 0x2c
je 0x41300b
mov al, byte [esi + 1]
inc esi
test al, al
jne 0x412fff
mov al, byte [esi]
mov byte [esi], 0
cmp al, 0x2c
jne 0x413015
inc esi
mov edx, dword [esp + 0x14c]
lea eax, [esp + 0x1c]
lea ecx, [esp + 0x10]
push eax
push ecx
push edi
push str.IE4Check
push edx
call fcn.00413320
mov eax, dword [esp + 0x30]
mov ecx, dword [esp + 0x24]
add esp, 0x14
push eax
push ecx
push edi
call fcn.00413130
mov ebx, eax
add esp, 0xc
test ebx, ebx
je 0x413057
cmp byte [esi], 0
jne 0x412fc8
pop edi
pop esi
mov eax, ebx
pop ebp
pop ebx
add esp, 0x138
ret