Function at 0x401790
Capabilities:
Query or enumerate registry value
Read .ini file

Disassembly:
sub esp, 0x138
push ebx
push ebp
push esi
mov esi, dword [esp + 0x148]
push edi
push 0
push esi
mov ebx, 1
mov dword [esp + 0x1c], 0x104
call fcn.00402200
add esp, 8
cmp eax, 0xffffffff
jne 0x4017cb
mov eax, ebx
pop edi
pop esi
pop ebp
pop ebx
add esp, 0x138
ret
lea eax, [esp + 0x30]
push 4
push eax
call fcn.00401ae0
add esp, 8
lea ecx, [esp + 0x20]
push 4
push ecx
call fcn.00401ae0
mov eax, dword [section..rdata]
add esp, 8
lea edx, [esp + 0x18]
push edx
push 0x20019
push 0
push eax
push 0x80000002
call dword [sym.imp.ADVAPI32.dll_RegOpenKeyExA]
test eax, eax
je 0x401817
xor eax, eax
pop edi
pop esi
pop ebp
pop ebx
add esp, 0x138
ret
lea ecx, [esp + 0x14]
lea edx, [esp + 0x44]
push ecx
mov ecx, dword [esp + 0x1c]
lea eax, [esp + 0x44]
push edx
push eax
push 0
push str.Version
push ecx
call dword [sym.imp.ADVAPI32.dll_RegQueryValueExA]
test eax, eax
je 0x401849
xor eax, eax
pop edi
pop esi
pop ebp
pop ebx
add esp, 0x138
ret
lea edx, [esp + 0x44]
lea eax, [esp + 0x30]
push edx
push 4
push eax
call fcn.00401a40
mov ecx, 0x41
xor eax, eax
lea edi, [esp + 0x50]
add esp, 0xc
mov ebp, dword [sym.imp.KERNEL32.dll_GetPrivateProfileStringA]
rep stosd dword es:[edi], eax
push esi
lea ecx, [esp + 0x48]
push 0x104
push ecx
push str.ERROR_FAILURE
push str.Version
push str.IE4Check
call ebp
mov esi, str.ERROR_FAILURE
lea eax, [esp + 0x44]
mov dl, byte [eax]
mov cl, dl
cmp dl, byte [esi]
jne 0x4018b9
test cl, cl
je 0x4018b5
mov dl, byte [eax + 1]
mov cl, dl
cmp dl, byte [esi + 1]
jne 0x4018b9
add eax, 2
add esi, 2
test cl, cl
jne 0x401895
xor eax, eax
jmp 0x4018be
sbb eax, eax
sbb eax, 0xffffffff
test eax, eax
je 0x40191e
lea eax, [esp + 0x44]
lea ecx, [esp + 0x20]
push eax
push 4
push ecx
call fcn.00401a40
mov edx, dword [esp + 0x3c]
mov eax, dword [esp + 0x2c]
add esp, 0xc
cmp edx, eax
mov ebx, 1
ja 0x40190d
xor eax, eax
mov ecx, dword [esp + eax + 0x30]
mov edx, dword [esp + eax + 0x20]
cmp ecx, edx
jb 0x40190b
add eax, 4
cmp eax, 0x10
je 0x40190d
mov edx, dword [esp + eax + 0x30]
mov ecx, dword [esp + eax + 0x20]
cmp edx, ecx
jbe 0x4018e9
jmp 0x40190d
xor ebx, ebx
test ebx, ebx
jne 0x40191e
xor eax, eax
pop edi
pop esi
pop ebp
pop ebx
add esp, 0x138
ret
mov ecx, 0x41
xor eax, eax
lea edi, [esp + 0x44]
rep stosd dword es:[edi], eax
mov eax, dword [esp + 0x14c]
lea ecx, [esp + 0x44]
push eax
push 0x104
push ecx
push str.ERROR_FAILURE
push str.Files
push str.IE4Check
call ebp
mov esi, str.ERROR_FAILURE
lea eax, [esp + 0x44]
mov dl, byte [eax]
mov cl, dl
cmp dl, byte [esi]
jne 0x40197b
test cl, cl
je 0x401977
mov dl, byte [eax + 1]
mov cl, dl
cmp dl, byte [esi + 1]
jne 0x40197b
add eax, 2
add esi, 2
test cl, cl
jne 0x401957
xor eax, eax
jmp 0x401980
sbb eax, eax
sbb eax, 0xffffffff
test eax, eax
je 0x401a27
mov al, byte [esp + 0x44]
lea esi, [esp + 0x44]
test al, al
je 0x401a27
cmp dword [0x40a314], 1
jle 0x4019b1
movsx eax, byte [esi]
push 8
push eax
call fcn.00402160
add esp, 8
jmp 0x4019c0
movsx ecx, byte [esi]
mov edx, dword [str.________________________________H]
mov al, byte [edx + ecx*2]
and eax, 8
test eax, eax
je 0x4019c7
inc esi
jmp 0x401998
mov al, byte [esi]
mov edi, esi
test al, al
je 0x4019db
cmp al, 0x2c
je 0x4019db
mov al, byte [esi + 1]
inc esi
test al, al
jne 0x4019cf
mov al, byte [esi]
mov byte [esi], 0
cmp al, 0x2c
jne 0x4019e5
inc esi
mov edx, dword [esp + 0x14c]
lea eax, [esp + 0x1c]
lea ecx, [esp + 0x10]
push eax
push ecx
push edi
push str.IE4Check
push edx
call fcn.00401cf0
mov eax, dword [esp + 0x30]
mov ecx, dword [esp + 0x24]
add esp, 0x14
push eax
push ecx
push edi
call fcn.00401b00
mov ebx, eax
add esp, 0xc
test ebx, ebx
je 0x401a27
cmp byte [esi], 0
jne 0x401998
pop edi
pop esi
mov eax, ebx
pop ebp
pop ebx
add esp, 0x138
ret