Function at 0x4402b0
Capabilities:
Get common file path
Query or enumerate registry value
Read .ini file

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x58abb0
mov eax, dword fs:[0]
push eax
sub esp, 0xe88
mov eax, dword [0x5f44b0]
xor eax, ebp
mov dword [ebp - 0x14], eax
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov dword [ebp - 0xe94], ecx
push 0x597ec0
lea ecx, [ebp - 0x650]
call fcn.00401600
mov dword [ebp - 4], 0
mov word [ebp - 0x85c], 0
push 0x206
push 0
lea eax, [ebp - 0x85a]
push eax
call fcn.0049e690
add esp, 0xc
mov word [ebp - 0x42c], 0
push 0x206
push 0
lea ecx, [ebp - 0x42a]
push ecx
call fcn.0049e690
add esp, 0xc
mov word [ebp - 0x634], 0
push 0x206
push 0
lea edx, [ebp - 0x632]
push edx
call fcn.0049e690
add esp, 0xc
mov word [ebp - 0xe7c], 0
push 0x206
push 0
lea eax, [ebp - 0xe7a]
push eax
call fcn.0049e690
add esp, 0xc
mov word [ebp - 0x21c], 0
push 0x206
push 0
lea ecx, [ebp - 0x21a]
push ecx
call fcn.0049e690
add esp, 0xc
mov word [ebp - 0xa6c], 0
push 0x206
push 0
lea edx, [ebp - 0xa6a]
push edx
call fcn.0049e690
add esp, 0xc
mov dword [ebp - 0x10], 0
push 0
push 0x2b
lea eax, [ebp - 0x85c]
push eax
push 0
call dword [sym.imp.SHELL32.dll_SHGetSpecialFolderPathW]
push 0x597ec4
lea ecx, [ebp - 0x85c]
push ecx
call fcn.0049eb28
add esp, 8
mov edx, dword [ebp + 8]
push edx
lea eax, [ebp - 0x85c]
push eax
call fcn.0049eb28
add esp, 8
push 0x597ec8
lea ecx, [ebp - 0x85c]
push ecx
call fcn.0049eb28
add esp, 8
mov edx, dword [ebp + 0xc]
push edx
lea eax, [ebp - 0x85c]
push eax
call fcn.0049eb28
add esp, 8
push 0x597ecc
lea ecx, [ebp - 0x85c]
push ecx
call fcn.0049eb28
add esp, 8
lea edx, [ebp - 0x85c]
push edx
push 0x104
lea eax, [ebp - 0x42c]
push eax
push 0x597ed8
push 0x597edc
push 0x597ef4
call dword [sym.imp.KERNEL32.dll_GetPrivateProfileStringW]
lea ecx, [ebp - 0x42c]
push ecx
call fcn.0049e752
add esp, 4
mov dword [ebp - 0x10], eax
cmp dword [ebp - 0x10], 0
jle 0x4404d7
lea edx, [ebp - 0x42c]
push edx
lea eax, [ebp - 0x21c]
push eax
call fcn.0049eb52
add esp, 8
mov ecx, dword [ebp + 0x10]
push ecx
lea edx, [ebp - 0x21c]
push edx
mov ecx, dword [ebp - 0xe94]
call fcn.00440ee0
test eax, eax
je 0x4404d7
lea eax, [ebp - 0x21c]
push eax
lea ecx, [ebp - 0x650]
call fcn.004036d0
mov dword [ebp - 0xe84], 1
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x650]
call fcn.00401640
mov eax, dword [ebp - 0xe84]
jmp 0x4406eb
mov word [ebp - 0xc74], 0
push 0x206
push 0
lea ecx, [ebp - 0xc72]
push ecx
call fcn.0049e690
add esp, 0xc
push 0x597f04
lea edx, [ebp - 0xc74]
push edx
call fcn.0049eb52
add esp, 8
mov eax, dword [ebp + 8]
push eax
lea ecx, [ebp - 0xc74]
push ecx
call fcn.0049eb28
add esp, 8
lea edx, [ebp - 0x220]
push edx
push 0x20019
push 0
lea eax, [ebp - 0xc74]
push eax
push reloc.OLEAUT32.dll_SysReAllocString
call dword [sym.imp.ADVAPI32.dll_RegOpenKeyExW]
mov dword [ebp - 0x860], eax
cmp dword [ebp - 0x860], 0
jne 0x440603
mov dword [ebp - 0xe80], 0x104
lea ecx, [ebp - 0xe80]
push ecx
lea edx, [ebp - 0xa6c]
push edx
push 0
push 0
push str.InstallPath
mov eax, dword [ebp - 0x220]
push eax
call dword [sym.imp.ADVAPI32.dll_RegQueryValueExW]
mov dword [ebp - 0x860], eax
cmp dword [ebp - 0x860], 0
jne 0x440603
lea ecx, [ebp - 0xa6c]
push ecx
lea edx, [ebp - 0x21c]
push edx
call fcn.0049eb52
add esp, 8
mov eax, dword [ebp + 0x10]
push eax
lea ecx, [ebp - 0x21c]
push ecx
mov ecx, dword [ebp - 0xe94]
call fcn.00440ee0
test eax, eax
je 0x440603
mov edx, dword [ebp - 0x220]
push edx
call dword [sym.imp.ADVAPI32.dll_RegCloseKey]
lea eax, [ebp - 0x21c]
push eax
lea ecx, [ebp - 0x650]
call fcn.004036d0
mov dword [ebp - 0xe88], 1
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x650]
call fcn.00401640
mov eax, dword [ebp - 0xe88]
jmp 0x4406eb
mov ecx, dword [ebp - 0x220]
push ecx
call dword [sym.imp.ADVAPI32.dll_RegCloseKey]
push 0
push 0x26
lea edx, [ebp - 0x634]
push edx
push 0
mov ecx, dword [ebp - 0xe94]
call fcn.00440970
push 0x597f30
lea eax, [ebp - 0x634]
push eax
call fcn.0049eb28
add esp, 8
mov ecx, dword [ebp + 8]
push ecx
lea edx, [ebp - 0x634]
push edx
call fcn.0049eb28
add esp, 8
push 0x597f34
lea eax, [ebp - 0x634]
push eax
call fcn.0049eb28
add esp, 8
lea ecx, [ebp - 0x634]
push ecx
lea edx, [ebp - 0x21c]
push edx
call fcn.0049eb52
add esp, 8
mov eax, dword [ebp + 0x10]
push eax
lea ecx, [ebp - 0x21c]
push ecx
mov ecx, dword [ebp - 0xe94]
call fcn.00440ee0
test eax, eax
je 0x4406c9
lea edx, [ebp - 0x21c]
push edx
lea ecx, [ebp - 0x650]
call fcn.004036d0
mov dword [ebp - 0xe8c], 1
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x650]
call fcn.00401640
mov eax, dword [ebp - 0xe8c]
jmp 0x4406eb
mov dword [ebp - 0xe90], 0
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x650]
call fcn.00401640
mov eax, dword [ebp - 0xe90]
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
mov ecx, dword [ebp - 0x14]
xor ecx, ebp
call fcn.0049e381
mov esp, ebp
pop ebp
ret 0xc