Function at 0x4074c3
Capabilities:
Create process on windows
Read .ini file
Set file attributes

Disassembly:
push ebp
mov ebp, esp
mov eax, 0x18c4
call fcn.00412ba0
push ebx
push esi
push edi
lea eax, [ebp - 0xc94]
push 1
push eax
call fcn.004097c8
mov esi, dword [sym.imp.USER32.dll_wsprintfA]
pop ecx
test eax, eax
pop ecx
je 0x40752e
lea eax, [ebp - 0x67c]
push eax
lea eax, [ebp - 0xc94]
push eax
call fcn.0040a004
pop ecx
lea eax, [ebp - 0x67c]
pop ecx
push eax
lea eax, [ebp - 0x884]
push 0x41c1cc
push eax
call esi
add esp, 0xc
lea eax, [ebp - 0x884]
push eax
push dword [0x4210bc]
call fcn.00409cca
pop ecx
pop ecx
mov edi, 0x4212e8
push edi
push 0x41c058
push dword [0x424ed8]
call int.00403c7b
add esp, 0xc
push eax
call fcn.00404f42
pop ecx
lea eax, [ebp - 0x474]
push 0x424660
push 0x208
push eax
push 0
push str.Spawn
push str.BootStrap
call dword [sym.imp.KERNEL32.dll_GetPrivateProfileStringA]
lea eax, [ebp - 0x474]
push eax
lea eax, [ebp - 0xa8c]
push 0x41c5f8
push eax
call esi
add esp, 0xc
lea eax, [ebp - 0x474]
mov ebx, 0x424aa0
push eax
push ebx
lea eax, [ebp - 0x26c]
push 0x41c1a4
push eax
call esi
add esp, 0x10
lea eax, [ebp - 0x26c]
push eax
lea eax, [ebp - 0xa8c]
push eax
push 0x424cc0
call fcn.00408ec8
add esp, 0xc
lea eax, [ebp - 0x26c]
push 0x80
push eax
call dword [sym.imp.KERNEL32.dll_SetFileAttributesA]
call fcn.00408e86
mov al, byte [0x4212e8]
test al, al
je 0x4075fc
mov cl, byte [0x4212e9]
cmp cl, 0x3a
je 0x4075f5
cmp al, 0x5c
jne 0x4075fc
cmp cl, al
jne 0x4075fc
mov edx, 0x41fcac
jmp 0x4075fe
mov edx, ebx
mov eax, dword [0x420d98]
mov ecx, dword [0x4210a8]
xor ebx, ebx
cmp eax, ebx
je 0x407641
cmp ecx, ebx
je 0x407641
push 0x421900
push 0x4216f8
push 0x423d40
push 0x420ea0
push 0x420988
push edi
push edx
lea eax, [ebp - 0x18c4]
push str._s_s__s___s___q___s____s____s____s_
push eax
call esi
add esp, 0x24
jmp 0x4076a2
cmp eax, ebx
je 0x407662
push 0x421900
push 0x4216f8
push 0x423d40
push 0x420988
push edi
push edx
push str._s_s__s___s____s____s____s_
jmp 0x407681
push 0x421900
cmp ecx, ebx
push 0x4216f8
push 0x423d40
je 0x40768f
push 0x420ea0
push edi
push edx
push str._s_s__q___s____s____s____s_
lea eax, [ebp - 0x18c4]
push eax
call esi
add esp, 0x20
jmp 0x4076a2
push edi
push edx
lea eax, [ebp - 0x18c4]
push str._s_s___s____s____s_
push eax
call esi
add esp, 0x1c
push 0x44
lea eax, [ebp - 0x64]
pop edi
push edi
push ebx
push eax
call fcn.00411f50
add esp, 0xc
mov dword [ebp - 0x64], edi
lea eax, [ebp - 0x20]
push 1
pop edi
push eax
lea eax, [ebp - 0x64]
push eax
push ebx
push ebx
push ebx
push ebx
push ebx
lea eax, [ebp - 0x18c4]
push ebx
push eax
push ebx
mov word [ebp - 0x34], di
call dword [sym.imp.KERNEL32.dll_CreateProcessA]
cmp eax, ebx
jne 0x40772d
call dword [sym.imp.KERNEL32.dll_GetLastError]
push eax
lea eax, [ebp - 0x10]
push str.0x_08lXH
push eax
call esi
add esp, 0xc
lea eax, [ebp - 0x10]
push str.CreateProcess__
push 0x41c058
push eax
push 0x41c054
push dword [0x424ca8]
call int.00403c7b
add esp, 0xc
push eax
call int.00403c7b
add esp, 0xc
push eax
push edi
push 0x10
push edi
call fcn.00405290
add esp, 0x10
xor eax, eax
jmp 0x407771
call fcn.00404efa
push ebx
push dword [0x4210b4]
call dword [sym.imp.USER32.dll_ShowWindow]
call fcn.00407e24
lea eax, [ebp - 4]
push eax
push dword [ebp - 0x20]
call dword [sym.imp.KERNEL32.dll_GetExitCodeProcess]
cmp dword [ebp - 4], 0x103
je 0x40773f
cmp dword [ebp - 4], ebx
je 0x40776f
push ebx
call fcn.00407c47
pop ecx
push dword [ebp - 4]
call fcn.00410ff0
pop ecx
mov eax, edi
pop edi
pop esi
pop ebx
leave
ret