Function at 0x408d60
Capabilities:
Create process on windows
Read .ini file

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x214
mov eax, dword [0x4f6fc0]
xor eax, ebp
mov dword [ebp - 4], eax
mov dword [ebp - 0x208], 0
mov al, byte [0x4f8345]
mov byte [ebp - 0x104], al
push 0xfe
push 0
lea ecx, [ebp - 0x103]
push ecx
call fcn.004b6780
add esp, 0xc
mov dl, byte [0x4f8346]
mov byte [ebp - 0x204], dl
push 0xfe
push 0
lea eax, [ebp - 0x203]
push eax
call fcn.004b6780
add esp, 0xc
mov ecx, dword [ebp + 8]
mov dword [ebp - 0x20c], ecx
cmp dword [ebp - 0x20c], 0x191
jg 0x408e1b
cmp dword [ebp - 0x20c], 0x191
je 0x4092d7
mov edx, dword [ebp - 0x20c]
sub edx, 0x82
mov dword [ebp - 0x20c], edx
cmp dword [ebp - 0x20c], 0xae
ja case.0x408e47.2
mov eax, dword [ebp - 0x20c]
movzx ecx, byte [eax + 0x4097cc]
jmp dword [ecx*4 + 0x409790]
mov edx, dword [ebp - 0x20c]
sub edx, 0x192
mov dword [ebp - 0x20c], edx
cmp dword [ebp - 0x20c], 0x66
ja case.0x408e47.2
mov eax, dword [ebp - 0x20c]
movzx ecx, byte [eax + 0x409894]
jmp dword [ecx*4 + 0x40987c]
push 0x4f8347
push 0x4f8348
push 2
push 0
call fcn.0045ed80
add esp, 0x10
jmp case.0x408e47.2
cmp dword [0x4e1478], 1
jne 0x408ea6
push 0x525760
lea edx, [ebp - 0x104]
push edx
call fcn.004b5e60
add esp, 8
lea eax, [ebp - 0x104]
push eax
call fcn.0042e130
add esp, 4
lea ecx, [ebp - 0x104]
push ecx
call fcn.00429ab0
add esp, 4
jmp 0x408eb5
lea edx, [ebp - 0x104]
push edx
call fcn.0049d800
add esp, 4
push 5
push 0
push 0
lea eax, [ebp - 0x104]
push eax
push 0
push 0
call dword [sym.imp.SHELL32.dll_ShellExecuteA]
jmp case.0x408e47.2
push 0x4fa370
lea ecx, [ebp - 0x104]
push ecx
call fcn.004b5e60
add esp, 8
push 5
push 0
push 0
lea edx, [ebp - 0x104]
push edx
push 0
push 0
call dword [sym.imp.SHELL32.dll_ShellExecuteA]
jmp case.0x408e47.2
push 0x54e6f8
mov eax, 4
imul eax, eax, 0
add eax, 0x5705a0
push eax
call fcn.004b5e60
add esp, 8
mov ecx, 4
imul ecx, ecx, 0
add ecx, 0x5705a0
push ecx
push 0
push 0
call fcn.00476ad0
add esp, 0xc
mov edx, dword [0x553a18]
push edx
call fcn.004b12b0
add esp, 4
mov eax, dword [0x553a18]
push eax
call dword [sym.imp.USER32.dll_DrawMenuBar]
jmp case.0x408e47.2
push 0x4d4cd8
mov ecx, 4
imul ecx, ecx, 0
add ecx, 0x5705a0
push ecx
call fcn.004b5e60
add esp, 8
mov edx, 4
imul edx, edx, 0
add edx, 0x5705a0
push edx
push 0
push 0
call fcn.00476ad0
add esp, 0xc
mov eax, dword [0x553a18]
push eax
call fcn.004b12b0
add esp, 4
mov ecx, dword [0x553a18]
push ecx
call dword [sym.imp.USER32.dll_DrawMenuBar]
jmp case.0x408e47.2
push str.Selected_Copy_Shortcuts
push 1
call fcn.004417b0
add esp, 8
push 0
call fcn.00407870
add esp, 4
jmp case.0x408e47.2
push str.Selected_Install_QT
push 1
call fcn.00440830
add esp, 8
push 0x5c
push 0x5c
push 0x4d4d2c
call fcn.0049cfc0
push eax
push str._s_s_cqtw_cQUICKTIMEINSTALLER.EXE
lea edx, [ebp - 0x104]
push edx
call fcn.004b6e08
add esp, 0x18
lea eax, [ebp - 0x104]
push eax
call fcn.004196c0
add esp, 4
mov dword [ebp - 0x208], eax
cmp dword [0x4e1450], 3
je 0x40902e
cmp dword [0x4e1450], 6
je 0x40902e
cmp dword [0x4e1450], 1
jne 0x409088
push 0x4d4d64
lea ecx, [ebp - 0x104]
push ecx
push str.MSG_DownloadQuickTimeVersion
push 0
call fcn.004766d0
add esp, 0x10
push 0x4f834b
push 0x4d4db4
push 0x4d4dc8
lea edx, [ebp - 0x104]
push edx
call fcn.00458fb0
add esp, 0x10
mov dword [ebp - 0x208], eax
cmp dword [ebp - 0x208], 1
jne 0x409083
push 0x4d4de0
call fcn.004865a0
add esp, 4
jmp 0x409127
cmp dword [ebp - 0x208], 1
jne 0x4090ee
lea eax, [ebp - 0x104]
push eax
push 0x4d4e44
lea ecx, [ebp - 0x204]
push ecx
call fcn.004b6e08
add esp, 0xc
lea edx, [ebp - 0x204]
push edx
push 1
call fcn.00440830
add esp, 8
cmp dword [0x5507fc], 1
jne 0x4090d5
mov dword [0x5507fc], 0
call fcn.004b5080
push 0
lea eax, [ebp - 0x104]
push eax
call fcn.00487ce0
add esp, 8
mov dword [ebp - 0x208], eax
jmp 0x409127
lea ecx, [ebp - 0x104]
push ecx
push 0x4d4e54
lea edx, [ebp - 0x204]
push edx
call fcn.004b6e08
add esp, 0xc
lea eax, [ebp - 0x204]
push eax
push 1
call fcn.00440830
add esp, 8
push 0x4d4e70
call fcn.004865a0
add esp, 4
jmp case.0x408e47.2
push str.Selected_Install_Acrobat
push 1
call fcn.00440830
add esp, 8
push 0x4d4ef0
mov ecx, 4
imul ecx, ecx, 0
add ecx, 0x5705a0
push ecx
call fcn.004b68e0
add esp, 8
test eax, eax
jne 0x40917b
push 0x5c
push 0x5c
call fcn.0049cfc0
push eax
push str._sdoc_cacrowin_cACROJPN.EXE
lea edx, [ebp - 0x104]
push edx
call fcn.004b6e08
add esp, 0x14
jmp 0x4091d8
push 0x4d4f5c
mov eax, 4
imul eax, eax, 0
add eax, 0x5705a0
push eax
call fcn.004b68e0
add esp, 8
test eax, eax
jne 0x4091ba
push 0x5c
push 0x5c
call fcn.0049cfc0
push eax
push str._sdoc_cacrowin_cACROTUR.EXE
lea ecx, [ebp - 0x104]
push ecx
call fcn.004b6e08
add esp, 0x14
jmp 0x4091d8
push 0x5c
push 0x5c
call fcn.0049cfc0
push eax
push str._sdoc_cacrowin_cACROENG.EXE
lea edx, [ebp - 0x104]
push edx
call fcn.004b6e08
add esp, 0x14
lea eax, [ebp - 0x104]
push eax
call fcn.004196c0
add esp, 4
mov dword [ebp - 0x208], eax
cmp dword [0x4e1450], 3
je 0x409211
cmp dword [0x4e1450], 6
je 0x409211
cmp dword [0x4e1450], 1
je 0x409211
cmp dword [0x4e1450], 7
jne 0x409223
push 0x4d4fa4
call fcn.004865a0
add esp, 4
jmp 0x4092b4
cmp dword [ebp - 0x208], 1
jne 0x409276
lea ecx, [ebp - 0x104]
push ecx
push str.file_exists:__s
lea edx, [ebp - 0x204]
push edx
call fcn.004b6e08
add esp, 0xc
lea eax, [ebp - 0x204]
push eax
push 0x4d4ffc
push 1
call fcn.004417b0
add esp, 0xc
push 0
lea ecx, [ebp - 0x104]
push ecx
call fcn.00487ce0
add esp, 8
mov dword [ebp - 0x208], eax
jmp 0x4092b4
lea edx, [ebp - 0x104]
push edx
push str.file_does_not_exist:__s
lea eax, [ebp - 0x204]
push eax
call fcn.004b6e08
add esp, 0xc
lea ecx, [ebp - 0x204]
push ecx
push 0x4d5018
push 1
call fcn.004417b0
add esp, 0xc
push 0x4d501c
call fcn.004865a0
add esp, 4
jmp case.0x408e47.2
push str.Copy_Content_to_client
push 1
call fcn.00440830
add esp, 8
push 1
call fcn.00407c90
add esp, 4
jmp case.0x408e47.2
push 0x4d506c
push 0x4fcad8
push 0x4d5078
lea edx, [ebp - 0x104]
push edx
call fcn.004b6e08
add esp, 0x10
lea eax, [ebp - 0x104]
push eax
push 0xff
lea ecx, [ebp - 0x204]
push ecx
push 0x4f834e
push str.use_wavein
push 0x4d508c
call dword [sym.imp.KERNEL32.dll_GetPrivateProfileStringA]
mov dword [ebp - 0x208], eax
mov edx, 1
imul edx, edx, 0
movsx eax, byte [ebp + edx - 0x204]
cmp eax, 0x79
jne 0x40934c
mov dword [0x4ef684], 0
mov dword [0x4ef688], 0
cmp dword [0x5507fc], 0
jne 0x409393
call fcn.00488e50
test eax, eax
jne 0x40936a
mov dword [ebp - 0x210], 1
jmp 0x409374
mov dword [ebp - 0x210], 0
mov ecx, dword [ebp - 0x210]
mov dword [ebp - 0x208], ecx
cmp dword [ebp - 0x208], 0
jne 0x409393
mov dword [0x5507fc], 1
push str.Selected_Test_Voice_Record_and_Playback
push 1
call fcn.004417b0
add esp, 8
cmp dword [0x5507fc], 1
jne 0x4093e2
push 0
call fcn.00405bf0
add esp, 4
call fcn.004af190
call fcn.004ae900
call fcn.004aed20
push 0x4f8352
push 0x4f8354
push 0x4d50bc
push str.MSG_VoiceRecordShouldWork
call fcn.00458fb0
add esp, 0x10
jmp 0x4093fe
push 0x4f8355
push 0x4f8356
push 0x4d5114
push str.ERROR:_QuickTime_not_installed
call fcn.00458fb0
add esp, 0x10
jmp case.0x408e47.2
push str.Selected_Windows_Sound_Recorder
push 1
call fcn.004417b0
add esp, 8
call fcn.0049bcc0
cmp eax, 0xa
jne 0x40943e
push 0x5c
push 0x5c
push 0x526a98
push str._s_cSystem32_csoundrecorder.exe
lea edx, [ebp - 0x104]
push edx
call fcn.004b6e08
add esp, 0x14
jmp 0x409529
call fcn.0049bcc0
cmp eax, 0xe
je 0x409456
call fcn.0049bcc0
cmp eax, 0xf
jne 0x40950c
push 0x5c
push 0x5c
push 0x526a98
push str._s_cSystem32_cSoundRecorder
lea eax, [ebp - 0x104]
push eax
call fcn.004b6e08
add esp, 0x14
push 1
push 0
push 0
lea ecx, [ebp - 0x104]
push ecx
push 0x4d51fc
push 0
call dword [sym.imp.SHELL32.dll_ShellExecuteA]
mov dword [ebp - 0x214], eax
lea edx, [ebp - 0x104]
push edx
push 0x4d5224
push 1
call fcn.004417b0
add esp, 0xc
cmp dword [ebp - 0x214], 0x20
jae 0x409505
push 0x5c
push 0x5c
push 0x526a98
push str._s_csysnative_cSoundRecorder.exe
lea eax, [ebp - 0x104]
push eax
call fcn.004b6e08
add esp, 0x14
push 1
push 0
push 0
lea ecx, [ebp - 0x104]
push ecx
push 0x4d5260
push 0
call dword [sym.imp.SHELL32.dll_ShellExecuteA]
mov dword [ebp - 0x214], eax
lea edx, [ebp - 0x104]
push edx
push 0x4d5284
push 1
call fcn.004417b0
add esp, 0xc
jmp case.0x408e47.2
push 0x5c
push 0x5c
push 0x526a98
push str._s_cSystem32_csndrec32.exe
lea eax, [ebp - 0x104]
push eax
call fcn.004b6e08
add esp, 0x14
lea ecx, [ebp - 0x104]
push ecx
push 0x4d52e0
push 1
call fcn.004417b0
add esp, 0xc
push 0
lea edx, [ebp - 0x104]
push edx
call fcn.00487ce0
add esp, 8
mov dword [ebp - 0x208], eax
cmp dword [ebp - 0x208], 0
jne 0x4095a2
push 0x5c
push 0x526a98
push str._s_csndrec32.exe
lea eax, [ebp - 0x104]
push eax
call fcn.004b6e08
add esp, 0x10
push 0
lea ecx, [ebp - 0x104]
push ecx
call fcn.00487ce0
add esp, 8
mov dword [ebp - 0x208], eax
lea edx, [ebp - 0x104]
push edx
push 1
call fcn.00440830
add esp, 8
jmp case.0x408e47.2
push str.Selected_Windows_Volume_Control
push 1
call fcn.004417b0
add esp, 8
call fcn.0049bcc0
cmp eax, 0xa
jne 0x4095df
push 0x5c
push 0x5c
push 0x526a98
push 0x4d5320
lea eax, [ebp - 0x104]
push eax
call fcn.004b6e08
add esp, 0x14
jmp 0x40962f
call fcn.0049bcc0
cmp eax, 0xe
je 0x4095f3
call fcn.0049bcc0
cmp eax, 0xf
jne 0x409612
push 0x5c
push 0x5c
push 0x526a98
push str._s_cSystem32_csndvol.exe
lea ecx, [ebp - 0x104]
push ecx
call fcn.004b6e08
add esp, 0x14
jmp 0x40962f
push 0x5c
push 0x5c
push 0x526a98
push str._s_cSystem32_csndvol32.exe
lea edx, [ebp - 0x104]
push edx
call fcn.004b6e08
add esp, 0x14
push 0
lea eax, [ebp - 0x104]
push eax
call fcn.00487ce0
add esp, 8
mov dword [ebp - 0x208], eax
cmp dword [ebp - 0x208], 0
jne 0x409681
push 0x5c
push 0x526a98
push str._s_csndvol32.exe
lea ecx, [ebp - 0x104]
push ecx
call fcn.004b6e08
add esp, 0x10
push 0
lea edx, [ebp - 0x104]
push edx
call fcn.00487ce0
add esp, 8
mov dword [ebp - 0x208], eax
jmp case.0x408e47.2
cmp dword [0x4f84a0], 1
jne 0x4096ad
push str.Selected_Server_Status
push 1
call fcn.004417b0
add esp, 8
push 0x4d53f0
call fcn.004865a0
add esp, 4
jmp 0x4096c1
push str.Selected_License_Manager
push 1
call fcn.004417b0
add esp, 8
call fcn.00417d50
jmp case.0x408e47.2
push 1
push 0x4fcad8
call fcn.00408510
add esp, 8
jmp case.0x408e47.2
push 0
call fcn.00407c90
add esp, 4
jmp case.0x408e47.2
push str.Selected_DynEd_website
push 1
call fcn.00440830
add esp, 8
push str.http:__www.dyned.com_support
call fcn.004865a0
add esp, 4
jmp case.0x408e47.2
push str.Selected_DynEd_KB
push 1
call fcn.00440830
add esp, 8
push str.http:__www.dyned.com_knowledgebase
call fcn.004865a0
add esp, 4
jmp case.0x408e47.2
push str.Selected_DynEd_guides
push 1
call fcn.00440830
add esp, 8
push str.http:__www.dyned.com_guides
call fcn.004865a0
add esp, 4
jmp case.0x408e47.2
push str.Selected_QT_page
push 1
call fcn.00440830
add esp, 8
push str.http:__www.apple.com_quicktime_download_
call fcn.004865a0
add esp, 4
jmp case.0x408e47.2
push str.Selected_Acrobat_page
push 1
call fcn.00440830
add esp, 8
push 0x4d5548
call fcn.004865a0
add esp, 4
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.004b6253
mov esp, ebp
pop ebp
ret