Function at 0x408abe
Capabilities:
Read .ini file

Disassembly:
mov eax, 0x4227d4
call fcn.00418354
mov eax, 0x1c44
call fcn.00418450
push ebx
push esi
push edi
mov dword [ebp - 0x1c], ecx
call fcn.00401046
and byte [ebp - 0x450], 0
mov ebx, eax
mov ecx, 0xff
xor eax, eax
lea edi, [ebp - 0x44f]
rep stosd dword es:[edi], eax
stosw word es:[edi], ax
stosb byte es:[edi], al
cmp dword [ebx + 0x10ac], 1
jbe 0x408bc4
cmp dword [ebx + 0x14b4], 0
jne 0x408bc4
cmp dword [ebx + 0x14bc], 5
je 0x408bc4
mov esi, str.TRANSFORMS_
lea edi, [ebp - 0x3c]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsb byte es:[edi], byte [esi]
xor eax, eax
lea edi, [ebp - 0x2f]
stosd dword es:[edi], eax
stosd dword es:[edi], eax
stosd dword es:[edi], eax
stosd dword es:[edi], eax
stosb byte es:[edi], al
lea eax, [ebp - 0x3c]
lea edi, [ebx + 0x10b4]
push eax
push edi
call fcn.00418e50
mov esi, eax
pop ecx
test esi, esi
pop ecx
jne 0x408b6e
lea eax, [ebp - 0x3c]
push str.TRANSFORMS
push eax
call fcn.00417dd0
lea eax, [ebp - 0x3c]
push eax
push edi
call fcn.00418e50
mov esi, eax
add esp, 0x10
test esi, esi
je 0x408ba3
lea eax, [ebp - 0x3c]
push eax
call fcn.004187f0
pop ecx
add eax, esi
and byte [esi], 0
push eax
lea eax, [ebx + 0xcac]
mov esi, dword [sym.imp.USER32.dll_wsprintfA]
push eax
lea eax, [ebp - 0x3c]
push eax
push edi
lea eax, [ebp - 0x450]
push str._s_s_s__s
push eax
call esi
add esp, 0x18
jmp 0x408be2
mov esi, dword [sym.imp.USER32.dll_wsprintfA]
lea eax, [ebx + 0xcac]
push eax
push edi
lea eax, [ebp - 0x450]
push str._s_TRANSFORMS__s_
push eax
call esi
add esp, 0x10
jmp 0x408be2
mov esi, dword [sym.imp.USER32.dll_wsprintfA]
lea eax, [ebx + 0x10b4]
push eax
lea eax, [ebp - 0x450]
push 0x4291e4
push eax
call esi
add esp, 0xc
and byte [ebp - 0x850], 0
mov edx, 0xff
mov ecx, edx
xor eax, eax
lea edi, [ebp - 0x84f]
and byte [ebp - 0x1c50], 0
rep stosd dword es:[edi], eax
stosw word es:[edi], ax
stosb byte es:[edi], al
mov ecx, edx
xor eax, eax
lea edi, [ebp - 0x1c4f]
rep stosd dword es:[edi], eax
stosw word es:[edi], ax
stosb byte es:[edi], al
lea eax, [ebp - 0x1c50]
mov ecx, ebx
push eax
lea eax, [ebp - 0x850]
push eax
call fcn.0040f9ce
push eax
call fcn.00412327
lea eax, [ebp - 0x850]
push eax
call dword [sym.imp.KERNEL32.dll_lstrlenA]
cmp byte [ebp + eax - 0x851], 0x5c
lea eax, [ebp + eax - 0x851]
jne 0x408c4f
and byte [eax], 0
cmp dword [ebp + 0x10], 0
jne 0x408cc6
and byte [ebp - 0xc50], 0
mov ecx, 0xff
xor eax, eax
lea edi, [ebp - 0xc4f]
rep stosd dword es:[edi], eax
stosw word es:[edi], ax
stosb byte es:[edi], al
lea eax, [ebp - 0x850]
push eax
lea eax, [ebp - 0xc50]
push dword [0x424614]
push str._s__s_
push eax
call fcn.00418fa8
add esp, 0x10
lea eax, [ebp - 0xc50]
mov ecx, ebx
push 1
push eax
push 0x4291b0
call fcn.00410826
lea eax, [ebp - 0xc50]
push eax
lea eax, [ebp - 0x450]
push eax
lea eax, [ebp - 0x450]
push str._s__s
push eax
call fcn.00418fa8
add esp, 0x10
and byte [ebp - 0x1050], 0
mov ecx, 0xff
xor eax, eax
lea edi, [ebp - 0x104f]
rep stosd dword es:[edi], eax
stosw word es:[edi], ax
stosb byte es:[edi], al
mov eax, dword [ebx + 0x14bc]
dec eax
je 0x408dbb
dec eax
je 0x408d9d
dec eax
je 0x408d73
dec eax
je 0x408d5c
dec eax
lea eax, [ebp - 0x450]
push eax
push dword [ebp + 8]
push dword [0x42a208]
je 0x408d16
push str._s__i___s___s
jmp 0x408dd0
lea eax, [ebp - 0x1850]
push str._s__p___s___s
push eax
call esi
add esp, 0x14
lea eax, [ebp - 0x450]
push eax
lea eax, [ebp - 0x1050]
push dword [ebp + 8]
push str._p__s___s
push eax
call esi
add esp, 0x10
lea eax, [ebp - 0x1050]
mov ecx, ebx
push 1
push eax
push 0x4291b0
call fcn.00410826
jmp 0x408ddc
lea eax, [ebp - 0x450]
push eax
push dword [ebp + 8]
push dword [0x42a208]
push str._s__x___s___s
jmp 0x408dd0
lea eax, [ebp - 0x450]
push eax
lea eax, [ebx + 0x14c0]
push dword [ebp + 8]
push eax
push dword [0x42a208]
push str._s__j_s___s___s
lea eax, [ebp - 0x1850]
push eax
call esi
add esp, 0x18
jmp 0x408ddc
lea eax, [ebp - 0x450]
push eax
lea eax, [ebx + 0x14c0]
push dword [ebp + 8]
push eax
push dword [0x42a208]
push str._s__f_s___s___s
jmp 0x408d8f
lea eax, [ebp - 0x450]
push eax
push dword [ebp + 8]
push dword [0x42a208]
push 0x429a40
lea eax, [ebp - 0x1850]
push eax
call esi
add esp, 0x14
xor esi, esi
cmp dword [ebp + 0x10], esi
je 0x408df8
mov ecx, dword [ebp - 0x1c]
lea eax, [ebp - 0x450]
push esi
push eax
call fcn.004090e4
jmp 0x4090c4
mov edi, dword [ebp - 0x1c]
cmp dword [edi + 0x10], esi
je 0x409025
push esi
call dword [sym.imp.ole32.dll_CoInitialize]
mov dword [ebp - 0x10], esi
mov ecx, edi
mov dword [ebp - 4], esi
call fcn.004090d8
test al, al
je 0x408e30
push 1
push esi
lea eax, [ebp - 0x10]
push esi
push eax
push 0x429a30
push 0x424dc0
jmp 0x408e57
push 0x42fc58
push esi
push str.RunAsLaunchingUser
push str.Startup
call dword [sym.imp.KERNEL32.dll_GetPrivateProfileIntA]
push eax
push esi
lea eax, [ebp - 0x10]
push esi
push eax
push 0x429a30
push 0x424db0
call fcn.00404fec
cmp eax, esi
jge 0x408eb0
mov ecx, 0x80029c4a
cmp eax, ecx
jne 0x408e84
mov eax, 0x66f
push ecx
push 0x648
push eax
mov dword [0x430b2c], eax
call fcn.00411dcf
add esp, 0xc
jmp 0x408e98
mov ecx, 0x648
push eax
push ecx
mov dword [0x430b2c], ecx
call fcn.00411d66
pop ecx
pop ecx
mov eax, dword [ebp - 0x10]
or dword [ebp - 4], 0xffffffff
cmp eax, esi
je 0x408ea9
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
xor eax, eax
jmp 0x4090c7
mov dword [ebp - 0x14], esi
cmp dword [ebx + 0x14bc], 5
mov byte [ebp - 4], 1
je 0x408ece
push esi
call dword [sym.imp.OLEAUT32.dll_SysStringLen]
push 0xffffffffffffffff
push dword [ebp + 8]
jmp 0x408f0c
and byte [ebp - 0x50], 0
push 0xc
pop ecx
xor eax, eax
lea edi, [ebp - 0x4f]
push 0x42fc58
rep stosd dword es:[edi], eax
stosb byte es:[edi], al
lea eax, [ebp - 0x50]
push 0x32
push eax
push 0x42db80
push dword [0x4245d8]
push dword [0x4245cc]
call dword [sym.imp.KERNEL32.dll_GetPrivateProfileStringA]
push esi
call dword [sym.imp.OLEAUT32.dll_SysStringLen]
lea eax, [ebp - 0x50]
push 0xffffffffffffffff
push eax
call fcn.0040334b
mov dword [ebp - 0x14], eax
mov eax, dword [ebx + 0x14b8]
pop ecx
cmp eax, esi
pop ecx
je 0x408f33
cmp dword [ebx + 0x10ac], 1
jbe 0x408f33
mov ecx, dword [ebp - 0x10]
push eax
push ecx
mov edx, dword [ecx]
call dword [edx + 0x20]
lea eax, [ebp - 0x18]
mov dword [ebp - 0x18], esi
push eax
call fcn.0040e0bf
mov eax, dword [ebp - 0x18]
push eax
mov ecx, dword [eax]
call dword [ecx + 4]
mov eax, dword [ebp - 0x10]
push dword [ebp - 0x18]
mov ecx, dword [eax]
push eax
call dword [ecx + 0x64]
lea ecx, [ebx + 0x2e14]
mov dword [ebp + 0x10], esi
call fcn.0040c9ee
mov eax, dword [eax]
mov ecx, dword [ebp - 0x10]
lea edi, [ebp + 0x10]
mov edx, dword [ecx]
push edi
push eax
push esi
push dword [ebp - 0x14]
push ecx
call dword [edx + 0x28]
cmp dword [ebp + 0x10], esi
jne 0x408f83
cmp eax, esi
je 0x408f83
or dword [ebp + 0x10], 0xffffffff
mov ecx, ebx
call fcn.00410812
test eax, eax
je 0x408fa3
cmp dword [ebp + 0x10], 0xfffffff8
je 0x408fd9
cmp dword [ebp + 0x10], 0xfffffffd
jne 0x408fa3
push 1
mov ecx, ebx
call fcn.00410805
mov eax, dword [ebp + 0x10]
cmp eax, 0xfffffff8
je 0x408fd9
cmp eax, 0xfffffff9
je 0x408fd2
cmp eax, 0xfffffffc
je 0x408fcb
cmp eax, 0xfffffffd
je 0x408fef
cmp eax, esi
je 0x408fef
push 0x65c
call fcn.00411d66
pop ecx
jmp 0x408fef
push 0x65d
jmp 0x408fc3
push 0x66c
jmp 0x408fc3
mov ecx, dword [ebp - 0x1c]
push 1
pop eax
mov dword [ecx + 0xc], eax
push eax
lea eax, [ebp - 0x450]
push eax
call fcn.004090e4
mov eax, dword [ebp + 0x10]
mov dword [0x430b2c], eax
mov eax, dword [ebp - 0x18]
push eax
mov ecx, dword [eax]
call dword [ecx + 8]
push dword [ebp - 0x14]
call dword [sym.imp.OLEAUT32.dll_SysStringLen]
mov eax, dword [ebp - 0x10]
or dword [ebp - 4], 0xffffffff
cmp eax, esi
je 0x40901a
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
call dword [sym.imp.ole32.dll_CoUninitialize]
jmp 0x4090c4
call fcn.0040666e
call fcn.00406634
mov ecx, ebx
call fcn.004107d5
test eax, eax
jne 0x409063
mov ecx, ebx
call fcn.00410812
test eax, eax
jne 0x409063
lea eax, [ebp - 0x1850]
push 1
push eax
call fcn.004129bf
test eax, eax
jne 0x4090c4
mov dword [0x430b2c], 0x485
jmp 0x4090c4
lea eax, [ebp - 0x1850]
push 1
push eax
call fcn.004128e2
mov esi, eax
cmp esi, 0xcccccccc
jne 0x409085
mov dword [0x430b2c], 0x485
mov ecx, ebx
call fcn.00410812
test eax, eax
je 0x4090a9
cmp esi, 0x669
je 0x4090a9
cmp esi, 0x642
jne 0x4090a9
push 1
mov ecx, ebx
call fcn.00410805
push dword [ebp + 8]
mov ecx, edi
call fcn.0040c2c1
test eax, eax
je 0x4090c4
push dword [ebp + 8]
mov ecx, edi
call fcn.00409b91
mov dword [edi + 0xc], eax
push 1
pop eax
mov ecx, dword [ebp - 0xc]
pop edi
pop esi
pop ebx
mov dword fs:[0], ecx
leave
ret 0xc