Function at 0x402a9e
Capabilities:
Read .ini file

Disassembly:
push 0x300
mov eax, 0x4118f9
call fcn.0040d65c
mov ebx, dword [ebp + 8]
xor eax, eax
mov dword [ebp - 0x30c], ebx
mov dword [ebx], eax
mov dword [ebx + 4], eax
mov dword [ebx + 8], eax
mov dword [ebp - 4], eax
lea esi, [ebx + 0x10]
lea eax, [esi + 4]
push 0xffffffffffffffff
push str.BoxNews.exe
mov dword [esi], eax
mov byte [eax], 0
call fcn.004018e5
lea esi, [ebx + 0x54]
lea eax, [esi + 4]
push 0xffffffffffffffff
mov byte [ebp - 4], 1
push 0x415c26
mov dword [esi], eax
mov byte [eax], 0
call fcn.004018e5
lea eax, [ebx + 0x9c]
mov dword [ebx + 0x98], eax
mov byte [eax], 0
lea eax, [ebx + 0xe0]
mov dword [ebx + 0xdc], eax
mov byte [eax], 0
mov edi, str.SoftwareMicrosoftWindowsCurrentVersionUninstall_
lea ecx, [ebp - 0x2c0]
mov byte [ebp - 4], 4
call fcn.00401d9d
mov byte [ebp - 4], 5
mov eax, dword [eax]
push 0xffffffffffffffff
push eax
call fcn.004018e5
lea eax, [ebp - 0x2c0]
mov byte [ebp - 4], 4
call fcn.004017fe
push str.Unins.exe
push esi
mov ecx, 0x415c26
call fcn.00401ab1
mov esi, dword [esi]
push 0xffffffffffffffff
lea eax, [ebp - 0x300]
push esi
lea esi, [ebp - 0x304]
mov dword [ebp - 0x304], eax
mov byte [ebp - 0x300], 0
call fcn.004018e5
push 0x415c28
mov eax, esi
mov byte [ebp - 4], 6
call fcn.0040180f
push 0x64
lea eax, [ebp - 0x74]
push 0
push eax
call fcn.00409e50
mov edi, dword [sym.imp.KERNEL32.dll_GetPrivateProfileStringA]
add esp, 0xc
push dword [ebp - 0x304]
lea eax, [ebp - 0x74]
push 0x64
push eax
push str.BoxNews.exe
push str.RunSetup
push str.SysConfig
call edi
push 0xffffffffffffffff
lea eax, [ebp - 0x74]
push eax
lea esi, [ebx + 0x10]
call fcn.004018e5
push 0x103
lea eax, [ebp - 0x27b]
push 0
push eax
mov byte [ebp - 0x27c], 0
call fcn.00409e50
add esp, 0xc
push dword [ebp - 0x304]
lea eax, [ebp - 0x27c]
push 0x104
push eax
push 0x415c26
push str.RName
push str.SysConfig
call edi
lea eax, [ebp - 0x27c]
lea esi, [eax + 1]
mov cl, byte [eax]
inc eax
test cl, cl
jne 0x402c11
sub eax, esi
je 0x402c50
xor ecx, ecx
lea eax, [ebp - 0x27c]
cmp byte [ebp - 0x27c], cl
je 0x402c3c
xor byte [eax], cl
inc ecx
inc eax
cmp ecx, 5
jne 0x402c37
xor ecx, ecx
cmp byte [eax], 0
jne 0x402c2c
push 0xffffffffffffffff
lea eax, [ebp - 0x27c]
push eax
lea esi, [ebx + 0x98]
call fcn.004018e5
push 0x103
lea eax, [ebp - 0x177]
push 0
push eax
mov byte [ebp - 0x178], 0
call fcn.00409e50
add esp, 0xc
push dword [ebp - 0x304]
lea eax, [ebp - 0x178]
push 0x104
push eax
push 0x415c26
push str.RName2
push str.SysConfig
call edi
lea eax, [ebp - 0x178]
lea esi, [eax + 1]
mov cl, byte [eax]
inc eax
test cl, cl
jne 0x402c99
sub eax, esi
je 0x402cd8
xor ecx, ecx
lea eax, [ebp - 0x178]
cmp byte [ebp - 0x178], cl
je 0x402cc4
xor byte [eax], cl
inc ecx
inc eax
cmp ecx, 5
jne 0x402cbf
xor ecx, ecx
cmp byte [eax], 0
jne 0x402cb4
push 0xffffffffffffffff
lea eax, [ebp - 0x178]
push eax
lea esi, [ebx + 0xdc]
call fcn.004018e5
push ebx
call fcn.004027d7
or edi, 0xffffffff
push edi
lea eax, [ebp - 0x2bc]
push str.SysConfig.ini
lea esi, [ebp - 0x2c0]
mov dword [ebp - 0x2c0], eax
mov byte [ebp - 0x2bc], 0
call fcn.004018e5
mov ecx, esi
mov esi, ebx
mov byte [ebp - 4], 7
call fcn.0040276c
lea eax, [ebp - 0x2c0]
mov byte [ebp - 4], 6
call fcn.004017fe
push edi
lea eax, [ebp - 0x2bc]
push str.clm.exe
lea esi, [ebp - 0x2c0]
mov dword [ebp - 0x2c0], eax
mov byte [ebp - 0x2bc], 0
call fcn.004018e5
mov ecx, esi
mov esi, ebx
mov byte [ebp - 4], 8
call fcn.0040276c
lea eax, [ebp - 0x2c0]
mov byte [ebp - 4], 6
call fcn.004017fe
push edi
lea eax, [ebp - 0x2bc]
push 0x415bc0
lea esi, [ebp - 0x2c0]
mov dword [ebp - 0x2c0], eax
mov byte [ebp - 0x2bc], 0
call fcn.004018e5
mov ecx, esi
mov esi, ebx
mov byte [ebp - 4], 9
call fcn.0040276c
lea eax, [ebp - 0x2c0]
mov byte [ebp - 4], 6
call fcn.004017fe
push edi
lea eax, [ebp - 0x2bc]
push str.Data_
lea esi, [ebp - 0x2c0]
mov dword [ebp - 0x2c0], eax
mov byte [ebp - 0x2bc], 0
call fcn.004018e5
mov ecx, esi
mov esi, ebx
mov byte [ebp - 4], 0xa
call fcn.0040276c
lea eax, [ebp - 0x2c0]
mov byte [ebp - 4], 6
call fcn.004017fe
lea eax, [ebp - 0x304]
mov byte [ebp - 4], 4
call fcn.004017fe
mov eax, ebx
call fcn.0040d6a6
ret 4