Function at 0x406130
Capabilities:
Create directory
Create process on windows
Delete directory
Get common file path
Read .ini file

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x42e34b
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
push ecx
mov eax, 0x1560
call fcn.004154c0
mov eax, dword [0x43c620]
push ebx
push esi
push edi
mov ebx, ecx
mov dword [ebp - 0x10], esp
mov dword [ebp - 0xd0], ebx
mov dword [ebp - 0x34], eax
xor edi, edi
mov dword [ebp - 0x1c], eax
mov dword [ebp - 4], edi
push 1
mov byte [ebp - 4], 1
call fcn.00424c05
lea ecx, [ebp - 0x30]
mov dword [ebx + 0x344], edi
call fcn.00426b45
mov eax, dword [0x43c620]
mov dword [ebp - 0x54], eax
mov dword [ebp - 0x58], eax
lea eax, [ebp - 0x490]
push 0xfa
push eax
push edi
mov byte [ebp - 4], 4
mov dword [ebp - 0x64], edi
call dword [sym.imp.KERNEL32.dll_GetModuleFileNameA]
push edi
lea ecx, [ebp - 0x490]
push 0xa040
push ecx
lea ecx, [ebp - 0x30]
call fcn.00426c57
test eax, eax
jne 0x40625e
mov edx, dword [0x43c620]
mov dword [ebp - 0x18], edx
lea eax, [ebp - 0x490]
lea ecx, [ebp - 0x18]
push eax
push 0x43a4c4
push ecx
mov byte [ebp - 4], 5
call fcn.0042187d
mov edx, dword [ebp - 0x18]
mov eax, dword [ebx + 0x1c]
push 0x10
push edx
push eax
call fcn.00402ae0
add esp, 0x18
mov byte [ebp - 4], 4
lea ecx, [ebp - 0x18]
call fcn.00425fca
lea ecx, [ebp - 0x58]
mov byte [ebp - 4], 3
call fcn.00425fca
lea ecx, [ebp - 0x54]
mov byte [ebp - 4], 2
call fcn.00425fca
lea ecx, [ebp - 0x30]
mov byte [ebp - 4], 1
call fcn.00426b9a
lea ecx, [ebp - 0x1c]
mov byte [ebp - 4], 0
call fcn.00425fca
lea ecx, [ebp - 0x34]
mov dword [ebp - 4], 0xffffffff
call fcn.00425fca
xor eax, eax
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret
push edi
push 0x3c
lea ecx, [ebp - 0x30]
call fcn.00426df9
lea ecx, [ebp - 0x5c]
push 2
push ecx
lea ecx, [ebp - 0x30]
call fcn.00426d74
movsx edx, word [ebp - 0x5c]
push edi
push edx
lea ecx, [ebp - 0x30]
mov byte [ebp - 4], 6
call fcn.00426df9
push 1
push edi
lea ecx, [ebp - 0x30]
mov dword [ebp - 4], 4
call fcn.00426df9
lea eax, [ebp - 0x394]
push 0xf8
push eax
lea ecx, [ebp - 0x30]
call fcn.00426d74
cmp dword [ebp - 0x394], 0x4550
je 0x4062db
mov ecx, dword [ebx + 0x1c]
push 0x10
push 0x43a4b0
push ecx
call fcn.00402ae0
add esp, 0xc
lea ecx, [ebp - 0x30]
call fcn.00426e72
jmp 0x40620c
movsx esi, word [ebp - 0x38e]
mov dword [ebp - 0x68], esi
lea edx, [esi + esi*4]
shl edx, 3
push edx
call fcn.0042218e
add esp, 4
cmp esi, edi
mov dword [ebp - 0x78], eax
mov dword [ebp - 0x40], edi
jle 0x4063a7
push 1
push 0
lea ecx, [ebp - 0x30]
call fcn.00426df9
mov eax, dword [ebp - 0x40]
mov ecx, dword [ebp - 0x78]
push 0x28
lea eax, [eax + eax*4]
lea edi, [ecx + eax*8]
lea ecx, [ebp - 0x30]
push edi
call fcn.00426d74
or ecx, 0xffffffff
xor eax, eax
repne scasb al, byte es:[edi]
not ecx
sub edi, ecx
lea edx, [ebp - 0xd4]
mov eax, ecx
mov esi, edi
mov edi, edx
shr ecx, 2
rep movsd dword es:[edi], dword [esi]
mov ecx, eax
and ecx, 3
rep movsb byte es:[edi], byte [esi]
mov edi, str..rsrc
lea esi, [ebp - 0xd4]
mov cl, byte [esi]
mov dl, byte [edi]
mov al, cl
cmp cl, dl
jne 0x40637b
test al, al
je 0x406377
mov dl, byte [esi + 1]
mov cl, byte [edi + 1]
mov al, dl
cmp dl, cl
jne 0x40637b
add esi, 2
add edi, 2
test al, al
jne 0x406353
xor eax, eax
jmp 0x406380
sbb eax, eax
sbb eax, 0xffffffff
test eax, eax
mov eax, dword [ebp - 0x40]
je 0x406398
mov ecx, dword [ebp - 0x68]
inc eax
cmp eax, ecx
mov dword [ebp - 0x40], eax
jl 0x406302
jmp 0x4063a5
mov ecx, dword [ebp - 0x78]
lea eax, [eax + eax*4]
mov edx, dword [ecx + eax*8 + 0x14]
mov dword [ebp - 0x64], edx
xor edi, edi
mov eax, dword [ebp - 0x64]
mov dword [ebp - 0x50], 1
cmp eax, edi
je 0x40781b
push 0
push eax
lea ecx, [ebp - 0x30]
call fcn.00426df9
lea eax, [ebp - 0x1bc]
push 0x10
push eax
lea ecx, [ebp - 0x30]
call fcn.00426d74
mov ecx, dword [ebp - 0x1b0]
mov edx, dword [ebp - 0x1ae]
lea esi, [ecx + edx]
mov dword [ebp - 0xd0], esi
and esi, 0xffff
lea eax, [esi*8]
push eax
call fcn.0042218e
mov ecx, esi
mov dword [ebp - 0x6c], eax
shl ecx, 4
push ecx
call fcn.0042218e
add esp, 8
xor edi, edi
test esi, esi
mov dword [ebp - 0x68], eax
jle 0x40642d
mov edx, dword [ebp - 0x6c]
push 8
lea ecx, [ebp - 0x30]
lea eax, [edx + edi*8]
push eax
call fcn.00426d74
inc edi
cmp edi, esi
jl 0x406417
xor eax, eax
mov dword [ebp - 0x18], 0
test esi, esi
mov dword [ebp - 0x40], eax
jle 0x4077fb
mov ecx, dword [ebp - 0x18]
test ecx, ecx
jne 0x4077fb
mov ecx, dword [ebp - 0x68]
push 0x10
shl eax, 4
lea esi, [eax + ecx]
lea ecx, [ebp - 0x30]
push esi
call fcn.00426d74
mov ax, word [esi + 0xe]
add ax, word [esi + 0xc]
movsx edx, ax
shl edx, 3
push edx
mov dword [ebp - 0x5c], eax
call fcn.0042218e
xor esi, esi
add esp, 4
cmp word [ebp - 0x5c], si
mov dword [ebp - 0xd8], eax
jle 0x4077cd
mov eax, dword [ebp - 0xd8]
push 8
lea ecx, [ebp - 0x30]
lea edi, [eax + esi*8]
push edi
call fcn.00426d74
push 1
push 0
lea ecx, [ebp - 0x30]
call fcn.00426df9
mov ecx, dword [edi + 4]
mov edx, dword [ebp - 0x64]
and ecx, 0x7fffffff
push 0
add ecx, edx
mov dword [ebp - 0x3c], eax
push ecx
lea ecx, [ebp - 0x30]
call fcn.00426df9
lea edx, [ebp - 0x234]
push 0x10
push edx
lea ecx, [ebp - 0x30]
call fcn.00426d74
lea eax, [ebp - 0x15c]
push 8
push eax
lea ecx, [ebp - 0x30]
call fcn.00426d74
mov ecx, dword [ebp - 0x158]
mov edx, dword [ebp - 0x64]
and ecx, 0x7fffffff
push 0
add ecx, edx
push ecx
lea ecx, [ebp - 0x30]
call fcn.00426df9
lea edx, [ebp - 0x1a8]
push 0x10
push edx
lea ecx, [ebp - 0x30]
call fcn.00426d74
cmp dword [edi], 0x80000000
jae 0x40652c
mov eax, dword [ebp - 0x6c]
mov ecx, dword [ebp - 0x40]
cmp word [eax + ecx*8], 3
je 0x40654c
mov edx, dword [ebp - 0x3c]
push 0
push edx
lea ecx, [ebp - 0x30]
call fcn.00426df9
movsx eax, word [ebp - 0x5c]
inc esi
cmp esi, eax
jl 0x40648c
jmp 0x4077cd
mov eax, dword [ebp - 0x19c]
test eax, eax
jne 0x406566
mov ecx, dword [ebx + 0x1c]
push 0x30
push 0x43a490
push ecx
jmp 0x4077b7
push 0
push eax
lea ecx, [ebp - 0x30]
call fcn.00426df9
mov ecx, 0xb
xor eax, eax
lea edi, [ebp - 0x144]
lea edx, [ebp - 0x144]
rep stosd dword es:[edi], eax
push 0x2e
push edx
lea ecx, [ebp - 0x30]
stosw word es:[edi], ax
call fcn.00426d74
cmp dword [ebp - 0x144], 0x58445400
jne 0x4077ac
cmp word [ebp - 0x138], 0x100
jne 0x4077ac
mov eax, dword [ebp - 0x12e]
mov ecx, dword [ebp - 0x136]
mov edi, dword [ebp - 0x122]
mov esi, dword [ebp - 0x126]
mov edx, dword [ebp - 0x12a]
mov dword [ebx + 0x55c], eax
mov eax, dword [ebp - 0x11e]
sub ecx, eax
mov eax, dword [ebp - 0x13c]
sub ecx, edi
mov edi, dword [ebp - 0x140]
sub ecx, esi
sub ecx, edx
sub ecx, eax
sub ecx, edi
sub ecx, 0x2e
mov dword [ebx + 0x14c], ecx
mov eax, dword [0x43c620]
mov dword [ebp - 0x60], eax
mov dword [ebp - 0x14], eax
mov edx, dword [ebx + 0x13c]
mov byte [ebp - 4], 9
mov eax, dword [edx - 8]
add eax, 2
push eax
call fcn.0042218e
mov edi, dword [ebx + 0x13c]
mov edx, eax
or ecx, 0xffffffff
xor eax, eax
add esp, 4
mov dword [ebp - 0x18], edx
repne scasb al, byte es:[edi]
not ecx
sub edi, ecx
mov eax, ecx
mov esi, edi
mov edi, edx
shr ecx, 2
rep movsd dword es:[edi], dword [esi]
mov ecx, eax
and ecx, 3
rep movsb byte es:[edi], byte [esi]
mov ecx, dword [ebx + 0x13c]
mov esi, dword [ecx - 8]
push 0x5c
lea ecx, [ebx + 0x13c]
lea edi, [esi - 1]
call fcn.0042151a
cmp eax, edi
jne 0x40667e
mov eax, dword [ebp - 0x18]
lea ecx, [ebx + 0x13c]
push eax
mov byte [esi + eax - 1], 0
mov esi, edi
call fcn.0042610f
jmp 0x406652
mov edx, dword [ebp - 0x18]
lea ecx, [ebp - 0x14]
push edx
call fcn.0042610f
mov eax, dword [ebp - 0x122]
mov ecx, dword [ebp - 0x11e]
mov edx, dword [ebp - 0x126]
mov esi, dword [ebp - 0x13c]
add ecx, eax
mov eax, dword [ebp - 0x12a]
add ecx, edx
mov edx, dword [ebp - 0x140]
add ecx, eax
mov eax, dword [ebp - 0x19c]
add ecx, esi
xor edi, edi
add ecx, edx
mov edx, dword [0x43e17c]
add ecx, eax
push edi
lea eax, [ecx + edx + 0x2e]
lea ecx, [ebp - 0x30]
push eax
call fcn.00426df9
lea ecx, [ebp - 0x14]
push ecx
lea ecx, [ebp - 0x4c]
call fcn.00425d3f
push 0x43aae4
lea ecx, [ebp - 0x4c]
mov byte [ebp - 4], 0xa
call fcn.00426288
mov eax, dword [ebp - 0x4c]
lea edx, [ebp - 0x5d0]
push edx
push eax
call dword [sym.imp.KERNEL32.dll_FindFirstFileA]
mov ecx, dword [0x43c620]
mov esi, 1
mov dword [ebp - 0x38], ecx
cmp eax, 0xffffffff
mov byte [ebp - 4], 0xb
je 0x4076f2
push eax
call dword [sym.imp.KERNEL32.dll_FindClose]
mov edx, dword [ebp - 0x14]
lea eax, [ebp - 0x38]
push edx
push 0x43aaac
push eax
call fcn.0042187d
add esp, 0xc
lea ecx, [ebp - 0x38]
push 0x43aa90
call fcn.00426288
mov ecx, dword [ebp - 0x38]
push edi
push 0x21
push ecx
call fcn.00429763
cmp eax, esi
jne 0x40771c
xor esi, esi
cmp dword [0x43e180], 1
jne 0x4067da
cmp dword [0x43e188], edi
jne 0x4067da
push edi
lea ecx, [ebp - 0x224]
call fcn.00402b70
lea ecx, [ebp - 0x224]
mov byte [ebp - 4], 0xc
call fcn.00422669
cmp eax, 1
jne 0x407890
mov ecx, dword [ebp - 0x1c0]
mov dword [0x43e18c], edi
cmp ecx, eax
jne 0x4067cb
mov ecx, dword [ebp - 0x1c4]
mov dword [0x43e18c], eax
cmp ecx, eax
jne 0x4067bc
mov dword [0x43e18c], 2
cmp dword [ebp - 0x1c8], eax
jne 0x4067cb
add dword [0x43e18c], 2
lea ecx, [ebp - 0x224]
mov byte [ebp - 4], 0xb
call fcn.0042233c
push 1
mov ecx, ebx
call fcn.00408670
mov edx, dword [ebx + 0x114]
mov edi, dword [sym.imp.USER32.dll_SendMessageA]
push 0x64
push 0
push 0x406
push edx
call edi
mov eax, dword [ebx + 0x148]
xor edx, edx
push 0
lea eax, [eax + eax*4]
lea eax, [eax + eax*4]
shl eax, 2
div dword [ebx + 0x14c]
push eax
mov eax, dword [ebx + 0x114]
push 0x402
push eax
call edi
test esi, esi
je 0x40685e
mov ecx, dword [ebp - 0x14]
lea edx, [ebx + 0x134]
push ecx
push 0x43aa8c
push edx
call fcn.0042187d
add esp, 0xc
mov ecx, ebx
push 0
call fcn.00424c05
push ecx
lea eax, [ebp - 0x14]
mov ecx, esp
mov dword [ebp - 0x3c], esp
push eax
call fcn.00425d3f
mov ecx, ebx
call fcn.00409560
push str.T0002_
lea ecx, [ebp - 0x10c]
push 0x43e15c
push ecx
call fcn.004261b5
push eax
lea ecx, [ebp - 0x34]
mov byte [ebp - 4], 0xd
call fcn.004260bf
lea ecx, [ebp - 0x10c]
mov byte [ebp - 4], 0xb
call fcn.00425fca
lea edx, [ebp - 0x14]
push str.T0002T_
lea eax, [ebp - 0x100]
push edx
push eax
call fcn.004261b5
push eax
lea ecx, [ebp - 0x1c]
mov byte [ebp - 4], 0xe
call fcn.004260bf
lea ecx, [ebp - 0x100]
mov byte [ebp - 4], 0xb
call fcn.00425fca
cmp dword [0x43e184], 1
jne 0x406995
mov eax, dword [0x43e18c]
cmp eax, 2
je 0x4068e1
cmp eax, 4
jne 0x406995
push 0x43aa64
lea ecx, [ebx + 0x134]
call fcn.0042610f
push 0
mov ecx, ebx
call fcn.00424c05
lea ecx, [ebp - 0x14]
push str.T0002T
lea edx, [ebp - 0xe0]
push ecx
push edx
call fcn.004261b5
push eax
lea ecx, [ebp - 0x1c]
mov byte [ebp - 4], 0xf
call fcn.004260bf
lea ecx, [ebp - 0xe0]
mov byte [ebp - 4], 0xb
call fcn.00425fca
mov eax, dword [ebp - 0x1c]
push 0
push eax
call dword [sym.imp.KERNEL32.dll_CreateDirectoryA]
lea ecx, [ebp - 0x14]
push str.T0002T_
lea edx, [ebp - 0xdc]
push ecx
push edx
call fcn.004261b5
push eax
lea ecx, [ebp - 0x1c]
mov byte [ebp - 4], 0x10
call fcn.004260bf
lea ecx, [ebp - 0xdc]
mov byte [ebp - 4], 0xb
call fcn.00425fca
push ecx
lea eax, [ebp - 0x1c]
mov ecx, esp
mov dword [ebp - 0x3c], esp
push eax
call fcn.00425d3f
push ecx
lea edx, [ebp - 0x34]
mov ecx, esp
mov dword [ebp - 0x18], esp
push edx
mov byte [ebp - 4], 0x11
call fcn.00425d3f
mov ecx, ebx
mov byte [ebp - 4], 0xb
call fcn.00409900
mov eax, dword [0x43e18c]
test eax, eax
jle 0x4069e8
push 0x43aa48
lea ecx, [ebx + 0x134]
call fcn.0042610f
push 0
mov ecx, ebx
call fcn.00424c05
mov ecx, ebx
call fcn.00409de0
mov eax, dword [0x43e18c]
cmp eax, 3
je 0x4069cd
cmp eax, 4
jne 0x4069e8
mov eax, dword [0x43e15c]
push eax
call fcn.00404bd0
mov ecx, dword [0x43e15c]
add esp, 4
push ecx
call dword [sym.imp.KERNEL32.dll_RemoveDirectoryA]
lea edx, [ebp - 0x14]
push str.T0002T_
lea eax, [ebp - 0x108]
push edx
push eax
call fcn.004261b5
push eax
lea ecx, [ebp - 0x34]
mov byte [ebp - 4], 0x12
call fcn.004260bf
lea ecx, [ebp - 0x108]
mov byte [ebp - 4], 0xb
call fcn.00425fca
lea ecx, [ebp - 0x14]
push str.T0002_
lea edx, [ebp - 0x110]
push ecx
push edx
call fcn.004261b5
push eax
lea ecx, [ebp - 0x1c]
mov byte [ebp - 4], 0x13
call fcn.004260bf
lea ecx, [ebp - 0x110]
mov byte [ebp - 4], 0xb
call fcn.00425fca
lea ecx, [ebp - 0x154]
call fcn.00426b45
lea edi, [ebx + 0x1a8]
lea eax, [ebp - 0x14]
push eax
mov ecx, edi
mov byte [ebp - 4], 0x14
call fcn.004260bf
push str.uninstall.cfg
mov ecx, edi
call fcn.00426288
mov eax, dword [edi]
push 0
push 0x9001
push eax
lea ecx, [ebp - 0x154]
call fcn.00426c57
test eax, eax
je 0x406a9a
lea ecx, [ebp - 0x154]
call fcn.00426e72
mov ecx, dword [0x43c620]
mov dword [ebp - 0x74], ecx
mov eax, dword [ebx + 0x19c]
xor esi, esi
test eax, eax
mov byte [ebp - 4], 0x15
jle 0x406aea
push esi
lea edx, [ebp - 0x74]
push str.FOLDER_02d
push edx
call fcn.0042187d
mov eax, dword [edi]
mov ecx, dword [ebx + esi*4 + 0x1b0]
add esp, 0xc
push eax
mov eax, dword [ebp - 0x74]
push ecx
push eax
push str.FOLDER
call dword [sym.imp.KERNEL32.dll_WritePrivateProfileStringA]
mov eax, dword [ebx + 0x19c]
inc esi
cmp esi, eax
jl 0x406ab3
lea ecx, [ebx + 0x350]
push 0x104
push ecx
call dword [sym.imp.KERNEL32.dll_GetWindowsDirectoryA]
lea edx, [ebx + 0x454]
push 0x104
push edx
call dword [sym.imp.KERNEL32.dll_GetSystemDirectoryA]
push ecx
lea eax, [ebp - 0x14]
mov ecx, esp
mov dword [ebp - 0x3c], esp
push eax
mov dword [ebx + 0x558], 1
call fcn.00425d3f
mov ecx, dword [ebp - 0x132]
mov edx, dword [ebp - 0x130]
push ecx
lea eax, [ebp - 0x30]
push edx
push eax
mov ecx, ebx
call fcn.00407910
test eax, eax
je 0x407758
lea ecx, [ebp - 0xcc]
push 0x50
push ecx
lea ecx, [ebp - 0x30]
call fcn.00426d74
mov eax, dword [ebp - 0xcc]
test eax, eax
jle 0x406ba2
inc eax
push eax
call fcn.0042218e
mov edx, dword [ebp - 0xcc]
add esp, 4
mov esi, eax
lea ecx, [ebp - 0x30]
push edx
push esi
call fcn.00426d74
mov eax, dword [ebp - 0xcc]
push esi
lea ecx, [ebx + 0x150]
mov byte [esi + eax], 0
call fcn.0042610f
test esi, esi
je 0x406ba2
push esi
call fcn.004221b7
add esp, 4
mov eax, dword [ebp - 0xc8]
test eax, eax
jle 0x406beb
inc eax
push eax
call fcn.0042218e
mov ecx, dword [ebp - 0xc8]
add esp, 4
mov esi, eax
push ecx
push esi
lea ecx, [ebp - 0x30]
call fcn.00426d74
mov edx, dword [ebp - 0xc8]
push esi
lea ecx, [ebx + 0x154]
mov byte [esi + edx], 0
call fcn.0042610f
test esi, esi
je 0x406beb
push esi
call fcn.004221b7
add esp, 4
mov eax, dword [ebp - 0xc4]
test eax, eax
jle 0x406c34
inc eax
push eax
call fcn.0042218e
add esp, 4
mov esi, eax
mov eax, dword [ebp - 0xc4]
lea ecx, [ebp - 0x30]
push eax
push esi
call fcn.00426d74
mov ecx, dword [ebp - 0xc4]
push esi
mov byte [esi + ecx], 0
lea ecx, [ebx + 0x158]
call fcn.0042610f
test esi, esi
je 0x406c34
push esi
call fcn.004221b7
add esp, 4
mov eax, dword [ebp - 0xc0]
test eax, eax
jle 0x406c7d
inc eax
push eax
call fcn.0042218e
mov edx, dword [ebp - 0xc0]
add esp, 4
mov esi, eax
lea ecx, [ebp - 0x30]
push edx
push esi
call fcn.00426d74
mov eax, dword [ebp - 0xc0]
push esi
lea ecx, [ebx + 0x15c]
mov byte [esi + eax], 0
call fcn.0042610f
test esi, esi
je 0x406c7d
push esi
call fcn.004221b7
add esp, 4
mov eax, dword [ebp - 0xbc]
test eax, eax
jle 0x406cc6
inc eax
push eax
call fcn.0042218e
mov ecx, dword [ebp - 0xbc]
add esp, 4
mov esi, eax
push ecx
push esi
lea ecx, [ebp - 0x30]
call fcn.00426d74
mov edx, dword [ebp - 0xbc]
push esi
lea ecx, [ebx + 0x160]
mov byte [esi + edx], 0
call fcn.0042610f
test esi, esi
je 0x406cc6
push esi
call fcn.004221b7
add esp, 4
mov eax, dword [ebp - 0xb8]
test eax, eax
jle 0x406d0f
inc eax
push eax
call fcn.0042218e
add esp, 4
mov esi, eax
mov eax, dword [ebp - 0xb8]
lea ecx, [ebp - 0x30]
push eax
push esi
call fcn.00426d74
mov ecx, dword [ebp - 0xb8]
push esi
mov byte [esi + ecx], 0
lea ecx, [ebx + 0x164]
call fcn.0042610f
test esi, esi
je 0x406d0f
push esi
call fcn.004221b7
add esp, 4
mov eax, dword [ebp - 0xb4]
test eax, eax
jle 0x406d58
inc eax
push eax
call fcn.0042218e
mov edx, dword [ebp - 0xb4]
add esp, 4
mov esi, eax
lea ecx, [ebp - 0x30]
push edx
push esi
call fcn.00426d74
mov eax, dword [ebp - 0xb4]
push esi
lea ecx, [ebx + 0x168]
mov byte [esi + eax], 0
call fcn.0042610f
test esi, esi
je 0x406d58
push esi
call fcn.004221b7
add esp, 4
mov eax, dword [ebp - 0xb0]
test eax, eax
jle 0x406da1
inc eax
push eax
call fcn.0042218e
mov ecx, dword [ebp - 0xb0]
add esp, 4
mov esi, eax
push ecx
push esi
lea ecx, [ebp - 0x30]
call fcn.00426d74
mov edx, dword [ebp - 0xb0]
push esi
lea ecx, [ebx + 0x16c]
mov byte [esi + edx], 0
call fcn.0042610f
test esi, esi
je 0x406da1
push esi
call fcn.004221b7
add esp, 4
mov eax, dword [ebp - 0xac]
test eax, eax
jle 0x406dea
inc eax
push eax
call fcn.0042218e
add esp, 4
mov esi, eax
mov eax, dword [ebp - 0xac]
lea ecx, [ebp - 0x30]
push eax
push esi
call fcn.00426d74
mov ecx, dword [ebp - 0xac]
push esi
mov byte [esi + ecx], 0
lea ecx, [ebx + 0x170]
call fcn.0042610f
test esi, esi
je 0x406dea
push esi
call fcn.004221b7
add esp, 4
mov eax, dword [ebp - 0xa8]
test eax, eax
jle 0x406e33
inc eax
push eax
call fcn.0042218e
mov edx, dword [ebp - 0xa8]
add esp, 4
mov esi, eax
lea ecx, [ebp - 0x30]
push edx
push esi
call fcn.00426d74
mov eax, dword [ebp - 0xa8]
push esi
lea ecx, [ebx + 0x174]
mov byte [esi + eax], 0
call fcn.0042610f
test esi, esi
je 0x406e33
push esi
call fcn.004221b7
add esp, 4
mov eax, dword [ebp - 0xa4]
test eax, eax
jle 0x406e7c
inc eax
push eax
call fcn.0042218e
mov ecx, dword [ebp - 0xa4]
add esp, 4
mov esi, eax
push ecx
push esi
lea ecx, [ebp - 0x30]
call fcn.00426d74
mov edx, dword [ebp - 0xa4]
push esi
lea ecx, [ebx + 0x178]
mov byte [esi + edx], 0
call fcn.0042610f
test esi, esi
je 0x406e7c
push esi
call fcn.004221b7
add esp, 4
mov eax, dword [ebp - 0xa0]
test eax, eax
jle 0x406ec5
inc eax
push eax
call fcn.0042218e
add esp, 4
mov esi, eax
mov eax, dword [ebp - 0xa0]
lea ecx, [ebp - 0x30]
push eax
push esi
call fcn.00426d74
mov ecx, dword [ebp - 0xa0]
push esi
mov byte [esi + ecx], 0
lea ecx, [ebx + 0x17c]
call fcn.0042610f
test esi, esi
je 0x406ec5
push esi
call fcn.004221b7
add esp, 4
mov eax, dword [ebp - 0x9c]
test eax, eax
jle 0x406f0e
inc eax
push eax
call fcn.0042218e
mov edx, dword [ebp - 0x9c]
add esp, 4
mov esi, eax
lea ecx, [ebp - 0x30]
push edx
push esi
call fcn.00426d74
mov eax, dword [ebp - 0x9c]
push esi
lea ecx, [ebx + 0x180]
mov byte [esi + eax], 0
call fcn.0042610f
test esi, esi
je 0x406f0e
push esi
call fcn.004221b7
add esp, 4
mov eax, dword [ebp - 0x98]
test eax, eax
jle 0x406f57
inc eax
push eax
call fcn.0042218e
mov ecx, dword [ebp - 0x98]
add esp, 4
mov esi, eax
push ecx
push esi
lea ecx, [ebp - 0x30]
call fcn.00426d74
mov edx, dword [ebp - 0x98]
push esi
lea ecx, [ebx + 0x184]
mov byte [esi + edx], 0
call fcn.0042610f
test esi, esi
je 0x406f57
push esi
call fcn.004221b7
add esp, 4
mov eax, dword [ebp - 0x94]
test eax, eax
jle 0x406fa0
inc eax
push eax
call fcn.0042218e
add esp, 4
mov esi, eax
mov eax, dword [ebp - 0x94]
lea ecx, [ebp - 0x30]
push eax
push esi
call fcn.00426d74
mov ecx, dword [ebp - 0x94]
push esi
mov byte [esi + ecx], 0
lea ecx, [ebx + 0x188]
call fcn.0042610f
test esi, esi
je 0x406fa0
push esi
call fcn.004221b7
add esp, 4
mov eax, dword [ebp - 0x90]
test eax, eax
jle 0x406fe9
inc eax
push eax
call fcn.0042218e
mov edx, dword [ebp - 0x90]
add esp, 4
mov esi, eax
lea ecx, [ebp - 0x30]
push edx
push esi
call fcn.00426d74
mov eax, dword [ebp - 0x90]
push esi
lea ecx, [ebx + 0x18c]
mov byte [esi + eax], 0
call fcn.0042610f
test esi, esi
je 0x406fe9
push esi
call fcn.004221b7
add esp, 4
mov eax, dword [ebp - 0x8c]
test eax, eax
jle 0x407032
inc eax
push eax
call fcn.0042218e
mov ecx, dword [ebp - 0x8c]
add esp, 4
mov esi, eax
push ecx
push esi
lea ecx, [ebp - 0x30]
call fcn.00426d74
mov edx, dword [ebp - 0x8c]
push esi
lea ecx, [ebx + 0x190]
mov byte [esi + edx], 0
call fcn.0042610f
test esi, esi
je 0x407032
push esi
call fcn.004221b7
add esp, 4
mov eax, dword [ebp - 0x88]
test eax, eax
jle 0x40707b
inc eax
push eax
call fcn.0042218e
add esp, 4
mov esi, eax
mov eax, dword [ebp - 0x88]
lea ecx, [ebp - 0x30]
push eax
push esi
call fcn.00426d74
mov ecx, dword [ebp - 0x88]
push esi
mov byte [esi + ecx], 0
lea ecx, [ebx + 0x194]
call fcn.0042610f
test esi, esi
je 0x40707b
push esi
call fcn.004221b7
add esp, 4
mov eax, dword [ebp - 0x84]
test eax, eax
jle 0x4070c4
inc eax
push eax
call fcn.0042218e
mov edx, dword [ebp - 0x84]
add esp, 4
mov esi, eax
lea ecx, [ebp - 0x30]
push edx
push esi
call fcn.00426d74
mov eax, dword [ebp - 0x84]
push esi
lea ecx, [ebx + 0x198]
mov byte [esi + eax], 0
call fcn.0042610f
test esi, esi
je 0x4070c4
push esi
call fcn.004221b7
add esp, 4
mov eax, dword [ebp - 0x80]
test eax, eax
jle 0x407107
inc eax
push eax
call fcn.0042218e
mov ecx, dword [ebp - 0x80]
add esp, 4
mov esi, eax
push ecx
push esi
lea ecx, [ebp - 0x30]
call fcn.00426d74
mov edx, dword [ebp - 0x80]
push esi
mov byte [esi + edx], 0
call fcn.004154a7
add esp, 4
mov dword [ebx + 0x560], eax
test esi, esi
je 0x407107
push esi
call fcn.004221b7
add esp, 4
push ecx
lea eax, [ebp - 0x14]
mov ecx, esp
mov dword [ebp - 0x3c], esp
push eax
call fcn.00425d3f
mov ecx, ebx
call fcn.00408720
mov ecx, dword [0x43c620]
mov dword [ebp - 0x48], ecx
mov edx, dword [ebx + 0x1a0]
lea eax, [ebp - 0x48]
push edx
push 0x43a59c
push eax
mov byte [ebp - 4], 0x16
call fcn.0042187d
mov eax, dword [edi]
mov ecx, dword [ebx + 0x150]
mov esi, dword [sym.imp.KERNEL32.dll_WritePrivateProfileStringA]
add esp, 0xc
push eax
push ecx
push str.TITLE
push str.HEADER
call esi
mov eax, dword [edi]
mov ecx, dword [ebp - 0x48]
push eax
push ecx
push str.FILENUM
push str.FILE
call esi
mov edx, dword [ebx + 0x19c]
lea eax, [ebp - 0x48]
push edx
push 0x43a59c
push eax
call fcn.0042187d
mov eax, dword [edi]
mov ecx, dword [ebp - 0x48]
add esp, 0xc
push eax
push ecx
push str.FOLDERNUM
push str.FOLDER
call esi
mov edx, dword [ebx + 0x1a4]
lea eax, [ebp - 0x48]
push edx
push 0x43a59c
push eax
call fcn.0042187d
mov edi, dword [edi]
mov ecx, dword [ebp - 0x48]
add esp, 0xc
push edi
push ecx
push str.OCXNUM
push 0x43a9ec
call esi
mov edx, dword [ebx + 0x114]
push 0
push 0x64
push 0x402
push edx
call dword [sym.imp.USER32.dll_SendMessageA]
cmp dword [0x43e180], 1
jne 0x4072a3
cmp dword [0x43e184], 1
jne 0x4072a3
mov eax, dword [0x43e18c]
cmp eax, 2
je 0x40720a
cmp eax, 4
jne 0x4072a3
mov eax, dword [ebp - 0x1c]
push 0
push eax
call dword [sym.imp.KERNEL32.dll_CreateDirectoryA]
push 0x43a9d8
lea ecx, [ebx + 0x134]
call fcn.0042610f
push 0
mov ecx, ebx
call fcn.00424c05
push ecx
lea edx, [ebp - 0x1c]
mov ecx, esp
mov dword [ebp - 0x3c], esp
push edx
call fcn.00425d3f
push ecx
lea eax, [ebp - 0x34]
mov ecx, esp
mov dword [ebp - 0x18], esp
push eax
mov byte [ebp - 4], 0x17
call fcn.00425d3f
mov ecx, ebx
mov byte [ebp - 4], 0x16
call fcn.00409900
lea ecx, [ebp - 0x14]
push str.T0002T
lea edx, [ebp - 0xec]
push ecx
push edx
call fcn.004261b5
push eax
lea ecx, [ebp - 0x34]
mov byte [ebp - 4], 0x18
call fcn.004260bf
lea ecx, [ebp - 0xec]
mov byte [ebp - 4], 0x16
call fcn.00425fca
mov eax, dword [ebp - 0x34]
push eax
call fcn.00404bd0
mov ecx, dword [ebp - 0x34]
add esp, 4
push ecx
call dword [sym.imp.KERNEL32.dll_RemoveDirectoryA]
push 0x43a9c4
lea ecx, [ebx + 0x134]
call fcn.0042610f
push 0
mov ecx, ebx
call fcn.00424c05
mov eax, dword [0x43c620]
mov dword [ebp - 0x20], eax
mov dword [ebp - 0x7c], eax
lea edx, [ebp - 0x14]
push str.connect.cfg
lea eax, [ebp - 0x104]
push edx
push eax
mov byte [ebp - 4], 0x1a
call fcn.004261b5
push eax
lea ecx, [ebp - 0x20]
mov byte [ebp - 4], 0x1b
call fcn.004260bf
lea ecx, [ebp - 0x104]
mov byte [ebp - 4], 0x1a
call fcn.00425fca
mov ecx, dword [0x43c620]
mov dword [ebp - 0x44], ecx
mov edx, dword [ebp - 0x20]
push edx
push 0
push str.EXENUM
push str.SHELLEXE
call dword [sym.imp.KERNEL32.dll_GetPrivateProfileIntA]
mov edx, eax
mov ecx, 0x1f4
xor eax, eax
lea edi, [ebp - 0x1570]
rep stosd dword es:[edi], eax
mov ecx, 0x1f4
lea edi, [ebp - 0xda0]
rep stosd dword es:[edi], eax
mov eax, dword [0x43c620]
mov dword [ebp - 0x18], edx
mov dword [ebp - 0x70], eax
xor edi, edi
mov byte [ebp - 4], 0x1d
test edx, edx
jle 0x4073c7
push edi
lea ecx, [ebp - 0x44]
push str.EXENAME_02d
push ecx
call fcn.0042187d
mov edx, dword [ebp - 0x20]
lea eax, [edi + edi*4]
mov ecx, dword [ebp - 0x44]
add esp, 0xc
lea esi, [eax + eax*4]
shl esi, 2
push edx
push 0x62
lea eax, [ebp + esi - 0x1570]
push eax
push 0x43e158
push ecx
push str.SHELLEXE
call dword [sym.imp.KERNEL32.dll_GetPrivateProfileStringA]
push edi
lea edx, [ebp - 0x44]
push str.EXEDESC_02d
push edx
call fcn.0042187d
mov eax, dword [ebp - 0x20]
mov edx, dword [ebp - 0x44]
add esp, 0xc
lea ecx, [ebp + esi - 0xda0]
push eax
push 0x62
push ecx
push 0x43e158
push edx
push str.SHELLEXE
call dword [sym.imp.KERNEL32.dll_GetPrivateProfileStringA]
mov eax, dword [ebp - 0x18]
inc edi
cmp edi, eax
jl 0x40734e
lea eax, [ebp - 0x14]
push 0x43a588
lea ecx, [ebp - 0xf4]
push eax
push ecx
call fcn.004261b5
push eax
lea ecx, [ebp - 0x20]
mov byte [ebp - 4], 0x1e
call fcn.004260bf
lea ecx, [ebp - 0xf4]
mov byte [ebp - 4], 0x1d
call fcn.00425fca
mov eax, dword [ebp - 0x18]
xor edi, edi
test eax, eax
mov dword [ebp - 0x3c], edi
jle 0x407539
lea esi, [edi + edi*4]
lea eax, [ebp - 0x70]
lea esi, [esi + esi*4]
shl esi, 2
lea edx, [ebp + esi - 0xda0]
push edx
push 0x43a940
push eax
call fcn.0042187d
mov ecx, dword [ebp - 0x70]
mov edx, dword [ebx + 0x1c]
push 0x24
push ecx
push edx
call fcn.00402ae0
add esp, 0x18
cmp eax, 6
jne 0x40752a
mov ecx, 0xf
xor eax, eax
lea edi, [ebp - 0x198]
push 0x43a588
rep stosd dword es:[edi], eax
mov dword [ebp - 0x190], eax
mov dword [ebp - 0x18c], eax
lea eax, [ebp - 0x14]
lea ecx, [ebp - 0xfc]
push eax
push ecx
mov dword [ebp - 0x198], 0x3c
mov dword [ebp - 0x194], 0x40
call fcn.004261b5
lea edx, [ebp + esi - 0x1570]
mov byte [ebp - 4], 0x1f
push edx
push eax
lea eax, [ebp - 0x114]
push eax
call fcn.004261b5
push eax
lea ecx, [ebp - 0x44]
mov byte [ebp - 4], 0x20
call fcn.004260bf
lea ecx, [ebp - 0x114]
mov byte [ebp - 4], 0x1f
call fcn.00425fca
lea ecx, [ebp - 0xfc]
mov byte [ebp - 4], 0x1d
call fcn.00425fca
push 0
lea ecx, [ebp - 0x44]
call fcn.004262c7
mov ecx, dword [ebp - 0x20]
lea edx, [ebp - 0x198]
push edx
mov dword [ebp - 0x188], eax
mov dword [ebp - 0x184], 0x43e158
mov dword [ebp - 0x180], ecx
mov dword [ebp - 0x17c], 5
mov dword [ebp - 0x178], 0
call dword [sym.imp.SHELL32.dll_ShellExecuteExA]
mov eax, dword [ebp - 0x160]
push 0xffffffffffffffff
push eax
call dword [sym.imp.KERNEL32.dll_WaitForSingleObject]
push 0xffffffffffffffff
lea ecx, [ebp - 0x44]
call fcn.00426316
mov edi, dword [ebp - 0x3c]
mov eax, dword [ebp - 0x18]
inc edi
cmp edi, eax
mov dword [ebp - 0x3c], edi
jl 0x407408
lea ecx, [ebp - 0x14]
push str.connect.cfg
lea edx, [ebp - 0xe4]
push ecx
push edx
call fcn.004261b5
push eax
lea ecx, [ebp - 0x20]
mov byte [ebp - 4], 0x21
call fcn.004260bf
lea ecx, [ebp - 0xe4]
mov byte [ebp - 4], 0x1d
call fcn.00425fca
mov eax, dword [ebp - 0x20]
mov esi, dword [sym.imp.KERNEL32.dll_GetPrivateProfileIntA]
push eax
push 1
push str.Warn
push str.Other
call esi
cmp dword [ebx + 0x344], 3
jne 0x40759d
test eax, eax
je 0x40759d
push 0
push 0
push 0x43a904
call fcn.00429763
mov ecx, dword [ebx + 0x1c]
push 0x40
push 0x43a8f8
push ecx
call fcn.00402ae0
mov edx, dword [ebp - 0x20]
add esp, 0xc
push edx
push 0
push str.NeedPlugExe
push str.Other
call esi
test eax, eax
je 0x40769b
mov ecx, 0x19
xor eax, eax
lea edi, [ebp - 0x29c]
rep stosd dword es:[edi], eax
stosb byte es:[edi], al
mov eax, dword [ebp - 0x20]
lea ecx, [ebp - 0x29c]
push eax
push 0x64
push ecx
push 0x43e158
push str.PlugExePath
push str.Other
call dword [sym.imp.KERNEL32.dll_GetPrivateProfileStringA]
lea edx, [ebp - 0x14]
push 0x43a588
lea eax, [ebp - 0xe8]
push edx
push eax
call fcn.004261b5
push eax
lea ecx, [ebp - 0x20]
mov byte [ebp - 4], 0x22
call fcn.004260bf
lea ecx, [ebp - 0xe8]
mov byte [ebp - 4], 0x1d
call fcn.00425fca
lea ecx, [ebp - 0x14]
push 0x43a588
lea edx, [ebp - 0xf8]
push ecx
push edx
call fcn.004261b5
lea ecx, [ebp - 0x29c]
lea edx, [ebp - 0xf0]
push ecx
push eax
push edx
mov byte [ebp - 4], 0x23
call fcn.004261b5
push eax
lea ecx, [ebp - 0x7c]
mov byte [ebp - 4], 0x24
call fcn.004260bf
lea ecx, [ebp - 0xf0]
mov byte [ebp - 4], 0x23
call fcn.00425fca
lea ecx, [ebp - 0xf8]
mov byte [ebp - 4], 0x1d
call fcn.00425fca
mov eax, dword [ebp - 0x20]
mov ecx, dword [ebp - 0x7c]
push 5
push eax
push 0
push ecx
push 0
push 0
call dword [sym.imp.SHELL32.dll_ShellExecuteA]
push 0x43e158
lea ecx, [ebx + 0x134]
call fcn.0042610f
push 0
mov ecx, ebx
call fcn.00424c05
lea ecx, [ebp - 0x70]
mov byte [ebp - 4], 0x1c
call fcn.00425fca
lea ecx, [ebp - 0x44]
mov byte [ebp - 4], 0x1a
call fcn.00425fca
lea ecx, [ebp - 0x7c]
mov byte [ebp - 4], 0x19
call fcn.00425fca
lea ecx, [ebp - 0x20]
mov byte [ebp - 4], 0x16
call fcn.00425fca
lea ecx, [ebp - 0x48]
mov byte [ebp - 4], 0x15
call fcn.00425fca
jmp 0x40775f
mov edx, dword [ebp - 0x14]
lea eax, [ebp - 0x38]
push edx
push 0x43a8c4
push eax
call fcn.0042187d
mov ecx, dword [ebp - 0x38]
add esp, 0xc
push edi
push 0x21
push ecx
call fcn.00429763
cmp eax, 2
jne 0x40675e
lea ecx, [ebp - 0x38]
mov dword [ebp - 0x50], edi
mov dword [ebp - 0x18], 1
mov byte [ebp - 4], 0xa
call fcn.00425fca
lea ecx, [ebp - 0x4c]
mov byte [ebp - 4], 9
call fcn.00425fca
lea ecx, [ebp - 0x14]
mov byte [ebp - 4], 8
call fcn.00425fca
lea ecx, [ebp - 0x60]
mov byte [ebp - 4], 4
call fcn.00425fca
jmp 0x4077cd
mov dword [ebp - 0x50], 0
lea ecx, [ebp - 0x74]
mov byte [ebp - 4], 0x14
call fcn.00425fca
lea ecx, [ebp - 0x154]
mov byte [ebp - 4], 0xb
call fcn.00426b9a
lea ecx, [ebp - 0x38]
mov byte [ebp - 4], 0xa
call fcn.00425fca
lea ecx, [ebp - 0x4c]
mov byte [ebp - 4], 9
call fcn.00425fca
lea ecx, [ebp - 0x14]
mov byte [ebp - 4], 8
call fcn.00425fca
lea ecx, [ebp - 0x60]
mov byte [ebp - 4], 4
call fcn.00425fca
jmp 0x4077c6
mov edx, dword [ebx + 0x1c]
push 0x10
push 0x43a468
push edx
call fcn.00402ae0
add esp, 0xc
mov dword [ebp - 0x50], 0
mov dword [ebp - 0x18], 1
mov eax, dword [ebp - 0xd8]
test eax, eax
je 0x4077e0
push eax
call fcn.004221b7
add esp, 4
mov eax, dword [ebp - 0x40]
mov ecx, dword [ebp - 0xd0]
inc eax
and ecx, 0xffff
cmp eax, ecx
mov dword [ebp - 0x40], eax
jl 0x406441
mov eax, dword [ebp - 0x6c]
test eax, eax
je 0x40780b
push eax
call fcn.004221b7
add esp, 4
mov eax, dword [ebp - 0x68]
test eax, eax
je 0x40781b
push eax
call fcn.004221b7
add esp, 4
mov eax, dword [ebp - 0x78]
test eax, eax
je 0x40782b
push eax
call fcn.004221b7
add esp, 4
lea ecx, [ebp - 0x30]
call fcn.00426e72
lea ecx, [ebp - 0x58]
mov dword [ebx + 0x14c], 0
mov byte [ebp - 4], 3
call fcn.00425fca
lea ecx, [ebp - 0x54]
mov byte [ebp - 4], 2
call fcn.00425fca
lea ecx, [ebp - 0x30]
mov byte [ebp - 4], 1
call fcn.00426b9a
lea ecx, [ebp - 0x1c]
mov byte [ebp - 4], 0
call fcn.00425fca
lea ecx, [ebp - 0x34]
mov dword [ebp - 4], 0xffffffff
call fcn.00425fca
mov ecx, dword [ebp - 0xc]
mov eax, dword [ebp - 0x50]
pop edi
pop esi
mov dword fs:[0], ecx
pop ebx
mov esp, ebp
pop ebp
ret
mov ecx, ebx
call fcn.00422953
lea ecx, [ebp - 0x224]
mov byte [ebp - 4], 0xb
call fcn.0042233c
lea ecx, [ebp - 0x38]
mov byte [ebp - 4], 0xa
call fcn.00425fca
lea ecx, [ebp - 0x4c]
mov byte [ebp - 4], 9
call fcn.00425fca
lea ecx, [ebp - 0x14]
mov byte [ebp - 4], 8
call fcn.00425fca
mov byte [ebp - 4], 4
lea ecx, [ebp - 0x60]
jmp 0x406207