Function at 0x4115c0
Capabilities:
Delete file
Read .ini file
Terminate process

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x4fd422
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
sub esp, 0x200
push esi
push edi
push ecx
lea edi, [ebp - 0x20c]
mov ecx, 0x80
mov eax, 0xcccccccc
rep stosd dword es:[edi], eax
pop ecx
mov eax, dword [0x55370c]
mov dword [ebp - 0x10], eax
mov dword [ebp - 0x14], ecx
mov ecx, dword [ebp - 0x14]
call fcn.0042c4a0
mov dword [ebp - 4], 0
mov eax, dword [ebp - 0x14]
mov dword [eax], 0x512cd0
mov ecx, dword [ebp - 0x14]
add ecx, 0xd4
call fcn.004a1660
mov byte [ebp - 4], 1
mov ecx, dword [ebp - 0x14]
add ecx, 0x268
call fcn.004a1660
mov byte [ebp - 4], 2
mov ecx, dword [ebp - 0x14]
add ecx, 0x3fc
call fcn.004a1660
mov byte [ebp - 4], 3
mov ecx, dword [ebp - 0x14]
add ecx, 0x590
call fcn.004a1660
mov byte [ebp - 4], 4
mov ecx, dword [ebp - 0x14]
add ecx, 0x724
call fcn.004a1660
mov byte [ebp - 4], 5
mov ecx, dword [ebp - 0x14]
add ecx, 0x8b8
call fcn.004a1660
mov byte [ebp - 4], 6
mov ecx, dword [ebp - 0x14]
add ecx, 0xa4c
call fcn.004a1660
mov byte [ebp - 4], 7
mov ecx, dword [ebp - 0x14]
add ecx, 0xbe0
call fcn.004a1660
mov byte [ebp - 4], 8
mov ecx, dword [ebp - 0x14]
add ecx, 0xd74
call fcn.004a1660
mov byte [ebp - 4], 9
mov ecx, dword [ebp - 0x14]
add ecx, 0xf08
call fcn.004a1660
mov byte [ebp - 4], 0xa
mov ecx, dword [ebp - 0x14]
add ecx, 0x109c
call fcn.0049ddf0
mov byte [ebp - 4], 0xb
mov ecx, dword [ebp - 0x14]
add ecx, 0x10f4
call fcn.00417640
mov byte [ebp - 4], 0xc
mov ecx, dword [ebp - 0x14]
add ecx, 0x1108
call fcn.00449b60
mov byte [ebp - 4], 0xd
mov ecx, dword [ebp - 0x14]
add ecx, 0x140c
call fcn.0041cdb0
mov byte [ebp - 4], 0xe
mov ecx, dword [ebp - 0x14]
add ecx, 0x15a4
call fcn.0042ef70
mov byte [ebp - 4], 0xf
mov ecx, dword [ebp - 0x14]
add ecx, 0x172c
call fcn.004aad70
mov byte [ebp - 4], 0x10
mov ecx, dword [ebp - 0x14]
add ecx, 0x1790
call fcn.0040de40
mov byte [ebp - 4], 0x11
mov ecx, dword [ebp - 0x14]
add ecx, 0x17a0
call fcn.004a04c0
mov byte [ebp - 4], 0x12
mov ecx, dword [ebp - 0x14]
add ecx, 0x18c0
call fcn.004a04c0
mov byte [ebp - 4], 0x13
mov ecx, dword [ebp - 0x14]
add ecx, 0x19e8
call fcn.0046f1b0
mov byte [ebp - 4], 0x14
mov ecx, dword [ebp - 0x14]
add ecx, 0x1d78
call fcn.0040dbf0
mov byte [ebp - 4], 0x15
mov ecx, dword [ebp - 0x14]
add ecx, 0x1d80
call fcn.0040de40
mov byte [ebp - 4], 0x16
mov esi, esp
push 0x512488
push 0x512490
call dword [sym.imp.USER32.dll_FindWindowA]
cmp esi, esp
call fcn.004f90e1
mov dword [ebp - 0x18], eax
mov esi, esp
lea ecx, [ebp - 0x20]
push ecx
mov edx, dword [ebp - 0x18]
push edx
call dword [sym.imp.USER32.dll_GetWindowThreadProcessId]
cmp esi, esp
call fcn.004f90e1
mov dword [ebp - 0x28], eax
mov esi, esp
mov eax, dword [ebp - 0x20]
push eax
push 0
push 0x1f0fff
call dword [sym.imp.KERNEL32.dll_OpenProcess]
cmp esi, esp
call fcn.004f90e1
mov dword [ebp - 0x2c], eax
cmp dword [ebp - 0x18], 0
je 0x411811
mov esi, esp
push 0
mov ecx, dword [ebp - 0x2c]
push ecx
call dword [sym.imp.KERNEL32.dll_TerminateProcess]
cmp esi, esp
call fcn.004f90e1
mov edx, dword [ebp - 0x14]
mov dword [edx + 0x178c], 1
mov eax, dword [ebp - 0x14]
mov dword [eax + 0x1798], 0
mov ecx, dword [ebp - 0x14]
mov dword [ecx + 0x179c], 0
lea edx, [ebp - 0x34]
push edx
call fcn.004d30c0
add esp, 4
mov byte [ebp - 4], 0x17
mov esi, esp
push str.exe_name.ini
lea ecx, [ebp - 0x34]
call dword [sym.imp.MFC71.DLL_ATL::CStringT::operator_2]
cmp esi, esp
call fcn.004f90e1
mov dword [ebp - 0x148], 0x104
mov esi, esp
push 0x5124a5
lea ecx, [ebp - 0x150]
call dword [sym.imp.MFC71.DLL_ATL::CStringT::CStringT_4]
cmp esi, esp
call fcn.004f90e1
mov byte [ebp - 4], 0x18
mov esi, esp
push 0
lea ecx, [ebp - 0x34]
call dword [sym.imp.MFC71.DLL_ATL::CSimpleStringT::GetBuffer_1]
cmp esi, esp
call fcn.004f90e1
push eax
call fcn.004d3490
add esp, 4
test eax, eax
je 0x411d05
mov esi, esp
lea ecx, [ebp - 0x34]
call dword [sym.imp.MFC71.DLL_ATL::CSimpleStringT::operator_char_const_]
cmp esi, esp
call fcn.004f90e1
mov esi, esp
push eax
mov eax, dword [ebp - 0x148]
push eax
lea ecx, [ebp - 0x140]
push ecx
push str.StarLight_V3.0_Setup.exe
push 0x5124c4
push 0x5124cc
call dword [sym.imp.KERNEL32.dll_GetPrivateProfileStringA]
cmp esi, esp
call fcn.004f90e1
mov dword [ebp - 0x158], eax
cmp dword [ebp - 0x158], 0
je 0x411ce3
mov esi, esp
lea edx, [ebp - 0x140]
push edx
lea ecx, [ebp - 0x150]
call dword [sym.imp.MFC71.DLL_ATL::CStringT::operator_1]
cmp esi, esp
call fcn.004f90e1
mov esi, esp
push 0
push str.StarLight_
lea ecx, [ebp - 0x150]
call dword [sym.imp.MFC71.DLL_ATL::CStringT::Find_1]
cmp esi, esp
call fcn.004f90e1
mov dword [ebp - 0x15c], eax
mov esi, esp
push 0
push 0x5124dc
lea ecx, [ebp - 0x150]
call dword [sym.imp.MFC71.DLL_ATL::CStringT::Find_1]
cmp esi, esp
call fcn.004f90e1
mov dword [ebp - 0x160], eax
mov eax, dword [ebp - 0x160]
sub eax, dword [ebp - 0x15c]
cmp eax, 9
jle 0x4119f6
mov ecx, dword [ebp - 0x160]
sub ecx, dword [ebp - 0x15c]
sub ecx, 0xa
mov esi, esp
push ecx
mov edx, dword [ebp - 0x15c]
add edx, 0xa
push edx
lea eax, [ebp - 0x1c0]
push eax
lea ecx, [ebp - 0x150]
call dword [sym.imp.MFC71.DLL_ATL::CStringT::Mid]
cmp esi, esp
call fcn.004f90e1
mov dword [ebp - 0x200], eax
mov ecx, dword [ebp - 0x200]
mov dword [ebp - 0x204], ecx
mov byte [ebp - 4], 0x19
mov esi, esp
mov edx, dword [ebp - 0x204]
push edx
lea ecx, [ebp - 0x150]
call dword [sym.imp.MFC71.DLL_ATL::CStringT::operator]
cmp esi, esp
call fcn.004f90e1
mov byte [ebp - 4], 0x18
mov esi, esp
lea ecx, [ebp - 0x1c0]
call dword [sym.imp.MFC71.DLL_ATL::CStringT::CStringT]
cmp esi, esp
call fcn.004f90e1
jmp 0x411a10
mov esi, esp
push 0x5124e0
lea ecx, [ebp - 0x150]
call dword [sym.imp.MFC71.DLL_ATL::CStringT::operator_1]
cmp esi, esp
call fcn.004f90e1
lea eax, [ebp - 0x168]
push eax
call fcn.004d30c0
add esp, 4
mov byte [ebp - 4], 0x1a
push 0x5124e4
lea ecx, [ebp - 0x168]
push ecx
lea edx, [ebp - 0x1c4]
push edx
call fcn.0040e420
add esp, 0xc
mov dword [ebp - 0x208], eax
mov eax, dword [ebp - 0x208]
mov dword [ebp - 0x20c], eax
mov byte [ebp - 4], 0x1b
mov esi, esp
mov ecx, dword [ebp - 0x20c]
push ecx
lea ecx, [ebp - 0x168]
call dword [sym.imp.MFC71.DLL_ATL::CStringT::operator]
cmp esi, esp
call fcn.004f90e1
mov byte [ebp - 4], 0x1a
mov esi, esp
lea ecx, [ebp - 0x1c4]
call dword [sym.imp.MFC71.DLL_ATL::CStringT::CStringT]
cmp esi, esp
call fcn.004f90e1
lea ecx, [ebp - 0x1ac]
call fcn.0040d480
mov byte [ebp - 4], 0x1c
push ecx
mov ecx, esp
mov dword [ebp - 0x1c8], esp
lea edx, [ebp - 0x168]
push edx
call fcn.0040d440
lea ecx, [ebp - 0x1ac]
call fcn.004e8980
movzx eax, al
test eax, eax
je 0x411b6a
lea ecx, [ebp - 0x1ac]
call fcn.0040d5c0
push ecx
mov ecx, esp
mov dword [ebp - 0x1cc], esp
push 0x5124f0
call fcn.0040d420
lea ecx, [ebp - 0x1ac]
call fcn.004e9200
movzx ecx, al
test ecx, ecx
je 0x411b65
lea ecx, [ebp - 0x1ac]
call fcn.004eafd0
push ecx
mov ecx, esp
mov dword [ebp - 0x1d0], esp
push 0x5124f8
call fcn.0040d420
lea ecx, [ebp - 0x1ac]
call fcn.004e9200
movzx edx, al
test edx, edx
je 0x411b65
push 0
push ecx
mov ecx, esp
mov dword [ebp - 0x1d4], esp
lea eax, [ebp - 0x150]
push eax
call fcn.0040d440
lea ecx, [ebp - 0x1ac]
call fcn.0040db10
push ecx
mov ecx, esp
mov dword [ebp - 0x1d8], esp
lea edx, [ebp - 0x168]
push edx
call fcn.0040d440
lea ecx, [ebp - 0x1ac]
call fcn.004e8d90
jmp 0x411cbb
mov esi, esp
lea ecx, [ebp - 0x1b8]
call dword [sym.imp.MFC71.DLL_ATL::CStringT::CStringT_5]
cmp esi, esp
call fcn.004f90e1
mov byte [ebp - 4], 0x1d
lea eax, [ebp - 0x1b8]
push eax
call fcn.004d3cd0
add esp, 4
test eax, eax
je 0x411ca2
push 0x512504
lea ecx, [ebp - 0x1ac]
call fcn.004e8830
push 0
push ecx
mov ecx, esp
mov dword [ebp - 0x1dc], esp
push 0
call fcn.0040d420
push ecx
mov ecx, esp
mov dword [ebp - 0x1e0], esp
push 0x512530
call fcn.0040d420
lea ecx, [ebp - 0x1ac]
call fcn.0040d640
lea ecx, [ebp - 0x1ac]
call fcn.004eafd0
push 0
push ecx
mov ecx, esp
mov dword [ebp - 0x1e4], esp
lea edx, [ebp - 0x1b8]
push edx
call fcn.0040d440
push ecx
mov ecx, esp
mov dword [ebp - 0x1e8], esp
push 0x512538
call fcn.0040d420
lea ecx, [ebp - 0x1ac]
call fcn.0040d640
push 0
push ecx
mov ecx, esp
mov dword [ebp - 0x1ec], esp
lea eax, [ebp - 0x1b8]
push eax
call fcn.0040d440
push ecx
mov ecx, esp
mov dword [ebp - 0x1f0], esp
push 0x512548
call fcn.0040d420
lea ecx, [ebp - 0x1ac]
call fcn.0040d640
push 0
push ecx
mov ecx, esp
mov dword [ebp - 0x1f4], esp
push 0x512554
call fcn.0040d420
push ecx
mov ecx, esp
mov dword [ebp - 0x1f8], esp
push 0x512558
call fcn.0040d420
lea ecx, [ebp - 0x1ac]
call fcn.0040d640
push ecx
mov ecx, esp
mov dword [ebp - 0x1fc], esp
lea edx, [ebp - 0x168]
push edx
call fcn.0040d440
lea ecx, [ebp - 0x1ac]
call fcn.004e8d90
mov byte [ebp - 4], 0x1c
mov esi, esp
lea ecx, [ebp - 0x1b8]
call dword [sym.imp.MFC71.DLL_ATL::CStringT::CStringT]
cmp esi, esp
call fcn.004f90e1
mov byte [ebp - 4], 0x1a
lea ecx, [ebp - 0x1ac]
call fcn.0040d530
mov byte [ebp - 4], 0x18
mov esi, esp
lea ecx, [ebp - 0x168]
call dword [sym.imp.MFC71.DLL_ATL::CStringT::CStringT]
cmp esi, esp
call fcn.004f90e1
mov esi, esp
lea ecx, [ebp - 0x34]
call dword [sym.imp.MFC71.DLL_ATL::CSimpleStringT::operator_char_const_]
cmp esi, esp
call fcn.004f90e1
mov esi, esp
push eax
call dword [sym.imp.KERNEL32.dll_DeleteFileA]
cmp esi, esp
call fcn.004f90e1
mov esi, esp
push 0xffffffffffffffff
lea ecx, [ebp - 0x34]
call dword [sym.imp.MFC71.DLL_ATL::CSimpleStringT::ReleaseBuffer]
cmp esi, esp
call fcn.004f90e1
mov ecx, dword [ebp - 0x14]
call fcn.00415480
mov byte [ebp - 4], 0x17
mov esi, esp
lea ecx, [ebp - 0x150]
call dword [sym.imp.MFC71.DLL_ATL::CStringT::CStringT]
cmp esi, esp
call fcn.004f90e1
mov byte [ebp - 4], 0x16
mov esi, esp
lea ecx, [ebp - 0x34]
call dword [sym.imp.MFC71.DLL_ATL::CStringT::CStringT]
cmp esi, esp
call fcn.004f90e1
mov dword [ebp - 4], 0xffffffff
mov eax, dword [ebp - 0x14]
push edx
mov ecx, ebp
push eax
lea edx, [0x411d90]
call fcn.004f9104
pop eax
pop edx
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
mov ecx, dword [ebp - 0x10]
call fcn.004f90d3
pop edi
pop esi
add esp, 0x20c
cmp ebp, esp
call fcn.004f90e1
mov esp, ebp
pop ebp
ret