Function at 0x404630
Capabilities:
Read .ini file

Disassembly:
push 0xffffffffffffffff
push 0x42ee21
mov eax, dword fs:[0]
push eax
sub esp, 0x120
mov eax, dword [0x43e0c0]
xor eax, esp
mov dword [esp + 0x11c], eax
push ebx
push ebp
push esi
push edi
mov eax, dword [0x43e0c0]
xor eax, esp
push eax
lea eax, [esp + 0x134]
mov dword fs:[0], eax
mov ebx, ecx
mov dword [esp + 0x24], ebx
call fcn.0040b86e
xor ecx, ecx
xor edi, edi
cmp eax, edi
setne cl
cmp ecx, edi
jne 0x40468d
push 0x80004005
call fcn.004011c0
mov edx, dword [eax]
mov ecx, eax
mov eax, dword [edx + 0xc]
call eax
add eax, 0x10
mov dword [esp + 0x14], eax
mov dword [esp + 0x13c], edi
call fcn.0040b86e
xor ecx, ecx
cmp eax, edi
setne cl
cmp ecx, edi
jne 0x4046be
push 0x80004005
call fcn.004011c0
mov edx, dword [eax]
mov ecx, eax
mov eax, dword [edx + 0xc]
call eax
lea esi, [eax + 0x10]
mov dword [esp + 0x20], esi
lea ecx, [esp + 0x28]
push ecx
mov byte [esp + 0x140], 1
call fcn.00401850
add esp, 4
push eax
lea ecx, [esp + 0x18]
mov byte [esp + 0x140], 2
call fcn.00401880
mov eax, dword [esp + 0x28]
add eax, 0xfffffff0
mov byte [esp + 0x13c], 1
lea edx, [eax + 0xc]
or ecx, 0xffffffff
lock xadd dword [edx], ecx
dec ecx
test ecx, ecx
jg 0x40471d
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
mov ecx, dword [esp + 0x14]
mov eax, dword [ecx - 0xc]
cmp eax, edi
jne 0x40478f
push 0x104
lea edx, [esp + 0x30]
push edx
push edi
call dword [sym.imp.KERNEL32.dll_GetModuleFileNameA]
lea eax, [esp + 0x2c]
lea edx, [eax + 1]
mov cl, byte [eax]
add eax, 1
test cl, cl
jne 0x404740
sub eax, edx
push eax
lea eax, [esp + 0x30]
push eax
lea ecx, [esp + 0x1c]
call fcn.00401750
mov ecx, dword [esp + 0x14]
push ecx
lea edx, [ebx + 0xc1c]
push str.Exe_file_:__s
push edx
call fcn.00408c80
add esp, 0xc
lea ecx, [esp + 0x14]
call fcn.00402140
push str..ini
push str..exe
lea ecx, [esp + 0x1c]
call fcn.004036a0
mov eax, dword [ebx + 0xc24]
cmp eax, 0x40
jg 0x404a9a
je 0x404a84
sub eax, 2
cmp eax, 0x1e
ja case.0x4047b7.3
movzx eax, byte [eax + 0x404c4c]
jmp dword [eax*4 + 0x404c38]
mov ecx, dword [str.iis_common]
cmp byte [ecx], 0
mov dword [esp + 0x18], edi
mov edi, 0x43d0ac
je 0x404b9f
lea ebp, [ebx + 0x858]
lea esp, [esp]
mov eax, dword [esi - 8]
mov ecx, 1
sub ecx, dword [esi - 4]
sub eax, 0x104
or eax, ecx
jge 0x404806
push 0x104
lea ecx, [esp + 0x24]
call fcn.00401460
mov esi, dword [esp + 0x20]
mov edx, dword [esp + 0x14]
mov eax, dword [edi]
push edx
push 0x104
push esi
push str.none
push eax
push str.IISSETUP_IIS5
call dword [sym.imp.KERNEL32.dll_GetPrivateProfileStringA]
cmp dword [esi - 0xc], 0
jl 0x404884
push 0x432474
push esi
call fcn.00419de9
add esp, 8
test eax, eax
je 0x40485b
sub eax, esi
cmp eax, 0xffffffff
je 0x40485b
cmp dword [ebp + 0x280], 0
je 0x40485b
mov dword [ebp], 1
mov dword [esp + 0x1c], 1
cmp dword [esi - 0xc], 0
jl 0x404884
push 0x432470
push esi
call fcn.00419de9
add esp, 8
test eax, eax
je 0x404884
sub eax, esi
cmp eax, 0xffffffff
je 0x404884
mov dword [esp + 0x1c], 1
jmp 0x40488b
cmp dword [esp + 0x1c], 0
je 0x4048a7
mov ecx, dword [edi + 4]
add dword [esp + 0x18], 1
add edi, 4
add ebp, 4
cmp byte [ecx], 0
jne 0x4047e0
jmp 0x404b9f
mov edx, dword [edi]
push edx
push str.Parameter_file_error_Compornent_
lea eax, [ebx + 0xc1c]
push str._s_t_s
push eax
call fcn.00408c80
mov ecx, dword [edi]
mov edx, dword [esp + 0x28]
add esp, 0x10
push ecx
push edx
push 1
mov ecx, ebx
call fcn.00402d90
lea ecx, [esp + 0x20]
call fcn.004013e0
lea ecx, [esp + 0x14]
call fcn.004013e0
mov eax, 1
jmp 0x404c0e
mov eax, dword [str.iis_common]
cmp byte [eax], 0
mov dword [esp + 0x18], edi
mov edi, 0x43d090
je 0x404b9f
lea ebp, [ebx + 0x858]
mov ebx, dword [sym.imp.KERNEL32.dll_GetPrivateProfileStringA]
mov eax, dword [esi - 8]
mov ecx, 1
sub ecx, dword [esi - 4]
sub eax, 0x104
or eax, ecx
jge 0x404939
push 0x104
lea ecx, [esp + 0x24]
call fcn.00401460
mov esi, dword [esp + 0x20]
mov ecx, dword [esp + 0x14]
mov edx, dword [edi]
push ecx
push 0x104
push esi
push str.none
push edx
push str.IISSETUP_IIS5
call ebx
cmp dword [esi - 0xc], 0
jl 0x4049b3
push 0x432474
push esi
call fcn.00419de9
add esp, 8
test eax, eax
je 0x40498a
sub eax, esi
cmp eax, 0xffffffff
je 0x40498a
cmp dword [ebp + 0x280], 0
je 0x40498a
mov dword [ebp], 1
mov dword [esp + 0x1c], 1
cmp dword [esi - 0xc], 0
jl 0x4049b3
push 0x432470
push esi
call fcn.00419de9
add esp, 8
test eax, eax
je 0x4049b3
sub eax, esi
cmp eax, 0xffffffff
je 0x4049b3
mov dword [esp + 0x1c], 1
jmp 0x4049ba
cmp dword [esp + 0x1c], 0
je 0x4049da
mov eax, dword [edi + 4]
add dword [esp + 0x18], 1
add edi, 4
add ebp, 4
cmp byte [eax], 0
jne 0x404913
mov ebx, dword [esp + 0x24]
jmp 0x404b9f
mov ecx, dword [edi]
mov ebx, dword [esp + 0x24]
push ecx
push str.Parameter_file_error_Compornent_
lea edx, [ebx + 0xc1c]
push str._s_t_s
push edx
call fcn.00408c80
mov eax, dword [edi]
mov ecx, dword [esp + 0x28]
add esp, 0x10
push eax
push ecx
push 1
mov ecx, ebx
call fcn.00402d90
lea eax, [esi - 0x10]
mov byte [esp + 0x13c], 0
lea edx, [eax + 0xc]
or ecx, 0xffffffff
lock xadd dword [edx], ecx
dec ecx
test ecx, ecx
jg 0x404a2f
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
mov eax, dword [esp + 0x14]
add eax, 0xfffffff0
mov dword [esp + 0x13c], 0xffffffff
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x404a5a
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
mov eax, 1
jmp 0x404c0e
push str.OS:WINDOWS2008_CIisinstApp::GetInifile__
push 0x431e40
lea ecx, [ebx + 0xc1c]
push ecx
jmp 0x404b97
push str.OS:WINDOWS_VISTA_CIisinstApp::GetInifile__
jmp 0x404b8b
push str.OS:WINDOWS7_CIisinstApp::GetInifile__
push 0x431e40
lea eax, [ebx + 0xc1c]
push eax
jmp 0x404b97
cmp eax, 0x200
jg 0x404ae7
je 0x404ad1
cmp eax, 0x80
je 0x404ac7
cmp eax, 0x100
jne case.0x4047b7.3
push str.OS:WINDOWS8_CIisinstApp::GetInifile__
push 0x431e40
lea ecx, [ebx + 0xc1c]
push ecx
jmp 0x404b97
push str.OS:WINDOWS_Server_2008_R2__CIisinstApp::GetInifile__
jmp 0x404b8b
push str.OS:WINDOWS_Server_2012__CIisinstApp::GetInifile__
push 0x431e40
lea eax, [ebx + 0xc1c]
push eax
jmp 0x404b97
cmp eax, 0x400
je 0x404b86
cmp eax, 0x800
je 0x404b73
lea ecx, [ebx + 0xc1c]
push str.Not_Supported_OS_For_Flexa__:
push ecx
call fcn.00408c80
add esp, 8
push 0x431660
push edi
push 7
mov ecx, ebx
call fcn.00402d90
lea eax, [esi - 0x10]
mov byte [esp + 0x13c], 0
lea edx, [eax + 0xc]
or ecx, 0xffffffff
lock xadd dword [edx], ecx
dec ecx
test ecx, ecx
jg 0x404b40
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
mov eax, dword [esp + 0x14]
add eax, 0xfffffff0
mov dword [esp + 0x13c], 0xffffffff
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x404b6b
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
or eax, 0xffffffff
jmp 0x404c0e
push str.OS:WINDOWS_Server_2016_CIisinstApp::GetInifile__
push 0x431e40
lea ecx, [ebx + 0xc1c]
push ecx
jmp 0x404b97
push str.OS:WINDOWS10_CIisinstApp::GetInifile__
push 0x431e40
lea edx, [ebx + 0xc1c]
push edx
call fcn.00408c80
add esp, 0xc
push 0x432218
push str.Parameter_file_check
push str._s_t_s
add ebx, 0xc1c
push ebx
call fcn.00408c80
lea eax, [esi - 0x10]
add esp, 0x10
mov byte [esp + 0x13c], 0
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x404be1
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
mov eax, dword [esp + 0x14]
add eax, 0xfffffff0
mov dword [esp + 0x13c], 0xffffffff
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x404c0c
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
xor eax, eax
mov ecx, dword [esp + 0x134]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebp
pop ebx
mov ecx, dword [esp + 0x11c]
xor ecx, esp
call fcn.00419953
add esp, 0x12c
ret