Function at 0x44bb38
Capabilities:
Read .ini file

Disassembly:
mov eax, 0x468196
call fcn.004571ec
sub esp, 0x90
mov eax, dword [ebp + 8]
push ebx
mov dword [0x499e88], eax
mov eax, dword [0x499ea4]
push esi
push edi
xor edi, edi
cmp byte [eax + 0x54], 0
mov dword [ebp - 0x10], esp
mov dword [ebp - 4], edi
jne 0x44bbb7
cmp dword [eax + 0x18], edi
je 0x44bbb7
mov esi, dword [sym.imp.OLEAUT32.dll_SysReAllocString]
push 0x485ac4
call esi
mov dword [ebp - 0x1c], eax
push str.StartupEvent
call esi
mov dword [ebp - 0x24], eax
mov eax, dword [0x499ea4]
push dword [ebp - 0x1c]
mov byte [ebp - 4], 3
mov eax, dword [eax + 0x18]
push dword [ebp - 0x24]
mov ecx, dword [eax]
push eax
call dword [ecx + 0x20]
push dword [ebp - 0x24]
mov esi, dword [sym.imp.OLEAUT32.dll_SysStringLen]
call esi
push dword [ebp - 0x1c]
call esi
jmp 0x44bbb7
push edi
mov dword [ebp - 4], edi
call dword [sym.imp.ole32.dll_CoInitialize]
mov dword [ebp - 0x18], edi
lea eax, [ebp - 0x18]
mov byte [ebp - 4], 6
push eax
push 0x47f590
push dword [0x499ea8]
call fcn.00446bd4
mov eax, dword [ebp - 0x18]
push dword [ebp + 8]
mov ecx, dword [eax]
push eax
call dword [ecx + 0x44]
mov dword [ebp - 0x20], edi
mov ecx, dword [0x499ea4]
lea eax, [ebp - 0x20]
push eax
mov byte [ebp - 4], 7
call fcn.0044560b
lea eax, [ebp - 0x11]
push 1
push eax
lea ecx, [ebp - 0x68]
call fcn.0040487b
mov eax, dword [0x499ea4]
push str.IsConfig.INI
add eax, 0x1c
mov byte [ebp - 4], 8
push eax
lea eax, [ebp - 0x9c]
push eax
call fcn.0040614f
add esp, 0xc
mov dword [ebp - 0x1c], eax
mov esi, 0x104
lea eax, [ebp - 0x74]
push esi
push eax
lea ecx, [ebp - 0x68]
mov byte [ebp - 4], 9
call fcn.004049f7
mov edi, eax
mov ecx, dword [edi]
mov byte [ebp - 4], 0xa
call fcn.004054cd
mov ecx, dword [ebp - 0x1c]
mov ebx, eax
mov dword [edi + 8], ebx
call fcn.00405599
push eax
push esi
push ebx
push 0x485ac0
push dword [0x46b59c]
push dword [ebp + 0xc]
call dword [sym.imp.KERNEL32.dll_GetPrivateProfileStringA]
lea ecx, [ebp - 0x74]
mov byte [ebp - 4], 9
call fcn.00404a35
lea ecx, [ebp - 0x9c]
mov byte [ebp - 4], 8
call fcn.004060f2
xor edi, edi
mov word [ebp - 0x40], di
cmp dword [ebp - 0x5c], edi
je 0x44bd0d
sub esp, 0x10
mov eax, esp
mov dword [ebp - 0x1c], esp
mov word [eax], di
sub esp, 0x10
mov ecx, esp
mov dword [ebp - 0x24], esp
call fcn.004153da
sub esp, 0x10
mov ecx, esp
mov dword [ebp - 0x28], esp
call fcn.004153da
sub esp, 0x10
mov ecx, esp
mov dword [ebp - 0x30], esp
call fcn.004153da
sub esp, 0x10
mov ecx, esp
mov dword [ebp - 0x2c], esp
push 0xfffffffffffffffe
call fcn.00444c8c
lea ecx, [ebp - 0x68]
mov byte [ebp - 4], 0x10
call fcn.0044c61a
lea ecx, [ebp - 0x20]
mov esi, eax
call fcn.00428477
lea ecx, [ebp - 0x40]
mov byte [ebp - 4], 0xb
push ecx
push esi
push eax
call fcn.0043e532
add esp, 0x5c
mov esi, eax
jmp 0x44bd9e
sub esp, 0x10
mov eax, esp
mov dword [ebp - 0x2c], esp
mov word [eax], di
sub esp, 0x10
mov ecx, esp
mov dword [ebp - 0x30], esp
call fcn.004153da
sub esp, 0x10
mov ecx, esp
mov dword [ebp - 0x28], esp
call fcn.004153da
sub esp, 0x10
mov ecx, esp
mov dword [ebp - 0x1c], esp
call fcn.004153da
sub esp, 0x10
mov ecx, esp
mov dword [ebp - 0x24], esp
push 0xfffffffffffffffe
call fcn.00444c8c
lea eax, [ebp - 0x11]
push 1
push eax
lea ecx, [ebp - 0x9c]
push dword [ebp + 0xc]
mov byte [ebp - 4], 0x15
call fcn.004048f0
mov ecx, eax
mov byte [ebp - 4], 0x16
call fcn.0044c61a
lea ecx, [ebp - 0x20]
mov esi, eax
call fcn.00428477
lea ecx, [ebp - 0x40]
mov byte [ebp - 4], 0x17
push ecx
push esi
push eax
call fcn.0043e532
add esp, 0x5c
lea ecx, [ebp - 0x9c]
mov esi, eax
mov byte [ebp - 4], 0xb
call fcn.004060f2
mov eax, dword [0x499ea4]
cmp esi, 0x80004004
jne 0x44bdf4
mov eax, dword [eax + 0x50]
mov byte [eax + 4], 1
lea eax, [ebp - 0x40]
push eax
call dword [sym.imp.OLEAUT32.dll_VariantCopy]
lea ecx, [ebp - 0x68]
mov byte [ebp - 4], 7
call fcn.004060f2
mov eax, dword [ebp - 0x20]
mov byte [ebp - 4], 6
cmp eax, edi
je 0x44bdd9
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov eax, dword [ebp - 0x18]
mov byte [ebp - 4], 5
cmp eax, edi
je 0x44bdea
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov esi, 0x642
jmp 0x44bec1
cmp dword [eax + 0x50], edi
je 0x44be26
push str.GeneratedMSIScript
push dword [ebp + 0xc]
call dword [sym.imp.KERNEL32.dll_lstrcmpA]
test eax, eax
mov eax, dword [0x499ea4]
jne 0x44be26
cmp eax, edi
je 0x44be26
cmp word [eax + 0x56], di
jne 0x44be26
mov eax, dword [eax + 0x50]
mov byte [eax + 0x78], 1
mov eax, dword [0x499ea4]
cmp dword [eax + 0x3d8], edi
je 0x44be37
cmp byte [eax + 0x3dc], 0
je 0x44be43
mov eax, dword [ebp - 0x18]
push dword [ebp + 8]
mov ecx, dword [eax]
push eax
call dword [ecx + 0x48]
cmp esi, edi
jge 0x44be86
lea eax, [ebp - 0x40]
push eax
call dword [sym.imp.OLEAUT32.dll_VariantCopy]
lea ecx, [ebp - 0x68]
mov byte [ebp - 4], 7
call fcn.004060f2
mov eax, dword [ebp - 0x20]
mov byte [ebp - 4], 6
cmp eax, edi
je 0x44be6e
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov eax, dword [ebp - 0x18]
mov byte [ebp - 4], 5
cmp eax, edi
je 0x44be7f
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov esi, 0x643
jmp 0x44bec1
mov esi, dword [ebp - 0x38]
lea eax, [ebp - 0x40]
push eax
call dword [sym.imp.OLEAUT32.dll_VariantCopy]
lea ecx, [ebp - 0x68]
mov byte [ebp - 4], 7
call fcn.004060f2
mov eax, dword [ebp - 0x20]
mov byte [ebp - 4], 6
cmp eax, edi
je 0x44beb0
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov eax, dword [ebp - 0x18]
mov byte [ebp - 4], 5
cmp eax, edi
je 0x44bec1
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
call dword [sym.imp.ole32.dll_CoUninitialize]
mov eax, esi
jmp 0x44bed6
mov ecx, dword [ebp - 0xc]
pop edi
pop esi
mov dword fs:[0], ecx
pop ebx
leave
ret