Function at 0x408408
Capabilities:
Read .ini file

Disassembly:
mov eax, 0x421a3e
call fcn.004175e4
mov eax, 0x1844
call fcn.004176e0
push ebx
push esi
push edi
mov edi, ecx
mov dword [ebp - 0x10], edi
call fcn.00401046
xor ebx, ebx
mov ecx, edi
mov esi, eax
mov dword [ebp - 0x14], ebx
mov dword [ebp - 0x18], ebx
mov dword [ebp - 0x1c], ebx
call fcn.0040105f
push ebx
mov ecx, esi
call fcn.0040f542
lea eax, [ebp - 0x28]
mov ecx, edi
push eax
lea eax, [ebp - 0x14]
push eax
lea eax, [ebp - 0x1c]
push eax
mov dword [ebp - 0x28], ebx
call fcn.00408250
test eax, eax
je 0x408929
cmp dword [ebp - 0x28], ebx
mov dword [ebp - 0x38], ebx
jne 0x408572
lea eax, [esi + 0xac]
mov ecx, edi
push eax
call fcn.00409eb7
cmp eax, ebx
jne 0x408562
mov ecx, esi
call fcn.0040f528
test eax, eax
je 0x408568
push 1
mov ecx, esi
pop edi
mov dword [ebp - 0x38], edi
call fcn.0040f3c5
mov eax, dword [eax]
dec eax
je 0x4084e3
dec eax
jne 0x408534
cmp dword [esi + 0x18f8], ebx
je 0x4084cd
lea eax, [esi + 0x18fc]
push eax
lea eax, [ebp - 0x1450]
push eax
call fcn.00417060
pop ecx
mov dword [ebp - 0x18], edi
pop ecx
lea eax, [ebp - 0x20]
push edi
push eax
lea eax, [ebp - 0x1450]
push dword [ebp - 0x18]
push eax
mov eax, dword [str.INSTMSIW.EXE]
jmp 0x408517
cmp dword [esi + 0x14f4], ebx
je 0x408503
lea eax, [esi + 0x14f8]
push eax
lea eax, [ebp - 0x1450]
push eax
call fcn.00417060
pop ecx
mov dword [ebp - 0x18], edi
pop ecx
lea eax, [ebp - 0x20]
push edi
push eax
lea eax, [ebp - 0x1450]
push dword [ebp - 0x18]
push eax
mov eax, dword [str.INSTMSIA.EXE]
mov ecx, dword [ebp - 0x10]
push eax
push eax
call fcn.0040a493
test eax, eax
jne 0x408534
mov dword [0x42ea7c], 0x482
jmp 0x408924
lea eax, [ebp - 0x1450]
push eax
call fcn.00412186
test eax, eax
jne 0x408575
lea ecx, [ebp - 0x1450]
mov eax, 0x482
push ecx
push eax
mov dword [0x42ea7c], eax
call fcn.00411822
pop ecx
pop ecx
jmp 0x408929
jg 0x408929
cmp dword [ebp - 0x28], ebx
jne 0x408572
mov dword [ebp - 0x18], ebx
jmp 0x408578
push 1
pop edi
mov dword [ebp - 0x18], edi
and byte [ebp - 0x1050], 0
mov ebx, 0xff
mov ecx, ebx
xor eax, eax
lea edi, [ebp - 0x104f]
rep stosd dword es:[edi], eax
stosw word es:[edi], ax
stosb byte es:[edi], al
xor edi, edi
xor eax, eax
cmp dword [esi + 0x1cfc], edi
je 0x4085b7
lea eax, [esi + 0x1d00]
push eax
lea eax, [ebp - 0x1050]
push eax
call fcn.00417060
pop ecx
pop ecx
push 1
pop eax
xor ecx, ecx
cmp dword [ebp - 0x18], edi
lea edx, [ebp - 0x30]
sete cl
mov dword [ebp - 0x3c], ecx
lea ecx, [esi + 0x8ac]
push dword [ebp - 0x3c]
mov dword [ebp - 0x34], ecx
push edx
push eax
lea eax, [ebp - 0x1050]
push eax
push ecx
push ecx
mov ecx, dword [ebp - 0x10]
call fcn.0040a493
test eax, eax
je 0x408924
cmp dword [ebp - 0x30], 2
mov dword [ebp - 0x2c], edi
jne 0x408601
cmp dword [ebp - 0x18], edi
je 0x408601
mov dword [ebp - 0x2c], 1
and byte [ebp - 0x850], 0
mov dword [ebp - 0x24], edi
mov ecx, ebx
xor eax, eax
lea edi, [ebp - 0x84f]
push 1
rep stosd dword es:[edi], eax
stosw word es:[edi], ax
mov ecx, dword [ebp - 0x10]
xor ebx, ebx
stosb byte es:[edi], al
pop edi
push edi
call fcn.0040a1ea
test eax, eax
je 0x408688
xor eax, eax
cmp dword [esi + 0x2100], eax
je 0x40864d
lea eax, [esi + 0x2104]
push eax
lea eax, [ebp - 0x850]
push eax
call fcn.00417060
pop ecx
mov eax, edi
pop ecx
push dword [ebp - 0x3c]
lea ecx, [ebp - 0x20]
push ecx
push eax
mov ecx, dword [ebp - 0x10]
lea eax, [ebp - 0x850]
push eax
push dword [0x4235f8]
push str.ISScript8.Msi
call fcn.0040a493
test eax, eax
je 0x408924
cmp dword [ebp - 0x20], 2
mov dword [ebp - 0x24], edi
jne 0x408688
cmp dword [ebp - 0x18], 0
je 0x408688
mov ebx, edi
cmp dword [ebp - 0x38], 0
je 0x4086ac
cmp dword [ebp - 0x14], 0
je 0x408699
cmp dword [ebp - 0x1c], edi
je 0x4086ac
mov ecx, dword [ebp - 0x10]
lea eax, [ebp - 0x1c]
push eax
lea eax, [ebp - 0x1450]
push eax
call fcn.0040a0ae
cmp dword [ebp - 0x1c], 0
je 0x4086f2
cmp dword [ebp - 0x14], 0
jne 0x4086f2
push 0x42dba8
lea eax, [ebp - 0x50]
push 0x400
push eax
push 0x42bad0
push dword [0x4235bc]
push dword [0x4235b8]
call dword [sym.imp.KERNEL32.dll_GetPrivateProfileStringA]
cmp byte [ebp - 0x50], 0x79
je 0x4086ee
cmp byte [ebp - 0x50], 0x59
je 0x4086ee
mov dword [ebp - 0x14], edi
jmp 0x4086f2
and dword [ebp - 0x14], 0
cmp dword [ebp - 0x1c], 2
jne 0x40872a
cmp dword [ebp - 0x14], 0
jne 0x40872a
push edi
mov ecx, esi
call fcn.004102b4
lea eax, [esi + 0x10b4]
push str._ISSCHEDULEREBOOT1
push eax
call dword [sym.imp.KERNEL32.dll_lstrcatA]
push edi
push str.ISSCHEDULEREBOOT1
push 0x4271b0
mov ecx, esi
call fcn.004102c1
cmp dword [ebp - 0x24], 0
je 0x40889f
cmp dword [ebp - 0x14], 0
je 0x408743
cmp dword [ebp - 0x1c], edi
je 0x40889f
lea eax, [ebp - 0x850]
push 0x42bad4
push eax
lea ecx, [ebp - 0xc50]
call fcn.00403df6
and dword [ebp - 4], 0
lea eax, [ebp - 0x850]
push eax
lea ecx, [ebp - 0xc50]
call fcn.00403e70
test eax, eax
je 0x40878d
call fcn.004064c9
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0xc50]
call fcn.00403e5a
jmp 0x408929
test ebx, ebx
mov ebx, dword [sym.imp.KERNEL32.dll_lstrcmpA]
je 0x4087fa
and byte [ebp - 0x450], 0
mov ecx, 0xff
xor eax, eax
lea edi, [ebp - 0x44f]
rep stosd dword es:[edi], eax
stosw word es:[edi], ax
mov ecx, dword [ebp - 0x10]
stosb byte es:[edi], al
lea eax, [ebp - 0x450]
push eax
push str.ISScript8.Msi
call fcn.0040a963
test eax, eax
je 0x408779
lea eax, [ebp - 0x450]
push 0x42bad0
push eax
call ebx
test eax, eax
je 0x4087fa
mov ecx, dword [ebp - 0x10]
lea eax, [ebp - 0x450]
push 1
push eax
lea eax, [ebp - 0x850]
push eax
call fcn.0040a9fb
test eax, eax
je 0x408774
cmp dword [ebp - 0x2c], 0
je 0x408865
and byte [ebp - 0x450], 0
mov ecx, 0xff
xor eax, eax
lea edi, [ebp - 0x44f]
rep stosd dword es:[edi], eax
stosw word es:[edi], ax
mov ecx, dword [ebp - 0x10]
stosb byte es:[edi], al
lea eax, [ebp - 0x450]
push eax
push dword [ebp - 0x34]
call fcn.0040a963
test eax, eax
je 0x408779
lea eax, [ebp - 0x450]
push 0x42bad0
push eax
call ebx
test eax, eax
je 0x408865
mov ecx, dword [ebp - 0x10]
lea eax, [ebp - 0x450]
push 1
push eax
lea eax, [ebp - 0x850]
push eax
call fcn.0040a9fb
test eax, eax
je 0x408774
mov ecx, dword [ebp - 0x10]
lea eax, [ebp - 0x24]
push eax
lea eax, [ebp - 0x850]
push eax
call fcn.0040a3be
test eax, eax
je 0x408779
cmp dword [ebp - 0x24], 0
je 0x40888d
mov dword [ebp - 0x14], 1
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0xc50]
call fcn.00403e5a
push 1
pop edi
push dword [ebp - 0x14]
mov ecx, esi
call fcn.0040f542
cmp dword [ebp - 0x30], 3
je 0x408908
cmp dword [ebp - 0x14], 0
jne 0x40892d
lea eax, [ebp - 0x1050]
push 0x42bad4
push eax
lea ecx, [ebp - 0x1850]
call fcn.00403df6
lea eax, [ebp - 0x1050]
lea ecx, [ebp - 0x1850]
push eax
mov dword [ebp - 4], edi
call fcn.00403e70
test eax, eax
je 0x4088f9
call fcn.004064c9
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x1850]
jmp 0x408783
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x1850]
call fcn.00403e5a
cmp dword [ebp - 0x14], 0
jne 0x40892d
mov ecx, dword [ebp - 0x10]
lea eax, [ebp - 0x1050]
push eax
push dword [ebp - 0x34]
call fcn.0040ac81
test eax, eax
jne 0x40892d
call fcn.004064c9
xor eax, eax
jmp 0x408942
push dword [ebp - 0x14]
mov ecx, dword [ebp - 0x10]
lea eax, [ebp - 0x1050]
push dword [ebp - 0x20]
push eax
call fcn.00408951
mov ecx, dword [ebp - 0xc]
pop edi
pop esi
pop ebx
mov dword fs:[0], ecx
leave
ret