Function at 0x41ff20
Capabilities:
Create process on windows
Read .ini file

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x582235
mov eax, dword fs:[0]
push eax
sub esp, 0x5f8
mov eax, dword [0x61b660]
xor eax, ebp
mov dword [ebp - 0x10], eax
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov dword [ebp - 0x5c8], ecx
cmp dword [ebp + 8], 7
jne 0x4200c1
mov dword [ebp - 0xa8], 0
xor eax, eax
mov dword [ebp - 0xa4], eax
mov dword [ebp - 0xa0], eax
lea ecx, [ebp - 0x57d]
mov dword [ebp - 0x57c], ecx
lea edx, [ebp - 0x9c]
mov dword [ebp - 0x5cc], edx
mov dword [ebp - 4], 0
push 0
push 0
lea ecx, [ebp - 0x9c]
call fcn.00406060
mov dword [ebp - 4], 1
mov eax, dword [ebp - 0x5c8]
add eax, 0x20c
mov dword [ebp - 0x584], eax
mov ecx, dword [ebp - 0x584]
mov edx, dword [ebp - 0x584]
mov eax, dword [ecx + 4]
sub eax, dword [edx]
sar eax, 2
mov ecx, dword [ebp - 0x5c8]
cmp dword [ecx + 0x208], eax
jb 0x41ffeb
mov edx, dword [ebp - 0x5c8]
mov dword [edx + 0x208], 0
mov eax, dword [ebp - 0x5c8]
mov ecx, dword [eax + 0x208]
mov edx, dword [ebp - 0x5c8]
mov eax, dword [edx + 0x20c]
mov ecx, dword [eax + ecx*4]
mov dword [ebp - 0x588], ecx
mov edx, dword [0x5a6ffc]
push edx
push 0
mov eax, dword [ebp - 0x588]
push eax
lea ecx, [ebp - 0x9c]
call fcn.00405c70
cmp dword [ebp - 0x88], 0x10
jb 0x42003e
mov ecx, dword [ebp - 0x9c]
mov dword [ebp - 0x5d0], ecx
jmp 0x42004a
lea edx, [ebp - 0x9c]
mov dword [ebp - 0x5d0], edx
mov eax, dword [ebp - 0x5d0]
mov dword [ebp - 0xa0], eax
mov ecx, dword [ebp - 0x8c]
mov dword [ebp - 0x58c], ecx
mov edx, dword [ebp - 0x58c]
mov dword [ebp - 0xa4], edx
lea eax, [ebp - 0xa8]
push eax
push 0x232c
push 0x4a
mov ecx, dword [0x62cb24]
push ecx
call dword [sym.imp.USER32.dll_SendMessageA]
mov edx, dword [ebp - 0x5c8]
mov eax, dword [edx + 0x208]
add eax, 1
mov ecx, dword [ebp - 0x5c8]
mov dword [ecx + 0x208], eax
mov dword [ebp - 4], 2
push 0
push 1
lea ecx, [ebp - 0x9c]
call fcn.00406060
mov dword [ebp - 4], 0xffffffff
cmp dword [ebp + 8], 8
jne 0x420127
mov edx, dword [ebp - 0x5c8]
add edx, 0x1e4
mov dword [ebp - 0x590], edx
mov eax, dword [ebp - 0x590]
cmp dword [eax + 0x14], 0x10
jb 0x4200f5
mov ecx, dword [ebp - 0x590]
mov edx, dword [ecx]
mov dword [ebp - 0x5d4], edx
jmp 0x420101
mov eax, dword [ebp - 0x590]
mov dword [ebp - 0x5d4], eax
mov ecx, dword [ebp - 0x5d4]
push ecx
mov ecx, dword [ebp - 0x5c8]
call fcn.0041f8b0
mov edx, dword [ebp + 8]
push edx
mov eax, dword [ebp - 0x5c8]
mov ecx, dword [eax + 0x20]
push ecx
call dword [sym.imp.USER32.dll_KillTimer]
cmp dword [ebp + 8], 0x41
jne 0x420321
mov edx, dword [0x630558]
and edx, 1
jne 0x42017b
mov eax, dword [0x630558]
or eax, 1
mov dword [0x630558], eax
mov dword [ebp - 4], 3
push str._skinConfigDefaultconfig.ini
push 0x62ca68
push 0x63053c
call fcn.0040e850
add esp, 0xc
push 0x5a52f0
call fcn.0052d73a
add esp, 4
mov dword [ebp - 4], 0xffffffff
cmp dword [0x630550], 0x10
jb 0x420192
mov ecx, dword [0x63053c]
mov dword [ebp - 0x5d8], ecx
jmp 0x42019c
mov dword [ebp - 0x5d8], 0x63053c
mov edx, dword [ebp - 0x5d8]
push edx
push 0x100
lea eax, [ebp - 0x1ac]
push eax
push 0x5a72aa
push str.active
push str.proc
call dword [sym.imp.KERNEL32.dll_GetPrivateProfileStringA]
lea ecx, [ebp - 0x1ac]
push ecx
call fcn.00529782
add esp, 4
test eax, eax
jne 0x420242
push 0x20
push 0
lea edx, [ebp - 0x1ec]
push edx
call fcn.00529d40
add esp, 0xc
lea eax, [ebp - 0x1ec]
push eax
push str.YYYYMMDD
call fcn.004044f0
add esp, 8
cmp dword [0x630550], 0x10
jb 0x420215
mov ecx, dword [0x63053c]
mov dword [ebp - 0x5dc], ecx
jmp 0x42021f
mov dword [ebp - 0x5dc], 0x63053c
mov edx, dword [ebp - 0x5dc]
push edx
lea eax, [ebp - 0x1ec]
push eax
push str.active
push str.proc
call dword [sym.imp.KERNEL32.dll_WritePrivateProfileStringA]
jmp 0x4207f4
push 0x20
push 0
lea ecx, [ebp - 0x1cc]
push ecx
call fcn.00529d40
add esp, 0xc
lea edx, [ebp - 0x1cc]
push edx
push str.YYYYMMDD
call fcn.004044f0
add esp, 8
lea eax, [ebp - 0x1ac]
push eax
lea ecx, [ebp - 0x1cc]
push ecx
call fcn.00529cb0
add esp, 8
test eax, eax
je 0x420321
mov edx, dword [ebp + 8]
push edx
mov eax, dword [ebp - 0x5c8]
mov ecx, dword [eax + 0x20]
push ecx
call dword [sym.imp.USER32.dll_KillTimer]
mov edx, dword [0x630538]
add edx, 1
mov dword [0x630538], edx
mov ecx, dword [ebp - 0x5c8]
call fcn.004223b0
movzx eax, al
test eax, eax
jne 0x4202e2
cmp dword [0x630538], 4
jge 0x4202e2
push 0
push 0x927c0
mov ecx, dword [ebp + 8]
push ecx
mov edx, dword [ebp - 0x5c8]
mov eax, dword [edx + 0x20]
push eax
call dword [sym.imp.USER32.dll_SetTimer]
jmp 0x420321
cmp dword [0x630550], 0x10
jb 0x4202f9
mov ecx, dword [0x63053c]
mov dword [ebp - 0x5e0], ecx
jmp 0x420303
mov dword [ebp - 0x5e0], 0x63053c
mov edx, dword [ebp - 0x5e0]
push edx
lea eax, [ebp - 0x1cc]
push eax
push str.active
push str.proc
call dword [sym.imp.KERNEL32.dll_WritePrivateProfileStringA]
cmp dword [ebp + 8], 0x42
jne 0x4204fd
mov ecx, dword [ebp - 0x5c8]
cmp dword [ecx + 0x498], 0
je 0x4204fd
mov byte [ebp - 0x2f4], 0
push 0x103
push 0
lea edx, [ebp - 0x2f3]
push edx
call fcn.00529d40
add esp, 0xc
push str._skinConfigDefaultconfig.ini
push 0x62ca68
lea eax, [ebp - 0x2c]
push eax
call fcn.0040e850
add esp, 0xc
mov dword [ebp - 0x594], eax
mov ecx, dword [ebp - 0x594]
cmp dword [ecx + 0x14], 0x10
jb 0x420393
mov edx, dword [ebp - 0x594]
mov eax, dword [edx]
mov dword [ebp - 0x5e4], eax
jmp 0x42039f
mov ecx, dword [ebp - 0x594]
mov dword [ebp - 0x5e4], ecx
mov edx, dword [ebp - 0x5e4]
push edx
push 0x104
lea eax, [ebp - 0x2f4]
push eax
push str.Sx_Mini.exe
push str.mini
push 0x5c2324
call dword [sym.imp.KERNEL32.dll_GetPrivateProfileStringA]
mov dword [ebp - 4], 4
push 0
push 1
lea ecx, [ebp - 0x2c]
call fcn.00406060
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x2f4]
push ecx
call fcn.00404340
add esp, 4
movzx edx, al
test edx, edx
jne 0x4204fd
lea eax, [ebp - 0x2f4]
push eax
push 0x62ca68
lea ecx, [ebp - 0x48]
push ecx
call fcn.0040e850
add esp, 0xc
mov dword [ebp - 0x5e8], eax
mov edx, dword [ebp - 0x5e8]
mov dword [ebp - 0x5ec], edx
mov dword [ebp - 4], 5
push str.__start__0
mov eax, dword [ebp - 0x5ec]
push eax
lea ecx, [ebp - 0x520]
push ecx
call fcn.00407330
add esp, 0xc
mov byte [ebp - 4], 8
push 0
push 1
lea ecx, [ebp - 0x48]
call fcn.00406060
mov byte [ebp - 4], 7
push 0x44
push 0
lea edx, [ebp - 0x56c]
push edx
call fcn.00529d40
add esp, 0xc
mov dword [ebp - 0x56c], 0x44
cmp dword [ebp - 0x50c], 0x10
jb 0x42048f
mov eax, dword [ebp - 0x520]
mov dword [ebp - 0x5f0], eax
jmp 0x42049b
lea ecx, [ebp - 0x520]
mov dword [ebp - 0x5f0], ecx
mov edx, dword [ebp - 0x5f0]
push edx
push 0x5a7340
lea eax, [ebp - 0x4f4]
push eax
call dword [sym.imp.USER32.dll_wsprintfA]
add esp, 0xc
lea ecx, [ebp - 0x504]
push ecx
lea edx, [ebp - 0x56c]
push edx
push 0
push 0
push 0x10
push 0
push 0
push 0
lea eax, [ebp - 0x4f4]
push eax
push 0
call dword [sym.imp.KERNEL32.dll_CreateProcessA]
mov dword [ebp - 4], 9
push 0
push 1
lea ecx, [ebp - 0x520]
call fcn.00406060
mov dword [ebp - 4], 0xffffffff
cmp dword [ebp + 8], 9
jne 0x420532
mov ecx, dword [ebp - 0x5c8]
call fcn.00424e60
mov ecx, dword [ebp + 8]
push ecx
mov edx, dword [ebp - 0x5c8]
mov eax, dword [edx + 0x20]
push eax
call dword [sym.imp.USER32.dll_KillTimer]
mov ecx, dword [ebp - 0x5c8]
mov dword [ecx + 0x50c], 0
cmp dword [ebp + 8], 0xa
jne 0x420661
push 0xa
mov edx, dword [ebp - 0x5c8]
mov eax, dword [edx + 0x20]
push eax
call dword [sym.imp.USER32.dll_KillTimer]
mov ecx, dword [ebp - 0x5c8]
mov dword [ecx + 0x510], 0
push str.Defaultconfig.ini
push 0x62bcac
lea edx, [ebp - 0x64]
push edx
call fcn.0040e850
add esp, 0xc
mov dword [ebp - 0x598], eax
mov eax, dword [ebp - 0x598]
cmp dword [eax + 0x14], 0x10
jb 0x420596
mov ecx, dword [ebp - 0x598]
mov edx, dword [ecx]
mov dword [ebp - 0x5f4], edx
jmp 0x4205a2
mov eax, dword [ebp - 0x598]
mov dword [ebp - 0x5f4], eax
mov ecx, dword [ebp - 0x5f4]
push ecx
push 0x5c2398
push str.uninstalltime
push str.Browser
call dword [sym.imp.KERNEL32.dll_WritePrivateProfileStringA]
mov dword [ebp - 4], 0xa
push 0
push 1
lea ecx, [ebp - 0x64]
call fcn.00406060
mov dword [ebp - 4], 0xffffffff
mov edx, dword [ebp - 0x5c8]
add edx, 0x4e8
mov dword [ebp - 0x59c], edx
mov eax, dword [ebp - 0x59c]
cmp dword [eax + 0x14], 0x10
jb 0x420606
mov ecx, dword [ebp - 0x59c]
mov edx, dword [ecx]
mov dword [ebp - 0x5f8], edx
jmp 0x420612
mov eax, dword [ebp - 0x59c]
mov dword [ebp - 0x5f8], eax
push 1
push 0
push 0
mov ecx, dword [ebp - 0x5f8]
push ecx
push str.open
push 0
call dword [sym.imp.SHELL32.dll_ShellExecuteA]
mov edx, dword [ebp - 0x5c8]
cmp dword [edx + 0x514], 0
jne 0x420661
push 0
push 0x1e
push 0xb
mov eax, dword [ebp - 0x5c8]
mov ecx, dword [eax + 0x20]
push ecx
call dword [sym.imp.USER32.dll_SetTimer]
mov edx, dword [ebp - 0x5c8]
mov dword [edx + 0x514], 1
cmp dword [ebp + 8], 0xb
jne 0x4207e9
mov eax, dword [ebp - 0x5c8]
add eax, 0x524
mov dword [ebp - 0x5a0], eax
mov ecx, dword [ebp - 0x5a0]
cmp dword [ecx + 0x14], 0x10
jb 0x420698
mov edx, dword [ebp - 0x5a0]
mov eax, dword [edx]
mov dword [ebp - 0x5fc], eax
jmp 0x4206a4
mov ecx, dword [ebp - 0x5a0]
mov dword [ebp - 0x5fc], ecx
mov edx, dword [ebp - 0x5fc]
push edx
call fcn.004180a0
add esp, 4
mov dword [ebp - 0x570], eax
cmp dword [ebp - 0x570], 0
jne 0x4207e9
mov dword [0x62cb30], 1
mov eax, dword [ebp - 0x5c8]
add eax, 0x4b0
mov dword [ebp - 0x5a4], eax
mov ecx, dword [ebp - 0x5a4]
cmp dword [ecx + 0x14], 0x10
jb 0x4206fd
mov edx, dword [ebp - 0x5a4]
mov eax, dword [edx]
mov dword [ebp - 0x600], eax
jmp 0x420709
mov ecx, dword [ebp - 0x5a4]
mov dword [ebp - 0x600], ecx
push 0x62cb3c
mov edx, dword [ebp - 0x600]
push edx
mov ecx, dword [ebp - 0x5c8]
call fcn.00425500
mov eax, dword [0x5a6ffc]
mov dword [ebp - 0x5b0], eax
push 0x5c2630
call fcn.005291f0
add esp, 4
mov dword [ebp - 0x5a8], eax
mov ecx, dword [ebp - 0x5a8]
push ecx
mov edx, dword [ebp - 0x5b0]
push edx
push 0x5c2630
mov ecx, 0x62cb3c
call fcn.0040e660
mov dword [ebp - 0x574], eax
cmp dword [ebp - 0x574], 0
jl 0x4207c5
mov eax, dword [ebp - 0x574]
push eax
push 0
lea ecx, [ebp - 0x80]
push ecx
mov ecx, 0x62cb3c
call fcn.004058f0
mov dword [ebp - 0x604], eax
mov edx, dword [ebp - 0x604]
mov dword [ebp - 0x5b4], edx
mov dword [ebp - 4], 0xb
mov eax, dword [ebp - 0x5b4]
push eax
mov ecx, 0x62cb3c
call fcn.00405ab0
mov dword [ebp - 4], 0xc
push 0
push 1
lea ecx, [ebp - 0x80]
call fcn.00406060
mov dword [ebp - 4], 0xffffffff
mov ecx, dword [ebp + 8]
push ecx
mov edx, dword [ebp - 0x5c8]
mov eax, dword [edx + 0x20]
push eax
call dword [sym.imp.USER32.dll_KillTimer]
mov ecx, dword [ebp - 0x5c8]
mov dword [ecx + 0x514], 0
mov ecx, dword [ebp - 0x5c8]
call fcn.0042f37a
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
mov ecx, dword [ebp - 0x10]
xor ecx, ebp
call fcn.0052927b
mov esp, ebp
pop ebp
ret 4