Function at 0x4042c0
Capabilities:
Read .ini file
Write file on windows

Disassembly:
push 0xffffffffffffffff
push 0x43ec0b
mov eax, dword fs:[0]
push eax
sub esp, 0xb5c
mov eax, dword [0x44fb64]
xor eax, esp
mov dword [esp + 0xb58], eax
push ebx
push ebp
push esi
push edi
mov eax, dword [0x44fb64]
xor eax, esp
push eax
lea eax, [esp + 0xb70]
mov dword fs:[0], eax
mov eax, dword [esp + 0xb84]
mov ebp, dword [esp + 0xb80]
push 0x208
lea ecx, [esp + 0x360]
push 0
push ecx
mov dword [esp + 0x2c], eax
call fcn.00425400
add esp, 0xc
push 0x208
lea edx, [esp + 0x568]
push 0
push edx
call fcn.00425400
add esp, 0xc
push 0x208
lea eax, [esp + 0x158]
push 0
push eax
call fcn.00425400
mov esi, dword [sym.imp.KERNEL32.dll_GetModuleFileNameA]
xor eax, eax
add esp, 0xc
push 0x208
lea ecx, [esp + 0x360]
push ecx
push eax
mov dword [esp + 0x140], eax
mov dword [esp + 0x144], eax
mov dword [esp + 0x148], eax
mov dword [esp + 0x14c], eax
mov dword [esp + 0x150], eax
mov dword [esp + 0x154], eax
mov dword [esp + 0x158], eax
mov dword [esp + 0x15c], eax
call esi
push 0x208
lea edx, [esp + 0x158]
push edx
push 0
call esi
lea eax, [esp + 0x154]
lea ecx, [eax + 1]
lea ecx, [ecx]
mov dl, byte [eax]
inc eax
test dl, dl
jne 0x4043c0
sub eax, ecx
add eax, 0xffffffff
js 0x4043de
mov cl, 0x5c
cmp byte [esp + eax + 0x154], cl
je 0x4043de
sub eax, 1
jns 0x4043d0
mov byte [esp + eax + 0x154], 0
lea eax, [esp + 0x154]
dec eax
cmp byte [0x453d0c], 7
jne 0x404420
mov cl, byte [eax + 1]
inc eax
test cl, cl
jne 0x4043f7
mov ecx, dword [str.LdxCab.ini]
mov edx, dword [0x447b24]
mov dword [eax], ecx
mov ecx, dword [0x447b28]
mov dword [eax + 4], edx
mov dword [eax + 8], ecx
jmp 0x40444d
mov cl, byte [eax + 1]
inc eax
test cl, cl
jne 0x404420
mov edx, dword [str.LdCab.ini]
mov ecx, dword [0x447b30]
mov dword [eax], edx
mov dx, word [0x447b34]
mov dword [eax + 4], ecx
mov cl, byte [0x447b36]
mov word [eax + 8], dx
mov byte [eax + 0xa], cl
lea edx, [esp + 0x154]
push edx
push 0x208
lea eax, [esp + 0x56c]
push eax
push 0x448410
push str.ExeFile
push str.CabFile
call dword [sym.imp.KERNEL32.dll_GetPrivateProfileStringA]
push 0xf8
lea ecx, [esp + 0x40]
push 0
push ecx
call fcn.00425400
add esp, 0xc
lea ebx, [esp + 0x134]
call fcn.00408080
xor eax, eax
lea esp, [esp]
mov cl, byte [esp + eax + 0x134]
mov byte [esp + eax + 0x3c], cl
inc eax
test cl, cl
jne 0x4044a0
xor eax, eax
mov cl, byte [esp + eax + 0x564]
mov byte [esp + eax + 0x68], cl
inc eax
test cl, cl
jne 0x4044b2
lea edx, [esp + 0x35c]
push edx
lea ecx, [esp + 0x1c]
call fcn.00409b60
lea eax, [esp + 0x1c]
push eax
lea ecx, [esp + 0x1c]
mov dword [esp + 0xb7c], 0
call fcn.0040a890
mov eax, dword [eax]
lea edx, [esp + 0xd0]
add esp, 4
sub edx, eax
lea ebx, [ebx]
mov cl, byte [eax]
mov byte [edx + eax], cl
inc eax
test cl, cl
jne 0x404500
mov eax, dword [esp + 0x1c]
add eax, 0xfffffff0
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x40452a
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
mov dword [esp + 0xb78], 0xffffffff
mov eax, dword [esp + 0x18]
add eax, 0xfffffff0
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x404555
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
push 0x400
lea ecx, [esp + 0x770]
push 0
push ecx
mov dword [esp + 0x13c], 0xf8
call fcn.00425400
add esp, 0xc
push 0x447a48
push ebp
xor edi, edi
call fcn.0042292f
mov esi, eax
add esp, 8
test esi, esi
je 0x4045ad
push 2
push edi
push esi
call fcn.00423ebf
add esp, 0xc
push esi
call fcn.004240e1
add esp, 4
push esi
mov edi, eax
call fcn.004229bd
add esp, 4
push 0
push ebp
mov dword [esp + 0x64], edi
call dword [sym.imp.KERNEL32.dll__lopen]
mov esi, eax
test esi, esi
je 0x4045f9
lea edx, [esp + 0x24]
push edx
lea eax, [esp + 0x38]
push eax
lea ecx, [esp + 0x34]
push ecx
push esi
call dword [sym.imp.KERNEL32.dll_GetFileTime]
test eax, eax
je 0x4045f2
lea edx, [esp + 0x60]
test edx, edx
je 0x4045f2
mov eax, dword [esp + 0x24]
mov ecx, dword [esp + 0x28]
mov dword [esp + 0x60], eax
mov dword [esp + 0x64], ecx
push esi
call dword [sym.imp.KERNEL32.dll__lclose]
and edi, 0x800001ff
jns 0x404609
dec edi
or edi, 0xfffffe00
inc edi
mov ebx, 0x200
sub ebx, edi
push 2
lea edi, [esp + ebx + 0x770]
mov ecx, 0x3e
lea esi, [esp + 0x40]
push 0
rep movsd dword es:[edi], dword [esi]
mov esi, dword [esp + 0x28]
push 0
push esi
call fcn.00422ad5
push esi
add ebx, 0xf8
push ebx
lea edx, [esp + 0x784]
push 1
push edx
call fcn.0042301c
add esp, 0x20
xor eax, eax
mov ecx, dword [esp + 0xb70]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebp
pop ebx
mov ecx, dword [esp + 0xb58]
xor ecx, esp
call fcn.00421f65
add esp, 0xb68
ret