Function at 0x404998
Capabilities:
Get common file path
Read .ini file

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x528
push ebx
push esi
push edi
push 0x1003
push 0xfa00
call fcn.00404074
push 1
mov esi, 0x311
pop edi
mov dword [0x40f218], eax
mov eax, dword [ebp + 8]
xor ebx, ebx
push esi
push edi
mov dword [0x410f08], eax
mov dword [0x410f00], eax
mov dword [0x410ecc], ebx
mov dword [0x410b70], edi
mov dword [0x40f210], ebx
mov dword [0x410b68], ebx
mov dword [0x410db0], ebx
mov dword [0x410ed8], ebx
mov dword [0x40f214], edi
mov dword [0x410b88], edi
mov dword [0x410b8c], edi
mov dword [0x410b84], ebx
call fcn.0040400b
push esi
push edi
mov dword [0x410d98], eax
call fcn.0040400b
push esi
push edi
mov dword [0x410da4], eax
call fcn.0040400b
push esi
push edi
mov dword [0x410ef4], eax
call fcn.0040400b
push esi
push edi
mov dword [0x410d8c], eax
call fcn.0040400b
push esi
push edi
mov dword [0x410da0], eax
call fcn.0040400b
push esi
push edi
mov dword [0x410edc], eax
call fcn.0040400b
push esi
push edi
mov dword [0x410dac], eax
call fcn.0040400b
push esi
push edi
mov dword [0x410d94], eax
call fcn.0040400b
push esi
push edi
mov dword [0x410ed4], eax
call fcn.0040400b
push esi
push edi
mov dword [0x410ec8], eax
call fcn.0040400b
push esi
push edi
mov dword [0x410ee8], eax
call fcn.0040400b
push 0x107
push edi
mov dword [0x410ee0], eax
call fcn.0040400b
push 0x107
push edi
mov dword [0x410ee4], eax
call fcn.0040400b
mov dword [0x410eec], eax
push 0x107
push edi
call fcn.0040400b
push esi
push edi
mov dword [0x410ed0], eax
call fcn.0040400b
push esi
push edi
mov dword [0x410ec4], eax
call fcn.0040400b
mov ecx, dword [0x410d98]
mov dword [0x410d90], eax
cmp ecx, ebx
je 0x404fc1
cmp dword [0x410da4], ebx
je 0x404fc1
cmp dword [0x410ef4], ebx
je 0x404fc1
cmp dword [0x410d8c], ebx
je 0x404fc1
cmp dword [0x410da0], ebx
je 0x404fc1
cmp dword [0x410edc], ebx
je 0x404fc1
cmp dword [0x410dac], ebx
je 0x404fc1
cmp dword [0x410d94], ebx
je 0x404fc1
cmp dword [0x410ed4], ebx
je 0x404fc1
cmp dword [0x410ec8], ebx
je 0x404fc1
cmp dword [0x410ee8], ebx
je 0x404fc1
cmp dword [0x410ee0], ebx
je 0x404fc1
cmp dword [0x410ee4], ebx
je 0x404fc1
cmp dword [0x410eec], ebx
je 0x404fc1
cmp dword [0x410ec4], ebx
je 0x404fc1
cmp eax, ebx
je 0x404fc1
cmp dword [0x410ed0], ebx
je 0x404fc1
mov byte [ecx], bl
mov eax, dword [0x410da4]
push str._ISDEL.EXE
mov byte [eax], bl
mov eax, dword [0x410ef4]
mov byte [eax], bl
mov eax, dword [0x410d8c]
mov byte [eax], bl
mov eax, dword [0x410da0]
mov byte [eax], bl
mov eax, dword [0x410edc]
mov byte [eax], bl
mov eax, dword [0x410dac]
mov byte [eax], bl
mov eax, dword [0x410d94]
mov byte [eax], bl
mov eax, dword [0x410ed4]
mov byte [eax], bl
mov eax, dword [0x410ec8]
mov byte [eax], bl
mov eax, dword [0x410ee8]
mov byte [eax], bl
mov eax, dword [0x410ee0]
mov byte [eax], bl
mov eax, dword [0x410ee4]
mov byte [eax], bl
mov eax, dword [0x410eec]
mov byte [eax], bl
mov eax, dword [0x410ed0]
mov byte [eax], bl
mov eax, dword [0x410ec4]
mov byte [eax], bl
mov eax, dword [0x410d90]
mov byte [eax], bl
push dword [0x410ee8]
call dword [sym.imp.KERNEL32.dll_lstrcpyA]
mov esi, 0x105
lea eax, [ebp - 0x318]
push esi
push eax
push dword [ebp + 8]
call dword [sym.imp.KERNEL32.dll_GetModuleFileNameA]
push dword [0x410ef4]
lea eax, [ebp - 0x318]
push eax
call fcn.00406f43
push edi
push dword [0x410ef4]
call fcn.00406f04
push dword [0x410ef4]
push dword [0x410da0]
call dword [sym.imp.KERNEL32.dll_lstrcpyA]
mov edi, dword [sym.imp.KERNEL32.dll_lstrcatA]
push str.SETUP.INS
push dword [0x410ef4]
call edi
push dword [0x410da0]
push dword [0x410d8c]
call dword [sym.imp.KERNEL32.dll_lstrcpyA]
push str.LAYOUT.BIN
push dword [0x410d8c]
call edi
lea eax, [ebp - 0x420]
push esi
push eax
call dword [sym.imp.KERNEL32.dll_GetWindowsDirectoryA]
lea eax, [ebp - 0x420]
push str._delis32.ini
push eax
push dword [0x410ed4]
call fcn.00406fbf
push dword [0x410ed4]
call fcn.00406e74
mov edi, dword [sym.imp.USER32.dll_RegisterWindowMessageA]
push str.ISDEL_MSG_DELENABLE32
neg eax
sbb eax, eax
inc eax
mov dword [0x40f214], eax
call edi
mov dword [0x410ba8], eax
push str.ISDEL_MSG_DELEXISTS32
call edi
push str.ISDEL_MSG_DELDONE32
mov dword [0x410bac], eax
call edi
push str.ISMSG16_TERMINATE
mov dword [0x410bb0], eax
call edi
push str.ISMSG32_TERMINATE
mov dword [0x410bb4], eax
call edi
mov edi, dword [sym.imp.USER32.dll_SendMessageA]
push ebx
push ebx
mov dword [0x410bb8], eax
push dword [0x410bb4]
push 0xffffffffffffffff
call edi
push ebx
push ebx
push dword [0x410bb8]
push 0xffffffffffffffff
call edi
push str.setup.ini
lea eax, [ebp - 0x108]
push dword [0x410da0]
push eax
call fcn.00406fbf
lea eax, [ebp - 0x108]
push eax
call fcn.00406e74
test eax, eax
je 0x404e99
cmp dword [0x410f04], ebx
jne 0x404e99
lea eax, [ebp - 0x108]
mov edi, dword [sym.imp.KERNEL32.dll_GetPrivateProfileStringA]
push eax
push esi
push dword [0x410ee8]
push str._ISDEL.EXE
push str.IsdelName
push str.Startup
call edi
lea eax, [ebp - 0x108]
push eax
push esi
push dword [0x410ee0]
push 0x410790
push str.AppName
push str.Startup
call edi
lea eax, [ebp - 0x108]
push eax
push ebx
push str.FreeDiskSpace
push str.Startup
call dword [sym.imp.KERNEL32.dll_GetPrivateProfileIntA]
mov dword [0x410bbc], eax
lea eax, [ebp - 0x108]
push eax
lea eax, [ebp - 0x210]
push esi
push eax
push 0x410790
push str.Type
push 0x40f27c
call edi
lea eax, [ebp - 0x210]
push 0x40f278
push eax
call dword [sym.imp.KERNEL32.dll_lstrcmpiA]
test eax, eax
jne 0x404e78
lea eax, [ebp - 0x108]
mov dword [0x410b90], 1
push eax
push esi
push dword [0x410ee4]
push dword [0x410ee0]
push str.FileName
push 0x40f27c
call edi
lea eax, [ebp - 0x108]
push eax
push esi
push dword [0x410eec]
push 0x410790
push str.SerialNo
push 0x40f27c
call edi
lea eax, [ebp - 0x108]
push eax
push esi
push dword [0x410ed0]
push 0x410790
push str.Locale
push 0x40f27c
call edi
lea eax, [ebp - 0x108]
push eax
push esi
push dword [0x410ec4]
push 0x410790
push str.CmdLine
push str.Startup
call edi
jmp 0x404ec4
lea eax, [ebp - 0x108]
mov edi, dword [sym.imp.KERNEL32.dll_GetPrivateProfileStringA]
push eax
push esi
push dword [0x410ec4]
push 0x410790
push str.CmdLine
push str.Startup
call edi
mov dword [0x410b8c], ebx
lea eax, [ebp - 0x108]
push eax
lea eax, [ebp - 0x210]
push esi
push eax
push 0x40f254
push str.EnableLangDlg
push str.Startup
call edi
mov esi, dword [sym.imp.KERNEL32.dll_lstrcmpiA]
lea eax, [ebp - 0x210]
push 0x40f240
push eax
call esi
test eax, eax
je 0x404f12
lea eax, [ebp - 0x210]
push 0x40f23c
push eax
call esi
test eax, eax
je 0x404f12
xor esi, esi
jmp 0x404f15
push 1
pop esi
mov edi, dword [sym.imp.KERNEL32.dll_lstrcatA]
push 0x40f204
push dword [0x410ec4]
call edi
push dword [ebp + 0xc]
push dword [0x410ec4]
call edi
push dword [0x410ec4]
call fcn.004055d2
test eax, eax
pop ecx
je 0x404fc1
xor eax, eax
cmp dword [0x410b74], ebx
sete al
and esi, eax
je 0x404f5b
push dword [ebp + 8]
call fcn.00406ddc
pop ecx
push esi
push 0x410d9c
push 0x410ef0
push 0x1b59
push 0xbba
push dword [ebp + 8]
call fcn.00401daa
cmp esi, ebx
mov edi, eax
je 0x404f87
push dword [ebp + 8]
call fcn.00406ddc
pop ecx
cmp edi, ebx
je 0x404fc8
cmp edi, 0xffffffff
je 0x404fc1
cmp edi, 0xfffffffa
je 0x404fb4
cmp edi, 0xfffffffb
je 0x404fa7
cmp edi, 0xfffffffd
jne 0x404fc8
push ebx
push 0x1b9e
jmp 0x404fba
push dword [0x410ef0]
push 0x1b9f
jmp 0x404fba
push ebx
push 0x1ba0
call fcn.00405ea1
pop ecx
pop ecx
xor eax, eax
pop edi
pop esi
pop ebx
leave
ret
push dword [0x410da0]
push dword [0x410d90]
call dword [sym.imp.KERNEL32.dll_lstrcpyA]
push 1
pop edi
push edi
push dword [0x410d90]
call fcn.00406f04
cmp dword [0x410d9c], edi
jbe 0x405046
mov esi, dword [sym.imp.KERNEL32.dll_lstrcatA]
push str.SETUPDIR
push dword [0x410d90]
call esi
push edi
push dword [0x410d90]
call fcn.00406f04
push dword [0x410ef0]
lea eax, [ebp - 0x528]
push str._04x
push eax
call dword [sym.imp.USER32.dll_wsprintfA]
add esp, 0xc
lea eax, [ebp - 0x528]
push eax
push dword [0x410d90]
call esi
push edi
push dword [0x410d90]
call fcn.00406f04
call fcn.00405538
mov eax, edi
jmp 0x404fc3