Function at 0x410b10
Capabilities:
Read .ini file

Disassembly:
push ebp
mov ebp, esp
and esp, 0xfffffff8
push 0xffffffffffffffff
push 0x454328
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
push ecx
mov eax, 0x36d4
call fcn.00415b80
mov eax, dword [0x464738]
push ebx
push esi
push edi
mov ecx, 0x49
mov esi, str..ACCDB_.DGN_.DOC_.DOCX_.DWG_.MDB_.MPP_.PPT_.PPTX_.PSD_.TXT_.VSD_.XLS_.XLSX_.PRT_.WPS_.DPS_.ET_.PUB_.MPP_.RTF_.ics_.SLDPRT_.pdf_.pot_.dot_.xlt_.jpg
lea edi, [esp + 0x1ed8]
rep movsd dword es:[edi], dword [esi]
xor eax, ebp
movsw word es:[edi], word [esi]
mov dword [esp + 0x36dc], eax
xor eax, eax
mov ecx, 0x1b6
lea edi, [esp + 0x1ffe]
rep stosd dword es:[edi], eax
stosw word es:[edi], ax
xor eax, eax
xor ebx, ebx
mov word [esp + 0x26d8], bx
mov ecx, 0x1ff
lea edi, [esp + 0x26da]
rep stosd dword es:[edi], eax
stosw word es:[edi], ax
lea eax, [esp + 0x10]
push str.exedir_sgreader.ini
push eax
call fcn.004083f0
add esp, 8
lea ecx, [esp + 0x10]
mov dword [esp + 0x36ec], ebx
call dword [sym.imp.MFC71U.DLL_ATL::CSimpleStringT::operator_class_ATL::CSimpleStringT_]
push eax
push 0x104
lea ecx, [esp + 0x26e0]
push ecx
push 0x45597c
push str.expname
push str.PARAINFO
call dword [sym.imp.KERNEL32.dll_GetPrivateProfileStringW]
cmp word [esp + 0x26d8], bx
je 0x410bf5
lea edx, [esp + 0x26d8]
push edx
lea eax, [esp + 0x1edc]
push eax
call dword [sym.imp.MSVCR71.dll_wcscpy]
add esp, 8
jmp 0x410c0e
call dword [sym.imp.KERNEL32.dll_GetLastError]
push eax
push str.GetPrivateProfileString_to_get_exp_name_failed_err:_d
push 0x455c20
call fcn.00405160
add esp, 0xc
push 1
push 0x455b10
push 0x80000001
push 0x457044
lea ecx, [esp + 0x2f8]
call fcn.004049c0
mov esi, 0x456fe4
mov dword [esp + 0x2e8], esi
lea ecx, [esp + 0x2e8]
mov byte [esp + 0x36ec], 1
call dword [0x457014]
lea ecx, [esp + 0x1ed8]
push ecx
call dword [sym.imp.MSVCR71.dll_wcslen]
add esp, 4
cmp word [esp + eax*2 + 0x1ed6], 0x2c
je 0x410c7e
lea edx, [esp + 0x1ed8]
push 0x4582c8
push edx
call dword [sym.imp.MSVCR71.dll_wcscat]
add esp, 8
lea eax, [esp + 0x1ed8]
push eax
push str.Local_backup_expand_name__name___s
push 0x455c20
call fcn.00405160
add esp, 0xc
lea ecx, [esp + 0x1ed8]
push ecx
lea ecx, [esp + 0x2ec]
call fcn.0040bd50
mov word [esp + 0x2ed8], bx
xor eax, eax
push 1
mov ecx, 0x1ff
lea edi, [esp + 0x2ede]
rep stosd dword es:[edi], eax
push 0x455b10
push 0x80000001
push 0x457044
lea ecx, [esp + 0xb40]
stosw word es:[edi], ax
call fcn.004049c0
mov dword [esp + 0xb30], esi
push 0x7c
lea edx, [esp + 0x2edc]
push edx
lea ecx, [esp + 0xb38]
mov byte [esp + 0x36f4], 2
call fcn.0040c530
test eax, eax
je 0x410d35
lea eax, [esp + 0x2ed8]
push eax
push str.Issue_local_backup_expand_name__name___s
push 0x455c20
call fcn.00405160
lea ecx, [esp + 0x2ee4]
push ecx
call fcn.0040da90
add esp, 0x10
jmp 0x410d47
push str.Read_local_backup_expand_name_fail
push 0x455c20
call fcn.00405160
add esp, 8
lea ecx, [esp + 0xb30]
mov byte [esp + 0x36ec], 1
mov dword [esp + 0xb30], esi
call fcn.00403250
lea ecx, [esp + 0x2e8]
mov byte [esp + 0x36ec], 0
mov dword [esp + 0x2e8], esi
call fcn.00403250
lea ecx, [esp + 0x10]
call dword [sym.imp.MFC71U.DLL_ATL::CSimpleStringT::CSimpleStringT]
mov dword [esp + 0x18], ebx
mov dword [esp + 0x1c], ebx
mov dword [esp + 0x20], ebx
mov dword [esp + 0x24], ebx
lea ecx, [esp + 0x44]
mov dword [esp + 0x36ec], 3
mov dword [esp + 0x3c], 0x456f80
call fcn.00416430
cmp dword [0x464998], ebx
mov dword [esp + 0x40], ebx
jne 0x410dd4
push 0x46499c
call dword [sym.imp.KERNEL32.dll_InitializeCriticalSection]
mov dword [0x464998], 1
mov dword [esp + 0x3c], 0x4573b0
push 0xffffffffffffffff
lea edx, [esp + 0x18]
push edx
lea ecx, [esp + 0x44]
mov byte [esp + 0x36f4], 4
call fcn.0040f860
test eax, eax
jne 0x410e16
lea ecx, [esp + 0x3c]
mov byte [esp + 0x36ec], 3
mov dword [esp + 0x3c], 0x45739c
call fcn.0040ea90
jmp 0x4115b9
mov esi, dword [esp + 0x20]
mov ebx, dword [sym.imp.MSVCR71.dll__stricmp]
lea edi, [esp + 0x14]
mov eax, dword [esp + 0x24]
mov ecx, dword [esp + 0x20]
lea edx, [esp + 0x14]
add eax, ecx
cmp edi, edx
jne 0x410e3a
cmp esi, eax
je 0x410e75
mov ecx, dword [edi + 8]
cmp ecx, esi
mov eax, esi
ja 0x410e45
sub eax, ecx
mov ecx, dword [edi + 4]
mov eax, dword [ecx + eax*4]
add eax, 0x7c
push str.winrar.exe
push eax
call ebx
add esp, 8
test eax, eax
je 0x410e60
inc esi
jmp 0x410e24
mov eax, esi
inc eax
push eax
push edi
push esi
push edi
lea edx, [esp + 0x60]
push edx
lea ecx, [esp + 0x28]
call fcn.0040e2c0
call fcn.0040c700
xor eax, eax
xor ebx, ebx
mov word [esp + 0x1ac8], bx
mov ecx, 0x81
lea edi, [esp + 0x1aca]
rep stosd dword es:[edi], eax
stosw word es:[edi], ax
lea eax, [esp + 0x1ac8]
push eax
call fcn.0040bff0
add esp, 4
lea ecx, [esp + 0x58]
push ecx
call dword [sym.imp.ole32.dll_CoCreateGuid]
xor edx, edx
mov dword [esp + 0x137d], edx
mov dword [esp + 0x1381], edx
mov dword [esp + 0x1385], edx
mov word [esp + 0x1389], dx
lea ecx, [esp + 0x68]
mov byte [esp + 0x137c], bl
mov byte [esp + 0x138b], dl
call dword [sym.imp.SgCipherDll.dll_public:_void___thiscall_SgCipher::CSgMD5::constructor_void_]
lea eax, [esp + 0x137c]
push eax
push 0x10
lea ecx, [esp + 0x60]
push ecx
lea ecx, [esp + 0x74]
mov byte [esp + 0x36f8], 5
call dword [sym.imp.SgCipherDll.dll_public:_unsigned_char____thiscall_SgCipher::CSgCipherHash::HashDirectly_unsigned_char_const___int__unsigned_char__]
xor eax, eax
mov word [esp + 0x13b0], bx
mov ecx, 0x81
lea edi, [esp + 0x13b2]
rep stosd dword es:[edi], eax
stosw word es:[edi], ax
mov ecx, 8
mov esi, 0x4581b0
lea edi, [esp + 0x138c]
rep movsd dword es:[edi], dword [esi]
movsw word es:[edi], word [esi]
xor eax, eax
lea ebx, [ebx]
movzx ecx, byte [esp + eax + 0x137c]
mov edx, ecx
and ecx, 0xf
mov cx, word [esp + ecx*2 + 0x138c]
shr edx, 4
mov dx, word [esp + edx*2 + 0x138c]
mov word [esp + eax*4 + 0x13b2], cx
movzx ecx, byte [esp + eax + 0x137d]
mov word [esp + eax*4 + 0x13b0], dx
mov edx, ecx
and ecx, 0xf
mov cx, word [esp + ecx*2 + 0x138c]
shr edx, 4
mov dx, word [esp + edx*2 + 0x138c]
mov word [esp + eax*4 + 0x13b6], cx
movzx ecx, byte [esp + eax + 0x137e]
mov word [esp + eax*4 + 0x13b4], dx
mov edx, ecx
and ecx, 0xf
mov cx, word [esp + ecx*2 + 0x138c]
shr edx, 4
mov dx, word [esp + edx*2 + 0x138c]
mov word [esp + eax*4 + 0x13ba], cx
movzx ecx, byte [esp + eax + 0x137f]
mov word [esp + eax*4 + 0x13b8], dx
mov edx, ecx
shr edx, 4
mov dx, word [esp + edx*2 + 0x138c]
and ecx, 0xf
mov cx, word [esp + ecx*2 + 0x138c]
mov word [esp + eax*4 + 0x13bc], dx
mov word [esp + eax*4 + 0x13be], cx
add eax, 4
cmp eax, 0x10
jl 0x410f40
lea edx, [esp + 0x13b0]
push str..slb
push edx
call dword [sym.imp.MSVCR71.dll_wcscat]
xor eax, eax
mov word [esp + 0x18c8], bx
mov ecx, 0x81
lea edi, [esp + 0x18ca]
rep stosd dword es:[edi], eax
stosw word es:[edi], ax
lea eax, [esp + 0x13b8]
push eax
lea ecx, [esp + 0x1ad4]
push ecx
lea edx, [esp + 0x18d0]
push 0x455a8c
push edx
call dword [sym.imp.MSVCR71.dll_swprintf]
lea eax, [esp + 0x18d8]
push eax
lea ecx, [esp + 0x30]
push ecx
call fcn.0040dc80
add esp, 0x20
test eax, eax
je 0x41157d
lea edx, [esp + 0x18c0]
push edx
push 1
call fcn.0040de70
add esp, 8
mov dword [esp + 0x1390], ebx
mov dword [esp + 0x1394], ebx
mov dword [esp + 0x1398], ebx
mov dword [esp + 0x139c], ebx
mov eax, dword [esp + 0x24]
xor esi, esi
cmp eax, esi
mov byte [esp + 0x36ec], 6
mov dword [esp + 0x10], ebx
jle 0x41126d
xor eax, eax
mov word [esp + 0x16b8], si
mov ecx, 0x81
lea edi, [esp + 0x16ba]
rep stosd dword es:[edi], eax
mov ecx, dword [esp + 0x20]
stosw word es:[edi], ax
lea edx, [esp + 0x14]
mov esi, dword [edx + 8]
mov eax, ecx
add eax, ebx
cmp esi, eax
ja 0x4110f0
sub eax, esi
mov edx, dword [edx + 4]
mov eax, dword [edx + eax*4]
add eax, 0x7c
lea esi, [eax + 1]
lea esp, [esp]
mov dl, byte [eax]
inc eax
test dl, dl
jne 0x411100
sub eax, esi
lea edx, [esp + 0x14]
mov esi, dword [edx + 8]
add ecx, ebx
cmp esi, ecx
ja 0x411118
sub ecx, esi
push 0x104
lea esi, [esp + 0x16bc]
push esi
push eax
mov eax, dword [edx + 4]
mov ecx, dword [eax + ecx*4]
add ecx, 0x7c
push ecx
push 0
push 0
call dword [sym.imp.KERNEL32.dll_MultiByteToWideChar]
mov edx, esi
push 0x5c
push edx
call dword [sym.imp.MSVCR71.dll_wcsrchr]
mov edx, eax
add esp, 8
test edx, edx
je 0x411193
mov esi, dword [sym.imp.MSVCR71.dll_wcscpy]
xor eax, eax
mov word [esp + 0x1cd0], 0
mov ecx, 0x81
lea edi, [esp + 0x1cd2]
rep stosd dword es:[edi], eax
add edx, 2
stosw word es:[edi], ax
push edx
lea eax, [esp + 0x1cd4]
push eax
call esi
lea ecx, [esp + 0x1cd8]
push ecx
lea edx, [esp + 0x16c4]
push edx
call esi
add esp, 0x10
lea eax, [esp + 0x16b8]
push eax
call dword [sym.imp.MSVCR71.dll__wcslwr]
mov eax, dword [esp + 0x13a0]
add esp, 4
xor edi, edi
test eax, eax
jle 0x411217
lea ebx, [esp + 0x138c]
jmp 0x4111c0
mov ecx, dword [esp + 0x1398]
add ecx, edi
mov eax, ecx
shr eax, 2
lea esi, [eax*4]
mov edx, ebx
sub ecx, esi
mov esi, dword [edx + 8]
cmp esi, eax
ja 0x4111e2
sub eax, esi
mov edx, dword [edx + 4]
mov eax, dword [edx + eax*4]
lea edx, [esp + 0x16b8]
lea ecx, [eax + ecx*4]
push edx
call dword [sym.imp.MFC71U.DLL_ATL::CSimpleStringT::operator_class_ATL::CSimpleStringT_]
push eax
call dword [sym.imp.MSVCR71.dll_wcscmp]
add esp, 8
test eax, eax
je 0x411256
mov eax, dword [esp + 0x139c]
inc edi
cmp edi, eax
jl 0x4111c0
mov ebx, dword [esp + 0x10]
lea eax, [esp + 0x16b8]
push eax
lea ecx, [esp + 0x54]
call dword [sym.imp.MFC71U.DLL_ATL::CStringT::CStringT_1]
lea ecx, [esp + 0x50]
push ecx
lea ecx, [esp + 0x1390]
mov byte [esp + 0x36f0], 7
call fcn.0040f610
lea ecx, [esp + 0x50]
mov byte [esp + 0x36ec], 6
call dword [sym.imp.MFC71U.DLL_ATL::CSimpleStringT::CSimpleStringT]
jmp 0x41125a
mov ebx, dword [esp + 0x10]
mov eax, dword [esp + 0x24]
inc ebx
xor esi, esi
cmp ebx, eax
mov dword [esp + 0x10], ebx
jl 0x4110c1
mov eax, dword [esp + 0x139c]
xor edi, edi
cmp eax, esi
jle 0x4112c9
lea ebx, [esp + 0x138c]
mov ecx, dword [esp + 0x1398]
add ecx, edi
mov eax, ecx
shr eax, 2
lea esi, [eax*4]
mov edx, ebx
sub ecx, esi
mov esi, dword [edx + 8]
cmp esi, eax
ja 0x4112a3
sub eax, esi
mov edx, dword [edx + 4]
mov eax, dword [edx + eax*4]
lea ecx, [eax + ecx*4]
call dword [sym.imp.MFC71U.DLL_ATL::CSimpleStringT::operator_class_ATL::CSimpleStringT_]
push eax
call fcn.0040df80
mov eax, dword [esp + 0x13a0]
add esp, 4
inc edi
cmp edi, eax
jl 0x411281
xor esi, esi
lea ecx, [esp + 0x138c]
mov byte [esp + 0x36ec], 5
call fcn.0040f780
mov ebx, 0x456f80
lea ecx, [esp + 0xd0]
mov dword [esp + 0xc8], ebx
call fcn.00416430
cmp dword [0x464998], esi
mov dword [esp + 0xcc], esi
jne 0x411319
push 0x46499c
call dword [sym.imp.KERNEL32.dll_InitializeCriticalSection]
mov dword [0x464998], 1
mov ecx, 0x82
xor eax, eax
lea edi, [esp + 0xdc]
rep stosd dword es:[edi], eax
mov dword [esp + 0xc8], 0x457d7c
mov dword [esp + 0x2c], esi
mov dword [esp + 0x30], esi
mov dword [esp + 0x34], esi
mov dword [esp + 0x38], esi
push 1
lea ecx, [esp + 0x2c]
push ecx
push 0x45597c
push 0x45597c
push 0x45597c
lea ecx, [esp + 0xdc]
mov byte [esp + 0x3700], 0xa
call fcn.004105b0
test eax, eax
je 0x411525
mov eax, dword [esp + 0x38]
test eax, eax
jle 0x4114a2
lea ebx, [esp + 0x28]
mov eax, dword [esp + 0x34]
mov ecx, ebx
mov edx, dword [ecx + 8]
add eax, esi
cmp edx, eax
ja 0x411397
sub eax, edx
mov edx, dword [ecx + 4]
mov eax, dword [edx + eax*4]
mov eax, dword [eax + 4]
push str.Content.MSO
push eax
call dword [sym.imp.MSVCR71.dll_wcscmp]
add esp, 8
test eax, eax
je 0x411490
mov eax, dword [esp + 0x34]
lea ecx, [esp + 0x28]
mov edx, dword [ecx + 8]
add eax, esi
cmp edx, eax
ja 0x4113ca
sub eax, edx
mov ecx, dword [ecx + 4]
mov eax, dword [ecx + eax*4]
mov eax, dword [eax + 4]
push str._username_
push eax
call dword [sym.imp.MSVCR71.dll_wcsstr]
add esp, 8
test eax, eax
je 0x41144f
xor eax, eax
mov word [esp + 0x15b8], 0
mov ecx, 0x3f
lea edi, [esp + 0x15ba]
rep stosd dword es:[edi], eax
lea edx, [esp + 0x50]
stosw word es:[edi], ax
push edx
lea eax, [esp + 0x15bc]
push eax
mov dword [esp + 0x58], 0x80
call dword [sym.imp.ADVAPI32.dll_GetUserNameW]
test eax, eax
je 0x41144f
mov eax, dword [esp + 0x34]
lea ecx, [esp + 0x28]
mov edx, dword [ecx + 8]
add eax, esi
cmp edx, eax
ja 0x411434
sub eax, edx
mov ecx, dword [ecx + 4]
mov ecx, dword [ecx + eax*4]
lea edx, [esp + 0x15b8]
push edx
push str._username_
add ecx, 4
call fcn.0040f3f0
mov eax, dword [esp + 0x34]
lea ecx, [esp + 0x28]
mov edx, ecx
mov edi, dword [edx + 8]
mov ecx, eax
add ecx, esi
cmp edi, ecx
ja 0x411466
sub ecx, edi
mov edx, dword [edx + 4]
mov ecx, dword [edx + ecx*4]
mov edi, dword [ecx]
lea ecx, [esp + 0x28]
mov edx, dword [ecx + 8]
add eax, esi
cmp edx, eax
ja 0x41147d
sub eax, edx
mov edx, dword [ecx + 4]
mov eax, dword [edx + eax*4]
mov eax, dword [eax + 4]
push edi
push eax
call fcn.0040e0c0
add esp, 8
mov eax, dword [esp + 0x38]
inc esi
cmp esi, eax
jl 0x411386
mov ebx, 0x456f80
lea ecx, [esp + 0x28]
call fcn.00410520
mov dword [esp + 0xc8], ebx
lea ecx, [esp + 0xc8]
mov byte [esp + 0x36ec], 0xd
call fcn.0040d860
lea ecx, [esp + 0xd0]
mov byte [esp + 0x36ec], 5
call fcn.00416960
lea ecx, [esp + 0x68]
mov byte [esp + 0x36ec], 4
call dword [sym.imp.SgCipherDll.dll_public_virtual:_void___thiscall_SgCipher::CSgMD5::destructor_void_]
mov dword [esp + 0x3c], ebx
lea ecx, [esp + 0x3c]
mov byte [esp + 0x36ec], 0xe
call fcn.0040d860
lea ecx, [esp + 0x44]
mov byte [esp + 0x36ec], 3
call fcn.00416960
lea ecx, [esp + 0x14]
call fcn.00409ab0
mov eax, 1
jmp 0x4115c4
lea ecx, [esp + 0x28]
call fcn.00410520
mov dword [esp + 0xc8], ebx
lea ecx, [esp + 0xc8]
mov byte [esp + 0x36ec], 0xb
call fcn.0040d860
lea ecx, [esp + 0xd0]
mov byte [esp + 0x36ec], 5
call fcn.00416960
lea ecx, [esp + 0x68]
mov byte [esp + 0x36ec], 4
call dword [sym.imp.SgCipherDll.dll_public_virtual:_void___thiscall_SgCipher::CSgMD5::destructor_void_]
mov dword [esp + 0x3c], ebx
mov byte [esp + 0x36ec], 0xc
jmp 0x41159f
lea ecx, [esp + 0x68]
mov byte [esp + 0x36ec], 4
call dword [sym.imp.SgCipherDll.dll_public_virtual:_void___thiscall_SgCipher::CSgMD5::destructor_void_]
mov dword [esp + 0x3c], 0x456f80
mov byte [esp + 0x36ec], 8
lea ecx, [esp + 0x3c]
call fcn.0040d860
lea ecx, [esp + 0x44]
mov byte [esp + 0x36ec], 3
call fcn.00416960
lea ecx, [esp + 0x14]
call fcn.00409ab0
xor eax, eax
mov ecx, dword [esp + 0x36e4]
mov dword fs:[0], ecx
mov ecx, dword [esp + 0x36dc]
pop edi
pop esi
xor ecx, ebp
pop ebx
call fcn.00415ae8
mov esp, ebp
pop ebp
ret