Function at 0x4083a4
Capabilities:
Read .ini file

Disassembly:
mov eax, 0x421a2e
call fcn.004175d4
mov eax, 0x1844
call fcn.004176d0
push ebx
push esi
push edi
mov edi, ecx
mov dword [ebp - 0x10], edi
call fcn.00401046
xor ebx, ebx
mov ecx, edi
mov esi, eax
mov dword [ebp - 0x14], ebx
mov dword [ebp - 0x18], ebx
mov dword [ebp - 0x1c], ebx
call fcn.0040105f
push ebx
mov ecx, esi
call fcn.0040f522
lea eax, [ebp - 0x28]
mov ecx, edi
push eax
lea eax, [ebp - 0x14]
push eax
lea eax, [ebp - 0x1c]
push eax
mov dword [ebp - 0x28], ebx
call fcn.004081ec
test eax, eax
je 0x4088c5
cmp dword [ebp - 0x28], ebx
mov dword [ebp - 0x38], ebx
jne 0x40850e
lea eax, [esi + 0xac]
mov ecx, edi
push eax
call fcn.00409f3b
cmp eax, ebx
jne 0x4084fe
mov ecx, esi
call fcn.0040f508
test eax, eax
je 0x408504
push 1
mov ecx, esi
pop edi
mov dword [ebp - 0x38], edi
call fcn.0040f3a5
mov eax, dword [eax]
dec eax
je 0x40847f
dec eax
jne 0x4084d0
cmp dword [esi + 0x18f8], ebx
je 0x408469
lea eax, [esi + 0x18fc]
push eax
lea eax, [ebp - 0x1450]
push eax
call fcn.00417050
pop ecx
mov dword [ebp - 0x18], edi
pop ecx
lea eax, [ebp - 0x20]
push edi
push eax
lea eax, [ebp - 0x1450]
push dword [ebp - 0x18]
push eax
mov eax, dword [str.INSTMSIW.EXE]
jmp 0x4084b3
cmp dword [esi + 0x14f4], ebx
je 0x40849f
lea eax, [esi + 0x14f8]
push eax
lea eax, [ebp - 0x1450]
push eax
call fcn.00417050
pop ecx
mov dword [ebp - 0x18], edi
pop ecx
lea eax, [ebp - 0x20]
push edi
push eax
lea eax, [ebp - 0x1450]
push dword [ebp - 0x18]
push eax
mov eax, dword [str.INSTMSIA.EXE]
mov ecx, dword [ebp - 0x10]
push eax
push eax
call fcn.0040a517
test eax, eax
jne 0x4084d0
mov dword [0x42ea5c], 0x482
jmp 0x4088c0
lea eax, [ebp - 0x1450]
push eax
call fcn.00412174
test eax, eax
jne 0x408511
lea ecx, [ebp - 0x1450]
mov eax, 0x482
push ecx
push eax
mov dword [0x42ea5c], eax
call fcn.00411810
pop ecx
pop ecx
jmp 0x4088c5
jg 0x4088c5
cmp dword [ebp - 0x28], ebx
jne 0x40850e
mov dword [ebp - 0x18], ebx
jmp 0x408514
push 1
pop edi
mov dword [ebp - 0x18], edi
and byte [ebp - 0x1050], 0
mov ebx, 0xff
mov ecx, ebx
xor eax, eax
lea edi, [ebp - 0x104f]
rep stosd dword es:[edi], eax
stosw word es:[edi], ax
stosb byte es:[edi], al
xor edi, edi
xor eax, eax
cmp dword [esi + 0x1cfc], edi
je 0x408553
lea eax, [esi + 0x1d00]
push eax
lea eax, [ebp - 0x1050]
push eax
call fcn.00417050
pop ecx
pop ecx
push 1
pop eax
xor ecx, ecx
cmp dword [ebp - 0x18], edi
lea edx, [ebp - 0x30]
sete cl
mov dword [ebp - 0x3c], ecx
lea ecx, [esi + 0x8ac]
push dword [ebp - 0x3c]
mov dword [ebp - 0x34], ecx
push edx
push eax
lea eax, [ebp - 0x1050]
push eax
push ecx
push ecx
mov ecx, dword [ebp - 0x10]
call fcn.0040a517
test eax, eax
je 0x4088c0
cmp dword [ebp - 0x30], 2
mov dword [ebp - 0x2c], edi
jne 0x40859d
cmp dword [ebp - 0x18], edi
je 0x40859d
mov dword [ebp - 0x2c], 1
and byte [ebp - 0x850], 0
mov dword [ebp - 0x24], edi
mov ecx, ebx
xor eax, eax
lea edi, [ebp - 0x84f]
push 1
rep stosd dword es:[edi], eax
stosw word es:[edi], ax
mov ecx, dword [ebp - 0x10]
xor ebx, ebx
stosb byte es:[edi], al
pop edi
push edi
call fcn.0040a26e
test eax, eax
je 0x408624
xor eax, eax
cmp dword [esi + 0x2100], eax
je 0x4085e9
lea eax, [esi + 0x2104]
push eax
lea eax, [ebp - 0x850]
push eax
call fcn.00417050
pop ecx
mov eax, edi
pop ecx
push dword [ebp - 0x3c]
lea ecx, [ebp - 0x20]
push ecx
push eax
mov ecx, dword [ebp - 0x10]
lea eax, [ebp - 0x850]
push eax
push dword [0x4235f8]
push str.ISScript8.Msi
call fcn.0040a517
test eax, eax
je 0x4088c0
cmp dword [ebp - 0x20], 2
mov dword [ebp - 0x24], edi
jne 0x408624
cmp dword [ebp - 0x18], 0
je 0x408624
mov ebx, edi
cmp dword [ebp - 0x38], 0
je 0x408648
cmp dword [ebp - 0x14], 0
je 0x408635
cmp dword [ebp - 0x1c], edi
je 0x408648
mov ecx, dword [ebp - 0x10]
lea eax, [ebp - 0x1c]
push eax
lea eax, [ebp - 0x1450]
push eax
call fcn.0040a132
cmp dword [ebp - 0x1c], 0
je 0x40868e
cmp dword [ebp - 0x14], 0
jne 0x40868e
push 0x42db88
lea eax, [ebp - 0x50]
push 0x400
push eax
push 0x42bab0
push dword [0x4235bc]
push dword [0x4235b8]
call dword [sym.imp.KERNEL32.dll_GetPrivateProfileStringA]
cmp byte [ebp - 0x50], 0x79
je 0x40868a
cmp byte [ebp - 0x50], 0x59
je 0x40868a
mov dword [ebp - 0x14], edi
jmp 0x40868e
and dword [ebp - 0x14], 0
cmp dword [ebp - 0x1c], 2
jne 0x4086c6
cmp dword [ebp - 0x14], 0
jne 0x4086c6
push edi
mov ecx, esi
call fcn.00410294
lea eax, [esi + 0x10b4]
push str._ISSCHEDULEREBOOT1
push eax
call dword [sym.imp.KERNEL32.dll_lstrcatA]
push edi
push str.ISSCHEDULEREBOOT1
push 0x4271b0
mov ecx, esi
call fcn.004102a1
cmp dword [ebp - 0x24], 0
je 0x40883b
cmp dword [ebp - 0x14], 0
je 0x4086df
cmp dword [ebp - 0x1c], edi
je 0x40883b
lea eax, [ebp - 0x850]
push 0x42bab4
push eax
lea ecx, [ebp - 0xc50]
call fcn.00403df6
and dword [ebp - 4], 0
lea eax, [ebp - 0x850]
push eax
lea ecx, [ebp - 0xc50]
call fcn.00403e70
test eax, eax
je 0x408729
call fcn.00406465
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0xc50]
call fcn.00403e5a
jmp 0x4088c5
test ebx, ebx
mov ebx, dword [sym.imp.KERNEL32.dll_lstrcmpA]
je 0x408796
and byte [ebp - 0x450], 0
mov ecx, 0xff
xor eax, eax
lea edi, [ebp - 0x44f]
rep stosd dword es:[edi], eax
stosw word es:[edi], ax
mov ecx, dword [ebp - 0x10]
stosb byte es:[edi], al
lea eax, [ebp - 0x450]
push eax
push str.ISScript8.Msi
call fcn.0040a9e7
test eax, eax
je 0x408715
lea eax, [ebp - 0x450]
push 0x42bab0
push eax
call ebx
test eax, eax
je 0x408796
mov ecx, dword [ebp - 0x10]
lea eax, [ebp - 0x450]
push 1
push eax
lea eax, [ebp - 0x850]
push eax
call fcn.0040aa7f
test eax, eax
je 0x408710
cmp dword [ebp - 0x2c], 0
je 0x408801
and byte [ebp - 0x450], 0
mov ecx, 0xff
xor eax, eax
lea edi, [ebp - 0x44f]
rep stosd dword es:[edi], eax
stosw word es:[edi], ax
mov ecx, dword [ebp - 0x10]
stosb byte es:[edi], al
lea eax, [ebp - 0x450]
push eax
push dword [ebp - 0x34]
call fcn.0040a9e7
test eax, eax
je 0x408715
lea eax, [ebp - 0x450]
push 0x42bab0
push eax
call ebx
test eax, eax
je 0x408801
mov ecx, dword [ebp - 0x10]
lea eax, [ebp - 0x450]
push 1
push eax
lea eax, [ebp - 0x850]
push eax
call fcn.0040aa7f
test eax, eax
je 0x408710
mov ecx, dword [ebp - 0x10]
lea eax, [ebp - 0x24]
push eax
lea eax, [ebp - 0x850]
push eax
call fcn.0040a442
test eax, eax
je 0x408715
cmp dword [ebp - 0x24], 0
je 0x408829
mov dword [ebp - 0x14], 1
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0xc50]
call fcn.00403e5a
push 1
pop edi
push dword [ebp - 0x14]
mov ecx, esi
call fcn.0040f522
cmp dword [ebp - 0x30], 3
je 0x4088a4
cmp dword [ebp - 0x14], 0
jne 0x4088c9
lea eax, [ebp - 0x1050]
push 0x42bab4
push eax
lea ecx, [ebp - 0x1850]
call fcn.00403df6
lea eax, [ebp - 0x1050]
lea ecx, [ebp - 0x1850]
push eax
mov dword [ebp - 4], edi
call fcn.00403e70
test eax, eax
je 0x408895
call fcn.00406465
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x1850]
jmp 0x40871f
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x1850]
call fcn.00403e5a
cmp dword [ebp - 0x14], 0
jne 0x4088c9
mov ecx, dword [ebp - 0x10]
lea eax, [ebp - 0x1050]
push eax
push dword [ebp - 0x34]
call fcn.0040ad05
test eax, eax
jne 0x4088c9
call fcn.00406465
xor eax, eax
jmp 0x4088de
push dword [ebp - 0x14]
mov ecx, dword [ebp - 0x10]
lea eax, [ebp - 0x1050]
push dword [ebp - 0x20]
push eax
call fcn.004088ed
mov ecx, dword [ebp - 0xc]
pop edi
pop esi
pop ebx
mov dword fs:[0], ecx
leave
ret