Function at 0x4016b0
Capabilities:
Create process on windows
Read .ini file

Disassembly:
push ebp
mov ebp, esp
sub esp, 0xe1c
mov eax, dword [0x42c004]
xor eax, ebp
mov dword [ebp - 4], eax
push ebx
push esi
mov esi, dword [ebp + 8]
lea eax, [ebp - 0xd00]
push edi
push str._quiet__norestart
push eax
call fcn.0040d760
add esp, 4
mov dword [0x439e78], esi
lea edx, [ebp - 0x918]
mov ecx, esi
call fcn.00407b9d
lea eax, [ebp - 0x918]
push eax
lea eax, [ebp - 0x530]
push eax
call fcn.0040d760
lea eax, [ebp - 0x530]
push str.Q9ServerSetupReg.ini
push eax
call fcn.0040d770
mov esi, dword [sym.imp.KERNEL32.dll_GetPrivateProfileStringA]
lea eax, [ebp - 0x530]
add esp, 0x14
mov edi, str.Q9SETUP
push eax
push 0xc8
lea eax, [ebp - 0x148]
push eax
push 0x426cae
push str.setupMSI
push edi
call esi
mov ebx, dword [sym.imp.KERNEL32.dll_GetPrivateProfileIntA]
lea eax, [ebp - 0x530]
push eax
push 1
push str.slient
push edi
call ebx
lea eax, [ebp - 0x148]
push eax
call fcn.0040ca90
pop ecx
test eax, eax
je 0x4017d0
and dword [ebp - 0x38], 0
lea eax, [ebp - 0x148]
and dword [ebp - 0x20], 0
xorps xmm0, xmm0
mov dword [ebp - 0x30], eax
lea eax, [ebp - 0xd00]
mov dword [ebp - 0x2c], eax
lea eax, [ebp - 0x918]
mov dword [ebp - 0x28], eax
lea eax, [ebp - 0x40]
push eax
movlpd qword [ebp - 0x1c], xmm0
movlpd qword [ebp - 0x14], xmm0
movlpd qword [ebp - 0xc], xmm0
mov dword [ebp - 0x40], 0x3c
mov dword [ebp - 0x3c], 0x40
mov dword [ebp - 0x34], str.open
mov dword [ebp - 0x24], 5
call dword [sym.imp.SHELL32.dll_ShellExecuteExA]
push 0xffffffffffffffff
push dword [ebp - 8]
call dword [sym.imp.KERNEL32.dll_WaitForSingleObject]
call fcn.0040433d
movsx edi, ax
lea eax, [ebp - 0x530]
push eax
push 0x1e
lea eax, [ebp - 0x80]
push eax
push 0x426cae
push 0x426df0
push str.Q9REG
call esi
cmp byte [ebp - 0x80], 0
je 0x401a5c
test edi, edi
je 0x40181c
lea eax, [ebp - 0x80]
push 0x431588
push eax
call fcn.0040c780
pop ecx
pop ecx
test eax, eax
je 0x401a5c
xor eax, eax
mov dword [ebp - 0xe1c], 0x11c
push pe_nt_image_headers32
push eax
mov dword [0x439e7c], eax
mov dword [ebp - 0xe18], eax
mov dword [ebp - 0xe14], eax
mov dword [ebp - 0xe10], eax
mov dword [ebp - 0xe0c], eax
lea eax, [ebp - 0xe08]
push eax
call fcn.00409570
add esp, 0xc
mov dword [ebp - 0xd04], 0x10000
xor eax, eax
mov edi, 0x80
mov dword [ebp - 0xd08], eax
push 1
push edi
push eax
push eax
call dword [sym.imp.KERNEL32.dll_VerSetConditionMask]
push edx
push eax
push edi
lea eax, [ebp - 0xe1c]
push eax
call dword [sym.imp.KERNEL32.dll_VerifyVersionInfoW]
push str.W10B5ED_32B_R1.63
test eax, eax
jne 0x4018ae
push 0x426dfc
push str._s_s
push 0x439be0
call fcn.00401474
add esp, 0x10
jmp 0x4018c0
push 0x426e08
push 0x439be0
call fcn.00401474
add esp, 0xc
call fcn.00403379
call fcn.0040150b
push str..SLIENT
push 0x42ea28
call fcn.0040d770
pop ecx
pop ecx
lea eax, [ebp - 0x530]
mov edi, str.Q9REG
push eax
push 0
push str.NOHW
push edi
call ebx
test eax, eax
jne 0x4018fa
call fcn.00407eea
lea eax, [ebp - 0x530]
push eax
push 0x1e
lea eax, [ebp - 0x24]
push eax
push 0x426cae
push 0x426df0
push edi
call esi
mov al, byte [ebp - 0x24]
lea edx, [ebp - 0x24]
lea ecx, [ebp - 0x60]
jmp 0x401929
cmp al, 0x2d
je 0x401926
mov byte [ecx], al
inc ecx
inc edx
mov al, byte [edx]
test al, al
jne 0x40191f
lea eax, [ebp - 0x530]
xor ebx, ebx
push eax
push 0xc8
push 0x431688
push 0x426cae
push str.EMAIL
push edi
mov byte [ecx], bl
call esi
lea eax, [ebp - 0x530]
push eax
push 0xc8
push 0x4315c0
push 0x426cae
push 0x426e24
push edi
call esi
lea eax, [ebp - 0x530]
push eax
push 0xc8
push 0x431750
push 0x426cae
push str.tel
push edi
call esi
push 4
pop esi
push esi
lea eax, [ebp - 0x60]
mov edi, 0x431588
push eax
push edi
call fcn.0040c810
push esi
lea eax, [ebp - 0x5c]
push eax
push 0x43158d
call fcn.0040c810
push esi
lea eax, [ebp - 0x58]
push eax
push 0x431592
call fcn.0040c810
push esi
lea eax, [ebp - 0x54]
push eax
push 0x431597
call fcn.0040c810
add esp, 0x30
mov byte [0x431596], 0x2d
mov byte [0x431591], 0x2d
mov byte [0x43158c], 0x2d
mov byte [0x43159b], bl
call fcn.004038ef
test al, al
je 0x401a5c
push 0x4315b7
push 0x4315b2
push 0x4315ad
push 0x4315a8
push str.cp001__gUID:_s__s__s__s_n
call fcn.0040148c
push edi
push str.cp002__serial:_s_n
call fcn.0040148c
push 0x4315c0
push str.cp002__gCompany:_s_n
call fcn.0040148c
push 0x431688
push str.cp002__EMAIL:_s_n
call fcn.0040148c
push 0x431750
push str.cp002__tel:_s_n
call fcn.0040148c
add esp, 0x34
push ebx
call fcn.004052c5
push 0x5dc
call dword [sym.imp.KERNEL32.dll_Sleep]
mov ecx, dword [ebp - 4]
xor eax, eax
pop edi
pop esi
xor ecx, ebp
pop ebx
call fcn.0040827c
leave
ret 0x10