Function at 0x41d0e0
Capabilities:
Contain obfuscated stackstrings
Create process on windows
Read .ini file

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x42a53c
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
sub esp, 0x3e8
push ebx
push esi
push edi
mov dword [ebp - 0x4c], ecx
lea ecx, [ebp - 0x44]
mov dword [ebp - 4], 0
call fcn.00426fd2
lea ecx, [ebp - 0x24]
mov byte [ebp - 4], 1
call fcn.00426fd2
lea ecx, [ebp - 0x28]
mov byte [ebp - 4], 2
call fcn.00426fd2
lea ecx, [ebp - 0x34]
mov byte [ebp - 4], 3
call fcn.00426fd2
lea ecx, [ebp - 0x3c]
mov byte [ebp - 4], 4
call fcn.00426fd2
lea ecx, [ebp - 0x2c]
mov byte [ebp - 4], 5
call fcn.00426fd2
lea ecx, [ebp - 0x40]
mov byte [ebp - 4], 6
call fcn.00426fd2
lea ecx, [ebp - 0x18]
mov byte [ebp - 4], 7
call fcn.00426fd2
lea ecx, [ebp - 0x10]
mov byte [ebp - 4], 8
call fcn.00426fd2
lea ecx, [ebp - 0x20]
mov byte [ebp - 4], 9
call fcn.00426fd2
lea ecx, [ebp - 0x38]
mov byte [ebp - 4], 0xa
call fcn.00426fd2
push 0x4324ac
lea ecx, [ebp - 0x10]
mov byte [ebp - 4], 0xb
call fcn.00426fc6
mov eax, dword [ebp - 0x10]
mov esi, dword [sym.imp.KERNEL32.dll_GetPrivateProfileStringA]
push eax
lea ecx, [ebp - 0x3f4]
push 0x208
push ecx
push 0
push str.AppCallName
push str.Info
call esi
test eax, eax
je 0x41d1d3
lea edx, [ebp - 0x3f4]
lea ecx, [ebp - 0x24]
push edx
call fcn.00426fcc
mov eax, dword [ebp - 0x10]
lea ecx, [ebp - 0x3f4]
push eax
push 0x208
push ecx
push 0
push str.RestartPath
push str.Info
call esi
test eax, eax
je 0x41d204
lea edx, [ebp - 0x3f4]
lea ecx, [ebp - 0x28]
push edx
call fcn.00426fcc
mov eax, dword [ebp - 0x10]
lea ecx, [ebp - 0x3f4]
push eax
push 0x208
push ecx
push 0
push str.DebugPath
push str.Info
call esi
test eax, eax
je 0x41d235
lea edx, [ebp - 0x3f4]
lea ecx, [ebp - 0x34]
push edx
call fcn.00426fcc
mov eax, dword [ebp - 0x10]
lea ecx, [ebp - 0x3f4]
push eax
push 0x208
push ecx
push 0
push str.DebugCmd
push str.Info
call esi
test eax, eax
je 0x41d266
lea edx, [ebp - 0x3f4]
lea ecx, [ebp - 0x3c]
push edx
call fcn.00426fcc
mov eax, dword [ebp - 0x10]
lea ecx, [ebp - 0x3f4]
push eax
push 0x208
push ecx
push 0
push 0x431f60
push str.Info
call esi
test eax, eax
je 0x41d297
lea edx, [ebp - 0x3f4]
lea ecx, [ebp - 0x2c]
push edx
call fcn.00426fcc
mov eax, dword [ebp - 0x10]
lea ecx, [ebp - 0x3f4]
push eax
push 0x208
push ecx
push 0
push str.Reserve
push str.Info
call esi
test eax, eax
je 0x41d2c8
lea edx, [ebp - 0x3f4]
lea ecx, [ebp - 0x40]
push edx
call fcn.00426fcc
mov eax, dword [ebp - 0x10]
lea ecx, [ebp - 0x3f4]
push eax
push 0x208
push ecx
push 0
push str.Send
push str.Info
call esi
test eax, eax
je 0x41d2f9
lea edx, [ebp - 0x3f4]
lea ecx, [ebp - 0x18]
push edx
call fcn.00426fcc
mov eax, dword [ebp - 0x18]
mov edi, dword [sym.imp.MSVCRT.dll__mbscmp]
push 0x43167c
push eax
call edi
mov ecx, dword [ebp - 0x10]
add esp, 8
mov ebx, eax
lea edx, [ebp - 0x3f4]
push ecx
push 0x208
neg ebx
push edx
push 0
sbb ebx, ebx
push str.Debug
push str.Info
inc ebx
call esi
test eax, eax
je 0x41d345
lea eax, [ebp - 0x3f4]
lea ecx, [ebp - 0x18]
push eax
call fcn.00426fcc
mov ecx, dword [ebp - 0x18]
push 0x43167c
push ecx
call edi
mov edx, dword [ebp - 0x10]
add esp, 8
mov edi, eax
lea eax, [ebp - 0x3f4]
push edx
push 0x208
neg edi
push eax
push 0
sbb edi, edi
push str.CheckEdition
push str.Info
inc edi
call esi
test eax, eax
je 0x41d38b
lea ecx, [ebp - 0x3f4]
push ecx
lea ecx, [ebp - 0x18]
call fcn.00426fcc
mov edx, dword [ebp - 0x18]
push 0x43167c
push edx
call dword [sym.imp.MSVCRT.dll__mbscmp]
mov eax, dword [ebp - 0x10]
add esp, 8
lea ecx, [ebp - 0x3f4]
push eax
push 0x208
push ecx
push 0
push str.Detail1Path
push str.Info
call esi
test eax, eax
jne 0x41d3c5
mov byte [ebp - 0x3f4], al
lea edx, [ebp - 0x3f4]
lea ecx, [ebp - 0x38]
push edx
call fcn.00426fcc
lea ecx, [ebp - 0x5c]
call fcn.004270c2
mov eax, dword [ebp - 0x38]
mov byte [ebp - 4], 0xc
mov ecx, dword [eax - 8]
test ecx, ecx
je 0x41d443
push 0
lea ecx, [ebp - 0x3f4]
push 0
push ecx
lea ecx, [ebp - 0x5c]
call sub.MFC42.DLL_CFile::Open
cmp eax, 1
jne 0x41d443
lea ecx, [ebp - 0x5c]
call sub.MFC42.DLL_CFile::GetLength
test eax, eax
je 0x41d43b
lea ecx, [ebp - 0x5c]
call sub.MFC42.DLL_CFile::GetLength
push eax
lea ecx, [ebp - 0x5c]
call sub.MFC42.DLL_CFile::GetLength
push eax
lea ecx, [ebp - 0x20]
call sub.MFC42.DLL_CString::GetBuffer
push eax
lea ecx, [ebp - 0x5c]
call sub.MFC42.DLL_CFile::Read
push 0xffffffffffffffff
lea ecx, [ebp - 0x20]
call sub.MFC42.DLL_CString::ReleaseBuffer
lea ecx, [ebp - 0x5c]
call sub.MFC42.DLL_CFile::Close
lea ecx, [ebp - 0x30]
call fcn.00426fd2
lea ecx, [ebp - 0x1c]
mov byte [ebp - 4], 0xd
call fcn.00426fd2
push 0x5c
mov ecx, 0x4324ac
mov byte [ebp - 4], 0xe
call sub.MFC42.DLL_CString::ReverseFind
cmp eax, 0xffffffff
jne 0x41d48e
lea edx, [ebp - 0x14]
push edx
call fcn.00419600
add esp, 4
push eax
lea ecx, [ebp - 0x30]
mov byte [ebp - 4], 0xf
call fcn.00426fc6
mov byte [ebp - 4], 0xe
lea ecx, [ebp - 0x14]
jmp 0x41d4b6
mov ecx, dword [ebp - 0x4c]
inc eax
push eax
lea eax, [ebp - 0x14]
push eax
add ecx, 0x94
call sub.MFC42.DLL_CString::Left
push eax
lea ecx, [ebp - 0x30]
mov byte [ebp - 4], 0x10
call fcn.00426fc6
mov byte [ebp - 4], 0xe
lea ecx, [ebp - 0x14]
call sub.MFC42.DLL_CString::CString
mov eax, dword [ebp + 8]
xor edx, edx
push 0
push edi
mov ecx, dword [eax - 8]
push ebx
test ecx, ecx
setne dl
mov dword [ebp - 0x14], edx
push ecx
lea edx, [ebp - 0x20]
mov ecx, esp
mov dword [ebp - 0x48], esp
push edx
call sub.MFC42.DLL_CString::CString_2
push ecx
lea eax, [ebp - 0x2c]
mov ecx, esp
mov dword [ebp - 0x64], esp
push eax
mov byte [ebp - 4], 0x11
call sub.MFC42.DLL_CString::CString_2
push ecx
lea edx, [ebp - 0x24]
mov ecx, esp
mov dword [ebp - 0x60], esp
push edx
mov byte [ebp - 4], 0x12
call sub.MFC42.DLL_CString::CString_2
mov eax, dword [ebp - 0x14]
lea ecx, [ebp - 0x1ec]
push eax
mov byte [ebp - 4], 0xe
call fcn.00401150
lea ecx, [ebp - 0x1ec]
mov byte [ebp - 4], 0x13
call sub.MFC42.DLL_CDialog::DoModal
mov ecx, dword [ebp - 0x10]
lea edx, [ebp - 0x3f4]
push ecx
push 0x208
push edx
push 0
push str.Detail1Path
push str.Info
call esi
test eax, eax
je 0x41d557
lea eax, [ebp - 0x3f4]
lea ecx, [ebp - 0x1c]
push eax
call fcn.00426fcc
push 0x5c
lea ecx, [ebp - 0x1c]
call sub.MFC42.DLL_CString::ReverseFind
cmp eax, 0xffffffff
je 0x41d58f
inc eax
lea ecx, [ebp - 0x48]
push eax
push ecx
lea ecx, [ebp - 0x1c]
call sub.MFC42.DLL_CString::Left
push eax
lea ecx, [ebp - 0x1c]
mov byte [ebp - 4], 0x14
call fcn.00426fc6
lea ecx, [ebp - 0x48]
mov byte [ebp - 4], 0x13
call sub.MFC42.DLL_CString::CString
jmp 0x41d59c
push 0x432278
lea ecx, [ebp - 0x1c]
call fcn.00426fcc
push 0x84
call sub.MSVCRT.dll_void____cdecl_operator_new_unsigned_int_
mov edi, eax
add esp, 4
mov dword [ebp - 0x60], edi
test edi, edi
mov byte [ebp - 4], 0x15
je 0x41d602
push ecx
lea edx, [ebp - 0x180]
mov ecx, esp
mov dword [ebp - 0x64], esp
push edx
call sub.MFC42.DLL_CString::CString_2
push ecx
lea eax, [ebp + 8]
mov ecx, esp
mov dword [ebp - 0x48], esp
push eax
mov byte [ebp - 4], 0x16
call sub.MFC42.DLL_CString::CString_2
push ecx
mov byte [ebp - 4], 0x17
mov ecx, esp
mov dword [ebp - 0x68], esp
push 0x4324ac
call sub.MFC42.DLL_CString::CString_2
mov ecx, dword [ebp - 0x14]
mov byte [ebp - 4], 0x15
push ecx
mov ecx, edi
call fcn.00417080
mov edi, eax
jmp 0x41d604
xor edi, edi
test edi, edi
mov byte [ebp - 4], 0x13
je 0x41d639
mov eax, dword [ebp - 0x14]
mov dword [0x4324e4], edi
test eax, eax
jne 0x41d624
test ebx, ebx
je 0x41d624
mov ecx, edi
call fcn.00417fd0
cmp dword [ebp - 0x18c], 1
jne 0x41d639
mov ecx, edi
call fcn.00417e30
mov dword [0x4324e0], eax
mov eax, dword [0x4324b8]
test eax, eax
jne 0x41d8b4
mov eax, dword [ebp - 0x178]
test eax, eax
jne 0x41d6ad
lea ecx, [ebp - 0x6c]
mov byte [ebp - 4], 0x1e
call sub.MFC42.DLL_CString::CString
lea ecx, [ebp - 0x78]
mov byte [ebp - 4], 0x1d
call sub.MFC42.DLL_CString::CString
lea ecx, [ebp - 0x164]
mov byte [ebp - 4], 0x1c
call fcn.00414170
lea ecx, [ebp - 0x168]
mov byte [ebp - 4], 0x1b
call sub.MFC42.DLL_CString::CString
lea ecx, [ebp - 0x17c]
mov byte [ebp - 4], 0x1a
call sub.MFC42.DLL_CString::CString
lea ecx, [ebp - 0x180]
mov byte [ebp - 4], 0x19
call sub.MFC42.DLL_CString::CString
mov byte [ebp - 4], 0x18
jmp 0x41d72d
cmp eax, 1
jne 0x41d813
mov edx, dword [ebp - 0x28]
push 5
push 0
push 0
push edx
push str.open
push 0
call dword [sym.imp.SHELL32.dll_ShellExecuteA]
push 0
call dword [sym.imp.USER32.dll_PostQuitMessage]
lea ecx, [ebp - 0x6c]
mov byte [ebp - 4], 0x25
call sub.MFC42.DLL_CString::CString
lea ecx, [ebp - 0x78]
mov byte [ebp - 4], 0x24
call sub.MFC42.DLL_CString::CString
lea ecx, [ebp - 0x164]
mov byte [ebp - 4], 0x23
call fcn.00414170
lea ecx, [ebp - 0x168]
mov byte [ebp - 4], 0x22
call sub.MFC42.DLL_CString::CString
lea ecx, [ebp - 0x17c]
mov byte [ebp - 4], 0x21
call sub.MFC42.DLL_CString::CString
lea ecx, [ebp - 0x180]
mov byte [ebp - 4], 0x20
call sub.MFC42.DLL_CString::CString
mov byte [ebp - 4], 0x1f
lea ecx, [ebp - 0x184]
call sub.MFC42.DLL_CString::CString
lea ecx, [ebp - 0x1ec]
mov byte [ebp - 4], 0xe
call sub.MFC42.DLL_CDialog::CDialog
lea ecx, [ebp - 0x1c]
mov byte [ebp - 4], 0xd
call sub.MFC42.DLL_CString::CString
lea ecx, [ebp - 0x30]
mov byte [ebp - 4], 0xc
call sub.MFC42.DLL_CString::CString
lea ecx, [ebp - 0x5c]
mov byte [ebp - 4], 0xb
call sub.MFC42.DLL_CFile::CFile
lea ecx, [ebp - 0x38]
mov byte [ebp - 4], 0xa
call sub.MFC42.DLL_CString::CString
lea ecx, [ebp - 0x20]
mov byte [ebp - 4], 9
call sub.MFC42.DLL_CString::CString
lea ecx, [ebp - 0x10]
mov byte [ebp - 4], 8
call sub.MFC42.DLL_CString::CString
lea ecx, [ebp - 0x18]
mov byte [ebp - 4], 7
call sub.MFC42.DLL_CString::CString
lea ecx, [ebp - 0x40]
mov byte [ebp - 4], 6
call sub.MFC42.DLL_CString::CString
lea ecx, [ebp - 0x2c]
mov byte [ebp - 4], 5
call sub.MFC42.DLL_CString::CString
lea ecx, [ebp - 0x3c]
mov byte [ebp - 4], 4
call sub.MFC42.DLL_CString::CString
lea ecx, [ebp - 0x34]
mov byte [ebp - 4], 3
call sub.MFC42.DLL_CString::CString
lea ecx, [ebp - 0x28]
mov byte [ebp - 4], 2
call sub.MFC42.DLL_CString::CString
lea ecx, [ebp - 0x24]
mov byte [ebp - 4], 1
call sub.MFC42.DLL_CString::CString
lea ecx, [ebp - 0x44]
mov byte [ebp - 4], 0
call sub.MFC42.DLL_CString::CString
lea ecx, [ebp + 8]
mov dword [ebp - 4], 0xffffffff
call sub.MFC42.DLL_CString::CString
xor eax, eax
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 4
cmp eax, 2
jne 0x41d8b4
mov ebx, dword [ebp - 0x4c]
lea eax, [ebp - 0x3c]
push eax
lea ecx, [ebx + 0x98]
call fcn.00426fc6
lea ecx, [ebp - 0x34]
lea edi, [ebx + 0x94]
push ecx
mov ecx, edi
call fcn.00426fc6
push edi
lea ecx, [ebx + 0x51c]
call fcn.00426fc6
push 0x4324b4
lea ecx, [ebx + 0x520]
call fcn.00426fc6
push 0x432278
lea ecx, [ebp - 0x14]
call sub.MFC42.DLL_CString::CString_1
mov edx, dword [0x4324ac]
lea ecx, [ebp - 0x14]
push edx
push 0x2800
push 0x2800
mov byte [ebp - 4], 0x26
call sub.MFC42.DLL_CString::GetBuffer
push eax
push 0x432278
push str.CallStackClasses
push str.ExceptionInfo
call esi
push 0xffffffffffffffff
lea ecx, [ebp - 0x14]
call sub.MFC42.DLL_CString::ReleaseBuffer
mov ecx, ebx
call fcn.0041cd30
lea ecx, [ebp - 0x14]
mov byte [ebp - 4], 0x13
call sub.MFC42.DLL_CString::CString
lea ecx, [ebp - 0x6c]
mov byte [ebp - 4], 0x35
call sub.MFC42.DLL_CString::CString
lea ecx, [ebp - 0x78]
mov byte [ebp - 4], 0x34
call sub.MFC42.DLL_CString::CString
lea ecx, [ebp - 0x164]
mov byte [ebp - 4], 0x33
call fcn.00414170
lea ecx, [ebp - 0x168]
mov byte [ebp - 4], 0x32
call sub.MFC42.DLL_CString::CString
lea ecx, [ebp - 0x17c]
mov byte [ebp - 4], 0x31
call sub.MFC42.DLL_CString::CString
lea ecx, [ebp - 0x180]
mov byte [ebp - 4], 0x30
call sub.MFC42.DLL_CString::CString
lea ecx, [ebp - 0x184]
mov byte [ebp - 4], 0x2f
call sub.MFC42.DLL_CString::CString
lea ecx, [ebp - 0x1ec]
mov byte [ebp - 4], 0xe
call sub.MFC42.DLL_CDialog::CDialog
lea ecx, [ebp - 0x1c]
mov byte [ebp - 4], 0xd
call sub.MFC42.DLL_CString::CString
lea ecx, [ebp - 0x30]
mov byte [ebp - 4], 0xc
call sub.MFC42.DLL_CString::CString
lea ecx, [ebp - 0x5c]
mov byte [ebp - 4], 0xb
call sub.MFC42.DLL_CFile::CFile
lea ecx, [ebp - 0x38]
mov byte [ebp - 4], 0xa
call sub.MFC42.DLL_CString::CString
lea ecx, [ebp - 0x20]
mov byte [ebp - 4], 9
call sub.MFC42.DLL_CString::CString
lea ecx, [ebp - 0x10]
mov byte [ebp - 4], 8
call sub.MFC42.DLL_CString::CString
lea ecx, [ebp - 0x18]
mov byte [ebp - 4], 7
call sub.MFC42.DLL_CString::CString
lea ecx, [ebp - 0x40]
mov byte [ebp - 4], 6
call sub.MFC42.DLL_CString::CString
lea ecx, [ebp - 0x2c]
mov byte [ebp - 4], 5
call sub.MFC42.DLL_CString::CString
lea ecx, [ebp - 0x3c]
mov byte [ebp - 4], 4
call sub.MFC42.DLL_CString::CString
lea ecx, [ebp - 0x34]
mov byte [ebp - 4], 3
call sub.MFC42.DLL_CString::CString
lea ecx, [ebp - 0x28]
mov byte [ebp - 4], 2
call sub.MFC42.DLL_CString::CString
lea ecx, [ebp - 0x24]
mov byte [ebp - 4], 1
call sub.MFC42.DLL_CString::CString
lea ecx, [ebp - 0x44]
mov byte [ebp - 4], 0
call sub.MFC42.DLL_CString::CString
lea ecx, [ebp + 8]
mov dword [ebp - 4], 0xffffffff
call sub.MFC42.DLL_CString::CString
mov ecx, dword [ebp - 0xc]
pop edi
mov eax, 1
mov dword fs:[0], ecx
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 4