Function at 0x408951
Capabilities:
Read .ini file

Disassembly:
mov eax, 0x421a58
call fcn.004175e4
mov eax, 0x1c44
call fcn.004176e0
push ebx
push esi
push edi
mov dword [ebp - 0x1c], ecx
call fcn.00401046
and byte [ebp - 0x450], 0
mov ebx, eax
mov ecx, 0xff
xor eax, eax
lea edi, [ebp - 0x44f]
rep stosd dword es:[edi], eax
stosw word es:[edi], ax
stosb byte es:[edi], al
cmp dword [ebx + 0x10ac], 1
jbe 0x408a57
cmp dword [ebx + 0x14b4], 0
jne 0x408a57
cmp dword [ebx + 0x14bc], 5
je 0x408a57
mov esi, str.TRANSFORMS_
lea edi, [ebp - 0x3c]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsb byte es:[edi], byte [esi]
xor eax, eax
lea edi, [ebp - 0x2f]
stosd dword es:[edi], eax
stosd dword es:[edi], eax
stosd dword es:[edi], eax
stosd dword es:[edi], eax
stosb byte es:[edi], al
lea eax, [ebp - 0x3c]
lea edi, [ebx + 0x10b4]
push eax
push edi
call fcn.004180e0
mov esi, eax
pop ecx
test esi, esi
pop ecx
jne 0x408a01
lea eax, [ebp - 0x3c]
push str.TRANSFORMS
push eax
call fcn.00417060
lea eax, [ebp - 0x3c]
push eax
push edi
call fcn.004180e0
mov esi, eax
add esp, 0x10
test esi, esi
je 0x408a36
lea eax, [ebp - 0x3c]
push eax
call fcn.00417a80
pop ecx
add eax, esi
and byte [esi], 0
push eax
lea eax, [ebx + 0xcac]
mov esi, dword [sym.imp.USER32.dll_wsprintfA]
push eax
lea eax, [ebp - 0x3c]
push eax
push edi
lea eax, [ebp - 0x450]
push str._s_s_s__s
push eax
call esi
add esp, 0x18
jmp 0x408a75
mov esi, dword [sym.imp.USER32.dll_wsprintfA]
lea eax, [ebx + 0xcac]
push eax
push edi
lea eax, [ebp - 0x450]
push str._s_TRANSFORMS__s_
push eax
call esi
add esp, 0x10
jmp 0x408a75
mov esi, dword [sym.imp.USER32.dll_wsprintfA]
lea eax, [ebx + 0x10b4]
push eax
lea eax, [ebp - 0x450]
push 0x4271e4
push eax
call esi
add esp, 0xc
and byte [ebp - 0x850], 0
mov edx, 0xff
mov ecx, edx
xor eax, eax
lea edi, [ebp - 0x84f]
and byte [ebp - 0x1c50], 0
rep stosd dword es:[edi], eax
stosw word es:[edi], ax
stosb byte es:[edi], al
mov ecx, edx
xor eax, eax
lea edi, [ebp - 0x1c4f]
rep stosd dword es:[edi], eax
stosw word es:[edi], ax
stosb byte es:[edi], al
lea eax, [ebp - 0x1c50]
mov ecx, ebx
push eax
lea eax, [ebp - 0x850]
push eax
call fcn.0040f472
push eax
call fcn.00411de3
lea eax, [ebp - 0x850]
push eax
call dword [sym.imp.KERNEL32.dll_lstrlenA]
cmp byte [ebp + eax - 0x851], 0x5c
lea eax, [ebp + eax - 0x851]
jne 0x408ae2
and byte [eax], 0
cmp dword [ebp + 0x10], 0
jne 0x408b59
and byte [ebp - 0xc50], 0
mov ecx, 0xff
xor eax, eax
lea edi, [ebp - 0xc4f]
rep stosd dword es:[edi], eax
stosw word es:[edi], ax
stosb byte es:[edi], al
lea eax, [ebp - 0x850]
push eax
lea eax, [ebp - 0xc50]
push dword [0x423600]
push str._s__s_
push eax
call fcn.00418238
add esp, 0x10
lea eax, [ebp - 0xc50]
mov ecx, ebx
push 1
push eax
push 0x4271b0
call fcn.004102c1
lea eax, [ebp - 0xc50]
push eax
lea eax, [ebp - 0x450]
push eax
lea eax, [ebp - 0x450]
push str._s__s
push eax
call fcn.00418238
add esp, 0x10
and byte [ebp - 0x1050], 0
mov ecx, 0xff
xor eax, eax
lea edi, [ebp - 0x104f]
rep stosd dword es:[edi], eax
stosw word es:[edi], ax
stosb byte es:[edi], al
mov eax, dword [ebx + 0x14bc]
dec eax
je 0x408c4e
dec eax
je 0x408c30
dec eax
je 0x408c06
dec eax
je 0x408bef
dec eax
lea eax, [ebp - 0x450]
push eax
push dword [ebp + 8]
push dword [0x428200]
je 0x408ba9
push str._s__i___s___s
jmp 0x408c63
lea eax, [ebp - 0x1850]
push str._s__p___s___s
push eax
call esi
add esp, 0x14
lea eax, [ebp - 0x450]
push eax
lea eax, [ebp - 0x1050]
push dword [ebp + 8]
push str._p__s___s
push eax
call esi
add esp, 0x10
lea eax, [ebp - 0x1050]
mov ecx, ebx
push 1
push eax
push 0x4271b0
call fcn.004102c1
jmp 0x408c6f
lea eax, [ebp - 0x450]
push eax
push dword [ebp + 8]
push dword [0x428200]
push str._s__x___s___s
jmp 0x408c63
lea eax, [ebp - 0x450]
push eax
lea eax, [ebx + 0x14c0]
push dword [ebp + 8]
push eax
push dword [0x428200]
push str._s__j_s___s___s
lea eax, [ebp - 0x1850]
push eax
call esi
add esp, 0x18
jmp 0x408c6f
lea eax, [ebp - 0x450]
push eax
lea eax, [ebx + 0x14c0]
push dword [ebp + 8]
push eax
push dword [0x428200]
push str._s__f_s___s___s
jmp 0x408c22
lea eax, [ebp - 0x450]
push eax
push dword [ebp + 8]
push dword [0x428200]
push str._s__a___s__s
lea eax, [ebp - 0x1850]
push eax
call esi
add esp, 0x14
xor esi, esi
cmp dword [ebp + 0x10], esi
je 0x408c8b
mov ecx, dword [ebp - 0x1c]
lea eax, [ebp - 0x450]
push esi
push eax
call fcn.00408f77
jmp 0x408f57
mov edi, dword [ebp - 0x1c]
cmp dword [edi + 0x10], esi
je 0x408eb8
push esi
call dword [sym.imp.ole32.dll_CoInitialize]
mov dword [ebp - 0x10], esi
mov ecx, edi
mov dword [ebp - 4], esi
call fcn.00408f6b
test al, al
je 0x408cc3
push 1
push esi
lea eax, [ebp - 0x10]
push esi
push eax
push 0x427a30
push 0x423a68
jmp 0x408cea
push 0x42dba8
push esi
push str.RunAsLaunchingUser
push str.Startup
call dword [sym.imp.KERNEL32.dll_GetPrivateProfileIntA]
push eax
push esi
lea eax, [ebp - 0x10]
push esi
push eax
push 0x427a30
push 0x423a58
call fcn.00404edd
cmp eax, esi
jge 0x408d43
mov ecx, 0x80029c4a
cmp eax, ecx
jne 0x408d17
mov eax, 0x66f
push ecx
push 0x648
push eax
mov dword [0x42ea7c], eax
call fcn.0041188b
add esp, 0xc
jmp 0x408d2b
mov ecx, 0x648
push eax
push ecx
mov dword [0x42ea7c], ecx
call fcn.00411822
pop ecx
pop ecx
mov eax, dword [ebp - 0x10]
or dword [ebp - 4], 0xffffffff
cmp eax, esi
je 0x408d3c
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
xor eax, eax
jmp 0x408f5a
mov dword [ebp - 0x14], esi
cmp dword [ebx + 0x14bc], 5
mov byte [ebp - 4], 1
je 0x408d61
push esi
call dword [sym.imp.OLEAUT32.dll_SysStringLen]
push 0xffffffffffffffff
push dword [ebp + 8]
jmp 0x408d9f
and byte [ebp - 0x50], 0
push 0xc
pop ecx
xor eax, eax
lea edi, [ebp - 0x4f]
push 0x42dba8
rep stosd dword es:[edi], eax
stosb byte es:[edi], al
lea eax, [ebp - 0x50]
push 0x32
push eax
push 0x42bad0
push dword [0x4235c4]
push dword [0x4235b8]
call dword [sym.imp.KERNEL32.dll_GetPrivateProfileStringA]
push esi
call dword [sym.imp.OLEAUT32.dll_SysStringLen]
lea eax, [ebp - 0x50]
push 0xffffffffffffffff
push eax
call fcn.00403321
mov dword [ebp - 0x14], eax
mov eax, dword [ebx + 0x14b8]
pop ecx
cmp eax, esi
pop ecx
je 0x408dc6
cmp dword [ebx + 0x10ac], 1
jbe 0x408dc6
mov ecx, dword [ebp - 0x10]
push eax
push ecx
mov edx, dword [ecx]
call dword [edx + 0x20]
lea eax, [ebp - 0x18]
mov dword [ebp - 0x18], esi
push eax
call fcn.0040dcc6
mov eax, dword [ebp - 0x18]
push eax
mov ecx, dword [eax]
call dword [ecx + 4]
mov eax, dword [ebp - 0x10]
push dword [ebp - 0x18]
mov ecx, dword [eax]
push eax
call dword [ecx + 0x64]
lea ecx, [ebx + 0x2e14]
mov dword [ebp + 0x10], esi
call fcn.0040c6ce
mov eax, dword [eax]
mov ecx, dword [ebp - 0x10]
lea edi, [ebp + 0x10]
mov edx, dword [ecx]
push edi
push eax
push esi
push dword [ebp - 0x14]
push ecx
call dword [edx + 0x28]
cmp dword [ebp + 0x10], esi
jne 0x408e16
cmp eax, esi
je 0x408e16
or dword [ebp + 0x10], 0xffffffff
mov ecx, ebx
call fcn.004102ad
test eax, eax
je 0x408e36
cmp dword [ebp + 0x10], 0xfffffff8
je 0x408e6c
cmp dword [ebp + 0x10], 0xfffffffd
jne 0x408e36
push 1
mov ecx, ebx
call fcn.004102a0
mov eax, dword [ebp + 0x10]
cmp eax, 0xfffffff8
je 0x408e6c
cmp eax, 0xfffffff9
je 0x408e65
cmp eax, 0xfffffffc
je 0x408e5e
cmp eax, 0xfffffffd
je 0x408e82
cmp eax, esi
je 0x408e82
push 0x65c
call fcn.00411822
pop ecx
jmp 0x408e82
push 0x65d
jmp 0x408e56
push 0x66c
jmp 0x408e56
mov ecx, dword [ebp - 0x1c]
push 1
pop eax
mov dword [ecx + 0xc], eax
push eax
lea eax, [ebp - 0x450]
push eax
call fcn.00408f77
mov eax, dword [ebp + 0x10]
mov dword [0x42ea7c], eax
mov eax, dword [ebp - 0x18]
push eax
mov ecx, dword [eax]
call dword [ecx + 8]
push dword [ebp - 0x14]
call dword [sym.imp.OLEAUT32.dll_SysStringLen]
mov eax, dword [ebp - 0x10]
or dword [ebp - 4], 0xffffffff
cmp eax, esi
je 0x408ead
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
call dword [sym.imp.ole32.dll_CoUninitialize]
jmp 0x408f57
call fcn.00406503
call fcn.004064c9
mov ecx, ebx
call fcn.00410270
test eax, eax
jne 0x408ef6
mov ecx, ebx
call fcn.004102ad
test eax, eax
jne 0x408ef6
lea eax, [ebp - 0x1850]
push 1
push eax
call fcn.00412401
test eax, eax
jne 0x408f57
mov dword [0x42ea7c], 0x485
jmp 0x408f57
lea eax, [ebp - 0x1850]
push 1
push eax
call fcn.00412324
mov esi, eax
cmp esi, 0xcccccccc
jne 0x408f18
mov dword [0x42ea7c], 0x485
mov ecx, ebx
call fcn.004102ad
test eax, eax
je 0x408f3c
cmp esi, 0x669
je 0x408f3c
cmp esi, 0x642
jne 0x408f3c
push 1
mov ecx, ebx
call fcn.004102a0
push dword [ebp + 8]
mov ecx, edi
call fcn.0040bf97
test eax, eax
je 0x408f57
push dword [ebp + 8]
mov ecx, edi
call fcn.00409a24
mov dword [edi + 0xc], eax
push 1
pop eax
mov ecx, dword [ebp - 0xc]
pop edi
pop esi
pop ebx
mov dword fs:[0], ecx
leave
ret 0xc