Function at 0x409ed0
Capabilities:
Read .ini file

Disassembly:
push ebx
mov ebx, esp
sub esp, 8
and esp, 0xfffffff8
add esp, 4
push ebp
mov ebp, dword [ebx + 4]
mov dword [esp + 4], ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x43e274
mov eax, dword fs:[0]
push eax
push ebx
sub esp, 0x580
mov eax, dword [0x44d010]
xor eax, ebp
mov dword [ebp - 0x14], eax
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov edi, edx
mov dword [ebp - 0x53c], edi
mov eax, ecx
mov dword [ebp - 0x540], eax
mov dword [ebp - 0x520], eax
mov ecx, dword [ebx + 8]
mov dword [ebp - 4], 0
mov dword [ebp - 0x55c], ecx
mov ecx, eax
mov dword [ebp - 0x560], eax
push 0x447ed8
mov dword [ebp - 0x518], 0
call fcn.00406c30
mov dword [ebp - 4], 0
lea ecx, [ebp - 0x238]
mov esi, 1
push edi
mov dword [ebp - 0x518], esi
call fcn.00406c30
push 0x208
lea eax, [ebp - 0x220]
mov dword [ebp - 4], esi
push 0
push eax
mov byte [ebp - 0x511], 0
call fcn.00420150
mov edi, dword [ebp - 0x228]
lea edx, [ebp - 0x238]
add esp, 0xc
cmp dword [ebp - 0x224], 8
cmovae edx, dword [ebp - 0x238]
test edi, edi
je 0x40a007
lea eax, [edi - 1]
or ecx, 0xffffffff
cmp eax, ecx
cmovb ecx, eax
cmp word [edx + ecx*2], 0x5c
lea eax, [edx + ecx*2]
je 0x409fd1
cmp eax, edx
je 0x40a007
sub eax, 2
cmp word [eax], 0x5c
jne 0x409fc4
sub eax, edx
sar eax, 1
lea ecx, [eax + 1]
cmp eax, 0xffffffff
je 0x40a007
cmp edi, ecx
jb 0x40a989
cmp dword [ebp - 0x224], 8
lea eax, [ebp - 0x238]
mov dword [ebp - 0x228], ecx
cmovae eax, dword [ebp - 0x238]
xor edx, edx
mov word [eax + ecx*2], dx
jmp 0x40a02a
cmp dword [ebp - 0x224], 8
lea eax, [ebp - 0x238]
mov dword [ebp - 0x228], 0
cmovae eax, dword [ebp - 0x238]
xor ecx, ecx
mov word [eax], cx
mov edi, dword [ebp - 0x53c]
lea ecx, [ebp - 0x538]
mov edx, edi
call fcn.004099a0
cmp dword [eax + 0x14], 8
jb 0x40a045
mov eax, dword [eax]
push eax
push 0x103
lea eax, [ebp - 0x220]
push eax
push 0x447ed8
push str.cur_ver
push str.xbaibrowser
call dword [sym.imp.KERNEL32.dll_GetPrivateProfileStringW]
mov ecx, dword [ebp - 0x524]
cmp ecx, 8
jb 0x40a0a7
mov edx, dword [ebp - 0x538]
lea ecx, [ecx*2 + 2]
mov eax, edx
cmp ecx, 0x1000
jb 0x40a09d
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x40a98e
push ecx
push edx
call fcn.0041e43c
add esp, 8
cmp dword [ebp - 0x224], 8
lea ecx, [ebp - 0x238]
lea edx, [ebp - 0x220]
cmovae ecx, dword [ebp - 0x238]
call fcn.00409b10
test al, al
jne 0x40a5fd
push 0x2a4
lea eax, [ebp - 0x510]
push 0
push eax
call fcn.00420150
add esp, 0xc
lea ecx, [ebp - 0x510]
call fcn.00410a60
push 1
mov byte [ebp - 4], 2
lea eax, [ebp - 0x238]
cmp dword [ebp - 0x224], 8
lea ecx, [ebp - 0x510]
push 0
cmovae eax, dword [ebp - 0x238]
push 0x4481a0
push eax
lea eax, [ebp - 0x268]
push eax
call fcn.00410c70
push 0x447ed8
lea ecx, [ebp - 0x250]
mov byte [ebp - 4], 3
call fcn.00406c30
mov byte [ebp - 4], 4
cmp dword [ebp - 0x258], 0
je 0x40a489
nop dword [eax + eax]
mov ecx, dword [ebp - 0x270]
test ecx, ecx
je 0x40a161
call fcn.004113e0
jmp 0x40a167
mov eax, dword [ebp - 0x50c]
test al, 0x10
je 0x40a393
or esi, 2
test ecx, ecx
je 0x40a184
lea eax, [ebp - 0x558]
push eax
call fcn.004113a0
jmp 0x40a196
lea eax, [ebp - 0x2a0]
push eax
lea ecx, [ebp - 0x558]
call fcn.00407f90
mov dword [ebp - 0x518], esi
mov byte [ebp - 4], 5
lea edx, [ebp - 0x558]
cmp dword [ebp - 0x544], 8
lea ecx, [ebp - 0x238]
cmovae edx, dword [ebp - 0x558]
cmp dword [ebp - 0x224], 8
cmovae ecx, dword [ebp - 0x238]
call fcn.00409b10
mov byte [ebp - 4], 4
mov ecx, dword [ebp - 0x544]
mov byte [ebp - 0x519], al
cmp ecx, 8
jb 0x40a21d
mov edx, dword [ebp - 0x558]
lea ecx, [ecx*2 + 2]
mov eax, edx
cmp ecx, 0x1000
jb 0x40a20d
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x40a98e
push ecx
push edx
call fcn.0041e43c
mov al, byte [ebp - 0x519]
add esp, 8
test al, al
je 0x40a393
mov ecx, dword [ebp - 0x270]
or esi, 4
test ecx, ecx
je 0x40a240
lea eax, [ebp - 0x590]
push eax
call fcn.004113a0
jmp 0x40a252
lea eax, [ebp - 0x2a0]
push eax
lea ecx, [ebp - 0x590]
call fcn.00407f90
cmp dword [ebp - 0x23c], 8
lea eax, [ebp - 0x250]
mov edi, dword [ebp - 0x590]
lea ecx, [ebp - 0x590]
cmovae eax, dword [ebp - 0x250]
cmp dword [ebp - 0x57c], 8
mov dword [ebp - 0x518], esi
cmovae ecx, edi
mov dx, word [ecx]
cmp dx, word [eax]
jne 0x40a2b0
test dx, dx
je 0x40a2a4
mov dx, word [ecx + 2]
cmp dx, word [eax + 2]
jne 0x40a2b0
add ecx, 4
add eax, 4
test dx, dx
jne 0x40a282
mov dword [ebp - 0x520], 0
jmp 0x40a2bb
sbb eax, eax
or eax, 1
mov dword [ebp - 0x520], eax
mov eax, dword [ebp - 0x57c]
cmp eax, 8
jb 0x40a2f5
lea ecx, [eax*2 + 2]
cmp ecx, 0x1000
jb 0x40a2eb
mov edx, dword [edi - 4]
add ecx, 0x23
sub edi, edx
lea eax, [edi - 4]
cmp eax, 0x1f
ja 0x40a98e
mov edi, edx
push ecx
push edi
call fcn.0041e43c
add esp, 8
cmp dword [ebp - 0x520], 0
jle 0x40a393
mov ecx, dword [ebp - 0x270]
or esi, 8
test ecx, ecx
je 0x40a31d
lea eax, [ebp - 0x578]
push eax
call fcn.004113a0
jmp 0x40a32f
lea eax, [ebp - 0x2a0]
push eax
lea ecx, [ebp - 0x578]
call fcn.00407f90
mov ecx, dword [ebp - 0x23c]
mov dword [ebp - 0x518], esi
cmp ecx, 8
jb 0x40a375
mov edx, dword [ebp - 0x250]
lea ecx, [ecx*2 + 2]
mov eax, edx
cmp ecx, 0x1000
jb 0x40a36b
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x40a98e
push ecx
push edx
call fcn.0041e43c
add esp, 8
movups xmm0, xmmword [ebp - 0x578]
movups xmmword [ebp - 0x250], xmm0
movq xmm0, qword [ebp - 0x568]
movq qword [ebp - 0x240], xmm0
lea eax, [ebp - 0x538]
push eax
lea ecx, [ebp - 0x510]
call fcn.00410f80
mov edi, eax
lea eax, [ebp - 0x268]
cmp eax, edi
je 0x40a436
mov ecx, dword [ebp - 0x254]
cmp ecx, 8
jb 0x40a3f5
mov edx, dword [ebp - 0x268]
lea ecx, [ecx*2 + 2]
mov eax, edx
cmp ecx, 0x1000
jb 0x40a3eb
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x40a98e
push ecx
push edx
call fcn.0041e43c
add esp, 8
mov dword [ebp - 0x258], 0
xor eax, eax
mov dword [ebp - 0x254], 7
mov word [ebp - 0x268], ax
movups xmm0, xmmword [edi]
movups xmmword [ebp - 0x268], xmm0
movq xmm0, qword [edi + 0x10]
movq qword [ebp - 0x258], xmm0
mov dword [edi + 0x10], eax
mov dword [edi + 0x14], 7
mov word [edi], ax
mov ecx, dword [ebp - 0x524]
cmp ecx, 8
jb 0x40a476
mov edx, dword [ebp - 0x538]
lea ecx, [ecx*2 + 2]
mov eax, edx
cmp ecx, 0x1000
jb 0x40a46c
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x40a98e
push ecx
push edx
call fcn.0041e43c
add esp, 8
cmp dword [ebp - 0x258], 0
jne 0x40a150
mov edi, dword [ebp - 0x53c]
cmp dword [ebp - 0x240], 0
je 0x40a52c
cmp dword [ebp - 0x23c], 8
lea eax, [ebp - 0x250]
cmovae eax, dword [ebp - 0x250]
push eax
lea eax, [ebp - 0x220]
push 0x103
push eax
call fcn.0042681d
add esp, 0xc
lea ecx, [ebp - 0x538]
mov edx, edi
call fcn.004099a0
cmp dword [eax + 0x14], 8
jb 0x40a4d4
mov eax, dword [eax]
push eax
lea eax, [ebp - 0x220]
push eax
push str.cur_ver
push str.xbaibrowser
call dword [sym.imp.KERNEL32.dll_WritePrivateProfileStringW]
mov ecx, dword [ebp - 0x524]
cmp ecx, 8
jb 0x40a52c
mov edx, dword [ebp - 0x538]
lea ecx, [ecx*2 + 2]
mov eax, edx
cmp ecx, 0x1000
jb 0x40a522
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x40a993
push ecx
push edx
call fcn.0041e43c
add esp, 8
mov byte [ebp - 4], 3
mov ecx, dword [ebp - 0x23c]
cmp ecx, 8
jb 0x40a570
mov edx, dword [ebp - 0x250]
lea ecx, [ecx*2 + 2]
mov eax, edx
cmp ecx, 0x1000
jb 0x40a566
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x40a998
push ecx
push edx
call fcn.0041e43c
add esp, 8
xor eax, eax
mov byte [ebp - 4], 2
mov ecx, dword [ebp - 0x254]
mov dword [ebp - 0x240], 0
mov dword [ebp - 0x23c], 7
mov word [ebp - 0x250], ax
cmp ecx, 8
jb 0x40a5d1
mov edx, dword [ebp - 0x268]
lea ecx, [ecx*2 + 2]
mov eax, edx
cmp ecx, 0x1000
jb 0x40a5c7
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x40a998
push ecx
push edx
call fcn.0041e43c
add esp, 8
xor eax, eax
mov dword [ebp - 0x258], 0
lea ecx, [ebp - 0x510]
mov dword [ebp - 0x254], 7
mov word [ebp - 0x268], ax
mov byte [ebp - 4], 1
call fcn.00410b10
cmp dword [ebp - 0x224], 8
lea ecx, [ebp - 0x238]
lea edx, [ebp - 0x220]
cmovae ecx, dword [ebp - 0x238]
call fcn.00409b10
test al, al
je 0x40a89a
push ecx
lea edx, [ebp - 0x220]
lea ecx, [ebp - 0x538]
call fcn.00417320
mov ecx, dword [ebp - 0x524]
add esp, 4
cmp ecx, 0x10
jb 0x40a673
mov edx, dword [ebp - 0x538]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x40a669
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x40a99d
push ecx
push edx
call fcn.0041e43c
add esp, 8
lea ecx, [ebp - 0x220]
lea edx, [ecx + 2]
nop dword [eax]
mov ax, word [ecx]
add ecx, 2
test ax, ax
jne 0x40a680
sub ecx, edx
mov eax, bind
mov edx, dword [ebp - 0x228]
sub eax, edx
sar ecx, 1
cmp eax, ecx
jb 0x40a9a2
cmp dword [ebp - 0x224], 8
lea eax, [ebp - 0x238]
push ecx
cmovae eax, dword [ebp - 0x238]
lea ecx, [ebp - 0x220]
push ecx
push edx
push eax
push ecx
push dword [ebp - 0x560]
lea ecx, [ebp - 0x538]
call fcn.00408ad0
or esi, 0x10
mov dword [ebp - 0x518], esi
push 1
push 0x447e7c
lea ecx, [ebp - 0x538]
mov byte [ebp - 4], 6
call fcn.004072d0
mov dword [ebp - 0x548], 0
xorps xmm0, xmm0
movups xmmword [ebp - 0x558], xmm0
mov dword [ebp - 0x544], 0
xor ecx, ecx
movups xmm0, xmmword [eax]
or esi, 0x20
mov dword [ebp - 0x518], esi
movups xmmword [ebp - 0x558], xmm0
movq xmm0, qword [eax + 0x10]
movq qword [ebp - 0x548], xmm0
mov dword [eax + 0x10], 0
mov dword [eax + 0x14], 7
mov word [eax], cx
mov ecx, str.xbaibrowser.exe
mov byte [ebp - 4], 7
lea edx, [ecx + 2]
mov ax, word [ecx]
add ecx, 2
test ax, ax
jne 0x40a750
sub ecx, edx
sar ecx, 1
push ecx
push str.xbaibrowser.exe
lea ecx, [ebp - 0x558]
call fcn.004072d0
mov esi, dword [ebp - 0x540]
xor ecx, ecx
movups xmm0, xmmword [eax]
movups xmmword [ebp - 0x578], xmm0
movq xmm0, qword [eax + 0x10]
mov word [eax], cx
mov ecx, esi
mov dword [eax + 0x10], 0
mov dword [eax + 0x14], 7
lea eax, [ebp - 0x578]
push eax
movq qword [ebp - 0x568], xmm0
call fcn.004089d0
mov ecx, dword [ebp - 0x564]
cmp ecx, 8
jb 0x40a7ee
mov edx, dword [ebp - 0x578]
lea ecx, [ecx*2 + 2]
mov eax, edx
cmp ecx, 0x1000
jb 0x40a7e4
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x40a9a7
push ecx
push edx
call fcn.0041e43c
add esp, 8
mov ecx, dword [ebp - 0x544]
cmp ecx, 8
jb 0x40a82e
mov edx, dword [ebp - 0x558]
lea ecx, [ecx*2 + 2]
mov eax, edx
cmp ecx, 0x1000
jb 0x40a824
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x40a9a7
push ecx
push edx
call fcn.0041e43c
add esp, 8
mov ecx, dword [ebp - 0x524]
xor eax, eax
mov dword [ebp - 0x548], 0
mov dword [ebp - 0x544], 7
mov word [ebp - 0x558], ax
cmp ecx, 8
jb 0x40a921
mov edx, dword [ebp - 0x538]
lea ecx, [ecx*2 + 2]
mov eax, edx
cmp ecx, 0x1000
jb 0x40a885
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x40a9a7
push ecx
push edx
call fcn.0041e43c
mov al, byte [ebp - 0x511]
add esp, 8
jmp 0x40a921
mov edx, 0x26
lea ecx, [ebp - 0x538]
call fcn.0040f790
or esi, 0x80
lea eax, [ebp - 0x538]
mov dword [ebp - 0x518], esi
mov esi, dword [ebp - 0x540]
mov ecx, esi
push eax
call fcn.004089d0
mov ecx, dword [ebp - 0x524]
cmp ecx, 8
jb 0x40a90a
mov edx, dword [ebp - 0x538]
lea ecx, [ecx*2 + 2]
mov eax, edx
cmp ecx, 0x1000
jb 0x40a900
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x40a9ac
push ecx
push edx
call fcn.0041e43c
add esp, 8
push 0x1f
push str.Internet_Exploreriexplore.exe
mov ecx, esi
call fcn.004072d0
mov ecx, esi
call fcn.0040fb30
mov al, 1
mov ecx, dword [ebp - 0x55c]
test ecx, ecx
je 0x40a92d
mov byte [ecx], al
mov ecx, dword [ebp - 0x224]
cmp ecx, 8
jb 0x40a969
mov edx, dword [ebp - 0x238]
lea ecx, [ecx*2 + 2]
mov eax, edx
cmp ecx, 0x1000
jb 0x40a95f
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x40a9b1
push ecx
push edx
call fcn.0041e43c
add esp, 8
mov eax, esi
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
mov ecx, dword [ebp - 0x14]
xor ecx, ebp
call fcn.0041e3f9
mov esp, ebp
pop ebp
mov esp, ebx
pop ebx
ret
call fcn.00407450
call fcn.004267cc
call fcn.004267cc
call fcn.004267cc
call fcn.004267cc
call fcn.00401320
call fcn.004267cc
call fcn.004267cc
call fcn.004267cc
int3