Function at 0x44f6bf
Capabilities:
Get file size
Persist via run registry key
Query or enumerate registry value
Read .ini file
Read file on windows
Set registry value

Disassembly:
push ebp
mov ebp, esp
mov eax, 0x3c98
call fcn.00465440
push edi
mov dword [ebp - 0x3c98], ecx
mov al, byte [0x4d3670]
mov byte [ebp - 0x1004], al
mov ecx, 0x400
xor eax, eax
lea edi, [ebp - 0x1003]
rep stosd dword es:[edi], eax
mov cl, byte [0x4d3674]
mov byte [ebp - 0x110c], cl
mov ecx, 0x41
xor eax, eax
lea edi, [ebp - 0x110b]
rep stosd dword es:[edi], eax
push 0x105
lea edx, [ebp - 0x110c]
push edx
push 0
call dword [sym.imp.KERNEL32.dll_GetModuleFileNameA]
push 0x5c
lea eax, [ebp - 0x110c]
push eax
call fcn.00466be0
add esp, 8
mov byte [eax], 0
mov cl, byte [0x4d3678]
mov byte [ebp - 0x1324], cl
mov ecx, 0x41
xor eax, eax
lea edi, [ebp - 0x1323]
rep stosd dword es:[edi], eax
lea edx, [ebp - 0x110c]
push edx
push 0x4a9a64
lea eax, [ebp - 0x1324]
push eax
call fcn.004650e4
add esp, 0xc
lea ecx, [ebp - 0x1324]
push ecx
push 0x1000
lea edx, [ebp - 0x1004]
push edx
push str.a.root_servers.net
push 0x4a9a88
push 0x4a9a94
call dword [sym.imp.KERNEL32.dll_GetPrivateProfileStringA]
lea eax, [ebp - 0x1004]
push eax
mov ecx, dword [ebp - 0x3c98]
add ecx, 0x38ec
push ecx
call fcn.00465350
add esp, 8
lea edx, [ebp - 0x1324]
push edx
push 0x1000
lea eax, [ebp - 0x1004]
push eax
push str.b.root_servers.net
push 0x4a9ab0
push 0x4a9ac0
call dword [sym.imp.KERNEL32.dll_GetPrivateProfileStringA]
lea ecx, [ebp - 0x1004]
push ecx
mov edx, dword [ebp - 0x3c98]
add edx, 0x3cec
push edx
call fcn.00465350
add esp, 8
lea eax, [ebp - 0x1324]
push eax
push 0x1000
lea ecx, [ebp - 0x1004]
push ecx
push 0x4a9ac8
push 0x4a9acc
push 0x4a9ad8
call dword [sym.imp.KERNEL32.dll_GetPrivateProfileStringA]
lea edx, [ebp - 0x1004]
push edx
call fcn.004659a3
add esp, 4
mov ecx, dword [ebp - 0x3c98]
mov dword [ecx + 0x40ec], eax
lea edx, [ebp - 0x1324]
push edx
push 0x1000
lea eax, [ebp - 0x1004]
push eax
push 0x4a9ae0
push 0x4a9ae4
push 0x4a9af4
call dword [sym.imp.KERNEL32.dll_GetPrivateProfileStringA]
lea ecx, [ebp - 0x1004]
push ecx
call fcn.004659a3
add esp, 4
mov edx, dword [ebp - 0x3c98]
mov dword [edx + 0x40f0], eax
lea eax, [ebp - 0x1324]
push eax
push 0x1000
lea ecx, [ebp - 0x1004]
push ecx
push 0x4a9afc
push 0x4a9b00
push 0x4a9b0c
call dword [sym.imp.KERNEL32.dll_GetPrivateProfileStringA]
lea edx, [ebp - 0x1004]
push edx
call fcn.004659a3
add esp, 4
mov ecx, dword [ebp - 0x3c98]
mov dword [ecx + 0x40f4], eax
lea edx, [ebp - 0x1324]
push edx
push 0x1000
lea eax, [ebp - 0x1004]
push eax
push 0x4a9b14
push 0x4a9b18
push 0x4a9b24
call dword [sym.imp.KERNEL32.dll_GetPrivateProfileStringA]
lea ecx, [ebp - 0x1004]
push ecx
call fcn.004659a3
add esp, 4
mov edx, dword [ebp - 0x3c98]
mov dword [edx + 0x40f8], eax
lea eax, [ebp - 0x1324]
push eax
push 0x1000
lea ecx, [ebp - 0x1004]
push ecx
push 0x4a9b2c
push 0x4a9b30
push 0x4a9b3c
call dword [sym.imp.KERNEL32.dll_GetPrivateProfileStringA]
lea edx, [ebp - 0x1004]
push edx
call fcn.004659a3
add esp, 4
mov ecx, dword [ebp - 0x3c98]
mov dword [ecx + 0x40fc], eax
lea edx, [ebp - 0x1324]
push edx
push 0x1000
lea eax, [ebp - 0x1004]
push eax
push 0x4a9b44
push 0x4a9b48
push 0x4a9b54
call dword [sym.imp.KERNEL32.dll_GetPrivateProfileStringA]
lea ecx, [ebp - 0x1004]
push ecx
call fcn.004659a3
add esp, 4
mov edx, dword [ebp - 0x3c98]
mov dword [edx + 0x4100], eax
lea eax, [ebp - 0x1324]
push eax
push 0
push 0x4a9b5c
push 0x4a9b68
call dword [sym.imp.KERNEL32.dll_GetPrivateProfileIntA]
mov ecx, dword [ebp - 0x3c98]
mov dword [ecx + 0x4104], eax
lea edx, [ebp - 0x1324]
push edx
push 0x1000
mov eax, dword [ebp - 0x3c98]
add eax, 0x60
push eax
push 0x4d367c
push 0x4a9b70
push 0x4a9b80
call dword [sym.imp.KERNEL32.dll_GetPrivateProfileStringA]
lea ecx, [ebp - 0x1324]
push ecx
push 0x1000
lea edx, [ebp - 0x1004]
push edx
push 0x4d3680
push 0x4a9b88
push 0x4a9b94
call dword [sym.imp.KERNEL32.dll_GetPrivateProfileStringA]
lea eax, [ebp - 0x1004]
push eax
mov ecx, dword [ebp - 0x3c98]
add ecx, 0x460
push ecx
call fcn.00465350
add esp, 8
lea edx, [ebp - 0x1324]
push edx
push 0x1000
lea eax, [ebp - 0x1004]
push eax
push 0x4d3684
push 0x4a9b9c
push 0x4a9ba8
call dword [sym.imp.KERNEL32.dll_GetPrivateProfileStringA]
lea ecx, [ebp - 0x1004]
push ecx
call fcn.0042b8e0
add esp, 4
lea edx, [ebp - 0x1004]
push edx
mov eax, dword [ebp - 0x3c98]
add eax, 0x860
push eax
call fcn.00465350
add esp, 8
lea ecx, [ebp - 0x1324]
push ecx
push 0x1000
lea edx, [ebp - 0x1004]
push edx
push 0x4a9bb0
push 0x4a9bb4
push 0x4a9bc0
call dword [sym.imp.KERNEL32.dll_GetPrivateProfileStringA]
lea eax, [ebp - 0x1004]
push eax
call fcn.004659a3
add esp, 4
mov ecx, dword [ebp - 0x3c98]
mov dword [ecx + 0xc64], eax
lea edx, [ebp - 0x1324]
push edx
push 0x1000
lea eax, [ebp - 0x1004]
push eax
push 0x4a9bc8
push 0x4a9bcc
push 0x4a9bdc
call dword [sym.imp.KERNEL32.dll_GetPrivateProfileStringA]
lea ecx, [ebp - 0x1004]
push ecx
call fcn.004659a3
add esp, 4
mov edx, dword [ebp - 0x3c98]
mov dword [edx + 0xc60], eax
lea eax, [ebp - 0x1324]
push eax
push 0x1000
lea ecx, [ebp - 0x1004]
push ecx
push 0x4a9be4
push 0x4a9be8
push 0x4a9bf4
call dword [sym.imp.KERNEL32.dll_GetPrivateProfileStringA]
lea edx, [ebp - 0x1004]
push edx
call fcn.004659a3
add esp, 4
mov ecx, dword [ebp - 0x3c98]
mov dword [ecx + 0xc68], eax
lea edx, [ebp - 0x1324]
push edx
push 0x1000
lea eax, [ebp - 0x1004]
push eax
push 0x4a9bfc
push 0x4a9c00
push 0x4a9c04
call dword [sym.imp.KERNEL32.dll_GetPrivateProfileStringA]
lea ecx, [ebp - 0x1004]
push ecx
call fcn.004659a3
add esp, 4
mov edx, dword [ebp - 0x3c98]
mov dword [edx + 0xc74], eax
lea eax, [ebp - 0x1324]
push eax
push 0x1000
lea ecx, [ebp - 0x1004]
push ecx
push 0x4a9c0c
push 0x4a9c10
push 0x4a9c18
call dword [sym.imp.KERNEL32.dll_GetPrivateProfileStringA]
lea edx, [ebp - 0x1004]
push edx
call fcn.004659a3
add esp, 4
mov ecx, dword [ebp - 0x3c98]
mov dword [ecx + 0xc78], eax
lea edx, [ebp - 0x1324]
push edx
push 0x1000
lea eax, [ebp - 0x1004]
push eax
push 0x4a9c20
push 0x4a9c24
push 0x4a9c28
call dword [sym.imp.KERNEL32.dll_GetPrivateProfileStringA]
lea ecx, [ebp - 0x1004]
push ecx
call fcn.004659a3
add esp, 4
mov edx, dword [ebp - 0x3c98]
mov dword [edx + 0xc7c], eax
lea eax, [ebp - 0x1324]
push eax
push 0x1000
lea ecx, [ebp - 0x1004]
push ecx
push 0x4a9c30
push 0x4a9c34
push 0x4a9c3c
call dword [sym.imp.KERNEL32.dll_GetPrivateProfileStringA]
lea edx, [ebp - 0x1004]
push edx
call fcn.004659a3
add esp, 4
mov ecx, dword [ebp - 0x3c98]
mov dword [ecx + 0xc80], eax
lea edx, [ebp - 0x1324]
push edx
push 0x1000
lea eax, [ebp - 0x1004]
push eax
push 0x4a9c44
push 0x4a9c48
push 0x4a9c50
call dword [sym.imp.KERNEL32.dll_GetPrivateProfileStringA]
lea ecx, [ebp - 0x1004]
push ecx
call fcn.004659a3
add esp, 4
mov edx, dword [ebp - 0x3c98]
mov dword [edx + 0xc84], eax
lea eax, [ebp - 0x1324]
push eax
push 0x1000
lea ecx, [ebp - 0x1004]
push ecx
push 0x4a9c58
push 0x4a9c5c
push 0x4a9c64
call dword [sym.imp.KERNEL32.dll_GetPrivateProfileStringA]
lea edx, [ebp - 0x1004]
push edx
call fcn.004659a3
add esp, 4
mov ecx, dword [ebp - 0x3c98]
mov dword [ecx + 0xc88], eax
lea edx, [ebp - 0x1324]
push edx
push 0x1000
lea eax, [ebp - 0x1004]
push eax
push 0x4a9c6c
push 0x4a9c70
push 0x4a9c78
call dword [sym.imp.KERNEL32.dll_GetPrivateProfileStringA]
lea ecx, [ebp - 0x1004]
push ecx
call fcn.004659a3
add esp, 4
mov edx, dword [ebp - 0x3c98]
mov dword [edx + 0xc8c], eax
lea eax, [ebp - 0x1324]
push eax
push 0x1000
lea ecx, [ebp - 0x1004]
push ecx
push 0x4a9c80
push 0x4a9c84
push 0x4a9c94
call dword [sym.imp.KERNEL32.dll_GetPrivateProfileStringA]
lea edx, [ebp - 0x1004]
push edx
call fcn.004659a3
add esp, 4
mov ecx, dword [ebp - 0x3c98]
mov dword [ecx + 0xc6c], eax
lea edx, [ebp - 0x1324]
push edx
push 0x1000
lea eax, [ebp - 0x1004]
push eax
push 0x4a9c9c
push 0x4a9ca0
push 0x4a9cb8
call dword [sym.imp.KERNEL32.dll_GetPrivateProfileStringA]
lea ecx, [ebp - 0x1004]
push ecx
call fcn.004659a3
add esp, 4
mov edx, dword [ebp - 0x3c98]
mov dword [edx + 0xc70], eax
lea eax, [ebp - 0x1324]
push eax
push 0x1000
lea ecx, [ebp - 0x1004]
push ecx
push 0x4a9cc0
push 0x4a9cc4
push 0x4a9cd4
call dword [sym.imp.KERNEL32.dll_GetPrivateProfileStringA]
lea edx, [ebp - 0x1004]
push edx
call fcn.004659a3
add esp, 4
mov ecx, dword [ebp - 0x3c98]
mov dword [ecx + 0x50], eax
lea edx, [ebp - 0x1324]
push edx
push 0x1000
lea eax, [ebp - 0x1004]
push eax
push 0x4a9cdc
push 0x4a9ce0
push 0x4a9cf0
call dword [sym.imp.KERNEL32.dll_GetPrivateProfileStringA]
lea ecx, [ebp - 0x1004]
push ecx
call fcn.004659a3
add esp, 4
mov edx, dword [ebp - 0x3c98]
mov dword [edx + 0x54], eax
lea eax, [ebp - 0x1324]
push eax
push 0x1000
lea ecx, [ebp - 0x1004]
push ecx
push 0x4a9cf8
push 0x4a9cfc
push 0x4a9d08
call dword [sym.imp.KERNEL32.dll_GetPrivateProfileStringA]
lea edx, [ebp - 0x1004]
push edx
call fcn.004659a3
add esp, 4
mov ecx, dword [ebp - 0x3c98]
mov dword [ecx + 0x4c], eax
lea edx, [ebp - 0x1324]
push edx
push 0x1000
lea eax, [ebp - 0x1004]
push eax
push 0x4a9d10
push 0x4a9d14
push 0x4a9d20
call dword [sym.imp.KERNEL32.dll_GetPrivateProfileStringA]
lea ecx, [ebp - 0x1004]
push ecx
call fcn.004659a3
add esp, 4
mov edx, dword [ebp - 0x3c98]
mov dword [edx + 0x58], eax
lea eax, [ebp - 0x1324]
push eax
push 0x1000
lea ecx, [ebp - 0x1004]
push ecx
push 0x4a9d28
push 0x4a9d2c
push 0x4a9d3c
call dword [sym.imp.KERNEL32.dll_GetPrivateProfileStringA]
lea edx, [ebp - 0x1004]
push edx
call fcn.004659a3
add esp, 4
mov ecx, dword [ebp - 0x3c98]
mov dword [ecx + 0x4108], eax
lea edx, [ebp - 0x1324]
push edx
push 0x1000
lea eax, [ebp - 0x1004]
push eax
push 0x4d3688
push 0x4a9d44
push 0x4a9d50
call dword [sym.imp.KERNEL32.dll_GetPrivateProfileStringA]
lea ecx, [ebp - 0x1004]
push ecx
mov edx, dword [ebp - 0x3c98]
add edx, 0x410c
push edx
call fcn.00465350
add esp, 8
lea eax, [ebp - 0x1324]
push eax
push 0x1000
lea ecx, [ebp - 0x1004]
push ecx
push 0x4a9d60
push 0x4a9d68
push 0x4a9d74
call dword [sym.imp.KERNEL32.dll_GetPrivateProfileStringA]
lea edx, [ebp - 0x1004]
push edx
mov eax, dword [ebp - 0x3c98]
add eax, 0x450c
push eax
call fcn.00465350
add esp, 8
lea ecx, [ebp - 0x1324]
push ecx
push 0x1000
lea edx, [ebp - 0x1004]
push edx
push 0x4a9d84
push 0x4a9d88
push 0x4a9d90
call dword [sym.imp.KERNEL32.dll_GetPrivateProfileStringA]
lea eax, [ebp - 0x1004]
push eax
call fcn.004659a3
add esp, 4
mov ecx, dword [ebp - 0x3c98]
mov dword [ecx + 0x490c], eax
lea edx, [ebp - 0x1324]
push edx
push 0x1000
lea eax, [ebp - 0x1004]
push eax
push 0x4a9da0
push 0x4a9da4
push 0x4a9db0
call dword [sym.imp.KERNEL32.dll_GetPrivateProfileStringA]
lea ecx, [ebp - 0x1004]
push ecx
call fcn.004659a3
add esp, 4
mov edx, dword [ebp - 0x3c98]
mov dword [edx + 0x4910], eax
lea eax, [ebp - 0x1324]
push eax
push 0x1000
lea ecx, [ebp - 0x1004]
push ecx
push 0x4d368c
push 0x4a9dc0
push 0x4a9dcc
call dword [sym.imp.KERNEL32.dll_GetPrivateProfileStringA]
lea edx, [ebp - 0x1004]
push edx
mov eax, dword [ebp - 0x3c98]
add eax, 0x4914
push eax
call fcn.00465350
add esp, 8
lea ecx, [ebp - 0x1324]
push ecx
push 0x1000
lea edx, [ebp - 0x1004]
push edx
push 0x4d3690
push 0x4a9ddc
push 0x4a9de8
call dword [sym.imp.KERNEL32.dll_GetPrivateProfileStringA]
lea eax, [ebp - 0x1004]
push eax
call fcn.0042b8e0
add esp, 4
lea ecx, [ebp - 0x1004]
push ecx
mov edx, dword [ebp - 0x3c98]
add edx, 0x4d14
push edx
call fcn.00465350
add esp, 8
lea eax, [ebp - 0x1324]
push eax
push 0x1000
lea ecx, [ebp - 0x1004]
push ecx
push 0x4a9df8
push 0x4a9dfc
push 0x4a9e0c
call dword [sym.imp.KERNEL32.dll_GetPrivateProfileStringA]
lea edx, [ebp - 0x1004]
push edx
call fcn.004659a3
add esp, 4
mov ecx, dword [ebp - 0x3c98]
mov dword [ecx + 0x5114], eax
lea edx, [ebp - 0x1324]
push edx
push 0x1000
lea eax, [ebp - 0x1004]
push eax
push 0x4d3694
push 0x4a9e1c
push 0x4a9e2c
call dword [sym.imp.KERNEL32.dll_GetPrivateProfileStringA]
lea ecx, [ebp - 0x1004]
push ecx
mov edx, dword [ebp - 0x3c98]
add edx, 0x5128
push edx
call fcn.00465350
add esp, 8
lea eax, [ebp - 0x1324]
push eax
push 0x1000
lea ecx, [ebp - 0x1004]
push ecx
push 0x4a9e3c
push 0x4a9e44
push 0x4a9e50
call dword [sym.imp.KERNEL32.dll_GetPrivateProfileStringA]
lea edx, [ebp - 0x1004]
push edx
mov eax, dword [ebp - 0x3c98]
add eax, 0x6528
push eax
call fcn.00465350
add esp, 8
lea ecx, [ebp - 0x1324]
push ecx
push 0x1000
lea edx, [ebp - 0x1004]
push edx
push 0x4a9e60
push 0x4a9e64
push 0x4a9e6c
call dword [sym.imp.KERNEL32.dll_GetPrivateProfileStringA]
lea eax, [ebp - 0x1004]
push eax
call fcn.004659a3
add esp, 4
mov ecx, dword [ebp - 0x3c98]
mov dword [ecx + 0x7928], eax
lea edx, [ebp - 0x1324]
push edx
push 0x1000
lea eax, [ebp - 0x1004]
push eax
push 0x4a9e7c
push 0x4a9e80
push 0x4a9e8c
call dword [sym.imp.KERNEL32.dll_GetPrivateProfileStringA]
lea ecx, [ebp - 0x1004]
push ecx
call fcn.004659a3
add esp, 4
mov edx, dword [ebp - 0x3c98]
mov dword [edx + 0x793c], eax
lea eax, [ebp - 0x1324]
push eax
push 0x1000
lea ecx, [ebp - 0x1004]
push ecx
push 0x4d3698
push 0x4a9e9c
push 0x4a9ea8
call dword [sym.imp.KERNEL32.dll_GetPrivateProfileStringA]
lea edx, [ebp - 0x1004]
push edx
mov eax, dword [ebp - 0x3c98]
add eax, 0x7950
push eax
call fcn.00465350
add esp, 8
lea ecx, [ebp - 0x1324]
push ecx
push 0x1000
lea edx, [ebp - 0x1004]
push edx
push 0x4d369c
push 0x4a9eb8
push 0x4a9ec4
call dword [sym.imp.KERNEL32.dll_GetPrivateProfileStringA]
lea eax, [ebp - 0x1004]
push eax
call fcn.0042b8e0
add esp, 4
lea ecx, [ebp - 0x1004]
push ecx
mov edx, dword [ebp - 0x3c98]
add edx, 0x8d50
push edx
call fcn.00465350
add esp, 8
lea eax, [ebp - 0x1324]
push eax
push 0x1000
lea ecx, [ebp - 0x1004]
push ecx
push 0x4a9ed4
push 0x4a9ed8
push 0x4a9ee8
call dword [sym.imp.KERNEL32.dll_GetPrivateProfileStringA]
lea edx, [ebp - 0x1004]
push edx
call fcn.004659a3
add esp, 4
mov ecx, dword [ebp - 0x3c98]
mov dword [ecx + 0x5118], eax
lea edx, [ebp - 0x1324]
push edx
push 0x1000
lea eax, [ebp - 0x1004]
push eax
push 0x4d36a0
push 0x4a9ef8
push 0x4a9f08
call dword [sym.imp.KERNEL32.dll_GetPrivateProfileStringA]
lea ecx, [ebp - 0x1004]
push ecx
mov edx, dword [ebp - 0x3c98]
add edx, 0x5528
push edx
call fcn.00465350
add esp, 8
lea eax, [ebp - 0x1324]
push eax
push 0x1000
lea ecx, [ebp - 0x1004]
push ecx
push 0x4a9f18
push 0x4a9f20
push 0x4a9f30
call dword [sym.imp.KERNEL32.dll_GetPrivateProfileStringA]
lea edx, [ebp - 0x1004]
push edx
mov eax, dword [ebp - 0x3c98]
add eax, 0x6928
push eax
call fcn.00465350
add esp, 8
lea ecx, [ebp - 0x1324]
push ecx
push 0x1000
lea edx, [ebp - 0x1004]
push edx
push 0x4a9f40
push 0x4a9f44
push 0x4a9f50
call dword [sym.imp.KERNEL32.dll_GetPrivateProfileStringA]
lea eax, [ebp - 0x1004]
push eax
call fcn.004659a3
add esp, 4
mov ecx, dword [ebp - 0x3c98]
mov dword [ecx + 0x792c], eax
lea edx, [ebp - 0x1324]
push edx
push 0x1000
lea eax, [ebp - 0x1004]
push eax
push 0x4a9f60
push 0x4a9f64
push 0x4a9f74
call dword [sym.imp.KERNEL32.dll_GetPrivateProfileStringA]
lea ecx, [ebp - 0x1004]
push ecx
call fcn.004659a3
add esp, 4
mov edx, dword [ebp - 0x3c98]
mov dword [edx + 0x7940], eax
lea eax, [ebp - 0x1324]
push eax
push 0x1000
lea ecx, [ebp - 0x1004]
push ecx
push 0x4d36a4
push 0x4a9f84
push 0x4a9f94
call dword [sym.imp.KERNEL32.dll_GetPrivateProfileStringA]
lea edx, [ebp - 0x1004]
push edx
mov eax, dword [ebp - 0x3c98]
add eax, 0x7d50
push eax
call fcn.00465350
add esp, 8
lea ecx, [ebp - 0x1324]
push ecx
push 0x1000
lea edx, [ebp - 0x1004]
push edx
push 0x4d36a8
push 0x4a9fa4
push 0x4a9fb4
call dword [sym.imp.KERNEL32.dll_GetPrivateProfileStringA]
lea eax, [ebp - 0x1004]
push eax
call fcn.0042b8e0
add esp, 4
lea ecx, [ebp - 0x1004]
push ecx
mov edx, dword [ebp - 0x3c98]
add edx, 0x9150
push edx
call fcn.00465350
add esp, 8
lea eax, [ebp - 0x1324]
push eax
push 0x1000
lea ecx, [ebp - 0x1004]
push ecx
push 0x4a9fc4
push 0x4a9fc8
push 0x4a9fd8
call dword [sym.imp.KERNEL32.dll_GetPrivateProfileStringA]
lea edx, [ebp - 0x1004]
push edx
call fcn.004659a3
add esp, 4
mov ecx, dword [ebp - 0x3c98]
mov dword [ecx + 0x511c], eax
lea edx, [ebp - 0x1324]
push edx
push 0x1000
lea eax, [ebp - 0x1004]
push eax
push 0x4d36ac
push 0x4a9fe8
push 0x4a9ff8
call dword [sym.imp.KERNEL32.dll_GetPrivateProfileStringA]
lea ecx, [ebp - 0x1004]
push ecx
mov edx, dword [ebp - 0x3c98]
add edx, 0x5928
push edx
call fcn.00465350
add esp, 8
lea eax, [ebp - 0x1324]
push eax
push 0x1000
lea ecx, [ebp - 0x1004]
push ecx
push 0x4aa008
push 0x4aa010
push 0x4aa020
call dword [sym.imp.KERNEL32.dll_GetPrivateProfileStringA]
lea edx, [ebp - 0x1004]
push edx
mov eax, dword [ebp - 0x3c98]
add eax, 0x6d28
push eax
call fcn.00465350
add esp, 8
lea ecx, [ebp - 0x1324]
push ecx
push 0x1000
lea edx, [ebp - 0x1004]
push edx
push 0x4aa030
push 0x4aa034
push 0x4aa040
call dword [sym.imp.KERNEL32.dll_GetPrivateProfileStringA]
lea eax, [ebp - 0x1004]
push eax
call fcn.004659a3
add esp, 4
mov ecx, dword [ebp - 0x3c98]
mov dword [ecx + 0x7930], eax
lea edx, [ebp - 0x1324]
push edx
push 0x1000
lea eax, [ebp - 0x1004]
push eax
push 0x4aa050
push 0x4aa054
push 0x4aa064
call dword [sym.imp.KERNEL32.dll_GetPrivateProfileStringA]
lea ecx, [ebp - 0x1004]
push ecx
call fcn.004659a3
add esp, 4
mov edx, dword [ebp - 0x3c98]
mov dword [edx + 0x7944], eax
lea eax, [ebp - 0x1324]
push eax
push 0x1000
lea ecx, [ebp - 0x1004]
push ecx
push 0x4d36b0
push 0x4aa074
push 0x4aa084
call dword [sym.imp.KERNEL32.dll_GetPrivateProfileStringA]
lea edx, [ebp - 0x1004]
push edx
mov eax, dword [ebp - 0x3c98]
add eax, 0x8150
push eax
call fcn.00465350
add esp, 8
lea ecx, [ebp - 0x1324]
push ecx
push 0x1000
lea edx, [ebp - 0x1004]
push edx
push 0x4d36b4
push 0x4aa094
push 0x4aa0a4
call dword [sym.imp.KERNEL32.dll_GetPrivateProfileStringA]
lea eax, [ebp - 0x1004]
push eax
call fcn.0042b8e0
add esp, 4
lea ecx, [ebp - 0x1004]
push ecx
mov edx, dword [ebp - 0x3c98]
add edx, 0x9550
push edx
call fcn.00465350
add esp, 8
lea eax, [ebp - 0x1324]
push eax
push 0x1000
lea ecx, [ebp - 0x1004]
push ecx
push 0x4aa0b4
push 0x4aa0b8
push 0x4aa0c8
call dword [sym.imp.KERNEL32.dll_GetPrivateProfileStringA]
lea edx, [ebp - 0x1004]
push edx
call fcn.004659a3
add esp, 4
mov ecx, dword [ebp - 0x3c98]
mov dword [ecx + 0x5120], eax
lea edx, [ebp - 0x1324]
push edx
push 0x1000
lea eax, [ebp - 0x1004]
push eax
push 0x4d36b8
push 0x4aa0d8
push 0x4aa0e8
call dword [sym.imp.KERNEL32.dll_GetPrivateProfileStringA]
lea ecx, [ebp - 0x1004]
push ecx
mov edx, dword [ebp - 0x3c98]
add edx, 0x5d28
push edx
call fcn.00465350
add esp, 8
lea eax, [ebp - 0x1324]
push eax
push 0x1000
lea ecx, [ebp - 0x1004]
push ecx
push 0x4aa0f8
push 0x4aa100
push 0x4aa110
call dword [sym.imp.KERNEL32.dll_GetPrivateProfileStringA]
lea edx, [ebp - 0x1004]
push edx
mov eax, dword [ebp - 0x3c98]
add eax, 0x7128
push eax
call fcn.00465350
add esp, 8
lea ecx, [ebp - 0x1324]
push ecx
push 0x1000
lea edx, [ebp - 0x1004]
push edx
push 0x4aa120
push 0x4aa124
push 0x4aa130
call dword [sym.imp.KERNEL32.dll_GetPrivateProfileStringA]
lea eax, [ebp - 0x1004]
push eax
call fcn.004659a3
add esp, 4
mov ecx, dword [ebp - 0x3c98]
mov dword [ecx + 0x7934], eax
lea edx, [ebp - 0x1324]
push edx
push 0x1000
lea eax, [ebp - 0x1004]
push eax
push 0x4aa140
push 0x4aa144
push 0x4aa154
call dword [sym.imp.KERNEL32.dll_GetPrivateProfileStringA]
lea ecx, [ebp - 0x1004]
push ecx
call fcn.004659a3
add esp, 4
mov edx, dword [ebp - 0x3c98]
mov dword [edx + 0x7948], eax
lea eax, [ebp - 0x1324]
push eax
push 0x1000
lea ecx, [ebp - 0x1004]
push ecx
push 0x4d36bc
push 0x4aa164
push 0x4aa174
call dword [sym.imp.KERNEL32.dll_GetPrivateProfileStringA]
lea edx, [ebp - 0x1004]
push edx
mov eax, dword [ebp - 0x3c98]
add eax, 0x8550
push eax
call fcn.00465350
add esp, 8
lea ecx, [ebp - 0x1324]
push ecx
push 0x1000
lea edx, [ebp - 0x1004]
push edx
push 0x4d36c0
push 0x4aa184
push 0x4aa194
call dword [sym.imp.KERNEL32.dll_GetPrivateProfileStringA]
lea eax, [ebp - 0x1004]
push eax
call fcn.0042b8e0
add esp, 4
lea ecx, [ebp - 0x1004]
push ecx
mov edx, dword [ebp - 0x3c98]
add edx, 0x9950
push edx
call fcn.00465350
add esp, 8
lea eax, [ebp - 0x1324]
push eax
push 0x1000
lea ecx, [ebp - 0x1004]
push ecx
push 0x4aa1a4
push 0x4aa1a8
push 0x4aa1b8
call dword [sym.imp.KERNEL32.dll_GetPrivateProfileStringA]
lea edx, [ebp - 0x1004]
push edx
call fcn.004659a3
add esp, 4
mov ecx, dword [ebp - 0x3c98]
mov dword [ecx + 0x5124], eax
lea edx, [ebp - 0x1324]
push edx
push 0x1000
lea eax, [ebp - 0x1004]
push eax
push 0x4d36c4
push 0x4aa1c8
push 0x4aa1d8
call dword [sym.imp.KERNEL32.dll_GetPrivateProfileStringA]
lea ecx, [ebp - 0x1004]
push ecx
mov edx, dword [ebp - 0x3c98]
add edx, 0x6128
push edx
call fcn.00465350
add esp, 8
lea eax, [ebp - 0x1324]
push eax
push 0x1000
lea ecx, [ebp - 0x1004]
push ecx
push 0x4aa1e8
push 0x4aa1f0
push 0x4aa200
call dword [sym.imp.KERNEL32.dll_GetPrivateProfileStringA]
lea edx, [ebp - 0x1004]
push edx
mov eax, dword [ebp - 0x3c98]
add eax, 0x7528
push eax
call fcn.00465350
add esp, 8
lea ecx, [ebp - 0x1324]
push ecx
push 0x1000
lea edx, [ebp - 0x1004]
push edx
push 0x4aa210
push 0x4aa214
push 0x4aa220
call dword [sym.imp.KERNEL32.dll_GetPrivateProfileStringA]
lea eax, [ebp - 0x1004]
push eax
call fcn.004659a3
add esp, 4
mov ecx, dword [ebp - 0x3c98]
mov dword [ecx + 0x7938], eax
lea edx, [ebp - 0x1324]
push edx
push 0x1000
lea eax, [ebp - 0x1004]
push eax
push 0x4aa230
push 0x4aa234
push 0x4aa244
call dword [sym.imp.KERNEL32.dll_GetPrivateProfileStringA]
lea ecx, [ebp - 0x1004]
push ecx
call fcn.004659a3
add esp, 4
mov edx, dword [ebp - 0x3c98]
mov dword [edx + 0x794c], eax
lea eax, [ebp - 0x1324]
push eax
push 0x1000
lea ecx, [ebp - 0x1004]
push ecx
push 0x4d36c8
push 0x4aa254
push 0x4aa264
call dword [sym.imp.KERNEL32.dll_GetPrivateProfileStringA]
lea edx, [ebp - 0x1004]
push edx
mov eax, dword [ebp - 0x3c98]
add eax, 0x8950
push eax
call fcn.00465350
add esp, 8
lea ecx, [ebp - 0x1324]
push ecx
push 0x1000
lea edx, [ebp - 0x1004]
push edx
push 0x4d36cc
push 0x4aa274
push 0x4aa284
call dword [sym.imp.KERNEL32.dll_GetPrivateProfileStringA]
lea eax, [ebp - 0x1004]
push eax
call fcn.0042b8e0
add esp, 4
lea ecx, [ebp - 0x1004]
push ecx
mov edx, dword [ebp - 0x3c98]
add edx, 0x9d50
push edx
call fcn.00465350
add esp, 8
lea eax, [ebp - 0x1324]
push eax
push 0x1000
lea ecx, [ebp - 0x1004]
push ecx
push 0x4aa294
push 0x4aa298
push 0x4aa2a4
call dword [sym.imp.KERNEL32.dll_GetPrivateProfileStringA]
lea edx, [ebp - 0x1004]
push edx
call fcn.004659a3
add esp, 4
mov ecx, dword [ebp - 0x3c98]
mov dword [ecx + 0xa150], eax
lea edx, [ebp - 0x110c]
push edx
push str._sLog
lea eax, [ebp - 0x1004]
push eax
call fcn.004650e4
add esp, 0xc
lea ecx, [ebp - 0x1324]
push ecx
push 0x1000
lea edx, [ebp - 0x1004]
push edx
lea eax, [ebp - 0x1004]
push eax
push 0x4aa2b0
push 0x4aa2b8
call dword [sym.imp.KERNEL32.dll_GetPrivateProfileStringA]
lea ecx, [ebp - 0x1004]
push ecx
mov edx, dword [ebp - 0x3c98]
add edx, 0xa154
push edx
call fcn.00465350
add esp, 8
lea eax, [ebp - 0x1324]
push eax
push 0x1000
lea ecx, [ebp - 0x1004]
push ecx
push 0x4aa2bc
push 0x4aa2c0
push 0x4aa2cc
call dword [sym.imp.KERNEL32.dll_GetPrivateProfileStringA]
lea edx, [ebp - 0x1004]
push edx
call fcn.004659a3
add esp, 4
mov ecx, dword [ebp - 0x3c98]
mov dword [ecx + 0xa554], eax
lea edx, [ebp - 0x1324]
push edx
push 0x1000
lea eax, [ebp - 0x1004]
push eax
push 0x4aa2d0
push 0x4aa2d4
push 0x4aa2dc
call dword [sym.imp.KERNEL32.dll_GetPrivateProfileStringA]
lea ecx, [ebp - 0x1004]
push ecx
call fcn.004659a3
add esp, 4
mov edx, dword [ebp - 0x3c98]
mov dword [edx + 0xa558], eax
lea eax, [ebp - 0x1324]
push eax
push 0x1000
lea ecx, [ebp - 0x1004]
push ecx
push 0x4aa2e0
push 0x4aa2e4
push 0x4aa2f0
call dword [sym.imp.KERNEL32.dll_GetPrivateProfileStringA]
lea edx, [ebp - 0x1004]
push edx
call fcn.004659a3
add esp, 4
mov ecx, dword [ebp - 0x3c98]
mov dword [ecx + 0xa55c], eax
lea edx, [ebp - 0x1324]
push edx
push 0x1000
lea eax, [ebp - 0x1004]
push eax
push 0x4aa2f4
push 0x4aa2f8
push 0x4aa308
call dword [sym.imp.KERNEL32.dll_GetPrivateProfileStringA]
lea ecx, [ebp - 0x1004]
push ecx
call fcn.004659a3
add esp, 4
mov edx, dword [ebp - 0x3c98]
mov dword [edx + 0xa560], eax
lea eax, [ebp - 0x1324]
push eax
push 0x1000
lea ecx, [ebp - 0x1004]
push ecx
push str.10000
push 0x4aa314
push 0x4aa31c
call dword [sym.imp.KERNEL32.dll_GetPrivateProfileStringA]
lea edx, [ebp - 0x1004]
push edx
call fcn.004659a3
add esp, 4
mov ecx, dword [ebp - 0x3c98]
mov dword [ecx + 0xa564], eax
lea edx, [ebp - 0x1324]
push edx
push 0x1000
lea eax, [ebp - 0x1004]
push eax
push 0x4aa320
push 0x4aa324
push 0x4aa330
call dword [sym.imp.KERNEL32.dll_GetPrivateProfileStringA]
lea ecx, [ebp - 0x1004]
push ecx
call fcn.004659a3
add esp, 4
mov edx, dword [ebp - 0x3c98]
mov dword [edx + 0xa568], eax
lea eax, [ebp - 0x1324]
push eax
push 0x1000
lea ecx, [ebp - 0x1004]
push ecx
push str.English
push 0x4aa33c
push 0x4aa348
call dword [sym.imp.KERNEL32.dll_GetPrivateProfileStringA]
lea edx, [ebp - 0x1004]
push edx
mov eax, dword [ebp - 0x3c98]
add eax, 0x10a4
push eax
call fcn.00465350
add esp, 8
lea ecx, [ebp - 0x1324]
push ecx
push 0x1000
lea edx, [ebp - 0x1004]
push edx
push 0x4aa350
push 0x4aa354
push 0x4aa368
call dword [sym.imp.KERNEL32.dll_GetPrivateProfileStringA]
lea eax, [ebp - 0x1004]
push eax
call fcn.0046725f
add esp, 4
fmul qword [0x492b28]
call fcn.00466f70
mov ecx, dword [ebp - 0x3c98]
mov dword [ecx + 0xa9b4], eax
lea edx, [ebp - 0x1324]
push edx
push 0x1000
lea eax, [ebp - 0x1004]
push eax
push 0x4aa370
push 0x4aa374
push 0x4aa384
call dword [sym.imp.KERNEL32.dll_GetPrivateProfileStringA]
lea ecx, [ebp - 0x1004]
push ecx
call fcn.004659a3
add esp, 4
mov edx, dword [ebp - 0x3c98]
mov dword [edx + 0xc98], eax
lea eax, [ebp - 0x1324]
push eax
push 0x1000
lea ecx, [ebp - 0x1004]
push ecx
push 0x4aa38c
push 0x4aa390
push 0x4aa3a8
call dword [sym.imp.KERNEL32.dll_GetPrivateProfileStringA]
lea edx, [ebp - 0x1004]
push edx
call fcn.004659a3
add esp, 4
mov ecx, dword [ebp - 0x3c98]
mov dword [ecx + 0xc9c], eax
lea edx, [ebp - 0x1324]
push edx
push 0x1000
lea eax, [ebp - 0x1004]
push eax
push 0x4d36d0
push 0x4aa3b0
push 0x4aa3bc
call dword [sym.imp.KERNEL32.dll_GetPrivateProfileStringA]
lea ecx, [ebp - 0x1004]
push ecx
call fcn.0042b8e0
add esp, 4
lea edx, [ebp - 0x1004]
push edx
mov eax, dword [ebp - 0x3c98]
add eax, 0xca0
push eax
call fcn.00465350
add esp, 8
lea ecx, [ebp - 0x1324]
push ecx
push 0x1000
lea edx, [ebp - 0x1004]
push edx
push 0x4aa3c4
push 0x4aa3c8
push 0x4aa3d0
call dword [sym.imp.KERNEL32.dll_GetPrivateProfileStringA]
mov eax, dword [ebp - 0x3c98]
mov dword [eax + 0x10a0], 0
lea ecx, [ebp - 0x1324]
push ecx
push 0x1000
lea edx, [ebp - 0x1004]
push edx
push 0x4aa3d8
push 0x4aa3dc
push 0x4aa3f0
call dword [sym.imp.KERNEL32.dll_GetPrivateProfileStringA]
lea eax, [ebp - 0x1004]
push eax
call fcn.004659a3
add esp, 4
mov ecx, dword [ebp - 0x3c98]
mov dword [ecx + 0xa584], eax
lea edx, [ebp - 0x1324]
push edx
push 0x1000
lea eax, [ebp - 0x1004]
push eax
push str.www.yahoo.com_www.icq.com_www.internic.net
push 0x4aa424
push 0x4aa43c
call dword [sym.imp.KERNEL32.dll_GetPrivateProfileStringA]
lea ecx, [ebp - 0x1004]
push ecx
mov edx, dword [ebp - 0x3c98]
add edx, 0xa9bc
push edx
call fcn.00465350
add esp, 8
mov eax, dword [ebp - 0x3c98]
mov dword [eax + 0xc90], 0
lea ecx, [ebp - 0x121c]
push ecx
push 0xf003f
push 0
push 0x4aa444
push reloc.WS2_32.dll_accept
call dword [sym.imp.ADVAPI32.dll_RegOpenKeyExA]
test eax, eax
jne 0x450f46
mov dl, byte [0x4d36d4]
mov byte [ebp - 0x1728], dl
mov ecx, 0xff
xor eax, eax
lea edi, [ebp - 0x1727]
rep stosd dword es:[edi], eax
stosw word es:[edi], ax
stosb byte es:[edi], al
mov dword [ebp - 0x172c], 0x400
lea eax, [ebp - 0x172c]
push eax
lea ecx, [ebp - 0x1728]
push ecx
push 0
push 0
push 0x4aa474
mov edx, dword [ebp - 0x121c]
push edx
call dword [sym.imp.ADVAPI32.dll_RegQueryValueExA]
lea eax, [ebp - 0x1728]
push eax
call fcn.00465470
add esp, 4
test eax, eax
jbe 0x450f39
mov byte [ebp - 0x1730], 0
push 0x400
lea ecx, [ebp - 0x1b30]
push ecx
push 0
call dword [sym.imp.KERNEL32.dll_GetModuleFileNameA]
lea edx, [ebp - 0x1b30]
push edx
call fcn.00465470
add esp, 4
push eax
lea eax, [ebp - 0x1b30]
push eax
push 1
push 0
push 0x4aa47c
mov ecx, dword [ebp - 0x121c]
push ecx
call dword [sym.imp.ADVAPI32.dll_RegSetValueExA]
mov edx, dword [ebp - 0x3c98]
mov dword [edx + 0xc90], 1
mov eax, dword [ebp - 0x121c]
push eax
call dword [sym.imp.ADVAPI32.dll_RegCloseKey]
lea ecx, [ebp - 0x1324]
push ecx
push 0
push 0x4aa484
push 0x4aa490
call dword [sym.imp.KERNEL32.dll_GetPrivateProfileIntA]
mov edx, dword [ebp - 0x3c98]
mov dword [edx + 0xc94], eax
lea eax, [ebp - 0x1324]
push eax
push 0
push 0x4aa498
push 0x4aa4a0
call dword [sym.imp.KERNEL32.dll_GetPrivateProfileIntA]
mov ecx, dword [ebp - 0x3c98]
mov dword [ecx + 0x5c], eax
lea edx, [ebp - 0x1324]
push edx
push 0
push 0x4aa4a8
push 0x4aa4b4
call dword [sym.imp.KERNEL32.dll_GetPrivateProfileIntA]
mov ecx, dword [ebp - 0x3c98]
mov dword [ecx + 0x3c], eax
lea edx, [ebp - 0x1324]
push edx
push 1
push str.StartFtp
push 0x4aa4c8
call dword [sym.imp.KERNEL32.dll_GetPrivateProfileIntA]
mov ecx, dword [ebp - 0x3c98]
mov dword [ecx + 0x1c], eax
lea edx, [ebp - 0x1324]
push edx
push 1
push 0x4aa4d0
push 0x4aa4dc
call dword [sym.imp.KERNEL32.dll_GetPrivateProfileIntA]
mov ecx, dword [ebp - 0x3c98]
mov dword [ecx + 8], eax
lea edx, [ebp - 0x1324]
push edx
push 1
push 0x4aa4e4
push 0x4aa4f0
call dword [sym.imp.KERNEL32.dll_GetPrivateProfileIntA]
mov ecx, dword [ebp - 0x3c98]
mov dword [ecx + 0xc], eax
lea edx, [ebp - 0x1324]
push edx
push 1
push str.StartHttp
push 0x4aa504
call dword [sym.imp.KERNEL32.dll_GetPrivateProfileIntA]
mov ecx, dword [ebp - 0x3c98]
mov dword [ecx], eax
lea edx, [ebp - 0x1324]
push edx
push 1
push 0x4aa50c
push 0x4aa518
call dword [sym.imp.KERNEL32.dll_GetPrivateProfileIntA]
mov ecx, dword [ebp - 0x3c98]
mov dword [ecx + 0x38], eax
lea edx, [ebp - 0x1324]
push edx
push 1
push 0x4aa520
push 0x4aa52c
call dword [sym.imp.KERNEL32.dll_GetPrivateProfileIntA]
mov ecx, dword [ebp - 0x3c98]
mov dword [ecx + 0x2c], eax
lea edx, [ebp - 0x1324]
push edx
push 1
push 0x4aa534
push 0x4aa540
call dword [sym.imp.KERNEL32.dll_GetPrivateProfileIntA]
mov ecx, dword [ebp - 0x3c98]
mov dword [ecx + 0x34], eax
lea edx, [ebp - 0x1324]
push edx
push 1
push 0x4aa548
push 0x4aa554
call dword [sym.imp.KERNEL32.dll_GetPrivateProfileIntA]
mov ecx, dword [ebp - 0x3c98]
mov dword [ecx + 0x10], eax
lea edx, [ebp - 0x1324]
push edx
push 1
push 0x4aa55c
push 0x4aa568
call dword [sym.imp.KERNEL32.dll_GetPrivateProfileIntA]
mov ecx, dword [ebp - 0x3c98]
mov dword [ecx + 0x24], eax
lea edx, [ebp - 0x1324]
push edx
push 1
push 0x4aa570
push 0x4aa57c
call dword [sym.imp.KERNEL32.dll_GetPrivateProfileIntA]
mov ecx, dword [ebp - 0x3c98]
mov dword [ecx + 0x14], eax
lea edx, [ebp - 0x1324]
push edx
push 1
push 0x4aa584
push 0x4aa590
call dword [sym.imp.KERNEL32.dll_GetPrivateProfileIntA]
mov ecx, dword [ebp - 0x3c98]
mov dword [ecx + 0x40], eax
lea edx, [ebp - 0x1324]
push edx
push 0
push 0x4aa598
push 0x4aa5a4
call dword [sym.imp.KERNEL32.dll_GetPrivateProfileIntA]
mov ecx, dword [ebp - 0x3c98]
mov dword [ecx + 0x44], eax
lea edx, [ebp - 0x1324]
push edx
push 0x328
push 0x4aa5ac
push 0x4aa5b4
call dword [sym.imp.KERNEL32.dll_GetPrivateProfileIntA]
mov ecx, dword [ebp - 0x3c98]
mov dword [ecx + 4], eax
lea edx, [ebp - 0x1324]
push edx
push 0x438
push 0x4aa5bc
push 0x4aa5c4
call dword [sym.imp.KERNEL32.dll_GetPrivateProfileIntA]
mov ecx, dword [ebp - 0x3c98]
mov dword [ecx + 0x18], eax
lea edx, [ebp - 0x1324]
push edx
push 0x849
push 0x4aa5cc
push 0x4aa5d0
call dword [sym.imp.KERNEL32.dll_GetPrivateProfileIntA]
mov ecx, dword [ebp - 0x3c98]
mov dword [ecx + 0x20], eax
lea edx, [ebp - 0x1324]
push edx
push 0x17
push 0x4aa5d8
push 0x4aa5e0
call dword [sym.imp.KERNEL32.dll_GetPrivateProfileIntA]
mov ecx, dword [ebp - 0x3c98]
mov dword [ecx + 0x28], eax
lea edx, [ebp - 0x1324]
push edx
push 0x77
push 0x4aa5e8
push 0x4aa5f0
call dword [sym.imp.KERNEL32.dll_GetPrivateProfileIntA]
mov ecx, dword [ebp - 0x3c98]
mov dword [ecx + 0x30], eax
lea edx, [ebp - 0x1324]
push edx
push 0x58
push 0x4aa5f8
push 0x4aa600
call dword [sym.imp.KERNEL32.dll_GetPrivateProfileIntA]
mov ecx, dword [ebp - 0x3c98]
mov dword [ecx + 0x48], eax
lea edx, [ebp - 0x1324]
push edx
push 0x1000
lea eax, [ebp - 0x1004]
push eax
push 0x4aa608
push 0x4aa60c
push 0x4aa614
call dword [sym.imp.KERNEL32.dll_GetPrivateProfileStringA]
movsx ecx, byte [ebp - 0x1004]
mov edx, dword [ebp - 0x3c98]
mov dword [edx + 0x230b4], ecx
lea eax, [ebp - 0x1324]
push eax
push 0x1000
lea ecx, [ebp - 0x1004]
push ecx
push 0x4aa61c
push 0x4aa620
push 0x4aa624
call dword [sym.imp.KERNEL32.dll_GetPrivateProfileStringA]
movsx edx, byte [ebp - 0x1004]
mov eax, dword [ebp - 0x3c98]
mov dword [eax + 0x230b8], edx
lea ecx, [ebp - 0x1324]
push ecx
push 0x1000
lea edx, [ebp - 0x1004]
push edx
push 0x4aa62c
push 0x4aa630
push str.Token
call dword [sym.imp.KERNEL32.dll_GetPrivateProfileStringA]
movsx eax, byte [ebp - 0x1004]
mov ecx, dword [ebp - 0x3c98]
mov dword [ecx + 0x230bc], eax
lea edx, [ebp - 0x1324]
push edx
push 0x1000
lea eax, [ebp - 0x1004]
push eax
push 0x4d36d8
push 0x4aa640
push 0x4aa648
call dword [sym.imp.KERNEL32.dll_GetPrivateProfileStringA]
lea ecx, [ebp - 0x1004]
push ecx
mov edx, dword [ebp - 0x3c98]
add edx, 0xa588
push edx
call fcn.00465350
add esp, 8
push 0x4aa650
mov eax, dword [ebp - 0x3c98]
add eax, 0xa588
push eax
lea ecx, [ebp - 0x3b3c]
call fcn.0044f570
mov dword [ebp - 0x3b40], 0
mov dword [ebp - 0x3b40], 0
jmp 0x451351
mov ecx, dword [ebp - 0x3b40]
add ecx, 1
mov dword [ebp - 0x3b40], ecx
cmp dword [ebp - 0x3b40], 0xa
jge 0x451373
mov edx, dword [ebp - 0x3b40]
mov eax, dword [ebp - 0x3c98]
mov dword [eax + edx*4 + 0xa98c], 0
jmp 0x451342
mov dword [ebp - 0x3b40], 0
lea ecx, [ebp - 0x3b3c]
call fcn.0044f642
test eax, eax
je 0x4513cd
lea ecx, [ebp - 0x3b3c]
call fcn.0044f5b1
push eax
call dword [sym.imp.WS2_32.dll_inet_addr]
mov ecx, dword [ebp - 0x3b40]
mov edx, dword [ebp - 0x3c98]
mov dword [edx + ecx*4 + 0xa98c], eax
mov eax, dword [ebp - 0x3b40]
add eax, 1
mov dword [ebp - 0x3b40], eax
cmp dword [ebp - 0x3b40], 0xa
jl 0x4513cb
jmp 0x4513cd
jmp 0x45137d
lea ecx, [ebp - 0x1324]
push ecx
push 1
push 0x4aa654
push 0x4aa660
call dword [sym.imp.KERNEL32.dll_GetPrivateProfileIntA]
mov edx, dword [ebp - 0x3c98]
mov dword [edx + 0xa9b8], eax
lea eax, [ebp - 0x1324]
push eax
push 0
push 0x4aa668
push 0x4aa680
call dword [sym.imp.KERNEL32.dll_GetPrivateProfileIntA]
mov ecx, dword [ebp - 0x3c98]
mov dword [ecx + 0xb9c0], eax
lea edx, [ebp - 0x1324]
push edx
push 1
push 0x4aa688
push 0x4aa69c
call dword [sym.imp.KERNEL32.dll_GetPrivateProfileIntA]
mov ecx, dword [ebp - 0x3c98]
mov dword [ecx + 0xb9c8], eax
lea edx, [ebp - 0x1324]
push edx
push 0
push 0x4aa6a4
push 0x4aa6b0
call dword [sym.imp.KERNEL32.dll_GetPrivateProfileIntA]
mov ecx, dword [ebp - 0x3c98]
mov dword [ecx + 0x34bc], eax
lea edx, [ebp - 0x1324]
push edx
push 0
push 0x4aa6b8
push 0x4aa6c4
call dword [sym.imp.KERNEL32.dll_GetPrivateProfileIntA]
mov ecx, dword [ebp - 0x3c98]
mov dword [ecx + 0x34b8], eax
lea edx, [ebp - 0x1324]
push edx
push 0x400
mov eax, dword [ebp - 0x3c98]
add eax, 0x14a8
push eax
push str.CCProxy_Authorization
push 0x4aa6e4
push 0x4aa6f4
call dword [sym.imp.KERNEL32.dll_GetPrivateProfileStringA]
lea ecx, [ebp - 0x1324]
push ecx
push 0x400
mov edx, dword [ebp - 0x3c98]
add edx, 0x20b0
push edx
push str._Html__Body__H1__Unauthorized_...__H1___Body___Html_
push 0x4aa738
push 0x4aa748
call dword [sym.imp.KERNEL32.dll_GetPrivateProfileStringA]
push 0x4aa754
mov eax, dword [ebp - 0x3c98]
add eax, 0x20b0
push eax
call fcn.004669ba
add esp, 8
mov dword [ebp - 0x3b44], eax
cmp dword [ebp - 0x3b44], 0
je 0x4515fe
push 2
push 0
mov ecx, dword [ebp - 0x3b44]
push ecx
call fcn.004674f8
add esp, 0xc
mov edx, dword [ebp - 0x3b44]
push edx
call fcn.00467375
add esp, 4
mov dword [ebp - 0x3b48], eax
mov eax, dword [ebp - 0x3c98]
cmp dword [eax + 0x24b0], 0
je 0x451575
mov ecx, dword [ebp - 0x3c98]
mov edx, dword [ecx + 0x24b0]
mov dword [ebp - 0x3c74], edx
mov eax, dword [ebp - 0x3c74]
push eax
call fcn.00481551
add esp, 4
mov ecx, dword [ebp - 0x3c98]
mov dword [ecx + 0x24b0], 0
mov edx, dword [ebp - 0x3b48]
add edx, 1
push edx
call fcn.00481528
add esp, 4
mov dword [ebp - 0x3c78], eax
mov eax, dword [ebp - 0x3c98]
mov ecx, dword [ebp - 0x3c78]
mov dword [eax + 0x24b0], ecx
mov edx, dword [ebp - 0x3c98]
mov eax, dword [edx + 0x24b0]
mov ecx, dword [ebp - 0x3b48]
mov byte [eax + ecx], 0
push 0
push 0
mov edx, dword [ebp - 0x3b44]
push edx
call fcn.004674f8
add esp, 0xc
mov eax, dword [ebp - 0x3b44]
push eax
push 1
mov ecx, dword [ebp - 0x3b48]
push ecx
mov edx, dword [ebp - 0x3c98]
mov eax, dword [edx + 0x24b0]
push eax
call fcn.004675b1
add esp, 0x10
mov ecx, dword [ebp - 0x3b44]
push ecx
call fcn.004667d3
add esp, 4
jmp 0x45163e
mov edx, dword [ebp - 0x3c98]
cmp dword [edx + 0x24b0], 0
je 0x45162e
mov eax, dword [ebp - 0x3c98]
mov ecx, dword [eax + 0x24b0]
mov dword [ebp - 0x3c7c], ecx
mov edx, dword [ebp - 0x3c7c]
push edx
call fcn.00481551
add esp, 4
mov eax, dword [ebp - 0x3c98]
mov dword [eax + 0x24b0], 0
lea ecx, [ebp - 0x1324]
push ecx
push 0x400
mov edx, dword [ebp - 0x3c98]
add edx, 0x18a8
push edx
push str._Html__Body__H1___s_is_prohibited_by_proxy.__H1___Body___Html_
push 0x4aa798
push 0x4aa7ac
call dword [sym.imp.KERNEL32.dll_GetPrivateProfileStringA]
push 0x4aa7b8
mov eax, dword [ebp - 0x3c98]
add eax, 0x18a8
push eax
call fcn.004669ba
add esp, 8
mov dword [ebp - 0x3b4c], eax
cmp dword [ebp - 0x3b4c], 0
je 0x451789
push 2
push 0
mov ecx, dword [ebp - 0x3b4c]
push ecx
call fcn.004674f8
add esp, 0xc
mov edx, dword [ebp - 0x3b4c]
push edx
call fcn.00467375
add esp, 4
mov dword [ebp - 0x3b50], eax
mov eax, dword [ebp - 0x3c98]
cmp dword [eax + 0x1ca8], 0
je 0x451700
mov ecx, dword [ebp - 0x3c98]
mov edx, dword [ecx + 0x1ca8]
mov dword [ebp - 0x3c80], edx
mov eax, dword [ebp - 0x3c80]
push eax
call fcn.00481551
add esp, 4
mov ecx, dword [ebp - 0x3c98]
mov dword [ecx + 0x1ca8], 0
mov edx, dword [ebp - 0x3b50]
add edx, 1
push edx
call fcn.00481528
add esp, 4
mov dword [ebp - 0x3c84], eax
mov eax, dword [ebp - 0x3c98]
mov ecx, dword [ebp - 0x3c84]
mov dword [eax + 0x1ca8], ecx
mov edx, dword [ebp - 0x3c98]
mov eax, dword [edx + 0x1ca8]
mov ecx, dword [ebp - 0x3b50]
mov byte [eax + ecx], 0
push 0
push 0
mov edx, dword [ebp - 0x3b4c]
push edx
call fcn.004674f8
add esp, 0xc
mov eax, dword [ebp - 0x3b4c]
push eax
push 1
mov ecx, dword [ebp - 0x3b50]
push ecx
mov edx, dword [ebp - 0x3c98]
mov eax, dword [edx + 0x1ca8]
push eax
call fcn.004675b1
add esp, 0x10
mov ecx, dword [ebp - 0x3b4c]
push ecx
call fcn.004667d3
add esp, 4
jmp 0x4517c9
mov edx, dword [ebp - 0x3c98]
cmp dword [edx + 0x1ca8], 0
je 0x4517b9
mov eax, dword [ebp - 0x3c98]
mov ecx, dword [eax + 0x1ca8]
mov dword [ebp - 0x3c88], ecx
mov edx, dword [ebp - 0x3c88]
push edx
call fcn.00481551
add esp, 4
mov eax, dword [ebp - 0x3c98]
mov dword [eax + 0x1ca8], 0
lea ecx, [ebp - 0x1324]
push ecx
push 0x400
mov edx, dword [ebp - 0x3c98]
add edx, 0x1cac
push edx
push str._Html__Body__H1__This_site_is_prohibited_by_proxy.__H1___Body___Html_
push 0x4aa804
push 0x4aa818
call dword [sym.imp.KERNEL32.dll_GetPrivateProfileStringA]
push 0x4aa824
mov eax, dword [ebp - 0x3c98]
add eax, 0x1cac
push eax
call fcn.004669ba
add esp, 8
mov dword [ebp - 0x3b54], eax
cmp dword [ebp - 0x3b54], 0
je 0x451914
push 2
push 0
mov ecx, dword [ebp - 0x3b54]
push ecx
call fcn.004674f8
add esp, 0xc
mov edx, dword [ebp - 0x3b54]
push edx
call fcn.00467375
add esp, 4
mov dword [ebp - 0x3b58], eax
mov eax, dword [ebp - 0x3c98]
cmp dword [eax + 0x20ac], 0
je 0x45188b
mov ecx, dword [ebp - 0x3c98]
mov edx, dword [ecx + 0x20ac]
mov dword [ebp - 0x3c8c], edx
mov eax, dword [ebp - 0x3c8c]
push eax
call fcn.00481551
add esp, 4
mov ecx, dword [ebp - 0x3c98]
mov dword [ecx + 0x20ac], 0
mov edx, dword [ebp - 0x3b58]
add edx, 1
push edx
call fcn.00481528
add esp, 4
mov dword [ebp - 0x3c90], eax
mov eax, dword [ebp - 0x3c98]
mov ecx, dword [ebp - 0x3c90]
mov dword [eax + 0x20ac], ecx
mov edx, dword [ebp - 0x3c98]
mov eax, dword [edx + 0x20ac]
mov ecx, dword [ebp - 0x3b58]
mov byte [eax + ecx], 0
push 0
push 0
mov edx, dword [ebp - 0x3b54]
push edx
call fcn.004674f8
add esp, 0xc
mov eax, dword [ebp - 0x3b54]
push eax
push 1
mov ecx, dword [ebp - 0x3b58]
push ecx
mov edx, dword [ebp - 0x3c98]
mov eax, dword [edx + 0x20ac]
push eax
call fcn.004675b1
add esp, 0x10
mov ecx, dword [ebp - 0x3b54]
push ecx
call fcn.004667d3
add esp, 4
jmp 0x451954
mov edx, dword [ebp - 0x3c98]
cmp dword [edx + 0x20ac], 0
je 0x451944
mov eax, dword [ebp - 0x3c98]
mov ecx, dword [eax + 0x20ac]
mov dword [ebp - 0x3c94], ecx
mov edx, dword [ebp - 0x3c94]
push edx
call fcn.00481551
add esp, 4
mov eax, dword [ebp - 0x3c98]
mov dword [eax + 0x20ac], 0
mov ecx, dword [ebp - 0x3c98]
mov byte [ecx + 0x24b4], 0
mov dl, byte [0x4d36dc]
mov byte [ebp - 0x1214], dl
mov ecx, 0x41
xor eax, eax
lea edi, [ebp - 0x1213]
rep stosd dword es:[edi], eax
lea eax, [ebp - 0x110c]
push eax
push str._sAddMessage.htm
lea ecx, [ebp - 0x1214]
push ecx
call fcn.004650e4
add esp, 0xc
push 0
push 0
push 3
push 0
push 1
push accept
lea edx, [ebp - 0x1214]
push edx
call dword [sym.imp.KERNEL32.dll_CreateFileA]
mov dword [ebp - 0x1328], eax
cmp dword [ebp - 0x1328], 0xffffffff
je 0x451a40
push 0
mov eax, dword [ebp - 0x1328]
push eax
call dword [sym.imp.KERNEL32.dll_GetFileSize]
mov dword [ebp - 0x3b60], eax
cmp dword [ebp - 0x3b60], 0x1000
jbe 0x4519ed
mov dword [ebp - 0x3b60], 0x1000
mov dword [ebp - 0x3b5c], 0
push 0
lea ecx, [ebp - 0x3b5c]
push ecx
mov edx, dword [ebp - 0x3b60]
push edx
mov eax, dword [ebp - 0x3c98]
add eax, 0x24b4
push eax
mov ecx, dword [ebp - 0x1328]
push ecx
call dword [sym.imp.KERNEL32.dll_ReadFile]
mov edx, dword [ebp - 0x1328]
push edx
call dword [sym.imp.KERNEL32.dll_CloseHandle]
mov eax, dword [ebp - 0x3c98]
add eax, dword [ebp - 0x3b5c]
mov byte [eax + 0x24b4], 0
lea ecx, [ebp - 0x110c]
push ecx
push str._sAutoProxy.pac
lea edx, [ebp - 0x1214]
push edx
call fcn.004650e4
add esp, 0xc
mov eax, dword [ebp - 0x3c98]
mov byte [eax + 0xb9d4], 0
push 0
push 0
push 3
push 0
push 1
push accept
lea ecx, [ebp - 0x1214]
push ecx
call dword [sym.imp.KERNEL32.dll_CreateFileA]
mov dword [ebp - 0x1328], eax
cmp dword [ebp - 0x1328], 0xffffffff
je 0x451b12
push 0
mov edx, dword [ebp - 0x1328]
push edx
call dword [sym.imp.KERNEL32.dll_GetFileSize]
mov dword [ebp - 0x3b68], eax
cmp dword [ebp - 0x3b68], 0x10000
jbe 0x451abe
mov dword [ebp - 0x3b68], 0x10000
mov dword [ebp - 0x3b64], 0
push 0
lea eax, [ebp - 0x3b64]
push eax
mov ecx, dword [ebp - 0x3b68]
push ecx
mov edx, dword [ebp - 0x3c98]
add edx, 0xb9d4
push edx
mov eax, dword [ebp - 0x1328]
push eax
call dword [sym.imp.KERNEL32.dll_ReadFile]
mov ecx, dword [ebp - 0x1328]
push ecx
call dword [sym.imp.KERNEL32.dll_CloseHandle]
mov edx, dword [ebp - 0x3c98]
add edx, dword [ebp - 0x3b64]
mov byte [edx + 0xb9d4], 0
lea eax, [ebp - 0x1324]
push eax
push 1
push 0x4aa850
push 0x4aa860
call dword [sym.imp.KERNEL32.dll_GetPrivateProfileIntA]
mov ecx, dword [ebp - 0x3c98]
mov dword [ecx + 0xb9c4], eax
lea edx, [ebp - 0x1324]
push edx
push 0
push 0x4aa868
push 0x4aa87c
call dword [sym.imp.KERNEL32.dll_GetPrivateProfileIntA]
mov ecx, dword [ebp - 0x3c98]
mov dword [ecx + 0x34c4], eax
lea edx, [ebp - 0x1324]
push edx
push 0
push 0x4aa884
push 0x4aa890
call dword [sym.imp.KERNEL32.dll_GetPrivateProfileIntA]
mov ecx, dword [ebp - 0x3c98]
mov dword [ecx + 0x230c0], eax
lea edx, [ebp - 0x1324]
push edx
push 0
push 0x4aa898
push 0x4aa8a8
call dword [sym.imp.KERNEL32.dll_GetPrivateProfileIntA]
mov ecx, dword [ebp - 0x3c98]
mov dword [ecx + 0xa56c], eax
lea edx, [ebp - 0x1324]
push edx
push 0xa
push 0x4aa8ac
push 0x4aa8c4
call dword [sym.imp.KERNEL32.dll_GetPrivateProfileIntA]
mov ecx, dword [ebp - 0x3c98]
mov dword [ecx + 0xa570], eax
lea edx, [ebp - 0x1324]
push edx
push 0
push 0x4aa8c8
push 0x4aa8d0
call dword [sym.imp.KERNEL32.dll_GetPrivateProfileIntA]
mov ecx, dword [ebp - 0x3c98]
mov dword [ecx + 0x34c8], eax
lea edx, [ebp - 0x1324]
push edx
push 0x400
mov eax, dword [ebp - 0x3c98]
add eax, 0x34cc
push eax
push 0x4d36e0
push 0x4aa8dc
push 0x4aa8e4
call dword [sym.imp.KERNEL32.dll_GetPrivateProfileStringA]
push 0x4aa8f0
mov ecx, dword [ebp - 0x3c98]
add ecx, 0x34cc
push ecx
call fcn.00404260
add esp, 8
lea edx, [ebp - 0x1324]
push edx
push 1
push 0x4aa8f4
push 0x4aa900
call dword [sym.imp.KERNEL32.dll_GetPrivateProfileIntA]
mov ecx, dword [ebp - 0x3c98]
mov dword [ecx + 0xb9d0], eax
lea edx, [ebp - 0x1324]
push edx
push 0
push 0x4aa908
push 0x4aa920
call dword [sym.imp.KERNEL32.dll_GetPrivateProfileIntA]
mov ecx, dword [ebp - 0x3c98]
mov dword [ecx + 0x1f9fc], eax
lea edx, [ebp - 0x1324]
push edx
push 0
push 0x4aa928
push 0x4aa930
call dword [sym.imp.KERNEL32.dll_GetPrivateProfileIntA]
mov ecx, dword [ebp - 0x3c98]
mov dword [ecx + 0x230b0], eax
mov edx, dword [ebp - 0x3c98]
cmp dword [edx + 0x230b0], 0x32
jle 0x451cc5
mov eax, dword [ebp - 0x3c98]
mov dword [eax + 0x230b0], 0x32
mov dword [ebp - 0x1218], 0
jmp 0x451ce0
mov ecx, dword [ebp - 0x1218]
add ecx, 1
mov dword [ebp - 0x1218], ecx
mov edx, dword [ebp - 0x3c98]
mov eax, dword [ebp - 0x1218]
cmp eax, dword [edx + 0x230b0]
jge 0x451e69
mov cl, byte [0x4d36e4]
mov byte [ebp - 0x3c70], cl
mov ecx, 0x41
xor eax, eax
lea edi, [ebp - 0x3c6f]
rep stosd dword es:[edi], eax
mov edx, dword [ebp - 0x1218]
add edx, 1
push edx
push 0x4aa934
lea eax, [ebp - 0x3c70]
push eax
call fcn.004650e4
add esp, 0xc
lea ecx, [ebp - 0x1324]
push ecx
push 0x104
mov edx, dword [ebp - 0x1218]
imul edx, edx, 0x118
mov eax, dword [ebp - 0x3c98]
lea ecx, [eax + edx + 0x1fa08]
push ecx
push 0x4d36e8
lea edx, [ebp - 0x3c70]
push edx
push 0x4aa93c
call dword [sym.imp.KERNEL32.dll_GetPrivateProfileStringA]
mov eax, dword [ebp - 0x1218]
add eax, 1
push eax
push 0x4aa940
lea ecx, [ebp - 0x3c70]
push ecx
call fcn.004650e4
add esp, 0xc
lea edx, [ebp - 0x1324]
push edx
push 0
lea eax, [ebp - 0x3c70]
push eax
push 0x4aa94c
call dword [sym.imp.KERNEL32.dll_GetPrivateProfileIntA]
mov ecx, dword [ebp - 0x1218]
imul ecx, ecx, 0x118
mov edx, dword [ebp - 0x3c98]
mov dword [edx + ecx + 0x1fb10], eax
mov eax, dword [ebp - 0x1218]
add eax, 1
push eax
push 0x4aa950
lea ecx, [ebp - 0x3c70]
push ecx
call fcn.004650e4
add esp, 0xc
lea edx, [ebp - 0x1324]
push edx
push 0
lea eax, [ebp - 0x3c70]
push eax
push 0x4aa95c
call dword [sym.imp.KERNEL32.dll_GetPrivateProfileIntA]
mov ecx, dword [ebp - 0x1218]
imul ecx, ecx, 0x118
mov edx, dword [ebp - 0x3c98]
mov dword [edx + ecx + 0x1fb14], eax
mov eax, dword [ebp - 0x1218]
add eax, 1
push eax
push 0x4aa960
lea ecx, [ebp - 0x3c70]
push ecx
call fcn.004650e4
add esp, 0xc
lea edx, [ebp - 0x1324]
push edx
push 0
lea eax, [ebp - 0x3c70]
push eax
push 0x4aa96c
call dword [sym.imp.KERNEL32.dll_GetPrivateProfileIntA]
mov ecx, dword [ebp - 0x1218]
imul ecx, ecx, 0x118
mov edx, dword [ebp - 0x3c98]
mov dword [edx + ecx + 0x1fa04], eax
jmp 0x451cd1
lea eax, [ebp - 0x1324]
push eax
push 0
push 0x4aa970
push 0x4aa984
call dword [sym.imp.KERNEL32.dll_GetPrivateProfileIntA]
mov ecx, dword [ebp - 0x3c98]
mov dword [ecx + 0x38d0], eax
lea edx, [ebp - 0x1324]
push edx
push 0xc8
push 0x4aa98c
push 0x4aa998
call dword [sym.imp.KERNEL32.dll_GetPrivateProfileIntA]
mov ecx, dword [ebp - 0x3c98]
mov dword [ecx + 0xb9cc], eax
lea edx, [ebp - 0x1324]
push edx
push 1
push 0x4aa9a0
push 0x4aa9b0
call dword [sym.imp.KERNEL32.dll_GetPrivateProfileIntA]
mov ecx, dword [ebp - 0x3c98]
mov dword [ecx + 0x38d4], eax
lea edx, [ebp - 0x1324]
push edx
push 0
push 0x4aa9b8
push 0x4aa9c8
call dword [sym.imp.KERNEL32.dll_GetPrivateProfileIntA]
mov ecx, dword [ebp - 0x3c98]
mov dword [ecx + 0x38d8], eax
lea edx, [ebp - 0x1324]
push edx
push 0
push 0x4aa9d0
push 0x4aa9e0
call dword [sym.imp.KERNEL32.dll_GetPrivateProfileIntA]
mov ecx, dword [ebp - 0x3c98]
mov dword [ecx + 0x230c4], eax
lea edx, [ebp - 0x1324]
push edx
push 0x64
push 0x4aa9e4
push 0x4aa9fc
call dword [sym.imp.KERNEL32.dll_GetPrivateProfileIntA]
mov ecx, dword [ebp - 0x3c98]
mov dword [ecx + 0x38dc], eax
lea edx, [ebp - 0x1324]
push edx
push 0x40000
push 0x4aaa04
push 0x4aaa1c
call dword [sym.imp.KERNEL32.dll_GetPrivateProfileIntA]
mov ecx, dword [ebp - 0x3c98]
mov dword [ecx + 0x38e0], eax
lea edx, [ebp - 0x1324]
push edx
push 0x1000
lea eax, [ebp - 0x1004]
push eax
push str.CTRLALTC
push 0x4aaa30
push 0x4aaa38
call dword [sym.imp.KERNEL32.dll_GetPrivateProfileStringA]
mov ecx, dword [ebp - 0x3c98]
add ecx, 0x38e4
push ecx
push 0x4aaa40
lea edx, [ebp - 0x1004]
push edx
call fcn.0046502a
add esp, 0xc
lea eax, [ebp - 0x1324]
push eax
push 0
push 0x4aaa4c
push 0x4aaa5c
call dword [sym.imp.KERNEL32.dll_GetPrivateProfileIntA]
mov ecx, dword [ebp - 0x3c98]
mov dword [ecx + 0x38e8], eax
lea edx, [ebp - 0x1324]
push edx
push 0
push 0x4aaa64
push 0x4aaa78
call dword [sym.imp.KERNEL32.dll_GetPrivateProfileIntA]
mov ecx, dword [ebp - 0x3c98]
mov dword [ecx + 0x34c0], eax
lea edx, [ebp - 0x1324]
push edx
push 0
push 0x4aaa80
push 0x4aaa90
call dword [sym.imp.KERNEL32.dll_GetPrivateProfileIntA]
mov ecx, dword [ebp - 0x3c98]
mov dword [ecx + 0x1b9dc], eax
lea edx, [ebp - 0x1324]
push edx
push 0x1000
mov eax, dword [ebp - 0x3c98]
add eax, 0x1b9e0
push eax
push 0x4d36ec
push 0x4aaaa0
push 0x4aaaa8
call dword [sym.imp.KERNEL32.dll_GetPrivateProfileStringA]
lea ecx, [ebp - 0x1324]
push ecx
push 0
push 0x4aaab8
push 0x4aaac4
call dword [sym.imp.KERNEL32.dll_GetPrivateProfileIntA]
mov edx, dword [ebp - 0x3c98]
mov dword [edx + 0x1c9e4], eax
lea eax, [ebp - 0x1324]
push eax
push 0x1000
mov ecx, dword [ebp - 0x3c98]
add ecx, 0x1c9e8
push ecx
push 0x4d36f0
push 0x4aaad4
push 0x4aaad8
call dword [sym.imp.KERNEL32.dll_GetPrivateProfileStringA]
lea edx, [ebp - 0x1324]
push edx
push 1
push 0x4aaae8
push 0x4aaafc
call dword [sym.imp.KERNEL32.dll_GetPrivateProfileIntA]
mov ecx, dword [ebp - 0x3c98]
mov dword [ecx + 0x1d9ec], eax
lea edx, [ebp - 0x1324]
push edx
push 0
push 0x4aab04
push 0x4aab18
call dword [sym.imp.KERNEL32.dll_GetPrivateProfileIntA]
mov ecx, dword [ebp - 0x3c98]
mov dword [ecx + 0x1d9f0], eax
lea edx, [ebp - 0x1324]
push edx
push 0x1000
mov eax, dword [ebp - 0x3c98]
add eax, 0x1d9f4
push eax
push str.Norton_AntiVirus
push 0x4aab38
push 0x4aab44
call dword [sym.imp.KERNEL32.dll_GetPrivateProfileStringA]
lea ecx, [ebp - 0x1324]
push ecx
push 0x1000
mov edx, dword [ebp - 0x3c98]
add edx, 0x1e9f5
push edx
push str.CWebWindow_Class
push 0x4aab64
push 0x4aab70
call dword [sym.imp.KERNEL32.dll_GetPrivateProfileStringA]
lea eax, [ebp - 0x1324]
push eax
push 0x1001
lea ecx, [ebp - 0x1004]
push ecx
push str.0.0.0.0
push 0x4aab84
push 0x4aab94
call dword [sym.imp.KERNEL32.dll_GetPrivateProfileStringA]
lea edx, [ebp - 0x1004]
push edx
mov ecx, dword [ebp - 0x3c98]
add ecx, 0x1f9f8
call fcn.0048114d
lea eax, [ebp - 0x1324]
push eax
push 0
push 0x4aaba0
push 0x4aabb0
call dword [sym.imp.KERNEL32.dll_GetPrivateProfileIntA]
mov ecx, dword [ebp - 0x3c98]
mov dword [ecx + 0xa574], eax
lea edx, [ebp - 0x1324]
push edx
push 1
push 0x4aabb4
push 0x4aabc4
call dword [sym.imp.KERNEL32.dll_GetPrivateProfileIntA]
mov ecx, dword [ebp - 0x3c98]
mov dword [ecx + 0xa578], eax
lea edx, [ebp - 0x1324]
push edx
push 1
push 0x4aabc8
push 0x4aabe0
call dword [sym.imp.KERNEL32.dll_GetPrivateProfileIntA]
mov ecx, dword [ebp - 0x3c98]
mov dword [ecx + 0xa57c], eax
lea edx, [ebp - 0x1324]
push edx
push 1
push 0x4aabe4
push 0x4aabf4
call dword [sym.imp.KERNEL32.dll_GetPrivateProfileIntA]
mov ecx, dword [ebp - 0x3c98]
mov dword [ecx + 0xa580], eax
mov edx, dword [ebp - 0x3c98]
mov eax, dword [edx + 0xa9b4]
mov dword [0x4a7d14], eax
mov ecx, dword [ebp - 0x3c98]
mov edx, dword [ecx + 0x230c0]
mov dword [0x4b0064], edx
mov eax, dword [ebp - 0x3c98]
add eax, 0x1f9f8
push eax
mov ecx, 0x4b0054
call fcn.004810fd
mov ecx, dword [ebp - 0x3c98]
add ecx, 0xa154
push ecx
mov ecx, 0x4b005c
call fcn.0048114d
pop edi
mov esp, ebp
pop ebp
ret