Function at 0x483008
Capabilities:
Check os version
Get common file path
Read .ini file

Disassembly:
push ebp
mov ebp, esp
mov ecx, 0x19b
push 0
push 0
dec ecx
jne 0x483010
push ecx
push ebx
push esi
push edi
mov dword [ebp - 4], eax
xor eax, eax
push ebp
push 0x4833d4
push dword fs:[eax]
mov dword fs:[eax], esp
mov eax, dword [ebp - 4]
call fcn.00404d40
call fcn.00482db8
mov dword [ebp - 0x10], eax
cmp dword [ebp - 0x10], 0
je 0x48337e
mov eax, dword [ebp - 0x10]
push eax
lea eax, [ebp - 0x14]
mov ecx, 1
mov edx, dword [0x482fe4]
call fcn.004063fc
add esp, 4
mov edx, dword [ebp - 0x14]
mov eax, 0x108
mov dword [edx], eax
imul dword [ebp - 0x10]
mov dword [ebp - 8], eax
lea eax, [ebp - 0x10]
push eax
lea eax, [ebp - 8]
push eax
mov eax, dword [ebp - 0x14]
push eax
push 0
push 0
call sub.rasapi32.dll_RasEnumEntriesA
test eax, eax
jne 0x48337e
mov dword [ebp - 0xc4], 0x94
lea eax, [ebp - 0xc4]
push eax
call sub.kernel32.dll_GetVersionExA
lea eax, [ebp - 0x18]
mov edx, 0x105
call fcn.0040538c
lea eax, [ebp - 0x1c]
mov edx, 0x105
call fcn.0040538c
cmp dword [ebp - 0xb4], 2
jne 0x48313c
cmp dword [ebp - 0xc0], 5
jb 0x48313c
push 0
push 0x1a
lea eax, [ebp - 0x18]
call fcn.00405258
push eax
push 0
call sub.shell32.dll_SHGetSpecialFolderPathA
test eax, eax
je 0x483103
lea edx, [ebp - 0xbcc]
mov eax, dword [ebp - 0x18]
call fcn.00482d10
mov edx, dword [ebp - 0xbcc]
lea eax, [ebp - 0x18]
call fcn.00404dd8
push 0
push 0x23
lea eax, [ebp - 0x1c]
call fcn.00405258
push eax
push 0
call sub.shell32.dll_SHGetSpecialFolderPathA
test eax, eax
je 0x483137
lea edx, [ebp - 0xbd0]
mov eax, dword [ebp - 0x1c]
call fcn.00482d10
mov edx, dword [ebp - 0xbd0]
lea eax, [ebp - 0x1c]
call fcn.00404dd8
call fcn.00482c04
mov dword [ebp - 0x20], 0xffffffff
mov eax, dword [ebp - 0x10]
dec eax
test eax, eax
jl 0x48337e
inc eax
mov dword [ebp - 0x30], eax
xor esi, esi
lea eax, [ebp - 0x4e0]
mov edx, 0x41c
call fcn.00408168
mov dword [ebp - 0x4e0], 0x41c
mov ebx, esi
shl ebx, 5
add ebx, esi
mov eax, dword [ebp - 0x14]
lea eax, [eax + ebx*8 + 4]
lea edx, [ebp - 0x4dc]
mov ecx, pe_nt_image_headers32
call fcn.00402d58
lea eax, [ebp - 0x20]
push eax
lea eax, [ebp - 0x4e0]
push eax
push 0
call sub.rasapi32.dll_RasGetEntryDialParamsA
mov dword [ebp - 8], 0x6e8
lea eax, [ebp - 0xbc8]
xor ecx, ecx
mov edx, dword [ebp - 8]
call fcn.00403664
mov eax, dword [ebp - 8]
mov dword [ebp - 0xbc8], eax
lea eax, [ebp - 8]
push eax
push 0
lea eax, [ebp - 0xc]
push eax
mov eax, dword [ebp - 0x14]
lea edx, [eax + ebx*8 + 4]
lea ecx, [ebp - 0xbc8]
xor eax, eax
call fcn.00482f90
cmp dword [ebp - 0xb4], 2
jne 0x48330e
cmp dword [ebp - 0xc0], 5
jb 0x48330e
mov eax, dword [ebp - 0x18]
cmp byte [eax], 0
jne 0x48320b
mov eax, dword [ebp - 0x1c]
cmp byte [eax], 0
je 0x48330e
lea eax, [ebp - 0x24]
lea edx, [ebp - 0x4dc]
call fcn.00404f38
lea edx, [ebp - 0x28]
mov eax, dword [ebp - 0x24]
call fcn.00406fdc
lea eax, [ebp - 0x18]
call fcn.00405258
push eax
push 0
push 0x4833e4
mov eax, dword [ebp - 0x24]
call fcn.00405200
mov edi, eax
push edi
call sub.kernel32.dll_GetPrivateProfileIntA
mov ebx, eax
test ebx, ebx
jne 0x483262
lea eax, [ebp - 0x1c]
call fcn.00405258
push eax
push 0
push 0x4833e4
push edi
call sub.kernel32.dll_GetPrivateProfileIntA
mov ebx, eax
test ebx, ebx
jne 0x483286
lea eax, [ebp - 0x18]
call fcn.00405258
push eax
push 0
push 0x4833e4
mov eax, dword [ebp - 0x28]
call fcn.00405200
push eax
call sub.kernel32.dll_GetPrivateProfileIntA
mov ebx, eax
test ebx, ebx
jne 0x4832aa
lea eax, [ebp - 0x1c]
call fcn.00405258
push eax
push 0
push 0x4833e4
mov eax, dword [ebp - 0x28]
call fcn.00405200
push eax
call sub.kernel32.dll_GetPrivateProfileIntA
mov ebx, eax
test ebx, ebx
jbe 0x48330e
mov eax, ebx
xor edx, edx
push edx
push eax
lea eax, [ebp - 0xcd0]
call fcn.00405fe0
lea edx, [ebp - 0xcd0]
lea eax, [ebp - 0x2c]
call fcn.00404fa4
mov edi, pe_nt_image_headers32
mov ebx, 0x4a515c
mov eax, dword [ebx]
mov edx, dword [ebp - 0x2c]
call fcn.0040514c
jne 0x483308
cmp dword [ebx + 4], 0
je 0x483308
mov eax, dword [ebx + 4]
call fcn.00405000
push eax
mov eax, dword [ebx + 4]
call fcn.00405200
mov edx, eax
lea eax, [ebp - 0x1d8]
pop ecx
call fcn.00482e00
add ebx, 8
dec edi
jne 0x4832d7
mov eax, dword [ebp - 4]
push dword [eax]
push 0x4833fc
lea eax, [ebp - 0xcd4]
lea edx, [ebp - 0x4dc]
call fcn.00404f38
push dword [ebp - 0xcd4]
push 0x48340c
lea eax, [ebp - 0xcd8]
lea edx, [ebp - 0x2d9]
call fcn.00404f38
push dword [ebp - 0xcd8]
push 0x48341c
lea eax, [ebp - 0xcdc]
lea edx, [ebp - 0x1d8]
call fcn.00404f38
push dword [ebp - 0xcdc]
mov eax, dword [ebp - 4]
mov edx, 7
call fcn.004050c0
inc esi
dec dword [ebp - 0x30]
jne 0x483155
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
push 0x4833db
lea eax, [ebp - 0xcdc]
mov edx, 3
call fcn.00404d64
lea eax, [ebp - 0xbd0]
mov edx, 2
call fcn.00404d64
lea eax, [ebp - 0x2c]
mov edx, 3
call fcn.00404d64
lea eax, [ebp - 0x1c]
mov edx, 2
call fcn.00404d64
lea eax, [ebp - 0x14]
mov edx, dword [0x482fe4]
call fcn.00406408
ret