Function at 0x44bbce
Capabilities:
Access peb ldr_data
Get process heap force flags

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x45f614
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
sub esp, 0x114
mov dword [ebp - 0x118], ecx
mov eax, dword [ebp - 0x118]
mov dword [eax + 0x38], 1
mov ecx, dword [ebp - 0x118]
add ecx, 4
call fcn.004020c0
push eax
mov ecx, dword [ebp - 0x118]
add ecx, 0x10
call fcn.004020c0
push eax
push str.SVR_IP_ADDR
push 0x4742c4
call dword [sym.imp.KERNEL32.dll_WritePrivateProfileStringA]
push pe_nt_image_headers32
push 0
lea ecx, [ebp - 0x10c]
push ecx
call sub.MSVCRT.dll_memset
add esp, 0xc
mov edx, dword [ebp - 0x118]
mov eax, dword [edx + 0xc]
push eax
push 0x4742cc
lea ecx, [ebp - 0x10c]
push ecx
call dword [sym.imp.MSVCRT.dll_sprintf]
add esp, 0xc
mov ecx, dword [ebp - 0x118]
add ecx, 4
call fcn.004020c0
push eax
lea edx, [ebp - 0x10c]
push edx
push str.SVR_PORT_NO
push 0x4742dc
call dword [sym.imp.KERNEL32.dll_WritePrivateProfileStringA]
mov ecx, dword [ebp - 0x118]
add ecx, 4
call fcn.004020c0
push eax
mov ecx, dword [ebp - 0x118]
add ecx, 0x18
call fcn.004020c0
push eax
push str.DOWNLOAD_BASE_URL
push 0x4742f8
call dword [sym.imp.KERNEL32.dll_WritePrivateProfileStringA]
mov ecx, dword [ebp - 0x118]
add ecx, 4
call fcn.004020c0
push eax
mov ecx, dword [ebp - 0x118]
add ecx, 8
call fcn.004020c0
push eax
push str.LIST_FILE_NAME
push 0x474310
call dword [sym.imp.KERNEL32.dll_WritePrivateProfileStringA]
mov ecx, dword [ebp - 0x118]
add ecx, 4
call fcn.004020c0
push eax
mov ecx, dword [ebp - 0x118]
add ecx, 0x1c
call fcn.004020c0
push eax
push str.LINK_APPEND_NAME
push 0x47432c
call dword [sym.imp.KERNEL32.dll_WritePrivateProfileStringA]
push pe_nt_image_headers32
push 0
lea eax, [ebp - 0x10c]
push eax
call sub.MSVCRT.dll_memset
add esp, 0xc
mov ecx, dword [ebp - 0x118]
mov edx, dword [ecx + 0x20]
push edx
push 0x474334
lea eax, [ebp - 0x10c]
push eax
call dword [sym.imp.MSVCRT.dll_sprintf]
add esp, 0xc
mov ecx, dword [ebp - 0x118]
add ecx, 4
call fcn.004020c0
push eax
lea ecx, [ebp - 0x10c]
push ecx
push str.TIME_CHECK_SPAN
push 0x474348
call dword [sym.imp.KERNEL32.dll_WritePrivateProfileStringA]
push pe_nt_image_headers32
push 0
lea edx, [ebp - 0x10c]
push edx
call sub.MSVCRT.dll_memset
add esp, 0xc
mov eax, dword [ebp - 0x118]
mov ecx, dword [eax + 0x24]
push ecx
push 0x474350
lea edx, [ebp - 0x10c]
push edx
call dword [sym.imp.MSVCRT.dll_sprintf]
add esp, 0xc
mov ecx, dword [ebp - 0x118]
add ecx, 4
call fcn.004020c0
push eax
lea eax, [ebp - 0x10c]
push eax
push str.SVR_HTTPS
push 0x474360
call dword [sym.imp.KERNEL32.dll_WritePrivateProfileStringA]
push pe_nt_image_headers32
push 0
lea ecx, [ebp - 0x10c]
push ecx
call sub.MSVCRT.dll_memset
add esp, 0xc
mov edx, dword [ebp - 0x118]
mov eax, dword [edx + 0x2c]
push eax
push 0x474368
lea ecx, [ebp - 0x10c]
push ecx
call dword [sym.imp.MSVCRT.dll_sprintf]
add esp, 0xc
mov ecx, dword [ebp - 0x118]
add ecx, 4
call fcn.004020c0
push eax
lea edx, [ebp - 0x10c]
push edx
push str.ALWAYS_REGISTRY
push 0x47437c
call dword [sym.imp.KERNEL32.dll_WritePrivateProfileStringA]
push pe_nt_image_headers32
push 0
lea eax, [ebp - 0x10c]
push eax
call sub.MSVCRT.dll_memset
add esp, 0xc
mov ecx, dword [ebp - 0x118]
mov edx, dword [ecx + 0x30]
push edx
push 0x474384
lea eax, [ebp - 0x10c]
push eax
call dword [sym.imp.MSVCRT.dll_sprintf]
add esp, 0xc
mov ecx, dword [ebp - 0x118]
add ecx, 4
call fcn.004020c0
push eax
lea ecx, [ebp - 0x10c]
push ecx
push str.ENCODE_URL_UTF
push 0x474398
call dword [sym.imp.KERNEL32.dll_WritePrivateProfileStringA]
mov ecx, dword [ebp - 0x118]
add ecx, 4
call fcn.004020c0
push eax
mov ecx, dword [ebp - 0x118]
add ecx, 0x34
call fcn.004020c0
push eax
push 0x4743a0
push 0x4743b0
call dword [sym.imp.KERNEL32.dll_WritePrivateProfileStringA]
push pe_nt_image_headers32
push 0
lea edx, [ebp - 0x10c]
push edx
call sub.MSVCRT.dll_memset
add esp, 0xc
mov eax, dword [ebp - 0x118]
mov ecx, dword [eax + 0x38]
push ecx
push 0x4743bc
lea edx, [ebp - 0x10c]
push edx
call dword [sym.imp.MSVCRT.dll_sprintf]
add esp, 0xc
mov ecx, dword [ebp - 0x118]
add ecx, 4
call fcn.004020c0
push eax
lea eax, [ebp - 0x10c]
push eax
push 0x4743c0
push 0x4743d8
call dword [sym.imp.KERNEL32.dll_WritePrivateProfileStringA]
push str._Y__m__d__H:_M:_S
lea ecx, [ebp - 0x114]
push ecx
lea edx, [ebp - 0x110]
push edx
call sub.MFC42.DLL_CTime::GetTickCount
mov ecx, eax
call sub.MFC42.DLL_CTime::Format
mov dword [ebp - 0x11c], eax
mov eax, dword [ebp - 0x11c]
mov dword [ebp - 0x120], eax
mov dword [ebp - 4], 0
mov ecx, dword [ebp - 0x120]
push ecx
mov ecx, dword [ebp - 0x118]
add ecx, 0x3c
call sub.MFC42.DLL_CString::operator
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x114]
call sub.MFC42.DLL_CString::CString
mov ecx, dword [ebp - 0x118]
add ecx, 4
call fcn.004020c0
push eax
mov ecx, dword [ebp - 0x118]
add ecx, 0x3c
call fcn.004020c0
push eax
push str.LAST_SETUP_DATE
push 0x474404
call dword [sym.imp.KERNEL32.dll_WritePrivateProfileStringA]
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
mov esp, ebp
pop ebp
ret