Function at 0x447d40
Capabilities:
Read .ini file

Disassembly:
push ebp
mov ebp, esp
and esp, 0xfffffff8
sub esp, 0x31c
mov eax, dword [0x4ba700]
xor eax, esp
mov dword [esp + 0x318], eax
push ebx
push esi
push edi
lea eax, [esp + 0x18]
mov esi, ecx
call fcn.00451550
test eax, eax
jne 0x447d96
lea ecx, [eax + 9]
push str.._vncproperties.cpp_:__DBG___NO_current_user_n
mov eax, 0x4bc990
call fcn.00401110
add esp, 4
pop edi
pop esi
pop ebx
mov ecx, dword [esp + 0x318]
xor ecx, esp
call fcn.0047c3ff
mov esp, ebp
pop ebp
ret
mov ecx, 0x4a3fbe
lea eax, [esp + 0x18]
nop
mov dl, byte [eax]
cmp dl, byte [ecx]
jne 0x447dc0
test dl, dl
je 0x447dbc
mov dl, byte [eax + 1]
cmp dl, byte [ecx + 1]
jne 0x447dc0
add eax, 2
add ecx, 2
test dl, dl
jne 0x447da0
xor eax, eax
jmp 0x447dc5
sbb eax, eax
sbb eax, 0xffffffff
test eax, eax
jne 0x447dfd
lea ecx, [eax + 9]
push str.._vncproperties.cpp_:__DBG___Force_USER_SYSTEM_2_n
mov eax, 0x4bc990
call fcn.00401110
mov eax, dword [str.SYSTEM]
mov cx, word [0x4a9884]
mov dl, byte [0x4a9886]
add esp, 4
mov dword [esp + 0x18], eax
mov word [esp + 0x1c], cx
mov byte [esp + 0x1e], dl
lea edi, [esi + 8]
push edi
push 0
push str.DebugMode
push str.admin
call dword [sym.imp.KERNEL32.dll_GetPrivateProfileIntA]
mov ebx, eax
call fcn.0043dbc0
push edi
push 0x200
lea eax, [esp + 0x128]
push eax
push 0x4a3fbe
push str.path
push str.admin
call dword [sym.imp.KERNEL32.dll_GetPrivateProfileStringA]
lea ecx, [esp + 0x120]
push ecx
call fcn.0043e0c0
mov ebx, dword [sym.imp.KERNEL32.dll_GetPrivateProfileIntA]
push edi
push 0
push str.DebugLevel
push str.admin
call ebx
push edi
push 0
push str.Avilog
push str.admin
mov dword [0x4bc9a0], eax
call ebx
push edi
push 0
test eax, eax
push 0x4a94ec
setne dl
push str.admin
mov byte [0x4bcba9], dl
call ebx
mov ecx, dword [esi + 0x10c]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 0x160]
call eax
push edi
push 0
push 0x4a94fc
push str.admin
call ebx
mov ecx, dword [esi + 0x10c]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 0x158]
call eax
push edi
push 0
push str.MSLogonRequired
push str.admin
mov dword [esi + 0x1a0], 0
call ebx
mov ecx, dword [esi + 0x10c]
mov dword [esi + 0x1a0], eax
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 0x20c]
call eax
push edi
push 0
push str.NewMSLogon
push str.admin
mov dword [esi + 0x1ac], 0
call ebx
mov ecx, dword [esi + 0x10c]
mov dword [esi + 0x1ac], eax
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 0x214]
call eax
push edi
mov dword [esi + 0x1b0], 0
push 0
push str.UseDSMPlugin
push str.admin
call ebx
push edi
push 0x80
mov dword [esi + 0x1b0], eax
lea eax, [esi + 0x1b4]
push eax
push 0x4a3fbe
push str.DSMPlugin
push str.admin
call dword [sym.imp.KERNEL32.dll_GetPrivateProfileStringA]
mov ecx, dword [esi + 0x10c]
mov edx, dword [ecx]
mov eax, dword [edx + 0x15c]
call eax
test eax, eax
je 0x447f77
push 1
jmp 0x447f87
push edi
push 0
push str.AllowLoopback
push str.admin
call ebx
push eax
mov ecx, dword [esi + 0x10c]
mov edx, dword [ecx]
mov eax, dword [edx + 0x1c0]
call eax
push edi
push 1
push str.AuthRequired
push str.admin
call ebx
mov ecx, dword [esi + 0x10c]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 0x184]
call eax
push edi
push 0
push str.ConnectPriority
push str.admin
call ebx
mov ecx, dword [esi + 0x10c]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 0x148]
call eax
mov ecx, dword [esi + 0x10c]
mov edx, dword [ecx]
mov eax, dword [edx + 0x15c]
call eax
test eax, eax
jne 0x448040
push 0x96
call fcn.0047cc97
add esp, 4
push edi
push 0x96
push eax
push 0x4a3fbe
push str.AuthHosts
push str.admin
mov dword [esp + 0x28], eax
call dword [sym.imp.KERNEL32.dll_GetPrivateProfileStringA]
mov eax, dword [esp + 0x10]
mov ecx, dword [esi + 0x10c]
mov edx, dword [ecx]
test eax, eax
je 0x448048
push eax
mov eax, dword [edx + 0x18c]
call eax
mov ecx, dword [esp + 0x10]
push ecx
call fcn.0047d0a1
add esp, 4
jmp 0x448052
mov ecx, dword [esi + 0x10c]
mov edx, dword [ecx]
mov eax, dword [edx + 0x18c]
push 0
call eax
push str.._vncproperties.cpp_:__DBG___Load_User_Preferences_n
mov ecx, 9
mov eax, 0x4bc990
call fcn.00401110
add esp, 4
push str.._vncproperties.cpp_:_clearing_user_settings_n
mov ecx, 9
mov eax, 0x4bc990
call fcn.00401110
mov eax, 1
add esp, 4
mov dword [esi + 0x13c], eax
mov dword [esi + 0x134], eax
mov dword [esi + 0x138], eax
mov dword [esi + 0x130], eax
lea ecx, [eax + 8]
push str.c:dataultravncultravnc_project_rootultravncwinvncwinvnc_vncPasswd.h_:_PASSWD_:_FromClear_called_n
mov eax, 0x4bc990
mov dword [esi + 0x140], 0x170c
call fcn.00401110
add esp, 4
push 0x4a3fbe
lea eax, [esp + 0x14]
call fcn.00411550
mov ecx, dword [esp + 0x14]
mov edx, dword [esp + 0x18]
mov eax, 1
mov dword [esi + 0x148], ecx
xor ecx, ecx
add esp, 4
mov dword [esi + 0x14c], edx
mov dword [esi + 0x158], 2
mov dword [esi + 0x164], 0xa
mov dword [esi + 0x160], ecx
mov dword [esi + 0x168], ecx
mov dword [esi + 0x174], eax
mov dword [esi + 0x17c], ecx
mov dword [esi + 0x180], ecx
mov dword [esi + 0x184], ecx
mov dword [esi + 0x178], 0xffffffff
mov dword [esi + 0x16c], eax
mov dword [esi + 0x170], eax
mov dword [esi + 0x11c], eax
mov dword [esi + 0x118], eax
mov dword [esi + 0x114], eax
mov dword [esi + 0x188], ecx
mov dword [esi + 0x1b0], ecx
mov byte [esi + 0x1b4], cl
mov dword [esi + 0x18c], eax
mov dword [esi + 0x190], eax
mov dword [esi + 0x194], eax
mov dword [esi + 0x19c], eax
mov dword [esi + 0x1a4], ecx
mov dword [esi + 0x1a8], ecx
call fcn.00448270
mov eax, dword [esi + 0x118]
push edi
push eax
push str.AllowShutdown
push str.admin
call ebx
push edi
mov dword [esi + 0x118], eax
mov eax, dword [esi + 0x114]
push eax
push str.AllowProperties
push str.admin
call ebx
push edi
mov dword [esi + 0x114], eax
mov eax, dword [esi + 0x11c]
push eax
push str.AllowEditClients
push str.admin
call ebx
push edi
mov dword [esi + 0x11c], eax
mov eax, dword [esi + 0x120]
push eax
push str.FileTransferTimeout
push str.admin
call ebx
cmp eax, 0x3c
mov dword [esi + 0x120], eax
jle 0x4481fa
mov dword [esi + 0x120], 0x3c
mov eax, dword [esi + 0x124]
push edi
push eax
push str.KeepAliveInterval
push str.admin
call ebx
mov ecx, dword [esi + 0x120]
lea edx, [ecx - 1]
cmp eax, edx
mov dword [esi + 0x124], eax
jl 0x448227
mov dword [esi + 0x124], edx
mov eax, dword [esi + 0x10c]
mov dword [eax + 0x590], ecx
mov eax, dword [esi + 0x10c]
mov edx, dword [eax + 0x590]
mov ecx, dword [esi + 0x124]
dec edx
cmp ecx, edx
mov dword [eax + 0x594], ecx
jl 0x448256
mov dword [eax + 0x594], edx
call fcn.00447030
mov ecx, dword [esp + 0x324]
pop edi
pop esi
pop ebx
xor ecx, esp
call fcn.0047c3ff
mov esp, ebp
pop ebp
ret