Function at 0x43619c
Capabilities:
Read .ini file
Reference cloudflare dns server

Disassembly:
push ebp
sub esp, 0x72c
lea ebp, [esp - 4]
mov eax, dword [0x46b114]
xor eax, ebp
mov dword [ebp + 0x72c], eax
push 0x30
mov eax, 0x44d1f5
call fcn.0043961e
mov eax, dword [ebp + 0x738]
mov ebx, dword [ebp + 0x744]
mov esi, ecx
mov ecx, dword [ebp + 0x73c]
mov dword [ebp - 0x14], ecx
mov ecx, dword [ebp + 0x740]
mov dword [ebp - 0x10], ecx
mov ecx, dword [ebp + 0x748]
mov dword [ebp - 0x18], ecx
test eax, eax
jne 0x43620d
push 0x104
lea eax, [ebp + 0x224]
push eax
push 0
call dword [sym.imp.KERNEL32.dll_GetCurrentProcess]
push eax
call sub.PSAPI.DLL_GetModuleBaseNameW
lea eax, [ebp + 0x224]
lea edi, [esi + 0xa4]
push eax
mov ecx, edi
call dword [sym.imp.MSVCP90.dll_public:_class_std::basic_string_wchar_t__struct_std::char_traits_wchar_t___class_std::allocator_wchar_t______thiscall_std::basic_string_wchar_t__struct_std::char_traits_wchar_t___class_std::allocator_wchar_t__::operator_wchar_t_const__]
lea ecx, [esi + 0xf8]
test ebx, ebx
jne 0x43622f
push edi
call dword [0x454368]
jmp 0x436236
push ebx
call dword [sym.imp.MSVCP90.dll_public:_class_std::basic_string_wchar_t__struct_std::char_traits_wchar_t___class_std::allocator_wchar_t______thiscall_std::basic_string_wchar_t__struct_std::char_traits_wchar_t___class_std::allocator_wchar_t__::operator_wchar_t_const__]
mov edi, 0x103
push edi
lea eax, [ebp + 0x1c]
push eax
xor ebx, ebx
push ebx
call dword [sym.imp.KERNEL32.dll_GetModuleFileNameW]
lea eax, [ebp + 0x1c]
push eax
lea ecx, [esi + 0x88]
call dword [sym.imp.MSVCP90.dll_public:_class_std::basic_string_wchar_t__struct_std::char_traits_wchar_t___class_std::allocator_wchar_t______thiscall_std::basic_string_wchar_t__struct_std::char_traits_wchar_t___class_std::allocator_wchar_t__::operator_wchar_t_const__]
lea ecx, [esi + 0x114]
cmp dword [ebp - 0x18], ebx
jne 0x43626b
push str.1.0.0.1
jmp 0x43626e
push dword [ebp - 0x18]
call dword [sym.imp.MSVCP90.dll_public:_class_std::basic_string_wchar_t__struct_std::char_traits_wchar_t___class_std::allocator_wchar_t______thiscall_std::basic_string_wchar_t__struct_std::char_traits_wchar_t___class_std::allocator_wchar_t__::operator_wchar_t_const__]
lea ecx, [esi + 0x16c]
cmp dword [ebp - 0x14], ebx
jne 0x436285
lea eax, [ebp + 0x1c]
push eax
jmp 0x436288
push dword [ebp - 0x14]
call dword [sym.imp.MSVCP90.dll_public:_class_std::basic_string_wchar_t__struct_std::char_traits_wchar_t___class_std::allocator_wchar_t______thiscall_std::basic_string_wchar_t__struct_std::char_traits_wchar_t___class_std::allocator_wchar_t__::operator_wchar_t_const__]
cmp dword [ebp - 0x10], ebx
je 0x4362a2
push dword [ebp - 0x10]
lea ecx, [esi + 0x188]
call dword [sym.imp.MSVCP90.dll_public:_class_std::basic_string_wchar_t__struct_std::char_traits_wchar_t___class_std::allocator_wchar_t______thiscall_std::basic_string_wchar_t__struct_std::char_traits_wchar_t___class_std::allocator_wchar_t__::operator_wchar_t_const__]
mov eax, dword [esi + 0x2c]
cmp eax, 1
jae 0x4362dd
push edi
lea eax, [ebp + 0x224]
push eax
lea eax, [ebp + 0x1c]
push eax
call fcn.00434ec9
add esp, 0xc
lea eax, [ebp + 0x224]
lea edi, [esi + 0x18]
push eax
mov ecx, edi
call dword [sym.imp.MSVCP90.dll_public:_class_std::basic_string_wchar_t__struct_std::char_traits_wchar_t___class_std::allocator_wchar_t______thiscall_std::basic_string_wchar_t__struct_std::char_traits_wchar_t___class_std::allocator_wchar_t__::operator_wchar_t_const__]
push str.Crash_
mov ecx, edi
call dword [0x454360]
lea eax, [esi + 0x18]
push str.crashinfo.ini
push eax
lea eax, [ebp]
push eax
call dword [sym.imp.MSVCP90.dll_class_std::basic_string_wchar_t__struct_std::char_traits_wchar_t___class_std::allocator_wchar_t_____cdecl_std::operator_wchar_t__struct_std::char_traits_wchar_t___class_std::allocator_wchar_t___class_std::basic_string_wchar_t__struct_std::char_traits_wchar_t___class_std::allocator_wchar_t___const___wchar_t_const__]
add esp, 0xc
cmp dword [ebp + 0x18], 8
mov eax, dword [ebp + 4]
mov dword [ebp - 4], ebx
jae 0x436302
lea eax, [ebp + 4]
mov edi, dword [sym.imp.KERNEL32.dll_GetPrivateProfileStringW]
push eax
push 0x100
lea eax, [ebp + 0x52c]
push eax
push ebx
push str.peerid
mov ebx, 0x454ea0
push ebx
call edi
lea eax, [ebp + 0x52c]
push eax
call dword [sym.imp.KERNEL32.dll_lstrlenW]
inc eax
cmp eax, 0x3fffffff
jle 0x43633c
xor eax, eax
jmp 0x43635a
add eax, eax
mov dword [ebp - 0x10], eax
call fcn.00439770
mov eax, esp
push 3
push dword [ebp - 0x10]
lea ecx, [ebp + 0x52c]
push ecx
push eax
call fcn.00434e59
push eax
lea ecx, [esi + 0x130]
call dword [0x45434c]
cmp dword [ebp + 0x18], 8
mov eax, dword [ebp + 4]
jae 0x436373
lea eax, [ebp + 4]
push eax
push 0x100
lea eax, [ebp + 0x52c]
push eax
push 0
push str.productid
push ebx
call edi
cmp eax, 1
jbe 0x4363a2
lea eax, [ebp + 0x52c]
push eax
lea ecx, [esi + 0xf8]
call dword [sym.imp.MSVCP90.dll_public:_class_std::basic_string_wchar_t__struct_std::char_traits_wchar_t___class_std::allocator_wchar_t______thiscall_std::basic_string_wchar_t__struct_std::char_traits_wchar_t___class_std::allocator_wchar_t__::operator_wchar_t_const__]
cmp dword [ebp + 0x18], 8
mov eax, dword [ebp + 4]
jae 0x4363ae
lea eax, [ebp + 4]
push eax
push 0x100
lea eax, [ebp + 0x52c]
push eax
push 0
push str.version
push ebx
call edi
cmp eax, 1
jbe 0x4363dd
lea eax, [ebp + 0x52c]
push eax
lea ecx, [esi + 0x114]
call dword [sym.imp.MSVCP90.dll_public:_class_std::basic_string_wchar_t__struct_std::char_traits_wchar_t___class_std::allocator_wchar_t______thiscall_std::basic_string_wchar_t__struct_std::char_traits_wchar_t___class_std::allocator_wchar_t__::operator_wchar_t_const__]
lea eax, [ebp - 0x20]
push eax
call dword [sym.imp.MSVCR90.dll__time64]
lea eax, [ebp - 0x20]
push eax
call dword [sym.imp.MSVCR90.dll__localtime64]
push eax
push 0x4552c8
lea eax, [ebp + 0x42c]
push 0x80
push eax
call dword [sym.imp.MSVCR90.dll_wcsftime]
lea eax, [ebp + 0x42c]
push eax
lea eax, [esi + 0x18]
push eax
lea eax, [ebp - 0x3c]
push eax
call dword [sym.imp.MSVCP90.dll_class_std::basic_string_wchar_t__struct_std::char_traits_wchar_t___class_std::allocator_wchar_t_____cdecl_std::operator_wchar_t__struct_std::char_traits_wchar_t___class_std::allocator_wchar_t___class_std::basic_string_wchar_t__struct_std::char_traits_wchar_t___class_std::allocator_wchar_t___const___wchar_t_const__]
add esp, 0x24
push eax
lea ecx, [esi + 0x34]
mov byte [ebp - 4], 1
call dword [0x454368]
lea ecx, [ebp - 0x3c]
mov byte [ebp - 4], 0
call dword [sym.imp.MSVCP90.dll_public:_void___thiscall_std::basic_string_wchar_t__struct_std::char_traits_wchar_t___class_std::allocator_wchar_t__::destructor_void_]
cmp byte [esi + 6], 0
je 0x436447
call fcn.00442a7d
cmp byte [esi + 7], 0
je 0x436452
call fcn.00442a7d
mov edi, dword [sym.imp.KERNEL32.dll_SetErrorMode]
push 0
call edi
or eax, 2
push eax
call edi
call fcn.00436d70
call dword [sym.imp.KERNEL32.dll_GetCurrentThread]
push eax
call fcn.004375d0
push 0x4360d2
push 0x46cd88
call fcn.00437690
call fcn.00436fd0
mov ecx, esi
call fcn.00435189
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp]
call dword [sym.imp.MSVCP90.dll_public:_void___thiscall_std::basic_string_wchar_t__struct_std::char_traits_wchar_t___class_std::allocator_wchar_t__::destructor_void_]
xor eax, eax
lea esp, [ebp - 0x4c]
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov ecx, dword [ebp + 0x72c]
xor ecx, ebp
call fcn.004390e8
add ebp, 0x730
leave
ret 0x14