Function at 0x4052a0
Capabilities:
Read .ini file

Disassembly:
push 0xffffffffffffffff
push 0x472427
mov eax, dword fs:[0]
push eax
mov eax, 0x5654
call fcn.00447e10
mov eax, dword [0x491050]
xor eax, esp
mov dword [esp + 0x5650], eax
push ebx
push ebp
push esi
push edi
mov eax, dword [0x491050]
xor eax, esp
push eax
lea eax, [esp + 0x5668]
mov dword fs:[0], eax
mov esi, ecx
mov dword [esp + 0x24], esi
call fcn.0040ed10
xor ecx, ecx
xor ebx, ebx
cmp eax, ebx
setne cl
cmp ecx, ebx
jne 0x405321
push str.__atl_condVal
push ebx
push 0xe2
push str.C:Program_Files__x86_Microsoft_Visual_Studio_9.0VC_atlmfcinclude_atlsimpstr.h
push 2
call fcn.00439d00
add esp, 0x14
cmp eax, 1
jne 0x405317
int3
push 0x80004005
call fcn.0040d9e0
mov edx, dword [eax]
mov ecx, eax
mov eax, dword [edx + 0xc]
call eax
add eax, 0x10
mov dword [esp + 0x14], eax
mov dword [esp + 0x5670], ebx
cmp esi, ebx
jne 0x405340
xor eax, eax
jmp 0x40534e
mov eax, esi
lea edx, [eax + 1]
mov cl, byte [eax]
inc eax
test cl, cl
jne 0x405345
sub eax, edx
push eax
push esi
lea ecx, [esp + 0x1c]
call fcn.0040d7e0
call fcn.0040ed10
xor ecx, ecx
cmp eax, ebx
setne cl
cmp ecx, ebx
jne 0x405393
push str.__atl_condVal
push ebx
push 0xe2
push str.C:Program_Files__x86_Microsoft_Visual_Studio_9.0VC_atlmfcinclude_atlsimpstr.h
push 2
call fcn.00439d00
add esp, 0x14
cmp eax, 1
jne 0x405389
int3
push 0x80004005
call fcn.0040d9e0
mov edx, dword [eax]
mov ecx, eax
mov eax, dword [edx + 0xc]
call eax
lea esi, [eax + 0x10]
mov dword [esp + 0x18], esi
push 0x486f97
lea ecx, [esp + 0x20]
mov byte [esp + 0x5674], 1
call fcn.0040d8d0
push 0x103
lea ecx, [esp + 0x31]
mov byte [esp + 0x5674], 2
push ebx
push ecx
mov dword [esp + 0x34], ebx
mov byte [esp + 0x38], 0
call fcn.00444930
push 0x3ff
lea edx, [esp + 0xc4d]
push ebx
push edx
mov byte [esp + 0xc54], 0
call fcn.00444930
push 0x3ff
lea eax, [esp + 0x1459]
push ebx
push eax
mov byte [esp + 0x1460], 0
call fcn.00444930
push 0x3ff
lea ecx, [esp + 0x1865]
push ebx
push ecx
mov byte [esp + 0x186c], 0
call fcn.00444930
push 0x3ff
lea edx, [esp + 0x871]
push ebx
push edx
mov byte [esp + 0x878], 0
call fcn.00444930
push 0x7ff
lea eax, [esp + 0x247d]
push ebx
push eax
mov byte [esp + 0x2484], 0
call fcn.00444930
add esp, 0x48
push 0x3ff
lea ecx, [esp + 0x441]
push ebx
push ecx
mov byte [esp + 0x448], 0
call fcn.00444930
push 0xfff
lea edx, [esp + 0x2c4d]
push ebx
push edx
mov byte [esp + 0x2c54], 0
call fcn.00444930
mov edx, dword [esp + 0x2c]
mov eax, dword [edx - 8]
mov ecx, 1
sub ecx, dword [edx - 4]
sub eax, 0x800
add esp, 0x18
or eax, ecx
jge 0x4054c7
push 0x800
lea ecx, [esp + 0x18]
call fcn.0040d6a0
mov edx, dword [esp + 0x14]
lea ecx, [esp + 0x243c]
call fcn.0040aac0
lea eax, [esp + 0x243c]
lea edx, [eax + 1]
lea ecx, [ecx]
mov cl, byte [eax]
inc eax
test cl, cl
jne 0x4054e0
sub eax, edx
push eax
lea eax, [esp + 0x2440]
push eax
lea ecx, [esp + 0x1c]
call fcn.0040d7e0
lea ecx, [esp + 0x28]
push ecx
push 0x488238
lea edx, [esp + 0x28]
push edx
lea ecx, [esp + 0x20]
call fcn.0040c3a0
mov byte [esp + 0x5670], 3
mov ecx, dword [eax]
lea eax, [ecx - 0x10]
lea edi, [esi - 0x10]
cmp eax, edi
je 0x40555f
cmp dword [edi + 0xc], ebx
jl 0x40554d
mov edx, dword [eax]
cmp edx, dword [edi]
jne 0x40554d
push eax
call fcn.0040d130
add esp, 4
mov ecx, edi
mov esi, eax
call fcn.0040d540
add esi, 0x10
mov dword [esp + 0x18], esi
jmp 0x40555f
mov eax, dword [ecx - 0xc]
push eax
push ecx
lea ecx, [esp + 0x20]
call fcn.0040d7e0
mov esi, dword [esp + 0x18]
mov byte [esp + 0x5670], 2
mov edi, dword [esp + 0x20]
add edi, 0xfffffff0
cmp dword [edi + 0xc], 0
lea ebp, [edi + 0xc]
jne 0x405595
push str.nRefs___0
push 0
push 0x6b
push str.C:Program_Files__x86_Microsoft_Visual_Studio_9.0VC_atlmfcinclude_atlsimpstr.h
push 2
call fcn.00439d00
add esp, 0x14
cmp eax, 1
jne 0x405595
int3
or eax, 0xffffffff
lock xadd dword [ebp], eax
dec eax
test eax, eax
jg 0x4055b0
mov ecx, dword [edi]
mov edx, dword [ecx]
mov eax, dword [edx + 4]
push edi
call eax
lea esp, [esp]
push 0x486f97
push esi
call fcn.0043f8a0
add esp, 8
test eax, eax
setne al
test al, al
je 0x4057bf
lea ecx, [esp + 0x28]
push ecx
push 0x488238
lea edx, [esp + 0x28]
push edx
lea ecx, [esp + 0x20]
inc ebx
call fcn.0040c3a0
mov byte [esp + 0x5670], 4
mov ecx, dword [eax]
lea eax, [ecx - 0x10]
lea edi, [esi - 0x10]
cmp eax, edi
je 0x405666
cmp dword [edi + 0xc], 0
lea esi, [edi + 0xc]
jl 0x405654
mov edx, dword [eax]
cmp edx, dword [edi]
jne 0x405654
push eax
call fcn.0040d130
add esp, 4
cmp dword [esi], 0
mov ebp, eax
jne 0x405635
push str.nRefs___0
push 0
push 0x6b
push str.C:Program_Files__x86_Microsoft_Visual_Studio_9.0VC_atlmfcinclude_atlsimpstr.h
push 2
call fcn.00439d00
add esp, 0x14
cmp eax, 1
jne 0x405635
int3
or eax, 0xffffffff
lock xadd dword [esi], eax
dec eax
test eax, eax
jg 0x40564b
mov ecx, dword [edi]
mov edx, dword [ecx]
mov eax, dword [edx + 4]
push edi
call eax
lea esi, [ebp + 0x10]
mov dword [esp + 0x18], esi
jmp 0x405666
mov eax, dword [ecx - 0xc]
push eax
push ecx
lea ecx, [esp + 0x20]
call fcn.0040d7e0
mov esi, dword [esp + 0x18]
mov byte [esp + 0x5670], 2
mov edi, dword [esp + 0x20]
add edi, 0xfffffff0
cmp dword [edi + 0xc], 0
lea ebp, [edi + 0xc]
jne 0x40569c
push str.nRefs___0
push 0
push 0x6b
push str.C:Program_Files__x86_Microsoft_Visual_Studio_9.0VC_atlmfcinclude_atlsimpstr.h
push 2
call fcn.00439d00
add esp, 0x14
cmp eax, 1
jne 0x40569c
int3
or ecx, 0xffffffff
lock xadd dword [ebp], ecx
dec ecx
test ecx, ecx
jg 0x4056b3
mov ecx, dword [edi]
mov edx, dword [ecx]
mov eax, dword [edx + 4]
push edi
call eax
push 0x486f97
push esi
call fcn.0044fd00
add esp, 8
test eax, eax
je 0x4057bf
cmp ebx, 2
jne 0x4056ee
push 0x3ff
push esi
lea ecx, [esp + 0xc44]
push 0x400
push ecx
call fcn.00440540
add esp, 0x10
jmp 0x4055b0
cmp ebx, 3
jne 0x405713
push 0x3ff
push esi
lea edx, [esp + 0x1444]
push 0x400
push edx
call fcn.00440540
add esp, 0x10
jmp 0x4055b0
cmp ebx, 6
jne 0x405738
push 0x3ff
push esi
lea eax, [esp + 0x1844]
push 0x400
push eax
call fcn.00440540
add esp, 0x10
jmp 0x4055b0
cmp ebx, 7
jne 0x40575d
push 0x3ff
push esi
lea ecx, [esp + 0x844]
push 0x400
push ecx
call fcn.00440540
add esp, 0x10
jmp 0x4055b0
cmp ebx, 0xb
jne 0x40577f
push 0x103
push esi
lea edx, [esp + 0x34]
push 0x104
push edx
call fcn.00440540
add esp, 0x10
jmp 0x4055b0
cmp ebx, 0xa
jne 0x4055b0
push 0x103
push esi
lea eax, [esp + 0x138]
push 0x104
push eax
call fcn.00440540
lea edx, [esp + 0x44c]
add esp, 0x10
mov eax, esi
sub edx, esi
mov edi, edi
mov cl, byte [eax]
mov byte [edx + eax], cl
inc eax
test cl, cl
jne 0x4057b0
jmp 0x4055b0
lea ecx, [esp + 0x183c]
push str.SVCHOST.EXE
push ecx
call fcn.0044fd00
add esp, 8
test eax, eax
jne 0x40580e
lea edx, [esp + 0x83c]
push str.C:WINDOWSSYSTEM32SVCHOST.EXE
push edx
call fcn.0044fd00
add esp, 8
test eax, eax
jne 0x40580e
lea eax, [esp + 0xc3c]
push 0x488394
push eax
call fcn.0044fd00
add esp, 8
test eax, eax
je 0x4058ba
lea ecx, [esp + 0x183c]
push str.SVCHOST.EXE
push ecx
call fcn.0044fd00
add esp, 8
test eax, eax
jne 0x405872
lea edx, [esp + 0x83c]
push str.C:WINDOWSSYSTEM32SVCHOST.EXE
push edx
call fcn.0044fd00
add esp, 8
test eax, eax
jne 0x405872
lea eax, [esp + 0xc3c]
push str.RPCNET.EXE
push eax
call fcn.0044fd00
add esp, 8
test eax, eax
jne 0x405872
lea ecx, [esp + 0x143c]
push str.C:WINDOWSSYSTEM32RPCNET.EXE
push ecx
call fcn.0044fd00
add esp, 8
test eax, eax
je 0x4058ba
lea edx, [esp + 0x183c]
push str.utorrentie.exe
push edx
call fcn.0044fd00
mov esi, dword [sym.imp.SHLWAPI.dll_StrStrIA]
add esp, 8
test eax, eax
jne 0x4058dc
lea eax, [esp + 0xc3c]
push str.bittorrent.exe
push eax
call fcn.0044fd00
add esp, 8
test eax, eax
jne 0x4058dc
mov ebp, dword [esp + 0x24]
push str.ROAMING_L.220415
push ebp
call esi
test eax, eax
je 0x4058e0
lea ecx, [esp + 0x1c]
call fcn.0040d1e0
lea ecx, [esp + 0x18]
call fcn.0040d1e0
lea ecx, [esp + 0x14]
call fcn.0040d1e0
mov al, 1
jmp 0x40641a
mov ebp, dword [esp + 0x24]
lea ecx, [esp + 0xc3c]
push str.NVBACKEND.EXE
push ecx
call fcn.0044fd00
add esp, 8
test eax, eax
jne 0x40591b
push str.UPDATE_CORE_
lea edx, [esp + 0x1440]
push edx
call esi
test eax, eax
je 0x40591b
push str.NVIDIANVBACKEND_
lea eax, [esp + 0x840]
push eax
call esi
lea ecx, [esp + 0xc3c]
push 0x486f97
push ecx
call fcn.0044fd00
add esp, 8
test eax, eax
jne 0x405964
push str.C:WINDOWSSYSTEM32SVCHOST.EXE
lea edx, [esp + 0x840]
push edx
call esi
test eax, eax
jne 0x405964
lea eax, [esp + 0x130]
push 0x486f97
push eax
call fcn.0044fd00
add esp, 8
test eax, eax
je 0x4058ba
lea ecx, [esp + 0x2c]
push str.MAL_CMD_COMM2
push ecx
call fcn.0044fd00
add esp, 8
test eax, eax
jne 0x405997
lea edx, [esp + 0x130]
push str._K_SWPRV
push edx
call fcn.0044fd00
add esp, 8
test eax, eax
je 0x4058ba
lea eax, [esp + 0x2c]
push str.MAL_CMD_COMM2
push eax
call fcn.0044fd00
add esp, 8
test eax, eax
jne 0x4059ca
lea ecx, [esp + 0x130]
push str._K_DEFRAGSVC
push ecx
call fcn.0044fd00
add esp, 8
test eax, eax
je 0x4058ba
lea edx, [esp + 0x2c]
push str.MAL_CMD_COMM2
push edx
call fcn.0044fd00
add esp, 8
test eax, eax
jne 0x4059fd
lea eax, [esp + 0x130]
push str._K_NETSVCS
push eax
call fcn.0044fd00
add esp, 8
test eax, eax
je 0x4058ba
lea ecx, [esp + 0x2c]
push str.MAL_CMD_COMM2
push ecx
call fcn.0044fd00
add esp, 8
test eax, eax
jne 0x405a30
lea edx, [esp + 0x130]
push str._K_NETSVCS__S_WISVC
push edx
call fcn.0044fd00
add esp, 8
test eax, eax
je 0x4058ba
lea eax, [esp + 0x2c]
push str.MAL_CMD_COMM2
push eax
call fcn.0044fd00
add esp, 8
test eax, eax
jne 0x405a63
lea ecx, [esp + 0x130]
push str._K_NETSVCS__S_GPSVC
push ecx
call fcn.0044fd00
add esp, 8
test eax, eax
je 0x4058ba
lea edx, [esp + 0x2c]
push str.MAL_CMD_COMM2
push edx
call fcn.0044fd00
add esp, 8
test eax, eax
jne 0x405a96
lea eax, [esp + 0x130]
push str._K_NETSVCS__S_WLIDSVC
push eax
call fcn.0044fd00
add esp, 8
test eax, eax
je 0x4058ba
lea ecx, [esp + 0x2c]
push str.MAL_CMD_COMM2
push ecx
call fcn.0044fd00
add esp, 8
test eax, eax
jne 0x405ac9
lea edx, [esp + 0x130]
push str._K_NETSVCS__S_BITS
push edx
call fcn.0044fd00
add esp, 8
test eax, eax
je 0x4058ba
lea eax, [esp + 0x2c]
push str.MAL_CMD_COMM2
push eax
call fcn.0044fd00
add esp, 8
test eax, eax
jne 0x405afc
lea ecx, [esp + 0x130]
push str._K_LOCALSYSTEMNETWORKRESTRICTED__S_WDISYSTEMHOST
push ecx
call fcn.0044fd00
add esp, 8
test eax, eax
je 0x4058ba
lea edx, [esp + 0x2c]
push str.MAL_CMD_COMM2
push edx
call fcn.0044fd00
add esp, 8
test eax, eax
jne 0x405b2f
lea eax, [esp + 0x130]
push str._K_LOCALSERVICENETWORKRESTRICTED__S_LMHOSTS
push eax
call fcn.0044fd00
add esp, 8
test eax, eax
je 0x4058ba
lea ecx, [esp + 0x2c]
push str.MAL_CMD_COMM2
push ecx
call fcn.0044fd00
add esp, 8
test eax, eax
jne 0x405b62
lea edx, [esp + 0x130]
push str._K_NETSVCS__S_DOSVC
push edx
call fcn.0044fd00
add esp, 8
test eax, eax
je 0x4058ba
lea eax, [esp + 0x2c]
push str.MAL_CMD_COMM2
push eax
call fcn.0044fd00
add esp, 8
test eax, eax
jne 0x405b95
lea ecx, [esp + 0x130]
push str._K_CAMERA__S_FRAMESERVER
push ecx
call fcn.0044fd00
add esp, 8
test eax, eax
je 0x4058ba
lea edx, [esp + 0x2c]
push str.MAL_CMD_COMM2
push edx
call fcn.0044fd00
add esp, 8
test eax, eax
jne 0x405bc8
lea eax, [esp + 0x130]
push str._K_LOCALSERVICEANDNOIMPERSONATION
push eax
call fcn.0044fd00
add esp, 8
test eax, eax
je 0x4058ba
lea ecx, [esp + 0x2c]
push str.MAL_CMD_COMM2
push ecx
call fcn.0044fd00
add esp, 8
test eax, eax
jne 0x405bfb
lea edx, [esp + 0x130]
push str._K_WBIOSVCGROUP
push edx
call fcn.0044fd00
add esp, 8
test eax, eax
je 0x4058ba
lea eax, [esp + 0x2c]
push str.MAL_CMD_COMM2
push eax
call fcn.0044fd00
add esp, 8
test eax, eax
jne 0x405c2e
lea ecx, [esp + 0x130]
push str._K_UNISTACKSVCGROUP__S_CDPUSERSVC
push ecx
call fcn.0044fd00
add esp, 8
test eax, eax
je 0x4058ba
lea edx, [esp + 0x2c]
push str.MAL_CMD_COMM2
push edx
call fcn.0044fd00
add esp, 8
test eax, eax
jne 0x405c61
lea eax, [esp + 0x130]
push str._K_UNISTACKSVCGROUP__S_WPNUSERSERVICE
push eax
call fcn.0044fd00
add esp, 8
test eax, eax
je 0x4058ba
lea ecx, [esp + 0x2c]
push str.MAL_CMD_COMM2
push ecx
call fcn.0044fd00
add esp, 8
test eax, eax
jne 0x405c94
lea edx, [esp + 0x130]
push str._K_LOCALSERVICE__S_W32TIME
push edx
call fcn.0044fd00
add esp, 8
test eax, eax
je 0x4058ba
lea eax, [esp + 0x2c]
push str.MAL_CMD_COMM2
push eax
call fcn.0044fd00
add esp, 8
test eax, eax
jne 0x405cc7
lea ecx, [esp + 0x130]
push str._K_LOCALSYSTEMNETWORKRESTRICTED__S_NGCSVC
push ecx
call fcn.0044fd00
add esp, 8
test eax, eax
je 0x4058ba
lea edx, [esp + 0x2c]
push str.MAL_CMD_COMM2
push edx
call fcn.0044fd00
add esp, 8
test eax, eax
jne 0x405cfa
lea eax, [esp + 0x130]
push str._K_NETSVCS__S_DSMSVC
push eax
call fcn.0044fd00
add esp, 8
test eax, eax
je 0x4058ba
lea ecx, [esp + 0x2c]
push str.MAL_CMD_COMM2
push ecx
call fcn.0044fd00
add esp, 8
test eax, eax
jne 0x405d2d
lea edx, [esp + 0x130]
push str._K_NETSVCS__S_LFSVC
push edx
call fcn.0044fd00
add esp, 8
test eax, eax
je 0x4058ba
lea eax, [esp + 0x2c]
push str.MAL_CMD_COMM2
push eax
call fcn.0044fd00
add esp, 8
test eax, eax
jne 0x405d60
lea ecx, [esp + 0x130]
push str._K_LOCALSYSTEMNETWORKRESTRICTED__S_STORSVC
push ecx
call fcn.0044fd00
add esp, 8
test eax, eax
je 0x4058ba
lea edx, [esp + 0x2c]
push str.MAL_CMD_COMM2
push edx
call fcn.0044fd00
add esp, 8
test eax, eax
jne 0x405d93
lea eax, [esp + 0x130]
push str._K_LOCALSERVICE__S_LICENSEMANAGER
push eax
call fcn.0044fd00
add esp, 8
test eax, eax
je 0x4058ba
lea ecx, [esp + 0x2c]
push str.MAL_CMD_COMM2
push ecx
call fcn.0044fd00
add esp, 8
test eax, eax
jne 0x405dc6
lea edx, [esp + 0x130]
push str._K_LOCALSERVICENETWORKRESTRICTED__S_WSCSVC
push edx
call fcn.0044fd00
add esp, 8
test eax, eax
je 0x4058ba
lea eax, [esp + 0x2c]
push str.MAL_CMD_COMM2
push eax
call fcn.0044fd00
add esp, 8
test eax, eax
jne 0x405df9
lea ecx, [esp + 0x130]
push str._K_NETSVCS__S_NETSETUPSVC
push ecx
call fcn.0044fd00
add esp, 8
test eax, eax
je 0x4058ba
lea edx, [esp + 0x2c]
push str.MAL_CMD_COMM2
push edx
call fcn.0044fd00
add esp, 8
test eax, eax
jne 0x405e2c
lea eax, [esp + 0x130]
push str._K_LOCALSERVICE
push eax
call fcn.0044fd00
add esp, 8
test eax, eax
je 0x4058ba
lea ecx, [esp + 0x2c]
push str.MAL_CMD_COMM2
push ecx
call fcn.0044fd00
add esp, 8
test eax, eax
jne 0x405e5f
lea edx, [esp + 0x130]
push str._K_NETSVCS__S_BROWSER
push edx
call fcn.0044fd00
add esp, 8
test eax, eax
je 0x4058ba
lea eax, [esp + 0x2c]
push str.MAL_CMD_COMM2
push eax
call fcn.0044fd00
add esp, 8
test eax, eax
jne 0x405e92
lea ecx, [esp + 0x130]
push str._K_CAMERA
push ecx
call fcn.0044fd00
add esp, 8
test eax, eax
je 0x4058ba
push 0x103
lea edx, [esp + 0x239]
push 0
push edx
mov byte [esp + 0x240], 0
call fcn.00444930
push 0x3ff
lea eax, [esp + 0x104d]
push 0
push eax
mov byte [esp + 0x1054], 0
call fcn.00444930
push 0x3ff
lea ecx, [esp + 0x1c59]
push 0
push ecx
mov byte [esp + 0x1c60], 0
call fcn.00444930
push 0x3ff
lea edx, [esp + 0x2065]
push 0
push edx
mov byte [esp + 0x206c], 0
call fcn.00444930
push 0xfff
lea eax, [esp + 0x4699]
push 0
push eax
mov byte [esp + 0x46a0], 0
call fcn.00444930
push 0x103
lea ecx, [esp + 0x379]
push 0
push ecx
mov byte [esp + 0x380], 0
call fcn.00444930
add esp, 0x48
push 0xa27
lea edx, [esp + 0x3c41]
push 0
push edx
mov byte [esp + 0x3c48], 0
call fcn.00444930
add esp, 0xc
push 0x497030
push 0
push str.Count
push str.RnCpPpCl
call dword [sym.imp.KERNEL32.dll_GetPrivateProfileIntA]
mov edi, eax
mov ebx, 1
cmp edi, ebx
mov dword [esp + 0x20], edi
jl 0x4063fd
mov eax, 0x2d
mov ecx, eax
push ebx
mov word [esp + 0x1c40], cx
lea ecx, [esp + 0x33c]
mov edx, eax
push 0x4897b8
push ecx
mov word [esp + 0x240], ax
mov word [esp + 0x2048], dx
mov word [esp + 0x1048], ax
call fcn.0043df30
add esp, 0xc
push 0x497030
push 0x1000
lea edx, [esp + 0x466c]
push edx
push str.NPAV
lea eax, [esp + 0x348]
push eax
push str.RnCpPpCl
call dword [sym.imp.KERNEL32.dll_GetPrivateProfileStringA]
lea ecx, [esp + 0x4664]
push 0x488728
push ecx
xor esi, esi
call fcn.00440930
add esp, 8
test eax, eax
je 0x406091
lea edx, [esp + 0x234]
sub edx, eax
mov cl, byte [eax]
mov byte [edx + eax], cl
inc eax
test cl, cl
jne 0x406017
push 0x488728
push 0
call fcn.00440930
add esp, 8
test eax, eax
je 0x406091
test esi, esi
jne 0x406052
lea edx, [esp + 0x1c3c]
sub edx, eax
mov cl, byte [eax]
mov byte [edx + eax], cl
inc eax
test cl, cl
jne 0x406041
mov esi, 1
jmp 0x406021
cmp esi, 1
jne 0x406071
lea edx, [esp + 0x203c]
sub edx, eax
mov cl, byte [eax]
mov byte [edx + eax], cl
inc eax
test cl, cl
jne 0x406060
mov esi, 2
jmp 0x406021
cmp esi, 2
jne 0x406021
lea edx, [esp + 0x103c]
sub edx, eax
nop
mov cl, byte [eax]
mov byte [edx + eax], cl
inc eax
test cl, cl
jne 0x406080
mov esi, 3
jmp 0x406021
lea edx, [esp + 0x234]
push edx
lea eax, [esp + 0x30]
push eax
call dword [sym.imp.SHLWAPI.dll_StrStrIA]
test eax, eax
jne 0x4060e1
mov ecx, 0x48871c
lea eax, [esp + 0x234]
mov dl, byte [eax]
cmp dl, byte [ecx]
jne 0x4060d4
test dl, dl
je 0x4060d0
mov dl, byte [eax + 1]
cmp dl, byte [ecx + 1]
jne 0x4060d4
add eax, 2
add ecx, 2
test dl, dl
jne 0x4060b4
xor eax, eax
jmp 0x4060d9
sbb eax, eax
sbb eax, 0xffffffff
test eax, eax
jne 0x4063f4
lea ecx, [esp + 0x1c3c]
push ecx
lea edx, [esp + 0x840]
push edx
call dword [sym.imp.SHLWAPI.dll_PathMatchSpecA]
test eax, eax
jne 0x406134
mov ecx, 0x48871c
lea eax, [esp + 0x1c3c]
mov dl, byte [eax]
cmp dl, byte [ecx]
jne 0x406127
test dl, dl
je 0x406123
mov dl, byte [eax + 1]
cmp dl, byte [ecx + 1]
jne 0x406127
add eax, 2
add ecx, 2
test dl, dl
jne 0x406107
xor eax, eax
jmp 0x40612c
sbb eax, eax
sbb eax, 0xffffffff
test eax, eax
jne 0x4063f4
lea eax, [esp + 0x203c]
push eax
lea ecx, [esp + 0x1440]
push ecx
call dword [sym.imp.SHLWAPI.dll_PathMatchSpecA]
test eax, eax
jne 0x40618d
mov ecx, 0x48871c
lea eax, [esp + 0x203c]
lea ebx, [ebx]
mov dl, byte [eax]
cmp dl, byte [ecx]
jne 0x406180
test dl, dl
je 0x40617c
mov dl, byte [eax + 1]
cmp dl, byte [ecx + 1]
jne 0x406180
add eax, 2
add ecx, 2
test dl, dl
jne 0x406160
xor eax, eax
jmp 0x406185
sbb eax, eax
sbb eax, 0xffffffff
test eax, eax
jne 0x4063f4
mov ecx, 0x48871c
lea eax, [esp + 0x103c]
lea esp, [esp]
mov dl, byte [eax]
cmp dl, byte [ecx]
jne 0x4061c0
test dl, dl
je 0x4061bc
mov dl, byte [eax + 1]
cmp dl, byte [ecx + 1]
jne 0x4061c0
add eax, 2
add ecx, 2
test dl, dl
jne 0x4061a0
xor eax, eax
jmp 0x4061c5
sbb eax, eax
sbb eax, 0xffffffff
test eax, eax
je 0x406442
mov ecx, str.NONE
lea eax, [esp + 0x103c]
lea esp, [esp]
mov dl, byte [eax]
cmp dl, byte [ecx]
jne 0x406200
test dl, dl
je 0x4061fc
mov dl, byte [eax + 1]
cmp dl, byte [ecx + 1]
jne 0x406200
add eax, 2
add ecx, 2
test dl, dl
jne 0x4061e0
xor eax, eax
jmp 0x406205
sbb eax, eax
sbb eax, 0xffffffff
test eax, eax
jne 0x406365
mov ecx, 0x488394
lea eax, [esp + 0x43c]
lea esp, [esp]
mov dl, byte [eax]
cmp dl, byte [ecx]
jne 0x406240
test dl, dl
je 0x40623c
mov dl, byte [eax + 1]
cmp dl, byte [ecx + 1]
jne 0x406240
add eax, 2
add ecx, 2
test dl, dl
jne 0x406220
xor eax, eax
jmp 0x406245
sbb eax, eax
sbb eax, 0xffffffff
test eax, eax
je 0x40633d
mov ecx, 0x487904
lea eax, [esp + 0x43c]
lea esp, [esp]
mov dl, byte [eax]
cmp dl, byte [ecx]
jne 0x406280
test dl, dl
je 0x40627c
mov dl, byte [eax + 1]
cmp dl, byte [ecx + 1]
jne 0x406280
add eax, 2
add ecx, 2
test dl, dl
jne 0x406260
xor eax, eax
jmp 0x406285
sbb eax, eax
sbb eax, 0xffffffff
test eax, eax
je 0x40633d
mov ecx, 0x486f97
lea eax, [esp + 0x43c]
lea esp, [esp]
mov dl, byte [eax]
cmp dl, byte [ecx]
jne 0x4062c0
test dl, dl
je 0x4062bc
mov dl, byte [eax + 1]
cmp dl, byte [ecx + 1]
jne 0x4062c0
add eax, 2
add ecx, 2
test dl, dl
jne 0x4062a0
xor eax, eax
jmp 0x4062c5
sbb eax, eax
sbb eax, 0xffffffff
test eax, eax
je 0x40633d
mov ecx, 0x488784
lea eax, [esp + 0x43c]
mov dl, byte [eax]
cmp dl, byte [ecx]
jne 0x4062f5
test dl, dl
je 0x4062f1
mov dl, byte [eax + 1]
cmp dl, byte [ecx + 1]
jne 0x4062f5
add eax, 2
add ecx, 2
test dl, dl
jne 0x4062d5
xor eax, eax
jmp 0x4062fa
sbb eax, eax
sbb eax, 0xffffffff
test eax, eax
je 0x40633d
mov ecx, 0x488784
lea eax, [esp + 0x43c]
lea ebx, [ebx]
mov dl, byte [eax]
cmp dl, byte [ecx]
jne 0x406330
test dl, dl
je 0x40632c
mov dl, byte [eax + 1]
cmp dl, byte [ecx + 1]
jne 0x406330
add eax, 2
add ecx, 2
test dl, dl
jne 0x406310
xor eax, eax
jmp 0x406335
sbb eax, eax
sbb eax, 0xffffffff
test eax, eax
jne 0x4063f4
push ebp
lea eax, [esp + 0x2c40]
push str.Skipping_____s____Line_since_found_in__RNCPPPCL__section_in_DPREPTROFF.ini
push eax
call fcn.0043df30
lea ecx, [esp + 0x2c48]
push ecx
call fcn.00402250
add esp, 0x10
jmp 0x4058ba
lea edx, [esp + 0x103c]
push str.___
push edx
call fcn.00440930
mov esi, eax
add esp, 8
test esi, esi
je 0x4063f4
lea edi, [esp + 0x3c3c]
mov edx, edi
mov eax, esi
sub edx, esi
lea ecx, [ecx]
mov cl, byte [eax]
mov byte [eax + edx], cl
inc eax
test cl, cl
jne 0x406390
push str.___
push 0
call fcn.00440930
add esp, 8
mov esi, eax
push edi
lea eax, [esp + 0x440]
push eax
call dword [sym.imp.SHLWAPI.dll_StrStrIA]
test eax, eax
je 0x4063f0
add edi, 0x104
test esi, esi
jne 0x406387
push ebp
lea edx, [esp + 0x2c40]
push str.Skipping_____s____Line_since_found_in__RNCPPPCL__section_in_DPREPTROFF.ini
push edx
call fcn.0043df30
lea eax, [esp + 0x2c48]
push eax
call fcn.00402250
add esp, 0x10
jmp 0x4058ba
mov edi, dword [esp + 0x20]
inc ebx
cmp ebx, edi
jle 0x405f86
lea ecx, [esp + 0x1c]
call fcn.0040d1e0
lea ecx, [esp + 0x18]
call fcn.0040d1e0
lea ecx, [esp + 0x14]
call fcn.0040d1e0
xor al, al
mov ecx, dword [esp + 0x5668]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebp
pop ebx
mov ecx, dword [esp + 0x5650]
xor ecx, esp
call fcn.00439cd0
add esp, 0x5660
ret
push ebp
lea ecx, [esp + 0x2c40]
push str.Skipping_____s____Line_since_found_in__RNCPPPCL__section_in_DPREPTROFF.ini
push ecx
call fcn.0043df30
lea edx, [esp + 0x2c48]
push edx
call fcn.00402250
add esp, 0x10
jmp 0x4058ba