Function at 0x402793
Capabilities:
Read .ini file

Disassembly:
push ebp
mov ebp, esp
push ecx
push ecx
push ebx
mov ebx, 0x47f0c0
mov eax, ebx
lea edx, [eax + 1]
mov cl, byte [eax]
inc eax
test cl, cl
jne 0x4027a3
sub eax, edx
push edi
jne 0x402c3e
push esi
push str.http:__www.wbindex.cn_sgnav_
call fcn.00402752
push eax
call fcn.00457800
mov esi, eax
pop ecx
pop ecx
mov dword [ebp - 4], esi
test esi, esi
je 0x40295f
call fcn.00402752
lea edx, [eax + 1]
mov cl, byte [eax]
inc eax
test cl, cl
jne 0x4027db
sub eax, edx
lea edx, [eax - 0x1c]
cmp byte [esi], cl
je 0x402c3d
mov eax, esi
lea edi, [eax + 1]
mov cl, byte [eax]
inc eax
test cl, cl
jne 0x4027f4
sub eax, edi
je 0x40286e
cmp edx, 5
jne 0x40286e
push str.http:__www.wbindex.cn_sgnav_2
call fcn.00402752
push eax
call fcn.00441780
pop ecx
test eax, eax
mov eax, dword [ebp - 4]
pop ecx
mov edi, 0x47f0c0
je 0x402848
mov esi, str.Af71084_
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
add eax, 0x1d
movsb byte es:[edi], byte [esi]
mov edx, eax
mov cl, byte [eax]
inc eax
test cl, cl
jne 0x40282f
mov edi, ebx
sub eax, edx
dec edi
mov cl, byte [edi + 1]
inc edi
test cl, cl
jne 0x40283b
jmp 0x402be4
mov esi, str.Af71066_
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
add eax, 0x1d
movsb byte es:[edi], byte [esi]
mov edx, eax
mov cl, byte [eax]
inc eax
test cl, cl
jne 0x402855
mov edi, ebx
sub eax, edx
dec edi
mov cl, byte [edi + 1]
inc edi
test cl, cl
jne 0x402861
jmp 0x402be4
mov eax, esi
lea edi, [eax + 1]
mov cl, byte [eax]
inc eax
test cl, cl
jne 0x402873
sub eax, edi
je 0x402c3d
add esi, 0x1c
cmp edx, 4
mov dword [ebp - 4], esi
mov esi, str.Af71017_
mov edi, 0x47f0c0
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsb byte es:[edi], byte [esi]
jge 0x402941
cmp edx, 1
jne 0x4028d2
mov edi, ebx
dec edi
mov al, byte [edi + 1]
inc edi
test al, al
jne 0x4028a6
mov eax, dword [ebp - 4]
mov esi, 0x4648d4
movsd dword es:[edi], dword [esi]
mov esi, eax
mov cl, byte [eax]
inc eax
test cl, cl
jne 0x4028b9
mov edi, ebx
sub eax, esi
dec edi
mov cl, byte [edi + 1]
inc edi
test cl, cl
jne 0x4028c5
jmp 0x402be6
cmp edx, 2
jne 0x402908
mov edi, ebx
dec edi
mov al, byte [edi + 1]
inc edi
test al, al
jne 0x4028da
mov eax, dword [ebp - 4]
mov esi, 0x4648d8
movsw word es:[edi], word [esi]
movsb byte es:[edi], byte [esi]
mov esi, eax
mov cl, byte [eax]
inc eax
test cl, cl
jne 0x4028ef
mov edi, ebx
sub eax, esi
dec edi
mov cl, byte [edi + 1]
inc edi
test cl, cl
jne 0x4028fb
jmp 0x402be6
cmp edx, 3
jne 0x402c3d
mov edi, ebx
dec edi
mov al, byte [edi + 1]
inc edi
test al, al
jne 0x402914
mov eax, dword [ebp - 4]
mov esi, 0x4648dc
movsw word es:[edi], word [esi]
mov esi, eax
mov cl, byte [eax]
inc eax
test cl, cl
jne 0x402928
mov edi, ebx
sub eax, esi
dec edi
mov cl, byte [edi + 1]
inc edi
test cl, cl
jne 0x402934
jmp 0x402be6
mov eax, dword [ebp - 4]
mov edx, eax
mov cl, byte [eax]
inc eax
test cl, cl
jne 0x402946
mov edi, ebx
sub eax, edx
dec edi
mov cl, byte [edi + 1]
inc edi
test cl, cl
jne 0x402952
jmp 0x402be4
push str.http:__www.wbindex.cn_ww_
call fcn.00402752
push eax
call fcn.00457800
pop ecx
pop ecx
test eax, eax
je 0x4029bd
cmp byte [eax], 0
je 0x402c3d
mov ecx, eax
lea esi, [ecx + 1]
mov dl, byte [ecx]
inc ecx
test dl, dl
jne 0x402983
sub ecx, esi
je 0x402c3d
mov esi, str.Af71017_
mov edi, 0x47f0c0
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
add eax, 0x19
movsb byte es:[edi], byte [esi]
mov edx, eax
mov cl, byte [eax]
inc eax
test cl, cl
jne 0x4029a4
mov edi, ebx
sub eax, edx
dec edi
mov cl, byte [edi + 1]
inc edi
test cl, cl
jne 0x4029b0
jmp 0x402be4
push str.http:__123.sogou.com__71017_
call fcn.00402752
push eax
call fcn.00457800
pop ecx
pop ecx
test eax, eax
je 0x402a1b
cmp byte [eax], 0
je 0x402c3d
mov ecx, eax
lea esi, [ecx + 1]
mov dl, byte [ecx]
inc ecx
test dl, dl
jne 0x4029e1
sub ecx, esi
je 0x402c3d
mov esi, str.Af71017_
mov edi, 0x47f0c0
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
add eax, 0x1c
movsb byte es:[edi], byte [esi]
mov edx, eax
mov cl, byte [eax]
inc eax
test cl, cl
jne 0x402a02
mov edi, ebx
sub eax, edx
dec edi
mov cl, byte [edi + 1]
inc edi
test cl, cl
jne 0x402a0e
jmp 0x402be4
push str.http:__123.sogou.com__71040_
call fcn.00402752
push eax
call fcn.00457800
pop ecx
pop ecx
test eax, eax
je 0x402a79
cmp byte [eax], 0
je 0x402c3d
mov ecx, eax
lea esi, [ecx + 1]
mov dl, byte [ecx]
inc ecx
test dl, dl
jne 0x402a3f
sub ecx, esi
je 0x402c3d
mov esi, str.Af71040_
mov edi, 0x47f0c0
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
add eax, 0x1c
movsb byte es:[edi], byte [esi]
mov edx, eax
mov cl, byte [eax]
inc eax
test cl, cl
jne 0x402a60
mov edi, ebx
sub eax, edx
dec edi
mov cl, byte [edi + 1]
inc edi
test cl, cl
jne 0x402a6c
jmp 0x402be4
push str.http:__123.sogou.com__71066_
call fcn.00402752
push eax
call fcn.00457800
pop ecx
pop ecx
test eax, eax
je 0x402ad7
cmp byte [eax], 0
je 0x402c3d
mov ecx, eax
lea esi, [ecx + 1]
mov dl, byte [ecx]
inc ecx
test dl, dl
jne 0x402a9d
sub ecx, esi
je 0x402c3d
mov esi, str.Af71066_
mov edi, 0x47f0c0
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
add eax, 0x1c
movsb byte es:[edi], byte [esi]
mov edx, eax
mov cl, byte [eax]
inc eax
test cl, cl
jne 0x402abe
mov edi, ebx
sub eax, edx
dec edi
mov cl, byte [edi + 1]
inc edi
test cl, cl
jne 0x402aca
jmp 0x402be4
push str.http:__www.hao123.com__tn
call fcn.00402752
push eax
call fcn.00457800
mov esi, eax
pop ecx
pop ecx
test esi, esi
je 0x402b34
cmp byte [esi], 0
je 0x402c3d
mov ecx, esi
lea edx, [ecx + 1]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x402afd
sub ecx, edx
je 0x402c3d
lea eax, [esi + 0x1a]
mov dword [0x47f0c0], 0x3d6e74
mov edx, eax
mov cl, byte [eax]
inc eax
test cl, cl
jne 0x402b1b
mov edi, ebx
sub eax, edx
dec edi
mov cl, byte [edi + 1]
inc edi
test cl, cl
jne 0x402b27
jmp 0x402be4
push str.http:__www.icafeads.com_et_
call fcn.00402752
push eax
call fcn.00457800
pop ecx
pop ecx
test eax, eax
je 0x402b8f
cmp byte [eax], 0
je 0x402c3d
mov ecx, eax
lea esi, [ecx + 1]
mov dl, byte [ecx]
inc ecx
test dl, dl
jne 0x402b58
sub ecx, esi
je 0x402c3d
mov esi, str.Af71016_
mov edi, 0x47f0c0
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
add eax, 0x1b
movsb byte es:[edi], byte [esi]
mov edx, eax
mov cl, byte [eax]
inc eax
test cl, cl
jne 0x402b79
mov edi, ebx
sub eax, edx
dec edi
mov cl, byte [edi + 1]
inc edi
test cl, cl
jne 0x402b85
jmp 0x402be4
push str.http:__123.sogou.com__71084_
call fcn.00402752
push eax
call fcn.00457800
pop ecx
pop ecx
test eax, eax
je 0x402bf6
cmp byte [eax], 0
je 0x402c3d
mov ecx, eax
lea esi, [ecx + 1]
mov dl, byte [ecx]
inc ecx
test dl, dl
jne 0x402bb3
sub ecx, esi
je 0x402c3d
mov esi, str.Af71084_
mov edi, 0x47f0c0
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
add eax, 0x1c
movsb byte es:[edi], byte [esi]
mov edx, eax
mov cl, byte [eax]
inc eax
test cl, cl
jne 0x402bd0
mov edi, ebx
sub eax, edx
dec edi
mov cl, byte [edi + 1]
inc edi
test cl, cl
jne 0x402bdc
mov esi, edx
mov ecx, eax
shr ecx, 2
rep movsd dword es:[edi], dword [esi]
mov ecx, eax
and ecx, 3
rep movsb byte es:[edi], byte [esi]
jmp 0x402c3d
push str.http:__www.tao123.com__6300
call fcn.00402752
push eax
call fcn.00457800
pop ecx
pop ecx
test eax, eax
je 0x402c1b
mov esi, str.AQqDA
mov edi, 0x47f0c0
movsd dword es:[edi], dword [esi]
movsw word es:[edi], word [esi]
jmp 0x402c3d
call fcn.004026db
push 0x47ebb8
push 0x64
push ebx
push 0x464857
push 0x4649f4
push 0x46486c
call dword [sym.imp.KERNEL32.dll_GetPrivateProfileStringA]
pop esi
mov eax, ebx
lea edx, [eax + 1]
pop edi
mov cl, byte [eax]
inc eax
test cl, cl
jne 0x402c44
sub eax, edx
neg eax
sbb eax, eax
and eax, ebx
pop ebx
leave
ret