Function at 0x414bce
Capabilities:
Read .ini file

Disassembly:
mov eax, 0x42f5a1
call fcn.0042ef64
sub esp, 0x51c
push edi
mov edi, ecx
lea eax, [edi + 0x420]
push eax
push 0x104
lea eax, [ebp - 0x528]
push eax
push str.WDUPDATE.NET
push str.FICUPDATE
lea eax, [edi + 0x834]
push eax
call dword [sym.imp.KERNEL32.dll_GetPrivateProfileStringW]
mov ecx, edi
call fcn.00415806
test eax, eax
je 0x414f21
push ebx
push esi
push ecx
lea ecx, [ebp - 0xe4]
call fcn.0040c8eb
and dword [ebp - 4], 0
lea ecx, [ebp - 0x38]
call fcn.004177a8
push ecx
push ecx
lea eax, [ebp - 0xe4]
push eax
mov eax, ecx
lea ecx, [ebp - 0x60]
push eax
call fcn.004094a3
push ecx
mov byte [ebp - 4], 2
call fcn.00409bdb
push ecx
call fcn.00409bec
mov eax, dword [edi + 0x11d4]
lea ebx, [edi + 0x11b8]
test eax, eax
mov edx, 0x4368b0
mov ecx, edx
cmovne ecx, eax
mov eax, dword [edi + 0x11d0]
test eax, eax
mov dword [ebp - 0x14], ecx
mov ecx, edx
cmovne ecx, eax
mov eax, dword [edi + 0x11c4]
test eax, eax
mov dword [ebp - 0x18], ecx
mov ecx, edx
cmovne ecx, eax
mov eax, dword [ebx + 0x10]
mov dword [ebp - 0x20], ecx
test eax, eax
je 0x414cac
cmp dword [eax - 4], 2
jb 0x414cac
cmp dword [ebx + 0x14], 0
mov esi, edx
cmovne esi, dword [ebx + 0x14]
jmp 0x414cae
xor esi, esi
test eax, eax
je 0x414cbf
cmp dword [eax - 4], 2
jb 0x414cbf
test eax, eax
cmovne edx, eax
jmp 0x414cc1
xor edx, edx
push dword [ebp - 0x14]
mov eax, dword [edi + 0x11bc]
mov ecx, 0x4368b0
push dword [ebp - 0x18]
test eax, eax
cmovne ecx, eax
imul eax, dword [edi + 0x11dc], 0x3e8
push ecx
push ecx
push dword [ebp - 0x20]
push eax
push dword [edi + 0x11c0]
push esi
push edx
push ecx
lea ecx, [ebp - 0x60]
call fcn.00409533
test eax, eax
jne 0x414d48
cmp dword [edi + 0xc48], eax
je 0x414d41
lea ecx, [ebp - 0xe4]
call fcn.0040ce14
push eax
push str.134___Echec_de_linit_de_WinSock
lea eax, [ebp - 0x14]
push str._s_:__s
push eax
call fcn.00402d4f
add esp, 0x10
mov ecx, eax
mov byte [ebp - 4], 3
call fcn.0040b37e
push eax
mov ecx, edi
call fcn.00412ee3
lea ecx, [ebp - 0x14]
call fcn.0040b313
xor esi, esi
jmp 0x414f02
mov eax, dword [edi + 0x11d8]
mov esi, 0x4368b0
test eax, eax
mov ecx, esi
cmovne ecx, eax
push ecx
lea ecx, [ebp - 0x10]
call fcn.0040b2d2
push ecx
lea ecx, [ebp - 0x10]
call fcn.0040b9d3
cmp ax, 0x2f
jne 0x414d8b
mov eax, dword [edi + 0x11d8]
mov ecx, esi
test eax, eax
cmovne ecx, eax
lea eax, [ecx + 2]
push eax
lea ecx, [ebp - 0x10]
call fcn.0040b619
lea ecx, [ebp - 0x10]
call fcn.0040b761
lea ecx, [ebp - 0x10]
mov esi, eax
call fcn.0040b5de
dec eax
cmp esi, eax
jne 0x414dc8
lea ecx, [ebp - 0x10]
call fcn.0040b5de
dec eax
lea edx, [ebp - 0x14]
push eax
lea ecx, [ebp - 0x10]
call fcn.0040b6f1
push eax
lea ecx, [ebp - 0x10]
call fcn.0040b601
lea ecx, [ebp - 0x14]
call fcn.0040b313
lea eax, [ebp - 0x528]
push eax
lea ecx, [ebp - 0x10]
call fcn.0040b37e
push eax
lea eax, [ebp - 0x14]
push str.__s_INSTALL__s
push eax
call fcn.00402d4f
add esp, 8
mov byte [ebp - 4], 5
and dword [ebp - 0x28], 0
mov ecx, ebx
and dword [ebp - 0x24], 0
call fcn.00415c08
lea ecx, [ebp - 0x14]
mov edx, eax
call fcn.0040b37e
push ecx
push ecx
push edx
push ecx
push ecx
lea ecx, [ebp - 0x28]
mov dword [ebp - 0x18], eax
push ecx
push eax
lea ecx, [ebp - 0x60]
call fcn.00409745
mov esi, eax
lea ecx, [ebp - 0x20]
lea eax, [ebp - 0x30]
push eax
call fcn.0040c86a
and dword [ebp - 0x1c], 0
mov byte [ebp - 4], 7
jmp 0x414ea9
push 0x43b914
lea ecx, [ebp - 0x1c]
call fcn.00415c45
test eax, eax
jne 0x414f30
mov ecx, edi
call fcn.00415985
test eax, eax
je 0x414fd5
mov eax, dword [edi + 0x11d4]
mov ecx, 0x4368b0
test eax, eax
mov edx, ecx
cmovne edx, eax
mov eax, dword [edi + 0x11d0]
test eax, eax
push edx
cmovne ecx, eax
push ecx
lea ecx, [ebp - 0x60]
call fcn.00409681
push ecx
push ecx
mov ecx, ebx
call fcn.00415c08
push ecx
push ecx
push eax
push ecx
push ecx
lea eax, [ebp - 0x28]
push eax
push dword [ebp - 0x18]
lea ecx, [ebp - 0x60]
call fcn.00409745
mov esi, eax
lea ecx, [ebp - 0x20]
lea eax, [ebp - 0x30]
push eax
call fcn.00409399
lea eax, [ebp - 0x1c]
push eax
push 0x4379c0
push 1
lea ecx, [ebp - 0x20]
call fcn.00415c94
test esi, esi
jne 0x414e33
xor esi, esi
lea ecx, [ebp - 0x60]
call fcn.004096e7
mov byte [ebp - 4], 0x13
mov ecx, dword [ebp - 0x1c]
test ecx, ecx
je 0x414ee2
call fcn.00405ca7
and dword [ebp - 0x1c], 0
mov byte [ebp - 4], 0x14
mov ecx, dword [ebp - 0x20]
test ecx, ecx
je 0x414ef2
call fcn.00405ca7
lea ecx, [ebp - 0x14]
call fcn.0040b313
lea ecx, [ebp - 0x10]
call fcn.0040b313
lea ecx, [ebp - 0x60]
call fcn.004094ee
lea ecx, [ebp - 0x38]
call fcn.004177db
lea ecx, [ebp - 0xe4]
call fcn.0040c9b0
mov eax, esi
pop esi
pop ebx
mov ecx, dword [ebp - 0xc]
pop edi
mov dword fs:[0], ecx
mov esp, ebp
pop ebp
ret
test esi, esi
je 0x414ec4
push 0x43b91c
lea ecx, [ebp - 0x1c]
call fcn.00415c45
test eax, eax
jne 0x414ec4
lea eax, [ebp - 0x34]
push eax
lea ecx, [ebp - 0x18]
call fcn.0040c59c
lea ecx, [ebp - 0x31c]
mov byte [ebp - 4], 0xa
call fcn.00405e45
push 0
push 0x10000000
push 4
push 3
push 0xc0000000
lea eax, [edi + 0x62a]
mov byte [ebp - 4], 0xb
push eax
lea ecx, [ebp - 0x31c]
call fcn.00406f28
test eax, eax
je 0x414fba
mov eax, dword [ebp - 0x18]
test eax, eax
je 0x414f9a
mov ecx, dword [eax - 4]
jmp 0x414f9c
xor ecx, ecx
push 0
push ecx
push eax
lea ecx, [ebp - 0x31c]
call fcn.004061e9
lea ecx, [ebp - 0x31c]
test eax, eax
jne 0x414fdc
call fcn.004060e6
lea ecx, [ebp - 0x31c]
call fcn.00405ef2
mov byte [ebp - 4], 0xf
mov ecx, dword [ebp - 0x18]
test ecx, ecx
je 0x414fd5
call fcn.00405ca7
xor esi, esi
jmp 0x414ece
call fcn.004060e6
lea ecx, [ebp - 0x31c]
call fcn.00405ef2
mov byte [ebp - 4], 0x12
mov ecx, dword [ebp - 0x18]
test ecx, ecx
je 0x414ffc
call fcn.00405ca7
mov byte [ebp - 4], 7
jmp 0x414ec6