Function at 0x47aa90
Capabilities:
Read .ini file

Disassembly:
push ebx
push esi
mov esi, dword [sym.imp.KERNEL32.dll_GetPrivateProfileIntA]
push edi
mov edi, ecx
lea ebx, [edi + 8]
push ebx
push dword [edi + 0x1a4]
push str.FileTransferEnabled
push str.admin
call esi
push ebx
push dword [edi + 0x1a8]
mov dword [edi + 0x1a4], eax
push str.FTUserImpersonation
push str.admin
call esi
push ebx
push dword [edi + 0x1ac]
mov dword [edi + 0x1a8], eax
push str.BlankMonitorEnabled
push str.admin
call esi
push ebx
push dword [edi + 0x1b0]
mov dword [edi + 0x1ac], eax
push str.BlankInputsOnly
push str.admin
call esi
push ebx
push dword [edi + 0x1b4]
mov dword [edi + 0x1b0], eax
push str.DefaultScale
push str.admin
call esi
push ebx
push dword [edi + 0x1c4]
mov dword [edi + 0x1b4], eax
push str.UseDSMPlugin
push str.admin
call esi
mov esi, dword [sym.imp.KERNEL32.dll_GetPrivateProfileStringA]
push ebx
push 0x80
mov dword [edi + 0x1c4], eax
lea eax, [edi + 0x1c8]
push eax
push 0x518188
push str.DSMPlugin
push str.admin
call esi
push ebx
push 0x200
lea eax, [edi + 0x248]
push eax
push 0x518188
push str.DSMPluginConfig
push str.admin
call esi
mov esi, dword [sym.imp.KERNEL32.dll_GetPrivateProfileIntA]
push ebx
push dword [edi + 0xc74]
push str.primary
push str.admin
call esi
push ebx
push dword [edi + 0xc78]
mov dword [edi + 0xc74], eax
push str.secondary
push str.admin
call esi
push ebx
push dword [edi + 0x138]
mov dword [edi + 0xc78], eax
push str.SocketConnect
push str.admin
call esi
push ebx
push dword [edi + 0x13c]
mov dword [edi + 0x138], eax
push str.HTTPConnect
push str.admin
call esi
push ebx
push dword [edi + 0x140]
mov dword [edi + 0x13c], eax
push str.AutoPortSelect
push str.admin
call esi
push ebx
push dword [edi + 0x144]
mov dword [edi + 0x140], eax
push str.PortNumber
push str.admin
call esi
push ebx
mov dword [edi + 0x144], eax
add eax, 0xffffff9c
push eax
push str.HTTPPortNumber
push str.admin
call esi
push ebx
push dword [edi + 0x170]
mov dword [edi + 0x148], eax
push str.IdleTimeout
push str.admin
call esi
push ebx
push dword [edi + 0x174]
mov dword [edi + 0x170], eax
push str.RemoveWallpaper
push str.admin
call esi
push ebx
push dword [edi + 0x178]
mov dword [edi + 0x174], eax
push str.RemoveEffects
push str.admin
call esi
push ebx
push dword [edi + 0x17c]
mov dword [edi + 0x178], eax
push str.RemoveFontSmoothing
push str.admin
call esi
push ebx
push dword [edi + 0x180]
mov dword [edi + 0x17c], eax
push str.RemoveAero
push str.admin
call esi
push ebx
push dword [edi + 0x15c]
mov dword [edi + 0x180], eax
push str.QuerySetting
push str.admin
call esi
mov ecx, dword [edi + 0x10c]
mov dword [edi + 0x15c], eax
mov edx, dword [ecx]
cmp edx, vtable.vncServer.0
jne 0x47aeaf
mov dword [ecx + 0xc4], eax
push ebx
push dword [edi + 0x168]
push str.QueryTimeout
push str.admin
call esi
mov ecx, dword [edi + 0x10c]
mov dword [edi + 0x168], eax
mov edx, dword [ecx]
cmp edx, vtable.vncServer.0
jne 0x47aebb
mov dword [ecx + 0xcc], eax
push ebx
push dword [edi + 0x16c]
push str.QueryDisableTime
push str.admin
call esi
mov ecx, dword [edi + 0x10c]
mov dword [edi + 0x16c], eax
mov edx, dword [ecx]
cmp edx, vtable.vncServer.0
jne 0x47aec7
mov dword [ecx + 0xd0], eax
push ebx
push dword [edi + 0x164]
push str.QueryAccept
push str.admin
call esi
mov ecx, dword [edi + 0x10c]
mov dword [edi + 0x164], eax
mov edx, dword [ecx]
cmp edx, vtable.vncServer.0
jne 0x47aed3
mov dword [ecx + 0xc8], eax
push ebx
push dword [edi + 0x160]
push str.QueryIfNoLogon
push str.admin
call esi
mov edx, dword [edi + 0x10c]
mov dword [edi + 0x160], eax
mov esi, dword [edx]
cmp esi, vtable.vncServer.0
jne 0x47aedf
xor ecx, ecx
test eax, eax
setne cl
mov dword [edx + 0xd4], ecx
mov esi, dword [sym.imp.KERNEL32.dll_GetPrivateProfileStructA]
lea eax, [edi + 0x14c]
push ebx
push 8
push eax
push str.passwd
push 0x5405f4
call esi
push ebx
push 8
lea eax, [edi + 0x154]
push eax
push str.passwd2
push 0x5405f4
call esi
mov esi, dword [sym.imp.KERNEL32.dll_GetPrivateProfileIntA]
push ebx
push dword [edi + 0x184]
push str.InputsEnabled
push str.admin
call esi
push ebx
push dword [edi + 0x188]
mov dword [edi + 0x184], eax
push str.LockSetting
push str.admin
call esi
push ebx
push dword [edi + 0x18c]
mov dword [edi + 0x188], eax
push str.LocalInputsDisabled
push str.admin
call esi
push ebx
push dword [edi + 0x190]
mov dword [edi + 0x18c], eax
push str.EnableJapInput
push str.admin
call esi
push ebx
push dword [edi + 0x194]
mov dword [edi + 0x190], eax
push str.EnableUnicodeInput
push str.admin
call esi
push ebx
push dword [edi + 0x198]
mov dword [edi + 0x194], eax
push str.EnableWin8Helper
push str.admin
call esi
push ebx
push dword [edi + 0x19c]
mov dword [edi + 0x198], eax
push str.clearconsole
push str.admin
call esi
push ebx
push dword [0x558ab8]
mov dword [edi + 0x19c], eax
push str.sendbuffer
push str.admin
call esi
pop edi
pop esi
mov dword [0x558ab8], eax
pop ebx
ret
push eax
call dword [edx + 0x1b4]
jmp 0x47acd9
push eax
call dword [edx + 0x1cc]
jmp 0x47ad0c
push eax
call dword [edx + 0x1d4]
jmp 0x47ad3f
push eax
call dword [edx + 0x1bc]
jmp 0x47ad72
push eax
mov ecx, edx
call dword [esi + 0x1dc]
jmp 0x47adac