Function at 0x409600
Capabilities:
Read .ini file

Disassembly:
sub esp, 0x14c
mov eax, dword [0x4399d0]
xor eax, esp
mov dword [esp + 0x148], eax
push esi
mov esi, dword [esp + 0x158]
push edi
mov edi, dword [esp + 0x160]
push 7
push str.192.168
push esi
call fcn.0040f693
add esp, 0xc
test eax, eax
je 0x40985d
push 4
push str.127.0
push esi
call fcn.0040f693
add esp, 0xc
test eax, eax
je 0x40985d
push 4
push str.10.10
push esi
call fcn.0040f693
add esp, 0xc
test eax, eax
je 0x40985d
xor eax, eax
push 0xff
push eax
mov dword [esp + 0x11], eax
mov dword [esp + 0x15], eax
mov dword [esp + 0x19], eax
mov dword [esp + 0x1d], eax
mov word [esp + 0x21], ax
mov byte [esp + 0x23], al
mov byte [esp + 0x58], al
lea eax, [esp + 0x59]
push eax
mov byte [esp + 0x14], 0
call fcn.0040c6a0
lea ecx, [esp + 0x5c]
push ecx
call fcn.00406ee0
lea eax, [esp + 0x60]
add esp, 0x10
dec eax
mov cl, byte [eax + 1]
inc eax
test cl, cl
jne 0x4096b2
mov edx, dword [str.ipcountry.ini]
mov ecx, dword [0x43304c]
mov dword [eax], edx
mov edx, dword [0x433050]
mov dword [eax + 4], ecx
mov cx, word [0x433054]
mov dword [eax + 8], edx
mov dl, byte [0x433056]
mov word [eax + 0xc], cx
mov byte [eax + 0xe], dl
lea eax, [esp + 0x50]
push eax
push 0x200
lea ecx, [esp + 0x10]
push ecx
push str.NPAV
push esi
push str.Data
call dword [sym.imp.KERNEL32.dll_GetPrivateProfileStringA]
mov ecx, str.NPAV
lea eax, [esp + 8]
mov dl, byte [eax]
cmp dl, byte [ecx]
jne 0x409731
test dl, dl
je 0x40972d
mov dl, byte [eax + 1]
cmp dl, byte [ecx + 1]
jne 0x409731
add eax, 2
add ecx, 2
test dl, dl
jne 0x409711
xor eax, eax
jmp 0x409736
sbb eax, eax
sbb eax, 0xffffffff
test eax, eax
jne 0x409790
lea edx, [esp + 8]
push edx
push esi
call fcn.00409180
add esp, 8
mov ecx, str.NPAV
lea eax, [esp + 8]
mov dl, byte [eax]
cmp dl, byte [ecx]
jne 0x409771
test dl, dl
je 0x40976d
mov dl, byte [eax + 1]
cmp dl, byte [ecx + 1]
jne 0x409771
add eax, 2
add ecx, 2
test dl, dl
jne 0x409751
xor eax, eax
jmp 0x409776
sbb eax, eax
sbb eax, 0xffffffff
test eax, eax
je 0x409790
lea eax, [esp + 0x50]
push eax
lea ecx, [esp + 0xc]
push ecx
push esi
push str.Data
call dword [sym.imp.KERNEL32.dll_WritePrivateProfileStringA]
mov eax, dword [esp + 0x158]
imul eax, eax, 0x260
lea edx, [esp + 8]
push edx
lea ecx, [eax + edi - 0x64]
push ecx
call fcn.0040e750
add esp, 8
test eax, eax
je 0x40983f
mov ecx, str.NPAV
lea eax, [esp + 8]
mov dl, byte [eax]
cmp dl, byte [ecx]
jne 0x4097e0
test dl, dl
je 0x4097dc
mov dl, byte [eax + 1]
cmp dl, byte [ecx + 1]
jne 0x4097e0
add eax, 2
add ecx, 2
test dl, dl
jne 0x4097c0
xor eax, eax
jmp 0x4097e5
sbb eax, eax
sbb eax, 0xffffffff
test eax, eax
je 0x40983f
push 0x31
lea edx, [esp + 0x21]
push 0
push edx
mov byte [esp + 0x28], 0
call fcn.0040c6a0
lea eax, [esp + 0x14]
push eax
push esi
lea ecx, [esp + 0x30]
push str.Packet_of_IP:__s__Country:__s_dropped
push ecx
call fcn.0040e1bd
lea edx, [esp + 0x38]
push edx
call fcn.00405dd0
mov eax, dword [esp + 0x184]
add esp, 0x20
pop edi
xor eax, 1
pop esi
mov ecx, dword [esp + 0x148]
xor ecx, esp
call fcn.0040c71a
add esp, 0x14c
ret
mov eax, dword [esp + 0x164]
pop edi
pop esi
mov ecx, dword [esp + 0x148]
xor ecx, esp
call fcn.0040c71a
add esp, 0x14c
ret
mov ecx, dword [esp + 0x150]
pop edi
pop esi
xor ecx, esp
xor eax, eax
call fcn.0040c71a
add esp, 0x14c
ret