Function at 0x407fd0
Capabilities:
Read .ini file

Disassembly:
push ebp
mov ebp, esp
and esp, 0xfffffff8
sub esp, 0x108
push ebx
push ebp
push esi
xor eax, eax
push edi
mov ecx, 0x41
lea edi, [esp + 0x10]
rep stosd dword es:[edi], eax
mov eax, 1
xor ebx, ebx
mov dword [0x703afc], eax
mov dword [0x703a84], eax
mov dword [0x703a8c], eax
mov dword [0x703a3c], eax
mov dword [0x703a68], eax
mov eax, dword [0x6f3558]
cmp eax, 0xb
mov dword [0x703a88], ebx
mov dword [0x703a2c], ebx
mov dword [0x703a30], ebx
mov dword [0x703a40], 0x40a00000
mov dword [0x703a60], 0x42b40000
ja case.default.0x408041
jmp dword [eax*4 + 0x408924]
mov eax, dword [0x6a7ab4]
mov ecx, dword [0x6a7ab8]
mov edx, dword [0x6a7abc]
mov dword [0x703a70], eax
mov ax, word [0x6a7ac0]
mov dword [0x703a74], ecx
mov cl, byte [0x6a7ac2]
mov dword [0x703a78], edx
mov word [0x703a7c], ax
mov byte [0x703a7e], cl
jmp 0x4082d4
mov edx, dword [0x6a7aa4]
mov eax, dword [0x6a7aa8]
mov ecx, dword [0x6a7aac]
mov dword [0x703a70], edx
mov dl, byte [0x6a7ab0]
mov byte [0x703a7c], dl
jmp 0x4082c9
mov eax, dword [str.123.30.241.64]
mov ecx, dword [0x6a7a98]
mov edx, dword [0x6a7a9c]
mov dword [0x703a70], eax
mov al, byte [0x6a7aa0]
mov dword [0x703a74], ecx
mov dword [0x703a78], edx
mov byte [0x703a7c], al
jmp 0x4082d4
mov ecx, dword [0x6a7a88]
mov edx, dword [0x6a7a8c]
mov eax, dword [0x6a7a90]
mov dword [0x703a70], ecx
mov dword [0x703a74], edx
mov dword [0x703a78], eax
jmp 0x4082d4
mov ecx, dword [0x6a7a78]
mov edx, dword [0x6a7a7c]
mov eax, dword [0x6a7a80]
mov dword [0x703a70], ecx
mov cx, word [0x6a7a84]
mov dword [0x703a74], edx
mov dl, byte [0x6a7a86]
mov dword [0x703a78], eax
mov word [0x703a7c], cx
mov byte [0x703a7e], dl
jmp 0x4082d4
mov eax, dword [0x6a7a68]
mov ecx, dword [0x6a7a6c]
mov edx, dword [0x6a7a70]
mov dword [0x703a70], eax
mov ax, word [0x6a7a74]
mov dword [0x703a74], ecx
mov dword [0x703a78], edx
mov word [0x703a7c], ax
jmp 0x4082d4
mov ecx, dword [0x6a7a58]
mov edx, dword [0x6a7a5c]
mov eax, dword [0x6a7a60]
mov dword [0x703a70], ecx
mov cl, byte [0x6a7a64]
mov dword [0x703a74], edx
mov dword [0x703a78], eax
mov byte [0x703a7c], cl
jmp 0x4082d4
mov edx, dword [0x6a7a48]
mov eax, dword [0x6a7a4c]
mov ecx, dword [0x6a7a50]
mov dword [0x703a70], edx
mov dx, word [0x6a7a54]
mov dword [0x703a74], eax
mov al, byte [0x6a7a56]
mov word [0x703a7c], dx
mov byte [0x703a7e], al
jmp 0x4082ce
mov ecx, dword [0x6a7a38]
mov edx, dword [0x6a7a3c]
mov eax, dword [0x6a7a40]
mov dword [0x703a70], ecx
mov cl, byte [0x6a7a44]
mov dword [0x703a74], edx
mov dword [0x703a78], eax
mov byte [0x703a7c], cl
jmp 0x4082d4
mov edx, dword [0x6a7a28]
mov eax, dword [0x6a7a2c]
mov ecx, dword [0x6a7a30]
mov dword [0x703a70], edx
mov dx, word [0x6a7a34]
mov word [0x703a7c], dx
jmp 0x4082c9
mov eax, dword [0x6a7a18]
mov ecx, dword [0x6a7a1c]
mov edx, dword [0x6a7a20]
mov dword [0x703a70], eax
mov ax, word [0x6a7a24]
mov dword [0x703a74], ecx
mov dword [0x703a78], edx
mov word [0x703a7c], ax
jmp 0x4082d4
mov ecx, dword [0x6a7a08]
mov edx, dword [0x6a7a0c]
mov eax, dword [0x6a7a10]
mov dword [0x703a70], ecx
mov cx, word [0x6a7a14]
mov dword [0x703a74], edx
mov dword [0x703a78], eax
mov word [0x703a7c], cx
jmp 0x4082d4
mov edx, dword [0x6a79f8]
mov eax, dword [0x6a79fc]
mov ecx, dword [0x6a7a00]
mov dword [0x703a70], edx
mov edx, dword [0x6a7a04]
mov dword [0x703a7c], edx
mov dword [0x703a74], eax
mov dword [0x703a78], ecx
mov eax, dword [0x703c00]
push 0x104
push 0x7034e0
push eax
mov dword [0x703a38], 0x3dcccccd
mov dword [0x703a34], 0x43c80000
mov dword [0x703a44], 0x43480000
mov dword [0x703a48], 0x43c80000
mov dword [0x703a58], 0x43af0000
mov dword [0x703a5c], 0x43160000
mov dword [0x703a64], 0x41200000
call dword [sym.imp.kernel32.dll_GetModuleFileNameA]
mov eax, 0x7034e0
lea edx, [eax + 1]
mov cl, byte [eax]
inc eax
cmp cl, bl
jne 0x408338
sub eax, edx
dec eax
cmp eax, ebx
jl 0x40835b
mov cl, 0x5c
cmp byte [eax + 0x7034e0], cl
je 0x408355
dec eax
jns 0x408348
jmp 0x40835b
mov byte [eax + 0x7034e1], bl
mov edi, 0x7034e0
dec edi
mov al, byte [edi + 1]
inc edi
cmp al, bl
jne 0x408361
mov ecx, dword [str.CONFIG.INI]
mov edx, dword [0x6a79f0]
mov ax, word [0x6a79f4]
mov dword [edi], ecx
mov cl, byte [0x6a79f6]
mov dword [edi + 4], edx
mov word [edi + 8], ax
mov byte [edi + 0xa], cl
call fcn.00406f40
call fcn.00407720
call fcn.00407970
call fcn.00407eb0
mov edx, dword [0x703a44]
mov eax, dword [0x703a48]
mov ebp, dword [sym.imp.kernel32.dll_GetPrivateProfileStringA]
push 0x7034e0
push 0x104
lea ecx, [esp + 0x18]
push ecx
push 0x6a75d5
push str.VERSION
push str.LOGIN
mov dword [0x703a4c], edx
mov dword [0x703a50], eax
mov dword [0x703a54], ebx
call ebp
test eax, eax
je 0x40857a
mov edi, str.KOREA
lea esi, [esp + 0x10]
mov ecx, 6
xor edx, edx
repe cmpsb byte [esi], byte es:[edi]
jne 0x40840a
mov dword [0x6f3558], ebx
jmp 0x40857a
mov edi, str.CHINA
lea esi, [esp + 0x10]
mov ecx, 6
xor eax, eax
repe cmpsb byte [esi], byte es:[edi]
jne 0x40842d
mov dword [0x6f3558], 1
jmp 0x40857a
mov edi, str.VIETNAM
lea esi, [esp + 0x10]
mov ecx, 8
xor edx, edx
repe cmpsb byte [esi], byte es:[edi]
jne 0x408450
mov dword [0x6f3558], 2
jmp 0x40857a
mov edi, str.JAPAN
lea esi, [esp + 0x10]
mov ecx, 6
xor eax, eax
repe cmpsb byte [esi], byte es:[edi]
jne 0x408473
mov dword [0x6f3558], 3
jmp 0x40857a
mov edi, str.TAIWAN
lea esi, [esp + 0x10]
mov ecx, 7
xor edx, edx
repe cmpsb byte [esi], byte es:[edi]
jne 0x408496
mov dword [0x6f3558], 4
jmp 0x40857a
mov edi, str.HONGKONG
lea esi, [esp + 0x10]
mov ecx, 9
xor eax, eax
repe cmpsb byte [esi], byte es:[edi]
jne 0x4084b9
mov dword [0x6f3558], 8
jmp 0x40857a
mov edi, str.ENGLISH
lea esi, [esp + 0x10]
mov ecx, 8
xor edx, edx
repe cmpsb byte [esi], byte es:[edi]
jne 0x4084dc
mov dword [0x6f3558], 5
jmp 0x40857a
mov edi, str.GERMANY
lea esi, [esp + 0x10]
mov ecx, 8
xor eax, eax
repe cmpsb byte [esi], byte es:[edi]
jne 0x4084fc
mov dword [0x6f3558], 6
jmp 0x40857a
mov edi, str.FRANCE
lea esi, [esp + 0x10]
mov ecx, 7
xor edx, edx
repe cmpsb byte [esi], byte es:[edi]
jne 0x40851c
mov dword [0x6f3558], 9
jmp 0x40857a
mov edi, str.SINGA_MALA
lea esi, [esp + 0x10]
mov ecx, 0xb
xor eax, eax
repe cmpsb byte [esi], byte es:[edi]
jne 0x40853c
mov dword [0x6f3558], 7
jmp 0x40857a
mov edi, str.RUSSIA
lea esi, [esp + 0x10]
mov ecx, 7
xor edx, edx
repe cmpsb byte [esi], byte es:[edi]
jne 0x40855c
mov dword [0x6f3558], 0xa
jmp 0x40857a
mov edi, str.TURKEY
lea esi, [esp + 0x10]
mov ecx, 7
xor eax, eax
repe cmpsb byte [esi], byte es:[edi]
jne 0x40857a
mov dword [0x6f3558], 0xb
push 0x7034e0
push 0x104
lea ecx, [esp + 0x18]
push ecx
push 0x6a75d5
push str.TEST_IP
push str.LOGIN
call ebp
test eax, eax
je 0x4088e0
mov edi, str.KOREA
lea esi, [esp + 0x10]
mov ecx, 6
xor edx, edx
repe cmpsb byte [esi], byte es:[edi]
jne 0x4085db
mov eax, dword [0x6a79f8]
mov ecx, dword [0x6a79fc]
mov edx, dword [0x6a7a00]
mov dword [0x703a70], eax
mov eax, dword [0x6a7a04]
mov dword [0x703a7c], eax
jmp 0x4088d4
mov edi, str.CHINA
lea esi, [esp + 0x10]
mov ecx, 6
xor edx, edx
repe cmpsb byte [esi], byte es:[edi]
jne 0x408628
mov eax, dword [0x6a795c]
mov ecx, dword [0x6a7960]
mov edx, dword [0x6a7964]
mov dword [0x703a70], eax
mov ax, word [0x6a7968]
mov dword [0x703a74], ecx
mov cl, byte [0x6a796a]
mov word [0x703a7c], ax
mov byte [0x703a7e], cl
jmp 0x4088da
mov edi, str.CHINAPASSPOD
lea esi, [esp + 0x10]
mov ecx, 0xd
xor edx, edx
repe cmpsb byte [esi], byte es:[edi]
jne 0x408675
mov eax, dword [0x6a793c]
mov ecx, dword [0x6a7940]
mov edx, dword [0x6a7944]
mov dword [0x703a70], eax
mov ax, word [0x6a7948]
mov dword [0x703a74], ecx
mov cl, byte [0x6a794a]
mov word [0x703a7c], ax
mov byte [0x703a7e], cl
jmp 0x4088da
mov edi, str.VIETNAM
lea esi, [esp + 0x10]
mov ecx, 8
xor edx, edx
repe cmpsb byte [esi], byte es:[edi]
jne 0x4086c2
mov eax, dword [0x6a792c]
mov ecx, dword [0x6a7930]
mov edx, dword [0x6a7934]
mov dword [0x703a70], eax
mov ax, word [0x6a7938]
mov dword [0x703a74], ecx
mov cl, byte [0x6a793a]
mov word [0x703a7c], ax
mov byte [0x703a7e], cl
jmp 0x4088da
mov edi, str.TAIWAN
lea esi, [esp + 0x10]
mov ecx, 7
xor edx, edx
repe cmpsb byte [esi], byte es:[edi]
jne 0x4086fb
mov eax, dword [0x6a791c]
mov ecx, dword [0x6a7920]
mov edx, dword [0x6a7924]
mov dword [0x703a70], eax
mov eax, dword [0x6a7928]
mov dword [0x703a7c], eax
jmp 0x4088d4
mov edi, str.HONGKONG
lea esi, [esp + 0x10]
mov ecx, 9
xor edx, edx
repe cmpsb byte [esi], byte es:[edi]
jne 0x408734
mov eax, dword [0x6a790c]
mov ecx, dword [0x6a7910]
mov edx, dword [0x6a7914]
mov dword [0x703a70], eax
mov al, byte [0x6a7918]
mov byte [0x703a7c], al
jmp 0x4088d4
mov edi, str.JAPAN
lea esi, [esp + 0x10]
mov ecx, 6
xor edx, edx
repe cmpsb byte [esi], byte es:[edi]
jne 0x40877b
mov eax, dword [0x6a7900]
mov ecx, dword [0x6a7904]
mov dx, word [0x6a7908]
mov dword [0x703a70], eax
mov al, byte [0x6a790a]
mov dword [0x703a74], ecx
mov word [0x703a78], dx
mov byte [0x703a7a], al
jmp 0x4088e0
mov edi, str.ENGLISH
lea esi, [esp + 0x10]
mov ecx, 8
xor edx, edx
repe cmpsb byte [esi], byte es:[edi]
jne 0x4087c8
mov eax, dword [0x6a78f0]
mov ecx, dword [0x6a78f4]
mov edx, dword [0x6a78f8]
mov dword [0x703a70], eax
mov ax, word [0x6a78fc]
mov dword [0x703a74], ecx
mov cl, byte [0x6a78fe]
mov word [0x703a7c], ax
mov byte [0x703a7e], cl
jmp 0x4088da
mov edi, str.GERMANY
lea esi, [esp + 0x10]
mov ecx, 8
xor edx, edx
repe cmpsb byte [esi], byte es:[edi]
jne 0x408801
mov eax, dword [0x6a78e0]
mov ecx, dword [0x6a78e4]
mov edx, dword [0x6a78e8]
mov dword [0x703a70], eax
mov al, byte [0x6a78ec]
mov byte [0x703a7c], al
jmp 0x4088d4
mov edi, str.FRANCE
lea esi, [esp + 0x10]
mov ecx, 7
xor edx, edx
repe cmpsb byte [esi], byte es:[edi]
jne 0x408836
mov eax, dword [0x6a78d0]
mov ecx, dword [0x6a78d4]
mov edx, dword [0x6a78d8]
mov dword [0x703a70], eax
mov ax, word [0x6a78dc]
jmp 0x4088ce
mov edi, str.SINGA_MALA
lea esi, [esp + 0x10]
mov ecx, 0xb
xor edx, edx
repe cmpsb byte [esi], byte es:[edi]
jne 0x40886c
mov eax, dword [0x6a78c0]
mov ecx, dword [0x6a78c4]
mov edx, dword [0x6a78c8]
mov dword [0x703a70], eax
mov eax, dword [0x6a78cc]
mov dword [0x703a7c], eax
jmp 0x4088d4
mov edi, str.RUSSIA
lea esi, [esp + 0x10]
mov ecx, 7
xor edx, edx
repe cmpsb byte [esi], byte es:[edi]
jne 0x40889e
mov eax, dword [0x6a78b0]
mov ecx, dword [0x6a78b4]
mov edx, dword [0x6a78b8]
mov dword [0x703a70], eax
mov ax, word [0x6a78bc]
jmp 0x4088ce
mov edi, str.TURKEY
lea esi, [esp + 0x10]
mov ecx, 7
xor edx, edx
repe cmpsb byte [esi], byte es:[edi]
jne 0x4088e0
mov eax, dword [0x6a78a0]
mov ecx, dword [0x6a78a4]
mov edx, dword [0x6a78a8]
mov dword [0x703a70], eax
mov ax, word [0x6a78ac]
mov word [0x703a7c], ax
mov dword [0x703a74], ecx
mov dword [0x703a78], edx
mov eax, dword [0x6f3558]
cmp eax, 2
je 0x40890f
cmp eax, 5
je 0x40890f
cmp eax, 6
je 0x40890f
cmp eax, 9
je 0x40890f
cmp eax, 0xb
je 0x40890f
push ebx
call fcn.0051c2a0
add esp, 4
pop edi
pop esi
pop ebp
pop ebx
mov esp, ebp
pop ebp
ret
push 1
call fcn.0051c2a0
add esp, 4
pop edi
pop esi
pop ebp
pop ebx
mov esp, ebp
pop ebp
ret