Function at 0x452f20
Capabilities:
Get file size
Persist via run registry key
Query or enumerate registry value
Read .ini file
Read file on windows
Set registry value

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x48f4eb
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
mov eax, 0x1ca8
call fcn.0046b3f0
push edi
mov dword [ebp - 0x1cb4], ecx
mov al, byte [0x4998a8]
mov byte [ebp - 0x1334], al
mov ecx, 0x400
xor eax, eax
lea edi, [ebp - 0x1333]
rep stosd dword es:[edi], eax
mov cl, byte [0x4998a9]
mov byte [ebp - 0x114], cl
mov ecx, 0x41
xor eax, eax
lea edi, [ebp - 0x113]
rep stosd dword es:[edi], eax
push 0x105
lea edx, [ebp - 0x114]
push edx
push 0
call dword [sym.imp.KERNEL32.dll_GetModuleFileNameA]
push 0x5c
lea eax, [ebp - 0x114]
push eax
call fcn.0046d460
add esp, 8
mov byte [eax], 0
mov cl, byte [0x4998aa]
mov byte [ebp - 0x324], cl
mov ecx, 0x41
xor eax, eax
lea edi, [ebp - 0x323]
rep stosd dword es:[edi], eax
lea edx, [ebp - 0x114]
push edx
push 0x4998ac
lea eax, [ebp - 0x324]
push eax
call fcn.0046b198
add esp, 0xc
lea ecx, [ebp - 0x324]
push ecx
push 0x1000
lea edx, [ebp - 0x1334]
push edx
push str.a.root_servers.net
push 0x4998d0
push 0x4998dc
call dword [sym.imp.KERNEL32.dll_GetPrivateProfileStringA]
lea eax, [ebp - 0x1334]
push eax
mov ecx, dword [ebp - 0x1cb4]
add ecx, 0x38ec
push ecx
call fcn.0046b260
add esp, 8
lea edx, [ebp - 0x324]
push edx
push 0x1000
lea eax, [ebp - 0x1334]
push eax
push str.b.root_servers.net
push 0x4998f8
push 0x499908
call dword [sym.imp.KERNEL32.dll_GetPrivateProfileStringA]
lea ecx, [ebp - 0x1334]
push ecx
mov edx, dword [ebp - 0x1cb4]
add edx, 0x3cec
push edx
call fcn.0046b260
add esp, 8
lea eax, [ebp - 0x324]
push eax
push 0x1000
lea ecx, [ebp - 0x1334]
push ecx
push 0x499910
push 0x499914
push 0x499920
call dword [sym.imp.KERNEL32.dll_GetPrivateProfileStringA]
lea edx, [ebp - 0x1334]
push edx
call fcn.0046c429
add esp, 4
mov ecx, dword [ebp - 0x1cb4]
mov dword [ecx + 0x40ec], eax
lea edx, [ebp - 0x324]
push edx
push 0x1000
lea eax, [ebp - 0x1334]
push eax
push 0x499928
push 0x49992c
push 0x49993c
call dword [sym.imp.KERNEL32.dll_GetPrivateProfileStringA]
lea ecx, [ebp - 0x1334]
push ecx
call fcn.0046c429
add esp, 4
mov edx, dword [ebp - 0x1cb4]
mov dword [edx + 0x40f0], eax
lea eax, [ebp - 0x324]
push eax
push 0x1000
lea ecx, [ebp - 0x1334]
push ecx
push 0x499944
push 0x499948
push 0x499954
call dword [sym.imp.KERNEL32.dll_GetPrivateProfileStringA]
lea edx, [ebp - 0x1334]
push edx
call fcn.0046c429
add esp, 4
mov ecx, dword [ebp - 0x1cb4]
mov dword [ecx + 0x40f4], eax
lea edx, [ebp - 0x324]
push edx
push 0x1000
lea eax, [ebp - 0x1334]
push eax
push 0x49995c
push 0x499960
push 0x49996c
call dword [sym.imp.KERNEL32.dll_GetPrivateProfileStringA]
lea ecx, [ebp - 0x1334]
push ecx
call fcn.0046c429
add esp, 4
mov edx, dword [ebp - 0x1cb4]
mov dword [edx + 0x40f8], eax
lea eax, [ebp - 0x324]
push eax
push 0x1000
lea ecx, [ebp - 0x1334]
push ecx
push 0x499974
push 0x499978
push 0x499984
call dword [sym.imp.KERNEL32.dll_GetPrivateProfileStringA]
lea edx, [ebp - 0x1334]
push edx
call fcn.0046c429
add esp, 4
mov ecx, dword [ebp - 0x1cb4]
mov dword [ecx + 0x40fc], eax
lea edx, [ebp - 0x324]
push edx
push 0x1000
lea eax, [ebp - 0x1334]
push eax
push 0x49998c
push 0x499990
push 0x49999c
call dword [sym.imp.KERNEL32.dll_GetPrivateProfileStringA]
lea ecx, [ebp - 0x1334]
push ecx
call fcn.0046c429
add esp, 4
mov edx, dword [ebp - 0x1cb4]
mov dword [edx + 0x4100], eax
lea eax, [ebp - 0x324]
push eax
push 0
push 0x4999a4
push 0x4999b0
call dword [sym.imp.KERNEL32.dll_GetPrivateProfileIntA]
mov ecx, dword [ebp - 0x1cb4]
mov dword [ecx + 0x4104], eax
lea edx, [ebp - 0x324]
push edx
push 0x1000
mov eax, dword [ebp - 0x1cb4]
add eax, 0x60
push eax
push 0x4999b5
push 0x4999b8
push 0x4999c8
call dword [sym.imp.KERNEL32.dll_GetPrivateProfileStringA]
lea ecx, [ebp - 0x324]
push ecx
push 0x1000
lea edx, [ebp - 0x1334]
push edx
push 0x4999cd
push 0x4999d0
push 0x4999dc
call dword [sym.imp.KERNEL32.dll_GetPrivateProfileStringA]
lea eax, [ebp - 0x1334]
push eax
mov ecx, dword [ebp - 0x1cb4]
add ecx, 0x460
push ecx
call fcn.0046b260
add esp, 8
lea edx, [ebp - 0x324]
push edx
push 0x1000
lea eax, [ebp - 0x1334]
push eax
push 0x4999e1
push 0x4999e4
push 0x4999f0
call dword [sym.imp.KERNEL32.dll_GetPrivateProfileStringA]
lea ecx, [ebp - 0x1334]
push ecx
call fcn.0042c910
add esp, 4
lea edx, [ebp - 0x1334]
push edx
mov eax, dword [ebp - 0x1cb4]
add eax, 0x860
push eax
call fcn.0046b260
add esp, 8
lea ecx, [ebp - 0x324]
push ecx
push 0x1000
lea edx, [ebp - 0x1334]
push edx
push 0x4999f8
push 0x4999fc
push 0x499a08
call dword [sym.imp.KERNEL32.dll_GetPrivateProfileStringA]
lea eax, [ebp - 0x1334]
push eax
call fcn.0046c429
add esp, 4
mov ecx, dword [ebp - 0x1cb4]
mov dword [ecx + 0xc64], eax
lea edx, [ebp - 0x324]
push edx
push 0x1000
lea eax, [ebp - 0x1334]
push eax
push 0x499a10
push 0x499a14
push 0x499a24
call dword [sym.imp.KERNEL32.dll_GetPrivateProfileStringA]
lea ecx, [ebp - 0x1334]
push ecx
call fcn.0046c429
add esp, 4
mov edx, dword [ebp - 0x1cb4]
mov dword [edx + 0xc60], eax
lea eax, [ebp - 0x324]
push eax
push 0x1000
lea ecx, [ebp - 0x1334]
push ecx
push 0x499a2c
push 0x499a30
push 0x499a3c
call dword [sym.imp.KERNEL32.dll_GetPrivateProfileStringA]
lea edx, [ebp - 0x1334]
push edx
call fcn.0046c429
add esp, 4
mov ecx, dword [ebp - 0x1cb4]
mov dword [ecx + 0xc68], eax
lea edx, [ebp - 0x324]
push edx
push 0x1000
lea eax, [ebp - 0x1334]
push eax
push 0x499a44
push 0x499a48
push 0x499a4c
call dword [sym.imp.KERNEL32.dll_GetPrivateProfileStringA]
lea ecx, [ebp - 0x1334]
push ecx
call fcn.0046c429
add esp, 4
mov edx, dword [ebp - 0x1cb4]
mov dword [edx + 0xc74], eax
lea eax, [ebp - 0x324]
push eax
push 0x1000
lea ecx, [ebp - 0x1334]
push ecx
push 0x499a54
push 0x499a58
push 0x499a60
call dword [sym.imp.KERNEL32.dll_GetPrivateProfileStringA]
lea edx, [ebp - 0x1334]
push edx
call fcn.0046c429
add esp, 4
mov ecx, dword [ebp - 0x1cb4]
mov dword [ecx + 0xc78], eax
lea edx, [ebp - 0x324]
push edx
push 0x1000
lea eax, [ebp - 0x1334]
push eax
push 0x499a68
push 0x499a6c
push 0x499a70
call dword [sym.imp.KERNEL32.dll_GetPrivateProfileStringA]
lea ecx, [ebp - 0x1334]
push ecx
call fcn.0046c429
add esp, 4
mov edx, dword [ebp - 0x1cb4]
mov dword [edx + 0xc7c], eax
lea eax, [ebp - 0x324]
push eax
push 0x1000
lea ecx, [ebp - 0x1334]
push ecx
push 0x499a78
push 0x499a7c
push 0x499a84
call dword [sym.imp.KERNEL32.dll_GetPrivateProfileStringA]
lea edx, [ebp - 0x1334]
push edx
call fcn.0046c429
add esp, 4
mov ecx, dword [ebp - 0x1cb4]
mov dword [ecx + 0xc80], eax
lea edx, [ebp - 0x324]
push edx
push 0x1000
lea eax, [ebp - 0x1334]
push eax
push 0x499a8c
push 0x499a90
push 0x499a98
call dword [sym.imp.KERNEL32.dll_GetPrivateProfileStringA]
lea ecx, [ebp - 0x1334]
push ecx
call fcn.0046c429
add esp, 4
mov edx, dword [ebp - 0x1cb4]
mov dword [edx + 0xc84], eax
lea eax, [ebp - 0x324]
push eax
push 0x1000
lea ecx, [ebp - 0x1334]
push ecx
push 0x499aa0
push 0x499aa4
push 0x499aac
call dword [sym.imp.KERNEL32.dll_GetPrivateProfileStringA]
lea edx, [ebp - 0x1334]
push edx
call fcn.0046c429
add esp, 4
mov ecx, dword [ebp - 0x1cb4]
mov dword [ecx + 0xc88], eax
lea edx, [ebp - 0x324]
push edx
push 0x1000
lea eax, [ebp - 0x1334]
push eax
push 0x499ab4
push 0x499ab8
push 0x499ac0
call dword [sym.imp.KERNEL32.dll_GetPrivateProfileStringA]
lea ecx, [ebp - 0x1334]
push ecx
call fcn.0046c429
add esp, 4
mov edx, dword [ebp - 0x1cb4]
mov dword [edx + 0xc8c], eax
lea eax, [ebp - 0x324]
push eax
push 0x1000
lea ecx, [ebp - 0x1334]
push ecx
push 0x499ac8
push 0x499acc
push 0x499adc
call dword [sym.imp.KERNEL32.dll_GetPrivateProfileStringA]
lea edx, [ebp - 0x1334]
push edx
call fcn.0046c429
add esp, 4
mov ecx, dword [ebp - 0x1cb4]
mov dword [ecx + 0xc6c], eax
lea edx, [ebp - 0x324]
push edx
push 0x1000
lea eax, [ebp - 0x1334]
push eax
push 0x499ae4
push 0x499ae8
push 0x499b00
call dword [sym.imp.KERNEL32.dll_GetPrivateProfileStringA]
lea ecx, [ebp - 0x1334]
push ecx
call fcn.0046c429
add esp, 4
mov edx, dword [ebp - 0x1cb4]
mov dword [edx + 0xc70], eax
lea eax, [ebp - 0x324]
push eax
push 0x1000
lea ecx, [ebp - 0x1334]
push ecx
push 0x499b08
push 0x499b0c
push 0x499b1c
call dword [sym.imp.KERNEL32.dll_GetPrivateProfileStringA]
lea edx, [ebp - 0x1334]
push edx
call fcn.0046c429
add esp, 4
mov ecx, dword [ebp - 0x1cb4]
mov dword [ecx + 0x50], eax
lea edx, [ebp - 0x324]
push edx
push 0x1000
lea eax, [ebp - 0x1334]
push eax
push 0x499b24
push 0x499b28
push 0x499b38
call dword [sym.imp.KERNEL32.dll_GetPrivateProfileStringA]
lea ecx, [ebp - 0x1334]
push ecx
call fcn.0046c429
add esp, 4
mov edx, dword [ebp - 0x1cb4]
mov dword [edx + 0x54], eax
lea eax, [ebp - 0x324]
push eax
push 0x1000
lea ecx, [ebp - 0x1334]
push ecx
push 0x499b40
push 0x499b44
push 0x499b50
call dword [sym.imp.KERNEL32.dll_GetPrivateProfileStringA]
lea edx, [ebp - 0x1334]
push edx
call fcn.0046c429
add esp, 4
mov ecx, dword [ebp - 0x1cb4]
mov dword [ecx + 0x4c], eax
lea edx, [ebp - 0x324]
push edx
push 0x1000
lea eax, [ebp - 0x1334]
push eax
push 0x499b58
push 0x499b5c
push 0x499b68
call dword [sym.imp.KERNEL32.dll_GetPrivateProfileStringA]
lea ecx, [ebp - 0x1334]
push ecx
call fcn.0046c429
add esp, 4
mov edx, dword [ebp - 0x1cb4]
mov dword [edx + 0x58], eax
lea eax, [ebp - 0x324]
push eax
push 0x1000
lea ecx, [ebp - 0x1334]
push ecx
push 0x499b70
push 0x499b74
push 0x499b84
call dword [sym.imp.KERNEL32.dll_GetPrivateProfileStringA]
lea edx, [ebp - 0x1334]
push edx
call fcn.0046c429
add esp, 4
mov ecx, dword [ebp - 0x1cb4]
mov dword [ecx + 0x4108], eax
lea edx, [ebp - 0x324]
push edx
push 0x1000
lea eax, [ebp - 0x1334]
push eax
push 0x499b8b
push 0x499b8c
push 0x499b98
call dword [sym.imp.KERNEL32.dll_GetPrivateProfileStringA]
lea ecx, [ebp - 0x1334]
push ecx
mov edx, dword [ebp - 0x1cb4]
add edx, 0x410c
push edx
call fcn.0046b260
add esp, 8
lea eax, [ebp - 0x324]
push eax
push 0x1000
lea ecx, [ebp - 0x1334]
push ecx
push 0x499ba8
push 0x499bb0
push 0x499bbc
call dword [sym.imp.KERNEL32.dll_GetPrivateProfileStringA]
lea edx, [ebp - 0x1334]
push edx
mov eax, dword [ebp - 0x1cb4]
add eax, 0x450c
push eax
call fcn.0046b260
add esp, 8
lea ecx, [ebp - 0x324]
push ecx
push 0x1000
lea edx, [ebp - 0x1334]
push edx
push 0x499bcc
push 0x499bd0
push 0x499bd8
call dword [sym.imp.KERNEL32.dll_GetPrivateProfileStringA]
lea eax, [ebp - 0x1334]
push eax
call fcn.0046c429
add esp, 4
mov ecx, dword [ebp - 0x1cb4]
mov dword [ecx + 0x490c], eax
lea edx, [ebp - 0x324]
push edx
push 0x1000
lea eax, [ebp - 0x1334]
push eax
push 0x499be8
push 0x499bec
push 0x499bf8
call dword [sym.imp.KERNEL32.dll_GetPrivateProfileStringA]
lea ecx, [ebp - 0x1334]
push ecx
call fcn.0046c429
add esp, 4
mov edx, dword [ebp - 0x1cb4]
mov dword [edx + 0x4910], eax
lea eax, [ebp - 0x324]
push eax
push 0x1000
lea ecx, [ebp - 0x1334]
push ecx
push 0x499c07
push 0x499c08
push 0x499c14
call dword [sym.imp.KERNEL32.dll_GetPrivateProfileStringA]
lea edx, [ebp - 0x1334]
push edx
mov eax, dword [ebp - 0x1cb4]
add eax, 0x4914
push eax
call fcn.0046b260
add esp, 8
lea ecx, [ebp - 0x324]
push ecx
push 0x1000
lea edx, [ebp - 0x1334]
push edx
push 0x499c23
push 0x499c24
push 0x499c30
call dword [sym.imp.KERNEL32.dll_GetPrivateProfileStringA]
lea eax, [ebp - 0x1334]
push eax
call fcn.0042c910
add esp, 4
lea ecx, [ebp - 0x1334]
push ecx
mov edx, dword [ebp - 0x1cb4]
add edx, 0x4d14
push edx
call fcn.0046b260
add esp, 8
lea eax, [ebp - 0x324]
push eax
push 0x1000
lea ecx, [ebp - 0x1334]
push ecx
push 0x499c40
push 0x499c44
push 0x499c54
call dword [sym.imp.KERNEL32.dll_GetPrivateProfileStringA]
lea edx, [ebp - 0x1334]
push edx
call fcn.0046c429
add esp, 4
mov ecx, dword [ebp - 0x1cb4]
mov dword [ecx + 0x5114], eax
lea edx, [ebp - 0x324]
push edx
push 0x1000
lea eax, [ebp - 0x1334]
push eax
push 0x499c63
push 0x499c64
push 0x499c74
call dword [sym.imp.KERNEL32.dll_GetPrivateProfileStringA]
lea ecx, [ebp - 0x1334]
push ecx
mov edx, dword [ebp - 0x1cb4]
add edx, 0x5128
push edx
call fcn.0046b260
add esp, 8
lea eax, [ebp - 0x324]
push eax
push 0x1000
lea ecx, [ebp - 0x1334]
push ecx
push 0x499c84
push 0x499c8c
push 0x499c98
call dword [sym.imp.KERNEL32.dll_GetPrivateProfileStringA]
lea edx, [ebp - 0x1334]
push edx
mov eax, dword [ebp - 0x1cb4]
add eax, 0x6528
push eax
call fcn.0046b260
add esp, 8
lea ecx, [ebp - 0x324]
push ecx
push 0x1000
lea edx, [ebp - 0x1334]
push edx
push 0x499ca8
push 0x499cac
push 0x499cb4
call dword [sym.imp.KERNEL32.dll_GetPrivateProfileStringA]
lea eax, [ebp - 0x1334]
push eax
call fcn.0046c429
add esp, 4
mov ecx, dword [ebp - 0x1cb4]
mov dword [ecx + 0x7928], eax
lea edx, [ebp - 0x324]
push edx
push 0x1000
lea eax, [ebp - 0x1334]
push eax
push 0x499cc4
push 0x499cc8
push 0x499cd4
call dword [sym.imp.KERNEL32.dll_GetPrivateProfileStringA]
lea ecx, [ebp - 0x1334]
push ecx
call fcn.0046c429
add esp, 4
mov edx, dword [ebp - 0x1cb4]
mov dword [edx + 0x793c], eax
lea eax, [ebp - 0x324]
push eax
push 0x1000
lea ecx, [ebp - 0x1334]
push ecx
push 0x499ce3
push 0x499ce4
push 0x499cf0
call dword [sym.imp.KERNEL32.dll_GetPrivateProfileStringA]
lea edx, [ebp - 0x1334]
push edx
mov eax, dword [ebp - 0x1cb4]
add eax, 0x7950
push eax
call fcn.0046b260
add esp, 8
lea ecx, [ebp - 0x324]
push ecx
push 0x1000
lea edx, [ebp - 0x1334]
push edx
push 0x499cff
push 0x499d00
push 0x499d0c
call dword [sym.imp.KERNEL32.dll_GetPrivateProfileStringA]
lea eax, [ebp - 0x1334]
push eax
call fcn.0042c910
add esp, 4
lea ecx, [ebp - 0x1334]
push ecx
mov edx, dword [ebp - 0x1cb4]
add edx, 0x8d50
push edx
call fcn.0046b260
add esp, 8
lea eax, [ebp - 0x324]
push eax
push 0x1000
lea ecx, [ebp - 0x1334]
push ecx
push 0x499d1c
push 0x499d20
push 0x499d30
call dword [sym.imp.KERNEL32.dll_GetPrivateProfileStringA]
lea edx, [ebp - 0x1334]
push edx
call fcn.0046c429
add esp, 4
mov ecx, dword [ebp - 0x1cb4]
mov dword [ecx + 0x5118], eax
lea edx, [ebp - 0x324]
push edx
push 0x1000
lea eax, [ebp - 0x1334]
push eax
push 0x499d3f
push 0x499d40
push 0x499d50
call dword [sym.imp.KERNEL32.dll_GetPrivateProfileStringA]
lea ecx, [ebp - 0x1334]
push ecx
mov edx, dword [ebp - 0x1cb4]
add edx, 0x5528
push edx
call fcn.0046b260
add esp, 8
lea eax, [ebp - 0x324]
push eax
push 0x1000
lea ecx, [ebp - 0x1334]
push ecx
push 0x499d60
push 0x499d68
push 0x499d78
call dword [sym.imp.KERNEL32.dll_GetPrivateProfileStringA]
lea edx, [ebp - 0x1334]
push edx
mov eax, dword [ebp - 0x1cb4]
add eax, 0x6928
push eax
call fcn.0046b260
add esp, 8
lea ecx, [ebp - 0x324]
push ecx
push 0x1000
lea edx, [ebp - 0x1334]
push edx
push 0x499d88
push 0x499d8c
push 0x499d98
call dword [sym.imp.KERNEL32.dll_GetPrivateProfileStringA]
lea eax, [ebp - 0x1334]
push eax
call fcn.0046c429
add esp, 4
mov ecx, dword [ebp - 0x1cb4]
mov dword [ecx + 0x792c], eax
lea edx, [ebp - 0x324]
push edx
push 0x1000
lea eax, [ebp - 0x1334]
push eax
push 0x499da8
push 0x499dac
push 0x499dbc
call dword [sym.imp.KERNEL32.dll_GetPrivateProfileStringA]
lea ecx, [ebp - 0x1334]
push ecx
call fcn.0046c429
add esp, 4
mov edx, dword [ebp - 0x1cb4]
mov dword [edx + 0x7940], eax
lea eax, [ebp - 0x324]
push eax
push 0x1000
lea ecx, [ebp - 0x1334]
push ecx
push 0x499dcb
push 0x499dcc
push 0x499ddc
call dword [sym.imp.KERNEL32.dll_GetPrivateProfileStringA]
lea edx, [ebp - 0x1334]
push edx
mov eax, dword [ebp - 0x1cb4]
add eax, 0x7d50
push eax
call fcn.0046b260
add esp, 8
lea ecx, [ebp - 0x324]
push ecx
push 0x1000
lea edx, [ebp - 0x1334]
push edx
push 0x499deb
push 0x499dec
push 0x499dfc
call dword [sym.imp.KERNEL32.dll_GetPrivateProfileStringA]
lea eax, [ebp - 0x1334]
push eax
call fcn.0042c910
add esp, 4
lea ecx, [ebp - 0x1334]
push ecx
mov edx, dword [ebp - 0x1cb4]
add edx, 0x9150
push edx
call fcn.0046b260
add esp, 8
lea eax, [ebp - 0x324]
push eax
push 0x1000
lea ecx, [ebp - 0x1334]
push ecx
push 0x499e0c
push 0x499e10
push 0x499e20
call dword [sym.imp.KERNEL32.dll_GetPrivateProfileStringA]
lea edx, [ebp - 0x1334]
push edx
call fcn.0046c429
add esp, 4
mov ecx, dword [ebp - 0x1cb4]
mov dword [ecx + 0x511c], eax
lea edx, [ebp - 0x324]
push edx
push 0x1000
lea eax, [ebp - 0x1334]
push eax
push 0x499e2f
push 0x499e30
push 0x499e40
call dword [sym.imp.KERNEL32.dll_GetPrivateProfileStringA]
lea ecx, [ebp - 0x1334]
push ecx
mov edx, dword [ebp - 0x1cb4]
add edx, 0x5928
push edx
call fcn.0046b260
add esp, 8
lea eax, [ebp - 0x324]
push eax
push 0x1000
lea ecx, [ebp - 0x1334]
push ecx
push 0x499e50
push 0x499e58
push 0x499e68
call dword [sym.imp.KERNEL32.dll_GetPrivateProfileStringA]
lea edx, [ebp - 0x1334]
push edx
mov eax, dword [ebp - 0x1cb4]
add eax, 0x6d28
push eax
call fcn.0046b260
add esp, 8
lea ecx, [ebp - 0x324]
push ecx
push 0x1000
lea edx, [ebp - 0x1334]
push edx
push 0x499e78
push 0x499e7c
push 0x499e88
call dword [sym.imp.KERNEL32.dll_GetPrivateProfileStringA]
lea eax, [ebp - 0x1334]
push eax
call fcn.0046c429
add esp, 4
mov ecx, dword [ebp - 0x1cb4]
mov dword [ecx + 0x7930], eax
lea edx, [ebp - 0x324]
push edx
push 0x1000
lea eax, [ebp - 0x1334]
push eax
push 0x499e98
push 0x499e9c
push 0x499eac
call dword [sym.imp.KERNEL32.dll_GetPrivateProfileStringA]
lea ecx, [ebp - 0x1334]
push ecx
call fcn.0046c429
add esp, 4
mov edx, dword [ebp - 0x1cb4]
mov dword [edx + 0x7944], eax
lea eax, [ebp - 0x324]
push eax
push 0x1000
lea ecx, [ebp - 0x1334]
push ecx
push 0x499ebb
push 0x499ebc
push 0x499ecc
call dword [sym.imp.KERNEL32.dll_GetPrivateProfileStringA]
lea edx, [ebp - 0x1334]
push edx
mov eax, dword [ebp - 0x1cb4]
add eax, 0x8150
push eax
call fcn.0046b260
add esp, 8
lea ecx, [ebp - 0x324]
push ecx
push 0x1000
lea edx, [ebp - 0x1334]
push edx
push 0x499edb
push 0x499edc
push 0x499eec
call dword [sym.imp.KERNEL32.dll_GetPrivateProfileStringA]
lea eax, [ebp - 0x1334]
push eax
call fcn.0042c910
add esp, 4
lea ecx, [ebp - 0x1334]
push ecx
mov edx, dword [ebp - 0x1cb4]
add edx, 0x9550
push edx
call fcn.0046b260
add esp, 8
lea eax, [ebp - 0x324]
push eax
push 0x1000
lea ecx, [ebp - 0x1334]
push ecx
push 0x499efc
push 0x499f00
push 0x499f10
call dword [sym.imp.KERNEL32.dll_GetPrivateProfileStringA]
lea edx, [ebp - 0x1334]
push edx
call fcn.0046c429
add esp, 4
mov ecx, dword [ebp - 0x1cb4]
mov dword [ecx + 0x5120], eax
lea edx, [ebp - 0x324]
push edx
push 0x1000
lea eax, [ebp - 0x1334]
push eax
push 0x499f1f
push 0x499f20
push 0x499f30
call dword [sym.imp.KERNEL32.dll_GetPrivateProfileStringA]
lea ecx, [ebp - 0x1334]
push ecx
mov edx, dword [ebp - 0x1cb4]
add edx, 0x5d28
push edx
call fcn.0046b260
add esp, 8
lea eax, [ebp - 0x324]
push eax
push 0x1000
lea ecx, [ebp - 0x1334]
push ecx
push 0x499f40
push 0x499f48
push 0x499f58
call dword [sym.imp.KERNEL32.dll_GetPrivateProfileStringA]
lea edx, [ebp - 0x1334]
push edx
mov eax, dword [ebp - 0x1cb4]
add eax, 0x7128
push eax
call fcn.0046b260
add esp, 8
lea ecx, [ebp - 0x324]
push ecx
push 0x1000
lea edx, [ebp - 0x1334]
push edx
push 0x499f68
push 0x499f6c
push 0x499f78
call dword [sym.imp.KERNEL32.dll_GetPrivateProfileStringA]
lea eax, [ebp - 0x1334]
push eax
call fcn.0046c429
add esp, 4
mov ecx, dword [ebp - 0x1cb4]
mov dword [ecx + 0x7934], eax
lea edx, [ebp - 0x324]
push edx
push 0x1000
lea eax, [ebp - 0x1334]
push eax
push 0x499f88
push 0x499f8c
push 0x499f9c
call dword [sym.imp.KERNEL32.dll_GetPrivateProfileStringA]
lea ecx, [ebp - 0x1334]
push ecx
call fcn.0046c429
add esp, 4
mov edx, dword [ebp - 0x1cb4]
mov dword [edx + 0x7948], eax
lea eax, [ebp - 0x324]
push eax
push 0x1000
lea ecx, [ebp - 0x1334]
push ecx
push 0x499fab
push 0x499fac
push 0x499fbc
call dword [sym.imp.KERNEL32.dll_GetPrivateProfileStringA]
lea edx, [ebp - 0x1334]
push edx
mov eax, dword [ebp - 0x1cb4]
add eax, 0x8550
push eax
call fcn.0046b260
add esp, 8
lea ecx, [ebp - 0x324]
push ecx
push 0x1000
lea edx, [ebp - 0x1334]
push edx
push 0x499fcb
push 0x499fcc
push 0x499fdc
call dword [sym.imp.KERNEL32.dll_GetPrivateProfileStringA]
lea eax, [ebp - 0x1334]
push eax
call fcn.0042c910
add esp, 4
lea ecx, [ebp - 0x1334]
push ecx
mov edx, dword [ebp - 0x1cb4]
add edx, 0x9950
push edx
call fcn.0046b260
add esp, 8
lea eax, [ebp - 0x324]
push eax
push 0x1000
lea ecx, [ebp - 0x1334]
push ecx
push 0x499fec
push 0x499ff0
push 0x49a000
call dword [sym.imp.KERNEL32.dll_GetPrivateProfileStringA]
lea edx, [ebp - 0x1334]
push edx
call fcn.0046c429
add esp, 4
mov ecx, dword [ebp - 0x1cb4]
mov dword [ecx + 0x5124], eax
lea edx, [ebp - 0x324]
push edx
push 0x1000
lea eax, [ebp - 0x1334]
push eax
push 0x49a00f
push 0x49a010
push 0x49a020
call dword [sym.imp.KERNEL32.dll_GetPrivateProfileStringA]
lea ecx, [ebp - 0x1334]
push ecx
mov edx, dword [ebp - 0x1cb4]
add edx, 0x6128
push edx
call fcn.0046b260
add esp, 8
lea eax, [ebp - 0x324]
push eax
push 0x1000
lea ecx, [ebp - 0x1334]
push ecx
push 0x49a030
push 0x49a038
push 0x49a048
call dword [sym.imp.KERNEL32.dll_GetPrivateProfileStringA]
lea edx, [ebp - 0x1334]
push edx
mov eax, dword [ebp - 0x1cb4]
add eax, 0x7528
push eax
call fcn.0046b260
add esp, 8
lea ecx, [ebp - 0x324]
push ecx
push 0x1000
lea edx, [ebp - 0x1334]
push edx
push 0x49a058
push 0x49a05c
push 0x49a068
call dword [sym.imp.KERNEL32.dll_GetPrivateProfileStringA]
lea eax, [ebp - 0x1334]
push eax
call fcn.0046c429
add esp, 4
mov ecx, dword [ebp - 0x1cb4]
mov dword [ecx + 0x7938], eax
lea edx, [ebp - 0x324]
push edx
push 0x1000
lea eax, [ebp - 0x1334]
push eax
push 0x49a078
push 0x49a07c
push 0x49a08c
call dword [sym.imp.KERNEL32.dll_GetPrivateProfileStringA]
lea ecx, [ebp - 0x1334]
push ecx
call fcn.0046c429
add esp, 4
mov edx, dword [ebp - 0x1cb4]
mov dword [edx + 0x794c], eax
lea eax, [ebp - 0x324]
push eax
push 0x1000
lea ecx, [ebp - 0x1334]
push ecx
push 0x49a09b
push 0x49a09c
push 0x49a0ac
call dword [sym.imp.KERNEL32.dll_GetPrivateProfileStringA]
lea edx, [ebp - 0x1334]
push edx
mov eax, dword [ebp - 0x1cb4]
add eax, 0x8950
push eax
call fcn.0046b260
add esp, 8
lea ecx, [ebp - 0x324]
push ecx
push 0x1000
lea edx, [ebp - 0x1334]
push edx
push 0x49a0bb
push 0x49a0bc
push 0x49a0cc
call dword [sym.imp.KERNEL32.dll_GetPrivateProfileStringA]
lea eax, [ebp - 0x1334]
push eax
call fcn.0042c910
add esp, 4
lea ecx, [ebp - 0x1334]
push ecx
mov edx, dword [ebp - 0x1cb4]
add edx, 0x9d50
push edx
call fcn.0046b260
add esp, 8
lea eax, [ebp - 0x324]
push eax
push 0x1000
lea ecx, [ebp - 0x1334]
push ecx
push 0x49a0dc
push 0x49a0e0
push 0x49a0ec
call dword [sym.imp.KERNEL32.dll_GetPrivateProfileStringA]
lea edx, [ebp - 0x1334]
push edx
call fcn.0046c429
add esp, 4
mov ecx, dword [ebp - 0x1cb4]
mov dword [ecx + 0xa150], eax
lea edx, [ebp - 0x114]
push edx
push str._sLog
lea eax, [ebp - 0x1334]
push eax
call fcn.0046b198
add esp, 0xc
lea ecx, [ebp - 0x324]
push ecx
push 0x1000
lea edx, [ebp - 0x1334]
push edx
lea eax, [ebp - 0x1334]
push eax
push 0x49a0f8
push 0x49a100
call dword [sym.imp.KERNEL32.dll_GetPrivateProfileStringA]
lea ecx, [ebp - 0x1334]
push ecx
mov edx, dword [ebp - 0x1cb4]
add edx, 0xa154
push edx
call fcn.0046b260
add esp, 8
lea eax, [ebp - 0x324]
push eax
push 0x1000
lea ecx, [ebp - 0x1334]
push ecx
push 0x49a104
push 0x49a108
push 0x49a114
call dword [sym.imp.KERNEL32.dll_GetPrivateProfileStringA]
lea edx, [ebp - 0x1334]
push edx
call fcn.0046c429
add esp, 4
mov ecx, dword [ebp - 0x1cb4]
mov dword [ecx + 0xa554], eax
lea edx, [ebp - 0x324]
push edx
push 0x1000
lea eax, [ebp - 0x1334]
push eax
push 0x49a118
push 0x49a11c
push 0x49a124
call dword [sym.imp.KERNEL32.dll_GetPrivateProfileStringA]
lea ecx, [ebp - 0x1334]
push ecx
call fcn.0046c429
add esp, 4
mov edx, dword [ebp - 0x1cb4]
mov dword [edx + 0xa558], eax
lea eax, [ebp - 0x324]
push eax
push 0x1000
lea ecx, [ebp - 0x1334]
push ecx
push 0x49a128
push 0x49a12c
push 0x49a138
call dword [sym.imp.KERNEL32.dll_GetPrivateProfileStringA]
lea edx, [ebp - 0x1334]
push edx
call fcn.0046c429
add esp, 4
mov ecx, dword [ebp - 0x1cb4]
mov dword [ecx + 0xa55c], eax
lea edx, [ebp - 0x324]
push edx
push 0x1000
lea eax, [ebp - 0x1334]
push eax
push 0x49a13c
push 0x49a140
push 0x49a150
call dword [sym.imp.KERNEL32.dll_GetPrivateProfileStringA]
lea ecx, [ebp - 0x1334]
push ecx
call fcn.0046c429
add esp, 4
mov edx, dword [ebp - 0x1cb4]
mov dword [edx + 0xa560], eax
lea eax, [ebp - 0x324]
push eax
push 0x1000
lea ecx, [ebp - 0x1334]
push ecx
push str.10000
push 0x49a15c
push 0x49a164
call dword [sym.imp.KERNEL32.dll_GetPrivateProfileStringA]
lea edx, [ebp - 0x1334]
push edx
call fcn.0046c429
add esp, 4
mov ecx, dword [ebp - 0x1cb4]
mov dword [ecx + 0xa564], eax
lea edx, [ebp - 0x324]
push edx
push 0x1000
lea eax, [ebp - 0x1334]
push eax
push 0x49a168
push 0x49a16c
push 0x49a178
call dword [sym.imp.KERNEL32.dll_GetPrivateProfileStringA]
lea ecx, [ebp - 0x1334]
push ecx
call fcn.0046c429
add esp, 4
mov edx, dword [ebp - 0x1cb4]
mov dword [edx + 0xa568], eax
lea eax, [ebp - 0x324]
push eax
push 0x1000
lea ecx, [ebp - 0x1334]
push ecx
push str.English
push 0x49a184
push 0x49a190
call dword [sym.imp.KERNEL32.dll_GetPrivateProfileStringA]
lea edx, [ebp - 0x1334]
push edx
mov eax, dword [ebp - 0x1cb4]
add eax, 0x10a4
push eax
call fcn.0046b260
add esp, 8
lea ecx, [ebp - 0x324]
push ecx
push 0x1000
lea edx, [ebp - 0x1334]
push edx
push 0x49a198
push 0x49a19c
push 0x49a1b0
call dword [sym.imp.KERNEL32.dll_GetPrivateProfileStringA]
lea eax, [ebp - 0x1334]
push eax
call fcn.0046d841
add esp, 4
fmul qword [0x495ad8]
call fcn.0046d7cc
mov ecx, dword [ebp - 0x1cb4]
mov dword [ecx + 0xa9b8], eax
lea edx, [ebp - 0x324]
push edx
push 0x1000
lea eax, [ebp - 0x1334]
push eax
push 0x49a1b8
push 0x49a1bc
push 0x49a1cc
call dword [sym.imp.KERNEL32.dll_GetPrivateProfileStringA]
lea ecx, [ebp - 0x1334]
push ecx
call fcn.0046c429
add esp, 4
mov edx, dword [ebp - 0x1cb4]
mov dword [edx + 0xc98], eax
lea eax, [ebp - 0x324]
push eax
push 0x1000
lea ecx, [ebp - 0x1334]
push ecx
push 0x49a1d4
push 0x49a1d8
push 0x49a1f0
call dword [sym.imp.KERNEL32.dll_GetPrivateProfileStringA]
lea edx, [ebp - 0x1334]
push edx
call fcn.0046c429
add esp, 4
mov ecx, dword [ebp - 0x1cb4]
mov dword [ecx + 0xc9c], eax
lea edx, [ebp - 0x324]
push edx
push 0x1000
lea eax, [ebp - 0x1334]
push eax
push 0x49a1f7
push 0x49a1f8
push 0x49a204
call dword [sym.imp.KERNEL32.dll_GetPrivateProfileStringA]
lea ecx, [ebp - 0x1334]
push ecx
call fcn.0042c910
add esp, 4
lea edx, [ebp - 0x1334]
push edx
mov eax, dword [ebp - 0x1cb4]
add eax, 0xca0
push eax
call fcn.0046b260
add esp, 8
lea ecx, [ebp - 0x324]
push ecx
push 0x1000
lea edx, [ebp - 0x1334]
push edx
push 0x49a20c
push 0x49a210
push 0x49a218
call dword [sym.imp.KERNEL32.dll_GetPrivateProfileStringA]
mov eax, dword [ebp - 0x1cb4]
mov dword [eax + 0x10a0], 0
lea ecx, [ebp - 0x324]
push ecx
push 0x1000
lea edx, [ebp - 0x1334]
push edx
push 0x49a220
push 0x49a224
push 0x49a238
call dword [sym.imp.KERNEL32.dll_GetPrivateProfileStringA]
lea eax, [ebp - 0x1334]
push eax
call fcn.0046c429
add esp, 4
mov ecx, dword [ebp - 0x1cb4]
mov dword [ecx + 0xa584], eax
lea edx, [ebp - 0x324]
push edx
push 0x1000
lea eax, [ebp - 0x1334]
push eax
push str.www.yahoo.com_www.icq.com_www.internic.net
push 0x49a26c
push 0x49a284
call dword [sym.imp.KERNEL32.dll_GetPrivateProfileStringA]
lea ecx, [ebp - 0x1334]
push ecx
mov edx, dword [ebp - 0x1cb4]
add edx, 0xa9c0
push edx
call fcn.0046b260
add esp, 8
mov eax, dword [ebp - 0x1cb4]
mov dword [eax + 0xc90], 0
lea ecx, [ebp - 0x328]
push ecx
push 0xf003f
push 0
push 0x49a28c
push reloc.WS2_32.dll_accept
call dword [sym.imp.ADVAPI32.dll_RegOpenKeyExA]
test eax, eax
jne 0x4547bc
mov dl, byte [0x49a2ba]
mov byte [ebp - 0x173c], dl
mov ecx, 0xff
xor eax, eax
lea edi, [ebp - 0x173b]
rep stosd dword es:[edi], eax
stosw word es:[edi], ax
stosb byte es:[edi], al
mov dword [ebp - 0x1338], 0x400
lea eax, [ebp - 0x1338]
push eax
lea ecx, [ebp - 0x173c]
push ecx
push 0
push 0
push 0x49a2bc
mov edx, dword [ebp - 0x328]
push edx
call dword [sym.imp.ADVAPI32.dll_RegQueryValueExA]
lea eax, [ebp - 0x173c]
push eax
call fcn.0046b430
add esp, 4
test eax, eax
jbe 0x4547af
mov byte [ebp - 0x1744], 0
push 0x400
lea ecx, [ebp - 0x1b44]
push ecx
push 0
call dword [sym.imp.KERNEL32.dll_GetModuleFileNameA]
lea edx, [ebp - 0x1b44]
push edx
call fcn.0046b430
add esp, 4
push eax
lea eax, [ebp - 0x1b44]
push eax
push 1
push 0
push 0x49a2c4
mov ecx, dword [ebp - 0x328]
push ecx
call dword [sym.imp.ADVAPI32.dll_RegSetValueExA]
mov edx, dword [ebp - 0x1cb4]
mov dword [edx + 0xc90], 1
mov eax, dword [ebp - 0x328]
push eax
call dword [sym.imp.ADVAPI32.dll_RegCloseKey]
lea ecx, [ebp - 0x324]
push ecx
push 0
push 0x49a2cc
push 0x49a2d8
call dword [sym.imp.KERNEL32.dll_GetPrivateProfileIntA]
mov edx, dword [ebp - 0x1cb4]
mov dword [edx + 0xc94], eax
lea eax, [ebp - 0x324]
push eax
push 0
push 0x49a2e0
push 0x49a2e8
call dword [sym.imp.KERNEL32.dll_GetPrivateProfileIntA]
mov ecx, dword [ebp - 0x1cb4]
mov dword [ecx + 0x5c], eax
lea edx, [ebp - 0x324]
push edx
push 1
push 0x49a2f0
push 0x49a2fc
call dword [sym.imp.KERNEL32.dll_GetPrivateProfileIntA]
xor ecx, ecx
cmp eax, 0xffffffff
setne cl
mov edx, dword [ebp - 0x1cb4]
mov dword [edx + 0x3c], ecx
lea eax, [ebp - 0x324]
push eax
push 1
push str.StartFtp
push 0x49a310
call dword [sym.imp.KERNEL32.dll_GetPrivateProfileIntA]
mov ecx, dword [ebp - 0x1cb4]
mov dword [ecx + 0x1c], eax
lea edx, [ebp - 0x324]
push edx
push 1
push 0x49a318
push 0x49a324
call dword [sym.imp.KERNEL32.dll_GetPrivateProfileIntA]
mov ecx, dword [ebp - 0x1cb4]
mov dword [ecx + 8], eax
lea edx, [ebp - 0x324]
push edx
push 1
push 0x49a32c
push 0x49a338
call dword [sym.imp.KERNEL32.dll_GetPrivateProfileIntA]
mov ecx, dword [ebp - 0x1cb4]
mov dword [ecx + 0xc], eax
lea edx, [ebp - 0x324]
push edx
push 1
push str.StartHttp
push 0x49a34c
call dword [sym.imp.KERNEL32.dll_GetPrivateProfileIntA]
mov ecx, dword [ebp - 0x1cb4]
mov dword [ecx], eax
lea edx, [ebp - 0x324]
push edx
push 1
push 0x49a354
push 0x49a360
call dword [sym.imp.KERNEL32.dll_GetPrivateProfileIntA]
mov ecx, dword [ebp - 0x1cb4]
mov dword [ecx + 0x38], eax
lea edx, [ebp - 0x324]
push edx
push 1
push 0x49a368
push 0x49a374
call dword [sym.imp.KERNEL32.dll_GetPrivateProfileIntA]
mov ecx, dword [ebp - 0x1cb4]
mov dword [ecx + 0x2c], eax
lea edx, [ebp - 0x324]
push edx
push 1
push 0x49a37c
push 0x49a388
call dword [sym.imp.KERNEL32.dll_GetPrivateProfileIntA]
mov ecx, dword [ebp - 0x1cb4]
mov dword [ecx + 0x34], eax
lea edx, [ebp - 0x324]
push edx
push 1
push 0x49a390
push 0x49a39c
call dword [sym.imp.KERNEL32.dll_GetPrivateProfileIntA]
mov ecx, dword [ebp - 0x1cb4]
mov dword [ecx + 0x10], eax
lea edx, [ebp - 0x324]
push edx
push 1
push 0x49a3a4
push 0x49a3b0
call dword [sym.imp.KERNEL32.dll_GetPrivateProfileIntA]
mov ecx, dword [ebp - 0x1cb4]
mov dword [ecx + 0x24], eax
lea edx, [ebp - 0x324]
push edx
push 1
push 0x49a3b8
push 0x49a3c4
call dword [sym.imp.KERNEL32.dll_GetPrivateProfileIntA]
mov ecx, dword [ebp - 0x1cb4]
mov dword [ecx + 0x14], eax
lea edx, [ebp - 0x324]
push edx
push 1
push 0x49a3cc
push 0x49a3d8
call dword [sym.imp.KERNEL32.dll_GetPrivateProfileIntA]
mov ecx, dword [ebp - 0x1cb4]
mov dword [ecx + 0x40], eax
lea edx, [ebp - 0x324]
push edx
push 0
push 0x49a3e0
push 0x49a3ec
call dword [sym.imp.KERNEL32.dll_GetPrivateProfileIntA]
mov ecx, dword [ebp - 0x1cb4]
mov dword [ecx + 0x44], eax
lea edx, [ebp - 0x324]
push edx
push 0x328
push 0x49a3f4
push 0x49a3fc
call dword [sym.imp.KERNEL32.dll_GetPrivateProfileIntA]
mov ecx, dword [ebp - 0x1cb4]
mov dword [ecx + 4], eax
lea edx, [ebp - 0x324]
push edx
push 0x438
push 0x49a404
push 0x49a40c
call dword [sym.imp.KERNEL32.dll_GetPrivateProfileIntA]
mov ecx, dword [ebp - 0x1cb4]
mov dword [ecx + 0x18], eax
lea edx, [ebp - 0x324]
push edx
push 0x849
push 0x49a414
push 0x49a418
call dword [sym.imp.KERNEL32.dll_GetPrivateProfileIntA]
mov ecx, dword [ebp - 0x1cb4]
mov dword [ecx + 0x20], eax
lea edx, [ebp - 0x324]
push edx
push 0x17
push str.TELNET
push 0x49a428
call dword [sym.imp.KERNEL32.dll_GetPrivateProfileIntA]
mov ecx, dword [ebp - 0x1cb4]
mov dword [ecx + 0x28], eax
lea edx, [ebp - 0x324]
push edx
push 0x77
push 0x49a430
push 0x49a438
call dword [sym.imp.KERNEL32.dll_GetPrivateProfileIntA]
mov ecx, dword [ebp - 0x1cb4]
mov dword [ecx + 0x30], eax
lea edx, [ebp - 0x324]
push edx
push 0x58
push 0x49a440
push 0x49a448
call dword [sym.imp.KERNEL32.dll_GetPrivateProfileIntA]
mov ecx, dword [ebp - 0x1cb4]
mov dword [ecx + 0x48], eax
lea edx, [ebp - 0x324]
push edx
push 0x1000
lea eax, [ebp - 0x1334]
push eax
push 0x49a450
push 0x49a454
push 0x49a45c
call dword [sym.imp.KERNEL32.dll_GetPrivateProfileStringA]
movsx ecx, byte [ebp - 0x1334]
mov edx, dword [ebp - 0x1cb4]
mov dword [edx + 0x230bc], ecx
lea eax, [ebp - 0x324]
push eax
push 0x1000
lea ecx, [ebp - 0x1334]
push ecx
push 0x49a464
push 0x49a468
push 0x49a46c
call dword [sym.imp.KERNEL32.dll_GetPrivateProfileStringA]
movsx edx, byte [ebp - 0x1334]
mov eax, dword [ebp - 0x1cb4]
mov dword [eax + 0x230c0], edx
lea ecx, [ebp - 0x324]
push ecx
push 0x1000
lea edx, [ebp - 0x1334]
push edx
push 0x49a474
push 0x49a478
push str.Token
call dword [sym.imp.KERNEL32.dll_GetPrivateProfileStringA]
movsx eax, byte [ebp - 0x1334]
mov ecx, dword [ebp - 0x1cb4]
mov dword [ecx + 0x230c4], eax
lea edx, [ebp - 0x324]
push edx
push 0x1000
lea eax, [ebp - 0x1334]
push eax
push 0x49a486
push 0x49a488
push 0x49a490
call dword [sym.imp.KERNEL32.dll_GetPrivateProfileStringA]
lea ecx, [ebp - 0x1334]
push ecx
mov edx, dword [ebp - 0x1cb4]
add edx, 0xa588
push edx
call fcn.0046b260
add esp, 8
mov eax, dword [ebp - 0x1cb4]
cmp dword [eax + 0xa9bc], 0
jne 0x454ca8
mov ecx, dword [ebp - 0x1cb4]
add ecx, 0xa588
push ecx
lea ecx, [ebp - 0x1b48]
call fcn.00407a50
mov dword [ebp - 4], 0
mov dword [ebp - 0x1b50], 0
mov dword [ebp - 0x1b4c], 0
mov dword [ebp - 0x1b4c], 0
cmp dword [ebp - 0x1b50], 0xffffffff
je 0x454c7f
lea edx, [ebp - 0x1b50]
push edx
push 0x49a498
lea eax, [ebp - 0x1b54]
push eax
lea ecx, [ebp - 0x1b48]
call fcn.0040e300
lea ecx, [ebp - 0x1b54]
call fcn.00407b80
test eax, eax
jne 0x454c25
lea ecx, [ebp - 0x1b54]
call fcn.00407ac0
jmp 0x454c7f
lea ecx, [ebp - 0x1b54]
call fcn.0040ee50
push eax
call dword [sym.imp.WS2_32.dll_inet_addr]
mov ecx, dword [ebp - 0x1b4c]
mov edx, dword [ebp - 0x1cb4]
mov dword [edx + ecx*4 + 0xa98c], eax
mov eax, dword [ebp - 0x1b4c]
add eax, 1
mov dword [ebp - 0x1b4c], eax
cmp dword [ebp - 0x1b4c], 0xa
jl 0x454c6f
lea ecx, [ebp - 0x1b54]
call fcn.00407ac0
jmp 0x454c7f
lea ecx, [ebp - 0x1b54]
call fcn.00407ac0
jmp 0x454bde
mov ecx, dword [ebp - 0x1b4c]
mov edx, dword [ebp - 0x1cb4]
mov dword [edx + ecx*4 + 0xa98c], 0
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x1b48]
call fcn.00407ac0
lea eax, [ebp - 0x324]
push eax
push 1
push 0x49a49c
push 0x49a4a8
call dword [sym.imp.KERNEL32.dll_GetPrivateProfileIntA]
mov ecx, dword [ebp - 0x1cb4]
mov dword [ecx + 0xa9bc], eax
lea edx, [ebp - 0x324]
push edx
push 0
push 0x49a4b0
push 0x49a4c8
call dword [sym.imp.KERNEL32.dll_GetPrivateProfileIntA]
mov ecx, dword [ebp - 0x1cb4]
mov dword [ecx + 0xb9c4], eax
lea edx, [ebp - 0x324]
push edx
push 1
push 0x49a4d0
push 0x49a4e4
call dword [sym.imp.KERNEL32.dll_GetPrivateProfileIntA]
mov ecx, dword [ebp - 0x1cb4]
mov dword [ecx + 0xb9cc], eax
lea edx, [ebp - 0x324]
push edx
push 0
push 0x49a4ec
push 0x49a4f8
call dword [sym.imp.KERNEL32.dll_GetPrivateProfileIntA]
mov ecx, dword [ebp - 0x1cb4]
mov dword [ecx + 0x34bc], eax
lea edx, [ebp - 0x324]
push edx
push 0
push 0x49a500
push 0x49a50c
call dword [sym.imp.KERNEL32.dll_GetPrivateProfileIntA]
mov ecx, dword [ebp - 0x1cb4]
mov dword [ecx + 0x34b8], eax
lea edx, [ebp - 0x324]
push edx
push 0x400
mov eax, dword [ebp - 0x1cb4]
add eax, 0x14a8
push eax
push str.CCProxy_Authorization
push 0x49a52c
push 0x49a53c
call dword [sym.imp.KERNEL32.dll_GetPrivateProfileStringA]
lea ecx, [ebp - 0x324]
push ecx
push 0x400
mov edx, dword [ebp - 0x1cb4]
add edx, 0x20b0
push edx
push str._Html__Body__H1__Unauthorized_...__H1___Body___Html_
push 0x49a580
push 0x49a590
call dword [sym.imp.KERNEL32.dll_GetPrivateProfileStringA]
push 0x49a59c
mov eax, dword [ebp - 0x1cb4]
add eax, 0x20b0
push eax
call fcn.0046d1f4
add esp, 8
mov dword [ebp - 0x1b58], eax
cmp dword [ebp - 0x1b58], 0
je 0x454ed9
push 2
push 0
mov ecx, dword [ebp - 0x1b58]
push ecx
call fcn.0046dbab
add esp, 0xc
mov edx, dword [ebp - 0x1b58]
push edx
call fcn.0046dadb
add esp, 4
mov dword [ebp - 0x1b5c], eax
mov eax, dword [ebp - 0x1cb4]
cmp dword [eax + 0x24b0], 0
je 0x454e50
mov ecx, dword [ebp - 0x1cb4]
mov edx, dword [ecx + 0x24b0]
mov dword [ebp - 0x1c90], edx
mov eax, dword [ebp - 0x1c90]
push eax
call fcn.00481999
add esp, 4
mov ecx, dword [ebp - 0x1cb4]
mov dword [ecx + 0x24b0], 0
mov edx, dword [ebp - 0x1b5c]
add edx, 1
push edx
call fcn.0048199e
add esp, 4
mov dword [ebp - 0x1c94], eax
mov eax, dword [ebp - 0x1cb4]
mov ecx, dword [ebp - 0x1c94]
mov dword [eax + 0x24b0], ecx
mov edx, dword [ebp - 0x1cb4]
mov eax, dword [edx + 0x24b0]
mov ecx, dword [ebp - 0x1b5c]
mov byte [eax + ecx], 0
push 0
push 0
mov edx, dword [ebp - 0x1b58]
push edx
call fcn.0046dbab
add esp, 0xc
mov eax, dword [ebp - 0x1b58]
push eax
push 1
mov ecx, dword [ebp - 0x1b5c]
push ecx
mov edx, dword [ebp - 0x1cb4]
mov eax, dword [edx + 0x24b0]
push eax
call fcn.0046dcdd
add esp, 0x10
mov ecx, dword [ebp - 0x1b58]
push ecx
call fcn.0046cff4
add esp, 4
jmp 0x454f19
mov edx, dword [ebp - 0x1cb4]
cmp dword [edx + 0x24b0], 0
je 0x454f09
mov eax, dword [ebp - 0x1cb4]
mov ecx, dword [eax + 0x24b0]
mov dword [ebp - 0x1c98], ecx
mov edx, dword [ebp - 0x1c98]
push edx
call fcn.00481999
add esp, 4
mov eax, dword [ebp - 0x1cb4]
mov dword [eax + 0x24b0], 0
lea ecx, [ebp - 0x324]
push ecx
push 0x400
mov edx, dword [ebp - 0x1cb4]
add edx, 0x18a8
push edx
push str._Html__Body__H1___s_is_prohibited_by_proxy.__H1___Body___Html_
push 0x49a5e0
push 0x49a5f4
call dword [sym.imp.KERNEL32.dll_GetPrivateProfileStringA]
push 0x49a600
mov eax, dword [ebp - 0x1cb4]
add eax, 0x18a8
push eax
call fcn.0046d1f4
add esp, 8
mov dword [ebp - 0x1b60], eax
cmp dword [ebp - 0x1b60], 0
je 0x455064
push 2
push 0
mov ecx, dword [ebp - 0x1b60]
push ecx
call fcn.0046dbab
add esp, 0xc
mov edx, dword [ebp - 0x1b60]
push edx
call fcn.0046dadb
add esp, 4
mov dword [ebp - 0x1b64], eax
mov eax, dword [ebp - 0x1cb4]
cmp dword [eax + 0x1ca8], 0
je 0x454fdb
mov ecx, dword [ebp - 0x1cb4]
mov edx, dword [ecx + 0x1ca8]
mov dword [ebp - 0x1c9c], edx
mov eax, dword [ebp - 0x1c9c]
push eax
call fcn.00481999
add esp, 4
mov ecx, dword [ebp - 0x1cb4]
mov dword [ecx + 0x1ca8], 0
mov edx, dword [ebp - 0x1b64]
add edx, 1
push edx
call fcn.0048199e
add esp, 4
mov dword [ebp - 0x1ca0], eax
mov eax, dword [ebp - 0x1cb4]
mov ecx, dword [ebp - 0x1ca0]
mov dword [eax + 0x1ca8], ecx
mov edx, dword [ebp - 0x1cb4]
mov eax, dword [edx + 0x1ca8]
mov ecx, dword [ebp - 0x1b64]
mov byte [eax + ecx], 0
push 0
push 0
mov edx, dword [ebp - 0x1b60]
push edx
call fcn.0046dbab
add esp, 0xc
mov eax, dword [ebp - 0x1b60]
push eax
push 1
mov ecx, dword [ebp - 0x1b64]
push ecx
mov edx, dword [ebp - 0x1cb4]
mov eax, dword [edx + 0x1ca8]
push eax
call fcn.0046dcdd
add esp, 0x10
mov ecx, dword [ebp - 0x1b60]
push ecx
call fcn.0046cff4
add esp, 4
jmp 0x4550a4
mov edx, dword [ebp - 0x1cb4]
cmp dword [edx + 0x1ca8], 0
je 0x455094
mov eax, dword [ebp - 0x1cb4]
mov ecx, dword [eax + 0x1ca8]
mov dword [ebp - 0x1ca4], ecx
mov edx, dword [ebp - 0x1ca4]
push edx
call fcn.00481999
add esp, 4
mov eax, dword [ebp - 0x1cb4]
mov dword [eax + 0x1ca8], 0
lea ecx, [ebp - 0x324]
push ecx
push 0x400
mov edx, dword [ebp - 0x1cb4]
add edx, 0x1cac
push edx
push str._Html__Body__H1__This_site_is_prohibited_by_proxy.__H1___Body___Html_
push 0x49a650
push 0x49a664
call dword [sym.imp.KERNEL32.dll_GetPrivateProfileStringA]
push 0x49a670
mov eax, dword [ebp - 0x1cb4]
add eax, 0x1cac
push eax
call fcn.0046d1f4
add esp, 8
mov dword [ebp - 0x1b68], eax
cmp dword [ebp - 0x1b68], 0
je 0x4551ef
push 2
push 0
mov ecx, dword [ebp - 0x1b68]
push ecx
call fcn.0046dbab
add esp, 0xc
mov edx, dword [ebp - 0x1b68]
push edx
call fcn.0046dadb
add esp, 4
mov dword [ebp - 0x1b6c], eax
mov eax, dword [ebp - 0x1cb4]
cmp dword [eax + 0x20ac], 0
je 0x455166
mov ecx, dword [ebp - 0x1cb4]
mov edx, dword [ecx + 0x20ac]
mov dword [ebp - 0x1ca8], edx
mov eax, dword [ebp - 0x1ca8]
push eax
call fcn.00481999
add esp, 4
mov ecx, dword [ebp - 0x1cb4]
mov dword [ecx + 0x20ac], 0
mov edx, dword [ebp - 0x1b6c]
add edx, 1
push edx
call fcn.0048199e
add esp, 4
mov dword [ebp - 0x1cac], eax
mov eax, dword [ebp - 0x1cb4]
mov ecx, dword [ebp - 0x1cac]
mov dword [eax + 0x20ac], ecx
mov edx, dword [ebp - 0x1cb4]
mov eax, dword [edx + 0x20ac]
mov ecx, dword [ebp - 0x1b6c]
mov byte [eax + ecx], 0
push 0
push 0
mov edx, dword [ebp - 0x1b68]
push edx
call fcn.0046dbab
add esp, 0xc
mov eax, dword [ebp - 0x1b68]
push eax
push 1
mov ecx, dword [ebp - 0x1b6c]
push ecx
mov edx, dword [ebp - 0x1cb4]
mov eax, dword [edx + 0x20ac]
push eax
call fcn.0046dcdd
add esp, 0x10
mov ecx, dword [ebp - 0x1b68]
push ecx
call fcn.0046cff4
add esp, 4
jmp 0x45522f
mov edx, dword [ebp - 0x1cb4]
cmp dword [edx + 0x20ac], 0
je 0x45521f
mov eax, dword [ebp - 0x1cb4]
mov ecx, dword [eax + 0x20ac]
mov dword [ebp - 0x1cb0], ecx
mov edx, dword [ebp - 0x1cb0]
push edx
call fcn.00481999
add esp, 4
mov eax, dword [ebp - 0x1cb4]
mov dword [eax + 0x20ac], 0
mov ecx, dword [ebp - 0x1cb4]
mov byte [ecx + 0x24b4], 0
mov dl, byte [0x49a673]
mov byte [ebp - 0x21c], dl
mov ecx, 0x41
xor eax, eax
lea edi, [ebp - 0x21b]
rep stosd dword es:[edi], eax
lea eax, [ebp - 0x114]
push eax
push str._sAddMessage.htm
lea ecx, [ebp - 0x21c]
push ecx
call fcn.0046b198
add esp, 0xc
push 0
push 0
push 3
push 0
push 1
push closesocket
lea edx, [ebp - 0x21c]
push edx
call dword [sym.imp.KERNEL32.dll_CreateFileA]
mov dword [ebp - 0x32c], eax
cmp dword [ebp - 0x32c], 0xffffffff
je 0x45531b
push 0
mov eax, dword [ebp - 0x32c]
push eax
call dword [sym.imp.KERNEL32.dll_GetFileSize]
mov dword [ebp - 0x1b70], eax
cmp dword [ebp - 0x1b70], 0x1000
jbe 0x4552c8
mov dword [ebp - 0x1b70], 0x1000
mov dword [ebp - 0x1b74], 0
push 0
lea ecx, [ebp - 0x1b74]
push ecx
mov edx, dword [ebp - 0x1b70]
push edx
mov eax, dword [ebp - 0x1cb4]
add eax, 0x24b4
push eax
mov ecx, dword [ebp - 0x32c]
push ecx
call dword [sym.imp.KERNEL32.dll_ReadFile]
mov edx, dword [ebp - 0x32c]
push edx
call dword [sym.imp.KERNEL32.dll_CloseHandle]
mov eax, dword [ebp - 0x1cb4]
add eax, dword [ebp - 0x1b74]
mov byte [eax + 0x24b4], 0
lea ecx, [ebp - 0x114]
push ecx
push str._sAutoProxy.pac
lea edx, [ebp - 0x21c]
push edx
call fcn.0046b198
add esp, 0xc
mov eax, dword [ebp - 0x1cb4]
mov byte [eax + 0xb9d8], 0
push 0
push 0
push 3
push 0
push 1
push closesocket
lea ecx, [ebp - 0x21c]
push ecx
call dword [sym.imp.KERNEL32.dll_CreateFileA]
mov dword [ebp - 0x32c], eax
cmp dword [ebp - 0x32c], 0xffffffff
je 0x4553ed
push 0
mov edx, dword [ebp - 0x32c]
push edx
call dword [sym.imp.KERNEL32.dll_GetFileSize]
mov dword [ebp - 0x1b78], eax
cmp dword [ebp - 0x1b78], 0x10000
jbe 0x455399
mov dword [ebp - 0x1b78], 0x10000
mov dword [ebp - 0x1b7c], 0
push 0
lea eax, [ebp - 0x1b7c]
push eax
mov ecx, dword [ebp - 0x1b78]
push ecx
mov edx, dword [ebp - 0x1cb4]
add edx, 0xb9d8
push edx
mov eax, dword [ebp - 0x32c]
push eax
call dword [sym.imp.KERNEL32.dll_ReadFile]
mov ecx, dword [ebp - 0x32c]
push ecx
call dword [sym.imp.KERNEL32.dll_CloseHandle]
mov edx, dword [ebp - 0x1cb4]
add edx, dword [ebp - 0x1b7c]
mov byte [edx + 0xb9d8], 0
lea eax, [ebp - 0x324]
push eax
push 1
push 0x49a69c
push 0x49a6ac
call dword [sym.imp.KERNEL32.dll_GetPrivateProfileIntA]
mov ecx, dword [ebp - 0x1cb4]
mov dword [ecx + 0xb9c8], eax
lea edx, [ebp - 0x324]
push edx
push 0
push 0x49a6b4
push 0x49a6c8
call dword [sym.imp.KERNEL32.dll_GetPrivateProfileIntA]
mov ecx, dword [ebp - 0x1cb4]
mov dword [ecx + 0x34c4], eax
lea edx, [ebp - 0x324]
push edx
push 0
push 0x49a6d0
push 0x49a6dc
call dword [sym.imp.KERNEL32.dll_GetPrivateProfileIntA]
mov ecx, dword [ebp - 0x1cb4]
mov dword [ecx + 0x230c8], eax
lea edx, [ebp - 0x324]
push edx
push 0
push 0x49a6e4
push 0x49a6f4
call dword [sym.imp.KERNEL32.dll_GetPrivateProfileIntA]
mov ecx, dword [ebp - 0x1cb4]
mov dword [ecx + 0xa56c], eax
lea edx, [ebp - 0x324]
push edx
push 0xa
push 0x49a6f8
push 0x49a710
call dword [sym.imp.KERNEL32.dll_GetPrivateProfileIntA]
mov ecx, dword [ebp - 0x1cb4]
mov dword [ecx + 0xa570], eax
lea edx, [ebp - 0x324]
push edx
push 0
push 0x49a714
push 0x49a71c
call dword [sym.imp.KERNEL32.dll_GetPrivateProfileIntA]
mov ecx, dword [ebp - 0x1cb4]
mov dword [ecx + 0x34c8], eax
lea edx, [ebp - 0x324]
push edx
push 0x400
mov eax, dword [ebp - 0x1cb4]
add eax, 0x34cc
push eax
push 0x49a725
push 0x49a728
push 0x49a730
call dword [sym.imp.KERNEL32.dll_GetPrivateProfileStringA]
push 0x49a73c
mov ecx, dword [ebp - 0x1cb4]
add ecx, 0x34cc
push ecx
call fcn.0042c730
add esp, 8
lea edx, [ebp - 0x324]
push edx
push 1
push 0x49a740
push 0x49a74c
call dword [sym.imp.KERNEL32.dll_GetPrivateProfileIntA]
mov ecx, dword [ebp - 0x1cb4]
mov dword [ecx + 0xb9d4], eax
lea edx, [ebp - 0x324]
push edx
push 0
push 0x49a754
push 0x49a76c
call dword [sym.imp.KERNEL32.dll_GetPrivateProfileIntA]
mov ecx, dword [ebp - 0x1cb4]
mov dword [ecx + 0x1fa00], eax
lea edx, [ebp - 0x324]
push edx
push 0
push 0x49a774
push 0x49a77c
call dword [sym.imp.KERNEL32.dll_GetPrivateProfileIntA]
mov ecx, dword [ebp - 0x1cb4]
mov dword [ecx + 0x230b8], eax
mov edx, dword [ebp - 0x1cb4]
cmp dword [edx + 0x230b8], 0x32
jle 0x4555a0
mov eax, dword [ebp - 0x1cb4]
mov dword [eax + 0x230b8], 0x32
mov dword [ebp - 0x1b80], 0
jmp 0x4555bb
mov ecx, dword [ebp - 0x1b80]
add ecx, 1
mov dword [ebp - 0x1b80], ecx
mov edx, dword [ebp - 0x1cb4]
mov eax, dword [ebp - 0x1b80]
cmp eax, dword [edx + 0x230b8]
jge 0x455744
mov cl, byte [0x49a780]
mov byte [ebp - 0x1c8c], cl
mov ecx, 0x41
xor eax, eax
lea edi, [ebp - 0x1c8b]
rep stosd dword es:[edi], eax
mov edx, dword [ebp - 0x1b80]
add edx, 1
push edx
push 0x49a784
lea eax, [ebp - 0x1c8c]
push eax
call fcn.0046b198
add esp, 0xc
lea ecx, [ebp - 0x324]
push ecx
push 0x104
mov edx, dword [ebp - 0x1b80]
imul edx, edx, 0x118
mov eax, dword [ebp - 0x1cb4]
lea ecx, [eax + edx + 0x1fa10]
push ecx
push 0x49a78b
lea edx, [ebp - 0x1c8c]
push edx
push 0x49a78c
call dword [sym.imp.KERNEL32.dll_GetPrivateProfileStringA]
mov eax, dword [ebp - 0x1b80]
add eax, 1
push eax
push 0x49a790
lea ecx, [ebp - 0x1c8c]
push ecx
call fcn.0046b198
add esp, 0xc
lea edx, [ebp - 0x324]
push edx
push 0
lea eax, [ebp - 0x1c8c]
push eax
push 0x49a79c
call dword [sym.imp.KERNEL32.dll_GetPrivateProfileIntA]
mov ecx, dword [ebp - 0x1b80]
imul ecx, ecx, 0x118
mov edx, dword [ebp - 0x1cb4]
mov dword [edx + ecx + 0x1fb18], eax
mov eax, dword [ebp - 0x1b80]
add eax, 1
push eax
push 0x49a7a0
lea ecx, [ebp - 0x1c8c]
push ecx
call fcn.0046b198
add esp, 0xc
lea edx, [ebp - 0x324]
push edx
push 0
lea eax, [ebp - 0x1c8c]
push eax
push 0x49a7ac
call dword [sym.imp.KERNEL32.dll_GetPrivateProfileIntA]
mov ecx, dword [ebp - 0x1b80]
imul ecx, ecx, 0x118
mov edx, dword [ebp - 0x1cb4]
mov dword [edx + ecx + 0x1fb1c], eax
mov eax, dword [ebp - 0x1b80]
add eax, 1
push eax
push 0x49a7b0
lea ecx, [ebp - 0x1c8c]
push ecx
call fcn.0046b198
add esp, 0xc
lea edx, [ebp - 0x324]
push edx
push 0
lea eax, [ebp - 0x1c8c]
push eax
push 0x49a7bc
call dword [sym.imp.KERNEL32.dll_GetPrivateProfileIntA]
mov ecx, dword [ebp - 0x1b80]
imul ecx, ecx, 0x118
mov edx, dword [ebp - 0x1cb4]
mov dword [edx + ecx + 0x1fa0c], eax
jmp 0x4555ac
lea eax, [ebp - 0x324]
push eax
push 0
push 0x49a7c0
push 0x49a7d4
call dword [sym.imp.KERNEL32.dll_GetPrivateProfileIntA]
mov ecx, dword [ebp - 0x1cb4]
mov dword [ecx + 0x38d0], eax
lea edx, [ebp - 0x324]
push edx
push 0xc8
push 0x49a7dc
push 0x49a7e8
call dword [sym.imp.KERNEL32.dll_GetPrivateProfileIntA]
mov ecx, dword [ebp - 0x1cb4]
mov dword [ecx + 0xb9d0], eax
lea edx, [ebp - 0x324]
push edx
push 1
push 0x49a7f0
push 0x49a800
call dword [sym.imp.KERNEL32.dll_GetPrivateProfileIntA]
mov ecx, dword [ebp - 0x1cb4]
mov dword [ecx + 0x38d4], eax
lea edx, [ebp - 0x324]
push edx
push 0
push 0x49a808
push 0x49a818
call dword [sym.imp.KERNEL32.dll_GetPrivateProfileIntA]
mov ecx, dword [ebp - 0x1cb4]
mov dword [ecx + 0x38d8], eax
lea edx, [ebp - 0x324]
push edx
push 0
push 0x49a820
push 0x49a830
call dword [sym.imp.KERNEL32.dll_GetPrivateProfileIntA]
mov ecx, dword [ebp - 0x1cb4]
mov dword [ecx + 0x230cc], eax
lea edx, [ebp - 0x324]
push edx
push 0x64
push 0x49a834
push 0x49a84c
call dword [sym.imp.KERNEL32.dll_GetPrivateProfileIntA]
mov ecx, dword [ebp - 0x1cb4]
mov dword [ecx + 0x38dc], eax
lea edx, [ebp - 0x324]
push edx
push 0x40000
push 0x49a854
push 0x49a86c
call dword [sym.imp.KERNEL32.dll_GetPrivateProfileIntA]
mov ecx, dword [ebp - 0x1cb4]
mov dword [ecx + 0x38e0], eax
lea edx, [ebp - 0x324]
push edx
push 0x1000
lea eax, [ebp - 0x1334]
push eax
push str.CTRLALTC
push 0x49a880
push 0x49a888
call dword [sym.imp.KERNEL32.dll_GetPrivateProfileStringA]
mov ecx, dword [ebp - 0x1cb4]
add ecx, 0x38e4
push ecx
push 0x49a890
lea edx, [ebp - 0x1334]
push edx
call fcn.0046b0d6
add esp, 0xc
lea eax, [ebp - 0x324]
push eax
push 0
push 0x49a89c
push 0x49a8ac
call dword [sym.imp.KERNEL32.dll_GetPrivateProfileIntA]
mov ecx, dword [ebp - 0x1cb4]
mov dword [ecx + 0x38e8], eax
lea edx, [ebp - 0x324]
push edx
push 0
push 0x49a8b4
push 0x49a8c8
call dword [sym.imp.KERNEL32.dll_GetPrivateProfileIntA]
mov ecx, dword [ebp - 0x1cb4]
mov dword [ecx + 0x34c0], eax
lea edx, [ebp - 0x324]
push edx
push 0
push 0x49a8d0
push 0x49a8e0
call dword [sym.imp.KERNEL32.dll_GetPrivateProfileIntA]
mov ecx, dword [ebp - 0x1cb4]
mov dword [ecx + 0x1b9e0], eax
lea edx, [ebp - 0x324]
push edx
push 0x1000
mov eax, dword [ebp - 0x1cb4]
add eax, 0x1b9e4
push eax
push 0x49a8ed
push 0x49a8f0
push 0x49a8f8
call dword [sym.imp.KERNEL32.dll_GetPrivateProfileStringA]
lea ecx, [ebp - 0x324]
push ecx
push 0
push 0x49a908
push 0x49a914
call dword [sym.imp.KERNEL32.dll_GetPrivateProfileIntA]
mov edx, dword [ebp - 0x1cb4]
mov dword [edx + 0x1c9e8], eax
lea eax, [ebp - 0x324]
push eax
push 0x1000
mov ecx, dword [ebp - 0x1cb4]
add ecx, 0x1c9ec
push ecx
push 0x49a921
push 0x49a924
push 0x49a928
call dword [sym.imp.KERNEL32.dll_GetPrivateProfileStringA]
lea edx, [ebp - 0x324]
push edx
push 1
push 0x49a938
push 0x49a94c
call dword [sym.imp.KERNEL32.dll_GetPrivateProfileIntA]
mov ecx, dword [ebp - 0x1cb4]
mov dword [ecx + 0x1d9f0], eax
lea edx, [ebp - 0x324]
push edx
push 0
push 0x49a954
push 0x49a968
call dword [sym.imp.KERNEL32.dll_GetPrivateProfileIntA]
mov ecx, dword [ebp - 0x1cb4]
mov dword [ecx + 0x1d9f4], eax
lea edx, [ebp - 0x324]
push edx
push 0x1000
mov eax, dword [ebp - 0x1cb4]
add eax, 0x1d9f8
push eax
push str.Norton_AntiVirus
push 0x49a988
push 0x49a994
call dword [sym.imp.KERNEL32.dll_GetPrivateProfileStringA]
lea ecx, [ebp - 0x324]
push ecx
push 0x1000
mov edx, dword [ebp - 0x1cb4]
add edx, 0x1e9f9
push edx
push str.CWebWindow_Class
push 0x49a9b4
push 0x49a9c0
call dword [sym.imp.KERNEL32.dll_GetPrivateProfileStringA]
lea eax, [ebp - 0x324]
push eax
push 0x1001
lea ecx, [ebp - 0x1334]
push ecx
push str.0.0.0.0
push 0x49a9d4
push 0x49a9e4
call dword [sym.imp.KERNEL32.dll_GetPrivateProfileStringA]
lea edx, [ebp - 0x1334]
push edx
mov ecx, dword [ebp - 0x1cb4]
add ecx, 0x1f9fc
call fcn.00407b00
lea eax, [ebp - 0x324]
push eax
push 0
push 0x49a9f0
push 0x49aa00
call dword [sym.imp.KERNEL32.dll_GetPrivateProfileIntA]
mov ecx, dword [ebp - 0x1cb4]
mov dword [ecx + 0xa574], eax
lea edx, [ebp - 0x324]
push edx
push 1
push 0x49aa04
push 0x49aa14
call dword [sym.imp.KERNEL32.dll_GetPrivateProfileIntA]
mov ecx, dword [ebp - 0x1cb4]
mov dword [ecx + 0xa578], eax
lea edx, [ebp - 0x324]
push edx
push 1
push 0x49aa18
push 0x49aa30
call dword [sym.imp.KERNEL32.dll_GetPrivateProfileIntA]
mov ecx, dword [ebp - 0x1cb4]
mov dword [ecx + 0xa57c], eax
lea edx, [ebp - 0x324]
push edx
push 1
push 0x49aa34
push 0x49aa44
call dword [sym.imp.KERNEL32.dll_GetPrivateProfileIntA]
mov ecx, dword [ebp - 0x1cb4]
mov dword [ecx + 0xa580], eax
mov edx, dword [ebp - 0x1cb4]
mov eax, dword [edx + 0xa9b8]
mov dword [0x4afae8], eax
mov ecx, dword [ebp - 0x1cb4]
mov edx, dword [ecx + 0x230c8]
mov dword [0x4b2a70], edx
mov eax, dword [ebp - 0x1cb4]
add eax, 0x1f9fc
push eax
mov ecx, 0x4b2a78
call fcn.00407ae0
mov ecx, dword [ebp - 0x1cb4]
add ecx, 0xa154
push ecx
mov ecx, 0x4b2a74
call fcn.00407b00
lea edx, [ebp - 0x324]
push edx
push 0
push 0x49aa48
push 0x49aa58
call dword [sym.imp.KERNEL32.dll_GetPrivateProfileIntA]
mov ecx, dword [ebp - 0x1cb4]
mov dword [ecx + 0x1fa04], eax
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop edi
mov esp, ebp
pop ebp
ret