Function at 0x42d5d0
Capabilities:
Read .ini file

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x491961
mov eax, dword fs:[0]
push eax
sub esp, 0x4a4
mov eax, dword [0x4b9430]
xor eax, ebp
mov dword [ebp - 0x10], eax
push ebx
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov eax, 0x30303030
mov edi, ecx
xor ebx, ebx
lea ecx, [ebp - 0x38]
mov dword [ebp - 0x38], eax
mov dword [ebp - 0x34], eax
mov dword [ebp - 0x30], eax
mov byte [ebp - 0x2c], bl
call fcn.0042d4a0
mov dword [ebp - 0x47c], 0xf
mov dword [ebp - 0x480], ebx
mov byte [ebp - 0x490], bl
push 0x104
lea eax, [ebp - 0x350]
push eax
push ebx
mov dword [ebp - 4], ebx
call dword [sym.imp.KERNEL32.dll_GetModuleHandleA]
push eax
call dword [sym.imp.KERNEL32.dll_GetModuleFileNameA]
test eax, eax
je 0x42d694
lea ecx, [ebp - 0x350]
lea esi, [ebp - 0x4ac]
call fcn.00434f20
push eax
lea ecx, [ebp - 0x490]
mov byte [ebp - 4], 1
call fcn.004053c0
mov esi, 0x10
mov byte [ebp - 4], bl
cmp dword [ebp - 0x498], esi
jb 0x42d699
mov ecx, dword [ebp - 0x4ac]
push ecx
call fcn.0045d63f
add esp, 4
jmp 0x42d699
mov esi, 0x10
cmp edi, ebx
jne 0x42d722
push 0x104
lea edx, [ebp - 0x13f]
push ebx
push edx
mov byte [ebp - 0x140], bl
call fcn.00463ac0
add esp, 0xc
push 0x104
lea eax, [ebp - 0x140]
push eax
push ebx
call dword [sym.imp.KERNEL32.dll_GetModuleFileNameA]
lea ecx, [ebp - 0x140]
push 0x5c
push ecx
call fcn.0045e830
push 0x105
lea edx, [ebp - 0x248]
push ebx
push edx
mov byte [eax], bl
call fcn.00463ac0
add esp, 0x14
lea eax, [ebp - 0x140]
push eax
push 0x104
lea ecx, [ebp - 0x248]
push ecx
push str.adbyby
push 0x4b261c
push str.info
call dword [sym.imp.KERNEL32.dll_GetPrivateProfileStringA]
lea edi, [ebp - 0x248]
mov eax, dword [ebp - 0x490]
cmp dword [ebp - 0x47c], esi
jae 0x42d736
lea eax, [ebp - 0x490]
push edi
push eax
lea edx, [ebp - 0x38]
push edx
lea eax, [ebp - 0x458]
push str.http:__info.adbyby.com_tj_mac_sver_sid_s
push eax
call fcn.0045fdbb
mov edi, 0xf
add esp, 0x14
mov dword [ebp - 0x460], edi
mov dword [ebp - 0x464], ebx
mov byte [ebp - 0x474], bl
lea edx, [ebp - 0x474]
lea ecx, [ebp - 0x458]
mov byte [ebp - 4], 2
call fcn.0042c030
test al, al
je 0x42d862
cmp dword [ebp - 0x464], 2
mov edi, dword [ebp - 0x460]
mov esi, dword [ebp - 0x474]
jb 0x42d81f
mov eax, esi
cmp edi, 0x10
jae 0x42d7aa
lea eax, [ebp - 0x474]
mov ecx, 0x4b2658
nop
mov dl, byte [eax]
cmp dl, byte [ecx]
jne 0x42d7d0
cmp dl, bl
je 0x42d7cc
mov dl, byte [eax + 1]
cmp dl, byte [ecx + 1]
jne 0x42d7d0
add eax, 2
add ecx, 2
cmp dl, bl
jne 0x42d7b0
xor eax, eax
jmp 0x42d7d5
sbb eax, eax
sbb eax, 0xffffffff
cmp eax, ebx
jne 0x42d81f
cmp edi, 0x10
jb 0x42d7e7
push esi
call fcn.0045d63f
add esp, 4
cmp dword [ebp - 0x47c], 0x10
mov dword [ebp - 0x460], 0xf
mov dword [ebp - 0x464], ebx
mov byte [ebp - 0x474], bl
jb 0x42d815
mov ecx, dword [ebp - 0x490]
push ecx
call fcn.0045d63f
add esp, 4
mov eax, 2
jmp 0x42d8a4
cmp edi, 0x10
jb 0x42d82d
push esi
call fcn.0045d63f
add esp, 4
cmp dword [ebp - 0x47c], 0x10
mov dword [ebp - 0x460], 0xf
mov dword [ebp - 0x464], ebx
mov byte [ebp - 0x474], bl
jb 0x42d85b
mov edx, dword [ebp - 0x490]
push edx
call fcn.0045d63f
add esp, 4
mov eax, 1
jmp 0x42d8a4
cmp dword [ebp - 0x460], esi
jb 0x42d879
mov eax, dword [ebp - 0x474]
push eax
call fcn.0045d63f
add esp, 4
mov dword [ebp - 0x460], edi
mov dword [ebp - 0x464], ebx
mov byte [ebp - 0x474], bl
cmp dword [ebp - 0x47c], esi
jb 0x42d8a2
mov ecx, dword [ebp - 0x490]
push ecx
call fcn.0045d63f
add esp, 4
xor eax, eax
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 0x10]
xor ecx, ebp
call fcn.0045d3b4
mov esp, ebp
pop ebp
ret