Function at 0x408220
Capabilities:
Read .ini file

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x10c
mov eax, dword [0x41d054]
xor eax, ebp
mov dword [ebp - 4], eax
push ebx
xor eax, eax
push esi
push edi
lea ebx, [ebp - 0x108]
mov dword [0x41fd6c], eax
mov dword [0x41fd70], eax
mov dword [0x420028], eax
mov dword [0x42002c], eax
call fcn.00403230
mov ecx, dword [0x42085c]
mov esi, dword [sym.imp.KERNEL32.dll_GetPrivateProfileIntA]
mov eax, ebx
push eax
push ecx
push str.kickrdp
push str.admin
call esi
mov edi, dword [sym.imp.KERNEL32.dll_GetPrivateProfileStringA]
mov edx, ebx
push edx
push 0x100
push 0x420860
push 0x41a72c
push str.service_commandline
push str.admin
mov dword [0x42085c], eax
call edi
mov ecx, ebx
call fcn.00403310
mov eax, ebx
push eax
xor ebx, ebx
push ebx
push str.UseRegistry
push str.admin
call esi
lea ecx, [ebp - 0x108]
push ecx
push ebx
push str.MSLogonRequired
push str.admin
mov dword [0x41ffa4], eax
call esi
lea edx, [ebp - 0x108]
push edx
push ebx
push str.NewMSLogon
push str.admin
mov dword [0x41fefc], eax
call esi
mov ecx, dword [0x421038]
mov dword [0x420244], eax
lea eax, [ebp - 0x108]
push eax
push 0x96
push ecx
push 0x41a72c
push str.group1
push str.admin_auth
call edi
mov eax, dword [0x420e8c]
lea edx, [ebp - 0x108]
push edx
push 0x96
push eax
push 0x41a72c
push str.group2
push str.admin_auth
call edi
mov edx, dword [0x42103c]
lea ecx, [ebp - 0x108]
push ecx
push 0x96
push edx
push 0x41a72c
push str.group3
push str.admin_auth
call edi
lea eax, [ebp - 0x108]
push eax
push ebx
push str.locdom1
push str.admin_auth
call esi
lea ecx, [ebp - 0x108]
push ecx
push ebx
push str.locdom2
push str.admin_auth
mov dword [0x41ffa0], eax
call esi
lea edx, [ebp - 0x108]
push edx
push ebx
push str.locdom3
push str.admin_auth
mov dword [0x42033c], eax
call esi
mov dword [0x4201b8], eax
lea eax, [ebp - 0x108]
push eax
push ebx
push str.DebugMode
push str.admin
call esi
lea ecx, [ebp - 0x108]
push ecx
push ebx
push str.Avilog
push str.admin
mov dword [0x41e17c], eax
call esi
lea edx, [ebp - 0x108]
push edx
push 0x200
push 0x41fdf8
push 0x41a72c
push str.path
push str.admin
mov dword [0x420574], eax
call edi
lea eax, [ebp - 0x108]
push eax
push ebx
push str.DebugLevel
push str.admin
call esi
lea ecx, [ebp - 0x108]
push ecx
push ebx
push str.DisableTrayIcon
push str.admin
mov dword [0x41e180], eax
call esi
lea edx, [ebp - 0x108]
push edx
push ebx
push 0x41ade8
push str.admin
mov dword [0x420578], eax
call esi
mov dword [0x42057c], eax
lea eax, [ebp - 0x108]
push eax
push ebx
push str.UseDSMPlugin
push str.admin
call esi
lea ecx, [ebp - 0x108]
push ecx
push ebx
push str.AllowLoopback
push str.admin
mov dword [0x420580], eax
call esi
lea edx, [ebp - 0x108]
push edx
push ebx
push str.SC_PROMPT
mov dword [0x41e184], eax
push str.admin
call esi
mov dword [0x420584], eax
lea eax, [ebp - 0x108]
push eax
push ebx
push str.SC_AUTORECON
push str.admin
call esi
lea ecx, [ebp - 0x108]
push ecx
push 1
push str.AuthRequired
push str.admin
mov dword [0x420588], eax
call esi
lea edx, [ebp - 0x108]
push edx
push ebx
push str.ConnectPriority
push str.admin
mov dword [0x41e188], eax
call esi
mov dword [0x420354], eax
lea eax, [ebp - 0x108]
push eax
push 0x80
push 0x41ff00
push 0x41a72c
push str.DSMPlugin
push str.admin
call edi
lea ecx, [ebp - 0x108]
push ecx
push 0x200
push 0x420628
push 0x41a72c
push str.DSMPluginConfig
push str.admin
call edi
lea edx, [ebp - 0x108]
push edx
push 0x96
push 0x420590
push 0x41a72c
push str.AuthHosts
push str.admin
call edi
lea eax, [ebp - 0x108]
push eax
push 1
push str.AllowShutdown
push str.admin
call esi
lea ecx, [ebp - 0x108]
push ecx
push 1
push str.AllowProperties
push str.admin
mov dword [0x41e18c], eax
call esi
lea edx, [ebp - 0x108]
push edx
push 1
push str.AllowEditClients
push str.admin
mov dword [0x41e190], eax
call esi
mov dword [0x41e194], eax
lea eax, [ebp - 0x108]
push eax
push 1
push str.FileTransferEnabled
push str.admin
call esi
lea ecx, [ebp - 0x108]
push ecx
push 1
push str.FTUserImpersonation
push str.admin
mov dword [0x42058c], eax
call esi
lea edx, [ebp - 0x108]
push edx
push 1
push str.BlankMonitorEnabled
push str.admin
mov dword [0x4200a4], eax
call esi
mov dword [0x420828], eax
lea eax, [ebp - 0x108]
push eax
push ebx
push str.BlankInputsOnly
push str.admin
call esi
lea ecx, [ebp - 0x108]
push ecx
push 1
push str.DefaultScale
push str.admin
mov dword [0x42082c], eax
call esi
lea edx, [ebp - 0x108]
push edx
push ebx
push str.CaptureAlphaBlending
push str.admin
mov dword [0x41e198], eax
call esi
mov dword [0x41e19c], eax
lea eax, [ebp - 0x108]
push eax
push ebx
push str.BlackAlphaBlending
push str.admin
call esi
lea ecx, [ebp - 0x108]
push ecx
push 0x1e
push 0x41b0fc
push str.admin
mov dword [0x41e1a0], eax
call esi
lea edx, [ebp - 0x108]
push edx
push 1
push str.SocketConnect
push str.admin
mov dword [0x41e1a4], eax
call esi
mov dword [0x420830], eax
lea eax, [ebp - 0x108]
push eax
push 1
push str.HTTPConnect
push str.admin
call esi
lea ecx, [ebp - 0x108]
push ecx
push 1
push str.XDMCPConnect
push str.admin
mov dword [0x41e1a8], eax
call esi
lea edx, [ebp - 0x108]
push edx
push 1
push str.AutoPortSelect
push str.admin
mov dword [0x4201b4], eax
call esi
mov dword [0x41e1ac], eax
lea eax, [ebp - 0x108]
push eax
push ebx
push str.PortNumber
push str.admin
call esi
lea ecx, [ebp - 0x108]
push ecx
mov dword [0x41e1b0], eax
push ebx
push str.HTTPPortNumber
push str.admin
call esi
lea edx, [ebp - 0x108]
push edx
push ebx
push str.IdleTimeout
push str.admin
mov dword [0x420034], eax
call esi
mov dword [0x420344], eax
lea eax, [ebp - 0x108]
push eax
push ebx
push str.RemoveWallpaper
push str.admin
call esi
lea ecx, [ebp - 0x108]
push ecx
push ebx
push str.RemoveAero
push str.admin
mov dword [0x41e1b4], eax
call esi
lea edx, [ebp - 0x108]
push edx
push ebx
push str.QuerySetting
push str.admin
mov dword [0x41e1b8], eax
call esi
mov dword [0x41e1bc], eax
lea eax, [ebp - 0x108]
push eax
push ebx
push str.QueryTimeout
push str.admin
call esi
lea ecx, [ebp - 0x108]
push ecx
push ebx
push str.QueryAccept
push str.admin
mov dword [0x41e1c0], eax
call esi
lea edx, [ebp - 0x108]
push edx
push ebx
push str.QueryIfNoLogon
push str.admin
mov dword [0x4201b0], eax
call esi
mov dword [0x420240], eax
lea eax, [ebp - 0x108]
push eax
push 8
push 0x41fd6c
push str.passwd
push str.ultravnc
call dword [sym.imp.KERNEL32.dll_GetPrivateProfileStructA]
lea ecx, [ebp - 0x108]
push ecx
push 8
push 0x420028
push str.passwd2
push str.ultravnc
call dword [sym.imp.KERNEL32.dll_GetPrivateProfileStructA]
cmp dword [0x41e188], 1
mov byte [0x41fd74], bl
mov byte [0x420030], bl
jne 0x408880
mov eax, 0x41fd6c
lea edx, [eax + 1]
nop
mov cl, byte [eax]
inc eax
cmp cl, bl
jne 0x408800
sub eax, edx
mov dword [ebp - 0x10c], eax
cmp eax, ebx
jne 0x408853
mov eax, 0x420028
lea edx, [eax + 1]
jmp 0x408820
mov cl, byte [eax]
inc eax
cmp cl, bl
jne 0x408820
sub eax, edx
cmp eax, ebx
jne 0x40883b
push 0x10
push str.Error
push str.Authentication_error:_You_enabled_authentication_but_no_password_have_been_set_for__full__and__view_only_
jmp 0x408879
mov eax, dword [ebp - 0x10c]
cmp eax, ebx
jne 0x408853
push 0x10
push str.Error
push str.Authentication_error:_You_enabled_authentication_but_no_password_have_been_set_for__full_
jmp 0x408879
mov eax, 0x420028
lea edx, [eax + 1]
jmp 0x408860
mov cl, byte [eax]
inc eax
cmp cl, bl
jne 0x408860
sub eax, edx
cmp eax, ebx
jne 0x408880
push 0x10
push str.Error
push str.Authentication_error:_You_enabled_authentication_but_no_password_have_been_set_for__view_only_
push ebx
call dword [sym.imp.USER32.dll_MessageBoxA]
lea edx, [ebp - 0x108]
push edx
push ebx
push str.InputsEnabled
push str.admin
call esi
mov dword [0x41e1c4], eax
lea eax, [ebp - 0x108]
push eax
push ebx
push str.LockSetting
push str.admin
call esi
lea ecx, [ebp - 0x108]
push ecx
push ebx
push str.LocalInputsDisabled
push str.admin
mov dword [0x420834], eax
call esi
lea edx, [ebp - 0x108]
push edx
push ebx
push str.EnableJapInput
push str.admin
mov dword [0x420838], eax
call esi
mov dword [0x42083c], eax
lea eax, [ebp - 0x108]
push eax
push 1
push str.primary
push str.admin
call esi
lea ecx, [ebp - 0x108]
push ecx
push ebx
push str.secundary
push str.admin
mov dword [0x41e1d0], eax
call esi
lea edx, [ebp - 0x108]
push edx
push ebx
push str.TurboMode
push str.poll
mov dword [0x420960], eax
call esi
mov dword [0x41e1c8], eax
lea eax, [ebp - 0x108]
push eax
push ebx
push str.PollUnderCursor
push str.poll
call esi
lea ecx, [ebp - 0x108]
push ecx
push ebx
push str.PollForeground
push str.poll
mov dword [0x420840], eax
call esi
lea edx, [ebp - 0x108]
push edx
push ebx
push str.PollFullScreen
push str.poll
mov dword [0x420844], eax
call esi
mov dword [0x420848], eax
lea eax, [ebp - 0x108]
push eax
push ebx
push str.OnlyPollConsole
push str.poll
call esi
lea ecx, [ebp - 0x108]
push ecx
push ebx
mov dword [0x42084c], eax
push str.OnlyPollOnEvent
push str.poll
call esi
lea edx, [ebp - 0x108]
push edx
push ebx
push str.EnableDriver
push str.poll
mov dword [0x420850], eax
call esi
mov dword [0x420854], eax
lea eax, [ebp - 0x108]
push eax
push ebx
push str.EnableHook
push str.poll
call esi
lea ecx, [ebp - 0x108]
push ecx
push ebx
push str.EnableVirtual
push str.poll
mov dword [0x41e1cc], eax
call esi
lea edx, [ebp - 0x108]
push edx
mov dword [0x420340], eax
mov eax, dword [0x420858]
push eax
push str.SingleWindow
push str.poll
call esi
lea ecx, [ebp - 0x108]
push ecx
push 0x20
push 0x41ff80
push 0x41a72c
push str.SingleWindowName
push str.poll
mov dword [0x420858], eax
call edi
lea edx, [ebp - 0x108]
push edx
push 0x80
push 0x41ffa8
push 0x41a72c
push str.preset1
push str.presets
mov byte [0x41ffa8], bl
mov byte [0x41fd78], bl
mov byte [0x4200b0], bl
call edi
lea eax, [ebp - 0x108]
push eax
push 0x80
push 0x41fd78
push 0x41a72c
push str.preset1D
push str.presets
call edi
lea ecx, [ebp - 0x108]
push ecx
push 0x80
push 0x4200b0
push 0x41a72c
push str.preset1ID
push str.presets
call edi
lea edx, [ebp - 0x108]
push edx
push 0x80
push 0x4203d8
push 0x41a72c
push str.preset2
push str.presets
mov byte [0x4203d8], bl
mov byte [0x420130], bl
mov byte [0x420458], bl
call edi
lea eax, [ebp - 0x108]
push eax
push 0x80
push 0x420130
push 0x41a72c
push str.preset2D
push str.presets
call edi
lea ecx, [ebp - 0x108]
push ecx
push 0x80
push 0x420458
push 0x41a72c
push str.preset2ID
push str.presets
call edi
lea edx, [ebp - 0x108]
push edx
push 0x80
push 0x4201c0
push 0x41a72c
push str.preset3
push str.presets
mov byte [0x4201c0], bl
mov byte [0x420358], bl
mov byte [0x420248], bl
call edi
lea eax, [ebp - 0x108]
push eax
push 0x80
push 0x420358
push 0x41a72c
push str.preset3D
push str.presets
call edi
lea ecx, [ebp - 0x108]
push ecx
push 0x80
push 0x420248
push 0x41a72c
push str.preset3ID
push str.presets
call edi
mov ecx, dword [ebp - 4]
pop edi
pop esi
xor ecx, ebp
pop ebx
call fcn.0040a942
mov esp, ebp
pop ebp
ret