Function at 0x4481f0
Capabilities:
Terminate process

Disassembly:
push 0xffffffffffffffff
push 0x4a91c2
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
sub esp, 0x1e4
push ebx
push ebp
push esi
push edi
push 1
push str.KillPop
mov esi, ecx
push str.Settings
call fcn.0049eb00
push 1
push str.KillAutoWin
push str.Settings
mov ecx, esi
mov dword [0x4de5e0], eax
call fcn.0049eb00
push 1
push str.KillDupWin
push str.Settings
mov ecx, esi
mov dword [0x4de5dc], eax
call fcn.0049eb00
push 1
push str.KillListWin
push str.Settings
mov ecx, esi
mov dword [0x4de5d4], eax
call fcn.0049eb00
push 1
push str.NotConfirmPopupFilter
push str.Settings
mov ecx, esi
mov dword [0x4de5d8], eax
call fcn.0049eb00
mov ecx, dword [0x4deb94]
push 1
push str.PlayPopupFilterSound
push str.Settings
mov dword [ecx + 0x190], eax
mov ecx, esi
call fcn.0049eb00
mov edx, dword [0x4deb94]
push 0x78
push str.PopupBound
push str.Settings
mov ecx, esi
mov dword [edx + 0x194], eax
call fcn.0049eb00
xor edi, edi
mov dword [esp + 0x1c], eax
mov eax, dword [0x4deb94]
mov dword [esp + 0x20], edi
fild qword [esp + 0x1c]
push edi
push str.FilterRefresh
push str.Settings
mov ecx, esi
fstp qword [eax + 0x210]
mov eax, dword [0x4deb94]
fld qword [eax + 0x210]
fmul qword [0x4b25e8]
fstp qword [eax + 0x210]
call fcn.0049eb00
mov ecx, dword [0x4deb94]
push 1
push str.NotFilterClickDialog
push str.Settings
mov dword [ecx + 0xdc], eax
mov ecx, esi
call fcn.0049eb00
mov edx, dword [0x4deb94]
push 1
push str.UseUrlFilter
push str.Settings
mov ecx, esi
mov dword [edx + 0xcc], eax
call fcn.0049eb00
mov ecx, dword [0x4deb94]
push 1
push str.UseDialogFilter
push str.Settings
mov dword [ecx + 0x31c], eax
mov ecx, esi
call fcn.0049eb00
mov edx, dword [0x4deb94]
push 1
push str.UseFlyingFilter
push str.Settings
mov ecx, esi
mov dword [edx + 0x324], eax
call fcn.0049eb00
mov ecx, dword [0x4deb94]
mov dword [ecx + 0x320], eax
mov ecx, dword [0x4deb94]
cmp dword [ecx + 0x320], edi
je 0x44839d
call fcn.004418c0
push 1
push str.KillBlank
push str.Filter
mov ecx, esi
call fcn.0049eb00
mov edx, dword [0x4deb94]
push str._AD_
push str.BlankContent
push str.Filter
mov dword [edx + 0xc8], eax
lea eax, [esp + 0x1c]
push eax
mov ecx, esi
call fcn.0049eb6c
mov ecx, dword [0x4deb94]
push eax
add ecx, 0x228
mov dword [esp + 0x200], edi
call fcn.0048f77a
lea ecx, [esp + 0x10]
mov dword [esp + 0x1fc], 0xffffffff
call fcn.0048f641
mov ecx, dword [0x4deb94]
cmp dword [ecx + 0xc8], edi
je 0x448417
call fcn.00441b80
push 1
push str.ReloadUnShownImage
push str.Settings
mov ecx, esi
call fcn.0049eb00
mov edx, dword [0x4deb94]
push 0xf
push str.EnableFilter
push str.Settings
mov ecx, esi
mov dword [edx + 0xc4], eax
call fcn.0049eb00
mov ecx, dword [0x4deb94]
push 0x32
push 0x4d5b7c
push str.Settings
mov dword [ecx + 0x3d4], eax
mov ecx, esi
call fcn.0049eb00
push 0x32
push str.left
push str.Settings
mov ecx, esi
mov ebp, eax
call fcn.0049eb00
push 0x2bc
push str.width
push str.Settings
mov ecx, esi
mov ebx, eax
call fcn.0049eb00
push 0x1f4
push str.height
push str.Settings
mov ecx, esi
mov edi, eax
call fcn.0049eb00
test edi, edi
je 0x4484d4
cmp ebp, 0x7d0
jge 0x4484d4
cmp ebp, 0xffffffec
jl 0x4484d4
mov ecx, dword [esi + 0x1c]
push 0x80
push eax
push edi
push ebp
push ebx
push 0x4e07b8
call fcn.0048ecf3
push 1
push str.Zoomed
push str.Settings
mov ecx, esi
call fcn.0049eb00
test eax, eax
mov edi, 3
je 0x4484f3
mov dword [esi + 0x74], edi
push 0x14
push str.TabSize
push str.Settings
mov ecx, esi
call fcn.0049eb00
mov edx, dword [0x4deb94]
mov dword [edx + 0x474], eax
mov ecx, dword [0x4deb94]
call fcn.00436330
push 0
push str.EnableProxy
push str.Settings
mov ecx, esi
call fcn.0049eb00
mov ecx, dword [0x4deb94]
push 0
push str.CurrentProxy
lea edx, [esp + 0x18]
mov dword [ecx + 0x388], eax
push str.Settings
push edx
mov ecx, esi
call fcn.0049eb6c
push eax
mov eax, dword [0x4deb94]
mov dword [esp + 0x200], 1
lea ecx, [eax + 0x5b4]
call fcn.0048f77a
or ebp, 0xffffffff
lea ecx, [esp + 0x10]
mov dword [esp + 0x1fc], ebp
call fcn.0048f641
push 0
push str.CurrentProxyName
lea ecx, [esp + 0x18]
push str.Settings
push ecx
mov ecx, esi
call fcn.0049eb6c
mov edx, dword [0x4deb94]
push eax
mov dword [esp + 0x200], 2
lea ecx, [edx + 0x5b8]
call fcn.0048f77a
lea ecx, [esp + 0x10]
mov dword [esp + 0x1fc], ebp
call fcn.0048f641
push str._local_
push str.ProxyByPass
lea eax, [esp + 0x18]
push str.Settings
push eax
mov ecx, esi
call fcn.0049eb6c
mov ecx, dword [0x4deb94]
push eax
add ecx, 0x5b0
mov dword [esp + 0x200], edi
call fcn.0048f77a
lea ecx, [esp + 0x10]
mov dword [esp + 0x1fc], ebp
call fcn.0048f641
mov ecx, dword [0x4deb94]
call fcn.00436250
push 0
push str.DefaultWebProxy
lea edx, [esp + 0x18]
push str.Settings
push edx
mov ecx, esi
call fcn.0049eb6c
push eax
mov eax, dword [0x4deb94]
mov dword [esp + 0x200], 4
lea ecx, [eax + 0x5ac]
call fcn.0048f77a
mov dword [esp + 0x1fc], ebp
lea ecx, [esp + 0x10]
call fcn.0048f641
push 0
push str.ActiveNew
push str.Settings
mov ecx, esi
call fcn.0049eb00
mov ecx, dword [0x4deb94]
push 1
push str.OpenFolderOut
push str.Settings
mov dword [ecx + 0x3b4], eax
mov ecx, esi
call fcn.0049eb00
mov edx, dword [0x4deb94]
push 0
push str.StartFolder
push str.Settings
mov dword [edx + 0x1c8], eax
lea eax, [esp + 0x1c]
push eax
mov ecx, esi
call fcn.0049eb6c
mov ecx, dword [0x4deb94]
push eax
add ecx, 0x4dc
mov dword [esp + 0x200], 5
call fcn.0048f77a
lea ecx, [esp + 0x10]
mov dword [esp + 0x1fc], ebp
call fcn.0048f641
push 1
push str.NewSequence
push str.Settings
mov ecx, esi
call fcn.0049eb00
mov edx, dword [0x4deb94]
push 1
push str.AutoTab
push str.Settings
mov ecx, esi
mov dword [edx + 0x3c8], eax
call fcn.0049eb00
mov ecx, dword [0x4deb94]
push 0x64
push str.MaxTabWidth
push str.Settings
mov dword [ecx + 0x368], eax
mov ecx, esi
call fcn.0049eb00
mov edx, dword [0x4deb94]
push 0x32
push str.MinTabWidth
push str.Settings
mov ecx, esi
mov dword [edx + 0x3bc], eax
call fcn.0049eb00
mov ecx, dword [0x4deb94]
push 1
push str.ShowIndex
push str.Settings
mov dword [ecx + 0x3c0], eax
mov ecx, esi
call fcn.0049eb00
push 1
push str.ShowIndex
push str.Settings
mov ecx, esi
mov dword [0x4de5a4], eax
call fcn.0049eb00
push 1
push str.ShowDot
push str.Settings
mov ecx, esi
mov dword [0x4de5a4], eax
call fcn.0049eb00
push 0
push str.ShowRead
mov dword [0x4de59c], eax
push str.Settings
mov ecx, esi
call fcn.0049eb00
push 1
push str.Silent
push str.Settings
mov ecx, esi
mov dword [0x4de598], eax
call fcn.0049eb00
push str.Disable_Script_Debugger
push str.SoftwareMicrosoftInternet_ExplorerMain
lea edx, [esp + 0x18]
push connect
push edx
mov dword [0x4d49a8], eax
call fcn.00410330
mov eax, dword [eax]
add esp, 0x10
mov edi, 0x4d5acc
mov dl, byte [eax]
mov bl, byte [edi]
mov cl, dl
cmp dl, bl
jne 0x44881d
test cl, cl
je 0x448819
mov dl, byte [eax + 1]
mov bl, byte [edi + 1]
mov cl, dl
cmp dl, bl
jne 0x44881d
add eax, 2
add edi, 2
test cl, cl
jne 0x4487f5
xor eax, eax
jmp 0x448821
sbb eax, eax
sbb eax, ebp
mov edx, dword [0x4d49a8]
xor ecx, ecx
test eax, eax
sete cl
cmp edx, ecx
lea ecx, [esp + 0x10]
setne bl
call fcn.0048f641
test bl, bl
je 0x44886c
mov eax, dword [0x4d49a8]
test eax, eax
je 0x448850
push 0x4d5acc
jmp 0x448855
push 0x4d59c4
push str.Disable_Script_Debugger
push str.SoftwareMicrosoftInternet_ExplorerMain
push connect
call fcn.00410450
add esp, 0x10
push 2
push str.DefFontSize
push str.Settings
mov ecx, esi
call fcn.0049eb00
push 0
push str.DisScrollText
push str.Settings
mov ecx, esi
mov dword [0x4d49a0], eax
call fcn.0049eb00
push 0
push str.FilteBlank
push str.Settings
mov ecx, esi
mov dword [0x4debb8], eax
call fcn.0049eb00
push 0
push str.Interval
push str.Settings
mov ecx, esi
mov dword [0x4debbc], eax
call fcn.0049eb00
mov edx, dword [0x4deb94]
push 0
push str.AutoScrollAfterDL
push str.Settings
mov ecx, esi
mov dword [edx + 0x408], eax
call fcn.0049eb00
mov ecx, dword [0x4deb94]
push 0
push str.UseAutoScroll
push str.Settings
mov dword [ecx + 0x354], eax
mov ecx, esi
call fcn.0049eb00
mov edx, dword [0x4deb94]
push 1
push str.SrSpeed
push str.Settings
mov ecx, esi
mov dword [edx + 0x358], eax
call fcn.0049eb00
mov ecx, dword [0x4deb94]
push 0
push str.AutoScrollPage
push str.Settings
mov dword [ecx + 0x400], eax
mov ecx, esi
call fcn.0049eb00
mov edx, dword [0x4deb94]
push 0x64
push str.SpeedSeed
push str.Settings
mov ecx, esi
mov dword [edx + 0x404], eax
call fcn.0049eb00
mov dword [esp + 0x14], eax
mov dword [esp + 0x18], 0
fild qword [esp + 0x14]
fcom dword [0x4b2c74]
fnstsw ax
test ah, 0x40
je 0x44898d
fstp st(0)
mov dword [0x4d4990], 0x3f800000
jmp 0x448999
fmul dword [0x4b2c70]
fstp dword [0x4d4990]
push 0x4dc430
push str.StartGroup
lea eax, [esp + 0x18]
push str.Settings
push eax
mov ecx, esi
call fcn.0049eb6c
mov ecx, dword [0x4deb94]
push eax
add ecx, 0x4e0
mov dword [esp + 0x200], 6
call fcn.0048f77a
lea ecx, [esp + 0x10]
mov dword [esp + 0x1fc], ebp
call fcn.0048f641
push 0x4dc430
push str.OpenStart
lea edx, [esp + 0x18]
push str.Settings
push edx
mov ecx, esi
call fcn.0049eb6c
push eax
mov eax, dword [0x4deb94]
mov dword [esp + 0x200], 7
lea ecx, [eax + 0x4e4]
call fcn.0048f77a
lea ecx, [esp + 0x10]
mov dword [esp + 0x1fc], ebp
call fcn.0048f641
mov ecx, dword [0x4deb94]
mov edi, 0x4dc430
mov eax, dword [ecx + 0x4e4]
mov dl, byte [eax]
mov bl, byte [edi]
mov cl, dl
cmp dl, bl
jne 0x448a61
test cl, cl
je 0x448a5d
mov dl, byte [eax + 1]
mov bl, byte [edi + 1]
mov cl, dl
cmp dl, bl
jne 0x448a61
add eax, 2
add edi, 2
test cl, cl
jne 0x448a39
xor eax, eax
jmp 0x448a65
sbb eax, eax
sbb eax, ebp
test eax, eax
jne 0x448d4a
push eax
lea ecx, [esp + 0x2c]
call fcn.00401c50
lea ecx, [esp + 0x28]
mov dword [esp + 0x1fc], 8
call fcn.0048b434
mov ebp, dword [sym.imp.KERNEL32.dll_ExitProcess]
cmp eax, 1
jne 0x448ab1
mov ecx, dword [0x4deb94]
lea eax, [esp + 0x1ec]
push eax
add ecx, 0x4e4
call fcn.0048f77a
jmp 0x448aba
cmp eax, 2
jne 0x448aba
push 0
call ebp
mov edx, dword [0x4deb94]
mov edi, 0x4dc430
mov eax, dword [edx + 0x4e4]
mov dl, byte [eax]
mov bl, byte [edi]
mov cl, dl
cmp dl, bl
jne 0x448af3
test cl, cl
je 0x448aef
mov dl, byte [eax + 1]
mov bl, byte [edi + 1]
mov cl, dl
cmp dl, bl
jne 0x448af3
add eax, 2
add edi, 2
test cl, cl
jne 0x448acb
xor eax, eax
jmp 0x448af8
sbb eax, eax
sbb eax, 0xffffffff
test eax, eax
jne 0x448b12
push eax
push 0x4d6cd0
push 0x4d6f8c
push eax
call dword [sym.imp.USER32.dll_MessageBoxA]
push 0
call ebp
mov ecx, dword [0x4deb94]
lea eax, [esp + 0x14]
push 7
push eax
add ecx, 0x4e4
call fcn.00487a7f
mov eax, dword [eax]
mov byte [esp + 0x1fc], 9
mov edi, str.http:__
mov dl, byte [eax]
mov bl, byte [edi]
mov cl, dl
cmp dl, bl
jne 0x448b61
test cl, cl
je 0x448b5d
mov dl, byte [eax + 1]
mov bl, byte [edi + 1]
mov cl, dl
cmp dl, bl
jne 0x448b61
add eax, 2
add edi, 2
test cl, cl
jne 0x448b39
xor eax, eax
jmp 0x448b66
sbb eax, eax
sbb eax, 0xffffffff
test eax, eax
je 0x448c90
mov ecx, dword [0x4deb94]
lea eax, [esp + 0x10]
push 7
push eax
add ecx, 0x4e4
call fcn.00487a7f
mov eax, dword [eax]
mov edi, str.HTTP:__
mov dl, byte [eax]
mov bl, byte [edi]
mov cl, dl
cmp dl, bl
jne 0x448bb5
test cl, cl
je 0x448bb1
mov dl, byte [eax + 1]
mov bl, byte [edi + 1]
mov cl, dl
cmp dl, bl
jne 0x448bb5
add eax, 2
add edi, 2
test cl, cl
jne 0x448b8d
xor eax, eax
jmp 0x448bba
sbb eax, eax
sbb eax, 0xffffffff
test eax, eax
lea ecx, [esp + 0x10]
setne bl
call fcn.0048f641
test bl, bl
je 0x448c90
mov ecx, dword [0x4deb94]
lea eax, [esp + 0x24]
push 8
push eax
add ecx, 0x4e4
call fcn.00487a7f
mov eax, dword [eax]
mov edi, str.https:__
mov dl, byte [eax]
mov bl, byte [edi]
mov cl, dl
cmp dl, bl
jne 0x448c17
test cl, cl
je 0x448c13
mov dl, byte [eax + 1]
mov bl, byte [edi + 1]
mov cl, dl
cmp dl, bl
jne 0x448c17
add eax, 2
add edi, 2
test cl, cl
jne 0x448bef
xor eax, eax
jmp 0x448c1c
sbb eax, eax
sbb eax, 0xffffffff
test eax, eax
lea ecx, [esp + 0x24]
setne bl
call fcn.0048f641
test bl, bl
je 0x448c90
mov ecx, dword [0x4deb94]
lea eax, [esp + 0x1c]
push 8
push eax
add ecx, 0x4e4
call fcn.00487a7f
mov eax, dword [eax]
mov edi, str.HTTPS:__
mov dl, byte [eax]
mov bl, byte [edi]
mov cl, dl
cmp dl, bl
jne 0x448c75
test cl, cl
je 0x448c71
mov dl, byte [eax + 1]
mov bl, byte [edi + 1]
mov cl, dl
cmp dl, bl
jne 0x448c75
add eax, 2
add edi, 2
test cl, cl
jne 0x448c4d
xor eax, eax
jmp 0x448c7a
sbb eax, eax
sbb eax, 0xffffffff
test eax, eax
lea ecx, [esp + 0x1c]
setne bl
call fcn.0048f641
test bl, bl
je 0x448c90
mov bl, 1
jmp 0x448c92
xor bl, bl
lea ecx, [esp + 0x14]
mov byte [esp + 0x1fc], 8
call fcn.0048f641
test bl, bl
je 0x448cc2
mov eax, dword [0x4deb94]
add eax, 0x4e4
mov ecx, dword [eax]
push ecx
push str.http:___s
push eax
call fcn.00487e9f
add esp, 0xc
mov edx, dword [0x4deb94]
mov ecx, esi
mov eax, dword [edx + 0x4e4]
push eax
push str.OpenStart
push str.Settings
call fcn.00497391
lea ecx, [esp + 0x1f0]
mov dword [esp + 0x1fc], 0xd
call fcn.0048f641
lea ecx, [esp + 0x1ec]
mov byte [esp + 0x1fc], 0xc
call fcn.0048f641
lea ecx, [esp + 0x148]
mov byte [esp + 0x1fc], 0xb
call fcn.0046f030
lea ecx, [esp + 0xa4]
mov byte [esp + 0x1fc], 0xa
call fcn.0046f030
lea ecx, [esp + 0x28]
mov dword [esp + 0x1fc], 0xffffffff
call fcn.0048b031
or ebp, 0xffffffff
mov eax, dword [0x4deb94]
lea ecx, [esi + 0xf4]
add eax, 0x4e4
push eax
call fcn.0048f77a
push str.FFFFFF
push str.BGColor
lea ecx, [esp + 0x1c]
push str.Settings
push ecx
mov ecx, esi
call fcn.0049eb6c
mov edx, dword [0x4deb94]
push eax
mov dword [esp + 0x200], 0xe
lea ecx, [edx + 0x5cc]
call fcn.0048f77a
lea ecx, [esp + 0x14]
mov dword [esp + 0x1fc], ebp
call fcn.0048f641
push 0x3c
push str.AutoRefresh
push str.Settings
mov ecx, esi
call fcn.0049eb00
mov ecx, dword [0x4deb94]
push 0
push str.AutoSetBG
push str.Settings
mov dword [ecx + 0x3e4], eax
mov ecx, esi
call fcn.0049eb00
push 1
push str.AnimateIcon
push str.Settings
mov ecx, esi
mov dword [0x4de5ac], eax
call fcn.0049eb00
mov edx, dword [0x4deb94]
push 0
push str.LockHomepage
push str.Settings
mov ecx, esi
mov dword [edx + 0x330], eax
call fcn.0049eb00
push 0
push str.MouseCtrlSpeed
push str.Settings
mov ecx, esi
mov dword [0x4de5a8], eax
call fcn.0049eb00
mov ecx, dword [0x4deb94]
push 1
push str.DisDownActivex
push str.Settings
mov dword [ecx + 0x32c], eax
mov ecx, esi
call fcn.0049eb00
mov edx, dword [0x4deb94]
push 0
push str.DownAll
push str.Settings
mov ecx, esi
mov dword [edx + 0x328], eax
call fcn.0049eb00
mov ecx, dword [0x4deb94]
push 0xff
push str.CollectorTrans
push str.Settings
mov dword [ecx + 0x418], eax
mov ecx, esi
call fcn.0049eb00
mov edx, dword [0x4deb94]
mov ecx, dword [esp + 0x1f4]
pop edi
pop esi
mov dword [edx + 0x1f4], eax
pop ebp
pop ebx
mov dword fs:[0], ecx
add esp, 0x1f0
ret