Function at 0x402f88
Capabilities:
Read .ini file

Disassembly:
push ebp
mov ebp, esp
mov eax, 0x4808
call fcn.00403f20
cmp dword [ebp + 8], 0
push ebx
push esi
push edi
mov dword [ebp - 8], ecx
je 0x403258
and byte [ebp - 0x4008], 0
mov edx, 0x1ff
mov ecx, edx
xor eax, eax
lea edi, [ebp - 0x4007]
and byte [ebp - 0x3008], 0
rep stosd dword es:[edi], eax
stosw word es:[edi], ax
stosb byte es:[edi], al
mov ecx, edx
xor eax, eax
lea edi, [ebp - 0x3007]
and byte [ebp - 0x2008], 0
rep stosd dword es:[edi], eax
stosw word es:[edi], ax
stosb byte es:[edi], al
mov ecx, edx
xor eax, eax
lea edi, [ebp - 0x2007]
and byte [ebp - 0x808], 0
rep stosd dword es:[edi], eax
stosw word es:[edi], ax
stosb byte es:[edi], al
mov ecx, edx
xor eax, eax
lea edi, [ebp - 0x807]
and byte [ebp - 0x1008], 0
rep stosd dword es:[edi], eax
stosw word es:[edi], ax
stosb byte es:[edi], al
mov ecx, edx
xor eax, eax
lea edi, [ebp - 0x1007]
and byte [ebp - 0x1808], 0
rep stosd dword es:[edi], eax
stosw word es:[edi], ax
stosb byte es:[edi], al
mov ecx, edx
xor eax, eax
lea edi, [ebp - 0x1807]
and byte [ebp - 0x2808], 0
rep stosd dword es:[edi], eax
stosw word es:[edi], ax
stosb byte es:[edi], al
mov ecx, edx
xor eax, eax
lea edi, [ebp - 0x2807]
and byte [ebp - 0x3808], 0
rep stosd dword es:[edi], eax
stosw word es:[edi], ax
stosb byte es:[edi], al
mov ecx, edx
xor eax, eax
lea edi, [ebp - 0x3807]
and byte [ebp - 0x4808], 0
rep stosd dword es:[edi], eax
stosw word es:[edi], ax
stosb byte es:[edi], al
mov ecx, edx
xor eax, eax
lea edi, [ebp - 0x4807]
push dword [ebp + 8]
rep stosd dword es:[edi], eax
stosw word es:[edi], ax
mov esi, dword [sym.imp.KERNEL32.dll_GetPrivateProfileStringA]
and dword [ebp - 4], 0
stosb byte es:[edi], al
lea eax, [ebp - 0x4008]
push 0x800
mov ebx, 0x407df0
push eax
push ebx
mov edi, str.WebEx
push str.url4ToolHelp
push edi
call esi
push dword [ebp + 8]
lea eax, [ebp - 0x3008]
push 0x800
push eax
push ebx
push str.url4DSHelp
push edi
call esi
push dword [ebp + 8]
lea eax, [ebp - 0x2008]
push 0x800
push eax
push ebx
push str.url4ASHelp
push edi
call esi
push dword [ebp + 8]
lea eax, [ebp - 0x808]
push 0x800
push eax
push ebx
push str.url4SessionHelp
push edi
call esi
push dword [ebp + 8]
lea eax, [ebp - 0x1008]
push 0x800
push eax
push ebx
push str.url4Instructions
push edi
call esi
push dword [ebp + 8]
lea eax, [ebp - 0x1808]
push 0x800
push eax
push ebx
push str.url4MailInvite
push edi
call esi
push dword [ebp + 8]
lea eax, [ebp - 0x2808]
push 0x800
push eax
push ebx
push str.url4HomePage
push edi
call esi
push dword [ebp + 8]
lea eax, [ebp - 0x3808]
push 0x800
push eax
push ebx
push str.url4LeaveMessForm
push edi
call esi
push dword [ebp + 8]
lea eax, [ebp - 0x4808]
push 0x800
push eax
push ebx
push str.szFeedBackURL
push edi
call esi
push 0x804
call sub.MSVCRT.dll_void____cdecl_operator_new_unsigned_int_
mov esi, eax
xor ebx, ebx
cmp esi, ebx
pop ecx
je 0x403185
push 0x800
lea eax, [esi + 4]
push ebx
push eax
mov dword [esi], ebx
call sub.MSVCRT.dll_memset
add esp, 0xc
jmp 0x403187
xor esi, esi
cmp esi, ebx
je 0x403258
mov edi, dword [ebp - 4]
cmp edi, ebx
jne 0x4031a3
mov dword [esi], ebx
lea eax, [ebp - 0x4008]
jmp 0x403233
push 1
pop eax
cmp edi, eax
jne 0x4031b4
mov dword [esi], eax
lea eax, [ebp - 0x3008]
jmp 0x403233
cmp edi, 2
jne 0x4031c7
mov dword [esi], 0xd
lea eax, [ebp - 0x2008]
jmp 0x403233
push 3
pop eax
cmp edi, eax
jne 0x4031d8
mov dword [esi], eax
lea eax, [ebp - 0x808]
jmp 0x403233
cmp edi, 4
jne 0x4031eb
mov dword [esi], 6
lea eax, [ebp - 0x1008]
jmp 0x403233
push 5
pop eax
cmp edi, eax
jne 0x4031fc
mov dword [esi], eax
lea eax, [ebp - 0x1808]
jmp 0x403233
cmp edi, 6
jne 0x40320f
mov dword [esi], 7
lea eax, [ebp - 0x2808]
jmp 0x403233
cmp edi, 7
jne 0x403222
mov dword [esi], 8
lea eax, [ebp - 0x3808]
jmp 0x403233
cmp edi, 8
jne 0x40323b
mov dword [esi], 0xa
lea eax, [ebp - 0x4808]
push eax
mov ecx, esi
call fcn.00403293
mov eax, dword [ebp - 8]
push ebx
push esi
lea ecx, [eax + 0x2254]
call fcn.00404134
inc edi
cmp edi, 9
mov dword [ebp - 4], edi
jl 0x40315c
pop edi
pop esi
pop ebx
leave
ret 4