Function at 0x405aa0
Capabilities:
Read .ini file

Disassembly:
sub esp, 0x620
mov eax, dword [0x41a06c]
xor eax, esp
mov dword [esp + 0x61c], eax
push esi
push edi
lea eax, [esp + 0x41c]
mov dword [esp + 0x10], 0xfffffffd
mov dword [esp + 0x14], 1
call fcn.004059e0
lea eax, [esp + 0x41c]
push 0x416d2c
push eax
call fcn.00408556
mov esi, eax
xor edi, edi
add esp, 8
cmp esi, edi
je 0x405b16
lea ecx, [esp + 0x41c]
push ecx
push 0xfffffffffffffffd
push str.Value1
push 0x417cf0
call dword [sym.imp.KERNEL32.dll_GetPrivateProfileIntW]
push esi
mov dword [esp + 0x14], eax
call fcn.004085e4
add esp, 4
lea edx, [esp + 0x41c]
push 0x417cf8
push edx
call fcn.00408556
mov esi, eax
add esp, 8
xor eax, eax
cmp esi, edi
je 0x4063ac
push ebx
push ebp
mov ebp, dword [sym.imp.ADVAPI32.dll_RegOpenKeyExW]
mov dword [esp + 0x20], eax
jmp 0x405b52
xor edi, edi
mov ecx, dword [esp + 0x634]
mov eax, dword [ecx + eax*8]
dec eax
cmp eax, 0x10
ja case.default.0x405b66
jmp dword [eax*4 + 0x4063c8]
lea edx, [esp + 0x10]
push edx
push 0x20019
push edi
push str.SYSTEMCurrentControlSetControlSession_ManagerMemory_Management
push 0x80000002
mov dword [esp + 0x24], edi
call ebp
test eax, eax
jne case.default.0x405b66
lea edi, [esp + 0x10]
lea ebx, [esp + 0x14]
mov ecx, str.LargeSystemCache
call fcn.004058d0
test eax, eax
je case.default.0x405b66
push 1
push 0x417cfc
push esi
call fcn.00408c7b
mov eax, dword [esp + 0x20]
push eax
push str.Value1___d_n
push esi
call fcn.00408c7b
add esp, 0x18
jmp case.default.0x405b66
lea ecx, [esp + 0x10]
push ecx
push 0x20019
push edi
push str.SYSTEMCurrentControlSetControlSession_ManagerMemory_Management
push 0x80000002
mov dword [esp + 0x24], edi
call ebp
test eax, eax
jne case.default.0x405b66
lea edi, [esp + 0x10]
lea ebx, [esp + 0x14]
mov ecx, str.DisablePagingExecutive
call fcn.004058d0
test eax, eax
je case.default.0x405b66
push 2
push 0x417cfc
push esi
call fcn.00408c7b
mov edx, dword [esp + 0x20]
push edx
push str.Value1___d_n
push esi
call fcn.00408c7b
add esp, 0x18
jmp case.default.0x405b66
lea eax, [esp + 0x10]
push eax
push 0x20019
push edi
push str.SYSTEMCurrentControlSetControlSession_ManagerMemory_Management
push 0x80000002
mov dword [esp + 0x24], edi
call ebp
test eax, eax
jne case.default.0x405b66
lea edi, [esp + 0x10]
lea ebx, [esp + 0x14]
mov ecx, str.ClearPageFileAtShutdown
call fcn.004058d0
test eax, eax
je case.default.0x405b66
push 3
push 0x417cfc
push esi
call fcn.00408c7b
mov ecx, dword [esp + 0x20]
push ecx
push str.Value1___d_n
push esi
call fcn.00408c7b
add esp, 0x18
jmp case.default.0x405b66
lea edx, [esp + 0x10]
push edx
push 0x20019
push edi
push str.SYSTEMCurrentControlSetControlSession_ManagerMemory_ManagementPrefetchParameters
push 0x80000002
mov dword [esp + 0x24], edi
call ebp
test eax, eax
jne case.default.0x405b66
lea edi, [esp + 0x10]
lea ebx, [esp + 0x14]
mov ecx, str.EnablePrefetch
call fcn.004058d0
test eax, eax
je case.default.0x405b66
push 4
push 0x417cfc
push esi
call fcn.00408c7b
mov eax, dword [esp + 0x20]
push eax
push str.Value1___d_n
push esi
call fcn.00408c7b
add esp, 0x18
jmp case.default.0x405b66
lea ecx, [esp + 0x10]
push ecx
push 0x20019
push edi
push str.SYSTEMCurrentControlSetControlSession_ManagerMemory_ManagementPrefetchParameters
push 0x80000002
mov dword [esp + 0x24], edi
call ebp
test eax, eax
jne case.default.0x405b66
lea edi, [esp + 0x10]
lea ebx, [esp + 0x14]
mov ecx, str.EnableSuperfetch
call fcn.004058d0
test eax, eax
je case.default.0x405b66
push 5
push 0x417cfc
push esi
call fcn.00408c7b
mov edx, dword [esp + 0x20]
push edx
push str.Value1___d_n
push esi
call fcn.00408c7b
add esp, 0x18
jmp case.default.0x405b66
lea eax, [esp + 0x10]
push eax
push 0x20019
push edi
push str.SystemCurrentControlSetControlSession_ManagerExecutive
push 0x80000002
mov dword [esp + 0x24], edi
call ebp
test eax, eax
jne case.default.0x405b66
lea edi, [esp + 0x10]
lea ebx, [esp + 0x14]
mov ecx, str.AdditionalDelayedWorkerThreads
call fcn.004058d0
test eax, eax
je case.default.0x405b66
push 6
push 0x417cfc
push esi
call fcn.00408c7b
mov ecx, dword [esp + 0x20]
push ecx
push str.Value1___d_n
push esi
call fcn.00408c7b
add esp, 0x18
jmp case.default.0x405b66
lea edx, [esp + 0x10]
push edx
push 0x20019
push edi
push str.SystemCurrentControlSetControlSession_ManagerExecutive
push 0x80000002
mov dword [esp + 0x24], edi
call ebp
test eax, eax
jne case.default.0x405b66
lea edi, [esp + 0x10]
lea ebx, [esp + 0x14]
mov ecx, str.AdditionalCriticalWorkerThreads
call fcn.004058d0
test eax, eax
je case.default.0x405b66
push 7
push 0x417cfc
push esi
call fcn.00408c7b
mov eax, dword [esp + 0x20]
push eax
push str.Value1___d_n
push esi
call fcn.00408c7b
add esp, 0x18
jmp case.default.0x405b66
push 8
push 0x417cfc
push esi
call fcn.00408c7b
add esp, 0xc
lea ebx, [esp + 0x24]
mov edi, str.MaxConnectionsPer1_0Server
mov ecx, str.SoftwareMicrosoftWindowsCurrentVersionInternet_Settings
mov edx, reloc.K7UI.dll_Ordinal_1
call fcn.00405920
test eax, eax
je 0x405e58
mov ecx, ebx
push ecx
push str.Value1___s_n
push esi
call fcn.00408c7b
add esp, 0xc
lea ebx, [esp + 0x24]
mov edi, str.MaxConnectionsPerServer
mov ecx, str.SoftwareMicrosoftWindowsCurrentVersionInternet_Settings
mov edx, reloc.K7UI.dll_Ordinal_1
call fcn.00405920
test eax, eax
je case.default.0x405b66
mov edx, ebx
push edx
push str.Value2___s_n
jmp 0x406350
lea eax, [esp + 0x10]
push eax
push 0x20019
push edi
push str.SystemCurrentControlSetControlPriorityControl
push 0x80000002
mov dword [esp + 0x24], edi
call ebp
test eax, eax
jne case.default.0x405b66
lea edi, [esp + 0x10]
lea ebx, [esp + 0x14]
mov ecx, 0x417608
call fcn.004058d0
test eax, eax
je case.default.0x405b66
push 9
push 0x417cfc
push esi
call fcn.00408c7b
mov ecx, dword [esp + 0x20]
push ecx
push str.Value1___d_n
push esi
call fcn.00408c7b
add esp, 0x18
jmp case.default.0x405b66
lea edx, [esp + 0x10]
push edx
push 0x20019
push edi
push str.Control_PanelDesktop
push reloc.K7UI.dll_Ordinal_1
mov dword [esp + 0x24], edi
call ebp
test eax, eax
jne case.default.0x405b66
lea edi, [esp + 0x10]
lea ebx, [esp + 0x14]
mov ecx, str.LowLevelHooksTimeout
call fcn.004058d0
test eax, eax
je case.default.0x405b66
push 0xa
push 0x417cfc
push esi
call fcn.00408c7b
mov eax, dword [esp + 0x20]
push eax
push str.Value1___d_n
push esi
call fcn.00408c7b
add esp, 0x18
jmp case.default.0x405b66
lea ebx, [esp + 0x24]
mov edi, str.HungAppTimeout
mov ecx, str.Control_PanelDesktop
mov edx, reloc.K7UI.dll_Ordinal_1
call fcn.00405920
test eax, eax
je case.default.0x405b66
push 0xb
push 0x417cfc
push esi
call fcn.00408c7b
mov ecx, ebx
push ecx
push str.Value1___s_n
push esi
call fcn.00408c7b
add esp, 0x18
jmp case.default.0x405b66
lea ebx, [esp + 0x24]
mov edi, str.WaitToKillServiceTimeout
mov ecx, str.SystemCurrentControlSetControl
mov edx, 0x80000002
call fcn.00405920
test eax, eax
je case.default.0x405b66
push 0xc
push 0x417cfc
push esi
call fcn.00408c7b
mov edx, ebx
push edx
push str.Value1___s_n
push esi
call fcn.00408c7b
add esp, 0x18
jmp case.default.0x405b66
lea eax, [esp + 0x10]
push eax
push 0x20019
push edi
push str.SystemCurrentControlSetControlFileSystem
push 0x80000002
mov dword [esp + 0x24], edi
call ebp
test eax, eax
jne case.default.0x405b66
lea edi, [esp + 0x10]
lea ebx, [esp + 0x14]
mov ecx, str.NtfsDisable8dot3NameCreation
call fcn.004058d0
test eax, eax
je case.default.0x405b66
push 0xd
push 0x417cfc
push esi
call fcn.00408c7b
mov ecx, dword [esp + 0x20]
push ecx
push str.Value1___d_n
push esi
call fcn.00408c7b
add esp, 0x18
mov dword [esp + 0x1c], 0
jmp case.default.0x405b66
lea edx, [esp + 0x10]
push edx
push 0x20019
push edi
push str.Control_PanelDesktop
push reloc.K7UI.dll_Ordinal_1
mov dword [esp + 0x24], edi
call ebp
test eax, eax
jne case.default.0x405b66
lea edi, [esp + 0x10]
lea ebx, [esp + 0x14]
mov ecx, str.FontSmoothingType
call fcn.004058d0
test eax, eax
je case.default.0x405b66
push 0xe
push 0x417cfc
push esi
call fcn.00408c7b
mov eax, dword [esp + 0x20]
push eax
push str.Value1___d_n
push esi
call fcn.00408c7b
add esp, 0x18
jmp case.default.0x405b66
lea ebx, [esp + 0x24]
mov edi, str.Max_Cached_Icons
mov ecx, str.SOFTWAREMicrosoftWindowsCurrentVersionExplorer
mov edx, 0x80000002
call fcn.00405920
test eax, eax
je case.default.0x405b66
push 0xf
push 0x417cfc
push esi
call fcn.00408c7b
mov ecx, ebx
push ecx
push str.Value1___s_n
push esi
call fcn.00408c7b
add esp, 0x18
jmp case.default.0x405b66
lea ebx, [esp + 0x24]
mov edi, str.MenuShowDelay
mov ecx, str.Control_PanelDesktop
mov edx, reloc.K7UI.dll_Ordinal_1
call fcn.00405920
test eax, eax
je case.default.0x405b66
push 0x10
push 0x417cfc
push esi
call fcn.00408c7b
mov edx, ebx
push edx
push str.Value1___s_n
push esi
call fcn.00408c7b
add esp, 0x18
jmp case.default.0x405b66
push 0x11
push 0x417cfc
push esi
call fcn.00408c7b
add esp, 0xc
lea ebx, [esp + 0x24]
mov edi, 0x417a44
mov ecx, str.Control_PanelDesktop
mov edx, reloc.K7UI.dll_Ordinal_1
call fcn.00405920
test eax, eax
je 0x40615e
mov eax, ebx
push eax
push str.Value1___s_n
push esi
call fcn.00408c7b
add esp, 0xc
lea ebx, [esp + 0x24]
mov edi, str.MinAnimate
mov ecx, str.Control_PanelDesktopWindowMetrics
mov edx, reloc.K7UI.dll_Ordinal_1
call fcn.00405920
test eax, eax
je 0x40618b
mov ecx, ebx
push ecx
push str.Value2___s_n
push esi
call fcn.00408c7b
add esp, 0xc
lea edx, [esp + 0x10]
push edx
push 0x20019
push 0
push str.Control_PanelDesktop
push reloc.K7UI.dll_Ordinal_1
mov dword [esp + 0x24], 0
call ebp
test eax, eax
jne 0x4061d8
lea edi, [esp + 0x10]
lea ebx, [esp + 0x14]
mov ecx, str.SmoothScroll
call fcn.004058d0
test eax, eax
je 0x4061d8
mov eax, dword [esp + 0x14]
push eax
push str.Value3___d_n
push esi
call fcn.00408c7b
add esp, 0xc
lea ecx, [esp + 0x10]
push ecx
push 0x20019
push 0
push str.Control_PanelDesktop
push reloc.K7UI.dll_Ordinal_1
mov dword [esp + 0x24], 0
call ebp
test eax, eax
jne 0x406225
lea edi, [esp + 0x10]
lea ebx, [esp + 0x14]
mov ecx, str.WindowArrangementActive
call fcn.004058d0
test eax, eax
je 0x406225
mov edx, dword [esp + 0x14]
push edx
push str.Value4___d_n
push esi
call fcn.00408c7b
add esp, 0xc
lea eax, [esp + 0x10]
push eax
push 0x20019
push 0
push str.SoftwareMicrosoftWindowsCurrentVersionExplorerAdvanced
push reloc.K7UI.dll_Ordinal_1
mov dword [esp + 0x24], 0
call ebp
test eax, eax
jne 0x406272
lea edi, [esp + 0x10]
lea ebx, [esp + 0x14]
mov ecx, str.TaskBarAnimations
call fcn.004058d0
test eax, eax
je 0x406272
mov ecx, dword [esp + 0x14]
push ecx
push str.Value5___d_n
push esi
call fcn.00408c7b
add esp, 0xc
lea edx, [esp + 0x10]
push edx
push 0x20019
push 0
push str.SoftwareMicrosoftWindowsCurrentVersionExplorerAdvanced
push reloc.K7UI.dll_Ordinal_1
mov dword [esp + 0x24], 0
call ebp
test eax, eax
jne 0x4062bf
lea edi, [esp + 0x10]
lea ebx, [esp + 0x14]
mov ecx, str.DisablePreviewDesktop
call fcn.004058d0
test eax, eax
je 0x4062bf
mov eax, dword [esp + 0x14]
push eax
push str.Value6___d_n
push esi
call fcn.00408c7b
add esp, 0xc
lea ecx, [esp + 0x10]
push ecx
push 0x20019
push 0
push str.SOFTWAREMicrosoftWindowsCurrentVersionExplorer
push reloc.K7UI.dll_Ordinal_1
mov dword [esp + 0x24], 0
call ebp
test eax, eax
jne 0x40630c
lea edi, [esp + 0x10]
lea ebx, [esp + 0x14]
mov ecx, str.NoWindowMinimizingShortcuts
call fcn.004058d0
test eax, eax
je 0x40630c
mov edx, dword [esp + 0x14]
push edx
push str.Value7___d_n
push esi
call fcn.00408c7b
add esp, 0xc
lea eax, [esp + 0x10]
push eax
push 0x20019
push 0
push str.SoftwareMicrosoftWindowsCurrentVersionExplorerVisualEffects
push reloc.K7UI.dll_Ordinal_1
mov dword [esp + 0x24], 0
call ebp
test eax, eax
jne case.default.0x405b66
lea edi, [esp + 0x10]
lea ebx, [esp + 0x14]
mov ecx, str.VisualFXSetting
call fcn.004058d0
test eax, eax
je case.default.0x405b66
mov ecx, dword [esp + 0x14]
push ecx
push str.Value8___d_n
push esi
call fcn.00408c7b
add esp, 0xc
mov eax, dword [esp + 0x20]
inc eax
mov dword [esp + 0x20], eax
cmp eax, 0xb
jb 0x405b50
mov edi, dword [esp + 0x18]
pop ebp
pop ebx
cmp edi, 0xfffffffd
je 0x40639e
cmp dword [esp + 0x14], 0
je 0x40639e
cmp edi, 0xffffffff
je 0x40639e
push 0xd
push 0x417cfc
push esi
call fcn.00408c7b
push edi
push str.Value1___d_n
push esi
call fcn.00408c7b
add esp, 0x18
push esi
call fcn.004085e4
add esp, 4
mov eax, 1
mov ecx, dword [esp + 0x624]
pop edi
pop esi
xor ecx, esp
call fcn.00408425
add esp, 0x620
ret 4