Function at 0x42ca40
Capabilities:
Contain obfuscated stackstrings
Read .ini file

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x450ba7
mov eax, dword fs:[0]
push eax
sub esp, 0xd44
mov eax, dword [0x46d45c]
xor eax, ebp
mov dword [ebp - 0x20], eax
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
lea eax, [ebp - 0x10]
push eax
call fcn.0042a510
add esp, 4
mov dword [ebp - 4], 0
mov ecx, dword [ebp + 8]
cmp dword [ecx], 0
jl 0x42cd6a
mov edx, dword [ebp + 8]
mov eax, dword [edx]
push eax
lea ecx, [ebp - 0x1c]
push ecx
call fcn.0042a6b0
add esp, 8
mov byte [ebp - 4], 1
mov dword [ebp - 0x14], 0
mov dx, word [0x45df08]
mov word [ebp - 0x22c], dx
push 0x206
push 0
lea eax, [ebp - 0x22a]
push eax
call fcn.00438240
add esp, 0xc
lea ecx, [ebp - 0x10]
call fcn.00416b30
push eax
push 0x104
lea ecx, [ebp - 0x22c]
push ecx
push 0x45df0c
push 0x45df10
mov edx, dword [ebp - 0x14]
push edx
lea eax, [ebp - 0xcbc]
push eax
call fcn.0042a6b0
add esp, 8
mov dword [ebp - 0xd08], eax
mov ecx, dword [ebp - 0xd08]
call fcn.00416b30
push eax
call dword [sym.imp.KERNEL32.dll_GetPrivateProfileStringW]
neg eax
sbb eax, eax
add eax, 1
mov byte [ebp - 0xcb5], al
lea ecx, [ebp - 0xcbc]
call fcn.004168d0
movzx ecx, byte [ebp - 0xcb5]
test ecx, ecx
je 0x42cb3a
jmp 0x42cb3f
jmp 0x42caa7
mov edx, dword [ebp - 0x14]
push edx
lea eax, [ebp - 0x18]
push eax
call fcn.0042a6b0
add esp, 8
mov byte [ebp - 4], 2
push 0x45df44
lea ecx, [ebp - 0xcc0]
call fcn.00416830
mov byte [ebp - 4], 3
lea ecx, [ebp - 0xcc0]
push ecx
lea edx, [ebp - 0xcc4]
push edx
lea ecx, [ebp - 0x10]
call fcn.00416930
mov dword [ebp - 0xd0c], eax
mov eax, dword [ebp - 0xd0c]
mov dword [ebp - 0xd10], eax
mov byte [ebp - 4], 4
mov ecx, dword [ebp - 0xd10]
push ecx
lea ecx, [ebp - 0x18]
call fcn.00416b30
push eax
lea edx, [ebp - 0x10]
push edx
lea ecx, [ebp - 0x1c]
call fcn.00416b30
push eax
call fcn.0042c9d0
add esp, 0x10
mov byte [ebp - 4], 3
lea ecx, [ebp - 0xcc4]
call fcn.004168d0
mov byte [ebp - 4], 2
lea ecx, [ebp - 0xcc0]
call fcn.004168d0
lea ecx, [ebp - 0x10]
call fcn.00416b30
push eax
push 0
push 0
lea ecx, [ebp - 0x1c]
call fcn.00416b30
push eax
call dword [sym.imp.KERNEL32.dll_WritePrivateProfileStringW]
mov dword [ebp - 0x234], 0
mov dword [ebp - 0x230], 0
jmp 0x42cc17
mov eax, dword [ebp - 0x234]
add eax, 1
mov dword [ebp - 0x234], eax
mov cx, word [0x45df58]
mov word [ebp - 0x43c], cx
push 0x206
push 0
lea edx, [ebp - 0x43a]
push edx
call fcn.00438240
add esp, 0xc
mov eax, dword [ebp - 0x234]
push eax
push 0x45df5c
lea ecx, [ebp - 0x644]
push ecx
call fcn.00438ac1
add esp, 0xc
lea ecx, [ebp - 0x10]
call fcn.00416b30
push eax
push 0x104
lea edx, [ebp - 0x43c]
push edx
push 0x45df70
lea eax, [ebp - 0x644]
push eax
push 0x45df74
call dword [sym.imp.KERNEL32.dll_GetPrivateProfileStringW]
test eax, eax
jne 0x42cc8b
jmp 0x42cd3c
lea ecx, [ebp - 0x43c]
push ecx
call fcn.0043a89e
add esp, 4
mov edx, dword [ebp + 8]
cmp eax, dword [edx]
jne 0x42ccc0
lea ecx, [ebp - 0x10]
call fcn.00416b30
push eax
push 0
lea eax, [ebp - 0x644]
push eax
push 0x45df80
call dword [sym.imp.KERNEL32.dll_WritePrivateProfileStringW]
jmp 0x42cd37
mov ecx, dword [ebp - 0x230]
cmp ecx, dword [ebp - 0x234]
je 0x42cd28
lea ecx, [ebp - 0x10]
call fcn.00416b30
push eax
push 0
lea edx, [ebp - 0x644]
push edx
push 0x45df8c
call dword [sym.imp.KERNEL32.dll_WritePrivateProfileStringW]
mov eax, dword [ebp - 0x230]
push eax
push 0x45df98
lea ecx, [ebp - 0x644]
push ecx
call fcn.00438ac1
add esp, 0xc
lea ecx, [ebp - 0x10]
call fcn.00416b30
push eax
lea edx, [ebp - 0x43c]
push edx
lea eax, [ebp - 0x644]
push eax
push 0x45dfac
call dword [sym.imp.KERNEL32.dll_WritePrivateProfileStringW]
mov ecx, dword [ebp - 0x230]
add ecx, 1
mov dword [ebp - 0x230], ecx
jmp 0x42cc08
mov edx, dword [ebp - 0x14]
push edx
call fcn.0042c060
add esp, 4
mov ecx, dword [ebp + 8]
mov dword [ecx], eax
mov byte [ebp - 4], 1
lea ecx, [ebp - 0x18]
call fcn.004168d0
mov byte [ebp - 4], 0
lea ecx, [ebp - 0x1c]
call fcn.004168d0
jmp 0x42d222
mov edx, dword [ebp + 8]
mov eax, dword [edx]
push eax
call fcn.0042c060
add esp, 4
push eax
lea ecx, [ebp - 0x68c]
push ecx
call fcn.0042a6b0
add esp, 8
mov byte [ebp - 4], 5
mov dword [ebp - 0x690], 0
mov dx, word [0x45dfb8]
mov word [ebp - 0xaa4], dx
push 0x206
push 0
lea eax, [ebp - 0xaa2]
push eax
call fcn.00438240
add esp, 0xc
lea ecx, [ebp - 0x10]
call fcn.00416b30
push eax
push 0x104
lea ecx, [ebp - 0xaa4]
push ecx
push 0x45dfbc
push str.PrivateSetting_GadgetName
mov edx, dword [ebp - 0x690]
push edx
lea eax, [ebp - 0xccc]
push eax
call fcn.0042a6b0
add esp, 8
mov dword [ebp - 0xd14], eax
mov ecx, dword [ebp - 0xd14]
call fcn.00416b30
push eax
call dword [sym.imp.KERNEL32.dll_GetPrivateProfileStringW]
neg eax
sbb eax, eax
add eax, 1
mov byte [ebp - 0xcc5], al
lea ecx, [ebp - 0xccc]
call fcn.004168d0
movzx ecx, byte [ebp - 0xcc5]
test ecx, ecx
je 0x42ce2c
jmp 0x42ce31
jmp 0x42cd96
mov dword [ebp - 0xaa8], 0
jmp 0x42ce4c
mov edx, dword [ebp - 0xaa8]
add edx, 1
mov dword [ebp - 0xaa8], edx
mov ax, word [0x45dff4]
mov word [ebp - 0xcb4], ax
push 0x206
push 0
lea ecx, [ebp - 0xcb2]
push ecx
call fcn.00438240
add esp, 0xc
mov edx, dword [ebp - 0xaa8]
push edx
push 0x45dff8
lea eax, [ebp - 0x89c]
push eax
call fcn.00438ac1
add esp, 0xc
lea ecx, [ebp - 0x10]
call fcn.00416b30
push eax
push 0x104
lea ecx, [ebp - 0xcb4]
push ecx
push 0x45e00c
lea edx, [ebp - 0x89c]
push edx
push 0x45e010
call dword [sym.imp.KERNEL32.dll_GetPrivateProfileStringW]
test eax, eax
jne 0x42cebc
jmp 0x42cec1
jmp 0x42ce3d
push 0x45e01c
lea ecx, [ebp - 0xcd4]
call fcn.00416830
mov byte [ebp - 4], 6
lea eax, [ebp - 0x10]
push eax
mov ecx, dword [ebp - 0x690]
push ecx
lea edx, [ebp - 0xcd0]
push edx
call fcn.0042a6b0
add esp, 8
mov dword [ebp - 0xd18], eax
mov eax, dword [ebp - 0xd18]
mov dword [ebp - 0xd1c], eax
mov byte [ebp - 4], 7
mov ecx, dword [ebp - 0xd1c]
call fcn.00416b30
push eax
lea ecx, [ebp - 0xcd4]
push ecx
lea edx, [ebp - 0xcd8]
push edx
lea ecx, [ebp - 0x10]
call fcn.00416930
mov dword [ebp - 0xd20], eax
mov eax, dword [ebp - 0xd20]
mov dword [ebp - 0xd24], eax
mov byte [ebp - 4], 8
mov ecx, dword [ebp - 0xd24]
push ecx
lea ecx, [ebp - 0x68c]
call fcn.00416b30
push eax
call fcn.0042c9d0
add esp, 0x10
mov byte [ebp - 4], 7
lea ecx, [ebp - 0xcd8]
call fcn.004168d0
mov byte [ebp - 4], 6
lea ecx, [ebp - 0xcd0]
call fcn.004168d0
mov byte [ebp - 4], 5
lea ecx, [ebp - 0xcd4]
call fcn.004168d0
mov edx, dword [ebp - 0x690]
push edx
push str.__d_
lea eax, [ebp - 0x684]
push eax
call fcn.00438ac1
add esp, 0xc
lea ecx, [ebp - 0x10]
call fcn.00416b30
push eax
lea ecx, [ebp - 0x684]
push ecx
lea edx, [ebp - 0x89c]
push edx
push 0x45e03c
call dword [sym.imp.KERNEL32.dll_WritePrivateProfileStringW]
mov eax, dword [ebp + 8]
mov ecx, dword [eax]
push ecx
call fcn.0042c060
add esp, 4
mov dword [ebp - 0x688], eax
jmp 0x42cfe7
mov edx, dword [ebp - 0x688]
add edx, 1
mov dword [ebp - 0x688], edx
push 0x45e048
lea ecx, [ebp - 0xce0]
call fcn.00416830
mov byte [ebp - 4], 9
push 0x45e05c
lea ecx, [ebp - 0xcec]
call fcn.00416830
mov byte [ebp - 4], 0xa
lea eax, [ebp - 0xce0]
push eax
lea ecx, [ebp - 0xce4]
push ecx
lea ecx, [ebp - 0x10]
call fcn.00416930
mov dword [ebp - 0xd28], eax
mov edx, dword [ebp - 0xd28]
mov dword [ebp - 0xd2c], edx
mov byte [ebp - 4], 0xb
mov eax, dword [ebp - 0xd2c]
push eax
mov ecx, dword [ebp - 0x688]
push ecx
lea edx, [ebp - 0xce8]
push edx
call fcn.0042a6b0
add esp, 8
mov dword [ebp - 0xd30], eax
mov eax, dword [ebp - 0xd30]
mov dword [ebp - 0xd34], eax
mov byte [ebp - 4], 0xc
mov ecx, dword [ebp - 0xd34]
call fcn.00416b30
push eax
lea ecx, [ebp - 0xcec]
push ecx
lea edx, [ebp - 0xcf0]
push edx
lea ecx, [ebp - 0x10]
call fcn.00416930
mov dword [ebp - 0xd38], eax
mov eax, dword [ebp - 0xd38]
mov dword [ebp - 0xd3c], eax
mov byte [ebp - 4], 0xd
mov ecx, dword [ebp - 0xd3c]
push ecx
mov edx, dword [ebp - 0x688]
add edx, 1
push edx
lea eax, [ebp - 0xcf4]
push eax
call fcn.0042a6b0
add esp, 8
mov dword [ebp - 0xd40], eax
mov ecx, dword [ebp - 0xd40]
mov dword [ebp - 0xd44], ecx
mov byte [ebp - 4], 0xe
mov ecx, dword [ebp - 0xd44]
call fcn.00416b30
push eax
call fcn.0042c9d0
add esp, 0x10
movzx edx, al
neg edx
sbb edx, edx
add edx, 1
mov byte [ebp - 0xcd9], dl
mov byte [ebp - 4], 0xd
lea ecx, [ebp - 0xcf4]
call fcn.004168d0
mov byte [ebp - 4], 0xc
lea ecx, [ebp - 0xcf0]
call fcn.004168d0
mov byte [ebp - 4], 0xb
lea ecx, [ebp - 0xce8]
call fcn.004168d0
mov byte [ebp - 4], 0xa
lea ecx, [ebp - 0xce4]
call fcn.004168d0
mov byte [ebp - 4], 9
lea ecx, [ebp - 0xcec]
call fcn.004168d0
mov byte [ebp - 4], 5
lea ecx, [ebp - 0xce0]
call fcn.004168d0
movzx eax, byte [ebp - 0xcd9]
test eax, eax
je 0x42d167
jmp 0x42d16c
jmp 0x42cfd8
push 0x45e070
lea ecx, [ebp - 0xcf8]
call fcn.00416830
mov byte [ebp - 4], 0xf
lea ecx, [ebp - 0xcf8]
push ecx
lea edx, [ebp - 0xcfc]
push edx
lea ecx, [ebp - 0x10]
call fcn.00416930
mov dword [ebp - 0xd48], eax
mov eax, dword [ebp - 0xd48]
mov dword [ebp - 0xd4c], eax
mov byte [ebp - 4], 0x10
mov ecx, dword [ebp - 0xd4c]
call fcn.00416b30
push eax
push 0
push 0
mov ecx, dword [ebp - 0x688]
push ecx
lea edx, [ebp - 0xd00]
push edx
call fcn.0042a6b0
add esp, 8
mov dword [ebp - 0xd50], eax
mov ecx, dword [ebp - 0xd50]
call fcn.00416b30
push eax
call dword [sym.imp.KERNEL32.dll_WritePrivateProfileStringW]
lea ecx, [ebp - 0xd00]
call fcn.004168d0
mov byte [ebp - 4], 0xf
lea ecx, [ebp - 0xcfc]
call fcn.004168d0
mov byte [ebp - 4], 5
lea ecx, [ebp - 0xcf8]
call fcn.004168d0
mov byte [ebp - 4], 0
lea ecx, [ebp - 0x68c]
call fcn.004168d0
mov dword [ebp - 0xd04], 0
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x10]
call fcn.004168d0
mov eax, dword [ebp - 0xd04]
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
mov ecx, dword [ebp - 0x20]
xor ecx, ebp
call fcn.004376f1
mov esp, ebp
pop ebp
ret