Function at 0x4860d0
Capabilities:
Delete registry value
Persist via run registry key
Query or enumerate registry value
Read .ini file
Read file on windows
Set registry value

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x569872
mov eax, dword fs:[0]
push eax
mov eax, 0x38f8
call fcn.00528110
mov eax, dword [0x5c5ebc]
xor eax, ebp
mov dword [ebp - 0x10], eax
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov dword [ebp - 0x38dc], ecx
xor eax, eax
mov word [ebp - 0x2654], ax
push 0x2000
push 0
lea ecx, [ebp - 0x2652]
push ecx
call fcn.005281f0
add esp, 0xc
xor edx, edx
mov word [ebp - 0x224], dx
push 0x208
push 0
lea eax, [ebp - 0x222]
push eax
call fcn.005281f0
add esp, 0xc
push 0x105
lea ecx, [ebp - 0x224]
push ecx
push 0
call dword [sym.imp.KERNEL32.dll_GetModuleFileNameW]
lea edx, [ebp - 0x224]
push edx
call dword [sym.imp.SHLWAPI.dll_PathRemoveFileSpecW]
lea eax, [ebp - 0x224]
push eax
lea ecx, [ebp - 0x2658]
call fcn.00415da0
mov dword [ebp - 4], 0
push 0x583c68
lea ecx, [ebp - 0x2658]
call fcn.00424520
xor ecx, ecx
mov word [ebp - 0x644], cx
push 0x208
push 0
lea edx, [ebp - 0x642]
push edx
call fcn.005281f0
add esp, 0xc
lea eax, [ebp - 0x224]
push eax
push 0x583c6c
lea ecx, [ebp - 0x644]
push ecx
call fcn.00527b98
add esp, 0xc
lea edx, [ebp - 0x644]
push edx
push 0x1000
lea eax, [ebp - 0x2654]
push eax
push 0x583c8c
push 0x583c94
push 0x583ca8
call dword [sym.imp.KERNEL32.dll_GetPrivateProfileStringW]
lea ecx, [ebp - 0x2654]
push ecx
call fcn.00527fd0
add esp, 4
mov edx, dword [ebp - 0x38dc]
mov dword [edx + 0x28e0], eax
lea eax, [ebp - 0x644]
push eax
push 0x1000
lea ecx, [ebp - 0x2654]
push ecx
push 0x583cb4
push 0x583cbc
push 0x583cd0
call dword [sym.imp.KERNEL32.dll_GetPrivateProfileStringW]
lea edx, [ebp - 0x2654]
push edx
call fcn.00527fd0
add esp, 4
mov ecx, dword [ebp - 0x38dc]
mov dword [ecx + 0x28e4], eax
lea edx, [ebp - 0x644]
push edx
push 0
push str.AntiSpamRBL
push 0x583cf4
call dword [sym.imp.KERNEL32.dll_GetPrivateProfileIntW]
mov ecx, dword [ebp - 0x38dc]
mov dword [ecx + 0x28e8], eax
lea edx, [ebp - 0x644]
push edx
push 0x1000
mov eax, dword [ebp - 0x38dc]
add eax, 0x68
push eax
push 0x583d00
push 0x583d04
push 0x583d20
call dword [sym.imp.KERNEL32.dll_GetPrivateProfileStringW]
lea ecx, [ebp - 0x644]
push ecx
push 0x1000
lea edx, [ebp - 0x2654]
push edx
push 0x583d2c
push 0x583d30
push 0x583d44
call dword [sym.imp.KERNEL32.dll_GetPrivateProfileStringW]
lea eax, [ebp - 0x2654]
push eax
mov ecx, dword [ebp - 0x38dc]
add ecx, 0x868
push ecx
call fcn.005282c4
add esp, 8
lea edx, [ebp - 0x644]
push edx
push 0x1000
lea eax, [ebp - 0x2654]
push eax
push 0x583d50
push 0x583d54
push 0x583d68
call dword [sym.imp.KERNEL32.dll_GetPrivateProfileStringW]
lea ecx, [ebp - 0x2654]
push ecx
call fcn.0042da50
add esp, 4
lea edx, [ebp - 0x2654]
push edx
mov eax, dword [ebp - 0x38dc]
add eax, 0x1068
push eax
call fcn.005282c4
add esp, 8
lea ecx, [ebp - 0x644]
push ecx
push 0x1000
lea edx, [ebp - 0x2654]
push edx
push 0x583d74
push 0x583d7c
push 0x583d94
call dword [sym.imp.KERNEL32.dll_GetPrivateProfileStringW]
lea eax, [ebp - 0x2654]
push eax
call fcn.00527fd0
add esp, 4
mov ecx, dword [ebp - 0x38dc]
mov dword [ecx + 0x186c], eax
lea edx, [ebp - 0x644]
push edx
push 0x1000
lea eax, [ebp - 0x2654]
push eax
push 0x583da0
push 0x583da4
push 0x583dc4
call dword [sym.imp.KERNEL32.dll_GetPrivateProfileStringW]
lea ecx, [ebp - 0x2654]
push ecx
call fcn.00527fd0
add esp, 4
mov edx, dword [ebp - 0x38dc]
mov dword [edx + 0x1868], eax
lea eax, [ebp - 0x644]
push eax
push 0x1000
lea ecx, [ebp - 0x2654]
push ecx
push 0x583dd0
push 0x583dd4
push 0x583de8
call dword [sym.imp.KERNEL32.dll_GetPrivateProfileStringW]
lea edx, [ebp - 0x2654]
push edx
call fcn.00527fd0
add esp, 4
mov ecx, dword [ebp - 0x38dc]
mov dword [ecx + 0x1870], eax
lea edx, [ebp - 0x644]
push edx
push 0x1000
lea eax, [ebp - 0x2654]
push eax
push 0x583df4
push 0x583df8
push 0x583e00
call dword [sym.imp.KERNEL32.dll_GetPrivateProfileStringW]
lea ecx, [ebp - 0x2654]
push ecx
call fcn.00527fd0
add esp, 4
mov edx, dword [ebp - 0x38dc]
mov dword [edx + 0x187c], eax
lea eax, [ebp - 0x644]
push eax
push 0x1000
lea ecx, [ebp - 0x2654]
push ecx
push 0x583e0c
push 0x583e10
push 0x583e1c
call dword [sym.imp.KERNEL32.dll_GetPrivateProfileStringW]
lea edx, [ebp - 0x2654]
push edx
call fcn.00527fd0
add esp, 4
mov ecx, dword [ebp - 0x38dc]
mov dword [ecx + 0x1880], eax
lea edx, [ebp - 0x644]
push edx
push 0x1000
lea eax, [ebp - 0x2654]
push eax
push 0x583e28
push 0x583e2c
push 0x583e34
call dword [sym.imp.KERNEL32.dll_GetPrivateProfileStringW]
lea ecx, [ebp - 0x2654]
push ecx
call fcn.00527fd0
add esp, 4
mov edx, dword [ebp - 0x38dc]
mov dword [edx + 0x1884], eax
lea eax, [ebp - 0x644]
push eax
push 0x1000
lea ecx, [ebp - 0x2654]
push ecx
push 0x583e40
push 0x583e44
push 0x583e54
call dword [sym.imp.KERNEL32.dll_GetPrivateProfileStringW]
lea edx, [ebp - 0x2654]
push edx
call fcn.00527fd0
add esp, 4
mov ecx, dword [ebp - 0x38dc]
mov dword [ecx + 0x1888], eax
lea edx, [ebp - 0x644]
push edx
push 0x1000
lea eax, [ebp - 0x2654]
push eax
push 0x583e60
push 0x583e64
push 0x583e74
call dword [sym.imp.KERNEL32.dll_GetPrivateProfileStringW]
lea ecx, [ebp - 0x2654]
push ecx
call fcn.00527fd0
add esp, 4
mov edx, dword [ebp - 0x38dc]
mov dword [edx + 0x188c], eax
lea eax, [ebp - 0x644]
push eax
push 0x1000
lea ecx, [ebp - 0x2654]
push ecx
push 0x583e80
push 0x583e84
push 0x583e90
call dword [sym.imp.KERNEL32.dll_GetPrivateProfileStringW]
lea edx, [ebp - 0x2654]
push edx
call fcn.00527fd0
add esp, 4
mov ecx, dword [ebp - 0x38dc]
mov dword [ecx + 0x1890], eax
lea edx, [ebp - 0x644]
push edx
push 0x1000
lea eax, [ebp - 0x2654]
push eax
push 0x583e9c
push 0x583ea0
push 0x583eac
call dword [sym.imp.KERNEL32.dll_GetPrivateProfileStringW]
lea ecx, [ebp - 0x2654]
push ecx
call fcn.00527fd0
add esp, 4
mov edx, dword [ebp - 0x38dc]
mov dword [edx + 0x1894], eax
lea eax, [ebp - 0x644]
push eax
push 0x1000
lea ecx, [ebp - 0x2654]
push ecx
push 0x583eb8
push 0x583ebc
push 0x583edc
call dword [sym.imp.KERNEL32.dll_GetPrivateProfileStringW]
lea edx, [ebp - 0x2654]
push edx
call fcn.00527fd0
add esp, 4
mov ecx, dword [ebp - 0x38dc]
mov dword [ecx + 0x1874], eax
lea edx, [ebp - 0x644]
push edx
push 0x1000
lea eax, [ebp - 0x2654]
push eax
push 0x583ee8
push 0x583eec
push 0x583f1c
call dword [sym.imp.KERNEL32.dll_GetPrivateProfileStringW]
lea ecx, [ebp - 0x2654]
push ecx
call fcn.00527fd0
add esp, 4
mov edx, dword [ebp - 0x38dc]
mov dword [edx + 0x1878], eax
lea eax, [ebp - 0x644]
push eax
push 0x1000
lea ecx, [ebp - 0x2654]
push ecx
push 0x583f28
push 0x583f2c
push 0x583f48
call dword [sym.imp.KERNEL32.dll_GetPrivateProfileStringW]
mov edx, dword [ebp - 0x38dc]
mov dword [edx + 0x54], 0
lea eax, [ebp - 0x644]
push eax
push 0x1000
lea ecx, [ebp - 0x2654]
push ecx
push 0x583f54
push 0x583f5c
push 0x583f78
call dword [sym.imp.KERNEL32.dll_GetPrivateProfileStringW]
lea edx, [ebp - 0x2654]
push edx
call fcn.00527fd0
add esp, 4
mov ecx, dword [ebp - 0x38dc]
mov dword [ecx + 0x58], eax
mov edx, dword [ebp - 0x38dc]
mov dword [edx + 0x50], 0
lea eax, [ebp - 0x644]
push eax
push 0x1000
lea ecx, [ebp - 0x2654]
push ecx
push 0x583f84
push 0x583f88
push 0x583fa0
call dword [sym.imp.KERNEL32.dll_GetPrivateProfileStringW]
lea edx, [ebp - 0x2654]
push edx
call fcn.00527fd0
add esp, 4
test eax, eax
je 0x486754
lea eax, [ebp - 0x644]
push eax
push 0x1000
lea ecx, [ebp - 0x2654]
push ecx
push 0x583fb0
push 0x583fb4
push 0x583fc8
call dword [sym.imp.KERNEL32.dll_GetPrivateProfileStringW]
lea edx, [ebp - 0x2654]
push edx
call fcn.00527fd0
add esp, 4
mov ecx, dword [ebp - 0x38dc]
mov dword [ecx + 0x50], eax
lea edx, [ebp - 0x644]
push edx
push 0x1000
lea eax, [ebp - 0x2654]
push eax
push 0x583fd8
push 0x583fe0
push 0x58400c
call dword [sym.imp.KERNEL32.dll_GetPrivateProfileStringW]
lea ecx, [ebp - 0x2654]
push ecx
call fcn.00527fd0
add esp, 4
mov edx, dword [ebp - 0x38dc]
mov dword [edx + 0x5c], eax
lea eax, [ebp - 0x644]
push eax
push 0x1000
lea ecx, [ebp - 0x2654]
push ecx
push 0x58401c
push 0x584024
push 0x584038
call dword [sym.imp.KERNEL32.dll_GetPrivateProfileStringW]
lea edx, [ebp - 0x2654]
push edx
call fcn.00527fd0
add esp, 4
mov ecx, dword [ebp - 0x38dc]
mov dword [ecx + 0x60], eax
lea edx, [ebp - 0x644]
push edx
push 0x1000
lea eax, [ebp - 0x2654]
push eax
push 0x584048
push 0x58404c
push 0x58406c
call dword [sym.imp.KERNEL32.dll_GetPrivateProfileStringW]
lea ecx, [ebp - 0x2654]
push ecx
call fcn.00527fd0
add esp, 4
mov edx, dword [ebp - 0x38dc]
mov dword [edx + 0x28ec], eax
lea eax, [ebp - 0x644]
push eax
push 0x1000
lea ecx, [ebp - 0x2654]
push ecx
push 0x58407c
push 0x584080
push 0x584094
call dword [sym.imp.KERNEL32.dll_GetPrivateProfileStringW]
lea edx, [ebp - 0x2654]
push edx
mov eax, dword [ebp - 0x38dc]
add eax, 0x28f0
push eax
call fcn.005282c4
add esp, 8
lea ecx, [ebp - 0x644]
push ecx
push 0x1000
lea edx, [ebp - 0x2654]
push edx
push 0x5840b4
push 0x5840c0
push 0x5840d4
call dword [sym.imp.KERNEL32.dll_GetPrivateProfileStringW]
lea eax, [ebp - 0x2654]
push eax
mov ecx, dword [ebp - 0x38dc]
add ecx, 0x30f0
push ecx
call fcn.005282c4
add esp, 8
lea edx, [ebp - 0x644]
push edx
push 0x1000
lea eax, [ebp - 0x2654]
push eax
push 0x5840f4
push 0x5840fc
push 0x584108
call dword [sym.imp.KERNEL32.dll_GetPrivateProfileStringW]
lea ecx, [ebp - 0x2654]
push ecx
call fcn.00527fd0
add esp, 4
mov edx, dword [ebp - 0x38dc]
mov dword [edx + 0x38f0], eax
lea eax, [ebp - 0x644]
push eax
push 0x1000
lea ecx, [ebp - 0x2654]
push ecx
push 0x584128
push 0x58412c
push 0x584140
call dword [sym.imp.KERNEL32.dll_GetPrivateProfileStringW]
lea edx, [ebp - 0x2654]
push edx
call fcn.00527fd0
add esp, 4
mov ecx, dword [ebp - 0x38dc]
mov dword [ecx + 0x38f4], eax
lea edx, [ebp - 0x644]
push edx
push 0x1000
lea eax, [ebp - 0x2654]
push eax
push 0x584160
push 0x584164
push 0x584178
call dword [sym.imp.KERNEL32.dll_GetPrivateProfileStringW]
lea ecx, [ebp - 0x2654]
push ecx
mov edx, dword [ebp - 0x38dc]
add edx, 0x38f8
push edx
call fcn.005282c4
add esp, 8
lea eax, [ebp - 0x644]
push eax
push 0x1000
lea ecx, [ebp - 0x2654]
push ecx
push 0x584198
push 0x58419c
push 0x5841b0
call dword [sym.imp.KERNEL32.dll_GetPrivateProfileStringW]
lea edx, [ebp - 0x2654]
push edx
call fcn.0042da50
add esp, 4
lea eax, [ebp - 0x2654]
push eax
mov ecx, dword [ebp - 0x38dc]
add ecx, 0x40f8
push ecx
call fcn.005282c4
add esp, 8
lea edx, [ebp - 0x644]
push edx
push 0x1000
lea eax, [ebp - 0x2654]
push eax
push 0x5841d0
push 0x5841dc
push 0x5841f4
call dword [sym.imp.KERNEL32.dll_GetPrivateProfileStringW]
lea ecx, [ebp - 0x2654]
push ecx
mov ecx, dword [ebp - 0x38dc]
add ecx, 0x48f8
call fcn.00415e60
lea edx, [ebp - 0x644]
push edx
push 0x1000
lea eax, [ebp - 0x2654]
push eax
push 0x584214
push 0x584218
push 0x584228
call dword [sym.imp.KERNEL32.dll_GetPrivateProfileStringW]
lea ecx, [ebp - 0x2654]
push ecx
mov ecx, dword [ebp - 0x38dc]
add ecx, 0x48fc
call fcn.00415e60
lea edx, [ebp - 0x644]
push edx
push 0x1000
lea eax, [ebp - 0x2654]
push eax
push 0x584248
push 0x58424c
push 0x584268
call dword [sym.imp.KERNEL32.dll_GetPrivateProfileStringW]
lea ecx, [ebp - 0x2654]
push ecx
call fcn.00527fd0
add esp, 4
mov edx, dword [ebp - 0x38dc]
mov dword [edx + 0x4900], eax
lea eax, [ebp - 0x644]
push eax
push 0x1000
lea ecx, [ebp - 0x2654]
push ecx
push 0x584288
push 0x58428c
push 0x5842a8
call dword [sym.imp.KERNEL32.dll_GetPrivateProfileStringW]
lea edx, [ebp - 0x2654]
push edx
mov eax, dword [ebp - 0x38dc]
add eax, 0x4914
push eax
call fcn.005282c4
add esp, 8
lea ecx, [ebp - 0x644]
push ecx
push 0x1000
lea edx, [ebp - 0x2654]
push edx
push 0x5842c8
push 0x5842d4
push 0x5842ec
call dword [sym.imp.KERNEL32.dll_GetPrivateProfileStringW]
lea eax, [ebp - 0x2654]
push eax
mov ecx, dword [ebp - 0x38dc]
add ecx, 0x7114
push ecx
call fcn.005282c4
add esp, 8
lea edx, [ebp - 0x644]
push edx
push 0x1000
lea eax, [ebp - 0x2654]
push eax
push 0x58430c
push 0x584314
push 0x584324
call dword [sym.imp.KERNEL32.dll_GetPrivateProfileStringW]
lea ecx, [ebp - 0x2654]
push ecx
call fcn.00527fd0
add esp, 4
mov edx, dword [ebp - 0x38dc]
mov dword [edx + 0x9914], eax
lea eax, [ebp - 0x644]
push eax
push 0x1000
lea ecx, [ebp - 0x2654]
push ecx
push 0x584344
push 0x584348
push 0x584360
call dword [sym.imp.KERNEL32.dll_GetPrivateProfileStringW]
lea edx, [ebp - 0x2654]
push edx
call fcn.00527fd0
add esp, 4
mov ecx, dword [ebp - 0x38dc]
mov dword [ecx + 0x9928], eax
lea edx, [ebp - 0x644]
push edx
push 0x1000
lea eax, [ebp - 0x2654]
push eax
push 0x584380
push 0x584384
push 0x58439c
call dword [sym.imp.KERNEL32.dll_GetPrivateProfileStringW]
lea ecx, [ebp - 0x2654]
push ecx
mov edx, dword [ebp - 0x38dc]
add edx, 0x993c
push edx
call fcn.005282c4
add esp, 8
lea eax, [ebp - 0x644]
push eax
push 0x1000
lea ecx, [ebp - 0x2654]
push ecx
push 0x5843bc
push 0x5843c0
push 0x5843d8
call dword [sym.imp.KERNEL32.dll_GetPrivateProfileStringW]
lea edx, [ebp - 0x2654]
push edx
call fcn.0042da50
add esp, 4
lea eax, [ebp - 0x2654]
push eax
mov ecx, dword [ebp - 0x38dc]
add ecx, 0xc13c
push ecx
call fcn.005282c4
add esp, 8
lea edx, [ebp - 0x644]
push edx
push 0x1000
lea eax, [ebp - 0x2654]
push eax
push 0x5843f8
push 0x584404
push 0x584420
call dword [sym.imp.KERNEL32.dll_GetPrivateProfileStringW]
lea ecx, [ebp - 0x2654]
push ecx
mov ecx, dword [ebp - 0x38dc]
add ecx, 0xe93c
call fcn.00415e60
lea edx, [ebp - 0x644]
push edx
push 0x1000
lea eax, [ebp - 0x2654]
push eax
push 0x584440
push 0x584444
push 0x584458
call dword [sym.imp.KERNEL32.dll_GetPrivateProfileStringW]
lea ecx, [ebp - 0x2654]
push ecx
mov ecx, dword [ebp - 0x38dc]
add ecx, 0xe950
call fcn.00415e60
lea edx, [ebp - 0x644]
push edx
push 0x1000
lea eax, [ebp - 0x2654]
push eax
push 0x584478
push 0x58447c
push 0x58449c
call dword [sym.imp.KERNEL32.dll_GetPrivateProfileStringW]
lea ecx, [ebp - 0x2654]
push ecx
call fcn.00527fd0
add esp, 4
mov edx, dword [ebp - 0x38dc]
mov dword [edx + 0x4904], eax
lea eax, [ebp - 0x644]
push eax
push 0x1000
lea ecx, [ebp - 0x2654]
push ecx
push 0x5844bc
push 0x5844c0
push 0x5844e0
call dword [sym.imp.KERNEL32.dll_GetPrivateProfileStringW]
lea edx, [ebp - 0x2654]
push edx
mov eax, dword [ebp - 0x38dc]
add eax, 0x5114
push eax
call fcn.005282c4
add esp, 8
lea ecx, [ebp - 0x644]
push ecx
push 0x1000
lea edx, [ebp - 0x2654]
push edx
push 0x584500
push 0x58450c
push 0x584528
call dword [sym.imp.KERNEL32.dll_GetPrivateProfileStringW]
lea eax, [ebp - 0x2654]
push eax
mov ecx, dword [ebp - 0x38dc]
add ecx, 0x7914
push ecx
call fcn.005282c4
add esp, 8
lea edx, [ebp - 0x644]
push edx
push 0x1000
lea eax, [ebp - 0x2654]
push eax
push 0x584548
push 0x584550
push 0x584564
call dword [sym.imp.KERNEL32.dll_GetPrivateProfileStringW]
lea ecx, [ebp - 0x2654]
push ecx
call fcn.00527fd0
add esp, 4
mov edx, dword [ebp - 0x38dc]
mov dword [edx + 0x9918], eax
lea eax, [ebp - 0x644]
push eax
push 0x1000
lea ecx, [ebp - 0x2654]
push ecx
push 0x584584
push 0x584588
push 0x5845a4
call dword [sym.imp.KERNEL32.dll_GetPrivateProfileStringW]
lea edx, [ebp - 0x2654]
push edx
call fcn.00527fd0
add esp, 4
mov ecx, dword [ebp - 0x38dc]
mov dword [ecx + 0x992c], eax
lea edx, [ebp - 0x644]
push edx
push 0x1000
lea eax, [ebp - 0x2654]
push eax
push 0x5845c4
push 0x5845c8
push 0x5845e4
call dword [sym.imp.KERNEL32.dll_GetPrivateProfileStringW]
lea ecx, [ebp - 0x2654]
push ecx
mov edx, dword [ebp - 0x38dc]
add edx, 0xa13c
push edx
call fcn.005282c4
add esp, 8
lea eax, [ebp - 0x644]
push eax
push 0x1000
lea ecx, [ebp - 0x2654]
push ecx
push 0x584604
push 0x584608
push 0x584624
call dword [sym.imp.KERNEL32.dll_GetPrivateProfileStringW]
lea edx, [ebp - 0x2654]
push edx
call fcn.0042da50
add esp, 4
lea eax, [ebp - 0x2654]
push eax
mov ecx, dword [ebp - 0x38dc]
add ecx, 0xc93c
push ecx
call fcn.005282c4
add esp, 8
lea edx, [ebp - 0x644]
push edx
push 0x1000
lea eax, [ebp - 0x2654]
push eax
push 0x584644
push 0x584650
push 0x584670
call dword [sym.imp.KERNEL32.dll_GetPrivateProfileStringW]
lea ecx, [ebp - 0x2654]
push ecx
mov ecx, dword [ebp - 0x38dc]
add ecx, 0xe940
call fcn.00415e60
lea edx, [ebp - 0x644]
push edx
push 0x1000
lea eax, [ebp - 0x2654]
push eax
push 0x584690
push 0x584694
push 0x5846ac
call dword [sym.imp.KERNEL32.dll_GetPrivateProfileStringW]
lea ecx, [ebp - 0x2654]
push ecx
mov ecx, dword [ebp - 0x38dc]
add ecx, 0xe954
call fcn.00415e60
lea edx, [ebp - 0x644]
push edx
push 0x1000
lea eax, [ebp - 0x2654]
push eax
push 0x5846cc
push 0x5846d0
push 0x5846ec
call dword [sym.imp.KERNEL32.dll_GetPrivateProfileStringW]
lea ecx, [ebp - 0x2654]
push ecx
call fcn.00527fd0
add esp, 4
mov edx, dword [ebp - 0x38dc]
mov dword [edx + 0x4908], eax
lea eax, [ebp - 0x644]
push eax
push 0x1000
lea ecx, [ebp - 0x2654]
push ecx
push 0x58470c
push 0x584710
push 0x58472c
call dword [sym.imp.KERNEL32.dll_GetPrivateProfileStringW]
lea edx, [ebp - 0x2654]
push edx
mov eax, dword [ebp - 0x38dc]
add eax, 0x5914
push eax
call fcn.005282c4
add esp, 8
lea ecx, [ebp - 0x644]
push ecx
push 0x1000
lea edx, [ebp - 0x2654]
push edx
push 0x58474c
push 0x584758
push 0x584774
call dword [sym.imp.KERNEL32.dll_GetPrivateProfileStringW]
lea eax, [ebp - 0x2654]
push eax
mov ecx, dword [ebp - 0x38dc]
add ecx, 0x8114
push ecx
call fcn.005282c4
add esp, 8
lea edx, [ebp - 0x644]
push edx
push 0x1000
lea eax, [ebp - 0x2654]
push eax
push 0x584794
push 0x58479c
push 0x5847b0
call dword [sym.imp.KERNEL32.dll_GetPrivateProfileStringW]
lea ecx, [ebp - 0x2654]
push ecx
call fcn.00527fd0
add esp, 4
mov edx, dword [ebp - 0x38dc]
mov dword [edx + 0x991c], eax
lea eax, [ebp - 0x644]
push eax
push 0x1000
lea ecx, [ebp - 0x2654]
push ecx
push 0x5847d0
push 0x5847d4
push 0x5847f0
call dword [sym.imp.KERNEL32.dll_GetPrivateProfileStringW]
lea edx, [ebp - 0x2654]
push edx
call fcn.00527fd0
add esp, 4
mov ecx, dword [ebp - 0x38dc]
mov dword [ecx + 0x9930], eax
lea edx, [ebp - 0x644]
push edx
push 0x1000
lea eax, [ebp - 0x2654]
push eax
push 0x584810
push 0x584814
push 0x584830
call dword [sym.imp.KERNEL32.dll_GetPrivateProfileStringW]
lea ecx, [ebp - 0x2654]
push ecx
mov edx, dword [ebp - 0x38dc]
add edx, 0xa93c
push edx
call fcn.005282c4
add esp, 8
lea eax, [ebp - 0x644]
push eax
push 0x1000
lea ecx, [ebp - 0x2654]
push ecx
push 0x584850
push 0x584854
push 0x584870
call dword [sym.imp.KERNEL32.dll_GetPrivateProfileStringW]
lea edx, [ebp - 0x2654]
push edx
call fcn.0042da50
add esp, 4
lea eax, [ebp - 0x2654]
push eax
mov ecx, dword [ebp - 0x38dc]
add ecx, 0xd13c
push ecx
call fcn.005282c4
add esp, 8
lea edx, [ebp - 0x644]
push edx
push 0x1000
lea eax, [ebp - 0x2654]
push eax
push 0x584890
push 0x58489c
push 0x5848bc
call dword [sym.imp.KERNEL32.dll_GetPrivateProfileStringW]
lea ecx, [ebp - 0x2654]
push ecx
mov ecx, dword [ebp - 0x38dc]
add ecx, 0xe944
call fcn.00415e60
lea edx, [ebp - 0x644]
push edx
push 0x1000
lea eax, [ebp - 0x2654]
push eax
push 0x5848dc
push 0x5848e0
push 0x5848f8
call dword [sym.imp.KERNEL32.dll_GetPrivateProfileStringW]
lea ecx, [ebp - 0x2654]
push ecx
mov ecx, dword [ebp - 0x38dc]
add ecx, 0xe958
call fcn.00415e60
lea edx, [ebp - 0x644]
push edx
push 0x1000
lea eax, [ebp - 0x2654]
push eax
push 0x584918
push 0x58491c
push 0x584938
call dword [sym.imp.KERNEL32.dll_GetPrivateProfileStringW]
lea ecx, [ebp - 0x2654]
push ecx
call fcn.00527fd0
add esp, 4
mov edx, dword [ebp - 0x38dc]
mov dword [edx + 0x490c], eax
lea eax, [ebp - 0x644]
push eax
push 0x1000
lea ecx, [ebp - 0x2654]
push ecx
push 0x584958
push 0x58495c
push 0x584978
call dword [sym.imp.KERNEL32.dll_GetPrivateProfileStringW]
lea edx, [ebp - 0x2654]
push edx
mov eax, dword [ebp - 0x38dc]
add eax, 0x6114
push eax
call fcn.005282c4
add esp, 8
lea ecx, [ebp - 0x644]
push ecx
push 0x1000
lea edx, [ebp - 0x2654]
push edx
push 0x584998
push 0x5849a4
push 0x5849c0
call dword [sym.imp.KERNEL32.dll_GetPrivateProfileStringW]
lea eax, [ebp - 0x2654]
push eax
mov ecx, dword [ebp - 0x38dc]
add ecx, 0x8914
push ecx
call fcn.005282c4
add esp, 8
lea edx, [ebp - 0x644]
push edx
push 0x1000
lea eax, [ebp - 0x2654]
push eax
push 0x5849e0
push 0x5849e8
push 0x5849fc
call dword [sym.imp.KERNEL32.dll_GetPrivateProfileStringW]
lea ecx, [ebp - 0x2654]
push ecx
call fcn.00527fd0
add esp, 4
mov edx, dword [ebp - 0x38dc]
mov dword [edx + 0x9920], eax
lea eax, [ebp - 0x644]
push eax
push 0x1000
lea ecx, [ebp - 0x2654]
push ecx
push 0x584a1c
push 0x584a20
push 0x584a3c
call dword [sym.imp.KERNEL32.dll_GetPrivateProfileStringW]
lea edx, [ebp - 0x2654]
push edx
call fcn.00527fd0
add esp, 4
mov ecx, dword [ebp - 0x38dc]
mov dword [ecx + 0x9934], eax
lea edx, [ebp - 0x644]
push edx
push 0x1000
lea eax, [ebp - 0x2654]
push eax
push 0x584a5c
push 0x584a60
push 0x584a7c
call dword [sym.imp.KERNEL32.dll_GetPrivateProfileStringW]
lea ecx, [ebp - 0x2654]
push ecx
mov edx, dword [ebp - 0x38dc]
add edx, 0xb13c
push edx
call fcn.005282c4
add esp, 8
lea eax, [ebp - 0x644]
push eax
push 0x1000
lea ecx, [ebp - 0x2654]
push ecx
push 0x584a9c
push 0x584aa0
push 0x584abc
call dword [sym.imp.KERNEL32.dll_GetPrivateProfileStringW]
lea edx, [ebp - 0x2654]
push edx
call fcn.0042da50
add esp, 4
lea eax, [ebp - 0x2654]
push eax
mov ecx, dword [ebp - 0x38dc]
add ecx, 0xd93c
push ecx
call fcn.005282c4
add esp, 8
lea edx, [ebp - 0x644]
push edx
push 0x1000
lea eax, [ebp - 0x2654]
push eax
push 0x584adc
push 0x584ae8
push 0x584b08
call dword [sym.imp.KERNEL32.dll_GetPrivateProfileStringW]
lea ecx, [ebp - 0x2654]
push ecx
mov ecx, dword [ebp - 0x38dc]
add ecx, 0xe948
call fcn.00415e60
lea edx, [ebp - 0x644]
push edx
push 0x1000
lea eax, [ebp - 0x2654]
push eax
push 0x584b28
push 0x584b2c
push 0x584b44
call dword [sym.imp.KERNEL32.dll_GetPrivateProfileStringW]
lea ecx, [ebp - 0x2654]
push ecx
mov ecx, dword [ebp - 0x38dc]
add ecx, 0xe95c
call fcn.00415e60
lea edx, [ebp - 0x644]
push edx
push 0x1000
lea eax, [ebp - 0x2654]
push eax
push 0x584b64
push 0x584b68
push 0x584b88
call dword [sym.imp.KERNEL32.dll_GetPrivateProfileStringW]
lea ecx, [ebp - 0x2654]
push ecx
call fcn.00527fd0
add esp, 4
mov edx, dword [ebp - 0x38dc]
mov dword [edx + 0x4910], eax
lea eax, [ebp - 0x644]
push eax
push 0x1000
lea ecx, [ebp - 0x2654]
push ecx
push 0x584ba8
push 0x584bac
push 0x584bcc
call dword [sym.imp.KERNEL32.dll_GetPrivateProfileStringW]
lea edx, [ebp - 0x2654]
push edx
mov eax, dword [ebp - 0x38dc]
add eax, 0x6914
push eax
call fcn.005282c4
add esp, 8
lea ecx, [ebp - 0x644]
push ecx
push 0x1000
lea edx, [ebp - 0x2654]
push edx
push 0x584bec
push 0x584bf8
push 0x584c18
call dword [sym.imp.KERNEL32.dll_GetPrivateProfileStringW]
lea eax, [ebp - 0x2654]
push eax
mov ecx, dword [ebp - 0x38dc]
add ecx, 0x9114
push ecx
call fcn.005282c4
add esp, 8
lea edx, [ebp - 0x644]
push edx
push 0x1000
lea eax, [ebp - 0x2654]
push eax
push 0x584c38
push 0x584c40
push 0x584c58
call dword [sym.imp.KERNEL32.dll_GetPrivateProfileStringW]
lea ecx, [ebp - 0x2654]
push ecx
call fcn.00527fd0
add esp, 4
mov edx, dword [ebp - 0x38dc]
mov dword [edx + 0x9924], eax
lea eax, [ebp - 0x644]
push eax
push 0x1000
lea ecx, [ebp - 0x2654]
push ecx
push 0x584c78
push 0x584c7c
push 0x584c9c
call dword [sym.imp.KERNEL32.dll_GetPrivateProfileStringW]
lea edx, [ebp - 0x2654]
push edx
call fcn.00527fd0
add esp, 4
mov ecx, dword [ebp - 0x38dc]
mov dword [ecx + 0x9938], eax
lea edx, [ebp - 0x644]
push edx
push 0x1000
lea eax, [ebp - 0x2654]
push eax
push 0x584cbc
push 0x584cc0
push 0x584ce0
call dword [sym.imp.KERNEL32.dll_GetPrivateProfileStringW]
lea ecx, [ebp - 0x2654]
push ecx
mov edx, dword [ebp - 0x38dc]
add edx, 0xb93c
push edx
call fcn.005282c4
add esp, 8
lea eax, [ebp - 0x644]
push eax
push 0x1000
lea ecx, [ebp - 0x2654]
push ecx
push 0x584d00
push 0x584d04
push 0x584d24
call dword [sym.imp.KERNEL32.dll_GetPrivateProfileStringW]
lea edx, [ebp - 0x2654]
push edx
call fcn.0042da50
add esp, 4
lea eax, [ebp - 0x2654]
push eax
mov ecx, dword [ebp - 0x38dc]
add ecx, 0xe13c
push ecx
call fcn.005282c4
add esp, 8
lea edx, [ebp - 0x644]
push edx
push 0x1000
lea eax, [ebp - 0x2654]
push eax
push str.Basic
push 0x584d50
push 0x584d74
call dword [sym.imp.KERNEL32.dll_GetPrivateProfileStringW]
lea ecx, [ebp - 0x2654]
push ecx
mov ecx, dword [ebp - 0x38dc]
add ecx, 0xe94c
call fcn.00415e60
lea edx, [ebp - 0x644]
push edx
push 0x1000
lea eax, [ebp - 0x2654]
push eax
push 0x584d94
push 0x584d98
push 0x584db4
call dword [sym.imp.KERNEL32.dll_GetPrivateProfileStringW]
lea ecx, [ebp - 0x2654]
push ecx
mov ecx, dword [ebp - 0x38dc]
add ecx, 0xe960
call fcn.00415e60
lea edx, [ebp - 0x644]
push edx
push 0x1000
lea eax, [ebp - 0x2654]
push eax
push 0x584dd4
push 0x584dd8
push 0x584dec
call dword [sym.imp.KERNEL32.dll_GetPrivateProfileStringW]
lea ecx, [ebp - 0x2654]
push ecx
call fcn.00527fd0
add esp, 4
mov edx, dword [ebp - 0x38dc]
mov dword [edx + 0xe964], eax
lea eax, [ebp - 0x224]
push eax
push str._sLog
lea ecx, [ebp - 0x2654]
push ecx
call fcn.00527b98
add esp, 0xc
lea edx, [ebp - 0x644]
push edx
push 0x1000
lea eax, [ebp - 0x2654]
push eax
lea ecx, [ebp - 0x2654]
push ecx
push 0x584e04
push 0x584e14
call dword [sym.imp.KERNEL32.dll_GetPrivateProfileStringW]
lea edx, [ebp - 0x2654]
push edx
mov eax, dword [ebp - 0x38dc]
add eax, 0xe968
push eax
call fcn.005282c4
add esp, 8
lea ecx, [ebp - 0x644]
push ecx
push 0x1000
lea edx, [ebp - 0x2654]
push edx
push 0x584e1c
push 0x584e20
push 0x584e38
call dword [sym.imp.KERNEL32.dll_GetPrivateProfileStringW]
lea eax, [ebp - 0x2654]
push eax
call fcn.00527fd0
add esp, 4
mov ecx, dword [ebp - 0x38dc]
mov dword [ecx + 0xf168], eax
lea edx, [ebp - 0x644]
push edx
push 0x1000
lea eax, [ebp - 0x2654]
push eax
push 0x584e40
push 0x584e44
push 0x584e54
call dword [sym.imp.KERNEL32.dll_GetPrivateProfileStringW]
lea ecx, [ebp - 0x2654]
push ecx
call fcn.00527fd0
add esp, 4
mov edx, dword [ebp - 0x38dc]
mov dword [edx + 0xf16c], eax
lea eax, [ebp - 0x644]
push eax
push 0x1000
lea ecx, [ebp - 0x2654]
push ecx
push str.10000
push 0x584e68
push 0x584e78
call dword [sym.imp.KERNEL32.dll_GetPrivateProfileStringW]
lea edx, [ebp - 0x2654]
push edx
call fcn.00527fd0
add esp, 4
mov ecx, dword [ebp - 0x38dc]
mov dword [ecx + 0xf170], eax
lea edx, [ebp - 0x644]
push edx
push 0x1000
lea eax, [ebp - 0x2654]
push eax
push 0x584e80
push 0x584e84
push 0x584e9c
call dword [sym.imp.KERNEL32.dll_GetPrivateProfileStringW]
lea ecx, [ebp - 0x2654]
push ecx
call fcn.00527fd0
add esp, 4
mov edx, dword [ebp - 0x38dc]
mov dword [edx + 0xf178], eax
lea eax, [ebp - 0x644]
push eax
push 0x1000
lea ecx, [ebp - 0x2654]
push ecx
push 0x584ea4
push 0x584eac
push 0x584ec4
call dword [sym.imp.KERNEL32.dll_GetPrivateProfileStringW]
lea edx, [ebp - 0x2654]
push edx
call fcn.00527fd0
add esp, 4
mov ecx, dword [ebp - 0x38dc]
mov dword [ecx + 0xf174], eax
lea edx, [ebp - 0x644]
push edx
push 0x1000
lea eax, [ebp - 0x2654]
push eax
push 0x584ecc
push 0x584edc
push 0x584ef0
call dword [sym.imp.KERNEL32.dll_GetPrivateProfileStringW]
lea ecx, [ebp - 0x2654]
push ecx
mov edx, dword [ebp - 0x38dc]
add edx, 0x20a8
push edx
call fcn.005282c4
add esp, 8
lea eax, [ebp - 0x644]
push eax
push 0x1000
lea ecx, [ebp - 0x2654]
push ecx
push 0x584f00
push 0x584f04
push 0x584f28
call dword [sym.imp.KERNEL32.dll_GetPrivateProfileStringW]
lea edx, [ebp - 0x2654]
push edx
call fcn.0052bc3d
add esp, 4
fmul qword [0x575e58]
call fcn.0052b8a0
mov ecx, dword [ebp - 0x38dc]
mov dword [ecx + 0xfd94], eax
lea edx, [ebp - 0x644]
push edx
push 0x1000
lea eax, [ebp - 0x2654]
push eax
push 0x584f38
push 0x584f3c
push 0x584f5c
call dword [sym.imp.KERNEL32.dll_GetPrivateProfileStringW]
lea ecx, [ebp - 0x2654]
push ecx
call fcn.00527fd0
add esp, 4
mov edx, dword [ebp - 0x38dc]
mov dword [edx + 0x18a0], eax
lea eax, [ebp - 0x644]
push eax
push 0x1000
lea ecx, [ebp - 0x2654]
push ecx
push 0x584f6c
push 0x584f70
push 0x584fa0
call dword [sym.imp.KERNEL32.dll_GetPrivateProfileStringW]
lea edx, [ebp - 0x2654]
push edx
call fcn.00527fd0
add esp, 4
mov ecx, dword [ebp - 0x38dc]
mov dword [ecx + 0x18a4], eax
lea edx, [ebp - 0x644]
push edx
push 0x1000
lea eax, [ebp - 0x2654]
push eax
push 0x584fb0
push 0x584fb4
push 0x584fc8
call dword [sym.imp.KERNEL32.dll_GetPrivateProfileStringW]
lea ecx, [ebp - 0x2654]
push ecx
call fcn.0042da50
add esp, 4
lea edx, [ebp - 0x2654]
push edx
mov eax, dword [ebp - 0x38dc]
add eax, 0x18a8
push eax
call fcn.005282c4
add esp, 8
lea ecx, [ebp - 0x644]
push ecx
push 0x1000
lea edx, [ebp - 0x2654]
push edx
push 0x584fd8
push 0x584fdc
push 0x585004
call dword [sym.imp.KERNEL32.dll_GetPrivateProfileStringW]
lea eax, [ebp - 0x2654]
push eax
call fcn.00527fd0
add esp, 4
mov ecx, dword [ebp - 0x38dc]
mov dword [ecx + 0xf18c], eax
lea edx, [ebp - 0x644]
push edx
push 0x1000
lea eax, [ebp - 0x2654]
push eax
push str.www.yahoo.com_www.icq.com_www.internic.net
push 0x585070
push 0x58509c
call dword [sym.imp.KERNEL32.dll_GetPrivateProfileStringW]
lea ecx, [ebp - 0x2654]
push ecx
mov edx, dword [ebp - 0x38dc]
add edx, 0xfd9c
push edx
call fcn.005282c4
add esp, 8
lea eax, [ebp - 0x644]
push eax
push 0
push str.AutoStartup
push 0x5850c4
call dword [sym.imp.KERNEL32.dll_GetPrivateProfileIntW]
mov ecx, dword [ebp - 0x38dc]
mov dword [ecx + 0x1898], eax
lea edx, [ebp - 0x648]
push edx
push 0xf003f
push 0
push 0x5850d8
push reloc.WS2_32.dll_accept
call dword [sym.imp.ADVAPI32.dll_RegOpenKeyExW]
test eax, eax
jne 0x487b78
xor eax, eax
mov word [ebp - 0x2e5c], ax
push 0x7fe
push 0
lea ecx, [ebp - 0x2e5a]
push ecx
call fcn.005281f0
add esp, 0xc
mov dword [ebp - 0x265c], 0x800
lea edx, [ebp - 0x265c]
push edx
lea eax, [ebp - 0x2e5c]
push eax
push 0
push 0
push 0x585134
mov ecx, dword [ebp - 0x648]
push ecx
call dword [sym.imp.ADVAPI32.dll_RegQueryValueExW]
lea edx, [ebp - 0x2e5c]
push edx
call fcn.00528324
add esp, 4
test eax, eax
jbe 0x487aef
mov eax, dword [ebp - 0x38dc]
cmp dword [eax + 0x1898], 0
jne 0x487aed
push 0x585144
mov ecx, dword [ebp - 0x648]
push ecx
call dword [sym.imp.ADVAPI32.dll_RegDeleteValueW]
jmp 0x487b6b
mov edx, dword [ebp - 0x38dc]
cmp dword [edx + 0x1898], 0
je 0x487b6b
xor eax, eax
mov word [ebp - 0x3664], ax
push 0x800
push 0
lea ecx, [ebp - 0x3662]
push ecx
call fcn.005281f0
add esp, 0xc
xor edx, edx
mov word [ebp - 0x2e64], dx
push 0x400
lea eax, [ebp - 0x3664]
push eax
push 0
call dword [sym.imp.KERNEL32.dll_GetModuleFileNameW]
lea ecx, [ebp - 0x3664]
push ecx
call fcn.00528324
add esp, 4
lea edx, [eax + eax + 2]
push edx
lea eax, [ebp - 0x3664]
push eax
push 1
push 0
push 0x585154
mov ecx, dword [ebp - 0x648]
push ecx
call dword [sym.imp.ADVAPI32.dll_RegSetValueExW]
mov edx, dword [ebp - 0x648]
push edx
call dword [sym.imp.ADVAPI32.dll_RegCloseKey]
lea eax, [ebp - 0x644]
push eax
push 0
push str.AutoHide
push 0x585178
call dword [sym.imp.KERNEL32.dll_GetPrivateProfileIntW]
mov ecx, dword [ebp - 0x38dc]
mov dword [ecx + 0x189c], eax
lea edx, [ebp - 0x644]
push edx
push 0
push 0x585188
push 0x585194
call dword [sym.imp.KERNEL32.dll_GetPrivateProfileIntW]
mov ecx, dword [ebp - 0x38dc]
mov dword [ecx + 0x64], eax
lea edx, [ebp - 0x644]
push edx
push 1
push 0x5851a4
push 0x5851b8
call dword [sym.imp.KERNEL32.dll_GetPrivateProfileIntW]
xor ecx, ecx
cmp eax, 0xffffffff
setne cl
mov edx, dword [ebp - 0x38dc]
mov dword [edx + 0x3c], ecx
lea eax, [ebp - 0x644]
push eax
push 1
push str.StartFtp
push 0x5851dc
call dword [sym.imp.KERNEL32.dll_GetPrivateProfileIntW]
mov ecx, dword [ebp - 0x38dc]
mov dword [ecx + 0x1c], eax
lea edx, [ebp - 0x644]
push edx
push 1
push str.StartFTPWeb
push 0x585204
call dword [sym.imp.KERNEL32.dll_GetPrivateProfileIntW]
mov ecx, dword [ebp - 0x38dc]
mov dword [ecx + 8], eax
lea edx, [ebp - 0x644]
push edx
push 1
push str.StartGopher
push 0x58522c
call dword [sym.imp.KERNEL32.dll_GetPrivateProfileIntW]
mov ecx, dword [ebp - 0x38dc]
mov dword [ecx + 0xc], eax
lea edx, [ebp - 0x644]
push edx
push 1
push str.StartHttp
push 0x585250
call dword [sym.imp.KERNEL32.dll_GetPrivateProfileIntW]
mov ecx, dword [ebp - 0x38dc]
mov dword [ecx], eax
lea edx, [ebp - 0x644]
push edx
push 1
push str.StartMail
push 0x585274
call dword [sym.imp.KERNEL32.dll_GetPrivateProfileIntW]
mov ecx, dword [ebp - 0x38dc]
mov dword [ecx + 0x38], eax
lea edx, [ebp - 0x644]
push edx
push 1
push str.StartNews
push 0x585298
call dword [sym.imp.KERNEL32.dll_GetPrivateProfileIntW]
mov ecx, dword [ebp - 0x38dc]
mov dword [ecx + 0x2c], eax
lea edx, [ebp - 0x644]
push edx
push 1
push str.StartSecure
push 0x5852c0
call dword [sym.imp.KERNEL32.dll_GetPrivateProfileIntW]
mov ecx, dword [ebp - 0x38dc]
mov dword [ecx + 0x34], eax
lea edx, [ebp - 0x644]
push edx
push 1
push str.StartSocks
push 0x5852e8
call dword [sym.imp.KERNEL32.dll_GetPrivateProfileIntW]
mov ecx, dword [ebp - 0x38dc]
mov dword [ecx + 0x10], eax
lea edx, [ebp - 0x644]
push edx
push 1
push str.StartTelnet
push 0x585310
call dword [sym.imp.KERNEL32.dll_GetPrivateProfileIntW]
mov ecx, dword [ebp - 0x38dc]
mov dword [ecx + 0x24], eax
lea edx, [ebp - 0x644]
push edx
push 1
push str.StartSocks4
push 0x585338
call dword [sym.imp.KERNEL32.dll_GetPrivateProfileIntW]
mov ecx, dword [ebp - 0x38dc]
mov dword [ecx + 0x14], eax
lea edx, [ebp - 0x644]
push edx
push 1
push str.StartMap
push 0x58535c
call dword [sym.imp.KERNEL32.dll_GetPrivateProfileIntW]
mov ecx, dword [ebp - 0x38dc]
mov dword [ecx + 0x40], eax
lea edx, [ebp - 0x644]
push edx
push 0
push str.StartAdmin
push 0x585384
call dword [sym.imp.KERNEL32.dll_GetPrivateProfileIntW]
mov ecx, dword [ebp - 0x38dc]
mov dword [ecx + 0x44], eax
lea edx, [ebp - 0x644]
push edx
push 0x328
push 0x585394
push 0x5853a0
call dword [sym.imp.KERNEL32.dll_GetPrivateProfileIntW]
mov ecx, dword [ebp - 0x38dc]
mov dword [ecx + 4], eax
lea edx, [ebp - 0x644]
push edx
push 0x438
push 0x5853ac
push 0x5853b8
call dword [sym.imp.KERNEL32.dll_GetPrivateProfileIntW]
mov ecx, dword [ebp - 0x38dc]
mov dword [ecx + 0x18], eax
lea edx, [ebp - 0x644]
push edx
push 0x849
push 0x5853c4
push 0x5853cc
call dword [sym.imp.KERNEL32.dll_GetPrivateProfileIntW]
mov ecx, dword [ebp - 0x38dc]
mov dword [ecx + 0x20], eax
lea edx, [ebp - 0x644]
push edx
push 0x17
push str.TELNET
push 0x5853e8
call dword [sym.imp.KERNEL32.dll_GetPrivateProfileIntW]
mov ecx, dword [ebp - 0x38dc]
mov dword [ecx + 0x28], eax
lea edx, [ebp - 0x644]
push edx
push 0x77
push 0x5853f4
push 0x585400
call dword [sym.imp.KERNEL32.dll_GetPrivateProfileIntW]
mov ecx, dword [ebp - 0x38dc]
mov dword [ecx + 0x30], eax
lea edx, [ebp - 0x644]
push edx
push 0x58
push 0x58540c
push 0x585418
call dword [sym.imp.KERNEL32.dll_GetPrivateProfileIntW]
mov ecx, dword [ebp - 0x38dc]
mov dword [ecx + 0x48], eax
lea edx, [ebp - 0x644]
push edx
push 0x1f40
push 0x585424
push 0x585434
call dword [sym.imp.KERNEL32.dll_GetPrivateProfileIntW]
mov ecx, dword [ebp - 0x38dc]
mov dword [ecx + 0x4c], eax
lea edx, [ebp - 0x644]
push edx
push 1
push str.AutoUpdate
push 0x585458
call dword [sym.imp.KERNEL32.dll_GetPrivateProfileIntW]
mov ecx, dword [ebp - 0x38dc]
mov dword [ecx + 0x21dbc], eax
lea edx, [ebp - 0x644]
push edx
push 0x1000
lea eax, [ebp - 0x2654]
push eax
push 0x585468
push 0x58546c
push 0x585478
call dword [sym.imp.KERNEL32.dll_GetPrivateProfileStringW]
movzx ecx, word [ebp - 0x2654]
mov edx, dword [ebp - 0x38dc]
mov dword [edx + 0x2ee64], ecx
lea eax, [ebp - 0x644]
push eax
push 0x1000
lea ecx, [ebp - 0x2654]
push ecx
push 0x585484
push 0x585488
push 0x585490
call dword [sym.imp.KERNEL32.dll_GetPrivateProfileStringW]
movzx edx, word [ebp - 0x2654]
mov eax, dword [ebp - 0x38dc]
mov dword [eax + 0x2ee68], edx
lea ecx, [ebp - 0x644]
push ecx
push 0x1000
lea edx, [ebp - 0x2654]
push edx
push 0x58549c
push 0x5854a0
push str.Token
call dword [sym.imp.KERNEL32.dll_GetPrivateProfileStringW]
movzx eax, word [ebp - 0x2654]
mov ecx, dword [ebp - 0x38dc]
mov dword [ecx + 0x2ee6c], eax
lea edx, [ebp - 0x644]
push edx
push 0x1000
lea eax, [ebp - 0x2654]
push eax
push 0x5854b8
push 0x5854bc
push 0x5854cc
call dword [sym.imp.KERNEL32.dll_GetPrivateProfileStringW]
lea ecx, [ebp - 0x2654]
push ecx
mov edx, dword [ebp - 0x38dc]
add edx, 0xf190
push edx
call fcn.005282c4
add esp, 8
mov eax, dword [ebp - 0x38dc]
cmp dword [eax + 0xfd98], 0
jne 0x4880ea
mov ecx, dword [ebp - 0x38dc]
add ecx, 0xf190
push ecx
lea ecx, [ebp - 0x3668]
call fcn.00415da0
mov byte [ebp - 4], 1
mov dword [ebp - 0x3670], 0
mov dword [ebp - 0x366c], 0
mov dword [ebp - 0x366c], 0
cmp dword [ebp - 0x3670], 0xffffffff
je 0x4880c4
lea edx, [ebp - 0x3670]
push edx
push 0x5854dc
lea eax, [ebp - 0x3674]
push eax
lea ecx, [ebp - 0x3668]
call fcn.00411660
mov byte [ebp - 4], 2
lea ecx, [ebp - 0x3674]
call fcn.00415f90
test eax, eax
jne 0x488033
mov byte [ebp - 4], 1
lea ecx, [ebp - 0x3674]
call fcn.00415e20
jmp 0x4880c4
lea ecx, [ebp - 0x3674]
call fcn.00415f60
push eax
lea ecx, [ebp - 0x38a8]
push ecx
call fcn.00499e90
add esp, 8
mov dword [ebp - 0x38e0], eax
mov ecx, dword [ebp - 0x38e0]
call fcn.00412150
push eax
call dword [sym.imp.WS2_32.dll_inet_addr]
mov edx, dword [ebp - 0x366c]
mov ecx, dword [ebp - 0x38dc]
mov dword [ecx + edx*4 + 0xf994], eax
lea ecx, [ebp - 0x38a8]
call fcn.00412130
mov edx, dword [ebp - 0x366c]
add edx, 1
mov dword [ebp - 0x366c], edx
cmp dword [ebp - 0x366c], 0xff
jl 0x4880b0
mov byte [ebp - 4], 1
lea ecx, [ebp - 0x3674]
call fcn.00415e20
jmp 0x4880c4
mov byte [ebp - 4], 1
lea ecx, [ebp - 0x3674]
call fcn.00415e20
jmp 0x487fe1
mov eax, dword [ebp - 0x366c]
mov ecx, dword [ebp - 0x38dc]
mov dword [ecx + eax*4 + 0xf994], 0
mov byte [ebp - 4], 0
lea ecx, [ebp - 0x3668]
call fcn.00415e20
lea edx, [ebp - 0x644]
push edx
push 1
push 0x5854e0
push 0x5854f8
call dword [sym.imp.KERNEL32.dll_GetPrivateProfileIntW]
mov ecx, dword [ebp - 0x38dc]
mov dword [ecx + 0xfd98], eax
lea edx, [ebp - 0x644]
push edx
push 0
push 0x585508
push 0x58551c
call dword [sym.imp.KERNEL32.dll_GetPrivateProfileIntW]
mov ecx, dword [ebp - 0x38dc]
mov dword [ecx + 0x28bc], eax
lea edx, [ebp - 0x644]
push edx
push 0x400
lea eax, [ebp - 0x2654]
push eax
push str.CCProxy_Authorization
push 0x585558
push 0x585578
call dword [sym.imp.KERNEL32.dll_GetPrivateProfileStringW]
lea ecx, [ebp - 0x2654]
push ecx
mov ecx, dword [ebp - 0x38dc]
add ecx, 0x28ac
call fcn.00415e60
push 0x58558c
push 0x585594
mov ecx, dword [ebp - 0x38dc]
add ecx, 0x28ac
call fcn.00424600
push str._html__r_n_head__meta_http_equiv_Content_Type__content_text_html__charsetutf_8______head__r_n_body__r_n_h1_Unauthorized_...__h1__r_n_h2__r_nIP_Address:__IP__br__r_nMAC_Address:__MAC__br__r_nServer_Time:__Time__br__r_nAuth_Result:__AuthResult__r_n__h2__r_n__body__r_n__html_
mov ecx, dword [ebp - 0x38dc]
add ecx, 0x28b8
call fcn.00415e60
push 0x5857a0
push 0x5857a8
lea edx, [ebp - 0x2658]
push edx
lea eax, [ebp - 0x38ac]
push eax
call fcn.00411930
add esp, 0xc
mov dword [ebp - 0x38e4], eax
mov ecx, dword [ebp - 0x38e4]
call fcn.00415f60
push eax
call fcn.0052a29d
add esp, 8
mov dword [ebp - 0x64c], eax
lea ecx, [ebp - 0x38ac]
call fcn.00415e20
cmp dword [ebp - 0x64c], 0
je 0x488307
push 2
push 0
mov ecx, dword [ebp - 0x64c]
push ecx
call fcn.0052a152
add esp, 0xc
mov edx, dword [ebp - 0x64c]
push edx
call fcn.0052a05a
add esp, 4
mov dword [ebp - 0x367c], eax
mov eax, dword [ebp - 0x367c]
add eax, 1
push eax
call fcn.004dea4c
add esp, 4
mov dword [ebp - 0x38b0], eax
mov ecx, dword [ebp - 0x38b0]
mov dword [ebp - 0x3678], ecx
mov edx, dword [ebp - 0x3678]
add edx, dword [ebp - 0x367c]
mov byte [edx], 0
push 0
push 0
mov eax, dword [ebp - 0x64c]
push eax
call fcn.0052a152
add esp, 0xc
mov ecx, dword [ebp - 0x64c]
push ecx
push 1
mov edx, dword [ebp - 0x367c]
push edx
mov eax, dword [ebp - 0x3678]
push eax
call fcn.00529ea0
add esp, 0x10
mov ecx, dword [ebp - 0x64c]
push ecx
call fcn.00529b67
add esp, 4
mov edx, dword [ebp - 0x3678]
push edx
lea eax, [ebp - 0x38b4]
push eax
call fcn.00499f50
add esp, 8
mov dword [ebp - 0x38e8], eax
mov ecx, dword [ebp - 0x38e8]
mov dword [ebp - 0x38ec], ecx
mov byte [ebp - 4], 3
mov edx, dword [ebp - 0x38ec]
push edx
mov ecx, dword [ebp - 0x38dc]
add ecx, 0x28b8
call fcn.00415e40
mov byte [ebp - 4], 0
lea ecx, [ebp - 0x38b4]
call fcn.00415e20
mov eax, dword [ebp - 0x3678]
mov dword [ebp - 0x38b8], eax
mov ecx, dword [ebp - 0x38b8]
push ecx
call fcn.004dea57
add esp, 4
push str._html__r_n_head__meta_http_equiv_Content_Type__content_text_html__charsetutf_8______head__r_n_body__r_n_h1_Web_site_unauthorized...__h1__r_n_h2__r_nAccount_Name:__UserName__br__r_nSite:__HostName__br__r_nReferer:__Referer__br__r_nFilter_Name:__FilterName__br__r_nFilter_Type:__Permit__br__r_nFilter_Item:__Item__r_n__h2__r_n__body__r_n__html_
mov ecx, dword [ebp - 0x38dc]
add ecx, 0x28b0
call fcn.00415e60
push 0x585a60
push 0x585a68
lea edx, [ebp - 0x2658]
push edx
lea eax, [ebp - 0x38bc]
push eax
call fcn.00411930
add esp, 0xc
mov dword [ebp - 0x38f0], eax
mov ecx, dword [ebp - 0x38f0]
call fcn.00415f60
push eax
call fcn.0052a29d
add esp, 8
mov dword [ebp - 0x64c], eax
lea ecx, [ebp - 0x38bc]
call fcn.00415e20
cmp dword [ebp - 0x64c], 0
je 0x48847f
push 2
push 0
mov ecx, dword [ebp - 0x64c]
push ecx
call fcn.0052a152
add esp, 0xc
mov edx, dword [ebp - 0x64c]
push edx
call fcn.0052a05a
add esp, 4
mov dword [ebp - 0x3684], eax
mov eax, dword [ebp - 0x3684]
add eax, 1
push eax
call fcn.004dea4c
add esp, 4
mov dword [ebp - 0x38c0], eax
mov ecx, dword [ebp - 0x38c0]
mov dword [ebp - 0x3680], ecx
mov edx, dword [ebp - 0x3680]
add edx, dword [ebp - 0x3684]
mov byte [edx], 0
push 0
push 0
mov eax, dword [ebp - 0x64c]
push eax
call fcn.0052a152
add esp, 0xc
mov ecx, dword [ebp - 0x64c]
push ecx
push 1
mov edx, dword [ebp - 0x3684]
push edx
mov eax, dword [ebp - 0x3680]
push eax
call fcn.00529ea0
add esp, 0x10
mov ecx, dword [ebp - 0x64c]
push ecx
call fcn.00529b67
add esp, 4
mov edx, dword [ebp - 0x3680]
push edx
lea eax, [ebp - 0x38c4]
push eax
call fcn.00499f50
add esp, 8
mov dword [ebp - 0x38f4], eax
mov ecx, dword [ebp - 0x38f4]
mov dword [ebp - 0x38f8], ecx
mov byte [ebp - 4], 4
mov edx, dword [ebp - 0x38f8]
push edx
mov ecx, dword [ebp - 0x38dc]
add ecx, 0x28b0
call fcn.00415e40
mov byte [ebp - 4], 0
lea ecx, [ebp - 0x38c4]
call fcn.00415e20
mov eax, dword [ebp - 0x3680]
mov dword [ebp - 0x38c8], eax
mov ecx, dword [ebp - 0x38c8]
push ecx
call fcn.004dea57
add esp, 4
push str._html__r_n_head__meta_http_equiv_Content_Type__content_text_html__charsetutf_8______head__r_n_body__r_n_h1_Web_content_unauthorized...__h1__r_n_h2__r_nAccount_Name:__UserName__br__r_nFilter_Name:__FilterName__br__r_nFilter_Item:__Item__r_n__h2__r_n__body__r_n__html_
mov ecx, dword [ebp - 0x38dc]
add ecx, 0x28b4
call fcn.00415e60
push 0x585cbc
push 0x585a94
lea edx, [ebp - 0x2658]
push edx
lea eax, [ebp - 0x38cc]
push eax
call fcn.00411930
add esp, 0xc
mov dword [ebp - 0x38fc], eax
mov ecx, dword [ebp - 0x38fc]
call fcn.00415f60
push eax
call fcn.0052a29d
add esp, 8
mov dword [ebp - 0x64c], eax
lea ecx, [ebp - 0x38cc]
call fcn.00415e20
cmp dword [ebp - 0x64c], 0
je 0x4885f7
push 2
push 0
mov ecx, dword [ebp - 0x64c]
push ecx
call fcn.0052a152
add esp, 0xc
mov edx, dword [ebp - 0x64c]
push edx
call fcn.0052a05a
add esp, 4
mov dword [ebp - 0x368c], eax
mov eax, dword [ebp - 0x368c]
add eax, 1
push eax
call fcn.004dea4c
add esp, 4
mov dword [ebp - 0x38d0], eax
mov ecx, dword [ebp - 0x38d0]
mov dword [ebp - 0x3688], ecx
mov edx, dword [ebp - 0x3688]
add edx, dword [ebp - 0x368c]
mov byte [edx], 0
push 0
push 0
mov eax, dword [ebp - 0x64c]
push eax
call fcn.0052a152
add esp, 0xc
mov ecx, dword [ebp - 0x64c]
push ecx
push 1
mov edx, dword [ebp - 0x368c]
push edx
mov eax, dword [ebp - 0x3688]
push eax
call fcn.00529ea0
add esp, 0x10
mov ecx, dword [ebp - 0x64c]
push ecx
call fcn.00529b67
add esp, 4
mov edx, dword [ebp - 0x3688]
push edx
lea eax, [ebp - 0x38d4]
push eax
call fcn.00499f50
add esp, 8
mov dword [ebp - 0x3900], eax
mov ecx, dword [ebp - 0x3900]
mov dword [ebp - 0x3904], ecx
mov byte [ebp - 4], 5
mov edx, dword [ebp - 0x3904]
push edx
mov ecx, dword [ebp - 0x38dc]
add ecx, 0x28b4
call fcn.00415e40
mov byte [ebp - 4], 0
lea ecx, [ebp - 0x38d4]
call fcn.00415e20
mov eax, dword [ebp - 0x3688]
mov dword [ebp - 0x38d8], eax
mov ecx, dword [ebp - 0x38d8]
push ecx
call fcn.004dea57
add esp, 4
xor edx, edx
mov word [ebp - 0x434], dx
push 0x208
push 0
lea eax, [ebp - 0x432]
push eax
call fcn.005281f0
add esp, 0xc
lea ecx, [ebp - 0x224]
push ecx
push str._sAutoProxy.pac
lea edx, [ebp - 0x434]
push edx
call fcn.00527b98
add esp, 0xc
mov eax, dword [ebp - 0x38dc]
mov byte [eax + 0x11da8], 0
push 0x585ce8
lea ecx, [ebp - 0x434]
push ecx
call fcn.0052a29d
add esp, 8
mov dword [ebp - 0x64c], eax
cmp dword [ebp - 0x64c], 0
je 0x4886fd
push 2
push 0
mov edx, dword [ebp - 0x64c]
push edx
call fcn.0052a152
add esp, 0xc
mov eax, dword [ebp - 0x64c]
push eax
call fcn.0052a05a
add esp, 4
mov dword [ebp - 0x3690], eax
cmp dword [ebp - 0x3690], 0x10000
jbe 0x4886a3
mov dword [ebp - 0x3690], 0x10000
push 0
push 0
mov ecx, dword [ebp - 0x64c]
push ecx
call fcn.0052a152
add esp, 0xc
mov edx, dword [ebp - 0x64c]
push edx
push 1
mov eax, dword [ebp - 0x3690]
push eax
mov ecx, dword [ebp - 0x38dc]
add ecx, 0x11da8
push ecx
call fcn.00529ea0
add esp, 0x10
mov edx, dword [ebp - 0x38dc]
add edx, dword [ebp - 0x3690]
mov byte [edx + 0x11da8], 0
mov eax, dword [ebp - 0x64c]
push eax
call fcn.00529b67
add esp, 4
lea ecx, [ebp - 0x644]
push ecx
push 0
push str.BugTrace
push 0x585d04
call dword [sym.imp.KERNEL32.dll_GetPrivateProfileIntW]
mov edx, dword [ebp - 0x38dc]
mov dword [edx + 0x2ee70], eax
lea eax, [ebp - 0x644]
push eax
push 0
push str.SaveUserData
push 0x585d30
call dword [sym.imp.KERNEL32.dll_GetPrivateProfileIntW]
mov ecx, dword [ebp - 0x38dc]
mov dword [ecx + 0xf17c], eax
lea edx, [ebp - 0x644]
push edx
push 0xa
push 0x585d38
push 0x585d64
call dword [sym.imp.KERNEL32.dll_GetPrivateProfileIntW]
mov ecx, dword [ebp - 0x38dc]
mov dword [ecx + 0xf180], eax
lea edx, [ebp - 0x644]
push edx
push 0
push 0x585d6c
push 0x585d7c
call dword [sym.imp.KERNEL32.dll_GetPrivateProfileIntW]
mov ecx, dword [ebp - 0x38dc]
mov dword [ecx + 0x28c0], eax
lea edx, [ebp - 0x644]
push edx
push 0x400
lea eax, [ebp - 0x2654]
push eax
push 0x585d90
push 0x585d9c
push 0x585db8
call dword [sym.imp.KERNEL32.dll_GetPrivateProfileStringW]
lea ecx, [ebp - 0x2654]
push ecx
mov ecx, dword [ebp - 0x38dc]
add ecx, 0x28c4
call fcn.00415e60
mov ecx, dword [ebp - 0x38dc]
add ecx, 0x28c4
call fcn.00442290
lea edx, [ebp - 0x644]
push edx
push 0
push 0x585dcc
push 0x585dd8
call dword [sym.imp.KERNEL32.dll_GetPrivateProfileIntW]
mov ecx, dword [ebp - 0x38dc]
mov dword [ecx + 0x2ee60], eax
mov edx, dword [ebp - 0x38dc]
cmp dword [edx + 0x2ee60], 0x32
jle 0x488826
mov eax, dword [ebp - 0x38dc]
mov dword [eax + 0x2ee60], 0x32
mov dword [ebp - 0x3694], 0
jmp 0x488841
mov ecx, dword [ebp - 0x3694]
add ecx, 1
mov dword [ebp - 0x3694], ecx
mov edx, dword [ebp - 0x38dc]
mov eax, dword [ebp - 0x3694]
cmp eax, dword [edx + 0x2ee60]
jge 0x488a7b
xor ecx, ecx
mov word [ebp - 0x38a4], cx
push 0x208
push 0
lea edx, [ebp - 0x38a2]
push edx
call fcn.005281f0
add esp, 0xc
mov eax, dword [ebp - 0x3694]
add eax, 1
push eax
push 0x585de0
lea ecx, [ebp - 0x38a4]
push ecx
call fcn.00527b98
add esp, 0xc
lea edx, [ebp - 0x644]
push edx
push 0x104
mov eax, dword [ebp - 0x3694]
imul eax, eax, 0x42c
mov ecx, dword [ebp - 0x38dc]
lea edx, [ecx + eax + 0x21dd0]
push edx
push 0x585df0
lea eax, [ebp - 0x38a4]
push eax
push 0x585df4
call dword [sym.imp.KERNEL32.dll_GetPrivateProfileStringW]
mov ecx, dword [ebp - 0x3694]
add ecx, 1
push ecx
push 0x585dfc
lea edx, [ebp - 0x38a4]
push edx
call fcn.00527b98
add esp, 0xc
lea eax, [ebp - 0x644]
push eax
push 0
lea ecx, [ebp - 0x38a4]
push ecx
push 0x585e10
call dword [sym.imp.KERNEL32.dll_GetPrivateProfileIntW]
mov edx, dword [ebp - 0x3694]
imul edx, edx, 0x42c
mov ecx, dword [ebp - 0x38dc]
mov dword [ecx + edx + 0x21fdc], eax
mov edx, dword [ebp - 0x3694]
add edx, 1
push edx
push 0x585e18
lea eax, [ebp - 0x38a4]
push eax
call fcn.00527b98
add esp, 0xc
lea ecx, [ebp - 0x644]
push ecx
push 0
lea edx, [ebp - 0x38a4]
push edx
push 0x585e2c
call dword [sym.imp.KERNEL32.dll_GetPrivateProfileIntW]
mov ecx, dword [ebp - 0x3694]
imul ecx, ecx, 0x42c
mov edx, dword [ebp - 0x38dc]
mov dword [edx + ecx + 0x221ec], eax
mov eax, dword [ebp - 0x3694]
add eax, 1
push eax
push 0x585e34
lea ecx, [ebp - 0x38a4]
push ecx
call fcn.00527b98
add esp, 0xc
lea edx, [ebp - 0x644]
push edx
push 0
lea eax, [ebp - 0x38a4]
push eax
push 0x585e4c
call dword [sym.imp.KERNEL32.dll_GetPrivateProfileIntW]
mov ecx, dword [ebp - 0x3694]
imul ecx, ecx, 0x42c
mov edx, dword [ebp - 0x38dc]
mov dword [edx + ecx + 0x21dcc], eax
mov eax, dword [ebp - 0x3694]
add eax, 1
push eax
push 0x585e54
lea ecx, [ebp - 0x38a4]
push ecx
call fcn.00527b98
add esp, 0xc
lea edx, [ebp - 0x644]
push edx
push 0x104
mov eax, dword [ebp - 0x3694]
imul eax, eax, 0x42c
mov ecx, dword [ebp - 0x38dc]
lea edx, [ecx + eax + 0x21fe0]
push edx
push 0x585e70
lea eax, [ebp - 0x38a4]
push eax
push 0x585e74
call dword [sym.imp.KERNEL32.dll_GetPrivateProfileStringW]
mov ecx, dword [ebp - 0x3694]
add ecx, 1
push ecx
push 0x585e7c
lea edx, [ebp - 0x38a4]
push edx
call fcn.00527b98
add esp, 0xc
lea eax, [ebp - 0x644]
push eax
push 0
lea ecx, [ebp - 0x38a4]
push ecx
push 0x585e98
call dword [sym.imp.KERNEL32.dll_GetPrivateProfileIntW]
mov edx, dword [ebp - 0x3694]
imul edx, edx, 0x42c
mov ecx, dword [ebp - 0x38dc]
mov dword [ecx + edx + 0x221f0], eax
jmp 0x488832
lea edx, [ebp - 0x644]
push edx
push 0xc8
push 0x585ea0
push 0x585eb8
call dword [sym.imp.KERNEL32.dll_GetPrivateProfileIntW]
mov ecx, dword [ebp - 0x38dc]
mov dword [ecx + 0x11da4], eax
lea edx, [ebp - 0x644]
push edx
push 1
push 0x585ec8
push 0x585ee4
call dword [sym.imp.KERNEL32.dll_GetPrivateProfileIntW]
mov ecx, dword [ebp - 0x38dc]
mov dword [ecx + 0x28c8], eax
lea edx, [ebp - 0x644]
push edx
push 0x64
push 0x585ef4
push 0x585f24
call dword [sym.imp.KERNEL32.dll_GetPrivateProfileIntW]
mov ecx, dword [ebp - 0x38dc]
mov dword [ecx + 0x28d0], eax
lea edx, [ebp - 0x644]
push edx
push 0x40000
push 0x585f34
push 0x585f60
call dword [sym.imp.KERNEL32.dll_GetPrivateProfileIntW]
mov ecx, dword [ebp - 0x38dc]
mov dword [ecx + 0x28d4], eax
lea edx, [ebp - 0x644]
push edx
push 0x1000
lea eax, [ebp - 0x2654]
push eax
push str.CTRLALTC
push 0x585f88
push 0x585f98
call dword [sym.imp.KERNEL32.dll_GetPrivateProfileStringW]
mov ecx, dword [ebp - 0x38dc]
add ecx, 0x28d8
push ecx
push 0x585fa8
lea edx, [ebp - 0x2654]
push edx
call fcn.00528085
add esp, 0xc
lea eax, [ebp - 0x644]
push eax
push 0
push str.EnableHotKey
push 0x585fdc
call dword [sym.imp.KERNEL32.dll_GetPrivateProfileIntW]
mov ecx, dword [ebp - 0x38dc]
mov dword [ecx + 0x28dc], eax
lea edx, [ebp - 0x644]
push edx
push 0x1001
lea eax, [ebp - 0x2654]
push eax
push str.0.0.0.0
push 0x585ffc
push 0x586024
call dword [sym.imp.KERNEL32.dll_GetPrivateProfileStringW]
lea ecx, [ebp - 0x2654]
push ecx
mov ecx, dword [ebp - 0x38dc]
add ecx, 0x21db0
call fcn.00415e60
lea edx, [ebp - 0x644]
push edx
push 0x1001
lea eax, [ebp - 0x2654]
push eax
push str.iTunes_net_http_transaction_impl_manager_
push 0x58608c
push 0x5860ac
call dword [sym.imp.KERNEL32.dll_GetPrivateProfileStringW]
lea ecx, [ebp - 0x2654]
push ecx
mov ecx, dword [ebp - 0x38dc]
add ecx, 0x21dc0
call fcn.00415e60
lea edx, [ebp - 0x644]
push edx
push 0
push str.RunAsInternetProxyServer
push 0x5860f4
call dword [sym.imp.KERNEL32.dll_GetPrivateProfileIntW]
mov ecx, dword [ebp - 0x38dc]
mov dword [ecx + 0x21db4], eax
lea edx, [ebp - 0x644]
push edx
push 0
push str.LimitMultipleLogin
push 0x586130
call dword [sym.imp.KERNEL32.dll_GetPrivateProfileIntW]
mov ecx, dword [ebp - 0x38dc]
mov dword [ecx + 0x21dc4], eax
lea edx, [ebp - 0x644]
push edx
push 0
push str.SaveWebTitleEx
push 0x586164
call dword [sym.imp.KERNEL32.dll_GetPrivateProfileIntW]
mov ecx, dword [ebp - 0x38dc]
mov dword [ecx + 0xf184], eax
lea edx, [ebp - 0x644]
push edx
push 1
push str.EnableReferer
push 0x586188
call dword [sym.imp.KERNEL32.dll_GetPrivateProfileIntW]
mov ecx, dword [ebp - 0x38dc]
mov dword [ecx + 0xf188], eax
mov edx, dword [ebp - 0x38dc]
mov eax, dword [edx + 0xfd94]
mov dword [0x5fa5b4], eax
mov ecx, dword [ebp - 0x38dc]
mov edx, dword [ecx + 0x2ee70]
mov dword [0x5fa5b8], edx
mov eax, dword [ebp - 0x38dc]
add eax, 0xe968
push eax
mov ecx, 0x5fa5bc
call fcn.00415e60
lea ecx, [ebp - 0x644]
push ecx
push 0
push str.HTTPXFORWARD
push 0x5861ac
call dword [sym.imp.KERNEL32.dll_GetPrivateProfileIntW]
mov edx, dword [ebp - 0x38dc]
mov dword [edx + 0x21db8], eax
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x2658]
call fcn.00415e20
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
mov ecx, dword [ebp - 0x10]
xor ecx, ebp
call fcn.00527aad
mov esp, ebp
pop ebp
ret