Function at 0x446400
Capabilities:
Persist via run registry key

Disassembly:
push 0xffffffffffffffff
mov eax, dword fs:[0]
push 0x47ad2b
push eax
mov eax, 0x2b2c
mov dword fs:[0], esp
call fcn.00458680
mov al, byte [0x494b70]
push ebx
push ebp
push esi
mov ebx, ecx
push edi
mov byte [esp + 0x122c], al
mov esi, dword [sym.imp.KERNEL32.dll_GetModuleFileNameA]
mov ecx, 0x41
xor eax, eax
lea edi, [esp + 0x122d]
push 0x105
rep stosd dword es:[edi], eax
lea ecx, [esp + 0x1230]
push ecx
push eax
call esi
lea edx, [esp + 0x122c]
push 0x5c
push edx
call fcn.00458e20
mov byte [eax], 0
mov al, byte [0x494b70]
mov byte [esp + 0x20], al
mov ecx, 0x41
xor eax, eax
lea edi, [esp + 0x21]
rep stosd dword es:[edi], eax
lea ecx, [esp + 0x1234]
lea edx, [esp + 0x20]
push ecx
push str._sCCProxy.ini
push edx
call fcn.004585a3
mov eax, dword [0x492aec]
mov dword [esp + 0x28], eax
mov ecx, dword [ebx + 4]
lea edx, [esp + 0x28]
push ecx
push 0x48e2ec
push edx
mov dword [esp + 0x2b64], 0
call fcn.00468aeb
mov ecx, dword [esp + 0x34]
mov ebp, dword [sym.imp.KERNEL32.dll_WritePrivateProfileStringA]
add esp, 0x20
lea eax, [esp + 0x18]
push eax
push ecx
push 0x48f920
push 0x4923f0
call ebp
mov edx, dword [ebx + 0x18]
lea eax, [esp + 0x14]
push edx
push 0x48e2ec
push eax
call fcn.00468aeb
mov edx, dword [esp + 0x20]
add esp, 0xc
lea ecx, [esp + 0x18]
push ecx
push edx
push 0x492484
push 0x4923f0
call ebp
mov eax, dword [ebx + 0x20]
lea ecx, [esp + 0x14]
push eax
push 0x48e2ec
push ecx
call fcn.00468aeb
add esp, 0xc
lea edx, [esp + 0x18]
mov eax, dword [esp + 0x14]
push edx
push eax
push 0x49249c
push 0x4923f0
call ebp
mov ecx, dword [ebx + 0x28]
lea edx, [esp + 0x14]
push ecx
push 0x48e2ec
push edx
call fcn.00468aeb
mov ecx, dword [esp + 0x20]
add esp, 0xc
lea eax, [esp + 0x18]
push eax
push ecx
push 0x49248c
push 0x4923f0
call ebp
mov edx, dword [ebx + 0x30]
lea eax, [esp + 0x14]
push edx
push 0x48e2ec
push eax
call fcn.00468aeb
mov edx, dword [esp + 0x20]
add esp, 0xc
lea ecx, [esp + 0x18]
push ecx
push edx
push 0x49247c
push 0x4923f0
call ebp
mov eax, dword [ebx + 0x48]
lea ecx, [esp + 0x14]
push eax
push 0x48e2ec
push ecx
call fcn.00468aeb
mov eax, dword [esp + 0x20]
add esp, 0xc
lea edx, [esp + 0x18]
push edx
push eax
push str.Admin
push 0x4923f0
call ebp
mov eax, dword [ebx + 0xa9b4]
test eax, eax
mov eax, 0x48e484
jne 0x4465cc
mov eax, 0x48e480
lea ecx, [esp + 0x18]
push ecx
push eax
push str.AutoDetect
push str.system
call ebp
mov eax, dword [ebx + 0xc94]
test eax, eax
mov eax, 0x48e484
jne 0x4465f2
mov eax, 0x48e480
lea edx, [esp + 0x18]
push edx
push eax
push str.AutoHide
push str.system
call ebp
mov eax, dword [ebx + 0xc90]
test eax, eax
mov eax, 0x48e484
jne 0x446618
mov eax, 0x48e480
lea ecx, [esp + 0x18]
push ecx
push eax
push str.AutoRun
push str.system
call ebp
mov eax, dword [ebx + 0x5c]
test eax, eax
mov eax, 0x48e484
jne 0x44663b
mov eax, 0x48e480
lea edx, [esp + 0x18]
push edx
push eax
push str.Dial
push str.system
call ebp
mov eax, dword [ebx + 0x3c]
test eax, eax
mov eax, 0x48e484
jne 0x44665e
mov eax, 0x48e480
lea ecx, [esp + 0x18]
push ecx
push eax
push str.StartDNS
push str.system
call ebp
mov eax, dword [ebx + 0x1c]
test eax, eax
mov eax, 0x48e484
jne 0x446681
mov eax, 0x48e480
lea edx, [esp + 0x18]
push edx
push eax
push str.StartFTP
push str.system
call ebp
mov eax, dword [ebx + 8]
test eax, eax
mov eax, 0x48e484
jne 0x4466a4
mov eax, 0x48e480
lea ecx, [esp + 0x18]
push ecx
push eax
push str.StartFTPWeb
push str.system
call ebp
mov eax, dword [ebx + 0xc]
test eax, eax
mov eax, 0x48e484
jne 0x4466c7
mov eax, 0x48e480
lea edx, [esp + 0x18]
push edx
push eax
push str.StartGopher
push str.system
call ebp
cmp dword [ebx], 0
mov eax, 0x48e484
jne 0x4466e8
mov eax, 0x48e480
lea ecx, [esp + 0x18]
push ecx
push eax
push str.StartHTTP
push str.system
call ebp
mov eax, dword [ebx + 0x38]
test eax, eax
mov eax, 0x48e484
jne 0x44670b
mov eax, 0x48e480
lea edx, [esp + 0x18]
push edx
push eax
push str.StartMail
push str.system
call ebp
mov eax, dword [ebx + 0x2c]
test eax, eax
mov eax, 0x48e484
jne 0x44672e
mov eax, 0x48e480
lea ecx, [esp + 0x18]
push ecx
push eax
push str.StartNews
push str.system
call ebp
mov eax, dword [ebx + 0x34]
test eax, eax
mov eax, 0x48e484
jne 0x446751
mov eax, 0x48e480
lea edx, [esp + 0x18]
push edx
push eax
push str.StartSecure
push str.system
call ebp
mov eax, dword [ebx + 0x10]
test eax, eax
mov eax, 0x48e484
jne 0x446774
mov eax, 0x48e480
lea ecx, [esp + 0x18]
push ecx
push eax
push str.StartSocks
push str.system
call ebp
mov eax, dword [ebx + 0x24]
test eax, eax
mov eax, 0x48e484
jne 0x446797
mov eax, 0x48e480
lea edx, [esp + 0x18]
push edx
push eax
push str.StartTelnet
push str.system
call ebp
mov eax, dword [ebx + 0x4c]
test eax, eax
mov eax, 0x48e484
jne 0x4467ba
mov eax, 0x48e480
lea ecx, [esp + 0x18]
push ecx
push eax
push str.WebCached
push str.system
call ebp
mov eax, dword [ebx + 0x58]
test eax, eax
mov eax, 0x48e484
jne 0x4467dd
mov eax, 0x48e480
lea edx, [esp + 0x18]
push edx
push eax
push str.WebCachedEx
push str.system
call ebp
mov eax, dword [ebx + 0x40]
test eax, eax
mov eax, 0x48e484
jne 0x446800
mov eax, 0x48e480
lea ecx, [esp + 0x18]
push ecx
push eax
push str.StartMap
push str.system
call ebp
mov eax, dword [ebx + 0x44]
test eax, eax
mov eax, 0x48e484
jne 0x446823
mov eax, 0x48e480
lea edx, [esp + 0x18]
push edx
push eax
push str.StartAdmin
push str.system
call ebp
mov eax, dword [ebx + 0xa564]
cmp eax, 1
mov eax, 0x48e484
je 0x44684a
mov eax, 0x48e480
lea ecx, [esp + 0x18]
push ecx
push eax
push str.NewLogDaily
push 0x48e744
call ebp
lea edx, [esp + 0x2738]
push 0x400
push edx
push 0
mov byte [esp + 0x2b44], 0
call esi
push 0
push 0x48f40c
push str.SoftwareMicrosoftWindowsCurrentVersionRunServices
push reloc.WS2_32.dll_bind
call fcn.00448780
push 0
push 0x48f40c
push str.SoftwareMicrosoftWindowsCurrentVersionRun
push bind
call fcn.00448780
mov eax, dword [ebx + 0xc90]
add esp, 0x20
test eax, eax
je 0x4468b8
lea eax, [esp + 0x2738]
push eax
jmp 0x4468ba
push 0
push 0x48f40c
push str.SoftwareMicrosoftWindowsCurrentVersionRun
push reloc.WS2_32.dll_bind
call fcn.00448780
add esp, 0x10
lea ecx, [esp + 0x18]
lea edx, [ebx + 0xa584]
push ecx
push edx
push str.LocalIP
push str.system
call ebp
mov al, byte [0x494b70]
mov ecx, 0x400
mov byte [esp + 0x228], al
xor eax, eax
lea edi, [esp + 0x229]
lea edx, [ebx + 0x38ec]
rep stosd dword es:[edi], eax
mov edi, edx
or ecx, 0xffffffff
repne scasb al, byte es:[edi]
not ecx
dec ecx
neg ecx
sbb ecx, ecx
and ecx, edx
lea edx, [esp + 0x18]
push edx
push ecx
push str.DNSPrimary
push 0x49255c
call ebp
lea edx, [ebx + 0x3cec]
or ecx, 0xffffffff
mov edi, edx
xor eax, eax
repne scasb al, byte es:[edi]
not ecx
dec ecx
lea eax, [esp + 0x18]
neg ecx
sbb ecx, ecx
push eax
and ecx, edx
push ecx
push str.DNSSecondary
push 0x49255c
call ebp
mov ecx, dword [ebx + 0x40ec]
lea edx, [esp + 0x228]
push ecx
push 0x48e2ec
push edx
call fcn.004585a3
add esp, 0xc
lea eax, [esp + 0x18]
lea ecx, [esp + 0x228]
push eax
push ecx
push str.MaxTries
push 0x49255c
call ebp
mov edx, dword [ebx + 0x40f0]
lea eax, [esp + 0x228]
push edx
push 0x48e2ec
push eax
call fcn.004585a3
add esp, 0xc
lea ecx, [esp + 0x18]
lea edx, [esp + 0x228]
push ecx
push edx
push str.MailInterval
push 0x49255c
call ebp
mov eax, dword [ebx + 0x40f4]
lea ecx, [esp + 0x228]
push eax
push 0x48e2ec
push ecx
call fcn.004585a3
add esp, 0xc
lea edx, [esp + 0x18]
lea eax, [esp + 0x228]
push edx
push eax
push str.ThreadCount
push 0x49255c
call ebp
mov ecx, dword [ebx + 0x40f8]
lea edx, [esp + 0x228]
push ecx
push 0x48e2ec
push edx
call fcn.004585a3
add esp, 0xc
lea eax, [esp + 0x18]
lea ecx, [esp + 0x228]
push eax
push ecx
push str.PortSMTP
push 0x49255c
call ebp
mov edx, dword [ebx + 0x40fc]
lea eax, [esp + 0x228]
push edx
push 0x48e2ec
push eax
call fcn.004585a3
add esp, 0xc
lea ecx, [esp + 0x18]
lea edx, [esp + 0x228]
push ecx
push edx
push str.PortPOP3
push 0x49255c
call ebp
mov eax, dword [ebx + 0x4100]
lea ecx, [esp + 0x228]
push eax
push 0x48e2ec
push ecx
call fcn.004585a3
add esp, 0xc
lea edx, [esp + 0x18]
lea eax, [esp + 0x228]
push edx
push eax
push str.EnableESMTP
push 0x49255c
call ebp
lea edx, [ebx + 0x60]
or ecx, 0xffffffff
mov edi, edx
xor eax, eax
repne scasb al, byte es:[edi]
not ecx
dec ecx
neg ecx
sbb ecx, ecx
and ecx, edx
lea edx, [esp + 0x18]
push edx
push ecx
push str.EntrySelected
push str.Dial
call ebp
lea edx, [ebx + 0x460]
or ecx, 0xffffffff
mov edi, edx
xor eax, eax
repne scasb al, byte es:[edi]
not ecx
dec ecx
lea eax, [esp + 0x18]
neg ecx
sbb ecx, ecx
push eax
and ecx, edx
push ecx
push str.UserName
push str.Dial
call ebp
lea edi, [ebx + 0x860]
or ecx, 0xffffffff
xor eax, eax
lea edx, [esp + 0x228]
repne scasb al, byte es:[edi]
not ecx
sub edi, ecx
mov eax, ecx
mov esi, edi
mov edi, edx
shr ecx, 2
rep movsd dword es:[edi], dword [esi]
mov ecx, eax
xor eax, eax
and ecx, 3
mov dword [esp + 0x10], eax
rep movsb byte es:[edi], byte [esi]
mov cl, byte [0x494b70]
lea edi, [esp + 0x1735]
mov byte [esp + 0x1734], cl
mov ecx, 0x400
rep stosd dword es:[edi], eax
lea edi, [esp + 0x228]
or ecx, 0xffffffff
repne scasb al, byte es:[edi]
not ecx
dec ecx
test ecx, ecx
jle 0x446bbc
mov edx, dword [esp + 0x10]
mov ecx, 0x3e7
movsx eax, byte [esp + edx + 0x228]
sub ecx, eax
lea edx, [esp + 0x1334]
push ecx
push 0x48e490
push edx
call fcn.004585a3
lea edi, [esp + 0x1340]
or ecx, 0xffffffff
xor eax, eax
add esp, 0xc
repne scasb al, byte es:[edi]
not ecx
sub edi, ecx
lea edx, [esp + 0x1734]
mov esi, edi
mov edi, edx
mov edx, ecx
or ecx, 0xffffffff
repne scasb al, byte es:[edi]
mov ecx, edx
dec edi
shr ecx, 2
rep movsd dword es:[edi], dword [esi]
mov ecx, edx
mov edx, dword [esp + 0x10]
and ecx, 3
inc edx
rep movsb byte es:[edi], byte [esi]
lea edi, [esp + 0x228]
or ecx, 0xffffffff
repne scasb al, byte es:[edi]
not ecx
dec ecx
mov dword [esp + 0x10], edx
cmp edx, ecx
jl 0x446b44
lea edi, [esp + 0x1734]
or ecx, 0xffffffff
xor eax, eax
lea edx, [esp + 0x228]
repne scasb al, byte es:[edi]
not ecx
sub edi, ecx
mov eax, ecx
mov esi, edi
mov edi, edx
lea edx, [esp + 0x228]
shr ecx, 2
rep movsd dword es:[edi], dword [esi]
mov ecx, eax
xor eax, eax
and ecx, 3
rep movsb byte es:[edi], byte [esi]
lea ecx, [esp + 0x18]
lea edi, [esp + 0x228]
push ecx
or ecx, 0xffffffff
repne scasb al, byte es:[edi]
not ecx
dec ecx
neg ecx
sbb ecx, ecx
and ecx, edx
push ecx
push 0x48e420
push str.Dial
call ebp
mov eax, dword [ebx + 0xc64]
lea ecx, [esp + 0x228]
push eax
push 0x48e2ec
push ecx
call fcn.004585a3
add esp, 0xc
lea edx, [esp + 0x18]
lea eax, [esp + 0x228]
push edx
push eax
push str.IdleTimeout
push str.Dial
call ebp
mov eax, dword [ebx + 0xc60]
test eax, eax
mov eax, 0x48e484
jne 0x446c60
mov eax, 0x48e480
lea ecx, [esp + 0x18]
push ecx
push eax
push str.AutoDisconnect
push str.Dial
call ebp
mov eax, dword [ebx + 0xc68]
test eax, eax
mov eax, 0x48e484
jne 0x446c86
mov eax, 0x48e480
lea edx, [esp + 0x18]
push edx
push eax
push str.AutoDial
push str.Dial
call ebp
mov eax, dword [ebx + 0xc74]
test eax, eax
mov eax, 0x48e484
jne 0x446cac
mov eax, 0x48e480
lea ecx, [esp + 0x18]
push ecx
push eax
push 0x4912f0
push str.Dial
call ebp
mov eax, dword [ebx + 0xc78]
test eax, eax
mov eax, 0x48e484
jne 0x446cd2
mov eax, 0x48e480
lea edx, [esp + 0x18]
push edx
push eax
push 0x49255c
push str.Dial
call ebp
mov eax, dword [ebx + 0xc7c]
test eax, eax
mov eax, 0x48e484
jne 0x446cf8
mov eax, 0x48e480
lea ecx, [esp + 0x18]
push ecx
push eax
push 0x49249c
push str.Dial
call ebp
mov eax, dword [ebx + 0xc80]
test eax, eax
mov eax, 0x48e484
jne 0x446d1e
mov eax, 0x48e480
lea edx, [esp + 0x18]
push edx
push eax
push 0x492494
push str.Dial
call ebp
mov eax, dword [ebx + 0xc84]
test eax, eax
mov eax, 0x48e484
jne 0x446d44
mov eax, 0x48e480
lea ecx, [esp + 0x18]
push ecx
push eax
push 0x49248c
push str.Dial
call ebp
mov eax, dword [ebx + 0xc88]
test eax, eax
mov eax, 0x48e484
jne 0x446d6a
mov eax, 0x48e480
lea edx, [esp + 0x18]
push edx
push eax
push 0x492484
push str.Dial
call ebp
mov eax, dword [ebx + 0xc8c]
test eax, eax
mov eax, 0x48e484
jne 0x446d90
mov eax, 0x48e480
lea ecx, [esp + 0x18]
push ecx
push eax
push 0x49247c
push str.Dial
call ebp
mov eax, dword [ebx + 0xc6c]
test eax, eax
mov eax, 0x48e484
jne 0x446db6
mov eax, 0x48e480
lea edx, [esp + 0x18]
push edx
push eax
push str.DialWhenStartup
push str.Dial
call ebp
mov eax, dword [ebx + 0xc70]
test eax, eax
mov eax, 0x48e484
jne 0x446ddc
mov eax, 0x48e480
lea ecx, [esp + 0x18]
push ecx
push eax
push str.DisconnectWhenShutdown
push str.Dial
call ebp
mov eax, dword [ebx + 0x50]
test eax, eax
mov eax, 0x48e484
jne 0x446dff
mov eax, 0x48e480
lea edx, [esp + 0x18]
push edx
push eax
push str.LoadFromCache
push 0x48e758
call ebp
mov eax, dword [ebx + 0x54]
lea ecx, [esp + 0x228]
push eax
push 0x48e2ec
push ecx
call fcn.004585a3
add esp, 0xc
lea edx, [esp + 0x18]
lea eax, [esp + 0x228]
push edx
push eax
push str.CacheTimeout
push 0x48e758
call ebp
mov eax, dword [ebx + 0x4104]
test eax, eax
mov eax, 0x48e484
jne 0x446e57
mov eax, 0x48e480
lea ecx, [esp + 0x18]
push ecx
push eax
push str.CascadingProxy
push str.System
call ebp
lea edx, [ebx + 0x4108]
or ecx, 0xffffffff
mov edi, edx
xor eax, eax
repne scasb al, byte es:[edi]
not ecx
dec ecx
neg ecx
sbb ecx, ecx
and ecx, edx
lea edx, [esp + 0x18]
push edx
push ecx
push str.ProxyAddr
push str.CascadingProxy
call ebp
lea edx, [ebx + 0x4508]
or ecx, 0xffffffff
mov edi, edx
xor eax, eax
repne scasb al, byte es:[edi]
not ecx
dec ecx
lea eax, [esp + 0x18]
neg ecx
sbb ecx, ecx
push eax
and ecx, edx
push ecx
push 0x491240
push str.CascadingProxy
call ebp
mov ecx, dword [ebx + 0x4908]
lea edx, [esp + 0x228]
push ecx
push 0x48e2ec
push edx
call fcn.004585a3
add esp, 0xc
lea eax, [esp + 0x18]
lea ecx, [esp + 0x228]
push eax
push ecx
push 0x4923f0
push str.CascadingProxy
call ebp
mov eax, dword [ebx + 0x490c]
test eax, eax
mov eax, 0x48e484
jne 0x446f06
mov eax, 0x48e480
lea edx, [esp + 0x18]
push edx
push eax
push str.NeedAuth
push str.CascadingProxy
call ebp
lea edx, [ebx + 0x4910]
or ecx, 0xffffffff
mov edi, edx
xor eax, eax
repne scasb al, byte es:[edi]
not ecx
dec ecx
lea eax, [esp + 0x18]
neg ecx
sbb ecx, ecx
push eax
and ecx, edx
push ecx
push str.UserName
push str.CascadingProxy
call ebp
lea edi, [ebx + 0x4d10]
or ecx, 0xffffffff
xor eax, eax
lea edx, [esp + 0x228]
repne scasb al, byte es:[edi]
not ecx
sub edi, ecx
mov eax, ecx
mov esi, edi
mov edi, edx
shr ecx, 2
rep movsd dword es:[edi], dword [esi]
mov ecx, eax
xor eax, eax
and ecx, 3
mov dword [esp + 0x10], eax
rep movsb byte es:[edi], byte [esi]
mov cl, byte [0x494b70]
lea edi, [esp + 0x1735]
mov byte [esp + 0x1734], cl
mov ecx, 0x400
rep stosd dword es:[edi], eax
lea edi, [esp + 0x228]
or ecx, 0xffffffff
repne scasb al, byte es:[edi]
not ecx
dec ecx
test ecx, ecx
jle 0x447018
mov edx, dword [esp + 0x10]
mov ecx, 0x3e7
movsx eax, byte [esp + edx + 0x228]
sub ecx, eax
lea edx, [esp + 0x1334]
push ecx
push 0x48e490
push edx
call fcn.004585a3
lea edi, [esp + 0x1340]
or ecx, 0xffffffff
xor eax, eax
add esp, 0xc
repne scasb al, byte es:[edi]
not ecx
sub edi, ecx
lea edx, [esp + 0x1734]
mov esi, edi
mov edi, edx
mov edx, ecx
or ecx, 0xffffffff
repne scasb al, byte es:[edi]
mov ecx, edx
dec edi
shr ecx, 2
rep movsd dword es:[edi], dword [esi]
mov ecx, edx
mov edx, dword [esp + 0x10]
and ecx, 3
inc edx
rep movsb byte es:[edi], byte [esi]
lea edi, [esp + 0x228]
or ecx, 0xffffffff
repne scasb al, byte es:[edi]
not ecx
dec ecx
mov dword [esp + 0x10], edx
cmp edx, ecx
jl 0x446fa0
lea edi, [esp + 0x1734]
or ecx, 0xffffffff
xor eax, eax
lea edx, [esp + 0x228]
repne scasb al, byte es:[edi]
not ecx
sub edi, ecx
mov eax, ecx
mov esi, edi
mov edi, edx
lea edx, [esp + 0x228]
shr ecx, 2
rep movsd dword es:[edi], dword [esi]
mov ecx, eax
xor eax, eax
and ecx, 3
rep movsb byte es:[edi], byte [esi]
lea ecx, [esp + 0x18]
lea edi, [esp + 0x228]
push ecx
or ecx, 0xffffffff
repne scasb al, byte es:[edi]
not ecx
dec ecx
neg ecx
sbb ecx, ecx
and ecx, edx
push ecx
push 0x48e420
push str.CascadingProxy
call ebp
mov eax, dword [ebx + 0x5110]
test eax, eax
mov eax, 0x48e484
jne 0x447087
mov eax, 0x48e480
lea ecx, [esp + 0x18]
push ecx
push eax
push str.CascadingWWW
push str.CascadingProxy
call ebp
lea edx, [ebx + 0x5124]
or ecx, 0xffffffff
mov edi, edx
xor eax, eax
repne scasb al, byte es:[edi]
not ecx
dec ecx
neg ecx
sbb ecx, ecx
and ecx, edx
lea edx, [esp + 0x18]
push edx
push ecx
push str.WWWProxyAddr
push str.CascadingProxy
call ebp
lea edx, [ebx + 0x6524]
or ecx, 0xffffffff
mov edi, edx
xor eax, eax
repne scasb al, byte es:[edi]
not ecx
dec ecx
lea eax, [esp + 0x18]
neg ecx
sbb ecx, ecx
push eax
and ecx, edx
push ecx
push str.WWWProtocol
push str.CascadingProxy
call ebp
mov ecx, dword [ebx + 0x7924]
lea edx, [esp + 0x228]
push ecx
push 0x48e2ec
push edx
call fcn.004585a3
add esp, 0xc
lea eax, [esp + 0x18]
lea ecx, [esp + 0x228]
push eax
push ecx
push str.WWWPort
push str.CascadingProxy
call ebp
mov eax, dword [ebx + 0x7938]
test eax, eax
mov eax, 0x48e484
jne 0x447136
mov eax, 0x48e480
lea edx, [esp + 0x18]
push edx
push eax
push str.WWWNeedAuth
push str.CascadingProxy
call ebp
lea edx, [ebx + 0x794c]
or ecx, 0xffffffff
mov edi, edx
xor eax, eax
repne scasb al, byte es:[edi]
not ecx
dec ecx
lea eax, [esp + 0x18]
neg ecx
sbb ecx, ecx
push eax
and ecx, edx
push ecx
push str.WWWUserName
push str.CascadingProxy
call ebp
lea edi, [ebx + 0x8d4c]
or ecx, 0xffffffff
xor eax, eax
lea edx, [esp + 0x228]
repne scasb al, byte es:[edi]
not ecx
sub edi, ecx
mov eax, ecx
mov esi, edi
mov edi, edx
shr ecx, 2
rep movsd dword es:[edi], dword [esi]
mov ecx, eax
xor eax, eax
and ecx, 3
mov dword [esp + 0x10], eax
rep movsb byte es:[edi], byte [esi]
mov cl, byte [0x494b70]
lea edi, [esp + 0x1735]
mov byte [esp + 0x1734], cl
mov ecx, 0x400
rep stosd dword es:[edi], eax
lea edi, [esp + 0x228]
or ecx, 0xffffffff
repne scasb al, byte es:[edi]
not ecx
dec ecx
test ecx, ecx
jle 0x447248
mov edx, dword [esp + 0x10]
mov ecx, 0x3e7
movsx eax, byte [esp + edx + 0x228]
sub ecx, eax
lea edx, [esp + 0x1334]
push ecx
push 0x48e490
push edx
call fcn.004585a3
lea edi, [esp + 0x1340]
or ecx, 0xffffffff
xor eax, eax
add esp, 0xc
repne scasb al, byte es:[edi]
not ecx
sub edi, ecx
lea edx, [esp + 0x1734]
mov esi, edi
mov edi, edx
mov edx, ecx
or ecx, 0xffffffff
repne scasb al, byte es:[edi]
mov ecx, edx
dec edi
shr ecx, 2
rep movsd dword es:[edi], dword [esi]
mov ecx, edx
mov edx, dword [esp + 0x10]
and ecx, 3
inc edx
rep movsb byte es:[edi], byte [esi]
lea edi, [esp + 0x228]
or ecx, 0xffffffff
repne scasb al, byte es:[edi]
not ecx
dec ecx
mov dword [esp + 0x10], edx
cmp edx, ecx
jl 0x4471d0
lea edi, [esp + 0x1734]
or ecx, 0xffffffff
xor eax, eax
lea edx, [esp + 0x228]
repne scasb al, byte es:[edi]
not ecx
sub edi, ecx
mov eax, ecx
mov esi, edi
mov edi, edx
lea edx, [esp + 0x228]
shr ecx, 2
rep movsd dword es:[edi], dword [esi]
mov ecx, eax
xor eax, eax
and ecx, 3
rep movsb byte es:[edi], byte [esi]
lea ecx, [esp + 0x18]
lea edi, [esp + 0x228]
push ecx
or ecx, 0xffffffff
repne scasb al, byte es:[edi]
not ecx
dec ecx
neg ecx
sbb ecx, ecx
and ecx, edx
push ecx
push str.WWWPassword
push str.CascadingProxy
call ebp
mov eax, dword [ebx + 0x5114]
test eax, eax
mov eax, 0x48e484
jne 0x4472b7
mov eax, 0x48e480
lea ecx, [esp + 0x18]
push ecx
push eax
push str.CascadingSOCKS
push str.CascadingProxy
call ebp
lea edx, [ebx + 0x5524]
or ecx, 0xffffffff
mov edi, edx
xor eax, eax
repne scasb al, byte es:[edi]
not ecx
dec ecx
neg ecx
sbb ecx, ecx
and ecx, edx
lea edx, [esp + 0x18]
push edx
push ecx
push str.SOCKSProxyAddr
push str.CascadingProxy
call ebp
lea edx, [ebx + 0x6924]
or ecx, 0xffffffff
mov edi, edx
xor eax, eax
repne scasb al, byte es:[edi]
not ecx
dec ecx
lea eax, [esp + 0x18]
neg ecx
sbb ecx, ecx
push eax
and ecx, edx
push ecx
push str.SOCKSProtocol
push str.CascadingProxy
call ebp
mov ecx, dword [ebx + 0x7928]
lea edx, [esp + 0x228]
push ecx
push 0x48e2ec
push edx
call fcn.004585a3
add esp, 0xc
lea eax, [esp + 0x18]
lea ecx, [esp + 0x228]
push eax
push ecx
push str.SOCKSPort
push str.CascadingProxy
call ebp
mov eax, dword [ebx + 0x793c]
test eax, eax
mov eax, 0x48e484
jne 0x447366
mov eax, 0x48e480
lea edx, [esp + 0x18]
push edx
push eax
push str.SOCKSNeedAuth
push str.CascadingProxy
call ebp
lea edx, [ebx + 0x7d4c]
or ecx, 0xffffffff
mov edi, edx
xor eax, eax
repne scasb al, byte es:[edi]
not ecx
dec ecx
lea eax, [esp + 0x18]
neg ecx
sbb ecx, ecx
push eax
and ecx, edx
push ecx
push str.SOCKSUserName
push str.CascadingProxy
call ebp
lea edi, [ebx + 0x914c]
or ecx, 0xffffffff
xor eax, eax
lea edx, [esp + 0x228]
repne scasb al, byte es:[edi]
not ecx
sub edi, ecx
mov eax, ecx
mov esi, edi
mov edi, edx
shr ecx, 2
rep movsd dword es:[edi], dword [esi]
mov ecx, eax
xor eax, eax
and ecx, 3
mov dword [esp + 0x10], eax
rep movsb byte es:[edi], byte [esi]
mov cl, byte [0x494b70]
lea edi, [esp + 0x1735]
mov byte [esp + 0x1734], cl
mov ecx, 0x400
rep stosd dword es:[edi], eax
lea edi, [esp + 0x228]
or ecx, 0xffffffff
repne scasb al, byte es:[edi]
not ecx
dec ecx
test ecx, ecx
jle 0x447478
mov edx, dword [esp + 0x10]
mov ecx, 0x3e7
movsx eax, byte [esp + edx + 0x228]
sub ecx, eax
lea edx, [esp + 0x1334]
push ecx
push 0x48e490
push edx
call fcn.004585a3
lea edi, [esp + 0x1340]
or ecx, 0xffffffff
xor eax, eax
add esp, 0xc
repne scasb al, byte es:[edi]
not ecx
sub edi, ecx
lea edx, [esp + 0x1734]
mov esi, edi
mov edi, edx
mov edx, ecx
or ecx, 0xffffffff
repne scasb al, byte es:[edi]
mov ecx, edx
dec edi
shr ecx, 2
rep movsd dword es:[edi], dword [esi]
mov ecx, edx
mov edx, dword [esp + 0x10]
and ecx, 3
inc edx
rep movsb byte es:[edi], byte [esi]
lea edi, [esp + 0x228]
or ecx, 0xffffffff
repne scasb al, byte es:[edi]
not ecx
dec ecx
mov dword [esp + 0x10], edx
cmp edx, ecx
jl 0x447400
lea edi, [esp + 0x1734]
or ecx, 0xffffffff
xor eax, eax
lea edx, [esp + 0x228]
repne scasb al, byte es:[edi]
not ecx
sub edi, ecx
mov eax, ecx
mov esi, edi
mov edi, edx
lea edx, [esp + 0x228]
shr ecx, 2
rep movsd dword es:[edi], dword [esi]
mov ecx, eax
xor eax, eax
and ecx, 3
rep movsb byte es:[edi], byte [esi]
lea ecx, [esp + 0x18]
lea edi, [esp + 0x228]
push ecx
or ecx, 0xffffffff
repne scasb al, byte es:[edi]
not ecx
dec ecx
neg ecx
sbb ecx, ecx
and ecx, edx
push ecx
push str.SOCKSPassword
push str.CascadingProxy
call ebp
mov eax, dword [ebx + 0x5118]
test eax, eax
mov eax, 0x48e484
jne 0x4474e7
mov eax, 0x48e480
lea ecx, [esp + 0x18]
push ecx
push eax
push str.CascadingSMTP
push str.CascadingProxy
call ebp
lea edx, [ebx + 0x5924]
or ecx, 0xffffffff
mov edi, edx
xor eax, eax
repne scasb al, byte es:[edi]
not ecx
dec ecx
neg ecx
sbb ecx, ecx
and ecx, edx
lea edx, [esp + 0x18]
push edx
push ecx
push str.SMTPProxyAddr
push str.CascadingProxy
call ebp
lea edx, [ebx + 0x6d24]
or ecx, 0xffffffff
mov edi, edx
xor eax, eax
repne scasb al, byte es:[edi]
not ecx
dec ecx
lea eax, [esp + 0x18]
neg ecx
sbb ecx, ecx
push eax
and ecx, edx
push ecx
push str.SMTPProtocol
push str.CascadingProxy
call ebp
mov ecx, dword [ebx + 0x792c]
lea edx, [esp + 0x228]
push ecx
push 0x48e2ec
push edx
call fcn.004585a3
add esp, 0xc
lea eax, [esp + 0x18]
lea ecx, [esp + 0x228]
push eax
push ecx
push str.SMTPPort
push str.CascadingProxy
call ebp
mov eax, dword [ebx + 0x7940]
test eax, eax
mov eax, 0x48e484
jne 0x447596
mov eax, 0x48e480
lea edx, [esp + 0x18]
push edx
push eax
push str.SMTPNeedAuth
push str.CascadingProxy
call ebp
lea edx, [ebx + 0x814c]
or ecx, 0xffffffff
mov edi, edx
xor eax, eax
repne scasb al, byte es:[edi]
not ecx
dec ecx
lea eax, [esp + 0x18]
neg ecx
sbb ecx, ecx
push eax
and ecx, edx
push ecx
push str.SMTPUserName
push str.CascadingProxy
call ebp
lea edi, [ebx + 0x954c]
or ecx, 0xffffffff
xor eax, eax
lea edx, [esp + 0x228]
repne scasb al, byte es:[edi]
not ecx
sub edi, ecx
mov eax, ecx
mov esi, edi
mov edi, edx
shr ecx, 2
rep movsd dword es:[edi], dword [esi]
mov ecx, eax
xor eax, eax
and ecx, 3
mov dword [esp + 0x10], eax
rep movsb byte es:[edi], byte [esi]
mov cl, byte [0x494b70]
lea edi, [esp + 0x1735]
mov byte [esp + 0x1734], cl
mov ecx, 0x400
rep stosd dword es:[edi], eax
lea edi, [esp + 0x228]
or ecx, 0xffffffff
repne scasb al, byte es:[edi]
not ecx
dec ecx
test ecx, ecx
jle 0x4476a8
mov edx, dword [esp + 0x10]
mov ecx, 0x3e7
movsx eax, byte [esp + edx + 0x228]
sub ecx, eax
lea edx, [esp + 0x1334]
push ecx
push 0x48e490
push edx
call fcn.004585a3
lea edi, [esp + 0x1340]
or ecx, 0xffffffff
xor eax, eax
add esp, 0xc
repne scasb al, byte es:[edi]
not ecx
sub edi, ecx
lea edx, [esp + 0x1734]
mov esi, edi
mov edi, edx
mov edx, ecx
or ecx, 0xffffffff
repne scasb al, byte es:[edi]
mov ecx, edx
dec edi
shr ecx, 2
rep movsd dword es:[edi], dword [esi]
mov ecx, edx
mov edx, dword [esp + 0x10]
and ecx, 3
inc edx
rep movsb byte es:[edi], byte [esi]
lea edi, [esp + 0x228]
or ecx, 0xffffffff
repne scasb al, byte es:[edi]
not ecx
dec ecx
mov dword [esp + 0x10], edx
cmp edx, ecx
jl 0x447630
lea edi, [esp + 0x1734]
or ecx, 0xffffffff
xor eax, eax
lea edx, [esp + 0x228]
repne scasb al, byte es:[edi]
not ecx
sub edi, ecx
mov eax, ecx
mov esi, edi
mov edi, edx
lea edx, [esp + 0x228]
shr ecx, 2
rep movsd dword es:[edi], dword [esi]
mov ecx, eax
xor eax, eax
and ecx, 3
rep movsb byte es:[edi], byte [esi]
lea ecx, [esp + 0x18]
lea edi, [esp + 0x228]
push ecx
or ecx, 0xffffffff
repne scasb al, byte es:[edi]
not ecx
dec ecx
neg ecx
sbb ecx, ecx
and ecx, edx
push ecx
push str.SMTPPassword
push str.CascadingProxy
call ebp
mov eax, dword [ebx + 0x511c]
test eax, eax
mov eax, 0x48e484
jne 0x447717
mov eax, 0x48e480
lea ecx, [esp + 0x18]
push ecx
push eax
push str.CascadingPOP3
push str.CascadingProxy
call ebp
lea edx, [ebx + 0x5d24]
or ecx, 0xffffffff
mov edi, edx
xor eax, eax
repne scasb al, byte es:[edi]
not ecx
dec ecx
neg ecx
sbb ecx, ecx
and ecx, edx
lea edx, [esp + 0x18]
push edx
push ecx
push str.POP3ProxyAddr
push str.CascadingProxy
call ebp
lea edx, [ebx + 0x7124]
or ecx, 0xffffffff
mov edi, edx
xor eax, eax
repne scasb al, byte es:[edi]
not ecx
dec ecx
lea eax, [esp + 0x18]
neg ecx
sbb ecx, ecx
push eax
and ecx, edx
push ecx
push str.POP3Protocol
push str.CascadingProxy
call ebp
mov ecx, dword [ebx + 0x7930]
lea edx, [esp + 0x228]
push ecx
push 0x48e2ec
push edx
call fcn.004585a3
add esp, 0xc
lea eax, [esp + 0x18]
lea ecx, [esp + 0x228]
push eax
push ecx
push str.POP3Port
push str.CascadingProxy
call ebp
mov eax, dword [ebx + 0x7944]
test eax, eax
mov eax, 0x48e484
jne 0x4477c6
mov eax, 0x48e480
lea edx, [esp + 0x18]
push edx
push eax
push str.POP3NeedAuth
push str.CascadingProxy
call ebp
lea edx, [ebx + 0x854c]
or ecx, 0xffffffff
mov edi, edx
xor eax, eax
repne scasb al, byte es:[edi]
not ecx
dec ecx
lea eax, [esp + 0x18]
neg ecx
sbb ecx, ecx
push eax
and ecx, edx
push ecx
push str.POP3UserName
push str.CascadingProxy
call ebp
lea edi, [ebx + 0x994c]
or ecx, 0xffffffff
xor eax, eax
lea edx, [esp + 0x228]
repne scasb al, byte es:[edi]
not ecx
sub edi, ecx
mov eax, ecx
mov esi, edi
mov edi, edx
shr ecx, 2
rep movsd dword es:[edi], dword [esi]
mov ecx, eax
xor eax, eax
and ecx, 3
mov dword [esp + 0x10], eax
rep movsb byte es:[edi], byte [esi]
mov cl, byte [0x494b70]
lea edi, [esp + 0x1735]
mov byte [esp + 0x1734], cl
mov ecx, 0x400
rep stosd dword es:[edi], eax
lea edi, [esp + 0x228]
or ecx, 0xffffffff
repne scasb al, byte es:[edi]
not ecx
dec ecx
test ecx, ecx
jle 0x4478d8
mov edx, dword [esp + 0x10]
mov ecx, 0x3e7
movsx eax, byte [esp + edx + 0x228]
sub ecx, eax
lea edx, [esp + 0x1334]
push ecx
push 0x48e490
push edx
call fcn.004585a3
lea edi, [esp + 0x1340]
or ecx, 0xffffffff
xor eax, eax
add esp, 0xc
repne scasb al, byte es:[edi]
not ecx
sub edi, ecx
lea edx, [esp + 0x1734]
mov esi, edi
mov edi, edx
mov edx, ecx
or ecx, 0xffffffff
repne scasb al, byte es:[edi]
mov ecx, edx
dec edi
shr ecx, 2
rep movsd dword es:[edi], dword [esi]
mov ecx, edx
mov edx, dword [esp + 0x10]
and ecx, 3
inc edx
rep movsb byte es:[edi], byte [esi]
lea edi, [esp + 0x228]
or ecx, 0xffffffff
repne scasb al, byte es:[edi]
not ecx
dec ecx
mov dword [esp + 0x10], edx
cmp edx, ecx
jl 0x447860
lea edi, [esp + 0x1734]
or ecx, 0xffffffff
xor eax, eax
lea edx, [esp + 0x228]
repne scasb al, byte es:[edi]
not ecx
sub edi, ecx
mov eax, ecx
mov esi, edi
mov edi, edx
lea edx, [esp + 0x228]
shr ecx, 2
rep movsd dword es:[edi], dword [esi]
mov ecx, eax
xor eax, eax
and ecx, 3
rep movsb byte es:[edi], byte [esi]
lea ecx, [esp + 0x18]
lea edi, [esp + 0x228]
push ecx
or ecx, 0xffffffff
repne scasb al, byte es:[edi]
not ecx
dec ecx
neg ecx
sbb ecx, ecx
and ecx, edx
push ecx
push str.POP3Password
push str.CascadingProxy
call ebp
mov eax, dword [ebx + 0x5120]
test eax, eax
mov eax, 0x48e484
jne 0x447947
mov eax, 0x48e480
lea ecx, [esp + 0x18]
push ecx
push eax
push str.CascadingOTHERS
push str.CascadingProxy
call ebp
lea edx, [ebx + 0x6124]
or ecx, 0xffffffff
mov edi, edx
xor eax, eax
repne scasb al, byte es:[edi]
not ecx
dec ecx
neg ecx
sbb ecx, ecx
and ecx, edx
lea edx, [esp + 0x18]
push edx
push ecx
push str.OTHERSProxyAddr
push str.CascadingProxy
call ebp
lea edx, [ebx + 0x7524]
or ecx, 0xffffffff
mov edi, edx
xor eax, eax
repne scasb al, byte es:[edi]
not ecx
dec ecx
lea eax, [esp + 0x18]
neg ecx
sbb ecx, ecx
push eax
and ecx, edx
push ecx
push str.OTHERSProtocol
push str.CascadingProxy
call ebp
mov ecx, dword [ebx + 0x7934]
lea edx, [esp + 0x228]
push ecx
push 0x48e2ec
push edx
call fcn.004585a3
add esp, 0xc
lea eax, [esp + 0x18]
lea ecx, [esp + 0x228]
push eax
push ecx
push str.OTHERSPort
push str.CascadingProxy
call ebp
mov eax, dword [ebx + 0x7948]
test eax, eax
mov eax, 0x48e484
jne 0x4479f6
mov eax, 0x48e480
lea edx, [esp + 0x18]
push edx
push eax
push str.OTHERSNeedAuth
push str.CascadingProxy
call ebp
lea edx, [ebx + 0x894c]
or ecx, 0xffffffff
mov edi, edx
xor eax, eax
repne scasb al, byte es:[edi]
not ecx
dec ecx
lea eax, [esp + 0x18]
neg ecx
sbb ecx, ecx
push eax
and ecx, edx
push ecx
push str.OTHERSUserName
push str.CascadingProxy
call ebp
lea edi, [ebx + 0x9d4c]
or ecx, 0xffffffff
xor eax, eax
lea edx, [esp + 0x228]
repne scasb al, byte es:[edi]
not ecx
sub edi, ecx
mov eax, ecx
mov esi, edi
mov edi, edx
shr ecx, 2
rep movsd dword es:[edi], dword [esi]
mov ecx, eax
xor eax, eax
and ecx, 3
mov dword [esp + 0x10], eax
rep movsb byte es:[edi], byte [esi]
mov cl, byte [0x494b70]
lea edi, [esp + 0x1735]
mov byte [esp + 0x1734], cl
mov ecx, 0x400
rep stosd dword es:[edi], eax
lea edi, [esp + 0x228]
or ecx, 0xffffffff
repne scasb al, byte es:[edi]
not ecx
dec ecx
test ecx, ecx
jle 0x447b08
mov edx, dword [esp + 0x10]
mov ecx, 0x3e7
movsx eax, byte [esp + edx + 0x228]
sub ecx, eax
lea edx, [esp + 0x1334]
push ecx
push 0x48e490
push edx
call fcn.004585a3
lea edi, [esp + 0x1340]
or ecx, 0xffffffff
xor eax, eax
add esp, 0xc
repne scasb al, byte es:[edi]
not ecx
sub edi, ecx
lea edx, [esp + 0x1734]
mov esi, edi
mov edi, edx
mov edx, ecx
or ecx, 0xffffffff
repne scasb al, byte es:[edi]
mov ecx, edx
dec edi
shr ecx, 2
rep movsd dword es:[edi], dword [esi]
mov ecx, edx
mov edx, dword [esp + 0x10]
and ecx, 3
inc edx
rep movsb byte es:[edi], byte [esi]
lea edi, [esp + 0x228]
or ecx, 0xffffffff
repne scasb al, byte es:[edi]
not ecx
dec ecx
mov dword [esp + 0x10], edx
cmp edx, ecx
jl 0x447a90
lea edi, [esp + 0x1734]
or ecx, 0xffffffff
xor eax, eax
lea edx, [esp + 0x228]
repne scasb al, byte es:[edi]
not ecx
sub edi, ecx
mov eax, ecx
mov esi, edi
mov edi, edx
lea edx, [esp + 0x228]
shr ecx, 2
rep movsd dword es:[edi], dword [esi]
mov ecx, eax
xor eax, eax
and ecx, 3
rep movsb byte es:[edi], byte [esi]
lea ecx, [esp + 0x18]
lea edi, [esp + 0x228]
push ecx
or ecx, 0xffffffff
repne scasb al, byte es:[edi]
not ecx
dec ecx
neg ecx
sbb ecx, ecx
and ecx, edx
push ecx
push str.OTHERSPassword
push str.CascadingProxy
call ebp
mov eax, dword [ebx + 0xa14c]
test eax, eax
mov eax, 0x48e484
jne 0x447b77
mov eax, 0x48e480
lea ecx, [esp + 0x18]
push ecx
push eax
push str.SaveLogs
push 0x48e744
call ebp
lea edx, [ebx + 0xa150]
or ecx, 0xffffffff
mov edi, edx
xor eax, eax
repne scasb al, byte es:[edi]
not ecx
dec ecx
neg ecx
sbb ecx, ecx
and ecx, edx
lea edx, [esp + 0x18]
push edx
push ecx
push str.LogPath
push 0x48e744
call ebp
mov eax, dword [ebx + 0xa550]
test eax, eax
mov eax, 0x48e484
jne 0x447bc7
mov eax, 0x48e480
lea ecx, [esp + 0x18]
push ecx
push eax
push str.RequestURL
push 0x48e744
call ebp
mov eax, dword [ebx + 0xa554]
test eax, eax
mov eax, 0x48e484
jne 0x447bed
mov eax, 0x48e480
lea edx, [esp + 0x18]
push edx
push eax
push str.PicInfo
push 0x48e744
call ebp
mov eax, dword [ebx + 0xa558]
test eax, eax
mov eax, 0x48e484
jne 0x447c13
mov eax, 0x48e480
lea ecx, [esp + 0x18]
push ecx
push eax
push str.MailInfo
push 0x48e744
call ebp
mov eax, dword [ebx + 0xa55c]
test eax, eax
mov eax, 0x48e484
jne 0x447c39
mov eax, 0x48e480
lea edx, [esp + 0x18]
push edx
push eax
push str.MailOutcoming
push 0x48e744
call ebp
mov eax, dword [ebx + 0xa560]
lea ecx, [esp + 0x228]
push eax
push 0x48e2ec
push ecx
call fcn.004585a3
add esp, 0xc
lea edx, [esp + 0x18]
lea eax, [esp + 0x228]
push edx
push eax
push str.MaxLine
push 0x48e744
call ebp
lea edx, [ebx + 0x10a4]
or ecx, 0xffffffff
mov edi, edx
xor eax, eax
repne scasb al, byte es:[edi]
not ecx
dec ecx
neg ecx
sbb ecx, ecx
and ecx, edx
lea edx, [esp + 0x18]
push edx
push ecx
push 0x48e194
push str.System
call ebp
fild dword [ebx + 0xa9b0]
sub esp, 8
lea eax, [esp + 0x230]
fmul dword [0x47de38]
fstp qword [esp]
push str._.1f
push eax
call fcn.004585a3
add esp, 0x10
lea ecx, [esp + 0x18]
lea edx, [esp + 0x228]
push ecx
push edx
push str.SocketIdleTimeout
push str.System
call ebp
mov eax, dword [ebx + 0xc98]
test eax, eax
mov eax, 0x48e484
jne 0x447cfe
mov eax, 0x48e480
lea ecx, [esp + 0x18]
push ecx
push eax
push str.PasswordProtect
push str.System
call ebp
mov eax, dword [ebx + 0xc9c]
test eax, eax
mov eax, 0x48e484
jne 0x447d24
mov eax, 0x48e480
lea edx, [esp + 0x18]
push edx
push eax
push str.PasswordProtectStartup
push str.System
call ebp
lea edi, [ebx + 0xca0]
or ecx, 0xffffffff
xor eax, eax
lea edx, [esp + 0x228]
repne scasb al, byte es:[edi]
not ecx
sub edi, ecx
mov eax, ecx
mov esi, edi
mov edi, edx
shr ecx, 2
rep movsd dword es:[edi], dword [esi]
mov ecx, eax
xor eax, eax
and ecx, 3
mov dword [esp + 0x10], eax
rep movsb byte es:[edi], byte [esi]
mov cl, byte [0x494b70]
lea edi, [esp + 0x1735]
mov byte [esp + 0x1734], cl
mov ecx, 0x400
rep stosd dword es:[edi], eax
lea edi, [esp + 0x228]
or ecx, 0xffffffff
repne scasb al, byte es:[edi]
not ecx
dec ecx
test ecx, ecx
jle 0x447e0c
mov edx, dword [esp + 0x10]
mov ecx, 0x3e7
movsx eax, byte [esp + edx + 0x228]
sub ecx, eax
lea edx, [esp + 0x1334]
push ecx
push 0x48e490
push edx
call fcn.004585a3
lea edi, [esp + 0x1340]
or ecx, 0xffffffff
xor eax, eax
add esp, 0xc
repne scasb al, byte es:[edi]
not ecx
sub edi, ecx
lea edx, [esp + 0x1734]
mov esi, edi
mov edi, edx
mov edx, ecx
or ecx, 0xffffffff
repne scasb al, byte es:[edi]
mov ecx, edx
dec edi
shr ecx, 2
rep movsd dword es:[edi], dword [esi]
mov ecx, edx
mov edx, dword [esp + 0x10]
and ecx, 3
inc edx
rep movsb byte es:[edi], byte [esi]
lea edi, [esp + 0x228]
or ecx, 0xffffffff
repne scasb al, byte es:[edi]
not ecx
dec ecx
mov dword [esp + 0x10], edx
cmp edx, ecx
jl 0x447d94
lea edi, [esp + 0x1734]
or ecx, 0xffffffff
xor eax, eax
lea edx, [esp + 0x228]
repne scasb al, byte es:[edi]
not ecx
sub edi, ecx
mov eax, ecx
mov esi, edi
mov edi, edx
lea edx, [esp + 0x228]
shr ecx, 2
rep movsd dword es:[edi], dword [esi]
mov ecx, eax
and ecx, 3
rep movsb byte es:[edi], byte [esi]
lea ecx, [esp + 0x18]
push ecx
push edx
push 0x48e420
push str.System
call ebp
mov eax, dword [ebx + 0x10a0]
test eax, eax
mov eax, 0x48e484
jne 0x447e64
mov eax, 0x48e480
lea ecx, [esp + 0x18]
push ecx
push eax
push str.AllHide
push str.System
call ebp
mov eax, dword [ebx + 0xa580]
test eax, eax
mov eax, 0x48e484
jne 0x447e8a
mov eax, 0x48e480
lea edx, [esp + 0x18]
push edx
push eax
push str.DisableExternalUser
push str.System
call ebp
lea edx, [ebx + 0xa9b8]
or ecx, 0xffffffff
mov edi, edx
xor eax, eax
repne scasb al, byte es:[edi]
not ecx
dec ecx
lea eax, [esp + 0x18]
neg ecx
sbb ecx, ecx
push eax
and ecx, edx
push ecx
push str.WebSitesCheckInternet
push str.System
call ebp
mov eax, dword [ebx + 0x14]
test eax, eax
mov eax, 0x48e484
jne 0x447ed7
mov eax, 0x48e480
lea ecx, [esp + 0x18]
push ecx
push eax
push str.StartSocks4
push str.System
call ebp
mov eax, dword [ebx + 0xb9bc]
test eax, eax
mov eax, 0x48e484
jne 0x447efd
mov eax, 0x48e480
lea edx, [esp + 0x18]
push edx
push eax
push str.AutoScanComputerName
push str.System
call ebp
lea eax, [esp + 0x18]
push eax
push 0
push str.MaxUserCount
push str.System
call ebp
lea ecx, [esp + 0x18]
push ecx
push 0
push str.MaxTimeSchedule
push str.System
call ebp
lea edx, [esp + 0x18]
push edx
push 0
push str.MaxWebFilter
push str.System
call ebp
mov eax, dword [ebx + 0x34bc]
lea ecx, [esp + 0x228]
push eax
push 0x48e2ec
push ecx
call fcn.004585a3
add esp, 0xc
lea edx, [esp + 0x18]
lea eax, [esp + 0x228]
push edx
push eax
push str.NTService
push str.System
call ebp
mov ecx, dword [ebx + 0x34b8]
lea edx, [esp + 0x228]
push ecx
push 0x48e2ec
push edx
call fcn.004585a3
add esp, 0xc
lea eax, [esp + 0x18]
lea ecx, [esp + 0x228]
push eax
push ecx
push str.AddMessage
push str.System
call ebp
lea edx, [esp + 0x18]
lea eax, [ebx + 0x14a8]
push edx
push eax
push str.WebAuthTitle
push str.StringEx
call ebp
lea ecx, [esp + 0x18]
lea edx, [ebx + 0x20b0]
push ecx
push edx
push str.AuthorityFailed
push str.StringEx
call ebp
lea eax, [esp + 0x18]
lea ecx, [ebx + 0x18a8]
push eax
push ecx
push str.WebSiteForbidden
push str.StringEx
call ebp
lea edx, [esp + 0x18]
lea eax, [ebx + 0x1cac]
push edx
push eax
push str.WebContentForbidden
push str.StringEx
call ebp
mov eax, dword [ebx + 0xb9c0]
test eax, eax
mov eax, 0x48e480
je 0x448026
mov eax, 0x48e484
lea ecx, [esp + 0x18]
push ecx
push eax
push str.EnableScanMAC
push str.System
call ebp
mov eax, dword [ebx + 0x34c4]
test eax, eax
mov eax, 0x48e480
je 0x44804c
mov eax, 0x48e484
lea edx, [esp + 0x18]
push edx
push eax
push str.ShutDownWhenIdle
push str.System
call ebp
mov eax, dword [ebx + 0x240b8]
test eax, eax
mov eax, 0x48e480
je 0x448072
mov eax, 0x48e484
lea ecx, [esp + 0x18]
push ecx
push eax
push str.BugTrace
push str.System
call ebp
mov eax, dword [ebx + 0xa568]
test eax, eax
mov eax, 0x48e480
je 0x448098
mov eax, 0x48e484
lea edx, [esp + 0x18]
push edx
push eax
push str.SaveUserData
push 0x48e744
call ebp
mov eax, dword [ebx + 0xa56c]
lea ecx, [esp + 0x228]
push eax
push 0x48e2ec
push ecx
call fcn.004585a3
add esp, 0xc
lea edx, [esp + 0x18]
lea eax, [esp + 0x228]
push edx
push eax
push str.SaveUserDataInterval
push 0x48e744
call ebp
mov eax, dword [ebx + 0x34c8]
test eax, eax
mov eax, 0x48e484
jne 0x4480f3
mov eax, 0x48e480
lea ecx, [esp + 0x18]
push ecx
push eax
push 0x48e368
push str.ShutDown
call ebp
lea edx, [esp + 0x18]
lea eax, [ebx + 0x34cc]
push edx
push eax
push str.Time
push str.ShutDown
call ebp
mov ecx, dword [ebx + 0x240a8]
lea edx, [esp + 0x228]
push ecx
push 0x48e2ec
push edx
call fcn.004585a3
add esp, 0xc
lea eax, [esp + 0x18]
lea ecx, [esp + 0x228]
push eax
push ecx
push str.Count
push 0x491dcc
call ebp
mov eax, dword [ebx + 0x240a8]
test eax, eax
jle 0x4482b6
lea edx, [ebx + 0x20b08]
mov esi, 1
mov dword [esp + 0x10], edx
mov al, byte [0x494b70]
mov ecx, 0x41
mov byte [esp + 0x120], al
xor eax, eax
lea edi, [esp + 0x121]
push esi
rep stosd dword es:[edi], eax
lea ecx, [esp + 0x124]
push str.Host_d
push ecx
call fcn.004585a3
mov edi, dword [esp + 0x1c]
add esp, 0xc
lea edx, [esp + 0x18]
lea ecx, [esp + 0x120]
lea eax, [edi - 0x108]
push edx
push eax
push ecx
push 0x491dcc
call ebp
push esi
lea edx, [esp + 0x124]
push str.PortOut_d
push edx
call fcn.004585a3
mov eax, dword [edi]
lea ecx, [esp + 0x234]
push eax
push 0x48e2ec
push ecx
call fcn.004585a3
add esp, 0x18
lea edx, [esp + 0x18]
lea eax, [esp + 0x228]
lea ecx, [esp + 0x120]
push edx
push eax
push ecx
push 0x491dcc
call ebp
push esi
lea edx, [esp + 0x124]
push str.PortIn_d
push edx
call fcn.004585a3
mov eax, dword [edi + 4]
lea ecx, [esp + 0x234]
push eax
push 0x48e2ec
push ecx
call fcn.004585a3
add esp, 0x18
lea edx, [esp + 0x18]
lea eax, [esp + 0x228]
lea ecx, [esp + 0x120]
push edx
push eax
push ecx
push 0x491dcc
call ebp
push esi
lea edx, [esp + 0x124]
push str.PortType_d
push edx
call fcn.004585a3
mov eax, dword [edi - 0x10c]
lea ecx, [esp + 0x234]
push eax
push 0x48e2ec
push ecx
call fcn.004585a3
add esp, 0x18
lea edx, [esp + 0x18]
lea eax, [esp + 0x228]
lea ecx, [esp + 0x120]
push edx
push eax
push ecx
push 0x491dcc
call ebp
mov eax, dword [ebx + 0x240a8]
inc esi
add edi, 0x118
lea edx, [esi - 1]
mov dword [esp + 0x10], edi
cmp edx, eax
jl 0x44816f
mov eax, dword [ebx + 0xb9c4]
lea ecx, [esp + 0x228]
push eax
push 0x48e2ec
push ecx
call fcn.004585a3
add esp, 0xc
lea edx, [esp + 0x18]
lea eax, [esp + 0x228]
push edx
push eax
push str.MaxConnectionMode
push str.System
call ebp
mov ecx, dword [ebx + 0x38d0]
lea edx, [esp + 0x228]
push ecx
push 0x48e2ec
push edx
call fcn.004585a3
add esp, 0xc
lea eax, [esp + 0x18]
lea ecx, [esp + 0x228]
push eax
push ecx
push str.EnableRemoteControl
push str.System
call ebp
mov edx, dword [ebx + 0xb9c8]
lea eax, [esp + 0x228]
push edx
push 0x48e2ec
push eax
call fcn.004585a3
add esp, 0xc
lea ecx, [esp + 0x18]
lea edx, [esp + 0x228]
push ecx
push edx
push str.TimeoutMAC
push str.System
call ebp
mov eax, dword [ebx + 0xb9cc]
lea ecx, [esp + 0x228]
push eax
push 0x48e2ec
push ecx
call fcn.004585a3
add esp, 0xc
lea edx, [esp + 0x18]
lea eax, [esp + 0x228]
push edx
push eax
push str.SOCKS5UDP
push str.System
call ebp
mov ecx, dword [ebx + 0x209f4]
lea edx, [esp + 0x228]
push ecx
push 0x48e2ec
push edx
call fcn.004585a3
add esp, 0xc
lea eax, [esp + 0x18]
lea ecx, [esp + 0x228]
push eax
push ecx
push str.BandWidthControlType
push str.System
call ebp
mov edx, dword [ebx + 0x38d4]
lea eax, [esp + 0x228]
push edx
push 0x48e2ec
push eax
call fcn.004585a3
add esp, 0xc
lea ecx, [esp + 0x18]
lea edx, [esp + 0x228]
push ecx
push edx
push str.CloseConfirm
push str.System
call ebp
mov eax, dword [ebx + 0x240bc]
test eax, eax
mov eax, 0x48e484
jne 0x448408
mov eax, 0x48e480
lea ecx, [esp + 0x18]
push ecx
push eax
push str.EnableRecord
push 0x490570
call ebp
mov eax, dword [ebx + 0x38d8]
test eax, eax
mov eax, 0x48e484
jne 0x44842e
mov eax, 0x48e480
lea edx, [esp + 0x18]
push edx
push eax
push str.EnableMultiRun
push str.System
call ebp
mov eax, dword [ebx + 0x38dc]
lea ecx, [esp + 0x228]
push eax
push 0x48e2ec
push ecx
call fcn.004585a3
add esp, 0xc
lea edx, [esp + 0x18]
lea eax, [esp + 0x228]
push edx
push eax
push str.MaximumConnectionsChart
push str.System
call ebp
mov ecx, dword [ebx + 0x38e0]
lea edx, [esp + 0x228]
push ecx
push 0x48f6e4
push edx
call fcn.004585a3
add esp, 0xc
lea eax, [esp + 0x18]
lea ecx, [esp + 0x228]
push eax
push ecx
push str.MaximumBandwidthChart
push str.System
call ebp
mov edx, dword [ebx + 0x38e4]
lea eax, [esp + 0x228]
push edx
push str.CTRLALT_c
push eax
call fcn.004585a3
add esp, 0xc
lea ecx, [esp + 0x18]
lea edx, [esp + 0x228]
push ecx
push edx
push str.HotKey
push str.System
call ebp
mov eax, dword [ebx + 0x38e8]
test eax, eax
mov eax, 0x48e484
jne 0x4484f3
mov eax, 0x48e480
lea ecx, [esp + 0x18]
push ecx
push eax
push str.EnableHotKey
push str.System
call ebp
mov edx, dword [ebx + 0x1b9d4]
lea eax, [esp + 0x228]
push edx
push 0x48e2ec
push eax
call fcn.004585a3
add esp, 0xc
lea ecx, [esp + 0x18]
lea edx, [esp + 0x228]
push ecx
push edx
push str.AntiVirusGate
push str.System
call ebp
mov eax, dword [ebx + 0x34c0]
lea ecx, [esp + 0x228]
push eax
push 0x48e2ec
push ecx
call fcn.004585a3
add esp, 0xc
lea edx, [esp + 0x18]
lea eax, [esp + 0x228]
push edx
push eax
push str.TerminalServices
push str.System
call ebp
mov ecx, dword [ebx + 0x1b9d8]
lea edx, [esp + 0x228]
push ecx
push 0x48e2ec
push edx
call fcn.004585a3
add esp, 0xc
lea eax, [esp + 0x18]
lea ecx, [esp + 0x228]
push eax
push ecx
push str.PortDisabled
push str.DestDisabled
call ebp
lea edx, [esp + 0x18]
lea eax, [ebx + 0x1b9dc]
push edx
push eax
push 0x4923f0
push str.DestDisabled
call ebp
mov ecx, dword [ebx + 0x1c9e0]
lea edx, [esp + 0x228]
push ecx
push 0x48e2ec
push edx
call fcn.004585a3
add esp, 0xc
lea eax, [esp + 0x18]
lea ecx, [esp + 0x228]
push eax
push ecx
push str.IPDisabled
push str.DestDisabled
call ebp
lea edx, [esp + 0x18]
lea eax, [ebx + 0x1c9e4]
push edx
push eax
push 0x491c9c
push str.DestDisabled
call ebp
mov ecx, dword [ebx + 0x1d9e8]
lea edx, [esp + 0x228]
push ecx
push 0x48e2ec
push edx
call fcn.004585a3
add esp, 0xc
lea eax, [esp + 0x18]
lea ecx, [esp + 0x228]
push eax
push ecx
push str.ConnectionsBasedIP
push str.System
call ebp
mov eax, dword [ebx + 0x1d9ec]
test eax, eax
mov eax, 0x48e484
jne 0x448652
mov eax, 0x48e480
lea edx, [esp + 0x18]
push edx
push eax
push str.AutoCloseNAVAlert
push str.AntiVirus
call ebp
lea eax, [esp + 0x18]
lea ecx, [ebx + 0x1d9f0]
push eax
push ecx
push str.NVATitle
push str.AntiVirus
call ebp
lea edx, [esp + 0x18]
lea eax, [ebx + 0x1e9f1]
push edx
push eax
push str.NVAClass
push str.AntiVirus
call ebp
lea ecx, [esp + 0x18]
lea edx, [ebx + 0x1f9f2]
push ecx
push edx
push str.ServerBindIP
push str.Networks
call ebp
mov eax, dword [ebx + 0xa570]
test eax, eax
mov eax, 0x48e484
jne 0x4486c0
mov eax, 0x48e480
lea ecx, [esp + 0x18]
push ecx
push eax
push str.SaveWebTitleEx
push 0x48e744
call ebp
mov eax, dword [ebx + 0xa574]
test eax, eax
mov eax, 0x48e484
jne 0x4486e6
mov eax, 0x48e480
lea edx, [esp + 0x18]
push edx
push eax
push str.EnableGzipEx
push 0x48e744
call ebp
mov eax, dword [ebx + 0xa578]
test eax, eax
mov eax, 0x48e484
jne 0x44870c
mov eax, 0x48e480
lea ecx, [esp + 0x18]
push ecx
push eax
push str.EnableProxyConnectionEx
push 0x48e744
call ebp
mov eax, dword [ebx + 0xa57c]
test eax, eax
mov eax, 0x48e484
jne 0x448732
mov eax, 0x48e480
lea edx, [esp + 0x18]
push edx
push eax
push str.EnableReferer
push 0x48e744
call ebp
lea ecx, [esp + 0x14]
mov dword [esp + 0x2b44], 0xffffffff
call fcn.0046eab2
mov ecx, dword [esp + 0x2b3c]
pop edi
pop esi
pop ebp
pop ebx
mov dword fs:[0], ecx
add esp, 0x2b38
ret