Function at 0x445aa0
Capabilities:
Persist via run registry key

Disassembly:
push 0xffffffffffffffff
mov eax, dword fs:[0]
push 0x47a33b
push eax
mov eax, 0x2b2c
mov dword fs:[0], esp
call fcn.00457d20
mov al, byte [0x493b50]
push ebx
push ebp
push esi
mov ebx, ecx
push edi
mov byte [esp + 0x122c], al
mov esi, dword [sym.imp.KERNEL32.dll_GetModuleFileNameA]
mov ecx, 0x41
xor eax, eax
lea edi, [esp + 0x122d]
push 0x105
rep stosd dword es:[edi], eax
lea ecx, [esp + 0x1230]
push ecx
push eax
call esi
lea edx, [esp + 0x122c]
push 0x5c
push edx
call fcn.004584c0
mov byte [eax], 0
mov al, byte [0x493b50]
mov byte [esp + 0x20], al
mov ecx, 0x41
xor eax, eax
lea edi, [esp + 0x21]
rep stosd dword es:[edi], eax
lea ecx, [esp + 0x1234]
lea edx, [esp + 0x20]
push ecx
push str._sCCProxy.ini
push edx
call fcn.00457c43
mov eax, dword [0x491ac4]
mov dword [esp + 0x28], eax
mov ecx, dword [ebx + 4]
lea edx, [esp + 0x28]
push ecx
push 0x48d2ec
push edx
mov dword [esp + 0x2b64], 0
call fcn.0046819b
mov ecx, dword [esp + 0x34]
mov ebp, dword [sym.imp.KERNEL32.dll_WritePrivateProfileStringA]
add esp, 0x20
lea eax, [esp + 0x18]
push eax
push ecx
push 0x48e8f4
push 0x4913c8
call ebp
mov edx, dword [ebx + 0x18]
lea eax, [esp + 0x14]
push edx
push 0x48d2ec
push eax
call fcn.0046819b
mov edx, dword [esp + 0x20]
add esp, 0xc
lea ecx, [esp + 0x18]
push ecx
push edx
push 0x49145c
push 0x4913c8
call ebp
mov eax, dword [ebx + 0x20]
lea ecx, [esp + 0x14]
push eax
push 0x48d2ec
push ecx
call fcn.0046819b
add esp, 0xc
lea edx, [esp + 0x18]
mov eax, dword [esp + 0x14]
push edx
push eax
push 0x491474
push 0x4913c8
call ebp
mov ecx, dword [ebx + 0x28]
lea edx, [esp + 0x14]
push ecx
push 0x48d2ec
push edx
call fcn.0046819b
mov ecx, dword [esp + 0x20]
add esp, 0xc
lea eax, [esp + 0x18]
push eax
push ecx
push 0x491464
push 0x4913c8
call ebp
mov edx, dword [ebx + 0x30]
lea eax, [esp + 0x14]
push edx
push 0x48d2ec
push eax
call fcn.0046819b
mov edx, dword [esp + 0x20]
add esp, 0xc
lea ecx, [esp + 0x18]
push ecx
push edx
push 0x491454
push 0x4913c8
call ebp
mov eax, dword [ebx + 0x48]
lea ecx, [esp + 0x14]
push eax
push 0x48d2ec
push ecx
call fcn.0046819b
mov eax, dword [esp + 0x20]
add esp, 0xc
lea edx, [esp + 0x18]
push edx
push eax
push str.Admin
push 0x4913c8
call ebp
mov eax, dword [ebx + 0xa9b4]
test eax, eax
mov eax, 0x48d484
jne 0x445c6c
mov eax, 0x48d480
lea ecx, [esp + 0x18]
push ecx
push eax
push str.AutoDetect
push str.system
call ebp
mov eax, dword [ebx + 0xc94]
test eax, eax
mov eax, 0x48d484
jne 0x445c92
mov eax, 0x48d480
lea edx, [esp + 0x18]
push edx
push eax
push str.AutoHide
push str.system
call ebp
mov eax, dword [ebx + 0xc90]
test eax, eax
mov eax, 0x48d484
jne 0x445cb8
mov eax, 0x48d480
lea ecx, [esp + 0x18]
push ecx
push eax
push str.AutoRun
push str.system
call ebp
mov eax, dword [ebx + 0x5c]
test eax, eax
mov eax, 0x48d484
jne 0x445cdb
mov eax, 0x48d480
lea edx, [esp + 0x18]
push edx
push eax
push str.Dial
push str.system
call ebp
mov eax, dword [ebx + 0x3c]
test eax, eax
mov eax, 0x48d484
jne 0x445cfe
mov eax, 0x48d480
lea ecx, [esp + 0x18]
push ecx
push eax
push str.StartDNS
push str.system
call ebp
mov eax, dword [ebx + 0x1c]
test eax, eax
mov eax, 0x48d484
jne 0x445d21
mov eax, 0x48d480
lea edx, [esp + 0x18]
push edx
push eax
push str.StartFTP
push str.system
call ebp
mov eax, dword [ebx + 8]
test eax, eax
mov eax, 0x48d484
jne 0x445d44
mov eax, 0x48d480
lea ecx, [esp + 0x18]
push ecx
push eax
push str.StartFTPWeb
push str.system
call ebp
mov eax, dword [ebx + 0xc]
test eax, eax
mov eax, 0x48d484
jne 0x445d67
mov eax, 0x48d480
lea edx, [esp + 0x18]
push edx
push eax
push str.StartGopher
push str.system
call ebp
cmp dword [ebx], 0
mov eax, 0x48d484
jne 0x445d88
mov eax, 0x48d480
lea ecx, [esp + 0x18]
push ecx
push eax
push str.StartHTTP
push str.system
call ebp
mov eax, dword [ebx + 0x38]
test eax, eax
mov eax, 0x48d484
jne 0x445dab
mov eax, 0x48d480
lea edx, [esp + 0x18]
push edx
push eax
push str.StartMail
push str.system
call ebp
mov eax, dword [ebx + 0x2c]
test eax, eax
mov eax, 0x48d484
jne 0x445dce
mov eax, 0x48d480
lea ecx, [esp + 0x18]
push ecx
push eax
push str.StartNews
push str.system
call ebp
mov eax, dword [ebx + 0x34]
test eax, eax
mov eax, 0x48d484
jne 0x445df1
mov eax, 0x48d480
lea edx, [esp + 0x18]
push edx
push eax
push str.StartSecure
push str.system
call ebp
mov eax, dword [ebx + 0x10]
test eax, eax
mov eax, 0x48d484
jne 0x445e14
mov eax, 0x48d480
lea ecx, [esp + 0x18]
push ecx
push eax
push str.StartSocks
push str.system
call ebp
mov eax, dword [ebx + 0x24]
test eax, eax
mov eax, 0x48d484
jne 0x445e37
mov eax, 0x48d480
lea edx, [esp + 0x18]
push edx
push eax
push str.StartTelnet
push str.system
call ebp
mov eax, dword [ebx + 0x4c]
test eax, eax
mov eax, 0x48d484
jne 0x445e5a
mov eax, 0x48d480
lea ecx, [esp + 0x18]
push ecx
push eax
push str.WebCached
push str.system
call ebp
mov eax, dword [ebx + 0x58]
test eax, eax
mov eax, 0x48d484
jne 0x445e7d
mov eax, 0x48d480
lea edx, [esp + 0x18]
push edx
push eax
push str.WebCachedEx
push str.system
call ebp
mov eax, dword [ebx + 0x40]
test eax, eax
mov eax, 0x48d484
jne 0x445ea0
mov eax, 0x48d480
lea ecx, [esp + 0x18]
push ecx
push eax
push str.StartMap
push str.system
call ebp
mov eax, dword [ebx + 0x44]
test eax, eax
mov eax, 0x48d484
jne 0x445ec3
mov eax, 0x48d480
lea edx, [esp + 0x18]
push edx
push eax
push str.StartAdmin
push str.system
call ebp
mov eax, dword [ebx + 0xa564]
cmp eax, 1
mov eax, 0x48d484
je 0x445eea
mov eax, 0x48d480
lea ecx, [esp + 0x18]
push ecx
push eax
push str.NewLogDaily
push 0x48d744
call ebp
lea edx, [esp + 0x2738]
push 0x400
push edx
push 0
mov byte [esp + 0x2b44], 0
call esi
push 0
push 0x48e40c
push str.SoftwareMicrosoftWindowsCurrentVersionRunServices
push reloc.WS2_32.dll_bind
call fcn.00447e20
push 0
push 0x48e40c
push str.SoftwareMicrosoftWindowsCurrentVersionRun
push bind
call fcn.00447e20
mov eax, dword [ebx + 0xc90]
add esp, 0x20
test eax, eax
je 0x445f58
lea eax, [esp + 0x2738]
push eax
jmp 0x445f5a
push 0
push 0x48e40c
push str.SoftwareMicrosoftWindowsCurrentVersionRun
push reloc.WS2_32.dll_bind
call fcn.00447e20
add esp, 0x10
lea ecx, [esp + 0x18]
lea edx, [ebx + 0xa584]
push ecx
push edx
push str.LocalIP
push str.system
call ebp
mov al, byte [0x493b50]
mov ecx, 0x400
mov byte [esp + 0x228], al
xor eax, eax
lea edi, [esp + 0x229]
lea edx, [ebx + 0x38ec]
rep stosd dword es:[edi], eax
mov edi, edx
or ecx, 0xffffffff
repne scasb al, byte es:[edi]
not ecx
dec ecx
neg ecx
sbb ecx, ecx
and ecx, edx
lea edx, [esp + 0x18]
push edx
push ecx
push str.DNSPrimary
push 0x491534
call ebp
lea edx, [ebx + 0x3cec]
or ecx, 0xffffffff
mov edi, edx
xor eax, eax
repne scasb al, byte es:[edi]
not ecx
dec ecx
lea eax, [esp + 0x18]
neg ecx
sbb ecx, ecx
push eax
and ecx, edx
push ecx
push str.DNSSecondary
push 0x491534
call ebp
mov ecx, dword [ebx + 0x40ec]
lea edx, [esp + 0x228]
push ecx
push 0x48d2ec
push edx
call fcn.00457c43
add esp, 0xc
lea eax, [esp + 0x18]
lea ecx, [esp + 0x228]
push eax
push ecx
push str.MaxTries
push 0x491534
call ebp
mov edx, dword [ebx + 0x40f0]
lea eax, [esp + 0x228]
push edx
push 0x48d2ec
push eax
call fcn.00457c43
add esp, 0xc
lea ecx, [esp + 0x18]
lea edx, [esp + 0x228]
push ecx
push edx
push str.MailInterval
push 0x491534
call ebp
mov eax, dword [ebx + 0x40f4]
lea ecx, [esp + 0x228]
push eax
push 0x48d2ec
push ecx
call fcn.00457c43
add esp, 0xc
lea edx, [esp + 0x18]
lea eax, [esp + 0x228]
push edx
push eax
push str.ThreadCount
push 0x491534
call ebp
mov ecx, dword [ebx + 0x40f8]
lea edx, [esp + 0x228]
push ecx
push 0x48d2ec
push edx
call fcn.00457c43
add esp, 0xc
lea eax, [esp + 0x18]
lea ecx, [esp + 0x228]
push eax
push ecx
push str.PortSMTP
push 0x491534
call ebp
mov edx, dword [ebx + 0x40fc]
lea eax, [esp + 0x228]
push edx
push 0x48d2ec
push eax
call fcn.00457c43
add esp, 0xc
lea ecx, [esp + 0x18]
lea edx, [esp + 0x228]
push ecx
push edx
push str.PortPOP3
push 0x491534
call ebp
mov eax, dword [ebx + 0x4100]
lea ecx, [esp + 0x228]
push eax
push 0x48d2ec
push ecx
call fcn.00457c43
add esp, 0xc
lea edx, [esp + 0x18]
lea eax, [esp + 0x228]
push edx
push eax
push str.EnableESMTP
push 0x491534
call ebp
lea edx, [ebx + 0x60]
or ecx, 0xffffffff
mov edi, edx
xor eax, eax
repne scasb al, byte es:[edi]
not ecx
dec ecx
neg ecx
sbb ecx, ecx
and ecx, edx
lea edx, [esp + 0x18]
push edx
push ecx
push str.EntrySelected
push str.Dial
call ebp
lea edx, [ebx + 0x460]
or ecx, 0xffffffff
mov edi, edx
xor eax, eax
repne scasb al, byte es:[edi]
not ecx
dec ecx
lea eax, [esp + 0x18]
neg ecx
sbb ecx, ecx
push eax
and ecx, edx
push ecx
push str.UserName
push str.Dial
call ebp
lea edi, [ebx + 0x860]
or ecx, 0xffffffff
xor eax, eax
lea edx, [esp + 0x228]
repne scasb al, byte es:[edi]
not ecx
sub edi, ecx
mov eax, ecx
mov esi, edi
mov edi, edx
shr ecx, 2
rep movsd dword es:[edi], dword [esi]
mov ecx, eax
xor eax, eax
and ecx, 3
mov dword [esp + 0x10], eax
rep movsb byte es:[edi], byte [esi]
mov cl, byte [0x493b50]
lea edi, [esp + 0x1735]
mov byte [esp + 0x1734], cl
mov ecx, 0x400
rep stosd dword es:[edi], eax
lea edi, [esp + 0x228]
or ecx, 0xffffffff
repne scasb al, byte es:[edi]
not ecx
dec ecx
test ecx, ecx
jle 0x44625c
mov edx, dword [esp + 0x10]
mov ecx, 0x3e7
movsx eax, byte [esp + edx + 0x228]
sub ecx, eax
lea edx, [esp + 0x1334]
push ecx
push 0x48d490
push edx
call fcn.00457c43
lea edi, [esp + 0x1340]
or ecx, 0xffffffff
xor eax, eax
add esp, 0xc
repne scasb al, byte es:[edi]
not ecx
sub edi, ecx
lea edx, [esp + 0x1734]
mov esi, edi
mov edi, edx
mov edx, ecx
or ecx, 0xffffffff
repne scasb al, byte es:[edi]
mov ecx, edx
dec edi
shr ecx, 2
rep movsd dword es:[edi], dword [esi]
mov ecx, edx
mov edx, dword [esp + 0x10]
and ecx, 3
inc edx
rep movsb byte es:[edi], byte [esi]
lea edi, [esp + 0x228]
or ecx, 0xffffffff
repne scasb al, byte es:[edi]
not ecx
dec ecx
mov dword [esp + 0x10], edx
cmp edx, ecx
jl 0x4461e4
lea edi, [esp + 0x1734]
or ecx, 0xffffffff
xor eax, eax
lea edx, [esp + 0x228]
repne scasb al, byte es:[edi]
not ecx
sub edi, ecx
mov eax, ecx
mov esi, edi
mov edi, edx
lea edx, [esp + 0x228]
shr ecx, 2
rep movsd dword es:[edi], dword [esi]
mov ecx, eax
xor eax, eax
and ecx, 3
rep movsb byte es:[edi], byte [esi]
lea ecx, [esp + 0x18]
lea edi, [esp + 0x228]
push ecx
or ecx, 0xffffffff
repne scasb al, byte es:[edi]
not ecx
dec ecx
neg ecx
sbb ecx, ecx
and ecx, edx
push ecx
push 0x48d420
push str.Dial
call ebp
mov eax, dword [ebx + 0xc64]
lea ecx, [esp + 0x228]
push eax
push 0x48d2ec
push ecx
call fcn.00457c43
add esp, 0xc
lea edx, [esp + 0x18]
lea eax, [esp + 0x228]
push edx
push eax
push str.IdleTimeout
push str.Dial
call ebp
mov eax, dword [ebx + 0xc60]
test eax, eax
mov eax, 0x48d484
jne 0x446300
mov eax, 0x48d480
lea ecx, [esp + 0x18]
push ecx
push eax
push str.AutoDisconnect
push str.Dial
call ebp
mov eax, dword [ebx + 0xc68]
test eax, eax
mov eax, 0x48d484
jne 0x446326
mov eax, 0x48d480
lea edx, [esp + 0x18]
push edx
push eax
push str.AutoDial
push str.Dial
call ebp
mov eax, dword [ebx + 0xc74]
test eax, eax
mov eax, 0x48d484
jne 0x44634c
mov eax, 0x48d480
lea ecx, [esp + 0x18]
push ecx
push eax
push 0x4902c8
push str.Dial
call ebp
mov eax, dword [ebx + 0xc78]
test eax, eax
mov eax, 0x48d484
jne 0x446372
mov eax, 0x48d480
lea edx, [esp + 0x18]
push edx
push eax
push 0x491534
push str.Dial
call ebp
mov eax, dword [ebx + 0xc7c]
test eax, eax
mov eax, 0x48d484
jne 0x446398
mov eax, 0x48d480
lea ecx, [esp + 0x18]
push ecx
push eax
push 0x491474
push str.Dial
call ebp
mov eax, dword [ebx + 0xc80]
test eax, eax
mov eax, 0x48d484
jne 0x4463be
mov eax, 0x48d480
lea edx, [esp + 0x18]
push edx
push eax
push 0x49146c
push str.Dial
call ebp
mov eax, dword [ebx + 0xc84]
test eax, eax
mov eax, 0x48d484
jne 0x4463e4
mov eax, 0x48d480
lea ecx, [esp + 0x18]
push ecx
push eax
push 0x491464
push str.Dial
call ebp
mov eax, dword [ebx + 0xc88]
test eax, eax
mov eax, 0x48d484
jne 0x44640a
mov eax, 0x48d480
lea edx, [esp + 0x18]
push edx
push eax
push 0x49145c
push str.Dial
call ebp
mov eax, dword [ebx + 0xc8c]
test eax, eax
mov eax, 0x48d484
jne 0x446430
mov eax, 0x48d480
lea ecx, [esp + 0x18]
push ecx
push eax
push 0x491454
push str.Dial
call ebp
mov eax, dword [ebx + 0xc6c]
test eax, eax
mov eax, 0x48d484
jne 0x446456
mov eax, 0x48d480
lea edx, [esp + 0x18]
push edx
push eax
push str.DialWhenStartup
push str.Dial
call ebp
mov eax, dword [ebx + 0xc70]
test eax, eax
mov eax, 0x48d484
jne 0x44647c
mov eax, 0x48d480
lea ecx, [esp + 0x18]
push ecx
push eax
push str.DisconnectWhenShutdown
push str.Dial
call ebp
mov eax, dword [ebx + 0x50]
test eax, eax
mov eax, 0x48d484
jne 0x44649f
mov eax, 0x48d480
lea edx, [esp + 0x18]
push edx
push eax
push str.LoadFromCache
push 0x48d758
call ebp
mov eax, dword [ebx + 0x54]
lea ecx, [esp + 0x228]
push eax
push 0x48d2ec
push ecx
call fcn.00457c43
add esp, 0xc
lea edx, [esp + 0x18]
lea eax, [esp + 0x228]
push edx
push eax
push str.CacheTimeout
push 0x48d758
call ebp
mov eax, dword [ebx + 0x4104]
test eax, eax
mov eax, 0x48d484
jne 0x4464f7
mov eax, 0x48d480
lea ecx, [esp + 0x18]
push ecx
push eax
push str.CascadingProxy
push str.System
call ebp
lea edx, [ebx + 0x4108]
or ecx, 0xffffffff
mov edi, edx
xor eax, eax
repne scasb al, byte es:[edi]
not ecx
dec ecx
neg ecx
sbb ecx, ecx
and ecx, edx
lea edx, [esp + 0x18]
push edx
push ecx
push str.ProxyAddr
push str.CascadingProxy
call ebp
lea edx, [ebx + 0x4508]
or ecx, 0xffffffff
mov edi, edx
xor eax, eax
repne scasb al, byte es:[edi]
not ecx
dec ecx
lea eax, [esp + 0x18]
neg ecx
sbb ecx, ecx
push eax
and ecx, edx
push ecx
push 0x490218
push str.CascadingProxy
call ebp
mov ecx, dword [ebx + 0x4908]
lea edx, [esp + 0x228]
push ecx
push 0x48d2ec
push edx
call fcn.00457c43
add esp, 0xc
lea eax, [esp + 0x18]
lea ecx, [esp + 0x228]
push eax
push ecx
push 0x4913c8
push str.CascadingProxy
call ebp
mov eax, dword [ebx + 0x490c]
test eax, eax
mov eax, 0x48d484
jne 0x4465a6
mov eax, 0x48d480
lea edx, [esp + 0x18]
push edx
push eax
push str.NeedAuth
push str.CascadingProxy
call ebp
lea edx, [ebx + 0x4910]
or ecx, 0xffffffff
mov edi, edx
xor eax, eax
repne scasb al, byte es:[edi]
not ecx
dec ecx
lea eax, [esp + 0x18]
neg ecx
sbb ecx, ecx
push eax
and ecx, edx
push ecx
push str.UserName
push str.CascadingProxy
call ebp
lea edi, [ebx + 0x4d10]
or ecx, 0xffffffff
xor eax, eax
lea edx, [esp + 0x228]
repne scasb al, byte es:[edi]
not ecx
sub edi, ecx
mov eax, ecx
mov esi, edi
mov edi, edx
shr ecx, 2
rep movsd dword es:[edi], dword [esi]
mov ecx, eax
xor eax, eax
and ecx, 3
mov dword [esp + 0x10], eax
rep movsb byte es:[edi], byte [esi]
mov cl, byte [0x493b50]
lea edi, [esp + 0x1735]
mov byte [esp + 0x1734], cl
mov ecx, 0x400
rep stosd dword es:[edi], eax
lea edi, [esp + 0x228]
or ecx, 0xffffffff
repne scasb al, byte es:[edi]
not ecx
dec ecx
test ecx, ecx
jle 0x4466b8
mov edx, dword [esp + 0x10]
mov ecx, 0x3e7
movsx eax, byte [esp + edx + 0x228]
sub ecx, eax
lea edx, [esp + 0x1334]
push ecx
push 0x48d490
push edx
call fcn.00457c43
lea edi, [esp + 0x1340]
or ecx, 0xffffffff
xor eax, eax
add esp, 0xc
repne scasb al, byte es:[edi]
not ecx
sub edi, ecx
lea edx, [esp + 0x1734]
mov esi, edi
mov edi, edx
mov edx, ecx
or ecx, 0xffffffff
repne scasb al, byte es:[edi]
mov ecx, edx
dec edi
shr ecx, 2
rep movsd dword es:[edi], dword [esi]
mov ecx, edx
mov edx, dword [esp + 0x10]
and ecx, 3
inc edx
rep movsb byte es:[edi], byte [esi]
lea edi, [esp + 0x228]
or ecx, 0xffffffff
repne scasb al, byte es:[edi]
not ecx
dec ecx
mov dword [esp + 0x10], edx
cmp edx, ecx
jl 0x446640
lea edi, [esp + 0x1734]
or ecx, 0xffffffff
xor eax, eax
lea edx, [esp + 0x228]
repne scasb al, byte es:[edi]
not ecx
sub edi, ecx
mov eax, ecx
mov esi, edi
mov edi, edx
lea edx, [esp + 0x228]
shr ecx, 2
rep movsd dword es:[edi], dword [esi]
mov ecx, eax
xor eax, eax
and ecx, 3
rep movsb byte es:[edi], byte [esi]
lea ecx, [esp + 0x18]
lea edi, [esp + 0x228]
push ecx
or ecx, 0xffffffff
repne scasb al, byte es:[edi]
not ecx
dec ecx
neg ecx
sbb ecx, ecx
and ecx, edx
push ecx
push 0x48d420
push str.CascadingProxy
call ebp
mov eax, dword [ebx + 0x5110]
test eax, eax
mov eax, 0x48d484
jne 0x446727
mov eax, 0x48d480
lea ecx, [esp + 0x18]
push ecx
push eax
push str.CascadingWWW
push str.CascadingProxy
call ebp
lea edx, [ebx + 0x5124]
or ecx, 0xffffffff
mov edi, edx
xor eax, eax
repne scasb al, byte es:[edi]
not ecx
dec ecx
neg ecx
sbb ecx, ecx
and ecx, edx
lea edx, [esp + 0x18]
push edx
push ecx
push str.WWWProxyAddr
push str.CascadingProxy
call ebp
lea edx, [ebx + 0x6524]
or ecx, 0xffffffff
mov edi, edx
xor eax, eax
repne scasb al, byte es:[edi]
not ecx
dec ecx
lea eax, [esp + 0x18]
neg ecx
sbb ecx, ecx
push eax
and ecx, edx
push ecx
push str.WWWProtocol
push str.CascadingProxy
call ebp
mov ecx, dword [ebx + 0x7924]
lea edx, [esp + 0x228]
push ecx
push 0x48d2ec
push edx
call fcn.00457c43
add esp, 0xc
lea eax, [esp + 0x18]
lea ecx, [esp + 0x228]
push eax
push ecx
push str.WWWPort
push str.CascadingProxy
call ebp
mov eax, dword [ebx + 0x7938]
test eax, eax
mov eax, 0x48d484
jne 0x4467d6
mov eax, 0x48d480
lea edx, [esp + 0x18]
push edx
push eax
push str.WWWNeedAuth
push str.CascadingProxy
call ebp
lea edx, [ebx + 0x794c]
or ecx, 0xffffffff
mov edi, edx
xor eax, eax
repne scasb al, byte es:[edi]
not ecx
dec ecx
lea eax, [esp + 0x18]
neg ecx
sbb ecx, ecx
push eax
and ecx, edx
push ecx
push str.WWWUserName
push str.CascadingProxy
call ebp
lea edi, [ebx + 0x8d4c]
or ecx, 0xffffffff
xor eax, eax
lea edx, [esp + 0x228]
repne scasb al, byte es:[edi]
not ecx
sub edi, ecx
mov eax, ecx
mov esi, edi
mov edi, edx
shr ecx, 2
rep movsd dword es:[edi], dword [esi]
mov ecx, eax
xor eax, eax
and ecx, 3
mov dword [esp + 0x10], eax
rep movsb byte es:[edi], byte [esi]
mov cl, byte [0x493b50]
lea edi, [esp + 0x1735]
mov byte [esp + 0x1734], cl
mov ecx, 0x400
rep stosd dword es:[edi], eax
lea edi, [esp + 0x228]
or ecx, 0xffffffff
repne scasb al, byte es:[edi]
not ecx
dec ecx
test ecx, ecx
jle 0x4468e8
mov edx, dword [esp + 0x10]
mov ecx, 0x3e7
movsx eax, byte [esp + edx + 0x228]
sub ecx, eax
lea edx, [esp + 0x1334]
push ecx
push 0x48d490
push edx
call fcn.00457c43
lea edi, [esp + 0x1340]
or ecx, 0xffffffff
xor eax, eax
add esp, 0xc
repne scasb al, byte es:[edi]
not ecx
sub edi, ecx
lea edx, [esp + 0x1734]
mov esi, edi
mov edi, edx
mov edx, ecx
or ecx, 0xffffffff
repne scasb al, byte es:[edi]
mov ecx, edx
dec edi
shr ecx, 2
rep movsd dword es:[edi], dword [esi]
mov ecx, edx
mov edx, dword [esp + 0x10]
and ecx, 3
inc edx
rep movsb byte es:[edi], byte [esi]
lea edi, [esp + 0x228]
or ecx, 0xffffffff
repne scasb al, byte es:[edi]
not ecx
dec ecx
mov dword [esp + 0x10], edx
cmp edx, ecx
jl 0x446870
lea edi, [esp + 0x1734]
or ecx, 0xffffffff
xor eax, eax
lea edx, [esp + 0x228]
repne scasb al, byte es:[edi]
not ecx
sub edi, ecx
mov eax, ecx
mov esi, edi
mov edi, edx
lea edx, [esp + 0x228]
shr ecx, 2
rep movsd dword es:[edi], dword [esi]
mov ecx, eax
xor eax, eax
and ecx, 3
rep movsb byte es:[edi], byte [esi]
lea ecx, [esp + 0x18]
lea edi, [esp + 0x228]
push ecx
or ecx, 0xffffffff
repne scasb al, byte es:[edi]
not ecx
dec ecx
neg ecx
sbb ecx, ecx
and ecx, edx
push ecx
push str.WWWPassword
push str.CascadingProxy
call ebp
mov eax, dword [ebx + 0x5114]
test eax, eax
mov eax, 0x48d484
jne 0x446957
mov eax, 0x48d480
lea ecx, [esp + 0x18]
push ecx
push eax
push str.CascadingSOCKS
push str.CascadingProxy
call ebp
lea edx, [ebx + 0x5524]
or ecx, 0xffffffff
mov edi, edx
xor eax, eax
repne scasb al, byte es:[edi]
not ecx
dec ecx
neg ecx
sbb ecx, ecx
and ecx, edx
lea edx, [esp + 0x18]
push edx
push ecx
push str.SOCKSProxyAddr
push str.CascadingProxy
call ebp
lea edx, [ebx + 0x6924]
or ecx, 0xffffffff
mov edi, edx
xor eax, eax
repne scasb al, byte es:[edi]
not ecx
dec ecx
lea eax, [esp + 0x18]
neg ecx
sbb ecx, ecx
push eax
and ecx, edx
push ecx
push str.SOCKSProtocol
push str.CascadingProxy
call ebp
mov ecx, dword [ebx + 0x7928]
lea edx, [esp + 0x228]
push ecx
push 0x48d2ec
push edx
call fcn.00457c43
add esp, 0xc
lea eax, [esp + 0x18]
lea ecx, [esp + 0x228]
push eax
push ecx
push str.SOCKSPort
push str.CascadingProxy
call ebp
mov eax, dword [ebx + 0x793c]
test eax, eax
mov eax, 0x48d484
jne 0x446a06
mov eax, 0x48d480
lea edx, [esp + 0x18]
push edx
push eax
push str.SOCKSNeedAuth
push str.CascadingProxy
call ebp
lea edx, [ebx + 0x7d4c]
or ecx, 0xffffffff
mov edi, edx
xor eax, eax
repne scasb al, byte es:[edi]
not ecx
dec ecx
lea eax, [esp + 0x18]
neg ecx
sbb ecx, ecx
push eax
and ecx, edx
push ecx
push str.SOCKSUserName
push str.CascadingProxy
call ebp
lea edi, [ebx + 0x914c]
or ecx, 0xffffffff
xor eax, eax
lea edx, [esp + 0x228]
repne scasb al, byte es:[edi]
not ecx
sub edi, ecx
mov eax, ecx
mov esi, edi
mov edi, edx
shr ecx, 2
rep movsd dword es:[edi], dword [esi]
mov ecx, eax
xor eax, eax
and ecx, 3
mov dword [esp + 0x10], eax
rep movsb byte es:[edi], byte [esi]
mov cl, byte [0x493b50]
lea edi, [esp + 0x1735]
mov byte [esp + 0x1734], cl
mov ecx, 0x400
rep stosd dword es:[edi], eax
lea edi, [esp + 0x228]
or ecx, 0xffffffff
repne scasb al, byte es:[edi]
not ecx
dec ecx
test ecx, ecx
jle 0x446b18
mov edx, dword [esp + 0x10]
mov ecx, 0x3e7
movsx eax, byte [esp + edx + 0x228]
sub ecx, eax
lea edx, [esp + 0x1334]
push ecx
push 0x48d490
push edx
call fcn.00457c43
lea edi, [esp + 0x1340]
or ecx, 0xffffffff
xor eax, eax
add esp, 0xc
repne scasb al, byte es:[edi]
not ecx
sub edi, ecx
lea edx, [esp + 0x1734]
mov esi, edi
mov edi, edx
mov edx, ecx
or ecx, 0xffffffff
repne scasb al, byte es:[edi]
mov ecx, edx
dec edi
shr ecx, 2
rep movsd dword es:[edi], dword [esi]
mov ecx, edx
mov edx, dword [esp + 0x10]
and ecx, 3
inc edx
rep movsb byte es:[edi], byte [esi]
lea edi, [esp + 0x228]
or ecx, 0xffffffff
repne scasb al, byte es:[edi]
not ecx
dec ecx
mov dword [esp + 0x10], edx
cmp edx, ecx
jl 0x446aa0
lea edi, [esp + 0x1734]
or ecx, 0xffffffff
xor eax, eax
lea edx, [esp + 0x228]
repne scasb al, byte es:[edi]
not ecx
sub edi, ecx
mov eax, ecx
mov esi, edi
mov edi, edx
lea edx, [esp + 0x228]
shr ecx, 2
rep movsd dword es:[edi], dword [esi]
mov ecx, eax
xor eax, eax
and ecx, 3
rep movsb byte es:[edi], byte [esi]
lea ecx, [esp + 0x18]
lea edi, [esp + 0x228]
push ecx
or ecx, 0xffffffff
repne scasb al, byte es:[edi]
not ecx
dec ecx
neg ecx
sbb ecx, ecx
and ecx, edx
push ecx
push str.SOCKSPassword
push str.CascadingProxy
call ebp
mov eax, dword [ebx + 0x5118]
test eax, eax
mov eax, 0x48d484
jne 0x446b87
mov eax, 0x48d480
lea ecx, [esp + 0x18]
push ecx
push eax
push str.CascadingSMTP
push str.CascadingProxy
call ebp
lea edx, [ebx + 0x5924]
or ecx, 0xffffffff
mov edi, edx
xor eax, eax
repne scasb al, byte es:[edi]
not ecx
dec ecx
neg ecx
sbb ecx, ecx
and ecx, edx
lea edx, [esp + 0x18]
push edx
push ecx
push str.SMTPProxyAddr
push str.CascadingProxy
call ebp
lea edx, [ebx + 0x6d24]
or ecx, 0xffffffff
mov edi, edx
xor eax, eax
repne scasb al, byte es:[edi]
not ecx
dec ecx
lea eax, [esp + 0x18]
neg ecx
sbb ecx, ecx
push eax
and ecx, edx
push ecx
push str.SMTPProtocol
push str.CascadingProxy
call ebp
mov ecx, dword [ebx + 0x792c]
lea edx, [esp + 0x228]
push ecx
push 0x48d2ec
push edx
call fcn.00457c43
add esp, 0xc
lea eax, [esp + 0x18]
lea ecx, [esp + 0x228]
push eax
push ecx
push str.SMTPPort
push str.CascadingProxy
call ebp
mov eax, dword [ebx + 0x7940]
test eax, eax
mov eax, 0x48d484
jne 0x446c36
mov eax, 0x48d480
lea edx, [esp + 0x18]
push edx
push eax
push str.SMTPNeedAuth
push str.CascadingProxy
call ebp
lea edx, [ebx + 0x814c]
or ecx, 0xffffffff
mov edi, edx
xor eax, eax
repne scasb al, byte es:[edi]
not ecx
dec ecx
lea eax, [esp + 0x18]
neg ecx
sbb ecx, ecx
push eax
and ecx, edx
push ecx
push str.SMTPUserName
push str.CascadingProxy
call ebp
lea edi, [ebx + 0x954c]
or ecx, 0xffffffff
xor eax, eax
lea edx, [esp + 0x228]
repne scasb al, byte es:[edi]
not ecx
sub edi, ecx
mov eax, ecx
mov esi, edi
mov edi, edx
shr ecx, 2
rep movsd dword es:[edi], dword [esi]
mov ecx, eax
xor eax, eax
and ecx, 3
mov dword [esp + 0x10], eax
rep movsb byte es:[edi], byte [esi]
mov cl, byte [0x493b50]
lea edi, [esp + 0x1735]
mov byte [esp + 0x1734], cl
mov ecx, 0x400
rep stosd dword es:[edi], eax
lea edi, [esp + 0x228]
or ecx, 0xffffffff
repne scasb al, byte es:[edi]
not ecx
dec ecx
test ecx, ecx
jle 0x446d48
mov edx, dword [esp + 0x10]
mov ecx, 0x3e7
movsx eax, byte [esp + edx + 0x228]
sub ecx, eax
lea edx, [esp + 0x1334]
push ecx
push 0x48d490
push edx
call fcn.00457c43
lea edi, [esp + 0x1340]
or ecx, 0xffffffff
xor eax, eax
add esp, 0xc
repne scasb al, byte es:[edi]
not ecx
sub edi, ecx
lea edx, [esp + 0x1734]
mov esi, edi
mov edi, edx
mov edx, ecx
or ecx, 0xffffffff
repne scasb al, byte es:[edi]
mov ecx, edx
dec edi
shr ecx, 2
rep movsd dword es:[edi], dword [esi]
mov ecx, edx
mov edx, dword [esp + 0x10]
and ecx, 3
inc edx
rep movsb byte es:[edi], byte [esi]
lea edi, [esp + 0x228]
or ecx, 0xffffffff
repne scasb al, byte es:[edi]
not ecx
dec ecx
mov dword [esp + 0x10], edx
cmp edx, ecx
jl 0x446cd0
lea edi, [esp + 0x1734]
or ecx, 0xffffffff
xor eax, eax
lea edx, [esp + 0x228]
repne scasb al, byte es:[edi]
not ecx
sub edi, ecx
mov eax, ecx
mov esi, edi
mov edi, edx
lea edx, [esp + 0x228]
shr ecx, 2
rep movsd dword es:[edi], dword [esi]
mov ecx, eax
xor eax, eax
and ecx, 3
rep movsb byte es:[edi], byte [esi]
lea ecx, [esp + 0x18]
lea edi, [esp + 0x228]
push ecx
or ecx, 0xffffffff
repne scasb al, byte es:[edi]
not ecx
dec ecx
neg ecx
sbb ecx, ecx
and ecx, edx
push ecx
push str.SMTPPassword
push str.CascadingProxy
call ebp
mov eax, dword [ebx + 0x511c]
test eax, eax
mov eax, 0x48d484
jne 0x446db7
mov eax, 0x48d480
lea ecx, [esp + 0x18]
push ecx
push eax
push str.CascadingPOP3
push str.CascadingProxy
call ebp
lea edx, [ebx + 0x5d24]
or ecx, 0xffffffff
mov edi, edx
xor eax, eax
repne scasb al, byte es:[edi]
not ecx
dec ecx
neg ecx
sbb ecx, ecx
and ecx, edx
lea edx, [esp + 0x18]
push edx
push ecx
push str.POP3ProxyAddr
push str.CascadingProxy
call ebp
lea edx, [ebx + 0x7124]
or ecx, 0xffffffff
mov edi, edx
xor eax, eax
repne scasb al, byte es:[edi]
not ecx
dec ecx
lea eax, [esp + 0x18]
neg ecx
sbb ecx, ecx
push eax
and ecx, edx
push ecx
push str.POP3Protocol
push str.CascadingProxy
call ebp
mov ecx, dword [ebx + 0x7930]
lea edx, [esp + 0x228]
push ecx
push 0x48d2ec
push edx
call fcn.00457c43
add esp, 0xc
lea eax, [esp + 0x18]
lea ecx, [esp + 0x228]
push eax
push ecx
push str.POP3Port
push str.CascadingProxy
call ebp
mov eax, dword [ebx + 0x7944]
test eax, eax
mov eax, 0x48d484
jne 0x446e66
mov eax, 0x48d480
lea edx, [esp + 0x18]
push edx
push eax
push str.POP3NeedAuth
push str.CascadingProxy
call ebp
lea edx, [ebx + 0x854c]
or ecx, 0xffffffff
mov edi, edx
xor eax, eax
repne scasb al, byte es:[edi]
not ecx
dec ecx
lea eax, [esp + 0x18]
neg ecx
sbb ecx, ecx
push eax
and ecx, edx
push ecx
push str.POP3UserName
push str.CascadingProxy
call ebp
lea edi, [ebx + 0x994c]
or ecx, 0xffffffff
xor eax, eax
lea edx, [esp + 0x228]
repne scasb al, byte es:[edi]
not ecx
sub edi, ecx
mov eax, ecx
mov esi, edi
mov edi, edx
shr ecx, 2
rep movsd dword es:[edi], dword [esi]
mov ecx, eax
xor eax, eax
and ecx, 3
mov dword [esp + 0x10], eax
rep movsb byte es:[edi], byte [esi]
mov cl, byte [0x493b50]
lea edi, [esp + 0x1735]
mov byte [esp + 0x1734], cl
mov ecx, 0x400
rep stosd dword es:[edi], eax
lea edi, [esp + 0x228]
or ecx, 0xffffffff
repne scasb al, byte es:[edi]
not ecx
dec ecx
test ecx, ecx
jle 0x446f78
mov edx, dword [esp + 0x10]
mov ecx, 0x3e7
movsx eax, byte [esp + edx + 0x228]
sub ecx, eax
lea edx, [esp + 0x1334]
push ecx
push 0x48d490
push edx
call fcn.00457c43
lea edi, [esp + 0x1340]
or ecx, 0xffffffff
xor eax, eax
add esp, 0xc
repne scasb al, byte es:[edi]
not ecx
sub edi, ecx
lea edx, [esp + 0x1734]
mov esi, edi
mov edi, edx
mov edx, ecx
or ecx, 0xffffffff
repne scasb al, byte es:[edi]
mov ecx, edx
dec edi
shr ecx, 2
rep movsd dword es:[edi], dword [esi]
mov ecx, edx
mov edx, dword [esp + 0x10]
and ecx, 3
inc edx
rep movsb byte es:[edi], byte [esi]
lea edi, [esp + 0x228]
or ecx, 0xffffffff
repne scasb al, byte es:[edi]
not ecx
dec ecx
mov dword [esp + 0x10], edx
cmp edx, ecx
jl 0x446f00
lea edi, [esp + 0x1734]
or ecx, 0xffffffff
xor eax, eax
lea edx, [esp + 0x228]
repne scasb al, byte es:[edi]
not ecx
sub edi, ecx
mov eax, ecx
mov esi, edi
mov edi, edx
lea edx, [esp + 0x228]
shr ecx, 2
rep movsd dword es:[edi], dword [esi]
mov ecx, eax
xor eax, eax
and ecx, 3
rep movsb byte es:[edi], byte [esi]
lea ecx, [esp + 0x18]
lea edi, [esp + 0x228]
push ecx
or ecx, 0xffffffff
repne scasb al, byte es:[edi]
not ecx
dec ecx
neg ecx
sbb ecx, ecx
and ecx, edx
push ecx
push str.POP3Password
push str.CascadingProxy
call ebp
mov eax, dword [ebx + 0x5120]
test eax, eax
mov eax, 0x48d484
jne 0x446fe7
mov eax, 0x48d480
lea ecx, [esp + 0x18]
push ecx
push eax
push str.CascadingOTHERS
push str.CascadingProxy
call ebp
lea edx, [ebx + 0x6124]
or ecx, 0xffffffff
mov edi, edx
xor eax, eax
repne scasb al, byte es:[edi]
not ecx
dec ecx
neg ecx
sbb ecx, ecx
and ecx, edx
lea edx, [esp + 0x18]
push edx
push ecx
push str.OTHERSProxyAddr
push str.CascadingProxy
call ebp
lea edx, [ebx + 0x7524]
or ecx, 0xffffffff
mov edi, edx
xor eax, eax
repne scasb al, byte es:[edi]
not ecx
dec ecx
lea eax, [esp + 0x18]
neg ecx
sbb ecx, ecx
push eax
and ecx, edx
push ecx
push str.OTHERSProtocol
push str.CascadingProxy
call ebp
mov ecx, dword [ebx + 0x7934]
lea edx, [esp + 0x228]
push ecx
push 0x48d2ec
push edx
call fcn.00457c43
add esp, 0xc
lea eax, [esp + 0x18]
lea ecx, [esp + 0x228]
push eax
push ecx
push str.OTHERSPort
push str.CascadingProxy
call ebp
mov eax, dword [ebx + 0x7948]
test eax, eax
mov eax, 0x48d484
jne 0x447096
mov eax, 0x48d480
lea edx, [esp + 0x18]
push edx
push eax
push str.OTHERSNeedAuth
push str.CascadingProxy
call ebp
lea edx, [ebx + 0x894c]
or ecx, 0xffffffff
mov edi, edx
xor eax, eax
repne scasb al, byte es:[edi]
not ecx
dec ecx
lea eax, [esp + 0x18]
neg ecx
sbb ecx, ecx
push eax
and ecx, edx
push ecx
push str.OTHERSUserName
push str.CascadingProxy
call ebp
lea edi, [ebx + 0x9d4c]
or ecx, 0xffffffff
xor eax, eax
lea edx, [esp + 0x228]
repne scasb al, byte es:[edi]
not ecx
sub edi, ecx
mov eax, ecx
mov esi, edi
mov edi, edx
shr ecx, 2
rep movsd dword es:[edi], dword [esi]
mov ecx, eax
xor eax, eax
and ecx, 3
mov dword [esp + 0x10], eax
rep movsb byte es:[edi], byte [esi]
mov cl, byte [0x493b50]
lea edi, [esp + 0x1735]
mov byte [esp + 0x1734], cl
mov ecx, 0x400
rep stosd dword es:[edi], eax
lea edi, [esp + 0x228]
or ecx, 0xffffffff
repne scasb al, byte es:[edi]
not ecx
dec ecx
test ecx, ecx
jle 0x4471a8
mov edx, dword [esp + 0x10]
mov ecx, 0x3e7
movsx eax, byte [esp + edx + 0x228]
sub ecx, eax
lea edx, [esp + 0x1334]
push ecx
push 0x48d490
push edx
call fcn.00457c43
lea edi, [esp + 0x1340]
or ecx, 0xffffffff
xor eax, eax
add esp, 0xc
repne scasb al, byte es:[edi]
not ecx
sub edi, ecx
lea edx, [esp + 0x1734]
mov esi, edi
mov edi, edx
mov edx, ecx
or ecx, 0xffffffff
repne scasb al, byte es:[edi]
mov ecx, edx
dec edi
shr ecx, 2
rep movsd dword es:[edi], dword [esi]
mov ecx, edx
mov edx, dword [esp + 0x10]
and ecx, 3
inc edx
rep movsb byte es:[edi], byte [esi]
lea edi, [esp + 0x228]
or ecx, 0xffffffff
repne scasb al, byte es:[edi]
not ecx
dec ecx
mov dword [esp + 0x10], edx
cmp edx, ecx
jl 0x447130
lea edi, [esp + 0x1734]
or ecx, 0xffffffff
xor eax, eax
lea edx, [esp + 0x228]
repne scasb al, byte es:[edi]
not ecx
sub edi, ecx
mov eax, ecx
mov esi, edi
mov edi, edx
lea edx, [esp + 0x228]
shr ecx, 2
rep movsd dword es:[edi], dword [esi]
mov ecx, eax
xor eax, eax
and ecx, 3
rep movsb byte es:[edi], byte [esi]
lea ecx, [esp + 0x18]
lea edi, [esp + 0x228]
push ecx
or ecx, 0xffffffff
repne scasb al, byte es:[edi]
not ecx
dec ecx
neg ecx
sbb ecx, ecx
and ecx, edx
push ecx
push str.OTHERSPassword
push str.CascadingProxy
call ebp
mov eax, dword [ebx + 0xa14c]
test eax, eax
mov eax, 0x48d484
jne 0x447217
mov eax, 0x48d480
lea ecx, [esp + 0x18]
push ecx
push eax
push str.SaveLogs
push 0x48d744
call ebp
lea edx, [ebx + 0xa150]
or ecx, 0xffffffff
mov edi, edx
xor eax, eax
repne scasb al, byte es:[edi]
not ecx
dec ecx
neg ecx
sbb ecx, ecx
and ecx, edx
lea edx, [esp + 0x18]
push edx
push ecx
push str.LogPath
push 0x48d744
call ebp
mov eax, dword [ebx + 0xa550]
test eax, eax
mov eax, 0x48d484
jne 0x447267
mov eax, 0x48d480
lea ecx, [esp + 0x18]
push ecx
push eax
push str.RequestURL
push 0x48d744
call ebp
mov eax, dword [ebx + 0xa554]
test eax, eax
mov eax, 0x48d484
jne 0x44728d
mov eax, 0x48d480
lea edx, [esp + 0x18]
push edx
push eax
push str.PicInfo
push 0x48d744
call ebp
mov eax, dword [ebx + 0xa558]
test eax, eax
mov eax, 0x48d484
jne 0x4472b3
mov eax, 0x48d480
lea ecx, [esp + 0x18]
push ecx
push eax
push str.MailInfo
push 0x48d744
call ebp
mov eax, dword [ebx + 0xa55c]
test eax, eax
mov eax, 0x48d484
jne 0x4472d9
mov eax, 0x48d480
lea edx, [esp + 0x18]
push edx
push eax
push str.MailOutcoming
push 0x48d744
call ebp
mov eax, dword [ebx + 0xa560]
lea ecx, [esp + 0x228]
push eax
push 0x48d2ec
push ecx
call fcn.00457c43
add esp, 0xc
lea edx, [esp + 0x18]
lea eax, [esp + 0x228]
push edx
push eax
push str.MaxLine
push 0x48d744
call ebp
lea edx, [ebx + 0x10a4]
or ecx, 0xffffffff
mov edi, edx
xor eax, eax
repne scasb al, byte es:[edi]
not ecx
dec ecx
neg ecx
sbb ecx, ecx
and ecx, edx
lea edx, [esp + 0x18]
push edx
push ecx
push 0x48d194
push str.System
call ebp
fild dword [ebx + 0xa9b0]
sub esp, 8
lea eax, [esp + 0x230]
fmul dword [0x47ce38]
fstp qword [esp]
push str._.1f
push eax
call fcn.00457c43
add esp, 0x10
lea ecx, [esp + 0x18]
lea edx, [esp + 0x228]
push ecx
push edx
push str.SocketIdleTimeout
push str.System
call ebp
mov eax, dword [ebx + 0xc98]
test eax, eax
mov eax, 0x48d484
jne 0x44739e
mov eax, 0x48d480
lea ecx, [esp + 0x18]
push ecx
push eax
push str.PasswordProtect
push str.System
call ebp
mov eax, dword [ebx + 0xc9c]
test eax, eax
mov eax, 0x48d484
jne 0x4473c4
mov eax, 0x48d480
lea edx, [esp + 0x18]
push edx
push eax
push str.PasswordProtectStartup
push str.System
call ebp
lea edi, [ebx + 0xca0]
or ecx, 0xffffffff
xor eax, eax
lea edx, [esp + 0x228]
repne scasb al, byte es:[edi]
not ecx
sub edi, ecx
mov eax, ecx
mov esi, edi
mov edi, edx
shr ecx, 2
rep movsd dword es:[edi], dword [esi]
mov ecx, eax
xor eax, eax
and ecx, 3
mov dword [esp + 0x10], eax
rep movsb byte es:[edi], byte [esi]
mov cl, byte [0x493b50]
lea edi, [esp + 0x1735]
mov byte [esp + 0x1734], cl
mov ecx, 0x400
rep stosd dword es:[edi], eax
lea edi, [esp + 0x228]
or ecx, 0xffffffff
repne scasb al, byte es:[edi]
not ecx
dec ecx
test ecx, ecx
jle 0x4474ac
mov edx, dword [esp + 0x10]
mov ecx, 0x3e7
movsx eax, byte [esp + edx + 0x228]
sub ecx, eax
lea edx, [esp + 0x1334]
push ecx
push 0x48d490
push edx
call fcn.00457c43
lea edi, [esp + 0x1340]
or ecx, 0xffffffff
xor eax, eax
add esp, 0xc
repne scasb al, byte es:[edi]
not ecx
sub edi, ecx
lea edx, [esp + 0x1734]
mov esi, edi
mov edi, edx
mov edx, ecx
or ecx, 0xffffffff
repne scasb al, byte es:[edi]
mov ecx, edx
dec edi
shr ecx, 2
rep movsd dword es:[edi], dword [esi]
mov ecx, edx
mov edx, dword [esp + 0x10]
and ecx, 3
inc edx
rep movsb byte es:[edi], byte [esi]
lea edi, [esp + 0x228]
or ecx, 0xffffffff
repne scasb al, byte es:[edi]
not ecx
dec ecx
mov dword [esp + 0x10], edx
cmp edx, ecx
jl 0x447434
lea edi, [esp + 0x1734]
or ecx, 0xffffffff
xor eax, eax
lea edx, [esp + 0x228]
repne scasb al, byte es:[edi]
not ecx
sub edi, ecx
mov eax, ecx
mov esi, edi
mov edi, edx
lea edx, [esp + 0x228]
shr ecx, 2
rep movsd dword es:[edi], dword [esi]
mov ecx, eax
and ecx, 3
rep movsb byte es:[edi], byte [esi]
lea ecx, [esp + 0x18]
push ecx
push edx
push 0x48d420
push str.System
call ebp
mov eax, dword [ebx + 0x10a0]
test eax, eax
mov eax, 0x48d484
jne 0x447504
mov eax, 0x48d480
lea ecx, [esp + 0x18]
push ecx
push eax
push str.AllHide
push str.System
call ebp
mov eax, dword [ebx + 0xa580]
test eax, eax
mov eax, 0x48d484
jne 0x44752a
mov eax, 0x48d480
lea edx, [esp + 0x18]
push edx
push eax
push str.DisableExternalUser
push str.System
call ebp
lea edx, [ebx + 0xa9b8]
or ecx, 0xffffffff
mov edi, edx
xor eax, eax
repne scasb al, byte es:[edi]
not ecx
dec ecx
lea eax, [esp + 0x18]
neg ecx
sbb ecx, ecx
push eax
and ecx, edx
push ecx
push str.WebSitesCheckInternet
push str.System
call ebp
mov eax, dword [ebx + 0x14]
test eax, eax
mov eax, 0x48d484
jne 0x447577
mov eax, 0x48d480
lea ecx, [esp + 0x18]
push ecx
push eax
push str.StartSocks4
push str.System
call ebp
mov eax, dword [ebx + 0xb9bc]
test eax, eax
mov eax, 0x48d484
jne 0x44759d
mov eax, 0x48d480
lea edx, [esp + 0x18]
push edx
push eax
push str.AutoScanComputerName
push str.System
call ebp
lea eax, [esp + 0x18]
push eax
push 0
push str.MaxUserCount
push str.System
call ebp
lea ecx, [esp + 0x18]
push ecx
push 0
push str.MaxTimeSchedule
push str.System
call ebp
lea edx, [esp + 0x18]
push edx
push 0
push str.MaxWebFilter
push str.System
call ebp
mov eax, dword [ebx + 0x34bc]
lea ecx, [esp + 0x228]
push eax
push 0x48d2ec
push ecx
call fcn.00457c43
add esp, 0xc
lea edx, [esp + 0x18]
lea eax, [esp + 0x228]
push edx
push eax
push str.NTService
push str.System
call ebp
mov ecx, dword [ebx + 0x34b8]
lea edx, [esp + 0x228]
push ecx
push 0x48d2ec
push edx
call fcn.00457c43
add esp, 0xc
lea eax, [esp + 0x18]
lea ecx, [esp + 0x228]
push eax
push ecx
push str.AddMessage
push str.System
call ebp
lea edx, [esp + 0x18]
lea eax, [ebx + 0x14a8]
push edx
push eax
push str.WebAuthTitle
push str.StringEx
call ebp
lea ecx, [esp + 0x18]
lea edx, [ebx + 0x20b0]
push ecx
push edx
push str.AuthorityFailed
push str.StringEx
call ebp
lea eax, [esp + 0x18]
lea ecx, [ebx + 0x18a8]
push eax
push ecx
push str.WebSiteForbidden
push str.StringEx
call ebp
lea edx, [esp + 0x18]
lea eax, [ebx + 0x1cac]
push edx
push eax
push str.WebContentForbidden
push str.StringEx
call ebp
mov eax, dword [ebx + 0xb9c0]
test eax, eax
mov eax, 0x48d480
je 0x4476c6
mov eax, 0x48d484
lea ecx, [esp + 0x18]
push ecx
push eax
push str.EnableScanMAC
push str.System
call ebp
mov eax, dword [ebx + 0x34c4]
test eax, eax
mov eax, 0x48d480
je 0x4476ec
mov eax, 0x48d484
lea edx, [esp + 0x18]
push edx
push eax
push str.ShutDownWhenIdle
push str.System
call ebp
mov eax, dword [ebx + 0x240b8]
test eax, eax
mov eax, 0x48d480
je 0x447712
mov eax, 0x48d484
lea ecx, [esp + 0x18]
push ecx
push eax
push str.BugTrace
push str.System
call ebp
mov eax, dword [ebx + 0xa568]
test eax, eax
mov eax, 0x48d480
je 0x447738
mov eax, 0x48d484
lea edx, [esp + 0x18]
push edx
push eax
push str.SaveUserData
push 0x48d744
call ebp
mov eax, dword [ebx + 0xa56c]
lea ecx, [esp + 0x228]
push eax
push 0x48d2ec
push ecx
call fcn.00457c43
add esp, 0xc
lea edx, [esp + 0x18]
lea eax, [esp + 0x228]
push edx
push eax
push str.SaveUserDataInterval
push 0x48d744
call ebp
mov eax, dword [ebx + 0x34c8]
test eax, eax
mov eax, 0x48d484
jne 0x447793
mov eax, 0x48d480
lea ecx, [esp + 0x18]
push ecx
push eax
push 0x48d368
push str.ShutDown
call ebp
lea edx, [esp + 0x18]
lea eax, [ebx + 0x34cc]
push edx
push eax
push str.Time
push str.ShutDown
call ebp
mov ecx, dword [ebx + 0x240a8]
lea edx, [esp + 0x228]
push ecx
push 0x48d2ec
push edx
call fcn.00457c43
add esp, 0xc
lea eax, [esp + 0x18]
lea ecx, [esp + 0x228]
push eax
push ecx
push str.Count
push 0x490da4
call ebp
mov eax, dword [ebx + 0x240a8]
test eax, eax
jle 0x447956
lea edx, [ebx + 0x20b08]
mov esi, 1
mov dword [esp + 0x10], edx
mov al, byte [0x493b50]
mov ecx, 0x41
mov byte [esp + 0x120], al
xor eax, eax
lea edi, [esp + 0x121]
push esi
rep stosd dword es:[edi], eax
lea ecx, [esp + 0x124]
push str.Host_d
push ecx
call fcn.00457c43
mov edi, dword [esp + 0x1c]
add esp, 0xc
lea edx, [esp + 0x18]
lea ecx, [esp + 0x120]
lea eax, [edi - 0x108]
push edx
push eax
push ecx
push 0x490da4
call ebp
push esi
lea edx, [esp + 0x124]
push str.PortOut_d
push edx
call fcn.00457c43
mov eax, dword [edi]
lea ecx, [esp + 0x234]
push eax
push 0x48d2ec
push ecx
call fcn.00457c43
add esp, 0x18
lea edx, [esp + 0x18]
lea eax, [esp + 0x228]
lea ecx, [esp + 0x120]
push edx
push eax
push ecx
push 0x490da4
call ebp
push esi
lea edx, [esp + 0x124]
push str.PortIn_d
push edx
call fcn.00457c43
mov eax, dword [edi + 4]
lea ecx, [esp + 0x234]
push eax
push 0x48d2ec
push ecx
call fcn.00457c43
add esp, 0x18
lea edx, [esp + 0x18]
lea eax, [esp + 0x228]
lea ecx, [esp + 0x120]
push edx
push eax
push ecx
push 0x490da4
call ebp
push esi
lea edx, [esp + 0x124]
push str.PortType_d
push edx
call fcn.00457c43
mov eax, dword [edi - 0x10c]
lea ecx, [esp + 0x234]
push eax
push 0x48d2ec
push ecx
call fcn.00457c43
add esp, 0x18
lea edx, [esp + 0x18]
lea eax, [esp + 0x228]
lea ecx, [esp + 0x120]
push edx
push eax
push ecx
push 0x490da4
call ebp
mov eax, dword [ebx + 0x240a8]
inc esi
add edi, 0x118
lea edx, [esi - 1]
mov dword [esp + 0x10], edi
cmp edx, eax
jl 0x44780f
mov eax, dword [ebx + 0xb9c4]
lea ecx, [esp + 0x228]
push eax
push 0x48d2ec
push ecx
call fcn.00457c43
add esp, 0xc
lea edx, [esp + 0x18]
lea eax, [esp + 0x228]
push edx
push eax
push str.MaxConnectionMode
push str.System
call ebp
mov ecx, dword [ebx + 0x38d0]
lea edx, [esp + 0x228]
push ecx
push 0x48d2ec
push edx
call fcn.00457c43
add esp, 0xc
lea eax, [esp + 0x18]
lea ecx, [esp + 0x228]
push eax
push ecx
push str.EnableRemoteControl
push str.System
call ebp
mov edx, dword [ebx + 0xb9c8]
lea eax, [esp + 0x228]
push edx
push 0x48d2ec
push eax
call fcn.00457c43
add esp, 0xc
lea ecx, [esp + 0x18]
lea edx, [esp + 0x228]
push ecx
push edx
push str.TimeoutMAC
push str.System
call ebp
mov eax, dword [ebx + 0xb9cc]
lea ecx, [esp + 0x228]
push eax
push 0x48d2ec
push ecx
call fcn.00457c43
add esp, 0xc
lea edx, [esp + 0x18]
lea eax, [esp + 0x228]
push edx
push eax
push str.SOCKS5UDP
push str.System
call ebp
mov ecx, dword [ebx + 0x209f4]
lea edx, [esp + 0x228]
push ecx
push 0x48d2ec
push edx
call fcn.00457c43
add esp, 0xc
lea eax, [esp + 0x18]
lea ecx, [esp + 0x228]
push eax
push ecx
push str.BandWidthControlType
push str.System
call ebp
mov edx, dword [ebx + 0x38d4]
lea eax, [esp + 0x228]
push edx
push 0x48d2ec
push eax
call fcn.00457c43
add esp, 0xc
lea ecx, [esp + 0x18]
lea edx, [esp + 0x228]
push ecx
push edx
push str.CloseConfirm
push str.System
call ebp
mov eax, dword [ebx + 0x240bc]
test eax, eax
mov eax, 0x48d484
jne 0x447aa8
mov eax, 0x48d480
lea ecx, [esp + 0x18]
push ecx
push eax
push str.EnableRecord
push 0x48f548
call ebp
mov eax, dword [ebx + 0x38d8]
test eax, eax
mov eax, 0x48d484
jne 0x447ace
mov eax, 0x48d480
lea edx, [esp + 0x18]
push edx
push eax
push str.EnableMultiRun
push str.System
call ebp
mov eax, dword [ebx + 0x38dc]
lea ecx, [esp + 0x228]
push eax
push 0x48d2ec
push ecx
call fcn.00457c43
add esp, 0xc
lea edx, [esp + 0x18]
lea eax, [esp + 0x228]
push edx
push eax
push str.MaximumConnectionsChart
push str.System
call ebp
mov ecx, dword [ebx + 0x38e0]
lea edx, [esp + 0x228]
push ecx
push 0x48e6b8
push edx
call fcn.00457c43
add esp, 0xc
lea eax, [esp + 0x18]
lea ecx, [esp + 0x228]
push eax
push ecx
push str.MaximumBandwidthChart
push str.System
call ebp
mov edx, dword [ebx + 0x38e4]
lea eax, [esp + 0x228]
push edx
push str.CTRLALT_c
push eax
call fcn.00457c43
add esp, 0xc
lea ecx, [esp + 0x18]
lea edx, [esp + 0x228]
push ecx
push edx
push str.HotKey
push str.System
call ebp
mov eax, dword [ebx + 0x38e8]
test eax, eax
mov eax, 0x48d484
jne 0x447b93
mov eax, 0x48d480
lea ecx, [esp + 0x18]
push ecx
push eax
push str.EnableHotKey
push str.System
call ebp
mov edx, dword [ebx + 0x1b9d4]
lea eax, [esp + 0x228]
push edx
push 0x48d2ec
push eax
call fcn.00457c43
add esp, 0xc
lea ecx, [esp + 0x18]
lea edx, [esp + 0x228]
push ecx
push edx
push str.AntiVirusGate
push str.System
call ebp
mov eax, dword [ebx + 0x34c0]
lea ecx, [esp + 0x228]
push eax
push 0x48d2ec
push ecx
call fcn.00457c43
add esp, 0xc
lea edx, [esp + 0x18]
lea eax, [esp + 0x228]
push edx
push eax
push str.TerminalServices
push str.System
call ebp
mov ecx, dword [ebx + 0x1b9d8]
lea edx, [esp + 0x228]
push ecx
push 0x48d2ec
push edx
call fcn.00457c43
add esp, 0xc
lea eax, [esp + 0x18]
lea ecx, [esp + 0x228]
push eax
push ecx
push str.PortDisabled
push str.DestDisabled
call ebp
lea edx, [esp + 0x18]
lea eax, [ebx + 0x1b9dc]
push edx
push eax
push 0x4913c8
push str.DestDisabled
call ebp
mov ecx, dword [ebx + 0x1c9e0]
lea edx, [esp + 0x228]
push ecx
push 0x48d2ec
push edx
call fcn.00457c43
add esp, 0xc
lea eax, [esp + 0x18]
lea ecx, [esp + 0x228]
push eax
push ecx
push str.IPDisabled
push str.DestDisabled
call ebp
lea edx, [esp + 0x18]
lea eax, [ebx + 0x1c9e4]
push edx
push eax
push 0x490c74
push str.DestDisabled
call ebp
mov ecx, dword [ebx + 0x1d9e8]
lea edx, [esp + 0x228]
push ecx
push 0x48d2ec
push edx
call fcn.00457c43
add esp, 0xc
lea eax, [esp + 0x18]
lea ecx, [esp + 0x228]
push eax
push ecx
push str.ConnectionsBasedIP
push str.System
call ebp
mov eax, dword [ebx + 0x1d9ec]
test eax, eax
mov eax, 0x48d484
jne 0x447cf2
mov eax, 0x48d480
lea edx, [esp + 0x18]
push edx
push eax
push str.AutoCloseNAVAlert
push str.AntiVirus
call ebp
lea eax, [esp + 0x18]
lea ecx, [ebx + 0x1d9f0]
push eax
push ecx
push str.NVATitle
push str.AntiVirus
call ebp
lea edx, [esp + 0x18]
lea eax, [ebx + 0x1e9f1]
push edx
push eax
push str.NVAClass
push str.AntiVirus
call ebp
lea ecx, [esp + 0x18]
lea edx, [ebx + 0x1f9f2]
push ecx
push edx
push str.ServerBindIP
push str.Networks
call ebp
mov eax, dword [ebx + 0xa570]
test eax, eax
mov eax, 0x48d484
jne 0x447d60
mov eax, 0x48d480
lea ecx, [esp + 0x18]
push ecx
push eax
push str.SaveWebTitleEx
push 0x48d744
call ebp
mov eax, dword [ebx + 0xa574]
test eax, eax
mov eax, 0x48d484
jne 0x447d86
mov eax, 0x48d480
lea edx, [esp + 0x18]
push edx
push eax
push str.EnableGzipEx
push 0x48d744
call ebp
mov eax, dword [ebx + 0xa578]
test eax, eax
mov eax, 0x48d484
jne 0x447dac
mov eax, 0x48d480
lea ecx, [esp + 0x18]
push ecx
push eax
push str.EnableProxyConnectionEx
push 0x48d744
call ebp
mov eax, dword [ebx + 0xa57c]
test eax, eax
mov eax, 0x48d484
jne 0x447dd2
mov eax, 0x48d480
lea edx, [esp + 0x18]
push edx
push eax
push str.EnableReferer
push 0x48d744
call ebp
lea ecx, [esp + 0x14]
mov dword [esp + 0x2b44], 0xffffffff
call fcn.0046e162
mov ecx, dword [esp + 0x2b3c]
pop edi
pop esi
pop ebp
pop ebx
mov dword fs:[0], ecx
add esp, 0x2b38
ret