Function at 0x100ad650
Capabilities:
Read .ini file
Terminate process

Disassembly:
push ebp
lea ebp, [esp - 0x6c]
sub esp, 0x6c
push 0xffffffffffffffff
push 0x100ee5ad
mov eax, dword fs:[0]
push eax
sub esp, 0x34
mov eax, dword [0x10120140]
xor eax, ebp
mov dword [ebp + 0x68], eax
push ebx
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov eax, dword [ebp + 0x74]
mov dword [ebp - 0x14], eax
mov eax, dword [ebp + 0x78]
mov dword [ebp - 0x10], 1
sub eax, 0
je 0x100ad948
sub eax, 1
jne 0x100ad95e
mov ecx, 0x1015839c
call fcn.1004d870
push dword [ebp - 0x14]
mov edi, eax
push ecx
lea ecx, [ebp + 4]
call fcn.100b8250
mov ecx, eax
call fcn.10045fa0
push dword [ebp + 4]
mov esi, eax
push ecx
lea ecx, [ebp - 0x38]
call fcn.100b8200
mov ecx, eax
call fcn.1004a3d0
push eax
lea ecx, [ebp - 0x30]
call fcn.1004daa0
mov ecx, eax
call fcn.1004d870
mov ebx, dword [sym.imp.KERNEL32.dll_GetPrivateProfileStringA]
lea ecx, [ebp + 0x50]
push edi
push 0x15
push ecx
push 0x1010ecff
push esi
push eax
call ebx
lea ecx, [ebp - 0x30]
call fcn.1004d9f0
mov ecx, 0x1015839c
call fcn.1004d870
push dword [ebp + 4]
mov edi, eax
push ecx
lea ecx, [ebp]
call fcn.100b82c0
mov ecx, eax
call fcn.10045ee0
push dword [ebp + 4]
mov esi, eax
push ecx
lea ecx, [ebp - 0x40]
call fcn.100b8270
mov ecx, eax
call fcn.1004a3d0
push eax
lea ecx, [ebp - 0x30]
call fcn.1004daa0
mov ecx, eax
call fcn.1004d870
push edi
push 0x15
lea ecx, [ebp + 0x38]
push ecx
push 0x1010ecff
push esi
push eax
call ebx
lea ecx, [ebp - 0x30]
call fcn.1004d9f0
lea eax, [ebp + 0x50]
push eax
lea ecx, [ebp + 8]
call fcn.1004daa0
lea eax, [ebp + 0x38]
mov dword [ebp - 4], 0
push eax
lea ecx, [ebp + 0x20]
call fcn.1004daa0
lea ecx, [ebp + 8]
mov byte [ebp - 4], 1
call fcn.1004d7f0
test al, al
jne 0x100ad931
lea ecx, [ebp + 0x20]
call fcn.1004d7f0
test al, al
jne 0x100ad931
push 0
mov ecx, 0x1015c0f0
call fcn.100af5d0
push 0
mov ecx, 0x10156f80
call fcn.100af5d0
sub esp, 0x18
lea eax, [ebp + 8]
mov ecx, esp
push eax
call fcn.1004db00
mov ecx, 0x101598d0
call fcn.100af6a0
sub esp, 0x18
lea eax, [ebp + 0x20]
mov ecx, esp
push eax
call fcn.1004db00
mov ecx, 0x10158450
call fcn.100af6a0
sub esp, 0x18
mov esi, esp
push dword [ebp + 4]
push ecx
lea ecx, [ebp - 0x30]
call fcn.100b8300
mov ecx, eax
call fcn.10094c60
push eax
mov ecx, esi
call fcn.1004daa0
mov ecx, 0x1015acd0
call fcn.100af6a0
push 0x300c
mov ecx, 0x10154760
call fcn.100af5d0
call fcn.100ad490
push 0x100a4ff0
push 0xde7ed0
call fcn.100010f0
mov ebx, dword [ebp - 0x14]
mov ecx, ebx
mov dword [0x10147670], eax
call fcn.1005f2d0
mov ecx, ebx
call fcn.1005f3f0
mov ecx, ebx
call fcn.1005f370
push ecx
lea ecx, [ebp]
call fcn.100b83e0
mov ecx, eax
mov byte [ebp - 4], 2
call fcn.100a2760
lea ecx, [ebp]
mov byte [ebp - 4], 1
call fcn.100a2740
push ecx
lea ecx, [ebp]
call fcn.100b83f0
mov ecx, eax
mov byte [ebp - 4], 3
call fcn.100a2760
lea ecx, [ebp]
mov byte [ebp - 4], 1
call fcn.100a2740
push ecx
lea ecx, [ebp - 0x18]
call fcn.100b8400
mov ecx, eax
mov byte [ebp - 4], 4
call fcn.100a2760
lea ecx, [ebp - 0x18]
mov byte [ebp - 4], 1
call fcn.100a2740
mov eax, dword [0x10116d18]
mov ecx, 0xde7b79
mov dword [ecx], eax
mov ax, word [0x10116d1c]
push 0x100ad610
push 0x757000
mov word [ecx + 4], ax
call fcn.100010f0
mov esi, 0x10147790
nop
mov ecx, dword [esi]
test ecx, ecx
je 0x100ad8f2
mov eax, dword [ecx]
push ecx
call dword [eax + 8]
mov dword [esi], 0
add esi, 4
cmp esi, 0x10147798
jl 0x100ad8e0
mov esi, 0x10147668
mov ecx, dword [esi]
test ecx, ecx
je 0x100ad914
mov eax, dword [ecx]
push ecx
call dword [eax + 8]
mov dword [esi], 0
add esi, 4
cmp esi, 0x10147670
jl 0x100ad902
lea ecx, [ebp + 0x20]
call fcn.1004d9f0
lea ecx, [ebp + 8]
call fcn.1004d9f0
jmp 0x100ad95e
lea ecx, [ebp + 0x20]
call fcn.1004d9f0
lea ecx, [ebp + 8]
call fcn.1004d9f0
mov eax, 1
jmp 0x100ad961
push 1
mov dword [ebp - 0x10], 0
call dword [sym.imp.KERNEL32.dll_GetCurrentProcess]
push eax
call dword [sym.imp.KERNEL32.dll_TerminateProcess]
mov eax, dword [ebp - 0x10]
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov ecx, dword [ebp + 0x68]
xor ecx, ebp
call fcn.100c0eca
lea esp, [ebp + 0x6c]
pop ebp
ret 0xc