Function at 0x100ad560
Capabilities:
Read .ini file
Terminate process

Disassembly:
push ebp
lea ebp, [esp - 0x6c]
sub esp, 0x6c
push 0xffffffffffffffff
push 0x100ee49d
mov eax, dword fs:[0]
push eax
sub esp, 0x34
mov eax, dword [0x10120140]
xor eax, ebp
mov dword [ebp + 0x68], eax
push ebx
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov eax, dword [ebp + 0x74]
mov dword [ebp - 0x14], eax
mov eax, dword [ebp + 0x78]
mov dword [ebp - 0x10], 1
sub eax, 0
je 0x100ad858
sub eax, 1
jne 0x100ad86e
mov ecx, 0x1015838c
call fcn.1004d320
push dword [ebp - 0x14]
mov edi, eax
push ecx
lea ecx, [ebp + 4]
call fcn.100b8080
mov ecx, eax
call fcn.10045d60
push dword [ebp + 4]
mov esi, eax
push ecx
lea ecx, [ebp - 0x38]
call fcn.100b8030
mov ecx, eax
call fcn.10095530
push eax
lea ecx, [ebp - 0x30]
call fcn.1004d550
mov ecx, eax
call fcn.1004d320
mov ebx, dword [sym.imp.KERNEL32.dll_GetPrivateProfileStringA]
lea ecx, [ebp + 0x50]
push edi
push 0x15
push ecx
push 0x1010ecff
push esi
push eax
call ebx
lea ecx, [ebp - 0x30]
call fcn.1004d4a0
mov ecx, 0x1015838c
call fcn.1004d320
push dword [ebp + 4]
mov edi, eax
push ecx
lea ecx, [ebp]
call fcn.100b80f0
mov ecx, eax
call fcn.10045ca0
push dword [ebp + 4]
mov esi, eax
push ecx
lea ecx, [ebp - 0x40]
call fcn.100b80a0
mov ecx, eax
call fcn.10095530
push eax
lea ecx, [ebp - 0x30]
call fcn.1004d550
mov ecx, eax
call fcn.1004d320
push edi
push 0x15
lea ecx, [ebp + 0x38]
push ecx
push 0x1010ecff
push esi
push eax
call ebx
lea ecx, [ebp - 0x30]
call fcn.1004d4a0
lea eax, [ebp + 0x50]
push eax
lea ecx, [ebp + 8]
call fcn.1004d550
lea eax, [ebp + 0x38]
mov dword [ebp - 4], 0
push eax
lea ecx, [ebp + 0x20]
call fcn.1004d550
lea ecx, [ebp + 8]
mov byte [ebp - 4], 1
call fcn.1004d2a0
test al, al
jne 0x100ad841
lea ecx, [ebp + 0x20]
call fcn.1004d2a0
test al, al
jne 0x100ad841
push 0
mov ecx, 0x1015c0e0
call fcn.100af410
push 0
mov ecx, 0x10156f70
call fcn.100af410
sub esp, 0x18
lea eax, [ebp + 8]
mov ecx, esp
push eax
call fcn.1004d5b0
mov ecx, 0x101598c0
call fcn.100af4e0
sub esp, 0x18
lea eax, [ebp + 0x20]
mov ecx, esp
push eax
call fcn.1004d5b0
mov ecx, 0x10158440
call fcn.100af4e0
sub esp, 0x18
mov esi, esp
push dword [ebp + 4]
push ecx
lea ecx, [ebp - 0x30]
call fcn.100b8130
mov ecx, eax
call fcn.100955f0
push eax
mov ecx, esi
call fcn.1004d550
mov ecx, 0x1015acc0
call fcn.100af4e0
push 0x300c
mov ecx, 0x10154750
call fcn.100af410
call fcn.100ad3a0
push 0x100a5250
push 0xde7ed0
call fcn.100010f0
mov ebx, dword [ebp - 0x14]
mov ecx, ebx
mov dword [0x10147680], eax
call fcn.1005fd00
mov ecx, ebx
call fcn.1005fe20
mov ecx, ebx
call fcn.1005fda0
push ecx
lea ecx, [ebp]
call fcn.100b8210
mov ecx, eax
mov byte [ebp - 4], 2
call fcn.100a2a00
lea ecx, [ebp]
mov byte [ebp - 4], 1
call fcn.100a29e0
push ecx
lea ecx, [ebp]
call fcn.100b8220
mov ecx, eax
mov byte [ebp - 4], 3
call fcn.100a2a00
lea ecx, [ebp]
mov byte [ebp - 4], 1
call fcn.100a29e0
push ecx
lea ecx, [ebp - 0x18]
call fcn.100b8230
mov ecx, eax
mov byte [ebp - 4], 4
call fcn.100a2a00
lea ecx, [ebp - 0x18]
mov byte [ebp - 4], 1
call fcn.100a29e0
mov eax, dword [0x10116bf4]
mov ecx, 0xde7b79
mov dword [ecx], eax
mov ax, word [0x10116bf8]
push 0x100ad520
push 0x757000
mov word [ecx + 4], ax
call fcn.100010f0
mov esi, 0x10147798
nop
mov ecx, dword [esi]
test ecx, ecx
je 0x100ad802
mov eax, dword [ecx]
push ecx
call dword [eax + 8]
mov dword [esi], 0
add esi, 4
cmp esi, 0x101477a0
jl 0x100ad7f0
mov esi, 0x10147678
mov ecx, dword [esi]
test ecx, ecx
je 0x100ad824
mov eax, dword [ecx]
push ecx
call dword [eax + 8]
mov dword [esi], 0
add esi, 4
cmp esi, 0x10147680
jl 0x100ad812
lea ecx, [ebp + 0x20]
call fcn.1004d4a0
lea ecx, [ebp + 8]
call fcn.1004d4a0
jmp 0x100ad86e
lea ecx, [ebp + 0x20]
call fcn.1004d4a0
lea ecx, [ebp + 8]
call fcn.1004d4a0
mov eax, 1
jmp 0x100ad871
push 1
mov dword [ebp - 0x10], 0
call dword [sym.imp.KERNEL32.dll_GetCurrentProcess]
push eax
call dword [sym.imp.KERNEL32.dll_TerminateProcess]
mov eax, dword [ebp - 0x10]
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov ecx, dword [ebp + 0x68]
xor ecx, ebp
call fcn.100c0cd4
lea esp, [ebp + 0x6c]
pop ebp
ret 0xc