Function at 0x4faf20
Capabilities:
Read .ini file

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x62a607
mov eax, dword fs:[0]
push eax
sub esp, 0x2a0
mov eax, dword [0x6d5db8]
xor eax, ebp
mov dword [ebp - 0x10], eax
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov dword [ebp - 0x280], ecx
mov ecx, dword [ebp - 0x280]
call fcn.005c4bed
mov eax, dword [ebp - 0x280]
push eax
call fcn.005acd80
mov ecx, eax
call fcn.005add90
push ecx
mov ecx, esp
mov dword [ebp - 0x260], esp
push 0x66bfa4
call fcn.004015a0
mov dword [ebp - 0x284], eax
mov ecx, dword [ebp - 0x284]
mov dword [ebp - 0x288], ecx
mov dword [ebp - 4], 0
lea edx, [ebp - 0x264]
push edx
call fcn.005acd80
mov dword [ebp - 4], 0xffffffff
mov ecx, eax
call fcn.005adbf0
mov dword [ebp - 0x28c], eax
mov eax, dword [ebp - 0x28c]
mov dword [ebp - 0x290], eax
mov dword [ebp - 4], 1
mov ecx, dword [ebp - 0x290]
call fcn.00587e90
push eax
mov ecx, dword [ebp - 0x280]
call fcn.005cb022
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x264]
call fcn.00401620
push str.login.ini
lea ecx, [ebp - 0x13c]
call fcn.004015a0
mov dword [ebp - 4], 2
call fcn.0041b910
add eax, 4
push eax
lea ecx, [ebp - 0x118]
call fcn.00401580
mov byte [ebp - 4], 3
push 0x66bfbc
lea ecx, [ebp - 0x12c]
call fcn.004015a0
mov byte [ebp - 4], 4
push 0
push ecx
mov ecx, esp
mov dword [ebp - 0x268], esp
lea edx, [ebp - 0x118]
push edx
call fcn.00401580
mov dword [ebp - 0x294], eax
mov eax, dword [ebp - 0x294]
mov dword [ebp - 0x298], eax
mov byte [ebp - 4], 5
push ecx
mov ecx, esp
mov dword [ebp - 0x26c], esp
lea edx, [ebp - 0x12c]
push edx
call fcn.00401580
mov dword [ebp - 0x29c], eax
mov eax, dword [ebp - 0x29c]
mov dword [ebp - 0x2a0], eax
mov byte [ebp - 4], 6
push ecx
mov ecx, esp
mov dword [ebp - 0x270], esp
lea edx, [ebp - 0x13c]
push edx
call fcn.00401580
mov dword [ebp - 0x2a4], eax
mov eax, dword [ebp - 0x280]
push eax
mov ecx, dword [ebp - 0x280]
add ecx, 0x140
mov byte [ebp - 4], 4
call fcn.005711e0
push 0x20
mov ecx, dword [ebp - 0x280]
add ecx, 0x870
call fcn.00458580
push 0
mov ecx, dword [ebp - 0x280]
call fcn.005c738e
push 0x66bfc4
lea ecx, [ebp - 0x140]
call fcn.004015a0
mov byte [ebp - 4], 7
lea ecx, [ebp - 0x140]
push ecx
lea edx, [ebp - 0x118]
push edx
lea eax, [ebp - 0x274]
push eax
call fcn.0040ed60
add esp, 0xc
mov dword [ebp - 0x2a8], eax
mov ecx, dword [ebp - 0x2a8]
mov dword [ebp - 0x2ac], ecx
mov byte [ebp - 4], 8
mov edx, dword [ebp - 0x2ac]
push edx
mov ecx, dword [ebp - 0x280]
add ecx, 0x84
call fcn.0040bb70
mov byte [ebp - 4], 7
lea ecx, [ebp - 0x274]
call fcn.00401620
push 0xff
push 0
lea eax, [ebp - 0x114]
push eax
call fcn.005e5330
add esp, 0xc
mov ecx, dword [ebp - 0x280]
add ecx, 0x84
call fcn.00587e90
push eax
push 0xff
lea ecx, [ebp - 0x114]
push ecx
push 0x66ba21
push 0x66bfd0
push 0x66bfd8
call dword [sym.imp.KERNEL32.dll_GetPrivateProfileStringA]
mov dword [ebp - 0x128], eax
cmp dword [ebp - 0x128], 0
je 0x4fb3f9
lea edx, [ebp - 0x114]
push edx
call fcn.005e62d7
add esp, 4
mov dword [ebp - 0x158], eax
cmp dword [ebp - 0x158], 0
je 0x4fb268
push 0xff
push 0
lea eax, [ebp - 0x114]
push eax
call fcn.005e5330
add esp, 0xc
mov ecx, dword [ebp - 0x280]
add ecx, 0x84
call fcn.00587e90
push eax
push 0xff
lea ecx, [ebp - 0x114]
push ecx
push 0x66ba22
push 0x66bfec
push 0x66bff8
call dword [sym.imp.KERNEL32.dll_GetPrivateProfileStringA]
push 1
lea edx, [ebp - 0x25c]
push edx
lea eax, [ebp - 0x114]
push eax
call sub.Password.dll_DecryptStringEX
lea ecx, [ebp - 0x25c]
push ecx
mov ecx, dword [ebp - 0x280]
add ecx, 0x78
call fcn.00401640
mov ecx, dword [ebp - 0x280]
add ecx, 0x78
call fcn.00587e90
push eax
mov ecx, dword [ebp - 0x280]
add ecx, 0x81c
call fcn.005cb022
mov edx, dword [ebp - 0x280]
mov eax, dword [ebp - 0x158]
mov dword [edx + 0x88], eax
mov ecx, dword [ebp - 0x280]
mov edx, dword [ecx + 0x88]
push edx
mov ecx, dword [ebp - 0x280]
add ecx, 0x918
call fcn.0057ec30
push 0xff
push 0
lea eax, [ebp - 0x114]
push eax
call fcn.005e5330
add esp, 0xc
mov ecx, dword [ebp - 0x280]
add ecx, 0x84
call fcn.00587e90
push eax
push 0xff
lea ecx, [ebp - 0x114]
push ecx
push str.admin
push 0x66c014
push 0x66c020
call dword [sym.imp.KERNEL32.dll_GetPrivateProfileStringA]
lea edx, [ebp - 0x114]
push edx
mov ecx, dword [ebp - 0x280]
add ecx, 0x74
call fcn.00401640
mov ecx, dword [ebp - 0x280]
add ecx, 0x74
call fcn.00587e90
push eax
mov ecx, dword [ebp - 0x280]
add ecx, 0x7c8
call fcn.005cb022
lea ecx, [ebp - 0x154]
call fcn.00514f40
mov byte [ebp - 4], 9
push 0x66ba23
lea ecx, [ebp - 0x15c]
call fcn.004015a0
mov byte [ebp - 4], 0xa
mov dword [ebp - 0x148], 0
lea eax, [ebp - 0x148]
push eax
lea ecx, [ebp - 0x15c]
push ecx
lea ecx, [ebp - 0x154]
call fcn.00516a40
mov dword [ebp - 0x144], eax
lea edx, [ebp - 0x15c]
push edx
mov ecx, dword [ebp - 0x280]
add ecx, 0x7c
call fcn.0040bb70
mov ecx, dword [ebp - 0x280]
add ecx, 0x7c
call fcn.00587e90
push eax
mov ecx, dword [ebp - 0x280]
add ecx, 0x870
call fcn.005cb022
mov eax, dword [ebp - 0x148]
push eax
push 0x66c034
mov ecx, dword [ebp - 0x280]
add ecx, 0x80
push ecx
call fcn.00405010
add esp, 0xc
mov ecx, dword [ebp - 0x280]
add ecx, 0x80
call fcn.00587e90
push eax
mov ecx, dword [ebp - 0x280]
add ecx, 0x8c4
call fcn.005cb022
mov byte [ebp - 4], 9
lea ecx, [ebp - 0x15c]
call fcn.00401620
mov byte [ebp - 4], 7
lea ecx, [ebp - 0x154]
call fcn.00515010
push 0xff
push 0
lea edx, [ebp - 0x114]
push edx
call fcn.005e5330
add esp, 0xc
lea ecx, [ebp - 0x124]
call fcn.00514f40
mov byte [ebp - 4], 0xb
lea ecx, [ebp - 0x124]
call fcn.00516570
movzx eax, al
mov ecx, dword [ebp - 0x280]
mov dword [ecx + 0x134], eax
lea ecx, [ebp - 0x124]
call fcn.005166d0
movzx edx, al
mov eax, dword [ebp - 0x280]
mov dword [eax + 0x13c], edx
push 0
mov ecx, dword [ebp - 0x280]
call fcn.005c7303
mov ecx, dword [ebp - 0x280]
cmp dword [ecx + 0x134], 1
jne 0x4fb51a
mov edx, dword [ebp - 0x280]
cmp dword [edx + 0x13c], 1
jne 0x4fb51a
push 1
mov ecx, dword [ebp - 0x280]
call fcn.005c7303
mov ecx, dword [ebp - 0x280]
call fcn.004fb620
test eax, eax
jne 0x4fb504
mov dword [ebp - 0x278], 1
mov byte [ebp - 4], 7
lea ecx, [ebp - 0x124]
call fcn.00515010
mov byte [ebp - 4], 4
lea ecx, [ebp - 0x140]
call fcn.00401620
mov byte [ebp - 4], 3
lea ecx, [ebp - 0x12c]
call fcn.00401620
mov byte [ebp - 4], 2
lea ecx, [ebp - 0x118]
call fcn.00401620
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x13c]
call fcn.00401620
mov eax, dword [ebp - 0x278]
jmp 0x4fb5a3
mov eax, dword [ebp - 0x280]
mov edx, dword [eax]
mov ecx, dword [ebp - 0x280]
mov eax, dword [edx + 0x150]
call eax
lea ecx, [ebp - 0x138]
call fcn.00514f40
mov byte [ebp - 4], 0xc
push 1
lea ecx, [ebp - 0x138]
call fcn.00516620
mov dword [ebp - 0x27c], 1
mov byte [ebp - 4], 0xb
lea ecx, [ebp - 0x138]
call fcn.00515010
mov byte [ebp - 4], 7
lea ecx, [ebp - 0x124]
call fcn.00515010
mov byte [ebp - 4], 4
lea ecx, [ebp - 0x140]
call fcn.00401620
mov byte [ebp - 4], 3
lea ecx, [ebp - 0x12c]
call fcn.00401620
mov byte [ebp - 4], 2
lea ecx, [ebp - 0x118]
call fcn.00401620
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x13c]
call fcn.00401620
mov eax, dword [ebp - 0x27c]
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
mov ecx, dword [ebp - 0x10]
xor ecx, ebp
call fcn.005e5163
mov esp, ebp
pop ebp
ret