Function at 0x487620
Capabilities:
Read .ini file

Disassembly:
push ebx
push esi
push edi
mov edi, ecx
lea esi, [edi + 0x430]
mov ecx, esi
call fcn.00425a60
push esi
push 0
push str.UseRegistry
push str.admin
call dword [sym.imp.KERNEL32.dll_GetPrivateProfileIntA]
mov esi, dword [sym.imp.ADVAPI32.dll_RegCloseKey]
xor ecx, ecx
cmp eax, 1
mov dword [edi + 0x100], 0
mov dword [edi + 0x104], 0
sete cl
mov dword [edi + 0x108], 0
mov dword [edi + 0x42c], ecx
mov ecx, edi
mov dword [edi + 0x10c], 0
mov dword [edi + 0x11c], 0
mov dword [edi + 0x120], 0
mov dword [edi + 0x124], 0
jne 0x4876f5
xor ebx, ebx
call fcn.004873d0
mov eax, dword [edi + 0x108]
test eax, eax
je 0x4876c3
push str.group1
push eax
mov ecx, edi
call fcn.004874c0
mov ebx, eax
cmp dword [edi + 0x42c], 0
je 0x487703
mov eax, dword [edi + 0x108]
test eax, eax
je 0x4876d9
push eax
call esi
mov eax, dword [edi + 0x10c]
test eax, eax
je 0x4876e6
push eax
call esi
mov eax, dword [edi + 0x104]
test eax, eax
je 0x487703
push eax
call esi
jmp 0x487703
push str.group1
push 0
call fcn.004874c0
mov ebx, eax
cmp dword [edi + 0x42c], 0
mov ecx, edi
mov dword [edi + 0x110], ebx
je 0x487766
xor ebx, ebx
call fcn.004873d0
mov eax, dword [edi + 0x108]
test eax, eax
je 0x487734
push str.group2
push eax
mov ecx, edi
call fcn.004874c0
mov ebx, eax
cmp dword [edi + 0x42c], 0
je 0x487778
mov eax, dword [edi + 0x108]
test eax, eax
je 0x48774a
push eax
call esi
mov eax, dword [edi + 0x10c]
test eax, eax
je 0x487757
push eax
call esi
mov eax, dword [edi + 0x104]
test eax, eax
je 0x487778
push eax
call esi
jmp 0x487778
push str.group2
push dword [edi + 0x108]
call fcn.004874c0
mov ebx, eax
cmp dword [edi + 0x42c], 0
mov ecx, edi
mov dword [edi + 0x114], ebx
je 0x4877db
xor ebx, ebx
call fcn.004873d0
mov eax, dword [edi + 0x108]
test eax, eax
je 0x4877a9
push str.group3
push eax
mov ecx, edi
call fcn.004874c0
mov ebx, eax
cmp dword [edi + 0x42c], 0
je 0x4877ed
mov eax, dword [edi + 0x108]
test eax, eax
je 0x4877bf
push eax
call esi
mov eax, dword [edi + 0x10c]
test eax, eax
je 0x4877cc
push eax
call esi
mov eax, dword [edi + 0x104]
test eax, eax
je 0x4877ed
push eax
call esi
jmp 0x4877ed
push str.group3
push dword [edi + 0x108]
call fcn.004874c0
mov ebx, eax
cmp dword [edi + 0x42c], 0
mov ecx, edi
mov dword [edi + 0x118], ebx
mov ebx, dword [edi + 0x11c]
je 0x487855
call fcn.004873d0
mov eax, dword [edi + 0x108]
test eax, eax
je 0x487823
push ebx
push str.locdom1
push eax
mov ecx, edi
call fcn.00487440
mov ebx, eax
cmp dword [edi + 0x42c], 0
je 0x487868
mov eax, dword [edi + 0x108]
test eax, eax
je 0x487839
push eax
call esi
mov eax, dword [edi + 0x10c]
test eax, eax
je 0x487846
push eax
call esi
mov eax, dword [edi + 0x104]
test eax, eax
je 0x487868
push eax
call esi
jmp 0x487868
push ebx
push str.locdom1
push dword [edi + 0x108]
call fcn.00487440
mov ebx, eax
cmp dword [edi + 0x42c], 0
mov ecx, edi
mov dword [edi + 0x11c], ebx
mov ebx, dword [edi + 0x120]
je 0x4878d0
call fcn.004873d0
mov eax, dword [edi + 0x108]
test eax, eax
je 0x48789e
push ebx
push str.locdom2
push eax
mov ecx, edi
call fcn.00487440
mov ebx, eax
cmp dword [edi + 0x42c], 0
je 0x4878e3
mov eax, dword [edi + 0x108]
test eax, eax
je 0x4878b4
push eax
call esi
mov eax, dword [edi + 0x10c]
test eax, eax
je 0x4878c1
push eax
call esi
mov eax, dword [edi + 0x104]
test eax, eax
je 0x4878e3
push eax
call esi
jmp 0x4878e3
push ebx
push str.locdom2
push dword [edi + 0x108]
call fcn.00487440
mov ebx, eax
cmp dword [edi + 0x42c], 0
mov ecx, edi
mov dword [edi + 0x120], ebx
mov ebx, dword [edi + 0x124]
je 0x48794b
call fcn.004873d0
mov eax, dword [edi + 0x108]
test eax, eax
je 0x487919
push ebx
push str.locdom3
push eax
mov ecx, edi
call fcn.00487440
mov ebx, eax
cmp dword [edi + 0x42c], 0
je 0x48795e
mov eax, dword [edi + 0x108]
test eax, eax
je 0x48792f
push eax
call esi
mov eax, dword [edi + 0x10c]
test eax, eax
je 0x48793c
push eax
call esi
mov eax, dword [edi + 0x104]
test eax, eax
je 0x48795e
push eax
call esi
jmp 0x48795e
push ebx
push str.locdom3
push dword [edi + 0x108]
call fcn.00487440
mov ebx, eax
mov ecx, dword [edi + 0x110]
lea eax, [edi + 0x128]
mov dword [edi + 0x124], ebx
test ecx, ecx
je 0x487990
push ecx
push 0x100
push eax
call fcn.005417f5
push dword [edi + 0x110]
call fcn.0053d63e
add esp, 0x10
jmp 0x4879a3
push 0x584fd8
push 0x100
push eax
call fcn.005417f5
add esp, 0xc
mov ecx, dword [edi + 0x114]
lea eax, [edi + 0x228]
test ecx, ecx
je 0x4879cf
push ecx
push 0x100
push eax
call fcn.005417f5
push dword [edi + 0x114]
call fcn.0053d63e
add esp, 0x10
jmp 0x4879e2
push 0x584fd8
push 0x100
push eax
call fcn.005417f5
add esp, 0xc
mov ecx, dword [edi + 0x118]
lea eax, [edi + 0x328]
test ecx, ecx
je 0x487a12
push ecx
push 0x100
push eax
call fcn.005417f5
push dword [edi + 0x118]
call fcn.0053d63e
add esp, 0x10
mov eax, edi
pop edi
pop esi
pop ebx
ret
push 0x584fd8
push 0x100
push eax
call fcn.005417f5
add esp, 0xc
mov eax, edi
pop edi
pop esi
pop ebx
ret