Function at 0x435f82
Capabilities:
Get common file path
Read .ini file

Disassembly:
push esi
mov esi, ecx
call fcn.0043598e
mov ecx, esi
call fcn.00435810
mov ecx, esi
call fcn.0042fef5
mov ecx, esi
call fcn.00436eef
mov ecx, esi
call fcn.00436980
mov ecx, esi
call fcn.004366ce
mov ecx, esi
call fcn.0043478b
mov ecx, esi
pop esi
jmp 0x435fbc
push 0xb30
mov eax, 0x5da2d7
call fcn.00447fd9
mov ebx, ecx
mov dword [ebp - 0xafc], ebx
push 0x800
xor esi, esi
lea eax, [ebp - 0xa18]
push esi
push eax
call fcn.004a2e40
add esp, 0xc
lea eax, [ebp - 0xa18]
push esi
push 0x1c
push eax
push esi
call dword [sym.imp.SHELL32.dll_SHGetSpecialFolderPathW]
lea eax, [ebp - 0xa18]
push 0x5c
push eax
call fcn.004a5de6
pop ecx
pop ecx
test eax, eax
je 0x436014
xor ecx, ecx
mov word [eax], cx
lea eax, [ebp - 0xa18]
push str.LocalLowShkbConfig.ini
push eax
call fcn.004b0beb
push 0x208
lea eax, [ebp - 0x218]
push esi
push eax
call fcn.004a2e40
add esp, 0x14
lea eax, [ebp - 0xa18]
mov edi, str.test
push eax
push 0x104
lea eax, [ebp - 0x218]
push eax
push 0x64a7dc
push edi
push str.Setting
call dword [sym.imp.KERNEL32.dll_GetPrivateProfileStringW]
lea eax, [ebp - 0x218]
push edi
push eax
call fcn.004ab16b
pop ecx
pop ecx
test eax, eax
jne 0x436081
push str.Test_Mode
call fcn.00489d6a
pop ecx
mov ecx, dword [ebx + 0x1c]
mov eax, dword [ecx + 4]
sub eax, dword [ecx]
sar eax, 3
test eax, eax
je 0x4366c8
mov edi, esi
mov ebx, esi
mov esi, dword [ecx]
mov dword [ebp - 0xaf8], edi
cmp esi, dword [ecx + 4]
je 0x4366c8
mov eax, dword [esi]
mov dword [ebp - 0xaf4], eax
test edi, edi
je 0x436142
and dword [ebp - 0xa20], 0
xor eax, eax
push str.ee3be246f0
mov dword [ebp - 0xa1c], 7
mov word [ebp - 0xa30], ax
call fcn.004a6baf
pop ecx
push eax
push str.ee3be246f0
lea ecx, [ebp - 0xa30]
call fcn.00401ea0
mov ecx, dword [ebp - 0xaf4]
lea eax, [ebp - 0xa30]
and dword [ebp - 4], 0
push eax
lea eax, [ebp - 0xb04]
push eax
call fcn.0042aa77
mov edi, dword [ebp - 0xb04]
push str.false
call fcn.004a6baf
pop ecx
push eax
push str.false
lea ecx, [edi + 0x28]
call fcn.00401ea0
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0xa30]
xor edi, edi
push 0
inc edi
push edi
call fcn.00401de0
jmp 0x436145
xor edi, edi
inc edi
lea eax, [ebp - 0x218]
push str.test
push eax
call fcn.004ab16b
pop ecx
pop ecx
test eax, eax
jne 0x4361e1
and dword [ebp - 0xa20], eax
push str.ee3be246f0
mov dword [ebp - 0xa1c], 7
mov word [ebp - 0xa30], ax
call fcn.004a6baf
pop ecx
push eax
push str.ee3be246f0
lea ecx, [ebp - 0xa30]
call fcn.00401ea0
mov ecx, dword [ebp - 0xaf4]
lea eax, [ebp - 0xa30]
push eax
lea eax, [ebp - 0xb0c]
mov dword [ebp - 4], edi
push eax
call fcn.0042aa77
mov edi, dword [ebp - 0xb0c]
push 0x5e2e54
call fcn.004a6baf
pop ecx
push eax
push 0x5e2e54
lea ecx, [edi + 0x28]
call fcn.00401ea0
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0xa30]
push 0
push 1
call fcn.00401de0
and dword [ebp - 0xa50], 0
xor eax, eax
mov edi, str.d0dc97e8e3
mov dword [ebp - 0xa4c], 7
push edi
mov word [ebp - 0xa60], ax
call fcn.004a6baf
pop ecx
push eax
push edi
lea ecx, [ebp - 0xa60]
call fcn.00401ea0
mov edi, dword [ebp - 0xaf4]
lea eax, [ebp - 0xa60]
push eax
lea eax, [ebp - 0xb14]
mov dword [ebp - 4], 2
push eax
mov ecx, edi
call fcn.0042aa77
mov eax, dword [ebp - 0xb14]
lea ecx, [ebp - 0xad8]
add eax, 0x28
push eax
call fcn.00403980
push 0
push 1
lea ecx, [ebp - 0xa60]
mov byte [ebp - 4], 4
call fcn.00401de0
cmp dword [ebp - 0xac8], 0
je 0x43637e
cmp dword [ebp - 0xac4], 8
lea eax, [ebp - 0xad8]
lea ecx, [ebp - 0xa30]
cmovae eax, dword [ebp - 0xad8]
push eax
call fcn.00401d40
lea eax, [ebp - 0xa78]
mov byte [ebp - 4], 5
push eax
call fcn.004212c6
mov ecx, eax
call fcn.004290ff
mov edi, 0x5e1b90
mov byte [ebp - 4], 6
push edi
call fcn.004a6baf
pop ecx
push eax
push edi
lea ecx, [ebp - 0xa30]
call fcn.00403b60
push 0xffffffffffffffff
push 0
lea eax, [ebp - 0xa78]
push eax
lea ecx, [ebp - 0xa30]
call fcn.00403c90
and dword [ebp - 0xa38], 0
xor eax, eax
mov edi, str.d0dc97e8e3
mov dword [ebp - 0xa34], 7
push edi
mov word [ebp - 0xa48], ax
call fcn.004a6baf
pop ecx
push eax
push edi
lea ecx, [ebp - 0xa48]
call fcn.00401ea0
cmp dword [ebp - 0xa1c], 8
lea eax, [ebp - 0xa48]
mov ecx, dword [ebp - 0xaf4]
lea edi, [ebp - 0xa30]
cmovae edi, dword [ebp - 0xa30]
push eax
lea eax, [ebp - 0xb1c]
mov byte [ebp - 4], 7
push eax
call fcn.0042aa77
mov ecx, dword [ebp - 0xb1c]
push edi
add ecx, 0x28
call fcn.00401e50
xor edi, edi
lea ecx, [ebp - 0xa48]
push edi
push 1
call fcn.00401de0
push edi
push 1
lea ecx, [ebp - 0xa78]
call fcn.00401de0
push edi
push 1
lea ecx, [ebp - 0xa30]
mov byte [ebp - 4], 4
call fcn.00401de0
mov edi, dword [ebp - 0xaf4]
and dword [ebp - 0xa38], 0
xor eax, eax
push str.ccbaafa398
mov dword [ebp - 0xa34], 7
mov word [ebp - 0xa48], ax
call fcn.004a6baf
pop ecx
push eax
push str.ccbaafa398
lea ecx, [ebp - 0xa48]
call fcn.00401ea0
lea eax, [ebp - 0xa48]
mov byte [ebp - 4], 8
push eax
lea eax, [ebp - 0xb24]
mov ecx, edi
push eax
call fcn.0042aa77
mov eax, dword [ebp - 0xb24]
lea ecx, [ebp - 0xac0]
add eax, 0x28
push eax
call fcn.00403980
push 0
push 1
lea ecx, [ebp - 0xa48]
mov byte [ebp - 4], 0xa
call fcn.00401de0
and dword [ebp - 0xa50], 0
xor eax, eax
push str.e146ea4156
mov dword [ebp - 0xa4c], 7
mov word [ebp - 0xa60], ax
call fcn.004a6baf
pop ecx
push eax
push str.e146ea4156
lea ecx, [ebp - 0xa60]
call fcn.00401ea0
lea eax, [ebp - 0xa60]
mov byte [ebp - 4], 0xb
push eax
lea eax, [ebp - 0xb2c]
mov ecx, edi
push eax
call fcn.0042aa77
mov eax, dword [ebp - 0xb2c]
lea ecx, [ebp - 0xaf0]
add eax, 0x28
push eax
call fcn.00403980
push 0
push 1
lea ecx, [ebp - 0xa60]
mov byte [ebp - 4], 0xd
call fcn.00401de0
and dword [ebp - 0xa38], 0
xor eax, eax
push str.c47c47afc4
mov dword [ebp - 0xa34], 7
mov word [ebp - 0xa48], ax
call fcn.004a6baf
pop ecx
push eax
push str.c47c47afc4
lea ecx, [ebp - 0xa48]
call fcn.00401ea0
lea eax, [ebp - 0xa48]
mov byte [ebp - 4], 0xe
push eax
lea eax, [ebp - 0xb34]
mov ecx, edi
push eax
call fcn.0042aa77
mov eax, dword [ebp - 0xb34]
lea ecx, [ebp - 0xaa8]
add eax, 0x28
push eax
call fcn.00403980
push 0
push 1
lea ecx, [ebp - 0xa48]
mov byte [ebp - 4], 0x10
call fcn.00401de0
and dword [ebp - 0xa68], 0
xor eax, eax
push str.ee3be246f0
mov dword [ebp - 0xa64], 7
mov word [ebp - 0xa78], ax
call fcn.004a6baf
pop ecx
push eax
push str.ee3be246f0
lea ecx, [ebp - 0xa78]
call fcn.00401ea0
lea eax, [ebp - 0xa78]
mov byte [ebp - 4], 0x11
push eax
lea eax, [ebp - 0xb3c]
mov ecx, edi
push eax
call fcn.0042aa77
mov eax, dword [ebp - 0xb3c]
lea ecx, [ebp - 0xa90]
add eax, 0x28
push eax
call fcn.00403980
xor edi, edi
lea ecx, [ebp - 0xa78]
push edi
push 1
call fcn.00401de0
cmp dword [ebp - 0xa80], edi
je 0x4365d9
cmp dword [ebp - 0xa7c], 8
lea eax, [ebp - 0xa90]
push str.false
cmovae eax, dword [ebp - 0xa90]
push eax
call fcn.004ab16b
pop ecx
pop ecx
test eax, eax
jne 0x4365d9
push edi
push 1
lea ecx, [ebp - 0xa90]
call fcn.00401de0
push edi
push 1
lea ecx, [ebp - 0xaa8]
call fcn.00401de0
push edi
push 1
lea ecx, [ebp - 0xaf0]
call fcn.00401de0
push edi
push 1
lea ecx, [ebp - 0xac0]
call fcn.00401de0
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0xad8]
push edi
push 1
call fcn.00401de0
mov edi, dword [ebp - 0xaf8]
jmp 0x4366a9
cmp dword [ebp - 0xa98], edi
je 0x43660a
cmp dword [ebp - 0xa94], 8
lea eax, [ebp - 0xaa8]
push 0x5e2e54
cmovae eax, dword [ebp - 0xaa8]
push eax
call fcn.004ab16b
pop ecx
pop ecx
test eax, eax
je 0x436584
cmp dword [ebp - 0xab0], edi
je 0x436637
cmp dword [ebp - 0xaac], 8
lea eax, [ebp - 0xac0]
push str.show
cmovae eax, dword [ebp - 0xac0]
push eax
call fcn.004ab16b
pop ecx
pop ecx
test eax, eax
jne 0x436638
inc ebx
mov eax, dword [ebp - 0xafc]
lea ecx, [ebp - 0xa90]
mov edi, dword [ebp - 0xaf8]
push 1
cmp ebx, dword [eax + 0x18]
pop eax
push 0
cmovge edi, eax
push eax
mov dword [ebp - 0xaf8], edi
call fcn.00401de0
xor eax, eax
lea ecx, [ebp - 0xaa8]
push 0
inc eax
push eax
call fcn.00401de0
xor eax, eax
lea ecx, [ebp - 0xaf0]
push 0
inc eax
push eax
call fcn.00401de0
xor eax, eax
lea ecx, [ebp - 0xac0]
push 0
inc eax
push eax
call fcn.00401de0
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0xad8]
xor eax, eax
push 0
inc eax
push eax
call fcn.00401de0
mov ecx, dword [ebp - 0xafc]
add esi, 8
mov eax, dword [ecx + 0x1c]
cmp esi, dword [eax + 4]
jne 0x4360a9
test ebx, ebx
je 0x4366c8
xor eax, eax
inc eax
mov dword [ecx + 0x10], eax
call fcn.00447f83
ret