Function at 0x4995c0
Capabilities:
Check if file exists
Get common file path
Read .ini file

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x824
mov eax, dword [0x6e4770]
xor eax, ebp
mov dword [ebp - 4], eax
push ebx
push esi
push edi
xor eax, eax
mov esi, ecx
push 0x206
push eax
mov word [ebp - 0x414], ax
lea eax, [ebp - 0x412]
push eax
call fcn.0052f1e0
xor eax, eax
push 0x206
push eax
mov word [ebp - 0x20c], ax
lea eax, [ebp - 0x20a]
push eax
call fcn.0052f1e0
add esp, 0x18
lea eax, [ebp - 0x414]
push 0
push 0x2b
push eax
push 0
call dword [sym.imp.SHELL32.dll_SHGetSpecialFolderPathW]
lea edi, [ebp - 0x414]
add edi, 0xfffffffe
lea ecx, [ecx]
mov ax, word [edi + 2]
lea edi, [edi + 2]
test ax, ax
jne 0x499630
mov eax, dword [0x642134]
lea edx, [ebp - 0x414]
mov dword [edi], eax
add edx, 0xfffffffe
lea esp, [esp]
mov cx, word [edx + 2]
lea edx, [edx + 2]
test cx, cx
jne 0x499650
mov ebx, dword [str.WnPicture]
lea edi, [ebp - 0x414]
mov ecx, dword [0x646694]
add edi, 0xfffffffe
mov dword [edx], ebx
mov dword [edx + 4], ecx
mov ecx, dword [0x646698]
mov dword [edx + 8], ecx
mov ecx, dword [0x64669c]
mov dword [edx + 0xc], ecx
mov ecx, dword [0x6466a0]
mov dword [edx + 0x10], ecx
mov cx, word [edi + 2]
lea edi, [edi + 2]
test cx, cx
jne 0x499691
lea ecx, [ebp - 0x414]
mov dword [edi], eax
add ecx, 0xfffffffe
jmp 0x4996b0
mov ax, word [ecx + 2]
lea ecx, [ecx + 2]
test ax, ax
jne 0x4996b0
mov eax, dword [0x646694]
mov dword [ecx], ebx
mov dword [ecx + 4], eax
mov eax, dword [0x646698]
mov dword [ecx + 8], eax
mov eax, dword [0x64669c]
mov dword [ecx + 0xc], eax
mov eax, dword [0x6466a0]
mov dword [ecx + 0x10], eax
lea ecx, [ebp - 0x414]
add ecx, 0xfffffffe
jmp 0x4996f0
mov ax, word [ecx + 2]
lea ecx, [ecx + 2]
test ax, ax
jne 0x4996f0
mov eax, dword [str..ini]
mov ebx, dword [sym.imp.KERNEL32.dll_GetPrivateProfileStringW]
mov dword [ecx], eax
mov eax, dword [0x646b8c]
mov dword [ecx + 4], eax
mov ax, word [0x646b90]
mov word [ecx + 8], ax
lea eax, [ebp - 0x414]
push eax
push 0x104
lea eax, [ebp - 0x20c]
push eax
push 0x642138
push str.CfgUserPath
push str.Globals
call ebx
lea ecx, [ebp - 0x20c]
lea edx, [ecx + 2]
jmp 0x499750
mov ax, word [ecx]
add ecx, 2
test ax, ax
jne 0x499750
mov edi, dword [sym.imp.SHLWAPI.dll_PathFileExistsW]
sub ecx, edx
sar ecx, 1
test ecx, ecx
jle 0x4997c4
lea eax, [ebp - 0x20c]
push eax
call edi
test eax, eax
je 0x4997c4
cmp word [ebp - 0x20c], 0
jne 0x499784
xor ecx, ecx
jmp 0x49979f
lea ecx, [ebp - 0x20c]
lea edx, [ecx + 2]
lea ecx, [ecx]
mov ax, word [ecx]
add ecx, 2
test ax, ax
jne 0x499790
sub ecx, edx
sar ecx, 1
push ecx
lea eax, [ebp - 0x20c]
push eax
lea ecx, [esi + 0x1c]
call fcn.00470470
pop edi
mov byte [esi + 0x19], 1
pop esi
pop ebx
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.0052dfa4
mov esp, ebp
pop ebp
ret
push 0x104
lea eax, [ebp - 0x824]
push eax
push 0
call dword [sym.imp.KERNEL32.dll_GetModuleFileNameW]
lea eax, [ebp - 0x824]
push 0x5c
push eax
call fcn.00530c3d
xor ecx, ecx
push 0x206
mov word [eax + 2], cx
xor eax, eax
push eax
mov word [ebp - 0x61c], ax
lea eax, [ebp - 0x61a]
push eax
call fcn.0052f1e0
push str.WnPicInfo.ini
lea eax, [ebp - 0x824]
push eax
lea eax, [ebp - 0x61c]
push 0x646264
push eax
call fcn.00530563
add esp, 0x24
lea eax, [ebp - 0x61c]
push eax
push 0x104
lea eax, [ebp - 0x20c]
push eax
push 0x642138
push str.CfgUserPath
push str.AppInfo
call ebx
lea ecx, [ebp - 0x20c]
lea edx, [ecx + 2]
mov ax, word [ecx]
add ecx, 2
test ax, ax
jne 0x499854
sub ecx, edx
sar ecx, 1
test ecx, ecx
jle 0x4998a0
lea eax, [ebp - 0x20c]
push eax
call edi
test eax, eax
je 0x4998a0
cmp word [ebp - 0x20c], 0
je 0x499780
lea ecx, [ebp - 0x20c]
lea edx, [ecx + 2]
jmp 0x499890
mov ax, word [ecx]
add ecx, 2
test ax, ax
jne 0x499890
jmp 0x49979b
mov ecx, dword [ebp - 4]
pop edi
mov byte [esi + 0x19], 0
xor ecx, ebp
pop esi
pop ebx
call fcn.0052dfa4
mov esp, ebp
pop ebp
ret