Function at 0x49c040
Capabilities:
Read .ini file

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x4d1e6c
mov eax, dword fs:[0]
push eax
sub esp, 0x5b4
mov eax, dword [0x518f10]
xor eax, ebp
mov dword [ebp - 0x10], eax
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov eax, dword [ebp + 8]
xor esi, esi
test eax, eax
je 0x49c28d
push 0x1ea
push eax
lea eax, [ebp - 0x5b0]
push eax
call fcn.004b5e4d
xor ecx, ecx
push 0xa
lea eax, [ebp - 0x1a0]
mov word [ebp - 0x1dc], cx
mov ecx, dword [ebp + 0xc]
push eax
xor edx, edx
push ecx
mov word [ebp - 0x1a0], dx
call fcn.004b7c5d
add esp, 0x18
mov edx, eax
mov cx, word [eax]
add eax, 2
test cx, cx
jne 0x49c0b5
lea edi, [ebp - 0x5b0]
sub eax, edx
add edi, 0xfffffffe
jmp 0x49c0d0
mov cx, word [edi + 2]
add edi, 2
test cx, cx
jne 0x49c0d0
mov ecx, eax
shr ecx, 2
mov esi, edx
rep movsd dword es:[edi], dword [esi]
mov ecx, eax
and ecx, 3
rep movsb byte es:[edi], byte [esi]
push ecx
mov esi, esp
mov dword [ebp - 0x5c0], esp
mov dword [ebp - 0x5bc], esi
call fcn.004a35be
xor ecx, ecx
test eax, eax
setne cl
test ecx, ecx
jne 0x49c115
push 0x80004005
call fcn.00422000
mov edx, dword [eax]
mov ecx, eax
mov eax, dword [edx + 0xc]
call eax
add eax, 0x10
mov dword [esi], eax
mov ecx, 0x4e1f68
mov dword [ebp - 4], 0
test ecx, 0xffff0000
jne 0x49c151
mov edx, ecx
movzx edi, dx
push edi
call fcn.004ab4f3
test eax, eax
je 0x49c16b
push edi
push eax
mov ecx, esi
call fcn.00424cac
jmp 0x49c16b
push 0x4e1f68
call fcn.004b1cba
add esp, 4
push eax
push 0x4e1f68
mov ecx, esi
call fcn.0042522f
push ecx
mov dword [ebp - 4], 1
mov esi, esp
mov dword [ebp - 0x5bc], esp
mov dword [ebp - 0x5b8], esi
call fcn.004a35be
xor ecx, ecx
test eax, eax
setne cl
test ecx, ecx
jne 0x49c19b
push 0x80004005
call fcn.00422000
mov edx, dword [eax]
mov ecx, eax
mov eax, dword [edx + 0xc]
call eax
add eax, 0x10
mov dword [esi], eax
mov ecx, str.MsgBox.ini
mov byte [ebp - 4], 2
test ecx, 0xffff0000
jne 0x49c1d4
mov edx, ecx
movzx edi, dx
push edi
call fcn.004ab4f3
test eax, eax
je 0x49c1ee
push edi
push eax
mov ecx, esi
call fcn.00424cac
jmp 0x49c1ee
push str.MsgBox.ini
call fcn.004b1cba
add esp, 4
push eax
push str.MsgBox.ini
mov ecx, esi
call fcn.0042522f
mov byte [ebp - 4], 3
mov eax, dword [0x51f160]
push ecx
add eax, 0xfffffff0
mov dword [ebp - 0x5b8], esp
mov esi, esp
push eax
call fcn.004252a0
add eax, 0x10
mov dword [esi], eax
add esp, 4
lea edi, [ebp - 0x5b4]
mov dword [ebp - 4], 0xffffffff
call fcn.00466390
mov ecx, dword [ebp - 0x5b4]
add esp, 0xc
push ecx
push 0x63
xor eax, eax
lea edx, [ebp - 0xd8]
push edx
mov word [ebp - 0xd8], ax
push 0x4e3948
lea eax, [ebp - 0x5b0]
push eax
push str.DoNotAsk
call dword [sym.imp.KERNEL32.dll_GetPrivateProfileStringW]
push 0x10
lea ecx, [ebp - 0xd8]
push 0
push ecx
call fcn.004b5c39
mov esi, eax
mov eax, dword [ebp - 0x5b4]
add eax, 0xfffffff0
add esp, 0xc
lea edx, [eax + 0xc]
or ecx, 0xffffffff
lock xadd dword [edx], ecx
dec ecx
test ecx, ecx
jg 0x49c28d
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
mov eax, esi
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
mov ecx, dword [ebp - 0x10]
xor ecx, ebp
call fcn.004b134c
mov esp, ebp
pop ebp
ret