Function at 0x416ed0
Capabilities:
Read .ini file

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x68
mov eax, dword [0x48b034]
xor eax, ebp
mov dword [ebp - 4], eax
push esi
push edi
push 0x64
lea eax, [ebp - 0x68]
push 0
push eax
call sub.VCRUNTIME140.dll_memset
mov edi, dword [sym.imp.KERNEL32.dll_GetPrivateProfileStringA]
add esp, 0xc
push 0x47ffbc
push 8
push 0x565e48
push 0x47b8e7
push str.ClientVersion
push 0x47ff54
call edi
push 0x47ffbc
push 0x11
push 0x565e50
push 0x47b91b
push str.ClientSerial
push 0x47ff54
call edi
mov esi, dword [sym.imp.KERNEL32.dll_GetPrivateProfileIntA]
push 0x47ffbc
push 0
push str.DetectionLockTime
push 0x47ff54
call esi
push 0x47ffbc
push 0
push str.ProtocolLogs
push 0x47ff54
mov dword [0x565e6c], eax
call esi
push 0x47ffbc
push 0
push str.ReconnectSwitch
push 0x47ff54
mov dword [0x565e70], eax
mov dword [0x565f4c], 0
call esi
push 0x47ffbc
push 0
push str.EnableMemoryGuard
push 0x47ff54
mov dword [0x565f50], eax
call esi
push 0x47ffbc
push 0
push str.MemoryGuardType
push 0x47ff54
mov dword [0x565f54], eax
call esi
push 0x47ffbc
push 0
push str.EnableMacroProtect
push 0x47ff54
mov dword [0x565f58], eax
call esi
push 0x47ffbc
push 0
push str.SensivityLevel
push 0x47ff54
mov dword [0x565f5c], eax
call esi
push 0x47ffbc
push 0x64
mov dword [0x565f60], eax
lea eax, [ebp - 0x68]
push eax
push 0x47b97f
push str.Memory1IpAddress
push 0x47ff54
call edi
mov esi, dword [sym.imp.api_ms_win_crt_convert_l1_1_0.dll_strtoul]
lea eax, [ebp - 0x68]
push 0
push 0
push eax
call esi
add esp, 0xc
mov ecx, eax
xor ecx, 0xc47a0e9f
cmp eax, 0x10000000
cmova eax, ecx
push 0x47ffbc
push 0x64
mov dword [0x565f68], eax
lea eax, [ebp - 0x68]
push eax
push 0x47b9bd
push str.Memory2ClientVersion
push 0x47ff54
call edi
push 0
lea eax, [ebp - 0x68]
push 0
push eax
call esi
add esp, 0xc
mov ecx, eax
xor ecx, 0xc47a0e9f
cmp eax, 0x10000000
cmova eax, ecx
push 0x47ffbc
push 0x64
mov dword [0x565f6c], eax
lea eax, [ebp - 0x68]
push eax
push 0x47b9be
push str.Memory3SerialNumber
push 0x47ff54
call edi
push 0
lea eax, [ebp - 0x68]
push 0
push eax
call esi
add esp, 0xc
mov ecx, eax
xor ecx, 0xc47a0e9f
cmp eax, 0x10000000
cmova eax, ecx
push 0x47ffbc
push 0x64
mov dword [0x565f70], eax
lea eax, [ebp - 0x68]
push eax
push 0x47b9bf
push str.Memory4UserAccount
push 0x47ff54
call edi
push 0
lea eax, [ebp - 0x68]
push 0
push eax
call esi
add esp, 0xc
mov ecx, eax
xor ecx, 0xc47a0e9f
cmp eax, 0x10000000
cmova eax, ecx
push 0x47ffbc
push 0x64
mov dword [0x565f74], eax
lea eax, [ebp - 0x68]
push eax
push 0x47ba4b
push str.Memory5UserStruct
push 0x47ff54
call edi
push 0
lea eax, [ebp - 0x68]
push 0
push eax
call esi
mov ecx, eax
add esp, 0xc
xor ecx, 0xc47a0e9f
cmp eax, 0x10000000
cmova eax, ecx
push 0x47ffbc
push 0x64
mov dword [0x565f78], eax
lea eax, [ebp - 0x68]
push eax
push 0x47ba8a
push str.Memory6WindowHwnd
push 0x47ff54
call edi
push 0
lea eax, [ebp - 0x68]
push 0
push eax
call esi
add esp, 0xc
mov ecx, eax
xor ecx, 0xc47a0e9f
cmp eax, 0x10000000
cmova eax, ecx
push 0x47ffbc
push 0x64
mov dword [0x565f7c], eax
lea eax, [ebp - 0x68]
push eax
push 0x47ba8b
push str.Memory7FileProtectAddress1
push 0x47ff54
call edi
push 0
lea eax, [ebp - 0x68]
push 0
push eax
call esi
add esp, 0xc
mov ecx, eax
xor ecx, 0xc47a0e9f
cmp eax, 0x10000000
cmova eax, ecx
push 0x47ffbc
push 0x64
mov dword [0x565f80], eax
lea eax, [ebp - 0x68]
push eax
push 0x47bad1
push str.Memory8FileProtectAddress2
push 0x47ff54
call edi
push 0
lea eax, [ebp - 0x68]
push 0
push eax
call esi
add esp, 0xc
mov ecx, eax
xor ecx, 0xc47a0e9f
cmp eax, 0x10000000
cmova eax, ecx
mov ecx, dword [ebp - 4]
pop edi
xor ecx, ebp
mov dword [0x565f84], eax
pop esi
call fcn.0046bb5b
mov esp, ebp
pop ebp
ret 8