Function at 0x4a65c0
Capabilities:
Read .ini file

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x4dbedc
mov eax, dword fs:[0]
push eax
sub esp, 0x5b4
mov eax, dword [0x527f10]
xor eax, ebp
mov dword [ebp - 0x10], eax
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov eax, dword [ebp + 8]
xor esi, esi
test eax, eax
je 0x4a680d
push 0x1ea
push eax
lea eax, [ebp - 0x5b0]
push eax
call fcn.004bfbb6
xor ecx, ecx
push 0xa
lea eax, [ebp - 0x1a0]
mov word [ebp - 0x1dc], cx
mov ecx, dword [ebp + 0xc]
push eax
xor edx, edx
push ecx
mov word [ebp - 0x1a0], dx
call fcn.004c1a8d
add esp, 0x18
mov edx, eax
mov cx, word [eax]
add eax, 2
test cx, cx
jne 0x4a6635
lea edi, [ebp - 0x5b0]
sub eax, edx
add edi, 0xfffffffe
jmp 0x4a6650
mov cx, word [edi + 2]
add edi, 2
test cx, cx
jne 0x4a6650
mov ecx, eax
shr ecx, 2
mov esi, edx
rep movsd dword es:[edi], dword [esi]
mov ecx, eax
and ecx, 3
rep movsb byte es:[edi], byte [esi]
push ecx
mov esi, esp
mov dword [ebp - 0x5c0], esp
mov dword [ebp - 0x5bc], esi
call fcn.004ad3ae
xor ecx, ecx
test eax, eax
setne cl
test ecx, ecx
jne 0x4a6695
push 0x80004005
call fcn.00422000
mov edx, dword [eax]
mov ecx, eax
mov eax, dword [edx + 0xc]
call eax
add eax, 0x10
mov dword [esi], eax
mov ecx, 0x4ecfa0
mov dword [ebp - 4], 0
test ecx, 0xffff0000
jne 0x4a66d1
mov edx, ecx
movzx edi, dx
push edi
call fcn.004b5332
test eax, eax
je 0x4a66eb
push edi
push eax
mov ecx, esi
call fcn.00424e5c
jmp 0x4a66eb
push 0x4ecfa0
call fcn.004bbaea
add esp, 4
push eax
push 0x4ecfa0
mov ecx, esi
call fcn.004253df
push ecx
mov dword [ebp - 4], 1
mov esi, esp
mov dword [ebp - 0x5bc], esp
mov dword [ebp - 0x5b8], esi
call fcn.004ad3ae
xor ecx, ecx
test eax, eax
setne cl
test ecx, ecx
jne 0x4a671b
push 0x80004005
call fcn.00422000
mov edx, dword [eax]
mov ecx, eax
mov eax, dword [edx + 0xc]
call eax
add eax, 0x10
mov dword [esi], eax
mov ecx, str.MsgBox.ini
mov byte [ebp - 4], 2
test ecx, 0xffff0000
jne 0x4a6754
mov edx, ecx
movzx edi, dx
push edi
call fcn.004b5332
test eax, eax
je 0x4a676e
push edi
push eax
mov ecx, esi
call fcn.00424e5c
jmp 0x4a676e
push str.MsgBox.ini
call fcn.004bbaea
add esp, 4
push eax
push str.MsgBox.ini
mov ecx, esi
call fcn.004253df
mov byte [ebp - 4], 3
mov eax, dword [0x52e208]
push ecx
add eax, 0xfffffff0
mov dword [ebp - 0x5b8], esp
mov esi, esp
push eax
call fcn.00425450
add eax, 0x10
mov dword [esi], eax
add esp, 4
lea edi, [ebp - 0x5b4]
mov dword [ebp - 4], 0xffffffff
call fcn.0046d020
mov ecx, dword [ebp - 0x5b4]
add esp, 0xc
push ecx
push 0x63
xor eax, eax
lea edx, [ebp - 0xd8]
push edx
mov word [ebp - 0xd8], ax
push 0x4eea54
lea eax, [ebp - 0x5b0]
push eax
push str.DoNotAsk
call dword [sym.imp.KERNEL32.dll_GetPrivateProfileStringW]
push 0x10
lea ecx, [ebp - 0xd8]
push 0
push ecx
call fcn.004bfb8a
mov esi, eax
mov eax, dword [ebp - 0x5b4]
add eax, 0xfffffff0
add esp, 0xc
lea edx, [eax + 0xc]
or ecx, 0xffffffff
lock xadd dword [edx], ecx
dec ecx
test ecx, ecx
jg 0x4a680d
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
mov eax, esi
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
mov ecx, dword [ebp - 0x10]
xor ecx, ebp
call fcn.004bb182
mov esp, ebp
pop ebp
ret