Function at 0x4b06ae
Capabilities:
Check if file exists
Read .ini file

Disassembly:
push 0xfc
mov eax, 0x52d34e
call fcn.004fc737
and dword [ebp - 0xdc], 0
mov ebx, 0x5959bc
push ebx
call fcn.004afdd5
push str.languages
lea eax, [ebp - 0xec]
push eax
push ebx
call fcn.004b0254
and dword [ebp - 4], 0
push str.channel
lea eax, [ebp - 0xdc]
push eax
push ebx
call fcn.004b0254
mov edi, 0x595a04
mov byte [ebp - 4], 1
call fcn.00404477
mov byte [ebp - 4], 0
mov eax, dword [ebp - 0xdc]
add eax, 0xfffffff0
call fcn.00405521
mov esi, 0x53a3d8
push esi
push 0x5959f8
call fcn.004056c8
mov eax, dword [0x590e04]
mov ecx, 0x590e04
call dword [eax + 0xc]
add eax, 0x10
mov dword [ebp - 0xe8], eax
push ecx
mov byte [ebp - 4], 2
mov eax, esp
mov dword [ebp - 0xdc], esp
push esi
push eax
call fcn.004056ee
push ecx
mov byte [ebp - 4], 3
mov eax, esp
mov dword [ebp - 0xe4], esp
push str.SOFTWAREMicrosoftWindowsCurrentVersionApp_PathsQHSafeMain.exe
push eax
call fcn.004056ee
mov edi, reloc.OLEAUT32.dll_SysReAllocString
push edi
lea eax, [ebp - 0xfc]
push eax
xor ecx, ecx
mov byte [ebp - 4], 2
call fcn.0040499a
mov byte [ebp - 4], 4
push eax
lea esi, [ebp - 0xe8]
mov dword [ebp - 0xdc], 1
call fcn.00404869
pop ecx
test eax, eax
je 0x4b07b7
push dword [ebp - 0xe8]
call dword [sym.imp.SHLWAPI.dll_PathFileExistsW]
mov byte [ebp - 0xdd], 1
test eax, eax
jne 0x4b07be
mov byte [ebp - 0xdd], 0
lea esi, [ebp - 0xfc]
mov dword [ebp - 4], 2
call fcn.00401105
cmp byte [ebp - 0xdd], 0
je 0x4b07e3
mov dword [0x595a08], 1
cmp dword [0x595a08], 0
jne 0x4b09ac
lea eax, [ebp - 0x104]
push eax
call fcn.0046b0ed
mov byte [ebp - 4], 5
push dword [ebp - 0xec]
mov edx, 0x5481c8
lea ecx, [ebp - 0x104]
call fcn.004b0540
mov eax, dword [ebp - 0xf4]
sub eax, dword [ebp - 0xf8]
pop ecx
push 0x1c
cdq
pop ecx
idiv ecx
xor edi, edi
mov dword [ebp - 0xe4], eax
test eax, eax
jle 0x4b08e1
push edi
lea esi, [ebp - 0x104]
call fcn.00431a62
cmp dword [eax + 0x18], 8
jb 0x4b0850
mov eax, dword [eax + 4]
jmp 0x4b0853
add eax, 4
push eax
lea eax, [ebp - 0xdc]
push eax
call fcn.004056ee
lea eax, [ebp - 0xdc]
push eax
mov eax, 0x5959a0
mov byte [ebp - 4], 6
call fcn.00429e6d
mov byte [ebp - 4], 5
mov eax, dword [ebp - 0xdc]
add eax, 0xfffffff0
call fcn.00405521
push edi
lea esi, [ebp - 0x104]
call fcn.00431a62
cmp dword [eax + 0x18], 8
jb 0x4b089e
mov eax, dword [eax + 4]
jmp 0x4b08a1
add eax, 4
push eax
push ebx
call fcn.004b03d6
cmp eax, 0x404
jne 0x4b08d4
push edi
lea esi, [ebp - 0x104]
call fcn.00431a62
cmp dword [eax + 0x18], 8
jb 0x4b08c6
mov eax, dword [eax + 4]
jmp 0x4b08c9
add eax, 4
push eax
push 0x5959f8
call fcn.004056c8
inc edi
cmp edi, dword [ebp - 0xe4]
jl 0x4b0839
mov eax, dword [0x5959f8]
xor edi, edi
cmp dword [eax - 0xc], edi
jne 0x4b0953
cmp dword [ebp - 0xe4], edi
jle 0x4b0953
push edi
lea esi, [ebp - 0x104]
call fcn.00431a62
cmp dword [eax + 0x18], 8
jb 0x4b090c
mov eax, dword [eax + 4]
jmp 0x4b090f
add eax, 4
push eax
push ebx
call fcn.004b03d6
push 4
and eax, 0x3ff
pop ecx
cmp cx, ax
je 0x4b092e
inc edi
cmp edi, dword [ebp - 0xe4]
jl 0x4b08f5
jmp 0x4b0953
push edi
lea esi, [ebp - 0x104]
call fcn.00431a62
cmp dword [eax + 0x18], 8
jb 0x4b0945
mov eax, dword [eax + 4]
jmp 0x4b0948
add eax, 4
push eax
push 0x5959f8
call fcn.004056c8
mov eax, dword [0x5959f8]
cmp dword [eax - 0xc], 0
jne 0x4b098c
push str.appname
lea eax, [ebp - 0xdc]
push eax
push ebx
call fcn.004b0254
mov edi, 0x5959f8
mov byte [ebp - 4], 7
call fcn.00404477
mov eax, dword [ebp - 0xdc]
add eax, 0xfffffff0
call fcn.00405521
lea esi, [ebp - 0x104]
mov byte [ebp - 4], 2
call fcn.0044419e
push dword [ebp - 0x104]
call fcn.004f1890
pop ecx
jmp 0x4b0a8a
and dword [ebp - 0xdc], 0
push ecx
mov eax, esp
mov dword [ebp - 0xe4], esp
push str.Path
push eax
mov esi, 0x595a00
call fcn.004056ee
push ecx
mov eax, esp
mov dword [ebp - 0x108], esp
push str.SOFTWAREMicrosoftWindowsCurrentVersionApp_PathsQHSafeMain.exe
push eax
mov byte [ebp - 4], 8
call fcn.004056ee
mov ecx, dword [ebp - 0xdc]
push edi
lea eax, [ebp - 0xfc]
push eax
mov byte [ebp - 4], 2
call fcn.0040499a
push eax
mov byte [ebp - 4], 9
call fcn.00404869
pop ecx
lea esi, [ebp - 0xfc]
mov byte [ebp - 4], 2
call fcn.00401105
xor eax, eax
push 0xc6
push eax
mov word [ebp - 0xd8], ax
lea eax, [ebp - 0xd6]
push eax
call fcn.004f18b0
add esp, 0xc
lea eax, [ebp - 0xe4]
push 0x547b94
push eax
mov edi, 0x595a00
call fcn.00405a46
pop ecx
pop ecx
push dword [eax]
lea eax, [ebp - 0xd8]
push 0x64
push eax
push 0x5481bc
push str.language
push 0x547bc0
call dword [sym.imp.KERNEL32.dll_GetPrivateProfileStringW]
mov eax, dword [ebp - 0xe4]
add eax, 0xfffffff0
call fcn.00405521
lea eax, [ebp - 0xd8]
push eax
push 0x5959f8
call fcn.004056c8
mov eax, 0x5959f8
mov edi, 0x5959fc
call fcn.00404477
push dword [0x5959fc]
push ebx
call fcn.004b01af
test al, al
mov eax, dword [ebp - 0xe8]
je 0x4b0ab9
mov dword [0x5959b8], 1
add eax, 0xfffffff0
call fcn.00405521
mov eax, dword [ebp - 0xec]
add eax, 0xfffffff0
call fcn.00405521
mov eax, dword [0x5959b8]
call fcn.004fc7ba
ret