Function at 0x4b0700
Capabilities:
Read .ini file

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x55bc81
mov eax, dword fs:[0]
push eax
sub esp, 0x260
mov eax, dword [0x5c30d8]
xor eax, ebp
mov dword [ebp - 0x10], eax
push ebx
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov eax, dword [ebp + 8]
or edi, 0xffffffff
mov dword [ebp - 0x268], eax
or esi, edi
mov eax, dword [ebp + 0xc]
push 0x208
mov dword [ebp - 0x26c], eax
lea eax, [ebp - 0x218]
push 0
push eax
call fcn.00507800
mov eax, dword [0x5cf900]
add esp, 0xc
test eax, eax
jne 0x4b0799
push 0x238
call fcn.004bc94c
add esp, 4
mov dword [ebp - 0x264], eax
mov dword [ebp - 4], 0
test eax, eax
je 0x4b078b
mov ecx, eax
call fcn.004a0ce0
jmp 0x4b078d
xor eax, eax
mov dword [ebp - 4], 0xffffffff
mov dword [0x5cf900], eax
mov ecx, eax
call fcn.004a3150
mov edx, eax
mov dword [ebp - 0x234], 7
xor eax, eax
mov dword [ebp - 0x238], 0
mov word [ebp - 0x248], ax
cmp word [edx], ax
jne 0x4b07c8
xor ecx, ecx
jmp 0x4b07df
mov ecx, edx
lea ebx, [ecx + 2]
nop dword [eax]
mov ax, word [ecx]
add ecx, 2
test ax, ax
jne 0x4b07d0
sub ecx, ebx
sar ecx, 1
push ecx
push edx
lea ecx, [ebp - 0x248]
call fcn.00499940
push 0x12
push str.PuddingDesktop.ini
lea ecx, [ebp - 0x248]
mov dword [ebp - 4], 1
call fcn.004a5a50
cmp dword [ebp - 0x234], 8
lea eax, [ebp - 0x248]
cmovae eax, dword [ebp - 0x248]
push eax
push 0x104
lea eax, [ebp - 0x218]
push eax
push 0x560e84
push str.Spreader
push str.AppInfo
call dword [sym.imp.KERNEL32.dll_GetPrivateProfileStringW]
xor eax, eax
mov dword [ebp - 0x21c], 7
mov dword [ebp - 0x220], 0
mov word [ebp - 0x230], ax
cmp word [ebp - 0x218], ax
jne 0x4b0865
xor ecx, ecx
jmp 0x4b087f
lea ecx, [ebp - 0x218]
lea edx, [ecx + 2]
nop
mov ax, word [ecx]
add ecx, 2
test ax, ax
jne 0x4b0870
sub ecx, edx
sar ecx, 1
push ecx
lea eax, [ebp - 0x218]
push eax
lea ecx, [ebp - 0x230]
call fcn.00499940
mov eax, dword [ebp - 0x220]
mov byte [ebp - 4], 2
cmp eax, 6
jbe 0x4b0932
add eax, 0xfffffffa
lea ecx, [ebp - 0x230]
push eax
push 0
lea eax, [ebp - 0x260]
push eax
call fcn.004a5f90
mov ebx, eax
lea eax, [ebp - 0x230]
cmp eax, ebx
je 0x4b0910
mov eax, dword [ebp - 0x21c]
cmp eax, 8
jb 0x4b08e7
inc eax
lea ecx, [ebp - 0x230]
push eax
push dword [ebp - 0x230]
call fcn.00499ac0
xor eax, eax
mov dword [ebp - 0x21c], 7
push ebx
lea ecx, [ebp - 0x230]
mov dword [ebp - 0x220], 0
mov word [ebp - 0x230], ax
call fcn.004a50e0
mov eax, dword [ebp - 0x24c]
mov byte [ebp - 4], 2
cmp eax, 8
jb 0x4b0932
inc eax
lea ecx, [ebp - 0x260]
push eax
push dword [ebp - 0x260]
call fcn.00499ac0
cmp dword [ebp - 0x21c], 8
lea eax, [ebp - 0x230]
cmovae eax, dword [ebp - 0x230]
push eax
lea eax, [ebp - 0x218]
push 0x562c64
push eax
call fcn.004a5fd0
mov ebx, dword [ebp - 0x268]
add esp, 0xc
mov ecx, ebx
lea edx, [ecx + 2]
mov ax, word [ecx]
add ecx, 2
test ax, ax
jne 0x4b0966
sub ecx, edx
sar ecx, 1
je 0x4b0994
lea eax, [ebp - 0x218]
push eax
push 0x563074
push ebx
call fcn.00502320
add esp, 0xc
mov edi, eax
neg edi
sbb edi, edi
neg edi
mov ebx, dword [ebp - 0x26c]
mov ecx, ebx
lea edx, [ecx + 2]
nop
mov ax, word [ecx]
add ecx, 2
test ax, ax
jne 0x4b09a0
sub ecx, edx
sar ecx, 1
je 0x4b09ce
lea eax, [ebp - 0x218]
push eax
push 0x563074
push ebx
call fcn.00502320
add esp, 0xc
mov esi, eax
neg esi
sbb esi, esi
neg esi
cmp edi, 0xffffffff
je 0x4b09e1
cmp esi, 0xffffffff
jne 0x4b09f8
cmp edi, 1
jne 0x4b09f8
mov esi, edi
jmp 0x4b09fa
cmp esi, 0xffffffff
jne 0x4b09ed
mov esi, 1
jmp 0x4b09fa
test esi, esi
jne 0x4b09f8
mov esi, 1
jmp 0x4b09fa
xor esi, esi
mov eax, dword [ebp - 0x21c]
cmp eax, 8
jb 0x4b0a18
inc eax
lea ecx, [ebp - 0x230]
push eax
push dword [ebp - 0x230]
call fcn.00499ac0
mov ecx, dword [ebp - 0x234]
xor eax, eax
mov dword [ebp - 0x21c], 7
mov dword [ebp - 0x220], 0
mov word [ebp - 0x230], ax
cmp ecx, 8
jb 0x4b0a53
inc ecx
push ecx
push dword [ebp - 0x248]
lea ecx, [ebp - 0x248]
call fcn.00499ac0
mov eax, esi
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 0x10]
xor ecx, ebp
call fcn.004bcc20
mov esp, ebp
pop ebp
ret 8