Function at 0x48eda0
Capabilities:
Read .ini file
Resolve function by parsing pe exports

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x5f41c2
mov eax, dword fs:[0]
push eax
sub esp, 0x10
push ebx
push esi
push edi
mov eax, dword [0x6b000c]
xor eax, ebp
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov esi, ecx
mov dword [ebp - 0x10], 0
mov dword [ebp - 4], 0
lea ecx, [ebp - 0x18]
mov edx, dword [0x6b9640]
push str.Config.ini
call fcn.0048e450
mov edi, dword [esi + 0x44]
lea ecx, [esi + 0x44]
sub edi, 0x10
mov dword [ebp - 0x10], 1
add esp, 4
or ebx, 0xffffffff
mov edx, dword [eax]
lea eax, [edx - 0x10]
mov dword [ebp - 0x14], eax
cmp eax, edi
je 0x48ee4e
cmp dword [edi + 0xc], 0
jl 0x48ee45
mov eax, dword [eax]
cmp eax, dword [edi]
jne 0x48ee45
mov ecx, dword [ebp - 0x14]
call fcn.0040c950
mov dword [ebp - 0x14], eax
mov ecx, ebx
lea eax, [edi + 0xc]
lock xadd dword [eax], ecx
dec ecx
test ecx, ecx
jg 0x48ee3a
mov ecx, dword [edi]
push edi
mov edx, dword [ecx]
call dword [edx + 4]
mov eax, dword [ebp - 0x14]
add eax, 0x10
mov dword [esi + 0x44], eax
jmp 0x48ee4e
push dword [edx - 0xc]
push edx
call fcn.0040c9d0
mov eax, 1
mov dword [ebp - 0x10], eax
and eax, 0xfffffffe
mov dword [ebp - 0x10], eax
mov dword [ebp - 4], 0xffffffff
mov eax, ebx
mov edx, dword [ebp - 0x18]
add edx, 0xfffffff0
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x48ee7d
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov dword [ebp - 4], 2
mov edx, 0x6b88a0
push str.Config.ini
lea ecx, [ebp - 0x14]
call fcn.0048e450
mov edi, dword [esi + 0x48]
add esp, 4
sub edi, 0x10
mov dword [ebp - 0x10], 2
mov edx, dword [eax]
lea ecx, [edx - 0x10]
cmp ecx, edi
je 0x48eef1
cmp dword [edi + 0xc], 0
jl 0x48eee5
mov eax, dword [ecx]
cmp eax, dword [edi]
jne 0x48eee5
call fcn.0040c950
mov dword [ebp - 0x18], eax
lea edx, [edi + 0xc]
or ecx, 0xffffffff
lock xadd dword [edx], ecx
dec ecx
test ecx, ecx
jg 0x48eedd
mov ecx, dword [edi]
push edi
mov edx, dword [ecx]
call dword [edx + 4]
mov eax, dword [ebp - 0x18]
add eax, 0x10
mov dword [esi + 0x48], eax
jmp 0x48eef1
push dword [edx - 0xc]
lea ecx, [esi + 0x48]
push edx
call fcn.0040c9d0
mov eax, 2
mov dword [ebp - 0x10], eax
and eax, 0xfffffffd
mov dword [ebp - 0x10], eax
mov dword [ebp - 4], 0xffffffff
or eax, 0xffffffff
mov edx, dword [ebp - 0x14]
add edx, 0xfffffff0
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x48ef21
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
cmp dword [ebp + 8], 0
mov edi, dword [sym.imp.KERNEL32.dll_GetPrivateProfileIntW]
mov word [esi], 0x100
je 0x48f085
push dword [esi + 0x44]
push 0
push str.LCID
push str.Setting
call edi
test eax, eax
je 0x48f085
cmp eax, 0x801
ja 0x48eff4
je case.0x48ef75.1025
add eax, 0xfffffbff
cmp eax, 0x20
ja case.0x48ef75.1026
movzx eax, byte [eax + 0x48f3f0]
jmp dword [eax*4 + 0x48f3c4]
mov dword [0x6b0c60], 0x3b6
jmp 0x48f085
mov dword [0x6b0c60], 0x3a4
jmp 0x48f085
mov dword [0x6b0c60], 0x475
jmp 0x48f085
mov dword [0x6b0c60], 0x551
jmp 0x48f085
mov dword [0x6b0c60], 0x479
jmp 0x48f085
mov dword [0x6b0c60], 0x35f
jmp 0x48f085
mov dword [0x6b0c60], 0x362
jmp 0x48f085
mov dword [0x6b0c60], 0x421
jmp 0x48f085
cmp eax, 0x2401
ja 0x48f03c
je case.0x48ef75.1025
cmp eax, 0x1401
ja 0x48f027
je case.0x48ef75.1025
cmp eax, 0x804
je 0x48f01b
cmp eax, 0xc01
je case.0x48ef75.1025
cmp eax, 0x1001
jmp 0x48f06d
mov dword [0x6b0c60], 0x3a8
jmp 0x48f085
cmp eax, 0x1801
je case.0x48ef75.1025
cmp eax, 0x1c01
je case.0x48ef75.1025
cmp eax, 0x2001
jmp 0x48f06d
cmp eax, 0x3401
ja 0x48f05a
je case.0x48ef75.1025
cmp eax, 0x2801
je case.0x48ef75.1025
cmp eax, 0x2c01
je case.0x48ef75.1025
cmp eax, 0x3001
jmp 0x48f06d
cmp eax, 0x3801
je case.0x48ef75.1025
cmp eax, 0x3c01
je case.0x48ef75.1025
cmp eax, 0x4001
je case.0x48ef75.1025
mov dword [0x6b0c60], 0
jmp 0x48f085
mov dword [0x6b0c60], 0x360
push dword [esi + 0x48]
push 0
push str.ShowMode
push str.Setting
call edi
test eax, eax
je 0x48f0a1
mov dword [esi + 0x3c], 1
push dword [esi + 0x48]
push 0x200
push str.ClusterSize
push str.Setting
call edi
cmp eax, 0x4000
jae 0x48f0c6
test eax, 0x1ff
jne 0x48f0c6
mov dword [esi + 0x4c], eax
push dword [esi + 0x48]
push 1
push str.ViewMode
push str.Setting
call edi
push dword [esi + 0x48]
mov dword [esi + 0x40], eax
push 0
push str.EnablePreviewer
push str.Setting
call edi
push dword [esi + 0x48]
mov dword [esi + 0xc], eax
push 0
push str.EnableSkipBadSector
push str.Setting
call edi
push dword [esi + 0x48]
mov dword [esi + 0x54], eax
push 0x20
push str.SkipBadSectorNums
push str.Setting
call edi
push dword [esi + 0x48]
mov dword [esi + 0x50], eax
push 0
push str.EnableUSNJournal
push str.Setting
call edi
push dword [esi + 0x48]
mov dword [esi + 0x5c], eax
push 1
push str.RenameFile
push str.Setting
call edi
push dword [esi + 0x48]
mov dword [esi + 0x60], eax
push 0
push 0x64fe9c
push str.Setting
call edi
push dword [esi + 0x48]
mov dword [esi + 0x64], eax
push 1
push str.ShowSuperScanHint
push str.Setting
call edi
push dword [esi + 0x48]
mov dword [esi + 8], eax
push 0
push str.ShowHidenDisk
push str.Setting
call edi
push dword [esi + 0x44]
mov dword [esi + 4], eax
push 1
push str.SendAction
push str.Setting
call edi
push dword [esi + 0x48]
mov dword [esi + 0x10], eax
push 1
push str.AwareDPI
push str.Setting
call edi
push dword [esi + 0x48]
mov dword [esi + 0x14], eax
push 0
push str.ScanUnDeletedFile
push str.Setting
call edi
push dword [esi + 0x48]
mov dword [esi + 0x70], eax
push 0
push str.RecycleRename
push str.Setting
call edi
push dword [esi + 0x48]
mov dword [esi + 0x74], eax
push 1
push str.SigScan
push str.Setting
call edi
push dword [esi + 0x48]
mov dword [esi + 0x68], eax
push 1
push str.VssScan
push str.Setting
call edi
push dword [esi + 0x48]
mov dword [esi + 0x6c], eax
push 0
push str.ListAtlBkColor
push str.Setting
call edi
push dword [esi + 0x48]
mov dword [esi + 0x18], eax
push 0
push str.ShowThumbnalFileSize
push str.Setting
call edi
push dword [esi + 0x48]
mov dword [esi + 0x1c], eax
push 0
push str.EnableVideoThumbnail
push str.Setting
call edi
push dword [esi + 0x48]
mov dword [esi + 0x20], eax
push 0
push str.EnableUseNewAPI
push str.Setting
call edi
push dword [esi + 0x48]
mov dword [esi + 0x34], eax
push 1
push str.SkipFloppyDisk
push str.Setting
call edi
push dword [esi + 0x48]
mov dword [esi + 0x78], eax
push 0
push str.NoInterrupt
push str.Setting
call edi
push dword [esi + 0x48]
mov dword [esi + 0x80], eax
push 0
push str.RecoverToSameDis
push str.Setting
call edi
push dword [esi + 0x44]
mov dword [esi + 0x84], eax
push 0
push str.StandbyServer
push str.Setting
call edi
push dword [esi + 0x48]
mov dword [esi + 0xa0], eax
push 1
push str.EnableShadow
push str.Setting
call edi
push dword [esi + 0x48]
mov dword [esi + 0x24], eax
push 1
push str.SkipCDDisk
push str.Setting
call edi
push dword [esi + 0x48]
mov dword [esi + 0x7c], eax
push 1
push str.ShowFileIcon
push str.Setting
call edi
push dword [esi + 0x48]
mov dword [esi + 0x2c], eax
push 0
push str.EnableEffect
push str.Setting
call edi
mov dword [esi + 0x30], eax
push dword [esi + 0x48]
push 0
push str.EnableDebugMode
push str.Setting
call edi
push dword [esi + 0x48]
mov dword [esi + 0x38], eax
push 0
push str.ShowDlgBorder
push str.Setting
call edi
push dword [esi + 0x44]
mov dword [esi + 0x28], eax
push 0
push str.RepeatShare
push str.Setting
call edi
mov edi, dword [esi + 0x48]
mov ecx, 1
mov dword [esi + 0x9c], eax
mov eax, dword [esi + 0x58]
sub ecx, dword [eax - 4]
mov eax, dword [eax - 8]
sub eax, 0x10
or ecx, eax
jge 0x48f34c
push 0x10
lea ecx, [esi + 0x58]
call fcn.0040cf60
push edi
push 0x10
push dword [esi + 0x58]
push str.UNREADABLESECTOR
push str.BadSectorValue
push str.Setting
call dword [sym.imp.KERNEL32.dll_GetPrivateProfileStringW]
mov eax, dword [esi + 0x58]
test eax, eax
jne 0x48f372
xor ecx, ecx
jmp 0x48f384
push dword [eax - 8]
push eax
call fcn.00593596
mov ecx, eax
add esp, 8
test ecx, ecx
js 0x48f3b7
mov eax, dword [esi + 0x58]
cmp ecx, dword [eax - 8]
jg 0x48f3b7
mov dword [eax - 0xc], ecx
xor edx, edx
mov eax, dword [esi + 0x58]
mov word [eax + ecx*2], dx
push dword [0x6b0c60]
call fcn.0048fb70
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 4
add byte [eax + 0x57], ch
add byte [edi], al
sub al, 0x8f
mov esi, 0x1f0ffff7
add byte [ebx - 0x10], bh
push 0x80070057
call fcn.0040b250
nop dword [eax]
jnp 0x48f3b6
dec eax
add byte [edi + ebp*8 + 0x48], bh
add byte [edx + 0x6f0048ef], bl
invalid