Function at 0x4242f3
Capabilities:
Read .ini file

Disassembly:
mov eax, 0x463b60
call fcn.00451b80
sub esp, 0x340
push ebx
push esi
push edi
mov edi, dword [ebp + 8]
lea eax, [ebp - 0x34c]
push edi
mov ebx, ecx
push eax
call fcn.00452490
lea eax, [ebp - 0x34c]
push str.REALNBP.com
push eax
call fcn.004524a0
lea eax, [ebp + 8]
push eax
lea eax, [ebp - 0x34c]
push eax
call fcn.00423b8a
mov ecx, eax
mov eax, dword [ebp + 8]
add eax, 0x1ff
mov esi, 0x200
cdq
idiv esi
add esp, 0x18
test ecx, ecx
mov dword [ebp + 8], eax
je 0x4243ec
mov esi, dword [ebp + 0xc]
mov eax, dword [ebx + 0x50]
imul esi, esi, 0x874
push edi
mov dword [esi + eax + 8], ecx
mov eax, dword [ebp + 8]
mov ecx, dword [ebx + 0x50]
shl eax, 9
mov dword [esi + ecx + 0xc], eax
lea eax, [ebp - 0x34c]
push eax
call fcn.00452490
lea eax, [ebp - 0x34c]
push str.ClientBackBmp.bmp
push eax
call fcn.004524a0
mov eax, dword [ebx + 0x50]
add eax, esi
lea ecx, [eax + 0x18]
add eax, 0x1c
push ecx
push eax
lea eax, [ebp - 0x34c]
push eax
call fcn.00423c36
add esp, 0x1c
test eax, eax
je 0x4243ec
lea eax, [ebp - 0x34c]
push edi
push eax
call fcn.00452490
lea eax, [ebp - 0x34c]
push str.DiskMod.bin
push eax
call fcn.004524a0
lea eax, [ebp + 8]
push eax
lea eax, [ebp - 0x34c]
push eax
call fcn.00423b8a
add esp, 0x18
mov dword [ebp - 0x18], eax
test eax, eax
jne 0x4243f6
mov eax, 0xc0000001
jmp 0x42467a
mov eax, dword [ebp + 8]
mov ecx, 0x200
add eax, 0x1ff
push 0x40
cdq
idiv ecx
mov ecx, dword [ebp - 0x18]
mov dword [ebp + 8], eax
mov eax, dword [ebx + 0x50]
mov dword [esi + eax + 0x10], ecx
mov eax, dword [ebp + 8]
cdq
pop ecx
idiv ecx
mov ecx, dword [ebx + 0x50]
push dword [ebp + 0xc]
push edi
mov dword [esi + ecx + 0x14], eax
mov ecx, ebx
call fcn.004240be
test eax, eax
jl 0x42467a
lea eax, [ebp - 0x34c]
push edi
push eax
call fcn.00452490
lea eax, [ebp - 0x34c]
push str.wfbsver.ini
push eax
call fcn.004524a0
and byte [ebp - 0x14c], 0
add esp, 0x10
xor eax, eax
lea edi, [ebp - 0x14b]
push 0x3f
pop ecx
rep stosd dword es:[edi], eax
stosw word es:[edi], ax
stosb byte es:[edi], al
lea eax, [ebp - 0x34c]
xor edi, edi
push eax
lea eax, [ebp - 0x14c]
push 0x100
push eax
push edi
push 0x475690
push str.WFBS
call dword [sym.imp.KERNEL32.dll_GetPrivateProfileStringA]
lea eax, [ebp - 0x14c]
push eax
lea eax, [ebp - 0x3c]
push str.wfbsver.ini_Version:_s
push eax
call fcn.004480d4
mov dword [ebp - 0x1c], eax
lea eax, [ebp - 0x4c]
push 0x13d
push eax
mov dword [ebp - 4], edi
call fcn.00406476
add esp, 0x14
mov dword [ebp - 0x18], eax
mov al, byte [ebp + 0xf]
push edi
lea ecx, [ebp - 0x2c]
mov byte [ebp - 4], 1
mov byte [ebp - 0x2c], al
call fcn.004079c3
mov edi, 0x474cb8
mov byte [ebp - 4], 2
push edi
call fcn.004525b0
pop ecx
push eax
push edi
lea ecx, [ebp - 0x2c]
call fcn.0040796c
mov edi, str.c:WFBSSrcWFBSSvrSessionEndInstall.cpp
mov dword [ebp + 0xc], eax
push edi
call fcn.004525b0
pop ecx
mov ecx, dword [ebp + 0xc]
push eax
push edi
call fcn.0040796c
mov edi, str.:Line
mov dword [ebp + 0xc], eax
push edi
call fcn.004525b0
pop ecx
mov ecx, dword [ebp + 0xc]
push eax
push edi
call fcn.0040796c
push dword [0x466504]
mov ecx, eax
push 0
push dword [ebp - 0x18]
call fcn.004078e4
mov edi, 0x474c88
mov dword [ebp + 0xc], eax
push edi
call fcn.004525b0
pop ecx
mov ecx, dword [ebp + 0xc]
push eax
push edi
call fcn.0040796c
push dword [0x466504]
mov ecx, eax
push 0
push dword [ebp - 0x1c]
call fcn.004078e4
mov eax, dword [eax + 4]
test eax, eax
jne 0x42456b
mov eax, 0x466500
push eax
push 0
push str.wfbslog
call fcn.0041dcb3
add esp, 0xc
lea ecx, [ebp - 0x2c]
mov byte [ebp - 4], 1
push 1
call fcn.004079c3
and byte [ebp - 4], 0
push 1
lea ecx, [ebp - 0x4c]
call fcn.004079c3
or dword [ebp - 4], 0xffffffff
push 1
lea ecx, [ebp - 0x3c]
call fcn.004079c3
xor eax, eax
lea edi, [ebp - 0x13]
stosd dword es:[edi], eax
stosw word es:[edi], ax
stosb byte es:[edi], al
mov al, byte [ebp - 0x14b]
and byte [ebp - 0x13], 0
mov byte [ebp - 0x14], al
lea eax, [ebp - 0x14]
push eax
call fcn.00452a87
mov ecx, dword [ebx + 0x50]
mov byte [esi + ecx], al
mov al, byte [ebp - 0x149]
and byte [ebp - 0x13], 0
mov byte [ebp - 0x14], al
lea eax, [ebp - 0x14]
push eax
call fcn.00452a87
mov ecx, dword [ebx + 0x50]
mov byte [esi + ecx + 1], al
mov al, byte [ebp - 0x147]
and byte [ebp - 0x12], 0
mov byte [ebp - 0x14], al
mov al, byte [ebp - 0x146]
mov byte [ebp - 0x13], al
lea eax, [ebp - 0x14]
push eax
call fcn.00452a87
mov ecx, dword [ebx + 0x50]
mov word [esi + ecx + 4], ax
mov al, byte [ebp - 0x144]
and byte [ebp - 0x12], 0
mov byte [ebp - 0x14], al
mov al, byte [ebp - 0x143]
mov byte [ebp - 0x13], al
lea eax, [ebp - 0x14]
push eax
call fcn.00452a87
mov ecx, dword [ebx + 0x50]
lea edi, [esi + ecx + 2]
mov cl, byte [esi + ecx + 2]
mov dl, cl
xor dl, al
and dl, 0xf
xor dl, cl
mov byte [edi], dl
mov al, byte [ebp - 0x142]
and byte [ebp - 0x12], 0
mov byte [ebp - 0x14], al
mov al, byte [ebp - 0x141]
mov byte [ebp - 0x13], al
lea eax, [ebp - 0x14]
push eax
call fcn.00452a87
mov ecx, dword [ebx + 0x50]
add esp, 0x14
mov byte [esi + ecx + 3], al
mov eax, dword [ebx + 0x50]
and byte [esi + eax + 2], 0xf
lea esi, [esi + eax + 2]
xor eax, eax
mov ecx, dword [ebp - 0xc]
pop edi
pop esi
pop ebx
mov dword fs:[0], ecx
leave
ret 8