Function at 0x461a50
Capabilities:
Allocate or change rwx memory
Create thread
Execute shellcode via indirect call
Get common file path
Get graphical window text
Get startup folder
Read .ini file
Spawn thread to rwx shellcode

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x4790ac
mov eax, dword fs:[0]
push eax
sub esp, 0x828
mov eax, dword [0x483014]
xor eax, ebp
mov dword [ebp - 0x10], eax
push ebx
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov ebx, ecx
mov dword [ebp - 0x834], ebx
jmp 0x461a98
call dword [sym.imp.mfc140u.dll_CDialog::OnInitDialog]
push 0x460460
call dword [sym.imp.KERNEL32.dll_SetUnhandledExceptionFilter]
push 0
push dword [ebx + 0x20]
call dword [sym.imp.USER32.dll_GetSystemMenu]
push eax
call dword [sym.imp.mfc140u.dll_CMenu::FromHandle]
mov edi, eax
test edi, edi
je 0x461b24
lea ecx, [ebp - 0x818]
call dword [sym.imp.mfc140u.dll_Ordinal_296]
push 0x65
lea ecx, [ebp - 0x818]
mov dword [ebp - 4], 0
call dword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__2]
mov eax, dword [ebp - 0x818]
cmp dword [eax - 0xc], 0
je 0x461b11
mov esi, dword [sym.imp.USER32.dll_AppendMenuW]
push 0
push 0
push 0x800
push dword [edi + 4]
call esi
push dword [ebp - 0x818]
push 0x10
push 0
push dword [edi + 4]
call esi
lea ecx, [ebp - 0x818]
mov dword [ebp - 4], 0xffffffff
call dword [sym.imp.mfc140u.dll_Ordinal_1045]
push dword [ebx + 0xd0]
mov esi, dword [sym.imp.USER32.dll_SendMessageW]
push 1
push 0x80
push dword [ebx + 0x20]
call esi
push dword [ebx + 0xd0]
push 0
push 0x80
push dword [ebx + 0x20]
call esi
push 0
push 0
push 0x1037
push dword [ebx + 0xf4]
call esi
or eax, 0x20
push eax
push 0
push 0x1036
push dword [ebx + 0xf4]
call esi
mov esi, dword [sym.imp.mfc140u.dll_CListCtrl::InsertColumn]
lea edi, [ebx + 0xd4]
push 0xffffffffffffffff
push 0x32
push 0
push 0x47c660
push 0
mov ecx, edi
call esi
push 0xffffffffffffffff
push 0x5a
push 0
push 0x47c668
push 1
mov ecx, edi
call esi
push 0xffffffffffffffff
push 0x32
push 0
push 0x47c670
push 2
mov ecx, edi
call esi
push 0xffffffffffffffff
push 0x32
push 0
push str.:S_rg
push 3
mov ecx, edi
call esi
push 0xffffffffffffffff
push 0x32
push 0
push 0x47c680
push 4
mov ecx, edi
call esi
push 0xffffffffffffffff
push 0x32
push 0
push 0x47c688
push 5
mov ecx, edi
call esi
push 0xffffffffffffffff
push 0x32
push 0
push 0x47c690
push 6
mov ecx, edi
call esi
push 0xffffffffffffffff
push 0x3c
push 0
push 0x47c698
push 7
mov ecx, edi
call esi
push 0xffffffffffffffff
push 0x3c
push 0
push 0x47c6a0
push 8
mov ecx, edi
call esi
push 0xffffffffffffffff
push 0x41
push 0
push 0x47c6a8
push 9
mov ecx, edi
call esi
push 0xffffffffffffffff
push 0x32
push 0
push 0x47c6b0
push 0xa
mov ecx, edi
call esi
push 0xffffffffffffffff
push 0x41
push 0
push 0x47c6b8
push 0xb
mov ecx, edi
call esi
push 0xffffffffffffffff
push 0x3c
push 0
push 0x47c6c0
push 0xc
mov ecx, edi
call esi
push 0xffffffffffffffff
push 0x50
push 0
push 0x47c6c8
push 0xd
mov ecx, edi
call esi
push 0xffffffffffffffff
push 0x32
push 0
push 0x47c6d0
push 0xe
mov ecx, edi
call esi
push 0xffffffffffffffff
push 0x78
push 0
push str.vU_
push 0xf
mov ecx, edi
call esi
push 0xffffffffffffffff
push 0x78
push 0
push 0x47c6e4
push 0x10
mov ecx, edi
call esi
push 0xffffffffffffffff
push 0x5a
push 0
push 0x47c6f0
push 0x11
mov ecx, edi
call esi
push 0x47c6f8
lea ecx, [ebx + 0x254]
call dword [sym.imp.mfc140u.dll_CWnd::SetWindowTextW]
mov esi, dword [sym.imp.USER32.dll_SendMessageW]
push 0x47c6f8
push 0
push 0x14a
push dword [ebx + 0x274]
call esi
push 0x47c700
push 1
push 0x14a
push dword [ebx + 0x274]
call esi
push 0x47c708
push 2
push 0x14a
push dword [ebx + 0x274]
call esi
mov esi, dword [sym.imp.mfc140u.dll_CWnd::ShowWindow]
lea ecx, [ebx + 0x6a4]
push 0
call esi
lea ecx, [ebx + 0xb24]
push 0
call esi
lea ecx, [ebx + 0xc24]
push 0
call esi
lea ecx, [ebx + 0x724]
push 0
call esi
lea ecx, [ebx + 0xaa4]
push 0
call esi
lea ecx, [ebx + 0xd24]
push 0
call esi
lea ecx, [ebx + 0xda4]
push 0
call esi
lea ecx, [ebx + 0x182c]
push 0
call esi
lea ecx, [ebx + 0x1d2c]
push 0
call esi
push 0
lea ecx, [ebx + 0x1cac]
call esi
lea ecx, [ebx + 0x1c2c]
push 0
call esi
lea ecx, [ebx + 0x122c]
push 0
call esi
lea ecx, [ebx + 0x152c]
push 0
call esi
lea ecx, [ebx + 0xf24]
push 0
call esi
lea ecx, [ebx + 0xfa4]
push 0
call esi
lea ecx, [ebx + 0x1d4]
push 0
call esi
lea ecx, [ebx + 0x1eac]
push 0
call esi
mov edi, dword [sym.imp.mfc140u.dll_CWnd::EnableWindow]
lea ecx, [ebx + 0x1cac]
push 0
call edi
lea ecx, [ebx + 0x212c]
push 0
call esi
lea ecx, [ebx + 0x132c]
push 0
call esi
push 0
lea ecx, [ebx + 0x1eac]
call esi
lea ecx, [ebx + 0x1fac]
push 0
call esi
push 0
lea ecx, [ebx + 0x132c]
call edi
push 0
lea ecx, [ebx + 0x1eac]
call edi
push 0
lea ecx, [ebx + 0x1fac]
call edi
mov eax, dword [ebx + 0x2d4]
add ebx, 0x2d4
mov esi, dword [ebp - 0x834]
mov ecx, ebx
push 0xe801
push 0x50008200
push 0
push esi
call dword [eax + 0x1b0]
lea eax, [ebp - 0x830]
push eax
push dword [esi + 0x20]
call dword [sym.imp.USER32.dll_GetClientRect]
mov eax, dword [ebp - 0x824]
mov ecx, ebx
push 1
push 0x19
push dword [ebp - 0x828]
add eax, 0xffffffe2
push eax
push 0
call dword [sym.imp.mfc140u.dll_CWnd::MoveWindow]
push 3
push 0x49644c
mov ecx, ebx
call dword [sym.imp.mfc140u.dll_CStatusBar::SetIndicators]
mov edi, dword [sym.imp.mfc140u.dll_CWnd::GetDlgCtrlID]
mov ecx, ebx
push 0x96
push 0x8000000
call edi
mov esi, dword [sym.imp.mfc140u.dll_CStatusBar::SetPaneInfo]
mov ecx, ebx
push eax
push 0
call esi
push 0x12c
push 0x8000000
mov ecx, ebx
call edi
push eax
push 1
mov ecx, ebx
call esi
push 0x1e
push 0x8000000
mov ecx, ebx
call edi
push eax
push 2
mov ecx, ebx
call esi
mov esi, dword [ebp - 0x834]
mov ecx, esi
push 1
push 0
push 0
push 0
push 0
push 0xe8ff
push 0xe800
call dword [sym.imp.mfc140u.dll_CWnd::RepositionBars]
mov edi, dword [sym.imp.mfc140u.dll_CWnd::ShowWindow]
mov ecx, ebx
push 1
call edi
push 0x200
lea eax, [ebp - 0x410]
mov dword [0x496a38], ebx
push 0
push eax
call sub.VCRUNTIME140.dll_memset
add esp, 0xc
lea ecx, [ebp - 0x814]
call dword [sym.imp.mfc140u.dll_Ordinal_296]
mov dword [ebp - 4], 1
lea ecx, [ebp - 0x820]
call dword [sym.imp.mfc140u.dll_Ordinal_296]
push 0x200
lea eax, [ebp - 0x210]
mov byte [ebp - 4], 2
push 0
push eax
call sub.VCRUNTIME140.dll_memset
add esp, 0xc
lea eax, [ebp - 0x410]
push 0
push 0
push eax
push 0
call dword [sym.imp.SHELL32.dll_SHGetSpecialFolderPathW]
lea eax, [ebp - 0x410]
push eax
lea eax, [ebp - 0x814]
push str._sIPsET.ini
push eax
call dword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__12]
add esp, 0xc
push dword [ebp - 0x814]
push 0
push 0x47c72c
push 0x47c738
call dword [sym.imp.KERNEL32.dll_GetPrivateProfileIntW]
mov ebx, dword [sym.imp.USER32.dll_SendMessageW]
push 0
push eax
push 0xf1
push dword [esi + 0x3c4]
call ebx
push 0
push 0
push 0xf0
push dword [esi + 0x3c4]
call ebx
push dword [ebp - 0x814]
mov dword [0x496a5c], eax
push 0
push 0x47c740
push 0x47c738
call dword [sym.imp.KERNEL32.dll_GetPrivateProfileIntW]
push 0
push eax
push 0xf1
push dword [esi + 0x544]
call ebx
push 0
push 0
push 0xf0
push dword [esi + 0x544]
call ebx
push dword [ebp - 0x814]
mov dword [0x496afc], eax
push 0
push 0x47c748
push 0x47c738
call dword [sym.imp.KERNEL32.dll_GetPrivateProfileIntW]
push 0
push eax
push 0xf1
push dword [esi + 0x5c4]
call ebx
push 0
push 0
push 0xf0
push dword [esi + 0x5c4]
call ebx
push dword [ebp - 0x814]
mov dword [0x496a2c], eax
push 0
push str.Rf
push 0x47c738
call dword [sym.imp.KERNEL32.dll_GetPrivateProfileIntW]
push 0
push eax
push 0xf1
push dword [esi + 0x7c4]
call ebx
push 0
push 0
push 0xf0
push dword [esi + 0x7c4]
call ebx
push dword [ebp - 0x814]
mov dword [0x496af0], eax
push 0
push 0x47c760
push 0x47c738
call dword [sym.imp.KERNEL32.dll_GetPrivateProfileIntW]
push 0
push eax
push 0xf1
push dword [esi + 0x844]
call ebx
push 0
push 0
push 0xf0
push dword [esi + 0x844]
call ebx
push dword [ebp - 0x814]
mov dword [0x496a30], eax
push 0
push 0x47c76c
push 0x47c738
call dword [sym.imp.KERNEL32.dll_GetPrivateProfileIntW]
push 0
push eax
push 0xf1
push dword [esi + 0x8c4]
call ebx
push 0
push 0
push 0xf0
push dword [esi + 0x8c4]
call ebx
push dword [ebp - 0x814]
mov dword [0x496ae0], eax
push 0
push 0x47c778
push 0x47c738
call dword [sym.imp.KERNEL32.dll_GetPrivateProfileIntW]
push 0
push eax
push 0xf1
push dword [esi + 0xbc4]
call ebx
push 0
push 0
push 0xf0
push dword [esi + 0xbc4]
call ebx
push dword [ebp - 0x814]
mov dword [0x496aec], eax
push 0
push 0x47c784
push 0x47c738
call dword [sym.imp.KERNEL32.dll_GetPrivateProfileIntW]
push 0
push eax
push 0xf1
push dword [esi + 0x1dcc]
call ebx
push 0
push 0
push 0xf0
push dword [esi + 0x1dcc]
call ebx
push dword [ebp - 0x814]
mov dword [0x496a90], eax
push 0
push 0x47c794
push 0x47c738
call dword [sym.imp.KERNEL32.dll_GetPrivateProfileIntW]
push 0
push eax
push 0xf1
push dword [esi + 0x20cc]
call ebx
push 0
push 0
push 0xf0
push dword [esi + 0x20cc]
call ebx
push dword [ebp - 0x814]
mov dword [0x496a50], eax
push 0
push 0x47c79c
push 0x47c738
call dword [sym.imp.KERNEL32.dll_GetPrivateProfileIntW]
push 0
push eax
push 0xf1
push dword [esi + 0x1e4c]
call ebx
push 0
push 0
push 0xf0
push dword [esi + 0x1e4c]
call ebx
push dword [ebp - 0x814]
mov dword [0x496aac], eax
push 0
push 0x47c7a4
push 0x47c738
call dword [sym.imp.KERNEL32.dll_GetPrivateProfileIntW]
push 0
push eax
push 0xf1
push dword [esi + 0xcc4]
call ebx
push 0
push 0
push 0xf0
push dword [esi + 0xcc4]
call ebx
push dword [ebp - 0x814]
mov dword [0x496ae8], eax
push 0
push 0x47c7ac
push 0x47c738
call dword [sym.imp.KERNEL32.dll_GetPrivateProfileIntW]
push 0
push eax
push 0xf1
push dword [esi + 0xec4]
call ebx
push 0
push 0
push 0xf0
push dword [esi + 0xec4]
call ebx
push dword [ebp - 0x814]
mov dword [0x496ad4], eax
push 0
push 0x47c7b8
push 0x47c738
call dword [sym.imp.KERNEL32.dll_GetPrivateProfileIntW]
push 0
push eax
push 0xf1
push dword [esi + 0x144c]
call ebx
push 0
push 0
push 0xf0
push dword [esi + 0x144c]
call ebx
push dword [ebp - 0x814]
mov dword [0x496ac4], eax
push 0
push 0x47c7c4
push 0x47c738
call dword [sym.imp.KERNEL32.dll_GetPrivateProfileIntW]
push 0
push eax
push 0xf1
push dword [esi + 0x14cc]
call ebx
push 0
push 0
push 0xf0
push dword [esi + 0x14cc]
call ebx
push dword [ebp - 0x814]
mov dword [0x496a64], eax
push 0
push 0x47c7d4
push 0x47c738
call dword [sym.imp.KERNEL32.dll_GetPrivateProfileIntW]
push 0
push eax
push 0xf1
push dword [esi + 0x15cc]
call ebx
push 0
push 0
push 0xf0
push dword [esi + 0x15cc]
call ebx
push dword [ebp - 0x814]
mov dword [0x496abc], eax
push 0
push 0x47c7e0
push 0x47c738
call dword [sym.imp.KERNEL32.dll_GetPrivateProfileIntW]
push 0
push eax
push 0xf1
push dword [esi + 0x16cc]
call ebx
push 0
push 0
push 0xf0
push dword [esi + 0x16cc]
call ebx
push dword [ebp - 0x814]
mov dword [0x496a6c], eax
push 0
push 0x47c7ec
push 0x47c738
call dword [sym.imp.KERNEL32.dll_GetPrivateProfileIntW]
push 0
push eax
push 0xf1
push dword [esi + 0x17cc]
call ebx
push 0
push 0
push 0xf0
push dword [esi + 0x17cc]
call ebx
push dword [ebp - 0x814]
mov dword [0x496ab8], eax
push 0
push 0x47c7f8
push 0x47c738
call dword [sym.imp.KERNEL32.dll_GetPrivateProfileIntW]
push 0
push eax
push 0xf1
push dword [esi + 0x944]
call ebx
push 0
push 0
push 0xf0
push dword [esi + 0x944]
call ebx
push dword [ebp - 0x814]
mov dword [0x496adc], eax
push 0
push 0x47c800
push 0x47c738
call dword [sym.imp.KERNEL32.dll_GetPrivateProfileIntW]
push 0
push eax
push 0xf1
push dword [esi + 0x18cc]
call ebx
push 0
push 0
push 0xf0
push dword [esi + 0x18cc]
call ebx
push dword [ebp - 0x814]
mov dword [0x496ab0], eax
lea eax, [ebp - 0x210]
push 0x100
push eax
push 0x47c80c
push 0x47c818
push 0x47c738
call dword [sym.imp.KERNEL32.dll_GetPrivateProfileStringW]
lea eax, [ebp - 0x210]
push eax
lea ecx, [esi + 0x172c]
call dword [sym.imp.mfc140u.dll_CWnd::SetWindowTextW]
push dword [ebp - 0x814]
push 0
push 0x47c824
push 0x47c738
call dword [sym.imp.KERNEL32.dll_GetPrivateProfileIntW]
push 0
push eax
push 0xf1
push dword [esi + 0x19cc]
call ebx
push 0
push 0
push 0xf0
push dword [esi + 0x19cc]
call ebx
push dword [ebp - 0x814]
mov dword [0x496a4c], eax
push 1
push 0x47c830
push 0x47c738
call dword [sym.imp.KERNEL32.dll_GetPrivateProfileIntW]
push 0
push eax
push 0xf1
push dword [esi + 0x1b4c]
call ebx
push 0
push 0
push 0xf0
push dword [esi + 0x1b4c]
call ebx
push dword [ebp - 0x814]
push 0
push 0x47c83c
push 0x47c738
call dword [sym.imp.KERNEL32.dll_GetPrivateProfileIntW]
push 0
push eax
push 0xf1
push dword [esi + 0x1bcc]
call ebx
push 0
push 0
push 0xf0
push dword [esi + 0x1bcc]
call ebx
push 0
push 0
push 0xf0
push dword [esi + 0x1b4c]
mov dword [0x496a58], eax
call ebx
push dword [ebp - 0x814]
neg eax
push 0
sbb al, al
push 0x47c848
add al, 2
push 0x47c738
mov byte [0x4958e7], al
call dword [sym.imp.KERNEL32.dll_GetPrivateProfileIntW]
cmp eax, 0x64
jne 0x46254c
push 0
push 1
push 0xf1
push dword [esi + 0x10cc]
call ebx
mov dword [0x495a30], 0x64
jmp 0x462590
cmp eax, 0x12c
jne 0x462570
push 0
push 1
push 0xf1
push dword [esi + 0x114c]
call ebx
mov dword [0x495a30], 0x12c
jmp 0x462590
cmp eax, 0xa
jne 0x462590
push 0
push 1
push 0xf1
push dword [esi + 0x104c]
call ebx
mov dword [0x495a30], 0xa
push dword [ebp - 0x814]
lea eax, [ebp - 0x210]
push 0x100
push eax
push 0x47c240
push 0x47c854
push 0x47c738
call dword [sym.imp.KERNEL32.dll_GetPrivateProfileStringW]
test eax, eax
je 0x4625ce
lea eax, [ebp - 0x210]
push eax
lea ecx, [esi + 0x424]
call dword [sym.imp.mfc140u.dll_CWnd::SetWindowTextW]
push dword [ebp - 0x814]
lea eax, [ebp - 0x210]
push 0x100
push eax
push 0x47c240
push 0x47c860
push 0x47c738
call dword [sym.imp.KERNEL32.dll_GetPrivateProfileStringW]
test eax, eax
je 0x46261c
lea eax, [ebp - 0x210]
push eax
lea ecx, [esi + 0x11ac]
call dword [sym.imp.mfc140u.dll_CWnd::SetWindowTextW]
lea eax, [ebp - 0x210]
push eax
call dword [sym.imp.api_ms_win_crt_convert_l1_1_0.dll__wtoll]
add esp, 4
push dword [ebp - 0x814]
lea eax, [ebp - 0x210]
push 0x100
push eax
push str.20000
push 0x47c874
push 0x47c738
call dword [sym.imp.KERNEL32.dll_GetPrivateProfileStringW]
lea eax, [ebp - 0x210]
push eax
lea ecx, [esi + 0xe24]
call dword [sym.imp.mfc140u.dll_CWnd::SetWindowTextW]
push dword [ebp - 0x814]
lea eax, [ebp - 0x210]
push 0x100
push eax
push 0x47c880
push 0x47c884
push 0x47c738
call dword [sym.imp.KERNEL32.dll_GetPrivateProfileStringW]
lea eax, [ebp - 0x210]
push eax
lea ecx, [esi + 0x162c]
call dword [sym.imp.mfc140u.dll_CWnd::SetWindowTextW]
lea eax, [ebp - 0x210]
push eax
call dword [sym.imp.api_ms_win_crt_convert_l1_1_0.dll__wtoll]
add esp, 4
mov dword [0x495a28], eax
lea eax, [ebp - 0x210]
push dword [ebp - 0x814]
push 0x100
push eax
push 0x47c894
push 0x47c89c
push 0x47c738
call dword [sym.imp.KERNEL32.dll_GetPrivateProfileStringW]
lea eax, [ebp - 0x210]
push eax
lea ecx, [esi + 0xa24]
call dword [sym.imp.mfc140u.dll_CWnd::SetWindowTextW]
lea eax, [ebp - 0x210]
push eax
call dword [sym.imp.api_ms_win_crt_convert_l1_1_0.dll__wtoll]
add esp, 4
mov dword [0x496a74], eax
lea eax, [ebp - 0x210]
push dword [ebp - 0x814]
push 0x100
push eax
push 0x47c8a4
push 0x47c8a8
push 0x47c738
call dword [sym.imp.KERNEL32.dll_GetPrivateProfileStringW]
lea eax, [ebp - 0x210]
push eax
lea ecx, [esi + 0x1f2c]
call dword [sym.imp.mfc140u.dll_CWnd::SetWindowTextW]
lea eax, [ebp - 0x210]
push eax
call dword [sym.imp.api_ms_win_crt_convert_l1_1_0.dll__wtoll]
add esp, 4
mov byte [0x4958e6], al
lea eax, [ebp - 0x210]
push dword [ebp - 0x814]
push 0x100
push eax
push 0x47c8b4
push 0x47c8c0
push 0x47c738
call dword [sym.imp.KERNEL32.dll_GetPrivateProfileStringW]
lea eax, [ebp - 0x210]
push eax
lea ecx, [esi + 0x192c]
call dword [sym.imp.mfc140u.dll_CWnd::SetWindowTextW]
lea eax, [ebp - 0x210]
push eax
call dword [sym.imp.api_ms_win_crt_convert_l1_1_0.dll__wtoll]
add esp, 4
mov dword [0x497038], eax
push dword [ebp - 0x814]
push 0x100
lea eax, [ebp - 0x210]
push eax
push 0x47c8cc
push 0x47c8d4
push 0x47c738
call dword [sym.imp.KERNEL32.dll_GetPrivateProfileStringW]
lea eax, [ebp - 0x210]
push eax
lea ecx, [esi + 0x1a2c]
call dword [sym.imp.mfc140u.dll_CWnd::SetWindowTextW]
lea eax, [ebp - 0x210]
push eax
call dword [sym.imp.api_ms_win_crt_convert_l1_1_0.dll__wtoll]
add esp, 4
mov dword [0x497034], eax
lea eax, [ebp - 0x81c]
mov dword [ebp - 0x81c], 0
push eax
push 0x40
push 0x563
push dword [0x495a34]
call dword [sym.imp.KERNEL32.dll_VirtualProtect]
push 0
push 1
push 0
call dword [sym.imp.KERNEL32.dll_GetModuleHandleW]
push eax
call fcn.00445e39
test eax, eax
je 0x462c60
call fcn.0046df90
lea ecx, [ebp - 0x818]
call dword [sym.imp.mfc140u.dll_Ordinal_296]
push 2
mov byte [ebp - 4], 3
call fcn.00437c91
push eax
lea eax, [ebp - 0x818]
push 0x47c120
push eax
call dword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__12]
push dword [ebp - 0x818]
call dword [sym.imp.api_ms_win_crt_convert_l1_1_0.dll__wtoll]
add esp, 0x10
mov dword [0x496a34], eax
push 0
call fcn.00437cbc
push eax
lea ecx, [ebp - 0x834]
call dword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__10]
mov byte [ebp - 4], 4
push dword [eax]
lea eax, [ebp - 0x818]
push 0x47c8e0
push eax
call dword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__12]
add esp, 0xc
mov byte [ebp - 4], 3
lea ecx, [ebp - 0x834]
call dword [sym.imp.mfc140u.dll_Ordinal_1045]
push dword [ebp - 0x818]
call dword [sym.imp.api_ms_win_crt_convert_l1_1_0.dll__wtoll]
add esp, 4
mov dword [0x496b18], eax
lea ecx, [esi + 0x6a4]
push 1
call edi
push dword [ebp - 0x814]
push 0
push 0x47c8e8
push 0x47c738
call dword [sym.imp.KERNEL32.dll_GetPrivateProfileIntW]
push 0
push eax
push 0xf1
push dword [esi + 0x6c4]
call ebx
push 0
push 0
push 0xf0
push dword [esi + 0x6c4]
call ebx
push 1
lea ecx, [esi + 0xaa4]
mov dword [0x496af4], eax
call edi
push 1
lea ecx, [esi + 0xd24]
call edi
push 1
lea ecx, [esi + 0x152c]
call edi
push dword [ebp - 0x814]
push 0
push str._rN9e
push 0x47c738
call dword [sym.imp.KERNEL32.dll_GetPrivateProfileIntW]
push 0
push eax
push 0xf1
push dword [esi + 0x154c]
call ebx
push 0
push 0
push 0xf0
push dword [esi + 0x154c]
call ebx
push dword [ebp - 0x814]
mov dword [0x496ac0], eax
push 0
push 0x47c900
push 0x47c738
call dword [sym.imp.KERNEL32.dll_GetPrivateProfileIntW]
push 0
push eax
push 0xf1
push dword [esi + 0xac4]
call ebx
push 0
push 0
push 0xf0
push dword [esi + 0xac4]
call ebx
push dword [ebp - 0x814]
mov dword [0x496b1c], eax
push 0
push 0x47c90c
push 0x47c738
call dword [sym.imp.KERNEL32.dll_GetPrivateProfileIntW]
push 0
push eax
push 0xf1
push dword [esi + 0xd44]
call ebx
push 0
push 0
push 0xf0
push dword [esi + 0xd44]
call ebx
mov dword [0x497030], eax
mov eax, dword [0x496a34]
cmp eax, 2
jl 0x462a44
push 1
lea ecx, [esi + 0x1cac]
call dword [sym.imp.mfc140u.dll_CWnd::EnableWindow]
push 1
lea ecx, [esi + 0x1cac]
call edi
push 1
lea ecx, [esi + 0x132c]
call dword [sym.imp.mfc140u.dll_CWnd::EnableWindow]
push 1
lea ecx, [esi + 0x1eac]
call dword [sym.imp.mfc140u.dll_CWnd::EnableWindow]
push 1
lea ecx, [esi + 0x1fac]
call dword [sym.imp.mfc140u.dll_CWnd::EnableWindow]
push 1
lea ecx, [esi + 0x132c]
call edi
push 1
lea ecx, [esi + 0x1eac]
call edi
push 1
lea ecx, [esi + 0x1fac]
call edi
mov eax, dword [0x496a34]
cmp eax, 5
jne 0x462aaf
push 1
lea ecx, [esi + 0x1d2c]
call edi
push 1
lea ecx, [esi + 0x724]
call edi
push 1
lea ecx, [esi + 0x182c]
call edi
push dword [ebp - 0x814]
push 0
push 0x47c914
push 0x47c738
call dword [sym.imp.KERNEL32.dll_GetPrivateProfileIntW]
push 0
push eax
push 0xf1
push dword [esi + 0x184c]
call ebx
push 0
push 0
push 0xf0
push dword [esi + 0x184c]
call ebx
mov dword [0x496ab4], eax
mov eax, dword [0x496a34]
cmp eax, 5
je 0x462ac2
cmp eax, 3
je 0x462ac2
cmp eax, 4
je 0x462ac2
cmp eax, 6
jne 0x462c25
push 1
lea ecx, [esi + 0x1c2c]
call edi
push dword [ebp - 0x814]
lea eax, [ebp - 0x210]
push 0x100
push eax
push str.80000
push 0x47c92c
push 0x47c738
call dword [sym.imp.KERNEL32.dll_GetPrivateProfileStringW]
lea eax, [ebp - 0x210]
push eax
lea ecx, [esi + 0x1c2c]
call dword [sym.imp.mfc140u.dll_CWnd::SetWindowTextW]
lea eax, [ebp - 0x210]
push eax
call dword [sym.imp.api_ms_win_crt_convert_l1_1_0.dll__wtoll]
add esp, 4
mov dword [0x495a24], eax
lea ecx, [esi + 0xda4]
push 1
call edi
push 1
lea ecx, [esi + 0x122c]
call edi
push dword [ebp - 0x814]
push 0
push 0x47c934
push 0x47c738
call dword [sym.imp.KERNEL32.dll_GetPrivateProfileIntW]
push 0
push eax
push 0xf1
push dword [esi + 0xdc4]
call ebx
push 0
push 0
push 0xf0
push dword [esi + 0xdc4]
call ebx
push dword [ebp - 0x814]
mov dword [0x496ad8], eax
push 0
push 0x47c940
push 0x47c738
call dword [sym.imp.KERNEL32.dll_GetPrivateProfileIntW]
push 0
push eax
push 0xf1
push dword [esi + 0x124c]
call ebx
push 0
push 0
push 0xf0
push dword [esi + 0x124c]
call ebx
push 1
lea ecx, [esi + 0xf24]
mov dword [0x496acc], eax
call edi
push 1
lea ecx, [esi + 0xfa4]
call edi
push 1
lea ecx, [esi + 0x1d4]
call edi
push 1
lea ecx, [esi + 0xf24]
call edi
push 1
lea ecx, [esi + 0x212c]
call edi
push dword [ebp - 0x814]
push 0
push 0x47c94c
push 0x47c738
call dword [sym.imp.KERNEL32.dll_GetPrivateProfileIntW]
push 0
push eax
push 0xf1
push dword [esi + 0x214c]
call ebx
push 0
push 0
push 0xf0
push dword [esi + 0x214c]
call ebx
mov dword [0x496a78], eax
mov eax, dword [0x496a34]
cmp eax, 6
je 0x462c2a
cmp eax, 5
jne 0x462c54
push 1
lea ecx, [esi + 0xb24]
call edi
push 0
push 0
push 0xf0
push dword [esi + 0xb44]
call ebx
push 1
lea ecx, [esi + 0xc24]
mov dword [0x496ae4], eax
call edi
lea ecx, [ebp - 0x818]
call dword [sym.imp.mfc140u.dll_Ordinal_1045]
call fcn.004617d0
push 0
push 0
push 0xf0
push dword [esi + 0x15cc]
call ebx
test eax, eax
je 0x462cd1
push 0x400
lea eax, [ebp - 0x810]
push 0
push eax
call sub.VCRUNTIME140.dll_memset
add esp, 0xc
lea eax, [ebp - 0x810]
push 0
push 0x10
push eax
push 0
call dword [sym.imp.SHELL32.dll_SHGetSpecialFolderPathA]
lea eax, [ebp - 0x810]
push eax
push 0x47c958
push 0x496b20
call fcn.0045dc60
push 0
push 0
push 0
push 0x465400
push 0
push 0
call dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__beginthreadex]
add esp, 0x24
push 0
push 0
push 0xf0
push dword [esi + 0x15cc]
call ebx
test eax, eax
je 0x462cfe
push 0x46d2a0
push 0x2710
push 0x2767
push dword [esi + 0x20]
call dword [sym.imp.USER32.dll_SetTimer]
jmp 0x462d0e
lea ecx, [ebp - 0x820]
call dword [sym.imp.mfc140u.dll_Ordinal_1045]
lea ecx, [ebp - 0x814]
call dword [sym.imp.mfc140u.dll_Ordinal_1045]
mov eax, 1
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 0x10]
xor ecx, ebp
call fcn.0047724d
mov esp, ebp
pop ebp
ret