Function at 0x405f20
Capabilities:
Read .ini file

Disassembly:
push ebp
mov ebp, esp
and esp, 0xfffffff8
push 0xffffffffffffffff
push 0x4bfee0
mov eax, dword fs:[0]
push eax
sub esp, 0x98
mov eax, dword [0x4ef6a0]
xor eax, esp
mov dword [esp + 0x90], eax
push ebx
push esi
push edi
mov eax, dword [0x4ef6a0]
xor eax, esp
push eax
lea eax, [esp + 0xa8]
mov dword fs:[0], eax
mov ebx, ecx
call fcn.00479d36
mov eax, 0x300
mov ecx, 0x400
mov dword [ebx + 0x470], eax
mov dword [ebx + 0x90], eax
mov eax, 1
xor edi, edi
mov dword [ebx + 0x46c], ecx
mov dword [ebx + 0x84], edi
mov dword [ebx + 0x88], edi
mov dword [ebx + 0x8c], ecx
mov dword [ebx + 0x98], eax
mov dword [ebx + 0x94], eax
mov dword [ebx + 0x9c], 0x2fc
mov dword [ebx + 0xa0], 0x243
call fcn.004768e7
xor ecx, ecx
cmp eax, edi
setne cl
cmp ecx, edi
jne 0x405fd6
push 0x80004005
call fcn.00404150
mov edx, dword [eax]
mov ecx, eax
mov eax, dword [edx + 0xc]
call eax
add eax, 0x10
mov dword [esp + 0x1c], eax
push 0x64
lea ecx, [esp + 0x38]
push edi
push ecx
mov dword [esp + 0xbc], edi
call fcn.0049be70
add esp, 0xc
call fcn.0047ab74
mov eax, dword [eax + 8]
push 0x64
lea edx, [esp + 0x38]
push edx
push eax
call dword [sym.imp.KERNEL32.dll_GetModuleFileNameA]
call fcn.004768e7
xor ecx, ecx
cmp eax, edi
setne cl
cmp ecx, edi
jne 0x40602d
push 0x80004005
call fcn.00404150
mov edx, dword [eax]
mov ecx, eax
mov eax, dword [edx + 0xc]
call eax
add eax, 0x10
mov dword [esp + 0x18], eax
lea ecx, [esp + 0x34]
push ecx
lea ecx, [esp + 0x14]
mov byte [esp + 0xb4], 1
call fcn.0040db40
push eax
lea ecx, [esp + 0x1c]
mov byte [esp + 0xb4], 2
call fcn.00404a50
mov byte [esp + 0xb0], 1
mov eax, dword [esp + 0x10]
add eax, 0xfffffff0
lea edx, [eax + 0xc]
or ecx, 0xffffffff
lock xadd dword [edx], ecx
dec ecx
test ecx, ecx
jg 0x40608d
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
mov esi, dword [esp + 0x18]
push 0x5c
push esi
call fcn.00494eeb
add esp, 8
cmp eax, edi
jne 0x4060a5
or esi, 0xffffffff
jmp 0x4060a9
sub eax, esi
mov esi, eax
push esi
lea ecx, [esp + 0x18]
push ecx
lea ecx, [esp + 0x20]
call fcn.00404900
push str.logo.bmp
push eax
lea edx, [esp + 0x18]
push edx
mov byte [esp + 0xbc], 3
call fcn.0040dd30
add esp, 0xc
push eax
lea ecx, [esp + 0x1c]
mov byte [esp + 0xb4], 4
call fcn.00404a50
mov byte [esp + 0xb0], 3
mov eax, dword [esp + 0x10]
add eax, 0xfffffff0
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x40610d
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
mov byte [esp + 0xb0], 1
mov eax, dword [esp + 0x14]
add eax, 0xfffffff0
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x406135
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
push esi
lea ecx, [esp + 0x18]
push ecx
lea ecx, [esp + 0x20]
call fcn.00404900
push str.iSee.dat
push eax
lea edx, [esp + 0x18]
push edx
mov byte [esp + 0xbc], 5
call fcn.0040dd30
add esp, 0xc
push eax
lea ecx, [esp + 0x20]
mov byte [esp + 0xb4], 6
call fcn.00404a50
mov byte [esp + 0xb0], 5
mov eax, dword [esp + 0x10]
add eax, 0xfffffff0
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x406199
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
mov byte [esp + 0xb0], 1
mov eax, dword [esp + 0x14]
add eax, 0xfffffff0
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x4061c1
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
mov ecx, dword [esp + 0x1c]
push ecx
push 1
push str.UseDefaultLogo
push str.Logo
call dword [sym.imp.KERNEL32.dll_GetPrivateProfileIntA]
cmp eax, 1
je 0x406217
mov edx, dword [esp + 0x18]
push 0x2050
push edi
push edi
push edi
push edx
push edi
call dword [sym.imp.USER32.dll_LoadImageA]
cmp eax, edi
je 0x40620b
push eax
mov eax, dword [ebx + 0x494]
push edi
push 0x172
push eax
call dword [sym.imp.USER32.dll_SendMessageA]
jmp 0x406217
push edi
lea ecx, [ebx + 0x474]
call fcn.004832df
mov ecx, dword [ebx + 0x88]
mov edx, dword [ebx + 0x9c]
push 1
push 0x53
push 0x8a
add ecx, 0xa
push ecx
add edx, 0x32
push edx
lea ecx, [ebx + 0x474]
call fcn.004832a1
call fcn.004768e7
xor ecx, ecx
cmp eax, edi
setne cl
cmp ecx, edi
jne 0x406259
push 0x80004005
call fcn.00404150
mov edx, dword [eax]
mov ecx, eax
mov eax, dword [edx + 0xc]
call eax
add eax, 0x10
mov dword [esp + 0x14], eax
mov esi, ebx
mov byte [esp + 0xb0], 7
call fcn.004076f0
mov ecx, ebx
call fcn.004078f0
mov esi, dword [ebx + 0x714]
lea edi, [ebx + 0x714]
push 0
push 0x59f
mov ecx, ebx
add esi, 0x134
call fcn.0048311e
mov edx, dword [esi]
push eax
mov ecx, edi
call edx
mov eax, dword [ebx + 0x734]
push 0
push 1
push 0x401
push eax
call dword [sym.imp.USER32.dll_SendMessageA]
cmp dword [ebx + 0xda0], 0
jne 0x40630f
lea edi, [ebx + 0xda4]
mov dword [esp + 0x10], 0x80
push 0x15c
call fcn.00475afb
add esp, 4
mov dword [esp + 0x30], eax
test eax, eax
mov byte [esp + 0xb0], 8
je 0x4062f9
mov esi, eax
call fcn.00421d60
jmp 0x4062fb
xor eax, eax
mov byte [esp + 0xb0], 7
mov dword [edi], eax
add edi, 4
sub dword [esp + 0x10], 1
jne 0x4062d3
mov esi, 1
call fcn.00429410
push ebx
lea ecx, [ebx + 0x94]
push ecx
mov ecx, dword [ebx + 0x46c]
push ecx
mov ecx, dword [ebx + 0x470]
push eax
mov dword [ebx + 0x5fc], eax
call fcn.00429b60
mov eax, dword [ebx + 0x5fc]
mov ecx, dword [eax + 0x3654]
cmp ecx, 2
jg 0x406375
imul ecx, ecx, 0xa0c
mov dword [ecx + eax + 0x3664], esi
mov edx, dword [eax + 0x3654]
imul edx, edx, 0xa0c
mov dword [edx + eax + 0x366c], 0xffffffff
add dword [eax + 0x3654], esi
mov eax, dword [ebx + 0x5fc]
mov ecx, dword [eax + 0x3654]
cmp ecx, 2
jg 0x4063b0
imul ecx, ecx, 0xa0c
mov dword [ecx + eax + 0x3664], esi
mov ecx, dword [eax + 0x3654]
imul ecx, ecx, 0xa0c
mov dword [ecx + eax + 0x366c], 0xffffffff
add dword [eax + 0x3654], esi
lea edi, [ebx + 0x7f8]
push ebx
call fcn.0040aae0
mov esi, ebx
call fcn.0040cfd0
push 0x4ad
mov ecx, ebx
call fcn.0048311e
test eax, eax
je 0x4063d6
mov eax, dword [eax + 0x20]
push str.ButtonStart
push eax
call sub.intf.dll_Ordinal_46
push 0x4ae
mov ecx, ebx
call fcn.0048311e
test eax, eax
je 0x4063f4
mov eax, dword [eax + 0x20]
push str.ButtonStartRecord
push eax
call sub.intf.dll_Ordinal_46
push 0x3ea
mov ecx, ebx
call fcn.0048311e
test eax, eax
je 0x406412
mov eax, dword [eax + 0x20]
push str.ButtonStopRecord
push eax
call sub.intf.dll_Ordinal_46
push 0x4b8
mov ecx, ebx
call fcn.0048311e
test eax, eax
je 0x406430
mov eax, dword [eax + 0x20]
push str.ButtonSnapShot
push eax
call sub.intf.dll_Ordinal_46
push 0x4af
mov ecx, ebx
call fcn.0048311e
test eax, eax
je 0x40644e
mov eax, dword [eax + 0x20]
push str.ButtonStop
push eax
call sub.intf.dll_Ordinal_46
push 0x40b
mov ecx, ebx
call fcn.0048311e
test eax, eax
je 0x40646c
mov eax, dword [eax + 0x20]
push str.ButtonAdd
push eax
call sub.intf.dll_Ordinal_46
push 0x4b0
mov ecx, ebx
call fcn.0048311e
test eax, eax
je 0x40648a
mov eax, dword [eax + 0x20]
push str.ButtonDelete
push eax
call sub.intf.dll_Ordinal_46
push 0x4b1
mov ecx, ebx
call fcn.0048311e
test eax, eax
je 0x4064a8
mov eax, dword [eax + 0x20]
push str.ButtonSetting
push eax
call sub.intf.dll_Ordinal_46
push 0x4b2
mov ecx, ebx
call fcn.0048311e
test eax, eax
je 0x4064c6
mov eax, dword [eax + 0x20]
push str.ButtonStart
push eax
call sub.intf.dll_Ordinal_46
push 0x4b3
mov ecx, ebx
call fcn.0048311e
test eax, eax
je 0x4064e4
mov eax, dword [eax + 0x20]
push str.ButtonFastPlay
push eax
call sub.intf.dll_Ordinal_46
push 0x4b5
mov ecx, ebx
call fcn.0048311e
test eax, eax
je 0x406502
mov eax, dword [eax + 0x20]
push str.ButtonSlowPlay
push eax
call sub.intf.dll_Ordinal_46
push 0x4b4
mov ecx, ebx
call fcn.0048311e
test eax, eax
je 0x406520
mov eax, dword [eax + 0x20]
push str.ButtonStop
push eax
call sub.intf.dll_Ordinal_46
push 0x4b6
mov ecx, ebx
call fcn.0048311e
test eax, eax
je 0x40653e
mov eax, dword [eax + 0x20]
push str.ButtonBakup
push eax
call sub.intf.dll_Ordinal_46
push 0x5e6
mov ecx, ebx
call fcn.0048311e
test eax, eax
je 0x40655c
mov eax, dword [eax + 0x20]
push str.ButtonPlayBackSnapshot
push eax
call sub.intf.dll_Ordinal_46
push 0x5f2
mov ecx, ebx
call fcn.0048311e
test eax, eax
je 0x40657a
mov eax, dword [eax + 0x20]
push str.ButtonPause
push eax
call sub.intf.dll_Ordinal_46
lea eax, [ebx + 0x3b0]
test eax, eax
je 0x406592
mov eax, dword [eax + 0x20]
push str.ButtonBackward
push eax
call sub.intf.dll_Ordinal_46
lea eax, [ebx + 0x404]
test eax, eax
je 0x4065aa
mov eax, dword [eax + 0x20]
push str.ButtonForward
push eax
call sub.intf.dll_Ordinal_46
lea eax, [ebx + 0xd4c]
test eax, eax
je 0x4065c2
mov eax, dword [eax + 0x20]
push str.ButtonFramePlay
push eax
call sub.intf.dll_Ordinal_46
lea eax, [ebx + 0xfac]
test eax, eax
je 0x4065da
mov eax, dword [eax + 0x20]
push str.ButtonAudio
push eax
call sub.intf.dll_Ordinal_46
push 0x56e
lea edx, [esp + 0x14]
push edx
call fcn.00410a90
push eax
lea ecx, [esp + 0x18]
mov byte [esp + 0xb4], 9
call fcn.00404a50
mov byte [esp + 0xb0], 7
mov eax, dword [esp + 0x10]
add eax, 0xfffffff0
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x40662e
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
mov ecx, dword [esp + 0x14]
push ecx
push 0x405
mov ecx, ebx
call fcn.00483166
push 0x49a
mov ecx, ebx
call fcn.0048311e
test eax, eax
je 0x406652
mov eax, dword [eax + 0x20]
push str.ButtonExit
push eax
call sub.intf.dll_Ordinal_46
push 0x4ce
mov ecx, ebx
call fcn.0048311e
test eax, eax
je 0x406670
mov eax, dword [eax + 0x20]
push str.ButtonHelp
push eax
call sub.intf.dll_Ordinal_46
push 0x4d2
mov ecx, ebx
call fcn.0048311e
test eax, eax
je 0x40668e
mov eax, dword [eax + 0x20]
push str.CheckBoxLock
push eax
call sub.intf.dll_Ordinal_46
push 0x4d0
mov ecx, ebx
call fcn.0048311e
test eax, eax
je 0x4066ac
mov eax, dword [eax + 0x20]
push str.CheckBoxConfig
push eax
call sub.intf.dll_Ordinal_46
push 0x4cc
mov ecx, ebx
call fcn.0048311e
test eax, eax
je 0x4066ca
mov eax, dword [eax + 0x20]
push str.ButtonMinimize
push eax
call sub.intf.dll_Ordinal_46
push 0x4cf
mov ecx, ebx
call fcn.0048311e
test eax, eax
je 0x4066e8
mov eax, dword [eax + 0x20]
push str.CheckBoxPlayback
push eax
call sub.intf.dll_Ordinal_46
push 0x457
mov ecx, ebx
call fcn.0048311e
test eax, eax
je 0x406706
mov eax, dword [eax + 0x20]
push str.CheckBoxRealtime
push eax
call sub.intf.dll_Ordinal_46
push 0x5e8
mov ecx, ebx
call fcn.0048311e
test eax, eax
je 0x406724
mov eax, dword [eax + 0x20]
push str.ButtonReturn
push eax
call sub.intf.dll_Ordinal_46
push 5
push 0x49a
mov ecx, ebx
call fcn.0048311e
mov ecx, eax
call fcn.004832df
push 5
push 0x62f
mov ecx, ebx
call fcn.0048311e
mov ecx, eax
call fcn.004832df
mov ecx, dword [ebx + 0x5fc]
push 5
call fcn.004832df
mov edi, dword [ebx + 0x5fc]
mov dword [edi + 0x4ba8], 0xffffffff
cmp dword [edi + 0x4070], 0
je 0x4067a3
mov eax, 1
cmp dword [edi + 0x3650], eax
je 0x4067a3
xor ecx, ecx
mov dword [edi + 0x3650], eax
mov dword [edi + 0x3648], 0
call fcn.0042b550
mov edi, dword [ebx + 0x5fc]
lea esi, [edi + 0x4b90]
push esi
call dword [sym.imp.KERNEL32.dll_EnterCriticalSection]
mov eax, dword [edi + 0x4b74]
test eax, eax
jbe 0x4067d5
add eax, 0xffffffff
mov dword [edi + 0x4b74], eax
jne 0x4067d5
mov dword [edi + 0x364c], 1
push esi
call dword [sym.imp.KERNEL32.dll_LeaveCriticalSection]
push 1
mov ecx, ebx
call fcn.0047bbc5
mov edx, dword [ebx + 0x788]
mov eax, dword [edx + 0x134]
lea edi, [ebx + 0x788]
push 0
push ebx
mov ecx, edi
call eax
mov ecx, dword [ebx + 0x7a8]
mov esi, dword [sym.imp.USER32.dll_SendMessageA]
push 0
push 1
push 0x401
push ecx
call esi
push 0x16a
lea edx, [esp + 0x14]
push edx
call fcn.00410a90
push eax
lea ecx, [esp + 0x18]
mov byte [esp + 0xb4], 0xa
call fcn.00404a50
mov byte [esp + 0xb0], 7
mov eax, dword [esp + 0x10]
add eax, 0xfffffff0
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x40685f
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
mov ecx, dword [esp + 0x14]
push 0
push 0
push ecx
push 0x4b2
mov ecx, ebx
call fcn.0048311e
push eax
mov ecx, edi
call fcn.0047b6a9
push 0x16b
lea edx, [esp + 0x14]
push edx
call fcn.00410a90
push eax
lea ecx, [esp + 0x18]
mov byte [esp + 0xb4], 0xb
call fcn.00404a50
mov byte [esp + 0xb0], 7
mov eax, dword [esp + 0x10]
add eax, 0xfffffff0
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x4068c5
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
mov ecx, dword [esp + 0x14]
push 0
push 0
push ecx
push 0x4b3
mov ecx, ebx
call fcn.0048311e
push eax
mov ecx, edi
call fcn.0047b6a9
push 0x16c
lea edx, [esp + 0x14]
push edx
call fcn.00410a90
push eax
lea ecx, [esp + 0x18]
mov byte [esp + 0xb4], 0xc
call fcn.00404a50
mov byte [esp + 0xb0], 7
mov eax, dword [esp + 0x10]
add eax, 0xfffffff0
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x40692b
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
mov ecx, dword [esp + 0x14]
push 0
push 0
push ecx
push 0x4b5
mov ecx, ebx
call fcn.0048311e
push eax
mov ecx, edi
call fcn.0047b6a9
push 0x166
lea edx, [esp + 0x14]
push edx
call fcn.00410a90
push eax
lea ecx, [esp + 0x18]
mov byte [esp + 0xb4], 0xd
call fcn.00404a50
mov byte [esp + 0xb0], 7
mov eax, dword [esp + 0x10]
add eax, 0xfffffff0
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x406991
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
mov ecx, dword [esp + 0x14]
push 0
push 0
push ecx
push 0x5f2
mov ecx, ebx
call fcn.0048311e
push eax
mov ecx, edi
call fcn.0047b6a9
push 0x16d
lea edx, [esp + 0x14]
push edx
call fcn.00410a90
push eax
lea ecx, [esp + 0x18]
mov byte [esp + 0xb4], 0xe
call fcn.00404a50
mov byte [esp + 0xb0], 7
mov eax, dword [esp + 0x10]
add eax, 0xfffffff0
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x4069f7
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
mov ecx, dword [esp + 0x14]
push 0
push 0
push ecx
push 0x4b4
mov ecx, ebx
call fcn.0048311e
push eax
mov ecx, edi
call fcn.0047b6a9
push 0x16f
lea edx, [esp + 0x14]
push edx
call fcn.00410a90
push eax
lea ecx, [esp + 0x18]
mov byte [esp + 0xb4], 0xf
call fcn.00404a50
mov byte [esp + 0xb0], 7
mov eax, dword [esp + 0x10]
add eax, 0xfffffff0
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x406a5d
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
mov ecx, dword [esp + 0x14]
push 0
push 0
push ecx
push 0x4b6
mov ecx, ebx
call fcn.0048311e
push eax
mov ecx, edi
call fcn.0047b6a9
push 0x210
lea edx, [esp + 0x14]
push edx
call fcn.00410a90
push eax
lea ecx, [esp + 0x18]
mov byte [esp + 0xb4], 0x10
call fcn.00404a50
mov byte [esp + 0xb0], 7
mov eax, dword [esp + 0x10]
add eax, 0xfffffff0
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x406ac3
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
mov ecx, dword [esp + 0x14]
push 0
push 0
push ecx
push 0x5e6
mov ecx, ebx
call fcn.0048311e
push eax
mov ecx, edi
call fcn.0047b6a9
push 0x170
lea edx, [esp + 0x14]
push edx
call fcn.00410a90
push eax
lea ecx, [esp + 0x18]
mov byte [esp + 0xb4], 0x11
call fcn.00404a50
mov byte [esp + 0xb0], 7
mov eax, dword [esp + 0x10]
add eax, 0xfffffff0
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x406b29
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
mov ecx, dword [esp + 0x14]
push 0
push 0
push ecx
push 0x49a
mov ecx, ebx
call fcn.0048311e
push eax
mov ecx, edi
call fcn.0047b6a9
push 0x660
lea edx, [esp + 0x14]
push edx
call fcn.00410a90
push eax
lea ecx, [esp + 0x18]
mov byte [esp + 0xb4], 0x12
call fcn.00404a50
mov byte [esp + 0xb0], 7
mov eax, dword [esp + 0x10]
add eax, 0xfffffff0
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x406b8f
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
mov ecx, dword [esp + 0x14]
push 0
push 0
push ecx
push 0x605
mov ecx, ebx
call fcn.0048311e
push eax
mov ecx, edi
call fcn.0047b6a9
push 0x661
lea edx, [esp + 0x14]
push edx
call fcn.00410a90
push eax
lea ecx, [esp + 0x18]
mov byte [esp + 0xb4], 0x13
call fcn.00404a50
mov byte [esp + 0xb0], 7
mov eax, dword [esp + 0x10]
add eax, 0xfffffff0
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x406bf5
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
mov ecx, dword [esp + 0x14]
push 0
push 0
push ecx
push 0x604
mov ecx, ebx
call fcn.0048311e
push eax
mov ecx, edi
call fcn.0047b6a9
push 0x5497
lea edx, [esp + 0x14]
push edx
call fcn.00410a90
push eax
lea ecx, [esp + 0x18]
mov byte [esp + 0xb4], 0x14
call fcn.00404a50
mov byte [esp + 0xb0], 7
mov eax, dword [esp + 0x10]
add eax, 0xfffffff0
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x406c5b
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
mov ecx, dword [esp + 0x14]
push 0
push 0
push ecx
push 0x62e
mov ecx, ebx
call fcn.0048311e
push eax
mov ecx, edi
call fcn.0047b6a9
mov edx, dword [ebx + 0x7a8]
push 0x96
push 0
push 0x418
push edx
call esi
push 0x548a
lea eax, [esp + 0x14]
push eax
call fcn.00410a90
push eax
lea ecx, [esp + 0x18]
mov byte [esp + 0xb4], 0x15
call fcn.00404a50
mov byte [esp + 0xb0], 7
mov eax, dword [esp + 0x10]
add eax, 0xfffffff0
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x406cd6
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
mov ecx, dword [esp + 0x14]
push ecx
push 0x620
mov ecx, ebx
call fcn.00483166
push 0x548f
lea edx, [esp + 0x14]
push edx
call fcn.00410a90
push eax
lea ecx, [esp + 0x18]
mov byte [esp + 0xb4], 0x16
call fcn.00404a50
mov byte [esp + 0xb0], 7
mov eax, dword [esp + 0x10]
add eax, 0xfffffff0
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x406d30
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
mov ecx, dword [esp + 0x14]
push ecx
push 0x621
mov ecx, ebx
call fcn.00483166
push 0x5498
lea edx, [esp + 0x14]
push edx
call fcn.00410a90
push eax
lea ecx, [esp + 0x18]
mov byte [esp + 0xb4], 0x17
call fcn.00404a50
mov byte [esp + 0xb0], 7
mov eax, dword [esp + 0x10]
add eax, 0xfffffff0
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x406d8a
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
mov ecx, dword [esp + 0x14]
push ecx
push 0x61d
mov ecx, ebx
call fcn.00483166
push 0x17b
lea edx, [esp + 0x14]
push edx
call fcn.00410a90
push eax
lea ecx, [esp + 0x18]
mov byte [esp + 0xb4], 0x18
call fcn.00404a50
mov byte [esp + 0xb0], 7
mov eax, dword [esp + 0x10]
add eax, 0xfffffff0
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x406de4
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
mov ecx, dword [esp + 0x14]
push ecx
push 0x5de
mov ecx, ebx
call fcn.00483166
push 0x548c
lea edx, [esp + 0x14]
push edx
call fcn.00410a90
lea ecx, [ebx + 0x520]
push eax
mov byte [esp + 0xb4], 0x19
call fcn.00404a50
mov byte [esp + 0xb0], 7
mov eax, dword [esp + 0x10]
add eax, 0xfffffff0
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x406e40
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
lea esi, [ebx + 0x528]
mov edi, ebx
mov ecx, esi
call fcn.0042c8c0
call fcn.0042ca40
mov edi, esi
call fcn.0042c990
mov ecx, dword [esi + 0x20]
push 0x105
push 0
mov eax, 0xffffff
push 0
push ecx
mov dword [esi + 0x68], eax
mov dword [esi + 0x6c], eax
call dword [sym.imp.USER32.dll_RedrawWindow]
mov eax, dword [ebx + 0x5bc]
mov ecx, dword [ebx + 0x5b8]
mov edx, 1
sub eax, 0xe
mov esi, edx
mov dword [esp + 0x20], edx
lea edx, [esp + 0x20]
mov dword [esp + 0x2c], eax
push edx
lea eax, [ebx + 0x5a8]
sub ecx, 0xe
push eax
mov dword [esp + 0x2c], esi
mov dword [esp + 0x30], ecx
call dword [sym.imp.USER32.dll_CopyRect]
mov ecx, dword [ebx + 0x20]
mov esi, dword [sym.imp.USER32.dll_SetTimer]
push 0
push 0x3e8
push 0x3d
push ecx
call esi
mov edx, dword [ebx + 0x20]
push 0
push 0x493e0
push 0x3e
push edx
call esi
mov eax, dword [ebx + 0x470]
mov ecx, dword [ebx + 0x46c]
push 0x40
push eax
push ecx
push 0
push 0
push 0
mov ecx, ebx
call fcn.004834ee
mov byte [esp + 0xb0], 1
mov eax, dword [esp + 0x14]
add eax, 0xfffffff0
lea edx, [eax + 0xc]
or ecx, 0xffffffff
lock xadd dword [edx], ecx
dec ecx
test ecx, ecx
jg 0x406f1d
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
mov byte [esp + 0xb0], 0
mov eax, dword [esp + 0x18]
add eax, 0xfffffff0
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x406f45
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
mov dword [esp + 0xb0], 0xffffffff
mov eax, dword [esp + 0x1c]
add eax, 0xfffffff0
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x406f70
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
mov eax, 1
mov ecx, dword [esp + 0xa8]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov ecx, dword [esp + 0x90]
xor ecx, esp
call fcn.00493ab4
mov esp, ebp
pop ebp
ret