Function at 0x41ad10
Capabilities:
Contain obfuscated stackstrings
Read .ini file

Disassembly:
push 0xffffffffffffffff
push 0x5216f7
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
sub esp, 0x11c
mov eax, dword [0x565e78]
push ebx
push ebp
push esi
push edi
mov edi, dword [esp + 0x13c]
mov dword [esp + 0x128], eax
mov eax, dword [esp + 0x140]
push eax
push edi
mov ecx, 0x85
call fcn.004044e0
xor ebx, ebx
mov dword [esp + 0x134], ebx
mov dword [edi], method.CDialog.virtual_0
mov dword [edi + 0xa8], ebx
mov dword [edi + 0xac], ebx
mov dword [edi + 0xb0], ebx
mov dword [edi + 0xb8], ebx
mov dword [edi + 0xbc], ebx
mov dword [edi + 0xc0], ebx
lea eax, [edi + 0xc4]
call fcn.004023d0
mov byte [esp + 0x134], 3
call fcn.004fa853
mov edx, dword [eax]
mov ecx, eax
call dword [edx + 0xc]
add eax, 0x10
mov dword [edi + 0x111c], eax
mov byte [esp + 0x134], 4
call fcn.004fa853
mov edx, dword [eax]
mov ecx, eax
call dword [edx + 0xc]
add eax, 0x10
mov dword [edi + 0x1120], eax
mov dword [edi + 0x112c], ebx
mov dword [edi + 0x1130], ebx
mov dword [edi + 0x1134], ebx
mov dword [edi + 0x113c], ebx
mov dword [edi + 0x1140], ebx
mov dword [edi + 0x1144], ebx
mov eax, 0xf
mov dword [edi + 0x1164], eax
mov dword [edi + 0x1160], ebx
mov byte [edi + 0x1150], bl
mov dword [edi + 0x1188], eax
mov dword [edi + 0x1184], ebx
mov byte [edi + 0x1174], bl
mov byte [esp + 0x134], 8
call fcn.004fa853
mov edx, dword [eax]
mov ecx, eax
call dword [edx + 0xc]
add eax, 0x10
mov dword [edi + 0x11a0], eax
mov byte [esp + 0x134], 9
call fcn.004fa853
mov edx, dword [eax]
mov ecx, eax
call dword [edx + 0xc]
add eax, 0x10
mov dword [edi + 0x11a4], eax
push 0x53a3bc
lea ecx, [edi + 0x11a8]
mov byte [esp + 0x138], 0xa
call fcn.00402030
mov byte [esp + 0x134], 0xb
push 0x53a3bc
lea ecx, [edi + 0x11ac]
call fcn.00402030
lea esi, [edi + 0x11b4]
mov byte [esp + 0x134], 0xc
mov ecx, esi
mov dword [edi + 0x11b0], ebx
call fcn.004f7562
mov dword [esi], vtable.CComboBox.0
lea esi, [edi + 0x1204]
mov ecx, esi
mov byte [esp + 0x134], 0xd
call fcn.004f7562
mov dword [esi], vtable.CEdit.0
lea esi, [edi + 0x1254]
mov ecx, esi
mov byte [esp + 0x134], 0xe
call fcn.004f7562
mov dword [esi], vtable.CComboBox.0
lea ecx, [edi + 0x12a4]
mov byte [esp + 0x134], 0xf
call fcn.004f4c7d
lea eax, [edi + 0x12ac]
push eax
mov byte [esp + 0x138], 0x10
call fcn.00418cc0
lea ecx, [edi + 0x13a4]
push ecx
mov byte [esp + 0x138], 0x11
call fcn.00418cc0
lea edx, [edi + 0x149c]
push edx
mov byte [esp + 0x138], 0x12
call fcn.00418cc0
lea ebp, [edi + 0x1594]
mov ecx, ebp
mov byte [esp + 0x134], 0x13
call fcn.004f7562
mov dword [ebp], 0x53bc60
mov dword [ebp + 0x50], ebx
mov dword [ebp + 0x58], ebx
mov dword [ebp + 0x54], vtable.CBitmap.0
mov esi, 3
mov dword [ebp + 0x74], esi
mov dword [ebp + 0x88], ebx
mov dword [ebp + 0x8c], ebx
mov dword [ebp + 0x78], ebx
mov dword [ebp + 0x7c], 1
mov dword [ebp + 0x80], 2
mov dword [ebp + 0x84], esi
lea ebp, [edi + 0x162c]
mov ecx, ebp
mov byte [esp + 0x134], 0x14
call fcn.004f7562
mov dword [ebp], 0x53bc60
mov dword [ebp + 0x50], ebx
mov dword [ebp + 0x58], ebx
mov dword [ebp + 0x54], vtable.CBitmap.0
mov dword [ebp + 0x74], esi
mov dword [ebp + 0x88], ebx
mov dword [ebp + 0x8c], ebx
mov dword [ebp + 0x78], ebx
mov dword [ebp + 0x7c], 1
mov dword [ebp + 0x80], 2
mov dword [ebp + 0x84], esi
lea ebp, [edi + 0x16c4]
mov ecx, ebp
mov byte [esp + 0x134], 0x15
call fcn.004f7562
mov dword [ebp], 0x53bc60
mov dword [ebp + 0x50], ebx
mov dword [ebp + 0x58], ebx
mov dword [ebp + 0x54], vtable.CBitmap.0
mov dword [ebp + 0x74], esi
mov dword [ebp + 0x88], ebx
mov dword [ebp + 0x8c], ebx
mov dword [ebp + 0x78], ebx
mov dword [ebp + 0x7c], 1
mov dword [ebp + 0x80], 2
mov dword [ebp + 0x84], esi
lea ebp, [edi + 0x175c]
mov ecx, ebp
mov byte [esp + 0x134], 0x16
call fcn.004f7562
mov dword [ebp], 0x53bc60
mov dword [ebp + 0x50], ebx
mov dword [ebp + 0x58], ebx
mov dword [ebp + 0x54], vtable.CBitmap.0
mov dword [ebp + 0x74], esi
mov dword [ebp + 0x88], ebx
mov dword [ebp + 0x8c], ebx
mov dword [ebp + 0x78], ebx
mov dword [ebp + 0x7c], 1
mov dword [ebp + 0x80], 2
mov dword [ebp + 0x84], esi
lea ebp, [edi + 0x17f4]
mov ecx, ebp
mov byte [esp + 0x134], 0x17
call fcn.004f7562
mov dword [ebp], 0x53bc60
mov dword [ebp + 0x50], ebx
mov dword [ebp + 0x58], ebx
mov dword [ebp + 0x54], vtable.CBitmap.0
mov dword [ebp + 0x74], esi
mov dword [ebp + 0x88], ebx
mov dword [ebp + 0x8c], ebx
mov dword [ebp + 0x78], ebx
mov dword [ebp + 0x7c], 1
mov dword [ebp + 0x80], 2
mov dword [ebp + 0x84], esi
lea ebp, [edi + 0x188c]
mov ecx, ebp
mov byte [esp + 0x134], 0x18
call fcn.004f7562
mov dword [ebp], 0x53bc60
mov dword [ebp + 0x50], ebx
mov dword [ebp + 0x58], ebx
mov dword [ebp + 0x54], vtable.CBitmap.0
mov dword [ebp + 0x74], esi
mov dword [ebp + 0x88], ebx
mov dword [ebp + 0x8c], ebx
mov dword [ebp + 0x78], ebx
mov dword [ebp + 0x7c], 1
mov dword [ebp + 0x80], 2
mov dword [ebp + 0x84], esi
lea ebp, [edi + 0x1924]
mov ecx, ebp
mov byte [esp + 0x134], 0x19
call fcn.004f7562
mov dword [ebp], 0x53bc60
mov dword [ebp + 0x50], ebx
mov dword [ebp + 0x58], ebx
mov dword [ebp + 0x54], vtable.CBitmap.0
mov dword [ebp + 0x74], esi
mov dword [ebp + 0x88], ebx
mov dword [ebp + 0x8c], ebx
mov dword [ebp + 0x78], ebx
mov dword [ebp + 0x7c], 1
mov dword [ebp + 0x80], 2
mov dword [ebp + 0x84], esi
lea ebp, [edi + 0x19bc]
mov ecx, ebp
mov byte [esp + 0x134], 0x1a
call fcn.004f7562
mov dword [ebp], 0x53bc60
mov dword [ebp + 0x50], ebx
mov dword [ebp + 0x58], ebx
mov dword [ebp + 0x54], vtable.CBitmap.0
mov dword [ebp + 0x74], esi
mov dword [ebp + 0x88], ebx
mov dword [ebp + 0x8c], ebx
mov dword [ebp + 0x78], ebx
mov dword [ebp + 0x7c], 1
mov dword [ebp + 0x80], 2
mov dword [ebp + 0x84], esi
lea ebp, [edi + 0x1a54]
mov ecx, ebp
mov byte [esp + 0x134], 0x1b
call fcn.004f7562
mov dword [ebp], 0x53bc60
mov dword [ebp + 0x50], ebx
mov dword [ebp + 0x58], ebx
mov dword [ebp + 0x54], vtable.CBitmap.0
mov dword [ebp + 0x74], esi
mov dword [ebp + 0x88], ebx
mov dword [ebp + 0x8c], ebx
mov dword [ebp + 0x78], ebx
mov dword [ebp + 0x7c], 1
mov dword [ebp + 0x80], 2
mov dword [ebp + 0x84], esi
mov byte [esp + 0x134], 0x1c
lea ebp, [edi + 0x1af4]
call fcn.004fa853
mov edx, dword [eax]
mov ecx, eax
call dword [edx + 0xc]
add eax, 0x10
mov dword [ebp], eax
lea ecx, [edi + 0x1af8]
mov byte [esp + 0x134], 0x1d
call fcn.004f7562
mov byte [esp + 0x134], 0x1e
mov byte [edi + 0x1b48], bl
mov dword [edi + 0x1b4c], ebx
call fcn.004fa853
mov edx, dword [eax]
mov ecx, eax
call dword [edx + 0xc]
add eax, 0x10
mov dword [edi + 0x1b50], eax
mov eax, 0xf
mov dword [edi + 0x1b6c], eax
mov dword [edi + 0x1b68], ebx
mov byte [edi + 0x1b58], bl
mov dword [edi + 0x1b88], eax
mov dword [edi + 0x1b84], ebx
mov byte [edi + 0x1b74], bl
mov dword [edi + 0x1bac], eax
mov dword [edi + 0x1ba8], ebx
mov byte [edi + 0x1b98], bl
mov dword [edi + 0x1bcc], eax
mov dword [edi + 0x1bc8], ebx
mov byte [edi + 0x1bb8], bl
mov dword [edi + 0x1be8], eax
mov dword [edi + 0x1be4], ebx
mov byte [edi + 0x1bd4], bl
mov dword [edi + 0x1c04], eax
mov dword [edi + 0x1c00], ebx
mov byte [edi + 0x1bf0], bl
lea eax, [edi + 0x1c2c]
push eax
mov byte [esp + 0x138], 0x21
call fcn.00418cc0
lea ecx, [edi + 0x1d24]
push ecx
mov byte [esp + 0x138], 0x22
call fcn.00418cc0
mov byte [esp + 0x134], 0x23
lea esi, [edi + 0x1e1c]
mov ecx, esi
call fcn.004f7562
mov dword [esi], vtable.CButton.0
lea esi, [edi + 0x1e6c]
mov ecx, esi
mov byte [esp + 0x134], 0x24
call fcn.004f7562
mov dword [esi], vtable.CButton.0
lea esi, [edi + 0x1ebc]
mov ecx, esi
mov byte [esp + 0x134], 0x25
call fcn.004f7562
mov dword [esi], vtable.CButton.0
lea esi, [edi + 0x1f0c]
mov ecx, esi
mov byte [esp + 0x134], 0x26
call fcn.004f7562
mov dword [esi], vtable.CEdit.0
lea esi, [edi + 0x1f5c]
mov ecx, esi
mov byte [esp + 0x134], 0x27
call fcn.004f7562
mov dword [esi], vtable.CEdit.0
lea esi, [edi + 0x1fac]
mov ecx, esi
mov byte [esp + 0x134], 0x28
call fcn.004f7562
mov dword [esi], vtable.CEdit.0
lea esi, [edi + 0x1ffc]
mov ecx, esi
mov byte [esp + 0x134], 0x29
call fcn.004f7562
mov dword [esi], vtable.CEdit.0
push ebx
lea edx, [edi + 0x204c]
push edx
mov byte [esp + 0x13c], 0x2a
call fcn.00478a20
mov ecx, edi
mov byte [esp + 0x134], 0x2b
call fcn.0041bd20
mov eax, dword [str.widkiode]
mov ecx, dword [0x5404ac]
mov dl, byte [0x5404b0]
mov dword [esp + 0x18], eax
mov dword [esp + 0x1c], ecx
mov eax, 9
lea ecx, [esp + 0x18]
lea esi, [edi + 0xc4]
mov byte [esp + 0x20], dl
call fcn.00402430
push ebx
call fcn.004b3f89
push eax
call fcn.004b4235
add esp, 8
push edi
mov dword [edi + 0x12fc], ebx
mov dword [edi + 0x13f4], ebx
mov dword [edi + 0x1c7c], ebx
mov dword [edi + 0x1d74], ebx
mov dword [edi + 0x14ec], ebx
call fcn.0041d430
push edi
call fcn.0041bfa0
push 8
call fcn.004fa746
add esp, 4
cmp eax, ebx
je 0x41b46c
mov dword [eax + 4], ebx
mov dword [eax], vtable.CBrush.0
mov esi, eax
jmp 0x41b46e
xor esi, esi
mov eax, dword [edi + 0x90]
cmp eax, ebx
mov dword [edi + 0x1aec], esi
jne 0x41b482
xor eax, eax
jmp 0x41b485
mov eax, dword [eax + 4]
push eax
call dword [sym.imp.GDI32.dll_CreatePatternBrush]
push eax
mov ecx, esi
call fcn.004ffb1f
push 0x56b5e8
lea ecx, [esp + 0x14]
call fcn.00402030
mov eax, 0x56b5e8
mov byte [esp + 0x134], 0x2c
lea esi, [eax + 1]
mov cl, byte [eax]
inc eax
cmp cl, bl
jne 0x41b4b2
sub eax, esi
push eax
push 0x56b5e8
lea ecx, [esp + 0x18]
call fcn.00401f00
push 0x18
push str.imglogindlgLayOut.ini
lea ecx, [esp + 0x18]
call fcn.00401a20
push str.Advertisement
lea ecx, [esp + 0x18]
call fcn.00402030
mov byte [esp + 0x134], 0x2d
mov eax, dword [esp + 0x10]
mov ecx, dword [esp + 0x14]
push eax
push ebx
push str.height
push ecx
call dword [sym.imp.KERNEL32.dll_GetPrivateProfileIntA]
push 0xd
push str.Advertisement
lea ecx, [esp + 0x1c]
mov dword [edi + 0x1af0], eax
call fcn.00401f00
mov edx, dword [esp + 0x10]
mov ecx, dword [esp + 0x14]
push edx
push 0x104
lea eax, [esp + 0x2c]
push eax
push str.about:blank
push 0x540470
push ecx
call dword [sym.imp.KERNEL32.dll_GetPrivateProfileStringA]
lea eax, [esp + 0x24]
lea esi, [eax + 1]
mov cl, byte [eax]
inc eax
cmp cl, bl
jne 0x41b547
sub eax, esi
push eax
lea edx, [esp + 0x28]
push edx
mov ecx, ebp
call fcn.00401f00
mov byte [esp + 0x134], 0x2c
mov eax, dword [esp + 0x14]
add eax, 0xfffffff0
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x41b583
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
call dword [edx + 4]
mov byte [esp + 0x134], 0x2b
mov eax, dword [esp + 0x10]
add eax, 0xfffffff0
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x41b5a9
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
call dword [edx + 4]
mov ecx, dword [esp + 0x12c]
mov eax, edi
pop edi
pop esi
pop ebp
mov dword fs:[0], ecx
mov ecx, dword [esp + 0x11c]
pop ebx
call fcn.004b6cac
add esp, 0x128
ret 8