Function at 0x4163a0
Capabilities:
Enumerate gui resources
Read .ini file

Disassembly:
mov eax, dword fs:[0]
push 0xffffffffffffffff
push 0x493b92
push eax
mov dword fs:[0], esp
sub esp, 0x14
push ebx
push esi
mov esi, ecx
mov eax, dword [esi + 0x27a8]
xor ebx, ebx
cmp eax, ebx
push edi
mov edi, dword [esi + 0x68a4]
jne 0x416407
cmp edi, ebx
jle 0x416407
push edi
call fcn.0044a4a0
mov ecx, eax
call fcn.00448090
test eax, eax
je 0x416644
push edi
call fcn.0044a4a0
mov ecx, eax
call fcn.00449ce0
pop edi
pop esi
pop ebx
mov ecx, dword [esp + 0x14]
mov dword fs:[0], ecx
add esp, 0x20
ret
call fcn.0044a4a0
mov ecx, eax
call fcn.00447010
test eax, eax
jne 0x41642f
pop edi
mov dword [esi + 0x27a8], ebx
pop esi
pop ebx
mov ecx, dword [esp + 0x14]
mov dword fs:[0], ecx
add esp, 0x20
ret
mov ecx, 0x4d8288
call fcn.00402360
cmp eax, ebx
je 0x416445
mov edx, dword [eax]
push ebx
mov ecx, eax
call dword [edx + 8]
push ebp
call fcn.0044a4a0
mov ecx, eax
call fcn.00449560
push ebx
mov ecx, esi
call fcn.004116d0
push 0x4ae4c0
lea ecx, [esp + 0x14]
call dword [sym.imp.MFC71U.DLL_ATL::CStringT::CStringT_2]
mov ecx, 0x4d8288
mov dword [esp + 0x2c], ebx
call fcn.00402b70
mov edi, eax
lea eax, [esp + 0x14]
push eax
mov ecx, 0x4d8288
call fcn.004022e0
mov ebp, eax
mov edx, dword [edi]
push str.UserConfig.ini
mov ecx, edi
mov byte [esp + 0x30], 1
call dword [edx + 0x10]
push edx
push eax
mov eax, dword [ebp]
push eax
lea ecx, [esp + 0x20]
push str._sUsers_I64d_s
push ecx
call dword [sym.imp.MFC71U.DLL_ATL::CStringT::Format]
add esp, 0x18
lea ecx, [esp + 0x14]
mov byte [esp + 0x2c], bl
call dword [sym.imp.MFC71U.DLL_ATL::CSimpleStringT::CSimpleStringT]
mov edx, dword [esp + 0x10]
push edx
push 0x47
push str.HotKey
push str.System
call dword [sym.imp.KERNEL32.dll_GetPrivateProfileIntW]
push ebx
push eax
mov ecx, 0x4d8288
call fcn.00401bd0
lea ebp, [esi + 0x842c]
push ebp
mov dword [esp + 0x18], ebp
call dword [sym.imp.KERNEL32.dll_EnterCriticalSection]
mov ecx, dword [esi + 0x6a2c]
cmp ecx, ebx
mov byte [esp + 0x2c], 2
je 0x416512
mov eax, dword [ecx]
push 1
call dword [eax + 4]
mov dword [esi + 0x6a2c], ebx
mov ecx, dword [esi + 0x6a30]
cmp ecx, ebx
je 0x416529
mov edx, dword [ecx]
push 1
call dword [edx + 4]
mov dword [esi + 0x6a30], ebx
mov ecx, 0x4d8288
call fcn.00401b90
lea edi, [esi + 0x8468]
mov ecx, edi
call fcn.00439520
mov ecx, edi
call fcn.004390c0
cmp dword [esi + 0x7fa8], ebx
je 0x41655e
lea eax, [esi + 0x7fa4]
push eax
push 2
call dword [sym.imp.SHELL32.dll_Shell_NotifyIconW]
mov ecx, dword [esi + 0x20]
mov edi, dword [sym.imp.USER32.dll_KillTimer]
push 1
push ecx
mov dword [esi + 0x834c], ebx
mov dword [esi + 0x8350], ebx
call edi
mov edx, dword [esi + 0x20]
push 2
push edx
call edi
lea ecx, [esp + 0x18]
call fcn.004392a0
mov dword [esp + 0x1c], eax
mov dword [esp + 0x20], ebx
lea eax, [esp + 0x18]
push eax
push 0x415a60
mov byte [esp + 0x34], 3
call dword [sym.imp.USER32.dll_EnumWindows]
cmp dword [esp + 0x20], 1
jne 0x4165c8
push ebx
push str.GuaGua_Downloader
call dword [sym.imp.USER32.dll_FindWindowW]
cmp eax, ebx
je 0x4165c8
push ebx
push ebx
push 0x10
push eax
call dword [sym.imp.USER32.dll_PostMessageW]
mov ecx, dword [esi + 0x20]
push 3
push ecx
call edi
mov edx, dword [esi + 0x20]
push 4
push edx
call edi
mov eax, dword [esi + 0x20]
push 5
push eax
call edi
mov ecx, dword [esi + 0x20]
push 6
push ecx
call edi
mov ecx, esi
call sub.MFC71U.DLL_CFieldExchange::Default
mov ecx, dword [esp + 0x1c]
mov eax, dword [ecx]
mov dword [ecx], ecx
mov ecx, dword [esp + 0x1c]
mov dword [ecx + 4], ecx
mov ecx, dword [esp + 0x1c]
cmp eax, ecx
mov dword [esp + 0x20], ebx
je 0x416625
lea ebx, [ebx]
mov esi, dword [eax]
push eax
call sub.MFC71U.DLL_CNoTrackObject::operator_new
mov ecx, dword [esp + 0x20]
add esp, 4
cmp esi, ecx
mov eax, esi
jne 0x416610
push ecx
call sub.MFC71U.DLL_CNoTrackObject::operator_new
add esp, 4
push ebp
mov dword [esp + 0x20], ebx
call dword [sym.imp.KERNEL32.dll_LeaveCriticalSection]
lea ecx, [esp + 0x10]
call dword [sym.imp.MFC71U.DLL_ATL::CSimpleStringT::CSimpleStringT]
pop ebp
mov ecx, dword [esp + 0x20]
pop edi
pop esi
pop ebx
mov dword fs:[0], ecx
add esp, 0x20
ret