Function at 0x4192f0
Capabilities:
Create process on windows
Read .ini file
Reference cloudflare dns server

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x581843
mov eax, dword fs:[0]
push eax
sub esp, 0x808
mov eax, dword [0x61b660]
xor eax, ebp
mov dword [ebp - 0x10], eax
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov dword [ebp - 0x7c0], ecx
mov ecx, dword [ebp - 0x7c0]
call fcn.0042c27a
push 0
mov eax, dword [ebp - 0x7c0]
mov ecx, dword [eax + 0x20]
push ecx
call dword [sym.imp.USER32.dll_GetSystemMenu]
push eax
call fcn.00438460
mov dword [ebp - 0x274], eax
cmp dword [ebp - 0x274], 0
je 0x41940f
call fcn.0042a53b
push eax
lea ecx, [ebp - 0x4bc]
call fcn.0040ab50
mov dword [ebp - 4], 0
push 0x65
call fcn.0042bcb2
mov dword [ebp - 0x6e0], eax
cmp dword [ebp - 0x6e0], 0
jne 0x419387
jmp 0x41939b
push 0x65
mov edx, dword [ebp - 0x6e0]
push edx
lea ecx, [ebp - 0x4bc]
call fcn.0040a980
mov eax, dword [ebp - 0x4bc]
mov ecx, dword [eax - 0xc]
mov dword [ebp - 0x6e4], ecx
xor edx, edx
cmp dword [ebp - 0x6e4], 0
sete dl
movzx eax, dl
test eax, eax
jne 0x4193fd
push 0
push 0
push 0x800
mov ecx, dword [ebp - 0x274]
mov edx, dword [ecx + 4]
push edx
call dword [sym.imp.USER32.dll_AppendMenuA]
mov eax, dword [ebp - 0x4bc]
mov dword [ebp - 0x6e8], eax
mov ecx, dword [ebp - 0x6e8]
push ecx
push 0x10
push 0
mov edx, dword [ebp - 0x274]
mov eax, dword [edx + 4]
push eax
call dword [sym.imp.USER32.dll_AppendMenuA]
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x4bc]
call fcn.0040abb0
mov ecx, dword [ebp - 0x7c0]
mov edx, dword [ecx + 0x94]
mov dword [ebp - 0x6f0], edx
mov eax, dword [ebp - 0x6f0]
push eax
push 1
push 0x80
mov ecx, dword [ebp - 0x7c0]
mov edx, dword [ecx + 0x20]
push edx
call dword [sym.imp.USER32.dll_SendMessageA]
mov eax, dword [ebp - 0x7c0]
mov ecx, dword [eax + 0x94]
mov dword [ebp - 0x6f4], ecx
mov edx, dword [ebp - 0x6f4]
push edx
push 0
push 0x80
mov eax, dword [ebp - 0x7c0]
mov ecx, dword [eax + 0x20]
push ecx
call dword [sym.imp.USER32.dll_SendMessageA]
mov byte [ebp - 0x140], 0
xor edx, edx
mov dword [ebp - 0x13f], edx
mov dword [ebp - 0x13b], edx
mov dword [ebp - 0x137], edx
mov dword [ebp - 0x133], edx
mov word [ebp - 0x12f], dx
mov byte [ebp - 0x12d], dl
push 1
lea eax, [ebp - 0x140]
push eax
call dword [sym.imp.ADVAPI32.dll_InitializeSecurityDescriptor]
push 0
push 0
push 1
lea ecx, [ebp - 0x140]
push ecx
call dword [sym.imp.ADVAPI32.dll_SetSecurityDescriptorDacl]
mov dword [ebp - 0x270], 0
xor edx, edx
mov dword [ebp - 0x26c], edx
mov dword [ebp - 0x268], edx
mov dword [ebp - 0x270], 0xc
lea eax, [ebp - 0x140]
mov dword [ebp - 0x26c], eax
mov dword [ebp - 0x268], 1
push str.SuixinSearch_Event
push 0
push 1
lea ecx, [ebp - 0x270]
push ecx
call dword [sym.imp.KERNEL32.dll_CreateEventA]
mov dword [ebp - 0x4b8], eax
mov edx, dword [ebp - 0x7c0]
mov eax, dword [edx + 0x20]
mov dword [0x62cb28], eax
push 0x430
mov ecx, dword [ebp - 0x7c0]
mov edx, dword [ecx + 0x20]
push edx
mov ecx, dword [0x62905c]
call fcn.00427950
push 0
push 0
push 0
push 0
mov eax, dword [ebp - 0x7c0]
push eax
push 0x41e250
call fcn.00434b88
lea ecx, [ebp - 0x6fd]
mov dword [ebp - 0x6fc], ecx
lea edx, [ebp - 0x12c]
mov dword [ebp - 0x7c4], edx
mov dword [ebp - 4], 1
push 0
push 0
lea ecx, [ebp - 0x12c]
call fcn.00406060
mov dword [ebp - 4], 2
push 0
lea eax, [ebp - 0x12c]
push eax
call fcn.00405660
add esp, 8
push str.SuixinSearch_
call fcn.005291f0
add esp, 4
mov dword [ebp - 0x704], eax
mov ecx, dword [ebp - 0x704]
push ecx
push str.SuixinSearch_
lea ecx, [ebp - 0x12c]
call fcn.00406360
cmp dword [ebp - 0x118], 0x10
jb 0x4195db
mov edx, dword [ebp - 0x12c]
mov dword [ebp - 0x7c8], edx
jmp 0x4195e7
lea eax, [ebp - 0x12c]
mov dword [ebp - 0x7c8], eax
mov ecx, dword [ebp - 0x7c8]
push ecx
call dword [sym.imp.imagehlp.dll_MakeSureDirectoryPathExists]
push str.StartInfo.ini
lea edx, [ebp - 0x12c]
push edx
lea eax, [ebp - 0x2c]
push eax
call fcn.0040e850
add esp, 0xc
mov dword [ebp - 0x7cc], eax
mov ecx, dword [ebp - 0x7cc]
mov dword [ebp - 0x708], ecx
mov byte [ebp - 4], 3
mov edx, dword [ebp - 0x708]
push edx
mov ecx, dword [ebp - 0x7c0]
add ecx, 0x56c
call fcn.00405ab0
mov byte [ebp - 4], 4
push 0
push 1
lea ecx, [ebp - 0x2c]
call fcn.00406060
mov byte [ebp - 4], 2
mov eax, dword [ebp - 0x7c0]
add eax, 0x56c
mov dword [ebp - 0x70c], eax
mov ecx, dword [ebp - 0x70c]
cmp dword [ecx + 0x14], 0x10
jb 0x41967b
mov edx, dword [ebp - 0x70c]
mov eax, dword [edx]
mov dword [ebp - 0x7d0], eax
jmp 0x419687
mov ecx, dword [ebp - 0x70c]
mov dword [ebp - 0x7d0], ecx
mov edx, dword [ebp - 0x7d0]
push edx
push 0x5c2398
push str.showabout
push str.StartInfo
call dword [sym.imp.KERNEL32.dll_WritePrivateProfileStringA]
mov eax, dword [ebp - 0x7c0]
add eax, 0x56c
mov dword [ebp - 0x710], eax
mov ecx, dword [ebp - 0x710]
cmp dword [ecx + 0x14], 0x10
jb 0x4196d0
mov edx, dword [ebp - 0x710]
mov eax, dword [edx]
mov dword [ebp - 0x7d4], eax
jmp 0x4196dc
mov ecx, dword [ebp - 0x710]
mov dword [ebp - 0x7d4], ecx
mov edx, dword [ebp - 0x7d4]
push edx
push 0x5c2398
push str.showfeedback
push str.StartInfo
call dword [sym.imp.KERNEL32.dll_WritePrivateProfileStringA]
mov ecx, dword [ebp - 0x7c0]
call fcn.00424730
mov byte [ebp - 0x4b4], 0
push 0x103
push 0
lea eax, [ebp - 0x4b3]
push eax
call fcn.00529d40
add esp, 0xc
push str.StartInfo.ini
push 0x62ca68
lea ecx, [ebp - 0x48]
push ecx
call fcn.0040e850
add esp, 0xc
mov dword [ebp - 0x714], eax
mov edx, dword [ebp - 0x714]
cmp dword [edx + 0x14], 0x10
jb 0x419758
mov eax, dword [ebp - 0x714]
mov ecx, dword [eax]
mov dword [ebp - 0x7d8], ecx
jmp 0x419764
mov edx, dword [ebp - 0x714]
mov dword [ebp - 0x7d8], edx
mov eax, dword [ebp - 0x7d8]
push eax
push 0x104
lea ecx, [ebp - 0x4b4]
push ecx
push 0x5a72aa
push str.name
push str.DeskBand
call dword [sym.imp.KERNEL32.dll_GetPrivateProfileStringA]
mov byte [ebp - 4], 5
push 0
push 1
lea ecx, [ebp - 0x48]
call fcn.00406060
mov byte [ebp - 4], 2
lea edx, [ebp - 0x4b4]
push edx
call fcn.005291f0
add esp, 4
mov dword [ebp - 0x718], eax
mov eax, dword [ebp - 0x718]
push eax
lea ecx, [ebp - 0x4b4]
push ecx
mov ecx, dword [ebp - 0x7c0]
add ecx, 0x550
call fcn.004064c0
mov edx, dword [ebp - 0x7c0]
add edx, 0x550
push edx
push 0x62ca68
lea eax, [ebp - 0x64]
push eax
call fcn.00425e00
add esp, 0xc
mov dword [ebp - 0x7dc], eax
mov ecx, dword [ebp - 0x7dc]
mov dword [ebp - 0x720], ecx
mov byte [ebp - 4], 6
mov edx, dword [ebp - 0x720]
push edx
mov ecx, dword [ebp - 0x7c0]
add ecx, 0x550
call fcn.00405ab0
mov byte [ebp - 4], 7
push 0
push 1
lea ecx, [ebp - 0x64]
call fcn.00406060
mov byte [ebp - 4], 2
mov dword [ebp - 0x3a8], 0
mov dword [ebp - 0x278], 0
lea eax, [ebp - 0x278]
push eax
lea ecx, [ebp - 0x3a8]
push ecx
mov ecx, dword [ebp - 0x7c0]
call fcn.0040de70
cmp dword [ebp - 0x278], 0
je 0x419882
push 1
push 0
push 0x232e
mov edx, dword [ebp - 0x278]
push edx
call dword [sym.imp.USER32.dll_SendMessageA]
jmp 0x4198e0
mov eax, dword [ebp - 0x7c0]
add eax, 0x550
mov dword [ebp - 0x724], eax
mov ecx, dword [ebp - 0x724]
cmp dword [ecx + 0x14], 0x10
jb 0x4198af
mov edx, dword [ebp - 0x724]
mov eax, dword [edx]
mov dword [ebp - 0x7e0], eax
jmp 0x4198bb
mov ecx, dword [ebp - 0x724]
mov dword [ebp - 0x7e0], ecx
push 5
push 0
push 0x5c2358
mov edx, dword [ebp - 0x7e0]
push edx
push str.open
mov eax, dword [ebp - 0x7c0]
mov ecx, dword [eax + 0x20]
push ecx
call dword [sym.imp.SHELL32.dll_ShellExecuteA]
mov byte [ebp - 0x264], 0
push 0x103
push 0
lea edx, [ebp - 0x263]
push edx
call fcn.00529d40
add esp, 0xc
push 0x104
lea eax, [ebp - 0x264]
push eax
push 0
call dword [sym.imp.KERNEL32.dll_GetModuleFileNameA]
push str.StartInfo.ini
lea ecx, [ebp - 0x12c]
push ecx
lea edx, [ebp - 0x80]
push edx
call fcn.0040e850
add esp, 0xc
mov dword [ebp - 0x728], eax
mov eax, dword [ebp - 0x728]
cmp dword [eax + 0x14], 0x10
jb 0x41994b
mov ecx, dword [ebp - 0x728]
mov edx, dword [ecx]
mov dword [ebp - 0x7e4], edx
jmp 0x419957
mov eax, dword [ebp - 0x728]
mov dword [ebp - 0x7e4], eax
mov ecx, dword [ebp - 0x7e4]
push ecx
lea edx, [ebp - 0x264]
push edx
push str.ExePath
push str.StartInfo
call dword [sym.imp.KERNEL32.dll_WritePrivateProfileStringA]
mov byte [ebp - 4], 8
push 0
push 1
lea ecx, [ebp - 0x80]
call fcn.00406060
mov byte [ebp - 4], 2
push 0x104
push 0
lea eax, [ebp - 0x264]
push eax
call fcn.00529d40
add esp, 0xc
push str.Defaultconfig.ini
push 0x62bcac
lea ecx, [ebp - 0x9c]
push ecx
call fcn.0040e850
add esp, 0xc
mov dword [ebp - 0x72c], eax
mov edx, dword [ebp - 0x72c]
cmp dword [edx + 0x14], 0x10
jb 0x4199da
mov eax, dword [ebp - 0x72c]
mov ecx, dword [eax]
mov dword [ebp - 0x7e8], ecx
jmp 0x4199e6
mov edx, dword [ebp - 0x72c]
mov dword [ebp - 0x7e8], edx
mov eax, dword [ebp - 0x7e8]
push eax
push 0x104
lea ecx, [ebp - 0x264]
push ecx
push 0x5c2398
push str.downbtn
push str.Browser
call dword [sym.imp.KERNEL32.dll_GetPrivateProfileStringA]
mov byte [ebp - 4], 9
push 0
push 1
lea ecx, [ebp - 0x9c]
call fcn.00406060
mov byte [ebp - 4], 2
lea edx, [ebp - 0x264]
push edx
call fcn.00529782
add esp, 4
mov ecx, dword [ebp - 0x7c0]
mov dword [ecx + 0x540], eax
mov edx, dword [ebp - 0x7c0]
cmp dword [edx + 0x540], 0
je 0x419a5f
mov eax, dword [ebp - 0x7c0]
mov dword [eax + 0x544], 1
mov ecx, dword [ebp - 0x7c0]
call fcn.0041a380
mov ecx, dword [ebp - 0x7c0]
call fcn.0041a410
mov ecx, dword [ebp - 0x7c0]
call fcn.0041da00
mov ecx, dword [ebp - 0x7c0]
cmp dword [ecx + 0x98], 0
je 0x419b36
push 0x3e9
mov edx, dword [ebp - 0x7c0]
mov eax, dword [edx + 0x98]
mov ecx, dword [ebp - 0x7c0]
mov ecx, dword [ecx + 0x98]
mov edx, dword [eax]
mov eax, dword [edx + 0x84]
call eax
mov dword [ebp - 0x4c0], eax
cmp dword [ebp - 0x4c0], 0
jne 0x419ae7
push 0x3e9
push str.Cant_find_the_ctrl:__d
push 0xff
lea ecx, [ebp - 0x5c4]
push ecx
call fcn.0052db44
add esp, 0x10
cmp dword [ebp - 0x4c0], 0
je 0x419b36
mov edx, dword [ebp - 0x7c0]
add edx, 0x9c
push edx
push 0x7d4
mov eax, dword [ebp - 0x4c0]
mov edx, dword [eax]
mov ecx, dword [ebp - 0x4c0]
mov eax, dword [edx]
call eax
test eax, eax
jne 0x419b36
push 0x3e9
push str.QueryInterface_failed__ctrl:__d
push 0xff
lea ecx, [ebp - 0x6c4]
push ecx
call fcn.0052db44
add esp, 0x10
xor edx, edx
jne 0x419a80
sub esp, 0x1c
mov eax, esp
mov dword [ebp - 0x6c8], esp
mov dword [ebp - 0x73c], eax
lea ecx, [ebp - 0x735]
mov dword [ebp - 0x734], ecx
mov edx, dword [ebp - 0x73c]
mov dword [ebp - 0x7ec], edx
mov byte [ebp - 4], 0xa
push 0
push 0
mov ecx, dword [ebp - 0x73c]
call fcn.00406060
mov eax, dword [0x5a6ffc]
push eax
push 0
push 0x62f7a4
mov ecx, dword [ebp - 0x73c]
call fcn.00405c70
mov byte [ebp - 4], 2
mov ecx, dword [ebp - 0x73c]
mov dword [ebp - 0x7f0], ecx
mov byte [ebp - 4], 0xb
sub esp, 0x1c
mov edx, esp
mov dword [ebp - 0x6cc], esp
mov dword [ebp - 0x74c], edx
lea eax, [ebp - 0x745]
mov dword [ebp - 0x744], eax
mov ecx, dword [ebp - 0x74c]
mov dword [ebp - 0x7f4], ecx
mov byte [ebp - 4], 0xc
push 0
push 0
mov ecx, dword [ebp - 0x74c]
call fcn.00406060
mov edx, dword [0x5a6ffc]
push edx
push 0
push 0x63051c
mov ecx, dword [ebp - 0x74c]
call fcn.00405c70
mov byte [ebp - 4], 0xb
mov eax, dword [ebp - 0x74c]
mov dword [ebp - 0x7f8], eax
mov ecx, dword [ebp - 0x7c0]
mov ecx, dword [ecx + 0x9c]
mov edx, dword [ebp - 0x7c0]
mov eax, dword [edx + 0x9c]
mov edx, dword [eax]
mov byte [ebp - 4], 2
mov eax, dword [edx + 0x2c]
call eax
mov ecx, dword [ebp - 0x7c0]
call fcn.0041c650
mov ecx, dword [ebp - 0x7c0]
add ecx, 0x160
sub esp, 0x10
mov edx, esp
mov dword [ebp - 0x6d0], esp
push ecx
mov ecx, edx
call fcn.0040e520
mov dword [ebp - 0x7fc], eax
mov eax, dword [ebp - 0x7c0]
mov ecx, dword [eax + 0x9c]
mov edx, dword [ebp - 0x7c0]
mov eax, dword [edx + 0x9c]
mov edx, dword [ecx]
mov ecx, eax
mov eax, dword [edx + 0xc]
call eax
mov ecx, dword [ebp - 0x7c0]
add ecx, 0x150
push ecx
mov edx, dword [ebp - 0x7c0]
mov eax, dword [edx + 0x20]
push eax
call dword [sym.imp.USER32.dll_GetWindowRect]
push 0
push 0
push 0
push 0
mov ecx, dword [ebp - 0x7c0]
push ecx
push 0x41cf70
call fcn.00434b88
push 0
push 0
push 0
push 0
mov edx, dword [ebp - 0x7c0]
push edx
push 0x41d4a0
call fcn.00434b88
push 0
push 0
push 0
push 0
mov eax, dword [ebp - 0x7c0]
push eax
push 0x41d560
call fcn.00434b88
push 0x40
call fcn.0042a49a
add esp, 4
mov dword [ebp - 0x6d8], eax
mov byte [ebp - 4], 0xd
cmp dword [ebp - 0x6d8], 0
je 0x419d21
mov ecx, dword [ebp - 0x7c0]
mov edx, dword [ecx + 0x20]
push edx
mov ecx, dword [ebp - 0x6d8]
call fcn.005714f0
mov dword [ebp - 0x800], eax
jmp 0x419d2b
mov dword [ebp - 0x800], 0
mov eax, dword [ebp - 0x800]
mov dword [ebp - 0x6d4], eax
mov byte [ebp - 4], 2
mov ecx, dword [ebp - 0x6d4]
mov dword [0x62cb1c], ecx
push 2
mov ecx, dword [0x62cb1c]
call fcn.00574ab0
mov ecx, dword [0x62cb1c]
call fcn.005722f0
mov ecx, dword [ebp - 0x7c0]
call fcn.0041e2e0
mov ecx, dword [ebp - 0x7c0]
call fcn.004213b0
lea edx, [ebp - 0x755]
mov dword [ebp - 0x754], edx
lea eax, [ebp - 0x15c]
mov dword [ebp - 0x804], eax
mov byte [ebp - 4], 0xe
push 0
push 0
lea ecx, [ebp - 0x15c]
call fcn.00406060
mov byte [ebp - 4], 0xf
push str.skinConfigDefaultconfig.ini
push 0x62ca68
lea ecx, [ebp - 0xb8]
push ecx
call fcn.0040e850
add esp, 0xc
mov dword [ebp - 0x808], eax
mov edx, dword [ebp - 0x808]
mov dword [ebp - 0x75c], edx
mov byte [ebp - 4], 0x10
mov eax, dword [ebp - 0x75c]
push eax
lea ecx, [ebp - 0x15c]
call fcn.00405ab0
mov byte [ebp - 4], 0x11
push 0
push 1
lea ecx, [ebp - 0xb8]
call fcn.00406060
mov byte [ebp - 4], 0xf
cmp dword [ebp - 0x148], 0x10
jb 0x419e13
mov ecx, dword [ebp - 0x15c]
mov dword [ebp - 0x80c], ecx
jmp 0x419e1f
lea edx, [ebp - 0x15c]
mov dword [ebp - 0x80c], edx
mov eax, dword [ebp - 0x80c]
push eax
push 0x100
lea ecx, [ebp - 0x3a4]
push ecx
push 0x5bf594
push str.user
push 0x5c2324
call dword [sym.imp.KERNEL32.dll_GetPrivateProfileStringA]
lea edx, [ebp - 0x3a4]
push edx
call fcn.00529782
add esp, 4
mov dword [ebp - 0x280], eax
push 0xa
lea eax, [ebp - 0x3a4]
push eax
mov ecx, dword [ebp - 0x280]
push ecx
call fcn.00579bbd
add esp, 0xc
lea edx, [ebp - 0x3a4]
push edx
call fcn.005291f0
add esp, 4
mov dword [ebp - 0x768], eax
mov eax, dword [ebp - 0x768]
push eax
lea ecx, [ebp - 0x3a4]
push ecx
mov ecx, dword [ebp - 0x7c0]
add ecx, 0x460
call fcn.004064c0
mov byte [ebp - 0x110], 0
xor edx, edx
mov dword [ebp - 0x10f], edx
mov dword [ebp - 0x10b], edx
mov dword [ebp - 0x107], edx
mov dword [ebp - 0x103], edx
mov dword [ebp - 0xff], edx
mov dword [ebp - 0xfb], edx
mov dword [ebp - 0xf7], edx
mov word [ebp - 0xf3], dx
mov byte [ebp - 0xf1], dl
push str.version.ini
push 0x62ca68
lea eax, [ebp - 0xd4]
push eax
call fcn.0040e850
add esp, 0xc
mov dword [ebp - 0x774], eax
mov ecx, dword [ebp - 0x774]
cmp dword [ecx + 0x14], 0x10
jb 0x419f23
mov edx, dword [ebp - 0x774]
mov eax, dword [edx]
mov dword [ebp - 0x810], eax
jmp 0x419f2f
mov ecx, dword [ebp - 0x774]
mov dword [ebp - 0x810], ecx
mov edx, dword [ebp - 0x810]
push edx
push 0x20
lea eax, [ebp - 0x110]
push eax
push str.1.0.0.1
push str.version
push str.version
call dword [sym.imp.KERNEL32.dll_GetPrivateProfileStringA]
mov byte [ebp - 4], 0x12
push 0
push 1
lea ecx, [ebp - 0xd4]
call fcn.00406060
mov byte [ebp - 4], 0xf
lea ecx, [ebp - 0x110]
push ecx
call fcn.005291f0
add esp, 4
mov dword [ebp - 0x780], eax
mov edx, dword [ebp - 0x780]
push edx
lea eax, [ebp - 0x110]
push eax
mov ecx, dword [ebp - 0x7c0]
add ecx, 0x444
call fcn.004064c0
push 0x20
push 0
lea ecx, [ebp - 0x2a0]
push ecx
call fcn.00529d40
add esp, 0xc
push str._skinConfigDefaultconfig.ini
push 0x62ca68
lea edx, [ebp - 0xf0]
push edx
call fcn.0040e850
add esp, 0xc
mov dword [ebp - 0x78c], eax
mov eax, dword [ebp - 0x78c]
cmp dword [eax + 0x14], 0x10
jb 0x419fed
mov ecx, dword [ebp - 0x78c]
mov edx, dword [ecx]
mov dword [ebp - 0x814], edx
jmp 0x419ff9
mov eax, dword [ebp - 0x78c]
mov dword [ebp - 0x814], eax
mov ecx, dword [ebp - 0x814]
push ecx
push 0x20
lea edx, [ebp - 0x2a0]
push edx
push 0x5bf5b8
push str.soft
push 0x5c2324
call dword [sym.imp.KERNEL32.dll_GetPrivateProfileStringA]
mov byte [ebp - 4], 0x13
push 0
push 1
lea ecx, [ebp - 0xf0]
call fcn.00406060
mov byte [ebp - 4], 0xf
lea eax, [ebp - 0x2a0]
push eax
call fcn.005291f0
add esp, 4
mov dword [ebp - 0x798], eax
mov ecx, dword [ebp - 0x798]
push ecx
lea edx, [ebp - 0x2a0]
push edx
mov ecx, dword [ebp - 0x7c0]
add ecx, 0x428
call fcn.004064c0
push 0
push 0
push 0
push 0
mov eax, dword [ebp - 0x7c0]
push eax
push 0x420fd0
call fcn.00434b88
push 0
push 0
push 0
push 0
mov ecx, dword [ebp - 0x7c0]
push ecx
push 0x421630
call fcn.00434b88
push 0
push 0
push 0
push 0
mov edx, dword [ebp - 0x7c0]
push edx
push 0x424550
call fcn.00434b88
call fcn.004375ed
mov eax, dword [eax + 4]
mov dword [ebp - 0x7a4], eax
mov ecx, dword [ebp - 0x7a4]
mov edx, dword [ecx + 0x48]
mov dword [ebp - 0x27c], edx
push str._GetFromDeskBand_
mov eax, dword [ebp - 0x27c]
push eax
call fcn.00529cb0
add esp, 8
test eax, eax
je 0x41a101
push str.start
mov ecx, dword [ebp - 0x27c]
push ecx
call fcn.00529cb0
add esp, 8
test eax, eax
jne 0x41a10e
push 0
mov ecx, dword [ebp - 0x7c0]
call fcn.00424850
mov dword [ebp - 0x6dc], 1
mov byte [ebp - 4], 0x14
push 0
push 1
lea ecx, [ebp - 0x15c]
call fcn.00406060
mov byte [ebp - 4], 2
mov dword [ebp - 4], 0x15
push 0
push 1
lea ecx, [ebp - 0x12c]
call fcn.00406060
mov dword [ebp - 4], 0xffffffff
mov eax, dword [ebp - 0x6dc]
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
mov ecx, dword [ebp - 0x10]
xor ecx, ebp
call fcn.0052927b
mov esp, ebp
pop ebp
ret