Function at 0x405f40
Capabilities:
Read .ini file

Disassembly:
push ebp
mov ebp, esp
and esp, 0xfffffff8
push 0xffffffffffffffff
push 0x50f9c0
mov eax, dword fs:[0]
push eax
sub esp, 0x98
mov eax, dword [0x5416a0]
xor eax, esp
mov dword [esp + 0x90], eax
push ebx
push esi
push edi
mov eax, dword [0x5416a0]
xor eax, esp
push eax
lea eax, [esp + 0xa8]
mov dword fs:[0], eax
mov ebx, ecx
call fcn.0047c107
mov eax, 0x300
mov ecx, 0x400
mov dword [ebx + 0x470], eax
mov dword [ebx + 0x90], eax
mov eax, 1
xor edi, edi
mov dword [ebx + 0x46c], ecx
mov dword [ebx + 0x84], edi
mov dword [ebx + 0x88], edi
mov dword [ebx + 0x8c], ecx
mov dword [ebx + 0x98], eax
mov dword [ebx + 0x94], eax
mov dword [ebx + 0x9c], 0x2fc
mov dword [ebx + 0xa0], 0x243
call fcn.00478c84
xor ecx, ecx
cmp eax, edi
setne cl
cmp ecx, edi
jne 0x405ff6
push 0x80004005
call fcn.00404150
mov edx, dword [eax]
mov ecx, eax
mov eax, dword [edx + 0xc]
call eax
add eax, 0x10
mov dword [esp + 0x1c], eax
push 0x64
lea ecx, [esp + 0x38]
push edi
push ecx
mov dword [esp + 0xbc], edi
call fcn.0049e490
add esp, 0xc
call fcn.0047cf45
mov eax, dword [eax + 8]
push 0x64
lea edx, [esp + 0x38]
push edx
push eax
call dword [sym.imp.KERNEL32.dll_GetModuleFileNameA]
call fcn.00478c84
xor ecx, ecx
cmp eax, edi
setne cl
cmp ecx, edi
jne 0x40604d
push 0x80004005
call fcn.00404150
mov edx, dword [eax]
mov ecx, eax
mov eax, dword [edx + 0xc]
call eax
add eax, 0x10
mov dword [esp + 0x18], eax
lea ecx, [esp + 0x34]
push ecx
lea ecx, [esp + 0x14]
mov byte [esp + 0xb4], 1
call fcn.0040db70
push eax
lea ecx, [esp + 0x1c]
mov byte [esp + 0xb4], 2
call fcn.00404a60
mov byte [esp + 0xb0], 1
mov eax, dword [esp + 0x10]
add eax, 0xfffffff0
lea edx, [eax + 0xc]
or ecx, 0xffffffff
lock xadd dword [edx], ecx
dec ecx
test ecx, ecx
jg 0x4060ad
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
mov esi, dword [esp + 0x18]
push 0x5c
push esi
call fcn.0049728b
add esp, 8
cmp eax, edi
jne 0x4060c5
or esi, 0xffffffff
jmp 0x4060c9
sub eax, esi
mov esi, eax
push esi
lea ecx, [esp + 0x18]
push ecx
lea ecx, [esp + 0x20]
call fcn.00404900
push str.logo.bmp
push eax
lea edx, [esp + 0x18]
push edx
mov byte [esp + 0xbc], 3
call fcn.0040dd60
add esp, 0xc
push eax
lea ecx, [esp + 0x1c]
mov byte [esp + 0xb4], 4
call fcn.00404a60
mov byte [esp + 0xb0], 3
mov eax, dword [esp + 0x10]
add eax, 0xfffffff0
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x40612d
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
mov byte [esp + 0xb0], 1
mov eax, dword [esp + 0x14]
add eax, 0xfffffff0
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x406155
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
push esi
lea ecx, [esp + 0x18]
push ecx
lea ecx, [esp + 0x20]
call fcn.00404900
push str.iSee.dat
push eax
lea edx, [esp + 0x18]
push edx
mov byte [esp + 0xbc], 5
call fcn.0040dd60
add esp, 0xc
push eax
lea ecx, [esp + 0x20]
mov byte [esp + 0xb4], 6
call fcn.00404a60
mov byte [esp + 0xb0], 5
mov eax, dword [esp + 0x10]
add eax, 0xfffffff0
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x4061b9
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
mov byte [esp + 0xb0], 1
mov eax, dword [esp + 0x14]
add eax, 0xfffffff0
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x4061e1
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
mov ecx, dword [esp + 0x1c]
push ecx
push 1
push str.UseDefaultLogo
push str.Logo
call dword [sym.imp.KERNEL32.dll_GetPrivateProfileIntA]
cmp eax, 1
je 0x406237
mov edx, dword [esp + 0x18]
push 0x2050
push edi
push edi
push edi
push edx
push edi
call dword [sym.imp.USER32.dll_LoadImageA]
cmp eax, edi
je 0x40622b
push eax
mov eax, dword [ebx + 0x494]
push edi
push 0x172
push eax
call dword [sym.imp.USER32.dll_SendMessageA]
jmp 0x406237
push edi
lea ecx, [ebx + 0x474]
call fcn.00485693
mov ecx, dword [ebx + 0x88]
mov edx, dword [ebx + 0x9c]
push 1
push 0x53
push 0x8a
add ecx, 0xa
push ecx
add edx, 0x32
push edx
lea ecx, [ebx + 0x474]
call fcn.00485655
call fcn.00478c84
xor ecx, ecx
cmp eax, edi
setne cl
cmp ecx, edi
jne 0x406279
push 0x80004005
call fcn.00404150
mov edx, dword [eax]
mov ecx, eax
mov eax, dword [edx + 0xc]
call eax
add eax, 0x10
mov dword [esp + 0x14], eax
mov esi, ebx
mov byte [esp + 0xb0], 7
call fcn.00407710
mov ecx, ebx
call fcn.00407910
mov esi, dword [ebx + 0x714]
lea edi, [ebx + 0x714]
push 0
push 0x59f
mov ecx, ebx
add esi, 0x134
call fcn.004854d2
mov edx, dword [esi]
push eax
mov ecx, edi
call edx
mov eax, dword [ebx + 0x734]
push 0
push 1
push 0x401
push eax
call dword [sym.imp.USER32.dll_SendMessageA]
cmp dword [ebx + 0xda0], 0
jne 0x40632f
lea edi, [ebx + 0xda4]
mov dword [esp + 0x10], 0x80
push 0x15c
call fcn.00477e9b
add esp, 4
mov dword [esp + 0x30], eax
test eax, eax
mov byte [esp + 0xb0], 8
je 0x406319
mov esi, eax
call fcn.00421e20
jmp 0x40631b
xor eax, eax
mov byte [esp + 0xb0], 7
mov dword [edi], eax
add edi, 4
sub dword [esp + 0x10], 1
jne 0x4062f3
mov esi, 1
call fcn.0042afc0
push ebx
lea ecx, [ebx + 0x94]
push ecx
mov ecx, dword [ebx + 0x46c]
push ecx
mov ecx, dword [ebx + 0x470]
push eax
mov dword [ebx + 0x5fc], eax
call fcn.0042b710
mov eax, dword [ebx + 0x5fc]
mov ecx, dword [eax + 0x3654]
cmp ecx, 2
jg 0x406395
imul ecx, ecx, 0xa0c
mov dword [ecx + eax + 0x3664], esi
mov edx, dword [eax + 0x3654]
imul edx, edx, 0xa0c
mov dword [edx + eax + 0x366c], 0xffffffff
add dword [eax + 0x3654], esi
mov eax, dword [ebx + 0x5fc]
mov ecx, dword [eax + 0x3654]
cmp ecx, 2
jg 0x4063d0
imul ecx, ecx, 0xa0c
mov dword [ecx + eax + 0x3664], esi
mov ecx, dword [eax + 0x3654]
imul ecx, ecx, 0xa0c
mov dword [ecx + eax + 0x366c], 0xffffffff
add dword [eax + 0x3654], esi
lea edi, [ebx + 0x7f8]
push ebx
call fcn.0040ab10
mov esi, ebx
call fcn.0040d000
push 0x4ad
mov ecx, ebx
call fcn.004854d2
test eax, eax
je 0x4063f6
mov eax, dword [eax + 0x20]
push str.ButtonStart
push eax
call sub.intf.dll_Ordinal_46
push 0x4ae
mov ecx, ebx
call fcn.004854d2
test eax, eax
je 0x406414
mov eax, dword [eax + 0x20]
push str.ButtonStartRecord
push eax
call sub.intf.dll_Ordinal_46
push 0x3ea
mov ecx, ebx
call fcn.004854d2
test eax, eax
je 0x406432
mov eax, dword [eax + 0x20]
push str.ButtonStopRecord
push eax
call sub.intf.dll_Ordinal_46
push 0x4b8
mov ecx, ebx
call fcn.004854d2
test eax, eax
je 0x406450
mov eax, dword [eax + 0x20]
push str.ButtonSnapShot
push eax
call sub.intf.dll_Ordinal_46
push 0x4af
mov ecx, ebx
call fcn.004854d2
test eax, eax
je 0x40646e
mov eax, dword [eax + 0x20]
push str.ButtonStop
push eax
call sub.intf.dll_Ordinal_46
push 0x40b
mov ecx, ebx
call fcn.004854d2
test eax, eax
je 0x40648c
mov eax, dword [eax + 0x20]
push str.ButtonAdd
push eax
call sub.intf.dll_Ordinal_46
push 0x4b0
mov ecx, ebx
call fcn.004854d2
test eax, eax
je 0x4064aa
mov eax, dword [eax + 0x20]
push str.ButtonDelete
push eax
call sub.intf.dll_Ordinal_46
push 0x4b1
mov ecx, ebx
call fcn.004854d2
test eax, eax
je 0x4064c8
mov eax, dword [eax + 0x20]
push str.ButtonSetting
push eax
call sub.intf.dll_Ordinal_46
push 0x4b2
mov ecx, ebx
call fcn.004854d2
test eax, eax
je 0x4064e6
mov eax, dword [eax + 0x20]
push str.ButtonStart
push eax
call sub.intf.dll_Ordinal_46
push 0x4b3
mov ecx, ebx
call fcn.004854d2
test eax, eax
je 0x406504
mov eax, dword [eax + 0x20]
push str.ButtonFastPlay
push eax
call sub.intf.dll_Ordinal_46
push 0x4b5
mov ecx, ebx
call fcn.004854d2
test eax, eax
je 0x406522
mov eax, dword [eax + 0x20]
push str.ButtonSlowPlay
push eax
call sub.intf.dll_Ordinal_46
push 0x4b4
mov ecx, ebx
call fcn.004854d2
test eax, eax
je 0x406540
mov eax, dword [eax + 0x20]
push str.ButtonStop
push eax
call sub.intf.dll_Ordinal_46
push 0x4b6
mov ecx, ebx
call fcn.004854d2
test eax, eax
je 0x40655e
mov eax, dword [eax + 0x20]
push str.ButtonBakup
push eax
call sub.intf.dll_Ordinal_46
push 0x5e6
mov ecx, ebx
call fcn.004854d2
test eax, eax
je 0x40657c
mov eax, dword [eax + 0x20]
push str.ButtonPlayBackSnapshot
push eax
call sub.intf.dll_Ordinal_46
push 0x5f2
mov ecx, ebx
call fcn.004854d2
test eax, eax
je 0x40659a
mov eax, dword [eax + 0x20]
push str.ButtonPause
push eax
call sub.intf.dll_Ordinal_46
lea eax, [ebx + 0x3b0]
test eax, eax
je 0x4065b2
mov eax, dword [eax + 0x20]
push str.ButtonBackward
push eax
call sub.intf.dll_Ordinal_46
lea eax, [ebx + 0x404]
test eax, eax
je 0x4065ca
mov eax, dword [eax + 0x20]
push str.ButtonForward
push eax
call sub.intf.dll_Ordinal_46
lea eax, [ebx + 0xd4c]
test eax, eax
je 0x4065e2
mov eax, dword [eax + 0x20]
push str.ButtonFramePlay
push eax
call sub.intf.dll_Ordinal_46
lea eax, [ebx + 0xfac]
test eax, eax
je 0x4065fa
mov eax, dword [eax + 0x20]
push str.ButtonAudio
push eax
call sub.intf.dll_Ordinal_46
push 0x56e
lea edx, [esp + 0x14]
push edx
call fcn.00410b20
push eax
lea ecx, [esp + 0x18]
mov byte [esp + 0xb4], 9
call fcn.00404a60
mov byte [esp + 0xb0], 7
mov eax, dword [esp + 0x10]
add eax, 0xfffffff0
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x40664e
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
mov ecx, dword [esp + 0x14]
push ecx
push 0x405
mov ecx, ebx
call fcn.0048551a
push 0x49a
mov ecx, ebx
call fcn.004854d2
test eax, eax
je 0x406672
mov eax, dword [eax + 0x20]
push str.ButtonExit
push eax
call sub.intf.dll_Ordinal_46
push 0x4ce
mov ecx, ebx
call fcn.004854d2
test eax, eax
je 0x406690
mov eax, dword [eax + 0x20]
push str.ButtonHelp
push eax
call sub.intf.dll_Ordinal_46
push 0x4d2
mov ecx, ebx
call fcn.004854d2
test eax, eax
je 0x4066ae
mov eax, dword [eax + 0x20]
push str.CheckBoxLock
push eax
call sub.intf.dll_Ordinal_46
push 0x4d0
mov ecx, ebx
call fcn.004854d2
test eax, eax
je 0x4066cc
mov eax, dword [eax + 0x20]
push str.CheckBoxConfig
push eax
call sub.intf.dll_Ordinal_46
push 0x4cc
mov ecx, ebx
call fcn.004854d2
test eax, eax
je 0x4066ea
mov eax, dword [eax + 0x20]
push str.ButtonMinimize
push eax
call sub.intf.dll_Ordinal_46
push 0x4cf
mov ecx, ebx
call fcn.004854d2
test eax, eax
je 0x406708
mov eax, dword [eax + 0x20]
push str.CheckBoxPlayback
push eax
call sub.intf.dll_Ordinal_46
push 0x457
mov ecx, ebx
call fcn.004854d2
test eax, eax
je 0x406726
mov eax, dword [eax + 0x20]
push str.CheckBoxRealtime
push eax
call sub.intf.dll_Ordinal_46
push 0x5e8
mov ecx, ebx
call fcn.004854d2
test eax, eax
je 0x406744
mov eax, dword [eax + 0x20]
push str.ButtonReturn
push eax
call sub.intf.dll_Ordinal_46
push 5
push 0x49a
mov ecx, ebx
call fcn.004854d2
mov ecx, eax
call fcn.00485693
push 5
push 0x62f
mov ecx, ebx
call fcn.004854d2
mov ecx, eax
call fcn.00485693
mov ecx, dword [ebx + 0x5fc]
push 5
call fcn.00485693
mov edi, dword [ebx + 0x5fc]
mov dword [edi + 0x4ba8], 0xffffffff
cmp dword [edi + 0x4070], 0
je 0x4067c3
mov eax, 1
cmp dword [edi + 0x3650], eax
je 0x4067c3
xor ecx, ecx
mov dword [edi + 0x3650], eax
mov dword [edi + 0x3648], 0
call fcn.0042d100
mov edi, dword [ebx + 0x5fc]
lea esi, [edi + 0x4b90]
push esi
call dword [sym.imp.KERNEL32.dll_EnterCriticalSection]
mov eax, dword [edi + 0x4b74]
test eax, eax
jbe 0x4067f5
add eax, 0xffffffff
mov dword [edi + 0x4b74], eax
jne 0x4067f5
mov dword [edi + 0x364c], 1
push esi
call dword [sym.imp.KERNEL32.dll_LeaveCriticalSection]
push 1
mov ecx, ebx
call fcn.0047df77
mov edx, dword [ebx + 0x788]
mov eax, dword [edx + 0x134]
lea edi, [ebx + 0x788]
push 0
push ebx
mov ecx, edi
call eax
mov ecx, dword [ebx + 0x7a8]
mov esi, dword [sym.imp.USER32.dll_SendMessageA]
push 0
push 1
push 0x401
push ecx
call esi
push 0x16a
lea edx, [esp + 0x14]
push edx
call fcn.00410b20
push eax
lea ecx, [esp + 0x18]
mov byte [esp + 0xb4], 0xa
call fcn.00404a60
mov byte [esp + 0xb0], 7
mov eax, dword [esp + 0x10]
add eax, 0xfffffff0
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x40687f
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
mov ecx, dword [esp + 0x14]
push 0
push 0
push ecx
push 0x4b2
mov ecx, ebx
call fcn.004854d2
push eax
mov ecx, edi
call fcn.0047da5b
push 0x16b
lea edx, [esp + 0x14]
push edx
call fcn.00410b20
push eax
lea ecx, [esp + 0x18]
mov byte [esp + 0xb4], 0xb
call fcn.00404a60
mov byte [esp + 0xb0], 7
mov eax, dword [esp + 0x10]
add eax, 0xfffffff0
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x4068e5
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
mov ecx, dword [esp + 0x14]
push 0
push 0
push ecx
push 0x4b3
mov ecx, ebx
call fcn.004854d2
push eax
mov ecx, edi
call fcn.0047da5b
push 0x16c
lea edx, [esp + 0x14]
push edx
call fcn.00410b20
push eax
lea ecx, [esp + 0x18]
mov byte [esp + 0xb4], 0xc
call fcn.00404a60
mov byte [esp + 0xb0], 7
mov eax, dword [esp + 0x10]
add eax, 0xfffffff0
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x40694b
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
mov ecx, dword [esp + 0x14]
push 0
push 0
push ecx
push 0x4b5
mov ecx, ebx
call fcn.004854d2
push eax
mov ecx, edi
call fcn.0047da5b
push 0x166
lea edx, [esp + 0x14]
push edx
call fcn.00410b20
push eax
lea ecx, [esp + 0x18]
mov byte [esp + 0xb4], 0xd
call fcn.00404a60
mov byte [esp + 0xb0], 7
mov eax, dword [esp + 0x10]
add eax, 0xfffffff0
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x4069b1
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
mov ecx, dword [esp + 0x14]
push 0
push 0
push ecx
push 0x5f2
mov ecx, ebx
call fcn.004854d2
push eax
mov ecx, edi
call fcn.0047da5b
push 0x16d
lea edx, [esp + 0x14]
push edx
call fcn.00410b20
push eax
lea ecx, [esp + 0x18]
mov byte [esp + 0xb4], 0xe
call fcn.00404a60
mov byte [esp + 0xb0], 7
mov eax, dword [esp + 0x10]
add eax, 0xfffffff0
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x406a17
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
mov ecx, dword [esp + 0x14]
push 0
push 0
push ecx
push 0x4b4
mov ecx, ebx
call fcn.004854d2
push eax
mov ecx, edi
call fcn.0047da5b
push 0x16f
lea edx, [esp + 0x14]
push edx
call fcn.00410b20
push eax
lea ecx, [esp + 0x18]
mov byte [esp + 0xb4], 0xf
call fcn.00404a60
mov byte [esp + 0xb0], 7
mov eax, dword [esp + 0x10]
add eax, 0xfffffff0
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x406a7d
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
mov ecx, dword [esp + 0x14]
push 0
push 0
push ecx
push 0x4b6
mov ecx, ebx
call fcn.004854d2
push eax
mov ecx, edi
call fcn.0047da5b
push 0x210
lea edx, [esp + 0x14]
push edx
call fcn.00410b20
push eax
lea ecx, [esp + 0x18]
mov byte [esp + 0xb4], 0x10
call fcn.00404a60
mov byte [esp + 0xb0], 7
mov eax, dword [esp + 0x10]
add eax, 0xfffffff0
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x406ae3
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
mov ecx, dword [esp + 0x14]
push 0
push 0
push ecx
push 0x5e6
mov ecx, ebx
call fcn.004854d2
push eax
mov ecx, edi
call fcn.0047da5b
push 0x170
lea edx, [esp + 0x14]
push edx
call fcn.00410b20
push eax
lea ecx, [esp + 0x18]
mov byte [esp + 0xb4], 0x11
call fcn.00404a60
mov byte [esp + 0xb0], 7
mov eax, dword [esp + 0x10]
add eax, 0xfffffff0
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x406b49
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
mov ecx, dword [esp + 0x14]
push 0
push 0
push ecx
push 0x49a
mov ecx, ebx
call fcn.004854d2
push eax
mov ecx, edi
call fcn.0047da5b
push 0x660
lea edx, [esp + 0x14]
push edx
call fcn.00410b20
push eax
lea ecx, [esp + 0x18]
mov byte [esp + 0xb4], 0x12
call fcn.00404a60
mov byte [esp + 0xb0], 7
mov eax, dword [esp + 0x10]
add eax, 0xfffffff0
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x406baf
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
mov ecx, dword [esp + 0x14]
push 0
push 0
push ecx
push 0x605
mov ecx, ebx
call fcn.004854d2
push eax
mov ecx, edi
call fcn.0047da5b
push 0x661
lea edx, [esp + 0x14]
push edx
call fcn.00410b20
push eax
lea ecx, [esp + 0x18]
mov byte [esp + 0xb4], 0x13
call fcn.00404a60
mov byte [esp + 0xb0], 7
mov eax, dword [esp + 0x10]
add eax, 0xfffffff0
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x406c15
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
mov ecx, dword [esp + 0x14]
push 0
push 0
push ecx
push 0x604
mov ecx, ebx
call fcn.004854d2
push eax
mov ecx, edi
call fcn.0047da5b
push 0x5497
lea edx, [esp + 0x14]
push edx
call fcn.00410b20
push eax
lea ecx, [esp + 0x18]
mov byte [esp + 0xb4], 0x14
call fcn.00404a60
mov byte [esp + 0xb0], 7
mov eax, dword [esp + 0x10]
add eax, 0xfffffff0
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x406c7b
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
mov ecx, dword [esp + 0x14]
push 0
push 0
push ecx
push 0x62e
mov ecx, ebx
call fcn.004854d2
push eax
mov ecx, edi
call fcn.0047da5b
mov edx, dword [ebx + 0x7a8]
push 0x96
push 0
push 0x418
push edx
call esi
push 0x548a
lea eax, [esp + 0x14]
push eax
call fcn.00410b20
push eax
lea ecx, [esp + 0x18]
mov byte [esp + 0xb4], 0x15
call fcn.00404a60
mov byte [esp + 0xb0], 7
mov eax, dword [esp + 0x10]
add eax, 0xfffffff0
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x406cf6
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
mov ecx, dword [esp + 0x14]
push ecx
push 0x620
mov ecx, ebx
call fcn.0048551a
push 0x548f
lea edx, [esp + 0x14]
push edx
call fcn.00410b20
push eax
lea ecx, [esp + 0x18]
mov byte [esp + 0xb4], 0x16
call fcn.00404a60
mov byte [esp + 0xb0], 7
mov eax, dword [esp + 0x10]
add eax, 0xfffffff0
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x406d50
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
mov ecx, dword [esp + 0x14]
push ecx
push 0x621
mov ecx, ebx
call fcn.0048551a
push 0x5498
lea edx, [esp + 0x14]
push edx
call fcn.00410b20
push eax
lea ecx, [esp + 0x18]
mov byte [esp + 0xb4], 0x17
call fcn.00404a60
mov byte [esp + 0xb0], 7
mov eax, dword [esp + 0x10]
add eax, 0xfffffff0
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x406daa
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
mov ecx, dword [esp + 0x14]
push ecx
push 0x61d
mov ecx, ebx
call fcn.0048551a
push 0x17b
lea edx, [esp + 0x14]
push edx
call fcn.00410b20
push eax
lea ecx, [esp + 0x18]
mov byte [esp + 0xb4], 0x18
call fcn.00404a60
mov byte [esp + 0xb0], 7
mov eax, dword [esp + 0x10]
add eax, 0xfffffff0
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x406e04
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
mov ecx, dword [esp + 0x14]
push ecx
push 0x5de
mov ecx, ebx
call fcn.0048551a
push 0x548c
lea edx, [esp + 0x14]
push edx
call fcn.00410b20
lea ecx, [ebx + 0x520]
push eax
mov byte [esp + 0xb4], 0x19
call fcn.00404a60
mov byte [esp + 0xb0], 7
mov eax, dword [esp + 0x10]
add eax, 0xfffffff0
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x406e60
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
lea esi, [ebx + 0x528]
mov edi, ebx
mov ecx, esi
call fcn.0042e4f0
call fcn.0042e670
mov edi, esi
call fcn.0042e5c0
mov ecx, dword [esi + 0x20]
push 0x105
push 0
mov eax, 0xffffff
push 0
push ecx
mov dword [esi + 0x68], eax
mov dword [esi + 0x6c], eax
call dword [sym.imp.USER32.dll_RedrawWindow]
mov eax, dword [ebx + 0x5bc]
mov ecx, dword [ebx + 0x5b8]
mov edx, 1
sub eax, 0xe
mov esi, edx
mov dword [esp + 0x20], edx
lea edx, [esp + 0x20]
mov dword [esp + 0x2c], eax
push edx
lea eax, [ebx + 0x5a8]
sub ecx, 0xe
push eax
mov dword [esp + 0x2c], esi
mov dword [esp + 0x30], ecx
call dword [sym.imp.USER32.dll_CopyRect]
mov ecx, dword [ebx + 0x20]
mov esi, dword [sym.imp.USER32.dll_SetTimer]
push 0
push 0x3e8
push 0x3d
push ecx
call esi
mov edx, dword [ebx + 0x20]
push 0
push 0x493e0
push 0x3e
push edx
call esi
mov eax, dword [ebx + 0x470]
mov ecx, dword [ebx + 0x46c]
push 0x40
push eax
push ecx
push 0
push 0
push 0
mov ecx, ebx
call fcn.004858a2
mov byte [esp + 0xb0], 1
mov eax, dword [esp + 0x14]
add eax, 0xfffffff0
lea edx, [eax + 0xc]
or ecx, 0xffffffff
lock xadd dword [edx], ecx
dec ecx
test ecx, ecx
jg 0x406f3d
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
mov byte [esp + 0xb0], 0
mov eax, dword [esp + 0x18]
add eax, 0xfffffff0
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x406f65
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
mov dword [esp + 0xb0], 0xffffffff
mov eax, dword [esp + 0x1c]
add eax, 0xfffffff0
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x406f90
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
mov eax, 1
mov ecx, dword [esp + 0xa8]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov ecx, dword [esp + 0x90]
xor ecx, esp
call fcn.00495e54
mov esp, ebp
pop ebp
ret