Function at 0x41d400
Capabilities:
Create directory
Read .ini file

Disassembly:
push 0xffffffffffffffff
push 0x471e86
mov eax, dword fs:[0]
push eax
sub esp, 0x244
mov eax, dword [0x4878d4]
xor eax, esp
mov dword [esp + 0x23c], eax
push ebp
push esi
push edi
mov eax, dword [0x4878d4]
xor eax, esp
push eax
lea eax, [esp + 0x254]
mov dword fs:[0], eax
mov edi, ecx
mov ebp, dword [esp + 0x264]
mov ecx, dword [ebp + 4]
mov esi, dword [sym.imp.USER32.dll_GetWindowRect]
lea eax, [esp + 0x24]
push eax
push ecx
call esi
cmp edi, 0x591
ja 0x41d84b
je 0x41d831
lea eax, [edi - 0x12e]
cmp eax, 0xb
ja case.0x41d475.304
jmp dword [eax*4 + 0x41d8c8]
mov eax, dword [ebp + 0x518]
mov edx, dword [eax]
push 0
push eax
mov eax, dword [edx + 0x30]
call eax
mov eax, dword [ebp + 0x518]
mov ecx, dword [eax]
lea edx, [esp + 0x14]
push edx
push eax
mov eax, dword [ecx + 0xd4]
call eax
mov edx, dword [esp + 0x14]
lea ecx, [esp + 0x34]
push ecx
push edx
call esi
mov eax, dword [ebp + 0x518]
mov ecx, dword [eax]
lea edx, [esp + 0x1c]
push edx
lea edx, [esp + 0x24]
push edx
push eax
mov eax, dword [ecx + 0xd0]
call eax
mov eax, dword [esp + 0x20]
cdq
sub eax, edx
sar eax, 1
sub eax, dword [esp + 0x3c]
push 1
add eax, dword [esp + 0x38]
lea ecx, [esp + 0x28]
add dword [esp + 0x30], eax
mov eax, dword [esp + 0x20]
cdq
sub eax, edx
sar eax, 1
sub eax, dword [esp + 0x44]
push ecx
add eax, dword [esp + 0x40]
mov ecx, ebp
add dword [esp + 0x38], eax
call fcn.004328a0
mov ecx, ebp
call fcn.004325a0
jmp case.0x41d475.304
mov eax, dword [ebp + 0x518]
mov edx, dword [eax]
push 0
push eax
mov eax, dword [edx + 0x30]
call eax
mov eax, dword [ebp + 0x518]
mov ecx, dword [eax]
lea edx, [esp + 0x1c]
push edx
push eax
mov eax, dword [ecx + 0xd4]
call eax
mov edx, dword [esp + 0x1c]
lea ecx, [esp + 0x34]
push ecx
push edx
call esi
mov eax, dword [ebp + 0x518]
mov ecx, dword [eax]
lea edx, [esp + 0x14]
push edx
lea edx, [esp + 0x24]
push edx
push eax
mov eax, dword [ecx + 0xd0]
call eax
mov ecx, dword [esp + 0x34]
sub ecx, dword [esp + 0x3c]
mov edx, dword [esp + 0x38]
add ecx, dword [esp + 0x20]
sub edx, dword [esp + 0x40]
add dword [esp + 0x2c], ecx
add edx, dword [esp + 0x14]
push 1
add dword [esp + 0x34], edx
lea eax, [esp + 0x28]
push eax
mov ecx, ebp
call fcn.004328a0
mov ecx, ebp
call fcn.004325a0
jmp case.0x41d475.304
mov eax, dword [ebp + 0x518]
mov ecx, dword [eax]
mov edx, dword [ecx + 0x30]
push 0
push eax
call edx
mov eax, dword [ebp + 0x518]
mov ecx, dword [eax]
lea edx, [esp + 0x1c]
push edx
push eax
mov eax, dword [ecx + 0xd4]
call eax
mov edx, dword [esp + 0x1c]
lea ecx, [esp + 0x34]
push ecx
push edx
call esi
mov eax, dword [ebp + 0x518]
mov ecx, dword [eax]
lea edx, [esp + 0x14]
push edx
lea edx, [esp + 0x24]
push edx
push eax
mov eax, dword [ecx + 0xd0]
call eax
mov ecx, dword [esp + 0x20]
mov eax, dword [esp + 0x14]
lea edx, [ecx + ecx]
sub edx, dword [esp + 0x3c]
lea ecx, [eax + eax]
sub ecx, dword [esp + 0x40]
add edx, dword [esp + 0x34]
add ecx, dword [esp + 0x38]
add dword [esp + 0x2c], edx
add dword [esp + 0x30], ecx
push 1
lea edx, [esp + 0x28]
push edx
mov ecx, ebp
call fcn.004328a0
mov ecx, ebp
call fcn.004325a0
jmp case.0x41d475.304
mov eax, dword [ebp + 0x518]
mov ecx, dword [eax]
mov edx, dword [ecx + 0xf8]
push 1
push eax
call edx
mov eax, dword [ebp + 0x59c]
push eax
push str.12568
push str.tsuyoku
push str.memory
call dword [sym.imp.KERNEL32.dll_WritePrivateProfileStringW]
mov dword [ebp + 0xdd4], 1
jmp case.0x41d475.304
mov eax, dword [ebp + 0x518]
mov ecx, dword [eax]
mov edx, dword [ecx + 0xf8]
push 0
push eax
call edx
mov eax, dword [ebp + 0x59c]
push eax
push 0x47b710
push str.tsuyoku
push str.memory
call dword [sym.imp.KERNEL32.dll_WritePrivateProfileStringW]
mov dword [ebp + 0xdd4], 0
jmp case.0x41d475.304
xor ecx, ecx
push 0x206
push ecx
lea edx, [esp + 0x4e]
push edx
mov word [esp + 0x50], cx
call fcn.0045cac0
mov eax, dword [ebp + 0x59c]
add esp, 0xc
push eax
push 0x104
lea eax, [esp + 0x4c]
push eax
push 0x47d008
push str.picpath
push str.memory
call dword [sym.imp.KERNEL32.dll_GetPrivateProfileStringW]
lea ecx, [esp + 0x18]
push ecx
lea ecx, [esp + 0x48]
call fcn.004040c0
lea edx, [esp + 0x18]
push edx
mov ecx, 0x47d008
mov dword [esp + 0x260], 0
call fcn.0041df30
add esp, 4
test al, al
jne 0x41d783
mov eax, dword [esp + 0x18]
push 0
push eax
call dword [sym.imp.KERNEL32.dll_CreateDirectoryW]
call dword [sym.imp.KERNEL32.dll_GetTickCount]
lea esi, [esp + 0x14]
mov edi, eax
call fcn.004040a0
push edi
push str._d.bmp
mov edi, esi
mov byte [esp + 0x264], 1
call fcn.00405490
mov eax, dword [esp + 0x1c]
mov ecx, dword [eax - 0xc]
add esp, 8
push ecx
push eax
lea edx, [esp + 0x20]
push edx
call fcn.00404fe0
lea eax, [esp + 0x18]
call fcn.0041de40
mov ebp, dword [ebp + 0x518]
mov esi, eax
mov eax, dword [ebp]
mov ecx, dword [eax + 0xfc]
push 0
push esi
push ebp
call ecx
push esi
call dword [sym.imp.OLEAUT32.dll_SysStringLen]
mov ecx, edi
call fcn.00404200
lea ecx, [esp + 0x18]
call fcn.00404200
jmp case.0x41d475.304
mov edx, dword [ebp + 0x59c]
push edx
push 0x47cfe8
push 0x47bae8
push str.memory
mov dword [ebp + 0x5fc], 2
call dword [sym.imp.KERNEL32.dll_WritePrivateProfileStringW]
mov eax, dword [ebp + 4]
push 3
push 0
push 0
push 0
push 0
push 0xffffffffffffffff
push eax
call dword [sym.imp.USER32.dll_SetWindowPos]
jmp case.0x41d475.304
mov ecx, dword [ebp + 0x59c]
push ecx
push 0x47c6e0
push 0x47bae8
push str.memory
mov dword [ebp + 0x5fc], 3
call dword [sym.imp.KERNEL32.dll_WritePrivateProfileStringW]
mov edx, dword [ebp + 4]
push 3
push 0
push 0
push 0
push 0
push 0xfffffffffffffffe
push edx
call dword [sym.imp.USER32.dll_SetWindowPos]
jmp case.0x41d475.304
mov eax, dword [ebp + 0x498]
push 0
push 0
push 0
push eax
jmp 0x41d891
mov ecx, dword [ebp + 0x48c]
push 0
push 0
push 0
push ecx
jmp 0x41d891
mov ecx, dword [ebp + 0x50c]
push ebx
call fcn.0042d690
mov edx, dword [ebp + 0x50c]
push 0
push 0
push 5
jmp 0x41d890
sub edi, 0x592
je 0x41d878
sub edi, 1
je 0x41d869
sub edi, 1
jne case.0x41d475.304
mov eax, dword [ebp + 0x4a4]
push edi
push edi
push edi
push eax
jmp 0x41d891
mov ecx, dword [ebp + 0x4a0]
push 0
push 0
push 0
push ecx
jmp 0x41d891
mov ecx, dword [ebp + 0x508]
push ebx
call fcn.0042d690
mov edx, dword [ebp + 0x508]
push 0
push 0
push 0x11
push edx
lea ecx, [ebp + 0x78]
call fcn.004356b0
mov eax, 1
mov ecx, dword [esp + 0x254]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebp
mov ecx, dword [esp + 0x23c]
xor ecx, esp
call fcn.004599ea
add esp, 0x250
ret 4