Function at 0x47b6d0
Capabilities:
Capture screenshot
Read .ini file

Disassembly:
sub esp, 0xc
push ebx
push ebp
push esi
push edi
call dword [sym.imp.USER32.dll_CreateMenu]
mov dword [0x4e6250], eax
call dword [sym.imp.USER32.dll_CreatePopupMenu]
mov ebx, dword [sym.imp.USER32.dll_LoadBitmapW]
mov esi, eax
push 0x4e37
push dword [0x4e5c0c]
call ebx
push 0x4e38
push dword [0x4e5c0c]
mov dword [esp + 0x1c], eax
call ebx
mov edx, 0x4b3320
mov dword [esp + 0x18], eax
mov ecx, str.MAINMENU
call fcn.00478640
mov ebp, dword [sym.imp.USER32.dll_AppendMenuW]
push eax
push esi
push 0x10
push dword [0x4e6250]
call ebp
mov edx, 0x4b3310
mov ecx, str.MAINMENU
call fcn.00478640
push eax
push 0x7530
push 0
push esi
call ebp
mov edx, 0x4b330c
mov ecx, str.MAINMENU
call fcn.00478640
push eax
push 0x7531
push 0
push esi
call ebp
push 0
push 0
push 0x800
push esi
call ebp
mov edx, 0x4b331c
mov ecx, str.MAINMENU
call fcn.00478640
push eax
push 0x7558
push 0
push esi
call ebp
push 0
push 0x7530
push dword [0x4e5c0c]
call ebx
mov edi, dword [sym.imp.USER32.dll_SetMenuItemBitmaps]
push eax
push 0
push 0x7530
push esi
call edi
push 0
push 0x7531
push dword [0x4e5c0c]
call ebx
push eax
push 0
push 0x7531
push esi
call edi
push 0
push 0x7558
push dword [0x4e5c0c]
call ebx
push eax
push 0
push 0x7558
push esi
call edi
call dword [sym.imp.USER32.dll_CreatePopupMenu]
mov edx, 0x4b32e4
mov ecx, str.MAINMENU
mov esi, eax
call fcn.00478640
push eax
push esi
push 0x10
push dword [0x4e6250]
call ebp
push str.Win.ini
push 0x7532
push 0
push esi
call ebp
push str.System.ini
push 0x7533
push 0
push esi
call ebp
push 0
push 0
push 0x800
push esi
call ebp
push str.Autoexec.bat
push 0x7534
push 0
push esi
call ebp
push str.Config.sys
push 0x7535
push 0
push esi
call ebp
push 0
push 0
push 0x800
push esi
call ebp
push str.Autoexec.nt
push 0x7536
push 0
push esi
call ebp
push str.Config.nt
push 0x7537
push 0
push esi
call ebp
push 0
push 0x7532
push dword [0x4e5c0c]
call ebx
push eax
push 0
push 0x7532
push esi
call edi
push 0
push 0x7532
push dword [0x4e5c0c]
call ebx
push eax
push 0
push 0x7533
push esi
call edi
push 0
push 0x7534
push dword [0x4e5c0c]
call ebx
push eax
push 0
push 0x7534
push esi
call edi
push 0
push 0x7534
push dword [0x4e5c0c]
call ebx
push eax
push 0
push 0x7535
push esi
call edi
push 0
push 0x7536
push dword [0x4e5c0c]
call ebx
push eax
push 0
push 0x7536
push esi
call edi
push 0
push 0x7536
push dword [0x4e5c0c]
call ebx
push eax
push 0
push 0x7537
push esi
call edi
call dword [sym.imp.USER32.dll_CreatePopupMenu]
mov edx, 0x4b35b4
mov ecx, str.MAINMENU
mov esi, eax
call fcn.00478640
push eax
push esi
push 0x10
push dword [0x4e6250]
call ebp
mov edx, 0x4b3314
mov ecx, str.MAINMENU
call fcn.00478640
push eax
push 0x7538
push 0
push esi
call ebp
push 0
push 0
push 0x800
push esi
call ebp
mov edx, 0x4b361c
mov ecx, str.MAINMENU
call fcn.00478640
push eax
push 0x7539
push 0
push esi
call ebp
mov edx, 0x4b3684
mov ecx, str.MAINMENU
call fcn.00478640
push eax
push 0x753a
push 0
push esi
call ebp
mov edx, 0x4b36c0
mov ecx, str.MAINMENU
call fcn.00478640
push eax
push 0x753b
push 0
push esi
call ebp
mov edx, 0x4b37a0
mov ecx, str.MAINMENU
call fcn.00478640
push eax
push 0x753c
push 0
push esi
call ebp
mov eax, dword [0x4cc1d8]
cmp eax, 0x64
jne 0x47b9ec
mov edx, 0x4b39ac
mov ecx, str.MAINMENU
call fcn.00478640
push eax
push 0x753d
push 0
push esi
call ebp
mov eax, dword [0x4cc1d8]
cmp eax, 0xc8
jne 0x47ba7e
mov edx, 0x4b39ac
mov ecx, str.MAINMENU
call fcn.00478640
push eax
push 0x753d
push 0
push esi
call ebp
mov edx, 0x4b39b4
mov ecx, str.MAINMENU
call fcn.00478640
push eax
push 0x753e
push 0
push esi
call ebp
mov edx, 0x4b39fc
mov ecx, str.MAINMENU
call fcn.00478640
push eax
push 0x753f
push 0
push esi
call ebp
push 0
push 0x753e
push dword [0x4e5c0c]
call ebx
push eax
push 0
push 0x753e
push esi
call edi
push 0
push 0x753f
push dword [0x4e5c0c]
call ebx
push eax
push 0
push 0x753f
push esi
call edi
mov eax, dword [0x4cc1d8]
cmp eax, 0x12c
jne 0x47bb0b
mov edx, 0x4b3bfc
mov ecx, str.MAINMENU
call fcn.00478640
push eax
push 0x754c
push 0
push esi
call ebp
mov edx, 0x4b3bf4
mov ecx, str.MAINMENU
call fcn.00478640
push eax
push 0x753d
push 0
push esi
call ebp
mov edx, 0x4b39fc
mov ecx, str.MAINMENU
call fcn.00478640
push eax
push 0x753f
push 0
push esi
call ebp
push 0
push 0x7571
push dword [0x4e5c0c]
call ebx
push eax
push 0
push 0x754c
push esi
call edi
push 0
push 0x753f
push dword [0x4e5c0c]
call ebx
push eax
push 0
push 0x753f
push esi
call edi
push 0
push 0x7538
push dword [0x4e5c0c]
call ebx
push eax
push 0
push 0x7538
push esi
call edi
push 0
push 0x7539
push dword [0x4e5c0c]
call ebx
push eax
push 0
push 0x7539
push esi
call edi
push 0
push 0x753a
push dword [0x4e5c0c]
call ebx
push eax
push 0
push 0x753a
push esi
call edi
push 0
push 0x753b
push dword [0x4e5c0c]
call ebx
push eax
push 0
push 0x753b
push esi
call edi
push 0
push 0x753c
push dword [0x4e5c0c]
call ebx
push eax
push 0
push 0x753c
push esi
call edi
push 0
push 0x753d
push dword [0x4e5c0c]
call ebx
push eax
push 0
push 0x753d
push esi
call edi
call dword [sym.imp.USER32.dll_CreatePopupMenu]
mov edx, 0x4b35b0
mov ecx, str.MAINMENU
mov esi, eax
call fcn.00478640
push eax
push esi
push 0x10
push dword [0x4e6250]
call ebp
cmp dword [0x4e59f8], 0
je 0x47bbf9
mov edx, 0x4b3bec
mov ecx, str.MAINMENU
call fcn.00478640
push eax
push 0x7565
push 0
push esi
call ebp
push 0
push 0
push 0x800
push esi
call ebp
mov edx, 0x4b3a04
mov ecx, str.MAINMENU
call fcn.00478640
push eax
push 0x7541
push 0
push esi
call ebp
cmp dword [0x4e59f8], 2
je 0x47bc36
mov edx, 0x4b3a1c
mov ecx, str.MAINMENU
call fcn.00478640
push eax
push 0x7542
push 0
push esi
call ebp
mov edx, 0x4b3a24
mov ecx, str.MAINMENU
call fcn.00478640
push eax
push 0x7546
push 0
push esi
call ebp
push 0
push 0
push 0x800
push esi
call ebp
mov edx, 0x4b3a2c
mov ecx, str.MAINMENU
call fcn.00478640
push eax
push 0x7543
push 0
push esi
call ebp
mov eax, dword [0x4e59f8]
cmp eax, 2
je 0x47bc9f
mov edx, 0x4b3a34
mov ecx, str.MAINMENU
call fcn.00478640
push eax
push 0x7544
push 0
push esi
call ebp
mov eax, dword [0x4e59f8]
test eax, eax
je 0x47bcbd
mov edx, 0x4b3a4c
mov ecx, str.MAINMENU
call fcn.00478640
push eax
push 0x7545
push 0
push esi
call ebp
push 0
push 0
push 0x800
push esi
call ebp
mov edx, 0x4b3a78
mov ecx, str.MAINMENU
call fcn.00478640
push eax
push 0x7548
push 0
push esi
call ebp
mov edx, 0x4b3a80
mov ecx, str.MAINMENU
call fcn.00478640
push eax
push 0x7549
push 0
push esi
call ebp
mov edx, 0x4b3a88
mov ecx, str.MAINMENU
call fcn.00478640
push eax
push 0x754a
push 0
push esi
call ebp
cmp dword [0x4e59f8], 1
jne 0x47bd46
push 0
push 0
push 0x800
push esi
call ebp
mov edx, 0x4b3a90
mov ecx, str.MAINMENU
call fcn.00478640
push eax
push 0x7547
push 0
push esi
call ebp
push 0
push 0x7565
push dword [0x4e5c0c]
call ebx
push eax
push 0
push 0x7565
push esi
call edi
push 0
push 0x7541
push dword [0x4e5c0c]
call ebx
push eax
push 0
push 0x7541
push esi
call edi
push 0
push 0x7542
push dword [0x4e5c0c]
call ebx
push eax
push 0
push 0x7542
push esi
call edi
push 0
push 0x7543
push dword [0x4e5c0c]
call ebx
push eax
push 0
push 0x7543
push esi
call edi
push 0
push 0x7544
push dword [0x4e5c0c]
call ebx
push eax
push 0
push 0x7544
push esi
call edi
push 0
push 0x7545
push dword [0x4e5c0c]
call ebx
push eax
push 0
push 0x7545
push esi
call edi
push 0
push 0x7546
push dword [0x4e5c0c]
call ebx
push eax
push 0
push 0x7546
push esi
call edi
push 0
push 0x7547
push dword [0x4e5c0c]
call ebx
push eax
push 0
push 0x7547
push esi
call edi
push 0
push 0x7548
push dword [0x4e5c0c]
call ebx
push eax
push 0
push 0x7548
push esi
call edi
push 0
push 0x7549
push dword [0x4e5c0c]
call ebx
push eax
push 0
push 0x7549
push esi
call edi
push 0
push 0x754a
push dword [0x4e5c0c]
call ebx
push eax
push 0
push 0x754a
push esi
call edi
call dword [sym.imp.USER32.dll_CreatePopupMenu]
mov edx, 0x4b35b8
mov ecx, str.MAINMENU
mov ebx, eax
call fcn.00478640
push eax
push ebx
push 0x10
push dword [0x4e6250]
call ebp
mov edx, 0x4b3a98
mov ecx, str.MAINMENU
call fcn.00478640
push eax
push 0x754d
push 0
push ebx
call ebp
push 0
push 0
push 0x800
push ebx
call ebp
mov edi, dword [sym.imp.KERNEL32.dll_GetPrivateProfileIntW]
push 0x4e5e28
push 0
push str.OnTop
push str.OPTIONS
call edi
neg eax
mov edx, 0x4b3a54
mov ecx, str.MAINMENU
sbb esi, esi
and esi, 8
call fcn.00478640
push eax
push 0x754f
push esi
push ebx
call ebp
push 0x4e5e28
push 0
push str.Magnet
push str.OPTIONS
call edi
neg eax
mov edx, 0x4b3a70
mov ecx, str.MAINMENU
sbb esi, esi
and esi, 8
call fcn.00478640
push eax
push 0x7550
push esi
push ebx
call ebp
push 0x4e5e28
push 0
push str.SaveSize
push str.OPTIONS
call edi
neg eax
sbb esi, esi
mov edx, 0x4b3aa8
mov ecx, str.MAINMENU
and esi, 8
call fcn.00478640
push eax
push 0x7551
push esi
push ebx
call ebp
push 0x4e5e28
push 0
push str.Position
push str.OPTIONS
call edi
neg eax
mov edx, 0x4b3ab0
mov ecx, str.MAINMENU
sbb esi, esi
and esi, 8
call fcn.00478640
push eax
push 0x7552
push esi
push ebx
call ebp
push 0x4e5e28
push 0
push str.NoSaver
push str.OPTIONS
call edi
neg eax
mov edx, 0x4b3ab8
mov ecx, str.MAINMENU
sbb esi, esi
and esi, 8
call fcn.00478640
push eax
push 0x7553
push esi
push ebx
call ebp
push 0
push 0
push 0x800
push ebx
call ebp
mov edx, 0x4b3ac0
mov ecx, str.MAINMENU
call fcn.00478640
push eax
push 0x7554
push 0
push ebx
call ebp
push 0x4e5e28
push 0
push str.ClearFont
push str.OPTIONS
call edi
neg eax
mov edx, 0x4b3ac8
mov ecx, str.MAINMENU
sbb esi, esi
and esi, 8
call fcn.00478640
push eax
push 0x7555
push esi
push ebx
call ebp
push 0x4e5e28
push 0
push str.SystemTray
push str.OPTIONS
call edi
neg eax
mov edx, 0x4b3ad0
mov ecx, str.MAINMENU
sbb esi, esi
and esi, 8
call fcn.00478640
push eax
push 0x7556
push esi
push ebx
call ebp
push 0
push 0
push 0x800
push ebx
call ebp
push 0x4e5e28
push 0
push str.ShowSysStat
push str.OPTIONS
call edi
neg eax
mov edx, 0x4b3be4
mov ecx, str.MAINMENU
sbb esi, esi
and esi, 8
call fcn.00478640
push eax
push 0x7564
push esi
push ebx
call ebp
push 0x4e5e28
push 0
push 0x4c0a98
push str.OPTIONS
call edi
neg eax
mov edx, 0x4b3bdc
mov ecx, str.MAINMENU
sbb esi, esi
and esi, 8
call fcn.00478640
push eax
push 0x7563
push esi
push ebx
call ebp
push 0x4e5e28
push 0
push str.Protect
push str.OPTIONS
call edi
neg eax
mov edx, 0x4b3ad8
mov ecx, str.MAINMENU
sbb esi, esi
and esi, 8
call fcn.00478640
push eax
push 0x7557
push esi
push ebx
call ebp
mov edi, dword [sym.imp.USER32.dll_LoadBitmapW]
push 0
push 0x754d
push dword [0x4e5c0c]
call edi
mov esi, dword [sym.imp.USER32.dll_SetMenuItemBitmaps]
push eax
push 0
push 0x754d
push ebx
call esi
push dword [esp + 0x14]
push dword [esp + 0x1c]
push 0
push 0x754f
push ebx
call esi
push dword [esp + 0x14]
push dword [esp + 0x1c]
push 0
push 0x7550
push ebx
call esi
push dword [esp + 0x14]
push dword [esp + 0x1c]
push 0
push 0x7551
push ebx
call esi
push dword [esp + 0x14]
push dword [esp + 0x1c]
push 0
push 0x7552
push ebx
call esi
push dword [esp + 0x14]
push dword [esp + 0x1c]
push 0
push 0x7553
push ebx
call esi
push 0
push 0x7554
push dword [0x4e5c0c]
call edi
push eax
push 0
push 0x7554
push ebx
call esi
push dword [esp + 0x14]
push dword [esp + 0x1c]
push 0
push 0x7555
push ebx
call esi
push dword [esp + 0x14]
push dword [esp + 0x1c]
push 0
push 0x7556
push ebx
call esi
push dword [esp + 0x14]
push dword [esp + 0x1c]
push 0
push 0x7564
push ebx
call esi
push dword [esp + 0x14]
push dword [esp + 0x1c]
push 0
push 0x7563
push ebx
call esi
push dword [esp + 0x14]
push dword [esp + 0x1c]
push 0
push 0x7557
push ebx
mov ebx, esi
call ebx
call dword [sym.imp.USER32.dll_CreatePopupMenu]
mov edx, 0x4b32cc
mov ecx, str.MAINMENU
mov esi, eax
call fcn.00478640
push eax
push esi
push 0x10
push dword [0x4e6250]
call ebp
mov edx, 0x4b3ae0
mov ecx, str.MAINMENU
call fcn.00478640
push eax
push 0x7559
push 0
push esi
call ebp
push 0
push 0
push 0x800
push esi
call ebp
mov edx, 0x4b3ae8
mov ecx, str.MAINMENU
call fcn.00478640
push eax
push 0x755a
push 0
push esi
call ebp
mov edx, 0x4b3af0
mov ecx, str.MAINMENU
call fcn.00478640
push eax
push 0x755b
push 0
push esi
call ebp
mov edx, 0x4b3c14
mov ecx, str.MAINMENU
call fcn.00478640
push eax
push 0x754b
push 0
push esi
call ebp
push 0
push 0
push 0x800
push esi
call ebp
mov edx, 0x4b3af8
mov ecx, str.MAINMENU
call fcn.00478640
push eax
push 0x755c
push 0
push esi
call ebp
push 0
push 0x7559
push dword [0x4e5c0c]
call edi
push eax
push 0
push 0x7559
push esi
call ebx
push 0
push 0x755a
push dword [0x4e5c0c]
call edi
push eax
push 0
push 0x755a
push esi
call ebx
push 0
push 0x755b
push dword [0x4e5c0c]
call edi
push eax
push 0
push 0x755b
push esi
call ebx
push 0
push 0x754b
push dword [0x4e5c0c]
call edi
push eax
push 0
push 0x754b
push esi
call ebx
push 0
push 0x755c
push dword [0x4e5c0c]
call edi
push eax
push 0
push 0x755c
push esi
call ebx
call dword [sym.imp.USER32.dll_CreatePopupMenu]
mov edx, 0x4b32e0
mov ecx, str.MAINMENU
mov esi, eax
call fcn.00478640
push eax
push esi
push 0x4010
push dword [0x4e6250]
call ebp
mov edx, 0x4b3b00
mov ecx, str.MAINMENU
call fcn.00478640
push eax
push 0x7540
push 0
push esi
call ebp
push 0
push 0
push 0x800
push esi
call ebp
mov edx, 0x4b3b28
mov ecx, str.MAINMENU
call fcn.00478640
push eax
push 0x755d
push 0
push esi
call ebp
mov edx, 0x4b3b30
mov ecx, str.MAINMENU
call fcn.00478640
push eax
push 0x755e
push 0
push esi
call ebp
mov edx, 0x4b3b9c
mov ecx, str.MAINMENU
call fcn.00478640
push eax
push 0x755f
push 0
push esi
call ebp
push 0
push 0
push 0x800
push esi
call ebp
mov edx, 0x4b3bc4
mov ecx, str.MAINMENU
call fcn.00478640
push eax
push 0x7560
push 0
push esi
call ebp
mov edx, 0x4b3bcc
mov ecx, str.MAINMENU
call fcn.00478640
push eax
push 0x7561
push 0
push esi
call ebp
push 0
push 0
push 0x800
push esi
call ebp
mov edx, 0x4b3bd4
mov ecx, str.MAINMENU
call fcn.00478640
push eax
push 0x7562
push 0
push esi
call ebp
push 0
push 0x7540
push dword [0x4e5c0c]
call edi
push eax
push 0
push 0x7540
push esi
call ebx
push 0
push 0x755d
push dword [0x4e5c0c]
call edi
push eax
push 0
push 0x755d
push esi
call ebx
push 0
push 0x755e
push dword [0x4e5c0c]
call edi
push eax
push 0
push 0x755e
push esi
call ebx
push 0
push 0x755f
push dword [0x4e5c0c]
call edi
push eax
push 0
push 0x755f
push esi
call ebx
push 0
push 0x7560
push dword [0x4e5c0c]
call edi
push eax
push 0
push 0x7560
push esi
call ebx
push 0
push 0x7561
push dword [0x4e5c0c]
call edi
push eax
push 0
push 0x7561
push esi
call ebx
push 0
push 0x7562
push dword [0x4e5c0c]
call edi
push eax
push 0
push 0x7562
push esi
call ebx
push dword [0x4e6250]
push dword [0x4e6030]
call dword [sym.imp.USER32.dll_SetMenu]
cmp dword [0x4e59f8], 0
jne 0x47c5f6
mov edi, dword [sym.imp.USER32.dll_GetSubMenu]
push 0
push dword [0x4e6250]
call edi
mov edx, 0x4b5788
mov ecx, str.MAINPAGE
mov esi, eax
call fcn.00478640
mov edx, eax
mov ecx, esi
call fcn.00462c70
push 1
push dword [0x4e6250]
call edi
mov edx, 0x4b5798
mov ecx, str.MAINPAGE
mov esi, eax
call fcn.00478640
mov edx, eax
mov ecx, esi
call fcn.00462c70
push 2
push dword [0x4e6250]
call edi
mov edx, 0x4b57a0
mov ecx, str.MAINPAGE
mov esi, eax
call fcn.00478640
mov edx, eax
mov ecx, esi
call fcn.00462c70
push 3
push dword [0x4e6250]
call edi
mov edx, 0x4b57b0
mov ecx, str.MAINPAGE
mov esi, eax
call fcn.00478640
mov edx, eax
mov ecx, esi
call fcn.00462c70
push 4
push dword [0x4e6250]
call edi
mov edx, 0x4b57a8
mov ecx, str.MAINPAGE
mov esi, eax
call fcn.00478640
mov edx, eax
mov ecx, esi
call fcn.00462c70
push 5
push dword [0x4e6250]
call edi
mov edx, 0x4b57b8
mov ecx, str.MAINPAGE
mov esi, eax
call fcn.00478640
mov edx, eax
mov ecx, esi
call fcn.00462c70
push 6
push dword [0x4e6250]
call edi
mov edx, 0x4b57c0
mov ecx, str.MAINPAGE
mov esi, eax
call fcn.00478640
mov edx, eax
mov ecx, esi
pop edi
pop esi
pop ebp
pop ebx
add esp, 0xc
jmp fcn.00462c70
pop edi
pop esi
pop ebp
pop ebx
add esp, 0xc
ret