Function at 0x42d850
Capabilities:
Read .ini file

Disassembly:
push 0xffffffffffffffff
push 0x4a6c36
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
sub esp, 0x84c
push ebx
mov ebx, dword [esp + 0x860]
push ebp
push edi
xor ebp, ebp
mov edi, ecx
cmp ebx, ebp
mov dword [esp + 0x14], edi
je 0x42dc57
mov eax, dword [ebx + 4]
push esi
push ebp
push eax
call fcn.0046d9e0
mov ecx, dword [ebx + 4]
mov esi, dword [sym.imp.USER32.dll_DeleteMenu]
add esp, 8
push 0x400
push ebp
push ecx
call esi
cmp eax, ebp
je 0x42d8b9
mov edx, dword [ebx + 4]
push 0x400
push ebp
push edx
call esi
cmp eax, ebp
jne 0x42d8a9
mov eax, dword [0x4d8094]
mov dword [esp + 0x10], eax
mov eax, dword [0x4decb0]
mov dword [esp + 0x864], ebp
cmp eax, ebp
push 0xef75
lea ecx, [esp + 0x14]
je 0x42d8e6
push ecx
call fcn.004108c0
add esp, 8
jmp 0x42d8eb
call fcn.004906bd
push 0x1c
call fcn.0048fc5f
add esp, 4
mov dword [esp + 0x20], eax
cmp eax, ebp
mov byte [esp + 0x864], 1
je 0x42d910
mov ecx, eax
call fcn.00446410
mov esi, eax
jmp 0x42d912
xor esi, esi
add edi, 0x1034
mov dword [esi + 0xc], 0x45
mov dword [esi + 8], edi
mov edx, dword [esp + 0x10]
push esi
push edx
mov byte [esp + 0x86c], 0
call fcn.00446490
mov eax, dword [esp + 0x87c]
mov ecx, dword [ebx + 4]
add esp, 8
add eax, 0x6100
push esi
push eax
push 0x100
push ecx
call dword [sym.imp.USER32.dll_AppendMenuA]
mov eax, dword [0x4decb0]
push 0xef76
cmp eax, ebp
je 0x42d972
lea edx, [esp + 0x14]
push edx
call fcn.004108c0
add esp, 8
jmp 0x42d97b
lea ecx, [esp + 0x14]
call fcn.004906bd
push 0x1c
call fcn.0048fc5f
add esp, 4
mov dword [esp + 0x20], eax
cmp eax, ebp
mov byte [esp + 0x864], 2
je 0x42d9a0
mov ecx, eax
call fcn.00446410
mov esi, eax
jmp 0x42d9a2
xor esi, esi
mov dword [esi + 8], edi
mov dword [esi + 0xc], 0x46
mov eax, dword [esp + 0x10]
push esi
push eax
mov byte [esp + 0x86c], 0
call fcn.00446490
mov ecx, dword [esp + 0x87c]
mov edx, dword [ebx + 4]
add esp, 8
add ecx, 0x6000
push esi
push ecx
push 0x100
push edx
call dword [sym.imp.USER32.dll_AppendMenuA]
mov ecx, dword [esp + 0x18]
push ebx
call fcn.00435170
mov eax, dword [esp + 0x870]
lea ecx, [esp + 0x14]
push eax
push 0x4deccc
push ecx
call fcn.0048f8d6
mov ax, word [0x4d4798]
mov edx, dword [str.state]
mov ecx, dword [str.name]
mov word [esp + 0x38], ax
mov eax, dword [0x4d4788]
mov dword [esp + 0x34], edx
mov dl, byte [0x4d4790]
mov dword [esp + 0x40], eax
mov al, byte [0x4d4784]
mov dword [esp + 0x28], ecx
mov ecx, dword [str.download]
mov byte [esp + 0x2c], dl
mov edx, dword [0x4d4780]
mov byte [esp + 0x50], al
mov eax, dword [0x4d8094]
mov dword [esp + 0x3a], ebp
mov dword [esp + 0x2d], ebp
mov dword [esp + 0x44], ebp
mov dword [esp + 0x48], ecx
mov dword [esp + 0x4c], edx
mov dword [esp + 0x51], ebp
xor edi, edi
mov dword [esp + 0x1c], eax
mov dword [esp + 0x24], eax
mov byte [esp + 0x864], 5
jmp 0x42da7b
xor ebp, ebp
lea ecx, [esp + 0x39]
push 0xa
push ecx
push edi
call fcn.00479ed6
lea edx, [esp + 0x38]
push 0xa
push edx
push edi
call fcn.00479ed6
lea eax, [esp + 0x5b]
push 0xa
push eax
push edi
call fcn.00479ed6
lea ecx, [esp + 0x74]
push 0xa
push ecx
push edi
call fcn.00479ed6
mov edx, dword [esp + 0x44]
add esp, 0x30
lea eax, [esp + 0x34]
push edx
push 1
push eax
push str.Group
call dword [sym.imp.KERNEL32.dll_GetPrivateProfileIntA]
mov ecx, dword [esp + 0x14]
mov esi, dword [sym.imp.KERNEL32.dll_GetPrivateProfileStringA]
push ecx
lea edx, [esp + 0x60]
mov dword [esp + 0x24], eax
push 0x800
push edx
lea eax, [esp + 0x34]
push ebp
push eax
push str.Group
call esi
mov ebp, eax
test ebp, ebp
je 0x42dbf2
lea ecx, [esp + 0x5c]
push ecx
lea ecx, [esp + 0x20]
call fcn.0048f7ca
mov edx, dword [esp + 0x14]
lea eax, [esp + 0x5c]
push edx
push 0x800
push eax
lea ecx, [esp + 0x4c]
push 0
push ecx
push str.Group
call esi
mov ebp, eax
test ebp, ebp
je 0x42dbf2
mov ecx, dword [esp + 0x18]
lea edx, [esp + 0x1c]
push edx
call fcn.00443cb0
lea eax, [esp + 0x5c]
lea ecx, [esp + 0x24]
push eax
call fcn.0048f7ca
push 0x1c
call fcn.0048fc5f
add esp, 4
mov dword [esp + 0x58], eax
test eax, eax
mov byte [esp + 0x864], 6
je 0x42db6f
mov ecx, eax
call fcn.00446410
mov esi, eax
jmp 0x42db71
xor esi, esi
mov ecx, dword [esp + 0x18]
mov byte [esp + 0x864], 5
lea eax, [ecx + 0x1034]
mov dword [esi + 8], eax
mov eax, dword [esp + 0x20]
test eax, eax
je 0x42db97
mov dword [esi + 0xc], 0x47
jmp 0x42db9e
mov dword [esi + 0xc], 0x48
mov edx, dword [esp + 0x1c]
push esi
push edx
call fcn.00446490
mov eax, dword [esp + 0x2c]
push esi
push eax
call fcn.00446560
mov ecx, dword [esp + 0x24]
add esp, 0x10
lea edx, [esp + 0x48]
push ecx
push 0xffffffffffffffff
push edx
push str.Group
call dword [sym.imp.KERNEL32.dll_GetPrivateProfileIntA]
mov dword [esi + 0x18], eax
mov eax, dword [0x4de590]
mov ecx, dword [ebx + 4]
add eax, 0x6600
push esi
push eax
push 0x100
push ecx
call dword [sym.imp.USER32.dll_AppendMenuA]
inc dword [0x4de590]
inc edi
test ebp, ebp
jne 0x42da79
mov eax, dword [0x4debb4]
pop esi
test eax, eax
jne 0x42dc10
mov ecx, dword [esp + 0x14]
push ebp
push ebx
call fcn.00425180
lea ecx, [esp + 0x20]
mov byte [esp + 0x860], 4
call fcn.0048f641
lea ecx, [esp + 0x18]
mov byte [esp + 0x860], 3
call fcn.0048f641
lea ecx, [esp + 0x10]
mov byte [esp + 0x860], 0
call fcn.0048f641
lea ecx, [esp + 0xc]
mov dword [esp + 0x860], 0xffffffff
call fcn.0048f641
mov ecx, dword [esp + 0x858]
pop edi
pop ebp
pop ebx
mov dword fs:[0], ecx
add esp, 0x858
ret 0xc