Function at 0x401000
Capabilities:
Create thread
Read .ini file

Disassembly:
push ebp
mov ebp, esp
and esp, 0xfffffff8
sub esp, 0x94
mov eax, dword [section..data]
xor eax, esp
mov dword [esp + 0x90], eax
push ebx
push esi
push edi
push 0
push dword [0x4443c0]
mov edi, dword [sym.imp.USER32.dll_CreateWindowExW]
mov ebx, 0xcd
push ebx
push dword [0x4443bc]
push 0x1c0
push 0x5c
push 0xa
push 9
push 0x5000000e
push 0x4355cc
push str.STATIC
push 0x20000
call edi
push ebx
push dword [0x4443c0]
mov esi, eax
call dword [sym.imp.USER32.dll_LoadBitmapW]
mov ebx, dword [sym.imp.USER32.dll_SendMessageW]
push eax
push 0
push 0x172
push esi
call ebx
xor eax, eax
push eax
push dword [0x4443c0]
push 0x429
push dword [0x4443bc]
push eax
push eax
push 0x67
push 0x30a
push 0x50000003
push eax
push str.static
push eax
call edi
push 0x1000
push 0
push 0
push 1
push 0x429
push dword [0x4443c0]
mov esi, eax
call dword [sym.imp.USER32.dll_LoadImageW]
push eax
push 1
push 0x172
push esi
call ebx
xor eax, eax
push eax
push dword [0x4443c0]
push 0x2e5
push dword [0x4443bc]
push eax
push eax
push 0x153
push 0x304
push 0x50000003
push eax
push str.static
push eax
call edi
push 0x1000
push 0
push 0
push 1
push 0x2e5
push dword [0x4443c0]
mov esi, eax
call dword [sym.imp.USER32.dll_LoadImageW]
push eax
push 1
push 0x172
push esi
call ebx
push 0x3f9
push ecx
push 0x24
push 0x64
push 0x19
push 0x2ee
mov edx, 0x4355f0
mov ecx, 0x4355f8
call fcn.00414a7a
mov edx, 0x10000240
mov ecx, eax
call fcn.0040dfcc
add esp, 0x18
mov esi, eax
push 0x1000
push 0x10
push 0x10
push 1
push 0x152
push dword [0x4443c0]
call dword [sym.imp.USER32.dll_LoadImageW]
push eax
push 1
push 0xf7
push esi
call ebx
mov edx, 0x435600
mov ecx, 0x4355f8
call fcn.00414a7a
mov edx, eax
mov ecx, esi
call fcn.0040bee1
push 0
push esi
call dword [sym.imp.USER32.dll_EnableWindow]
push 0x3f8
push ecx
push 0x24
push 0x64
push 0x44
push 0x2ee
mov edx, 0x435608
mov ecx, 0x4355f8
call fcn.00414a7a
mov edx, 0x10000200
mov ecx, eax
call fcn.0040dfcc
add esp, 0x18
mov edx, 0x435610
mov ecx, 0x4355f8
mov esi, eax
call fcn.00414a7a
mov edx, eax
mov ecx, esi
call fcn.0040bee1
push 0x3fa
push ecx
push 0x24
push 0x64
push 0x97
push 0x2ee
mov edx, 0x435618
mov ecx, 0x4355f8
call fcn.00414a7a
mov edx, 0x10000200
mov ecx, eax
call fcn.0040dfcc
add esp, 0x18
mov edx, 0x435620
mov ecx, 0x4355f8
mov esi, eax
call fcn.00414a7a
mov edx, eax
mov ecx, esi
call fcn.0040bee1
xor esi, esi
push esi
push dword [0x4443c0]
push 0x3f6
push dword [0x4443bc]
push 0xa2
push 0x26a
push 0x19
push 0x7a
push 0x50008005
push esi
push str.SysListView32
push 0x200
call edi
push 0x10020
push esi
push 0x1036
push eax
mov dword [esp + 0x20], eax
call ebx
push esi
push 7
push 0x21
push 0x10
push 0x10
call dword [sym.imp.COMCTL32.dll_ImageList_Create]
mov esi, 0x4e4d
mov edi, eax
movzx ecx, si
push ecx
push dword [0x4443c0]
call dword [sym.imp.USER32.dll_LoadIconW]
push eax
push 0xffffffffffffffff
push edi
call dword [sym.imp.COMCTL32.dll_ImageList_ReplaceIcon]
inc esi
cmp esi, 0x4e57
jle 0x40128d
mov esi, edi
push esi
call dword [sym.imp.COMCTL32.dll_ImageList_GetImageCount]
push esi
mov esi, dword [esp + 0x14]
push 1
push 0x1003
push esi
call ebx
and dword [esp + 0x18], 0
mov edx, 0x435644
mov ecx, 0x4355f8
mov dword [esp + 0x14], 0xf
mov dword [esp + 0x1c], 0x3c
call fcn.00414a7a
mov dword [esp + 0x20], eax
lea eax, [esp + 0x14]
push eax
push 0
push 0x1061
push esi
call ebx
mov edi, 0x43564c
mov dword [esp + 0x1c], 0x6e
mov edx, 0x435648
mov ecx, edi
call fcn.00414a7a
mov dword [esp + 0x20], eax
lea eax, [esp + 0x14]
push eax
push 1
push 0x1061
push esi
call ebx
mov edx, 0x435658
mov dword [esp + 0x18], 2
mov ecx, edi
mov dword [esp + 0x1c], 0x6e
call fcn.00414a7a
mov dword [esp + 0x20], eax
lea eax, [esp + 0x14]
push eax
push 2
push 0x1061
push esi
call ebx
push 0x50
pop edi
mov edx, 0x43565c
mov dword [esp + 0x18], 1
mov ecx, 0x43564c
mov dword [esp + 0x1c], edi
call fcn.00414a7a
mov dword [esp + 0x20], eax
lea eax, [esp + 0x14]
push eax
push 3
push 0x1061
push esi
call ebx
mov edx, 0x435660
mov dword [esp + 0x1c], edi
mov ecx, 0x43564c
call fcn.00414a7a
mov dword [esp + 0x20], eax
mov edi, 0x1061
lea eax, [esp + 0x14]
push eax
push 4
push edi
push esi
call ebx
and dword [esp + 0x18], 0
mov edx, 0x435664
mov ecx, 0x4355f8
mov dword [esp + 0x1c], 0x12c
call fcn.00414a7a
mov dword [esp + 0x20], eax
lea eax, [esp + 0x14]
push eax
push 5
push edi
push esi
call ebx
xor esi, esi
mov dword [0x43ceb0], 0xb
mov dword [0x43cebc], esi
mov dword [0x43cec0], esi
call fcn.0040f10c
lea eax, [esp + 0x98]
push eax
push esi
push esi
push 0x40724b
push esi
push esi
call dword [sym.imp.KERNEL32.dll_CreateThread]
push esi
push dword [0x4443c0]
mov edi, dword [sym.imp.USER32.dll_CreateWindowExW]
push 0x3f7
push dword [0x4443bc]
push 0x7f
push 0x56
push 0xe5
push 0x7a
push 0x5000800d
push esi
push str.SysListView32
push 0x200
call edi
push 0x10020
push esi
mov edi, eax
push 0x1036
push edi
call ebx
push esi
push 7
push 0x21
push 0x10
push 0x10
call dword [sym.imp.COMCTL32.dll_ImageList_Create]
push 0x4e52
push dword [0x4443c0]
mov esi, eax
call dword [sym.imp.USER32.dll_LoadIconW]
push eax
push 0xffffffffffffffff
push esi
call dword [sym.imp.COMCTL32.dll_ImageList_ReplaceIcon]
push esi
push 1
push 0x1003
push edi
call ebx
xor esi, esi
mov dword [esp + 0x6c], 0xf
mov edx, 0x435644
mov dword [esp + 0x70], esi
mov ecx, 0x4355f8
mov dword [esp + 0x74], 0x3c
call fcn.00414a7a
mov dword [esp + 0x78], eax
lea eax, [esp + 0x6c]
push eax
push 1
push 0x1061
push edi
call ebx
mov dword [0x43ceec], 0xb
mov dword [0x43cef8], esi
mov dword [0x43cefc], esi
call fcn.004021d8
mov edi, 0x422
mov edx, 0x43566c
push edi
push ecx
push 0x4e
push 0x56
push 0x16f
push 0x7a
mov ecx, 0x4355f8
call fcn.00414a7a
mov edx, 0x10000248
mov ecx, eax
call fcn.0040dfcc
add esp, 0x18
mov esi, eax
push 0x1000
push 0x28
push 0x28
push 1
push edi
push dword [0x4443c0]
mov edi, dword [sym.imp.USER32.dll_LoadImageW]
call edi
push eax
push 1
push 0xf7
push esi
call ebx
mov edx, 0x435670
mov ecx, 0x4355f8
call fcn.00414a7a
mov edx, eax
mov ecx, esi
call fcn.0040bee1
push 0x423
push ecx
push 0x24
push 0x64
push 0xe5
push 0x2ee
mov edx, 0x435678
mov ecx, 0x4355f8
call fcn.00414a7a
mov edx, 0x10000240
mov ecx, eax
call fcn.0040dfcc
add esp, 0x18
mov esi, eax
push 0x1000
push 0x10
push 0x10
push 1
push 0x3f1
push dword [0x4443c0]
call edi
push eax
push 1
push 0xf7
push esi
call ebx
mov edx, 0x435680
mov ecx, 0x4355f8
call fcn.00414a7a
mov edx, eax
mov ecx, esi
call fcn.0040bee1
push 0x424
push ecx
push 0x24
push 0x64
push 0x10f
push 0x2ee
mov edx, 0x435688
mov ecx, 0x4355f8
call fcn.00414a7a
mov edx, 0x10000242
mov ecx, eax
call fcn.0040dfcc
add esp, 0x18
mov esi, eax
push 0x1000
push 0x10
push 0x10
push 1
push 0x3f2
push dword [0x4443c0]
call edi
push eax
push 1
push 0xf7
push esi
call ebx
mov edx, 0x435610
mov ecx, 0x4355f8
call fcn.00414a7a
mov edx, eax
mov ecx, esi
call fcn.0040bee1
push 0x425
push ecx
push 0x24
push 0x64
push 0x139
push 0x2ee
mov edx, 0x435690
mov ecx, 0x4355f8
call fcn.00414a7a
mov edx, 0x10000240
mov ecx, eax
call fcn.0040dfcc
add esp, 0x18
mov esi, eax
push 0x1000
push 0x10
push 0x10
push 1
push 0xfa
push dword [0x4443c0]
call edi
push eax
push 1
push 0xf7
push esi
call ebx
mov edx, 0x435698
mov ecx, 0x4355f8
call fcn.00414a7a
mov edx, eax
mov ecx, esi
call fcn.0040bee1
push 0x426
push ecx
push 0x24
push 0x64
push 0x199
push 0x2ee
mov edx, 0x4356a0
mov ecx, str.FLDR
call fcn.00414a7a
mov edx, 0x10000240
mov ecx, eax
call fcn.0040dfcc
add esp, 0x18
mov esi, eax
push 0x1000
push 0x10
push 0x10
push 1
push 0xfe
push dword [0x4443c0]
call edi
push eax
push 1
push 0xf7
push esi
call ebx
mov edx, 0x4356b4
mov ecx, str.FLDR
call fcn.00414a7a
mov edx, eax
mov ecx, esi
call fcn.0040bee1
xor eax, eax
push eax
push dword [0x4443c0]
push 0x41d
push dword [0x4443bc]
push eax
push eax
push 0x1aa
mov edi, dword [sym.imp.USER32.dll_CreateWindowExW]
push 0xf8
push 0x50000003
push eax
push str.static
push eax
call edi
push 0x1000
push 0x10
push 0x10
push 1
push 0x41d
push dword [0x4443c0]
mov esi, eax
call dword [sym.imp.USER32.dll_LoadImageW]
push eax
push 1
push 0x172
push esi
call ebx
push 0
push dword [0x4443c0]
mov edx, 0x4356bc
mov ecx, 0x4355f8
push 0x427
push dword [0x4443bc]
push 0x16
push 0x1b8
push 0x1a7
push 0x112
push 0x50000c03
call fcn.00414a7a
push eax
push str.button
push 0
call edi
push 1
push dword [0x4443b8]
mov esi, eax
push 0x30
push esi
call ebx
push 0
push 0x4441b0
push 0
push str.StartSubst
push str.OPTIONS
call dword [sym.imp.KERNEL32.dll_GetPrivateProfileIntW]
push eax
push 0xf1
push esi
call ebx
xor esi, esi
push esi
push dword [0x4443c0]
push 0x428
push dword [0x4443bc]
push 0xb4
push 0x1f0
push 0xe5
push 0xf4
push 0x50000005
push esi
push str.SysListView32
push 0x200
call edi
push 0x10024
push esi
mov edi, eax
push 0x1036
push edi
call ebx
push esi
push 7
push 0x21
push 0x10
push 0x10
call dword [sym.imp.COMCTL32.dll_ImageList_Create]
push 0x428
push dword [0x4443c0]
mov esi, eax
call dword [sym.imp.USER32.dll_LoadIconW]
push eax
push 0xffffffffffffffff
push esi
call dword [sym.imp.COMCTL32.dll_ImageList_ReplaceIcon]
push esi
push 1
push 0x1003
push edi
call ebx
and dword [esp + 0x44], 0
mov edx, 0x435644
mov ecx, 0x4355f8
mov dword [esp + 0x40], 0xf
mov dword [esp + 0x48], 0x4b
call fcn.00414a7a
mov dword [esp + 0x4c], eax
lea eax, [esp + 0x40]
push eax
push 0
push 0x1061
push edi
call ebx
push 2
pop esi
mov edx, 0x4356fc
mov dword [esp + 0x44], esi
mov ecx, 0x4355f8
mov dword [esp + 0x48], 0x96
call fcn.00414a7a
mov dword [esp + 0x4c], eax
lea eax, [esp + 0x40]
push eax
push 1
push 0x1061
push edi
call ebx
and dword [esp + 0x44], 0
mov edx, 0x435704
mov ecx, 0x4355f8
mov dword [esp + 0x48], 0x190
call fcn.00414a7a
mov dword [esp + 0x4c], eax
lea eax, [esp + 0x40]
push eax
push esi
push 0x1061
push edi
call ebx
xor edi, edi
mov dword [0x43cf28], 0xb
mov dword [0x43cf34], edi
mov dword [0x43cf38], edi
call fcn.00403b22
push edi
push dword [0x4443c0]
mov esi, 0x3ea
mov edx, 0x43565c
push esi
push dword [0x4443bc]
mov ecx, 0x4355f8
push 0xc6
push 0x2f0
push 4
push 0x6e
push 0x50000007
call fcn.00414a7a
push eax
push str.button
push edi
mov edi, dword [sym.imp.USER32.dll_CreateWindowExW]
call edi
push 1
push dword [0x4443b8]
push 0x30
push esi
push dword [0x4443bc]
mov esi, dword [sym.imp.USER32.dll_GetDlgItem]
call esi
push eax
call ebx
push 0
push dword [0x4443c0]
mov edx, 0x435660
mov ecx, 0x4355f8
push 0x3eb
push dword [0x4443bc]
push 0xfb
push 0x6e
push 0xcf
push 0x6e
push 0x50000007
call fcn.00414a7a
push eax
push str.button
push 0
call edi
push 1
push dword [0x4443b8]
push 0x30
push 0x3eb
push dword [0x4443bc]
call esi
push eax
call ebx
push 0
push dword [0x4443c0]
mov edx, 0x43570c
mov ecx, 0x4355f8
push 0x3f4
push dword [0x4443bc]
push 0xfb
push 0x276
push 0xcf
push 0xe8
push 0x50000007
call fcn.00414a7a
push eax
push str.button
push 0
call edi
push 1
push dword [0x4443b8]
push 0x30
push 0x3f4
push dword [0x4443bc]
call esi
push eax
call ebx
mov ecx, dword [esp + 0x9c]
pop edi
pop esi
pop ebx
xor ecx, esp
call fcn.00415746
mov esp, ebp
pop ebp
ret