Function at 0x47a5c0
Capabilities:
Capture screenshot
Read .ini file

Disassembly:
sub esp, 0xc
push ebx
push ebp
push esi
push edi
call dword [sym.imp.USER32.dll_CreateMenu]
mov dword [0x4df1a8], eax
call dword [sym.imp.USER32.dll_CreatePopupMenu]
mov ebx, dword [sym.imp.USER32.dll_LoadBitmapW]
mov esi, eax
push 0x4e37
push dword [0x4deb64]
call ebx
push 0x4e38
push dword [0x4deb64]
mov dword [esp + 0x1c], eax
call ebx
mov edx, 0x4ad0e0
mov dword [esp + 0x18], eax
mov ecx, str.MAINMENU
call fcn.00477440
mov ebp, dword [sym.imp.USER32.dll_AppendMenuW]
push eax
push esi
push 0x10
push dword [0x4df1a8]
call ebp
mov edx, 0x4ad0d0
mov ecx, str.MAINMENU
call fcn.00477440
push eax
push 0x7530
push 0
push esi
call ebp
mov edx, 0x4ad0cc
mov ecx, str.MAINMENU
call fcn.00477440
push eax
push 0x7531
push 0
push esi
call ebp
push 0
push 0
push 0x800
push esi
call ebp
mov edx, 0x4ad0dc
mov ecx, str.MAINMENU
call fcn.00477440
push eax
push 0x7558
push 0
push esi
call ebp
push 0
push 0x7530
push dword [0x4deb64]
call ebx
mov edi, dword [sym.imp.USER32.dll_SetMenuItemBitmaps]
push eax
push 0
push 0x7530
push esi
call edi
push 0
push 0x7531
push dword [0x4deb64]
call ebx
push eax
push 0
push 0x7531
push esi
call edi
push 0
push 0x7558
push dword [0x4deb64]
call ebx
push eax
push 0
push 0x7558
push esi
call edi
call dword [sym.imp.USER32.dll_CreatePopupMenu]
mov edx, 0x4ad0a4
mov ecx, str.MAINMENU
mov esi, eax
call fcn.00477440
push eax
push esi
push 0x10
push dword [0x4df1a8]
call ebp
push str.Win.ini
push 0x7532
push 0
push esi
call ebp
push str.System.ini
push 0x7533
push 0
push esi
call ebp
push 0
push 0
push 0x800
push esi
call ebp
push str.Autoexec.bat
push 0x7534
push 0
push esi
call ebp
push str.Config.sys
push 0x7535
push 0
push esi
call ebp
push 0
push 0
push 0x800
push esi
call ebp
push str.Autoexec.nt
push 0x7536
push 0
push esi
call ebp
push str.Config.nt
push 0x7537
push 0
push esi
call ebp
push 0
push 0x7532
push dword [0x4deb64]
call ebx
push eax
push 0
push 0x7532
push esi
call edi
push 0
push 0x7532
push dword [0x4deb64]
call ebx
push eax
push 0
push 0x7533
push esi
call edi
push 0
push 0x7534
push dword [0x4deb64]
call ebx
push eax
push 0
push 0x7534
push esi
call edi
push 0
push 0x7534
push dword [0x4deb64]
call ebx
push eax
push 0
push 0x7535
push esi
call edi
push 0
push 0x7536
push dword [0x4deb64]
call ebx
push eax
push 0
push 0x7536
push esi
call edi
push 0
push 0x7536
push dword [0x4deb64]
call ebx
push eax
push 0
push 0x7537
push esi
call edi
call dword [sym.imp.USER32.dll_CreatePopupMenu]
mov edx, 0x4ad374
mov ecx, str.MAINMENU
mov esi, eax
call fcn.00477440
push eax
push esi
push 0x10
push dword [0x4df1a8]
call ebp
mov edx, 0x4ad0d4
mov ecx, str.MAINMENU
call fcn.00477440
push eax
push 0x7538
push 0
push esi
call ebp
push 0
push 0
push 0x800
push esi
call ebp
mov edx, 0x4ad3dc
mov ecx, str.MAINMENU
call fcn.00477440
push eax
push 0x7539
push 0
push esi
call ebp
mov edx, 0x4ad444
mov ecx, str.MAINMENU
call fcn.00477440
push eax
push 0x753a
push 0
push esi
call ebp
mov edx, 0x4ad480
mov ecx, str.MAINMENU
call fcn.00477440
push eax
push 0x753b
push 0
push esi
call ebp
mov edx, 0x4ad560
mov ecx, str.MAINMENU
call fcn.00477440
push eax
push 0x753c
push 0
push esi
call ebp
mov eax, dword [0x4c5198]
cmp eax, 0x64
jne 0x47a8dc
mov edx, 0x4ad76c
mov ecx, str.MAINMENU
call fcn.00477440
push eax
push 0x753d
push 0
push esi
call ebp
mov eax, dword [0x4c5198]
cmp eax, 0xc8
jne 0x47a96e
mov edx, 0x4ad76c
mov ecx, str.MAINMENU
call fcn.00477440
push eax
push 0x753d
push 0
push esi
call ebp
mov edx, 0x4ad774
mov ecx, str.MAINMENU
call fcn.00477440
push eax
push 0x753e
push 0
push esi
call ebp
mov edx, 0x4ad7bc
mov ecx, str.MAINMENU
call fcn.00477440
push eax
push 0x753f
push 0
push esi
call ebp
push 0
push 0x753e
push dword [0x4deb64]
call ebx
push eax
push 0
push 0x753e
push esi
call edi
push 0
push 0x753f
push dword [0x4deb64]
call ebx
push eax
push 0
push 0x753f
push esi
call edi
mov eax, dword [0x4c5198]
cmp eax, 0x12c
jne 0x47a9fb
mov edx, 0x4ad9bc
mov ecx, str.MAINMENU
call fcn.00477440
push eax
push 0x754c
push 0
push esi
call ebp
mov edx, 0x4ad9b4
mov ecx, str.MAINMENU
call fcn.00477440
push eax
push 0x753d
push 0
push esi
call ebp
mov edx, 0x4ad7bc
mov ecx, str.MAINMENU
call fcn.00477440
push eax
push 0x753f
push 0
push esi
call ebp
push 0
push 0x7571
push dword [0x4deb64]
call ebx
push eax
push 0
push 0x754c
push esi
call edi
push 0
push 0x753f
push dword [0x4deb64]
call ebx
push eax
push 0
push 0x753f
push esi
call edi
push 0
push 0x7538
push dword [0x4deb64]
call ebx
push eax
push 0
push 0x7538
push esi
call edi
push 0
push 0x7539
push dword [0x4deb64]
call ebx
push eax
push 0
push 0x7539
push esi
call edi
push 0
push 0x753a
push dword [0x4deb64]
call ebx
push eax
push 0
push 0x753a
push esi
call edi
push 0
push 0x753b
push dword [0x4deb64]
call ebx
push eax
push 0
push 0x753b
push esi
call edi
push 0
push 0x753c
push dword [0x4deb64]
call ebx
push eax
push 0
push 0x753c
push esi
call edi
push 0
push 0x753d
push dword [0x4deb64]
call ebx
push eax
push 0
push 0x753d
push esi
call edi
call dword [sym.imp.USER32.dll_CreatePopupMenu]
mov edx, 0x4ad370
mov ecx, str.MAINMENU
mov esi, eax
call fcn.00477440
push eax
push esi
push 0x10
push dword [0x4df1a8]
call ebp
cmp dword [0x4de950], 0
je 0x47aae9
mov edx, 0x4ad9ac
mov ecx, str.MAINMENU
call fcn.00477440
push eax
push 0x7565
push 0
push esi
call ebp
push 0
push 0
push 0x800
push esi
call ebp
mov edx, 0x4ad7c4
mov ecx, str.MAINMENU
call fcn.00477440
push eax
push 0x7541
push 0
push esi
call ebp
cmp dword [0x4de950], 2
je 0x47ab26
mov edx, 0x4ad7dc
mov ecx, str.MAINMENU
call fcn.00477440
push eax
push 0x7542
push 0
push esi
call ebp
mov edx, 0x4ad7e4
mov ecx, str.MAINMENU
call fcn.00477440
push eax
push 0x7546
push 0
push esi
call ebp
push 0
push 0
push 0x800
push esi
call ebp
mov edx, 0x4ad7ec
mov ecx, str.MAINMENU
call fcn.00477440
push eax
push 0x7543
push 0
push esi
call ebp
mov eax, dword [0x4de950]
cmp eax, 2
je 0x47ab8f
mov edx, 0x4ad7f4
mov ecx, str.MAINMENU
call fcn.00477440
push eax
push 0x7544
push 0
push esi
call ebp
mov eax, dword [0x4de950]
test eax, eax
je 0x47abad
mov edx, 0x4ad80c
mov ecx, str.MAINMENU
call fcn.00477440
push eax
push 0x7545
push 0
push esi
call ebp
push 0
push 0
push 0x800
push esi
call ebp
mov edx, 0x4ad838
mov ecx, str.MAINMENU
call fcn.00477440
push eax
push 0x7548
push 0
push esi
call ebp
mov edx, 0x4ad840
mov ecx, str.MAINMENU
call fcn.00477440
push eax
push 0x7549
push 0
push esi
call ebp
mov edx, 0x4ad848
mov ecx, str.MAINMENU
call fcn.00477440
push eax
push 0x754a
push 0
push esi
call ebp
cmp dword [0x4de950], 1
jne 0x47ac36
push 0
push 0
push 0x800
push esi
call ebp
mov edx, 0x4ad850
mov ecx, str.MAINMENU
call fcn.00477440
push eax
push 0x7547
push 0
push esi
call ebp
push 0
push 0x7565
push dword [0x4deb64]
call ebx
push eax
push 0
push 0x7565
push esi
call edi
push 0
push 0x7541
push dword [0x4deb64]
call ebx
push eax
push 0
push 0x7541
push esi
call edi
push 0
push 0x7542
push dword [0x4deb64]
call ebx
push eax
push 0
push 0x7542
push esi
call edi
push 0
push 0x7543
push dword [0x4deb64]
call ebx
push eax
push 0
push 0x7543
push esi
call edi
push 0
push 0x7544
push dword [0x4deb64]
call ebx
push eax
push 0
push 0x7544
push esi
call edi
push 0
push 0x7545
push dword [0x4deb64]
call ebx
push eax
push 0
push 0x7545
push esi
call edi
push 0
push 0x7546
push dword [0x4deb64]
call ebx
push eax
push 0
push 0x7546
push esi
call edi
push 0
push 0x7547
push dword [0x4deb64]
call ebx
push eax
push 0
push 0x7547
push esi
call edi
push 0
push 0x7548
push dword [0x4deb64]
call ebx
push eax
push 0
push 0x7548
push esi
call edi
push 0
push 0x7549
push dword [0x4deb64]
call ebx
push eax
push 0
push 0x7549
push esi
call edi
push 0
push 0x754a
push dword [0x4deb64]
call ebx
push eax
push 0
push 0x754a
push esi
call edi
call dword [sym.imp.USER32.dll_CreatePopupMenu]
mov edx, 0x4ad378
mov ecx, str.MAINMENU
mov ebx, eax
call fcn.00477440
push eax
push ebx
push 0x10
push dword [0x4df1a8]
call ebp
mov edx, 0x4ad858
mov ecx, str.MAINMENU
call fcn.00477440
push eax
push 0x754d
push 0
push ebx
call ebp
push 0
push 0
push 0x800
push ebx
call ebp
mov edi, dword [sym.imp.KERNEL32.dll_GetPrivateProfileIntW]
push 0x4ded80
push 0
push str.OnTop
push str.OPTIONS
call edi
neg eax
mov edx, 0x4ad814
mov ecx, str.MAINMENU
sbb esi, esi
and esi, 8
call fcn.00477440
push eax
push 0x754f
push esi
push ebx
call ebp
push 0x4ded80
push 0
push str.Magnet
push str.OPTIONS
call edi
neg eax
mov edx, 0x4ad830
mov ecx, str.MAINMENU
sbb esi, esi
and esi, 8
call fcn.00477440
push eax
push 0x7550
push esi
push ebx
call ebp
push 0x4ded80
push 0
push str.SaveSize
push str.OPTIONS
call edi
neg eax
sbb esi, esi
mov edx, 0x4ad868
mov ecx, str.MAINMENU
and esi, 8
call fcn.00477440
push eax
push 0x7551
push esi
push ebx
call ebp
push 0x4ded80
push 0
push str.Position
push str.OPTIONS
call edi
neg eax
mov edx, 0x4ad870
mov ecx, str.MAINMENU
sbb esi, esi
and esi, 8
call fcn.00477440
push eax
push 0x7552
push esi
push ebx
call ebp
push 0x4ded80
push 0
push str.NoSaver
push str.OPTIONS
call edi
neg eax
mov edx, 0x4ad878
mov ecx, str.MAINMENU
sbb esi, esi
and esi, 8
call fcn.00477440
push eax
push 0x7553
push esi
push ebx
call ebp
push 0
push 0
push 0x800
push ebx
call ebp
mov edx, 0x4ad880
mov ecx, str.MAINMENU
call fcn.00477440
push eax
push 0x7554
push 0
push ebx
call ebp
push 0x4ded80
push 0
push str.ClearFont
push str.OPTIONS
call edi
neg eax
mov edx, 0x4ad888
mov ecx, str.MAINMENU
sbb esi, esi
and esi, 8
call fcn.00477440
push eax
push 0x7555
push esi
push ebx
call ebp
push 0x4ded80
push 0
push str.SystemTray
push str.OPTIONS
call edi
neg eax
mov edx, 0x4ad890
mov ecx, str.MAINMENU
sbb esi, esi
and esi, 8
call fcn.00477440
push eax
push 0x7556
push esi
push ebx
call ebp
push 0
push 0
push 0x800
push ebx
call ebp
push 0x4ded80
push 0
push str.ShowSysStat
push str.OPTIONS
call edi
neg eax
mov edx, 0x4ad9a4
mov ecx, str.MAINMENU
sbb esi, esi
and esi, 8
call fcn.00477440
push eax
push 0x7564
push esi
push ebx
call ebp
push 0x4ded80
push 0
push 0x4ba750
push str.OPTIONS
call edi
neg eax
mov edx, 0x4ad99c
mov ecx, str.MAINMENU
sbb esi, esi
and esi, 8
call fcn.00477440
push eax
push 0x7563
push esi
push ebx
call ebp
push 0x4ded80
push 0
push str.Protect
push str.OPTIONS
call edi
neg eax
mov edx, 0x4ad898
mov ecx, str.MAINMENU
sbb esi, esi
and esi, 8
call fcn.00477440
push eax
push 0x7557
push esi
push ebx
call ebp
mov edi, dword [sym.imp.USER32.dll_LoadBitmapW]
push 0
push 0x754d
push dword [0x4deb64]
call edi
mov esi, dword [sym.imp.USER32.dll_SetMenuItemBitmaps]
push eax
push 0
push 0x754d
push ebx
call esi
push dword [esp + 0x14]
push dword [esp + 0x1c]
push 0
push 0x754f
push ebx
call esi
push dword [esp + 0x14]
push dword [esp + 0x1c]
push 0
push 0x7550
push ebx
call esi
push dword [esp + 0x14]
push dword [esp + 0x1c]
push 0
push 0x7551
push ebx
call esi
push dword [esp + 0x14]
push dword [esp + 0x1c]
push 0
push 0x7552
push ebx
call esi
push dword [esp + 0x14]
push dword [esp + 0x1c]
push 0
push 0x7553
push ebx
call esi
push 0
push 0x7554
push dword [0x4deb64]
call edi
push eax
push 0
push 0x7554
push ebx
call esi
push dword [esp + 0x14]
push dword [esp + 0x1c]
push 0
push 0x7555
push ebx
call esi
push dword [esp + 0x14]
push dword [esp + 0x1c]
push 0
push 0x7556
push ebx
call esi
push dword [esp + 0x14]
push dword [esp + 0x1c]
push 0
push 0x7564
push ebx
call esi
push dword [esp + 0x14]
push dword [esp + 0x1c]
push 0
push 0x7563
push ebx
call esi
push dword [esp + 0x14]
push dword [esp + 0x1c]
push 0
push 0x7557
push ebx
mov ebx, esi
call ebx
call dword [sym.imp.USER32.dll_CreatePopupMenu]
mov edx, 0x4ad08c
mov ecx, str.MAINMENU
mov esi, eax
call fcn.00477440
push eax
push esi
push 0x10
push dword [0x4df1a8]
call ebp
mov edx, 0x4ad8a0
mov ecx, str.MAINMENU
call fcn.00477440
push eax
push 0x7559
push 0
push esi
call ebp
push 0
push 0
push 0x800
push esi
call ebp
mov edx, 0x4ad8a8
mov ecx, str.MAINMENU
call fcn.00477440
push eax
push 0x755a
push 0
push esi
call ebp
mov edx, 0x4ad8b0
mov ecx, str.MAINMENU
call fcn.00477440
push eax
push 0x755b
push 0
push esi
call ebp
mov edx, 0x4ad9d4
mov ecx, str.MAINMENU
call fcn.00477440
push eax
push 0x754b
push 0
push esi
call ebp
push 0
push 0
push 0x800
push esi
call ebp
mov edx, 0x4ad8b8
mov ecx, str.MAINMENU
call fcn.00477440
push eax
push 0x755c
push 0
push esi
call ebp
push 0
push 0x7559
push dword [0x4deb64]
call edi
push eax
push 0
push 0x7559
push esi
call ebx
push 0
push 0x755a
push dword [0x4deb64]
call edi
push eax
push 0
push 0x755a
push esi
call ebx
push 0
push 0x755b
push dword [0x4deb64]
call edi
push eax
push 0
push 0x755b
push esi
call ebx
push 0
push 0x754b
push dword [0x4deb64]
call edi
push eax
push 0
push 0x754b
push esi
call ebx
push 0
push 0x755c
push dword [0x4deb64]
call edi
push eax
push 0
push 0x755c
push esi
call ebx
call dword [sym.imp.USER32.dll_CreatePopupMenu]
mov edx, 0x4ad0a0
mov ecx, str.MAINMENU
mov esi, eax
call fcn.00477440
push eax
push esi
push 0x4010
push dword [0x4df1a8]
call ebp
mov edx, 0x4ad8c0
mov ecx, str.MAINMENU
call fcn.00477440
push eax
push 0x7540
push 0
push esi
call ebp
push 0
push 0
push 0x800
push esi
call ebp
mov edx, 0x4ad8e8
mov ecx, str.MAINMENU
call fcn.00477440
push eax
push 0x755d
push 0
push esi
call ebp
mov edx, 0x4ad8f0
mov ecx, str.MAINMENU
call fcn.00477440
push eax
push 0x755e
push 0
push esi
call ebp
mov edx, 0x4ad95c
mov ecx, str.MAINMENU
call fcn.00477440
push eax
push 0x755f
push 0
push esi
call ebp
push 0
push 0
push 0x800
push esi
call ebp
mov edx, 0x4ad984
mov ecx, str.MAINMENU
call fcn.00477440
push eax
push 0x7560
push 0
push esi
call ebp
mov edx, 0x4ad98c
mov ecx, str.MAINMENU
call fcn.00477440
push eax
push 0x7561
push 0
push esi
call ebp
push 0
push 0
push 0x800
push esi
call ebp
mov edx, 0x4ad994
mov ecx, str.MAINMENU
call fcn.00477440
push eax
push 0x7562
push 0
push esi
call ebp
push 0
push 0x7540
push dword [0x4deb64]
call edi
push eax
push 0
push 0x7540
push esi
call ebx
push 0
push 0x755d
push dword [0x4deb64]
call edi
push eax
push 0
push 0x755d
push esi
call ebx
push 0
push 0x755e
push dword [0x4deb64]
call edi
push eax
push 0
push 0x755e
push esi
call ebx
push 0
push 0x755f
push dword [0x4deb64]
call edi
push eax
push 0
push 0x755f
push esi
call ebx
push 0
push 0x7560
push dword [0x4deb64]
call edi
push eax
push 0
push 0x7560
push esi
call ebx
push 0
push 0x7561
push dword [0x4deb64]
call edi
push eax
push 0
push 0x7561
push esi
call ebx
push 0
push 0x7562
push dword [0x4deb64]
call edi
push eax
push 0
push 0x7562
push esi
call ebx
push dword [0x4df1a8]
push dword [0x4def88]
call dword [sym.imp.USER32.dll_SetMenu]
cmp dword [0x4de950], 0
jne 0x47b4e6
mov edi, dword [sym.imp.USER32.dll_GetSubMenu]
push 0
push dword [0x4df1a8]
call edi
mov edx, 0x4af548
mov ecx, str.MAINPAGE
mov esi, eax
call fcn.00477440
mov edx, eax
mov ecx, esi
call fcn.00461b10
push 1
push dword [0x4df1a8]
call edi
mov edx, 0x4af558
mov ecx, str.MAINPAGE
mov esi, eax
call fcn.00477440
mov edx, eax
mov ecx, esi
call fcn.00461b10
push 2
push dword [0x4df1a8]
call edi
mov edx, 0x4af560
mov ecx, str.MAINPAGE
mov esi, eax
call fcn.00477440
mov edx, eax
mov ecx, esi
call fcn.00461b10
push 3
push dword [0x4df1a8]
call edi
mov edx, 0x4af570
mov ecx, str.MAINPAGE
mov esi, eax
call fcn.00477440
mov edx, eax
mov ecx, esi
call fcn.00461b10
push 4
push dword [0x4df1a8]
call edi
mov edx, 0x4af568
mov ecx, str.MAINPAGE
mov esi, eax
call fcn.00477440
mov edx, eax
mov ecx, esi
call fcn.00461b10
push 5
push dword [0x4df1a8]
call edi
mov edx, 0x4af578
mov ecx, str.MAINPAGE
mov esi, eax
call fcn.00477440
mov edx, eax
mov ecx, esi
call fcn.00461b10
push 6
push dword [0x4df1a8]
call edi
mov edx, 0x4af580
mov ecx, str.MAINPAGE
mov esi, eax
call fcn.00477440
mov edx, eax
mov ecx, esi
pop edi
pop esi
pop ebp
pop ebx
add esp, 0xc
jmp fcn.00461b10
pop edi
pop esi
pop ebp
pop ebx
add esp, 0xc
ret