Function at 0x42e5c0
Capabilities:
Read .ini file

Disassembly:
push 0xffffffffffffffff
push 0x4a7386
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
sub esp, 0x84c
push ebx
mov ebx, dword [esp + 0x860]
push ebp
push edi
xor ebp, ebp
mov edi, ecx
cmp ebx, ebp
mov dword [esp + 0x14], edi
je 0x42e9c7
mov eax, dword [ebx + 4]
push esi
push ebp
push eax
call fcn.0046eb90
mov ecx, dword [ebx + 4]
mov esi, dword [sym.imp.USER32.dll_DeleteMenu]
add esp, 8
push 0x400
push ebp
push ecx
call esi
cmp eax, ebp
je 0x42e629
mov edx, dword [ebx + 4]
push 0x400
push ebp
push edx
call esi
cmp eax, ebp
jne 0x42e619
mov eax, dword [0x4d93ac]
mov dword [esp + 0x10], eax
mov eax, dword [0x4ddfb0]
mov dword [esp + 0x864], ebp
cmp eax, ebp
push 0xef75
lea ecx, [esp + 0x14]
je 0x42e656
push ecx
call fcn.004116f0
add esp, 8
jmp 0x42e65b
call fcn.00490bc4
push 0x1c
call fcn.0049018f
add esp, 4
mov dword [esp + 0x20], eax
cmp eax, ebp
mov byte [esp + 0x864], 1
je 0x42e680
mov ecx, eax
call fcn.004472f0
mov esi, eax
jmp 0x42e682
xor esi, esi
add edi, 0x1044
mov dword [esi + 0xc], 0x45
mov dword [esi + 8], edi
mov edx, dword [esp + 0x10]
push esi
push edx
mov byte [esp + 0x86c], 0
call fcn.00447370
mov eax, dword [esp + 0x87c]
mov ecx, dword [ebx + 4]
add esp, 8
add eax, 0x6100
push esi
push eax
push pe_nt_image_headers32
push ecx
call dword [sym.imp.USER32.dll_AppendMenuA]
mov eax, dword [0x4ddfb0]
push 0xef76
cmp eax, ebp
je 0x42e6e2
lea edx, [esp + 0x14]
push edx
call fcn.004116f0
add esp, 8
jmp 0x42e6eb
lea ecx, [esp + 0x14]
call fcn.00490bc4
push 0x1c
call fcn.0049018f
add esp, 4
mov dword [esp + 0x20], eax
cmp eax, ebp
mov byte [esp + 0x864], 2
je 0x42e710
mov ecx, eax
call fcn.004472f0
mov esi, eax
jmp 0x42e712
xor esi, esi
mov dword [esi + 8], edi
mov dword [esi + 0xc], 0x46
mov eax, dword [esp + 0x10]
push esi
push eax
mov byte [esp + 0x86c], 0
call fcn.00447370
mov ecx, dword [esp + 0x87c]
mov edx, dword [ebx + 4]
add esp, 8
add ecx, 0x6000
push esi
push ecx
push pe_nt_image_headers32
push edx
call dword [sym.imp.USER32.dll_AppendMenuA]
mov ecx, dword [esp + 0x18]
push ebx
call fcn.00435ee0
mov eax, dword [esp + 0x870]
lea ecx, [esp + 0x14]
push eax
push 0x4ddfd0
push ecx
call fcn.0048fe06
mov ax, word [0x4d5944]
mov edx, dword [str.state]
mov ecx, dword [str.name]
mov word [esp + 0x38], ax
mov eax, dword [0x4d5934]
mov dword [esp + 0x34], edx
mov dl, byte [0x4d593c]
mov dword [esp + 0x40], eax
mov al, byte [0x4d5930]
mov dword [esp + 0x28], ecx
mov ecx, dword [str.download]
mov byte [esp + 0x2c], dl
mov edx, dword [0x4d592c]
mov byte [esp + 0x50], al
mov eax, dword [0x4d93ac]
mov dword [esp + 0x3a], ebp
mov dword [esp + 0x2d], ebp
mov dword [esp + 0x44], ebp
mov dword [esp + 0x48], ecx
mov dword [esp + 0x4c], edx
mov dword [esp + 0x51], ebp
xor edi, edi
mov dword [esp + 0x1c], eax
mov dword [esp + 0x24], eax
mov byte [esp + 0x864], 5
jmp 0x42e7eb
xor ebp, ebp
lea ecx, [esp + 0x39]
push 0xa
push ecx
push edi
call fcn.0047aedc
lea edx, [esp + 0x38]
push 0xa
push edx
push edi
call fcn.0047aedc
lea eax, [esp + 0x5b]
push 0xa
push eax
push edi
call fcn.0047aedc
lea ecx, [esp + 0x74]
push 0xa
push ecx
push edi
call fcn.0047aedc
mov edx, dword [esp + 0x44]
add esp, 0x30
lea eax, [esp + 0x34]
push edx
push 1
push eax
push str.Group
call dword [sym.imp.KERNEL32.dll_GetPrivateProfileIntA]
mov ecx, dword [esp + 0x14]
mov esi, dword [sym.imp.KERNEL32.dll_GetPrivateProfileStringA]
push ecx
lea edx, [esp + 0x60]
mov dword [esp + 0x24], eax
push 0x800
push edx
lea eax, [esp + 0x34]
push ebp
push eax
push str.Group
call esi
mov ebp, eax
test ebp, ebp
je 0x42e962
lea ecx, [esp + 0x5c]
push ecx
lea ecx, [esp + 0x20]
call fcn.0048fcfa
mov edx, dword [esp + 0x14]
lea eax, [esp + 0x5c]
push edx
push 0x800
push eax
lea ecx, [esp + 0x4c]
push 0
push ecx
push str.Group
call esi
mov ebp, eax
test ebp, ebp
je 0x42e962
mov ecx, dword [esp + 0x18]
lea edx, [esp + 0x1c]
push edx
call fcn.004449f0
lea eax, [esp + 0x5c]
lea ecx, [esp + 0x24]
push eax
call fcn.0048fcfa
push 0x1c
call fcn.0049018f
add esp, 4
mov dword [esp + 0x58], eax
test eax, eax
mov byte [esp + 0x864], 6
je 0x42e8df
mov ecx, eax
call fcn.004472f0
mov esi, eax
jmp 0x42e8e1
xor esi, esi
mov ecx, dword [esp + 0x18]
mov byte [esp + 0x864], 5
lea eax, [ecx + 0x1044]
mov dword [esi + 8], eax
mov eax, dword [esp + 0x20]
test eax, eax
je 0x42e907
mov dword [esi + 0xc], 0x47
jmp 0x42e90e
mov dword [esi + 0xc], 0x48
mov edx, dword [esp + 0x1c]
push esi
push edx
call fcn.00447370
mov eax, dword [esp + 0x2c]
push esi
push eax
call fcn.00447440
mov ecx, dword [esp + 0x24]
add esp, 0x10
lea edx, [esp + 0x48]
push ecx
push 0xffffffffffffffff
push edx
push str.Group
call dword [sym.imp.KERNEL32.dll_GetPrivateProfileIntA]
mov dword [esi + 0x18], eax
mov eax, dword [0x4dd890]
mov ecx, dword [ebx + 4]
add eax, 0x6600
push esi
push eax
push pe_nt_image_headers32
push ecx
call dword [sym.imp.USER32.dll_AppendMenuA]
inc dword [0x4dd890]
inc edi
test ebp, ebp
jne 0x42e7e9
mov eax, dword [0x4ddeb4]
pop esi
test eax, eax
jne 0x42e980
mov ecx, dword [esp + 0x14]
push ebp
push ebx
call fcn.00425f70
lea ecx, [esp + 0x20]
mov byte [esp + 0x860], 4
call fcn.0048fb71
lea ecx, [esp + 0x18]
mov byte [esp + 0x860], 3
call fcn.0048fb71
lea ecx, [esp + 0x10]
mov byte [esp + 0x860], 0
call fcn.0048fb71
lea ecx, [esp + 0xc]
mov dword [esp + 0x860], 0xffffffff
call fcn.0048fb71
mov ecx, dword [esp + 0x858]
pop edi
pop ebp
pop ebx
mov dword fs:[0], ecx
add esp, 0x858
ret 0xc