Function at 0x405f10
Capabilities:
Read .ini file

Disassembly:
push ebp
mov ebp, esp
and esp, 0xfffffff8
push 0xffffffffffffffff
push 0x570140
mov eax, dword fs:[0]
push eax
sub esp, 0xa0
mov eax, dword [0x5b16b0]
xor eax, esp
mov dword [esp + 0x98], eax
push ebx
push esi
push edi
mov eax, dword [0x5b16b0]
xor eax, esp
push eax
lea eax, [esp + 0xb0]
mov dword fs:[0], eax
mov ebx, ecx
call fcn.0047f6de
mov eax, 0x300
mov ecx, 0x400
mov dword [ebx + 0x470], eax
mov dword [ebx + 0x90], eax
mov eax, 1
xor edi, edi
mov dword [ebx + 0x46c], ecx
mov dword [ebx + 0x84], edi
mov dword [ebx + 0x88], edi
mov dword [ebx + 0x8c], ecx
mov dword [ebx + 0x98], eax
mov dword [ebx + 0x94], eax
mov dword [ebx + 0x9c], 0x2fc
mov dword [ebx + 0xa0], 0x243
call fcn.0047c271
xor ecx, ecx
cmp eax, edi
setne cl
cmp ecx, edi
jne 0x405fc6
push 0x80004005
call fcn.00404150
mov edx, dword [eax]
mov ecx, eax
mov eax, dword [edx + 0xc]
call eax
add eax, 0x10
mov dword [esp + 0x20], eax
push 0x64
lea ecx, [esp + 0x40]
push edi
push ecx
mov dword [esp + 0xc4], edi
call fcn.004a1c90
add esp, 0xc
call fcn.0048051c
mov eax, dword [eax + 8]
push 0x64
lea edx, [esp + 0x40]
push edx
push eax
call dword [sym.imp.KERNEL32.dll_GetModuleFileNameA]
call fcn.0047c271
xor ecx, ecx
cmp eax, edi
setne cl
cmp ecx, edi
jne 0x40601d
push 0x80004005
call fcn.00404150
mov edx, dword [eax]
mov ecx, eax
mov eax, dword [edx + 0xc]
call eax
add eax, 0x10
mov dword [esp + 0x1c], eax
lea ecx, [esp + 0x3c]
push ecx
lea ecx, [esp + 0x14]
mov byte [esp + 0xbc], 1
call fcn.0040de00
push eax
lea ecx, [esp + 0x20]
mov byte [esp + 0xbc], 2
call fcn.00404a60
mov byte [esp + 0xb8], 1
mov eax, dword [esp + 0x10]
add eax, 0xfffffff0
lea edx, [eax + 0xc]
or ecx, 0xffffffff
lock xadd dword [edx], ecx
dec ecx
test ecx, ecx
jg 0x40607d
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
mov esi, dword [esp + 0x1c]
push 0x5c
push esi
call fcn.0049a89f
add esp, 8
cmp eax, edi
jne 0x406095
or esi, 0xffffffff
jmp 0x406099
sub eax, esi
mov esi, eax
push esi
lea ecx, [esp + 0x18]
push ecx
lea ecx, [esp + 0x24]
call fcn.004048c0
push str.logo.bmp
push eax
lea edx, [esp + 0x18]
push edx
mov byte [esp + 0xc4], 3
call fcn.0040dff0
add esp, 0xc
push eax
lea ecx, [esp + 0x20]
mov byte [esp + 0xbc], 4
call fcn.00404a60
mov byte [esp + 0xb8], 3
mov eax, dword [esp + 0x10]
add eax, 0xfffffff0
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x4060fd
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
mov byte [esp + 0xb8], 1
mov eax, dword [esp + 0x14]
add eax, 0xfffffff0
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x406125
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
push esi
lea ecx, [esp + 0x18]
push ecx
lea ecx, [esp + 0x24]
call fcn.004048c0
push str.HVDI.dat
push eax
lea edx, [esp + 0x18]
push edx
mov byte [esp + 0xc4], 5
call fcn.0040dff0
add esp, 0xc
push eax
lea ecx, [esp + 0x24]
mov byte [esp + 0xbc], 6
call fcn.00404a60
mov byte [esp + 0xb8], 5
mov eax, dword [esp + 0x10]
add eax, 0xfffffff0
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x406189
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
mov byte [esp + 0xb8], 1
mov eax, dword [esp + 0x14]
add eax, 0xfffffff0
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x4061b1
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
mov ecx, dword [esp + 0x20]
push ecx
push 1
push str.UseDefaultLogo
push str.Logo
call dword [sym.imp.KERNEL32.dll_GetPrivateProfileIntA]
cmp eax, 1
je 0x406207
mov edx, dword [esp + 0x1c]
push 0x2050
push edi
push edi
push edi
push edx
push edi
call dword [sym.imp.USER32.dll_LoadImageA]
cmp eax, edi
je 0x4061fb
push eax
mov eax, dword [ebx + 0x494]
push edi
push 0x172
push eax
call dword [sym.imp.USER32.dll_SendMessageA]
jmp 0x406207
push edi
lea ecx, [ebx + 0x474]
call fcn.00488c6e
mov ecx, dword [ebx + 0x88]
mov edx, dword [ebx + 0x9c]
push 1
push 0x53
push 0x8a
add ecx, 0xa
push ecx
add edx, 0x32
push edx
lea ecx, [ebx + 0x474]
call fcn.00488c30
call fcn.0047c271
xor ecx, ecx
cmp eax, edi
setne cl
cmp ecx, edi
jne 0x406249
push 0x80004005
call fcn.00404150
mov edx, dword [eax]
mov ecx, eax
mov eax, dword [edx + 0xc]
call eax
add eax, 0x10
mov dword [esp + 0x14], eax
mov esi, ebx
mov byte [esp + 0xb8], 7
call fcn.00407990
mov ecx, ebx
call fcn.00407b90
mov esi, dword [ebx + 0x714]
lea edi, [ebx + 0x714]
push 0
push 0x59f
mov ecx, ebx
add esi, 0x134
call fcn.00488aad
mov edx, dword [esi]
push eax
mov ecx, edi
call edx
mov eax, dword [ebx + 0x734]
push 0
push 1
push 0x401
push eax
call dword [sym.imp.USER32.dll_SendMessageA]
cmp dword [ebx + 0xda0], 0
jne 0x4062ff
lea edi, [ebx + 0xda4]
mov dword [esp + 0x10], 0x80
push 0x1bc
call fcn.0047b51b
add esp, 4
mov dword [esp + 0x18], eax
test eax, eax
mov byte [esp + 0xb8], 8
je 0x4062e9
mov esi, eax
call fcn.00422180
jmp 0x4062eb
xor eax, eax
mov byte [esp + 0xb8], 7
mov dword [edi], eax
add edi, 4
sub dword [esp + 0x10], 1
jne 0x4062c3
push 0x5cb880
push 0x18
push 8
push ecx
mov ecx, esp
mov dword [esp + 0x28], esp
push str.0123456789_:
mov esi, 0x5cd140
mov edi, 0x5cc000
call fcn.0040de00
mov edx, esi
mov ecx, edi
call fcn.00427340
add esp, 0x10
push 0x5cd8c0
push 0x18
push 8
push ecx
mov ecx, esp
mov dword [esp + 0x28], esp
push 0x59248c
mov esi, 0x5cd440
mov edi, 0x5cbc40
call fcn.0040de00
mov edx, esi
mov ecx, edi
call fcn.00427340
add esp, 0x10
push 0x5cbdc0
push 0x18
push 8
push ecx
mov ecx, esp
mov dword [esp + 0x28], esp
push 0x592490
mov esi, 0x5cabc0
mov edi, 0x5cc900
call fcn.0040de00
mov edx, esi
mov ecx, edi
call fcn.00427340
add esp, 0x10
push 0x5ca2c0
push 0x18
push 8
push ecx
mov ecx, esp
mov dword [esp + 0x28], esp
push 0x592494
mov esi, 0x5c9a80
mov edi, 0x5cbac0
call fcn.0040de00
mov edx, esi
mov ecx, edi
call fcn.00427340
add esp, 0x10
push 0x5ca980
push 0x18
push 8
push ecx
mov ecx, esp
mov dword [esp + 0x28], esp
push 0x592498
mov esi, 0x5ca680
mov edi, 0x5cbe80
call fcn.0040de00
mov edx, esi
mov ecx, edi
call fcn.00427340
add esp, 0x10
push 0x5cd800
push 0x18
push 8
push ecx
mov ecx, esp
mov dword [esp + 0x28], esp
push 0x59249c
mov esi, 0x5ca380
mov edi, 0x5cb700
call fcn.0040de00
mov edx, esi
mov ecx, edi
call fcn.00427340
add esp, 0x10
push 0x5cb1c0
push 0x18
push 8
push ecx
mov ecx, esp
mov dword [esp + 0x28], esp
push 0x5924a0
mov esi, 0x5cca80
mov edi, 0x5c9600
call fcn.0040de00
mov edx, esi
mov ecx, edi
call fcn.00427340
add esp, 0x10
push 0x5c9540
push 0x18
push 8
push ecx
mov ecx, esp
mov dword [esp + 0x28], esp
push 0x5924a4
mov esi, 0x5cb280
mov edi, 0x5caf80
call fcn.0040de00
mov edx, esi
mov ecx, edi
call fcn.00427340
add esp, 0x10
push 0x5cd080
push 0x18
push 8
push ecx
mov ecx, esp
mov dword [esp + 0x28], esp
push 0x5924a8
mov esi, 0x5c9f00
mov edi, 0x5cb580
call fcn.0040de00
mov edx, esi
mov ecx, edi
call fcn.00427340
add esp, 0x10
push 0x5cb100
push 0x18
push 8
push ecx
mov ecx, esp
mov dword [esp + 0x28], esp
push 0x5924ac
mov esi, 0x5ccd80
mov edi, 0x5caa40
call fcn.0040de00
mov edx, esi
mov ecx, edi
call fcn.00427340
add esp, 0x10
push 0x5caec0
push 0x18
push 8
push ecx
mov ecx, esp
mov dword [esp + 0x28], esp
push 0x5924b0
mov esi, 0x5cc600
mov edi, 0x5cc480
call fcn.0040de00
mov edx, esi
mov ecx, edi
call fcn.00427340
add esp, 0x10
push 0x5cd740
push 0x18
push 8
push ecx
mov esi, 0x5c9780
mov edi, 0x5cb940
mov ecx, esp
mov dword [esp + 0x28], esp
push 0x5924b4
call fcn.0040de00
mov edx, esi
mov ecx, edi
call fcn.00427340
add esp, 0x10
push 0x5ca200
push 0x18
push 8
push ecx
mov ecx, esp
mov dword [esp + 0x28], esp
push 0x5924b8
mov esi, 0x5cc180
mov edi, 0x5c9d80
call fcn.0040de00
mov edx, esi
mov ecx, edi
call fcn.00427340
add esp, 0x10
call fcn.0042cba0
push ebx
lea ecx, [ebx + 0x94]
push ecx
mov ecx, dword [ebx + 0x46c]
push ecx
mov ecx, dword [ebx + 0x470]
push eax
mov dword [ebx + 0x5fc], eax
call fcn.0042d2f0
mov eax, dword [ebx + 0x5fc]
mov ecx, dword [eax + 0x3654]
cmp ecx, 2
mov edx, 1
jg 0x4065d5
imul ecx, ecx, 0x320c
mov dword [ecx + eax + 0x3664], edx
mov ecx, dword [eax + 0x3654]
imul ecx, ecx, 0x320c
mov dword [ecx + eax + 0x366c], 0xffffffff
add dword [eax + 0x3654], edx
mov eax, dword [ebx + 0x5fc]
mov ecx, dword [eax + 0x3654]
cmp ecx, 2
jg 0x406610
imul ecx, ecx, 0x320c
mov dword [ecx + eax + 0x3664], edx
mov ecx, dword [eax + 0x3654]
imul ecx, ecx, 0x320c
mov dword [ecx + eax + 0x366c], 0xffffffff
add dword [eax + 0x3654], edx
lea edi, [ebx + 0x7f8]
push ebx
call fcn.0040ada0
mov esi, ebx
call fcn.0040d290
push 0x4ad
mov ecx, ebx
call fcn.00488aad
test eax, eax
je 0x406636
mov eax, dword [eax + 0x20]
push 0x5924bc
push eax
call sub.intf.dll_Ordinal_46
push 0x4ae
mov ecx, ebx
call fcn.00488aad
test eax, eax
je 0x406654
mov eax, dword [eax + 0x20]
push str.ButtonStartRecord
push eax
call sub.intf.dll_Ordinal_46
push 0x3ea
mov ecx, ebx
call fcn.00488aad
test eax, eax
je 0x406672
mov eax, dword [eax + 0x20]
push str.ButtonStopRecord
push eax
call sub.intf.dll_Ordinal_46
push 0x4b8
mov ecx, ebx
call fcn.00488aad
test eax, eax
je 0x406690
mov eax, dword [eax + 0x20]
push str.ButtonSnapShot
push eax
call sub.intf.dll_Ordinal_46
push 0x4af
mov ecx, ebx
call fcn.00488aad
test eax, eax
je 0x4066ae
mov eax, dword [eax + 0x20]
push str.ButtonStop
push eax
call sub.intf.dll_Ordinal_46
push 0x40b
mov ecx, ebx
call fcn.00488aad
test eax, eax
je 0x4066cc
mov eax, dword [eax + 0x20]
push str.ButtonAdd
push eax
call sub.intf.dll_Ordinal_46
push 0x4b0
mov ecx, ebx
call fcn.00488aad
test eax, eax
je 0x4066ea
mov eax, dword [eax + 0x20]
push str.ButtonDelete
push eax
call sub.intf.dll_Ordinal_46
push 0x4b1
mov ecx, ebx
call fcn.00488aad
test eax, eax
je 0x406708
mov eax, dword [eax + 0x20]
push str.ButtonSetting
push eax
call sub.intf.dll_Ordinal_46
push 0x4b2
mov ecx, ebx
call fcn.00488aad
test eax, eax
je 0x406726
mov eax, dword [eax + 0x20]
push 0x5924bc
push eax
call sub.intf.dll_Ordinal_46
push 0x4b3
mov ecx, ebx
call fcn.00488aad
test eax, eax
je 0x406744
mov eax, dword [eax + 0x20]
push str.ButtonFastPlay
push eax
call sub.intf.dll_Ordinal_46
push 0x4b5
mov ecx, ebx
call fcn.00488aad
test eax, eax
je 0x406762
mov eax, dword [eax + 0x20]
push str.ButtonSlowPlay
push eax
call sub.intf.dll_Ordinal_46
push 0x4b4
mov ecx, ebx
call fcn.00488aad
test eax, eax
je 0x406780
mov eax, dword [eax + 0x20]
push str.ButtonStop
push eax
call sub.intf.dll_Ordinal_46
push 0x4b6
mov ecx, ebx
call fcn.00488aad
test eax, eax
je 0x40679e
mov eax, dword [eax + 0x20]
push str.ButtonBakup
push eax
call sub.intf.dll_Ordinal_46
push 0x5e6
mov ecx, ebx
call fcn.00488aad
test eax, eax
je 0x4067bc
mov eax, dword [eax + 0x20]
push str.ButtonPlayBackSnapshot
push eax
call sub.intf.dll_Ordinal_46
push 0x5f2
mov ecx, ebx
call fcn.00488aad
test eax, eax
je 0x4067da
mov eax, dword [eax + 0x20]
push str.ButtonPause
push eax
call sub.intf.dll_Ordinal_46
lea eax, [ebx + 0x3b0]
test eax, eax
je 0x4067f2
mov eax, dword [eax + 0x20]
push str.ButtonBackward
push eax
call sub.intf.dll_Ordinal_46
lea eax, [ebx + 0x404]
test eax, eax
je 0x40680a
mov eax, dword [eax + 0x20]
push str.ButtonForward
push eax
call sub.intf.dll_Ordinal_46
lea eax, [ebx + 0xd4c]
test eax, eax
je 0x406822
mov eax, dword [eax + 0x20]
push str.ButtonFramePlay
push eax
call sub.intf.dll_Ordinal_46
lea eax, [ebx + 0xfac]
test eax, eax
je 0x40683a
mov eax, dword [eax + 0x20]
push str.ButtonAudio
push eax
call sub.intf.dll_Ordinal_46
push 0x56e
lea edx, [esp + 0x14]
push edx
call fcn.00410db0
push eax
lea ecx, [esp + 0x18]
mov byte [esp + 0xbc], 9
call fcn.00404a60
mov byte [esp + 0xb8], 7
mov eax, dword [esp + 0x10]
add eax, 0xfffffff0
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x40688e
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
mov ecx, dword [esp + 0x14]
push ecx
push 0x405
mov ecx, ebx
call fcn.00488af5
push 0x49a
mov ecx, ebx
call fcn.00488aad
test eax, eax
je 0x4068b2
mov eax, dword [eax + 0x20]
push str.ButtonExit
push eax
call sub.intf.dll_Ordinal_46
push 0x4ce
mov ecx, ebx
call fcn.00488aad
test eax, eax
je 0x4068d0
mov eax, dword [eax + 0x20]
push str.ButtonHelp
push eax
call sub.intf.dll_Ordinal_46
push 0x4d2
mov ecx, ebx
call fcn.00488aad
test eax, eax
je 0x4068ee
mov eax, dword [eax + 0x20]
push str.CheckBoxLock
push eax
call sub.intf.dll_Ordinal_46
push 0x4d0
mov ecx, ebx
call fcn.00488aad
test eax, eax
je 0x40690c
mov eax, dword [eax + 0x20]
push str.CheckBoxConfig
push eax
call sub.intf.dll_Ordinal_46
push 0x4cc
mov ecx, ebx
call fcn.00488aad
test eax, eax
je 0x40692a
mov eax, dword [eax + 0x20]
push str.ButtonMinimize
push eax
call sub.intf.dll_Ordinal_46
push 0x4cf
mov ecx, ebx
call fcn.00488aad
test eax, eax
je 0x406948
mov eax, dword [eax + 0x20]
push str.CheckBoxPlayback
push eax
call sub.intf.dll_Ordinal_46
push 0x457
mov ecx, ebx
call fcn.00488aad
test eax, eax
je 0x406966
mov eax, dword [eax + 0x20]
push str.CheckBoxRealtime
push eax
call sub.intf.dll_Ordinal_46
push 0x5e8
mov ecx, ebx
call fcn.00488aad
test eax, eax
je 0x406984
mov eax, dword [eax + 0x20]
push str.ButtonReturn
push eax
call sub.intf.dll_Ordinal_46
push 5
push 0x49a
mov ecx, ebx
call fcn.00488aad
mov ecx, eax
call fcn.00488c6e
push 5
push 0x62f
mov ecx, ebx
call fcn.00488aad
mov ecx, eax
call fcn.00488c6e
mov ecx, dword [ebx + 0x5fc]
push 5
call fcn.00488c6e
mov edi, dword [ebx + 0x5fc]
mov dword [edi + 0x9ba8], 0xffffffff
cmp dword [edi + 0x6870], 0
je 0x406a03
mov eax, 1
cmp dword [edi + 0x3650], eax
je 0x406a03
xor ecx, ecx
mov dword [edi + 0x3650], eax
mov dword [edi + 0x3648], 0
call fcn.0042ef50
mov edi, dword [ebx + 0x5fc]
lea esi, [edi + 0x9b90]
push esi
call dword [sym.imp.KERNEL32.dll_EnterCriticalSection]
mov eax, dword [edi + 0x9b74]
test eax, eax
jbe 0x406a35
add eax, 0xffffffff
mov dword [edi + 0x9b74], eax
jne 0x406a35
mov dword [edi + 0x364c], 1
push esi
call dword [sym.imp.KERNEL32.dll_LeaveCriticalSection]
push 1
mov ecx, ebx
call fcn.0048154e
mov edx, dword [ebx + 0x788]
mov eax, dword [edx + 0x134]
lea edi, [ebx + 0x788]
push 0
push ebx
mov ecx, edi
call eax
mov ecx, dword [ebx + 0x7a8]
mov esi, dword [sym.imp.USER32.dll_SendMessageA]
push 0
push 1
push 0x401
push ecx
call esi
push 0x16a
lea edx, [esp + 0x14]
push edx
call fcn.00410db0
push eax
lea ecx, [esp + 0x18]
mov byte [esp + 0xbc], 0xa
call fcn.00404a60
mov byte [esp + 0xb8], 7
mov eax, dword [esp + 0x10]
add eax, 0xfffffff0
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x406abf
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
mov ecx, dword [esp + 0x14]
push 0
push 0
push ecx
push 0x4b2
mov ecx, ebx
call fcn.00488aad
push eax
mov ecx, edi
call fcn.00481032
push 0x16b
lea edx, [esp + 0x14]
push edx
call fcn.00410db0
push eax
lea ecx, [esp + 0x18]
mov byte [esp + 0xbc], 0xb
call fcn.00404a60
mov byte [esp + 0xb8], 7
mov eax, dword [esp + 0x10]
add eax, 0xfffffff0
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x406b25
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
mov ecx, dword [esp + 0x14]
push 0
push 0
push ecx
push 0x4b3
mov ecx, ebx
call fcn.00488aad
push eax
mov ecx, edi
call fcn.00481032
push 0x16c
lea edx, [esp + 0x14]
push edx
call fcn.00410db0
push eax
lea ecx, [esp + 0x18]
mov byte [esp + 0xbc], 0xc
call fcn.00404a60
mov byte [esp + 0xb8], 7
mov eax, dword [esp + 0x10]
add eax, 0xfffffff0
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x406b8b
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
mov ecx, dword [esp + 0x14]
push 0
push 0
push ecx
push 0x4b5
mov ecx, ebx
call fcn.00488aad
push eax
mov ecx, edi
call fcn.00481032
push 0x166
lea edx, [esp + 0x14]
push edx
call fcn.00410db0
push eax
lea ecx, [esp + 0x18]
mov byte [esp + 0xbc], 0xd
call fcn.00404a60
mov byte [esp + 0xb8], 7
mov eax, dword [esp + 0x10]
add eax, 0xfffffff0
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x406bf1
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
mov ecx, dword [esp + 0x14]
push 0
push 0
push ecx
push 0x5f2
mov ecx, ebx
call fcn.00488aad
push eax
mov ecx, edi
call fcn.00481032
push 0x16d
lea edx, [esp + 0x14]
push edx
call fcn.00410db0
push eax
lea ecx, [esp + 0x18]
mov byte [esp + 0xbc], 0xe
call fcn.00404a60
mov byte [esp + 0xb8], 7
mov eax, dword [esp + 0x10]
add eax, 0xfffffff0
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x406c57
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
mov ecx, dword [esp + 0x14]
push 0
push 0
push ecx
push 0x4b4
mov ecx, ebx
call fcn.00488aad
push eax
mov ecx, edi
call fcn.00481032
push 0x16f
lea edx, [esp + 0x14]
push edx
call fcn.00410db0
push eax
lea ecx, [esp + 0x18]
mov byte [esp + 0xbc], 0xf
call fcn.00404a60
mov byte [esp + 0xb8], 7
mov eax, dword [esp + 0x10]
add eax, 0xfffffff0
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x406cbd
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
mov ecx, dword [esp + 0x14]
push 0
push 0
push ecx
push 0x4b6
mov ecx, ebx
call fcn.00488aad
push eax
mov ecx, edi
call fcn.00481032
push 0x210
lea edx, [esp + 0x14]
push edx
call fcn.00410db0
push eax
lea ecx, [esp + 0x18]
mov byte [esp + 0xbc], 0x10
call fcn.00404a60
mov byte [esp + 0xb8], 7
mov eax, dword [esp + 0x10]
add eax, 0xfffffff0
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x406d23
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
mov ecx, dword [esp + 0x14]
push 0
push 0
push ecx
push 0x5e6
mov ecx, ebx
call fcn.00488aad
push eax
mov ecx, edi
call fcn.00481032
push 0x170
lea edx, [esp + 0x14]
push edx
call fcn.00410db0
push eax
lea ecx, [esp + 0x18]
mov byte [esp + 0xbc], 0x11
call fcn.00404a60
mov byte [esp + 0xb8], 7
mov eax, dword [esp + 0x10]
add eax, 0xfffffff0
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x406d89
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
mov ecx, dword [esp + 0x14]
push 0
push 0
push ecx
push 0x49a
mov ecx, ebx
call fcn.00488aad
push eax
mov ecx, edi
call fcn.00481032
push 0x660
lea edx, [esp + 0x14]
push edx
call fcn.00410db0
push eax
lea ecx, [esp + 0x18]
mov byte [esp + 0xbc], 0x12
call fcn.00404a60
mov byte [esp + 0xb8], 7
mov eax, dword [esp + 0x10]
add eax, 0xfffffff0
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x406def
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
mov ecx, dword [esp + 0x14]
push 0
push 0
push ecx
push 0x605
mov ecx, ebx
call fcn.00488aad
push eax
mov ecx, edi
call fcn.00481032
push 0x661
lea edx, [esp + 0x14]
push edx
call fcn.00410db0
push eax
lea ecx, [esp + 0x18]
mov byte [esp + 0xbc], 0x13
call fcn.00404a60
mov byte [esp + 0xb8], 7
mov eax, dword [esp + 0x10]
add eax, 0xfffffff0
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x406e55
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
mov ecx, dword [esp + 0x14]
push 0
push 0
push ecx
push 0x604
mov ecx, ebx
call fcn.00488aad
push eax
mov ecx, edi
call fcn.00481032
push 0x5497
lea edx, [esp + 0x14]
push edx
call fcn.00410db0
push eax
lea ecx, [esp + 0x18]
mov byte [esp + 0xbc], 0x14
call fcn.00404a60
mov byte [esp + 0xb8], 7
mov eax, dword [esp + 0x10]
add eax, 0xfffffff0
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x406ebb
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
mov ecx, dword [esp + 0x14]
push 0
push 0
push ecx
push 0x62e
mov ecx, ebx
call fcn.00488aad
push eax
mov ecx, edi
call fcn.00481032
mov edx, dword [ebx + 0x7a8]
push 0x96
push 0
push 0x418
push edx
call esi
push 0x548a
lea eax, [esp + 0x14]
push eax
call fcn.00410db0
push eax
lea ecx, [esp + 0x18]
mov byte [esp + 0xbc], 0x15
call fcn.00404a60
mov byte [esp + 0xb8], 7
mov eax, dword [esp + 0x10]
add eax, 0xfffffff0
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x406f36
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
mov ecx, dword [esp + 0x14]
push ecx
push 0x620
mov ecx, ebx
call fcn.00488af5
push 0x548f
lea edx, [esp + 0x14]
push edx
call fcn.00410db0
push eax
lea ecx, [esp + 0x18]
mov byte [esp + 0xbc], 0x16
call fcn.00404a60
mov byte [esp + 0xb8], 7
mov eax, dword [esp + 0x10]
add eax, 0xfffffff0
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x406f90
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
mov ecx, dword [esp + 0x14]
push ecx
push 0x621
mov ecx, ebx
call fcn.00488af5
push 0x5498
lea edx, [esp + 0x14]
push edx
call fcn.00410db0
push eax
lea ecx, [esp + 0x18]
mov byte [esp + 0xbc], 0x17
call fcn.00404a60
mov byte [esp + 0xb8], 7
mov eax, dword [esp + 0x10]
add eax, 0xfffffff0
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x406fea
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
mov ecx, dword [esp + 0x14]
push ecx
push 0x61d
mov ecx, ebx
call fcn.00488af5
push 0x17b
lea edx, [esp + 0x14]
push edx
call fcn.00410db0
push eax
lea ecx, [esp + 0x18]
mov byte [esp + 0xbc], 0x18
call fcn.00404a60
mov byte [esp + 0xb8], 7
mov eax, dword [esp + 0x10]
add eax, 0xfffffff0
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x407044
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
mov ecx, dword [esp + 0x14]
push ecx
push 0x5de
mov ecx, ebx
call fcn.00488af5
push 0x548c
lea edx, [esp + 0x14]
push edx
call fcn.00410db0
lea ecx, [ebx + 0x520]
push eax
mov byte [esp + 0xbc], 0x19
call fcn.00404a60
mov byte [esp + 0xb8], 7
mov eax, dword [esp + 0x10]
add eax, 0xfffffff0
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x4070a0
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
lea esi, [ebx + 0x528]
mov edi, ebx
mov ecx, esi
call fcn.00430c70
call fcn.00430df0
mov edi, esi
call fcn.00430d40
mov ecx, dword [esi + 0x20]
push 0x105
push 0
mov eax, 0xffffff
push 0
push ecx
mov dword [esi + 0x68], eax
mov dword [esi + 0x6c], eax
call dword [sym.imp.USER32.dll_RedrawWindow]
mov eax, dword [ebx + 0x5bc]
mov ecx, dword [ebx + 0x5b8]
mov edx, 1
sub eax, 0xe
mov esi, edx
mov dword [esp + 0x2c], edx
lea edx, [esp + 0x2c]
mov dword [esp + 0x38], eax
push edx
lea eax, [ebx + 0x5a8]
sub ecx, 0xe
push eax
mov dword [esp + 0x38], esi
mov dword [esp + 0x3c], ecx
call dword [sym.imp.USER32.dll_CopyRect]
mov ecx, dword [ebx + 0x20]
mov esi, dword [sym.imp.USER32.dll_SetTimer]
push 0
push 0x3e8
push 0x3d
push ecx
call esi
mov edx, dword [ebx + 0x20]
push 0
push 0x493e0
push 0x3e
push edx
call esi
mov eax, dword [ebx + 0x470]
mov ecx, dword [ebx + 0x46c]
push 0x40
push eax
push ecx
push 0
push 0
push 0
mov ecx, ebx
call fcn.00488e7d
push 8
lea edx, [esp + 0x28]
push edx
call dword [sym.imp.WINMM.dll_timeGetDevCaps]
mov eax, dword [esp + 0x24]
cmp eax, 1
mov ecx, eax
ja 0x407172
mov ecx, 1
mov edx, dword [esp + 0x28]
cmp ecx, edx
jae 0x407186
cmp eax, 1
ja 0x407188
mov eax, 1
jmp 0x407188
mov eax, edx
push eax
call dword [sym.imp.WINMM.dll_timeBeginPeriod]
mov byte [esp + 0xb8], 1
mov eax, dword [esp + 0x14]
add eax, 0xfffffff0
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x4071b7
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
mov byte [esp + 0xb8], 0
mov eax, dword [esp + 0x1c]
add eax, 0xfffffff0
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x4071df
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
mov dword [esp + 0xb8], 0xffffffff
mov eax, dword [esp + 0x20]
add eax, 0xfffffff0
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x40720a
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
mov eax, 1
mov ecx, dword [esp + 0xb0]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov ecx, dword [esp + 0x98]
xor ecx, esp
call fcn.00499441
mov esp, ebp
pop ebp
ret