Function at 0x442f20
Capabilities:
Read .ini file
Terminate process

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x50a9e8
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
sub esp, 0x90
mov eax, dword [0x57113c]
push ebx
push esi
push edi
mov esi, ecx
mov dword [ebp - 0x10], esp
test eax, eax
mov dword [ebp - 0x14], esi
mov dword [ebp - 4], 0
je 0x442fa2
lea eax, [ebp - 0x18]
push eax
call fcn.00427050
mov eax, dword [eax]
add esp, 4
push eax
push 1
push 0x5616a4
push 0x55c5a4
call dword [sym.imp.KERNEL32.dll_GetPrivateProfileIntW]
lea ecx, [ebp - 0x18]
mov edi, eax
call fcn.004e1e27
test edi, edi
je 0x442fa2
push 0x575f34
call fcn.004ad580
add esp, 4
test eax, eax
jne 0x442fa2
push 1
mov ecx, esi
call fcn.0043ae60
mov eax, dword [0x575528]
test eax, eax
je 0x443039
mov dword [ebp - 0x18], 0
call dword [sym.imp.KERNEL32.dll_GetCurrentProcessId]
mov ebx, eax
call dword [sym.imp.KERNEL32.dll_GetCurrentThreadId]
push 0
push 0x561694
mov dword [ebp - 0x2c], eax
push 0
push 0
call dword [sym.imp.USER32.dll_FindWindowExW]
mov edi, eax
test edi, edi
je 0x443014
lea ecx, [ebp - 0x18]
push ecx
push edi
call dword [sym.imp.USER32.dll_GetWindowThreadProcessId]
cmp ebx, dword [ebp - 0x18]
jne 0x44300a
cmp dword [ebp - 0x2c], eax
je 0x44300a
push 0xffffffffffffffff
push 0x24
push 0x78
call fcn.0041b900
add esp, 0xc
cmp eax, 7
je 0x443658
push 0
push 0x561694
push edi
jmp 0x442fd0
mov ecx, esi
call fcn.00442bf0
test eax, eax
je 0x443039
push 0xffffffffffffffff
push 0x24
push 0xef95
call fcn.0041b900
add esp, 0xc
cmp eax, 7
je 0x443658
call fcn.004faff9
mov edi, dword [eax + 4]
mov eax, dword [esi + 0x1708]
test eax, eax
jne 0x443076
mov edx, dword [esi + 0x1c]
mov ebx, dword [sym.imp.USER32.dll_IsWindowVisible]
push edx
call ebx
test eax, eax
je 0x443076
mov eax, dword [esi + 0x908]
push eax
call ebx
push eax
push 0x55f708
push 0x55f6fc
mov ecx, edi
call fcn.004eddf6
xor ebx, ebx
mov ecx, esi
push ebx
call fcn.004e146e
mov ecx, esi
call fcn.00458f80
push 0x190
call fcn.00429be0
mov ecx, dword [esi + 0x550]
add esp, 4
push ecx
call dword [sym.imp.USER32.dll_DestroyIcon]
mov ecx, dword [esi + 0x560]
cmp ecx, ebx
je 0x4430b2
mov edx, dword [ecx]
push 1
call dword [edx + 4]
mov eax, dword [esi + 0x55c]
cmp eax, ebx
je 0x443148
mov edx, dword [eax + 0x1c]
lea ecx, [ebp - 0x28]
push ecx
push edx
call dword [sym.imp.USER32.dll_GetWindowRect]
mov eax, dword [ebp - 0x24]
mov ecx, edi
push eax
push 0x561508
push 0x560814
call fcn.004eddf6
mov ecx, dword [ebp - 0x28]
push ecx
push 0x5614fc
push 0x560814
mov ecx, edi
call fcn.004eddf6
mov edx, dword [ebp - 0x20]
mov ecx, dword [ebp - 0x28]
sub edx, ecx
mov ecx, edi
push edx
push 0x5614f0
push 0x560814
call fcn.004eddf6
mov eax, dword [ebp - 0x1c]
mov ecx, dword [ebp - 0x24]
sub eax, ecx
mov ecx, edi
push eax
push 0x5614e0
push 0x560814
call fcn.004eddf6
mov ecx, dword [esi + 0x55c]
mov edx, dword [ecx]
call dword [edx + 0x58]
mov ecx, dword [esi + 0x55c]
cmp ecx, ebx
je 0x443148
mov eax, dword [ecx]
push 1
call dword [eax + 4]
mov eax, dword [esi + 0x554]
cmp eax, ebx
je 0x4431fb
mov ecx, dword [eax + 0x1c]
push ecx
call dword [sym.imp.USER32.dll_IsZoomed]
cmp eax, ebx
je 0x44316d
push 0xffffffffffffffff
push 0x5614f0
jmp 0x4431d3
mov eax, dword [esi + 0x554]
lea edx, [ebp - 0x28]
push edx
mov eax, dword [eax + 0x1c]
push eax
call dword [sym.imp.USER32.dll_GetWindowRect]
mov ecx, dword [ebp - 0x24]
push ecx
push 0x561508
push 0x561510
mov ecx, edi
call fcn.004eddf6
mov edx, dword [ebp - 0x28]
mov ecx, edi
push edx
push 0x5614fc
push 0x561510
call fcn.004eddf6
mov eax, dword [ebp - 0x20]
mov ecx, dword [ebp - 0x28]
sub eax, ecx
mov ecx, edi
push eax
push 0x5614f0
push 0x561510
call fcn.004eddf6
mov ecx, dword [ebp - 0x1c]
mov eax, dword [ebp - 0x24]
sub ecx, eax
push ecx
push 0x5614e0
push 0x561510
mov ecx, edi
call fcn.004eddf6
mov ecx, dword [esi + 0x554]
mov edx, dword [ecx]
call dword [edx + 0x58]
mov ecx, dword [esi + 0x554]
cmp ecx, ebx
je 0x4431fb
mov eax, dword [ecx]
push 1
call dword [eax + 4]
cmp dword [esi + 0x558], ebx
je 0x443276
mov ecx, esi
call fcn.00459770
push eax
push 0x56167c
push 0x56166c
mov ecx, edi
call fcn.004eddf6
mov eax, dword [esi + 0x558]
lea ecx, [ebp - 0x28]
push ecx
mov edx, dword [eax + 0x1c]
push edx
call dword [sym.imp.USER32.dll_GetWindowRect]
mov eax, dword [ebp - 0x24]
mov ecx, edi
push eax
push 0x561508
push 0x56166c
call fcn.004eddf6
mov ecx, dword [ebp - 0x28]
push ecx
push 0x5614fc
push 0x56166c
mov ecx, edi
call fcn.004eddf6
mov ecx, dword [esi + 0x558]
mov edx, dword [ecx]
call dword [edx + 0x58]
mov ecx, dword [esi + 0x558]
cmp ecx, ebx
je 0x443276
mov eax, dword [ecx]
push 1
call dword [eax + 4]
mov eax, dword [esi + 0x75c]
cmp eax, ebx
je 0x44328b
mov ecx, dword [esi + 0x1c]
push eax
push ecx
call dword [sym.imp.USER32.dll_KillTimer]
mov eax, dword [esi + 0x760]
mov dword [esi + 0x75c], ebx
cmp eax, ebx
je 0x4432a6
mov edx, dword [esi + 0x1c]
push eax
push edx
call dword [sym.imp.USER32.dll_KillTimer]
mov eax, dword [esi + 0x1668]
mov dword [esi + 0x760], ebx
cmp eax, ebx
je 0x4432bd
push eax
call dword [sym.imp.KERNEL32.dll_FreeLibrary]
cmp edi, ebx
mov dword [esi + 0x1668], ebx
je 0x4435fb
push 0
push 0x561658
push 0x55c5a4
mov ecx, 0x5761d0
call fcn.004fb49a
inc eax
mov ecx, edi
push eax
push 0x561658
push 0x55c5a4
call fcn.004eddf6
mov eax, dword [esi + 0xc4]
mov ecx, edi
push eax
push 0x561634
push 0x55c5a4
call fcn.004eddf6
mov ecx, dword [esi + 0x218]
push ecx
push 0x561614
push 0x55c5a4
mov ecx, edi
call fcn.004eddf6
mov edx, dword [esi + 0xc0]
mov ecx, edi
push edx
push 0x5615f0
push 0x55c5a4
call fcn.004eddf6
mov eax, dword [esi + 0x540]
mov ecx, edi
push eax
push 0x5615c8
push 0x55c5a4
call fcn.004eddf6
mov ecx, dword [esi + 0x64c]
push ecx
push 0x5615b4
push 0x55c5a4
mov ecx, edi
call fcn.004eddf6
mov eax, dword [esi + 0x64c]
test eax, eax
je 0x44337d
mov ecx, esi
call fcn.00445cb0
mov edx, dword [esi + 0x644]
mov ecx, edi
push edx
push 0x56159c
push 0x55c5a4
call fcn.004eddf6
mov eax, dword [esi + 0x644]
test eax, eax
je 0x4433a6
mov ecx, esi
call fcn.00445b40
mov eax, dword [esi + 0x1c]
push eax
call dword [sym.imp.USER32.dll_IsZoomed]
test eax, eax
je 0x4433c0
push 1
push 0x56158c
jmp 0x443440
mov ecx, dword [esi + 0x1c]
push ecx
call dword [sym.imp.USER32.dll_IsIconic]
test eax, eax
jne 0x44344c
push eax
push 0x56158c
push 0x55c5a4
mov ecx, edi
call fcn.004eddf6
mov eax, dword [esi + 0x1c]
lea edx, [ebp - 0x3c]
push edx
push eax
call dword [sym.imp.USER32.dll_GetWindowRect]
mov ecx, dword [ebp - 0x38]
push ecx
push 0x561508
push 0x55c5a4
mov ecx, edi
call fcn.004eddf6
mov edx, dword [ebp - 0x3c]
mov ecx, edi
push edx
push 0x5614fc
push 0x55c5a4
call fcn.004eddf6
mov eax, dword [ebp - 0x34]
mov ebx, dword [ebp - 0x3c]
sub eax, ebx
mov ecx, edi
push eax
push 0x5614f0
push 0x55c5a4
call fcn.004eddf6
mov ecx, dword [ebp - 0x30]
mov ebx, dword [ebp - 0x38]
sub ecx, ebx
push ecx
push 0x56157c
push 0x55c5a4
mov ecx, edi
call fcn.004eddf6
push 0
push 0x56156c
push 0x55c5a4
mov ecx, edi
call fcn.004eddf6
call fcn.00478dc0
test eax, eax
jne 0x44346d
call fcn.004ada90
lea edx, [ebp - 0x2c]
push edx
call fcn.00443670
add esp, 4
mov eax, dword [eax]
mov byte [ebp - 4], 1
push eax
lea eax, [esi + 0x654]
push eax
push 0x561554
push 0x55c5a4
call fcn.00424840
add esp, 0x10
lea ecx, [ebp - 0x2c]
mov byte [ebp - 4], 0
call fcn.004e1e27
mov ecx, esi
call fcn.00464220
mov ecx, dword [0x561548]
mov edx, dword [0x56154c]
mov eax, dword [0x561550]
xor ebx, ebx
mov dword [ebp - 0x4c], ecx
mov dword [ebp - 0x48], edx
mov dword [ebp - 0x44], eax
mov dword [ebp - 0x40], ebx
mov dword [ebp - 0x9c], 0x50
mov dword [ebp - 0x98], 0x101
mov ecx, dword [esi + 0xe30]
push 0
push 0
push 0x40c
push ecx
call dword [sym.imp.USER32.dll_SendMessageW]
cmp ebx, eax
jae 0x443555
lea edx, [ebp - 0x42]
push 0xa
push edx
push ebx
call fcn.004bdd5d
mov ecx, dword [esi + 0xe30]
add esp, 0xc
lea eax, [ebp - 0x9c]
push eax
push ebx
push 0x41c
push ecx
call dword [sym.imp.USER32.dll_SendMessageW]
test byte [ebp - 0x94], 8
je 0x443540
lea edx, [ebp - 0x4c]
push 0
push edx
push 0x55f6fc
mov ecx, edi
call fcn.004eddf6
inc ebx
jmp 0x4434df
lea eax, [ebp - 0x4c]
push 1
push eax
push 0x55f6fc
mov ecx, edi
call fcn.004eddf6
inc ebx
jmp 0x4434df
mov ecx, esi
mov byte [ebp - 4], 2
call fcn.0046ab80
jmp 0x44356b
mov ecx, dword [esi + 0x1c]
mov dword [ebp - 4], 0
push ecx
call dword [sym.imp.USER32.dll_UpdateWindow]
mov edx, dword [esi + 0x1c]
push 0
push edx
call dword [sym.imp.USER32.dll_UnregisterHotKey]
mov eax, dword [esi + 0x144c]
test eax, eax
jne 0x4435a4
mov eax, dword [esi + 0x1424]
lea ecx, [esi + 0x1448]
push eax
call fcn.004e2f7a
lea ecx, [esi + 0x1448]
call fcn.004a27f0
mov edi, dword [esi + 0x5bc]
test edi, edi
je 0x4435fb
xor ebx, ebx
cmp edi, ebx
je 0x4435ea
mov eax, dword [edi]
cmp eax, ebx
je 0x4435ce
push eax
call dword [sym.imp.USER32.dll_DestroyAcceleratorTable]
mov dword [edi], ebx
mov eax, dword [edi + 4]
mov dword [edi + 8], ebx
cmp eax, ebx
je 0x4435e1
push eax
call fcn.004be3db
add esp, 4
push edi
call fcn.004e2519
add esp, 4
mov dword [esi + 0x5bc], ebx
jmp 0x4435fb
mov ecx, esi
mov dword [ebp - 4], 5
call fcn.0045ca60
jmp 0x443614
mov ecx, esi
mov dword [ebp - 4], 7
call fcn.00456990
call fcn.0048f9f0
jmp 0x443632
mov ecx, esi
mov dword [ebp - 4], 9
call fcn.004f33d0
mov dword [0x57614c], 0
push 0
call dword [sym.imp.KERNEL32.dll_ExitProcess]
mov ecx, dword [ebp - 0xc]
pop edi
pop esi
mov dword fs:[0], ecx
pop ebx
mov esp, ebp
pop ebp
ret