Function at 0x404930
Capabilities:
Read .ini file

Disassembly:
push 0xffffffffffffffff
push 0x43c958
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
sub esp, 8
push ebx
push ebp
push esi
push edi
mov esi, ecx
mov eax, dword [esi + 0x1c]
xor ebx, ebx
push ebx
push eax
mov dword [esp + 0x28], ebx
call dword [sym.imp.USER32.dll_KillTimer]
mov ecx, dword [0x4950a8]
push ebx
push ebx
push 0x4e7
push ecx
mov dword [0x4954e8], ebx
call dword [sym.imp.USER32.dll_PostThreadMessageA]
mov edx, dword [esp + 0x28]
push edx
lea ecx, [esi + 0x26c]
call fcn.004322a3
push 0x440390
lea ecx, [esi + 0x494]
call fcn.004322a3
mov eax, dword [esi + 0x500]
mov edi, dword [sym.imp.USER32.dll_SendMessageA]
push ebx
push ebx
push 0x402
push eax
call edi
push 0x440070
push 0x3f7
mov ecx, esi
call fcn.004321a0
mov ecx, eax
call fcn.004322a3
mov ecx, dword [esi + 0x550]
push ebx
push ebx
push 0x402
push ecx
call edi
push 0x440070
push 0x3f8
mov ecx, esi
call fcn.004321a0
mov ecx, eax
call fcn.004322a3
push 1
lea ecx, [esi + 0x324]
call fcn.00432359
push 1
lea ecx, [esi + 0x21c]
call fcn.00432359
push str.WorkMode
lea ecx, [esp + 0x18]
call fcn.00401a30
push str.Config
lea ecx, [esp + 0x14]
mov byte [esp + 0x24], 1
call fcn.00401a30
mov eax, dword [esi + 0x588]
mov edx, dword [esp + 0x14]
mov edi, dword [sym.imp.KERNEL32.dll_GetPrivateProfileStringA]
push eax
mov eax, dword [esp + 0x14]
push 0x100
push 0x495550
push ebx
push edx
push eax
mov byte [esp + 0x38], 2
call edi
neg eax
sbb eax, eax
and eax, 0x495550
je 0x404a6c
push 0xa
push ebx
push eax
call fcn.0041e098
add esp, 0xc
jmp 0x404a82
mov ecx, dword [esp + 0x14]
mov edx, dword [esp + 0x10]
push 0x63
push ecx
push edx
mov ecx, 0x495008
call fcn.004394c6
mov ebp, eax
mov eax, dword [esp + 0x10]
add eax, 0xfffffff0
mov byte [esp + 0x20], 1
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x404aa7
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
call dword [edx + 4]
mov eax, dword [esp + 0x14]
add eax, 0xfffffff0
mov byte [esp + 0x20], bl
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x404ac9
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
call dword [edx + 4]
cmp ebp, 0x63
lea ecx, [esi + 0x1cc]
je 0x404ad7
push ebx
jmp 0x404ad9
push 1
call fcn.00432359
push str.Section
lea ecx, [esp + 0x14]
call fcn.00401a30
push str.Config
lea ecx, [esp + 0x18]
mov byte [esp + 0x24], 3
call fcn.00401a30
mov eax, dword [esi + 0x588]
mov ecx, dword [esp + 0x14]
push eax
mov eax, dword [esp + 0x14]
push 0x100
push 0x495550
push ebx
push eax
push ecx
mov byte [esp + 0x38], 4
call edi
neg eax
sbb eax, eax
and eax, 0x495550
je 0x404b3b
push 0xa
push ebx
push eax
call fcn.0041e098
add esp, 0xc
jmp 0x404b51
mov edx, dword [esp + 0x10]
mov eax, dword [esp + 0x14]
push 0x63
push edx
push eax
mov ecx, 0x495008
call fcn.004394c6
mov edi, eax
mov eax, dword [esp + 0x14]
add eax, 0xfffffff0
mov byte [esp + 0x20], 3
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x404b76
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
call dword [edx + 4]
mov eax, dword [esp + 0x10]
add eax, 0xfffffff0
mov byte [esp + 0x20], bl
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x404b98
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
call dword [edx + 4]
cmp edi, 0x63
lea ecx, [esi + 0xdc]
je 0x404bae
cmp edi, dword [esi + 0x590]
jge 0x404bae
push ebx
jmp 0x404bb0
push 1
call fcn.00432359
push 1
lea ecx, [esi + 0x12c]
call fcn.00432359
push 1
lea ecx, [esi + 0x17c]
call fcn.00432359
push 1
lea ecx, [esi + 0x8c]
call fcn.00432359
push 1
lea ecx, [esi + 0x5c4]
call fcn.00432359
push 1
lea ecx, [esi + 0x6c0]
call fcn.00432359
mov eax, dword [esp + 0x28]
add eax, 0xfffffff0
mov dword [esp + 0x20], 0xffffffff
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
pop edi
pop esi
pop ebp
pop ebx
jg 0x404c20
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
call dword [edx + 4]
mov ecx, dword [esp + 8]
mov dword fs:[0], ecx
add esp, 0x14
ret 4