Function at 0x42d4aa
Capabilities:
Read .ini file

Disassembly:
mov eax, 0x4db0a1
call fcn.0046d048
sub esp, 0x42c
push ebx
push esi
push edi
mov esi, ecx
mov dword [ebp - 0x10], esp
push 1
pop edi
xor ebx, ebx
mov dword [ebp - 0x20], esi
mov dword [esi + 0xec], edi
mov dword [ebp - 0x18], ebx
call fcn.0041635e
test eax, eax
je 0x42d4f5
push 0x515fa4
push ebx
push 0x515f9c
push 0x515f94
call dword [sym.imp.KERNEL32.dll_GetPrivateProfileIntA]
mov dword [ebp - 0x18], eax
mov dword [ebp - 0x1c], edi
call fcn.0043c060
test eax, eax
je 0x42d51a
push 0x515e00
push ebx
push 0x515f9c
push 0x515f8c
call dword [sym.imp.KERNEL32.dll_GetPrivateProfileIntA]
mov dword [ebp - 0x1c], eax
push ebx
lea ecx, [ebp - 0x230]
call fcn.0043d803
cmp dword [ebp + 8], edi
mov dword [ebp - 4], ebx
jne 0x42d536
mov dword [ebp - 0x188], edi
jmp 0x42d554
cmp dword [ebp - 0x18], ebx
jne 0x42d549
mov dword [ebp - 0x88], edi
mov dword [0x5214c8], edi
jmp 0x42d554
cmp dword [ebp - 0x1c], ebx
jne 0x42d554
mov dword [0x5214c0], edi
lea ecx, [ebp - 0x84]
call fcn.00415df0
lea ecx, [ebp - 0x84]
mov byte [ebp - 4], 1
call fcn.00415e7e
call fcn.0041635e
mov eax, dword [0x518cb0]
mov dword [ebp - 0x24], eax
and byte [ebp - 0x334], 0
push 0x40
pop ecx
xor eax, eax
lea edi, [ebp - 0x333]
mov byte [ebp - 4], 2
rep stosd dword es:[edi], eax
stosw word es:[edi], ax
stosb byte es:[edi], al
call fcn.004d4518
mov eax, dword [eax + 4]
lea ecx, [ebp - 0x334]
push 0x104
push ecx
push dword [eax + 0x68]
call dword [sym.imp.KERNEL32.dll_GetModuleFileNameA]
lea eax, [ebp - 0x334]
lea ecx, [ebp - 0x2c]
push eax
call fcn.004cdf9a
push 0x5c
lea ecx, [ebp - 0x2c]
mov byte [ebp - 4], 3
call fcn.004c7abb
cmp eax, 0xffffffff
je 0x42d5fc
inc eax
lea ecx, [ebp - 0x2c]
push eax
lea eax, [ebp + 8]
push eax
call fcn.004c7a43
push eax
lea ecx, [ebp - 0x24]
mov byte [ebp - 4], 4
call fcn.004ce065
lea ecx, [ebp + 8]
mov byte [ebp - 4], 3
call fcn.004cdf2c
mov ecx, dword [ebp - 0x24]
mov eax, dword [ecx - 8]
cmp eax, 2
jle 0x42d618
cmp byte [eax + ecx - 1], 0x5c
je 0x42d618
push 0x5c
lea ecx, [ebp - 0x24]
call fcn.004ce32f
mov edi, 0x521470
mov ecx, edi
call fcn.004355b9
push 0x51624c
lea ecx, [ebp - 0x14]
call fcn.004cdf9a
lea eax, [ebp - 0x14]
mov byte [ebp - 4], 5
push eax
call fcn.004178ab
lea eax, [ebp - 0x14]
mov ecx, esp
mov dword [ebp + 8], esp
push eax
call fcn.004cdca1
lea ecx, [ebp - 0x230]
call fcn.0043e2b1
push ecx
mov ecx, esp
mov dword [ebp + 8], esp
push 0x516244
call fcn.004cdf9a
lea ecx, [ebp - 0x230]
call fcn.0043e2e8
push 0x51623c
lea ecx, [ebp - 0x14]
call fcn.004ce0b5
lea eax, [ebp - 0x14]
push eax
call fcn.004178ab
pop ecx
push ebx
push 0x8a
push dword [ebp - 0x14]
lea ecx, [ebp - 0x230]
push 0x4e9520
call fcn.0043dc6b
push 0x516230
lea ecx, [ebp - 0x14]
call fcn.004ce0b5
lea eax, [ebp - 0x14]
push eax
call fcn.004178ab
pop ecx
push ebx
push 0x85
push dword [ebp - 0x14]
lea ecx, [ebp - 0x230]
push 0x4e9b98
call fcn.0043dc6b
push 0x516224
lea ecx, [ebp - 0x14]
call fcn.004ce0b5
lea eax, [ebp - 0x14]
push eax
call fcn.004178ab
pop ecx
push ebx
push 0x88
push dword [ebp - 0x14]
lea ecx, [ebp - 0x230]
push 0x4e9198
call fcn.0043dc6b
push 0x516218
lea ecx, [ebp - 0x14]
call fcn.004ce0b5
lea eax, [ebp - 0x14]
push eax
call fcn.004178ab
pop ecx
push ebx
push 0x8e
push dword [ebp - 0x14]
lea ecx, [ebp - 0x230]
push 0x4e9398
call fcn.0043dc6b
push 0x51620c
lea ecx, [ebp - 0x14]
call fcn.004ce0b5
lea eax, [ebp - 0x14]
push eax
call fcn.004178ab
pop ecx
push ebx
push 0x87
push dword [ebp - 0x14]
lea ecx, [ebp - 0x230]
push 0x4e9028
call fcn.0043dc6b
push 0x516200
lea ecx, [ebp - 0x14]
call fcn.004ce0b5
lea eax, [ebp - 0x14]
push eax
call fcn.004178ab
pop ecx
push ebx
push 0x8d
push dword [ebp - 0x14]
lea ecx, [ebp - 0x230]
push 0x4e9830
call fcn.0043dc6b
call fcn.0041635e
test eax, eax
je 0x42d7cb
push 0x5161f4
lea ecx, [ebp - 0x14]
call fcn.004ce0b5
lea eax, [ebp - 0x14]
push eax
call fcn.004178ab
pop ecx
push ebx
push 0x8f
push dword [ebp - 0x14]
lea ecx, [ebp - 0x230]
push 0x4ea6f8
call fcn.0043dc6b
push 0x5161e8
lea ecx, [ebp - 0x14]
call fcn.004ce0b5
lea eax, [ebp - 0x14]
push eax
call fcn.004178ab
pop ecx
push ebx
push 0xb5
push dword [ebp - 0x14]
lea ecx, [ebp - 0x230]
push 0x4e99e0
call fcn.0043dc6b
push 0x5161dc
lea ecx, [ebp - 0x14]
call fcn.004ce0b5
lea eax, [ebp - 0x14]
push eax
call fcn.004178ab
pop ecx
push ebx
push 0xad
push dword [ebp - 0x14]
lea ecx, [ebp - 0x230]
push 0x4e8e88
call fcn.0043dc6b
push 0x5161d0
lea ecx, [ebp - 0x14]
call fcn.004ce0b5
lea eax, [ebp - 0x14]
push eax
call fcn.004178ab
pop ecx
push ebx
push 0x8b
push dword [ebp - 0x14]
lea ecx, [ebp - 0x230]
push 0x4e96a8
call fcn.0043dc6b
lea ecx, [ebp - 0x230]
call fcn.004cea1f
cmp eax, 1
jne 0x42e258
call fcn.004d4518
mov ecx, dword [eax + 4]
call fcn.004cd9f7
mov ecx, edi
mov byte [ebp - 4], 6
call fcn.004351fb
cmp dword [0x521498], ebx
je 0x42d8b7
mov edi, 0xf68
push edi
push dword [esi + 0x1c]
call dword [sym.imp.USER32.dll_KillTimer]
mov eax, dword [0x5214a8]
push ebx
imul eax, eax, 0x3e8
push eax
push edi
push dword [esi + 0x1c]
call dword [sym.imp.USER32.dll_SetTimer]
jmp 0x42d8c5
push 0xf68
push dword [esi + 0x1c]
call dword [sym.imp.USER32.dll_KillTimer]
call fcn.004d4518
mov eax, dword [eax + 4]
push 1
push 0x515b50
push 0x513f88
mov ecx, eax
call fcn.004d46fd
mov dword [ebp - 0x1c], eax
call fcn.004d4518
mov eax, dword [eax + 4]
push 1
mov edi, 0x51583c
push 0x5155dc
push edi
mov ecx, eax
call fcn.004d46fd
mov dword [ebp + 8], eax
call fcn.004d4518
mov eax, dword [eax + 4]
push 0x51584c
push 0x515844
lea ecx, [ebp - 0x28]
push edi
push ecx
mov ecx, eax
call fcn.004d4769
mov eax, dword [ebp - 0x1c]
mov byte [ebp - 4], 7
cmp dword [esi + 0xf0], eax
je 0x42d961
mov edi, dword [sym.imp.USER32.dll_GetWindowRect]
mov dword [esi + 0xf0], eax
lea eax, [ebp - 0x6c]
push eax
push dword [esi + 0x1c]
call edi
cmp dword [esi + 0xe4], ebx
je 0x42d967
cmp dword [esi + 0xf0], ebx
je 0x42d967
lea eax, [ebp - 0x6c]
mov ecx, esi
push eax
call fcn.0042d0b3
jmp 0x42d967
mov edi, dword [sym.imp.USER32.dll_GetWindowRect]
mov ecx, 0x5214e8
call fcn.0043f6f2
cmp dword [ebp + 8], eax
je 0x42da82
lea eax, [ebp - 0x3c]
push eax
push dword [esi + 0x1c]
call edi
mov eax, dword [esi + 0x428]
lea ecx, [ebp - 0x5c]
push ecx
push dword [eax + 0x1c]
call edi
mov eax, dword [esi + 0x42c]
lea ecx, [ebp - 0x4c]
push ecx
push dword [eax + 0x1c]
call edi
mov edi, dword [sym.imp.USER32.dll_SendMessageA]
push ebx
push ebx
push 0xb
push dword [esi + 0x1c]
call edi
cmp dword [ebp + 8], ebx
mov ecx, esi
jne 0x42d9be
call fcn.0042c2ad
jmp 0x42d9c3
call fcn.0042bf09
mov eax, dword [esi + 0x428]
lea ecx, [ebp - 0x6c]
add eax, 0x7c
push ecx
push dword [eax + 0x1c]
call dword [sym.imp.USER32.dll_GetClientRect]
mov eax, dword [ebp - 0x60]
sub eax, dword [ebp - 0x68]
movzx ecx, ax
mov eax, dword [ebp - 0x64]
sub eax, dword [ebp - 0x6c]
shl ecx, 0x10
movzx eax, ax
or ecx, eax
mov eax, dword [esi + 0x428]
push ecx
add eax, 0x7c
push 2
push 5
push dword [eax + 0x1c]
call edi
push ebx
push 1
push 0xb
push dword [esi + 0x1c]
call edi
mov eax, dword [ebp - 0x30]
push 1
sub eax, dword [ebp - 0x38]
mov ecx, esi
push eax
mov eax, dword [ebp - 0x34]
sub eax, dword [ebp - 0x3c]
push eax
push dword [ebp - 0x38]
push dword [ebp - 0x3c]
call fcn.004cd583
push 1
push ebx
push dword [esi + 0x1c]
call dword [sym.imp.USER32.dll_InvalidateRect]
cmp dword [esi + 0x90], ebx
jne 0x42da88
mov eax, dword [ebp - 0x50]
push 1
sub eax, dword [ebp - 0x58]
mov ecx, dword [esi + 0x428]
push eax
mov eax, dword [ebp - 0x54]
sub eax, dword [ebp - 0x5c]
push eax
push dword [ebp - 0x58]
push dword [ebp - 0x5c]
call fcn.004cd583
mov eax, dword [ebp - 0x40]
push 1
sub eax, dword [ebp - 0x48]
mov ecx, dword [esi + 0x42c]
push eax
mov eax, dword [ebp - 0x44]
sub eax, dword [ebp - 0x4c]
push eax
push dword [ebp - 0x48]
push dword [ebp - 0x4c]
call fcn.004cd583
jmp 0x42da88
mov edi, dword [sym.imp.USER32.dll_SendMessageA]
cmp dword [ebp + 8], ebx
je 0x42e194
call fcn.004d4518
mov eax, dword [eax + 4]
push dword [eax + 0xc0]
push dword [ebp - 0x28]
call fcn.0046d2a8
pop ecx
test eax, eax
pop ecx
je 0x42e194
call fcn.004d4518
mov eax, dword [eax + 4]
lea ecx, [ebp - 0x28]
push ecx
lea ecx, [eax + 0xc0]
call fcn.004ce065
lea eax, [ebp - 0x438]
push eax
call fcn.00424634
pop ecx
call fcn.004d4518
mov eax, dword [eax + 4]
lea ecx, [ebp - 0x438]
push ecx
lea ecx, [eax + 0xc4]
call fcn.004ce0b5
call fcn.004d4518
mov eax, dword [eax + 4]
push 0x515834
lea ecx, [eax + 0xc4]
call fcn.004ce308
call fcn.004d4518
mov eax, dword [eax + 4]
mov dword [ebp + 8], eax
call fcn.004d4518
mov ecx, dword [ebp + 8]
mov eax, dword [eax + 4]
add ecx, 0xc0
push ecx
lea ecx, [eax + 0xc4]
call fcn.004ce344
call fcn.004d4518
mov eax, dword [eax + 4]
push 0x513a0c
lea ecx, [eax + 0xc4]
call fcn.004ce308
lea eax, [ebp - 0x4c]
push eax
push dword [esi + 0x1c]
call dword [sym.imp.USER32.dll_GetWindowRect]
mov eax, dword [esi + 0x428]
lea ecx, [ebp - 0x5c]
push ecx
push dword [eax + 0x1c]
call dword [sym.imp.USER32.dll_GetWindowRect]
mov eax, dword [esi + 0x42c]
lea ecx, [ebp - 0x3c]
push ecx
push dword [eax + 0x1c]
call dword [sym.imp.USER32.dll_GetWindowRect]
push ebx
push ebx
push 0xb
push dword [esi + 0x1c]
call edi
mov ecx, 0x5214e8
call fcn.0043f6f2
test eax, eax
je 0x42db98
mov ecx, esi
call fcn.0042c2ad
mov ecx, esi
call fcn.0042bf09
mov eax, dword [ebp - 0x40]
push 1
sub eax, dword [ebp - 0x48]
mov ecx, esi
push eax
mov eax, dword [ebp - 0x44]
sub eax, dword [ebp - 0x4c]
push eax
push dword [ebp - 0x48]
push dword [ebp - 0x4c]
call fcn.004cd583
push ebx
push 1
push 0xb
push dword [esi + 0x1c]
call edi
push 1
push ebx
push dword [esi + 0x1c]
call dword [sym.imp.USER32.dll_InvalidateRect]
cmp dword [esi + 0x90], ebx
jne 0x42dc1c
mov eax, dword [ebp - 0x50]
push 1
sub eax, dword [ebp - 0x58]
mov ecx, dword [esi + 0x428]
push eax
mov eax, dword [ebp - 0x54]
sub eax, dword [ebp - 0x5c]
push eax
push dword [ebp - 0x58]
push dword [ebp - 0x5c]
call fcn.004cd583
mov eax, dword [ebp - 0x30]
push 1
sub eax, dword [ebp - 0x38]
mov ecx, dword [esi + 0x42c]
push eax
mov eax, dword [ebp - 0x34]
sub eax, dword [ebp - 0x3c]
push eax
push dword [ebp - 0x38]
push dword [ebp - 0x3c]
call fcn.004cd583
call fcn.004d4518
mov eax, dword [eax + 4]
mov eax, dword [eax + 0xc0]
cmp dword [eax - 8], ebx
je 0x42e194
call fcn.004d4518
mov eax, dword [eax + 4]
mov edi, 0x515d10
push dword [eax + 0xc0]
push edi
push 0x5155e4
call fcn.004441fa
add esp, 0xc
call fcn.004d4518
mov eax, dword [eax + 4]
push dword [eax + 0xc0]
push edi
push 0x51562c
call fcn.004441fa
add esp, 0xc
mov ecx, esi
call fcn.00426362
mov ecx, dword [esi + 0x70]
cmp ecx, ebx
je 0x42dc8e
call fcn.0043ffdd
mov ecx, dword [esi + 0x310]
call fcn.00443705
mov eax, dword [esi + 0x428]
lea ecx, [eax + 0x7c]
cmp ecx, ebx
je 0x42dca5
cmp dword [ecx + 0x1c], ebx
je 0x42dca5
call fcn.00436cdf
mov ecx, dword [esi + 0x74]
cmp ecx, ebx
je 0x42dcb1
call fcn.0043ffdd
mov eax, dword [esi + 0x428]
cmp eax, ebx
je 0x42dcc6
lea ecx, [eax + 0x214]
call fcn.004369d3
mov eax, dword [esi + 0xb4]
cmp eax, ebx
je 0x42dcee
cmp dword [eax + 0x1c], ebx
je 0x42dcee
call fcn.004d4518
mov eax, dword [eax + 4]
mov ecx, dword [esi + 0xb4]
add eax, 0xc4
push eax
call fcn.00411014
mov byte [ebp - 4], 8
call fcn.004d4518
mov eax, dword [eax + 4]
lea ecx, [esi + 0x314]
push dword [eax + 0xc4]
call fcn.004211cf
jmp 0x42dd18
mov dword [ebp - 4], 7
call fcn.004d4518
mov eax, dword [eax + 4]
mov edi, 0x515d8c
add eax, 0xc4
push edi
push eax
lea eax, [ebp + 8]
push eax
call fcn.004ce1c1
push dword [eax]
lea ecx, [esi + 0x314]
mov byte [ebp - 4], 0xa
call fcn.004211e3
lea ecx, [ebp + 8]
mov byte [ebp - 4], 7
call fcn.004cdf2c
cmp dword [esi + 0x7c], ebx
je 0x42dda6
call fcn.004d4518
mov eax, dword [eax + 4]
mov ecx, dword [esi + 0x7c]
push dword [eax + 0xc4]
call fcn.004211cf
call fcn.004d4518
mov eax, dword [eax + 4]
push edi
add eax, 0xc4
push eax
lea eax, [ebp + 8]
push eax
call fcn.004ce1c1
push dword [eax]
mov ecx, dword [esi + 0x7c]
mov byte [ebp - 4], 0xb
call fcn.004211e3
lea ecx, [ebp + 8]
mov byte [ebp - 4], 7
call fcn.004cdf2c
lea edi, [esi + 0x3dc]
cmp edi, ebx
je 0x42ddff
cmp dword [edi + 0x1c], ebx
je 0x42ddff
call fcn.004d4518
mov eax, dword [eax + 4]
push 0x515d7c
add eax, 0xc4
push eax
lea eax, [ebp + 8]
push eax
call fcn.004ce1c1
push dword [eax]
mov ecx, edi
mov byte [ebp - 4], 0xc
call fcn.004240f9
lea ecx, [ebp + 8]
mov byte [ebp - 4], 7
call fcn.004cdf2c
call fcn.004d4518
mov eax, dword [eax + 4]
mov ecx, edi
push dword [eax + 0xc4]
call fcn.004205fa
cmp dword [esi + 0x454], ebx
je 0x42de40
call fcn.004d4518
mov eax, dword [eax + 4]
push 0x5161c0
add eax, 0xc4
push eax
lea eax, [ebp + 8]
push eax
call fcn.004ce1c1
push dword [eax]
mov ecx, dword [esi + 0x454]
mov byte [ebp - 4], 0xd
call fcn.00424121
lea ecx, [ebp + 8]
mov byte [ebp - 4], 7
call fcn.004cdf2c
cmp dword [esi + 0x464], ebx
je 0x42dfea
mov eax, dword [esi + 0x70]
cmp dword [eax + 0x44], ebx
je 0x42df1f
call fcn.004d4518
mov eax, dword [eax + 4]
push 0x5161a8
add eax, 0xc4
push eax
lea eax, [ebp - 0x18]
push eax
call fcn.004ce1c1
mov edi, dword [eax]
mov byte [ebp - 4], 0xe
call fcn.004d4518
mov eax, dword [eax + 4]
push 0x51618c
add eax, 0xc4
push eax
lea eax, [ebp - 0x1c]
push eax
call fcn.004ce1c1
mov eax, dword [eax]
mov byte [ebp - 4], 0xf
mov dword [ebp + 8], eax
call fcn.004d4518
mov eax, dword [eax + 4]
push 0x516174
add eax, 0xc4
push eax
lea eax, [ebp - 0x20]
push eax
call fcn.004ce1c1
mov eax, dword [eax]
mov ecx, dword [esi + 0x464]
push ebx
push ebx
push edi
mov byte [ebp - 4], 0x10
push dword [ebp + 8]
push eax
call fcn.0041f6d2
mov ebx, eax
lea ecx, [ebp - 0x20]
neg ebx
sbb bl, bl
mov byte [ebp - 4], 0xf
inc bl
call fcn.004cdf2c
lea ecx, [ebp - 0x1c]
mov byte [ebp - 4], 0xe
call fcn.004cdf2c
lea ecx, [ebp - 0x18]
mov byte [ebp - 4], 7
call fcn.004cdf2c
test bl, bl
je 0x42dfe8
push 0
push 0
push 0xcb
push 0xcd
push 0xcc
jmp 0x42dfdd
call fcn.004d4518
mov eax, dword [eax + 4]
push 0x51615c
add eax, 0xc4
push eax
lea eax, [ebp - 0x18]
push eax
call fcn.004ce1c1
mov edi, dword [eax]
mov byte [ebp - 4], 0x11
call fcn.004d4518
mov eax, dword [eax + 4]
push 0x516140
add eax, 0xc4
push eax
lea eax, [ebp - 0x1c]
push eax
call fcn.004ce1c1
mov eax, dword [eax]
mov byte [ebp - 4], 0x12
mov dword [ebp + 8], eax
call fcn.004d4518
mov eax, dword [eax + 4]
push 0x516128
add eax, 0xc4
push eax
lea eax, [ebp - 0x20]
push eax
call fcn.004ce1c1
mov eax, dword [eax]
mov ecx, dword [esi + 0x464]
push ebx
push ebx
push edi
mov byte [ebp - 4], 0x13
push dword [ebp + 8]
push eax
call fcn.0041f6d2
mov ebx, eax
lea ecx, [ebp - 0x20]
neg ebx
sbb bl, bl
mov byte [ebp - 4], 0x12
inc bl
call fcn.004cdf2c
lea ecx, [ebp - 0x1c]
mov byte [ebp - 4], 0x11
call fcn.004cdf2c
lea ecx, [ebp - 0x18]
mov byte [ebp - 4], 7
call fcn.004cdf2c
test bl, bl
je 0x42dfe8
push 0
push 0
push 0xce
push 0xca
push 0xcf
mov ecx, dword [esi + 0x464]
call fcn.0041fa02
xor ebx, ebx
cmp dword [esi + 0x460], ebx
je 0x42e194
mov eax, dword [esi + 0x74]
cmp dword [eax + 0x44], ebx
je 0x42e0c9
call fcn.004d4518
mov eax, dword [eax + 4]
push 0x51615c
add eax, 0xc4
push eax
lea eax, [ebp - 0x18]
push eax
call fcn.004ce1c1
mov edi, dword [eax]
mov byte [ebp - 4], 0x14
call fcn.004d4518
mov eax, dword [eax + 4]
push 0x516140
add eax, 0xc4
push eax
lea eax, [ebp - 0x1c]
push eax
call fcn.004ce1c1
mov eax, dword [eax]
mov byte [ebp - 4], 0x15
mov dword [ebp + 8], eax
call fcn.004d4518
mov eax, dword [eax + 4]
push 0x516128
add eax, 0xc4
push eax
lea eax, [ebp - 0x20]
push eax
call fcn.004ce1c1
mov eax, dword [eax]
mov ecx, dword [esi + 0x460]
push ebx
push ebx
push edi
mov byte [ebp - 4], 0x16
push dword [ebp + 8]
push eax
call fcn.0041f6d2
mov ebx, eax
lea ecx, [ebp - 0x20]
neg ebx
sbb bl, bl
mov byte [ebp - 4], 0x15
inc bl
call fcn.004cdf2c
lea ecx, [ebp - 0x1c]
mov byte [ebp - 4], 0x14
call fcn.004cdf2c
lea ecx, [ebp - 0x18]
mov byte [ebp - 4], 7
call fcn.004cdf2c
test bl, bl
je 0x42e192
push 0
push 0
push 0xce
push 0xca
push 0xcf
jmp 0x42e187
call fcn.004d4518
mov eax, dword [eax + 4]
push 0x5161a8
add eax, 0xc4
push eax
lea eax, [ebp - 0x18]
push eax
call fcn.004ce1c1
mov edi, dword [eax]
mov byte [ebp - 4], 0x17
call fcn.004d4518
mov eax, dword [eax + 4]
push 0x51618c
add eax, 0xc4
push eax
lea eax, [ebp - 0x1c]
push eax
call fcn.004ce1c1
mov eax, dword [eax]
mov byte [ebp - 4], 0x18
mov dword [ebp + 8], eax
call fcn.004d4518
mov eax, dword [eax + 4]
push 0x516174
add eax, 0xc4
push eax
lea eax, [ebp - 0x20]
push eax
call fcn.004ce1c1
mov eax, dword [eax]
mov ecx, dword [esi + 0x460]
push ebx
push ebx
push edi
mov byte [ebp - 4], 0x19
push dword [ebp + 8]
push eax
call fcn.0041f6d2
mov ebx, eax
lea ecx, [ebp - 0x20]
neg ebx
sbb bl, bl
mov byte [ebp - 4], 0x18
inc bl
call fcn.004cdf2c
lea ecx, [ebp - 0x1c]
mov byte [ebp - 4], 0x17
call fcn.004cdf2c
lea ecx, [ebp - 0x18]
mov byte [ebp - 4], 7
call fcn.004cdf2c
test bl, bl
je 0x42e192
push 0
push 0
push 0xcb
push 0xcd
push 0xcc
mov ecx, dword [esi + 0x460]
call fcn.0041fa02
xor ebx, ebx
cmp dword [esi + 0x90], ebx
mov dword [ebp - 0x18], ebx
je 0x42e1cc
mov eax, dword [esi + 0x74]
cmp eax, ebx
je 0x42e1cc
push dword [eax + 0x1c]
call dword [sym.imp.USER32.dll_IsWindowVisible]
cmp eax, ebx
je 0x42e1cc
mov eax, dword [esi + 0x74]
lea ecx, [ebp - 0x6c]
push ecx
push dword [eax + 0x1c]
call dword [sym.imp.USER32.dll_GetWindowRect]
mov eax, dword [ebp - 0x64]
sub eax, dword [ebp - 0x6c]
mov dword [ebp - 0x18], eax
mov edi, 0x5214e8
mov dword [ebp + 8], ebx
mov ecx, edi
call fcn.0043f6f2
test eax, eax
je 0x42e1ee
push 0x37
mov ecx, edi
push dword [esi + 0x1c]
call fcn.0043f736
mov dword [ebp + 8], eax
cmp dword [esi + 0xe4], ebx
push 1
push 0x10
mov ecx, edi
je 0x42e21b
call fcn.0043f6f2
neg eax
sbb eax, eax
and al, 0xe6
add eax, 0x7d
push eax
mov eax, dword [ebp + 8]
add eax, 4
push eax
mov eax, dword [ebp - 0x18]
add eax, 4
push eax
jmp 0x42e230
call fcn.0043f6f2
neg eax
sbb eax, eax
and al, 0xe6
add eax, 0x7d
push eax
push dword [ebp + 8]
push dword [ebp - 0x18]
mov ecx, dword [esi + 0xb4]
call fcn.004cd583
lea ecx, [ebp - 0x28]
mov byte [ebp - 4], 6
call fcn.004cdf2c
mov byte [ebp - 4], 5
call fcn.004d4518
mov ecx, dword [eax + 4]
call fcn.004cda0c
lea ecx, [ebp - 0x14]
mov dword [esi + 0xec], ebx
mov byte [ebp - 4], 3
call fcn.004cdf2c
lea ecx, [ebp - 0x2c]
mov byte [ebp - 4], 2
call fcn.004cdf2c
lea ecx, [ebp - 0x24]
mov byte [ebp - 4], 1
call fcn.004cdf2c
and byte [ebp - 4], 0
lea ecx, [ebp - 0x84]
call fcn.00415e3d
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x230]
call fcn.0043d93a
mov ecx, dword [ebp - 0xc]
pop edi
pop esi
mov dword fs:[0], ecx
pop ebx
leave
ret 4