Function at 0x41ef00
Capabilities:
Read .ini file

Disassembly:
push 0xffffffffffffffff
push 0x55ca08
mov eax, dword fs:[0]
push eax
sub esp, 0x36c
mov eax, dword [0x651788]
xor eax, esp
mov dword [esp + 0x368], eax
push ebx
push ebp
push esi
push edi
mov eax, dword [0x651788]
xor eax, esp
push eax
lea eax, [esp + 0x380]
mov dword fs:[0], eax
mov edi, dword [esp + 0x390]
xor esi, esi
push 0x206
lea eax, [esp + 0x17a]
push esi
push eax
mov ebp, ecx
mov dword [esp + 0x20], edi
mov word [esp + 0x180], si
call fcn.004afb50
add esp, 0xc
push edi
push 0x104
lea ecx, [esp + 0x17c]
push ecx
push 0x5731a4
push 0x5755b0
push 0x5755a8
call dword [sym.imp.KERNEL32.dll_GetPrivateProfileStringW]
mov ebx, 7
lea eax, [esp + 0x174]
mov dword [esp + 0x4c], ebx
mov dword [esp + 0x48], esi
mov word [esp + 0x38], si
lea ecx, [eax + 2]
mov dx, word [eax]
add eax, 2
cmp dx, si
jne 0x41efa7
sub eax, ecx
sar eax, 1
push eax
lea edx, [esp + 0x178]
push edx
lea ecx, [esp + 0x3c]
call fcn.00402120
push 0x10
push str.WEATHER_NET_LINK
lea ecx, [esp + 0x20]
mov dword [esp + 0x390], esi
mov dword [esp + 0x38], ebx
mov dword [esp + 0x34], esi
mov word [esp + 0x24], si
call fcn.00402120
lea eax, [esp + 0x34]
push eax
lea ecx, [esp + 0x1c]
push ecx
lea ecx, [esp + 0x90]
mov byte [esp + 0x390], 1
call fcn.0042b280
push eax
lea ecx, [esp + 0x54]
mov byte [esp + 0x38c], 2
call fcn.0041c950
mov ecx, dword [ebp + 0x82954]
lea edx, [esp + 0x50]
push edx
lea eax, [esp + 0xc4]
push eax
mov byte [esp + 0x390], 3
call fcn.0041ea80
mov edi, 8
cmp dword [esp + 0x84], edi
jb 0x41f057
mov ecx, dword [esp + 0x70]
push ecx
call fcn.00492573
add esp, 4
cmp dword [esp + 0x68], edi
mov dword [esp + 0x84], ebx
mov dword [esp + 0x80], esi
mov word [esp + 0x70], si
jb 0x41f07d
mov edx, dword [esp + 0x54]
push edx
call fcn.00492573
add esp, 4
cmp dword [esp + 0xbc], edi
mov dword [esp + 0x68], ebx
mov dword [esp + 0x64], esi
mov word [esp + 0x54], si
jb 0x41f0a3
mov eax, dword [esp + 0xa8]
push eax
call fcn.00492573
add esp, 4
cmp dword [esp + 0xa0], edi
mov dword [esp + 0xbc], ebx
mov dword [esp + 0xb8], esi
mov word [esp + 0xa8], si
jb 0x41f0d2
mov ecx, dword [esp + 0x8c]
push ecx
call fcn.00492573
add esp, 4
cmp dword [esp + 0x30], edi
mov dword [esp + 0xa0], ebx
mov dword [esp + 0x9c], esi
mov word [esp + 0x8c], si
jb 0x41f0fb
mov edx, dword [esp + 0x1c]
push edx
call fcn.00492573
add esp, 4
cmp dword [esp + 0x4c], edi
mov dword [esp + 0x30], ebx
mov dword [esp + 0x2c], esi
mov word [esp + 0x1c], si
mov dword [esp + 0x388], 0xffffffff
jb 0x41f126
mov eax, dword [esp + 0x38]
push eax
call fcn.00492573
add esp, 4
push 0x104
lea ecx, [esp + 0x178]
push esi
push ecx
call fcn.004afb50
mov edx, dword [esp + 0x20]
add esp, 0xc
push edx
push 0x104
lea eax, [esp + 0x17c]
push eax
push 0x5731a4
push 0x575578
push 0x5755a8
call dword [sym.imp.KERNEL32.dll_GetPrivateProfileStringW]
lea eax, [esp + 0x174]
mov dword [esp + 0x4c], ebx
mov dword [esp + 0x48], esi
mov word [esp + 0x38], si
lea edx, [eax + 2]
lea ebx, [ebx]
mov cx, word [eax]
add eax, 2
cmp cx, si
jne 0x41f180
sub eax, edx
sar eax, 1
push eax
lea ecx, [esp + 0x178]
push ecx
lea ecx, [esp + 0x3c]
call fcn.00402120
push 0x10
push str.WEATHER_REFREASH
lea ecx, [esp + 0x20]
mov dword [esp + 0x390], 4
mov dword [esp + 0x38], ebx
mov dword [esp + 0x34], esi
mov word [esp + 0x24], si
call fcn.00402120
lea edx, [esp + 0x34]
push edx
lea eax, [esp + 0x1c]
push eax
lea ecx, [esp + 0x90]
mov byte [esp + 0x390], 5
call fcn.0042b280
push eax
lea ecx, [esp + 0x54]
mov byte [esp + 0x38c], 6
call fcn.0041c950
lea ecx, [esp + 0x50]
push ecx
mov ecx, dword [ebp + 0x82954]
lea edx, [esp + 0xc4]
push edx
mov byte [esp + 0x390], bl
call fcn.0041ea80
cmp dword [esp + 0x84], edi
jb 0x41f22e
mov eax, dword [esp + 0x70]
push eax
call fcn.00492573
add esp, 4
cmp dword [esp + 0x68], edi
mov dword [esp + 0x84], ebx
mov dword [esp + 0x80], esi
mov word [esp + 0x70], si
jb 0x41f254
mov ecx, dword [esp + 0x54]
push ecx
call fcn.00492573
add esp, 4
cmp dword [esp + 0xbc], edi
mov dword [esp + 0x68], ebx
mov dword [esp + 0x64], esi
mov word [esp + 0x54], si
jb 0x41f27a
mov edx, dword [esp + 0xa8]
push edx
call fcn.00492573
add esp, 4
cmp dword [esp + 0xa0], edi
mov dword [esp + 0xbc], ebx
mov dword [esp + 0xb8], esi
mov word [esp + 0xa8], si
jb 0x41f2a9
mov eax, dword [esp + 0x8c]
push eax
call fcn.00492573
add esp, 4
cmp dword [esp + 0x30], edi
mov dword [esp + 0xa0], ebx
mov dword [esp + 0x9c], esi
mov word [esp + 0x8c], si
jb 0x41f2d2
mov ecx, dword [esp + 0x1c]
push ecx
call fcn.00492573
add esp, 4
cmp dword [esp + 0x4c], edi
mov dword [esp + 0x30], ebx
mov dword [esp + 0x2c], esi
mov word [esp + 0x1c], si
mov dword [esp + 0x388], 0xffffffff
jb 0x41f2fd
mov edx, dword [esp + 0x38]
push edx
call fcn.00492573
add esp, 4
push 0x104
lea eax, [esp + 0x178]
push esi
push eax
call fcn.004afb50
mov ecx, dword [esp + 0x20]
add esp, 0xc
push ecx
push 0x104
lea edx, [esp + 0x17c]
push edx
push 0x5731a4
push 0x575548
push 0x5755a8
call dword [sym.imp.KERNEL32.dll_GetPrivateProfileStringW]
lea eax, [esp + 0x174]
mov dword [esp + 0x4c], ebx
mov dword [esp + 0x48], esi
mov word [esp + 0x38], si
lea edx, [eax + 2]
mov cx, word [eax]
add eax, 2
cmp cx, si
jne 0x41f351
sub eax, edx
sar eax, 1
push eax
lea eax, [esp + 0x178]
push eax
lea ecx, [esp + 0x3c]
call fcn.00402120
push 0xf
push str.WEATHERFORECAST
lea ecx, [esp + 0x20]
mov dword [esp + 0x390], edi
mov dword [esp + 0x38], ebx
mov dword [esp + 0x34], esi
mov word [esp + 0x24], si
call fcn.00402120
lea ecx, [esp + 0x34]
push ecx
lea edx, [esp + 0x1c]
push edx
lea ecx, [esp + 0x90]
mov byte [esp + 0x390], 9
call fcn.0042b280
push eax
lea ecx, [esp + 0x54]
mov byte [esp + 0x38c], 0xa
call fcn.0041c950
lea eax, [esp + 0x50]
push eax
lea ecx, [esp + 0xc4]
push ecx
mov ecx, dword [ebp + 0x82954]
mov byte [esp + 0x390], 0xb
call fcn.0041ea80
cmp dword [esp + 0x84], edi
jb 0x41f3fc
mov edx, dword [esp + 0x70]
push edx
call fcn.00492573
add esp, 4
cmp dword [esp + 0x68], edi
mov dword [esp + 0x84], ebx
mov dword [esp + 0x80], esi
mov word [esp + 0x70], si
jb 0x41f422
mov eax, dword [esp + 0x54]
push eax
call fcn.00492573
add esp, 4
cmp dword [esp + 0xbc], edi
mov dword [esp + 0x68], ebx
mov dword [esp + 0x64], esi
mov word [esp + 0x54], si
jb 0x41f448
mov ecx, dword [esp + 0xa8]
push ecx
call fcn.00492573
add esp, 4
cmp dword [esp + 0xa0], edi
mov dword [esp + 0xbc], ebx
mov dword [esp + 0xb8], esi
mov word [esp + 0xa8], si
jb 0x41f477
mov edx, dword [esp + 0x8c]
push edx
call fcn.00492573
add esp, 4
cmp dword [esp + 0x30], edi
mov dword [esp + 0xa0], ebx
mov dword [esp + 0x9c], esi
mov word [esp + 0x8c], si
jb 0x41f4a0
mov eax, dword [esp + 0x1c]
push eax
call fcn.00492573
add esp, 4
cmp dword [esp + 0x4c], edi
mov dword [esp + 0x30], ebx
mov dword [esp + 0x2c], esi
mov word [esp + 0x1c], si
mov dword [esp + 0x388], 0xffffffff
jb 0x41f4cb
mov ecx, dword [esp + 0x38]
push ecx
call fcn.00492573
add esp, 4
push 0x104
lea edx, [esp + 0x178]
push esi
push edx
call fcn.004afb50
mov eax, dword [esp + 0x20]
add esp, 0xc
push eax
push 0x104
lea ecx, [esp + 0x17c]
push ecx
push 0x5731a4
push 0x57551c
push 0x5755a8
call dword [sym.imp.KERNEL32.dll_GetPrivateProfileStringW]
lea eax, [esp + 0x174]
mov dword [esp + 0x4c], ebx
mov dword [esp + 0x48], esi
mov word [esp + 0x38], si
lea edx, [eax + 2]
nop
mov cx, word [eax]
add eax, 2
cmp cx, si
jne 0x41f520
sub eax, edx
sar eax, 1
push eax
lea edx, [esp + 0x178]
push edx
lea ecx, [esp + 0x3c]
call fcn.00402120
push 0xe
push str.WEATHEROUTLOOK
lea ecx, [esp + 0x20]
mov dword [esp + 0x390], 0xc
mov dword [esp + 0x38], ebx
mov dword [esp + 0x34], esi
mov word [esp + 0x24], si
call fcn.00402120
lea eax, [esp + 0x34]
push eax
lea ecx, [esp + 0x1c]
push ecx
lea ecx, [esp + 0x90]
mov byte [esp + 0x390], 0xd
call fcn.0042b280
push eax
lea ecx, [esp + 0x54]
mov byte [esp + 0x38c], 0xe
call fcn.0041c950
mov ecx, dword [ebp + 0x82954]
lea edx, [esp + 0x50]
push edx
lea eax, [esp + 0xc4]
push eax
mov byte [esp + 0x390], 0xf
call fcn.0041ea80
cmp dword [esp + 0x84], edi
jb 0x41f5cf
mov ecx, dword [esp + 0x70]
push ecx
call fcn.00492573
add esp, 4
cmp dword [esp + 0x68], edi
mov dword [esp + 0x84], ebx
mov dword [esp + 0x80], esi
mov word [esp + 0x70], si
jb 0x41f5f5
mov edx, dword [esp + 0x54]
push edx
call fcn.00492573
add esp, 4
cmp dword [esp + 0xbc], edi
mov dword [esp + 0x68], ebx
mov dword [esp + 0x64], esi
mov word [esp + 0x54], si
jb 0x41f61b
mov eax, dword [esp + 0xa8]
push eax
call fcn.00492573
add esp, 4
cmp dword [esp + 0xa0], edi
mov dword [esp + 0xbc], ebx
mov dword [esp + 0xb8], esi
mov word [esp + 0xa8], si
jb 0x41f64a
mov ecx, dword [esp + 0x8c]
push ecx
call fcn.00492573
add esp, 4
cmp dword [esp + 0x30], edi
mov dword [esp + 0xa0], ebx
mov dword [esp + 0x9c], esi
mov word [esp + 0x8c], si
jb 0x41f673
mov edx, dword [esp + 0x1c]
push edx
call fcn.00492573
add esp, 4
cmp dword [esp + 0x4c], edi
mov dword [esp + 0x30], ebx
mov dword [esp + 0x2c], esi
mov word [esp + 0x1c], si
mov dword [esp + 0x388], 0xffffffff
jb 0x41f69e
mov eax, dword [esp + 0x38]
push eax
call fcn.00492573
add esp, 4
push 0x104
lea ecx, [esp + 0x178]
push esi
push ecx
call fcn.004afb50
mov edx, dword [esp + 0x20]
add esp, 0xc
push edx
push 0x104
lea eax, [esp + 0x17c]
push eax
push 0x5731a4
push 0x5754f0
push 0x5755a8
call dword [sym.imp.KERNEL32.dll_GetPrivateProfileStringW]
lea eax, [esp + 0x174]
mov dword [esp + 0x4c], ebx
mov dword [esp + 0x48], esi
mov word [esp + 0x38], si
lea edx, [eax + 2]
mov cx, word [eax]
add eax, 2
cmp cx, si
jne 0x41f6f2
sub eax, edx
sar eax, 1
push eax
lea ecx, [esp + 0x178]
push ecx
lea ecx, [esp + 0x3c]
call fcn.00402120
push 0xa
push str.AIRQUALITY
lea ecx, [esp + 0x20]
mov dword [esp + 0x390], 0x10
mov dword [esp + 0x38], ebx
mov dword [esp + 0x34], esi
mov word [esp + 0x24], si
call fcn.00402120
lea edx, [esp + 0x34]
push edx
lea eax, [esp + 0x1c]
push eax
lea ecx, [esp + 0x90]
mov byte [esp + 0x390], 0x11
call fcn.0042b280
push eax
lea ecx, [esp + 0x54]
mov byte [esp + 0x38c], 0x12
call fcn.0041c950
lea ecx, [esp + 0x50]
push ecx
mov ecx, dword [ebp + 0x82954]
lea edx, [esp + 0xc4]
push edx
mov byte [esp + 0x390], 0x13
call fcn.0041ea80
cmp dword [esp + 0x84], edi
jb 0x41f7a1
mov eax, dword [esp + 0x70]
push eax
call fcn.00492573
add esp, 4
cmp dword [esp + 0x68], edi
mov dword [esp + 0x84], ebx
mov dword [esp + 0x80], esi
mov word [esp + 0x70], si
jb 0x41f7c7
mov ecx, dword [esp + 0x54]
push ecx
call fcn.00492573
add esp, 4
cmp dword [esp + 0xbc], edi
mov dword [esp + 0x68], ebx
mov dword [esp + 0x64], esi
mov word [esp + 0x54], si
jb 0x41f7ed
mov edx, dword [esp + 0xa8]
push edx
call fcn.00492573
add esp, 4
cmp dword [esp + 0xa0], edi
mov dword [esp + 0xbc], ebx
mov dword [esp + 0xb8], esi
mov word [esp + 0xa8], si
jb 0x41f81c
mov eax, dword [esp + 0x8c]
push eax
call fcn.00492573
add esp, 4
cmp dword [esp + 0x30], edi
mov dword [esp + 0xa0], ebx
mov dword [esp + 0x9c], esi
mov word [esp + 0x8c], si
jb 0x41f845
mov ecx, dword [esp + 0x1c]
push ecx
call fcn.00492573
add esp, 4
cmp dword [esp + 0x4c], edi
mov dword [esp + 0x30], ebx
mov dword [esp + 0x2c], esi
mov word [esp + 0x1c], si
mov dword [esp + 0x388], 0xffffffff
jb 0x41f870
mov edx, dword [esp + 0x38]
push edx
call fcn.00492573
add esp, 4
push 0x104
lea eax, [esp + 0x178]
push esi
push eax
call fcn.004afb50
mov ecx, dword [esp + 0x20]
add esp, 0xc
push ecx
push 0x104
lea edx, [esp + 0x17c]
push edx
push 0x5731a4
push 0x5754cc
push 0x5754c0
call dword [sym.imp.KERNEL32.dll_GetPrivateProfileStringW]
lea eax, [esp + 0x174]
push eax
lea ecx, [esp + 0x1c]
call fcn.00401d20
push str.ADD_NODE
lea ecx, [esp + 0x38]
mov dword [esp + 0x38c], 0x14
call fcn.00401d20
lea ecx, [esp + 0x18]
push ecx
lea edx, [esp + 0x38]
push edx
lea ecx, [esp + 0x58]
mov byte [esp + 0x390], 0x15
call fcn.0042b280
push eax
lea ecx, [esp + 0x8c]
mov byte [esp + 0x38c], 0x16
call fcn.0041c950
lea eax, [esp + 0x88]
push eax
lea ecx, [esp + 0xc4]
push ecx
mov ecx, dword [ebp + 0x82954]
mov byte [esp + 0x390], 0x17
call fcn.0041ea80
lea ecx, [esp + 0x88]
call fcn.0048f820
lea ecx, [esp + 0x50]
call fcn.0048f820
cmp dword [esp + 0x4c], edi
jb 0x41f952
mov edx, dword [esp + 0x38]
push edx
call fcn.00492573
add esp, 4
cmp dword [esp + 0x30], edi
mov dword [esp + 0x4c], ebx
mov dword [esp + 0x48], esi
mov word [esp + 0x38], si
mov dword [esp + 0x388], 0xffffffff
jb 0x41f97d
mov eax, dword [esp + 0x1c]
push eax
call fcn.00492573
add esp, 4
push 0x104
lea ecx, [esp + 0x178]
push esi
push ecx
call fcn.004afb50
mov edx, dword [esp + 0x20]
add esp, 0xc
push edx
push 0x104
lea eax, [esp + 0x17c]
push eax
push 0x5731a4
push 0x5754a0
push 0x5754c0
call dword [sym.imp.KERNEL32.dll_GetPrivateProfileStringW]
lea ecx, [esp + 0x174]
push ecx
lea ecx, [esp + 0x1c]
call fcn.00401d20
push str.ADD_BACKCOUNT
lea ecx, [esp + 0x38]
mov dword [esp + 0x38c], 0x18
call fcn.00401d20
lea edx, [esp + 0x18]
push edx
lea eax, [esp + 0x38]
push eax
lea ecx, [esp + 0x58]
mov byte [esp + 0x390], 0x19
call fcn.0042b280
push eax
lea ecx, [esp + 0x8c]
mov byte [esp + 0x38c], 0x1a
call fcn.0041c950
lea ecx, [esp + 0x88]
push ecx
mov ecx, dword [ebp + 0x82954]
lea edx, [esp + 0xc4]
push edx
mov byte [esp + 0x390], 0x1b
call fcn.0041ea80
lea ecx, [esp + 0x88]
call fcn.0048f820
lea ecx, [esp + 0x50]
call fcn.0048f820
cmp dword [esp + 0x4c], edi
jb 0x41fa5f
mov eax, dword [esp + 0x38]
push eax
call fcn.00492573
add esp, 4
cmp dword [esp + 0x30], edi
mov dword [esp + 0x4c], ebx
mov dword [esp + 0x48], esi
mov word [esp + 0x38], si
mov dword [esp + 0x388], 0xffffffff
jb 0x41fa8a
mov ecx, dword [esp + 0x1c]
push ecx
call fcn.00492573
add esp, 4
push 0x104
lea edx, [esp + 0x178]
push esi
push edx
call fcn.004afb50
mov eax, dword [esp + 0x20]
add esp, 0xc
push eax
push 0x104
lea ecx, [esp + 0x17c]
push ecx
push 0x5731a4
push 0x575478
push 0x575470
call dword [sym.imp.KERNEL32.dll_GetPrivateProfileStringW]
lea edx, [esp + 0x174]
push edx
lea ecx, [esp + 0x1c]
call fcn.00401d20
push str.TIME_SET
lea ecx, [esp + 0x38]
mov dword [esp + 0x38c], 0x1c
call fcn.00401d20
lea eax, [esp + 0x18]
push eax
lea ecx, [esp + 0x38]
push ecx
lea ecx, [esp + 0x58]
mov byte [esp + 0x390], 0x1d
call fcn.0042b280
push eax
lea ecx, [esp + 0x8c]
mov byte [esp + 0x38c], 0x1e
call fcn.0041c950
mov ecx, dword [ebp + 0x82954]
lea edx, [esp + 0x88]
push edx
lea eax, [esp + 0xc4]
push eax
mov byte [esp + 0x390], 0x1f
call fcn.0041ea80
lea ecx, [esp + 0x88]
call fcn.0048f820
lea ecx, [esp + 0x50]
call fcn.0048f820
cmp dword [esp + 0x4c], edi
jb 0x41fb6c
mov ecx, dword [esp + 0x38]
push ecx
call fcn.00492573
add esp, 4
cmp dword [esp + 0x30], edi
mov dword [esp + 0x4c], ebx
mov dword [esp + 0x48], esi
mov word [esp + 0x38], si
mov dword [esp + 0x388], 0xffffffff
jb 0x41fb97
mov edx, dword [esp + 0x1c]
push edx
call fcn.00492573
add esp, 4
push 0x104
lea eax, [esp + 0x178]
push esi
push eax
call fcn.004afb50
mov ecx, dword [esp + 0x20]
add esp, 0xc
push ecx
push 0x104
lea edx, [esp + 0x17c]
push edx
push 0x5731a4
push 0x575450
push 0x572aa8
call dword [sym.imp.KERNEL32.dll_GetPrivateProfileStringW]
lea eax, [esp + 0x174]
push eax
lea ecx, [esp + 0x1c]
call fcn.00401d20
push str.SKIN_CHANGE
lea ecx, [esp + 0x38]
mov dword [esp + 0x38c], 0x20
call fcn.00401d20
lea ecx, [esp + 0x18]
push ecx
lea edx, [esp + 0x38]
push edx
lea ecx, [esp + 0x58]
mov byte [esp + 0x390], 0x21
call fcn.0042b280
push eax
lea ecx, [esp + 0x8c]
mov byte [esp + 0x38c], 0x22
call fcn.0041c950
lea eax, [esp + 0x88]
push eax
lea ecx, [esp + 0xc4]
push ecx
mov ecx, dword [ebp + 0x82954]
mov byte [esp + 0x390], 0x23
call fcn.0041ea80
lea ecx, [esp + 0x88]
call fcn.0048f820
lea ecx, [esp + 0x50]
call fcn.0048f820
cmp dword [esp + 0x4c], edi
jb 0x41fc79
mov edx, dword [esp + 0x38]
push edx
call fcn.00492573
add esp, 4
cmp dword [esp + 0x30], edi
mov dword [esp + 0x4c], ebx
mov dword [esp + 0x48], esi
mov word [esp + 0x38], si
mov dword [esp + 0x388], 0xffffffff
jb 0x41fca4
mov eax, dword [esp + 0x1c]
push eax
call fcn.00492573
add esp, 4
push 0x104
lea ecx, [esp + 0x178]
push esi
push ecx
call fcn.004afb50
mov edx, dword [esp + 0x20]
add esp, 0xc
push edx
push 0x104
lea eax, [esp + 0x17c]
push eax
push 0x5731a4
push str._NLub
push 0x575424
call dword [sym.imp.KERNEL32.dll_GetPrivateProfileStringW]
lea ecx, [esp + 0x174]
push ecx
lea ecx, [esp + 0xec]
call fcn.00401d20
push 0x57540c
lea ecx, [esp + 0xd0]
mov dword [esp + 0x38c], 0x24
call fcn.00401d20
lea edx, [esp + 0xe8]
push edx
lea eax, [esp + 0xd0]
push eax
lea ecx, [esp + 0x144]
mov byte [esp + 0x390], 0x25
call fcn.0042b280
push eax
lea ecx, [esp + 0x108]
mov byte [esp + 0x38c], 0x26
call fcn.0041c950
lea ecx, [esp + 0x104]
push ecx
mov ecx, dword [ebp + 0x82954]
lea edx, [esp + 0xc4]
push edx
mov byte [esp + 0x390], 0x27
call fcn.0041ea80
lea ecx, [esp + 0x104]
call fcn.0048f820
lea ecx, [esp + 0x13c]
call fcn.0048f820
cmp dword [esp + 0xe4], edi
jb 0x41fd9e
mov eax, dword [esp + 0xd0]
push eax
call fcn.00492573
add esp, 4
cmp dword [esp + 0x100], edi
mov dword [esp + 0xe4], ebx
mov dword [esp + 0xe0], esi
mov word [esp + 0xd0], si
jb 0x41fdcd
mov ecx, dword [esp + 0xec]
push ecx
call fcn.00492573
add esp, 4
mov ecx, dword [esp + 0x380]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebp
pop ebx
mov ecx, dword [esp + 0x368]
xor ecx, esp
call fcn.004aeca3
add esp, 0x378
ret 4