Function at 0x495180
Capabilities:
Check if file exists
Enumerate files on windows
Read .ini file

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x674
mov eax, dword [0x552a7c]
xor eax, ebp
mov dword [ebp - 0x1c], eax
mov dword [ebp - 0x660], 0
lea eax, [ebp - 0x18]
push eax
call fcn.0047ca10
add esp, 4
lea ecx, [ebp - 0x274]
push ecx
call fcn.0044d380
add esp, 4
lea edx, [ebp - 0x10]
push edx
call fcn.00448fe0
add esp, 4
push 0x537344
lea eax, [ebp - 0x608]
push eax
call fcn.0044d6f0
add esp, 4
push eax
lea ecx, [ebp - 8]
push ecx
call fcn.0041bc20
add esp, 0xc
lea ecx, [ebp - 0x608]
call fcn.0041d100
cmp dword [ebp + 8], 0
je 0x495209
lea ecx, [ebp - 0x10]
call fcn.0041d2b0
push eax
call dword [sym.imp.SHLWAPI.dll_PathFileExistsW]
test eax, eax
jne 0x495241
mov dword [ebp - 0x60c], 0
lea ecx, [ebp - 8]
call fcn.0041d100
lea ecx, [ebp - 0x10]
call fcn.0041d100
lea ecx, [ebp - 0x274]
call fcn.0041d100
lea ecx, [ebp - 0x18]
call fcn.0041d100
mov eax, dword [ebp - 0x60c]
jmp 0x49623d
mov ecx, dword [ebp + 8]
call fcn.00459480
push 0x250
push 0
lea edx, [ebp - 0x270]
push edx
call fcn.004f7580
add esp, 0xc
lea eax, [ebp - 0x270]
push eax
push str..bmp
lea ecx, [ebp - 0x10]
push ecx
lea edx, [ebp - 0x610]
push edx
call fcn.0041bc20
add esp, 0xc
mov ecx, eax
call fcn.0041d2b0
push eax
call dword [sym.imp.KERNEL32.dll_FindFirstFileW]
mov dword [ebp - 0x284], eax
lea ecx, [ebp - 0x610]
call fcn.0041d100
cmp dword [ebp - 0x284], 0xffffffff
jne 0x4952de
mov dword [ebp - 0x614], 0
lea ecx, [ebp - 8]
call fcn.0041d100
lea ecx, [ebp - 0x10]
call fcn.0041d100
lea ecx, [ebp - 0x274]
call fcn.0041d100
lea ecx, [ebp - 0x18]
call fcn.0041d100
mov eax, dword [ebp - 0x614]
jmp 0x49623d
mov dword [ebp - 0xc], 1
lea ecx, [ebp - 0x280]
call fcn.0041d080
cmp dword [0x5562d4], 0x186a0
jle 0x495306
mov dword [0x5562d4], 0
cmp dword [ebp - 0xc], 0
je 0x4961ee
mov eax, dword [ebp - 0x270]
and eax, 0x10
jne 0x4961d2
push 0x770
call fcn.004f8259
add esp, 4
mov dword [ebp - 0x618], eax
cmp dword [ebp - 0x618], 0
je 0x49534e
mov ecx, dword [ebp - 0x618]
call fcn.004965c0
mov dword [ebp - 0x664], eax
jmp 0x495358
mov dword [ebp - 0x664], 0
mov ecx, dword [ebp - 0x664]
mov dword [ebp - 0x28c], ecx
mov edx, dword [ebp - 0x28c]
mov dword [edx + 0x730], 0
mov eax, dword [ebp - 0x28c]
mov byte [eax + 0x72c], 0
mov ecx, dword [ebp - 0x28c]
mov edx, dword [0x5562d4]
mov dword [ecx], edx
mov eax, dword [0x5562d4]
add eax, 1
mov dword [0x5562d4], eax
lea ecx, [ebp - 0x10]
push ecx
lea ecx, [ebp - 0x280]
call fcn.0041d120
push 0x537368
lea ecx, [ebp - 0x280]
call fcn.00496810
lea edx, [ebp - 0x244]
push edx
lea ecx, [ebp - 0x280]
call fcn.0041d180
push 0x103
lea ecx, [ebp - 0x280]
call fcn.0041d2b0
push eax
mov eax, dword [ebp - 0x28c]
add eax, 4
push eax
call fcn.004f75fa
add esp, 0xc
push 0
push 0x53736c
lea ecx, [ebp - 0x280]
call fcn.004264c0
test eax, eax
jle 0x495416
mov ecx, dword [ebp - 0x28c]
mov dword [ecx + 0x764], 1
lea edx, [ebp - 0x244]
mov dword [ebp - 4], edx
push 0x2d
mov eax, dword [ebp - 4]
push eax
call fcn.004162a0
add esp, 8
mov dword [ebp - 0x278], eax
cmp dword [ebp - 0x278], 0
je 0x49548a
xor ecx, ecx
mov edx, dword [ebp - 0x278]
mov word [edx], cx
mov eax, dword [ebp - 0x278]
add eax, 2
mov dword [ebp - 0x278], eax
push 0x2e
mov ecx, dword [ebp - 0x278]
push ecx
call fcn.004162a0
add esp, 8
xor edx, edx
mov word [eax], dx
push 0x3e
mov eax, dword [ebp - 0x278]
push eax
mov ecx, dword [ebp - 0x28c]
add ecx, 0x594
push ecx
call fcn.004f75fa
add esp, 0xc
push 0x2d
mov edx, dword [ebp - 4]
push edx
call fcn.004162a0
add esp, 8
mov dword [ebp - 0x14], eax
cmp dword [ebp - 0x14], 0
je 0x4954cd
xor eax, eax
mov ecx, dword [ebp - 0x14]
mov word [ecx], ax
mov edx, dword [ebp - 0x14]
add edx, 2
mov dword [ebp - 0x14], edx
push 0x3e
mov eax, dword [ebp - 0x14]
push eax
mov ecx, dword [ebp - 0x28c]
add ecx, 0x514
push ecx
call fcn.004f75fa
add esp, 0xc
push 0x2d
mov edx, dword [ebp - 4]
push edx
call fcn.004965a0
add esp, 8
mov dword [ebp - 0x288], eax
cmp dword [ebp - 0x288], 0
je 0x495580
mov eax, dword [ebp - 0x288]
sub eax, dword [ebp - 4]
sar eax, 1
cmp eax, 8
je 0x49550e
mov ecx, dword [ebp - 0x288]
sub ecx, dword [ebp - 4]
sar ecx, 1
cmp ecx, 0x10
jne 0x495580
xor edx, edx
mov eax, dword [ebp - 0x288]
mov word [eax], dx
mov ecx, dword [ebp - 0x288]
add ecx, 2
mov dword [ebp - 0x288], ecx
mov edx, dword [ebp - 4]
mov dword [ebp - 0x27c], edx
cmp dword [ebp - 0x27c], 0
je 0x495577
push 0x10
push 0
mov eax, dword [ebp - 0x27c]
push eax
call fcn.004fea32
add esp, 0xc
mov dword [ebp - 0x298], eax
mov dword [ebp - 0x294], edx
mov ecx, dword [ebp - 0x298]
mov dword [ebp - 0x290], ecx
mov edx, dword [ebp - 0x28c]
mov eax, dword [ebp - 0x290]
mov dword [edx + 0x73c], eax
mov ecx, dword [ebp - 0x288]
mov dword [ebp - 4], ecx
push 0x7f
mov edx, dword [ebp - 4]
push edx
mov eax, dword [ebp - 0x28c]
add eax, 0x614
push eax
call fcn.004f75fa
add esp, 0xc
cmp dword [ebp - 4], 0
je 0x495a6a
mov dword [ebp - 0x39c], 0
mov dword [ebp - 0x3a8], 0xffffffff
mov dword [ebp - 0x3a4], 0
push 0x537384
mov ecx, dword [ebp - 0x28c]
add ecx, 0x514
push ecx
call fcn.004f845d
add esp, 8
test eax, eax
jne 0x495766
mov edx, dword [ebp - 0x28c]
mov dword [edx + 0x738], 2
mov eax, dword [ebp - 4]
push eax
lea ecx, [ebp - 0x3ac]
call fcn.0041d0c0
push 0
push 0x537390
lea ecx, [ebp - 0x3ac]
call fcn.004264c0
cmp eax, 0xffffffff
jne 0x4956bb
mov ecx, dword [ebp - 0x28c]
mov dword [ecx + 0x734], 0
lea ecx, [ebp - 0x18]
call fcn.0041d2b0
push eax
push 0
push 0x53739c
mov edx, dword [ebp - 4]
push edx
call dword [sym.imp.KERNEL32.dll_GetPrivateProfileIntW]
test eax, eax
setne al
mov ecx, dword [ebp - 0x28c]
mov byte [ecx + 0x72c], al
lea ecx, [ebp - 8]
call fcn.0041d2b0
push eax
push 0xffffffffffffffff
push str.mwhite
mov edx, dword [ebp - 4]
push edx
call dword [sym.imp.KERNEL32.dll_GetPrivateProfileIntW]
mov dword [ebp - 0x3a8], eax
lea ecx, [ebp - 8]
call fcn.0041d2b0
push eax
push 0
push str.mlev
mov eax, dword [ebp - 4]
push eax
call dword [sym.imp.KERNEL32.dll_GetPrivateProfileIntW]
mov dword [ebp - 0x39c], eax
lea ecx, [ebp - 0x18]
call fcn.0041d2b0
push eax
push 0
push str.mauto
mov ecx, dword [ebp - 4]
push ecx
call dword [sym.imp.KERNEL32.dll_GetPrivateProfileIntW]
mov dword [ebp - 0x3a4], eax
jmp 0x4956f9
mov edx, dword [ebp - 0x28c]
mov dword [edx + 0x734], 1
lea ecx, [ebp - 0x274]
call fcn.0041d2b0
push eax
push 1
push str.muserwhite
mov eax, dword [ebp - 4]
push eax
call dword [sym.imp.KERNEL32.dll_GetPrivateProfileIntW]
test eax, eax
setne cl
mov edx, dword [ebp - 0x28c]
mov byte [edx + 0x72c], cl
lea ecx, [ebp - 8]
call fcn.0041d2b0
push eax
push 0x104
mov eax, dword [ebp - 0x28c]
add eax, 0x20c
push eax
push 0x5373f4
push 0x5373f8
mov ecx, dword [ebp - 4]
push ecx
call dword [sym.imp.KERNEL32.dll_GetPrivateProfileStringW]
lea ecx, [ebp - 8]
call fcn.0041d2b0
push eax
push 0x80
mov edx, dword [ebp - 0x28c]
add edx, 0x414
push edx
push 0x537404
push str.mproinfo
mov eax, dword [ebp - 4]
push eax
call dword [sym.imp.KERNEL32.dll_GetPrivateProfileStringW]
lea ecx, [ebp - 0x3ac]
call fcn.0041d100
jmp 0x4958e4
mov ecx, dword [ebp - 0x28c]
mov dword [ecx + 0x738], 1
mov edx, dword [ebp - 4]
push edx
lea ecx, [ebp - 0x3b0]
call fcn.0041d0c0
push 0
push str._Hand
lea ecx, [ebp - 0x3b0]
call fcn.004264c0
cmp eax, 0xffffffff
jne 0x49583d
mov eax, dword [ebp - 0x28c]
mov dword [eax + 0x734], 0
lea ecx, [ebp - 0x18]
call fcn.0041d2b0
push eax
push 0
push 0x537428
mov ecx, dword [ebp - 4]
push ecx
call dword [sym.imp.KERNEL32.dll_GetPrivateProfileIntW]
test eax, eax
setne dl
mov eax, dword [ebp - 0x28c]
mov byte [eax + 0x72c], dl
lea ecx, [ebp - 8]
call fcn.0041d2b0
push eax
push 0xffffffffffffffff
push str.white
mov ecx, dword [ebp - 4]
push ecx
call dword [sym.imp.KERNEL32.dll_GetPrivateProfileIntW]
mov dword [ebp - 0x3a8], eax
lea ecx, [ebp - 8]
call fcn.0041d2b0
push eax
push 0
push 0x537448
mov edx, dword [ebp - 4]
push edx
call dword [sym.imp.KERNEL32.dll_GetPrivateProfileIntW]
mov dword [ebp - 0x39c], eax
lea ecx, [ebp - 0x18]
call fcn.0041d2b0
push eax
push 0
push str.auto
mov eax, dword [ebp - 4]
push eax
call dword [sym.imp.KERNEL32.dll_GetPrivateProfileIntW]
mov dword [ebp - 0x3a4], eax
jmp 0x49587b
mov ecx, dword [ebp - 0x28c]
mov dword [ecx + 0x734], 1
lea ecx, [ebp - 0x274]
call fcn.0041d2b0
push eax
push 1
push str.userwhite
mov edx, dword [ebp - 4]
push edx
call dword [sym.imp.KERNEL32.dll_GetPrivateProfileIntW]
test eax, eax
setne al
mov ecx, dword [ebp - 0x28c]
mov byte [ecx + 0x72c], al
lea ecx, [ebp - 8]
call fcn.0041d2b0
push eax
push 0x104
mov edx, dword [ebp - 0x28c]
add edx, 0x20c
push edx
push 0x537470
push 0x537474
mov eax, dword [ebp - 4]
push eax
call dword [sym.imp.KERNEL32.dll_GetPrivateProfileStringW]
lea ecx, [ebp - 8]
call fcn.0041d2b0
push eax
push 0x80
mov ecx, dword [ebp - 0x28c]
add ecx, 0x414
push ecx
push 0x537480
push 0x537484
mov edx, dword [ebp - 4]
push edx
call dword [sym.imp.KERNEL32.dll_GetPrivateProfileStringW]
lea ecx, [ebp - 0x3b0]
call fcn.0041d100
push 0x537494
mov eax, dword [ebp - 0x28c]
add eax, 0x514
push eax
call fcn.004f845d
add esp, 8
test eax, eax
jne 0x495911
mov ecx, dword [ebp - 0x28c]
mov dword [ecx + 0x764], 1
lea edx, [ebp - 0x61c]
push edx
call fcn.00419480
add esp, 4
mov ecx, eax
call fcn.0041d2b0
push eax
push 0
push str.level
push 0x5374ac
call dword [sym.imp.KERNEL32.dll_GetPrivateProfileIntW]
mov dword [ebp - 0x3a0], eax
lea ecx, [ebp - 0x61c]
call fcn.0041d100
xor eax, eax
mov word [ebp - 0x398], ax
push 0xfe
push 0
lea ecx, [ebp - 0x396]
push ecx
call fcn.004f7580
add esp, 0xc
lea ecx, [ebp - 8]
call fcn.0041d2b0
push eax
push 0x80
lea edx, [ebp - 0x398]
push edx
push 0
push 0x5374c0
mov eax, dword [ebp - 4]
push eax
call dword [sym.imp.KERNEL32.dll_GetPrivateProfileStringW]
push 0xa
push 0
lea ecx, [ebp - 0x398]
push ecx
call fcn.004fefa8
add esp, 0xc
mov edx, dword [ebp - 0x28c]
mov dword [edx + 0x768], eax
mov eax, dword [ebp - 0x28c]
mov dword [eax + 0x750], 3
mov ecx, dword [ebp - 0x28c]
movzx edx, byte [ecx + 0x72c]
cmp edx, 1
jne 0x4959e1
mov eax, dword [ebp - 0x28c]
mov dword [eax + 0x750], 2
cmp dword [ebp - 0x3a4], 0
jne 0x495a3f
cmp dword [ebp - 0x39c], 1
jne 0x4959fc
cmp dword [ebp - 0x3a0], 2
jne 0x495a0e
cmp dword [ebp - 0x39c], 0
jne 0x495a3f
cmp dword [ebp - 0x3a8], 0
je 0x495a3f
mov ecx, dword [ebp - 0x28c]
mov dword [ecx + 0x750], 2
mov edx, dword [ebp - 0x28c]
cmp dword [edx + 0x764], 0
je 0x495a3d
mov eax, dword [ebp - 0x28c]
mov dword [eax + 0x750], 1
jmp 0x495a6a
cmp dword [ebp - 0x3a4], 0
jne 0x495a6a
cmp dword [ebp - 0x39c], 0
jne 0x495a6a
cmp dword [ebp - 0x3a8], 0
jne 0x495a6a
mov ecx, dword [ebp - 0x28c]
mov dword [ecx + 0x750], 1
mov edx, dword [ebp - 0x28c]
add edx, 0x20c
push edx
call fcn.004f7670
add esp, 4
cmp eax, 3
jae 0x495b69
mov eax, dword [ebp - 0x28c]
mov dword [eax + 0x750], 3
lea ecx, [ebp - 0x3b4]
push ecx
call fcn.00496750
add esp, 4
lea edx, [ebp - 0x3b8]
push edx
call fcn.004967d0
add esp, 4
lea ecx, [ebp - 0x3b4]
call fcn.0041d2b0
push eax
push 0x104
mov eax, dword [ebp - 0x28c]
add eax, 0x20c
push eax
push 0x5374d0
push 0x5374d4
mov ecx, dword [ebp - 4]
push ecx
call dword [sym.imp.KERNEL32.dll_GetPrivateProfileStringW]
mov edx, dword [ebp - 0x28c]
add edx, 0x20c
push edx
call fcn.004f7670
add esp, 4
cmp eax, 3
jbe 0x495b10
xor eax, eax
mov ecx, dword [ebp - 0x28c]
mov word [ecx + 0x414], ax
mov edx, dword [ebp - 0x28c]
mov dword [edx + 0x738], 3
lea ecx, [ebp - 0x3b8]
call fcn.0041d2b0
push eax
push 0
push 0x5374e0
mov eax, dword [ebp - 4]
push eax
call dword [sym.imp.KERNEL32.dll_GetPrivateProfileIntW]
sub eax, 1
neg eax
sbb eax, eax
add eax, 1
mov ecx, dword [ebp - 0x28c]
mov byte [ecx + 0x72c], al
lea ecx, [ebp - 0x3b8]
call fcn.0041d100
lea ecx, [ebp - 0x3b4]
call fcn.0041d100
mov edx, dword [ebp - 0x28c]
movzx eax, word [edx + 0x514]
test eax, eax
je 0x4961d2
mov ecx, dword [ebp - 0x28c]
movzx edx, word [ecx + 0x594]
test edx, edx
je 0x4961d2
mov eax, dword [ebp - 0x28c]
add eax, 0x594
push eax
call fcn.004f7670
add esp, 4
cmp eax, 0xe
jne 0x4961d2
mov ecx, dword [ebp - 0x278]
add ecx, 0x18
push ecx
call fcn.004f793a
add esp, 4
mov edx, dword [ebp - 0x28c]
mov word [edx + 0x720], ax
xor eax, eax
mov ecx, dword [ebp - 0x278]
mov word [ecx + 0x18], ax
mov edx, dword [ebp - 0x278]
add edx, 0x14
push edx
call fcn.004f793a
add esp, 4
mov ecx, dword [ebp - 0x28c]
mov word [ecx + 0x71e], ax
xor edx, edx
mov eax, dword [ebp - 0x278]
mov word [eax + 0x14], dx
mov ecx, dword [ebp - 0x278]
add ecx, 0x10
push ecx
call fcn.004f793a
add esp, 4
mov edx, dword [ebp - 0x28c]
mov word [edx + 0x71c], ax
xor eax, eax
mov ecx, dword [ebp - 0x278]
mov word [ecx + 0x10], ax
mov edx, dword [ebp - 0x278]
add edx, 0xc
push edx
call fcn.004f793a
add esp, 4
mov ecx, dword [ebp - 0x28c]
mov word [ecx + 0x71a], ax
xor edx, edx
mov eax, dword [ebp - 0x278]
mov word [eax + 0xc], dx
mov ecx, dword [ebp - 0x278]
add ecx, 8
push ecx
call fcn.004f793a
add esp, 4
mov edx, dword [ebp - 0x28c]
mov word [edx + 0x716], ax
xor eax, eax
mov ecx, dword [ebp - 0x278]
mov word [ecx + 8], ax
mov edx, dword [ebp - 0x278]
push edx
call fcn.004f793a
add esp, 4
mov ecx, dword [ebp - 0x28c]
mov word [ecx + 0x714], ax
mov edx, dword [ebp - 0x28c]
movzx eax, word [edx + 0x414]
test eax, eax
jne 0x495e36
mov dword [ebp - 0x3c0], 0x5374f0
push fcn.0041d080
push 1
push 4
lea ecx, [ebp - 0x3bc]
push ecx
call fcn.00449940
lea edx, [ebp - 0x3bc]
push edx
lea eax, [ebp - 0x3c0]
push eax
push 1
mov ecx, dword [ebp - 0x28c]
add ecx, 0x20c
push ecx
call fcn.00433760
add esp, 0x10
lea edx, [ebp - 0x3bc]
push edx
lea ecx, [ebp - 0x3c4]
call fcn.0041d0a0
lea ecx, [ebp - 0x3c4]
call fcn.0041d300
movzx eax, al
test eax, eax
je 0x495d5e
mov ecx, dword [ebp - 0x28c]
add ecx, 0x20c
push ecx
call dword [sym.imp.SHLWAPI.dll_PathFindFileNameW]
push eax
lea ecx, [ebp - 0x3c4]
call fcn.0041d140
lea ecx, [ebp - 0x3c4]
call fcn.0041bc80
push eax
call dword [sym.imp.SHLWAPI.dll_PathRemoveExtensionW]
push 0xffffffffffffffff
lea ecx, [ebp - 0x3c4]
call fcn.0041d320
lea ecx, [ebp - 0x3c4]
call fcn.0041d300
movzx edx, al
test edx, edx
jne 0x495e16
mov eax, dword [ebp - 0x28c]
cmp dword [eax + 0x764], 0
je 0x495d95
push 0x537510
lea ecx, [ebp - 0x3c4]
call fcn.0041de40
jmp 0x495df3
mov ecx, dword [ebp - 0x28c]
cmp dword [ecx + 0x738], 1
jne 0x495db0
mov dword [ebp - 0x668], 0x53751c
jmp 0x495de1
mov edx, dword [ebp - 0x28c]
cmp dword [edx + 0x738], 2
jne 0x495dcb
mov dword [ebp - 0x66c], 0x537528
jmp 0x495dd5
mov dword [ebp - 0x66c], 0x537534
mov eax, dword [ebp - 0x66c]
mov dword [ebp - 0x668], eax
mov ecx, dword [ebp - 0x668]
push ecx
lea ecx, [ebp - 0x3c4]
call fcn.0041de40
push 0x7f
lea ecx, [ebp - 0x3c4]
call fcn.0041d2b0
push eax
mov edx, dword [ebp - 0x28c]
add edx, 0x414
push edx
call fcn.004f75fa
add esp, 0xc
lea ecx, [ebp - 0x3c4]
call fcn.0041d100
push fcn.0041d100
push 1
push 4
lea eax, [ebp - 0x3bc]
push eax
call fcn.00449910
mov ecx, dword [ebp - 0x28c]
movzx edx, word [ecx + 0x414]
test edx, edx
je 0x4961d2
xor eax, eax
mov word [ebp - 0x5d8], ax
push 0x206
push 0
lea ecx, [ebp - 0x5d6]
push ecx
call fcn.004f7580
add esp, 0xc
lea ecx, [ebp - 8]
call fcn.0041d2b0
push eax
push 0x104
lea edx, [ebp - 0x5d8]
push edx
push 0x537540
push str.LastBmpTime
mov eax, dword [ebp - 4]
push eax
call dword [sym.imp.KERNEL32.dll_GetPrivateProfileStringW]
push 0xa
push 0
lea ecx, [ebp - 0x5d8]
push ecx
call fcn.004fe9ea
add esp, 0xc
mov ecx, dword [ebp - 0x28c]
mov dword [ecx + 0x758], eax
mov dword [ecx + 0x75c], edx
mov dword [ebp - 0x604], 0
xor edx, edx
mov dword [ebp - 0x600], edx
mov dword [ebp - 0x5fc], edx
mov dword [ebp - 0x5f8], edx
mov dword [ebp - 0x5f4], edx
mov dword [ebp - 0x5f0], edx
mov dword [ebp - 0x5ec], edx
mov dword [ebp - 0x5e8], edx
mov dword [ebp - 0x5e4], edx
mov eax, dword [ebp - 0x28c]
movzx ecx, word [eax + 0x714]
sub ecx, 0x76c
mov dword [ebp - 0x5f0], ecx
mov edx, dword [ebp - 0x28c]
movzx eax, word [edx + 0x716]
sub eax, 1
mov dword [ebp - 0x5f4], eax
mov ecx, dword [ebp - 0x28c]
movzx edx, word [ecx + 0x71a]
mov dword [ebp - 0x5f8], edx
mov eax, dword [ebp - 0x28c]
movzx ecx, word [eax + 0x71c]
mov dword [ebp - 0x5fc], ecx
mov edx, dword [ebp - 0x28c]
movzx eax, word [edx + 0x71e]
mov dword [ebp - 0x600], eax
mov ecx, dword [ebp - 0x28c]
movzx edx, word [ecx + 0x720]
mov dword [ebp - 0x604], edx
lea eax, [ebp - 0x604]
push eax
call fcn.00496250
add esp, 4
mov dword [ebp - 0x5e0], eax
mov dword [ebp - 0x5dc], edx
mov ecx, dword [ebp - 0x28c]
mov edx, dword [ebp - 0x5e0]
mov dword [ecx + 0x748], edx
mov eax, dword [ebp - 0x5dc]
mov dword [ecx + 0x74c], eax
mov ecx, dword [ebp - 4]
push ecx
lea ecx, [ebp - 0x620]
call fcn.0041d0c0
lea edx, [ebp - 0x620]
push edx
lea eax, [ebp - 0x3cc]
push eax
mov ecx, 0x5562d8
call fcn.004970e0
lea ecx, [ebp - 0x620]
call fcn.0041d100
lea ecx, [ebp - 0x628]
push ecx
mov ecx, 0x5562d8
call fcn.00496910
push eax
lea ecx, [ebp - 0x3cc]
call fcn.004971a0
movzx edx, al
test edx, edx
je 0x496071
lea ecx, [ebp - 0x3cc]
call fcn.00497180
mov dword [ebp - 0x670], eax
mov eax, dword [ebp - 0x670]
mov ecx, dword [ebp - 0x5dc]
cmp ecx, dword [eax + 0xc]
jl 0x49606f
jg 0x496033
mov edx, dword [ebp - 0x670]
mov eax, dword [ebp - 0x5e0]
cmp eax, dword [edx + 8]
jbe 0x49606f
mov ecx, dword [ebp - 4]
push ecx
lea ecx, [ebp - 0x62c]
call fcn.0041d0c0
lea edx, [ebp - 0x62c]
push edx
mov ecx, 0x5562d8
call fcn.00496850
mov ecx, dword [ebp - 0x5e0]
mov dword [eax], ecx
mov edx, dword [ebp - 0x5dc]
mov dword [eax + 4], edx
lea ecx, [ebp - 0x62c]
call fcn.0041d100
jmp 0x4960ad
mov eax, dword [ebp - 4]
push eax
lea ecx, [ebp - 0x630]
call fcn.0041d0c0
lea ecx, [ebp - 0x630]
push ecx
mov ecx, 0x5562d8
call fcn.00496850
mov edx, dword [ebp - 0x5e0]
mov dword [eax], edx
mov ecx, dword [ebp - 0x5dc]
mov dword [eax + 4], ecx
lea ecx, [ebp - 0x630]
call fcn.0041d100
lea ecx, [ebp - 8]
call fcn.0041d2b0
push eax
push 0x80
push 0x80
mov ecx, dword [ebp - 0x28c]
add ecx, 0x728
call fcn.0041d2c0
push eax
push 0x53755c
push str.softprivid
mov edx, dword [ebp - 4]
push edx
call dword [sym.imp.KERNEL32.dll_GetPrivateProfileStringW]
push 0xffffffffffffffff
mov ecx, dword [ebp - 0x28c]
add ecx, 0x728
call fcn.0041d320
lea eax, [ebp - 0x28c]
push eax
mov ecx, dword [ebp + 8]
call fcn.004971f0
cmp dword [ebp + 0xc], 0
je 0x496164
mov ecx, dword [ebp - 0x14]
push ecx
lea ecx, [ebp - 0x640]
call fcn.0041d0c0
or dword [ebp - 0x660], 1
lea edx, [ebp - 0x640]
push edx
lea eax, [ebp - 0x648]
push eax
mov ecx, dword [ebp + 0xc]
call fcn.00497430
push eax
lea ecx, [ebp - 0x63c]
push ecx
mov ecx, dword [ebp + 0xc]
call fcn.00497230
mov ecx, eax
call fcn.004974d0
movzx edx, al
test edx, edx
je 0x496164
mov dword [ebp - 0x674], 1
jmp 0x49616e
mov dword [ebp - 0x674], 0
mov al, byte [ebp - 0x674]
mov byte [ebp - 0x631], al
mov ecx, dword [ebp - 0x660]
and ecx, 1
je 0x496197
and dword [ebp - 0x660], 0xfffffffe
lea ecx, [ebp - 0x640]
call fcn.0041d100
movzx edx, byte [ebp - 0x631]
test edx, edx
je 0x4961d2
mov eax, dword [ebp - 0x14]
push eax
lea ecx, [ebp - 0x64c]
call fcn.0041d0c0
lea ecx, [ebp - 0x64c]
push ecx
lea edx, [ebp - 0x658]
push edx
mov ecx, dword [ebp + 0xc]
call fcn.00497260
lea ecx, [ebp - 0x64c]
call fcn.0041d100
lea eax, [ebp - 0x270]
push eax
mov ecx, dword [ebp - 0x284]
push ecx
call dword [sym.imp.KERNEL32.dll_FindNextFileW]
mov dword [ebp - 0xc], eax
jmp 0x495306
mov edx, dword [ebp - 0x284]
push edx
call dword [sym.imp.KERNEL32.dll_FindClose]
mov ecx, dword [ebp + 8]
call fcn.004971d0
mov dword [ebp - 0x65c], eax
lea ecx, [ebp - 0x280]
call fcn.0041d100
lea ecx, [ebp - 8]
call fcn.0041d100
lea ecx, [ebp - 0x10]
call fcn.0041d100
lea ecx, [ebp - 0x274]
call fcn.0041d100
lea ecx, [ebp - 0x18]
call fcn.0041d100
mov eax, dword [ebp - 0x65c]
mov ecx, dword [ebp - 0x1c]
xor ecx, ebp
call fcn.004f7567
mov esp, ebp
pop ebp
ret