Function at 0x40b560
Capabilities:
Read .ini file

Disassembly:
push 0xffffffffffffffff
push 0x4a1be8
mov eax, dword fs:[0]
push eax
sub esp, 0x40
push ebx
push ebp
push esi
push edi
mov eax, dword [0x4c8a00]
xor eax, esp
push eax
lea eax, [esp + 0x54]
mov dword fs:[0], eax
mov ebx, dword [esp + 0x64]
mov eax, dword [ebx + 0x394]
test eax, eax
je 0x40b59f
cmp dword [eax + 4], 0
jne 0x40b920
call fcn.0044d2b5
xor ecx, ecx
test eax, eax
setne cl
test ecx, ecx
jne 0x40b5b9
push 0x80004005
call fcn.004010b0
mov edx, dword [eax]
mov ecx, eax
mov eax, dword [edx + 0xc]
call eax
add eax, 0x10
mov dword [esp + 0x18], eax
mov dword [esp + 0x5c], 0
call fcn.0044d2b5
xor ecx, ecx
test eax, eax
setne cl
test ecx, ecx
jne 0x40b5eb
push 0x80004005
call fcn.004010b0
mov edx, dword [eax]
mov ecx, eax
mov eax, dword [edx + 0xc]
call eax
add eax, 0x10
mov dword [esp + 0x2c], eax
lea ecx, [ebx + 0x348]
push str.fxxz_gameguide
push ecx
mov byte [esp + 0x64], 1
call fcn.00402b30
add esp, 8
lea ecx, [esp + 0x2c]
test al, al
je 0x40b625
push 0x61
push str.http:__ggr.uuuo.com_redirect_box_ini_tc.url_charsetgb2312fromgamestartinifxxzgamestartsn.ini
jmp 0x40b62c
push 0x5d
push str.http:__ggr.uuuo.com_redirect_box_ini_tc.url_charsetgb2312fromgamestartinigamestartsn.ini
call fcn.00402540
mov edi, dword [esp + 0x2c]
push ecx
add edi, 0xfffffff0
mov dword [esp + 0x40], esp
mov esi, esp
push edi
mov dword [esp + 0x38], edi
call fcn.00402640
lea edx, [esp + 0x3c]
add esp, 4
add eax, 0x10
push edx
mov dword [esi], eax
call fcn.00401240
add esp, 8
push eax
lea ecx, [esp + 0x1c]
mov byte [esp + 0x60], 2
call fcn.00402260
mov byte [esp + 0x5c], 1
mov eax, dword [esp + 0x34]
add eax, 0xfffffff0
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x40b692
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
mov esi, dword [esp + 0x18]
cmp dword [esi - 0xc], 0
jne 0x40b70f
mov ecx, dword [ebx + 0x20]
push 0
push 0x493e0
push 0x3e8
push ecx
call dword [sym.imp.USER32.dll_SetTimer]
mov byte [esp + 0x5c], 0
lea edx, [edi + 0xc]
or eax, 0xffffffff
lock xadd dword [edx], eax
dec eax
test eax, eax
jg 0x40b6d0
mov ecx, dword [edi]
mov edx, dword [ecx]
mov eax, dword [edx + 4]
push edi
call eax
mov dword [esp + 0x5c], 0xffffffff
lea eax, [esi - 0x10]
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x40b6f4
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
mov eax, 1
mov ecx, dword [esp + 0x54]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebp
pop ebx
add esp, 0x4c
ret 4
call fcn.0044d2b5
xor ecx, ecx
test eax, eax
setne cl
test ecx, ecx
jne 0x40b729
push 0x80004005
call fcn.004010b0
mov edx, dword [eax]
mov ecx, eax
mov eax, dword [edx + 0xc]
call eax
lea edi, [eax + 0x10]
mov dword [esp + 0x20], edi
mov byte [esp + 0x5c], 3
mov eax, dword [edi - 8]
mov ecx, 1
sub ecx, dword [edi - 4]
sub eax, 0x64
or eax, ecx
jge 0x40b75f
push 0x64
lea ecx, [esp + 0x24]
call fcn.004025f0
mov edi, dword [esp + 0x20]
push esi
push 0x64
push edi
push 0x4ab640
push 0x4ac85c
push 0x4ac440
call dword [sym.imp.KERNEL32.dll_GetPrivateProfileStringW]
mov eax, dword [edi - 8]
push eax
push edi
call fcn.0046c323
add esp, 8
test eax, eax
jl 0x40c226
cmp eax, dword [edi - 8]
jg 0x40c226
xor ecx, ecx
mov dword [edi - 0xc], eax
mov word [edi + eax*2], cx
call fcn.0044d2b5
xor ecx, ecx
test eax, eax
setne cl
test ecx, ecx
jne 0x40b7b9
push 0x80004005
call fcn.004010b0
mov edx, dword [eax]
mov ecx, eax
mov eax, dword [edx + 0xc]
call eax
lea ebp, [eax + 0x10]
mov dword [esp + 0x24], ebp
mov bl, 4
mov byte [esp + 0x5c], bl
mov eax, dword [esp + 0x64]
add eax, 0x2f0
push str.gameyxdown.dat
push eax
lea ecx, [esp + 0x3c]
push ecx
call fcn.004145b0
add esp, 0xc
mov byte [esp + 0x5c], 5
mov esi, dword [eax]
mov eax, dword [ebp - 8]
mov ecx, 1
sub ecx, dword [ebp - 4]
sub eax, 0x32
or eax, ecx
jge 0x40b813
push 0x32
lea ecx, [esp + 0x28]
call fcn.004025f0
mov ebp, dword [esp + 0x24]
push esi
push 0x32
push ebp
push 0x4ac864
push 0x4ac868
push 0x4ac440
call dword [sym.imp.KERNEL32.dll_GetPrivateProfileStringW]
mov byte [esp + 0x5c], bl
mov eax, dword [esp + 0x34]
add eax, 0xfffffff0
lea edx, [eax + 0xc]
or ecx, 0xffffffff
lock xadd dword [edx], ecx
dec ecx
test ecx, ecx
jg 0x40b850
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
mov eax, dword [ebp - 8]
push eax
push ebp
call fcn.0046c323
xor esi, esi
add esp, 8
cmp eax, esi
jl 0x40c226
cmp eax, dword [ebp - 8]
jg 0x40c226
mov dword [ebp - 0xc], eax
xor ecx, ecx
lea edx, [esp + 0x24]
mov word [ebp + eax*2], cx
push edx
lea eax, [esp + 0x24]
push eax
call fcn.00414690
add esp, 8
test al, al
je 0x40b927
lea eax, [ebp - 0x10]
mov byte [esp + 0x5c], 3
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x40b8b5
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
mov byte [esp + 0x5c], 1
lea eax, [edi - 0x10]
or edx, 0xffffffff
lea ecx, [eax + 0xc]
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x40b8d6
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
mov eax, dword [esp + 0x30]
or edx, 0xffffffff
lea ecx, [eax + 0xc]
mov byte [esp + 0x5c], 0
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x40b8f8
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
mov dword [esp + 0x5c], 0xffffffff
mov eax, dword [esp + 0x18]
add eax, 0xfffffff0
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x40b920
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
xor eax, eax
jmp 0x40b6f9
xor ebp, ebp
mov dword [esp + 0x40], vtable.CArray_class_ATL::CStringT_wchar_t__class_StrTraitMFC_wchar_t__class_ATL::ChTraitsCRT_wchar_t_____class_ATL::CStringT_wchar_t__class_StrTraitMFC_wchar_t__class_ATL::ChTraitsCRT_wchar_t_____.0
mov dword [esp + 0x44], esi
mov dword [esp + 0x50], esi
mov dword [esp + 0x4c], esi
mov dword [esp + 0x48], ebp
mov byte [esp + 0x5c], 6
mov edi, dword [esp + 0x64]
mov eax, dword [edi + 0x37c]
add edi, 0x37c
sub eax, 0x10
mov ecx, 1
sub ecx, dword [eax + 0xc]
mov eax, dword [eax + 8]
sub eax, 0x100
or eax, ecx
mov dword [esp + 0x28], esi
jge 0x40b97d
push 0x100
mov ecx, edi
call fcn.004025f0
mov ecx, dword [esp + 0x18]
mov eax, dword [edi]
push ecx
push 0x100
push eax
push 0x4ab640
push str.urlv1
push 0x4ac440
call dword [sym.imp.KERNEL32.dll_GetPrivateProfileStringW]
mov eax, dword [edi]
mov ecx, dword [eax - 8]
cmp eax, esi
jne 0x40b9ac
xor eax, eax
jmp 0x40b9be
push ecx
push eax
call fcn.0046c323
add esp, 8
cmp eax, esi
jl 0x40c226
mov ecx, dword [edi]
cmp eax, dword [ecx - 8]
jg 0x40c226
mov dword [ecx - 0xc], eax
mov edx, dword [edi]
xor ecx, ecx
mov word [edx + eax*2], cx
mov bl, 7
jmp 0x40b9e4
mov ebp, dword [esp + 0x48]
mov eax, dword [edi]
cmp dword [eax - 0xc], 0
jl 0x40bae0
push 0x4ac0c0
push eax
call fcn.0046c778
add esp, 8
test eax, eax
je 0x40bae0
sub eax, dword [edi]
sar eax, 1
cmp eax, 0xffffffff
je 0x40bae0
mov eax, dword [edi]
cmp dword [eax - 0xc], 0
jge 0x40ba20
or esi, 0xffffffff
jmp 0x40ba3d
push 0x4ac0c0
push eax
call fcn.0046c778
add esp, 8
test eax, eax
jne 0x40ba37
or esi, 0xffffffff
jmp 0x40ba3d
sub eax, dword [edi]
sar eax, 1
mov esi, eax
push esi
lea edx, [esp + 0x20]
push edx
mov ecx, edi
call fcn.00401e10
inc esi
push esi
lea eax, [esp + 0x38]
push eax
mov ecx, edi
mov byte [esp + 0x64], bl
call fcn.00414440
push eax
mov ecx, edi
mov byte [esp + 0x60], 8
call fcn.00402260
mov byte [esp + 0x5c], bl
mov eax, dword [esp + 0x34]
add eax, 0xfffffff0
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x40ba8d
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
test ebp, ebp
jl 0x40c09a
lea eax, [ebp + 1]
lea esi, [esp + 0x40]
call fcn.00416170
mov ecx, dword [esp + 0x44]
lea edx, [esp + 0x1c]
lea ecx, [ecx + ebp*4]
push edx
call fcn.00402260
mov byte [esp + 0x5c], 6
mov eax, dword [esp + 0x1c]
add eax, 0xfffffff0
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x40b9e0
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
jmp 0x40b9e0
mov ecx, dword [edi]
cmp dword [ecx - 0xc], 0
je 0x40baf6
push edi
lea eax, [esp + 0x44]
call fcn.004159a0
mov ebp, dword [esp + 0x48]
test ebp, ebp
jle 0x40bb25
call fcn.0046cf0c
cdq
idiv ebp
mov dword [esp + 0x28], edx
test edx, edx
jl 0x40c09a
cmp edx, ebp
jge 0x40c09a
mov eax, dword [esp + 0x44]
lea eax, [eax + edx*4]
push eax
mov ecx, edi
call fcn.00402260
mov ecx, dword [edi]
cmp dword [ecx - 0xc], 0
jne 0x40bb6c
lea edi, [esp + 0x40]
call fcn.004159d0
mov byte [esp + 0x5c], 3
mov eax, dword [esp + 0x24]
add eax, 0xfffffff0
lea edx, [eax + 0xc]
or ecx, 0xffffffff
lock xadd dword [edx], ecx
dec ecx
test ecx, ecx
jg 0x40bb5b
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
mov byte [esp + 0x5c], 1
mov eax, dword [esp + 0x20]
add eax, 0xfffffff0
jmp 0x40b8bd
lea ecx, [esp + 0x1c]
call fcn.00401c30
mov byte [esp + 0x5c], 9
mov ebx, dword [esp + 0x18]
push ebx
push 0x64
push 0x64
lea ecx, [esp + 0x28]
call fcn.00402370
mov ebp, dword [sym.imp.KERNEL32.dll_GetPrivateProfileStringW]
push eax
push 0x4ab640
push str.trayicov1
push 0x4ac440
call ebp
mov esi, dword [esp + 0x1c]
mov eax, dword [esi - 8]
push eax
push esi
call fcn.0046c323
add esp, 8
test eax, eax
jl 0x40c226
cmp eax, dword [esi - 8]
jg 0x40c226
xor ecx, ecx
mov dword [esi - 0xc], eax
mov word [esi + eax*2], cx
mov esi, dword [esi - 0xc]
test esi, esi
je 0x40bcb0
push 0x2f
lea ecx, [esp + 0x20]
call fcn.00401de0
cmp eax, 0xffffffff
je 0x40bcb0
inc eax
push eax
lea edx, [esp + 0x38]
push edx
lea ecx, [esp + 0x24]
call fcn.00414440
push eax
mov byte [esp + 0x60], 0xa
mov edi, dword [esp + 0x68]
lea eax, [edi + 0x2f0]
push eax
lea eax, [esp + 0x1c]
push eax
call fcn.004144f0
add esp, 0xc
mov bl, 0xc
lea ecx, [esp + 0x34]
mov byte [esp + 0x5c], bl
call fcn.00402240
push 1
push ecx
lea edx, [esp + 0x1c]
mov ecx, esp
mov dword [esp + 0x44], esp
push edx
call fcn.00402220
push ecx
mov byte [esp + 0x68], 0xd
lea eax, [esp + 0x28]
mov ecx, esp
mov dword [esp + 0x44], esp
push eax
call fcn.00402220
mov byte [esp + 0x68], bl
call fcn.00401670
add esp, 8
lea edx, [esp + 0x18]
mov ecx, esp
mov dword [esp + 0x40], esp
push edx
call fcn.00402220
call fcn.0042fa70
add esp, 4
test eax, eax
je 0x40bc9c
mov eax, dword [esp + 0x14]
mov ecx, dword [0x4ce4ec]
push 0x10
push 0
push 0
push 1
push eax
push ecx
call dword [sym.imp.USER32.dll_LoadImageW]
mov dword [edi + 0x380], eax
lea ecx, [esp + 0x14]
mov byte [esp + 0x5c], 9
call fcn.00402240
mov ebx, dword [esp + 0x18]
jmp 0x40bcb4
mov edi, dword [esp + 0x64]
push ebx
push 0x64
add edi, 0x384
push 0x64
mov ecx, edi
call fcn.00402370
push eax
push 0x4ab640
push str.traytipv1
push 0x4ac440
call ebp
mov eax, dword [edi]
mov ecx, dword [eax - 8]
test eax, eax
je 0x40bcf3
push ecx
push eax
call fcn.0046c323
add esp, 8
test eax, eax
jl 0x40c226
mov ecx, dword [edi]
cmp eax, dword [ecx - 8]
jg 0x40c226
mov dword [ecx - 0xc], eax
mov edx, dword [edi]
xor ecx, ecx
lea esi, [esp + 0x40]
mov word [edx + eax*2], cx
call fcn.00415950
mov eax, dword [edi]
cmp dword [eax - 0xc], 0
jl 0x40be14
push 0x4ac0c0
push eax
call fcn.0046c778
add esp, 8
test eax, eax
je 0x40be14
sub eax, dword [edi]
sar eax, 1
cmp eax, 0xffffffff
je 0x40be14
mov eax, dword [edi]
cmp dword [eax - 0xc], 0
jge 0x40bd4e
or esi, 0xffffffff
jmp 0x40bd6b
push 0x4ac0c0
push eax
call fcn.0046c778
add esp, 8
test eax, eax
jne 0x40bd65
or esi, 0xffffffff
jmp 0x40bd6b
sub eax, dword [edi]
sar eax, 1
mov esi, eax
push esi
lea edx, [esp + 0x18]
push edx
mov ecx, edi
call fcn.00401e10
inc esi
push esi
lea eax, [esp + 0x38]
push eax
mov ecx, edi
mov byte [esp + 0x64], 0xe
call fcn.00414440
push eax
mov ecx, edi
mov byte [esp + 0x60], 0xf
call fcn.00402260
mov byte [esp + 0x5c], 0xe
mov eax, dword [esp + 0x34]
add eax, 0xfffffff0
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x40bdbd
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
mov eax, dword [esp + 0x48]
mov ebp, eax
test eax, eax
jl 0x40c09a
inc eax
lea esi, [esp + 0x40]
call fcn.00416170
mov ecx, dword [esp + 0x44]
lea edx, [esp + 0x14]
lea ecx, [ecx + ebp*4]
push edx
call fcn.00402260
mov byte [esp + 0x5c], 9
mov eax, dword [esp + 0x14]
add eax, 0xfffffff0
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x40bd12
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
jmp 0x40bd12
mov ecx, dword [edi]
cmp dword [ecx - 0xc], 0
je 0x40be26
push edi
lea eax, [esp + 0x44]
call fcn.004159a0
mov eax, dword [esp + 0x48]
mov ecx, dword [esp + 0x28]
cmp ecx, eax
jl 0x40be44
test eax, eax
jle 0x40be5b
mov edx, dword [esp + 0x44]
push edx
mov ecx, edi
call fcn.00401d20
jmp 0x40be5b
test ecx, ecx
jl 0x40c09a
mov eax, dword [esp + 0x44]
lea eax, [eax + ecx*4]
push eax
mov ecx, edi
call fcn.00402260
mov ecx, dword [edi]
cmp dword [ecx - 0xc], 0
jne 0x40be6f
push 0x4ac8ac
mov ecx, edi
call fcn.00401d40
mov esi, dword [sym.imp.KERNEL32.dll_GetPrivateProfileIntW]
push ebx
push 0
push str.delayv1
push 0x4ac440
call esi
push ebx
push 0
push str.lnkv1
push 0x4ac440
mov dword [esp + 0x4c], eax
call esi
push ebx
push 0
push str.blnknamev1
push 0x4ac440
mov edi, eax
call esi
mov dword [esp + 0x38], eax
cmp edi, 1
jne 0x40c5a3
mov edi, dword [esp + 0x64]
mov eax, dword [edi + 0x388]
add edi, 0x388
sub eax, 0x10
mov ecx, 1
sub ecx, dword [eax + 0xc]
mov eax, dword [eax + 8]
sub eax, 0x64
or eax, ecx
jge 0x40bee3
push 0x64
mov ecx, edi
call fcn.004025f0
mov edx, dword [esp + 0x18]
mov eax, dword [edi]
push edx
push 0x64
push eax
push 0x4ab640
push str.namev1
push 0x4ac440
call dword [sym.imp.KERNEL32.dll_GetPrivateProfileStringW]
mov eax, dword [edi]
mov ecx, dword [eax - 8]
test eax, eax
je 0x40bf1d
push ecx
push eax
call fcn.0046c323
add esp, 8
test eax, eax
jl 0x40c226
mov ecx, dword [edi]
cmp eax, dword [ecx - 8]
jg 0x40c226
mov dword [ecx - 0xc], eax
mov ecx, dword [edi]
xor edx, edx
lea esi, [esp + 0x40]
mov word [ecx + eax*2], dx
call fcn.00415950
mov esi, dword [esp + 0x44]
mov eax, dword [edi]
cmp dword [eax - 0xc], 0
jl 0x40c088
push 0x4ac0c0
push eax
call fcn.0046c778
add esp, 8
test eax, eax
je 0x40c088
sub eax, dword [edi]
sar eax, 1
cmp eax, 0xffffffff
je 0x40c088
mov eax, dword [edi]
cmp dword [eax - 0xc], 0
jge 0x40bf7c
or esi, 0xffffffff
jmp 0x40bf99
push 0x4ac0c0
push eax
call fcn.0046c778
add esp, 8
test eax, eax
jne 0x40bf93
or esi, 0xffffffff
jmp 0x40bf99
sub eax, dword [edi]
sar eax, 1
mov esi, eax
push esi
lea eax, [esp + 0x18]
push eax
mov ecx, edi
call fcn.00401e10
inc esi
push esi
lea ecx, [esp + 0x38]
push ecx
mov ecx, edi
mov byte [esp + 0x64], 0x10
call fcn.00414440
mov byte [esp + 0x5c], 0x11
mov ecx, dword [eax]
mov esi, dword [edi]
lea eax, [ecx - 0x10]
sub esi, 0x10
cmp eax, esi
je 0x40c010
cmp dword [esi + 0xc], 0
lea ebp, [esi + 0xc]
jl 0x40c004
mov edx, dword [eax]
cmp edx, dword [esi]
jne 0x40c004
push eax
call fcn.00402640
mov ebx, eax
add esp, 4
or eax, 0xffffffff
lock xadd dword [ebp], eax
dec eax
test eax, eax
jg 0x40bffd
mov ecx, dword [esi]
mov edx, dword [ecx]
mov eax, dword [edx + 4]
push esi
call eax
add ebx, 0x10
mov dword [edi], ebx
jmp 0x40c010
mov eax, dword [ecx - 0xc]
push eax
push ecx
mov ecx, edi
call fcn.00402540
mov byte [esp + 0x5c], 0x10
mov eax, dword [esp + 0x34]
add eax, 0xfffffff0
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x40c035
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
mov eax, dword [esp + 0x48]
mov ebp, eax
test eax, eax
jl 0x40c09a
inc eax
lea esi, [esp + 0x40]
call fcn.00416170
mov esi, dword [esp + 0x44]
lea edx, [esp + 0x14]
lea ecx, [esi + ebp*4]
push edx
call fcn.00402260
mov byte [esp + 0x5c], 9
mov eax, dword [esp + 0x14]
add eax, 0xfffffff0
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x40bf40
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
jmp 0x40bf40
mov ecx, dword [edi]
cmp dword [ecx - 0xc], 0
je 0x40c0b6
mov eax, dword [esp + 0x48]
mov ebx, eax
test eax, eax
jge 0x40c09f
call fcn.0044db4c
inc eax
lea esi, [esp + 0x40]
call fcn.00416170
mov esi, dword [esp + 0x44]
lea ecx, [esi + ebx*4]
push edi
call fcn.00402260
mov ecx, dword [esp + 0x48]
mov eax, dword [esp + 0x28]
cmp eax, ecx
jl 0x40c0c9
test ecx, ecx
jle 0x40c0d8
push esi
jmp 0x40c0d1
test eax, eax
jl 0x40c09a
lea eax, [esi + eax*4]
push eax
mov ecx, edi
call fcn.00402260
mov edx, dword [edi]
cmp dword [edx - 0xc], 0
je 0x40c5a3
cmp dword [esp + 0x38], 1
jne 0x40c20c
call fcn.0044d2b5
xor ecx, ecx
test eax, eax
setne cl
test ecx, ecx
jne 0x40c109
push 0x80004005
call fcn.004010b0
mov edx, dword [eax]
mov ecx, eax
mov eax, dword [edx + 0xc]
call eax
lea esi, [eax + 0x10]
mov dword [esp + 0x14], esi
mov bl, 0x12
mov byte [esp + 0x5c], bl
mov eax, dword [esp + 0x64]
push str.gameyxdown.dat
add eax, 0x2f0
push eax
lea ecx, [esp + 0x40]
push ecx
call fcn.004145b0
add esp, 0xc
mov byte [esp + 0x5c], 0x13
mov ebp, dword [eax]
mov eax, dword [esi - 8]
mov ecx, 1
sub ecx, dword [esi - 4]
sub eax, 0x32
or eax, ecx
jge 0x40c163
push 0x32
lea ecx, [esp + 0x18]
call fcn.004025f0
mov esi, dword [esp + 0x14]
push ebp
push 0x32
push esi
push 0x4ab640
push str.NumberName
push 0x4ac440
call dword [sym.imp.KERNEL32.dll_GetPrivateProfileStringW]
mov byte [esp + 0x5c], bl
mov eax, dword [esp + 0x38]
add eax, 0xfffffff0
lea edx, [eax + 0xc]
or ecx, 0xffffffff
lock xadd dword [edx], ecx
dec ecx
test ecx, ecx
jg 0x40c1a0
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
mov eax, dword [esi - 8]
push eax
push esi
call fcn.0046c323
add esp, 8
test eax, eax
jl 0x40c226
cmp eax, dword [esi - 8]
jg 0x40c226
lea edx, [esp + 0x14]
xor ecx, ecx
push edi
mov dword [esi - 0xc], eax
push edx
mov word [esi + eax*2], cx
call fcn.00414690
add esp, 8
test al, al
je 0x40c1eb
mov ecx, edi
call fcn.00402490
lea ecx, [esp + 0x14]
mov byte [esp + 0x5c], 9
call fcn.00402240
jmp 0x40c5a3
lea eax, [esi - 0x10]
mov byte [esp + 0x5c], 9
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x40c20c
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
call fcn.0044d2b5
xor ecx, ecx
test eax, eax
setne cl
test ecx, ecx
jne 0x40c230
push 0x80004005
call fcn.004010b0
push 0x80070057
call fcn.004010b0
mov edx, dword [eax]
mov ecx, eax
mov eax, dword [edx + 0xc]
call eax
lea edi, [eax + 0x10]
mov dword [esp + 0x14], edi
mov byte [esp + 0x5c], 0x14
mov eax, dword [edi - 8]
mov ecx, 1
sub ecx, dword [edi - 4]
sub eax, 0x64
or eax, ecx
jge 0x40c266
push 0x64
lea ecx, [esp + 0x18]
call fcn.004025f0
mov edi, dword [esp + 0x14]
mov ecx, dword [esp + 0x18]
push ecx
push 0x64
push edi
push 0x4ab640
push str.icov1
push 0x4ac440
call dword [sym.imp.KERNEL32.dll_GetPrivateProfileStringW]
mov eax, dword [edi - 8]
push eax
push edi
call fcn.0046c323
add esp, 8
test eax, eax
jl 0x40c226
cmp eax, dword [edi - 8]
jg 0x40c226
xor edx, edx
mov dword [edi - 0xc], eax
lea esi, [esp + 0x40]
mov word [edi + eax*2], dx
call fcn.00415950
mov esi, dword [esp + 0x44]
mov bl, 0x15
cmp dword [edi - 0xc], 0
jl 0x40c406
push 0x4ac0c0
push edi
call fcn.0046c778
add esp, 8
test eax, eax
je 0x40c400
sub eax, edi
sar eax, 1
cmp eax, 0xffffffff
je 0x40c400
cmp dword [edi - 0xc], 0
jge 0x40c2e9
or esi, 0xffffffff
jmp 0x40c306
push 0x4ac0c0
push edi
call fcn.0046c778
add esp, 8
test eax, eax
jne 0x40c300
or esi, 0xffffffff
jmp 0x40c306
sub eax, edi
sar eax, 1
mov esi, eax
push esi
lea eax, [esp + 0x38]
push eax
lea ecx, [esp + 0x1c]
call fcn.00401e10
inc esi
push esi
lea ecx, [esp + 0x3c]
push ecx
lea ecx, [esp + 0x1c]
mov byte [esp + 0x64], bl
call fcn.00414440
mov byte [esp + 0x5c], 0x16
mov ecx, dword [eax]
lea eax, [ecx - 0x10]
lea esi, [edi - 0x10]
cmp eax, esi
je 0x40c385
cmp dword [esi + 0xc], 0
lea edi, [esi + 0xc]
jl 0x40c373
mov edx, dword [eax]
cmp edx, dword [esi]
jne 0x40c373
push eax
call fcn.00402640
mov ebp, eax
add esp, 4
or eax, 0xffffffff
lock xadd dword [edi], eax
dec eax
test eax, eax
jg 0x40c36a
mov ecx, dword [esi]
mov edx, dword [ecx]
mov eax, dword [edx + 4]
push esi
call eax
lea edi, [ebp + 0x10]
mov dword [esp + 0x14], edi
jmp 0x40c385
mov eax, dword [ecx - 0xc]
push eax
push ecx
lea ecx, [esp + 0x1c]
call fcn.00402540
mov edi, dword [esp + 0x14]
mov byte [esp + 0x5c], bl
mov eax, dword [esp + 0x38]
add eax, 0xfffffff0
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x40c3a9
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
mov eax, dword [esp + 0x48]
mov ebp, eax
test eax, eax
jl 0x40c09a
inc eax
lea esi, [esp + 0x40]
call fcn.00416170
mov esi, dword [esp + 0x44]
lea edx, [esp + 0x34]
lea ecx, [esi + ebp*4]
push edx
call fcn.00402260
mov byte [esp + 0x5c], 0x14
mov eax, dword [esp + 0x34]
add eax, 0xfffffff0
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x40c2b1
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
jmp 0x40c2b1
cmp dword [edi - 0xc], 0
je 0x40c430
mov eax, dword [esp + 0x48]
mov ebx, eax
test eax, eax
jge 0x40c415
call fcn.0044db4c
inc eax
lea esi, [esp + 0x40]
call fcn.00416170
mov esi, dword [esp + 0x44]
lea edx, [esp + 0x14]
lea ecx, [esi + ebx*4]
push edx
call fcn.00402260
mov ecx, dword [esp + 0x48]
mov eax, dword [esp + 0x28]
cmp eax, ecx
jl 0x40c443
test ecx, ecx
jle 0x40c45c
push esi
jmp 0x40c44f
test eax, eax
jl 0x40c09a
lea eax, [esi + eax*4]
push eax
lea ecx, [esp + 0x18]
call fcn.00402260
mov edi, dword [esp + 0x14]
cmp dword [edi - 0xc], 0
je 0x40c582
push 0x2f
push edi
call fcn.0046c74c
add esp, 8
test eax, eax
je 0x40c582
sub eax, edi
sar eax, 1
cmp eax, 0xffffffff
je 0x40c582
inc eax
push eax
lea eax, [esp + 0x38]
push eax
lea ecx, [esp + 0x1c]
call fcn.00414440
mov bl, 0x17
mov byte [esp + 0x5c], bl
mov esi, dword [esp + 0x64]
push eax
lea eax, [esi + 0x2f0]
push eax
lea ecx, [esp + 0x40]
push ecx
call fcn.004144f0
add esp, 0xc
add esi, 0x38c
push eax
mov ecx, esi
mov byte [esp + 0x60], 0x18
call fcn.00402260
mov byte [esp + 0x5c], bl
mov eax, dword [esp + 0x38]
add eax, 0xfffffff0
lea edx, [eax + 0xc]
or ecx, 0xffffffff
lock xadd dword [edx], ecx
dec ecx
test ecx, ecx
jg 0x40c4ec
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
mov byte [esp + 0x5c], 0x14
mov eax, dword [esp + 0x34]
add eax, 0xfffffff0
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x40c511
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
mov eax, dword [esi]
push 1
push ecx
sub eax, 0x10
mov dword [esp + 0x40], esp
mov ebp, esp
push eax
call fcn.00402640
add eax, 0x10
mov dword [ebp], eax
mov byte [esp + 0x68], 0x19
lea eax, [edi - 0x10]
mov dword [esp + 0x40], esp
mov ebp, esp
push eax
call fcn.00402640
add eax, 0x10
mov dword [ebp], eax
add esp, 4
mov byte [esp + 0x68], 0x14
call fcn.00401670
mov eax, dword [esi]
add esp, 8
sub eax, 0x10
mov dword [esp + 0x3c], esp
mov ebp, esp
push eax
call fcn.00402640
add eax, 0x10
add esp, 4
mov dword [ebp], eax
call fcn.0042fa70
add esp, 4
test eax, eax
jne 0x40c582
mov ecx, esi
call fcn.00402490
lea eax, [edi - 0x10]
mov byte [esp + 0x5c], 9
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x40c5a3
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
mov eax, dword [esp + 0x3c]
mov esi, dword [esp + 0x64]
test eax, eax
jne 0x40c5b8
mov ecx, esi
call fcn.0040b470
jmp 0x40c5d0
mov ecx, dword [esi + 0x20]
imul eax, eax, 0x3e8
push 0
push eax
push 0x3e9
push ecx
call dword [sym.imp.USER32.dll_SetTimer]
push str.gameyxdown.dat
lea edi, [esi + 0x2f0]
lea edx, [esp + 0x68]
push edi
push edx
call fcn.004145b0
mov eax, dword [eax]
mov ecx, dword [esi + 0x388]
mov esi, dword [sym.imp.KERNEL32.dll_WritePrivateProfileStringW]
add esp, 0xc
push eax
push ecx
push str.NumberName
push 0x4ac440
call esi
mov eax, dword [esp + 0x64]
add eax, 0xfffffff0
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x40c625
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
push str.gameyxdown.dat
lea ecx, [esp + 0x68]
push edi
push ecx
call fcn.004145b0
mov eax, dword [eax]
mov ebx, dword [esp + 0x2c]
add esp, 0xc
push eax
push ebx
push 0x4ac868
push 0x4ac440
call esi
mov eax, dword [esp + 0x64]
add eax, 0xfffffff0
lea edx, [eax + 0xc]
or ecx, 0xffffffff
lock xadd dword [edx], ecx
dec ecx
test ecx, ecx
jg 0x40c66c
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
mov byte [esp + 0x5c], 6
mov eax, dword [esp + 0x1c]
add eax, 0xfffffff0
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x40c691
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
lea edi, [esp + 0x40]
call fcn.004159d0
mov byte [esp + 0x5c], 3
mov eax, dword [esp + 0x24]
add eax, 0xfffffff0
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x40c6bf
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
lea eax, [ebx - 0x10]
mov byte [esp + 0x5c], 1
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x40c6e0
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
mov eax, dword [esp + 0x30]
mov byte [esp + 0x5c], 0
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x40c702
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
mov dword [esp + 0x5c], 0xffffffff
mov eax, dword [esp + 0x18]
add eax, 0xfffffff0
jmp 0x40b6db