Function at 0x40e0c4
Capabilities:
Check http status code
Create process on windows
Get common file path
Query or enumerate registry value
Read .ini file
Set registry value

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x45f03c
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
sub esp, 0xcc4
push esi
push edi
mov dword [ebp - 0xb58], ecx
mov dword [ebp - 0x44], 2
mov dword [ebp - 0x23c], 2
mov dword [ebp - 0x28], 2
mov dword [ebp - 0x24], 0xc8
mov dword [ebp - 0x2c], 0xa
mov dword [ebp - 0x18], 1
lea ecx, [ebp - 0x40]
call fcn.00402210
mov dword [ebp - 4], 0
lea ecx, [ebp - 0x20]
call fcn.00402210
mov byte [ebp - 4], 1
mov dword [ebp - 0x3c], 1
lea ecx, [ebp - 0x38]
call fcn.00402210
mov byte [ebp - 4], 2
lea ecx, [ebp - 0x1c]
call fcn.00402210
mov byte [ebp - 4], 3
lea ecx, [ebp - 0x14]
call fcn.00402210
mov byte [ebp - 4], 4
lea ecx, [ebp - 0x10]
call fcn.00402210
mov byte [ebp - 4], 5
lea ecx, [ebp - 0x30]
call fcn.00402210
mov byte [ebp - 4], 6
lea ecx, [ebp - 0x34]
call fcn.00402210
mov byte [ebp - 4], 7
mov al, byte [0x4796d8]
mov byte [ebp - 0x238], al
mov ecx, 0x7c
xor eax, eax
lea edi, [ebp - 0x237]
rep stosd dword es:[edi], eax
stosw word es:[edi], ax
stosb byte es:[edi], al
push 0x1f4
lea ecx, [ebp - 0x238]
push ecx
push 0x13e
mov ecx, 0x479934
call fcn.0041c0a1
lea edx, [ebp - 0x238]
push edx
push 0x47290c
lea eax, [ebp - 0x38]
push eax
call fcn.0044fdfe
add esp, 0xc
push 0x1f4
lea ecx, [ebp - 0x238]
push ecx
push 0x13f
mov ecx, 0x479934
call fcn.0041c0a1
lea edx, [ebp - 0x238]
push edx
push 0x472910
lea eax, [ebp - 0x1c]
push eax
call fcn.0044fdfe
add esp, 0xc
push 0x1f4
lea ecx, [ebp - 0x238]
push ecx
push 0x140
mov ecx, 0x479934
call fcn.0041c0a1
lea edx, [ebp - 0x238]
push edx
push 0x472914
lea eax, [ebp - 0x14]
push eax
call fcn.0044fdfe
add esp, 0xc
push 0x1f4
lea ecx, [ebp - 0x238]
push ecx
push 0x13b
mov ecx, 0x479934
call fcn.0041c0a1
lea edx, [ebp - 0x238]
push edx
push 0x472918
lea eax, [ebp - 0x10]
push eax
call fcn.0044fdfe
add esp, 0xc
push 0x1f4
lea ecx, [ebp - 0x238]
push ecx
push 0x13d
mov ecx, 0x479934
call fcn.0041c0a1
lea edx, [ebp - 0x238]
push edx
push 0x47291c
lea eax, [ebp - 0x30]
push eax
call fcn.0044fdfe
add esp, 0xc
push 0x1f4
lea ecx, [ebp - 0x238]
push ecx
push 0x13c
mov ecx, 0x479934
call fcn.0041c0a1
lea edx, [ebp - 0x238]
push edx
push 0x472920
lea eax, [ebp - 0x34]
push eax
call fcn.0044fdfe
add esp, 0xc
cmp dword [ebp + 8], 1
jne 0x4104e9
mov ecx, 0x479910
call fcn.00402270
push eax
mov ecx, dword [ebp - 0x44]
push ecx
push 0x472924
push 0x472930
call dword [sym.imp.KERNEL32.dll_GetPrivateProfileIntA]
mov dword [ebp - 0x44], eax
mov ecx, 0x479910
call fcn.00402270
push eax
mov edx, dword [ebp - 0x24]
push edx
push 0x472938
push 0x472944
call dword [sym.imp.KERNEL32.dll_GetPrivateProfileIntA]
mov dword [ebp - 0x24], eax
mov ecx, 0x479910
call fcn.00402270
push eax
mov eax, dword [ebp - 0x23c]
push eax
push 0x47294c
push 0x472958
call dword [sym.imp.KERNEL32.dll_GetPrivateProfileIntA]
mov dword [ebp - 0x23c], eax
mov ecx, 0x479910
call fcn.00402270
push eax
mov ecx, dword [ebp - 0x28]
push ecx
push 0x472960
push 0x47296c
call dword [sym.imp.KERNEL32.dll_GetPrivateProfileIntA]
mov dword [ebp - 0x28], eax
mov ecx, 0x479910
call fcn.00402270
push eax
mov edx, dword [ebp - 0x18]
push edx
push 0x472974
push 0x472980
call dword [sym.imp.KERNEL32.dll_GetPrivateProfileIntA]
mov dword [ebp - 0x18], eax
mov dword [ebp - 0x248], 0x472988
lea eax, [ebp - 0x4fc]
push eax
push 0x20019
push 0
mov ecx, dword [ebp - 0x248]
push ecx
push SysReAllocString
call dword [sym.imp.ADVAPI32.dll_RegOpenKeyExA]
mov dword [ebp - 0x24c], eax
cmp dword [ebp - 0x24c], 0
je 0x40e3d0
push 0x4796dc
lea ecx, [ebp - 0x40]
call fcn.004552a9
mov dword [ebp - 0x358], 0x104
lea edx, [ebp - 0x358]
push edx
lea eax, [ebp - 0x354]
push eax
push 0
push 0
push 0x4729b0
mov ecx, dword [ebp - 0x4fc]
push ecx
call dword [sym.imp.ADVAPI32.dll_RegQueryValueExA]
mov dword [ebp - 0x250], eax
cmp dword [ebp - 0x250], 0
je 0x40e41c
push 0x4796e0
lea ecx, [ebp - 0x40]
call fcn.004552a9
jmp 0x40e42b
lea edx, [ebp - 0x354]
push edx
lea ecx, [ebp - 0x40]
call fcn.004552a9
lea eax, [ebp - 0x40]
push eax
mov ecx, dword [ebp - 0xb58]
add ecx, 0xc04
call fcn.00455259
mov ecx, dword [ebp - 0x4fc]
push ecx
call dword [sym.imp.ADVAPI32.dll_RegCloseKey]
lea ecx, [ebp - 0x40]
call fcn.00402230
test eax, eax
je 0x40e72e
lea ecx, [ebp - 0x61c]
call fcn.00402210
mov byte [ebp - 4], 8
push 0x4796e4
lea ecx, [ebp - 0x618]
call fcn.0045518e
mov byte [ebp - 4], 9
push 0
push 5
lea edx, [ebp - 0x608]
push edx
push 0
call dword [sym.imp.SHELL32.dll_SHGetSpecialFolderPathA]
test eax, eax
je 0x40e4a9
lea eax, [ebp - 0x608]
push eax
lea ecx, [ebp - 0x618]
call fcn.004552a9
mov ecx, dword [ebp - 0xb58]
cmp dword [ecx + 0xba0], 0
je 0x40e508
mov edx, dword [ebp - 0xb58]
cmp dword [edx + 0xba4], 0
jne 0x40e508
mov eax, dword [ebp - 0x618]
push eax
push 0x4729bc
mov ecx, dword [ebp - 0xb58]
add ecx, 0xc04
push ecx
call fcn.0044fdfe
add esp, 0xc
mov edx, dword [ebp - 0x618]
push edx
push str._sHWScan.jp2
lea eax, [ebp - 0x61c]
push eax
call fcn.0044fdfe
add esp, 0xc
jmp 0x40e5a0
mov ecx, dword [ebp - 0xb58]
cmp dword [ecx + 0xba0], 0
jne 0x40e564
mov edx, dword [ebp - 0xb58]
cmp dword [edx + 0xba4], 0
je 0x40e564
mov eax, dword [ebp - 0x618]
push eax
push 0x4729dc
mov ecx, dword [ebp - 0xb58]
add ecx, 0xc04
push ecx
call fcn.0044fdfe
add esp, 0xc
mov edx, dword [ebp - 0x618]
push edx
push str._sHWScan.tif
lea eax, [ebp - 0x61c]
push eax
call fcn.0044fdfe
add esp, 0xc
jmp 0x40e5a0
mov ecx, dword [ebp - 0x618]
push ecx
push 0x4729fc
mov edx, dword [ebp - 0xb58]
add edx, 0xc04
push edx
call fcn.0044fdfe
add esp, 0xc
mov eax, dword [ebp - 0x618]
push eax
push 0x472a0c
lea ecx, [ebp - 0x61c]
push ecx
call fcn.0044fdfe
add esp, 0xc
lea ecx, [ebp - 0x61c]
call fcn.00402270
push eax
mov ecx, 0x479850
call fcn.0041f5d1
lea edx, [ebp - 0x4fc]
push edx
push 0x20006
push 0
mov eax, dword [ebp - 0x248]
push eax
push SysReAllocString
call dword [sym.imp.ADVAPI32.dll_RegOpenKeyExA]
mov dword [ebp - 0x60c], eax
push 0
lea ecx, [ebp - 0x61c]
call fcn.004554dc
mov dword [ebp - 0x504], eax
mov ecx, dword [ebp - 0x504]
push ecx
call fcn.004431c0
add esp, 4
mov dword [ebp - 0x610], eax
mov edx, dword [ebp - 0x610]
push edx
mov eax, dword [ebp - 0x504]
push eax
push 1
push 0
push 0x472a1c
mov ecx, dword [ebp - 0x4fc]
push ecx
call dword [sym.imp.ADVAPI32.dll_RegSetValueExA]
mov dword [ebp - 0x614], eax
cmp dword [ebp - 0x614], 0
je 0x40e6de
mov edx, dword [ebp - 0x4fc]
push edx
call dword [sym.imp.ADVAPI32.dll_RegCloseKey]
mov dword [ebp - 0xa6c], 1
mov byte [ebp - 4], 8
lea ecx, [ebp - 0x618]
call fcn.00455120
mov byte [ebp - 4], 7
lea ecx, [ebp - 0x61c]
call fcn.00455120
mov byte [ebp - 4], 6
lea ecx, [ebp - 0x34]
call fcn.00455120
mov byte [ebp - 4], 5
lea ecx, [ebp - 0x30]
call fcn.00455120
mov byte [ebp - 4], 4
lea ecx, [ebp - 0x10]
call fcn.00455120
mov byte [ebp - 4], 3
lea ecx, [ebp - 0x14]
call fcn.00455120
mov byte [ebp - 4], 2
lea ecx, [ebp - 0x1c]
call fcn.00455120
mov byte [ebp - 4], 1
lea ecx, [ebp - 0x38]
call fcn.00455120
mov byte [ebp - 4], 0
lea ecx, [ebp - 0x20]
call fcn.00455120
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x40]
call fcn.00455120
mov eax, dword [ebp - 0xa6c]
jmp 0x411d01
mov eax, dword [ebp - 0x4fc]
push eax
call dword [sym.imp.ADVAPI32.dll_RegCloseKey]
mov ecx, 0x479910
call fcn.00402270
push eax
push 0x472a28
push 0x472a2c
push 0x472a38
call dword [sym.imp.KERNEL32.dll_WritePrivateProfileStringA]
mov byte [ebp - 4], 8
lea ecx, [ebp - 0x618]
call fcn.00455120
mov byte [ebp - 4], 7
lea ecx, [ebp - 0x61c]
call fcn.00455120
jmp 0x40ec6d
cmp dword [ebp - 0x18], 0
jne 0x40e74e
lea ecx, [ebp - 0x40]
push ecx
mov ecx, dword [ebp - 0xb58]
add ecx, 0xc04
call fcn.00455259
jmp 0x40ec6d
mov dword [ebp - 0x620], 1
lea ecx, [ebp - 0x628]
call fcn.00402210
mov byte [ebp - 4], 0xa
mov edx, dword [ebp - 0xb58]
add edx, 0xc04
push edx
lea ecx, [ebp - 0x628]
call fcn.00455259
push 0x2e
lea ecx, [ebp - 0x628]
call fcn.0044fa9b
mov dword [ebp - 0x630], eax
mov eax, dword [ebp - 0x630]
push eax
lea ecx, [ebp - 0xa70]
push ecx
lea ecx, [ebp - 0x628]
call fcn.0044fa23
mov dword [ebp - 0xb5c], eax
mov edx, dword [ebp - 0xb5c]
mov dword [ebp - 0xb60], edx
mov byte [ebp - 4], 0xb
mov eax, dword [ebp - 0xb60]
push eax
lea ecx, [ebp - 0x628]
call fcn.00455259
mov byte [ebp - 4], 0xa
lea ecx, [ebp - 0xa70]
call fcn.00455120
mov dword [ebp - 0x624], 1
jmp 0x40e7fd
mov ecx, dword [ebp - 0x624]
add ecx, 1
mov dword [ebp - 0x624], ecx
cmp dword [ebp - 0x624], 6
jge 0x40e8cc
push 1
lea edx, [ebp - 0xa74]
push edx
lea ecx, [ebp - 0x628]
call fcn.0044f9a7
mov dword [ebp - 0xb64], eax
mov eax, dword [ebp - 0xb64]
mov ecx, dword [eax]
push ecx
push 0x472a40
lea edx, [ebp - 0x62c]
push edx
call dword [sym.imp.USER32.dll_wsprintfA]
add esp, 0xc
lea ecx, [ebp - 0xa74]
call fcn.00455120
movsx eax, byte [ebp - 0x62c]
cmp eax, 0x30
jl 0x40e865
movsx ecx, byte [ebp - 0x62c]
cmp ecx, 0x39
jle 0x40e871
mov dword [ebp - 0x620], 0
jmp 0x40e8cc
mov edx, dword [ebp - 0x630]
sub edx, dword [ebp - 0x624]
push edx
lea eax, [ebp - 0xa78]
push eax
lea ecx, [ebp - 0x628]
call fcn.0044fa23
mov dword [ebp - 0xb68], eax
mov ecx, dword [ebp - 0xb68]
mov dword [ebp - 0xb6c], ecx
mov byte [ebp - 4], 0xc
mov edx, dword [ebp - 0xb6c]
push edx
lea ecx, [ebp - 0x628]
call fcn.00455259
mov byte [ebp - 4], 0xa
lea ecx, [ebp - 0xa78]
call fcn.00455120
jmp 0x40e7ee
cmp dword [ebp - 0x620], 0
jne 0x40ea64
push 0x2e
mov ecx, dword [ebp - 0xb58]
add ecx, 0xc04
call fcn.0044fa9b
mov dword [ebp - 0x63c], eax
mov eax, dword [ebp - 0x63c]
push eax
lea ecx, [ebp - 0x634]
push ecx
mov ecx, dword [ebp - 0xb58]
add ecx, 0xc04
call fcn.0044fa23
mov byte [ebp - 4], 0xd
push 0x472a44
lea ecx, [ebp - 0x634]
call fcn.00455488
lea ecx, [ebp - 0x638]
call fcn.00402210
mov byte [ebp - 4], 0xe
mov edx, dword [ebp - 0x18]
push edx
push 0x472a4c
lea eax, [ebp - 0x638]
push eax
call fcn.0044fdfe
add esp, 0xc
lea ecx, [ebp - 0x634]
call fcn.00402880
mov esi, eax
lea ecx, [ebp - 0x638]
call fcn.00402880
sub esi, eax
push esi
lea ecx, [ebp - 0xa7c]
push ecx
lea ecx, [ebp - 0x634]
call fcn.0044fa23
mov dword [ebp - 0xb70], eax
mov edx, dword [ebp - 0xb70]
mov dword [ebp - 0xb74], edx
mov byte [ebp - 4], 0xf
mov eax, dword [ebp - 0xb74]
push eax
lea ecx, [ebp - 0x634]
call fcn.00455259
mov byte [ebp - 4], 0xe
lea ecx, [ebp - 0xa7c]
call fcn.00455120
mov ecx, dword [ebp - 0xb58]
cmp dword [ecx + 0xba0], 0
je 0x40e9e6
mov edx, dword [ebp - 0x18]
push edx
mov eax, dword [ebp - 0x634]
push eax
push 0x472a50
mov ecx, dword [ebp - 0xb58]
add ecx, 0xc04
push ecx
call fcn.0044fdfe
add esp, 0x10
jmp 0x40ea41
mov edx, dword [ebp - 0xb58]
cmp dword [edx + 0xba4], 0
je 0x40ea1c
mov eax, dword [ebp - 0x18]
push eax
mov ecx, dword [ebp - 0x634]
push ecx
push 0x472a5c
mov edx, dword [ebp - 0xb58]
add edx, 0xc04
push edx
call fcn.0044fdfe
add esp, 0x10
jmp 0x40ea41
mov eax, dword [ebp - 0x18]
push eax
mov ecx, dword [ebp - 0x634]
push ecx
push 0x472a68
mov edx, dword [ebp - 0xb58]
add edx, 0xc04
push edx
call fcn.0044fdfe
add esp, 0x10
mov byte [ebp - 4], 0xd
lea ecx, [ebp - 0x638]
call fcn.00455120
mov byte [ebp - 4], 0xa
lea ecx, [ebp - 0x634]
call fcn.00455120
jmp 0x40ec5e
cmp dword [ebp - 0x620], 0
je 0x40ec5e
push 0x2e
mov ecx, dword [ebp - 0xb58]
add ecx, 0xc04
call fcn.0044fa9b
mov dword [ebp - 0x648], eax
mov eax, dword [ebp - 0x648]
sub eax, 5
push eax
lea ecx, [ebp - 0x640]
push ecx
mov ecx, dword [ebp - 0xb58]
add ecx, 0xc04
call fcn.0044fa23
mov byte [ebp - 4], 0x10
push 0x472a74
lea ecx, [ebp - 0x640]
call fcn.00455488
lea ecx, [ebp - 0x644]
call fcn.00402210
mov byte [ebp - 4], 0x11
mov edx, dword [ebp - 0x18]
push edx
push 0x472a7c
lea eax, [ebp - 0x644]
push eax
call fcn.0044fdfe
add esp, 0xc
lea ecx, [ebp - 0x640]
call fcn.00402880
mov esi, eax
lea ecx, [ebp - 0x644]
call fcn.00402880
sub esi, eax
push esi
lea ecx, [ebp - 0xa80]
push ecx
lea ecx, [ebp - 0x640]
call fcn.0044fa23
mov dword [ebp - 0xb78], eax
mov edx, dword [ebp - 0xb78]
mov dword [ebp - 0xb7c], edx
mov byte [ebp - 4], 0x12
mov eax, dword [ebp - 0xb7c]
push eax
lea ecx, [ebp - 0x640]
call fcn.00455259
mov byte [ebp - 4], 0x11
lea ecx, [ebp - 0xa80]
call fcn.00455120
mov ecx, dword [ebp - 0xb58]
cmp dword [ecx + 0xba0], 0
je 0x40eb84
mov edx, dword [ebp - 0x18]
push edx
mov eax, dword [ebp - 0x640]
push eax
push 0x472a80
mov ecx, dword [ebp - 0xb58]
add ecx, 0xc04
push ecx
call fcn.0044fdfe
add esp, 0x10
jmp 0x40ec40
mov edx, dword [ebp - 0xb58]
cmp dword [edx + 0xba4], 0
je 0x40ebbd
mov eax, dword [ebp - 0x18]
push eax
mov ecx, dword [ebp - 0x640]
push ecx
push 0x472a8c
mov edx, dword [ebp - 0xb58]
add edx, 0xc04
push edx
call fcn.0044fdfe
add esp, 0x10
jmp 0x40ec40
mov ecx, dword [ebp - 0xb58]
add ecx, 0xc04
call fcn.00402880
mov esi, eax
push 0x2e
mov ecx, dword [ebp - 0xb58]
add ecx, 0xc04
call fcn.0044fa9b
sub esi, eax
sub esi, 1
push esi
lea eax, [ebp - 0x64c]
push eax
mov ecx, dword [ebp - 0xb58]
add ecx, 0xc04
call fcn.0044f9a7
mov byte [ebp - 4], 0x13
mov ecx, dword [ebp - 0x64c]
push ecx
mov edx, dword [ebp - 0x18]
push edx
mov eax, dword [ebp - 0x640]
push eax
push str._s_d._s
mov ecx, dword [ebp - 0xb58]
add ecx, 0xc04
push ecx
call fcn.0044fdfe
add esp, 0x14
mov byte [ebp - 4], 0x11
lea ecx, [ebp - 0x64c]
call fcn.00455120
mov byte [ebp - 4], 0x10
lea ecx, [ebp - 0x644]
call fcn.00455120
mov byte [ebp - 4], 0xa
lea ecx, [ebp - 0x640]
call fcn.00455120
mov byte [ebp - 4], 7
lea ecx, [ebp - 0x628]
call fcn.00455120
mov ecx, 0x479910
call fcn.00402270
push eax
push 0xc8
lea edx, [ebp - 0x4f4]
push edx
push 0x4796e8
push 0x472aa0
push 0x472aac
call dword [sym.imp.KERNEL32.dll_GetPrivateProfileStringA]
mov dword [ebp - 0x42c], eax
cmp dword [ebp - 0x42c], 0
jne 0x40ecda
mov ecx, 0x479910
call fcn.00402270
push eax
push 0xc8
lea eax, [ebp - 0x4f4]
push eax
push 0x4796ec
push 0x472ab4
push 0x472abc
call dword [sym.imp.KERNEL32.dll_GetPrivateProfileStringA]
mov dword [ebp - 0x42c], eax
push ecx
mov ecx, esp
mov dword [ebp - 0xa84], esp
lea edx, [ebp - 0x4f4]
push edx
call fcn.0045518e
mov dword [ebp - 0xb80], eax
mov ecx, dword [ebp - 0xb58]
add ecx, 0x918
call fcn.00406103
mov word [ebp - 0xb84], ax
mov eax, dword [ebp - 0xb84]
and eax, 0xffff
mov ecx, dword [ebp - 0xb58]
mov dword [ecx + 0xc20], eax
mov ecx, 0x479910
call fcn.00402270
push eax
push 0
push 0x472ac8
push 0x472ad4
call dword [sym.imp.KERNEL32.dll_GetPrivateProfileIntA]
mov dword [ebp - 0x500], eax
cmp dword [ebp - 0x500], 1
jne 0x40edc4
mov ecx, 0x479910
call fcn.00402270
push eax
push 0
push 0x472adc
push 0x472ae8
call dword [sym.imp.KERNEL32.dll_GetPrivateProfileIntA]
mov dword [ebp - 0x650], eax
cmp dword [ebp - 0x650], 1
jne 0x40eda1
push 1
mov ecx, dword [ebp - 0xb58]
add ecx, 0xb64
call fcn.0041b970
mov edx, dword [ebp - 0xb58]
mov dword [edx + 0xba0], 1
jmp 0x40edc4
push 0
mov ecx, dword [ebp - 0xb58]
add ecx, 0xb64
call fcn.0041b970
mov eax, dword [ebp - 0xb58]
mov dword [eax + 0xba0], 0
mov ecx, 0x479910
call fcn.00402270
push eax
push 0
push 0x472af0
push 0x472b04
call dword [sym.imp.KERNEL32.dll_GetPrivateProfileIntA]
mov dword [ebp - 0x500], eax
cmp dword [ebp - 0x500], 1
jne 0x40ee44
mov ecx, 0x479910
call fcn.00402270
push eax
push 0
push 0x472b0c
push 0x472b1c
call dword [sym.imp.KERNEL32.dll_GetPrivateProfileIntA]
mov dword [ebp - 0x654], eax
cmp dword [ebp - 0x654], 1
jne 0x40ee31
push 1
mov ecx, dword [ebp - 0xb58]
add ecx, 0x4d8
call fcn.0041b970
jmp 0x40ee44
push 0
mov ecx, dword [ebp - 0xb58]
add ecx, 0x4d8
call fcn.0041b970
mov ecx, 0x479918
call fcn.00402270
push eax
mov ecx, dword [ebp - 0x2c]
push ecx
push 0x472b24
push 0x472b30
call dword [sym.imp.KERNEL32.dll_GetPrivateProfileIntA]
mov dword [ebp - 0x2c], eax
mov edx, dword [ebp - 0xb58]
mov eax, dword [ebp - 0x2c]
mov dword [edx + 0xc14], eax
mov dword [ebp - 0x244], 1
mov ecx, 0x479918
call fcn.00402270
push eax
mov ecx, dword [ebp - 0x244]
push ecx
push 0x472b38
push 0x472b48
call dword [sym.imp.KERNEL32.dll_GetPrivateProfileIntA]
mov dword [ebp - 0x244], eax
mov edx, dword [ebp - 0xb58]
mov eax, dword [ebp - 0x244]
mov dword [edx + 0x4c], eax
mov ecx, dword [ebp - 0x44]
mov dword [ebp - 0xb88], ecx
cmp dword [ebp - 0xb88], 0
je 0x40eee7
cmp dword [ebp - 0xb88], 1
je 0x40ef83
cmp dword [ebp - 0xb88], 2
je 0x40f01f
jmp 0x40f0b8
lea edx, [ebp - 0x38]
push edx
mov ecx, dword [ebp - 0xb58]
add ecx, 0xc00
call fcn.00455259
mov eax, dword [ebp - 0xb58]
mov dword [eax + 0x998], 0
push 5
mov ecx, dword [ebp - 0xb58]
add ecx, 0x424
call fcn.004548a9
push 0
mov ecx, dword [ebp - 0xb58]
add ecx, 0x370
call fcn.004548a9
push 0
mov ecx, dword [ebp - 0xb58]
add ecx, 0x2f8
call fcn.004548a9
push 0
mov ecx, dword [ebp - 0xb58]
add ecx, 0x67c
call fcn.004548a9
push 0
mov ecx, dword [ebp - 0xb58]
add ecx, 0x514
call fcn.004548a9
push 5
mov ecx, dword [ebp - 0xb58]
add ecx, 0x5c8
call fcn.004548a9
jmp 0x40f130
lea ecx, [ebp - 0x1c]
push ecx
mov ecx, dword [ebp - 0xb58]
add ecx, 0xc00
call fcn.00455259
mov edx, dword [ebp - 0xb58]
mov dword [edx + 0x998], 1
push 0
mov ecx, dword [ebp - 0xb58]
add ecx, 0x424
call fcn.004548a9
push 0
mov ecx, dword [ebp - 0xb58]
add ecx, 0x370
call fcn.004548a9
push 5
mov ecx, dword [ebp - 0xb58]
add ecx, 0x2f8
call fcn.004548a9
push 0
mov ecx, dword [ebp - 0xb58]
add ecx, 0x67c
call fcn.004548a9
push 5
mov ecx, dword [ebp - 0xb58]
add ecx, 0x514
call fcn.004548a9
push 0
mov ecx, dword [ebp - 0xb58]
add ecx, 0x5c8
call fcn.004548a9
jmp 0x40f130
lea eax, [ebp - 0x14]
push eax
mov ecx, dword [ebp - 0xb58]
add ecx, 0xc00
call fcn.00455259
mov ecx, dword [ebp - 0xb58]
mov dword [ecx + 0x998], 0
push 0
mov ecx, dword [ebp - 0xb58]
add ecx, 0x424
call fcn.004548a9
push 5
mov ecx, dword [ebp - 0xb58]
add ecx, 0x370
call fcn.004548a9
push 0
mov ecx, dword [ebp - 0xb58]
add ecx, 0x2f8
call fcn.004548a9
push 5
mov ecx, dword [ebp - 0xb58]
add ecx, 0x67c
call fcn.004548a9
push 0
mov ecx, dword [ebp - 0xb58]
add ecx, 0x514
call fcn.004548a9
push 0
mov ecx, dword [ebp - 0xb58]
add ecx, 0x5c8
call fcn.004548a9
jmp 0x40f130
mov dword [ebp - 0xa88], 0
mov byte [ebp - 4], 6
lea ecx, [ebp - 0x34]
call fcn.00455120
mov byte [ebp - 4], 5
lea ecx, [ebp - 0x30]
call fcn.00455120
mov byte [ebp - 4], 4
lea ecx, [ebp - 0x10]
call fcn.00455120
mov byte [ebp - 4], 3
lea ecx, [ebp - 0x14]
call fcn.00455120
mov byte [ebp - 4], 2
lea ecx, [ebp - 0x1c]
call fcn.00455120
mov byte [ebp - 4], 1
lea ecx, [ebp - 0x38]
call fcn.00455120
mov byte [ebp - 4], 0
lea ecx, [ebp - 0x20]
call fcn.00455120
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x40]
call fcn.00455120
mov eax, dword [ebp - 0xa88]
jmp 0x411d01
mov edx, dword [ebp - 0x24]
mov dword [ebp - 0xb8c], edx
cmp dword [ebp - 0xb8c], 0x64
je 0x40f15c
cmp dword [ebp - 0xb8c], 0xc8
je 0x40f176
cmp dword [ebp - 0xb8c], 0x12c
je 0x40f190
jmp 0x40f1a7
lea eax, [ebp - 0x30]
push eax
mov ecx, dword [ebp - 0xb58]
add ecx, 0xc08
call fcn.00455259
jmp 0x40f21f
lea ecx, [ebp - 0x10]
push ecx
mov ecx, dword [ebp - 0xb58]
add ecx, 0xc08
call fcn.00455259
jmp 0x40f21f
lea edx, [ebp - 0x34]
push edx
mov ecx, dword [ebp - 0xb58]
add ecx, 0xc08
call fcn.00455259
jmp 0x40f21f
mov dword [ebp - 0xa8c], 0
mov byte [ebp - 4], 6
lea ecx, [ebp - 0x34]
call fcn.00455120
mov byte [ebp - 4], 5
lea ecx, [ebp - 0x30]
call fcn.00455120
mov byte [ebp - 4], 4
lea ecx, [ebp - 0x10]
call fcn.00455120
mov byte [ebp - 4], 3
lea ecx, [ebp - 0x14]
call fcn.00455120
mov byte [ebp - 4], 2
lea ecx, [ebp - 0x1c]
call fcn.00455120
mov byte [ebp - 4], 1
lea ecx, [ebp - 0x38]
call fcn.00455120
mov byte [ebp - 4], 0
lea ecx, [ebp - 0x20]
call fcn.00455120
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x40]
call fcn.00455120
mov eax, dword [ebp - 0xa8c]
jmp 0x411d01
mov eax, dword [ebp - 0x23c]
mov dword [ebp - 0xb90], eax
cmp dword [ebp - 0xb90], 0
je 0x40f253
cmp dword [ebp - 0xb90], 1
je 0x40f2ef
cmp dword [ebp - 0xb90], 2
je 0x40f38b
jmp 0x40f424
lea ecx, [ebp - 0x38]
push ecx
mov ecx, dword [ebp - 0xb58]
add ecx, 0xc10
call fcn.00455259
mov edx, dword [ebp - 0xb58]
mov dword [edx + 0x994], 0
push 5
mov ecx, dword [ebp - 0xb58]
add ecx, 0x460
call fcn.004548a9
push 0
mov ecx, dword [ebp - 0xb58]
add ecx, 0x3ac
call fcn.004548a9
push 0
mov ecx, dword [ebp - 0xb58]
add ecx, 0x2bc
call fcn.004548a9
push 0
mov ecx, dword [ebp - 0xb58]
add ecx, 0x6f4
call fcn.004548a9
push 0
mov ecx, dword [ebp - 0xb58]
add ecx, 0x58c
call fcn.004548a9
push 5
mov ecx, dword [ebp - 0xb58]
add ecx, 0x640
call fcn.004548a9
jmp 0x40f49c
lea eax, [ebp - 0x1c]
push eax
mov ecx, dword [ebp - 0xb58]
add ecx, 0xc10
call fcn.00455259
mov ecx, dword [ebp - 0xb58]
mov dword [ecx + 0x994], 1
push 0
mov ecx, dword [ebp - 0xb58]
add ecx, 0x460
call fcn.004548a9
push 0
mov ecx, dword [ebp - 0xb58]
add ecx, 0x3ac
call fcn.004548a9
push 5
mov ecx, dword [ebp - 0xb58]
add ecx, 0x2bc
call fcn.004548a9
push 0
mov ecx, dword [ebp - 0xb58]
add ecx, 0x6f4
call fcn.004548a9
push 5
mov ecx, dword [ebp - 0xb58]
add ecx, 0x58c
call fcn.004548a9
push 0
mov ecx, dword [ebp - 0xb58]
add ecx, 0x640
call fcn.004548a9
jmp 0x40f49c
lea edx, [ebp - 0x14]
push edx
mov ecx, dword [ebp - 0xb58]
add ecx, 0xc10
call fcn.00455259
mov eax, dword [ebp - 0xb58]
mov dword [eax + 0x994], 0
push 0
mov ecx, dword [ebp - 0xb58]
add ecx, 0x460
call fcn.004548a9
push 5
mov ecx, dword [ebp - 0xb58]
add ecx, 0x3ac
call fcn.004548a9
push 0
mov ecx, dword [ebp - 0xb58]
add ecx, 0x2bc
call fcn.004548a9
push 5
mov ecx, dword [ebp - 0xb58]
add ecx, 0x6f4
call fcn.004548a9
push 0
mov ecx, dword [ebp - 0xb58]
add ecx, 0x58c
call fcn.004548a9
push 0
mov ecx, dword [ebp - 0xb58]
add ecx, 0x640
call fcn.004548a9
jmp 0x40f49c
mov dword [ebp - 0xa90], 0
mov byte [ebp - 4], 6
lea ecx, [ebp - 0x34]
call fcn.00455120
mov byte [ebp - 4], 5
lea ecx, [ebp - 0x30]
call fcn.00455120
mov byte [ebp - 4], 4
lea ecx, [ebp - 0x10]
call fcn.00455120
mov byte [ebp - 4], 3
lea ecx, [ebp - 0x14]
call fcn.00455120
mov byte [ebp - 4], 2
lea ecx, [ebp - 0x1c]
call fcn.00455120
mov byte [ebp - 4], 1
lea ecx, [ebp - 0x38]
call fcn.00455120
mov byte [ebp - 4], 0
lea ecx, [ebp - 0x20]
call fcn.00455120
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x40]
call fcn.00455120
mov eax, dword [ebp - 0xa90]
jmp 0x411d01
mov ecx, dword [ebp - 0x28]
mov dword [ebp - 0xb94], ecx
cmp dword [ebp - 0xb94], 0
je 0x40f4cd
cmp dword [ebp - 0xb94], 1
je 0x40f5b9
cmp dword [ebp - 0xb94], 2
je 0x40f675
jmp 0x40f72e
lea edx, [ebp - 0x38]
push edx
mov ecx, dword [ebp - 0xb58]
add ecx, 0xc0c
call fcn.00455259
mov eax, dword [ebp - 0xb58]
mov dword [eax + 0x99c], 0
mov ecx, dword [ebp - 0xb58]
mov dword [ecx + 0xc38], 0
mov edx, dword [ebp - 0xb58]
mov dword [edx + 0xc44], 0
mov eax, dword [ebp - 0xb58]
mov dword [eax + 0xb8], 0
push 5
mov ecx, dword [ebp - 0xb58]
add ecx, 0x49c
call fcn.004548a9
push 0
mov ecx, dword [ebp - 0xb58]
add ecx, 0x3e8
call fcn.004548a9
push 0
mov ecx, dword [ebp - 0xb58]
add ecx, 0x334
call fcn.004548a9
push 0
mov ecx, dword [ebp - 0xb58]
add ecx, 0x6b8
call fcn.004548a9
push 0
mov ecx, dword [ebp - 0xb58]
add ecx, 0x550
call fcn.004548a9
push 5
mov ecx, dword [ebp - 0xb58]
add ecx, 0x604
call fcn.004548a9
push 5
mov ecx, dword [ebp - 0xb58]
add ecx, 0x7c
call fcn.004548a9
push 1
mov ecx, dword [ebp - 0xb58]
add ecx, 0x7c
call fcn.004548eb
jmp 0x40f7a6
lea ecx, [ebp - 0x1c]
push ecx
mov ecx, dword [ebp - 0xb58]
add ecx, 0xc0c
call fcn.00455259
mov edx, dword [ebp - 0xb58]
mov dword [edx + 0x99c], 1
push 0
mov ecx, dword [ebp - 0xb58]
add ecx, 0x49c
call fcn.004548a9
push 0
mov ecx, dword [ebp - 0xb58]
add ecx, 0x3e8
call fcn.004548a9
push 5
mov ecx, dword [ebp - 0xb58]
add ecx, 0x334
call fcn.004548a9
push 0
mov ecx, dword [ebp - 0xb58]
add ecx, 0x6b8
call fcn.004548a9
push 5
mov ecx, dword [ebp - 0xb58]
add ecx, 0x550
call fcn.004548a9
push 0
mov ecx, dword [ebp - 0xb58]
add ecx, 0x604
call fcn.004548a9
push 5
mov ecx, dword [ebp - 0xb58]
add ecx, 0x7c
call fcn.004548a9
push 1
mov ecx, dword [ebp - 0xb58]
add ecx, 0x7c
call fcn.004548eb
jmp 0x40f7a6
lea eax, [ebp - 0x14]
push eax
mov ecx, dword [ebp - 0xb58]
add ecx, 0xc0c
call fcn.00455259
mov ecx, dword [ebp - 0xb58]
mov dword [ecx + 0x99c], 0
push 0
mov ecx, dword [ebp - 0xb58]
add ecx, 0x49c
call fcn.004548a9
push 5
mov ecx, dword [ebp - 0xb58]
add ecx, 0x3e8
call fcn.004548a9
push 0
mov ecx, dword [ebp - 0xb58]
add ecx, 0x334
call fcn.004548a9
push 5
mov ecx, dword [ebp - 0xb58]
add ecx, 0x6b8
call fcn.004548a9
push 0
mov ecx, dword [ebp - 0xb58]
add ecx, 0x550
call fcn.004548a9
push 0
mov ecx, dword [ebp - 0xb58]
add ecx, 0x604
call fcn.004548a9
push 5
mov ecx, dword [ebp - 0xb58]
add ecx, 0x7c
call fcn.004548a9
push 0
mov ecx, dword [ebp - 0xb58]
add ecx, 0x7c
call fcn.004548eb
jmp 0x40f7a6
mov dword [ebp - 0xa94], 0
mov byte [ebp - 4], 6
lea ecx, [ebp - 0x34]
call fcn.00455120
mov byte [ebp - 4], 5
lea ecx, [ebp - 0x30]
call fcn.00455120
mov byte [ebp - 4], 4
lea ecx, [ebp - 0x10]
call fcn.00455120
mov byte [ebp - 4], 3
lea ecx, [ebp - 0x14]
call fcn.00455120
mov byte [ebp - 4], 2
lea ecx, [ebp - 0x1c]
call fcn.00455120
mov byte [ebp - 4], 1
lea ecx, [ebp - 0x38]
call fcn.00455120
mov byte [ebp - 4], 0
lea ecx, [ebp - 0x20]
call fcn.00455120
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x40]
call fcn.00455120
mov eax, dword [ebp - 0xa94]
jmp 0x411d01
mov ecx, dword [ebp - 0xb58]
call fcn.00415cad
mov ecx, 0x479910
call fcn.00402270
push eax
push 0xc8
lea edx, [ebp - 0x424]
push edx
push 0x4796f0
push 0x472b50
push 0x472b60
call dword [sym.imp.KERNEL32.dll_GetPrivateProfileStringA]
mov dword [ebp - 0x42c], eax
cmp dword [ebp - 0x42c], 0
jne 0x40f81e
mov ecx, 0x479910
call fcn.00402270
push eax
push 0xc8
lea eax, [ebp - 0x424]
push eax
push 0x4796f4
push 0x472b68
push 0x472b78
call dword [sym.imp.KERNEL32.dll_GetPrivateProfileStringA]
mov dword [ebp - 0x42c], eax
push 0
lea ecx, [ebp - 0x424]
push ecx
mov edx, dword [ebp - 0x42c]
push edx
mov ecx, dword [ebp - 0xb58]
add ecx, 0x918
call fcn.004045d9
mov ecx, dword [ebp - 0xb58]
mov dword [ecx + 0xc1c], eax
mov ecx, 0x479910
call fcn.00402270
push eax
push 1
push 0x472b84
push 0x472b94
call dword [sym.imp.KERNEL32.dll_GetPrivateProfileIntA]
mov dword [ebp - 0x428], eax
mov edx, dword [ebp - 0xb58]
mov eax, dword [ebp - 0x428]
mov dword [edx + 0x990], eax
cmp dword [ebp - 0x428], 0
jne 0x40f89b
mov ecx, dword [ebp - 0xb58]
mov dword [ecx + 0xc24], 0
jmp 0x40f8ab
mov edx, dword [ebp - 0xb58]
mov dword [edx + 0xc24], 1
mov ecx, 0x479910
call fcn.00402270
push eax
push 1
push 0x472b9c
push 0x472bac
call dword [sym.imp.KERNEL32.dll_GetPrivateProfileIntA]
mov dword [ebp - 0x240], eax
cmp dword [ebp - 0x240], 0
jne 0x40f8e9
mov eax, dword [ebp - 0xb58]
mov dword [eax + 0xc34], 0
jmp 0x40f8f9
mov ecx, dword [ebp - 0xb58]
mov dword [ecx + 0xc34], 1
mov ecx, 0x479910
call fcn.00402270
push eax
push 1
push 0x472bb4
push 0x472bc4
call dword [sym.imp.KERNEL32.dll_GetPrivateProfileIntA]
mov dword [ebp - 0x35c], eax
cmp dword [ebp - 0x35c], 0
jne 0x40f937
mov edx, dword [ebp - 0xb58]
mov dword [edx + 0xc40], 0
jmp 0x40f947
mov eax, dword [ebp - 0xb58]
mov dword [eax + 0xc40], 1
mov ecx, 0x479910
call fcn.00402270
push eax
push 0
push 0x472bcc
push 0x472bdc
call dword [sym.imp.KERNEL32.dll_GetPrivateProfileIntA]
mov dword [ebp - 0x428], eax
mov ecx, dword [ebp - 0xb58]
mov edx, dword [ebp - 0x428]
mov dword [ecx + 0x990], edx
cmp dword [ebp - 0x428], 0
jne 0x40f997
mov eax, dword [ebp - 0xb58]
mov dword [eax + 0xc2c], 0
jmp 0x40f9a7
mov ecx, dword [ebp - 0xb58]
mov dword [ecx + 0xc2c], 1
mov ecx, 0x479910
call fcn.00402270
push eax
push 1
push 0x472be4
push 0x472bf4
call dword [sym.imp.KERNEL32.dll_GetPrivateProfileIntA]
mov dword [ebp - 0x240], eax
cmp dword [ebp - 0x240], 0
jne 0x40f9e5
mov edx, dword [ebp - 0xb58]
mov dword [edx + 0xc30], 0
jmp 0x40f9f5
mov eax, dword [ebp - 0xb58]
mov dword [eax + 0xc30], 1
mov ecx, 0x479910
call fcn.00402270
push eax
push 1
push 0x472bfc
push 0x472c0c
call dword [sym.imp.KERNEL32.dll_GetPrivateProfileIntA]
mov dword [ebp - 0x35c], eax
cmp dword [ebp - 0x35c], 0
jne 0x40fa33
mov ecx, dword [ebp - 0xb58]
mov dword [ecx + 0xc3c], 0
jmp 0x40fa43
mov edx, dword [ebp - 0xb58]
mov dword [edx + 0xc3c], 1
mov ecx, 0x479910
call fcn.00402270
push eax
push 0
push 0x472c14
push 0x472c24
call dword [sym.imp.KERNEL32.dll_GetPrivateProfileIntA]
mov dword [ebp - 0x428], eax
mov eax, dword [ebp - 0xb58]
mov ecx, dword [ebp - 0x428]
mov dword [eax + 0x990], ecx
cmp dword [ebp - 0x428], 0
jne 0x40fa93
mov edx, dword [ebp - 0xb58]
mov dword [edx + 0xc28], 0
jmp 0x40faa3
mov eax, dword [ebp - 0xb58]
mov dword [eax + 0xc28], 1
mov ecx, 0x479910
call fcn.00402270
push eax
push 1
push 0x472c2c
push 0x472c3c
call dword [sym.imp.KERNEL32.dll_GetPrivateProfileIntA]
mov dword [ebp - 0x240], eax
cmp dword [ebp - 0x240], 0
jne 0x40fae1
mov ecx, dword [ebp - 0xb58]
mov dword [ecx + 0xc38], 0
jmp 0x40faf1
mov edx, dword [ebp - 0xb58]
mov dword [edx + 0xc38], 1
mov ecx, 0x479910
call fcn.00402270
push eax
push 1
push 0x472c44
push 0x472c54
call dword [sym.imp.KERNEL32.dll_GetPrivateProfileIntA]
mov dword [ebp - 0x35c], eax
cmp dword [ebp - 0x35c], 0
jne 0x40fb2f
mov eax, dword [ebp - 0xb58]
mov dword [eax + 0xc44], 0
jmp 0x40fb3f
mov ecx, dword [ebp - 0xb58]
mov dword [ecx + 0xc44], 1
mov ecx, 0x479910
call fcn.00402270
push eax
push 0
push 0x472c5c
push 0x472c68
call dword [sym.imp.KERNEL32.dll_GetPrivateProfileIntA]
mov dword [ebp - 0x4f8], eax
cmp dword [ebp - 0x4f8], 0
jne 0x40fb7d
mov edx, dword [ebp - 0xb58]
mov dword [edx + 0xb8], 0
jmp 0x40fb8d
mov eax, dword [ebp - 0xb58]
mov dword [eax + 0xb8], 1
mov ecx, dword [ebp - 0xb58]
call fcn.00411d70
push 0
mov ecx, dword [ebp - 0xb58]
call fcn.00453d7d
mov ecx, 0x479910
call fcn.00402270
push eax
push 0
push 0x472c70
push 0x472c7c
call dword [sym.imp.KERNEL32.dll_GetPrivateProfileIntA]
mov dword [ebp - 0x500], eax
cmp dword [ebp - 0x500], 1
jne 0x40fbee
mov ecx, dword [ebp - 0xb58]
mov edx, dword [ecx + 0xba0]
push edx
mov ecx, dword [ebp - 0xb58]
call fcn.00418b40
jmp 0x410436
mov ecx, 0x479910
call fcn.00402270
push eax
push 0
push 0x472c84
push 0x472c98
call dword [sym.imp.KERNEL32.dll_GetPrivateProfileIntA]
mov dword [ebp - 0x66c], eax
cmp dword [ebp - 0x66c], 1
jne 0x40fc6c
mov ecx, dword [ebp - 0xb58]
add ecx, 0x4d8
call fcn.0041b940
cmp eax, 1
jne 0x40fc6c
mov eax, dword [ebp - 0xb58]
xor ecx, ecx
cmp dword [eax + 0xba4], 0
sete cl
mov edx, dword [ebp - 0xb58]
mov dword [edx + 0xba4], ecx
mov eax, dword [ebp - 0xb58]
mov ecx, dword [eax + 0xba4]
push ecx
mov ecx, dword [ebp - 0xb58]
add ecx, 0x4d8
call fcn.0041b970
push 1
mov ecx, dword [ebp - 0xb58]
call fcn.00453d7d
mov edx, dword [ebp - 0xb58]
cmp dword [edx + 0xba4], 0
je 0x40fd17
push 0x2e
mov ecx, dword [ebp - 0xb58]
add ecx, 0xc04
call fcn.0044fa9b
mov dword [ebp - 0x670], eax
mov eax, dword [ebp - 0x670]
push eax
lea ecx, [ebp - 0xa98]
push ecx
mov ecx, dword [ebp - 0xb58]
add ecx, 0xc04
call fcn.0044fa23
mov dword [ebp - 0xb98], eax
mov edx, dword [ebp - 0xb98]
mov dword [ebp - 0xb9c], edx
mov byte [ebp - 4], 0x14
mov eax, dword [ebp - 0xb9c]
push eax
mov ecx, dword [ebp - 0xb58]
add ecx, 0xc04
call fcn.00455259
mov byte [ebp - 4], 7
lea ecx, [ebp - 0xa98]
call fcn.00455120
push 0x472ca0
mov ecx, dword [ebp - 0xb58]
add ecx, 0xc04
call fcn.00455488
push 0
mov ecx, dword [ebp - 0xb58]
call fcn.00453d7d
push 0x3f7
mov ecx, dword [ebp - 0xb58]
call fcn.004546e9
mov dword [ebp - 0x664], eax
mov ecx, dword [ebp - 0x664]
call fcn.0041ba80
mov ecx, dword [ebp - 0xb58]
call fcn.0041b0df
mov dword [ebp - 0x660], eax
mov ecx, dword [ebp - 0xb58]
add ecx, 0x974
call fcn.00407170
mov dword [ebp - 0x658], eax
mov dword [ebp - 0x65c], 0
mov ecx, dword [ebp - 0xb58]
add ecx, 0x68
call fcn.00407190
mov dword [ebp - 0x668], 0
jmp 0x40fda0
mov ecx, dword [ebp - 0x668]
add ecx, 1
mov dword [ebp - 0x668], ecx
mov edx, dword [ebp - 0x668]
cmp edx, dword [ebp - 0x658]
jge 0x410436
mov eax, dword [ebp - 0xb58]
cmp dword [eax + 0xba4], 0
je 0x410322
push 0x472ca8
mov ecx, dword [ebp - 0x668]
push ecx
lea edx, [ebp - 0xaa0]
push edx
mov ecx, dword [ebp - 0xb58]
add ecx, 0x974
call fcn.004071b0
mov dword [ebp - 0xba0], eax
mov eax, dword [ebp - 0xba0]
mov dword [ebp - 0xba4], eax
mov byte [ebp - 4], 0x15
mov ecx, dword [ebp - 0xba4]
call fcn.00402280
neg eax
sbb eax, eax
inc eax
mov byte [ebp - 0xa9c], al
mov byte [ebp - 4], 7
lea ecx, [ebp - 0xaa0]
call fcn.00455120
mov ecx, dword [ebp - 0xa9c]
and ecx, 0xff
test ecx, ecx
je 0x40fefd
mov dl, byte [0x4796f8]
mov byte [ebp - 0x6d8], dl
mov ecx, 0x18
xor eax, eax
lea edi, [ebp - 0x6d7]
rep stosd dword es:[edi], eax
stosw word es:[edi], ax
stosb byte es:[edi], al
push 0x64
lea eax, [ebp - 0x6d8]
push eax
push 0x147
mov ecx, 0x479934
call fcn.0041c0a1
push 0x4796fc
lea ecx, [ebp - 0x674]
call fcn.0045518e
mov byte [ebp - 4], 0x16
lea ecx, [ebp - 0x6d8]
push ecx
push 0x472cb0
lea edx, [ebp - 0x674]
push edx
call fcn.0044fdfe
add esp, 0xc
lea ecx, [ebp - 0x674]
call fcn.00402270
push eax
mov ecx, dword [ebp - 0x664]
call fcn.0041ba50
push 0x472cb4
mov eax, dword [ebp - 0x65c]
mov dword [ebp - 0xba8], eax
mov ecx, dword [ebp - 0xba8]
push ecx
mov edx, dword [ebp - 0x65c]
add edx, 1
mov dword [ebp - 0x65c], edx
mov ecx, dword [ebp - 0xb58]
add ecx, 0x68
call fcn.004512a8
mov byte [ebp - 4], 7
lea ecx, [ebp - 0x674]
call fcn.00455120
jmp 0x41031d
push 0x472cbc
mov eax, dword [ebp - 0x668]
push eax
lea ecx, [ebp - 0xaa8]
push ecx
mov ecx, dword [ebp - 0xb58]
add ecx, 0x974
call fcn.004071b0
mov dword [ebp - 0xbac], eax
mov edx, dword [ebp - 0xbac]
mov dword [ebp - 0xbb0], edx
mov byte [ebp - 4], 0x17
mov ecx, dword [ebp - 0xbb0]
call fcn.00402280
neg eax
sbb eax, eax
inc eax
mov byte [ebp - 0xaa4], al
mov byte [ebp - 4], 7
lea ecx, [ebp - 0xaa8]
call fcn.00455120
mov eax, dword [ebp - 0xaa4]
and eax, 0xff
test eax, eax
je 0x41004a
mov ecx, dword [ebp - 0x668]
push ecx
lea edx, [ebp - 0xaac]
push edx
mov ecx, dword [ebp - 0xb58]
add ecx, 0x974
call fcn.004071b0
mov dword [ebp - 0xbb4], eax
mov eax, dword [ebp - 0xbb4]
mov dword [ebp - 0xbb8], eax
mov byte [ebp - 4], 0x18
mov ecx, dword [ebp - 0xbb8]
call fcn.00402270
push eax
mov ecx, dword [ebp - 0x664]
call fcn.0041ba50
mov byte [ebp - 4], 7
lea ecx, [ebp - 0xaac]
call fcn.00455120
mov ecx, dword [ebp - 0x668]
push ecx
lea edx, [ebp - 0xab0]
push edx
mov ecx, dword [ebp - 0xb58]
add ecx, 0x974
call fcn.004071b0
mov dword [ebp - 0xbbc], eax
mov eax, dword [ebp - 0xbbc]
mov dword [ebp - 0xbc0], eax
mov byte [ebp - 4], 0x19
mov ecx, dword [ebp - 0xbc0]
push ecx
mov edx, dword [ebp - 0x65c]
mov dword [ebp - 0xbc4], edx
mov eax, dword [ebp - 0xbc4]
push eax
mov ecx, dword [ebp - 0x65c]
add ecx, 1
mov dword [ebp - 0x65c], ecx
mov ecx, dword [ebp - 0xb58]
add ecx, 0x68
call fcn.004512d4
mov byte [ebp - 4], 7
lea ecx, [ebp - 0xab0]
call fcn.00455120
jmp 0x41031d
push 0x472cc4
mov edx, dword [ebp - 0x668]
push edx
lea eax, [ebp - 0xab8]
push eax
mov ecx, dword [ebp - 0xb58]
add ecx, 0x974
call fcn.004071b0
mov dword [ebp - 0xbc8], eax
mov ecx, dword [ebp - 0xbc8]
mov dword [ebp - 0xbcc], ecx
mov byte [ebp - 4], 0x1a
mov ecx, dword [ebp - 0xbcc]
call fcn.00402280
test eax, eax
jne 0x4100c0
xor edx, edx
cmp dword [ebp - 0x660], 3
setge dl
mov byte [ebp - 0xabc], dl
mov eax, dword [ebp - 0xabc]
and eax, 0xff
test eax, eax
je 0x4100c0
mov dword [ebp - 0xbd0], 1
jmp 0x4100ca
mov dword [ebp - 0xbd0], 0
mov cl, byte [ebp - 0xbd0]
mov byte [ebp - 0xab4], cl
mov byte [ebp - 4], 7
lea ecx, [ebp - 0xab8]
call fcn.00455120
mov edx, dword [ebp - 0xab4]
and edx, 0xff
test edx, edx
je 0x4101d4
mov eax, dword [ebp - 0x668]
push eax
lea ecx, [ebp - 0xac0]
push ecx
mov ecx, dword [ebp - 0xb58]
add ecx, 0x974
call fcn.004071b0
mov dword [ebp - 0xbd4], eax
mov edx, dword [ebp - 0xbd4]
mov dword [ebp - 0xbd8], edx
mov byte [ebp - 4], 0x1b
mov ecx, dword [ebp - 0xbd8]
call fcn.00402270
push eax
mov ecx, dword [ebp - 0x664]
call fcn.0041ba50
mov byte [ebp - 4], 7
lea ecx, [ebp - 0xac0]
call fcn.00455120
mov eax, dword [ebp - 0x668]
push eax
lea ecx, [ebp - 0xac4]
push ecx
mov ecx, dword [ebp - 0xb58]
add ecx, 0x974
call fcn.004071b0
mov dword [ebp - 0xbdc], eax
mov edx, dword [ebp - 0xbdc]
mov dword [ebp - 0xbe0], edx
mov byte [ebp - 4], 0x1c
mov eax, dword [ebp - 0xbe0]
push eax
mov ecx, dword [ebp - 0x65c]
mov dword [ebp - 0xbe4], ecx
mov edx, dword [ebp - 0xbe4]
push edx
mov eax, dword [ebp - 0x65c]
add eax, 1
mov dword [ebp - 0x65c], eax
mov ecx, dword [ebp - 0xb58]
add ecx, 0x68
call fcn.004512d4
mov byte [ebp - 4], 7
lea ecx, [ebp - 0xac4]
call fcn.00455120
jmp 0x41031d
push 0x472ccc
mov ecx, dword [ebp - 0x668]
push ecx
lea edx, [ebp - 0xacc]
push edx
mov ecx, dword [ebp - 0xb58]
add ecx, 0x974
call fcn.004071b0
mov dword [ebp - 0xbe8], eax
mov eax, dword [ebp - 0xbe8]
mov dword [ebp - 0xbec], eax
mov byte [ebp - 4], 0x1d
mov ecx, dword [ebp - 0xbec]
call fcn.00402280
neg eax
sbb eax, eax
inc eax
mov byte [ebp - 0xac8], al
mov byte [ebp - 4], 7
lea ecx, [ebp - 0xacc]
call fcn.00455120
mov ecx, dword [ebp - 0xac8]
and ecx, 0xff
test ecx, ecx
je 0x41031d
mov edx, dword [ebp - 0x668]
push edx
lea eax, [ebp - 0xad0]
push eax
mov ecx, dword [ebp - 0xb58]
add ecx, 0x974
call fcn.004071b0
mov dword [ebp - 0xbf0], eax
mov ecx, dword [ebp - 0xbf0]
mov dword [ebp - 0xbf4], ecx
mov byte [ebp - 4], 0x1e
mov ecx, dword [ebp - 0xbf4]
call fcn.00402270
push eax
mov ecx, dword [ebp - 0x664]
call fcn.0041ba50
mov byte [ebp - 4], 7
lea ecx, [ebp - 0xad0]
call fcn.00455120
mov edx, dword [ebp - 0x668]
push edx
lea eax, [ebp - 0xad4]
push eax
mov ecx, dword [ebp - 0xb58]
add ecx, 0x974
call fcn.004071b0
mov dword [ebp - 0xbf8], eax
mov ecx, dword [ebp - 0xbf8]
mov dword [ebp - 0xbfc], ecx
mov byte [ebp - 4], 0x1f
mov edx, dword [ebp - 0xbfc]
push edx
mov eax, dword [ebp - 0x65c]
mov dword [ebp - 0xc00], eax
mov ecx, dword [ebp - 0xc00]
push ecx
mov edx, dword [ebp - 0x65c]
add edx, 1
mov dword [ebp - 0x65c], edx
mov ecx, dword [ebp - 0xb58]
add ecx, 0x68
call fcn.004512d4
mov byte [ebp - 4], 7
lea ecx, [ebp - 0xad4]
call fcn.00455120
jmp 0x410431
cmp dword [ebp - 0x668], 0
jne 0x4103be
mov al, byte [0x479700]
mov byte [ebp - 0x740], al
mov ecx, 0x18
xor eax, eax
lea edi, [ebp - 0x73f]
rep stosd dword es:[edi], eax
stosw word es:[edi], ax
stosb byte es:[edi], al
push 0x64
lea ecx, [ebp - 0x740]
push ecx
push 0x147
mov ecx, 0x479934
call fcn.0041c0a1
push 0x479704
lea ecx, [ebp - 0x6dc]
call fcn.0045518e
mov byte [ebp - 4], 0x20
lea edx, [ebp - 0x740]
push edx
push 0x472ce0
lea eax, [ebp - 0x6dc]
push eax
call fcn.0044fdfe
add esp, 0xc
lea ecx, [ebp - 0x6dc]
call fcn.00402270
push eax
mov ecx, dword [ebp - 0x664]
call fcn.0041ba50
mov byte [ebp - 4], 7
lea ecx, [ebp - 0x6dc]
call fcn.00455120
jmp 0x40fd91
mov ecx, dword [ebp - 0x668]
push ecx
lea edx, [ebp - 0xad8]
push edx
mov ecx, dword [ebp - 0xb58]
add ecx, 0x974
call fcn.004071b0
mov dword [ebp - 0xc04], eax
mov eax, dword [ebp - 0xc04]
mov dword [ebp - 0xc08], eax
mov byte [ebp - 4], 0x21
mov ecx, dword [ebp - 0xc08]
call fcn.00402270
push eax
mov ecx, dword [ebp - 0x664]
call fcn.0041ba50
mov byte [ebp - 4], 7
lea ecx, [ebp - 0xad8]
call fcn.00455120
mov ecx, dword [ebp - 0xb58]
mov edx, dword [ecx + 0xc20]
push edx
mov ecx, dword [ebp - 0x664]
call fcn.0041ba20
jmp 0x40fd91
mov ecx, 0x479910
call fcn.00402270
push eax
push 0
push str.Multiple_Show
push 0x472cf4
call dword [sym.imp.KERNEL32.dll_GetPrivateProfileIntA]
mov dword [ebp - 0x500], eax
mov ecx, dword [ebp - 0xb58]
call fcn.004161ca
push 1
mov ecx, dword [ebp - 0xb58]
call fcn.00453d7d
mov dword [ebp - 0xadc], 1
mov byte [ebp - 4], 6
lea ecx, [ebp - 0x34]
call fcn.00455120
mov byte [ebp - 4], 5
lea ecx, [ebp - 0x30]
call fcn.00455120
mov byte [ebp - 4], 4
lea ecx, [ebp - 0x10]
call fcn.00455120
mov byte [ebp - 4], 3
lea ecx, [ebp - 0x14]
call fcn.00455120
mov byte [ebp - 4], 2
lea ecx, [ebp - 0x1c]
call fcn.00455120
mov byte [ebp - 4], 1
lea ecx, [ebp - 0x38]
call fcn.00455120
mov byte [ebp - 4], 0
lea ecx, [ebp - 0x20]
call fcn.00455120
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x40]
call fcn.00455120
mov eax, dword [ebp - 0xadc]
jmp 0x411d01
lea eax, [ebp - 0x38]
push eax
mov ecx, dword [ebp - 0xb58]
add ecx, 0xc00
push ecx
call fcn.0041b480
and eax, 0xff
test eax, eax
je 0x41052d
mov ecx, 0x479910
call fcn.00402270
push eax
push 0x472cfc
push 0x472d00
push 0x472d0c
call dword [sym.imp.KERNEL32.dll_WritePrivateProfileStringA]
jmp 0x410629
lea edx, [ebp - 0x1c]
push edx
mov eax, dword [ebp - 0xb58]
add eax, 0xc00
push eax
call fcn.0041b480
and eax, 0xff
test eax, eax
je 0x410570
mov ecx, 0x479910
call fcn.00402270
push eax
push 0x472d14
push 0x472d18
push 0x472d24
call dword [sym.imp.KERNEL32.dll_WritePrivateProfileStringA]
jmp 0x410629
lea ecx, [ebp - 0x14]
push ecx
mov edx, dword [ebp - 0xb58]
add edx, 0xc00
push edx
call fcn.0041b480
and eax, 0xff
test eax, eax
je 0x4105b1
mov ecx, 0x479910
call fcn.00402270
push eax
push 0x472d2c
push 0x472d30
push 0x472d3c
call dword [sym.imp.KERNEL32.dll_WritePrivateProfileStringA]
jmp 0x410629
mov dword [ebp - 0xae0], 0
mov byte [ebp - 4], 6
lea ecx, [ebp - 0x34]
call fcn.00455120
mov byte [ebp - 4], 5
lea ecx, [ebp - 0x30]
call fcn.00455120
mov byte [ebp - 4], 4
lea ecx, [ebp - 0x10]
call fcn.00455120
mov byte [ebp - 4], 3
lea ecx, [ebp - 0x14]
call fcn.00455120
mov byte [ebp - 4], 2
lea ecx, [ebp - 0x1c]
call fcn.00455120
mov byte [ebp - 4], 1
lea ecx, [ebp - 0x38]
call fcn.00455120
mov byte [ebp - 4], 0
lea ecx, [ebp - 0x20]
call fcn.00455120
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x40]
call fcn.00455120
mov eax, dword [ebp - 0xae0]
jmp 0x411d01
mov eax, dword [ebp - 0xb58]
cmp dword [eax + 0xc2c], 0
je 0x41065a
mov ecx, 0x479910
call fcn.00402270
push eax
push 0x472d44
push 0x472d48
push 0x472d58
call dword [sym.imp.KERNEL32.dll_WritePrivateProfileStringA]
jmp 0x41067a
mov ecx, 0x479910
call fcn.00402270
push eax
push 0x472d60
push 0x472d64
push 0x472d74
call dword [sym.imp.KERNEL32.dll_WritePrivateProfileStringA]
mov ecx, dword [ebp - 0xb58]
cmp dword [ecx + 0xc30], 0
je 0x4106ab
mov ecx, 0x479910
call fcn.00402270
push eax
push 0x472d7c
push 0x472d80
push 0x472d90
call dword [sym.imp.KERNEL32.dll_WritePrivateProfileStringA]
jmp 0x4106cb
mov ecx, 0x479910
call fcn.00402270
push eax
push 0x472d98
push 0x472d9c
push 0x472dac
call dword [sym.imp.KERNEL32.dll_WritePrivateProfileStringA]
mov edx, dword [ebp - 0xb58]
cmp dword [edx + 0xc3c], 0
je 0x4106fc
mov ecx, 0x479910
call fcn.00402270
push eax
push 0x472db4
push 0x472db8
push 0x472dc8
call dword [sym.imp.KERNEL32.dll_WritePrivateProfileStringA]
jmp 0x41071c
mov ecx, 0x479910
call fcn.00402270
push eax
push 0x472dd0
push 0x472dd4
push 0x472de4
call dword [sym.imp.KERNEL32.dll_WritePrivateProfileStringA]
lea eax, [ebp - 0x30]
push eax
mov ecx, dword [ebp - 0xb58]
add ecx, 0xc08
push ecx
call fcn.0041b480
and eax, 0xff
test eax, eax
je 0x410760
mov ecx, 0x479910
call fcn.00402270
push eax
push 0x472dec
push 0x472df0
push 0x472dfc
call dword [sym.imp.KERNEL32.dll_WritePrivateProfileStringA]
jmp 0x41085c
lea edx, [ebp - 0x10]
push edx
mov eax, dword [ebp - 0xb58]
add eax, 0xc08
push eax
call fcn.0041b480
and eax, 0xff
test eax, eax
je 0x4107a3
mov ecx, 0x479910
call fcn.00402270
push eax
push 0x472e04
push 0x472e08
push 0x472e14
call dword [sym.imp.KERNEL32.dll_WritePrivateProfileStringA]
jmp 0x41085c
lea ecx, [ebp - 0x34]
push ecx
mov edx, dword [ebp - 0xb58]
add edx, 0xc08
push edx
call fcn.0041b480
and eax, 0xff
test eax, eax
je 0x4107e4
mov ecx, 0x479910
call fcn.00402270
push eax
push 0x472e1c
push str.HW_ScanRes
push 0x472e2c
call dword [sym.imp.KERNEL32.dll_WritePrivateProfileStringA]
jmp 0x41085c
mov dword [ebp - 0xae4], 0
mov byte [ebp - 4], 6
lea ecx, [ebp - 0x34]
call fcn.00455120
mov byte [ebp - 4], 5
lea ecx, [ebp - 0x30]
call fcn.00455120
mov byte [ebp - 4], 4
lea ecx, [ebp - 0x10]
call fcn.00455120
mov byte [ebp - 4], 3
lea ecx, [ebp - 0x14]
call fcn.00455120
mov byte [ebp - 4], 2
lea ecx, [ebp - 0x1c]
call fcn.00455120
mov byte [ebp - 4], 1
lea ecx, [ebp - 0x38]
call fcn.00455120
mov byte [ebp - 4], 0
lea ecx, [ebp - 0x20]
call fcn.00455120
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x40]
call fcn.00455120
mov eax, dword [ebp - 0xae4]
jmp 0x411d01
mov eax, dword [ebp - 0xb58]
cmp dword [eax + 0xba4], 0
je 0x4108db
mov ecx, 0x479910
call fcn.00402270
push eax
mov ecx, dword [ebp - 0xb58]
mov edx, dword [ecx + 0xc20]
push edx
lea eax, [ebp - 0xae8]
push eax
mov ecx, dword [ebp - 0xb58]
add ecx, 0x68
call fcn.004071b0
mov dword [ebp - 0xc0c], eax
mov ecx, dword [ebp - 0xc0c]
mov dword [ebp - 0xc10], ecx
mov byte [ebp - 4], 0x22
mov ecx, dword [ebp - 0xc10]
call fcn.00402270
push eax
push 0x472e34
push 0x472e40
call dword [sym.imp.KERNEL32.dll_WritePrivateProfileStringA]
mov byte [ebp - 4], 7
lea ecx, [ebp - 0xae8]
call fcn.00455120
jmp 0x41094c
mov ecx, 0x479910
call fcn.00402270
push eax
mov edx, dword [ebp - 0xb58]
mov eax, dword [edx + 0xc20]
push eax
lea ecx, [ebp - 0xaec]
push ecx
mov ecx, dword [ebp - 0xb58]
add ecx, 0x974
call fcn.004071b0
mov dword [ebp - 0xc14], eax
mov edx, dword [ebp - 0xc14]
mov dword [ebp - 0xc18], edx
mov byte [ebp - 4], 0x23
mov ecx, dword [ebp - 0xc18]
call fcn.00402270
push eax
push 0x472e48
push 0x472e54
call dword [sym.imp.KERNEL32.dll_WritePrivateProfileStringA]
mov byte [ebp - 4], 7
lea ecx, [ebp - 0xaec]
call fcn.00455120
mov ecx, dword [ebp - 0xb58]
add ecx, 0x68
call fcn.00407190
mov eax, dword [ebp - 0xb58]
cmp dword [eax + 0xba0], 0
je 0x4109c0
mov ecx, dword [ebp - 0xb58]
add ecx, 0x918
call fcn.00406e06
test eax, eax
je 0x4109a0
mov ecx, 0x479910
call fcn.00402270
push eax
push 0x472e5c
push 0x472e6c
push 0x472e78
call dword [sym.imp.KERNEL32.dll_WritePrivateProfileStringA]
jmp 0x4109c0
mov ecx, 0x479910
call fcn.00402270
push eax
push 0x472e80
push 0x472e88
push 0x472e94
call dword [sym.imp.KERNEL32.dll_WritePrivateProfileStringA]
mov ecx, 0x479910
call fcn.00402270
push eax
mov ecx, dword [ebp - 0x18]
push ecx
push 0x472e9c
push 0x472ea8
call dword [sym.imp.KERNEL32.dll_GetPrivateProfileIntA]
mov dword [ebp - 0x18], eax
mov dword [ebp - 0x748], 0x472eb0
lea edx, [ebp - 0xa54]
push edx
push 0x20019
push 0
mov eax, dword [ebp - 0x748]
push eax
push SysReAllocString
call dword [sym.imp.ADVAPI32.dll_RegOpenKeyExA]
mov dword [ebp - 0x74c], eax
cmp dword [ebp - 0x74c], 0
je 0x410a28
push 0x479708
lea ecx, [ebp - 0x40]
call fcn.004552a9
mov dword [ebp - 0x968], 0x104
lea ecx, [ebp - 0x968]
push ecx
lea edx, [ebp - 0x95c]
push edx
push 0
push 0
push 0x472ed8
mov eax, dword [ebp - 0xa54]
push eax
call dword [sym.imp.ADVAPI32.dll_RegQueryValueExA]
mov dword [ebp - 0x858], eax
cmp dword [ebp - 0x858], 0
je 0x410a74
push 0x47970c
lea ecx, [ebp - 0x40]
call fcn.004552a9
jmp 0x410a83
lea ecx, [ebp - 0x95c]
push ecx
lea ecx, [ebp - 0x40]
call fcn.004552a9
mov edx, dword [ebp - 0xa54]
push edx
call dword [sym.imp.ADVAPI32.dll_RegCloseKey]
mov dword [ebp - 0x978], 0
cmp dword [ebp - 0x18], 0
je 0x410f7b
mov eax, dword [ebp - 0x18]
push eax
push 0x472ee4
lea ecx, [ebp - 0x20]
push ecx
call fcn.0044fdfe
add esp, 0xc
push 0x472eec
lea ecx, [ebp - 0x40]
call fcn.0044fabd
mov dword [ebp - 0x978], eax
mov edx, dword [ebp - 0xb58]
cmp dword [edx + 0xba0], 0
je 0x410ba7
push 0x472ef0
lea eax, [ebp - 0x20]
push eax
mov ecx, dword [ebp - 0x978]
push ecx
lea edx, [ebp - 0xaf0]
push edx
lea ecx, [ebp - 0x40]
call fcn.0044fa23
mov dword [ebp - 0xc1c], eax
mov eax, dword [ebp - 0xc1c]
mov dword [ebp - 0xc20], eax
mov byte [ebp - 4], 0x24
mov ecx, dword [ebp - 0xc20]
push ecx
lea edx, [ebp - 0xaf4]
push edx
call fcn.0045534f
mov dword [ebp - 0xc24], eax
mov eax, dword [ebp - 0xc24]
mov dword [ebp - 0xc28], eax
mov byte [ebp - 4], 0x25
mov ecx, dword [ebp - 0xc28]
push ecx
lea edx, [ebp - 0xaf8]
push edx
call fcn.004553b5
mov dword [ebp - 0xc2c], eax
mov eax, dword [ebp - 0xc2c]
mov dword [ebp - 0xc30], eax
mov byte [ebp - 4], 0x26
mov ecx, dword [ebp - 0xc30]
push ecx
lea ecx, [ebp - 0x40]
call fcn.00455259
mov byte [ebp - 4], 0x25
lea ecx, [ebp - 0xaf8]
call fcn.00455120
mov byte [ebp - 4], 0x24
lea ecx, [ebp - 0xaf4]
call fcn.00455120
mov byte [ebp - 4], 7
lea ecx, [ebp - 0xaf0]
call fcn.00455120
jmp 0x410f7b
mov edx, dword [ebp - 0xb58]
cmp dword [edx + 0xba4], 0
je 0x410c82
push 0x472ef8
lea eax, [ebp - 0x20]
push eax
mov ecx, dword [ebp - 0x978]
push ecx
lea edx, [ebp - 0xafc]
push edx
lea ecx, [ebp - 0x40]
call fcn.0044fa23
mov dword [ebp - 0xc34], eax
mov eax, dword [ebp - 0xc34]
mov dword [ebp - 0xc38], eax
mov byte [ebp - 4], 0x27
mov ecx, dword [ebp - 0xc38]
push ecx
lea edx, [ebp - 0xb00]
push edx
call fcn.0045534f
mov dword [ebp - 0xc3c], eax
mov eax, dword [ebp - 0xc3c]
mov dword [ebp - 0xc40], eax
mov byte [ebp - 4], 0x28
mov ecx, dword [ebp - 0xc40]
push ecx
lea edx, [ebp - 0xb04]
push edx
call fcn.004553b5
mov dword [ebp - 0xc44], eax
mov eax, dword [ebp - 0xc44]
mov dword [ebp - 0xc48], eax
mov byte [ebp - 4], 0x29
mov ecx, dword [ebp - 0xc48]
push ecx
lea ecx, [ebp - 0x40]
call fcn.00455259
mov byte [ebp - 4], 0x28
lea ecx, [ebp - 0xb04]
call fcn.00455120
mov byte [ebp - 4], 0x27
lea ecx, [ebp - 0xb00]
call fcn.00455120
mov byte [ebp - 4], 7
lea ecx, [ebp - 0xafc]
call fcn.00455120
jmp 0x410f7b
lea ecx, [ebp - 0x40]
call fcn.00402880
sub eax, dword [ebp - 0x978]
push eax
lea edx, [ebp - 0xa5c]
push edx
lea ecx, [ebp - 0x40]
call fcn.0044f9a7
mov byte [ebp - 4], 0x2a
push 0x472f00
lea ecx, [ebp - 0xa5c]
call fcn.00402280
test eax, eax
jne 0x410d84
push 0x472f08
lea eax, [ebp - 0x20]
push eax
mov ecx, dword [ebp - 0x978]
push ecx
lea edx, [ebp - 0xb08]
push edx
lea ecx, [ebp - 0x40]
call fcn.0044fa23
mov dword [ebp - 0xc4c], eax
mov eax, dword [ebp - 0xc4c]
mov dword [ebp - 0xc50], eax
mov byte [ebp - 4], 0x2b
mov ecx, dword [ebp - 0xc50]
push ecx
lea edx, [ebp - 0xb0c]
push edx
call fcn.0045534f
mov dword [ebp - 0xc54], eax
mov eax, dword [ebp - 0xc54]
mov dword [ebp - 0xc58], eax
mov byte [ebp - 4], 0x2c
mov ecx, dword [ebp - 0xc58]
push ecx
lea edx, [ebp - 0xb10]
push edx
call fcn.004553b5
mov dword [ebp - 0xc5c], eax
mov eax, dword [ebp - 0xc5c]
mov dword [ebp - 0xc60], eax
mov byte [ebp - 4], 0x2d
mov ecx, dword [ebp - 0xc60]
push ecx
lea ecx, [ebp - 0x40]
call fcn.00455259
mov byte [ebp - 4], 0x2c
lea ecx, [ebp - 0xb10]
call fcn.00455120
mov byte [ebp - 4], 0x2b
lea ecx, [ebp - 0xb0c]
call fcn.00455120
mov byte [ebp - 4], 0x2a
lea ecx, [ebp - 0xb08]
call fcn.00455120
jmp 0x410f6c
push 0x472f10
lea ecx, [ebp - 0xa5c]
call fcn.00402280
test eax, eax
jne 0x410e64
push 0x472f18
lea edx, [ebp - 0x20]
push edx
mov eax, dword [ebp - 0x978]
push eax
lea ecx, [ebp - 0xb14]
push ecx
lea ecx, [ebp - 0x40]
call fcn.0044fa23
mov dword [ebp - 0xc64], eax
mov edx, dword [ebp - 0xc64]
mov dword [ebp - 0xc68], edx
mov byte [ebp - 4], 0x2e
mov eax, dword [ebp - 0xc68]
push eax
lea ecx, [ebp - 0xb18]
push ecx
call fcn.0045534f
mov dword [ebp - 0xc6c], eax
mov edx, dword [ebp - 0xc6c]
mov dword [ebp - 0xc70], edx
mov byte [ebp - 4], 0x2f
mov eax, dword [ebp - 0xc70]
push eax
lea ecx, [ebp - 0xb1c]
push ecx
call fcn.004553b5
mov dword [ebp - 0xc74], eax
mov edx, dword [ebp - 0xc74]
mov dword [ebp - 0xc78], edx
mov byte [ebp - 4], 0x30
mov eax, dword [ebp - 0xc78]
push eax
lea ecx, [ebp - 0x40]
call fcn.00455259
mov byte [ebp - 4], 0x2f
lea ecx, [ebp - 0xb1c]
call fcn.00455120
mov byte [ebp - 4], 0x2e
lea ecx, [ebp - 0xb18]
call fcn.00455120
mov byte [ebp - 4], 0x2a
lea ecx, [ebp - 0xb14]
call fcn.00455120
jmp 0x410f6c
lea ecx, [ebp - 0x40]
call fcn.00402880
sub eax, dword [ebp - 0x978]
push eax
lea ecx, [ebp - 0xb20]
push ecx
lea ecx, [ebp - 0x40]
call fcn.0044f9a7
mov dword [ebp - 0xc7c], eax
mov edx, dword [ebp - 0xc7c]
mov dword [ebp - 0xc80], edx
mov byte [ebp - 4], 0x31
mov eax, dword [ebp - 0xc80]
push eax
lea ecx, [ebp - 0x20]
push ecx
mov edx, dword [ebp - 0x978]
push edx
lea eax, [ebp - 0xb24]
push eax
lea ecx, [ebp - 0x40]
call fcn.0044fa23
mov dword [ebp - 0xc84], eax
mov ecx, dword [ebp - 0xc84]
mov dword [ebp - 0xc88], ecx
mov byte [ebp - 4], 0x32
mov edx, dword [ebp - 0xc88]
push edx
lea eax, [ebp - 0xb28]
push eax
call fcn.0045534f
mov dword [ebp - 0xc8c], eax
mov ecx, dword [ebp - 0xc8c]
mov dword [ebp - 0xc90], ecx
mov byte [ebp - 4], 0x33
mov edx, dword [ebp - 0xc90]
push edx
lea eax, [ebp - 0xb2c]
push eax
call fcn.0045534f
mov dword [ebp - 0xc94], eax
mov ecx, dword [ebp - 0xc94]
mov dword [ebp - 0xc98], ecx
mov byte [ebp - 4], 0x34
mov edx, dword [ebp - 0xc98]
push edx
lea ecx, [ebp - 0x40]
call fcn.00455259
mov byte [ebp - 4], 0x33
lea ecx, [ebp - 0xb2c]
call fcn.00455120
mov byte [ebp - 4], 0x32
lea ecx, [ebp - 0xb28]
call fcn.00455120
mov byte [ebp - 4], 0x31
lea ecx, [ebp - 0xb24]
call fcn.00455120
mov byte [ebp - 4], 0x2a
lea ecx, [ebp - 0xb20]
call fcn.00455120
mov byte [ebp - 4], 7
lea ecx, [ebp - 0xa5c]
call fcn.00455120
mov ecx, 0x479910
call fcn.00402270
push eax
push 0xc8
lea eax, [ebp - 0xa4c]
push eax
push 0x479710
push 0x472f20
push 0x472f2c
call dword [sym.imp.KERNEL32.dll_GetPrivateProfileStringA]
lea ecx, [ebp - 0x964]
call fcn.00402210
mov byte [ebp - 4], 0x35
lea ecx, [ebp - 0xa4c]
push ecx
push 0x472f34
lea edx, [ebp - 0x964]
push edx
call fcn.0044fdfe
add esp, 0xc
push 0x472f38
lea eax, [ebp - 0x964]
push eax
call fcn.0041b4f0
and eax, 0xff
test eax, eax
je 0x41106f
mov ecx, dword [ebp - 0xb58]
add ecx, 0xc04
call fcn.00402880
sub eax, 4
push eax
lea ecx, [ebp - 0xb30]
push ecx
mov ecx, dword [ebp - 0xb58]
add ecx, 0xc04
call fcn.0044fa23
mov dword [ebp - 0xc9c], eax
mov edx, dword [ebp - 0xc9c]
mov dword [ebp - 0xca0], edx
mov byte [ebp - 4], 0x36
mov eax, dword [ebp - 0xca0]
push eax
mov ecx, dword [ebp - 0xb58]
add ecx, 0xc04
call fcn.00455259
mov byte [ebp - 4], 0x35
lea ecx, [ebp - 0xb30]
call fcn.00455120
push 0x472f44
mov ecx, dword [ebp - 0xb58]
add ecx, 0xc04
call fcn.00455488
lea ecx, [ebp - 0x970]
call fcn.00402210
mov byte [ebp - 4], 0x37
lea ecx, [ebp - 0xa50]
call fcn.00402210
mov byte [ebp - 4], 0x38
push 0
push 5
lea ecx, [ebp - 0x854]
push ecx
push 0
call dword [sym.imp.SHELL32.dll_SHGetSpecialFolderPathA]
test eax, eax
je 0x4110b6
lea edx, [ebp - 0x854]
push edx
lea ecx, [ebp - 0xa50]
call fcn.004552a9
mov eax, dword [ebp - 0xa50]
push eax
push 0x472f4c
lea ecx, [ebp - 0x970]
push ecx
call fcn.0044fdfe
add esp, 0xc
mov ecx, 0x479910
call fcn.00402270
push eax
push 0
push 0x472f5c
push 0x472f6c
call dword [sym.imp.KERNEL32.dll_GetPrivateProfileIntA]
mov dword [ebp - 0x750], eax
mov edx, dword [ebp - 0x750]
push edx
push str._05d
lea eax, [ebp - 0x20]
push eax
call fcn.0044fdfe
add esp, 0xc
push 0x472f80
lea ecx, [ebp - 0x970]
call fcn.0044fabd
mov dword [ebp - 0x978], eax
push 0x2e
mov ecx, dword [ebp - 0xb58]
add ecx, 0xc04
call fcn.0044fa9b
mov dword [ebp - 0xa58], eax
mov ecx, dword [ebp - 0xb58]
add ecx, 0xc04
call fcn.00402880
sub eax, dword [ebp - 0xa58]
push eax
lea ecx, [ebp - 0x980]
push ecx
mov ecx, dword [ebp - 0xb58]
add ecx, 0xc04
call fcn.0044f9a7
mov byte [ebp - 4], 0x39
lea edx, [ebp - 0x980]
push edx
lea eax, [ebp - 0x20]
push eax
mov ecx, dword [ebp - 0x978]
push ecx
lea edx, [ebp - 0xb34]
push edx
lea ecx, [ebp - 0x970]
call fcn.0044fa23
mov dword [ebp - 0xca4], eax
mov eax, dword [ebp - 0xca4]
mov dword [ebp - 0xca8], eax
mov byte [ebp - 4], 0x3a
mov ecx, dword [ebp - 0xca8]
push ecx
lea edx, [ebp - 0xb38]
push edx
call fcn.0045534f
mov dword [ebp - 0xcac], eax
mov eax, dword [ebp - 0xcac]
mov dword [ebp - 0xcb0], eax
mov byte [ebp - 4], 0x3b
mov ecx, dword [ebp - 0xcb0]
push ecx
lea edx, [ebp - 0xb3c]
push edx
call fcn.0045534f
mov dword [ebp - 0xcb4], eax
mov eax, dword [ebp - 0xcb4]
mov dword [ebp - 0xcb8], eax
mov byte [ebp - 4], 0x3c
mov ecx, dword [ebp - 0xcb8]
push ecx
lea ecx, [ebp - 0x970]
call fcn.00455259
mov byte [ebp - 4], 0x3b
lea ecx, [ebp - 0xb3c]
call fcn.00455120
mov byte [ebp - 4], 0x3a
lea ecx, [ebp - 0xb38]
call fcn.00455120
mov byte [ebp - 4], 0x39
lea ecx, [ebp - 0xb34]
call fcn.00455120
lea edx, [ebp - 0x40]
push edx
mov eax, dword [ebp - 0xb58]
add eax, 0xc04
push eax
call fcn.0041b510
and eax, 0xff
test eax, eax
je 0x41129f
mov ecx, dword [ebp - 0xb58]
add ecx, 0xc04
push ecx
lea edx, [ebp - 0x970]
push edx
call fcn.0041b510
and eax, 0xff
test eax, eax
je 0x41129f
mov ecx, 0x479910
call fcn.00402270
push eax
push 0x472f84
push 0x472f88
push 0x472f94
call dword [sym.imp.KERNEL32.dll_WritePrivateProfileStringA]
jmp 0x411320
mov eax, dword [ebp - 0xb58]
add eax, 0xc04
push eax
lea ecx, [ebp - 0x970]
push ecx
call fcn.0041b480
and eax, 0xff
test eax, eax
je 0x411320
lea ecx, [ebp - 0xa60]
call fcn.00402210
mov byte [ebp - 4], 0x3d
mov edx, dword [ebp - 0x750]
push edx
push 0x472f9c
lea eax, [ebp - 0xa60]
push eax
call fcn.0044fdfe
add esp, 0xc
mov ecx, 0x479910
call fcn.00402270
push eax
lea ecx, [ebp - 0xa60]
call fcn.00402270
push eax
push str.HW_ImgCount
push 0x472fac
call dword [sym.imp.KERNEL32.dll_WritePrivateProfileStringA]
mov byte [ebp - 4], 0x39
lea ecx, [ebp - 0xa60]
call fcn.00455120
mov ecx, dword [ebp - 0xb58]
add ecx, 0xc04
call fcn.00402270
push eax
mov ecx, 0x479850
call fcn.0041f5d1
lea ecx, [ebp - 0xa54]
push ecx
push 0x20006
push 0
mov edx, dword [ebp - 0x748]
push edx
push SysReAllocString
call dword [sym.imp.ADVAPI32.dll_RegOpenKeyExA]
mov dword [ebp - 0x960], eax
push 0
mov ecx, dword [ebp - 0xb58]
add ecx, 0xc04
call fcn.004554dc
mov dword [ebp - 0x744], eax
mov eax, dword [ebp - 0x744]
push eax
call fcn.004431c0
add esp, 4
mov dword [ebp - 0x974], eax
mov ecx, dword [ebp - 0x974]
push ecx
mov edx, dword [ebp - 0x744]
push edx
push 1
push 0
push 0x472fb4
mov eax, dword [ebp - 0xa54]
push eax
call dword [sym.imp.ADVAPI32.dll_RegSetValueExA]
mov dword [ebp - 0x97c], eax
cmp dword [ebp - 0x97c], 0
je 0x411488
mov ecx, dword [ebp - 0xa54]
push ecx
call dword [sym.imp.ADVAPI32.dll_RegCloseKey]
mov dword [ebp - 0xb40], 1
mov byte [ebp - 4], 0x38
lea ecx, [ebp - 0x980]
call fcn.00455120
mov byte [ebp - 4], 0x37
lea ecx, [ebp - 0xa50]
call fcn.00455120
mov byte [ebp - 4], 0x35
lea ecx, [ebp - 0x970]
call fcn.00455120
mov byte [ebp - 4], 7
lea ecx, [ebp - 0x964]
call fcn.00455120
mov byte [ebp - 4], 6
lea ecx, [ebp - 0x34]
call fcn.00455120
mov byte [ebp - 4], 5
lea ecx, [ebp - 0x30]
call fcn.00455120
mov byte [ebp - 4], 4
lea ecx, [ebp - 0x10]
call fcn.00455120
mov byte [ebp - 4], 3
lea ecx, [ebp - 0x14]
call fcn.00455120
mov byte [ebp - 4], 2
lea ecx, [ebp - 0x1c]
call fcn.00455120
mov byte [ebp - 4], 1
lea ecx, [ebp - 0x38]
call fcn.00455120
mov byte [ebp - 4], 0
lea ecx, [ebp - 0x20]
call fcn.00455120
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x40]
call fcn.00455120
mov eax, dword [ebp - 0xb40]
jmp 0x411d01
mov edx, dword [ebp - 0xa54]
push edx
call dword [sym.imp.ADVAPI32.dll_RegCloseKey]
push 0xffffffffffffffff
mov ecx, dword [ebp - 0xb58]
add ecx, 0xc04
call fcn.0045552b
mov eax, dword [ebp - 0xb58]
cmp dword [eax + 0xba0], 0
je 0x4114d9
mov ecx, 0x479910
call fcn.00402270
push eax
push 0x472fc0
push 0x472fc4
push 0x472fd0
call dword [sym.imp.KERNEL32.dll_WritePrivateProfileStringA]
jmp 0x4114f9
mov ecx, 0x479910
call fcn.00402270
push eax
push 0x472fd8
push 0x472fdc
push 0x472fe8
call dword [sym.imp.KERNEL32.dll_WritePrivateProfileStringA]
mov ecx, dword [ebp - 0xb58]
cmp dword [ecx + 0xba4], 0
je 0x41152a
mov ecx, 0x479910
call fcn.00402270
push eax
push 0x472ff0
push 0x472ff4
push 0x473004
call dword [sym.imp.KERNEL32.dll_WritePrivateProfileStringA]
jmp 0x41154a
mov ecx, 0x479910
call fcn.00402270
push eax
push 0x47300c
push 0x473010
push 0x473020
call dword [sym.imp.KERNEL32.dll_WritePrivateProfileStringA]
lea edx, [ebp - 0x38]
push edx
mov eax, dword [ebp - 0xb58]
add eax, 0xc10
push eax
call fcn.0041b480
and eax, 0xff
test eax, eax
je 0x41158d
mov ecx, 0x479910
call fcn.00402270
push eax
push 0x473028
push 0x47302c
push 0x473038
call dword [sym.imp.KERNEL32.dll_WritePrivateProfileStringA]
jmp 0x4117b1
lea ecx, [ebp - 0x1c]
push ecx
mov edx, dword [ebp - 0xb58]
add edx, 0xc10
push edx
call fcn.0041b480
and eax, 0xff
test eax, eax
je 0x411773
mov ecx, 0x479910
call fcn.00402270
push eax
push 0x473040
push 0x473044
push 0x473050
call dword [sym.imp.KERNEL32.dll_WritePrivateProfileStringA]
mov eax, dword [ebp - 0xb58]
cmp dword [eax + 0xc24], 0
je 0x411771
mov ecx, 0x479910
call fcn.00402270
push eax
push 0
push str.ShowAward
push 0x473064
call dword [sym.imp.KERNEL32.dll_GetPrivateProfileIntA]
mov dword [ebp - 0xa64], eax
cmp dword [ebp - 0xa64], 1
jne 0x411771
mov ecx, dword [ebp - 0xb58]
cmp dword [ecx + 0x990], 1
je 0x411771
lea ecx, [ebp - 0xa68]
call fcn.00402210
mov byte [ebp - 4], 0x3e
push str.UserTest.exe_A
push 0x479914
lea edx, [ebp - 0xb44]
push edx
call fcn.004553b5
mov dword [ebp - 0xcbc], eax
mov eax, dword [ebp - 0xcbc]
mov dword [ebp - 0xcc0], eax
mov byte [ebp - 4], 0x3f
mov ecx, dword [ebp - 0xcc0]
push ecx
lea ecx, [ebp - 0xa68]
call fcn.00455259
mov byte [ebp - 4], 0x3e
lea ecx, [ebp - 0xb44]
call fcn.00455120
push 5
lea ecx, [ebp - 0xa68]
call fcn.00402270
push eax
call dword [sym.imp.KERNEL32.dll_WinExec]
cmp eax, 0x1f
ja 0x411762
mov dword [ebp - 0xb48], 0
mov byte [ebp - 4], 0x39
lea ecx, [ebp - 0xa68]
call fcn.00455120
mov byte [ebp - 4], 0x38
lea ecx, [ebp - 0x980]
call fcn.00455120
mov byte [ebp - 4], 0x37
lea ecx, [ebp - 0xa50]
call fcn.00455120
mov byte [ebp - 4], 0x35
lea ecx, [ebp - 0x970]
call fcn.00455120
mov byte [ebp - 4], 7
lea ecx, [ebp - 0x964]
call fcn.00455120
mov byte [ebp - 4], 6
lea ecx, [ebp - 0x34]
call fcn.00455120
mov byte [ebp - 4], 5
lea ecx, [ebp - 0x30]
call fcn.00455120
mov byte [ebp - 4], 4
lea ecx, [ebp - 0x10]
call fcn.00455120
mov byte [ebp - 4], 3
lea ecx, [ebp - 0x14]
call fcn.00455120
mov byte [ebp - 4], 2
lea ecx, [ebp - 0x1c]
call fcn.00455120
mov byte [ebp - 4], 1
lea ecx, [ebp - 0x38]
call fcn.00455120
mov byte [ebp - 4], 0
lea ecx, [ebp - 0x20]
call fcn.00455120
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x40]
call fcn.00455120
mov eax, dword [ebp - 0xb48]
jmp 0x411d01
mov byte [ebp - 4], 0x39
lea ecx, [ebp - 0xa68]
call fcn.00455120
jmp 0x4117b1
lea edx, [ebp - 0x14]
push edx
mov eax, dword [ebp - 0xb58]
add eax, 0xc10
push eax
call fcn.0041b480
and eax, 0xff
test eax, eax
je 0x4117b1
mov ecx, 0x479910
call fcn.00402270
push eax
push 0x47307c
push 0x473080
push 0x47308c
call dword [sym.imp.KERNEL32.dll_WritePrivateProfileStringA]
mov ecx, dword [ebp - 0xb58]
cmp dword [ecx + 0xc34], 0
je 0x4117e2
mov ecx, 0x479910
call fcn.00402270
push eax
push 0x473094
push 0x473098
push 0x4730a8
call dword [sym.imp.KERNEL32.dll_WritePrivateProfileStringA]
jmp 0x411802
mov ecx, 0x479910
call fcn.00402270
push eax
push 0x4730b0
push 0x4730b4
push 0x4730c4
call dword [sym.imp.KERNEL32.dll_WritePrivateProfileStringA]
mov edx, dword [ebp - 0xb58]
cmp dword [edx + 0xc24], 0
je 0x411833
mov ecx, 0x479910
call fcn.00402270
push eax
push 0x4730cc
push 0x4730d0
push 0x4730e0
call dword [sym.imp.KERNEL32.dll_WritePrivateProfileStringA]
jmp 0x411853
mov ecx, 0x479910
call fcn.00402270
push eax
push 0x4730e8
push 0x4730ec
push 0x4730fc
call dword [sym.imp.KERNEL32.dll_WritePrivateProfileStringA]
mov eax, dword [ebp - 0xb58]
cmp dword [eax + 0xc40], 0
je 0x411884
mov ecx, 0x479910
call fcn.00402270
push eax
push 0x473104
push 0x473108
push 0x473118
call dword [sym.imp.KERNEL32.dll_WritePrivateProfileStringA]
jmp 0x4118a4
mov ecx, 0x479910
call fcn.00402270
push eax
push 0x473120
push 0x473124
push 0x473134
call dword [sym.imp.KERNEL32.dll_WritePrivateProfileStringA]
lea ecx, [ebp - 0x38]
push ecx
mov edx, dword [ebp - 0xb58]
add edx, 0xc0c
push edx
call fcn.0041b480
and eax, 0xff
test eax, eax
je 0x4118e5
mov ecx, 0x479910
call fcn.00402270
push eax
push 0x47313c
push 0x473140
push 0x47314c
call dword [sym.imp.KERNEL32.dll_WritePrivateProfileStringA]
jmp 0x411964
lea eax, [ebp - 0x1c]
push eax
mov ecx, dword [ebp - 0xb58]
add ecx, 0xc0c
push ecx
call fcn.0041b480
and eax, 0xff
test eax, eax
je 0x411926
mov ecx, 0x479910
call fcn.00402270
push eax
push 0x473154
push 0x473158
push 0x473164
call dword [sym.imp.KERNEL32.dll_WritePrivateProfileStringA]
jmp 0x411964
lea edx, [ebp - 0x14]
push edx
mov eax, dword [ebp - 0xb58]
add eax, 0xc0c
push eax
call fcn.0041b480
and eax, 0xff
test eax, eax
je 0x411964
mov ecx, 0x479910
call fcn.00402270
push eax
push 0x47316c
push 0x473170
push 0x47317c
call dword [sym.imp.KERNEL32.dll_WritePrivateProfileStringA]
mov ecx, dword [ebp - 0xb58]
cmp dword [ecx + 0xc38], 0
je 0x411995
mov ecx, 0x479910
call fcn.00402270
push eax
push 0x473184
push 0x473188
push 0x473198
call dword [sym.imp.KERNEL32.dll_WritePrivateProfileStringA]
jmp 0x4119b5
mov ecx, 0x479910
call fcn.00402270
push eax
push 0x4731a0
push 0x4731a4
push 0x4731b4
call dword [sym.imp.KERNEL32.dll_WritePrivateProfileStringA]
mov edx, dword [ebp - 0xb58]
cmp dword [edx + 0xc28], 0
je 0x4119e6
mov ecx, 0x479910
call fcn.00402270
push eax
push 0x4731bc
push 0x4731c0
push 0x4731d0
call dword [sym.imp.KERNEL32.dll_WritePrivateProfileStringA]
jmp 0x411a06
mov ecx, 0x479910
call fcn.00402270
push eax
push 0x4731d8
push 0x4731dc
push 0x4731ec
call dword [sym.imp.KERNEL32.dll_WritePrivateProfileStringA]
mov eax, dword [ebp - 0xb58]
cmp dword [eax + 0xc44], 0
je 0x411a37
mov ecx, 0x479910
call fcn.00402270
push eax
push 0x4731f4
push 0x4731f8
push 0x473208
call dword [sym.imp.KERNEL32.dll_WritePrivateProfileStringA]
jmp 0x411a57
mov ecx, 0x479910
call fcn.00402270
push eax
push 0x473210
push 0x473214
push 0x473224
call dword [sym.imp.KERNEL32.dll_WritePrivateProfileStringA]
mov ecx, dword [ebp - 0xb58]
cmp dword [ecx + 0xb8], 0
je 0x411a88
mov ecx, 0x479910
call fcn.00402270
push eax
push 0x47322c
push 0x473230
push 0x47323c
call dword [sym.imp.KERNEL32.dll_WritePrivateProfileStringA]
jmp 0x411aa8
mov ecx, 0x479910
call fcn.00402270
push eax
push 0x473244
push 0x473248
push 0x473254
call dword [sym.imp.KERNEL32.dll_WritePrivateProfileStringA]
lea ecx, [ebp - 0x984]
call fcn.00402210
mov byte [ebp - 4], 0x40
mov edx, dword [ebp - 0xb58]
mov eax, dword [edx + 0xc1c]
push eax
lea ecx, [ebp - 0xb4c]
push ecx
mov ecx, dword [ebp - 0xb58]
add ecx, 0x960
call fcn.004071b0
mov dword [ebp - 0xcc4], eax
mov edx, dword [ebp - 0xcc4]
mov dword [ebp - 0xcc8], edx
mov byte [ebp - 4], 0x41
mov eax, dword [ebp - 0xcc8]
push eax
lea ecx, [ebp - 0x984]
call fcn.00455259
mov byte [ebp - 4], 0x40
lea ecx, [ebp - 0xb4c]
call fcn.00455120
mov ecx, 0x479910
call fcn.00402270
push eax
mov ecx, dword [ebp - 0xb58]
mov edx, dword [ecx + 0xc1c]
push edx
lea eax, [ebp - 0xb50]
push eax
mov ecx, dword [ebp - 0xb58]
add ecx, 0x960
call fcn.004071b0
mov dword [ebp - 0xccc], eax
mov ecx, dword [ebp - 0xccc]
mov dword [ebp - 0xcd0], ecx
mov byte [ebp - 4], 0x42
mov ecx, dword [ebp - 0xcd0]
call fcn.00402270
push eax
push 0x47325c
push 0x47326c
call dword [sym.imp.KERNEL32.dll_WritePrivateProfileStringA]
mov byte [ebp - 4], 0x40
lea ecx, [ebp - 0xb50]
call fcn.00455120
lea ecx, [ebp - 0x96c]
call fcn.00402210
mov byte [ebp - 4], 0x43
mov edx, dword [ebp - 0xb58]
mov eax, dword [edx + 0xc14]
push eax
push 0x473274
lea ecx, [ebp - 0x96c]
push ecx
call fcn.0044fdfe
add esp, 0xc
mov ecx, 0x479918
call fcn.00402270
push eax
lea ecx, [ebp - 0x96c]
call fcn.00402270
push eax
push 0x473278
push 0x473284
call dword [sym.imp.KERNEL32.dll_WritePrivateProfileStringA]
mov edx, dword [ebp - 0xb58]
cmp dword [edx + 0x4c], 0
je 0x411c09
mov ecx, 0x479918
call fcn.00402270
push eax
push 0x47328c
push 0x473290
push 0x4732a0
call dword [sym.imp.KERNEL32.dll_WritePrivateProfileStringA]
jmp 0x411c29
mov ecx, 0x479918
call fcn.00402270
push eax
push 0x4732a8
push str.GreenControl
push 0x4732bc
call dword [sym.imp.KERNEL32.dll_WritePrivateProfileStringA]
mov ecx, dword [ebp - 0xb58]
call fcn.00411d70
mov dword [ebp - 0xb54], 1
mov byte [ebp - 4], 0x40
lea ecx, [ebp - 0x96c]
call fcn.00455120
mov byte [ebp - 4], 0x39
lea ecx, [ebp - 0x984]
call fcn.00455120
mov byte [ebp - 4], 0x38
lea ecx, [ebp - 0x980]
call fcn.00455120
mov byte [ebp - 4], 0x37
lea ecx, [ebp - 0xa50]
call fcn.00455120
mov byte [ebp - 4], 0x35
lea ecx, [ebp - 0x970]
call fcn.00455120
mov byte [ebp - 4], 7
lea ecx, [ebp - 0x964]
call fcn.00455120
mov byte [ebp - 4], 6
lea ecx, [ebp - 0x34]
call fcn.00455120
mov byte [ebp - 4], 5
lea ecx, [ebp - 0x30]
call fcn.00455120
mov byte [ebp - 4], 4
lea ecx, [ebp - 0x10]
call fcn.00455120
mov byte [ebp - 4], 3
lea ecx, [ebp - 0x14]
call fcn.00455120
mov byte [ebp - 4], 2
lea ecx, [ebp - 0x1c]
call fcn.00455120
mov byte [ebp - 4], 1
lea ecx, [ebp - 0x38]
call fcn.00455120
mov byte [ebp - 4], 0
lea ecx, [ebp - 0x20]
call fcn.00455120
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x40]
call fcn.00455120
mov eax, dword [ebp - 0xb54]
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop edi
pop esi
mov esp, ebp
pop ebp
ret 4