Function at 0x4115e0
Capabilities:
Check if file exists
Read .ini file

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x53de7b
mov eax, dword fs:[0]
push eax
mov eax, 0x14bc
call fcn.00489eb0
mov eax, dword [0x580280]
xor eax, ebp
mov dword [ebp - 0x10], eax
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov dword [ebp - 0x1448], ecx
call fcn.004058c0
mov ecx, eax
call fcn.00447880
push eax
push 0x54ade8
lea eax, [ebp - 0x21c]
push eax
call fcn.00487ebf
add esp, 0xc
push 0x54adf0
lea ecx, [ebp - 0x21c]
push ecx
call fcn.004127e0
add esp, 8
mov dword [ebp - 0xc88], eax
cmp dword [ebp - 0xc88], 0
je 0x41168d
mov edx, dword [ebp - 0x1448]
mov eax, dword [edx + 4]
push eax
push str._d.ini
lea ecx, [ebp - 0x109c]
push ecx
call fcn.00487ebf
add esp, 0xc
lea edx, [ebp - 0x109c]
push edx
mov eax, dword [ebp - 0xc88]
push eax
call fcn.00486ae5
add esp, 8
xor ecx, ecx
mov word [ebp - 0xe94], cx
push 0x206
push 0
lea edx, [ebp - 0xe92]
push edx
call fcn.00486c20
add esp, 0xc
xor eax, eax
mov word [ebp - 0xc84], ax
push 0x206
push 0
lea ecx, [ebp - 0xc82]
push ecx
call fcn.00486c20
add esp, 0xc
xor edx, edx
mov word [ebp - 0x42c], dx
push 0x206
push 0
lea eax, [ebp - 0x42a]
push eax
call fcn.00486c20
add esp, 0xc
xor ecx, ecx
mov word [ebp - 0x874], cx
push 0x206
push 0
lea edx, [ebp - 0x872]
push edx
call fcn.00486c20
add esp, 0xc
lea eax, [ebp - 0x21c]
push eax
push 0x104
lea ecx, [ebp - 0xe94]
push ecx
push str.UserCenter7000.png
push str.FirstHis
push 0x54ae58
call dword [sym.imp.KERNEL32.dll_GetPrivateProfileStringW]
lea edx, [ebp - 0x21c]
push edx
push 0x104
lea eax, [ebp - 0xc84]
push eax
push 0x54ae74
push 0x54ae78
push 0x54ae88
call dword [sym.imp.KERNEL32.dll_GetPrivateProfileStringW]
lea ecx, [ebp - 0x21c]
push ecx
push 0x104
lea edx, [ebp - 0x42c]
push edx
push 0x54aea4
push 0x54aea8
push 0x54aebc
call dword [sym.imp.KERNEL32.dll_GetPrivateProfileStringW]
lea eax, [ebp - 0x21c]
push eax
push 0x104
lea ecx, [ebp - 0x874]
push ecx
push 0x54aed8
push 0x54aedc
push 0x54aeec
call dword [sym.imp.KERNEL32.dll_GetPrivateProfileStringW]
push str.RiLiSkinUserCenter_USER
lea ecx, [ebp - 0x66c]
call fcn.00401280
mov dword [ebp - 4], 0
push 0x104
lea edx, [ebp - 0x634]
push edx
push 0
call dword [sym.imp.KERNEL32.dll_GetModuleFileNameW]
push 0x5c
lea eax, [ebp - 0x634]
push eax
call fcn.004127c0
add esp, 8
xor ecx, ecx
mov word [eax + 2], cx
call fcn.004058c0
mov ecx, eax
call fcn.00447840
push eax
lea ecx, [ebp - 0x650]
call fcn.00401280
mov byte [ebp - 4], 1
push str.RiLiSkin_
lea ecx, [ebp - 0x650]
call fcn.004078c0
xor edx, edx
mov word [ebp - 0xa7c], dx
push 0x206
push 0
lea eax, [ebp - 0xa7a]
push eax
call fcn.00486c20
add esp, 0xc
mov ecx, dword [ebp - 0x1448]
mov edx, dword [ecx + 4]
push edx
lea ecx, [ebp - 0x650]
call fcn.004012c0
push eax
push str._sUserCenter_USER_d_
lea eax, [ebp - 0xa7c]
push eax
call fcn.00487ebf
add esp, 0x10
lea ecx, [ebp - 0xa7c]
push ecx
call dword [sym.imp.SHLWAPI.dll_PathFileExistsW]
test eax, eax
jne 0x4118be
lea edx, [ebp - 0xa7c]
push edx
call fcn.0044a5b0
add esp, 4
test eax, eax
jne 0x4118be
push 1
push str.Warning
push 0x54af8c
push 0
call dword [sym.imp.USER32.dll_MessageBoxW]
mov byte [ebp - 4], 0
lea ecx, [ebp - 0x650]
call fcn.00406040
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x66c]
call fcn.00406040
jmp 0x4124a0
lea eax, [ebp - 0x224]
push eax
mov ecx, dword [ebp - 0x1448]
add ecx, 0x848
call fcn.00412a10
jmp 0x4118e3
lea ecx, [ebp - 0x224]
call fcn.00412b90
lea ecx, [ebp - 0x1274]
push ecx
mov ecx, dword [ebp - 0x1448]
add ecx, 0x848
call fcn.00412a40
push eax
lea ecx, [ebp - 0x224]
call fcn.00412bb0
movzx edx, al
test edx, edx
je 0x41247f
lea eax, [ebp - 0xe94]
push eax
call fcn.00486c9a
add esp, 4
test eax, eax
je 0x411bec
lea ecx, [ebp - 0x66c]
call fcn.004012c0
push eax
lea ecx, [ebp - 0xe94]
push ecx
call fcn.004127e0
add esp, 8
test eax, eax
je 0x411bec
lea edx, [ebp - 0xe94]
push edx
lea eax, [ebp - 0x10b8]
push eax
call fcn.0044d9c0
add esp, 8
mov byte [ebp - 4], 2
lea ecx, [ebp - 0x224]
call fcn.00412b70
push eax
lea ecx, [ebp - 0x1294]
push ecx
call fcn.0044ed60
add esp, 8
mov dword [ebp - 0x144c], eax
mov edx, dword [ebp - 0x144c]
mov dword [ebp - 0x1450], edx
mov byte [ebp - 4], 3
mov ecx, dword [ebp - 0x1450]
call fcn.004012c0
push eax
lea ecx, [ebp - 0x10b8]
call fcn.0040ce70
neg eax
sbb eax, eax
add eax, 1
mov byte [ebp - 0x1275], al
mov byte [ebp - 4], 2
lea ecx, [ebp - 0x1294]
call fcn.00406040
movzx eax, byte [ebp - 0x1275]
test eax, eax
je 0x411bdd
lea ecx, [ebp - 0x10d8]
call fcn.00407b20
mov byte [ebp - 4], 4
lea ecx, [ebp - 0x10b8]
push ecx
lea edx, [ebp - 0xa7c]
push edx
lea eax, [ebp - 0x12b0]
push eax
call fcn.00413930
add esp, 0xc
mov dword [ebp - 0x1454], eax
mov ecx, dword [ebp - 0x1454]
mov dword [ebp - 0x1458], ecx
mov byte [ebp - 4], 5
mov edx, dword [ebp - 0x1458]
push edx
lea ecx, [ebp - 0x10d8]
call fcn.004078a0
mov byte [ebp - 4], 4
lea ecx, [ebp - 0x12b0]
call fcn.00406040
mov ecx, dword [ebp - 0x1448]
add ecx, 0x828
call fcn.00415020
mov ecx, dword [ebp - 0x1448]
add ecx, 0x828
call fcn.004151d0
push 0x2800
mov eax, dword [ebp - 0x1448]
mov ecx, dword [eax + 0x844]
call fcn.00416020
push 0xffffffffffffffff
push 2
lea ecx, [ebp - 0x12cc]
push ecx
lea ecx, [ebp - 0x224]
call fcn.00412b50
add eax, 0x1c
mov ecx, eax
call fcn.004128e0
mov dword [ebp - 0x145c], eax
mov edx, dword [ebp - 0x145c]
mov dword [ebp - 0x1460], edx
mov byte [ebp - 4], 6
mov eax, dword [ebp - 0x1460]
push eax
mov ecx, dword [ebp - 0x1448]
add ecx, 0x864
push ecx
lea edx, [ebp - 0x12e8]
push edx
call fcn.004139c0
add esp, 0xc
mov dword [ebp - 0x1464], eax
mov eax, dword [ebp - 0x1464]
mov dword [ebp - 0x1468], eax
mov byte [ebp - 4], 7
mov ecx, dword [ebp - 0x1468]
push ecx
lea edx, [ebp - 0x10f4]
push edx
call fcn.0044ed60
add esp, 8
mov byte [ebp - 4], 9
lea ecx, [ebp - 0x12e8]
call fcn.00405fb0
mov byte [ebp - 4], 0xa
lea ecx, [ebp - 0x12cc]
call fcn.00405fb0
lea ecx, [ebp - 0x10d8]
call fcn.004012c0
push eax
call dword [sym.imp.SHLWAPI.dll_PathFileExistsW]
test eax, eax
je 0x411b7c
push 0x54afa4
lea ecx, [ebp - 0x10d8]
call fcn.004078e0
push eax
lea ecx, [ebp - 0x1110]
call fcn.00407860
mov byte [ebp - 4], 0xb
lea ecx, [ebp - 0x1110]
call fcn.004012c0
push eax
lea ecx, [ebp - 0x10d8]
call fcn.004012c0
push eax
call fcn.0044df20
add esp, 8
mov byte [ebp - 4], 0xa
lea ecx, [ebp - 0x1110]
call fcn.00406040
lea ecx, [ebp - 0x10d8]
call fcn.004012c0
push eax
lea ecx, [ebp - 0x10f4]
call fcn.004012c0
push eax
mov ecx, dword [ebp - 0x1448]
add ecx, 0x828
call fcn.004158d0
mov dword [ebp - 0x10bc], eax
mov byte [ebp - 4], 4
lea ecx, [ebp - 0x10f4]
call fcn.00406040
mov byte [ebp - 4], 2
lea ecx, [ebp - 0x10d8]
call fcn.00406040
mov byte [ebp - 4], 1
lea ecx, [ebp - 0x10b8]
call fcn.00406040
jmp 0x4118d8
mov byte [ebp - 4], 1
lea ecx, [ebp - 0x10b8]
call fcn.00406040
lea eax, [ebp - 0xc84]
push eax
call fcn.00486c9a
add esp, 4
test eax, eax
je 0x411ec6
lea ecx, [ebp - 0x66c]
call fcn.004012c0
push eax
lea ecx, [ebp - 0xc84]
push ecx
call fcn.004127e0
add esp, 8
test eax, eax
je 0x411ec6
lea edx, [ebp - 0xc84]
push edx
lea eax, [ebp - 0x112c]
push eax
call fcn.0044d9c0
add esp, 8
mov byte [ebp - 4], 0xc
lea ecx, [ebp - 0x224]
call fcn.00412b70
push eax
lea ecx, [ebp - 0x1308]
push ecx
call fcn.0044ed60
add esp, 8
mov dword [ebp - 0x146c], eax
mov edx, dword [ebp - 0x146c]
mov dword [ebp - 0x1470], edx
mov byte [ebp - 4], 0xd
mov ecx, dword [ebp - 0x1470]
call fcn.004012c0
push eax
lea ecx, [ebp - 0x112c]
call fcn.0040ce70
neg eax
sbb eax, eax
add eax, 1
mov byte [ebp - 0x12e9], al
mov byte [ebp - 4], 0xc
lea ecx, [ebp - 0x1308]
call fcn.00406040
movzx eax, byte [ebp - 0x12e9]
test eax, eax
je 0x411eb7
lea ecx, [ebp - 0x114c]
call fcn.00407b20
mov byte [ebp - 4], 0xe
lea ecx, [ebp - 0x112c]
push ecx
lea edx, [ebp - 0xa7c]
push edx
lea eax, [ebp - 0x1324]
push eax
call fcn.00413930
add esp, 0xc
mov dword [ebp - 0x1474], eax
mov ecx, dword [ebp - 0x1474]
mov dword [ebp - 0x1478], ecx
mov byte [ebp - 4], 0xf
mov edx, dword [ebp - 0x1478]
push edx
lea ecx, [ebp - 0x114c]
call fcn.004078a0
mov byte [ebp - 4], 0xe
lea ecx, [ebp - 0x1324]
call fcn.00406040
mov ecx, dword [ebp - 0x1448]
add ecx, 0x828
call fcn.00415020
mov ecx, dword [ebp - 0x1448]
add ecx, 0x828
call fcn.004151d0
push 0x2800
mov eax, dword [ebp - 0x1448]
mov ecx, dword [eax + 0x844]
call fcn.00416020
push 0xffffffffffffffff
push 2
lea ecx, [ebp - 0x1340]
push ecx
lea ecx, [ebp - 0x224]
call fcn.00412b50
add eax, 0x1c
mov ecx, eax
call fcn.004128e0
mov dword [ebp - 0x147c], eax
mov edx, dword [ebp - 0x147c]
mov dword [ebp - 0x1480], edx
mov byte [ebp - 4], 0x10
mov eax, dword [ebp - 0x1480]
push eax
mov ecx, dword [ebp - 0x1448]
add ecx, 0x864
push ecx
lea edx, [ebp - 0x135c]
push edx
call fcn.004139c0
add esp, 0xc
mov dword [ebp - 0x1484], eax
mov eax, dword [ebp - 0x1484]
mov dword [ebp - 0x1488], eax
mov byte [ebp - 4], 0x11
mov ecx, dword [ebp - 0x1488]
push ecx
lea edx, [ebp - 0x1168]
push edx
call fcn.0044ed60
add esp, 8
mov byte [ebp - 4], 0x13
lea ecx, [ebp - 0x135c]
call fcn.00405fb0
mov byte [ebp - 4], 0x14
lea ecx, [ebp - 0x1340]
call fcn.00405fb0
lea ecx, [ebp - 0x114c]
call fcn.004012c0
push eax
call dword [sym.imp.SHLWAPI.dll_PathFileExistsW]
test eax, eax
je 0x411e56
push 0x54afb0
lea ecx, [ebp - 0x114c]
call fcn.004078e0
push eax
lea ecx, [ebp - 0x1184]
call fcn.00407860
mov byte [ebp - 4], 0x15
lea ecx, [ebp - 0x1184]
call fcn.004012c0
push eax
lea ecx, [ebp - 0x114c]
call fcn.004012c0
push eax
call fcn.0044df20
add esp, 8
mov byte [ebp - 4], 0x14
lea ecx, [ebp - 0x1184]
call fcn.00406040
lea ecx, [ebp - 0x114c]
call fcn.004012c0
push eax
lea ecx, [ebp - 0x1168]
call fcn.004012c0
push eax
mov ecx, dword [ebp - 0x1448]
add ecx, 0x828
call fcn.004158d0
mov dword [ebp - 0x1130], eax
mov byte [ebp - 4], 0xe
lea ecx, [ebp - 0x1168]
call fcn.00406040
mov byte [ebp - 4], 0xc
lea ecx, [ebp - 0x114c]
call fcn.00406040
mov byte [ebp - 4], 1
lea ecx, [ebp - 0x112c]
call fcn.00406040
jmp 0x4118d8
mov byte [ebp - 4], 1
lea ecx, [ebp - 0x112c]
call fcn.00406040
lea eax, [ebp - 0x42c]
push eax
call fcn.00486c9a
add esp, 4
test eax, eax
je 0x4121a0
lea ecx, [ebp - 0x66c]
call fcn.004012c0
push eax
lea ecx, [ebp - 0x42c]
push ecx
call fcn.004127e0
add esp, 8
test eax, eax
je 0x4121a0
lea edx, [ebp - 0x42c]
push edx
lea eax, [ebp - 0x11a0]
push eax
call fcn.0044d9c0
add esp, 8
mov byte [ebp - 4], 0x16
lea ecx, [ebp - 0x224]
call fcn.00412b70
push eax
lea ecx, [ebp - 0x137c]
push ecx
call fcn.0044ed60
add esp, 8
mov dword [ebp - 0x148c], eax
mov edx, dword [ebp - 0x148c]
mov dword [ebp - 0x1490], edx
mov byte [ebp - 4], 0x17
mov ecx, dword [ebp - 0x1490]
call fcn.004012c0
push eax
lea ecx, [ebp - 0x11a0]
call fcn.0040ce70
neg eax
sbb eax, eax
add eax, 1
mov byte [ebp - 0x135d], al
mov byte [ebp - 4], 0x16
lea ecx, [ebp - 0x137c]
call fcn.00406040
movzx eax, byte [ebp - 0x135d]
test eax, eax
je 0x412191
lea ecx, [ebp - 0x11c0]
call fcn.00407b20
mov byte [ebp - 4], 0x18
lea ecx, [ebp - 0x11a0]
push ecx
lea edx, [ebp - 0xa7c]
push edx
lea eax, [ebp - 0x1398]
push eax
call fcn.00413930
add esp, 0xc
mov dword [ebp - 0x1494], eax
mov ecx, dword [ebp - 0x1494]
mov dword [ebp - 0x1498], ecx
mov byte [ebp - 4], 0x19
mov edx, dword [ebp - 0x1498]
push edx
lea ecx, [ebp - 0x11c0]
call fcn.004078a0
mov byte [ebp - 4], 0x18
lea ecx, [ebp - 0x1398]
call fcn.00406040
mov ecx, dword [ebp - 0x1448]
add ecx, 0x828
call fcn.00415020
mov ecx, dword [ebp - 0x1448]
add ecx, 0x828
call fcn.004151d0
push 0x2800
mov eax, dword [ebp - 0x1448]
mov ecx, dword [eax + 0x844]
call fcn.00416020
push 0xffffffffffffffff
push 2
lea ecx, [ebp - 0x13b4]
push ecx
lea ecx, [ebp - 0x224]
call fcn.00412b50
add eax, 0x1c
mov ecx, eax
call fcn.004128e0
mov dword [ebp - 0x149c], eax
mov edx, dword [ebp - 0x149c]
mov dword [ebp - 0x14a0], edx
mov byte [ebp - 4], 0x1a
mov eax, dword [ebp - 0x14a0]
push eax
mov ecx, dword [ebp - 0x1448]
add ecx, 0x864
push ecx
lea edx, [ebp - 0x13d0]
push edx
call fcn.004139c0
add esp, 0xc
mov dword [ebp - 0x14a4], eax
mov eax, dword [ebp - 0x14a4]
mov dword [ebp - 0x14a8], eax
mov byte [ebp - 4], 0x1b
mov ecx, dword [ebp - 0x14a8]
push ecx
lea edx, [ebp - 0x11dc]
push edx
call fcn.0044ed60
add esp, 8
mov byte [ebp - 4], 0x1d
lea ecx, [ebp - 0x13d0]
call fcn.00405fb0
mov byte [ebp - 4], 0x1e
lea ecx, [ebp - 0x13b4]
call fcn.00405fb0
lea ecx, [ebp - 0x11c0]
call fcn.004012c0
push eax
call dword [sym.imp.SHLWAPI.dll_PathFileExistsW]
test eax, eax
je 0x412130
push 0x54afbc
lea ecx, [ebp - 0x11c0]
call fcn.004078e0
push eax
lea ecx, [ebp - 0x11f8]
call fcn.00407860
mov byte [ebp - 4], 0x1f
lea ecx, [ebp - 0x11f8]
call fcn.004012c0
push eax
lea ecx, [ebp - 0x11c0]
call fcn.004012c0
push eax
call fcn.0044df20
add esp, 8
mov byte [ebp - 4], 0x1e
lea ecx, [ebp - 0x11f8]
call fcn.00406040
lea ecx, [ebp - 0x11c0]
call fcn.004012c0
push eax
lea ecx, [ebp - 0x11dc]
call fcn.004012c0
push eax
mov ecx, dword [ebp - 0x1448]
add ecx, 0x828
call fcn.004158d0
mov dword [ebp - 0x11a4], eax
mov byte [ebp - 4], 0x18
lea ecx, [ebp - 0x11dc]
call fcn.00406040
mov byte [ebp - 4], 0x16
lea ecx, [ebp - 0x11c0]
call fcn.00406040
mov byte [ebp - 4], 1
lea ecx, [ebp - 0x11a0]
call fcn.00406040
jmp 0x4118d8
mov byte [ebp - 4], 1
lea ecx, [ebp - 0x11a0]
call fcn.00406040
lea eax, [ebp - 0x874]
push eax
call fcn.00486c9a
add esp, 4
test eax, eax
je 0x41247a
lea ecx, [ebp - 0x66c]
call fcn.004012c0
push eax
lea ecx, [ebp - 0x874]
push ecx
call fcn.004127e0
add esp, 8
test eax, eax
je 0x41247a
lea edx, [ebp - 0x874]
push edx
lea eax, [ebp - 0x1214]
push eax
call fcn.0044d9c0
add esp, 8
mov byte [ebp - 4], 0x20
lea ecx, [ebp - 0x224]
call fcn.00412b70
push eax
lea ecx, [ebp - 0x13f0]
push ecx
call fcn.0044ed60
add esp, 8
mov dword [ebp - 0x14ac], eax
mov edx, dword [ebp - 0x14ac]
mov dword [ebp - 0x14b0], edx
mov byte [ebp - 4], 0x21
mov ecx, dword [ebp - 0x14b0]
call fcn.004012c0
push eax
lea ecx, [ebp - 0x1214]
call fcn.0040ce70
neg eax
sbb eax, eax
add eax, 1
mov byte [ebp - 0x13d1], al
mov byte [ebp - 4], 0x20
lea ecx, [ebp - 0x13f0]
call fcn.00406040
movzx eax, byte [ebp - 0x13d1]
test eax, eax
je 0x41246b
lea ecx, [ebp - 0x1234]
call fcn.00407b20
mov byte [ebp - 4], 0x22
lea ecx, [ebp - 0x1214]
push ecx
lea edx, [ebp - 0xa7c]
push edx
lea eax, [ebp - 0x140c]
push eax
call fcn.00413930
add esp, 0xc
mov dword [ebp - 0x14b4], eax
mov ecx, dword [ebp - 0x14b4]
mov dword [ebp - 0x14b8], ecx
mov byte [ebp - 4], 0x23
mov edx, dword [ebp - 0x14b8]
push edx
lea ecx, [ebp - 0x1234]
call fcn.004078a0
mov byte [ebp - 4], 0x22
lea ecx, [ebp - 0x140c]
call fcn.00406040
mov ecx, dword [ebp - 0x1448]
add ecx, 0x828
call fcn.00415020
mov ecx, dword [ebp - 0x1448]
add ecx, 0x828
call fcn.004151d0
push 0x2800
mov eax, dword [ebp - 0x1448]
mov ecx, dword [eax + 0x844]
call fcn.00416020
push 0xffffffffffffffff
push 2
lea ecx, [ebp - 0x1428]
push ecx
lea ecx, [ebp - 0x224]
call fcn.00412b50
add eax, 0x1c
mov ecx, eax
call fcn.004128e0
mov dword [ebp - 0x14bc], eax
mov edx, dword [ebp - 0x14bc]
mov dword [ebp - 0x14c0], edx
mov byte [ebp - 4], 0x24
mov eax, dword [ebp - 0x14c0]
push eax
mov ecx, dword [ebp - 0x1448]
add ecx, 0x864
push ecx
lea edx, [ebp - 0x1444]
push edx
call fcn.004139c0
add esp, 0xc
mov dword [ebp - 0x14c4], eax
mov eax, dword [ebp - 0x14c4]
mov dword [ebp - 0x14c8], eax
mov byte [ebp - 4], 0x25
mov ecx, dword [ebp - 0x14c8]
push ecx
lea edx, [ebp - 0x1250]
push edx
call fcn.0044ed60
add esp, 8
mov byte [ebp - 4], 0x27
lea ecx, [ebp - 0x1444]
call fcn.00405fb0
mov byte [ebp - 4], 0x28
lea ecx, [ebp - 0x1428]
call fcn.00405fb0
lea ecx, [ebp - 0x1234]
call fcn.004012c0
push eax
call dword [sym.imp.SHLWAPI.dll_PathFileExistsW]
test eax, eax
je 0x41240a
push 0x54afc8
lea ecx, [ebp - 0x1234]
call fcn.004078e0
push eax
lea ecx, [ebp - 0x126c]
call fcn.00407860
mov byte [ebp - 4], 0x29
lea ecx, [ebp - 0x126c]
call fcn.004012c0
push eax
lea ecx, [ebp - 0x1234]
call fcn.004012c0
push eax
call fcn.0044df20
add esp, 8
mov byte [ebp - 4], 0x28
lea ecx, [ebp - 0x126c]
call fcn.00406040
lea ecx, [ebp - 0x1234]
call fcn.004012c0
push eax
lea ecx, [ebp - 0x1250]
call fcn.004012c0
push eax
mov ecx, dword [ebp - 0x1448]
add ecx, 0x828
call fcn.004158d0
mov dword [ebp - 0x1218], eax
mov byte [ebp - 4], 0x22
lea ecx, [ebp - 0x1250]
call fcn.00406040
mov byte [ebp - 4], 0x20
lea ecx, [ebp - 0x1234]
call fcn.00406040
mov byte [ebp - 4], 1
lea ecx, [ebp - 0x1214]
call fcn.00406040
jmp 0x4118d8
mov byte [ebp - 4], 1
lea ecx, [ebp - 0x1214]
call fcn.00406040
jmp 0x4118d8
mov byte [ebp - 4], 0
lea ecx, [ebp - 0x650]
call fcn.00406040
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x66c]
call fcn.00406040
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
mov ecx, dword [ebp - 0x10]
xor ecx, ebp
call fcn.00486c08
mov esp, ebp
pop ebp
ret