Function at 0x4b7e61
Capabilities:
Read .ini file

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x140
mov dword [ebp - 0x140], ecx
mov eax, dword [ebp - 0x140]
mov ecx, dword [ebp - 0x140]
mov edx, dword [eax + 0x150c]
sub edx, dword [ecx + 0x1504]
mov dword [ebp - 0x110], edx
cmp dword [ebp - 0x110], 0
je 0x4b7eda
mov eax, dword [ebp - 0x140]
mov ecx, dword [ebp - 0x140]
mov edx, dword [eax + 0x1504]
cmp edx, dword [ecx + 0x14fc]
jg 0x4b7eda
mov eax, dword [ebp - 0x140]
mov ecx, dword [ebp - 0x140]
mov edx, dword [eax + 0x150c]
cmp edx, dword [ecx + 0x14fc]
jl 0x4b7eda
mov eax, dword [ebp - 0x110]
sub eax, 2
mov dword [ebp - 0x110], eax
mov dword [ebp - 0x64], 1
mov dword [ebp - 0x60], 2
mov dword [ebp - 0x5c], 0x3ea
mov dword [ebp - 0x58], 0x54d
mov dword [ebp - 0x54], 0x52f
mov dword [ebp - 0x50], 0x3ec
mov dword [ebp - 0x4c], 0x54c
mov dword [ebp - 0x48], 0x60a
mov dword [ebp - 0x44], 0x614
mov dword [ebp - 0x40], 0x62e
mov dword [ebp - 0x108], 0x3ed
mov dword [ebp - 0x104], 0x50d
mov dword [ebp - 0x100], 0x510
mov dword [ebp - 0xfc], 0x50e
mov dword [ebp - 0xf8], 0x401
mov dword [ebp - 0xf4], 0x50f
mov dword [ebp - 0xf0], 0x4e4
mov dword [ebp - 0xec], 0x605
mov dword [ebp - 0xe8], 0x442
mov dword [ebp - 0xe4], 0x54e
mov dword [ebp - 0xe0], 0x4c9
mov dword [ebp - 0x90], 0
jmp 0x4b7fa9
mov ecx, dword [ebp - 0x90]
add ecx, 1
mov dword [ebp - 0x90], ecx
cmp dword [ebp - 0x90], 0xa
jae 0x4b806d
lea edx, [ebp - 0x1c]
push edx
mov eax, dword [ebp - 0x90]
mov ecx, dword [ebp + eax*4 - 0x64]
push ecx
mov ecx, dword [ebp - 0x140]
call fcn.005654d4
mov ecx, eax
call fcn.00411570
mov edx, dword [ebp - 0x90]
mov eax, dword [ebp + edx*4 - 0x64]
push eax
mov ecx, dword [ebp - 0x140]
call fcn.005654d4
mov ecx, eax
call fcn.00401600
mov dword [ebp - 4], eax
lea ecx, [ebp - 0x1c]
push ecx
mov ecx, dword [ebp - 4]
call fcn.00568f03
mov edx, dword [ebp - 0x14]
sub edx, dword [ebp - 0x1c]
mov dword [ebp - 0x68], edx
mov eax, dword [ebp - 0x140]
mov ecx, dword [eax + 0x1508]
sub ecx, dword [ebp - 0x68]
sub ecx, 0xa
mov dword [ebp - 0x1c], ecx
mov edx, dword [ebp - 0x140]
mov eax, dword [edx + 0x1508]
sub eax, 0xa
mov dword [ebp - 0x14], eax
push 1
mov ecx, dword [ebp - 0x10]
sub ecx, dword [ebp - 0x18]
push ecx
mov edx, dword [ebp - 0x14]
sub edx, dword [ebp - 0x1c]
push edx
mov eax, dword [ebp - 0x18]
push eax
mov ecx, dword [ebp - 0x1c]
push ecx
mov edx, dword [ebp - 0x90]
mov eax, dword [ebp + edx*4 - 0x64]
push eax
mov ecx, dword [ebp - 0x140]
call fcn.005654d4
mov ecx, eax
call fcn.005656ee
jmp 0x4b7f9a
mov dword [ebp - 0x90], 0
jmp 0x4b8088
mov ecx, dword [ebp - 0x90]
add ecx, 1
mov dword [ebp - 0x90], ecx
cmp dword [ebp - 0x90], 0xb
jae 0x4b813d
lea edx, [ebp - 0x1c]
push edx
mov eax, dword [ebp - 0x90]
mov ecx, dword [ebp + eax*4 - 0x108]
push ecx
mov ecx, dword [ebp - 0x140]
call fcn.005654d4
mov ecx, eax
call fcn.00411570
mov edx, dword [ebp - 0x90]
mov eax, dword [ebp + edx*4 - 0x108]
push eax
mov ecx, dword [ebp - 0x140]
call fcn.005654d4
mov ecx, eax
call fcn.00401600
mov dword [ebp - 4], eax
lea ecx, [ebp - 0x1c]
push ecx
mov ecx, dword [ebp - 4]
call fcn.00568f03
mov edx, dword [ebp - 0x10]
add edx, dword [ebp - 0x110]
mov dword [ebp - 0x10], edx
mov eax, dword [ebp - 0x18]
add eax, dword [ebp - 0x110]
mov dword [ebp - 0x18], eax
push 1
mov ecx, dword [ebp - 0x10]
sub ecx, dword [ebp - 0x18]
push ecx
mov edx, dword [ebp - 0x14]
sub edx, dword [ebp - 0x1c]
push edx
mov eax, dword [ebp - 0x18]
push eax
mov ecx, dword [ebp - 0x1c]
push ecx
mov edx, dword [ebp - 0x90]
mov eax, dword [ebp + edx*4 - 0x108]
push eax
mov ecx, dword [ebp - 0x140]
call fcn.005654d4
mov ecx, eax
call fcn.005656ee
jmp 0x4b8079
push 0x899
mov ecx, dword [ebp - 0x140]
call fcn.005654d4
mov dword [ebp - 0xdc], eax
lea ecx, [ebp - 0x3c]
push ecx
mov ecx, dword [ebp - 0xdc]
call fcn.00411570
mov ecx, dword [ebp - 0xdc]
call fcn.00401600
mov dword [ebp - 4], eax
lea edx, [ebp - 0x3c]
push edx
mov ecx, dword [ebp - 4]
call fcn.00568f03
lea eax, [ebp - 0x1c]
push eax
push 0x3ec
mov ecx, dword [ebp - 0x140]
call fcn.005654d4
mov ecx, eax
call fcn.00411570
push 0x3ec
mov ecx, dword [ebp - 0x140]
call fcn.005654d4
mov ecx, eax
call fcn.00401600
mov dword [ebp - 4], eax
lea ecx, [ebp - 0x1c]
push ecx
mov ecx, dword [ebp - 4]
call fcn.00568f03
lea edx, [ebp - 0x2c]
push edx
push 0x412
mov ecx, dword [ebp - 0x140]
call fcn.005654d4
mov ecx, eax
call fcn.00411570
push 0x412
mov ecx, dword [ebp - 0x140]
call fcn.005654d4
mov ecx, eax
call fcn.00401600
mov dword [ebp - 4], eax
lea eax, [ebp - 0x2c]
push eax
mov ecx, dword [ebp - 4]
call fcn.00568f03
push 0x899
mov ecx, dword [ebp - 0x140]
call fcn.005654d4
mov dword [ebp - 0xdc], eax
mov eax, dword [ebp - 0x14]
sub eax, dword [ebp - 0x2c]
mov ecx, dword [ebp - 0x14]
sub ecx, dword [ebp - 0x2c]
and ecx, reloc.OLEAUT32.dll_VariantInit
jns 0x4b822d
dec ecx
or ecx, 0xfffffff8
inc ecx
sub eax, ecx
cdq
and edx, 7
add eax, edx
sar eax, 3
add eax, 2
mov dword [ebp - 0x10c], eax
lea edx, [ebp - 0x3c]
push edx
mov ecx, dword [ebp - 0xdc]
call fcn.00411570
mov ecx, dword [ebp - 0xdc]
call fcn.00401600
mov dword [ebp - 4], eax
lea eax, [ebp - 0x3c]
push eax
mov ecx, dword [ebp - 4]
call fcn.00568f03
mov ecx, dword [ebp - 0x34]
sub ecx, dword [ebp - 0x3c]
mov dword [ebp - 0x68], ecx
mov edx, dword [ebp - 0x30]
sub edx, dword [ebp - 0x38]
mov dword [ebp - 0x94], edx
lea eax, [ebp - 0x3c]
push eax
push 0x45b
mov ecx, dword [ebp - 0x140]
call fcn.005654d4
mov ecx, eax
call fcn.00411570
push 0x45b
mov ecx, dword [ebp - 0x140]
call fcn.005654d4
mov ecx, eax
call fcn.00401600
mov dword [ebp - 4], eax
lea ecx, [ebp - 0x3c]
push ecx
mov ecx, dword [ebp - 4]
call fcn.00568f03
mov edx, dword [ebp - 0x34]
sub edx, dword [ebp - 0x3c]
mov dword [ebp - 0x6c], edx
mov eax, dword [ebp - 0x30]
sub eax, dword [ebp - 0x38]
mov dword [ebp - 8], eax
fild dword [ebp - 0x6c]
fidiv dword [ebp - 8]
fstp dword [ebp - 0xc]
cmp dword [ebp - 8], 0x43
jle 0x4b82e8
mov dword [ebp - 8], 0x43
cmp dword [ebp - 0x94], 0x2a
jle 0x4b82fb
mov dword [ebp - 0x94], 0x2a
mov eax, dword [ebp - 0x14]
sub eax, dword [ebp - 0x2c]
mov ecx, dword [ebp - 0x14]
sub ecx, dword [ebp - 0x2c]
and ecx, reloc.OLEAUT32.dll_VariantInit
jns 0x4b8314
dec ecx
or ecx, 0xfffffff8
inc ecx
sub eax, ecx
cdq
and edx, 7
add eax, edx
sar eax, 3
add eax, 2
mov dword [ebp - 0x10c], eax
cmp dword [ebp + 8], 0
jne 0x4b8935
push 0x6784a8
push 8
push str.NoOfButtonPerLine
push 0x5c53f0
call dword [sym.imp.KERNEL32.dll_GetPrivateProfileIntA]
mov dword [ebp - 0x11c], eax
push 0
push 0x62e
mov ecx, dword [ebp - 0x140]
call fcn.005654d4
mov ecx, eax
call fcn.0056577e
mov dword [ebp - 0x118], 0
push 0x899
mov ecx, dword [ebp - 0x140]
call fcn.005654d4
mov dword [ebp - 0xdc], eax
lea edx, [ebp - 0x3c]
push edx
mov ecx, dword [ebp - 0xdc]
call fcn.00411570
mov ecx, dword [ebp - 0xdc]
call fcn.00401600
mov dword [ebp - 4], eax
lea eax, [ebp - 0x3c]
push eax
mov ecx, dword [ebp - 4]
call fcn.00568f03
lea ecx, [ebp - 0x1c]
push ecx
push 0x3ec
mov ecx, dword [ebp - 0x140]
call fcn.005654d4
mov ecx, eax
call fcn.00411570
push 0x3ec
mov ecx, dword [ebp - 0x140]
call fcn.005654d4
mov ecx, eax
call fcn.00401600
mov dword [ebp - 4], eax
lea edx, [ebp - 0x1c]
push edx
mov ecx, dword [ebp - 4]
call fcn.00568f03
lea eax, [ebp - 0x2c]
push eax
push 0x412
mov ecx, dword [ebp - 0x140]
call fcn.005654d4
mov ecx, eax
call fcn.00411570
push 0x412
mov ecx, dword [ebp - 0x140]
call fcn.005654d4
mov ecx, eax
call fcn.00401600
mov dword [ebp - 4], eax
lea ecx, [ebp - 0x2c]
push ecx
mov ecx, dword [ebp - 4]
call fcn.00568f03
mov edx, dword [ebp - 0x6c]
add edx, 7
mov eax, dword [ebp - 0x11c]
imul eax, edx
mov ecx, dword [ebp - 0x140]
mov edx, dword [ecx + 0x1508]
sub edx, eax
mov eax, edx
cdq
idiv dword [ebp - 0x11c]
mov ecx, dword [ebp - 0x6c]
lea edx, [ecx + eax + 3]
mov dword [ebp - 0x10c], edx
mov eax, dword [ebp - 0x10c]
sub eax, dword [ebp - 0x6c]
sub eax, 7
mov dword [ebp - 0x118], eax
mov ecx, dword [ebp - 0x6c]
add ecx, dword [ebp - 0x118]
mov dword [ebp - 0x6c], ecx
mov edx, dword [ebp - 0x68]
add edx, dword [ebp - 0x118]
mov dword [ebp - 0x68], edx
mov eax, dword [ebp - 0x2c]
mov dword [ebp - 0xd8], eax
mov ecx, dword [ebp - 0xd8]
add ecx, dword [ebp - 0x10c]
mov dword [ebp - 0xd4], ecx
mov edx, dword [ebp - 0xd4]
add edx, dword [ebp - 0x10c]
mov dword [ebp - 0xd0], edx
mov eax, dword [ebp - 0xd0]
add eax, dword [ebp - 0x10c]
mov dword [ebp - 0xcc], eax
mov ecx, dword [ebp - 0xcc]
add ecx, dword [ebp - 0x10c]
mov dword [ebp - 0xc8], ecx
mov edx, dword [ebp - 0xc8]
add edx, dword [ebp - 0x10c]
mov dword [ebp - 0xc4], edx
mov eax, dword [ebp - 0xc4]
add eax, dword [ebp - 0x10c]
mov dword [ebp - 0xc0], eax
mov ecx, dword [ebp - 0xc0]
add ecx, dword [ebp - 0x10c]
mov dword [ebp - 0xbc], ecx
lea edx, [ebp - 0x3c]
push edx
push 0x3ed
mov ecx, dword [ebp - 0x140]
call fcn.005654d4
mov ecx, eax
call fcn.00411570
push 0x3ed
mov ecx, dword [ebp - 0x140]
call fcn.005654d4
mov ecx, eax
call fcn.00401600
mov dword [ebp - 4], eax
lea eax, [ebp - 0x3c]
push eax
mov ecx, dword [ebp - 4]
call fcn.00568f03
mov eax, dword [0x673b98]
cdq
idiv dword [ebp - 0x11c]
mov dword [ebp - 0x120], eax
mov eax, dword [0x673b98]
cdq
idiv dword [ebp - 0x11c]
test edx, edx
je 0x4b8589
mov ecx, dword [ebp - 0x120]
add ecx, 1
mov dword [ebp - 0x120], ecx
mov eax, dword [ebp - 0x10]
sub eax, dword [ebp - 0x38]
cdq
idiv dword [ebp - 0x120]
cdq
and edx, 3
add eax, edx
sar eax, 2
imul eax, eax, 5
mov dword [ebp - 0x128], eax
mov edx, dword [ebp - 0x128]
imul edx, dword [ebp - 0x120]
mov dword [ebp - 0x128], edx
mov eax, dword [ebp - 0x10]
sub eax, dword [ebp - 0x38]
sub eax, dword [ebp - 0x128]
mov dword [ebp - 0x128], eax
cmp dword [ebp - 0x128], 0x50
jge 0x4b85e0
mov dword [ebp - 0x128], 0x50
mov ecx, dword [ebp - 0x120]
imul ecx, dword [ebp - 8]
mov edx, dword [ebp - 0x38]
sub edx, ecx
sub edx, dword [ebp - 0x128]
mov eax, dword [ebp - 0x10]
add eax, 5
cmp edx, eax
jle 0x4b860d
mov ecx, dword [ebp - 0x10]
add ecx, 0x50
mov dword [ebp - 0x8c], ecx
jmp 0x4b8623
mov edx, dword [ebp - 0x10]
add edx, 5
mov dword [ebp - 0x8c], edx
mov dword [ebp - 0x118], 0
mov eax, dword [ebp - 0x38]
sub eax, dword [ebp - 0x8c]
sub eax, 7
cdq
idiv dword [ebp - 0x120]
add eax, 2
mov dword [ebp - 0x10c], eax
mov eax, dword [ebp - 0x10c]
sub eax, dword [ebp - 8]
sub eax, 7
mov dword [ebp - 0x118], eax
mov ecx, dword [ebp - 8]
add ecx, dword [ebp - 0x118]
mov dword [ebp - 8], ecx
mov edx, dword [ebp - 0x94]
add edx, dword [ebp - 0x118]
mov dword [ebp - 0x94], edx
mov eax, dword [ebp - 0x8c]
add eax, dword [ebp - 0x10c]
mov dword [ebp - 0x88], eax
mov ecx, dword [ebp - 0x88]
add ecx, dword [ebp - 0x10c]
mov dword [ebp - 0x84], ecx
mov edx, dword [ebp - 0x84]
add edx, dword [ebp - 0x10c]
mov dword [ebp - 0x80], edx
mov eax, dword [ebp - 0x80]
add eax, dword [ebp - 0x10c]
mov dword [ebp - 0x7c], eax
mov dword [ebp - 0x124], 0xffffffff
mov dword [ebp - 0x90], 1
jmp 0x4b86d3
mov ecx, dword [ebp - 0x90]
add ecx, 1
mov dword [ebp - 0x90], ecx
mov edx, dword [0x673b98]
add edx, 1
cmp dword [ebp - 0x90], edx
jge 0x4b8816
mov eax, dword [ebp - 0x90]
sub eax, 1
cdq
idiv dword [ebp - 0x11c]
test edx, edx
jne 0x4b870b
mov eax, dword [ebp - 0x124]
add eax, 1
mov dword [ebp - 0x124], eax
push 1
mov ecx, dword [ebp - 8]
push ecx
mov edx, dword [ebp - 0x6c]
push edx
mov eax, dword [ebp - 0x124]
mov ecx, dword [ebp + eax*4 - 0x8c]
push ecx
mov eax, dword [ebp - 0x90]
sub eax, 1
cdq
idiv dword [ebp - 0x11c]
mov edx, dword [ebp + edx*4 - 0xd8]
push edx
mov eax, dword [ebp - 0x90]
add eax, 0x45a
push eax
mov ecx, dword [ebp - 0x140]
call fcn.005654d4
mov ecx, eax
call fcn.005656ee
push 1
mov ecx, dword [ebp - 0x94]
push ecx
mov edx, dword [ebp - 0x68]
push edx
mov eax, dword [ebp - 0x124]
mov ecx, dword [ebp + eax*4 - 0x8c]
add ecx, 0x14
push ecx
mov eax, dword [ebp - 0x90]
sub eax, 1
cdq
idiv dword [ebp - 0x11c]
mov edx, dword [ebp + edx*4 - 0xd8]
add edx, 0xa
push edx
mov eax, dword [ebp - 0x90]
add eax, 0x898
push eax
mov ecx, dword [ebp - 0x140]
call fcn.005654d4
mov ecx, eax
call fcn.005656ee
push 1
push 0x14
mov eax, dword [ebp - 0x6c]
cdq
idiv dword [ebp - 0x120]
sub eax, 4
push eax
mov ecx, dword [ebp - 0x124]
mov edx, dword [ebp + ecx*4 - 0x8c]
push edx
mov eax, dword [ebp - 0x90]
sub eax, 1
cdq
idiv dword [ebp - 0x11c]
mov ecx, edx
mov eax, dword [ebp - 0x6c]
cdq
idiv dword [ebp - 0x120]
mov edx, dword [ebp + ecx*4 - 0xd8]
add edx, eax
push edx
mov eax, dword [ebp - 0x90]
imul eax, eax, 0x3c
mov ecx, dword [ebp - 0x140]
lea ecx, [ecx + eax + 0x10e0]
call fcn.005656ee
jmp 0x4b86c4
lea edx, [ebp - 0x1c]
push edx
mov ecx, dword [0x5eaa50]
call fcn.00411570
mov ecx, dword [0x5eaa50]
call fcn.00401600
mov dword [ebp - 0x114], eax
lea eax, [ebp - 0x1c]
push eax
mov ecx, dword [ebp - 0x114]
call fcn.00568f03
lea ecx, [ebp - 0x2c]
push ecx
push 0x3ec
mov ecx, dword [ebp - 0x140]
call fcn.005654d4
mov ecx, eax
call fcn.00411570
push 0x3ec
mov ecx, dword [ebp - 0x140]
call fcn.005654d4
mov ecx, eax
call fcn.00401600
mov dword [ebp - 0x114], eax
lea edx, [ebp - 0x2c]
push edx
mov ecx, dword [ebp - 0x114]
call fcn.00568f03
lea eax, [ebp - 0x3c]
push eax
push 0x45b
mov ecx, dword [ebp - 0x140]
call fcn.005654d4
mov ecx, eax
call fcn.00411570
push 0x45b
mov ecx, dword [ebp - 0x140]
call fcn.005654d4
mov ecx, eax
call fcn.00401600
mov dword [ebp - 0x114], eax
lea ecx, [ebp - 0x3c]
push ecx
mov ecx, dword [ebp - 0x114]
call fcn.00568f03
mov edx, dword [ebp - 0x38]
sub edx, 0xa
cmp edx, dword [ebp - 0x20]
jle 0x4b88ec
mov eax, dword [ebp - 0x38]
sub eax, dword [ebp - 0x18]
sub eax, 0x14
mov dword [ebp - 0x10], eax
jmp 0x4b88f5
mov ecx, dword [ebp - 0x20]
sub ecx, dword [ebp - 0x18]
mov dword [ebp - 0x10], ecx
mov edx, dword [ebp - 0x2c]
sub edx, dword [ebp - 0x1c]
sub edx, 0xf
mov dword [ebp - 0x14], edx
push 1
mov eax, dword [ebp - 0x10]
push eax
mov ecx, dword [ebp - 0x14]
push ecx
mov edx, dword [ebp - 0x18]
push edx
mov eax, dword [ebp - 0x1c]
push eax
mov ecx, dword [0x5eaa50]
call fcn.005656ee
mov ecx, dword [0x5ea0b4]
push ecx
mov ecx, dword [0x5eaa50]
call fcn.00418f05
jmp 0x4b8f23
push 0x54d
mov ecx, dword [ebp - 0x140]
call fcn.005654d4
mov ecx, eax
call fcn.00401600
mov dword [ebp - 4], eax
lea edx, [ebp - 0x2c]
push edx
push 0x3ec
mov ecx, dword [ebp - 0x140]
call fcn.005654d4
mov ecx, eax
call fcn.00411570
lea eax, [ebp - 0x2c]
push eax
mov ecx, dword [ebp - 4]
call fcn.00568f03
lea ecx, [ebp - 0x3c]
push ecx
push 0x62e
mov ecx, dword [ebp - 0x140]
call fcn.005654d4
mov ecx, eax
call fcn.00411570
lea edx, [ebp - 0x3c]
push edx
mov ecx, dword [ebp - 4]
call fcn.00568f03
push 1
mov eax, dword [ebp - 0x30]
sub eax, dword [ebp - 0x38]
push eax
mov ecx, dword [ebp - 0x34]
sub ecx, dword [ebp - 0x3c]
push ecx
mov edx, dword [ebp - 0x20]
add edx, 0xf
push edx
mov eax, dword [ebp - 0x3c]
push eax
push 0x62e
mov ecx, dword [ebp - 0x140]
call fcn.005654d4
mov ecx, eax
call fcn.005656ee
push 5
push 0x62e
mov ecx, dword [ebp - 0x140]
call fcn.005654d4
mov ecx, eax
call fcn.0056577e
lea ecx, [ebp - 0x1c]
push ecx
mov ecx, dword [0x5eaa50]
call fcn.00411570
mov ecx, dword [0x5eaa50]
call fcn.00401600
mov dword [ebp - 0x130], eax
lea edx, [ebp - 0x1c]
push edx
mov ecx, dword [ebp - 0x130]
call fcn.00568f03
lea eax, [ebp - 0x2c]
push eax
push 0x3ec
mov ecx, dword [ebp - 0x140]
call fcn.005654d4
mov ecx, eax
call fcn.00411570
push 0x3ec
mov ecx, dword [ebp - 0x140]
call fcn.005654d4
mov ecx, eax
call fcn.00401600
mov dword [ebp - 0x130], eax
lea ecx, [ebp - 0x2c]
push ecx
mov ecx, dword [ebp - 0x130]
call fcn.00568f03
lea edx, [ebp - 0x3c]
push edx
push 0x3ed
mov ecx, dword [ebp - 0x140]
call fcn.005654d4
mov ecx, eax
call fcn.00411570
push 0x45b
mov ecx, dword [ebp - 0x140]
call fcn.005654d4
mov ecx, eax
call fcn.00401600
mov dword [ebp - 0x130], eax
lea eax, [ebp - 0x3c]
push eax
mov ecx, dword [ebp - 0x130]
call fcn.00568f03
mov ecx, dword [ebp - 0x38]
sub ecx, 0xa
cmp ecx, dword [ebp - 0x20]
jle 0x4b8ac1
mov edx, dword [ebp - 0x38]
sub edx, dword [ebp - 0x18]
sub edx, 0x91
mov dword [ebp - 0x10], edx
jmp 0x4b8aca
mov eax, dword [ebp - 0x20]
sub eax, dword [ebp - 0x18]
mov dword [ebp - 0x10], eax
mov dword [ebp - 0x134], 0x78
mov ecx, dword [ebp - 0x2c]
sub ecx, 0x14
mov dword [ebp - 0x14], ecx
mov edx, dword [ebp - 0x6c]
lea eax, [edx + edx + 0x1e]
mov dword [ebp - 0x1c], eax
push 1
mov ecx, dword [ebp - 0x10]
sub ecx, dword [ebp - 0x18]
push ecx
mov edx, dword [ebp - 0x14]
sub edx, dword [ebp - 0x1c]
push edx
mov eax, dword [ebp - 0x18]
push eax
mov ecx, dword [ebp - 0x1c]
push ecx
mov ecx, dword [0x5eaa50]
call fcn.005656ee
mov edx, dword [0x5ea0b4]
push edx
mov ecx, dword [0x5eaa50]
call fcn.00418f05
push 0
mov ecx, dword [0x5eaa4c]
call fcn.0056577e
push 1
mov eax, dword [ebp - 0x10]
sub eax, dword [ebp - 0x18]
push eax
mov ecx, dword [ebp - 0x14]
sub ecx, dword [ebp - 0x1c]
push ecx
mov edx, dword [ebp - 0x18]
push edx
mov eax, dword [ebp - 0x1c]
push eax
mov ecx, dword [0x5eaa4c]
call fcn.005656ee
mov ecx, dword [0x5ea0b4]
push ecx
mov ecx, dword [0x5eaa4c]
call fcn.00418f05
mov dword [ebp - 0xd8], 0xa
mov edx, dword [ebp - 0x6c]
add edx, 0x14
mov dword [ebp - 0xd4], edx
mov eax, dword [ebp - 8]
add eax, 5
mov dword [ebp - 0x10c], eax
mov ecx, dword [ebp - 0x18]
mov dword [ebp - 0x8c], ecx
mov edx, dword [ebp - 0x8c]
add edx, dword [ebp - 0x10c]
mov dword [ebp - 0x88], edx
mov eax, dword [ebp - 0x88]
add eax, dword [ebp - 0x10c]
mov dword [ebp - 0x84], eax
mov ecx, dword [ebp - 0x84]
add ecx, dword [ebp - 0x10c]
mov dword [ebp - 0x80], ecx
mov edx, dword [ebp - 0x80]
add edx, dword [ebp - 0x10c]
mov dword [ebp - 0x7c], edx
mov eax, dword [ebp - 0x7c]
add eax, dword [ebp - 0x10c]
mov dword [ebp - 0x78], eax
mov ecx, dword [ebp - 0x78]
add ecx, dword [ebp - 0x10c]
mov dword [ebp - 0x74], ecx
mov edx, dword [ebp - 0x74]
add edx, dword [ebp - 0x10c]
mov dword [ebp - 0x70], edx
mov dword [ebp - 0x13c], 0xffffffff
mov dword [ebp - 0x90], 1
jmp 0x4b8c11
mov eax, dword [ebp - 0x90]
add eax, 1
mov dword [ebp - 0x90], eax
cmp dword [ebp - 0x90], 0x11
jge 0x4b8d5e
mov ecx, dword [ebp - 0x90]
sub ecx, 1
and ecx, reloc.OLEAUT32.dll_VariantInit
jns 0x4b8c34
dec ecx
or ecx, 0xfffffff8
inc ecx
test ecx, ecx
jne 0x4b8c47
mov edx, dword [ebp - 0x13c]
add edx, 1
mov dword [ebp - 0x13c], edx
push 1
mov eax, dword [ebp - 8]
push eax
mov ecx, dword [ebp - 0x6c]
push ecx
mov edx, dword [ebp - 0x90]
sub edx, 1
and edx, reloc.OLEAUT32.dll_VariantInit
jns 0x4b8c67
dec edx
or edx, 0xfffffff8
inc edx
mov eax, dword [ebp + edx*4 - 0x8c]
push eax
mov ecx, dword [ebp - 0x13c]
mov edx, dword [ebp + ecx*4 - 0xd8]
push edx
mov eax, dword [ebp - 0x90]
add eax, 0x45a
push eax
mov ecx, dword [ebp - 0x140]
call fcn.005654d4
mov ecx, eax
call fcn.005656ee
push 1
mov ecx, dword [ebp - 0x94]
push ecx
mov edx, dword [ebp - 0x68]
push edx
mov eax, dword [ebp - 0x90]
sub eax, 1
and eax, reloc.OLEAUT32.dll_VariantInit
jns 0x4b8cbd
dec eax
or eax, 0xfffffff8
inc eax
mov ecx, dword [ebp + eax*4 - 0x8c]
add ecx, 0x14
push ecx
mov edx, dword [ebp - 0x13c]
mov eax, dword [ebp + edx*4 - 0xd8]
add eax, 0xa
push eax
mov ecx, dword [ebp - 0x90]
add ecx, 0x898
push ecx
mov ecx, dword [ebp - 0x140]
call fcn.005654d4
mov ecx, eax
call fcn.005656ee
push 1
push 0x14
mov eax, dword [ebp - 0x6c]
cdq
sub eax, edx
sar eax, 1
sub eax, 4
push eax
mov edx, dword [ebp - 0x90]
sub edx, 1
and edx, reloc.OLEAUT32.dll_VariantInit
jns 0x4b8d1e
dec edx
or edx, 0xfffffff8
inc edx
mov eax, dword [ebp + edx*4 - 0x8c]
push eax
mov eax, dword [ebp - 0x6c]
cdq
sub eax, edx
sar eax, 1
mov ecx, dword [ebp - 0x13c]
mov edx, dword [ebp + ecx*4 - 0xd8]
add edx, eax
push edx
mov eax, dword [ebp - 0x90]
imul eax, eax, 0x3c
mov ecx, dword [ebp - 0x140]
lea ecx, [ecx + eax + 0x10e0]
call fcn.005656ee
jmp 0x4b8c02
mov dword [ebp - 0x12c], 1
mov dword [ebp - 0x138], 1
mov edx, dword [ebp - 0x140]
cmp dword [edx + 0x14dc], 0
je 0x4b8db9
mov eax, dword [ebp - 8]
mov ecx, dword [ebp - 0x70]
lea edx, [ecx + eax + 2]
mov dword [ebp - 0x18], edx
mov eax, dword [ebp - 0x24]
mov dword [ebp - 0x14], eax
mov ecx, dword [ebp - 0xd8]
mov dword [ebp - 0x1c], ecx
mov edx, dword [ebp - 0x38]
mov dword [ebp - 0x10], edx
mov dword [ebp - 0x12c], 1
mov dword [ebp - 0x138], 1
jmp 0x4b8e0c
cmp dword [0x5ea024], 0
je 0x4b8dfa
mov eax, dword [ebp - 8]
mov ecx, dword [ebp - 0x70]
lea edx, [ecx + eax + 2]
mov dword [ebp - 0x18], edx
mov eax, dword [ebp - 0x2c]
mov dword [ebp - 0x14], eax
mov ecx, dword [ebp - 0xd8]
mov dword [ebp - 0x1c], ecx
mov edx, dword [ebp - 0x38]
mov dword [ebp - 0x10], edx
mov dword [ebp - 0x12c], 2
mov dword [ebp - 0x138], 3
jmp 0x4b8e0c
mov eax, dword [ebp - 0x10]
add eax, 0x14
mov dword [ebp - 0x18], eax
mov ecx, dword [ebp - 0x38]
sub ecx, 0x14
mov dword [ebp - 0x10], ecx
push 1
mov edx, dword [ebp - 0x10]
sub edx, dword [ebp - 0x18]
push edx
mov eax, dword [ebp - 0x14]
sub eax, dword [ebp - 0x1c]
imul eax, dword [ebp - 0x12c]
cdq
idiv dword [ebp - 0x138]
push eax
mov eax, dword [ebp - 0x18]
push eax
mov ecx, dword [ebp - 0x1c]
push ecx
mov edx, dword [ebp - 0x140]
mov ecx, dword [edx + 0x14e4]
call fcn.005656ee
push 1
mov eax, dword [ebp - 0x10]
sub eax, dword [ebp - 0x18]
sub eax, 2
push eax
mov eax, dword [ebp - 0x14]
sub eax, dword [ebp - 0x1c]
cdq
sub eax, edx
sar eax, 1
sub eax, 2
push eax
mov ecx, dword [ebp - 0x18]
add ecx, 1
push ecx
mov eax, dword [ebp - 0x14]
sub eax, dword [ebp - 0x1c]
cdq
sub eax, edx
sar eax, 1
mov edx, dword [ebp - 0x1c]
lea eax, [edx + eax + 1]
push eax
mov ecx, dword [ebp - 0x140]
mov ecx, dword [ecx + 0x14ec]
call fcn.005656ee
push 1
mov edx, dword [ebp - 0x10]
sub edx, dword [ebp - 0x18]
sub edx, 2
push edx
mov eax, dword [ebp - 0x14]
sub eax, dword [ebp - 0x1c]
cdq
sub eax, edx
sar eax, 1
sub eax, 2
push eax
mov eax, dword [ebp - 0x18]
add eax, 1
push eax
mov ecx, dword [ebp - 0x1c]
add ecx, 1
push ecx
mov edx, dword [ebp - 0x140]
mov ecx, dword [edx + 0x14e8]
call fcn.005656ee
push 1
push 0x32
mov eax, dword [ebp - 0x14]
sub eax, dword [ebp - 0x1c]
push eax
mov ecx, dword [ebp - 0x10]
sub ecx, 0x14
push ecx
mov edx, dword [ebp - 0x1c]
add edx, 3
push edx
mov eax, dword [ebp - 0x140]
mov ecx, dword [eax + 0x14f0]
call fcn.005656ee
push 1
push 0x14
mov ecx, dword [ebp - 0x14]
sub ecx, dword [ebp - 0x1c]
push ecx
mov edx, dword [ebp - 0x10]
sub edx, 0x14
push edx
mov eax, dword [ebp - 0x14]
sub eax, dword [ebp - 0x1c]
cdq
sub eax, edx
sar eax, 1
mov ecx, dword [ebp - 0x1c]
lea edx, [ecx + eax + 3]
push edx
mov eax, dword [ebp - 0x140]
mov ecx, dword [eax + 0x14f4]
call fcn.005656ee
mov ecx, dword [ebp - 0x140]
mov edx, dword [ebp - 0x140]
mov eax, dword [ecx + 0x1508]
cmp eax, dword [edx + 0x14f8]
jl 0x4b8f55
mov ecx, dword [ebp - 0x140]
mov edx, dword [ebp - 0x140]
mov eax, dword [edx + 0x1508]
mov dword [ecx + 0x1500], eax
mov ecx, dword [ebp - 0x140]
mov edx, dword [ebp - 0x140]
mov eax, dword [ecx + 0x150c]
cmp eax, dword [edx + 0x14fc]
jl 0x4b8f87
mov ecx, dword [ebp - 0x140]
mov edx, dword [ebp - 0x140]
mov eax, dword [edx + 0x150c]
mov dword [ecx + 0x1504], eax
lea ecx, [ebp - 0x1c]
push ecx
push 0x605
mov ecx, dword [ebp - 0x140]
call fcn.005654d4
mov ecx, eax
call fcn.00411570
push 0x605
mov ecx, dword [ebp - 0x140]
call fcn.005654d4
mov ecx, eax
call fcn.00401600
mov dword [ebp - 4], eax
lea edx, [ebp - 0x1c]
push edx
mov ecx, dword [ebp - 4]
call fcn.00568f03
push 1
mov eax, dword [ebp - 0x10]
sub eax, dword [ebp - 0x18]
push eax
mov ecx, dword [ebp - 0x14]
sub ecx, dword [ebp - 0x1c]
push ecx
mov edx, dword [ebp - 0x18]
sub edx, 0x14
push edx
mov eax, dword [ebp - 0x1c]
push eax
push 0x606
mov ecx, dword [ebp - 0x140]
call fcn.005654d4
mov ecx, eax
call fcn.005656ee
push 0x6784a8
push 0
push 0x5c53fc
push 0x5c5410
call dword [sym.imp.KERNEL32.dll_GetPrivateProfileIntA]
test eax, eax
je 0x4b9068
cmp dword [0x5edf88], 1
jne 0x4b9068
push 5
push 0x606
mov ecx, dword [ebp - 0x140]
call fcn.005654d4
mov ecx, eax
call fcn.0056577e
push 0x6784a8
push 0
push 0x5c541c
push 0x5c5430
call dword [sym.imp.KERNEL32.dll_GetPrivateProfileIntA]
push eax
push 0x606
mov ecx, dword [ebp - 0x140]
call fcn.005654d4
mov ecx, eax
call fcn.00404950
jmp 0x4b9081
push 0
push 0x606
mov ecx, dword [ebp - 0x140]
call fcn.005654d4
mov ecx, eax
call fcn.0056577e
mov esp, ebp
pop ebp
ret 4