Function at 0x41c7d0
Capabilities:
Read .ini file

Disassembly:
push ebp
mov ebp, esp
mov eax, 0x10c0
call fcn.00435d00
mov eax, dword [0x459e00]
xor eax, ebp
mov dword [ebp - 4], eax
push ebx
push esi
push edi
push 0xffe
mov ebx, ecx
xor edi, edi
lea ecx, [ebp - 0x1042]
xor eax, eax
push edi
push ecx
mov word [ebp - 0x1044], ax
call fcn.00434d00
lea edx, [ebp - 0x1098]
push edx
call fcn.00418ea0
add esp, 0x10
push 5
push str._res_
mov ecx, eax
call fcn.00404540
xor ecx, ecx
mov word [ebp - 0x10b4], cx
push eax
lea ecx, [ebp - 0x10b4]
mov dword [ebp - 0x10a0], 7
mov dword [ebp - 0x10a4], edi
call fcn.004032e0
mov esi, 8
cmp dword [ebp - 0x1084], esi
jb 0x41c867
mov edx, dword [ebp - 0x1098]
push edx
call fcn.00433949
add esp, 4
lea eax, [ebp - 0x1098]
push eax
call fcn.00418ea0
add esp, 4
push 0xf
push str._resconfig.ini
mov ecx, eax
call fcn.00404540
xor ecx, ecx
mov word [ebp - 0x1060], cx
push eax
lea ecx, [ebp - 0x1060]
mov dword [ebp - 0x104c], 7
mov dword [ebp - 0x1050], edi
call fcn.004032e0
cmp dword [ebp - 0x1084], esi
jb 0x41c8c0
mov edx, dword [ebp - 0x1098]
push edx
call fcn.00433949
add esp, 4
mov eax, dword [ebp - 0x1060]
cmp dword [ebp - 0x104c], esi
jae 0x41c8d4
lea eax, [ebp - 0x1060]
mov esi, dword [sym.imp.KERNEL32.DLL_GetPrivateProfileStringW]
push eax
push 0x800
lea eax, [ebp - 0x1044]
push eax
push 0x44dadc
push str.icon
push 0x44e2c0
call esi
xor ecx, ecx
lea eax, [ebp - 0x1044]
mov dword [ebp - 0x1068], 7
mov dword [ebp - 0x106c], edi
mov word [ebp - 0x107c], cx
lea edx, [eax + 2]
lea ebx, [ebx]
mov cx, word [eax]
add eax, 2
cmp cx, di
jne 0x41c920
sub eax, edx
sar eax, 1
push eax
lea edx, [ebp - 0x1044]
push edx
lea ecx, [ebp - 0x107c]
call fcn.004028a0
cmp dword [ebp - 0x106c], edi
setne byte [ebp - 0x10b5]
cmp dword [ebp - 0x1068], 8
jb 0x41c967
mov eax, dword [ebp - 0x107c]
push eax
call fcn.00433949
add esp, 4
cmp byte [ebp - 0x10b5], 0
je 0x41c9ae
lea ecx, [ebp - 0x1044]
push ecx
lea edx, [ebp - 0x10b4]
push edx
lea eax, [ebp - 0x1098]
push eax
call fcn.00404690
add esp, 0xc
push eax
lea ecx, [ebx + 0x58]
call fcn.004032e0
cmp dword [ebp - 0x1084], 8
jb 0x41c9ae
mov ecx, dword [ebp - 0x1098]
push ecx
call fcn.00433949
add esp, 4
cmp dword [ebp - 0x104c], 8
mov eax, dword [ebp - 0x1060]
jae 0x41c9c3
lea eax, [ebp - 0x1060]
push eax
push 0x800
lea edx, [ebp - 0x1044]
push edx
push 0x44dadc
push str.softlogo
push 0x44e2c0
call esi
xor eax, eax
mov word [ebp - 0x107c], ax
lea eax, [ebp - 0x1044]
mov dword [ebp - 0x1068], 7
mov dword [ebp - 0x106c], edi
lea edx, [eax + 2]
mov cx, word [eax]
add eax, 2
cmp cx, di
jne 0x41ca03
sub eax, edx
sar eax, 1
push eax
lea ecx, [ebp - 0x1044]
push ecx
lea ecx, [ebp - 0x107c]
call fcn.004028a0
cmp dword [ebp - 0x106c], edi
mov esi, 8
setne byte [ebp - 0x10b5]
cmp dword [ebp - 0x1068], esi
jb 0x41ca4e
mov edx, dword [ebp - 0x107c]
push edx
call fcn.00433949
add esp, 4
cmp byte [ebp - 0x10b5], 0
je 0x41ca94
lea eax, [ebp - 0x1044]
push eax
lea ecx, [ebp - 0x10b4]
push ecx
lea edx, [ebp - 0x1098]
push edx
call fcn.00404690
add esp, 0xc
push eax
lea ecx, [ebx + 0x74]
call fcn.004032e0
cmp dword [ebp - 0x1084], esi
jb 0x41ca94
mov eax, dword [ebp - 0x1098]
push eax
call fcn.00433949
add esp, 4
mov ecx, dword [ebx + 0x1dc]
sub ecx, dword [ebx + 0x1d8]
mov eax, 0x92492493
imul ecx
add edx, ecx
sar edx, 4
mov ecx, edx
shr ecx, 0x1f
add ecx, edx
mov dword [ebp - 0x10bc], edi
test ecx, ecx
jle 0x41cc81
mov dword [ebp - 0x10c0], edi
jmp 0x41cad0
mov esi, dword [ebx + 0x1d8]
add esi, dword [ebp - 0x10c0]
push 5
xor edx, edx
push str.name_
lea ecx, [ebp - 0x1098]
mov dword [ebp - 0x1084], 7
mov dword [ebp - 0x1088], edi
mov word [ebp - 0x1098], dx
call fcn.004028a0
push 0xffffffffffffffff
push edi
push esi
lea ecx, [ebp - 0x1098]
call fcn.00404430
mov esi, eax
xor eax, eax
lea ecx, [ebp - 0x107c]
mov dword [ebp - 0x1068], 7
mov dword [ebp - 0x106c], edi
mov word [ebp - 0x107c], ax
cmp ecx, esi
je 0x41cb96
xor edx, edx
mov dword [ebp - 0x1068], 7
mov dword [ebp - 0x106c], edi
mov word [ebp - 0x107c], dx
cmp dword [esi + 0x14], 8
jae 0x41cb74
mov eax, dword [esi + 0x10]
lea ecx, [eax + eax + 2]
push ecx
lea edx, [ebp - 0x107c]
push esi
push edx
call fcn.00433d20
add esp, 0xc
jmp 0x41cb7e
mov eax, dword [esi]
mov dword [ebp - 0x107c], eax
mov dword [esi], edi
mov ecx, dword [esi + 0x10]
mov dword [ebp - 0x106c], ecx
mov edx, dword [esi + 0x14]
mov dword [ebp - 0x1068], edx
mov dword [esi + 0x10], edi
mov dword [esi + 0x14], edi
cmp dword [ebp - 0x1084], 8
jb 0x41cbae
mov eax, dword [ebp - 0x1098]
push eax
call fcn.00433949
add esp, 4
mov ecx, dword [ebp - 0x1060]
mov eax, 8
cmp dword [ebp - 0x104c], eax
jae 0x41cbc7
lea ecx, [ebp - 0x1060]
cmp dword [ebp - 0x1068], eax
mov eax, dword [ebp - 0x107c]
jae 0x41cbdb
lea eax, [ebp - 0x107c]
push ecx
push 0x800
lea ecx, [ebp - 0x1044]
push ecx
push 0x44dadc
push eax
push 0x44e298
call dword [sym.imp.KERNEL32.DLL_GetPrivateProfileStringW]
lea edx, [ebp - 0x107c]
push edx
mov ecx, ebx
call fcn.0041c6b0
lea edx, [ebp - 0x1044]
lea ecx, [edx + 2]
mov si, word [edx]
add edx, 2
cmp si, di
jne 0x41cc10
sub edx, ecx
sar edx, 1
push edx
lea ecx, [ebp - 0x1044]
push ecx
mov ecx, eax
call fcn.004028a0
cmp dword [ebp - 0x1068], 8
jb 0x41cc46
mov edx, dword [ebp - 0x107c]
push edx
call fcn.00433949
add esp, 4
mov ecx, dword [ebx + 0x1dc]
sub ecx, dword [ebx + 0x1d8]
mov esi, dword [ebp - 0x10bc]
add dword [ebp - 0x10c0], 0x1c
mov eax, 0x92492493
imul ecx
add edx, ecx
sar edx, 4
mov eax, edx
shr eax, 0x1f
inc esi
add eax, edx
mov dword [ebp - 0x10bc], esi
cmp esi, eax
jl 0x41cad0
mov ecx, dword [ebx + 0x1dc]
sub ecx, dword [ebx + 0x1d8]
mov eax, 0x92492493
imul ecx
add edx, ecx
sar edx, 4
mov ecx, edx
shr ecx, 0x1f
add ecx, edx
mov dword [ebp - 0x10bc], edi
test ecx, ecx
jle 0x41ce6d
xor edi, edi
mov esi, dword [ebx + 0x1d8]
push 5
xor edx, edx
push str.desc_
lea ecx, [ebp - 0x1098]
add esi, edi
mov dword [ebp - 0x1084], 7
mov dword [ebp - 0x1088], 0
mov word [ebp - 0x1098], dx
call fcn.004028a0
push 0xffffffffffffffff
push 0
push esi
lea ecx, [ebp - 0x1098]
call fcn.00404430
mov esi, eax
xor eax, eax
lea ecx, [ebp - 0x107c]
mov dword [ebp - 0x1068], 7
mov dword [ebp - 0x106c], 0
mov word [ebp - 0x107c], ax
cmp ecx, esi
je 0x41cd7d
xor edx, edx
mov dword [ebp - 0x1068], 7
mov dword [ebp - 0x106c], eax
mov word [ebp - 0x107c], dx
cmp dword [esi + 0x14], 8
jae 0x41cd5b
mov eax, dword [esi + 0x10]
lea ecx, [eax + eax + 2]
push ecx
lea edx, [ebp - 0x107c]
push esi
push edx
call fcn.00433d20
add esp, 0xc
xor eax, eax
jmp 0x41cd65
mov ecx, dword [esi]
mov dword [ebp - 0x107c], ecx
mov dword [esi], eax
mov edx, dword [esi + 0x10]
mov dword [ebp - 0x106c], edx
mov ecx, dword [esi + 0x14]
mov dword [ebp - 0x1068], ecx
mov dword [esi + 0x10], eax
mov dword [esi + 0x14], eax
cmp dword [ebp - 0x1084], 8
jb 0x41cd95
mov edx, dword [ebp - 0x1098]
push edx
call fcn.00433949
add esp, 4
mov ecx, dword [ebp - 0x1060]
mov eax, 8
cmp dword [ebp - 0x104c], eax
jae 0x41cdae
lea ecx, [ebp - 0x1060]
cmp dword [ebp - 0x1068], eax
mov eax, dword [ebp - 0x107c]
jae 0x41cdc2
lea eax, [ebp - 0x107c]
push ecx
push 0x800
lea ecx, [ebp - 0x1044]
push ecx
push 0x44dadc
push eax
push 0x44e298
call dword [sym.imp.KERNEL32.DLL_GetPrivateProfileStringW]
lea edx, [ebp - 0x107c]
push edx
lea ecx, [ebx + 0x10]
call fcn.0041c6b0
lea edx, [ebp - 0x1044]
lea ecx, [edx + 2]
jmp 0x41ce00
mov si, word [edx]
add edx, 2
test si, si
jne 0x41ce00
sub edx, ecx
sar edx, 1
push edx
lea ecx, [ebp - 0x1044]
push ecx
mov ecx, eax
call fcn.004028a0
cmp dword [ebp - 0x1068], 8
jb 0x41ce36
mov edx, dword [ebp - 0x107c]
push edx
call fcn.00433949
add esp, 4
mov ecx, dword [ebx + 0x1dc]
sub ecx, dword [ebx + 0x1d8]
mov esi, dword [ebp - 0x10bc]
mov eax, 0x92492493
imul ecx
add edx, ecx
sar edx, 4
mov eax, edx
shr eax, 0x1f
inc esi
add eax, edx
add edi, 0x1c
mov dword [ebp - 0x10bc], esi
cmp esi, eax
jl 0x41ccb0
mov eax, dword [ebp - 0x1060]
mov edi, 8
cmp dword [ebp - 0x104c], edi
jae 0x41ce86
lea eax, [ebp - 0x1060]
mov esi, dword [sym.imp.KERNEL32.DLL_GetPrivateProfileStringW]
push eax
push 0x800
lea ecx, [ebp - 0x1044]
push ecx
push 0x44dadc
push 0x44e284
push 0x44e2c0
call esi
lea eax, [ebp - 0x1044]
lea edx, [eax + 2]
mov cx, word [eax]
add eax, 2
test cx, cx
jne 0x41ceb3
sub eax, edx
sar eax, 1
push eax
lea edx, [ebp - 0x1044]
push edx
lea ecx, [ebx + 0x90]
call fcn.004028a0
mov eax, dword [ebp - 0x1060]
cmp dword [ebp - 0x104c], edi
jae 0x41cee9
lea eax, [ebp - 0x1060]
push eax
push 0x800
lea eax, [ebp - 0x1044]
push eax
push 0x44dadc
push 0x44e278
push 0x44e2c0
call esi
xor ecx, ecx
lea eax, [ebp - 0x1044]
mov dword [ebp - 0x1084], 7
mov dword [ebp - 0x1088], 0
mov word [ebp - 0x1098], cx
lea edx, [eax + 2]
lea ecx, [ecx]
mov cx, word [eax]
add eax, 2
test cx, cx
jne 0x41cf30
sub eax, edx
sar eax, 1
push eax
lea edx, [ebp - 0x1044]
push edx
lea ecx, [ebp - 0x1098]
call fcn.004028a0
cmp dword [ebp - 0x1088], 0
setne byte [ebp - 0x10b5]
cmp dword [ebp - 0x1084], edi
jb 0x41cf77
mov eax, dword [ebp - 0x1098]
push eax
call fcn.00433949
add esp, 4
cmp byte [ebp - 0x10b5], 0
je 0x41cfa9
lea eax, [ebp - 0x1044]
lea edx, [eax + 2]
lea esp, [esp]
mov cx, word [eax]
add eax, 2
test cx, cx
jne 0x41cf90
sub eax, edx
sar eax, 1
push eax
lea ecx, [ebp - 0x1044]
push ecx
jmp 0x41cfb0
push 2
push 0x44e270
lea ecx, [ebx + 0xac]
call fcn.004028a0
mov eax, dword [ebp - 0x1060]
cmp dword [ebp - 0x104c], edi
jae 0x41cfcf
lea eax, [ebp - 0x1060]
push eax
push 0x800
lea edx, [ebp - 0x1044]
push edx
push 0x44dadc
push str.param
push 0x44e2c0
call esi
lea eax, [ebp - 0x1044]
lea edx, [eax + 2]
mov cx, word [eax]
add eax, 2
test cx, cx
jne 0x41cff6
sub eax, edx
sar eax, 1
push eax
lea eax, [ebp - 0x1044]
push eax
lea ecx, [ebx + 0xc8]
call fcn.004028a0
mov eax, dword [ebp - 0x1060]
cmp dword [ebp - 0x104c], edi
jae 0x41d02c
lea eax, [ebp - 0x1060]
push eax
push 0x800
lea ecx, [ebp - 0x1044]
push ecx
push 0x44dadc
push 0x44e25c
push 0x44e2c0
call esi
lea eax, [ebp - 0x1044]
lea edx, [eax + 2]
mov cx, word [eax]
add eax, 2
test cx, cx
jne 0x41d053
sub eax, edx
sar eax, 1
push eax
lea edx, [ebp - 0x1044]
push edx
lea ecx, [ebx + 0xe4]
call fcn.004028a0
mov eax, dword [ebp - 0x1060]
cmp dword [ebp - 0x104c], edi
jae 0x41d089
lea eax, [ebp - 0x1060]
push eax
push 0
push str.pixelcode
push 0x44e2c0
call dword [sym.imp.KERNEL32.DLL_GetPrivateProfileIntW]
test eax, eax
setne al
mov byte [ebx + 0x100], al
mov eax, dword [ebp - 0x1060]
cmp dword [ebp - 0x104c], edi
jae 0x41d0bb
lea eax, [ebp - 0x1060]
push eax
push 0x800
lea ecx, [ebp - 0x1044]
push ecx
push 0x44dadc
push str.pixelurl
push 0x44e2c0
call esi
lea eax, [ebp - 0x1044]
lea edx, [eax + 2]
mov cx, word [eax]
add eax, 2
test cx, cx
jne 0x41d0e2
sub eax, edx
sar eax, 1
push eax
lea edx, [ebp - 0x1044]
push edx
lea ecx, [ebx + 0x104]
call fcn.004028a0
mov eax, dword [ebp - 0x1060]
cmp dword [ebp - 0x104c], edi
jae 0x41d118
lea eax, [ebp - 0x1060]
push eax
push 0x800
lea eax, [ebp - 0x1044]
push eax
push 0x44dadc
push str.plugin
push 0x44e2c0
call esi
lea eax, [ebp - 0x1044]
lea edx, [eax + 2]
nop
mov cx, word [eax]
add eax, 2
test cx, cx
jne 0x41d140
sub eax, edx
sar eax, 1
push eax
lea ecx, [ebp - 0x1044]
push ecx
lea ecx, [ebx + 0x120]
call fcn.004028a0
mov eax, dword [ebp - 0x1060]
cmp dword [ebp - 0x104c], edi
jae 0x41d176
lea eax, [ebp - 0x1060]
push eax
push 0x800
lea edx, [ebp - 0x1044]
push edx
push 0x44dadc
push str.license
push 0x44e2c0
call esi
lea eax, [ebp - 0x1044]
lea edx, [eax + 2]
lea ecx, [ecx]
mov cx, word [eax]
add eax, 2
test cx, cx
jne 0x41d1a0
sub eax, edx
sar eax, 1
push eax
lea eax, [ebp - 0x1044]
push eax
lea ecx, [ebx + 0x13c]
call fcn.004028a0
xor esi, esi
lea edi, [ebx + 0x158]
lea ebx, [ebx]
xor ecx, ecx
push 0x3e
push ecx
lea edx, [ebp - 0x42]
push edx
mov word [ebp - 0x44], cx
call fcn.00434d00
push esi
lea eax, [ebp - 0x44]
push str.check_d
push eax
call dword [sym.imp.USER32.dll_wsprintfW]
mov eax, dword [ebp - 0x1060]
add esp, 0x18
cmp dword [ebp - 0x104c], 8
jae 0x41d20a
lea eax, [ebp - 0x1060]
push eax
push 0
lea ecx, [ebp - 0x44]
push ecx
push 0x44e2c0
call dword [sym.imp.KERNEL32.DLL_GetPrivateProfileIntW]
mov dword [edi], eax
inc esi
add edi, 4
cmp esi, 3
jl 0x41d1d0
mov eax, dword [ebp - 0x1060]
mov edi, 8
cmp dword [ebp - 0x104c], edi
jae 0x41d240
lea eax, [ebp - 0x1060]
mov esi, dword [sym.imp.KERNEL32.DLL_GetPrivateProfileStringW]
push eax
push 0x800
lea edx, [ebp - 0x1044]
push edx
push 0x44dadc
push str.track_visit
push 0x44e2c0
call esi
lea eax, [ebp - 0x1044]
lea edx, [eax + 2]
lea ecx, [ecx]
mov cx, word [eax]
add eax, 2
test cx, cx
jne 0x41d270
sub eax, edx
sar eax, 1
push eax
lea eax, [ebp - 0x1044]
push eax
lea ecx, [ebx + 0x164]
call fcn.004028a0
mov eax, dword [ebp - 0x1060]
cmp dword [ebp - 0x104c], edi
jae 0x41d2a6
lea eax, [ebp - 0x1060]
push eax
push 0x800
lea ecx, [ebp - 0x1044]
push ecx
push 0x44dadc
push str.track_init
push 0x44e2c0
call esi
lea eax, [ebp - 0x1044]
lea edx, [eax + 2]
lea ecx, [ecx]
mov cx, word [eax]
add eax, 2
test cx, cx
jne 0x41d2d0
sub eax, edx
sar eax, 1
push eax
lea edx, [ebp - 0x1044]
push edx
lea ecx, [ebx + 0x180]
call fcn.004028a0
mov eax, dword [ebp - 0x1060]
cmp dword [ebp - 0x104c], edi
jae 0x41d306
lea eax, [ebp - 0x1060]
push eax
push 0x800
lea eax, [ebp - 0x1044]
push eax
push 0x44dadc
push str.track_finish
push 0x44e2c0
call esi
lea eax, [ebp - 0x1044]
lea edx, [eax + 2]
lea ecx, [ecx]
mov cx, word [eax]
add eax, 2
test cx, cx
jne 0x41d330
sub eax, edx
sar eax, 1
push eax
lea ecx, [ebp - 0x1044]
push ecx
lea ecx, [ebx + 0x19c]
call fcn.004028a0
mov eax, dword [ebp - 0x1060]
cmp dword [ebp - 0x104c], edi
jae 0x41d366
lea eax, [ebp - 0x1060]
push eax
push 0x800
lea edx, [ebp - 0x1044]
push edx
push 0x44dadc
push str.track_cancel
push 0x44e2c0
call esi
lea eax, [ebp - 0x1044]
lea edx, [eax + 2]
lea ecx, [ecx]
mov cx, word [eax]
add eax, 2
test cx, cx
jne 0x41d390
sub eax, edx
sar eax, 1
push eax
lea eax, [ebp - 0x1044]
push eax
lea ecx, [ebx + 0x1b8]
call fcn.004028a0
mov eax, dword [ebp - 0x1060]
cmp dword [ebp - 0x104c], edi
jae 0x41d3c6
lea eax, [ebp - 0x1060]
mov edi, dword [sym.imp.KERNEL32.DLL_GetPrivateProfileIntW]
push eax
push 0
push str.save_path
push 0x44e2c0
call edi
test eax, eax
mov eax, dword [ebp - 0x1060]
setne cl
cmp dword [ebp - 0x104c], 8
mov byte [ebx + 0x1d4], cl
jae 0x41d3fb
lea eax, [ebp - 0x1060]
push eax
push 0
push str.google_test
push 0x44e2c0
call edi
test eax, eax
mov eax, dword [ebp - 0x1060]
setne dl
cmp dword [ebp - 0x104c], 8
mov byte [ebx + 0x1d5], dl
jae 0x41d42a
lea eax, [ebp - 0x1060]
push eax
push 0x800
lea eax, [ebp - 0x1044]
push eax
push 0x44dadc
push str.skin
push 0x44e2c0
call esi
lea eax, [ebp - 0x1044]
lea edx, [eax + 2]
mov cx, word [eax]
add eax, 2
test cx, cx
jne 0x41d451
sub eax, edx
sar eax, 1
push eax
lea ecx, [ebp - 0x1044]
push ecx
lea ecx, [ebx + 0x1e8]
call fcn.004028a0
cmp dword [ebp - 0x104c], 8
mov eax, dword [ebp - 0x1060]
jae 0x41d488
lea eax, [ebp - 0x1060]
push eax
push 0x800
lea edx, [ebp - 0x1044]
push edx
push 0x44dadc
push str.plugin_id
push 0x44e2c0
call esi
lea eax, [ebp - 0x1044]
lea edx, [eax + 2]
nop
mov cx, word [eax]
add eax, 2
test cx, cx
jne 0x41d4b0
sub eax, edx
sar eax, 1
push eax
lea eax, [ebp - 0x1044]
push eax
lea ecx, [ebx + 0x204]
call fcn.004028a0
cmp dword [ebp - 0x104c], 8
mov eax, dword [ebp - 0x1060]
jae 0x41d4e7
lea eax, [ebp - 0x1060]
push eax
push 0x800
lea ecx, [ebp - 0x1044]
push ecx
push 0x44dadc
push str.cross_recommend
push 0x44e2c0
call esi
lea eax, [ebp - 0x1044]
lea edx, [eax + 2]
mov edi, edi
mov cx, word [eax]
add eax, 2
test cx, cx
jne 0x41d510
sub eax, edx
sar eax, 1
push eax
lea edx, [ebp - 0x1044]
push edx
lea ecx, [ebx + 0x220]
call fcn.004028a0
cmp dword [ebp - 0x104c], 8
mov eax, dword [ebp - 0x1060]
jae 0x41d547
lea eax, [ebp - 0x1060]
push eax
push 0x800
lea eax, [ebp - 0x1044]
push eax
push 0x44dadc
push str.custom_save_path
push 0x44e2c0
call esi
lea eax, [ebp - 0x1044]
lea edx, [eax + 2]
mov edi, edi
mov cx, word [eax]
add eax, 2
test cx, cx
jne 0x41d570
sub eax, edx
sar eax, 1
push eax
lea ecx, [ebp - 0x1044]
push ecx
lea ecx, [ebx + 0x23c]
call fcn.004028a0
cmp dword [ebp - 0x104c], 8
mov eax, dword [ebp - 0x1060]
jae 0x41d5a7
lea eax, [ebp - 0x1060]
push eax
push 0
push str.debug
push 0x44e2c0
call edi
test eax, eax
mov eax, dword [ebp - 0x1060]
setne dl
cmp dword [ebp - 0x104c], 8
mov byte [ebx + 0x258], dl
jae 0x41d5d6
lea eax, [ebp - 0x1060]
push eax
push 0x800
lea eax, [ebp - 0x1044]
push eax
push 0x44dadc
push 0x44e0f0
push 0x44e2c0
call esi
lea eax, [ebp - 0x1044]
lea edx, [eax + 2]
lea ecx, [ecx]
mov cx, word [eax]
add eax, 2
test cx, cx
jne 0x41d600
sub eax, edx
sar eax, 1
push eax
lea ecx, [ebp - 0x1044]
push ecx
lea ecx, [ebx + 0x25c]
call fcn.004028a0
mov esi, 8
cmp dword [ebp - 0x104c], esi
jb 0x41d63e
mov edx, dword [ebp - 0x1060]
push edx
call fcn.00433949
add esp, 4
xor eax, eax
cmp dword [ebp - 0x10a0], esi
pop edi
pop esi
mov dword [ebp - 0x104c], 7
mov dword [ebp - 0x1050], 0
mov word [ebp - 0x1060], ax
pop ebx
jb 0x41d675
mov ecx, dword [ebp - 0x10b4]
push ecx
call fcn.00433949
add esp, 4
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.00434758
mov esp, ebp
pop ebp
ret