Function at 0x1008889
Capabilities:
Read .ini file

Disassembly:
mov edi, edi
push ebp
mov ebp, esp
sub esp, 0x210
mov eax, dword [0x101fb10]
xor eax, ebp
mov dword [ebp - 4], eax
push ebx
mov ebx, dword [sym.imp.KERNEL32.dll_WritePrivateProfileStringA]
push esi
push edi
mov esi, 0x1020b74
push esi
push 0x100167c
push 0x1001674
mov edi, 0x100159c
push edi
call ebx
push esi
push 0
push 0x10015a4
push edi
call ebx
push esi
push 0x1001670
push 0x1001590
push edi
call ebx
push esi
push 0
push 0x1001664
mov edi, 0x10014c4
push edi
call ebx
mov eax, dword [0x1022584]
sub eax, 0x865
je 0x100890b
dec eax
lea eax, [ebp - 0x20c]
je 0x1008904
push 0x1001658
jmp 0x1008916
push 0x100164c
jmp 0x1008916
push 0x1001664
lea eax, [ebp - 0x20c]
push 0x208
push eax
call fcn.01006dcd
push esi
lea eax, [ebp - 0x20c]
push eax
push 0x100163c
push edi
call ebx
push esi
push 0xa
lea eax, [ebp - 0x20c]
push eax
push dword [0x1022588]
call fcn.0101137a
add esp, 0xc
push eax
push 0x1001620
push edi
call ebx
push esi
push 0xa
lea eax, [ebp - 0x20c]
push eax
mov eax, dword [0x102258c]
and eax, 1
push eax
call fcn.0101137a
add esp, 0xc
push eax
push 0x100141c
push edi
call ebx
push esi
push 0xa
lea eax, [ebp - 0x20c]
push eax
mov eax, dword [0x102258c]
shr eax, 1
and eax, 1
push eax
call fcn.0101137a
add esp, 0xc
push eax
push 0x100140c
push edi
call ebx
push esi
push 0xa
lea eax, [ebp - 0x20c]
push eax
mov eax, dword [0x102258c]
shr eax, 3
and eax, 1
push eax
call fcn.0101137a
add esp, 0xc
push eax
push 0x10013ec
push edi
call ebx
push esi
push 0xa
lea eax, [ebp - 0x20c]
push eax
mov eax, dword [0x102258e]
and eax, 1
push eax
call fcn.0101137a
add esp, 0xc
push eax
push 0x1001610
push edi
call ebx
mov eax, dword [0x102258c]
test eax, 0x20000
je 0x10089f8
xor eax, eax
inc eax
jmp 0x1008a10
test eax, 0x40000
je 0x1008a04
push 2
pop eax
jmp 0x1008a10
and eax, 0x80000
neg eax
sbb eax, eax
and eax, 3
push dword [eax*4 + 0x101f2c8]
lea eax, [ebp - 0x20c]
push 0x208
push eax
call fcn.01006dcd
push esi
lea eax, [ebp - 0x20c]
push eax
push 0x10015fc
push edi
call ebx
mov al, byte [0x1022594]
mov byte [ebp - 0x20c], 0
test al, 1
je 0x1008a8a
test al, 2
lea eax, [ebp - 0x20c]
je 0x1008a59
push 0x10015f8
jmp 0x1008a5e
push 0x10015f4
push 0x208
push eax
call fcn.01006dcd
test byte [0x1022594], 4
je 0x1008aa0
push 0x10015f0
push 0x208
lea eax, [ebp - 0x20c]
push eax
call fcn.01006e54
jmp 0x1008aa0
push 0x10015ec
push 0x208
lea eax, [ebp - 0x20c]
push eax
call fcn.01006dcd
push esi
lea eax, [ebp - 0x20c]
push eax
push 0x10015e0
push edi
call ebx
mov eax, 0x101f190
mov dword [ebp - 0x210], eax
jmp 0x1008ac3
mov eax, dword [ebp - 0x210]
mov ecx, dword [eax + 8]
xor edx, edx
push edx
push dword [eax]
cmp ecx, edx
je 0x1008ad8
cmp dword [ecx], edx
jne 0x1008ad8
push dword [eax - 8]
jmp 0x1008adb
push dword [eax - 4]
push dword [eax - 0xc]
push dword [eax - 0x10]
call fcn.010074c9
add dword [ebp - 0x210], 0x1c
cmp dword [ebp - 0x210], 0x101f28c
jl 0x1008abd
test dword [0x102258c], 0x10000
je 0x1008b33
push 0
push 0x104
push 0x1021710
push 0x10015d0
push edi
call fcn.010074c9
push 0
push 0x104
push 0x1022060
push 0x10015bc
push edi
call fcn.010074c9
call fcn.0101010d
push esi
push 0x208
lea eax, [ebp - 0x20c]
push eax
push 0x10014b3
push 0x10015b0
push edi
call dword [sym.imp.KERNEL32.dll_GetPrivateProfileStringA]
test eax, eax
je 0x1008b86
push 0x1022010
lea eax, [ebp - 0x20c]
push eax
call dword [sym.imp.KERNEL32.dll_lstrcmpiA]
test eax, eax
je 0x1008b86
push 0
lea eax, [ebp - 0x20c]
push eax
call fcn.0100870b
test eax, eax
jne 0x1008b86
xor eax, eax
jmp 0x1008bf2
cmp byte [0x1022010], 0
je 0x1008bad
push esi
push 0x1022010
push 0x10015b0
push edi
call ebx
mov eax, 0x1022010
push eax
push eax
call fcn.01007683
test eax, eax
je 0x1008b82
push esi
push 0x208
lea eax, [ebp - 0x20c]
push eax
push 0x10014b3
push 0x1001538
push edi
call dword [sym.imp.KERNEL32.dll_GetPrivateProfileStringA]
test eax, eax
je 0x1008bdf
lea eax, [ebp - 0x20c]
push eax
call fcn.010087f2
test eax, eax
je 0x1008b82
push esi
push 0x1021fc0
push 0x1001538
push edi
call ebx
call fcn.010078e4
mov ecx, dword [ebp - 4]
pop edi
pop esi
xor ecx, ebp
pop ebx
call fcn.01010bbf
leave
ret 4