Function at 0x5d90a0
Capabilities:
Read .ini file

Disassembly:
sub esp, 0x114
push ebx
mov ebx, dword [esp + 0x11c]
push ebp
push esi
push edi
mov ecx, ebx
call fcn.00583b60
xor eax, eax
mov ax, word [0x7d4010]
push 1
push fcn.00642550
mov ecx, ebx
push eax
call fcn.00588140
xor ecx, ecx
mov cx, word [0x7d4ae8]
push 0x10
mov eax, 0xffff80bd
push eax
push ecx
mov ecx, ebx
call fcn.00581f30
push 0x20
push 0x58f790
push 0xffff8043
mov ecx, ebx
call fcn.00581f30
push ebx
call fcn.00642850
add esp, 4
push 2
mov dword [esp + 0x18], 0x3f000000
mov edx, dword [esp + 0x18]
push edx
push 0xffff8054
mov ecx, eax
call fcn.00581f30
mov ecx, dword [0x7c67dc]
call fcn.0040ff20
mov ecx, dword [eax + 0x560]
mov eax, dword [ecx]
call dword [eax + 0x74]
inc eax
mov ecx, 0x7cb478
mov dword [esp + 0x18], eax
call fcn.004d51b0
mov ecx, 0x7cb478
mov esi, eax
call fcn.004d51e0
mov ecx, 0x7cb478
mov dword [esp + 0x14], eax
call fcn.004d5220
xor ecx, ecx
mov cx, word [0x7d3e3c]
push 0
push str.menu_thin_border.NIF
mov dword [esp + 0x18], eax
push ecx
mov ecx, ebx
call fcn.00588830
mov edi, eax
push 1
mov ecx, edi
call fcn.005813c0
push 1
mov ecx, edi
mov dword [edi + 0xc8], 4
call fcn.00581400
push 0x10
mov eax, 0xffff80cc
push eax
push 0xffff8059
mov ecx, edi
call fcn.00581f30
push 1
xor eax, eax
push eax
push 0xffff800b
mov ecx, edi
call fcn.00581f30
mov edx, dword [str.acrobat.bmp]
mov ebp, dword [sym.imp.MSVCRT.dll_sprintf]
push edx
push str.Textures
lea eax, [esp + 0x2c]
push str._slevelup_s
push eax
call ebp
lea ecx, [esp + 0x34]
push 0x7d3e6c
push ecx
call fcn.0047a960
add esp, 0x18
test eax, eax
jne 0x5d9205
push str.Textures
push str._sDefault_Icon.tga
push 0x7d3e6c
call ebp
add esp, 0xc
push 0
push 0x7d3e6c
push 0xffff80b4
mov ecx, edi
call fcn.00588630
mov edi, eax
push 0xc0
mov ecx, edi
call fcn.00581210
push 0x180
mov ecx, edi
call fcn.00581130
mov ecx, dword [0x7c67dc]
call fcn.0040ff20
mov eax, dword [eax + 0x560]
mov edx, dword [eax + 0x6c]
mov ecx, dword [0x7c67dc]
xor eax, eax
mov ax, word [edx + 0x7c]
inc eax
push eax
push 0x2a6
call fcn.0040f930
push eax
push 0x7759a8
push esi
call ebp
add esp, 0x10
push 0
push 0
push esi
push 0xffff80b4
mov ecx, ebx
call fcn.00588be0
mov ecx, dword [0x7c67dc]
push 0x2ab
call fcn.0040f930
push eax
push esi
call ebp
mov ecx, dword [esp + 0x20]
add esp, 8
push ecx
mov ecx, dword [0x7c67dc]
push 0x39d
call fcn.0040f930
mov edx, dword [esp + 0x18]
push eax
push str._s_d
push edx
call ebp
add esp, 0x10
push 0
push 0xffff80b4
mov ecx, ebx
call fcn.00588980
mov edi, eax
push 1
mov eax, 0x190
push eax
push 0xffff802f
mov ecx, edi
call fcn.00581f30
push 1
mov eax, 0x190
push eax
push 0xffff802b
mov ecx, edi
call fcn.00581f30
push 1
mov ecx, edi
call fcn.00581400
push 1
mov eax, 0xa
push eax
push 0xffff800b
mov ecx, edi
call fcn.00581f30
mov eax, 0xffff80bd
push 0x10
push eax
push 0xffff8061
mov ecx, edi
call fcn.00581f30
mov eax, dword [esp + 0x10]
mov ecx, dword [esp + 0x14]
push str..Morrowind.ini
push 0x1000
push eax
push 0x7c6180
push ecx
push esi
call dword [sym.imp.KERNEL32.dll_GetPrivateProfileStringA]
test eax, eax
jne 0x5d9368
mov ecx, dword [esp + 0x10]
push str..Morrowind.ini
push 0x1000
push ecx
push 0x7c6180
push str.Default
push esi
call dword [sym.imp.KERNEL32.dll_GetPrivateProfileStringA]
test eax, eax
je 0x5d9381
mov edx, dword [esp + 0x10]
xor eax, eax
mov ax, word [0x7d3e5c]
push 0
push 0
push edx
mov ecx, edi
push eax
call fcn.00588be0
xor ecx, ecx
mov cx, word [0x7d4040]
push 0
push ecx
mov ecx, ebx
call fcn.00588980
mov edi, eax
push 1
mov eax, 0x20
push eax
push 0xffff802c
mov ecx, edi
mov dword [edi + 0x118], 0x3f800000
call fcn.00581f30
push 2
mov dword [esp + 0x1c], 0x3f000000
mov edx, dword [esp + 0x1c]
push edx
push 0xffff8054
mov ecx, edi
call fcn.00581f30
push 1
xor eax, eax
push eax
push 0xffff800b
mov ecx, edi
call fcn.00581f30
push str.Icons
push str._sTx_goldicon.tga
push esi
call ebp
xor eax, eax
mov ax, word [0x7d3fb4]
add esp, 0xc
push 0
push esi
mov ecx, edi
push eax
call fcn.00588630
push 8
mov ebp, eax
push str.MenuLevelUp_IconOne
push 0xffff800a
mov ecx, ebp
call fcn.00581f30
push 1
mov eax, 0xa
push eax
push 0xffff800b
mov ecx, ebp
call fcn.00581f30
push 1
mov eax, 0x1e
push eax
push 0xffff802b
mov ecx, ebp
call fcn.00581f30
push 1
mov eax, 0x14
push eax
push 0xffff802c
mov ecx, ebp
call fcn.00581f30
push 1
mov ecx, ebp
call fcn.00582fb0
xor ecx, ecx
mov cx, word [0x7d3e3e]
push 0
push esi
push ecx
mov ecx, edi
call fcn.00588630
push 8
mov ebp, eax
push str.MenuLevelUp_IconTwo
push 0xffff800a
mov ecx, ebp
call fcn.00581f30
mov eax, 0xa
push 1
push eax
push 0xffff800b
mov ecx, ebp
call fcn.00581f30
push 1
mov eax, 0x1e
push eax
push 0xffff802b
mov ecx, ebp
call fcn.00581f30
push 1
mov eax, 0x14
push eax
push 0xffff802c
mov ecx, ebp
call fcn.00581f30
push 1
mov ecx, ebp
call fcn.00582fb0
xor edx, edx
mov dx, word [0x7d3fd4]
push 0
push esi
mov ecx, edi
push edx
call fcn.00588630
push 8
mov edi, eax
push str.MenuLevelUp_IconThree
push 0xffff800a
mov ecx, edi
call fcn.00581f30
push 1
mov eax, 0xa
push eax
push 0xffff800b
mov ecx, edi
call fcn.00581f30
push 1
mov eax, 0x1e
push eax
push 0xffff802b
mov ecx, edi
call fcn.00581f30
push 1
mov eax, 0x14
push eax
push 0xffff802c
mov ecx, edi
call fcn.00581f30
push 1
mov ecx, edi
call fcn.00582fb0
xor eax, eax
mov ax, word [0x7d3fb6]
push 0
mov ecx, ebx
push eax
call fcn.00588980
mov ebx, eax
push 1
mov eax, 0x190
push eax
push 0xffff802b
mov ecx, ebx
mov dword [esp + 0x20], ebx
call fcn.00581f30
push 1
mov ecx, ebx
call fcn.00581400
push 1
xor eax, eax
push eax
push 0xffff800b
mov ecx, ebx
call fcn.00581f30
push 1
mov eax, 0xa
push eax
push 0xffff800d
mov ecx, ebx
call fcn.00581f30
push 0
push 0x78608c
call fcn.0058df10
add esp, 4
mov ecx, ebx
push eax
call fcn.00588980
mov ebp, eax
push 1
mov eax, 0x14
push eax
push 0xffff802b
mov ecx, ebp
call fcn.00581f30
push 1
mov ecx, ebp
call fcn.00581400
push 0x10
mov eax, 0xffff80cc
push eax
push 0xffff8059
mov ecx, ebp
call fcn.00581f30
mov dword [esp + 0x10], 0
mov ecx, dword [esp + 0x10]
push ecx
push 0x775d8c
push esi
call dword [sym.imp.MSVCRT.dll_sprintf]
add esp, 0xc
push 0
push esi
call fcn.0058df10
add esp, 4
mov ecx, ebp
push eax
call fcn.00588980
push 0x20
mov edi, eax
push fcn.005db100
push 0xffff8035
mov ecx, edi
call fcn.00581f30
push 1
xor eax, eax
push eax
push 0xffff800b
mov ecx, edi
call fcn.00581f30
push 1
mov eax, 0x14
push eax
push 0xffff802b
mov ecx, edi
call fcn.00581f30
push 1
mov eax, 0x14
push eax
push 0xffff802c
mov ecx, edi
call fcn.00581f30
mov eax, dword [esp + 0x10]
cmp eax, 3
ja case.default.0x5d9667
jmp dword [eax*4 + 0x5da008]
push 8
push str.Firstone
push 0xffff800a
mov ecx, edi
call fcn.00581f30
xor eax, eax
mov dword [edi + 0x14c], 0x3f800000
mov dword [edi + 0x154], eax
mov dword [edi + 0x150], eax
jmp 0x5d96f3
push 8
push str.Secondone
push 0xffff800a
mov ecx, edi
call fcn.00581f30
xor eax, eax
mov dword [edi + 0x154], 0x3f800000
mov dword [edi + 0x14c], eax
mov dword [edi + 0x150], eax
jmp 0x5d96f3
push 8
push str.Thirdone
push 0xffff800a
mov ecx, edi
call fcn.00581f30
xor eax, eax
mov dword [edi + 0x150], 0x3f800000
mov dword [edi + 0x154], eax
mov dword [edi + 0x14c], eax
mov byte [edi + 0x77], 1
mov eax, dword [esp + 0x10]
inc eax
cmp eax, 4
mov dword [esp + 0x10], eax
jl 0x5d95e5
push 0
push 0x786234
call fcn.0058df10
add esp, 4
mov ecx, ebx
push eax
call fcn.00588980
mov edi, eax
push 1
mov eax, 0x14
push eax
push 0xffff802b
mov ecx, edi
mov dword [esp + 0x1c], edi
call fcn.00581f30
push 1
mov ecx, edi
call fcn.00581400
push 0x10
mov eax, 0xffff80cc
push eax
push 0xffff8059
mov ecx, edi
call fcn.00581f30
xor ebp, ebp
mov dword [esp + 0x18], 0x14
jmp 0x5d9767
mov edi, dword [esp + 0x10]
push ebp
push 0x775d8c
push esi
call dword [sym.imp.MSVCRT.dll_sprintf]
add esp, 0xc
push 0
push esi
call fcn.0058df10
add esp, 4
mov ecx, edi
push eax
call fcn.00588980
push 0x20
mov edi, eax
push fcn.005db100
push 0xffff8035
mov ecx, edi
call fcn.00581f30
push 1
xor eax, eax
push eax
push 0xffff800b
mov ecx, edi
call fcn.00581f30
push 1
mov eax, 0x14
push eax
push 0xffff802b
mov ecx, edi
call fcn.00581f30
mov edx, dword [esp + 0x18]
push 1
push edx
push 0xffff802c
mov ecx, edi
call fcn.00581f30
cmp ebp, 3
ja case.default.0x5d97e0
jmp dword [ebp*4 + 0x5da018]
push 8
push str.Firstone
push 0xffff800a
mov ecx, edi
call fcn.00581f30
xor eax, eax
mov dword [edi + 0x14c], 0x3f800000
mov dword [edi + 0x154], eax
mov dword [edi + 0x150], eax
jmp 0x5d986c
push 8
push str.Secondone
push 0xffff800a
mov ecx, edi
call fcn.00581f30
xor eax, eax
mov dword [edi + 0x154], 0x3f800000
mov dword [edi + 0x14c], eax
mov dword [edi + 0x150], eax
jmp 0x5d986c
push 8
push str.Thirdone
push 0xffff800a
mov ecx, edi
call fcn.00581f30
xor eax, eax
mov dword [edi + 0x150], 0x3f800000
mov dword [edi + 0x154], eax
mov dword [edi + 0x14c], eax
mov byte [edi + 0x77], 1
inc ebp
cmp ebp, 4
jl 0x5d9763
xor eax, eax
mov ax, word [0x7d3e28]
push 0
mov ecx, ebx
push eax
call fcn.00588980
mov edi, eax
push 1
mov eax, 0x96
push eax
push 0xffff802b
mov ecx, edi
mov dword [esp + 0x1c], edi
call fcn.00581f30
push 1
mov ecx, edi
call fcn.00581400
push 0x10
mov eax, 0xffff80cc
push eax
push 0xffff8059
mov ecx, edi
call fcn.00581f30
push 1
xor eax, eax
push eax
push 0xffff800b
mov ecx, edi
call fcn.00581f30
xor ebp, ebp
mov dword [esp + 0x18], 2
jmp 0x5d98e4
mov edi, dword [esp + 0x10]
push 0
push esi
call fcn.0058df10
add esp, 4
mov ecx, edi
push eax
call fcn.00588980
push 0x20
mov edi, eax
push fcn.005db100
push 0xffff8035
mov ecx, edi
call fcn.00581f30
push 1
xor eax, eax
push eax
push 0xffff800b
mov ecx, edi
call fcn.00581f30
push 1
mov eax, 0x96
push eax
push 0xffff802b
mov ecx, edi
call fcn.00581f30
push 1
mov eax, 0x14
push eax
push 0xffff802c
mov ecx, edi
call fcn.00581f30
push 0
push fcn.0064c180
push str.list
call fcn.0058df10
add esp, 4
mov ecx, edi
push eax
call fcn.00588140
mov ecx, dword [0x7c67dc]
mov edi, eax
call fcn.0040ff20
lea ebx, [ebp + ebp*2]
shl ebx, 2
lea ecx, [ebx + eax + 0x254]
call fcn.00401030
call sub.MSVCRT.dll__ftol
push eax
lea ecx, [ebp + 0x378]
push ecx
mov ecx, dword [0x7c67dc]
call fcn.0040f930
push eax
push 0x7759a8
push esi
call dword [sym.imp.MSVCRT.dll_sprintf]
add esp, 0x10
push esi
mov ecx, edi
call fcn.0058ad30
mov ecx, dword [0x7c67dc]
call fcn.0040ff20
lea ecx, [ebx + eax + 0x254]
call fcn.00401030
call sub.MSVCRT.dll__ftol
cmp eax, 0x64
jge 0x5d99e5
push 0x20
push 0x5da870
push 0xffff8035
mov ecx, edi
call fcn.00581f30
xor edx, edx
mov dx, word [0x7d3ff4]
push 1
push ebp
mov ecx, edi
push edx
call fcn.00581f30
push 1
mov eax, 0x14
push eax
push 0xffff802c
mov ecx, edi
call fcn.00581f30
mov eax, dword [esp + 0x18]
xor ecx, ecx
mov cx, word [0x7d3fb6]
push 1
push eax
push ecx
mov ecx, edi
call fcn.00581f30
push 0x20
push 0x5dc100
push 0xffff8063
mov ecx, edi
call fcn.00581f30
mov eax, dword [0x7d4048]
mov ecx, dword [esp + 0x128]
push 0
push 0
push 8
push eax
lea edx, [esp + 0x2c]
push edx
call fcn.00581440
mov eax, dword [eax]
push 8
push eax
xor eax, eax
mov ax, word [0x7d3e5c]
mov ecx, edi
push eax
call fcn.00581f30
inc ebp
cmp ebp, 4
jl 0x5d98e0
push 0
push 0x786258
call fcn.0058df10
mov ecx, dword [esp + 0x1c]
add esp, 4
push eax
call fcn.00588980
mov ebp, eax
push 1
mov eax, 0x14
push eax
push 0xffff802b
mov ecx, ebp
call fcn.00581f30
push 1
mov ecx, ebp
call fcn.00581400
push 1
xor eax, eax
push eax
push 0xffff800b
mov ecx, ebp
call fcn.00581f30
push 1
mov eax, 5
push eax
push 0xffff800d
mov ecx, ebp
call fcn.00581f30
push 0x10
mov eax, 0xffff80cc
push eax
push 0xffff8059
mov ecx, ebp
call fcn.00581f30
xor ebx, ebx
push ebx
push 0x775d8c
push esi
call dword [sym.imp.MSVCRT.dll_sprintf]
add esp, 0xc
push 0
push esi
call fcn.0058df10
add esp, 4
mov ecx, ebp
push eax
call fcn.00588980
push 0x20
mov edi, eax
push fcn.005db100
push 0xffff8035
mov ecx, edi
call fcn.00581f30
push 1
xor eax, eax
push eax
push 0xffff800b
mov ecx, edi
call fcn.00581f30
push 1
mov eax, 0x14
push eax
push 0xffff802b
mov ecx, edi
call fcn.00581f30
push 1
mov eax, 0x14
push eax
push 0xffff802c
mov ecx, edi
call fcn.00581f30
cmp ebx, 3
ja case.default.0x5d9b61
jmp dword [ebx*4 + 0x5da028]
push 8
push str.Firstone
push 0xffff800a
mov ecx, edi
call fcn.00581f30
xor eax, eax
mov dword [edi + 0x14c], 0x3f800000
mov dword [edi + 0x154], eax
mov dword [edi + 0x150], eax
jmp 0x5d9bed
push 8
push str.Secondone
push 0xffff800a
mov ecx, edi
call fcn.00581f30
xor eax, eax
mov dword [edi + 0x154], 0x3f800000
mov dword [edi + 0x14c], eax
mov dword [edi + 0x150], eax
jmp 0x5d9bed
push 8
push str.Thirdone
push 0xffff800a
mov ecx, edi
call fcn.00581f30
xor eax, eax
mov dword [edi + 0x150], 0x3f800000
mov dword [edi + 0x154], eax
mov dword [edi + 0x14c], eax
mov byte [edi + 0x77], 1
inc ebx
cmp ebx, 4
jl 0x5d9ae7
push 0
push 0x786258
call fcn.0058df10
mov ecx, dword [esp + 0x1c]
add esp, 4
push eax
call fcn.00588980
mov ebp, eax
push 1
mov eax, 0x14
push eax
push 0xffff802b
mov ecx, ebp
call fcn.00581f30
push 1
mov ecx, ebp
call fcn.00581400
push 0x10
mov eax, 0xffff80cc
push eax
push 0xffff8059
mov ecx, ebp
call fcn.00581f30
xor ebx, ebx
push 0
push esi
call fcn.0058df10
add esp, 4
mov ecx, ebp
push eax
call fcn.00588980
push 0x20
mov edi, eax
push fcn.005db100
push 0xffff8035
mov ecx, edi
call fcn.00581f30
push 1
xor eax, eax
push eax
push 0xffff800b
mov ecx, edi
call fcn.00581f30
push 1
mov eax, 0x14
push eax
push 0xffff802b
mov ecx, edi
call fcn.00581f30
push 1
mov eax, 0x14
push eax
push 0xffff802c
mov ecx, edi
call fcn.00581f30
cmp ebx, 3
ja case.default.0x5d9cb3
jmp dword [ebx*4 + 0x5da038]
push 8
push str.Firstone
push 0xffff800a
mov ecx, edi
call fcn.00581f30
xor eax, eax
mov dword [edi + 0x14c], 0x3f800000
mov dword [edi + 0x154], eax
mov dword [edi + 0x150], eax
jmp 0x5d9d3f
push 8
push str.Secondone
push 0xffff800a
mov ecx, edi
call fcn.00581f30
xor eax, eax
mov dword [edi + 0x154], 0x3f800000
mov dword [edi + 0x14c], eax
mov dword [edi + 0x150], eax
jmp 0x5d9d3f
push 8
push str.Thirdone
push 0xffff800a
mov ecx, edi
call fcn.00581f30
xor eax, eax
mov dword [edi + 0x150], 0x3f800000
mov dword [edi + 0x154], eax
mov dword [edi + 0x14c], eax
mov byte [edi + 0x77], 1
inc ebx
cmp ebx, 4
jl 0x5d9c49
xor ecx, ecx
mov cx, word [0x7d3e34]
push 0
push ecx
mov ecx, dword [esp + 0x1c]
call fcn.00588980
mov edi, eax
push 1
mov eax, 0x96
push eax
push 0xffff802b
mov ecx, edi
mov dword [esp + 0x1c], edi
call fcn.00581f30
push 1
mov ecx, edi
call fcn.00581400
push 0x10
mov eax, 0xffff80cc
push eax
push 0xffff8059
mov ecx, edi
call fcn.00581f30
mov ebp, 4
mov dword [esp + 0x18], 0x96
mov dword [esp + 0x14], 0x14
mov dword [esp + 0x1c], 5
jmp 0x5d9dbc
mov edi, dword [esp + 0x10]
push 0
push esi
call fcn.0058df10
add esp, 4
mov ecx, edi
push eax
call fcn.00588980
push 0x20
mov edi, eax
push fcn.005db100
push 0xffff8035
mov ecx, edi
call fcn.00581f30
push 1
xor eax, eax
push eax
push 0xffff800b
mov ecx, edi
call fcn.00581f30
mov edx, dword [esp + 0x18]
push 1
push edx
push 0xffff802b
mov ecx, edi
call fcn.00581f30
push 1
mov eax, 0x14
push eax
push 0xffff802c
mov ecx, edi
call fcn.00581f30
push 0
push fcn.0064c180
push str.list2
call fcn.0058df10
add esp, 4
mov ecx, edi
push eax
call fcn.00588140
mov ecx, dword [0x7c67dc]
mov edi, eax
call fcn.0040ff20
lea ebx, [ebp + ebp*2]
shl ebx, 2
lea ecx, [eax + ebx + 0x254]
call fcn.00401030
call sub.MSVCRT.dll__ftol
mov ecx, dword [0x7c67dc]
push eax
lea eax, [ebp + 0x378]
push eax
call fcn.0040f930
push eax
push 0x7759a8
push esi
call dword [sym.imp.MSVCRT.dll_sprintf]
add esp, 0x10
push esi
mov ecx, edi
call fcn.0058ad30
mov ecx, dword [0x7c67dc]
call fcn.0040ff20
lea ecx, [eax + ebx + 0x254]
call fcn.00401030
call sub.MSVCRT.dll__ftol
cmp eax, 0x64
jge 0x5d9ebc
push 0x20
push 0x5da870
push 0xffff8035
mov ecx, edi
call fcn.00581f30
xor ecx, ecx
mov cx, word [0x7d3ff4]
push 1
push ebp
push ecx
mov ecx, edi
call fcn.00581f30
mov edx, dword [esp + 0x14]
push 1
push edx
push 0xffff802c
mov ecx, edi
call fcn.00581f30
mov eax, dword [esp + 0x1c]
xor ecx, ecx
mov cx, word [0x7d3fb6]
push 1
push eax
push ecx
mov ecx, edi
call fcn.00581f30
push 0x20
push 0x5dc100
push 0xffff8063
mov ecx, edi
call fcn.00581f30
mov eax, dword [0x7d3f8c]
mov ecx, dword [esp + 0x128]
push 0
push 0
push 8
push eax
lea edx, [esp + 0x30]
push edx
call fcn.00581440
mov eax, dword [eax]
push 8
push eax
xor eax, eax
mov ax, word [0x7d3e5c]
mov ecx, edi
push eax
call fcn.00581f30
inc ebp
cmp ebp, 8
jl 0x5d9db8
mov ecx, dword [esp + 0x128]
push 0
push 0xffff80b4
call fcn.00588980
mov esi, eax
push 0x28
mov ecx, esi
mov dword [esi + 0x118], 0x3f800000
call fcn.00581210
push 2
mov dword [esp + 0x20], 0xbf800000
mov ecx, dword [esp + 0x20]
push ecx
push 0xffff8054
mov ecx, esi
call fcn.00581f30
xor edx, edx
mov dx, word [0x7d3e4c]
push 0
push fcn.00639420
mov ecx, esi
push edx
call fcn.00588140
push 8
mov esi, eax
push str.MenuLevelUp_Okbutton
push 0xffff800a
mov ecx, esi
call fcn.00581f30
push 0x20
push 0x5da190
push 0xffff8035
mov ecx, esi
call fcn.00581f30
push 2
mov dword [esp + 0x20], 0x40a00000
mov eax, dword [esp + 0x20]
push eax
push 0xffff800b
mov ecx, esi
call fcn.00581f30
mov ecx, dword [0x7c67dc]
push 0x1a
call fcn.0040f930
push eax
mov ecx, esi
call fcn.0058ad30
pop edi
pop esi
pop ebp
pop ebx
add esp, 0x114
ret