Function at 0x1000c350
Capabilities:
Read .ini file

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x10043c5d
mov eax, dword fs:[0]
push eax
sub esp, 0x4b0
mov eax, dword [0x1006b2f0]
xor eax, ebp
mov dword [ebp - 0x14], eax
push ebx
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov dword [ebp - 0x10], esp
mov dword [ebp - 0x47c], 0x10048c98
mov dword [ebp - 0x49c], str.OtherState
mov dword [ebp - 0x4a4], str.Other
mov dword [ebp - 0x4b0], str.Timer
mov dword [ebp - 0x4b4], str.State
mov dword [ebp - 0x4b8], str.Delete
mov dword [ebp - 0x4ac], str.Talk
mov dword [ebp - 0x4bc], str.Special
call fcn.1000bf80
push eax
lea eax, [ebp - 0x21c]
push str..__s.ini
push eax
call fcn.10003770
xor edi, edi
add esp, 0xc
mov dword [ebp - 0x498], edi
mov dword [ebp - 0x494], edi
mov dword [ebp - 0x490], edi
mov ebx, dword [sym.imp.KERNEL32.dll_GetPrivateProfileStringA]
lea eax, [ebp - 0x21c]
push eax
push 0x104
lea eax, [ebp - 0x118]
push eax
push 0x10048cec
push 0x10048cf0
push 0x10048c98
mov dword [ebp - 4], edi
call ebx
sub esp, 0x18
mov ecx, esp
mov dword [ebp - 0x48c], esp
push 1
mov dword [ecx + 0x14], 0xf
mov dword [ecx + 0x10], edi
push 0x10048cf4
mov byte [ebp - 4], 1
mov byte [ecx], 0
call fcn.10002e00
sub esp, 0x18
mov edx, esp
mov byte [ebp - 4], 2
mov dword [edx + 0x14], 0xf
mov dword [edx + 0x10], edi
mov byte [edx], 0
cmp byte [ebp - 0x118], 0
jne 0x1000c477
xor ecx, ecx
jmp 0x1000c489
lea ecx, [ebp - 0x118]
lea esi, [ecx + 1]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x1000c480
sub ecx, esi
push ecx
lea eax, [ebp - 0x118]
push eax
mov ecx, edx
call fcn.10002e00
lea eax, [ebp - 0x488]
push eax
mov byte [ebp - 4], 1
call fcn.100100c0
add esp, 0x34
mov ecx, eax
lea eax, [ebp - 0x498]
cmp eax, ecx
je 0x1000c4e5
mov eax, dword [ecx + 4]
mov edi, dword [ecx]
mov dword [ebp - 0x494], eax
mov eax, dword [ecx + 8]
mov dword [ebp - 0x498], edi
mov dword [ebp - 0x490], eax
mov dword [ecx], 0
mov dword [ecx + 4], 0
mov dword [ecx + 8], 0
mov eax, dword [ebp - 0x488]
test eax, eax
je 0x1000c50f
push dword [ebp - 0x484]
lea ecx, [ebp - 0x488]
push eax
call fcn.1000a960
push dword [ebp - 0x488]
call fcn.1002ad6b
add esp, 4
cmp dword [edi + 0x14], 0x10
jb 0x1000c51f
mov eax, dword [edi]
mov dword [ebp - 0x4a0], eax
jmp 0x1000c527
mov eax, edi
mov dword [ebp - 0x4a0], edi
mov esi, dword [0x1006ee1c]
push str.156789
push eax
call fcn.1002c350
sub eax, dword [ebp - 0x4a0]
add esp, 8
neg eax
push 0
sbb eax, eax
inc eax
push eax
push 0xf1
push 0x3ef
push esi
call dword [sym.imp.USER32.dll_SendDlgItemMessageA]
cmp dword [edi + 0x2c], 0x10
lea eax, [edi + 0x18]
jb 0x1000c565
mov eax, dword [eax]
mov esi, dword [sym.imp.USER32.dll_SetDlgItemTextA]
push eax
push 0x3fc
push dword [0x1006ee1c]
call esi
jmp 0x1000c58d
mov dword [ebp - 0x478], 0x3f0
mov dword [ebp - 0x474], 0x3eb
mov dword [ebp - 0x470], 0x3ec
mov dword [ebp - 0x46c], 0x3ed
mov dword [ebp - 0x468], 0x3ee
mov dword [ebp - 0x464], 0x3f3
mov dword [ebp - 0x460], 0x3fd
mov dword [ebp - 0x45c], 0x3f8
mov dword [ebp - 0x458], 0x3f9
mov dword [ebp - 0x454], 0x3fa
mov dword [ebp - 0x450], 0x3fb
mov dword [ebp - 0x44c], 0x400
mov dword [ebp - 0x43c], 0x410
mov dword [ebp - 0x438], 0x40b
mov dword [ebp - 0x434], 0x40c
mov dword [ebp - 0x430], 0x40d
mov dword [ebp - 0x42c], 0x40e
mov dword [ebp - 0x428], 0x40f
xor eax, eax
mov dword [ebp - 0x4a0], eax
mov dword [ebp - 4], 0
cmp eax, 6
jae 0x1000c8f7
inc eax
push eax
lea eax, [ebp - 0x320]
push str.HP_d
push eax
call fcn.10003770
add esp, 0xc
lea eax, [ebp - 0x21c]
push eax
push 0x104
lea eax, [ebp - 0x118]
push eax
push str.0_0_
lea eax, [ebp - 0x320]
push eax
push dword [ebp - 0x47c]
call ebx
sub esp, 0x18
mov ecx, esp
mov dword [ebp - 0x48c], esp
push 1
mov dword [ecx + 0x14], 0xf
mov dword [ecx + 0x10], 0
push 0x10048cf4
mov byte [ebp - 4], 5
mov byte [ecx], 0
call fcn.10002e00
sub esp, 0x18
mov edx, esp
mov byte [ebp - 4], 6
mov dword [edx + 0x14], 0xf
mov dword [edx + 0x10], 0
mov byte [edx], 0
cmp byte [ebp - 0x118], 0
jne 0x1000c6e9
xor ecx, ecx
jmp 0x1000c6fb
lea ecx, [ebp - 0x118]
lea esi, [ecx + 1]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x1000c6f2
sub ecx, esi
push ecx
lea eax, [ebp - 0x118]
push eax
mov ecx, edx
call fcn.10002e00
lea eax, [ebp - 0x488]
push eax
mov byte [ebp - 4], 5
call fcn.100100c0
mov ecx, eax
add esp, 0x34
mov dword [ebp - 0x48c], ecx
lea eax, [ebp - 0x498]
cmp eax, ecx
je 0x1000c7ae
test edi, edi
je 0x1000c780
mov eax, dword [ebp - 0x494]
mov esi, edi
cmp edi, eax
je 0x1000c771
cmp dword [esi + 0x14], 0x10
jb 0x1000c759
push dword [esi]
call fcn.1002ad6b
mov eax, dword [ebp - 0x494]
add esp, 4
mov dword [esi + 0x14], 0xf
mov dword [esi + 0x10], 0
mov byte [esi], 0
add esi, 0x18
cmp esi, eax
jne 0x1000c743
push edi
call fcn.1002ad6b
mov ecx, dword [ebp - 0x48c]
add esp, 4
mov eax, dword [ecx + 4]
mov edi, dword [ecx]
mov dword [ebp - 0x494], eax
mov eax, dword [ecx + 8]
mov dword [ebp - 0x498], edi
mov dword [ebp - 0x490], eax
mov dword [ecx], 0
mov dword [ecx + 4], 0
mov dword [ecx + 8], 0
mov esi, dword [ebp - 0x488]
test esi, esi
je 0x1000c823
mov eax, dword [ebp - 0x484]
mov dword [ebp - 0x48c], eax
cmp esi, eax
je 0x1000c7fc
cmp dword [esi + 0x14], 0x10
jb 0x1000c7de
push dword [esi]
call fcn.1002ad6b
mov eax, dword [ebp - 0x48c]
add esp, 4
mov dword [esi + 0x14], 0xf
mov dword [esi + 0x10], 0
mov byte [esi], 0
add esi, 0x18
cmp esi, eax
jne 0x1000c7c8
mov esi, dword [ebp - 0x488]
push esi
call fcn.1002ad6b
add esp, 4
mov dword [ebp - 0x488], 0
mov dword [ebp - 0x484], 0
mov dword [ebp - 0x480], 0
cmp dword [edi + 0x14], 0x10
jb 0x1000c833
mov ecx, dword [edi]
mov dword [ebp - 0x48c], ecx
jmp 0x1000c83b
mov ecx, edi
mov dword [ebp - 0x48c], edi
mov eax, dword [ebp - 0x4a0]
mov esi, dword [0x1006ee1c]
shl eax, 2
push str.156789
push ecx
mov dword [ebp - 0x4a8], eax
call fcn.1002c350
sub eax, dword [ebp - 0x48c]
add esp, 8
neg eax
sbb eax, eax
push 0
inc eax
push eax
mov eax, dword [ebp - 0x4a8]
push 0xf1
push dword [ebp + eax - 0x478]
push esi
call dword [sym.imp.USER32.dll_SendDlgItemMessageA]
cmp dword [edi + 0x2c], 0x10
lea eax, [edi + 0x18]
jb 0x1000c890
mov eax, dword [eax]
mov esi, dword [sym.imp.USER32.dll_SetDlgItemTextA]
push eax
mov eax, dword [ebp - 0x4a8]
push dword [ebp + eax - 0x460]
push dword [0x1006ee1c]
call esi
cmp dword [edi + 0x44], 0x10
lea eax, [edi + 0x30]
jb 0x1000c8b7
mov eax, dword [eax]
push eax
mov eax, dword [ebp - 0x4a8]
push dword [ebp + eax - 0x43c]
push dword [0x1006ee1c]
call esi
mov eax, dword [ebp - 0x4a0]
inc eax
jmp 0x1000c643
lea eax, [ebp - 0x21c]
push eax
push 0x104
lea eax, [ebp - 0x118]
push eax
push str.0_0_0_
push str.HPMP
push dword [ebp - 0x47c]
call ebx
sub esp, 0x18
mov ecx, esp
mov dword [ebp - 0x47c], esp
push 1
mov dword [ecx + 0x14], 0xf
mov dword [ecx + 0x10], 0
push 0x10048cf4
mov byte [ebp - 4], 9
mov byte [ecx], 0
call fcn.10002e00
sub esp, 0x18
mov edx, esp
mov byte [ebp - 4], 0xa
mov dword [edx + 0x14], 0xf
mov dword [edx + 0x10], 0
mov byte [edx], 0
cmp byte [ebp - 0x118], 0
jne 0x1000c96f
xor ecx, ecx
jmp 0x1000c981
lea ecx, [ebp - 0x118]
lea esi, [ecx + 1]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x1000c978
sub ecx, esi
push ecx
lea eax, [ebp - 0x118]
push eax
mov ecx, edx
call fcn.10002e00
lea eax, [ebp - 0x488]
push eax
mov byte [ebp - 4], 9
call fcn.100100c0
mov ecx, eax
add esp, 0x34
mov dword [ebp - 0x47c], ecx
lea eax, [ebp - 0x498]
cmp eax, ecx
je 0x1000ca3b
test edi, edi
je 0x1000ca0d
mov eax, dword [ebp - 0x494]
mov esi, edi
cmp edi, eax
je 0x1000c9fe
lea esp, [esp]
cmp dword [esi + 0x14], 0x10
jb 0x1000c9e6
push dword [esi]
call fcn.1002ad6b
mov eax, dword [ebp - 0x494]
add esp, 4
mov dword [esi + 0x14], 0xf
mov dword [esi + 0x10], 0
mov byte [esi], 0
add esi, 0x18
cmp esi, eax
jne 0x1000c9d0
push edi
call fcn.1002ad6b
mov ecx, dword [ebp - 0x47c]
add esp, 4
mov eax, dword [ecx + 4]
mov edi, dword [ecx]
mov dword [ebp - 0x494], eax
mov eax, dword [ecx + 8]
mov dword [ebp - 0x498], edi
mov dword [ebp - 0x490], eax
mov dword [ecx], 0
mov dword [ecx + 4], 0
mov dword [ecx + 8], 0
mov esi, dword [ebp - 0x488]
test esi, esi
je 0x1000ca92
mov eax, dword [ebp - 0x484]
mov dword [ebp - 0x47c], eax
cmp esi, eax
je 0x1000ca89
cmp dword [esi + 0x14], 0x10
jb 0x1000ca6b
push dword [esi]
call fcn.1002ad6b
mov eax, dword [ebp - 0x47c]
add esp, 4
mov dword [esi + 0x14], 0xf
mov dword [esi + 0x10], 0
mov byte [esi], 0
add esi, 0x18
cmp esi, eax
jne 0x1000ca55
mov esi, dword [ebp - 0x488]
push esi
call fcn.1002ad6b
add esp, 4
cmp dword [edi + 0x14], 0x10
jb 0x1000caa2
mov eax, dword [edi]
mov dword [ebp - 0x47c], eax
jmp 0x1000caaa
mov eax, edi
mov dword [ebp - 0x47c], edi
mov esi, dword [0x1006ee1c]
push str.156789
push eax
call fcn.1002c350
sub eax, dword [ebp - 0x47c]
add esp, 8
neg eax
push 0
sbb eax, eax
inc eax
push eax
push 0xf1
push 0x3f1
push esi
call dword [sym.imp.USER32.dll_SendDlgItemMessageA]
cmp dword [edi + 0x2c], 0x10
lea eax, [edi + 0x18]
jb 0x1000cae8
mov eax, dword [eax]
mov esi, dword [sym.imp.USER32.dll_SetDlgItemTextA]
push eax
push 0x3fe
push dword [0x1006ee1c]
call esi
cmp dword [edi + 0x44], 0x10
lea eax, [edi + 0x30]
jb 0x1000cb07
mov eax, dword [eax]
push eax
push 0x3ff
push dword [0x1006ee1c]
call esi
add edi, 0x48
cmp dword [edi + 0x14], 0x10
jb 0x1000cb20
mov edi, dword [edi]
push edi
push 0x411
push dword [0x1006ee1c]
call esi
jmp 0x1000cb3c
mov dword [ebp - 4], 0
call fcn.1000bda0
mov dword [0x1006d514], eax
lea eax, [ebp - 0x21c]
push eax
push 0x104
lea eax, [ebp - 0x118]
push eax
push 0x10048d18
push str.ViewExp
push dword [ebp - 0x49c]
call ebx
mov esi, dword [0x1006ee30]
lea eax, [ebp - 0x118]
push str.156789
push eax
call fcn.1002c350
mov edi, dword [sym.imp.USER32.dll_SendDlgItemMessageA]
add esp, 8
lea ecx, [ebp - 0x118]
sub eax, ecx
neg eax
push 0
sbb eax, eax
inc eax
push eax
push 0xf1
push 0x3eb
push esi
call edi
lea eax, [ebp - 0x21c]
push eax
push 0x104
lea eax, [ebp - 0x118]
push eax
push 0x10048d18
push str.GrindStone
push dword [ebp - 0x49c]
call ebx
mov esi, dword [0x1006ee30]
lea eax, [ebp - 0x118]
push str.156789
push eax
call fcn.1002c350
add esp, 8
lea ecx, [ebp - 0x118]
sub eax, ecx
neg eax
push 0
sbb eax, eax
inc eax
push eax
push 0xf1
push 0x3ec
push esi
call edi
lea eax, [ebp - 0x21c]
push eax
push 0x104
lea eax, [ebp - 0x118]
push eax
push 0x10048d18
push str.Meat
push dword [ebp - 0x49c]
call ebx
mov esi, dword [0x1006ee30]
lea eax, [ebp - 0x118]
push str.156789
push eax
call fcn.1002c350
add esp, 8
lea ecx, [ebp - 0x118]
sub eax, ecx
neg eax
push 0
sbb eax, eax
inc eax
push eax
push 0xf1
push 0x3f3
push esi
call edi
lea eax, [ebp - 0x21c]
push eax
push 0x104
lea eax, [ebp - 0x118]
push eax
push 0x10048d38
push str.Polymorphs
push dword [ebp - 0x49c]
call ebx
sub esp, 0x18
mov ecx, esp
mov dword [ebp - 0x47c], esp
push 1
mov dword [ecx + 0x14], 0xf
mov dword [ecx + 0x10], 0
push 0x10048cf4
mov byte [ebp - 4], 0xd
mov byte [ecx], 0
call fcn.10002e00
sub esp, 0x18
mov edx, esp
mov byte [ebp - 4], 0xe
mov dword [edx + 0x14], 0xf
mov dword [edx + 0x10], 0
mov byte [edx], 0
cmp byte [ebp - 0x118], 0
jne 0x1000ccdf
xor ecx, ecx
jmp 0x1000ccf1
lea ecx, [ebp - 0x118]
lea esi, [ecx + 1]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x1000cce8
sub ecx, esi
push ecx
lea eax, [ebp - 0x118]
push eax
mov ecx, edx
call fcn.10002e00
lea eax, [ebp - 0x488]
push eax
mov byte [ebp - 4], 0xd
call fcn.100100c0
add esp, 0x34
push eax
lea ecx, [ebp - 0x498]
mov byte [ebp - 4], 0xf
call fcn.100038a0
mov eax, dword [ebp - 0x488]
test eax, eax
je 0x1000cd4d
push dword [ebp - 0x484]
lea ecx, [ebp - 0x488]
push eax
call fcn.1000a960
push dword [ebp - 0x488]
call fcn.1002ad6b
add esp, 4
mov eax, dword [ebp - 0x498]
cmp dword [eax + 0x14], 0x10
jb 0x1000cd5b
mov eax, dword [eax]
mov esi, dword [0x1006ee30]
push str.156789
push eax
mov dword [ebp - 0x47c], eax
call fcn.1002c350
sub eax, dword [ebp - 0x47c]
add esp, 8
neg eax
push 0
sbb eax, eax
inc eax
push eax
push 0xf1
push 0x3ed
push esi
call edi
mov eax, dword [ebp - 0x498]
add eax, 0x18
cmp dword [eax + 0x14], 0x10
jb 0x1000cda1
mov eax, dword [eax]
push eax
push 0xffffffffffffffff
push 0x14d
push 0x40b
push dword [0x1006ee30]
call edi
jmp 0x1000cdca
lea eax, [ebp - 0x21c]
push eax
push 0x104
lea eax, [ebp - 0x118]
push eax
push 0x10048d38
push str.Antidote
push dword [ebp - 0x49c]
mov dword [ebp - 4], 0
call ebx
sub esp, 0x18
mov ecx, esp
mov dword [ebp - 0x47c], esp
push 1
mov dword [ecx + 0x14], 0xf
mov dword [ecx + 0x10], 0
push 0x10048cf4
mov byte [ebp - 4], 0x11
mov byte [ecx], 0
call fcn.10002e00
sub esp, 0x18
mov edx, esp
mov byte [ebp - 4], 0x12
mov dword [edx + 0x14], 0xf
mov dword [edx + 0x10], 0
mov byte [edx], 0
cmp byte [ebp - 0x118], 0
jne 0x1000ce49
xor ecx, ecx
jmp 0x1000ce5b
lea ecx, [ebp - 0x118]
lea esi, [ecx + 1]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x1000ce52
sub ecx, esi
push ecx
lea eax, [ebp - 0x118]
push eax
mov ecx, edx
call fcn.10002e00
lea eax, [ebp - 0x488]
push eax
mov byte [ebp - 4], 0x11
call fcn.100100c0
add esp, 0x34
push eax
lea ecx, [ebp - 0x498]
mov byte [ebp - 4], 0x13
call fcn.100038a0
mov eax, dword [ebp - 0x488]
test eax, eax
je 0x1000ceb7
push dword [ebp - 0x484]
lea ecx, [ebp - 0x488]
push eax
call fcn.1000a960
push dword [ebp - 0x488]
call fcn.1002ad6b
add esp, 4
mov eax, dword [ebp - 0x498]
cmp dword [eax + 0x14], 0x10
jb 0x1000cec5
mov eax, dword [eax]
mov esi, dword [0x1006ee30]
push str.156789
push eax
mov dword [ebp - 0x47c], eax
call fcn.1002c350
sub eax, dword [ebp - 0x47c]
add esp, 8
neg eax
push 0
sbb eax, eax
inc eax
push eax
push 0xf1
push 0x3ee
push esi
call edi
mov eax, dword [ebp - 0x498]
add eax, 0x18
cmp dword [eax + 0x14], 0x10
jb 0x1000cf0b
mov eax, dword [eax]
mov edi, dword [sym.imp.USER32.dll_SetDlgItemTextA]
push eax
push 0x40c
push dword [0x1006ee30]
call edi
jmp 0x1000cf33
lea eax, [ebp - 0x21c]
push eax
push 0x104
lea eax, [ebp - 0x118]
push eax
push 0x10048d38
push str.HotkeyF1
push dword [ebp - 0x49c]
mov dword [ebp - 4], 0
call ebx
sub esp, 0x18
mov ecx, esp
mov dword [ebp - 0x47c], esp
push 1
mov dword [ecx + 0x14], 0xf
mov dword [ecx + 0x10], 0
push 0x10048cf4
mov byte [ebp - 4], 0x15
mov byte [ecx], 0
call fcn.10002e00
sub esp, 0x18
mov edx, esp
mov byte [ebp - 4], 0x16
mov dword [edx + 0x14], 0xf
mov dword [edx + 0x10], 0
mov byte [edx], 0
cmp byte [ebp - 0x118], 0
jne 0x1000cfb2
xor ecx, ecx
jmp 0x1000cfc9
lea ecx, [ebp - 0x118]
lea esi, [ecx + 1]
jmp 0x1000cfc0
mov al, byte [ecx]
inc ecx
test al, al
jne 0x1000cfc0
sub ecx, esi
push ecx
lea eax, [ebp - 0x118]
push eax
mov ecx, edx
call fcn.10002e00
lea eax, [ebp - 0x488]
push eax
mov byte [ebp - 4], 0x15
call fcn.100100c0
add esp, 0x34
push eax
lea ecx, [ebp - 0x498]
mov byte [ebp - 4], 0x17
call fcn.100038a0
mov eax, dword [ebp - 0x488]
test eax, eax
je 0x1000d025
push dword [ebp - 0x484]
lea ecx, [ebp - 0x488]
push eax
call fcn.1000a960
push dword [ebp - 0x488]
call fcn.1002ad6b
add esp, 4
mov eax, dword [ebp - 0x498]
cmp dword [eax + 0x14], 0x10
jb 0x1000d033
mov eax, dword [eax]
mov esi, dword [0x1006ee30]
push str.156789
push eax
mov dword [ebp - 0x47c], eax
call fcn.1002c350
sub eax, dword [ebp - 0x47c]
add esp, 8
neg eax
push 0
sbb eax, eax
inc eax
push eax
push 0xf1
push 0x3ef
push esi
call dword [sym.imp.USER32.dll_SendDlgItemMessageA]
mov esi, dword [ebp - 0x498]
cmp dword [esi + 0x14], 0x10
jb 0x1000d082
mov eax, dword [esi]
mov dword [ebp - 0x47c], eax
jmp 0x1000d08a
mov eax, esi
mov dword [ebp - 0x47c], esi
push str.156789
push eax
call fcn.1002c350
add esp, 8
sub eax, dword [ebp - 0x47c]
sete byte [0x1006d0d6]
add esi, 0x18
cmp dword [esi + 0x14], 0x10
jb 0x1000d0b0
mov esi, dword [esi]
push esi
push 0x3f8
push dword [0x1006ee30]
call edi
jmp 0x1000d0d2
lea eax, [ebp - 0x21c]
push eax
push 0x104
lea eax, [ebp - 0x118]
push eax
push 0x10048d38
push str.HotkeyF2
push dword [ebp - 0x49c]
mov dword [ebp - 4], 0
call ebx
sub esp, 0x18
mov ecx, esp
mov dword [ebp - 0x47c], esp
push 1
mov dword [ecx + 0x14], 0xf
mov dword [ecx + 0x10], 0
push 0x10048cf4
mov byte [ebp - 4], 0x19
mov byte [ecx], 0
call fcn.10002e00
sub esp, 0x18
mov edx, esp
mov byte [ebp - 4], 0x1a
mov dword [edx + 0x14], 0xf
mov dword [edx + 0x10], 0
mov byte [edx], 0
cmp byte [ebp - 0x118], 0
jne 0x1000d151
xor ecx, ecx
jmp 0x1000d169
lea ecx, [ebp - 0x118]
lea esi, [ecx + 1]
lea ebx, [ebx]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x1000d160
sub ecx, esi
push ecx
lea eax, [ebp - 0x118]
push eax
mov ecx, edx
call fcn.10002e00
lea eax, [ebp - 0x488]
push eax
mov byte [ebp - 4], 0x19
call fcn.100100c0
add esp, 0x34
push eax
lea ecx, [ebp - 0x498]
mov byte [ebp - 4], 0x1b
call fcn.100038a0
mov eax, dword [ebp - 0x488]
test eax, eax
je 0x1000d1c5
push dword [ebp - 0x484]
lea ecx, [ebp - 0x488]
push eax
call fcn.1000a960
push dword [ebp - 0x488]
call fcn.1002ad6b
add esp, 4
mov eax, dword [ebp - 0x498]
cmp dword [eax + 0x14], 0x10
jb 0x1000d1d3
mov eax, dword [eax]
mov esi, dword [0x1006ee30]
push str.156789
push eax
mov dword [ebp - 0x47c], eax
call fcn.1002c350
sub eax, dword [ebp - 0x47c]
add esp, 8
neg eax
push 0
sbb eax, eax
inc eax
push eax
push 0xf1
push 0x3f0
push esi
call dword [sym.imp.USER32.dll_SendDlgItemMessageA]
mov esi, dword [ebp - 0x498]
cmp dword [esi + 0x14], 0x10
jb 0x1000d222
mov eax, dword [esi]
mov dword [ebp - 0x47c], eax
jmp 0x1000d22a
mov eax, esi
mov dword [ebp - 0x47c], esi
push str.156789
push eax
call fcn.1002c350
add esp, 8
sub eax, dword [ebp - 0x47c]
sete byte [0x1006d0d7]
add esi, 0x18
cmp dword [esi + 0x14], 0x10
jb 0x1000d250
mov esi, dword [esi]
push esi
push 0x3f9
push dword [0x1006ee30]
call edi
jmp 0x1000d272
lea eax, [ebp - 0x21c]
push eax
push 0x104
lea eax, [ebp - 0x118]
push eax
push 0x10048d38
push str.HotkeyF3
push dword [ebp - 0x49c]
mov dword [ebp - 4], 0
call ebx
sub esp, 0x18
mov ecx, esp
mov dword [ebp - 0x47c], esp
push 1
mov dword [ecx + 0x14], 0xf
mov dword [ecx + 0x10], 0
push 0x10048cf4
mov byte [ebp - 4], 0x1d
mov byte [ecx], 0
call fcn.10002e00
sub esp, 0x18
mov edx, esp
mov byte [ebp - 4], 0x1e
mov dword [edx + 0x14], 0xf
mov dword [edx + 0x10], 0
mov byte [edx], 0
cmp byte [ebp - 0x118], 0
jne 0x1000d2f1
xor ecx, ecx
jmp 0x1000d309
lea ecx, [ebp - 0x118]
lea esi, [ecx + 1]
lea ebx, [ebx]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x1000d300
sub ecx, esi
push ecx
lea eax, [ebp - 0x118]
push eax
mov ecx, edx
call fcn.10002e00
lea eax, [ebp - 0x488]
push eax
mov byte [ebp - 4], 0x1d
call fcn.100100c0
add esp, 0x34
push eax
lea ecx, [ebp - 0x498]
mov byte [ebp - 4], 0x1f
call fcn.100038a0
mov eax, dword [ebp - 0x488]
test eax, eax
je 0x1000d365
push dword [ebp - 0x484]
lea ecx, [ebp - 0x488]
push eax
call fcn.1000a960
push dword [ebp - 0x488]
call fcn.1002ad6b
add esp, 4
mov eax, dword [ebp - 0x498]
cmp dword [eax + 0x14], 0x10
jb 0x1000d373
mov eax, dword [eax]
mov esi, dword [0x1006ee30]
push str.156789
push eax
mov dword [ebp - 0x47c], eax
call fcn.1002c350
sub eax, dword [ebp - 0x47c]
add esp, 8
neg eax
push 0
sbb eax, eax
inc eax
push eax
push 0xf1
push 0x3f1
push esi
call dword [sym.imp.USER32.dll_SendDlgItemMessageA]
mov esi, dword [ebp - 0x498]
cmp dword [esi + 0x14], 0x10
jb 0x1000d3c2
mov eax, dword [esi]
mov dword [ebp - 0x47c], eax
jmp 0x1000d3ca
mov eax, esi
mov dword [ebp - 0x47c], esi
push str.156789
push eax
call fcn.1002c350
add esp, 8
sub eax, dword [ebp - 0x47c]
sete byte [0x1006d20e]
add esi, 0x18
cmp dword [esi + 0x14], 0x10
jb 0x1000d3f0
mov esi, dword [esi]
push esi
push 0x3fb
push dword [0x1006ee30]
call edi
jmp 0x1000d412
lea eax, [ebp - 0x21c]
push eax
push 0x104
lea eax, [ebp - 0x118]
push eax
push 0x10048d38
push str.HotkeyF4
push dword [ebp - 0x49c]
mov dword [ebp - 4], 0
call ebx
sub esp, 0x18
mov ecx, esp
mov dword [ebp - 0x47c], esp
push 1
mov dword [ecx + 0x14], 0xf
mov dword [ecx + 0x10], 0
push 0x10048cf4
mov byte [ebp - 4], 0x21
mov byte [ecx], 0
call fcn.10002e00
sub esp, 0x18
mov edx, esp
mov byte [ebp - 4], 0x22
mov dword [edx + 0x14], 0xf
mov dword [edx + 0x10], 0
mov byte [edx], 0
cmp byte [ebp - 0x118], 0
jne 0x1000d491
xor ecx, ecx
jmp 0x1000d4a9
lea ecx, [ebp - 0x118]
lea esi, [ecx + 1]
lea ebx, [ebx]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x1000d4a0
sub ecx, esi
push ecx
lea eax, [ebp - 0x118]
push eax
mov ecx, edx
call fcn.10002e00
lea eax, [ebp - 0x488]
push eax
mov byte [ebp - 4], 0x21
call fcn.100100c0
add esp, 0x34
push eax
lea ecx, [ebp - 0x498]
mov byte [ebp - 4], 0x23
call fcn.100038a0
mov eax, dword [ebp - 0x488]
test eax, eax
je 0x1000d505
push dword [ebp - 0x484]
lea ecx, [ebp - 0x488]
push eax
call fcn.1000a960
push dword [ebp - 0x488]
call fcn.1002ad6b
add esp, 4
mov eax, dword [ebp - 0x498]
cmp dword [eax + 0x14], 0x10
jb 0x1000d513
mov eax, dword [eax]
mov esi, dword [0x1006ee30]
push str.156789
push eax
mov dword [ebp - 0x47c], eax
call fcn.1002c350
sub eax, dword [ebp - 0x47c]
add esp, 8
neg eax
push 0
sbb eax, eax
inc eax
push eax
push 0xf1
push 0x3f2
push esi
call dword [sym.imp.USER32.dll_SendDlgItemMessageA]
mov esi, dword [ebp - 0x498]
cmp dword [esi + 0x14], 0x10
jb 0x1000d562
mov eax, dword [esi]
mov dword [ebp - 0x47c], eax
jmp 0x1000d56a
mov eax, esi
mov dword [ebp - 0x47c], esi
push str.156789
push eax
call fcn.1002c350
add esp, 8
sub eax, dword [ebp - 0x47c]
sete byte [0x1006d20f]
add esi, 0x18
cmp dword [esi + 0x14], 0x10
jb 0x1000d590
mov esi, dword [esi]
push esi
push 0x3fc
push dword [0x1006ee30]
call edi
jmp 0x1000d5ac
xor eax, eax
mov dword [ebp - 4], 0
mov dword [ebp - 0x448], 0x3eb
mov dword [ebp - 0x444], 0x3ec
mov dword [ebp - 0x440], 0x3ed
mov dword [ebp - 0x43c], 0x3ee
mov dword [ebp - 0x438], 0x3ef
mov dword [ebp - 0x434], 0x3f0
mov dword [ebp - 0x430], 0x3f1
mov dword [ebp - 0x42c], 0x3f2
mov dword [ebp - 0x428], 0x3f3
mov dword [ebp - 0x47c], eax
lea edi, [eax + 1]
push edi
lea eax, [ebp - 0x320]
push str.Option_d
push eax
call fcn.10003770
add esp, 0xc
lea eax, [ebp - 0x21c]
push eax
push 0x104
lea eax, [ebp - 0x118]
push eax
push 0x10048d18
lea eax, [ebp - 0x320]
push eax
push dword [ebp - 0x4a4]
call ebx
mov esi, dword [0x1006ee24]
lea eax, [ebp - 0x118]
push str.156789
push eax
call fcn.1002c350
add esp, 8
lea ecx, [ebp - 0x118]
sub eax, ecx
neg eax
sbb eax, eax
push 0
inc eax
push eax
mov eax, dword [ebp - 0x47c]
push 0xf1
push dword [ebp + eax*4 - 0x448]
push esi
call dword [sym.imp.USER32.dll_SendDlgItemMessageA]
mov eax, edi
mov dword [ebp - 0x47c], edi
cmp eax, 9
jb 0x1000d615
lea eax, [ebp - 0x21c]
push eax
push 0x104
lea eax, [ebp - 0x118]
push eax
push 0x10048d38
push str.Lawful
push dword [ebp - 0x4a4]
mov byte [ebp - 4], 0x25
call ebx
sub esp, 0x18
mov ecx, esp
mov dword [ebp - 0x47c], esp
push 1
mov dword [ecx + 0x14], 0xf
mov dword [ecx + 0x10], 0
push 0x10048cf4
mov byte [ecx], 0
call fcn.10002e00
sub esp, 0x18
mov edx, esp
mov byte [ebp - 4], 0x26
mov dword [edx + 0x14], 0xf
mov dword [edx + 0x10], 0
mov byte [edx], 0
cmp byte [ebp - 0x118], 0
jne 0x1000d720
xor ecx, ecx
jmp 0x1000d739
lea ecx, [ebp - 0x118]
lea esi, [ecx + 1]
lea esp, [esp]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x1000d730
sub ecx, esi
push ecx
lea eax, [ebp - 0x118]
push eax
mov ecx, edx
call fcn.10002e00
lea eax, [ebp - 0x488]
push eax
mov byte [ebp - 4], 0x25
call fcn.100100c0
add esp, 0x34
push eax
lea ecx, [ebp - 0x498]
mov byte [ebp - 4], 0x27
call fcn.100038a0
mov esi, dword [ebp - 0x488]
test esi, esi
je 0x1000d7b7
mov edi, dword [ebp - 0x484]
cmp esi, edi
je 0x1000d7ae
nop
cmp dword [esi + 0x14], 0x10
jb 0x1000d790
push dword [esi]
call fcn.1002ad6b
add esp, 4
mov dword [esi + 0x14], 0xf
mov dword [esi + 0x10], 0
mov byte [esi], 0
add esi, 0x18
cmp esi, edi
jne 0x1000d780
mov esi, dword [ebp - 0x488]
push esi
call fcn.1002ad6b
add esp, 4
mov eax, dword [ebp - 0x498]
cmp dword [eax + 0x14], 0x10
jb 0x1000d7c7
mov edi, dword [eax]
jmp 0x1000d7c9
mov edi, eax
mov esi, dword [0x1006ee24]
push str.156789
push edi
call fcn.1002c350
add esp, 8
sub eax, edi
mov edi, dword [sym.imp.USER32.dll_SendDlgItemMessageA]
neg eax
push 0
sbb eax, eax
inc eax
push eax
push 0xf1
push 0x3f4
push esi
call edi
mov eax, dword [ebp - 0x498]
add eax, 0x18
cmp dword [eax + 0x14], 0x10
jb 0x1000d80b
mov eax, dword [eax]
push eax
push 0xffffffffffffffff
push 0x14d
push 0x40b
push dword [0x1006ee24]
call edi
jmp 0x1000d834
lea eax, [ebp - 0x21c]
push eax
push 0x104
lea eax, [ebp - 0x118]
push eax
push 0x10048d18
push str.Option11
push dword [ebp - 0x4a4]
mov dword [ebp - 4], 0
call ebx
mov esi, dword [0x1006ee24]
lea eax, [ebp - 0x118]
push str.156789
push eax
call fcn.1002c350
add esp, 8
lea ecx, [ebp - 0x118]
sub eax, ecx
neg eax
push 0
sbb eax, eax
inc eax
push eax
push 0xf1
push 0x3f5
push esi
call edi
lea eax, [ebp - 0x21c]
push eax
push 0x104
lea eax, [ebp - 0x118]
push eax
push 0x10048d18
push str.Option12
push dword [ebp - 0x4a4]
call ebx
mov esi, dword [0x1006ee24]
lea eax, [ebp - 0x118]
push str.156789
push eax
call fcn.1002c350
add esp, 8
lea ecx, [ebp - 0x118]
sub eax, ecx
neg eax
push 0
sbb eax, eax
inc eax
push eax
push 0xf1
push 0x3f6
push esi
call edi
lea eax, [ebp - 0x21c]
push eax
push 0x104
lea eax, [ebp - 0x118]
push eax
push 0x10048d18
push str.Enable
push dword [ebp - 0x4b0]
call ebx
mov esi, dword [0x1006ee38]
lea eax, [ebp - 0x118]
push str.156789
push eax
call fcn.1002c350
add esp, 8
lea ecx, [ebp - 0x118]
sub eax, ecx
neg eax
push 0
sbb eax, eax
inc eax
push eax
push 0xf1
push 0x3eb
push esi
call edi
mov dword [ebp - 0x43c], 0x3ec
mov dword [ebp - 0x438], 0x3f4
mov dword [ebp - 0x434], 0x3f5
mov dword [ebp - 0x430], 0x3ed
mov dword [ebp - 0x42c], 0x3f2
mov dword [ebp - 0x428], 0x3f6
mov dword [ebp - 0x460], 0x3f8
mov dword [ebp - 0x45c], 0x401
mov dword [ebp - 0x458], 0x402
mov dword [ebp - 0x454], 0x3fb
mov dword [ebp - 0x450], 0x403
mov dword [ebp - 0x44c], 0x404
mov dword [ebp - 0x478], 0x3fc
mov dword [ebp - 0x474], 0x406
mov dword [ebp - 0x470], 0x405
mov dword [ebp - 0x46c], 0x3fd
mov dword [ebp - 0x468], 0x407
mov dword [ebp - 0x464], 0x408
xor edi, edi
mov dword [ebp - 0x47c], edi
cmp edi, 6
jae 0x1000dc04
lea eax, [edi + 1]
push eax
lea eax, [ebp - 0x320]
push str.Timer_d
push eax
call fcn.10003770
add esp, 0xc
lea eax, [ebp - 0x21c]
push eax
push 0x104
lea eax, [ebp - 0x118]
push eax
push str.0_5_
lea eax, [ebp - 0x320]
push eax
push dword [ebp - 0x4b0]
call ebx
sub esp, 0x18
mov ecx, esp
mov dword [ebp - 0x48c], esp
push 1
mov dword [ecx + 0x14], 0xf
mov dword [ecx + 0x10], 0
push 0x10048cf4
mov byte [ebp - 4], 0x29
mov byte [ecx], 0
call fcn.10002e00
sub esp, 0x18
mov edx, esp
mov byte [ebp - 4], 0x2a
mov dword [edx + 0x14], 0xf
mov dword [edx + 0x10], 0
mov byte [edx], 0
cmp byte [ebp - 0x118], 0
jne 0x1000daa6
xor ecx, ecx
jmp 0x1000dab9
lea ecx, [ebp - 0x118]
lea esi, [ecx + 1]
nop
mov al, byte [ecx]
inc ecx
test al, al
jne 0x1000dab0
sub ecx, esi
push ecx
lea eax, [ebp - 0x118]
push eax
mov ecx, edx
call fcn.10002e00
lea eax, [ebp - 0x488]
push eax
mov byte [ebp - 4], 0x29
call fcn.100100c0
add esp, 0x34
push eax
lea ecx, [ebp - 0x498]
mov byte [ebp - 4], 0x2b
call fcn.100038a0
mov esi, dword [ebp - 0x488]
test esi, esi
je 0x1000db60
mov eax, dword [ebp - 0x484]
mov dword [ebp - 0x47c], eax
cmp esi, eax
je 0x1000db39
cmp dword [esi + 0x14], 0x10
jb 0x1000db1b
push dword [esi]
call fcn.1002ad6b
mov eax, dword [ebp - 0x47c]
add esp, 4
mov dword [esi + 0x14], 0xf
mov dword [esi + 0x10], 0
mov byte [esi], 0
add esi, 0x18
cmp esi, eax
jne 0x1000db05
mov esi, dword [ebp - 0x488]
push esi
call fcn.1002ad6b
add esp, 4
mov dword [ebp - 0x488], 0
mov dword [ebp - 0x484], 0
mov dword [ebp - 0x480], 0
push 0
lea ecx, [ebp - 0x498]
call fcn.100039a0
mov ecx, eax
call fcn.1000b5d0
push eax
push dword [ebp + edi*4 - 0x43c]
push dword [0x1006ee38]
call fcn.1000fe40
add esp, 0xc
lea ecx, [ebp - 0x498]
push 1
call fcn.100039a0
mov ecx, eax
call fcn.1000b5d0
mov esi, dword [sym.imp.USER32.dll_SetDlgItemTextA]
push eax
push dword [ebp + edi*4 - 0x460]
push dword [0x1006ee38]
call esi
push 2
lea ecx, [ebp - 0x498]
call fcn.100039a0
mov ecx, eax
call fcn.1000b5d0
push eax
push dword [ebp + edi*4 - 0x478]
push dword [0x1006ee38]
call esi
mov dword [ebp - 4], 0
inc edi
jmp 0x1000da05
mov esi, dword [ebp - 0x4b4]
lea eax, [ebp - 0x21c]
push eax
push 0x104
lea eax, [ebp - 0x118]
push eax
push 0x10048d18
push str.Enable
push esi
call ebx
lea eax, [ebp - 0x118]
push eax
push 0x3eb
push dword [0x1006ee2c]
call fcn.1000fe40
add esp, 0xc
lea eax, [ebp - 0x21c]
push eax
push 0x104
lea eax, [ebp - 0x118]
push eax
push 0x10048d18
push str.NoIcon
push esi
call ebx
lea eax, [ebp - 0x118]
push eax
push 0x3ec
push dword [0x1006ee2c]
call fcn.1000fe40
mov edi, dword [sym.imp.USER32.dll_GetDlgItem]
add esp, 0xc
push 0
push 0
push 0x184
push 0x420
push dword [0x1006ee2c]
call edi
push eax
call dword [sym.imp.USER32.dll_SendMessageA]
xor esi, esi
push esi
lea eax, [ebp - 0x424]
push str.Item_d
push eax
call fcn.10003770
add esp, 0xc
lea eax, [ebp - 0x21c]
push eax
push 0x104
lea eax, [ebp - 0x320]
push eax
push 0x10048888
lea eax, [ebp - 0x424]
push eax
push dword [ebp - 0x4b4]
call ebx
test eax, eax
jle 0x1000dd0d
lea eax, [ebp - 0x320]
push eax
push esi
push 0x180
push 0x420
push dword [0x1006ee2c]
call edi
push eax
call dword [sym.imp.USER32.dll_SendMessageA]
inc esi
cmp esi, 0x3e7
jl 0x1000dca3
lea eax, [ebp - 0x21c]
push eax
push 0x104
lea eax, [ebp - 0x118]
push eax
push 0x10048d18
push str.Enable
push dword [ebp - 0x4b8]
call ebx
lea eax, [ebp - 0x118]
push eax
push 0x3eb
push dword [0x1006ee20]
call fcn.1000fe40
add esp, 0xc
push 0
push 0
push 0x184
push 0x41e
push dword [0x1006ee20]
call edi
push eax
call dword [sym.imp.USER32.dll_SendMessageA]
xor esi, esi
jmp 0x1000dd70
push esi
lea eax, [ebp - 0x424]
push str.Item_d
push eax
call fcn.10003770
add esp, 0xc
lea eax, [ebp - 0x21c]
push eax
push 0x104
lea eax, [ebp - 0x320]
push eax
push 0x10048888
lea eax, [ebp - 0x424]
push eax
push dword [ebp - 0x4b8]
call ebx
test eax, eax
jle 0x1000ddda
lea eax, [ebp - 0x320]
push eax
push esi
push 0x180
push 0x41e
push dword [0x1006ee20]
call edi
push eax
call dword [sym.imp.USER32.dll_SendMessageA]
inc esi
cmp esi, 0x3e7
jl 0x1000dd70
lea eax, [ebp - 0x21c]
push eax
push 0x104
lea eax, [ebp - 0x118]
push eax
push 0x10048d18
push str.Enable
push dword [ebp - 0x4ac]
call ebx
lea eax, [ebp - 0x118]
push eax
push 0x3eb
push dword [0x1006ee28]
call fcn.1000fe40
add esp, 0xc
push 0
push 0
push 0x184
push 0x41e
push dword [0x1006ee28]
call edi
push eax
call dword [sym.imp.USER32.dll_SendMessageA]
xor esi, esi
jmp 0x1000de40
push esi
lea eax, [ebp - 0x424]
push str.Item_d
push eax
call fcn.10003770
add esp, 0xc
lea eax, [ebp - 0x21c]
push eax
push 0x104
lea eax, [ebp - 0x320]
push eax
push 0x10048888
lea eax, [ebp - 0x424]
push eax
push dword [ebp - 0x4ac]
call ebx
test eax, eax
jle 0x1000deaa
lea eax, [ebp - 0x320]
push eax
push esi
push 0x180
push 0x41e
push dword [0x1006ee28]
call edi
push eax
call dword [sym.imp.USER32.dll_SendMessageA]
inc esi
cmp esi, 0x3e7
jl 0x1000de40
mov esi, dword [ebp - 0x4bc]
lea eax, [ebp - 0x21c]
push eax
push 0x104
lea eax, [ebp - 0x118]
push eax
push 0x10048d18
push str.Enable1
push esi
call ebx
lea eax, [ebp - 0x118]
push eax
push 0x3eb
push dword [0x1006ee34]
call fcn.1000fe40
add esp, 0xc
lea eax, [ebp - 0x21c]
push eax
push 0x104
lea eax, [ebp - 0x118]
push eax
push 0x10048888
push str.CookBook
push esi
call ebx
mov edi, dword [sym.imp.USER32.dll_SendDlgItemMessageA]
lea eax, [ebp - 0x118]
push eax
push 0xffffffffffffffff
push 0x14d
push 0x40b
push dword [0x1006ee34]
call edi
lea eax, [ebp - 0x21c]
push eax
push 0x104
lea eax, [ebp - 0x118]
push eax
push 0x10048888
push str.Cook
push esi
call ebx
lea eax, [ebp - 0x118]
push eax
push 0xffffffffffffffff
push 0x14d
push 0x40c
push dword [0x1006ee34]
call edi
lea eax, [ebp - 0x21c]
push eax
push 0x104
lea eax, [ebp - 0x118]
push eax
push 0x10048d18
push str.Enable2
push esi
call ebx
lea eax, [ebp - 0x118]
push eax
push 0x3ec
push dword [0x1006ee34]
call fcn.1000fe40
add esp, 0xc
lea eax, [ebp - 0x21c]
push eax
push 0x104
lea eax, [ebp - 0x118]
push eax
push 0x10048888
push str.Scroll
push esi
call ebx
lea eax, [ebp - 0x118]
push eax
push 0xffffffffffffffff
push 0x14d
push 0x40d
push dword [0x1006ee34]
call edi
lea eax, [ebp - 0x21c]
push eax
push 0x104
lea eax, [ebp - 0x118]
push eax
push 0x10048888
push str.Skill
push esi
call ebx
lea eax, [ebp - 0x118]
push eax
push 0xffffffffffffffff
push 0x14d
push 0x40e
push dword [0x1006ee34]
call edi
lea eax, [ebp - 0x21c]
push eax
push 0x104
lea eax, [ebp - 0x118]
push eax
push 0x10048d18
push str.Enable3
push esi
call ebx
lea eax, [ebp - 0x118]
push eax
push 0x3ed
push dword [0x1006ee34]
call fcn.1000fe40
add esp, 0xc
lea eax, [ebp - 0x21c]
push eax
push 0x104
lea eax, [ebp - 0x118]
push eax
push 0x10048888
push str.Stone
push esi
call ebx
lea eax, [ebp - 0x118]
push eax
push 0xffffffffffffffff
push 0x14d
push 0x40f
push dword [0x1006ee34]
call edi
lea eax, [ebp - 0x21c]
push eax
push 0x104
lea eax, [ebp - 0x118]
push eax
push 0x10048d18
push str.Enable4
push esi
call ebx
lea eax, [ebp - 0x118]
push eax
push 0x3ee
push dword [0x1006ee34]
call fcn.1000fe40
add esp, 0xc
lea eax, [ebp - 0x21c]
push eax
push 0x104
lea eax, [ebp - 0x118]
push eax
push 0x10048888
push str.Doll
push esi
call ebx
lea eax, [ebp - 0x118]
push eax
push 0xffffffffffffffff
push 0x14d
push 0x410
push dword [0x1006ee34]
call edi
lea ecx, [ebp - 0x498]
call fcn.10003860
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 0x14]
xor ecx, ebp
call fcn.1002ace3
mov esp, ebp
pop ebp
ret