Function at 0x1004b3c0
Capabilities:
Read .ini file

Disassembly:
push ebp
lea ebp, [esp - 0x1a0]
sub esp, 0x1a0
push 0xffffffffffffffff
push 0x100ec592
mov eax, dword fs:[0]
push eax
sub esp, 0x100
mov eax, dword [0x10120140]
xor eax, ebp
mov dword [ebp + 0x19c], eax
push ebx
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov ecx, dword [0x10147870]
lea eax, [ebp - 0xc0]
push eax
call fcn.1005ddd0
mov ecx, eax
mov dword [ebp - 4], 0
call fcn.1004d870
push eax
sub esp, 0x18
mov ecx, esp
push 0x10149b08
call fcn.1004db00
lea eax, [ebp + 0x18]
push eax
call fcn.10045e00
add esp, 0x20
mov ecx, 0x10149b08
push eax
call fcn.1004da00
lea ecx, [ebp + 0x18]
call fcn.1004d9f0
lea ecx, [ebp - 0xc0]
mov dword [ebp - 4], 0xffffffff
call fcn.1004d9f0
xor esi, esi
mov dword [ebp - 0x10], esi
push 0x1010ecff
lea ecx, [ebp + 0x18]
call fcn.1004daa0
mov dword [ebp - 4], 1
cmp esi, 0xb
ja case.0x1004b47f.4
jmp dword [esi*4 + 0x1004c06c]
push dword [ebp + 0x30]
push ecx
lea ecx, [ebp - 0x18]
call fcn.100510d0
mov ecx, eax
call fcn.1004c0f0
jmp 0x1004b59c
push dword [ebp + 0x30]
push ecx
lea ecx, [ebp - 0x28]
call fcn.10051100
mov ecx, eax
call fcn.1004c0f0
jmp 0x1004b59c
push dword [ebp + 0x30]
push ecx
lea ecx, [ebp - 0x20]
call fcn.10051130
mov ecx, eax
call fcn.1004c0f0
jmp 0x1004b59c
push dword [ebp + 0x30]
push ecx
lea ecx, [ebp - 0xd4]
call fcn.10051160
mov ecx, eax
call fcn.1004c0f0
jmp 0x1004b59c
push dword [ebp + 0x30]
push ecx
lea ecx, [ebp - 0xdc]
call fcn.10051190
mov ecx, eax
call fcn.1004c0f0
jmp 0x1004b59c
push dword [ebp + 0x30]
lea ecx, [ebp - 0x108]
push str.need_sw
call fcn.100511c0
mov ecx, eax
call fcn.10047dd0
jmp 0x1004b59c
push dword [ebp + 0x30]
push ecx
lea ecx, [ebp - 0x4c]
call fcn.10051230
mov ecx, eax
call fcn.1004b340
jmp 0x1004b59c
push dword [ebp + 0x30]
lea ecx, [ebp - 0x9c]
push str.need_ac
call fcn.100512a0
mov ecx, eax
call fcn.10047dd0
jmp 0x1004b59c
push dword [ebp + 0x30]
lea ecx, [ebp - 0x68]
push str.start_genie
call fcn.10051310
mov ecx, eax
call fcn.10046060
jmp 0x1004b59c
push dword [ebp + 0x30]
push ecx
lea ecx, [ebp - 0xcc]
call fcn.100513b0
mov ecx, eax
call fcn.1004a390
jmp 0x1004b59c
push dword [ebp + 0x30]
lea ecx, [ebp - 0xb8]
push str.start_supply
call fcn.10051420
mov ecx, eax
call fcn.1004c130
push eax
lea ecx, [ebp + 0x18]
call fcn.1004d9b0
mov ecx, 0x10149b08
call fcn.1004d870
lea ecx, [ebp + 0x18]
mov edi, eax
call fcn.1004d870
push esi
sub esp, 0x18
mov ebx, eax
mov esi, esp
push dword [ebp + 0x30]
push ecx
lea ecx, [ebp - 0x74]
call fcn.10051530
mov ecx, eax
call fcn.10045f20
push eax
mov ecx, esi
call fcn.1004daa0
lea eax, [ebp - 0x40]
push eax
call fcn.10045e00
add esp, 0x20
mov ecx, eax
mov byte [ebp - 4], 2
call fcn.1004d870
push dword [ebp + 0x30]
mov esi, eax
push ecx
lea ecx, [ebp - 0x58]
call fcn.100514d0
mov ecx, eax
call fcn.10045f20
push eax
lea ecx, [ebp]
call fcn.1004daa0
mov ecx, eax
call fcn.1004d870
imul ecx, dword [ebp - 0x10], 0xff
push edi
push 0xff
add ecx, 0x10147980
push ecx
push ebx
push esi
push eax
call dword [sym.imp.KERNEL32.dll_GetPrivateProfileStringA]
lea ecx, [ebp]
call fcn.1004d9f0
lea ecx, [ebp - 0x40]
call fcn.1004d9f0
lea ecx, [ebp + 0x18]
mov dword [ebp - 4], 0xffffffff
call fcn.1004d9f0
mov esi, dword [ebp - 0x10]
inc esi
mov dword [ebp - 0x10], esi
cmp esi, 0xe
jl 0x1004b462
xor ebx, ebx
cmp ebx, 0x12
je 0x1004b67c
cmp ebx, 0x15
je 0x1004b67c
mov dword [ebp - 0x20], 0
cmp ebx, 0x19
jne 0x1004b683
mov dword [ebp - 0x20], 1
mov ecx, 0x10149b08
call fcn.1004d870
push ebx
sub esp, 0x18
mov edi, eax
mov esi, esp
push dword [ebp + 0x30]
push ecx
lea ecx, [ebp - 0x58]
call fcn.100515f0
mov ecx, eax
call fcn.10045f20
push eax
mov ecx, esi
call fcn.1004daa0
lea eax, [ebp + 0x18]
push eax
call fcn.10045e00
add esp, 0x20
mov ecx, eax
mov dword [ebp - 4], 3
call fcn.1004d870
push dword [ebp + 0x30]
mov esi, eax
push ecx
lea ecx, [ebp - 0x74]
call fcn.10051590
mov ecx, eax
call fcn.10045f20
push eax
lea ecx, [ebp - 0x40]
call fcn.1004daa0
mov ecx, eax
call fcn.1004d870
push edi
push dword [ebp - 0x20]
push esi
push eax
call dword [sym.imp.KERNEL32.dll_GetPrivateProfileIntA]
test eax, eax
lea ecx, [ebp - 0x40]
setne al
mov byte [ebx + 0x10147800], al
call fcn.1004d9f0
lea ecx, [ebp + 0x18]
mov dword [ebp - 4], 0xffffffff
call fcn.1004d9f0
inc ebx
cmp ebx, 0x43
jl 0x1004b666
xor ebx, ebx
nop dword [eax]
lea eax, [ebx - 4]
mov dword [ebp - 0x10], 0
cmp eax, 0x13
ja case.0x1004b742.5
lea eax, [ebx - 4]
jmp dword [eax*4 + 0x1004c09c]
mov dword [ebp - 0x10], 0x15
jmp case.0x1004b742.5
mov dword [ebp - 0x10], 0xa
jmp case.0x1004b742.5
mov dword [ebp - 0x10], 0x5a
jmp case.0x1004b742.5
mov dword [ebp - 0x10], 5
jmp case.0x1004b742.5
mov dword [ebp - 0x10], 3
jmp case.0x1004b742.5
mov dword [ebp - 0x10], 0x64
jmp case.0x1004b742.5
mov dword [ebp - 0x10], 1
mov ecx, 0x10149b08
call fcn.1004d870
push ebx
sub esp, 0x18
mov edi, eax
mov esi, esp
push dword [ebp + 0x30]
push ecx
lea ecx, [ebp - 0x58]
call fcn.100516d0
mov ecx, eax
call fcn.10045f20
push eax
mov ecx, esi
call fcn.1004daa0
lea eax, [ebp + 0x18]
push eax
call fcn.10045e00
add esp, 0x20
mov ecx, eax
mov dword [ebp - 4], 4
call fcn.1004d870
push dword [ebp + 0x30]
lea ecx, [ebp - 0x74]
mov esi, eax
push str.Settings
call fcn.10051650
mov ecx, eax
call fcn.10045f20
push eax
lea ecx, [ebp - 0x40]
call fcn.1004daa0
mov ecx, eax
call fcn.1004d870
push edi
push dword [ebp - 0x10]
push esi
push eax
call dword [sym.imp.KERNEL32.dll_GetPrivateProfileIntA]
lea ecx, [ebp - 0x40]
mov dword [ebx*4 + 0x101477a0], eax
call fcn.1004d9f0
lea ecx, [ebp + 0x18]
mov dword [ebp - 4], 0xffffffff
call fcn.1004d9f0
inc ebx
cmp ebx, 0x18
jl 0x1004b730
xor ebx, ebx
mov dword [0x10147868], 0
mov dword [0x1014786c], 0
mov dword [ebp - 0x10], ebx
mov dword [ebp - 0x20], 0x10158414
nop word [eax + eax]
mov ecx, 0x10149b08
mov dword [ebx*4 + 0x10147850], 0
call fcn.1004d870
push dword [ebp + 0x30]
mov edi, eax
push ecx
lea ecx, [ebp - 0x4c]
call fcn.10051730
mov ecx, eax
call fcn.1004b340
push ebx
sub esp, 0x18
mov esi, eax
mov ecx, esp
push str.vStrMain__d
call fcn.1004daa0
lea eax, [ebp - 0x40]
push eax
call fcn.10045e00
add esp, 0x20
mov ecx, eax
call fcn.1004d870
push edi
push 0
push esi
push eax
call dword [sym.imp.KERNEL32.dll_GetPrivateProfileIntA]
mov esi, eax
lea ecx, [ebp - 0x40]
mov dword [ebp + 0x30], esi
call fcn.1004d9f0
test esi, esi
jle 0x1004b9c6
xor esi, esi
mov dword [ebp - 0x28], esi
mov ecx, 0x10149b08
call fcn.1004d870
push esi
sub esp, 0x18
mov ebx, eax
mov esi, esp
push dword [ebp - 0x17]
push ecx
lea ecx, [ebp - 0x9c]
call fcn.10051820
mov ecx, eax
call fcn.10047dd0
push eax
mov ecx, esi
call fcn.1004daa0
lea eax, [ebp - 0xc0]
push eax
call fcn.10045e00
add esp, 0x20
mov ecx, eax
mov dword [ebp - 4], 5
call fcn.1004d870
push dword [ebp - 0x10]
mov edi, eax
sub esp, 0x18
mov esi, esp
push dword [ebp - 0x17]
push ecx
lea ecx, [ebp - 0x68]
call fcn.100517a0
mov ecx, eax
call fcn.10046060
push eax
mov ecx, esi
call fcn.1004daa0
lea eax, [ebp - 0x40]
push eax
call fcn.10045e00
add esp, 0x20
mov ecx, eax
call fcn.1004d870
push ebx
push 0xff
lea ecx, [ebp + 0x34]
push ecx
push 0x1010ecff
push edi
push eax
call dword [sym.imp.KERNEL32.dll_GetPrivateProfileStringA]
lea ecx, [ebp - 0x40]
call fcn.1004d9f0
lea ecx, [ebp - 0xc0]
mov dword [ebp - 4], 0xffffffff
call fcn.1004d9f0
lea eax, [ebp + 0x34]
push eax
lea ecx, [ebp + 0x18]
call fcn.1004daa0
lea ecx, [ebp + 0x18]
mov dword [ebp - 4], 6
call fcn.1004d3f0
test eax, eax
je 0x1004b9a4
mov eax, ecx
mov ecx, dword [ebp - 0x20]
push eax
call fcn.1004d1f0
lea ecx, [ebp + 0x18]
mov dword [ebp - 4], 0xffffffff
call fcn.1004d9f0
mov esi, dword [ebp - 0x28]
inc esi
mov dword [ebp - 0x28], esi
cmp esi, dword [ebp + 0x30]
jl 0x1004b8c4
mov ebx, dword [ebp - 0x10]
add dword [ebp - 0x20], 0xc
inc ebx
mov dword [ebp - 0x10], ebx
cmp ebx, 4
jl 0x1004b850
mov ecx, 0x10149b08
mov dword [0x1014784c], 0
call fcn.1004d870
push dword [ebp - 0x17]
mov ebx, eax
push ecx
lea ecx, [ebp - 0x4c]
call fcn.10051900
mov ecx, eax
call fcn.1004b340
push 0
sub esp, 0x18
mov edi, eax
mov esi, esp
push dword [ebp - 0x17]
push ecx
lea ecx, [ebp - 0x68]
call fcn.10051880
mov ecx, eax
call fcn.10046060
push eax
mov ecx, esi
call fcn.1004daa0
lea eax, [ebp - 0x40]
push eax
call fcn.10045e00
add esp, 0x20
mov ecx, eax
call fcn.1004d870
push ebx
push 0
push edi
push eax
call dword [sym.imp.KERNEL32.dll_GetPrivateProfileIntA]
mov ebx, eax
lea ecx, [ebp - 0x40]
mov dword [ebp - 0x20], ebx
call fcn.1004d9f0
test ebx, ebx
jle 0x1004bb24
xor esi, esi
mov dword [ebp - 0x28], esi
nop dword [eax]
mov ecx, 0x10149b08
call fcn.1004d870
push esi
sub esp, 0x18
mov ebx, eax
mov esi, esp
push dword [ebp - 0x17]
push ecx
lea ecx, [ebp - 0x9c]
call fcn.100519f0
mov ecx, eax
call fcn.10047dd0
push eax
mov ecx, esi
call fcn.1004daa0
lea eax, [ebp + 0x18]
push eax
call fcn.10045e00
add esp, 0x20
mov ecx, eax
mov dword [ebp - 4], 7
call fcn.1004d870
push 0
sub esp, 0x18
mov edi, eax
mov esi, esp
push dword [ebp - 0x17]
push ecx
lea ecx, [ebp - 0x68]
call fcn.10051970
mov ecx, eax
call fcn.10046060
push eax
mov ecx, esi
call fcn.1004daa0
lea eax, [ebp - 0x40]
push eax
call fcn.10045e00
add esp, 0x20
mov ecx, eax
call fcn.1004d870
push ebx
push 0
push edi
push eax
call dword [sym.imp.KERNEL32.dll_GetPrivateProfileIntA]
lea ecx, [ebp - 0x40]
mov dword [ebp + 0x30], eax
call fcn.1004d9f0
lea ecx, [ebp + 0x18]
mov dword [ebp - 4], 0xffffffff
call fcn.1004d9f0
lea eax, [ebp + 0x30]
mov ecx, 0x101583cc
push eax
call fcn.1004d1c0
mov esi, dword [ebp - 0x28]
inc esi
mov dword [ebp - 0x28], esi
cmp esi, dword [ebp - 0x20]
jl 0x1004ba60
mov ecx, 0x10149b08
call fcn.1004d870
push dword [ebp - 0x17]
mov edi, eax
push ecx
lea ecx, [ebp - 0x4c]
call fcn.10051af0
mov ecx, eax
call fcn.1004b340
push dword [ebp - 0x17]
mov esi, eax
push ecx
lea ecx, [ebp - 0xb8]
call fcn.10051a50
mov ecx, eax
call fcn.10045fe0
push eax
lea ecx, [ebp - 0x40]
call fcn.1004daa0
mov ecx, eax
call fcn.1004d870
push edi
push 0
push esi
push eax
call dword [sym.imp.KERNEL32.dll_GetPrivateProfileIntA]
mov esi, eax
lea ecx, [ebp - 0x40]
mov dword [ebp + 0x30], esi
call fcn.1004d9f0
xor ebx, ebx
test esi, esi
jle 0x1004bd3d
nop dword [eax]
mov ecx, 0x10149b08
call fcn.1004d870
push ebx
sub esp, 0x18
mov edi, eax
mov esi, esp
push dword [ebp - 0x17]
push ecx
lea ecx, [ebp - 0xcc]
call fcn.10051c00
mov ecx, eax
call fcn.1004a390
push eax
mov ecx, esi
call fcn.1004daa0
lea eax, [ebp - 0xa8]
push eax
call fcn.10045e00
add esp, 0x20
mov ecx, eax
mov dword [ebp - 4], 8
call fcn.1004d870
push dword [ebp - 0x17]
mov esi, eax
push ecx
lea ecx, [ebp - 0xb8]
call fcn.10051b60
mov ecx, eax
call fcn.10045fe0
push eax
lea ecx, [ebp - 0x40]
call fcn.1004daa0
mov ecx, eax
call fcn.1004d870
push edi
push 0x32
lea ecx, [ebp + 0x168]
push ecx
push 0x1010ecff
push esi
push eax
call dword [sym.imp.KERNEL32.dll_GetPrivateProfileStringA]
lea ecx, [ebp - 0x40]
call fcn.1004d9f0
lea ecx, [ebp - 0xa8]
mov dword [ebp - 4], 0xffffffff
call fcn.1004d9f0
mov ecx, 0x10149b08
call fcn.1004d870
push ebx
sub esp, 0x18
mov edi, eax
mov esi, esp
push dword [ebp - 0x17]
push ecx
lea ecx, [ebp - 0x4c]
call fcn.10051d10
mov ecx, eax
call fcn.1004b340
push eax
mov ecx, esi
call fcn.1004daa0
lea eax, [ebp - 0xa8]
push eax
call fcn.10045e00
add esp, 0x20
mov ecx, eax
mov dword [ebp - 4], 9
call fcn.1004d870
push dword [ebp - 0x17]
mov esi, eax
push ecx
lea ecx, [ebp - 0x68]
call fcn.10051c70
mov ecx, eax
call fcn.10045fe0
push eax
lea ecx, [ebp - 0x40]
call fcn.1004daa0
mov ecx, eax
call fcn.1004d870
push edi
push 0
push esi
push eax
call dword [sym.imp.KERNEL32.dll_GetPrivateProfileIntA]
lea ecx, [ebp - 0x40]
mov esi, eax
call fcn.1004d9f0
lea ecx, [ebp - 0xa8]
mov dword [ebp - 4], 0xffffffff
call fcn.1004d9f0
lea eax, [ebp + 0x168]
push eax
lea ecx, [ebp + 0x18]
call fcn.1004daa0
lea ecx, [ebp + 0x18]
mov dword [ebp - 4], 0xa
call fcn.1004d7f0
test al, al
jne 0x1004bd24
test esi, esi
je 0x1004bd24
lea eax, [ebp + 0x18]
push eax
lea ecx, [ebp - 0x90]
call fcn.1004db00
mov dword [ebp - 0x78], esi
lea eax, [ebp - 0x90]
mov byte [ebp - 4], 0xb
push eax
mov ecx, 0x101583b4
call fcn.1004cfb0
lea ecx, [ebp - 0x90]
call fcn.10047e50
lea ecx, [ebp + 0x18]
mov dword [ebp - 4], 0xffffffff
call fcn.1004d9f0
inc ebx
cmp ebx, dword [ebp + 0x30]
jl 0x1004bb90
mov ecx, 0x10149b08
call fcn.1004d870
push dword [ebp - 0x17]
mov edi, eax
push ecx
lea ecx, [ebp - 0x4c]
call fcn.10051e10
mov ecx, eax
call fcn.1004b340
push dword [ebp - 0x17]
mov esi, eax
push ecx
lea ecx, [ebp - 0xb8]
call fcn.10051d80
mov ecx, eax
call fcn.1004b380
push eax
lea ecx, [ebp - 0x40]
call fcn.1004daa0
mov ecx, eax
call fcn.1004d870
mov ebx, dword [sym.imp.KERNEL32.dll_GetPrivateProfileIntA]
push edi
push 0
push esi
push eax
call ebx
mov edi, eax
lea ecx, [ebp - 0x40]
mov dword [ebp - 0x28], edi
call fcn.1004d9f0
xor esi, esi
mov dword [ebp - 0x10], esi
test edi, edi
jle 0x1004c000
nop dword [eax + eax]
mov ecx, 0x10149b08
call fcn.1004d870
push esi
sub esp, 0x18
mov edi, eax
mov esi, esp
push dword [ebp - 0x17]
push ecx
lea ecx, [ebp - 0xcc]
call fcn.10051f10
mov ecx, eax
call fcn.1004a390
push eax
mov ecx, esi
call fcn.1004daa0
lea eax, [ebp - 0x8c]
push eax
call fcn.10045e00
add esp, 0x20
mov ecx, eax
mov dword [ebp - 4], 0xc
call fcn.1004d870
push dword [ebp - 0x17]
mov esi, eax
push ecx
lea ecx, [ebp - 0x68]
call fcn.10051e80
mov ecx, eax
call fcn.1004b380
push eax
lea ecx, [ebp + 0x18]
call fcn.1004daa0
mov ecx, eax
call fcn.1004d870
push edi
push 0x32
lea ecx, [ebp + 0x134]
push ecx
push 0x1010ecff
push esi
push eax
call dword [sym.imp.KERNEL32.dll_GetPrivateProfileStringA]
lea ecx, [ebp + 0x18]
call fcn.1004d9f0
lea ecx, [ebp - 0x8c]
mov dword [ebp - 4], 0xffffffff
call fcn.1004d9f0
mov ecx, 0x10149b08
call fcn.1004d870
push dword [ebp - 0x10]
mov edi, eax
sub esp, 0x18
mov esi, esp
push dword [ebp - 0x17]
push ecx
lea ecx, [ebp - 0x74]
call fcn.10052010
mov ecx, eax
call fcn.1004b340
push eax
mov ecx, esi
call fcn.1004daa0
lea eax, [ebp + 0x18]
push eax
call fcn.10045e00
add esp, 0x20
mov ecx, eax
mov dword [ebp - 4], 0xd
call fcn.1004d870
push dword [ebp - 0x17]
mov esi, eax
push ecx
lea ecx, [ebp - 0xa0]
call fcn.10051f80
mov ecx, eax
call fcn.1004b380
push eax
lea ecx, [ebp - 0x8c]
call fcn.1004daa0
mov ecx, eax
call fcn.1004d870
push edi
push 0
push esi
push eax
call ebx
lea ecx, [ebp - 0x8c]
mov dword [ebp + 0x30], eax
call fcn.1004d9f0
lea ecx, [ebp + 0x18]
mov dword [ebp - 4], 0xffffffff
call fcn.1004d9f0
mov ecx, 0x10149b08
call fcn.1004d870
push dword [ebp - 0x10]
mov edi, eax
sub esp, 0x18
mov esi, esp
push dword [ebp - 0x17]
push ecx
lea ecx, [ebp - 0x58]
call fcn.10052110
mov ecx, eax
call fcn.10045f20
push eax
mov ecx, esi
call fcn.1004daa0
lea eax, [ebp + 0x18]
push eax
call fcn.10045e00
add esp, 0x20
mov ecx, eax
mov dword [ebp - 4], 0xe
call fcn.1004d870
push dword [ebp - 0x17]
mov esi, eax
push ecx
lea ecx, [ebp - 0x10c]
call fcn.10052080
mov ecx, eax
call fcn.1004b380
push eax
lea ecx, [ebp - 0x8c]
call fcn.1004daa0
mov ecx, eax
call fcn.1004d870
push edi
push 0
push esi
push eax
call ebx
lea ecx, [ebp - 0x8c]
mov edi, eax
call fcn.1004d9f0
lea ecx, [ebp + 0x18]
mov dword [ebp - 4], 0xffffffff
call fcn.1004d9f0
lea eax, [ebp + 0x134]
push eax
lea ecx, [ebp]
call fcn.1004daa0
lea ecx, [ebp]
mov dword [ebp - 4], 0xf
call fcn.1004d7f0
test al, al
jne 0x1004bfe1
mov esi, dword [ebp + 0x30]
test esi, esi
je 0x1004bfe1
lea eax, [ebp]
push eax
lea ecx, [ebp - 0xfc]
call fcn.1004db00
mov dword [ebp - 0xe4], esi
mov dword [ebp - 0xe0], edi
lea eax, [ebp - 0xfc]
mov byte [ebp - 4], 0x10
push eax
call fcn.1004cf20
lea ecx, [ebp - 0xfc]
call fcn.10047e50
lea ecx, [ebp]
mov dword [ebp - 4], 0xffffffff
call fcn.1004d9f0
mov esi, dword [ebp - 0x10]
inc esi
mov dword [ebp - 0x10], esi
cmp esi, dword [ebp - 0x28]
jl 0x1004bdb0
movd xmm0, dword [0x101477c4]
mov ecx, dword [0x10147870]
cvtdq2ps xmm0, xmm0
call fcn.1005db10
mov ecx, 0x850f
movss dword [eax + 0x43c], xmm0
mov eax, 0x840f
cmp byte [0x10147805], 0
cmovne eax, ecx
cmp dword [0x1014779c], 0
mov word [0x6017c8], ax
je 0x1004c046
call fcn.10059000
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov ecx, dword [ebp + 0x19c]
xor ecx, ebp
call fcn.100c0eca
lea esp, [ebp + 0x1a0]
pop ebp
ret