Function at 0x1006d070
Capabilities:
Read .ini file

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x102bf7d4
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
mov eax, 0x50d34
call fcn.102ba650
mov dword [ebp - 0x10], ecx
mov ecx, dword [ebp - 0x10]
add ecx, 0x22c
call fcn.1003a670
movzx eax, al
test eax, eax
je 0x1006d0af
jmp 0x1006dcf7
mov ecx, dword [ebp - 0x10]
call fcn.1006dd60
push 0x104
push 0
lea ecx, [ebp - 0x440]
push ecx
call sub.VCRUNTIME140.dll_memset
add esp, 0xc
mov edx, dword [ebp - 0x10]
add edx, 0x22c
mov dword [ebp - 0x94], edx
mov eax, dword [ebp - 0x10]
add eax, 0x40
mov dword [ebp - 0x90], eax
push 0x102eaf90
lea ecx, [ebp - 0x15c]
call fcn.100130b0
mov dword [ebp - 4], 0
lea ecx, [ebp - 0x15c]
push ecx
mov ecx, dword [ebp - 0x90]
call fcn.10021240
mov edx, dword [eax]
push edx
mov ecx, dword [ebp - 0x94]
call fcn.1002c340
mov ecx, eax
call fcn.10013020
push eax
push 0x102eaf80
lea eax, [ebp - 0x440]
push eax
call sym.cheat.dll_sprintf
add esp, 0xc
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x15c]
call fcn.1000c760
push 0x10000
push 0
lea ecx, [ebp - 0x10d40]
push ecx
call sub.VCRUNTIME140.dll_memset
add esp, 0xc
lea edx, [ebp - 0x440]
push edx
push 0x10000
lea eax, [ebp - 0x20d40]
push eax
push 0x102eaf7c
call dword [sym.imp.KERNEL32.dll_GetPrivateProfileSectionA]
mov dword [ebp - 0x64], eax
lea ecx, [ebp - 0x440]
push ecx
push 0x10000
lea edx, [ebp - 0x30d40]
push edx
push 0x102eaf78
call dword [sym.imp.KERNEL32.dll_GetPrivateProfileSectionA]
mov dword [ebp - 0x6c], eax
lea eax, [ebp - 0x440]
push eax
push 0x10000
lea ecx, [ebp - 0x40d40]
push ecx
push 0x102eaf74
call dword [sym.imp.KERNEL32.dll_GetPrivateProfileSectionA]
mov dword [ebp - 0x74], eax
lea edx, [ebp - 0x440]
push edx
push 0x10000
lea eax, [ebp - 0x50d40]
push eax
push 0x102eaf70
call dword [sym.imp.KERNEL32.dll_GetPrivateProfileSectionA]
mov dword [ebp - 0x7c], eax
lea ecx, [ebp - 0x440]
push ecx
push 0x10000
lea edx, [ebp - 0x10d40]
push edx
push 0x102eafb0
call dword [sym.imp.KERNEL32.dll_GetPrivateProfileSectionA]
mov dword [ebp - 0x84], eax
cmp dword [ebp - 0x64], 0
jle 0x1006d39a
cmp dword [ebp - 0x64], 0xfffe
jge 0x1006d39a
lea eax, [ebp - 0x20d40]
mov dword [ebp - 0x18], eax
mov ecx, dword [ebp - 0x18]
movsx edx, byte [ecx]
test edx, edx
je 0x1006d39a
mov eax, dword [ebp - 0x18]
mov dword [ebp - 0x34], eax
mov ecx, dword [ebp - 0x34]
add ecx, 1
mov dword [ebp - 0x98], ecx
mov edx, dword [ebp - 0x34]
mov al, byte [edx]
mov byte [ebp - 0x29], al
add dword [ebp - 0x34], 1
cmp byte [ebp - 0x29], 0
jne 0x1006d24b
mov ecx, dword [ebp - 0x34]
sub ecx, dword [ebp - 0x98]
mov dword [ebp - 0x9c], ecx
mov edx, dword [ebp - 0x9c]
mov dword [ebp - 0x68], edx
push 0x3d
mov eax, dword [ebp - 0x18]
push eax
call dword [sym.imp.VCRUNTIME140.dll_strchr]
add esp, 8
mov dword [ebp - 0x48], eax
cmp dword [ebp - 0x48], 0
je 0x1006d388
mov cl, byte [0x102d6b6e]
mov byte [ebp - 0x640], cl
push 0xff
push 0
lea edx, [ebp - 0x63f]
push edx
call sub.VCRUNTIME140.dll_memset
add esp, 0xc
mov al, byte [0x102d6b6d]
mov byte [ebp - 0x540], al
push 0xff
push 0
lea ecx, [ebp - 0x53f]
push ecx
call sub.VCRUNTIME140.dll_memset
add esp, 0xc
mov edx, dword [ebp - 0x48]
sub edx, dword [ebp - 0x18]
push edx
mov eax, dword [ebp - 0x18]
push eax
push 0x100
lea ecx, [ebp - 0x640]
push ecx
call dword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_strncpy_s]
add esp, 0x10
mov edx, dword [ebp - 0x48]
sub edx, dword [ebp - 0x18]
mov eax, dword [ebp - 0x68]
sub eax, edx
push eax
mov ecx, dword [ebp - 0x48]
add ecx, 1
push ecx
push 0x100
lea edx, [ebp - 0x540]
push edx
call dword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_strncpy_s]
add esp, 0x10
lea eax, [ebp - 0x540]
push eax
call dword [sym.imp.api_ms_win_crt_convert_l1_1_0.dll_atoi]
add esp, 4
test eax, eax
je 0x1006d336
mov byte [ebp - 0x11], 1
jmp 0x1006d33a
mov byte [ebp - 0x11], 0
mov ecx, dword [ebp - 0x10]
add ecx, 0x20
mov dword [ebp - 0xa0], ecx
lea edx, [ebp - 0x640]
push edx
lea ecx, [ebp - 0x174]
call fcn.100130b0
mov dword [ebp - 4], 1
lea eax, [ebp - 0x174]
push eax
mov ecx, dword [ebp - 0xa0]
call fcn.10012ec0
mov cl, byte [ebp - 0x11]
mov byte [eax], cl
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x174]
call fcn.1000c760
mov edx, dword [ebp - 0x68]
mov eax, dword [ebp - 0x18]
lea ecx, [eax + edx + 1]
mov dword [ebp - 0x18], ecx
jmp 0x1006d22b
cmp dword [ebp - 0x6c], 0
jle 0x1006d524
cmp dword [ebp - 0x6c], 0xfffe
jge 0x1006d524
lea edx, [ebp - 0x30d40]
mov dword [ebp - 0x1c], edx
mov eax, dword [ebp - 0x1c]
movsx ecx, byte [eax]
test ecx, ecx
je 0x1006d524
mov edx, dword [ebp - 0x1c]
mov dword [ebp - 0x38], edx
mov eax, dword [ebp - 0x38]
add eax, 1
mov dword [ebp - 0xa4], eax
mov ecx, dword [ebp - 0x38]
mov dl, byte [ecx]
mov byte [ebp - 0x2a], dl
add dword [ebp - 0x38], 1
cmp byte [ebp - 0x2a], 0
jne 0x1006d3da
mov eax, dword [ebp - 0x38]
sub eax, dword [ebp - 0xa4]
mov dword [ebp - 0xa8], eax
mov ecx, dword [ebp - 0xa8]
mov dword [ebp - 0x70], ecx
push 0x3d
mov edx, dword [ebp - 0x1c]
push edx
call dword [sym.imp.VCRUNTIME140.dll_strchr]
add esp, 8
mov dword [ebp - 0x4c], eax
cmp dword [ebp - 0x4c], 0
je 0x1006d512
mov al, byte [0x102d6b67]
mov byte [ebp - 0x840], al
push 0xff
push 0
lea ecx, [ebp - 0x83f]
push ecx
call sub.VCRUNTIME140.dll_memset
add esp, 0xc
mov dl, byte [0x102d6b66]
mov byte [ebp - 0x740], dl
push 0xff
push 0
lea eax, [ebp - 0x73f]
push eax
call sub.VCRUNTIME140.dll_memset
add esp, 0xc
mov ecx, dword [ebp - 0x4c]
sub ecx, dword [ebp - 0x1c]
push ecx
mov edx, dword [ebp - 0x1c]
push edx
push 0x100
lea eax, [ebp - 0x840]
push eax
call dword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_strncpy_s]
add esp, 0x10
mov ecx, dword [ebp - 0x4c]
sub ecx, dword [ebp - 0x1c]
mov edx, dword [ebp - 0x70]
sub edx, ecx
push edx
mov eax, dword [ebp - 0x4c]
add eax, 1
push eax
push 0x100
lea ecx, [ebp - 0x740]
push ecx
call dword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_strncpy_s]
add esp, 0x10
lea edx, [ebp - 0x740]
push edx
call dword [sym.imp.api_ms_win_crt_convert_l1_1_0.dll_atoi]
add esp, 4
mov dword [ebp - 0xb0], eax
mov eax, dword [ebp - 0x10]
add eax, 0x40
mov dword [ebp - 0xac], eax
lea ecx, [ebp - 0x840]
push ecx
lea ecx, [ebp - 0x18c]
call fcn.100130b0
mov dword [ebp - 4], 2
lea edx, [ebp - 0x18c]
push edx
mov ecx, dword [ebp - 0xac]
call fcn.10021240
mov ecx, dword [ebp - 0xb0]
mov dword [eax], ecx
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x18c]
call fcn.1000c760
mov edx, dword [ebp - 0x70]
mov eax, dword [ebp - 0x1c]
lea ecx, [eax + edx + 1]
mov dword [ebp - 0x1c], ecx
jmp 0x1006d3ba
cmp dword [ebp - 0x74], 0
jle 0x1006d6b2
cmp dword [ebp - 0x74], 0xfffe
jge 0x1006d6b2
lea edx, [ebp - 0x40d40]
mov dword [ebp - 0x20], edx
mov eax, dword [ebp - 0x20]
movsx ecx, byte [eax]
test ecx, ecx
je 0x1006d6b2
mov edx, dword [ebp - 0x20]
mov dword [ebp - 0x3c], edx
mov eax, dword [ebp - 0x3c]
add eax, 1
mov dword [ebp - 0xb4], eax
mov ecx, dword [ebp - 0x3c]
mov dl, byte [ecx]
mov byte [ebp - 0x2b], dl
add dword [ebp - 0x3c], 1
cmp byte [ebp - 0x2b], 0
jne 0x1006d564
mov eax, dword [ebp - 0x3c]
sub eax, dword [ebp - 0xb4]
mov dword [ebp - 0xb8], eax
mov ecx, dword [ebp - 0xb8]
mov dword [ebp - 0x78], ecx
push 0x3d
mov edx, dword [ebp - 0x20]
push edx
call dword [sym.imp.VCRUNTIME140.dll_strchr]
add esp, 8
mov dword [ebp - 0x50], eax
cmp dword [ebp - 0x50], 0
je 0x1006d6a0
mov al, byte [0x102d6b65]
mov byte [ebp - 0xa40], al
push 0xff
push 0
lea ecx, [ebp - 0xa3f]
push ecx
call sub.VCRUNTIME140.dll_memset
add esp, 0xc
mov dl, byte [0x102d6b5f]
mov byte [ebp - 0x940], dl
push 0xff
push 0
lea eax, [ebp - 0x93f]
push eax
call sub.VCRUNTIME140.dll_memset
add esp, 0xc
mov ecx, dword [ebp - 0x50]
sub ecx, dword [ebp - 0x20]
push ecx
mov edx, dword [ebp - 0x20]
push edx
push 0x100
lea eax, [ebp - 0xa40]
push eax
call dword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_strncpy_s]
add esp, 0x10
mov ecx, dword [ebp - 0x50]
sub ecx, dword [ebp - 0x20]
mov edx, dword [ebp - 0x78]
sub edx, ecx
push edx
mov eax, dword [ebp - 0x50]
add eax, 1
push eax
push 0x100
lea ecx, [ebp - 0x940]
push ecx
call dword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_strncpy_s]
add esp, 0x10
lea edx, [ebp - 0x940]
push edx
call dword [sym.imp.api_ms_win_crt_convert_l1_1_0.dll_atof]
add esp, 4
fstp dword [ebp - 0xc0]
mov eax, dword [ebp - 0x10]
add eax, 0x60
mov dword [ebp - 0xbc], eax
lea ecx, [ebp - 0xa40]
push ecx
lea ecx, [ebp - 0x1a4]
call fcn.100130b0
mov dword [ebp - 4], 3
lea edx, [ebp - 0x1a4]
push edx
mov ecx, dword [ebp - 0xbc]
call fcn.10071dc0
movss xmm0, dword [ebp - 0xc0]
movss dword [eax], xmm0
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x1a4]
call fcn.1000c760
mov eax, dword [ebp - 0x78]
mov ecx, dword [ebp - 0x20]
lea edx, [ecx + eax + 1]
mov dword [ebp - 0x20], edx
jmp 0x1006d544
cmp dword [ebp - 0x7c], 0
jle 0x1006d9c3
cmp dword [ebp - 0x7c], 0xfffe
jge 0x1006d9c3
lea eax, [ebp - 0x50d40]
mov dword [ebp - 0x24], eax
mov ecx, dword [ebp - 0x24]
movsx edx, byte [ecx]
test edx, edx
je 0x1006d9c3
mov eax, dword [ebp - 0x24]
mov dword [ebp - 0x40], eax
mov ecx, dword [ebp - 0x40]
add ecx, 1
mov dword [ebp - 0xc4], ecx
mov edx, dword [ebp - 0x40]
mov al, byte [edx]
mov byte [ebp - 0x2c], al
add dword [ebp - 0x40], 1
cmp byte [ebp - 0x2c], 0
jne 0x1006d6f2
mov ecx, dword [ebp - 0x40]
sub ecx, dword [ebp - 0xc4]
mov dword [ebp - 0xc8], ecx
mov edx, dword [ebp - 0xc8]
mov dword [ebp - 0x80], edx
push 0x3d
mov eax, dword [ebp - 0x24]
push eax
call dword [sym.imp.VCRUNTIME140.dll_strchr]
add esp, 8
mov dword [ebp - 0x54], eax
cmp dword [ebp - 0x54], 0
je 0x1006d9b1
mov cl, byte [0x102d6b57]
mov byte [ebp - 0x33c], cl
push 0xff
push 0
lea edx, [ebp - 0x33b]
push edx
call sub.VCRUNTIME140.dll_memset
add esp, 0xc
mov al, byte [0x102d6b83]
mov byte [ebp - 0xb40], al
push 0xff
push 0
lea ecx, [ebp - 0xb3f]
push ecx
call sub.VCRUNTIME140.dll_memset
add esp, 0xc
mov edx, dword [ebp - 0x54]
sub edx, dword [ebp - 0x24]
push edx
mov eax, dword [ebp - 0x24]
push eax
push 0x100
lea ecx, [ebp - 0x33c]
push ecx
call dword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_strncpy_s]
add esp, 0x10
mov edx, dword [ebp - 0x54]
sub edx, dword [ebp - 0x24]
mov eax, dword [ebp - 0x80]
sub eax, edx
push eax
mov ecx, dword [ebp - 0x54]
add ecx, 1
push ecx
push 0x100
lea edx, [ebp - 0xb40]
push edx
call dword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_strncpy_s]
add esp, 0x10
sub esp, 0x18
mov ecx, esp
mov dword [ebp - 0x110], esp
lea eax, [ebp - 0xb40]
push eax
call fcn.100130b0
call fcn.1006b6c0
add esp, 0x18
mov dword [ebp - 0xcc], eax
mov ecx, dword [ebp - 0xcc]
mov dword [ebp - 0x58], ecx
mov edx, 4
imul eax, edx, 0
mov ecx, dword [ebp - 0x58]
mov edx, dword [ecx + eax]
mov dword [ebp - 0xd4], edx
mov eax, dword [ebp - 0x10]
add eax, 0xa0
mov dword [ebp - 0xd0], eax
lea ecx, [ebp - 0x33c]
push ecx
lea ecx, [ebp - 0x1bc]
call fcn.100130b0
mov dword [ebp - 4], 4
lea edx, [ebp - 0x1bc]
push edx
mov ecx, dword [ebp - 0xd0]
call fcn.10012e90
mov ecx, 4
imul edx, ecx, 0
mov ecx, dword [ebp - 0xd4]
mov dword [eax + edx], ecx
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x1bc]
call fcn.1000c760
mov edx, 4
shl edx, 0
mov eax, dword [ebp - 0x58]
mov ecx, dword [eax + edx]
mov dword [ebp - 0xdc], ecx
mov edx, dword [ebp - 0x10]
add edx, 0xa0
mov dword [ebp - 0xd8], edx
lea eax, [ebp - 0x33c]
push eax
lea ecx, [ebp - 0x1d4]
call fcn.100130b0
mov dword [ebp - 4], 5
lea ecx, [ebp - 0x1d4]
push ecx
mov ecx, dword [ebp - 0xd8]
call fcn.10012e90
mov edx, 4
shl edx, 0
mov ecx, dword [ebp - 0xdc]
mov dword [eax + edx], ecx
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x1d4]
call fcn.1000c760
mov edx, 4
shl edx, 1
mov eax, dword [ebp - 0x58]
mov ecx, dword [eax + edx]
mov dword [ebp - 0xe4], ecx
mov edx, dword [ebp - 0x10]
add edx, 0xa0
mov dword [ebp - 0xe0], edx
lea eax, [ebp - 0x33c]
push eax
lea ecx, [ebp - 0x1ec]
call fcn.100130b0
mov dword [ebp - 4], 6
lea ecx, [ebp - 0x1ec]
push ecx
mov ecx, dword [ebp - 0xe0]
call fcn.10012e90
mov edx, 4
shl edx, 1
mov ecx, dword [ebp - 0xe4]
mov dword [eax + edx], ecx
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x1ec]
call fcn.1000c760
mov edx, 4
imul eax, edx, 3
mov ecx, dword [ebp - 0x58]
mov edx, dword [ecx + eax]
mov dword [ebp - 0xec], edx
mov eax, dword [ebp - 0x10]
add eax, 0xa0
mov dword [ebp - 0xe8], eax
lea ecx, [ebp - 0x33c]
push ecx
lea ecx, [ebp - 0x204]
call fcn.100130b0
mov dword [ebp - 4], 7
lea edx, [ebp - 0x204]
push edx
mov ecx, dword [ebp - 0xe8]
call fcn.10012e90
mov ecx, 4
imul edx, ecx, 3
mov ecx, dword [ebp - 0xec]
mov dword [eax + edx], ecx
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x204]
call fcn.1000c760
mov edx, dword [ebp - 0x80]
mov eax, dword [ebp - 0x24]
lea ecx, [eax + edx + 1]
mov dword [ebp - 0x24], ecx
jmp 0x1006d6d2
cmp dword [ebp - 0x84], 0
jle 0x1006dcef
cmp dword [ebp - 0x84], 0xfffe
jge 0x1006dcef
lea edx, [ebp - 0x10d40]
mov dword [ebp - 0x28], edx
mov eax, dword [ebp - 0x28]
movsx ecx, byte [eax]
test ecx, ecx
je 0x1006dcef
mov edx, dword [ebp - 0x28]
mov dword [ebp - 0x44], edx
mov eax, dword [ebp - 0x44]
add eax, 1
mov dword [ebp - 0xf0], eax
mov ecx, dword [ebp - 0x44]
mov dl, byte [ecx]
mov byte [ebp - 0x2d], dl
add dword [ebp - 0x44], 1
cmp byte [ebp - 0x2d], 0
jne 0x1006da09
mov eax, dword [ebp - 0x44]
sub eax, dword [ebp - 0xf0]
mov dword [ebp - 0xf4], eax
mov ecx, dword [ebp - 0xf4]
mov dword [ebp - 0x8c], ecx
push 0x3d
mov edx, dword [ebp - 0x28]
push edx
call dword [sym.imp.VCRUNTIME140.dll_strchr]
add esp, 8
mov dword [ebp - 0x5c], eax
cmp dword [ebp - 0x5c], 0
je 0x1006dcda
mov al, byte [0x102d6b82]
mov byte [ebp - 0xd40], al
push 0xff
push 0
lea ecx, [ebp - 0xd3f]
push ecx
call sub.VCRUNTIME140.dll_memset
add esp, 0xc
mov dl, byte [0x102d6b81]
mov byte [ebp - 0xc40], dl
push 0xff
push 0
lea eax, [ebp - 0xc3f]
push eax
call sub.VCRUNTIME140.dll_memset
add esp, 0xc
mov ecx, dword [ebp - 0x5c]
sub ecx, dword [ebp - 0x28]
push ecx
mov edx, dword [ebp - 0x28]
push edx
push 0x100
lea eax, [ebp - 0xd40]
push eax
call dword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_strncpy_s]
add esp, 0x10
mov ecx, dword [ebp - 0x5c]
sub ecx, dword [ebp - 0x28]
mov edx, dword [ebp - 0x8c]
sub edx, ecx
push edx
mov eax, dword [ebp - 0x5c]
add eax, 1
push eax
push 0x100
lea ecx, [ebp - 0xc40]
push ecx
call dword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_strncpy_s]
add esp, 0x10
push 0x102eafc8
sub esp, 0x18
mov ecx, esp
mov dword [ebp - 0x114], esp
lea edx, [ebp - 0xc40]
push edx
call fcn.100130b0
lea eax, [ebp - 0x12c]
push eax
mov ecx, 0x107f970c
call fcn.1006b7f0
mov dword [ebp - 0x118], eax
mov dword [ebp - 4], 8
lea ecx, [ebp - 0x23c]
call fcn.1001f100
mov byte [ebp - 4], 9
lea ecx, [ebp - 0x12c]
mov dword [ebp - 0x88], ecx
mov ecx, dword [ebp - 0x88]
call fcn.1000f510
mov dword [ebp - 0x60], eax
mov ecx, dword [ebp - 0x88]
call fcn.10014290
mov dword [ebp - 0xf8], eax
jmp 0x1006db5f
mov edx, dword [ebp - 0x60]
add edx, 0x18
mov dword [ebp - 0x60], edx
mov eax, dword [ebp - 0x60]
cmp eax, dword [ebp - 0xf8]
je 0x1006dc66
mov ecx, dword [ebp - 0x60]
push ecx
lea ecx, [ebp - 0x144]
call fcn.10025000
mov byte [ebp - 4], 0xa
push 0x102d6b6f
lea edx, [ebp - 0x144]
push edx
call fcn.10073d00
add esp, 8
movzx eax, al
test eax, eax
je 0x1006dbad
mov byte [ebp - 4], 9
lea ecx, [ebp - 0x144]
call fcn.1000c760
jmp 0x1006db56
push 0x102eafc4
sub esp, 0x18
mov ecx, esp
mov dword [ebp - 0x11c], esp
lea edx, [ebp - 0x144]
push edx
call fcn.10025000
lea eax, [ebp - 0x10c]
push eax
mov ecx, 0x107f970c
call fcn.1006b7f0
mov dword [ebp - 0x120], eax
mov byte [ebp - 4], 0xb
push 0xa
push 0
push 1
lea ecx, [ebp - 0x10c]
call fcn.1002c340
push eax
call fcn.10068da0
add esp, 0xc
test eax, eax
je 0x1006dc08
mov byte [ebp - 0x12], 1
jmp 0x1006dc0c
mov byte [ebp - 0x12], 0
push 0xa
push 0
push 0
lea ecx, [ebp - 0x10c]
call fcn.1002c340
push eax
call fcn.10068da0
add esp, 0xc
mov dword [ebp - 0xfc], eax
lea ecx, [ebp - 0xfc]
push ecx
lea ecx, [ebp - 0x23c]
call fcn.10022060
mov dl, byte [ebp - 0x12]
mov byte [eax], dl
mov byte [ebp - 4], 0xa
lea ecx, [ebp - 0x10c]
call fcn.10012e70
mov byte [ebp - 4], 9
lea ecx, [ebp - 0x144]
call fcn.1000c760
jmp 0x1006db56
mov eax, dword [ebp - 0x10]
add eax, 0x200
mov dword [ebp - 0x100], eax
lea ecx, [ebp - 0xd40]
push ecx
lea ecx, [ebp - 0x21c]
call fcn.100130b0
mov byte [ebp - 4], 0xc
lea edx, [ebp - 0x23c]
push edx
lea eax, [ebp - 0x21c]
push eax
mov ecx, dword [ebp - 0x100]
call fcn.1002c3e0
mov ecx, eax
call fcn.100719c0
mov byte [ebp - 4], 9
lea ecx, [ebp - 0x21c]
call fcn.1000c760
mov byte [ebp - 4], 8
lea ecx, [ebp - 0x23c]
call fcn.100197c0
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x12c]
call fcn.10012e70
mov ecx, dword [ebp - 0x8c]
mov edx, dword [ebp - 0x28]
lea eax, [edx + ecx + 1]
mov dword [ebp - 0x28], eax
jmp 0x1006d9e9
mov ecx, dword [ebp - 0x10]
call fcn.10071630
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
mov esp, ebp
pop ebp
ret