Function at 0x1038d30
Capabilities:
Read .ini file
Read file on windows

Disassembly:
sub esp, 0x104
mov eax, dword [0x10f5ca0]
xor eax, esp
mov dword [esp + 0x100], eax
push ebx
push esi
push 0xff
lea eax, [esp + 0xd]
push 0
push eax
mov byte [esp + 0x14], 0
call fcn.0109a300
add esp, 0xc
push ebx
call 0x1038d65
jmp 0x1038d6a
pushal
call 0x1038d70
pop ebx
add ebx, 0x17
push 0xd41000
pop ebx
popal
pop ebx
pop ebx
mov ebx, dword [sym.imp.KERNEL32.dll_lstrcpyA]
push 0x10fad40
lea ecx, [esp + 0xc]
push ecx
call ebx
push ebx
call 0x1038d95
jmp 0x1038d9a
pushal
call 0x1038da0
pop ebx
add ebx, 0x17
push 0xd41000
pop ebx
popal
pop ebx
pop ebx
lea eax, [esp + 8]
dec eax
mov cl, byte [eax + 1]
inc eax
test cl, cl
jne 0x1038db2
mov edx, dword [0x10eaf0c]
mov ecx, dword [0x10eaf10]
mov dword [eax], edx
mov edx, dword [0x10eaf14]
mov dword [eax + 4], ecx
mov cx, word [0x10eaf18]
mov dword [eax + 8], edx
push edi
mov word [eax + 0xc], cx
push ebx
call 0x1038de6
jmp 0x1038deb
pushal
call 0x1038df1
pop ebx
add ebx, 0x17
push 0xd41000
pop ebx
popal
pop ebx
pop ebx
mov edi, dword [sym.imp.KERNEL32.dll_GetPrivateProfileStringA]
lea edx, [esp + 0xc]
push edx
push pe_nt_image_headers32
push 0x10f7188
push 0x10db868
push 0x10dbc44
push 0x10dbc50
call edi
push ebx
call 0x1038e2a
jmp 0x1038e2f
pushal
call 0x1038e35
pop ebx
add ebx, 0x17
push 0xd41000
pop ebx
popal
pop ebx
pop ebx
mov esi, dword [sym.imp.KERNEL32.dll_GetPrivateProfileIntA]
lea eax, [esp + 0xc]
push eax
push 0xffffffffffffffff
push 0x10dc298
push 0x10dbc50
call esi
mov dword [0x10f719c], eax
push ebx
call 0x1038e66
jmp 0x1038e6b
pushal
call 0x1038e71
pop ebx
add ebx, 0x17
push 0xd41000
pop ebx
popal
pop ebx
pop ebx
lea ecx, [esp + 0xc]
push ecx
push 0xffffffffffffffff
push 0x10dc2f0
push 0x10dbc50
call esi
mov dword [0x10f71a0], eax
push ebx
call 0x1038e9c
jmp 0x1038ea1
pushal
call 0x1038ea7
pop ebx
add ebx, 0x17
push 0xd41000
pop ebx
popal
pop ebx
pop ebx
lea edx, [esp + 0xc]
push edx
push 0xffffffffffffffff
push 0x10dc3fc
push 0x10dbc50
call esi
mov dword [0x10f71a4], eax
push ebx
call 0x1038ed2
jmp 0x1038ed7
pushal
call 0x1038edd
pop ebx
add ebx, 0x17
push 0xd41000
pop ebx
popal
pop ebx
pop ebx
lea eax, [esp + 0xc]
push eax
push 0xffffffffffffffff
push 0x10dd310
push 0x10dbc50
call esi
mov dword [0x10f71a8], eax
push ebx
call 0x1038f08
jmp 0x1038f0d
pushal
call 0x1038f13
pop ebx
add ebx, 0x17
push 0xd41000
pop ebx
popal
pop ebx
pop ebx
lea ecx, [esp + 0xc]
push ecx
push pe_nt_image_headers32
push 0x10f71ac
push 0x10db868
push str.ProcessPath
push 0x10dbc50
call edi
push ebx
call 0x1038f46
jmp 0x1038f4b
pushal
call 0x1038f51
pop ebx
add ebx, 0x17
push 0xd41000
pop ebx
popal
pop ebx
pop ebx
push 0x10fad40
lea edx, [esp + 0x10]
push edx
call ebx
push ebx
call 0x1038f70
jmp 0x1038f75
pushal
call 0x1038f7b
pop ebx
add ebx, 0x17
push 0xd41000
pop ebx
popal
pop ebx
pop ebx
lea eax, [esp + 0xc]
dec eax
lea ecx, [ecx]
mov cl, byte [eax + 1]
inc eax
test cl, cl
jne 0x1038f90
mov ecx, dword [0x10eaf28]
mov edx, dword [0x10eaf2c]
mov dword [eax], ecx
mov ecx, dword [0x10eaf30]
mov dword [eax + 4], edx
mov dx, word [0x10eaf34]
mov dword [eax + 8], ecx
mov word [eax + 0xc], dx
push ebx
call 0x1038fc3
jmp 0x1038fc8
pushal
call 0x1038fce
pop ebx
add ebx, 0x17
push 0xd41000
pop ebx
popal
pop ebx
pop ebx
lea eax, [esp + 0xc]
push eax
push 0xffffffffffffffff
push 0x10dd310
push 0x10eaf38
call esi
mov dword [0x10f72ac], eax
push ebx
call 0x1038ff9
jmp 0x1038ffe
pushal
call 0x1039004
pop ebx
add ebx, 0x17
push 0xd41000
pop ebx
popal
pop ebx
pop ebx
push 0x10fad40
lea ecx, [esp + 0x10]
push ecx
call ebx
push ebx
call 0x1039023
jmp 0x1039028
pushal
call 0x103902e
pop ebx
add ebx, 0x17
push 0xd41000
pop ebx
popal
pop ebx
pop ebx
lea eax, [esp + 0xc]
dec eax
mov cl, byte [eax + 1]
inc eax
test cl, cl
jne 0x1039040
mov edx, dword [0x10eaf44]
mov ecx, dword [0x10eaf48]
mov dword [eax], edx
mov edx, dword [0x10eaf4c]
mov dword [eax + 4], ecx
mov ecx, dword [0x10eaf50]
mov dword [eax + 8], edx
mov dx, word [0x10eaf54]
mov dword [eax + 0xc], ecx
mov cl, byte [0x10eaf56]
mov word [eax + 0x10], dx
mov byte [eax + 0x12], cl
push ebx
call 0x1039085
jmp 0x103908a
pushal
call 0x1039090
pop ebx
add ebx, 0x17
push 0xd41000
pop ebx
popal
pop ebx
pop ebx
lea edx, [esp + 0xc]
push 0x10dc25c
push edx
call fcn.010948d0
add esp, 8
mov esi, eax
push ebx
call 0x10390b7
jmp 0x10390bc
pushal
call 0x10390c2
pop ebx
add ebx, 0x17
push 0xd41000
pop ebx
popal
pop ebx
pop ebx
test esi, esi
je 0x1039234
push 2
push 0
push esi
call fcn.010948f0
add esp, 0xc
push ebx
call 0x10390ea
jmp 0x10390ef
pushal
call 0x10390f5
pop ebx
add ebx, 0x17
push 0xd41000
pop ebx
popal
pop ebx
pop ebx
push esi
call fcn.01094b40
add esp, 4
mov dword [0x10fafd4], eax
push ebx
call 0x1039116
jmp 0x103911b
pushal
call 0x1039121
pop ebx
add ebx, 0x17
push 0xd41000
pop ebx
popal
pop ebx
pop ebx
mov eax, dword [0x10fafd4]
inc eax
push eax
call fcn.01065b20
add esp, 4
mov dword [0x10fafd0], eax
push ebx
call 0x1039148
jmp 0x103914d
pushal
call 0x1039153
pop ebx
add ebx, 0x17
push 0xd41000
pop ebx
popal
pop ebx
pop ebx
mov ecx, dword [0x10fafd4]
mov edx, dword [0x10fafd0]
mov byte [edx + ecx], 0
push ebx
call 0x1039176
jmp 0x103917b
pushal
call 0x1039181
pop ebx
add ebx, 0x17
push 0xd41000
pop ebx
popal
pop ebx
pop ebx
push 0
push 0
push esi
call fcn.010948f0
add esp, 0xc
push ebx
call 0x10391a1
jmp 0x10391a6
pushal
call 0x10391ac
pop ebx
add ebx, 0x17
push 0xd41000
pop ebx
popal
pop ebx
pop ebx
mov eax, dword [0x10fafd4]
mov ecx, dword [0x10fafd0]
push esi
push 1
push eax
push ecx
call fcn.01095610
add esp, 0x10
push ebx
call 0x10391d7
jmp 0x10391dc
pushal
call 0x10391e2
pop ebx
add ebx, 0x17
push 0xd41000
pop ebx
popal
pop ebx
pop ebx
push esi
call fcn.01095640
add esp, 4
push ebx
call 0x10391fe
jmp 0x1039203
pushal
call 0x1039209
pop ebx
add ebx, 0x17
push 0xd41000
pop ebx
popal
pop ebx
pop ebx
push ebx
call 0x103921c
jmp 0x1039221
pushal
call 0x1039227
pop ebx
add ebx, 0x17
push 0xd41000
pop ebx
popal
pop ebx
pop ebx
push 0x10fad40
lea edx, [esp + 0x10]
push edx
call ebx
push ebx
call 0x1039246
jmp 0x103924b
pushal
call 0x1039251
pop ebx
add ebx, 0x17
push 0xd41000
pop ebx
popal
pop ebx
pop ebx
lea edi, [esp + 0xc]
dec edi
mov al, byte [edi + 1]
inc edi
test al, al
jne 0x1039263
mov ecx, 5
mov esi, 0x10eaf58
rep movsd dword es:[edi], dword [esi]
movsw word es:[edi], word [esi]
movsb byte es:[edi], byte [esi]
push ebx
call 0x1039280
jmp 0x1039285
pushal
call 0x103928b
pop ebx
add ebx, 0x17
push 0xd41000
pop ebx
popal
pop ebx
pop ebx
lea eax, [esp + 0xc]
push 0x10dc25c
push eax
call fcn.010948d0
add esp, 8
mov esi, eax
push ebx
call 0x10392b2
jmp 0x10392b7
pushal
call 0x10392bd
pop ebx
add ebx, 0x17
push 0xd41000
pop ebx
popal
pop ebx
pop ebx
test esi, esi
je 0x1039430
push 2
push 0
push esi
call fcn.010948f0
add esp, 0xc
push ebx
call 0x10392e5
jmp 0x10392ea
pushal
call 0x10392f0
pop ebx
add ebx, 0x17
push 0xd41000
pop ebx
popal
pop ebx
pop ebx
push esi
call fcn.01094b40
add esp, 4
mov dword [0x10fafdc], eax
push ebx
call 0x1039311
jmp 0x1039316
pushal
call 0x103931c
pop ebx
add ebx, 0x17
push 0xd41000
pop ebx
popal
pop ebx
pop ebx
mov ecx, dword [0x10fafdc]
inc ecx
push ecx
call fcn.01065b20
add esp, 4
mov dword [0x10fafd8], eax
push ebx
call 0x1039344
jmp 0x1039349
pushal
call 0x103934f
pop ebx
add ebx, 0x17
push 0xd41000
pop ebx
popal
pop ebx
pop ebx
mov edx, dword [0x10fafdc]
mov eax, dword [0x10fafd8]
mov byte [eax + edx], 0
push ebx
call 0x1039371
jmp 0x1039376
pushal
call 0x103937c
pop ebx
add ebx, 0x17
push 0xd41000
pop ebx
popal
pop ebx
pop ebx
push 0
push 0
push esi
call fcn.010948f0
add esp, 0xc
push ebx
call 0x103939c
jmp 0x10393a1
pushal
call 0x10393a7
pop ebx
add ebx, 0x17
push 0xd41000
pop ebx
popal
pop ebx
pop ebx
mov ecx, dword [0x10fafdc]
mov edx, dword [0x10fafd8]
push esi
push 1
push ecx
push edx
call fcn.01095610
add esp, 0x10
push ebx
call 0x10393d3
jmp 0x10393d8
pushal
call 0x10393de
pop ebx
add ebx, 0x17
push 0xd41000
pop ebx
popal
pop ebx
pop ebx
push esi
call fcn.01095640
add esp, 4
push ebx
call 0x10393fa
jmp 0x10393ff
pushal
call 0x1039405
pop ebx
add ebx, 0x17
push 0xd41000
pop ebx
popal
pop ebx
pop ebx
push ebx
call 0x1039418
jmp 0x103941d
pushal
call 0x1039423
pop ebx
add ebx, 0x17
push 0xd41000
pop ebx
popal
pop ebx
pop ebx
push 0x10fad40
lea eax, [esp + 0x10]
push eax
call ebx
push ebx
call 0x1039442
jmp 0x1039447
pushal
call 0x103944d
pop ebx
add ebx, 0x17
push 0xd41000
pop ebx
popal
pop ebx
pop ebx
lea edi, [esp + 0xc]
dec edi
nop
mov al, byte [edi + 1]
inc edi
test al, al
jne 0x1039460
mov ecx, 5
mov esi, 0x10eaf70
rep movsd dword es:[edi], dword [esi]
movsw word es:[edi], word [esi]
movsb byte es:[edi], byte [esi]
push ebx
call 0x103947d
jmp 0x1039482
pushal
call 0x1039488
pop ebx
add ebx, 0x17
push 0xd41000
pop ebx
popal
pop ebx
pop ebx
lea ecx, [esp + 0xc]
push 0x10dc25c
push ecx
call fcn.010948d0
add esp, 8
mov esi, eax
push ebx
call 0x10394af
jmp 0x10394b4
pushal
call 0x10394ba
pop ebx
add ebx, 0x17
push 0xd41000
pop ebx
popal
pop ebx
pop ebx
pop edi
test esi, esi
je 0x103962d
push 2
push 0
push esi
call fcn.010948f0
add esp, 0xc
push ebx
call 0x10394e3
jmp 0x10394e8
pushal
call 0x10394ee
pop ebx
add ebx, 0x17
push 0xd41000
pop ebx
popal
pop ebx
pop ebx
push esi
call fcn.01094b40
add esp, 4
mov dword [0x10fafe4], eax
push ebx
call 0x103950f
jmp 0x1039514
pushal
call 0x103951a
pop ebx
add ebx, 0x17
push 0xd41000
pop ebx
popal
pop ebx
pop ebx
mov edx, dword [0x10fafe4]
inc edx
push edx
call fcn.01065b20
add esp, 4
mov dword [0x10fafe0], eax
push ebx
call 0x1039542
jmp 0x1039547
pushal
call 0x103954d
pop ebx
add ebx, 0x17
push 0xd41000
pop ebx
popal
pop ebx
pop ebx
mov eax, dword [0x10fafe4]
mov ecx, dword [0x10fafe0]
mov byte [ecx + eax], 0
push ebx
call 0x103956f
jmp 0x1039574
pushal
call 0x103957a
pop ebx
add ebx, 0x17
push 0xd41000
pop ebx
popal
pop ebx
pop ebx
push 0
push 0
push esi
call fcn.010948f0
add esp, 0xc
push ebx
call 0x103959a
jmp 0x103959f
pushal
call 0x10395a5
pop ebx
add ebx, 0x17
push 0xd41000
pop ebx
popal
pop ebx
pop ebx
mov edx, dword [0x10fafe4]
mov eax, dword [0x10fafe0]
push esi
push 1
push edx
push eax
call fcn.01095610
add esp, 0x10
push ebx
call 0x10395d0
jmp 0x10395d5
pushal
call 0x10395db
pop ebx
add ebx, 0x17
push 0xd41000
pop ebx
popal
pop ebx
pop ebx
push esi
call fcn.01095640
add esp, 4
push ebx
call 0x10395f7
jmp 0x10395fc
pushal
call 0x1039602
pop ebx
add ebx, 0x17
push 0xd41000
pop ebx
popal
pop ebx
pop ebx
push ebx
call 0x1039615
jmp 0x103961a
pushal
call 0x1039620
pop ebx
add ebx, 0x17
push 0xd41000
pop ebx
popal
pop ebx
pop ebx
push 0x10fad40
lea ecx, [esp + 0xc]
push ecx
call ebx
push ebx
call 0x103963f
jmp 0x1039644
pushal
call 0x103964a
pop ebx
add ebx, 0x17
push 0xd41000
pop ebx
popal
pop ebx
pop ebx
lea eax, [esp + 8]
dec eax
lea esp, [esp]
mov cl, byte [eax + 1]
inc eax
test cl, cl
jne 0x1039660
mov edx, dword [0x10eaf88]
mov ecx, dword [0x10eaf8c]
mov dword [eax], edx
mov edx, dword [0x10eaf90]
mov dword [eax + 4], ecx
mov ecx, dword [0x10eaf94]
mov dword [eax + 8], edx
mov dx, word [0x10eaf98]
mov dword [eax + 0xc], ecx
mov cl, byte [0x10eaf9a]
mov word [eax + 0x10], dx
mov byte [eax + 0x12], cl
push ebx
call 0x10396a5
jmp 0x10396aa
pushal
call 0x10396b0
pop ebx
add ebx, 0x17
push 0xd41000
pop ebx
popal
pop ebx
pop ebx
lea edx, [esp + 8]
push 0x10dc25c
push edx
call fcn.010948d0
add esp, 8
mov esi, eax
push ebx
call 0x10396d7
jmp 0x10396dc
pushal
call 0x10396e2
pop ebx
add ebx, 0x17
push 0xd41000
pop ebx
popal
pop ebx
pop ebx
test esi, esi
je 0x1039854
push 2
push 0
push esi
call fcn.010948f0
add esp, 0xc
push ebx
call 0x103970a
jmp 0x103970f
pushal
call 0x1039715
pop ebx
add ebx, 0x17
push 0xd41000
pop ebx
popal
pop ebx
pop ebx
push esi
call fcn.01094b40
add esp, 4
mov dword [0x10fafec], eax
push ebx
call 0x1039736
jmp 0x103973b
pushal
call 0x1039741
pop ebx
add ebx, 0x17
push 0xd41000
pop ebx
popal
pop ebx
pop ebx
mov eax, dword [0x10fafec]
inc eax
push eax
call fcn.01065b20
add esp, 4
mov dword [0x10fafe8], eax
push ebx
call 0x1039768
jmp 0x103976d
pushal
call 0x1039773
pop ebx
add ebx, 0x17
push 0xd41000
pop ebx
popal
pop ebx
pop ebx
mov ecx, dword [0x10fafec]
mov edx, dword [0x10fafe8]
mov byte [edx + ecx], 0
push ebx
call 0x1039796
jmp 0x103979b
pushal
call 0x10397a1
pop ebx
add ebx, 0x17
push 0xd41000
pop ebx
popal
pop ebx
pop ebx
push 0
push 0
push esi
call fcn.010948f0
add esp, 0xc
push ebx
call 0x10397c1
jmp 0x10397c6
pushal
call 0x10397cc
pop ebx
add ebx, 0x17
push 0xd41000
pop ebx
popal
pop ebx
pop ebx
mov eax, dword [0x10fafec]
mov ecx, dword [0x10fafe8]
push esi
push 1
push eax
push ecx
call fcn.01095610
add esp, 0x10
push ebx
call 0x10397f7
jmp 0x10397fc
pushal
call 0x1039802
pop ebx
add ebx, 0x17
push 0xd41000
pop ebx
popal
pop ebx
pop ebx
push esi
call fcn.01095640
add esp, 4
push ebx
call 0x103981e
jmp 0x1039823
pushal
call 0x1039829
pop ebx
add ebx, 0x17
push 0xd41000
pop ebx
popal
pop ebx
pop ebx
push ebx
call 0x103983c
jmp 0x1039841
pushal
call 0x1039847
pop ebx
add ebx, 0x17
push 0xd41000
pop ebx
popal
pop ebx
pop ebx
push 0x10fad40
lea edx, [esp + 0xc]
push edx
call ebx
push ebx
call 0x1039866
jmp 0x103986b
pushal
call 0x1039871
pop ebx
add ebx, 0x17
push 0xd41000
pop ebx
popal
pop ebx
pop ebx
lea eax, [esp + 8]
dec eax
mov cl, byte [eax + 1]
inc eax
test cl, cl
jne 0x1039883
mov ecx, dword [str.Servers.txt]
mov edx, dword [0x10eafa0]
mov dword [eax], ecx
mov ecx, dword [0x10eafa4]
mov dword [eax + 4], edx
mov dl, byte [0x10eafa8]
mov dword [eax + 8], ecx
mov byte [eax + 0xc], dl
push ebx
call 0x10398b4
jmp 0x10398b9
pushal
call 0x10398bf
pop ebx
add ebx, 0x17
push 0xd41000
pop ebx
popal
pop ebx
pop ebx
lea eax, [esp + 8]
push 0x10dc25c
push eax
call fcn.010948d0
add esp, 8
mov esi, eax
push ebx
call 0x10398e6
jmp 0x10398eb
pushal
call 0x10398f1
pop ebx
add ebx, 0x17
push 0xd41000
pop ebx
popal
pop ebx
pop ebx
test esi, esi
je 0x1039a64
push 2
push 0
push esi
call fcn.010948f0
add esp, 0xc
push ebx
call 0x1039919
jmp 0x103991e
pushal
call 0x1039924
pop ebx
add ebx, 0x17
push 0xd41000
pop ebx
popal
pop ebx
pop ebx
push esi
call fcn.01094b40
add esp, 4
mov dword [0x10faffc], eax
push ebx
call 0x1039945
jmp 0x103994a
pushal
call 0x1039950
pop ebx
add ebx, 0x17
push 0xd41000
pop ebx
popal
pop ebx
pop ebx
mov ecx, dword [0x10faffc]
inc ecx
push ecx
call fcn.01065b20
add esp, 4
mov dword [0x10faff8], eax
push ebx
call 0x1039978
jmp 0x103997d
pushal
call 0x1039983
pop ebx
add ebx, 0x17
push 0xd41000
pop ebx
popal
pop ebx
pop ebx
mov edx, dword [0x10faffc]
mov eax, dword [0x10faff8]
mov byte [eax + edx], 0
push ebx
call 0x10399a5
jmp 0x10399aa
pushal
call 0x10399b0
pop ebx
add ebx, 0x17
push 0xd41000
pop ebx
popal
pop ebx
pop ebx
push 0
push 0
push esi
call fcn.010948f0
add esp, 0xc
push ebx
call 0x10399d0
jmp 0x10399d5
pushal
call 0x10399db
pop ebx
add ebx, 0x17
push 0xd41000
pop ebx
popal
pop ebx
pop ebx
mov ecx, dword [0x10faffc]
mov edx, dword [0x10faff8]
push esi
push 1
push ecx
push edx
call fcn.01095610
add esp, 0x10
push ebx
call 0x1039a07
jmp 0x1039a0c
pushal
call 0x1039a12
pop ebx
add ebx, 0x17
push 0xd41000
pop ebx
popal
pop ebx
pop ebx
push esi
call fcn.01095640
add esp, 4
push ebx
call 0x1039a2e
jmp 0x1039a33
pushal
call 0x1039a39
pop ebx
add ebx, 0x17
push 0xd41000
pop ebx
popal
pop ebx
pop ebx
push ebx
call 0x1039a4c
jmp 0x1039a51
pushal
call 0x1039a57
pop ebx
add ebx, 0x17
push 0xd41000
pop ebx
popal
pop ebx
pop ebx
push 0x10fad40
lea eax, [esp + 0xc]
push eax
call ebx
push ebx
call 0x1039a76
jmp 0x1039a7b
pushal
call 0x1039a81
pop ebx
add ebx, 0x17
push 0xd41000
pop ebx
popal
pop ebx
pop ebx
lea eax, [esp + 8]
dec eax
mov cl, byte [eax + 1]
inc eax
test cl, cl
jne 0x1039a93
mov ecx, dword [0x10eafac]
mov edx, dword [0x10eafb0]
mov dword [eax], ecx
mov ecx, dword [0x10eafb4]
mov dword [eax + 4], edx
mov dx, word [0x10eafb8]
mov dword [eax + 8], ecx
mov word [eax + 0xc], dx
push ebx
call 0x1039ac6
jmp 0x1039acb
pushal
call 0x1039ad1
pop ebx
add ebx, 0x17
push 0xd41000
pop ebx
popal
pop ebx
pop ebx
lea eax, [esp + 8]
push 0x10dc25c
push eax
call fcn.010948d0
add esp, 8
mov esi, eax
push ebx
call 0x1039af8
jmp 0x1039afd
pushal
call 0x1039b03
pop ebx
add ebx, 0x17
push 0xd41000
pop ebx
popal
pop ebx
pop ebx
test esi, esi
je 0x1039c76
push 2
push 0
push esi
call fcn.010948f0
add esp, 0xc
push ebx
call 0x1039b2b
jmp 0x1039b30
pushal
call 0x1039b36
pop ebx
add ebx, 0x17
push 0xd41000
pop ebx
popal
pop ebx
pop ebx
push esi
call fcn.01094b40
add esp, 4
mov dword [0x10faff4], eax
push ebx
call 0x1039b57
jmp 0x1039b5c
pushal
call 0x1039b62
pop ebx
add ebx, 0x17
push 0xd41000
pop ebx
popal
pop ebx
pop ebx
mov ecx, dword [0x10faff4]
inc ecx
push ecx
call fcn.01065b20
add esp, 4
mov dword [0x10faff0], eax
push ebx
call 0x1039b8a
jmp 0x1039b8f
pushal
call 0x1039b95
pop ebx
add ebx, 0x17
push 0xd41000
pop ebx
popal
pop ebx
pop ebx
mov edx, dword [0x10faff4]
mov eax, dword [0x10faff0]
mov byte [eax + edx], 0
push ebx
call 0x1039bb7
jmp 0x1039bbc
pushal
call 0x1039bc2
pop ebx
add ebx, 0x17
push 0xd41000
pop ebx
popal
pop ebx
pop ebx
push 0
push 0
push esi
call fcn.010948f0
add esp, 0xc
push ebx
call 0x1039be2
jmp 0x1039be7
pushal
call 0x1039bed
pop ebx
add ebx, 0x17
push 0xd41000
pop ebx
popal
pop ebx
pop ebx
mov ecx, dword [0x10faff4]
mov edx, dword [0x10faff0]
push esi
push 1
push ecx
push edx
call fcn.01095610
add esp, 0x10
push ebx
call 0x1039c19
jmp 0x1039c1e
pushal
call 0x1039c24
pop ebx
add ebx, 0x17
push 0xd41000
pop ebx
popal
pop ebx
pop ebx
push esi
call fcn.01095640
add esp, 4
push ebx
call 0x1039c40
jmp 0x1039c45
pushal
call 0x1039c4b
pop ebx
add ebx, 0x17
push 0xd41000
pop ebx
popal
pop ebx
pop ebx
push ebx
call 0x1039c5e
jmp 0x1039c63
pushal
call 0x1039c69
pop ebx
add ebx, 0x17
push 0xd41000
pop ebx
popal
pop ebx
pop ebx
mov ecx, dword [esp + 0x108]
pop esi
pop ebx
xor ecx, esp
call fcn.01090090
add esp, 0x104
ret