Function at 0x1007ce00
Capabilities:
Access peb ldr_data
Check os version
Resolve function by parsing pe exports

Disassembly:
push ebp
mov ebp, esp
push ebx
push edi
push esi
and esp, 0xfffffff0
sub esp, 0xe0
mov esi, esp
mov dword [esi + 0xc8], ebp
mov dword [esi + 0xcc], esp
mov dword [esi + 0xd8], 0xffffffff
lea eax, [esi + 0xd0]
mov dword [esi + 0xd4], 0x1007ff10
mov edx, dword fs:[0]
mov dword [esi + 0xd0], edx
mov dword fs:[0], eax
xorps xmm0, xmm0
movaps xmmword [esi + 0x60], xmm0
lea eax, [ecx + 0x30]
mov dword [esi + 0xc], eax
lea eax, [ecx + 0x5c]
mov dword [esi + 0xac], eax
mov dword [esi + 0xa8], 0
lea ebx, [esi + 0x40]
mov dword [esi + 8], ecx
jmp 0x1007ce82
neg dl
mov ecx, edx
shl ebx, cl
shr ebx, cl
or dword [edi], ebx
mov ecx, dword [esi + 8]
lea ebx, [esi + 0x40]
test byte [esi + 0xa8], 1
jne 0x1007d213
mov eax, dword [ecx + 0x28]
add eax, 0xffffffff
cmp eax, 0xd
ja case.0x1007ce9e.9
jmp dword [eax*4 + 0x1007dfc0]
mov dword [esi + 0xd8], 0
mov ecx, dword [ebp + 8]
push 0xffffffffffffffff
call fcn.10036540
test al, al
je 0x1007d5a8
mov ecx, dword [esi + 0xc]
call fcn.1007b720
mov ecx, dword [esi + 8]
mov dword [ecx + 0x28], eax
cmp eax, 0xa
je 0x1007d354
mov eax, dword [esi + 0x6c]
mov ecx, eax
shr ecx, 5
lea edx, [ecx + 0x38000000]
test eax, eax
cmovns edx, ecx
shl edx, 2
add edx, dword [esi + 0x60]
and eax, 0x1f
lea ecx, [esi + 0x60]
push 1
push eax
push edx
call fcn.100358f0
mov ecx, eax
shr ecx, 5
lea edi, [ecx + 0x38000000]
test eax, eax
cmovns edi, ecx
shl edi, 2
add edi, dword [esi + 0x60]
and eax, 0x1f
lea edx, [eax + 1]
mov dword [esi + 0xb0], edx
and edx, 0x1f
cmp eax, 0x1f
mov ecx, dword [esi + 8]
lea ebx, [esi + 0x40]
je 0x1007cf38
cmp eax, edx
je 0x1007ce82
mov ebx, 0xffffffff
mov ecx, eax
shl ebx, cl
cmp eax, 0x1f
jne 0x1007ce72
or dword [edi], ebx
add edi, 4
mov eax, dword [esi + 0xb0]
shr eax, 5
lea eax, [eax*4 - 4]
push eax
push 0xff
push edi
call sub.VCRUNTIME140.dll_memset
add esp, 0xc
jmp 0x1007ce7c
mov dword [esi + 0xd8], 0
mov ecx, dword [ebp + 8]
push 0xffffffffffffffff
call fcn.10035d30
test al, al
je 0x1007d5a8
mov ecx, dword [esi + 0xc]
call fcn.1007b720
mov ecx, dword [esi + 8]
mov dword [ecx + 0x28], eax
cmp eax, 0xb
jne 0x1007d040
mov ecx, dword [ebp + 8]
call fcn.10035f60
test al, al
je 0x1007d5a8
mov eax, dword [esi + 0x6c]
test eax, eax
je 0x1007d5ac
mov ecx, eax
and ecx, 0x1f
lea edx, [ecx - 1]
shr edx, 5
lea edi, [edx + 0x38000000]
sub ecx, 1
cmovae edi, edx
mov edx, eax
shr edx, 5
test eax, eax
lea eax, [edx + 0x38000000]
cmovns eax, edx
add eax, edi
mov edx, dword [esi + 0x60]
mov eax, dword [edx + eax*4]
bt eax, ecx
mov dword [esi + 0xd8], 0
jae 0x1007d0fc
mov ecx, dword [esi + 0xc]
call fcn.1007b720
mov ecx, dword [esi + 8]
mov dword [ecx + 0x28], eax
cmp eax, 0xd
jne 0x1007d160
mov ecx, dword [esi + 0xc]
call fcn.1007b720
jmp 0x1007d205
cmp eax, 4
jne 0x1007d607
mov ecx, dword [ebp + 8]
push dword [esi + 0xac]
call fcn.100362f0
test al, al
je 0x1007d5a8
mov ecx, dword [esi + 0xc]
call fcn.1007b720
mov ecx, dword [esi + 8]
mov dword [ecx + 0x28], eax
cmp eax, 0xc
jne 0x1007d6a8
mov eax, dword [esi + 0x6c]
mov ecx, eax
shr ecx, 5
lea edx, [ecx + 0x38000000]
test eax, eax
cmovns edx, ecx
shl edx, 2
add edx, dword [esi + 0x60]
and eax, 0x1f
lea ecx, [esi + 0x60]
push 1
push eax
push edx
call fcn.100358f0
mov ecx, eax
shr ecx, 5
lea edi, [ecx + 0x38000000]
test eax, eax
cmovns edi, ecx
shl edi, 2
add edi, dword [esi + 0x60]
and eax, 0x1f
lea ecx, [eax + 1]
mov edx, ecx
and edx, 0x1f
cmp eax, 0x1f
je 0x1007d0cc
cmp eax, edx
je 0x1007d1fd
mov dword [esi + 0xb0], ecx
mov ebx, 0xffffffff
mov ecx, eax
shl ebx, cl
not ebx
cmp eax, 0x1f
je 0x1007d1dc
neg dl
mov eax, 0xffffffff
mov ecx, edx
shr eax, cl
not eax
or eax, ebx
and dword [edi], eax
jmp 0x1007d1fd
mov ecx, dword [esi + 0xc]
call fcn.1007b720
mov ecx, dword [esi + 8]
mov dword [ecx + 0x28], eax
cmp eax, 0xd
jne 0x1007d173
mov ecx, dword [esi + 0xc]
call fcn.1007b720
mov ecx, dword [esi + 8]
mov dword [ecx + 0x28], eax
cmp eax, 4
jne 0x1007d88b
mov ecx, dword [ebp + 8]
push dword [esi + 0xac]
call fcn.100362f0
test al, al
je 0x1007d5a8
mov ecx, dword [esi + 0xc]
call fcn.1007b720
mov ecx, dword [esi + 8]
mov dword [ecx + 0x28], eax
cmp eax, 0xc
jne 0x1007d92c
mov ecx, dword [esi + 0xc]
call fcn.1007b720
jmp 0x1007d205
cmp eax, 0xa
jne 0x1007d749
mov ecx, dword [ebp + 8]
call fcn.10036770
jmp 0x1007d184
cmp eax, 0xb
jne 0x1007d7ea
mov ecx, dword [ebp + 8]
call fcn.10035f60
test al, al
je 0x1007d5a8
mov eax, dword [esi + 0x6c]
mov edx, eax
and edx, 0x1f
lea ecx, [edx - 1]
shr ecx, 5
lea edi, [ecx + 0x38000000]
sub edx, 1
cmovae edi, ecx
mov ecx, eax
shr ecx, 5
test eax, eax
lea eax, [ecx + 0x38000000]
cmovns eax, ecx
add eax, edi
shl eax, 2
add eax, dword [esi + 0x60]
and edx, 0x1f
lea ecx, [esi + 0x60]
push edx
push eax
lea eax, [esi + 0x70]
push eax
call fcn.10038f10
mov al, 1
mov dword [esi + 0xa8], eax
jmp 0x1007ce7c
and dword [edi], ebx
add edi, 4
mov eax, dword [esi + 0xb0]
shr eax, 5
lea eax, [eax*4 - 4]
push eax
push 0
push edi
call sub.VCRUNTIME140.dll_memset
add esp, 0xc
mov ecx, dword [esi + 0xc]
call fcn.1007b720
mov ecx, dword [esi + 8]
mov dword [ecx + 0x28], eax
lea ebx, [esi + 0x40]
jmp 0x1007ce82
mov dword [esi + 0xa8], 0
jmp 0x1007cfc3
movsd xmm0, qword [ecx + 0x78]
movsd qword [esi + 0x70], xmm0
mov dword [esi + 0xd8], 0
mov ecx, dword [ebp + 8]
push 0
lea eax, [esi + 0x70]
push eax
push ebx
call fcn.10038660
jmp 0x1007cfc3
movsd xmm0, qword [ecx + 0x88]
movsd qword [esi + 0xb0], xmm0
movsd qword [esi + 0x70], xmm0
lea edi, [esi + 0x70]
push edi
call dword [sym.imp.api_ms_win_crt_math_l1_1_0.dll__dtest]
add esp, 4
mov dword [esi + 0xd8], 0
test ax, ax
jg 0x1007d9ef
movsd xmm0, qword [esi + 0xb0]
movsd qword [esi + 0x70], xmm0
mov ecx, dword [ebp + 8]
push 0
push edi
push ebx
call fcn.10037dd0
jmp 0x1007cfc3
movsd xmm0, qword [ecx + 0x80]
movsd qword [esi + 0x70], xmm0
mov dword [esi + 0xd8], 0
mov ecx, dword [ebp + 8]
push 0
lea eax, [esi + 0x70]
push eax
push ebx
call fcn.10038c30
jmp 0x1007cfc3
mov byte [esi + 0x40], 0
mov dword [esi + 0xd8], 0
mov ecx, dword [ebp + 8]
push 0
push ebx
lea eax, [esi + 0x70]
push eax
call fcn.100380b0
jmp 0x1007cfc3
mov byte [esi + 0x40], 1
mov dword [esi + 0xd8], 0
mov ecx, dword [ebp + 8]
push 0
push ebx
lea eax, [esi + 0x70]
push eax
call fcn.100380b0
jmp 0x1007cfc3
mov dword [esi + 0xd8], 0
mov ecx, dword [ebp + 8]
push 0
push dword [esi + 0xac]
lea eax, [esi + 0x70]
push eax
call fcn.10038940
jmp 0x1007cfc3
mov dword [esi + 0x40], 0
mov dword [esi + 0xd8], 0
mov ecx, dword [ebp + 8]
push 0
push ebx
lea eax, [esi + 0x70]
push eax
call fcn.10038390
jmp 0x1007cfc3
mov ecx, dword [ebp + 8]
call fcn.10036770
jmp 0x1007cfbb
mov dword [esi + 0x24], 0xf
mov dword [esi + 0x20], 5
mov dword [esi + 0x10], 0x756c6176
mov word [esi + 0x14], 0x65
mov dword [esi + 0xd8], 0x15
lea eax, [esi + 0x10]
lea edx, [esi + 0x28]
push eax
push 0
push edx
call fcn.100788c0
mov ecx, dword [esi + 8]
mov eax, dword [ecx + 0x4c]
mov dword [esi + 0xc0], eax
movsd xmm0, qword [ecx + 0x44]
movsd qword [esi + 0xb8], xmm0
mov dword [esi + 0xd8], 0x16
lea eax, [esi + 0xb8]
lea ecx, [esi + 0x28]
push ecx
push eax
push 0x65
lea eax, [esi + 0x40]
push eax
call fcn.10032f00
add esp, 0x10
mov dword [esi + 0xd8], 0x17
lea eax, [esi + 0x90]
mov ecx, dword [esi + 0xc]
push eax
call fcn.10034370
mov eax, dword [ebp + 8]
mov byte [eax + 0x34], 1
cmp byte [eax + 0x60], 0
je 0x1007d4bb
lea edi, [esi + 0x70]
mov ecx, edi
lea eax, [esi + 0x40]
push eax
call fcn.100390f0
mov dword [esi + 0xd8], 0x18
push 0x103b351c
push edi
call sub.VCRUNTIME140.dll__CxxThrowException
add esp, 8
mov dword [esi + 0x24], 0xf
mov dword [esi + 0x20], 5
mov dword [esi + 0x10], 0x756c6176
mov word [esi + 0x14], 0x65
mov dword [esi + 0xd8], 0x11
lea eax, [esi + 0x10]
lea edx, [esi + 0x28]
push eax
push 0x10
push edx
call fcn.100788c0
mov ecx, dword [esi + 8]
mov eax, dword [ecx + 0x4c]
mov dword [esi + 0xc0], eax
movsd xmm0, qword [ecx + 0x44]
movsd qword [esi + 0xb8], xmm0
mov dword [esi + 0xd8], 0x12
lea eax, [esi + 0xb8]
lea ecx, [esi + 0x28]
push ecx
push eax
push 0x65
lea eax, [esi + 0x40]
push eax
call fcn.10032f00
add esp, 0x10
mov dword [esi + 0xd8], 0x13
lea eax, [esi + 0x90]
mov ecx, dword [esi + 0xc]
push eax
call fcn.10034370
mov eax, dword [ebp + 8]
mov byte [eax + 0x34], 1
cmp byte [eax + 0x60], 0
jne 0x1007dacd
mov eax, dword [esi + 0xa4]
cmp eax, 0x10
jb 0x1007d4f9
mov ecx, dword [esi + 0x90]
lea edi, [eax + 1]
cmp edi, 0x1000
jb 0x1007d4ef
mov edx, dword [ecx - 4]
add ecx, 0xfffffffc
sub ecx, edx
cmp ecx, 0x20
jae 0x1007dac7
add eax, 0x24
mov edi, eax
mov ecx, edx
push edi
push ecx
call fcn.102e53ef
add esp, 8
mov dword [esi + 0x40], 0x103568cc
mov dword [esi + 0x50], vtable.std::exception.0
lea eax, [esi + 0x54]
push eax
call sub.VCRUNTIME140.dll___std_exception_destroy
add esp, 4
mov dword [esi + 0x40], vtable.std::exception.0
lea eax, [esi + 0x44]
push eax
call sub.VCRUNTIME140.dll___std_exception_destroy
add esp, 4
mov eax, dword [esi + 0x3c]
cmp eax, 0x10
jb 0x1007d55e
mov ecx, dword [esi + 0x28]
lea edi, [eax + 1]
cmp edi, 0x1000
jb 0x1007d554
mov edx, dword [ecx - 4]
add ecx, 0xfffffffc
sub ecx, edx
cmp ecx, 0x20
jae 0x1007dac7
add eax, 0x24
mov edi, eax
mov ecx, edx
push edi
push ecx
call fcn.102e53ef
add esp, 8
mov dword [esi + 0x38], 0
mov dword [esi + 0x3c], 0xf
mov byte [esi + 0x28], 0
mov eax, dword [esi + 0x24]
cmp eax, 0x10
jb 0x1007d5a8
mov ecx, dword [esi + 0x10]
lea edi, [eax + 1]
cmp edi, 0x1000
jb 0x1007d59e
mov edx, dword [ecx - 4]
add ecx, 0xfffffffc
sub ecx, edx
cmp ecx, 0x20
jae 0x1007dac7
add eax, 0x24
mov edi, eax
mov ecx, edx
push edi
push ecx
call fcn.102e53ef
add esp, 8
xor ebx, ebx
jmp 0x1007d5ae
mov bl, 1
mov ecx, dword [esi + 0x60]
test ecx, ecx
je 0x1007d5ef
mov eax, dword [esi + 0x68]
sub eax, ecx
cmp eax, 0x1000
jb 0x1007d5d7
mov edx, dword [ecx - 4]
add ecx, 0xfffffffc
sub ecx, edx
cmp ecx, 0x20
jae 0x1007dac7
add eax, 0x23
mov ecx, edx
push eax
push ecx
call fcn.102e53ef
add esp, 8
mov dword [esi + 0x60], 0
mov dword [esi + 0x64], 0
mov eax, dword [esi + 0xd0]
mov dword fs:[0], eax
mov eax, ebx
lea esp, [ebp - 0xc]
pop esi
pop edi
pop ebx
pop ebp
ret 4
lea ecx, [esi + 0x28]
push str.object_key
call fcn.10024560
mov dword [esi + 0xd8], 0x22
mov ecx, dword [esi + 8]
lea eax, [esi + 0x28]
push eax
push 4
lea eax, [esi + 0x40]
push eax
call fcn.100788c0
mov ecx, dword [esi + 8]
mov eax, dword [ecx + 0x4c]
mov dword [esi + 0x98], eax
movsd xmm0, qword [ecx + 0x44]
movsd qword [esi + 0x90], xmm0
mov dword [esi + 0xd8], 0x23
lea eax, [esi + 0x90]
lea ecx, [esi + 0x40]
push ecx
push eax
push 0x65
lea eax, [esi + 0x70]
push eax
call fcn.10032f00
add esp, 0x10
mov dword [esi + 0xd8], 0x24
lea eax, [esi + 0x10]
mov ecx, dword [esi + 0xc]
push eax
call fcn.10034370
mov eax, dword [esi + 8]
mov eax, dword [eax + 0x44]
mov dword [esi + 0xd8], 0x25
mov ecx, dword [ebp + 8]
lea edx, [esi + 0x70]
push edx
lea edx, [esi + 0x10]
push edx
push eax
call fcn.10032ed0
jmp 0x1007d9c8
lea ecx, [esi + 0x28]
push str.object_separator
call fcn.10024560
mov dword [esi + 0xd8], 0x1e
mov ecx, dword [esi + 8]
lea eax, [esi + 0x28]
push eax
push 0xc
lea eax, [esi + 0x40]
push eax
call fcn.100788c0
mov ecx, dword [esi + 8]
mov eax, dword [ecx + 0x4c]
mov dword [esi + 0x98], eax
movsd xmm0, qword [ecx + 0x44]
movsd qword [esi + 0x90], xmm0
mov dword [esi + 0xd8], 0x1f
lea eax, [esi + 0x90]
lea ecx, [esi + 0x40]
push ecx
push eax
push 0x65
lea eax, [esi + 0x70]
push eax
call fcn.10032f00
add esp, 0x10
mov dword [esi + 0xd8], 0x20
lea eax, [esi + 0x10]
mov ecx, dword [esi + 0xc]
push eax
call fcn.10034370
mov eax, dword [esi + 8]
mov eax, dword [eax + 0x44]
mov dword [esi + 0xd8], 0x21
mov ecx, dword [ebp + 8]
lea edx, [esi + 0x70]
push edx
lea edx, [esi + 0x10]
push edx
push eax
call fcn.10032ed0
jmp 0x1007d9c8
lea ecx, [esi + 0x28]
push str.array
call fcn.10024560
mov dword [esi + 0xd8], 0xd
mov ecx, dword [esi + 8]
lea eax, [esi + 0x28]
push eax
push 0xa
lea eax, [esi + 0x40]
push eax
call fcn.100788c0
mov ecx, dword [esi + 8]
mov eax, dword [ecx + 0x4c]
mov dword [esi + 0x98], eax
movsd xmm0, qword [ecx + 0x44]
movsd qword [esi + 0x90], xmm0
mov dword [esi + 0xd8], 0xe
lea eax, [esi + 0x90]
lea ecx, [esi + 0x40]
push ecx
push eax
push 0x65
lea eax, [esi + 0x70]
push eax
call fcn.10032f00
add esp, 0x10
mov dword [esi + 0xd8], 0xf
lea eax, [esi + 0x10]
mov ecx, dword [esi + 0xc]
push eax
call fcn.10034370
mov eax, dword [esi + 8]
mov eax, dword [eax + 0x44]
mov dword [esi + 0xd8], 0x10
mov ecx, dword [ebp + 8]
lea edx, [esi + 0x70]
push edx
lea edx, [esi + 0x10]
push edx
push eax
call fcn.10032ed0
jmp 0x1007d9c8
lea ecx, [esi + 0x28]
push str.object
call fcn.10024560
mov dword [esi + 0xd8], 1
mov ecx, dword [esi + 8]
lea eax, [esi + 0x28]
push eax
push 0xb
lea eax, [esi + 0x40]
push eax
call fcn.100788c0
mov ecx, dword [esi + 8]
mov eax, dword [ecx + 0x4c]
mov dword [esi + 0x98], eax
movsd xmm0, qword [ecx + 0x44]
movsd qword [esi + 0x90], xmm0
mov dword [esi + 0xd8], 2
lea eax, [esi + 0x90]
lea ecx, [esi + 0x40]
push ecx
push eax
push 0x65
lea eax, [esi + 0x70]
push eax
call fcn.10032f00
add esp, 0x10
mov dword [esi + 0xd8], 3
lea eax, [esi + 0x10]
mov ecx, dword [esi + 0xc]
push eax
call fcn.10034370
mov eax, dword [esi + 8]
mov eax, dword [eax + 0x44]
mov dword [esi + 0xd8], 4
mov ecx, dword [ebp + 8]
lea edx, [esi + 0x70]
push edx
lea edx, [esi + 0x10]
push edx
push eax
call fcn.10032ed0
jmp 0x1007d9c8
lea ecx, [esi + 0x28]
push str.object_key
call fcn.10024560
mov dword [esi + 0xd8], 9
mov ecx, dword [esi + 8]
lea eax, [esi + 0x28]
push eax
push 4
lea eax, [esi + 0x40]
push eax
call fcn.100788c0
mov ecx, dword [esi + 8]
mov eax, dword [ecx + 0x4c]
mov dword [esi + 0x98], eax
movsd xmm0, qword [ecx + 0x44]
movsd qword [esi + 0x90], xmm0
mov dword [esi + 0xd8], 0xa
lea eax, [esi + 0x90]
lea ecx, [esi + 0x40]
push ecx
push eax
push 0x65
lea eax, [esi + 0x70]
push eax
call fcn.10032f00
add esp, 0x10
mov dword [esi + 0xd8], 0xb
lea eax, [esi + 0x10]
mov ecx, dword [esi + 0xc]
push eax
call fcn.10034370
mov eax, dword [esi + 8]
mov eax, dword [eax + 0x44]
mov dword [esi + 0xd8], 0xc
mov ecx, dword [ebp + 8]
lea edx, [esi + 0x70]
push edx
lea edx, [esi + 0x10]
push edx
push eax
call fcn.10032ed0
jmp 0x1007d9c8
lea ecx, [esi + 0x28]
push str.object_separator
call fcn.10024560
mov dword [esi + 0xd8], 5
mov ecx, dword [esi + 8]
lea eax, [esi + 0x28]
push eax
push 0xc
lea eax, [esi + 0x40]
push eax
call fcn.100788c0
mov ecx, dword [esi + 8]
mov eax, dword [ecx + 0x4c]
mov dword [esi + 0x98], eax
movsd xmm0, qword [ecx + 0x44]
movsd qword [esi + 0x90], xmm0
mov dword [esi + 0xd8], 6
lea eax, [esi + 0x90]
lea ecx, [esi + 0x40]
push ecx
push eax
push 0x65
lea eax, [esi + 0x70]
push eax
call fcn.10032f00
add esp, 0x10
mov dword [esi + 0xd8], 7
lea eax, [esi + 0x10]
mov ecx, dword [esi + 0xc]
push eax
call fcn.10034370
mov eax, dword [esi + 8]
mov eax, dword [eax + 0x44]
mov dword [esi + 0xd8], 8
mov ecx, dword [ebp + 8]
lea edx, [esi + 0x70]
push edx
lea edx, [esi + 0x10]
push edx
push eax
call fcn.10032ed0
mov ebx, eax
lea ecx, [esi + 0x10]
call fcn.10023b10
lea ecx, [esi + 0x70]
call fcn.10037640
lea ecx, [esi + 0x40]
call fcn.10023b10
lea ecx, [esi + 0x28]
call fcn.10023b10
jmp 0x1007d5ae
lea eax, [esi + 0x10]
mov ecx, dword [esi + 0xc]
push eax
call fcn.10034370
mov dword [esi + 0xd8], 0x19
lea eax, [esi + 0x28]
lea ecx, [esi + 0x10]
push ecx
push str.number_overflow_parsing_
push eax
call fcn.10029c40
add esp, 0xc
mov dword [esi + 0xd8], 0x1a
push 0x103ac6b6
lea eax, [esi + 0x28]
push eax
lea eax, [esi + 0x40]
push eax
call fcn.10028f70
add esp, 0xc
mov dword [esi + 0xd8], 0x1b
lea eax, [esi + 0x40]
push eax
push 0x196
lea eax, [esi + 0x70]
push eax
call fcn.10036940
add esp, 0xc
mov dword [esi + 0xd8], 0x1c
lea eax, [esi + 0x90]
mov ecx, dword [esi + 0xc]
push eax
call fcn.10034370
mov eax, dword [esi + 8]
mov eax, dword [eax + 0x44]
mov dword [esi + 0xd8], 0x1d
mov ecx, dword [ebp + 8]
lea edx, [esi + 0x70]
push edx
lea edx, [esi + 0x90]
push edx
push eax
call fcn.10036910
mov ebx, eax
lea ecx, [esi + 0x90]
call fcn.10023b10
lea ecx, [esi + 0x70]
call fcn.10037640
lea ecx, [esi + 0x40]
call fcn.10023b10
lea ecx, [esi + 0x28]
call fcn.10023b10
lea ecx, [esi + 0x10]
call fcn.10023b10
jmp 0x1007d5ae
call dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
lea edi, [esi + 0x70]
mov ecx, edi
lea eax, [esi + 0x40]
push eax
call fcn.100390f0
mov dword [esi + 0xd8], 0x14
push 0x103b351c
push edi
call sub.VCRUNTIME140.dll__CxxThrowException
add esp, 8
nop word cs:[eax + eax]
nop dword [eax]
push ebp
sub esp, 0x10
lea esi, [ebp - 0xdc]
mov ebp, dword [esi + 0xc8]
lea ecx, [esi + 0x10]
call fcn.10023b10
add esp, 0x10
pop ebp
ret