Function at 0x10069980
Capabilities:
Allocate or change rwx memory
Execute shellcode via indirect call

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x100a2f1d
mov eax, dword fs:[0]
push eax
sub esp, 0x28
mov eax, dword [0x10104a40]
xor eax, ebp
mov dword [ebp - 0x10], eax
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
push str.A1_____________50_8B_08_FF_51_0C
push str.shaderapidx9.dll
call fcn.10070c70
add esp, 8
mov ecx, 0x101c82f4
mov eax, dword [eax + 1]
push dword [eax]
call fcn.10072120
mov eax, dword [0x101c8304]
mov esi, dword [sym.imp.KERNEL32.dll_VirtualProtect]
mov dword [ebp - 0x2c], 0x2a
cmp eax, 0x2a
jle 0x10069a41
mov eax, dword [0x101c8300]
mov ecx, 0x101c82f4
mov edi, dword [eax + 0xa8]
lea eax, [ebp - 0x2c]
push eax
call fcn.10068a50
mov dword [eax], edi
lea eax, [ebp - 0x30]
mov ecx, dword [ebp - 0x2c]
push eax
mov eax, dword [0x101c8300]
push 0x40
push 4
lea eax, [eax + ecx*4]
push eax
call esi
mov ecx, dword [0x101c8300]
mov eax, dword [ebp - 0x2c]
mov dword [ecx + eax*4], 0x10063df0
lea eax, [ebp - 0x34]
mov ecx, dword [ebp - 0x2c]
push eax
mov eax, dword [0x101c8300]
push dword [ebp - 0x30]
push 4
lea eax, [eax + ecx*4]
push eax
call esi
mov eax, dword [0x101c8304]
jmp 0x10069a43
xor edi, edi
mov dword [0x101c8290], edi
mov dword [ebp - 0x2c], 0x10
cmp eax, 0x10
jle 0x10069aac
mov eax, dword [0x101c8300]
mov ecx, 0x101c82f4
mov edi, dword [eax + 0x40]
lea eax, [ebp - 0x2c]
push eax
call fcn.10068a50
mov dword [eax], edi
lea eax, [ebp - 0x30]
mov ecx, dword [ebp - 0x2c]
push eax
mov eax, dword [0x101c8300]
push 0x40
push 4
lea eax, [eax + ecx*4]
push eax
call esi
mov ecx, dword [0x101c8300]
mov eax, dword [ebp - 0x2c]
mov dword [ecx + eax*4], 0x10066790
lea eax, [ebp - 0x34]
mov ecx, dword [ebp - 0x2c]
push eax
mov eax, dword [0x101c8300]
push dword [ebp - 0x30]
push 4
lea eax, [eax + ecx*4]
push eax
call esi
jmp 0x10069aae
xor edi, edi
push dword [0x101c84ec]
mov ecx, 0x101c83ac
mov dword [0x101c82b4], edi
call fcn.10072120
push dword [0x101c84f4]
mov ecx, 0x101c8384
call fcn.10072120
push dword [0x101c851c]
mov ecx, 0x101c8398
call fcn.10072120
push dword [0x101c8520]
mov ecx, 0x101c8370
call fcn.10072120
push dword [0x101c850c]
mov ecx, 0x101c8330
call fcn.10072120
push dword [0x101c852c]
mov ecx, 0x101c835c
call fcn.10072120
mov ecx, dword [0x101c8514]
push str.net_showfragments
mov eax, dword [ecx]
mov eax, dword [eax + 0x38]
call eax
push eax
mov ecx, 0x101c831c
call fcn.10072120
cmp dword [0x101c836c], 0x18
mov dword [ebp - 0x2c], 0x18
jle 0x10069b9a
mov eax, dword [0x101c8368]
mov ecx, 0x101c835c
mov edi, dword [eax + 0x60]
lea eax, [ebp - 0x2c]
push eax
call fcn.10068a50
mov dword [eax], edi
lea eax, [ebp - 0x30]
mov ecx, dword [0x101c8368]
push eax
mov eax, dword [ebp - 0x2c]
push 0x40
push 4
lea eax, [ecx + eax*4]
push eax
call esi
mov ecx, dword [0x101c8368]
mov eax, dword [ebp - 0x2c]
mov dword [ecx + eax*4], 0x10068b90
lea eax, [ebp - 0x34]
mov ecx, dword [0x101c8368]
push eax
mov eax, dword [ebp - 0x2c]
push dword [ebp - 0x30]
push 4
lea eax, [ecx + eax*4]
push eax
call esi
jmp 0x10069b9c
xor edi, edi
lea eax, [ebp - 0x2c]
mov dword [0x101c82c4], edi
push eax
lea eax, [ebp - 0x28]
mov dword [ebp - 0x2c], 0x3f
xorps xmm0, xmm0
push eax
movups xmmword [ebp - 0x28], xmm0
call fcn.1000a320
movups xmm0, xmmword [str.Successfully_hooked_virtual_function___CreateMove]
mov ecx, dword [ebp - 0x2c]
mov edx, eax
mov dword [ebp - 0x28], edx
mov dword [ebp - 0x18], 0x31
mov dword [ebp - 0x14], ecx
movups xmmword [edx], xmm0
movups xmm0, xmmword [0x100b2980]
movups xmmword [edx + 0x10], xmm0
movups xmm0, xmmword [0x100b2990]
movups xmmword [edx + 0x20], xmm0
mov al, byte [0x100b29a0]
mov byte [edx + 0x30], al
mov byte [edx + 0x31], 0
cmp ecx, 0xf
mov dword [ebp - 4], 0
lea edi, [ebp - 0x28]
xorps xmm0, xmm0
cmova edi, edx
sub esp, 0x10
mov edx, esp
mov ecx, edi
movups xmmword [edx], xmm0
lea eax, [ecx + 1]
mov dword [edx + 0x10], 0
mov dword [edx + 0x14], 0
mov dword [ebp - 0x30], eax
nop dword [eax]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x10069c30
sub ecx, dword [ebp - 0x30]
push ecx
push edi
mov ecx, edx
call fcn.1000d830
call fcn.1006c690
mov ecx, dword [ebp - 0x14]
add esp, 0x18
mov dword [ebp - 4], 0xffffffff
cmp ecx, 0xf
jbe 0x10069c86
mov edx, dword [ebp - 0x28]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x10069c7c
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x1006a7a5
push ecx
push edx
call fcn.100733d0
add esp, 8
cmp dword [0x101c83bc], 0x24
mov dword [ebp - 0x2c], 0x24
jle 0x10069cf2
mov eax, dword [0x101c83b8]
mov ecx, 0x101c83ac
mov edi, dword [eax + 0x90]
lea eax, [ebp - 0x2c]
push eax
call fcn.10068a50
mov dword [eax], edi
lea eax, [ebp - 0x30]
mov ecx, dword [0x101c83b8]
push eax
mov eax, dword [ebp - 0x2c]
push 0x40
push 4
lea eax, [ecx + eax*4]
push eax
call esi
mov ecx, dword [0x101c83b8]
mov eax, dword [ebp - 0x2c]
mov dword [ecx + eax*4], 0x10068f60
lea eax, [ebp - 0x34]
mov ecx, dword [0x101c83b8]
push eax
mov eax, dword [ebp - 0x2c]
push dword [ebp - 0x30]
push 4
lea eax, [ecx + eax*4]
push eax
call esi
jmp 0x10069cf4
xor edi, edi
lea eax, [ebp - 0x2c]
mov dword [0x101c82cc], edi
push eax
lea eax, [ebp - 0x28]
mov dword [ebp - 0x2c], 0x3f
xorps xmm0, xmm0
push eax
movups xmmword [ebp - 0x28], xmm0
call fcn.1000a320
movups xmm0, xmmword [str.Successfully_hooked_virtual_function___FrameStageNotify]
mov edx, eax
mov ecx, dword [ebp - 0x2c]
mov dword [ebp - 0x28], edx
mov dword [ebp - 0x18], 0x37
mov dword [ebp - 0x14], ecx
movups xmmword [edx], xmm0
movups xmm0, xmmword [0x100b29b4]
movups xmmword [edx + 0x10], xmm0
movups xmm0, xmmword [0x100b29c4]
movups xmmword [edx + 0x20], xmm0
mov eax, dword [0x100b29d4]
mov dword [edx + 0x30], eax
mov ax, word [0x100b29d8]
mov word [edx + 0x34], ax
mov al, byte [0x100b29da]
mov byte [edx + 0x36], al
mov byte [edx + 0x37], 0
cmp ecx, 0xf
mov dword [ebp - 4], 1
lea edi, [ebp - 0x28]
xorps xmm0, xmm0
cmova edi, edx
sub esp, 0x10
mov edx, esp
mov ecx, edi
movups xmmword [edx], xmm0
lea eax, [ecx + 1]
mov dword [edx + 0x10], 0
mov dword [edx + 0x14], 0
mov dword [ebp - 0x30], eax
mov al, byte [ecx]
inc ecx
test al, al
jne 0x10069d96
sub ecx, dword [ebp - 0x30]
push ecx
push edi
mov ecx, edx
call fcn.1000d830
call fcn.1006c690
mov ecx, dword [ebp - 0x14]
add esp, 0x18
mov dword [ebp - 4], 0xffffffff
cmp ecx, 0xf
jbe 0x10069dec
mov edx, dword [ebp - 0x28]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x10069de2
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x1006a7a5
push ecx
push edx
call fcn.100733d0
add esp, 8
cmp dword [0x101c83bc], 6
mov dword [ebp - 0x2c], 6
jle 0x10069e55
mov eax, dword [0x101c83b8]
mov ecx, 0x101c83ac
mov edi, dword [eax + 0x18]
lea eax, [ebp - 0x2c]
push eax
call fcn.10068a50
mov dword [eax], edi
lea eax, [ebp - 0x30]
mov ecx, dword [0x101c83b8]
push eax
mov eax, dword [ebp - 0x2c]
push 0x40
push 4
lea eax, [ecx + eax*4]
push eax
call esi
mov ecx, dword [0x101c83b8]
mov eax, dword [ebp - 0x2c]
mov dword [ecx + eax*4], 0x1006aa20
lea eax, [ebp - 0x34]
mov ecx, dword [0x101c83b8]
push eax
mov eax, dword [ebp - 0x2c]
push dword [ebp - 0x30]
push 4
lea eax, [ecx + eax*4]
push eax
call esi
jmp 0x10069e57
xor edi, edi
lea eax, [ebp - 0x2c]
mov dword [0x101c82f0], edi
push eax
lea eax, [ebp - 0x28]
mov dword [ebp - 0x2c], 0x3f
xorps xmm0, xmm0
push eax
movups xmmword [ebp - 0x28], xmm0
call fcn.1000a320
movups xmm0, xmmword [str.Successfully_hooked_virtual_function___LevelInitPostEntity]
mov ecx, dword [ebp - 0x2c]
mov edx, eax
mov dword [ebp - 0x28], edx
mov dword [ebp - 0x18], 0x3a
mov dword [ebp - 0x14], ecx
movups xmmword [edx], xmm0
movups xmm0, xmmword [0x100b29ec]
movups xmmword [edx + 0x10], xmm0
movups xmm0, xmmword [0x100b29fc]
movups xmmword [edx + 0x20], xmm0
movq xmm0, qword [0x100b2a0c]
movq qword [edx + 0x30], xmm0
mov ax, word [0x100b2a14]
mov word [edx + 0x38], ax
mov byte [edx + 0x3a], 0
cmp ecx, 0xf
mov dword [ebp - 4], 2
lea edi, [ebp - 0x28]
xorps xmm0, xmm0
cmova edi, edx
sub esp, 0x10
mov edx, esp
mov ecx, edi
movups xmmword [edx], xmm0
lea eax, [ecx + 1]
mov dword [edx + 0x10], 0
mov dword [edx + 0x14], 0
mov dword [ebp - 0x30], eax
mov al, byte [ecx]
inc ecx
test al, al
jne 0x10069ef6
sub ecx, dword [ebp - 0x30]
push ecx
push edi
mov ecx, edx
call fcn.1000d830
call fcn.1006c690
mov ecx, dword [ebp - 0x14]
add esp, 0x18
mov dword [ebp - 4], 0xffffffff
cmp ecx, 0xf
jbe 0x10069f4c
mov edx, dword [ebp - 0x28]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x10069f42
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x1006a7a5
push ecx
push edx
call fcn.100733d0
add esp, 8
cmp dword [0x101c8394], 0x29
mov dword [ebp - 0x2c], 0x29
jle 0x10069fb8
mov eax, dword [0x101c8390]
mov ecx, 0x101c8384
mov edi, dword [eax + 0xa4]
lea eax, [ebp - 0x2c]
push eax
call fcn.10068a50
mov dword [eax], edi
lea eax, [ebp - 0x30]
mov ecx, dword [0x101c8390]
push eax
mov eax, dword [ebp - 0x2c]
push 0x40
push 4
lea eax, [ecx + eax*4]
push eax
call esi
mov ecx, dword [0x101c8390]
mov eax, dword [ebp - 0x2c]
mov dword [ecx + eax*4], 0x100694a0
lea eax, [ebp - 0x34]
mov ecx, dword [0x101c8390]
push eax
mov eax, dword [ebp - 0x2c]
push dword [ebp - 0x30]
push 4
lea eax, [ecx + eax*4]
push eax
call esi
jmp 0x10069fba
xor edi, edi
lea eax, [ebp - 0x2c]
mov dword [0x101c82c8], edi
push eax
lea eax, [ebp - 0x28]
mov dword [ebp - 0x2c], 0x3f
xorps xmm0, xmm0
push eax
movups xmmword [ebp - 0x28], xmm0
call fcn.1000a320
movups xmm0, xmmword [str.Successfully_hooked_virtual_function___PaintTraverse]
mov ecx, dword [ebp - 0x2c]
mov edx, eax
mov dword [ebp - 0x28], edx
mov dword [ebp - 0x18], 0x34
mov dword [ebp - 0x14], ecx
movups xmmword [edx], xmm0
movups xmm0, xmmword [0x100b2a28]
movups xmmword [edx + 0x10], xmm0
movups xmm0, xmmword [0x100b2a38]
movups xmmword [edx + 0x20], xmm0
mov eax, dword [0x100b2a48]
mov dword [edx + 0x30], eax
mov byte [edx + 0x34], 0
cmp ecx, 0xf
mov dword [ebp - 4], 3
lea edi, [ebp - 0x28]
xorps xmm0, xmm0
cmova edi, edx
sub esp, 0x10
mov edx, esp
mov ecx, edi
movups xmmword [edx], xmm0
lea eax, [ecx + 1]
mov dword [edx + 0x10], 0
mov dword [edx + 0x14], 0
mov dword [ebp - 0x30], eax
nop word [eax + eax]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x1006a050
sub ecx, dword [ebp - 0x30]
push ecx
push edi
mov ecx, edx
call fcn.1000d830
call fcn.1006c690
mov ecx, dword [ebp - 0x14]
add esp, 0x18
mov dword [ebp - 4], 0xffffffff
cmp ecx, 0xf
jbe 0x1006a0a6
mov edx, dword [ebp - 0x28]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x1006a09c
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x1006a7a5
push ecx
push edx
call fcn.100733d0
add esp, 8
cmp dword [0x101c83a8], 0x15
mov dword [ebp - 0x2c], 0x15
jle 0x1006a10f
mov eax, dword [0x101c83a4]
mov ecx, 0x101c8398
mov edi, dword [eax + 0x54]
lea eax, [ebp - 0x2c]
push eax
call fcn.10068a50
mov dword [eax], edi
lea eax, [ebp - 0x30]
mov ecx, dword [0x101c83a4]
push eax
mov eax, dword [ebp - 0x2c]
push 0x40
push 4
lea eax, [ecx + eax*4]
push eax
call esi
mov ecx, dword [0x101c83a4]
mov eax, dword [ebp - 0x2c]
mov dword [ecx + eax*4], 0x10068ed0
lea eax, [ebp - 0x34]
mov ecx, dword [0x101c83a4]
push eax
mov eax, dword [ebp - 0x2c]
push dword [ebp - 0x30]
push 4
lea eax, [ecx + eax*4]
push eax
call esi
jmp 0x1006a111
xor edi, edi
lea eax, [ebp - 0x2c]
mov dword [0x101c82d0], edi
push eax
lea eax, [ebp - 0x28]
mov dword [ebp - 0x2c], 0x3f
xorps xmm0, xmm0
push eax
movups xmmword [ebp - 0x28], xmm0
call fcn.1000a320
movups xmm0, xmmword [str.Successfully_hooked_virtual_function___DrawModelExecute]
mov edx, eax
mov ecx, dword [ebp - 0x2c]
mov dword [ebp - 0x28], edx
mov dword [ebp - 0x18], 0x37
mov dword [ebp - 0x14], ecx
movups xmmword [edx], xmm0
movups xmm0, xmmword [0x100b2a60]
movups xmmword [edx + 0x10], xmm0
movups xmm0, xmmword [0x100b2a70]
movups xmmword [edx + 0x20], xmm0
mov eax, dword [0x100b2a80]
mov dword [edx + 0x30], eax
mov ax, word [0x100b2a84]
mov word [edx + 0x34], ax
mov al, byte [0x100b2a86]
mov byte [edx + 0x36], al
mov byte [edx + 0x37], 0
cmp ecx, 0xf
mov dword [ebp - 4], 4
lea edi, [ebp - 0x28]
xorps xmm0, xmm0
cmova edi, edx
sub esp, 0x10
mov edx, esp
mov ecx, edi
movups xmmword [edx], xmm0
lea eax, [ecx + 1]
mov dword [edx + 0x10], 0
mov dword [edx + 0x14], 0
mov dword [ebp - 0x30], eax
mov al, byte [ecx]
inc ecx
test al, al
jne 0x1006a1b3
sub ecx, dword [ebp - 0x30]
push ecx
push edi
mov ecx, edx
call fcn.1000d830
call fcn.1006c690
mov ecx, dword [ebp - 0x14]
add esp, 0x18
mov dword [ebp - 4], 0xffffffff
cmp ecx, 0xf
jbe 0x1006a209
mov edx, dword [ebp - 0x28]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x1006a1ff
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x1006a7a5
push ecx
push edx
call fcn.100733d0
add esp, 8
cmp dword [0x101c8380], 9
mov dword [ebp - 0x2c], 9
jle 0x1006a272
mov eax, dword [0x101c837c]
mov ecx, 0x101c8370
mov edi, dword [eax + 0x24]
lea eax, [ebp - 0x2c]
push eax
call fcn.10068a50
mov dword [eax], edi
lea eax, [ebp - 0x30]
mov ecx, dword [0x101c837c]
push eax
mov eax, dword [ebp - 0x2c]
push 0x40
push 4
lea eax, [ecx + eax*4]
push eax
call esi
mov ecx, dword [0x101c837c]
mov eax, dword [ebp - 0x2c]
mov dword [ecx + eax*4], 0x100696b0
lea eax, [ebp - 0x34]
mov ecx, dword [0x101c837c]
push eax
mov eax, dword [ebp - 0x2c]
push dword [ebp - 0x30]
push 4
lea eax, [ecx + eax*4]
push eax
call esi
jmp 0x1006a274
xor edi, edi
lea eax, [ebp - 0x2c]
mov dword [0x101c82d4], edi
push eax
lea eax, [ebp - 0x28]
mov dword [ebp - 0x2c], 0x2f
xorps xmm0, xmm0
push eax
movups xmmword [ebp - 0x28], xmm0
call fcn.1000a320
movups xmm0, xmmword [str.Successfully_hooked_virtual_function___SceneEnd]
mov ecx, dword [ebp - 0x2c]
mov edx, eax
mov dword [ebp - 0x28], edx
mov dword [ebp - 0x18], 0x2f
mov dword [ebp - 0x14], ecx
movups xmmword [edx], xmm0
movups xmm0, xmmword [0x100b2a98]
movups xmmword [edx + 0x10], xmm0
movq xmm0, qword [0x100b2aa8]
movq qword [edx + 0x20], xmm0
mov eax, dword [0x100b2ab0]
mov dword [edx + 0x28], eax
mov ax, word [0x100b2ab4]
mov word [edx + 0x2c], ax
mov al, byte [0x100b2ab6]
mov byte [edx + 0x2e], al
mov byte [edx + 0x2f], 0
cmp ecx, 0xf
mov dword [ebp - 4], 5
lea edi, [ebp - 0x28]
xorps xmm0, xmm0
cmova edi, edx
sub esp, 0x10
mov edx, esp
mov ecx, edi
movups xmmword [edx], xmm0
lea eax, [ecx + 1]
mov dword [edx + 0x10], 0
mov dword [edx + 0x14], 0
mov dword [ebp - 0x30], eax
mov al, byte [ecx]
inc ecx
test al, al
jne 0x1006a318
sub ecx, dword [ebp - 0x30]
push ecx
push edi
mov ecx, edx
call fcn.1000d830
call fcn.1006c690
mov ecx, dword [ebp - 0x14]
add esp, 0x18
mov dword [ebp - 4], 0xffffffff
cmp ecx, 0xf
jbe 0x1006a36e
mov edx, dword [ebp - 0x28]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x1006a364
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x1006a7a5
push ecx
push edx
call fcn.100733d0
add esp, 8
cmp dword [0x101c8340], 5
mov dword [ebp - 0x2c], 5
jle 0x1006a3d7
mov eax, dword [0x101c833c]
mov ecx, 0x101c8330
mov edi, dword [eax + 0x14]
lea eax, [ebp - 0x2c]
push eax
call fcn.10068a50
mov dword [eax], edi
lea eax, [ebp - 0x30]
mov ecx, dword [0x101c833c]
push eax
mov eax, dword [ebp - 0x2c]
push 0x40
push 4
lea eax, [ecx + eax*4]
push eax
call esi
mov ecx, dword [0x101c833c]
mov eax, dword [ebp - 0x2c]
mov dword [ecx + eax*4], 0x10069950
lea eax, [ebp - 0x34]
mov ecx, dword [0x101c833c]
push eax
mov eax, dword [ebp - 0x2c]
push dword [ebp - 0x30]
push 4
lea eax, [ecx + eax*4]
push eax
call esi
jmp 0x1006a3d9
xor edi, edi
lea eax, [ebp - 0x2c]
mov dword [0x101c82d8], edi
push eax
lea eax, [ebp - 0x28]
mov dword [ebp - 0x2c], 0x2f
xorps xmm0, xmm0
push eax
movups xmmword [ebp - 0x28], xmm0
call fcn.1000a320
movups xmm0, xmmword [str.Successfully_hooked_virtual_function___TraceRay]
mov ecx, dword [ebp - 0x2c]
mov edx, eax
mov dword [ebp - 0x28], edx
mov dword [ebp - 0x18], 0x2f
mov dword [ebp - 0x14], ecx
movups xmmword [edx], xmm0
movups xmm0, xmmword [0x100b2ac8]
movups xmmword [edx + 0x10], xmm0
movq xmm0, qword [0x100b2ad8]
movq qword [edx + 0x20], xmm0
mov eax, dword [0x100b2ae0]
mov dword [edx + 0x28], eax
mov ax, word [0x100b2ae4]
mov word [edx + 0x2c], ax
mov al, byte [0x100b2ae6]
mov byte [edx + 0x2e], al
mov byte [edx + 0x2f], 0
cmp ecx, 0xf
mov dword [ebp - 4], 6
lea edi, [ebp - 0x28]
xorps xmm0, xmm0
cmova edi, edx
sub esp, 0x10
mov edx, esp
mov ecx, edi
movups xmmword [edx], xmm0
lea eax, [ecx + 1]
mov dword [edx + 0x10], 0
mov dword [edx + 0x14], 0
mov dword [ebp - 0x30], eax
nop dword [eax]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x1006a480
sub ecx, dword [ebp - 0x30]
push ecx
push edi
mov ecx, edx
call fcn.1000d830
call fcn.1006c690
mov ecx, dword [ebp - 0x14]
add esp, 0x18
mov dword [ebp - 4], 0xffffffff
cmp ecx, 0xf
jbe 0x1006a4d6
mov edx, dword [ebp - 0x28]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x1006a4cc
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x1006a7a5
push ecx
push edx
call fcn.100733d0
add esp, 8
cmp dword [0x101c836c], 0x12
mov dword [ebp - 0x2c], 0x12
jle 0x1006a53f
mov eax, dword [0x101c8368]
mov ecx, 0x101c835c
mov edi, dword [eax + 0x48]
lea eax, [ebp - 0x2c]
push eax
call fcn.10068a50
mov dword [eax], edi
lea eax, [ebp - 0x30]
mov ecx, dword [0x101c8368]
push eax
mov eax, dword [ebp - 0x2c]
push 0x40
push 4
lea eax, [ecx + eax*4]
push eax
call esi
mov ecx, dword [0x101c8368]
mov eax, dword [ebp - 0x2c]
mov dword [ecx + eax*4], 0x10069430
lea eax, [ebp - 0x34]
mov ecx, dword [0x101c8368]
push eax
mov eax, dword [ebp - 0x2c]
push dword [ebp - 0x30]
push 4
lea eax, [ecx + eax*4]
push eax
call esi
jmp 0x1006a541
xor edi, edi
lea eax, [ebp - 0x2c]
mov dword [0x101c82e0], edi
push eax
lea eax, [ebp - 0x28]
mov dword [ebp - 0x2c], 0x3f
xorps xmm0, xmm0
push eax
movups xmmword [ebp - 0x28], xmm0
call fcn.1000a320
movups xmm0, xmmword [str.Successfully_hooked_virtual_function___OverrideView]
mov ecx, dword [ebp - 0x2c]
mov edx, eax
mov dword [ebp - 0x28], edx
mov dword [ebp - 0x18], 0x33
mov dword [ebp - 0x14], ecx
movups xmmword [edx], xmm0
movups xmm0, xmmword [0x100b2af8]
movups xmmword [edx + 0x10], xmm0
movups xmm0, xmmword [0x100b2b08]
movups xmmword [edx + 0x20], xmm0
mov ax, word [0x100b2b18]
mov word [edx + 0x30], ax
mov al, byte [0x100b2b1a]
mov byte [edx + 0x32], al
mov byte [edx + 0x33], 0
cmp ecx, 0xf
mov dword [ebp - 4], 7
lea edi, [ebp - 0x28]
xorps xmm0, xmm0
cmova edi, edx
sub esp, 0x10
mov edx, esp
mov ecx, edi
movups xmmword [edx], xmm0
lea eax, [ecx + 1]
mov dword [edx + 0x10], 0
mov dword [edx + 0x14], 0
mov dword [ebp - 0x30], eax
nop dword [eax + eax]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x1006a5e0
sub ecx, dword [ebp - 0x30]
push ecx
push edi
mov ecx, edx
call fcn.1000d830
call fcn.1006c690
mov ecx, dword [ebp - 0x14]
add esp, 0x18
mov dword [ebp - 4], 0xffffffff
cmp ecx, 0xf
jbe 0x1006a636
mov edx, dword [ebp - 0x28]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x1006a62c
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x1006a7a5
push ecx
push edx
call fcn.100733d0
add esp, 8
cmp dword [0x101c832c], 0xd
mov dword [ebp - 0x2c], 0xd
jle 0x1006a69f
mov eax, dword [0x101c8328]
mov ecx, 0x101c831c
mov edi, dword [eax + 0x34]
lea eax, [ebp - 0x2c]
push eax
call fcn.10068a50
mov dword [eax], edi
lea eax, [ebp - 0x30]
mov ecx, dword [0x101c8328]
push eax
mov eax, dword [ebp - 0x2c]
push 0x40
push 4
lea eax, [ecx + eax*4]
push eax
call esi
mov ecx, dword [0x101c8328]
mov eax, dword [ebp - 0x2c]
mov dword [ecx + eax*4], 0x10069010
lea eax, [ebp - 0x34]
mov ecx, dword [0x101c8328]
push eax
mov eax, dword [ebp - 0x2c]
push dword [ebp - 0x30]
push 4
lea eax, [ecx + eax*4]
push eax
call esi
jmp 0x1006a6a1
xor edi, edi
lea eax, [ebp - 0x2c]
mov dword [0x101c82e8], edi
push eax
lea eax, [ebp - 0x28]
mov dword [ebp - 0x2c], 0x3f
xorps xmm0, xmm0
push eax
movups xmmword [ebp - 0x28], xmm0
call fcn.1000a320
movups xmm0, xmmword [str.Successfully_hooked_virtual_function___NetShowFragments]
mov edx, eax
mov ecx, dword [ebp - 0x2c]
mov dword [ebp - 0x28], edx
mov dword [ebp - 0x18], 0x37
mov dword [ebp - 0x14], ecx
movups xmmword [edx], xmm0
movups xmm0, xmmword [0x100b2b2c]
movups xmmword [edx + 0x10], xmm0
movups xmm0, xmmword [0x100b2b3c]
movups xmmword [edx + 0x20], xmm0
mov eax, dword [0x100b2b4c]
mov dword [edx + 0x30], eax
mov ax, word [0x100b2b50]
mov word [edx + 0x34], ax
mov al, byte [0x100b2b52]
mov byte [edx + 0x36], al
mov byte [edx + 0x37], 0
cmp ecx, 0xf
mov dword [ebp - 4], 8
lea esi, [ebp - 0x28]
xorps xmm0, xmm0
cmova esi, edx
sub esp, 0x10
mov edx, esp
mov ecx, esi
movups xmmword [edx], xmm0
mov dword [edx + 0x10], 0
lea edi, [ecx + 1]
mov dword [edx + 0x14], 0
mov al, byte [ecx]
inc ecx
test al, al
jne 0x1006a740
sub ecx, edi
push ecx
push esi
mov ecx, edx
call fcn.1000d830
call fcn.1006c690
mov ecx, dword [ebp - 0x14]
add esp, 0x18
cmp ecx, 0xf
jbe 0x1006a78a
mov edx, dword [ebp - 0x28]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x1006a780
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x1006a7a5
push ecx
push edx
call fcn.100733d0
add esp, 8
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
mov ecx, dword [ebp - 0x10]
xor ecx, ebp
call fcn.100734be
mov esp, ebp
pop ebp
ret
call fcn.10078f4f
int3