Function at 0x1000c370
Capabilities:
Set registry value

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x100b5c0f
mov eax, dword fs:[0]
push eax
sub esp, 0x128
mov eax, dword [0x100dcbc0]
xor eax, ebp
mov dword [ebp - 0x10], eax
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov edx, dword [ebp + 8]
xorps xmm0, xmm0
mov eax, dword [ebp + 0x10]
mov ecx, edx
mov edi, dword [ebp + 0xc]
mov dword [ebp - 0x134], eax
mov eax, dword [ebp + 0x14]
mov dword [ebp - 0x120], edi
lea esi, [ecx + 2]
mov dword [ebp - 0x12c], eax
movups xmmword [ebp - 0xd8], xmm0
mov dword [ebp - 0xc8], 0
mov dword [ebp - 0xc4], 0
nop
mov ax, word [ecx]
add ecx, 2
test ax, ax
jne 0x1000c3e0
sub ecx, esi
sar ecx, 1
push ecx
push edx
lea ecx, [ebp - 0xd8]
call fcn.10007490
push edi
lea eax, [ebp - 0xd8]
mov dword [ebp - 4], 0
push eax
lea eax, [ebp - 0x114]
push eax
call fcn.1002ee70
add esp, 0xc
mov ecx, dword [ebp - 0xc4]
mov byte [ebp - 4], 2
cmp ecx, 7
jbe 0x1000c45e
mov edx, dword [ebp - 0xd8]
lea ecx, [ecx*2 + 2]
mov eax, edx
cmp ecx, 0x1000
jb 0x1000c454
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x1000d0c3
push ecx
push edx
call fcn.1008c3c5
add esp, 8
xorps xmm0, xmm0
mov dword [ebp - 0x98], 0
xor eax, eax
mov dword [ebp - 0x94], 7
movups xmmword [ebp - 0xa8], xmm0
mov word [ebp - 0xa8], ax
mov byte [ebp - 4], 3
cmp edi, 1
jne 0x1000c56d
lea eax, [ebp - 0xfc]
push 4
push eax
call fcn.1002f500
mov esi, eax
lea eax, [ebp - 0xc0]
mov byte [ebp - 4], 4
push 0x1aa
push eax
call fcn.1002f500
add esp, 0x10
push esi
push eax
push dword [ebp - 0x12c]
lea ecx, [ebp - 0xd8]
mov byte [ebp - 4], 5
call fcn.1000c1b0
mov ecx, dword [ebp - 0x94]
cmp ecx, 7
jbe 0x1000c511
mov edx, dword [ebp - 0xa8]
lea ecx, [ecx*2 + 2]
mov eax, edx
cmp ecx, 0x1000
jb 0x1000c507
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x1000d0c8
push ecx
push edx
call fcn.1008c3c5
add esp, 8
movups xmm0, xmmword [ebp - 0xd8]
xor eax, eax
lea ecx, [ebp - 0xd8]
mov word [ebp - 0xd8], ax
movups xmmword [ebp - 0xa8], xmm0
movq xmm0, qword [ebp - 0xc8]
movq qword [ebp - 0x98], xmm0
mov dword [ebp - 0xc8], 0
mov dword [ebp - 0xc4], 7
call fcn.100076d0
lea ecx, [ebp - 0xc0]
call fcn.100076d0
lea ecx, [ebp - 0xfc]
jmp 0x1000c64c
cmp edi, 2
jne 0x1000c655
lea eax, [ebp - 0xc0]
push 0x14
push eax
call fcn.1002f500
mov esi, eax
lea eax, [ebp - 0xfc]
mov byte [ebp - 4], 6
push 0x1aa
push eax
call fcn.1002f500
add esp, 0x10
push esi
push eax
push dword [ebp - 0x12c]
lea ecx, [ebp - 0xd8]
mov byte [ebp - 4], 7
call fcn.1000c1b0
mov ecx, dword [ebp - 0x94]
cmp ecx, 7
jbe 0x1000c5f5
mov edx, dword [ebp - 0xa8]
lea ecx, [ecx*2 + 2]
mov eax, edx
cmp ecx, 0x1000
jb 0x1000c5eb
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x1000d0cd
push ecx
push edx
call fcn.1008c3c5
add esp, 8
movups xmm0, xmmword [ebp - 0xd8]
xor eax, eax
lea ecx, [ebp - 0xd8]
mov word [ebp - 0xd8], ax
movups xmmword [ebp - 0xa8], xmm0
movq xmm0, qword [ebp - 0xc8]
movq qword [ebp - 0x98], xmm0
mov dword [ebp - 0xc8], 0
mov dword [ebp - 0xc4], 7
call fcn.100076d0
lea ecx, [ebp - 0xfc]
call fcn.100076d0
lea ecx, [ebp - 0xc0]
mov byte [ebp - 4], 3
call fcn.100076d0
cmp dword [ebp - 0x94], 7
lea ecx, [ebp - 0x11c]
push 0
push ecx
push 0
push 0x20106
push 0
push 0
lea eax, [ebp - 0xa8]
mov dword [ebp - 0x11c], 0
cmova eax, dword [ebp - 0xa8]
push 0
push eax
push reloc.WS2_32.dll_bind
call dword [sym.imp.ADVAPI32.dll_RegCreateKeyExW]
push dword [ebp - 0x11c]
mov edi, dword [sym.imp.ADVAPI32.dll_RegCloseKey]
call edi
mov eax, dword [ebp - 0x120]
cmp eax, 1
jne 0x1000c9e3
mov eax, dword [0x100ba754]
xorps xmm0, xmm0
movups xmmword [ebp - 0xc0], xmm0
mov dword [ebp - 0xc0], eax
mov ax, word [0x100ba758]
mov word [ebp - 0xbc], ax
mov al, byte [0x100ba75a]
mov dword [ebp - 0xb0], 7
mov dword [ebp - 0xac], 0xf
mov byte [ebp - 0xba], al
mov byte [ebp - 0xb9], 0
lea eax, [ebp - 0xd8]
mov byte [ebp - 4], 8
push 0x1e6
push eax
call fcn.1002f210
add esp, 8
lea ecx, [ebp - 0x118]
cmp dword [ebp - 0x94], 7
mov esi, eax
lea eax, [ebp - 0xa8]
cmova eax, dword [ebp - 0xa8]
push ecx
push 0x20106
push 0
push eax
push reloc.WS2_32.dll_bind
call dword [sym.imp.ADVAPI32.dll_RegOpenKeyExW]
test eax, eax
jne 0x1000c785
cmp dword [ebp - 0xac], 0xf
lea eax, [ebp - 0xc0]
cmova eax, dword [ebp - 0xc0]
cmp dword [esi + 0x14], 0xf
jbe 0x1000c762
mov esi, dword [esi]
push dword [ebp - 0xb0]
push eax
push 1
push esi
push 0x100ba720
push dword [ebp - 0x118]
call dword [sym.imp.SHLWAPI.dll_SHSetValueA]
push dword [ebp - 0x118]
call edi
mov ecx, dword [ebp - 0xc4]
cmp ecx, 0xf
jbe 0x1000c7bf
mov edx, dword [ebp - 0xd8]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x1000c7b5
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x1000d0d2
push ecx
push edx
call fcn.1008c3c5
add esp, 8
mov ecx, dword [ebp - 0xac]
mov dword [ebp - 0xc8], 0
mov dword [ebp - 0xc4], 0xf
mov byte [ebp - 0xd8], 0
mov byte [ebp - 4], 3
cmp ecx, 0xf
jbe 0x1000c818
mov edx, dword [ebp - 0xc0]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x1000c80e
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x1000d0d2
push ecx
push edx
call fcn.1008c3c5
add esp, 8
lea eax, [ebp - 0xc0]
push 0x11
push eax
call fcn.1002f210
mov esi, eax
lea eax, [ebp - 0xd8]
mov byte [ebp - 4], 9
push 0x1e7
push eax
call fcn.1002f210
add esp, 0x10
mov dword [ebp - 0x124], eax
cmp dword [ebp - 0x94], 7
lea ecx, [ebp - 0x118]
lea eax, [ebp - 0xa8]
cmova eax, dword [ebp - 0xa8]
push ecx
push 0x20106
push 0
push eax
push reloc.WS2_32.dll_bind
call dword [sym.imp.ADVAPI32.dll_RegOpenKeyExW]
test eax, eax
jne 0x1000c8af
cmp dword [esi + 0x14], 0xf
mov ecx, dword [esi + 0x10]
jbe 0x1000c883
mov esi, dword [esi]
mov eax, dword [ebp - 0x124]
cmp dword [eax + 0x14], 0xf
jbe 0x1000c891
mov eax, dword [eax]
push ecx
push esi
push 1
push eax
push 0x100ba720
push dword [ebp - 0x118]
call dword [sym.imp.SHLWAPI.dll_SHSetValueA]
push dword [ebp - 0x118]
call edi
mov ecx, dword [ebp - 0xc4]
cmp ecx, 0xf
jbe 0x1000c8e9
mov edx, dword [ebp - 0xd8]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x1000c8df
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x1000d0d7
push ecx
push edx
call fcn.1008c3c5
add esp, 8
mov ecx, dword [ebp - 0xac]
mov dword [ebp - 0xc8], 0
mov dword [ebp - 0xc4], 0xf
mov byte [ebp - 0xd8], 0
mov byte [ebp - 4], 3
cmp ecx, 0xf
jbe 0x1000c942
mov edx, dword [ebp - 0xc0]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x1000c938
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x1000d0d7
push ecx
push edx
call fcn.1008c3c5
add esp, 8
lea eax, [ebp - 0xd8]
push 0x1ab
push eax
call fcn.1002f500
mov esi, eax
lea eax, [ebp - 0xfc]
mov byte [ebp - 4], 0xa
push 0x1e8
push eax
call fcn.1002f500
add esp, 0x10
lea ecx, [ebp - 0x118]
cmp dword [ebp - 0x94], 7
mov edi, eax
lea eax, [ebp - 0xa8]
cmova eax, dword [ebp - 0xa8]
push ecx
push 0x20106
push 0
push eax
push reloc.WS2_32.dll_bind
call dword [sym.imp.ADVAPI32.dll_RegOpenKeyExW]
test eax, eax
jne 0x1000c9d8
mov eax, dword [esi + 0x10]
add eax, eax
cmp dword [esi + 0x14], 7
jbe 0x1000c9ae
mov esi, dword [esi]
cmp dword [edi + 0x14], 7
jbe 0x1000c9b6
mov edi, dword [edi]
push eax
mov eax, dword [sym.imp.SHLWAPI.dll_SHSetValueW]
push esi
push 1
push edi
push 0x100ba72c
push dword [ebp - 0x118]
call eax
mov edi, dword [sym.imp.ADVAPI32.dll_RegCloseKey]
jmp 0x1000cc4e
mov edi, dword [sym.imp.ADVAPI32.dll_RegCloseKey]
jmp 0x1000cc56
cmp eax, 2
jne 0x1000cc70
mov eax, dword [str.1.6.0.1]
xorps xmm0, xmm0
movups xmmword [ebp - 0xc0], xmm0
mov dword [ebp - 0xc0], eax
mov ax, word [0x100ba760]
mov word [ebp - 0xbc], ax
mov al, byte [0x100ba762]
mov dword [ebp - 0xb0], 7
mov dword [ebp - 0xac], 0xf
mov byte [ebp - 0xba], al
mov byte [ebp - 0xb9], 0
lea eax, [ebp - 0xfc]
mov byte [ebp - 4], 0xb
push 0x1e6
push eax
call fcn.1002f210
add esp, 8
lea ecx, [ebp - 0x118]
cmp dword [ebp - 0x94], 7
mov esi, eax
lea eax, [ebp - 0xa8]
cmova eax, dword [ebp - 0xa8]
push ecx
push 0x20106
push 0
push eax
push reloc.WS2_32.dll_bind
call dword [sym.imp.ADVAPI32.dll_RegOpenKeyExW]
test eax, eax
jne 0x1000cabf
cmp dword [ebp - 0xac], 0xf
lea eax, [ebp - 0xc0]
cmova eax, dword [ebp - 0xc0]
cmp dword [esi + 0x14], 0xf
jbe 0x1000ca9c
mov esi, dword [esi]
push dword [ebp - 0xb0]
push eax
push 1
push esi
push 0x100ba720
push dword [ebp - 0x118]
call dword [sym.imp.SHLWAPI.dll_SHSetValueA]
push dword [ebp - 0x118]
call edi
lea ecx, [ebp - 0xfc]
call fcn.100013f0
mov ecx, dword [ebp - 0xac]
mov byte [ebp - 4], 3
cmp ecx, 0xf
jbe 0x1000cb08
mov edx, dword [ebp - 0xc0]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x1000cafe
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x1000d0dc
push ecx
push edx
call fcn.1008c3c5
add esp, 8
lea eax, [ebp - 0xd8]
push 0x12
push eax
call fcn.1002f210
mov esi, eax
lea eax, [ebp - 0xfc]
mov byte [ebp - 4], 0xc
push 0x1e7
push eax
call fcn.1002f210
add esp, 0x10
mov dword [ebp - 0x124], eax
cmp dword [ebp - 0x94], 7
lea ecx, [ebp - 0x118]
lea eax, [ebp - 0xa8]
cmova eax, dword [ebp - 0xa8]
push ecx
push 0x20106
push 0
push eax
push reloc.WS2_32.dll_bind
call dword [sym.imp.ADVAPI32.dll_RegOpenKeyExW]
test eax, eax
jne 0x1000cb9f
cmp dword [esi + 0x14], 0xf
mov ecx, dword [esi + 0x10]
jbe 0x1000cb73
mov esi, dword [esi]
mov eax, dword [ebp - 0x124]
cmp dword [eax + 0x14], 0xf
jbe 0x1000cb81
mov eax, dword [eax]
push ecx
push esi
push 1
push eax
push 0x100ba720
push dword [ebp - 0x118]
call dword [sym.imp.SHLWAPI.dll_SHSetValueA]
push dword [ebp - 0x118]
call edi
lea ecx, [ebp - 0xfc]
call fcn.100013f0
lea ecx, [ebp - 0xd8]
mov byte [ebp - 4], 3
call fcn.100013f0
lea eax, [ebp - 0xd8]
push 0x1ac
push eax
call fcn.1002f500
mov esi, eax
lea eax, [ebp - 0xfc]
mov byte [ebp - 4], 0xd
push 0x1e8
push eax
call fcn.1002f500
add esp, 0x10
mov dword [ebp - 0x124], eax
cmp dword [ebp - 0x94], 7
lea ecx, [ebp - 0x118]
lea eax, [ebp - 0xa8]
cmova eax, dword [ebp - 0xa8]
push ecx
push 0x20106
push 0
push eax
push reloc.WS2_32.dll_bind
call dword [sym.imp.ADVAPI32.dll_RegOpenKeyExW]
test eax, eax
jne 0x1000cc56
mov ecx, dword [esi + 0x10]
add ecx, ecx
cmp dword [esi + 0x14], 7
jbe 0x1000cc29
mov esi, dword [esi]
mov eax, dword [ebp - 0x124]
cmp dword [eax + 0x14], 7
jbe 0x1000cc37
mov eax, dword [eax]
push ecx
push esi
push 1
push eax
mov eax, dword [sym.imp.SHLWAPI.dll_SHSetValueW]
push 0x100ba72c
push dword [ebp - 0x118]
call eax
push dword [ebp - 0x118]
call edi
lea ecx, [ebp - 0xfc]
call fcn.100076d0
lea ecx, [ebp - 0xd8]
mov byte [ebp - 4], 3
call fcn.100076d0
lea eax, [ebp - 0xd8]
push 0x1e9
push eax
call fcn.1002f500
add esp, 8
lea ecx, [ebp - 0x118]
cmp dword [ebp - 0x94], 7
mov esi, eax
lea eax, [ebp - 0xa8]
cmova eax, dword [ebp - 0xa8]
push ecx
push 0x20106
push 0
push eax
push reloc.WS2_32.dll_bind
call dword [sym.imp.ADVAPI32.dll_RegOpenKeyExW]
test eax, eax
jne 0x1000ccfb
mov eax, dword [ebp - 0x104]
cmp dword [ebp - 0x100], 7
lea ecx, [eax + eax]
lea eax, [ebp - 0x114]
cmova eax, dword [ebp - 0x114]
cmp dword [esi + 0x14], 7
jbe 0x1000ccdd
mov esi, dword [esi]
push ecx
push eax
push 1
push esi
push 0x100ba72c
push dword [ebp - 0x118]
call dword [sym.imp.SHLWAPI.dll_SHSetValueW]
push dword [ebp - 0x118]
call edi
mov ecx, dword [ebp - 0xc4]
cmp ecx, 7
jbe 0x1000cd3b
mov edx, dword [ebp - 0xd8]
lea ecx, [ecx*2 + 2]
mov eax, edx
cmp ecx, 0x1000
jb 0x1000cd31
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x1000d0e1
push ecx
push edx
call fcn.1008c3c5
add esp, 8
lea eax, [ebp - 0xd8]
push 0x1ea
push eax
call fcn.1002f500
add esp, 8
lea ecx, [ebp - 0x118]
cmp dword [ebp - 0x94], 7
mov esi, eax
lea eax, [ebp - 0xa8]
cmova eax, dword [ebp - 0xa8]
push ecx
push 0x20106
push 0
push eax
push reloc.WS2_32.dll_bind
call dword [sym.imp.ADVAPI32.dll_RegOpenKeyExW]
test eax, eax
jne 0x1000cdc6
mov eax, dword [ebp - 0x104]
cmp dword [ebp - 0x100], 7
lea ecx, [eax + eax]
lea eax, [ebp - 0x114]
cmova eax, dword [ebp - 0x114]
cmp dword [esi + 0x14], 7
jbe 0x1000cda8
mov esi, dword [esi]
push ecx
push eax
push 1
push esi
push 0x100ba72c
push dword [ebp - 0x118]
call dword [sym.imp.SHLWAPI.dll_SHSetValueW]
push dword [ebp - 0x118]
call edi
mov ecx, dword [ebp - 0xc4]
cmp ecx, 7
jbe 0x1000ce06
mov edx, dword [ebp - 0xd8]
lea ecx, [ecx*2 + 2]
mov eax, edx
cmp ecx, 0x1000
jb 0x1000cdfc
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x1000d0e6
push ecx
push edx
call fcn.1008c3c5
add esp, 8
cmp dword [ebp - 0x120], 1
jne 0x1000d00f
mov eax, dword [ebp - 0x134]
xorps xmm0, xmm0
mov dword [ebp - 0x128], eax
mov eax, dword [ebp - 0x12c]
mov dword [ebp - 0x124], eax
lea eax, [ebp - 0x128]
push eax
lea eax, [ebp - 0xe4]
mov dword [ebp - 0xc4], 0
push eax
movups xmmword [ebp - 0xe4], xmm0
movups xmmword [ebp - 0xd4], xmm0
call fcn.10096ea9
lea eax, [ebp - 0xe4]
push eax
push str._Y_m_d
lea eax, [ebp - 0x90]
push 0x40
push eax
call fcn.10096bfb
xorps xmm0, xmm0
mov dword [ebp - 0xb0], 0
lea ecx, [ebp - 0x90]
mov dword [ebp - 0xac], 0
add esp, 0x18
lea edx, [ecx + 2]
movups xmmword [ebp - 0xc0], xmm0
nop dword [eax]
mov ax, word [ecx]
add ecx, 2
test ax, ax
jne 0x1000cea0
sub ecx, edx
lea eax, [ebp - 0x90]
sar ecx, 1
push ecx
push eax
lea ecx, [ebp - 0xc0]
call fcn.10007490
lea eax, [ebp - 0xfc]
mov byte [ebp - 4], 0xe
push 0x1eb
push eax
call fcn.1002f500
add esp, 8
lea ecx, [ebp - 0x120]
cmp dword [ebp - 0x94], 7
mov esi, eax
lea eax, [ebp - 0xa8]
cmova eax, dword [ebp - 0xa8]
push ecx
push 0x20106
push 0
push eax
push reloc.WS2_32.dll_bind
call dword [sym.imp.ADVAPI32.dll_RegOpenKeyExW]
test eax, eax
jne 0x1000cf51
mov eax, dword [ebp - 0xb0]
cmp dword [ebp - 0xac], 7
lea ecx, [eax + eax]
lea eax, [ebp - 0xc0]
cmova eax, dword [ebp - 0xc0]
cmp dword [esi + 0x14], 7
jbe 0x1000cf33
mov esi, dword [esi]
push ecx
push eax
push 1
push esi
push 0x100ba72c
push dword [ebp - 0x120]
call dword [sym.imp.SHLWAPI.dll_SHSetValueW]
push dword [ebp - 0x120]
call edi
lea ecx, [ebp - 0xfc]
call fcn.100076d0
mov eax, dword [ebp - 0x134]
mov ecx, 0x989680
imul ecx
lea ecx, [ebp - 0x11c]
add eax, 0xd53e8000
push ecx
adc edx, 0x19db1de
mov dword [ebp - 0x130], eax
cmp dword [ebp - 0x94], 7
lea eax, [ebp - 0xa8]
push 0x20106
cmova eax, dword [ebp - 0xa8]
push 0
push eax
push reloc.WS2_32.dll_bind
mov dword [ebp - 0x12c], edx
call dword [sym.imp.ADVAPI32.dll_RegOpenKeyExW]
test eax, eax
jne 0x1000cfcf
lea eax, [ebp - 0x130]
push eax
push dword [ebp - 0x11c]
call fcn.1000e270
add esp, 8
push dword [ebp - 0x11c]
call edi
mov ecx, dword [ebp - 0xac]
cmp ecx, 7
jbe 0x1000d00f
mov edx, dword [ebp - 0xc0]
lea ecx, [ecx*2 + 2]
mov eax, edx
cmp ecx, 0x1000
jb 0x1000d005
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x1000d0eb
push ecx
push edx
call fcn.1008c3c5
add esp, 8
mov ecx, dword [ebp - 0x94]
cmp ecx, 7
jbe 0x1000d04f
mov edx, dword [ebp - 0xa8]
lea ecx, [ecx*2 + 2]
mov eax, edx
cmp ecx, 0x1000
jb 0x1000d045
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x1000d0f0
push ecx
push edx
call fcn.1008c3c5
add esp, 8
mov ecx, dword [ebp - 0x100]
xor eax, eax
mov dword [ebp - 0x98], 0
mov dword [ebp - 0x94], 7
mov word [ebp - 0xa8], ax
cmp ecx, 7
jbe 0x1000d0a8
mov edx, dword [ebp - 0x114]
lea ecx, [ecx*2 + 2]
mov eax, edx
cmp ecx, 0x1000
jb 0x1000d09e
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x1000d0f0
push ecx
push edx
call fcn.1008c3c5
add esp, 8
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
mov ecx, dword [ebp - 0x10]
xor ecx, ebp
call fcn.1008c3d3
mov esp, ebp
pop ebp
ret
call fcn.1009189f
call fcn.1009189f
call fcn.1009189f
call fcn.1009189f
call fcn.1009189f
call fcn.1009189f
call fcn.1009189f
call fcn.1009189f
call fcn.1009189f
call fcn.1009189f
int3