Function at 0x1000e080
Capabilities:
Allocate or change rwx memory
Execute shellcode via indirect call
Query or enumerate registry value
Terminate process

Disassembly:
push ebx
mov ebx, esp
sub esp, 8
and esp, 0xfffffff8
add esp, 4
push ebp
mov ebp, dword [ebx + 4]
mov dword [esp + 4], ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x100dcb20
mov eax, dword fs:[0]
push eax
push ebx
sub esp, 0x1b0
mov eax, dword [0x1010a080]
xor eax, ebp
mov dword [ebp - 0x14], eax
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
xorps xmm0, xmm0
mov dword [ebp - 0x1c], 0
lea edx, [ebp - 0x19c]
movlpd qword [ebp - 0x40], xmm0
movlpd qword [ebp - 0x2c], xmm0
movlpd qword [ebp - 0x24], xmm0
movups xmmword [ebp - 0x190], xmm0
mov dword [ebp - 0x19c], 0x2f
call fcn.10004720
movups xmm0, xmmword [str.55_56_8B_E9_57_8D_BD_32_01_00_00_8D]
mov ecx, dword [ebp - 0x19c]
mov edx, eax
mov dword [ebp - 0x190], edx
mov dword [ebp - 0x180], 0x23
mov dword [ebp - 0x17c], ecx
movups xmmword [edx], xmm0
movups xmm0, xmmword [0x1010246c]
movups xmmword [edx + 0x10], xmm0
mov ax, word [0x1010247c]
mov word [edx + 0x20], ax
mov al, byte [0x1010247e]
mov byte [edx + 0x22], al
mov byte [edx + 0x23], 0
mov dword [ebp - 4], 0
xorps xmm0, xmm0
mov eax, dword [str.samp.dll]
mov ecx, dword [0x10102484]
movlpd qword [ebp - 0x170], xmm0
mov dword [ebp - 0x168], 8
mov dword [ebp - 0x164], 0xf
mov dword [ebp - 0x178], eax
mov dword [ebp - 0x174], ecx
mov byte [ebp - 0x170], 0
push 0
lea edx, [ebp - 0x190]
mov byte [ebp - 4], 1
lea ecx, [ebp - 0x178]
call fcn.1001cb80
mov ecx, dword [ebp - 0x164]
add esp, 4
mov dword [ebp - 0x40], eax
cmp ecx, 0xf
jbe 0x1000e1ba
mov edx, dword [ebp - 0x178]
push ecx
call fcn.10002510
add esp, 4
mov dword [ebp - 4], 0xffffffff
mov eax, dword [ebp - 0x17c]
mov dword [ebp - 0x168], 0
mov dword [ebp - 0x164], 0xf
mov byte [ebp - 0x178], 0
cmp eax, 0xf
jbe 0x1000e1f6
mov edx, dword [ebp - 0x190]
push eax
call fcn.10002510
add esp, 4
xorps xmm0, xmm0
mov dword [ebp - 0x19c], 0x2f
lea edx, [ebp - 0x19c]
movups xmmword [ebp - 0x190], xmm0
call fcn.10004720
movups xmm0, xmmword [str.56_8B_F1_8B_86_1E_01_00_00_85_C0_0F]
mov ecx, dword [ebp - 0x19c]
mov edx, eax
mov dword [ebp - 0x190], edx
mov dword [ebp - 0x180], 0x23
mov dword [ebp - 0x17c], ecx
movups xmmword [edx], xmm0
movups xmm0, xmmword [0x1010249c]
movups xmmword [edx + 0x10], xmm0
mov ax, word [0x101024ac]
mov word [edx + 0x20], ax
mov al, byte [0x101024ae]
mov byte [edx + 0x22], al
mov byte [edx + 0x23], 0
mov dword [ebp - 4], 2
xorps xmm0, xmm0
mov eax, dword [str.samp.dll]
mov ecx, dword [0x10102484]
movlpd qword [ebp - 0x170], xmm0
mov dword [ebp - 0x168], 8
mov dword [ebp - 0x164], 0xf
mov dword [ebp - 0x178], eax
mov dword [ebp - 0x174], ecx
mov byte [ebp - 0x170], 0
push 0
lea edx, [ebp - 0x190]
mov byte [ebp - 4], 3
lea ecx, [ebp - 0x178]
call fcn.1001cb80
mov byte [ebp - 4], 2
add esp, 4
mov ecx, dword [ebp - 0x164]
mov dword [ebp - 0x3c], eax
cmp ecx, 0xf
jbe 0x1000e2f9
mov edx, dword [ebp - 0x178]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x1000e2ef
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x1000e347
push ecx
push edx
call fcn.100dad65
add esp, 8
mov dword [ebp - 4], 0xffffffff
mov ecx, dword [ebp - 0x17c]
mov dword [ebp - 0x168], 0
mov dword [ebp - 0x164], 0xf
mov byte [ebp - 0x178], 0
cmp ecx, 0xf
jbe 0x1000e357
mov edx, dword [ebp - 0x190]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x1000e34d
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
jbe 0x1000e34d
call dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
push ecx
push edx
call fcn.100dad65
add esp, 8
xorps xmm0, xmm0
mov dword [ebp - 0x19c], 0x2f
lea edx, [ebp - 0x19c]
movups xmmword [ebp - 0x190], xmm0
call fcn.10004720
movups xmm0, xmmword [str.50_FF_51_08_C7_86_B6_63_00_00_00_00_00_00_5E_C3]
mov edi, dword [ebp - 0x19c]
mov esi, eax
mov dword [ebp - 0x190], esi
mov dword [ebp - 0x180], 0x2f
mov dword [ebp - 0x17c], edi
movups xmmword [esi], xmm0
movups xmm0, xmmword [0x101024c0]
movups xmmword [esi + 0x10], xmm0
movq xmm0, qword [0x101024d0]
movq qword [esi + 0x20], xmm0
mov eax, dword [0x101024d8]
mov dword [esi + 0x28], eax
mov ax, word [0x101024dc]
mov word [esi + 0x2c], ax
mov al, byte [0x101024de]
mov byte [esi + 0x2e], al
mov byte [esi + 0x2f], 0
mov dword [ebp - 4], 4
xorps xmm0, xmm0
mov ecx, dword [str.samp.dll]
mov edx, 0xf
mov eax, dword [0x10102484]
movlpd qword [ebp - 0x170], xmm0
mov dword [ebp - 0x168], 8
mov dword [ebp - 0x164], edx
mov dword [ebp - 0x178], ecx
mov dword [ebp - 0x174], eax
mov byte [ebp - 0x170], 0
lea eax, [ebp - 0x178]
mov byte [ebp - 4], 5
push eax
call dword [sym.imp.KERNEL32.dll_GetModuleHandleA]
test eax, eax
je 0x1000e493
push 0x1c
lea ecx, [ebp - 0x1b8]
mov dword [ebp - 0x1a0], 0
xorps xmm0, xmm0
push ecx
push eax
movups xmmword [ebp - 0x1b8], xmm0
movq qword [ebp - 0x1a8], xmm0
call dword [sym.imp.KERNEL32.dll_VirtualQuery]
test eax, eax
je 0x1000e493
mov ecx, dword [ebp - 0x1b4]
mov edx, dword [ecx + 0x3c]
cmp dword [edx + ecx], 0x4550
je 0x1000e474
xor eax, eax
jmp 0x1000e493
mov edx, dword [edx + ecx + 0x50]
lea eax, [ebp - 0x190]
push eax
call fcn.1001c5d0
mov edi, dword [ebp - 0x17c]
add esp, 4
mov esi, dword [ebp - 0x190]
mov byte [ebp - 4], 4
mov ecx, dword [ebp - 0x164]
mov dword [ebp - 0x19c], eax
mov dword [ebp - 0x38], eax
cmp ecx, 0xf
jbe 0x1000e4d6
mov edx, dword [ebp - 0x178]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x1000e4cc
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x1000e51a
push ecx
push edx
call fcn.100dad65
add esp, 8
mov dword [ebp - 0x168], 0
mov dword [ebp - 0x164], 0xf
mov byte [ebp - 0x178], 0
mov dword [ebp - 4], 0xffffffff
cmp edi, 0xf
jbe 0x1000e52a
lea ecx, [edi + 1]
mov eax, esi
cmp ecx, 0x1000
jb 0x1000e520
mov esi, dword [eax - 4]
add ecx, 0x23
sub eax, esi
add eax, 0xfffffffc
cmp eax, 0x1f
jbe 0x1000e520
call dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
push ecx
push esi
call fcn.100dad65
add esp, 8
xorps xmm0, xmm0
mov dword [ebp - 0x194], 0x2f
lea edx, [ebp - 0x194]
movups xmmword [ebp - 0x190], xmm0
call fcn.10004720
movups xmm0, xmmword [str.83_EC_20_53_55_56_8B_F1_8B_86_BE_63_00_00_85_C0]
mov edi, dword [ebp - 0x194]
mov esi, eax
mov dword [ebp - 0x190], esi
mov dword [ebp - 0x180], 0x2f
mov dword [ebp - 0x17c], edi
movups xmmword [esi], xmm0
movups xmm0, xmmword [0x101024f0]
movups xmmword [esi + 0x10], xmm0
movq xmm0, qword [0x10102500]
movq qword [esi + 0x20], xmm0
mov eax, dword [0x10102508]
mov dword [esi + 0x28], eax
mov ax, word [0x1010250c]
mov word [esi + 0x2c], ax
mov al, byte [0x1010250e]
mov byte [esi + 0x2e], al
mov byte [esi + 0x2f], 0
mov dword [ebp - 4], 6
xorps xmm0, xmm0
mov ecx, dword [str.samp.dll]
mov edx, 0xf
mov eax, dword [0x10102484]
movlpd qword [ebp - 0x170], xmm0
mov dword [ebp - 0x168], 8
mov dword [ebp - 0x164], edx
mov dword [ebp - 0x178], ecx
mov dword [ebp - 0x174], eax
mov byte [ebp - 0x170], 0
lea eax, [ebp - 0x178]
mov byte [ebp - 4], 7
push eax
call dword [sym.imp.KERNEL32.dll_GetModuleHandleA]
test eax, eax
je 0x1000e666
push 0x1c
lea ecx, [ebp - 0x1b8]
mov dword [ebp - 0x1a0], 0
xorps xmm0, xmm0
push ecx
push eax
movups xmmword [ebp - 0x1b8], xmm0
movq qword [ebp - 0x1a8], xmm0
call dword [sym.imp.KERNEL32.dll_VirtualQuery]
test eax, eax
je 0x1000e666
mov ecx, dword [ebp - 0x1b4]
mov edx, dword [ecx + 0x3c]
cmp dword [edx + ecx], 0x4550
je 0x1000e647
xor eax, eax
jmp 0x1000e666
mov edx, dword [edx + ecx + 0x50]
lea eax, [ebp - 0x190]
push eax
call fcn.1001c5d0
mov edi, dword [ebp - 0x17c]
add esp, 4
mov esi, dword [ebp - 0x190]
mov byte [ebp - 4], 6
mov ecx, dword [ebp - 0x164]
mov dword [ebp - 0x198], eax
mov dword [ebp - 0x34], eax
cmp ecx, 0xf
jbe 0x1000e6a9
mov edx, dword [ebp - 0x178]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x1000e69f
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x1000e6ed
push ecx
push edx
call fcn.100dad65
add esp, 8
mov dword [ebp - 0x168], 0
mov dword [ebp - 0x164], 0xf
mov byte [ebp - 0x178], 0
mov dword [ebp - 4], 0xffffffff
cmp edi, 0xf
jbe 0x1000e6fd
lea ecx, [edi + 1]
mov eax, esi
cmp ecx, 0x1000
jb 0x1000e6f3
mov esi, dword [eax - 4]
add ecx, 0x23
sub eax, esi
add eax, 0xfffffffc
cmp eax, 0x1f
jbe 0x1000e6f3
call dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
push ecx
push esi
call fcn.100dad65
add esp, 8
xorps xmm0, xmm0
mov dword [ebp - 0x194], 0x2f
lea edx, [ebp - 0x194]
movups xmmword [ebp - 0x190], xmm0
call fcn.10004720
movups xmm0, xmmword [str.83_EC_10_56_8B_F1_8B_86_E0_14_00_00_85_C0]
mov esi, eax
mov dword [ebp - 0x180], 0x29
mov eax, dword [ebp - 0x194]
mov dword [ebp - 0x194], eax
mov dword [ebp - 0x17c], eax
movups xmmword [esi], xmm0
mov dword [ebp - 0x190], esi
movups xmm0, xmmword [0x10102520]
movups xmmword [esi + 0x10], xmm0
movq xmm0, qword [0x10102530]
movq qword [esi + 0x20], xmm0
mov al, byte [0x10102538]
mov byte [esi + 0x28], al
mov byte [esi + 0x29], 0
mov dword [ebp - 4], 8
xorps xmm0, xmm0
mov ecx, dword [str.samp.dll]
mov edx, 0xf
mov eax, dword [0x10102484]
movlpd qword [ebp - 0x170], xmm0
mov dword [ebp - 0x168], 8
mov dword [ebp - 0x164], edx
mov dword [ebp - 0x178], ecx
mov dword [ebp - 0x174], eax
mov byte [ebp - 0x170], 0
lea eax, [ebp - 0x178]
mov byte [ebp - 4], 9
push eax
call dword [sym.imp.KERNEL32.dll_GetModuleHandleA]
test eax, eax
jne 0x1000e7cc
xor edi, edi
jmp 0x1000e83d
push 0x1c
lea ecx, [ebp - 0x1b8]
mov dword [ebp - 0x1a0], 0
xorps xmm0, xmm0
push ecx
push eax
movups xmmword [ebp - 0x1b8], xmm0
movq qword [ebp - 0x1a8], xmm0
call dword [sym.imp.KERNEL32.dll_VirtualQuery]
test eax, eax
jne 0x1000e800
xor edi, edi
jmp 0x1000e83d
mov ecx, dword [ebp - 0x1b4]
mov edx, dword [ecx + 0x3c]
cmp dword [edx + ecx], 0x4550
je 0x1000e816
xor edi, edi
jmp 0x1000e83d
mov edx, dword [edx + ecx + 0x50]
lea eax, [ebp - 0x190]
push eax
call fcn.1001c5d0
mov esi, dword [ebp - 0x190]
mov edi, eax
mov eax, dword [ebp - 0x17c]
add esp, 4
mov dword [ebp - 0x194], eax
mov byte [ebp - 4], 8
mov ecx, dword [ebp - 0x164]
mov dword [ebp - 0x30], edi
cmp ecx, 0xf
jbe 0x1000e87a
mov edx, dword [ebp - 0x178]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x1000e870
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x1000e8c4
push ecx
push edx
call fcn.100dad65
add esp, 8
mov dword [ebp - 4], 0xffffffff
mov eax, dword [ebp - 0x194]
mov dword [ebp - 0x168], 0
mov dword [ebp - 0x164], 0xf
mov byte [ebp - 0x178], 0
cmp eax, 0xf
jbe 0x1000e8d4
lea ecx, [eax + 1]
mov eax, esi
cmp ecx, 0x1000
jb 0x1000e8ca
mov esi, dword [eax - 4]
add ecx, 0x23
sub eax, esi
add eax, 0xfffffffc
cmp eax, 0x1f
jbe 0x1000e8ca
call dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
push ecx
push esi
call fcn.100dad65
add esp, 8
xorps xmm0, xmm0
mov dword [ebp - 0x194], 0x2f
lea edx, [ebp - 0x194]
movups xmmword [ebp - 0x190], xmm0
call fcn.10004720
movups xmm0, xmmword [str.56_8B_F1_8B_86_E0_14_00_00_85_C0_74]
mov ecx, dword [ebp - 0x194]
mov edx, eax
mov dword [ebp - 0x190], edx
mov dword [ebp - 0x180], 0x23
mov dword [ebp - 0x17c], ecx
movups xmmword [edx], xmm0
movups xmm0, xmmword [0x1010254c]
movups xmmword [edx + 0x10], xmm0
mov ax, word [0x1010255c]
mov word [edx + 0x20], ax
mov al, byte [0x1010255e]
mov byte [edx + 0x22], al
mov byte [edx + 0x23], 0
mov dword [ebp - 4], 0xa
xorps xmm0, xmm0
mov eax, dword [str.samp.dll]
mov ecx, dword [0x10102484]
movlpd qword [ebp - 0x170], xmm0
mov dword [ebp - 0x168], 8
mov dword [ebp - 0x164], 0xf
mov dword [ebp - 0x178], eax
mov dword [ebp - 0x174], ecx
mov byte [ebp - 0x170], 0
push 0
lea edx, [ebp - 0x190]
mov byte [ebp - 4], 0xb
lea ecx, [ebp - 0x178]
call fcn.1001cb80
mov dword [ebp - 0x2c], eax
add esp, 4
mov eax, dword [ebp - 0x164]
cmp eax, 0xf
jbe 0x1000e9b7
mov edx, dword [ebp - 0x178]
push eax
call fcn.10002510
add esp, 4
mov dword [ebp - 4], 0xffffffff
mov eax, dword [ebp - 0x17c]
mov dword [ebp - 0x168], 0
mov dword [ebp - 0x164], 0xf
mov byte [ebp - 0x178], 0
cmp eax, 0xf
jbe 0x1000e9f3
mov edx, dword [ebp - 0x190]
push eax
call fcn.10002510
add esp, 4
xorps xmm0, xmm0
mov dword [ebp - 0x194], 0x2f
lea edx, [ebp - 0x194]
movups xmmword [ebp - 0x190], xmm0
call fcn.10004720
movups xmm0, xmmword [str.8B_0D_____________8B_81_E0_14_00_00_85_C0_0F_85]
mov ecx, dword [ebp - 0x194]
mov edx, eax
mov dword [ebp - 0x190], edx
mov dword [ebp - 0x180], 0x2f
mov dword [ebp - 0x17c], ecx
movups xmmword [edx], xmm0
movups xmm0, xmmword [0x10102570]
movups xmmword [edx + 0x10], xmm0
movq xmm0, qword [0x10102580]
movq qword [edx + 0x20], xmm0
mov eax, dword [0x10102588]
mov dword [edx + 0x28], eax
mov ax, word [0x1010258c]
mov word [edx + 0x2c], ax
mov al, byte [0x1010258e]
mov byte [edx + 0x2e], al
mov byte [edx + 0x2f], 0
mov dword [ebp - 4], 0xc
xorps xmm0, xmm0
mov eax, dword [str.samp.dll]
mov ecx, dword [0x10102484]
movlpd qword [ebp - 0x170], xmm0
mov dword [ebp - 0x168], 8
mov dword [ebp - 0x164], 0xf
mov dword [ebp - 0x178], eax
mov dword [ebp - 0x174], ecx
mov byte [ebp - 0x170], 0
push 0
lea edx, [ebp - 0x190]
mov byte [ebp - 4], 0xd
lea ecx, [ebp - 0x178]
call fcn.1001cb80
mov ecx, dword [ebp - 0x164]
add esp, 4
mov dword [ebp - 0x28], eax
cmp ecx, 0xf
jbe 0x1000eaeb
mov edx, dword [ebp - 0x178]
push ecx
call fcn.10002510
add esp, 4
mov dword [ebp - 4], 0xffffffff
mov eax, dword [ebp - 0x17c]
mov dword [ebp - 0x168], 0
mov dword [ebp - 0x164], 0xf
mov byte [ebp - 0x178], 0
cmp eax, 0xf
jbe 0x1000eb27
mov edx, dword [ebp - 0x190]
push eax
call fcn.10002510
add esp, 4
xorps xmm0, xmm0
mov dword [ebp - 0x194], 0x1f
lea edx, [ebp - 0x194]
movups xmmword [ebp - 0x190], xmm0
call fcn.10004720
movups xmm0, xmmword [str.56_8B_F1_8B_4E_08_85_C9_0F_84]
mov ecx, dword [ebp - 0x194]
mov edx, eax
mov dword [ebp - 0x190], edx
mov dword [ebp - 0x180], 0x1d
mov dword [ebp - 0x17c], ecx
movups xmmword [edx], xmm0
movq xmm0, qword [0x101025a0]
movq qword [edx + 0x10], xmm0
mov eax, dword [0x101025a8]
mov dword [edx + 0x18], eax
mov al, byte [0x101025ac]
mov byte [edx + 0x1c], al
mov byte [edx + 0x1d], 0
mov dword [ebp - 4], 0xe
xorps xmm0, xmm0
mov eax, dword [str.samp.dll]
mov ecx, dword [0x10102484]
movlpd qword [ebp - 0x170], xmm0
mov dword [ebp - 0x168], 8
mov dword [ebp - 0x164], 0xf
mov dword [ebp - 0x178], eax
mov dword [ebp - 0x174], ecx
mov byte [ebp - 0x170], 0
push 0
lea edx, [ebp - 0x190]
mov byte [ebp - 4], 0xf
lea ecx, [ebp - 0x178]
call fcn.1001cb80
mov ecx, dword [ebp - 0x164]
add esp, 4
mov dword [ebp - 0x24], eax
cmp ecx, 0xf
jbe 0x1000ec0a
mov edx, dword [ebp - 0x178]
push ecx
call fcn.10002510
add esp, 4
mov dword [ebp - 4], 0xffffffff
mov eax, dword [ebp - 0x17c]
mov dword [ebp - 0x168], 0
mov dword [ebp - 0x164], 0xf
mov byte [ebp - 0x178], 0
cmp eax, 0xf
jbe 0x1000ec46
mov edx, dword [ebp - 0x190]
push eax
call fcn.10002510
add esp, 4
xor eax, eax
nop dword [eax + eax]
cmp dword [ebp + eax*4 - 0x40], 0
je 0x1000fb8d
inc eax
cmp eax, 8
jb 0x1000ec50
mov esi, dword [sym.imp.KERNEL32.dll_VirtualProtect]
lea eax, [ebp - 0x194]
push eax
push 0x40
push 5
push dword [ebp - 0x40]
call esi
test eax, eax
je 0x1000ec8e
mov ecx, dword [ebp - 0x40]
mov eax, 0x1000d130
sub eax, ecx
sub eax, 5
mov byte [ecx], 0xe9
mov dword [ecx + 1], eax
lea eax, [ebp - 0x194]
push eax
push 0x40
push 5
push dword [ebp - 0x3c]
call esi
test eax, eax
je 0x1000ecb5
mov ecx, dword [ebp - 0x3c]
mov eax, 0x1000c550
sub eax, ecx
sub eax, 5
mov byte [ecx], 0xe9
mov dword [ecx + 1], eax
mov eax, dword [ebp - 0x19c]
lea ecx, [ebp - 0x194]
push ecx
push 0x40
add eax, 0xf
push 5
push eax
call esi
test eax, eax
je 0x1000ece9
mov ecx, dword [ebp - 0x19c]
mov eax, 0x1000b350
add ecx, 0xf
sub eax, ecx
sub eax, 5
mov byte [ecx], 0xe9
mov dword [ecx + 1], eax
lea eax, [ebp - 0x194]
push eax
push 0x40
push 5
push dword [ebp - 0x198]
call esi
test eax, eax
je 0x1000ed0d
mov ecx, dword [ebp - 0x198]
mov al, byte [0x101025d8]
mov byte [ecx], al
lea eax, [ebp - 0x194]
push eax
push 0x40
push 5
push edi
call esi
test eax, eax
je 0x1000ed2f
mov eax, 0x1000cb40
mov byte [edi], 0xe9
sub eax, edi
sub eax, 5
mov dword [edi + 1], eax
mov edi, dword [ebp - 0x2c]
lea eax, [ebp - 0x194]
push eax
push 0x40
push 5
push edi
call esi
test eax, eax
je 0x1000ed54
mov eax, 0x1000cb60
mov byte [edi], 0xe9
sub eax, edi
sub eax, 5
mov dword [edi + 1], eax
mov edi, dword [ebp - 0x28]
lea eax, [ebp - 0x194]
push eax
push 0x40
push 5
push edi
call esi
test eax, eax
je 0x1000ed70
mov al, byte [0x101025d8]
mov byte [edi], al
mov edi, dword [ebp - 0x24]
lea eax, [ebp - 0x194]
push eax
push 0x40
push 5
add edi, 0xfffffffa
push edi
call esi
test eax, eax
je 0x1000ed98
mov eax, 0x100113f0
mov byte [edi], 0xe9
sub eax, edi
sub eax, 5
mov dword [edi + 1], eax
xorps xmm0, xmm0
mov dword [ebp - 0x194], 0x1f
lea edx, [ebp - 0x194]
movups xmmword [ebp - 0x190], xmm0
call fcn.10004720
movups xmm0, xmmword [str.83____FB_81____01_01_00_00]
mov edi, eax
mov dword [ebp - 0x180], 0x1a
mov eax, dword [ebp - 0x194]
mov dword [ebp - 0x194], eax
mov dword [ebp - 0x17c], eax
movups xmmword [edi], xmm0
mov dword [ebp - 0x190], edi
movq xmm0, qword [0x101025ec]
movq qword [edi + 0x10], xmm0
movzx eax, word [0x101025f4]
mov word [edi + 0x18], ax
mov byte [edi + 0x1a], 0
mov dword [ebp - 4], 0x10
xor eax, eax
movq xmm0, qword [str.vorbisFile.dll]
mov ecx, 0xf
mov word [ebp - 0x16a], ax
mov eax, dword [0x10102600]
mov dword [ebp - 0x170], eax
movzx eax, word [0x10102604]
mov dword [ebp - 0x168], 0xe
mov dword [ebp - 0x164], ecx
movq qword [ebp - 0x178], xmm0
mov word [ebp - 0x16c], ax
mov byte [ebp - 0x16a], 0
lea eax, [ebp - 0x178]
mov byte [ebp - 4], 0x11
push eax
call dword [sym.imp.KERNEL32.dll_GetModuleHandleA]
test eax, eax
jne 0x1000ee76
mov dword [ebp - 0x198], eax
jmp 0x1000eef7
push 0x1c
lea ecx, [ebp - 0x1b8]
mov dword [ebp - 0x1a0], 0
xorps xmm0, xmm0
push ecx
push eax
movups xmmword [ebp - 0x1b8], xmm0
movq qword [ebp - 0x1a8], xmm0
call dword [sym.imp.KERNEL32.dll_VirtualQuery]
test eax, eax
jne 0x1000eeae
mov dword [ebp - 0x198], eax
jmp 0x1000eef7
mov ecx, dword [ebp - 0x1b4]
mov edx, dword [ecx + 0x3c]
cmp dword [edx + ecx], 0x4550
je 0x1000eecc
mov dword [ebp - 0x198], 0
jmp 0x1000eef7
mov edx, dword [edx + ecx + 0x50]
lea eax, [ebp - 0x190]
push eax
call fcn.1001c5d0
mov edi, dword [ebp - 0x190]
add esp, 4
mov dword [ebp - 0x198], eax
mov eax, dword [ebp - 0x17c]
mov dword [ebp - 0x194], eax
mov byte [ebp - 4], 0x10
mov ecx, dword [ebp - 0x164]
cmp ecx, 0xf
jbe 0x1000ef31
mov edx, dword [ebp - 0x178]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x1000ef27
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x1000ef7b
push ecx
push edx
call fcn.100dad65
add esp, 8
mov dword [ebp - 4], 0xffffffff
mov eax, dword [ebp - 0x194]
mov dword [ebp - 0x168], 0
mov dword [ebp - 0x164], 0xf
mov byte [ebp - 0x178], 0
cmp eax, 0xf
jbe 0x1000ef8b
lea ecx, [eax + 1]
mov eax, edi
cmp ecx, 0x1000
jb 0x1000ef81
mov edi, dword [eax - 4]
add ecx, 0x23
sub eax, edi
add eax, 0xfffffffc
cmp eax, 0x1f
jbe 0x1000ef81
call dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
push ecx
push edi
call fcn.100dad65
add esp, 8
mov eax, dword [ebp - 0x198]
test eax, eax
je 0x1000efb1
lea edi, [eax + 2]
lea eax, [ebp - 0x194]
push eax
push 0x40
push 5
push edi
call esi
test eax, eax
je 0x1000efb1
mov al, byte [0x10102608]
mov byte [edi], al
xorps xmm0, xmm0
mov dword [ebp - 0x194], 0x3f
lea edx, [ebp - 0x194]
movups xmmword [ebp - 0x190], xmm0
call fcn.10004720
movups xmm0, xmmword [str.8B_0D_____________83_C4_0C_8B_49_08_E8_____________85_C0]
mov ecx, dword [ebp - 0x194]
mov dword [ebp - 0x198], eax
movups xmmword [eax], xmm0
mov dword [ebp - 0x190], eax
movups xmm0, xmmword [0x1010261c]
mov dword [ebp - 0x180], 0x38
mov dword [ebp - 0x194], ecx
movups xmmword [eax + 0x10], xmm0
mov dword [ebp - 0x17c], ecx
movups xmm0, xmmword [0x1010262c]
movups xmmword [eax + 0x20], xmm0
movq xmm0, qword [0x1010263c]
movq qword [eax + 0x30], xmm0
mov byte [eax + 0x38], 0
mov dword [ebp - 4], 0x12
xorps xmm0, xmm0
mov eax, dword [0x10102650]
mov ecx, 0xf
movups xmmword [ebp - 0x178], xmm0
mov dword [ebp - 0x170], eax
movq xmm0, qword [str.SAMPFUNCS.asi]
mov al, byte [0x10102654]
mov dword [ebp - 0x168], 0xd
mov dword [ebp - 0x164], ecx
movq qword [ebp - 0x178], xmm0
mov byte [ebp - 0x16c], al
mov byte [ebp - 0x16b], 0
lea eax, [ebp - 0x178]
mov byte [ebp - 4], 0x13
push eax
call dword [sym.imp.KERNEL32.dll_GetModuleHandleA]
test eax, eax
jne 0x1000f095
xor edi, edi
jmp 0x1000f10c
push 0x1c
lea ecx, [ebp - 0x1b8]
mov dword [ebp - 0x1a0], 0
xorps xmm0, xmm0
push ecx
push eax
movups xmmword [ebp - 0x1b8], xmm0
movq qword [ebp - 0x1a8], xmm0
call dword [sym.imp.KERNEL32.dll_VirtualQuery]
test eax, eax
jne 0x1000f0c9
xor edi, edi
jmp 0x1000f10c
mov ecx, dword [ebp - 0x1b4]
mov edx, dword [ecx + 0x3c]
cmp dword [edx + ecx], 0x4550
je 0x1000f0df
xor edi, edi
jmp 0x1000f10c
mov edx, dword [edx + ecx + 0x50]
lea eax, [ebp - 0x190]
push eax
call fcn.1001c5d0
mov edi, eax
add esp, 4
mov eax, dword [ebp - 0x17c]
mov dword [ebp - 0x194], eax
mov eax, dword [ebp - 0x190]
mov dword [ebp - 0x198], eax
mov byte [ebp - 4], 0x12
mov ecx, dword [ebp - 0x164]
cmp ecx, 0xf
jbe 0x1000f14a
mov edx, dword [ebp - 0x178]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x1000f140
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x1000e347
push ecx
push edx
call fcn.100dad65
add esp, 8
mov dword [ebp - 4], 0xffffffff
mov eax, dword [ebp - 0x194]
mov dword [ebp - 0x168], 0
mov dword [ebp - 0x164], 0xf
mov byte [ebp - 0x178], 0
cmp eax, 0xf
jbe 0x1000f1b4
lea ecx, [eax + 1]
mov eax, dword [ebp - 0x198]
mov edx, eax
cmp ecx, 0x1000
jb 0x1000f1aa
mov eax, dword [edx - 4]
add ecx, 0x23
sub edx, eax
mov dword [ebp - 0x198], eax
lea eax, [edx - 4]
cmp eax, 0x1f
ja 0x1000e347
mov eax, dword [ebp - 0x198]
push ecx
push eax
call fcn.100dad65
add esp, 8
test edi, edi
je 0x1000f229
lea eax, [ebp - 0x194]
push eax
push 0x40
push 5
push edi
call esi
test eax, eax
je 0x1000f1db
mov ax, word [0x10102458]
mov word [edi], ax
mov al, byte [0x1010245a]
mov byte [edi + 2], al
lea ecx, [ebp - 0x194]
push ecx
push 0x40
lea eax, [edi + 3]
push 5
push eax
call esi
test eax, eax
je 0x1000f203
lea ecx, [edi + 3]
mov eax, 0x1000ddd0
sub eax, ecx
mov byte [ecx], 0xe8
sub eax, 5
mov dword [ecx + 1], eax
lea eax, [ebp - 0x194]
add edi, 8
push eax
push 0x40
push 9
push edi
call esi
test eax, eax
je 0x1000f229
mov dword [edi], 0x90909090
mov dword [edi + 4], 0x90909090
mov byte [edi + 8], 0x90
xorps xmm0, xmm0
mov dword [ebp - 0x194], 0x3f
lea edx, [ebp - 0x194]
movups xmmword [ebp - 0x190], xmm0
call fcn.10004720
movups xmm0, xmmword [str.8B_0D_____________83_C4_0C_8B_49_08_E8_____________85_C0]
mov ecx, dword [ebp - 0x194]
mov dword [ebp - 0x198], eax
movups xmmword [eax], xmm0
mov dword [ebp - 0x190], eax
movups xmm0, xmmword [0x1010261c]
mov dword [ebp - 0x180], 0x38
mov dword [ebp - 0x194], ecx
movups xmmword [eax + 0x10], xmm0
mov dword [ebp - 0x17c], ecx
movups xmm0, xmmword [0x1010262c]
movups xmmword [eax + 0x20], xmm0
movq xmm0, qword [0x1010263c]
movq qword [eax + 0x30], xmm0
mov byte [eax + 0x38], 0
mov dword [ebp - 4], 0x14
xorps xmm0, xmm0
mov eax, dword [0x10102650]
mov ecx, 0xf
movups xmmword [ebp - 0x178], xmm0
mov dword [ebp - 0x170], eax
movq xmm0, qword [str.SAMPFUNCS.asi]
mov al, byte [0x10102654]
mov dword [ebp - 0x168], 0xd
mov dword [ebp - 0x164], ecx
movq qword [ebp - 0x178], xmm0
mov byte [ebp - 0x16c], al
mov byte [ebp - 0x16b], 0
lea eax, [ebp - 0x178]
mov byte [ebp - 4], 0x15
push eax
call dword [sym.imp.KERNEL32.dll_GetModuleHandleA]
test eax, eax
jne 0x1000f30d
xor edi, edi
jmp 0x1000f384
push 0x1c
lea ecx, [ebp - 0x1b8]
mov dword [ebp - 0x1a0], 0
xorps xmm0, xmm0
push ecx
push eax
movups xmmword [ebp - 0x1b8], xmm0
movq qword [ebp - 0x1a8], xmm0
call dword [sym.imp.KERNEL32.dll_VirtualQuery]
test eax, eax
jne 0x1000f341
xor edi, edi
jmp 0x1000f384
mov ecx, dword [ebp - 0x1b4]
mov edx, dword [ecx + 0x3c]
cmp dword [edx + ecx], 0x4550
je 0x1000f357
xor edi, edi
jmp 0x1000f384
mov edx, dword [edx + ecx + 0x50]
lea eax, [ebp - 0x190]
push eax
call fcn.1001c5d0
mov edi, eax
add esp, 4
mov eax, dword [ebp - 0x17c]
mov dword [ebp - 0x194], eax
mov eax, dword [ebp - 0x190]
mov dword [ebp - 0x198], eax
mov byte [ebp - 4], 0x14
mov ecx, dword [ebp - 0x164]
cmp ecx, 0xf
jbe 0x1000f3c2
mov edx, dword [ebp - 0x178]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x1000f3b8
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x1000e347
push ecx
push edx
call fcn.100dad65
add esp, 8
mov dword [ebp - 4], 0xffffffff
mov eax, dword [ebp - 0x194]
mov dword [ebp - 0x168], 0
mov dword [ebp - 0x164], 0xf
mov byte [ebp - 0x178], 0
cmp eax, 0xf
jbe 0x1000f42c
lea ecx, [eax + 1]
mov eax, dword [ebp - 0x198]
mov edx, eax
cmp ecx, 0x1000
jb 0x1000f422
mov eax, dword [edx - 4]
add ecx, 0x23
sub edx, eax
mov dword [ebp - 0x198], eax
lea eax, [edx - 4]
cmp eax, 0x1f
ja 0x1000e347
mov eax, dword [ebp - 0x198]
push ecx
push eax
call fcn.100dad65
add esp, 8
test edi, edi
je 0x1000f4a1
lea eax, [ebp - 0x194]
push eax
push 0x40
push 5
push edi
call esi
test eax, eax
je 0x1000f453
mov ax, word [0x10102458]
mov word [edi], ax
mov al, byte [0x1010245a]
mov byte [edi + 2], al
lea ecx, [ebp - 0x194]
push ecx
push 0x40
lea eax, [edi + 3]
push 5
push eax
call esi
test eax, eax
je 0x1000f47b
lea ecx, [edi + 3]
mov eax, 0x1000ddd0
sub eax, ecx
mov byte [ecx], 0xe8
sub eax, 5
mov dword [ecx + 1], eax
lea eax, [ebp - 0x194]
add edi, 8
push eax
push 0x40
push 9
push edi
call esi
test eax, eax
je 0x1000f4a1
mov dword [edi], 0x90909090
mov dword [edi + 4], 0x90909090
mov byte [edi + 8], 0x90
xorps xmm0, xmm0
mov dword [ebp - 0x194], 0x3f
lea edx, [ebp - 0x194]
movups xmmword [ebp - 0x190], xmm0
call fcn.10004720
movups xmm0, xmmword [str.A1_____________6A_00_FF_74_24_08_05_____________FF_D0_C2_04_00]
mov ecx, eax
mov dword [ebp - 0x180], 0x3e
mov eax, dword [ebp - 0x194]
mov dword [ebp - 0x194], eax
mov dword [ebp - 0x17c], eax
movups xmmword [ecx], xmm0
mov dword [ebp - 0x198], ecx
movups xmm0, xmmword [0x10102668]
mov dword [ebp - 0x190], ecx
movups xmmword [ecx + 0x10], xmm0
movups xmm0, xmmword [0x10102678]
movups xmmword [ecx + 0x20], xmm0
movq xmm0, qword [0x10102688]
movq qword [ecx + 0x30], xmm0
mov eax, dword [0x10102690]
mov dword [ecx + 0x38], eax
mov ax, word [0x10102694]
mov word [ecx + 0x3c], ax
mov byte [ecx + 0x3e], 0
mov dword [ebp - 4], 0x16
xorps xmm0, xmm0
mov eax, dword [0x10102650]
mov ecx, 0xf
movups xmmword [ebp - 0x178], xmm0
mov dword [ebp - 0x170], eax
movq xmm0, qword [str.SAMPFUNCS.asi]
mov al, byte [0x10102654]
mov dword [ebp - 0x168], 0xd
mov dword [ebp - 0x164], ecx
movq qword [ebp - 0x178], xmm0
mov byte [ebp - 0x16c], al
mov byte [ebp - 0x16b], 0
lea eax, [ebp - 0x178]
mov byte [ebp - 4], 0x17
push eax
call dword [sym.imp.KERNEL32.dll_GetModuleHandleA]
test eax, eax
jne 0x1000f599
xor edi, edi
jmp 0x1000f610
push 0x1c
lea ecx, [ebp - 0x1b8]
mov dword [ebp - 0x1a0], 0
xorps xmm0, xmm0
push ecx
push eax
movups xmmword [ebp - 0x1b8], xmm0
movq qword [ebp - 0x1a8], xmm0
call dword [sym.imp.KERNEL32.dll_VirtualQuery]
test eax, eax
jne 0x1000f5cd
xor edi, edi
jmp 0x1000f610
mov ecx, dword [ebp - 0x1b4]
mov edx, dword [ecx + 0x3c]
cmp dword [edx + ecx], 0x4550
je 0x1000f5e3
xor edi, edi
jmp 0x1000f610
mov edx, dword [edx + ecx + 0x50]
lea eax, [ebp - 0x190]
push eax
call fcn.1001c5d0
mov edi, eax
add esp, 4
mov eax, dword [ebp - 0x17c]
mov dword [ebp - 0x194], eax
mov eax, dword [ebp - 0x190]
mov dword [ebp - 0x198], eax
mov byte [ebp - 4], 0x16
mov ecx, dword [ebp - 0x164]
cmp ecx, 0xf
jbe 0x1000f64e
mov edx, dword [ebp - 0x178]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x1000f644
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x1000e347
push ecx
push edx
call fcn.100dad65
add esp, 8
mov dword [ebp - 4], 0xffffffff
mov eax, dword [ebp - 0x194]
mov dword [ebp - 0x168], 0
mov dword [ebp - 0x164], 0xf
mov byte [ebp - 0x178], 0
cmp eax, 0xf
jbe 0x1000f6b8
lea ecx, [eax + 1]
mov eax, dword [ebp - 0x198]
mov edx, eax
cmp ecx, 0x1000
jb 0x1000f6ae
mov eax, dword [edx - 4]
add ecx, 0x23
sub edx, eax
mov dword [ebp - 0x198], eax
lea eax, [edx - 4]
cmp eax, 0x1f
ja 0x1000e347
mov eax, dword [ebp - 0x198]
push ecx
push eax
call fcn.100dad65
add esp, 8
test edi, edi
je 0x1000f6de
lea eax, [ebp - 0x194]
push eax
push 0x40
push 5
push edi
call esi
test eax, eax
je 0x1000f6de
mov eax, 0x1000df40
mov byte [edi], 0xe9
sub eax, edi
sub eax, 5
mov dword [edi + 1], eax
xorps xmm0, xmm0
mov dword [ebp - 0x194], 0x2f
lea edx, [ebp - 0x194]
movups xmmword [ebp - 0x190], xmm0
call fcn.10004720
movups xmm0, xmmword [str.55_8B_EC_51_83_EC_18_8B_CC_FF_75_08_E8]
mov edi, dword [ebp - 0x194]
mov ecx, eax
mov dword [ebp - 0x190], ecx
mov dword [ebp - 0x180], 0x26
mov dword [ebp - 0x17c], edi
movups xmmword [ecx], xmm0
movups xmm0, xmmword [0x101026a8]
movups xmmword [ecx + 0x10], xmm0
mov eax, dword [0x101026b8]
mov dword [ecx + 0x20], eax
mov ax, word [0x101026bc]
mov word [ecx + 0x24], ax
mov byte [ecx + 0x26], 0
mov dword [ebp - 4], 0x18
xorps xmm0, xmm0
mov eax, dword [0x10102650]
mov ecx, 0xf
movups xmmword [ebp - 0x178], xmm0
mov dword [ebp - 0x170], eax
movq xmm0, qword [str.SAMPFUNCS.asi]
mov al, byte [0x10102654]
mov dword [ebp - 0x168], 0xd
mov dword [ebp - 0x164], ecx
movq qword [ebp - 0x178], xmm0
mov byte [ebp - 0x16c], al
mov byte [ebp - 0x16b], 0
lea eax, [ebp - 0x178]
mov byte [ebp - 4], 0x19
push eax
call dword [sym.imp.KERNEL32.dll_GetModuleHandleA]
test eax, eax
jne 0x1000f7b2
xor esi, esi
jmp 0x1000f82b
push 0x1c
lea ecx, [ebp - 0x1b8]
mov dword [ebp - 0x1a0], 0
xorps xmm0, xmm0
push ecx
push eax
movups xmmword [ebp - 0x1b8], xmm0
movq qword [ebp - 0x1a8], xmm0
call dword [sym.imp.KERNEL32.dll_VirtualQuery]
test eax, eax
jne 0x1000f7e6
xor esi, esi
jmp 0x1000f82b
mov ecx, dword [ebp - 0x1b4]
mov eax, dword [ecx + 0x3c]
cmp dword [eax + ecx], 0x4550
je 0x1000f7fc
xor esi, esi
jmp 0x1000f82b
mov edx, dword [eax + ecx + 0x50]
lea eax, [ebp - 0x190]
push eax
cmp edx, 0x80000
jbe 0x1000f81b
add edx, 0xfff80000
add ecx, 0x80000
call fcn.1001c5d0
mov edi, dword [ebp - 0x17c]
mov esi, eax
add esp, 4
mov byte [ebp - 4], 0x18
mov ecx, dword [ebp - 0x164]
cmp ecx, 0xf
jbe 0x1000f865
mov edx, dword [ebp - 0x178]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x1000f85b
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x1000f8af
push ecx
push edx
call fcn.100dad65
add esp, 8
mov dword [ebp - 0x168], 0
mov dword [ebp - 0x164], 0xf
mov byte [ebp - 0x178], 0
mov dword [ebp - 4], 0xffffffff
cmp edi, 0xf
jbe 0x1000f8bf
mov edx, dword [ebp - 0x190]
lea ecx, [edi + 1]
mov eax, edx
cmp ecx, 0x1000
jb 0x1000f8b5
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
jbe 0x1000f8b5
call dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
push ecx
push edx
call fcn.100dad65
add esp, 8
test esi, esi
je 0x1000f8c9
mov dword [0x1010b258], esi
push 0x4c
call fcn.100daa1b
mov edx, eax
add esp, 4
mov dword [ebp - 0x194], edx
push 1
push 0xffffffffffffffff
mov dword [ebp - 4], 0x1a
sub esp, 0x18
mov ecx, esp
xorps xmm0, xmm0
movups xmmword [ecx], xmm0
mov dword [ecx + 0x10], 0xa
mov dword [ecx + 0x14], 0xf
movq xmm0, qword [str.SA:MP_Chat]
movq qword [ecx], xmm0
mov ax, word [0x101026c8]
mov word [ecx + 8], ax
mov byte [ecx + 0xa], 0
mov ecx, edx
call fcn.10009c10
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x190]
push 0xa
xorps xmm0, xmm0
mov dword [0x1010b25c], eax
push str._chat.json
movups xmmword [ebp - 0x190], xmm0
mov dword [ebp - 0x180], 0
mov dword [ebp - 0x17c], 0
call fcn.10010c60
lea edx, [ebp - 0x190]
mov dword [ebp - 4], 0x1b
call fcn.100131e0
mov dword [ebp - 4], 0xffffffff
mov ecx, dword [ebp - 0x17c]
cmp ecx, 7
jbe 0x1000f9b7
mov edx, dword [ebp - 0x190]
lea ecx, [ecx*2 + 2]
mov eax, edx
cmp ecx, 0x1000
jb 0x1000f9ad
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
jbe 0x1000f9ad
call dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
push ecx
push edx
call fcn.100dad65
add esp, 8
push 0
lea eax, [ebp - 0x198]
mov dword [ebp - 0x198], 0
push eax
push 0
push 0x2001f
push 0
push 0
push 0
push str.SoftwareSAMPci_chat
push closesocket
call dword [sym.imp.ADVAPI32.dll_RegCreateKeyExW]
test eax, eax
jne 0x1000fb6f
mov esi, dword [sym.imp.ADVAPI32.dll_RegQueryValueExW]
lea eax, [ebp - 0x1bc]
push eax
push 0x1010a0f0
push 0
push 0
push str.config
push dword [ebp - 0x198]
mov dword [ebp - 0x1bc], 0x24
call esi
test eax, eax
jne 0x1000fb12
mov eax, dword [0x1010a0f8]
cmp eax, 0xa
jge 0x1000fa3a
mov dword [0x1010a0f8], 0xa
jmp 0x1000fa49
cmp eax, 0x48
jle 0x1000fa49
mov dword [0x1010a0f8], 0x48
mov eax, dword [0x1010a0f4]
cmp eax, 0x64
jge 0x1000fa5f
mov dword [0x1010a0f4], 0x64
jmp 0x1000fa70
cmp eax, 0x3e8
jle 0x1000fa70
mov dword [0x1010a0f4], 0x3e8
mov eax, dword [0x1010a0fc]
cmp eax, 1
jge 0x1000fa86
mov dword [0x1010a0fc], 1
jmp 0x1000fa95
cmp eax, 0xa
jle 0x1000fa95
mov dword [0x1010a0fc], 0xa
movss xmm0, dword [0x10104704]
movss xmm1, dword [0x1010a100]
comiss xmm0, xmm1
jbe 0x1000fab6
mov dword [0x1010a100], 0x3f000000
jmp 0x1000fac9
comiss xmm1, dword [0x10104780]
jbe 0x1000fac9
mov dword [0x1010a100], 0x40000000
mov eax, dword [0x1010a108]
cmp eax, 5
jge 0x1000fadf
mov dword [0x1010a108], 5
jmp 0x1000faee
cmp eax, 0x28
jle 0x1000faee
mov dword [0x1010a108], 0x28
mov eax, dword [0x1010a110]
test eax, eax
jns 0x1000fb03
mov dword [0x1010a110], 0
jmp 0x1000fb12
cmp eax, 2
jle 0x1000fb12
mov dword [0x1010a110], 2
lea eax, [ebp - 0x1c0]
mov dword [ebp - 0x1c0], 0x104
push eax
lea eax, [ebp - 0x160]
push eax
push 0
push 0
push str.fontpath
push dword [ebp - 0x198]
call esi
test eax, eax
jne 0x1000fb63
lea ecx, [ebp - 0x160]
lea edx, [ecx + 1]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x1000fb48
sub ecx, edx
lea eax, [ebp - 0x160]
push ecx
push eax
mov ecx, 0x1010a3a0
call fcn.10003a40
push dword [ebp - 0x198]
call dword [sym.imp.ADVAPI32.dll_RegCloseKey]
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
mov ecx, dword [ebp - 0x14]
xor ecx, ebp
call fcn.100daa0d
mov esp, ebp
pop ebp
mov esp, ebx
pop ebx
ret
push eax
lea eax, [ebp - 0x58]
push str.Failed_to_setup_patch__d
push eax
call fcn.10010c40
add esp, 0xc
lea eax, [ebp - 0x58]
push 0
push 0x101025cc
push eax
push 0
call dword [sym.imp.USER32.dll_MessageBoxA]
push 0
call dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_exit]
int3