Function at 0x10009cc0
Capabilities:
Check for time delay via gettickcount
Execute shellcode via indirect call

Disassembly:
push ebp
mov ebp, esp
push 0xfffffffffffffffe
push 0x100145c8
push 0x1000f529
mov eax, dword fs:[0]
push eax
sub esp, 0x50
push ebx
push esi
push edi
mov eax, dword [0x10016018]
xor dword [ebp - 8], eax
xor eax, ebp
push eax
lea eax, [ebp - 0x10]
mov dword fs:[0], eax
mov dword [ebp - 0x18], esp
call fcn.10009920
call fcn.10009a60
call fcn.10009b90
mov eax, dword [0x1001aeb0]
cmp dword [0x1001b090], 0
je 0x10009d59
mov ecx, dword [eax + 0x10]
mov ecx, dword [ecx]
cmp dword [ecx + 0x2c], 0
je 0x10009d59
test ecx, ecx
je 0x10009d59
wait
mov dword [ebp - 4], 0
push 0x12d
push 0x12d
push 0x12d
mov ecx, dword [ecx + 0x2c]
mov edx, dword [eax + 0xf0]
call edx
wait
jmp 0x10009d4d
mov dword [ebp - 4], 0xfffffffe
mov eax, dword [0x1001aeb0]
cmp dword [0x1001afd0], 0
je 0x10009d9b
mov eax, dword [eax + 0x24]
mov ecx, dword [eax]
fld dword [0x10013ffc]
fstp dword [ecx]
mov edx, ecx
fld dword [0x10013ff8]
fstp dword [edx + 4]
push str.Anti_AFK_Aktif
push 0xffffff00
push 0xdc
mov ecx, 0x122
call fcn.100078c0
add esp, 0xc
mov eax, dword [0x1001aeb0]
mov ebx, dword [sym.imp.KERNEL32.dll_VirtualProtect]
cmp dword [0x1001b070], 1
jne 0x10009deb
cmp dword [0x100186f4], 0
je 0x10009deb
mov esi, dword [eax + 0xd4]
lea eax, [ebp - 0x1c]
push eax
push 0x40
push 2
push esi
call ebx
push 2
push 0x10013a24
push esi
mov edi, dword [sym.imp.MSVCR100.dll_memmove]
call edi
add esp, 0xc
lea ecx, [ebp - 0x40]
push ecx
mov edx, dword [ebp - 0x1c]
push edx
push 2
push esi
call ebx
mov eax, dword [0x1001aeb0]
jmp 0x10009df1
mov edi, dword [sym.imp.MSVCR100.dll_memmove]
cmp dword [0x1001b070], 0
jne 0x10009e33
cmp dword [0x100186f4], 0
je 0x10009e33
mov esi, dword [eax + 0xd4]
lea eax, [ebp - 0x20]
push eax
push 0x40
push 2
push esi
call ebx
push 2
push 0x10013a28
push esi
call edi
add esp, 0xc
lea ecx, [ebp - 0x44]
push ecx
mov edx, dword [ebp - 0x20]
push edx
push 2
push esi
call ebx
mov eax, dword [0x1001aeb0]
cmp dword [0x1001b060], 1
jne 0x10009e75
cmp dword [0x10019180], 0
je 0x10009e75
mov esi, dword [eax + 0xd0]
lea eax, [ebp - 0x24]
push eax
push 0x40
push 2
push esi
call ebx
push 2
push 0x10013a24
push esi
call edi
add esp, 0xc
lea ecx, [ebp - 0x48]
push ecx
mov edx, dword [ebp - 0x24]
push edx
push 2
push esi
call ebx
mov eax, dword [0x1001aeb0]
cmp dword [0x1001b060], 0
jne 0x10009eb7
cmp dword [0x10019180], 0
je 0x10009eb7
mov esi, dword [eax + 0xd0]
lea eax, [ebp - 0x28]
push eax
push 0x40
push 2
push esi
call ebx
push 2
push 0x10013a28
push esi
call edi
add esp, 0xc
lea ecx, [ebp - 0x4c]
push ecx
mov edx, dword [ebp - 0x28]
push edx
push 2
push esi
call ebx
mov eax, dword [0x1001aeb0]
cmp dword [0x1001b00c], 0
je 0x10009ee9
mov ecx, dword [eax + 8]
mov edx, dword [eax + 0x34]
mov esi, dword [ecx]
movzx edx, byte [edx + esi]
mov esi, dword [eax + 0x40]
lea edx, [esi + edx*4]
mov ecx, dword [ecx]
mov ecx, dword [edx + ecx]
add ecx, 8
cmp byte [ecx], 0
je 0x10009ee9
nop
mov byte [ecx], 0
inc ecx
cmp byte [ecx], 0
jne 0x10009ee0
cmp dword [0x10019974], 0
je 0x1000a016
cmp dword [0x10019174], 0
je 0x1000a016
cmp dword [0x1001b030], 0
je 0x10009f73
mov dword [0x1001b02c], 0
push str.FastBom_Aktif
push 0xffffff00
push 0xc8
mov ecx, 0x104
call fcn.100078c0
add esp, 0xc
mov edx, dword [0x1001aeb0]
mov esi, dword [edx + 0x144]
lea eax, [ebp - 0x2c]
push eax
push 0x40
push 5
push esi
call ebx
mov byte [esi], 0xe9
mov ecx, 0x10009290
sub ecx, esi
sub ecx, 5
mov dword [esi + 1], ecx
lea edx, [ebp - 0x50]
push edx
mov eax, dword [ebp - 0x2c]
push eax
push 5
push esi
call ebx
fldz
fstp dword [0x1001a868]
jmp 0x1000a011
cmp dword [0x1001b02c], 0
je 0x10009ff3
mov dword [0x1001b030], 0
mov esi, dword [eax + 0x144]
lea ecx, [ebp - 0x2c]
push ecx
push 0x40
push 5
push esi
call ebx
mov byte [esi], 0xe9
mov edx, 0x10009290
sub edx, esi
sub edx, 5
mov dword [esi + 1], edx
lea eax, [ebp - 0x50]
push eax
mov ecx, dword [ebp - 0x2c]
push ecx
push 5
push esi
call ebx
mov edi, 1
lea esi, [edi + 0x11]
call fcn.10001510
test al, 1
je 0x10009fc9
fldz
jmp 0x10009fcf
fld dword [0x10013ff4]
fstp dword [0x1001a868]
push str.BomControl_Aktif__OFF___Tekan_ALT_
push 0xffffff00
push 0xdc
mov ecx, 0x15e
call fcn.100078c0
add esp, 0xc
jmp 0x1000a00b
push 0x10013a60
mov esi, 5
mov edi, dword [eax + 0x144]
call fcn.100010b0
add esp, 4
mov edi, dword [sym.imp.MSVCR100.dll_memmove]
mov eax, dword [0x1001aeb0]
mov ecx, dword [0x1001b034]
cmp ecx, 1
jne 0x1000a02d
fld dword [0x10013ff0]
fstp dword [0x10019188]
cmp ecx, 2
jne 0x1000a03e
fld dword [0x10013fec]
fstp dword [0x10019188]
cmp ecx, 3
jne 0x1000a04f
fld dword [0x10013fe8]
fstp dword [0x10019188]
cmp ecx, 4
jne 0x1000a060
fld dword [0x1001606c]
fstp dword [0x10019188]
cmp ecx, 5
jne 0x1000a071
fld dword [0x10013fe4]
fstp dword [0x10019188]
cmp ecx, 6
jne 0x1000a082
fld dword [0x10013fe0]
fstp dword [0x10019188]
cmp ecx, 1
jne 0x1000a0d2
cmp dword [0x10017f0c], 0
je 0x1000a0d2
cmp dword [0x1001a864], 0
je 0x1000a0d2
mov esi, dword [eax + 0x128]
lea edx, [ebp - 0x30]
push edx
push 0x40
push 5
push esi
call ebx
mov byte [esi], 0xe9
mov eax, 0x100092a0
sub eax, esi
sub eax, 5
mov dword [esi + 1], eax
lea ecx, [ebp - 0x54]
push ecx
mov edx, dword [ebp - 0x30]
push edx
push 5
push esi
call ebx
mov ecx, dword [0x1001b034]
mov eax, dword [0x1001aeb0]
test ecx, ecx
jne 0x1000a116
cmp dword [0x10017f0c], ecx
je 0x1000a116
cmp dword [0x1001a864], ecx
je 0x1000a116
mov esi, dword [eax + 0x128]
lea eax, [ebp - 0x34]
push eax
push 0x40
push 5
push esi
call ebx
push 5
push 0x10013a60
push esi
call edi
add esp, 0xc
lea ecx, [ebp - 0x58]
push ecx
mov edx, dword [ebp - 0x34]
push edx
push 5
push esi
call ebx
mov eax, dword [0x1001aeb0]
cmp dword [0x1001b068], 1
jne 0x1000a161
cmp dword [0x1001a5e0], 0
je 0x1000a161
cmp dword [0x1001a5c8], 0
je 0x1000a161
mov esi, dword [eax + 0x160]
lea eax, [ebp - 0x38]
push eax
push 0x40
push 5
push esi
call ebx
push 5
push 0x10013a68
push esi
call edi
add esp, 0xc
lea ecx, [ebp - 0x5c]
push ecx
mov edx, dword [ebp - 0x38]
push edx
push 5
push esi
call ebx
mov eax, dword [0x1001aeb0]
cmp dword [0x1001b068], 0
jne 0x1000a1ac
cmp dword [0x1001a5e0], 0
je 0x1000a1ac
cmp dword [0x1001a5c8], 0
je 0x1000a1ac
mov esi, dword [eax + 0x160]
lea eax, [ebp - 0x3c]
push eax
push 0x40
push 5
push esi
call ebx
push 5
push 0x10013a70
push esi
call edi
add esp, 0xc
lea ecx, [ebp - 0x60]
push ecx
mov edx, dword [ebp - 0x3c]
push edx
push 5
push esi
call ebx
mov eax, dword [0x1001aeb0]
cmp dword [0x1001afa4], 0
je 0x1000a228
mov edi, dword [0x100199ac]
mov eax, dword [0x1001a88c]
add eax, edi
mov dword [ebp - 0x3c], eax
mov esi, dword [eax + 1]
lea ecx, [ebp - 0x38]
push ecx
push 0x40
push 5
push edi
call ebx
mov byte [edi], 0xe8
sub esi, edi
add esi, dword [ebp - 0x3c]
mov dword [edi + 1], esi
lea edx, [ebp - 0x60]
push edx
mov eax, dword [ebp - 0x38]
push eax
push 5
push edi
call ebx
mov ecx, dword [0x1001aeb0]
mov esi, dword [ecx + 0xc8]
lea edx, [ebp - 0x3c]
push edx
push 0x40
push 2
push esi
call ebx
push 2
push 0x10013a78
push esi
call dword [sym.imp.MSVCR100.dll_memmove]
add esp, 0xc
lea eax, [ebp - 0x60]
push eax
mov ecx, dword [ebp - 0x3c]
push ecx
push 2
push esi
call ebx
mov edi, dword [sym.imp.MSVCR100.dll_memmove]
jmp 0x1000a253
mov esi, dword [eax + 0xc8]
lea edx, [ebp - 0x3c]
push edx
push 0x40
push 2
push esi
call ebx
push 2
push 0x10013a7c
push esi
call edi
add esp, 0xc
lea eax, [ebp - 0x60]
push eax
mov ecx, dword [ebp - 0x3c]
push ecx
push 2
push esi
call ebx
cmp dword [0x1001b010], 0
je 0x1000a295
mov edx, dword [0x1001aeb0]
mov esi, dword [edx + 8]
add esi, 0xa4
push 4
push esi
call dword [sym.imp.KERNEL32.dll_IsBadReadPtr]
test eax, eax
jne 0x1000a295
mov esi, dword [esi]
add esi, 0x3c
push 4
push esi
call dword [sym.imp.KERNEL32.dll_IsBadReadPtr]
test eax, eax
jne 0x1000a295
cmp dword [esi], 4
je 0x1000a295
mov dword [esi], 4
cmp dword [0x1001afcc], 0
je 0x1000a385
mov dword [0x1001af88], 0
push str.Tekan_CapsLook_Untuk_Aktif
push 0xffffff00
push 0xf0
mov ecx, 0x140
call fcn.100078c0
add esp, 0xc
mov dword [0x10019010], 0x100014c0
push 0x14
call fcn.100014c0
cwde
shr eax, 0x10
test eax, eax
je 0x1000a31d
cmp byte [0x10019a70], 0
je 0x1000a304
cmp dword [0x10019a74], 0
je 0x1000a324
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov ecx, dword [0x10019a74]
inc ecx
cmp ecx, eax
ja 0x1000a324
mov byte [0x10019a70], 1
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov dword [0x10019a74], eax
mov eax, 1
jmp 0x1000a326
mov byte [0x10019a70], 0
xor eax, eax
test al, 1
je 0x1000a358
mov edx, dword [0x1001aeb0]
mov esi, dword [edx + 0x154]
lea eax, [ebp - 0x3c]
push eax
push 0x40
push 2
push esi
call ebx
push 2
push 0x10013a9c
push esi
call edi
add esp, 0xc
lea ecx, [ebp - 0x60]
push ecx
mov edx, dword [ebp - 0x3c]
push edx
jmp 0x1000a3b1
mov eax, dword [0x1001aeb0]
mov esi, dword [eax + 0x154]
lea ecx, [ebp - 0x3c]
push ecx
push 0x40
push 2
push esi
call ebx
push 2
push 0x10013aa0
push esi
call edi
add esp, 0xc
lea edx, [ebp - 0x60]
push edx
mov eax, dword [ebp - 0x3c]
push eax
jmp 0x1000a3b1
mov ecx, dword [0x1001aeb0]
mov esi, dword [ecx + 0x154]
lea edx, [ebp - 0x3c]
push edx
push 0x40
push 2
push esi
call ebx
push 2
push 0x10013aa0
push esi
call edi
add esp, 0xc
lea eax, [ebp - 0x60]
push eax
mov ecx, dword [ebp - 0x3c]
push ecx
push 2
push esi
call ebx
cmp dword [0x1001af68], 0
je 0x1000a3f7
mov dword [0x1001afb4], 3
mov edx, dword [0x1001aeb0]
mov esi, dword [edx + 0xb8]
lea eax, [ebp - 0x3c]
push eax
push 0x40
push 3
push esi
call ebx
push 3
push 0x10013aa4
push esi
call edi
add esp, 0xc
lea ecx, [ebp - 0x60]
push ecx
mov edx, dword [ebp - 0x3c]
push edx
jmp 0x1000a422
mov eax, dword [0x1001aeb0]
mov esi, dword [eax + 0xb8]
lea ecx, [ebp - 0x3c]
push ecx
push 0x40
push 3
push esi
call ebx
push 3
push 0x10013aa8
push esi
call edi
add esp, 0xc
lea edx, [ebp - 0x60]
push edx
mov eax, dword [ebp - 0x3c]
push eax
push 3
push esi
call ebx
cmp dword [0x1001afbc], 1
jne 0x1000a503
cmp dword [0x10019054], 0
je 0x1000a503
mov dword [0x10019010], fcn.100014c0
push 0x20
call fcn.100014c0
movsx ecx, ax
shr ecx, 0x10
test ecx, ecx
je 0x1000a498
cmp byte [0x10019ad0], 0
je 0x1000a47f
cmp dword [0x10019ad4], 0
je 0x1000a49f
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov edx, dword [0x10019ad4]
inc edx
cmp edx, eax
ja 0x1000a49f
mov byte [0x10019ad0], 1
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov dword [0x10019ad4], eax
mov eax, 1
jmp 0x1000a4a1
mov byte [0x10019ad0], 0
xor eax, eax
test al, 1
je 0x1000a4d2
mov eax, dword [0x1001aeb0]
mov esi, dword [eax + 0x148]
lea ecx, [ebp - 0x38]
push ecx
push 0x40
push 3
push esi
call ebx
push 3
push 0x10013aac
push esi
call edi
add esp, 0xc
lea edx, [ebp - 0x5c]
push edx
mov eax, dword [ebp - 0x38]
push eax
jmp 0x1000a4fe
mov ecx, dword [0x1001aeb0]
mov esi, dword [ecx + 0x148]
lea edx, [ebp - 0x38]
push edx
push 0x40
push 3
push esi
call ebx
push 3
push 0x10013ab0
push esi
call edi
add esp, 0xc
lea eax, [ebp - 0x5c]
push eax
mov ecx, dword [ebp - 0x38]
push ecx
push 3
push esi
call ebx
cmp dword [0x1001afbc], 0
jne 0x1000a546
cmp dword [0x10019054], 0
je 0x1000a546
mov edx, dword [0x1001aeb0]
mov esi, dword [edx + 0x148]
lea eax, [ebp - 0x34]
push eax
push 0x40
push 3
push esi
call ebx
push 3
push 0x10013ab0
push esi
call edi
add esp, 0xc
lea ecx, [ebp - 0x58]
push ecx
mov edx, dword [ebp - 0x34]
push edx
push 3
push esi
call ebx
cmp dword [0x1001af54], 0
je 0x1000a582
mov eax, dword [0x1001aeb0]
mov esi, dword [eax + 0xfc]
lea ecx, [ebp - 0x30]
push ecx
push 0x40
push 5
push esi
call ebx
mov byte [esi], 0xe9
mov edx, 0x100091e0
sub edx, esi
sub edx, 5
mov dword [esi + 1], edx
lea eax, [ebp - 0x54]
push eax
mov ecx, dword [ebp - 0x30]
push ecx
push 5
push esi
call ebx
mov eax, dword [0x1001aeb0]
push 4
mov edi, dword [sym.imp.KERNEL32.dll_IsBadWritePtr]
mov esi, dword [eax + 8]
mov eax, dword [eax + 0x34]
push esi
cmp dword [0x1001af94], 0
je 0x1000a5cb
mov edx, dword [esi]
mov ecx, dword [eax + edx]
shl ecx, 6
lea ebx, [ecx + eax - 0x3ee]
call edi
test eax, eax
jne 0x1000a5f1
push 4
lea edx, [esi + ebx]
push edx
call edi
test eax, eax
jne 0x1000a5f1
mov eax, dword [esi]
mov dword [ebx + eax], 0x35353535
jmp 0x1000a5f1
mov ecx, dword [esi]
mov edx, dword [eax + ecx]
shl edx, 6
lea ebx, [edx + eax - 0x3ee]
call edi
test eax, eax
jne 0x1000a5f1
push 4
lea eax, [esi + ebx]
push eax
call edi
test eax, eax
jne 0x1000a5f1
mov ecx, dword [esi]
mov dword [ebx + ecx], eax
mov eax, dword [0x1001af70]
cmp eax, 1
jne 0x1000a63d
mov eax, dword [0x1001aeb0]
mov esi, dword [eax + 8]
mov eax, dword [eax + 0x34]
mov edx, dword [esi]
mov ecx, dword [eax + edx]
shl ecx, 6
lea ebx, [ecx + eax - 0x403]
push 4
push esi
call edi
test eax, eax
jne 0x1000a6b9
push 4
lea edx, [esi + ebx]
push edx
call edi
test eax, eax
jne 0x1000a6b9
mov eax, dword [esi]
mov dword [ebx + eax], 0x30
jmp 0x1000a6b9
cmp eax, 2
jne 0x1000a67c
mov eax, dword [0x1001aeb0]
mov esi, dword [eax + 8]
mov eax, dword [eax + 0x34]
mov edx, dword [esi]
mov ecx, dword [eax + edx]
shl ecx, 6
lea ebx, [ecx + eax - 0x403]
push 4
push esi
call edi
test eax, eax
jne 0x1000a6b9
push 4
lea edx, [esi + ebx]
push edx
call edi
test eax, eax
jne 0x1000a6b9
mov eax, dword [esi]
mov dword [ebx + eax], 0x31
jmp 0x1000a6b9
cmp eax, 3
jne 0x1000a6fb
mov eax, dword [0x1001aeb0]
mov esi, dword [eax + 8]
mov eax, dword [eax + 0x34]
mov edx, dword [esi]
mov ecx, dword [eax + edx]
shl ecx, 6
lea ebx, [ecx + eax - 0x403]
push 4
push esi
call edi
test eax, eax
jne 0x1000a6b9
push 4
lea edx, [esi + ebx]
push edx
call edi
test eax, eax
jne 0x1000a6b9
mov eax, dword [esi]
mov dword [ebx + eax], 0x32
mov eax, dword [0x1001aeb0]
mov esi, dword [eax + 8]
mov eax, dword [eax + 0x34]
mov ecx, dword [esi]
mov edx, dword [eax + ecx]
shl edx, 6
lea ebx, [edx + eax - 0x3f3]
push 4
push esi
call edi
test eax, eax
jne 0x1000a774
push 4
lea eax, [esi + ebx]
push eax
call edi
test eax, eax
jne 0x1000a774
mov ecx, dword [esi]
mov dword [ebx + ecx], 0xffffffff
jmp 0x1000a774
cmp eax, 4
jne 0x1000a71f
mov eax, dword [0x1001aeb0]
mov esi, dword [eax + 8]
mov eax, dword [eax + 0x34]
push 0x33
mov edx, dword [esi]
mov ecx, dword [eax + edx]
shl ecx, 6
lea edx, [ecx + eax - 0x403]
push edx
jmp 0x1000a74a
cmp eax, 5
jne 0x1000a728
push 0x35
jmp 0x1000a72f
cmp eax, 6
jne 0x1000a774
push 0x36
mov eax, dword [0x1001aeb0]
mov esi, dword [eax + 8]
mov ecx, dword [esi]
mov eax, dword [eax + 0x34]
mov edx, dword [eax + ecx]
shl edx, 6
lea eax, [edx + eax - 0x403]
push eax
call fcn.10001070
mov eax, dword [0x1001aeb0]
mov esi, dword [eax + 8]
mov ecx, dword [esi]
mov eax, dword [eax + 0x34]
mov edx, dword [eax + ecx]
shl edx, 6
push 0xffffffffffffffff
lea eax, [edx + eax - 0x3f3]
push eax
call fcn.10001070
add esp, 0x10
cmp dword [0x1001afc4], 2
jne 0x1000a7b4
mov eax, dword [0x1001aeb0]
mov esi, dword [eax + 8]
mov ecx, dword [eax + 0x34]
mov edx, dword [esi]
mov ecx, dword [ecx + edx]
lea ecx, [ecx + ecx*8]
mov edx, dword [eax + 0x60]
lea ebx, [edx + ecx*8]
push 4
push esi
call edi
test eax, eax
jne 0x1000a7b4
push 4
lea eax, [esi + ebx]
push eax
call edi
test eax, eax
jne 0x1000a7b4
mov ecx, dword [esi]
mov dword [ebx + ecx], 0x3e500000
cmp dword [0x1001afc4], 1
jne 0x1000a7f4
mov eax, dword [0x1001aeb0]
mov esi, dword [eax + 8]
mov edx, dword [eax + 0x34]
mov ecx, dword [esi]
mov ecx, dword [edx + ecx]
lea edx, [ecx + ecx*8]
mov eax, dword [eax + 0x60]
lea ebx, [eax + edx*8]
push 4
push esi
call edi
test eax, eax
jne 0x1000a7f4
push 4
lea ecx, [esi + ebx]
push ecx
call edi
test eax, eax
jne 0x1000a7f4
mov edx, dword [esi]
mov dword [ebx + edx], 0x3e000000
cmp dword [0x1001afc4], 0
jne 0x1000a834
mov eax, dword [0x1001aeb0]
mov esi, dword [eax + 8]
mov ecx, dword [eax + 0x34]
mov edx, dword [esi]
mov ecx, dword [ecx + edx]
lea ecx, [ecx + ecx*8]
mov edx, dword [eax + 0x60]
lea ebx, [edx + ecx*8]
push 4
push esi
call edi
test eax, eax
jne 0x1000a834
push 4
lea eax, [esi + ebx]
push eax
call edi
test eax, eax
jne 0x1000a834
mov ecx, dword [esi]
mov dword [ebx + ecx], 0xb7a7c5ac
mov eax, dword [0x1001aeb0]
push 4
mov esi, dword [eax + 8]
mov edx, dword [eax + 0x34]
push esi
mov eax, dword [esi]
mov eax, dword [edx + eax]
lea ecx, [eax + eax*8]
mov edx, dword [0x10019984]
lea ebx, [edx + ecx*8]
cmp dword [0x1001afac], 0
je 0x1000a88d
call edi
test eax, eax
jne 0x1000a8e9
push 4
lea eax, [esi + ebx]
push eax
call edi
test eax, eax
jne 0x1000a8e9
mov ecx, dword [esi]
mov dword [ebx + ecx], 0x454ce1c6
mov ecx, dword [ebp - 0x10]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret
call edi
test eax, eax
jne 0x1000a8a8
push 4
lea eax, [esi + ebx]
push eax
call edi
test eax, eax
jne 0x1000a8a8
mov ecx, dword [esi]
mov dword [ebx + ecx], 0x454ce1c6
mov edx, dword [0x1001aebc]
mov dword [ebp - 0x3c], edx
mov eax, dword [0x1001aeb0]
mov esi, dword [eax + 8]
mov eax, dword [eax + 0x34]
mov ecx, dword [esi]
mov eax, dword [eax + ecx]
lea edx, [eax + eax*8]
mov eax, dword [0x10019984]
lea ebx, [eax + edx*8]
push 4
push esi
call edi
test eax, eax
jne 0x1000a8e9
push 4
lea ecx, [esi + ebx]
push ecx
call edi
test eax, eax
jne 0x1000a8e9
mov edx, dword [esi]
mov eax, dword [ebp - 0x3c]
mov dword [ebx + edx], eax
mov ecx, dword [ebp - 0x10]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret