Function at 0x1000c6f0
Capabilities:
Allocate or change rwx memory
Delete file
Execute shellcode via indirect call

Disassembly:
push ebx
mov ebx, esp
sub esp, 8
and esp, 0xfffffff8
add esp, 4
push ebp
mov ebp, dword [ebx + 4]
mov dword [esp + 4], ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x10012a98
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
push ebx
sub esp, 0x100
push esi
push edi
push ecx
lea ecx, [ebp - 0x110]
call fcn.1000df30
sub esp, 0x18
mov dword [ebp - 4], 0
mov esi, esp
xorps xmm0, xmm0
push 0x20
movups xmmword [esi], xmm0
mov dword [esi + 0x10], 0
mov dword [esi + 0x14], 0xf
call fcn.1000ec1f
mov dword [esi], eax
add esp, 4
mov dword [esi + 0x10], 0x13
mov dword [esi + 0x14], 0x1f
movups xmm0, xmmword [str...m3mkzoSxpy.dhd]
movups xmmword [eax], xmm0
mov cx, word [0x10014b38]
mov word [eax + 0x10], cx
mov cl, byte [0x10014b3a]
mov byte [eax + 0x12], cl
lea ecx, [ebp - 0x34]
mov byte [eax + 0x13], 0
call fcn.10004be0
add esp, 0x18
mov byte [ebp - 4], 1
cmp dword [eax + 0x14], 0xf
jbe 0x1000c7a3
mov eax, dword [eax]
push 0x40
push 1
push eax
lea ecx, [ebp - 0x100]
call fcn.1000e190
test eax, eax
lea ecx, [ebp - 0x110]
mov eax, dword [ebp - 0x110]
push 0
je 0x1000c7d2
add ecx, dword [eax + 4]
push 0
call dword [sym.imp.MSVCP140.dll_public:_void___thiscall_std::basic_ios_char__struct_std::char_traits_char__::clear_int__bool_]
jmp 0x1000c7dd
add ecx, dword [eax + 4]
push 2
call dword [sym.imp.MSVCP140.dll_public:_void___thiscall_std::basic_ios_char__struct_std::char_traits_char__::setstate_int__bool_]
mov byte [ebp - 4], 0
mov ecx, dword [ebp - 0x20]
cmp ecx, 0xf
jbe 0x1000c817
mov edx, dword [ebp - 0x34]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x1000c80d
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
jbe 0x1000c80d
call dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
push ecx
push edx
call fcn.1000ef69
add esp, 8
xorps xmm0, xmm0
mov dword [ebp - 0x24], 0
mov edi, 0xf
movups xmmword [ebp - 0x34], xmm0
mov dword [ebp - 0x20], edi
mov byte [ebp - 0x34], 0
mov byte [ebp - 4], 2
cmp dword [ebp - 0xb4], 0
je 0x1000d39d
mov eax, dword [ebp - 0x110]
lea ecx, [ebp - 0x110]
mov dword [ebp - 0x1c], 0
add ecx, dword [eax + 4]
call dword [sym.imp.MSVCP140.dll_public:_bool___thiscall_std::ios_base::operator_bool_void_const]
test al, al
je 0x1000d331
nop word [eax + eax]
mov eax, dword [ebp - 0x110]
lea ecx, [ebp - 0x110]
push 0xa
add ecx, dword [eax + 4]
call dword [sym.imp.MSVCP140.dll_public:_char___thiscall_std::basic_ios_char__struct_std::char_traits_char__::widen_char_const]
movzx eax, al
lea edx, [ebp - 0x34]
push eax
lea ecx, [ebp - 0x110]
call fcn.1000b760
mov eax, dword [ebp - 0x1c]
add esp, 4
mov esi, dword [ebp - 0x34]
test eax, eax
jne 0x1000ca4e
mov eax, dword [ebp - 0x24]
lea ecx, [ebp - 0x34]
sub esp, 0x18
xorps xmm0, xmm0
cmp dword [ebp - 0x20], 0xf
mov edi, esp
cmova ecx, esi
mov dword [ebp - 0x14], ecx
movups xmmword [edi], xmm0
mov dword [edi + 0x10], 0
mov dword [edi + 0x14], 0
cmp eax, 0x7fffffff
ja 0x1000d3ac
mov dword [edi + 0x14], 0xf
cmp eax, 0xf
ja 0x1000c8f8
mov dword [edi + 0x10], eax
movups xmm0, xmmword [ecx]
movups xmmword [edi], xmm0
jmp 0x1000c980
mov esi, eax
or esi, 0xf
cmp esi, 0x7fffffff
jbe 0x1000c914
mov eax, 0x80000000
mov esi, 0x7fffffff
add eax, 0x23
jmp 0x1000c935
cmp esi, 0x16
mov ecx, 0x16
cmovb esi, ecx
lea ecx, [esi + 1]
cmp ecx, 0x1000
jb 0x1000c954
lea eax, [ecx + 0x23]
cmp eax, ecx
jbe 0x1000d3a7
push eax
call fcn.1000ec1f
add esp, 4
test eax, eax
je 0x1000c807
lea ecx, [eax + 0x23]
and ecx, 0xffffffe0
mov dword [ecx - 4], eax
mov eax, dword [ebp - 0x24]
jmp 0x1000c96a
test ecx, ecx
je 0x1000c968
push ecx
call fcn.1000ec1f
mov ecx, eax
add esp, 4
mov eax, dword [ebp - 0x24]
jmp 0x1000c96a
xor ecx, ecx
mov dword [edi + 0x10], eax
inc eax
push eax
push dword [ebp - 0x14]
mov dword [edi], ecx
push ecx
mov dword [edi + 0x14], esi
call sub.VCRUNTIME140.dll_memcpy
add esp, 0xc
lea ecx, [ebp - 0x50]
call fcn.10004be0
mov esi, eax
add esp, 0x18
cmp esi, 0x10018d20
je 0x1000ca11
mov ecx, dword [0x10018d34]
cmp ecx, 0xf
jbe 0x1000c9ce
mov eax, dword [0x10018d20]
inc ecx
cmp ecx, 0x1000
jb 0x1000c9c4
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x1000c807
mov eax, edx
push ecx
push eax
call fcn.1000ef69
add esp, 8
mov dword [0x10018d30], 0
mov dword [0x10018d34], 0xf
mov byte [0x10018d20], 0
movups xmm0, xmmword [esi]
movups xmmword [0x10018d20], xmm0
movq xmm0, qword [esi + 0x10]
movq qword [0x10018d30], xmm0
mov dword [esi + 0x10], 0
mov dword [esi + 0x14], 0xf
mov byte [esi], 0
mov ecx, dword [ebp - 0x3c]
cmp ecx, 0xf
jbe 0x1000d2df
mov edx, dword [ebp - 0x50]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x1000ca3f
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x1000c807
push ecx
push edx
call fcn.1000ef69
add esp, 8
jmp 0x1000d2df
cmp eax, 1
jne 0x1000cbfb
mov eax, dword [ebp - 0x24]
lea ecx, [ebp - 0x34]
sub esp, 0x18
xorps xmm0, xmm0
cmp dword [ebp - 0x20], 0xf
mov edi, esp
cmova ecx, esi
mov dword [ebp - 0x14], ecx
movups xmmword [edi], xmm0
mov dword [edi + 0x10], 0
mov dword [edi + 0x14], 0
cmp eax, 0x7fffffff
ja 0x1000d3ac
mov dword [edi + 0x14], 0xf
cmp eax, 0xf
ja 0x1000caa5
mov dword [edi + 0x10], eax
movups xmm0, xmmword [ecx]
movups xmmword [edi], xmm0
jmp 0x1000cb2d
mov esi, eax
or esi, 0xf
cmp esi, 0x7fffffff
jbe 0x1000cac1
mov eax, 0x80000000
mov esi, 0x7fffffff
add eax, 0x23
jmp 0x1000cae2
cmp esi, 0x16
mov ecx, 0x16
cmovb esi, ecx
lea ecx, [esi + 1]
cmp ecx, 0x1000
jb 0x1000cb01
lea eax, [ecx + 0x23]
cmp eax, ecx
jbe 0x1000d3a7
push eax
call fcn.1000ec1f
add esp, 4
test eax, eax
je 0x1000c807
lea ecx, [eax + 0x23]
and ecx, 0xffffffe0
mov dword [ecx - 4], eax
mov eax, dword [ebp - 0x24]
jmp 0x1000cb17
test ecx, ecx
je 0x1000cb15
push ecx
call fcn.1000ec1f
mov ecx, eax
add esp, 4
mov eax, dword [ebp - 0x24]
jmp 0x1000cb17
xor ecx, ecx
mov dword [edi + 0x10], eax
inc eax
push eax
push dword [ebp - 0x14]
mov dword [edi], ecx
push ecx
mov dword [edi + 0x14], esi
call sub.VCRUNTIME140.dll_memcpy
add esp, 0xc
lea ecx, [ebp - 0x50]
call fcn.10004be0
mov esi, eax
add esp, 0x18
cmp esi, 0x10018cf0
je 0x1000cbbe
mov ecx, dword [0x10018d04]
cmp ecx, 0xf
jbe 0x1000cb7b
mov eax, dword [0x10018cf0]
inc ecx
cmp ecx, 0x1000
jb 0x1000cb71
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x1000c807
mov eax, edx
push ecx
push eax
call fcn.1000ef69
add esp, 8
mov dword [0x10018d00], 0
mov dword [0x10018d04], 0xf
mov byte [0x10018cf0], 0
movups xmm0, xmmword [esi]
movups xmmword [0x10018cf0], xmm0
movq xmm0, qword [esi + 0x10]
movq qword [0x10018d00], xmm0
mov dword [esi + 0x10], 0
mov dword [esi + 0x14], 0xf
mov byte [esi], 0
mov ecx, dword [ebp - 0x3c]
cmp ecx, 0xf
jbe 0x1000d2df
mov edx, dword [ebp - 0x50]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x1000cbec
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x1000c807
push ecx
push edx
call fcn.1000ef69
add esp, 8
jmp 0x1000d2df
cmp eax, 2
jne 0x1000cda8
mov eax, dword [ebp - 0x24]
lea ecx, [ebp - 0x34]
sub esp, 0x18
xorps xmm0, xmm0
cmp dword [ebp - 0x20], 0xf
mov edi, esp
cmova ecx, esi
mov dword [ebp - 0x14], ecx
movups xmmword [edi], xmm0
mov dword [edi + 0x10], 0
mov dword [edi + 0x14], 0
cmp eax, 0x7fffffff
ja 0x1000d3ac
mov dword [edi + 0x14], 0xf
cmp eax, 0xf
ja 0x1000cc52
mov dword [edi + 0x10], eax
movups xmm0, xmmword [ecx]
movups xmmword [edi], xmm0
jmp 0x1000ccda
mov esi, eax
or esi, 0xf
cmp esi, 0x7fffffff
jbe 0x1000cc6e
mov eax, 0x80000000
mov esi, 0x7fffffff
add eax, 0x23
jmp 0x1000cc8f
cmp esi, 0x16
mov ecx, 0x16
cmovb esi, ecx
lea ecx, [esi + 1]
cmp ecx, 0x1000
jb 0x1000ccae
lea eax, [ecx + 0x23]
cmp eax, ecx
jbe 0x1000d3a7
push eax
call fcn.1000ec1f
add esp, 4
test eax, eax
je 0x1000c807
lea ecx, [eax + 0x23]
and ecx, 0xffffffe0
mov dword [ecx - 4], eax
mov eax, dword [ebp - 0x24]
jmp 0x1000ccc4
test ecx, ecx
je 0x1000ccc2
push ecx
call fcn.1000ec1f
mov ecx, eax
add esp, 4
mov eax, dword [ebp - 0x24]
jmp 0x1000ccc4
xor ecx, ecx
mov dword [edi + 0x10], eax
inc eax
push eax
push dword [ebp - 0x14]
mov dword [edi], ecx
push ecx
mov dword [edi + 0x14], esi
call sub.VCRUNTIME140.dll_memcpy
add esp, 0xc
lea ecx, [ebp - 0x50]
call fcn.10004be0
mov esi, eax
add esp, 0x18
cmp esi, 0x10018cd8
je 0x1000cd6b
mov ecx, dword [0x10018cec]
cmp ecx, 0xf
jbe 0x1000cd28
mov eax, dword [0x10018cd8]
inc ecx
cmp ecx, 0x1000
jb 0x1000cd1e
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x1000c807
mov eax, edx
push ecx
push eax
call fcn.1000ef69
add esp, 8
mov dword [0x10018ce8], 0
mov dword [0x10018cec], 0xf
mov byte [0x10018cd8], 0
movups xmm0, xmmword [esi]
movups xmmword [0x10018cd8], xmm0
movq xmm0, qword [esi + 0x10]
movq qword [0x10018ce8], xmm0
mov dword [esi + 0x10], 0
mov dword [esi + 0x14], 0xf
mov byte [esi], 0
mov ecx, dword [ebp - 0x3c]
cmp ecx, 0xf
jbe 0x1000d2df
mov edx, dword [ebp - 0x50]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x1000cd99
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x1000c807
push ecx
push edx
call fcn.1000ef69
add esp, 8
jmp 0x1000d2df
cmp eax, 3
jne 0x1000d2e5
mov eax, dword [ebp - 0x24]
lea ecx, [ebp - 0x34]
sub esp, 0x18
xorps xmm0, xmm0
cmp dword [ebp - 0x20], 0xf
mov edi, esp
cmova ecx, esi
mov dword [ebp - 0x14], ecx
movups xmmword [edi], xmm0
mov dword [edi + 0x10], 0
mov dword [edi + 0x14], 0
cmp eax, 0x7fffffff
ja 0x1000d3ac
mov dword [edi + 0x14], 0xf
cmp eax, 0xf
ja 0x1000cdff
mov dword [edi + 0x10], eax
movups xmm0, xmmword [ecx]
movups xmmword [edi], xmm0
jmp 0x1000ce87
mov esi, eax
or esi, 0xf
cmp esi, 0x7fffffff
jbe 0x1000ce1b
mov eax, 0x80000000
mov esi, 0x7fffffff
add eax, 0x23
jmp 0x1000ce3c
cmp esi, 0x16
mov ecx, 0x16
cmovb esi, ecx
lea ecx, [esi + 1]
cmp ecx, 0x1000
jb 0x1000ce5b
lea eax, [ecx + 0x23]
cmp eax, ecx
jbe 0x1000d3a7
push eax
call fcn.1000ec1f
add esp, 4
test eax, eax
je 0x1000c807
lea ecx, [eax + 0x23]
and ecx, 0xffffffe0
mov dword [ecx - 4], eax
mov eax, dword [ebp - 0x24]
jmp 0x1000ce71
test ecx, ecx
je 0x1000ce6f
push ecx
call fcn.1000ec1f
mov ecx, eax
add esp, 4
mov eax, dword [ebp - 0x24]
jmp 0x1000ce71
xor ecx, ecx
mov dword [edi + 0x10], eax
inc eax
push eax
push dword [ebp - 0x14]
mov dword [edi], ecx
push ecx
mov dword [edi + 0x14], esi
call sub.VCRUNTIME140.dll_memcpy
add esp, 0xc
lea ecx, [ebp - 0x50]
call fcn.10004be0
mov esi, eax
add esp, 0x18
cmp esi, 0x10018d08
je 0x1000cf18
mov ecx, dword [0x10018d1c]
cmp ecx, 0xf
jbe 0x1000ced5
mov eax, dword [0x10018d08]
inc ecx
cmp ecx, 0x1000
jb 0x1000cecb
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x1000c807
mov eax, edx
push ecx
push eax
call fcn.1000ef69
add esp, 8
mov dword [0x10018d18], 0
mov dword [0x10018d1c], 0xf
mov byte [0x10018d08], 0
movups xmm0, xmmword [esi]
movups xmmword [0x10018d08], xmm0
movq xmm0, qword [esi + 0x10]
movq qword [0x10018d18], xmm0
mov dword [esi + 0x10], 0
mov dword [esi + 0x14], 0xf
mov byte [esi], 0
mov ecx, dword [ebp - 0x3c]
cmp ecx, 0xf
jbe 0x1000cf4c
mov edx, dword [ebp - 0x50]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x1000cf42
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x1000c807
push ecx
push edx
call fcn.1000ef69
add esp, 8
sub esp, 0x18
xorps xmm0, xmm0
mov esi, esp
push 0x20
movups xmmword [esi], xmm0
mov dword [esi + 0x10], 0
mov dword [esi + 0x14], 0xf
call fcn.1000ec1f
mov dword [esi], eax
add esp, 4
mov dword [esi + 0x10], 0x13
mov dword [esi + 0x14], 0x1f
movups xmm0, xmmword [str.WZCobskvCicdow1zybd]
movups xmmword [eax], xmm0
mov cx, word [0x10014bc4]
mov word [eax + 0x10], cx
mov cl, byte [0x10014bc6]
mov byte [eax + 0x12], cl
lea ecx, [ebp - 0x50]
mov byte [eax + 0x13], 0
call fcn.10004be0
add esp, 0x18
mov edx, eax
cmp dword [eax + 0x14], 0xf
jbe 0x1000cfb6
mov edx, dword [eax]
cmp dword [0x10018d1c], 0xf
mov ecx, 0x10018d08
mov esi, dword [0x10018d18]
cmova ecx, dword [0x10018d08]
cmp esi, dword [eax + 0x10]
jne 0x1000d034
sub esi, 4
jb 0x1000cff1
nop dword [eax]
mov eax, dword [ecx]
cmp eax, dword [edx]
jne 0x1000cff6
add ecx, 4
add edx, 4
sub esi, 4
jae 0x1000cfe0
cmp esi, 0xfffffffc
je 0x1000d02a
mov al, byte [ecx]
cmp al, byte [edx]
jne 0x1000d023
cmp esi, 0xfffffffd
je 0x1000d02a
mov al, byte [ecx + 1]
cmp al, byte [edx + 1]
jne 0x1000d023
cmp esi, 0xfffffffe
je 0x1000d02a
mov al, byte [ecx + 2]
cmp al, byte [edx + 2]
jne 0x1000d023
cmp esi, 0xffffffff
je 0x1000d02a
mov al, byte [ecx + 3]
cmp al, byte [edx + 3]
je 0x1000d02a
sbb eax, eax
or eax, 1
jmp 0x1000d02c
xor eax, eax
mov byte [ebp - 0x15], 1
test eax, eax
je 0x1000d038
mov byte [ebp - 0x15], 0
mov ecx, dword [ebp - 0x3c]
cmp ecx, 0xf
jbe 0x1000d06c
mov edx, dword [ebp - 0x50]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x1000d062
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x1000c807
push ecx
push edx
call fcn.1000ef69
add esp, 8
cmp byte [ebp - 0x15], 0
je 0x1000d39d
call fcn.1000bfb0
mov esi, dword [0x1001952c]
sub esp, 0x18
mov edx, esp
mov dword [ebp - 0x14], esp
mov ecx, esi
xorps xmm0, xmm0
movups xmmword [edx], xmm0
mov dword [edx + 0x10], 0
lea edi, [ecx + 1]
mov dword [edx + 0x14], 0
mov al, byte [ecx]
inc ecx
test al, al
jne 0x1000d0a2
sub ecx, edi
push ecx
push esi
mov ecx, edx
call fcn.10001890
mov byte [ebp - 4], 3
sub esp, 0x18
mov ecx, esp
xorps xmm0, xmm0
movups xmmword [ecx], xmm0
mov dword [ecx + 0x10], 0xe
mov dword [ecx + 0x14], 0xf
movq xmm0, qword [str..._servers.dat]
movq qword [ecx], xmm0
mov eax, dword [0x10014bd0]
mov dword [ecx + 8], eax
mov ax, word [0x10014bd4]
mov word [ecx + 0xc], ax
mov byte [ecx + 0xe], 0
mov byte [ebp - 4], 2
call fcn.1000c270
mov edi, dword [sym.imp.KERNEL32.dll_VirtualProtect]
lea eax, [ebp - 0x14]
add esp, 0x30
mov word [ebp - 0x38], 0xeb
mov dword [ebp - 0x14], 0
push eax
push 0x40
push 2
push 0xf033f5
call edi
push 0
push 2
lea eax, [ebp - 0x38]
push eax
push 0xf033f5
call dword [sym.imp.KERNEL32.dll_GetCurrentProcess]
mov esi, dword [sym.imp.KERNEL32.dll_WriteProcessMemory]
push eax
call esi
lea eax, [ebp - 0x14]
push eax
push dword [ebp - 0x14]
push 2
push 0xf033f5
call edi
call fcn.10008070
lea eax, [ebp - 0x14]
mov dword [ebp - 0x14], 0
push eax
push 0x40
push 4
push 0xcb0d96
call edi
push 0
push 4
push 0x10008370
push 0xcb0d96
call dword [sym.imp.KERNEL32.dll_GetCurrentProcess]
push eax
call esi
lea eax, [ebp - 0x14]
push eax
push dword [ebp - 0x14]
push 4
push 0xcb0d96
call edi
lea eax, [ebp - 0x14]
mov dword [ebp - 0x14], 0
push eax
push 0x40
push 4
push 0xcb0d97
call edi
push 0
push 4
push 0x10008370
push 0xcb0d97
call dword [sym.imp.KERNEL32.dll_GetCurrentProcess]
push eax
call esi
lea eax, [ebp - 0x14]
push eax
push dword [ebp - 0x14]
push 4
push 0xcb0d97
call edi
push str.DbgUiRemoteBreakin
push str.ntdll.dll
call dword [sym.imp.KERNEL32.dll_GetModuleHandleW]
push eax
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
mov esi, eax
lea eax, [ebp - 0x54]
push eax
push 0x40
push 6
push esi
call edi
test eax, eax
je 0x1000d210
mov eax, 0x90909090
mov ecx, 0x1000e870
mov dword [esi], eax
mov word [esi + 4], ax
mov eax, dword [ecx]
mov dword [esi], eax
mov ax, word [ecx + 4]
mov word [esi + 4], ax
push str.DbgBreakPoint
push str.ntdll.dll
mov dword [ebp - 0x14], 0
call dword [sym.imp.KERNEL32.dll_GetModuleHandleW]
push eax
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
mov esi, eax
test esi, esi
je 0x1000d246
lea eax, [ebp - 0x14]
push eax
push 0x40
push 1
push esi
call edi
test eax, eax
je 0x1000d246
mov byte [esi], 0xc3
movups xmm0, xmmword [str.ini_magictype.dat]
mov ax, word [0x10014b04]
lea esi, [ebp - 0x4c]
mov word [ebp - 0x3c], ax
lea ecx, [esi + 1]
movups xmmword [ebp - 0x4c], xmm0
mov al, byte [esi]
inc esi
test al, al
jne 0x1000d261
lea eax, [ebp - 0x14]
mov dword [ebp - 0x14], 0
push eax
push 0x40
sub esi, ecx
push esi
push 0x11b96ec
call edi
push 0
push esi
lea eax, [ebp - 0x4c]
push eax
push 0x11b96ec
call dword [sym.imp.KERNEL32.dll_GetCurrentProcess]
push eax
call dword [sym.imp.KERNEL32.dll_WriteProcessMemory]
lea eax, [ebp - 0x14]
push eax
push dword [ebp - 0x14]
push esi
push 0x11b96ec
call edi
cmp dword [0x100196a0], 0xf
mov eax, 0x1001968c
mov edi, dword [sym.imp.api_ms_win_crt_filesystem_l1_1_0.dll_remove]
cmova eax, dword [0x1001968c]
push eax
call edi
add esp, 4
mov eax, 0x100196a4
cmp dword [0x100196b8], 0xf
cmova eax, dword [0x100196a4]
push eax
call edi
add esp, 4
mov eax, dword [ebp - 0x1c]
mov esi, dword [ebp - 0x34]
inc eax
lea ecx, [ebp - 0x110]
mov dword [ebp - 0x1c], eax
mov eax, dword [ebp - 0x110]
add ecx, dword [eax + 4]
call dword [sym.imp.MSVCP140.dll_public:_bool___thiscall_std::ios_base::operator_bool_void_const]
test al, al
jne 0x1000c870
mov edi, dword [ebp - 0x20]
cmp edi, 0xf
jbe 0x1000d340
lea ecx, [edi + 1]
mov eax, esi
cmp ecx, 0x1000
jb 0x1000d336
mov esi, dword [eax - 4]
add ecx, 0x23
sub eax, esi
add eax, 0xfffffffc
cmp eax, 0x1f
jbe 0x1000d336
call dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
mov esi, dword [ebp - 0x34]
jmp 0x1000d309
push ecx
push esi
call fcn.1000ef69
add esp, 8
mov eax, dword [ebp - 0x110]
mov eax, dword [eax + 4]
mov dword [ebp + eax - method.std::basic_ifstream_char__struct_std::char_traits_char__.virtual_0], vtable.std::basic_ifstream_char__struct_std::char_traits_char__.0
mov eax, dword [ebp - 0x110]
mov ecx, dword [eax + 4]
lea eax, [ecx - 0x70]
mov dword [ebp + ecx - 0x114], eax
lea ecx, [ebp - 0x100]
call fcn.1000ddb0
lea ecx, [ebp - 0xf8]
call dword [sym.imp.MSVCP140.dll_public_virtual:_void___thiscall_std::basic_istream_char__struct_std::char_traits_char__::destructor_void_]
lea ecx, [ebp - 0xa0]
call dword [sym.imp.MSVCP140.dll_public_virtual:_void___thiscall_std::basic_ios_char__struct_std::char_traits_char__::destructor_void_]
mov ecx, dword [ebp - 0xc]
pop edi
mov dword fs:[0], ecx
pop esi
mov esp, ebp
pop ebp
mov esp, ebx
pop ebx
ret
mov ecx, 5
call fcn.1000e8c0
call fcn.10001480
call fcn.10001520
int3