Function at 0x100c0df
Capabilities:
Install driver

Disassembly:
mov edi, edi
push ebp
mov ebp, esp
sub esp, 0x214
push ebx
push esi
push edi
xor ebx, ebx
push ebx
xor edi, edi
inc edi
push edi
push ebx
call fcn.01015fbb
test al, al
je 0x100cc68
push ebx
push edi
push ebx
call fcn.0101513d
test al, al
je 0x100cc68
push ebx
push edi
push ebx
call fcn.01014af3
test al, al
je 0x100cc68
push ebx
push edi
push ebx
call fcn.010146ad
test al, al
je 0x100cc68
call fcn.01012e4f
lea ecx, [ebp - 0x20]
call fcn.0100e30b
lea ecx, [ebp - 0x38]
call fcn.0100e30b
lea ecx, [ebp - 0xa4]
call fcn.0100e30b
lea ecx, [ebp - 0x58]
call fcn.0100e30b
lea ecx, [ebp - 0x8c]
call fcn.0100e30b
lea ecx, [ebp - 0xd0]
call fcn.0100e30b
lea ecx, [ebp - 0xec]
call fcn.0100e30b
lea ecx, [ebp - 0xb8]
call fcn.0100e2bc
lea ecx, [ebp - 0x70]
mov byte [ebp - 1], bl
mov byte [ebp - 3], bl
mov byte [ebp - 2], bl
mov byte [ebp - 5], bl
mov byte [ebp - 4], bl
call fcn.0100e30b
mov esi, dword [sym.imp.ntdll.dll_RtlAdjustPrivilege]
lea eax, [ebp - 0x74]
push eax
push ebx
push edi
push 0xa
call esi
push 0x1001260
lea eax, [ebp - 0xfc]
push eax
call dword [sym.imp.ntdll.dll_RtlInitUnicodeString]
lea eax, [ebp - 0xfc]
push eax
call dword [sym.imp.ntdll.dll_NtLoadDriver]
lea eax, [ebp - 0x74]
push eax
push ebx
push dword [ebp - 0x74]
push 0xa
call esi
cmp dword [ebp + 8], 3
jl 0x100cc11
mov esi, dword [ebp + 0xc]
push 0xffffffffffffffff
push dword [esi + 4]
lea ecx, [ebp - 0x20]
call fcn.0100dd27
test al, al
je 0x100cc11
push 0xffffffffffffffff
push dword [esi + 4]
lea ecx, [ebp - 0x70]
call fcn.0100dd27
test al, al
je 0x100cc11
lea eax, [ebp - 0x70]
push eax
lea eax, [ebp - 0x20]
push eax
call fcn.0100e807
test al, al
jne 0x100c237
push 0xffffffffffffffff
push ebx
lea eax, [ebp - 0x20]
push eax
lea ecx, [ebp - 0x70]
call fcn.0100dc9f
test al, al
je 0x100cc11
push 2
pop eax
cmp dword [ebp + 8], eax
mov dword [ebp - 0x3c], eax
jle 0x100c512
mov ebx, dword [sym.imp.ntdll.dll__stricmp]
mov eax, dword [ebp + 0xc]
mov ecx, dword [ebp - 0x3c]
lea edi, [eax + ecx*4]
mov ecx, dword [edi]
mov eax, ecx
lea esi, [eax + 1]
mov dl, byte [eax]
inc eax
test dl, dl
jne 0x100c25c
sub eax, esi
cmp eax, 5
jb 0x100c2b0
mov al, byte [ecx]
cmp al, 0x2f
je 0x100c274
cmp al, 0x2d
jne 0x100c2b0
mov al, byte [ecx + 1]
cmp al, 0x66
je 0x100c27f
cmp al, 0x46
jne 0x100c2b0
mov al, byte [ecx + 2]
cmp al, 0x73
je 0x100c28a
cmp al, 0x53
jne 0x100c2b0
cmp byte [ecx + 3], 0x3a
jne 0x100c2b0
cmp dword [ebp - 0x2c], 0
jne 0x100c6cc
add ecx, 4
push 0xffffffffffffffff
push ecx
lea ecx, [ebp - 0x38]
call fcn.0100dd27
test al, al
je 0x100c6cc
push 0x100125c
push dword [edi]
call ebx
test eax, eax
pop ecx
pop ecx
je 0x100c2ce
push 0x1001258
push dword [edi]
call ebx
test eax, eax
pop ecx
pop ecx
jne 0x100c2d2
mov byte [ebp - 1], 1
push 0x1001254
push dword [edi]
call ebx
test eax, eax
pop ecx
pop ecx
je 0x100c2f0
push 0x1001250
push dword [edi]
call ebx
test eax, eax
pop ecx
pop ecx
jne 0x100c2f4
mov byte [ebp - 5], 1
push 0x100124c
push dword [edi]
call ebx
test eax, eax
pop ecx
pop ecx
je 0x100c312
push 0x1001248
push dword [edi]
call ebx
test eax, eax
pop ecx
pop ecx
jne 0x100c316
mov byte [ebp - 4], 1
mov eax, dword [edi]
mov ecx, eax
lea esi, [ecx + 1]
mov dl, byte [ecx]
inc ecx
test dl, dl
jne 0x100c31d
sub ecx, esi
cmp ecx, 0xa
jb 0x100c3c6
mov cl, byte [eax]
cmp cl, 0x2f
je 0x100c33f
cmp cl, 0x2d
jne 0x100c3c6
mov cl, byte [eax + 1]
cmp cl, 0x63
je 0x100c34c
cmp cl, 0x43
jne 0x100c3c6
mov cl, byte [eax + 2]
cmp cl, 0x76
je 0x100c359
cmp cl, 0x56
jne 0x100c3c6
mov cl, byte [eax + 3]
cmp cl, 0x74
je 0x100c366
cmp cl, 0x54
jne 0x100c3c6
mov cl, byte [eax + 4]
cmp cl, 0x61
je 0x100c373
cmp cl, 0x41
jne 0x100c3c6
mov cl, byte [eax + 5]
cmp cl, 0x72
je 0x100c380
cmp cl, 0x52
jne 0x100c3c6
mov cl, byte [eax + 6]
cmp cl, 0x65
je 0x100c38d
cmp cl, 0x45
jne 0x100c3c6
mov cl, byte [eax + 7]
cmp cl, 0x61
je 0x100c39a
cmp cl, 0x41
jne 0x100c3c6
cmp byte [eax + 8], 0x3a
jne 0x100c3c6
cmp dword [ebp - 0x98], 0
jne 0x100c6cc
push 0xffffffffffffffff
add eax, 9
push eax
lea ecx, [ebp - 0xa4]
call fcn.0100dd27
test al, al
je 0x100c6cc
mov eax, dword [edi]
mov ecx, eax
lea esi, [ecx + 1]
mov dl, byte [ecx]
inc ecx
test dl, dl
jne 0x100c3cd
sub ecx, esi
cmp ecx, 9
jb 0x100c453
mov cl, byte [eax]
cmp cl, 0x2f
je 0x100c3e7
cmp cl, 0x2d
jne 0x100c453
mov cl, byte [eax + 1]
cmp cl, 0x6e
je 0x100c3f4
cmp cl, 0x4e
jne 0x100c453
mov cl, byte [eax + 2]
cmp cl, 0x6f
je 0x100c401
cmp cl, 0x4f
jne 0x100c453
mov cl, byte [eax + 3]
cmp cl, 0x63
je 0x100c40e
cmp cl, 0x43
jne 0x100c453
mov cl, byte [eax + 4]
cmp cl, 0x68
je 0x100c41b
cmp cl, 0x48
jne 0x100c453
mov cl, byte [eax + 5]
cmp cl, 0x6b
je 0x100c428
cmp cl, 0x4b
jne 0x100c453
mov cl, byte [eax + 6]
cmp cl, 0x64
je 0x100c435
cmp cl, 0x44
jne 0x100c453
mov cl, byte [eax + 7]
cmp cl, 0x73
je 0x100c442
cmp cl, 0x53
jne 0x100c453
mov cl, byte [eax + 8]
cmp cl, 0x6b
je 0x100c44f
cmp cl, 0x4b
jne 0x100c453
mov byte [ebp - 3], 1
mov ecx, eax
lea esi, [ecx + 1]
mov dl, byte [ecx]
inc ecx
test dl, dl
jne 0x100c458
sub ecx, esi
cmp ecx, 0xb
jb 0x100c4fe
mov cl, byte [eax]
cmp cl, 0x2f
je 0x100c47a
cmp cl, 0x2d
jne 0x100c4fe
mov cl, byte [eax + 1]
cmp cl, 0x6e
je 0x100c487
cmp cl, 0x4e
jne 0x100c4fe
mov cl, byte [eax + 2]
cmp cl, 0x6f
je 0x100c494
cmp cl, 0x4f
jne 0x100c4fe
mov cl, byte [eax + 3]
cmp cl, 0x73
je 0x100c4a1
cmp cl, 0x53
jne 0x100c4fe
mov cl, byte [eax + 4]
cmp cl, 0x65
je 0x100c4ae
cmp cl, 0x45
jne 0x100c4fe
mov cl, byte [eax + 5]
cmp cl, 0x63
je 0x100c4bb
cmp cl, 0x43
jne 0x100c4fe
mov cl, byte [eax + 6]
cmp cl, 0x75
je 0x100c4c8
cmp cl, 0x55
jne 0x100c4fe
mov cl, byte [eax + 7]
cmp cl, 0x72
je 0x100c4d5
cmp cl, 0x52
jne 0x100c4fe
mov cl, byte [eax + 8]
cmp cl, 0x69
je 0x100c4e2
cmp cl, 0x49
jne 0x100c4fe
mov cl, byte [eax + 9]
cmp cl, 0x74
je 0x100c4ef
cmp cl, 0x54
jne 0x100c4fe
mov al, byte [eax + 0xa]
cmp al, 0x79
je 0x100c4fa
cmp al, 0x59
jne 0x100c4fe
mov byte [ebp - 2], 1
inc dword [ebp - 0x3c]
mov eax, dword [ebp - 0x3c]
cmp eax, dword [ebp + 8]
jl 0x100c24c
xor edi, edi
xor ebx, ebx
inc edi
cmp dword [ebp - 0x2c], ebx
je 0x100cc11
push 0x40
call fcn.01013e0e
cmp byte [ebp - 5], 0
pop ecx
je 0x100c536
cmp eax, ebx
je 0x100c545
mov ecx, eax
call fcn.01013b44
jmp 0x100c541
cmp eax, ebx
je 0x100c545
mov ecx, eax
call fcn.0101301e
mov esi, eax
jmp 0x100c547
xor esi, esi
cmp esi, ebx
je 0x100cc11
push ebx
mov ecx, esi
call fcn.01012fb0
test al, al
je 0x100cc11
push 0xffffffffffffffff
push 0x1001244
lea ecx, [ebp - 0x8c]
mov byte [esi + 0x24], 1
call fcn.0100dd27
test al, al
je 0x100cc6f
push 0xffffffffffffffff
push 0x100123c
lea ecx, [ebp - 0xd0]
call fcn.0100dd27
test al, al
je 0x100cc6f
lea eax, [ebp - 0x3d]
push eax
lea eax, [ebp - 0x20]
push eax
call fcn.0100eb9a
test al, al
je 0x100c5c9
mov eax, dword [esi]
push 3
push ebx
push 0x75d8
mov ecx, esi
call dword [eax + 0xc]
push 0x10011dc
push esi
call fcn.0100d58b
pop ecx
pop ecx
jmp 0x100c758
push ebx
push ebx
lea eax, [ebp - 0x58]
push eax
lea eax, [ebp - 0x20]
push eax
call fcn.0100f364
test al, al
jne 0x100c602
mov eax, dword [esi]
push 3
push ebx
push 0xbcb
mov ecx, esi
call dword [eax + 0xc]
lea eax, [ebp - 0x70]
push eax
push 0x1001238
push esi
call fcn.0100d58b
add esp, 0xc
jmp 0x100c758
cmp dword [0x1060050], 0x20001
mov ebx, dword [sym.imp.ntdll.dll__wcsicmp]
jne 0x100c6df
lea ecx, [ebp - 0x214]
call fcn.010118d7
xor eax, eax
push eax
push eax
push eax
push esi
lea eax, [ebp - 0x20]
push eax
lea ecx, [ebp - 0x214]
call fcn.01011925
test al, al
jne 0x100c647
push 3
push 0
push 0x75a2
jmp 0x100c68f
push dword [ebp - 0x84]
push dword [ebp - 0x50]
call ebx
test eax, eax
pop ecx
pop ecx
lea ecx, [ebp - 0x214]
jne 0x100c67a
call fcn.0100feda
lea ecx, [ebp - 0x214]
mov edi, eax
call fcn.0100fece
cmp eax, edi
jne 0x100c686
lea ecx, [ebp - 0x214]
call fcn.0100feda
cmp eax, 0x800
jne 0x100c6d4
push 3
push 0
push 0x75af
mov eax, dword [esi]
mov ecx, esi
call dword [eax + 0xc]
lea eax, [ebp - 0x38]
push eax
lea eax, [ebp - 0x20]
push eax
push 0x1001230
push esi
call fcn.0100d58b
add esp, 0x10
lea eax, [ebp - 0x20]
push eax
push esi
call fcn.0100c018
push dword [ebp + 0xc]
push dword [ebp + 8]
call fcn.0100bf0a
lea ecx, [ebp - 0x214]
call fcn.010108cc
xor edi, edi
inc edi
jmp 0x100cc11
lea ecx, [ebp - 0x214]
call fcn.010108cc
push dword [ebp - 0x50]
mov edi, dword [sym.imp.ntdll.dll__wcsupr]
call edi
push dword [ebp - 0x30]
call edi
push dword [ebp - 0x30]
push dword [ebp - 0x50]
call ebx
add esp, 0x10
test eax, eax
jne 0x100c705
mov byte [esi + 0x24], al
xor edi, edi
jmp 0x100c758
mov eax, dword [esi]
push 3
push 0
push 0xbc7
mov ecx, esi
call dword [eax + 0xc]
lea eax, [ebp - 0x58]
push eax
mov edi, 0x1001238
push edi
push esi
call fcn.0100d58b
add esp, 0xc
push 0
lea eax, [ebp - 0x38]
push eax
call fcn.0100ea3f
test al, al
jne 0x100c772
mov eax, dword [esi]
push 3
push 0
push 0x75d5
mov ecx, esi
call dword [eax + 0xc]
lea eax, [ebp - 0x38]
push eax
push edi
push esi
call fcn.0100d58b
xor edi, edi
add esp, 0xc
inc edi
lea eax, [ebp - 0x20]
push eax
push esi
call fcn.0100c018
push dword [ebp + 0xc]
push dword [ebp + 8]
call fcn.0100bf0a
jmp 0x100cc11
or dword [ebp - 0xf0], 0xffffffff
lea eax, [ebp - 0xf4]
xor edi, edi
push eax
inc edi
push edi
mov dword [ebp - 0xf4], 0xfe363c80
call dword [sym.imp.ntdll.dll_NtDelayExecution]
push dword [ebp - 0x84]
push dword [ebp - 0x50]
call ebx
test eax, eax
pop ecx
pop ecx
je 0x100c7d6
push dword [ebp - 0xc8]
push dword [ebp - 0x50]
call ebx
test eax, eax
pop ecx
pop ecx
je 0x100c7d6
mov eax, dword [esi]
push 3
push 0
push 0xbca
mov ecx, esi
call dword [eax + 0xc]
lea eax, [ebp - 0x58]
push eax
push 0x1001224
push 0x100121c
jmp 0x100c800
lea eax, [ebp - 0x38]
push eax
call fcn.0100f8c8
test eax, eax
je 0x100c80e
mov eax, dword [esi]
push 3
push 0
push 0x759a
mov ecx, esi
call dword [eax + 0xc]
lea eax, [ebp - 0x38]
push eax
lea eax, [ebp - 0x58]
push eax
push 0x1001230
push esi
call fcn.0100d58b
add esp, 0x10
jmp 0x100c758
lea ecx, [ebp - 0x214]
call fcn.010118d7
xor ebx, ebx
push ebx
push ebx
push ebx
push esi
lea eax, [ebp - 0x20]
push eax
lea ecx, [ebp - 0x214]
call fcn.01011925
test al, al
jne 0x100c85c
mov eax, dword [esi]
push 3
push ebx
push 0x75af
mov ecx, esi
call dword [eax + 0xc]
lea eax, [ebp - 0x38]
push eax
lea eax, [ebp - 0x20]
push eax
push 0x1001230
push esi
call fcn.0100d58b
add esp, 0x10
jmp 0x100cbf1
mov eax, dword [ebp - 0x10c]
sub eax, ebx
je 0x100cbd5
sub eax, 3
je 0x100cbcb
dec eax
je 0x100cbc1
lea ecx, [ebp - 0x214]
call fcn.010108cc
cmp byte [ebp - 3], 0
jne 0x100c8da
push 0x2e8
call fcn.01013e0e
cmp eax, ebx
pop ecx
je 0x100c8a5
mov ecx, eax
call fcn.01012c25
mov edi, eax
jmp 0x100c8a7
xor edi, edi
xor ebx, ebx
cmp edi, ebx
je 0x100c91a
push ebx
push ebx
lea eax, [ebp - 0x20]
push eax
push esi
mov ecx, edi
call fcn.01012d00
test al, al
je 0x100c912
push ebx
push ebx
push ebx
push ebx
push ebx
push esi
push 1
mov ecx, edi
call fcn.01012a88
test al, al
je 0x100c912
mov eax, dword [edi]
push 1
mov ecx, edi
call dword [eax]
mov eax, dword [esi]
push 3
push 0
push 0x419
mov ecx, esi
call dword [eax + 0xc]
mov ebx, 0x10011dc
push ebx
push esi
call fcn.0100d58b
push 0x128
call fcn.01013e0e
add esp, 0xc
test eax, eax
je 0x100c956
mov ecx, eax
call fcn.01012547
mov edi, eax
jmp 0x100c958
mov eax, dword [edi]
push 1
mov ecx, edi
call dword [eax]
mov eax, dword [esi]
push 3
push ebx
push 0x75a2
mov ecx, esi
call dword [eax + 0xc]
lea eax, [ebp - 0x38]
push eax
lea eax, [ebp - 0x70]
push eax
push 0x1001230
push esi
call fcn.0100d58b
add esp, 0x10
lea eax, [ebp - 0x20]
push eax
push esi
call fcn.0100c018
push dword [ebp + 0xc]
push dword [ebp + 8]
call fcn.0100bf0a
jmp 0x100c9d0
xor edi, edi
test edi, edi
jne 0x100c976
mov eax, dword [esi]
push 3
push edi
push 0x75c8
mov ecx, esi
call dword [eax + 0xc]
push ebx
push esi
call fcn.0100d58b
pop ecx
pop ecx
jmp 0x100c93f
xor ebx, ebx
push ebx
push ebx
push esi
lea eax, [ebp - 0x20]
push eax
mov ecx, edi
call fcn.01012594
test al, al
mov eax, dword [esi]
mov ecx, esi
push 3
jne 0x100ca2f
push ebx
push 0x75af
call dword [eax + 0xc]
lea eax, [ebp - 0x38]
push eax
lea eax, [ebp - 0x20]
push eax
push 0x1001230
push esi
call fcn.0100d58b
add esp, 0x10
lea eax, [ebp - 0x20]
push eax
push esi
call fcn.0100c018
push dword [ebp + 0xc]
push dword [ebp + 8]
call fcn.0100bf0a
mov eax, dword [edi]
push 1
mov ecx, edi
call dword [eax]
lea ecx, [ebp - 0x70]
call fcn.0100e15d
lea ecx, [ebp - 0xb8]
call fcn.0100dbcc
lea ecx, [ebp - 0xec]
call fcn.0100e15d
lea ecx, [ebp - 0xd0]
call fcn.0100e15d
lea ecx, [ebp - 0x8c]
call fcn.0100e15d
lea ecx, [ebp - 0x58]
call fcn.0100e15d
lea ecx, [ebp - 0xa4]
call fcn.0100e15d
lea ecx, [ebp - 0x38]
call fcn.0100e15d
lea ecx, [ebp - 0x20]
call fcn.0100e15d
xor eax, eax
inc eax
jmp 0x100cc6a
push 0
push 0x75a0
call dword [eax + 0xc]
lea eax, [ebp - 0x38]
push eax
lea eax, [ebp - 0x70]
push eax
mov ebx, 0x1001230
push ebx
push esi
call fcn.0100d58b
mov cl, byte [ebp - 2]
add esp, 0x10
lea eax, [ebp - 0xd4]
push eax
mov al, byte [ebp - 4]
neg al
sbb eax, eax
and eax, 8
neg cl
sbb ecx, ecx
and ecx, 0x10
or eax, ecx
xor ecx, ecx
cmp byte [ebp - 1], cl
setne cl
or eax, ecx
push eax
push esi
lea eax, [ebp - 0xa4]
push eax
lea eax, [ebp - 0x38]
push eax
push edi
call fcn.0100fad0
mov byte [ebp - 1], al
mov eax, dword [edi]
push 1
mov ecx, edi
call dword [eax]
cmp byte [ebp - 1], 0
push 3
je 0x100cabd
mov eax, dword [esi]
push 0
push 0x75ae
mov ecx, esi
call dword [eax + 0xc]
push 0x10011dc
push esi
call fcn.0100d58b
pop ecx
pop ecx
jmp 0x100cb48
mov eax, dword [ebp - 0xd4]
xor ecx, ecx
push ecx
sub eax, ecx
mov ecx, esi
je 0x100cb2c
dec eax
je 0x100cb1d
dec eax
je 0x100cb0a
sub eax, 4
je 0x100cb01
sub eax, 3
mov eax, dword [esi]
je 0x100cae5
push 0x75af
jmp 0x100cb33
push 0x75f5
call dword [eax + 0xc]
lea eax, [ebp - 0x70]
push eax
push 0x1001238
push esi
call fcn.0100d58b
add esp, 0xc
jmp 0x100cb48
mov eax, dword [esi]
push 0x75eb
jmp 0x100caea
mov eax, dword [esi]
push 0x759a
call dword [eax + 0xc]
lea eax, [ebp - 0x38]
push eax
lea eax, [ebp - 0x58]
jmp 0x100cb3d
mov eax, dword [esi]
push 0x7599
call dword [eax + 0xc]
lea eax, [ebp - 0x38]
jmp 0x100caf0
mov eax, dword [esi]
push 0x75b0
call dword [eax + 0xc]
lea eax, [ebp - 0x38]
push eax
lea eax, [ebp - 0x70]
push eax
push ebx
push esi
call fcn.0100d58b
add esp, 0x10
lea eax, [ebp - 0x20]
push eax
push esi
call fcn.0100c018
push dword [ebp + 0xc]
push dword [ebp + 8]
call fcn.0100bf0a
lea ecx, [ebp - 0x70]
call fcn.0100e15d
lea ecx, [ebp - 0xb8]
call fcn.0100dbcc
lea ecx, [ebp - 0xec]
call fcn.0100e15d
lea ecx, [ebp - 0xd0]
call fcn.0100e15d
lea ecx, [ebp - 0x8c]
call fcn.0100e15d
lea ecx, [ebp - 0x58]
call fcn.0100e15d
lea ecx, [ebp - 0xa4]
call fcn.0100e15d
lea ecx, [ebp - 0x38]
call fcn.0100e15d
lea ecx, [ebp - 0x20]
call fcn.0100e15d
xor eax, eax
cmp byte [ebp - 1], al
sete al
jmp 0x100cc6a
push 3
push ebx
push 0x75f6
jmp 0x100cbdd
push 3
push ebx
push 0x7598
jmp 0x100cbdd
push 3
push ebx
push 0x7597
mov eax, dword [esi]
mov ecx, esi
call dword [eax + 0xc]
push 0x10011dc
push esi
call fcn.0100d58b
pop ecx
pop ecx
lea eax, [ebp - 0x20]
push eax
push esi
call fcn.0100c018
push dword [ebp + 0xc]
push dword [ebp + 8]
call fcn.0100bf0a
lea ecx, [ebp - 0x214]
call fcn.010108cc
lea ecx, [ebp - 0x70]
call fcn.0100e15d
lea ecx, [ebp - 0xb8]
call fcn.0100dbcc
lea ecx, [ebp - 0xec]
call fcn.0100e15d
lea ecx, [ebp - 0xd0]
call fcn.0100e15d
lea ecx, [ebp - 0x8c]
call fcn.0100e15d
lea ecx, [ebp - 0x58]
call fcn.0100e15d
lea ecx, [ebp - 0xa4]
call fcn.0100e15d
lea ecx, [ebp - 0x38]
call fcn.0100e15d
lea ecx, [ebp - 0x20]
call fcn.0100e15d
mov eax, edi
pop edi
pop esi
pop ebx
leave
ret
mov eax, dword [esi]
push 3
push ebx
push 0x75c8
mov ecx, esi
call dword [eax + 0xc]
push 0x10011dc
push esi
call fcn.0100d58b
pop ecx
pop ecx
lea eax, [ebp - 0x20]
push eax
push esi
call fcn.0100c018
jmp 0x100cc11