Function at 0x1000c310
Capabilities:
Set registry value

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x100b5eff
mov eax, dword fs:[0]
push eax
sub esp, 0x128
mov eax, dword [0x100dcd80]
xor eax, ebp
mov dword [ebp - 0x10], eax
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov edx, dword [ebp + 8]
xorps xmm0, xmm0
mov eax, dword [ebp + 0x10]
mov ecx, edx
mov edi, dword [ebp + 0xc]
mov dword [ebp - 0x134], eax
mov eax, dword [ebp + 0x14]
mov dword [ebp - 0x120], edi
lea esi, [ecx + 2]
mov dword [ebp - 0x12c], eax
movups xmmword [ebp - 0xc0], xmm0
mov dword [ebp - 0xb0], 0
mov dword [ebp - 0xac], 0
nop
mov ax, word [ecx]
add ecx, 2
test ax, ax
jne 0x1000c380
sub ecx, esi
sar ecx, 1
push ecx
push edx
lea ecx, [ebp - 0xc0]
call fcn.10007450
push edi
lea eax, [ebp - 0xc0]
mov dword [ebp - 4], 0
push eax
lea eax, [ebp - 0x114]
push eax
call fcn.1002ee10
add esp, 0xc
mov ecx, dword [ebp - 0xac]
mov byte [ebp - 4], 2
cmp ecx, 7
jbe 0x1000c3fe
mov edx, dword [ebp - 0xc0]
lea ecx, [ecx*2 + 2]
mov eax, edx
cmp ecx, 0x1000
jb 0x1000c3f4
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x1000d063
push ecx
push edx
call fcn.1008c554
add esp, 8
xorps xmm0, xmm0
mov dword [ebp - 0x98], 0
xor eax, eax
mov dword [ebp - 0x94], 7
movups xmmword [ebp - 0xa8], xmm0
mov word [ebp - 0xa8], ax
mov byte [ebp - 4], 3
cmp edi, 1
jne 0x1000c50d
lea eax, [ebp - 0xf0]
push 4
push eax
call fcn.1002f4a0
mov esi, eax
lea eax, [ebp - 0xd8]
mov byte [ebp - 4], 4
push 0x1af
push eax
call fcn.1002f4a0
add esp, 0x10
push esi
push eax
push dword [ebp - 0x12c]
lea ecx, [ebp - 0xc0]
mov byte [ebp - 4], 5
call fcn.1000c150
mov ecx, dword [ebp - 0x94]
cmp ecx, 7
jbe 0x1000c4b1
mov edx, dword [ebp - 0xa8]
lea ecx, [ecx*2 + 2]
mov eax, edx
cmp ecx, 0x1000
jb 0x1000c4a7
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x1000d068
push ecx
push edx
call fcn.1008c554
add esp, 8
movups xmm0, xmmword [ebp - 0xc0]
xor eax, eax
lea ecx, [ebp - 0xc0]
mov word [ebp - 0xc0], ax
movups xmmword [ebp - 0xa8], xmm0
movq xmm0, qword [ebp - 0xb0]
movq qword [ebp - 0x98], xmm0
mov dword [ebp - 0xb0], 0
mov dword [ebp - 0xac], 7
call fcn.10007690
lea ecx, [ebp - 0xd8]
call fcn.10007690
lea ecx, [ebp - 0xf0]
jmp 0x1000c5ec
cmp edi, 2
jne 0x1000c5f5
lea eax, [ebp - 0xd8]
push 0x18
push eax
call fcn.1002f4a0
mov esi, eax
lea eax, [ebp - 0xf0]
mov byte [ebp - 4], 6
push 0x1af
push eax
call fcn.1002f4a0
add esp, 0x10
push esi
push eax
push dword [ebp - 0x12c]
lea ecx, [ebp - 0xc0]
mov byte [ebp - 4], 7
call fcn.1000c150
mov ecx, dword [ebp - 0x94]
cmp ecx, 7
jbe 0x1000c595
mov edx, dword [ebp - 0xa8]
lea ecx, [ecx*2 + 2]
mov eax, edx
cmp ecx, 0x1000
jb 0x1000c58b
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x1000d06d
push ecx
push edx
call fcn.1008c554
add esp, 8
movups xmm0, xmmword [ebp - 0xc0]
xor eax, eax
lea ecx, [ebp - 0xc0]
mov word [ebp - 0xc0], ax
movups xmmword [ebp - 0xa8], xmm0
movq xmm0, qword [ebp - 0xb0]
movq qword [ebp - 0x98], xmm0
mov dword [ebp - 0xb0], 0
mov dword [ebp - 0xac], 7
call fcn.10007690
lea ecx, [ebp - 0xf0]
call fcn.10007690
lea ecx, [ebp - 0xd8]
mov byte [ebp - 4], 3
call fcn.10007690
cmp dword [ebp - 0x94], 7
lea ecx, [ebp - 0x11c]
push 0
push ecx
push 0
push 0x20106
push 0
push 0
lea eax, [ebp - 0xa8]
mov dword [ebp - 0x11c], 0
cmova eax, dword [ebp - 0xa8]
push 0
push eax
push reloc.WS2_32.dll_bind
call dword [sym.imp.ADVAPI32.dll_RegCreateKeyExW]
push dword [ebp - 0x11c]
mov edi, dword [sym.imp.ADVAPI32.dll_RegCloseKey]
call edi
mov eax, dword [ebp - 0x120]
cmp eax, 1
jne 0x1000c983
mov eax, dword [0x100ba754]
xorps xmm0, xmm0
movups xmmword [ebp - 0xd8], xmm0
mov dword [ebp - 0xd8], eax
mov ax, word [0x100ba758]
mov word [ebp - 0xd4], ax
mov al, byte [0x100ba75a]
mov dword [ebp - 0xc8], 7
mov dword [ebp - 0xc4], 0xf
mov byte [ebp - 0xd2], al
mov byte [ebp - 0xd1], 0
lea eax, [ebp - 0xc0]
mov byte [ebp - 4], 8
push 0x1eb
push eax
call fcn.1002f1b0
add esp, 8
lea ecx, [ebp - 0x118]
cmp dword [ebp - 0x94], 7
mov esi, eax
lea eax, [ebp - 0xa8]
cmova eax, dword [ebp - 0xa8]
push ecx
push 0x20106
push 0
push eax
push reloc.WS2_32.dll_bind
call dword [sym.imp.ADVAPI32.dll_RegOpenKeyExW]
test eax, eax
jne 0x1000c725
cmp dword [ebp - 0xc4], 0xf
lea eax, [ebp - 0xd8]
cmova eax, dword [ebp - 0xd8]
cmp dword [esi + 0x14], 0xf
jbe 0x1000c702
mov esi, dword [esi]
push dword [ebp - 0xc8]
push eax
push 1
push esi
push 0x100ba720
push dword [ebp - 0x118]
call dword [sym.imp.SHLWAPI.dll_SHSetValueA]
push dword [ebp - 0x118]
call edi
mov ecx, dword [ebp - 0xac]
cmp ecx, 0xf
jbe 0x1000c75f
mov edx, dword [ebp - 0xc0]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x1000c755
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x1000d072
push ecx
push edx
call fcn.1008c554
add esp, 8
mov ecx, dword [ebp - 0xc4]
mov dword [ebp - 0xb0], 0
mov dword [ebp - 0xac], 0xf
mov byte [ebp - 0xc0], 0
mov byte [ebp - 4], 3
cmp ecx, 0xf
jbe 0x1000c7b8
mov edx, dword [ebp - 0xd8]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x1000c7ae
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x1000d072
push ecx
push edx
call fcn.1008c554
add esp, 8
lea eax, [ebp - 0xd8]
push 0x15
push eax
call fcn.1002f1b0
mov esi, eax
lea eax, [ebp - 0xc0]
mov byte [ebp - 4], 9
push 0x1ec
push eax
call fcn.1002f1b0
add esp, 0x10
mov dword [ebp - 0x124], eax
cmp dword [ebp - 0x94], 7
lea ecx, [ebp - 0x118]
lea eax, [ebp - 0xa8]
cmova eax, dword [ebp - 0xa8]
push ecx
push 0x20106
push 0
push eax
push reloc.WS2_32.dll_bind
call dword [sym.imp.ADVAPI32.dll_RegOpenKeyExW]
test eax, eax
jne 0x1000c84f
cmp dword [esi + 0x14], 0xf
mov ecx, dword [esi + 0x10]
jbe 0x1000c823
mov esi, dword [esi]
mov eax, dword [ebp - 0x124]
cmp dword [eax + 0x14], 0xf
jbe 0x1000c831
mov eax, dword [eax]
push ecx
push esi
push 1
push eax
push 0x100ba720
push dword [ebp - 0x118]
call dword [sym.imp.SHLWAPI.dll_SHSetValueA]
push dword [ebp - 0x118]
call edi
mov ecx, dword [ebp - 0xac]
cmp ecx, 0xf
jbe 0x1000c889
mov edx, dword [ebp - 0xc0]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x1000c87f
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x1000d077
push ecx
push edx
call fcn.1008c554
add esp, 8
mov ecx, dword [ebp - 0xc4]
mov dword [ebp - 0xb0], 0
mov dword [ebp - 0xac], 0xf
mov byte [ebp - 0xc0], 0
mov byte [ebp - 4], 3
cmp ecx, 0xf
jbe 0x1000c8e2
mov edx, dword [ebp - 0xd8]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x1000c8d8
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x1000d077
push ecx
push edx
call fcn.1008c554
add esp, 8
lea eax, [ebp - 0xc0]
push 0x1b0
push eax
call fcn.1002f4a0
mov esi, eax
lea eax, [ebp - 0xf0]
mov byte [ebp - 4], 0xa
push 0x1ed
push eax
call fcn.1002f4a0
add esp, 0x10
lea ecx, [ebp - 0x118]
cmp dword [ebp - 0x94], 7
mov edi, eax
lea eax, [ebp - 0xa8]
cmova eax, dword [ebp - 0xa8]
push ecx
push 0x20106
push 0
push eax
push reloc.WS2_32.dll_bind
call dword [sym.imp.ADVAPI32.dll_RegOpenKeyExW]
test eax, eax
jne 0x1000c978
mov eax, dword [esi + 0x10]
add eax, eax
cmp dword [esi + 0x14], 7
jbe 0x1000c94e
mov esi, dword [esi]
cmp dword [edi + 0x14], 7
jbe 0x1000c956
mov edi, dword [edi]
push eax
mov eax, dword [sym.imp.SHLWAPI.dll_SHSetValueW]
push esi
push 1
push edi
push 0x100ba72c
push dword [ebp - 0x118]
call eax
mov edi, dword [sym.imp.ADVAPI32.dll_RegCloseKey]
jmp 0x1000cbee
mov edi, dword [sym.imp.ADVAPI32.dll_RegCloseKey]
jmp 0x1000cbf6
cmp eax, 2
jne 0x1000cc10
mov eax, dword [str.1.6.0.1]
xorps xmm0, xmm0
movups xmmword [ebp - 0xd8], xmm0
mov dword [ebp - 0xd8], eax
mov ax, word [0x100ba760]
mov word [ebp - 0xd4], ax
mov al, byte [0x100ba762]
mov dword [ebp - 0xc8], 7
mov dword [ebp - 0xc4], 0xf
mov byte [ebp - 0xd2], al
mov byte [ebp - 0xd1], 0
lea eax, [ebp - 0xf0]
mov byte [ebp - 4], 0xb
push 0x1eb
push eax
call fcn.1002f1b0
add esp, 8
lea ecx, [ebp - 0x118]
cmp dword [ebp - 0x94], 7
mov esi, eax
lea eax, [ebp - 0xa8]
cmova eax, dword [ebp - 0xa8]
push ecx
push 0x20106
push 0
push eax
push reloc.WS2_32.dll_bind
call dword [sym.imp.ADVAPI32.dll_RegOpenKeyExW]
test eax, eax
jne 0x1000ca5f
cmp dword [ebp - 0xc4], 0xf
lea eax, [ebp - 0xd8]
cmova eax, dword [ebp - 0xd8]
cmp dword [esi + 0x14], 0xf
jbe 0x1000ca3c
mov esi, dword [esi]
push dword [ebp - 0xc8]
push eax
push 1
push esi
push 0x100ba720
push dword [ebp - 0x118]
call dword [sym.imp.SHLWAPI.dll_SHSetValueA]
push dword [ebp - 0x118]
call edi
lea ecx, [ebp - 0xf0]
call fcn.100013f0
mov ecx, dword [ebp - 0xc4]
mov byte [ebp - 4], 3
cmp ecx, 0xf
jbe 0x1000caa8
mov edx, dword [ebp - 0xd8]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x1000ca9e
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x1000d07c
push ecx
push edx
call fcn.1008c554
add esp, 8
lea eax, [ebp - 0xc0]
push 0x16
push eax
call fcn.1002f1b0
mov esi, eax
lea eax, [ebp - 0xf0]
mov byte [ebp - 4], 0xc
push 0x1ec
push eax
call fcn.1002f1b0
add esp, 0x10
mov dword [ebp - 0x124], eax
cmp dword [ebp - 0x94], 7
lea ecx, [ebp - 0x118]
lea eax, [ebp - 0xa8]
cmova eax, dword [ebp - 0xa8]
push ecx
push 0x20106
push 0
push eax
push reloc.WS2_32.dll_bind
call dword [sym.imp.ADVAPI32.dll_RegOpenKeyExW]
test eax, eax
jne 0x1000cb3f
cmp dword [esi + 0x14], 0xf
mov ecx, dword [esi + 0x10]
jbe 0x1000cb13
mov esi, dword [esi]
mov eax, dword [ebp - 0x124]
cmp dword [eax + 0x14], 0xf
jbe 0x1000cb21
mov eax, dword [eax]
push ecx
push esi
push 1
push eax
push 0x100ba720
push dword [ebp - 0x118]
call dword [sym.imp.SHLWAPI.dll_SHSetValueA]
push dword [ebp - 0x118]
call edi
lea ecx, [ebp - 0xf0]
call fcn.100013f0
lea ecx, [ebp - 0xc0]
mov byte [ebp - 4], 3
call fcn.100013f0
lea eax, [ebp - 0xc0]
push 0x1b1
push eax
call fcn.1002f4a0
mov esi, eax
lea eax, [ebp - 0xf0]
mov byte [ebp - 4], 0xd
push 0x1ed
push eax
call fcn.1002f4a0
add esp, 0x10
mov dword [ebp - 0x124], eax
cmp dword [ebp - 0x94], 7
lea ecx, [ebp - 0x118]
lea eax, [ebp - 0xa8]
cmova eax, dword [ebp - 0xa8]
push ecx
push 0x20106
push 0
push eax
push reloc.WS2_32.dll_bind
call dword [sym.imp.ADVAPI32.dll_RegOpenKeyExW]
test eax, eax
jne 0x1000cbf6
mov ecx, dword [esi + 0x10]
add ecx, ecx
cmp dword [esi + 0x14], 7
jbe 0x1000cbc9
mov esi, dword [esi]
mov eax, dword [ebp - 0x124]
cmp dword [eax + 0x14], 7
jbe 0x1000cbd7
mov eax, dword [eax]
push ecx
push esi
push 1
push eax
mov eax, dword [sym.imp.SHLWAPI.dll_SHSetValueW]
push 0x100ba72c
push dword [ebp - 0x118]
call eax
push dword [ebp - 0x118]
call edi
lea ecx, [ebp - 0xf0]
call fcn.10007690
lea ecx, [ebp - 0xc0]
mov byte [ebp - 4], 3
call fcn.10007690
lea eax, [ebp - 0xc0]
push 0x1ee
push eax
call fcn.1002f4a0
add esp, 8
lea ecx, [ebp - 0x118]
cmp dword [ebp - 0x94], 7
mov esi, eax
lea eax, [ebp - 0xa8]
cmova eax, dword [ebp - 0xa8]
push ecx
push 0x20106
push 0
push eax
push reloc.WS2_32.dll_bind
call dword [sym.imp.ADVAPI32.dll_RegOpenKeyExW]
test eax, eax
jne 0x1000cc9b
mov eax, dword [ebp - 0x104]
cmp dword [ebp - 0x100], 7
lea ecx, [eax + eax]
lea eax, [ebp - 0x114]
cmova eax, dword [ebp - 0x114]
cmp dword [esi + 0x14], 7
jbe 0x1000cc7d
mov esi, dword [esi]
push ecx
push eax
push 1
push esi
push 0x100ba72c
push dword [ebp - 0x118]
call dword [sym.imp.SHLWAPI.dll_SHSetValueW]
push dword [ebp - 0x118]
call edi
mov ecx, dword [ebp - 0xac]
cmp ecx, 7
jbe 0x1000ccdb
mov edx, dword [ebp - 0xc0]
lea ecx, [ecx*2 + 2]
mov eax, edx
cmp ecx, 0x1000
jb 0x1000ccd1
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x1000d081
push ecx
push edx
call fcn.1008c554
add esp, 8
lea eax, [ebp - 0xc0]
push 0x1ef
push eax
call fcn.1002f4a0
add esp, 8
lea ecx, [ebp - 0x118]
cmp dword [ebp - 0x94], 7
mov esi, eax
lea eax, [ebp - 0xa8]
cmova eax, dword [ebp - 0xa8]
push ecx
push 0x20106
push 0
push eax
push reloc.WS2_32.dll_bind
call dword [sym.imp.ADVAPI32.dll_RegOpenKeyExW]
test eax, eax
jne 0x1000cd66
mov eax, dword [ebp - 0x104]
cmp dword [ebp - 0x100], 7
lea ecx, [eax + eax]
lea eax, [ebp - 0x114]
cmova eax, dword [ebp - 0x114]
cmp dword [esi + 0x14], 7
jbe 0x1000cd48
mov esi, dword [esi]
push ecx
push eax
push 1
push esi
push 0x100ba72c
push dword [ebp - 0x118]
call dword [sym.imp.SHLWAPI.dll_SHSetValueW]
push dword [ebp - 0x118]
call edi
mov ecx, dword [ebp - 0xac]
cmp ecx, 7
jbe 0x1000cda6
mov edx, dword [ebp - 0xc0]
lea ecx, [ecx*2 + 2]
mov eax, edx
cmp ecx, 0x1000
jb 0x1000cd9c
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x1000d086
push ecx
push edx
call fcn.1008c554
add esp, 8
cmp dword [ebp - 0x120], 1
jne 0x1000cfaf
mov eax, dword [ebp - 0x134]
xorps xmm0, xmm0
mov dword [ebp - 0x128], eax
mov eax, dword [ebp - 0x12c]
mov dword [ebp - 0x124], eax
lea eax, [ebp - 0x128]
push eax
lea eax, [ebp - 0xfc]
mov dword [ebp - 0xdc], 0
push eax
movups xmmword [ebp - 0xfc], xmm0
movups xmmword [ebp - 0xec], xmm0
call fcn.100971a9
lea eax, [ebp - 0xfc]
push eax
push str._Y_m_d
lea eax, [ebp - 0x90]
push 0x40
push eax
call fcn.10096efb
xorps xmm0, xmm0
mov dword [ebp - 0xc8], 0
lea ecx, [ebp - 0x90]
mov dword [ebp - 0xc4], 0
add esp, 0x18
lea edx, [ecx + 2]
movups xmmword [ebp - 0xd8], xmm0
nop dword [eax]
mov ax, word [ecx]
add ecx, 2
test ax, ax
jne 0x1000ce40
sub ecx, edx
lea eax, [ebp - 0x90]
sar ecx, 1
push ecx
push eax
lea ecx, [ebp - 0xd8]
call fcn.10007450
lea eax, [ebp - 0xf0]
mov byte [ebp - 4], 0xe
push 0x1f0
push eax
call fcn.1002f4a0
add esp, 8
lea ecx, [ebp - 0x120]
cmp dword [ebp - 0x94], 7
mov esi, eax
lea eax, [ebp - 0xa8]
cmova eax, dword [ebp - 0xa8]
push ecx
push 0x20106
push 0
push eax
push reloc.WS2_32.dll_bind
call dword [sym.imp.ADVAPI32.dll_RegOpenKeyExW]
test eax, eax
jne 0x1000cef1
mov eax, dword [ebp - 0xc8]
cmp dword [ebp - 0xc4], 7
lea ecx, [eax + eax]
lea eax, [ebp - 0xd8]
cmova eax, dword [ebp - 0xd8]
cmp dword [esi + 0x14], 7
jbe 0x1000ced3
mov esi, dword [esi]
push ecx
push eax
push 1
push esi
push 0x100ba72c
push dword [ebp - 0x120]
call dword [sym.imp.SHLWAPI.dll_SHSetValueW]
push dword [ebp - 0x120]
call edi
lea ecx, [ebp - 0xf0]
call fcn.10007690
mov eax, dword [ebp - 0x134]
mov ecx, 0x989680
imul ecx
lea ecx, [ebp - 0x11c]
add eax, 0xd53e8000
push ecx
adc edx, 0x19db1de
mov dword [ebp - 0x130], eax
cmp dword [ebp - 0x94], 7
lea eax, [ebp - 0xa8]
push 0x20106
cmova eax, dword [ebp - 0xa8]
push 0
push eax
push reloc.WS2_32.dll_bind
mov dword [ebp - 0x12c], edx
call dword [sym.imp.ADVAPI32.dll_RegOpenKeyExW]
test eax, eax
jne 0x1000cf6f
lea eax, [ebp - 0x130]
push eax
push dword [ebp - 0x11c]
call fcn.1000e210
add esp, 8
push dword [ebp - 0x11c]
call edi
mov ecx, dword [ebp - 0xc4]
cmp ecx, 7
jbe 0x1000cfaf
mov edx, dword [ebp - 0xd8]
lea ecx, [ecx*2 + 2]
mov eax, edx
cmp ecx, 0x1000
jb 0x1000cfa5
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x1000d08b
push ecx
push edx
call fcn.1008c554
add esp, 8
mov ecx, dword [ebp - 0x94]
cmp ecx, 7
jbe 0x1000cfef
mov edx, dword [ebp - 0xa8]
lea ecx, [ecx*2 + 2]
mov eax, edx
cmp ecx, 0x1000
jb 0x1000cfe5
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x1000d090
push ecx
push edx
call fcn.1008c554
add esp, 8
mov ecx, dword [ebp - 0x100]
xor eax, eax
mov dword [ebp - 0x98], 0
mov dword [ebp - 0x94], 7
mov word [ebp - 0xa8], ax
cmp ecx, 7
jbe 0x1000d048
mov edx, dword [ebp - 0x114]
lea ecx, [ecx*2 + 2]
mov eax, edx
cmp ecx, 0x1000
jb 0x1000d03e
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x1000d090
push ecx
push edx
call fcn.1008c554
add esp, 8
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
mov ecx, dword [ebp - 0x10]
xor ecx, ebp
call fcn.1008c562
mov esp, ebp
pop ebp
ret
call fcn.10091b9f
call fcn.10091b9f
call fcn.10091b9f
call fcn.10091b9f
call fcn.10091b9f
call fcn.10091b9f
call fcn.10091b9f
call fcn.10091b9f
call fcn.10091b9f
call fcn.10091b9f
int3