Function at 0x1004fda0
Capabilities:
Allocate or change rwx memory
Execute shellcode via indirect call

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x10104ad1
mov eax, dword fs:[0]
push eax
sub esp, 0x64
mov eax, dword [0x10167080]
xor eax, ebp
mov dword [ebp - 0x10], eax
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov eax, ecx
mov dword [ebp - 0x70], eax
mov ecx, dword [0x1016f87c]
mov dword [eax], vtable.components::movement.0
mov eax, dword fs:[0x2c]
mov ecx, dword [eax + ecx*4]
mov eax, dword [0x1021f0ac]
cmp eax, dword [ecx + 4]
jle 0x1004fe54
push 0x1021f0ac
call fcn.100d92a4
add esp, 4
cmp dword [0x1021f0ac], 0xffffffff
jne 0x1004fe54
lea ecx, [ebp - 0x68]
mov dword [ebp - 4], 0
push ecx
lea eax, [ebp - 0x5c]
mov dword [ebp - 0x68], str.STOCK
push eax
push ecx
mov ecx, 0x1021f0b0
mov dword [ebp - 0x64], str.DEFRAG
mov dword [ebp - 0x60], 0x101458e8
call fcn.10011dd0
push 0x10106ae0
call fcn.100d91ad
push 0x1021f0ac
mov dword [ebp - 4], 0xffffffff
call fcn.100d9253
add esp, 8
mov ecx, dword [0x1021f0b4]
mov eax, dword [0x1021f0b0]
sub ecx, eax
push eax
sar ecx, 2
push ecx
push 0
push 0
push 0
push 0
push str.the_movementtype_to_use
push 0
push 6
push str.pm_movementType
call dword [0x10167e9c]
add esp, 0x28
mov dword [0x1020d140], eax
push str.pm_movementType_Defrag_::_defines_negative_player_acceleration_when_the_player_wants_to_stop_mid_air
push 0
sub esp, 0xc
mov dword [esp + 8], 0x42480000
mov dword [esp + 4], 0x3dcccccd
mov dword [esp], 0x40400000
push str.pm_cpm_airstopAccelerate
call dword [0x10167e48]
add esp, 0x18
mov dword [0x1020d354], eax
push str.pm_movementType_Defrag_::_defines_player_acceleration_on_initial_strafejump
push 0
sub esp, 0xc
mov dword [esp + 8], 0x43fa0000
mov dword [esp + 4], 0x3f800000
mov dword [esp], 0x428c0000
push str.pm_cpm_strafeAccelerate
call dword [0x10167e48]
add esp, 0x18
mov dword [0x1020d350], eax
push str.pm_movementType_Defrag_::_defines_direction_control_mid_air
push 0
sub esp, 0xc
mov dword [esp + 8], 0x43fa0000
mov dword [esp + 4], 0x3dcccccd
mov dword [esp], 0x43160000
push str.pm_cpm_airControl
call dword [0x10167e48]
add esp, 0x18
mov dword [0x1020d348], eax
push str.pm_movementType_Defrag_::_defines_player_acceleration_mid_air
push 0
sub esp, 0xc
mov dword [esp + 8], 0x41200000
mov dword [esp + 4], 0x3dcccccd
mov dword [esp], 0x3f800000
push str.pm_cpm_airAccelerate
call dword [0x10167e48]
push 0
push 0
push 0
push 0
push 0
push 0
push str.pm_movementType_All_::_enables_quake_3_damange_knockback
push 0
push 0
push str.pm_cpm_useQuakeDamage
mov dword [0x1020d34c], eax
call dword [0x10167e44]
add esp, 0x40
mov dword [0x1020d340], eax
push str.pm_movementType_Defrag_::_damage_knockback_scalar
push 0
sub esp, 0xc
mov dword [esp + 8], 0x41200000
mov dword [esp + 4], 0
mov dword [esp], 0x3f800000
push str.pm_cpm_damageKnockback
call dword [0x10167e48]
push 0
push 0
mov dword [0x1020d344], eax
push 0
push 0
push 0
push 0
push str.pm_movementType_Defrag_::_enables_experimental_bouncing
push 0
push 0
push str.pm_cpm_useBouncing
call dword [0x10167e44]
add esp, 0x40
mov dword [0x1020d33c], eax
push str.pm_movementType_CS_::_defines_player_acceleration_mid_air
push 0
sub esp, 0xc
mov dword [esp + 8], 0x43fa0000
mov dword [esp + 4], 0x3f800000
mov dword [esp], 0x42c80000
push str.pm_cs_airAccelerate
call dword [0x10167e48]
add esp, 0x18
mov dword [0x1020d338], eax
push str.pm_movementType_CS_::_maximum_speed_mid_air
push 0
sub esp, 0xc
mov dword [esp + 8], 0x43fa0000
mov dword [esp + 4], 0x3f800000
mov dword [esp], 0x41f00000
push str.pm_cs_airspeedCap
call dword [0x10167e48]
push 0
push 0
push 0
push 0
push 0
push 0
push str.constantly_jump_when_holding_space__still_has_landing_slowdown____disable_pm_bhop_slowdown
push 0
push 0
push str.pm_bhop_auto
mov dword [0x1020d334], eax
call dword [0x10167e44]
add esp, 0x40
mov dword [0x1020d36c], eax
push 0
push 0
push 0
push 0
push 0
push 1
push str.toggle_landing_slowdown
push 0
push 0
push str.pm_bhop_slowdown
call dword [0x10167e44]
push 0
push 0
push 0
push 0
push 0
push 0
push str.ability_to_bounce_on_terrain_edges
push 0
push 0
push str.pm_terrainEdgeBounces
mov dword [0x1020d368], eax
call dword [0x10167e44]
add esp, 0x50
mov dword [0x1020d360], eax
push 0
push 0
push 0
push 0
push 0
push 1
push str.disable_this_to_completely_skip_any_fall_related_effects
push 0
push 0
push str.pm_crashland
call dword [0x10167e44]
push 0
mov dword [0x1020d364], eax
push 0
push 0
push 0
push 0
push 0
push str.disables_the_ability_to_sprint
push 0
push 0
push str.pm_disableSprint
call dword [0x10167e44]
add esp, 0x50
mov dword [0x1020d35c], eax
push str.pushback_amount_for_rocketjumps_using_stock_movement
push 0
sub esp, 0xc
mov dword [esp + 8], 0x45800000
mov dword [esp + 4], 0
mov dword [esp], 0x42800000
push str.pm_rocketJumpHeight
call dword [0x10167e48]
push 0
push 0
push 0
push 0
push 0
push 0
push str.Display_current_speed_and_current_movement_type.
push 1
push 0
push str.pm_hud_enable
mov dword [0x1020d358], eax
call dword [0x10167e44]
add esp, 0x40
mov dword [0x1020d144], eax
push str.text_offset_x
push 1
sub esp, 0xc
mov dword [esp + 8], 0x46000000
mov dword [esp + 4], 0xc6000000
mov dword [esp], 0x41200000
push str.pm_hud_x
call dword [0x10167e48]
add esp, 0x18
mov dword [0x1020d12c], eax
push str.text_offset_y
push 1
sub esp, 0xc
mov dword [esp + 8], 0x46000000
mov dword [esp + 4], 0xc6000000
mov dword [esp], 0x43960000
push str.pm_hud_y
call dword [0x10167e48]
add esp, 0x18
mov dword [0x1020d130], eax
push str.font_scale
push 1
sub esp, 0xc
mov dword [esp + 8], 0x41200000
mov dword [esp + 4], 0x3dcccccd
mov dword [esp], 0x3f400000
push str.pm_hud_fontScale
call dword [0x10167e48]
push 8
push 0
push 0
push 0
push 0
push 1
push str.font_Style
push 1
push 5
push str.pm_hud_fontStyle
mov dword [0x1020d134], eax
call dword [0x10167e4c]
add esp, 0x40
mov dword [0x1020d138], eax
sub esp, 0x18
mov dword [esp + 0x14], 0x3f800000
mov dword [esp + 0x10], 0
mov dword [esp + 0xc], 0x3f800000
mov dword [esp + 8], 0x3ecccccd
mov dword [esp + 4], 0x3f0ccccd
mov dword [esp], 0x3f800000
push str.font_color
push 1
push 4
push str.pm_hud_fontColor
call dword [0x10167e50]
push 0
push 0
push 0
push 0
push 0
push 0
push str.enable_debug_prints_for_movement_related_functions
push 0
push 0
push str.pm_debug_prints
mov dword [0x1020d13c], eax
call dword [0x10167e44]
add esp, 0x50
mov dword [0x1020d330], eax
sub esp, 0x28
mov ecx, str.pm_preset_stock
mov eax, esp
mov dword [eax], vtable.std::_Func_impl_no_alloc_class__public:_void___thiscall_components::movement::constructor_void_::_2::_lambda_1___void__class_components::command::params_.0
mov dword [eax + 0x24], eax
call fcn.100160e0
mov eax, esp
mov ecx, str.pm_preset_q3
mov dword [eax], vtable.std::_Func_impl_no_alloc_class__public:_void___thiscall_components::movement::constructor_void_::_2::_lambda_2___void__class_components::command::params_.0
mov dword [eax + 0x24], eax
call fcn.100160e0
mov eax, esp
mov ecx, str.pm_preset_cs
mov dword [eax], vtable.std::_Func_impl_no_alloc_class__public:_void___thiscall_components::movement::constructor_void_::_2::_lambda_3___void__class_components::command::params_.0
mov dword [eax + 0x24], eax
call fcn.100160e0
add esp, 0x28
lea ecx, [ebp - 0x5c]
call fcn.10004700
cmp byte [ebp - 0x5c], 0
jne 0x10050302
mov byte [ebp - 0x5c], 1
mov byte [ebp - 0x47], 1
mov dword [ebp - 0x58], 0x414718
mov dword [ebp - 0x54], 0x1004fd10
mov eax, dword [0x414719]
add eax, 0x41471d
mov dword [ebp - 0x50], eax
sub esp, 8
mov dword [ebp - 4], 1
lea ecx, [ebp - 0x5c]
call fcn.10068a70
cmp byte [eax + 1], 0
je 0x1005031e
mov byte [eax + 1], 0
mov dword [ebp - 4], 2
cmp byte [ebp - 0x5c], 0
je 0x10050334
push ecx
lea ecx, [ebp - 0x5c]
call fcn.10068b40
lea eax, [ebp - 0x40]
push eax
call fcn.1000ab50
add esp, 4
lea ecx, [ebp - 0x5c]
call fcn.10004700
cmp byte [ebp - 0x5c], 0
jne 0x10050371
mov byte [ebp - 0x5c], 1
mov byte [ebp - 0x47], 0
mov dword [ebp - 0x58], 0x414b87
mov dword [ebp - 0x54], fcn.1004efd0
mov eax, dword [0x414b88]
add eax, 0x414b8c
mov dword [ebp - 0x50], eax
sub esp, 8
mov dword [ebp - 4], 3
lea ecx, [ebp - 0x5c]
call fcn.10068a70
cmp byte [eax + 1], 0
je 0x1005038d
mov byte [eax + 1], 0
mov dword [ebp - 4], 4
cmp byte [ebp - 0x5c], 0
je 0x100503a3
push ecx
lea ecx, [ebp - 0x5c]
call fcn.10068b40
lea eax, [ebp - 0x40]
push eax
call fcn.1000ab50
add esp, 4
lea ecx, [ebp - 0x5c]
call fcn.10004700
cmp byte [ebp - 0x5c], 0
jne 0x100503e0
mov byte [ebp - 0x5c], 1
mov byte [ebp - 0x47], 0
mov dword [ebp - 0x58], 0x40f7f9
mov dword [ebp - 0x54], fcn.1004efd0
mov eax, dword [0x40f7fa]
add eax, 0x40f7fe
mov dword [ebp - 0x50], eax
sub esp, 8
mov dword [ebp - 4], 5
lea ecx, [ebp - 0x5c]
call fcn.10068a70
cmp byte [eax + 1], 0
je 0x100503fc
mov byte [eax + 1], 0
mov dword [ebp - 4], 6
cmp byte [ebp - 0x5c], 0
je 0x10050412
push ecx
lea ecx, [ebp - 0x5c]
call fcn.10068b40
lea eax, [ebp - 0x40]
push eax
call fcn.1000ab50
add esp, 4
lea ecx, [ebp - 0x5c]
call fcn.10004700
cmp byte [ebp - 0x5c], 0
jne 0x1005044f
mov byte [ebp - 0x5c], 1
mov byte [ebp - 0x47], 0
mov dword [ebp - 0x58], 0x414b7a
mov dword [ebp - 0x54], 0x1004e900
mov eax, dword [0x414b7b]
add eax, 0x414b7f
mov dword [ebp - 0x50], eax
sub esp, 8
mov dword [ebp - 4], 7
lea ecx, [ebp - 0x5c]
call fcn.10068a70
cmp byte [eax + 1], 0
je 0x1005046b
mov byte [eax + 1], 0
mov dword [ebp - 4], 8
cmp byte [ebp - 0x5c], 0
je 0x10050481
push ecx
lea ecx, [ebp - 0x5c]
call fcn.10068b40
lea eax, [ebp - 0x40]
push eax
call fcn.1000ab50
add esp, 4
lea ecx, [ebp - 0x5c]
call fcn.10004700
cmp byte [ebp - 0x5c], 0
jne 0x100504be
mov byte [ebp - 0x5c], 1
mov byte [ebp - 0x47], 1
mov dword [ebp - 0x58], 0x4108e0
mov dword [ebp - 0x54], 0x1004fc10
mov eax, dword [0x4108e1]
add eax, 0x4108e5
mov dword [ebp - 0x50], eax
sub esp, 8
mov dword [ebp - 4], 9
lea ecx, [ebp - 0x5c]
call fcn.10068a70
cmp byte [eax + 1], 0
je 0x100504da
mov byte [eax + 1], 0
mov dword [ebp - 4], 0xa
cmp byte [ebp - 0x5c], 0
je 0x100504f0
push ecx
lea ecx, [ebp - 0x5c]
call fcn.10068b40
lea eax, [ebp - 0x40]
push eax
call fcn.1000ab50
mov esi, dword [sym.imp.KERNEL32.dll_VirtualProtect]
lea eax, [ebp - 0x6c]
add esp, 4
push eax
push 0x40
push 8
push 0x4b557a
call esi
mov eax, 0x4b557a
mov dword [eax], 0x90909090
mov dword [eax + 4], 0x90909090
lea eax, [ebp - 0x6c]
push eax
push dword [ebp - 0x6c]
push 8
push 0x4b557a
call esi
mov edi, dword [sym.imp.KERNEL32.dll_GetCurrentProcess]
push 8
push 0x4b557a
call edi
push eax
call dword [sym.imp.KERNEL32.dll_FlushInstructionCache]
lea ecx, [ebp - 0x5c]
call fcn.10004700
cmp byte [ebp - 0x5c], 0
jne 0x1005057a
mov byte [ebp - 0x5c], 1
mov byte [ebp - 0x47], 1
mov dword [ebp - 0x58], 0x4b557a
mov dword [ebp - 0x54], 0x1004fc40
mov eax, dword [0x4b557b]
add eax, 0x4b557f
mov dword [ebp - 0x50], eax
sub esp, 8
mov dword [ebp - 4], 0xb
lea ecx, [ebp - 0x5c]
call fcn.10068a70
cmp byte [eax + 1], 0
je 0x10050596
mov byte [eax + 1], 0
mov dword [ebp - 4], 0xc
cmp byte [ebp - 0x5c], 0
je 0x100505ac
push ecx
lea ecx, [ebp - 0x5c]
call fcn.10068b40
lea eax, [ebp - 0x40]
push eax
call fcn.1000ab50
add esp, 4
lea ecx, [ebp - 0x5c]
call fcn.10004700
cmp byte [ebp - 0x5c], 0
jne 0x100505e9
mov byte [ebp - 0x5c], 1
mov byte [ebp - 0x47], 1
mov dword [ebp - 0x58], 0x407dd5
mov dword [ebp - 0x54], 0x1004fbc0
mov eax, dword [0x407dd6]
add eax, 0x407dda
mov dword [ebp - 0x50], eax
sub esp, 8
mov dword [ebp - 4], 0xd
lea ecx, [ebp - 0x5c]
call fcn.10068a70
cmp byte [eax + 1], 0
je 0x10050605
mov byte [eax + 1], 0
mov dword [ebp - 4], 0xe
cmp byte [ebp - 0x5c], 0
je 0x1005061b
push ecx
lea ecx, [ebp - 0x5c]
call fcn.10068b40
lea eax, [ebp - 0x40]
push eax
call fcn.1000ab50
add esp, 4
lea ecx, [ebp - 0x5c]
call fcn.10004700
cmp byte [ebp - 0x5c], 0
jne 0x10050658
mov byte [ebp - 0x5c], 1
mov byte [ebp - 0x47], 1
mov dword [ebp - 0x58], 0x410313
mov dword [ebp - 0x54], 0x1004fbf0
mov eax, dword [0x410314]
add eax, 0x410318
mov dword [ebp - 0x50], eax
sub esp, 8
mov dword [ebp - 4], 0xf
lea ecx, [ebp - 0x5c]
call fcn.10068a70
cmp byte [eax + 1], 0
je 0x10050674
mov byte [eax + 1], 0
mov dword [ebp - 4], 0x10
cmp byte [ebp - 0x5c], 0
je 0x1005068a
push ecx
lea ecx, [ebp - 0x5c]
call fcn.10068b40
lea eax, [ebp - 0x40]
push eax
call fcn.1000ab50
add esp, 4
lea ecx, [ebp - 0x5c]
call fcn.10004700
cmp byte [ebp - 0x5c], 0
jne 0x100506c7
mov byte [ebp - 0x5c], 1
mov byte [ebp - 0x47], 0
mov dword [ebp - 0x58], 0x414aa9
mov dword [ebp - 0x54], 0x1004f4b0
mov eax, dword [0x414aaa]
add eax, 0x414aae
mov dword [ebp - 0x50], eax
sub esp, 8
mov dword [ebp - 4], 0x11
lea ecx, [ebp - 0x5c]
call fcn.10068a70
cmp byte [eax + 1], 0
je 0x100506e3
mov byte [eax + 1], 0
mov dword [ebp - 4], 0x12
cmp byte [ebp - 0x5c], 0
je 0x100506f9
push ecx
lea ecx, [ebp - 0x5c]
call fcn.10068b40
lea eax, [ebp - 0x40]
push eax
call fcn.1000ab50
add esp, 4
lea ecx, [ebp - 0x5c]
call fcn.10004700
cmp byte [ebp - 0x5c], 0
jne 0x10050736
mov byte [ebp - 0x5c], 1
mov byte [ebp - 0x47], 0
mov dword [ebp - 0x58], 0x414b95
mov dword [ebp - 0x54], 0x1004f4b0
mov eax, dword [0x414b96]
add eax, 0x414b9a
mov dword [ebp - 0x50], eax
sub esp, 8
mov dword [ebp - 4], 0x13
lea ecx, [ebp - 0x5c]
call fcn.10068a70
cmp byte [eax + 1], 0
je 0x10050752
mov byte [eax + 1], 0
mov dword [ebp - 4], 0x14
cmp byte [ebp - 0x5c], 0
je 0x10050768
push ecx
lea ecx, [ebp - 0x5c]
call fcn.10068b40
lea eax, [ebp - 0x40]
push eax
call fcn.1000ab50
add esp, 4
lea eax, [ebp - 0x6c]
push eax
push 0x40
push 6
push 0x4efcd1
call esi
mov eax, 0x4efcd1
mov ecx, 0x90909090
mov dword [eax], ecx
mov word [eax + 4], cx
lea eax, [ebp - 0x6c]
push eax
push dword [ebp - 0x6c]
push 6
push 0x4efcd1
call esi
push 6
push 0x4efcd1
call edi
push eax
call dword [sym.imp.KERNEL32.dll_FlushInstructionCache]
lea ecx, [ebp - 0x5c]
call fcn.10004700
cmp byte [ebp - 0x5c], 0
jne 0x100507e4
mov byte [ebp - 0x5c], 1
mov byte [ebp - 0x47], 1
mov dword [ebp - 0x58], 0x4efcd1
mov dword [ebp - 0x54], 0x1004fba0
mov eax, dword [0x4efcd2]
add eax, 0x4efcd6
mov dword [ebp - 0x50], eax
sub esp, 8
mov dword [ebp - 4], 0x15
lea ecx, [ebp - 0x5c]
call fcn.10068a70
cmp byte [eax + 1], 0
je 0x10050800
mov byte [eax + 1], 0
mov dword [ebp - 4], 0x16
cmp byte [ebp - 0x5c], 0
je 0x10050816
push ecx
lea ecx, [ebp - 0x5c]
call fcn.10068b40
lea eax, [ebp - 0x40]
push eax
call fcn.1000ab50
add esp, 4
lea ecx, [ebp - 0x5c]
call fcn.10004700
cmp byte [ebp - 0x5c], 0
jne 0x10050853
mov byte [ebp - 0x5c], 1
mov byte [ebp - 0x47], 1
mov dword [ebp - 0x58], 0x4c7f64
mov dword [ebp - 0x54], 0x1004fca0
mov eax, dword [0x4c7f65]
add eax, 0x4c7f69
mov dword [ebp - 0x50], eax
sub esp, 8
mov dword [ebp - 4], 0x17
lea ecx, [ebp - 0x5c]
call fcn.10068a70
cmp byte [eax + 1], 0
je 0x1005086f
mov byte [eax + 1], 0
mov dword [ebp - 4], 0x18
cmp byte [ebp - 0x5c], 0
je 0x10050885
push ecx
lea ecx, [ebp - 0x5c]
call fcn.10068b40
lea eax, [ebp - 0x40]
push eax
call fcn.1000ab50
add esp, 4
lea eax, [ebp - 0x6c]
push eax
push 0x40
push 1
push 0x4c7f69
call esi
mov eax, 0x4c7f69
mov byte [eax], 0x90
lea eax, [ebp - 0x6c]
push eax
push dword [ebp - 0x6c]
push 1
push 0x4c7f69
call esi
push 1
push 0x4c7f69
call edi
push eax
call dword [sym.imp.KERNEL32.dll_FlushInstructionCache]
lea ecx, [ebp - 0x5c]
call fcn.10004700
cmp byte [ebp - 0x5c], 0
jne 0x100508f9
mov byte [ebp - 0x5c], 1
mov byte [ebp - 0x47], 1
mov dword [ebp - 0x58], 0x4ea057
mov dword [ebp - 0x54], 0x1004fcd0
mov eax, dword [0x4ea058]
add eax, 0x4ea05c
mov dword [ebp - 0x50], eax
sub esp, 8
mov dword [ebp - 4], 0x19
lea ecx, [ebp - 0x5c]
call fcn.10068a70
cmp byte [eax + 1], 0
je 0x10050915
mov byte [eax + 1], 0
mov dword [ebp - 4], 0x1a
cmp byte [ebp - 0x5c], 0
je 0x1005092b
push ecx
lea ecx, [ebp - 0x5c]
call fcn.10068b40
lea eax, [ebp - 0x40]
push eax
call fcn.1000ab50
add esp, 4
lea ecx, [ebp - 0x5c]
call fcn.10004700
cmp byte [ebp - 0x5c], 0
jne 0x10050968
mov byte [ebp - 0x5c], 1
mov byte [ebp - 0x47], 1
mov dword [ebp - 0x58], 0x4ea171
mov dword [ebp - 0x54], 0x1004fd00
mov eax, dword [0x4ea172]
add eax, 0x4ea176
mov dword [ebp - 0x50], eax
sub esp, 8
mov dword [ebp - 4], 0x1b
lea ecx, [ebp - 0x5c]
call fcn.10068a70
cmp byte [eax + 1], 0
je 0x10050984
mov byte [eax + 1], 0
mov dword [ebp - 4], 0x1c
cmp byte [ebp - 0x5c], 0
je 0x1005099a
push ecx
lea ecx, [ebp - 0x5c]
call fcn.10068b40
lea eax, [ebp - 0x40]
push eax
call fcn.1000ab50
add esp, 4
lea ecx, [ebp - 0x5c]
call fcn.10004700
cmp byte [ebp - 0x5c], 0
jne 0x100509d7
mov byte [ebp - 0x5c], 1
mov byte [ebp - 0x47], 1
mov dword [ebp - 0x58], 0x4c483a
mov dword [ebp - 0x54], 0x1004fd30
mov eax, dword [0x4c483b]
add eax, 0x4c483f
mov dword [ebp - 0x50], eax
sub esp, 8
mov dword [ebp - 4], 0x1d
lea ecx, [ebp - 0x5c]
call fcn.10068a70
cmp byte [eax + 1], 0
je 0x100509f3
mov byte [eax + 1], 0
mov dword [ebp - 4], 0x1e
cmp byte [ebp - 0x5c], 0
je 0x10050a09
push ecx
lea ecx, [ebp - 0x5c]
call fcn.10068b40
lea eax, [ebp - 0x40]
push eax
call fcn.1000ab50
add esp, 4
lea ecx, [ebp - 0x5c]
call fcn.10004700
cmp byte [ebp - 0x5c], 0
jne 0x10050a46
mov byte [ebp - 0x5c], 1
mov byte [ebp - 0x47], 1
mov dword [ebp - 0x58], 0x4c4f2e
mov dword [ebp - 0x54], 0x1004fd60
mov eax, dword [0x4c4f2f]
add eax, 0x4c4f33
mov dword [ebp - 0x50], eax
sub esp, 8
mov dword [ebp - 4], 0x1f
lea ecx, [ebp - 0x5c]
call fcn.10068a70
cmp byte [eax + 1], 0
je 0x10050a62
mov byte [eax + 1], 0
mov dword [ebp - 4], 0x20
cmp byte [ebp - 0x5c], 0
je 0x10050a78
push ecx
lea ecx, [ebp - 0x5c]
call fcn.10068b40
lea eax, [ebp - 0x40]
push eax
call fcn.1000ab50
mov eax, dword [ebp - 0x70]
add esp, 4
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
mov ecx, dword [ebp - 0x10]
xor ecx, ebp
call fcn.100d8e9a
mov esp, ebp
pop ebp
ret