Function at 0x10019510
Capabilities:
Allocate or change rwx memory
Execute shellcode via indirect call

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x10044644
mov eax, dword fs:[0]
push eax
sub esp, 0x150
mov eax, dword [0x100c7140]
xor eax, ebp
mov dword [ebp - 0x10], eax
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
movss xmm0, dword [0x100c8578]
xorps xmm1, xmm1
mov edi, dword [sym.imp.KERNEL32.dll_VirtualProtect]
ucomiss xmm0, xmm1
lahf
test ah, 0x44
jnp 0x10019868
movss xmm0, dword [0x100c857c]
ucomiss xmm0, xmm1
lahf
test ah, 0x44
jnp 0x10019868
push 0xffffffffffffffff
mov ecx, 0x100c69c8
xor esi, esi
call fcn.100017a0
mov eax, dword [0x100c69fc]
sub eax, dword [0x100c69f8]
sar eax, 2
test eax, eax
je 0x10019601
cmp esi, 3
jbe 0x100195e2
cmp esi, 0x14
je 0x100195e2
cmp esi, 0x42
je 0x100195e2
cmp esi, 0x43
je 0x100195e2
cmp esi, 0xf
je 0x100195e2
cmp esi, 0x10
je 0x100195e2
cmp esi, 0x11
je 0x100195e2
push 0xffffffffffffffff
mov ecx, 0x100c69c8
call fcn.100017a0
mov eax, dword [0x100c69f8]
push 1
push 0x100c8584
push ecx
mov eax, dword [eax + esi*4]
mov ecx, esp
add eax, 2
push eax
call fcn.10018ab0
call fcn.10017c70
add esp, 0xc
push 0xffffffffffffffff
mov ecx, 0x100c69c8
inc esi
call fcn.100017a0
mov eax, dword [0x100c69fc]
sub eax, dword [0x100c69f8]
sar eax, 2
cmp esi, eax
jb 0x10019590
push 0xffffffffffffffff
mov ecx, 0x100c6a10
xor esi, esi
call fcn.100017a0
mov eax, dword [0x100c6a44]
sub eax, dword [0x100c6a40]
sar eax, 2
test eax, eax
je 0x10019692
cmp esi, 1
jbe 0x10019673
cmp esi, 0x12
je 0x10019673
cmp esi, 0x39
je 0x10019673
cmp esi, 0x3a
je 0x10019673
cmp esi, 0xd
je 0x10019673
cmp esi, 0xe
je 0x10019673
cmp esi, 0xf
je 0x10019673
push 0xffffffffffffffff
mov ecx, 0x100c6a10
call fcn.100017a0
mov eax, dword [0x100c6a40]
push 1
push 0x100c8588
push ecx
mov eax, dword [eax + esi*4]
mov ecx, esp
add eax, 2
push eax
call fcn.10018ab0
call fcn.10017c70
add esp, 0xc
push 0xffffffffffffffff
mov ecx, 0x100c6a10
inc esi
call fcn.100017a0
mov eax, dword [0x100c6a44]
sub eax, dword [0x100c6a40]
sar eax, 2
cmp esi, eax
jb 0x10019621
xor esi, esi
mov ecx, 0x100c68f0
push 0xffffffffffffffff
mov dword [ebp - 0x15c], esi
call fcn.100017a0
mov eax, dword [0x100c6924]
sub eax, dword [0x100c6920]
sar eax, 2
test eax, eax
je 0x10019771
mov eax, dword [0x100c8a74]
mov ecx, dword fs:[0x2c]
mov eax, dword [ecx + eax*4]
mov dword [ebp - 0x148], eax
push 0xffffffffffffffff
mov ecx, 0x100c68f0
call fcn.100017a0
mov eax, dword [0x100c6920]
mov ecx, dword [ebp - 0x148]
mov esi, dword [eax + esi*4]
mov eax, dword [0x100c8650]
add esi, 2
cmp eax, dword [ecx + 4]
jg 0x1001af51
push 4
push ecx
mov eax, esp
lea ecx, [ebp - 0x158]
mov dword [eax], esi
call fcn.10018b30
mov dword [esi], 0x100c8584
cmp byte [ebp - 0x14c], 0
je 0x10019742
mov eax, dword [ebp - 0x150]
lea ecx, [ebp - 0x144]
push ecx
push eax
push dword [ebp - 0x154]
mov dword [ebp - 0x144], eax
push dword [ebp - 0x158]
call edi
mov esi, dword [ebp - 0x15c]
mov ecx, 0x100c68f0
inc esi
push 0xffffffffffffffff
mov dword [ebp - 0x15c], esi
call fcn.100017a0
mov eax, dword [0x100c6924]
sub eax, dword [0x100c6920]
sar eax, 2
cmp esi, eax
jb 0x100196d1
xor esi, esi
mov ecx, 0x100c6938
push 0xffffffffffffffff
mov dword [ebp - 0x15c], esi
call fcn.100017a0
mov eax, dword [0x100c696c]
sub eax, dword [0x100c6968]
sar eax, 2
test eax, eax
je 0x10019865
mov eax, dword [0x100c8a74]
mov ecx, dword fs:[0x2c]
mov eax, dword [ecx + eax*4]
mov dword [ebp - 0x144], eax
push 0xffffffffffffffff
mov ecx, 0x100c6938
call fcn.100017a0
mov eax, dword [0x100c6968]
mov ecx, dword [ebp - 0x144]
mov esi, dword [eax + esi*4]
mov eax, dword [0x100c8650]
add esi, 2
cmp eax, dword [ecx + 4]
jg 0x1001afa5
lea eax, [ebp - 0x150]
mov dword [ebp - 0x154], 4
push eax
push 0x40
push 4
push esi
mov dword [ebp - 0x158], esi
call edi
test eax, eax
setne byte [ebp - 0x14c]
mov dword [esi], 0x100c8588
cmp byte [ebp - 0x14c], 0
je 0x10019836
mov eax, dword [ebp - 0x150]
lea ecx, [ebp - 0x148]
push ecx
push eax
push dword [ebp - 0x154]
mov dword [ebp - 0x148], eax
push dword [ebp - 0x158]
call edi
mov esi, dword [ebp - 0x15c]
mov ecx, 0x100c6938
inc esi
push 0xffffffffffffffff
mov dword [ebp - 0x15c], esi
call fcn.100017a0
mov eax, dword [0x100c696c]
sub eax, dword [0x100c6968]
sar eax, 2
cmp esi, eax
jb 0x100197b0
xorps xmm1, xmm1
movss xmm0, dword [0x100c85a4]
ucomiss xmm0, xmm1
lahf
test ah, 0x44
jnp 0x10019c01
cmp byte [0x100c85bb], 0
jne 0x10019c01
push 0xffffffffffffffff
mov ecx, 0x100c7040
xor esi, esi
call fcn.100017a0
mov eax, dword [0x100c7074]
sub eax, dword [0x100c7070]
sar eax, 2
test eax, eax
je 0x10019987
nop
cmp esi, 6
jb 0x100198c3
cmp esi, 0x13
je 0x100198c3
cmp esi, 0x21
jne 0x10019964
push 0xffffffffffffffff
mov ecx, 0x100c7040
call fcn.100017a0
mov eax, dword [0x100c7070]
mov ecx, dword fs:[0x2c]
mov eax, dword [eax + esi*4]
add eax, 2
mov dword [ebp - 0x15c], eax
mov eax, dword [0x100c8a74]
mov ecx, dword [ecx + eax*4]
mov eax, dword [0x100c8650]
cmp eax, dword [ecx + 4]
jg 0x1001aff9
mov eax, dword [ebp - 0x15c]
lea ecx, [ebp - 0x150]
push ecx
push 0x40
push 4
push eax
mov dword [ebp - 0x154], 4
mov dword [ebp - 0x158], eax
call edi
test eax, eax
mov eax, dword [ebp - 0x15c]
setne byte [ebp - 0x14c]
mov dword [eax], 0x100c85a8
cmp byte [ebp - 0x14c], 0
je 0x10019964
mov eax, dword [ebp - 0x150]
lea ecx, [ebp - 0x144]
push ecx
push eax
push dword [ebp - 0x154]
mov dword [ebp - 0x144], eax
push dword [ebp - 0x158]
call edi
push 0xffffffffffffffff
mov ecx, 0x100c7040
inc esi
call fcn.100017a0
mov eax, dword [0x100c7074]
sub eax, dword [0x100c7070]
sar eax, 2
cmp esi, eax
jb 0x100198b0
push 0xffffffffffffffff
mov ecx, 0x100c69c8
call fcn.100017a0
mov eax, dword [0x100c69f8]
lea ecx, [ebp - 0x144]
mov eax, dword [eax + 0x108]
add eax, 2
push eax
call fcn.10018ab0
mov esi, dword [ebp - 0x144]
lea eax, [ebp - 0x150]
push eax
push 0x40
push 4
push esi
mov dword [ebp - 0x154], 4
mov dword [ebp - 0x158], esi
call edi
test eax, eax
setne byte [ebp - 0x14c]
mov dword [esi], 0x100c85a8
cmp byte [ebp - 0x14c], 0
je 0x10019a0b
mov eax, dword [ebp - 0x150]
lea ecx, [ebp - 0x144]
push ecx
push eax
push dword [ebp - 0x154]
mov dword [ebp - 0x144], eax
push dword [ebp - 0x158]
call edi
push 0xffffffffffffffff
mov ecx, 0x100c69c8
call fcn.100017a0
mov eax, dword [0x100c69f8]
lea ecx, [ebp - 0x144]
mov eax, dword [eax + 0x10c]
add eax, 2
push eax
call fcn.10018ab0
mov esi, dword [ebp - 0x144]
lea eax, [ebp - 0x150]
push eax
push 0x40
push 4
push esi
mov dword [ebp - 0x154], 4
mov dword [ebp - 0x158], esi
call edi
test eax, eax
setne byte [ebp - 0x14c]
mov dword [esi], 0x100c85a8
cmp byte [ebp - 0x14c], 0
je 0x10019a8f
mov eax, dword [ebp - 0x150]
lea ecx, [ebp - 0x144]
push ecx
push eax
push dword [ebp - 0x154]
mov dword [ebp - 0x144], eax
push dword [ebp - 0x158]
call edi
sub esp, 8
lea ecx, [ebp - 0x58]
mov eax, esp
mov dword [eax], str.D8_0D_________DD_DA_D9_05_________D8_CA
mov dword [eax + 4], 0x27
call fcn.100187b0
push 3
lea ecx, [ebp - 0x58]
mov dword [ebp - 4], 0
call fcn.100017a0
push 0xffffffffffffffff
lea ecx, [ebp - 0x58]
call fcn.100017a0
mov eax, dword [ebp - 0x28]
lea ecx, [ebp - 0x144]
mov eax, dword [eax + 8]
add eax, 2
push eax
call fcn.10018ab0
mov esi, dword [ebp - 0x144]
lea eax, [ebp - 0x150]
push eax
push 0x40
push 4
push esi
mov dword [ebp - 0x154], 4
mov dword [ebp - 0x158], esi
call edi
test eax, eax
setne byte [ebp - 0x14c]
mov dword [esi], 0x100c85b4
cmp byte [ebp - 0x14c], 0
je 0x10019b37
mov eax, dword [ebp - 0x150]
lea ecx, [ebp - 0x144]
push ecx
push eax
push dword [ebp - 0x154]
mov dword [ebp - 0x144], eax
push dword [ebp - 0x158]
call edi
sub esp, 8
lea ecx, [ebp - 0xa0]
mov eax, esp
mov dword [eax], str.D8_0D_________DD_DA_D9_C0_D8_CA
mov dword [eax + 4], 0x1f
call fcn.100187b0
push eax
lea ecx, [ebp - 0x58]
call fcn.10018e00
lea ecx, [ebp - 0xa0]
call fcn.10018d20
push 2
lea ecx, [ebp - 0x58]
call fcn.100017a0
push 0xffffffffffffffff
lea ecx, [ebp - 0x58]
call fcn.100017a0
mov eax, dword [ebp - 0x28]
lea ecx, [ebp - 0x144]
mov eax, dword [eax + 4]
add eax, 2
push eax
call fcn.10018ab0
mov esi, dword [ebp - 0x144]
lea eax, [ebp - 0x150]
push eax
push 0x40
push 4
push esi
mov dword [ebp - 0x154], 4
mov dword [ebp - 0x158], esi
call edi
test eax, eax
setne byte [ebp - 0x14c]
mov dword [esi], 0x100c85b4
cmp byte [ebp - 0x14c], 0
je 0x10019bef
mov eax, dword [ebp - 0x150]
lea ecx, [ebp - 0x144]
push ecx
push eax
push dword [ebp - 0x154]
mov dword [ebp - 0x144], eax
push dword [ebp - 0x158]
call edi
lea ecx, [ebp - 0x58]
mov dword [ebp - 4], 0xffffffff
call fcn.10018d20
xorps xmm1, xmm1
movss xmm0, dword [0x100c8580]
ucomiss xmm0, xmm1
lahf
test ah, 0x44
jnp 0x10019e93
sub esp, 8
lea ecx, [ebp - 0x58]
mov eax, esp
mov dword [eax], str.D8_0D_________D9_1C_24_E8_________59_59
mov dword [eax + 4], 0x27
call fcn.100187b0
movss xmm0, dword [0x100c8580]
lea ecx, [ebp - 0x58]
mulss xmm0, dword [0x100b6690]
push 7
mov dword [ebp - 4], 1
movss dword [ebp - 0x148], xmm0
call fcn.100017a0
push 0xffffffffffffffff
lea ecx, [ebp - 0x58]
call fcn.100017a0
mov eax, dword [ebp - 0x28]
lea ecx, [ebp - 0x144]
mov eax, dword [eax + 0x18]
push dword [eax + 2]
call fcn.10018ab0
mov esi, dword [ebp - 0x144]
lea eax, [ebp - 0x150]
push eax
push 0x40
push 4
push esi
mov dword [ebp - 0x154], 4
mov dword [ebp - 0x158], esi
call edi
movss xmm0, dword [ebp - 0x148]
test eax, eax
setne byte [ebp - 0x14c]
movss dword [esi], xmm0
cmp byte [ebp - 0x14c], 0
je 0x10019cdb
mov eax, dword [ebp - 0x150]
lea ecx, [ebp - 0x144]
push ecx
push eax
push dword [ebp - 0x154]
mov dword [ebp - 0x144], eax
push dword [ebp - 0x158]
call edi
sub esp, 8
lea ecx, [ebp - 0xa0]
mov eax, esp
mov dword [eax], str.D8_0D_________D9_1C_24_DB_05_________50
mov dword [eax + 4], 0x27
call fcn.100187b0
push eax
lea ecx, [ebp - 0x58]
call fcn.10018e00
lea ecx, [ebp - 0xa0]
call fcn.10018d20
movss xmm0, dword [0x100c8580]
lea ecx, [ebp - 0x58]
mulss xmm0, dword [0x100b6694]
push 0x17
movss dword [ebp - 0x148], xmm0
call fcn.100017a0
push 0xffffffffffffffff
lea ecx, [ebp - 0x58]
call fcn.100017a0
mov eax, dword [ebp - 0x28]
lea ecx, [ebp - 0x144]
mov eax, dword [eax + 0x58]
push dword [eax + 2]
call fcn.10018ab0
mov esi, dword [ebp - 0x144]
lea eax, [ebp - 0x150]
push eax
push 0x40
push 4
push esi
mov dword [ebp - 0x154], 4
mov dword [ebp - 0x158], esi
call edi
movss xmm0, dword [ebp - 0x148]
test eax, eax
setne byte [ebp - 0x14c]
movss dword [esi], xmm0
cmp byte [ebp - 0x14c], 0
je 0x10019db0
mov eax, dword [ebp - 0x150]
lea ecx, [ebp - 0x144]
push ecx
push eax
push dword [ebp - 0x154]
mov dword [ebp - 0x144], eax
push dword [ebp - 0x158]
call edi
sub esp, 8
lea ecx, [ebp - 0xa0]
mov eax, esp
mov dword [eax], str.D8_0D_________D9_1C_24_E8_________A1_________59
mov dword [eax + 4], 0x2f
call fcn.100187b0
push eax
lea ecx, [ebp - 0x58]
call fcn.10018e00
lea ecx, [ebp - 0xa0]
call fcn.10018d20
movss xmm0, dword [0x100c8580]
lea ecx, [ebp - 0x58]
mulss xmm0, dword [0x100b668c]
push 1
movss dword [ebp - 0x148], xmm0
call fcn.100017a0
push 0xffffffffffffffff
lea ecx, [ebp - 0x58]
call fcn.100017a0
mov eax, dword [ebp - 0x28]
lea ecx, [ebp - 0x144]
mov eax, dword [eax]
push dword [eax + 2]
call fcn.10018ab0
mov esi, dword [ebp - 0x144]
lea eax, [ebp - 0x150]
push eax
push 0x40
push 4
push esi
mov dword [ebp - 0x154], 4
mov dword [ebp - 0x158], esi
call edi
movss xmm0, dword [ebp - 0x148]
test eax, eax
setne byte [ebp - 0x14c]
movss dword [esi], xmm0
cmp byte [ebp - 0x14c], 0
je 0x10019e84
mov eax, dword [ebp - 0x150]
lea ecx, [ebp - 0x144]
push ecx
push eax
push dword [ebp - 0x154]
mov dword [ebp - 0x144], eax
push dword [ebp - 0x158]
call edi
lea ecx, [ebp - 0x58]
mov dword [ebp - 4], 0xffffffff
call fcn.10018d20
cmp dword [0x100c66c4], 0xf
mov eax, 0x100c66b0
push 4
cmova eax, dword [0x100c66b0]
push str.auto
push eax
call fcn.1002e880
add esp, 0xc
test eax, eax
je 0x1001a0f5
cmp dword [0x100c66c4], 0xf
mov edx, 0x100c66b0
xorps xmm0, xmm0
mov dword [ebp - 0xd0], 0
cmova edx, dword [0x100c66b0]
mov ecx, edx
mov dword [ebp - 0xcc], 0
movups xmmword [ebp - 0xe0], xmm0
lea esi, [ecx + 1]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x10019ef4
sub ecx, esi
push ecx
push edx
lea ecx, [ebp - 0xe0]
call fcn.1000faf0
mov dword [ebp - 4], 2
call fcn.1002e861
cmp dword [ebp - 0xcc], 0xf
lea esi, [ebp - 0xe0]
mov dword [ebp - 0x148], eax
cmova esi, dword [ebp - 0xe0]
mov dword [eax], 0
lea eax, [ebp - 0x144]
push 0xa
push eax
push esi
call fcn.1002f8f8
add esp, 0xc
mov ecx, eax
cmp esi, dword [ebp - 0x144]
je 0x1001b04d
mov eax, dword [ebp - 0x148]
cmp dword [eax], 0x22
je 0x1001b057
mov dword [0x100c858c], ecx
mov ecx, dword [ebp - 0xcc]
mov dword [ebp - 4], 0xffffffff
cmp ecx, 0xf
jbe 0x10019fac
mov edx, dword [ebp - 0xe0]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x10019fa2
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x1001b061
push ecx
push edx
call fcn.100230ae
add esp, 8
cmp dword [0x100c66c4], 0xf
mov eax, 0x100c66b0
push 0x3a
cmova eax, dword [0x100c66b0]
push eax
call fcn.10025170
xorps xmm0, xmm0
mov dword [ebp - 0xe8], 0
add esp, 8
mov dword [ebp - 0xe4], 0
movups xmmword [ebp - 0xf8], xmm0
lea edx, [eax + 1]
mov ecx, edx
lea esi, [ecx + 1]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x10019ff0
sub ecx, esi
push ecx
push edx
lea ecx, [ebp - 0xf8]
call fcn.1000faf0
mov dword [ebp - 4], 3
call fcn.1002e861
cmp dword [ebp - 0xe4], 0xf
lea esi, [ebp - 0xf8]
mov dword [ebp - 0x148], eax
cmova esi, dword [ebp - 0xf8]
mov dword [eax], 0
lea eax, [ebp - 0x144]
push 0xa
push eax
push esi
call fcn.1002f8f8
add esp, 0xc
mov ecx, eax
cmp esi, dword [ebp - 0x144]
je 0x1001b066
mov eax, dword [ebp - 0x148]
cmp dword [eax], 0x22
je 0x1001b070
mov eax, dword [ebp - 0xe4]
mov dword [0x100c8590], ecx
mov dword [ebp - 4], 0xffffffff
cmp eax, 0xf
jbe 0x1001a0b0
mov edx, dword [ebp - 0xf8]
lea ecx, [eax + 1]
mov eax, edx
cmp ecx, 0x1000
jb 0x1001a0a0
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x1001b07a
push ecx
push edx
call fcn.100230ae
mov ecx, dword [0x100c8590]
add esp, 8
mov eax, dword [0x100c858c]
movd xmm0, eax
cvtdq2pd xmm0, xmm0
shr eax, 0x1f
addsd xmm0, qword [eax*8 + 0x100b5110]
cvtpd2ps xmm0, xmm0
movss dword [0x100c859c], xmm0
movd xmm0, ecx
cvtdq2pd xmm0, xmm0
shr ecx, 0x1f
addsd xmm0, qword [ecx*8 + 0x100b5110]
cvtpd2ps xmm0, xmm0
movss dword [0x100c85a0], xmm0
cmp dword [0x100c85c4], 0
je 0x1001a1e0
sub esp, 8
lea ecx, [ebp - 0x58]
mov eax, esp
mov dword [eax], str.E8_________A1_________50_E8
mov dword [eax + 4], 0x1b
call fcn.100187b0
push 0x10
lea ecx, [ebp - 0x58]
mov dword [ebp - 4], 4
call fcn.100017a0
push 0xffffffffffffffff
lea ecx, [ebp - 0x58]
call fcn.100017a0
mov eax, dword [ebp - 0x28]
push 1
mov ecx, dword [eax + 0x3c]
push ecx
mov eax, esp
mov dword [eax], 0x1000d780
lea eax, [ecx + 1]
push eax
lea ecx, [ebp - 0x144]
call fcn.10018ab0
mov esi, dword [ebp - 0x144]
lea eax, [ebp - 0x150]
push eax
push 0x40
push 4
push esi
mov dword [ebp - 0x154], 4
mov dword [ebp - 0x158], esi
call edi
test eax, eax
setne byte [ebp - 0x14c]
mov ecx, dword [esi]
mov dword [ebp - 0x148], ecx
test eax, eax
je 0x1001a1b8
mov eax, dword [ebp - 0x150]
lea ecx, [ebp - 0x144]
push ecx
push eax
push dword [ebp - 0x154]
mov dword [ebp - 0x144], eax
push dword [ebp - 0x158]
call edi
mov ecx, dword [ebp - 0x148]
push ecx
lea eax, [esi + 4]
add eax, ecx
mov ecx, esp
mov dword [ecx], eax
lea eax, [ebp - 0x148]
push eax
call fcn.1001f6f0
add esp, 0x10
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x58]
call fcn.10018d20
cmp byte [0x100c85d3], 0
je 0x1001a261
push 0xffffffffffffffff
mov ecx, 0x100c7088
call fcn.100017a0
mov eax, dword [0x100c70b8]
push 1
push ecx
mov edx, dword [eax + 0x38]
mov eax, esp
push ecx
mov ecx, esp
mov dword [eax], 0x1000d550
lea eax, [edx + 7]
push eax
call fcn.10018ab0
lea eax, [ebp - 0x148]
push eax
call fcn.1001f650
add esp, 0x10
mov ecx, 0x100c7088
push 0xffffffffffffffff
call fcn.100017a0
mov eax, dword [0x100c70b8]
push 1
push ecx
mov edx, dword [eax + 0x54]
mov eax, esp
push ecx
mov ecx, esp
mov dword [eax], 0x1000d550
lea eax, [edx + 7]
push eax
call fcn.10018ab0
lea eax, [ebp - 0x144]
push eax
call fcn.1001f650
add esp, 0x10
cmp dword [0x100c85cc], 0
je 0x1001a5ff
sub esp, 8
lea ecx, [ebp - 0x58]
mov eax, esp
mov dword [eax], str.D8_44_24_38_D9_1C_24_E8_________83_C4_18
mov dword [eax + 4], 0x28
call fcn.100187b0
push 1
lea ecx, [ebp - 0x58]
mov dword [ebp - 4], 5
call fcn.100017a0
push 0xffffffffffffffff
lea ecx, [ebp - 0x58]
call fcn.100017a0
mov eax, dword [ebp - 0x28]
push 1
push ecx
mov edx, dword [eax]
mov eax, esp
push ecx
mov ecx, esp
mov dword [eax], 0x1001fec0
lea eax, [edx + 7]
push eax
call fcn.10018ab0
lea eax, [ebp - 0x148]
push eax
call fcn.1001f650
add esp, 0x10
lea ecx, [ebp - 0x58]
mov eax, dword [eax]
push 1
mov dword [0x100c8638], eax
call fcn.100017a0
push 0xffffffffffffffff
lea ecx, [ebp - 0x58]
call fcn.100017a0
mov eax, dword [ebp - 0x28]
push 1
push ecx
mov edx, dword [eax]
mov eax, esp
push ecx
mov ecx, esp
push edx
mov dword [eax], 0x1001f050
call fcn.10018ab0
lea eax, [ebp - 0x144]
push eax
call fcn.1001f6f0
add esp, 0x10
lea ecx, [ebp - 0x58]
push 1
call fcn.100017a0
push 0xffffffffffffffff
lea ecx, [ebp - 0x58]
call fcn.100017a0
mov eax, dword [ebp - 0x28]
lea ecx, [ebp - 0xa0]
sub esp, 8
mov eax, dword [eax]
add eax, 7
mov dword [0x100c8624], eax
mov eax, esp
mov dword [eax], str.66_A3_________A0_________D9_05
mov dword [eax + 4], 0x1e
call fcn.100187b0
push eax
lea ecx, [ebp - 0x58]
call fcn.10018e00
lea ecx, [ebp - 0xa0]
call fcn.10018d20
push 1
lea ecx, [ebp - 0x58]
call fcn.100017a0
push 0xffffffffffffffff
lea ecx, [ebp - 0x58]
call fcn.100017a0
mov eax, dword [ebp - 0x28]
push 1
mov edi, dword [eax]
lea ecx, [ebp - 0x58]
call fcn.100017a0
push 0xffffffffffffffff
lea ecx, [ebp - 0x58]
call fcn.100017a0
mov eax, dword [ebp - 0x28]
lea ecx, [ebp - 0x144]
mov esi, dword [eax]
lea eax, [edi + 6]
push eax
call fcn.10018ab0
push esi
lea ecx, [ebp - 0x148]
call fcn.10018ab0
mov eax, dword [ebp - 0x144]
mov esi, dword [ebp - 0x148]
sub eax, esi
push 1
push eax
push ecx
mov eax, esp
mov dword [eax], esi
call fcn.1001f790
add esp, 0xc
push 1
push 5
push ecx
mov eax, esp
mov dword [eax], esi
call fcn.1001f790
mov eax, dword [0x100c8a74]
add esp, 0xc
mov ecx, dword fs:[0x2c]
mov ecx, dword [ecx + eax*4]
mov eax, dword [0x100c8690]
cmp eax, dword [ecx + 4]
jg 0x1001b07f
push 0x10017af0
lea eax, [ebp - 0xc8]
push esi
push eax
call fcn.1000ba20
add esp, 0xc
mov eax, dword [0x100c8688]
lea ecx, [ebp - 0xc8]
mov byte [ebp - 4], 6
push ecx
cmp eax, dword [0x100c868c]
je 0x1001a43c
mov ecx, eax
call fcn.1000a5a0
add dword [0x100c8688], 0x70
jmp 0x1001a447
push eax
mov ecx, 0x100c8684
call fcn.10017ec0
lea ecx, [ebp - 0x6c]
mov byte [ebp - 4], 5
call fcn.1000aad0
lea ecx, [ebp - 0xc8]
call fcn.1000ab40
sub esp, 8
lea ecx, [ebp - 0xa0]
mov eax, esp
mov dword [eax], str.6A_32_6A_64_6A_64_6A_64_E8
mov dword [eax + 4], 0x1a
call fcn.100187b0
push eax
lea ecx, [ebp - 0x58]
call fcn.10018e00
lea ecx, [ebp - 0xa0]
call fcn.10018d20
push 1
lea ecx, [ebp - 0x58]
call fcn.100017a0
push 0xffffffffffffffff
lea ecx, [ebp - 0x58]
call fcn.100017a0
mov eax, dword [ebp - 0x28]
push 1
push 0
push ecx
mov eax, dword [eax]
mov ecx, esp
inc eax
push eax
call fcn.10018ab0
call fcn.10017c00
add esp, 4
lea ecx, [ebp - 0xa0]
mov eax, esp
mov dword [eax], str.8D_4C_24_0C_68_FF_00_00_00_6A_00_6A_00_6A_00
mov dword [eax + 4], 0x2c
call fcn.100187b0
push eax
lea ecx, [ebp - 0x58]
call fcn.10018e00
lea ecx, [ebp - 0xa0]
call fcn.10018d20
push 3
lea ecx, [ebp - 0x58]
call fcn.100017a0
push 0xffffffffffffffff
lea ecx, [ebp - 0x58]
call fcn.100017a0
mov eax, dword [ebp - 0x28]
push 1
push 0
push ecx
mov eax, dword [eax + 8]
mov ecx, esp
add eax, 5
push eax
call fcn.10018ab0
call fcn.10017c70
add esp, 4
lea ecx, [ebp - 0xa0]
mov eax, esp
mov dword [eax], str.E8_________83_C4_0C_E8_________83_C4_18
mov dword [eax + 4], 0x27
call fcn.100187b0
push eax
lea ecx, [ebp - 0x58]
call fcn.10018e00
lea ecx, [ebp - 0xa0]
call fcn.10018d20
push 1
lea ecx, [ebp - 0x58]
call fcn.100017a0
push 0xffffffffffffffff
lea ecx, [ebp - 0x58]
call fcn.100017a0
mov eax, dword [ebp - 0x28]
push 1
push ecx
mov edx, dword [eax]
mov eax, esp
push ecx
mov ecx, esp
mov dword [eax], 0x1001fe80
push edx
call fcn.10018ab0
lea eax, [ebp - 0x148]
push eax
call fcn.1001f650
add esp, 8
lea ecx, [ebp - 0xa0]
mov eax, dword [eax]
mov dword [0x100c863c], eax
mov eax, esp
mov dword [eax], str.E8_________8B_85_08_01_00_00_83_C4_0C_3D_FF_00_00_00
mov dword [eax + 4], 0x34
call fcn.100187b0
push eax
lea ecx, [ebp - 0x58]
call fcn.10018e00
lea ecx, [ebp - 0xa0]
call fcn.10018d20
push 1
lea ecx, [ebp - 0x58]
call fcn.100017a0
push 0xffffffffffffffff
lea ecx, [ebp - 0x58]
call fcn.100017a0
mov eax, dword [ebp - 0x28]
push 1
push 5
push ecx
mov ecx, esp
push dword [eax]
call fcn.10018ab0
call fcn.1001f790
add esp, 0xc
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x58]
call fcn.10018d20
mov edi, dword [sym.imp.KERNEL32.dll_VirtualProtect]
sub esp, 8
lea ecx, [ebp - 0x140]
mov eax, esp
mov dword [eax], str.DD_D8_E8_________83_C4_0C_6A_00
mov dword [eax + 4], 0x1f
call fcn.100187b0
push 1
lea ecx, [ebp - 0x140]
mov dword [ebp - 4], 7
call fcn.100017a0
push 0xffffffffffffffff
lea ecx, [ebp - 0x140]
call fcn.100017a0
mov eax, dword [ebp - 0x110]
push 1
push ecx
mov edx, dword [eax]
mov eax, esp
push ecx
mov ecx, esp
mov dword [eax], 0x1001fe80
lea eax, [edx + 2]
push eax
call fcn.10018ab0
lea eax, [ebp - 0x148]
push eax
call fcn.1001f650
add esp, 8
lea ecx, [ebp - 0xa0]
mov eax, dword [eax]
mov dword [0x100c863c], eax
mov eax, esp
mov dword [eax], str.A1_________3B_C3
mov dword [eax + 4], 0x10
call fcn.100187b0
push eax
lea ecx, [ebp - 0x140]
call fcn.10018e00
lea ecx, [ebp - 0xa0]
call fcn.10018d20
cmp dword [0x100c66f4], 0xf
mov eax, 0x100c66e0
push 3
cmova eax, dword [0x100c66e0]
push 0x100b62bc
push dword [0x100c66f0]
push eax
call fcn.10010f30
add esp, 0x10
test al, al
jne 0x1001a710
push 1
lea ecx, [ebp - 0x140]
call fcn.100017a0
push 0xffffffffffffffff
lea ecx, [ebp - 0x140]
call fcn.100017a0
mov eax, dword [ebp - 0x110]
push 1
push 0x100c85f8
push ecx
mov eax, dword [eax]
mov ecx, esp
inc eax
push eax
call fcn.10018ab0
call fcn.10017c70
add esp, 0xc
jmp 0x1001a78e
sub esp, 8
lea ecx, [ebp - 0x58]
mov eax, esp
mov dword [eax], str.C7_05_________01_00_00_00_C7_05_________01_00_00_00
mov dword [eax + 4], 0x33
call fcn.100187b0
push 3
lea ecx, [ebp - 0x58]
mov byte [ebp - 4], 8
call fcn.100017a0
push 0xffffffffffffffff
lea ecx, [ebp - 0x58]
call fcn.100017a0
mov eax, dword [ebp - 0x28]
lea ecx, [ebp - 0x140]
push 1
mov eax, dword [eax + 8]
mov esi, dword [eax + 2]
call fcn.100017a0
push 0xffffffffffffffff
lea ecx, [ebp - 0x140]
call fcn.100017a0
mov eax, dword [ebp - 0x110]
push 1
push esi
push ecx
mov eax, dword [eax]
mov ecx, esp
inc eax
push eax
call fcn.10018ab0
call fcn.10017c70
add esp, 0xc
mov byte [ebp - 4], 7
lea ecx, [ebp - 0x58]
call fcn.10018d20
cmp byte [0x100c85b8], 0
je 0x1001a810
sub esp, 8
lea ecx, [ebp - 0xa0]
mov eax, esp
mov dword [eax], str.D9_C2_DE_CB_D9_C2_DE_CB_D9_05
mov dword [eax + 4], 0x1d
call fcn.100187b0
push eax
lea ecx, [ebp - 0x140]
call fcn.10018e00
lea ecx, [ebp - 0xa0]
call fcn.10018d20
push 1
lea ecx, [ebp - 0x140]
call fcn.100017a0
push 0xffffffffffffffff
lea ecx, [ebp - 0x140]
call fcn.100017a0
mov eax, dword [ebp - 0x110]
push 1
sub esp, 8
mov ecx, esp
mov eax, dword [eax]
mov dword [esp + 4], 0x40000000
push dword [eax + 0xa]
call fcn.10018ab0
call fcn.10017ce0
add esp, 0xc
cmp byte [0x100c85bb], 0
je 0x1001adfe
sub esp, 8
mov dword [0x100c85dc], 0x428e0000
mov eax, esp
lea ecx, [ebp - 0x58]
mov dword [eax], str.D8_05_________DE_C1_D9_5C_24_28
mov dword [eax + 4], 0x1f
call fcn.100187b0
movss xmm0, dword [0x100c85dc]
lea ecx, [ebp - 0x58]
push 1
mov byte [ebp - 4], 9
movss dword [ebp - 0x144], xmm0
call fcn.100017a0
push 0xffffffffffffffff
lea ecx, [ebp - 0x58]
call fcn.100017a0
mov eax, dword [ebp - 0x28]
movss xmm0, dword [ebp - 0x144]
push 1
sub esp, 8
mov eax, dword [eax]
mov ecx, esp
movss dword [esp + 4], xmm0
push dword [eax + 2]
call fcn.10018ab0
call fcn.10017ce0
add esp, 4
lea ecx, [ebp - 0xa0]
mov eax, esp
mov dword [eax], str.83_EC_50_DD_D9_D9_05_________D8_C9
mov dword [eax + 4], 0x22
call fcn.100187b0
push eax
lea ecx, [ebp - 0x58]
call fcn.10018e00
lea ecx, [ebp - 0xa0]
call fcn.10018d20
push 1
lea ecx, [ebp - 0x58]
call fcn.100017a0
push 0xffffffffffffffff
lea ecx, [ebp - 0x58]
call fcn.100017a0
mov eax, dword [ebp - 0x28]
push 1
push 0x100c70d0
push ecx
mov eax, dword [eax]
mov ecx, esp
add eax, 7
push eax
call fcn.10018ab0
call fcn.10017c70
add esp, 0xc
lea ecx, [ebp - 0x58]
push 1
call fcn.100017a0
push 0xffffffffffffffff
lea ecx, [ebp - 0x58]
call fcn.100017a0
mov eax, dword [ebp - 0x28]
push 1
push 0x100c70d0
push ecx
mov eax, dword [eax]
mov ecx, esp
add eax, 0x3c
push eax
call fcn.10018ab0
call fcn.10017c70
add esp, 4
mov dword [0x100c85d4], 0x42b10000
mov eax, esp
lea ecx, [ebp - 0xa0]
mov dword [eax], str.D8_0D_________DD_D9_D9_C2_D8_C9_D8_0D
mov dword [eax + 4], 0x25
call fcn.100187b0
push eax
lea ecx, [ebp - 0x58]
call fcn.10018e00
lea ecx, [ebp - 0xa0]
call fcn.10018d20
movss xmm0, dword [0x100c85d4]
lea ecx, [ebp - 0x58]
push 1
movss dword [ebp - 0x144], xmm0
call fcn.100017a0
push 0xffffffffffffffff
lea ecx, [ebp - 0x58]
call fcn.100017a0
mov eax, dword [ebp - 0x28]
movss xmm0, dword [ebp - 0x144]
push 1
sub esp, 8
mov eax, dword [eax]
mov ecx, esp
movss dword [esp + 4], xmm0
push dword [eax + 2]
call fcn.10018ab0
call fcn.10017ce0
add esp, 4
mov dword [0x100c85e0], 0x42d90000
mov eax, esp
lea ecx, [ebp - 0xa0]
mov dword [eax], str.D9_05_________D8_CB_DA_2C_24_DE_C1
mov dword [eax + 4], 0x22
call fcn.100187b0
push eax
lea ecx, [ebp - 0x58]
call fcn.10018e00
lea ecx, [ebp - 0xa0]
call fcn.10018d20
movss xmm0, dword [0x100c85e0]
lea ecx, [ebp - 0x58]
push 1
movss dword [ebp - 0x144], xmm0
call fcn.100017a0
push 0xffffffffffffffff
lea ecx, [ebp - 0x58]
call fcn.100017a0
mov eax, dword [ebp - 0x28]
movss xmm0, dword [ebp - 0x144]
push 1
sub esp, 8
mov eax, dword [eax]
mov ecx, esp
movss dword [esp + 4], xmm0
push dword [eax + 2]
call fcn.10018ab0
call fcn.10017ce0
add esp, 4
mov dword [0x100c85d8], 0x42a20000
mov eax, esp
lea ecx, [ebp - 0xa0]
mov dword [eax], str.D9_05_________D8_C9_DD_DB_D9_C1_D8_CB
mov dword [eax + 4], 0x25
call fcn.100187b0
push eax
lea ecx, [ebp - 0x58]
call fcn.10018e00
lea ecx, [ebp - 0xa0]
call fcn.10018d20
movss xmm0, dword [0x100c85d8]
lea ecx, [ebp - 0x58]
push 1
movss dword [ebp - 0x144], xmm0
call fcn.100017a0
push 0xffffffffffffffff
lea ecx, [ebp - 0x58]
call fcn.100017a0
mov eax, dword [ebp - 0x28]
movss xmm0, dword [ebp - 0x144]
push 1
sub esp, 8
mov eax, dword [eax]
mov ecx, esp
movss dword [esp + 4], xmm0
push dword [eax + 2]
call fcn.10018ab0
call fcn.10017ce0
mov dword [0x100c85ec], 0x42820000
add esp, 4
mov dword [0x100c85f4], 0x428e0000
mov eax, esp
lea ecx, [ebp - 0xa0]
mov dword [eax], str.C7_84_24_80_04_00_00_00_00_08_42
mov dword [eax + 4], 0x20
call fcn.100187b0
push eax
lea ecx, [ebp - 0x58]
call fcn.10018e00
lea ecx, [ebp - 0xa0]
call fcn.10018d20
movss xmm0, dword [0x100c85ec]
lea ecx, [ebp - 0x58]
push 1
movss dword [ebp - 0x144], xmm0
call fcn.100017a0
push 0xffffffffffffffff
lea ecx, [ebp - 0x58]
call fcn.100017a0
mov eax, dword [ebp - 0x28]
movss xmm0, dword [ebp - 0x144]
push 1
sub esp, 8
mov eax, dword [eax]
mov ecx, esp
add eax, 7
movss dword [esp + 4], xmm0
push eax
call fcn.10018ab0
call fcn.10017ce0
add esp, 4
lea ecx, [ebp - 0xa0]
mov eax, esp
mov dword [eax], str.C7_84_24_A0_04_00_00_00_00_08_42
mov dword [eax + 4], 0x20
call fcn.100187b0
push eax
lea ecx, [ebp - 0x58]
call fcn.10018e00
lea ecx, [ebp - 0xa0]
call fcn.10018d20
movss xmm0, dword [0x100c85ec]
lea ecx, [ebp - 0x58]
push 1
movss dword [ebp - 0x144], xmm0
call fcn.100017a0
push 0xffffffffffffffff
lea ecx, [ebp - 0x58]
call fcn.100017a0
mov eax, dword [ebp - 0x28]
movss xmm0, dword [ebp - 0x144]
push 1
sub esp, 8
mov eax, dword [eax]
mov ecx, esp
add eax, 7
movss dword [esp + 4], xmm0
push eax
call fcn.10018ab0
call fcn.10017ce0
add esp, 4
lea ecx, [ebp - 0xa0]
mov eax, esp
mov dword [eax], str.D8_05_________D8_05_________D9_9C_24
mov dword [eax + 4], 0x24
call fcn.100187b0
push eax
lea ecx, [ebp - 0x58]
call fcn.10018e00
lea ecx, [ebp - 0xa0]
call fcn.10018d20
push 2
lea ecx, [ebp - 0x58]
call fcn.100017a0
push 0xffffffffffffffff
lea ecx, [ebp - 0x58]
call fcn.100017a0
mov eax, dword [ebp - 0x28]
push 1
mov eax, dword [eax]
push 0x100c85f4
push ecx
add eax, 2
mov ecx, esp
push eax
call fcn.10018ab0
call fcn.10017c70
add esp, 0xc
lea ecx, [ebp - 0x58]
push 2
call fcn.100017a0
push 0xffffffffffffffff
lea ecx, [ebp - 0x58]
call fcn.100017a0
mov eax, dword [ebp - 0x28]
push 1
push 0x100c85f4
push ecx
mov eax, dword [eax + 4]
mov ecx, esp
add eax, 2
push eax
call fcn.10018ab0
call fcn.10017c70
add esp, 4
mov dword [0x100c85e4], 0x42b10000
mov eax, esp
lea ecx, [ebp - 0xa0]
mov dword [eax], str.D8_0D_________D8_05_________D8_05_________D9_9C_24_98_04_00_00
mov dword [eax + 4], 0x3e
call fcn.100187b0
push eax
lea ecx, [ebp - 0x58]
call fcn.10018e00
lea ecx, [ebp - 0xa0]
call fcn.10018d20
movss xmm0, dword [0x100c85e4]
lea ecx, [ebp - 0x58]
push 1
movss dword [ebp - 0x144], xmm0
call fcn.100017a0
push 0xffffffffffffffff
lea ecx, [ebp - 0x58]
call fcn.100017a0
mov eax, dword [ebp - 0x28]
movss xmm0, dword [ebp - 0x144]
push 1
sub esp, 8
mov eax, dword [eax]
mov ecx, esp
movss dword [esp + 4], xmm0
push dword [eax + 2]
call fcn.10018ab0
call fcn.10017ce0
add esp, 4
mov dword [0x100c85f0], 0x42d90000
mov eax, esp
lea ecx, [ebp - 0xa0]
mov dword [eax], str.D9_05_________D8_CA_DA_6C_24_74_51
mov dword [eax + 4], 0x22
call fcn.100187b0
push eax
lea ecx, [ebp - 0x58]
call fcn.10018e00
lea ecx, [ebp - 0xa0]
call fcn.10018d20
movss xmm0, dword [0x100c85f0]
lea ecx, [ebp - 0x58]
push 1
movss dword [ebp - 0x144], xmm0
call fcn.100017a0
push 0xffffffffffffffff
lea ecx, [ebp - 0x58]
call fcn.100017a0
mov eax, dword [ebp - 0x28]
movss xmm0, dword [ebp - 0x144]
push 1
sub esp, 8
mov eax, dword [eax]
mov ecx, esp
movss dword [esp + 4], xmm0
push dword [eax + 2]
call fcn.10018ab0
call fcn.10017ce0
add esp, 4
mov dword [0x100c85e8], 0x42a20000
mov eax, esp
lea ecx, [ebp - 0xa0]
mov dword [eax], str.D9_05_________D8_CA_D8_C1
mov dword [eax + 4], 0x19
call fcn.100187b0
push eax
lea ecx, [ebp - 0x58]
call fcn.10018e00
lea ecx, [ebp - 0xa0]
call fcn.10018d20
movss xmm0, dword [0x100c85e8]
lea ecx, [ebp - 0x58]
push 1
movss dword [ebp - 0x144], xmm0
call fcn.100017a0
push 0xffffffffffffffff
lea ecx, [ebp - 0x58]
call fcn.100017a0
mov eax, dword [ebp - 0x28]
movss xmm0, dword [ebp - 0x144]
push 1
sub esp, 8
mov eax, dword [eax]
mov ecx, esp
movss dword [esp + 4], xmm0
push dword [eax + 2]
call fcn.10018ab0
call fcn.10017ce0
add esp, 0xc
mov byte [ebp - 4], 7
lea ecx, [ebp - 0x58]
call fcn.10018d20
cmp dword [0x100c85cc], 0
je 0x1001ae6d
sub esp, 8
lea ecx, [ebp - 0x58]
mov eax, esp
mov dword [eax], str.8B_44_24_04_66_A3_________C3
mov dword [eax + 4], 0x1c
call fcn.100187b0
push 1
lea ecx, [ebp - 0x58]
mov byte [ebp - 4], 0xa
call fcn.100017a0
push 0xffffffffffffffff
lea ecx, [ebp - 0x58]
call fcn.100017a0
mov eax, dword [ebp - 0x28]
push 1
push ecx
mov edx, dword [eax]
mov eax, esp
push ecx
mov ecx, esp
push edx
mov dword [eax], 0x10021490
call fcn.10018ab0
lea eax, [ebp - 0x144]
push eax
call fcn.1001f6f0
add esp, 0x10
mov byte [ebp - 4], 7
lea ecx, [ebp - 0x58]
call fcn.10018d20
cmp byte [0x100c860c], 0
je 0x1001af2b
sub esp, 8
lea ecx, [ebp - 0xa0]
mov eax, esp
mov dword [eax], str.A0_________B9_________A2_________A0________
mov dword [eax + 4], 0x2b
call fcn.100187b0
push 1
lea ecx, [ebp - 0xa0]
mov byte [ebp - 4], 0xb
call fcn.100017a0
push 0xffffffffffffffff
lea ecx, [ebp - 0xa0]
call fcn.100017a0
mov eax, dword [ebp - 0x70]
lea ecx, [ebp - 0x144]
push dword [eax]
call fcn.10018ab0
mov esi, dword [ebp - 0x144]
lea eax, [ebp - 0x150]
push eax
push 0x40
push 1
push esi
mov dword [ebp - 0x154], 1
mov dword [ebp - 0x158], esi
call edi
test eax, eax
setne byte [ebp - 0x14c]
mov byte [esi], 0xc3
cmp byte [ebp - 0x14c], 0
je 0x1001af20
mov eax, dword [ebp - 0x150]
lea ecx, [ebp - 0x144]
push ecx
push eax
push dword [ebp - 0x154]
mov dword [ebp - 0x144], eax
push dword [ebp - 0x158]
call edi
lea ecx, [ebp - 0xa0]
call fcn.10018d20
lea ecx, [ebp - 0x140]
call fcn.10018d20
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
mov ecx, dword [ebp - 0x10]
xor ecx, ebp
call fcn.100230bc
mov esp, ebp
pop ebp
ret
push 0x100c8650
call fcn.100234e5
add esp, 4
cmp dword [0x100c8650], 0xffffffff
jne 0x100196ff
mov ecx, 0x100c8644
mov dword [0x100c8644], 0x100b543c
mov dword [0x100c864c], 0
mov dword [0x100c8648], 0
call fcn.1001b0c0
push 0x100c8650
call fcn.10023494
add esp, 4
jmp 0x100196ff
push 0x100c8650
call fcn.100234e5
add esp, 4
cmp dword [0x100c8650], 0xffffffff
jne 0x100197de
mov ecx, 0x100c8644
mov dword [0x100c8644], 0x100b543c
mov dword [0x100c864c], 0
mov dword [0x100c8648], 0
call fcn.1001b0c0
push 0x100c8650
call fcn.10023494
add esp, 4
jmp 0x100197de
push 0x100c8650
call fcn.100234e5
add esp, 4
cmp dword [0x100c8650], 0xffffffff
jne 0x10019900
mov ecx, 0x100c8644
mov dword [0x100c8644], 0x100b543c
mov dword [0x100c864c], 0
mov dword [0x100c8648], 0
call fcn.1001b0c0
push 0x100c8650
call fcn.10023494
add esp, 4
jmp 0x10019900
push 0x100b5404
call fcn.10021f94
push str.stoi_argument_out_of_range
call fcn.10021fd4
call fcn.10028098
push 0x100b5404
call fcn.10021f94
push str.stoi_argument_out_of_range
call fcn.10021fd4
call fcn.10028098
push 0x100c8690
call fcn.100234e5
add esp, 4
cmp dword [0x100c8690], 0xffffffff
jne 0x1001a3ff
push 0x100450f0
call fcn.10023454
push 0x100c8690
call fcn.10023494
add esp, 8
jmp 0x1001a3ff