Function at 0x1006c530
Capabilities:
Allocate or change rwx memory
Execute shellcode via indirect call

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x10096f0d
mov eax, dword fs:[0]
push eax
sub esp, 0x2c
mov eax, dword [0x100a9040]
xor eax, ebp
mov dword [ebp - 0x10], eax
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov eax, dword [0x100ccfc4]
mov ecx, dword [0x100b88cc]
push 0x1008d8d0
push 0xfffffffffffffffc
push dword [eax + 8]
call ecx
mov edi, dword [0x100ccf60]
mov dword [0x100cda2c], eax
mov dword [0x100cd3b0], edi
mov eax, dword [edi]
mov dword [0x100cd3b4], eax
test eax, eax
je 0x1006c69b
xor esi, esi
mov eax, dword [0x100cd3b4]
mov ecx, dword [eax + esi*4]
test ecx, ecx
je 0x1006c5c2
mov eax, dword [0x100b88c8]
lea edx, [ebp - 0x38]
push 0x1c
push edx
push ecx
call eax
test eax, eax
je 0x1006c5c2
mov eax, dword [ebp - 0x24]
test al, 1
jne 0x1006c5c2
test eax, 0x100
jne 0x1006c5c2
inc esi
jmp 0x1006c593
mov dword [ebp - 0x14], esi
mov dword [0x100cd3bc], esi
test esi, esi
je 0x1006c69b
inc esi
mov ecx, 4
mov eax, esi
mov dword [ebp - 0x18], esi
mul ecx
mov ecx, 0xffffffff
cmovb eax, ecx
add eax, 4
cmovb eax, ecx
push eax
call fcn.1008e47c
add esp, 4
mov dword [ebp - 0x1c], eax
mov dword [ebp - 4], 0
mov dword [eax], esi
lea esi, [eax + 4]
mov eax, dword [ebp - 0x14]
push fcn.10017690
push 0x10017680
inc eax
push eax
push 4
push esi
call fcn.1008e408
mov dword [ebp - 4], 0xffffffff
mov eax, dword [0x100cd3b8]
mov dword [0x100cd3b8], esi
test eax, eax
je 0x1006c66c
push fcn.10017690
lea esi, [eax - 4]
mov dword [ebp - 4], 1
push dword [esi]
push 4
push eax
call fcn.1008dfa8
mov eax, dword [esi]
lea eax, [eax*4 + 4]
push eax
push esi
call fcn.1008df6a
mov dword [ebp - 4], 0xffffffff
add esp, 8
mov esi, dword [0x100cd3b8]
test esi, esi
je 0x1006c6a1
mov eax, dword [0x100cd3bc]
lea eax, [eax*4 + 4]
push eax
mov eax, dword [0x100cd3b4]
add eax, 0xfffffffc
push eax
push esi
call sub.VCRUNTIME140.dll_memcpy
add esp, 0xc
add esi, 4
mov dword [edi], esi
mov byte [0x100cd3c0], 1
mov esi, dword [0x100cd3b8]
xor eax, eax
cmp byte [0x100cd3c0], al
setne al
add eax, 0x29
cmp dword [0x100cd3b4], 0
je 0x1006c6cb
test esi, esi
je 0x1006c6cb
cmp eax, dword [0x100cd3bc]
ja 0x1006c6cb
mov dword [esi + eax*4], 0x1007e840
mov edi, dword [0x100ccf48]
mov dword [0x100cd3d8], edi
mov eax, dword [edi]
mov dword [0x100cd3dc], eax
test eax, eax
je 0x1006c7f8
xor esi, esi
nop dword [eax + eax]
mov eax, dword [0x100cd3dc]
mov ecx, dword [eax + esi*4]
test ecx, ecx
je 0x1006c71f
mov eax, dword [0x100b88c8]
lea edx, [ebp - 0x38]
push 0x1c
push edx
push ecx
call eax
test eax, eax
je 0x1006c71f
mov eax, dword [ebp - 0x24]
test al, 1
jne 0x1006c71f
test eax, 0x100
jne 0x1006c71f
inc esi
jmp 0x1006c6f0
mov dword [ebp - 0x14], esi
mov dword [0x100cd3e4], esi
test esi, esi
je 0x1006c7f8
inc esi
mov ecx, 4
mov eax, esi
mov dword [ebp - 0x18], esi
mul ecx
mov ecx, 0xffffffff
cmovb eax, ecx
add eax, 4
cmovb eax, ecx
push eax
call fcn.1008e47c
add esp, 4
mov dword [ebp - 0x1c], eax
mov dword [ebp - 4], 3
mov dword [eax], esi
lea esi, [eax + 4]
mov eax, dword [ebp - 0x14]
push fcn.10017690
push 0x10017680
inc eax
push eax
push 4
push esi
call fcn.1008e408
mov dword [ebp - 4], 0xffffffff
mov eax, dword [0x100cd3e0]
mov dword [0x100cd3e0], esi
test eax, eax
je 0x1006c7c9
push fcn.10017690
lea esi, [eax - 4]
mov dword [ebp - 4], 4
push dword [esi]
push 4
push eax
call fcn.1008dfa8
mov eax, dword [esi]
lea eax, [eax*4 + 4]
push eax
push esi
call fcn.1008df6a
mov dword [ebp - 4], 0xffffffff
add esp, 8
mov esi, dword [0x100cd3e0]
test esi, esi
je 0x1006c7fe
mov eax, dword [0x100cd3e4]
lea eax, [eax*4 + 4]
push eax
mov eax, dword [0x100cd3dc]
add eax, 0xfffffffc
push eax
push esi
call sub.VCRUNTIME140.dll_memcpy
add esp, 0xc
add esi, 4
mov dword [edi], esi
mov byte [0x100cd3e8], 1
mov esi, dword [0x100cd3e0]
xor eax, eax
cmp byte [0x100cd3e8], al
setne al
add eax, 5
cmp dword [0x100cd3dc], 0
je 0x1006c82e
test esi, esi
je 0x1006c82e
cmp eax, dword [0x100cd3e4]
ja 0x1006c82e
mov dword [esi + eax*4], 0x10073db0
mov esi, dword [0x100cd3e0]
xor eax, eax
cmp byte [0x100cd3e8], al
setne al
add eax, 6
cmp dword [0x100cd3dc], 0
je 0x1006c85e
test esi, esi
je 0x1006c85e
cmp eax, dword [0x100cd3e4]
ja 0x1006c85e
mov dword [esi + eax*4], 0x10073e50
mov esi, dword [0x100cd3e0]
xor eax, eax
cmp byte [0x100cd3e8], al
setne al
add eax, 7
cmp dword [0x100cd3dc], 0
je 0x1006c88e
test esi, esi
je 0x1006c88e
cmp eax, dword [0x100cd3e4]
ja 0x1006c88e
mov dword [esi + eax*4], 0x10073ea0
mov esi, dword [0x100cd3e0]
xor eax, eax
cmp byte [0x100cd3e8], al
setne al
add eax, 0x24
cmp dword [0x100cd3dc], 0
je 0x1006c8b8
test esi, esi
je 0x1006c8b8
cmp eax, dword [0x100cd3e4]
ja 0x1006c8b8
mov dword [esi + eax*4], 0x10073f10
mov edi, dword [0x100ccf50]
mov dword [0x100cd400], edi
mov eax, dword [edi]
mov dword [0x100cd404], eax
test eax, eax
je 0x1006c9dd
xor esi, esi
mov eax, dword [0x100cd404]
mov ecx, dword [eax + esi*4]
test ecx, ecx
je 0x1006c904
mov eax, dword [0x100b88c8]
lea edx, [ebp - 0x38]
push 0x1c
push edx
push ecx
call eax
test eax, eax
je 0x1006c904
mov eax, dword [ebp - 0x24]
test al, 1
jne 0x1006c904
test eax, 0x100
jne 0x1006c904
inc esi
jmp 0x1006c8d5
mov dword [ebp - 0x14], esi
mov dword [0x100cd40c], esi
test esi, esi
je 0x1006c9dd
inc esi
mov ecx, 4
mov eax, esi
mov dword [ebp - 0x18], esi
mul ecx
mov ecx, 0xffffffff
cmovb eax, ecx
add eax, 4
cmovb eax, ecx
push eax
call fcn.1008e47c
add esp, 4
mov dword [ebp - 0x1c], eax
mov dword [ebp - 4], 6
mov dword [eax], esi
lea esi, [eax + 4]
mov eax, dword [ebp - 0x14]
push fcn.10017690
push 0x10017680
inc eax
push eax
push 4
push esi
call fcn.1008e408
mov dword [ebp - 4], 0xffffffff
mov eax, dword [0x100cd408]
mov dword [0x100cd408], esi
test eax, eax
je 0x1006c9ae
push fcn.10017690
lea esi, [eax - 4]
mov dword [ebp - 4], 7
push dword [esi]
push 4
push eax
call fcn.1008dfa8
mov eax, dword [esi]
lea eax, [eax*4 + 4]
push eax
push esi
call fcn.1008df6a
mov dword [ebp - 4], 0xffffffff
add esp, 8
mov esi, dword [0x100cd408]
test esi, esi
je 0x1006c9e3
mov eax, dword [0x100cd40c]
lea eax, [eax*4 + 4]
push eax
mov eax, dword [0x100cd404]
add eax, 0xfffffffc
push eax
push esi
call sub.VCRUNTIME140.dll_memcpy
add esp, 0xc
add esi, 4
mov dword [edi], esi
mov byte [0x100cd410], 1
mov esi, dword [0x100cd408]
xor eax, eax
cmp byte [0x100cd410], al
setne al
add eax, 0x1b
cmp dword [0x100cd404], 0
je 0x1006ca13
test esi, esi
je 0x1006ca13
cmp eax, dword [0x100cd40c]
ja 0x1006ca13
mov dword [esi + eax*4], 0x10071990
mov esi, dword [0x100cd408]
xor eax, eax
cmp byte [0x100cd410], al
setne al
add eax, 0x5d
cmp dword [0x100cd404], 0
je 0x1006ca3d
test esi, esi
je 0x1006ca3d
cmp eax, dword [0x100cd40c]
ja 0x1006ca3d
mov dword [esi + eax*4], 0x10071ad0
mov edi, dword [0x100ccfa4]
mov dword [0x100cd414], edi
mov eax, dword [edi]
mov dword [0x100cd418], eax
test eax, eax
je 0x1006cb68
xor esi, esi
nop word [eax + eax]
mov eax, dword [0x100cd418]
mov ecx, dword [eax + esi*4]
test ecx, ecx
je 0x1006ca8f
mov eax, dword [0x100b88c8]
lea edx, [ebp - 0x38]
push 0x1c
push edx
push ecx
call eax
test eax, eax
je 0x1006ca8f
mov eax, dword [ebp - 0x24]
test al, 1
jne 0x1006ca8f
test eax, 0x100
jne 0x1006ca8f
inc esi
jmp 0x1006ca60
mov dword [ebp - 0x14], esi
mov dword [0x100cd420], esi
test esi, esi
je 0x1006cb68
inc esi
mov ecx, 4
mov eax, esi
mov dword [ebp - 0x18], esi
mul ecx
mov ecx, 0xffffffff
cmovb eax, ecx
add eax, 4
cmovb eax, ecx
push eax
call fcn.1008e47c
add esp, 4
mov dword [ebp - 0x1c], eax
mov dword [ebp - 4], 9
mov dword [eax], esi
lea esi, [eax + 4]
mov eax, dword [ebp - 0x14]
push fcn.10017690
push 0x10017680
inc eax
push eax
push 4
push esi
call fcn.1008e408
mov dword [ebp - 4], 0xffffffff
mov eax, dword [0x100cd41c]
mov dword [0x100cd41c], esi
test eax, eax
je 0x1006cb39
push fcn.10017690
lea esi, [eax - 4]
mov dword [ebp - 4], 0xa
push dword [esi]
push 4
push eax
call fcn.1008dfa8
mov eax, dword [esi]
lea eax, [eax*4 + 4]
push eax
push esi
call fcn.1008df6a
mov dword [ebp - 4], 0xffffffff
add esp, 8
mov esi, dword [0x100cd41c]
test esi, esi
je 0x1006cb6e
mov eax, dword [0x100cd420]
lea eax, [eax*4 + 4]
push eax
mov eax, dword [0x100cd418]
add eax, 0xfffffffc
push eax
push esi
call sub.VCRUNTIME140.dll_memcpy
add esp, 0xc
add esi, 4
mov dword [edi], esi
mov byte [0x100cd424], 1
mov esi, dword [0x100cd41c]
xor eax, eax
cmp byte [0x100cd424], al
setne al
add eax, 5
cmp dword [0x100cd418], 0
je 0x1006cb98
test esi, esi
je 0x1006cb98
cmp eax, dword [0x100cd420]
ja 0x1006cb98
mov dword [esi + eax*4], 0x10071c20
mov edi, dword [0x100ccf68]
mov dword [0x100cd428], edi
mov eax, dword [edi]
mov dword [0x100cd42c], eax
test eax, eax
je 0x1006ccbd
xor esi, esi
mov eax, dword [0x100cd42c]
mov ecx, dword [eax + esi*4]
test ecx, ecx
je 0x1006cbe4
mov eax, dword [0x100b88c8]
lea edx, [ebp - 0x38]
push 0x1c
push edx
push ecx
call eax
test eax, eax
je 0x1006cbe4
mov eax, dword [ebp - 0x24]
test al, 1
jne 0x1006cbe4
test eax, 0x100
jne 0x1006cbe4
inc esi
jmp 0x1006cbb5
mov dword [ebp - 0x14], esi
mov dword [0x100cd434], esi
test esi, esi
je 0x1006ccbd
inc esi
mov ecx, 4
mov eax, esi
mov dword [ebp - 0x18], esi
mul ecx
mov ecx, 0xffffffff
cmovb eax, ecx
add eax, 4
cmovb eax, ecx
push eax
call fcn.1008e47c
add esp, 4
mov dword [ebp - 0x1c], eax
mov dword [ebp - 4], 0xc
mov dword [eax], esi
lea esi, [eax + 4]
mov eax, dword [ebp - 0x14]
push fcn.10017690
push 0x10017680
inc eax
push eax
push 4
push esi
call fcn.1008e408
mov dword [ebp - 4], 0xffffffff
mov eax, dword [0x100cd430]
mov dword [0x100cd430], esi
test eax, eax
je 0x1006cc8e
push fcn.10017690
lea esi, [eax - 4]
mov dword [ebp - 4], 0xd
push dword [esi]
push 4
push eax
call fcn.1008dfa8
mov eax, dword [esi]
lea eax, [eax*4 + 4]
push eax
push esi
call fcn.1008df6a
mov dword [ebp - 4], 0xffffffff
add esp, 8
mov esi, dword [0x100cd430]
test esi, esi
je 0x1006ccc3
mov eax, dword [0x100cd434]
lea eax, [eax*4 + 4]
push eax
mov eax, dword [0x100cd42c]
add eax, 0xfffffffc
push eax
push esi
call sub.VCRUNTIME140.dll_memcpy
add esp, 0xc
add esi, 4
mov dword [edi], esi
mov byte [0x100cd438], 1
mov esi, dword [0x100cd430]
xor eax, eax
cmp byte [0x100cd438], al
setne al
add eax, 0xe
cmp dword [0x100cd42c], 0
je 0x1006ccf3
test esi, esi
je 0x1006ccf3
cmp eax, dword [0x100cd434]
ja 0x1006ccf3
mov dword [esi + eax*4], 0x10084240
mov esi, dword [0x100cd430]
xor eax, eax
cmp byte [0x100cd438], al
setne al
add eax, 0x13
cmp dword [0x100cd42c], 0
je 0x1006cd1d
test esi, esi
je 0x1006cd1d
cmp eax, dword [0x100cd434]
ja 0x1006cd1d
mov dword [esi + eax*4], 0x10084570
mov edi, dword [0x100ccfa8]
mov dword [0x100cd3c4], edi
mov eax, dword [edi]
mov dword [0x100cd3c8], eax
test eax, eax
je 0x1006ce48
xor esi, esi
nop word [eax + eax]
mov eax, dword [0x100cd3c8]
mov ecx, dword [eax + esi*4]
test ecx, ecx
je 0x1006cd6f
mov eax, dword [0x100b88c8]
lea edx, [ebp - 0x38]
push 0x1c
push edx
push ecx
call eax
test eax, eax
je 0x1006cd6f
mov eax, dword [ebp - 0x24]
test al, 1
jne 0x1006cd6f
test eax, 0x100
jne 0x1006cd6f
inc esi
jmp 0x1006cd40
mov dword [ebp - 0x14], esi
mov dword [0x100cd3d0], esi
test esi, esi
je 0x1006ce48
inc esi
mov ecx, 4
mov eax, esi
mov dword [ebp - 0x18], esi
mul ecx
mov ecx, 0xffffffff
cmovb eax, ecx
add eax, 4
cmovb eax, ecx
push eax
call fcn.1008e47c
add esp, 4
mov dword [ebp - 0x1c], eax
mov dword [ebp - 4], 0xf
mov dword [eax], esi
lea esi, [eax + 4]
mov eax, dword [ebp - 0x14]
push fcn.10017690
push 0x10017680
inc eax
push eax
push 4
push esi
call fcn.1008e408
mov dword [ebp - 4], 0xffffffff
mov eax, dword [0x100cd3cc]
mov dword [0x100cd3cc], esi
test eax, eax
je 0x1006ce19
push fcn.10017690
lea esi, [eax - 4]
mov dword [ebp - 4], 0x10
push dword [esi]
push 4
push eax
call fcn.1008dfa8
mov eax, dword [esi]
lea eax, [eax*4 + 4]
push eax
push esi
call fcn.1008df6a
mov dword [ebp - 4], 0xffffffff
add esp, 8
mov esi, dword [0x100cd3cc]
test esi, esi
je 0x1006ce4e
mov eax, dword [0x100cd3d0]
lea eax, [eax*4 + 4]
push eax
mov eax, dword [0x100cd3c8]
add eax, 0xfffffffc
push eax
push esi
call sub.VCRUNTIME140.dll_memcpy
add esp, 0xc
add esi, 4
mov dword [edi], esi
mov byte [0x100cd3d4], 1
mov esi, dword [0x100cd3cc]
xor eax, eax
cmp byte [0x100cd3d4], al
setne al
add eax, 0x10
cmp dword [0x100cd3c8], 0
je 0x1006ce7e
test esi, esi
je 0x1006ce7e
cmp eax, dword [0x100cd3d0]
ja 0x1006ce7e
mov dword [esi + eax*4], 0x1007e490
mov esi, dword [0x100cd3cc]
xor eax, eax
cmp byte [0x100cd3d4], al
setne al
add eax, 0x11
cmp dword [0x100cd3c8], 0
je 0x1006ceae
test esi, esi
je 0x1006ceae
cmp eax, dword [0x100cd3d0]
ja 0x1006ceae
mov dword [esi + eax*4], 0x1007e4a0
mov esi, dword [0x100cd3cc]
xor eax, eax
cmp byte [0x100cd3d4], al
setne al
add eax, 0x12
cmp dword [0x100cd3c8], 0
je 0x1006cede
test esi, esi
je 0x1006cede
cmp eax, dword [0x100cd3d0]
ja 0x1006cede
mov dword [esi + eax*4], 0x1007e4d0
mov esi, dword [0x100cd3cc]
xor eax, eax
cmp byte [0x100cd3d4], al
setne al
add eax, 0x18
cmp dword [0x100cd3c8], 0
je 0x1006cf0e
test esi, esi
je 0x1006cf0e
cmp eax, dword [0x100cd3d0]
ja 0x1006cf0e
mov dword [esi + eax*4], 0x1007e560
mov esi, dword [0x100cd3cc]
xor eax, eax
cmp byte [0x100cd3d4], al
setne al
add eax, 0x2c
cmp dword [0x100cd3c8], 0
je 0x1006cf38
test esi, esi
je 0x1006cf38
cmp eax, dword [0x100cd3d0]
ja 0x1006cf38
mov dword [esi + eax*4], 0x1007e690
mov edi, dword [0x100ccf5c]
mov dword [0x100cd43c], edi
mov eax, dword [edi]
mov dword [0x100cd440], eax
test eax, eax
je 0x1006d05d
xor esi, esi
mov eax, dword [0x100cd440]
mov ecx, dword [eax + esi*4]
test ecx, ecx
je 0x1006cf84
mov eax, dword [0x100b88c8]
lea edx, [ebp - 0x38]
push 0x1c
push edx
push ecx
call eax
test eax, eax
je 0x1006cf84
mov eax, dword [ebp - 0x24]
test al, 1
jne 0x1006cf84
test eax, 0x100
jne 0x1006cf84
inc esi
jmp 0x1006cf55
mov dword [ebp - 0x14], esi
mov dword [0x100cd448], esi
test esi, esi
je 0x1006d05d
inc esi
mov ecx, 4
mov eax, esi
mov dword [ebp - 0x18], esi
mul ecx
mov ecx, 0xffffffff
cmovb eax, ecx
add eax, 4
cmovb eax, ecx
push eax
call fcn.1008e47c
add esp, 4
mov dword [ebp - 0x1c], eax
mov dword [ebp - 4], 0x12
mov dword [eax], esi
lea esi, [eax + 4]
mov eax, dword [ebp - 0x14]
push fcn.10017690
push 0x10017680
inc eax
push eax
push 4
push esi
call fcn.1008e408
mov dword [ebp - 4], 0xffffffff
mov eax, dword [0x100cd444]
mov dword [0x100cd444], esi
test eax, eax
je 0x1006d02e
push fcn.10017690
lea esi, [eax - 4]
mov dword [ebp - 4], 0x13
push dword [esi]
push 4
push eax
call fcn.1008dfa8
mov eax, dword [esi]
lea eax, [eax*4 + 4]
push eax
push esi
call fcn.1008df6a
mov dword [ebp - 4], 0xffffffff
add esp, 8
mov esi, dword [0x100cd444]
test esi, esi
je 0x1006d063
mov eax, dword [0x100cd448]
lea eax, [eax*4 + 4]
push eax
mov eax, dword [0x100cd440]
add eax, 0xfffffffc
push eax
push esi
call sub.VCRUNTIME140.dll_memcpy
add esp, 0xc
add esi, 4
mov dword [edi], esi
mov byte [0x100cd44c], 1
mov esi, dword [0x100cd444]
xor eax, eax
cmp byte [0x100cd44c], al
setne al
add eax, 0x43
cmp dword [0x100cd440], 0
je 0x1006d093
test esi, esi
je 0x1006d093
cmp eax, dword [0x100cd448]
ja 0x1006d093
mov dword [esi + eax*4], 0x1007b250
mov esi, dword [0x100cd444]
xor eax, eax
cmp byte [0x100cd44c], al
setne al
add eax, 0x52
cmp dword [0x100cd440], 0
je 0x1006d0c3
test esi, esi
je 0x1006d0c3
cmp eax, dword [0x100cd448]
ja 0x1006d0c3
mov dword [esi + eax*4], 0x1007b2a0
mov esi, dword [0x100cd444]
xor eax, eax
cmp byte [0x100cd44c], al
setne al
add eax, 0x74
cmp dword [0x100cd440], 0
je 0x1006d0ed
test esi, esi
je 0x1006d0ed
cmp eax, dword [0x100cd448]
ja 0x1006d0ed
mov dword [esi + eax*4], 0x1007b330
mov edi, dword [0x100ccf7c]
mov dword [0x100cd48c], edi
mov eax, dword [edi]
mov dword [0x100cd490], eax
test eax, eax
je 0x1006d218
xor esi, esi
nop word [eax + eax]
mov eax, dword [0x100cd490]
mov ecx, dword [eax + esi*4]
test ecx, ecx
je 0x1006d13f
mov eax, dword [0x100b88c8]
lea edx, [ebp - 0x38]
push 0x1c
push edx
push ecx
call eax
test eax, eax
je 0x1006d13f
mov eax, dword [ebp - 0x24]
test al, 1
jne 0x1006d13f
test eax, 0x100
jne 0x1006d13f
inc esi
jmp 0x1006d110
mov dword [ebp - 0x14], esi
mov dword [0x100cd498], esi
test esi, esi
je 0x1006d218
inc esi
mov ecx, 4
mov eax, esi
mov dword [ebp - 0x18], esi
mul ecx
mov ecx, 0xffffffff
cmovb eax, ecx
add eax, 4
cmovb eax, ecx
push eax
call fcn.1008e47c
add esp, 4
mov dword [ebp - 0x1c], eax
mov dword [ebp - 4], 0x15
mov dword [eax], esi
lea esi, [eax + 4]
mov eax, dword [ebp - 0x14]
push fcn.10017690
push 0x10017680
inc eax
push eax
push 4
push esi
call fcn.1008e408
mov dword [ebp - 4], 0xffffffff
mov eax, dword [0x100cd494]
mov dword [0x100cd494], esi
test eax, eax
je 0x1006d1e9
push fcn.10017690
lea esi, [eax - 4]
mov dword [ebp - 4], 0x16
push dword [esi]
push 4
push eax
call fcn.1008dfa8
mov eax, dword [esi]
lea eax, [eax*4 + 4]
push eax
push esi
call fcn.1008df6a
mov dword [ebp - 4], 0xffffffff
add esp, 8
mov esi, dword [0x100cd494]
test esi, esi
je 0x1006d21e
mov eax, dword [0x100cd498]
lea eax, [eax*4 + 4]
push eax
mov eax, dword [0x100cd490]
add eax, 0xfffffffc
push eax
push esi
call sub.VCRUNTIME140.dll_memcpy
add esp, 0xc
add esi, 4
mov dword [edi], esi
mov byte [0x100cd49c], 1
mov esi, dword [0x100cd494]
xor eax, eax
cmp byte [0x100cd49c], al
setne al
add eax, 0x15
cmp dword [0x100cd490], 0
je 0x1006d248
test esi, esi
je 0x1006d248
cmp eax, dword [0x100cd498]
ja 0x1006d248
mov dword [esi + eax*4], 0x10067970
mov edi, dword [0x100ccf74]
mov dword [0x100cd478], edi
mov eax, dword [edi]
mov dword [0x100cd47c], eax
test eax, eax
je 0x1006d36d
xor esi, esi
mov eax, dword [0x100cd47c]
mov ecx, dword [eax + esi*4]
test ecx, ecx
je 0x1006d294
mov eax, dword [0x100b88c8]
lea edx, [ebp - 0x38]
push 0x1c
push edx
push ecx
call eax
test eax, eax
je 0x1006d294
mov eax, dword [ebp - 0x24]
test al, 1
jne 0x1006d294
test eax, 0x100
jne 0x1006d294
inc esi
jmp 0x1006d265
mov dword [ebp - 0x14], esi
mov dword [0x100cd484], esi
test esi, esi
je 0x1006d36d
inc esi
mov ecx, 4
mov eax, esi
mov dword [ebp - 0x18], esi
mul ecx
mov ecx, 0xffffffff
cmovb eax, ecx
add eax, 4
cmovb eax, ecx
push eax
call fcn.1008e47c
add esp, 4
mov dword [ebp - 0x1c], eax
mov dword [ebp - 4], 0x18
mov dword [eax], esi
lea esi, [eax + 4]
mov eax, dword [ebp - 0x14]
push fcn.10017690
push 0x10017680
inc eax
push eax
push 4
push esi
call fcn.1008e408
mov dword [ebp - 4], 0xffffffff
mov eax, dword [0x100cd480]
mov dword [0x100cd480], esi
test eax, eax
je 0x1006d33e
push fcn.10017690
lea esi, [eax - 4]
mov dword [ebp - 4], 0x19
push dword [esi]
push 4
push eax
call fcn.1008dfa8
mov eax, dword [esi]
lea eax, [eax*4 + 4]
push eax
push esi
call fcn.1008df6a
mov dword [ebp - 4], 0xffffffff
add esp, 8
mov esi, dword [0x100cd480]
test esi, esi
je 0x1006d373
mov eax, dword [0x100cd484]
lea eax, [eax*4 + 4]
push eax
mov eax, dword [0x100cd47c]
add eax, 0xfffffffc
push eax
push esi
call sub.VCRUNTIME140.dll_memcpy
add esp, 0xc
add esi, 4
mov dword [edi], esi
mov byte [0x100cd488], 1
mov esi, dword [0x100cd480]
xor eax, eax
cmp byte [0x100cd488], al
setne al
add eax, 9
cmp dword [0x100cd47c], 0
je 0x1006d39d
test esi, esi
je 0x1006d39d
cmp eax, dword [0x100cd484]
ja 0x1006d39d
mov dword [esi + eax*4], 0x100846a0
mov edi, dword [0x100ccfd0]
mov dword [0x100cd4a0], edi
mov eax, dword [edi]
mov dword [0x100cd4a4], eax
test eax, eax
je 0x1006d4c8
xor esi, esi
nop word [eax + eax]
mov eax, dword [0x100cd4a4]
mov ecx, dword [eax + esi*4]
test ecx, ecx
je 0x1006d3ef
mov eax, dword [0x100b88c8]
lea edx, [ebp - 0x38]
push 0x1c
push edx
push ecx
call eax
test eax, eax
je 0x1006d3ef
mov eax, dword [ebp - 0x24]
test al, 1
jne 0x1006d3ef
test eax, 0x100
jne 0x1006d3ef
inc esi
jmp 0x1006d3c0
mov dword [ebp - 0x14], esi
mov dword [0x100cd4ac], esi
test esi, esi
je 0x1006d4c8
inc esi
mov ecx, 4
mov eax, esi
mov dword [ebp - 0x18], esi
mul ecx
mov ecx, 0xffffffff
cmovb eax, ecx
add eax, 4
cmovb eax, ecx
push eax
call fcn.1008e47c
add esp, 4
mov dword [ebp - 0x1c], eax
mov dword [ebp - 4], 0x1b
mov dword [eax], esi
lea esi, [eax + 4]
mov eax, dword [ebp - 0x14]
push fcn.10017690
push 0x10017680
inc eax
push eax
push 4
push esi
call fcn.1008e408
mov dword [ebp - 4], 0xffffffff
mov eax, dword [0x100cd4a8]
mov dword [0x100cd4a8], esi
test eax, eax
je 0x1006d499
push fcn.10017690
lea esi, [eax - 4]
mov dword [ebp - 4], 0x1c
push dword [esi]
push 4
push eax
call fcn.1008dfa8
mov eax, dword [esi]
lea eax, [eax*4 + 4]
push eax
push esi
call fcn.1008df6a
mov dword [ebp - 4], 0xffffffff
add esp, 8
mov esi, dword [0x100cd4a8]
test esi, esi
je 0x1006d4ce
mov eax, dword [0x100cd4ac]
lea eax, [eax*4 + 4]
push eax
mov eax, dword [0x100cd4a4]
add eax, 0xfffffffc
push eax
push esi
call sub.VCRUNTIME140.dll_memcpy
add esp, 0xc
add esi, 4
mov dword [edi], esi
mov byte [0x100cd4b0], 1
mov esi, dword [0x100cd4a8]
xor eax, eax
cmp byte [0x100cd4b0], al
setne al
add eax, 0x2b
cmp dword [0x100cd4a4], 0
je 0x1006d4f8
test esi, esi
je 0x1006d4f8
cmp eax, dword [0x100cd4ac]
ja 0x1006d4f8
mov dword [esi + eax*4], 0x1003c950
mov edi, dword [0x100ccf78]
mov dword [0x100cd4b4], edi
mov eax, dword [edi]
mov dword [0x100cd4b8], eax
test eax, eax
je 0x1006d61d
xor esi, esi
mov eax, dword [0x100cd4b8]
mov ecx, dword [eax + esi*4]
test ecx, ecx
je 0x1006d544
mov eax, dword [0x100b88c8]
lea edx, [ebp - 0x38]
push 0x1c
push edx
push ecx
call eax
test eax, eax
je 0x1006d544
mov eax, dword [ebp - 0x24]
test al, 1
jne 0x1006d544
test eax, 0x100
jne 0x1006d544
inc esi
jmp 0x1006d515
mov dword [ebp - 0x14], esi
mov dword [0x100cd4c0], esi
test esi, esi
je 0x1006d61d
inc esi
mov ecx, 4
mov eax, esi
mov dword [ebp - 0x18], esi
mul ecx
mov ecx, 0xffffffff
cmovb eax, ecx
add eax, 4
cmovb eax, ecx
push eax
call fcn.1008e47c
add esp, 4
mov dword [ebp - 0x1c], eax
mov dword [ebp - 4], 0x1e
mov dword [eax], esi
lea esi, [eax + 4]
mov eax, dword [ebp - 0x14]
push fcn.10017690
push 0x10017680
inc eax
push eax
push 4
push esi
call fcn.1008e408
mov dword [ebp - 4], 0xffffffff
mov eax, dword [0x100cd4bc]
mov dword [0x100cd4bc], esi
test eax, eax
je 0x1006d5ee
push fcn.10017690
lea esi, [eax - 4]
mov dword [ebp - 4], 0x1f
push dword [esi]
push 4
push eax
call fcn.1008dfa8
mov eax, dword [esi]
lea eax, [eax*4 + 4]
push eax
push esi
call fcn.1008df6a
mov dword [ebp - 4], 0xffffffff
add esp, 8
mov esi, dword [0x100cd4bc]
test esi, esi
je 0x1006d623
mov eax, dword [0x100cd4c0]
lea eax, [eax*4 + 4]
push eax
mov eax, dword [0x100cd4b8]
add eax, 0xfffffffc
push eax
push esi
call sub.VCRUNTIME140.dll_memcpy
add esp, 0xc
add esi, 4
mov dword [edi], esi
mov byte [0x100cd4c4], 1
mov esi, dword [0x100cd4bc]
xor eax, eax
cmp byte [0x100cd4c4], al
setne al
add eax, 4
cmp dword [0x100cd4b8], 0
je 0x1006d653
test esi, esi
je 0x1006d653
cmp eax, dword [0x100cd4c0]
ja 0x1006d653
mov dword [esi + eax*4], 0x10082ab0
mov esi, dword [0x100cd4bc]
xor eax, eax
cmp byte [0x100cd4c4], al
setne al
add eax, 6
cmp dword [0x100cd4b8], 0
je 0x1006d683
test esi, esi
je 0x1006d683
cmp eax, dword [0x100cd4c0]
ja 0x1006d683
mov dword [esi + eax*4], 0x10082b80
mov esi, dword [0x100cd4bc]
xor eax, eax
cmp byte [0x100cd4c4], al
setne al
add eax, 0x27
cmp dword [0x100cd4b8], 0
je 0x1006d6b3
test esi, esi
je 0x1006d6b3
cmp eax, dword [0x100cd4c0]
ja 0x1006d6b3
mov dword [esi + eax*4], 0x10082b90
mov esi, dword [0x100cd4bc]
xor eax, eax
cmp byte [0x100cd4c4], al
setne al
add eax, 0x28
cmp dword [0x100cd4b8], 0
je 0x1006d6dd
test esi, esi
je 0x1006d6dd
cmp eax, dword [0x100cd4c0]
ja 0x1006d6dd
mov dword [esi + eax*4], 0x10082bd0
mov edi, dword [0x100ccf98]
mov dword [0x100cd4c8], edi
mov eax, dword [edi]
mov dword [0x100cd4cc], eax
test eax, eax
je 0x1006d808
xor esi, esi
nop word [eax + eax]
mov eax, dword [0x100cd4cc]
mov ecx, dword [eax + esi*4]
test ecx, ecx
je 0x1006d72f
mov eax, dword [0x100b88c8]
lea edx, [ebp - 0x38]
push 0x1c
push edx
push ecx
call eax
test eax, eax
je 0x1006d72f
mov eax, dword [ebp - 0x24]
test al, 1
jne 0x1006d72f
test eax, 0x100
jne 0x1006d72f
inc esi
jmp 0x1006d700
mov dword [ebp - 0x14], esi
mov dword [0x100cd4d4], esi
test esi, esi
je 0x1006d808
inc esi
mov ecx, 4
mov eax, esi
mov dword [ebp - 0x18], esi
mul ecx
mov ecx, 0xffffffff
cmovb eax, ecx
add eax, 4
cmovb eax, ecx
push eax
call fcn.1008e47c
add esp, 4
mov dword [ebp - 0x1c], eax
mov dword [ebp - 4], 0x21
mov dword [eax], esi
lea esi, [eax + 4]
mov eax, dword [ebp - 0x14]
push fcn.10017690
push 0x10017680
inc eax
push eax
push 4
push esi
call fcn.1008e408
mov dword [ebp - 4], 0xffffffff
mov eax, dword [0x100cd4d0]
mov dword [0x100cd4d0], esi
test eax, eax
je 0x1006d7d9
push fcn.10017690
lea esi, [eax - 4]
mov dword [ebp - 4], 0x22
push dword [esi]
push 4
push eax
call fcn.1008dfa8
mov eax, dword [esi]
lea eax, [eax*4 + 4]
push eax
push esi
call fcn.1008df6a
mov dword [ebp - 4], 0xffffffff
add esp, 8
mov esi, dword [0x100cd4d0]
test esi, esi
je 0x1006d80e
mov eax, dword [0x100cd4d4]
lea eax, [eax*4 + 4]
push eax
mov eax, dword [0x100cd4cc]
add eax, 0xfffffffc
push eax
push esi
call sub.VCRUNTIME140.dll_memcpy
add esp, 0xc
add esi, 4
mov dword [edi], esi
mov byte [0x100cd4d8], 1
mov esi, dword [0x100cd4d0]
xor eax, eax
cmp byte [0x100cd4d8], al
setne al
add eax, 0xd
cmp dword [0x100cd4cc], 0
je 0x1006d838
test esi, esi
je 0x1006d838
cmp eax, dword [0x100cd4d4]
ja 0x1006d838
mov dword [esi + eax*4], 0x1003c600
mov edi, dword [0x100ccf80]
mov dword [0x100cd4dc], edi
mov eax, dword [edi]
mov dword [0x100cd4e0], eax
test eax, eax
je 0x1006d95d
xor esi, esi
mov eax, dword [0x100cd4e0]
mov ecx, dword [eax + esi*4]
test ecx, ecx
je 0x1006d884
mov eax, dword [0x100b88c8]
lea edx, [ebp - 0x38]
push 0x1c
push edx
push ecx
call eax
test eax, eax
je 0x1006d884
mov eax, dword [ebp - 0x24]
test al, 1
jne 0x1006d884
test eax, 0x100
jne 0x1006d884
inc esi
jmp 0x1006d855
mov dword [ebp - 0x14], esi
mov dword [0x100cd4e8], esi
test esi, esi
je 0x1006d95d
inc esi
mov ecx, 4
mov eax, esi
mov dword [ebp - 0x18], esi
mul ecx
mov ecx, 0xffffffff
cmovb eax, ecx
add eax, 4
cmovb eax, ecx
push eax
call fcn.1008e47c
add esp, 4
mov dword [ebp - 0x1c], eax
mov dword [ebp - 4], 0x24
mov dword [eax], esi
lea esi, [eax + 4]
mov eax, dword [ebp - 0x14]
push fcn.10017690
push 0x10017680
inc eax
push eax
push 4
push esi
call fcn.1008e408
mov dword [ebp - 4], 0xffffffff
mov eax, dword [0x100cd4e4]
mov dword [0x100cd4e4], esi
test eax, eax
je 0x1006d92e
push fcn.10017690
lea esi, [eax - 4]
mov dword [ebp - 4], 0x25
push dword [esi]
push 4
push eax
call fcn.1008dfa8
mov eax, dword [esi]
lea eax, [eax*4 + 4]
push eax
push esi
call fcn.1008df6a
mov dword [ebp - 4], 0xffffffff
add esp, 8
mov esi, dword [0x100cd4e4]
test esi, esi
je 0x1006d963
mov eax, dword [0x100cd4e8]
lea eax, [eax*4 + 4]
push eax
mov eax, dword [0x100cd4e0]
add eax, 0xfffffffc
push eax
push esi
call sub.VCRUNTIME140.dll_memcpy
add esp, 0xc
add esi, 4
mov dword [edi], esi
mov byte [0x100cd4ec], 1
mov esi, dword [0x100cd4e4]
xor eax, eax
cmp byte [0x100cd4ec], al
setne al
add eax, 0x15
cmp dword [0x100cd4e0], 0
je 0x1006d98d
test esi, esi
je 0x1006d98d
cmp eax, dword [0x100cd4e8]
ja 0x1006d98d
mov dword [esi + eax*4], 0x1003c920
mov edi, dword [0x100cd0c8]
mov dword [0x100cd4f0], edi
mov eax, dword [edi]
mov dword [0x100cd4f4], eax
test eax, eax
je 0x1006dab8
xor esi, esi
nop word [eax + eax]
mov eax, dword [0x100cd4f4]
mov ecx, dword [eax + esi*4]
test ecx, ecx
je 0x1006d9df
mov eax, dword [0x100b88c8]
lea edx, [ebp - 0x38]
push 0x1c
push edx
push ecx
call eax
test eax, eax
je 0x1006d9df
mov eax, dword [ebp - 0x24]
test al, 1
jne 0x1006d9df
test eax, 0x100
jne 0x1006d9df
inc esi
jmp 0x1006d9b0
mov dword [ebp - 0x14], esi
mov dword [0x100cd4fc], esi
test esi, esi
je 0x1006dab8
inc esi
mov ecx, 4
mov eax, esi
mov dword [ebp - 0x18], esi
mul ecx
mov ecx, 0xffffffff
cmovb eax, ecx
add eax, 4
cmovb eax, ecx
push eax
call fcn.1008e47c
add esp, 4
mov dword [ebp - 0x1c], eax
mov dword [ebp - 4], 0x27
mov dword [eax], esi
lea esi, [eax + 4]
mov eax, dword [ebp - 0x14]
push fcn.10017690
push 0x10017680
inc eax
push eax
push 4
push esi
call fcn.1008e408
mov dword [ebp - 4], 0xffffffff
mov eax, dword [0x100cd4f8]
mov dword [0x100cd4f8], esi
test eax, eax
je 0x1006da89
push fcn.10017690
lea esi, [eax - 4]
mov dword [ebp - 4], 0x28
push dword [esi]
push 4
push eax
call fcn.1008dfa8
mov eax, dword [esi]
lea eax, [eax*4 + 4]
push eax
push esi
call fcn.1008df6a
mov dword [ebp - 4], 0xffffffff
add esp, 8
mov esi, dword [0x100cd4f8]
test esi, esi
je 0x1006dabe
mov eax, dword [0x100cd4fc]
lea eax, [eax*4 + 4]
push eax
mov eax, dword [0x100cd4f4]
add eax, 0xfffffffc
push eax
push esi
call sub.VCRUNTIME140.dll_memcpy
add esp, 0xc
add esi, 4
mov dword [edi], esi
mov byte [0x100cd500], 1
mov esi, dword [0x100cd4f8]
xor eax, eax
cmp byte [0x100cd500], al
setne al
add eax, 7
cmp dword [0x100cd4f4], 0
je 0x1006dae8
test esi, esi
je 0x1006dae8
cmp eax, dword [0x100cd4fc]
ja 0x1006dae8
mov dword [esi + eax*4], 0x1003be20
push 0x100a9098
call dword [0x100cd0d8]
mov edi, dword [0x100cd028]
mov dword [0x100cda18], edi
mov eax, dword [edi]
mov dword [0x100cda1c], eax
test eax, eax
je 0x1006dc18
xor esi, esi
mov eax, dword [0x100cda1c]
mov ecx, dword [eax + esi*4]
test ecx, ecx
je 0x1006db3f
mov eax, dword [0x100b88c8]
lea edx, [ebp - 0x38]
push 0x1c
push edx
push ecx
call eax
test eax, eax
je 0x1006db3f
mov eax, dword [ebp - 0x24]
test al, 1
jne 0x1006db3f
test eax, 0x100
jne 0x1006db3f
inc esi
jmp 0x1006db10
mov dword [ebp - 0x14], esi
mov dword [0x100cda24], esi
test esi, esi
je 0x1006dc18
inc esi
mov ecx, 4
mov eax, esi
mov dword [ebp - 0x18], esi
mul ecx
mov ecx, 0xffffffff
cmovb eax, ecx
add eax, 4
cmovb eax, ecx
push eax
call fcn.1008e47c
add esp, 4
mov dword [ebp - 0x1c], eax
mov dword [ebp - 4], 0x2a
mov dword [eax], esi
lea esi, [eax + 4]
mov eax, dword [ebp - 0x14]
push fcn.10017690
push 0x10017680
inc eax
push eax
push 4
push esi
call fcn.1008e408
mov dword [ebp - 4], 0xffffffff
mov eax, dword [0x100cda20]
mov dword [0x100cda20], esi
test eax, eax
je 0x1006dbe9
push fcn.10017690
lea esi, [eax - 4]
mov dword [ebp - 4], 0x2b
push dword [esi]
push 4
push eax
call fcn.1008dfa8
mov eax, dword [esi]
lea eax, [eax*4 + 4]
push eax
push esi
call fcn.1008df6a
mov dword [ebp - 4], 0xffffffff
add esp, 8
mov esi, dword [0x100cda20]
test esi, esi
je 0x1006dc1e
mov eax, dword [0x100cda24]
lea eax, [eax*4 + 4]
push eax
mov eax, dword [0x100cda1c]
add eax, 0xfffffffc
push eax
push esi
call sub.VCRUNTIME140.dll_memcpy
add esp, 0xc
add esi, 4
mov dword [edi], esi
mov byte [0x100cda28], 1
mov esi, dword [0x100cda20]
xor eax, eax
cmp byte [0x100cda28], al
setne al
add eax, 0xd
cmp dword [0x100cda1c], 0
je 0x1006dc48
test esi, esi
je 0x1006dc48
cmp eax, dword [0x100cda24]
ja 0x1006dc48
mov dword [esi + eax*4], 0x100675f0
mov edi, dword [0x100cd02c]
mov dword [0x100cd504], edi
mov eax, dword [edi]
mov dword [0x100cd508], eax
test eax, eax
je 0x1006dd6d
xor esi, esi
mov eax, dword [0x100cd508]
mov ecx, dword [eax + esi*4]
test ecx, ecx
je 0x1006dc94
mov eax, dword [0x100b88c8]
lea edx, [ebp - 0x38]
push 0x1c
push edx
push ecx
call eax
test eax, eax
je 0x1006dc94
mov eax, dword [ebp - 0x24]
test al, 1
jne 0x1006dc94
test eax, 0x100
jne 0x1006dc94
inc esi
jmp 0x1006dc65
mov dword [ebp - 0x14], esi
mov dword [0x100cd510], esi
test esi, esi
je 0x1006dd6d
inc esi
mov ecx, 4
mov eax, esi
mov dword [ebp - 0x18], esi
mul ecx
mov ecx, 0xffffffff
cmovb eax, ecx
add eax, 4
cmovb eax, ecx
push eax
call fcn.1008e47c
add esp, 4
mov dword [ebp - 0x1c], eax
mov dword [ebp - 4], 0x2d
mov dword [eax], esi
lea esi, [eax + 4]
mov eax, dword [ebp - 0x14]
push fcn.10017690
push 0x10017680
inc eax
push eax
push 4
push esi
call fcn.1008e408
mov dword [ebp - 4], 0xffffffff
mov eax, dword [0x100cd50c]
mov dword [0x100cd50c], esi
test eax, eax
je 0x1006dd3e
push fcn.10017690
lea esi, [eax - 4]
mov dword [ebp - 4], 0x2e
push dword [esi]
push 4
push eax
call fcn.1008dfa8
mov eax, dword [esi]
lea eax, [eax*4 + 4]
push eax
push esi
call fcn.1008df6a
mov dword [ebp - 4], 0xffffffff
add esp, 8
mov esi, dword [0x100cd50c]
test esi, esi
je 0x1006dd73
mov eax, dword [0x100cd510]
lea eax, [eax*4 + 4]
push eax
mov eax, dword [0x100cd508]
add eax, 0xfffffffc
push eax
push esi
call sub.VCRUNTIME140.dll_memcpy
add esp, 0xc
add esi, 4
mov dword [edi], esi
mov byte [0x100cd514], 1
mov esi, dword [0x100cd50c]
xor eax, eax
cmp byte [0x100cd514], al
setne al
add eax, 0xd
cmp dword [0x100cd508], 0
je 0x1006dd9d
test esi, esi
je 0x1006dd9d
cmp eax, dword [0x100cd510]
ja 0x1006dd9d
mov dword [esi + eax*4], 0x10067740
lea eax, [ebp - 0x1c]
mov dword [ebp - 0x18], 0xf3c2c786
push eax
mov ecx, 0x100d21a8
mov dword [ebp - 0x1c], 0x72e242a1
call fcn.10033ff0
lea ecx, [ebp - 0x18]
push ecx
mov ecx, eax
call fcn.10033fd0
movq xmm0, qword [eax]
mov eax, dword [eax + 8]
movq qword [ebp - 0x28], xmm0
cmp byte [ebp - 0x28], 0
mov dword [ebp - 0x20], eax
jne 0x1006ddeb
mov ecx, dword [ebp - 0x24]
mov eax, dword [ecx + 0x20]
mov dword [0x100cda44], eax
mov dword [ecx + 0x20], 0x1006c200
lea eax, [ebp - 0x18]
mov dword [ebp - 0x1c], 0x9ef0d03e
push eax
mov ecx, 0x100d21a8
mov dword [ebp - 0x18], 0x72e242a1
call fcn.10033ff0
lea ecx, [ebp - 0x1c]
push ecx
mov ecx, eax
call fcn.10033fd0
movq xmm0, qword [eax]
mov eax, dword [eax + 8]
movq qword [ebp - 0x28], xmm0
cmp byte [ebp - 0x28], 0
mov dword [ebp - 0x20], eax
jne 0x1006de39
mov ecx, dword [ebp - 0x24]
mov eax, dword [ecx + 0x20]
mov dword [0x100cda48], eax
mov dword [ecx + 0x20], 0x1006c260
lea eax, [ebp - 0x18]
mov dword [ebp - 0x1c], 0x566bd764
push eax
mov ecx, 0x100d21a8
mov dword [ebp - 0x18], 0x2aafa737
call fcn.10033ff0
lea ecx, [ebp - 0x1c]
push ecx
mov ecx, eax
call fcn.10033fd0
movq xmm0, qword [eax]
mov eax, dword [eax + 8]
movq qword [ebp - 0x28], xmm0
cmp byte [ebp - 0x28], 0
mov dword [ebp - 0x20], eax
jne 0x1006de87
mov edx, dword [ebp - 0x24]
mov eax, dword [edx + 0x20]
mov dword [0x100cda4c], eax
mov dword [edx + 0x20], 0x1006c420
lea eax, [ebp - 0x18]
mov dword [ebp - 0x1c], 0x781aa1a4
push eax
mov ecx, 0x100d21a8
mov dword [ebp - 0x18], 0x2aafa737
call fcn.10033ff0
lea ecx, [ebp - 0x1c]
push ecx
mov ecx, eax
call fcn.10033fd0
movq xmm0, qword [eax]
mov eax, dword [eax + 8]
movq qword [ebp - 0x28], xmm0
cmp byte [ebp - 0x28], 0
mov dword [ebp - 0x20], eax
jne 0x1006ded5
mov ecx, dword [ebp - 0x24]
mov eax, dword [ecx + 0x20]
mov dword [0x100cda50], eax
mov dword [ecx + 0x20], 0x1006c400
cmp byte [0x100d2234], 0
jne 0x1006dfa7
push 0x29
xorps xmm0, xmm0
mov dword [ebp - 0x24], 0
push str.55_8B_EC_53_8B_5D_08_56_57_FF_75_18_8B_F1
lea ecx, [ebp - 0x34]
mov dword [ebp - 0x20], 0
movups xmmword [ebp - 0x34], xmm0
call fcn.1001d570
mov dword [ebp - 4], 0x30
mov eax, dword [0x100ccf14]
test eax, eax
je 0x1006df1b
mov edx, dword [eax + 0x50]
jmp 0x1006df1d
xor edx, edx
mov eax, dword [0x100ccf0c]
test eax, eax
je 0x1006df2b
mov eax, dword [eax + 0x18]
jmp 0x1006df2d
xor eax, eax
lea ecx, [ebp - 0x34]
push ecx
push eax
lea ecx, [ebp - 0x18]
call fcn.1003cf90
mov edi, dword [ebp - 0x18]
add esp, 8
mov ecx, dword [ebp - 0x20]
add edi, 0x7e
cmp ecx, 0xf
jbe 0x1006df79
mov edx, dword [ebp - 0x34]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x1006df6f
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
jbe 0x1006df6f
call dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
push ecx
push edx
call fcn.1008e3d7
add esp, 8
mov esi, dword [sym.imp.KERNEL32.dll_VirtualProtect]
lea eax, [ebp - 0x14]
push eax
push 0x40
push 1
push edi
mov dword [ebp - 0x14], 0
call esi
lea eax, [ebp - 0x14]
mov byte [edi], 0x3f
push eax
push dword [ebp - 0x14]
push 1
push edi
call esi
mov byte [0x100d2234], 1
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
mov ecx, dword [ebp - 0x10]
xor ecx, ebp
call fcn.1008df5c
mov esp, ebp
pop ebp
ret