Function at 0x10059eb0
Capabilities:
Allocate or change rwx memory
Execute shellcode via indirect call

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x10104f80
mov eax, dword fs:[0]
push eax
sub esp, 0xc0
mov eax, dword [0x10167080]
xor eax, ebp
mov dword [ebp - 0x10], eax
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov eax, ecx
mov dword [ebp - 0xcc], eax
mov esi, dword [sym.imp.KERNEL32.dll_VirtualProtect]
mov dword [eax], vtable.components::rtx.0
lea eax, [ebp - 0xc4]
push eax
push 0x40
push 2
push 0x633259
call esi
mov eax, 0x633259
mov ecx, 0x90909090
mov word [eax], cx
lea eax, [ebp - 0xc4]
push eax
push dword [ebp - 0xc4]
push 2
push 0x633259
call esi
mov edi, dword [sym.imp.KERNEL32.dll_GetCurrentProcess]
push 2
push 0x633259
call edi
push eax
call dword [sym.imp.KERNEL32.dll_FlushInstructionCache]
lea ecx, [ebp - 0x5c]
call fcn.10004700
cmp byte [ebp - 0x5c], 0
jne 0x10059f6d
mov byte [ebp - 0x5c], 1
mov byte [ebp - 0x47], 1
mov dword [ebp - 0x58], 0x64b7b1
mov dword [ebp - 0x54], 0x10059060
mov eax, dword [0x64b7b2]
add eax, 0x64b7b6
mov dword [ebp - 0x50], eax
sub esp, 8
mov dword [ebp - 4], 0
lea ecx, [ebp - 0x5c]
call fcn.10068a70
cmp byte [eax + 1], 0
je 0x10059f89
mov byte [eax + 1], 0
mov dword [ebp - 4], 1
cmp byte [ebp - 0x5c], 0
je 0x10059f9f
push ecx
lea ecx, [ebp - 0x5c]
call fcn.10068b40
lea eax, [ebp - 0x40]
push eax
call fcn.1000ab50
add esp, 4
lea ecx, [ebp - 0x5c]
call fcn.10004700
cmp byte [ebp - 0x5c], 0
jne 0x10059fdc
mov byte [ebp - 0x5c], 1
mov byte [ebp - 0x47], 1
mov dword [ebp - 0x58], 0x6155e1
mov dword [ebp - 0x54], 0x100590a0
mov eax, dword [0x6155e2]
add eax, 0x6155e6
mov dword [ebp - 0x50], eax
sub esp, 8
mov dword [ebp - 4], 2
lea ecx, [ebp - 0x5c]
call fcn.10068a70
cmp byte [eax + 1], 0
je 0x10059ff8
mov byte [eax + 1], 0
mov dword [ebp - 4], 3
cmp byte [ebp - 0x5c], 0
je 0x1005a00e
push ecx
lea ecx, [ebp - 0x5c]
call fcn.10068b40
lea eax, [ebp - 0x40]
push eax
call fcn.1000ab50
mov ax, word [0x101480b8]
xorps xmm0, xmm0
movups xmmword [ebp - 0x74], xmm0
add esp, 4
mov word [ebp - 0x6c], ax
movq xmm0, qword [str.thirdperson]
mov al, byte [0x101480ba]
mov dword [ebp - 0x64], 0xb
mov dword [ebp - 0x60], 0xf
movq qword [ebp - 0x74], xmm0
mov byte [ebp - 0x6a], al
mov byte [ebp - 0x69], 0
lea ecx, [ebp - 0x74]
mov dword [ebp - 4], 4
call fcn.10038990
mov dword [ebp - 4], 0xffffffff
mov ecx, dword [ebp - 0x60]
mov byte [ebp - 0xc5], al
cmp ecx, 0xf
jbe 0x1005a0a8
mov edx, dword [ebp - 0x74]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x1005a098
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x1005b146
push ecx
push edx
call fcn.100d91c2
mov al, byte [ebp - 0xc5]
add esp, 8
test al, al
je 0x1005a3aa
lea eax, [ebp - 0xc4]
push eax
push 0x40
push 6
push 0x42e187
call esi
mov eax, 0x42e187
mov ecx, 0x90909090
mov dword [eax], ecx
mov word [eax + 4], cx
lea eax, [ebp - 0xc4]
push eax
push dword [ebp - 0xc4]
push 6
push 0x42e187
call esi
push 6
push 0x42e187
call edi
push eax
call dword [sym.imp.KERNEL32.dll_FlushInstructionCache]
lea eax, [ebp - 0xc4]
push eax
push 0x40
push 6
push 0x42e2ba
call esi
mov eax, 0x42e2ba
mov ecx, 0x90909090
mov dword [eax], ecx
mov word [eax + 4], cx
lea eax, [ebp - 0xc4]
push eax
push dword [ebp - 0xc4]
push 6
push 0x42e2ba
call esi
push 6
push 0x42e2ba
call edi
push eax
call dword [sym.imp.KERNEL32.dll_FlushInstructionCache]
lea eax, [ebp - 0xc4]
push eax
push 0x40
push 6
push 0x4311ae
call esi
mov eax, 0x4311ae
mov ecx, 0x90909090
mov dword [eax], ecx
mov word [eax + 4], cx
lea eax, [ebp - 0xc4]
push eax
push dword [ebp - 0xc4]
push 6
push 0x4311ae
call esi
push 6
push 0x4311ae
call edi
push eax
call dword [sym.imp.KERNEL32.dll_FlushInstructionCache]
lea eax, [ebp - 0xc4]
push eax
push 0x40
push 2
push 0x443007
call esi
mov eax, 0x443007
mov ecx, 0x90909090
mov word [eax], cx
lea eax, [ebp - 0xc4]
push eax
push dword [ebp - 0xc4]
push 2
push 0x443007
call esi
push 2
push 0x443007
call edi
push eax
call dword [sym.imp.KERNEL32.dll_FlushInstructionCache]
lea eax, [ebp - 0xc4]
push eax
push 0x40
push 2
push 0x45083c
call esi
mov eax, 0x45083c
mov ecx, 0x90909090
mov word [eax], cx
lea eax, [ebp - 0xc4]
push eax
push dword [ebp - 0xc4]
push 2
push 0x45083c
call esi
push 2
push 0x45083c
call edi
push eax
call dword [sym.imp.KERNEL32.dll_FlushInstructionCache]
lea eax, [ebp - 0xc4]
push eax
push 0x40
push 6
push 0x4508c1
call esi
mov eax, 0x4508c1
mov ecx, 0x90909090
mov dword [eax], ecx
mov word [eax + 4], cx
lea eax, [ebp - 0xc4]
push eax
push dword [ebp - 0xc4]
push 6
push 0x4508c1
call esi
push 6
push 0x4508c1
call edi
push eax
call dword [sym.imp.KERNEL32.dll_FlushInstructionCache]
lea eax, [ebp - 0xc4]
push eax
push 0x40
push 2
push 0x451c70
call esi
mov eax, 0x451c70
mov ecx, 0x90909090
mov word [eax], cx
lea eax, [ebp - 0xc4]
push eax
push dword [ebp - 0xc4]
push 2
push 0x451c70
call esi
push 2
push 0x451c70
call edi
push eax
call dword [sym.imp.KERNEL32.dll_FlushInstructionCache]
lea eax, [ebp - 0xc4]
push eax
push 0x40
push 1
push 0x451c9e
call esi
lea eax, [ebp - 0xc4]
mov byte [0x451c9e], 0xeb
push eax
push dword [ebp - 0xc4]
push 1
push 0x451c9e
call esi
push 1
push 0x451c9e
call edi
push eax
call dword [sym.imp.KERNEL32.dll_FlushInstructionCache]
lea eax, [ebp - 0xc4]
push eax
push 0x40
push 1
push 0x456d36
call esi
lea eax, [ebp - 0xc4]
mov byte [0x456d36], 0xeb
push eax
push dword [ebp - 0xc4]
push 1
push 0x456d36
call esi
push 1
push 0x456d36
call edi
push eax
call dword [sym.imp.KERNEL32.dll_FlushInstructionCache]
lea eax, [ebp - 0xc4]
push eax
push 0x40
push 6
push 0x457054
call esi
mov eax, 0x457054
mov ecx, 0x90909090
mov dword [eax], ecx
mov word [eax + 4], cx
lea eax, [ebp - 0xc4]
push eax
push dword [ebp - 0xc4]
push 6
push 0x457054
call esi
push 6
push 0x457054
call edi
push eax
call dword [sym.imp.KERNEL32.dll_FlushInstructionCache]
lea eax, [ebp - 0xc4]
push eax
push 0x40
push 2
push 0x451d8e
call esi
mov eax, 0x451d8e
mov ecx, 0x90909090
mov word [eax], cx
lea eax, [ebp - 0xc4]
push eax
push dword [ebp - 0xc4]
push 2
push 0x451d8e
call esi
push 2
push 0x451d8e
call edi
push eax
call dword [sym.imp.KERNEL32.dll_FlushInstructionCache]
lea eax, [ebp - 0xc4]
push eax
push 0x40
push 1
push 0x4993ed
call esi
lea eax, [ebp - 0xc4]
mov byte [0x4993ed], 1
push eax
push dword [ebp - 0xc4]
push 1
push 0x4993ed
call esi
push 1
push 0x4993ed
call edi
push eax
call dword [sym.imp.KERNEL32.dll_FlushInstructionCache]
lea eax, [ebp - 0xc4]
push eax
push 0x40
push 1
push 0x62bb42
call esi
lea eax, [ebp - 0xc4]
mov byte [0x62bb42], 1
push eax
push dword [ebp - 0xc4]
push 1
push 0x62bb42
call esi
push 1
push 0x62bb42
call edi
push eax
call dword [sym.imp.KERNEL32.dll_FlushInstructionCache]
lea eax, [ebp - 0xc4]
push eax
push 0x40
push 5
push 0x63af44
call esi
mov eax, 0x63af44
mov dword [eax], 0x90909090
mov byte [eax + 4], 0x90
lea eax, [ebp - 0xc4]
push eax
push dword [ebp - 0xc4]
push 5
push 0x63af44
call esi
push 5
push 0x63af44
call edi
push eax
call dword [sym.imp.KERNEL32.dll_FlushInstructionCache]
lea ecx, [ebp - 0x5c]
call fcn.10004700
cmp byte [ebp - 0x5c], 0
jne 0x1005a4a0
mov byte [ebp - 0x5c], 1
mov byte [ebp - 0x47], 1
mov dword [ebp - 0x58], 0x63af44
mov dword [ebp - 0x54], 0x100596e0
mov eax, dword [0x63af45]
add eax, 0x63af49
mov dword [ebp - 0x50], eax
sub esp, 8
mov dword [ebp - 4], 5
lea ecx, [ebp - 0x5c]
call fcn.10068a70
cmp byte [eax + 1], 0
je 0x1005a4bc
mov byte [eax + 1], 0
mov dword [ebp - 4], 6
cmp byte [ebp - 0x5c], 0
je 0x1005a4d2
push ecx
lea ecx, [ebp - 0x5c]
call fcn.10068b40
lea eax, [ebp - 0x40]
push eax
call fcn.1000ab50
add esp, 4
mov dword [ebp - 4], 0xffffffff
lea eax, [ebp - 0xc4]
push eax
push 0x40
push 5
push 0x649bd8
call esi
mov eax, 0x649bd8
mov dword [eax], 0x90909090
mov byte [eax + 4], 0x90
lea eax, [ebp - 0xc4]
push eax
push dword [ebp - 0xc4]
push 5
push 0x649bd8
call esi
push 5
push 0x649bd8
call edi
push eax
call dword [sym.imp.KERNEL32.dll_FlushInstructionCache]
lea eax, [ebp - 0xc4]
mov dword [ebp - 0xc4], 0x1f
push eax
lea eax, [ebp - 0x74]
xorps xmm0, xmm0
push eax
movups xmmword [ebp - 0x74], xmm0
call fcn.10003530
movups xmm0, xmmword [str.load_normal_spec]
mov ecx, eax
mov dword [ebp - 0x64], 0x10
mov eax, dword [ebp - 0xc4]
add esp, 8
mov dword [ebp - 0x74], ecx
mov dword [ebp - 0x60], eax
movups xmmword [ecx], xmm0
mov byte [ecx + 0x10], 0
lea ecx, [ebp - 0x74]
mov dword [ebp - 4], 7
call fcn.10038990
mov dword [ebp - 4], 0xffffffff
mov ecx, dword [ebp - 0x60]
mov byte [ebp - 0xc5], al
cmp ecx, 0xf
jbe 0x1005a5c9
mov edx, dword [ebp - 0x74]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x1005a5b9
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x1005b146
push ecx
push edx
call fcn.100d91c2
mov al, byte [ebp - 0xc5]
add esp, 8
test al, al
jne 0x1005a719
lea eax, [ebp - 0xc4]
push eax
push 0x40
push 5
push 0x616e65
call esi
mov eax, 0x616e65
mov dword [eax], 0x90909090
mov byte [eax + 4], 0x90
lea eax, [ebp - 0xc4]
push eax
push dword [ebp - 0xc4]
push 5
push 0x616e65
call esi
push 5
push 0x616e65
call edi
push eax
call dword [sym.imp.KERNEL32.dll_FlushInstructionCache]
lea eax, [ebp - 0xc4]
push eax
push 0x40
push 5
push 0x616f42
call esi
mov eax, 0x616f42
mov dword [eax], 0x90909090
mov byte [eax + 4], 0x90
lea eax, [ebp - 0xc4]
push eax
push dword [ebp - 0xc4]
push 5
push 0x616f42
call esi
push 5
push 0x616f42
call edi
push eax
call dword [sym.imp.KERNEL32.dll_FlushInstructionCache]
lea eax, [ebp - 0xc4]
push eax
push 0x40
push 7
push 0x6424e4
call esi
mov eax, 0x6424e4
mov ecx, 0x90909090
mov dword [eax], ecx
mov word [eax + 4], cx
mov byte [eax + 6], cl
lea eax, [ebp - 0xc4]
push eax
push dword [ebp - 0xc4]
push 7
push 0x6424e4
call esi
push 7
push 0x6424e4
call edi
push eax
call dword [sym.imp.KERNEL32.dll_FlushInstructionCache]
lea ecx, [ebp - 0x5c]
call fcn.10004700
cmp byte [ebp - 0x5c], 0
jne 0x1005a6db
mov byte [ebp - 0x5c], 1
mov byte [ebp - 0x47], 1
mov dword [ebp - 0x58], 0x6424e4
mov dword [ebp - 0x54], 0x10059ce0
mov eax, dword [0x6424e5]
add eax, 0x6424e9
mov dword [ebp - 0x50], eax
sub esp, 8
mov dword [ebp - 4], 8
lea ecx, [ebp - 0x5c]
call fcn.10068a70
cmp byte [eax + 1], 0
je 0x1005a6f7
mov byte [eax + 1], 0
mov dword [ebp - 4], 9
cmp byte [ebp - 0x5c], 0
je 0x1005a70d
push ecx
lea ecx, [ebp - 0x5c]
call fcn.10068b40
lea eax, [ebp - 0x40]
push eax
call fcn.1000ab50
add esp, 4
lea eax, [ebp - 0xc4]
push eax
push 0x40
push 1
push 0x641cca
call esi
lea eax, [ebp - 0xc4]
mov byte [0x641cca], 0
push eax
push dword [ebp - 0xc4]
push 1
push 0x641cca
call esi
push 1
push 0x641cca
call edi
push eax
call dword [sym.imp.KERNEL32.dll_FlushInstructionCache]
lea eax, [ebp - 0xc4]
push eax
push 0x40
push 1
push 0x641ccb
call esi
lea eax, [ebp - 0xc4]
mov byte [0x641ccb], 1
push eax
push dword [ebp - 0xc4]
push 1
push 0x641ccb
call esi
push 1
push 0x641ccb
call edi
push eax
call dword [sym.imp.KERNEL32.dll_FlushInstructionCache]
lea eax, [ebp - 0xc4]
push eax
push 0x40
push 1
push 0x641c8c
call esi
lea eax, [ebp - 0xc4]
mov byte [0x641c8c], 0
push eax
push dword [ebp - 0xc4]
push 1
push 0x641c8c
call esi
push 1
push 0x641c8c
call edi
push eax
call dword [sym.imp.KERNEL32.dll_FlushInstructionCache]
lea eax, [ebp - 0xc4]
push eax
push 0x40
push 1
push 0x641c8d
call esi
lea eax, [ebp - 0xc4]
mov byte [0x641c8d], 1
push eax
push dword [ebp - 0xc4]
push 1
push 0x641c8d
call esi
push 1
push 0x641c8d
call edi
push eax
call dword [sym.imp.KERNEL32.dll_FlushInstructionCache]
lea ecx, [ebp - 0x5c]
call fcn.10004700
cmp byte [ebp - 0x5c], 0
jne 0x1005a846
mov byte [ebp - 0x5c], 1
mov byte [ebp - 0x47], 1
mov dword [ebp - 0x58], 0x5f4182
mov dword [ebp - 0x54], 0x100597c0
mov eax, dword [0x5f4183]
add eax, 0x5f4187
mov dword [ebp - 0x50], eax
sub esp, 8
mov dword [ebp - 4], 0xa
lea ecx, [ebp - 0x5c]
call fcn.10068a70
cmp byte [eax + 1], 0
je 0x1005a862
mov byte [eax + 1], 0
mov dword [ebp - 4], 0xb
cmp byte [ebp - 0x5c], 0
je 0x1005a878
push ecx
lea ecx, [ebp - 0x5c]
call fcn.10068b40
lea eax, [ebp - 0x40]
push eax
call fcn.1000ab50
add esp, 4
lea ecx, [ebp - 0x5c]
call fcn.10004700
cmp byte [ebp - 0x5c], 0
jne 0x1005a8b5
mov byte [ebp - 0x5c], 1
mov byte [ebp - 0x47], 1
mov dword [ebp - 0x58], 0x5f41c9
mov dword [ebp - 0x54], 0x10059820
mov eax, dword [0x5f41ca]
add eax, 0x5f41ce
mov dword [ebp - 0x50], eax
sub esp, 8
mov dword [ebp - 4], 0xc
lea ecx, [ebp - 0x5c]
call fcn.10068a70
cmp byte [eax + 1], 0
je 0x1005a8d1
mov byte [eax + 1], 0
mov dword [ebp - 4], 0xd
cmp byte [ebp - 0x5c], 0
je 0x1005a8e7
push ecx
lea ecx, [ebp - 0x5c]
call fcn.10068b40
lea eax, [ebp - 0x40]
push eax
call fcn.1000ab50
add esp, 4
lea eax, [ebp - 0xc4]
push eax
push 0x40
push 1
push 0x5f4172
call esi
lea eax, [ebp - 0xc4]
mov byte [0x5f4172], 4
push eax
push dword [ebp - 0xc4]
push 1
push 0x5f4172
call esi
push 1
push 0x5f4172
call edi
push eax
call dword [sym.imp.KERNEL32.dll_FlushInstructionCache]
lea eax, [ebp - 0xc4]
push eax
push 0x40
push 6
push 0x60b028
call esi
mov eax, 0x60b028
mov ecx, 0x90909090
mov dword [eax], ecx
mov word [eax + 4], cx
lea eax, [ebp - 0xc4]
push eax
push dword [ebp - 0xc4]
push 6
push 0x60b028
call esi
push 6
push 0x60b028
call edi
push eax
call dword [sym.imp.KERNEL32.dll_FlushInstructionCache]
lea ecx, [ebp - 0x5c]
call fcn.10004700
cmp byte [ebp - 0x5c], 0
jne 0x1005a9ab
mov byte [ebp - 0x5c], 1
mov byte [ebp - 0x47], 1
mov dword [ebp - 0x58], 0x60b028
mov dword [ebp - 0x54], 0x10059990
mov eax, dword [0x60b029]
add eax, 0x60b02d
mov dword [ebp - 0x50], eax
sub esp, 8
mov dword [ebp - 4], 0xe
lea ecx, [ebp - 0x5c]
call fcn.10068a70
cmp byte [eax + 1], 0
je 0x1005a9c7
mov byte [eax + 1], 0
mov dword [ebp - 4], 0xf
cmp byte [ebp - 0x5c], 0
je 0x1005a9dd
push ecx
lea ecx, [ebp - 0x5c]
call fcn.10068b40
lea eax, [ebp - 0x40]
push eax
call fcn.1000ab50
add esp, 4
lea eax, [ebp - 0xc4]
push eax
push 0x40
push 6
push 0x643f64
call esi
mov eax, 0x643f64
mov ecx, 0x90909090
mov dword [eax], ecx
mov word [eax + 4], cx
lea eax, [ebp - 0xc4]
push eax
push dword [ebp - 0xc4]
push 6
push 0x643f64
call esi
push 6
push 0x643f64
call edi
push eax
call dword [sym.imp.KERNEL32.dll_FlushInstructionCache]
lea ecx, [ebp - 0x5c]
call fcn.10004700
cmp byte [ebp - 0x5c], 0
jne 0x1005aa62
mov byte [ebp - 0x5c], 1
mov byte [ebp - 0x47], 1
mov dword [ebp - 0x58], 0x643f64
mov dword [ebp - 0x54], 0x100599b0
mov eax, dword [0x643f65]
add eax, 0x643f69
mov dword [ebp - 0x50], eax
sub esp, 8
mov dword [ebp - 4], 0x10
lea ecx, [ebp - 0x5c]
call fcn.10068a70
cmp byte [eax + 1], 0
je 0x1005aa7e
mov byte [eax + 1], 0
mov dword [ebp - 4], 0x11
cmp byte [ebp - 0x5c], 0
je 0x1005aa94
push ecx
lea ecx, [ebp - 0x5c]
call fcn.10068b40
lea eax, [ebp - 0x40]
push eax
call fcn.1000ab50
add esp, 4
lea ecx, [ebp - 0x5c]
call fcn.10004700
cmp byte [ebp - 0x5c], 0
jne 0x1005aad1
mov byte [ebp - 0x5c], 1
mov byte [ebp - 0x47], 1
mov dword [ebp - 0x58], 0x643b6b
mov dword [ebp - 0x54], 0x100599d0
mov eax, dword [0x643b6c]
add eax, 0x643b70
mov dword [ebp - 0x50], eax
sub esp, 8
mov dword [ebp - 4], 0x12
lea ecx, [ebp - 0x5c]
call fcn.10068a70
cmp byte [eax + 1], 0
je 0x1005aaed
mov byte [eax + 1], 0
mov dword [ebp - 4], 0x13
cmp byte [ebp - 0x5c], 0
je 0x1005ab03
push ecx
lea ecx, [ebp - 0x5c]
call fcn.10068b40
lea eax, [ebp - 0x40]
push eax
call fcn.1000ab50
add esp, 4
lea ecx, [ebp - 0x5c]
call fcn.10004700
cmp byte [ebp - 0x5c], 0
jne 0x1005ab40
mov byte [ebp - 0x5c], 1
mov byte [ebp - 0x47], 1
mov dword [ebp - 0x58], 0x643b03
mov dword [ebp - 0x54], 0x10059a00
mov eax, dword [0x643b04]
add eax, 0x643b08
mov dword [ebp - 0x50], eax
sub esp, 8
mov dword [ebp - 4], 0x14
lea ecx, [ebp - 0x5c]
call fcn.10068a70
cmp byte [eax + 1], 0
je 0x1005ab5c
mov byte [eax + 1], 0
mov dword [ebp - 4], 0x15
cmp byte [ebp - 0x5c], 0
je 0x1005ab72
push ecx
lea ecx, [ebp - 0x5c]
call fcn.10068b40
lea eax, [ebp - 0x40]
push eax
call fcn.1000ab50
add esp, 4
lea ecx, [ebp - 0x5c]
call fcn.10004700
cmp byte [ebp - 0x5c], 0
jne 0x1005abaf
mov byte [ebp - 0x5c], 1
mov byte [ebp - 0x47], 1
mov dword [ebp - 0x58], 0x643b34
mov dword [ebp - 0x54], 0x10059a40
mov eax, dword [0x643b35]
add eax, 0x643b39
mov dword [ebp - 0x50], eax
sub esp, 8
mov dword [ebp - 4], 0x16
lea ecx, [ebp - 0x5c]
call fcn.10068a70
cmp byte [eax + 1], 0
je 0x1005abcb
mov byte [eax + 1], 0
mov dword [ebp - 4], 0x17
cmp byte [ebp - 0x5c], 0
je 0x1005abe1
push ecx
lea ecx, [ebp - 0x5c]
call fcn.10068b40
lea eax, [ebp - 0x40]
push eax
call fcn.1000ab50
add esp, 4
lea eax, [ebp - 0xc4]
push eax
push 0x40
push 8
push 0x64d172
call esi
mov eax, 0x64d172
mov dword [eax], 0x90909090
mov dword [eax + 4], 0x90909090
lea eax, [ebp - 0xc4]
push eax
push dword [ebp - 0xc4]
push 8
push 0x64d172
call esi
push 8
push 0x64d172
call edi
push eax
call dword [sym.imp.KERNEL32.dll_FlushInstructionCache]
lea ecx, [ebp - 0x5c]
call fcn.10004700
cmp byte [ebp - 0x5c], 0
jne 0x1005ac68
mov byte [ebp - 0x5c], 1
mov byte [ebp - 0x47], 1
mov dword [ebp - 0x58], 0x64d172
mov dword [ebp - 0x54], 0x10059a60
mov eax, dword [0x64d173]
add eax, 0x64d177
mov dword [ebp - 0x50], eax
sub esp, 8
mov dword [ebp - 4], 0x18
lea ecx, [ebp - 0x5c]
call fcn.10068a70
cmp byte [eax + 1], 0
je 0x1005ac84
mov byte [eax + 1], 0
mov dword [ebp - 4], 0x19
cmp byte [ebp - 0x5c], 0
je 0x1005ac9a
push ecx
lea ecx, [ebp - 0x5c]
call fcn.10068b40
lea eax, [ebp - 0x40]
push eax
call fcn.1000ab50
mov dword [ebp - 4], 0xffffffff
mov eax, dword [0x1021f0dc]
mov ecx, dword [0x1021f0e0]
push eax
sub ecx, eax
sar ecx, 2
push ecx
push 0
push 0
push 0
push 1
push str.Disable_world_culling._all_is_needed_for_stable_geometry_hashes__n__less:_reduces_culling_to_portals_only__unstable_world_geo_hashes___n__all:_disable_culling_of_all_surfaces_including_models_n__all_but_models:_disable_culling_of_all_surfaces_excluding_models
push 1
push 6
push str.rtx_disable_world_culling
call dword [0x10167e9c]
push 0
push 0
push 0
push 0
push 0
push 1
push str.Disable_culling_of_game_entities__script_objects_destructible_cars_..._
push 1
push 0
push str.rtx_disable_entity_culling
mov dword [0x1020d3a4], eax
call dword [0x10167e44]
add esp, 0x54
mov dword [0x1020d3a0], eax
lea eax, [ebp - 0xc4]
push eax
push 0x40
push 5
push 0x62a2a1
call esi
mov eax, 0x62a2a1
mov dword [eax], 0x90909090
mov byte [eax + 4], 0x90
lea eax, [ebp - 0xc4]
push eax
push dword [ebp - 0xc4]
push 5
push 0x62a2a1
call esi
push 5
push 0x62a2a1
call edi
push eax
call dword [sym.imp.KERNEL32.dll_FlushInstructionCache]
lea eax, [ebp - 0xc4]
push eax
push 0x40
push 5
push 0x62a2f8
call esi
mov eax, 0x62a2f8
mov dword [eax], 0x90909090
mov byte [eax + 4], 0x90
lea eax, [ebp - 0xc4]
push eax
push dword [ebp - 0xc4]
push 5
push 0x62a2f8
call esi
push 5
push 0x62a2f8
call edi
push eax
call dword [sym.imp.KERNEL32.dll_FlushInstructionCache]
lea eax, [ebp - 0xc4]
push eax
push 0x40
push 5
push 0x62a34f
call esi
mov eax, 0x62a34f
mov dword [eax], 0x90909090
mov byte [eax + 4], 0x90
lea eax, [ebp - 0xc4]
push eax
push dword [ebp - 0xc4]
push 5
push 0x62a34f
call esi
push 5
push 0x62a34f
call edi
push eax
call dword [sym.imp.KERNEL32.dll_FlushInstructionCache]
lea eax, [ebp - 0xc4]
push eax
push 0x40
push 5
push 0x62a3a6
call esi
mov eax, 0x62a3a6
mov dword [eax], 0x90909090
mov byte [eax + 4], 0x90
lea eax, [ebp - 0xc4]
push eax
push dword [ebp - 0xc4]
push 5
push 0x62a3a6
call esi
push 5
push 0x62a3a6
call edi
push eax
call dword [sym.imp.KERNEL32.dll_FlushInstructionCache]
lea eax, [ebp - 0xc4]
push eax
push 0x40
push 4
push 0x5fae5a
call esi
mov eax, 0x5fae5a
mov dword [eax], 0x90909090
lea eax, [ebp - 0xc4]
push eax
push dword [ebp - 0xc4]
push 4
push 0x5fae5a
call esi
push 4
push 0x5fae5a
call edi
push eax
call dword [sym.imp.KERNEL32.dll_FlushInstructionCache]
lea eax, [ebp - 0xc4]
push eax
push 0x40
push 2
push 0x5fae67
call esi
mov eax, 0x5fae67
mov ecx, 0x90909090
mov word [eax], cx
lea eax, [ebp - 0xc4]
push eax
push dword [ebp - 0xc4]
push 2
push 0x5fae67
call esi
push 2
push 0x5fae67
call edi
push eax
call dword [sym.imp.KERNEL32.dll_FlushInstructionCache]
lea ecx, [ebp - 0x5c]
call fcn.10004700
cmp byte [ebp - 0x5c], 0
jne 0x1005aeda
mov byte [ebp - 0x5c], 1
mov byte [ebp - 0x47], 1
mov dword [ebp - 0x58], 0x5911c0
mov dword [ebp - 0x54], 0x100598d0
mov eax, dword [0x5911c1]
add eax, 0x5911c5
mov dword [ebp - 0x50], eax
sub esp, 8
mov dword [ebp - 4], 0x1a
lea ecx, [ebp - 0x5c]
call fcn.10068a70
cmp byte [eax + 1], 0
je 0x1005aef6
mov byte [eax + 1], 0
mov dword [ebp - 4], 0x1b
cmp byte [ebp - 0x5c], 0
je 0x1005af0c
push ecx
lea ecx, [ebp - 0x5c]
call fcn.10068b40
lea eax, [ebp - 0x40]
push eax
call fcn.1000ab50
add esp, 4
lea eax, [ebp - 0xc4]
push eax
push 0x40
push 6
push 0x63af03
call esi
mov eax, 0x63af03
mov ecx, 0x90909090
mov dword [eax], ecx
mov word [eax + 4], cx
lea eax, [ebp - 0xc4]
push eax
push dword [ebp - 0xc4]
push 6
push 0x63af03
call esi
push 6
push 0x63af03
call edi
push eax
call dword [sym.imp.KERNEL32.dll_FlushInstructionCache]
lea ecx, [ebp - 0x5c]
call fcn.10004700
cmp byte [ebp - 0x5c], 0
jne 0x1005af91
mov byte [ebp - 0x5c], 1
mov byte [ebp - 0x47], 1
mov dword [ebp - 0x58], 0x63af03
mov dword [ebp - 0x54], 0x10059950
mov eax, dword [0x63af04]
add eax, 0x63af08
mov dword [ebp - 0x50], eax
sub esp, 8
mov dword [ebp - 4], 0x1c
lea ecx, [ebp - 0x5c]
call fcn.10068a70
cmp byte [eax + 1], 0
je 0x1005afad
mov byte [eax + 1], 0
mov dword [ebp - 4], 0x1d
cmp byte [ebp - 0x5c], 0
je 0x1005afc3
push ecx
lea ecx, [ebp - 0x5c]
call fcn.10068b40
lea eax, [ebp - 0x40]
push eax
call fcn.1000ab50
add esp, 4
lea ecx, [ebp - 0xc0]
call fcn.10004700
cmp byte [ebp - 0xc0], 0
jne 0x1005b015
mov byte [ebp - 0xc0], 1
mov byte [ebp - 0xab], 1
mov dword [ebp - 0xbc], 0x5f4efa
mov dword [ebp - 0xb8], 0x10059ca0
mov eax, dword [0x5f4efb]
add eax, 0x5f4eff
mov dword [ebp - 0xb4], eax
sub esp, 8
mov dword [ebp - 4], 0x1e
lea ecx, [ebp - 0xc0]
call fcn.10068a70
cmp byte [eax + 1], 0
je 0x1005b034
mov byte [eax + 1], 0
mov dword [ebp - 4], 0x1f
cmp byte [ebp - 0xc0], 0
je 0x1005b050
push ecx
lea ecx, [ebp - 0xc0]
call fcn.10068b40
lea eax, [ebp - 0xa4]
push eax
call fcn.1000ab50
push 0
push 0
push 0
push 0
push 0
push 1
push str.Enables_various_hacks_and_tweaks_to_make_nvidia_rtx_work
push 1
push 0
push str.rtx_hacks
mov dword [ebp - 4], 0xffffffff
call dword [0x10167e44]
push 0
push 0
push 0
push 0
push 0
push 0
push str.Check_and_replace_sky_materials_defined_with_dvar_rtx_sky_materials
push 1
push 0
push str.rtx_sky_hacks
mov dword [0x1020d3b4], eax
call dword [0x10167e44]
add esp, 0x54
mov dword [0x1020d3b0], eax
push 0
push 0
push 0
push 0
push 0
push 1
push str.Sky_will_follow_the_player__can_help_with_culling_issues_
push 1
push 0
push str.rtx_sky_follow_player
call dword [0x10167e44]
push 0
push 0
push 0
push 0
push 0
push 1
push str.IW3_has_a_limit_on_how_many_static_models_it_can_drawn_at_the_same_time._Forcing_lods_and_drawdistances_can_exceed_that_limit_pretty_fast._nEnabling_this_will_force_the_game_to_still_render_them__at_the_cost_of_wrong_lighting___rasterized_only_tho_
push 1
push 0
push str.rtx_extend_smodel_drawing
mov dword [0x1020d3bc], eax
call dword [0x10167e44]
add esp, 0x50
mov dword [0x1020d3ac], eax
push 0
push 0
push 0
push 0
push 0
push 1
push str.Force_LOD_of_static_models_to_the_second_lowest_LOD__should_keep_grass__rocks__trees_..._visible__nSet_r_forceLod_to_anything_but_none_for_this_to_work
push 1
push 0
push str.r_forceLod_second_lowest
call dword [0x10167e44]
mov dword [0x1020d3a8], eax
add esp, 0x28
mov eax, dword [ebp - 0xcc]
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
mov ecx, dword [ebp - 0x10]
xor ecx, ebp
call fcn.100d8e9a
mov esp, ebp
pop ebp
ret
call fcn.100de11f
int3