Function at 0x101c3560
Capabilities:
Contain obfuscated stackstrings
Parse pe header
Persist via run registry key
Resolve function by parsing pe exports

Disassembly:
push ebp
mov ebp, esp
and esp, 0xfffffff8
push 0xffffffffffffffff
push 0x10299ca6
mov eax, dword fs:[0]
push eax
sub esp, 0x1b8
push ebx
push esi
push edi
mov eax, dword [0x1037c990]
xor eax, esp
push eax
lea eax, [esp + 0x1c8]
mov dword fs:[0], eax
push str.SOFTWARENVIDIA_CorporationInstaller2
lea ecx, [esp + 0x94]
call fcn.10055ee0
mov esi, eax
xor ebx, ebx
mov dword [esp + 0x1d0], ebx
push reloc.OLEAUT32.dll_SysReAllocString
lea ecx, [esp + 0x5c]
call fcn.10055ce0
mov byte [esp + 0x1d0], 1
push 1
lea ecx, [esp + 0x2c]
push ecx
mov ecx, eax
call fcn.10055e70
mov byte [esp + 0x1d0], 2
push esi
push eax
lea ecx, [esp + 0x148]
call fcn.10055f50
mov byte [esp + 0x1d0], 4
lea ecx, [esp + 0x28]
call fcn.100560b0
mov byte [esp + 0x1d0], 5
lea ecx, [esp + 0x58]
call fcn.100560b0
mov byte [esp + 0x1d0], 6
lea ecx, [esp + 0x90]
call fcn.100560b0
push str.Pending
lea ecx, [esp + 0x5c]
call fcn.10055ee0
mov byte [esp + 0x1d0], 7
lea edx, [esp + 0x58]
push edx
lea eax, [esp + 0x144]
push eax
lea ecx, [esp + 0xe8]
call fcn.10055f50
mov byte [esp + 0x1d0], 9
lea ecx, [esp + 0x58]
call fcn.100560b0
push ebx
push ebx
lea ecx, [esp + 0xe8]
call fcn.101e7690
mov dword [esp + 0x68], ebx
mov byte [esp + 0x1d0], 0xb
mov eax, dword [ebp + 8]
mov ecx, dword [eax]
lea edx, [esp + 0x68]
push edx
push eax
mov eax, dword [ecx + 0x20]
call eax
cmp eax, ebx
jge 0x101c369d
push ebx
push 0x3fb
push str..RunDllInstallPackage.cpp
push eax
call fcn.100048f0
lea ecx, [esp + 0x124]
push ecx
mov ecx, dword [esp + 0x6c]
call fcn.100bf190
mov byte [esp + 0x1d0], 0xd
mov edi, dword [sym.imp.OLEAUT32.dll_VariantCopy]
lea edx, [esp + 0x12c]
push edx
call edi
mov eax, dword [esp + 0x124]
mov dword [esp + 0x24], ebx
cmp eax, ebx
je 0x101c36f4
mov ecx, dword [eax]
lea edx, [esp + 0x24]
push edx
lea edx, [esp + 0x130]
push edx
push 1
push eax
mov eax, dword [ecx + 0xc]
call eax
cmp eax, ebx
jl 0x101c3e49
cmp dword [esp + 0x24], ebx
seta al
cmp al, bl
je 0x101c3bf0
lea ecx, [esp + 0x1c]
push ecx
lea esi, [esp + 0x128]
call fcn.100900e0
mov byte [esp + 0x1d0], 0xe
push 0x103b7524
lea ecx, [esp + 0x38]
call fcn.10003eb0
mov byte [esp + 0x1d0], 0x10
lea edx, [esp + 0x3c]
push edx
call dword [sym.imp.OLEAUT32.dll_VariantClear]
mov byte [esp + 0x1d0], 0x11
mov dword [esp + 0x4c], ebx
mov byte [esp + 0x1d0], 0x12
mov dword [esp + 0x18], ebx
mov byte [esp + 0x1d0], 0x14
mov esi, dword [esp + 0x1c]
lea ecx, [esp + 0x34]
mov dword [esp + 0x4c], ebx
call fcn.100041b0
lea eax, [esp + 0x3c]
push eax
call edi
cmp eax, ebx
jl 0x101c3e49
mov ecx, 8
mov word [esp + 0x3c], cx
lea eax, [esp + 0x44]
mov dword [esp + 0x4c], 2
mov dword [esp + 0x44], ebx
mov edx, dword [esi]
mov ecx, dword [edx + 0x20]
push eax
push esi
call ecx
cmp eax, ebx
jl 0x101c3b96
lea edx, [esp + 0x34]
push edx
lea ecx, [esp + 0x94]
call fcn.101a5860
mov byte [esp + 0x1d0], 0x15
lea eax, [esp + 0x90]
push eax
lea ecx, [esp + 0xe4]
push ecx
lea ecx, [esp + 0x60]
call fcn.10055f50
mov byte [esp + 0x1d0], 0x18
lea edx, [esp + 0x94]
mov dword [esp + 0x6c], edx
mov byte [esp + 0x1d0], 0x18
mov eax, dword [esp + 0x94]
add eax, 0xfffffff0
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x101c3818
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
mov byte [esp + 0x1d0], 0x17
mov esi, dword [esp + 0x90]
cmp esi, ebx
je 0x101c3850
lea ecx, [esi + 8]
push ecx
mov dword [esp + 0x94], ebx
call dword [sym.imp.KERNEL32.dll_InterlockedDecrement]
cmp eax, ebx
jl 0x101c3ba7
jne 0x101c3850
mov edx, dword [esi]
mov eax, dword [edx]
push 1
mov ecx, esi
call eax
lea ecx, [esp + 0x58]
call fcn.101e2510
test al, al
jne 0x101c38e2
mov byte [esp + 0x1d0], 0x14
lea ecx, [esp + 0x58]
call fcn.100560b0
mov byte [esp + 0x1d0], 0x12
mov eax, dword [esp + 0x18]
cmp eax, ebx
je 0x101c388a
mov ecx, dword [eax]
mov edx, dword [ecx + 8]
push eax
call edx
mov byte [esp + 0x1d0], 0x1c
lea eax, [esp + 0x3c]
push eax
call edi
mov byte [esp + 0x1d0], 0xe
mov eax, dword [esp + 0x34]
add eax, 0xfffffff0
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x101c38c1
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
mov byte [esp + 0x1d0], 0xd
mov eax, dword [esp + 0x1c]
cmp eax, ebx
je 0x101c36b6
mov ecx, dword [eax]
mov edx, dword [ecx + 8]
push eax
call edx
jmp 0x101c36b6
mov eax, dword [esp + 0x1c]
mov ecx, dword [eax]
lea edx, [esp + 0x18]
push edx
push eax
mov eax, dword [ecx + 0x28]
call eax
cmp eax, ebx
jl 0x101c3bb9
cmp dword [esp + 0x18], ebx
jne 0x101c394f
mov byte [esp + 0x1d0], 0x14
lea ecx, [esp + 0x58]
call fcn.100560b0
mov byte [esp + 0x1d0], 0x12
mov eax, dword [esp + 0x18]
cmp eax, ebx
je 0x101c392a
mov ecx, dword [eax]
mov edx, dword [ecx + 8]
push eax
call edx
mov byte [esp + 0x1d0], 0x21
lea eax, [esp + 0x3c]
push eax
call edi
mov byte [esp + 0x1d0], 0xe
lea ecx, [esp + 0x34]
call fcn.10004720
jmp 0x101c38c1
mov dword [esp + 0x20], ebx
mov byte [esp + 0x1d0], 0x25
mov eax, dword [esp + 0x18]
mov ecx, dword [eax]
lea edx, [esp + 0x20]
push edx
push eax
mov eax, dword [ecx + 0x48]
call eax
cmp eax, ebx
jl 0x101c3bca
cmp dword [esp + 0x20], ebx
setne al
cmp al, bl
je 0x101c3bdb
push str.Properties
lea ecx, [esp + 0x2c]
call fcn.10055ee0
mov byte [esp + 0x1d0], 0x26
lea ecx, [esp + 0x28]
push ecx
lea edx, [esp + 0x5c]
push edx
lea ecx, [esp + 0xb0]
call fcn.10055f50
mov byte [esp + 0x1d0], 0x28
lea ecx, [esp + 0x28]
call fcn.100560b0
lea ecx, [esp + 0xa8]
call fcn.101e2510
test al, al
je 0x101c3afa
call fcn.10045b90
cmp dword [eax + 0x1c], 4
jl 0x101c3aed
sub esp, 0x1c
mov ecx, esp
mov dword [esp + 0x88], esp
push 0x1a
mov esi, 7
xor eax, eax
mov dword [ecx + 0x18], esi
mov dword [ecx + 0x14], ebx
push 0x102e2750
mov word [ecx + 4], ax
call fcn.10035ce0
mov byte [esp + 0x1ec], 0x29
push 0x415
sub esp, 0x1c
mov ecx, esp
mov dword [esp + 0xc8], esp
push 0x2b
xor edx, edx
mov dword [ecx + 0x18], esi
mov dword [ecx + 0x14], ebx
push str.CNVInstaller::InternalResumeInstallDeferred
mov word [ecx + 4], dx
call fcn.10035ce0
mov byte [esp + 0x20c], 0x2a
lea eax, [esp + 0x188]
push eax
lea ecx, [esp + 0xe8]
call fcn.101e7180
mov byte [esp + 0x20c], 0x2b
lea ecx, [esp + 0x53]
mov dword [esp + 0x118], ecx
mov dword [esp + 0xb0], eax
lea edx, [esp + 0x114]
lea eax, [esp + 0xc0]
lea ecx, [esp + 0xb0]
mov byte [esp + 0x53], bl
mov dword [esp + 0xc0], str.Deleting_existing_package_properties_registry
mov dword [esp + 0xc4], edx
mov dword [esp + 0xb4], eax
mov dword [esp + 0xb8], 0x102e308c
mov dword [esp + 0xbc], ecx
push 4
call fcn.10045b90
push eax
mov byte [esp + 0x214], 0x2c
lea edi, [esp + 0xc0]
call fcn.10002b50
mov byte [esp + 0x1d0], 0x28
lea ecx, [esp + 0x14c]
call fcn.10002d20
mov edi, dword [sym.imp.OLEAUT32.dll_VariantCopy]
push ebx
lea ecx, [esp + 0xac]
call fcn.101e7950
push ebx
push ebx
lea ecx, [esp + 0xb0]
call fcn.101e7690
mov ecx, dword [esp + 0x20]
lea edx, [esp + 0xa8]
push edx
call fcn.1019f580
add esp, 4
mov byte [esp + 0x1d0], 0x25
lea ecx, [esp + 0xa8]
call fcn.100560b0
mov byte [esp + 0x1d0], 0x17
mov eax, dword [esp + 0x20]
cmp eax, ebx
je 0x101c3b48
mov ecx, dword [eax]
mov edx, dword [ecx + 8]
push eax
call edx
mov byte [esp + 0x1d0], 0x14
lea ecx, [esp + 0x58]
call fcn.100560b0
mov byte [esp + 0x1d0], 0x12
mov eax, dword [esp + 0x18]
cmp eax, ebx
je 0x101c3b71
mov ecx, dword [eax]
mov edx, dword [ecx + 8]
push eax
call edx
mov byte [esp + 0x1d0], 0x2f
lea eax, [esp + 0x3c]
push eax
call edi
mov byte [esp + 0x1d0], 0xe
lea ecx, [esp + 0x34]
call fcn.10004720
jmp 0x101c38c1
push ebx
push 0x401
push str..RunDllInstallPackage.cpp
push eax
call fcn.100048f0
push ebx
push 0x6e
push str.c:dvsp4_build_sw_relgpu_drvinstaller_coreincRefCounted.h
push 0xe0e00000
call fcn.100048f0
push ebx
push 0x407
push str..RunDllInstallPackage.cpp
push eax
call fcn.100048f0
push ebx
push 0x40d
push str..RunDllInstallPackage.cpp
push eax
call fcn.100048f0
push ebx
push 0x40e
push str..RunDllInstallPackage.cpp
push 0xe0e00000
call fcn.100048f0
mov byte [esp + 0x1d0], 0xb
lea eax, [esp + 0x124]
push eax
call fcn.10040980
mov esi, dword [ebp + 8]
lea ecx, [esi + 0x354]
push ecx
call fcn.101af410
push str.installer
lea ecx, [esp + 0x2c]
call fcn.10055ee0
mov byte [esp + 0x1d0], 0x34
lea edx, [esp + 0x28]
push edx
lea eax, [esp + 0xe4]
push eax
lea ecx, [esp + 0x100]
call fcn.10055f50
mov byte [esp + 0x1d0], 0x36
lea ecx, [esp + 0x28]
call fcn.100560b0
push ebx
push ebx
lea ecx, [esp + 0x100]
call fcn.101e7690
push str.Properties
lea ecx, [esp + 0x2c]
call fcn.10055ee0
mov byte [esp + 0x1d0], 0x37
lea ecx, [esp + 0x28]
push ecx
lea edx, [esp + 0xfc]
push edx
lea ecx, [esp + 0xa4]
call fcn.10055f50
mov byte [esp + 0x1d0], 0x39
lea ecx, [esp + 0x28]
call fcn.100560b0
lea ecx, [esp + 0x9c]
call fcn.101e2510
test al, al
je 0x101c3db8
call fcn.10045b90
cmp dword [eax + 0x1c], 4
jl 0x101c3da8
sub esp, 0x1c
mov ecx, esp
mov dword [esp + 0xa8], esp
push 0x102e2750
call fcn.10035dd0
mov byte [esp + 0x1ec], 0x3a
push 0x429
sub esp, 0x1c
mov ecx, esp
mov dword [esp + 0xa8], esp
push str.CNVInstaller::InternalResumeInstallDeferred
call fcn.10035dd0
mov byte [esp + 0x20c], 0x3b
lea eax, [esp + 0x70]
push eax
lea ecx, [esp + 0xdc]
call fcn.101e7180
mov byte [esp + 0x20c], 0x3c
lea ecx, [esp + 0x53]
mov dword [esp + 0x118], ecx
mov dword [esp + 0xb0], eax
lea edx, [esp + 0x114]
lea eax, [esp + 0xb8]
lea ecx, [esp + 0xb0]
mov byte [esp + 0x53], bl
mov dword [esp + 0xb8], str.Deleting_existing_engine_properties_registry
mov dword [esp + 0xbc], edx
mov dword [esp + 0xb4], eax
mov dword [esp + 0xc0], 0x102e30a0
mov dword [esp + 0xc4], ecx
push 4
call fcn.10045b90
push eax
mov byte [esp + 0x214], 0x3d
lea edi, [esp + 0xc8]
call fcn.10002b50
mov byte [esp + 0x1d0], 0x39
lea ecx, [esp + 0x34]
call fcn.10002d20
mov edi, dword [sym.imp.OLEAUT32.dll_VariantCopy]
push ebx
lea ecx, [esp + 0xa0]
call fcn.101e7950
mov esi, dword [ebp + 8]
push ebx
push ebx
lea ecx, [esp + 0xa4]
call fcn.101e7690
mov ecx, dword [esi + 0x88]
lea edx, [esp + 0x9c]
push edx
call fcn.1019f580
add esp, 4
lea eax, [esp + 0x24]
push sym.NVI2.DLL_ResumeW
push eax
call fcn.101eace0
add esp, 8
mov byte [esp + 0x1d0], 0x3e
push eax
lea ecx, [esp + 0x1ac]
call fcn.10056360
mov byte [esp + 0x1d0], 0x40
lea ecx, [esp + 0x24]
call fcn.10004720
lea ecx, [esp + 0x104]
call fcn.10002dd0
mov byte [esp + 0x1d0], 0x41
lea ecx, [esp + 0x104]
mov dword [esp + 0x11c], ebx
call fcn.100041b0
lea ecx, [esp + 0x10c]
push ecx
call edi
cmp eax, ebx
jge 0x101c3e56
push ebx
push ebx
push 0x102b274a
push eax
call fcn.100048f0
mov eax, dword [esi]
lea ecx, [esp + 0x114]
mov edx, 8
push ecx
mov word [esp + 0x110], dx
mov edx, dword [eax + 0x38]
push esi
mov dword [esp + 0x124], 2
mov dword [esp + 0x11c], ebx
call edx
cmp eax, ebx
jge 0x101c3e9a
push ebx
push 0x434
push str..RunDllInstallPackage.cpp
push eax
call fcn.100048f0
lea eax, [esp + 0x18c]
push eax
call fcn.101dbb40
add esp, 4
mov byte [esp + 0x1d0], 0x42
push str.RunDll32.EXE
lea ecx, [esp + 0x174]
call fcn.10055a10
mov byte [esp + 0x1d0], 0x43
lea ecx, [esp + 0x170]
push ecx
lea ecx, [esp + 0x190]
call fcn.100db530
mov byte [esp + 0x1d0], 0x42
lea ecx, [esp + 0x170]
call fcn.10056b10
lea ecx, [esp + 0xb4]
call fcn.10002dd0
mov byte [esp + 0x1d0], 0x44
lea edx, [esp + 0x34]
push edx
lea ecx, [esp + 0x1ac]
call fcn.10055810
mov byte [esp + 0x1d0], 0x45
lea eax, [esp + 0x34]
push eax
lea ecx, [esp + 0x150]
call fcn.10055870
mov byte [esp + 0x1d0], 0x46
push eax
lea ecx, [esp + 0xb8]
call fcn.1005ea70
mov byte [esp + 0x1d0], 0x45
lea ecx, [esp + 0x14c]
call fcn.10002d20
mov byte [esp + 0x1d0], 0x44
lea ecx, [esp + 0x34]
call fcn.10002d20
lea ecx, [esp + 0xb4]
call fcn.10003840
cmp dword [esp + 0xcc], 3
jne 0x101c3fa7
lea ecx, [esp + 0xbc]
push ecx
mov dword [esp + 0xd0], 1
call edi
cmp eax, ebx
jge 0x101c3fa7
push ebx
push ebx
push 0x102b274a
push eax
call fcn.100048f0
cmp dword [esp + 0xcc], ebx
jne 0x101c3fbb
mov dword [esp + 0xcc], 1
mov edx, dword [esp + 0xb4]
push 0x102d4a4c
push edx
call fcn.10231204
add esp, 8
cmp eax, ebx
je 0x101c4030
sub eax, dword [esp + 0xb4]
sar eax, 1
js 0x101c4030
push 0x102b2628
push ebx
lea ecx, [esp + 0xbc]
call fcn.10055000
mov ecx, eax
call fcn.101447b0
push 0x102b2628
lea ecx, [esp + 0x38]
call fcn.10056640
mov byte [esp + 0x1d0], 0x47
lea eax, [esp + 0x34]
push eax
lea ecx, [esp + 0xb8]
call fcn.10054f90
mov byte [esp + 0x1d0], 0x44
lea ecx, [esp + 0x34]
call fcn.10002d20
push 0x102bd354
lea ecx, [esp + 0x38]
call fcn.10056640
mov byte [esp + 0x1d0], 0x48
lea ecx, [esp + 0x34]
push ecx
lea ecx, [esp + 0xb8]
call fcn.10054f90
mov byte [esp + 0x1d0], 0x44
lea ecx, [esp + 0x34]
call fcn.10002d20
push str.Resume
lea ecx, [esp + 0x38]
call fcn.10056640
mov byte [esp + 0x1d0], 0x49
lea edx, [esp + 0x34]
push edx
lea ecx, [esp + 0xb8]
call fcn.10054f90
mov byte [esp + 0x1d0], 0x44
lea ecx, [esp + 0x34]
call fcn.10002d20
push 0x102b21e0
lea ecx, [esp + 0x38]
call fcn.10056640
mov byte [esp + 0x1d0], 0x4a
lea eax, [esp + 0x34]
push eax
lea ecx, [esp + 0xb8]
call fcn.10054f90
mov byte [esp + 0x1d0], 0x44
lea ecx, [esp + 0x34]
call fcn.10002d20
lea ecx, [esp + 0x104]
push ecx
lea ecx, [esp + 0xb8]
call fcn.10054f90
lea edx, [esp + 0x1a8]
push edx
lea ecx, [esp + 0x38]
call fcn.10055370
mov byte [esp + 0x1d0], 0x4b
lea ecx, [esp + 0x14c]
push ecx
mov ecx, eax
call fcn.101daa80
mov byte [esp + 0x1d0], 0x4c
lea edx, [esp + 0x170]
push edx
mov ecx, eax
call fcn.101daa00
mov byte [esp + 0x1d0], 0x4d
add eax, 0x18
push eax
lea ecx, [esp + 0x68]
call fcn.100047f0
mov byte [esp + 0x1d0], 0x4f
lea ecx, [esp + 0x170]
call fcn.10056b10
mov byte [esp + 0x1d0], 0x50
lea ecx, [esp + 0x14c]
call fcn.10056b10
mov byte [esp + 0x1d0], 0x51
lea ecx, [esp + 0x34]
call fcn.10056b10
push 0x2f
push 0x5c
lea ecx, [esp + 0x6c]
call fcn.100b9250
lea ecx, [esp + 0xb4]
call fcn.10003840
push eax
lea ecx, [esp + 0x1c]
call fcn.100047f0
mov esi, eax
mov byte [esp + 0x1d0], 0x52
lea eax, [esp + 0x1a4]
push eax
lea ecx, [esp + 0x20]
call fcn.100047f0
mov byte [esp + 0x1d0], 0x53
push eax
lea ecx, [esp + 0x24]
push 0x102b2628
push ecx
call fcn.10002820
add esp, 0xc
mov byte [esp + 0x1d0], 0x54
push 0x102b2620
push eax
lea edx, [esp + 0x2c]
push edx
call fcn.100029d0
add esp, 0xc
mov byte [esp + 0x1d0], 0x55
push esi
push eax
lea eax, [esp + 0x78]
push eax
call fcn.100549c0
add esp, 0xc
mov byte [esp + 0x1d0], 0x57
lea ecx, [esp + 0x24]
call fcn.10004720
mov byte [esp + 0x1d0], 0x58
lea ecx, [esp + 0x20]
call fcn.10004720
mov byte [esp + 0x1d0], 0x59
lea ecx, [esp + 0x1c]
call fcn.10004720
mov byte [esp + 0x1d0], 0x5a
lea ecx, [esp + 0x18]
call fcn.10004720
push str.SOFTWAREMicrosoftWindowsCurrentVersionRunOnce
lea ecx, [esp + 0x2c]
call fcn.10055ee0
mov byte [esp + 0x1d0], 0x5b
push reloc.OLEAUT32.dll_SysReAllocString
lea ecx, [esp + 0x5c]
call fcn.10055ce0
mov byte [esp + 0x1d0], 0x5c
lea ecx, [esp + 0x28]
push ecx
push eax
lea ecx, [esp + 0xf4]
call fcn.10055f50
mov byte [esp + 0x1d0], 0x5e
lea ecx, [esp + 0x58]
call fcn.100560b0
mov byte [esp + 0x1d0], 0x5f
lea ecx, [esp + 0x28]
call fcn.100560b0
push ebx
push ebx
lea ecx, [esp + 0xf4]
call fcn.101e7690
push 1
lea edx, [esp + 0x74]
push edx
lea eax, [esp + 0x6c]
push eax
lea ecx, [esp + 0xf8]
call fcn.101e5260
mov byte [esp + 0x1d0], 0x5a
lea ecx, [esp + 0xec]
call fcn.100560b0
mov byte [esp + 0x1d0], 0x51
lea ecx, [esp + 0x70]
call fcn.10004720
mov byte [esp + 0x1d0], 0x44
lea ecx, [esp + 0x64]
call fcn.10004720
mov byte [esp + 0x1d0], 0x42
lea ecx, [esp + 0xb4]
call fcn.10002d20
mov byte [esp + 0x1d0], 0x41
lea ecx, [esp + 0x18c]
call fcn.10056b10
mov byte [esp + 0x1d0], 0x40
lea ecx, [esp + 0x104]
call fcn.10002d20
mov byte [esp + 0x1d0], 0x39
lea ecx, [esp + 0x1a8]
call fcn.10056b10
mov byte [esp + 0x1d0], 0x36
lea ecx, [esp + 0x9c]
call fcn.100560b0
mov byte [esp + 0x1d0], 0xb
lea ecx, [esp + 0xf8]
call fcn.100560b0
mov byte [esp + 0x1d0], 9
lea ecx, [esp + 0x68]
call fcn.1003ca30
mov byte [esp + 0x1d0], 6
lea ecx, [esp + 0xe0]
call fcn.100560b0
mov dword [esp + 0x1d0], 0xffffffff
lea ecx, [esp + 0x140]
call fcn.100560b0
mov ecx, dword [esp + 0x1c8]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 4