Function at 0x100d71c0
Capabilities:
Query or enumerate registry value

Disassembly:
push ebp
mov ebp, esp
sub esp, 0xb68
mov eax, dword [0x102519c8]
xor eax, ebp
mov dword [ebp - 4], eax
push ebx
mov ebx, dword [ebp + 8]
lea eax, [ebp - 0x20c]
push esi
mov esi, dword [ebp + 0xc]
push edi
push 0x208
push 0
push eax
mov dword [ebp - 0xae8], ecx
mov dword [ebp - 0xb30], ebx
mov dword [ebp - 0xb34], esi
call sub.msvcrt.dll_memset
push 0x208
lea eax, [ebp - 0x61c]
push 0
push eax
call sub.msvcrt.dll_memset
push 0x208
lea eax, [ebp - 0x414]
push 0
push eax
call sub.msvcrt.dll_memset
add esp, 0x24
call fcn.10002d70
mov ecx, eax
mov edx, dword [eax]
call dword [edx + 0xc]
push dword [ebp + 0x10]
lea ecx, [ebp - 0xb0c]
mov dword [ebp - 0xb0c], 0
push esi
lea edi, [eax + 0x10]
mov dword [ebp - 0xb08], 0
push ebx
mov dword [ebp - 0xaf0], edi
mov dword [ebp - 0xb04], 0xffffffff
call fcn.10058810
or ebx, 0xffffffff
test eax, eax
jne 0x100d7f79
xor ecx, ecx
mov eax, dword [ebp - 0xb04]
mov edx, dword [ebp - 0xb0c]
mov dword [ebp - 0xaec], ecx
mov dword [ebp - 0xae0], 0x104
cmp eax, 0xffffffff
je 0x100d7304
cmp ecx, eax
jb 0x100d7304
test edx, edx
je 0x100d7304
mov edi, ecx
sub edi, eax
call fcn.10003180
mov esi, dword [eax + 0x154]
test esi, esi
je 0x100d72bd
push esi
call dword [sym.imp.KERNEL32.dll_EnterCriticalSection]
push 0x3f
call fcn.10003680
add esp, 4
push 0
push 0
push 0
push 0
test eax, eax
je 0x100d72f0
lea ecx, [ebp - 0xae0]
push ecx
lea ecx, [ebp - 0x20c]
push ecx
mov ecx, dword [ebp - 0xb0c]
push edi
push ecx
call eax
jmp 0x100d742d
lea eax, [ebp - 0xae0]
push eax
lea eax, [ebp - 0x20c]
push eax
push edi
jmp 0x100d7420
cmp dword [ebp - 0xb08], 0
mov edi, 0x103
mov dword [ebp - 0xb04], 0xffffffff
je 0x100d73b1
call fcn.10003180
mov esi, dword [eax + 0x154]
test esi, esi
je 0x100d7336
push esi
call dword [sym.imp.KERNEL32.dll_EnterCriticalSection]
push 0x3f
call fcn.10003680
add esp, 4
push 0
push 0
push 0
push 0
test eax, eax
je 0x100d736b
lea ecx, [ebp - 0xae0]
push ecx
lea ecx, [ebp - 0x20c]
push ecx
push dword [ebp - 0xaec]
mov ecx, dword [ebp - 0xb08]
push ecx
call eax
jmp 0x100d738c
mov ecx, dword [ebp - 0xb08]
lea eax, [ebp - 0xae0]
push eax
lea eax, [ebp - 0x20c]
push eax
push dword [ebp - 0xaec]
push ecx
call dword [sym.imp.ADVAPI32.dll_RegEnumValueW]
mov edi, eax
test esi, esi
je 0x100d7399
push esi
call dword [sym.imp.KERNEL32.dll_LeaveCriticalSection]
cmp edi, 0x103
jne 0x100d743a
mov ecx, dword [ebp - 0xaec]
mov edx, dword [ebp - 0xb0c]
test edx, edx
je 0x100d743a
mov dword [ebp - 0xb04], ecx
mov dword [ebp - 0xae0], 0x104
call fcn.10003180
mov esi, dword [eax + 0x154]
test esi, esi
je 0x100d73df
push esi
call dword [sym.imp.KERNEL32.dll_EnterCriticalSection]
push 0x3f
call fcn.10003680
add esp, 4
push 0
push 0
push 0
push 0
test eax, eax
je 0x100d7410
lea ecx, [ebp - 0xae0]
push ecx
lea ecx, [ebp - 0x20c]
push ecx
mov ecx, dword [ebp - 0xb0c]
push 0
push ecx
call eax
jmp 0x100d742d
lea eax, [ebp - 0xae0]
push eax
lea eax, [ebp - 0x20c]
push eax
push 0
mov ecx, dword [ebp - 0xb0c]
push ecx
call dword [sym.imp.ADVAPI32.dll_RegEnumValueW]
mov edi, eax
test esi, esi
je 0x100d743a
push esi
call dword [sym.imp.KERNEL32.dll_LeaveCriticalSection]
test edi, edi
jne 0x100d7f73
cmp word [ebp - 0x20c], 0x7b
jne 0x100d7f51
mov esi, dword [ebp - 0xae8]
lea ecx, [ebp - 0x20c]
push ecx
lea eax, [esi + 0xbc]
mov ecx, eax
mov dword [ebp - 0xb58], eax
call fcn.100d2aa0
test eax, eax
lea eax, [ebp - 0x20c]
jne 0x100d7f57
push edi
push 0x10202940
push 0x10202940
push 0x10202940
push eax
push 0xa6
lea ecx, [esi + 0xd8]
mov dword [ebp - 0xafc], 2
call fcn.1005ccb0
lea ecx, [esi + 0xd8]
mov edi, eax
call fcn.1005ce20
test eax, eax
je 0x100d74ed
test edi, edi
je 0x100d7f51
cmp edi, 1
jne 0x100d74cf
mov dword [ebp - 0xafc], edi
jmp 0x100d74ed
cmp edi, 2
je 0x100d74e3
mov dword [ebp - 0xafc], 4
cmp edi, 3
jne 0x100d74ed
mov dword [ebp - 0xafc], 2
mov dword [ebp - 0xb28], 0
mov dword [ebp - 0xb24], 0
call fcn.10002d70
mov ecx, eax
mov edx, dword [eax]
call dword [edx + 0xc]
add eax, 0x10
mov dword [ebp - 0xb1c], eax
call fcn.10002d70
mov ecx, eax
mov edx, dword [eax]
call dword [edx + 0xc]
add eax, 0x10
mov dword [ebp - 0xb18], eax
call fcn.10002d70
mov ecx, eax
mov edx, dword [eax]
call dword [edx + 0xc]
add eax, 0x10
mov dword [ebp - 0xb14], eax
call fcn.10002d70
mov ecx, eax
mov edx, dword [eax]
call dword [edx + 0xc]
add eax, 0x10
mov dword [ebp - 0xb20], 2
lea ecx, [ebp - 0x20c]
mov dword [ebp - 0xb10], eax
lea edx, [ecx + 2]
jmp 0x100d7570
mov ax, word [ecx]
add ecx, 2
test ax, ax
jne 0x100d7570
sub ecx, edx
lea eax, [ebp - 0x20c]
sar ecx, 1
push ecx
push eax
lea ecx, [ebp - 0xb10]
call fcn.10003740
mov edi, esi
mov eax, dword [edi + 0x2f0]
sub eax, 0x10
push eax
call fcn.10002a60
add esp, 4
lea ecx, [ebp - 0xb14]
lea esi, [eax + 0x10]
lea eax, [ebp - 0xadc]
mov dword [ebp - 0xadc], esi
push eax
call fcn.10002790
add esi, 0xfffffff0
mov eax, ebx
lock xadd dword [esi + 0xc], eax
dec eax
test eax, eax
jg 0x100d75d8
mov ecx, dword [esi]
push esi
mov eax, dword [ecx]
call dword [eax + 4]
mov eax, dword [edi + 0x2ec]
sub eax, 0x10
push eax
call fcn.10002a60
add esp, 4
mov ecx, 0x10202940
lea edi, [eax + 0x10]
mov dword [ebp - 0xadc], edi
mov eax, edi
lea ebx, [ebx]
mov dx, word [eax]
cmp dx, word [ecx]
jne 0x100d7626
test dx, dx
je 0x100d7622
mov dx, word [eax + 2]
cmp dx, word [ecx + 2]
jne 0x100d7626
add eax, 4
add ecx, 4
test dx, dx
jne 0x100d7600
xor eax, eax
jmp 0x100d762b
sbb eax, eax
or eax, 1
test eax, eax
jne 0x100d76b9
call fcn.10002d70
mov ecx, eax
mov edx, dword [eax]
call dword [edx + 0xc]
add eax, 0x10
lea ecx, [ebp - 0xae4]
push 0x2807
mov dword [ebp - 0xae4], eax
call fcn.10023e80
test al, al
jne 0x100d7684
mov ecx, 0x2807
lea edx, [ecx + 2]
mov ax, word [ecx]
add ecx, 2
test ax, ax
jne 0x100d7664
sub ecx, edx
sar ecx, 1
push ecx
push 0x2807
lea ecx, [ebp - 0xae4]
call fcn.10003740
lea eax, [ebp - 0xae4]
push eax
lea ecx, [ebp - 0xadc]
call fcn.10002790
mov edx, dword [ebp - 0xae4]
mov eax, ebx
add edx, 0xfffffff0
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x100d76b3
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov edi, dword [ebp - 0xadc]
mov eax, dword [ebp - 0xb14]
mov ecx, 0x10202940
mov dx, word [eax]
cmp dx, word [ecx]
jne 0x100d76ea
test dx, dx
je 0x100d76e6
mov dx, word [eax + 2]
cmp dx, word [ecx + 2]
jne 0x100d76ea
add eax, 4
add ecx, 4
test dx, dx
jne 0x100d76c4
xor eax, eax
jmp 0x100d76ef
sbb eax, eax
or eax, 1
test eax, eax
jne 0x100d78b3
push 0x208
push eax
lea eax, [ebp - 0x61c]
push eax
call sub.msvcrt.dll_memset
lea eax, [ebp - 0x20c]
push eax
lea eax, [ebp - 0xaf0]
push str.CLSID_s
push eax
call fcn.10002cb0
push 0x20019
push 0x208
lea eax, [ebp - 0x61c]
mov dword [ebp - 0xae0], 0x208
push eax
push 1
push 0x10202940
push dword [ebp - 0xaf0]
push SysReAllocString
call fcn.10176900
add esp, 0x34
call fcn.10002d70
mov ecx, eax
mov edx, dword [eax]
call dword [edx + 0xc]
add eax, 0x10
lea ecx, [ebp - 0xaf4]
push 0x10202940
mov dword [ebp - 0xaf4], eax
call fcn.10023e80
test al, al
jne 0x100d7791
push 0
push 0x10202940
lea ecx, [ebp - 0xaf4]
call fcn.10003740
lea eax, [ebp - 0xaf4]
push eax
lea eax, [ebp - 0xb64]
push 0x9c5d
push eax
call fcn.100053d0
add esp, 0xc
lea ecx, [ebp - 0xb14]
push eax
call fcn.10002790
mov edx, dword [ebp - 0xb64]
mov eax, ebx
add edx, 0xfffffff0
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x100d77d5
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov edx, dword [ebp - 0xaf4]
mov eax, ebx
add edx, 0xfffffff0
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x100d77f2
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
lea ecx, [ebp - 0x20c]
lea edx, [ecx + 2]
jmp 0x100d7800
mov ax, word [ecx]
add ecx, 2
test ax, ax
jne 0x100d7800
mov esi, dword [ebp - 0xb14]
lea eax, [ebp - 0x20c]
mov ebx, eax
mov dword [ebp - 0xae4], eax
sub ecx, edx
sub ebx, esi
sar ecx, 1
mov eax, dword [esi - 0xc]
mov dword [ebp - 0xadc], eax
lea eax, [ebp - 0x20c]
push ecx
push eax
sar ebx, 1
call fcn.101e6fd0
mov ecx, dword [esi - 8]
mov edx, 1
sub edx, dword [esi - 4]
add esp, 8
mov dword [ebp - 0xb60], eax
add eax, dword [ebp - 0xadc]
sub ecx, eax
or ecx, edx
jge 0x100d786f
push eax
lea ecx, [ebp - 0xb14]
call fcn.10003310
mov esi, dword [ebp - 0xb14]
mov ecx, dword [ebp - 0xadc]
cmp ebx, ecx
ja 0x100d7882
lea eax, [esi + ebx*2]
mov dword [ebp - 0xae4], eax
mov ebx, dword [ebp - 0xb60]
lea eax, [ebx + ebx]
push eax
push dword [ebp - 0xae4]
push eax
lea eax, [esi + ecx*2]
push eax
call fcn.10004510
mov eax, dword [ebp - 0xadc]
xor ecx, ecx
add eax, ebx
add esp, 0x10
mov dword [esi - 0xc], eax
or ebx, 0xffffffff
mov word [esi + eax*2], cx
lea eax, [ebp - 0x20c]
push eax
lea eax, [ebp - 0xaf0]
push str.CLSID_sInprocServer32
push eax
call fcn.10002cb0
push 0x208
lea eax, [ebp - 0x414]
push 0
push eax
call sub.msvcrt.dll_memset
push 0x20019
push 0x208
lea eax, [ebp - 0x414]
mov dword [ebp - 0xae0], 0x208
push eax
push 1
push 0x10202940
push dword [ebp - 0xaf0]
push SysReAllocString
call fcn.10176900
lea ecx, [ebp - 0x414]
add esp, 0x34
lea edx, [ecx + 2]
lea esp, [esp]
mov ax, word [ecx]
add ecx, 2
test ax, ax
jne 0x100d7920
sub ecx, edx
lea eax, [ebp - 0x414]
sar ecx, 1
push ecx
push eax
lea ecx, [ebp - 0xb18]
call fcn.10003740
mov esi, dword [ebp - 0xb34]
test esi, esi
jne 0x100d7950
xor ecx, ecx
jmp 0x100d7964
mov ecx, esi
lea edx, [ecx + 2]
mov ax, word [ecx]
add ecx, 2
test ax, ax
jne 0x100d7955
sub ecx, edx
sar ecx, 1
push ecx
push esi
lea ecx, [ebp - 0xb1c]
call fcn.10003740
mov eax, dword [ebp - 0xb30]
push 0x20019
push 1
push ecx
mov dword [ebp - 0xb24], eax
mov esi, esp
mov dword [ebp - 0xb54], 0
mov dword [ebp - 0xb50], 0
mov dword [ebp - 0xb4c], 0
call fcn.10002d70
mov ecx, eax
mov edx, dword [eax]
call dword [edx + 0xc]
add eax, 0x10
mov ecx, esi
mov dword [esi], eax
lea eax, [ebp - 0x20c]
push eax
call fcn.10023e80
test al, al
jne 0x100d79ef
lea ecx, [ebp - 0x20c]
lea edx, [ecx + 2]
mov ax, word [ecx]
add ecx, 2
test ax, ax
jne 0x100d79d1
sub ecx, edx
lea eax, [ebp - 0x20c]
sar ecx, 1
push ecx
push eax
mov ecx, esi
call fcn.10003740
mov esi, dword [ebp - 0xb34]
push ecx
mov ecx, esp
push esi
call fcn.10002490
push dword [ebp - 0xb30]
lea eax, [ebp - 0xb54]
push eax
lea eax, [ebp - 0xb2c]
push eax
call fcn.100da240
add esp, 0x1c
mov dword [ebp - 0xb48], 0
lea eax, [ebp - 0xb18]
mov dword [ebp - 0xb44], 0
lea ecx, [ebp - 0xb48]
mov dword [ebp - 0xb40], 0
push eax
push 0
call fcn.100048e0
push dword [ebp - 0xb2c]
mov ecx, dword [ebp - 0xae8]
call fcn.100d06f0
test eax, eax
jne 0x100d7efc
push 0x208
push eax
lea eax, [ebp - 0x824]
push eax
call sub.msvcrt.dll_memset
push 0x208
lea eax, [ebp - 0xa2c]
push 0
push eax
call sub.msvcrt.dll_memset
push 0x104
lea eax, [ebp - 0x824]
push eax
push 0x104
lea eax, [ebp - 0xa2c]
push eax
lea eax, [ebp - 0x414]
push eax
call fcn.10057610
add esp, 0x2c
push 1
push 0
push ecx
mov esi, esp
call fcn.10002d70
mov ecx, eax
mov edx, dword [eax]
call dword [edx + 0xc]
add eax, 0x10
mov ecx, esi
push 0x10202940
mov dword [esi], eax
call fcn.10023e80
test al, al
jne 0x100d7ae7
push 0
push 0x10202940
mov ecx, esi
call fcn.10003740
push 1
push 0xffffffffffffffff
push 0xffffffffffffffff
push ecx
mov esi, esp
call fcn.10002d70
mov ecx, eax
mov edx, dword [eax]
call dword [edx + 0xc]
add eax, 0x10
mov ecx, esi
push 0x10202940
mov dword [esi], eax
call fcn.10023e80
test al, al
jne 0x100d7b1f
push 0
push 0x10202940
mov ecx, esi
call fcn.10003740
push ecx
mov esi, esp
call fcn.10002d70
mov ecx, eax
mov edx, dword [eax]
call dword [edx + 0xc]
add eax, 0x10
mov ecx, esi
push 0x10202940
mov dword [esi], eax
call fcn.10023e80
test al, al
jne 0x100d7b51
push 0
push 0x10202940
mov ecx, esi
call fcn.10003740
push ecx
mov esi, esp
call fcn.10002d70
mov ecx, eax
mov edx, dword [eax]
call dword [edx + 0xc]
add eax, 0x10
mov ecx, esi
push 0x10202940
mov dword [esi], eax
call fcn.10023e80
test al, al
jne 0x100d7b83
push 0
push 0x10202940
mov ecx, esi
call fcn.10003740
call fcn.10002d70
mov ecx, eax
mov edx, dword [eax]
call dword [edx + 0xc]
add eax, 0x10
lea ecx, [ebp - 0xaf8]
push 0x10202940
mov dword [ebp - 0xaf8], eax
call fcn.10023e80
test al, al
jne 0x100d7bbe
push 0
push 0x10202940
lea ecx, [ebp - 0xaf8]
call fcn.10003740
lea eax, [ebp - 0xaf8]
push eax
lea eax, [ebp - 0xb5c]
push 0x9c5e
push eax
call fcn.100053d0
add esp, 0xc
mov esi, dword [ebp - 0xae8]
mov ecx, dword [eax]
lea eax, [ebp - 0xb54]
push 0
push 0xffffffffffffffff
push dword [ebp - 0xafc]
push eax
lea eax, [ebp - 0xb48]
push eax
mov eax, dword [ebp - 0xb14]
push 0
push eax
push edi
push ecx
push eax
mov ecx, esi
call fcn.100cd930
mov edx, dword [ebp - 0xb5c]
mov dword [ebp - 0xb28], eax
add edx, 0xfffffff0
mov eax, ebx
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x100d7c2f
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov edx, dword [ebp - 0xaf8]
mov eax, ebx
add edx, 0xfffffff0
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x100d7c4c
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov eax, dword [esi + 0xd0]
lea ecx, [ebp - 0xb28]
push ecx
cmp dword [esi + 0xd4], eax
je 0x100d7c71
mov ecx, eax
call fcn.100d56d0
add dword [esi + 0xd0], 0x1c
jmp 0x100d7c7d
push eax
lea ecx, [esi + 0xcc]
call fcn.100d53f0
mov ecx, dword [ebp - 0xb58]
lea eax, [ebp - 0x20c]
push eax
call fcn.100d2a40
call fcn.10002d70
mov ecx, eax
mov edx, dword [eax]
call dword [edx + 0xc]
add eax, 0x10
mov ecx, 0x1025b480
mov dword [ebp - 0xadc], eax
lea eax, [ebp - 0x61c]
push 1
push eax
lea eax, [ebp - 0xb3c]
push eax
call fcn.10002ad0
mov ecx, esi
mov ebx, dword [eax]
lea eax, [ebp - 0x414]
push eax
lea eax, [ebp - 0xb38]
push eax
call fcn.100d7060
push 1
mov ecx, 0x1025b480
mov esi, dword [eax]
lea eax, [ebp - 0x414]
push eax
lea eax, [ebp - 0xb68]
push eax
call fcn.10002ad0
lea ecx, [ebp - 0xa2c]
push ecx
lea ecx, [ebp - 0x824]
push ecx
push ebx
push esi
push dword [eax]
lea eax, [ebp - 0x20c]
push eax
lea eax, [ebp - 0xadc]
push str.Type:O3Clsid:_sPath:_sMd5:_sPlgdes:_sComp:_sFiledes:_s
push eax
call fcn.10002cb0
mov edx, dword [ebp - 0xb68]
or ebx, 0xffffffff
add esp, 0x20
add edx, 0xfffffff0
mov eax, ebx
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x100d7d3e
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov edx, dword [ebp - 0xb38]
mov eax, ebx
add edx, 0xfffffff0
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x100d7d5b
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov edx, dword [ebp - 0xb3c]
mov eax, ebx
add edx, 0xfffffff0
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x100d7d78
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
xor eax, eax
mov dword [ebp - 0xa34], 0
push eax
push 0x10202940
lea ecx, [ebp - 0xa44]
mov dword [ebp - 0xa30], 7
mov word [ebp - 0xa44], ax
call fcn.100070c0
xor eax, eax
mov dword [ebp - 0xa4c], 0
push eax
push 0x10202940
lea ecx, [ebp - 0xa5c]
mov dword [ebp - 0xa48], 7
mov word [ebp - 0xa5c], ax
call fcn.100070c0
xor eax, eax
mov dword [ebp - 0xa64], 0
lea ecx, [ebp - 0x20c]
mov dword [ebp - 0xa60], 7
mov word [ebp - 0xa74], ax
lea edx, [ecx + 2]
lea ebx, [ebx]
mov ax, word [ecx]
add ecx, 2
test ax, ax
jne 0x100d7e00
sub ecx, edx
lea eax, [ebp - 0x20c]
sar ecx, 1
push ecx
push eax
lea ecx, [ebp - 0xa74]
call fcn.100070c0
mov esi, dword [ebp - 0xadc]
xor eax, eax
mov ecx, esi
mov dword [ebp - 0xa7c], 0
mov dword [ebp - 0xa78], 7
mov word [ebp - 0xa8c], ax
lea edx, [ecx + 2]
lea ebx, [ebx]
mov ax, word [ecx]
add ecx, 2
test ax, ax
jne 0x100d7e50
sub ecx, edx
sar ecx, 1
push ecx
push esi
lea ecx, [ebp - 0xa8c]
call fcn.100070c0
push 0
lea eax, [ebp - 0xa8c]
push eax
lea eax, [ebp - 0xa44]
push eax
lea eax, [ebp - 0xa5c]
push eax
lea ecx, [ebp - 0xad8]
call fcn.100a6630
mov ecx, dword [ebp - 0xae8]
push eax
lea eax, [ebp - 0xa74]
push eax
lea ecx, [ecx + 0x300]
call fcn.100d5920
mov ecx, eax
call fcn.100d5840
lea ecx, [ebp - 0xad8]
call fcn.10021420
lea ecx, [ebp - 0xa8c]
call fcn.10005250
lea ecx, [ebp - 0xa74]
call fcn.10005250
lea ecx, [ebp - 0xa5c]
call fcn.10005250
lea ecx, [ebp - 0xa44]
call fcn.10005250
add esi, 0xfffffff0
mov eax, ebx
lock xadd dword [esi + 0xc], eax
dec eax
test eax, eax
jg 0x100d7efc
mov ecx, dword [esi]
push esi
mov eax, dword [ecx]
call dword [eax + 4]
lea ecx, [ebp - 0xb48]
call fcn.1002a3c0
mov edx, dword [ebp - 0xb2c]
mov eax, ebx
add edx, 0xfffffff0
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x100d7f24
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
lea ecx, [ebp - 0xb54]
call fcn.1002a3c0
add edi, 0xfffffff0
mov eax, ebx
lock xadd dword [edi + 0xc], eax
dec eax
test eax, eax
jg 0x100d7f46
mov ecx, dword [edi]
push edi
mov eax, dword [ecx]
call dword [eax + 4]
lea ecx, [ebp - 0xb28]
call fcn.100d57d0
lea eax, [ebp - 0x20c]
push 0x208
push 0
push eax
call sub.msvcrt.dll_memset
mov ecx, dword [ebp - 0xaec]
add esp, 0xc
inc ecx
jmp 0x100d727a
mov edi, dword [ebp - 0xaf0]
lea ecx, [ebp - 0xb0c]
call fcn.10008220
add edi, 0xfffffff0
lock xadd dword [edi + 0xc], ebx
dec ebx
test ebx, ebx
jg 0x100d7f99
mov ecx, dword [edi]
push edi
mov eax, dword [ecx]
call dword [eax + 4]
mov ecx, dword [ebp - 4]
pop edi
pop esi
xor ecx, ebp
pop ebx
call fcn.101f99c6
mov esp, ebp
pop ebp
ret 0xc