Function at 0x1006e1a0
Capabilities:
Inspect section memory permissions

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x1009c988
mov eax, dword fs:[0]
push eax
sub esp, 0x34
mov eax, dword [0x100af00c]
xor eax, ebp
mov dword [ebp - 0x10], eax
push ebx
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
xor ebx, ebx
mov dword [ebp - 0x14], ebx
mov dword [ebp - 0x18], ebx
mov eax, dword [0x100f5480]
mov ecx, dword [0x100f50b8]
push 0x10095280
push 0xfffffffffffffffc
push dword [eax + 8]
call ecx
mov edi, dword [0x100f5418]
mov dword [0x100f5e2c], eax
mov dword [0x100f57b0], edi
mov eax, dword [edi]
mov dword [0x100f57b4], eax
test eax, eax
je 0x1006e314
xor esi, esi
nop dword [eax]
mov eax, dword [0x100f57b4]
mov ecx, dword [eax + esi*4]
test ecx, ecx
je 0x1006e23f
mov eax, dword [0x100f50b4]
lea edx, [ebp - 0x34]
push 0x1c
push edx
push ecx
call eax
test eax, eax
je 0x1006e23f
mov eax, dword [ebp - 0x20]
test al, 1
jne 0x1006e23f
test eax, 0x100
jne 0x1006e23f
inc esi
jmp 0x1006e210
mov dword [0x100f57bc], esi
test esi, esi
je 0x1006e314
lea edx, [esi + 1]
lea ecx, [ebp - 0x14]
call fcn.10033250
cmp eax, 0x100f57b8
je 0x1006e2a5
mov ecx, dword [eax]
mov dword [eax], ebx
mov eax, dword [0x100f57b8]
mov dword [0x100f57b8], ecx
test eax, eax
je 0x1006e2a5
push 0x1001eab0
lea esi, [eax - 4]
mov dword [ebp - 4], 0
push dword [esi]
push 4
push eax
call fcn.10095790
mov eax, dword [esi]
lea eax, [eax*4 + 4]
push eax
push esi
call fcn.10095752
add esp, 8
mov dword [ebp - 4], 0xffffffff
mov eax, dword [ebp - 0x14]
test eax, eax
je 0x1006e2df
push 0x1001eab0
lea esi, [eax - 4]
mov dword [ebp - 4], 1
push dword [esi]
push 4
push eax
call fcn.10095790
mov eax, dword [esi]
lea eax, [eax*4 + 4]
push eax
push esi
call fcn.10095752
add esp, 8
mov dword [ebp - 4], 0xffffffff
mov esi, dword [0x100f57b8]
test esi, esi
je 0x1006e314
mov eax, dword [0x100f57bc]
lea eax, [eax*4 + 4]
push eax
mov eax, dword [0x100f57b4]
add eax, 0xfffffffc
push eax
push esi
call sub.VCRUNTIME140.dll_memcpy
add esp, 0xc
add esi, 4
mov dword [edi], esi
mov byte [0x100f57c0], 1
xor eax, eax
cmp byte [0x100f57c0], al
setne al
add eax, 0x29
cmp dword [0x100f57b4], 0
je 0x1006e366
mov ecx, dword [0x100f57b8]
test ecx, ecx
je 0x1006e366
cmp eax, dword [0x100f57bc]
ja 0x1006e366
mov dword [ecx + eax*4], 0x1007e8c0
mov eax, dword [0x100f57b4]
mov ebx, dword [eax + 0xa4]
neg ebx
sbb ebx, ebx
add ebx, 2
test bl, 2
je 0x1006e35e
and ebx, 0xfffffffd
test bl, 1
je 0x1006e366
and ebx, 0xfffffffe
mov edi, dword [0x100f5400]
mov dword [0x100f57d8], edi
mov edx, dword [edi]
mov dword [0x100f57dc], edx
test edx, edx
je 0x1006e499
xor esi, esi
mov ecx, dword [edx + esi*4]
test ecx, ecx
je 0x1006e3ba
mov eax, dword [0x100f50b4]
lea edx, [ebp - 0x34]
push 0x1c
push edx
push ecx
call eax
test eax, eax
je 0x1006e3b4
mov eax, dword [ebp - 0x20]
test al, 1
jne 0x1006e3b4
test eax, 0x100
jne 0x1006e3b4
mov edx, dword [0x100f57dc]
inc esi
jmp 0x1006e384
mov edx, dword [0x100f57dc]
mov dword [0x100f57e4], esi
test esi, esi
je 0x1006e499
lea edx, [esi + 1]
lea ecx, [ebp - 0x14]
call fcn.10033250
cmp eax, 0x100f57e0
je 0x1006e424
mov ecx, dword [eax]
mov dword [eax], 0
mov eax, dword [0x100f57e0]
mov dword [0x100f57e0], ecx
test eax, eax
je 0x1006e424
push 0x1001eab0
lea esi, [eax - 4]
mov dword [ebp - 4], 2
push dword [esi]
push 4
push eax
call fcn.10095790
mov eax, dword [esi]
lea eax, [eax*4 + 4]
push eax
push esi
call fcn.10095752
add esp, 8
mov dword [ebp - 4], 0xffffffff
mov eax, dword [ebp - 0x14]
test eax, eax
je 0x1006e45e
push 0x1001eab0
lea esi, [eax - 4]
mov dword [ebp - 4], 3
push dword [esi]
push 4
push eax
call fcn.10095790
mov eax, dword [esi]
lea eax, [eax*4 + 4]
push eax
push esi
call fcn.10095752
add esp, 8
mov dword [ebp - 4], 0xffffffff
mov esi, dword [0x100f57e0]
test esi, esi
je 0x1006e493
mov eax, dword [0x100f57e4]
lea eax, [eax*4 + 4]
push eax
mov eax, dword [0x100f57dc]
add eax, 0xfffffffc
push eax
push esi
call sub.VCRUNTIME140.dll_memcpy
add esp, 0xc
add esi, 4
mov dword [edi], esi
mov byte [0x100f57e8], 1
mov edx, dword [0x100f57dc]
xor eax, eax
cmp byte [0x100f57e8], al
setne al
add eax, 5
test edx, edx
je 0x1006e4ef
mov ecx, dword [0x100f57e0]
test ecx, ecx
je 0x1006e4ef
cmp eax, dword [0x100f57e4]
ja 0x1006e4ef
mov dword [ecx + eax*4], 0x10076750
xor ecx, ecx
mov edx, dword [0x100f57dc]
cmp dword [edx + 0x14], ecx
sete cl
lea ecx, [ecx*4 + 4]
or ecx, ebx
mov ebx, ecx
mov eax, ecx
and ebx, 0xfffffff7
and al, 8
cmove ebx, ecx
test bl, 4
je 0x1006e4ef
and ebx, 0xfffffffb
xor eax, eax
mov esi, 0x20
cmp byte [0x100f57e8], al
setne al
add eax, 6
test edx, edx
je 0x1006e547
mov ecx, dword [0x100f57e0]
test ecx, ecx
je 0x1006e547
cmp eax, dword [0x100f57e4]
ja 0x1006e547
mov dword [ecx + eax*4], 0x10076800
mov ecx, 0x10
mov edx, dword [0x100f57dc]
cmp dword [edx + 0x18], 0
cmove ecx, esi
or ecx, ebx
mov ebx, ecx
mov eax, ecx
and ebx, 0xffffffdf
and al, 0x20
cmove ebx, ecx
test bl, 0x10
je 0x1006e547
and ebx, 0xffffffef
xor eax, eax
mov esi, 0x80
cmp byte [0x100f57e8], al
setne al
add eax, 7
test edx, edx
je 0x1006e5a2
mov ecx, dword [0x100f57e0]
test ecx, ecx
je 0x1006e5a2
cmp eax, dword [0x100f57e4]
ja 0x1006e5a2
mov dword [ecx + eax*4], 0x10076820
mov ecx, 0x40
mov edx, dword [0x100f57dc]
cmp dword [edx + 0x1c], 0
cmove ecx, esi
or ecx, ebx
mov ebx, ecx
mov eax, ecx
and ebx, 0xffffff7f
and al, 0x80
cmove ebx, ecx
test bl, 0x40
je 0x1006e5a2
and ebx, 0xffffffbf
xor eax, eax
mov esi, 0x200
cmp byte [0x100f57e8], al
setne al
add eax, 0x24
test edx, edx
je 0x1006e605
mov ecx, dword [0x100f57e0]
test ecx, ecx
je 0x1006e605
cmp eax, dword [0x100f57e4]
ja 0x1006e605
mov dword [ecx + eax*4], 0x10076890
mov ecx, pe_nt_image_headers32
mov eax, dword [0x100f57dc]
cmp dword [eax + 0x90], 0
cmove ecx, esi
or ecx, ebx
mov ebx, ecx
mov eax, ecx
and ebx, 0xfffffdff
and eax, esi
cmove ebx, ecx
test ebx, 0x100
je 0x1006e605
and ebx, 0xfffffeff
mov edi, dword [0x100f5408]
mov dword [0x100f5800], edi
mov edx, dword [edi]
mov dword [0x100f5804], edx
test edx, edx
je 0x1006e738
xor esi, esi
mov ecx, dword [edx + esi*4]
test ecx, ecx
je 0x1006e659
mov eax, dword [0x100f50b4]
lea edx, [ebp - 0x34]
push 0x1c
push edx
push ecx
call eax
test eax, eax
je 0x1006e653
mov eax, dword [ebp - 0x20]
test al, 1
jne 0x1006e653
test eax, 0x100
jne 0x1006e653
mov edx, dword [0x100f5804]
inc esi
jmp 0x1006e623
mov edx, dword [0x100f5804]
mov dword [0x100f580c], esi
test esi, esi
je 0x1006e738
lea edx, [esi + 1]
lea ecx, [ebp - 0x14]
call fcn.10033250
cmp eax, 0x100f5808
je 0x1006e6c3
mov ecx, dword [eax]
mov dword [eax], 0
mov eax, dword [0x100f5808]
mov dword [0x100f5808], ecx
test eax, eax
je 0x1006e6c3
push 0x1001eab0
lea esi, [eax - 4]
mov dword [ebp - 4], 4
push dword [esi]
push 4
push eax
call fcn.10095790
mov eax, dword [esi]
lea eax, [eax*4 + 4]
push eax
push esi
call fcn.10095752
add esp, 8
mov dword [ebp - 4], 0xffffffff
mov eax, dword [ebp - 0x14]
test eax, eax
je 0x1006e6fd
push 0x1001eab0
lea esi, [eax - 4]
mov dword [ebp - 4], 5
push dword [esi]
push 4
push eax
call fcn.10095790
mov eax, dword [esi]
lea eax, [eax*4 + 4]
push eax
push esi
call fcn.10095752
add esp, 8
mov dword [ebp - 4], 0xffffffff
mov esi, dword [0x100f5808]
test esi, esi
je 0x1006e732
mov eax, dword [0x100f580c]
lea eax, [eax*4 + 4]
push eax
mov eax, dword [0x100f5804]
add eax, 0xfffffffc
push eax
push esi
call sub.VCRUNTIME140.dll_memcpy
add esp, 0xc
add esi, 4
mov dword [edi], esi
mov byte [0x100f5810], 1
mov edx, dword [0x100f5804]
xor eax, eax
mov esi, 0x800
cmp byte [0x100f5810], al
setne al
add eax, 0x1b
test edx, edx
je 0x1006e799
mov ecx, dword [0x100f5808]
test ecx, ecx
je 0x1006e799
cmp eax, dword [0x100f580c]
ja 0x1006e799
mov dword [ecx + eax*4], 0x10075230
mov ecx, 0x400
mov edx, dword [0x100f5804]
cmp dword [edx + 0x6c], 0
cmove ecx, esi
or ecx, ebx
mov ebx, ecx
mov eax, ecx
and ebx, 0xfffff7ff
and eax, esi
cmove ebx, ecx
test ebx, 0x400
je 0x1006e799
and ebx, 0xfffffbff
xor eax, eax
mov esi, 0x2000
cmp byte [0x100f5810], al
setne al
add eax, 0x5d
test edx, edx
je 0x1006e7fd
mov ecx, dword [0x100f5808]
test ecx, ecx
je 0x1006e7fd
cmp eax, dword [0x100f580c]
ja 0x1006e7fd
mov dword [ecx + eax*4], 0x10075370
mov ecx, 0x1000
mov edx, dword [0x100f5804]
cmp dword [edx + 0x174], 0
cmove ecx, esi
or ecx, ebx
mov ebx, ecx
mov eax, ecx
and ebx, 0xffffdfff
and eax, esi
cmove ebx, ecx
test ebx, 0x1000
je 0x1006e7fd
and ebx, 0xffffefff
xor eax, eax
mov esi, 0x8000
cmp byte [0x100f5810], al
setne al
add eax, 0x5a
test edx, edx
je 0x1006e860
mov ecx, dword [0x100f5808]
test ecx, ecx
je 0x1006e860
cmp eax, dword [0x100f580c]
ja 0x1006e860
mov dword [ecx + eax*4], 0x10075580
mov ecx, 0x4000
mov eax, dword [0x100f5804]
cmp dword [eax + 0x168], 0
cmove ecx, esi
or ecx, ebx
mov ebx, ecx
mov eax, ecx
and ebx, 0xffff7fff
and eax, esi
cmove ebx, ecx
test ebx, 0x4000
je 0x1006e860
and ebx, 0xffffbfff
mov edi, dword [0x100f5460]
mov dword [0x100f5814], edi
mov ecx, dword [edi]
mov dword [0x100f5818], ecx
test ecx, ecx
je 0x1006e989
xor esi, esi
nop
mov ecx, dword [ecx + esi*4]
test ecx, ecx
je 0x1006e8b0
mov eax, dword [0x100f50b4]
lea edx, [ebp - 0x34]
push 0x1c
push edx
push ecx
call eax
test eax, eax
je 0x1006e8b0
mov eax, dword [ebp - 0x20]
test al, 1
jne 0x1006e8b0
test eax, 0x100
jne 0x1006e8b0
mov ecx, dword [0x100f5818]
inc esi
jmp 0x1006e880
mov dword [0x100f5820], esi
test esi, esi
je 0x1006e989
lea edx, [esi + 1]
lea ecx, [ebp - 0x14]
call fcn.10033250
cmp eax, 0x100f581c
je 0x1006e91a
mov ecx, dword [eax]
mov dword [eax], 0
mov eax, dword [0x100f581c]
mov dword [0x100f581c], ecx
test eax, eax
je 0x1006e91a
push 0x1001eab0
lea esi, [eax - 4]
mov dword [ebp - 4], 6
push dword [esi]
push 4
push eax
call fcn.10095790
mov eax, dword [esi]
lea eax, [eax*4 + 4]
push eax
push esi
call fcn.10095752
add esp, 8
mov dword [ebp - 4], 0xffffffff
mov eax, dword [ebp - 0x14]
test eax, eax
je 0x1006e954
push 0x1001eab0
lea esi, [eax - 4]
mov dword [ebp - 4], 7
push dword [esi]
push 4
push eax
call fcn.10095790
mov eax, dword [esi]
lea eax, [eax*4 + 4]
push eax
push esi
call fcn.10095752
add esp, 8
mov dword [ebp - 4], 0xffffffff
mov esi, dword [0x100f581c]
test esi, esi
je 0x1006e989
mov eax, dword [0x100f5820]
lea eax, [eax*4 + 4]
push eax
mov eax, dword [0x100f5818]
add eax, 0xfffffffc
push eax
push esi
call sub.VCRUNTIME140.dll_memcpy
add esp, 0xc
add esi, 4
mov dword [edi], esi
mov byte [0x100f5824], 1
mov edi, dword [0x100f5420]
mov dword [0x100f5828], edi
mov eax, dword [edi]
mov dword [0x100f582c], eax
test eax, eax
je 0x1006eaae
xor esi, esi
mov eax, dword [0x100f582c]
mov ecx, dword [eax + esi*4]
test ecx, ecx
je 0x1006e9d5
mov eax, dword [0x100f50b4]
lea edx, [ebp - 0x34]
push 0x1c
push edx
push ecx
call eax
test eax, eax
je 0x1006e9d5
mov eax, dword [ebp - 0x20]
test al, 1
jne 0x1006e9d5
test eax, 0x100
jne 0x1006e9d5
inc esi
jmp 0x1006e9a6
mov dword [0x100f5834], esi
test esi, esi
je 0x1006eaae
lea edx, [esi + 1]
lea ecx, [ebp - 0x14]
call fcn.10033250
cmp eax, 0x100f5830
je 0x1006ea3f
mov ecx, dword [eax]
mov dword [eax], 0
mov eax, dword [0x100f5830]
mov dword [0x100f5830], ecx
test eax, eax
je 0x1006ea3f
push 0x1001eab0
lea esi, [eax - 4]
mov dword [ebp - 4], 8
push dword [esi]
push 4
push eax
call fcn.10095790
mov eax, dword [esi]
lea eax, [eax*4 + 4]
push eax
push esi
call fcn.10095752
add esp, 8
mov dword [ebp - 4], 0xffffffff
mov eax, dword [ebp - 0x14]
test eax, eax
je 0x1006ea79
push 0x1001eab0
lea esi, [eax - 4]
mov dword [ebp - 4], 9
push dword [esi]
push 4
push eax
call fcn.10095790
mov eax, dword [esi]
lea eax, [eax*4 + 4]
push eax
push esi
call fcn.10095752
add esp, 8
mov dword [ebp - 4], 0xffffffff
mov esi, dword [0x100f5830]
test esi, esi
je 0x1006eaae
mov eax, dword [0x100f5834]
lea eax, [eax*4 + 4]
push eax
mov eax, dword [0x100f582c]
add eax, 0xfffffffc
push eax
push esi
call sub.VCRUNTIME140.dll_memcpy
add esp, 0xc
add esi, 4
mov dword [edi], esi
mov byte [0x100f5838], 1
xor eax, eax
mov edx, 0x20000
cmp byte [0x100f5838], al
setne al
add eax, 0xe
cmp dword [0x100f582c], 0
je 0x1006eb13
mov ecx, dword [0x100f5830]
test ecx, ecx
je 0x1006eb13
cmp eax, dword [0x100f5834]
ja 0x1006eb13
mov dword [ecx + eax*4], 0x10086260
mov ecx, 0x10000
mov eax, dword [0x100f582c]
cmp dword [eax + 0x38], 0
cmove ecx, edx
or ecx, ebx
mov ebx, ecx
mov eax, ecx
and ebx, 0xfffdffff
and eax, edx
cmove ebx, ecx
test ebx, 0x10000
je 0x1006eb13
and ebx, 0xfffeffff
xor eax, eax
mov edx, 0x80000
cmp byte [0x100f5838], al
setne al
add eax, 0x13
cmp dword [0x100f582c], 0
je 0x1006eb78
mov ecx, dword [0x100f5830]
test ecx, ecx
je 0x1006eb78
cmp eax, dword [0x100f5834]
ja 0x1006eb78
mov dword [ecx + eax*4], 0x10086580
mov ecx, 0x40000
mov eax, dword [0x100f582c]
cmp dword [eax + 0x4c], 0
cmove ecx, edx
or ecx, ebx
mov ebx, ecx
mov eax, ecx
and ebx, 0xfff7ffff
and eax, edx
cmove ebx, ecx
test ebx, 0x40000
je 0x1006eb78
and ebx, 0xfffbffff
mov edi, dword [0x100f5464]
mov dword [0x100f57c4], edi
mov edx, dword [edi]
mov dword [0x100f57c8], edx
test edx, edx
je 0x1006ecab
xor esi, esi
mov ecx, dword [edx + esi*4]
test ecx, ecx
je 0x1006ebcc
mov eax, dword [0x100f50b4]
lea edx, [ebp - 0x34]
push 0x1c
push edx
push ecx
call eax
test eax, eax
je 0x1006ebc6
mov eax, dword [ebp - 0x20]
test al, 1
jne 0x1006ebc6
test eax, 0x100
jne 0x1006ebc6
mov edx, dword [0x100f57c8]
inc esi
jmp 0x1006eb96
mov edx, dword [0x100f57c8]
mov dword [0x100f57d0], esi
test esi, esi
je 0x1006ecab
lea edx, [esi + 1]
lea ecx, [ebp - 0x14]
call fcn.10033250
cmp eax, 0x100f57cc
je 0x1006ec36
mov ecx, dword [eax]
mov dword [eax], 0
mov eax, dword [0x100f57cc]
mov dword [0x100f57cc], ecx
test eax, eax
je 0x1006ec36
push 0x1001eab0
lea esi, [eax - 4]
mov dword [ebp - 4], 0xa
push dword [esi]
push 4
push eax
call fcn.10095790
mov eax, dword [esi]
lea eax, [eax*4 + 4]
push eax
push esi
call fcn.10095752
add esp, 8
mov dword [ebp - 4], 0xffffffff
mov eax, dword [ebp - 0x14]
test eax, eax
je 0x1006ec70
push 0x1001eab0
lea esi, [eax - 4]
mov dword [ebp - 4], 0xb
push dword [esi]
push 4
push eax
call fcn.10095790
mov eax, dword [esi]
lea eax, [eax*4 + 4]
push eax
push esi
call fcn.10095752
add esp, 8
mov dword [ebp - 4], 0xffffffff
mov esi, dword [0x100f57cc]
test esi, esi
je 0x1006eca5
mov eax, dword [0x100f57d0]
lea eax, [eax*4 + 4]
push eax
mov eax, dword [0x100f57c8]
add eax, 0xfffffffc
push eax
push esi
call sub.VCRUNTIME140.dll_memcpy
add esp, 0xc
add esi, 4
mov dword [edi], esi
mov byte [0x100f57d4], 1
mov edx, dword [0x100f57c8]
xor eax, eax
mov esi, 0x200000
cmp byte [0x100f57d4], al
setne al
add eax, 0x10
test edx, edx
je 0x1006ed0c
mov ecx, dword [0x100f57cc]
test ecx, ecx
je 0x1006ed0c
cmp eax, dword [0x100f57d0]
ja 0x1006ed0c
mov dword [ecx + eax*4], 0x1007e560
mov ecx, 0x100000
mov edx, dword [0x100f57c8]
cmp dword [edx + 0x40], 0
cmove ecx, esi
or ecx, ebx
mov ebx, ecx
mov eax, ecx
and ebx, 0xffdfffff
and eax, esi
cmove ebx, ecx
test ebx, 0x100000
je 0x1006ed0c
and ebx, 0xffefffff
xor eax, eax
mov esi, 0x800000
cmp byte [0x100f57d4], al
setne al
add eax, 0x11
test edx, edx
je 0x1006ed6d
mov ecx, dword [0x100f57cc]
test ecx, ecx
je 0x1006ed6d
cmp eax, dword [0x100f57d0]
ja 0x1006ed6d
mov dword [ecx + eax*4], 0x1007e570
mov ecx, 0x400000
mov edx, dword [0x100f57c8]
cmp dword [edx + 0x44], 0
cmove ecx, esi
or ecx, ebx
mov ebx, ecx
mov eax, ecx
and ebx, 0xff7fffff
and eax, esi
cmove ebx, ecx
test ebx, 0x400000
je 0x1006ed6d
and ebx, 0xffbfffff
xor eax, eax
mov esi, 0x2000000
cmp byte [0x100f57d4], al
setne al
add eax, 0x12
test edx, edx
je 0x1006edce
mov ecx, dword [0x100f57cc]
test ecx, ecx
je 0x1006edce
cmp eax, dword [0x100f57d0]
ja 0x1006edce
mov dword [ecx + eax*4], 0x1007e5a0
mov ecx, 0x1000000
mov edx, dword [0x100f57c8]
cmp dword [edx + 0x48], 0
cmove ecx, esi
or ecx, ebx
mov ebx, ecx
mov eax, ecx
and ebx, 0xfdffffff
and eax, esi
cmove ebx, ecx
test ebx, 0x1000000
je 0x1006edce
and ebx, 0xfeffffff
xor eax, eax
mov esi, 0x8000000
cmp byte [0x100f57d4], al
setne al
add eax, 0x18
test edx, edx
je 0x1006ee2f
mov ecx, dword [0x100f57cc]
test ecx, ecx
je 0x1006ee2f
cmp eax, dword [0x100f57d0]
ja 0x1006ee2f
mov dword [ecx + eax*4], 0x1007e6a0
mov ecx, 0x4000000
mov edx, dword [0x100f57c8]
cmp dword [edx + 0x60], 0
cmove ecx, esi
or ecx, ebx
mov ebx, ecx
mov eax, ecx
and ebx, 0xf7ffffff
and eax, esi
cmove ebx, ecx
test ebx, 0x4000000
je 0x1006ee2f
and ebx, 0xfbffffff
xor eax, eax
mov esi, 0x20000000
cmp byte [0x100f57d4], al
setne al
add eax, 0x2c
test edx, edx
je 0x1006ee92
mov ecx, dword [0x100f57cc]
test ecx, ecx
je 0x1006ee92
cmp eax, dword [0x100f57d0]
ja 0x1006ee92
mov dword [ecx + eax*4], 0x1007e890
mov ecx, 0x10000000
mov eax, dword [0x100f57c8]
cmp dword [eax + 0xb0], 0
cmove ecx, esi
or ecx, ebx
mov ebx, ecx
mov eax, ecx
and ebx, 0xdfffffff
and eax, esi
cmove ebx, ecx
test ebx, 0x10000000
je 0x1006ee92
and ebx, 0xefffffff
mov edi, dword [0x100f5414]
mov dword [0x100f583c], edi
mov eax, dword [edi]
mov dword [0x100f5840], eax
test eax, eax
je 0x1006efb8
xor esi, esi
nop
mov eax, dword [0x100f5840]
mov ecx, dword [eax + esi*4]
test ecx, ecx
je 0x1006eedf
mov eax, dword [0x100f50b4]
lea edx, [ebp - 0x34]
push 0x1c
push edx
push ecx
call eax
test eax, eax
je 0x1006eedf
mov eax, dword [ebp - 0x20]
test al, 1
jne 0x1006eedf
test eax, 0x100
jne 0x1006eedf
inc esi
jmp 0x1006eeb0
mov dword [0x100f5848], esi
test esi, esi
je 0x1006efb8
lea edx, [esi + 1]
lea ecx, [ebp - 0x14]
call fcn.10033250
cmp eax, 0x100f5844
je 0x1006ef49
mov ecx, dword [eax]
mov dword [eax], 0
mov eax, dword [0x100f5844]
mov dword [0x100f5844], ecx
test eax, eax
je 0x1006ef49
push 0x1001eab0
lea esi, [eax - 4]
mov dword [ebp - 4], 0xc
push dword [esi]
push 4
push eax
call fcn.10095790
mov eax, dword [esi]
lea eax, [eax*4 + 4]
push eax
push esi
call fcn.10095752
add esp, 8
mov dword [ebp - 4], 0xffffffff
mov eax, dword [ebp - 0x14]
test eax, eax
je 0x1006ef83
push 0x1001eab0
lea esi, [eax - 4]
mov dword [ebp - 4], 0xd
push dword [esi]
push 4
push eax
call fcn.10095790
mov eax, dword [esi]
lea eax, [eax*4 + 4]
push eax
push esi
call fcn.10095752
add esp, 8
mov dword [ebp - 4], 0xffffffff
mov esi, dword [0x100f5844]
test esi, esi
je 0x1006efb8
mov eax, dword [0x100f5848]
lea eax, [eax*4 + 4]
push eax
mov eax, dword [0x100f5840]
add eax, 0xfffffffc
push eax
push esi
call sub.VCRUNTIME140.dll_memcpy
add esp, 0xc
add esi, 4
mov dword [edi], esi
mov byte [0x100f584c], 1
mov edx, dword [0x100f5840]
xor eax, eax
cmp byte [0x100f584c], al
mov ecx, edx
setne al
add eax, 0x43
test edx, edx
je 0x1006f00a
mov esi, dword [0x100f5844]
test esi, esi
je 0x1006f00a
cmp eax, dword [0x100f5848]
ja 0x1006f00a
mov dword [esi + eax*4], 0x1007aa90
mov edx, 0x80000000
mov ecx, dword [0x100f5840]
mov eax, 0x40000000
cmp dword [ecx + 0x10c], 0
cmove eax, edx
or eax, ebx
cmovl ecx, ecx
xor eax, eax
cmp byte [0x100f584c], al
setne al
add eax, 0x52
test ecx, ecx
je 0x1006f059
mov ecx, dword [0x100f5844]
test ecx, ecx
je 0x1006f059
cmp eax, dword [0x100f5848]
ja 0x1006f059
mov dword [ecx + eax*4], 0x1007aae0
mov eax, dword [0x100f5840]
mov ebx, dword [eax + 0x148]
neg ebx
sbb ebx, ebx
add ebx, 2
test bl, 2
je 0x1006f04f
and ebx, 0xfffffffd
test bl, 1
je 0x1006f05c
and ebx, 0xfffffffe
jmp 0x1006f05c
mov ebx, dword [ebp - 0x18]
xor eax, eax
cmp byte [0x100f584c], al
setne al
add eax, 0x74
cmp dword [0x100f5840], 0
je 0x1006f0b9
mov ecx, dword [0x100f5844]
test ecx, ecx
je 0x1006f0b9
cmp eax, dword [0x100f5848]
ja 0x1006f0b9
mov dword [ecx + eax*4], 0x1007ab70
xor ecx, ecx
mov eax, dword [0x100f5840]
cmp dword [eax + 0x1d0], ecx
sete cl
lea ecx, [ecx*4 + 4]
or ecx, ebx
mov ebx, ecx
mov eax, ecx
and ebx, 0xfffffff7
and al, 8
cmove ebx, ecx
test bl, 4
je 0x1006f0b9
and ebx, 0xfffffffb
mov edi, dword [0x100f5434]
mov dword [0x100f588c], edi
mov eax, dword [edi]
mov dword [0x100f5890], eax
test eax, eax
je 0x1006f1de
xor esi, esi
mov eax, dword [0x100f5890]
mov ecx, dword [eax + esi*4]
test ecx, ecx
je 0x1006f105
mov eax, dword [0x100f50b4]
lea edx, [ebp - 0x34]
push 0x1c
push edx
push ecx
call eax
test eax, eax
je 0x1006f105
mov eax, dword [ebp - 0x20]
test al, 1
jne 0x1006f105
test eax, 0x100
jne 0x1006f105
inc esi
jmp 0x1006f0d6
mov dword [0x100f5898], esi
test esi, esi
je 0x1006f1de
lea edx, [esi + 1]
lea ecx, [ebp - 0x14]
call fcn.10033250
cmp eax, 0x100f5894
je 0x1006f16f
mov ecx, dword [eax]
mov dword [eax], 0
mov eax, dword [0x100f5894]
mov dword [0x100f5894], ecx
test eax, eax
je 0x1006f16f
push 0x1001eab0
lea esi, [eax - 4]
mov dword [ebp - 4], 0xe
push dword [esi]
push 4
push eax
call fcn.10095790
mov eax, dword [esi]
lea eax, [eax*4 + 4]
push eax
push esi
call fcn.10095752
add esp, 8
mov dword [ebp - 4], 0xffffffff
mov eax, dword [ebp - 0x14]
test eax, eax
je 0x1006f1a9
push 0x1001eab0
lea esi, [eax - 4]
mov dword [ebp - 4], 0xf
push dword [esi]
push 4
push eax
call fcn.10095790
mov eax, dword [esi]
lea eax, [eax*4 + 4]
push eax
push esi
call fcn.10095752
add esp, 8
mov dword [ebp - 4], 0xffffffff
mov esi, dword [0x100f5894]
test esi, esi
je 0x1006f1de
mov eax, dword [0x100f5898]
lea eax, [eax*4 + 4]
push eax
mov eax, dword [0x100f5890]
add eax, 0xfffffffc
push eax
push esi
call sub.VCRUNTIME140.dll_memcpy
add esp, 0xc
add esi, 4
mov dword [edi], esi
mov byte [0x100f589c], 1
xor eax, eax
cmp byte [0x100f589c], al
setne al
add eax, 0x15
cmp dword [0x100f5890], 0
je 0x1006f23a
mov ecx, dword [0x100f5894]
test ecx, ecx
je 0x1006f23a
cmp eax, dword [0x100f5898]
ja 0x1006f23a
mov dword [ecx + eax*4], 0x10068bb0
mov ecx, 0x10
mov eax, dword [0x100f5890]
cmp dword [eax + 0x54], 0
mov eax, 0x20
cmove ecx, eax
or ecx, ebx
mov ebx, ecx
mov eax, ecx
and ebx, 0xffffffdf
and al, 0x20
cmove ebx, ecx
test bl, 0x10
je 0x1006f23a
and ebx, 0xffffffef
mov edi, dword [0x100f542c]
mov dword [0x100f5878], edi
mov eax, dword [edi]
mov dword [0x100f587c], eax
test eax, eax
je 0x1006f368
xor esi, esi
nop word [eax + eax]
mov eax, dword [0x100f587c]
mov ecx, dword [eax + esi*4]
test ecx, ecx
je 0x1006f28f
mov eax, dword [0x100f50b4]
lea edx, [ebp - 0x34]
push 0x1c
push edx
push ecx
call eax
test eax, eax
je 0x1006f28f
mov eax, dword [ebp - 0x20]
test al, 1
jne 0x1006f28f
test eax, 0x100
jne 0x1006f28f
inc esi
jmp 0x1006f260
mov dword [0x100f5884], esi
test esi, esi
je 0x1006f368
lea edx, [esi + 1]
lea ecx, [ebp - 0x14]
call fcn.10033250
cmp eax, 0x100f5880
je 0x1006f2f9
mov ecx, dword [eax]
mov dword [eax], 0
mov eax, dword [0x100f5880]
mov dword [0x100f5880], ecx
test eax, eax
je 0x1006f2f9
push 0x1001eab0
lea esi, [eax - 4]
mov dword [ebp - 4], 0x10
push dword [esi]
push 4
push eax
call fcn.10095790
mov eax, dword [esi]
lea eax, [eax*4 + 4]
push eax
push esi
call fcn.10095752
add esp, 8
mov dword [ebp - 4], 0xffffffff
mov eax, dword [ebp - 0x14]
test eax, eax
je 0x1006f333
push 0x1001eab0
lea esi, [eax - 4]
mov dword [ebp - 4], 0x11
push dword [esi]
push 4
push eax
call fcn.10095790
mov eax, dword [esi]
lea eax, [eax*4 + 4]
push eax
push esi
call fcn.10095752
add esp, 8
mov dword [ebp - 4], 0xffffffff
mov esi, dword [0x100f5880]
test esi, esi
je 0x1006f368
mov eax, dword [0x100f5884]
lea eax, [eax*4 + 4]
push eax
mov eax, dword [0x100f587c]
add eax, 0xfffffffc
push eax
push esi
call sub.VCRUNTIME140.dll_memcpy
add esp, 0xc
add esi, 4
mov dword [edi], esi
mov byte [0x100f5888], 1
xor eax, eax
cmp byte [0x100f5888], al
setne al
add eax, 9
cmp dword [0x100f587c], 0
je 0x1006f3c7
mov ecx, dword [0x100f5880]
test ecx, ecx
je 0x1006f3c7
cmp eax, dword [0x100f5884]
ja 0x1006f3c7
mov dword [ecx + eax*4], 0x100866a0
mov ecx, 0x40
mov eax, dword [0x100f587c]
cmp dword [eax + 0x24], 0
mov eax, 0x80
cmove ecx, eax
or ecx, ebx
mov ebx, ecx
mov eax, ecx
and ebx, 0xffffff7f
and al, 0x80
cmove ebx, ecx
test bl, 0x40
je 0x1006f3c7
and ebx, 0xffffffbf
mov edi, dword [0x100f548c]
mov dword [0x100f58a0], edi
mov eax, dword [edi]
mov dword [0x100f58a4], eax
test eax, eax
je 0x1006f4ec
xor esi, esi
mov eax, dword [0x100f58a4]
mov ecx, dword [eax + esi*4]
test ecx, ecx
je 0x1006f413
mov eax, dword [0x100f50b4]
lea edx, [ebp - 0x34]
push 0x1c
push edx
push ecx
call eax
test eax, eax
je 0x1006f413
mov eax, dword [ebp - 0x20]
test al, 1
jne 0x1006f413
test eax, 0x100
jne 0x1006f413
inc esi
jmp 0x1006f3e4
mov dword [0x100f58ac], esi
test esi, esi
je 0x1006f4ec
lea edx, [esi + 1]
lea ecx, [ebp - 0x14]
call fcn.10033250
cmp eax, 0x100f58a8
je 0x1006f47d
mov ecx, dword [eax]
mov dword [eax], 0
mov eax, dword [0x100f58a8]
mov dword [0x100f58a8], ecx
test eax, eax
je 0x1006f47d
push 0x1001eab0
lea esi, [eax - 4]
mov dword [ebp - 4], 0x12
push dword [esi]
push 4
push eax
call fcn.10095790
mov eax, dword [esi]
lea eax, [eax*4 + 4]
push eax
push esi
call fcn.10095752
add esp, 8
mov dword [ebp - 4], 0xffffffff
mov eax, dword [ebp - 0x14]
test eax, eax
je 0x1006f4b7
push 0x1001eab0
lea esi, [eax - 4]
mov dword [ebp - 4], 0x13
push dword [esi]
push 4
push eax
call fcn.10095790
mov eax, dword [esi]
lea eax, [eax*4 + 4]
push eax
push esi
call fcn.10095752
add esp, 8
mov dword [ebp - 4], 0xffffffff
mov esi, dword [0x100f58a8]
test esi, esi
je 0x1006f4ec
mov eax, dword [0x100f58ac]
lea eax, [eax*4 + 4]
push eax
mov eax, dword [0x100f58a4]
add eax, 0xfffffffc
push eax
push esi
call sub.VCRUNTIME140.dll_memcpy
add esp, 0xc
add esi, 4
mov dword [edi], esi
mov byte [0x100f58b0], 1
xor eax, eax
cmp byte [0x100f58b0], al
setne al
add eax, 0x2b
cmp dword [0x100f58a4], 0
je 0x1006f557
mov ecx, dword [0x100f58a8]
test ecx, ecx
je 0x1006f557
cmp eax, dword [0x100f58ac]
ja 0x1006f557
mov dword [ecx + eax*4], 0x1004ade0
mov ecx, pe_nt_image_headers32
mov eax, dword [0x100f58a4]
cmp dword [eax + 0xac], 0
mov eax, 0x200
cmove ecx, eax
or ecx, ebx
mov ebx, ecx
mov eax, ecx
and ebx, 0xfffffdff
and eax, 0x200
cmove ebx, ecx
test ebx, 0x100
je 0x1006f557
and ebx, 0xfffffeff
mov edi, dword [0x100f5430]
mov dword [0x100f58b4], edi
mov ecx, dword [edi]
mov dword [0x100f58b8], ecx
test ecx, ecx
je 0x1006f68a
xor esi, esi
mov edx, dword [ecx + esi*4]
test edx, edx
je 0x1006f5ab
mov eax, dword [0x100f50b4]
lea ecx, [ebp - 0x34]
push 0x1c
push ecx
push edx
call eax
test eax, eax
je 0x1006f5a5
mov eax, dword [ebp - 0x20]
test al, 1
jne 0x1006f5a5
test eax, 0x100
jne 0x1006f5a5
mov ecx, dword [0x100f58b8]
inc esi
jmp 0x1006f575
mov ecx, dword [0x100f58b8]
mov dword [0x100f58c0], esi
test esi, esi
je 0x1006f68a
lea edx, [esi + 1]
lea ecx, [ebp - 0x14]
call fcn.10033250
cmp eax, 0x100f58bc
je 0x1006f615
mov ecx, dword [eax]
mov dword [eax], 0
mov eax, dword [0x100f58bc]
mov dword [0x100f58bc], ecx
test eax, eax
je 0x1006f615
push 0x1001eab0
lea esi, [eax - 4]
mov dword [ebp - 4], 0x14
push dword [esi]
push 4
push eax
call fcn.10095790
mov eax, dword [esi]
lea eax, [eax*4 + 4]
push eax
push esi
call fcn.10095752
add esp, 8
mov dword [ebp - 4], 0xffffffff
mov eax, dword [ebp - 0x14]
test eax, eax
je 0x1006f64f
push 0x1001eab0
lea esi, [eax - 4]
mov dword [ebp - 4], 0x15
push dword [esi]
push 4
push eax
call fcn.10095790
mov eax, dword [esi]
lea eax, [eax*4 + 4]
push eax
push esi
call fcn.10095752
add esp, 8
mov dword [ebp - 4], 0xffffffff
mov esi, dword [0x100f58bc]
test esi, esi
je 0x1006f684
mov eax, dword [0x100f58c0]
lea eax, [eax*4 + 4]
push eax
mov eax, dword [0x100f58b8]
add eax, 0xfffffffc
push eax
push esi
call sub.VCRUNTIME140.dll_memcpy
add esp, 0xc
add esi, 4
mov dword [edi], esi
mov byte [0x100f58c4], 1
mov ecx, dword [0x100f58b8]
xor eax, eax
cmp byte [0x100f58c4], al
setne al
add eax, 6
test ecx, ecx
je 0x1006f6ee
mov edx, dword [0x100f58bc]
test edx, edx
je 0x1006f6ee
cmp eax, dword [0x100f58c0]
ja 0x1006f6ee
mov dword [edx + eax*4], 0x10083420
mov eax, 0x800
mov ecx, dword [0x100f58b8]
mov edx, 0x400
cmp dword [ecx + 0x18], 0
cmove edx, eax
or edx, ebx
mov ebx, edx
mov eax, edx
and ebx, 0xfffff7ff
and eax, 0x800
cmove ebx, edx
test ebx, 0x400
je 0x1006f6ee
and ebx, 0xfffffbff
xor eax, eax
cmp byte [0x100f58c4], al
setne al
add eax, 0x27
test ecx, ecx
je 0x1006f755
mov edx, dword [0x100f58bc]
test edx, edx
je 0x1006f755
cmp eax, dword [0x100f58c0]
ja 0x1006f755
mov dword [edx + eax*4], 0x10083430
mov eax, 0x2000
mov ecx, dword [0x100f58b8]
mov edx, 0x1000
cmp dword [ecx + 0x9c], 0
cmove edx, eax
or edx, ebx
mov ebx, edx
mov eax, edx
and ebx, 0xffffdfff
and eax, 0x2000
cmove ebx, edx
test ebx, 0x1000
je 0x1006f755
and ebx, 0xffffefff
xor eax, eax
cmp byte [0x100f58c4], al
setne al
add eax, 0x28
test ecx, ecx
je 0x1006f7bb
mov ecx, dword [0x100f58bc]
test ecx, ecx
je 0x1006f7bb
cmp eax, dword [0x100f58c0]
ja 0x1006f7bb
mov dword [ecx + eax*4], 0x10083470
mov ecx, 0x4000
mov eax, dword [0x100f58b8]
cmp dword [eax + 0xa0], 0
mov eax, 0x8000
cmove ecx, eax
or ecx, ebx
mov ebx, ecx
mov eax, ecx
and ebx, 0xffff7fff
and eax, 0x8000
cmove ebx, ecx
test ebx, 0x4000
je 0x1006f7bb
and ebx, 0xffffbfff
mov edi, dword [0x100f5454]
mov dword [0x100f58c8], edi
mov eax, dword [edi]
mov dword [0x100f58cc], eax
test eax, eax
je 0x1006f8e8
xor esi, esi
nop dword [eax + eax]
mov eax, dword [0x100f58cc]
mov ecx, dword [eax + esi*4]
test ecx, ecx
je 0x1006f80f
mov eax, dword [0x100f50b4]
lea edx, [ebp - 0x34]
push 0x1c
push edx
push ecx
call eax
test eax, eax
je 0x1006f80f
mov eax, dword [ebp - 0x20]
test al, 1
jne 0x1006f80f
test eax, 0x100
jne 0x1006f80f
inc esi
jmp 0x1006f7e0
mov dword [0x100f58d4], esi
test esi, esi
je 0x1006f8e8
lea edx, [esi + 1]
lea ecx, [ebp - 0x14]
call fcn.10033250
cmp eax, 0x100f58d0
je 0x1006f879
mov ecx, dword [eax]
mov dword [eax], 0
mov eax, dword [0x100f58d0]
mov dword [0x100f58d0], ecx
test eax, eax
je 0x1006f879
push 0x1001eab0
lea esi, [eax - 4]
mov dword [ebp - 4], 0x16
push dword [esi]
push 4
push eax
call fcn.10095790
mov eax, dword [esi]
lea eax, [eax*4 + 4]
push eax
push esi
call fcn.10095752
add esp, 8
mov dword [ebp - 4], 0xffffffff
mov eax, dword [ebp - 0x14]
test eax, eax
je 0x1006f8b3
push 0x1001eab0
lea esi, [eax - 4]
mov dword [ebp - 4], 0x17
push dword [esi]
push 4
push eax
call fcn.10095790
mov eax, dword [esi]
lea eax, [eax*4 + 4]
push eax
push esi
call fcn.10095752
add esp, 8
mov dword [ebp - 4], 0xffffffff
mov esi, dword [0x100f58d0]
test esi, esi
je 0x1006f8e8
mov eax, dword [0x100f58d4]
lea eax, [eax*4 + 4]
push eax
mov eax, dword [0x100f58cc]
add eax, 0xfffffffc
push eax
push esi
call sub.VCRUNTIME140.dll_memcpy
add esp, 0xc
add esi, 4
mov dword [edi], esi
mov byte [0x100f58d8], 1
xor eax, eax
cmp byte [0x100f58d8], al
setne al
add eax, 0xd
cmp dword [0x100f58cc], 0
je 0x1006f950
mov ecx, dword [0x100f58d0]
test ecx, ecx
je 0x1006f950
cmp eax, dword [0x100f58d4]
ja 0x1006f950
mov dword [ecx + eax*4], 0x1004a980
mov ecx, 0x10000
mov eax, dword [0x100f58cc]
cmp dword [eax + 0x34], 0
mov eax, 0x20000
cmove ecx, eax
or ecx, ebx
mov ebx, ecx
mov eax, ecx
and ebx, 0xfffdffff
and eax, 0x20000
cmove ebx, ecx
test ebx, 0x10000
je 0x1006f950
and ebx, 0xfffeffff
mov edi, dword [0x100f5438]
mov dword [0x100f58dc], edi
mov eax, dword [edi]
mov dword [0x100f58e0], eax
test eax, eax
je 0x1006fa78
xor esi, esi
nop dword [eax]
mov eax, dword [0x100f58e0]
mov ecx, dword [eax + esi*4]
test ecx, ecx
je 0x1006f99f
mov eax, dword [0x100f50b4]
lea edx, [ebp - 0x34]
push 0x1c
push edx
push ecx
call eax
test eax, eax
je 0x1006f99f
mov eax, dword [ebp - 0x20]
test al, 1
jne 0x1006f99f
test eax, 0x100
jne 0x1006f99f
inc esi
jmp 0x1006f970
mov dword [0x100f58e8], esi
test esi, esi
je 0x1006fa78
lea edx, [esi + 1]
lea ecx, [ebp - 0x14]
call fcn.10033250
cmp eax, 0x100f58e4
je 0x1006fa09
mov ecx, dword [eax]
mov dword [eax], 0
mov eax, dword [0x100f58e4]
mov dword [0x100f58e4], ecx
test eax, eax
je 0x1006fa09
push 0x1001eab0
lea esi, [eax - 4]
mov dword [ebp - 4], 0x18
push dword [esi]
push 4
push eax
call fcn.10095790
mov eax, dword [esi]
lea eax, [eax*4 + 4]
push eax
push esi
call fcn.10095752
add esp, 8
mov dword [ebp - 4], 0xffffffff
mov eax, dword [ebp - 0x14]
test eax, eax
je 0x1006fa43
push 0x1001eab0
lea esi, [eax - 4]
mov dword [ebp - 4], 0x19
push dword [esi]
push 4
push eax
call fcn.10095790
mov eax, dword [esi]
lea eax, [eax*4 + 4]
push eax
push esi
call fcn.10095752
add esp, 8
mov dword [ebp - 4], 0xffffffff
mov esi, dword [0x100f58e4]
test esi, esi
je 0x1006fa78
mov eax, dword [0x100f58e8]
lea eax, [eax*4 + 4]
push eax
mov eax, dword [0x100f58e0]
add eax, 0xfffffffc
push eax
push esi
call sub.VCRUNTIME140.dll_memcpy
add esp, 0xc
add esi, 4
mov dword [edi], esi
mov byte [0x100f58ec], 1
xor eax, eax
cmp byte [0x100f58ec], al
setne al
add eax, 0x15
cmp dword [0x100f58e0], 0
je 0x1006fae0
mov ecx, dword [0x100f58e4]
test ecx, ecx
je 0x1006fae0
cmp eax, dword [0x100f58e8]
ja 0x1006fae0
mov dword [ecx + eax*4], 0x1004aaa0
mov ecx, 0x40000
mov eax, dword [0x100f58e0]
cmp dword [eax + 0x54], 0
mov eax, 0x80000
cmove ecx, eax
or ecx, ebx
mov ebx, ecx
mov eax, ecx
and ebx, 0xfff7ffff
and eax, 0x80000
cmove ebx, ecx
test ebx, 0x40000
je 0x1006fae0
and ebx, 0xfffbffff
xor eax, eax
cmp byte [0x100f58ec], al
setne al
add eax, 0x18
cmp dword [0x100f58e0], 0
je 0x1006fb48
mov ecx, dword [0x100f58e4]
test ecx, ecx
je 0x1006fb48
cmp eax, dword [0x100f58e8]
ja 0x1006fb48
mov dword [ecx + eax*4], 0x1004aaf0
mov ecx, 0x100000
mov eax, dword [0x100f58e0]
cmp dword [eax + 0x60], 0
mov eax, 0x200000
cmove ecx, eax
or ecx, ebx
mov ebx, ecx
mov eax, ecx
and ebx, 0xffdfffff
and eax, 0x200000
cmove ebx, ecx
test ebx, 0x100000
je 0x1006fb48
and ebx, 0xffefffff
mov edi, dword [0x100f5590]
mov dword [0x100f58f0], edi
mov eax, dword [edi]
mov dword [0x100f58f4], eax
test eax, eax
je 0x1006fc6d
xor esi, esi
mov eax, dword [0x100f58f4]
mov ecx, dword [eax + esi*4]
test ecx, ecx
je 0x1006fb94
mov eax, dword [0x100f50b4]
lea edx, [ebp - 0x34]
push 0x1c
push edx
push ecx
call eax
test eax, eax
je 0x1006fb94
mov eax, dword [ebp - 0x20]
test al, 1
jne 0x1006fb94
test eax, 0x100
jne 0x1006fb94
inc esi
jmp 0x1006fb65
mov dword [0x100f58fc], esi
test esi, esi
je 0x1006fc6d
lea edx, [esi + 1]
lea ecx, [ebp - 0x14]
call fcn.10033250
cmp eax, 0x100f58f8
je 0x1006fbfe
mov ecx, dword [eax]
mov dword [eax], 0
mov eax, dword [0x100f58f8]
mov dword [0x100f58f8], ecx
test eax, eax
je 0x1006fbfe
push 0x1001eab0
lea esi, [eax - 4]
mov dword [ebp - 4], 0x1a
push dword [esi]
push 4
push eax
call fcn.10095790
mov eax, dword [esi]
lea eax, [eax*4 + 4]
push eax
push esi
call fcn.10095752
add esp, 8
mov dword [ebp - 4], 0xffffffff
mov eax, dword [ebp - 0x14]
test eax, eax
je 0x1006fc38
push 0x1001eab0
lea esi, [eax - 4]
mov dword [ebp - 4], 0x1b
push dword [esi]
push 4
push eax
call fcn.10095790
mov eax, dword [esi]
lea eax, [eax*4 + 4]
push eax
push esi
call fcn.10095752
add esp, 8
mov dword [ebp - 4], 0xffffffff
mov esi, dword [0x100f58f8]
test esi, esi
je 0x1006fc6d
mov eax, dword [0x100f58fc]
lea eax, [eax*4 + 4]
push eax
mov eax, dword [0x100f58f4]
add eax, 0xfffffffc
push eax
push esi
call sub.VCRUNTIME140.dll_memcpy
add esp, 0xc
add esi, 4
mov dword [edi], esi
mov byte [0x100f5900], 1
xor eax, eax
cmp byte [0x100f5900], al
setne al
add eax, 7
cmp dword [0x100f58f4], 0
je 0x1006fcd5
mov ecx, dword [0x100f58f8]
test ecx, ecx
je 0x1006fcd5
cmp eax, dword [0x100f58fc]
ja 0x1006fcd5
mov dword [ecx + eax*4], 0x1004a2c0
mov ecx, 0x400000
mov eax, dword [0x100f58f4]
cmp dword [eax + 0x1c], 0
mov eax, 0x800000
cmove ecx, eax
or ecx, ebx
mov ebx, ecx
mov eax, ecx
and ebx, 0xff7fffff
and eax, 0x800000
cmove ebx, ecx
test ebx, 0x400000
je 0x1006fcd5
and ebx, 0xffbfffff
mov edi, dword [0x100f54a0]
mov dword [0x100f57ec], edi
mov ecx, dword [edi]
mov dword [0x100f57f0], ecx
test ecx, ecx
je 0x1006fe08
xor esi, esi
mov edx, dword [ecx + esi*4]
test edx, edx
je 0x1006fd29
mov eax, dword [0x100f50b4]
lea ecx, [ebp - 0x34]
push 0x1c
push ecx
push edx
call eax
test eax, eax
je 0x1006fd23
mov eax, dword [ebp - 0x20]
test al, 1
jne 0x1006fd23
test eax, 0x100
jne 0x1006fd23
mov ecx, dword [0x100f57f0]
inc esi
jmp 0x1006fcf3
mov ecx, dword [0x100f57f0]
mov dword [0x100f57f8], esi
test esi, esi
je 0x1006fe08
lea edx, [esi + 1]
lea ecx, [ebp - 0x14]
call fcn.10033250
cmp eax, 0x100f57f4
je 0x1006fd93
mov ecx, dword [eax]
mov dword [eax], 0
mov eax, dword [0x100f57f4]
mov dword [0x100f57f4], ecx
test eax, eax
je 0x1006fd93
push 0x1001eab0
lea esi, [eax - 4]
mov dword [ebp - 4], 0x1c
push dword [esi]
push 4
push eax
call fcn.10095790
mov eax, dword [esi]
lea eax, [eax*4 + 4]
push eax
push esi
call fcn.10095752
add esp, 8
mov dword [ebp - 4], 0xffffffff
mov eax, dword [ebp - 0x14]
test eax, eax
je 0x1006fdcd
push 0x1001eab0
lea esi, [eax - 4]
mov dword [ebp - 4], 0x1d
push dword [esi]
push 4
push eax
call fcn.10095790
mov eax, dword [esi]
lea eax, [eax*4 + 4]
push eax
push esi
call fcn.10095752
add esp, 8
mov dword [ebp - 4], 0xffffffff
mov esi, dword [0x100f57f4]
test esi, esi
je 0x1006fe02
mov eax, dword [0x100f57f8]
lea eax, [eax*4 + 4]
push eax
mov eax, dword [0x100f57f0]
add eax, 0xfffffffc
push eax
push esi
call sub.VCRUNTIME140.dll_memcpy
add esp, 0xc
add esi, 4
mov dword [edi], esi
mov byte [0x100f57fc], 1
mov ecx, dword [0x100f57f0]
xor eax, eax
cmp byte [0x100f57fc], al
setne al
add eax, 0x24
test ecx, ecx
je 0x1006fe6f
mov edx, dword [0x100f57f4]
test edx, edx
je 0x1006fe6f
cmp eax, dword [0x100f57f8]
ja 0x1006fe6f
mov dword [edx + eax*4], 0x10033e60
mov eax, 0x2000000
mov ecx, dword [0x100f57f0]
mov edx, 0x1000000
cmp dword [ecx + 0x90], 0
cmove edx, eax
or edx, ebx
mov ebx, edx
mov eax, edx
and ebx, 0xfdffffff
and eax, 0x2000000
cmove ebx, edx
test ebx, 0x1000000
je 0x1006fe6f
and ebx, 0xfeffffff
xor eax, eax
cmp byte [0x100f57fc], al
setne al
add eax, 5
test ecx, ecx
je 0x1006fed3
mov edx, dword [0x100f57f4]
test edx, edx
je 0x1006fed3
cmp eax, dword [0x100f57f8]
ja 0x1006fed3
mov dword [edx + eax*4], 0x10033ed0
mov eax, 0x8000000
mov ecx, dword [0x100f57f0]
mov edx, 0x4000000
cmp dword [ecx + 0x14], 0
cmove edx, eax
or edx, ebx
mov ebx, edx
mov eax, edx
and ebx, 0xf7ffffff
and eax, 0x8000000
cmove ebx, edx
test ebx, 0x4000000
je 0x1006fed3
and ebx, 0xfbffffff
xor eax, eax
cmp byte [0x100f57fc], al
setne al
add eax, 0x18
test ecx, ecx
je 0x1006ff36
mov ecx, dword [0x100f57f4]
test ecx, ecx
je 0x1006ff36
cmp eax, dword [0x100f57f8]
ja 0x1006ff36
mov dword [ecx + eax*4], 0x10033f40
mov ecx, 0x10000000
mov eax, dword [0x100f57f0]
cmp dword [eax + 0x60], 0
mov eax, 0x20000000
cmove ecx, eax
or ecx, ebx
mov ebx, ecx
mov eax, ecx
and ebx, 0xdfffffff
and eax, 0x20000000
cmove ebx, ecx
test ebx, 0x10000000
je 0x1006ff36
and ebx, 0xefffffff
push 0x100af21c
call dword [0x100f55a0]
mov edi, dword [0x100f54ec]
mov dword [0x100f5e18], edi
mov eax, dword [edi]
mov dword [0x100f5e1c], eax
test eax, eax
je 0x10070068
xor esi, esi
nop
mov eax, dword [0x100f5e1c]
mov ecx, dword [eax + esi*4]
test ecx, ecx
je 0x1006ff8f
mov eax, dword [0x100f50b4]
lea edx, [ebp - 0x34]
push 0x1c
push edx
push ecx
call eax
test eax, eax
je 0x1006ff8f
mov eax, dword [ebp - 0x20]
test al, 1
jne 0x1006ff8f
test eax, 0x100
jne 0x1006ff8f
inc esi
jmp 0x1006ff60
mov dword [0x100f5e24], esi
test esi, esi
je 0x10070068
lea edx, [esi + 1]
lea ecx, [ebp - 0x14]
call fcn.10033250
cmp eax, 0x100f5e20
je 0x1006fff9
mov ecx, dword [eax]
mov dword [eax], 0
mov eax, dword [0x100f5e20]
mov dword [0x100f5e20], ecx
test eax, eax
je 0x1006fff9
push 0x1001eab0
lea esi, [eax - 4]
mov dword [ebp - 4], 0x1e
push dword [esi]
push 4
push eax
call fcn.10095790
mov eax, dword [esi]
lea eax, [eax*4 + 4]
push eax
push esi
call fcn.10095752
add esp, 8
mov dword [ebp - 4], 0xffffffff
mov eax, dword [ebp - 0x14]
test eax, eax
je 0x10070033
push 0x1001eab0
lea esi, [eax - 4]
mov dword [ebp - 4], 0x1f
push dword [esi]
push 4
push eax
call fcn.10095790
mov eax, dword [esi]
lea eax, [eax*4 + 4]
push eax
push esi
call fcn.10095752
add esp, 8
mov dword [ebp - 4], 0xffffffff
mov esi, dword [0x100f5e20]
test esi, esi
je 0x10070068
mov eax, dword [0x100f5e24]
lea eax, [eax*4 + 4]
push eax
mov eax, dword [0x100f5e1c]
add eax, 0xfffffffc
push eax
push esi
call sub.VCRUNTIME140.dll_memcpy
add esp, 0xc
add esi, 4
mov dword [edi], esi
mov byte [0x100f5e28], 1
xor eax, eax
cmp byte [0x100f5e28], al
setne al
add eax, 0xd
cmp dword [0x100f5e1c], 0
je 0x10070098
mov ecx, dword [0x100f5e20]
test ecx, ecx
je 0x10070098
cmp eax, dword [0x100f5e24]
ja 0x10070098
mov dword [ecx + eax*4], 0x10068a60
mov edi, dword [0x100f54f0]
mov dword [0x100f5904], edi
mov eax, dword [edi]
mov dword [0x100f5908], eax
test eax, eax
je 0x100701bd
xor esi, esi
mov eax, dword [0x100f5908]
mov ecx, dword [eax + esi*4]
test ecx, ecx
je 0x100700e4
mov eax, dword [0x100f50b4]
lea edx, [ebp - 0x34]
push 0x1c
push edx
push ecx
call eax
test eax, eax
je 0x100700e4
mov eax, dword [ebp - 0x20]
test al, 1
jne 0x100700e4
test eax, 0x100
jne 0x100700e4
inc esi
jmp 0x100700b5
mov dword [0x100f5910], esi
test esi, esi
je 0x100701bd
lea edx, [esi + 1]
lea ecx, [ebp - 0x14]
call fcn.10033250
cmp eax, 0x100f590c
je 0x1007014e
mov ecx, dword [eax]
mov dword [eax], 0
mov eax, dword [0x100f590c]
mov dword [0x100f590c], ecx
test eax, eax
je 0x1007014e
push 0x1001eab0
lea esi, [eax - 4]
mov dword [ebp - 4], 0x20
push dword [esi]
push 4
push eax
call fcn.10095790
mov eax, dword [esi]
lea eax, [eax*4 + 4]
push eax
push esi
call fcn.10095752
add esp, 8
mov dword [ebp - 4], 0xffffffff
mov eax, dword [ebp - 0x14]
test eax, eax
je 0x10070188
push 0x1001eab0
lea esi, [eax - 4]
mov dword [ebp - 4], 0x21
push dword [esi]
push 4
push eax
call fcn.10095790
mov eax, dword [esi]
lea eax, [eax*4 + 4]
push eax
push esi
call fcn.10095752
add esp, 8
mov dword [ebp - 4], 0xffffffff
mov esi, dword [0x100f590c]
test esi, esi
je 0x100701bd
mov eax, dword [0x100f5910]
lea eax, [eax*4 + 4]
push eax
mov eax, dword [0x100f5908]
add eax, 0xfffffffc
push eax
push esi
call sub.VCRUNTIME140.dll_memcpy
add esp, 0xc
add esi, 4
mov dword [edi], esi
mov byte [0x100f5914], 1
xor eax, eax
cmp byte [0x100f5914], al
setne al
add eax, 0xd
cmp dword [0x100f5908], 0
je 0x100701ed
mov ecx, dword [0x100f590c]
test ecx, ecx
je 0x100701ed
cmp eax, dword [0x100f5910]
ja 0x100701ed
mov dword [ecx + eax*4], 0x10068ba0
lea eax, [ebp - 0x14]
mov dword [ebp - 0x18], 0xf3c2c786
push eax
mov ecx, 0x100fa8e0
mov dword [ebp - 0x14], 0x72e242a1
call fcn.1003fd10
lea ecx, [ebp - 0x18]
push ecx
mov ecx, eax
call fcn.1003fcf0
movq xmm0, qword [eax]
mov eax, dword [eax + 8]
movq qword [ebp - 0x40], xmm0
cmp byte [ebp - 0x40], 0
mov dword [ebp - 0x38], eax
jne 0x1007023b
mov ecx, dword [ebp - 0x3c]
mov eax, dword [ecx + 0x20]
mov dword [0x100f5e48], eax
mov dword [ecx + 0x20], 0x1006df10
lea eax, [ebp - 0x14]
mov dword [ebp - 0x18], 0x9ef0d03e
push eax
mov ecx, 0x100fa8e0
mov dword [ebp - 0x14], 0x72e242a1
call fcn.1003fd10
lea ecx, [ebp - 0x18]
push ecx
mov ecx, eax
call fcn.1003fcf0
movq xmm0, qword [eax]
mov eax, dword [eax + 8]
movq qword [ebp - 0x40], xmm0
cmp byte [ebp - 0x40], 0
mov dword [ebp - 0x38], eax
jne 0x10070289
mov edx, dword [ebp - 0x3c]
mov eax, dword [edx + 0x20]
mov dword [0x100f5e4c], eax
mov dword [edx + 0x20], 0x1006dff0
lea eax, [ebp - 0x14]
mov dword [ebp - 0x18], 0x781aa1a4
push eax
mov ecx, 0x100fa8e0
mov dword [ebp - 0x14], 0x2aafa737
call fcn.1003fd10
lea ecx, [ebp - 0x18]
push ecx
mov ecx, eax
call fcn.1003fcf0
movq xmm0, qword [eax]
mov eax, dword [eax + 8]
movq qword [ebp - 0x40], xmm0
cmp byte [ebp - 0x40], 0
mov dword [ebp - 0x38], eax
jne 0x100702d7
mov ecx, dword [ebp - 0x3c]
mov eax, dword [ecx + 0x20]
mov dword [0x100f5e54], eax
mov dword [ecx + 0x20], 0x1006e160
call fcn.100415b0
cmp dword [0x100f50ac], 0
jne 0x100702f6
push 0
push 0
push 0
call dword [sym.imp.KERNEL32.dll_HeapCreate]
mov dword [0x100f50ac], eax
xor eax, eax
mov esi, 0x100f509c
xchg dword [esi], eax
push 0xc4
push str.55_8B_EC_56_8B_F1_8B_86_________85_C0_74_24_48_83_F8_02_77_2C_83_BE___________8D_8E_________74_06_32_C0_84_C0_EB_10_E8_________84_C0_EB_07_83_BE___________0F_94_C0_84_C0_74_07_B0_01_5E_5D_C2_0C_00
lea ecx, [ebp - 0x30]
mov dword [ebp - 0x20], 0
mov dword [ebp - 0x1c], 0xf
mov byte [ebp - 0x30], 0
call fcn.100274f0
mov edx, 0x38450191
mov dword [ebp - 4], 0x22
lea ecx, [ebp - 0x40]
call fcn.1004aef0
mov edx, dword [eax + 8]
test edx, edx
je 0x10070343
mov edx, dword [edx + 0x50]
jmp 0x10070345
xor edx, edx
mov eax, dword [eax]
test eax, eax
je 0x10070350
mov eax, dword [eax + 0x18]
jmp 0x10070352
xor eax, eax
lea ecx, [ebp - 0x30]
push ecx
push eax
lea ecx, [ebp - 0x14]
call fcn.1004b3a0
mov ecx, dword [ebp - 0x14]
add esp, 4
call fcn.10041600
mov edx, dword [ebp - 0x1c]
cmp edx, 0x10
jb 0x100703a0
mov ecx, dword [ebp - 0x30]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x10070396
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
jbe 0x10070396
call dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
push edx
push ecx
call fcn.10095bbf
add esp, 8
call fcn.100415b0
cmp dword [0x100f50ac], 0
je 0x100703b3
call fcn.100414b0
xor eax, eax
xchg dword [esi], eax
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 0x10]
xor ecx, ebp
call fcn.10095741
mov esp, ebp
pop ebp
ret