Function at 0x100858f0
Capabilities:
Allocate or change rwx memory
Execute shellcode via indirect call

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x100b69a4
mov eax, dword fs:[0]
push eax
sub esp, 0x38
mov eax, dword [0x100cc380]
xor eax, ebp
mov dword [ebp - 0x10], eax
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
call fcn.100aa160
push 0x2e
xorps xmm0, xmm0
mov dword [ebp - 0x24], 0
push str.57_8B_F9_8B_07_8B_80_________FF_D0_84_C0_75_02
lea ecx, [ebp - 0x34]
mov dword [ebp - 0x20], 0
movups xmmword [ebp - 0x34], xmm0
call fcn.1002a660
mov edx, 0x6c5a4374
mov dword [ebp - 4], 0
lea ecx, [ebp - 0x44]
call fcn.1004f210
mov edx, dword [eax + 8]
test edx, edx
je 0x10085963
mov edx, dword [edx + 0x50]
jmp 0x10085965
xor edx, edx
mov eax, dword [eax]
test eax, eax
je 0x10085970
mov eax, dword [eax + 0x18]
jmp 0x10085972
xor eax, eax
lea ecx, [ebp - 0x34]
push ecx
push eax
lea ecx, [ebp - 0x14]
call fcn.1004f640
add esp, 8
push 0
push 0x100847b0
push dword [ebp - 0x14]
call fcn.100aa2a0
mov dword [ebp - 4], 0xffffffff
mov ecx, dword [ebp - 0x20]
cmp ecx, 0xf
jbe 0x100859ce
mov edx, dword [ebp - 0x34]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x100859c4
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
jbe 0x100859c4
call dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
push ecx
push edx
call fcn.100ad71e
add esp, 8
push 0x21
xorps xmm0, xmm0
mov dword [ebp - 0x24], 0
push str.55_8B_EC_51_80_3D___________0F_57
lea ecx, [ebp - 0x34]
mov dword [ebp - 0x20], 0
movups xmmword [ebp - 0x34], xmm0
call fcn.1002a660
mov dword [ebp - 4], 1
mov eax, dword [0x1020883c]
test eax, eax
je 0x10085a07
mov edx, dword [eax + 0x50]
jmp 0x10085a09
xor edx, edx
mov eax, dword [0x10208834]
test eax, eax
je 0x10085a17
mov eax, dword [eax + 0x18]
jmp 0x10085a19
xor eax, eax
lea ecx, [ebp - 0x34]
push ecx
push eax
lea ecx, [ebp - 0x14]
call fcn.1004f640
mov dword [ebp - 4], 0xffffffff
add esp, 8
mov ecx, dword [ebp - 0x20]
cmp ecx, 0xf
jbe 0x10085a64
mov edx, dword [ebp - 0x34]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x10085a5a
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x1008617b
push ecx
push edx
call fcn.100ad71e
add esp, 8
push 0x10203d98
push 0x100847c0
push dword [ebp - 0x14]
call fcn.100aa2a0
push 0x2c
xorps xmm0, xmm0
mov dword [ebp - 0x24], 0
push str.55_8B_EC_83_E4_F0_83_EC_78_56_8B_F1_57_8B_56
lea ecx, [ebp - 0x34]
mov dword [ebp - 0x20], 0
movups xmmword [ebp - 0x34], xmm0
call fcn.1002a660
mov dword [ebp - 4], 2
mov edx, dword [0x1020883c]
test edx, edx
je 0x10085ab0
mov edx, dword [edx + 0x50]
jmp 0x10085ab2
xor edx, edx
mov eax, dword [0x10208834]
test eax, eax
je 0x10085ac0
mov eax, dword [eax + 0x18]
jmp 0x10085ac2
xor eax, eax
lea ecx, [ebp - 0x34]
push ecx
push eax
lea ecx, [ebp - 0x14]
call fcn.1004f640
mov dword [ebp - 4], 0xffffffff
add esp, 8
mov ecx, dword [ebp - 0x20]
cmp ecx, 0xf
jbe 0x10085b0d
mov edx, dword [ebp - 0x34]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x10085b03
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x1008617b
push ecx
push edx
call fcn.100ad71e
add esp, 8
push 0x10203dac
push 0x100847e0
push dword [ebp - 0x14]
call fcn.100aa2a0
push 0x21
xorps xmm0, xmm0
mov dword [ebp - 0x24], 0
push str.0F_B7_05_________3D_________74_3F
lea ecx, [ebp - 0x34]
mov dword [ebp - 0x20], 0
movups xmmword [ebp - 0x34], xmm0
call fcn.1002a660
mov dword [ebp - 4], 3
mov edx, dword [0x1020883c]
test edx, edx
je 0x10085b59
mov edx, dword [edx + 0x50]
jmp 0x10085b5b
xor edx, edx
mov eax, dword [0x10208834]
test eax, eax
je 0x10085b69
mov eax, dword [eax + 0x18]
jmp 0x10085b6b
xor eax, eax
lea ecx, [ebp - 0x34]
push ecx
push eax
lea ecx, [ebp - 0x14]
call fcn.1004f640
mov dword [ebp - 4], 0xffffffff
add esp, 8
mov ecx, dword [ebp - 0x20]
cmp ecx, 0xf
jbe 0x10085bb6
mov edx, dword [ebp - 0x34]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x10085bac
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x1008617b
push ecx
push edx
call fcn.100ad71e
add esp, 8
push 0x10203da8
push 0x100847f0
push dword [ebp - 0x14]
call fcn.100aa2a0
push 0x17
xorps xmm0, xmm0
mov dword [ebp - 0x24], 0
push str.55_8B_EC_83_E4_F0_B8_D8
lea ecx, [ebp - 0x34]
mov dword [ebp - 0x20], 0
movups xmmword [ebp - 0x34], xmm0
call fcn.1002a660
mov dword [ebp - 4], 4
mov edx, dword [0x1020883c]
test edx, edx
je 0x10085c02
mov edx, dword [edx + 0x50]
jmp 0x10085c04
xor edx, edx
mov eax, dword [0x10208834]
test eax, eax
je 0x10085c12
mov eax, dword [eax + 0x18]
jmp 0x10085c14
xor eax, eax
lea ecx, [ebp - 0x34]
push ecx
push eax
lea ecx, [ebp - 0x14]
call fcn.1004f640
mov dword [ebp - 4], 0xffffffff
add esp, 8
mov ecx, dword [ebp - 0x20]
cmp ecx, 0xf
jbe 0x10085c5f
mov edx, dword [ebp - 0x34]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x10085c55
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x1008617b
push ecx
push edx
call fcn.100ad71e
add esp, 8
push 0x10203db8
push 0x10084950
push dword [ebp - 0x14]
call fcn.100aa2a0
mov eax, dword [0x10213038]
test al, 1
jne 0x10085d2d
or eax, 1
mov dword [0x10213038], eax
mov dword [ebp - 4], 5
lea ecx, [ebp - 0x34]
push 0x2a
xorps xmm0, xmm0
mov dword [ebp - 0x24], 0
push str.55_8B_EC_51_56_8B_F1_80_BE___________74_36
movups xmmword [ebp - 0x34], xmm0
mov dword [ebp - 0x20], 0
call fcn.1002a660
mov byte [ebp - 4], 6
mov edx, dword [0x1020883c]
test edx, edx
je 0x10085cc4
mov edx, dword [edx + 0x50]
jmp 0x10085cc6
xor edx, edx
mov eax, dword [0x10208834]
test eax, eax
je 0x10085cd4
mov eax, dword [eax + 0x18]
jmp 0x10085cd6
xor eax, eax
lea ecx, [ebp - 0x34]
push ecx
push eax
lea ecx, [ebp - 0x14]
call fcn.1004f640
mov eax, dword [ebp - 0x14]
add esp, 8
mov byte [ebp - 4], 5
mov ecx, dword [ebp - 0x20]
mov dword [0x10213010], eax
cmp ecx, 0xf
jbe 0x10085d26
mov edx, dword [ebp - 0x34]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x10085d1c
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x1008617b
push ecx
push edx
call fcn.100ad71e
add esp, 8
mov dword [ebp - 4], 0xffffffff
push 0x10203da4
push 0x10085100
push dword [0x10213010]
call fcn.100aa2a0
push 0x25
xorps xmm0, xmm0
mov dword [ebp - 0x24], 0
push str.55_8B_EC_83_EC_1C_8B_0D_________53_56
lea ecx, [ebp - 0x34]
mov dword [ebp - 0x20], 0
movups xmmword [ebp - 0x34], xmm0
call fcn.1002a660
mov dword [ebp - 4], 7
mov edx, dword [0x1020883c]
test edx, edx
je 0x10085d7c
mov edx, dword [edx + 0x50]
jmp 0x10085d7e
xor edx, edx
mov eax, dword [0x10208834]
test eax, eax
je 0x10085d8c
mov eax, dword [eax + 0x18]
jmp 0x10085d8e
xor eax, eax
lea ecx, [ebp - 0x34]
push ecx
push eax
lea ecx, [ebp - 0x14]
call fcn.1004f640
mov dword [ebp - 4], 0xffffffff
add esp, 8
mov ecx, dword [ebp - 0x20]
cmp ecx, 0xf
jbe 0x10085dd9
mov edx, dword [ebp - 0x34]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x10085dcf
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x1008617b
push ecx
push edx
call fcn.100ad71e
add esp, 8
push 0x10203db4
push 0x10084a20
push dword [ebp - 0x14]
call fcn.100aa2a0
mov eax, dword [0x10213038]
test al, 2
jne 0x10085ea7
or eax, 2
mov dword [0x10213038], eax
mov dword [ebp - 4], 8
lea ecx, [ebp - 0x34]
push 0x20
xorps xmm0, xmm0
mov dword [ebp - 0x24], 0
push str.55_8B_EC_83_EC_18_56_8B_F1_C7_45
movups xmmword [ebp - 0x34], xmm0
mov dword [ebp - 0x20], 0
call fcn.1002a660
mov byte [ebp - 4], 9
mov edx, dword [0x1020883c]
test edx, edx
je 0x10085e3e
mov edx, dword [edx + 0x50]
jmp 0x10085e40
xor edx, edx
mov eax, dword [0x10208834]
test eax, eax
je 0x10085e4e
mov eax, dword [eax + 0x18]
jmp 0x10085e50
xor eax, eax
lea ecx, [ebp - 0x34]
push ecx
push eax
lea ecx, [ebp - 0x14]
call fcn.1004f640
mov eax, dword [ebp - 0x14]
add esp, 8
mov byte [ebp - 4], 8
mov ecx, dword [ebp - 0x20]
mov dword [0x10213028], eax
cmp ecx, 0xf
jbe 0x10085ea0
mov edx, dword [ebp - 0x34]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x10085e96
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x1008617b
push ecx
push edx
call fcn.100ad71e
add esp, 8
mov dword [ebp - 4], 0xffffffff
push 0x10203da0
push 0x100853e0
push dword [0x10213028]
call fcn.100aa2a0
push 0x25
xorps xmm0, xmm0
mov dword [ebp - 0x24], 0
push str.56_8B_F1_8B_8E_________83_F9_FF_74_21
lea ecx, [ebp - 0x34]
mov dword [ebp - 0x20], 0
movups xmmword [ebp - 0x34], xmm0
call fcn.1002a660
mov dword [ebp - 4], 0xa
mov edx, dword [0x1020883c]
test edx, edx
je 0x10085ef6
mov edx, dword [edx + 0x50]
jmp 0x10085ef8
xor edx, edx
mov eax, dword [0x10208834]
test eax, eax
je 0x10085f06
mov eax, dword [eax + 0x18]
jmp 0x10085f08
xor eax, eax
lea ecx, [ebp - 0x34]
push ecx
push eax
lea ecx, [ebp - 0x14]
call fcn.1004f640
mov dword [ebp - 4], 0xffffffff
add esp, 8
mov ecx, dword [ebp - 0x20]
cmp ecx, 0xf
jbe 0x10085f53
mov edx, dword [ebp - 0x34]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x10085f49
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x1008617b
push ecx
push edx
call fcn.100ad71e
add esp, 8
push 0x10213034
push 0x10085170
push dword [ebp - 0x14]
call fcn.100aa2a0
push 0x1a
xorps xmm0, xmm0
mov dword [ebp - 0x24], 0
push str.E8_________8B_0E_83_C1_10
lea ecx, [ebp - 0x34]
mov dword [ebp - 0x20], 0
movups xmmword [ebp - 0x34], xmm0
call fcn.1002a660
mov dword [ebp - 4], 0xb
mov edx, dword [0x1020883c]
test edx, edx
je 0x10085f9f
mov edx, dword [edx + 0x50]
jmp 0x10085fa1
xor edx, edx
mov eax, dword [0x10208834]
test eax, eax
je 0x10085faf
mov eax, dword [eax + 0x18]
jmp 0x10085fb1
xor eax, eax
lea ecx, [ebp - 0x34]
push ecx
push eax
lea ecx, [ebp - 0x14]
call fcn.1004f640
mov eax, dword [ebp - 0x14]
add esp, 8
test eax, eax
je 0x10085fcd
lea ecx, [eax + 1]
jmp 0x10085fcf
xor ecx, ecx
mov eax, dword [ecx]
add ecx, 4
add eax, ecx
mov dword [ebp - 4], 0xffffffff
mov ecx, dword [ebp - 0x20]
mov dword [0x1021301c], eax
cmp ecx, 0xf
jbe 0x1008601b
mov edx, dword [ebp - 0x34]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x1008600c
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x1008617b
push ecx
push edx
call fcn.100ad71e
mov eax, dword [0x1021301c]
add esp, 8
push 0x10213030
push 0x10085230
push eax
call fcn.100aa2a0
push 0x26
xorps xmm0, xmm0
mov dword [ebp - 0x24], 0
push str.55_8B_EC_8B_55_08_83_EC_1C_F6_42_1C_01
lea ecx, [ebp - 0x34]
mov dword [ebp - 0x20], 0
movups xmmword [ebp - 0x34], xmm0
call fcn.1002a660
mov dword [ebp - 4], 0xc
mov edx, dword [0x1020883c]
test edx, edx
je 0x10086065
mov edx, dword [edx + 0x50]
jmp 0x10086067
xor edx, edx
mov eax, dword [0x10208834]
test eax, eax
je 0x10086075
mov eax, dword [eax + 0x18]
jmp 0x10086077
xor eax, eax
lea ecx, [ebp - 0x34]
push ecx
push eax
lea ecx, [ebp - 0x14]
call fcn.1004f640
mov dword [ebp - 4], 0xffffffff
add esp, 8
mov ecx, dword [ebp - 0x20]
cmp ecx, 0xf
jbe 0x100860c2
mov edx, dword [ebp - 0x34]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x100860b8
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x1008617b
push ecx
push edx
call fcn.100ad71e
add esp, 8
push 0x10203d9c
push 0x100855e0
push dword [ebp - 0x14]
call fcn.100aa2a0
mov eax, dword [0x10213038]
test al, 4
jne 0x10086192
or eax, 4
mov dword [0x10213038], eax
mov dword [ebp - 4], 0xd
lea ecx, [ebp - 0x34]
push 0x11
xorps xmm0, xmm0
mov dword [ebp - 0x24], 0
push str.55_8B_EC_51_57_E8
movups xmmword [ebp - 0x34], xmm0
mov dword [ebp - 0x20], 0
call fcn.1002a660
mov byte [ebp - 4], 0xe
mov edx, dword [0x1020883c]
test edx, edx
je 0x10086127
mov edx, dword [edx + 0x50]
jmp 0x10086129
xor edx, edx
mov eax, dword [0x10208834]
test eax, eax
je 0x10086137
mov eax, dword [eax + 0x18]
jmp 0x10086139
xor eax, eax
lea ecx, [ebp - 0x34]
push ecx
push eax
lea ecx, [ebp - 0x14]
call fcn.1004f640
mov eax, dword [ebp - 0x14]
add esp, 8
mov byte [ebp - 4], 0xd
mov ecx, dword [ebp - 0x20]
mov dword [0x10213044], eax
cmp ecx, 0xf
jbe 0x1008618b
mov edx, dword [ebp - 0x34]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x10086181
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
jbe 0x10086181
call dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
push ecx
push edx
call fcn.100ad71e
add esp, 8
mov dword [ebp - 4], 0xffffffff
push 0x10203db0
push 0x10085690
push dword [0x10213044]
call fcn.100aa2a0
push 0
call fcn.100aa6c0
push 0
push str.Valve001
call dword [sym.imp.USER32.dll_FindWindowA]
mov ecx, dword [0x10203d74]
push 0x100a9ea0
push 0xfffffffffffffffc
push eax
call ecx
mov edi, dword [0x10208888]
mov dword [0x10209318], eax
mov dword [0x10208c60], edi
mov eax, dword [edi]
mov dword [0x10208c64], eax
test eax, eax
je 0x100862f8
xor esi, esi
nop dword [eax]
mov eax, dword [0x10208c64]
mov ecx, dword [eax + esi*4]
test ecx, ecx
je 0x1008621f
mov eax, dword [0x10203d70]
lea edx, [ebp - 0x38]
push 0x1c
push edx
push ecx
call eax
test eax, eax
je 0x1008621f
mov eax, dword [ebp - 0x24]
test al, 1
jne 0x1008621f
test eax, 0x100
jne 0x1008621f
inc esi
jmp 0x100861f0
mov dword [ebp - 0x14], esi
mov dword [0x10208c6c], esi
test esi, esi
je 0x100862f8
inc esi
mov ecx, 4
mov eax, esi
mov dword [ebp - 0x18], esi
mul ecx
mov ecx, 0xffffffff
cmovb eax, ecx
add eax, 4
cmovb eax, ecx
push eax
call fcn.100ad7da
add esp, 4
mov dword [ebp - 0x1c], eax
mov dword [ebp - 4], 0xf
mov dword [eax], esi
lea esi, [eax + 4]
mov eax, dword [ebp - 0x14]
push 0x10022a60
push 0x10022a50
inc eax
push eax
push 4
push esi
call fcn.100ad761
mov dword [ebp - 4], 0xffffffff
mov eax, dword [0x10208c68]
mov dword [0x10208c68], esi
test eax, eax
je 0x100862c9
push 0x10022a60
lea esi, [eax - 4]
mov dword [ebp - 4], 0x10
push dword [esi]
push 4
push eax
call fcn.100ad2ea
mov eax, dword [esi]
lea eax, [eax*4 + 4]
push eax
push esi
call fcn.100ad1ca
mov dword [ebp - 4], 0xffffffff
add esp, 8
mov esi, dword [0x10208c68]
test esi, esi
je 0x100862fe
mov eax, dword [0x10208c6c]
lea eax, [eax*4 + 4]
push eax
mov eax, dword [0x10208c64]
add eax, 0xfffffffc
push eax
push esi
call sub.VCRUNTIME140.dll_memcpy
add esp, 0xc
add esi, 4
mov dword [edi], esi
mov byte [0x10208c70], 1
mov esi, dword [0x10208c68]
xor eax, eax
cmp byte [0x10208c70], al
setne al
add eax, 0x29
cmp dword [0x10208c64], 0
je 0x10086328
test esi, esi
je 0x10086328
cmp eax, dword [0x10208c6c]
ja 0x10086328
mov dword [esi + eax*4], 0x10097ab0
mov edi, dword [0x10208870]
mov dword [0x10208c88], edi
mov eax, dword [edi]
mov dword [0x10208c8c], eax
test eax, eax
je 0x1008644d
xor esi, esi
mov eax, dword [0x10208c8c]
mov ecx, dword [eax + esi*4]
test ecx, ecx
je 0x10086374
mov eax, dword [0x10203d70]
lea edx, [ebp - 0x38]
push 0x1c
push edx
push ecx
call eax
test eax, eax
je 0x10086374
mov eax, dword [ebp - 0x24]
test al, 1
jne 0x10086374
test eax, 0x100
jne 0x10086374
inc esi
jmp 0x10086345
mov dword [ebp - 0x14], esi
mov dword [0x10208c94], esi
test esi, esi
je 0x1008644d
inc esi
mov ecx, 4
mov eax, esi
mov dword [ebp - 0x18], esi
mul ecx
mov ecx, 0xffffffff
cmovb eax, ecx
add eax, 4
cmovb eax, ecx
push eax
call fcn.100ad7da
add esp, 4
mov dword [ebp - 0x1c], eax
mov dword [ebp - 4], 0x12
mov dword [eax], esi
lea esi, [eax + 4]
mov eax, dword [ebp - 0x14]
push 0x10022a60
push 0x10022a50
inc eax
push eax
push 4
push esi
call fcn.100ad761
mov dword [ebp - 4], 0xffffffff
mov eax, dword [0x10208c90]
mov dword [0x10208c90], esi
test eax, eax
je 0x1008641e
push 0x10022a60
lea esi, [eax - 4]
mov dword [ebp - 4], 0x13
push dword [esi]
push 4
push eax
call fcn.100ad2ea
mov eax, dword [esi]
lea eax, [eax*4 + 4]
push eax
push esi
call fcn.100ad1ca
mov dword [ebp - 4], 0xffffffff
add esp, 8
mov esi, dword [0x10208c90]
test esi, esi
je 0x10086453
mov eax, dword [0x10208c94]
lea eax, [eax*4 + 4]
push eax
mov eax, dword [0x10208c8c]
add eax, 0xfffffffc
push eax
push esi
call sub.VCRUNTIME140.dll_memcpy
add esp, 0xc
add esi, 4
mov dword [edi], esi
mov byte [0x10208c98], 1
mov esi, dword [0x10208c90]
xor eax, eax
cmp byte [0x10208c98], al
setne al
add eax, 5
cmp dword [0x10208c8c], 0
je 0x10086483
test esi, esi
je 0x10086483
cmp eax, dword [0x10208c94]
ja 0x10086483
mov dword [esi + eax*4], 0x1008cca0
mov esi, dword [0x10208c90]
xor eax, eax
cmp byte [0x10208c98], al
setne al
add eax, 6
cmp dword [0x10208c8c], 0
je 0x100864b3
test esi, esi
je 0x100864b3
cmp eax, dword [0x10208c94]
ja 0x100864b3
mov dword [esi + eax*4], 0x1008cd50
mov esi, dword [0x10208c90]
xor eax, eax
cmp byte [0x10208c98], al
setne al
add eax, 7
cmp dword [0x10208c8c], 0
je 0x100864e3
test esi, esi
je 0x100864e3
cmp eax, dword [0x10208c94]
ja 0x100864e3
mov dword [esi + eax*4], 0x1008cd70
mov esi, dword [0x10208c90]
xor eax, eax
cmp byte [0x10208c98], al
setne al
add eax, 0x24
cmp dword [0x10208c8c], 0
je 0x1008650d
test esi, esi
je 0x1008650d
cmp eax, dword [0x10208c94]
ja 0x1008650d
mov dword [esi + eax*4], 0x1008d130
mov edi, dword [0x10208878]
mov dword [0x10208cb0], edi
mov eax, dword [edi]
mov dword [0x10208cb4], eax
test eax, eax
je 0x10086638
xor esi, esi
nop word [eax + eax]
mov eax, dword [0x10208cb4]
mov ecx, dword [eax + esi*4]
test ecx, ecx
je 0x1008655f
mov eax, dword [0x10203d70]
lea edx, [ebp - 0x38]
push 0x1c
push edx
push ecx
call eax
test eax, eax
je 0x1008655f
mov eax, dword [ebp - 0x24]
test al, 1
jne 0x1008655f
test eax, 0x100
jne 0x1008655f
inc esi
jmp 0x10086530
mov dword [ebp - 0x14], esi
mov dword [0x10208cbc], esi
test esi, esi
je 0x10086638
inc esi
mov ecx, 4
mov eax, esi
mov dword [ebp - 0x18], esi
mul ecx
mov ecx, 0xffffffff
cmovb eax, ecx
add eax, 4
cmovb eax, ecx
push eax
call fcn.100ad7da
add esp, 4
mov dword [ebp - 0x1c], eax
mov dword [ebp - 4], 0x15
mov dword [eax], esi
lea esi, [eax + 4]
mov eax, dword [ebp - 0x14]
push 0x10022a60
push 0x10022a50
inc eax
push eax
push 4
push esi
call fcn.100ad761
mov dword [ebp - 4], 0xffffffff
mov eax, dword [0x10208cb8]
mov dword [0x10208cb8], esi
test eax, eax
je 0x10086609
push 0x10022a60
lea esi, [eax - 4]
mov dword [ebp - 4], 0x16
push dword [esi]
push 4
push eax
call fcn.100ad2ea
mov eax, dword [esi]
lea eax, [eax*4 + 4]
push eax
push esi
call fcn.100ad1ca
mov dword [ebp - 4], 0xffffffff
add esp, 8
mov esi, dword [0x10208cb8]
test esi, esi
je 0x1008663e
mov eax, dword [0x10208cbc]
lea eax, [eax*4 + 4]
push eax
mov eax, dword [0x10208cb4]
add eax, 0xfffffffc
push eax
push esi
call sub.VCRUNTIME140.dll_memcpy
add esp, 0xc
add esi, 4
mov dword [edi], esi
mov byte [0x10208cc0], 1
mov esi, dword [0x10208cb8]
xor eax, eax
cmp byte [0x10208cc0], al
setne al
add eax, 0x1b
cmp dword [0x10208cb4], 0
je 0x1008666e
test esi, esi
je 0x1008666e
cmp eax, dword [0x10208cbc]
ja 0x1008666e
mov dword [esi + eax*4], 0x1008baa0
mov esi, dword [0x10208cb8]
xor eax, eax
cmp byte [0x10208cc0], al
setne al
add eax, 0x5d
cmp dword [0x10208cb4], 0
je 0x1008669e
test esi, esi
je 0x1008669e
cmp eax, dword [0x10208cbc]
ja 0x1008669e
mov dword [esi + eax*4], 0x1008bc00
mov esi, dword [0x10208cb8]
xor eax, eax
cmp byte [0x10208cc0], al
setne al
add eax, 0x5a
cmp dword [0x10208cb4], 0
je 0x100866c8
test esi, esi
je 0x100866c8
cmp eax, dword [0x10208cbc]
ja 0x100866c8
mov dword [esi + eax*4], 0x1008be30
mov edi, dword [0x10208890]
mov dword [0x10208cd8], edi
mov eax, dword [edi]
mov dword [0x10208cdc], eax
test eax, eax
je 0x100867ed
xor esi, esi
mov eax, dword [0x10208cdc]
mov ecx, dword [eax + esi*4]
test ecx, ecx
je 0x10086714
mov eax, dword [0x10203d70]
lea edx, [ebp - 0x38]
push 0x1c
push edx
push ecx
call eax
test eax, eax
je 0x10086714
mov eax, dword [ebp - 0x24]
test al, 1
jne 0x10086714
test eax, 0x100
jne 0x10086714
inc esi
jmp 0x100866e5
mov dword [ebp - 0x14], esi
mov dword [0x10208ce4], esi
test esi, esi
je 0x100867ed
inc esi
mov ecx, 4
mov eax, esi
mov dword [ebp - 0x18], esi
mul ecx
mov ecx, 0xffffffff
cmovb eax, ecx
add eax, 4
cmovb eax, ecx
push eax
call fcn.100ad7da
add esp, 4
mov dword [ebp - 0x1c], eax
mov dword [ebp - 4], 0x18
mov dword [eax], esi
lea esi, [eax + 4]
mov eax, dword [ebp - 0x14]
push 0x10022a60
push 0x10022a50
inc eax
push eax
push 4
push esi
call fcn.100ad761
mov dword [ebp - 4], 0xffffffff
mov eax, dword [0x10208ce0]
mov dword [0x10208ce0], esi
test eax, eax
je 0x100867be
push 0x10022a60
lea esi, [eax - 4]
mov dword [ebp - 4], 0x19
push dword [esi]
push 4
push eax
call fcn.100ad2ea
mov eax, dword [esi]
lea eax, [eax*4 + 4]
push eax
push esi
call fcn.100ad1ca
mov dword [ebp - 4], 0xffffffff
add esp, 8
mov esi, dword [0x10208ce0]
test esi, esi
je 0x100867f3
mov eax, dword [0x10208ce4]
lea eax, [eax*4 + 4]
push eax
mov eax, dword [0x10208cdc]
add eax, 0xfffffffc
push eax
push esi
call sub.VCRUNTIME140.dll_memcpy
add esp, 0xc
add esi, 4
mov dword [edi], esi
mov byte [0x10208ce8], 1
mov esi, dword [0x10208ce0]
xor eax, eax
cmp byte [0x10208ce8], al
setne al
add eax, 0xe
cmp dword [0x10208cdc], 0
je 0x10086823
test esi, esi
je 0x10086823
cmp eax, dword [0x10208ce4]
ja 0x10086823
mov dword [esi + eax*4], 0x1009eef0
mov esi, dword [0x10208ce0]
xor eax, eax
cmp byte [0x10208ce8], al
setne al
add eax, 0x13
cmp dword [0x10208cdc], 0
je 0x1008684d
test esi, esi
je 0x1008684d
cmp eax, dword [0x10208ce4]
ja 0x1008684d
mov dword [esi + eax*4], 0x1009f220
mov edi, dword [0x10208898]
mov dword [0x10208df0], edi
mov eax, dword [edi]
mov dword [0x10208df4], eax
test eax, eax
je 0x10086978
xor esi, esi
nop word [eax + eax]
mov eax, dword [0x10208df4]
mov ecx, dword [eax + esi*4]
test ecx, ecx
je 0x1008689f
mov eax, dword [0x10203d70]
lea edx, [ebp - 0x38]
push 0x1c
push edx
push ecx
call eax
test eax, eax
je 0x1008689f
mov eax, dword [ebp - 0x24]
test al, 1
jne 0x1008689f
test eax, 0x100
jne 0x1008689f
inc esi
jmp 0x10086870
mov dword [ebp - 0x14], esi
mov dword [0x10208dfc], esi
test esi, esi
je 0x10086978
inc esi
mov ecx, 4
mov eax, esi
mov dword [ebp - 0x18], esi
mul ecx
mov ecx, 0xffffffff
cmovb eax, ecx
add eax, 4
cmovb eax, ecx
push eax
call fcn.100ad7da
add esp, 4
mov dword [ebp - 0x1c], eax
mov dword [ebp - 4], 0x1b
mov dword [eax], esi
lea esi, [eax + 4]
mov eax, dword [ebp - 0x14]
push 0x10022a60
push 0x10022a50
inc eax
push eax
push 4
push esi
call fcn.100ad761
mov dword [ebp - 4], 0xffffffff
mov eax, dword [0x10208df8]
mov dword [0x10208df8], esi
test eax, eax
je 0x10086949
push 0x10022a60
lea esi, [eax - 4]
mov dword [ebp - 4], 0x1c
push dword [esi]
push 4
push eax
call fcn.100ad2ea
mov eax, dword [esi]
lea eax, [eax*4 + 4]
push eax
push esi
call fcn.100ad1ca
mov dword [ebp - 4], 0xffffffff
add esp, 8
mov esi, dword [0x10208df8]
test esi, esi
je 0x1008697e
mov eax, dword [0x10208dfc]
lea eax, [eax*4 + 4]
push eax
mov eax, dword [0x10208df4]
add eax, 0xfffffffc
push eax
push esi
call sub.VCRUNTIME140.dll_memcpy
add esp, 0xc
add esi, 4
mov dword [edi], esi
mov byte [0x10208e00], 1
mov esi, dword [0x10208df8]
xor eax, eax
cmp byte [0x10208e00], al
setne al
inc eax
cmp dword [0x10208df4], 0
je 0x100869a6
test esi, esi
je 0x100869a6
cmp eax, dword [0x10208dfc]
ja 0x100869a6
mov dword [esi + eax*4], 0x1009f5e0
mov edi, dword [0x102088d4]
mov dword [0x10208c74], edi
mov eax, dword [edi]
mov dword [0x10208c78], eax
test eax, eax
je 0x10086acb
xor esi, esi
mov eax, dword [0x10208c78]
mov ecx, dword [eax + esi*4]
test ecx, ecx
je 0x100869f2
mov eax, dword [0x10203d70]
lea edx, [ebp - 0x38]
push 0x1c
push edx
push ecx
call eax
test eax, eax
je 0x100869f2
mov eax, dword [ebp - 0x24]
test al, 1
jne 0x100869f2
test eax, 0x100
jne 0x100869f2
inc esi
jmp 0x100869c3
mov dword [ebp - 0x14], esi
mov dword [0x10208c80], esi
test esi, esi
je 0x10086acb
inc esi
mov ecx, 4
mov eax, esi
mov dword [ebp - 0x18], esi
mul ecx
mov ecx, 0xffffffff
cmovb eax, ecx
add eax, 4
cmovb eax, ecx
push eax
call fcn.100ad7da
add esp, 4
mov dword [ebp - 0x1c], eax
mov dword [ebp - 4], 0x1e
mov dword [eax], esi
lea esi, [eax + 4]
mov eax, dword [ebp - 0x14]
push 0x10022a60
push 0x10022a50
inc eax
push eax
push 4
push esi
call fcn.100ad761
mov dword [ebp - 4], 0xffffffff
mov eax, dword [0x10208c7c]
mov dword [0x10208c7c], esi
test eax, eax
je 0x10086a9c
push 0x10022a60
lea esi, [eax - 4]
mov dword [ebp - 4], 0x1f
push dword [esi]
push 4
push eax
call fcn.100ad2ea
mov eax, dword [esi]
lea eax, [eax*4 + 4]
push eax
push esi
call fcn.100ad1ca
mov dword [ebp - 4], 0xffffffff
add esp, 8
mov esi, dword [0x10208c7c]
test esi, esi
je 0x10086ad1
mov eax, dword [0x10208c80]
lea eax, [eax*4 + 4]
push eax
mov eax, dword [0x10208c78]
add eax, 0xfffffffc
push eax
push esi
call sub.VCRUNTIME140.dll_memcpy
add esp, 0xc
add esi, 4
mov dword [edi], esi
mov byte [0x10208c84], 1
mov esi, dword [0x10208c7c]
xor eax, eax
cmp byte [0x10208c84], al
setne al
add eax, 0x10
cmp dword [0x10208c78], 0
je 0x10086b01
test esi, esi
je 0x10086b01
cmp eax, dword [0x10208c80]
ja 0x10086b01
mov dword [esi + eax*4], 0x10097320
mov esi, dword [0x10208c7c]
xor eax, eax
cmp byte [0x10208c84], al
setne al
add eax, 0x11
cmp dword [0x10208c78], 0
je 0x10086b31
test esi, esi
je 0x10086b31
cmp eax, dword [0x10208c80]
ja 0x10086b31
mov dword [esi + eax*4], 0x10097330
mov esi, dword [0x10208c7c]
xor eax, eax
cmp byte [0x10208c84], al
setne al
add eax, 0x12
cmp dword [0x10208c78], 0
je 0x10086b61
test esi, esi
je 0x10086b61
cmp eax, dword [0x10208c80]
ja 0x10086b61
mov dword [esi + eax*4], 0x10097370
mov esi, dword [0x10208c7c]
xor eax, eax
cmp byte [0x10208c84], al
setne al
add eax, 0x18
cmp dword [0x10208c78], 0
je 0x10086b91
test esi, esi
je 0x10086b91
cmp eax, dword [0x10208c80]
ja 0x10086b91
mov dword [esi + eax*4], 0x10097560
mov esi, dword [0x10208c7c]
xor eax, eax
cmp byte [0x10208c84], al
setne al
add eax, 0x2c
cmp dword [0x10208c78], 0
je 0x10086bbb
test esi, esi
je 0x10086bbb
cmp eax, dword [0x10208c80]
ja 0x10086bbb
mov dword [esi + eax*4], 0x100976a0
mov edi, dword [0x10208884]
mov dword [0x10208cec], edi
mov eax, dword [edi]
mov dword [0x10208cf0], eax
test eax, eax
je 0x10086ce8
xor esi, esi
nop dword [eax + eax]
mov eax, dword [0x10208cf0]
mov ecx, dword [eax + esi*4]
test ecx, ecx
je 0x10086c0f
mov eax, dword [0x10203d70]
lea edx, [ebp - 0x38]
push 0x1c
push edx
push ecx
call eax
test eax, eax
je 0x10086c0f
mov eax, dword [ebp - 0x24]
test al, 1
jne 0x10086c0f
test eax, 0x100
jne 0x10086c0f
inc esi
jmp 0x10086be0
mov dword [ebp - 0x14], esi
mov dword [0x10208cf8], esi
test esi, esi
je 0x10086ce8
inc esi
mov ecx, 4
mov eax, esi
mov dword [ebp - 0x18], esi
mul ecx
mov ecx, 0xffffffff
cmovb eax, ecx
add eax, 4
cmovb eax, ecx
push eax
call fcn.100ad7da
add esp, 4
mov dword [ebp - 0x1c], eax
mov dword [ebp - 4], 0x21
mov dword [eax], esi
lea esi, [eax + 4]
mov eax, dword [ebp - 0x14]
push 0x10022a60
push 0x10022a50
inc eax
push eax
push 4
push esi
call fcn.100ad761
mov dword [ebp - 4], 0xffffffff
mov eax, dword [0x10208cf4]
mov dword [0x10208cf4], esi
test eax, eax
je 0x10086cb9
push 0x10022a60
lea esi, [eax - 4]
mov dword [ebp - 4], 0x22
push dword [esi]
push 4
push eax
call fcn.100ad2ea
mov eax, dword [esi]
lea eax, [eax*4 + 4]
push eax
push esi
call fcn.100ad1ca
mov dword [ebp - 4], 0xffffffff
add esp, 8
mov esi, dword [0x10208cf4]
test esi, esi
je 0x10086cee
mov eax, dword [0x10208cf8]
lea eax, [eax*4 + 4]
push eax
mov eax, dword [0x10208cf0]
add eax, 0xfffffffc
push eax
push esi
call sub.VCRUNTIME140.dll_memcpy
add esp, 0xc
add esi, 4
mov dword [edi], esi
mov byte [0x10208cfc], 1
mov esi, dword [0x10208cf4]
xor eax, eax
cmp byte [0x10208cfc], al
setne al
add eax, 0x43
cmp dword [0x10208cf0], 0
je 0x10086d1e
test esi, esi
je 0x10086d1e
cmp eax, dword [0x10208cf8]
ja 0x10086d1e
mov dword [esi + eax*4], 0x100941e0
mov esi, dword [0x10208cf4]
xor eax, eax
cmp byte [0x10208cfc], al
setne al
add eax, 0x52
cmp dword [0x10208cf0], 0
je 0x10086d4e
test esi, esi
je 0x10086d4e
cmp eax, dword [0x10208cf8]
ja 0x10086d4e
mov dword [esi + eax*4], 0x10094210
mov esi, dword [0x10208cf4]
xor eax, eax
cmp byte [0x10208cfc], al
setne al
add eax, 0x74
cmp dword [0x10208cf0], 0
je 0x10086d78
test esi, esi
je 0x10086d78
cmp eax, dword [0x10208cf8]
ja 0x10086d78
mov dword [esi + eax*4], 0x100942a0
mov edi, dword [0x102088a4]
mov dword [0x10208d3c], edi
mov eax, dword [edi]
mov dword [0x10208d40], eax
test eax, eax
je 0x10086e9d
xor esi, esi
mov eax, dword [0x10208d40]
mov ecx, dword [eax + esi*4]
test ecx, ecx
je 0x10086dc4
mov eax, dword [0x10203d70]
lea edx, [ebp - 0x38]
push 0x1c
push edx
push ecx
call eax
test eax, eax
je 0x10086dc4
mov eax, dword [ebp - 0x24]
test al, 1
jne 0x10086dc4
test eax, 0x100
jne 0x10086dc4
inc esi
jmp 0x10086d95
mov dword [ebp - 0x14], esi
mov dword [0x10208d48], esi
test esi, esi
je 0x10086e9d
inc esi
mov ecx, 4
mov eax, esi
mov dword [ebp - 0x18], esi
mul ecx
mov ecx, 0xffffffff
cmovb eax, ecx
add eax, 4
cmovb eax, ecx
push eax
call fcn.100ad7da
add esp, 4
mov dword [ebp - 0x1c], eax
mov dword [ebp - 4], 0x24
mov dword [eax], esi
lea esi, [eax + 4]
mov eax, dword [ebp - 0x14]
push 0x10022a60
push 0x10022a50
inc eax
push eax
push 4
push esi
call fcn.100ad761
mov dword [ebp - 4], 0xffffffff
mov eax, dword [0x10208d44]
mov dword [0x10208d44], esi
test eax, eax
je 0x10086e6e
push 0x10022a60
lea esi, [eax - 4]
mov dword [ebp - 4], 0x25
push dword [esi]
push 4
push eax
call fcn.100ad2ea
mov eax, dword [esi]
lea eax, [eax*4 + 4]
push eax
push esi
call fcn.100ad1ca
mov dword [ebp - 4], 0xffffffff
add esp, 8
mov esi, dword [0x10208d44]
test esi, esi
je 0x10086ea3
mov eax, dword [0x10208d48]
lea eax, [eax*4 + 4]
push eax
mov eax, dword [0x10208d40]
add eax, 0xfffffffc
push eax
push esi
call sub.VCRUNTIME140.dll_memcpy
add esp, 0xc
add esi, 4
mov dword [edi], esi
mov byte [0x10208d4c], 1
mov esi, dword [0x10208d44]
xor eax, eax
cmp byte [0x10208d4c], al
setne al
add eax, 0x15
cmp dword [0x10208d40], 0
je 0x10086ecd
test esi, esi
je 0x10086ecd
cmp eax, dword [0x10208d48]
ja 0x10086ecd
mov dword [esi + eax*4], 0x1007e610
mov edi, dword [0x1020889c]
mov dword [0x10208d28], edi
mov eax, dword [edi]
mov dword [0x10208d2c], eax
test eax, eax
je 0x10086ff8
xor esi, esi
nop word [eax + eax]
mov eax, dword [0x10208d2c]
mov ecx, dword [eax + esi*4]
test ecx, ecx
je 0x10086f1f
mov eax, dword [0x10203d70]
lea edx, [ebp - 0x38]
push 0x1c
push edx
push ecx
call eax
test eax, eax
je 0x10086f1f
mov eax, dword [ebp - 0x24]
test al, 1
jne 0x10086f1f
test eax, 0x100
jne 0x10086f1f
inc esi
jmp 0x10086ef0
mov dword [ebp - 0x14], esi
mov dword [0x10208d34], esi
test esi, esi
je 0x10086ff8
inc esi
mov ecx, 4
mov eax, esi
mov dword [ebp - 0x18], esi
mul ecx
mov ecx, 0xffffffff
cmovb eax, ecx
add eax, 4
cmovb eax, ecx
push eax
call fcn.100ad7da
add esp, 4
mov dword [ebp - 0x1c], eax
mov dword [ebp - 4], 0x27
mov dword [eax], esi
lea esi, [eax + 4]
mov eax, dword [ebp - 0x14]
push 0x10022a60
push 0x10022a50
inc eax
push eax
push 4
push esi
call fcn.100ad761
mov dword [ebp - 4], 0xffffffff
mov eax, dword [0x10208d30]
mov dword [0x10208d30], esi
test eax, eax
je 0x10086fc9
push 0x10022a60
lea esi, [eax - 4]
mov dword [ebp - 4], 0x28
push dword [esi]
push 4
push eax
call fcn.100ad2ea
mov eax, dword [esi]
lea eax, [eax*4 + 4]
push eax
push esi
call fcn.100ad1ca
mov dword [ebp - 4], 0xffffffff
add esp, 8
mov esi, dword [0x10208d30]
test esi, esi
je 0x10086ffe
mov eax, dword [0x10208d34]
lea eax, [eax*4 + 4]
push eax
mov eax, dword [0x10208d2c]
add eax, 0xfffffffc
push eax
push esi
call sub.VCRUNTIME140.dll_memcpy
add esp, 0xc
add esi, 4
mov dword [edi], esi
mov byte [0x10208d38], 1
mov esi, dword [0x10208d30]
xor eax, eax
cmp byte [0x10208d38], al
setne al
add eax, 9
cmp dword [0x10208d2c], 0
je 0x10087028
test esi, esi
je 0x10087028
cmp eax, dword [0x10208d34]
ja 0x10087028
mov dword [esi + eax*4], 0x1009f600
mov edi, dword [0x10208904]
mov dword [0x10208d50], edi
mov eax, dword [edi]
mov dword [0x10208d54], eax
test eax, eax
je 0x1008714d
xor esi, esi
mov eax, dword [0x10208d54]
mov ecx, dword [eax + esi*4]
test ecx, ecx
je 0x10087074
mov eax, dword [0x10203d70]
lea edx, [ebp - 0x38]
push 0x1c
push edx
push ecx
call eax
test eax, eax
je 0x10087074
mov eax, dword [ebp - 0x24]
test al, 1
jne 0x10087074
test eax, 0x100
jne 0x10087074
inc esi
jmp 0x10087045
mov dword [ebp - 0x14], esi
mov dword [0x10208d5c], esi
test esi, esi
je 0x1008714d
inc esi
mov ecx, 4
mov eax, esi
mov dword [ebp - 0x18], esi
mul ecx
mov ecx, 0xffffffff
cmovb eax, ecx
add eax, 4
cmovb eax, ecx
push eax
call fcn.100ad7da
add esp, 4
mov dword [ebp - 0x1c], eax
mov dword [ebp - 4], 0x2a
mov dword [eax], esi
lea esi, [eax + 4]
mov eax, dword [ebp - 0x14]
push 0x10022a60
push 0x10022a50
inc eax
push eax
push 4
push esi
call fcn.100ad761
mov dword [ebp - 4], 0xffffffff
mov eax, dword [0x10208d58]
mov dword [0x10208d58], esi
test eax, eax
je 0x1008711e
push 0x10022a60
lea esi, [eax - 4]
mov dword [ebp - 4], 0x2b
push dword [esi]
push 4
push eax
call fcn.100ad2ea
mov eax, dword [esi]
lea eax, [eax*4 + 4]
push eax
push esi
call fcn.100ad1ca
mov dword [ebp - 4], 0xffffffff
add esp, 8
mov esi, dword [0x10208d58]
test esi, esi
je 0x10087153
mov eax, dword [0x10208d5c]
lea eax, [eax*4 + 4]
push eax
mov eax, dword [0x10208d54]
add eax, 0xfffffffc
push eax
push esi
call sub.VCRUNTIME140.dll_memcpy
add esp, 0xc
add esi, 4
mov dword [edi], esi
mov byte [0x10208d60], 1
mov esi, dword [0x10208d58]
xor eax, eax
cmp byte [0x10208d60], al
setne al
add eax, 0x2b
cmp dword [0x10208d54], 0
je 0x1008717d
test esi, esi
je 0x1008717d
cmp eax, dword [0x10208d5c]
ja 0x1008717d
mov dword [esi + eax*4], 0x1004eff0
mov edi, dword [0x102088a0]
mov dword [0x10208d64], edi
mov eax, dword [edi]
mov dword [0x10208d68], eax
test eax, eax
je 0x100872a8
xor esi, esi
nop word [eax + eax]
mov eax, dword [0x10208d68]
mov ecx, dword [eax + esi*4]
test ecx, ecx
je 0x100871cf
mov eax, dword [0x10203d70]
lea edx, [ebp - 0x38]
push 0x1c
push edx
push ecx
call eax
test eax, eax
je 0x100871cf
mov eax, dword [ebp - 0x24]
test al, 1
jne 0x100871cf
test eax, 0x100
jne 0x100871cf
inc esi
jmp 0x100871a0
mov dword [ebp - 0x14], esi
mov dword [0x10208d70], esi
test esi, esi
je 0x100872a8
inc esi
mov ecx, 4
mov eax, esi
mov dword [ebp - 0x18], esi
mul ecx
mov ecx, 0xffffffff
cmovb eax, ecx
add eax, 4
cmovb eax, ecx
push eax
call fcn.100ad7da
add esp, 4
mov dword [ebp - 0x1c], eax
mov dword [ebp - 4], 0x2d
mov dword [eax], esi
lea esi, [eax + 4]
mov eax, dword [ebp - 0x14]
push 0x10022a60
push 0x10022a50
inc eax
push eax
push 4
push esi
call fcn.100ad761
mov dword [ebp - 4], 0xffffffff
mov eax, dword [0x10208d6c]
mov dword [0x10208d6c], esi
test eax, eax
je 0x10087279
push 0x10022a60
lea esi, [eax - 4]
mov dword [ebp - 4], 0x2e
push dword [esi]
push 4
push eax
call fcn.100ad2ea
mov eax, dword [esi]
lea eax, [eax*4 + 4]
push eax
push esi
call fcn.100ad1ca
mov dword [ebp - 4], 0xffffffff
add esp, 8
mov esi, dword [0x10208d6c]
test esi, esi
je 0x100872ae
mov eax, dword [0x10208d70]
lea eax, [eax*4 + 4]
push eax
mov eax, dword [0x10208d68]
add eax, 0xfffffffc
push eax
push esi
call sub.VCRUNTIME140.dll_memcpy
add esp, 0xc
add esi, 4
mov dword [edi], esi
mov byte [0x10208d74], 1
mov esi, dword [0x10208d6c]
xor eax, eax
cmp byte [0x10208d74], al
setne al
add eax, 4
cmp dword [0x10208d68], 0
je 0x100872de
test esi, esi
je 0x100872de
cmp eax, dword [0x10208d70]
ja 0x100872de
mov dword [esi + eax*4], 0x1009d9a0
mov esi, dword [0x10208d6c]
xor eax, eax
cmp byte [0x10208d74], al
setne al
add eax, 6
cmp dword [0x10208d68], 0
je 0x1008730e
test esi, esi
je 0x1008730e
cmp eax, dword [0x10208d70]
ja 0x1008730e
mov dword [esi + eax*4], 0x1009da60
mov esi, dword [0x10208d6c]
xor eax, eax
cmp byte [0x10208d74], al
setne al
add eax, 0x27
cmp dword [0x10208d68], 0
je 0x1008733e
test esi, esi
je 0x1008733e
cmp eax, dword [0x10208d70]
ja 0x1008733e
mov dword [esi + eax*4], 0x1009da70
mov esi, dword [0x10208d6c]
xor eax, eax
cmp byte [0x10208d74], al
setne al
add eax, 0x28
cmp dword [0x10208d68], 0
je 0x10087368
test esi, esi
je 0x10087368
cmp eax, dword [0x10208d70]
ja 0x10087368
mov dword [esi + eax*4], 0x1009dab0
mov edi, dword [0x102088c0]
mov dword [0x10208d78], edi
mov eax, dword [edi]
mov dword [0x10208d7c], eax
test eax, eax
je 0x1008748d
xor esi, esi
mov eax, dword [0x10208d7c]
mov ecx, dword [eax + esi*4]
test ecx, ecx
je 0x100873b4
mov eax, dword [0x10203d70]
lea edx, [ebp - 0x38]
push 0x1c
push edx
push ecx
call eax
test eax, eax
je 0x100873b4
mov eax, dword [ebp - 0x24]
test al, 1
jne 0x100873b4
test eax, 0x100
jne 0x100873b4
inc esi
jmp 0x10087385
mov dword [ebp - 0x14], esi
mov dword [0x10208d84], esi
test esi, esi
je 0x1008748d
inc esi
mov ecx, 4
mov eax, esi
mov dword [ebp - 0x18], esi
mul ecx
mov ecx, 0xffffffff
cmovb eax, ecx
add eax, 4
cmovb eax, ecx
push eax
call fcn.100ad7da
add esp, 4
mov dword [ebp - 0x1c], eax
mov dword [ebp - 4], 0x30
mov dword [eax], esi
lea esi, [eax + 4]
mov eax, dword [ebp - 0x14]
push 0x10022a60
push 0x10022a50
inc eax
push eax
push 4
push esi
call fcn.100ad761
mov dword [ebp - 4], 0xffffffff
mov eax, dword [0x10208d80]
mov dword [0x10208d80], esi
test eax, eax
je 0x1008745e
push 0x10022a60
lea esi, [eax - 4]
mov dword [ebp - 4], 0x31
push dword [esi]
push 4
push eax
call fcn.100ad2ea
mov eax, dword [esi]
lea eax, [eax*4 + 4]
push eax
push esi
call fcn.100ad1ca
mov dword [ebp - 4], 0xffffffff
add esp, 8
mov esi, dword [0x10208d80]
test esi, esi
je 0x10087493
mov eax, dword [0x10208d84]
lea eax, [eax*4 + 4]
push eax
mov eax, dword [0x10208d7c]
add eax, 0xfffffffc
push eax
push esi
call sub.VCRUNTIME140.dll_memcpy
add esp, 0xc
add esi, 4
mov dword [edi], esi
mov byte [0x10208d88], 1
mov esi, dword [0x10208d80]
xor eax, eax
cmp byte [0x10208d88], al
setne al
add eax, 0xd
cmp dword [0x10208d7c], 0
je 0x100874bd
test esi, esi
je 0x100874bd
cmp eax, dword [0x10208d84]
ja 0x100874bd
mov dword [esi + eax*4], 0x1004d620
mov edi, dword [0x102088a8]
mov dword [0x10208d8c], edi
mov eax, dword [edi]
mov dword [0x10208d90], eax
test eax, eax
je 0x100875e8
xor esi, esi
nop word [eax + eax]
mov eax, dword [0x10208d90]
mov ecx, dword [eax + esi*4]
test ecx, ecx
je 0x1008750f
mov eax, dword [0x10203d70]
lea edx, [ebp - 0x38]
push 0x1c
push edx
push ecx
call eax
test eax, eax
je 0x1008750f
mov eax, dword [ebp - 0x24]
test al, 1
jne 0x1008750f
test eax, 0x100
jne 0x1008750f
inc esi
jmp 0x100874e0
mov dword [ebp - 0x14], esi
mov dword [0x10208d98], esi
test esi, esi
je 0x100875e8
inc esi
mov ecx, 4
mov eax, esi
mov dword [ebp - 0x18], esi
mul ecx
mov ecx, 0xffffffff
cmovb eax, ecx
add eax, 4
cmovb eax, ecx
push eax
call fcn.100ad7da
add esp, 4
mov dword [ebp - 0x1c], eax
mov dword [ebp - 4], 0x33
mov dword [eax], esi
lea esi, [eax + 4]
mov eax, dword [ebp - 0x14]
push 0x10022a60
push 0x10022a50
inc eax
push eax
push 4
push esi
call fcn.100ad761
mov dword [ebp - 4], 0xffffffff
mov eax, dword [0x10208d94]
mov dword [0x10208d94], esi
test eax, eax
je 0x100875b9
push 0x10022a60
lea esi, [eax - 4]
mov dword [ebp - 4], 0x34
push dword [esi]
push 4
push eax
call fcn.100ad2ea
mov eax, dword [esi]
lea eax, [eax*4 + 4]
push eax
push esi
call fcn.100ad1ca
mov dword [ebp - 4], 0xffffffff
add esp, 8
mov esi, dword [0x10208d94]
test esi, esi
je 0x100875ee
mov eax, dword [0x10208d98]
lea eax, [eax*4 + 4]
push eax
mov eax, dword [0x10208d90]
add eax, 0xfffffffc
push eax
push esi
call sub.VCRUNTIME140.dll_memcpy
add esp, 0xc
add esi, 4
mov dword [edi], esi
mov byte [0x10208d9c], 1
mov esi, dword [0x10208d94]
xor eax, eax
cmp byte [0x10208d9c], al
setne al
add eax, 0x15
cmp dword [0x10208d90], 0
je 0x10087618
test esi, esi
je 0x10087618
cmp eax, dword [0x10208d98]
ja 0x10087618
mov dword [esi + eax*4], 0x1004d950
mov edi, dword [0x10208a14]
mov dword [0x10208da0], edi
mov ecx, dword [edi]
mov dword [0x10208da4], ecx
test ecx, ecx
je 0x1008773f
xor esi, esi
mov ecx, dword [ecx + esi*4]
test ecx, ecx
je 0x10087666
mov eax, dword [0x10203d70]
lea edx, [ebp - 0x38]
push 0x1c
push edx
push ecx
call eax
test eax, eax
je 0x10087666
mov eax, dword [ebp - 0x24]
test al, 1
jne 0x10087666
test eax, 0x100
jne 0x10087666
mov ecx, dword [0x10208da4]
inc esi
jmp 0x10087636
mov dword [ebp - 0x14], esi
mov dword [0x10208dac], esi
test esi, esi
je 0x1008773f
inc esi
mov ecx, 4
mov eax, esi
mov dword [ebp - 0x18], esi
mul ecx
mov ecx, 0xffffffff
cmovb eax, ecx
add eax, 4
cmovb eax, ecx
push eax
call fcn.100ad7da
add esp, 4
mov dword [ebp - 0x1c], eax
mov dword [ebp - 4], 0x36
mov dword [eax], esi
lea esi, [eax + 4]
mov eax, dword [ebp - 0x14]
push 0x10022a60
push 0x10022a50
inc eax
push eax
push 4
push esi
call fcn.100ad761
mov dword [ebp - 4], 0xffffffff
mov eax, dword [0x10208da8]
mov dword [0x10208da8], esi
test eax, eax
je 0x10087710
push 0x10022a60
lea esi, [eax - 4]
mov dword [ebp - 4], 0x37
push dword [esi]
push 4
push eax
call fcn.100ad2ea
mov eax, dword [esi]
lea eax, [eax*4 + 4]
push eax
push esi
call fcn.100ad1ca
mov dword [ebp - 4], 0xffffffff
add esp, 8
mov esi, dword [0x10208da8]
test esi, esi
je 0x1008773f
mov eax, dword [0x10208dac]
lea eax, [eax*4 + 4]
push eax
mov eax, dword [0x10208da4]
add eax, 0xfffffffc
push eax
push esi
call sub.VCRUNTIME140.dll_memcpy
add esp, 0xc
add esi, 4
mov dword [edi], esi
mov byte [0x10208db0], 1
mov edi, dword [0x1020891c]
mov dword [0x10208c9c], edi
mov eax, dword [edi]
mov dword [0x10208ca0], eax
test eax, eax
je 0x10087868
xor esi, esi
nop dword [eax]
mov eax, dword [0x10208ca0]
mov ecx, dword [eax + esi*4]
test ecx, ecx
je 0x1008778f
mov eax, dword [0x10203d70]
lea edx, [ebp - 0x38]
push 0x1c
push edx
push ecx
call eax
test eax, eax
je 0x1008778f
mov eax, dword [ebp - 0x24]
test al, 1
jne 0x1008778f
test eax, 0x100
jne 0x1008778f
inc esi
jmp 0x10087760
mov dword [ebp - 0x14], esi
mov dword [0x10208ca8], esi
test esi, esi
je 0x10087868
inc esi
mov ecx, 4
mov eax, esi
mov dword [ebp - 0x18], esi
mul ecx
mov ecx, 0xffffffff
cmovb eax, ecx
add eax, 4
cmovb eax, ecx
push eax
call fcn.100ad7da
add esp, 4
mov dword [ebp - 0x1c], eax
mov dword [ebp - 4], 0x39
mov dword [eax], esi
lea esi, [eax + 4]
mov eax, dword [ebp - 0x14]
push 0x10022a60
push 0x10022a50
inc eax
push eax
push 4
push esi
call fcn.100ad761
mov dword [ebp - 4], 0xffffffff
mov eax, dword [0x10208ca4]
mov dword [0x10208ca4], esi
test eax, eax
je 0x10087839
push 0x10022a60
lea esi, [eax - 4]
mov dword [ebp - 4], 0x3a
push dword [esi]
push 4
push eax
call fcn.100ad2ea
mov eax, dword [esi]
lea eax, [eax*4 + 4]
push eax
push esi
call fcn.100ad1ca
mov dword [ebp - 4], 0xffffffff
add esp, 8
mov esi, dword [0x10208ca4]
test esi, esi
je 0x1008786e
mov eax, dword [0x10208ca8]
lea eax, [eax*4 + 4]
push eax
mov eax, dword [0x10208ca0]
add eax, 0xfffffffc
push eax
push esi
call sub.VCRUNTIME140.dll_memcpy
add esp, 0xc
add esi, 4
mov dword [edi], esi
mov byte [0x10208cac], 1
mov esi, dword [0x10208ca4]
xor eax, eax
cmp byte [0x10208cac], al
setne al
add eax, 0x24
cmp dword [0x10208ca0], 0
je 0x1008789e
test esi, esi
je 0x1008789e
cmp eax, dword [0x10208ca8]
ja 0x1008789e
mov dword [esi + eax*4], 0x1003b710
mov esi, dword [0x10208ca4]
xor eax, eax
cmp byte [0x10208cac], al
setne al
add eax, 0x18
cmp dword [0x10208ca0], 0
je 0x100878c8
test esi, esi
je 0x100878c8
cmp eax, dword [0x10208ca8]
ja 0x100878c8
mov dword [esi + eax*4], 0x10085700
push 0x100cc400
call dword [0x10208a24]
mov edi, dword [0x10208960]
mov dword [0x10209304], edi
mov eax, dword [edi]
mov dword [0x10209308], eax
test eax, eax
je 0x100879f8
xor esi, esi
mov eax, dword [0x10209308]
mov ecx, dword [eax + esi*4]
test ecx, ecx
je 0x1008791f
mov eax, dword [0x10203d70]
lea edx, [ebp - 0x38]
push 0x1c
push edx
push ecx
call eax
test eax, eax
je 0x1008791f
mov eax, dword [ebp - 0x24]
test al, 1
jne 0x1008791f
test eax, 0x100
jne 0x1008791f
inc esi
jmp 0x100878f0
mov dword [ebp - 0x14], esi
mov dword [0x10209310], esi
test esi, esi
je 0x100879f8
inc esi
mov ecx, 4
mov eax, esi
mov dword [ebp - 0x18], esi
mul ecx
mov ecx, 0xffffffff
cmovb eax, ecx
add eax, 4
cmovb eax, ecx
push eax
call fcn.100ad7da
add esp, 4
mov dword [ebp - 0x1c], eax
mov dword [ebp - 4], 0x3c
mov dword [eax], esi
lea esi, [eax + 4]
mov eax, dword [ebp - 0x14]
push 0x10022a60
push 0x10022a50
inc eax
push eax
push 4
push esi
call fcn.100ad761
mov dword [ebp - 4], 0xffffffff
mov eax, dword [0x1020930c]
mov dword [0x1020930c], esi
test eax, eax
je 0x100879c9
push 0x10022a60
lea esi, [eax - 4]
mov dword [ebp - 4], 0x3d
push dword [esi]
push 4
push eax
call fcn.100ad2ea
mov eax, dword [esi]
lea eax, [eax*4 + 4]
push eax
push esi
call fcn.100ad1ca
mov dword [ebp - 4], 0xffffffff
add esp, 8
mov esi, dword [0x1020930c]
test esi, esi
je 0x100879fe
mov eax, dword [0x10209310]
lea eax, [eax*4 + 4]
push eax
mov eax, dword [0x10209308]
add eax, 0xfffffffc
push eax
push esi
call sub.VCRUNTIME140.dll_memcpy
add esp, 0xc
add esi, 4
mov dword [edi], esi
mov byte [0x10209314], 1
mov esi, dword [0x1020930c]
xor eax, eax
cmp byte [0x10209314], al
setne al
add eax, 0xd
cmp dword [0x10209308], 0
je 0x10087a28
test esi, esi
je 0x10087a28
cmp eax, dword [0x10209310]
ja 0x10087a28
mov dword [esi + eax*4], 0x1007e270
mov edi, dword [0x10208964]
mov dword [0x10208db4], edi
mov eax, dword [edi]
mov dword [0x10208db8], eax
test eax, eax
je 0x10087b4d
xor esi, esi
mov eax, dword [0x10208db8]
mov ecx, dword [eax + esi*4]
test ecx, ecx
je 0x10087a74
mov eax, dword [0x10203d70]
lea edx, [ebp - 0x38]
push 0x1c
push edx
push ecx
call eax
test eax, eax
je 0x10087a74
mov eax, dword [ebp - 0x24]
test al, 1
jne 0x10087a74
test eax, 0x100
jne 0x10087a74
inc esi
jmp 0x10087a45
mov dword [ebp - 0x14], esi
mov dword [0x10208dc0], esi
test esi, esi
je 0x10087b4d
inc esi
mov ecx, 4
mov eax, esi
mov dword [ebp - 0x18], esi
mul ecx
mov ecx, 0xffffffff
cmovb eax, ecx
add eax, 4
cmovb eax, ecx
push eax
call fcn.100ad7da
add esp, 4
mov dword [ebp - 0x1c], eax
mov dword [ebp - 4], 0x3f
mov dword [eax], esi
lea esi, [eax + 4]
mov eax, dword [ebp - 0x14]
push 0x10022a60
push 0x10022a50
inc eax
push eax
push 4
push esi
call fcn.100ad761
mov dword [ebp - 4], 0xffffffff
mov eax, dword [0x10208dbc]
mov dword [0x10208dbc], esi
test eax, eax
je 0x10087b1e
push 0x10022a60
lea esi, [eax - 4]
mov dword [ebp - 4], 0x40
push dword [esi]
push 4
push eax
call fcn.100ad2ea
mov eax, dword [esi]
lea eax, [eax*4 + 4]
push eax
push esi
call fcn.100ad1ca
mov dword [ebp - 4], 0xffffffff
add esp, 8
mov esi, dword [0x10208dbc]
test esi, esi
je 0x10087b53
mov eax, dword [0x10208dc0]
lea eax, [eax*4 + 4]
push eax
mov eax, dword [0x10208db8]
add eax, 0xfffffffc
push eax
push esi
call sub.VCRUNTIME140.dll_memcpy
add esp, 0xc
add esi, 4
mov dword [edi], esi
mov byte [0x10208dc4], 1
mov esi, dword [0x10208dbc]
xor eax, eax
cmp byte [0x10208dc4], al
setne al
add eax, 0xd
cmp dword [0x10208db8], 0
je 0x10087b7d
test esi, esi
je 0x10087b7d
cmp eax, dword [0x10208dc0]
ja 0x10087b7d
mov dword [esi + eax*4], 0x1007e3b0
lea eax, [ebp - 0x1c]
mov dword [ebp - 0x18], 0xf3c2c786
push eax
mov ecx, 0x1020e9a0
mov dword [ebp - 0x1c], 0x72e242a1
call fcn.1007c980
lea ecx, [ebp - 0x18]
push ecx
mov ecx, eax
call fcn.1007c960
movq xmm0, qword [eax]
movq qword [ebp - 0x44], xmm0
cmp byte [ebp - 0x44], 0
jne 0x10087bc5
mov ecx, dword [ebp - 0x40]
mov eax, dword [ecx + 0x20]
mov dword [0x10209340], eax
mov dword [ecx + 0x20], 0x10084540
lea eax, [ebp - 0x18]
mov dword [ebp - 0x1c], 0x9ef0d03e
push eax
mov ecx, 0x1020e9a0
mov dword [ebp - 0x18], 0x72e242a1
call fcn.1007c980
lea ecx, [ebp - 0x1c]
push ecx
mov ecx, eax
call fcn.1007c960
movq xmm0, qword [eax]
movq qword [ebp - 0x44], xmm0
cmp byte [ebp - 0x44], 0
jne 0x10087c0d
mov ecx, dword [ebp - 0x40]
mov eax, dword [ecx + 0x20]
mov dword [0x10209344], eax
mov dword [ecx + 0x20], 0x100845a0
lea eax, [ebp - 0x18]
mov dword [ebp - 0x1c], 0x781aa1a4
push eax
mov ecx, 0x1020e9a0
mov dword [ebp - 0x18], 0x2aafa737
call fcn.1007c980
lea ecx, [ebp - 0x1c]
push ecx
mov ecx, eax
call fcn.1007c960
movq xmm0, qword [eax]
movq qword [ebp - 0x44], xmm0
cmp byte [ebp - 0x44], 0
jne 0x10087c55
mov edx, dword [ebp - 0x40]
mov eax, dword [edx + 0x20]
mov dword [0x1020934c], eax
mov dword [edx + 0x20], 0x10084730
lea eax, [ebp - 0x18]
mov dword [ebp - 0x1c], 0x7ac97631
push eax
mov ecx, 0x1020e9a0
mov dword [ebp - 0x18], 0x72e242a1
call fcn.1007c980
lea ecx, [ebp - 0x1c]
push ecx
mov ecx, eax
call fcn.1007c960
movq xmm0, qword [eax]
movq qword [ebp - 0x44], xmm0
cmp byte [ebp - 0x44], 0
jne 0x10087c9d
mov ecx, dword [ebp - 0x40]
mov eax, dword [ecx + 0x20]
mov dword [0x10209350], eax
mov dword [ecx + 0x20], 0x10084750
cmp byte [0x1020ec54], 0
jne 0x10087d70
push 0x22
xorps xmm0, xmm0
mov dword [ebp - 0x24], 0
push str.B8_________3B_F0_0F_4F_F0_89_5D_FC
lea ecx, [ebp - 0x34]
mov dword [ebp - 0x20], 0
movups xmmword [ebp - 0x34], xmm0
call fcn.1002a660
mov dword [ebp - 4], 0x42
mov eax, dword [0x10208848]
test eax, eax
je 0x10087ce3
mov edx, dword [eax + 0x50]
jmp 0x10087ce5
xor edx, edx
mov eax, dword [0x10208840]
test eax, eax
je 0x10087cf3
mov eax, dword [eax + 0x18]
jmp 0x10087cf5
xor eax, eax
lea ecx, [ebp - 0x34]
push ecx
push eax
lea ecx, [ebp - 0x18]
call fcn.1004f640
mov edi, dword [ebp - 0x18]
add esp, 8
mov ecx, dword [ebp - 0x20]
inc edi
cmp ecx, 0xf
jbe 0x10087d3f
mov edx, dword [ebp - 0x34]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x10087d35
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
jbe 0x10087d35
call dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
push ecx
push edx
call fcn.100ad71e
add esp, 8
mov esi, dword [sym.imp.KERNEL32.dll_VirtualProtect]
lea eax, [ebp - 0x14]
push eax
push 0x40
push 4
push edi
mov dword [ebp - 0x14], 0
call esi
lea eax, [ebp - 0x14]
mov dword [edi], 0x3e
push eax
push dword [ebp - 0x14]
push 4
push edi
call esi
mov byte [0x1020ec54], 1
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
mov ecx, dword [ebp - 0x10]
xor ecx, ebp
call fcn.100ad1bc
mov esp, ebp
pop ebp
ret