Function at 0x100141f6
Capabilities:
Authenticate hmac
Contain obfuscated stackstrings
Hash data using fnv
Inspect section memory permissions

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x10066b4e
mov eax, dword fs:[0]
push eax
sub esp, 0x4f4
mov eax, dword [0x1007b040]
xor eax, ebp
mov dword [ebp - 0x10], eax
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov ecx, dword [ebp + 8]
xor eax, eax
mov dword [ebp - 0x26c], ecx
mov dword [ebp - 0x260], eax
mov dword [ebp - 0x268], eax
test ecx, ecx
je 0x10016e60
mov eax, dword [0x1014964c]
cmp dword [eax + 0x74], 0
je 0x10016e60
cmp dword [eax + 0x78], 0
je 0x10016e60
mov eax, dword [0x1014966c]
mov esi, dword [0x101496b0]
cmp byte [eax + 0x1cf], 0
je 0x10013f1d
mov eax, dword [ecx]
mov eax, dword [eax + 4]
call eax
mov ecx, eax
mov al, byte [ecx]
test al, al
jne 0x10013ecf
mov edi, 0x811c9dc5
jmp 0x10013ee5
movsx eax, al
inc ecx
xor eax, 0x811c9dc5
imul edx, eax, 0x1000193
call fcn.10013db0
mov edi, eax
mov edx, 0xf30c40c9
mov ecx, 0x1006cbf5
call fcn.10013db0
mov ecx, dword [ebp - 0x26c]
cmp edi, eax
jne 0x10013f1d
mov eax, dword [ecx]
push 0
push str.vote_option
mov eax, dword [eax + 0x18]
call eax
mov ecx, dword [ebp - 0x26c]
test eax, eax
jne 0x10013f1a
inc dword [esi]
jmp 0x10013f1d
inc dword [esi + 4]
mov eax, dword [ecx]
mov eax, dword [eax + 4]
call eax
mov cl, byte [eax]
test cl, cl
je case.0x1001419b.8
movsx ecx, cl
xor ecx, 0x811c9dc5
imul edx, ecx, 0x1000193
lea ecx, [eax + 1]
call fcn.10013db0
cmp eax, 0x1b30ddf0
jne case.0x1001419b.8
mov ecx, dword [0x1014964c]
push 0
push str.userid
mov eax, dword [ecx + 0x20]
mov esi, dword [ecx + 0x14]
mov ecx, dword [ebp - 0x26c]
mov dword [ebp - 0x270], eax
mov eax, dword [eax]
mov edi, dword [eax + 0xc]
mov eax, dword [ecx]
mov eax, dword [eax + 0x18]
call eax
mov ecx, dword [esi]
push eax
mov edx, dword [ecx + 0x24]
mov ecx, esi
call edx
mov ecx, dword [ebp - 0x270]
push eax
call edi
mov edx, dword [0x1014964c]
mov dword [ebp - 0x278], eax
push 0
push str.attacker
mov eax, dword [edx + 0x20]
mov esi, dword [edx + 0x14]
mov dword [ebp - 0x270], eax
mov ecx, dword [eax]
mov eax, dword [ebp - 0x26c]
mov edi, dword [ecx + 0xc]
mov ecx, dword [eax]
mov edx, dword [ecx + 0x18]
mov ecx, eax
call edx
mov ecx, dword [esi]
push eax
mov edx, dword [ecx + 0x24]
mov ecx, esi
call edx
mov ecx, dword [ebp - 0x270]
push eax
call edi
cmp dword [ebp - 0x278], 0
mov dword [ebp - 0x270], eax
je 0x10016e60
test eax, eax
je 0x10016e60
mov esi, dword [ebp - 0x26c]
push 0
push str.crit
mov ecx, dword [esi]
mov edx, dword [ecx + 0x14]
mov ecx, esi
call edx
mov ecx, dword [esi]
push 0
push str.damageamount
mov byte [ebp - 0x271], al
mov edx, dword [ecx + 0x18]
mov ecx, esi
call edx
mov ecx, dword [esi]
push 0
push str.health
mov dword [ebp - 0x264], eax
mov edx, dword [ecx + 0x18]
mov ecx, esi
call edx
mov edx, dword [0x1014964c]
mov edi, dword [edx + 0x20]
mov ecx, dword [edi]
mov esi, dword [ecx + 0xc]
mov ecx, dword [edx + 0x14]
mov eax, dword [ecx]
mov eax, dword [eax + 0x30]
call eax
push eax
mov ecx, edi
call esi
cmp dword [ebp - 0x270], eax
jne 0x10014068
mov ecx, dword [ebp - 0x26c]
push 0
push str.weaponid
mov eax, dword [ecx]
call dword [eax + 0x18]
mov edx, dword [0x1014964c]
mov esi, dword [edx + 0x78]
test esi, esi
je case.0x1001419b.8
mov eax, dword fs:[0x2c]
mov ecx, dword [0x10148038]
mov ecx, dword [eax + ecx*4]
mov eax, dword [0x101480c8]
cmp eax, dword [ecx + 4]
jle 0x100140e0
push 0x101480c8
call fcn.10063e80
add esp, 4
cmp dword [0x101480c8], 0xffffffff
jne 0x100140da
push str.m_iItemDefinitionIndex
push str.CEconEntity
mov dword [ebp - 4], 0
call fcn.1005fe70
push 0x101480c8
mov dword [0x10148050], eax
mov dword [ebp - 4], 0xffffffff
call fcn.10063e2f
add esp, 4
mov edx, dword [0x1014964c]
mov eax, dword [0x10148050]
cmp dword [esi + eax], 0x3e6
jne case.0x1001419b.8
mov edi, dword [edx + 0x20]
mov ecx, dword [edx + 0x78]
mov eax, dword [edi]
mov esi, dword [eax + 0x10]
call fcn.10002f40
mov ecx, edi
push dword [eax]
call esi
mov ecx, eax
mov eax, dword [ebp - 0x278]
cmp eax, ecx
jne 0x10016e60
mov esi, dword [ebp - 0x270]
cmp esi, eax
je 0x10016e60
test ecx, ecx
je 0x10016e60
cmp dword [ebp - 0x264], 0x19
jle case.0x1001419b.8
cmp byte [ebp - 0x271], 0
je case.0x1001419b.8
mov eax, dword [0x10149678]
mov byte [eax + 4], 1
mov ecx, dword [0x1014964c]
mov ecx, dword [ecx + 0x14]
call fcn.100026b0
addss xmm0, dword [0x10072c1c]
mov eax, dword [0x10149678]
mov ecx, esi
movss dword [eax + 0xc], xmm0
call fcn.10002d00
test al, al
je case.0x1001419b.8
mov ecx, esi
call fcn.10002b20
cmp dword [eax], 8
je case.0x1001419b.8
mov ecx, esi
call fcn.10002b20
mov eax, dword [eax]
dec eax
cmp eax, 8
ja case.0x1001419b.8
jmp dword [eax*4 + 0x10016ea0]
mov eax, dword [0x10149678]
mov dword [eax + 8], 1
jmp case.0x1001419b.8
mov eax, dword [0x10149678]
mov ecx, esi
mov dword [eax + 8], 1
call fcn.10050a70
test eax, eax
je case.0x1001419b.8
mov ecx, eax
call fcn.10003120
cmp eax, 0xd
jmp 0x100141f4
mov eax, dword [0x10149678]
mov ecx, esi
mov dword [eax + 8], 2
call fcn.10050a70
test eax, eax
je case.0x1001419b.8
mov ecx, eax
call fcn.10003120
cmp eax, 0xf
jne case.0x1001419b.8
mov eax, dword [0x10149678]
mov dword [eax + 8], 0
mov edx, 0xf50c43ef
mov ecx, 0x1006cba9
call fcn.10013db0
mov edi, dword [ebp - 0x26c]
mov esi, eax
mov ecx, edi
mov edx, dword [edi]
mov edx, dword [edx + 4]
call edx
mov ecx, eax
mov dl, byte [ecx]
test dl, dl
jne 0x10014231
mov ecx, 0x811c9dc5
jmp 0x10014247
movsx eax, dl
inc ecx
xor eax, 0x811c9dc5
imul edx, eax, 0x1000193
call fcn.10013db0
mov ecx, eax
cmp ecx, esi
jne 0x100155fc
mov eax, dword [0x1014966c]
cmp byte [eax + 0x1d1], 0
je 0x100155fc
mov ecx, dword [0x1014964c]
push 0
push str.userid
mov eax, dword [ecx + 0x20]
mov esi, dword [ecx + 0x14]
mov ecx, dword [ebp - 0x26c]
mov dword [ebp - 0x264], eax
mov eax, dword [eax]
mov edi, dword [eax + 0xc]
mov eax, dword [ecx]
mov eax, dword [eax + 0x18]
call eax
mov ecx, dword [esi]
push eax
mov edx, dword [ecx + 0x24]
mov ecx, esi
call edx
mov ecx, dword [ebp - 0x264]
push eax
call edi
mov edi, eax
test edi, edi
je 0x100155f6
mov eax, dword [edi + 8]
lea ecx, [edi + 8]
mov eax, dword [eax + 0x24]
call eax
push 0x84
mov esi, eax
lea eax, [ebp - 0x154]
push 0
push eax
call sub.VCRUNTIME140.dll_memset
mov ecx, dword [0x1014964c]
add esp, 0xc
mov edx, dword [ecx + 0x14]
mov ecx, dword [edx]
mov eax, dword [ecx + 0x20]
lea ecx, [ebp - 0x154]
push ecx
push esi
mov ecx, edx
call eax
mov eax, dword [0x10148038]
mov esi, dword fs:[0x2c]
mov ecx, dword [0x1014806c]
mov esi, dword [esi + eax*4]
cmp ecx, dword [esi + 4]
jle 0x10014350
push 0x1014806c
call fcn.10063e80
mov ecx, dword [0x1014806c]
add esp, 4
cmp ecx, 0xffffffff
jne 0x10014350
push str.m_iTeamNum
push str.CBaseEntity
mov dword [ebp - 4], 1
call fcn.1005fe70
push 0x1014806c
mov dword [0x101480b8], eax
mov dword [ebp - 4], 0xffffffff
call fcn.10063e2f
mov ecx, dword [0x1014806c]
add esp, 4
mov eax, dword [0x101480b8]
mov dword [ebp - 0x264], eax
mov eax, dword [0x1014964c]
mov eax, dword [eax + 0x74]
mov dword [ebp - 0x270], eax
cmp ecx, dword [esi + 4]
jle 0x100143b6
push 0x1014806c
call fcn.10063e80
add esp, 4
cmp dword [0x1014806c], 0xffffffff
jne 0x100143b6
push str.m_iTeamNum
push str.CBaseEntity
mov dword [ebp - 4], 2
call fcn.1005fe70
push 0x1014806c
mov dword [0x101480b8], eax
mov dword [ebp - 4], 0xffffffff
call fcn.10063e2f
add esp, 4
mov ecx, dword [ebp - 0x264]
mov edx, dword [ebp - 0x270]
mov eax, dword [0x101480b8]
mov ecx, dword [ecx + edi]
cmp ecx, dword [edx + eax]
mov edx, str._aFFFFFF
je 0x10014413
push str.ENEMY
lea ecx, [ebp - 0x398]
call fcn.10016ff0
mov dword [ebp - 4], 3
lea ecx, [ebp - 0x3c8]
push str._a404040
mov edx, eax
mov dword [ebp - 0x268], 1
call fcn.10017100
add esp, 8
mov ecx, eax
mov eax, 3
jmp 0x10014450
push str.TEAM
lea ecx, [ebp - 0x4a0]
call fcn.10016ff0
mov dword [ebp - 4], 5
lea ecx, [ebp - 0x488]
push str._a404040
mov edx, eax
mov dword [ebp - 0x268], 4
call fcn.10017100
mov ecx, eax
add esp, 8
mov eax, 0xc
movups xmm0, xmmword [ecx]
mov dword [ebp - 0x260], eax
movups xmmword [ebp - 0xb8], xmm0
movq xmm0, qword [ecx + 0x10]
movq qword [ebp - 0xa8], xmm0
mov dword [ebp - 4], 6
mov dword [ecx + 0x10], 0
mov dword [ecx + 0x14], 0xf
mov byte [ecx], 0
test al, 8
je 0x100144a3
and eax, 0xfffffff7
lea ecx, [ebp - 0x488]
mov dword [ebp - 0x260], eax
call fcn.10006810
mov eax, dword [ebp - 0x260]
test al, 4
je 0x100144c1
and eax, 0xfffffffb
lea ecx, [ebp - 0x4a0]
mov dword [ebp - 0x260], eax
call fcn.10006810
mov eax, dword [ebp - 0x260]
test al, 2
je 0x100144df
and eax, 0xfffffffd
lea ecx, [ebp - 0x3c8]
mov dword [ebp - 0x260], eax
call fcn.10006810
mov eax, dword [ebp - 0x260]
mov byte [ebp - 4], 9
test al, 1
je 0x100144fb
and eax, 0xfffffffe
lea ecx, [ebp - 0x398]
mov dword [ebp - 0x260], eax
call fcn.10006810
mov ecx, dword [0x101472c4]
mov esi, 0x7fffffff
mov eax, esi
sub eax, ecx
cmp eax, 7
jb 0x10016e7d
cmp dword [0x101472c8], 0xf
mov eax, 0x101472b4
push 7
cmova eax, dword [0x101472b4]
push str.CHEATER
push ecx
push eax
push ecx
push dword [ebp - 0x264]
lea ecx, [ebp - 0x28]
call fcn.10017310
mov edi, dword [ebp - 0x260]
or edi, 0x100000
push str._a404040
lea edx, [ebp - 0x28]
mov byte [ebp - 4], 0xa
lea ecx, [ebp - 0x40]
call fcn.10017100
add esp, 4
mov byte [ebp - 4], 0xc
mov ecx, dword [ebp - 0x14]
cmp ecx, 0xf
jbe 0x1001459b
mov edx, dword [ebp - 0x28]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x10014591
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
jbe 0x10014591
call dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
push ecx
push edx
call fcn.10064348
add esp, 8
lea ecx, [ebp - 0x154]
mov dword [ebp - 0x18], 0
mov dword [ebp - 0x14], 0xf
lea edx, [ecx + 1]
mov byte [ebp - 0x28], 0
mov al, byte [ecx]
inc ecx
test al, al
jne 0x100145b6
sub ecx, edx
mov eax, esi
mov edx, dword [0x10147294]
sub eax, edx
cmp eax, ecx
jb 0x10016e82
cmp dword [0x10147298], 0xf
mov eax, str._a0095FF
push ecx
cmova eax, dword [str._a0095FF]
lea ecx, [ebp - 0x154]
push ecx
push edx
push eax
push ecx
push dword [ebp - 0x264]
lea ecx, [ebp - 0x290]
call fcn.10017310
or edi, 0x200000
push str._aFFFFFF
lea edx, [ebp - 0x290]
mov byte [ebp - 4], 0xd
lea ecx, [ebp - 0xd0]
call fcn.10017100
add esp, 4
mov byte [ebp - 4], 0xf
mov ecx, dword [ebp - 0x27c]
cmp ecx, 0xf
jbe 0x10014663
mov edx, dword [ebp - 0x290]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x10014659
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
jbe 0x10014659
call dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
push ecx
push edx
call fcn.10064348
add esp, 8
lea ecx, [ebp - 0x130]
mov dword [ebp - 0x280], 0
mov dword [ebp - 0x27c], 0xf
lea edx, [ecx + 1]
mov byte [ebp - 0x290], 0
mov al, byte [ecx]
inc ecx
test al, al
jne 0x10014687
sub ecx, edx
mov eax, esi
mov edx, dword [0x10147294]
sub eax, edx
cmp eax, ecx
jb 0x10016e87
cmp dword [0x10147298], 0xf
mov eax, str._a0095FF
push ecx
cmova eax, dword [str._a0095FF]
lea ecx, [ebp - 0x130]
push ecx
push edx
push eax
push ecx
push dword [ebp - 0x264]
lea ecx, [ebp - 0x28]
call fcn.10017310
or edi, 0x400000
push str._aFFFFFF
lea edx, [ebp - 0x28]
mov byte [ebp - 4], 0x10
lea ecx, [ebp - 0x88]
call fcn.10017100
add esp, 4
mov byte [ebp - 4], 0x12
mov ecx, dword [ebp - 0x14]
cmp ecx, 0xf
jbe 0x10014728
mov edx, dword [ebp - 0x28]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x1001471e
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
jbe 0x1001471e
call dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
push ecx
push edx
call fcn.10064348
add esp, 8
mov ecx, dword [0x10147264]
mov eax, esi
sub eax, ecx
mov dword [ebp - 0x18], 0
mov dword [ebp - 0x14], 0xf
mov byte [ebp - 0x28], 0
cmp eax, 1
jb 0x10016e8c
cmp dword [0x10147268], 0xf
mov eax, str._a404040
push 1
cmova eax, dword [str._a404040]
push 0x1006cc80
push ecx
push eax
push ecx
push dword [ebp - 0x264]
lea ecx, [ebp - 0x4d0]
call fcn.10017310
or edi, 0x800000
push str._aFF4141
lea edx, [ebp - 0x4d0]
mov byte [ebp - 4], 0x13
lea ecx, [ebp - 0x2c0]
call fcn.10017100
mov ecx, eax
add esp, 4
mov dword [ebp - 0x264], ecx
mov byte [ebp - 4], 0x14
mov esi, dword [ecx + 0x14]
mov eax, esi
mov edx, dword [ecx + 0x10]
sub eax, edx
cmp eax, 0xd
jb 0x100147e7
lea eax, [edx + 0xd]
mov dword [ecx + 0x10], eax
mov eax, ecx
cmp esi, 0xf
jbe 0x100147c8
mov eax, dword [ecx]
push 0xd
lea esi, [eax + edx]
push str.spook953paste
push esi
call sub.VCRUNTIME140.dll_memmove
mov eax, dword [ebp - 0x264]
add esp, 0xc
mov byte [esi + 0xd], 0
jmp 0x100147fb
push 0xd
push str.spook953paste
push dword [ebp - 0x264]
push 0xd
call fcn.100171b0
mov dword [ebp - 0x418], 0
xorps xmm0, xmm0
movups xmmword [ebp - 0x428], xmm0
mov dword [ebp - 0x414], 0
or edi, 0x1000000
movups xmm0, xmmword [eax]
movups xmmword [ebp - 0x428], xmm0
movq xmm0, qword [eax + 0x10]
movq qword [ebp - 0x418], xmm0
mov dword [eax + 0x10], 0
mov dword [eax + 0x14], 0xf
mov byte [eax], 0
push str._a404040
lea edx, [ebp - 0x428]
mov byte [ebp - 4], 0x15
lea ecx, [ebp - 0x2a8]
call fcn.10017100
add esp, 4
mov ecx, eax
mov byte [ebp - 4], 0x16
mov esi, dword [ecx + 0x14]
mov eax, esi
mov edx, dword [ecx + 0x10]
sub eax, edx
cmp eax, 4
jb 0x10014896
lea eax, [edx + 4]
mov dword [ecx + 0x10], eax
mov eax, ecx
cmp esi, 0xf
jbe 0x10014888
mov eax, dword [ecx]
mov dword [eax + edx], 0x5b20205d
mov byte [eax + edx + 4], 0
jmp 0x100148ac
push 4
push str.____
push dword [ebp - 0x264]
push 4
call fcn.100171b0
mov ecx, eax
mov dword [ebp - 0x400], 0
xorps xmm0, xmm0
movups xmmword [ebp - 0x410], xmm0
mov dword [ebp - 0x3fc], 0
or edi, 0x2000000
movups xmm0, xmmword [ecx]
movups xmmword [ebp - 0x410], xmm0
movq xmm0, qword [ecx + 0x10]
movq qword [ebp - 0x400], xmm0
mov dword [ecx + 0x10], 0
mov dword [ecx + 0x14], 0xf
mov byte [ecx], 0
lea eax, [ebp - 0xb8]
mov byte [ebp - 4], 0x17
push eax
lea edx, [ebp - 0x410]
lea ecx, [ebp - 0x3b0]
call fcn.10017100
add esp, 4
mov ecx, eax
mov byte [ebp - 4], 0x18
mov esi, dword [ecx + 0x14]
mov eax, esi
mov edx, dword [ecx + 0x10]
sub eax, edx
cmp eax, 2
jb 0x1001494b
lea eax, [edx + 2]
mov dword [ecx + 0x10], eax
mov eax, ecx
cmp esi, 0xf
jbe 0x1001493b
mov eax, dword [ecx]
mov esi, 0x205d
mov word [eax + edx], si
mov byte [eax + edx + 2], 0
jmp 0x10014961
push 2
push 0x1006cc64
push dword [ebp - 0x264]
push 2
call fcn.100171b0
mov ecx, eax
mov dword [ebp - 0x3e8], 0
xorps xmm0, xmm0
movups xmmword [ebp - 0x3f8], xmm0
mov dword [ebp - 0x3e4], 0
or edi, 0x4000000
movups xmm0, xmmword [ecx]
movups xmmword [ebp - 0x3f8], xmm0
movq xmm0, qword [ecx + 0x10]
movq qword [ebp - 0x3e8], xmm0
mov dword [ecx + 0x10], 0
mov dword [ecx + 0x14], 0xf
mov byte [ecx], 0
lea eax, [ebp - 0xd0]
mov byte [ebp - 4], 0x19
push eax
lea edx, [ebp - 0x3f8]
lea ecx, [ebp - 0x4e8]
call fcn.10017100
mov ecx, eax
add esp, 4
mov dword [ebp - 0x264], ecx
mov byte [ebp - 4], 0x1a
mov esi, dword [ecx + 0x14]
mov eax, esi
mov edx, dword [ecx + 0x10]
sub eax, edx
cmp eax, 0xe
jb 0x10014a15
lea eax, [edx + 0xe]
mov dword [ecx + 0x10], eax
mov eax, ecx
cmp esi, 0xf
jbe 0x100149f6
mov eax, dword [ecx]
push 0xe
lea esi, [eax + edx]
push str._has_joined.__
push esi
call sub.VCRUNTIME140.dll_memmove
mov eax, dword [ebp - 0x264]
add esp, 0xc
mov byte [esi + 0xe], 0
jmp 0x10014a29
push 0xe
push str._has_joined.__
push dword [ebp - 0x264]
push 0xe
call fcn.100171b0
mov dword [ebp - 0x3d0], 0
xorps xmm0, xmm0
movups xmmword [ebp - 0x3e0], xmm0
mov dword [ebp - 0x3cc], 0
or edi, 0x8000000
movups xmm0, xmmword [eax]
movups xmmword [ebp - 0x3e0], xmm0
movq xmm0, qword [eax + 0x10]
movq qword [ebp - 0x3d0], xmm0
mov dword [eax + 0x10], 0
mov dword [eax + 0x14], 0xf
mov byte [eax], 0
lea eax, [ebp - 0x88]
mov byte [ebp - 4], 0x1b
push eax
lea edx, [ebp - 0x3e0]
lea ecx, [ebp - 0x500]
call fcn.10017100
add esp, 4
mov ecx, eax
mov byte [ebp - 4], 0x1c
mov esi, dword [ecx + 0x14]
mov eax, esi
mov edx, dword [ecx + 0x10]
sub eax, edx
cmp eax, 1
jb 0x10014ac0
lea eax, [edx + 1]
mov dword [ecx + 0x10], eax
mov eax, ecx
cmp esi, 0xf
jbe 0x10014ab8
mov eax, dword [ecx]
mov word [eax + edx], 0x5d
jmp 0x10014ad6
push 1
push 0x1006cc50
push dword [ebp - 0x264]
push 1
call fcn.100171b0
mov ecx, eax
mov dword [ebp - 0x48], 0
xorps xmm0, xmm0
movups xmmword [ebp - 0x58], xmm0
mov dword [ebp - 0x44], 0
or edi, 0x10000000
movups xmm0, xmmword [ecx]
movups xmmword [ebp - 0x58], xmm0
movq xmm0, qword [ecx + 0x10]
movq qword [ebp - 0x48], xmm0
mov dword [ecx + 0x10], 0
mov dword [ecx + 0x14], 0xf
mov byte [ecx], 0
mov byte [ebp - 4], 0x1e
mov ecx, dword [ebp - 0x4ec]
cmp ecx, 0xf
jbe 0x10014b51
mov edx, dword [ebp - 0x500]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x10014b47
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x10014e60
push ecx
push edx
call fcn.10064348
add esp, 8
mov dword [ebp - 0x4f0], 0
mov dword [ebp - 0x4ec], 0xf
mov byte [ebp - 0x500], 0
mov byte [ebp - 4], 0x1f
mov ecx, dword [ebp - 0x3cc]
cmp ecx, 0xf
jbe 0x10014baa
mov edx, dword [ebp - 0x3e0]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x10014ba0
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x10014e60
push ecx
push edx
call fcn.10064348
add esp, 8
mov dword [ebp - 0x3d0], 0
mov dword [ebp - 0x3cc], 0xf
mov byte [ebp - 0x3e0], 0
mov byte [ebp - 4], 0x20
mov ecx, dword [ebp - 0x4d4]
cmp ecx, 0xf
jbe 0x10014c03
mov edx, dword [ebp - 0x4e8]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x10014bf9
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x10014e60
push ecx
push edx
call fcn.10064348
add esp, 8
mov dword [ebp - 0x4d8], 0
mov dword [ebp - 0x4d4], 0xf
mov byte [ebp - 0x4e8], 0
mov byte [ebp - 4], 0x21
mov ecx, dword [ebp - 0x3e4]
cmp ecx, 0xf
jbe 0x10014c5c
mov edx, dword [ebp - 0x3f8]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x10014c52
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x10014e60
push ecx
push edx
call fcn.10064348
add esp, 8
mov dword [ebp - 0x3e8], 0
mov dword [ebp - 0x3e4], 0xf
mov byte [ebp - 0x3f8], 0
mov byte [ebp - 4], 0x22
mov ecx, dword [ebp - 0x39c]
cmp ecx, 0xf
jbe 0x10014cb5
mov edx, dword [ebp - 0x3b0]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x10014cab
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x10014e60
push ecx
push edx
call fcn.10064348
add esp, 8
mov dword [ebp - 0x3a0], 0
mov dword [ebp - 0x39c], 0xf
mov byte [ebp - 0x3b0], 0
mov byte [ebp - 4], 0x23
mov ecx, dword [ebp - 0x3fc]
cmp ecx, 0xf
jbe 0x10014d0e
mov edx, dword [ebp - 0x410]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x10014d04
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x10014e60
push ecx
push edx
call fcn.10064348
add esp, 8
mov dword [ebp - 0x400], 0
mov dword [ebp - 0x3fc], 0xf
mov byte [ebp - 0x410], 0
mov byte [ebp - 4], 0x24
mov ecx, dword [ebp - 0x294]
cmp ecx, 0xf
jbe 0x10014d67
mov edx, dword [ebp - 0x2a8]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x10014d5d
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x10014e60
push ecx
push edx
call fcn.10064348
add esp, 8
mov dword [ebp - 0x298], 0
mov dword [ebp - 0x294], 0xf
mov byte [ebp - 0x2a8], 0
mov byte [ebp - 4], 0x25
mov ecx, dword [ebp - 0x414]
cmp ecx, 0xf
jbe 0x10014dc0
mov edx, dword [ebp - 0x428]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x10014db6
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x10014e60
push ecx
push edx
call fcn.10064348
add esp, 8
mov dword [ebp - 0x418], 0
mov dword [ebp - 0x414], 0xf
mov byte [ebp - 0x428], 0
mov byte [ebp - 4], 0x26
mov ecx, dword [ebp - 0x2ac]
cmp ecx, 0xf
jbe 0x10014e15
mov edx, dword [ebp - 0x2c0]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x10014e0b
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x10014e60
push ecx
push edx
call fcn.10064348
add esp, 8
mov dword [ebp - 0x2b0], 0
mov dword [ebp - 0x2ac], 0xf
mov byte [ebp - 0x2c0], 0
mov byte [ebp - 4], 0x27
mov ecx, dword [ebp - 0x4bc]
cmp ecx, 0xf
jbe 0x10014e70
mov edx, dword [ebp - 0x4d0]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x10014e66
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
jbe 0x10014e66
call dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
push ecx
push edx
call fcn.10064348
add esp, 8
mov ecx, dword [0x10147264]
mov eax, 0x7fffffff
sub eax, ecx
mov dword [ebp - 0x4c0], 0
mov dword [ebp - 0x4bc], 0xf
mov byte [ebp - 0x4d0], 0
cmp eax, 1
jb 0x10016e91
cmp dword [0x10147268], 0xf
mov eax, str._a404040
push 1
cmova eax, dword [str._a404040]
push 0x1006cc80
push ecx
push eax
push ecx
push dword [ebp - 0x264]
lea ecx, [ebp - 0x380]
call fcn.10017310
or edi, 0x20000000
push str._aFF4141
lea edx, [ebp - 0x380]
mov byte [ebp - 4], 0x28
lea ecx, [ebp - 0x308]
call fcn.10017100
mov ecx, eax
add esp, 4
mov dword [ebp - 0x264], ecx
mov byte [ebp - 4], 0x29
mov esi, dword [ecx + 0x14]
mov eax, esi
mov edx, dword [ecx + 0x10]
sub eax, edx
cmp eax, 0xd
jb 0x10014f3b
lea eax, [edx + 0xd]
mov dword [ecx + 0x10], eax
mov eax, ecx
cmp esi, 0xf
jbe 0x10014f1c
mov eax, dword [ecx]
push 0xd
lea esi, [eax + edx]
push str.spook953paste
push esi
call sub.VCRUNTIME140.dll_memmove
mov eax, dword [ebp - 0x264]
add esp, 0xc
mov byte [esi + 0xd], 0
jmp 0x10014f4f
push 0xd
push str.spook953paste
push dword [ebp - 0x264]
push 0xd
call fcn.100171b0
mov dword [ebp - 0x448], 0
xorps xmm0, xmm0
movups xmmword [ebp - 0x458], xmm0
mov dword [ebp - 0x444], 0
or edi, 0x40000000
movups xmm0, xmmword [eax]
movups xmmword [ebp - 0x458], xmm0
movq xmm0, qword [eax + 0x10]
movq qword [ebp - 0x448], xmm0
mov dword [eax + 0x10], 0
mov dword [eax + 0x14], 0xf
mov byte [eax], 0
push str._a404040
lea edx, [ebp - 0x458]
mov byte [ebp - 4], 0x2a
lea ecx, [ebp - 0x2f0]
call fcn.10017100
add esp, 4
mov ecx, eax
mov byte [ebp - 4], 0x2b
mov esi, dword [ecx + 0x14]
mov eax, esi
mov edx, dword [ecx + 0x10]
sub eax, edx
cmp eax, 2
jb 0x10014fec
lea eax, [edx + 2]
mov dword [ecx + 0x10], eax
mov eax, ecx
cmp esi, 0xf
jbe 0x10014fdc
mov eax, dword [ecx]
mov esi, 0x205d
mov word [eax + edx], si
mov byte [eax + edx + 2], 0
jmp 0x10015002
push 2
push 0x1006cc64
push dword [ebp - 0x264]
push 2
call fcn.100171b0
mov ecx, eax
mov dword [ebp - 0x460], 0
xorps xmm0, xmm0
movups xmmword [ebp - 0x470], xmm0
mov dword [ebp - 0x45c], 0
or edi, 0x80000000
movups xmm0, xmmword [ecx]
movups xmmword [ebp - 0x470], xmm0
movq xmm0, qword [ecx + 0x10]
movq qword [ebp - 0x460], xmm0
mov dword [ecx + 0x10], 0
mov dword [ecx + 0x14], 0xf
mov byte [ecx], 0
mov dword [ebp - 0x260], edi
mov dword [ebp - 0x268], edi
lea eax, [ebp - 0xd0]
mov byte [ebp - 4], 0x2c
push eax
lea edx, [ebp - 0x470]
lea ecx, [ebp - 0x368]
call fcn.10017100
add esp, 4
mov edi, eax
mov byte [ebp - 4], 0x2d
mov edx, dword [edi + 0x14]
mov eax, edx
mov ecx, dword [edi + 0x10]
sub eax, ecx
cmp eax, 0xb
jb 0x100150b6
lea eax, [ecx + 0xb]
mov dword [edi + 0x10], eax
mov eax, edi
cmp edx, 0xf
jbe 0x1001509d
mov eax, dword [edi]
push 0xb
lea esi, [eax + ecx]
push str.is_a_known
push esi
call sub.VCRUNTIME140.dll_memmove
add esp, 0xc
mov byte [esi + 0xb], 0
jmp 0x100150ce
push 0xb
push str.is_a_known
push dword [ebp - 0x264]
mov ecx, edi
push 0xb
call fcn.100171b0
mov edi, eax
xorps xmm0, xmm0
mov dword [ebp - 0x430], 0
movups xmmword [ebp - 0x440], xmm0
mov dword [ebp - 0x42c], 0
movups xmm0, xmmword [edi]
movups xmmword [ebp - 0x440], xmm0
movq xmm0, qword [edi + 0x10]
movq qword [ebp - 0x430], xmm0
mov dword [edi + 0x10], 0
lea eax, [ebp - 0x40]
mov dword [edi + 0x14], 0xf
lea edx, [ebp - 0x440]
mov byte [edi], 0
lea ecx, [ebp - 0x2d8]
push eax
mov byte [ebp - 4], 0x2e
call fcn.10017100
add esp, 4
mov ecx, eax
mov byte [ebp - 4], 0x2f
mov esi, dword [ecx + 0x14]
mov eax, esi
mov edx, dword [ecx + 0x10]
sub eax, edx
cmp eax, 1
jb 0x1001515c
lea eax, [edx + 1]
mov dword [ecx + 0x10], eax
mov eax, ecx
cmp esi, 0xf
jbe 0x10015154
mov eax, dword [ecx]
mov word [eax + edx], 0x21
jmp 0x10015172
push 1
push 0x1006cc84
push dword [ebp - 0x264]
push 1
call fcn.100171b0
mov ecx, eax
movups xmm0, xmmword [ecx]
movups xmmword [ebp - 0xa0], xmm0
movq xmm0, qword [ecx + 0x10]
movq qword [ebp - 0x90], xmm0
mov byte [ebp - 4], 0x31
mov dword [ecx + 0x10], 0
mov dword [ecx + 0x14], 0xf
mov byte [ecx], 0
mov ecx, dword [ebp - 0x2c4]
cmp ecx, 0xf
jbe 0x100151d8
mov edx, dword [ebp - 0x2d8]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x100151ce
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x10015435
push ecx
push edx
call fcn.10064348
add esp, 8
mov dword [ebp - 0x2c8], 0
mov dword [ebp - 0x2c4], 0xf
mov byte [ebp - 0x2d8], 0
mov byte [ebp - 4], 0x32
mov ecx, dword [ebp - 0x42c]
cmp ecx, 0xf
jbe 0x10015231
mov edx, dword [ebp - 0x440]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x10015227
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x10015435
push ecx
push edx
call fcn.10064348
add esp, 8
mov dword [ebp - 0x430], 0
mov dword [ebp - 0x42c], 0xf
mov byte [ebp - 0x440], 0
mov byte [ebp - 4], 0x33
mov ecx, dword [ebp - 0x354]
cmp ecx, 0xf
jbe 0x1001528a
mov edx, dword [ebp - 0x368]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x10015280
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x10015435
push ecx
push edx
call fcn.10064348
add esp, 8
mov dword [ebp - 0x358], 0
mov dword [ebp - 0x354], 0xf
mov byte [ebp - 0x368], 0
mov byte [ebp - 4], 0x34
mov ecx, dword [ebp - 0x45c]
cmp ecx, 0xf
jbe 0x100152e3
mov edx, dword [ebp - 0x470]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x100152d9
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x10015435
push ecx
push edx
call fcn.10064348
add esp, 8
mov dword [ebp - 0x460], 0
mov dword [ebp - 0x45c], 0xf
mov byte [ebp - 0x470], 0
mov byte [ebp - 4], 0x35
mov ecx, dword [ebp - 0x2dc]
cmp ecx, 0xf
jbe 0x1001533c
mov edx, dword [ebp - 0x2f0]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x10015332
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x10015435
push ecx
push edx
call fcn.10064348
add esp, 8
mov dword [ebp - 0x2e0], 0
mov dword [ebp - 0x2dc], 0xf
mov byte [ebp - 0x2f0], 0
mov byte [ebp - 4], 0x36
mov ecx, dword [ebp - 0x444]
cmp ecx, 0xf
jbe 0x10015395
mov edx, dword [ebp - 0x458]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x1001538b
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x10015435
push ecx
push edx
call fcn.10064348
add esp, 8
mov dword [ebp - 0x448], 0
mov dword [ebp - 0x444], 0xf
mov byte [ebp - 0x458], 0
mov byte [ebp - 4], 0x37
mov ecx, dword [ebp - 0x2f4]
cmp ecx, 0xf
jbe 0x100153ea
mov edx, dword [ebp - 0x308]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x100153e0
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x10015435
push ecx
push edx
call fcn.10064348
add esp, 8
mov dword [ebp - 0x2f8], 0
mov dword [ebp - 0x2f4], 0xf
mov byte [ebp - 0x308], 0
mov byte [ebp - 4], 0x38
mov ecx, dword [ebp - 0x36c]
cmp ecx, 0xf
jbe 0x10015445
mov edx, dword [ebp - 0x380]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x1001543b
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
jbe 0x1001543b
call dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
push ecx
push edx
call fcn.10064348
add esp, 8
mov eax, dword [0x1014964c]
cmp dword [ebp - 0x44], 0xf
mov dword [ebp - 0x370], 0
mov dword [ebp - 0x36c], 0xf
mov eax, dword [eax + 4]
mov byte [ebp - 0x380], 0
mov ecx, dword [eax + 0x1c]
lea eax, [ebp - 0x58]
cmova eax, dword [ebp - 0x58]
push eax
push 0
push ecx
call fcn.10013d60
mov byte [ebp - 4], 0x27
add esp, 0xc
mov ecx, dword [ebp - 0x8c]
cmp ecx, 0xf
jbe 0x100154c0
mov edx, dword [ebp - 0xa0]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x100154b6
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x100155e6
push ecx
push edx
call fcn.10064348
add esp, 8
mov byte [ebp - 4], 0x12
mov ecx, dword [ebp - 0x44]
cmp ecx, 0xf
jbe 0x100154f8
mov edx, dword [ebp - 0x58]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x100154ee
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x100155e6
push ecx
push edx
call fcn.10064348
add esp, 8
mov byte [ebp - 4], 0xf
mov ecx, dword [ebp - 0x74]
mov dword [ebp - 0x48], 0
mov dword [ebp - 0x44], 0xf
mov byte [ebp - 0x58], 0
cmp ecx, 0xf
jbe 0x10015545
mov edx, dword [ebp - 0x88]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x1001553b
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x100155e6
push ecx
push edx
call fcn.10064348
add esp, 8
mov byte [ebp - 4], 0xc
mov ecx, dword [ebp - 0xbc]
cmp ecx, 0xf
jbe 0x1001557f
mov edx, dword [ebp - 0xd0]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x10015575
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x100155e6
push ecx
push edx
call fcn.10064348
add esp, 8
mov byte [ebp - 4], 9
mov ecx, dword [ebp - 0x2c]
cmp ecx, 0xf
jbe 0x100155b3
mov edx, dword [ebp - 0x40]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x100155a9
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x100155e6
push ecx
push edx
call fcn.10064348
add esp, 8
mov dword [ebp - 4], 0xffffffff
mov ecx, dword [ebp - 0xa4]
cmp ecx, 0xf
jbe 0x100155f6
mov edx, dword [ebp - 0xb8]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x100155ec
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
jbe 0x100155ec
call dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
push ecx
push edx
call fcn.10064348
add esp, 8
mov edi, dword [ebp - 0x26c]
mov eax, dword [edi]
mov ecx, edi
mov eax, dword [eax + 4]
call eax
mov ecx, eax
mov al, byte [ecx]
test al, al
jne 0x10015614
mov esi, 0x811c9dc5
jmp 0x1001562a
movsx eax, al
inc ecx
xor eax, 0x811c9dc5
imul edx, eax, 0x1000193
call fcn.10013db0
mov esi, eax
mov edx, 0xf50c43ef
mov ecx, 0x1006cbb9
call fcn.10013db0
cmp esi, eax
jne 0x10015c7a
mov eax, dword [0x1014966c]
cmp byte [eax + 0x1d2], 0
je 0x10015c7a
mov ecx, dword [0x1014964c]
push 0
push str.userid
mov eax, dword [ecx + 0x20]
mov esi, dword [ecx + 0x14]
mov ecx, dword [ebp - 0x26c]
mov dword [ebp - 0x264], eax
mov eax, dword [eax]
mov edi, dword [eax + 0xc]
mov eax, dword [ecx]
mov eax, dword [eax + 0x18]
call eax
mov ecx, dword [esi]
push eax
mov edx, dword [ecx + 0x24]
mov ecx, esi
call edx
mov ecx, dword [ebp - 0x264]
push eax
call edi
mov edi, dword [ebp - 0x26c]
test eax, eax
je 0x10015c7a
mov eax, dword [edi]
mov ecx, edi
push 0x1006c464
push str.name
mov eax, dword [eax + 0x20]
call eax
mov edx, eax
mov dword [ebp - 0x264], eax
lea eax, [edx + 1]
nop dword [eax]
mov cl, byte [edx]
inc edx
test cl, cl
jne 0x100156c0
mov ecx, dword [0x10147294]
sub edx, eax
mov esi, 0x7fffffff
mov eax, esi
sub eax, ecx
cmp eax, edx
jb 0x10016e96
cmp dword [0x10147298], 0xf
mov eax, str._a0095FF
push edx
push dword [ebp - 0x264]
cmova eax, dword [str._a0095FF]
push ecx
push eax
push ecx
push dword [ebp - 0x264]
lea ecx, [ebp - 0x380]
call fcn.10017310
push str._aFFFFFF
lea edx, [ebp - 0x380]
mov dword [ebp - 4], 0x39
lea ecx, [ebp - 0x40]
call fcn.10017100
add esp, 4
mov byte [ebp - 4], 0x3b
mov ecx, dword [ebp - 0x36c]
cmp ecx, 0xf
jbe 0x1001576b
mov edx, dword [ebp - 0x380]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x10015761
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
jbe 0x10015761
call dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
push ecx
push edx
call fcn.10064348
add esp, 8
mov ecx, dword [0x10147264]
sub esi, ecx
mov dword [ebp - 0x370], 0
mov dword [ebp - 0x36c], 0xf
mov byte [ebp - 0x380], 0
cmp esi, 1
jb 0x10016e9b
cmp dword [0x10147268], 0xf
mov eax, str._a404040
push 1
cmova eax, dword [str._a404040]
push 0x1006cc80
push ecx
push eax
push ecx
push dword [ebp - 0x264]
lea ecx, [ebp - 0x4b8]
call fcn.10017310
push str._aFF4141
lea edx, [ebp - 0x4b8]
mov byte [ebp - 4], 0x3c
lea ecx, [ebp - 0x350]
call fcn.10017100
mov ecx, eax
add esp, 4
mov dword [ebp - 0x264], ecx
mov byte [ebp - 4], 0x3d
mov esi, dword [ecx + 0x14]
mov eax, esi
mov edx, dword [ecx + 0x10]
sub eax, edx
cmp eax, 0xd
jb 0x1001582b
lea eax, [edx + 0xd]
mov dword [ecx + 0x10], eax
mov eax, ecx
cmp esi, 0xf
jbe 0x1001580c
mov eax, dword [ecx]
push 0xd
lea esi, [eax + edx]
push str.spook953paste
push esi
call sub.VCRUNTIME140.dll_memmove
mov eax, dword [ebp - 0x264]
add esp, 0xc
mov byte [esi + 0xd], 0
jmp 0x1001583f
push 0xd
push str.spook953paste
push dword [ebp - 0x264]
push 0xd
call fcn.100171b0
xorps xmm0, xmm0
mov dword [ebp - 0x18], 0
movups xmmword [ebp - 0x28], xmm0
mov dword [ebp - 0x14], 0
movups xmm0, xmmword [eax]
movups xmmword [ebp - 0x28], xmm0
movq xmm0, qword [eax + 0x10]
movq qword [ebp - 0x18], xmm0
mov dword [eax + 0x10], 0
lea edx, [ebp - 0x28]
mov dword [eax + 0x14], 0xf
lea ecx, [ebp - 0x338]
mov byte [eax], 0
push str._a404040
mov byte [ebp - 4], 0x3e
call fcn.10017100
add esp, 4
mov ecx, eax
mov byte [ebp - 4], 0x3f
mov esi, dword [ecx + 0x14]
mov eax, esi
mov edx, dword [ecx + 0x10]
sub eax, edx
cmp eax, 2
jb 0x100158c4
lea eax, [edx + 2]
mov dword [ecx + 0x10], eax
mov eax, ecx
cmp esi, 0xf
jbe 0x100158b4
mov eax, dword [ecx]
mov esi, 0x205d
mov word [eax + edx], si
mov byte [eax + edx + 2], 0
jmp 0x100158da
push 2
push 0x1006cc64
push dword [ebp - 0x264]
push 2
call fcn.100171b0
mov ecx, eax
xorps xmm0, xmm0
mov dword [ebp - 0x280], 0
movups xmmword [ebp - 0x290], xmm0
mov dword [ebp - 0x27c], 0
movups xmm0, xmmword [ecx]
movups xmmword [ebp - 0x290], xmm0
movq xmm0, qword [ecx + 0x10]
movq qword [ebp - 0x280], xmm0
mov dword [ecx + 0x10], 0
lea eax, [ebp - 0x40]
mov dword [ecx + 0x14], 0xf
lea edx, [ebp - 0x290]
mov byte [ecx], 0
lea ecx, [ebp - 0x320]
push eax
mov byte [ebp - 4], 0x40
call fcn.10017100
mov ecx, eax
add esp, 4
mov dword [ebp - 0x264], ecx
mov byte [ebp - 4], 0x41
mov esi, dword [ecx + 0x14]
mov eax, esi
mov edx, dword [ecx + 0x10]
sub eax, edx
cmp eax, 0xa
jb 0x10015985
lea eax, [edx + 0xa]
mov dword [ecx + 0x10], eax
mov eax, ecx
cmp esi, 0xf
jbe 0x10015966
mov eax, dword [ecx]
push 0xa
lea esi, [eax + edx]
push str._has_left.
push esi
call sub.VCRUNTIME140.dll_memmove
mov eax, dword [ebp - 0x264]
add esp, 0xc
mov byte [esi + 0xa], 0
jmp 0x10015999
push 0xa
push str._has_left.
push dword [ebp - 0x264]
push 0xa
call fcn.100171b0
xorps xmm0, xmm0
mov dword [ebp - 0x60], 0
movups xmmword [ebp - 0x70], xmm0
mov dword [ebp - 0x5c], 0
movups xmm0, xmmword [eax]
movups xmmword [ebp - 0x70], xmm0
movq xmm0, qword [eax + 0x10]
movq qword [ebp - 0x60], xmm0
mov byte [ebp - 4], 0x43
mov dword [eax + 0x10], 0
mov dword [eax + 0x14], 0xf
mov byte [eax], 0
mov ecx, dword [ebp - 0x30c]
cmp ecx, 0xf
jbe 0x10015a0e
mov edx, dword [ebp - 0x320]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x10015a04
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x10015baa
push ecx
push edx
call fcn.10064348
add esp, 8
mov dword [ebp - 0x310], 0
mov dword [ebp - 0x30c], 0xf
mov byte [ebp - 0x320], 0
mov byte [ebp - 4], 0x44
mov ecx, dword [ebp - 0x27c]
cmp ecx, 0xf
jbe 0x10015a67
mov edx, dword [ebp - 0x290]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x10015a5d
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x10015baa
push ecx
push edx
call fcn.10064348
add esp, 8
mov dword [ebp - 0x280], 0
mov dword [ebp - 0x27c], 0xf
mov byte [ebp - 0x290], 0
mov byte [ebp - 4], 0x45
mov ecx, dword [ebp - 0x324]
cmp ecx, 0xf
jbe 0x10015ac0
mov edx, dword [ebp - 0x338]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x10015ab6
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x10015baa
push ecx
push edx
call fcn.10064348
add esp, 8
mov dword [ebp - 0x328], 0
mov dword [ebp - 0x324], 0xf
mov byte [ebp - 0x338], 0
mov byte [ebp - 4], 0x46
mov ecx, dword [ebp - 0x14]
cmp ecx, 0xf
jbe 0x10015b13
mov edx, dword [ebp - 0x28]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x10015b09
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x10015baa
push ecx
push edx
call fcn.10064348
add esp, 8
mov dword [ebp - 0x18], 0
mov dword [ebp - 0x14], 0xf
mov byte [ebp - 0x28], 0
mov byte [ebp - 4], 0x47
mov ecx, dword [ebp - 0x33c]
cmp ecx, 0xf
jbe 0x10015b5f
mov edx, dword [ebp - 0x350]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x10015b55
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x10015baa
push ecx
push edx
call fcn.10064348
add esp, 8
mov dword [ebp - 0x340], 0
mov dword [ebp - 0x33c], 0xf
mov byte [ebp - 0x350], 0
mov byte [ebp - 4], 0x48
mov ecx, dword [ebp - 0x4a4]
cmp ecx, 0xf
jbe 0x10015bba
mov edx, dword [ebp - 0x4b8]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x10015bb0
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
jbe 0x10015bb0
call dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
push ecx
push edx
call fcn.10064348
add esp, 8
mov eax, dword [0x1014964c]
cmp dword [ebp - 0x5c], 0xf
mov dword [ebp - 0x4a8], 0
mov dword [ebp - 0x4a4], 0xf
mov eax, dword [eax + 4]
mov byte [ebp - 0x4b8], 0
mov ecx, dword [eax + 0x1c]
lea eax, [ebp - 0x70]
cmova eax, dword [ebp - 0x70]
push eax
push 0
push ecx
call fcn.10013d60
mov byte [ebp - 4], 0x3b
add esp, 0xc
mov ecx, dword [ebp - 0x5c]
cmp ecx, 0xf
jbe 0x10015c2b
mov edx, dword [ebp - 0x70]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x10015c21
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x10015c6a
push ecx
push edx
call fcn.10064348
add esp, 8
mov dword [ebp - 4], 0xffffffff
mov ecx, dword [ebp - 0x2c]
mov dword [ebp - 0x60], 0
mov dword [ebp - 0x5c], 0xf
mov byte [ebp - 0x70], 0
cmp ecx, 0xf
jbe 0x10015c7a
mov edx, dword [ebp - 0x40]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x10015c70
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
jbe 0x10015c70
call dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
push ecx
push edx
call fcn.10064348
add esp, 8
mov eax, dword [edi]
mov ecx, edi
mov eax, dword [eax + 4]
call eax
mov ecx, eax
mov al, byte [ecx]
test al, al
jne 0x10015c92
mov esi, 0x811c9dc5
jmp 0x10015ca8
movsx eax, al
inc ecx
xor eax, 0x811c9dc5
imul edx, eax, 0x1000193
call fcn.10013db0
mov esi, eax
mov edx, 0xf50c43ef
mov ecx, 0x1006cbcd
call fcn.10013db0
cmp esi, eax
jne 0x1001647b
mov eax, dword [0x1014966c]
cmp byte [eax + 0x1d3], 0
je 0x1001647b
mov ecx, dword [0x1014964c]
push 0
push str.userid
mov eax, dword [ecx + 0x20]
mov esi, dword [ecx + 0x14]
mov ecx, dword [ebp - 0x26c]
mov dword [ebp - 0x264], eax
mov eax, dword [eax]
mov edi, dword [eax + 0xc]
mov eax, dword [ecx]
mov eax, dword [eax + 0x18]
call eax
mov ecx, dword [esi]
push eax
mov edx, dword [ecx + 0x24]
mov ecx, esi
call edx
mov ecx, dword [ebp - 0x264]
push eax
call edi
mov edi, eax
test edi, edi
je 0x10016475
mov ecx, edi
call fcn.10002840
push 0x84
mov esi, eax
lea eax, [ebp - 0x25c]
push 0
push eax
call sub.VCRUNTIME140.dll_memset
mov ecx, dword [0x1014964c]
lea eax, [ebp - 0x25c]
add esp, 0xc
mov ecx, dword [ecx + 0x14]
push eax
push esi
call fcn.100026a0
mov ecx, dword [0x1014964c]
mov ecx, dword [ecx + 0x74]
call fcn.10002850
mov ecx, edi
mov esi, eax
call fcn.10002850
mov edx, str._aFFFFFF
mov ecx, dword [eax]
cmp ecx, dword [esi]
je 0x10015dbc
push str.ENEMY
lea ecx, [ebp - 0x488]
call fcn.10016ff0
mov dword [ebp - 4], 0x49
mov edx, eax
mov ecx, dword [ebp - 0x260]
or ecx, 0x10
mov dword [ebp - 0x260], ecx
mov dword [ebp - 0x268], ecx
lea ecx, [ebp - 0x4a0]
push str._a404040
call fcn.10017100
add esp, 8
mov edx, dword [ebp - 0x260]
or edx, 0x20
jmp 0x10015e09
push str.TEAM
lea ecx, [ebp - 0x3c8]
call fcn.10016ff0
mov dword [ebp - 4], 0x4b
mov edx, eax
mov ecx, dword [ebp - 0x260]
or ecx, 0x40
mov dword [ebp - 0x260], ecx
mov dword [ebp - 0x268], ecx
lea ecx, [ebp - 0x398]
push str._a404040
call fcn.10017100
mov edx, dword [ebp - 0x260]
add esp, 8
or edx, 0x80
push eax
lea ecx, [ebp - 0xa0]
mov dword [ebp - 0x268], edx
mov dword [ebp - 0x260], edx
call fcn.10016f40
mov dword [ebp - 4], 0x4c
test dl, dl
jns 0x10015e4f
and edx, 0xffffff7f
lea ecx, [ebp - 0x398]
mov dword [ebp - 0x260], edx
mov dword [ebp - 0x268], edx
call fcn.10006810
mov edx, dword [ebp - 0x260]
test dl, 0x40
je 0x10015e74
and edx, 0xffffffbf
lea ecx, [ebp - 0x3c8]
mov dword [ebp - 0x260], edx
mov dword [ebp - 0x268], edx
call fcn.10006810
mov edx, dword [ebp - 0x260]
test dl, 0x20
je 0x10015e99
and edx, 0xffffffdf
lea ecx, [ebp - 0x4a0]
mov dword [ebp - 0x260], edx
mov dword [ebp - 0x268], edx
call fcn.10006810
mov edx, dword [ebp - 0x260]
mov byte [ebp - 4], 0x4f
test dl, 0x10
je 0x10015ebc
and edx, 0xffffffef
lea ecx, [ebp - 0x488]
mov dword [ebp - 0x260], edx
mov dword [ebp - 0x268], edx
call fcn.10006810
lea eax, [ebp - 0x25c]
mov edx, str._a0095FF
push eax
lea ecx, [ebp - 0x40]
call fcn.10016ff0
push str._aFFFFFF
mov edx, eax
mov byte [ebp - 4], 0x50
lea ecx, [ebp - 0x88]
call fcn.10017100
add esp, 8
lea ecx, [ebp - 0x40]
mov byte [ebp - 4], 0x52
call fcn.10006810
mov edi, dword [ebp - 0x26c]
mov ecx, edi
push 0
push str.class
mov eax, dword [edi]
mov eax, dword [eax + 0x18]
call eax
mov ecx, eax
call fcn.10013dd0
push eax
mov edx, str._a0095FF
lea ecx, [ebp - 0x398]
call fcn.10016ff0
push str._aFFFFFF
mov edx, eax
mov byte [ebp - 4], 0x53
lea ecx, [ebp - 0x40]
call fcn.10017100
add esp, 8
lea ecx, [ebp - 0x398]
mov byte [ebp - 4], 0x55
call fcn.10006810
push 0x1006cc80
mov edx, str._a404040
lea ecx, [ebp - 0x3b0]
call fcn.10016ff0
push str._aFF4141
mov edx, eax
mov byte [ebp - 4], 0x56
lea ecx, [ebp - 0x2a8]
call fcn.10017100
push str.spook953paste
mov edx, eax
mov byte [ebp - 4], 0x57
lea ecx, [ebp - 0x2c0]
call fcn.10017050
push str._a404040
mov edx, eax
mov byte [ebp - 4], 0x58
lea ecx, [ebp - 0x2d8]
call fcn.10017100
push str.____
mov edx, eax
mov byte [ebp - 4], 0x59
lea ecx, [ebp - 0x368]
call fcn.10017050
lea ecx, [ebp - 0xa0]
mov byte [ebp - 4], 0x5a
push ecx
mov edx, eax
lea ecx, [ebp - 0x2f0]
call fcn.10017100
mov byte [ebp - 4], 0x5b
mov edx, eax
push 0x1006cc64
lea ecx, [ebp - 0x308]
call fcn.10017050
lea ecx, [ebp - 0x88]
mov byte [ebp - 4], 0x5c
push ecx
mov edx, eax
lea ecx, [ebp - 0x320]
call fcn.10017100
push str._changed_class_to
mov edx, eax
mov byte [ebp - 4], 0x5d
lea ecx, [ebp - 0x338]
call fcn.10017050
lea ecx, [ebp - 0x40]
mov byte [ebp - 4], 0x5e
push ecx
mov edx, eax
lea ecx, [ebp - 0x350]
call fcn.10017100
push 0x1006cb90
mov edx, eax
mov byte [ebp - 4], 0x5f
lea ecx, [ebp - 0x28]
call fcn.10017050
add esp, 0x2c
mov byte [ebp - 4], 0x61
mov ecx, dword [ebp - 0x33c]
cmp ecx, 0xf
jbe 0x1001607a
mov edx, dword [ebp - 0x350]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x10016070
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x10016389
push ecx
push edx
call fcn.10064348
add esp, 8
mov dword [ebp - 0x340], 0
mov dword [ebp - 0x33c], 0xf
mov byte [ebp - 0x350], 0
mov byte [ebp - 4], 0x62
mov ecx, dword [ebp - 0x324]
cmp ecx, 0xf
jbe 0x100160d3
mov edx, dword [ebp - 0x338]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x100160c9
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x10016389
push ecx
push edx
call fcn.10064348
add esp, 8
mov dword [ebp - 0x328], 0
mov dword [ebp - 0x324], 0xf
mov byte [ebp - 0x338], 0
mov byte [ebp - 4], 0x63
mov ecx, dword [ebp - 0x30c]
cmp ecx, 0xf
jbe 0x1001612c
mov edx, dword [ebp - 0x320]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x10016122
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x10016389
push ecx
push edx
call fcn.10064348
add esp, 8
mov dword [ebp - 0x310], 0
mov dword [ebp - 0x30c], 0xf
mov byte [ebp - 0x320], 0
mov byte [ebp - 4], 0x64
mov ecx, dword [ebp - 0x2f4]
cmp ecx, 0xf
jbe 0x10016185
mov edx, dword [ebp - 0x308]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x1001617b
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x10016389
push ecx
push edx
call fcn.10064348
add esp, 8
mov dword [ebp - 0x2f8], 0
mov dword [ebp - 0x2f4], 0xf
mov byte [ebp - 0x308], 0
mov byte [ebp - 4], 0x65
mov ecx, dword [ebp - 0x2dc]
cmp ecx, 0xf
jbe 0x100161de
mov edx, dword [ebp - 0x2f0]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x100161d4
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x10016389
push ecx
push edx
call fcn.10064348
add esp, 8
mov dword [ebp - 0x2e0], 0
mov dword [ebp - 0x2dc], 0xf
mov byte [ebp - 0x2f0], 0
mov byte [ebp - 4], 0x66
mov ecx, dword [ebp - 0x354]
cmp ecx, 0xf
jbe 0x10016237
mov edx, dword [ebp - 0x368]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x1001622d
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x10016389
push ecx
push edx
call fcn.10064348
add esp, 8
mov dword [ebp - 0x358], 0
mov dword [ebp - 0x354], 0xf
mov byte [ebp - 0x368], 0
mov byte [ebp - 4], 0x67
mov ecx, dword [ebp - 0x2c4]
cmp ecx, 0xf
jbe 0x10016290
mov edx, dword [ebp - 0x2d8]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x10016286
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x10016389
push ecx
push edx
call fcn.10064348
add esp, 8
mov dword [ebp - 0x2c8], 0
mov dword [ebp - 0x2c4], 0xf
mov byte [ebp - 0x2d8], 0
mov byte [ebp - 4], 0x68
mov ecx, dword [ebp - 0x2ac]
cmp ecx, 0xf
jbe 0x100162e9
mov edx, dword [ebp - 0x2c0]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x100162df
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x10016389
push ecx
push edx
call fcn.10064348
add esp, 8
mov dword [ebp - 0x2b0], 0
mov dword [ebp - 0x2ac], 0xf
mov byte [ebp - 0x2c0], 0
mov byte [ebp - 4], 0x69
mov ecx, dword [ebp - 0x294]
cmp ecx, 0xf
jbe 0x1001633e
mov edx, dword [ebp - 0x2a8]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x10016334
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x10016389
push ecx
push edx
call fcn.10064348
add esp, 8
mov dword [ebp - 0x298], 0
mov dword [ebp - 0x294], 0xf
mov byte [ebp - 0x2a8], 0
mov byte [ebp - 4], 0x6a
mov ecx, dword [ebp - 0x39c]
cmp ecx, 0xf
jbe 0x10016399
mov edx, dword [ebp - 0x3b0]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x1001638f
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
jbe 0x1001638f
call dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
push ecx
push edx
call fcn.10064348
add esp, 8
mov eax, dword [0x1014964c]
cmp dword [ebp - 0x14], 0xf
mov dword [ebp - 0x3a0], 0
mov dword [ebp - 0x39c], 0xf
mov eax, dword [eax + 4]
mov byte [ebp - 0x3b0], 0
mov ecx, dword [eax + 0x1c]
lea eax, [ebp - 0x28]
cmova eax, dword [ebp - 0x28]
push eax
push 0
push ecx
call fcn.10013d60
mov byte [ebp - 4], 0x55
add esp, 0xc
mov ecx, dword [ebp - 0x14]
cmp ecx, 0xf
jbe 0x1001640a
mov edx, dword [ebp - 0x28]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x10016400
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x10016446
push ecx
push edx
call fcn.10064348
add esp, 8
mov byte [ebp - 4], 0x52
mov ecx, dword [ebp - 0x2c]
mov dword [ebp - 0x18], 0
mov dword [ebp - 0x14], 0xf
mov byte [ebp - 0x28], 0
cmp ecx, 0xf
jbe 0x10016456
mov edx, dword [ebp - 0x40]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x1001644c
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
jbe 0x1001644c
call dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
push ecx
push edx
call fcn.10064348
add esp, 8
lea ecx, [ebp - 0x88]
call fcn.10006810
lea ecx, [ebp - 0xa0]
mov dword [ebp - 4], 0xffffffff
call fcn.10006810
jmp 0x1001647b
mov edi, dword [ebp - 0x26c]
mov eax, dword [edi]
mov ecx, edi
mov eax, dword [eax + 4]
call eax
mov ecx, eax
mov al, byte [ecx]
test al, al
jne 0x10016493
mov esi, 0x811c9dc5
jmp 0x100164a9
movsx eax, al
inc ecx
xor eax, 0x811c9dc5
imul edx, eax, 0x1000193
call fcn.10013db0
mov esi, eax
mov edx, 0xf50c43ef
mov ecx, 0x1006cbe1
call fcn.10013db0
cmp esi, eax
jne 0x10016905
mov eax, dword [0x1014966c]
cmp byte [eax + 0x1d4], 0
je 0x10016905
mov ecx, dword [0x1014964c]
push 0
push str.userid
mov eax, dword [ecx + 0x20]
mov esi, dword [ecx + 0x14]
mov ecx, dword [ebp - 0x26c]
mov dword [ebp - 0x264], eax
mov eax, dword [eax]
mov edi, dword [eax + 0xc]
mov eax, dword [ecx]
mov eax, dword [eax + 0x18]
call eax
mov ecx, dword [esi]
push eax
mov edx, dword [ecx + 0x24]
mov ecx, esi
call edx
mov ecx, dword [ebp - 0x264]
push eax
call edi
mov edi, dword [ebp - 0x26c]
mov dword [ebp - 0x264], eax
test eax, eax
je 0x10016905
mov ecx, dword [edi]
push 0x1006c464
push str.oldname
mov eax, dword [ecx + 0x20]
mov ecx, edi
call eax
push eax
mov edx, str._a0095FF
lea ecx, [ebp - 0x398]
call fcn.10016ff0
push str._aFFFFFF
mov edx, eax
mov dword [ebp - 4], 0x6b
lea ecx, [ebp - 0xb8]
call fcn.10017100
add esp, 8
lea ecx, [ebp - 0x398]
mov byte [ebp - 4], 0x6d
call fcn.10006810
mov eax, dword [edi]
mov ecx, edi
push 0x1006c464
push str.newname
mov eax, dword [eax + 0x20]
call eax
push eax
mov edx, str._a0095FF
lea ecx, [ebp - 0x3c8]
call fcn.10016ff0
push str._aFFFFFF
mov edx, eax
mov byte [ebp - 4], 0x6e
lea ecx, [ebp - 0xa0]
call fcn.10017100
add esp, 8
lea ecx, [ebp - 0x3c8]
mov byte [ebp - 4], 0x70
call fcn.10006810
mov ecx, dword [0x1014964c]
mov ecx, dword [ecx + 0x74]
call fcn.10002850
mov ecx, dword [ebp - 0x264]
mov esi, eax
call fcn.10002850
mov edx, str._aFFFFFF
mov ecx, dword [eax]
cmp ecx, dword [esi]
je 0x10016634
push str.ENEMY
lea ecx, [ebp - 0xd0]
call fcn.10016ff0
mov byte [ebp - 4], 0x71
mov edx, eax
mov ecx, dword [ebp - 0x260]
or ecx, 0x100
mov dword [ebp - 0x260], ecx
mov dword [ebp - 0x268], ecx
lea ecx, [ebp - 0x488]
push str._a404040
call fcn.10017100
add esp, 8
mov edx, dword [ebp - 0x260]
or edx, 0x200
jmp 0x10016684
push str.TEAM
lea ecx, [ebp - 0x4a0]
call fcn.10016ff0
mov dword [ebp - 4], 0x73
mov edx, eax
mov ecx, dword [ebp - 0x260]
or ecx, 0x400
mov dword [ebp - 0x260], ecx
mov dword [ebp - 0x268], ecx
lea ecx, [ebp - 0x398]
push str._a404040
call fcn.10017100
mov edx, dword [ebp - 0x260]
add esp, 8
or edx, 0x800
push eax
lea ecx, [ebp - 0x88]
mov dword [ebp - 0x268], edx
mov dword [ebp - 0x260], edx
call fcn.10016f40
mov dword [ebp - 4], 0x74
test edx, 0x800
je 0x100166ce
and edx, 0xfffff7ff
lea ecx, [ebp - 0x398]
mov dword [ebp - 0x260], edx
mov dword [ebp - 0x268], edx
call fcn.10006810
mov edx, dword [ebp - 0x260]
test edx, 0x400
je 0x100166f9
and edx, 0xfffffbff
lea ecx, [ebp - 0x4a0]
mov dword [ebp - 0x260], edx
mov dword [ebp - 0x268], edx
call fcn.10006810
mov edx, dword [ebp - 0x260]
test edx, 0x200
je 0x10016724
and edx, 0xfffffdff
lea ecx, [ebp - 0x488]
mov dword [ebp - 0x260], edx
mov dword [ebp - 0x268], edx
call fcn.10006810
mov edx, dword [ebp - 0x260]
mov byte [ebp - 4], 0x77
test edx, 0x100
je 0x1001674d
and edx, 0xfffffeff
lea ecx, [ebp - 0xd0]
mov dword [ebp - 0x260], edx
mov dword [ebp - 0x268], edx
call fcn.10006810
push 0x1006cc80
mov edx, str._a404040
lea ecx, [ebp - 0x2a8]
call fcn.10016ff0
push str._aFF4141
mov edx, eax
mov byte [ebp - 4], 0x78
lea ecx, [ebp - 0x2c0]
call fcn.10017100
push str.spook953paste
mov edx, eax
mov byte [ebp - 4], 0x79
lea ecx, [ebp - 0x2d8]
call fcn.10017050
push str._a404040
mov edx, eax
mov byte [ebp - 4], 0x7a
lea ecx, [ebp - 0x368]
call fcn.10017100
push str.____
mov edx, eax
mov byte [ebp - 4], 0x7b
lea ecx, [ebp - 0x2f0]
call fcn.10017050
lea ecx, [ebp - 0x88]
mov byte [ebp - 4], 0x7c
push ecx
mov edx, eax
lea ecx, [ebp - 0x308]
call fcn.10017100
push 0x1006cc64
mov edx, eax
mov byte [ebp - 4], 0x7d
lea ecx, [ebp - 0x320]
call fcn.10017050
lea ecx, [ebp - 0xb8]
mov byte [ebp - 4], 0x7e
push ecx
mov edx, eax
lea ecx, [ebp - 0x338]
call fcn.10017100
push str._changed_name_to
mov edx, eax
mov byte [ebp - 4], 0x7f
lea ecx, [ebp - 0x350]
call fcn.10017050
lea ecx, [ebp - 0xa0]
mov byte [ebp - 4], 0x80
push ecx
mov edx, eax
lea ecx, [ebp - 0x3c8]
call fcn.10017100
push 0x1006cb90
mov edx, eax
mov byte [ebp - 4], 0x81
lea ecx, [ebp - 0x40]
call fcn.10017050
add esp, 0x2c
lea ecx, [ebp - 0x3c8]
call fcn.10006810
lea ecx, [ebp - 0x350]
call fcn.10006810
lea ecx, [ebp - 0x338]
call fcn.10006810
lea ecx, [ebp - 0x320]
call fcn.10006810
lea ecx, [ebp - 0x308]
call fcn.10006810
lea ecx, [ebp - 0x2f0]
call fcn.10006810
lea ecx, [ebp - 0x368]
call fcn.10006810
lea ecx, [ebp - 0x2d8]
call fcn.10006810
lea ecx, [ebp - 0x2c0]
call fcn.10006810
lea ecx, [ebp - 0x2a8]
mov byte [ebp - 4], 0x8c
call fcn.10006810
mov eax, dword [0x1014964c]
lea ecx, [ebp - 0x40]
mov eax, dword [eax + 4]
mov edx, dword [eax + 0x1c]
call fcn.1000b830
push eax
push 0
push edx
call fcn.10013d60
add esp, 0xc
lea ecx, [ebp - 0x40]
call fcn.10006810
lea ecx, [ebp - 0x88]
call fcn.10006810
lea ecx, [ebp - 0xa0]
call fcn.10006810
lea ecx, [ebp - 0xb8]
mov dword [ebp - 4], 0xffffffff
call fcn.10006810
mov edx, 0xf30c40c9
mov ecx, 0x1006cbf5
call fcn.10013db0
mov edx, dword [edi]
mov ecx, edi
mov esi, eax
mov edx, dword [edx + 4]
call edx
mov ecx, eax
mov dl, byte [ecx]
test dl, dl
jne 0x1001692e
mov eax, 0x811c9dc5
jmp 0x10016942
movsx eax, dl
inc ecx
xor eax, 0x811c9dc5
imul edx, eax, 0x1000193
call fcn.10013db0
cmp eax, esi
jne 0x10016e60
mov eax, dword [0x1014966c]
cmp byte [eax + 0x1d5], 0
je 0x10016e60
mov eax, dword [0x1014964c]
mov ecx, dword [ebp - 0x26c]
push 0
push str.entityid
mov edi, dword [eax + 0x20]
mov eax, dword [edi]
mov esi, dword [eax + 0xc]
mov eax, dword [ecx]
mov eax, dword [eax + 0x18]
call eax
push eax
mov ecx, edi
call esi
mov edi, eax
test edi, edi
je 0x10016e60
mov ecx, dword [ebp - 0x26c]
push 0
push str.vote_option
mov eax, dword [ecx]
mov eax, dword [eax + 0x18]
call eax
mov ecx, edi
mov dword [ebp - 0x264], eax
call fcn.10002840
push 0x84
mov esi, eax
lea eax, [ebp - 0x1d8]
push 0
push eax
call sub.VCRUNTIME140.dll_memset
mov ecx, dword [0x1014964c]
lea eax, [ebp - 0x1d8]
add esp, 0xc
mov ecx, dword [ecx + 0x14]
push eax
push esi
call fcn.100026a0
mov ecx, dword [0x1014964c]
mov ecx, dword [ecx + 0x74]
call fcn.10002850
mov ecx, edi
mov esi, eax
call fcn.10002850
mov edx, str._aFFFFFF
mov ecx, dword [eax]
cmp ecx, dword [esi]
je 0x10016a4f
push str.ENEMY
lea ecx, [ebp - 0x488]
call fcn.10016ff0
mov dword [ebp - 4], 0x8d
mov edx, eax
mov ecx, dword [ebp - 0x260]
or ecx, 0x1000
mov dword [ebp - 0x260], ecx
mov dword [ebp - 0x268], ecx
lea ecx, [ebp - 0x4a0]
push str._a404040
call fcn.10017100
add esp, 8
mov edx, dword [ebp - 0x260]
or edx, 0x2000
jmp 0x10016a9f
push str.TEAM
lea ecx, [ebp - 0x3c8]
call fcn.10016ff0
mov dword [ebp - 4], 0x8f
mov edx, eax
mov ecx, dword [ebp - 0x260]
or ecx, 0x4000
mov dword [ebp - 0x260], ecx
mov dword [ebp - 0x268], ecx
lea ecx, [ebp - 0x398]
push str._a404040
call fcn.10017100
mov edx, dword [ebp - 0x260]
add esp, 8
or edx, 0x8000
push eax
lea ecx, [ebp - 0xb8]
mov dword [ebp - 0x268], edx
mov dword [ebp - 0x260], edx
call fcn.10016f40
mov dword [ebp - 4], 0x90
test edx, 0x8000
je 0x10016ae9
and edx, 0xffff7fff
lea ecx, [ebp - 0x398]
mov dword [ebp - 0x260], edx
mov dword [ebp - 0x268], edx
call fcn.10006810
mov edx, dword [ebp - 0x260]
test edx, 0x4000
je 0x10016b14
and edx, 0xffffbfff
lea ecx, [ebp - 0x3c8]
mov dword [ebp - 0x260], edx
mov dword [ebp - 0x268], edx
call fcn.10006810
mov edx, dword [ebp - 0x260]
test edx, 0x2000
je 0x10016b3f
and edx, 0xffffdfff
lea ecx, [ebp - 0x4a0]
mov dword [ebp - 0x260], edx
mov dword [ebp - 0x268], edx
call fcn.10006810
mov edx, dword [ebp - 0x260]
mov byte [ebp - 4], 0x93
test edx, 0x1000
je 0x10016b68
and edx, 0xffffefff
lea ecx, [ebp - 0x488]
mov dword [ebp - 0x260], edx
mov dword [ebp - 0x268], edx
call fcn.10006810
lea eax, [ebp - 0x1d8]
mov edx, str._a0095FF
push eax
lea ecx, [ebp - 0x40]
call fcn.10016ff0
push str._aFFFFFF
mov edx, eax
mov byte [ebp - 4], 0x94
lea ecx, [ebp - 0xa0]
call fcn.10017100
add esp, 8
lea ecx, [ebp - 0x40]
mov byte [ebp - 4], 0x96
call fcn.10006810
cmp dword [ebp - 0x264], 0
jne 0x10016bf2
push 0x1006cd00
mov edx, str._a3AFF4D
lea ecx, [ebp - 0x488]
call fcn.10016ff0
mov byte [ebp - 4], 0x97
lea ecx, [ebp - 0x4a0]
mov esi, dword [ebp - 0x260]
mov edx, eax
or esi, 0x10000
push str._aFFFFFF
mov dword [ebp - 0x268], esi
call fcn.10017100
add esp, 8
or esi, 0x20000
jmp 0x10016c3b
push 0x1006cd04
mov edx, 0x101472b4
lea ecx, [ebp - 0x3c8]
call fcn.10016ff0
mov dword [ebp - 4], 0x99
lea ecx, [ebp - 0x398]
mov esi, dword [ebp - 0x260]
mov edx, eax
or esi, 0x40000
push str._aFFFFFF
mov dword [ebp - 0x268], esi
call fcn.10017100
add esp, 8
or esi, 0x80000
push eax
lea ecx, [ebp - 0x40]
call fcn.10016f40
mov dword [ebp - 4], 0x9a
test esi, 0x80000
je 0x10016c64
lea ecx, [ebp - 0x398]
and esi, 0xfff7ffff
call fcn.10006810
test esi, 0x40000
je 0x10016c7d
lea ecx, [ebp - 0x3c8]
and esi, 0xfffbffff
call fcn.10006810
test esi, 0x20000
je 0x10016c96
lea ecx, [ebp - 0x4a0]
and esi, 0xfffdffff
call fcn.10006810
mov byte [ebp - 4], 0x9d
test esi, 0x10000
je 0x10016cad
lea ecx, [ebp - 0x488]
call fcn.10006810
push 0x1006cc80
mov edx, str._a404040
lea ecx, [ebp - 0x2a8]
call fcn.10016ff0
push str._aFF4141
mov edx, eax
mov byte [ebp - 4], 0x9e
lea ecx, [ebp - 0x2c0]
call fcn.10017100
push str.spook953paste
mov edx, eax
mov byte [ebp - 4], 0x9f
lea ecx, [ebp - 0x2d8]
call fcn.10017050
push str._a404040
mov edx, eax
mov byte [ebp - 4], 0xa0
lea ecx, [ebp - 0x368]
call fcn.10017100
push str.____
mov edx, eax
mov byte [ebp - 4], 0xa1
lea ecx, [ebp - 0x2f0]
call fcn.10017050
lea ecx, [ebp - 0xb8]
mov byte [ebp - 4], 0xa2
push ecx
mov edx, eax
lea ecx, [ebp - 0x308]
call fcn.10017100
push 0x1006cc64
mov edx, eax
mov byte [ebp - 4], 0xa3
lea ecx, [ebp - 0x320]
call fcn.10017050
lea ecx, [ebp - 0xa0]
mov byte [ebp - 4], 0xa4
push ecx
mov edx, eax
lea ecx, [ebp - 0x338]
call fcn.10017100
push str._voted
mov edx, eax
mov byte [ebp - 4], 0xa5
lea ecx, [ebp - 0x350]
call fcn.10017050
lea ecx, [ebp - 0x40]
mov byte [ebp - 4], 0xa6
push ecx
mov edx, eax
lea ecx, [ebp - 0xd0]
call fcn.10017100
push 0x1006cb90
mov edx, eax
mov byte [ebp - 4], 0xa7
lea ecx, [ebp - 0x88]
call fcn.10017050
add esp, 0x2c
lea ecx, [ebp - 0xd0]
call fcn.10006810
lea ecx, [ebp - 0x350]
call fcn.10006810
lea ecx, [ebp - 0x338]
call fcn.10006810
lea ecx, [ebp - 0x320]
call fcn.10006810
lea ecx, [ebp - 0x308]
call fcn.10006810
lea ecx, [ebp - 0x2f0]
call fcn.10006810
lea ecx, [ebp - 0x368]
call fcn.10006810
lea ecx, [ebp - 0x2d8]
call fcn.10006810
lea ecx, [ebp - 0x2c0]
call fcn.10006810
lea ecx, [ebp - 0x2a8]
mov byte [ebp - 4], 0xb2
call fcn.10006810
lea ecx, [ebp - 0x88]
call fcn.1000b830
push eax
mov eax, dword [0x1014964c]
push 0
mov eax, dword [eax + 4]
push dword [eax + 0x1c]
call fcn.10013d60
add esp, 0xc
lea ecx, [ebp - 0x88]
call fcn.10006810
lea ecx, [ebp - 0x40]
call fcn.10006810
lea ecx, [ebp - 0xa0]
call fcn.10006810
lea ecx, [ebp - 0xb8]
call fcn.10006810
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
mov ecx, dword [ebp - 0x10]
xor ecx, ebp
call fcn.10063df6
mov esp, ebp
pop ebp
ret 4
call fcn.10001ed0
call fcn.10001ed0
call fcn.10001ed0
call fcn.10001ed0
call fcn.10001ed0
call fcn.10001ed0
call fcn.10001ed0
test byte [ecx + 1], 0x10
test byte [ecx + 1], 0x10
mov al, 65
add dword [eax], edx
mov byte [0xf6100141], al
inc ecx
add dword [eax], edx
test byte [ecx + 1], 0x10
rol dword [ecx + 1], cl
adc byte [edx], al
inc edx
add dword [eax], edx
test byte [ecx + 1], 0x10
int3