Function at 0x1006ab10
Capabilities:
Inspect section memory permissions

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x100999b8
mov eax, dword fs:[0]
push eax
sub esp, 0x34
mov eax, dword [0x100ac00c]
xor eax, ebp
mov dword [ebp - 0x10], eax
push ebx
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
xor ebx, ebx
push ebx
mov dword [ebp - 0x14], ebx
push str.Valve001
mov dword [ebp - 0x18], ebx
call dword [sym.imp.USER32.dll_FindWindowA]
mov ecx, dword [0x100f1890]
push 0x100923c0
push 0xfffffffffffffffc
push eax
call ecx
mov edi, dword [0x100f19e8]
mov dword [0x100f2404], eax
mov dword [0x100f1d88], edi
mov eax, dword [edi]
mov dword [0x100f1d8c], eax
test eax, eax
je 0x1006ac85
xor esi, esi
mov eax, dword [0x100f1d8c]
mov ecx, dword [eax + esi*4]
test ecx, ecx
je 0x1006abb0
mov eax, dword [0x100f188c]
lea edx, [ebp - 0x34]
push 0x1c
push edx
push ecx
call eax
test eax, eax
je 0x1006abb0
mov eax, dword [ebp - 0x20]
test al, 1
jne 0x1006abb0
test eax, 0x100
jne 0x1006abb0
inc esi
jmp 0x1006ab81
mov dword [0x100f1d94], esi
test esi, esi
je 0x1006ac85
lea edx, [esi + 1]
lea ecx, [ebp - 0x14]
call fcn.1002fdc0
cmp eax, 0x100f1d90
je 0x1006ac16
mov ecx, dword [eax]
mov dword [eax], ebx
mov eax, dword [0x100f1d90]
mov dword [0x100f1d90], ecx
test eax, eax
je 0x1006ac16
push fcn.1001b1e0
lea esi, [eax - 4]
mov dword [ebp - 4], 0
push dword [esi]
push 4
push eax
call fcn.10092b7f
mov eax, dword [esi]
lea eax, [eax*4 + 4]
push eax
push esi
call fcn.10092b41
add esp, 8
mov dword [ebp - 4], 0xffffffff
mov eax, dword [ebp - 0x14]
test eax, eax
je 0x1006ac50
push fcn.1001b1e0
lea esi, [eax - 4]
mov dword [ebp - 4], 1
push dword [esi]
push 4
push eax
call fcn.10092b7f
mov eax, dword [esi]
lea eax, [eax*4 + 4]
push eax
push esi
call fcn.10092b41
add esp, 8
mov dword [ebp - 4], 0xffffffff
mov esi, dword [0x100f1d90]
test esi, esi
je 0x1006ac85
mov eax, dword [0x100f1d94]
lea eax, [eax*4 + 4]
push eax
mov eax, dword [0x100f1d8c]
add eax, 0xfffffffc
push eax
push esi
call sub.VCRUNTIME140.dll_memcpy
add esp, 0xc
add esi, 4
mov dword [edi], esi
mov byte [0x100f1d98], 1
xor eax, eax
cmp byte [0x100f1d98], al
setne al
add eax, 0x29
cmp dword [0x100f1d8c], 0
je 0x1006acd7
mov ecx, dword [0x100f1d90]
test ecx, ecx
je 0x1006acd7
cmp eax, dword [0x100f1d94]
ja 0x1006acd7
mov dword [ecx + eax*4], 0x1007c4f0
mov eax, dword [0x100f1d8c]
mov ebx, dword [eax + 0xa4]
neg ebx
sbb ebx, ebx
add ebx, 2
test bl, 2
je 0x1006accf
and ebx, 0xfffffffd
test bl, 1
je 0x1006acd7
and ebx, 0xfffffffe
mov edi, dword [0x100f19d0]
mov dword [0x100f1db0], edi
mov edx, dword [edi]
mov dword [0x100f1db4], edx
test edx, edx
je 0x1006ae0a
xor esi, esi
mov ecx, dword [edx + esi*4]
test ecx, ecx
je 0x1006ad2b
mov eax, dword [0x100f188c]
lea edx, [ebp - 0x34]
push 0x1c
push edx
push ecx
call eax
test eax, eax
je 0x1006ad25
mov eax, dword [ebp - 0x20]
test al, 1
jne 0x1006ad25
test eax, 0x100
jne 0x1006ad25
mov edx, dword [0x100f1db4]
inc esi
jmp 0x1006acf5
mov edx, dword [0x100f1db4]
mov dword [0x100f1dbc], esi
test esi, esi
je 0x1006ae0a
lea edx, [esi + 1]
lea ecx, [ebp - 0x14]
call fcn.1002fdc0
cmp eax, 0x100f1db8
je 0x1006ad95
mov ecx, dword [eax]
mov dword [eax], 0
mov eax, dword [0x100f1db8]
mov dword [0x100f1db8], ecx
test eax, eax
je 0x1006ad95
push fcn.1001b1e0
lea esi, [eax - 4]
mov dword [ebp - 4], 2
push dword [esi]
push 4
push eax
call fcn.10092b7f
mov eax, dword [esi]
lea eax, [eax*4 + 4]
push eax
push esi
call fcn.10092b41
add esp, 8
mov dword [ebp - 4], 0xffffffff
mov eax, dword [ebp - 0x14]
test eax, eax
je 0x1006adcf
push fcn.1001b1e0
lea esi, [eax - 4]
mov dword [ebp - 4], 3
push dword [esi]
push 4
push eax
call fcn.10092b7f
mov eax, dword [esi]
lea eax, [eax*4 + 4]
push eax
push esi
call fcn.10092b41
add esp, 8
mov dword [ebp - 4], 0xffffffff
mov esi, dword [0x100f1db8]
test esi, esi
je 0x1006ae04
mov eax, dword [0x100f1dbc]
lea eax, [eax*4 + 4]
push eax
mov eax, dword [0x100f1db4]
add eax, 0xfffffffc
push eax
push esi
call sub.VCRUNTIME140.dll_memcpy
add esp, 0xc
add esi, 4
mov dword [edi], esi
mov byte [0x100f1dc0], 1
mov edx, dword [0x100f1db4]
xor eax, eax
cmp byte [0x100f1dc0], al
setne al
add eax, 5
test edx, edx
je 0x1006ae60
mov ecx, dword [0x100f1db8]
test ecx, ecx
je 0x1006ae60
cmp eax, dword [0x100f1dbc]
ja 0x1006ae60
mov dword [ecx + eax*4], 0x10072df0
xor ecx, ecx
mov edx, dword [0x100f1db4]
cmp dword [edx + 0x14], ecx
sete cl
lea ecx, [ecx*4 + 4]
or ecx, ebx
mov ebx, ecx
mov eax, ecx
and ebx, 0xfffffff7
and al, 8
cmove ebx, ecx
test bl, 4
je 0x1006ae60
and ebx, 0xfffffffb
xor eax, eax
mov esi, 0x20
cmp byte [0x100f1dc0], al
setne al
add eax, 6
test edx, edx
je 0x1006aeb8
mov ecx, dword [0x100f1db8]
test ecx, ecx
je 0x1006aeb8
cmp eax, dword [0x100f1dbc]
ja 0x1006aeb8
mov dword [ecx + eax*4], 0x10072ea0
mov ecx, 0x10
mov edx, dword [0x100f1db4]
cmp dword [edx + 0x18], 0
cmove ecx, esi
or ecx, ebx
mov ebx, ecx
mov eax, ecx
and ebx, 0xffffffdf
and al, 0x20
cmove ebx, ecx
test bl, 0x10
je 0x1006aeb8
and ebx, 0xffffffef
xor eax, eax
mov esi, 0x80
cmp byte [0x100f1dc0], al
setne al
add eax, 7
test edx, edx
je 0x1006af13
mov ecx, dword [0x100f1db8]
test ecx, ecx
je 0x1006af13
cmp eax, dword [0x100f1dbc]
ja 0x1006af13
mov dword [ecx + eax*4], 0x10072ec0
mov ecx, 0x40
mov edx, dword [0x100f1db4]
cmp dword [edx + 0x1c], 0
cmove ecx, esi
or ecx, ebx
mov ebx, ecx
mov eax, ecx
and ebx, 0xffffff7f
and al, 0x80
cmove ebx, ecx
test bl, 0x40
je 0x1006af13
and ebx, 0xffffffbf
xor eax, eax
mov esi, 0x200
cmp byte [0x100f1dc0], al
setne al
add eax, 0x24
test edx, edx
je 0x1006af76
mov ecx, dword [0x100f1db8]
test ecx, ecx
je 0x1006af76
cmp eax, dword [0x100f1dbc]
ja 0x1006af76
mov dword [ecx + eax*4], 0x10072f30
mov ecx, 0x100
mov eax, dword [0x100f1db4]
cmp dword [eax + 0x90], 0
cmove ecx, esi
or ecx, ebx
mov ebx, ecx
mov eax, ecx
and ebx, 0xfffffdff
and eax, esi
cmove ebx, ecx
test ebx, 0x100
je 0x1006af76
and ebx, 0xfffffeff
mov edi, dword [0x100f19d8]
mov dword [0x100f1dd8], edi
mov edx, dword [edi]
mov dword [0x100f1ddc], edx
test edx, edx
je 0x1006b0a9
xor esi, esi
mov ecx, dword [edx + esi*4]
test ecx, ecx
je 0x1006afca
mov eax, dword [0x100f188c]
lea edx, [ebp - 0x34]
push 0x1c
push edx
push ecx
call eax
test eax, eax
je 0x1006afc4
mov eax, dword [ebp - 0x20]
test al, 1
jne 0x1006afc4
test eax, 0x100
jne 0x1006afc4
mov edx, dword [0x100f1ddc]
inc esi
jmp 0x1006af94
mov edx, dword [0x100f1ddc]
mov dword [0x100f1de4], esi
test esi, esi
je 0x1006b0a9
lea edx, [esi + 1]
lea ecx, [ebp - 0x14]
call fcn.1002fdc0
cmp eax, 0x100f1de0
je 0x1006b034
mov ecx, dword [eax]
mov dword [eax], 0
mov eax, dword [0x100f1de0]
mov dword [0x100f1de0], ecx
test eax, eax
je 0x1006b034
push fcn.1001b1e0
lea esi, [eax - 4]
mov dword [ebp - 4], 4
push dword [esi]
push 4
push eax
call fcn.10092b7f
mov eax, dword [esi]
lea eax, [eax*4 + 4]
push eax
push esi
call fcn.10092b41
add esp, 8
mov dword [ebp - 4], 0xffffffff
mov eax, dword [ebp - 0x14]
test eax, eax
je 0x1006b06e
push fcn.1001b1e0
lea esi, [eax - 4]
mov dword [ebp - 4], 5
push dword [esi]
push 4
push eax
call fcn.10092b7f
mov eax, dword [esi]
lea eax, [eax*4 + 4]
push eax
push esi
call fcn.10092b41
add esp, 8
mov dword [ebp - 4], 0xffffffff
mov esi, dword [0x100f1de0]
test esi, esi
je 0x1006b0a3
mov eax, dword [0x100f1de4]
lea eax, [eax*4 + 4]
push eax
mov eax, dword [0x100f1ddc]
add eax, 0xfffffffc
push eax
push esi
call sub.VCRUNTIME140.dll_memcpy
add esp, 0xc
add esi, 4
mov dword [edi], esi
mov byte [0x100f1de8], 1
mov edx, dword [0x100f1ddc]
xor eax, eax
mov esi, 0x800
cmp byte [0x100f1de8], al
setne al
add eax, 0x1b
test edx, edx
je 0x1006b10a
mov ecx, dword [0x100f1de0]
test ecx, ecx
je 0x1006b10a
cmp eax, dword [0x100f1de4]
ja 0x1006b10a
mov dword [ecx + eax*4], 0x100702f0
mov ecx, 0x400
mov edx, dword [0x100f1ddc]
cmp dword [edx + 0x6c], 0
cmove ecx, esi
or ecx, ebx
mov ebx, ecx
mov eax, ecx
and ebx, 0xfffff7ff
and eax, esi
cmove ebx, ecx
test ebx, 0x400
je 0x1006b10a
and ebx, 0xfffffbff
xor eax, eax
mov esi, 0x2000
cmp byte [0x100f1de8], al
setne al
add eax, 0x5d
test edx, edx
je 0x1006b16e
mov ecx, dword [0x100f1de0]
test ecx, ecx
je 0x1006b16e
cmp eax, dword [0x100f1de4]
ja 0x1006b16e
mov dword [ecx + eax*4], 0x10070430
mov ecx, 0x1000
mov edx, dword [0x100f1ddc]
cmp dword [edx + 0x174], 0
cmove ecx, esi
or ecx, ebx
mov ebx, ecx
mov eax, ecx
and ebx, 0xffffdfff
and eax, esi
cmove ebx, ecx
test ebx, 0x1000
je 0x1006b16e
and ebx, 0xffffefff
xor eax, eax
mov esi, 0x8000
cmp byte [0x100f1de8], al
setne al
add eax, 0x5a
test edx, edx
je 0x1006b1d1
mov ecx, dword [0x100f1de0]
test ecx, ecx
je 0x1006b1d1
cmp eax, dword [0x100f1de4]
ja 0x1006b1d1
mov dword [ecx + eax*4], 0x10070650
mov ecx, 0x4000
mov eax, dword [0x100f1ddc]
cmp dword [eax + 0x168], 0
cmove ecx, esi
or ecx, ebx
mov ebx, ecx
mov eax, ecx
and ebx, 0xffff7fff
and eax, esi
cmove ebx, ecx
test ebx, 0x4000
je 0x1006b1d1
and ebx, 0xffffbfff
mov edi, dword [0x100f19f0]
mov dword [0x100f1e00], edi
mov eax, dword [edi]
mov dword [0x100f1e04], eax
test eax, eax
je 0x1006b2f8
xor esi, esi
nop
mov eax, dword [0x100f1e04]
mov ecx, dword [eax + esi*4]
test ecx, ecx
je 0x1006b21f
mov eax, dword [0x100f188c]
lea edx, [ebp - 0x34]
push 0x1c
push edx
push ecx
call eax
test eax, eax
je 0x1006b21f
mov eax, dword [ebp - 0x20]
test al, 1
jne 0x1006b21f
test eax, 0x100
jne 0x1006b21f
inc esi
jmp 0x1006b1f0
mov dword [0x100f1e0c], esi
test esi, esi
je 0x1006b2f8
lea edx, [esi + 1]
lea ecx, [ebp - 0x14]
call fcn.1002fdc0
cmp eax, 0x100f1e08
je 0x1006b289
mov ecx, dword [eax]
mov dword [eax], 0
mov eax, dword [0x100f1e08]
mov dword [0x100f1e08], ecx
test eax, eax
je 0x1006b289
push fcn.1001b1e0
lea esi, [eax - 4]
mov dword [ebp - 4], 6
push dword [esi]
push 4
push eax
call fcn.10092b7f
mov eax, dword [esi]
lea eax, [eax*4 + 4]
push eax
push esi
call fcn.10092b41
add esp, 8
mov dword [ebp - 4], 0xffffffff
mov eax, dword [ebp - 0x14]
test eax, eax
je 0x1006b2c3
push fcn.1001b1e0
lea esi, [eax - 4]
mov dword [ebp - 4], 7
push dword [esi]
push 4
push eax
call fcn.10092b7f
mov eax, dword [esi]
lea eax, [eax*4 + 4]
push eax
push esi
call fcn.10092b41
add esp, 8
mov dword [ebp - 4], 0xffffffff
mov esi, dword [0x100f1e08]
test esi, esi
je 0x1006b2f8
mov eax, dword [0x100f1e0c]
lea eax, [eax*4 + 4]
push eax
mov eax, dword [0x100f1e04]
add eax, 0xfffffffc
push eax
push esi
call sub.VCRUNTIME140.dll_memcpy
add esp, 0xc
add esi, 4
mov dword [edi], esi
mov byte [0x100f1e10], 1
xor eax, eax
mov edx, 0x20000
cmp byte [0x100f1e10], al
setne al
add eax, 0xe
cmp dword [0x100f1e04], 0
je 0x1006b35d
mov ecx, dword [0x100f1e08]
test ecx, ecx
je 0x1006b35d
cmp eax, dword [0x100f1e0c]
ja 0x1006b35d
mov dword [ecx + eax*4], 0x100835b0
mov ecx, 0x10000
mov eax, dword [0x100f1e04]
cmp dword [eax + 0x38], 0
cmove ecx, edx
or ecx, ebx
mov ebx, ecx
mov eax, ecx
and ebx, 0xfffdffff
and eax, edx
cmove ebx, ecx
test ebx, 0x10000
je 0x1006b35d
and ebx, 0xfffeffff
xor eax, eax
mov edx, 0x80000
cmp byte [0x100f1e10], al
setne al
add eax, 0x13
cmp dword [0x100f1e04], 0
je 0x1006b3c2
mov ecx, dword [0x100f1e08]
test ecx, ecx
je 0x1006b3c2
cmp eax, dword [0x100f1e0c]
ja 0x1006b3c2
mov dword [ecx + eax*4], 0x100838d0
mov ecx, 0x40000
mov eax, dword [0x100f1e04]
cmp dword [eax + 0x4c], 0
cmove ecx, edx
or ecx, ebx
mov ebx, ecx
mov eax, ecx
and ebx, 0xfff7ffff
and eax, edx
cmove ebx, ecx
test ebx, 0x40000
je 0x1006b3c2
and ebx, 0xfffbffff
mov edi, dword [0x100f1a30]
mov dword [0x100f1d9c], edi
mov edx, dword [edi]
mov dword [0x100f1da0], edx
test edx, edx
je 0x1006b4f5
xor esi, esi
mov ecx, dword [edx + esi*4]
test ecx, ecx
je 0x1006b416
mov eax, dword [0x100f188c]
lea edx, [ebp - 0x34]
push 0x1c
push edx
push ecx
call eax
test eax, eax
je 0x1006b410
mov eax, dword [ebp - 0x20]
test al, 1
jne 0x1006b410
test eax, 0x100
jne 0x1006b410
mov edx, dword [0x100f1da0]
inc esi
jmp 0x1006b3e0
mov edx, dword [0x100f1da0]
mov dword [0x100f1da8], esi
test esi, esi
je 0x1006b4f5
lea edx, [esi + 1]
lea ecx, [ebp - 0x14]
call fcn.1002fdc0
cmp eax, 0x100f1da4
je 0x1006b480
mov ecx, dword [eax]
mov dword [eax], 0
mov eax, dword [0x100f1da4]
mov dword [0x100f1da4], ecx
test eax, eax
je 0x1006b480
push fcn.1001b1e0
lea esi, [eax - 4]
mov dword [ebp - 4], 8
push dword [esi]
push 4
push eax
call fcn.10092b7f
mov eax, dword [esi]
lea eax, [eax*4 + 4]
push eax
push esi
call fcn.10092b41
add esp, 8
mov dword [ebp - 4], 0xffffffff
mov eax, dword [ebp - 0x14]
test eax, eax
je 0x1006b4ba
push fcn.1001b1e0
lea esi, [eax - 4]
mov dword [ebp - 4], 9
push dword [esi]
push 4
push eax
call fcn.10092b7f
mov eax, dword [esi]
lea eax, [eax*4 + 4]
push eax
push esi
call fcn.10092b41
add esp, 8
mov dword [ebp - 4], 0xffffffff
mov esi, dword [0x100f1da4]
test esi, esi
je 0x1006b4ef
mov eax, dword [0x100f1da8]
lea eax, [eax*4 + 4]
push eax
mov eax, dword [0x100f1da0]
add eax, 0xfffffffc
push eax
push esi
call sub.VCRUNTIME140.dll_memcpy
add esp, 0xc
add esi, 4
mov dword [edi], esi
mov byte [0x100f1dac], 1
mov edx, dword [0x100f1da0]
xor eax, eax
mov esi, 0x200000
cmp byte [0x100f1dac], al
setne al
add eax, 0x10
test edx, edx
je 0x1006b556
mov ecx, dword [0x100f1da4]
test ecx, ecx
je 0x1006b556
cmp eax, dword [0x100f1da8]
ja 0x1006b556
mov dword [ecx + eax*4], 0x1007c170
mov ecx, 0x100000
mov edx, dword [0x100f1da0]
cmp dword [edx + 0x40], 0
cmove ecx, esi
or ecx, ebx
mov ebx, ecx
mov eax, ecx
and ebx, 0xffdfffff
and eax, esi
cmove ebx, ecx
test ebx, 0x100000
je 0x1006b556
and ebx, 0xffefffff
xor eax, eax
mov esi, 0x800000
cmp byte [0x100f1dac], al
setne al
add eax, 0x11
test edx, edx
je 0x1006b5b7
mov ecx, dword [0x100f1da4]
test ecx, ecx
je 0x1006b5b7
cmp eax, dword [0x100f1da8]
ja 0x1006b5b7
mov dword [ecx + eax*4], 0x1007c180
mov ecx, 0x400000
mov edx, dword [0x100f1da0]
cmp dword [edx + 0x44], 0
cmove ecx, esi
or ecx, ebx
mov ebx, ecx
mov eax, ecx
and ebx, 0xff7fffff
and eax, esi
cmove ebx, ecx
test ebx, 0x400000
je 0x1006b5b7
and ebx, 0xffbfffff
xor eax, eax
mov esi, 0x2000000
cmp byte [0x100f1dac], al
setne al
add eax, 0x12
test edx, edx
je 0x1006b618
mov ecx, dword [0x100f1da4]
test ecx, ecx
je 0x1006b618
cmp eax, dword [0x100f1da8]
ja 0x1006b618
mov dword [ecx + eax*4], 0x1007c1b0
mov ecx, 0x1000000
mov edx, dword [0x100f1da0]
cmp dword [edx + 0x48], 0
cmove ecx, esi
or ecx, ebx
mov ebx, ecx
mov eax, ecx
and ebx, 0xfdffffff
and eax, esi
cmove ebx, ecx
test ebx, 0x1000000
je 0x1006b618
and ebx, 0xfeffffff
xor eax, eax
mov esi, 0x8000000
cmp byte [0x100f1dac], al
setne al
add eax, 0x18
test edx, edx
je 0x1006b679
mov ecx, dword [0x100f1da4]
test ecx, ecx
je 0x1006b679
cmp eax, dword [0x100f1da8]
ja 0x1006b679
mov dword [ecx + eax*4], 0x1007c200
mov ecx, 0x4000000
mov edx, dword [0x100f1da0]
cmp dword [edx + 0x60], 0
cmove ecx, esi
or ecx, ebx
mov ebx, ecx
mov eax, ecx
and ebx, 0xf7ffffff
and eax, esi
cmove ebx, ecx
test ebx, 0x4000000
je 0x1006b679
and ebx, 0xfbffffff
xor eax, eax
mov esi, 0x20000000
cmp byte [0x100f1dac], al
setne al
add eax, 0x2c
test edx, edx
je 0x1006b6dc
mov ecx, dword [0x100f1da4]
test ecx, ecx
je 0x1006b6dc
cmp eax, dword [0x100f1da8]
ja 0x1006b6dc
mov dword [ecx + eax*4], 0x1007c4c0
mov ecx, 0x10000000
mov eax, dword [0x100f1da0]
cmp dword [eax + 0xb0], 0
cmove ecx, esi
or ecx, ebx
mov ebx, ecx
mov eax, ecx
and ebx, 0xdfffffff
and eax, esi
cmove ebx, ecx
test ebx, 0x10000000
je 0x1006b6dc
and ebx, 0xefffffff
mov edi, dword [0x100f19e4]
mov dword [0x100f1e14], edi
mov eax, dword [edi]
mov dword [0x100f1e18], eax
test eax, eax
je 0x1006b808
xor esi, esi
nop dword [eax]
mov eax, dword [0x100f1e18]
mov ecx, dword [eax + esi*4]
test ecx, ecx
je 0x1006b72f
mov eax, dword [0x100f188c]
lea edx, [ebp - 0x34]
push 0x1c
push edx
push ecx
call eax
test eax, eax
je 0x1006b72f
mov eax, dword [ebp - 0x20]
test al, 1
jne 0x1006b72f
test eax, 0x100
jne 0x1006b72f
inc esi
jmp 0x1006b700
mov dword [0x100f1e20], esi
test esi, esi
je 0x1006b808
lea edx, [esi + 1]
lea ecx, [ebp - 0x14]
call fcn.1002fdc0
cmp eax, 0x100f1e1c
je 0x1006b799
mov ecx, dword [eax]
mov dword [eax], 0
mov eax, dword [0x100f1e1c]
mov dword [0x100f1e1c], ecx
test eax, eax
je 0x1006b799
push fcn.1001b1e0
lea esi, [eax - 4]
mov dword [ebp - 4], 0xa
push dword [esi]
push 4
push eax
call fcn.10092b7f
mov eax, dword [esi]
lea eax, [eax*4 + 4]
push eax
push esi
call fcn.10092b41
add esp, 8
mov dword [ebp - 4], 0xffffffff
mov eax, dword [ebp - 0x14]
test eax, eax
je 0x1006b7d3
push fcn.1001b1e0
lea esi, [eax - 4]
mov dword [ebp - 4], 0xb
push dword [esi]
push 4
push eax
call fcn.10092b7f
mov eax, dword [esi]
lea eax, [eax*4 + 4]
push eax
push esi
call fcn.10092b41
add esp, 8
mov dword [ebp - 4], 0xffffffff
mov esi, dword [0x100f1e1c]
test esi, esi
je 0x1006b808
mov eax, dword [0x100f1e20]
lea eax, [eax*4 + 4]
push eax
mov eax, dword [0x100f1e18]
add eax, 0xfffffffc
push eax
push esi
call sub.VCRUNTIME140.dll_memcpy
add esp, 0xc
add esi, 4
mov dword [edi], esi
mov byte [0x100f1e24], 1
mov edx, dword [0x100f1e18]
xor eax, eax
cmp byte [0x100f1e24], al
mov ecx, edx
setne al
add eax, 0x43
test edx, edx
je 0x1006b85a
mov esi, dword [0x100f1e1c]
test esi, esi
je 0x1006b85a
cmp eax, dword [0x100f1e20]
ja 0x1006b85a
mov dword [esi + eax*4], 0x10078630
mov edx, 0x80000000
mov ecx, dword [0x100f1e18]
mov eax, 0x40000000
cmp dword [ecx + 0x10c], 0
cmove eax, edx
or eax, ebx
cmovl ecx, ecx
xor eax, eax
cmp byte [0x100f1e24], al
setne al
add eax, 0x52
test ecx, ecx
je 0x1006b8a9
mov ecx, dword [0x100f1e1c]
test ecx, ecx
je 0x1006b8a9
cmp eax, dword [0x100f1e20]
ja 0x1006b8a9
mov dword [ecx + eax*4], 0x10078670
mov eax, dword [0x100f1e18]
mov ebx, dword [eax + 0x148]
neg ebx
sbb ebx, ebx
add ebx, 2
test bl, 2
je 0x1006b89f
and ebx, 0xfffffffd
test bl, 1
je 0x1006b8ac
and ebx, 0xfffffffe
jmp 0x1006b8ac
mov ebx, dword [ebp - 0x18]
xor eax, eax
cmp byte [0x100f1e24], al
setne al
add eax, 0x74
cmp dword [0x100f1e18], 0
je 0x1006b909
mov ecx, dword [0x100f1e1c]
test ecx, ecx
je 0x1006b909
cmp eax, dword [0x100f1e20]
ja 0x1006b909
mov dword [ecx + eax*4], 0x10078690
xor ecx, ecx
mov eax, dword [0x100f1e18]
cmp dword [eax + 0x1d0], ecx
sete cl
lea ecx, [ecx*4 + 4]
or ecx, ebx
mov ebx, ecx
mov eax, ecx
and ebx, 0xfffffff7
and al, 8
cmove ebx, ecx
test bl, 4
je 0x1006b909
and ebx, 0xfffffffb
mov edi, dword [0x100f1a04]
mov dword [0x100f1e64], edi
mov eax, dword [edi]
mov dword [0x100f1e68], eax
test eax, eax
je 0x1006ba2e
xor esi, esi
mov eax, dword [0x100f1e68]
mov ecx, dword [eax + esi*4]
test ecx, ecx
je 0x1006b955
mov eax, dword [0x100f188c]
lea edx, [ebp - 0x34]
push 0x1c
push edx
push ecx
call eax
test eax, eax
je 0x1006b955
mov eax, dword [ebp - 0x20]
test al, 1
jne 0x1006b955
test eax, 0x100
jne 0x1006b955
inc esi
jmp 0x1006b926
mov dword [0x100f1e70], esi
test esi, esi
je 0x1006ba2e
lea edx, [esi + 1]
lea ecx, [ebp - 0x14]
call fcn.1002fdc0
cmp eax, 0x100f1e6c
je 0x1006b9bf
mov ecx, dword [eax]
mov dword [eax], 0
mov eax, dword [0x100f1e6c]
mov dword [0x100f1e6c], ecx
test eax, eax
je 0x1006b9bf
push fcn.1001b1e0
lea esi, [eax - 4]
mov dword [ebp - 4], 0xc
push dword [esi]
push 4
push eax
call fcn.10092b7f
mov eax, dword [esi]
lea eax, [eax*4 + 4]
push eax
push esi
call fcn.10092b41
add esp, 8
mov dword [ebp - 4], 0xffffffff
mov eax, dword [ebp - 0x14]
test eax, eax
je 0x1006b9f9
push fcn.1001b1e0
lea esi, [eax - 4]
mov dword [ebp - 4], 0xd
push dword [esi]
push 4
push eax
call fcn.10092b7f
mov eax, dword [esi]
lea eax, [eax*4 + 4]
push eax
push esi
call fcn.10092b41
add esp, 8
mov dword [ebp - 4], 0xffffffff
mov esi, dword [0x100f1e6c]
test esi, esi
je 0x1006ba2e
mov eax, dword [0x100f1e70]
lea eax, [eax*4 + 4]
push eax
mov eax, dword [0x100f1e68]
add eax, 0xfffffffc
push eax
push esi
call sub.VCRUNTIME140.dll_memcpy
add esp, 0xc
add esi, 4
mov dword [edi], esi
mov byte [0x100f1e74], 1
xor eax, eax
cmp byte [0x100f1e74], al
setne al
add eax, 0x15
cmp dword [0x100f1e68], 0
je 0x1006ba8a
mov ecx, dword [0x100f1e6c]
test ecx, ecx
je 0x1006ba8a
cmp eax, dword [0x100f1e70]
ja 0x1006ba8a
mov dword [ecx + eax*4], 0x10065940
mov ecx, 0x10
mov eax, dword [0x100f1e68]
cmp dword [eax + 0x54], 0
mov eax, 0x20
cmove ecx, eax
or ecx, ebx
mov ebx, ecx
mov eax, ecx
and ebx, 0xffffffdf
and al, 0x20
cmove ebx, ecx
test bl, 0x10
je 0x1006ba8a
and ebx, 0xffffffef
mov edi, dword [0x100f19fc]
mov dword [0x100f1e50], edi
mov eax, dword [edi]
mov dword [0x100f1e54], eax
test eax, eax
je 0x1006bbb8
xor esi, esi
nop word [eax + eax]
mov eax, dword [0x100f1e54]
mov ecx, dword [eax + esi*4]
test ecx, ecx
je 0x1006badf
mov eax, dword [0x100f188c]
lea edx, [ebp - 0x34]
push 0x1c
push edx
push ecx
call eax
test eax, eax
je 0x1006badf
mov eax, dword [ebp - 0x20]
test al, 1
jne 0x1006badf
test eax, 0x100
jne 0x1006badf
inc esi
jmp 0x1006bab0
mov dword [0x100f1e5c], esi
test esi, esi
je 0x1006bbb8
lea edx, [esi + 1]
lea ecx, [ebp - 0x14]
call fcn.1002fdc0
cmp eax, 0x100f1e58
je 0x1006bb49
mov ecx, dword [eax]
mov dword [eax], 0
mov eax, dword [0x100f1e58]
mov dword [0x100f1e58], ecx
test eax, eax
je 0x1006bb49
push fcn.1001b1e0
lea esi, [eax - 4]
mov dword [ebp - 4], 0xe
push dword [esi]
push 4
push eax
call fcn.10092b7f
mov eax, dword [esi]
lea eax, [eax*4 + 4]
push eax
push esi
call fcn.10092b41
add esp, 8
mov dword [ebp - 4], 0xffffffff
mov eax, dword [ebp - 0x14]
test eax, eax
je 0x1006bb83
push fcn.1001b1e0
lea esi, [eax - 4]
mov dword [ebp - 4], 0xf
push dword [esi]
push 4
push eax
call fcn.10092b7f
mov eax, dword [esi]
lea eax, [eax*4 + 4]
push eax
push esi
call fcn.10092b41
add esp, 8
mov dword [ebp - 4], 0xffffffff
mov esi, dword [0x100f1e58]
test esi, esi
je 0x1006bbb8
mov eax, dword [0x100f1e5c]
lea eax, [eax*4 + 4]
push eax
mov eax, dword [0x100f1e54]
add eax, 0xfffffffc
push eax
push esi
call sub.VCRUNTIME140.dll_memcpy
add esp, 0xc
add esi, 4
mov dword [edi], esi
mov byte [0x100f1e60], 1
xor eax, eax
cmp byte [0x100f1e60], al
setne al
add eax, 9
cmp dword [0x100f1e54], 0
je 0x1006bc17
mov ecx, dword [0x100f1e58]
test ecx, ecx
je 0x1006bc17
cmp eax, dword [0x100f1e5c]
ja 0x1006bc17
mov dword [ecx + eax*4], 0x10083a10
mov ecx, 0x40
mov eax, dword [0x100f1e54]
cmp dword [eax + 0x24], 0
mov eax, 0x80
cmove ecx, eax
or ecx, ebx
mov ebx, ecx
mov eax, ecx
and ebx, 0xffffff7f
and al, 0x80
cmove ebx, ecx
test bl, 0x40
je 0x1006bc17
and ebx, 0xffffffbf
mov edi, dword [0x100f1a58]
mov dword [0x100f1e78], edi
mov eax, dword [edi]
mov dword [0x100f1e7c], eax
test eax, eax
je 0x1006bd3c
xor esi, esi
mov eax, dword [0x100f1e7c]
mov ecx, dword [eax + esi*4]
test ecx, ecx
je 0x1006bc63
mov eax, dword [0x100f188c]
lea edx, [ebp - 0x34]
push 0x1c
push edx
push ecx
call eax
test eax, eax
je 0x1006bc63
mov eax, dword [ebp - 0x20]
test al, 1
jne 0x1006bc63
test eax, 0x100
jne 0x1006bc63
inc esi
jmp 0x1006bc34
mov dword [0x100f1e84], esi
test esi, esi
je 0x1006bd3c
lea edx, [esi + 1]
lea ecx, [ebp - 0x14]
call fcn.1002fdc0
cmp eax, 0x100f1e80
je 0x1006bccd
mov ecx, dword [eax]
mov dword [eax], 0
mov eax, dword [0x100f1e80]
mov dword [0x100f1e80], ecx
test eax, eax
je 0x1006bccd
push fcn.1001b1e0
lea esi, [eax - 4]
mov dword [ebp - 4], 0x10
push dword [esi]
push 4
push eax
call fcn.10092b7f
mov eax, dword [esi]
lea eax, [eax*4 + 4]
push eax
push esi
call fcn.10092b41
add esp, 8
mov dword [ebp - 4], 0xffffffff
mov eax, dword [ebp - 0x14]
test eax, eax
je 0x1006bd07
push fcn.1001b1e0
lea esi, [eax - 4]
mov dword [ebp - 4], 0x11
push dword [esi]
push 4
push eax
call fcn.10092b7f
mov eax, dword [esi]
lea eax, [eax*4 + 4]
push eax
push esi
call fcn.10092b41
add esp, 8
mov dword [ebp - 4], 0xffffffff
mov esi, dword [0x100f1e80]
test esi, esi
je 0x1006bd3c
mov eax, dword [0x100f1e84]
lea eax, [eax*4 + 4]
push eax
mov eax, dword [0x100f1e7c]
add eax, 0xfffffffc
push eax
push esi
call sub.VCRUNTIME140.dll_memcpy
add esp, 0xc
add esi, 4
mov dword [edi], esi
mov byte [0x100f1e88], 1
xor eax, eax
cmp byte [0x100f1e88], al
setne al
add eax, 0x2b
cmp dword [0x100f1e7c], 0
je 0x1006bda7
mov ecx, dword [0x100f1e80]
test ecx, ecx
je 0x1006bda7
cmp eax, dword [0x100f1e84]
ja 0x1006bda7
mov dword [ecx + eax*4], 0x10048020
mov ecx, 0x100
mov eax, dword [0x100f1e7c]
cmp dword [eax + 0xac], 0
mov eax, 0x200
cmove ecx, eax
or ecx, ebx
mov ebx, ecx
mov eax, ecx
and ebx, 0xfffffdff
and eax, 0x200
cmove ebx, ecx
test ebx, 0x100
je 0x1006bda7
and ebx, 0xfffffeff
mov edi, dword [0x100f1a00]
mov dword [0x100f1e8c], edi
mov ecx, dword [edi]
mov dword [0x100f1e90], ecx
test ecx, ecx
je 0x1006beda
xor esi, esi
mov edx, dword [ecx + esi*4]
test edx, edx
je 0x1006bdfb
mov eax, dword [0x100f188c]
lea ecx, [ebp - 0x34]
push 0x1c
push ecx
push edx
call eax
test eax, eax
je 0x1006bdf5
mov eax, dword [ebp - 0x20]
test al, 1
jne 0x1006bdf5
test eax, 0x100
jne 0x1006bdf5
mov ecx, dword [0x100f1e90]
inc esi
jmp 0x1006bdc5
mov ecx, dword [0x100f1e90]
mov dword [0x100f1e98], esi
test esi, esi
je 0x1006beda
lea edx, [esi + 1]
lea ecx, [ebp - 0x14]
call fcn.1002fdc0
cmp eax, 0x100f1e94
je 0x1006be65
mov ecx, dword [eax]
mov dword [eax], 0
mov eax, dword [0x100f1e94]
mov dword [0x100f1e94], ecx
test eax, eax
je 0x1006be65
push fcn.1001b1e0
lea esi, [eax - 4]
mov dword [ebp - 4], 0x12
push dword [esi]
push 4
push eax
call fcn.10092b7f
mov eax, dword [esi]
lea eax, [eax*4 + 4]
push eax
push esi
call fcn.10092b41
add esp, 8
mov dword [ebp - 4], 0xffffffff
mov eax, dword [ebp - 0x14]
test eax, eax
je 0x1006be9f
push fcn.1001b1e0
lea esi, [eax - 4]
mov dword [ebp - 4], 0x13
push dword [esi]
push 4
push eax
call fcn.10092b7f
mov eax, dword [esi]
lea eax, [eax*4 + 4]
push eax
push esi
call fcn.10092b41
add esp, 8
mov dword [ebp - 4], 0xffffffff
mov esi, dword [0x100f1e94]
test esi, esi
je 0x1006bed4
mov eax, dword [0x100f1e98]
lea eax, [eax*4 + 4]
push eax
mov eax, dword [0x100f1e90]
add eax, 0xfffffffc
push eax
push esi
call sub.VCRUNTIME140.dll_memcpy
add esp, 0xc
add esi, 4
mov dword [edi], esi
mov byte [0x100f1e9c], 1
mov ecx, dword [0x100f1e90]
xor eax, eax
cmp byte [0x100f1e9c], al
setne al
add eax, 6
test ecx, ecx
je 0x1006bf3e
mov edx, dword [0x100f1e94]
test edx, edx
je 0x1006bf3e
cmp eax, dword [0x100f1e98]
ja 0x1006bf3e
mov dword [edx + eax*4], 0x10080bd0
mov eax, 0x800
mov ecx, dword [0x100f1e90]
mov edx, 0x400
cmp dword [ecx + 0x18], 0
cmove edx, eax
or edx, ebx
mov ebx, edx
mov eax, edx
and ebx, 0xfffff7ff
and eax, 0x800
cmove ebx, edx
test ebx, 0x400
je 0x1006bf3e
and ebx, 0xfffffbff
xor eax, eax
cmp byte [0x100f1e9c], al
setne al
add eax, 4
test ecx, ecx
je 0x1006bfa2
mov edx, dword [0x100f1e94]
test edx, edx
je 0x1006bfa2
cmp eax, dword [0x100f1e98]
ja 0x1006bfa2
mov dword [edx + eax*4], 0x10080d00
mov eax, 0x2000
mov ecx, dword [0x100f1e90]
mov edx, 0x1000
cmp dword [ecx + 0x10], 0
cmove edx, eax
or edx, ebx
mov ebx, edx
mov eax, edx
and ebx, 0xffffdfff
and eax, 0x2000
cmove ebx, edx
test ebx, 0x1000
je 0x1006bfa2
and ebx, 0xffffefff
xor eax, eax
cmp byte [0x100f1e9c], al
setne al
add eax, 0x27
test ecx, ecx
je 0x1006c009
mov edx, dword [0x100f1e94]
test edx, edx
je 0x1006c009
cmp eax, dword [0x100f1e98]
ja 0x1006c009
mov dword [edx + eax*4], 0x10080c80
mov eax, 0x8000
mov ecx, dword [0x100f1e90]
mov edx, 0x4000
cmp dword [ecx + 0x9c], 0
cmove edx, eax
or edx, ebx
mov ebx, edx
mov eax, edx
and ebx, 0xffff7fff
and eax, 0x8000
cmove ebx, edx
test ebx, 0x4000
je 0x1006c009
and ebx, 0xffffbfff
xor eax, eax
cmp byte [0x100f1e9c], al
setne al
add eax, 0x28
test ecx, ecx
je 0x1006c06f
mov ecx, dword [0x100f1e94]
test ecx, ecx
je 0x1006c06f
cmp eax, dword [0x100f1e98]
ja 0x1006c06f
mov dword [ecx + eax*4], 0x10080cc0
mov ecx, 0x10000
mov eax, dword [0x100f1e90]
cmp dword [eax + 0xa0], 0
mov eax, 0x20000
cmove ecx, eax
or ecx, ebx
mov ebx, ecx
mov eax, ecx
and ebx, 0xfffdffff
and eax, 0x20000
cmove ebx, ecx
test ebx, 0x10000
je 0x1006c06f
and ebx, 0xfffeffff
mov edi, dword [0x100f1a20]
mov dword [0x100f1ea0], edi
mov eax, dword [edi]
mov dword [0x100f1ea4], eax
test eax, eax
je 0x1006c198
xor esi, esi
nop dword [eax]
mov eax, dword [0x100f1ea4]
mov ecx, dword [eax + esi*4]
test ecx, ecx
je 0x1006c0bf
mov eax, dword [0x100f188c]
lea edx, [ebp - 0x34]
push 0x1c
push edx
push ecx
call eax
test eax, eax
je 0x1006c0bf
mov eax, dword [ebp - 0x20]
test al, 1
jne 0x1006c0bf
test eax, 0x100
jne 0x1006c0bf
inc esi
jmp 0x1006c090
mov dword [0x100f1eac], esi
test esi, esi
je 0x1006c198
lea edx, [esi + 1]
lea ecx, [ebp - 0x14]
call fcn.1002fdc0
cmp eax, 0x100f1ea8
je 0x1006c129
mov ecx, dword [eax]
mov dword [eax], 0
mov eax, dword [0x100f1ea8]
mov dword [0x100f1ea8], ecx
test eax, eax
je 0x1006c129
push fcn.1001b1e0
lea esi, [eax - 4]
mov dword [ebp - 4], 0x14
push dword [esi]
push 4
push eax
call fcn.10092b7f
mov eax, dword [esi]
lea eax, [eax*4 + 4]
push eax
push esi
call fcn.10092b41
add esp, 8
mov dword [ebp - 4], 0xffffffff
mov eax, dword [ebp - 0x14]
test eax, eax
je 0x1006c163
push fcn.1001b1e0
lea esi, [eax - 4]
mov dword [ebp - 4], 0x15
push dword [esi]
push 4
push eax
call fcn.10092b7f
mov eax, dword [esi]
lea eax, [eax*4 + 4]
push eax
push esi
call fcn.10092b41
add esp, 8
mov dword [ebp - 4], 0xffffffff
mov esi, dword [0x100f1ea8]
test esi, esi
je 0x1006c198
mov eax, dword [0x100f1eac]
lea eax, [eax*4 + 4]
push eax
mov eax, dword [0x100f1ea4]
add eax, 0xfffffffc
push eax
push esi
call sub.VCRUNTIME140.dll_memcpy
add esp, 0xc
add esi, 4
mov dword [edi], esi
mov byte [0x100f1eb0], 1
xor eax, eax
cmp byte [0x100f1eb0], al
setne al
add eax, 0xd
cmp dword [0x100f1ea4], 0
je 0x1006c200
mov ecx, dword [0x100f1ea8]
test ecx, ecx
je 0x1006c200
cmp eax, dword [0x100f1eac]
ja 0x1006c200
mov dword [ecx + eax*4], 0x10047990
mov ecx, 0x40000
mov eax, dword [0x100f1ea4]
cmp dword [eax + 0x34], 0
mov eax, 0x80000
cmove ecx, eax
or ecx, ebx
mov ebx, ecx
mov eax, ecx
and ebx, 0xfff7ffff
and eax, 0x80000
cmove ebx, ecx
test ebx, 0x40000
je 0x1006c200
and ebx, 0xfffbffff
mov edi, dword [0x100f1a08]
mov dword [0x100f1eb4], edi
mov eax, dword [edi]
mov dword [0x100f1eb8], eax
test eax, eax
je 0x1006c328
xor esi, esi
nop dword [eax]
mov eax, dword [0x100f1eb8]
mov ecx, dword [eax + esi*4]
test ecx, ecx
je 0x1006c24f
mov eax, dword [0x100f188c]
lea edx, [ebp - 0x34]
push 0x1c
push edx
push ecx
call eax
test eax, eax
je 0x1006c24f
mov eax, dword [ebp - 0x20]
test al, 1
jne 0x1006c24f
test eax, 0x100
jne 0x1006c24f
inc esi
jmp 0x1006c220
mov dword [0x100f1ec0], esi
test esi, esi
je 0x1006c328
lea edx, [esi + 1]
lea ecx, [ebp - 0x14]
call fcn.1002fdc0
cmp eax, 0x100f1ebc
je 0x1006c2b9
mov ecx, dword [eax]
mov dword [eax], 0
mov eax, dword [0x100f1ebc]
mov dword [0x100f1ebc], ecx
test eax, eax
je 0x1006c2b9
push fcn.1001b1e0
lea esi, [eax - 4]
mov dword [ebp - 4], 0x16
push dword [esi]
push 4
push eax
call fcn.10092b7f
mov eax, dword [esi]
lea eax, [eax*4 + 4]
push eax
push esi
call fcn.10092b41
add esp, 8
mov dword [ebp - 4], 0xffffffff
mov eax, dword [ebp - 0x14]
test eax, eax
je 0x1006c2f3
push fcn.1001b1e0
lea esi, [eax - 4]
mov dword [ebp - 4], 0x17
push dword [esi]
push 4
push eax
call fcn.10092b7f
mov eax, dword [esi]
lea eax, [eax*4 + 4]
push eax
push esi
call fcn.10092b41
add esp, 8
mov dword [ebp - 4], 0xffffffff
mov esi, dword [0x100f1ebc]
test esi, esi
je 0x1006c328
mov eax, dword [0x100f1ec0]
lea eax, [eax*4 + 4]
push eax
mov eax, dword [0x100f1eb8]
add eax, 0xfffffffc
push eax
push esi
call sub.VCRUNTIME140.dll_memcpy
add esp, 0xc
add esi, 4
mov dword [edi], esi
mov byte [0x100f1ec4], 1
xor eax, eax
cmp byte [0x100f1ec4], al
setne al
add eax, 0x15
cmp dword [0x100f1eb8], 0
je 0x1006c390
mov ecx, dword [0x100f1ebc]
test ecx, ecx
je 0x1006c390
cmp eax, dword [0x100f1ec0]
ja 0x1006c390
mov dword [ecx + eax*4], 0x10047cc0
mov ecx, 0x100000
mov eax, dword [0x100f1eb8]
cmp dword [eax + 0x54], 0
mov eax, 0x200000
cmove ecx, eax
or ecx, ebx
mov ebx, ecx
mov eax, ecx
and ebx, 0xffdfffff
and eax, 0x200000
cmove ebx, ecx
test ebx, 0x100000
je 0x1006c390
and ebx, 0xffefffff
mov edi, dword [0x100f1b58]
mov dword [0x100f1ec8], edi
mov eax, dword [edi]
mov dword [0x100f1ecc], eax
test eax, eax
je 0x1006c4b8
xor esi, esi
nop dword [eax]
mov eax, dword [0x100f1ecc]
mov ecx, dword [eax + esi*4]
test ecx, ecx
je 0x1006c3df
mov eax, dword [0x100f188c]
lea edx, [ebp - 0x34]
push 0x1c
push edx
push ecx
call eax
test eax, eax
je 0x1006c3df
mov eax, dword [ebp - 0x20]
test al, 1
jne 0x1006c3df
test eax, 0x100
jne 0x1006c3df
inc esi
jmp 0x1006c3b0
mov dword [0x100f1ed4], esi
test esi, esi
je 0x1006c4b8
lea edx, [esi + 1]
lea ecx, [ebp - 0x14]
call fcn.1002fdc0
cmp eax, 0x100f1ed0
je 0x1006c449
mov ecx, dword [eax]
mov dword [eax], 0
mov eax, dword [0x100f1ed0]
mov dword [0x100f1ed0], ecx
test eax, eax
je 0x1006c449
push fcn.1001b1e0
lea esi, [eax - 4]
mov dword [ebp - 4], 0x18
push dword [esi]
push 4
push eax
call fcn.10092b7f
mov eax, dword [esi]
lea eax, [eax*4 + 4]
push eax
push esi
call fcn.10092b41
add esp, 8
mov dword [ebp - 4], 0xffffffff
mov eax, dword [ebp - 0x14]
test eax, eax
je 0x1006c483
push fcn.1001b1e0
lea esi, [eax - 4]
mov dword [ebp - 4], 0x19
push dword [esi]
push 4
push eax
call fcn.10092b7f
mov eax, dword [esi]
lea eax, [eax*4 + 4]
push eax
push esi
call fcn.10092b41
add esp, 8
mov dword [ebp - 4], 0xffffffff
mov esi, dword [0x100f1ed0]
test esi, esi
je 0x1006c4b8
mov eax, dword [0x100f1ed4]
lea eax, [eax*4 + 4]
push eax
mov eax, dword [0x100f1ecc]
add eax, 0xfffffffc
push eax
push esi
call sub.VCRUNTIME140.dll_memcpy
add esp, 0xc
add esi, 4
mov dword [edi], esi
mov byte [0x100f1ed8], 1
xor eax, eax
cmp byte [0x100f1ed8], al
setne al
add eax, 7
cmp dword [0x100f1ecc], 0
je 0x1006c520
mov ecx, dword [0x100f1ed0]
test ecx, ecx
je 0x1006c520
cmp eax, dword [0x100f1ed4]
ja 0x1006c520
mov dword [ecx + eax*4], 0x100463a0
mov ecx, 0x400000
mov eax, dword [0x100f1ecc]
cmp dword [eax + 0x1c], 0
mov eax, 0x800000
cmove ecx, eax
or ecx, ebx
mov ebx, ecx
mov eax, ecx
and ebx, 0xff7fffff
and eax, 0x800000
cmove ebx, ecx
test ebx, 0x400000
je 0x1006c520
and ebx, 0xffbfffff
mov edi, dword [0x100f1a6c]
mov dword [0x100f1dc4], edi
mov ecx, dword [edi]
mov dword [0x100f1dc8], ecx
test ecx, ecx
je 0x1006c655
xor esi, esi
nop
mov edx, dword [ecx + esi*4]
test edx, edx
je 0x1006c576
mov eax, dword [0x100f188c]
lea ecx, [ebp - 0x34]
push 0x1c
push ecx
push edx
call eax
test eax, eax
je 0x1006c570
mov eax, dword [ebp - 0x20]
test al, 1
jne 0x1006c570
test eax, 0x100
jne 0x1006c570
mov ecx, dword [0x100f1dc8]
inc esi
jmp 0x1006c540
mov ecx, dword [0x100f1dc8]
mov dword [0x100f1dd0], esi
test esi, esi
je 0x1006c655
lea edx, [esi + 1]
lea ecx, [ebp - 0x14]
call fcn.1002fdc0
cmp eax, 0x100f1dcc
je 0x1006c5e0
mov ecx, dword [eax]
mov dword [eax], 0
mov eax, dword [0x100f1dcc]
mov dword [0x100f1dcc], ecx
test eax, eax
je 0x1006c5e0
push fcn.1001b1e0
lea esi, [eax - 4]
mov dword [ebp - 4], 0x1a
push dword [esi]
push 4
push eax
call fcn.10092b7f
mov eax, dword [esi]
lea eax, [eax*4 + 4]
push eax
push esi
call fcn.10092b41
add esp, 8
mov dword [ebp - 4], 0xffffffff
mov eax, dword [ebp - 0x14]
test eax, eax
je 0x1006c61a
push fcn.1001b1e0
lea esi, [eax - 4]
mov dword [ebp - 4], 0x1b
push dword [esi]
push 4
push eax
call fcn.10092b7f
mov eax, dword [esi]
lea eax, [eax*4 + 4]
push eax
push esi
call fcn.10092b41
add esp, 8
mov dword [ebp - 4], 0xffffffff
mov esi, dword [0x100f1dcc]
test esi, esi
je 0x1006c64f
mov eax, dword [0x100f1dd0]
lea eax, [eax*4 + 4]
push eax
mov eax, dword [0x100f1dc8]
add eax, 0xfffffffc
push eax
push esi
call sub.VCRUNTIME140.dll_memcpy
add esp, 0xc
add esi, 4
mov dword [edi], esi
mov byte [0x100f1dd4], 1
mov ecx, dword [0x100f1dc8]
xor eax, eax
cmp byte [0x100f1dd4], al
setne al
add eax, 0x24
test ecx, ecx
je 0x1006c6bc
mov edx, dword [0x100f1dcc]
test edx, edx
je 0x1006c6bc
cmp eax, dword [0x100f1dd0]
ja 0x1006c6bc
mov dword [edx + eax*4], 0x10030970
mov eax, 0x2000000
mov ecx, dword [0x100f1dc8]
mov edx, 0x1000000
cmp dword [ecx + 0x90], 0
cmove edx, eax
or edx, ebx
mov ebx, edx
mov eax, edx
and ebx, 0xfdffffff
and eax, 0x2000000
cmove ebx, edx
test ebx, 0x1000000
je 0x1006c6bc
and ebx, 0xfeffffff
xor eax, eax
cmp byte [0x100f1dd4], al
setne al
add eax, 5
test ecx, ecx
je 0x1006c720
mov edx, dword [0x100f1dcc]
test edx, edx
je 0x1006c720
cmp eax, dword [0x100f1dd0]
ja 0x1006c720
mov dword [edx + eax*4], 0x100309e0
mov eax, 0x8000000
mov ecx, dword [0x100f1dc8]
mov edx, 0x4000000
cmp dword [ecx + 0x14], 0
cmove edx, eax
or edx, ebx
mov ebx, edx
mov eax, edx
and ebx, 0xf7ffffff
and eax, 0x8000000
cmove ebx, edx
test ebx, 0x4000000
je 0x1006c720
and ebx, 0xfbffffff
xor eax, eax
cmp byte [0x100f1dd4], al
setne al
add eax, 0x18
test ecx, ecx
je 0x1006c783
mov ecx, dword [0x100f1dcc]
test ecx, ecx
je 0x1006c783
cmp eax, dword [0x100f1dd0]
ja 0x1006c783
mov dword [ecx + eax*4], 0x10030a50
mov ecx, 0x10000000
mov eax, dword [0x100f1dc8]
cmp dword [eax + 0x60], 0
mov eax, 0x20000000
cmove ecx, eax
or ecx, ebx
mov ebx, ecx
mov eax, ecx
and ebx, 0xdfffffff
and eax, 0x20000000
cmove ebx, ecx
test ebx, 0x10000000
je 0x1006c783
and ebx, 0xefffffff
push 0x100ac21c
call dword [0x100f1b68]
mov edi, dword [0x100f1ac0]
mov dword [0x100f23f0], edi
mov eax, dword [edi]
mov dword [0x100f23f4], eax
test eax, eax
je 0x1006c8b8
xor esi, esi
nop dword [eax + eax]
mov eax, dword [0x100f23f4]
mov ecx, dword [eax + esi*4]
test ecx, ecx
je 0x1006c7df
mov eax, dword [0x100f188c]
lea edx, [ebp - 0x34]
push 0x1c
push edx
push ecx
call eax
test eax, eax
je 0x1006c7df
mov eax, dword [ebp - 0x20]
test al, 1
jne 0x1006c7df
test eax, 0x100
jne 0x1006c7df
inc esi
jmp 0x1006c7b0
mov dword [0x100f23fc], esi
test esi, esi
je 0x1006c8b8
lea edx, [esi + 1]
lea ecx, [ebp - 0x14]
call fcn.1002fdc0
cmp eax, 0x100f23f8
je 0x1006c849
mov ecx, dword [eax]
mov dword [eax], 0
mov eax, dword [0x100f23f8]
mov dword [0x100f23f8], ecx
test eax, eax
je 0x1006c849
push fcn.1001b1e0
lea esi, [eax - 4]
mov dword [ebp - 4], 0x1c
push dword [esi]
push 4
push eax
call fcn.10092b7f
mov eax, dword [esi]
lea eax, [eax*4 + 4]
push eax
push esi
call fcn.10092b41
add esp, 8
mov dword [ebp - 4], 0xffffffff
mov eax, dword [ebp - 0x14]
test eax, eax
je 0x1006c883
push fcn.1001b1e0
lea esi, [eax - 4]
mov dword [ebp - 4], 0x1d
push dword [esi]
push 4
push eax
call fcn.10092b7f
mov eax, dword [esi]
lea eax, [eax*4 + 4]
push eax
push esi
call fcn.10092b41
add esp, 8
mov dword [ebp - 4], 0xffffffff
mov esi, dword [0x100f23f8]
test esi, esi
je 0x1006c8b8
mov eax, dword [0x100f23fc]
lea eax, [eax*4 + 4]
push eax
mov eax, dword [0x100f23f4]
add eax, 0xfffffffc
push eax
push esi
call sub.VCRUNTIME140.dll_memcpy
add esp, 0xc
add esi, 4
mov dword [edi], esi
mov byte [0x100f2400], 1
xor eax, eax
cmp byte [0x100f2400], al
setne al
add eax, 0xd
cmp dword [0x100f23f4], 0
je 0x1006c8e8
mov ecx, dword [0x100f23f8]
test ecx, ecx
je 0x1006c8e8
cmp eax, dword [0x100f23fc]
ja 0x1006c8e8
mov dword [ecx + eax*4], 0x100657f0
mov edi, dword [0x100f1ac4]
mov dword [0x100f1edc], edi
mov eax, dword [edi]
mov dword [0x100f1ee0], eax
test eax, eax
je 0x1006ca0d
xor esi, esi
mov eax, dword [0x100f1ee0]
mov ecx, dword [eax + esi*4]
test ecx, ecx
je 0x1006c934
mov eax, dword [0x100f188c]
lea edx, [ebp - 0x34]
push 0x1c
push edx
push ecx
call eax
test eax, eax
je 0x1006c934
mov eax, dword [ebp - 0x20]
test al, 1
jne 0x1006c934
test eax, 0x100
jne 0x1006c934
inc esi
jmp 0x1006c905
mov dword [0x100f1ee8], esi
test esi, esi
je 0x1006ca0d
lea edx, [esi + 1]
lea ecx, [ebp - 0x14]
call fcn.1002fdc0
cmp eax, 0x100f1ee4
je 0x1006c99e
mov ecx, dword [eax]
mov dword [eax], 0
mov eax, dword [0x100f1ee4]
mov dword [0x100f1ee4], ecx
test eax, eax
je 0x1006c99e
push fcn.1001b1e0
lea esi, [eax - 4]
mov dword [ebp - 4], 0x1e
push dword [esi]
push 4
push eax
call fcn.10092b7f
mov eax, dword [esi]
lea eax, [eax*4 + 4]
push eax
push esi
call fcn.10092b41
add esp, 8
mov dword [ebp - 4], 0xffffffff
mov eax, dword [ebp - 0x14]
test eax, eax
je 0x1006c9d8
push fcn.1001b1e0
lea esi, [eax - 4]
mov dword [ebp - 4], 0x1f
push dword [esi]
push 4
push eax
call fcn.10092b7f
mov eax, dword [esi]
lea eax, [eax*4 + 4]
push eax
push esi
call fcn.10092b41
add esp, 8
mov dword [ebp - 4], 0xffffffff
mov esi, dword [0x100f1ee4]
test esi, esi
je 0x1006ca0d
mov eax, dword [0x100f1ee8]
lea eax, [eax*4 + 4]
push eax
mov eax, dword [0x100f1ee0]
add eax, 0xfffffffc
push eax
push esi
call sub.VCRUNTIME140.dll_memcpy
add esp, 0xc
add esi, 4
mov dword [edi], esi
mov byte [0x100f1eec], 1
xor eax, eax
cmp byte [0x100f1eec], al
setne al
add eax, 0xd
cmp dword [0x100f1ee0], 0
je 0x1006ca3d
mov ecx, dword [0x100f1ee4]
test ecx, ecx
je 0x1006ca3d
cmp eax, dword [0x100f1ee8]
ja 0x1006ca3d
mov dword [ecx + eax*4], 0x10065930
lea eax, [ebp - 0x14]
mov dword [ebp - 0x18], 0xf3c2c786
push eax
mov ecx, 0x100f7460
mov dword [ebp - 0x14], 0x72e242a1
call fcn.1003d710
lea ecx, [ebp - 0x18]
push ecx
mov ecx, eax
call fcn.1003d6f0
movq xmm0, qword [eax]
mov eax, dword [eax + 8]
movq qword [ebp - 0x40], xmm0
cmp byte [ebp - 0x40], 0
mov dword [ebp - 0x38], eax
jne 0x1006ca8b
mov ecx, dword [ebp - 0x3c]
mov eax, dword [ecx + 0x20]
mov dword [0x100f2420], eax
mov dword [ecx + 0x20], 0x1006a790
lea eax, [ebp - 0x14]
mov dword [ebp - 0x18], 0x9ef0d03e
push eax
mov ecx, 0x100f7460
mov dword [ebp - 0x14], 0x72e242a1
call fcn.1003d710
lea ecx, [ebp - 0x18]
push ecx
mov ecx, eax
call fcn.1003d6f0
movq xmm0, qword [eax]
mov eax, dword [eax + 8]
movq qword [ebp - 0x40], xmm0
cmp byte [ebp - 0x40], 0
mov dword [ebp - 0x38], eax
jne 0x1006cad9
mov edx, dword [ebp - 0x3c]
mov eax, dword [edx + 0x20]
mov dword [0x100f2424], eax
mov dword [edx + 0x20], 0x1006a870
lea eax, [ebp - 0x14]
mov dword [ebp - 0x18], 0x781aa1a4
push eax
mov ecx, 0x100f7460
mov dword [ebp - 0x14], 0x2aafa737
call fcn.1003d710
lea ecx, [ebp - 0x18]
push ecx
mov ecx, eax
call fcn.1003d6f0
movq xmm0, qword [eax]
mov eax, dword [eax + 8]
movq qword [ebp - 0x40], xmm0
cmp byte [ebp - 0x40], 0
mov dword [ebp - 0x38], eax
jne 0x1006cb27
mov ecx, dword [ebp - 0x3c]
mov eax, dword [ecx + 0x20]
mov dword [0x100f242c], eax
mov dword [ecx + 0x20], 0x1006aa00
call fcn.1003ef60
cmp dword [0x100f1884], 0
jne 0x1006cb46
push 0
push 0
push 0
call dword [sym.imp.KERNEL32.dll_HeapCreate]
mov dword [0x100f1884], eax
xor eax, eax
mov esi, 0x100f1874
xchg dword [esi], eax
mov ecx, dword [0x100f19d8]
mov eax, dword [ecx]
mov eax, dword [eax + 0xac]
call eax
push 0x100f18b4
mov edx, 0x1006aa20
mov eax, dword [eax]
mov ecx, dword [eax + 0x18]
call fcn.1003efb0
push 0xc4
push str.55_8B_EC_56_8B_F1_8B_86_________85_C0_74_24_48_83_F8_02_77_2C_83_BE___________8D_8E_________74_06_32_C0_84_C0_EB_10_E8_________84_C0_EB_07_83_BE___________0F_94_C0_84_C0_74_07_B0_01_5E_5D_C2_0C_00
lea ecx, [ebp - 0x30]
mov dword [ebp - 0x20], 0
mov dword [ebp - 0x1c], 0xf
mov byte [ebp - 0x30], 0
call fcn.10022470
mov edx, 0x38450191
mov dword [ebp - 4], 0x20
lea ecx, [ebp - 0x40]
call fcn.10048150
mov edx, dword [eax + 8]
test edx, edx
je 0x1006cbb7
mov edx, dword [edx + 0x50]
jmp 0x1006cbb9
xor edx, edx
mov eax, dword [eax]
test eax, eax
je 0x1006cbc4
mov eax, dword [eax + 0x18]
jmp 0x1006cbc6
xor eax, eax
lea ecx, [ebp - 0x30]
push ecx
push eax
lea ecx, [ebp - 0x14]
call fcn.10048600
mov ecx, dword [ebp - 0x14]
add esp, 8
mov edx, 0x10047e30
push 0x100f7518
call fcn.1003efb0
mov edx, dword [ebp - 0x1c]
cmp edx, 0x10
jb 0x1006cc1e
mov ecx, dword [ebp - 0x30]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x1006cc14
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
jbe 0x1006cc14
call dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
push edx
push ecx
call fcn.10092fae
add esp, 8
call fcn.1003ef60
cmp dword [0x100f1884], 0
je 0x1006cc31
call fcn.1003ee60
xor eax, eax
xchg dword [esi], eax
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 0x10]
xor ecx, ebp
call fcn.10092b30
mov esp, ebp
pop ebp
ret