Function at 0x100933d0
Capabilities:
Allocate or change rwx memory
Execute shellcode via indirect call
Inspect section memory permissions

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x100cdbcd
mov eax, dword fs:[0]
push eax
sub esp, 0x38
mov eax, dword [0x100e5364]
xor eax, ebp
mov dword [ebp - 0x10], eax
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
xor edx, edx
mov dword [ebp - 0x14], edx
call fcn.100bf5d0
push 0x30
xorps xmm0, xmm0
mov dword [ebp - 0x24], 0
push str.55_8B_EC_81_EC_________53_56_57_8B_3D_________8A
lea ecx, [ebp - 0x34]
mov dword [ebp - 0x20], 0
movups xmmword [ebp - 0x34], xmm0
call fcn.100304c0
mov edx, 0x38450191
mov dword [ebp - 4], 0
lea ecx, [ebp - 0x44]
call fcn.10057820
mov edx, dword [eax + 8]
test edx, edx
je 0x10093448
mov edx, dword [edx + 0x50]
jmp 0x1009344a
xor edx, edx
mov eax, dword [eax]
test eax, eax
je 0x10093455
mov eax, dword [eax + 0x18]
jmp 0x10093457
xor eax, eax
lea ecx, [ebp - 0x34]
push ecx
push eax
lea ecx, [ebp - 0x18]
call fcn.10057c50
add esp, 8
push 0x101a9350
push 0x1009c450
push dword [ebp - 0x18]
call fcn.100bf710
mov dword [ebp - 4], 0xffffffff
mov ecx, dword [ebp - 0x20]
cmp ecx, 0x10
jb 0x100934b6
mov edx, dword [ebp - 0x34]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x100934ac
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
jbe 0x100934ac
call dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
push ecx
push edx
call fcn.100c2b54
add esp, 8
push 0x2e
xorps xmm0, xmm0
mov dword [ebp - 0x24], 0
push str.57_8B_F9_8B_07_8B_80_________FF_D0_84_C0_75_02
lea ecx, [ebp - 0x34]
mov dword [ebp - 0x20], 0
movups xmmword [ebp - 0x34], xmm0
call fcn.100304c0
mov edx, 0x6c5a4374
mov dword [ebp - 4], 1
lea ecx, [ebp - 0x44]
call fcn.10057820
mov edx, dword [eax + 8]
test edx, edx
je 0x100934fa
mov edx, dword [edx + 0x50]
jmp 0x100934fc
xor edx, edx
mov eax, dword [eax]
test eax, eax
je 0x10093507
mov eax, dword [eax + 0x18]
jmp 0x10093509
xor eax, eax
lea ecx, [ebp - 0x34]
push ecx
push eax
lea ecx, [ebp - 0x18]
call fcn.10057c50
add esp, 8
push 0
push 0x10092cc0
push dword [ebp - 0x18]
call fcn.100bf710
mov dword [ebp - 4], 0xffffffff
mov ecx, dword [ebp - 0x20]
cmp ecx, 0x10
jb 0x10093565
mov edx, dword [ebp - 0x34]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x1009355b
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
jbe 0x1009355b
call dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
push ecx
push edx
call fcn.100c2b54
add esp, 8
push 0
call fcn.100bfb30
push 0
push str.Valve001
call dword [sym.imp.USER32.dll_FindWindowA]
mov ecx, dword [0x10162634]
push 0x100bf360
push 0xfffffffffffffffc
push eax
call ecx
mov edi, dword [0x101a3c00]
mov dword [0x101a4730], eax
mov dword [0x101a40b4], edi
mov eax, dword [edi]
mov dword [0x101a40b8], eax
test eax, eax
je 0x100936bf
xor esi, esi
nop dword [eax + eax]
mov eax, dword [0x101a40b8]
mov ecx, dword [eax + esi*4]
test ecx, ecx
je 0x100935df
mov eax, dword [0x10162630]
lea edx, [ebp - 0x38]
push 0x1c
push edx
push ecx
call eax
test eax, eax
je 0x100935df
mov eax, dword [ebp - 0x24]
test al, 1
jne 0x100935df
test eax, 0x100
jne 0x100935df
inc esi
jmp 0x100935b0
mov dword [0x101a40c0], esi
test esi, esi
je 0x100936bf
lea edx, [esi + 1]
lea ecx, [ebp - 0x1c]
call fcn.10040c20
cmp eax, 0x101a40bc
je 0x10093649
mov ecx, dword [eax]
mov dword [eax], 0
mov eax, dword [0x101a40bc]
mov dword [0x101a40bc], ecx
test eax, eax
je 0x10093649
push 0x10024cf0
lea esi, [eax - 4]
mov dword [ebp - 4], 2
push dword [esi]
push 4
push eax
call fcn.100c2720
mov eax, dword [esi]
lea eax, [eax*4 + 4]
push eax
push esi
call fcn.100c2634
add esp, 8
mov dword [ebp - 4], 0xffffffff
mov eax, dword [ebp - 0x1c]
mov dword [ebp - 0x18], eax
test eax, eax
je 0x1009368a
push 0x10024cf0
lea esi, [eax - 4]
mov dword [ebp - 4], 3
push dword [esi]
push 4
push eax
call fcn.100c2720
mov ecx, dword [ebp - 0x18]
mov eax, dword [ecx - 4]
lea eax, [eax*4 + 4]
push eax
push esi
call fcn.100c2634
add esp, 8
mov dword [ebp - 4], 0xffffffff
mov esi, dword [0x101a40bc]
test esi, esi
je 0x100936bf
mov eax, dword [0x101a40c0]
lea eax, [eax*4 + 4]
push eax
mov eax, dword [0x101a40b8]
add eax, 0xfffffffc
push eax
push esi
call sub.VCRUNTIME140.dll_memcpy
add esp, 0xc
add esi, 4
mov dword [edi], esi
mov byte [0x101a40c4], 1
xor eax, eax
cmp byte [0x101a40c4], al
setne al
add eax, 0x29
cmp dword [0x101a40b8], 0
je 0x100936ef
mov ecx, dword [0x101a40bc]
test ecx, ecx
je 0x100936ef
cmp eax, dword [0x101a40c0]
ja 0x100936ef
mov dword [ecx + eax*4], 0x100a7a80
mov edi, dword [0x101a3be8]
mov dword [0x101a40dc], edi
mov eax, dword [edi]
mov dword [0x101a40e0], eax
test eax, eax
je 0x1009381f
xor esi, esi
nop dword [eax]
mov eax, dword [0x101a40e0]
mov ecx, dword [eax + esi*4]
test ecx, ecx
je 0x1009373f
mov eax, dword [0x10162630]
lea edx, [ebp - 0x38]
push 0x1c
push edx
push ecx
call eax
test eax, eax
je 0x1009373f
mov eax, dword [ebp - 0x24]
test al, 1
jne 0x1009373f
test eax, 0x100
jne 0x1009373f
inc esi
jmp 0x10093710
mov dword [0x101a40e8], esi
test esi, esi
je 0x1009381f
lea edx, [esi + 1]
lea ecx, [ebp - 0x1c]
call fcn.10040c20
cmp eax, 0x101a40e4
je 0x100937a9
mov ecx, dword [eax]
mov dword [eax], 0
mov eax, dword [0x101a40e4]
mov dword [0x101a40e4], ecx
test eax, eax
je 0x100937a9
push 0x10024cf0
lea esi, [eax - 4]
mov dword [ebp - 4], 4
push dword [esi]
push 4
push eax
call fcn.100c2720
mov eax, dword [esi]
lea eax, [eax*4 + 4]
push eax
push esi
call fcn.100c2634
add esp, 8
mov dword [ebp - 4], 0xffffffff
mov eax, dword [ebp - 0x1c]
mov dword [ebp - 0x18], eax
test eax, eax
je 0x100937ea
push 0x10024cf0
lea esi, [eax - 4]
mov dword [ebp - 4], 5
push dword [esi]
push 4
push eax
call fcn.100c2720
mov ecx, dword [ebp - 0x18]
mov eax, dword [ecx - 4]
lea eax, [eax*4 + 4]
push eax
push esi
call fcn.100c2634
add esp, 8
mov dword [ebp - 4], 0xffffffff
mov esi, dword [0x101a40e4]
test esi, esi
je 0x1009381f
mov eax, dword [0x101a40e8]
lea eax, [eax*4 + 4]
push eax
mov eax, dword [0x101a40e0]
add eax, 0xfffffffc
push eax
push esi
call sub.VCRUNTIME140.dll_memcpy
add esp, 0xc
add esi, 4
mov dword [edi], esi
mov byte [0x101a40ec], 1
xor eax, eax
cmp byte [0x101a40ec], al
setne al
add eax, 5
cmp dword [0x101a40e0], 0
je 0x1009384f
mov ecx, dword [0x101a40e4]
test ecx, ecx
je 0x1009384f
cmp eax, dword [0x101a40e8]
ja 0x1009384f
mov dword [ecx + eax*4], 0x1009bf70
xor eax, eax
cmp byte [0x101a40ec], al
setne al
add eax, 6
cmp dword [0x101a40e0], 0
je 0x1009387f
mov ecx, dword [0x101a40e4]
test ecx, ecx
je 0x1009387f
cmp eax, dword [0x101a40e8]
ja 0x1009387f
mov dword [ecx + eax*4], 0x1009c020
xor eax, eax
cmp byte [0x101a40ec], al
setne al
add eax, 7
cmp dword [0x101a40e0], 0
je 0x100938af
mov ecx, dword [0x101a40e4]
test ecx, ecx
je 0x100938af
cmp eax, dword [0x101a40e8]
ja 0x100938af
mov dword [ecx + eax*4], 0x1009c040
xor eax, eax
cmp byte [0x101a40ec], al
setne al
add eax, 0x24
cmp dword [0x101a40e0], 0
je 0x100938df
mov ecx, dword [0x101a40e4]
test ecx, ecx
je 0x100938df
cmp eax, dword [0x101a40e8]
ja 0x100938df
mov dword [ecx + eax*4], 0x1009c0b0
xor eax, eax
cmp byte [0x101a40ec], al
setne al
add eax, 0x17
cmp dword [0x101a40e0], 0
je 0x1009390f
mov ecx, dword [0x101a40e4]
test ecx, ecx
je 0x1009390f
cmp eax, dword [0x101a40e8]
ja 0x1009390f
mov dword [ecx + eax*4], 0x10092cd0
mov edi, dword [0x101a3bf0]
mov dword [0x101a4104], edi
mov eax, dword [edi]
mov dword [0x101a4108], eax
test eax, eax
je 0x10093a3f
xor esi, esi
nop dword [eax]
mov eax, dword [0x101a4108]
mov ecx, dword [eax + esi*4]
test ecx, ecx
je 0x1009395f
mov eax, dword [0x10162630]
lea edx, [ebp - 0x38]
push 0x1c
push edx
push ecx
call eax
test eax, eax
je 0x1009395f
mov eax, dword [ebp - 0x24]
test al, 1
jne 0x1009395f
test eax, 0x100
jne 0x1009395f
inc esi
jmp 0x10093930
mov dword [0x101a4110], esi
test esi, esi
je 0x10093a3f
lea edx, [esi + 1]
lea ecx, [ebp - 0x1c]
call fcn.10040c20
cmp eax, 0x101a410c
je 0x100939c9
mov ecx, dword [eax]
mov dword [eax], 0
mov eax, dword [0x101a410c]
mov dword [0x101a410c], ecx
test eax, eax
je 0x100939c9
push 0x10024cf0
lea esi, [eax - 4]
mov dword [ebp - 4], 6
push dword [esi]
push 4
push eax
call fcn.100c2720
mov eax, dword [esi]
lea eax, [eax*4 + 4]
push eax
push esi
call fcn.100c2634
add esp, 8
mov dword [ebp - 4], 0xffffffff
mov eax, dword [ebp - 0x1c]
mov dword [ebp - 0x18], eax
test eax, eax
je 0x10093a0a
push 0x10024cf0
lea esi, [eax - 4]
mov dword [ebp - 4], 7
push dword [esi]
push 4
push eax
call fcn.100c2720
mov ecx, dword [ebp - 0x18]
mov eax, dword [ecx - 4]
lea eax, [eax*4 + 4]
push eax
push esi
call fcn.100c2634
add esp, 8
mov dword [ebp - 4], 0xffffffff
mov esi, dword [0x101a410c]
test esi, esi
je 0x10093a3f
mov eax, dword [0x101a4110]
lea eax, [eax*4 + 4]
push eax
mov eax, dword [0x101a4108]
add eax, 0xfffffffc
push eax
push esi
call sub.VCRUNTIME140.dll_memcpy
add esp, 0xc
add esi, 4
mov dword [edi], esi
mov byte [0x101a4114], 1
xor eax, eax
cmp byte [0x101a4114], al
setne al
add eax, 0x1b
cmp dword [0x101a4108], 0
je 0x10093a6f
mov ecx, dword [0x101a410c]
test ecx, ecx
je 0x10093a6f
cmp eax, dword [0x101a4110]
ja 0x10093a6f
mov dword [ecx + eax*4], 0x10099570
xor eax, eax
cmp byte [0x101a4114], al
setne al
add eax, 0x5d
cmp dword [0x101a4108], 0
je 0x10093a9f
mov ecx, dword [0x101a410c]
test ecx, ecx
je 0x10093a9f
cmp eax, dword [0x101a4110]
ja 0x10093a9f
mov dword [ecx + eax*4], 0x100996d0
xor eax, eax
cmp byte [0x101a4114], al
setne al
add eax, 0x5a
cmp dword [0x101a4108], 0
je 0x10093acf
mov ecx, dword [0x101a410c]
test ecx, ecx
je 0x10093acf
cmp eax, dword [0x101a4110]
ja 0x10093acf
mov dword [ecx + eax*4], 0x10099910
mov edi, dword [0x101a3c08]
mov dword [0x101a412c], edi
mov eax, dword [edi]
mov dword [0x101a4130], eax
test eax, eax
je 0x10093bff
xor esi, esi
nop dword [eax]
mov eax, dword [0x101a4130]
mov ecx, dword [eax + esi*4]
test ecx, ecx
je 0x10093b1f
mov eax, dword [0x10162630]
lea edx, [ebp - 0x38]
push 0x1c
push edx
push ecx
call eax
test eax, eax
je 0x10093b1f
mov eax, dword [ebp - 0x24]
test al, 1
jne 0x10093b1f
test eax, 0x100
jne 0x10093b1f
inc esi
jmp 0x10093af0
mov dword [0x101a4138], esi
test esi, esi
je 0x10093bff
lea edx, [esi + 1]
lea ecx, [ebp - 0x1c]
call fcn.10040c20
cmp eax, 0x101a4134
je 0x10093b89
mov ecx, dword [eax]
mov dword [eax], 0
mov eax, dword [0x101a4134]
mov dword [0x101a4134], ecx
test eax, eax
je 0x10093b89
push 0x10024cf0
lea esi, [eax - 4]
mov dword [ebp - 4], 8
push dword [esi]
push 4
push eax
call fcn.100c2720
mov eax, dword [esi]
lea eax, [eax*4 + 4]
push eax
push esi
call fcn.100c2634
add esp, 8
mov dword [ebp - 4], 0xffffffff
mov eax, dword [ebp - 0x1c]
mov dword [ebp - 0x18], eax
test eax, eax
je 0x10093bca
push 0x10024cf0
lea esi, [eax - 4]
mov dword [ebp - 4], 9
push dword [esi]
push 4
push eax
call fcn.100c2720
mov ecx, dword [ebp - 0x18]
mov eax, dword [ecx - 4]
lea eax, [eax*4 + 4]
push eax
push esi
call fcn.100c2634
add esp, 8
mov dword [ebp - 4], 0xffffffff
mov esi, dword [0x101a4134]
test esi, esi
je 0x10093bff
mov eax, dword [0x101a4138]
lea eax, [eax*4 + 4]
push eax
mov eax, dword [0x101a4130]
add eax, 0xfffffffc
push eax
push esi
call sub.VCRUNTIME140.dll_memcpy
add esp, 0xc
add esi, 4
mov dword [edi], esi
mov byte [0x101a413c], 1
xor eax, eax
cmp byte [0x101a413c], al
setne al
add eax, 0xe
cmp dword [0x101a4130], 0
je 0x10093c2f
mov ecx, dword [0x101a4134]
test ecx, ecx
je 0x10093c2f
cmp eax, dword [0x101a4138]
ja 0x10093c2f
mov dword [ecx + eax*4], 0x100b1330
xor eax, eax
cmp byte [0x101a413c], al
setne al
add eax, 0x13
cmp dword [0x101a4130], 0
je 0x10093c5f
mov ecx, dword [0x101a4134]
test ecx, ecx
je 0x10093c5f
cmp eax, dword [0x101a4138]
ja 0x10093c5f
mov dword [ecx + eax*4], 0x100b1670
mov edi, dword [0x101a3c4c]
mov dword [0x101a40c8], edi
mov eax, dword [edi]
mov dword [0x101a40cc], eax
test eax, eax
je 0x10093d8f
xor esi, esi
nop dword [eax]
mov eax, dword [0x101a40cc]
mov ecx, dword [eax + esi*4]
test ecx, ecx
je 0x10093caf
mov eax, dword [0x10162630]
lea edx, [ebp - 0x38]
push 0x1c
push edx
push ecx
call eax
test eax, eax
je 0x10093caf
mov eax, dword [ebp - 0x24]
test al, 1
jne 0x10093caf
test eax, 0x100
jne 0x10093caf
inc esi
jmp 0x10093c80
mov dword [0x101a40d4], esi
test esi, esi
je 0x10093d8f
lea edx, [esi + 1]
lea ecx, [ebp - 0x1c]
call fcn.10040c20
cmp eax, 0x101a40d0
je 0x10093d19
mov ecx, dword [eax]
mov dword [eax], 0
mov eax, dword [0x101a40d0]
mov dword [0x101a40d0], ecx
test eax, eax
je 0x10093d19
push 0x10024cf0
lea esi, [eax - 4]
mov dword [ebp - 4], 0xa
push dword [esi]
push 4
push eax
call fcn.100c2720
mov eax, dword [esi]
lea eax, [eax*4 + 4]
push eax
push esi
call fcn.100c2634
add esp, 8
mov dword [ebp - 4], 0xffffffff
mov eax, dword [ebp - 0x1c]
mov dword [ebp - 0x18], eax
test eax, eax
je 0x10093d5a
push 0x10024cf0
lea esi, [eax - 4]
mov dword [ebp - 4], 0xb
push dword [esi]
push 4
push eax
call fcn.100c2720
mov ecx, dword [ebp - 0x18]
mov eax, dword [ecx - 4]
lea eax, [eax*4 + 4]
push eax
push esi
call fcn.100c2634
add esp, 8
mov dword [ebp - 4], 0xffffffff
mov esi, dword [0x101a40d0]
test esi, esi
je 0x10093d8f
mov eax, dword [0x101a40d4]
lea eax, [eax*4 + 4]
push eax
mov eax, dword [0x101a40cc]
add eax, 0xfffffffc
push eax
push esi
call sub.VCRUNTIME140.dll_memcpy
add esp, 0xc
add esi, 4
mov dword [edi], esi
mov byte [0x101a40d8], 1
xor eax, eax
cmp byte [0x101a40d8], al
setne al
add eax, 0x10
cmp dword [0x101a40cc], 0
je 0x10093dbf
mov ecx, dword [0x101a40d0]
test ecx, ecx
je 0x10093dbf
cmp eax, dword [0x101a40d4]
ja 0x10093dbf
mov dword [ecx + eax*4], 0x100a7650
xor eax, eax
cmp byte [0x101a40d8], al
setne al
add eax, 0x11
cmp dword [0x101a40cc], 0
je 0x10093def
mov ecx, dword [0x101a40d0]
test ecx, ecx
je 0x10093def
cmp eax, dword [0x101a40d4]
ja 0x10093def
mov dword [ecx + eax*4], 0x100a7660
mov edx, dword [0x101a40cc]
xor eax, eax
cmp byte [0x101a40d8], al
mov ecx, edx
setne al
add eax, 0x12
test edx, edx
je 0x10093e2f
mov esi, dword [0x101a40d0]
test esi, esi
je 0x10093e2f
cmp eax, dword [0x101a40d4]
ja 0x10093e2f
mov dword [esi + eax*4], 0x100a7690
mov ecx, dword [0x101a40cc]
cmp dword [ecx + 0x48], 0
cmovne ecx, ecx
xor eax, eax
cmp byte [0x101a40d8], al
setne al
add eax, 0x18
test ecx, ecx
je 0x10093e84
mov ecx, dword [0x101a40d0]
test ecx, ecx
je 0x10093e84
cmp eax, dword [0x101a40d4]
ja 0x10093e84
mov dword [ecx + eax*4], 0x100a77c0
mov eax, dword [0x101a40cc]
mov edx, dword [eax + 0x60]
neg edx
sbb edx, edx
add edx, 2
mov dword [ebp - 0x14], edx
test dl, 2
je 0x10093e77
and edx, 0xfffffffd
mov dword [ebp - 0x14], edx
test dl, 1
je 0x10093e87
and edx, 0xfffffffe
mov dword [ebp - 0x14], edx
jmp 0x10093e87
mov edx, dword [ebp - 0x14]
xor eax, eax
cmp byte [0x101a40d8], al
setne al
add eax, 0x2c
cmp dword [0x101a40cc], 0
je 0x10093ee8
mov ecx, dword [0x101a40d0]
test ecx, ecx
je 0x10093ee8
cmp eax, dword [0x101a40d4]
ja 0x10093ee8
mov dword [ecx + eax*4], 0x100a7a50
mov eax, dword [0x101a40cc]
cmp dword [eax + 0xb0], 0
je 0x10093eca
or edx, 4
jmp 0x10093ecd
or edx, 8
mov ecx, edx
and ecx, 0xfffffff7
test dl, 8
cmove ecx, edx
mov edx, ecx
mov dword [ebp - 0x14], edx
test dl, 4
je 0x10093ee8
and edx, 0xfffffffb
mov dword [ebp - 0x14], edx
mov edi, dword [0x101a3bfc]
mov dword [0x101a4140], edi
mov esi, dword [edi]
mov dword [0x101a4144], esi
test esi, esi
je 0x1009402a
xor eax, eax
mov ecx, dword [esi + eax*4]
mov dword [ebp - 0x18], eax
test ecx, ecx
je 0x10093f45
mov eax, dword [0x10162630]
lea edx, [ebp - 0x38]
push 0x1c
push edx
push ecx
call eax
test eax, eax
je 0x10093f3c
mov eax, dword [ebp - 0x24]
test al, 1
jne 0x10093f3c
test eax, 0x100
jne 0x10093f3c
mov eax, dword [ebp - 0x18]
mov esi, dword [0x101a4144]
inc eax
jmp 0x10093f06
mov esi, dword [0x101a4144]
mov eax, dword [ebp - 0x18]
mov dword [0x101a414c], eax
test eax, eax
je 0x1009402a
lea edx, [eax + 1]
lea ecx, [ebp - 0x1c]
call fcn.10040c20
cmp eax, 0x101a4148
je 0x10093fae
mov ecx, dword [eax]
mov dword [eax], 0
mov eax, dword [0x101a4148]
mov dword [0x101a4148], ecx
test eax, eax
je 0x10093fae
push 0x10024cf0
lea esi, [eax - 4]
mov dword [ebp - 4], 0xc
push dword [esi]
push 4
push eax
call fcn.100c2720
mov eax, dword [esi]
lea eax, [eax*4 + 4]
push eax
push esi
call fcn.100c2634
add esp, 8
mov dword [ebp - 4], 0xffffffff
mov eax, dword [ebp - 0x1c]
mov dword [ebp - 0x18], eax
test eax, eax
je 0x10093fef
push 0x10024cf0
lea esi, [eax - 4]
mov dword [ebp - 4], 0xd
push dword [esi]
push 4
push eax
call fcn.100c2720
mov ecx, dword [ebp - 0x18]
mov eax, dword [ecx - 4]
lea eax, [eax*4 + 4]
push eax
push esi
call fcn.100c2634
add esp, 8
mov dword [ebp - 4], 0xffffffff
mov esi, dword [0x101a4148]
test esi, esi
je 0x10094024
mov eax, dword [0x101a414c]
lea eax, [eax*4 + 4]
push eax
mov eax, dword [0x101a4144]
add eax, 0xfffffffc
push eax
push esi
call sub.VCRUNTIME140.dll_memcpy
add esp, 0xc
add esi, 4
mov dword [edi], esi
mov byte [0x101a4150], 1
mov esi, dword [0x101a4144]
xor eax, eax
cmp byte [0x101a4150], al
setne al
add eax, 0x43
test esi, esi
je 0x1009408c
mov ecx, dword [0x101a4148]
test ecx, ecx
je 0x1009408c
mov edx, dword [ebp - 0x14]
cmp eax, dword [0x101a414c]
ja 0x1009408f
mov dword [ecx + eax*4], 0x100a42a0
mov esi, dword [0x101a4144]
cmp dword [esi + 0x10c], 0
je 0x1009406c
or edx, 0x10
jmp 0x1009406f
or edx, 0x20
mov ecx, edx
and ecx, 0xffffffdf
test dl, 0x20
cmove ecx, edx
mov edx, ecx
mov dword [ebp - 0x14], edx
test dl, 0x10
je 0x1009408f
and edx, 0xffffffef
mov dword [ebp - 0x14], edx
jmp 0x1009408f
mov edx, dword [ebp - 0x14]
xor eax, eax
cmp byte [0x101a4150], al
setne al
add eax, 0x52
test esi, esi
je 0x100940f2
mov ecx, dword [0x101a4148]
test ecx, ecx
je 0x100940f2
cmp eax, dword [0x101a414c]
ja 0x100940f2
mov dword [ecx + eax*4], 0x100a42f0
mov esi, dword [0x101a4144]
cmp dword [esi + 0x148], 0
je 0x100940ce
or edx, 0x40
jmp 0x100940d4
or edx, 0x80
mov ecx, edx
and ecx, 0xffffff7f
test dl, 0x80
cmove ecx, edx
mov edx, ecx
mov dword [ebp - 0x14], edx
test dl, 0x40
je 0x100940f2
and edx, 0xffffffbf
mov dword [ebp - 0x14], edx
xor eax, eax
cmp byte [0x101a4150], al
setne al
add eax, 0x74
test esi, esi
je 0x10094160
mov ecx, dword [0x101a4148]
test ecx, ecx
je 0x10094160
cmp eax, dword [0x101a414c]
ja 0x10094160
mov dword [ecx + eax*4], 0x100a4310
mov eax, dword [0x101a4144]
cmp dword [eax + 0x1d0], 0
je 0x10094133
or edx, 0x100
jmp 0x10094139
or edx, 0x200
mov ecx, edx
and ecx, 0xfffffdff
test edx, 0x200
cmove ecx, edx
mov edx, ecx
mov dword [ebp - 0x14], edx
test edx, 0x100
je 0x10094160
and edx, 0xfffffeff
mov dword [ebp - 0x14], edx
mov edi, dword [0x101a3c1c]
mov dword [0x101a4190], edi
mov eax, dword [edi]
mov dword [0x101a4194], eax
test eax, eax
je 0x1009428f
xor esi, esi
nop dword [eax]
mov eax, dword [0x101a4194]
mov ecx, dword [eax + esi*4]
test ecx, ecx
je 0x100941af
mov eax, dword [0x10162630]
lea edx, [ebp - 0x38]
push 0x1c
push edx
push ecx
call eax
test eax, eax
je 0x100941af
mov eax, dword [ebp - 0x24]
test al, 1
jne 0x100941af
test eax, 0x100
jne 0x100941af
inc esi
jmp 0x10094180
mov dword [0x101a419c], esi
test esi, esi
je 0x1009428f
lea edx, [esi + 1]
lea ecx, [ebp - 0x1c]
call fcn.10040c20
cmp eax, 0x101a4198
je 0x10094219
mov ecx, dword [eax]
mov dword [eax], 0
mov eax, dword [0x101a4198]
mov dword [0x101a4198], ecx
test eax, eax
je 0x10094219
push 0x10024cf0
lea esi, [eax - 4]
mov dword [ebp - 4], 0xe
push dword [esi]
push 4
push eax
call fcn.100c2720
mov eax, dword [esi]
lea eax, [eax*4 + 4]
push eax
push esi
call fcn.100c2634
add esp, 8
mov dword [ebp - 4], 0xffffffff
mov eax, dword [ebp - 0x1c]
mov dword [ebp - 0x18], eax
test eax, eax
je 0x1009425a
push 0x10024cf0
lea esi, [eax - 4]
mov dword [ebp - 4], 0xf
push dword [esi]
push 4
push eax
call fcn.100c2720
mov ecx, dword [ebp - 0x18]
mov eax, dword [ecx - 4]
lea eax, [eax*4 + 4]
push eax
push esi
call fcn.100c2634
add esp, 8
mov dword [ebp - 4], 0xffffffff
mov esi, dword [0x101a4198]
test esi, esi
je 0x1009428f
mov eax, dword [0x101a419c]
lea eax, [eax*4 + 4]
push eax
mov eax, dword [0x101a4194]
add eax, 0xfffffffc
push eax
push esi
call sub.VCRUNTIME140.dll_memcpy
add esp, 0xc
add esi, 4
mov dword [edi], esi
mov byte [0x101a41a0], 1
xor eax, eax
cmp byte [0x101a41a0], al
setne al
add eax, 0x15
cmp dword [0x101a4194], 0
je 0x100942fd
mov ecx, dword [0x101a4198]
test ecx, ecx
je 0x100942fd
cmp eax, dword [0x101a419c]
ja 0x100942fd
mov edx, dword [ebp - 0x14]
mov dword [ecx + eax*4], 0x1008a700
mov eax, dword [0x101a4194]
cmp dword [eax + 0x54], 0
je 0x100942d5
or edx, 0x400
jmp 0x100942db
or edx, 0x800
mov eax, edx
and eax, 0xfffff7ff
test edx, 0x800
cmove eax, edx
mov dword [ebp - 0x14], eax
test eax, 0x400
je 0x100942fd
and eax, 0xfffffbff
mov dword [ebp - 0x14], eax
mov edi, dword [0x101a3c14]
mov dword [0x101a417c], edi
mov eax, dword [edi]
mov dword [0x101a4180], eax
test eax, eax
je 0x1009442f
xor esi, esi
nop word [eax + eax]
mov eax, dword [0x101a4180]
mov ecx, dword [eax + esi*4]
test ecx, ecx
je 0x1009434f
mov eax, dword [0x10162630]
lea edx, [ebp - 0x38]
push 0x1c
push edx
push ecx
call eax
test eax, eax
je 0x1009434f
mov eax, dword [ebp - 0x24]
test al, 1
jne 0x1009434f
test eax, 0x100
jne 0x1009434f
inc esi
jmp 0x10094320
mov dword [0x101a4188], esi
test esi, esi
je 0x1009442f
lea edx, [esi + 1]
lea ecx, [ebp - 0x1c]
call fcn.10040c20
cmp eax, 0x101a4184
je 0x100943b9
mov ecx, dword [eax]
mov dword [eax], 0
mov eax, dword [0x101a4184]
mov dword [0x101a4184], ecx
test eax, eax
je 0x100943b9
push 0x10024cf0
lea esi, [eax - 4]
mov dword [ebp - 4], 0x10
push dword [esi]
push 4
push eax
call fcn.100c2720
mov eax, dword [esi]
lea eax, [eax*4 + 4]
push eax
push esi
call fcn.100c2634
add esp, 8
mov dword [ebp - 4], 0xffffffff
mov eax, dword [ebp - 0x1c]
mov dword [ebp - 0x18], eax
test eax, eax
je 0x100943fa
push 0x10024cf0
lea esi, [eax - 4]
mov dword [ebp - 4], 0x11
push dword [esi]
push 4
push eax
call fcn.100c2720
mov ecx, dword [ebp - 0x18]
mov eax, dword [ecx - 4]
lea eax, [eax*4 + 4]
push eax
push esi
call fcn.100c2634
add esp, 8
mov dword [ebp - 4], 0xffffffff
mov esi, dword [0x101a4184]
test esi, esi
je 0x1009442f
mov eax, dword [0x101a4188]
lea eax, [eax*4 + 4]
push eax
mov eax, dword [0x101a4180]
add eax, 0xfffffffc
push eax
push esi
call sub.VCRUNTIME140.dll_memcpy
add esp, 0xc
add esi, 4
mov dword [edi], esi
mov byte [0x101a418c], 1
xor eax, eax
cmp byte [0x101a418c], al
setne al
add eax, 9
cmp dword [0x101a4180], 0
je 0x1009449d
mov ecx, dword [0x101a4184]
test ecx, ecx
je 0x1009449d
cmp eax, dword [0x101a4188]
ja 0x1009449d
mov edx, dword [ebp - 0x14]
mov dword [ecx + eax*4], 0x100b1820
mov eax, dword [0x101a4180]
cmp dword [eax + 0x24], 0
je 0x10094475
or edx, 0x1000
jmp 0x1009447b
or edx, 0x2000
mov eax, edx
and eax, 0xffffdfff
test edx, 0x2000
cmove eax, edx
mov dword [ebp - 0x14], eax
test eax, 0x1000
je 0x1009449d
and eax, 0xffffefff
mov dword [ebp - 0x14], eax
mov edi, dword [0x101a3c74]
mov dword [0x101a41a4], edi
mov eax, dword [edi]
mov dword [0x101a41a8], eax
test eax, eax
je 0x100945cf
xor esi, esi
nop word [eax + eax]
mov eax, dword [0x101a41a8]
mov ecx, dword [eax + esi*4]
test ecx, ecx
je 0x100944ef
mov eax, dword [0x10162630]
lea edx, [ebp - 0x38]
push 0x1c
push edx
push ecx
call eax
test eax, eax
je 0x100944ef
mov eax, dword [ebp - 0x24]
test al, 1
jne 0x100944ef
test eax, 0x100
jne 0x100944ef
inc esi
jmp 0x100944c0
mov dword [0x101a41b0], esi
test esi, esi
je 0x100945cf
lea edx, [esi + 1]
lea ecx, [ebp - 0x1c]
call fcn.10040c20
cmp eax, 0x101a41ac
je 0x10094559
mov ecx, dword [eax]
mov dword [eax], 0
mov eax, dword [0x101a41ac]
mov dword [0x101a41ac], ecx
test eax, eax
je 0x10094559
push 0x10024cf0
lea esi, [eax - 4]
mov dword [ebp - 4], 0x12
push dword [esi]
push 4
push eax
call fcn.100c2720
mov eax, dword [esi]
lea eax, [eax*4 + 4]
push eax
push esi
call fcn.100c2634
add esp, 8
mov dword [ebp - 4], 0xffffffff
mov eax, dword [ebp - 0x1c]
mov dword [ebp - 0x18], eax
test eax, eax
je 0x1009459a
push 0x10024cf0
lea esi, [eax - 4]
mov dword [ebp - 4], 0x13
push dword [esi]
push 4
push eax
call fcn.100c2720
mov ecx, dword [ebp - 0x18]
mov eax, dword [ecx - 4]
lea eax, [eax*4 + 4]
push eax
push esi
call fcn.100c2634
add esp, 8
mov dword [ebp - 4], 0xffffffff
mov esi, dword [0x101a41ac]
test esi, esi
je 0x100945cf
mov eax, dword [0x101a41b0]
lea eax, [eax*4 + 4]
push eax
mov eax, dword [0x101a41a8]
add eax, 0xfffffffc
push eax
push esi
call sub.VCRUNTIME140.dll_memcpy
add esp, 0xc
add esi, 4
mov dword [edi], esi
mov byte [0x101a41b4], 1
xor eax, eax
cmp byte [0x101a41b4], al
setne al
add eax, 0x2b
cmp dword [0x101a41a8], 0
je 0x10094640
mov ecx, dword [0x101a41ac]
test ecx, ecx
je 0x10094640
cmp eax, dword [0x101a41b0]
ja 0x10094640
mov edx, dword [ebp - 0x14]
mov dword [ecx + eax*4], 0x10057650
mov eax, dword [0x101a41a8]
cmp dword [eax + 0xac], 0
je 0x10094618
or edx, 0x4000
jmp 0x1009461e
or edx, 0x8000
mov eax, edx
and eax, 0xffff7fff
test edx, 0x8000
cmove eax, edx
mov dword [ebp - 0x14], eax
test eax, 0x4000
je 0x10094640
and eax, 0xffffbfff
mov dword [ebp - 0x14], eax
mov edi, dword [0x101a3c18]
mov dword [0x101a41b8], edi
mov esi, dword [edi]
mov dword [0x101a41bc], esi
test esi, esi
je 0x10094782
xor eax, eax
mov ecx, dword [esi + eax*4]
mov dword [ebp - 0x18], eax
test ecx, ecx
je 0x1009469d
mov eax, dword [0x10162630]
lea edx, [ebp - 0x38]
push 0x1c
push edx
push ecx
call eax
test eax, eax
je 0x10094694
mov eax, dword [ebp - 0x24]
test al, 1
jne 0x10094694
test eax, 0x100
jne 0x10094694
mov eax, dword [ebp - 0x18]
mov esi, dword [0x101a41bc]
inc eax
jmp 0x1009465e
mov esi, dword [0x101a41bc]
mov eax, dword [ebp - 0x18]
mov dword [0x101a41c4], eax
test eax, eax
je 0x10094782
lea edx, [eax + 1]
lea ecx, [ebp - 0x1c]
call fcn.10040c20
cmp eax, 0x101a41c0
je 0x10094706
mov ecx, dword [eax]
mov dword [eax], 0
mov eax, dword [0x101a41c0]
mov dword [0x101a41c0], ecx
test eax, eax
je 0x10094706
push 0x10024cf0
lea esi, [eax - 4]
mov dword [ebp - 4], 0x14
push dword [esi]
push 4
push eax
call fcn.100c2720
mov eax, dword [esi]
lea eax, [eax*4 + 4]
push eax
push esi
call fcn.100c2634
add esp, 8
mov dword [ebp - 4], 0xffffffff
mov eax, dword [ebp - 0x1c]
mov dword [ebp - 0x18], eax
test eax, eax
je 0x10094747
push 0x10024cf0
lea esi, [eax - 4]
mov dword [ebp - 4], 0x15
push dword [esi]
push 4
push eax
call fcn.100c2720
mov ecx, dword [ebp - 0x18]
mov eax, dword [ecx - 4]
lea eax, [eax*4 + 4]
push eax
push esi
call fcn.100c2634
add esp, 8
mov dword [ebp - 4], 0xffffffff
mov esi, dword [0x101a41c0]
test esi, esi
je 0x1009477c
mov eax, dword [0x101a41c4]
lea eax, [eax*4 + 4]
push eax
mov eax, dword [0x101a41bc]
add eax, 0xfffffffc
push eax
push esi
call sub.VCRUNTIME140.dll_memcpy
add esp, 0xc
add esi, 4
mov dword [edi], esi
mov byte [0x101a41c8], 1
mov esi, dword [0x101a41bc]
xor eax, eax
cmp byte [0x101a41c8], al
setne al
add eax, 4
test esi, esi
je 0x100947f3
mov ecx, dword [0x101a41c0]
test ecx, ecx
je 0x100947f3
mov edx, dword [ebp - 0x14]
cmp eax, dword [0x101a41c4]
ja 0x100947f6
mov dword [ecx + eax*4], 0x100ad2e0
mov esi, dword [0x101a41bc]
cmp dword [esi + 0x10], 0
je 0x100947c4
or edx, 0x10000
jmp 0x100947ca
or edx, 0x20000
mov ecx, edx
and ecx, 0xfffdffff
test edx, 0x20000
cmove ecx, edx
mov edx, ecx
mov dword [ebp - 0x14], edx
test edx, 0x10000
je 0x100947f6
and edx, 0xfffeffff
mov dword [ebp - 0x14], edx
jmp 0x100947f6
mov edx, dword [ebp - 0x14]
xor eax, eax
cmp byte [0x101a41c8], al
setne al
add eax, 6
test esi, esi
je 0x10094862
mov ecx, dword [0x101a41c0]
test ecx, ecx
je 0x10094862
cmp eax, dword [0x101a41c4]
ja 0x10094862
mov dword [ecx + eax*4], 0x100ad4a0
mov esi, dword [0x101a41bc]
cmp dword [esi + 0x18], 0
je 0x10094835
or edx, 0x40000
jmp 0x1009483b
or edx, 0x80000
mov ecx, edx
and ecx, 0xfff7ffff
test edx, 0x80000
cmove ecx, edx
mov edx, ecx
mov dword [ebp - 0x14], edx
test edx, 0x40000
je 0x10094862
and edx, 0xfffbffff
mov dword [ebp - 0x14], edx
xor eax, eax
cmp byte [0x101a41c8], al
setne al
add eax, 0x27
test esi, esi
je 0x100948d1
mov ecx, dword [0x101a41c0]
test ecx, ecx
je 0x100948d1
cmp eax, dword [0x101a41c4]
ja 0x100948d1
mov dword [ecx + eax*4], 0x100ad4b0
mov esi, dword [0x101a41bc]
cmp dword [esi + 0x9c], 0
je 0x100948a4
or edx, 0x100000
jmp 0x100948aa
or edx, 0x200000
mov ecx, edx
and ecx, 0xffdfffff
test edx, 0x200000
cmove ecx, edx
mov edx, ecx
mov dword [ebp - 0x14], edx
test edx, 0x100000
je 0x100948d1
and edx, 0xffefffff
mov dword [ebp - 0x14], edx
xor eax, eax
cmp byte [0x101a41c8], al
setne al
add eax, 0x28
test esi, esi
je 0x1009493f
mov ecx, dword [0x101a41c0]
test ecx, ecx
je 0x1009493f
cmp eax, dword [0x101a41c4]
ja 0x1009493f
mov dword [ecx + eax*4], 0x100ad4f0
mov eax, dword [0x101a41bc]
cmp dword [eax + 0xa0], 0
je 0x10094912
or edx, 0x400000
jmp 0x10094918
or edx, 0x800000
mov ecx, edx
and ecx, 0xff7fffff
test edx, 0x800000
cmove ecx, edx
mov edx, ecx
mov dword [ebp - 0x14], edx
test edx, 0x400000
je 0x1009493f
and edx, 0xffbfffff
mov dword [ebp - 0x14], edx
mov edi, dword [0x101a3c3c]
mov dword [0x101a41cc], edi
mov eax, dword [edi]
mov dword [0x101a41d0], eax
test eax, eax
je 0x10094a6f
xor esi, esi
nop dword [eax]
mov eax, dword [0x101a41d0]
mov ecx, dword [eax + esi*4]
test ecx, ecx
je 0x1009498f
mov eax, dword [0x10162630]
lea edx, [ebp - 0x38]
push 0x1c
push edx
push ecx
call eax
test eax, eax
je 0x1009498f
mov eax, dword [ebp - 0x24]
test al, 1
jne 0x1009498f
test eax, 0x100
jne 0x1009498f
inc esi
jmp 0x10094960
mov dword [0x101a41d8], esi
test esi, esi
je 0x10094a6f
lea edx, [esi + 1]
lea ecx, [ebp - 0x1c]
call fcn.10040c20
cmp eax, 0x101a41d4
je 0x100949f9
mov ecx, dword [eax]
mov dword [eax], 0
mov eax, dword [0x101a41d4]
mov dword [0x101a41d4], ecx
test eax, eax
je 0x100949f9
push 0x10024cf0
lea esi, [eax - 4]
mov dword [ebp - 4], 0x16
push dword [esi]
push 4
push eax
call fcn.100c2720
mov eax, dword [esi]
lea eax, [eax*4 + 4]
push eax
push esi
call fcn.100c2634
add esp, 8
mov dword [ebp - 4], 0xffffffff
mov eax, dword [ebp - 0x1c]
mov dword [ebp - 0x18], eax
test eax, eax
je 0x10094a3a
push 0x10024cf0
lea esi, [eax - 4]
mov dword [ebp - 4], 0x17
push dword [esi]
push 4
push eax
call fcn.100c2720
mov ecx, dword [ebp - 0x18]
mov eax, dword [ecx - 4]
lea eax, [eax*4 + 4]
push eax
push esi
call fcn.100c2634
add esp, 8
mov dword [ebp - 4], 0xffffffff
mov esi, dword [0x101a41d4]
test esi, esi
je 0x10094a6f
mov eax, dword [0x101a41d8]
lea eax, [eax*4 + 4]
push eax
mov eax, dword [0x101a41d0]
add eax, 0xfffffffc
push eax
push esi
call sub.VCRUNTIME140.dll_memcpy
add esp, 0xc
add esi, 4
mov dword [edi], esi
mov byte [0x101a41dc], 1
xor eax, eax
cmp byte [0x101a41dc], al
setne al
add eax, 0xd
cmp dword [0x101a41d0], 0
je 0x10094add
mov ecx, dword [0x101a41d4]
test ecx, ecx
je 0x10094add
cmp eax, dword [0x101a41d8]
ja 0x10094add
mov edx, dword [ebp - 0x14]
mov dword [ecx + eax*4], 0x10057020
mov eax, dword [0x101a41d0]
cmp dword [eax + 0x34], 0
je 0x10094ab5
or edx, 0x1000000
jmp 0x10094abb
or edx, 0x2000000
mov eax, edx
and eax, 0xfdffffff
test edx, 0x2000000
cmove eax, edx
mov dword [ebp - 0x14], eax
test eax, 0x1000000
je 0x10094add
and eax, 0xfeffffff
mov dword [ebp - 0x14], eax
mov edi, dword [0x101a3c20]
mov dword [0x101a41e0], edi
mov eax, dword [edi]
mov dword [0x101a41e4], eax
test eax, eax
je 0x10094c0f
xor esi, esi
nop word [eax + eax]
mov eax, dword [0x101a41e4]
mov ecx, dword [eax + esi*4]
test ecx, ecx
je 0x10094b2f
mov eax, dword [0x10162630]
lea edx, [ebp - 0x38]
push 0x1c
push edx
push ecx
call eax
test eax, eax
je 0x10094b2f
mov eax, dword [ebp - 0x24]
test al, 1
jne 0x10094b2f
test eax, 0x100
jne 0x10094b2f
inc esi
jmp 0x10094b00
mov dword [0x101a41ec], esi
test esi, esi
je 0x10094c0f
lea edx, [esi + 1]
lea ecx, [ebp - 0x1c]
call fcn.10040c20
cmp eax, 0x101a41e8
je 0x10094b99
mov ecx, dword [eax]
mov dword [eax], 0
mov eax, dword [0x101a41e8]
mov dword [0x101a41e8], ecx
test eax, eax
je 0x10094b99
push 0x10024cf0
lea esi, [eax - 4]
mov dword [ebp - 4], 0x18
push dword [esi]
push 4
push eax
call fcn.100c2720
mov eax, dword [esi]
lea eax, [eax*4 + 4]
push eax
push esi
call fcn.100c2634
add esp, 8
mov dword [ebp - 4], 0xffffffff
mov eax, dword [ebp - 0x1c]
mov dword [ebp - 0x18], eax
test eax, eax
je 0x10094bda
push 0x10024cf0
lea esi, [eax - 4]
mov dword [ebp - 4], 0x19
push dword [esi]
push 4
push eax
call fcn.100c2720
mov ecx, dword [ebp - 0x18]
mov eax, dword [ecx - 4]
lea eax, [eax*4 + 4]
push eax
push esi
call fcn.100c2634
add esp, 8
mov dword [ebp - 4], 0xffffffff
mov esi, dword [0x101a41e8]
test esi, esi
je 0x10094c0f
mov eax, dword [0x101a41ec]
lea eax, [eax*4 + 4]
push eax
mov eax, dword [0x101a41e4]
add eax, 0xfffffffc
push eax
push esi
call sub.VCRUNTIME140.dll_memcpy
add esp, 0xc
add esi, 4
mov dword [edi], esi
mov byte [0x101a41f0], 1
xor eax, eax
cmp byte [0x101a41f0], al
setne al
add eax, 0x15
cmp dword [0x101a41e4], 0
je 0x10094c7d
mov ecx, dword [0x101a41e8]
test ecx, ecx
je 0x10094c7d
cmp eax, dword [0x101a41ec]
ja 0x10094c7d
mov edx, dword [ebp - 0x14]
mov dword [ecx + eax*4], 0x10057340
mov eax, dword [0x101a41e4]
cmp dword [eax + 0x54], 0
je 0x10094c55
or edx, 0x4000000
jmp 0x10094c5b
or edx, 0x8000000
mov eax, edx
and eax, 0xf7ffffff
test edx, 0x8000000
cmove eax, edx
mov dword [ebp - 0x14], eax
test eax, 0x4000000
je 0x10094c7d
and eax, 0xfbffffff
mov dword [ebp - 0x14], eax
mov edi, dword [0x101a3d78]
mov dword [0x101a41f4], edi
mov eax, dword [edi]
mov dword [0x101a41f8], eax
test eax, eax
je 0x10094daf
xor esi, esi
nop word [eax + eax]
mov eax, dword [0x101a41f8]
mov ecx, dword [eax + esi*4]
test ecx, ecx
je 0x10094ccf
mov eax, dword [0x10162630]
lea edx, [ebp - 0x38]
push 0x1c
push edx
push ecx
call eax
test eax, eax
je 0x10094ccf
mov eax, dword [ebp - 0x24]
test al, 1
jne 0x10094ccf
test eax, 0x100
jne 0x10094ccf
inc esi
jmp 0x10094ca0
mov dword [0x101a4200], esi
test esi, esi
je 0x10094daf
lea edx, [esi + 1]
lea ecx, [ebp - 0x1c]
call fcn.10040c20
cmp eax, 0x101a41fc
je 0x10094d39
mov ecx, dword [eax]
mov dword [eax], 0
mov eax, dword [0x101a41fc]
mov dword [0x101a41fc], ecx
test eax, eax
je 0x10094d39
push 0x10024cf0
lea esi, [eax - 4]
mov dword [ebp - 4], 0x1a
push dword [esi]
push 4
push eax
call fcn.100c2720
mov eax, dword [esi]
lea eax, [eax*4 + 4]
push eax
push esi
call fcn.100c2634
add esp, 8
mov dword [ebp - 4], 0xffffffff
mov eax, dword [ebp - 0x1c]
mov dword [ebp - 0x18], eax
test eax, eax
je 0x10094d7a
push 0x10024cf0
lea esi, [eax - 4]
mov dword [ebp - 4], 0x1b
push dword [esi]
push 4
push eax
call fcn.100c2720
mov ecx, dword [ebp - 0x18]
mov eax, dword [ecx - 4]
lea eax, [eax*4 + 4]
push eax
push esi
call fcn.100c2634
add esp, 8
mov dword [ebp - 4], 0xffffffff
mov esi, dword [0x101a41fc]
test esi, esi
je 0x10094daf
mov eax, dword [0x101a4200]
lea eax, [eax*4 + 4]
push eax
mov eax, dword [0x101a41f8]
add eax, 0xfffffffc
push eax
push esi
call sub.VCRUNTIME140.dll_memcpy
add esp, 0xc
add esi, 4
mov dword [edi], esi
mov byte [0x101a4204], 1
xor eax, eax
cmp byte [0x101a4204], al
setne al
add eax, 7
cmp dword [0x101a41f8], 0
je 0x10094e1d
mov ecx, dword [0x101a41fc]
test ecx, ecx
je 0x10094e1d
cmp eax, dword [0x101a4200]
ja 0x10094e1d
mov edx, dword [ebp - 0x14]
mov dword [ecx + eax*4], 0x10056770
mov eax, dword [0x101a41f8]
cmp dword [eax + 0x1c], 0
je 0x10094df5
or edx, 0x10000000
jmp 0x10094dfb
or edx, 0x20000000
mov eax, edx
and eax, 0xdfffffff
test edx, 0x20000000
cmove eax, edx
mov dword [ebp - 0x14], eax
test eax, 0x10000000
je 0x10094e1d
and eax, 0xefffffff
mov dword [ebp - 0x14], eax
mov edi, dword [0x101a3c88]
mov dword [0x101a40f0], edi
mov eax, dword [edi]
mov dword [0x101a40f4], eax
test eax, eax
je 0x10094f4f
xor esi, esi
nop word [eax + eax]
mov eax, dword [0x101a40f4]
mov ecx, dword [eax + esi*4]
test ecx, ecx
je 0x10094e6f
mov eax, dword [0x10162630]
lea edx, [ebp - 0x38]
push 0x1c
push edx
push ecx
call eax
test eax, eax
je 0x10094e6f
mov eax, dword [ebp - 0x24]
test al, 1
jne 0x10094e6f
test eax, 0x100
jne 0x10094e6f
inc esi
jmp 0x10094e40
mov dword [0x101a40fc], esi
test esi, esi
je 0x10094f4f
lea edx, [esi + 1]
lea ecx, [ebp - 0x1c]
call fcn.10040c20
cmp eax, 0x101a40f8
je 0x10094ed9
mov ecx, dword [eax]
mov dword [eax], 0
mov eax, dword [0x101a40f8]
mov dword [0x101a40f8], ecx
test eax, eax
je 0x10094ed9
push 0x10024cf0
lea esi, [eax - 4]
mov dword [ebp - 4], 0x1c
push dword [esi]
push 4
push eax
call fcn.100c2720
mov eax, dword [esi]
lea eax, [eax*4 + 4]
push eax
push esi
call fcn.100c2634
add esp, 8
mov dword [ebp - 4], 0xffffffff
mov eax, dword [ebp - 0x1c]
mov dword [ebp - 0x18], eax
test eax, eax
je 0x10094f1a
push 0x10024cf0
lea esi, [eax - 4]
mov dword [ebp - 4], 0x1d
push dword [esi]
push 4
push eax
call fcn.100c2720
mov ecx, dword [ebp - 0x18]
mov eax, dword [ecx - 4]
lea eax, [eax*4 + 4]
push eax
push esi
call fcn.100c2634
add esp, 8
mov dword [ebp - 4], 0xffffffff
mov esi, dword [0x101a40f8]
test esi, esi
je 0x10094f4f
mov eax, dword [0x101a40fc]
lea eax, [eax*4 + 4]
push eax
mov eax, dword [0x101a40f4]
add eax, 0xfffffffc
push eax
push esi
call sub.VCRUNTIME140.dll_memcpy
add esp, 0xc
add esi, 4
mov dword [edi], esi
mov byte [0x101a4100], 1
mov edx, dword [0x101a40f4]
xor eax, eax
cmp byte [0x101a4100], al
mov ecx, edx
setne al
add eax, 0x18
test edx, edx
je 0x10094fa4
mov esi, dword [0x101a40f8]
test esi, esi
je 0x10094fa4
cmp eax, dword [0x101a40fc]
ja 0x10094fa4
mov edx, dword [ebp - 0x14]
mov dword [esi + eax*4], 0x10092280
mov ecx, dword [0x101a40f4]
cmp dword [ecx + 0x60], 0
je 0x10094f99
or edx, 0x40000000
jmp 0x10094f9f
or edx, 0x80000000
test edx, edx
cmovs ecx, ecx
xor eax, eax
cmp byte [0x101a4100], al
setne al
add eax, 0x24
test ecx, ecx
je 0x10094fcf
mov ecx, dword [0x101a40f8]
test ecx, ecx
je 0x10094fcf
cmp eax, dword [0x101a40fc]
ja 0x10094fcf
mov dword [ecx + eax*4], 0x10041e10
push 0x100e5388
call dword [0x101a3d88]
mov edi, dword [0x101a3cd8]
mov dword [0x101a471c], edi
mov eax, dword [edi]
mov dword [0x101a4720], eax
test eax, eax
je 0x1009510f
xor esi, esi
nop word [eax + eax]
mov eax, dword [0x101a4720]
mov ecx, dword [eax + esi*4]
test ecx, ecx
je 0x1009502f
mov eax, dword [0x10162630]
lea edx, [ebp - 0x38]
push 0x1c
push edx
push ecx
call eax
test eax, eax
je 0x1009502f
mov eax, dword [ebp - 0x24]
test al, 1
jne 0x1009502f
test eax, 0x100
jne 0x1009502f
inc esi
jmp 0x10095000
mov dword [0x101a4728], esi
test esi, esi
je 0x1009510f
lea edx, [esi + 1]
lea ecx, [ebp - 0x1c]
call fcn.10040c20
cmp eax, 0x101a4724
je 0x10095099
mov ecx, dword [eax]
mov dword [eax], 0
mov eax, dword [0x101a4724]
mov dword [0x101a4724], ecx
test eax, eax
je 0x10095099
push 0x10024cf0
lea esi, [eax - 4]
mov dword [ebp - 4], 0x1e
push dword [esi]
push 4
push eax
call fcn.100c2720
mov eax, dword [esi]
lea eax, [eax*4 + 4]
push eax
push esi
call fcn.100c2634
add esp, 8
mov dword [ebp - 4], 0xffffffff
mov eax, dword [ebp - 0x1c]
mov dword [ebp - 0x18], eax
test eax, eax
je 0x100950da
push 0x10024cf0
lea esi, [eax - 4]
mov dword [ebp - 4], 0x1f
push dword [esi]
push 4
push eax
call fcn.100c2720
mov ecx, dword [ebp - 0x18]
mov eax, dword [ecx - 4]
lea eax, [eax*4 + 4]
push eax
push esi
call fcn.100c2634
add esp, 8
mov dword [ebp - 4], 0xffffffff
mov esi, dword [0x101a4724]
test esi, esi
je 0x1009510f
mov eax, dword [0x101a4728]
lea eax, [eax*4 + 4]
push eax
mov eax, dword [0x101a4720]
add eax, 0xfffffffc
push eax
push esi
call sub.VCRUNTIME140.dll_memcpy
add esp, 0xc
add esi, 4
mov dword [edi], esi
mov byte [0x101a472c], 1
xor eax, eax
cmp byte [0x101a472c], al
setne al
add eax, 0xd
cmp dword [0x101a4720], 0
je 0x1009513f
mov ecx, dword [0x101a4724]
test ecx, ecx
je 0x1009513f
cmp eax, dword [0x101a4728]
ja 0x1009513f
mov dword [ecx + eax*4], 0x1008a380
mov edi, dword [0x101a3cdc]
mov dword [0x101a4208], edi
mov eax, dword [edi]
mov dword [0x101a420c], eax
test eax, eax
je 0x1009526f
xor esi, esi
nop dword [eax]
mov eax, dword [0x101a420c]
mov ecx, dword [eax + esi*4]
test ecx, ecx
je 0x1009518f
mov eax, dword [0x10162630]
lea edx, [ebp - 0x38]
push 0x1c
push edx
push ecx
call eax
test eax, eax
je 0x1009518f
mov eax, dword [ebp - 0x24]
test al, 1
jne 0x1009518f
test eax, 0x100
jne 0x1009518f
inc esi
jmp 0x10095160
mov dword [0x101a4214], esi
test esi, esi
je 0x1009526f
lea edx, [esi + 1]
lea ecx, [ebp - 0x1c]
call fcn.10040c20
cmp eax, 0x101a4210
je 0x100951f9
mov ecx, dword [eax]
mov dword [eax], 0
mov eax, dword [0x101a4210]
mov dword [0x101a4210], ecx
test eax, eax
je 0x100951f9
push 0x10024cf0
lea esi, [eax - 4]
mov dword [ebp - 4], 0x20
push dword [esi]
push 4
push eax
call fcn.100c2720
mov eax, dword [esi]
lea eax, [eax*4 + 4]
push eax
push esi
call fcn.100c2634
add esp, 8
mov dword [ebp - 4], 0xffffffff
mov eax, dword [ebp - 0x1c]
mov dword [ebp - 0x18], eax
test eax, eax
je 0x1009523a
push 0x10024cf0
lea esi, [eax - 4]
mov dword [ebp - 4], 0x21
push dword [esi]
push 4
push eax
call fcn.100c2720
mov ecx, dword [ebp - 0x18]
mov eax, dword [ecx - 4]
lea eax, [eax*4 + 4]
push eax
push esi
call fcn.100c2634
add esp, 8
mov dword [ebp - 4], 0xffffffff
mov esi, dword [0x101a4210]
test esi, esi
je 0x1009526f
mov eax, dword [0x101a4214]
lea eax, [eax*4 + 4]
push eax
mov eax, dword [0x101a420c]
add eax, 0xfffffffc
push eax
push esi
call sub.VCRUNTIME140.dll_memcpy
add esp, 0xc
add esi, 4
mov dword [edi], esi
mov byte [0x101a4218], 1
xor eax, eax
cmp byte [0x101a4218], al
setne al
add eax, 0xd
cmp dword [0x101a420c], 0
je 0x1009529f
mov ecx, dword [0x101a4210]
test ecx, ecx
je 0x1009529f
cmp eax, dword [0x101a4214]
ja 0x1009529f
mov dword [ecx + eax*4], 0x1008a4d0
lea eax, [ebp - 0x1c]
mov dword [ebp - 0x14], 0xf3c2c786
push eax
mov ecx, 0x101a9248
mov dword [ebp - 0x1c], 0x72e242a1
call fcn.10088d00
lea ecx, [ebp - 0x14]
push ecx
mov ecx, eax
call fcn.10088ce0
movq xmm0, qword [eax]
movq qword [ebp - 0x44], xmm0
cmp byte [ebp - 0x44], 0
jne 0x100952e7
mov ecx, dword [ebp - 0x40]
mov eax, dword [ecx + 0x20]
mov dword [0x101a474c], eax
mov dword [ecx + 0x20], 0x10092100
lea eax, [ebp - 0x1c]
mov dword [ebp - 0x14], 0x9ef0d03e
push eax
mov ecx, 0x101a9248
mov dword [ebp - 0x1c], 0x72e242a1
call fcn.10088d00
lea ecx, [ebp - 0x14]
push ecx
mov ecx, eax
call fcn.10088ce0
movq xmm0, qword [eax]
movq qword [ebp - 0x44], xmm0
cmp byte [ebp - 0x44], 0
jne 0x1009532f
mov ecx, dword [ebp - 0x40]
mov eax, dword [ecx + 0x20]
mov dword [0x101a4750], eax
mov dword [ecx + 0x20], 0x10092160
lea eax, [ebp - 0x1c]
mov dword [ebp - 0x14], 0x566bd764
push eax
mov ecx, 0x101a9248
mov dword [ebp - 0x1c], 0x2aafa737
call fcn.10088d00
lea ecx, [ebp - 0x14]
push ecx
mov ecx, eax
call fcn.10088ce0
movq xmm0, qword [eax]
movq qword [ebp - 0x44], xmm0
cmp byte [ebp - 0x44], 0
jne 0x10095377
mov edx, dword [ebp - 0x40]
mov eax, dword [edx + 0x20]
mov dword [0x101a4754], eax
mov dword [edx + 0x20], 0x10092ba0
lea eax, [ebp - 0x1c]
mov dword [ebp - 0x14], 0x781aa1a4
push eax
mov ecx, 0x101a9248
mov dword [ebp - 0x1c], 0x2aafa737
call fcn.10088d00
lea ecx, [ebp - 0x14]
push ecx
mov ecx, eax
call fcn.10088ce0
movq xmm0, qword [eax]
movq qword [ebp - 0x44], xmm0
cmp byte [ebp - 0x44], 0
jne 0x100953bf
mov ecx, dword [ebp - 0x40]
mov eax, dword [ecx + 0x20]
mov dword [0x101a4758], eax
mov dword [ecx + 0x20], 0x10092b80
cmp byte [0x101a934c], 0
jne 0x10095491
push 0x29
xorps xmm0, xmm0
mov dword [ebp - 0x24], 0
push str.55_8B_EC_53_8B_5D_08_56_57_FF_75_18_8B_F1
lea ecx, [ebp - 0x34]
mov dword [ebp - 0x20], 0
movups xmmword [ebp - 0x34], xmm0
call fcn.100304c0
mov dword [ebp - 4], 0x22
mov eax, dword [0x101a3bb4]
test eax, eax
je 0x10095405
mov edx, dword [eax + 0x50]
jmp 0x10095407
xor edx, edx
mov eax, dword [0x101a3bac]
test eax, eax
je 0x10095415
mov eax, dword [eax + 0x18]
jmp 0x10095417
xor eax, eax
lea ecx, [ebp - 0x34]
push ecx
push eax
lea ecx, [ebp - 0x1c]
call fcn.10057c50
mov edi, dword [ebp - 0x1c]
add esp, 8
mov ecx, dword [ebp - 0x20]
add edi, 0x7e
cmp ecx, 0x10
jb 0x10095463
mov edx, dword [ebp - 0x34]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x10095459
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
jbe 0x10095459
call dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
push ecx
push edx
call fcn.100c2b54
add esp, 8
mov esi, dword [sym.imp.KERNEL32.dll_VirtualProtect]
lea eax, [ebp - 0x18]
push eax
push 0x40
push 1
push edi
mov dword [ebp - 0x18], 0
call esi
lea eax, [ebp - 0x18]
mov byte [edi], 0x3f
push eax
push dword [ebp - 0x18]
push 1
push edi
call esi
mov byte [0x101a934c], 1
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
mov ecx, dword [ebp - 0x10]
xor ecx, ebp
call fcn.100c2626
mov esp, ebp
pop ebp
ret