Function at 0x1f01b9d0
Capabilities:
Check for time delay via queryperformancecounter
Get thread local storage value
Set thread local storage value

Disassembly:
push ebp
mov ebp, esp
mov eax, 0x22ec
call fcn.1f03e9c0
push esi
push edi
mov eax, dword fs:[0]
mov dword [ebp - 0x1acc], eax
lea eax, [ebp - 0x1b60]
push eax
call fcn.1f01d9f0
add esp, 4
call fcn.1f01d9b0
mov dword [ebp - 0x1ae0], eax
cmp dword [ebp - 0x1ae0], 0
jne 0x1f01ba1a
fst qword [ebp - 0x1af0]
fst qword [ebp - 0x18]
wait
fnclex
call fcn.1f00104b
mov dword [ebp - 0x1ad8], eax
mov ecx, dword [0x1f0837c0]
mov dword [ebp - 0x1bb4], ecx
cmp dword [ebp - 0x1bb4], 0x40
jae 0x1f01ba4e
mov edx, dword [ebp - 0x1bb4]
push edx
call section..text
mov dword [ebp - 0x1ad0], eax
jmp 0x1f01ba61
mov eax, dword [ebp - 0x1bb4]
push eax
call dword [sym.imp.KERNEL32.dll_TlsGetValue]
mov dword [ebp - 0x1ad0], eax
mov ecx, dword [ebp - 0x1ad0]
mov edx, dword [ecx + 4]
mov dword [ebp - 0x2244], edx
mov eax, dword [ebp - 0x2244]
mov ecx, dword [eax]
mov edx, dword [ecx + 4]
mov eax, dword [ebp - 0x2244]
cmp dword [eax + edx + 0x10], 0
jne 0x1f01bb26
mov ecx, dword [ebp - 0x1ad0]
cmp dword [ecx + 8], 0
je 0x1f01bb26
mov edx, dword [ebp - 0x1ad0]
mov eax, dword [edx + 8]
mov dword [ebp - 0x2248], eax
mov ecx, dword [ebp - 0x2248]
mov edx, dword [ecx]
mov eax, dword [edx + 4]
mov ecx, dword [ebp - 0x2248]
mov edx, dword [ecx + eax + 0xc]
mov dword [ebp - 0x1b70], edx
jmp 0x1f01bad7
mov eax, dword [ebp - 0x1b70]
mov ecx, dword [eax + 4]
mov dword [ebp - 0x1b70], ecx
cmp dword [ebp - 0x1b70], 0
je 0x1f01bb26
mov edx, dword [ebp - 0x1ad0]
mov eax, dword [edx + 4]
mov dword [ebp - 0x224c], eax
mov ecx, dword [ebp - 0x1b70]
mov edx, dword [ecx]
push edx
mov eax, dword [ebp - 0x224c]
mov ecx, dword [eax]
mov edx, dword [ebp - 0x224c]
add edx, dword [ecx + 4]
mov eax, dword [ebp - 0x224c]
mov ecx, dword [eax]
mov eax, dword [ecx + 4]
mov ecx, dword [ebp - 0x224c]
mov eax, dword [ecx + eax]
mov ecx, edx
mov edx, dword [eax + 8]
call edx
jmp 0x1f01bac8
mov eax, dword [ebp - 0x1ad0]
mov ecx, dword [eax + 4]
mov dword [ebp - 0x2250], ecx
mov edx, dword [ebp - 0x2250]
mov eax, dword [edx]
mov ecx, dword [eax + 4]
mov edx, dword [ebp - 0x2250]
mov eax, dword [edx + ecx + 0x10]
mov ecx, dword [eax]
mov edx, dword [ecx + 0x38]
mov dword [ebp - 0x1c], edx
mov eax, dword [ebp - 0x1ad0]
cmp dword [eax + 8], 0
je 0x1f01bb99
mov ecx, dword [ebp - 0x1ad0]
mov edx, dword [ecx + 8]
mov dword [ebp - 0x2254], edx
mov eax, dword [ebp - 0x2254]
mov ecx, dword [eax]
mov edx, dword [ecx + 4]
mov eax, dword [ebp - 0x2254]
mov ecx, dword [eax]
mov eax, dword [ebp - 0x2254]
add eax, dword [ecx + 4]
mov ecx, dword [ebp - 0x2254]
mov edx, dword [ecx + edx]
mov ecx, eax
mov eax, dword [edx + 0x28]
call eax
mov ecx, dword [ebp - 0x1c]
cmp dword [ecx + 4], 0
jne 0x1f01bbae
mov edx, dword [ebp - 0x1c]
cmp dword [edx + 0x9c], 0
je 0x1f01bbba
mov eax, dword [ebp - 0x1ad0]
mov dword [eax], 1
mov ecx, dword [ebp + 8]
mov edx, dword [ecx + 0x28]
push edx
mov eax, dword [ebp - 0x1acc]
push eax
push 0
call fcn.1f019310
add esp, 0xc
mov dword [ebp - 8], 0
mov ecx, dword [ebp - 0x1ad0]
mov edx, dword [ecx + 4]
mov dword [ebp - 0x2258], edx
mov eax, dword [ebp - 0x2258]
mov ecx, dword [eax]
mov edx, dword [ecx + 4]
mov eax, dword [ebp - 0x2258]
cmp dword [eax + edx + 0x10], 0
je 0x1f01bc9e
mov ecx, dword [ebp - 0x1ad0]
mov edx, dword [ecx + 4]
mov dword [ebp - 0x225c], edx
mov eax, dword [ebp - 0x225c]
mov ecx, dword [eax]
mov edx, dword [ecx + 4]
mov eax, dword [ebp - 0x225c]
mov ecx, dword [eax + edx + 0x10]
mov edx, dword [ecx]
mov dword [ebp - 8], edx
mov eax, dword [ebp - 8]
cmp dword [eax + 0x1d28], 0
jne 0x1f01bc3b
jmp 0x1f01bc9e
mov ecx, dword [ebp - 0x1ad0]
mov edx, dword [ecx + 4]
mov dword [ebp - 0x2260], edx
mov eax, dword [ebp - 0x1ad0]
mov ecx, dword [eax + 4]
mov dword [ebp - 0x2264], ecx
mov edx, dword [ebp - 0x2260]
mov eax, dword [edx]
mov ecx, dword [eax + 4]
mov edx, dword [ebp - 0x2260]
mov eax, dword [edx + ecx + 0x10]
push eax
mov ecx, dword [ebp - 0x2264]
mov edx, dword [ecx]
mov ecx, dword [ebp - 0x2264]
add ecx, dword [edx + 4]
mov eax, dword [ebp - 0x2264]
mov edx, dword [eax]
mov eax, dword [edx + 4]
mov edx, dword [ebp - 0x2264]
mov eax, dword [edx + eax]
mov edx, dword [eax + 0x20]
call edx
jmp 0x1f01bbd9
mov eax, dword [ebp - 8]
mov dword [eax + 0x1d2c], 1
mov ecx, dword [ebp + 8]
mov edx, dword [ecx]
mov dword [ebp - 0x1ae4], edx
push 0x1a68
push 0
lea eax, [ebp - 0x1a88]
push eax
call fcn.1f03f590
add esp, 0xc
mov ecx, dword [ebp - 8]
mov edx, dword [ecx + 0x44]
push edx
mov eax, dword [ebp - 8]
mov ecx, dword [eax + 0x40]
push ecx
call fcn.1f01a0f0
add esp, 8
mov edx, dword [ebp - 8]
mov eax, dword [edx + 0x34]
mov dword [ebp - 4], eax
mov ecx, dword [ebp - 8]
mov edx, dword [ecx + 0x38]
mov dword [ebp - 0x1c], edx
mov dword [ebp - 0x1ad4], 0
mov eax, dword [ebp - 0x1c]
cmp dword [eax + 0x1b0c], 0
je 0x1f01bd34
mov ecx, dword [ebp - 0x1ad0]
cmp dword [ecx + 0x1c], 0
je 0x1f01bd34
cmp dword [0x1f06c378], 0
jne 0x1f01bd28
cmp dword [0x1f083738], 0
je 0x1f01bd34
mov dword [ebp - 0x2268], 1
jmp 0x1f01bd3e
mov dword [ebp - 0x2268], 0
mov edx, dword [ebp - 0x2268]
mov dword [ebp - 0x1a8c], edx
cmp dword [ebp - 0x1a8c], 0
je 0x1f01bea0
cmp dword [ebp - 0x1ae0], 0
je 0x1f01bd69
fld qword [0x1f0836c0]
fstp qword [ebp - 0x18]
mov eax, dword [ebp - 8]
mov ecx, dword [ebp - 0x1ad8]
mov dword [eax + 0x1a50], ecx
mov edx, dword [ebp - 0x1ad8]
mov dword [ebp - 0xe0], edx
mov eax, dword [ebp - 8]
mov ecx, dword [eax + 0x1a54]
mov dword [ebp - 0xdc], ecx
lea edx, [ebp - 0x1a98]
push edx
call dword [sym.imp.KERNEL32.dll_QueryPerformanceCounter]
mov eax, dword [ebp - 8]
mov ecx, dword [ebp - 0x1a98]
sub ecx, dword [eax + 0x68]
mov edx, dword [ebp - 0x1a94]
sbb edx, dword [eax + 0x6c]
push 0
push 0x3e8
push edx
push ecx
call fcn.1f040910
push 0
push 0x3e8
push edx
push eax
call fcn.1f040910
push 0
push 0xa
push edx
push eax
call fcn.1f040910
mov ecx, dword [0x1f0829fc]
push ecx
mov ecx, dword [0x1f0829f8]
push ecx
push edx
push eax
call fcn.1f040860
mov dword [ebp - 0x1a98], eax
mov dword [ebp - 0x1a94], edx
push 0
push 0xa
mov edx, dword [ebp - 0x1a94]
push edx
mov eax, dword [ebp - 0x1a98]
push eax
call fcn.1f040970
mov byte [ebp - 0x1b71], al
push 0
push 0xa
mov ecx, dword [ebp - 0x1a94]
push ecx
mov edx, dword [ebp - 0x1a98]
push edx
call fcn.1f040860
mov dword [ebp - 0x1a98], eax
mov dword [ebp - 0x1a94], edx
movzx eax, byte [ebp - 0x1b71]
cmp eax, 5
jl 0x1f01be67
mov ecx, dword [ebp - 0x1a98]
add ecx, 1
mov edx, dword [ebp - 0x1a94]
adc edx, 0
mov dword [ebp - 0x1a98], ecx
mov dword [ebp - 0x1a94], edx
mov eax, dword [ebp - 8]
mov ecx, dword [ebp - 0x1a98]
mov dword [eax + 0x1a60], ecx
mov edx, dword [ebp - 8]
mov eax, dword [edx + 0x1a60]
mov dword [ebp - 0xd0], eax
mov ecx, dword [ebp - 8]
mov edx, dword [ecx + 0x1a58]
mov eax, dword [ecx + 0x1a5c]
mov dword [ebp - 0xd8], edx
mov dword [ebp - 0xd4], eax
mov ecx, dword [ebp - 8]
mov edx, dword [ebp + 8]
mov eax, dword [ecx + 0x28]
cmp eax, dword [edx + 0x28]
je 0x1f01c228
mov ecx, dword [ebp + 8]
mov edx, dword [ebp - 8]
mov eax, dword [ecx + 0x28]
sub eax, dword [edx + 0x28]
mov dword [ebp - 0x1b78], eax
mov ecx, dword [ebp - 0x1c]
mov edx, dword [ecx + 0x1b48]
mov dword [ebp - 0x226c], edx
mov eax, dword [ebp - 0x226c]
sub eax, 2
mov dword [ebp - 0x226c], eax
cmp dword [ebp - 0x226c], 6
ja case.0x1f01bef5.4
mov ecx, dword [ebp - 0x226c]
jmp dword [ecx*4 + 0x1f01d3b4]
mov edx, dword [ebp - 0x1c]
mov eax, dword [edx + 0x1b04]
push eax
mov ecx, dword [ebp - 0x1c]
mov edx, dword [ecx + 0x1b08]
push edx
mov eax, dword [ebp - 0x1b78]
push eax
push str.Stack_corruption__stack_changed_size_d__in_function__s_in_module__s
push 0x30c
lea ecx, [ebp - 0x21cc]
push ecx
call fcn.1f03e8e1
add esp, 0x18
lea edx, [ebp - 0x21cc]
push edx
push 3
call fcn.1f0291c0
jmp 0x1f01c228
mov eax, dword [ebp - 0x1c]
cmp dword [eax + 0x1b48], 8
jne 0x1f01bf5b
mov dword [ebp - 0x21d4], 3
jmp 0x1f01bf65
mov dword [ebp - 0x21d4], 2
mov ecx, dword [ebp - 0x1c]
mov edx, dword [ecx + 0x1afc]
mov dword [ebp - 0x21d0], edx
mov eax, dword [ebp - 0x21d4]
shl eax, 2
mov ecx, dword [ebp - 0x1c]
mov edx, dword [ecx + 0x1afc]
sub edx, eax
mov dword [ebp - 0x21d8], edx
jns 0x1f01bf9a
mov dword [ebp - 0x21d8], 0
mov eax, dword [ebp - 0x1b78]
cmp eax, dword [ebp - 0x21d0]
jg 0x1f01bfba
mov ecx, dword [ebp - 0x1b78]
cmp ecx, dword [ebp - 0x21d8]
jge 0x1f01c0c6
mov dword [ebp - 0x21dc], 1
mov edx, dword [ebp - 0x1c]
push edx
call fcn.1f00d220
test eax, eax
je 0x1f01c006
mov eax, dword [ebp - 0x21d8]
sub eax, 4
mov dword [ebp - 0x21d8], eax
mov ecx, dword [ebp - 0x1b78]
cmp ecx, dword [ebp - 0x21d0]
jg 0x1f01c006
mov edx, dword [ebp - 0x1b78]
cmp edx, dword [ebp - 0x21d8]
jl 0x1f01c006
mov dword [ebp - 0x21dc], 0
cmp dword [ebp - 0x21dc], 0
je 0x1f01c0c6
mov dword [ebp - 0x21e4], 0
mov dword [ebp - 0x21e0], 0
jmp 0x1f01c038
mov eax, dword [ebp - 0x21e0]
add eax, 1
mov dword [ebp - 0x21e0], eax
mov ecx, dword [ebp - 0x21e4]
cmp ecx, dword [ebp - 0x21d4]
jae 0x1f01c091
mov edx, dword [ebp - 0x1c]
movzx eax, byte [edx + 0xb5]
cmp dword [ebp - 0x21e0], eax
jae 0x1f01c091
mov ecx, dword [ebp - 0x21e0]
imul ecx, ecx, 0xa4
mov edx, dword [ebp - 0x1c]
lea edx, [edx + ecx + 0x15c]
mov eax, dword [ebp - 0x1c]
mov ecx, dword [eax + 0x1b48]
call fcn.1f016ee0
test eax, eax
je 0x1f01c08f
mov ecx, dword [ebp - 0x21e4]
add ecx, 1
mov dword [ebp - 0x21e4], ecx
jmp 0x1f01c029
mov edx, dword [ebp - 0x21e4]
mov eax, dword [ebp - 0x1b78]
lea ecx, [eax + edx*4]
push ecx
mov edx, dword [ebp - 0x1c]
mov eax, dword [edx + 0x1afc]
push eax
mov ecx, dword [ebp - 0x1c]
push ecx
call fcn.1f016270
add esp, 0xc
mov edx, dword [ebp - 0x1c]
mov eax, dword [ebp - 0x1b78]
mov dword [edx + 0x1afc], eax
jmp 0x1f01c228
mov ecx, dword [ebp - 0x1c]
mov edx, dword [ecx + 0x1afc]
mov dword [ebp - 0x21e8], edx
mov eax, dword [ebp - 0x1c]
mov ecx, dword [eax + 0x1afc]
sub ecx, 4
mov dword [ebp - 0x21ec], ecx
jns 0x1f01c0f8
mov dword [ebp - 0x21ec], 0
mov edx, dword [ebp - 0x1b78]
cmp edx, dword [ebp - 0x21e8]
jg 0x1f01c118
mov eax, dword [ebp - 0x1b78]
cmp eax, dword [ebp - 0x21ec]
jge 0x1f01c19c
mov dword [ebp - 0x21f0], 1
mov ecx, dword [ebp - 0x1c]
push ecx
call fcn.1f00d220
test eax, eax
je 0x1f01c164
mov edx, dword [ebp - 0x21ec]
sub edx, 4
mov dword [ebp - 0x21ec], edx
mov eax, dword [ebp - 0x1b78]
cmp eax, dword [ebp - 0x21e8]
jg 0x1f01c164
mov ecx, dword [ebp - 0x1b78]
cmp ecx, dword [ebp - 0x21ec]
jl 0x1f01c164
mov dword [ebp - 0x21f0], 0
cmp dword [ebp - 0x21f0], 0
je 0x1f01c19c
mov edx, dword [ebp - 0x1b78]
add edx, 4
push edx
mov eax, dword [ebp - 0x1c]
mov ecx, dword [eax + 0x1afc]
push ecx
mov edx, dword [ebp - 0x1c]
push edx
call fcn.1f016270
add esp, 0xc
mov eax, dword [ebp - 0x1c]
mov ecx, dword [ebp - 0x1b78]
mov dword [eax + 0x1afc], ecx
jmp 0x1f01c228
mov edx, dword [ebp - 0x1c]
mov eax, dword [ebp - 0x1b78]
cmp eax, dword [edx + 0x1afc]
je 0x1f01c228
mov dword [ebp - 0x21f4], 1
mov ecx, dword [ebp - 0x1c]
push ecx
call fcn.1f00d220
test eax, eax
je 0x1f01c1f3
push str.Stack_size_missmatch_may_due_to_struct_return._Verify_that_returned_struct_size_is_provided_or_struct_is_defined_in_the_UserTypes_directory
push 2
call fcn.1f0291c0
mov edx, dword [ebp - 0x1c]
mov eax, dword [edx + 0x1afc]
sub eax, 4
cmp dword [ebp - 0x1b78], eax
jne 0x1f01c1f3
mov dword [ebp - 0x21f4], 0
cmp dword [ebp - 0x21f4], 0
je 0x1f01c228
mov ecx, dword [ebp - 0x1b78]
push ecx
mov edx, dword [ebp - 0x1c]
mov eax, dword [edx + 0x1afc]
push eax
mov ecx, dword [ebp - 0x1c]
push ecx
call fcn.1f016270
add esp, 0xc
mov edx, dword [ebp - 0x1c]
mov eax, dword [ebp - 0x1b78]
mov dword [edx + 0x1afc], eax
cmp dword [ebp - 0x1a8c], 0
je 0x1f01cd96
mov ecx, dword [ebp - 0x1c]
movzx edx, byte [ecx + 0xb6]
cmp edx, 1
je 0x1f01c25f
mov eax, dword [ebp - 0x1c]
movzx ecx, byte [eax + 0xb6]
cmp ecx, 2
je 0x1f01c25f
mov dword [ebp - 0x2270], 0
jmp 0x1f01c269
mov dword [ebp - 0x2270], 1
mov edx, dword [ebp - 0x2270]
mov dword [ebp - 0xc], edx
mov ecx, dword [ebp - 0x1c]
mov eax, dword [ecx + 0x1b20]
mov edx, dword [ecx + 0x1b24]
mov cl, 9
call fcn.1f040950
and eax, 1
and edx, 0
mov dword [ebp - 0x2278], eax
mov dword [ebp - 0x2274], edx
mov edx, dword [ebp - 0x2278]
or edx, dword [ebp - 0x2274]
je 0x1f01c310
mov eax, dword [ebp - 8]
cmp dword [eax + 0x1b10], 0
je 0x1f01c2c9
cmp dword [ebp - 0x1ae4], 0
jne 0x1f01c2c9
mov dword [ebp - 0x227c], 1
jmp 0x1f01c2d3
mov dword [ebp - 0x227c], 0
mov ecx, dword [ebp - 8]
mov edx, dword [ebp - 0x227c]
mov dword [ecx + 0x1b10], edx
cmp dword [ebp - 0xc], 0
je 0x1f01c2fd
cmp dword [ebp - 0x1ae4], 0
jne 0x1f01c2fd
mov dword [ebp - 0x2280], 1
jmp 0x1f01c307
mov dword [ebp - 0x2280], 0
mov eax, dword [ebp - 0x2280]
mov dword [ebp - 0xc], eax
mov ecx, dword [ebp - 0x1c]
mov eax, dword [ecx + 0x1b20]
mov edx, dword [ecx + 0x1b24]
mov cl, 8
call fcn.1f040950
and eax, 1
and edx, 0
mov dword [ebp - 0x2288], eax
mov dword [ebp - 0x2284], edx
mov edx, dword [ebp - 0x2288]
or edx, dword [ebp - 0x2284]
je 0x1f01c3ae
mov eax, dword [ebp - 8]
cmp dword [eax + 0x1b10], 0
je 0x1f01c367
cmp dword [ebp - 0x1ae4], 0
je 0x1f01c367
mov dword [ebp - 0x228c], 1
jmp 0x1f01c371
mov dword [ebp - 0x228c], 0
mov ecx, dword [ebp - 8]
mov edx, dword [ebp - 0x228c]
mov dword [ecx + 0x1b10], edx
cmp dword [ebp - 0xc], 0
je 0x1f01c39b
cmp dword [ebp - 0x1ae4], 0
je 0x1f01c39b
mov dword [ebp - 0x2290], 1
jmp 0x1f01c3a5
mov dword [ebp - 0x2290], 0
mov eax, dword [ebp - 0x2290]
mov dword [ebp - 0xc], eax
mov ecx, dword [ebp - 0x1c]
mov eax, dword [ecx + 0x1b20]
mov edx, dword [ecx + 0x1b24]
mov cl, 1
call fcn.1f040950
and eax, 1
and edx, 0
mov dword [ebp - 0x2298], eax
mov dword [ebp - 0x2294], edx
mov edx, dword [ebp - 0x2298]
or edx, dword [ebp - 0x2294]
jne 0x1f01c472
mov ecx, dword [ebp - 0x1c]
mov eax, dword [ecx + 0x1b20]
mov edx, dword [ecx + 0x1b24]
mov cl, 4
call fcn.1f040950
and eax, 1
and edx, 0
mov dword [ebp - 0x22a0], eax
mov dword [ebp - 0x229c], edx
mov edx, dword [ebp - 0x22a0]
or edx, dword [ebp - 0x229c]
je 0x1f01c427
cmp dword [ebp - 0x1ae4], 0
je 0x1f01c472
mov ecx, dword [ebp - 0x1c]
mov eax, dword [ecx + 0x1b20]
mov edx, dword [ecx + 0x1b24]
mov cl, 5
call fcn.1f040950
and eax, 1
and edx, 0
mov dword [ebp - 0x22a8], eax
mov dword [ebp - 0x22a4], edx
mov edx, dword [ebp - 0x22a8]
or edx, dword [ebp - 0x22a4]
je 0x1f01c466
cmp dword [ebp - 0x1ae4], 0
jne 0x1f01c472
mov dword [ebp - 0x22ac], 0
jmp 0x1f01c47c
mov dword [ebp - 0x22ac], 1
mov eax, dword [ebp - 0x22ac]
mov dword [ebp - 0x10], eax
mov ecx, dword [ebp - 0x1ad8]
push ecx
sub esp, 8
fld qword [ebp - 0x18]
fstp qword [esp]
mov edx, dword [ebp - 0x1ae4]
mov ecx, dword [ebp - 0x1c]
call fcn.1f0171c0
mov dword [ebp - 0x1b6c], eax
mov edx, dword [ebp - 0x1c]
mov eax, dword [edx + 0x1b20]
mov edx, dword [edx + 0x1b24]
mov cl, 0xa
call fcn.1f040950
and eax, 1
and edx, 0
mov dword [ebp - 0x22b4], eax
mov dword [ebp - 0x22b0], edx
mov eax, dword [ebp - 0x22b4]
or eax, dword [ebp - 0x22b0]
je 0x1f01c547
mov ecx, dword [ebp - 8]
cmp dword [ecx + 0x1b10], 0
je 0x1f01c500
cmp dword [ebp - 0x1b6c], 0
je 0x1f01c500
mov dword [ebp - 0x22b8], 1
jmp 0x1f01c50a
mov dword [ebp - 0x22b8], 0
mov edx, dword [ebp - 8]
mov eax, dword [ebp - 0x22b8]
mov dword [edx + 0x1b10], eax
cmp dword [ebp - 0xc], 0
je 0x1f01c534
cmp dword [ebp - 0x1b6c], 0
je 0x1f01c534
mov dword [ebp - 0x22bc], 1
jmp 0x1f01c53e
mov dword [ebp - 0x22bc], 0
mov ecx, dword [ebp - 0x22bc]
mov dword [ebp - 0xc], ecx
mov edx, dword [ebp - 0x1c]
mov eax, dword [edx + 0x1b20]
mov edx, dword [edx + 0x1b24]
mov cl, 0xb
call fcn.1f040950
and eax, 1
and edx, 0
mov dword [ebp - 0x22c4], eax
mov dword [ebp - 0x22c0], edx
mov eax, dword [ebp - 0x22c4]
or eax, dword [ebp - 0x22c0]
je 0x1f01c5e5
mov ecx, dword [ebp - 8]
cmp dword [ecx + 0x1b10], 0
je 0x1f01c59e
cmp dword [ebp - 0x1b6c], 0
jne 0x1f01c59e
mov dword [ebp - 0x22c8], 1
jmp 0x1f01c5a8
mov dword [ebp - 0x22c8], 0
mov edx, dword [ebp - 8]
mov eax, dword [ebp - 0x22c8]
mov dword [edx + 0x1b10], eax
cmp dword [ebp - 0xc], 0
je 0x1f01c5d2
cmp dword [ebp - 0x1b6c], 0
jne 0x1f01c5d2
mov dword [ebp - 0x22cc], 1
jmp 0x1f01c5dc
mov dword [ebp - 0x22cc], 0
mov ecx, dword [ebp - 0x22cc]
mov dword [ebp - 0xc], ecx
mov edx, dword [ebp - 0x1c]
mov eax, dword [edx + 0x1b20]
mov edx, dword [edx + 0x1b24]
mov cl, 6
call fcn.1f040950
and eax, 1
and edx, 0
mov dword [ebp - 0x22d4], eax
mov dword [ebp - 0x22d0], edx
mov eax, dword [ebp - 0x22d4]
or eax, dword [ebp - 0x22d0]
je 0x1f01c624
mov ecx, dword [ebp - 0x1b6c]
mov dword [ebp - 0x10], ecx
mov edx, dword [ebp - 0x1c]
mov eax, dword [edx + 0x1b20]
mov edx, dword [edx + 0x1b24]
mov cl, 7
call fcn.1f040950
and eax, 1
and edx, 0
mov dword [ebp - 0x22dc], eax
mov dword [ebp - 0x22d8], edx
mov eax, dword [ebp - 0x22dc]
or eax, dword [ebp - 0x22d8]
je 0x1f01c669
xor ecx, ecx
cmp dword [ebp - 0x1b6c], 0
sete cl
mov dword [ebp - 0x10], ecx
mov ecx, 0xc
mov esi, dword [ebp + 8]
lea edi, [ebp - 0x1ac8]
rep movsd dword es:[edi], dword [esi]
fld qword [ebp - 0x18]
fstp qword [ebp - 0x1b68]
mov edx, dword [ebp - 0x1c]
cmp dword [edx + 0x1b0c], 0
je 0x1f01c898
cmp dword [ebp - 0xc], 0
jne 0x1f01c6a7
cmp dword [ebp - 0x10], 0
jne 0x1f01c6a7
cmp dword [0x1f06c38c], 0
je 0x1f01c6b3
mov eax, dword [ebp - 8]
cmp dword [eax + 0x1b14], 0
jne 0x1f01c6c0
cmp dword [0x1f083738], 0
je 0x1f01c898
mov ecx, dword [ebp - 8]
cmp dword [ecx + 0x4c], 0
je 0x1f01c6d7
mov edx, dword [ebp - 8]
mov eax, dword [edx + 0x4c]
mov dword [ebp - 0x1b80], eax
jmp 0x1f01c6e3
mov ecx, dword [ebp - 8]
mov edx, dword [ecx + 0x28]
mov dword [ebp - 0x1b80], edx
mov eax, dword [ebp - 0x1b80]
push eax
lea ecx, [ebp - 0x1a88]
push ecx
mov edx, dword [ebp - 8]
mov ecx, dword [ebp - 0x1c]
call fcn.1f018840
mov edx, dword [ebp - 0x1c]
movzx eax, byte [edx + 0xb7]
test eax, eax
je 0x1f01c726
lea ecx, [ebp - 0x1ac8]
push ecx
lea edx, [ebp - 0x1a88]
push edx
mov edx, dword [ebp - 0x1ae4]
mov ecx, dword [ebp - 0x1c]
call fcn.1f0185e0
mov eax, dword [ebp - 8]
cmp dword [eax + 0x1b14], 0
je 0x1f01c898
cmp dword [ebp - 0x10], 0
je 0x1f01c898
lea edx, [ebp - 0x1a88]
mov ecx, dword [ebp - 0x1c]
call fcn.1f018d60
test eax, eax
je 0x1f01c898
mov ecx, dword [ebp - 0x1c]
mov eax, dword [ecx + 0x1b20]
mov edx, dword [ecx + 0x1b24]
mov cl, 3
call fcn.1f040950
and eax, 1
and edx, 0
mov dword [ebp - 0x1b84], eax
mov edx, dword [ebp - 8]
add edx, 0x1d68
push edx
push 0
mov eax, dword [ebp - 8]
mov ecx, dword [eax + 0x70]
push ecx
mov edx, dword [ebp - 8]
add edx, 0x1b20
push edx
mov eax, dword [ebp - 8]
push eax
mov ecx, dword [ebp - 8]
mov edx, dword [ecx + 0x34]
push edx
lea eax, [ebp - 0x18]
push eax
mov ecx, dword [ebp - 8]
mov edx, dword [ebp - 0x1b80]
xor eax, eax
cmp edx, dword [ecx + 0x28]
sete al
push eax
mov ecx, dword [ebp + 8]
push ecx
mov edx, dword [ebp - 0x1b80]
push edx
lea eax, [ebp - 0x1a88]
push eax
mov ecx, dword [ebp - 0x1c]
push ecx
call fcn.1f0184f0
add esp, 0x30
mov dword [ebp - 0x1ad4], eax
mov edx, dword [ebp - 0x1ad8]
mov dword [ebp - 0x1adc], edx
mov eax, dword [ebp - 0xe0]
mov dword [ebp - 0x1ad8], eax
cmp dword [ebp - 0x1b84], 0
je 0x1f01c88c
mov ecx, dword [ebp - 0x1b80]
push ecx
lea edx, [ebp - 0x1a88]
push edx
mov edx, dword [ebp - 8]
mov ecx, dword [ebp - 0x1c]
call fcn.1f018840
mov ecx, 0xc
mov esi, dword [ebp + 8]
lea edi, [ebp - 0x1ac8]
rep movsd dword es:[edi], dword [esi]
fld qword [ebp - 0x18]
fstp qword [ebp - 0x1b68]
mov eax, dword [ebp + 8]
mov ecx, dword [eax]
mov dword [ebp - 0x1ae4], ecx
mov edx, dword [ebp - 0x1c]
movzx eax, byte [edx + 0xb7]
test eax, eax
je 0x1f01c866
lea ecx, [ebp - 0x1ac8]
push ecx
lea edx, [ebp - 0x1a88]
push edx
mov edx, dword [ebp - 0x1ae4]
mov ecx, dword [ebp - 0x1c]
call fcn.1f0185e0
mov eax, dword [ebp - 0x1ad8]
push eax
sub esp, 8
fld qword [ebp - 0x18]
fstp qword [esp]
mov edx, dword [ebp - 0x1ae4]
mov ecx, dword [ebp - 0x1c]
call fcn.1f0171c0
mov dword [ebp - 0x1b6c], eax
jmp 0x1f01c898
mov ecx, dword [ebp - 0x1adc]
mov dword [ebp - 0xe0], ecx
mov edx, dword [ebp - 0x1c]
cmp dword [edx + 0x1b0c], 0
je 0x1f01cb89
mov eax, dword [ebp - 8]
cmp dword [eax + 0x1b14], 0
jne 0x1f01c8c1
cmp dword [0x1f083738], 0
je 0x1f01cb89
lea ecx, [ebp - 0x1a98]
push ecx
call dword [sym.imp.KERNEL32.dll_QueryPerformanceCounter]
mov edx, dword [ebp - 8]
mov eax, dword [ebp - 0x1a98]
sub eax, dword [edx + 0x60]
mov ecx, dword [ebp - 0x1a94]
sbb ecx, dword [edx + 0x64]
push 0
push 0x3e8
push ecx
push eax
call fcn.1f040910
push 0
push 0x3e8
push edx
push eax
call fcn.1f040910
push 0
push 0xa
push edx
push eax
call fcn.1f040910
mov ecx, dword [0x1f0829fc]
push ecx
mov ecx, dword [0x1f0829f8]
push ecx
push edx
push eax
call fcn.1f040860
mov dword [ebp - 0x1a98], eax
mov dword [ebp - 0x1a94], edx
push 0
push 0xa
mov edx, dword [ebp - 0x1a94]
push edx
mov eax, dword [ebp - 0x1a98]
push eax
call fcn.1f040970
mov byte [ebp - 0x1b85], al
push 0
push 0xa
mov ecx, dword [ebp - 0x1a94]
push ecx
mov edx, dword [ebp - 0x1a98]
push edx
call fcn.1f040860
mov dword [ebp - 0x1a98], eax
mov dword [ebp - 0x1a94], edx
movzx eax, byte [ebp - 0x1b85]
cmp eax, 5
jl 0x1f01c995
mov ecx, dword [ebp - 0x1a98]
add ecx, 1
mov edx, dword [ebp - 0x1a94]
adc edx, 0
mov dword [ebp - 0x1a98], ecx
mov dword [ebp - 0x1a94], edx
mov eax, dword [ebp - 8]
mov ecx, dword [ebp - 0x1a98]
mov dword [eax + 0x1a64], ecx
mov edx, dword [ebp - 8]
mov eax, dword [edx + 0x1a64]
mov dword [ebp - 0xcc], eax
mov ecx, dword [ebp - 8]
cmp dword [ecx + 0x1b10], 0
je 0x1f01ca96
cmp dword [0x1f083738], 0
jne 0x1f01ca96
cmp dword [0x1f06c38c], 0
jne 0x1f01ca96
mov edx, dword [ebp - 0x1c]
movzx eax, byte [edx + 0xb7]
test eax, eax
je 0x1f01ca0a
lea ecx, [ebp - 0x1ac8]
push ecx
mov edx, dword [ebp - 8]
add edx, 0xa8
push edx
mov edx, dword [ebp - 0x1ae4]
mov ecx, dword [ebp - 0x1c]
call fcn.1f0185e0
mov edx, dword [ebp - 8]
add edx, 0xa8
mov ecx, dword [ebp - 0x1c]
call fcn.1f018d50
test eax, eax
je 0x1f01ca91
mov eax, dword [ebp - 0x1ad0]
push eax
push 0xffffffffffffffff
mov ecx, dword [ebp - 0x1ad0]
mov edx, dword [ecx + 4]
push edx
call dword [sym.imp.KERNEL32.dll_GetCurrentThreadId]
push eax
mov eax, dword [ebp - 8]
push eax
lea ecx, [ebp - 0x1ac8]
push ecx
mov edx, dword [ebp - 8]
add edx, 0x74
push edx
mov eax, dword [ebp - 8]
mov ecx, dword [eax + 0x70]
push ecx
mov edx, dword [ebp - 8]
add edx, 0x1b20
push edx
push 0
mov eax, dword [ebp - 4]
push eax
mov ecx, dword [ebp - 0x1b6c]
push ecx
sub esp, 8
fld qword [ebp - 0x1b68]
fstp qword [esp]
mov edx, dword [ebp - 0x1ae4]
push edx
mov eax, dword [ebp - 8]
add eax, 0xa8
push eax
mov ecx, dword [ebp - 0x1c]
push ecx
call fcn.1f023260
add esp, 0x44
jmp 0x1f01cb89
cmp dword [ebp - 0xc], 0
jne 0x1f01cab2
cmp dword [0x1f083738], 0
jne 0x1f01cab2
cmp dword [0x1f06c38c], 0
je 0x1f01cb89
mov edx, dword [ebp - 0x1c]
movzx eax, byte [edx + 0xb6]
cmp eax, 2
je 0x1f01cad3
cmp dword [0x1f06c38c], 0
jne 0x1f01cad3
cmp dword [0x1f083738], 0
je 0x1f01cadf
mov dword [ebp - 0x1b8c], 4
jmp 0x1f01cae9
mov dword [ebp - 0x1b8c], 1
mov ecx, dword [ebp - 0x1c]
movzx edx, byte [ecx + 0xb5]
mov dword [ebp - 0x1a84], edx
cmp dword [0x1f083738], 0
jne 0x1f01cb14
lea edx, [ebp - 0x1a88]
mov ecx, dword [ebp - 0x1c]
call fcn.1f018d50
test eax, eax
je 0x1f01cb89
mov eax, dword [ebp - 0x1ad0]
push eax
push 0xffffffffffffffff
mov ecx, dword [ebp - 0x1ad0]
mov edx, dword [ecx + 4]
push edx
call dword [sym.imp.KERNEL32.dll_GetCurrentThreadId]
push eax
mov eax, dword [ebp - 8]
push eax
lea ecx, [ebp - 0x1ac8]
push ecx
mov edx, dword [ebp - 8]
add edx, 0x74
push edx
mov eax, dword [ebp - 8]
mov ecx, dword [eax + 0x70]
push ecx
mov edx, dword [ebp - 8]
add edx, 0x1b20
push edx
mov eax, dword [ebp - 0x1b8c]
push eax
mov ecx, dword [ebp - 4]
push ecx
mov edx, dword [ebp - 0x1b6c]
push edx
sub esp, 8
fld qword [ebp - 0x1b68]
fstp qword [esp]
mov eax, dword [ebp - 0x1ae4]
push eax
lea ecx, [ebp - 0x1a88]
push ecx
mov edx, dword [ebp - 0x1c]
push edx
call fcn.1f023260
add esp, 0x44
mov eax, dword [ebp - 0x1c]
mov cl, byte [eax + 0xb5]
mov byte [ebp - 0x21fd], cl
cmp dword [ebp - 0x1a88], 0
je 0x1f01cc4d
lea edx, [ebp - 0x1a80]
mov dword [ebp - 0x21fc], edx
movzx eax, byte [ebp - 0x21fd]
imul eax, eax, 0xa4
add eax, dword [ebp - 0x21fc]
mov dword [ebp - 0x21f8], eax
jmp 0x1f01cbde
mov ecx, dword [ebp - 0x21fc]
add ecx, 0xa4
mov dword [ebp - 0x21fc], ecx
mov edx, dword [ebp - 0x21fc]
cmp edx, dword [ebp - 0x21f8]
jae 0x1f01cc43
mov eax, dword [ebp - 0x21fc]
mov dword [eax + 8], 0
mov ecx, dword [ebp - 0x21fc]
mov dword [ecx + 0xc], 0
mov edx, dword [ebp - 0x21fc]
cmp dword [edx + 0x90], 0
je 0x1f01cc41
mov eax, dword [ebp - 0x21fc]
mov ecx, dword [eax + 0x90]
push ecx
push 0
mov edx, dword [0x1f0837b4]
push edx
call dword [sym.imp.KERNEL32.dll_HeapFree]
mov eax, dword [ebp - 0x21fc]
mov dword [eax + 0x90], 0
jmp 0x1f01cbcc
mov dword [ebp - 0x1a88], 0
cmp dword [ebp - 0x34], 0
je 0x1f01cc6d
mov ecx, dword [ebp - 0x34]
push ecx
push 0
mov edx, dword [0x1f0837b4]
push edx
call dword [sym.imp.KERNEL32.dll_HeapFree]
mov dword [ebp - 0x34], 0
lea eax, [ebp - 0x1b7c]
push eax
mov ecx, dword [ebp - 0x1ad4]
push ecx
call fcn.1f0194a0
add esp, 8
mov edx, dword [ebp - 0x1c]
mov al, byte [edx + 0xb5]
mov byte [ebp - 0x220d], al
mov ecx, dword [ebp - 8]
add ecx, 0xa8
mov dword [ebp - 0x220c], ecx
mov edx, dword [ebp - 0x220c]
cmp dword [edx], 0
je 0x1f01cd5c
mov eax, dword [ebp - 0x220c]
add eax, 8
mov dword [ebp - 0x2208], eax
movzx ecx, byte [ebp - 0x220d]
imul ecx, ecx, 0xa4
add ecx, dword [ebp - 0x2208]
mov dword [ebp - 0x2204], ecx
jmp 0x1f01ccec
mov edx, dword [ebp - 0x2208]
add edx, 0xa4
mov dword [ebp - 0x2208], edx
mov eax, dword [ebp - 0x2208]
cmp eax, dword [ebp - 0x2204]
jae 0x1f01cd50
mov ecx, dword [ebp - 0x2208]
mov dword [ecx + 8], 0
mov edx, dword [ebp - 0x2208]
mov dword [edx + 0xc], 0
mov eax, dword [ebp - 0x2208]
cmp dword [eax + 0x90], 0
je 0x1f01cd4e
mov ecx, dword [ebp - 0x2208]
mov edx, dword [ecx + 0x90]
push edx
push 0
mov eax, dword [0x1f0837b4]
push eax
call dword [sym.imp.KERNEL32.dll_HeapFree]
mov ecx, dword [ebp - 0x2208]
mov dword [ecx + 0x90], 0
jmp 0x1f01ccda
mov edx, dword [ebp - 0x220c]
mov dword [edx], 0
mov eax, dword [ebp - 0x220c]
cmp dword [eax + 0x1a54], 0
je 0x1f01cd96
mov ecx, dword [ebp - 0x220c]
mov edx, dword [ecx + 0x1a54]
push edx
push 0
mov eax, dword [0x1f0837b4]
push eax
call dword [sym.imp.KERNEL32.dll_HeapFree]
mov ecx, dword [ebp - 0x220c]
mov dword [ecx + 0x1a54], 0
mov edx, dword [ebp - 0x1c]
cmp dword [edx + 0x98], 0
je 0x1f01cf1f
mov eax, dword [ebp + 8]
mov ecx, dword [eax + 0x2c]
mov dword [ebp - 0x1bb0], ecx
mov edx, dword [ebp - 8]
mov eax, dword [edx + 0x1b18]
mov dword [ebp - 0x1ba4], eax
mov ecx, dword [ebp - 4]
mov dword [ebp - 0x1bac], ecx
mov edx, dword [ebp - 8]
mov eax, dword [edx + 0x5c]
mov dword [ebp - 0x1ba8], eax
mov dword [ebp - 0x1ba0], esp
mov ecx, dword [ebp - 8]
cmp dword [ecx + 0x4c], 0
je 0x1f01cdf3
mov edx, dword [ebp - 8]
mov eax, dword [edx + 0x4c]
mov dword [ebp - 0x1b90], eax
jmp 0x1f01cdff
mov ecx, dword [ebp - 8]
mov edx, dword [ecx + 0x28]
mov dword [ebp - 0x1b90], edx
mov eax, dword [ebp - 0x1c]
mov ecx, dword [eax + 0x98]
mov dword [ebp - 0x22e0], ecx
push 0
push 1
mov edx, dword [ebp - 0x22e0]
mov eax, dword [edx]
mov ecx, dword [ebp - 0x22e0]
add ecx, dword [eax + 4]
call fcn.1f02da00
mov ecx, dword [ebp - 0x1c]
mov edx, dword [ecx + 0x98]
mov dword [ebp - 0x22e4], edx
mov eax, dword [ebp - 0x22e4]
mov ecx, dword [eax]
mov edx, dword [ecx + 4]
mov eax, dword [ebp - 0x22e4]
mov ecx, dword [eax + edx + 0x24]
mov dword [ebp - 0x1b9c], ecx
jmp 0x1f01ce63
mov edx, dword [ebp - 0x1b9c]
mov eax, dword [edx + 4]
mov dword [ebp - 0x1b9c], eax
cmp dword [ebp - 0x1b9c], 0
je 0x1f01cef8
mov ecx, dword [ebp - 0x1b9c]
mov edx, dword [ecx]
mov dword [ebp - 0x1b98], edx
mov eax, dword [ebp - 0x1b98]
mov ecx, dword [eax]
push ecx
call dword [sym.imp.KERNEL32.dll_IsBadCodePtr]
test eax, eax
je 0x1f01ce93
jmp 0x1f01ce54
mov edx, dword [ebp - 0x1b98]
mov eax, dword [edx + 4]
push eax
lea ecx, [ebp - 0x1bb0]
push ecx
mov edx, dword [ebp + 8]
push edx
mov eax, dword [ebp - 8]
push eax
mov ecx, dword [ebp - 0x1b90]
push ecx
mov edx, dword [ebp - 0x1b98]
mov eax, dword [edx]
call eax
mov dword [ebp - 0x1b94], eax
cmp esp, dword [ebp - 0x1ba0]
je 0x1f01cee8
mov esp, dword [ebp - 0x1ba0]
push 0
mov ecx, dword [ebp - 0x1b98]
mov edx, dword [ecx]
push edx
mov eax, dword [ebp - 0x1c]
push eax
call fcn.1f0174e0
add esp, 0xc
cmp dword [ebp - 0x1b94], 0
jne 0x1f01cef3
jmp 0x1f01cef8
jmp 0x1f01ce54
mov ecx, dword [ebp - 0x1c]
mov edx, dword [ecx + 0x98]
mov dword [ebp - 0x22e8], edx
mov eax, dword [ebp - 0x22e8]
mov ecx, dword [eax]
mov edx, dword [ebp - 0x22e8]
add edx, dword [ecx + 4]
mov ecx, edx
call fcn.1f02da70
mov eax, dword [ebp - 0x1ad0]
mov ecx, dword [eax + 4]
mov dword [ebp - 0x2240], ecx
mov edx, dword [ebp - 8]
cmp dword [edx + 0x4c], 0
je 0x1f01cf57
mov eax, dword [ebp - 8]
mov ecx, dword [eax + 0x4c]
push ecx
push 0
mov edx, dword [0x1f0837b4]
push edx
call dword [sym.imp.KERNEL32.dll_HeapFree]
mov eax, dword [ebp - 8]
mov dword [eax + 0x4c], 0
mov ecx, dword [ebp - 8]
mov edx, dword [ecx + 0x38]
mov al, byte [edx + 0xb5]
mov byte [ebp - 0x2221], al
mov ecx, dword [ebp - 8]
add ecx, 0xa8
mov dword [ebp - 0x2220], ecx
mov edx, dword [ebp - 0x2220]
cmp dword [edx], 0
je 0x1f01d033
mov eax, dword [ebp - 0x2220]
add eax, 8
mov dword [ebp - 0x221c], eax
movzx ecx, byte [ebp - 0x2221]
imul ecx, ecx, 0xa4
add ecx, dword [ebp - 0x221c]
mov dword [ebp - 0x2218], ecx
jmp 0x1f01cfc3
mov edx, dword [ebp - 0x221c]
add edx, 0xa4
mov dword [ebp - 0x221c], edx
mov eax, dword [ebp - 0x221c]
cmp eax, dword [ebp - 0x2218]
jae 0x1f01d027
mov ecx, dword [ebp - 0x221c]
mov dword [ecx + 8], 0
mov edx, dword [ebp - 0x221c]
mov dword [edx + 0xc], 0
mov eax, dword [ebp - 0x221c]
cmp dword [eax + 0x90], 0
je 0x1f01d025
mov ecx, dword [ebp - 0x221c]
mov edx, dword [ecx + 0x90]
push edx
push 0
mov eax, dword [0x1f0837b4]
push eax
call dword [sym.imp.KERNEL32.dll_HeapFree]
mov ecx, dword [ebp - 0x221c]
mov dword [ecx + 0x90], 0
jmp 0x1f01cfb1
mov edx, dword [ebp - 0x2220]
mov dword [edx], 0
mov eax, dword [ebp - 0x2220]
cmp dword [eax + 0x1a54], 0
je 0x1f01d06d
mov ecx, dword [ebp - 0x2220]
mov edx, dword [ecx + 0x1a54]
push edx
push 0
mov eax, dword [0x1f0837b4]
push eax
call dword [sym.imp.KERNEL32.dll_HeapFree]
mov ecx, dword [ebp - 0x2220]
mov dword [ecx + 0x1a54], 0
mov edx, dword [ebp - 0x1c]
cmp dword [edx + 0x1b28], 0
je 0x1f01d0ab
mov eax, dword [ebp - 8]
cmp dword [eax + 0x50], 0
je 0x1f01d0ab
mov ecx, dword [ebp - 8]
mov edx, dword [ecx + 0x54]
push edx
call dword [sym.imp.KERNEL32.dll_SetEvent]
push 0xffffffffffffffff
mov eax, dword [ebp - 8]
mov ecx, dword [eax + 0x50]
push ecx
call dword [sym.imp.KERNEL32.dll_WaitForSingleObject]
mov edx, dword [ebp - 8]
mov eax, dword [edx + 0x50]
push eax
call dword [sym.imp.KERNEL32.dll_CloseHandle]
mov ecx, dword [ebp - 0x1c]
cmp dword [ecx + 4], 0
jne 0x1f01d0d7
mov edx, dword [ebp - 0x1c]
cmp dword [edx + 0x9c], 0
jne 0x1f01d0d7
mov eax, dword [ebp - 8]
mov ecx, dword [eax + 0xa4]
push ecx
call dword [sym.imp.KERNEL32.dll_GetCurrentThread]
push eax
call dword [sym.imp.KERNEL32.dll_SetThreadPriority]
mov edx, dword [ebp - 0x1c]
cmp dword [edx + 0xa8], 1
jne 0x1f01d0f3
mov eax, dword [ebp - 0x1c]
mov ecx, dword [eax + 0xac]
push ecx
call dword [sym.imp.KERNEL32.dll_SetEvent]
mov edx, dword [0x1f0837c4]
mov dword [ebp - 0x2228], edx
cmp dword [ebp - 0x2228], 0x40
jae 0x1f01d11c
mov eax, dword [ebp - 0x2228]
push eax
call section..text
mov dword [ebp - 0x222c], eax
jmp 0x1f01d12f
mov ecx, dword [ebp - 0x2228]
push ecx
call dword [sym.imp.KERNEL32.dll_TlsGetValue]
mov dword [ebp - 0x222c], eax
mov edx, dword [ebp - 0x222c]
mov dword [ebp - 0x2214], edx
mov eax, dword [ebp - 0x2214]
add eax, 1
mov dword [ebp - 0x2234], eax
mov ecx, dword [0x1f0837c4]
mov dword [ebp - 0x2230], ecx
cmp dword [ebp - 0x2230], 0x40
jae 0x1f01d174
mov edx, dword [ebp - 0x2234]
push edx
mov eax, dword [ebp - 0x2230]
push eax
call fcn.1f001021
jmp 0x1f01d188
mov ecx, dword [ebp - 0x2234]
push ecx
mov edx, dword [ebp - 0x2230]
push edx
call dword [sym.imp.KERNEL32.dll_TlsSetValue]
cmp dword [ebp - 0x2240], 0
je 0x1f01d241
mov eax, dword [ebp - 0x2240]
mov ecx, dword [eax]
mov edx, dword [ecx + 4]
mov eax, dword [ebp - 0x2240]
cmp dword [eax + edx + 0x10], 0
je 0x1f01d241
mov ecx, dword [ebp - 0x2240]
mov edx, dword [ecx]
mov eax, dword [edx + 4]
mov ecx, dword [ebp - 0x2240]
mov edx, dword [ecx + eax + 0x10]
mov eax, dword [edx]
cmp eax, dword [ebp - 8]
jne 0x1f01d211
mov ecx, dword [ebp - 0x2240]
mov edx, dword [ecx]
mov eax, dword [edx + 4]
mov ecx, dword [ebp - 0x2240]
mov edx, dword [ecx + eax + 0x10]
push edx
mov eax, dword [ebp - 0x2240]
mov ecx, dword [eax]
mov edx, dword [ecx + 4]
mov eax, dword [ebp - 0x2240]
mov ecx, dword [eax]
mov eax, dword [ebp - 0x2240]
add eax, dword [ecx + 4]
mov ecx, dword [ebp - 0x2240]
mov edx, dword [ecx + edx]
mov ecx, eax
mov eax, dword [edx + 0x20]
call eax
jmp 0x1f01d241
mov ecx, dword [ebp - 8]
push ecx
mov edx, dword [ebp - 0x2240]
mov eax, dword [edx]
mov ecx, dword [eax + 4]
mov edx, dword [ebp - 0x2240]
mov eax, dword [edx]
mov edx, dword [ebp - 0x2240]
add edx, dword [eax + 4]
mov eax, dword [ebp - 0x2240]
mov eax, dword [eax + ecx]
mov ecx, edx
mov edx, dword [eax + 0x24]
call edx
mov eax, dword [0x1f0837c4]
mov dword [ebp - 0x2238], eax
cmp dword [ebp - 0x2238], 0x40
jae 0x1f01d26a
mov ecx, dword [ebp - 0x2214]
push ecx
mov edx, dword [ebp - 0x2238]
push edx
call fcn.1f001021
jmp 0x1f01d27e
mov eax, dword [ebp - 0x2214]
push eax
mov ecx, dword [ebp - 0x2238]
push ecx
call dword [sym.imp.KERNEL32.dll_TlsSetValue]
mov edx, dword [ebp - 0x1ad8]
push edx
call fcn.1f001055
mov eax, dword [ebp - 0x1c]
add eax, 0xa8
or ecx, 0xffffffff
lock xadd dword [eax], ecx
mov edx, dword [ebp - 0x1c]
cmp dword [edx + 0xa8], 0
jge 0x1f01d2b2
mov eax, dword [ebp - 0x1c]
mov dword [eax + 0xa8], 0
mov ecx, dword [ebp - 0x1c]
cmp dword [ecx + 0xa8], 0
jne 0x1f01d315
mov edx, dword [ebp - 0x1c]
mov eax, dword [edx + 0xa0]
mov dword [ebp - 0x223c], eax
cmp dword [ebp - 0x223c], 0
je 0x1f01d315
mov ecx, dword [ebp - 0x1c]
cmp dword [ecx + 0x1b2c], 0
je 0x1f01d2e4
jmp 0x1f01d315
mov edx, dword [ebp - 0x1c]
mov dword [edx + 0xa0], 0
mov eax, dword [ebp - 0x1c]
movzx ecx, byte [eax + 0xb4]
push ecx
mov edx, dword [ebp - 0x1c]
add edx, 8
push edx
mov eax, dword [ebp - 0x1c]
mov ecx, dword [eax + 0xb0]
push ecx
call fcn.1f03f7a0
add esp, 0xc
mov dword [ebp - 0x1a90], 0
cmp dword [ebp - 0x1ae0], 0
jne 0x1f01d35a
fld qword [ebp - 0x1af0]
fcomp qword [ebp - 0x18]
fnstsw ax
test ah, 0x44
jnp 0x1f01d344
mov dword [ebp - 0x22ec], 1
jmp 0x1f01d34e
mov dword [ebp - 0x22ec], 0
mov edx, dword [ebp - 0x22ec]
mov dword [ebp - 0x1a90], edx
lea eax, [ebp - 0x1b60]
push eax
call fcn.1f01da20
add esp, 4
cmp dword [ebp - 0x1a90], 0
je 0x1f01d383
sub esp, 8
fld qword [ebp - 0x18]
fstp qword [esp]
call fcn.1f013840
add esp, 8
mov ecx, dword [ebp - 0x1c]
cmp dword [ecx + 4], 0
jne 0x1f01d398
mov edx, dword [ebp - 0x1c]
cmp dword [edx + 0x9c], 0
je 0x1f01d3a4
mov eax, dword [ebp - 0x1ad0]
mov dword [eax], 0
mov ecx, dword [ebp + 0xc]
mov edx, dword [ebp - 4]
mov dword [ecx], edx
xor eax, eax
pop edi
pop esi
mov esp, ebp
pop ebp
ret