Function at 0x10009680
Capabilities:
Create process on windows
Get common file path

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x10080287
mov eax, dword fs:[0]
push eax
sub esp, 0x398
mov eax, dword [0x1008b040]
xor eax, ebp
mov dword [ebp - 0x10], eax
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
sub esp, 0x18
xorps xmm0, xmm0
mov ecx, esp
mov dword [ebp - 0x118], esp
push 0x14
movups xmmword [ecx], xmm0
push 0x10082bac
mov dword [ecx + 0x10], 0
mov dword [ecx + 0x14], 0
call fcn.1000f330
sub esp, 0x18
mov dword [ebp - 4], 0
mov ecx, esp
xorps xmm0, xmm0
push 9
movups xmmword [ecx], xmm0
push str.CELESTIAL
mov dword [ecx + 0x10], 0
mov dword [ecx + 0x14], 0
call fcn.1000f330
mov dword [ebp - 4], 0xffffffff
call fcn.10003900
mov ecx, dword [0x10116ebc]
mov dword [ebp - 0x11c], 0x42480000
mov dword [ebp - 0x118], 0x42480000
mov eax, dword [ecx + 0x3e28]
mov byte [eax + 0x90], 1
mov eax, dword [ecx + 0x3e28]
movss xmm0, dword [eax + 0x10]
subss xmm0, dword [eax + 0x5c]
mov byte [eax + 0x115], 1
addss xmm0, dword [0x100857d8]
movss dword [eax + 0xd4], xmm0
mov eax, dword [ecx + 0x3e28]
mov byte [eax + 0x90], 1
mov eax, dword [ecx + 0x3e28]
lea ecx, [ebp - 0x11c]
cmp dword [0x1011737c], 0
push ecx
push 0x19
movss xmm0, dword [eax + 0x14]
subss xmm0, dword [eax + 0x60]
mov byte [eax + 0x115], 1
addss xmm0, dword [0x10085754]
movss dword [eax + 0xd8], xmm0
sete al
push eax
push 0x10082bd0
push 0x10082b84
call fcn.10003ca0
test al, al
je 0x100097c3
xor esi, esi
mov dword [0x1011737c], esi
jmp 0x100097c9
mov esi, dword [0x1011737c]
mov eax, dword [0x10116ebc]
xorps xmm0, xmm0
mov edx, dword [eax + 0x3e28]
cmp byte [edx + 0x93], 0
jne 0x1000982f
movss xmm1, dword [edx + 0xdc]
addss xmm1, xmm0
movss xmm0, dword [edx + 0xe0]
movss dword [edx + 0xd4], xmm1
movss dword [edx + 0xd8], xmm0
mov eax, dword [edx + 0x104]
mov ecx, dword [edx + 0x108]
mov dword [edx + 0xfc], eax
mov eax, dword [edx + 0x110]
mov dword [edx + 0x100], ecx
mov dword [edx + 0x10c], eax
mov byte [edx + 0x114], 1
lea ecx, [ebp - 0x11c]
mov dword [ebp - 0x11c], 0x42480000
push ecx
cmp esi, 1
mov dword [ebp - 0x118], 0x42480000
push 0x1c
sete al
push eax
push 0x10082bd4
push 0x10082b88
call fcn.10003ca0
test al, al
je 0x10009873
mov esi, 1
mov dword [0x1011737c], esi
jmp 0x10009879
mov esi, dword [0x1011737c]
mov eax, dword [0x10116ebc]
mov edx, dword [eax + 0x3e28]
cmp byte [edx + 0x93], 0
jne 0x100098e0
movss xmm1, dword [edx + 0xdc]
addss xmm1, dword [0x10085668]
movss xmm0, dword [edx + 0xe0]
movss dword [edx + 0xd4], xmm1
movss dword [edx + 0xd8], xmm0
mov eax, dword [edx + 0x104]
mov ecx, dword [edx + 0x108]
mov dword [edx + 0xfc], eax
mov eax, dword [edx + 0x110]
mov dword [edx + 0x100], ecx
mov dword [edx + 0x10c], eax
mov byte [edx + 0x114], 1
lea ecx, [ebp - 0x11c]
mov dword [ebp - 0x11c], 0x42480000
push ecx
cmp esi, 2
mov dword [ebp - 0x118], 0x42480000
push 0x19
sete al
push eax
push 0x10082bd8
push 0x10082b8c
call fcn.10003ca0
test al, al
je 0x10009926
mov dword [0x1011737c], 2
jmp 0x1000a2a7
mov eax, dword [0x1011737c]
test eax, eax
jne 0x1000a07c
sub esp, 0x18
xorps xmm0, xmm0
mov ecx, esp
push 4
movups xmmword [ecx], xmm0
push str.Boom
mov dword [ecx + 0x10], eax
mov dword [ecx + 0x14], eax
call fcn.1000f330
call fcn.10004020
push 0x10116e0e
push str.enables_all_visuals
push str.Enable_Visuals
call fcn.10004100
push 0x10116d0d
push 0x10082712
push str.Show_FOV
call fcn.10004100
cmp byte [0x10116d0d], 0
je 0x100099cd
mov ecx, dword [0x10116c88]
call fcn.10038390
sub esp, 8
mov dword [ebp - 0x120], 0x3e8
lea eax, [ebp - 0x120]
mov dword [ebp - 0x118], 0
mov ecx, str.Value
push eax
lea eax, [ebp - 0x118]
push eax
push 0x10116418
call fcn.10003240
add esp, 0x14
call fcn.100384d0
mov edi, dword [0x10116464]
mov ecx, str.Universal
mov esi, dword [0x10116460]
cmp edi, 0xf
push 9
cmova ecx, dword [str.Universal]
mov edx, esi
push 0x10082c1c
call fcn.100101b0
add esp, 8
test al, al
jne 0x10009a45
cmp edi, 0xf
mov ecx, str.Universal
push 0xc
cmova ecx, dword [str.Universal]
mov edx, esi
push str.th3ltgrounds
call fcn.100101b0
add esp, 8
test al, al
jne 0x10009a45
cmp edi, 0xf
mov ecx, str.Universal
push 6
cmova ecx, dword [str.Universal]
mov edx, esi
push str.future
call fcn.100101b0
add esp, 8
test al, al
je 0x10009a59
push 0x10116def
push str.uses_game_team_colors
push str.Override_Custom_Colors
call fcn.10004100
push 0x10116e02
push str.draws_boxes_onto_players
push str.Show_Players
call fcn.10004100
push 0x10116df9
push str.draws_a_line_where_it_thinks_a_player_will_be
push str.Visualize_Prediction
call fcn.10004100
push 0x10116e05
push str.draws_tracer_lines_onto_players
push str.Show_Tracers
call fcn.10004100
push 0x10116e15
push 0x10082712
push str.Show_Player_Names
call fcn.10004100
push 0x10116e17
push str.shows_info_like_health_and_distance
push str.Show_Player_Misc_Info
call fcn.10004100
mov edi, dword [0x10116464]
mov ecx, str.Universal
mov esi, dword [0x10116460]
cmp edi, 0xf
push 4
cmova ecx, dword [str.Universal]
mov edx, esi
push str.CBRO
call fcn.100101b0
add esp, 8
test al, al
jne 0x10009b25
cmp edi, 0xf
mov ecx, str.Universal
push 6
cmova ecx, dword [str.Universal]
mov edx, esi
push str.Recoil
call fcn.100101b0
add esp, 8
test al, al
jne 0x10009b25
push 0x10116e04
push str.draws_lines_to_each_body_part
push str.Show_Player_Skeleton
call fcn.10004100
mov ecx, dword [0x10116c88]
call fcn.10038390
sub esp, 8
mov dword [ebp - 0x118], 0x2710
lea eax, [ebp - 0x118]
mov dword [ebp - 0x120], 0
mov ecx, str.Max_Render_Distance
push eax
lea eax, [ebp - 0x120]
push eax
push str.d_dddddd
call fcn.10003240
call fcn.100384d0
cmp dword [0x10116464], 0xf
mov ecx, str.Universal
mov edx, dword [0x10116460]
cmova ecx, dword [str.Universal]
push 0xc
push str.Bad_Business
call fcn.100101b0
add esp, 0x1c
test al, al
je 0x10009be7
sub esp, 0x18
xorps xmm0, xmm0
mov ecx, esp
push 0xc
movups xmmword [ecx], xmm0
push str.Bad_Business
mov dword [ecx + 0x10], 0
mov dword [ecx + 0x14], 0
call fcn.1000f330
call fcn.100046e0
push 0x10116e01
push str.will_label_thrown_items
push str.Show_Throwables
call fcn.10004100
push 0x10116df8
push str.will_give_onscreen_warning_when_near_any_thrown_item
push str.Throwable_Warning
call fcn.10004100
cmp dword [0x10116464], 0xf
mov ecx, str.Universal
mov edx, dword [0x10116460]
cmova ecx, dword [str.Universal]
push 0xe
push str.Phantom_Forces
call fcn.100101b0
add esp, 8
test al, al
je 0x10009c51
sub esp, 0x18
xorps xmm0, xmm0
mov ecx, esp
push 0xe
movups xmmword [ecx], xmm0
push str.Phantom_Forces
mov dword [ecx + 0x10], 0
mov dword [ecx + 0x14], 0
call fcn.1000f330
call fcn.100046e0
push 0x10116d0e
push str.will_label_dropped_guns
push str.Show_Guns
call fcn.10004100
cmp dword [0x10116464], 0xf
mov ecx, str.Universal
mov edx, dword [0x10116460]
cmova ecx, dword [str.Universal]
push 6
push str.Apoc_2
call fcn.100101b0
add esp, 8
test al, al
je 0x10009dd8
sub esp, 0x18
xorps xmm0, xmm0
mov ecx, esp
push 0x13
movups xmmword [ecx], xmm0
push str.Apocalypse_Rising_2
mov dword [ecx + 0x10], 0
mov dword [ecx + 0x14], 0
call fcn.1000f330
call fcn.100046e0
push 0x10116e14
push str.will_label_locations
push str.Show_Locations
call fcn.10004100
push 0x10116e16
push str.will_label_items_that_players_have_equipped
push str.Show_Held_Items
call fcn.10004100
cmp byte [0x10116e14], 0
je 0x10009d60
push 0x10116e00
push 0x10082712
push str.Location_Outline
call fcn.10004100
mov ecx, dword [0x10116c88]
call fcn.10038390
sub esp, 8
mov dword [ebp - 0x118], 0x2710
lea eax, [ebp - 0x118]
mov dword [ebp - 0x120], 0
mov ecx, str.Location_Distance
push eax
lea eax, [ebp - 0x120]
push eax
push 0x10116420
call fcn.10003240
call fcn.100384d0
push ecx
mov ecx, esp
xorps xmm0, xmm0
push 0
push 0x10082712
movups xmmword [ecx], xmm0
mov dword [ecx + 0x10], 0
mov dword [ecx + 0x14], 0
call fcn.1000f330
call fcn.100046e0
push 0x10116dfa
push str.will_label_vehicles
push str.Show_Vehicles
call fcn.10004100
cmp byte [0x10116dfa], 0
je 0x10009dd8
push 0x10116e07
push 0x10082712
push str.Vehicle_Outline
call fcn.10004100
mov ecx, dword [0x10116c88]
call fcn.10038390
sub esp, 8
mov dword [ebp - 0x118], 0x2710
lea eax, [ebp - 0x118]
mov dword [ebp - 0x120], 0
mov ecx, str.Vehicle_Distance
push eax
lea eax, [ebp - 0x120]
push eax
push 0x1011642c
call fcn.10003240
add esp, 0x14
call fcn.100384d0
cmp dword [0x10116464], 0xf
mov ecx, str.Universal
mov edx, dword [0x10116460]
cmova ecx, dword [str.Universal]
push 9
push str.ProjDelta
call fcn.100101b0
add esp, 8
test al, al
je 0x10009efa
sub esp, 0x18
xorps xmm0, xmm0
mov ecx, esp
push 0xd
movups xmmword [ecx], xmm0
push str.Project_Delta
mov dword [ecx + 0x10], 0
mov dword [ecx + 0x14], 0
call fcn.1000f330
call fcn.100046e0
push 0x10116dfb
push str.will_label_guns_that_players_have_equipped
push str.Show_Held_Guns
call fcn.10004100
cmp byte [0x10116dfb], 0
je 0x10009e96
mov ecx, dword [0x10116c88]
call fcn.10038390
sub esp, 8
mov dword [ebp - 0x118], 0x2710
lea eax, [ebp - 0x118]
mov dword [ebp - 0x120], 0
mov ecx, str.Item_Distance
push eax
lea eax, [ebp - 0x120]
push eax
push 0x10116424
call fcn.10003240
add esp, 0x14
call fcn.100384d0
push 0x10116e06
push str.will_label_containers_if_they_contain_anything
push str.Show_Containers
call fcn.10004100
cmp byte [0x10116e06], 0
je 0x10009efa
mov ecx, dword [0x10116c88]
call fcn.10038390
sub esp, 8
mov dword [ebp - 0x118], 0x2710
lea eax, [ebp - 0x118]
mov dword [ebp - 0x120], 0
mov ecx, str.Container_Distance
push eax
lea eax, [ebp - 0x120]
push eax
push 0x1011641c
call fcn.10003240
add esp, 0x14
call fcn.100384d0
cmp dword [0x10116464], 0xf
mov ecx, str.Universal
mov edx, dword [0x10116460]
cmova ecx, dword [str.Universal]
push 0xb
push str.Criminality
call fcn.100101b0
add esp, 8
test al, al
je 0x1000a06d
sub esp, 0x18
xorps xmm0, xmm0
mov ecx, esp
push 0xb
movups xmmword [ecx], xmm0
push str.Criminality
mov dword [ecx + 0x10], 0
mov dword [ecx + 0x14], 0
call fcn.1000f330
call fcn.100046e0
push 0x10116dee
push str.will_label_dealers
push str.Show_Dealers
call fcn.10004100
cmp byte [0x10116dee], 0
je 0x10009ff5
push 0x10116dec
push 0x10082712
push str.Dealer_Outline
call fcn.10004100
mov ecx, dword [0x10116c88]
call fcn.10038390
sub esp, 8
mov dword [ebp - 0x118], 0x2710
lea eax, [ebp - 0x118]
mov dword [ebp - 0x120], 0
mov ecx, str.Dealer_Distance
push eax
lea eax, [ebp - 0x120]
push eax
push 0x10116428
call fcn.10003240
call fcn.100384d0
push ecx
mov ecx, esp
xorps xmm0, xmm0
push 0
push 0x10082712
movups xmmword [ecx], xmm0
mov dword [ecx + 0x10], 0
mov dword [ecx + 0x14], 0
call fcn.1000f330
call fcn.100046e0
push 0x10116e0c
push str.will_label_atmz
push str.Show_ATMz
call fcn.10004100
cmp byte [0x10116e0c], 0
je 0x1000a06d
push 0x10116ded
push 0x10082712
push str.ATMz_Outline
call fcn.10004100
mov ecx, dword [0x10116c88]
call fcn.10038390
sub esp, 8
mov dword [ebp - 0x118], 0x2710
lea eax, [ebp - 0x118]
mov dword [ebp - 0x120], 0
mov ecx, str.ATMz_Distance
push eax
lea eax, [ebp - 0x120]
push eax
push 0x10116434
call fcn.10003240
add esp, 0x14
call fcn.100384d0
call fcn.100384d0
call fcn.10032790
mov eax, dword [0x1011737c]
cmp eax, 1
jne 0x1000a29e
sub esp, 0x18
xorps xmm0, xmm0
mov ecx, esp
push 5
movups xmmword [ecx], xmm0
push str.Boomy
mov dword [ecx + 0x10], 0
mov dword [ecx + 0x14], 0
call fcn.1000f330
call fcn.10004020
push 0x10116e0f
push str.enables_all_aimbot_options
push str.Enable_Aimbot
call fcn.10004100
push 0x10116d0f
push 0x10082712
push str.Prediction
call fcn.10004100
cmp byte [0x10116d0f], 0
je 0x1000a127
mov ecx, dword [0x10116c88]
call fcn.10038390
sub esp, 8
mov dword [ebp - 0x118], 0xa
lea eax, [ebp - 0x118]
mov dword [ebp - 0x120], 0
mov ecx, str.Strength
push eax
lea eax, [ebp - 0x120]
push eax
push 0x10116dfc
call fcn.10003240
add esp, 0x14
call fcn.100384d0
mov ecx, dword [0x10116c88]
call fcn.10038390
sub esp, 8
mov dword [ebp - 0x118], 0x64
lea eax, [ebp - 0x118]
mov dword [ebp - 0x120], 0
mov ecx, str.Smoothness
push eax
lea eax, [ebp - 0x120]
push eax
push 0x10116430
call fcn.10003240
call fcn.100384d0
add esp, 0x10
mov edx, 0x10116e18
mov ecx, str.Aimbot_Key
push 0x2a
push 0x1008b0a8
push 0x10071af0
call fcn.10071b70
cmp dword [0x10116464], 0xf
mov ecx, str.Universal
mov edx, dword [0x10116460]
cmova ecx, dword [str.Universal]
push 8
push str.Riotfall
call fcn.100101b0
add esp, 0x18
test al, al
jne 0x1000a1c0
sub esp, 8
call fcn.10071d10
add esp, 8
mov ecx, dword [0x10116c88]
call fcn.10038390
sub esp, 8
mov dword [ebp - 0x118], 0x32
lea eax, [ebp - 0x118]
mov dword [ebp - 0x120], 0xffffffce
mov ecx, str.X_Offset
push eax
lea eax, [ebp - 0x120]
push eax
push 0x10116e10
call fcn.10003240
call fcn.100384d0
mov ecx, dword [0x10116c88]
call fcn.10038390
add esp, 0xc
mov dword [ebp - 0x118], 0x32
lea eax, [ebp - 0x118]
mov dword [ebp - 0x120], 0xffffffce
mov ecx, str.Y_Offset
push eax
lea eax, [ebp - 0x120]
push eax
push 0x10116df0
call fcn.10003240
call fcn.100384d0
mov ecx, dword [0x10116c88]
call fcn.10038390
add esp, 0xc
mov dword [ebp - 0x118], 0x2710
lea eax, [ebp - 0x118]
mov dword [ebp - 0x120], 0
mov ecx, str.Max_Lock_Distance
push eax
lea eax, [ebp - 0x120]
push eax
push 0x1010fd3c
call fcn.10003240
add esp, 0x14
call fcn.100384d0
call fcn.100384d0
call fcn.10032790
mov eax, dword [0x1011737c]
cmp eax, 2
jne 0x1000b4b5
sub esp, 0x18
xorps xmm0, xmm0
mov ecx, esp
push 3
movups xmmword [ecx], xmm0
push 0x10083164
mov dword [ecx + 0x10], 0
mov dword [ecx + 0x14], 0
call fcn.1000f330
call fcn.10004020
mov edi, dword [0x10116464]
mov ecx, str.Universal
mov esi, dword [0x10116460]
cmp edi, 0xf
push 9
cmova ecx, dword [str.Universal]
mov edx, esi
push 0x10082c1c
call fcn.100101b0
add esp, 8
test al, al
jne 0x1000a349
cmp edi, 0xf
mov ecx, str.Universal
push 8
cmova ecx, dword [str.Universal]
mov edx, esi
push str.Riotfall
call fcn.100101b0
add esp, 8
test al, al
jne 0x1000a349
cmp edi, 0xf
mov ecx, str.Universal
push 4
cmova ecx, dword [str.Universal]
mov edx, esi
push str.CBRO
call fcn.100101b0
add esp, 8
test al, al
je 0x1000a37d
push 0x10116e0d
push 0x10082712
push str.Teamcheck
call fcn.10004100
push 0x10116e03
push 0x10082712
push str.Healthcheck
call fcn.10004100
mov edi, dword [0x10116464]
mov esi, dword [0x10116460]
cmp edi, 0xf
mov ecx, str.Universal
push 0xa
cmova ecx, dword [str.Universal]
mov edx, esi
push str.Rush_Point
call fcn.100101b0
add esp, 8
test al, al
jne 0x1000a40d
cmp edi, 0xf
mov ecx, str.Universal
push 0xc
cmova ecx, dword [str.Universal]
mov edx, esi
push str.th3ltgrounds
call fcn.100101b0
add esp, 8
test al, al
jne 0x1000a40d
cmp edi, 0xf
mov ecx, str.Universal
push 6
cmova ecx, dword [str.Universal]
mov edx, esi
push str.future
call fcn.100101b0
add esp, 8
test al, al
jne 0x1000a40d
cmp edi, 0xf
mov ecx, str.Universal
push 6
cmova ecx, dword [str.Universal]
mov edx, esi
push str.Recoil
call fcn.100101b0
add esp, 8
test al, al
je 0x1000a421
push 0x10116e0d
push 0x10082712
push str.Teamcheck
call fcn.10004100
sub esp, 0x18
xorps xmm0, xmm0
mov ecx, esp
push 7
movups xmmword [ecx], xmm0
push str.Configs
mov dword [ecx + 0x10], 0
mov dword [ecx + 0x14], 0
call fcn.1000f330
call fcn.100046e0
lea eax, [ebp - 0x32c]
mov dword [ebp - 0x32c], 0
push eax
push 0
push 0x8000
push 0x10082500
call dword [sym.imp.SHELL32.dll_SHGetKnownFolderPath]
test eax, eax
jne 0x1000a48f
push 0x104
push dword [ebp - 0x32c]
lea eax, [ebp - 0x114]
push eax
call dword [sym.imp.api_ms_win_crt_convert_l1_1_0.dll_wcstombs]
add esp, 0xc
jmp 0x1000a4a8
push str.error_getting_appdata_path_n
push 2
call dword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll___acrt_iob_func]
add esp, 4
push eax
call fcn.10004f00
add esp, 8
xorps xmm0, xmm0
mov dword [ebp - 0x364], 0
lea ecx, [ebp - 0x114]
mov dword [ebp - 0x360], 0
movups xmmword [ebp - 0x374], xmm0
lea edx, [ecx + 1]
nop
mov al, byte [ecx]
inc ecx
test al, al
jne 0x1000a4d0
sub ecx, edx
lea eax, [ebp - 0x114]
push ecx
push eax
lea ecx, [ebp - 0x374]
call fcn.1000f330
mov dword [ebp - 4], 1
mov edx, dword [ebp - 0x360]
mov eax, edx
mov ecx, dword [ebp - 0x364]
sub eax, ecx
push 0x12
push str.CelestialConfigs
cmp eax, 0x12
jb 0x1000a53f
cmp edx, 0xf
lea esi, [ebp - 0x374]
lea eax, [ecx + 0x12]
cmova esi, dword [ebp - 0x374]
add esi, ecx
mov dword [ebp - 0x364], eax
push esi
call sub.VCRUNTIME140.dll_memmove
add esp, 0xc
mov byte [esi + 0x12], 0
lea eax, [ebp - 0x374]
jmp 0x1000a552
push dword [ebp - 0x118]
lea ecx, [ebp - 0x374]
push 0x12
call fcn.1000f770
xorps xmm0, xmm0
mov dword [ebp - 0x158], 0
movups xmmword [ebp - 0x168], xmm0
mov dword [ebp - 0x154], 0
movups xmm0, xmmword [eax]
movups xmmword [ebp - 0x168], xmm0
movq xmm0, qword [eax + 0x10]
movq qword [ebp - 0x158], xmm0
mov byte [ebp - 4], 3
mov dword [eax + 0x10], 0
mov dword [eax + 0x14], 0xf
mov byte [eax], 0
mov ecx, dword [ebp - 0x360]
cmp ecx, 0xf
jbe 0x1000a5d8
mov edx, dword [ebp - 0x374]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x1000a5ce
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
jbe 0x1000a5ce
call dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
push ecx
push edx
call fcn.1007e30a
add esp, 8
cmp byte [0x1008b194], 0
mov dword [ebp - 0x364], 0
mov dword [ebp - 0x360], 0xf
mov byte [ebp - 0x374], 0
je 0x1000a76d
push 0x188
lea eax, [ebp - 0x328]
push 0
push eax
call sub.VCRUNTIME140.dll_memset
add esp, 0xc
mov dword [ebp - 0x334], 0
xorps xmm0, xmm0
mov dword [ebp - 0x330], 0
lea ecx, [ebp - 0x344]
movups xmmword [ebp - 0x344], xmm0
push 6
push str.HOLDER
call fcn.1000f330
push ecx
lea edx, [ebp - 0x168]
mov byte [ebp - 4], 4
lea ecx, [ebp - 0x150]
call fcn.1000d0d0
add esp, 4
push 2
sub esp, 0x18
mov byte [ebp - 4], 5
mov ecx, esp
lea edx, [ebp - 0x344]
mov dword [ebp - 0x118], ecx
push edx
push eax
push dword [ebp - 0x118]
call fcn.1000f9b0
lea ecx, [ebp - 0x328]
call fcn.100059c0
mov byte [ebp - 4], 7
mov ecx, dword [ebp - 0x13c]
cmp ecx, 0xf
jbe 0x1000a6c8
mov edx, dword [ebp - 0x150]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x1000a6be
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x1000a713
push ecx
push edx
call fcn.1007e30a
add esp, 8
mov dword [ebp - 0x140], 0
mov dword [ebp - 0x13c], 0xf
mov byte [ebp - 0x150], 0
mov byte [ebp - 4], 8
mov ecx, dword [ebp - 0x330]
cmp ecx, 0xf
jbe 0x1000a723
mov edx, dword [ebp - 0x344]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x1000a719
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
jbe 0x1000a719
call dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
push ecx
push edx
call fcn.1007e30a
add esp, 8
mov eax, dword [ebp - 0x328]
cmp eax, 1
je 0x1000a733
cmp eax, 2
jne 0x1000a75b
lea ecx, [ebp - 0x304]
call fcn.1000c840
test eax, eax
jne 0x1000a75b
mov eax, dword [ebp - 0x308]
lea ecx, [ebp - 0x308]
push 0
push 2
add ecx, dword [eax + 4]
call dword [sym.imp.MSVCP140.dll_public:_void___thiscall_std::basic_ios_char__struct_std::char_traits_char__::setstate_int__bool_]
lea ecx, [ebp - 0x328]
mov byte [0x1008b194], 0
call fcn.10005c00
xorps xmm0, xmm0
mov dword [ebp - 0x128], 0
movq qword [ebp - 0x130], xmm0
mov dword [ebp - 0x130], 0
mov dword [ebp - 0x12c], 0
mov dword [ebp - 0x128], 0
mov byte [ebp - 4], 9
lea edx, [ebp - 0x168]
mov byte [ebp - 0x118], 0
lea ecx, [ebp - 0x344]
push dword [ebp - 0x118]
call fcn.10010000
mov dword [ebp - 0x124], 0
mov dword [ebp - 0x120], 0
lea edx, [ebp - 0x344]
mov byte [ebp - 4], 0xb
lea ecx, [ebp - 0x124]
call fcn.1000ea10
add esp, 4
test eax, eax
jne 0x1000b4d5
mov byte [ebp - 4], 0xd
mov ecx, dword [ebp - 0x330]
cmp ecx, 7
jbe 0x1000a83c
mov edx, dword [ebp - 0x344]
lea ecx, [ecx*2 + 2]
mov eax, edx
cmp ecx, 0x1000
jb 0x1000a832
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
jbe 0x1000a832
call dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
push ecx
push edx
call fcn.1007e30a
add esp, 8
mov edi, dword [ebp - 0x120]
xorps xmm0, xmm0
movlpd qword [ebp - 0x11c], xmm0
test edi, edi
je 0x1000a855
lock inc dword [edi + 4]
mov esi, dword [ebp - 0x124]
mov dword [ebp - 0x11c], esi
mov dword [ebp - 0x118], edi
test edi, edi
je 0x1000a86f
lock inc dword [edi + 4]
movlpd qword [ebp - 0x138], xmm0
mov dword [ebp - 0x138], 0
mov dword [ebp - 0x134], 0
test edi, edi
je 0x1000a8b0
or eax, 0xffffffff
lock xadd dword [edi + 4], eax
jne 0x1000a8b0
mov eax, dword [edi]
mov ecx, edi
call dword [eax]
or eax, 0xffffffff
lock xadd dword [edi + 8], eax
jne 0x1000a8b0
mov eax, dword [edi]
mov ecx, edi
call dword [eax + 4]
mov byte [ebp - 4], 0xf
test esi, esi
je 0x1000abb7
nop dword [eax]
movups xmm0, xmmword [esi]
lea eax, [esi + 0x20]
push eax
movups xmmword [ebp - 0x1a0], xmm0
lea ecx, [ebp - 0x180]
movups xmm0, xmmword [esi + 0x10]
movups xmmword [ebp - 0x190], xmm0
call fcn.10008420
lea ecx, [ebp - 0x180]
mov byte [ebp - 4], 0x10
call fcn.100094a0
test al, al
jne 0x1000ab5a
push ecx
lea eax, [ebp - 0x35c]
push eax
lea ecx, [ebp - 0x180]
call fcn.1000e7f0
mov byte [ebp - 4], 0x11
xorps xmm0, xmm0
mov eax, dword [ebp - 0x158]
mov ecx, dword [ebp - 0x34c]
inc eax
mov dword [ebp - 0x140], 0
mov dword [ebp - 0x13c], 0
movups xmmword [ebp - 0x150], xmm0
cmp ecx, eax
jb 0x1000b4e8
mov edx, dword [ebp - 0x348]
sub ecx, eax
or esi, 0xffffffff
cmp ecx, 0xffffffff
cmovb esi, ecx
cmp edx, 0xf
lea ecx, [ebp - 0x35c]
cmova ecx, dword [ebp - 0x35c]
cmp esi, 0xf
jbe 0x1000a9d8
test eax, eax
je 0x1000a982
add eax, ecx
push esi
push eax
push ecx
call sub.VCRUNTIME140.dll_memmove
mov edx, dword [ebp - 0x348]
add esp, 0xc
cmp edx, 0xf
mov dword [ebp - 0x34c], esi
lea eax, [ebp - 0x35c]
mov ecx, 0xf
cmova eax, dword [ebp - 0x35c]
mov byte [eax + esi], 0
movups xmm0, xmmword [ebp - 0x35c]
mov byte [ebp - 0x35c], 0
movups xmmword [ebp - 0x150], xmm0
movq xmm0, qword [ebp - 0x34c]
movq qword [ebp - 0x140], xmm0
mov dword [ebp - 0x34c], 0
mov dword [ebp - 0x348], ecx
jmp 0x1000a9ed
add eax, ecx
lea ecx, [ebp - 0x150]
push esi
push eax
call fcn.1000f330
mov ecx, dword [ebp - 0x348]
mov byte [ebp - 4], 0x13
cmp ecx, 0xf
jbe 0x1000aa25
mov edx, dword [ebp - 0x35c]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x1000aa1b
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x1000a5c8
push ecx
push edx
call fcn.1007e30a
add esp, 8
cmp dword [ebp - 0x13c], 0xf
lea edx, [ebp - 0x150]
xorps xmm0, xmm0
mov dword [ebp - 0x34c], 0
cmova edx, dword [ebp - 0x150]
mov ecx, edx
mov dword [ebp - 0x348], 0xf
mov byte [ebp - 0x35c], 0
movups xmmword [ebp - 0x344], xmm0
mov dword [ebp - 0x334], 0
mov dword [ebp - 0x330], 0
lea esi, [ecx + 1]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x1000aa77
sub ecx, esi
push ecx
push edx
lea ecx, [ebp - 0x344]
call fcn.1000f330
mov byte [ebp - 4], 0x14
mov eax, dword [ebp - 0x12c]
cmp eax, dword [ebp - 0x128]
je 0x1000aacb
movups xmm0, xmmword [ebp - 0x344]
mov ecx, 0xf
mov byte [ebp - 0x344], 0
movups xmmword [eax], xmm0
movq xmm0, qword [ebp - 0x334]
movq qword [eax + 0x10], xmm0
add dword [ebp - 0x12c], 0x18
jmp 0x1000aae4
lea ecx, [ebp - 0x344]
push ecx
push eax
lea ecx, [ebp - 0x130]
call fcn.10010040
mov ecx, dword [ebp - 0x330]
mov byte [ebp - 4], 0x13
cmp ecx, 0xf
jbe 0x1000ab1c
mov edx, dword [ebp - 0x344]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x1000ab12
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x1000a5c8
push ecx
push edx
call fcn.1007e30a
add esp, 8
mov byte [ebp - 4], 0x10
mov ecx, dword [ebp - 0x13c]
cmp ecx, 0xf
jbe 0x1000ab5a
mov edx, dword [ebp - 0x150]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x1000ab50
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x1000a5c8
push ecx
push edx
call fcn.1007e30a
add esp, 8
mov byte [ebp - 4], 0xf
mov ecx, dword [ebp - 0x16c]
cmp ecx, 7
jbe 0x1000ab9e
mov edx, dword [ebp - 0x180]
lea ecx, [ecx*2 + 2]
mov eax, edx
cmp ecx, 0x1000
jb 0x1000ab94
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x1000a5c8
push ecx
push edx
call fcn.1007e30a
add esp, 8
lea ecx, [ebp - 0x11c]
call fcn.10009330
mov esi, dword [ebp - 0x11c]
test esi, esi
jne 0x1000a8c0
mov esi, dword [ebp - 0x118]
test esi, esi
je 0x1000abe2
or eax, 0xffffffff
lock xadd dword [esi + 4], eax
jne 0x1000abe2
mov eax, dword [esi]
mov ecx, esi
call dword [eax]
or eax, 0xffffffff
lock xadd dword [esi + 8], eax
jne 0x1000abe2
mov eax, dword [esi]
mov ecx, esi
call dword [eax + 4]
mov byte [ebp - 4], 9
test edi, edi
je 0x1000ac0b
or esi, 0xffffffff
mov eax, esi
lock xadd dword [edi + 4], eax
jne 0x1000ac0b
mov eax, dword [edi]
mov ecx, edi
call dword [eax]
lock xadd dword [edi + 8], esi
dec esi
jne 0x1000ac0b
mov eax, dword [edi]
mov ecx, edi
call dword [eax + 4]
mov ecx, dword [ebp - 0x12c]
mov eax, 0x2aaaaaab
sub ecx, dword [ebp - 0x130]
imul ecx
sar edx, 2
mov eax, edx
dec edx
shr eax, 0x1f
add eax, edx
push eax
push str.Config_Count:__i
call fcn.1006dea0
mov eax, dword fs:[0x2c]
add esp, 8
mov ecx, dword [0x10116c58]
mov ecx, dword [eax + ecx*4]
mov eax, dword [0x101173cc]
cmp eax, dword [ecx + 4]
jle 0x1000ac98
push 0x101173cc
call fcn.1007e394
add esp, 4
cmp dword [0x101173cc], 0xffffffff
jne 0x1000ac98
mov byte [ebp - 4], 0x15
mov ecx, 0x101173d0
push dword [ebp - 0x130]
call fcn.1000c570
push 0x10081a00
call fcn.1007e72d
push 0x101173cc
mov byte [ebp - 4], 9
call fcn.1007e343
add esp, 8
cmp dword [0x101173e4], 0xf
mov edx, 0x101173d0
push ecx
cmova edx, dword [0x101173d0]
mov ecx, str.Configs
call fcn.10070d90
add esp, 4
test al, al
je 0x1000adf9
mov esi, dword [ebp - 0x130]
xor ecx, ecx
mov dword [ebp - 0x120], ecx
mov eax, 0x2aaaaaab
mov ecx, dword [ebp - 0x12c]
sub ecx, esi
imul ecx
sar edx, 2
mov eax, edx
shr eax, 0x1f
add eax, edx
je 0x1000adb0
mov dword [ebp - 0x138], 0
xor edi, edi
mov dword [ebp - 0x134], 0
add esi, edi
mov eax, esi
cmp dword [esi + 0x14], 0xf
jbe 0x1000ad10
mov eax, dword [esi]
cmp dword [0x101173e4], 0xf
mov ecx, 0x101173d0
push dword [esi + 0x10]
cmova ecx, dword [0x101173d0]
mov edx, dword [0x101173e0]
push eax
call fcn.100101b0
add esp, 8
cmp dword [esi + 0x14], 0xf
jbe 0x1000ad3d
mov esi, dword [esi]
lea ecx, [ebp - 0x138]
mov dl, al
push ecx
push ecx
mov ecx, esi
call fcn.1007cf90
mov esi, dword [ebp - 0x130]
add esp, 8
test al, al
je 0x1000ad82
lea eax, [edi + esi]
cmp eax, 0x101173d0
je 0x1000ad82
cmp dword [eax + 0x14], 0xf
mov ecx, dword [eax + 0x10]
jbe 0x1000ad70
mov eax, dword [eax]
push ecx
push eax
mov ecx, 0x101173d0
call fcn.1000c940
mov esi, dword [ebp - 0x130]
mov ecx, dword [ebp - 0x12c]
mov eax, 0x2aaaaaab
inc dword [ebp - 0x120]
sub ecx, esi
imul ecx
add edi, 0x18
sar edx, 2
mov eax, edx
shr eax, 0x1f
add eax, edx
cmp dword [ebp - 0x120], eax
jb 0x1000ad04
mov esi, dword [0x10116ebc]
mov eax, dword [esi + 0x3e28]
cmp dword [esi + 0x4794], eax
jne 0x1000addd
cmp byte [esi + 0x47ed], 0
je 0x1000addd
cmp dword [esi + 0x47cc], 0
jne 0x1000addd
or dword [esi + 0x47f0], 2
test dword [eax + 8], 0x1000000
je 0x1000aded
mov byte [esi + 0x3dd6], 1
call fcn.10037f00
mov byte [esi + 0x3dd6], 0
sub esp, 0x10
call fcn.100721c0
add esp, 0xc
mov dword [ebp - 0x138], 0x42c80000
lea edx, [ebp - 0x138]
mov dword [ebp - 0x134], 0x41a00000
mov ecx, str.Load_Config
call fcn.1006e850
add esp, 4
test al, al
je 0x1000aee5
push 0x101173d0
lea ecx, [ebp - 0x344]
call fcn.1000c570
mov edx, eax
mov byte [ebp - 4], 0x16
cmp dword [edx + 0x14], 0xf
jbe 0x1000ae51
mov edx, dword [edx]
sub esp, 0x18
mov ecx, edx
mov esi, esp
xorps xmm0, xmm0
lea edi, [ecx + 1]
movups xmmword [esi], xmm0
mov dword [esi + 0x10], 0
mov dword [esi + 0x14], 0
nop
mov al, byte [ecx]
inc ecx
test al, al
jne 0x1000ae70
sub ecx, edi
push ecx
push edx
mov ecx, esi
call fcn.1000f330
call fcn.10006e60
mov byte [ebp - 4], 9
add esp, 0x18
mov ecx, dword [ebp - 0x330]
cmp ecx, 0xf
jbe 0x1000aeca
mov edx, dword [ebp - 0x344]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x1000aec0
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
jbe 0x1000aec0
call dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
push ecx
push edx
call fcn.1007e30a
add esp, 8
mov dword [ebp - 0x334], 0
mov dword [ebp - 0x330], 0xf
mov byte [ebp - 0x344], 0
mov eax, dword [0x10116ebc]
mov edx, dword [eax + 0x3e28]
cmp byte [edx + 0x93], 0
jne 0x1000af4c
movss xmm1, dword [eax + 0x37e4]
addss xmm1, dword [edx + 0xdc]
movss xmm0, dword [edx + 0xe0]
movss dword [edx + 0xd4], xmm1
movss dword [edx + 0xd8], xmm0
mov eax, dword [edx + 0x104]
mov ecx, dword [edx + 0x108]
mov dword [edx + 0xfc], eax
mov eax, dword [edx + 0x110]
mov dword [edx + 0x100], ecx
mov dword [edx + 0x10c], eax
mov byte [edx + 0x114], 1
push ecx
lea edx, [ebp - 0x138]
mov dword [ebp - 0x138], 0x42c80000
mov ecx, str.Save_Config
mov dword [ebp - 0x134], 0x41a00000
call fcn.1006e850
add esp, 4
test al, al
je 0x1000afbe
sub esp, 0x18
mov ecx, 0x10116ca0
mov edx, esp
xorps xmm0, xmm0
lea esi, [ecx + 1]
movups xmmword [edx], xmm0
mov dword [edx + 0x10], 0
mov dword [edx + 0x14], 0
nop dword [eax]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x1000afa0
sub ecx, esi
push ecx
push 0x10116ca0
mov ecx, edx
call fcn.1000f330
call fcn.10005cf0
add esp, 0x18
push ecx
lea edx, [ebp - 0x138]
mov dword [ebp - 0x138], 0x42c80000
mov ecx, str.Open_Config_Dir
mov dword [ebp - 0x134], 0x41a00000
call fcn.1006e850
add esp, 4
test al, al
je 0x1000b190
xorps xmm0, xmm0
mov dword [ebp - 0x394], 0
lea ecx, [ebp - 0x114]
mov dword [ebp - 0x390], 0
movups xmmword [ebp - 0x3a4], xmm0
lea edx, [ecx + 1]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x1000b015
sub ecx, edx
lea eax, [ebp - 0x114]
push ecx
push eax
lea ecx, [ebp - 0x3a4]
call fcn.1000f330
mov byte [ebp - 4], 0x17
mov edx, dword [ebp - 0x390]
mov eax, edx
mov ecx, dword [ebp - 0x394]
sub eax, ecx
push 0x12
push str.CelestialConfigs
cmp eax, 0x12
jb 0x1000b081
cmp edx, 0xf
lea esi, [ebp - 0x3a4]
lea eax, [ecx + 0x12]
cmova esi, dword [ebp - 0x3a4]
add esi, ecx
mov dword [ebp - 0x394], eax
push esi
call sub.VCRUNTIME140.dll_memmove
add esp, 0xc
mov byte [esi + 0x12], 0
lea eax, [ebp - 0x3a4]
jmp 0x1000b094
push dword [ebp - 0x118]
lea ecx, [ebp - 0x3a4]
push 0x12
call fcn.1000f770
mov dword [ebp - 0x37c], 0
xorps xmm0, xmm0
movups xmmword [ebp - 0x38c], xmm0
mov dword [ebp - 0x378], 0
movups xmm0, xmmword [eax]
push 1
push 0
movups xmmword [ebp - 0x38c], xmm0
push 0
movq xmm0, qword [eax + 0x10]
movq qword [ebp - 0x37c], xmm0
mov dword [eax + 0x10], 0
mov dword [eax + 0x14], 0xf
mov byte [eax], 0
lea eax, [ebp - 0x38c]
cmp dword [ebp - 0x378], 0xf
cmova eax, dword [ebp - 0x38c]
push eax
push 0
push 0
call dword [sym.imp.SHELL32.dll_ShellExecuteA]
mov ecx, dword [ebp - 0x378]
cmp ecx, 0xf
jbe 0x1000b135
mov edx, dword [ebp - 0x38c]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x1000b12b
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x1000b180
push ecx
push edx
call fcn.1007e30a
add esp, 8
mov byte [ebp - 4], 9
mov ecx, dword [ebp - 0x390]
mov dword [ebp - 0x37c], 0
mov dword [ebp - 0x378], 0xf
mov byte [ebp - 0x38c], 0
cmp ecx, 0xf
jbe 0x1000b190
mov edx, dword [ebp - 0x3a4]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x1000b186
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
jbe 0x1000b186
call dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
push ecx
push edx
call fcn.1007e30a
add esp, 8
sub esp, 0x18
xorps xmm0, xmm0
mov ecx, esp
push 0xd
movups xmmword [ecx], xmm0
push str.Customization
mov dword [ecx + 0x10], 0
mov dword [ecx + 0x14], 0
call fcn.1000f330
call fcn.100046e0
push ecx
push 0x11
push 0x1008b150
push 0x10071af0
mov edx, 0x10116df4
mov ecx, str.Menu_Key
call fcn.10071b70
push 0x228
mov edx, 0x101172b4
mov ecx, str.Box_Color
call fcn.10077f90
push 0x228
mov edx, 0x101172f4
mov ecx, str.Name_Color
call fcn.10077f90
push 0x228
mov edx, 0x10117274
mov ecx, str.Distance_Color
call fcn.10077f90
push 0x228
mov edx, 0x101172c4
mov ecx, str.FOV_Color
call fcn.10077f90
push 0x228
mov edx, 0x10117314
mov ecx, str.Skeleton_Color
call fcn.10077f90
push 0x228
mov edx, 0x10117294
mov ecx, str.Tracer_Color
call fcn.10077f90
mov edi, dword [0x10116464]
mov ecx, str.Universal
mov esi, dword [0x10116460]
cmp edi, 0xf
push 0xb
cmova ecx, dword [str.Universal]
mov edx, esi
push str.Criminality
call fcn.100101b0
add esp, 0x30
test al, al
je 0x1000b2df
sub esp, 0x18
xorps xmm0, xmm0
mov ecx, esp
push 0xb
movups xmmword [ecx], xmm0
push str.Criminality
mov dword [ecx + 0x10], 0
mov dword [ecx + 0x14], 0
call fcn.1000f330
call fcn.100046e0
push 0x228
mov edx, 0x101172d4
mov ecx, str.Dealer_Color
call fcn.10077f90
push 0x228
mov edx, 0x101172a4
mov ecx, str.ATMz_Color
call fcn.10077f90
mov edi, dword [0x10116464]
add esp, 8
mov esi, dword [0x10116460]
cmp edi, 0xf
mov ecx, str.Universal
push 6
cmova ecx, dword [str.Universal]
mov edx, esi
push str.Apoc_2
call fcn.100101b0
add esp, 8
test al, al
je 0x1000b358
sub esp, 0x18
xorps xmm0, xmm0
mov ecx, esp
push 0x13
movups xmmword [ecx], xmm0
push str.Apocalypse_Rising_2
mov dword [ecx + 0x10], 0
mov dword [ecx + 0x14], 0
call fcn.1000f330
call fcn.100046e0
push 0x228
mov edx, 0x10117284
mov ecx, str.Location_Color
call fcn.10077f90
push 0x228
mov edx, 0x10117304
mov ecx, str.Vehicle_Color
call fcn.10077f90
add esp, 8
sub esp, 0x18
xorps xmm0, xmm0
mov ecx, esp
push 4
movups xmmword [ecx], xmm0
push str.Misc
mov dword [ecx + 0x10], 0
mov dword [ecx + 0x14], 0
call fcn.1000f330
call fcn.100046e0
mov ecx, dword [0x10116c88]
call fcn.10038390
sub esp, 8
mov dword [ebp - 0x118], 0x3e8
lea eax, [ebp - 0x118]
mov dword [ebp - 0x120], 0x3c
mov ecx, str.Max_FPS
push eax
lea eax, [ebp - 0x120]
push eax
push 0x10116414
call fcn.10003240
add esp, 0x14
call fcn.100384d0
call fcn.100384d0
call fcn.10032790
mov byte [ebp - 4], 3
mov ecx, dword [ebp - 0x130]
test ecx, ecx
je 0x1000b457
mov edx, dword [ebp - 0x12c]
push ecx
call fcn.1000f410
mov ecx, dword [ebp - 0x128]
mov eax, 0x2aaaaaab
mov esi, dword [ebp - 0x130]
add esp, 4
sub ecx, esi
imul ecx
sar edx, 2
mov eax, edx
shr eax, 0x1f
add eax, edx
lea ecx, [eax + eax*2]
mov eax, esi
shl ecx, 3
cmp ecx, 0x1000
jb 0x1000b42f
mov esi, dword [eax - 4]
add ecx, 0x23
sub eax, esi
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x1000b48a
push ecx
push esi
call fcn.1007e30a
add esp, 8
mov dword [ebp - 0x130], 0
mov dword [ebp - 0x12c], 0
mov dword [ebp - 0x128], 0
mov dword [ebp - 4], 0xffffffff
mov ecx, dword [ebp - 0x154]
cmp ecx, 0xf
jbe 0x1000b49a
mov edx, dword [ebp - 0x168]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x1000b490
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
jbe 0x1000b490
call dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
push ecx
push edx
call fcn.1007e30a
add esp, 8
mov dword [ebp - 0x158], 0
mov dword [ebp - 0x154], 0xf
mov byte [ebp - 0x168], 0
call fcn.10037f00
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
mov ecx, dword [ebp - 0x10]
xor ecx, ebp
call fcn.1007e2f7
mov esp, ebp
pop ebp
ret
lea ecx, [ebp - 0x344]
mov edx, eax
push ecx
mov ecx, str.directory_iterator::directory_iterator
call fcn.10008df0
call fcn.1000cbf0
int3