Function at 0x10090140
Capabilities:
Inspect section memory permissions

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x100c9c39
mov eax, dword fs:[0]
push eax
sub esp, 0xe1c
mov eax, dword [0x100e1040]
xor eax, ebp
mov dword [ebp - 0x10], eax
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov dword [ebp - 0x208], ecx
mov dword [ebp - 0x200], 0
mov dword [ebp - 0x204], 0
mov dword [ebp - 0x1fc], 0
mov dword [ebp - 0x20c], 0
mov eax, dword [0x100fedc4]
mov dword [ebp - 0xcb4], eax
mov dword [ebp - 0xa78], 0x100bdc70
mov ecx, dword [ebp - 0xa78]
mov dword [ebp - 0xc9c], ecx
mov edx, dword [0x102bc1b4]
mov eax, dword [edx + 8]
mov dword [ebp - 0xca4], eax
mov ecx, dword [ebp - 0xc9c]
push ecx
push 0xfffffffffffffffc
mov edx, dword [ebp - 0xca4]
push edx
call dword [ebp - 0xcb4]
mov ecx, dword [ebp - 0x208]
mov dword [ecx + 0x17c], eax
mov edx, dword [ebp - 0x208]
mov dword [ebp - 0x230], edx
mov eax, dword [0x102bc14c]
mov dword [ebp - 0xcbc], eax
lea ecx, [ebp - 0x268]
mov dword [ebp - 0x4ec], ecx
mov edx, dword [ebp - 0x4ec]
mov eax, dword [ebp - 0xcbc]
mov dword [edx], eax
mov ecx, dword [ebp - 0x4ec]
mov dword [ebp - 0xd2c], ecx
mov dword [ebp - 4], 0
mov edx, dword [ebp - 0x230]
mov eax, dword [ebp - 0x268]
mov dword [edx], eax
mov ecx, dword [ebp - 0x268]
mov edx, dword [ecx]
mov dword [ebp - 0xce4], edx
mov eax, dword [ebp - 0x230]
mov ecx, dword [ebp - 0xce4]
mov dword [eax + 4], ecx
mov edx, dword [ebp - 0x230]
cmp dword [edx + 4], 0
jne 0x10090272
mov dword [ebp - 4], 0xffffffff
jmp 0x100904ad
mov dword [ebp - 0x308], 0
mov eax, dword [ebp - 0x230]
mov ecx, dword [eax + 4]
mov edx, dword [ebp - 0x308]
mov eax, dword [ecx + edx*4]
mov dword [ebp - 0x5d8], eax
cmp dword [ebp - 0x5d8], 0
jne 0x100902a6
mov byte [ebp - 0x21a], 0
jmp 0x100902fe
mov ecx, dword [0x100fedc0]
mov dword [ebp - 0xce8], ecx
push 0x1c
lea edx, [ebp - 0x154]
push edx
mov eax, dword [ebp - 0x5d8]
push eax
call dword [ebp - 0xce8]
test eax, eax
jne 0x100902d5
mov byte [ebp - 0x21a], 0
jmp 0x100902fe
mov ecx, dword [ebp - 0x140]
and ecx, 1
jne 0x100902ee
mov edx, dword [ebp - 0x140]
and edx, 0x100
je 0x100902f7
mov byte [ebp - 0x21a], 0
jmp 0x100902fe
mov byte [ebp - 0x21a], 1
movzx eax, byte [ebp - 0x21a]
test eax, eax
je 0x1009031d
mov ecx, dword [ebp - 0x308]
add ecx, 1
mov dword [ebp - 0x308], ecx
jmp 0x1009027c
mov edx, dword [ebp - 0x230]
mov eax, dword [ebp - 0x308]
mov dword [edx + 0xc], eax
mov ecx, dword [ebp - 0x230]
cmp dword [ecx + 0xc], 0
jne 0x10090344
mov dword [ebp - 4], 0xffffffff
jmp 0x100904ad
mov edx, 1
test edx, edx
je 0x10090361
mov eax, dword [ebp - 0x230]
mov ecx, dword [eax + 0xc]
add ecx, 1
mov dword [ebp - 0x5dc], ecx
jmp 0x10090370
mov edx, dword [ebp - 0x230]
mov eax, dword [edx + 0xc]
mov dword [ebp - 0x5dc], eax
mov edx, dword [ebp - 0x5dc]
lea ecx, [ebp - 0xcf0]
call fcn.1003f910
mov dword [ebp - 0xcec], eax
mov ecx, dword [ebp - 0xcec]
push ecx
mov ecx, dword [ebp - 0x230]
add ecx, 8
call fcn.1003f9b0
lea ecx, [ebp - 0xcf0]
call fcn.1003f370
mov ecx, dword [ebp - 0x230]
add ecx, 8
call fcn.1003f340
movzx edx, al
test edx, edx
jne 0x100903c8
mov dword [ebp - 4], 0xffffffff
jmp 0x100904ad
mov ecx, dword [ebp - 0x230]
add ecx, 8
call fcn.1003f350
mov dword [ebp - 0xcf4], eax
mov eax, dword [ebp - 0xcf4]
mov dword [ebp - 0x2c], eax
mov ecx, 1
test ecx, ecx
je 0x10090461
mov edx, dword [ebp - 0x2c]
mov dword [ebp - 0xcf8], edx
mov eax, dword [ebp - 0x230]
mov ecx, dword [eax + 0xc]
lea edx, [ecx*4 + 4]
push edx
mov eax, dword [ebp - 0x230]
mov ecx, dword [eax + 4]
sub ecx, 4
push ecx
mov edx, dword [ebp - 0xcf8]
push edx
call sub.VCRUNTIME140.dll_memcpy
add esp, 0xc
mov eax, dword [ebp - 0x2c]
mov dword [ebp - 0xcfc], eax
mov ecx, dword [ebp - 0xcfc]
add ecx, 4
mov dword [ebp - 0xd00], ecx
cmp dword [ebp - 0x268], 0
jne 0x10090447
jmp 0x10090455
mov edx, dword [ebp - 0x268]
mov eax, dword [ebp - 0xd00]
mov dword [edx], eax
mov ecx, dword [ebp - 0x230]
mov byte [ecx + 0x10], 1
jmp 0x100904a6
mov edx, dword [ebp - 0x2c]
mov dword [ebp - 0xd04], edx
mov eax, dword [ebp - 0x230]
mov ecx, dword [eax + 0xc]
shl ecx, 2
push ecx
mov edx, dword [ebp - 0x230]
mov eax, dword [edx + 4]
push eax
mov ecx, dword [ebp - 0xd04]
push ecx
call sub.VCRUNTIME140.dll_memcpy
add esp, 0xc
cmp dword [ebp - 0x268], 0
jne 0x1009049b
jmp 0x100904a6
mov edx, dword [ebp - 0x2c]
mov eax, dword [ebp - 0x268]
mov dword [eax], edx
mov dword [ebp - 4], 0xffffffff
mov ecx, dword [ebp - 0x208]
mov dword [ebp - 0x26c], ecx
mov dword [ebp - 0xd08], 0x100a5b30
mov edx, dword [ebp - 0x26c]
movzx eax, byte [edx + 0x10]
test eax, eax
je 0x100904e1
mov ecx, 0x29
add ecx, 1
mov dword [ebp - 0x5e0], ecx
jmp 0x100904eb
mov dword [ebp - 0x5e0], 0x29
mov edx, dword [ebp - 0x5e0]
mov dword [ebp - 0x5e4], edx
mov eax, dword [ebp - 0x26c]
cmp dword [eax + 4], 0
je 0x10090529
mov ecx, dword [ebp - 0x26c]
add ecx, 8
call fcn.1003f340
movzx ecx, al
test ecx, ecx
je 0x10090529
mov edx, dword [ebp - 0x26c]
mov eax, dword [ebp - 0x5e4]
cmp eax, dword [edx + 0xc]
jbe 0x10090553
mov dword [ebp - 0x360], 0
mov ecx, dword [ebp - 0x200]
or ecx, 1
mov dword [ebp - 0x200], ecx
lea edx, [ebp - 0x360]
mov dword [ebp - 0x638], edx
jmp 0x10090692
mov eax, dword [ebp - 0xd08]
mov dword [ebp - 0xd0c], eax
mov ecx, dword [ebp - 0xd0c]
mov dword [ebp - 0xd14], ecx
mov edx, dword [ebp - 0x26c]
add edx, 8
mov dword [ebp - 0xd10], edx
mov eax, dword [ebp - 0x5e4]
push eax
mov ecx, dword [ebp - 0xd10]
call fcn.1003f360
mov ecx, dword [ebp - 0xd14]
mov dword [eax], ecx
mov edx, 0x29
shl edx, 2
mov eax, dword [ebp - 0x26c]
add edx, dword [eax + 4]
mov dword [ebp - 0x5e8], edx
mov ecx, dword [ebp - 0x5e8]
cmp dword [ecx], 0
je 0x100905f9
mov edx, dword [ebp - 0x5e8]
mov eax, dword [edx]
mov dword [ebp - 0xd18], eax
mov ecx, dword [ebp - 0xd18]
mov dword [ebp - 0xd1c], ecx
lea edx, [ebp - 0xd1c]
mov dword [ebp - 0x628], edx
mov eax, dword [ebp - 0x200]
or eax, 2
mov dword [ebp - 0x200], eax
mov ecx, dword [ebp - 0x628]
mov dword [ebp - 0x5ec], ecx
jmp 0x1009062a
mov dword [ebp - 0x62c], 0
lea edx, [ebp - 0x62c]
mov dword [ebp - 0x630], edx
mov eax, dword [ebp - 0x200]
or eax, 4
mov dword [ebp - 0x200], eax
mov ecx, dword [ebp - 0x630]
mov dword [ebp - 0x5ec], ecx
mov edx, dword [ebp - 0x5ec]
mov dword [ebp - 0x634], edx
mov eax, dword [ebp - 0x634]
mov ecx, dword [eax]
mov dword [ebp - 0x360], ecx
mov edx, dword [ebp - 0x200]
or edx, 8
mov dword [ebp - 0x200], edx
mov eax, dword [ebp - 0x200]
and eax, 4
je 0x10090665
and dword [ebp - 0x200], 0xfffffffb
mov ecx, dword [ebp - 0x200]
and ecx, 2
je 0x10090677
and dword [ebp - 0x200], 0xfffffffd
mov edx, dword [ebp - 0x200]
or edx, 1
mov dword [ebp - 0x200], edx
lea eax, [ebp - 0x360]
mov dword [ebp - 0x638], eax
mov ecx, dword [ebp - 0x208]
add ecx, 0x28
mov dword [ebp - 0x234], ecx
mov edx, dword [0x102bc134]
mov dword [ebp - 0x63c], edx
lea eax, [ebp - 0x288]
mov dword [ebp - 0x5f0], eax
mov ecx, dword [ebp - 0x5f0]
mov edx, dword [ebp - 0x63c]
mov dword [ecx], edx
mov eax, dword [ebp - 0x5f0]
mov dword [ebp - 0xd30], eax
mov dword [ebp - 4], 1
mov ecx, dword [ebp - 0x234]
mov edx, dword [ebp - 0x288]
mov dword [ecx], edx
mov eax, dword [ebp - 0x288]
mov ecx, dword [eax]
mov dword [ebp - 0x640], ecx
mov edx, dword [ebp - 0x234]
mov eax, dword [ebp - 0x640]
mov dword [edx + 4], eax
mov ecx, dword [ebp - 0x234]
cmp dword [ecx + 4], 0
jne 0x1009071d
mov dword [ebp - 4], 0xffffffff
jmp 0x10090957
mov dword [ebp - 0x2f8], 0
mov edx, dword [ebp - 0x234]
mov eax, dword [edx + 4]
mov ecx, dword [ebp - 0x2f8]
mov edx, dword [eax + ecx*4]
mov dword [ebp - 0x5f4], edx
cmp dword [ebp - 0x5f4], 0
jne 0x10090751
mov byte [ebp - 0x20d], 0
jmp 0x100907a8
mov eax, dword [0x100fedc0]
mov dword [ebp - 0x644], eax
push 0x1c
lea ecx, [ebp - 0x138]
push ecx
mov edx, dword [ebp - 0x5f4]
push edx
call dword [ebp - 0x644]
test eax, eax
jne 0x1009077f
mov byte [ebp - 0x20d], 0
jmp 0x100907a8
mov eax, dword [ebp - 0x124]
and eax, 1
jne 0x10090798
mov ecx, dword [ebp - 0x124]
and ecx, 0x100
je 0x100907a1
mov byte [ebp - 0x20d], 0
jmp 0x100907a8
mov byte [ebp - 0x20d], 1
movzx edx, byte [ebp - 0x20d]
test edx, edx
je 0x100907c7
mov eax, dword [ebp - 0x2f8]
add eax, 1
mov dword [ebp - 0x2f8], eax
jmp 0x10090727
mov ecx, dword [ebp - 0x234]
mov edx, dword [ebp - 0x2f8]
mov dword [ecx + 0xc], edx
mov eax, dword [ebp - 0x234]
cmp dword [eax + 0xc], 0
jne 0x100907ee
mov dword [ebp - 4], 0xffffffff
jmp 0x10090957
mov ecx, 1
test ecx, ecx
je 0x1009080b
mov edx, dword [ebp - 0x234]
mov eax, dword [edx + 0xc]
add eax, 1
mov dword [ebp - 0x5f8], eax
jmp 0x1009081a
mov ecx, dword [ebp - 0x234]
mov edx, dword [ecx + 0xc]
mov dword [ebp - 0x5f8], edx
mov edx, dword [ebp - 0x5f8]
lea ecx, [ebp - 0x64c]
call fcn.1003f910
mov dword [ebp - 0x648], eax
mov eax, dword [ebp - 0x648]
push eax
mov ecx, dword [ebp - 0x234]
add ecx, 8
call fcn.1003f9b0
lea ecx, [ebp - 0x64c]
call fcn.1003f370
mov ecx, dword [ebp - 0x234]
add ecx, 8
call fcn.1003f340
movzx ecx, al
test ecx, ecx
jne 0x10090872
mov dword [ebp - 4], 0xffffffff
jmp 0x10090957
mov ecx, dword [ebp - 0x234]
add ecx, 8
call fcn.1003f350
mov dword [ebp - 0x650], eax
mov edx, dword [ebp - 0x650]
mov dword [ebp - 0x3c], edx
mov eax, 1
test eax, eax
je 0x1009090b
mov ecx, dword [ebp - 0x3c]
mov dword [ebp - 0x654], ecx
mov edx, dword [ebp - 0x234]
mov eax, dword [edx + 0xc]
lea ecx, [eax*4 + 4]
push ecx
mov edx, dword [ebp - 0x234]
mov eax, dword [edx + 4]
sub eax, 4
push eax
mov ecx, dword [ebp - 0x654]
push ecx
call sub.VCRUNTIME140.dll_memcpy
add esp, 0xc
mov edx, dword [ebp - 0x3c]
mov dword [ebp - 0x658], edx
mov eax, dword [ebp - 0x658]
add eax, 4
mov dword [ebp - 0x65c], eax
cmp dword [ebp - 0x288], 0
jne 0x100908f1
jmp 0x100908ff
mov ecx, dword [ebp - 0x288]
mov edx, dword [ebp - 0x65c]
mov dword [ecx], edx
mov eax, dword [ebp - 0x234]
mov byte [eax + 0x10], 1
jmp 0x10090950
mov ecx, dword [ebp - 0x3c]
mov dword [ebp - 0x660], ecx
mov edx, dword [ebp - 0x234]
mov eax, dword [edx + 0xc]
shl eax, 2
push eax
mov ecx, dword [ebp - 0x234]
mov edx, dword [ecx + 4]
push edx
mov eax, dword [ebp - 0x660]
push eax
call sub.VCRUNTIME140.dll_memcpy
add esp, 0xc
cmp dword [ebp - 0x288], 0
jne 0x10090945
jmp 0x10090950
mov ecx, dword [ebp - 0x3c]
mov edx, dword [ebp - 0x288]
mov dword [edx], ecx
mov dword [ebp - 4], 0xffffffff
mov eax, dword [ebp - 0x208]
add eax, 0x28
mov dword [ebp - 0x270], eax
mov dword [ebp - 0x664], 0x1009a7e0
mov ecx, dword [ebp - 0x270]
movzx edx, byte [ecx + 0x10]
test edx, edx
je 0x1009098e
mov eax, 5
add eax, 1
mov dword [ebp - 0x5fc], eax
jmp 0x10090998
mov dword [ebp - 0x5fc], 5
mov ecx, dword [ebp - 0x5fc]
mov dword [ebp - 0x600], ecx
mov edx, dword [ebp - 0x270]
cmp dword [edx + 4], 0
je 0x100909d6
mov ecx, dword [ebp - 0x270]
add ecx, 8
call fcn.1003f340
movzx eax, al
test eax, eax
je 0x100909d6
mov ecx, dword [ebp - 0x270]
mov edx, dword [ebp - 0x600]
cmp edx, dword [ecx + 0xc]
jbe 0x10090a00
mov dword [ebp - 0x368], 0
mov eax, dword [ebp - 0x200]
or eax, 0x10
mov dword [ebp - 0x200], eax
lea ecx, [ebp - 0x368]
mov dword [ebp - 0x68c], ecx
jmp 0x10090b42
mov edx, dword [ebp - 0x664]
mov dword [ebp - 0x668], edx
mov eax, dword [ebp - 0x668]
mov dword [ebp - 0x670], eax
mov ecx, dword [ebp - 0x270]
add ecx, 8
mov dword [ebp - 0x66c], ecx
mov edx, dword [ebp - 0x600]
push edx
mov ecx, dword [ebp - 0x66c]
call fcn.1003f360
mov ecx, dword [ebp - 0x670]
mov dword [eax], ecx
mov edx, 5
shl edx, 2
mov eax, dword [ebp - 0x270]
add edx, dword [eax + 4]
mov dword [ebp - 0x604], edx
mov ecx, dword [ebp - 0x604]
cmp dword [ecx], 0
je 0x10090aa6
mov edx, dword [ebp - 0x604]
mov eax, dword [edx]
mov dword [ebp - 0x674], eax
mov ecx, dword [ebp - 0x674]
mov dword [ebp - 0x678], ecx
lea edx, [ebp - 0x678]
mov dword [ebp - 0x67c], edx
mov eax, dword [ebp - 0x200]
or eax, 0x20
mov dword [ebp - 0x200], eax
mov ecx, dword [ebp - 0x67c]
mov dword [ebp - 0x608], ecx
jmp 0x10090ad7
mov dword [ebp - 0x680], 0
lea edx, [ebp - 0x680]
mov dword [ebp - 0x684], edx
mov eax, dword [ebp - 0x200]
or eax, 0x40
mov dword [ebp - 0x200], eax
mov ecx, dword [ebp - 0x684]
mov dword [ebp - 0x608], ecx
mov edx, dword [ebp - 0x608]
mov dword [ebp - 0x688], edx
mov eax, dword [ebp - 0x688]
mov ecx, dword [eax]
mov dword [ebp - 0x368], ecx
mov edx, dword [ebp - 0x200]
or edx, 0x80
mov dword [ebp - 0x200], edx
mov eax, dword [ebp - 0x200]
and eax, 0x40
je 0x10090b15
and dword [ebp - 0x200], 0xffffffbf
mov ecx, dword [ebp - 0x200]
and ecx, 0x20
je 0x10090b27
and dword [ebp - 0x200], 0xffffffdf
mov edx, dword [ebp - 0x200]
or edx, 0x10
mov dword [ebp - 0x200], edx
lea eax, [ebp - 0x368]
mov dword [ebp - 0x68c], eax
mov ecx, dword [ebp - 0x208]
add ecx, 0x28
mov dword [ebp - 0x274], ecx
mov dword [ebp - 0x690], 0x1009a8a0
mov edx, dword [ebp - 0x274]
movzx eax, byte [edx + 0x10]
test eax, eax
je 0x10090b79
mov ecx, 6
add ecx, 1
mov dword [ebp - 0x60c], ecx
jmp 0x10090b83
mov dword [ebp - 0x60c], 6
mov edx, dword [ebp - 0x60c]
mov dword [ebp - 0x610], edx
mov eax, dword [ebp - 0x274]
cmp dword [eax + 4], 0
je 0x10090bc1
mov ecx, dword [ebp - 0x274]
add ecx, 8
call fcn.1003f340
movzx ecx, al
test ecx, ecx
je 0x10090bc1
mov edx, dword [ebp - 0x274]
mov eax, dword [ebp - 0x610]
cmp eax, dword [edx + 0xc]
jbe 0x10090bee
mov dword [ebp - 0x36c], 0
mov ecx, dword [ebp - 0x200]
or ecx, 0x100
mov dword [ebp - 0x200], ecx
lea edx, [ebp - 0x36c]
mov dword [ebp - 0x6b8], edx
jmp 0x10090d42
mov eax, dword [ebp - 0x690]
mov dword [ebp - 0x694], eax
mov ecx, dword [ebp - 0x694]
mov dword [ebp - 0x69c], ecx
mov edx, dword [ebp - 0x274]
add edx, 8
mov dword [ebp - 0x698], edx
mov eax, dword [ebp - 0x610]
push eax
mov ecx, dword [ebp - 0x698]
call fcn.1003f360
mov ecx, dword [ebp - 0x69c]
mov dword [eax], ecx
mov edx, 6
shl edx, 2
mov eax, dword [ebp - 0x274]
add edx, dword [eax + 4]
mov dword [ebp - 0x614], edx
mov ecx, dword [ebp - 0x614]
cmp dword [ecx], 0
je 0x10090c96
mov edx, dword [ebp - 0x614]
mov eax, dword [edx]
mov dword [ebp - 0x6a0], eax
mov ecx, dword [ebp - 0x6a0]
mov dword [ebp - 0x6a4], ecx
lea edx, [ebp - 0x6a4]
mov dword [ebp - 0x6a8], edx
mov eax, dword [ebp - 0x200]
or eax, 0x200
mov dword [ebp - 0x200], eax
mov ecx, dword [ebp - 0x6a8]
mov dword [ebp - 0x618], ecx
jmp 0x10090cc9
mov dword [ebp - 0x6ac], 0
lea edx, [ebp - 0x6ac]
mov dword [ebp - 0x6b0], edx
mov eax, dword [ebp - 0x200]
or eax, 0x400
mov dword [ebp - 0x200], eax
mov ecx, dword [ebp - 0x6b0]
mov dword [ebp - 0x618], ecx
mov edx, dword [ebp - 0x618]
mov dword [ebp - 0x6b4], edx
mov eax, dword [ebp - 0x6b4]
mov ecx, dword [eax]
mov dword [ebp - 0x36c], ecx
mov edx, dword [ebp - 0x200]
or edx, 0x800
mov dword [ebp - 0x200], edx
mov eax, dword [ebp - 0x200]
and eax, 0x400
je 0x10090d0c
and dword [ebp - 0x200], 0xfffffbff
mov ecx, dword [ebp - 0x200]
and ecx, 0x200
je 0x10090d24
and dword [ebp - 0x200], 0xfffffdff
mov edx, dword [ebp - 0x200]
or edx, 0x100
mov dword [ebp - 0x200], edx
lea eax, [ebp - 0x36c]
mov dword [ebp - 0x6b8], eax
mov ecx, dword [ebp - 0x208]
add ecx, 0x28
mov dword [ebp - 0x278], ecx
mov dword [ebp - 0x6bc], 0x1009a8d0
mov edx, dword [ebp - 0x278]
movzx eax, byte [edx + 0x10]
test eax, eax
je 0x10090d79
mov ecx, 7
add ecx, 1
mov dword [ebp - 0x61c], ecx
jmp 0x10090d83
mov dword [ebp - 0x61c], 7
mov edx, dword [ebp - 0x61c]
mov dword [ebp - 0x620], edx
mov eax, dword [ebp - 0x278]
cmp dword [eax + 4], 0
je 0x10090dc1
mov ecx, dword [ebp - 0x278]
add ecx, 8
call fcn.1003f340
movzx ecx, al
test ecx, ecx
je 0x10090dc1
mov edx, dword [ebp - 0x278]
mov eax, dword [ebp - 0x620]
cmp eax, dword [edx + 0xc]
jbe 0x10090dee
mov dword [ebp - 0x370], 0
mov ecx, dword [ebp - 0x200]
or ecx, 0x1000
mov dword [ebp - 0x200], ecx
lea edx, [ebp - 0x370]
mov dword [ebp - 0x6e4], edx
jmp 0x10090f42
mov eax, dword [ebp - 0x6bc]
mov dword [ebp - 0x6c0], eax
mov ecx, dword [ebp - 0x6c0]
mov dword [ebp - 0x6c8], ecx
mov edx, dword [ebp - 0x278]
add edx, 8
mov dword [ebp - 0x6c4], edx
mov eax, dword [ebp - 0x620]
push eax
mov ecx, dword [ebp - 0x6c4]
call fcn.1003f360
mov ecx, dword [ebp - 0x6c8]
mov dword [eax], ecx
mov edx, 7
shl edx, 2
mov eax, dword [ebp - 0x278]
add edx, dword [eax + 4]
mov dword [ebp - 0x3a0], edx
mov ecx, dword [ebp - 0x3a0]
cmp dword [ecx], 0
je 0x10090e96
mov edx, dword [ebp - 0x3a0]
mov eax, dword [edx]
mov dword [ebp - 0x6cc], eax
mov ecx, dword [ebp - 0x6cc]
mov dword [ebp - 0x6d0], ecx
lea edx, [ebp - 0x6d0]
mov dword [ebp - 0x6d4], edx
mov eax, dword [ebp - 0x200]
or eax, 0x2000
mov dword [ebp - 0x200], eax
mov ecx, dword [ebp - 0x6d4]
mov dword [ebp - 0x3a4], ecx
jmp 0x10090ec9
mov dword [ebp - 0x6d8], 0
lea edx, [ebp - 0x6d8]
mov dword [ebp - 0x6dc], edx
mov eax, dword [ebp - 0x200]
or eax, 0x4000
mov dword [ebp - 0x200], eax
mov ecx, dword [ebp - 0x6dc]
mov dword [ebp - 0x3a4], ecx
mov edx, dword [ebp - 0x3a4]
mov dword [ebp - 0x6e0], edx
mov eax, dword [ebp - 0x6e0]
mov ecx, dword [eax]
mov dword [ebp - 0x370], ecx
mov edx, dword [ebp - 0x200]
or edx, 0x8000
mov dword [ebp - 0x200], edx
mov eax, dword [ebp - 0x200]
and eax, 0x4000
je 0x10090f0c
and dword [ebp - 0x200], 0xffffbfff
mov ecx, dword [ebp - 0x200]
and ecx, 0x2000
je 0x10090f24
and dword [ebp - 0x200], 0xffffdfff
mov edx, dword [ebp - 0x200]
or edx, 0x1000
mov dword [ebp - 0x200], edx
lea eax, [ebp - 0x370]
mov dword [ebp - 0x6e4], eax
mov ecx, dword [ebp - 0x208]
add ecx, 0x28
mov dword [ebp - 0x27c], ecx
mov dword [ebp - 0x6e8], 0x1009a940
mov edx, dword [ebp - 0x27c]
movzx eax, byte [edx + 0x10]
test eax, eax
je 0x10090f79
mov ecx, 0x24
add ecx, 1
mov dword [ebp - 0x3a8], ecx
jmp 0x10090f83
mov dword [ebp - 0x3a8], 0x24
mov edx, dword [ebp - 0x3a8]
mov dword [ebp - 0x3ac], edx
mov eax, dword [ebp - 0x27c]
cmp dword [eax + 4], 0
je 0x10090fc1
mov ecx, dword [ebp - 0x27c]
add ecx, 8
call fcn.1003f340
movzx ecx, al
test ecx, ecx
je 0x10090fc1
mov edx, dword [ebp - 0x27c]
mov eax, dword [ebp - 0x3ac]
cmp eax, dword [edx + 0xc]
jbe 0x10090fee
mov dword [ebp - 0x388], 0
mov ecx, dword [ebp - 0x200]
or ecx, 0x10000
mov dword [ebp - 0x200], ecx
lea edx, [ebp - 0x388]
mov dword [ebp - 0x710], edx
jmp 0x10091142
mov eax, dword [ebp - 0x6e8]
mov dword [ebp - 0x6ec], eax
mov ecx, dword [ebp - 0x6ec]
mov dword [ebp - 0x6f4], ecx
mov edx, dword [ebp - 0x27c]
add edx, 8
mov dword [ebp - 0x6f0], edx
mov eax, dword [ebp - 0x3ac]
push eax
mov ecx, dword [ebp - 0x6f0]
call fcn.1003f360
mov ecx, dword [ebp - 0x6f4]
mov dword [eax], ecx
mov edx, 0x24
shl edx, 2
mov eax, dword [ebp - 0x27c]
add edx, dword [eax + 4]
mov dword [ebp - 0x3b0], edx
mov ecx, dword [ebp - 0x3b0]
cmp dword [ecx], 0
je 0x10091096
mov edx, dword [ebp - 0x3b0]
mov eax, dword [edx]
mov dword [ebp - 0x6f8], eax
mov ecx, dword [ebp - 0x6f8]
mov dword [ebp - 0x6fc], ecx
lea edx, [ebp - 0x6fc]
mov dword [ebp - 0x700], edx
mov eax, dword [ebp - 0x200]
or eax, 0x20000
mov dword [ebp - 0x200], eax
mov ecx, dword [ebp - 0x700]
mov dword [ebp - 0x3b4], ecx
jmp 0x100910c9
mov dword [ebp - 0x704], 0
lea edx, [ebp - 0x704]
mov dword [ebp - 0x708], edx
mov eax, dword [ebp - 0x200]
or eax, 0x40000
mov dword [ebp - 0x200], eax
mov ecx, dword [ebp - 0x708]
mov dword [ebp - 0x3b4], ecx
mov edx, dword [ebp - 0x3b4]
mov dword [ebp - 0x70c], edx
mov eax, dword [ebp - 0x70c]
mov ecx, dword [eax]
mov dword [ebp - 0x388], ecx
mov edx, dword [ebp - 0x200]
or edx, 0x80000
mov dword [ebp - 0x200], edx
mov eax, dword [ebp - 0x200]
and eax, 0x40000
je 0x1009110c
and dword [ebp - 0x200], 0xfffbffff
mov ecx, dword [ebp - 0x200]
and ecx, 0x20000
je 0x10091124
and dword [ebp - 0x200], 0xfffdffff
mov edx, dword [ebp - 0x200]
or edx, 0x10000
mov dword [ebp - 0x200], edx
lea eax, [ebp - 0x388]
mov dword [ebp - 0x710], eax
mov ecx, dword [ebp - 0x208]
add ecx, 0x50
mov dword [ebp - 0x238], ecx
mov edx, dword [0x102bc13c]
mov dword [ebp - 0x714], edx
lea eax, [ebp - 0x2bc]
mov dword [ebp - 0x3b8], eax
mov ecx, dword [ebp - 0x3b8]
mov edx, dword [ebp - 0x714]
mov dword [ecx], edx
mov eax, dword [ebp - 0x3b8]
mov dword [ebp - 0xd34], eax
mov dword [ebp - 4], 2
mov ecx, dword [ebp - 0x238]
mov edx, dword [ebp - 0x2bc]
mov dword [ecx], edx
mov eax, dword [ebp - 0x2bc]
mov ecx, dword [eax]
mov dword [ebp - 0x718], ecx
mov edx, dword [ebp - 0x238]
mov eax, dword [ebp - 0x718]
mov dword [edx + 4], eax
mov ecx, dword [ebp - 0x238]
cmp dword [ecx + 4], 0
jne 0x100911cd
mov dword [ebp - 4], 0xffffffff
jmp 0x10091407
mov dword [ebp - 0x310], 0
mov edx, dword [ebp - 0x238]
mov eax, dword [edx + 4]
mov ecx, dword [ebp - 0x310]
mov edx, dword [eax + ecx*4]
mov dword [ebp - 0x3bc], edx
cmp dword [ebp - 0x3bc], 0
jne 0x10091201
mov byte [ebp - 0x20e], 0
jmp 0x10091258
mov eax, dword [0x100fedc0]
mov dword [ebp - 0x71c], eax
push 0x1c
lea ecx, [ebp - 0x11c]
push ecx
mov edx, dword [ebp - 0x3bc]
push edx
call dword [ebp - 0x71c]
test eax, eax
jne 0x1009122f
mov byte [ebp - 0x20e], 0
jmp 0x10091258
mov eax, dword [ebp - 0x108]
and eax, 1
jne 0x10091248
mov ecx, dword [ebp - 0x108]
and ecx, 0x100
je 0x10091251
mov byte [ebp - 0x20e], 0
jmp 0x10091258
mov byte [ebp - 0x20e], 1
movzx edx, byte [ebp - 0x20e]
test edx, edx
je 0x10091277
mov eax, dword [ebp - 0x310]
add eax, 1
mov dword [ebp - 0x310], eax
jmp 0x100911d7
mov ecx, dword [ebp - 0x238]
mov edx, dword [ebp - 0x310]
mov dword [ecx + 0xc], edx
mov eax, dword [ebp - 0x238]
cmp dword [eax + 0xc], 0
jne 0x1009129e
mov dword [ebp - 4], 0xffffffff
jmp 0x10091407
mov ecx, 1
test ecx, ecx
je 0x100912bb
mov edx, dword [ebp - 0x238]
mov eax, dword [edx + 0xc]
add eax, 1
mov dword [ebp - 0x3c0], eax
jmp 0x100912ca
mov ecx, dword [ebp - 0x238]
mov edx, dword [ecx + 0xc]
mov dword [ebp - 0x3c0], edx
mov edx, dword [ebp - 0x3c0]
lea ecx, [ebp - 0x724]
call fcn.1003f910
mov dword [ebp - 0x720], eax
mov eax, dword [ebp - 0x720]
push eax
mov ecx, dword [ebp - 0x238]
add ecx, 8
call fcn.1003f9b0
lea ecx, [ebp - 0x724]
call fcn.1003f370
mov ecx, dword [ebp - 0x238]
add ecx, 8
call fcn.1003f340
movzx ecx, al
test ecx, ecx
jne 0x10091322
mov dword [ebp - 4], 0xffffffff
jmp 0x10091407
mov ecx, dword [ebp - 0x238]
add ecx, 8
call fcn.1003f350
mov dword [ebp - 0x728], eax
mov edx, dword [ebp - 0x728]
mov dword [ebp - 0x38], edx
mov eax, 1
test eax, eax
je 0x100913bb
mov ecx, dword [ebp - 0x38]
mov dword [ebp - 0x72c], ecx
mov edx, dword [ebp - 0x238]
mov eax, dword [edx + 0xc]
lea ecx, [eax*4 + 4]
push ecx
mov edx, dword [ebp - 0x238]
mov eax, dword [edx + 4]
sub eax, 4
push eax
mov ecx, dword [ebp - 0x72c]
push ecx
call sub.VCRUNTIME140.dll_memcpy
add esp, 0xc
mov edx, dword [ebp - 0x38]
mov dword [ebp - 0x730], edx
mov eax, dword [ebp - 0x730]
add eax, 4
mov dword [ebp - 0x734], eax
cmp dword [ebp - 0x2bc], 0
jne 0x100913a1
jmp 0x100913af
mov ecx, dword [ebp - 0x2bc]
mov edx, dword [ebp - 0x734]
mov dword [ecx], edx
mov eax, dword [ebp - 0x238]
mov byte [eax + 0x10], 1
jmp 0x10091400
mov ecx, dword [ebp - 0x38]
mov dword [ebp - 0x738], ecx
mov edx, dword [ebp - 0x238]
mov eax, dword [edx + 0xc]
shl eax, 2
push eax
mov ecx, dword [ebp - 0x238]
mov edx, dword [ecx + 4]
push edx
mov eax, dword [ebp - 0x738]
push eax
call sub.VCRUNTIME140.dll_memcpy
add esp, 0xc
cmp dword [ebp - 0x2bc], 0
jne 0x100913f5
jmp 0x10091400
mov ecx, dword [ebp - 0x38]
mov edx, dword [ebp - 0x2bc]
mov dword [edx], ecx
mov dword [ebp - 4], 0xffffffff
mov eax, dword [ebp - 0x208]
add eax, 0x50
mov dword [ebp - 0x2b4], eax
mov dword [ebp - 0x73c], 0x1009a060
mov ecx, dword [ebp - 0x2b4]
movzx edx, byte [ecx + 0x10]
test edx, edx
je 0x1009143e
mov eax, 0x1b
add eax, 1
mov dword [ebp - 0x3c4], eax
jmp 0x10091448
mov dword [ebp - 0x3c4], 0x1b
mov ecx, dword [ebp - 0x3c4]
mov dword [ebp - 0x3c8], ecx
mov edx, dword [ebp - 0x2b4]
cmp dword [edx + 4], 0
je 0x10091486
mov ecx, dword [ebp - 0x2b4]
add ecx, 8
call fcn.1003f340
movzx eax, al
test eax, eax
je 0x10091486
mov ecx, dword [ebp - 0x2b4]
mov edx, dword [ebp - 0x3c8]
cmp edx, dword [ecx + 0xc]
jbe 0x100914b2
mov dword [ebp - 0x378], 0
mov eax, dword [ebp - 0x200]
or eax, 0x100000
mov dword [ebp - 0x200], eax
lea ecx, [ebp - 0x378]
mov dword [ebp - 0x764], ecx
jmp 0x10091606
mov edx, dword [ebp - 0x73c]
mov dword [ebp - 0x740], edx
mov eax, dword [ebp - 0x740]
mov dword [ebp - 0x748], eax
mov ecx, dword [ebp - 0x2b4]
add ecx, 8
mov dword [ebp - 0x744], ecx
mov edx, dword [ebp - 0x3c8]
push edx
mov ecx, dword [ebp - 0x744]
call fcn.1003f360
mov ecx, dword [ebp - 0x748]
mov dword [eax], ecx
mov edx, 0x1b
shl edx, 2
mov eax, dword [ebp - 0x2b4]
add edx, dword [eax + 4]
mov dword [ebp - 0x3cc], edx
mov ecx, dword [ebp - 0x3cc]
cmp dword [ecx], 0
je 0x1009155a
mov edx, dword [ebp - 0x3cc]
mov eax, dword [edx]
mov dword [ebp - 0x74c], eax
mov ecx, dword [ebp - 0x74c]
mov dword [ebp - 0x750], ecx
lea edx, [ebp - 0x750]
mov dword [ebp - 0x754], edx
mov eax, dword [ebp - 0x200]
or eax, 0x200000
mov dword [ebp - 0x200], eax
mov ecx, dword [ebp - 0x754]
mov dword [ebp - 0x3d0], ecx
jmp 0x1009158d
mov dword [ebp - 0x758], 0
lea edx, [ebp - 0x758]
mov dword [ebp - 0x75c], edx
mov eax, dword [ebp - 0x200]
or eax, 0x400000
mov dword [ebp - 0x200], eax
mov ecx, dword [ebp - 0x75c]
mov dword [ebp - 0x3d0], ecx
mov edx, dword [ebp - 0x3d0]
mov dword [ebp - 0x760], edx
mov eax, dword [ebp - 0x760]
mov ecx, dword [eax]
mov dword [ebp - 0x378], ecx
mov edx, dword [ebp - 0x200]
or edx, 0x800000
mov dword [ebp - 0x200], edx
mov eax, dword [ebp - 0x200]
and eax, 0x400000
je 0x100915d0
and dword [ebp - 0x200], 0xffbfffff
mov ecx, dword [ebp - 0x200]
and ecx, 0x200000
je 0x100915e8
and dword [ebp - 0x200], 0xffdfffff
mov edx, dword [ebp - 0x200]
or edx, 0x100000
mov dword [ebp - 0x200], edx
lea eax, [ebp - 0x378]
mov dword [ebp - 0x764], eax
mov ecx, dword [ebp - 0x208]
add ecx, 0x50
mov dword [ebp - 0x2ac], ecx
mov dword [ebp - 0x768], 0x1009a1a0
mov edx, dword [ebp - 0x2ac]
movzx eax, byte [edx + 0x10]
test eax, eax
je 0x1009163d
mov ecx, 0x5d
add ecx, 1
mov dword [ebp - 0x3d4], ecx
jmp 0x10091647
mov dword [ebp - 0x3d4], 0x5d
mov edx, dword [ebp - 0x3d4]
mov dword [ebp - 0x3d8], edx
mov eax, dword [ebp - 0x2ac]
cmp dword [eax + 4], 0
je 0x10091685
mov ecx, dword [ebp - 0x2ac]
add ecx, 8
call fcn.1003f340
movzx ecx, al
test ecx, ecx
je 0x10091685
mov edx, dword [ebp - 0x2ac]
mov eax, dword [ebp - 0x3d8]
cmp eax, dword [edx + 0xc]
jbe 0x100916b2
mov dword [ebp - 0x37c], 0
mov ecx, dword [ebp - 0x200]
or ecx, 0x1000000
mov dword [ebp - 0x200], ecx
lea edx, [ebp - 0x37c]
mov dword [ebp - 0x790], edx
jmp 0x10091806
mov eax, dword [ebp - 0x768]
mov dword [ebp - 0x76c], eax
mov ecx, dword [ebp - 0x76c]
mov dword [ebp - 0x774], ecx
mov edx, dword [ebp - 0x2ac]
add edx, 8
mov dword [ebp - 0x770], edx
mov eax, dword [ebp - 0x3d8]
push eax
mov ecx, dword [ebp - 0x770]
call fcn.1003f360
mov ecx, dword [ebp - 0x774]
mov dword [eax], ecx
mov edx, 0x5d
shl edx, 2
mov eax, dword [ebp - 0x2ac]
add edx, dword [eax + 4]
mov dword [ebp - 0x3dc], edx
mov ecx, dword [ebp - 0x3dc]
cmp dword [ecx], 0
je 0x1009175a
mov edx, dword [ebp - 0x3dc]
mov eax, dword [edx]
mov dword [ebp - 0x778], eax
mov ecx, dword [ebp - 0x778]
mov dword [ebp - 0x77c], ecx
lea edx, [ebp - 0x77c]
mov dword [ebp - 0x780], edx
mov eax, dword [ebp - 0x200]
or eax, 0x2000000
mov dword [ebp - 0x200], eax
mov ecx, dword [ebp - 0x780]
mov dword [ebp - 0x3e0], ecx
jmp 0x1009178d
mov dword [ebp - 0x784], 0
lea edx, [ebp - 0x784]
mov dword [ebp - 0x788], edx
mov eax, dword [ebp - 0x200]
or eax, 0x4000000
mov dword [ebp - 0x200], eax
mov ecx, dword [ebp - 0x788]
mov dword [ebp - 0x3e0], ecx
mov edx, dword [ebp - 0x3e0]
mov dword [ebp - 0x78c], edx
mov eax, dword [ebp - 0x78c]
mov ecx, dword [eax]
mov dword [ebp - 0x37c], ecx
mov edx, dword [ebp - 0x200]
or edx, 0x8000000
mov dword [ebp - 0x200], edx
mov eax, dword [ebp - 0x200]
and eax, 0x4000000
je 0x100917d0
and dword [ebp - 0x200], 0xfbffffff
mov ecx, dword [ebp - 0x200]
and ecx, 0x2000000
je 0x100917e8
and dword [ebp - 0x200], 0xfdffffff
mov edx, dword [ebp - 0x200]
or edx, 0x1000000
mov dword [ebp - 0x200], edx
lea eax, [ebp - 0x37c]
mov dword [ebp - 0x790], eax
mov ecx, dword [ebp - 0x208]
add ecx, 0x50
mov dword [ebp - 0x2a4], ecx
mov dword [ebp - 0x794], 0x1009a3c0
mov edx, dword [ebp - 0x2a4]
movzx eax, byte [edx + 0x10]
test eax, eax
je 0x1009183d
mov ecx, 0x5a
add ecx, 1
mov dword [ebp - 0x3e4], ecx
jmp 0x10091847
mov dword [ebp - 0x3e4], 0x5a
mov edx, dword [ebp - 0x3e4]
mov dword [ebp - 0x3e8], edx
mov eax, dword [ebp - 0x2a4]
cmp dword [eax + 4], 0
je 0x10091885
mov ecx, dword [ebp - 0x2a4]
add ecx, 8
call fcn.1003f340
movzx ecx, al
test ecx, ecx
je 0x10091885
mov edx, dword [ebp - 0x2a4]
mov eax, dword [ebp - 0x3e8]
cmp eax, dword [edx + 0xc]
jbe 0x100918b2
mov dword [ebp - 0x380], 0
mov ecx, dword [ebp - 0x200]
or ecx, 0x10000000
mov dword [ebp - 0x200], ecx
lea edx, [ebp - 0x380]
mov dword [ebp - 0x7bc], edx
jmp 0x10091a06
mov eax, dword [ebp - 0x794]
mov dword [ebp - 0x798], eax
mov ecx, dword [ebp - 0x798]
mov dword [ebp - 0x7a0], ecx
mov edx, dword [ebp - 0x2a4]
add edx, 8
mov dword [ebp - 0x79c], edx
mov eax, dword [ebp - 0x3e8]
push eax
mov ecx, dword [ebp - 0x79c]
call fcn.1003f360
mov ecx, dword [ebp - 0x7a0]
mov dword [eax], ecx
mov edx, 0x5a
shl edx, 2
mov eax, dword [ebp - 0x2a4]
add edx, dword [eax + 4]
mov dword [ebp - 0x3ec], edx
mov ecx, dword [ebp - 0x3ec]
cmp dword [ecx], 0
je 0x1009195a
mov edx, dword [ebp - 0x3ec]
mov eax, dword [edx]
mov dword [ebp - 0x7a4], eax
mov ecx, dword [ebp - 0x7a4]
mov dword [ebp - 0x7a8], ecx
lea edx, [ebp - 0x7a8]
mov dword [ebp - 0x7ac], edx
mov eax, dword [ebp - 0x200]
or eax, 0x20000000
mov dword [ebp - 0x200], eax
mov ecx, dword [ebp - 0x7ac]
mov dword [ebp - 0x3f0], ecx
jmp 0x1009198d
mov dword [ebp - 0x7b0], 0
lea edx, [ebp - 0x7b0]
mov dword [ebp - 0x7b4], edx
mov eax, dword [ebp - 0x200]
or eax, 0x40000000
mov dword [ebp - 0x200], eax
mov ecx, dword [ebp - 0x7b4]
mov dword [ebp - 0x3f0], ecx
mov edx, dword [ebp - 0x3f0]
mov dword [ebp - 0x7b8], edx
mov eax, dword [ebp - 0x7b8]
mov ecx, dword [eax]
mov dword [ebp - 0x380], ecx
mov edx, dword [ebp - 0x200]
or edx, 0x80000000
mov dword [ebp - 0x200], edx
mov eax, dword [ebp - 0x200]
and eax, 0x40000000
je 0x100919d0
and dword [ebp - 0x200], 0xbfffffff
mov ecx, dword [ebp - 0x200]
and ecx, 0x20000000
je 0x100919e8
and dword [ebp - 0x200], 0xdfffffff
mov edx, dword [ebp - 0x200]
or edx, 0x10000000
mov dword [ebp - 0x200], edx
lea eax, [ebp - 0x380]
mov dword [ebp - 0x7bc], eax
mov ecx, dword [ebp - 0x208]
add ecx, 0x78
mov dword [ebp - 0x23c], ecx
mov edx, dword [0x102bc154]
mov dword [ebp - 0x7c0], edx
lea eax, [ebp - 0x29c]
mov dword [ebp - 0x3f4], eax
mov ecx, dword [ebp - 0x3f4]
mov edx, dword [ebp - 0x7c0]
mov dword [ecx], edx
mov eax, dword [ebp - 0x3f4]
mov dword [ebp - 0xd38], eax
mov dword [ebp - 4], 3
mov ecx, dword [ebp - 0x23c]
mov edx, dword [ebp - 0x29c]
mov dword [ecx], edx
mov eax, dword [ebp - 0x29c]
mov ecx, dword [eax]
mov dword [ebp - 0x7c4], ecx
mov edx, dword [ebp - 0x23c]
mov eax, dword [ebp - 0x7c4]
mov dword [edx + 4], eax
mov ecx, dword [ebp - 0x23c]
cmp dword [ecx + 4], 0
jne 0x10091a91
mov dword [ebp - 4], 0xffffffff
jmp 0x10091ccb
mov dword [ebp - 0x314], 0
mov edx, dword [ebp - 0x23c]
mov eax, dword [edx + 4]
mov ecx, dword [ebp - 0x314]
mov edx, dword [eax + ecx*4]
mov dword [ebp - 0x3f8], edx
cmp dword [ebp - 0x3f8], 0
jne 0x10091ac5
mov byte [ebp - 0x20f], 0
jmp 0x10091b1c
mov eax, dword [0x100fedc0]
mov dword [ebp - 0x7c8], eax
push 0x1c
lea ecx, [ebp - 0x1c4]
push ecx
mov edx, dword [ebp - 0x3f8]
push edx
call dword [ebp - 0x7c8]
test eax, eax
jne 0x10091af3
mov byte [ebp - 0x20f], 0
jmp 0x10091b1c
mov eax, dword [ebp - 0x1b0]
and eax, 1
jne 0x10091b0c
mov ecx, dword [ebp - 0x1b0]
and ecx, 0x100
je 0x10091b15
mov byte [ebp - 0x20f], 0
jmp 0x10091b1c
mov byte [ebp - 0x20f], 1
movzx edx, byte [ebp - 0x20f]
test edx, edx
je 0x10091b3b
mov eax, dword [ebp - 0x314]
add eax, 1
mov dword [ebp - 0x314], eax
jmp 0x10091a9b
mov ecx, dword [ebp - 0x23c]
mov edx, dword [ebp - 0x314]
mov dword [ecx + 0xc], edx
mov eax, dword [ebp - 0x23c]
cmp dword [eax + 0xc], 0
jne 0x10091b62
mov dword [ebp - 4], 0xffffffff
jmp 0x10091ccb
mov ecx, 1
test ecx, ecx
je 0x10091b7f
mov edx, dword [ebp - 0x23c]
mov eax, dword [edx + 0xc]
add eax, 1
mov dword [ebp - 0x3fc], eax
jmp 0x10091b8e
mov ecx, dword [ebp - 0x23c]
mov edx, dword [ecx + 0xc]
mov dword [ebp - 0x3fc], edx
mov edx, dword [ebp - 0x3fc]
lea ecx, [ebp - 0x7d0]
call fcn.1003f910
mov dword [ebp - 0x7cc], eax
mov eax, dword [ebp - 0x7cc]
push eax
mov ecx, dword [ebp - 0x23c]
add ecx, 8
call fcn.1003f9b0
lea ecx, [ebp - 0x7d0]
call fcn.1003f370
mov ecx, dword [ebp - 0x23c]
add ecx, 8
call fcn.1003f340
movzx ecx, al
test ecx, ecx
jne 0x10091be6
mov dword [ebp - 4], 0xffffffff
jmp 0x10091ccb
mov ecx, dword [ebp - 0x23c]
add ecx, 8
call fcn.1003f350
mov dword [ebp - 0x7d4], eax
mov edx, dword [ebp - 0x7d4]
mov dword [ebp - 0x34], edx
mov eax, 1
test eax, eax
je 0x10091c7f
mov ecx, dword [ebp - 0x34]
mov dword [ebp - 0x7d8], ecx
mov edx, dword [ebp - 0x23c]
mov eax, dword [edx + 0xc]
lea ecx, [eax*4 + 4]
push ecx
mov edx, dword [ebp - 0x23c]
mov eax, dword [edx + 4]
sub eax, 4
push eax
mov ecx, dword [ebp - 0x7d8]
push ecx
call sub.VCRUNTIME140.dll_memcpy
add esp, 0xc
mov edx, dword [ebp - 0x34]
mov dword [ebp - 0x7dc], edx
mov eax, dword [ebp - 0x7dc]
add eax, 4
mov dword [ebp - 0x7e0], eax
cmp dword [ebp - 0x29c], 0
jne 0x10091c65
jmp 0x10091c73
mov ecx, dword [ebp - 0x29c]
mov edx, dword [ebp - 0x7e0]
mov dword [ecx], edx
mov eax, dword [ebp - 0x23c]
mov byte [eax + 0x10], 1
jmp 0x10091cc4
mov ecx, dword [ebp - 0x34]
mov dword [ebp - 0x7e4], ecx
mov edx, dword [ebp - 0x23c]
mov eax, dword [edx + 0xc]
shl eax, 2
push eax
mov ecx, dword [ebp - 0x23c]
mov edx, dword [ecx + 4]
push edx
mov eax, dword [ebp - 0x7e4]
push eax
call sub.VCRUNTIME140.dll_memcpy
add esp, 0xc
cmp dword [ebp - 0x29c], 0
jne 0x10091cb9
jmp 0x10091cc4
mov ecx, dword [ebp - 0x34]
mov edx, dword [ebp - 0x29c]
mov dword [edx], ecx
mov dword [ebp - 4], 0xffffffff
mov eax, dword [ebp - 0x208]
add eax, 0x78
mov dword [ebp - 0x294], eax
mov dword [ebp - 0x7e8], 0x100ae480
mov ecx, dword [ebp - 0x294]
movzx edx, byte [ecx + 0x10]
test edx, edx
je 0x10091d02
mov eax, 0xe
add eax, 1
mov dword [ebp - 0x400], eax
jmp 0x10091d0c
mov dword [ebp - 0x400], 0xe
mov ecx, dword [ebp - 0x400]
mov dword [ebp - 0x404], ecx
mov edx, dword [ebp - 0x294]
cmp dword [edx + 4], 0
je 0x10091d4a
mov ecx, dword [ebp - 0x294]
add ecx, 8
call fcn.1003f340
movzx eax, al
test eax, eax
je 0x10091d4a
mov ecx, dword [ebp - 0x294]
mov edx, dword [ebp - 0x404]
cmp edx, dword [ecx + 0xc]
jbe 0x10091d74
mov dword [ebp - 0x384], 0
mov eax, dword [ebp - 0x204]
or eax, 1
mov dword [ebp - 0x204], eax
lea ecx, [ebp - 0x384]
mov dword [ebp - 0x810], ecx
jmp 0x10091eb3
mov edx, dword [ebp - 0x7e8]
mov dword [ebp - 0x7ec], edx
mov eax, dword [ebp - 0x7ec]
mov dword [ebp - 0x7f4], eax
mov ecx, dword [ebp - 0x294]
add ecx, 8
mov dword [ebp - 0x7f0], ecx
mov edx, dword [ebp - 0x404]
push edx
mov ecx, dword [ebp - 0x7f0]
call fcn.1003f360
mov ecx, dword [ebp - 0x7f4]
mov dword [eax], ecx
mov edx, 0xe
shl edx, 2
mov eax, dword [ebp - 0x294]
add edx, dword [eax + 4]
mov dword [ebp - 0x408], edx
mov ecx, dword [ebp - 0x408]
cmp dword [ecx], 0
je 0x10091e1a
mov edx, dword [ebp - 0x408]
mov eax, dword [edx]
mov dword [ebp - 0x7f8], eax
mov ecx, dword [ebp - 0x7f8]
mov dword [ebp - 0x7fc], ecx
lea edx, [ebp - 0x7fc]
mov dword [ebp - 0x800], edx
mov eax, dword [ebp - 0x204]
or eax, 2
mov dword [ebp - 0x204], eax
mov ecx, dword [ebp - 0x800]
mov dword [ebp - 0x40c], ecx
jmp 0x10091e4b
mov dword [ebp - 0x804], 0
lea edx, [ebp - 0x804]
mov dword [ebp - 0x808], edx
mov eax, dword [ebp - 0x204]
or eax, 4
mov dword [ebp - 0x204], eax
mov ecx, dword [ebp - 0x808]
mov dword [ebp - 0x40c], ecx
mov edx, dword [ebp - 0x40c]
mov dword [ebp - 0x80c], edx
mov eax, dword [ebp - 0x80c]
mov ecx, dword [eax]
mov dword [ebp - 0x384], ecx
mov edx, dword [ebp - 0x204]
or edx, 8
mov dword [ebp - 0x204], edx
mov eax, dword [ebp - 0x204]
and eax, 4
je 0x10091e86
and dword [ebp - 0x204], 0xfffffffb
mov ecx, dword [ebp - 0x204]
and ecx, 2
je 0x10091e98
and dword [ebp - 0x204], 0xfffffffd
mov edx, dword [ebp - 0x204]
or edx, 1
mov dword [ebp - 0x204], edx
lea eax, [ebp - 0x384]
mov dword [ebp - 0x810], eax
mov ecx, dword [ebp - 0x208]
add ecx, 0x78
mov dword [ebp - 0x28c], ecx
mov dword [ebp - 0x814], 0x100ae7b0
mov edx, dword [ebp - 0x28c]
movzx eax, byte [edx + 0x10]
test eax, eax
je 0x10091eea
mov ecx, 0x13
add ecx, 1
mov dword [ebp - 0x410], ecx
jmp 0x10091ef4
mov dword [ebp - 0x410], 0x13
mov edx, dword [ebp - 0x410]
mov dword [ebp - 0x414], edx
mov eax, dword [ebp - 0x28c]
cmp dword [eax + 4], 0
je 0x10091f32
mov ecx, dword [ebp - 0x28c]
add ecx, 8
call fcn.1003f340
movzx ecx, al
test ecx, ecx
je 0x10091f32
mov edx, dword [ebp - 0x28c]
mov eax, dword [ebp - 0x414]
cmp eax, dword [edx + 0xc]
jbe 0x10091f5c
mov dword [ebp - 0x39c], 0
mov ecx, dword [ebp - 0x204]
or ecx, 0x10
mov dword [ebp - 0x204], ecx
lea edx, [ebp - 0x39c]
mov dword [ebp - 0x83c], edx
jmp 0x1009209e
mov eax, dword [ebp - 0x814]
mov dword [ebp - 0x818], eax
mov ecx, dword [ebp - 0x818]
mov dword [ebp - 0x820], ecx
mov edx, dword [ebp - 0x28c]
add edx, 8
mov dword [ebp - 0x81c], edx
mov eax, dword [ebp - 0x414]
push eax
mov ecx, dword [ebp - 0x81c]
call fcn.1003f360
mov ecx, dword [ebp - 0x820]
mov dword [eax], ecx
mov edx, 0x13
shl edx, 2
mov eax, dword [ebp - 0x28c]
add edx, dword [eax + 4]
mov dword [ebp - 0x418], edx
mov ecx, dword [ebp - 0x418]
cmp dword [ecx], 0
je 0x10092002
mov edx, dword [ebp - 0x418]
mov eax, dword [edx]
mov dword [ebp - 0x824], eax
mov ecx, dword [ebp - 0x824]
mov dword [ebp - 0x828], ecx
lea edx, [ebp - 0x828]
mov dword [ebp - 0x82c], edx
mov eax, dword [ebp - 0x204]
or eax, 0x20
mov dword [ebp - 0x204], eax
mov ecx, dword [ebp - 0x82c]
mov dword [ebp - 0x41c], ecx
jmp 0x10092033
mov dword [ebp - 0x830], 0
lea edx, [ebp - 0x830]
mov dword [ebp - 0x834], edx
mov eax, dword [ebp - 0x204]
or eax, 0x40
mov dword [ebp - 0x204], eax
mov ecx, dword [ebp - 0x834]
mov dword [ebp - 0x41c], ecx
mov edx, dword [ebp - 0x41c]
mov dword [ebp - 0x838], edx
mov eax, dword [ebp - 0x838]
mov ecx, dword [eax]
mov dword [ebp - 0x39c], ecx
mov edx, dword [ebp - 0x204]
or edx, 0x80
mov dword [ebp - 0x204], edx
mov eax, dword [ebp - 0x204]
and eax, 0x40
je 0x10092071
and dword [ebp - 0x204], 0xffffffbf
mov ecx, dword [ebp - 0x204]
and ecx, 0x20
je 0x10092083
and dword [ebp - 0x204], 0xffffffdf
mov edx, dword [ebp - 0x204]
or edx, 0x10
mov dword [ebp - 0x204], edx
lea eax, [ebp - 0x39c]
mov dword [ebp - 0x83c], eax
mov ecx, dword [ebp - 0x208]
add ecx, 0x14
mov dword [ebp - 0x240], ecx
mov edx, dword [0x102bc198]
mov dword [ebp - 0x840], edx
lea eax, [ebp - 0x284]
mov dword [ebp - 0x420], eax
mov ecx, dword [ebp - 0x420]
mov edx, dword [ebp - 0x840]
mov dword [ecx], edx
mov eax, dword [ebp - 0x420]
mov dword [ebp - 0xd3c], eax
mov dword [ebp - 4], 4
mov ecx, dword [ebp - 0x240]
mov edx, dword [ebp - 0x284]
mov dword [ecx], edx
mov eax, dword [ebp - 0x284]
mov ecx, dword [eax]
mov dword [ebp - 0x844], ecx
mov edx, dword [ebp - 0x240]
mov eax, dword [ebp - 0x844]
mov dword [edx + 4], eax
mov ecx, dword [ebp - 0x240]
cmp dword [ecx + 4], 0
jne 0x10092129
mov dword [ebp - 4], 0xffffffff
jmp 0x10092363
mov dword [ebp - 0x318], 0
mov edx, dword [ebp - 0x240]
mov eax, dword [edx + 4]
mov ecx, dword [ebp - 0x318]
mov edx, dword [eax + ecx*4]
mov dword [ebp - 0x424], edx
cmp dword [ebp - 0x424], 0
jne 0x1009215d
mov byte [ebp - 0x210], 0
jmp 0x100921b4
mov eax, dword [0x100fedc0]
mov dword [ebp - 0x848], eax
push 0x1c
lea ecx, [ebp - 0x1e0]
push ecx
mov edx, dword [ebp - 0x424]
push edx
call dword [ebp - 0x848]
test eax, eax
jne 0x1009218b
mov byte [ebp - 0x210], 0
jmp 0x100921b4
mov eax, dword [ebp - 0x1cc]
and eax, 1
jne 0x100921a4
mov ecx, dword [ebp - 0x1cc]
and ecx, 0x100
je 0x100921ad
mov byte [ebp - 0x210], 0
jmp 0x100921b4
mov byte [ebp - 0x210], 1
movzx edx, byte [ebp - 0x210]
test edx, edx
je 0x100921d3
mov eax, dword [ebp - 0x318]
add eax, 1
mov dword [ebp - 0x318], eax
jmp 0x10092133
mov ecx, dword [ebp - 0x240]
mov edx, dword [ebp - 0x318]
mov dword [ecx + 0xc], edx
mov eax, dword [ebp - 0x240]
cmp dword [eax + 0xc], 0
jne 0x100921fa
mov dword [ebp - 4], 0xffffffff
jmp 0x10092363
mov ecx, 1
test ecx, ecx
je 0x10092217
mov edx, dword [ebp - 0x240]
mov eax, dword [edx + 0xc]
add eax, 1
mov dword [ebp - 0x428], eax
jmp 0x10092226
mov ecx, dword [ebp - 0x240]
mov edx, dword [ecx + 0xc]
mov dword [ebp - 0x428], edx
mov edx, dword [ebp - 0x428]
lea ecx, [ebp - 0x850]
call fcn.1003f910
mov dword [ebp - 0x84c], eax
mov eax, dword [ebp - 0x84c]
push eax
mov ecx, dword [ebp - 0x240]
add ecx, 8
call fcn.1003f9b0
lea ecx, [ebp - 0x850]
call fcn.1003f370
mov ecx, dword [ebp - 0x240]
add ecx, 8
call fcn.1003f340
movzx ecx, al
test ecx, ecx
jne 0x1009227e
mov dword [ebp - 4], 0xffffffff
jmp 0x10092363
mov ecx, dword [ebp - 0x240]
add ecx, 8
call fcn.1003f350
mov dword [ebp - 0x854], eax
mov edx, dword [ebp - 0x854]
mov dword [ebp - 0x30], edx
mov eax, 1
test eax, eax
je 0x10092317
mov ecx, dword [ebp - 0x30]
mov dword [ebp - 0x858], ecx
mov edx, dword [ebp - 0x240]
mov eax, dword [edx + 0xc]
lea ecx, [eax*4 + 4]
push ecx
mov edx, dword [ebp - 0x240]
mov eax, dword [edx + 4]
sub eax, 4
push eax
mov ecx, dword [ebp - 0x858]
push ecx
call sub.VCRUNTIME140.dll_memcpy
add esp, 0xc
mov edx, dword [ebp - 0x30]
mov dword [ebp - 0x85c], edx
mov eax, dword [ebp - 0x85c]
add eax, 4
mov dword [ebp - 0x860], eax
cmp dword [ebp - 0x284], 0
jne 0x100922fd
jmp 0x1009230b
mov ecx, dword [ebp - 0x284]
mov edx, dword [ebp - 0x860]
mov dword [ecx], edx
mov eax, dword [ebp - 0x240]
mov byte [eax + 0x10], 1
jmp 0x1009235c
mov ecx, dword [ebp - 0x30]
mov dword [ebp - 0x864], ecx
mov edx, dword [ebp - 0x240]
mov eax, dword [edx + 0xc]
shl eax, 2
push eax
mov ecx, dword [ebp - 0x240]
mov edx, dword [ecx + 4]
push edx
mov eax, dword [ebp - 0x864]
push eax
call sub.VCRUNTIME140.dll_memcpy
add esp, 0xc
cmp dword [ebp - 0x284], 0
jne 0x10092351
jmp 0x1009235c
mov ecx, dword [ebp - 0x30]
mov edx, dword [ebp - 0x284]
mov dword [edx], ecx
mov dword [ebp - 4], 0xffffffff
mov eax, dword [ebp - 0x208]
add eax, 0x14
mov dword [ebp - 0x264], eax
mov dword [ebp - 0x868], 0x100a5890
mov ecx, dword [ebp - 0x264]
movzx edx, byte [ecx + 0x10]
test edx, edx
je 0x1009239a
mov eax, 0x11
add eax, 1
mov dword [ebp - 0x42c], eax
jmp 0x100923a4
mov dword [ebp - 0x42c], 0x11
mov ecx, dword [ebp - 0x42c]
mov dword [ebp - 0x430], ecx
mov edx, dword [ebp - 0x264]
cmp dword [edx + 4], 0
je 0x100923e2
mov ecx, dword [ebp - 0x264]
add ecx, 8
call fcn.1003f340
movzx eax, al
test eax, eax
je 0x100923e2
mov ecx, dword [ebp - 0x264]
mov edx, dword [ebp - 0x430]
cmp edx, dword [ecx + 0xc]
jbe 0x1009240e
mov dword [ebp - 0x38c], 0
mov eax, dword [ebp - 0x204]
or eax, 0x100
mov dword [ebp - 0x204], eax
lea ecx, [ebp - 0x38c]
mov dword [ebp - 0x890], ecx
jmp 0x10092562
mov edx, dword [ebp - 0x868]
mov dword [ebp - 0x86c], edx
mov eax, dword [ebp - 0x86c]
mov dword [ebp - 0x874], eax
mov ecx, dword [ebp - 0x264]
add ecx, 8
mov dword [ebp - 0x870], ecx
mov edx, dword [ebp - 0x430]
push edx
mov ecx, dword [ebp - 0x870]
call fcn.1003f360
mov ecx, dword [ebp - 0x874]
mov dword [eax], ecx
mov edx, 0x11
shl edx, 2
mov eax, dword [ebp - 0x264]
add edx, dword [eax + 4]
mov dword [ebp - 0x434], edx
mov ecx, dword [ebp - 0x434]
cmp dword [ecx], 0
je 0x100924b6
mov edx, dword [ebp - 0x434]
mov eax, dword [edx]
mov dword [ebp - 0x878], eax
mov ecx, dword [ebp - 0x878]
mov dword [ebp - 0x87c], ecx
lea edx, [ebp - 0x87c]
mov dword [ebp - 0x880], edx
mov eax, dword [ebp - 0x204]
or eax, 0x200
mov dword [ebp - 0x204], eax
mov ecx, dword [ebp - 0x880]
mov dword [ebp - 0x438], ecx
jmp 0x100924e9
mov dword [ebp - 0x884], 0
lea edx, [ebp - 0x884]
mov dword [ebp - 0x888], edx
mov eax, dword [ebp - 0x204]
or eax, 0x400
mov dword [ebp - 0x204], eax
mov ecx, dword [ebp - 0x888]
mov dword [ebp - 0x438], ecx
mov edx, dword [ebp - 0x438]
mov dword [ebp - 0x88c], edx
mov eax, dword [ebp - 0x88c]
mov ecx, dword [eax]
mov dword [ebp - 0x38c], ecx
mov edx, dword [ebp - 0x204]
or edx, 0x800
mov dword [ebp - 0x204], edx
mov eax, dword [ebp - 0x204]
and eax, 0x400
je 0x1009252c
and dword [ebp - 0x204], 0xfffffbff
mov ecx, dword [ebp - 0x204]
and ecx, 0x200
je 0x10092544
and dword [ebp - 0x204], 0xfffffdff
mov edx, dword [ebp - 0x204]
or edx, 0x100
mov dword [ebp - 0x204], edx
lea eax, [ebp - 0x38c]
mov dword [ebp - 0x890], eax
mov ecx, dword [ebp - 0x208]
add ecx, 0x14
mov dword [ebp - 0x260], ecx
mov dword [ebp - 0x894], 0x100a58c0
mov edx, dword [ebp - 0x260]
movzx eax, byte [edx + 0x10]
test eax, eax
je 0x10092599
mov ecx, 0x12
add ecx, 1
mov dword [ebp - 0x43c], ecx
jmp 0x100925a3
mov dword [ebp - 0x43c], 0x12
mov edx, dword [ebp - 0x43c]
mov dword [ebp - 0x440], edx
mov eax, dword [ebp - 0x260]
cmp dword [eax + 4], 0
je 0x100925e1
mov ecx, dword [ebp - 0x260]
add ecx, 8
call fcn.1003f340
movzx ecx, al
test ecx, ecx
je 0x100925e1
mov edx, dword [ebp - 0x260]
mov eax, dword [ebp - 0x440]
cmp eax, dword [edx + 0xc]
jbe 0x1009260e
mov dword [ebp - 0x390], 0
mov ecx, dword [ebp - 0x204]
or ecx, 0x1000
mov dword [ebp - 0x204], ecx
lea edx, [ebp - 0x390]
mov dword [ebp - 0x8bc], edx
jmp 0x10092762
mov eax, dword [ebp - 0x894]
mov dword [ebp - 0x898], eax
mov ecx, dword [ebp - 0x898]
mov dword [ebp - 0x8a0], ecx
mov edx, dword [ebp - 0x260]
add edx, 8
mov dword [ebp - 0x89c], edx
mov eax, dword [ebp - 0x440]
push eax
mov ecx, dword [ebp - 0x89c]
call fcn.1003f360
mov ecx, dword [ebp - 0x8a0]
mov dword [eax], ecx
mov edx, 0x12
shl edx, 2
mov eax, dword [ebp - 0x260]
add edx, dword [eax + 4]
mov dword [ebp - 0x444], edx
mov ecx, dword [ebp - 0x444]
cmp dword [ecx], 0
je 0x100926b6
mov edx, dword [ebp - 0x444]
mov eax, dword [edx]
mov dword [ebp - 0x8a4], eax
mov ecx, dword [ebp - 0x8a4]
mov dword [ebp - 0x8a8], ecx
lea edx, [ebp - 0x8a8]
mov dword [ebp - 0x8ac], edx
mov eax, dword [ebp - 0x204]
or eax, 0x2000
mov dword [ebp - 0x204], eax
mov ecx, dword [ebp - 0x8ac]
mov dword [ebp - 0x448], ecx
jmp 0x100926e9
mov dword [ebp - 0x8b0], 0
lea edx, [ebp - 0x8b0]
mov dword [ebp - 0x8b4], edx
mov eax, dword [ebp - 0x204]
or eax, 0x4000
mov dword [ebp - 0x204], eax
mov ecx, dword [ebp - 0x8b4]
mov dword [ebp - 0x448], ecx
mov edx, dword [ebp - 0x448]
mov dword [ebp - 0x8b8], edx
mov eax, dword [ebp - 0x8b8]
mov ecx, dword [eax]
mov dword [ebp - 0x390], ecx
mov edx, dword [ebp - 0x204]
or edx, 0x8000
mov dword [ebp - 0x204], edx
mov eax, dword [ebp - 0x204]
and eax, 0x4000
je 0x1009272c
and dword [ebp - 0x204], 0xffffbfff
mov ecx, dword [ebp - 0x204]
and ecx, 0x2000
je 0x10092744
and dword [ebp - 0x204], 0xffffdfff
mov edx, dword [ebp - 0x204]
or edx, 0x1000
mov dword [ebp - 0x204], edx
lea eax, [ebp - 0x390]
mov dword [ebp - 0x8bc], eax
mov ecx, dword [ebp - 0x208]
add ecx, 0x14
mov dword [ebp - 0x25c], ecx
mov dword [ebp - 0x8c0], 0x100a5990
mov edx, dword [ebp - 0x25c]
movzx eax, byte [edx + 0x10]
test eax, eax
je 0x10092799
mov ecx, 0x18
add ecx, 1
mov dword [ebp - 0x44c], ecx
jmp 0x100927a3
mov dword [ebp - 0x44c], 0x18
mov edx, dword [ebp - 0x44c]
mov dword [ebp - 0x450], edx
mov eax, dword [ebp - 0x25c]
cmp dword [eax + 4], 0
je 0x100927e1
mov ecx, dword [ebp - 0x25c]
add ecx, 8
call fcn.1003f340
movzx ecx, al
test ecx, ecx
je 0x100927e1
mov edx, dword [ebp - 0x25c]
mov eax, dword [ebp - 0x450]
cmp eax, dword [edx + 0xc]
jbe 0x1009280e
mov dword [ebp - 0x394], 0
mov ecx, dword [ebp - 0x204]
or ecx, 0x10000
mov dword [ebp - 0x204], ecx
lea edx, [ebp - 0x394]
mov dword [ebp - 0x8e8], edx
jmp 0x10092962
mov eax, dword [ebp - 0x8c0]
mov dword [ebp - 0x8c4], eax
mov ecx, dword [ebp - 0x8c4]
mov dword [ebp - 0x8cc], ecx
mov edx, dword [ebp - 0x25c]
add edx, 8
mov dword [ebp - 0x8c8], edx
mov eax, dword [ebp - 0x450]
push eax
mov ecx, dword [ebp - 0x8c8]
call fcn.1003f360
mov ecx, dword [ebp - 0x8cc]
mov dword [eax], ecx
mov edx, 0x18
shl edx, 2
mov eax, dword [ebp - 0x25c]
add edx, dword [eax + 4]
mov dword [ebp - 0x454], edx
mov ecx, dword [ebp - 0x454]
cmp dword [ecx], 0
je 0x100928b6
mov edx, dword [ebp - 0x454]
mov eax, dword [edx]
mov dword [ebp - 0x8d0], eax
mov ecx, dword [ebp - 0x8d0]
mov dword [ebp - 0x8d4], ecx
lea edx, [ebp - 0x8d4]
mov dword [ebp - 0x8d8], edx
mov eax, dword [ebp - 0x204]
or eax, 0x20000
mov dword [ebp - 0x204], eax
mov ecx, dword [ebp - 0x8d8]
mov dword [ebp - 0x458], ecx
jmp 0x100928e9
mov dword [ebp - 0x8dc], 0
lea edx, [ebp - 0x8dc]
mov dword [ebp - 0x8e0], edx
mov eax, dword [ebp - 0x204]
or eax, 0x40000
mov dword [ebp - 0x204], eax
mov ecx, dword [ebp - 0x8e0]
mov dword [ebp - 0x458], ecx
mov edx, dword [ebp - 0x458]
mov dword [ebp - 0x8e4], edx
mov eax, dword [ebp - 0x8e4]
mov ecx, dword [eax]
mov dword [ebp - 0x394], ecx
mov edx, dword [ebp - 0x204]
or edx, 0x80000
mov dword [ebp - 0x204], edx
mov eax, dword [ebp - 0x204]
and eax, 0x40000
je 0x1009292c
and dword [ebp - 0x204], 0xfffbffff
mov ecx, dword [ebp - 0x204]
and ecx, 0x20000
je 0x10092944
and dword [ebp - 0x204], 0xfffdffff
mov edx, dword [ebp - 0x204]
or edx, 0x10000
mov dword [ebp - 0x204], edx
lea eax, [ebp - 0x394]
mov dword [ebp - 0x8e8], eax
mov ecx, dword [ebp - 0x208]
add ecx, 0x14
mov dword [ebp - 0x258], ecx
mov dword [ebp - 0x8ec], 0x100a5b00
mov edx, dword [ebp - 0x258]
movzx eax, byte [edx + 0x10]
test eax, eax
je 0x10092999
mov ecx, 0x2c
add ecx, 1
mov dword [ebp - 0x45c], ecx
jmp 0x100929a3
mov dword [ebp - 0x45c], 0x2c
mov edx, dword [ebp - 0x45c]
mov dword [ebp - 0x460], edx
mov eax, dword [ebp - 0x258]
cmp dword [eax + 4], 0
je 0x100929e1
mov ecx, dword [ebp - 0x258]
add ecx, 8
call fcn.1003f340
movzx ecx, al
test ecx, ecx
je 0x100929e1
mov edx, dword [ebp - 0x258]
mov eax, dword [ebp - 0x460]
cmp eax, dword [edx + 0xc]
jbe 0x10092a0e
mov dword [ebp - 0x398], 0
mov ecx, dword [ebp - 0x204]
or ecx, 0x100000
mov dword [ebp - 0x204], ecx
lea edx, [ebp - 0x398]
mov dword [ebp - 0x914], edx
jmp 0x10092b62
mov eax, dword [ebp - 0x8ec]
mov dword [ebp - 0x8f0], eax
mov ecx, dword [ebp - 0x8f0]
mov dword [ebp - 0x8f8], ecx
mov edx, dword [ebp - 0x258]
add edx, 8
mov dword [ebp - 0x8f4], edx
mov eax, dword [ebp - 0x460]
push eax
mov ecx, dword [ebp - 0x8f4]
call fcn.1003f360
mov ecx, dword [ebp - 0x8f8]
mov dword [eax], ecx
mov edx, 0x2c
shl edx, 2
mov eax, dword [ebp - 0x258]
add edx, dword [eax + 4]
mov dword [ebp - 0x464], edx
mov ecx, dword [ebp - 0x464]
cmp dword [ecx], 0
je 0x10092ab6
mov edx, dword [ebp - 0x464]
mov eax, dword [edx]
mov dword [ebp - 0x8fc], eax
mov ecx, dword [ebp - 0x8fc]
mov dword [ebp - 0x900], ecx
lea edx, [ebp - 0x900]
mov dword [ebp - 0x904], edx
mov eax, dword [ebp - 0x204]
or eax, 0x200000
mov dword [ebp - 0x204], eax
mov ecx, dword [ebp - 0x904]
mov dword [ebp - 0x468], ecx
jmp 0x10092ae9
mov dword [ebp - 0x908], 0
lea edx, [ebp - 0x908]
mov dword [ebp - 0x90c], edx
mov eax, dword [ebp - 0x204]
or eax, 0x400000
mov dword [ebp - 0x204], eax
mov ecx, dword [ebp - 0x90c]
mov dword [ebp - 0x468], ecx
mov edx, dword [ebp - 0x468]
mov dword [ebp - 0x910], edx
mov eax, dword [ebp - 0x910]
mov ecx, dword [eax]
mov dword [ebp - 0x398], ecx
mov edx, dword [ebp - 0x204]
or edx, 0x800000
mov dword [ebp - 0x204], edx
mov eax, dword [ebp - 0x204]
and eax, 0x400000
je 0x10092b2c
and dword [ebp - 0x204], 0xffbfffff
mov ecx, dword [ebp - 0x204]
and ecx, 0x200000
je 0x10092b44
and dword [ebp - 0x204], 0xffdfffff
mov edx, dword [ebp - 0x204]
or edx, 0x100000
mov dword [ebp - 0x204], edx
lea eax, [ebp - 0x398]
mov dword [ebp - 0x914], eax
mov ecx, dword [ebp - 0x208]
add ecx, 0x8c
mov dword [ebp - 0x244], ecx
mov edx, dword [0x102bc148]
mov dword [ebp - 0x918], edx
lea eax, [ebp - 0x2f4]
mov dword [ebp - 0x46c], eax
mov ecx, dword [ebp - 0x46c]
mov edx, dword [ebp - 0x918]
mov dword [ecx], edx
mov eax, dword [ebp - 0x46c]
mov dword [ebp - 0xd40], eax
mov dword [ebp - 4], 5
mov ecx, dword [ebp - 0x244]
mov edx, dword [ebp - 0x2f4]
mov dword [ecx], edx
mov eax, dword [ebp - 0x2f4]
mov ecx, dword [eax]
mov dword [ebp - 0x91c], ecx
mov edx, dword [ebp - 0x244]
mov eax, dword [ebp - 0x91c]
mov dword [edx + 4], eax
mov ecx, dword [ebp - 0x244]
cmp dword [ecx + 4], 0
jne 0x10092bf0
mov dword [ebp - 4], 0xffffffff
jmp 0x10092e2a
mov dword [ebp - 0x31c], 0
mov edx, dword [ebp - 0x244]
mov eax, dword [edx + 4]
mov ecx, dword [ebp - 0x31c]
mov edx, dword [eax + ecx*4]
mov dword [ebp - 0x470], edx
cmp dword [ebp - 0x470], 0
jne 0x10092c24
mov byte [ebp - 0x211], 0
jmp 0x10092c7b
mov eax, dword [0x100fedc0]
mov dword [ebp - 0x920], eax
push 0x1c
lea ecx, [ebp - 0x100]
push ecx
mov edx, dword [ebp - 0x470]
push edx
call dword [ebp - 0x920]
test eax, eax
jne 0x10092c52
mov byte [ebp - 0x211], 0
jmp 0x10092c7b
mov eax, dword [ebp - 0xec]
and eax, 1
jne 0x10092c6b
mov ecx, dword [ebp - 0xec]
and ecx, 0x100
je 0x10092c74
mov byte [ebp - 0x211], 0
jmp 0x10092c7b
mov byte [ebp - 0x211], 1
movzx edx, byte [ebp - 0x211]
test edx, edx
je 0x10092c9a
mov eax, dword [ebp - 0x31c]
add eax, 1
mov dword [ebp - 0x31c], eax
jmp 0x10092bfa
mov ecx, dword [ebp - 0x244]
mov edx, dword [ebp - 0x31c]
mov dword [ecx + 0xc], edx
mov eax, dword [ebp - 0x244]
cmp dword [eax + 0xc], 0
jne 0x10092cc1
mov dword [ebp - 4], 0xffffffff
jmp 0x10092e2a
mov ecx, 1
test ecx, ecx
je 0x10092cde
mov edx, dword [ebp - 0x244]
mov eax, dword [edx + 0xc]
add eax, 1
mov dword [ebp - 0x474], eax
jmp 0x10092ced
mov ecx, dword [ebp - 0x244]
mov edx, dword [ecx + 0xc]
mov dword [ebp - 0x474], edx
mov edx, dword [ebp - 0x474]
lea ecx, [ebp - 0x928]
call fcn.1003f910
mov dword [ebp - 0x924], eax
mov eax, dword [ebp - 0x924]
push eax
mov ecx, dword [ebp - 0x244]
add ecx, 8
call fcn.1003f9b0
lea ecx, [ebp - 0x928]
call fcn.1003f370
mov ecx, dword [ebp - 0x244]
add ecx, 8
call fcn.1003f340
movzx ecx, al
test ecx, ecx
jne 0x10092d45
mov dword [ebp - 4], 0xffffffff
jmp 0x10092e2a
mov ecx, dword [ebp - 0x244]
add ecx, 8
call fcn.1003f350
mov dword [ebp - 0x92c], eax
mov edx, dword [ebp - 0x92c]
mov dword [ebp - 0x28], edx
mov eax, 1
test eax, eax
je 0x10092dde
mov ecx, dword [ebp - 0x28]
mov dword [ebp - 0x930], ecx
mov edx, dword [ebp - 0x244]
mov eax, dword [edx + 0xc]
lea ecx, [eax*4 + 4]
push ecx
mov edx, dword [ebp - 0x244]
mov eax, dword [edx + 4]
sub eax, 4
push eax
mov ecx, dword [ebp - 0x930]
push ecx
call sub.VCRUNTIME140.dll_memcpy
add esp, 0xc
mov edx, dword [ebp - 0x28]
mov dword [ebp - 0x934], edx
mov eax, dword [ebp - 0x934]
add eax, 4
mov dword [ebp - 0x938], eax
cmp dword [ebp - 0x2f4], 0
jne 0x10092dc4
jmp 0x10092dd2
mov ecx, dword [ebp - 0x2f4]
mov edx, dword [ebp - 0x938]
mov dword [ecx], edx
mov eax, dword [ebp - 0x244]
mov byte [eax + 0x10], 1
jmp 0x10092e23
mov ecx, dword [ebp - 0x28]
mov dword [ebp - 0x93c], ecx
mov edx, dword [ebp - 0x244]
mov eax, dword [edx + 0xc]
shl eax, 2
push eax
mov ecx, dword [ebp - 0x244]
mov edx, dword [ecx + 4]
push edx
mov eax, dword [ebp - 0x93c]
push eax
call sub.VCRUNTIME140.dll_memcpy
add esp, 0xc
cmp dword [ebp - 0x2f4], 0
jne 0x10092e18
jmp 0x10092e23
mov ecx, dword [ebp - 0x28]
mov edx, dword [ebp - 0x2f4]
mov dword [edx], ecx
mov dword [ebp - 4], 0xffffffff
mov eax, dword [ebp - 0x208]
add eax, 0x8c
mov dword [ebp - 0x2dc], eax
mov dword [ebp - 0x940], 0x100a30d0
mov ecx, dword [ebp - 0x2dc]
movzx edx, byte [ecx + 0x10]
test edx, edx
je 0x10092e63
mov eax, 0x43
add eax, 1
mov dword [ebp - 0x478], eax
jmp 0x10092e6d
mov dword [ebp - 0x478], 0x43
mov ecx, dword [ebp - 0x478]
mov dword [ebp - 0x47c], ecx
mov edx, dword [ebp - 0x2dc]
cmp dword [edx + 4], 0
je 0x10092eab
mov ecx, dword [ebp - 0x2dc]
add ecx, 8
call fcn.1003f340
movzx eax, al
test eax, eax
je 0x10092eab
mov ecx, dword [ebp - 0x2dc]
mov edx, dword [ebp - 0x47c]
cmp edx, dword [ecx + 0xc]
jbe 0x10092ed7
mov dword [ebp - 0x330], 0
mov eax, dword [ebp - 0x204]
or eax, 0x1000000
mov dword [ebp - 0x204], eax
lea ecx, [ebp - 0x330]
mov dword [ebp - 0x968], ecx
jmp 0x1009302b
mov edx, dword [ebp - 0x940]
mov dword [ebp - 0x944], edx
mov eax, dword [ebp - 0x944]
mov dword [ebp - 0x94c], eax
mov ecx, dword [ebp - 0x2dc]
add ecx, 8
mov dword [ebp - 0x948], ecx
mov edx, dword [ebp - 0x47c]
push edx
mov ecx, dword [ebp - 0x948]
call fcn.1003f360
mov ecx, dword [ebp - 0x94c]
mov dword [eax], ecx
mov edx, 0x43
shl edx, 2
mov eax, dword [ebp - 0x2dc]
add edx, dword [eax + 4]
mov dword [ebp - 0x480], edx
mov ecx, dword [ebp - 0x480]
cmp dword [ecx], 0
je 0x10092f7f
mov edx, dword [ebp - 0x480]
mov eax, dword [edx]
mov dword [ebp - 0x950], eax
mov ecx, dword [ebp - 0x950]
mov dword [ebp - 0x954], ecx
lea edx, [ebp - 0x954]
mov dword [ebp - 0x958], edx
mov eax, dword [ebp - 0x204]
or eax, 0x2000000
mov dword [ebp - 0x204], eax
mov ecx, dword [ebp - 0x958]
mov dword [ebp - 0x484], ecx
jmp 0x10092fb2
mov dword [ebp - 0x95c], 0
lea edx, [ebp - 0x95c]
mov dword [ebp - 0x960], edx
mov eax, dword [ebp - 0x204]
or eax, 0x4000000
mov dword [ebp - 0x204], eax
mov ecx, dword [ebp - 0x960]
mov dword [ebp - 0x484], ecx
mov edx, dword [ebp - 0x484]
mov dword [ebp - 0x964], edx
mov eax, dword [ebp - 0x964]
mov ecx, dword [eax]
mov dword [ebp - 0x330], ecx
mov edx, dword [ebp - 0x204]
or edx, 0x8000000
mov dword [ebp - 0x204], edx
mov eax, dword [ebp - 0x204]
and eax, 0x4000000
je 0x10092ff5
and dword [ebp - 0x204], 0xfbffffff
mov ecx, dword [ebp - 0x204]
and ecx, 0x2000000
je 0x1009300d
and dword [ebp - 0x204], 0xfdffffff
mov edx, dword [ebp - 0x204]
or edx, 0x1000000
mov dword [ebp - 0x204], edx
lea eax, [ebp - 0x330]
mov dword [ebp - 0x968], eax
mov ecx, dword [ebp - 0x208]
add ecx, 0x8c
mov dword [ebp - 0x2f0], ecx
mov dword [ebp - 0x96c], 0x100a3120
mov edx, dword [ebp - 0x2f0]
movzx eax, byte [edx + 0x10]
test eax, eax
je 0x10093065
mov ecx, 0x52
add ecx, 1
mov dword [ebp - 0x488], ecx
jmp 0x1009306f
mov dword [ebp - 0x488], 0x52
mov edx, dword [ebp - 0x488]
mov dword [ebp - 0x48c], edx
mov eax, dword [ebp - 0x2f0]
cmp dword [eax + 4], 0
je 0x100930ad
mov ecx, dword [ebp - 0x2f0]
add ecx, 8
call fcn.1003f340
movzx ecx, al
test ecx, ecx
je 0x100930ad
mov edx, dword [ebp - 0x2f0]
mov eax, dword [ebp - 0x48c]
cmp eax, dword [edx + 0xc]
jbe 0x100930da
mov dword [ebp - 0x334], 0
mov ecx, dword [ebp - 0x204]
or ecx, 0x10000000
mov dword [ebp - 0x204], ecx
lea edx, [ebp - 0x334]
mov dword [ebp - 0x994], edx
jmp 0x1009322e
mov eax, dword [ebp - 0x96c]
mov dword [ebp - 0x970], eax
mov ecx, dword [ebp - 0x970]
mov dword [ebp - 0x978], ecx
mov edx, dword [ebp - 0x2f0]
add edx, 8
mov dword [ebp - 0x974], edx
mov eax, dword [ebp - 0x48c]
push eax
mov ecx, dword [ebp - 0x974]
call fcn.1003f360
mov ecx, dword [ebp - 0x978]
mov dword [eax], ecx
mov edx, 0x52
shl edx, 2
mov eax, dword [ebp - 0x2f0]
add edx, dword [eax + 4]
mov dword [ebp - 0x490], edx
mov ecx, dword [ebp - 0x490]
cmp dword [ecx], 0
je 0x10093182
mov edx, dword [ebp - 0x490]
mov eax, dword [edx]
mov dword [ebp - 0x97c], eax
mov ecx, dword [ebp - 0x97c]
mov dword [ebp - 0x980], ecx
lea edx, [ebp - 0x980]
mov dword [ebp - 0x984], edx
mov eax, dword [ebp - 0x204]
or eax, 0x20000000
mov dword [ebp - 0x204], eax
mov ecx, dword [ebp - 0x984]
mov dword [ebp - 0x494], ecx
jmp 0x100931b5
mov dword [ebp - 0x988], 0
lea edx, [ebp - 0x988]
mov dword [ebp - 0x98c], edx
mov eax, dword [ebp - 0x204]
or eax, 0x40000000
mov dword [ebp - 0x204], eax
mov ecx, dword [ebp - 0x98c]
mov dword [ebp - 0x494], ecx
mov edx, dword [ebp - 0x494]
mov dword [ebp - 0x990], edx
mov eax, dword [ebp - 0x990]
mov ecx, dword [eax]
mov dword [ebp - 0x334], ecx
mov edx, dword [ebp - 0x204]
or edx, 0x80000000
mov dword [ebp - 0x204], edx
mov eax, dword [ebp - 0x204]
and eax, 0x40000000
je 0x100931f8
and dword [ebp - 0x204], 0xbfffffff
mov ecx, dword [ebp - 0x204]
and ecx, 0x20000000
je 0x10093210
and dword [ebp - 0x204], 0xdfffffff
mov edx, dword [ebp - 0x204]
or edx, 0x10000000
mov dword [ebp - 0x204], edx
lea eax, [ebp - 0x334]
mov dword [ebp - 0x994], eax
mov ecx, dword [ebp - 0x208]
add ecx, 0x8c
mov dword [ebp - 0x2ec], ecx
mov dword [ebp - 0x998], 0x100a31b0
mov edx, dword [ebp - 0x2ec]
movzx eax, byte [edx + 0x10]
test eax, eax
je 0x10093268
mov ecx, 0x74
add ecx, 1
mov dword [ebp - 0x498], ecx
jmp 0x10093272
mov dword [ebp - 0x498], 0x74
mov edx, dword [ebp - 0x498]
mov dword [ebp - 0x49c], edx
mov eax, dword [ebp - 0x2ec]
cmp dword [eax + 4], 0
je 0x100932b0
mov ecx, dword [ebp - 0x2ec]
add ecx, 8
call fcn.1003f340
movzx ecx, al
test ecx, ecx
je 0x100932b0
mov edx, dword [ebp - 0x2ec]
mov eax, dword [ebp - 0x49c]
cmp eax, dword [edx + 0xc]
jbe 0x100932da
mov dword [ebp - 0x338], 0
mov ecx, dword [ebp - 0x1fc]
or ecx, 1
mov dword [ebp - 0x1fc], ecx
lea edx, [ebp - 0x338]
mov dword [ebp - 0x9c0], edx
jmp 0x10093419
mov eax, dword [ebp - 0x998]
mov dword [ebp - 0x99c], eax
mov ecx, dword [ebp - 0x99c]
mov dword [ebp - 0x9a4], ecx
mov edx, dword [ebp - 0x2ec]
add edx, 8
mov dword [ebp - 0x9a0], edx
mov eax, dword [ebp - 0x49c]
push eax
mov ecx, dword [ebp - 0x9a0]
call fcn.1003f360
mov ecx, dword [ebp - 0x9a4]
mov dword [eax], ecx
mov edx, 0x74
shl edx, 2
mov eax, dword [ebp - 0x2ec]
add edx, dword [eax + 4]
mov dword [ebp - 0x4a0], edx
mov ecx, dword [ebp - 0x4a0]
cmp dword [ecx], 0
je 0x10093380
mov edx, dword [ebp - 0x4a0]
mov eax, dword [edx]
mov dword [ebp - 0x9a8], eax
mov ecx, dword [ebp - 0x9a8]
mov dword [ebp - 0x9ac], ecx
lea edx, [ebp - 0x9ac]
mov dword [ebp - 0x9b0], edx
mov eax, dword [ebp - 0x1fc]
or eax, 2
mov dword [ebp - 0x1fc], eax
mov ecx, dword [ebp - 0x9b0]
mov dword [ebp - 0x4a4], ecx
jmp 0x100933b1
mov dword [ebp - 0x9b4], 0
lea edx, [ebp - 0x9b4]
mov dword [ebp - 0x9b8], edx
mov eax, dword [ebp - 0x1fc]
or eax, 4
mov dword [ebp - 0x1fc], eax
mov ecx, dword [ebp - 0x9b8]
mov dword [ebp - 0x4a4], ecx
mov edx, dword [ebp - 0x4a4]
mov dword [ebp - 0x9bc], edx
mov eax, dword [ebp - 0x9bc]
mov ecx, dword [eax]
mov dword [ebp - 0x338], ecx
mov edx, dword [ebp - 0x1fc]
or edx, 8
mov dword [ebp - 0x1fc], edx
mov eax, dword [ebp - 0x1fc]
and eax, 4
je 0x100933ec
and dword [ebp - 0x1fc], 0xfffffffb
mov ecx, dword [ebp - 0x1fc]
and ecx, 2
je 0x100933fe
and dword [ebp - 0x1fc], 0xfffffffd
mov edx, dword [ebp - 0x1fc]
or edx, 1
mov dword [ebp - 0x1fc], edx
lea eax, [ebp - 0x338]
mov dword [ebp - 0x9c0], eax
mov ecx, dword [ebp - 0x208]
add ecx, 0xdc
mov dword [ebp - 0x248], ecx
mov edx, dword [0x102bc168]
mov dword [ebp - 0x9c4], edx
lea eax, [ebp - 0x2e8]
mov dword [ebp - 0x4a8], eax
mov ecx, dword [ebp - 0x4a8]
mov edx, dword [ebp - 0x9c4]
mov dword [ecx], edx
mov eax, dword [ebp - 0x4a8]
mov dword [ebp - 0xd44], eax
mov dword [ebp - 4], 6
mov ecx, dword [ebp - 0x248]
mov edx, dword [ebp - 0x2e8]
mov dword [ecx], edx
mov eax, dword [ebp - 0x2e8]
mov ecx, dword [eax]
mov dword [ebp - 0x9c8], ecx
mov edx, dword [ebp - 0x248]
mov eax, dword [ebp - 0x9c8]
mov dword [edx + 4], eax
mov ecx, dword [ebp - 0x248]
cmp dword [ecx + 4], 0
jne 0x100934a7
mov dword [ebp - 4], 0xffffffff
jmp 0x100936e1
mov dword [ebp - 0x30c], 0
mov edx, dword [ebp - 0x248]
mov eax, dword [edx + 4]
mov ecx, dword [ebp - 0x30c]
mov edx, dword [eax + ecx*4]
mov dword [ebp - 0x4ac], edx
cmp dword [ebp - 0x4ac], 0
jne 0x100934db
mov byte [ebp - 0x212], 0
jmp 0x10093532
mov eax, dword [0x100fedc0]
mov dword [ebp - 0x9cc], eax
push 0x1c
lea ecx, [ebp - 0xe4]
push ecx
mov edx, dword [ebp - 0x4ac]
push edx
call dword [ebp - 0x9cc]
test eax, eax
jne 0x10093509
mov byte [ebp - 0x212], 0
jmp 0x10093532
mov eax, dword [ebp - 0xd0]
and eax, 1
jne 0x10093522
mov ecx, dword [ebp - 0xd0]
and ecx, 0x100
je 0x1009352b
mov byte [ebp - 0x212], 0
jmp 0x10093532
mov byte [ebp - 0x212], 1
movzx edx, byte [ebp - 0x212]
test edx, edx
je 0x10093551
mov eax, dword [ebp - 0x30c]
add eax, 1
mov dword [ebp - 0x30c], eax
jmp 0x100934b1
mov ecx, dword [ebp - 0x248]
mov edx, dword [ebp - 0x30c]
mov dword [ecx + 0xc], edx
mov eax, dword [ebp - 0x248]
cmp dword [eax + 0xc], 0
jne 0x10093578
mov dword [ebp - 4], 0xffffffff
jmp 0x100936e1
mov ecx, 1
test ecx, ecx
je 0x10093595
mov edx, dword [ebp - 0x248]
mov eax, dword [edx + 0xc]
add eax, 1
mov dword [ebp - 0x4b0], eax
jmp 0x100935a4
mov ecx, dword [ebp - 0x248]
mov edx, dword [ecx + 0xc]
mov dword [ebp - 0x4b0], edx
mov edx, dword [ebp - 0x4b0]
lea ecx, [ebp - 0x9d4]
call fcn.1003f910
mov dword [ebp - 0x9d0], eax
mov eax, dword [ebp - 0x9d0]
push eax
mov ecx, dword [ebp - 0x248]
add ecx, 8
call fcn.1003f9b0
lea ecx, [ebp - 0x9d4]
call fcn.1003f370
mov ecx, dword [ebp - 0x248]
add ecx, 8
call fcn.1003f340
movzx ecx, al
test ecx, ecx
jne 0x100935fc
mov dword [ebp - 4], 0xffffffff
jmp 0x100936e1
mov ecx, dword [ebp - 0x248]
add ecx, 8
call fcn.1003f350
mov dword [ebp - 0x9d8], eax
mov edx, dword [ebp - 0x9d8]
mov dword [ebp - 0x24], edx
mov eax, 1
test eax, eax
je 0x10093695
mov ecx, dword [ebp - 0x24]
mov dword [ebp - 0x9dc], ecx
mov edx, dword [ebp - 0x248]
mov eax, dword [edx + 0xc]
lea ecx, [eax*4 + 4]
push ecx
mov edx, dword [ebp - 0x248]
mov eax, dword [edx + 4]
sub eax, 4
push eax
mov ecx, dword [ebp - 0x9dc]
push ecx
call sub.VCRUNTIME140.dll_memcpy
add esp, 0xc
mov edx, dword [ebp - 0x24]
mov dword [ebp - 0x9e0], edx
mov eax, dword [ebp - 0x9e0]
add eax, 4
mov dword [ebp - 0x9e4], eax
cmp dword [ebp - 0x2e8], 0
jne 0x1009367b
jmp 0x10093689
mov ecx, dword [ebp - 0x2e8]
mov edx, dword [ebp - 0x9e4]
mov dword [ecx], edx
mov eax, dword [ebp - 0x248]
mov byte [eax + 0x10], 1
jmp 0x100936da
mov ecx, dword [ebp - 0x24]
mov dword [ebp - 0x9e8], ecx
mov edx, dword [ebp - 0x248]
mov eax, dword [edx + 0xc]
shl eax, 2
push eax
mov ecx, dword [ebp - 0x248]
mov edx, dword [ecx + 4]
push edx
mov eax, dword [ebp - 0x9e8]
push eax
call sub.VCRUNTIME140.dll_memcpy
add esp, 0xc
cmp dword [ebp - 0x2e8], 0
jne 0x100936cf
jmp 0x100936da
mov ecx, dword [ebp - 0x24]
mov edx, dword [ebp - 0x2e8]
mov dword [edx], ecx
mov dword [ebp - 4], 0xffffffff
mov eax, dword [ebp - 0x208]
add eax, 0xdc
mov dword [ebp - 0x2e0], eax
mov dword [ebp - 0x9ec], 0x1008a350
mov ecx, dword [ebp - 0x2e0]
movzx edx, byte [ecx + 0x10]
test edx, edx
je 0x1009371a