Function at 0x100a6c90
Capabilities:
Parse pe header

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x101cdddd
mov eax, dword fs:[0]
push eax
sub esp, 0x4c
mov eax, dword [0x10205ac8]
xor eax, ebp
mov dword [ebp - 0x10], eax
push ebx
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov esi, ecx
mov eax, dword [ebp + 0x2c]
mov dword [esi + 0x2fc], eax
mov al, byte [ebp + 0x28]
mov byte [esi + 0x300], al
call fcn.100aae00
call fcn.10070db0
mov ebx, eax
call fcn.10071050
cmp byte [ebp + 8], 0
mov edx, 0x601
mov edi, 0x100445c8
mov dword [ebp - 0x3c], 0x602
movzx ecx, word [eax + 6]
mov eax, ecx
mov dword [ebp - 0x38], eax
jne 0x100a7a51
cmp cx, dx
jb 0x100a709d
cmp byte [ebp + 0x28], 0
jne 0x100a709d
movzx eax, word [0x1020b6e5]
mov ecx, dword [esi + 0x2fc]
push eax
call fcn.100cfdf0
test eax, eax
mov dword [ebp - 0x1c], 0
mov edx, edi
mov dword [ebp - 0x18], 0xf
cmovne edx, eax
mov byte [ebp - 0x2c], 0
mov ecx, edx
lea eax, [ecx + 1]
mov dword [ebp - 0x14], eax
nop dword [eax + eax]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x100a6d50
sub ecx, dword [ebp - 0x14]
push ecx
push edx
lea ecx, [ebp - 0x2c]
call fcn.10074240
mov dword [ebp - 0x30], 0x100446f8
push dword [ebx + 0x2dc]
lea ecx, [ebp - 0x30]
mov dword [ebp - 4], 0
push 0x1009d0c0
push ecx
lea ecx, [esi + 0x1e4]
call fcn.100aeba0
lea ecx, [ebp - 0x30]
mov dword [ebp - 4], 0xffffffff
call fcn.1006c640
movzx eax, word [0x1020b6e7]
mov ecx, dword [esi + 0x2fc]
push eax
call fcn.100cfdf0
test eax, eax
mov dword [ebp - 0x1c], 0
mov edx, edi
mov dword [ebp - 0x18], 0xf
cmovne edx, eax
mov byte [ebp - 0x2c], 0
mov ecx, edx
lea eax, [ecx + 1]
mov dword [ebp - 0x14], eax
nop
mov al, byte [ecx]
inc ecx
test al, al
jne 0x100a6dd0
sub ecx, dword [ebp - 0x14]
push ecx
push edx
lea ecx, [ebp - 0x2c]
call fcn.10074240
mov dword [ebp - 0x30], 0x100446f8
push dword [ebx + 0x1e0]
lea eax, [ebp - 0x30]
mov dword [ebp - 4], 1
push 0x1009fcc0
push eax
lea ecx, [esi + 0x1e4]
call fcn.100aeba0
lea ecx, [ebp - 0x30]
mov dword [ebp - 4], 0xffffffff
call fcn.1006c640
movzx eax, word [0x1020b6e9]
mov ecx, dword [esi + 0x2fc]
push eax
call fcn.100cfdf0
test eax, eax
mov dword [ebp - 0x1c], 0
mov edx, edi
mov dword [ebp - 0x18], 0xf
cmovne edx, eax
mov byte [ebp - 0x2c], 0
mov ecx, edx
lea eax, [ecx + 1]
mov dword [ebp - 0x14], eax
nop
mov al, byte [ecx]
inc ecx
test al, al
jne 0x100a6e50
sub ecx, dword [ebp - 0x14]
push ecx
push edx
lea ecx, [ebp - 0x2c]
call fcn.10074240
mov dword [ebp - 0x30], 0x100446f8
push dword [ebx + 0x2e0]
lea eax, [ebp - 0x30]
mov dword [ebp - 4], 2
push 0x1009d0f0
push eax
lea ecx, [esi + 0x1e4]
call fcn.100aeba0
lea ecx, [ebp - 0x30]
mov dword [ebp - 4], 0xffffffff
call fcn.1006c640
movzx eax, word [0x1020b6eb]
mov ecx, dword [esi + 0x2fc]
push eax
call fcn.100cfdf0
test eax, eax
mov dword [ebp - 0x1c], 0
mov edx, edi
mov dword [ebp - 0x18], 0xf
cmovne edx, eax
mov byte [ebp - 0x2c], 0
mov ecx, edx
lea eax, [ecx + 1]
mov dword [ebp - 0x14], eax
nop
mov al, byte [ecx]
inc ecx
test al, al
jne 0x100a6ed0
sub ecx, dword [ebp - 0x14]
push ecx
push edx
lea ecx, [ebp - 0x2c]
call fcn.10074240
mov dword [ebp - 0x30], 0x100446f8
push dword [ebx + 0x2e4]
lea eax, [ebp - 0x30]
mov dword [ebp - 4], 3
push 0x1009fd00
push eax
lea ecx, [esi + 0x1e4]
call fcn.100aeba0
lea ecx, [ebp - 0x30]
mov dword [ebp - 4], 0xffffffff
call fcn.1006c640
movzx eax, word [0x1020b6ed]
mov ecx, dword [esi + 0x2fc]
push eax
call fcn.100cfdf0
test eax, eax
mov dword [ebp - 0x1c], 0
mov edx, edi
mov dword [ebp - 0x18], 0xf
cmovne edx, eax
mov byte [ebp - 0x2c], 0
mov ecx, edx
lea eax, [ecx + 1]
mov dword [ebp - 0x14], eax
nop
mov al, byte [ecx]
inc ecx
test al, al
jne 0x100a6f50
sub ecx, dword [ebp - 0x14]
push ecx
push edx
lea ecx, [ebp - 0x2c]
call fcn.10074240
mov dword [ebp - 0x30], 0x100446f8
push dword [ebx + 0x2e8]
lea ecx, [ebp - 0x30]
mov dword [ebp - 4], 4
push 0x1009c170
push ecx
lea ecx, [esi + 0xc4]
call fcn.100aeba0
lea ecx, [ebp - 0x30]
mov dword [ebp - 4], 0xffffffff
call fcn.1006c640
movzx eax, word [0x1020b6ef]
mov ecx, dword [esi + 0x2fc]
push eax
call fcn.100cfdf0
test eax, eax
mov dword [ebp - 0x1c], 0
mov edx, edi
mov dword [ebp - 0x18], 0xf
cmovne edx, eax
mov byte [ebp - 0x2c], 0
mov ecx, edx
lea eax, [ecx + 1]
mov dword [ebp - 0x14], eax
nop
mov al, byte [ecx]
inc ecx
test al, al
jne 0x100a6fd0
sub ecx, dword [ebp - 0x14]
push ecx
push edx
lea ecx, [ebp - 0x2c]
call fcn.10074240
mov dword [ebp - 0x30], 0x100446f8
push dword [ebx + 0x2ec]
lea eax, [ebp - 0x30]
mov dword [ebp - 4], 5
push 0x1009f7d0
push eax
lea ecx, [esi + 0xc4]
call fcn.100aeba0
lea ecx, [ebp - 0x30]
mov dword [ebp - 4], 0xffffffff
call fcn.1006c640
movzx eax, word [0x1020b6e5]
mov ecx, dword [esi + 0x2fc]
push eax
call fcn.100cfdf0
test eax, eax
mov dword [ebp - 0x1c], 0
mov edx, edi
mov dword [ebp - 0x18], 0xf
cmovne edx, eax
mov byte [ebp - 0x2c], 0
mov ecx, edx
lea eax, [ecx + 1]
mov dword [ebp - 0x14], eax
nop
mov al, byte [ecx]
inc ecx
test al, al
jne 0x100a7050
sub ecx, dword [ebp - 0x14]
push ecx
push edx
lea ecx, [ebp - 0x2c]
call fcn.10074240
mov dword [ebp - 0x30], 0x100446f8
push dword [ebx + 0x2dc]
lea ecx, [ebp - 0x30]
mov dword [ebp - 4], 6
push 0x1009d0c0
push ecx
lea ecx, [esi + 4]
call fcn.100aeba0
lea ecx, [ebp - 0x30]
mov dword [ebp - 4], 0xffffffff
call fcn.1006c640
jmp 0x100a7399
movzx eax, word [0x1020b6e5]
mov ecx, dword [esi + 0x2fc]
push eax
call fcn.100cfdf0
test eax, eax
mov dword [ebp - 0x1c], 0
mov edx, edi
mov dword [ebp - 0x18], 0xf
cmovne edx, eax
mov byte [ebp - 0x2c], 0
mov ecx, edx
lea eax, [ecx + 1]
mov dword [ebp - 0x14], eax
mov al, byte [ecx]
inc ecx
test al, al
jne 0x100a70d1
sub ecx, dword [ebp - 0x14]
push ecx
push edx
lea ecx, [ebp - 0x2c]
call fcn.10074240
mov dword [ebp - 0x30], 0x100446f8
push dword [ebx + 0x2dc]
lea ecx, [ebp - 0x30]
mov dword [ebp - 4], 7
push 0x1009d0c0
push ecx
lea ecx, [esi + 4]
call fcn.100aeba0
mov edx, dword [ebp - 0x18]
mov dword [ebp - 4], 0xffffffff
mov dword [ebp - 0x30], 0x100446f8
cmp edx, 0x10
jb 0x100a715a
mov ecx, dword [ebp - 0x2c]
inc edx
mov eax, ecx
mov dword [ebp - 4], 8
cmp edx, 0x1000
jb 0x100a7149
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x100aabf1
push edx
push ecx
call fcn.101b44e7
add esp, 8
mov dword [ebp - 4], 0xffffffff
movzx eax, word [0x1020b6e7]
mov ecx, dword [esi + 0x2fc]
push eax
call fcn.100cfdf0
test eax, eax
mov dword [ebp - 0x1c], 0
mov edx, edi
mov dword [ebp - 0x18], 0xf
cmovne edx, eax
mov byte [ebp - 0x2c], 0
mov ecx, edx
lea eax, [ecx + 1]
mov dword [ebp - 0x14], eax
nop
mov al, byte [ecx]
inc ecx
test al, al
jne 0x100a7190
sub ecx, dword [ebp - 0x14]
push ecx
push edx
lea ecx, [ebp - 0x2c]
call fcn.10074240
mov dword [ebp - 0x30], 0x100446f8
push dword [ebx + 0x1e0]
lea eax, [ebp - 0x30]
mov dword [ebp - 4], 9
push 0x1009fcc0
push eax
lea ecx, [esi + 4]
call fcn.100aeba0
mov edx, dword [ebp - 0x18]
mov dword [ebp - 4], 0xffffffff
mov dword [ebp - 0x30], 0x100446f8
cmp edx, 0x10
jb 0x100a7219
mov ecx, dword [ebp - 0x2c]
inc edx
mov eax, ecx
mov dword [ebp - 4], 0xa
cmp edx, 0x1000
jb 0x100a7208
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x100aabf6
push edx
push ecx
call fcn.101b44e7
add esp, 8
mov dword [ebp - 4], 0xffffffff
movzx eax, word [0x1020b6e9]
mov ecx, dword [esi + 0x2fc]
push eax
call fcn.100cfdf0
test eax, eax
mov dword [ebp - 0x1c], 0
mov edx, edi
mov dword [ebp - 0x18], 0xf
cmovne edx, eax
mov byte [ebp - 0x2c], 0
mov ecx, edx
lea eax, [ecx + 1]
mov dword [ebp - 0x14], eax
nop dword [eax]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x100a7250
sub ecx, dword [ebp - 0x14]
push ecx
push edx
lea ecx, [ebp - 0x2c]
call fcn.10074240
mov dword [ebp - 0x30], 0x100446f8
push dword [ebx + 0x2e0]
lea eax, [ebp - 0x30]
mov dword [ebp - 4], 0xb
push 0x1009d0f0
push eax
lea ecx, [esi + 4]
call fcn.100aeba0
mov edx, dword [ebp - 0x18]
mov dword [ebp - 4], 0xffffffff
mov dword [ebp - 0x30], 0x100446f8
cmp edx, 0x10
jb 0x100a72d9
mov ecx, dword [ebp - 0x2c]
inc edx
mov eax, ecx
mov dword [ebp - 4], 0xc
cmp edx, 0x1000
jb 0x100a72c8
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x100aabfb
push edx
push ecx
call fcn.101b44e7
add esp, 8
mov dword [ebp - 4], 0xffffffff
movzx eax, word [0x1020b6eb]
mov ecx, dword [esi + 0x2fc]
push eax
call fcn.100cfdf0
test eax, eax
mov dword [ebp - 0x1c], 0
mov edx, edi
mov dword [ebp - 0x18], 0xf
cmovne edx, eax
mov byte [ebp - 0x2c], 0
mov ecx, edx
lea eax, [ecx + 1]
mov dword [ebp - 0x14], eax
nop dword [eax]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x100a7310
sub ecx, dword [ebp - 0x14]
push ecx
push edx
lea ecx, [ebp - 0x2c]
call fcn.10074240
mov dword [ebp - 0x30], 0x100446f8
push dword [ebx + 0x2e4]
lea eax, [ebp - 0x30]
mov dword [ebp - 4], 0xd
push 0x1009fd00
push eax
lea ecx, [esi + 4]
call fcn.100aeba0
mov edx, dword [ebp - 0x18]
mov dword [ebp - 4], 0xffffffff
mov dword [ebp - 0x30], 0x100446f8
cmp edx, 0x10
jb 0x100a7399
mov ecx, dword [ebp - 0x2c]
inc edx
mov eax, ecx
mov dword [ebp - 4], 0xe
cmp edx, 0x1000
jb 0x100a7388
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x100aac00
push edx
push ecx
call fcn.101b44e7
add esp, 8
mov dword [ebp - 4], 0xffffffff
mov eax, dword [ebp - 0x38]
cmp ax, word [ebp - 0x3c]
jae 0x100a752c
movzx eax, word [0x1020b6ed]
mov ecx, dword [esi + 0x2fc]
push eax
call fcn.100cfdf0
test eax, eax
mov dword [ebp - 0x1c], 0
mov edx, edi
mov dword [ebp - 0x18], 0xf
cmovne edx, eax
mov byte [ebp - 0x2c], 0
mov ecx, edx
lea eax, [ecx + 1]
mov dword [ebp - 0x14], eax
nop word [eax + eax]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x100a73e0
sub ecx, dword [ebp - 0x14]
push ecx
push edx
lea ecx, [ebp - 0x2c]
call fcn.10074240
mov dword [ebp - 0x30], 0x100446f8
push dword [ebx + 0x2e8]
lea eax, [ebp - 0x30]
mov dword [ebp - 4], 0xf
push 0x1009c170
push eax
lea ecx, [esi + 4]
call fcn.100aeba0
mov edx, dword [ebp - 0x18]
mov dword [ebp - 4], 0xffffffff
mov dword [ebp - 0x30], 0x100446f8
cmp edx, 0x10
jb 0x100a7469
mov ecx, dword [ebp - 0x2c]
inc edx
mov eax, ecx
mov dword [ebp - 4], 0x10
cmp edx, 0x1000
jb 0x100a7458
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x100aac05
push edx
push ecx
call fcn.101b44e7
add esp, 8
mov dword [ebp - 4], 0xffffffff
movzx eax, word [0x1020b6ef]
mov ecx, dword [esi + 0x2fc]
push eax
call fcn.100cfdf0
test eax, eax
mov dword [ebp - 0x1c], 0
mov edx, edi
mov dword [ebp - 0x18], 0xf
cmovne edx, eax
mov byte [ebp - 0x2c], 0
mov ecx, edx
lea eax, [ecx + 1]
mov dword [ebp - 0x14], eax
nop dword [eax]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x100a74a0
sub ecx, dword [ebp - 0x14]
push ecx
push edx
lea ecx, [ebp - 0x2c]
call fcn.10074240
mov dword [ebp - 0x30], 0x100446f8
push dword [ebx + 0x2ec]
lea eax, [ebp - 0x30]
mov dword [ebp - 4], 0x11
push 0x1009f7d0
push eax
lea ecx, [esi + 4]
call fcn.100aeba0
mov edx, dword [ebp - 0x18]
mov dword [ebp - 4], 0xffffffff
mov dword [ebp - 0x30], 0x100446f8
cmp edx, 0x10
jb 0x100a7529
mov ecx, dword [ebp - 0x2c]
inc edx
mov eax, ecx
mov dword [ebp - 4], 0x12
cmp edx, 0x1000
jb 0x100a7518
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x100aac0a
push edx
push ecx
call fcn.101b44e7
add esp, 8
mov dword [ebp - 4], 0xffffffff
mov eax, dword [ebp - 0x38]
mov ecx, 0x601
cmp ax, cx
jb 0x100a7745
cmp byte [ebp + 0x28], 0
jne 0x100a7745
movzx eax, word [0x1020b6f3]
mov ecx, dword [esi + 0x2fc]
push eax
call fcn.100cfdf0
test eax, eax
mov dword [ebp - 0x1c], 0
mov edx, edi
mov dword [ebp - 0x18], 0xf
cmovne edx, eax
mov byte [ebp - 0x2c], 0
mov ecx, edx
lea eax, [ecx + 1]
mov dword [ebp - 0x14], eax
mov al, byte [ecx]
inc ecx
test al, al
jne 0x100a7578
sub ecx, dword [ebp - 0x14]
push ecx
push edx
lea ecx, [ebp - 0x2c]
call fcn.10074240
mov dword [ebp - 0x30], 0x100446f8
push dword [ebx + 0x1c0]
lea ecx, [ebp - 0x30]
mov dword [ebp - 4], 0x13
push 0x1009d5c0
push ecx
lea ecx, [esi + 0x184]
call fcn.100aeba0
lea ecx, [ebp - 0x30]
mov dword [ebp - 4], 0xffffffff
call fcn.1006c640
movzx eax, word [0x1020b6f5]
mov ecx, dword [esi + 0x2fc]
push eax
call fcn.100cfdf0
test eax, eax
mov dword [ebp - 0x1c], 0
mov edx, edi
mov dword [ebp - 0x18], 0xf
cmovne edx, eax
mov byte [ebp - 0x2c], 0
mov ecx, edx
lea eax, [ecx + 1]
mov dword [ebp - 0x14], eax
mov al, byte [ecx]
inc ecx
test al, al
jne 0x100a75f7
sub ecx, dword [ebp - 0x14]
push ecx
push edx
lea ecx, [ebp - 0x2c]
call fcn.10074240
mov dword [ebp - 0x30], 0x100446f8
push dword [ebx + 0x1d0]
lea eax, [ebp - 0x30]
mov dword [ebp - 4], 0x14
push 0x1009d720
push eax
lea ecx, [esi + 0x184]
call fcn.100aeba0
lea ecx, [ebp - 0x30]
mov dword [ebp - 4], 0xffffffff
call fcn.1006c640
movzx eax, word [0x1020b6f7]
mov ecx, dword [esi + 0x2fc]
push eax
call fcn.100cfdf0
test eax, eax
mov dword [ebp - 0x1c], 0
mov edx, edi
mov dword [ebp - 0x18], 0xf
cmovne edx, eax
mov byte [ebp - 0x2c], 0
mov ecx, edx
lea eax, [ecx + 1]
mov dword [ebp - 0x14], eax
mov al, byte [ecx]
inc ecx
test al, al
jne 0x100a7676
sub ecx, dword [ebp - 0x14]
push ecx
push edx
lea ecx, [ebp - 0x2c]
call fcn.10074240
mov dword [ebp - 0x30], 0x100446f8
push dword [ebx + 0x1c4]
lea eax, [ebp - 0x30]
mov dword [ebp - 4], 0x15
push 0x1009d660
push eax
lea ecx, [esi + 0x184]
call fcn.100aeba0
lea ecx, [ebp - 0x30]
mov dword [ebp - 4], 0xffffffff
call fcn.1006c640
movzx eax, word [0x1020b6f9]
mov ecx, dword [esi + 0x2fc]
push eax
call fcn.100cfdf0
test eax, eax
mov dword [ebp - 0x1c], 0
mov edx, edi
mov dword [ebp - 0x18], 0xf
cmovne edx, eax
mov byte [ebp - 0x2c], 0
mov ecx, edx
lea eax, [ecx + 1]
mov dword [ebp - 0x14], eax
mov al, byte [ecx]
inc ecx
test al, al
jne 0x100a76f5
sub ecx, dword [ebp - 0x14]
push ecx
push edx
lea ecx, [ebp - 0x2c]
call fcn.10074240
mov dword [ebp - 0x30], 0x100446f8
push dword [ebx + 0x1d4]
lea eax, [ebp - 0x30]
mov dword [ebp - 4], 0x16
push 0x1009d6c0
push eax
lea ecx, [esi + 0x184]
call fcn.100aeba0
lea ecx, [ebp - 0x30]
mov dword [ebp - 4], 0xffffffff
call fcn.1006c640
jmp 0x100a7a49
movzx eax, word [0x1020b6f3]
mov ecx, dword [esi + 0x2fc]
push eax
call fcn.100cfdf0
test eax, eax
mov dword [ebp - 0x1c], 0
mov edx, edi
mov dword [ebp - 0x18], 0xf
cmovne edx, eax
mov byte [ebp - 0x2c], 0
mov ecx, edx
lea eax, [ecx + 1]
mov dword [ebp - 0x14], eax
nop dword [eax]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x100a7780
sub ecx, dword [ebp - 0x14]
push ecx
push edx
lea ecx, [ebp - 0x2c]
call fcn.10074240
mov dword [ebp - 0x30], 0x100446f8
push dword [ebx + 0x1c0]
lea eax, [ebp - 0x30]
mov dword [ebp - 4], 0x17
push 0x1009d5c0
push eax
lea ecx, [esi + 4]
call fcn.100aeba0
mov edx, dword [ebp - 0x18]
mov dword [ebp - 4], 0xffffffff
mov dword [ebp - 0x30], 0x100446f8
cmp edx, 0x10
jb 0x100a7809
mov ecx, dword [ebp - 0x2c]
inc edx
mov eax, ecx
mov dword [ebp - 4], 0x18
cmp edx, 0x1000
jb 0x100a77f8
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x100aac0f
push edx
push ecx
call fcn.101b44e7
add esp, 8
mov dword [ebp - 4], 0xffffffff
movzx eax, word [0x1020b6f5]
mov ecx, dword [esi + 0x2fc]
push eax
call fcn.100cfdf0
test eax, eax
mov dword [ebp - 0x1c], 0
mov edx, edi
mov dword [ebp - 0x18], 0xf
cmovne edx, eax
mov byte [ebp - 0x2c], 0
mov ecx, edx
lea eax, [ecx + 1]
mov dword [ebp - 0x14], eax
nop dword [eax]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x100a7840
sub ecx, dword [ebp - 0x14]
push ecx
push edx
lea ecx, [ebp - 0x2c]
call fcn.10074240
mov dword [ebp - 0x30], 0x100446f8
push dword [ebx + 0x1d0]
lea eax, [ebp - 0x30]
mov dword [ebp - 4], 0x19
push 0x1009d720
push eax
lea ecx, [esi + 4]
call fcn.100aeba0
mov edx, dword [ebp - 0x18]
mov dword [ebp - 4], 0xffffffff
mov dword [ebp - 0x30], 0x100446f8
cmp edx, 0x10
jb 0x100a78c9
mov ecx, dword [ebp - 0x2c]
inc edx
mov eax, ecx
mov dword [ebp - 4], 0x1a
cmp edx, 0x1000
jb 0x100a78b8
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x100aac14
push edx
push ecx
call fcn.101b44e7
add esp, 8
mov dword [ebp - 4], 0xffffffff
movzx eax, word [0x1020b6f7]
mov ecx, dword [esi + 0x2fc]
push eax
call fcn.100cfdf0
test eax, eax
mov dword [ebp - 0x1c], 0
mov edx, edi
mov dword [ebp - 0x18], 0xf
cmovne edx, eax
mov byte [ebp - 0x2c], 0
mov ecx, edx
lea eax, [ecx + 1]
mov dword [ebp - 0x14], eax
nop dword [eax]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x100a7900
sub ecx, dword [ebp - 0x14]
push ecx
push edx
lea ecx, [ebp - 0x2c]
call fcn.10074240
mov dword [ebp - 0x30], 0x100446f8
push dword [ebx + 0x1c4]
lea eax, [ebp - 0x30]
mov dword [ebp - 4], 0x1b
push 0x1009d660
push eax
lea ecx, [esi + 4]
call fcn.100aeba0
mov edx, dword [ebp - 0x18]
mov dword [ebp - 4], 0xffffffff
mov dword [ebp - 0x30], 0x100446f8
cmp edx, 0x10
jb 0x100a7989
mov ecx, dword [ebp - 0x2c]
inc edx
mov eax, ecx
mov dword [ebp - 4], 0x1c
cmp edx, 0x1000
jb 0x100a7978
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x100aac19
push edx
push ecx
call fcn.101b44e7
add esp, 8
mov dword [ebp - 4], 0xffffffff
movzx eax, word [0x1020b6f9]
mov ecx, dword [esi + 0x2fc]
push eax
call fcn.100cfdf0
test eax, eax
mov dword [ebp - 0x1c], 0
mov edx, edi
mov dword [ebp - 0x18], 0xf
cmovne edx, eax
mov byte [ebp - 0x2c], 0
mov ecx, edx
lea eax, [ecx + 1]
mov dword [ebp - 0x14], eax
nop dword [eax]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x100a79c0
sub ecx, dword [ebp - 0x14]
push ecx
push edx
lea ecx, [ebp - 0x2c]
call fcn.10074240
mov dword [ebp - 0x30], 0x100446f8
push dword [ebx + 0x1d4]
lea eax, [ebp - 0x30]
mov dword [ebp - 4], 0x1d
push 0x1009d6c0
push eax
lea ecx, [esi + 4]
call fcn.100aeba0
mov edx, dword [ebp - 0x18]
mov dword [ebp - 4], 0xffffffff
mov dword [ebp - 0x30], 0x100446f8
cmp edx, 0x10
jb 0x100a7a49
mov ecx, dword [ebp - 0x2c]
inc edx
mov eax, ecx
mov dword [ebp - 4], 0x1e
cmp edx, 0x1000
jb 0x100a7a38
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x100aac1e
push edx
push ecx
call fcn.101b44e7
add esp, 8
mov dword [ebp - 4], 0xffffffff
mov eax, dword [ebp - 0x38]
mov edx, 0x601
cmp byte [ebp + 0x10], 0
je 0x100a7f98
cmp ax, dx
jb 0x100a7d20
movzx eax, word [0x1020b76b]
mov ecx, dword [esi + 0x2fc]
push eax
call fcn.100cfdf0
test eax, eax
mov dword [ebp - 0x1c], 0
mov edx, edi
mov dword [ebp - 0x18], 0xf
cmovne edx, eax
mov byte [ebp - 0x2c], 0
mov ecx, edx
lea eax, [ecx + 1]
mov dword [ebp - 0x14], eax
mov al, byte [ecx]
inc ecx
test al, al
jne 0x100a7a98
sub ecx, dword [ebp - 0x14]
push ecx
push edx
lea ecx, [ebp - 0x2c]
call fcn.10074240
mov dword [ebp - 0x30], 0x100446f8
push dword [ebx + 0x3cc]
lea ecx, [ebp - 0x30]
mov dword [ebp - 4], 0x1f
push 0x1009df40
push ecx
lea ecx, [esi + 0x184]
call fcn.100aeba0
mov edx, dword [ebp - 0x18]
mov dword [ebp - 4], 0xffffffff
mov dword [ebp - 0x30], 0x100446f8
cmp edx, 0x10
jb 0x100a7b24
mov ecx, dword [ebp - 0x2c]
inc edx
mov eax, ecx
mov dword [ebp - 4], 0x20
cmp edx, 0x1000
jb 0x100a7b13
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x100aac23
push edx
push ecx
call fcn.101b44e7
add esp, 8
mov dword [ebp - 4], 0xffffffff
movzx eax, word [0x1020b76d]
mov ecx, dword [esi + 0x2fc]
push eax
call fcn.100cfdf0
test eax, eax
mov dword [ebp - 0x1c], 0
mov edx, edi
mov dword [ebp - 0x18], 0xf
cmovne edx, eax
mov byte [ebp - 0x2c], 0
mov ecx, edx
lea eax, [ecx + 1]
mov dword [ebp - 0x14], eax
mov al, byte [ecx]
inc ecx
test al, al
jne 0x100a7b58
sub ecx, dword [ebp - 0x14]
push ecx
push edx
lea ecx, [ebp - 0x2c]
call fcn.10074240
mov dword [ebp - 0x30], 0x100446f8
push dword [ebx + 0x3d0]
lea eax, [ebp - 0x30]
mov dword [ebp - 4], 0x21
push 0x1009e330
push eax
lea ecx, [esi + 0x184]
call fcn.100aeba0
lea ecx, [ebp - 0x30]
mov dword [ebp - 4], 0xffffffff
call fcn.1006c640
movzx eax, word [0x1020b76f]
mov ecx, dword [esi + 0x2fc]
push eax
call fcn.100cfdf0
test eax, eax
mov dword [ebp - 0x1c], 0
mov edx, edi
mov dword [ebp - 0x18], 0xf
cmovne edx, eax
mov byte [ebp - 0x2c], 0
mov ecx, edx
lea eax, [ecx + 1]
mov dword [ebp - 0x14], eax
mov al, byte [ecx]
inc ecx
test al, al
jne 0x100a7bd7
sub ecx, dword [ebp - 0x14]
push ecx
push edx
lea ecx, [ebp - 0x2c]
call fcn.10074240
mov dword [ebp - 0x30], 0x100446f8
push dword [ebx + 0x3d4]
lea eax, [ebp - 0x30]
mov dword [ebp - 4], 0x22
push 0x1009d210
push eax
lea ecx, [esi + 0x184]
call fcn.100aeba0
lea ecx, [ebp - 0x30]
mov dword [ebp - 4], 0xffffffff
call fcn.1006c640
movzx eax, word [0x1020b7c7]
mov ecx, dword [esi + 0x2fc]
push eax
call fcn.100cfdf0
test eax, eax
mov dword [ebp - 0x1c], 0
mov edx, edi
mov dword [ebp - 0x18], 0xf
cmovne edx, eax
mov byte [ebp - 0x2c], 0
mov ecx, edx
lea eax, [ecx + 1]
mov dword [ebp - 0x14], eax
mov al, byte [ecx]
inc ecx
test al, al
jne 0x100a7c56
sub ecx, dword [ebp - 0x14]
push ecx
push edx
lea ecx, [ebp - 0x2c]
call fcn.10074240
mov dword [ebp - 0x30], 0x100446f8
push dword [ebx + 0x454]
lea eax, [ebp - 0x30]
mov dword [ebp - 4], 0x23
push 0x1009dfc0
push eax
lea ecx, [esi + 0x184]
call fcn.100aeba0
lea ecx, [ebp - 0x30]
mov dword [ebp - 4], 0xffffffff
call fcn.1006c640
movzx eax, word [0x1020b7c9]
mov ecx, dword [esi + 0x2fc]
push eax
call fcn.100cfdf0
test eax, eax
mov dword [ebp - 0x1c], 0
mov edx, edi
mov dword [ebp - 0x18], 0xf
cmovne edx, eax
mov byte [ebp - 0x2c], 0
mov ecx, edx
lea eax, [ecx + 1]
mov dword [ebp - 0x14], eax
mov al, byte [ecx]
inc ecx
test al, al
jne 0x100a7cd5
sub ecx, dword [ebp - 0x14]
push ecx
push edx
lea ecx, [ebp - 0x2c]
call fcn.10074240
mov dword [ebp - 0x30], 0x100446f8
push dword [ebx + 0x458]
lea eax, [ebp - 0x30]
mov dword [ebp - 4], 0x24
push 0x1009e1f0
push eax
lea ecx, [esi + 0x184]
call fcn.100aeba0
lea ecx, [ebp - 0x30]
mov dword [ebp - 4], 0xffffffff
call fcn.1006c640
movzx eax, word [0x1020b76b]
mov ecx, dword [esi + 0x2fc]
push eax
call fcn.100cfdf0
test eax, eax
mov dword [ebp - 0x1c], 0
mov edx, edi
mov dword [ebp - 0x18], 0xf
cmovne edx, eax
mov byte [ebp - 0x2c], 0
mov ecx, edx
lea eax, [ecx + 1]
mov dword [ebp - 0x14], eax
mov al, byte [ecx]
inc ecx
test al, al
jne 0x100a7d54
sub ecx, dword [ebp - 0x14]
push ecx
push edx
lea ecx, [ebp - 0x2c]
call fcn.10074240
mov dword [ebp - 0x30], 0x100446f8
push dword [ebx + 0x3cc]
lea ecx, [ebp - 0x30]
mov dword [ebp - 4], 0x25
push 0x1009df40
push ecx
lea ecx, [esi + 4]
call fcn.100aeba0
lea ecx, [ebp - 0x30]
mov dword [ebp - 4], 0xffffffff
call fcn.1006c640
movzx eax, word [0x1020b76d]
mov ecx, dword [esi + 0x2fc]
push eax
call fcn.100cfdf0
test eax, eax
mov dword [ebp - 0x1c], 0
mov edx, edi
mov dword [ebp - 0x18], 0xf
cmovne edx, eax
mov byte [ebp - 0x2c], 0
mov ecx, edx
lea eax, [ecx + 1]
mov dword [ebp - 0x14], eax
mov al, byte [ecx]
inc ecx
test al, al
jne 0x100a7dd0
sub ecx, dword [ebp - 0x14]
push ecx
push edx
lea ecx, [ebp - 0x2c]
call fcn.10074240
mov dword [ebp - 0x30], 0x100446f8
push dword [ebx + 0x3d0]
lea eax, [ebp - 0x30]
mov dword [ebp - 4], 0x26
push 0x1009e330
push eax
lea ecx, [esi + 4]
call fcn.100aeba0
lea ecx, [ebp - 0x30]
mov dword [ebp - 4], 0xffffffff
call fcn.1006c640
movzx eax, word [0x1020b76f]
mov ecx, dword [esi + 0x2fc]
push eax
call fcn.100cfdf0
test eax, eax
mov dword [ebp - 0x1c], 0
mov edx, edi
mov dword [ebp - 0x18], 0xf
cmovne edx, eax
mov byte [ebp - 0x2c], 0
mov ecx, edx
lea eax, [ecx + 1]
mov dword [ebp - 0x14], eax
nop dword [eax]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x100a7e50
sub ecx, dword [ebp - 0x14]
push ecx
push edx
lea ecx, [ebp - 0x2c]
call fcn.10074240
mov dword [ebp - 0x30], 0x100446f8
push dword [ebx + 0x3d4]
lea eax, [ebp - 0x30]
mov dword [ebp - 4], 0x27
push 0x1009d210
push eax
lea ecx, [esi + 4]
call fcn.100aeba0
lea ecx, [ebp - 0x30]
mov dword [ebp - 4], 0xffffffff
call fcn.1006c640
movzx eax, word [0x1020b7c7]
mov ecx, dword [esi + 0x2fc]
push eax
call fcn.100cfdf0
test eax, eax
mov dword [ebp - 0x1c], 0
mov edx, edi
mov dword [ebp - 0x18], 0xf
cmovne edx, eax
mov byte [ebp - 0x2c], 0
mov ecx, edx
lea eax, [ecx + 1]
mov dword [ebp - 0x14], eax
nop dword [eax]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x100a7ed0
sub ecx, dword [ebp - 0x14]
push ecx
push edx
lea ecx, [ebp - 0x2c]
call fcn.10074240
mov dword [ebp - 0x30], 0x100446f8
push dword [ebx + 0x454]
lea ecx, [ebp - 0x30]
mov dword [ebp - 4], 0x28
push 0x1009dfc0
push ecx
lea ecx, [esi + 0x34]
call fcn.100aeba0
lea ecx, [ebp - 0x30]
mov dword [ebp - 4], 0xffffffff
call fcn.1006c640
movzx eax, word [0x1020b7c9]
mov ecx, dword [esi + 0x2fc]
push eax
call fcn.100cfdf0
test eax, eax
mov dword [ebp - 0x1c], 0
mov edx, edi
mov dword [ebp - 0x18], 0xf
cmovne edx, eax
mov byte [ebp - 0x2c], 0
mov ecx, edx
lea eax, [ecx + 1]
mov dword [ebp - 0x14], eax
nop dword [eax]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x100a7f50
sub ecx, dword [ebp - 0x14]
push ecx
push edx
lea ecx, [ebp - 0x2c]
call fcn.10074240
mov dword [ebp - 0x30], 0x100446f8
push dword [ebx + 0x458]
lea eax, [ebp - 0x30]
mov dword [ebp - 4], 0x29
push 0x1009e1f0
push eax
lea ecx, [esi + 0x34]
call fcn.100aeba0
lea ecx, [ebp - 0x30]
mov dword [ebp - 4], 0xffffffff
call fcn.1006c640
cmp byte [ebp + 0xc], 0
jne 0x100a7fb1
cmp byte [ebp + 0x20], 0
jne 0x100a7fb1
mov al, byte [ebp + 0x14]
test al, al
je 0x100a8251
jmp 0x100a7fb7
cmp byte [ebp + 0x14], 0
je 0x100a7fcf
lea eax, [ebp - 0x14]
mov dword [ebp - 0x14], 0
push eax
push 0x100ae910
push 4
call dword [sym.imp.KERNEL32.dll_GetModuleHandleExA]
mov eax, dword [ebp - 0x38]
mov ecx, 0x601
cmp ax, cx
jb 0x100a814f
cmp byte [ebp + 0x28], 0
jne 0x100a814f
cmp byte [ebp + 0x24], 0
je 0x100a806f
cmp ax, word [ebp - 0x3c]
jae 0x100a806f
movzx eax, word [0x1020b723]
mov ecx, dword [esi + 0x2fc]
push eax
call fcn.100cfdf0
push eax
lea ecx, [ebp - 0x30]
call fcn.1006a470
push dword [ebx + 0x208]
lea eax, [ebp - 0x30]
mov dword [ebp - 4], 0x2a
push 0x1009c6d0
push eax
lea ecx, [esi + 4]
call fcn.100aeba0
lea ecx, [ebp - 0x30]
mov dword [ebp - 4], 0xffffffff
call fcn.1006c640
movzx eax, word [0x1020b725]
mov ecx, dword [esi + 0x2fc]
push eax
call fcn.100cfdf0
push eax
lea ecx, [ebp - 0x30]
call fcn.1006a470
mov dword [ebp - 4], 0x2b
jmp 0x100a8222
movzx eax, word [0x1020b723]
mov ecx, dword [esi + 0x2fc]
push eax
call fcn.100cfdf0
test eax, eax
mov dword [ebp - 0x1c], 0
mov edx, edi
mov dword [ebp - 0x18], 0xf
cmovne edx, eax
mov byte [ebp - 0x2c], 0
mov ecx, edx
lea eax, [ecx + 1]
mov dword [ebp - 0x14], eax
mov al, byte [ecx]
inc ecx
test al, al
jne 0x100a80a3
sub ecx, dword [ebp - 0x14]
push ecx
push edx
lea ecx, [ebp - 0x2c]
call fcn.10074240
mov dword [ebp - 0x30], 0x100446f8
push dword [ebx + 0x208]
lea ecx, [ebp - 0x30]
mov dword [ebp - 4], 0x2c
push 0x1009c6d0
push ecx
lea ecx, [esi + 0xf4]
call fcn.100aeba0
lea ecx, [ebp - 0x30]
mov dword [ebp - 4], 0xffffffff
call fcn.1006c640
movzx eax, word [0x1020b725]
mov ecx, dword [esi + 0x2fc]
push eax
call fcn.100cfdf0
test eax, eax
mov dword [ebp - 0x1c], 0
mov edx, edi
mov dword [ebp - 0x18], 0xf
cmovne edx, eax
mov byte [ebp - 0x2c], 0
mov ecx, edx
lea eax, [ecx + 1]
mov dword [ebp - 0x14], eax
mov al, byte [ecx]
inc ecx
test al, al
jne 0x100a8122
sub ecx, dword [ebp - 0x14]
push ecx
push edx
lea ecx, [ebp - 0x2c]
call fcn.10074240
mov dword [ebp - 0x30], 0x100446f8
mov dword [ebp - 4], 0x2d
lea ecx, [esi + 0xf4]
jmp 0x100a8225
movzx eax, word [0x1020b723]
mov ecx, dword [esi + 0x2fc]
push eax
call fcn.100cfdf0
test eax, eax
mov dword [ebp - 0x1c], 0
mov edx, edi
mov dword [ebp - 0x18], 0xf
cmovne edx, eax
mov byte [ebp - 0x2c], 0
mov ecx, edx
lea eax, [ecx + 1]
mov dword [ebp - 0x14], eax
mov al, byte [ecx]
inc ecx
test al, al
jne 0x100a8183
sub ecx, dword [ebp - 0x14]
push ecx
push edx
lea ecx, [ebp - 0x2c]
call fcn.10074240
mov dword [ebp - 0x30], 0x100446f8
push dword [ebx + 0x208]
lea eax, [ebp - 0x30]
mov dword [ebp - 4], 0x2e
push 0x1009c6d0
push eax
lea ecx, [esi + 4]
call fcn.100aeba0
lea ecx, [ebp - 0x30]
mov dword [ebp - 4], 0xffffffff
call fcn.1006c640
movzx eax, word [0x1020b725]
mov ecx, dword [esi + 0x2fc]
push eax
call fcn.100cfdf0
test eax, eax
mov dword [ebp - 0x1c], 0
mov edx, edi
mov dword [ebp - 0x18], 0xf
cmovne edx, eax
mov byte [ebp - 0x2c], 0
mov ecx, edx
lea eax, [ecx + 1]
mov dword [ebp - 0x14], eax
nop
mov al, byte [ecx]
inc ecx
test al, al
jne 0x100a8200
sub ecx, dword [ebp - 0x14]
push ecx
push edx
lea ecx, [ebp - 0x2c]
call fcn.10074240
mov dword [ebp - 0x30], 0x100446f8
mov dword [ebp - 4], 0x2f
lea ecx, [esi + 4]
push dword [ebx + 0x20c]
lea eax, [ebp - 0x30]
push 0x1009cbc0
push eax
call fcn.100aeba0
lea ecx, [ebp - 0x30]
mov dword [ebp - 4], 0xffffffff
call fcn.1006c640
cmp byte [ebp + 0xc], 0
jne 0x100a8264
mov al, byte [ebp + 0x14]
cmp byte [ebp + 0x10], 0
jne 0x100a8264
test al, al
jne 0x100a8264
cmp byte [ebp + 0x18], al
je 0x100a88f3
mov ecx, dword [esi + 0x2fc]
mov eax, 0x601
cmp word [ebp - 0x38], ax
movzx eax, word [0x1020b705]
push eax
jb 0x100a8668
call fcn.100cfdf0
test eax, eax
mov dword [ebp - 0x1c], 0
mov edx, edi
mov dword [ebp - 0x18], 0xf
cmovne edx, eax
mov byte [ebp - 0x2c], 0
mov ecx, edx
lea eax, [ecx + 1]
mov dword [ebp - 0x14], eax
mov al, byte [ecx]
inc ecx
test al, al
jne 0x100a82a7
sub ecx, dword [ebp - 0x14]
push ecx
push edx
lea ecx, [ebp - 0x2c]
call fcn.10074240
mov dword [ebp - 0x30], 0x100446f8
push dword [ebx + 0x1cc]
lea ecx, [ebp - 0x30]
mov dword [ebp - 4], 0x30
push 0x1009dc10
push ecx
lea ecx, [esi + 0x184]
call fcn.100aeba0
lea ecx, [ebp - 0x30]
mov dword [ebp - 4], 0xffffffff
call fcn.1006c640
movzx eax, word [0x1020b707]
mov ecx, dword [esi + 0x2fc]
push eax
call fcn.100cfdf0
test eax, eax
mov dword [ebp - 0x1c], 0
mov edx, edi
mov dword [ebp - 0x18], 0xf
cmovne edx, eax
mov byte [ebp - 0x2c], 0
mov ecx, edx
lea eax, [ecx + 1]
mov dword [ebp - 0x14], eax
mov al, byte [ecx]
inc ecx
test al, al
jne 0x100a8326
sub ecx, dword [ebp - 0x14]
push ecx
push edx
lea ecx, [ebp - 0x2c]
call fcn.10074240
mov dword [ebp - 0x30], 0x100446f8
push dword [ebx + 0x1dc]
lea eax, [ebp - 0x30]
mov dword [ebp - 4], 0x31
push 0x1009dd70
push eax
lea ecx, [esi + 0x184]
call fcn.100aeba0
lea ecx, [ebp - 0x30]
mov dword [ebp - 4], 0xffffffff
call fcn.1006c640
movzx eax, word [0x1020b709]
mov ecx, dword [esi + 0x2fc]
push eax
call fcn.100cfdf0
test eax, eax
mov dword [ebp - 0x1c], 0
mov edx, edi
mov dword [ebp - 0x18], 0xf
cmovne edx, eax
mov byte [ebp - 0x2c], 0
mov ecx, edx
lea eax, [ecx + 1]
mov dword [ebp - 0x14], eax
mov al, byte [ecx]
inc ecx
test al, al
jne 0x100a83a5
sub ecx, dword [ebp - 0x14]
push ecx
push edx
lea ecx, [ebp - 0x2c]
call fcn.10074240
mov dword [ebp - 0x30], 0x100446f8
push dword [ebx + 0x2fc]
lea eax, [ebp - 0x30]
mov dword [ebp - 4], 0x32
push 0x1009d7c0
push eax
lea ecx, [esi + 0x184]
call fcn.100aeba0
lea ecx, [ebp - 0x30]
mov dword [ebp - 4], 0xffffffff
call fcn.1006c640
movzx eax, word [0x1020b705]
mov ecx, dword [esi + 0x2fc]
push eax
call fcn.100cfdf0
test eax, eax
mov dword [ebp - 0x1c], 0
mov edx, edi
mov dword [ebp - 0x18], 0xf
cmovne edx, eax
mov byte [ebp - 0x2c], 0
mov ecx, edx
lea eax, [ecx + 1]
mov dword [ebp - 0x14], eax
mov al, byte [ecx]
inc ecx
test al, al
jne 0x100a8424
sub ecx, dword [ebp - 0x14]
push ecx
push edx
lea ecx, [ebp - 0x2c]
call fcn.10074240
mov dword [ebp - 0x30], 0x100446f8
push dword [ebx + 0x1cc]
lea eax, [ebp - 0x30]
mov dword [ebp - 4], 0x33
push 0x1009dc10
push eax
lea ecx, [esi + 4]
call fcn.100aeba0
lea ecx, [ebp - 0x30]
mov dword [ebp - 4], 0xffffffff
call fcn.1006c640
movzx eax, word [0x1020b707]
mov ecx, dword [esi + 0x2fc]
push eax
call fcn.100cfdf0
test eax, eax
mov dword [ebp - 0x1c], 0
mov edx, edi
mov dword [ebp - 0x18], 0xf
cmovne edx, eax
mov byte [ebp - 0x2c], 0
mov ecx, edx
lea eax, [ecx + 1]
mov dword [ebp - 0x14], eax
mov al, byte [ecx]
inc ecx
test al, al
jne 0x100a84a0
sub ecx, dword [ebp - 0x14]
push ecx
push edx
lea ecx, [ebp - 0x2c]
call fcn.10074240
mov dword [ebp - 0x30], 0x100446f8
push dword [ebx + 0x1dc]
lea eax, [ebp - 0x30]
mov dword [ebp - 4], 0x34
push 0x1009dd70
push eax
lea ecx, [esi + 4]
call fcn.100aeba0
lea ecx, [ebp - 0x30]
mov dword [ebp - 4], 0xffffffff
call fcn.1006c640
movzx eax, word [0x1020b709]
mov ecx, dword [esi + 0x2fc]
push eax
call fcn.100cfdf0
test eax, eax
mov dword [ebp - 0x1c], 0
mov edx, edi
mov dword [ebp - 0x18], 0xf
cmovne edx, eax
mov byte [ebp - 0x2c], 0
mov ecx, edx
lea eax, [ecx + 1]
mov dword [ebp - 0x14], eax
nop dword [eax]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x100a8520
sub ecx, dword [ebp - 0x14]
push ecx
push edx
lea ecx, [ebp - 0x2c]
call fcn.10074240
mov dword [ebp - 0x30], 0x100446f8
push dword [ebx + 0x2fc]
lea eax, [ebp - 0x30]
mov dword [ebp - 4], 0x35
push 0x1009d7c0
push eax
lea ecx, [esi + 4]
call fcn.100aeba0
lea ecx, [ebp - 0x30]
mov dword [ebp - 4], 0xffffffff
call fcn.1006c640
mov eax, dword [ebp - 0x3c]
cmp word [ebp - 0x38], ax
jb 0x100a87d8
movzx eax, word [0x1020b703]
mov ecx, dword [esi + 0x2fc]
push eax
call fcn.100cfdf0
test eax, eax
mov dword [ebp - 0x1c], 0
mov edx, edi
mov dword [ebp - 0x18], 0xf
cmovne edx, eax
mov byte [ebp - 0x2c], 0
mov ecx, edx
lea eax, [ecx + 1]
mov dword [ebp - 0x14], eax
nop dword [eax]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x100a85b0
sub ecx, dword [ebp - 0x14]
push ecx
push edx
lea ecx, [ebp - 0x2c]
call fcn.10074240
mov dword [ebp - 0x30], 0x100446f8
push dword [ebx + 0x1d8]
lea ecx, [ebp - 0x30]
mov dword [ebp - 4], 0x39
push 0x1009de60
push ecx
lea ecx, [esi + 0x154]
call fcn.100aeba0
lea ecx, [ebp - 0x30]
mov dword [ebp - 4], 0xffffffff
call fcn.1006c640
movzx eax, word [0x1020b701]
mov ecx, dword [esi + 0x2fc]
push eax
call fcn.100cfdf0
test eax, eax
mov dword [ebp - 0x1c], 0
mov edx, edi
mov dword [ebp - 0x18], 0xf
cmovne edx, eax
mov byte [ebp - 0x2c], 0
mov ecx, edx
lea eax, [ecx + 1]
mov dword [ebp - 0x14], eax
nop
mov al, byte [ecx]
inc ecx
test al, al
jne 0x100a8630
sub ecx, dword [ebp - 0x14]
push ecx
push edx
lea ecx, [ebp - 0x2c]
call fcn.10074240
mov dword [ebp - 0x30], 0x100446f8
push dword [ebx + 0x1d8]
mov dword [ebp - 4], 0x3a
lea ecx, [esi + 0x154]
push 0x1009dac0
jmp 0x100a87c0
call fcn.100cfdf0
test eax, eax
mov dword [ebp - 0x1c], 0
mov edx, edi
mov dword [ebp - 0x18], 0xf
cmovne edx, eax
mov byte [ebp - 0x2c], 0
mov ecx, edx
lea eax, [ecx + 1]
mov dword [ebp - 0x14], eax
nop
mov al, byte [ecx]
inc ecx
test al, al
jne 0x100a8690
sub ecx, dword [ebp - 0x14]
push ecx
push edx
lea ecx, [ebp - 0x2c]
call fcn.10074240
mov dword [ebp - 0x30], 0x100446f8
push dword [ebx + 0x1cc]
lea eax, [ebp - 0x30]
mov dword [ebp - 4], 0x36
push 0x1009dc10
push eax
lea ecx, [esi + 4]
call fcn.100aeba0
lea ecx, [ebp - 0x30]
mov dword [ebp - 4], 0xffffffff
call fcn.1006c640
movzx eax, word [0x1020b707]
mov ecx, dword [esi + 0x2fc]
push eax
call fcn.100cfdf0
test eax, eax
mov dword [ebp - 0x1c], 0
mov edx, edi
mov dword [ebp - 0x18], 0xf
cmovne edx, eax
mov byte [ebp - 0x2c], 0
mov ecx, edx
lea eax, [ecx + 1]
mov dword [ebp - 0x14], eax
nop dword [eax]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x100a8710
sub ecx, dword [ebp - 0x14]
push ecx
push edx
lea ecx, [ebp - 0x2c]
call fcn.10074240
mov dword [ebp - 0x30], 0x100446f8
push dword [ebx + 0x1dc]
lea eax, [ebp - 0x30]
mov dword [ebp - 4], 0x37
push 0x1009dd70
push eax
lea ecx, [esi + 4]
call fcn.100aeba0
lea ecx, [ebp - 0x30]
mov dword [ebp - 4], 0xffffffff
call fcn.1006c640
movzx eax, word [0x1020b709]
mov ecx, dword [esi + 0x2fc]
push eax
call fcn.100cfdf0
test eax, eax
mov dword [ebp - 0x1c], 0
mov edx, edi
mov dword [ebp - 0x18], 0xf
cmovne edx, eax
mov byte [ebp - 0x2c], 0
mov ecx, edx
lea eax, [ecx + 1]
mov dword [ebp - 0x14], eax
nop dword [eax]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x100a8790
sub ecx, dword [ebp - 0x14]
push ecx
push edx
lea ecx, [ebp - 0x2c]
call fcn.10074240
mov dword [ebp - 0x30], 0x100446f8
push dword [ebx + 0x2fc]
mov dword [ebp - 4], 0x38
lea ecx, [esi + 4]
push 0x1009d7c0
lea eax, [ebp - 0x30]
push eax
call fcn.100aeba0
lea ecx, [ebp - 0x30]
mov dword [ebp - 4], 0xffffffff
call fcn.1006c640
movzx eax, word [0x1020b703]
mov ecx, dword [esi + 0x2fc]
push eax
call fcn.100cfdf0
test eax, eax
mov dword [ebp - 0x1c], 0
mov edx, edi
mov dword [ebp - 0x18], 0xf
cmovne edx, eax
mov byte [ebp - 0x2c], 0
mov ecx, edx
lea eax, [ecx + 1]
mov dword [ebp - 0x14], eax
nop dword [eax]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x100a8810
sub ecx, dword [ebp - 0x14]
push ecx
push edx
lea ecx, [ebp - 0x2c]
call fcn.10074240
mov dword [ebp - 0x30], 0x100446f8
push dword [ebx + 0x1d8]
lea eax, [ebp - 0x30]
mov dword [ebp - 4], 0x3b
push 0x1009de60
push eax
lea ecx, [esi + 4]
call fcn.100aeba0
lea ecx, [ebp - 0x30]
mov dword [ebp - 4], 0xffffffff
call fcn.1006c640
movzx eax, word [0x1020b701]
mov ecx, dword [esi + 0x2fc]
push eax
call fcn.100cfdf0
test eax, eax
mov dword [ebp - 0x1c], 0
mov edx, edi
mov dword [ebp - 0x18], 0xf
cmovne edx, eax
mov byte [ebp - 0x2c], 0
mov ecx, edx
lea eax, [ecx + 1]
mov dword [ebp - 0x14], eax
nop dword [eax]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x100a8890
sub ecx, dword [ebp - 0x14]
push ecx
push edx
lea ecx, [ebp - 0x2c]
call fcn.10074240
mov dword [ebp - 0x30], 0x100446f8
push dword [ebx + 0x1c8]
lea eax, [ebp - 0x30]
mov dword [ebp - 4], 0x3c
push 0x1009dac0
push eax
lea ecx, [esi + 4]
call fcn.100aeba0
lea ecx, [ebp - 0x30]
mov dword [ebp - 4], 0xffffffff
call fcn.1006c640
cmp byte [ebp + 0x18], 0
je 0x100a88f3
mov ecx, esi
call fcn.100acd30
mov ecx, esi
call fcn.100a2860
mov ecx, esi
call fcn.100ab1b0
push 0x186
push 0
push 0x1020b81b
call fcn.101b66d0
add esp, 0xc
cmp byte [ebp + 0xc], 0
jne 0x100a8917
cmp byte [ebp + 0x20], 0
je 0x100a8c2f
mov ecx, dword [esi + 0x2fc]
mov eax, 0x601
cmp word [ebp - 0x38], ax
movzx eax, word [0x1020b73b]
push eax
jb 0x100a8a34
call fcn.100cfdf0
test eax, eax
mov dword [ebp - 0x1c], 0
mov edx, edi
mov dword [ebp - 0x18], 0xf
cmovne edx, eax
mov byte [ebp - 0x2c], 0
mov ecx, edx
lea eax, [ecx + 1]
mov dword [ebp - 0x14], eax
nop word [eax + eax]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x100a8960
sub ecx, dword [ebp - 0x14]
push ecx
push edx
lea ecx, [ebp - 0x2c]
call fcn.10074240
mov dword [ebp - 0x30], 0x100446f8
push dword [ebx + 0x36c]
lea eax, [esi + 0xf4]
mov dword [ebp - 4], 0x3d
push 0x1009c300
lea ecx, [ebp - 0x30]
mov dword [ebp - 0x14], eax
push ecx
mov ecx, eax
call fcn.100aeba0
lea ecx, [ebp - 0x30]
mov dword [ebp - 4], 0xffffffff
call fcn.1006c640
movzx eax, word [0x1020b73d]
mov ecx, dword [esi + 0x2fc]
push eax
call fcn.100cfdf0
test eax, eax
mov dword [ebp - 0x1c], 0
mov edx, edi
mov dword [ebp - 0x18], 0xf
cmovne edx, eax
mov byte [ebp - 0x2c], 0
mov ecx, edx
lea eax, [ecx + 1]
mov dword [ebp - 0x34], eax
mov al, byte [ecx]
inc ecx
test al, al
jne 0x100a89e4
sub ecx, dword [ebp - 0x34]
push ecx
push edx
lea ecx, [ebp - 0x2c]
call fcn.10074240
mov dword [ebp - 0x30], 0x100446f8
push dword [ebx + 0x370]
lea eax, [ebp - 0x30]
mov dword [ebp - 4], 0x3e
push 0x1009c5e0
push eax
lea ecx, [esi + 0xf4]
call fcn.100aeba0
lea ecx, [ebp - 0x30]
mov dword [ebp - 4], 0xffffffff
call fcn.1006c640
jmp 0x100a8b31
call fcn.100cfdf0
test eax, eax
mov dword [ebp - 0x1c], 0
mov edx, edi
mov dword [ebp - 0x18], 0xf
cmovne edx, eax
mov byte [ebp - 0x2c], 0
mov ecx, edx
lea eax, [ecx + 1]
mov dword [ebp - 0x34], eax
nop word [eax + eax]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x100a8a60
sub ecx, dword [ebp - 0x34]
push ecx
push edx
lea ecx, [ebp - 0x2c]
call fcn.10074240
mov dword [ebp - 0x30], 0x100446f8
push dword [ebx + 0x36c]
lea eax, [ebp - 0x30]
mov dword [ebp - 4], 0x3f
push 0x1009c300
push eax
lea ecx, [esi + 4]
call fcn.100aeba0
lea ecx, [ebp - 0x30]
mov dword [ebp - 4], 0xffffffff
call fcn.1006c640
movzx eax, word [0x1020b73d]
mov ecx, dword [esi + 0x2fc]
push eax
call fcn.100cfdf0
test eax, eax
mov dword [ebp - 0x1c], 0
mov edx, edi
mov dword [ebp - 0x18], 0xf
cmovne edx, eax
mov byte [ebp - 0x2c], 0
mov ecx, edx
lea eax, [ecx + 1]
mov dword [ebp - 0x34], eax
nop dword [eax]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x100a8ae0
sub ecx, dword [ebp - 0x34]
push ecx
push edx
lea ecx, [ebp - 0x2c]
call fcn.10074240
mov dword [ebp - 0x30], 0x100446f8
push dword [ebx + 0x370]
lea eax, [ebp - 0x30]
mov dword [ebp - 4], 0x40
push 0x1009c5e0
push eax
lea ecx, [esi + 4]
call fcn.100aeba0
lea ecx, [ebp - 0x30]
mov dword [ebp - 4], 0xffffffff
call fcn.1006c640
lea eax, [esi + 0xf4]
mov dword [ebp - 0x14], eax
movzx eax, word [0x1020b73f]
mov ecx, dword [esi + 0x2fc]
push eax
call fcn.100cfdf0
test eax, eax
mov dword [ebp - 0x1c], 0
mov edx, edi
mov dword [ebp - 0x18], 0xf
cmovne edx, eax
mov byte [ebp - 0x2c], 0
mov ecx, edx
lea eax, [ecx + 1]
mov dword [ebp - 0x34], eax
mov al, byte [ecx]
inc ecx
test al, al
jne 0x100a8b65
sub ecx, dword [ebp - 0x34]
push ecx
push edx
lea ecx, [ebp - 0x2c]
call fcn.10074240
mov dword [ebp - 0x30], 0x100446f8
push dword [ebx + 0x374]
lea eax, [ebp - 0x30]
mov dword [ebp - 4], 0x41
push 0x1009c3f0
push eax
lea ecx, [esi + 4]
call fcn.100aeba0
lea ecx, [ebp - 0x30]
mov dword [ebp - 4], 0xffffffff
call fcn.1006c640
movzx eax, word [0x1020b741]
mov ecx, dword [esi + 0x2fc]
push eax
call fcn.100cfdf0
test eax, eax
mov dword [ebp - 0x1c], 0
mov edx, edi
mov dword [ebp - 0x18], 0xf
cmovne edx, eax
mov byte [ebp - 0x2c], 0
mov ecx, edx
lea eax, [ecx + 1]
mov dword [ebp - 0x34], eax
mov al, byte [ecx]
inc ecx
test al, al
jne 0x100a8be1
sub ecx, dword [ebp - 0x34]
push ecx
push edx
lea ecx, [ebp - 0x2c]
call fcn.10074240
mov dword [ebp - 0x30], 0x100446f8
push dword [ebx + 0x378]
lea eax, [ebp - 0x30]
mov dword [ebp - 4], 0x42
push 0x1009c4f0
push eax
lea ecx, [esi + 4]
call fcn.100aeba0
lea ecx, [ebp - 0x30]
mov dword [ebp - 4], 0xffffffff
call fcn.1006c640
cmp byte [ebp + 0xc], 0
jne 0x100a8c42
cmp byte [ebp + 0x14], 0
lea eax, [esi + 0xf4]
mov dword [ebp - 0x14], eax
je 0x100a9cb0
mov eax, 0x601
cmp word [ebp - 0x38], ax
jb 0x100a9101
cmp byte [ebp + 0x28], 0
jne 0x100a9101
cmp byte [ebp + 0x24], 0
lea edi, [esi + 0xf4]
jne 0x100a8cfb
movzx eax, word [0x1020b727]
mov ecx, dword [esi + 0x2fc]
push eax
call fcn.100cfdf0
push eax
lea ecx, [ebp - 0x30]
call fcn.1006a470
push dword [ebx + 0x348]
lea eax, [ebp - 0x30]
mov dword [ebp - 4], 0x43
push 0x1009fe20
push eax
mov ecx, edi
call fcn.100aeba0
lea ecx, [ebp - 0x30]
mov dword [ebp - 4], 0xffffffff
call fcn.1006c640
movzx eax, word [0x1020b729]
mov ecx, dword [esi + 0x2fc]
push eax
call fcn.100cfdf0
push eax
lea ecx, [ebp - 0x30]
call fcn.1006a470
push dword [ebx + 0x34c]
lea eax, [ebp - 0x30]
mov dword [ebp - 4], 0x44
push 0x1009e7c0
push eax
mov ecx, edi
call fcn.100aeba0
lea ecx, [ebp - 0x30]
mov dword [ebp - 4], 0xffffffff
call fcn.1006c640
movzx eax, word [0x1020b72b]
mov ecx, dword [esi + 0x2fc]
push eax
call fcn.100cfdf0
push eax
lea ecx, [ebp - 0x30]
call fcn.1006a470
push dword [ebx + 0x350]
lea eax, [ebp - 0x30]
mov dword [ebp - 4], 0x45
push 0x1009f900
push eax
mov ecx, edi
call fcn.100aeba0
lea ecx, [ebp - 0x30]
mov dword [ebp - 4], 0xffffffff
call fcn.1006c640
movzx eax, word [0x1020b72f]
mov ecx, dword [esi + 0x2fc]
push eax
call fcn.100cfdf0
push eax
lea ecx, [ebp - 0x30]
call fcn.1006a470
push dword [ebx + 0x358]
lea eax, [ebp - 0x30]
mov dword [ebp - 4], 0x46
push 0x1009f820
push eax
mov ecx, edi
call fcn.100aeba0
lea ecx, [ebp - 0x30]
mov dword [ebp - 4], 0xffffffff
call fcn.1006c640
movzx eax, word [0x1020b731]
mov ecx, dword [esi + 0x2fc]
push eax
call fcn.100cfdf0
push eax
lea ecx, [ebp - 0x30]
call fcn.1006a470
push dword [ebx + 0x35c]
lea eax, [ebp - 0x30]
mov dword [ebp - 4], 0x47
push 0x1009d380
push eax
mov ecx, edi
call fcn.100aeba0
lea ecx, [ebp - 0x30]
mov dword [ebp - 4], 0xffffffff
call fcn.1006c640
movzx eax, word [0x1020b72d]
mov ecx, dword [esi + 0x2fc]
push eax
call fcn.100cfdf0
push eax
lea ecx, [ebp - 0x30]
call fcn.1006a470
push dword [ebx + 0x354]
lea eax, [ebp - 0x30]
mov dword [ebp - 4], 0x48
push 0x1009fa70
push eax
mov ecx, edi
call fcn.100aeba0
lea ecx, [ebp - 0x30]
mov dword [ebp - 4], 0xffffffff
call fcn.1006c640
movzx eax, word [0x1020b733]
mov ecx, dword [esi + 0x2fc]
push eax
call fcn.100cfdf0
push eax
lea ecx, [ebp - 0x30]
call fcn.1006a470
mov dword [ebp - 4], 0x49
push dword [ebx + 0x360]
lea eax, [ebp - 0x30]
mov ecx, edi
push 0x1009d480
push eax
call fcn.100aeba0
lea ecx, [ebp - 0x30]
mov dword [ebp - 4], 0xffffffff
call fcn.1006c640
movzx eax, word [0x1020b721]
mov ecx, dword [esi + 0x2fc]
push eax
call fcn.100cfdf0
push eax
lea ecx, [ebp - 0x30]
call fcn.1006a470
push dword [ebx + 0x344]
lea eax, [ebp - 0x30]
mov dword [ebp - 4], 0x4a
push 0x1009d2a0
push eax
mov ecx, edi
call fcn.100aeba0
lea ecx, [ebp - 0x30]
mov dword [ebp - 4], 0xffffffff
call fcn.1006c640
movzx eax, word [0x1020b735]
mov ecx, dword [esi + 0x2fc]
push eax
call fcn.100cfdf0
push eax
lea ecx, [ebp - 0x30]
call fcn.1006a470
push dword [ebx + 0x214]
lea eax, [ebp - 0x30]
mov dword [ebp - 4], 0x4b
push 0x1009c200
push eax
lea ecx, [esi + 0x124]
call fcn.100aeba0
lea ecx, [ebp - 0x30]
mov dword [ebp - 4], 0xffffffff
call fcn.1006c640
movzx eax, word [0x1020b70f]
mov ecx, dword [esi + 0x2fc]
push eax
call fcn.100cfdf0
push eax
lea ecx, [ebp - 0x30]
call fcn.1006a470
push dword [ebx + 0x308]
lea eax, [ebp - 0x30]
mov dword [ebp - 4], 0x4c
push 0x1009cfb0
push eax
lea ecx, [esi + 0x124]
call fcn.100aeba0
lea ecx, [ebp - 0x30]
mov dword [ebp - 4], 0xffffffff
call fcn.1006c640
movzx eax, word [0x1020b713]
mov ecx, dword [esi + 0x2fc]
push eax
call fcn.100cfdf0
push eax
lea ecx, [ebp - 0x30]
call fcn.1006a470
push dword [ebx + 0x310]
lea eax, [ebp - 0x30]
mov dword [ebp - 4], 0x4d
push 0x1009cac0
lea edi, [esi + 0x1b4]
push eax
mov ecx, edi
call fcn.100aeba0
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x30]
call fcn.1006c640
movzx eax, word [0x1020b717]
mov ecx, dword [esi + 0x2fc]
push eax
call fcn.100cfdf0
push eax
lea ecx, [ebp - 0x30]
call fcn.1006a470
push dword [ebx + 0x318]
lea eax, [ebp - 0x30]
mov dword [ebp - 4], 0x4e
push 0x1009e790
push eax
mov ecx, edi
call fcn.100aeba0
lea ecx, [ebp - 0x30]
mov dword [ebp - 4], 0xffffffff
call fcn.1006c640
movzx eax, word [0x1020b719]
mov ecx, dword [esi + 0x2fc]
push eax
call fcn.100cfdf0
push eax
lea ecx, [ebp - 0x30]
call fcn.1006a470
push dword [ebx + 0x31c]
lea eax, [ebp - 0x30]
mov dword [ebp - 4], 0x4f
push 0x1009e390
push eax
mov ecx, edi
call fcn.100aeba0
lea ecx, [ebp - 0x30]
mov dword [ebp - 4], 0xffffffff
call fcn.1006c640
movzx eax, word [0x1020b71b]
mov ecx, dword [esi + 0x2fc]
push eax
call fcn.100cfdf0
push eax
lea ecx, [ebp - 0x30]
call fcn.1006a470
push dword [ebx + 0x320]
lea eax, [ebp - 0x30]
mov dword [ebp - 4], 0x50
push 0x1009e490
push eax
mov ecx, edi
call fcn.100aeba0
lea ecx, [ebp - 0x30]
mov dword [ebp - 4], 0xffffffff
call fcn.1006c640
movzx eax, word [0x1020b71d]
mov ecx, dword [esi + 0x2fc]
push eax
call fcn.100cfdf0
push eax
lea ecx, [ebp - 0x30]
call fcn.1006a470
push dword [ebx + 0x324]
lea eax, [ebp - 0x30]
mov dword [ebp - 4], 0x51
push 0x1009d140
push eax
mov ecx, edi
call fcn.100aeba0
lea ecx, [ebp - 0x30]
mov dword [ebp - 4], 0xffffffff
call fcn.1006c640
movzx eax, word [0x1020b71f]
mov ecx, dword [esi + 0x2fc]
push eax
call fcn.100cfdf0
push eax
lea ecx, [ebp - 0x30]
call fcn.1006a470
push dword [ebx + 0x328]
lea eax, [ebp - 0x30]
mov dword [ebp - 4], 0x52
push 0x1009fd40
push eax
mov ecx, edi
call fcn.100aeba0
lea ecx, [ebp - 0x30]
mov dword [ebp - 4], 0xffffffff
call fcn.1006c640
lea edi, [esi + 4]
jmp 0x100a97c7
cmp byte [ebp + 0x24], 0
jne 0x100a9208
movzx eax, word [0x1020b727]
mov ecx, dword [esi + 0x2fc]
push eax
call fcn.100cfdf0
test eax, eax
mov dword [ebp - 0x1c], 0
mov edx, edi
mov dword [ebp - 0x18], 0xf
cmovne edx, eax
mov byte [ebp - 0x2c], 0
mov ecx, edx
lea eax, [ecx + 1]
mov dword [ebp - 0x34], eax
nop
mov al, byte [ecx]
inc ecx
test al, al
jne 0x100a9140
sub ecx, dword [ebp - 0x34]
push ecx
push edx
lea ecx, [ebp - 0x2c]
call fcn.10074240
mov dword [ebp - 0x30], 0x100446f8
push dword [ebx + 0x348]
lea eax, [ebp - 0x30]
mov dword [ebp - 4], 0x53
push 0x1009fe20
push eax
lea ecx, [esi + 4]
call fcn.100aeba0
lea ecx, [ebp - 0x30]
mov dword [ebp - 4], 0xffffffff
call fcn.1006c640
movzx eax, word [0x1020b729]
mov ecx, dword [esi + 0x2fc]
push eax
call fcn.100cfdf0
test eax, eax
mov dword [ebp - 0x1c], 0
mov edx, edi
mov dword [ebp - 0x18], 0xf
cmovne edx, eax
mov byte [ebp - 0x2c], 0
mov ecx, edx
lea eax, [ecx + 1]
mov dword [ebp - 0x34], eax
nop dword [eax]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x100a91c0
sub ecx, dword [ebp - 0x34]
push ecx
push edx
lea ecx, [ebp - 0x2c]
call fcn.10074240
mov dword [ebp - 0x30], 0x100446f8
push dword [ebx + 0x34c]
lea eax, [ebp - 0x30]
mov dword [ebp - 4], 0x54
push 0x1009e7c0
push eax
lea ecx, [esi + 4]
call fcn.100aeba0
lea ecx, [ebp - 0x30]
mov dword [ebp - 4], 0xffffffff
call fcn.1006c640
movzx eax, word [0x1020b72b]
mov ecx, dword [esi + 0x2fc]
push eax
call fcn.100cfdf0
test eax, eax
mov dword [ebp - 0x1c], 0
mov edx, edi
mov dword [ebp - 0x18], 0xf
cmovne edx, eax
mov byte [ebp - 0x2c], 0
mov ecx, edx
lea eax, [ecx + 1]
mov dword [ebp - 0x34], eax
nop dword [eax]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x100a9240
sub ecx, dword [ebp - 0x34]
push ecx
push edx
lea ecx, [ebp - 0x2c]
call fcn.10074240
mov dword [ebp - 0x30], 0x100446f8
push dword [ebx + 0x350]
lea eax, [ebp - 0x30]
mov dword [ebp - 4], 0x55
push 0x1009f900
push eax
lea ecx, [esi + 4]
call fcn.100aeba0
lea ecx, [ebp - 0x30]
mov dword [ebp - 4], 0xffffffff
call fcn.1006c640
movzx eax, word [0x1020b72f]
mov ecx, dword [esi + 0x2fc]
push eax
call fcn.100cfdf0
test eax, eax
mov dword [ebp - 0x1c], 0
mov edx, edi
mov dword [ebp - 0x18], 0xf
cmovne edx, eax
mov byte [ebp - 0x2c], 0
mov ecx, edx
lea eax, [ecx + 1]
mov dword [ebp - 0x34], eax
nop dword [eax]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x100a92c0
sub ecx, dword [ebp - 0x34]
push ecx
push edx
lea ecx, [ebp - 0x2c]
call fcn.10074240
mov dword [ebp - 0x30], 0x100446f8
push dword [ebx + 0x358]
lea eax, [ebp - 0x30]
mov dword [ebp - 4], 0x56
push 0x1009f820
push eax
lea ecx, [esi + 4]
call fcn.100aeba0
lea ecx, [ebp - 0x30]
mov dword [ebp - 4], 0xffffffff
call fcn.1006c640
movzx eax, word [0x1020b731]
mov ecx, dword [esi + 0x2fc]
push eax
call fcn.100cfdf0
test eax, eax
mov dword [ebp - 0x1c], 0
mov edx, edi
mov dword [ebp - 0x18], 0xf
cmovne edx, eax
mov byte [ebp - 0x2c], 0
mov ecx, edx
lea eax, [ecx + 1]
mov dword [ebp - 0x34], eax
nop dword [eax]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x100a9340
sub ecx, dword [ebp - 0x34]
push ecx
push edx
lea ecx, [ebp - 0x2c]
call fcn.10074240
mov dword [ebp - 0x30], 0x100446f8
push dword [ebx + 0x35c]
lea eax, [ebp - 0x30]
mov dword [ebp - 4], 0x57
push 0x1009d380
push eax
lea ecx, [esi + 4]
call fcn.100aeba0
lea ecx, [ebp - 0x30]
mov dword [ebp - 4], 0xffffffff
call fcn.1006c640
movzx eax, word [0x1020b72d]
mov ecx, dword [esi + 0x2fc]
push eax
call fcn.100cfdf0
test eax, eax
mov dword [ebp - 0x1c], 0
mov edx, edi
mov dword [ebp - 0x18], 0xf
cmovne edx, eax
mov byte [ebp - 0x2c], 0
mov ecx, edx
lea eax, [ecx + 1]
mov dword [ebp - 0x34], eax
nop dword [eax]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x100a93c0
sub ecx, dword [ebp - 0x34]
push ecx
push edx
lea ecx, [ebp - 0x2c]
call fcn.10074240
mov dword [ebp - 0x30], 0x100446f8
push dword [ebx + 0x354]
lea eax, [ebp - 0x30]
mov dword [ebp - 4], 0x58
push 0x1009fa70
push eax
lea ecx, [esi + 4]
call fcn.100aeba0
lea ecx, [ebp - 0x30]
mov dword [ebp - 4], 0xffffffff
call fcn.1006c640
movzx eax, word [0x1020b733]
mov ecx, dword [esi + 0x2fc]
push eax
call fcn.100cfdf0
test eax, eax
mov dword [ebp - 0x1c], 0
mov edx, edi
mov dword [ebp - 0x18], 0xf
cmovne edx, eax
mov byte [ebp - 0x2c], 0
mov ecx, edx
lea eax, [ecx + 1]
mov dword [ebp - 0x34], eax
nop dword [eax]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x100a9440
sub ecx, dword [ebp - 0x34]
push ecx
push edx
lea ecx, [ebp - 0x2c]
call fcn.10074240
mov dword [ebp - 0x30], 0x100446f8
push dword [ebx + 0x360]
lea eax, [ebp - 0x30]
mov dword [ebp - 4], 0x59
push 0x1009d480
push eax
lea ecx, [esi + 4]
call fcn.100aeba0
lea ecx, [ebp - 0x30]
mov dword [ebp - 4], 0xffffffff
call fcn.1006c640
movzx eax, word [0x1020b721]
mov ecx, dword [esi + 0x2fc]
push eax
call fcn.100cfdf0
test eax, eax
mov dword [ebp - 0x1c], 0
mov edx, edi
mov dword [ebp - 0x18], 0xf
cmovne edx, eax
mov byte [ebp - 0x2c], 0
mov ecx, edx
lea eax, [ecx + 1]
mov dword [ebp - 0x34], eax
nop dword [eax]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x100a94c0
sub ecx, dword [ebp - 0x34]
push ecx
push edx
lea ecx, [ebp - 0x2c]
call fcn.10074240
mov dword [ebp - 0x30], 0x100446f8
push dword [ebx + 0x344]
lea eax, [ebp - 0x30]
mov dword [ebp - 4], 0x5a
push 0x1009d2a0
push eax
lea ecx, [esi + 4]
call fcn.100aeba0
lea ecx, [ebp - 0x30]
mov dword [ebp - 4], 0xffffffff
call fcn.1006c640
movzx eax, word [0x1020b735]
mov ecx, dword [esi + 0x2fc]
push eax
call fcn.100cfdf0
test eax, eax
mov dword [ebp - 0x1c], 0
mov edx, edi
mov dword [ebp - 0x18], 0xf
cmovne edx, eax
mov byte [ebp - 0x2c], 0
mov ecx, edx
lea eax, [ecx + 1]
mov dword [ebp - 0x34], eax
nop dword [eax]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x100a9540
sub ecx, dword [ebp - 0x34]
push ecx
push edx
lea ecx, [ebp - 0x2c]
call fcn.10074240
mov dword [ebp - 0x30], 0x100446f8
push dword [ebx + 0x214]
lea eax, [ebp - 0x30]
mov dword [ebp - 4], 0x5b
push 0x1009c200
push eax
lea ecx, [esi + 4]
call fcn.100aeba0
lea ecx, [ebp - 0x30]
mov dword [ebp - 4], 0xffffffff
call fcn.1006c640
movzx eax, word [0x1020b70f]
mov ecx, dword [esi + 0x2fc]
push eax
call fcn.100cfdf0
test eax, eax
mov dword [ebp - 0x1c], 0
mov edx, edi
mov dword [ebp - 0x18], 0xf
cmovne edx, eax
mov byte [ebp - 0x2c], 0
mov ecx, edx
lea eax, [ecx + 1]
mov dword [ebp - 0x34], eax
nop dword [eax]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x100a95c0
sub ecx, dword [ebp - 0x34]
push ecx
push edx
lea ecx, [ebp - 0x2c]
call fcn.10074240
mov dword [ebp - 0x30], 0x100446f8
push dword [ebx + 0x308]
lea eax, [ebp - 0x30]
mov dword [ebp - 4], 0x5c
push 0x1009cfb0
push eax
lea ecx, [esi + 4]
call fcn.100aeba0
lea ecx, [ebp - 0x30]
mov dword [ebp - 4], 0xffffffff
call fcn.1006c640
movzx eax, word [0x1020b713]
mov ecx, dword [esi + 0x2fc]
push eax
call fcn.100cfdf0
test eax, eax
lea ecx, [ebp - 0x2c]
cmovne edi, eax
push edi
call fcn.1006aa60
mov dword [ebp - 0x30], 0x100446f8
push dword [ebx + 0x310]
lea eax, [ebp - 0x30]
mov dword [ebp - 4], 0x5d
push 0x1009cac0
lea edi, [esi + 4]
push eax
mov ecx, edi
call fcn.100aeba0
lea ecx, [ebp - 0x30]
mov dword [ebp - 4], 0xffffffff
call fcn.1006c640
movzx eax, word [0x1020b717]
mov ecx, dword [esi + 0x2fc]
push eax
call fcn.100cfdf0
push eax
lea ecx, [ebp - 0x30]
call fcn.1006a470
push dword [ebx + 0x318]
lea eax, [ebp - 0x30]
mov dword [ebp - 4], 0x5e
push 0x1009e790
push eax
mov ecx, edi
call fcn.100aeba0
lea ecx, [ebp - 0x30]
mov dword [ebp - 4], 0xffffffff
call fcn.1006c640
movzx eax, word [0x1020b719]
mov ecx, dword [esi + 0x2fc]
push eax
call fcn.100cfdf0
push eax
lea ecx, [ebp - 0x30]
call fcn.1006a470
push dword [ebx + 0x31c]
lea eax, [ebp - 0x30]
mov dword [ebp - 4], 0x5f
push 0x1009e390
push eax
mov ecx, edi
call fcn.100aeba0
lea ecx, [ebp - 0x30]
mov dword [ebp - 4], 0xffffffff
call fcn.1006c640
movzx eax, word [0x1020b71b]
mov ecx, dword [esi + 0x2fc]
push eax
call fcn.100cfdf0
push eax
lea ecx, [ebp - 0x30]
call fcn.1006a470
push dword [ebx + 0x320]
lea eax, [ebp - 0x30]
mov dword [ebp - 4], 0x60
push 0x1009e490
push eax
mov ecx, edi
call fcn.100aeba0
lea ecx, [ebp - 0x30]
mov dword [ebp - 4], 0xffffffff
call fcn.1006c640
movzx eax, word [0x1020b71d]
mov ecx, dword [esi + 0x2fc]
push eax
call fcn.100cfdf0
push eax
lea ecx, [ebp - 0x30]
call fcn.1006a470
push dword [ebx + 0x324]
lea eax, [ebp - 0x30]
mov dword [ebp - 4], 0x61
push 0x1009d140
push eax
mov ecx, edi
call fcn.100aeba0
lea ecx, [ebp - 0x30]
mov dword [ebp - 4], 0xffffffff
call fcn.1006c640
movzx eax, word [0x1020b71f]
mov ecx, dword [esi + 0x2fc]
push eax
call fcn.100cfdf0
push eax
lea ecx, [ebp - 0x30]
call fcn.1006a470
push dword [ebx + 0x328]
lea eax, [ebp - 0x30]
mov dword [ebp - 4], 0x62
push 0x1009fd40
push eax
mov ecx, edi
call fcn.100aeba0
lea ecx, [ebp - 0x30]
mov dword [ebp - 4], 0xffffffff
call fcn.1006c640
mov eax, dword [ebp - 0x3c]
cmp word [ebp - 0x38], ax
jb 0x100a989e
cmp byte [ebp + 0x24], 0
je 0x100a9870
movzx eax, word [0x1020b727]
mov ecx, dword [esi + 0x2fc]
push eax
call fcn.100cfdf0
push eax
lea ecx, [ebp - 0x30]
call fcn.1006a470
push dword [ebx + 0x348]
mov ecx, dword [ebp - 0x14]
lea eax, [ebp - 0x30]
push 0x1009fe20
push eax
mov dword [ebp - 4], 0x63
call fcn.100aeba0
lea ecx, [ebp - 0x30]
mov dword [ebp - 4], 0xffffffff
call fcn.1006c640
movzx eax, word [0x1020b729]
mov ecx, dword [esi + 0x2fc]
push eax
call fcn.100cfdf0
push eax
lea ecx, [ebp - 0x30]
call fcn.1006a470
push dword [ebx + 0x34c]
mov ecx, dword [ebp - 0x14]
lea eax, [ebp - 0x30]
push 0x1009e7c0
push eax
mov dword [ebp - 4], 0x64
call fcn.100aeba0
lea ecx, [ebp - 0x30]
mov dword [ebp - 4], 0xffffffff
call fcn.1006c640
movzx eax, word [0x1020b711]
mov ecx, dword [esi + 0x2fc]
push eax
call fcn.100cfdf0
push eax
lea ecx, [ebp - 0x30]
call fcn.1006a470
mov dword [ebp - 4], 0x65
lea ecx, [esi + 0x154]
jmp 0x100a995d
cmp byte [ebp + 0x24], 0
je 0x100a9938
movzx eax, word [0x1020b727]
mov ecx, dword [esi + 0x2fc]
push eax
call fcn.100cfdf0
push eax
lea ecx, [ebp - 0x30]
call fcn.1006a470
push dword [ebx + 0x348]
lea eax, [ebp - 0x30]
mov dword [ebp - 4], 0x66
push 0x1009fe20
push eax
mov ecx, edi
call fcn.100aeba0
lea ecx, [ebp - 0x30]
mov dword [ebp - 4], 0xffffffff
call fcn.1006c640
movzx eax, word [0x1020b729]
mov ecx, dword [esi + 0x2fc]
push eax
call fcn.100cfdf0
push eax
lea ecx, [ebp - 0x30]
call fcn.1006a470
push dword [ebx + 0x34c]
lea eax, [ebp - 0x30]
mov dword [ebp - 4], 0x67
push 0x1009e7c0
push eax
mov ecx, edi
call fcn.100aeba0
lea ecx, [ebp - 0x30]
mov dword [ebp - 4], 0xffffffff
call fcn.1006c640
movzx eax, word [0x1020b711]
mov ecx, dword [esi + 0x2fc]
push eax
call fcn.100cfdf0
push eax
lea ecx, [ebp - 0x30]
call fcn.1006a470
mov dword [ebp - 4], 0x68
mov ecx, edi
push dword [ebx + 0x30c]
lea eax, [ebp - 0x30]
push 0x1009c9c0
push eax
call fcn.100aeba0
lea ecx, [ebp - 0x30]
mov dword [ebp - 4], 0xffffffff
call fcn.1006c640
movzx eax, word [0x1020b715]
mov ecx, dword [esi + 0x2fc]
push eax
call fcn.100cfdf0
push eax
lea ecx, [ebp - 0x30]
call fcn.1006a470
push dword [ebx + 0x314]
lea eax, [ebp - 0x30]
mov dword [ebp - 4], 0x69
push 0x1009e760
push eax
mov ecx, edi
call fcn.100aeba0
lea ecx, [ebp - 0x30]
mov dword [ebp - 4], 0xffffffff
call fcn.1006c640
movzx eax, word [0x1020b747]
mov ecx, dword [esi + 0x2fc]
push eax
call fcn.100cfdf0
push eax
lea ecx, [ebp - 0x30]
call fcn.1006a470
push dword [ebx + 0x384]
lea eax, [ebp - 0x30]
mov dword [ebp - 4], 0x6a
push 0x100a0400
push eax
mov ecx, edi
call fcn.100aeba0
lea ecx, [ebp - 0x30]
mov dword [ebp - 4], 0xffffffff
call fcn.1006c640
movzx eax, word [0x1020b749]
mov ecx, dword [esi + 0x2fc]
push eax
call fcn.100cfdf0
push eax
lea ecx, [ebp - 0x30]
call fcn.1006a470
push dword [ebx + 0x388]
lea eax, [ebp - 0x30]
mov dword [ebp - 4], 0x6b
push 0x100a01e0
push eax
mov ecx, edi
call fcn.100aeba0
lea ecx, [ebp - 0x30]
mov dword [ebp - 4], 0xffffffff
call fcn.1006c640
movzx eax, word [0x1020b74b]
mov ecx, dword [esi + 0x2fc]
push eax
call fcn.100cfdf0
push eax
lea ecx, [ebp - 0x30]
call fcn.1006a470
push dword [ebx + 0x38c]
lea eax, [ebp - 0x30]
mov dword [ebp - 4], 0x6c
push 0x1009ff80
push eax
mov ecx, edi
call fcn.100aeba0
lea ecx, [ebp - 0x30]
mov dword [ebp - 4], 0xffffffff
call fcn.1006c640
movzx eax, word [0x1020b74d]
mov ecx, dword [esi + 0x2fc]
push eax
call fcn.100cfdf0
push eax
lea ecx, [ebp - 0x30]
call fcn.1006a470
push dword [ebx + 0x390]
lea eax, [ebp - 0x30]
mov dword [ebp - 4], 0x6d
push 0x100a0500
push eax
mov ecx, edi
call fcn.100aeba0
lea ecx, [ebp - 0x30]
mov dword [ebp - 4], 0xffffffff
call fcn.1006c640
movzx eax, word [0x1020b753]
mov ecx, dword [esi + 0x2fc]
push eax
call fcn.100cfdf0
push eax
lea ecx, [ebp - 0x30]
call fcn.1006a470
push dword [ebx + 0x39c]
lea eax, [ebp - 0x30]
mov dword [ebp - 4], 0x6e
push 0x100a00e0
push eax
mov ecx, edi
call fcn.100aeba0
lea ecx, [ebp - 0x30]
mov dword [ebp - 4], 0xffffffff
call fcn.1006c640
movzx eax, word [0x1020b755]
mov ecx, dword [esi + 0x2fc]
push eax
call fcn.100cfdf0
push eax
lea ecx, [ebp - 0x30]
call fcn.1006a470
push dword [ebx + 0x3a0]
lea eax, [ebp - 0x30]
mov dword [ebp - 4], 0x6f
push 0x100a02d0
push eax
mov ecx, edi
call fcn.100aeba0
lea ecx, [ebp - 0x30]
mov dword [ebp - 4], 0xffffffff
call fcn.1006c640
movzx eax, word [0x1020b74f]
mov ecx, dword [esi + 0x2fc]
push eax
call fcn.100cfdf0
push eax
lea ecx, [ebp - 0x30]
call fcn.1006a470
push dword [ebx + 0x394]
lea eax, [ebp - 0x30]
mov dword [ebp - 4], 0x70
push 0x1009ff80
push eax
mov ecx, edi
call fcn.100aeba0
lea ecx, [ebp - 0x30]
mov dword [ebp - 4], 0xffffffff
call fcn.1006c640
movzx eax, word [0x1020b751]
mov ecx, dword [esi + 0x2fc]
push eax
call fcn.100cfdf0
push eax
lea ecx, [ebp - 0x30]
call fcn.1006a470
push dword [ebx + 0x398]
mov dword [ebp - 4], 0x71
push 0x100a0080
lea eax, [ebp - 0x30]
mov ecx, edi
push eax
call fcn.100aeba0
lea ecx, [ebp - 0x30]
mov dword [ebp - 4], 0xffffffff
call fcn.1006c640
cmp byte [ebp + 0x1c], 0
jne 0x100a9caa
movzx eax, word [0x1020b811]
mov ecx, dword [esi + 0x2fc]
push eax
call fcn.100cfdf0
push eax
lea ecx, [ebp - 0x30]
call fcn.1006a470
push dword [ebx + 0x2d4]
lea eax, [ebp - 0x30]
mov dword [ebp - 4], 0x72
push 0x1009e590
push eax
lea ecx, [esi + 0x94]
call fcn.100aeba0
lea ecx, [ebp - 0x30]
mov dword [ebp - 4], 0xffffffff
call fcn.1006c640
movzx eax, word [0x1020b813]
mov ecx, dword [esi + 0x2fc]
push eax
call fcn.100cfdf0
push eax
lea ecx, [ebp - 0x30]
call fcn.1006a470
push dword [ebx + 0x2d8]
lea eax, [ebp - 0x30]
mov dword [ebp - 4], 0x73
push 0x1009e680
push eax
lea ecx, [esi + 0x94]
call fcn.100aeba0
lea ecx, [ebp - 0x30]
mov dword [ebp - 4], 0xffffffff
call fcn.1006c640
cmp byte [ebp + 0xc], 0
jne 0x100a9cba
cmp byte [ebp + 0x20], 0
je 0x100aabc5
movzx eax, word [0x1020b7d9]
mov ecx, dword [esi + 0x2fc]
push eax
call fcn.100cfdf0
push eax
lea ecx, [ebp - 0x30]
call fcn.1006a470
push dword [ebx + 0x478]
lea eax, [ebp - 0x30]
mov dword [ebp - 4], 0x74
push 0x1009ebe0
push eax
lea ecx, [esi + 0x64]
call fcn.100aeba0
lea ecx, [ebp - 0x30]
mov dword [ebp - 4], 0xffffffff
call fcn.1006c640
movzx eax, word [0x1020b7df]
mov ecx, dword [esi + 0x2fc]
push eax
call fcn.100cfdf0
push eax
lea ecx, [ebp - 0x30]
call fcn.1006a470
push dword [ebx + 0x484]
lea eax, [ebp - 0x30]
mov dword [ebp - 4], 0x75
push 0x1009f180
push eax
lea ecx, [esi + 0x64]
call fcn.100aeba0
lea ecx, [ebp - 0x30]
mov dword [ebp - 4], 0xffffffff
call fcn.1006c640
movzx eax, word [0x1020b7ed]
mov ecx, dword [esi + 0x2fc]
push eax
call fcn.100cfdf0
push eax
lea ecx, [ebp - 0x30]
call fcn.1006a470
push dword [ebx + 0x4a0]
lea eax, [ebp - 0x30]
mov dword [ebp - 4], 0x76
push 0x1009f350
push eax
lea ecx, [esi + 0x64]
call fcn.100aeba0
lea ecx, [ebp - 0x30]
mov dword [ebp - 4], 0xffffffff
call fcn.1006c640
movzx eax, word [0x1020b7f5]
mov ecx, dword [esi + 0x2fc]
push eax
call fcn.100cfdf0
push eax
lea ecx, [ebp - 0x30]
call fcn.1006a470
push dword [ebx + 0x4b0]
lea eax, [ebp - 0x30]
mov dword [ebp - 4], 0x77
push 0x1009f570
push eax
lea ecx, [esi + 0x64]
call fcn.100aeba0
lea ecx, [ebp - 0x30]
mov dword [ebp - 4], 0xffffffff
call fcn.1006c640
movzx eax, word [0x1020b7f9]
mov ecx, dword [esi + 0x2fc]
push eax
call fcn.100cfdf0
push eax
lea ecx, [ebp - 0x30]
call fcn.1006a470
mov dword [ebp - 4], 0x78
push dword [ebx + 0x4b8]
lea eax, [ebp - 0x30]
push 0x1009eea0
push eax
lea ecx, [esi + 0x64]
call fcn.100aeba0
lea ecx, [ebp - 0x30]
mov dword [ebp - 4], 0xffffffff
call fcn.1006c640
movzx eax, word [0x1020b801]
mov ecx, dword [esi + 0x2fc]
push eax
call fcn.100cfdf0
push eax
lea ecx, [ebp - 0x30]
call fcn.1006a470
push dword [ebx + 0x4c8]
lea eax, [ebp - 0x30]
mov dword [ebp - 4], 0x79
push 0x1009ef00
push eax
lea ecx, [esi + 0x64]
call fcn.100aeba0
lea ecx, [ebp - 0x30]
mov dword [ebp - 4], 0xffffffff
call fcn.1006c640
movzx eax, word [0x1020b805]
mov ecx, dword [esi + 0x2fc]
push eax
call fcn.100cfdf0
push eax
lea ecx, [ebp - 0x30]
call fcn.1006a470
push dword [ebx + 0x4d0]
lea eax, [ebp - 0x30]
mov dword [ebp - 4], 0x7a
push 0x1009ef80
push eax
lea ecx, [esi + 0x64]
call fcn.100aeba0
lea ecx, [ebp - 0x30]
mov dword [ebp - 4], 0xffffffff
call fcn.1006c640
movzx eax, word [0x1020b809]
mov ecx, dword [esi + 0x2fc]
push eax
call fcn.100cfdf0
push eax
lea ecx, [ebp - 0x30]
call fcn.1006a470
push dword [ebx + 0x4d8]
lea eax, [ebp - 0x30]
mov dword [ebp - 4], 0x7b
push 0x1009f020
push eax
lea ecx, [esi + 0x64]
call fcn.100aeba0
lea ecx, [ebp - 0x30]
mov dword [ebp - 4], 0xffffffff
call fcn.1006c640
movzx eax, word [0x1020b80b]
mov ecx, dword [esi + 0x2fc]
push eax
call fcn.100cfdf0
push eax
lea ecx, [ebp - 0x30]
call fcn.1006a470
push dword [ebx + 0x2b4]
lea eax, [ebp - 0x30]
mov dword [ebp - 4], 0x7c
push 0x1009e910
push eax
lea ecx, [esi + 0x64]
call fcn.100aeba0
lea ecx, [ebp - 0x30]
mov dword [ebp - 4], 0xffffffff
call fcn.1006c640
movzx eax, word [0x1020b7d3]
mov ecx, dword [esi + 0x2fc]
push eax
call fcn.100cfdf0
push eax
lea ecx, [ebp - 0x30]
call fcn.1006a470
push dword [ebx + 0x46c]
lea eax, [ebp - 0x30]
mov dword [ebp - 4], 0x7d
push 0x1009e9d0
push eax
lea ecx, [esi + 0x64]
call fcn.100aeba0
lea ecx, [ebp - 0x30]
mov dword [ebp - 4], 0xffffffff
call fcn.1006c640
movzx eax, word [0x1020b7d5]
mov ecx, dword [esi + 0x2fc]
push eax
call fcn.100cfdf0
push eax
lea ecx, [ebp - 0x30]
call fcn.1006a470
push dword [ebx + 0x470]
lea eax, [ebp - 0x30]
mov dword [ebp - 4], 0x7e
push 0x1009ecf0
push eax
lea ecx, [esi + 0x64]
call fcn.100aeba0
lea ecx, [ebp - 0x30]
mov dword [ebp - 4], 0xffffffff
call fcn.1006c640
movzx eax, word [0x1020b7d7]
mov ecx, dword [esi + 0x2fc]
push eax
call fcn.100cfdf0
push eax
lea ecx, [ebp - 0x30]
call fcn.1006a470
push dword [ebx + 0x474]
lea eax, [ebp - 0x30]
mov dword [ebp - 4], 0x7f
push 0x1009ead0
push eax
lea ecx, [esi + 0x64]
call fcn.100aeba0
lea ecx, [ebp - 0x30]
mov dword [ebp - 4], 0xffffffff
call fcn.1006c640
movzx eax, word [0x1020b7db]
mov ecx, dword [esi + 0x2fc]
push eax
call fcn.100cfdf0
push eax
lea ecx, [ebp - 0x30]
call fcn.1006a470
push dword [ebx + 0x47c]
lea eax, [ebp - 0x30]
mov dword [ebp - 4], 0x80
push 0x1009f110
push eax
lea ecx, [esi + 0x64]
call fcn.100aeba0
lea ecx, [ebp - 0x30]
mov dword [ebp - 4], 0xffffffff
call fcn.1006c640
movzx eax, word [0x1020b7dd]
mov ecx, dword [esi + 0x2fc]
push eax
call fcn.100cfdf0
push eax
lea ecx, [ebp - 0x30]
call fcn.1006a470
mov dword [ebp - 4], 0x81
push dword [ebx + 0x480]
lea eax, [ebp - 0x30]
push 0x1009f260
push eax
lea ecx, [esi + 0x64]
call fcn.100aeba0
lea ecx, [ebp - 0x30]
mov dword [ebp - 4], 0xffffffff
call fcn.1006c640
movzx eax, word [0x1020b7e1]
mov ecx, dword [esi + 0x2fc]
push eax
call fcn.100cfdf0
push eax
lea ecx, [ebp - 0x30]
call fcn.1006a470
push dword [ebx + 0x488]
lea eax, [ebp - 0x30]
mov dword [ebp - 4], 0x82
push 0x1009f1f0
push eax
lea ecx, [esi + 0x64]
call fcn.100aeba0
lea ecx, [ebp - 0x30]
mov dword [ebp - 4], 0xffffffff
call fcn.1006c640
movzx eax, word [0x1020b7e3]
mov ecx, dword [esi + 0x2fc]
push eax
call fcn.100cfdf0
push eax
lea ecx, [ebp - 0x30]
call fcn.1006a470
push dword [ebx + 0x48c]
lea eax, [ebp - 0x30]
mov dword [ebp - 4], 0x83
push 0x1009f070
push eax
lea ecx, [esi + 0x64]
call fcn.100aeba0
lea ecx, [ebp - 0x30]
mov dword [ebp - 4], 0xffffffff
call fcn.1006c640
movzx eax, word [0x1020b7e5]
mov ecx, dword [esi + 0x2fc]
push eax
call fcn.100cfdf0
push eax
lea ecx, [ebp - 0x30]
call fcn.1006a470
push dword [ebx + 0x490]
lea eax, [ebp - 0x30]
mov dword [ebp - 4], 0x84
push 0x1009f0c0
push eax
lea ecx, [esi + 0x64]
call fcn.100aeba0
lea ecx, [ebp - 0x30]
mov dword [ebp - 4], 0xffffffff
call fcn.1006c640
movzx eax, word [0x1020b7e7]
mov ecx, dword [esi + 0x2fc]
push eax
call fcn.100cfdf0
push eax
lea ecx, [ebp - 0x30]
call fcn.1006a470
push dword [ebx + 0x494]
lea eax, [ebp - 0x30]
mov dword [ebp - 4], 0x85
push 0x1009f2d0
push eax
lea ecx, [esi + 0x64]
call fcn.100aeba0
lea ecx, [ebp - 0x30]
mov dword [ebp - 4], 0xffffffff
call fcn.1006c640
movzx eax, word [0x1020b7e9]
mov ecx, dword [esi + 0x2fc]
push eax
call fcn.100cfdf0
push eax
lea ecx, [ebp - 0x30]
call fcn.1006a470
push dword [ebx + 0x498]
lea eax, [ebp - 0x30]
mov dword [ebp - 4], 0x86
push 0x1009f390
push eax
lea ecx, [esi + 0x64]
call fcn.100aeba0
lea ecx, [ebp - 0x30]
mov dword [ebp - 4], 0xffffffff
call fcn.1006c640
movzx eax, word [0x1020b7eb]
mov ecx, dword [esi + 0x2fc]
push eax
call fcn.100cfdf0
push eax
lea ecx, [ebp - 0x30]
call fcn.1006a470
push dword [ebx + 0x49c]
lea eax, [ebp - 0x30]
mov dword [ebp - 4], 0x87
push 0x1009f310
push eax
lea ecx, [esi + 0x64]
call fcn.100aeba0
lea ecx, [ebp - 0x30]
mov dword [ebp - 4], 0xffffffff
call fcn.1006c640
movzx eax, word [0x1020b7f7]
mov ecx, dword [esi + 0x2fc]
push eax
call fcn.100cfdf0
push eax
lea ecx, [ebp - 0x30]
call fcn.1006a470
push dword [ebx + 0x4b4]
lea eax, [ebp - 0x30]
mov dword [ebp - 4], 0x88
push 0x1009edf0
push eax
lea ecx, [esi + 0x64]
call fcn.100aeba0
lea ecx, [ebp - 0x30]
mov dword [ebp - 4], 0xffffffff
call fcn.1006c640
movzx eax, word [0x1020b7ef]
mov ecx, dword [esi + 0x2fc]
push eax
call fcn.100cfdf0
push eax
lea ecx, [ebp - 0x30]
call fcn.1006a470
push dword [ebx + 0x4a4]
lea eax, [ebp - 0x30]
mov dword [ebp - 4], 0x89
push 0x1009f3d0
push eax
lea ecx, [esi + 0x64]
call fcn.100aeba0
lea ecx, [ebp - 0x30]
mov dword [ebp - 4], 0xffffffff
call fcn.1006c640
movzx eax, word [0x1020b7f1]
mov ecx, dword [esi + 0x2fc]
push eax
call fcn.100cfdf0
push eax
lea ecx, [ebp - 0x30]
call fcn.1006a470
mov dword [ebp - 4], 0x8a
push dword [ebx + 0x4a8]
lea eax, [ebp - 0x30]
push 0x1009f640
push eax
lea ecx, [esi + 0x64]
call fcn.100aeba0
lea ecx, [ebp - 0x30]
mov dword [ebp - 4], 0xffffffff
call fcn.1006c640
movzx eax, word [0x1020b7f3]
mov ecx, dword [esi + 0x2fc]
push eax
call fcn.100cfdf0
push eax
lea ecx, [ebp - 0x30]
call fcn.1006a470
push dword [ebx + 0x4ac]
lea eax, [ebp - 0x30]
mov dword [ebp - 4], 0x8b
push 0x1009f4a0
push eax
lea ecx, [esi + 0x64]
call fcn.100aeba0
lea ecx, [ebp - 0x30]
mov dword [ebp - 4], 0xffffffff
call fcn.1006c640
movzx eax, word [0x1020b7fb]
mov ecx, dword [esi + 0x2fc]
push eax
call fcn.100cfdf0
push eax
lea ecx, [ebp - 0x30]
call fcn.1006a470
push dword [ebx + 0x4bc]
lea eax, [ebp - 0x30]
mov dword [ebp - 4], 0x8c
push 0x1009ee20
push eax
lea ecx, [esi + 0x64]
call fcn.100aeba0
lea ecx, [ebp - 0x30]
mov dword [ebp - 4], 0xffffffff
call fcn.1006c640
movzx eax, word [0x1020b7fd]
mov ecx, dword [esi + 0x2fc]
push eax
call fcn.100cfdf0
push eax
lea ecx, [ebp - 0x30]
call fcn.1006a470
push dword [ebx + 0x4c0]
lea eax, [ebp - 0x30]
mov dword [ebp - 4], 0x8d
push 0x1009ee60
push eax
lea ecx, [esi + 0x64]
call fcn.100aeba0
lea ecx, [ebp - 0x30]
mov dword [ebp - 4], 0xffffffff
call fcn.1006c640
movzx eax, word [0x1020b7ff]
mov ecx, dword [esi + 0x2fc]
push eax
call fcn.100cfdf0
push eax
lea ecx, [ebp - 0x30]
call fcn.1006a470
push dword [ebx + 0x4c4]
lea eax, [ebp - 0x30]
mov dword [ebp - 4], 0x8e
push 0x1009eed0
push eax
lea ecx, [esi + 0x64]
call fcn.100aeba0
lea ecx, [ebp - 0x30]
mov dword [ebp - 4], 0xffffffff
call fcn.1006c640
movzx eax, word [0x1020b803]
mov ecx, dword [esi + 0x2fc]
push eax
call fcn.100cfdf0
push eax
lea ecx, [ebp - 0x30]
call fcn.1006a470
push dword [ebx + 0x4cc]
lea eax, [ebp - 0x30]
mov dword [ebp - 4], 0x8f
push 0x1009ef30
push eax
lea ecx, [esi + 0x64]
call fcn.100aeba0
lea ecx, [ebp - 0x30]
mov dword [ebp - 4], 0xffffffff
call fcn.1006c640
movzx eax, word [0x1020b807]
mov ecx, dword [esi + 0x2fc]
push eax
call fcn.100cfdf0
push eax
lea ecx, [ebp - 0x30]
call fcn.1006a470
push dword [ebx + 0x4d4]
lea eax, [ebp - 0x30]
mov dword [ebp - 4], 0x90
push 0x1009efd0
push eax
lea ecx, [esi + 0x64]
call fcn.100aeba0
lea ecx, [ebp - 0x30]
mov dword [ebp - 4], 0xffffffff
call fcn.1006c640
cmp byte [ebp + 0xc], 0
je 0x100aabc5
mov eax, 0x601
cmp word [ebp - 0x38], ax
jb 0x100aa7c7
cmp byte [ebp + 0x28], 0
jne 0x100aa7c7
movzx eax, word [0x1020b737]
mov ecx, dword [esi + 0x2fc]
push eax
call fcn.100cfdf0
push eax
lea ecx, [ebp - 0x30]
call fcn.1006a470
push dword [ebx + 0x364]
lea eax, [ebp - 0x30]
mov dword [ebp - 4], 0x91
push 0x1009cef0
push eax
lea ecx, [esi + 0xf4]
call fcn.100aeba0
lea ecx, [ebp - 0x30]
mov dword [ebp - 4], 0xffffffff
call fcn.1006c640
movzx eax, word [0x1020b743]
mov ecx, dword [esi + 0x2fc]
push eax
call fcn.100cfdf0
push eax
lea ecx, [ebp - 0x30]
call fcn.1006a470
push dword [ebx + 0x37c]
lea eax, [ebp - 0x30]
mov dword [ebp - 4], 0x92
push 0x1009f710
push eax
lea ecx, [esi + 0xf4]
call fcn.100aeba0
lea ecx, [ebp - 0x30]
mov dword [ebp - 4], 0xffffffff
call fcn.1006c640
movzx eax, word [0x1020b739]
mov ecx, dword [esi + 0x2fc]
push eax
call fcn.100cfdf0
push eax
lea ecx, [ebp - 0x30]
call fcn.1006a470
push dword [ebx + 0x368]
lea eax, [ebp - 0x30]
mov dword [ebp - 4], 0x93
push 0x1009cf50
push eax
lea ecx, [esi + 0xf4]
call fcn.100aeba0
lea ecx, [ebp - 0x30]
mov dword [ebp - 4], 0xffffffff
call fcn.1006c640
movzx eax, word [0x1020b745]
mov ecx, dword [esi + 0x2fc]
push eax
call fcn.100cfdf0
push eax
lea ecx, [ebp - 0x30]
call fcn.1006a470
push dword [ebx + 0x380]
lea eax, [ebp - 0x30]
mov dword [ebp - 4], 0x94
push 0x1009f770
push eax
lea ecx, [esi + 0xf4]
call fcn.100aeba0
lea ecx, [ebp - 0x30]
mov dword [ebp - 4], 0xffffffff
call fcn.1006c640
movzx eax, word [0x1020b759]
mov ecx, dword [esi + 0x2fc]
push eax
call fcn.100cfdf0
push eax
lea ecx, [ebp - 0x30]
call fcn.1006a470
mov dword [ebp - 4], 0x95
push dword [ebx + 0x3a8]
lea eax, [ebp - 0x30]
push 0x1009f7f0
push eax
lea ecx, [esi + 0x184]
call fcn.100aeba0
lea ecx, [ebp - 0x30]
mov dword [ebp - 4], 0xffffffff
call fcn.1006c640
movzx eax, word [0x1020b75b]
mov ecx, dword [esi + 0x2fc]
push eax
call fcn.100cfdf0
push eax
lea ecx, [ebp - 0x30]
call fcn.1006a470
push dword [ebx + 0x3ac]
lea eax, [ebp - 0x30]
mov dword [ebp - 4], 0x96
push 0x1009fc90
push eax
lea ecx, [esi + 0x184]
call fcn.100aeba0
lea ecx, [ebp - 0x30]
mov dword [ebp - 4], 0xffffffff
call fcn.1006c640
movzx eax, word [0x1020b75d]
mov ecx, dword [esi + 0x2fc]
push eax
call fcn.100cfdf0
push eax
lea ecx, [ebp - 0x30]
call fcn.1006a470
push dword [ebx + 0x3b0]
lea eax, [ebp - 0x30]
mov dword [ebp - 4], 0x97
push 0x1009d270
push eax
lea ecx, [esi + 0x184]
call fcn.100aeba0
lea ecx, [ebp - 0x30]
mov dword [ebp - 4], 0xffffffff
call fcn.1006c640
movzx eax, word [0x1020b787]
mov ecx, dword [esi + 0x2fc]
push eax
call fcn.100cfdf0
push eax
lea ecx, [ebp - 0x30]
call fcn.1006a470
push dword [ebx + 0x3e8]
lea eax, [ebp - 0x30]
mov dword [ebp - 4], 0x98
push 0x1009d570
push eax
lea ecx, [esi + 0xc4]
call fcn.100aeba0
lea ecx, [ebp - 0x30]
mov dword [ebp - 4], 0xffffffff
call fcn.1006c640
movzx eax, word [0x1020b789]
mov ecx, dword [esi + 0x2fc]
push eax
call fcn.100cfdf0
push eax
lea ecx, [ebp - 0x30]
call fcn.1006a470
push dword [ebx + 0x3ec]
lea eax, [ebp - 0x30]
mov dword [ebp - 4], 0x99
push 0x1009fbe0
push eax
lea ecx, [esi + 0xc4]
call fcn.100aeba0
lea ecx, [ebp - 0x30]
jmp 0x100aabb9
movzx eax, word [0x1020b737]
mov ecx, dword [esi + 0x2fc]
push eax
call fcn.100cfdf0
push eax
lea ecx, [ebp - 0x30]
call fcn.1006a470
push dword [ebx + 0x364]
lea eax, [ebp - 0x30]
mov dword [ebp - 4], 0x9a
push 0x1009cef0
push eax
lea ecx, [esi + 4]
call fcn.100aeba0
lea ecx, [ebp - 0x30]
mov dword [ebp - 4], 0xffffffff
call fcn.1006c640
movzx eax, word [0x1020b743]
mov ecx, dword [esi + 0x2fc]
push eax
call fcn.100cfdf0
push eax
lea ecx, [ebp - 0x30]
call fcn.1006a470
push dword [ebx + 0x37c]
lea eax, [ebp - 0x30]
mov dword [ebp - 4], 0x9b
push 0x1009f710
push eax
lea ecx, [esi + 4]
call fcn.100aeba0
lea ecx, [ebp - 0x30]
mov dword [ebp - 4], 0xffffffff
call fcn.1006c640
movzx eax, word [0x1020b739]
mov ecx, dword [esi + 0x2fc]
push eax
call fcn.100cfdf0
push eax
lea ecx, [ebp - 0x30]
call fcn.1006a470
push dword [ebx + 0x368]
lea eax, [ebp - 0x30]
mov dword [ebp - 4], 0x9c
push 0x1009cf50
push eax
lea ecx, [esi + 4]
call fcn.100aeba0
lea ecx, [ebp - 0x30]
mov dword [ebp - 4], 0xffffffff
call fcn.1006c640
movzx eax, word [0x1020b745]
mov ecx, dword [esi + 0x2fc]
push eax
call fcn.100cfdf0
push eax
lea ecx, [ebp - 0x30]
call fcn.1006a470
push dword [ebx + 0x380]
lea eax, [ebp - 0x30]
mov dword [ebp - 4], 0x9d
push 0x1009f770
push eax
lea ecx, [esi + 4]
call fcn.100aeba0
lea ecx, [ebp - 0x30]
mov dword [ebp - 4], 0xffffffff
call fcn.1006c640
movzx eax, word [0x1020b759]
mov ecx, dword [esi + 0x2fc]
push eax
call fcn.100cfdf0
push eax
lea ecx, [ebp - 0x30]
call fcn.1006a470
mov dword [ebp - 4], 0x9e
push dword [ebx + 0x3a8]
lea eax, [ebp - 0x30]
push 0x1009f7f0
push eax
lea ecx, [esi + 4]
call fcn.100aeba0
lea ecx, [ebp - 0x30]
mov dword [ebp - 4], 0xffffffff
call fcn.1006c640
movzx eax, word [0x1020b75b]
mov ecx, dword [esi + 0x2fc]
push eax
call fcn.100cfdf0
push eax
lea ecx, [ebp - 0x30]
call fcn.1006a470
push dword [ebx + 0x3ac]
lea eax, [ebp - 0x30]
mov dword [ebp - 4], 0x9f
push 0x1009fc90
push eax
lea ecx, [esi + 4]
call fcn.100aeba0
lea ecx, [ebp - 0x30]
mov dword [ebp - 4], 0xffffffff
call fcn.1006c640
movzx eax, word [0x1020b75d]
mov ecx, dword [esi + 0x2fc]
push eax
call fcn.100cfdf0
push eax
lea ecx, [ebp - 0x30]
call fcn.1006a470
push dword [ebx + 0x3b0]
lea eax, [ebp - 0x30]
mov dword [ebp - 4], 0xa0
push 0x1009d270
push eax
lea ecx, [esi + 4]
call fcn.100aeba0
lea ecx, [ebp - 0x30]
mov dword [ebp - 4], 0xffffffff
call fcn.1006c640
movzx eax, word [0x1020b787]
mov ecx, dword [esi + 0x2fc]
push eax
call fcn.100cfdf0
push eax
lea ecx, [ebp - 0x30]
call fcn.1006a470
push dword [ebx + 0x3e8]
lea eax, [ebp - 0x30]
mov dword [ebp - 4], 0xa1
push 0x1009d570
push eax
lea ecx, [esi + 4]
call fcn.100aeba0
lea ecx, [ebp - 0x30]
mov dword [ebp - 4], 0xffffffff
call fcn.1006c640
movzx eax, word [0x1020b789]
mov ecx, dword [esi + 0x2fc]
push eax
call fcn.100cfdf0
push eax
lea ecx, [ebp - 0x30]
call fcn.1006a470
push dword [ebx + 0x3ec]
lea eax, [ebp - 0x30]
mov dword [ebp - 4], 0xa2
push 0x1009fbe0
push eax
lea ecx, [esi + 4]
call fcn.100aeba0
lea ecx, [ebp - 0x30]
mov dword [ebp - 4], 0xffffffff
call fcn.1006c640
movzx eax, word [0x1020b6fb]
mov ecx, dword [esi + 0x2fc]
push eax
call fcn.100cfdf0
push eax
lea ecx, [ebp - 0x30]
call fcn.1006a470
push dword [ebx + 0x2f4]
lea eax, [ebp - 0x30]
mov dword [ebp - 4], 0xa3
push 0x1009d7f0
push eax
lea ecx, [esi + 4]
call fcn.100aeba0
lea ecx, [ebp - 0x30]
mov dword [ebp - 4], 0xffffffff
call fcn.1006c640
movzx eax, word [0x1020b75f]
mov ecx, dword [esi + 0x2fc]
push eax
call fcn.100cfdf0
push eax
lea ecx, [ebp - 0x30]
call fcn.1006a470
push dword [ebx + 0x3b4]
lea eax, [ebp - 0x30]
mov dword [ebp - 4], 0xa4
push 0x1009fc30
push eax
lea ecx, [esi + 4]
call fcn.100aeba0
lea ecx, [ebp - 0x30]
mov dword [ebp - 4], 0xffffffff
call fcn.1006c640
movzx eax, word [0x1020b6fd]
mov ecx, dword [esi + 0x2fc]
push eax
call fcn.100cfdf0
push eax
lea ecx, [ebp - 0x30]
call fcn.1006a470
push dword [ebx + 0x2f8]
lea eax, [ebp - 0x30]
mov dword [ebp - 4], 0xa5
push 0x1009d850
push eax
lea ecx, [esi + 4]
call fcn.100aeba0
lea ecx, [ebp - 0x30]
mov dword [ebp - 4], 0xffffffff
call fcn.1006c640
movzx eax, word [0x1020b6ff]
mov ecx, dword [esi + 0x2fc]
push eax
call fcn.100cfdf0
push eax
lea ecx, [ebp - 0x30]
call fcn.1006a470
push dword [ebx + 0x1e4]
lea eax, [ebp - 0x30]
mov dword [ebp - 4], 0xa6
push 0x1009d9b0
push eax
lea ecx, [esi + 4]
call fcn.100aeba0
lea ecx, [ebp - 0x30]
mov dword [ebp - 4], 0xffffffff
call fcn.1006c640
movzx eax, word [0x1020b761]
mov ecx, dword [esi + 0x2fc]
push eax
call fcn.100cfdf0
push eax
lea ecx, [ebp - 0x58]
call fcn.1006a470
mov dword [ebp - 4], 0xa7
push dword [ebx + 0x3b8]
lea eax, [ebp - 0x58]
push 0x1009fc60
push eax
lea ecx, [esi + 4]
call fcn.100aeba0
lea ecx, [ebp - 0x58]
mov dword [ebp - 4], 0xffffffff
call fcn.1006c640
mov ecx, esi
call fcn.100a20d0
mov ecx, esi
call fcn.100a2210
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 0x10]
xor ecx, ebp
call fcn.101b4a00
mov esp, ebp
pop ebp
ret 0x28
call fcn.100ecc9c
call fcn.100ecc9c
call fcn.100ecc9c
call fcn.100ecc9c
call fcn.100ecc9c
call fcn.100ecc9c
call fcn.100ecc9c
call fcn.100ecc9c
call fcn.100ecc9c
call fcn.100ecc9c
call fcn.100ecc9c
int3