Function at 0x1009d250
Capabilities:
Inspect section memory permissions

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x100d3894
mov eax, dword fs:[0]
push eax
mov eax, 0x1218
call fcn.100caa70
mov eax, dword [0x100ee008]
xor eax, ebp
mov dword [ebp - 0x10], eax
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov dword [ebp - 0x210], ecx
mov dword [ebp - 0x204], 0
mov dword [ebp - 0x200], 0
mov dword [ebp - 0x208], 0
mov dword [ebp - 0x20c], 0
mov eax, dword [0x102cf054]
mov dword [ebp - 0xdd4], eax
mov dword [ebp - 0xc2c], 0x100c8da0
mov ecx, dword [ebp - 0xc2c]
mov dword [ebp - 0xdbc], ecx
mov edx, dword [0x10448164]
mov eax, dword [edx + 8]
mov dword [ebp - 0xdc4], eax
mov ecx, dword [ebp - 0xdbc]
push ecx
push 0xfffffffffffffffc
mov edx, dword [ebp - 0xdc4]
push edx
call dword [ebp - 0xdd4]
mov ecx, dword [ebp - 0x210]
mov dword [ecx + 0x6ec], eax
mov edx, dword [ebp - 0x210]
mov dword [ebp - 0x224], edx
mov eax, dword [0x104480fc]
mov dword [ebp - 0xddc], eax
lea ecx, [ebp - 0x2cc]
mov dword [ebp - 0x5ac], ecx
mov edx, dword [ebp - 0x5ac]
mov eax, dword [ebp - 0xddc]
mov dword [edx], eax
mov ecx, dword [ebp - 0x5ac]
mov dword [ebp - 0xf18], ecx
mov dword [ebp - 4], 0
mov edx, dword [ebp - 0x224]
mov eax, dword [ebp - 0x2cc]
mov dword [edx], eax
mov ecx, dword [ebp - 0x2cc]
mov edx, dword [ecx]
mov dword [ebp - 0xe94], edx
mov eax, dword [ebp - 0x224]
mov ecx, dword [ebp - 0xe94]
mov dword [eax + 4], ecx
mov edx, dword [ebp - 0x224]
cmp dword [edx + 4], 0
jne 0x1009d386
mov dword [ebp - 4], 0xffffffff
jmp 0x1009d5c1
mov dword [ebp - 0x30c], 0
mov eax, dword [ebp - 0x224]
mov ecx, dword [eax + 4]
mov edx, dword [ebp - 0x30c]
mov eax, dword [ecx + edx*4]
mov dword [ebp - 0x6d0], eax
cmp dword [ebp - 0x6d0], 0
jne 0x1009d3ba
mov byte [ebp - 0x21d], 0
jmp 0x1009d412
mov ecx, dword [0x102cf050]
mov dword [ebp - 0xe98], ecx
push 0x1c
lea edx, [ebp - 0x1e4]
push edx
mov eax, dword [ebp - 0x6d0]
push eax
call dword [ebp - 0xe98]
test eax, eax
jne 0x1009d3e9
mov byte [ebp - 0x21d], 0
jmp 0x1009d412
mov ecx, dword [ebp - 0x1d0]
and ecx, 1
jne 0x1009d402
mov edx, dword [ebp - 0x1d0]
and edx, 0x100
je 0x1009d40b
mov byte [ebp - 0x21d], 0
jmp 0x1009d412
mov byte [ebp - 0x21d], 1
movzx eax, byte [ebp - 0x21d]
test eax, eax
je 0x1009d431
mov ecx, dword [ebp - 0x30c]
add ecx, 1
mov dword [ebp - 0x30c], ecx
jmp 0x1009d390
mov edx, dword [ebp - 0x224]
mov eax, dword [ebp - 0x30c]
mov dword [edx + 0xc], eax
mov ecx, dword [ebp - 0x224]
cmp dword [ecx + 0xc], 0
jne 0x1009d458
mov dword [ebp - 4], 0xffffffff
jmp 0x1009d5c1
mov edx, 1
test edx, edx
je 0x1009d475
mov eax, dword [ebp - 0x224]
mov ecx, dword [eax + 0xc]
add ecx, 1
mov dword [ebp - 0x6d4], ecx
jmp 0x1009d484
mov edx, dword [ebp - 0x224]
mov eax, dword [edx + 0xc]
mov dword [ebp - 0x6d4], eax
mov edx, dword [ebp - 0x6d4]
lea ecx, [ebp - 0xea0]
call fcn.10040210
mov dword [ebp - 0xe9c], eax
mov ecx, dword [ebp - 0xe9c]
push ecx
mov ecx, dword [ebp - 0x224]
add ecx, 8
call fcn.100402b0
lea ecx, [ebp - 0xea0]
call fcn.1003fb40
mov ecx, dword [ebp - 0x224]
add ecx, 8
call fcn.1003fb10
movzx edx, al
test edx, edx
jne 0x1009d4dc
mov dword [ebp - 4], 0xffffffff
jmp 0x1009d5c1
mov ecx, dword [ebp - 0x224]
add ecx, 8
call fcn.1003fb20
mov dword [ebp - 0xea4], eax
mov eax, dword [ebp - 0xea4]
mov dword [ebp - 0x24], eax
mov ecx, 1
test ecx, ecx
je 0x1009d575
mov edx, dword [ebp - 0x24]
mov dword [ebp - 0xea8], edx
mov eax, dword [ebp - 0x224]
mov ecx, dword [eax + 0xc]
lea edx, [ecx*4 + 4]
push edx
mov eax, dword [ebp - 0x224]
mov ecx, dword [eax + 4]
sub ecx, 4
push ecx
mov edx, dword [ebp - 0xea8]
push edx
call sub.VCRUNTIME140.dll_memcpy
add esp, 0xc
mov eax, dword [ebp - 0x24]
mov dword [ebp - 0xeac], eax
mov ecx, dword [ebp - 0xeac]
add ecx, 4
mov dword [ebp - 0xeb0], ecx
cmp dword [ebp - 0x2cc], 0
jne 0x1009d55b
jmp 0x1009d569
mov edx, dword [ebp - 0x2cc]
mov eax, dword [ebp - 0xeb0]
mov dword [edx], eax
mov ecx, dword [ebp - 0x224]
mov byte [ecx + 0x10], 1
jmp 0x1009d5ba
mov edx, dword [ebp - 0x24]
mov dword [ebp - 0xeb4], edx
mov eax, dword [ebp - 0x224]
mov ecx, dword [eax + 0xc]
shl ecx, 2
push ecx
mov edx, dword [ebp - 0x224]
mov eax, dword [edx + 4]
push eax
mov ecx, dword [ebp - 0xeb4]
push ecx
call sub.VCRUNTIME140.dll_memcpy
add esp, 0xc
cmp dword [ebp - 0x2cc], 0
jne 0x1009d5af
jmp 0x1009d5ba
mov edx, dword [ebp - 0x24]
mov eax, dword [ebp - 0x2cc]
mov dword [eax], edx
mov dword [ebp - 4], 0xffffffff
mov ecx, dword [ebp - 0x210]
mov dword [ebp - 0x2f8], ecx
mov dword [ebp - 0xeb8], 0x100b4520
mov edx, dword [ebp - 0x2f8]
movzx eax, byte [edx + 0x10]
test eax, eax
je 0x1009d5f5
mov ecx, 0x29
add ecx, 1
mov dword [ebp - 0x6d8], ecx
jmp 0x1009d5ff
mov dword [ebp - 0x6d8], 0x29
mov edx, dword [ebp - 0x6d8]
mov dword [ebp - 0x6dc], edx
mov eax, dword [ebp - 0x2f8]
cmp dword [eax + 4], 0
je 0x1009d63d
mov ecx, dword [ebp - 0x2f8]
add ecx, 8
call fcn.1003fb10
movzx ecx, al
test ecx, ecx
je 0x1009d63d
mov edx, dword [ebp - 0x2f8]
mov eax, dword [ebp - 0x6dc]
cmp eax, dword [edx + 0xc]
jbe 0x1009d667
mov dword [ebp - 0x380], 0
mov ecx, dword [ebp - 0x204]
or ecx, 1
mov dword [ebp - 0x204], ecx
lea edx, [ebp - 0x380]
mov dword [ebp - 0x730], edx
jmp 0x1009d7a6
mov eax, dword [ebp - 0xeb8]
mov dword [ebp - 0xebc], eax
mov ecx, dword [ebp - 0xebc]
mov dword [ebp - 0xec4], ecx
mov edx, dword [ebp - 0x2f8]
add edx, 8
mov dword [ebp - 0xec0], edx
mov eax, dword [ebp - 0x6dc]
push eax
mov ecx, dword [ebp - 0xec0]
call fcn.1003fb30
mov ecx, dword [ebp - 0xec4]
mov dword [eax], ecx
mov edx, 0x29
shl edx, 2
mov eax, dword [ebp - 0x2f8]
add edx, dword [eax + 4]
mov dword [ebp - 0x6e0], edx
mov ecx, dword [ebp - 0x6e0]
cmp dword [ecx], 0
je 0x1009d70d
mov edx, dword [ebp - 0x6e0]
mov eax, dword [edx]
mov dword [ebp - 0xec8], eax
mov ecx, dword [ebp - 0xec8]
mov dword [ebp - 0xecc], ecx
lea edx, [ebp - 0xecc]
mov dword [ebp - 0x720], edx
mov eax, dword [ebp - 0x204]
or eax, 2
mov dword [ebp - 0x204], eax
mov ecx, dword [ebp - 0x720]
mov dword [ebp - 0x6e4], ecx
jmp 0x1009d73e
mov dword [ebp - 0x724], 0
lea edx, [ebp - 0x724]
mov dword [ebp - 0x728], edx
mov eax, dword [ebp - 0x204]
or eax, 4
mov dword [ebp - 0x204], eax
mov ecx, dword [ebp - 0x728]
mov dword [ebp - 0x6e4], ecx
mov edx, dword [ebp - 0x6e4]
mov dword [ebp - 0x72c], edx
mov eax, dword [ebp - 0x72c]
mov ecx, dword [eax]
mov dword [ebp - 0x380], ecx
mov edx, dword [ebp - 0x204]
or edx, 8
mov dword [ebp - 0x204], edx
mov eax, dword [ebp - 0x204]
and eax, 4
je 0x1009d779
and dword [ebp - 0x204], 0xfffffffb
mov ecx, dword [ebp - 0x204]
and ecx, 2
je 0x1009d78b
and dword [ebp - 0x204], 0xfffffffd
mov edx, dword [ebp - 0x204]
or edx, 1
mov dword [ebp - 0x204], edx
lea eax, [ebp - 0x380]
mov dword [ebp - 0x730], eax
mov ecx, dword [ebp - 0x210]
add ecx, 0x28
mov dword [ebp - 0x228], ecx
mov edx, dword [0x104480e4]
mov dword [ebp - 0x734], edx
lea eax, [ebp - 0x2c4]
mov dword [ebp - 0x6e8], eax
mov ecx, dword [ebp - 0x6e8]
mov edx, dword [ebp - 0x734]
mov dword [ecx], edx
mov eax, dword [ebp - 0x6e8]
mov dword [ebp - 0xf1c], eax
mov dword [ebp - 4], 1
mov ecx, dword [ebp - 0x228]
mov edx, dword [ebp - 0x2c4]
mov dword [ecx], edx
mov eax, dword [ebp - 0x2c4]
mov ecx, dword [eax]
mov dword [ebp - 0x738], ecx
mov edx, dword [ebp - 0x228]
mov eax, dword [ebp - 0x738]
mov dword [edx + 4], eax
mov ecx, dword [ebp - 0x228]
cmp dword [ecx + 4], 0
jne 0x1009d831
mov dword [ebp - 4], 0xffffffff
jmp 0x1009da6b
mov dword [ebp - 0x31c], 0
mov edx, dword [ebp - 0x228]
mov eax, dword [edx + 4]
mov ecx, dword [ebp - 0x31c]
mov edx, dword [eax + ecx*4]
mov dword [ebp - 0x6ec], edx
cmp dword [ebp - 0x6ec], 0
jne 0x1009d865
mov byte [ebp - 0x211], 0
jmp 0x1009d8bc
mov eax, dword [0x102cf050]
mov dword [ebp - 0x73c], eax
push 0x1c
lea ecx, [ebp - 0x1c8]
push ecx
mov edx, dword [ebp - 0x6ec]
push edx
call dword [ebp - 0x73c]
test eax, eax
jne 0x1009d893
mov byte [ebp - 0x211], 0
jmp 0x1009d8bc
mov eax, dword [ebp - 0x1b4]
and eax, 1
jne 0x1009d8ac
mov ecx, dword [ebp - 0x1b4]
and ecx, 0x100
je 0x1009d8b5
mov byte [ebp - 0x211], 0
jmp 0x1009d8bc
mov byte [ebp - 0x211], 1
movzx edx, byte [ebp - 0x211]
test edx, edx
je 0x1009d8db
mov eax, dword [ebp - 0x31c]
add eax, 1
mov dword [ebp - 0x31c], eax
jmp 0x1009d83b
mov ecx, dword [ebp - 0x228]
mov edx, dword [ebp - 0x31c]
mov dword [ecx + 0xc], edx
mov eax, dword [ebp - 0x228]
cmp dword [eax + 0xc], 0
jne 0x1009d902
mov dword [ebp - 4], 0xffffffff
jmp 0x1009da6b
mov ecx, 1
test ecx, ecx
je 0x1009d91f
mov edx, dword [ebp - 0x228]
mov eax, dword [edx + 0xc]
add eax, 1
mov dword [ebp - 0x6f0], eax
jmp 0x1009d92e
mov ecx, dword [ebp - 0x228]
mov edx, dword [ecx + 0xc]
mov dword [ebp - 0x6f0], edx
mov edx, dword [ebp - 0x6f0]
lea ecx, [ebp - 0x744]
call fcn.10040210
mov dword [ebp - 0x740], eax
mov eax, dword [ebp - 0x740]
push eax
mov ecx, dword [ebp - 0x228]
add ecx, 8
call fcn.100402b0
lea ecx, [ebp - 0x744]
call fcn.1003fb40
mov ecx, dword [ebp - 0x228]
add ecx, 8
call fcn.1003fb10
movzx ecx, al
test ecx, ecx
jne 0x1009d986
mov dword [ebp - 4], 0xffffffff
jmp 0x1009da6b
mov ecx, dword [ebp - 0x228]
add ecx, 8
call fcn.1003fb20
mov dword [ebp - 0x748], eax
mov edx, dword [ebp - 0x748]
mov dword [ebp - 0x20], edx
mov eax, 1
test eax, eax
je 0x1009da1f
mov ecx, dword [ebp - 0x20]
mov dword [ebp - 0x74c], ecx
mov edx, dword [ebp - 0x228]
mov eax, dword [edx + 0xc]
lea ecx, [eax*4 + 4]
push ecx
mov edx, dword [ebp - 0x228]
mov eax, dword [edx + 4]
sub eax, 4
push eax
mov ecx, dword [ebp - 0x74c]
push ecx
call sub.VCRUNTIME140.dll_memcpy
add esp, 0xc
mov edx, dword [ebp - 0x20]
mov dword [ebp - 0x750], edx
mov eax, dword [ebp - 0x750]
add eax, 4
mov dword [ebp - 0x754], eax
cmp dword [ebp - 0x2c4], 0
jne 0x1009da05
jmp 0x1009da13
mov ecx, dword [ebp - 0x2c4]
mov edx, dword [ebp - 0x754]
mov dword [ecx], edx
mov eax, dword [ebp - 0x228]
mov byte [eax + 0x10], 1
jmp 0x1009da64
mov ecx, dword [ebp - 0x20]
mov dword [ebp - 0x758], ecx
mov edx, dword [ebp - 0x228]
mov eax, dword [edx + 0xc]
shl eax, 2
push eax
mov ecx, dword [ebp - 0x228]
mov edx, dword [ecx + 4]
push edx
mov eax, dword [ebp - 0x758]
push eax
call sub.VCRUNTIME140.dll_memcpy
add esp, 0xc
cmp dword [ebp - 0x2c4], 0
jne 0x1009da59
jmp 0x1009da64
mov ecx, dword [ebp - 0x20]
mov edx, dword [ebp - 0x2c4]
mov dword [edx], ecx
mov dword [ebp - 4], 0xffffffff
mov eax, dword [ebp - 0x210]
add eax, 0x28
mov dword [ebp - 0x2c0], eax
mov dword [ebp - 0x75c], 0x100a9200
mov ecx, dword [ebp - 0x2c0]
movzx edx, byte [ecx + 0x10]
test edx, edx
je 0x1009daa2
mov eax, 5
add eax, 1
mov dword [ebp - 0x6f4], eax
jmp 0x1009daac
mov dword [ebp - 0x6f4], 5
mov ecx, dword [ebp - 0x6f4]
mov dword [ebp - 0x6f8], ecx
mov edx, dword [ebp - 0x2c0]
cmp dword [edx + 4], 0
je 0x1009daea
mov ecx, dword [ebp - 0x2c0]
add ecx, 8
call fcn.1003fb10
movzx eax, al
test eax, eax
je 0x1009daea
mov ecx, dword [ebp - 0x2c0]
mov edx, dword [ebp - 0x6f8]
cmp edx, dword [ecx + 0xc]
jbe 0x1009db14
mov dword [ebp - 0x384], 0
mov eax, dword [ebp - 0x204]
or eax, 0x10
mov dword [ebp - 0x204], eax
lea ecx, [ebp - 0x384]
mov dword [ebp - 0x784], ecx
jmp 0x1009dc56
mov edx, dword [ebp - 0x75c]
mov dword [ebp - 0x760], edx
mov eax, dword [ebp - 0x760]
mov dword [ebp - 0x768], eax
mov ecx, dword [ebp - 0x2c0]
add ecx, 8
mov dword [ebp - 0x764], ecx
mov edx, dword [ebp - 0x6f8]
push edx
mov ecx, dword [ebp - 0x764]
call fcn.1003fb30
mov ecx, dword [ebp - 0x768]
mov dword [eax], ecx
mov edx, 5
shl edx, 2
mov eax, dword [ebp - 0x2c0]
add edx, dword [eax + 4]
mov dword [ebp - 0x6fc], edx
mov ecx, dword [ebp - 0x6fc]
cmp dword [ecx], 0
je 0x1009dbba
mov edx, dword [ebp - 0x6fc]
mov eax, dword [edx]
mov dword [ebp - 0x76c], eax
mov ecx, dword [ebp - 0x76c]
mov dword [ebp - 0x770], ecx
lea edx, [ebp - 0x770]
mov dword [ebp - 0x774], edx
mov eax, dword [ebp - 0x204]
or eax, 0x20
mov dword [ebp - 0x204], eax
mov ecx, dword [ebp - 0x774]
mov dword [ebp - 0x700], ecx
jmp 0x1009dbeb
mov dword [ebp - 0x778], 0
lea edx, [ebp - 0x778]
mov dword [ebp - 0x77c], edx
mov eax, dword [ebp - 0x204]
or eax, 0x40
mov dword [ebp - 0x204], eax
mov ecx, dword [ebp - 0x77c]
mov dword [ebp - 0x700], ecx
mov edx, dword [ebp - 0x700]
mov dword [ebp - 0x780], edx
mov eax, dword [ebp - 0x780]
mov ecx, dword [eax]
mov dword [ebp - 0x384], ecx
mov edx, dword [ebp - 0x204]
or edx, 0x80
mov dword [ebp - 0x204], edx
mov eax, dword [ebp - 0x204]
and eax, 0x40
je 0x1009dc29
and dword [ebp - 0x204], 0xffffffbf
mov ecx, dword [ebp - 0x204]
and ecx, 0x20
je 0x1009dc3b
and dword [ebp - 0x204], 0xffffffdf
mov edx, dword [ebp - 0x204]
or edx, 0x10
mov dword [ebp - 0x204], edx
lea eax, [ebp - 0x384]
mov dword [ebp - 0x784], eax
mov ecx, dword [ebp - 0x210]
add ecx, 0x28
mov dword [ebp - 0x2bc], ecx
mov dword [ebp - 0x788], 0x100a92b0
mov edx, dword [ebp - 0x2bc]
movzx eax, byte [edx + 0x10]
test eax, eax
je 0x1009dc8d
mov ecx, 6
add ecx, 1
mov dword [ebp - 0x704], ecx
jmp 0x1009dc97
mov dword [ebp - 0x704], 6
mov edx, dword [ebp - 0x704]
mov dword [ebp - 0x708], edx
mov eax, dword [ebp - 0x2bc]
cmp dword [eax + 4], 0
je 0x1009dcd5
mov ecx, dword [ebp - 0x2bc]
add ecx, 8
call fcn.1003fb10
movzx ecx, al
test ecx, ecx
je 0x1009dcd5
mov edx, dword [ebp - 0x2bc]
mov eax, dword [ebp - 0x708]
cmp eax, dword [edx + 0xc]
jbe 0x1009dd02
mov dword [ebp - 0x388], 0
mov ecx, dword [ebp - 0x204]
or ecx, 0x100
mov dword [ebp - 0x204], ecx
lea edx, [ebp - 0x388]
mov dword [ebp - 0x7b0], edx
jmp 0x1009de56
mov eax, dword [ebp - 0x788]
mov dword [ebp - 0x78c], eax
mov ecx, dword [ebp - 0x78c]
mov dword [ebp - 0x794], ecx
mov edx, dword [ebp - 0x2bc]
add edx, 8
mov dword [ebp - 0x790], edx
mov eax, dword [ebp - 0x708]
push eax
mov ecx, dword [ebp - 0x790]
call fcn.1003fb30
mov ecx, dword [ebp - 0x794]
mov dword [eax], ecx
mov edx, 6
shl edx, 2
mov eax, dword [ebp - 0x2bc]
add edx, dword [eax + 4]
mov dword [ebp - 0x70c], edx
mov ecx, dword [ebp - 0x70c]
cmp dword [ecx], 0
je 0x1009ddaa
mov edx, dword [ebp - 0x70c]
mov eax, dword [edx]
mov dword [ebp - 0x798], eax
mov ecx, dword [ebp - 0x798]
mov dword [ebp - 0x79c], ecx
lea edx, [ebp - 0x79c]
mov dword [ebp - 0x7a0], edx
mov eax, dword [ebp - 0x204]
or eax, 0x200
mov dword [ebp - 0x204], eax
mov ecx, dword [ebp - 0x7a0]
mov dword [ebp - 0x710], ecx
jmp 0x1009dddd
mov dword [ebp - 0x7a4], 0
lea edx, [ebp - 0x7a4]
mov dword [ebp - 0x7a8], edx
mov eax, dword [ebp - 0x204]
or eax, 0x400
mov dword [ebp - 0x204], eax
mov ecx, dword [ebp - 0x7a8]
mov dword [ebp - 0x710], ecx
mov edx, dword [ebp - 0x710]
mov dword [ebp - 0x7ac], edx
mov eax, dword [ebp - 0x7ac]
mov ecx, dword [eax]
mov dword [ebp - 0x388], ecx
mov edx, dword [ebp - 0x204]
or edx, 0x800
mov dword [ebp - 0x204], edx
mov eax, dword [ebp - 0x204]
and eax, 0x400
je 0x1009de20
and dword [ebp - 0x204], 0xfffffbff
mov ecx, dword [ebp - 0x204]
and ecx, 0x200
je 0x1009de38
and dword [ebp - 0x204], 0xfffffdff
mov edx, dword [ebp - 0x204]
or edx, 0x100
mov dword [ebp - 0x204], edx
lea eax, [ebp - 0x388]
mov dword [ebp - 0x7b0], eax
mov ecx, dword [ebp - 0x210]
add ecx, 0x28
mov dword [ebp - 0x2b8], ecx
mov dword [ebp - 0x7b4], 0x100a92f0
mov edx, dword [ebp - 0x2b8]
movzx eax, byte [edx + 0x10]
test eax, eax
je 0x1009de8d
mov ecx, 7
add ecx, 1
mov dword [ebp - 0x714], ecx
jmp 0x1009de97
mov dword [ebp - 0x714], 7
mov edx, dword [ebp - 0x714]
mov dword [ebp - 0x718], edx
mov eax, dword [ebp - 0x2b8]
cmp dword [eax + 4], 0
je 0x1009ded5
mov ecx, dword [ebp - 0x2b8]
add ecx, 8
call fcn.1003fb10
movzx ecx, al
test ecx, ecx
je 0x1009ded5
mov edx, dword [ebp - 0x2b8]
mov eax, dword [ebp - 0x718]
cmp eax, dword [edx + 0xc]
jbe 0x1009df02
mov dword [ebp - 0x38c], 0
mov ecx, dword [ebp - 0x204]
or ecx, 0x1000
mov dword [ebp - 0x204], ecx
lea edx, [ebp - 0x38c]
mov dword [ebp - 0x7dc], edx
jmp 0x1009e056
mov eax, dword [ebp - 0x7b4]
mov dword [ebp - 0x7b8], eax
mov ecx, dword [ebp - 0x7b8]
mov dword [ebp - 0x7c0], ecx
mov edx, dword [ebp - 0x2b8]
add edx, 8
mov dword [ebp - 0x7bc], edx
mov eax, dword [ebp - 0x718]
push eax
mov ecx, dword [ebp - 0x7bc]
call fcn.1003fb30
mov ecx, dword [ebp - 0x7c0]
mov dword [eax], ecx
mov edx, 7
shl edx, 2
mov eax, dword [ebp - 0x2b8]
add edx, dword [eax + 4]
mov dword [ebp - 0x3c4], edx
mov ecx, dword [ebp - 0x3c4]
cmp dword [ecx], 0
je 0x1009dfaa
mov edx, dword [ebp - 0x3c4]
mov eax, dword [edx]
mov dword [ebp - 0x7c4], eax
mov ecx, dword [ebp - 0x7c4]
mov dword [ebp - 0x7c8], ecx
lea edx, [ebp - 0x7c8]
mov dword [ebp - 0x7cc], edx
mov eax, dword [ebp - 0x204]
or eax, 0x2000
mov dword [ebp - 0x204], eax
mov ecx, dword [ebp - 0x7cc]
mov dword [ebp - 0x3c8], ecx
jmp 0x1009dfdd
mov dword [ebp - 0x7d0], 0
lea edx, [ebp - 0x7d0]
mov dword [ebp - 0x7d4], edx
mov eax, dword [ebp - 0x204]
or eax, 0x4000
mov dword [ebp - 0x204], eax
mov ecx, dword [ebp - 0x7d4]
mov dword [ebp - 0x3c8], ecx
mov edx, dword [ebp - 0x3c8]
mov dword [ebp - 0x7d8], edx
mov eax, dword [ebp - 0x7d8]
mov ecx, dword [eax]
mov dword [ebp - 0x38c], ecx
mov edx, dword [ebp - 0x204]
or edx, 0x8000
mov dword [ebp - 0x204], edx
mov eax, dword [ebp - 0x204]
and eax, 0x4000
je 0x1009e020
and dword [ebp - 0x204], 0xffffbfff
mov ecx, dword [ebp - 0x204]
and ecx, 0x2000
je 0x1009e038
and dword [ebp - 0x204], 0xffffdfff
mov edx, dword [ebp - 0x204]
or edx, 0x1000
mov dword [ebp - 0x204], edx
lea eax, [ebp - 0x38c]
mov dword [ebp - 0x7dc], eax
mov ecx, dword [ebp - 0x210]
add ecx, 0x28
mov dword [ebp - 0x2b4], ecx
mov dword [ebp - 0x7e0], 0x100a9370
mov edx, dword [ebp - 0x2b4]
movzx eax, byte [edx + 0x10]
test eax, eax
je 0x1009e08d
mov ecx, 0x24
add ecx, 1
mov dword [ebp - 0x3cc], ecx
jmp 0x1009e097
mov dword [ebp - 0x3cc], 0x24
mov edx, dword [ebp - 0x3cc]
mov dword [ebp - 0x3d0], edx
mov eax, dword [ebp - 0x2b4]
cmp dword [eax + 4], 0
je 0x1009e0d5
mov ecx, dword [ebp - 0x2b4]
add ecx, 8
call fcn.1003fb10
movzx ecx, al
test ecx, ecx
je 0x1009e0d5
mov edx, dword [ebp - 0x2b4]
mov eax, dword [ebp - 0x3d0]
cmp eax, dword [edx + 0xc]
jbe 0x1009e102
mov dword [ebp - 0x390], 0
mov ecx, dword [ebp - 0x204]
or ecx, 0x10000
mov dword [ebp - 0x204], ecx
lea edx, [ebp - 0x390]
mov dword [ebp - 0x808], edx
jmp 0x1009e256
mov eax, dword [ebp - 0x7e0]
mov dword [ebp - 0x7e4], eax
mov ecx, dword [ebp - 0x7e4]
mov dword [ebp - 0x7ec], ecx
mov edx, dword [ebp - 0x2b4]
add edx, 8
mov dword [ebp - 0x7e8], edx
mov eax, dword [ebp - 0x3d0]
push eax
mov ecx, dword [ebp - 0x7e8]
call fcn.1003fb30
mov ecx, dword [ebp - 0x7ec]
mov dword [eax], ecx
mov edx, 0x24
shl edx, 2
mov eax, dword [ebp - 0x2b4]
add edx, dword [eax + 4]
mov dword [ebp - 0x3d4], edx
mov ecx, dword [ebp - 0x3d4]
cmp dword [ecx], 0
je 0x1009e1aa
mov edx, dword [ebp - 0x3d4]
mov eax, dword [edx]
mov dword [ebp - 0x7f0], eax
mov ecx, dword [ebp - 0x7f0]
mov dword [ebp - 0x7f4], ecx
lea edx, [ebp - 0x7f4]
mov dword [ebp - 0x7f8], edx
mov eax, dword [ebp - 0x204]
or eax, 0x20000
mov dword [ebp - 0x204], eax
mov ecx, dword [ebp - 0x7f8]
mov dword [ebp - 0x3d8], ecx
jmp 0x1009e1dd
mov dword [ebp - 0x7fc], 0
lea edx, [ebp - 0x7fc]
mov dword [ebp - 0x800], edx
mov eax, dword [ebp - 0x204]
or eax, 0x40000
mov dword [ebp - 0x204], eax
mov ecx, dword [ebp - 0x800]
mov dword [ebp - 0x3d8], ecx
mov edx, dword [ebp - 0x3d8]
mov dword [ebp - 0x804], edx
mov eax, dword [ebp - 0x804]
mov ecx, dword [eax]
mov dword [ebp - 0x390], ecx
mov edx, dword [ebp - 0x204]
or edx, 0x80000
mov dword [ebp - 0x204], edx
mov eax, dword [ebp - 0x204]
and eax, 0x40000
je 0x1009e220
and dword [ebp - 0x204], 0xfffbffff
mov ecx, dword [ebp - 0x204]
and ecx, 0x20000
je 0x1009e238
and dword [ebp - 0x204], 0xfffdffff
mov edx, dword [ebp - 0x204]
or edx, 0x10000
mov dword [ebp - 0x204], edx
lea eax, [ebp - 0x390]
mov dword [ebp - 0x808], eax
mov ecx, dword [ebp - 0x210]
add ecx, 0x50
mov dword [ebp - 0x234], ecx
mov edx, dword [0x104480ec]
mov dword [ebp - 0x80c], edx
lea eax, [ebp - 0x2b0]
mov dword [ebp - 0x3dc], eax
mov ecx, dword [ebp - 0x3dc]
mov edx, dword [ebp - 0x80c]
mov dword [ecx], edx
mov eax, dword [ebp - 0x3dc]
mov dword [ebp - 0xf20], eax
mov dword [ebp - 4], 2
mov ecx, dword [ebp - 0x234]
mov edx, dword [ebp - 0x2b0]
mov dword [ecx], edx
mov eax, dword [ebp - 0x2b0]
mov ecx, dword [eax]
mov dword [ebp - 0x810], ecx
mov edx, dword [ebp - 0x234]
mov eax, dword [ebp - 0x810]
mov dword [edx + 4], eax
mov ecx, dword [ebp - 0x234]
cmp dword [ecx + 4], 0
jne 0x1009e2e1
mov dword [ebp - 4], 0xffffffff
jmp 0x1009e51b
mov dword [ebp - 0x32c], 0
mov edx, dword [ebp - 0x234]
mov eax, dword [edx + 4]
mov ecx, dword [ebp - 0x32c]
mov edx, dword [eax + ecx*4]
mov dword [ebp - 0x3e0], edx
cmp dword [ebp - 0x3e0], 0
jne 0x1009e315
mov byte [ebp - 0x212], 0
jmp 0x1009e36c
mov eax, dword [0x102cf050]
mov dword [ebp - 0x814], eax
push 0x1c
lea ecx, [ebp - 0x1ac]
push ecx
mov edx, dword [ebp - 0x3e0]
push edx
call dword [ebp - 0x814]
test eax, eax
jne 0x1009e343
mov byte [ebp - 0x212], 0
jmp 0x1009e36c
mov eax, dword [ebp - 0x198]
and eax, 1
jne 0x1009e35c
mov ecx, dword [ebp - 0x198]
and ecx, 0x100
je 0x1009e365
mov byte [ebp - 0x212], 0
jmp 0x1009e36c
mov byte [ebp - 0x212], 1
movzx edx, byte [ebp - 0x212]
test edx, edx
je 0x1009e38b
mov eax, dword [ebp - 0x32c]
add eax, 1
mov dword [ebp - 0x32c], eax
jmp 0x1009e2eb
mov ecx, dword [ebp - 0x234]
mov edx, dword [ebp - 0x32c]
mov dword [ecx + 0xc], edx
mov eax, dword [ebp - 0x234]
cmp dword [eax + 0xc], 0
jne 0x1009e3b2
mov dword [ebp - 4], 0xffffffff
jmp 0x1009e51b
mov ecx, 1
test ecx, ecx
je 0x1009e3cf
mov edx, dword [ebp - 0x234]
mov eax, dword [edx + 0xc]
add eax, 1
mov dword [ebp - 0x3e4], eax
jmp 0x1009e3de
mov ecx, dword [ebp - 0x234]
mov edx, dword [ecx + 0xc]
mov dword [ebp - 0x3e4], edx
mov edx, dword [ebp - 0x3e4]
lea ecx, [ebp - 0x81c]
call fcn.10040210
mov dword [ebp - 0x818], eax
mov eax, dword [ebp - 0x818]
push eax
mov ecx, dword [ebp - 0x234]
add ecx, 8
call fcn.100402b0
lea ecx, [ebp - 0x81c]
call fcn.1003fb40
mov ecx, dword [ebp - 0x234]
add ecx, 8
call fcn.1003fb10
movzx ecx, al
test ecx, ecx
jne 0x1009e436
mov dword [ebp - 4], 0xffffffff
jmp 0x1009e51b
mov ecx, dword [ebp - 0x234]
add ecx, 8
call fcn.1003fb20
mov dword [ebp - 0x820], eax
mov edx, dword [ebp - 0x820]
mov dword [ebp - 0x1c], edx
mov eax, 1
test eax, eax
je 0x1009e4cf
mov ecx, dword [ebp - 0x1c]
mov dword [ebp - 0x824], ecx
mov edx, dword [ebp - 0x234]
mov eax, dword [edx + 0xc]
lea ecx, [eax*4 + 4]
push ecx
mov edx, dword [ebp - 0x234]
mov eax, dword [edx + 4]
sub eax, 4
push eax
mov ecx, dword [ebp - 0x824]
push ecx
call sub.VCRUNTIME140.dll_memcpy
add esp, 0xc
mov edx, dword [ebp - 0x1c]
mov dword [ebp - 0x828], edx
mov eax, dword [ebp - 0x828]
add eax, 4
mov dword [ebp - 0x82c], eax
cmp dword [ebp - 0x2b0], 0
jne 0x1009e4b5
jmp 0x1009e4c3
mov ecx, dword [ebp - 0x2b0]
mov edx, dword [ebp - 0x82c]
mov dword [ecx], edx
mov eax, dword [ebp - 0x234]
mov byte [eax + 0x10], 1
jmp 0x1009e514
mov ecx, dword [ebp - 0x1c]
mov dword [ebp - 0x830], ecx
mov edx, dword [ebp - 0x234]
mov eax, dword [edx + 0xc]
shl eax, 2
push eax
mov ecx, dword [ebp - 0x234]
mov edx, dword [ecx + 4]
push edx
mov eax, dword [ebp - 0x830]
push eax
call sub.VCRUNTIME140.dll_memcpy
add esp, 0xc
cmp dword [ebp - 0x2b0], 0
jne 0x1009e509
jmp 0x1009e514
mov ecx, dword [ebp - 0x1c]
mov edx, dword [ebp - 0x2b0]
mov dword [edx], ecx
mov dword [ebp - 4], 0xffffffff
mov eax, dword [ebp - 0x210]
add eax, 0x50
mov dword [ebp - 0x2ac], eax
mov dword [ebp - 0x834], 0x100a7c60
mov ecx, dword [ebp - 0x2ac]
movzx edx, byte [ecx + 0x10]
test edx, edx
je 0x1009e552
mov eax, 0x1b
add eax, 1
mov dword [ebp - 0x3e8], eax
jmp 0x1009e55c
mov dword [ebp - 0x3e8], 0x1b
mov ecx, dword [ebp - 0x3e8]
mov dword [ebp - 0x3ec], ecx
mov edx, dword [ebp - 0x2ac]
cmp dword [edx + 4], 0
je 0x1009e59a
mov ecx, dword [ebp - 0x2ac]
add ecx, 8
call fcn.1003fb10
movzx eax, al
test eax, eax
je 0x1009e59a
mov ecx, dword [ebp - 0x2ac]
mov edx, dword [ebp - 0x3ec]
cmp edx, dword [ecx + 0xc]
jbe 0x1009e5c6
mov dword [ebp - 0x394], 0
mov eax, dword [ebp - 0x204]
or eax, 0x100000
mov dword [ebp - 0x204], eax
lea ecx, [ebp - 0x394]
mov dword [ebp - 0x85c], ecx
jmp 0x1009e71a
mov edx, dword [ebp - 0x834]
mov dword [ebp - 0x838], edx
mov eax, dword [ebp - 0x838]
mov dword [ebp - 0x840], eax
mov ecx, dword [ebp - 0x2ac]
add ecx, 8
mov dword [ebp - 0x83c], ecx
mov edx, dword [ebp - 0x3ec]
push edx
mov ecx, dword [ebp - 0x83c]
call fcn.1003fb30
mov ecx, dword [ebp - 0x840]
mov dword [eax], ecx
mov edx, 0x1b
shl edx, 2
mov eax, dword [ebp - 0x2ac]
add edx, dword [eax + 4]
mov dword [ebp - 0x3f0], edx
mov ecx, dword [ebp - 0x3f0]
cmp dword [ecx], 0
je 0x1009e66e
mov edx, dword [ebp - 0x3f0]
mov eax, dword [edx]
mov dword [ebp - 0x844], eax
mov ecx, dword [ebp - 0x844]
mov dword [ebp - 0x848], ecx
lea edx, [ebp - 0x848]
mov dword [ebp - 0x84c], edx
mov eax, dword [ebp - 0x204]
or eax, 0x200000
mov dword [ebp - 0x204], eax
mov ecx, dword [ebp - 0x84c]
mov dword [ebp - 0x3f4], ecx
jmp 0x1009e6a1
mov dword [ebp - 0x850], 0
lea edx, [ebp - 0x850]
mov dword [ebp - 0x854], edx
mov eax, dword [ebp - 0x204]
or eax, 0x400000
mov dword [ebp - 0x204], eax
mov ecx, dword [ebp - 0x854]
mov dword [ebp - 0x3f4], ecx
mov edx, dword [ebp - 0x3f4]
mov dword [ebp - 0x858], edx
mov eax, dword [ebp - 0x858]
mov ecx, dword [eax]
mov dword [ebp - 0x394], ecx
mov edx, dword [ebp - 0x204]
or edx, 0x800000
mov dword [ebp - 0x204], edx
mov eax, dword [ebp - 0x204]
and eax, 0x400000
je 0x1009e6e4
and dword [ebp - 0x204], 0xffbfffff
mov ecx, dword [ebp - 0x204]
and ecx, 0x200000
je 0x1009e6fc
and dword [ebp - 0x204], 0xffdfffff
mov edx, dword [ebp - 0x204]
or edx, 0x100000
mov dword [ebp - 0x204], edx
lea eax, [ebp - 0x394]
mov dword [ebp - 0x85c], eax
mov ecx, dword [ebp - 0x210]
add ecx, 0x50
mov dword [ebp - 0x2a8], ecx
mov dword [ebp - 0x860], 0x100a7da0
mov edx, dword [ebp - 0x2a8]
movzx eax, byte [edx + 0x10]
test eax, eax
je 0x1009e751
mov ecx, 0x5d
add ecx, 1
mov dword [ebp - 0x3f8], ecx
jmp 0x1009e75b
mov dword [ebp - 0x3f8], 0x5d
mov edx, dword [ebp - 0x3f8]
mov dword [ebp - 0x3fc], edx
mov eax, dword [ebp - 0x2a8]
cmp dword [eax + 4], 0
je 0x1009e799
mov ecx, dword [ebp - 0x2a8]
add ecx, 8
call fcn.1003fb10
movzx ecx, al
test ecx, ecx
je 0x1009e799
mov edx, dword [ebp - 0x2a8]
mov eax, dword [ebp - 0x3fc]
cmp eax, dword [edx + 0xc]
jbe 0x1009e7c6
mov dword [ebp - 0x398], 0
mov ecx, dword [ebp - 0x204]
or ecx, 0x1000000
mov dword [ebp - 0x204], ecx
lea edx, [ebp - 0x398]
mov dword [ebp - 0x888], edx
jmp 0x1009e91a
mov eax, dword [ebp - 0x860]
mov dword [ebp - 0x864], eax
mov ecx, dword [ebp - 0x864]
mov dword [ebp - 0x86c], ecx
mov edx, dword [ebp - 0x2a8]
add edx, 8
mov dword [ebp - 0x868], edx
mov eax, dword [ebp - 0x3fc]
push eax
mov ecx, dword [ebp - 0x868]
call fcn.1003fb30
mov ecx, dword [ebp - 0x86c]
mov dword [eax], ecx
mov edx, 0x5d
shl edx, 2
mov eax, dword [ebp - 0x2a8]
add edx, dword [eax + 4]
mov dword [ebp - 0x400], edx
mov ecx, dword [ebp - 0x400]
cmp dword [ecx], 0
je 0x1009e86e
mov edx, dword [ebp - 0x400]
mov eax, dword [edx]
mov dword [ebp - 0x870], eax
mov ecx, dword [ebp - 0x870]
mov dword [ebp - 0x874], ecx
lea edx, [ebp - 0x874]
mov dword [ebp - 0x878], edx
mov eax, dword [ebp - 0x204]
or eax, 0x2000000
mov dword [ebp - 0x204], eax
mov ecx, dword [ebp - 0x878]
mov dword [ebp - 0x404], ecx
jmp 0x1009e8a1
mov dword [ebp - 0x87c], 0
lea edx, [ebp - 0x87c]
mov dword [ebp - 0x880], edx
mov eax, dword [ebp - 0x204]
or eax, 0x4000000
mov dword [ebp - 0x204], eax
mov ecx, dword [ebp - 0x880]
mov dword [ebp - 0x404], ecx
mov edx, dword [ebp - 0x404]
mov dword [ebp - 0x884], edx
mov eax, dword [ebp - 0x884]
mov ecx, dword [eax]
mov dword [ebp - 0x398], ecx
mov edx, dword [ebp - 0x204]
or edx, 0x8000000
mov dword [ebp - 0x204], edx
mov eax, dword [ebp - 0x204]
and eax, 0x4000000
je 0x1009e8e4
and dword [ebp - 0x204], 0xfbffffff
mov ecx, dword [ebp - 0x204]
and ecx, 0x2000000
je 0x1009e8fc
and dword [ebp - 0x204], 0xfdffffff
mov edx, dword [ebp - 0x204]
or edx, 0x1000000
mov dword [ebp - 0x204], edx
lea eax, [ebp - 0x398]
mov dword [ebp - 0x888], eax
mov ecx, dword [ebp - 0x210]
add ecx, 0x50
mov dword [ebp - 0x2a4], ecx
mov dword [ebp - 0x88c], 0x100a7fc0
mov edx, dword [ebp - 0x2a4]
movzx eax, byte [edx + 0x10]
test eax, eax
je 0x1009e951
mov ecx, 0x5a
add ecx, 1
mov dword [ebp - 0x408], ecx
jmp 0x1009e95b
mov dword [ebp - 0x408], 0x5a
mov edx, dword [ebp - 0x408]
mov dword [ebp - 0x40c], edx
mov eax, dword [ebp - 0x2a4]
cmp dword [eax + 4], 0
je 0x1009e999
mov ecx, dword [ebp - 0x2a4]
add ecx, 8
call fcn.1003fb10
movzx ecx, al
test ecx, ecx
je 0x1009e999
mov edx, dword [ebp - 0x2a4]
mov eax, dword [ebp - 0x40c]
cmp eax, dword [edx + 0xc]
jbe 0x1009e9c6
mov dword [ebp - 0x39c], 0
mov ecx, dword [ebp - 0x204]
or ecx, 0x10000000
mov dword [ebp - 0x204], ecx
lea edx, [ebp - 0x39c]
mov dword [ebp - 0x8b4], edx
jmp 0x1009eb1a
mov eax, dword [ebp - 0x88c]
mov dword [ebp - 0x890], eax
mov ecx, dword [ebp - 0x890]
mov dword [ebp - 0x898], ecx
mov edx, dword [ebp - 0x2a4]
add edx, 8
mov dword [ebp - 0x894], edx
mov eax, dword [ebp - 0x40c]
push eax
mov ecx, dword [ebp - 0x894]
call fcn.1003fb30
mov ecx, dword [ebp - 0x898]
mov dword [eax], ecx
mov edx, 0x5a
shl edx, 2
mov eax, dword [ebp - 0x2a4]
add edx, dword [eax + 4]
mov dword [ebp - 0x410], edx
mov ecx, dword [ebp - 0x410]
cmp dword [ecx], 0
je 0x1009ea6e
mov edx, dword [ebp - 0x410]
mov eax, dword [edx]
mov dword [ebp - 0x89c], eax
mov ecx, dword [ebp - 0x89c]
mov dword [ebp - 0x8a0], ecx
lea edx, [ebp - 0x8a0]
mov dword [ebp - 0x8a4], edx
mov eax, dword [ebp - 0x204]
or eax, 0x20000000
mov dword [ebp - 0x204], eax
mov ecx, dword [ebp - 0x8a4]
mov dword [ebp - 0x414], ecx
jmp 0x1009eaa1
mov dword [ebp - 0x8a8], 0
lea edx, [ebp - 0x8a8]
mov dword [ebp - 0x8ac], edx
mov eax, dword [ebp - 0x204]
or eax, 0x40000000
mov dword [ebp - 0x204], eax
mov ecx, dword [ebp - 0x8ac]
mov dword [ebp - 0x414], ecx
mov edx, dword [ebp - 0x414]
mov dword [ebp - 0x8b0], edx
mov eax, dword [ebp - 0x8b0]
mov ecx, dword [eax]
mov dword [ebp - 0x39c], ecx
mov edx, dword [ebp - 0x204]
or edx, 0x80000000
mov dword [ebp - 0x204], edx
mov eax, dword [ebp - 0x204]
and eax, 0x40000000
je 0x1009eae4
and dword [ebp - 0x204], 0xbfffffff
mov ecx, dword [ebp - 0x204]
and ecx, 0x20000000
je 0x1009eafc
and dword [ebp - 0x204], 0xdfffffff
mov edx, dword [ebp - 0x204]
or edx, 0x10000000
mov dword [ebp - 0x204], edx
lea eax, [ebp - 0x39c]
mov dword [ebp - 0x8b4], eax
mov ecx, dword [ebp - 0x210]
add ecx, 0x78
mov dword [ebp - 0x258], ecx
mov edx, dword [0x10448104]
mov dword [ebp - 0x8b8], edx
lea eax, [ebp - 0x2a0]
mov dword [ebp - 0x418], eax
mov ecx, dword [ebp - 0x418]
mov edx, dword [ebp - 0x8b8]
mov dword [ecx], edx
mov eax, dword [ebp - 0x418]
mov dword [ebp - 0xf24], eax
mov dword [ebp - 4], 3
mov ecx, dword [ebp - 0x258]
mov edx, dword [ebp - 0x2a0]
mov dword [ecx], edx
mov eax, dword [ebp - 0x2a0]
mov ecx, dword [eax]
mov dword [ebp - 0x8bc], ecx
mov edx, dword [ebp - 0x258]
mov eax, dword [ebp - 0x8bc]
mov dword [edx + 4], eax
mov ecx, dword [ebp - 0x258]
cmp dword [ecx + 4], 0
jne 0x1009eba5
mov dword [ebp - 4], 0xffffffff
jmp 0x1009eddf
mov dword [ebp - 0x340], 0
mov edx, dword [ebp - 0x258]
mov eax, dword [edx + 4]
mov ecx, dword [ebp - 0x340]
mov edx, dword [eax + ecx*4]
mov dword [ebp - 0x41c], edx
cmp dword [ebp - 0x41c], 0
jne 0x1009ebd9
mov byte [ebp - 0x213], 0
jmp 0x1009ec30
mov eax, dword [0x102cf050]
mov dword [ebp - 0x8c0], eax
push 0x1c
lea ecx, [ebp - 0x190]
push ecx
mov edx, dword [ebp - 0x41c]
push edx
call dword [ebp - 0x8c0]
test eax, eax
jne 0x1009ec07
mov byte [ebp - 0x213], 0
jmp 0x1009ec30
mov eax, dword [ebp - 0x17c]
and eax, 1
jne 0x1009ec20
mov ecx, dword [ebp - 0x17c]
and ecx, 0x100
je 0x1009ec29
mov byte [ebp - 0x213], 0
jmp 0x1009ec30
mov byte [ebp - 0x213], 1
movzx edx, byte [ebp - 0x213]
test edx, edx
je 0x1009ec4f
mov eax, dword [ebp - 0x340]
add eax, 1
mov dword [ebp - 0x340], eax
jmp 0x1009ebaf
mov ecx, dword [ebp - 0x258]
mov edx, dword [ebp - 0x340]
mov dword [ecx + 0xc], edx
mov eax, dword [ebp - 0x258]
cmp dword [eax + 0xc], 0
jne 0x1009ec76
mov dword [ebp - 4], 0xffffffff
jmp 0x1009eddf
mov ecx, 1
test ecx, ecx
je 0x1009ec93
mov edx, dword [ebp - 0x258]
mov eax, dword [edx + 0xc]
add eax, 1
mov dword [ebp - 0x420], eax
jmp 0x1009eca2
mov ecx, dword [ebp - 0x258]
mov edx, dword [ecx + 0xc]
mov dword [ebp - 0x420], edx
mov edx, dword [ebp - 0x420]
lea ecx, [ebp - 0x8c8]
call fcn.10040210
mov dword [ebp - 0x8c4], eax
mov eax, dword [ebp - 0x8c4]
push eax
mov ecx, dword [ebp - 0x258]
add ecx, 8
call fcn.100402b0
lea ecx, [ebp - 0x8c8]
call fcn.1003fb40
mov ecx, dword [ebp - 0x258]
add ecx, 8
call fcn.1003fb10
movzx ecx, al
test ecx, ecx
jne 0x1009ecfa
mov dword [ebp - 4], 0xffffffff
jmp 0x1009eddf
mov ecx, dword [ebp - 0x258]
add ecx, 8
call fcn.1003fb20
mov dword [ebp - 0x8cc], eax
mov edx, dword [ebp - 0x8cc]
mov dword [ebp - 0x4c], edx
mov eax, 1
test eax, eax
je 0x1009ed93
mov ecx, dword [ebp - 0x4c]
mov dword [ebp - 0x8d0], ecx
mov edx, dword [ebp - 0x258]
mov eax, dword [edx + 0xc]
lea ecx, [eax*4 + 4]
push ecx
mov edx, dword [ebp - 0x258]
mov eax, dword [edx + 4]
sub eax, 4
push eax
mov ecx, dword [ebp - 0x8d0]
push ecx
call sub.VCRUNTIME140.dll_memcpy
add esp, 0xc
mov edx, dword [ebp - 0x4c]
mov dword [ebp - 0x8d4], edx
mov eax, dword [ebp - 0x8d4]
add eax, 4
mov dword [ebp - 0x8d8], eax
cmp dword [ebp - 0x2a0], 0
jne 0x1009ed79
jmp 0x1009ed87
mov ecx, dword [ebp - 0x2a0]
mov edx, dword [ebp - 0x8d8]
mov dword [ecx], edx
mov eax, dword [ebp - 0x258]
mov byte [eax + 0x10], 1
jmp 0x1009edd8
mov ecx, dword [ebp - 0x4c]
mov dword [ebp - 0x8dc], ecx
mov edx, dword [ebp - 0x258]
mov eax, dword [edx + 0xc]
shl eax, 2
push eax
mov ecx, dword [ebp - 0x258]
mov edx, dword [ecx + 4]
push edx
mov eax, dword [ebp - 0x8dc]
push eax
call sub.VCRUNTIME140.dll_memcpy
add esp, 0xc
cmp dword [ebp - 0x2a0], 0
jne 0x1009edcd
jmp 0x1009edd8
mov ecx, dword [ebp - 0x4c]
mov edx, dword [ebp - 0x2a0]
mov dword [edx], ecx
mov dword [ebp - 4], 0xffffffff
mov eax, dword [ebp - 0x210]
add eax, 0x78
mov dword [ebp - 0x29c], eax
mov dword [ebp - 0x8e0], 0x100b9790
mov ecx, dword [ebp - 0x29c]
movzx edx, byte [ecx + 0x10]
test edx, edx
je 0x1009ee16
mov eax, 0xe
add eax, 1
mov dword [ebp - 0x424], eax
jmp 0x1009ee20
mov dword [ebp - 0x424], 0xe
mov ecx, dword [ebp - 0x424]
mov dword [ebp - 0x428], ecx
mov edx, dword [ebp - 0x29c]
cmp dword [edx + 4], 0
je 0x1009ee5e
mov ecx, dword [ebp - 0x29c]
add ecx, 8
call fcn.1003fb10
movzx eax, al
test eax, eax
je 0x1009ee5e
mov ecx, dword [ebp - 0x29c]
mov edx, dword [ebp - 0x428]
cmp edx, dword [ecx + 0xc]
jbe 0x1009ee88
mov dword [ebp - 0x378], 0
mov eax, dword [ebp - 0x200]
or eax, 1
mov dword [ebp - 0x200], eax
lea ecx, [ebp - 0x378]
mov dword [ebp - 0x908], ecx
jmp 0x1009efc7
mov edx, dword [ebp - 0x8e0]
mov dword [ebp - 0x8e4], edx
mov eax, dword [ebp - 0x8e4]
mov dword [ebp - 0x8ec], eax
mov ecx, dword [ebp - 0x29c]
add ecx, 8
mov dword [ebp - 0x8e8], ecx
mov edx, dword [ebp - 0x428]
push edx
mov ecx, dword [ebp - 0x8e8]
call fcn.1003fb30
mov ecx, dword [ebp - 0x8ec]
mov dword [eax], ecx
mov edx, 0xe
shl edx, 2
mov eax, dword [ebp - 0x29c]
add edx, dword [eax + 4]
mov dword [ebp - 0x42c], edx
mov ecx, dword [ebp - 0x42c]
cmp dword [ecx], 0
je 0x1009ef2e
mov edx, dword [ebp - 0x42c]
mov eax, dword [edx]
mov dword [ebp - 0x8f0], eax
mov ecx, dword [ebp - 0x8f0]
mov dword [ebp - 0x8f4], ecx
lea edx, [ebp - 0x8f4]
mov dword [ebp - 0x8f8], edx
mov eax, dword [ebp - 0x200]
or eax, 2
mov dword [ebp - 0x200], eax
mov ecx, dword [ebp - 0x8f8]
mov dword [ebp - 0x430], ecx
jmp 0x1009ef5f
mov dword [ebp - 0x8fc], 0
lea edx, [ebp - 0x8fc]
mov dword [ebp - 0x900], edx
mov eax, dword [ebp - 0x200]
or eax, 4
mov dword [ebp - 0x200], eax
mov ecx, dword [ebp - 0x900]
mov dword [ebp - 0x430], ecx
mov edx, dword [ebp - 0x430]
mov dword [ebp - 0x904], edx
mov eax, dword [ebp - 0x904]
mov ecx, dword [eax]
mov dword [ebp - 0x378], ecx
mov edx, dword [ebp - 0x200]
or edx, 8
mov dword [ebp - 0x200], edx
mov eax, dword [ebp - 0x200]
and eax, 4
je 0x1009ef9a
and dword [ebp - 0x200], 0xfffffffb
mov ecx, dword [ebp - 0x200]
and ecx, 2
je 0x1009efac
and dword [ebp - 0x200], 0xfffffffd
mov edx, dword [ebp - 0x200]
or edx, 1
mov dword [ebp - 0x200], edx
lea eax, [ebp - 0x378]
mov dword [ebp - 0x908], eax
mov ecx, dword [ebp - 0x210]
add ecx, 0x78
mov dword [ebp - 0x298], ecx
mov dword [ebp - 0x90c], 0x100b9ad0
mov edx, dword [ebp - 0x298]
movzx eax, byte [edx + 0x10]
test eax, eax
je 0x1009effe
mov ecx, 0x13
add ecx, 1
mov dword [ebp - 0x434], ecx
jmp 0x1009f008
mov dword [ebp - 0x434], 0x13
mov edx, dword [ebp - 0x434]
mov dword [ebp - 0x438], edx
mov eax, dword [ebp - 0x298]
cmp dword [eax + 4], 0
je 0x1009f046
mov ecx, dword [ebp - 0x298]
add ecx, 8
call fcn.1003fb10
movzx ecx, al
test ecx, ecx
je 0x1009f046
mov edx, dword [ebp - 0x298]
mov eax, dword [ebp - 0x438]
cmp eax, dword [edx + 0xc]
jbe 0x1009f070
mov dword [ebp - 0x3a4], 0
mov ecx, dword [ebp - 0x200]
or ecx, 0x10
mov dword [ebp - 0x200], ecx
lea edx, [ebp - 0x3a4]
mov dword [ebp - 0x934], edx
jmp 0x1009f1b2
mov eax, dword [ebp - 0x90c]
mov dword [ebp - 0x910], eax
mov ecx, dword [ebp - 0x910]
mov dword [ebp - 0x918], ecx
mov edx, dword [ebp - 0x298]
add edx, 8
mov dword [ebp - 0x914], edx
mov eax, dword [ebp - 0x438]
push eax
mov ecx, dword [ebp - 0x914]
call fcn.1003fb30
mov ecx, dword [ebp - 0x918]
mov dword [eax], ecx
mov edx, 0x13
shl edx, 2
mov eax, dword [ebp - 0x298]
add edx, dword [eax + 4]
mov dword [ebp - 0x43c], edx
mov ecx, dword [ebp - 0x43c]
cmp dword [ecx], 0
je 0x1009f116
mov edx, dword [ebp - 0x43c]
mov eax, dword [edx]
mov dword [ebp - 0x91c], eax
mov ecx, dword [ebp - 0x91c]
mov dword [ebp - 0x920], ecx
lea edx, [ebp - 0x920]
mov dword [ebp - 0x924], edx
mov eax, dword [ebp - 0x200]
or eax, 0x20
mov dword [ebp - 0x200], eax
mov ecx, dword [ebp - 0x924]
mov dword [ebp - 0x440], ecx
jmp 0x1009f147
mov dword [ebp - 0x928], 0
lea edx, [ebp - 0x928]
mov dword [ebp - 0x92c], edx
mov eax, dword [ebp - 0x200]
or eax, 0x40
mov dword [ebp - 0x200], eax
mov ecx, dword [ebp - 0x92c]
mov dword [ebp - 0x440], ecx
mov edx, dword [ebp - 0x440]
mov dword [ebp - 0x930], edx
mov eax, dword [ebp - 0x930]
mov ecx, dword [eax]
mov dword [ebp - 0x3a4], ecx
mov edx, dword [ebp - 0x200]
or edx, 0x80
mov dword [ebp - 0x200], edx
mov eax, dword [ebp - 0x200]
and eax, 0x40
je 0x1009f185
and dword [ebp - 0x200], 0xffffffbf
mov ecx, dword [ebp - 0x200]
and ecx, 0x20
je 0x1009f197
and dword [ebp - 0x200], 0xffffffdf
mov edx, dword [ebp - 0x200]
or edx, 0x10
mov dword [ebp - 0x200], edx
lea eax, [ebp - 0x3a4]
mov dword [ebp - 0x934], eax
mov ecx, dword [ebp - 0x210]
add ecx, 0x14
mov dword [ebp - 0x254], ecx
mov edx, dword [0x10448148]
mov dword [ebp - 0x938], edx
lea eax, [ebp - 0x2dc]
mov dword [ebp - 0x444], eax
mov ecx, dword [ebp - 0x444]
mov edx, dword [ebp - 0x938]
mov dword [ecx], edx
mov eax, dword [ebp - 0x444]
mov dword [ebp - 0xf28], eax
mov dword [ebp - 4], 4
mov ecx, dword [ebp - 0x254]
mov edx, dword [ebp - 0x2dc]
mov dword [ecx], edx
mov eax, dword [ebp - 0x2dc]
mov ecx, dword [eax]
mov dword [ebp - 0x93c], ecx
mov edx, dword [ebp - 0x254]
mov eax, dword [ebp - 0x93c]
mov dword [edx + 4], eax
mov ecx, dword [ebp - 0x254]
cmp dword [ecx + 4], 0
jne 0x1009f23d
mov dword [ebp - 4], 0xffffffff
jmp 0x1009f477
mov dword [ebp - 0x304], 0
mov edx, dword [ebp - 0x254]
mov eax, dword [edx + 4]
mov ecx, dword [ebp - 0x304]
mov edx, dword [eax + ecx*4]
mov dword [ebp - 0x448], edx
cmp dword [ebp - 0x448], 0
jne 0x1009f271
mov byte [ebp - 0x214], 0
jmp 0x1009f2c8
mov eax, dword [0x102cf050]
mov dword [ebp - 0x940], eax
push 0x1c
lea ecx, [ebp - 0x174]
push ecx
mov edx, dword [ebp - 0x448]
push edx
call dword [ebp - 0x940]
test eax, eax
jne 0x1009f29f
mov byte [ebp - 0x214], 0
jmp 0x1009f2c8
mov eax, dword [ebp - 0x160]
and eax, 1
jne 0x1009f2b8
mov ecx, dword [ebp - 0x160]
and ecx, 0x100
je 0x1009f2c1
mov byte [ebp - 0x214], 0
jmp 0x1009f2c8
mov byte [ebp - 0x214], 1
movzx edx, byte [ebp - 0x214]
test edx, edx
je 0x1009f2e7
mov eax, dword [ebp - 0x304]
add eax, 1
mov dword [ebp - 0x304], eax
jmp 0x1009f247
mov ecx, dword [ebp - 0x254]
mov edx, dword [ebp - 0x304]
mov dword [ecx + 0xc], edx
mov eax, dword [ebp - 0x254]
cmp dword [eax + 0xc], 0
jne 0x1009f30e
mov dword [ebp - 4], 0xffffffff
jmp 0x1009f477
mov ecx, 1
test ecx, ecx
je 0x1009f32b
mov edx, dword [ebp - 0x254]
mov eax, dword [edx + 0xc]
add eax, 1
mov dword [ebp - 0x44c], eax
jmp 0x1009f33a
mov ecx, dword [ebp - 0x254]
mov edx, dword [ecx + 0xc]
mov dword [ebp - 0x44c], edx
mov edx, dword [ebp - 0x44c]
lea ecx, [ebp - 0x948]
call fcn.10040210
mov dword [ebp - 0x944], eax
mov eax, dword [ebp - 0x944]
push eax
mov ecx, dword [ebp - 0x254]
add ecx, 8
call fcn.100402b0
lea ecx, [ebp - 0x948]
call fcn.1003fb40
mov ecx, dword [ebp - 0x254]
add ecx, 8
call fcn.1003fb10
movzx ecx, al
test ecx, ecx
jne 0x1009f392
mov dword [ebp - 4], 0xffffffff
jmp 0x1009f477
mov ecx, dword [ebp - 0x254]
add ecx, 8
call fcn.1003fb20
mov dword [ebp - 0x94c], eax
mov edx, dword [ebp - 0x94c]
mov dword [ebp - 0x48], edx
mov eax, 1
test eax, eax
je 0x1009f42b
mov ecx, dword [ebp - 0x48]
mov dword [ebp - 0x950], ecx
mov edx, dword [ebp - 0x254]
mov eax, dword [edx + 0xc]
lea ecx, [eax*4 + 4]
push ecx
mov edx, dword [ebp - 0x254]
mov eax, dword [edx + 4]
sub eax, 4
push eax
mov ecx, dword [ebp - 0x950]
push ecx
call sub.VCRUNTIME140.dll_memcpy
add esp, 0xc
mov edx, dword [ebp - 0x48]
mov dword [ebp - 0x954], edx
mov eax, dword [ebp - 0x954]
add eax, 4
mov dword [ebp - 0x958], eax
cmp dword [ebp - 0x2dc], 0
jne 0x1009f411
jmp 0x1009f41f
mov ecx, dword [ebp - 0x2dc]
mov edx, dword [ebp - 0x958]
mov dword [ecx], edx
mov eax, dword [ebp - 0x254]
mov byte [eax + 0x10], 1
jmp 0x1009f470
mov ecx, dword [ebp - 0x48]
mov dword [ebp - 0x95c], ecx
mov edx, dword [ebp - 0x254]
mov eax, dword [edx + 0xc]
shl eax, 2
push eax
mov ecx, dword [ebp - 0x254]
mov edx, dword [ecx + 4]
push edx
mov eax, dword [ebp - 0x95c]
push eax
call sub.VCRUNTIME140.dll_memcpy
add esp, 0xc
cmp dword [ebp - 0x2dc], 0
jne 0x1009f465
jmp 0x1009f470
mov ecx, dword [ebp - 0x48]
mov edx, dword [ebp - 0x2dc]
mov dword [edx], ecx
mov dword [ebp - 4], 0xffffffff
mov eax, dword [ebp - 0x210]
add eax, 0x14
mov dword [ebp - 0x290], eax
mov dword [ebp - 0x960], 0x100b42f0
mov ecx, dword [ebp - 0x290]
movzx edx, byte [ecx + 0x10]
test edx, edx
je 0x1009f4ae
mov eax, 0x11
add eax, 1
mov dword [ebp - 0x450], eax
jmp 0x1009f4b8
mov dword [ebp - 0x450], 0x11
mov ecx, dword [ebp - 0x450]
mov dword [ebp - 0x454], ecx
mov edx, dword [ebp - 0x290]
cmp dword [edx + 4], 0
je 0x1009f4f6
mov ecx, dword [ebp - 0x290]
add ecx, 8
call fcn.1003fb10
movzx eax, al
test eax, eax
je 0x1009f4f6
mov ecx, dword [ebp - 0x290]
mov edx, dword [ebp - 0x454]
cmp edx, dword [ecx + 0xc]
jbe 0x1009f522
mov dword [ebp - 0x3a8], 0
mov eax, dword [ebp - 0x200]
or eax, 0x100
mov dword [ebp - 0x200], eax
lea ecx, [ebp - 0x3a8]
mov dword [ebp - 0x988], ecx
jmp 0x1009f676
mov edx, dword [ebp - 0x960]
mov dword [ebp - 0x964], edx
mov eax, dword [ebp - 0x964]
mov dword [ebp - 0x96c], eax
mov ecx, dword [ebp - 0x290]
add ecx, 8
mov dword [ebp - 0x968], ecx
mov edx, dword [ebp - 0x454]
push edx
mov ecx, dword [ebp - 0x968]
call fcn.1003fb30
mov ecx, dword [ebp - 0x96c]
mov dword [eax], ecx
mov edx, 0x11
shl edx, 2
mov eax, dword [ebp - 0x290]
add edx, dword [eax + 4]
mov dword [ebp - 0x458], edx
mov ecx, dword [ebp - 0x458]
cmp dword [ecx], 0
je 0x1009f5ca
mov edx, dword [ebp - 0x458]
mov eax, dword [edx]
mov dword [ebp - 0x970], eax
mov ecx, dword [ebp - 0x970]
mov dword [ebp - 0x974], ecx
lea edx, [ebp - 0x974]
mov dword [ebp - 0x978], edx
mov eax, dword [ebp - 0x200]
or eax, 0x200
mov dword [ebp - 0x200], eax
mov ecx, dword [ebp - 0x978]
mov dword [ebp - 0x45c], ecx
jmp 0x1009f5fd
mov dword [ebp - 0x97c], 0
lea edx, [ebp - 0x97c]
mov dword [ebp - 0x980], edx
mov eax, dword [ebp - 0x200]
or eax, 0x400
mov dword [ebp - 0x200], eax
mov ecx, dword [ebp - 0x980]
mov dword [ebp - 0x45c], ecx
mov edx, dword [ebp - 0x45c]
mov dword [ebp - 0x984], edx
mov eax, dword [ebp - 0x984]
mov ecx, dword [eax]
mov dword [ebp - 0x3a8], ecx
mov edx, dword [ebp - 0x200]
or edx, 0x800
mov dword [ebp - 0x200], edx
mov eax, dword [ebp - 0x200]
and eax, 0x400
je 0x1009f640
and dword [ebp - 0x200], 0xfffffbff
mov ecx, dword [ebp - 0x200]
and ecx, 0x200
je 0x1009f658
and dword [ebp - 0x200], 0xfffffdff
mov edx, dword [ebp - 0x200]
or edx, 0x100
mov dword [ebp - 0x200], edx
lea eax, [ebp - 0x3a8]
mov dword [ebp - 0x988], eax
mov ecx, dword [ebp - 0x210]
add ecx, 0x14
mov dword [ebp - 0x28c], ecx
mov dword [ebp - 0x98c], 0x100b4320
mov edx, dword [ebp - 0x28c]
movzx eax, byte [edx + 0x10]
test eax, eax
je 0x1009f6ad
mov ecx, 0x12
add ecx, 1
mov dword [ebp - 0x460], ecx
jmp 0x1009f6b7
mov dword [ebp - 0x460], 0x12
mov edx, dword [ebp - 0x460]
mov dword [ebp - 0x464], edx
mov eax, dword [ebp - 0x28c]
cmp dword [eax + 4], 0
je 0x1009f6f5
mov ecx, dword [ebp - 0x28c]
add ecx, 8
call fcn.1003fb10
movzx ecx, al
test ecx, ecx
je 0x1009f6f5
mov edx, dword [ebp - 0x28c]
mov eax, dword [ebp - 0x464]
cmp eax, dword [edx + 0xc]
jbe 0x1009f722
mov dword [ebp - 0x3ac], 0
mov ecx, dword [ebp - 0x200]
or ecx, 0x1000
mov dword [ebp - 0x200], ecx
lea edx, [ebp - 0x3ac]
mov dword [ebp - 0x9b4], edx
jmp 0x1009f876
mov eax, dword [ebp - 0x98c]
mov dword [ebp - 0x990], eax
mov ecx, dword [ebp - 0x990]
mov dword [ebp - 0x998], ecx
mov edx, dword [ebp - 0x28c]
add edx, 8
mov dword [ebp - 0x994], edx
mov eax, dword [ebp - 0x464]
push eax
mov ecx, dword [ebp - 0x994]
call fcn.1003fb30
mov ecx, dword [ebp - 0x998]
mov dword [eax], ecx
mov edx, 0x12
shl edx, 2
mov eax, dword [ebp - 0x28c]
add edx, dword [eax + 4]
mov dword [ebp - 0x468], edx
mov ecx, dword [ebp - 0x468]
cmp dword [ecx], 0
je 0x1009f7ca
mov edx, dword [ebp - 0x468]
mov eax, dword [edx]
mov dword [ebp - 0x99c], eax
mov ecx, dword [ebp - 0x99c]
mov dword [ebp - 0x9a0], ecx
lea edx, [ebp - 0x9a0]
mov dword [ebp - 0x9a4], edx
mov eax, dword [ebp - 0x200]
or eax, 0x2000
mov dword [ebp - 0x200], eax
mov ecx, dword [ebp - 0x9a4]
mov dword [ebp - 0x46c], ecx
jmp 0x1009f7fd
mov dword [ebp - 0x9a8], 0
lea edx, [ebp - 0x9a8]
mov dword [ebp - 0x9ac], edx
mov eax, dword [ebp - 0x200]
or eax, 0x4000
mov dword [ebp - 0x200], eax
mov ecx, dword [ebp - 0x9ac]
mov dword [ebp - 0x46c], ecx
mov edx, dword [ebp - 0x46c]
mov dword [ebp - 0x9b0], edx
mov eax, dword [ebp - 0x9b0]
mov ecx, dword [eax]
mov dword [ebp - 0x3ac], ecx
mov edx, dword [ebp - 0x200]
or edx, 0x8000
mov dword [ebp - 0x200], edx
mov eax, dword [ebp - 0x200]
and eax, 0x4000
je 0x1009f840
and dword [ebp - 0x200], 0xffffbfff
mov ecx, dword [ebp - 0x200]
and ecx, 0x2000
je 0x1009f858
and dword [ebp - 0x200], 0xffffdfff
mov edx, dword [ebp - 0x200]
or edx, 0x1000
mov dword [ebp - 0x200], edx
lea eax, [ebp - 0x3ac]
mov dword [ebp - 0x9b4], eax
mov ecx, dword [ebp - 0x210]
add ecx, 0x14
mov dword [ebp - 0x274], ecx
mov dword [ebp - 0x9b8], 0x100b4410
mov edx, dword [ebp - 0x274]
movzx eax, byte [edx + 0x10]
test eax, eax
je 0x1009f8ad
mov ecx, 0x18
add ecx, 1
mov dword [ebp - 0x470], ecx
jmp 0x1009f8b7
mov dword [ebp - 0x470], 0x18
mov edx, dword [ebp - 0x470]
mov dword [ebp - 0x474], edx
mov eax, dword [ebp - 0x274]
cmp dword [eax + 4], 0
je 0x1009f8f5
mov ecx, dword [ebp - 0x274]
add ecx, 8
call fcn.1003fb10
movzx ecx, al
test ecx, ecx
je 0x1009f8f5
mov edx, dword [ebp - 0x274]
mov eax, dword [ebp - 0x474]
cmp eax, dword [edx + 0xc]
jbe 0x1009f922
mov dword [ebp - 0x3b0], 0
mov ecx, dword [ebp - 0x200]
or ecx, 0x10000
mov dword [ebp - 0x200], ecx
lea edx, [ebp - 0x3b0]
mov dword [ebp - 0x9e0], edx
jmp 0x1009fa76
mov eax, dword [ebp - 0x9b8]
mov dword [ebp - 0x9bc], eax
mov ecx, dword [ebp - 0x9bc]
mov dword [ebp - 0x9c4], ecx
mov edx, dword [ebp - 0x274]
add edx, 8
mov dword [ebp - 0x9c0], edx
mov eax, dword [ebp - 0x474]
push eax
mov ecx, dword [ebp - 0x9c0]
call fcn.1003fb30
mov ecx, dword [ebp - 0x9c4]
mov dword [eax], ecx
mov edx, 0x18
shl edx, 2
mov eax, dword [ebp - 0x274]
add edx, dword [eax + 4]
mov dword [ebp - 0x478], edx
mov ecx, dword [ebp - 0x478]
cmp dword [ecx], 0
je 0x1009f9ca
mov edx, dword [ebp - 0x478]
mov eax, dword [edx]
mov dword [ebp - 0x9c8], eax
mov ecx, dword [ebp - 0x9c8]
mov dword [ebp - 0x9cc], ecx
lea edx, [ebp - 0x9cc]
mov dword [ebp - 0x9d0], edx
mov eax, dword [ebp - 0x200]
or eax, 0x20000
mov dword [ebp - 0x200], eax
mov ecx, dword [ebp - 0x9d0]
mov dword [ebp - 0x47c], ecx
jmp 0x1009f9fd
mov dword [ebp - 0x9d4], 0
lea edx, [ebp - 0x9d4]
mov dword [ebp - 0x9d8], edx
mov eax, dword [ebp - 0x200]
or eax, 0x40000
mov dword [ebp - 0x200], eax
mov ecx, dword [ebp - 0x9d8]
mov dword [ebp - 0x47c], ecx
mov edx, dword [ebp - 0x47c]
mov dword [ebp - 0x9dc], edx
mov eax, dword [ebp - 0x9dc]
mov ecx, dword [eax]
mov dword [ebp - 0x3b0], ecx
mov edx, dword [ebp - 0x200]
or edx, 0x80000
mov dword [ebp - 0x200], edx
mov eax, dword [ebp - 0x200]
and eax, 0x40000
je 0x1009fa40
and dword [ebp - 0x200], 0xfffbffff
mov ecx, dword [ebp - 0x200]
and ecx, 0x20000
je 0x1009fa58
and dword [ebp - 0x200], 0xfffdffff
mov edx, dword [ebp - 0x200]
or edx, 0x10000
mov dword [ebp - 0x200], edx
lea eax, [ebp - 0x3b0]
mov dword [ebp - 0x9e0], eax
mov ecx, dword [ebp - 0x210]
add ecx, 0x14
mov dword [ebp - 0x2c8], ecx
mov dword [ebp - 0x9e4], 0x100b44f0
mov edx, dword [ebp - 0x2c8]
movzx eax, byte [edx + 0x10]
test eax, eax
je 0x1009faad
mov ecx, 0x2c
add ecx, 1
mov dword [ebp - 0x480], ecx
jmp 0x1009fab7
mov dword [ebp - 0x480], 0x2c
mov edx, dword [ebp - 0x480]
mov dword [ebp - 0x484], edx
mov eax, dword [ebp - 0x2c8]
cmp dword [eax + 4], 0
je 0x1009faf5
mov ecx, dword [ebp - 0x2c8]
add ecx, 8
call fcn.1003fb10
movzx ecx, al
test ecx, ecx
je 0x1009faf5
mov edx, dword [ebp - 0x2c8]
mov eax, dword [ebp - 0x484]
cmp eax, dword [edx + 0xc]
jbe 0x1009fb22
mov dword [ebp - 0x3b4], 0
mov ecx, dword [ebp - 0x200]
or ecx, 0x100000
mov dword [ebp - 0x200], ecx
lea edx, [ebp - 0x3b4]
mov dword [ebp - 0xa0c], edx
jmp 0x1009fc76
mov eax, dword [ebp - 0x9e4]
mov dword [ebp - 0x9e8], eax
mov ecx, dword [ebp - 0x9e8]
mov dword [ebp - 0x9f0], ecx
mov edx, dword [ebp - 0x2c8]
add edx, 8
mov dword [ebp - 0x9ec], edx
mov eax, dword [ebp - 0x484]
push eax
mov ecx, dword [ebp - 0x9ec]
call fcn.1003fb30
mov ecx, dword [ebp - 0x9f0]
mov dword [eax], ecx
mov edx, 0x2c
shl edx, 2
mov eax, dword [ebp - 0x2c8]
add edx, dword [eax + 4]
mov dword [ebp - 0x488], edx
mov ecx, dword [ebp - 0x488]
cmp dword [ecx], 0
je 0x1009fbca
mov edx, dword [ebp - 0x488]
mov eax, dword [edx]
mov dword [ebp - 0x9f4], eax
mov ecx, dword [ebp - 0x9f4]
mov dword [ebp - 0x9f8], ecx
lea edx, [ebp - 0x9f8]
mov dword [ebp - 0x9fc], edx
mov eax, dword [ebp - 0x200]
or eax, 0x200000
mov dword [ebp - 0x200], eax
mov ecx, dword [ebp - 0x9fc]
mov dword [ebp - 0x48c], ecx
jmp 0x1009fbfd
mov dword [ebp - 0xa00], 0
lea edx, [ebp - 0xa00]
mov dword [ebp - 0xa04], edx
mov eax, dword [ebp - 0x200]
or eax, 0x400000
mov dword [ebp - 0x200], eax
mov ecx, dword [ebp - 0xa04]
mov dword [ebp - 0x48c], ecx
mov edx, dword [ebp - 0x48c]
mov dword [ebp - 0xa08], edx
mov eax, dword [ebp - 0xa08]
mov ecx, dword [eax]
mov dword [ebp - 0x3b4], ecx
mov edx, dword [ebp - 0x200]
or edx, 0x800000
mov dword [ebp - 0x200], edx
mov eax, dword [ebp - 0x200]
and eax, 0x400000
je 0x1009fc40
and dword [ebp - 0x200], 0xffbfffff
mov ecx, dword [ebp - 0x200]
and ecx, 0x200000
je 0x1009fc58
and dword [ebp - 0x200], 0xffdfffff
mov edx, dword [ebp - 0x200]
or edx, 0x100000
mov dword [ebp - 0x200], edx
lea eax, [ebp - 0x3b4]
mov dword [ebp - 0xa0c], eax
mov ecx, dword [ebp - 0x210]
add ecx, 0x8c
mov dword [ebp - 0x250], ecx
mov edx, dword [0x104480f8]
mov dword [ebp - 0xa10], edx
lea eax, [ebp - 0x2d0]
mov dword [ebp - 0x490], eax
mov ecx, dword [ebp - 0x490]
mov edx, dword [ebp - 0xa10]
mov dword [ecx], edx
mov eax, dword [ebp - 0x490]
mov dword [ebp - 0xf2c], eax
mov dword [ebp - 4], 5
mov ecx, dword [ebp - 0x250]
mov edx, dword [ebp - 0x2d0]
mov dword [ecx], edx
mov eax, dword [ebp - 0x2d0]
mov ecx, dword [eax]
mov dword [ebp - 0xa14], ecx
mov edx, dword [ebp - 0x250]
mov eax, dword [ebp - 0xa14]
mov dword [edx + 4], eax
mov ecx, dword [ebp - 0x250]
cmp dword [ecx + 4], 0
jne 0x1009fd04
mov dword [ebp - 4], 0xffffffff
jmp 0x1009ff3e
mov dword [ebp - 0x314], 0
mov edx, dword [ebp - 0x250]
mov eax, dword [edx + 4]
mov ecx, dword [ebp - 0x314]
mov edx, dword [eax + ecx*4]
mov dword [ebp - 0x494], edx
cmp dword [ebp - 0x494], 0
jne 0x1009fd38
mov byte [ebp - 0x215], 0
jmp 0x1009fd8f
mov eax, dword [0x102cf050]
mov dword [ebp - 0xa18], eax
push 0x1c
lea ecx, [ebp - 0x158]
push ecx
mov edx, dword [ebp - 0x494]
push edx
call dword [ebp - 0xa18]
test eax, eax
jne 0x1009fd66
mov byte [ebp - 0x215], 0
jmp 0x1009fd8f
mov eax, dword [ebp - 0x144]
and eax, 1
jne 0x1009fd7f
mov ecx, dword [ebp - 0x144]
and ecx, 0x100
je 0x1009fd88
mov byte [ebp - 0x215], 0
jmp 0x1009fd8f
mov byte [ebp - 0x215], 1
movzx edx, byte [ebp - 0x215]
test edx, edx
je 0x1009fdae
mov eax, dword [ebp - 0x314]
add eax, 1
mov dword [ebp - 0x314], eax
jmp 0x1009fd0e
mov ecx, dword [ebp - 0x250]
mov edx, dword [ebp - 0x314]
mov dword [ecx + 0xc], edx
mov eax, dword [ebp - 0x250]
cmp dword [eax + 0xc], 0
jne 0x1009fdd5
mov dword [ebp - 4], 0xffffffff
jmp 0x1009ff3e
mov ecx, 1
test ecx, ecx
je 0x1009fdf2
mov edx, dword [ebp - 0x250]
mov eax, dword [edx + 0xc]
add eax, 1
mov dword [ebp - 0x498], eax
jmp 0x1009fe01
mov ecx, dword [ebp - 0x250]
mov edx, dword [ecx + 0xc]
mov dword [ebp - 0x498], edx
mov edx, dword [ebp - 0x498]
lea ecx, [ebp - 0xa20]
call fcn.10040210
mov dword [ebp - 0xa1c], eax
mov eax, dword [ebp - 0xa1c]
push eax
mov ecx, dword [ebp - 0x250]
add ecx, 8
call fcn.100402b0
lea ecx, [ebp - 0xa20]
call fcn.1003fb40
mov ecx, dword [ebp - 0x250]
add ecx, 8
call fcn.1003fb10
movzx ecx, al
test ecx, ecx
jne 0x1009fe59
mov dword [ebp - 4], 0xffffffff
jmp 0x1009ff3e
mov ecx, dword [ebp - 0x250]
add ecx, 8
call fcn.1003fb20
mov dword [ebp - 0xa24], eax
mov edx, dword [ebp - 0xa24]
mov dword [ebp - 0x18], edx
mov eax, 1
test eax, eax
je 0x1009fef2
mov ecx, dword [ebp - 0x18]
mov dword [ebp - 0xa28], ecx
mov edx, dword [ebp - 0x250]
mov eax, dword [edx + 0xc]
lea ecx, [eax*4 + 4]
push ecx
mov edx, dword [ebp - 0x250]
mov eax, dword [edx + 4]
sub eax, 4
push eax
mov ecx, dword [ebp - 0xa28]
push ecx
call sub.VCRUNTIME140.dll_memcpy
add esp, 0xc
mov edx, dword [ebp - 0x18]
mov dword [ebp - 0xa2c], edx
mov eax, dword [ebp - 0xa2c]
add eax, 4
mov dword [ebp - 0xa30], eax
cmp dword [ebp - 0x2d0], 0
jne 0x1009fed8
jmp 0x1009fee6
mov ecx, dword [ebp - 0x2d0]
mov edx, dword [ebp - 0xa30]
mov dword [ecx], edx
mov eax, dword [ebp - 0x250]
mov byte [eax + 0x10], 1
jmp 0x1009ff37
mov ecx, dword [ebp - 0x18]
mov dword [ebp - 0xa34], ecx
mov edx, dword [ebp - 0x250]
mov eax, dword [edx + 0xc]
shl eax, 2
push eax
mov ecx, dword [ebp - 0x250]
mov edx, dword [ecx + 4]
push edx
mov eax, dword [ebp - 0xa34]
push eax
call sub.VCRUNTIME140.dll_memcpy
add esp, 0xc
cmp dword [ebp - 0x2d0], 0
jne 0x1009ff2c
jmp 0x1009ff37
mov ecx, dword [ebp - 0x18]
mov edx, dword [ebp - 0x2d0]
mov dword [edx], ecx
mov dword [ebp - 4], 0xffffffff
mov eax, dword [ebp - 0x210]
add eax, 0x8c
mov dword [ebp - 0x2d4], eax
mov dword [ebp - 0xa38], 0x100b0d90
mov ecx, dword [ebp - 0x2d4]
movzx edx, byte [ecx + 0x10]
test edx, edx
je 0x1009ff77
mov eax, 0x43
add eax, 1
mov dword [ebp - 0x49c], eax
jmp 0x1009ff81
mov dword [ebp - 0x49c], 0x43
mov ecx, dword [ebp - 0x49c]
mov dword [ebp - 0x4a0], ecx
mov edx, dword [ebp - 0x2d4]
cmp dword [edx + 4], 0
je 0x1009ffbf
mov ecx, dword [ebp - 0x2d4]
add ecx, 8
call fcn.1003fb10
movzx eax, al
test eax, eax
je 0x1009ffbf
mov ecx, dword [ebp - 0x2d4]
mov edx, dword [ebp - 0x4a0]
cmp edx, dword [ecx + 0xc]
jbe 0x1009ffeb
mov dword [ebp - 0x3b8], 0
mov eax, dword [ebp - 0x200]
or eax, 0x1000000
mov dword [ebp - 0x200], eax
lea ecx, [ebp - 0x3b8]
mov dword [ebp - 0xa60], ecx
jmp 0x100a013f
mov edx, dword [ebp - 0xa38]
mov dword [ebp - 0xa3c], edx
mov eax, dword [ebp - 0xa3c]
mov dword [ebp - 0xa44], eax
mov ecx, dword [ebp - 0x2d4]
add ecx, 8
mov dword [ebp - 0xa40], ecx
mov edx, dword [ebp - 0x4a0]
push edx
mov ecx, dword [ebp - 0xa40]
call fcn.1003fb30
mov ecx, dword [ebp - 0xa44]
mov dword [eax], ecx
mov edx, 0x43
shl edx, 2
mov eax, dword [ebp - 0x2d4]
add edx, dword [eax + 4]
mov dword [ebp - 0x4a4], edx
mov ecx, dword [ebp - 0x4a4]
cmp dword [ecx], 0
je 0x100a0093
mov edx, dword [ebp - 0x4a4]
mov eax, dword [edx]
mov dword [ebp - 0xa48], eax
mov ecx, dword [ebp - 0xa48]
mov dword [ebp - 0xa4c], ecx
lea edx, [ebp - 0xa4c]
mov dword [ebp - 0xa50], edx
mov eax, dword [ebp - 0x200]
or eax, 0x2000000
mov dword [ebp - 0x200], eax
mov ecx, dword [ebp - 0xa50]
mov dword [ebp - 0x4a8], ecx
jmp 0x100a00c6
mov dword [ebp - 0xa54], 0
lea edx, [ebp - 0xa54]
mov dword [ebp - 0xa58], edx
mov eax, dword [ebp - 0x200]
or eax, 0x4000000
mov dword [ebp - 0x200], eax
mov ecx, dword [ebp - 0xa58]
mov dword [ebp - 0x4a8], ecx
mov edx, dword [ebp - 0x4a8]
mov dword [ebp - 0xa5c], edx
mov eax, dword [ebp - 0xa5c]
mov ecx, dword [eax]
mov dword [ebp - 0x3b8], ecx
mov edx, dword [ebp - 0x200]
or edx, 0x8000000
mov dword [ebp - 0x200], edx
mov eax, dword [ebp - 0x200]
and eax, 0x4000000
je 0x100a0109
and dword [ebp - 0x200], 0xfbffffff
mov ecx, dword [ebp - 0x200]
and ecx, 0x2000000
je 0x100a0121
and dword [ebp - 0x200], 0xfdffffff
mov edx, dword [ebp - 0x200]
or edx, 0x1000000
mov dword [ebp - 0x200], edx
lea eax, [ebp - 0x3b8]
mov dword [ebp - 0xa60], eax
mov ecx, dword [ebp - 0x210]
add ecx, 0x8c
mov dword [ebp - 0x2d8], ecx
mov dword [ebp - 0xa64], 0x100b0dc0
mov edx, dword [ebp - 0x2d8]
movzx eax, byte [edx + 0x10]
test eax, eax
je 0x100a0179
mov ecx, 0x52
add ecx, 1
mov dword [ebp - 0x4ac], ecx
jmp 0x100a0183
mov dword [ebp - 0x4ac], 0x52
mov edx, dword [ebp - 0x4ac]
mov dword [ebp - 0x4b0], edx
mov eax, dword [ebp - 0x2d8]
cmp dword [eax + 4], 0
je 0x100a01c1
mov ecx, dword [ebp - 0x2d8]
add ecx, 8
call fcn.1003fb10
movzx ecx, al
test ecx, ecx
je 0x100a01c1
mov edx, dword [ebp - 0x2d8]
mov eax, dword [ebp - 0x4b0]
cmp eax, dword [edx + 0xc]
jbe 0x100a01ee
mov dword [ebp - 0x3bc], 0
mov ecx, dword [ebp - 0x200]
or ecx, 0x10000000
mov dword [ebp - 0x200], ecx
lea edx, [ebp - 0x3bc]
mov dword [ebp - 0xa8c], edx
jmp 0x100a0342
mov eax, dword [ebp - 0xa64]
mov dword [ebp - 0xa68], eax
mov ecx, dword [ebp - 0xa68]
mov dword [ebp - 0xa70], ecx
mov edx, dword [ebp - 0x2d8]
add edx, 8
mov dword [ebp - 0xa6c], edx
mov eax, dword [ebp - 0x4b0]
push eax
mov ecx, dword [ebp - 0xa6c]
call fcn.1003fb30
mov ecx, dword [ebp - 0xa70]
mov dword [eax], ecx
mov edx, 0x52
shl edx, 2
mov eax, dword [ebp - 0x2d8]
add edx, dword [eax + 4]
mov dword [ebp - 0x4b4], edx
mov ecx, dword [ebp - 0x4b4]
cmp dword [ecx], 0
je 0x100a0296
mov edx, dword [ebp - 0x4b4]
mov eax, dword [edx]
mov dword [ebp - 0xa74], eax
mov ecx, dword [ebp - 0xa74]
mov dword [ebp - 0xa78], ecx
lea edx, [ebp - 0xa78]
mov dword [ebp - 0xa7c], edx
mov eax, dword [ebp - 0x200]
or eax, 0x20000000
mov dword [ebp - 0x200], eax
mov ecx, dword [ebp - 0xa7c]
mov dword [ebp - 0x4b8], ecx
jmp 0x100a02c9
mov dword [ebp - 0xa80], 0
lea edx, [ebp - 0xa80]
mov dword [ebp - 0xa84], edx
mov eax, dword [ebp - 0x200]
or eax, 0x40000000
mov dword [ebp - 0x200], eax
mov ecx, dword [ebp - 0xa84]
mov dword [ebp - 0x4b8], ecx
mov edx, dword [ebp - 0x4b8]
mov dword [ebp - 0xa88], edx
mov eax, dword [ebp - 0xa88]
mov ecx, dword [eax]
mov dword [ebp - 0x3bc], ecx
mov edx, dword [ebp - 0x200]
or edx, 0x80000000
mov dword [ebp - 0x200], edx
mov eax, dword [ebp - 0x200]
and eax, 0x40000000
je 0x100a030c
and dword [ebp - 0x200], 0xbfffffff
mov ecx, dword [ebp - 0x200]
and ecx, 0x20000000
je 0x100a0324
and dword [ebp - 0x200], 0xdfffffff
mov edx, dword [ebp - 0x200]
or edx, 0x10000000
mov dword [ebp - 0x200], edx
lea eax, [ebp - 0x3bc]
mov dword [ebp - 0xa8c], eax
mov ecx, dword [ebp - 0x210]
add ecx, 0x8c
mov dword [ebp - 0x2e0], ecx
mov dword [ebp - 0xa90], 0x100b0de0
mov edx, dword [ebp - 0x2e0]
movzx eax, byte [edx + 0x10]
test eax, eax
je 0x100a037c
mov ecx, 0x74
add ecx, 1
mov dword [ebp - 0x4bc], ecx
jmp 0x100a0386
mov dword [ebp - 0x4bc], 0x74
mov edx, dword [ebp - 0x4bc]
mov dword [ebp - 0x4c0], edx
mov eax, dword [ebp - 0x2e0]
cmp dword [eax + 4], 0
je 0x100a03c4
mov ecx, dword [ebp - 0x2e0]
add ecx, 8
call fcn.1003fb10
movzx ecx, al
test ecx, ecx
je 0x100a03c4
mov edx, dword [ebp - 0x2e0]
mov eax, dword [ebp - 0x4c0]
cmp eax, dword [edx + 0xc]
jbe 0x100a03ee
mov dword [ebp - 0x348], 0
mov ecx, dword [ebp - 0x208]
or ecx, 1
mov dword [ebp - 0x208], ecx
lea edx, [ebp - 0x348]
mov dword [ebp - 0xab8], edx
jmp 0x100a052d
mov eax, dword [ebp - 0xa90]
mov dword [ebp - 0xa94], eax
mov ecx, dword [ebp - 0xa94]
mov dword [ebp - 0xa9c], ecx
mov edx, dword [ebp - 0x2e0]
add edx, 8
mov dword [ebp - 0xa98], edx
mov eax, dword [ebp - 0x4c0]
push eax
mov ecx, dword [ebp - 0xa98]
call fcn.1003fb30
mov ecx, dword [ebp - 0xa9c]
mov dword [eax], ecx
mov edx, 0x74
shl edx, 2
mov eax, dword [ebp - 0x2e0]
add edx, dword [eax + 4]
mov dword [ebp - 0x4c4], edx
mov ecx, dword [ebp - 0x4c4]
cmp dword [ecx], 0
je 0x100a0494
mov edx, dword [ebp - 0x4c4]
mov eax, dword [edx]
mov dword [ebp - 0xaa0], eax
mov ecx, dword [ebp - 0xaa0]
mov dword [ebp - 0xaa4], ecx
lea edx, [ebp - 0xaa4]
mov dword [ebp - 0xaa8], edx
mov eax, dword [ebp - 0x208]
or eax, 2
mov dword [ebp - 0x208], eax
mov ecx, dword [ebp - 0xaa8]
mov dword [ebp - 0x4c8], ecx
jmp 0x100a04c5
mov dword [ebp - 0xaac], 0
lea edx, [ebp - 0xaac]
mov dword [ebp - 0xab0], edx
mov eax, dword [ebp - 0x208]
or eax, 4
mov dword [ebp - 0x208], eax
mov ecx, dword [ebp - 0xab0]
mov dword [ebp - 0x4c8], ecx
mov edx, dword [ebp - 0x4c8]
mov dword [ebp - 0xab4], edx
mov eax, dword [ebp - 0xab4]
mov ecx, dword [eax]
mov dword [ebp - 0x348], ecx
mov edx, dword [ebp - 0x208]
or edx, 8
mov dword [ebp - 0x208], edx
mov eax, dword [ebp - 0x208]
and eax, 4
je 0x100a0500
and dword [ebp - 0x208], 0xfffffffb
mov ecx, dword [ebp - 0x208]
and ecx, 2
je 0x100a0512
and dword [ebp - 0x208], 0xfffffffd
mov edx, dword [ebp - 0x208]
or edx, 1
mov dword [ebp - 0x208], edx
lea eax, [ebp - 0x348]
mov dword [ebp - 0xab8], eax
mov ecx, dword [ebp - 0x210]
add ecx, 0xf0
mov dword [ebp - 0x24c], ecx
mov edx, dword [0x10448118]
mov dword [ebp - 0xabc], edx
lea eax, [ebp - 0x2e4]
mov dword [ebp - 0x4cc], eax
mov ecx, dword [ebp - 0x4cc]
mov edx, dword [ebp - 0xabc]
mov dword [ecx], edx
mov eax, dword [ebp - 0x4cc]
mov dword [ebp - 0xf30], eax
mov dword [ebp - 4], 6
mov ecx, dword [ebp - 0x24c]
mov edx, dword [ebp - 0x2e4]
mov dword [ecx], edx
mov eax, dword [ebp - 0x2e4]
mov ecx, dword [eax]
mov dword [ebp - 0xac0], ecx
mov edx, dword [ebp - 0x24c]
mov eax, dword [ebp - 0xac0]
mov dword [edx + 4], eax
mov ecx, dword [ebp - 0x24c]
cmp dword [ecx + 4], 0
jne 0x100a05bb
mov dword [ebp - 4], 0xffffffff
jmp 0x100a07f5
mov dword [ebp - 0x324], 0
mov edx, dword [ebp - 0x24c]
mov eax, dword [edx + 4]
mov ecx, dword [ebp - 0x324]
mov edx, dword [eax + ecx*4]
mov dword [ebp - 0x4d0], edx
cmp dword [ebp - 0x4d0], 0
jne 0x100a05ef
mov byte [ebp - 0x216], 0
jmp 0x100a0646
mov eax, dword [0x102cf050]
mov dword [ebp - 0xac4], eax
push 0x1c
lea ecx, [ebp - 0x13c]
push ecx
mov edx, dword [ebp - 0x4d0]
push edx
call dword [ebp - 0xac4]
test eax, eax
jne 0x100a061d
mov byte [ebp - 0x216], 0
jmp 0x100a0646
mov eax, dword [ebp - 0x128]
and eax, 1
jne 0x100a0636
mov ecx, dword [ebp - 0x128]
and ecx, 0x100
je 0x100a063f
mov byte [ebp - 0x216], 0
jmp 0x100a0646
mov byte [ebp - 0x216], 1
movzx edx, byte [ebp - 0x216]
test edx, edx
je 0x100a0665
mov eax, dword [ebp - 0x324]
add eax, 1
mov dword [ebp - 0x324], eax
jmp 0x100a05c5
mov ecx, dword [ebp - 0x24c]
mov edx, dword [ebp - 0x324]
mov dword [ecx + 0xc], edx
mov eax, dword [ebp - 0x24c]
cmp dword [eax + 0xc], 0
jne 0x100a068c
mov dword [ebp - 4], 0xffffffff
jmp 0x100a07f5
mov ecx, 1
test ecx, ecx
je 0x100a06a9
mov edx, dword [ebp - 0x24c]
mov eax, dword [edx + 0xc]
add eax, 1
mov dword [ebp - 0x4d4], eax
jmp 0x100a06b8
mov ecx, dword [ebp - 0x24c]
mov edx, dword [ecx + 0xc]
mov dword [ebp - 0x4d4], edx
mov edx, dword [ebp - 0x4d4]
lea ecx, [ebp - 0xacc]
call fcn.10040210
mov dword [ebp - 0xac8], eax
mov eax, dword [ebp - 0xac8]
push eax
mov ecx, dword [ebp - 0x24c]
add ecx, 8
call fcn.100402b0
lea ecx, [ebp - 0xacc]
call fcn.1003fb40
mov ecx, dword [ebp - 0x24c]
add ecx, 8
call fcn.1003fb10
movzx ecx, al
test ecx, ecx
jne 0x100a0710
mov dword [ebp - 4], 0xffffffff
jmp 0x100a07f5
mov ecx, dword [ebp - 0x24c]
add ecx, 8
call fcn.1003fb20
mov dword [ebp - 0xad0], eax
mov edx, dword [ebp - 0xad0]
mov dword [ebp - 0x44], edx
mov eax, 1
test eax, eax
je 0x100a07a9
mov ecx, dword [ebp - 0x44]
mov dword [ebp - 0xad4], ecx
mov edx, dword [ebp - 0x24c]
mov eax, dword [edx + 0xc]
lea ecx, [eax*4 + 4]
push ecx
mov edx, dword [ebp - 0x24c]
mov eax, dword [edx + 4]
sub eax, 4
push eax
mov ecx, dword [ebp - 0xad4]
push ecx
call sub.VCRUNTIME140.dll_memcpy
add esp, 0xc
mov edx, dword [ebp - 0x44]
mov dword [ebp - 0xad8], edx
mov eax, dword [ebp - 0xad8]
add eax, 4
mov dword [ebp - 0xadc], eax
cmp dword [ebp - 0x2e4], 0
jne 0x100a078f
jmp 0x100a079d
mov ecx, dword [ebp - 0x2e4]
mov edx, dword [ebp - 0xadc]
mov dword [ecx], edx
mov eax, dword [ebp - 0x24c]
mov byte [eax + 0x10], 1
jmp 0x100a07ee
mov ecx, dword [ebp - 0x44]
mov dword [ebp - 0xae0], ecx
mov edx, dword [ebp - 0x24c]
mov eax, dword [edx + 0xc]
shl eax, 2
push eax
mov ecx, dword [ebp - 0x24c]
mov edx, dword [ecx + 4]
push edx
mov eax, dword [ebp - 0xae0]
push eax
call sub.VCRUNTIME140.dll_memcpy
add esp, 0xc
cmp dword [ebp - 0x2e4], 0
jne 0x100a07e3
jmp 0x100a07ee
mov ecx, dword [ebp - 0x44]
mov edx, dword [ebp - 0x2e4]
mov dword [edx], ecx
mov dword [ebp - 4], 0xffffffff
mov eax, dword [ebp - 0x210]
add eax, 0xf0
mov dword [ebp - 0x294], eax
mov dword [ebp - 0xae4], 0x100938f0
mov ecx, dword [ebp - 0x294]
movzx edx, byte [ecx + 0x10]
test edx, edx
je 0x100a082e