Function at 0x100ce8d0
Capabilities:
Contain obfuscated stackstrings
Inspect section memory permissions

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x10136098
mov eax, dword fs:[0]
push eax
mov eax, 0x17a8
call fcn.1012e750
mov eax, dword [0x1014c040]
xor eax, ebp
mov dword [ebp - 0x10], eax
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov dword [ebp - 0x250], ecx
mov dword [ebp - 0x244], 0
mov dword [ebp - 0x248], 0
mov dword [ebp - 0x24c], 0
mov dword [ebp - 0x240], 0
mov dword [ebp - 0x254], 0
call dword [sym.imp.KERNEL32.dll_AllocConsole]
push 1
call dword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll___acrt_iob_func]
add esp, 4
push eax
push 0x10140488
push str.CONOUT_
lea eax, [ebp - 0x23c]
push eax
call dword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll_freopen_s]
add esp, 0x10
mov ecx, dword [0x1014c918]
mov dword [ebp - 0x149c], ecx
mov dword [ebp - 0x10c0], 0x1012bfd0
mov edx, dword [ebp - 0x10c0]
mov dword [ebp - 0x1490], edx
mov eax, dword [ebp - 0x1490]
mov dword [ebp - 0x1494], eax
mov ecx, dword [0x101b5bf0]
mov edx, dword [ecx + 8]
mov dword [ebp - 0x1498], edx
mov eax, dword [ebp - 0x1494]
push eax
push 0xfffffffffffffffc
mov ecx, dword [ebp - 0x1498]
push ecx
call dword [ebp - 0x149c]
mov edx, dword [ebp - 0x250]
mov dword [edx + 0x714], eax
mov eax, dword [ebp - 0x250]
add eax, 0x84
mov dword [ebp - 0x26c], eax
mov ecx, dword [0x101b5b84]
mov dword [ebp - 0x14a0], ecx
lea edx, [ebp - 0x3b4]
mov dword [ebp - 0x6b8], edx
mov eax, dword [ebp - 0x6b8]
mov ecx, dword [ebp - 0x14a0]
mov dword [eax], ecx
mov edx, dword [ebp - 0x6b8]
mov dword [ebp - 0x14a4], edx
mov eax, dword [ebp - 0x14a4]
mov dword [ebp - 0x1554], eax
mov dword [ebp - 4], 0
mov ecx, dword [ebp - 0x26c]
mov edx, dword [ebp - 0x3b4]
mov dword [ecx], edx
mov eax, dword [ebp - 0x3b4]
mov ecx, dword [eax]
mov dword [ebp - 0x14a8], ecx
mov edx, dword [ebp - 0x14a8]
mov eax, dword [ebp - 0x26c]
mov dword [eax + 4], edx
mov ecx, dword [ebp - 0x26c]
cmp dword [ecx + 4], 0
jne 0x100cea5b
mov dword [ebp - 4], 0xffffffff
jmp 0x100cecc3
mov dword [ebp - 0x498], 0
mov edx, dword [ebp - 0x26c]
mov eax, dword [edx + 4]
mov ecx, dword [ebp - 0x498]
mov edx, dword [eax + ecx*4]
mov dword [ebp - 0x14ac], edx
mov eax, dword [ebp - 0x14ac]
mov dword [ebp - 0x88c], eax
cmp dword [ebp - 0x88c], 0
jne 0x100cea9b
mov byte [ebp - 0x262], 0
jmp 0x100ceaea
mov ecx, dword [0x1014c914]
mov dword [ebp - 0x14b0], ecx
push 0x1c
lea edx, [ebp - 0x78]
push edx
mov eax, dword [ebp - 0x88c]
push eax
call dword [ebp - 0x14b0]
test eax, eax
jne 0x100ceac7
mov byte [ebp - 0x262], 0
jmp 0x100ceaea
mov ecx, dword [ebp - 0x64]
and ecx, 1
jne 0x100ceada
mov edx, dword [ebp - 0x64]
and edx, 0x100
je 0x100ceae3
mov byte [ebp - 0x262], 0
jmp 0x100ceaea
mov byte [ebp - 0x262], 1
movzx eax, byte [ebp - 0x262]
test eax, eax
je 0x100ceb09
mov ecx, dword [ebp - 0x498]
add ecx, 1
mov dword [ebp - 0x498], ecx
jmp 0x100cea65
mov edx, dword [ebp - 0x498]
mov dword [ebp - 0x14b4], edx
mov eax, dword [ebp - 0x14b4]
mov ecx, dword [ebp - 0x26c]
mov dword [ecx + 0xc], eax
mov edx, dword [ebp - 0x26c]
cmp dword [edx + 0xc], 0
jne 0x100ceb3c
mov dword [ebp - 4], 0xffffffff
jmp 0x100cecc3
mov eax, 1
test eax, eax
je 0x100ceb59
mov ecx, dword [ebp - 0x26c]
mov edx, dword [ecx + 0xc]
add edx, 1
mov dword [ebp - 0x890], edx
jmp 0x100ceb68
mov eax, dword [ebp - 0x26c]
mov ecx, dword [eax + 0xc]
mov dword [ebp - 0x890], ecx
mov edx, dword [ebp - 0x890]
push edx
lea eax, [ebp - 0x14bc]
push eax
call fcn.10057f90
add esp, 8
mov dword [ebp - 0x14b8], eax
mov ecx, dword [ebp - 0x14b8]
push ecx
mov ecx, dword [ebp - 0x26c]
add ecx, 8
call fcn.10058080
lea ecx, [ebp - 0x14bc]
call fcn.10057060
mov edx, dword [ebp - 0x26c]
cmp dword [edx + 8], 0
je 0x100cebb9
mov byte [ebp - 0x2ad], 1
jmp 0x100cebc0
mov byte [ebp - 0x2ad], 0
mov al, byte [ebp - 0x2ad]
mov byte [ebp - 0x2df], al
movzx ecx, byte [ebp - 0x2df]
test ecx, ecx
jne 0x100cebe3
mov dword [ebp - 4], 0xffffffff
jmp 0x100cecc3
mov edx, dword [ebp - 0x26c]
mov eax, dword [edx + 8]
mov dword [ebp - 0x14c0], eax
mov ecx, dword [ebp - 0x14c0]
mov dword [ebp - 0x54], ecx
mov edx, 1
test edx, edx
je 0x100cec77
mov eax, dword [ebp - 0x54]
mov dword [ebp - 0x14c4], eax
mov ecx, dword [ebp - 0x26c]
mov edx, dword [ecx + 0xc]
lea eax, [edx*4 + 4]
push eax
mov ecx, dword [ebp - 0x26c]
mov edx, dword [ecx + 4]
sub edx, 4
push edx
mov eax, dword [ebp - 0x14c4]
push eax
call sub.VCRUNTIME140.dll_memcpy
add esp, 0xc
mov ecx, dword [ebp - 0x54]
mov dword [ebp - 0x14c8], ecx
mov edx, dword [ebp - 0x14c8]
add edx, 4
mov dword [ebp - 0x14cc], edx
cmp dword [ebp - 0x3b4], 0
jne 0x100cec5d
jmp 0x100cec6b
mov eax, dword [ebp - 0x3b4]
mov ecx, dword [ebp - 0x14cc]
mov dword [eax], ecx
mov edx, dword [ebp - 0x26c]
mov byte [edx + 0x10], 1
jmp 0x100cecbc
mov eax, dword [ebp - 0x54]
mov dword [ebp - 0x14d0], eax
mov ecx, dword [ebp - 0x26c]
mov edx, dword [ecx + 0xc]
shl edx, 2
push edx
mov eax, dword [ebp - 0x26c]
mov ecx, dword [eax + 4]
push ecx
mov edx, dword [ebp - 0x14d0]
push edx
call sub.VCRUNTIME140.dll_memcpy
add esp, 0xc
cmp dword [ebp - 0x3b4], 0
jne 0x100cecb1
jmp 0x100cecbc
mov eax, dword [ebp - 0x54]
mov ecx, dword [ebp - 0x3b4]
mov dword [ecx], eax
mov dword [ebp - 4], 0xffffffff
mov edx, dword [ebp - 0x250]
add edx, 0x84
mov dword [ebp - 0x3e0], edx
mov dword [ebp - 0x14d4], 0x100f0ae0
mov eax, dword [ebp - 0x14d4]
mov dword [ebp - 0x14d8], eax
mov ecx, dword [ebp - 0x3e0]
movzx edx, byte [ecx + 0x10]
test edx, edx
je 0x100ced09
mov eax, 0x29
add eax, 1
mov dword [ebp - 0x894], eax
jmp 0x100ced13
mov dword [ebp - 0x894], 0x29
mov ecx, dword [ebp - 0x894]
mov dword [ebp - 0x898], ecx
mov edx, dword [ebp - 0x3e0]
cmp dword [edx + 4], 0
je 0x100ced6f
mov eax, dword [ebp - 0x3e0]
cmp dword [eax + 8], 0
je 0x100ced40
mov byte [ebp - 0x2ae], 1
jmp 0x100ced47
mov byte [ebp - 0x2ae], 0
mov cl, byte [ebp - 0x2ae]
mov byte [ebp - 0x2e0], cl
movzx edx, byte [ebp - 0x2e0]
test edx, edx
je 0x100ced6f
mov eax, dword [ebp - 0x3e0]
mov ecx, dword [ebp - 0x898]
cmp ecx, dword [eax + 0xc]
jbe 0x100ced99
mov dword [ebp - 0x8a4], 0
mov edx, dword [ebp - 0x244]
or edx, 1
mov dword [ebp - 0x244], edx
lea eax, [ebp - 0x8a4]
mov dword [ebp - 0x159c], eax
jmp 0x100ceeef
mov ecx, dword [ebp - 0x14d8]
mov dword [ebp - 0x8dc], ecx
mov edx, dword [ebp - 0x8dc]
mov dword [ebp - 0x8e8], edx
mov eax, dword [ebp - 0x3e0]
add eax, 8
mov dword [ebp - 0x8e0], eax
mov ecx, dword [ebp - 0x8e0]
mov edx, dword [ecx]
mov eax, dword [ebp - 0x898]
lea ecx, [edx + eax*4]
mov dword [ebp - 0x8e4], ecx
mov edx, dword [ebp - 0x8e4]
mov eax, dword [ebp - 0x8e8]
mov dword [edx], eax
mov ecx, 0x29
shl ecx, 2
mov edx, dword [ebp - 0x3e0]
add ecx, dword [edx + 4]
mov dword [ebp - 0x89c], ecx
mov eax, dword [ebp - 0x89c]
cmp dword [eax], 0
je 0x100cee56
mov ecx, dword [ebp - 0x89c]
mov edx, dword [ecx]
mov dword [ebp - 0x8ec], edx
mov eax, dword [ebp - 0x8ec]
mov dword [ebp - 0x8f0], eax
lea ecx, [ebp - 0x8f0]
mov dword [ebp - 0x8f4], ecx
mov edx, dword [ebp - 0x8f4]
mov dword [ebp - 0x8f8], edx
mov eax, dword [ebp - 0x244]
or eax, 2
mov dword [ebp - 0x244], eax
mov ecx, dword [ebp - 0x8f8]
mov dword [ebp - 0x8a0], ecx
jmp 0x100cee93
mov dword [ebp - 0x8fc], 0
lea edx, [ebp - 0x8fc]
mov dword [ebp - 0x900], edx
mov eax, dword [ebp - 0x900]
mov dword [ebp - 0x904], eax
mov ecx, dword [ebp - 0x244]
or ecx, 4
mov dword [ebp - 0x244], ecx
mov edx, dword [ebp - 0x904]
mov dword [ebp - 0x8a0], edx
mov eax, dword [ebp - 0x8a0]
mov dword [ebp - 0x908], eax
mov ecx, dword [ebp - 0x908]
mov edx, dword [ecx]
mov dword [ebp - 0x8a4], edx
mov eax, dword [ebp - 0x244]
or eax, 8
mov dword [ebp - 0x244], eax
mov ecx, dword [ebp - 0x244]
and ecx, 4
je 0x100ceece
and dword [ebp - 0x244], 0xfffffffb
mov edx, dword [ebp - 0x244]
and edx, 2
je 0x100ceee0
and dword [ebp - 0x244], 0xfffffffd
mov eax, dword [ebp - 0x244]
or eax, 1
mov dword [ebp - 0x244], eax
mov ecx, dword [ebp - 0x250]
add ecx, 0xac
mov dword [ebp - 0x270], ecx
mov edx, dword [0x101b5b6c]
mov dword [ebp - 0x90c], edx
lea eax, [ebp - 0x3e4]
mov dword [ebp - 0x8a8], eax
mov ecx, dword [ebp - 0x8a8]
mov edx, dword [ebp - 0x90c]
mov dword [ecx], edx
mov eax, dword [ebp - 0x8a8]
mov dword [ebp - 0x910], eax
mov ecx, dword [ebp - 0x910]
mov dword [ebp - 0x15a4], ecx
mov dword [ebp - 4], 1
mov edx, dword [ebp - 0x270]
mov eax, dword [ebp - 0x3e4]
mov dword [edx], eax
mov ecx, dword [ebp - 0x3e4]
mov edx, dword [ecx]
mov dword [ebp - 0x914], edx
mov eax, dword [ebp - 0x914]
mov ecx, dword [ebp - 0x270]
mov dword [ecx + 4], eax
mov edx, dword [ebp - 0x270]
cmp dword [edx + 4], 0
jne 0x100cef89
mov dword [ebp - 4], 0xffffffff
jmp 0x100cf1f3
mov dword [ebp - 0x4b4], 0
mov eax, dword [ebp - 0x270]
mov ecx, dword [eax + 4]
mov edx, dword [ebp - 0x4b4]
mov eax, dword [ecx + edx*4]
mov dword [ebp - 0x918], eax
mov ecx, dword [ebp - 0x918]
mov dword [ebp - 0x8ac], ecx
cmp dword [ebp - 0x8ac], 0
jne 0x100cefc9
mov byte [ebp - 0x263], 0
jmp 0x100cf01a
mov edx, dword [0x1014c914]
mov dword [ebp - 0x91c], edx
push 0x1c
lea eax, [ebp - 0x94]
push eax
mov ecx, dword [ebp - 0x8ac]
push ecx
call dword [ebp - 0x91c]
test eax, eax
jne 0x100ceff8
mov byte [ebp - 0x263], 0
jmp 0x100cf01a
mov edx, dword [ebp - 0x80]
and edx, 1
jne 0x100cf00a
mov eax, dword [ebp - 0x80]
and eax, 0x100
je 0x100cf013
mov byte [ebp - 0x263], 0
jmp 0x100cf01a
mov byte [ebp - 0x263], 1
movzx ecx, byte [ebp - 0x263]
test ecx, ecx
je 0x100cf039
mov edx, dword [ebp - 0x4b4]
add edx, 1
mov dword [ebp - 0x4b4], edx
jmp 0x100cef93
mov eax, dword [ebp - 0x4b4]
mov dword [ebp - 0x920], eax
mov ecx, dword [ebp - 0x920]
mov edx, dword [ebp - 0x270]
mov dword [edx + 0xc], ecx
mov eax, dword [ebp - 0x270]
cmp dword [eax + 0xc], 0
jne 0x100cf06c
mov dword [ebp - 4], 0xffffffff
jmp 0x100cf1f3
mov ecx, 1
test ecx, ecx
je 0x100cf089
mov edx, dword [ebp - 0x270]
mov eax, dword [edx + 0xc]
add eax, 1
mov dword [ebp - 0x8b0], eax
jmp 0x100cf098
mov ecx, dword [ebp - 0x270]
mov edx, dword [ecx + 0xc]
mov dword [ebp - 0x8b0], edx
mov eax, dword [ebp - 0x8b0]
push eax
lea ecx, [ebp - 0x928]
push ecx
call fcn.10057f90
add esp, 8
mov dword [ebp - 0x924], eax
mov edx, dword [ebp - 0x924]
push edx
mov ecx, dword [ebp - 0x270]
add ecx, 8
call fcn.10058080
lea ecx, [ebp - 0x928]
call fcn.10057060
mov eax, dword [ebp - 0x270]
cmp dword [eax + 8], 0
je 0x100cf0e9
mov byte [ebp - 0x2af], 1
jmp 0x100cf0f0
mov byte [ebp - 0x2af], 0
mov cl, byte [ebp - 0x2af]
mov byte [ebp - 0x2e1], cl
movzx edx, byte [ebp - 0x2e1]
test edx, edx
jne 0x100cf113
mov dword [ebp - 4], 0xffffffff
jmp 0x100cf1f3
mov eax, dword [ebp - 0x270]
mov ecx, dword [eax + 8]
mov dword [ebp - 0x92c], ecx
mov edx, dword [ebp - 0x92c]
mov dword [ebp - 0x50], edx
mov eax, 1
test eax, eax
je 0x100cf1a7
mov ecx, dword [ebp - 0x50]
mov dword [ebp - 0x930], ecx
mov edx, dword [ebp - 0x270]
mov eax, dword [edx + 0xc]
lea ecx, [eax*4 + 4]
push ecx
mov edx, dword [ebp - 0x270]
mov eax, dword [edx + 4]
sub eax, 4
push eax
mov ecx, dword [ebp - 0x930]
push ecx
call sub.VCRUNTIME140.dll_memcpy
add esp, 0xc
mov edx, dword [ebp - 0x50]
mov dword [ebp - 0x934], edx
mov eax, dword [ebp - 0x934]
add eax, 4
mov dword [ebp - 0x938], eax
cmp dword [ebp - 0x3e4], 0
jne 0x100cf18d
jmp 0x100cf19b
mov ecx, dword [ebp - 0x3e4]
mov edx, dword [ebp - 0x938]
mov dword [ecx], edx
mov eax, dword [ebp - 0x270]
mov byte [eax + 0x10], 1
jmp 0x100cf1ec
mov ecx, dword [ebp - 0x50]
mov dword [ebp - 0x93c], ecx
mov edx, dword [ebp - 0x270]
mov eax, dword [edx + 0xc]
shl eax, 2
push eax
mov ecx, dword [ebp - 0x270]
mov edx, dword [ecx + 4]
push edx
mov eax, dword [ebp - 0x93c]
push eax
call sub.VCRUNTIME140.dll_memcpy
add esp, 0xc
cmp dword [ebp - 0x3e4], 0
jne 0x100cf1e1
jmp 0x100cf1ec
mov ecx, dword [ebp - 0x50]
mov edx, dword [ebp - 0x3e4]
mov dword [edx], ecx
mov dword [ebp - 4], 0xffffffff
mov eax, dword [ebp - 0x250]
add eax, 0xac
mov dword [ebp - 0x3e8], eax
mov dword [ebp - 0x940], 0x100dfa80
mov ecx, dword [ebp - 0x940]
mov dword [ebp - 0x944], ecx
mov edx, dword [ebp - 0x3e8]
movzx eax, byte [edx + 0x10]
test eax, eax
je 0x100cf238
mov ecx, 5
add ecx, 1
mov dword [ebp - 0x8b4], ecx
jmp 0x100cf242
mov dword [ebp - 0x8b4], 5
mov edx, dword [ebp - 0x8b4]
mov dword [ebp - 0x8b8], edx
mov eax, dword [ebp - 0x3e8]
cmp dword [eax + 4], 0
je 0x100cf29e
mov ecx, dword [ebp - 0x3e8]
cmp dword [ecx + 8], 0
je 0x100cf26f
mov byte [ebp - 0x2b0], 1
jmp 0x100cf276
mov byte [ebp - 0x2b0], 0
mov dl, byte [ebp - 0x2b0]
mov byte [ebp - 0x2e2], dl
movzx eax, byte [ebp - 0x2e2]
test eax, eax
je 0x100cf29e
mov ecx, dword [ebp - 0x3e8]
mov edx, dword [ebp - 0x8b8]
cmp edx, dword [ecx + 0xc]
jbe 0x100cf2c8
mov dword [ebp - 0x8c4], 0
mov eax, dword [ebp - 0x244]
or eax, 0x10
mov dword [ebp - 0x244], eax
lea ecx, [ebp - 0x8c4]
mov dword [ebp - 0x15a8], ecx
jmp 0x100cf421
mov edx, dword [ebp - 0x944]
mov dword [ebp - 0x948], edx
mov eax, dword [ebp - 0x948]
mov dword [ebp - 0x954], eax
mov ecx, dword [ebp - 0x3e8]
add ecx, 8
mov dword [ebp - 0x94c], ecx
mov edx, dword [ebp - 0x94c]
mov eax, dword [edx]
mov ecx, dword [ebp - 0x8b8]
lea edx, [eax + ecx*4]
mov dword [ebp - 0x950], edx
mov eax, dword [ebp - 0x950]
mov ecx, dword [ebp - 0x954]
mov dword [eax], ecx
mov edx, 5
shl edx, 2
mov eax, dword [ebp - 0x3e8]
add edx, dword [eax + 4]
mov dword [ebp - 0x8bc], edx
mov ecx, dword [ebp - 0x8bc]
cmp dword [ecx], 0
je 0x100cf385
mov edx, dword [ebp - 0x8bc]
mov eax, dword [edx]
mov dword [ebp - 0x958], eax
mov ecx, dword [ebp - 0x958]
mov dword [ebp - 0x95c], ecx
lea edx, [ebp - 0x95c]
mov dword [ebp - 0x960], edx
mov eax, dword [ebp - 0x960]
mov dword [ebp - 0x964], eax
mov ecx, dword [ebp - 0x244]
or ecx, 0x20
mov dword [ebp - 0x244], ecx
mov edx, dword [ebp - 0x964]
mov dword [ebp - 0x8c0], edx
jmp 0x100cf3c2
mov dword [ebp - 0x968], 0
lea eax, [ebp - 0x968]
mov dword [ebp - 0x96c], eax
mov ecx, dword [ebp - 0x96c]
mov dword [ebp - 0x970], ecx
mov edx, dword [ebp - 0x244]
or edx, 0x40
mov dword [ebp - 0x244], edx
mov eax, dword [ebp - 0x970]
mov dword [ebp - 0x8c0], eax
mov ecx, dword [ebp - 0x8c0]
mov dword [ebp - 0x974], ecx
mov edx, dword [ebp - 0x974]
mov eax, dword [edx]
mov dword [ebp - 0x8c4], eax
mov ecx, dword [ebp - 0x244]
or ecx, 0x80
mov dword [ebp - 0x244], ecx
mov edx, dword [ebp - 0x244]
and edx, 0x40
je 0x100cf400
and dword [ebp - 0x244], 0xffffffbf
mov eax, dword [ebp - 0x244]
and eax, 0x20
je 0x100cf412
and dword [ebp - 0x244], 0xffffffdf
mov ecx, dword [ebp - 0x244]
or ecx, 0x10
mov dword [ebp - 0x244], ecx
mov edx, dword [ebp - 0x250]
add edx, 0xac
mov dword [ebp - 0x3ec], edx
mov dword [ebp - 0x978], 0x100dfbe0
mov eax, dword [ebp - 0x978]
mov dword [ebp - 0x97c], eax
mov ecx, dword [ebp - 0x3ec]
movzx edx, byte [ecx + 0x10]
test edx, edx
je 0x100cf467
mov eax, 6
add eax, 1
mov dword [ebp - 0x8c8], eax
jmp 0x100cf471
mov dword [ebp - 0x8c8], 6
mov ecx, dword [ebp - 0x8c8]
mov dword [ebp - 0x8cc], ecx
mov edx, dword [ebp - 0x3ec]
cmp dword [edx + 4], 0
je 0x100cf4cd
mov eax, dword [ebp - 0x3ec]
cmp dword [eax + 8], 0
je 0x100cf49e
mov byte [ebp - 0x2b1], 1
jmp 0x100cf4a5
mov byte [ebp - 0x2b1], 0
mov cl, byte [ebp - 0x2b1]
mov byte [ebp - 0x2e3], cl
movzx edx, byte [ebp - 0x2e3]
test edx, edx
je 0x100cf4cd
mov eax, dword [ebp - 0x3ec]
mov ecx, dword [ebp - 0x8cc]
cmp ecx, dword [eax + 0xc]
jbe 0x100cf4fa
mov dword [ebp - 0x4e4], 0
mov edx, dword [ebp - 0x244]
or edx, 0x100
mov dword [ebp - 0x244], edx
lea eax, [ebp - 0x4e4]
mov dword [ebp - 0x15ac], eax
jmp 0x100cf665
mov ecx, dword [ebp - 0x97c]
mov dword [ebp - 0x980], ecx
mov edx, dword [ebp - 0x980]
mov dword [ebp - 0x98c], edx
mov eax, dword [ebp - 0x3ec]
add eax, 8
mov dword [ebp - 0x984], eax
mov ecx, dword [ebp - 0x984]
mov edx, dword [ecx]
mov eax, dword [ebp - 0x8cc]
lea ecx, [edx + eax*4]
mov dword [ebp - 0x988], ecx
mov edx, dword [ebp - 0x988]
mov eax, dword [ebp - 0x98c]
mov dword [edx], eax
mov ecx, 6
shl ecx, 2
mov edx, dword [ebp - 0x3ec]
add ecx, dword [edx + 4]
mov dword [ebp - 0x8d0], ecx
mov eax, dword [ebp - 0x8d0]
cmp dword [eax], 0
je 0x100cf5b9
mov ecx, dword [ebp - 0x8d0]
mov edx, dword [ecx]
mov dword [ebp - 0x990], edx
mov eax, dword [ebp - 0x990]
mov dword [ebp - 0x994], eax
lea ecx, [ebp - 0x994]
mov dword [ebp - 0x998], ecx
mov edx, dword [ebp - 0x998]
mov dword [ebp - 0x99c], edx
mov eax, dword [ebp - 0x244]
or eax, 0x200
mov dword [ebp - 0x244], eax
mov ecx, dword [ebp - 0x99c]
mov dword [ebp - 0x8d4], ecx
jmp 0x100cf5f9
mov dword [ebp - 0x9a0], 0
lea edx, [ebp - 0x9a0]
mov dword [ebp - 0x9a4], edx
mov eax, dword [ebp - 0x9a4]
mov dword [ebp - 0x9a8], eax
mov ecx, dword [ebp - 0x244]
or ecx, 0x400
mov dword [ebp - 0x244], ecx
mov edx, dword [ebp - 0x9a8]
mov dword [ebp - 0x8d4], edx
mov eax, dword [ebp - 0x8d4]
mov dword [ebp - 0x9ac], eax
mov ecx, dword [ebp - 0x9ac]
mov edx, dword [ecx]
mov dword [ebp - 0x4e4], edx
mov eax, dword [ebp - 0x244]
or eax, 0x800
mov dword [ebp - 0x244], eax
mov ecx, dword [ebp - 0x244]
and ecx, 0x400
je 0x100cf63c
and dword [ebp - 0x244], 0xfffffbff
mov edx, dword [ebp - 0x244]
and edx, 0x200
je 0x100cf654
and dword [ebp - 0x244], 0xfffffdff
mov eax, dword [ebp - 0x244]
or eax, 0x100
mov dword [ebp - 0x244], eax
mov ecx, dword [ebp - 0x250]
add ecx, 0xac
mov dword [ebp - 0x3f0], ecx
mov dword [ebp - 0x9b0], 0x100dfc40
mov edx, dword [ebp - 0x9b0]
mov dword [ebp - 0x9b4], edx
mov eax, dword [ebp - 0x3f0]
movzx ecx, byte [eax + 0x10]
test ecx, ecx
je 0x100cf6ab
mov edx, 7
add edx, 1
mov dword [ebp - 0x4e8], edx
jmp 0x100cf6b5
mov dword [ebp - 0x4e8], 7
mov eax, dword [ebp - 0x4e8]
mov dword [ebp - 0x4ec], eax
mov ecx, dword [ebp - 0x3f0]
cmp dword [ecx + 4], 0
je 0x100cf711
mov edx, dword [ebp - 0x3f0]
cmp dword [edx + 8], 0
je 0x100cf6e2
mov byte [ebp - 0x2b2], 1
jmp 0x100cf6e9
mov byte [ebp - 0x2b2], 0
mov al, byte [ebp - 0x2b2]
mov byte [ebp - 0x2e4], al
movzx ecx, byte [ebp - 0x2e4]
test ecx, ecx
je 0x100cf711
mov edx, dword [ebp - 0x3f0]
mov eax, dword [ebp - 0x4ec]
cmp eax, dword [edx + 0xc]
jbe 0x100cf73e
mov dword [ebp - 0x4f8], 0
mov ecx, dword [ebp - 0x244]
or ecx, 0x1000
mov dword [ebp - 0x244], ecx
lea edx, [ebp - 0x4f8]
mov dword [ebp - 0x15b0], edx
jmp 0x100cf8aa
mov eax, dword [ebp - 0x9b4]
mov dword [ebp - 0x9b8], eax
mov ecx, dword [ebp - 0x9b8]
mov dword [ebp - 0x9c4], ecx
mov edx, dword [ebp - 0x3f0]
add edx, 8
mov dword [ebp - 0x9bc], edx
mov eax, dword [ebp - 0x9bc]
mov ecx, dword [eax]
mov edx, dword [ebp - 0x4ec]
lea eax, [ecx + edx*4]
mov dword [ebp - 0x9c0], eax
mov ecx, dword [ebp - 0x9c0]
mov edx, dword [ebp - 0x9c4]
mov dword [ecx], edx
mov eax, 7
shl eax, 2
mov ecx, dword [ebp - 0x3f0]
add eax, dword [ecx + 4]
mov dword [ebp - 0x4f0], eax
mov edx, dword [ebp - 0x4f0]
cmp dword [edx], 0
je 0x100cf7fe
mov eax, dword [ebp - 0x4f0]
mov ecx, dword [eax]
mov dword [ebp - 0x9c8], ecx
mov edx, dword [ebp - 0x9c8]
mov dword [ebp - 0x9cc], edx
lea eax, [ebp - 0x9cc]
mov dword [ebp - 0x9d0], eax
mov ecx, dword [ebp - 0x9d0]
mov dword [ebp - 0x9d4], ecx
mov edx, dword [ebp - 0x244]
or edx, 0x2000
mov dword [ebp - 0x244], edx
mov eax, dword [ebp - 0x9d4]
mov dword [ebp - 0x4f4], eax
jmp 0x100cf83d
mov dword [ebp - 0x9d8], 0
lea ecx, [ebp - 0x9d8]
mov dword [ebp - 0x9dc], ecx
mov edx, dword [ebp - 0x9dc]
mov dword [ebp - 0x9e0], edx
mov eax, dword [ebp - 0x244]
or eax, 0x4000
mov dword [ebp - 0x244], eax
mov ecx, dword [ebp - 0x9e0]
mov dword [ebp - 0x4f4], ecx
mov edx, dword [ebp - 0x4f4]
mov dword [ebp - 0x9e4], edx
mov eax, dword [ebp - 0x9e4]
mov ecx, dword [eax]
mov dword [ebp - 0x4f8], ecx
mov edx, dword [ebp - 0x244]
or edx, 0x8000
mov dword [ebp - 0x244], edx
mov eax, dword [ebp - 0x244]
and eax, 0x4000
je 0x100cf880
and dword [ebp - 0x244], 0xffffbfff
mov ecx, dword [ebp - 0x244]
and ecx, 0x2000
je 0x100cf898
and dword [ebp - 0x244], 0xffffdfff
mov edx, dword [ebp - 0x244]
or edx, 0x1000
mov dword [ebp - 0x244], edx
mov eax, dword [ebp - 0x250]
add eax, 0xac
mov dword [ebp - 0x3f4], eax
mov dword [ebp - 0x9e8], 0x100dfd40
mov ecx, dword [ebp - 0x9e8]
mov dword [ebp - 0x9ec], ecx
mov edx, dword [ebp - 0x3f4]
movzx eax, byte [edx + 0x10]
test eax, eax
je 0x100cf8ef
mov ecx, 0x24
add ecx, 1
mov dword [ebp - 0x4fc], ecx
jmp 0x100cf8f9
mov dword [ebp - 0x4fc], 0x24
mov edx, dword [ebp - 0x4fc]
mov dword [ebp - 0x500], edx
mov eax, dword [ebp - 0x3f4]
cmp dword [eax + 4], 0
je 0x100cf955
mov ecx, dword [ebp - 0x3f4]
cmp dword [ecx + 8], 0
je 0x100cf926
mov byte [ebp - 0x2b3], 1
jmp 0x100cf92d
mov byte [ebp - 0x2b3], 0
mov dl, byte [ebp - 0x2b3]
mov byte [ebp - 0x2e5], dl
movzx eax, byte [ebp - 0x2e5]
test eax, eax
je 0x100cf955
mov ecx, dword [ebp - 0x3f4]
mov edx, dword [ebp - 0x500]
cmp edx, dword [ecx + 0xc]
jbe 0x100cf981
mov dword [ebp - 0x50c], 0
mov eax, dword [ebp - 0x244]
or eax, 0x10000
mov dword [ebp - 0x244], eax
lea ecx, [ebp - 0x50c]
mov dword [ebp - 0x15b4], ecx
jmp 0x100cfaee
mov edx, dword [ebp - 0x9ec]
mov dword [ebp - 0x9f0], edx
mov eax, dword [ebp - 0x9f0]
mov dword [ebp - 0x9fc], eax
mov ecx, dword [ebp - 0x3f4]
add ecx, 8
mov dword [ebp - 0x9f4], ecx
mov edx, dword [ebp - 0x9f4]
mov eax, dword [edx]
mov ecx, dword [ebp - 0x500]
lea edx, [eax + ecx*4]
mov dword [ebp - 0x9f8], edx
mov eax, dword [ebp - 0x9f8]
mov ecx, dword [ebp - 0x9fc]
mov dword [eax], ecx
mov edx, 0x24
shl edx, 2
mov eax, dword [ebp - 0x3f4]
add edx, dword [eax + 4]
mov dword [ebp - 0x504], edx
mov ecx, dword [ebp - 0x504]
cmp dword [ecx], 0
je 0x100cfa41
mov edx, dword [ebp - 0x504]
mov eax, dword [edx]
mov dword [ebp - 0xa00], eax
mov ecx, dword [ebp - 0xa00]
mov dword [ebp - 0xa04], ecx
lea edx, [ebp - 0xa04]
mov dword [ebp - 0xa08], edx
mov eax, dword [ebp - 0xa08]
mov dword [ebp - 0xa0c], eax
mov ecx, dword [ebp - 0x244]
or ecx, 0x20000
mov dword [ebp - 0x244], ecx
mov edx, dword [ebp - 0xa0c]
mov dword [ebp - 0x508], edx
jmp 0x100cfa81
mov dword [ebp - 0xa10], 0
lea eax, [ebp - 0xa10]
mov dword [ebp - 0xa14], eax
mov ecx, dword [ebp - 0xa14]
mov dword [ebp - 0xa18], ecx
mov edx, dword [ebp - 0x244]
or edx, 0x40000
mov dword [ebp - 0x244], edx
mov eax, dword [ebp - 0xa18]
mov dword [ebp - 0x508], eax
mov ecx, dword [ebp - 0x508]
mov dword [ebp - 0xa1c], ecx
mov edx, dword [ebp - 0xa1c]
mov eax, dword [edx]
mov dword [ebp - 0x50c], eax
mov ecx, dword [ebp - 0x244]
or ecx, 0x80000
mov dword [ebp - 0x244], ecx
mov edx, dword [ebp - 0x244]
and edx, 0x40000
je 0x100cfac5
and dword [ebp - 0x244], 0xfffbffff
mov eax, dword [ebp - 0x244]
and eax, 0x20000
je 0x100cfadc
and dword [ebp - 0x244], 0xfffdffff
mov ecx, dword [ebp - 0x244]
or ecx, 0x10000
mov dword [ebp - 0x244], ecx
mov edx, dword [ebp - 0x250]
add edx, 0xd4
mov dword [ebp - 0x274], edx
mov eax, dword [0x101b5b74]
mov dword [ebp - 0xa20], eax
lea ecx, [ebp - 0x3f8]
mov dword [ebp - 0x510], ecx
mov edx, dword [ebp - 0x510]
mov eax, dword [ebp - 0xa20]
mov dword [edx], eax
mov ecx, dword [ebp - 0x510]
mov dword [ebp - 0xa24], ecx
mov edx, dword [ebp - 0xa24]
mov dword [ebp - 0x15b8], edx
mov dword [ebp - 4], 2
mov eax, dword [ebp - 0x274]
mov ecx, dword [ebp - 0x3f8]
mov dword [eax], ecx
mov edx, dword [ebp - 0x3f8]
mov eax, dword [edx]
mov dword [ebp - 0xa28], eax
mov ecx, dword [ebp - 0xa28]
mov edx, dword [ebp - 0x274]
mov dword [edx + 4], ecx
mov eax, dword [ebp - 0x274]
cmp dword [eax + 4], 0
jne 0x100cfb87
mov dword [ebp - 4], 0xffffffff
jmp 0x100cfdf7
mov dword [ebp - 0x484], 0
mov ecx, dword [ebp - 0x274]
mov edx, dword [ecx + 4]
mov eax, dword [ebp - 0x484]
mov ecx, dword [edx + eax*4]
mov dword [ebp - 0xa2c], ecx
mov edx, dword [ebp - 0xa2c]
mov dword [ebp - 0x514], edx
cmp dword [ebp - 0x514], 0
jne 0x100cfbc7
mov byte [ebp - 0x264], 0
jmp 0x100cfc1e
mov eax, dword [0x1014c914]
mov dword [ebp - 0xa30], eax
push 0x1c
lea ecx, [ebp - 0x104]
push ecx
mov edx, dword [ebp - 0x514]
push edx
call dword [ebp - 0xa30]
test eax, eax
jne 0x100cfbf5
mov byte [ebp - 0x264], 0
jmp 0x100cfc1e
mov eax, dword [ebp - 0xf0]
and eax, 1
jne 0x100cfc0e
mov ecx, dword [ebp - 0xf0]
and ecx, 0x100
je 0x100cfc17
mov byte [ebp - 0x264], 0
jmp 0x100cfc1e
mov byte [ebp - 0x264], 1
movzx edx, byte [ebp - 0x264]
test edx, edx
je 0x100cfc3d
mov eax, dword [ebp - 0x484]
add eax, 1
mov dword [ebp - 0x484], eax
jmp 0x100cfb91
mov ecx, dword [ebp - 0x484]
mov dword [ebp - 0xa34], ecx
mov edx, dword [ebp - 0xa34]
mov eax, dword [ebp - 0x274]
mov dword [eax + 0xc], edx
mov ecx, dword [ebp - 0x274]
cmp dword [ecx + 0xc], 0
jne 0x100cfc70
mov dword [ebp - 4], 0xffffffff
jmp 0x100cfdf7
mov edx, 1
test edx, edx
je 0x100cfc8d
mov eax, dword [ebp - 0x274]
mov ecx, dword [eax + 0xc]
add ecx, 1
mov dword [ebp - 0x518], ecx
jmp 0x100cfc9c
mov edx, dword [ebp - 0x274]
mov eax, dword [edx + 0xc]
mov dword [ebp - 0x518], eax
mov ecx, dword [ebp - 0x518]
push ecx
lea edx, [ebp - 0xa3c]
push edx
call fcn.10057f90
add esp, 8
mov dword [ebp - 0xa38], eax
mov eax, dword [ebp - 0xa38]
push eax
mov ecx, dword [ebp - 0x274]
add ecx, 8
call fcn.10058080
lea ecx, [ebp - 0xa3c]
call fcn.10057060
mov ecx, dword [ebp - 0x274]
cmp dword [ecx + 8], 0
je 0x100cfced
mov byte [ebp - 0x2b4], 1
jmp 0x100cfcf4
mov byte [ebp - 0x2b4], 0
mov dl, byte [ebp - 0x2b4]
mov byte [ebp - 0x2e6], dl
movzx eax, byte [ebp - 0x2e6]
test eax, eax
jne 0x100cfd17
mov dword [ebp - 4], 0xffffffff
jmp 0x100cfdf7
mov ecx, dword [ebp - 0x274]
mov edx, dword [ecx + 8]
mov dword [ebp - 0xa40], edx
mov eax, dword [ebp - 0xa40]
mov dword [ebp - 0x4c], eax
mov ecx, 1
test ecx, ecx
je 0x100cfdab
mov edx, dword [ebp - 0x4c]
mov dword [ebp - 0xa44], edx
mov eax, dword [ebp - 0x274]
mov ecx, dword [eax + 0xc]
lea edx, [ecx*4 + 4]
push edx
mov eax, dword [ebp - 0x274]
mov ecx, dword [eax + 4]
sub ecx, 4
push ecx
mov edx, dword [ebp - 0xa44]
push edx
call sub.VCRUNTIME140.dll_memcpy
add esp, 0xc
mov eax, dword [ebp - 0x4c]
mov dword [ebp - 0xa48], eax
mov ecx, dword [ebp - 0xa48]
add ecx, 4
mov dword [ebp - 0xa4c], ecx
cmp dword [ebp - 0x3f8], 0
jne 0x100cfd91
jmp 0x100cfd9f
mov edx, dword [ebp - 0x3f8]
mov eax, dword [ebp - 0xa4c]
mov dword [edx], eax
mov ecx, dword [ebp - 0x274]
mov byte [ecx + 0x10], 1
jmp 0x100cfdf0
mov edx, dword [ebp - 0x4c]
mov dword [ebp - 0xa50], edx
mov eax, dword [ebp - 0x274]
mov ecx, dword [eax + 0xc]
shl ecx, 2
push ecx
mov edx, dword [ebp - 0x274]
mov eax, dword [edx + 4]
push eax
mov ecx, dword [ebp - 0xa50]
push ecx
call sub.VCRUNTIME140.dll_memcpy
add esp, 0xc
cmp dword [ebp - 0x3f8], 0
jne 0x100cfde5
jmp 0x100cfdf0
mov edx, dword [ebp - 0x4c]
mov eax, dword [ebp - 0x3f8]
mov dword [eax], edx
mov dword [ebp - 4], 0xffffffff
mov ecx, dword [ebp - 0x250]
add ecx, 0xd4
mov dword [ebp - 0x3fc], ecx
mov dword [ebp - 0xa54], 0x100df1f0
mov edx, dword [ebp - 0xa54]
mov dword [ebp - 0xa58], edx
mov eax, dword [ebp - 0x3fc]
movzx ecx, byte [eax + 0x10]
test ecx, ecx
je 0x100cfe3d
mov edx, 0x1b
add edx, 1
mov dword [ebp - 0x51c], edx
jmp 0x100cfe47
mov dword [ebp - 0x51c], 0x1b
mov eax, dword [ebp - 0x51c]
mov dword [ebp - 0x520], eax
mov ecx, dword [ebp - 0x3fc]
cmp dword [ecx + 4], 0
je 0x100cfea3
mov edx, dword [ebp - 0x3fc]
cmp dword [edx + 8], 0
je 0x100cfe74
mov byte [ebp - 0x2b5], 1
jmp 0x100cfe7b
mov byte [ebp - 0x2b5], 0
mov al, byte [ebp - 0x2b5]
mov byte [ebp - 0x2e7], al
movzx ecx, byte [ebp - 0x2e7]
test ecx, ecx
je 0x100cfea3
mov edx, dword [ebp - 0x3fc]
mov eax, dword [ebp - 0x520]
cmp eax, dword [edx + 0xc]
jbe 0x100cfed0
mov dword [ebp - 0x52c], 0
mov ecx, dword [ebp - 0x244]
or ecx, 0x100000
mov dword [ebp - 0x244], ecx
lea edx, [ebp - 0x52c]
mov dword [ebp - 0x15a0], edx
jmp 0x100d003c
mov eax, dword [ebp - 0xa58]
mov dword [ebp - 0xa5c], eax
mov ecx, dword [ebp - 0xa5c]
mov dword [ebp - 0xa68], ecx
mov edx, dword [ebp - 0x3fc]
add edx, 8
mov dword [ebp - 0xa60], edx
mov eax, dword [ebp - 0xa60]
mov ecx, dword [eax]
mov edx, dword [ebp - 0x520]
lea eax, [ecx + edx*4]
mov dword [ebp - 0xa64], eax
mov ecx, dword [ebp - 0xa64]
mov edx, dword [ebp - 0xa68]
mov dword [ecx], edx
mov eax, 0x1b
shl eax, 2
mov ecx, dword [ebp - 0x3fc]
add eax, dword [ecx + 4]
mov dword [ebp - 0x524], eax
mov edx, dword [ebp - 0x524]
cmp dword [edx], 0
je 0x100cff90
mov eax, dword [ebp - 0x524]
mov ecx, dword [eax]
mov dword [ebp - 0xa6c], ecx
mov edx, dword [ebp - 0xa6c]
mov dword [ebp - 0xa70], edx
lea eax, [ebp - 0xa70]
mov dword [ebp - 0xa74], eax
mov ecx, dword [ebp - 0xa74]
mov dword [ebp - 0xa78], ecx
mov edx, dword [ebp - 0x244]
or edx, 0x200000
mov dword [ebp - 0x244], edx
mov eax, dword [ebp - 0xa78]
mov dword [ebp - 0x528], eax
jmp 0x100cffcf
mov dword [ebp - 0xa7c], 0
lea ecx, [ebp - 0xa7c]
mov dword [ebp - 0xa80], ecx
mov edx, dword [ebp - 0xa80]
mov dword [ebp - 0xa84], edx
mov eax, dword [ebp - 0x244]
or eax, 0x400000
mov dword [ebp - 0x244], eax
mov ecx, dword [ebp - 0xa84]
mov dword [ebp - 0x528], ecx
mov edx, dword [ebp - 0x528]
mov dword [ebp - 0xa88], edx
mov eax, dword [ebp - 0xa88]
mov ecx, dword [eax]
mov dword [ebp - 0x52c], ecx
mov edx, dword [ebp - 0x244]
or edx, 0x800000
mov dword [ebp - 0x244], edx
mov eax, dword [ebp - 0x244]
and eax, 0x400000
je 0x100d0012
and dword [ebp - 0x244], 0xffbfffff
mov ecx, dword [ebp - 0x244]
and ecx, 0x200000
je 0x100d002a
and dword [ebp - 0x244], 0xffdfffff
mov edx, dword [ebp - 0x244]
or edx, 0x100000
mov dword [ebp - 0x244], edx
mov eax, dword [ebp - 0x250]
add eax, 0xd4
mov dword [ebp - 0x400], eax
mov dword [ebp - 0xa8c], 0x100df420
mov ecx, dword [ebp - 0xa8c]
mov dword [ebp - 0xa90], ecx
mov edx, dword [ebp - 0x400]
movzx eax, byte [edx + 0x10]
test eax, eax
je 0x100d0081
mov ecx, 0x5d
add ecx, 1
mov dword [ebp - 0x530], ecx
jmp 0x100d008b
mov dword [ebp - 0x530], 0x5d
mov edx, dword [ebp - 0x530]
mov dword [ebp - 0x534], edx
mov eax, dword [ebp - 0x400]
cmp dword [eax + 4], 0
je 0x100d00e7
mov ecx, dword [ebp - 0x400]
cmp dword [ecx + 8], 0
je 0x100d00b8
mov byte [ebp - 0x2b6], 1
jmp 0x100d00bf
mov byte [ebp - 0x2b6], 0
mov dl, byte [ebp - 0x2b6]
mov byte [ebp - 0x2e8], dl
movzx eax, byte [ebp - 0x2e8]
test eax, eax
je 0x100d00e7
mov ecx, dword [ebp - 0x400]
mov edx, dword [ebp - 0x534]
cmp edx, dword [ecx + 0xc]
jbe 0x100d0113
mov dword [ebp - 0x540], 0
mov eax, dword [ebp - 0x244]
or eax, 0x1000000
mov dword [ebp - 0x244], eax
lea ecx, [ebp - 0x540]
mov dword [ebp - 0x15c0], ecx
jmp 0x100d0280
mov edx, dword [ebp - 0xa90]
mov dword [ebp - 0xa94], edx
mov eax, dword [ebp - 0xa94]
mov dword [ebp - 0xaa0], eax
mov ecx, dword [ebp - 0x400]
add ecx, 8
mov dword [ebp - 0xa98], ecx
mov edx, dword [ebp - 0xa98]
mov eax, dword [edx]
mov ecx, dword [ebp - 0x534]
lea edx, [eax + ecx*4]
mov dword [ebp - 0xa9c], edx
mov eax, dword [ebp - 0xa9c]
mov ecx, dword [ebp - 0xaa0]
mov dword [eax], ecx
mov edx, 0x5d
shl edx, 2
mov eax, dword [ebp - 0x400]
add edx, dword [eax + 4]
mov dword [ebp - 0x538], edx
mov ecx, dword [ebp - 0x538]
cmp dword [ecx], 0
je 0x100d01d3
mov edx, dword [ebp - 0x538]
mov eax, dword [edx]
mov dword [ebp - 0xaa4], eax
mov ecx, dword [ebp - 0xaa4]
mov dword [ebp - 0xaa8], ecx
lea edx, [ebp - 0xaa8]
mov dword [ebp - 0xaac], edx
mov eax, dword [ebp - 0xaac]
mov dword [ebp - 0xab0], eax
mov ecx, dword [ebp - 0x244]
or ecx, 0x2000000
mov dword [ebp - 0x244], ecx
mov edx, dword [ebp - 0xab0]
mov dword [ebp - 0x53c], edx
jmp 0x100d0213
mov dword [ebp - 0xab4], 0
lea eax, [ebp - 0xab4]
mov dword [ebp - 0xab8], eax
mov ecx, dword [ebp - 0xab8]
mov dword [ebp - 0xabc], ecx
mov edx, dword [ebp - 0x244]
or edx, 0x4000000
mov dword [ebp - 0x244], edx
mov eax, dword [ebp - 0xabc]
mov dword [ebp - 0x53c], eax
mov ecx, dword [ebp - 0x53c]
mov dword [ebp - 0xac0], ecx
mov edx, dword [ebp - 0xac0]
mov eax, dword [edx]
mov dword [ebp - 0x540], eax
mov ecx, dword [ebp - 0x244]
or ecx, 0x8000000
mov dword [ebp - 0x244], ecx
mov edx, dword [ebp - 0x244]
and edx, 0x4000000
je 0x100d0257
and dword [ebp - 0x244], 0xfbffffff
mov eax, dword [ebp - 0x244]
and eax, 0x2000000
je 0x100d026e
and dword [ebp - 0x244], 0xfdffffff
mov ecx, dword [ebp - 0x244]
or ecx, 0x1000000
mov dword [ebp - 0x244], ecx
mov edx, dword [ebp - 0x250]
add edx, 0xd4
mov dword [ebp - 0x404], edx
mov dword [ebp - 0xac4], 0x100df7a0
mov eax, dword [ebp - 0xac4]
mov dword [ebp - 0xac8], eax
mov ecx, dword [ebp - 0x404]
movzx edx, byte [ecx + 0x10]
test edx, edx
je 0x100d02c6
mov eax, 0x5a
add eax, 1
mov dword [ebp - 0x544], eax
jmp 0x100d02d0
mov dword [ebp - 0x544], 0x5a
mov ecx, dword [ebp - 0x544]
mov dword [ebp - 0x548], ecx
mov edx, dword [ebp - 0x404]
cmp dword [edx + 4], 0
je 0x100d032c
mov eax, dword [ebp - 0x404]
cmp dword [eax + 8], 0
je 0x100d02fd
mov byte [ebp - 0x2b7], 1
jmp 0x100d0304
mov byte [ebp - 0x2b7], 0
mov cl, byte [ebp - 0x2b7]
mov byte [ebp - 0x2e9], cl
movzx edx, byte [ebp - 0x2e9]
test edx, edx
je 0x100d032c
mov eax, dword [ebp - 0x404]
mov ecx, dword [ebp - 0x548]
cmp ecx, dword [eax + 0xc]
jbe 0x100d0359
mov dword [ebp - 0x554], 0
mov edx, dword [ebp - 0x244]
or edx, 0x10000000
mov dword [ebp - 0x244], edx
lea eax, [ebp - 0x554]
mov dword [ebp - 0x15c4], eax
jmp 0x100d04c4
mov ecx, dword [ebp - 0xac8]
mov dword [ebp - 0xacc], ecx
mov edx, dword [ebp - 0xacc]
mov dword [ebp - 0xad8], edx
mov eax, dword [ebp - 0x404]
add eax, 8
mov dword [ebp - 0xad0], eax
mov ecx, dword [ebp - 0xad0]
mov edx, dword [ecx]
mov eax, dword [ebp - 0x548]
lea ecx, [edx + eax*4]
mov dword [ebp - 0xad4], ecx
mov edx, dword [ebp - 0xad4]
mov eax, dword [ebp - 0xad8]
mov dword [edx], eax
mov ecx, 0x5a
shl ecx, 2
mov edx, dword [ebp - 0x404]
add ecx, dword [edx + 4]
mov dword [ebp - 0x54c], ecx
mov eax, dword [ebp - 0x54c]
cmp dword [eax], 0
je 0x100d0418
mov ecx, dword [ebp - 0x54c]
mov edx, dword [ecx]
mov dword [ebp - 0xadc], edx
mov eax, dword [ebp - 0xadc]
mov dword [ebp - 0xae0], eax
lea ecx, [ebp - 0xae0]
mov dword [ebp - 0xae4], ecx
mov edx, dword [ebp - 0xae4]
mov dword [ebp - 0xae8], edx
mov eax, dword [ebp - 0x244]
or eax, 0x20000000
mov dword [ebp - 0x244], eax
mov ecx, dword [ebp - 0xae8]
mov dword [ebp - 0x550], ecx
jmp 0x100d0458
mov dword [ebp - 0xaec], 0
lea edx, [ebp - 0xaec]
mov dword [ebp - 0xaf0], edx
mov eax, dword [ebp - 0xaf0]
mov dword [ebp - 0xaf4], eax
mov ecx, dword [ebp - 0x244]
or ecx, 0x40000000
mov dword [ebp - 0x244], ecx
mov edx, dword [ebp - 0xaf4]
mov dword [ebp - 0x550], edx
mov eax, dword [ebp - 0x550]
mov dword [ebp - 0xaf8], eax
mov ecx, dword [ebp - 0xaf8]
mov edx, dword [ecx]
mov dword [ebp - 0x554], edx
mov eax, dword [ebp - 0x244]
or eax, 0x80000000
mov dword [ebp - 0x244], eax
mov ecx, dword [ebp - 0x244]
and ecx, 0x40000000
je 0x100d049b
and dword [ebp - 0x244], 0xbfffffff
mov edx, dword [ebp - 0x244]
and edx, 0x20000000
je 0x100d04b3
and dword [ebp - 0x244], 0xdfffffff
mov eax, dword [ebp - 0x244]
or eax, 0x10000000
mov dword [ebp - 0x244], eax
mov ecx, dword [ebp - 0x250]
add ecx, 0xfc
mov dword [ebp - 0x2ac], ecx
mov edx, dword [0x101b5b8c]
mov dword [ebp - 0xafc], edx
lea eax, [ebp - 0x408]
mov dword [ebp - 0x558], eax
mov ecx, dword [ebp - 0x558]
mov edx, dword [ebp - 0xafc]
mov dword [ecx], edx
mov eax, dword [ebp - 0x558]
mov dword [ebp - 0xb00], eax
mov ecx, dword [ebp - 0xb00]
mov dword [ebp - 0x15c8], ecx
mov dword [ebp - 4], 3
mov edx, dword [ebp - 0x2ac]
mov eax, dword [ebp - 0x408]
mov dword [edx], eax
mov ecx, dword [ebp - 0x408]
mov edx, dword [ecx]
mov dword [ebp - 0xb04], edx
mov eax, dword [ebp - 0xb04]
mov ecx, dword [ebp - 0x2ac]
mov dword [ecx + 4], eax
mov edx, dword [ebp - 0x2ac]
cmp dword [edx + 4], 0
jne 0x100d055e
mov dword [ebp - 4], 0xffffffff
jmp 0x100d07ce
mov dword [ebp - 0x490], 0
mov eax, dword [ebp - 0x2ac]
mov ecx, dword [eax + 4]
mov edx, dword [ebp - 0x490]
mov eax, dword [ecx + edx*4]
mov dword [ebp - 0xb08], eax
mov ecx, dword [ebp - 0xb08]
mov dword [ebp - 0x55c], ecx
cmp dword [ebp - 0x55c], 0
jne 0x100d059e
mov byte [ebp - 0x265], 0
jmp 0x100d05f5
mov edx, dword [0x1014c914]
mov dword [ebp - 0xb0c], edx
push 0x1c
lea eax, [ebp - 0x1ac]
push eax
mov ecx, dword [ebp - 0x55c]
push ecx
call dword [ebp - 0xb0c]
test eax, eax
jne 0x100d05cd
mov byte [ebp - 0x265], 0
jmp 0x100d05f5
mov edx, dword [ebp - 0x198]
and edx, 1
jne 0x100d05e5
mov eax, dword [ebp - 0x198]
and eax, 0x100
je 0x100d05ee
mov byte [ebp - 0x265], 0
jmp 0x100d05f5
mov byte [ebp - 0x265], 1
movzx ecx, byte [ebp - 0x265]
test ecx, ecx
je 0x100d0614
mov edx, dword [ebp - 0x490]
add edx, 1
mov dword [ebp - 0x490], edx
jmp 0x100d0568
mov eax, dword [ebp - 0x490]
mov dword [ebp - 0xb10], eax
mov ecx, dword [ebp - 0xb10]
mov edx, dword [ebp - 0x2ac]
mov dword [edx + 0xc], ecx
mov eax, dword [ebp - 0x2ac]
cmp dword [eax + 0xc], 0
jne 0x100d0647
mov dword [ebp - 4], 0xffffffff
jmp 0x100d07ce
mov ecx, 1
test ecx, ecx
je 0x100d0664
mov edx, dword [ebp - 0x2ac]
mov eax, dword [edx + 0xc]
add eax, 1
mov dword [ebp - 0x560], eax
jmp 0x100d0673
mov ecx, dword [ebp - 0x2ac]
mov edx, dword [ecx + 0xc]
mov dword [ebp - 0x560], edx
mov eax, dword [ebp - 0x560]
push eax
lea ecx, [ebp - 0xb18]
push ecx
call fcn.10057f90
add esp, 8
mov dword [ebp - 0xb14], eax
mov edx, dword [ebp - 0xb14]
push edx
mov ecx, dword [ebp - 0x2ac]
add ecx, 8
call fcn.10058080
lea ecx, [ebp - 0xb18]
call fcn.10057060
mov eax, dword [ebp - 0x2ac]
cmp dword [eax + 8], 0
je 0x100d06c4
mov byte [ebp - 0x2b8], 1
jmp 0x100d06cb
mov byte [ebp - 0x2b8], 0
mov cl, byte [ebp - 0x2b8]
mov byte [ebp - 0x2ea], cl
movzx edx, byte [ebp - 0x2ea]
test edx, edx
jne 0x100d06ee
mov dword [ebp - 4], 0xffffffff
jmp 0x100d07ce
mov eax, dword [ebp - 0x2ac]
mov ecx, dword [eax + 8]
mov dword [ebp - 0xb1c], ecx
mov edx, dword [ebp - 0xb1c]
mov dword [ebp - 0x2c], edx
mov eax, 1
test eax, eax
je 0x100d0782
mov ecx, dword [ebp - 0x2c]
mov dword [ebp - 0xb20], ecx
mov edx, dword [ebp - 0x2ac]
mov eax, dword [edx + 0xc]
lea ecx, [eax*4 + 4]
push ecx
mov edx, dword [ebp - 0x2ac]
mov eax, dword [edx + 4]
sub eax, 4
push eax
mov ecx, dword [ebp - 0xb20]
push ecx
call sub.VCRUNTIME140.dll_memcpy
add esp, 0xc
mov edx, dword [ebp - 0x2c]
mov dword [ebp - 0xb24], edx
mov eax, dword [ebp - 0xb24]
add eax, 4
mov dword [ebp - 0xb28], eax
cmp dword [ebp - 0x408], 0
jne 0x100d0768
jmp 0x100d0776
mov ecx, dword [ebp - 0x408]
mov edx, dword [ebp - 0xb28]
mov dword [ecx], edx
mov eax, dword [ebp - 0x2ac]
mov byte [eax + 0x10], 1
jmp 0x100d07c7
mov ecx, dword [ebp - 0x2c]
mov dword [ebp - 0xb2c], ecx
mov edx, dword [ebp - 0x2ac]
mov eax, dword [edx + 0xc]
shl eax, 2
push eax
mov ecx, dword [ebp - 0x2ac]
mov edx, dword [ecx + 4]
push edx
mov eax, dword [ebp - 0xb2c]
push eax
call sub.VCRUNTIME140.dll_memcpy
add esp, 0xc
cmp dword [ebp - 0x408], 0
jne 0x100d07bc
jmp 0x100d07c7
mov ecx, dword [ebp - 0x2c]
mov edx, dword [ebp - 0x408]
mov dword [edx], ecx
mov dword [ebp - 4], 0xffffffff
mov eax, dword [ebp - 0x250]
add eax, 0xfc
mov dword [ebp - 0x40c], eax
mov dword [ebp - 0xb30], 0x10104f90
mov ecx, dword [ebp - 0xb30]
mov dword [ebp - 0xb34], ecx
mov edx, dword [ebp - 0x40c]
movzx eax, byte [edx + 0x10]
test eax, eax
je 0x100d0813
mov ecx, 0xe
add ecx, 1
mov dword [ebp - 0x564], ecx
jmp 0x100d081d
mov dword [ebp - 0x564], 0xe
mov edx, dword [ebp - 0x564]
mov dword [ebp - 0x568], edx
mov eax, dword [ebp - 0x40c]
cmp dword [eax + 4], 0
je 0x100d0879
mov ecx, dword [ebp - 0x40c]
cmp dword [ecx + 8], 0
je 0x100d084a
mov byte [ebp - 0x2b9], 1
jmp 0x100d0851
mov byte [ebp - 0x2b9], 0
mov dl, byte [ebp - 0x2b9]
mov byte [ebp - 0x2eb], dl
movzx eax, byte [ebp - 0x2eb]
test eax, eax
je 0x100d0879
mov ecx, dword [ebp - 0x40c]
mov edx, dword [ebp - 0x568]
cmp edx, dword [ecx + 0xc]
jbe 0x100d08a3
mov dword [ebp - 0x574], 0
mov eax, dword [ebp - 0x248]
or eax, 1
mov dword [ebp - 0x248], eax
lea ecx, [ebp - 0x574]
mov dword [ebp - 0x15cc], ecx
jmp 0x100d09f9
mov edx, dword [ebp - 0xb34]
mov dword [ebp - 0xb38], edx
mov eax, dword [ebp - 0xb38]
mov dword [ebp - 0xb44], eax
mov ecx, dword [ebp - 0x40c]
add ecx, 8
mov dword [ebp - 0xb3c], ecx
mov edx, dword [ebp - 0xb3c]
mov eax, dword [edx]
mov ecx, dword [ebp - 0x568]
lea edx, [eax + ecx*4]
mov dword [ebp - 0xb40], edx
mov eax, dword [ebp - 0xb40]
mov ecx, dword [ebp - 0xb44]
mov dword [eax], ecx
mov edx, 0xe
shl edx, 2
mov eax, dword [ebp - 0x40c]
add edx, dword [eax + 4]
mov dword [ebp - 0x56c], edx
mov ecx, dword [ebp - 0x56c]
cmp dword [ecx], 0
je 0x100d0960
mov edx, dword [ebp - 0x56c]
mov eax, dword [edx]
mov dword [ebp - 0xb48], eax
mov ecx, dword [ebp - 0xb48]
mov dword [ebp - 0xb4c], ecx
lea edx, [ebp - 0xb4c]
mov dword [ebp - 0xb50], edx
mov eax, dword [ebp - 0xb50]
mov dword [ebp - 0xb54], eax
mov ecx, dword [ebp - 0x248]
or ecx, 2
mov dword [ebp - 0x248], ecx
mov edx, dword [ebp - 0xb54]
mov dword [ebp - 0x570], edx
jmp 0x100d099d
mov dword [ebp - 0xb58], 0
lea eax, [ebp - 0xb58]
mov dword [ebp - 0xb5c], eax
mov ecx, dword [ebp - 0xb5c]
mov dword [ebp - 0xb60], ecx
mov edx, dword [ebp - 0x248]
or edx, 4
mov dword [ebp - 0x248], edx
mov eax, dword [ebp - 0xb60]
mov dword [ebp - 0x570], eax
mov ecx, dword [ebp - 0x570]
mov dword [ebp - 0xb64], ecx
mov edx, dword [ebp - 0xb64]
mov eax, dword [edx]
mov dword [ebp - 0x574], eax
mov ecx, dword [ebp - 0x248]
or ecx, 8
mov dword [ebp - 0x248], ecx
mov edx, dword [ebp - 0x248]
and edx, 4
je 0x100d09d8
and dword [ebp - 0x248], 0xfffffffb
mov eax, dword [ebp - 0x248]
and eax, 2
je 0x100d09ea
and dword [ebp - 0x248], 0xfffffffd
mov ecx, dword [ebp - 0x248]
or ecx, 1
mov dword [ebp - 0x248], ecx
mov edx, dword [ebp - 0x250]
add edx, 0xfc
mov dword [ebp - 0x410], edx
mov dword [ebp - 0xb68], 0x10105870
mov eax, dword [ebp - 0xb68]
mov dword [ebp - 0xb6c], eax
mov ecx, dword [ebp - 0x410]
movzx edx, byte [ecx + 0x10]
test edx, edx
je 0x100d0a3f
mov eax, 0x13
add eax, 1
mov dword [ebp - 0x578], eax
jmp 0x100d0a49
mov dword [ebp - 0x578], 0x13
mov ecx, dword [ebp - 0x578]
mov dword [ebp - 0x57c], ecx
mov edx, dword [ebp - 0x410]
cmp dword [edx + 4], 0
je 0x100d0aa5
mov eax, dword [ebp - 0x410]
cmp dword [eax + 8], 0
je 0x100d0a76
mov byte [ebp - 0x2ba], 1
jmp 0x100d0a7d
mov byte [ebp - 0x2ba], 0
mov cl, byte [ebp - 0x2ba]
mov byte [ebp - 0x2ec], cl
movzx edx, byte [ebp - 0x2ec]
test edx, edx
je 0x100d0aa5
mov eax, dword [ebp - 0x410]
mov ecx, dword [ebp - 0x57c]
cmp ecx, dword [eax + 0xc]
jbe 0x100d0acf
mov dword [ebp - 0x588], 0
mov edx, dword [ebp - 0x248]
or edx, 0x10
mov dword [ebp - 0x248], edx
lea eax, [ebp - 0x588]
mov dword [ebp - 0x15d0], eax
jmp 0x100d0c27
mov ecx, dword [ebp - 0xb6c]
mov dword [ebp - 0xb70], ecx
mov edx, dword [ebp - 0xb70]
mov dword [ebp - 0xb7c], edx
mov eax, dword [ebp - 0x410]
add eax, 8
mov dword [ebp - 0xb74], eax
mov ecx, dword [ebp - 0xb74]
mov edx, dword [ecx]
mov eax, dword [ebp - 0x57c]
lea ecx, [edx + eax*4]
mov dword [ebp - 0xb78], ecx
mov edx, dword [ebp - 0xb78]
mov eax, dword [ebp - 0xb7c]
mov dword [edx], eax
mov ecx, 0x13
shl ecx, 2
mov edx, dword [ebp - 0x410]
add ecx, dword [edx + 4]
mov dword [ebp - 0x580], ecx
mov eax, dword [ebp - 0x580]
cmp dword [eax], 0
je 0x100d0b8c
mov ecx, dword [ebp - 0x580]
mov edx, dword [ecx]
mov dword [ebp - 0xb80], edx
mov eax, dword [ebp - 0xb80]
mov dword [ebp - 0xb84], eax
lea ecx, [ebp - 0xb84]
mov dword [ebp - 0xb88], ecx
mov edx, dword [ebp - 0xb88]
mov dword [ebp - 0xb8c], edx
mov eax, dword [ebp - 0x248]
or eax, 0x20
mov dword [ebp - 0x248], eax
mov ecx, dword [ebp - 0xb8c]
mov dword [ebp - 0x584], ecx
jmp 0x100d0bc9
mov dword [ebp - 0xb90], 0
lea edx, [ebp - 0xb90]
mov dword [ebp - 0xb94], edx
mov eax, dword [ebp - 0xb94]
mov dword [ebp - 0xb98], eax
mov ecx, dword [ebp - 0x248]
or ecx, 0x40
mov dword [ebp - 0x248], ecx
mov edx, dword [ebp - 0xb98]
mov dword [ebp - 0x584], edx
mov eax, dword [ebp - 0x584]
mov dword [ebp - 0xb9c], eax
mov ecx, dword [ebp - 0xb9c]
mov edx, dword [ecx]
mov dword [ebp - 0x588], edx
mov eax, dword [ebp - 0x248]
or eax, 0x80
mov dword [ebp - 0x248], eax
mov ecx, dword [ebp - 0x248]
and ecx, 0x40
je 0x100d0c06
and dword [ebp - 0x248], 0xffffffbf
mov edx, dword [ebp - 0x248]
and edx, 0x20
je 0x100d0c18
and dword [ebp - 0x248], 0xffffffdf
mov eax, dword [ebp - 0x248]
or eax, 0x10
mov dword [ebp - 0x248], eax
mov ecx, dword [ebp - 0x250]
add ecx, 0x98
mov dword [ebp - 0x2a8], ecx
mov edx, dword [0x101b5bd4]
mov dword [ebp - 0xba0], edx
lea eax, [ebp - 0x414]
mov dword [ebp - 0x58c], eax
mov ecx, dword [ebp - 0x58c]
mov edx, dword [ebp - 0xba0]
mov dword [ecx], edx
mov eax, dword [ebp - 0x58c]
mov dword [ebp - 0xba4], eax
mov ecx, dword [ebp - 0xba4]
mov dword [ebp - 0x15d4], ecx
mov dword [ebp - 4], 4
mov edx, dword [ebp - 0x2a8]
mov eax, dword [ebp - 0x414]
mov dword [edx], eax
mov ecx, dword [ebp - 0x414]
mov edx, dword [ecx]
mov dword [ebp - 0xba8], edx
mov eax, dword [ebp - 0xba8]
mov ecx, dword [ebp - 0x2a8]
mov dword [ecx + 4], eax
mov edx, dword [ebp - 0x2a8]
cmp dword [edx + 4], 0
jne 0x100d0cc1
mov dword [ebp - 4], 0xffffffff
jmp 0x100d0f31
mov dword [ebp - 0x4a0], 0
mov eax, dword [ebp - 0x2a8]
mov ecx, dword [eax + 4]
mov edx, dword [ebp - 0x4a0]
mov eax, dword [ecx + edx*4]
mov dword [ebp - 0xbac], eax
mov ecx, dword [ebp - 0xbac]
mov dword [ebp - 0x590], ecx
cmp dword [ebp - 0x590], 0
jne 0x100d0d01
mov byte [ebp - 0x255], 0
jmp 0x100d0d58
mov edx, dword [0x1014c914]
mov dword [ebp - 0xbb0], edx
push 0x1c
lea eax, [ebp - 0x21c]
push eax
mov ecx, dword [ebp - 0x590]
push ecx
call dword [ebp - 0xbb0]
test eax, eax
jne 0x100d0d30
mov byte [ebp - 0x255], 0
jmp 0x100d0d58
mov edx, dword [ebp - 0x208]
and edx, 1
jne 0x100d0d48
mov eax, dword [ebp - 0x208]
and eax, 0x100
je 0x100d0d51
mov byte [ebp - 0x255], 0
jmp 0x100d0d58
mov byte [ebp - 0x255], 1
movzx ecx, byte [ebp - 0x255]
test ecx, ecx
je 0x100d0d77
mov edx, dword [ebp - 0x4a0]
add edx, 1
mov dword [ebp - 0x4a0], edx
jmp 0x100d0ccb
mov eax, dword [ebp - 0x4a0]
mov dword [ebp - 0xbb4], eax
mov ecx, dword [ebp - 0xbb4]
mov edx, dword [ebp - 0x2a8]
mov dword [edx + 0xc], ecx
mov eax, dword [ebp - 0x2a8]
cmp dword [eax + 0xc], 0
jne 0x100d0daa
mov dword [ebp - 4], 0xffffffff
jmp 0x100d0f31
mov ecx, 1
test ecx, ecx
je 0x100d0dc7
mov edx, dword [ebp - 0x2a8]
mov eax, dword [edx + 0xc]
add eax, 1
mov dword [ebp - 0x594], eax
jmp 0x100d0dd6
mov ecx, dword [ebp - 0x2a8]
mov edx, dword [ecx + 0xc]
mov dword [ebp - 0x594], edx
mov eax, dword [ebp - 0x594]
push eax
lea ecx, [ebp - 0xbbc]
push ecx
call fcn.10057f90
add esp, 8
mov dword [ebp - 0xbb8], eax
mov edx, dword [ebp - 0xbb8]
push edx
mov ecx, dword [ebp - 0x2a8]
add ecx, 8
call fcn.10058080
lea ecx, [ebp - 0xbbc]
call fcn.10057060
mov eax, dword [ebp - 0x2a8]
cmp dword [eax + 8], 0
je 0x100d0e27
mov byte [ebp - 0x2bb], 1
jmp 0x100d0e2e
mov byte [ebp - 0x2bb], 0
mov cl, byte [ebp - 0x2bb]
mov byte [ebp - 0x2ed], cl
movzx edx, byte [ebp - 0x2ed]
test edx, edx
jne 0x100d0e51
mov dword [ebp - 4], 0xffffffff
jmp 0x100d0f31
mov eax, dword [ebp - 0x2a8]
mov ecx, dword [eax + 8]
mov dword [ebp - 0xbc0], ecx
mov edx, dword [ebp - 0xbc0]
mov dword [ebp - 0x48], edx
mov eax, 1
test eax, eax
je 0x100d0ee5
mov ecx, dword [ebp - 0x48]
mov dword [ebp - 0xbc4], ecx
mov edx, dword [ebp - 0x2a8]
mov eax, dword [edx + 0xc]
lea ecx, [eax*4 + 4]
push ecx
mov edx, dword [ebp - 0x2a8]
mov eax, dword [edx + 4]
sub eax, 4
push eax
mov ecx, dword [ebp - 0xbc4]
push ecx
call sub.VCRUNTIME140.dll_memcpy
add esp, 0xc
mov edx, dword [ebp - 0x48]
mov dword [ebp - 0xbc8], edx
mov eax, dword [ebp - 0xbc8]
add eax, 4
mov dword [ebp - 0xbcc], eax
cmp dword [ebp - 0x414], 0
jne 0x100d0ecb
jmp 0x100d0ed9
mov ecx, dword [ebp - 0x414]
mov edx, dword [ebp - 0xbcc]
mov dword [ecx], edx
mov eax, dword [ebp - 0x2a8]
mov byte [eax + 0x10], 1
jmp 0x100d0f2a
mov ecx, dword [ebp - 0x48]
mov dword [ebp - 0xbd0], ecx
mov edx, dword [ebp - 0x2a8]
mov eax, dword [edx + 0xc]
shl eax, 2
push eax
mov ecx, dword [ebp - 0x2a8]
mov edx, dword [ecx + 4]
push edx
mov eax, dword [ebp - 0xbd0]
push eax
call sub.VCRUNTIME140.dll_memcpy
add esp, 0xc
cmp dword [ebp - 0x414], 0
jne 0x100d0f1f
jmp 0x100d0f2a
mov ecx, dword [ebp - 0x48]
mov edx, dword [ebp - 0x414]
mov dword [edx], ecx
mov dword [ebp - 4], 0xffffffff
mov eax, dword [ebp - 0x250]
add eax, 0x98
mov dword [ebp - 0x418], eax
mov dword [ebp - 0xbd4], 0x100ef970
mov ecx, dword [ebp - 0xbd4]
mov dword [ebp - 0xbd8], ecx
mov edx, dword [ebp - 0x418]
movzx eax, byte [edx + 0x10]
test eax, eax
je 0x100d0f76
mov ecx, 0x10
add ecx, 1
mov dword [ebp - 0x598], ecx
jmp 0x100d0f80
mov dword [ebp - 0x598], 0x10
mov edx, dword [ebp - 0x598]
mov dword [ebp - 0x59c], edx
mov eax, dword [ebp - 0x418]
cmp dword [eax + 4], 0
je 0x100d0fdc
mov ecx, dword [ebp - 0x418]
cmp dword [ecx + 8], 0
je 0x100d0fad
mov byte [ebp - 0x2bc], 1
jmp 0x100d0fb4
mov byte [ebp - 0x2bc], 0
mov dl, byte [ebp - 0x2bc]
mov byte [ebp - 0x2ee], dl
movzx eax, byte [ebp - 0x2ee]
test eax, eax
je 0x100d0fdc
mov ecx, dword [ebp - 0x418]
mov edx, dword [ebp - 0x59c]
cmp edx, dword [ecx + 0xc]
jbe 0x100d1008
mov dword [ebp - 0x5a8], 0
mov eax, dword [ebp - 0x248]
or eax, 0x100
mov dword [ebp - 0x248], eax
lea ecx, [ebp - 0x5a8]
mov dword [ebp - 0x15d8], ecx
jmp 0x100d1175
mov edx, dword [ebp - 0xbd8]
mov dword [ebp - 0xbdc], edx
mov eax, dword [ebp - 0xbdc]
mov dword [ebp - 0xbe8], eax
mov ecx, dword [ebp - 0x418]
add ecx, 8
mov dword [ebp - 0xbe0], ecx
mov edx, dword [ebp - 0xbe0]
mov eax, dword [edx]
mov ecx, dword [ebp - 0x59c]
lea edx, [eax + ecx*4]
mov dword [ebp - 0xbe4], edx
mov eax, dword [ebp - 0xbe4]
mov ecx, dword [ebp - 0xbe8]
mov dword [eax], ecx
mov edx, 0x10
shl edx, 2
mov eax, dword [ebp - 0x418]
add edx, dword [eax + 4]
mov dword [ebp - 0x5a0], edx
mov ecx, dword [ebp - 0x5a0]
cmp dword [ecx], 0
je 0x100d10c8
mov edx, dword [ebp - 0x5a0]
mov eax, dword [edx]
mov dword [ebp - 0xbec], eax
mov ecx, dword [ebp - 0xbec]
mov dword [ebp - 0xbf0], ecx
lea edx, [ebp - 0xbf0]
mov dword [ebp - 0xbf4], edx
mov eax, dword [ebp - 0xbf4]
mov dword [ebp - 0xbf8], eax
mov ecx, dword [ebp - 0x248]
or ecx, 0x200
mov dword [ebp - 0x248], ecx
mov edx, dword [ebp - 0xbf8]
mov dword [ebp - 0x5a4], edx
jmp 0x100d1108
mov dword [ebp - 0xbfc], 0
lea eax, [ebp - 0xbfc]
mov dword [ebp - 0xc00], eax
mov ecx, dword [ebp - 0xc00]
mov dword [ebp - 0xc04], ecx
mov edx, dword [ebp - 0x248]
or edx, 0x400
mov dword [ebp - 0x248], edx
mov eax, dword [ebp - 0xc04]
mov dword [ebp - 0x5a4], eax
mov ecx, dword [ebp - 0x5a4]
mov dword [ebp - 0xc08], ecx
mov edx, dword [ebp - 0xc08]
mov eax, dword [edx]
mov dword [ebp - 0x5a8], eax
mov ecx, dword [ebp - 0x248]
or ecx, 0x800
mov dword [ebp - 0x248], ecx
mov edx, dword [ebp - 0x248]
and edx, 0x400
je 0x100d114c
and dword [ebp - 0x248], 0xfffffbff
mov eax, dword [ebp - 0x248]
and eax, 0x200
je 0x100d1163
and dword [ebp - 0x248], 0xfffffdff
mov ecx, dword [ebp - 0x248]
or ecx, 0x100
mov dword [ebp - 0x248], ecx
mov edx, dword [ebp - 0x250]
add edx, 0x98
mov dword [ebp - 0x41c], edx
mov dword [ebp - 0xc0c], 0x100ef9c0
mov eax, dword [ebp - 0xc0c]
mov dword [ebp - 0xc10], eax
mov ecx, dword [ebp - 0x41c]
movzx edx, byte [ecx + 0x10]
test edx, edx
je 0x100d11bb
mov eax, 0x11
add eax, 1
mov dword [ebp - 0x5ac], eax
jmp 0x100d11c5
mov dword [ebp - 0x5ac], 0x11
mov ecx, dword [ebp - 0x5ac]
mov dword [ebp - 0x5b0], ecx
mov edx, dword [ebp - 0x41c]
cmp dword [edx + 4], 0
je 0x100d1221
mov eax, dword [ebp - 0x41c]
cmp dword [eax + 8], 0
je 0x100d11f2
mov byte [ebp - 0x2bd], 1
jmp 0x100d11f9
mov byte [ebp - 0x2bd], 0
mov cl, byte [ebp - 0x2bd]
mov byte [ebp - 0x2ef], cl
movzx edx, byte [ebp - 0x2ef]
test edx, edx
je 0x100d1221
mov eax, dword [ebp - 0x41c]
mov ecx, dword [ebp - 0x5b0]
cmp ecx, dword [eax + 0xc]
jbe 0x100d124e
mov dword [ebp - 0x5bc], 0
mov edx, dword [ebp - 0x248]
or edx, 0x1000
mov dword [ebp - 0x248], edx
lea eax, [ebp - 0x5bc]
mov dword [ebp - 0x15dc], eax
jmp 0x100d13b9
mov ecx, dword [ebp - 0xc10]
mov dword [ebp - 0xc14], ecx
mov edx, dword [ebp - 0xc14]
mov dword [ebp - 0xc20], edx
mov eax, dword [ebp - 0x41c]
add eax, 8
mov dword [ebp - 0xc18], eax
mov ecx, dword [ebp - 0xc18]
mov edx, dword [ecx]
mov eax, dword [ebp - 0x5b0]
lea ecx, [edx + eax*4]
mov dword [ebp - 0xc1c], ecx
mov edx, dword [ebp - 0xc1c]
mov eax, dword [ebp - 0xc20]
mov dword [edx], eax
mov ecx, 0x11
shl ecx, 2
mov edx, dword [ebp - 0x41c]
add ecx, dword [edx + 4]
mov dword [ebp - 0x5b4], ecx
mov eax, dword [ebp - 0x5b4]
cmp dword [eax], 0
je 0x100d130d
mov ecx, dword [ebp - 0x5b4]
mov edx, dword [ecx]
mov dword [ebp - 0xc24], edx
mov eax, dword [ebp - 0xc24]
mov dword [ebp - 0xc28], eax
lea ecx, [ebp - 0xc28]
mov dword [ebp - 0xc2c], ecx
mov edx, dword [ebp - 0xc2c]
mov dword [ebp - 0xc30], edx
mov eax, dword [ebp - 0x248]
or eax, 0x2000
mov dword [ebp - 0x248], eax
mov ecx, dword [ebp - 0xc30]
mov dword [ebp - 0x5b8], ecx
jmp 0x100d134d
mov dword [ebp - 0xc34], 0
lea edx, [ebp - 0xc34]
mov dword [ebp - 0xc38], edx
mov eax, dword [ebp - 0xc38]
mov dword [ebp - 0xc3c], eax
mov ecx, dword [ebp - 0x248]
or ecx, 0x4000
mov dword [ebp - 0x248], ecx
mov edx, dword [ebp - 0xc3c]
mov dword [ebp - 0x5b8], edx
mov eax, dword [ebp - 0x5b8]
mov dword [ebp - 0xc40], eax
mov ecx, dword [ebp - 0xc40]
mov edx, dword [ecx]
mov dword [ebp - 0x5bc], edx
mov eax, dword [ebp - 0x248]
or eax, 0x8000
mov dword [ebp - 0x248], eax
mov ecx, dword [ebp - 0x248]
and ecx, 0x4000
je 0x100d1390
and dword [ebp - 0x248], 0xffffbfff
mov edx, dword [ebp - 0x248]
and edx, 0x2000
je 0x100d13a8
and dword [ebp - 0x248], 0xffffdfff
mov eax, dword [ebp - 0x248]
or eax, 0x1000
mov dword [ebp - 0x248], eax
mov ecx, dword [ebp - 0x250]
add ecx, 0x98
mov dword [ebp - 0x420], ecx
mov dword [ebp - 0xc44], 0x100efb50
mov edx, dword [ebp - 0xc44]
mov dword [ebp - 0xc48], edx
mov eax, dword [ebp - 0x420]
movzx ecx, byte [eax + 0x10]
test ecx, ecx
je 0x100d13ff
mov edx, 0x12
add edx, 1
mov dword [ebp - 0x5c0], edx
jmp 0x100d1409
mov dword [ebp - 0x5c0], 0x12
mov eax, dword [ebp - 0x5c0]
mov dword [ebp - 0x5c4], eax
mov ecx, dword [ebp - 0x420]
cmp dword [ecx + 4], 0
je 0x100d1465
mov edx, dword [ebp - 0x420]
cmp dword [edx + 8], 0
je 0x100d1436
mov byte [ebp - 0x2be], 1
jmp 0x100d143d
mov byte [ebp - 0x2be], 0
mov al, byte [ebp - 0x2be]
mov byte [ebp - 0x2f0], al
movzx ecx, byte [ebp - 0x2f0]
test ecx, ecx
je 0x100d1465
mov edx, dword [ebp - 0x420]
mov eax, dword [ebp - 0x5c4]
cmp eax, dword [edx + 0xc]
jbe 0x100d1492
mov dword [ebp - 0x5d0], 0
mov ecx, dword [ebp - 0x248]
or ecx, 0x10000
mov dword [ebp - 0x248], ecx
lea edx, [ebp - 0x5d0]
mov dword [ebp - 0x15e0], edx
jmp 0x100d15fe
mov eax, dword [ebp - 0xc48]
mov dword [ebp - 0xc4c], eax
mov ecx, dword [ebp - 0xc4c]
mov dword [ebp - 0xc58], ecx
mov edx, dword [ebp - 0x420]
add edx, 8
mov dword [ebp - 0xc50], edx
mov eax, dword [ebp - 0xc50]
mov ecx, dword [eax]
mov edx, dword [ebp - 0x5c4]
lea eax, [ecx + edx*4]
mov dword [ebp - 0xc54], eax
mov ecx, dword [ebp - 0xc54]
mov edx, dword [ebp - 0xc58]
mov dword [ecx], edx
mov eax, 0x12
shl eax, 2
mov ecx, dword [ebp - 0x420]
add eax, dword [ecx + 4]
mov dword [ebp - 0x5c8], eax
mov edx, dword [ebp - 0x5c8]
cmp dword [edx], 0
je 0x100d1552
mov eax, dword [ebp - 0x5c8]
mov ecx, dword [eax]
mov dword [ebp - 0xc5c], ecx
mov edx, dword [ebp - 0xc5c]
mov dword [ebp - 0xc60], edx
lea eax, [ebp - 0xc60]
mov dword [ebp - 0xc64], eax
mov ecx, dword [ebp - 0xc64]
mov dword [ebp - 0xc68], ecx
mov edx, dword [ebp - 0x248]
or edx, 0x20000
mov dword [ebp - 0x248], edx
mov eax, dword [ebp - 0xc68]
mov dword [ebp - 0x5cc], eax
jmp 0x100d1591
mov dword [ebp - 0xc6c], 0
lea ecx, [ebp - 0xc6c]
mov dword [ebp - 0xc70], ecx
mov edx, dword [ebp - 0xc70]
mov dword [ebp - 0xc74], edx
mov eax, dword [ebp - 0x248]
or eax, 0x40000
mov dword [ebp - 0x248], eax
mov ecx, dword [ebp - 0xc74]
mov dword [ebp - 0x5cc], ecx
mov edx, dword [ebp - 0x5cc]
mov dword [ebp - 0xc78], edx
mov eax, dword [ebp - 0xc78]
mov ecx, dword [eax]
mov dword [ebp - 0x5d0], ecx
mov edx, dword [ebp - 0x248]
or edx, 0x80000
mov dword [ebp - 0x248], edx
mov eax, dword [ebp - 0x248]
and eax, 0x40000
je 0x100d15d4
and dword [ebp - 0x248], 0xfffbffff
mov ecx, dword [ebp - 0x248]
and ecx, 0x20000
je 0x100d15ec
and dword [ebp - 0x248], 0xfffdffff
mov edx, dword [ebp - 0x248]
or edx, 0x10000
mov dword [ebp - 0x248], edx
mov eax, dword [ebp - 0x250]
add eax, 0x98
mov dword [ebp - 0x428], eax
mov dword [ebp - 0xc7c], 0x100efc70
mov ecx, dword [ebp - 0xc7c]
mov dword [ebp - 0xc80], ecx
mov edx, dword [ebp - 0x428]
movzx eax, byte [edx + 0x10]
test eax, eax
je 0x100d1643
mov ecx, 0x18
add ecx, 1
mov dword [ebp - 0x5d4], ecx
jmp 0x100d164d
mov dword [ebp - 0x5d4], 0x18
mov edx, dword [ebp - 0x5d4]
mov dword [ebp - 0x5d8], edx
mov eax, dword [ebp - 0x428]
cmp dword [eax + 4], 0
je 0x100d16a9
mov ecx, dword [ebp - 0x428]
cmp dword [ecx + 8], 0
je 0x100d167a
mov byte [ebp - 0x2bf], 1
jmp 0x100d1681
mov byte [ebp - 0x2bf], 0
mov dl, byte [ebp - 0x2bf]
mov byte [ebp - 0x2f1], dl
movzx eax, byte [ebp - 0x2f1]
test eax, eax
je 0x100d16a9
mov ecx, dword [ebp - 0x428]
mov edx, dword [ebp - 0x5d8]
cmp edx, dword [ecx + 0xc]
jbe 0x100d16d5
mov dword [ebp - 0x5e4], 0
mov eax, dword [ebp - 0x248]
or eax, 0x100000
mov dword [ebp - 0x248], eax
lea ecx, [ebp - 0x5e4]
mov dword [ebp - 0x15bc], ecx
jmp 0x100d1842
mov edx, dword [ebp - 0xc80]
mov dword [ebp - 0xc84], edx
mov eax, dword [ebp - 0xc84]
mov dword [ebp - 0xc90], eax
mov ecx, dword [ebp - 0x428]
add ecx, 8
mov dword [ebp - 0xc88], ecx
mov edx, dword [ebp - 0xc88]
mov eax, dword [edx]
mov ecx, dword [ebp - 0x5d8]
lea edx, [eax + ecx*4]
mov dword [ebp - 0xc8c], edx
mov eax, dword [ebp - 0xc8c]
mov ecx, dword [ebp - 0xc90]
mov dword [eax], ecx
mov edx, 0x18
shl edx, 2
mov eax, dword [ebp - 0x428]
add edx, dword [eax + 4]
mov dword [ebp - 0x5dc], edx
mov ecx, dword [ebp - 0x5dc]
cmp dword [ecx], 0
je 0x100d1795
mov edx, dword [ebp - 0x5dc]
mov eax, dword [edx]
mov dword [ebp - 0xc94], eax
mov ecx, dword [ebp - 0xc94]
mov dword [ebp - 0xc98], ecx
lea edx, [ebp - 0xc98]
mov dword [ebp - 0xc9c], edx
mov eax, dword [ebp - 0xc9c]
mov dword [ebp - 0xca0], eax
mov ecx, dword [ebp - 0x248]
or ecx, 0x200000
mov dword [ebp - 0x248], ecx
mov edx, dword [ebp - 0xca0]
mov dword [ebp - 0x5e0], edx
jmp 0x100d17d5
mov dword [ebp - 0xca4], 0
lea eax, [ebp - 0xca4]
mov dword [ebp - 0xca8], eax
mov ecx, dword [ebp - 0xca8]
mov dword [ebp - 0xcac], ecx
mov edx, dword [ebp - 0x248]
or edx, 0x400000
mov dword [ebp - 0x248], edx
mov eax, dword [ebp - 0xcac]
mov dword [ebp - 0x5e0], eax
mov ecx, dword [ebp - 0x5e0]
mov dword [ebp - 0xcb0], ecx
mov edx, dword [ebp - 0xcb0]
mov eax, dword [edx]
mov dword [ebp - 0x5e4], eax
mov ecx, dword [ebp - 0x248]
or ecx, 0x800000
mov dword [ebp - 0x248], ecx
mov edx, dword [ebp - 0x248]
and edx, 0x400000
je 0x100d1819
and dword [ebp - 0x248], 0xffbfffff
mov eax, dword [ebp - 0x248]
and eax, 0x200000
je 0x100d1830
and dword [ebp - 0x248], 0xffdfffff
mov ecx, dword [ebp - 0x248]
or ecx, 0x100000
mov dword [ebp - 0x248], ecx
mov edx, dword [ebp - 0x250]
add edx, 0x98
mov dword [ebp - 0x42c], edx
mov dword [ebp - 0xcb4], 0x100eff70
mov eax, dword [ebp - 0xcb4]
mov dword [ebp - 0xcb8], eax
mov ecx, dword [ebp - 0x42c]
movzx edx, byte [ecx + 0x10]
test edx, edx
je 0x100d1888
mov eax, 0x2c
add eax, 1
mov dword [ebp - 0x5e8], eax
jmp 0x100d1892
mov dword [ebp - 0x5e8], 0x2c
mov ecx, dword [ebp - 0x5e8]
mov dword [ebp - 0x5ec], ecx
mov edx, dword [ebp - 0x42c]
cmp dword [edx + 4], 0
je 0x100d18ee
mov eax, dword [ebp - 0x42c]
cmp dword [eax + 8], 0
je 0x100d18bf
mov byte [ebp - 0x2de], 1
jmp 0x100d18c6
mov byte [ebp - 0x2de], 0
mov cl, byte [ebp - 0x2de]
mov byte [ebp - 0x3a5], cl
movzx edx, byte [ebp - 0x3a5]
test edx, edx
je 0x100d18ee
mov eax, dword [ebp - 0x42c]
mov ecx, dword [ebp - 0x5ec]
cmp ecx, dword [eax + 0xc]
jbe 0x100d191b
mov dword [ebp - 0x5f8], 0
mov edx, dword [ebp - 0x248]
or edx, 0x1000000
mov dword [ebp - 0x248], edx
lea eax, [ebp - 0x5f8]
mov dword [ebp - 0x14e0], eax
jmp 0x100d1a86
mov ecx, dword [ebp - 0xcb8]
mov dword [ebp - 0xcbc], ecx
mov edx, dword [ebp - 0xcbc]
mov dword [ebp - 0xcc8], edx
mov eax, dword [ebp - 0x42c]
add eax, 8
mov dword [ebp - 0xcc0], eax
mov ecx, dword [ebp - 0xcc0]
mov edx, dword [ecx]
mov eax, dword [ebp - 0x5ec]
lea ecx, [edx + eax*4]
mov dword [ebp - 0xcc4], ecx
mov edx, dword [ebp - 0xcc4]
mov eax, dword [ebp - 0xcc8]
mov dword [edx], eax
mov ecx, 0x2c
shl ecx, 2
mov edx, dword [ebp - 0x42c]
add ecx, dword [edx + 4]
mov dword [ebp - 0x5f0], ecx
mov eax, dword [ebp - 0x5f0]
cmp dword [eax], 0
je 0x100d19da
mov ecx, dword [ebp - 0x5f0]
mov edx, dword [ecx]
mov dword [ebp - 0xccc], edx
mov eax, dword [ebp - 0xccc]
mov dword [ebp - 0xcd0], eax
lea ecx, [ebp - 0xcd0]
mov dword [ebp - 0xcd4], ecx
mov edx, dword [ebp - 0xcd4]
mov dword [ebp - 0xcd8], edx
mov eax, dword [ebp - 0x248]
or eax, 0x2000000
mov dword [ebp - 0x248], eax
mov ecx, dword [ebp - 0xcd8]
mov dword [ebp - 0x5f4], ecx
jmp 0x100d1a1a
mov dword [ebp - 0xcdc], 0
lea edx, [ebp - 0xcdc]
mov dword [ebp - 0xce0], edx
mov eax, dword [ebp - 0xce0]
mov dword [ebp - 0xce4], eax
mov ecx, dword [ebp - 0x248]
or ecx, 0x4000000
mov dword [ebp - 0x248], ecx
mov edx, dword [ebp - 0xce4]
mov dword [ebp - 0x5f4], edx
mov eax, dword [ebp - 0x5f4]
mov dword [ebp - 0xce8], eax
mov ecx, dword [ebp - 0xce8]
mov edx, dword [ecx]
mov dword [ebp - 0x5f8], edx
mov eax, dword [ebp - 0x248]
or eax, 0x8000000
mov dword [ebp - 0x248], eax
mov ecx, dword [ebp - 0x248]
and ecx, 0x4000000
je 0x100d1a5d
and dword [ebp - 0x248], 0xfbffffff
mov edx, dword [ebp - 0x248]
and edx, 0x2000000
je 0x100d1a75
and dword [ebp - 0x248], 0xfdffffff
mov eax, dword [ebp - 0x248]
or eax, 0x1000000
mov dword [ebp - 0x248], eax
mov ecx, dword [ebp - 0x250]
add ecx, 0x110
mov dword [ebp - 0x2a4], ecx
mov edx, dword [0x101b5b80]
mov dword [ebp - 0xcec], edx
lea eax, [ebp - 0x430]
mov dword [ebp - 0x5fc], eax
mov ecx, dword [ebp - 0x5fc]
mov edx, dword [ebp - 0xcec]
mov dword [ecx], edx
mov eax, dword [ebp - 0x5fc]
mov dword [ebp - 0xcf0], eax
mov ecx, dword [ebp - 0xcf0]
mov dword [ebp - 0x14e4], ecx
mov dword [ebp - 4], 5
mov edx, dword [ebp - 0x2a4]
mov eax, dword [ebp - 0x430]
mov dword [edx], eax
mov ecx, dword [ebp - 0x430]
mov edx, dword [ecx]
mov dword [ebp - 0xcf4], edx
mov eax, dword [ebp - 0xcf4]
mov ecx, dword [ebp - 0x2a4]
mov dword [ecx + 4], eax
mov edx, dword [ebp - 0x2a4]
cmp dword [edx + 4], 0
jne 0x100d1b20
mov dword [ebp - 4], 0xffffffff
jmp 0x100d1d90
mov dword [ebp - 0x4ac], 0
mov eax, dword [ebp - 0x2a4]
mov ecx, dword [eax + 4]
mov edx, dword [ebp - 0x4ac]
mov eax, dword [ecx + edx*4]
mov dword [ebp - 0xcf8], eax
mov ecx, dword [ebp - 0xcf8]
mov dword [ebp - 0x600], ecx
cmp dword [ebp - 0x600], 0
jne 0x100d1b60
mov byte [ebp - 0x256], 0
jmp 0x100d1bb7
mov edx, dword [0x1014c914]
mov dword [ebp - 0xcfc], edx
push 0x1c
lea eax, [ebp - 0x200]
push eax
mov ecx, dword [ebp - 0x600]
push ecx
call dword [ebp - 0xcfc]
test eax, eax
jne 0x100d1b8f
mov byte [ebp - 0x256], 0
jmp 0x100d1bb7
mov edx, dword [ebp - 0x1ec]
and edx, 1
jne 0x100d1ba7
mov eax, dword [ebp - 0x1ec]
and eax, 0x100
je 0x100d1bb0
mov byte [ebp - 0x256], 0
jmp 0x100d1bb7
mov byte [ebp - 0x256], 1
movzx ecx, byte [ebp - 0x256]
test ecx, ecx
je 0x100d1bd6
mov edx, dword [ebp - 0x4ac]
add edx, 1
mov dword [ebp - 0x4ac], edx
jmp 0x100d1b2a
mov eax, dword [ebp - 0x4ac]
mov dword [ebp - 0xd00], eax
mov ecx, dword [ebp - 0xd00]
mov edx, dword [ebp - 0x2a4]
mov dword [edx + 0xc], ecx
mov eax, dword [ebp - 0x2a4]
cmp dword [eax + 0xc], 0
jne 0x100d1c09
mov dword [ebp - 4], 0xffffffff
jmp 0x100d1d90
mov ecx, 1
test ecx, ecx
je 0x100d1c26
mov edx, dword [ebp - 0x2a4]
mov eax, dword [edx + 0xc]
add eax, 1
mov dword [ebp - 0x604], eax
jmp 0x100d1c35
mov ecx, dword [ebp - 0x2a4]
mov edx, dword [ecx + 0xc]
mov dword [ebp - 0x604], edx
mov eax, dword [ebp - 0x604]
push eax
lea ecx, [ebp - 0xd08]
push ecx
call fcn.10057f90
add esp, 8
mov dword [ebp - 0xd04], eax
mov edx, dword [ebp - 0xd04]
push edx
mov ecx, dword [ebp - 0x2a4]
add ecx, 8
call fcn.10058080
lea ecx, [ebp - 0xd08]
call fcn.10057060
mov eax, dword [ebp - 0x2a4]
cmp dword [eax + 8], 0
je 0x100d1c86
mov byte [ebp - 0x2c0], 1
jmp 0x100d1c8d
mov byte [ebp - 0x2c0], 0
mov cl, byte [ebp - 0x2c0]
mov byte [ebp - 0x3a4], cl
movzx edx, byte [ebp - 0x3a4]
test edx, edx
jne 0x100d1cb0
mov dword [ebp - 4], 0xffffffff
jmp 0x100d1d90
mov eax, dword [ebp - 0x2a4]
mov ecx, dword [eax + 8]
mov dword [ebp - 0xd0c], ecx
mov edx, dword [ebp - 0xd0c]
mov dword [ebp - 0x44], edx
mov eax, 1
test eax, eax
je 0x100d1d44
mov ecx, dword [ebp - 0x44]
mov dword [ebp - 0xd10], ecx
mov edx, dword [ebp - 0x2a4]
mov eax, dword [edx + 0xc]
lea ecx, [eax*4 + 4]
push ecx
mov edx, dword [ebp - 0x2a4]
mov eax, dword [edx + 4]
sub eax, 4
push eax
mov ecx, dword [ebp - 0xd10]
push ecx
call sub.VCRUNTIME140.dll_memcpy
add esp, 0xc
mov edx, dword [ebp - 0x44]
mov dword [ebp - 0xd14], edx
mov eax, dword [ebp - 0xd14]
add eax, 4
mov dword [ebp - 0xd18], eax
cmp dword [ebp - 0x430], 0
jne 0x100d1d2a
jmp 0x100d1d38
mov ecx, dword [ebp - 0x430]
mov edx, dword [ebp - 0xd18]
mov dword [ecx], edx
mov eax, dword [ebp - 0x2a4]
mov byte [eax + 0x10], 1
jmp 0x100d1d89
mov ecx, dword [ebp - 0x44]
mov dword [ebp - 0xd1c], ecx
mov edx, dword [ebp - 0x2a4]
mov eax, dword [edx + 0xc]
shl eax, 2
push eax
mov ecx, dword [ebp - 0x2a4]
mov edx, dword [ecx + 4]
push edx
mov eax, dword [ebp - 0xd1c]
push eax
call sub.VCRUNTIME140.dll_memcpy
add esp, 0xc
cmp dword [ebp - 0x430], 0
jne 0x100d1d7e
jmp 0x100d1d89
mov ecx, dword [ebp - 0x44]
mov edx, dword [ebp - 0x430]
mov dword [edx], ecx
mov dword [ebp - 4], 0xffffffff
mov eax, dword [ebp - 0x250]
add eax, 0x110
mov dword [ebp - 0x434], eax
mov dword [ebp - 0xd20], 0x100e8260
mov ecx, dword [ebp - 0xd20]
mov dword [ebp - 0xd24], ecx
mov edx, dword [ebp - 0x434]
movzx eax, byte [edx + 0x10]
test eax, eax
je 0x100d1dd5
mov ecx, 0x43
add ecx, 1
mov dword [ebp - 0x608], ecx
jmp 0x100d1ddf
mov dword [ebp - 0x608], 0x43
mov edx, dword [ebp - 0x608]
mov dword [ebp - 0x60c], edx
mov eax, dword [ebp - 0x434]
cmp dword [eax + 4], 0
je 0x100d1e3b
mov ecx, dword [ebp - 0x434]
cmp dword [ecx + 8], 0
je 0x100d1e0c
mov byte [ebp - 0x2c1], 1
jmp 0x100d1e13
mov byte [ebp - 0x2c1], 0
mov dl, byte [ebp - 0x2c1]
mov byte [ebp - 0x3a3], dl
movzx eax, byte [ebp - 0x3a3]
test eax, eax
je 0x100d1e3b
mov ecx, dword [ebp - 0x434]
mov edx, dword [ebp - 0x60c]
cmp edx, dword [ecx + 0xc]
jbe 0x100d1e67
mov dword [ebp - 0x618], 0
mov eax, dword [ebp - 0x248]
or eax, 0x10000000
mov dword [ebp - 0x248], eax
lea ecx, [ebp - 0x618]
mov dword [ebp - 0x14e8], ecx
jmp 0x100d1fd4
mov edx, dword [ebp - 0xd24]
mov dword [ebp - 0xd28], edx
mov eax, dword [ebp - 0xd28]
mov dword [ebp - 0xd34], eax
mov ecx, dword [ebp - 0x434]
add ecx, 8
mov dword [ebp - 0xd2c], ecx
mov edx, dword [ebp - 0xd2c]
mov eax, dword [edx]
mov ecx, dword [ebp - 0x60c]
lea edx, [eax + ecx*4]
mov dword [ebp - 0xd30], edx
mov eax, dword [ebp - 0xd30]
mov ecx, dword [ebp - 0xd34]
mov dword [eax], ecx
mov edx, 0x43
shl edx, 2
mov eax, dword [ebp - 0x434]
add edx, dword [eax + 4]
mov dword [ebp - 0x610], edx
mov ecx, dword [ebp - 0x610]
cmp dword [ecx], 0
je 0x100d1f27
mov edx, dword [ebp - 0x610]
mov eax, dword [edx]
mov dword [ebp - 0xd38], eax
mov ecx, dword [ebp - 0xd38]
mov dword [ebp - 0xd3c], ecx
lea edx, [ebp - 0xd3c]
mov dword [ebp - 0xd40], edx
mov eax, dword [ebp - 0xd40]
mov dword [ebp - 0xd44], eax
mov ecx, dword [ebp - 0x248]
or ecx, 0x20000000
mov dword [ebp - 0x248], ecx
mov edx, dword [ebp - 0xd44]
mov dword [ebp - 0x614], edx
jmp 0x100d1f67
mov dword [ebp - 0xd48], 0
lea eax, [ebp - 0xd48]
mov dword [ebp - 0xd4c], eax
mov ecx, dword [ebp - 0xd4c]
mov dword [ebp - 0xd50], ecx
mov edx, dword [ebp - 0x248]
or edx, 0x40000000
mov dword [ebp - 0x248], edx
mov eax, dword [ebp - 0xd50]
mov dword [ebp - 0x614], eax
mov ecx, dword [ebp - 0x614]
mov dword [ebp - 0xd54], ecx
mov edx, dword [ebp - 0xd54]
mov eax, dword [edx]
mov dword [ebp - 0x618], eax
mov ecx, dword [ebp - 0x248]
or ecx, 0x80000000
mov dword [ebp - 0x248], ecx
mov edx, dword [ebp - 0x248]
and edx, 0x40000000
je 0x100d1fab
and dword [ebp - 0x248], 0xbfffffff
mov eax, dword [ebp - 0x248]
and eax, 0x20000000
je 0x100d1fc2
and dword [ebp - 0x248], 0xdfffffff
mov ecx, dword [ebp - 0x248]
or ecx, 0x10000000
mov dword [ebp - 0x248], ecx
mov edx, dword [ebp - 0x250]
add edx, 0x110
mov dword [ebp - 0x438], edx
mov dword [ebp - 0xd58], 0x100e83e0
mov eax, dword [ebp - 0xd58]
mov dword [ebp - 0xd5c], eax
mov ecx, dword [ebp - 0x438]
movzx edx, byte [ecx + 0x10]
test edx, edx
je 0x100d201a
mov eax, 0x52
add eax, 1
mov dword [ebp - 0x61c], eax
jmp 0x100d2024
mov dword [ebp - 0x61c], 0x52
mov ecx, dword [ebp - 0x61c]
mov dword [ebp - 0x620], ecx
mov edx, dword [ebp - 0x438]
cmp dword [edx + 4], 0
je 0x100d2080
mov eax, dword [ebp - 0x438]
cmp dword [eax + 8], 0
je 0x100d2051
mov byte [ebp - 0x2c2], 1
jmp 0x100d2058
mov byte [ebp - 0x2c2], 0
mov cl, byte [ebp - 0x2c2]
mov byte [ebp - 0x3a2], cl
movzx edx, byte [ebp - 0x3a2]
test edx, edx
je 0x100d2080
mov eax, dword [ebp - 0x438]
mov ecx, dword [ebp - 0x620]
cmp ecx, dword [eax + 0xc]
jbe 0x100d20aa
mov dword [ebp - 0x62c], 0
mov edx, dword [ebp - 0x24c]
or edx, 1
mov dword [ebp - 0x24c], edx
lea eax, [ebp - 0x62c]
mov dword [ebp - 0x14ec], eax
jmp 0x100d2200
mov ecx, dword [ebp - 0xd5c]
mov dword [ebp - 0xd60], ecx
mov edx, dword [ebp - 0xd60]
mov dword [ebp - 0xd6c], edx
mov eax, dword [ebp - 0x438]
add eax, 8
mov dword [ebp - 0xd64], eax
mov ecx, dword [ebp - 0xd64]
mov edx, dword [ecx]
mov eax, dword [ebp - 0x620]
lea ecx, [edx + eax*4]
mov dword [ebp - 0xd68], ecx
mov edx, dword [ebp - 0xd68]
mov eax, dword [ebp - 0xd6c]
mov dword [edx], eax
mov ecx, 0x52
shl ecx, 2
mov edx, dword [ebp - 0x438]
add ecx, dword [edx + 4]
mov dword [ebp - 0x624], ecx
mov eax, dword [ebp - 0x624]
cmp dword [eax], 0
je 0x100d2167
mov ecx, dword [ebp - 0x624]
mov edx, dword [ecx]
mov dword [ebp - 0xd70], edx
mov eax, dword [ebp - 0xd70]
mov dword [ebp - 0xd74], eax
lea ecx, [ebp - 0xd74]
mov dword [ebp - 0xd78], ecx
mov edx, dword [ebp - 0xd78]
mov dword [ebp - 0xd7c], edx
mov eax, dword [ebp - 0x24c]
or eax, 2
mov dword [ebp - 0x24c], eax
mov ecx, dword [ebp - 0xd7c]
mov dword [ebp - 0x628], ecx
jmp 0x100d21a4
mov dword [ebp - 0xd80], 0
lea edx, [ebp - 0xd80]
mov dword [ebp - 0xd84], edx
mov eax, dword [ebp - 0xd84]
mov dword [ebp - 0xd88], eax
mov ecx, dword [ebp - 0x24c]
or ecx, 4
mov dword [ebp - 0x24c], ecx
mov edx, dword [ebp - 0xd88]
mov dword [ebp - 0x628], edx
mov eax, dword [ebp - 0x628]
mov dword [ebp - 0xd8c], eax
mov ecx, dword [ebp - 0xd8c]
mov edx, dword [ecx]
mov dword [ebp - 0x62c], edx
mov eax, dword [ebp - 0x24c]
or eax, 8
mov dword [ebp - 0x24c], eax
mov ecx, dword [ebp - 0x24c]
and ecx, 4
je 0x100d21df
and dword [ebp - 0x24c], 0xfffffffb
mov edx, dword [ebp - 0x24c]
and edx, 2
je 0x100d21f1
and dword [ebp - 0x24c], 0xfffffffd
mov eax, dword [ebp - 0x24c]
or eax, 1
mov dword [ebp - 0x24c], eax
mov ecx, dword [ebp - 0x250]
add ecx, 0x110
mov dword [ebp - 0x43c], ecx
mov dword [ebp - 0xd90], 0x100e8440
mov edx, dword [ebp - 0xd90]
mov dword [ebp - 0xd94], edx
mov eax, dword [ebp - 0x43c]
movzx ecx, byte [eax + 0x10]
test ecx, ecx
je 0x100d2246
mov edx, 0x74
add edx, 1
mov dword [ebp - 0x630], edx
jmp 0x100d2250
mov dword [ebp - 0x630], 0x74
mov eax, dword [ebp - 0x630]
mov dword [ebp - 0x634], eax
mov ecx, dword [ebp - 0x43c]
cmp dword [ecx + 4], 0
je 0x100d22ac
mov edx, dword [ebp - 0x43c]
cmp dword [edx + 8], 0
je 0x100d227d
mov byte [ebp - 0x2c3], 1
jmp 0x100d2284
mov byte [ebp - 0x2c3], 0
mov al, byte [ebp - 0x2c3]
mov byte [ebp - 0x3a1], al
movzx ecx, byte [ebp - 0x3a1]
test ecx, ecx
je 0x100d22ac
mov edx, dword [ebp - 0x43c]
mov eax, dword [ebp - 0x634]
cmp eax, dword [edx + 0xc]
jbe 0x100d22d6
mov dword [ebp - 0x640], 0
mov ecx, dword [ebp - 0x24c]
or ecx, 0x10
mov dword [ebp - 0x24c], ecx
lea edx, [ebp - 0x640]
mov dword [ebp - 0x14f0], edx
jmp 0x100d242f
mov eax, dword [ebp - 0xd94]
mov dword [ebp - 0xd98], eax
mov ecx, dword [ebp - 0xd98]
mov dword [ebp - 0xda4], ecx
mov edx, dword [ebp - 0x43c]
add edx, 8
mov dword [ebp - 0xd9c], edx
mov eax, dword [ebp - 0xd9c]
mov ecx, dword [eax]
mov edx, dword [ebp - 0x634]
lea eax, [ecx + edx*4]
mov dword [ebp - 0xda0], eax
mov ecx, dword [ebp - 0xda0]
mov edx, dword [ebp - 0xda4]
mov dword [ecx], edx
mov eax, 0x74
shl eax, 2
mov ecx, dword [ebp - 0x43c]
add eax, dword [ecx + 4]
mov dword [ebp - 0x638], eax
mov edx, dword [ebp - 0x638]
cmp dword [edx], 0
je 0x100d2393
mov eax, dword [ebp - 0x250]
add eax, 0x160
mov dword [ebp - 0x2a0], eax
mov ecx, dword [0x101b5ba0]
mov dword [ebp - 0xdc8], ecx
lea edx, [ebp - 0x440]
mov dword [ebp - 0x644], edx
mov eax, dword [ebp - 0x644]
mov ecx, dword [ebp - 0xdc8]
mov dword [eax], ecx
mov edx, dword [ebp - 0x644]
mov dword [ebp - 0xdcc], edx
mov eax, dword [ebp - 0xdcc]
mov dword [ebp - 0x14f4], eax
mov dword [ebp - 4], 6
mov ecx, dword [ebp - 0x2a0]
mov edx, dword [ebp - 0x440]
mov dword [ecx], edx
mov eax, dword [ebp - 0x440]
mov ecx, dword [eax]
mov dword [ebp - 0xdd0], ecx
mov edx, dword [ebp - 0xdd0]
mov eax, dword [ebp - 0x2a0]
mov dword [eax + 4], edx
mov ecx, dword [ebp - 0x2a0]
cmp dword [ecx + 4], 0
jne 0x100d24c8
mov dword [ebp - 4], 0xffffffff
jmp 0x100d2739
mov dword [ebp - 0x4bc], 0
mov edx, dword [ebp - 0x2a0]
mov eax, dword [edx + 4]
mov ecx, dword [ebp - 0x4bc]
mov edx, dword [eax + ecx*4]
mov dword [ebp - 0xdd4], edx
mov eax, dword [ebp - 0xdd4]
mov dword [ebp - 0x648], eax
cmp dword [ebp - 0x648], 0
jne 0x100d2508
mov byte [ebp - 0x257], 0
jmp 0x100d2560
mov ecx, dword [0x1014c914]
mov dword [ebp - 0xdd8], ecx
push 0x1c
lea edx, [ebp - 0x1e4]
push edx
mov eax, dword [ebp - 0x648]
push eax
call dword [ebp - 0xdd8]
test eax, eax
jne 0x100d2537
mov edx, dword [ebp - 0x250]
add edx, 0x160
mov dword [ebp - 0x444], edx
mov dword [ebp - 0xdfc], 0x100c0d30
mov eax, dword [ebp - 0xdfc]
mov dword [ebp - 0xe00], eax
mov ecx, dword [ebp - 0x444]
movzx edx, byte [ecx + 0x10]
test edx, edx
je 0x100d277f