Function at 0x10088e60
Capabilities:
Inspect section memory permissions

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x100c3bef
mov eax, dword fs:[0]
push eax
sub esp, 0xebc
mov eax, dword [0x100da040]
xor eax, ebp
mov dword [ebp - 0x10], eax
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov dword [ebp - 0x20c], ecx
mov dword [ebp - 0x204], 0
mov dword [ebp - 0x1fc], 0
mov dword [ebp - 0x200], 0
mov dword [ebp - 0x208], 0
mov eax, dword [0x100f52d8]
mov dword [ebp - 0xcfc], eax
mov dword [ebp - 0xad0], 0x100b9620
mov ecx, dword [ebp - 0xad0]
mov dword [ebp - 0xce4], ecx
mov edx, dword [0x101645bc]
mov eax, dword [edx + 8]
mov dword [ebp - 0xcec], eax
mov ecx, dword [ebp - 0xce4]
push ecx
push 0xfffffffffffffffc
mov edx, dword [ebp - 0xcec]
push edx
call dword [ebp - 0xcfc]
mov ecx, dword [ebp - 0x20c]
mov dword [ecx + 0x67c], eax
mov edx, dword [ebp - 0x20c]
mov dword [ebp - 0x234], edx
mov eax, dword [0x10164554]
mov dword [ebp - 0xd04], eax
lea ecx, [ebp - 0x268]
mov dword [ebp - 0x500], ecx
mov edx, dword [ebp - 0x500]
mov eax, dword [ebp - 0xd04]
mov dword [edx], eax
mov ecx, dword [ebp - 0x500]
mov dword [ebp - 0xd90], ecx
mov dword [ebp - 4], 0
mov edx, dword [ebp - 0x234]
mov eax, dword [ebp - 0x268]
mov dword [edx], eax
mov ecx, dword [ebp - 0x268]
mov edx, dword [ecx]
mov dword [ebp - 0xd3c], edx
mov eax, dword [ebp - 0x234]
mov ecx, dword [ebp - 0xd3c]
mov dword [eax + 4], ecx
mov edx, dword [ebp - 0x234]
cmp dword [edx + 4], 0
jne 0x10088f92
mov dword [ebp - 4], 0xffffffff
jmp 0x100891cd
mov dword [ebp - 0x318], 0
mov eax, dword [ebp - 0x234]
mov ecx, dword [eax + 4]
mov edx, dword [ebp - 0x318]
mov eax, dword [ecx + edx*4]
mov dword [ebp - 0x5f4], eax
cmp dword [ebp - 0x5f4], 0
jne 0x10088fc6
mov byte [ebp - 0x21a], 0
jmp 0x1008901e
mov ecx, dword [0x100f52d4]
mov dword [ebp - 0xd40], ecx
push 0x1c
lea edx, [ebp - 0x170]
push edx
mov eax, dword [ebp - 0x5f4]
push eax
call dword [ebp - 0xd40]
test eax, eax
jne 0x10088ff5
mov byte [ebp - 0x21a], 0
jmp 0x1008901e
mov ecx, dword [ebp - 0x15c]
and ecx, 1
jne 0x1008900e
mov edx, dword [ebp - 0x15c]
and edx, 0x100
je 0x10089017
mov byte [ebp - 0x21a], 0
jmp 0x1008901e
mov byte [ebp - 0x21a], 1
movzx eax, byte [ebp - 0x21a]
test eax, eax
je 0x1008903d
mov ecx, dword [ebp - 0x318]
add ecx, 1
mov dword [ebp - 0x318], ecx
jmp 0x10088f9c
mov edx, dword [ebp - 0x234]
mov eax, dword [ebp - 0x318]
mov dword [edx + 0xc], eax
mov ecx, dword [ebp - 0x234]
cmp dword [ecx + 0xc], 0
jne 0x10089064
mov dword [ebp - 4], 0xffffffff
jmp 0x100891cd
mov edx, 1
test edx, edx
je 0x10089081
mov eax, dword [ebp - 0x234]
mov ecx, dword [eax + 0xc]
add ecx, 1
mov dword [ebp - 0x5f8], ecx
jmp 0x10089090
mov edx, dword [ebp - 0x234]
mov eax, dword [edx + 0xc]
mov dword [ebp - 0x5f8], eax
mov edx, dword [ebp - 0x5f8]
lea ecx, [ebp - 0xd48]
call fcn.1003a1e0
mov dword [ebp - 0xd44], eax
mov ecx, dword [ebp - 0xd44]
push ecx
mov ecx, dword [ebp - 0x234]
add ecx, 8
call fcn.1003a280
lea ecx, [ebp - 0xd48]
call fcn.10039c40
mov ecx, dword [ebp - 0x234]
add ecx, 8
call fcn.10039c20
movzx edx, al
test edx, edx
jne 0x100890e8
mov dword [ebp - 4], 0xffffffff
jmp 0x100891cd
mov ecx, dword [ebp - 0x234]
add ecx, 8
call fcn.1002aa60
mov dword [ebp - 0xd4c], eax
mov eax, dword [ebp - 0xd4c]
mov dword [ebp - 0x14], eax
mov ecx, 1
test ecx, ecx
je 0x10089181
mov edx, dword [ebp - 0x14]
mov dword [ebp - 0xd50], edx
mov eax, dword [ebp - 0x234]
mov ecx, dword [eax + 0xc]
lea edx, [ecx*4 + 4]
push edx
mov eax, dword [ebp - 0x234]
mov ecx, dword [eax + 4]
sub ecx, 4
push ecx
mov edx, dword [ebp - 0xd50]
push edx
call sub.VCRUNTIME140.dll_memcpy
add esp, 0xc
mov eax, dword [ebp - 0x14]
mov dword [ebp - 0xd54], eax
mov ecx, dword [ebp - 0xd54]
add ecx, 4
mov dword [ebp - 0xd58], ecx
cmp dword [ebp - 0x268], 0
jne 0x10089167
jmp 0x10089175
mov edx, dword [ebp - 0x268]
mov eax, dword [ebp - 0xd58]
mov dword [edx], eax
mov ecx, dword [ebp - 0x234]
mov byte [ecx + 0x10], 1
jmp 0x100891c6
mov edx, dword [ebp - 0x14]
mov dword [ebp - 0xd5c], edx
mov eax, dword [ebp - 0x234]
mov ecx, dword [eax + 0xc]
shl ecx, 2
push ecx
mov edx, dword [ebp - 0x234]
mov eax, dword [edx + 4]
push eax
mov ecx, dword [ebp - 0xd5c]
push ecx
call sub.VCRUNTIME140.dll_memcpy
add esp, 0xc
cmp dword [ebp - 0x268], 0
jne 0x100891bb
jmp 0x100891c6
mov edx, dword [ebp - 0x14]
mov eax, dword [ebp - 0x268]
mov dword [eax], edx
mov dword [ebp - 4], 0xffffffff
mov ecx, dword [ebp - 0x20c]
mov dword [ebp - 0x26c], ecx
mov dword [ebp - 0xd60], 0x100a01c0
mov edx, dword [ebp - 0x26c]
movzx eax, byte [edx + 0x10]
test eax, eax
je 0x10089201
mov ecx, 0x29
add ecx, 1
mov dword [ebp - 0x5fc], ecx
jmp 0x1008920b
mov dword [ebp - 0x5fc], 0x29
mov edx, dword [ebp - 0x5fc]
mov dword [ebp - 0x600], edx
mov eax, dword [ebp - 0x26c]
cmp dword [eax + 4], 0
je 0x10089249
mov ecx, dword [ebp - 0x26c]
add ecx, 8
call fcn.10039c20
movzx ecx, al
test ecx, ecx
je 0x10089249
mov edx, dword [ebp - 0x26c]
mov eax, dword [ebp - 0x600]
cmp eax, dword [edx + 0xc]
jbe 0x10089273
mov dword [ebp - 0x368], 0
mov ecx, dword [ebp - 0x204]
or ecx, 1
mov dword [ebp - 0x204], ecx
lea edx, [ebp - 0x368]
mov dword [ebp - 0x654], edx
jmp 0x100893b2
mov eax, dword [ebp - 0xd60]
mov dword [ebp - 0xd64], eax
mov ecx, dword [ebp - 0xd64]
mov dword [ebp - 0xd6c], ecx
mov edx, dword [ebp - 0x26c]
add edx, 8
mov dword [ebp - 0xd68], edx
mov eax, dword [ebp - 0x600]
push eax
mov ecx, dword [ebp - 0xd68]
call fcn.10039c30
mov ecx, dword [ebp - 0xd6c]
mov dword [eax], ecx
mov edx, 0x29
shl edx, 2
mov eax, dword [ebp - 0x26c]
add edx, dword [eax + 4]
mov dword [ebp - 0x604], edx
mov ecx, dword [ebp - 0x604]
cmp dword [ecx], 0
je 0x10089319
mov edx, dword [ebp - 0x604]
mov eax, dword [edx]
mov dword [ebp - 0xd70], eax
mov ecx, dword [ebp - 0xd70]
mov dword [ebp - 0xd74], ecx
lea edx, [ebp - 0xd74]
mov dword [ebp - 0x644], edx
mov eax, dword [ebp - 0x204]
or eax, 2
mov dword [ebp - 0x204], eax
mov ecx, dword [ebp - 0x644]
mov dword [ebp - 0x608], ecx
jmp 0x1008934a
mov dword [ebp - 0x648], 0
lea edx, [ebp - 0x648]
mov dword [ebp - 0x64c], edx
mov eax, dword [ebp - 0x204]
or eax, 4
mov dword [ebp - 0x204], eax
mov ecx, dword [ebp - 0x64c]
mov dword [ebp - 0x608], ecx
mov edx, dword [ebp - 0x608]
mov dword [ebp - 0x650], edx
mov eax, dword [ebp - 0x650]
mov ecx, dword [eax]
mov dword [ebp - 0x368], ecx
mov edx, dword [ebp - 0x204]
or edx, 8
mov dword [ebp - 0x204], edx
mov eax, dword [ebp - 0x204]
and eax, 4
je 0x10089385
and dword [ebp - 0x204], 0xfffffffb
mov ecx, dword [ebp - 0x204]
and ecx, 2
je 0x10089397
and dword [ebp - 0x204], 0xfffffffd
mov edx, dword [ebp - 0x204]
or edx, 1
mov dword [ebp - 0x204], edx
lea eax, [ebp - 0x368]
mov dword [ebp - 0x654], eax
mov ecx, dword [ebp - 0x20c]
add ecx, 0x28
mov dword [ebp - 0x238], ecx
mov edx, dword [0x1016453c]
mov dword [ebp - 0x658], edx
lea eax, [ebp - 0x28c]
mov dword [ebp - 0x60c], eax
mov ecx, dword [ebp - 0x60c]
mov edx, dword [ebp - 0x658]
mov dword [ecx], edx
mov eax, dword [ebp - 0x60c]
mov dword [ebp - 0xd94], eax
mov dword [ebp - 4], 1
mov ecx, dword [ebp - 0x238]
mov edx, dword [ebp - 0x28c]
mov dword [ecx], edx
mov eax, dword [ebp - 0x28c]
mov ecx, dword [eax]
mov dword [ebp - 0x65c], ecx
mov edx, dword [ebp - 0x238]
mov eax, dword [ebp - 0x65c]
mov dword [edx + 4], eax
mov ecx, dword [ebp - 0x238]
cmp dword [ecx + 4], 0
jne 0x1008943d
mov dword [ebp - 4], 0xffffffff
jmp 0x10089677
mov dword [ebp - 0x31c], 0
mov edx, dword [ebp - 0x238]
mov eax, dword [edx + 4]
mov ecx, dword [ebp - 0x31c]
mov edx, dword [eax + ecx*4]
mov dword [ebp - 0x610], edx
cmp dword [ebp - 0x610], 0
jne 0x10089471
mov byte [ebp - 0x20d], 0
jmp 0x100894c8
mov eax, dword [0x100f52d4]
mov dword [ebp - 0x660], eax
push 0x1c
lea ecx, [ebp - 0x154]
push ecx
mov edx, dword [ebp - 0x610]
push edx
call dword [ebp - 0x660]
test eax, eax
jne 0x1008949f
mov byte [ebp - 0x20d], 0
jmp 0x100894c8
mov eax, dword [ebp - 0x140]
and eax, 1
jne 0x100894b8
mov ecx, dword [ebp - 0x140]
and ecx, 0x100
je 0x100894c1
mov byte [ebp - 0x20d], 0
jmp 0x100894c8
mov byte [ebp - 0x20d], 1
movzx edx, byte [ebp - 0x20d]
test edx, edx
je 0x100894e7
mov eax, dword [ebp - 0x31c]
add eax, 1
mov dword [ebp - 0x31c], eax
jmp 0x10089447
mov ecx, dword [ebp - 0x238]
mov edx, dword [ebp - 0x31c]
mov dword [ecx + 0xc], edx
mov eax, dword [ebp - 0x238]
cmp dword [eax + 0xc], 0
jne 0x1008950e
mov dword [ebp - 4], 0xffffffff
jmp 0x10089677
mov ecx, 1
test ecx, ecx
je 0x1008952b
mov edx, dword [ebp - 0x238]
mov eax, dword [edx + 0xc]
add eax, 1
mov dword [ebp - 0x614], eax
jmp 0x1008953a
mov ecx, dword [ebp - 0x238]
mov edx, dword [ecx + 0xc]
mov dword [ebp - 0x614], edx
mov edx, dword [ebp - 0x614]
lea ecx, [ebp - 0x668]
call fcn.1003a1e0
mov dword [ebp - 0x664], eax
mov eax, dword [ebp - 0x664]
push eax
mov ecx, dword [ebp - 0x238]
add ecx, 8
call fcn.1003a280
lea ecx, [ebp - 0x668]
call fcn.10039c40
mov ecx, dword [ebp - 0x238]
add ecx, 8
call fcn.10039c20
movzx ecx, al
test ecx, ecx
jne 0x10089592
mov dword [ebp - 4], 0xffffffff
jmp 0x10089677
mov ecx, dword [ebp - 0x238]
add ecx, 8
call fcn.1002aa60
mov dword [ebp - 0x66c], eax
mov edx, dword [ebp - 0x66c]
mov dword [ebp - 0x40], edx
mov eax, 1
test eax, eax
je 0x1008962b
mov ecx, dword [ebp - 0x40]
mov dword [ebp - 0x670], ecx
mov edx, dword [ebp - 0x238]
mov eax, dword [edx + 0xc]
lea ecx, [eax*4 + 4]
push ecx
mov edx, dword [ebp - 0x238]
mov eax, dword [edx + 4]
sub eax, 4
push eax
mov ecx, dword [ebp - 0x670]
push ecx
call sub.VCRUNTIME140.dll_memcpy
add esp, 0xc
mov edx, dword [ebp - 0x40]
mov dword [ebp - 0x674], edx
mov eax, dword [ebp - 0x674]
add eax, 4
mov dword [ebp - 0x678], eax
cmp dword [ebp - 0x28c], 0
jne 0x10089611
jmp 0x1008961f
mov ecx, dword [ebp - 0x28c]
mov edx, dword [ebp - 0x678]
mov dword [ecx], edx
mov eax, dword [ebp - 0x238]
mov byte [eax + 0x10], 1
jmp 0x10089670
mov ecx, dword [ebp - 0x40]
mov dword [ebp - 0x67c], ecx
mov edx, dword [ebp - 0x238]
mov eax, dword [edx + 0xc]
shl eax, 2
push eax
mov ecx, dword [ebp - 0x238]
mov edx, dword [ecx + 4]
push edx
mov eax, dword [ebp - 0x67c]
push eax
call sub.VCRUNTIME140.dll_memcpy
add esp, 0xc
cmp dword [ebp - 0x28c], 0
jne 0x10089665
jmp 0x10089670
mov ecx, dword [ebp - 0x40]
mov edx, dword [ebp - 0x28c]
mov dword [edx], ecx
mov dword [ebp - 4], 0xffffffff
mov eax, dword [ebp - 0x20c]
add eax, 0x28
mov dword [ebp - 0x274], eax
mov dword [ebp - 0x680], 0x100948f0
mov ecx, dword [ebp - 0x274]
movzx edx, byte [ecx + 0x10]
test edx, edx
je 0x100896ae
mov eax, 5
add eax, 1
mov dword [ebp - 0x618], eax
jmp 0x100896b8
mov dword [ebp - 0x618], 5
mov ecx, dword [ebp - 0x618]
mov dword [ebp - 0x61c], ecx
mov edx, dword [ebp - 0x274]
cmp dword [edx + 4], 0
je 0x100896f6
mov ecx, dword [ebp - 0x274]
add ecx, 8
call fcn.10039c20
movzx eax, al
test eax, eax
je 0x100896f6
mov ecx, dword [ebp - 0x274]
mov edx, dword [ebp - 0x61c]
cmp edx, dword [ecx + 0xc]
jbe 0x10089720
mov dword [ebp - 0x36c], 0
mov eax, dword [ebp - 0x204]
or eax, 0x10
mov dword [ebp - 0x204], eax
lea ecx, [ebp - 0x36c]
mov dword [ebp - 0x6a8], ecx
jmp 0x10089862
mov edx, dword [ebp - 0x680]
mov dword [ebp - 0x684], edx
mov eax, dword [ebp - 0x684]
mov dword [ebp - 0x68c], eax
mov ecx, dword [ebp - 0x274]
add ecx, 8
mov dword [ebp - 0x688], ecx
mov edx, dword [ebp - 0x61c]
push edx
mov ecx, dword [ebp - 0x688]
call fcn.10039c30
mov ecx, dword [ebp - 0x68c]
mov dword [eax], ecx
mov edx, 5
shl edx, 2
mov eax, dword [ebp - 0x274]
add edx, dword [eax + 4]
mov dword [ebp - 0x620], edx
mov ecx, dword [ebp - 0x620]
cmp dword [ecx], 0
je 0x100897c6
mov edx, dword [ebp - 0x620]
mov eax, dword [edx]
mov dword [ebp - 0x690], eax
mov ecx, dword [ebp - 0x690]
mov dword [ebp - 0x694], ecx
lea edx, [ebp - 0x694]
mov dword [ebp - 0x698], edx
mov eax, dword [ebp - 0x204]
or eax, 0x20
mov dword [ebp - 0x204], eax
mov ecx, dword [ebp - 0x698]
mov dword [ebp - 0x624], ecx
jmp 0x100897f7
mov dword [ebp - 0x69c], 0
lea edx, [ebp - 0x69c]
mov dword [ebp - 0x6a0], edx
mov eax, dword [ebp - 0x204]
or eax, 0x40
mov dword [ebp - 0x204], eax
mov ecx, dword [ebp - 0x6a0]
mov dword [ebp - 0x624], ecx
mov edx, dword [ebp - 0x624]
mov dword [ebp - 0x6a4], edx
mov eax, dword [ebp - 0x6a4]
mov ecx, dword [eax]
mov dword [ebp - 0x36c], ecx
mov edx, dword [ebp - 0x204]
or edx, 0x80
mov dword [ebp - 0x204], edx
mov eax, dword [ebp - 0x204]
and eax, 0x40
je 0x10089835
and dword [ebp - 0x204], 0xffffffbf
mov ecx, dword [ebp - 0x204]
and ecx, 0x20
je 0x10089847
and dword [ebp - 0x204], 0xffffffdf
mov edx, dword [ebp - 0x204]
or edx, 0x10
mov dword [ebp - 0x204], edx
lea eax, [ebp - 0x36c]
mov dword [ebp - 0x6a8], eax
mov ecx, dword [ebp - 0x20c]
add ecx, 0x28
mov dword [ebp - 0x278], ecx
mov dword [ebp - 0x6ac], 0x100949b0
mov edx, dword [ebp - 0x278]
movzx eax, byte [edx + 0x10]
test eax, eax
je 0x10089899
mov ecx, 6
add ecx, 1
mov dword [ebp - 0x628], ecx
jmp 0x100898a3
mov dword [ebp - 0x628], 6
mov edx, dword [ebp - 0x628]
mov dword [ebp - 0x62c], edx
mov eax, dword [ebp - 0x278]
cmp dword [eax + 4], 0
je 0x100898e1
mov ecx, dword [ebp - 0x278]
add ecx, 8
call fcn.10039c20
movzx ecx, al
test ecx, ecx
je 0x100898e1
mov edx, dword [ebp - 0x278]
mov eax, dword [ebp - 0x62c]
cmp eax, dword [edx + 0xc]
jbe 0x1008990e
mov dword [ebp - 0x374], 0
mov ecx, dword [ebp - 0x204]
or ecx, 0x100
mov dword [ebp - 0x204], ecx
lea edx, [ebp - 0x374]
mov dword [ebp - 0x6d4], edx
jmp 0x10089a62
mov eax, dword [ebp - 0x6ac]
mov dword [ebp - 0x6b0], eax
mov ecx, dword [ebp - 0x6b0]
mov dword [ebp - 0x6b8], ecx
mov edx, dword [ebp - 0x278]
add edx, 8
mov dword [ebp - 0x6b4], edx
mov eax, dword [ebp - 0x62c]
push eax
mov ecx, dword [ebp - 0x6b4]
call fcn.10039c30
mov ecx, dword [ebp - 0x6b8]
mov dword [eax], ecx
mov edx, 6
shl edx, 2
mov eax, dword [ebp - 0x278]
add edx, dword [eax + 4]
mov dword [ebp - 0x630], edx
mov ecx, dword [ebp - 0x630]
cmp dword [ecx], 0
je 0x100899b6
mov edx, dword [ebp - 0x630]
mov eax, dword [edx]
mov dword [ebp - 0x6bc], eax
mov ecx, dword [ebp - 0x6bc]
mov dword [ebp - 0x6c0], ecx
lea edx, [ebp - 0x6c0]
mov dword [ebp - 0x6c4], edx
mov eax, dword [ebp - 0x204]
or eax, 0x200
mov dword [ebp - 0x204], eax
mov ecx, dword [ebp - 0x6c4]
mov dword [ebp - 0x634], ecx
jmp 0x100899e9
mov dword [ebp - 0x6c8], 0
lea edx, [ebp - 0x6c8]
mov dword [ebp - 0x6cc], edx
mov eax, dword [ebp - 0x204]
or eax, 0x400
mov dword [ebp - 0x204], eax
mov ecx, dword [ebp - 0x6cc]
mov dword [ebp - 0x634], ecx
mov edx, dword [ebp - 0x634]
mov dword [ebp - 0x6d0], edx
mov eax, dword [ebp - 0x6d0]
mov ecx, dword [eax]
mov dword [ebp - 0x374], ecx
mov edx, dword [ebp - 0x204]
or edx, 0x800
mov dword [ebp - 0x204], edx
mov eax, dword [ebp - 0x204]
and eax, 0x400
je 0x10089a2c
and dword [ebp - 0x204], 0xfffffbff
mov ecx, dword [ebp - 0x204]
and ecx, 0x200
je 0x10089a44
and dword [ebp - 0x204], 0xfffffdff
mov edx, dword [ebp - 0x204]
or edx, 0x100
mov dword [ebp - 0x204], edx
lea eax, [ebp - 0x374]
mov dword [ebp - 0x6d4], eax
mov ecx, dword [ebp - 0x20c]
add ecx, 0x28
mov dword [ebp - 0x27c], ecx
mov dword [ebp - 0x6d8], 0x100949e0
mov edx, dword [ebp - 0x27c]
movzx eax, byte [edx + 0x10]
test eax, eax
je 0x10089a99
mov ecx, 7
add ecx, 1
mov dword [ebp - 0x638], ecx
jmp 0x10089aa3
mov dword [ebp - 0x638], 7
mov edx, dword [ebp - 0x638]
mov dword [ebp - 0x63c], edx
mov eax, dword [ebp - 0x27c]
cmp dword [eax + 4], 0
je 0x10089ae1
mov ecx, dword [ebp - 0x27c]
add ecx, 8
call fcn.10039c20
movzx ecx, al
test ecx, ecx
je 0x10089ae1
mov edx, dword [ebp - 0x27c]
mov eax, dword [ebp - 0x63c]
cmp eax, dword [edx + 0xc]
jbe 0x10089b0e
mov dword [ebp - 0x378], 0
mov ecx, dword [ebp - 0x204]
or ecx, 0x1000
mov dword [ebp - 0x204], ecx
lea edx, [ebp - 0x378]
mov dword [ebp - 0x700], edx
jmp 0x10089c62
mov eax, dword [ebp - 0x6d8]
mov dword [ebp - 0x6dc], eax
mov ecx, dword [ebp - 0x6dc]
mov dword [ebp - 0x6e4], ecx
mov edx, dword [ebp - 0x27c]
add edx, 8
mov dword [ebp - 0x6e0], edx
mov eax, dword [ebp - 0x63c]
push eax
mov ecx, dword [ebp - 0x6e0]
call fcn.10039c30
mov ecx, dword [ebp - 0x6e4]
mov dword [eax], ecx
mov edx, 7
shl edx, 2
mov eax, dword [ebp - 0x27c]
add edx, dword [eax + 4]
mov dword [ebp - 0x3ac], edx
mov ecx, dword [ebp - 0x3ac]
cmp dword [ecx], 0
je 0x10089bb6
mov edx, dword [ebp - 0x3ac]
mov eax, dword [edx]
mov dword [ebp - 0x6e8], eax
mov ecx, dword [ebp - 0x6e8]
mov dword [ebp - 0x6ec], ecx
lea edx, [ebp - 0x6ec]
mov dword [ebp - 0x6f0], edx
mov eax, dword [ebp - 0x204]
or eax, 0x2000
mov dword [ebp - 0x204], eax
mov ecx, dword [ebp - 0x6f0]
mov dword [ebp - 0x3b0], ecx
jmp 0x10089be9
mov dword [ebp - 0x6f4], 0
lea edx, [ebp - 0x6f4]
mov dword [ebp - 0x6f8], edx
mov eax, dword [ebp - 0x204]
or eax, 0x4000
mov dword [ebp - 0x204], eax
mov ecx, dword [ebp - 0x6f8]
mov dword [ebp - 0x3b0], ecx
mov edx, dword [ebp - 0x3b0]
mov dword [ebp - 0x6fc], edx
mov eax, dword [ebp - 0x6fc]
mov ecx, dword [eax]
mov dword [ebp - 0x378], ecx
mov edx, dword [ebp - 0x204]
or edx, 0x8000
mov dword [ebp - 0x204], edx
mov eax, dword [ebp - 0x204]
and eax, 0x4000
je 0x10089c2c
and dword [ebp - 0x204], 0xffffbfff
mov ecx, dword [ebp - 0x204]
and ecx, 0x2000
je 0x10089c44
and dword [ebp - 0x204], 0xffffdfff
mov edx, dword [ebp - 0x204]
or edx, 0x1000
mov dword [ebp - 0x204], edx
lea eax, [ebp - 0x378]
mov dword [ebp - 0x700], eax
mov ecx, dword [ebp - 0x20c]
add ecx, 0x28
mov dword [ebp - 0x280], ecx
mov dword [ebp - 0x704], 0x10094a60
mov edx, dword [ebp - 0x280]
movzx eax, byte [edx + 0x10]
test eax, eax
je 0x10089c99
mov ecx, 0x24
add ecx, 1
mov dword [ebp - 0x3b4], ecx
jmp 0x10089ca3
mov dword [ebp - 0x3b4], 0x24
mov edx, dword [ebp - 0x3b4]
mov dword [ebp - 0x3b8], edx
mov eax, dword [ebp - 0x280]
cmp dword [eax + 4], 0
je 0x10089ce1
mov ecx, dword [ebp - 0x280]
add ecx, 8
call fcn.10039c20
movzx ecx, al
test ecx, ecx
je 0x10089ce1
mov edx, dword [ebp - 0x280]
mov eax, dword [ebp - 0x3b8]
cmp eax, dword [edx + 0xc]
jbe 0x10089d0e
mov dword [ebp - 0x37c], 0
mov ecx, dword [ebp - 0x204]
or ecx, 0x10000
mov dword [ebp - 0x204], ecx
lea edx, [ebp - 0x37c]
mov dword [ebp - 0x72c], edx
jmp 0x10089e62
mov eax, dword [ebp - 0x704]
mov dword [ebp - 0x708], eax
mov ecx, dword [ebp - 0x708]
mov dword [ebp - 0x710], ecx
mov edx, dword [ebp - 0x280]
add edx, 8
mov dword [ebp - 0x70c], edx
mov eax, dword [ebp - 0x3b8]
push eax
mov ecx, dword [ebp - 0x70c]
call fcn.10039c30
mov ecx, dword [ebp - 0x710]
mov dword [eax], ecx
mov edx, 0x24
shl edx, 2
mov eax, dword [ebp - 0x280]
add edx, dword [eax + 4]
mov dword [ebp - 0x3bc], edx
mov ecx, dword [ebp - 0x3bc]
cmp dword [ecx], 0
je 0x10089db6
mov edx, dword [ebp - 0x3bc]
mov eax, dword [edx]
mov dword [ebp - 0x714], eax
mov ecx, dword [ebp - 0x714]
mov dword [ebp - 0x718], ecx
lea edx, [ebp - 0x718]
mov dword [ebp - 0x71c], edx
mov eax, dword [ebp - 0x204]
or eax, 0x20000
mov dword [ebp - 0x204], eax
mov ecx, dword [ebp - 0x71c]
mov dword [ebp - 0x3c0], ecx
jmp 0x10089de9
mov dword [ebp - 0x720], 0
lea edx, [ebp - 0x720]
mov dword [ebp - 0x724], edx
mov eax, dword [ebp - 0x204]
or eax, 0x40000
mov dword [ebp - 0x204], eax
mov ecx, dword [ebp - 0x724]
mov dword [ebp - 0x3c0], ecx
mov edx, dword [ebp - 0x3c0]
mov dword [ebp - 0x728], edx
mov eax, dword [ebp - 0x728]
mov ecx, dword [eax]
mov dword [ebp - 0x37c], ecx
mov edx, dword [ebp - 0x204]
or edx, 0x80000
mov dword [ebp - 0x204], edx
mov eax, dword [ebp - 0x204]
and eax, 0x40000
je 0x10089e2c
and dword [ebp - 0x204], 0xfffbffff
mov ecx, dword [ebp - 0x204]
and ecx, 0x20000
je 0x10089e44
and dword [ebp - 0x204], 0xfffdffff
mov edx, dword [ebp - 0x204]
or edx, 0x10000
mov dword [ebp - 0x204], edx
lea eax, [ebp - 0x37c]
mov dword [ebp - 0x72c], eax
mov ecx, dword [ebp - 0x20c]
add ecx, 0x50
mov dword [ebp - 0x23c], ecx
mov edx, dword [0x10164544]
mov dword [ebp - 0x730], edx
lea eax, [ebp - 0x2f8]
mov dword [ebp - 0x3c4], eax
mov ecx, dword [ebp - 0x3c4]
mov edx, dword [ebp - 0x730]
mov dword [ecx], edx
mov eax, dword [ebp - 0x3c4]
mov dword [ebp - 0xd98], eax
mov dword [ebp - 4], 2
mov ecx, dword [ebp - 0x23c]
mov edx, dword [ebp - 0x2f8]
mov dword [ecx], edx
mov eax, dword [ebp - 0x2f8]
mov ecx, dword [eax]
mov dword [ebp - 0x734], ecx
mov edx, dword [ebp - 0x23c]
mov eax, dword [ebp - 0x734]
mov dword [edx + 4], eax
mov ecx, dword [ebp - 0x23c]
cmp dword [ecx + 4], 0
jne 0x10089eed
mov dword [ebp - 4], 0xffffffff
jmp 0x1008a127
mov dword [ebp - 0x320], 0
mov edx, dword [ebp - 0x23c]
mov eax, dword [edx + 4]
mov ecx, dword [ebp - 0x320]
mov edx, dword [eax + ecx*4]
mov dword [ebp - 0x3c8], edx
cmp dword [ebp - 0x3c8], 0
jne 0x10089f21
mov byte [ebp - 0x20e], 0
jmp 0x10089f78
mov eax, dword [0x100f52d4]
mov dword [ebp - 0x738], eax
push 0x1c
lea ecx, [ebp - 0x138]
push ecx
mov edx, dword [ebp - 0x3c8]
push edx
call dword [ebp - 0x738]
test eax, eax
jne 0x10089f4f
mov byte [ebp - 0x20e], 0
jmp 0x10089f78
mov eax, dword [ebp - 0x124]
and eax, 1
jne 0x10089f68
mov ecx, dword [ebp - 0x124]
and ecx, 0x100
je 0x10089f71
mov byte [ebp - 0x20e], 0
jmp 0x10089f78
mov byte [ebp - 0x20e], 1
movzx edx, byte [ebp - 0x20e]
test edx, edx
je 0x10089f97
mov eax, dword [ebp - 0x320]
add eax, 1
mov dword [ebp - 0x320], eax
jmp 0x10089ef7
mov ecx, dword [ebp - 0x23c]
mov edx, dword [ebp - 0x320]
mov dword [ecx + 0xc], edx
mov eax, dword [ebp - 0x23c]
cmp dword [eax + 0xc], 0
jne 0x10089fbe
mov dword [ebp - 4], 0xffffffff
jmp 0x1008a127
mov ecx, 1
test ecx, ecx
je 0x10089fdb
mov edx, dword [ebp - 0x23c]
mov eax, dword [edx + 0xc]
add eax, 1
mov dword [ebp - 0x3cc], eax
jmp 0x10089fea
mov ecx, dword [ebp - 0x23c]
mov edx, dword [ecx + 0xc]
mov dword [ebp - 0x3cc], edx
mov edx, dword [ebp - 0x3cc]
lea ecx, [ebp - 0x740]
call fcn.1003a1e0
mov dword [ebp - 0x73c], eax
mov eax, dword [ebp - 0x73c]
push eax
mov ecx, dword [ebp - 0x23c]
add ecx, 8
call fcn.1003a280
lea ecx, [ebp - 0x740]
call fcn.10039c40
mov ecx, dword [ebp - 0x23c]
add ecx, 8
call fcn.10039c20
movzx ecx, al
test ecx, ecx
jne 0x1008a042
mov dword [ebp - 4], 0xffffffff
jmp 0x1008a127
mov ecx, dword [ebp - 0x23c]
add ecx, 8
call fcn.1002aa60
mov dword [ebp - 0x744], eax
mov edx, dword [ebp - 0x744]
mov dword [ebp - 0x3c], edx
mov eax, 1
test eax, eax
je 0x1008a0db
mov ecx, dword [ebp - 0x3c]
mov dword [ebp - 0x748], ecx
mov edx, dword [ebp - 0x23c]
mov eax, dword [edx + 0xc]
lea ecx, [eax*4 + 4]
push ecx
mov edx, dword [ebp - 0x23c]
mov eax, dword [edx + 4]
sub eax, 4
push eax
mov ecx, dword [ebp - 0x748]
push ecx
call sub.VCRUNTIME140.dll_memcpy
add esp, 0xc
mov edx, dword [ebp - 0x3c]
mov dword [ebp - 0x74c], edx
mov eax, dword [ebp - 0x74c]
add eax, 4
mov dword [ebp - 0x750], eax
cmp dword [ebp - 0x2f8], 0
jne 0x1008a0c1
jmp 0x1008a0cf
mov ecx, dword [ebp - 0x2f8]
mov edx, dword [ebp - 0x750]
mov dword [ecx], edx
mov eax, dword [ebp - 0x23c]
mov byte [eax + 0x10], 1
jmp 0x1008a120
mov ecx, dword [ebp - 0x3c]
mov dword [ebp - 0x754], ecx
mov edx, dword [ebp - 0x23c]
mov eax, dword [edx + 0xc]
shl eax, 2
push eax
mov ecx, dword [ebp - 0x23c]
mov edx, dword [ecx + 4]
push edx
mov eax, dword [ebp - 0x754]
push eax
call sub.VCRUNTIME140.dll_memcpy
add esp, 0xc
cmp dword [ebp - 0x2f8], 0
jne 0x1008a115
jmp 0x1008a120
mov ecx, dword [ebp - 0x3c]
mov edx, dword [ebp - 0x2f8]
mov dword [edx], ecx
mov dword [ebp - 4], 0xffffffff
mov eax, dword [ebp - 0x20c]
add eax, 0x50
mov dword [ebp - 0x2f4], eax
mov dword [ebp - 0x758], 0x10092980
mov ecx, dword [ebp - 0x2f4]
movzx edx, byte [ecx + 0x10]
test edx, edx
je 0x1008a15e
mov eax, 0x1b
add eax, 1
mov dword [ebp - 0x3d0], eax
jmp 0x1008a168
mov dword [ebp - 0x3d0], 0x1b
mov ecx, dword [ebp - 0x3d0]
mov dword [ebp - 0x3d4], ecx
mov edx, dword [ebp - 0x2f4]
cmp dword [edx + 4], 0
je 0x1008a1a6
mov ecx, dword [ebp - 0x2f4]
add ecx, 8
call fcn.10039c20
movzx eax, al
test eax, eax
je 0x1008a1a6
mov ecx, dword [ebp - 0x2f4]
mov edx, dword [ebp - 0x3d4]
cmp edx, dword [ecx + 0xc]
jbe 0x1008a1d2
mov dword [ebp - 0x380], 0
mov eax, dword [ebp - 0x204]
or eax, 0x100000
mov dword [ebp - 0x204], eax
lea ecx, [ebp - 0x380]
mov dword [ebp - 0x780], ecx
jmp 0x1008a326
mov edx, dword [ebp - 0x758]
mov dword [ebp - 0x75c], edx
mov eax, dword [ebp - 0x75c]
mov dword [ebp - 0x764], eax
mov ecx, dword [ebp - 0x2f4]
add ecx, 8
mov dword [ebp - 0x760], ecx
mov edx, dword [ebp - 0x3d4]
push edx
mov ecx, dword [ebp - 0x760]
call fcn.10039c30
mov ecx, dword [ebp - 0x764]
mov dword [eax], ecx
mov edx, 0x1b
shl edx, 2
mov eax, dword [ebp - 0x2f4]
add edx, dword [eax + 4]
mov dword [ebp - 0x3d8], edx
mov ecx, dword [ebp - 0x3d8]
cmp dword [ecx], 0
je 0x1008a27a
mov edx, dword [ebp - 0x3d8]
mov eax, dword [edx]
mov dword [ebp - 0x768], eax
mov ecx, dword [ebp - 0x768]
mov dword [ebp - 0x76c], ecx
lea edx, [ebp - 0x76c]
mov dword [ebp - 0x770], edx
mov eax, dword [ebp - 0x204]
or eax, 0x200000
mov dword [ebp - 0x204], eax
mov ecx, dword [ebp - 0x770]
mov dword [ebp - 0x3dc], ecx
jmp 0x1008a2ad
mov dword [ebp - 0x774], 0
lea edx, [ebp - 0x774]
mov dword [ebp - 0x778], edx
mov eax, dword [ebp - 0x204]
or eax, 0x400000
mov dword [ebp - 0x204], eax
mov ecx, dword [ebp - 0x778]
mov dword [ebp - 0x3dc], ecx
mov edx, dword [ebp - 0x3dc]
mov dword [ebp - 0x77c], edx
mov eax, dword [ebp - 0x77c]
mov ecx, dword [eax]
mov dword [ebp - 0x380], ecx
mov edx, dword [ebp - 0x204]
or edx, 0x800000
mov dword [ebp - 0x204], edx
mov eax, dword [ebp - 0x204]
and eax, 0x400000
je 0x1008a2f0
and dword [ebp - 0x204], 0xffbfffff
mov ecx, dword [ebp - 0x204]
and ecx, 0x200000
je 0x1008a308
and dword [ebp - 0x204], 0xffdfffff
mov edx, dword [ebp - 0x204]
or edx, 0x100000
mov dword [ebp - 0x204], edx
lea eax, [ebp - 0x380]
mov dword [ebp - 0x780], eax
mov ecx, dword [ebp - 0x20c]
add ecx, 0x50
mov dword [ebp - 0x2f0], ecx
mov dword [ebp - 0x784], 0x10092ac0
mov edx, dword [ebp - 0x2f0]
movzx eax, byte [edx + 0x10]
test eax, eax
je 0x1008a35d
mov ecx, 0x5d
add ecx, 1
mov dword [ebp - 0x3e0], ecx
jmp 0x1008a367
mov dword [ebp - 0x3e0], 0x5d
mov edx, dword [ebp - 0x3e0]
mov dword [ebp - 0x3e4], edx
mov eax, dword [ebp - 0x2f0]
cmp dword [eax + 4], 0
je 0x1008a3a5
mov ecx, dword [ebp - 0x2f0]
add ecx, 8
call fcn.10039c20
movzx ecx, al
test ecx, ecx
je 0x1008a3a5
mov edx, dword [ebp - 0x2f0]
mov eax, dword [ebp - 0x3e4]
cmp eax, dword [edx + 0xc]
jbe 0x1008a3d2
mov dword [ebp - 0x384], 0
mov ecx, dword [ebp - 0x204]
or ecx, 0x1000000
mov dword [ebp - 0x204], ecx
lea edx, [ebp - 0x384]
mov dword [ebp - 0x7ac], edx
jmp 0x1008a526
mov eax, dword [ebp - 0x784]
mov dword [ebp - 0x788], eax
mov ecx, dword [ebp - 0x788]
mov dword [ebp - 0x790], ecx
mov edx, dword [ebp - 0x2f0]
add edx, 8
mov dword [ebp - 0x78c], edx
mov eax, dword [ebp - 0x3e4]
push eax
mov ecx, dword [ebp - 0x78c]
call fcn.10039c30
mov ecx, dword [ebp - 0x790]
mov dword [eax], ecx
mov edx, 0x5d
shl edx, 2
mov eax, dword [ebp - 0x2f0]
add edx, dword [eax + 4]
mov dword [ebp - 0x3e8], edx
mov ecx, dword [ebp - 0x3e8]
cmp dword [ecx], 0
je 0x1008a47a
mov edx, dword [ebp - 0x3e8]
mov eax, dword [edx]
mov dword [ebp - 0x794], eax
mov ecx, dword [ebp - 0x794]
mov dword [ebp - 0x798], ecx
lea edx, [ebp - 0x798]
mov dword [ebp - 0x79c], edx
mov eax, dword [ebp - 0x204]
or eax, 0x2000000
mov dword [ebp - 0x204], eax
mov ecx, dword [ebp - 0x79c]
mov dword [ebp - 0x3ec], ecx
jmp 0x1008a4ad
mov dword [ebp - 0x7a0], 0
lea edx, [ebp - 0x7a0]
mov dword [ebp - 0x7a4], edx
mov eax, dword [ebp - 0x204]
or eax, 0x4000000
mov dword [ebp - 0x204], eax
mov ecx, dword [ebp - 0x7a4]
mov dword [ebp - 0x3ec], ecx
mov edx, dword [ebp - 0x3ec]
mov dword [ebp - 0x7a8], edx
mov eax, dword [ebp - 0x7a8]
mov ecx, dword [eax]
mov dword [ebp - 0x384], ecx
mov edx, dword [ebp - 0x204]
or edx, 0x8000000
mov dword [ebp - 0x204], edx
mov eax, dword [ebp - 0x204]
and eax, 0x4000000
je 0x1008a4f0
and dword [ebp - 0x204], 0xfbffffff
mov ecx, dword [ebp - 0x204]
and ecx, 0x2000000
je 0x1008a508
and dword [ebp - 0x204], 0xfdffffff
mov edx, dword [ebp - 0x204]
or edx, 0x1000000
mov dword [ebp - 0x204], edx
lea eax, [ebp - 0x384]
mov dword [ebp - 0x7ac], eax
mov ecx, dword [ebp - 0x20c]
add ecx, 0x50
mov dword [ebp - 0x2ec], ecx
mov dword [ebp - 0x7b0], 0x10092cf0
mov edx, dword [ebp - 0x2ec]
movzx eax, byte [edx + 0x10]
test eax, eax
je 0x1008a55d
mov ecx, 0x5a
add ecx, 1
mov dword [ebp - 0x3f0], ecx
jmp 0x1008a567
mov dword [ebp - 0x3f0], 0x5a
mov edx, dword [ebp - 0x3f0]
mov dword [ebp - 0x3f4], edx
mov eax, dword [ebp - 0x2ec]
cmp dword [eax + 4], 0
je 0x1008a5a5
mov ecx, dword [ebp - 0x2ec]
add ecx, 8
call fcn.10039c20
movzx ecx, al
test ecx, ecx
je 0x1008a5a5
mov edx, dword [ebp - 0x2ec]
mov eax, dword [ebp - 0x3f4]
cmp eax, dword [edx + 0xc]
jbe 0x1008a5d2
mov dword [ebp - 0x388], 0
mov ecx, dword [ebp - 0x204]
or ecx, 0x10000000
mov dword [ebp - 0x204], ecx
lea edx, [ebp - 0x388]
mov dword [ebp - 0x7d8], edx
jmp 0x1008a726
mov eax, dword [ebp - 0x7b0]
mov dword [ebp - 0x7b4], eax
mov ecx, dword [ebp - 0x7b4]
mov dword [ebp - 0x7bc], ecx
mov edx, dword [ebp - 0x2ec]
add edx, 8
mov dword [ebp - 0x7b8], edx
mov eax, dword [ebp - 0x3f4]
push eax
mov ecx, dword [ebp - 0x7b8]
call fcn.10039c30
mov ecx, dword [ebp - 0x7bc]
mov dword [eax], ecx
mov edx, 0x5a
shl edx, 2
mov eax, dword [ebp - 0x2ec]
add edx, dword [eax + 4]
mov dword [ebp - 0x3f8], edx
mov ecx, dword [ebp - 0x3f8]
cmp dword [ecx], 0
je 0x1008a67a
mov edx, dword [ebp - 0x3f8]
mov eax, dword [edx]
mov dword [ebp - 0x7c0], eax
mov ecx, dword [ebp - 0x7c0]
mov dword [ebp - 0x7c4], ecx
lea edx, [ebp - 0x7c4]
mov dword [ebp - 0x7c8], edx
mov eax, dword [ebp - 0x204]
or eax, 0x20000000
mov dword [ebp - 0x204], eax
mov ecx, dword [ebp - 0x7c8]
mov dword [ebp - 0x3fc], ecx
jmp 0x1008a6ad
mov dword [ebp - 0x7cc], 0
lea edx, [ebp - 0x7cc]
mov dword [ebp - 0x7d0], edx
mov eax, dword [ebp - 0x204]
or eax, 0x40000000
mov dword [ebp - 0x204], eax
mov ecx, dword [ebp - 0x7d0]
mov dword [ebp - 0x3fc], ecx
mov edx, dword [ebp - 0x3fc]
mov dword [ebp - 0x7d4], edx
mov eax, dword [ebp - 0x7d4]
mov ecx, dword [eax]
mov dword [ebp - 0x388], ecx
mov edx, dword [ebp - 0x204]
or edx, 0x80000000
mov dword [ebp - 0x204], edx
mov eax, dword [ebp - 0x204]
and eax, 0x40000000
je 0x1008a6f0
and dword [ebp - 0x204], 0xbfffffff
mov ecx, dword [ebp - 0x204]
and ecx, 0x20000000
je 0x1008a708
and dword [ebp - 0x204], 0xdfffffff
mov edx, dword [ebp - 0x204]
or edx, 0x10000000
mov dword [ebp - 0x204], edx
lea eax, [ebp - 0x388]
mov dword [ebp - 0x7d8], eax
mov ecx, dword [ebp - 0x20c]
add ecx, 0x78
mov dword [ebp - 0x240], ecx
mov edx, dword [0x1016455c]
mov dword [ebp - 0x7dc], edx
lea eax, [ebp - 0x2e8]
mov dword [ebp - 0x400], eax
mov ecx, dword [ebp - 0x400]
mov edx, dword [ebp - 0x7dc]
mov dword [ecx], edx
mov eax, dword [ebp - 0x400]
mov dword [ebp - 0xd9c], eax
mov dword [ebp - 4], 3
mov ecx, dword [ebp - 0x240]
mov edx, dword [ebp - 0x2e8]
mov dword [ecx], edx
mov eax, dword [ebp - 0x2e8]
mov ecx, dword [eax]
mov dword [ebp - 0x7e0], ecx
mov edx, dword [ebp - 0x240]
mov eax, dword [ebp - 0x7e0]
mov dword [edx + 4], eax
mov ecx, dword [ebp - 0x240]
cmp dword [ecx + 4], 0
jne 0x1008a7b1
mov dword [ebp - 4], 0xffffffff
jmp 0x1008a9eb
mov dword [ebp - 0x324], 0
mov edx, dword [ebp - 0x240]
mov eax, dword [edx + 4]
mov ecx, dword [ebp - 0x324]
mov edx, dword [eax + ecx*4]
mov dword [ebp - 0x404], edx
cmp dword [ebp - 0x404], 0
jne 0x1008a7e5
mov byte [ebp - 0x20f], 0
jmp 0x1008a83c
mov eax, dword [0x100f52d4]
mov dword [ebp - 0x7e4], eax
push 0x1c
lea ecx, [ebp - 0x11c]
push ecx
mov edx, dword [ebp - 0x404]
push edx
call dword [ebp - 0x7e4]
test eax, eax
jne 0x1008a813
mov byte [ebp - 0x20f], 0
jmp 0x1008a83c
mov eax, dword [ebp - 0x108]
and eax, 1
jne 0x1008a82c
mov ecx, dword [ebp - 0x108]
and ecx, 0x100
je 0x1008a835
mov byte [ebp - 0x20f], 0
jmp 0x1008a83c
mov byte [ebp - 0x20f], 1
movzx edx, byte [ebp - 0x20f]
test edx, edx
je 0x1008a85b
mov eax, dword [ebp - 0x324]
add eax, 1
mov dword [ebp - 0x324], eax
jmp 0x1008a7bb
mov ecx, dword [ebp - 0x240]
mov edx, dword [ebp - 0x324]
mov dword [ecx + 0xc], edx
mov eax, dword [ebp - 0x240]
cmp dword [eax + 0xc], 0
jne 0x1008a882
mov dword [ebp - 4], 0xffffffff
jmp 0x1008a9eb
mov ecx, 1
test ecx, ecx
je 0x1008a89f
mov edx, dword [ebp - 0x240]
mov eax, dword [edx + 0xc]
add eax, 1
mov dword [ebp - 0x408], eax
jmp 0x1008a8ae
mov ecx, dword [ebp - 0x240]
mov edx, dword [ecx + 0xc]
mov dword [ebp - 0x408], edx
mov edx, dword [ebp - 0x408]
lea ecx, [ebp - 0x7ec]
call fcn.1003a1e0
mov dword [ebp - 0x7e8], eax
mov eax, dword [ebp - 0x7e8]
push eax
mov ecx, dword [ebp - 0x240]
add ecx, 8
call fcn.1003a280
lea ecx, [ebp - 0x7ec]
call fcn.10039c40
mov ecx, dword [ebp - 0x240]
add ecx, 8
call fcn.10039c20
movzx ecx, al
test ecx, ecx
jne 0x1008a906
mov dword [ebp - 4], 0xffffffff
jmp 0x1008a9eb
mov ecx, dword [ebp - 0x240]
add ecx, 8
call fcn.1002aa60
mov dword [ebp - 0x7f0], eax
mov edx, dword [ebp - 0x7f0]
mov dword [ebp - 0x38], edx
mov eax, 1
test eax, eax
je 0x1008a99f
mov ecx, dword [ebp - 0x38]
mov dword [ebp - 0x7f4], ecx
mov edx, dword [ebp - 0x240]
mov eax, dword [edx + 0xc]
lea ecx, [eax*4 + 4]
push ecx
mov edx, dword [ebp - 0x240]
mov eax, dword [edx + 4]
sub eax, 4
push eax
mov ecx, dword [ebp - 0x7f4]
push ecx
call sub.VCRUNTIME140.dll_memcpy
add esp, 0xc
mov edx, dword [ebp - 0x38]
mov dword [ebp - 0x7f8], edx
mov eax, dword [ebp - 0x7f8]
add eax, 4
mov dword [ebp - 0x7fc], eax
cmp dword [ebp - 0x2e8], 0
jne 0x1008a985
jmp 0x1008a993
mov ecx, dword [ebp - 0x2e8]
mov edx, dword [ebp - 0x7fc]
mov dword [ecx], edx
mov eax, dword [ebp - 0x240]
mov byte [eax + 0x10], 1
jmp 0x1008a9e4
mov ecx, dword [ebp - 0x38]
mov dword [ebp - 0x800], ecx
mov edx, dword [ebp - 0x240]
mov eax, dword [edx + 0xc]
shl eax, 2
push eax
mov ecx, dword [ebp - 0x240]
mov edx, dword [ecx + 4]
push edx
mov eax, dword [ebp - 0x800]
push eax
call sub.VCRUNTIME140.dll_memcpy
add esp, 0xc
cmp dword [ebp - 0x2e8], 0
jne 0x1008a9d9
jmp 0x1008a9e4
mov ecx, dword [ebp - 0x38]
mov edx, dword [ebp - 0x2e8]
mov dword [edx], ecx
mov dword [ebp - 4], 0xffffffff
mov eax, dword [ebp - 0x20c]
add eax, 0x78
mov dword [ebp - 0x2e4], eax
mov dword [ebp - 0x804], 0x100ab680
mov ecx, dword [ebp - 0x2e4]
movzx edx, byte [ecx + 0x10]
test edx, edx
je 0x1008aa22
mov eax, 0xe
add eax, 1
mov dword [ebp - 0x40c], eax
jmp 0x1008aa2c
mov dword [ebp - 0x40c], 0xe
mov ecx, dword [ebp - 0x40c]
mov dword [ebp - 0x410], ecx
mov edx, dword [ebp - 0x2e4]
cmp dword [edx + 4], 0
je 0x1008aa6a
mov ecx, dword [ebp - 0x2e4]
add ecx, 8
call fcn.10039c20
movzx eax, al
test eax, eax
je 0x1008aa6a
mov ecx, dword [ebp - 0x2e4]
mov edx, dword [ebp - 0x410]
cmp edx, dword [ecx + 0xc]
jbe 0x1008aa94
mov dword [ebp - 0x3a8], 0
mov eax, dword [ebp - 0x1fc]
or eax, 1
mov dword [ebp - 0x1fc], eax
lea ecx, [ebp - 0x3a8]
mov dword [ebp - 0x82c], ecx
jmp 0x1008abd3
mov edx, dword [ebp - 0x804]
mov dword [ebp - 0x808], edx
mov eax, dword [ebp - 0x808]
mov dword [ebp - 0x810], eax
mov ecx, dword [ebp - 0x2e4]
add ecx, 8
mov dword [ebp - 0x80c], ecx
mov edx, dword [ebp - 0x410]
push edx
mov ecx, dword [ebp - 0x80c]
call fcn.10039c30
mov ecx, dword [ebp - 0x810]
mov dword [eax], ecx
mov edx, 0xe
shl edx, 2
mov eax, dword [ebp - 0x2e4]
add edx, dword [eax + 4]
mov dword [ebp - 0x414], edx
mov ecx, dword [ebp - 0x414]
cmp dword [ecx], 0
je 0x1008ab3a
mov edx, dword [ebp - 0x414]
mov eax, dword [edx]
mov dword [ebp - 0x814], eax
mov ecx, dword [ebp - 0x814]
mov dword [ebp - 0x818], ecx
lea edx, [ebp - 0x818]
mov dword [ebp - 0x81c], edx
mov eax, dword [ebp - 0x1fc]
or eax, 2
mov dword [ebp - 0x1fc], eax
mov ecx, dword [ebp - 0x81c]
mov dword [ebp - 0x418], ecx
jmp 0x1008ab6b
mov dword [ebp - 0x820], 0
lea edx, [ebp - 0x820]
mov dword [ebp - 0x824], edx
mov eax, dword [ebp - 0x1fc]
or eax, 4
mov dword [ebp - 0x1fc], eax
mov ecx, dword [ebp - 0x824]
mov dword [ebp - 0x418], ecx
mov edx, dword [ebp - 0x418]
mov dword [ebp - 0x828], edx
mov eax, dword [ebp - 0x828]
mov ecx, dword [eax]
mov dword [ebp - 0x3a8], ecx
mov edx, dword [ebp - 0x1fc]
or edx, 8
mov dword [ebp - 0x1fc], edx
mov eax, dword [ebp - 0x1fc]
and eax, 4
je 0x1008aba6
and dword [ebp - 0x1fc], 0xfffffffb
mov ecx, dword [ebp - 0x1fc]
and ecx, 2
je 0x1008abb8
and dword [ebp - 0x1fc], 0xfffffffd
mov edx, dword [ebp - 0x1fc]
or edx, 1
mov dword [ebp - 0x1fc], edx
lea eax, [ebp - 0x3a8]
mov dword [ebp - 0x82c], eax
mov ecx, dword [ebp - 0x20c]
add ecx, 0x78
mov dword [ebp - 0x2e0], ecx
mov dword [ebp - 0x830], 0x100ab9c0
mov edx, dword [ebp - 0x2e0]
movzx eax, byte [edx + 0x10]
test eax, eax
je 0x1008ac0a
mov ecx, 0x13
add ecx, 1
mov dword [ebp - 0x41c], ecx
jmp 0x1008ac14
mov dword [ebp - 0x41c], 0x13
mov edx, dword [ebp - 0x41c]
mov dword [ebp - 0x420], edx
mov eax, dword [ebp - 0x2e0]
cmp dword [eax + 4], 0
je 0x1008ac52
mov ecx, dword [ebp - 0x2e0]
add ecx, 8
call fcn.10039c20
movzx ecx, al
test ecx, ecx
je 0x1008ac52
mov edx, dword [ebp - 0x2e0]
mov eax, dword [ebp - 0x420]
cmp eax, dword [edx + 0xc]
jbe 0x1008ac7c
mov dword [ebp - 0x390], 0
mov ecx, dword [ebp - 0x1fc]
or ecx, 0x10
mov dword [ebp - 0x1fc], ecx
lea edx, [ebp - 0x390]
mov dword [ebp - 0x858], edx
jmp 0x1008adbe
mov eax, dword [ebp - 0x830]
mov dword [ebp - 0x834], eax
mov ecx, dword [ebp - 0x834]
mov dword [ebp - 0x83c], ecx
mov edx, dword [ebp - 0x2e0]
add edx, 8
mov dword [ebp - 0x838], edx
mov eax, dword [ebp - 0x420]
push eax
mov ecx, dword [ebp - 0x838]
call fcn.10039c30
mov ecx, dword [ebp - 0x83c]
mov dword [eax], ecx
mov edx, 0x13
shl edx, 2
mov eax, dword [ebp - 0x2e0]
add edx, dword [eax + 4]
mov dword [ebp - 0x424], edx
mov ecx, dword [ebp - 0x424]
cmp dword [ecx], 0
je 0x1008ad22
mov edx, dword [ebp - 0x424]
mov eax, dword [edx]
mov dword [ebp - 0x840], eax
mov ecx, dword [ebp - 0x840]
mov dword [ebp - 0x844], ecx
lea edx, [ebp - 0x844]
mov dword [ebp - 0x848], edx
mov eax, dword [ebp - 0x1fc]
or eax, 0x20
mov dword [ebp - 0x1fc], eax
mov ecx, dword [ebp - 0x848]
mov dword [ebp - 0x428], ecx
jmp 0x1008ad53
mov dword [ebp - 0x84c], 0
lea edx, [ebp - 0x84c]
mov dword [ebp - 0x850], edx
mov eax, dword [ebp - 0x1fc]
or eax, 0x40
mov dword [ebp - 0x1fc], eax
mov ecx, dword [ebp - 0x850]
mov dword [ebp - 0x428], ecx
mov edx, dword [ebp - 0x428]
mov dword [ebp - 0x854], edx
mov eax, dword [ebp - 0x854]
mov ecx, dword [eax]
mov dword [ebp - 0x390], ecx
mov edx, dword [ebp - 0x1fc]
or edx, 0x80
mov dword [ebp - 0x1fc], edx
mov eax, dword [ebp - 0x1fc]
and eax, 0x40
je 0x1008ad91
and dword [ebp - 0x1fc], 0xffffffbf
mov ecx, dword [ebp - 0x1fc]
and ecx, 0x20
je 0x1008ada3
and dword [ebp - 0x1fc], 0xffffffdf
mov edx, dword [ebp - 0x1fc]
or edx, 0x10
mov dword [ebp - 0x1fc], edx
lea eax, [ebp - 0x390]
mov dword [ebp - 0x858], eax
mov ecx, dword [ebp - 0x20c]
add ecx, 0x14
mov dword [ebp - 0x244], ecx
mov edx, dword [0x101645a0]
mov dword [ebp - 0x85c], edx
lea eax, [ebp - 0x2dc]
mov dword [ebp - 0x42c], eax
mov ecx, dword [ebp - 0x42c]
mov edx, dword [ebp - 0x85c]
mov dword [ecx], edx
mov eax, dword [ebp - 0x42c]
mov dword [ebp - 0xda0], eax
mov dword [ebp - 4], 4
mov ecx, dword [ebp - 0x244]
mov edx, dword [ebp - 0x2dc]
mov dword [ecx], edx
mov eax, dword [ebp - 0x2dc]
mov ecx, dword [eax]
mov dword [ebp - 0x860], ecx
mov edx, dword [ebp - 0x244]
mov eax, dword [ebp - 0x860]
mov dword [edx + 4], eax
mov ecx, dword [ebp - 0x244]
cmp dword [ecx + 4], 0
jne 0x1008ae49
mov dword [ebp - 4], 0xffffffff
jmp 0x1008b083
mov dword [ebp - 0x328], 0
mov edx, dword [ebp - 0x244]
mov eax, dword [edx + 4]
mov ecx, dword [ebp - 0x328]
mov edx, dword [eax + ecx*4]
mov dword [ebp - 0x430], edx
cmp dword [ebp - 0x430], 0
jne 0x1008ae7d
mov byte [ebp - 0x210], 0
jmp 0x1008aed4
mov eax, dword [0x100f52d4]
mov dword [ebp - 0x864], eax
push 0x1c
lea ecx, [ebp - 0x18c]
push ecx
mov edx, dword [ebp - 0x430]
push edx
call dword [ebp - 0x864]
test eax, eax
jne 0x1008aeab
mov byte [ebp - 0x210], 0
jmp 0x1008aed4
mov eax, dword [ebp - 0x178]
and eax, 1
jne 0x1008aec4
mov ecx, dword [ebp - 0x178]
and ecx, 0x100
je 0x1008aecd
mov byte [ebp - 0x210], 0
jmp 0x1008aed4
mov byte [ebp - 0x210], 1
movzx edx, byte [ebp - 0x210]
test edx, edx
je 0x1008aef3
mov eax, dword [ebp - 0x328]
add eax, 1
mov dword [ebp - 0x328], eax
jmp 0x1008ae53
mov ecx, dword [ebp - 0x244]
mov edx, dword [ebp - 0x328]
mov dword [ecx + 0xc], edx
mov eax, dword [ebp - 0x244]
cmp dword [eax + 0xc], 0
jne 0x1008af1a
mov dword [ebp - 4], 0xffffffff
jmp 0x1008b083
mov ecx, 1
test ecx, ecx
je 0x1008af37
mov edx, dword [ebp - 0x244]
mov eax, dword [edx + 0xc]
add eax, 1
mov dword [ebp - 0x434], eax
jmp 0x1008af46
mov ecx, dword [ebp - 0x244]
mov edx, dword [ecx + 0xc]
mov dword [ebp - 0x434], edx
mov edx, dword [ebp - 0x434]
lea ecx, [ebp - 0x86c]
call fcn.1003a1e0
mov dword [ebp - 0x868], eax
mov eax, dword [ebp - 0x868]
push eax
mov ecx, dword [ebp - 0x244]
add ecx, 8
call fcn.1003a280
lea ecx, [ebp - 0x86c]
call fcn.10039c40
mov ecx, dword [ebp - 0x244]
add ecx, 8
call fcn.10039c20
movzx ecx, al
test ecx, ecx
jne 0x1008af9e
mov dword [ebp - 4], 0xffffffff
jmp 0x1008b083
mov ecx, dword [ebp - 0x244]
add ecx, 8
call fcn.1002aa60
mov dword [ebp - 0x870], eax
mov edx, dword [ebp - 0x870]
mov dword [ebp - 0x34], edx
mov eax, 1
test eax, eax
je 0x1008b037
mov ecx, dword [ebp - 0x34]
mov dword [ebp - 0x874], ecx
mov edx, dword [ebp - 0x244]
mov eax, dword [edx + 0xc]
lea ecx, [eax*4 + 4]
push ecx
mov edx, dword [ebp - 0x244]
mov eax, dword [edx + 4]
sub eax, 4
push eax
mov ecx, dword [ebp - 0x874]
push ecx
call sub.VCRUNTIME140.dll_memcpy
add esp, 0xc
mov edx, dword [ebp - 0x34]
mov dword [ebp - 0x878], edx
mov eax, dword [ebp - 0x878]
add eax, 4
mov dword [ebp - 0x87c], eax
cmp dword [ebp - 0x2dc], 0
jne 0x1008b01d
jmp 0x1008b02b
mov ecx, dword [ebp - 0x2dc]
mov edx, dword [ebp - 0x87c]
mov dword [ecx], edx
mov eax, dword [ebp - 0x244]
mov byte [eax + 0x10], 1
jmp 0x1008b07c
mov ecx, dword [ebp - 0x34]
mov dword [ebp - 0x880], ecx
mov edx, dword [ebp - 0x244]
mov eax, dword [edx + 0xc]
shl eax, 2
push eax
mov ecx, dword [ebp - 0x244]
mov edx, dword [ecx + 4]
push edx
mov eax, dword [ebp - 0x880]
push eax
call sub.VCRUNTIME140.dll_memcpy
add esp, 0xc
cmp dword [ebp - 0x2dc], 0
jne 0x1008b071
jmp 0x1008b07c
mov ecx, dword [ebp - 0x34]
mov edx, dword [ebp - 0x2dc]
mov dword [edx], ecx
mov dword [ebp - 4], 0xffffffff
mov eax, dword [ebp - 0x20c]
add eax, 0x14
mov dword [ebp - 0x2d8], eax
mov dword [ebp - 0x884], 0x1009ff20
mov ecx, dword [ebp - 0x2d8]
movzx edx, byte [ecx + 0x10]
test edx, edx
je 0x1008b0ba
mov eax, 0x11
add eax, 1
mov dword [ebp - 0x438], eax
jmp 0x1008b0c4
mov dword [ebp - 0x438], 0x11
mov ecx, dword [ebp - 0x438]
mov dword [ebp - 0x43c], ecx
mov edx, dword [ebp - 0x2d8]
cmp dword [edx + 4], 0
je 0x1008b102
mov ecx, dword [ebp - 0x2d8]
add ecx, 8
call fcn.10039c20
movzx eax, al
test eax, eax
je 0x1008b102
mov ecx, dword [ebp - 0x2d8]
mov edx, dword [ebp - 0x43c]
cmp edx, dword [ecx + 0xc]
jbe 0x1008b12e
mov dword [ebp - 0x394], 0
mov eax, dword [ebp - 0x1fc]
or eax, 0x100
mov dword [ebp - 0x1fc], eax
lea ecx, [ebp - 0x394]
mov dword [ebp - 0x8ac], ecx
jmp 0x1008b282
mov edx, dword [ebp - 0x884]
mov dword [ebp - 0x888], edx
mov eax, dword [ebp - 0x888]
mov dword [ebp - 0x890], eax
mov ecx, dword [ebp - 0x2d8]
add ecx, 8
mov dword [ebp - 0x88c], ecx
mov edx, dword [ebp - 0x43c]
push edx
mov ecx, dword [ebp - 0x88c]
call fcn.10039c30
mov ecx, dword [ebp - 0x890]
mov dword [eax], ecx
mov edx, 0x11
shl edx, 2
mov eax, dword [ebp - 0x2d8]
add edx, dword [eax + 4]
mov dword [ebp - 0x440], edx
mov ecx, dword [ebp - 0x440]
cmp dword [ecx], 0
je 0x1008b1d6
mov edx, dword [ebp - 0x440]
mov eax, dword [edx]
mov dword [ebp - 0x894], eax
mov ecx, dword [ebp - 0x894]
mov dword [ebp - 0x898], ecx
lea edx, [ebp - 0x898]
mov dword [ebp - 0x89c], edx
mov eax, dword [ebp - 0x1fc]
or eax, 0x200
mov dword [ebp - 0x1fc], eax
mov ecx, dword [ebp - 0x89c]
mov dword [ebp - 0x444], ecx
jmp 0x1008b209
mov dword [ebp - 0x8a0], 0
lea edx, [ebp - 0x8a0]
mov dword [ebp - 0x8a4], edx
mov eax, dword [ebp - 0x1fc]
or eax, 0x400
mov dword [ebp - 0x1fc], eax
mov ecx, dword [ebp - 0x8a4]
mov dword [ebp - 0x444], ecx
mov edx, dword [ebp - 0x444]
mov dword [ebp - 0x8a8], edx
mov eax, dword [ebp - 0x8a8]
mov ecx, dword [eax]
mov dword [ebp - 0x394], ecx
mov edx, dword [ebp - 0x1fc]
or edx, 0x800
mov dword [ebp - 0x1fc], edx
mov eax, dword [ebp - 0x1fc]
and eax, 0x400
je 0x1008b24c
and dword [ebp - 0x1fc], 0xfffffbff
mov ecx, dword [ebp - 0x1fc]
and ecx, 0x200
je 0x1008b264
and dword [ebp - 0x1fc], 0xfffffdff
mov edx, dword [ebp - 0x1fc]
or edx, 0x100
mov dword [ebp - 0x1fc], edx
lea eax, [ebp - 0x394]
mov dword [ebp - 0x8ac], eax
mov ecx, dword [ebp - 0x20c]
add ecx, 0x14
mov dword [ebp - 0x2d4], ecx
mov dword [ebp - 0x8b0], 0x1009ff50
mov edx, dword [ebp - 0x2d4]
movzx eax, byte [edx + 0x10]
test eax, eax
je 0x1008b2b9
mov ecx, 0x12
add ecx, 1
mov dword [ebp - 0x448], ecx
jmp 0x1008b2c3
mov dword [ebp - 0x448], 0x12
mov edx, dword [ebp - 0x448]
mov dword [ebp - 0x44c], edx
mov eax, dword [ebp - 0x2d4]
cmp dword [eax + 4], 0
je 0x1008b301
mov ecx, dword [ebp - 0x2d4]
add ecx, 8
call fcn.10039c20
movzx ecx, al
test ecx, ecx
je 0x1008b301
mov edx, dword [ebp - 0x2d4]
mov eax, dword [ebp - 0x44c]
cmp eax, dword [edx + 0xc]
jbe 0x1008b32e
mov dword [ebp - 0x398], 0
mov ecx, dword [ebp - 0x1fc]
or ecx, 0x1000
mov dword [ebp - 0x1fc], ecx
lea edx, [ebp - 0x398]
mov dword [ebp - 0x8d8], edx
jmp 0x1008b482
mov eax, dword [ebp - 0x8b0]
mov dword [ebp - 0x8b4], eax
mov ecx, dword [ebp - 0x8b4]
mov dword [ebp - 0x8bc], ecx
mov edx, dword [ebp - 0x2d4]
add edx, 8
mov dword [ebp - 0x8b8], edx
mov eax, dword [ebp - 0x44c]
push eax
mov ecx, dword [ebp - 0x8b8]
call fcn.10039c30
mov ecx, dword [ebp - 0x8bc]
mov dword [eax], ecx
mov edx, 0x12
shl edx, 2
mov eax, dword [ebp - 0x2d4]
add edx, dword [eax + 4]
mov dword [ebp - 0x450], edx
mov ecx, dword [ebp - 0x450]
cmp dword [ecx], 0
je 0x1008b3d6
mov edx, dword [ebp - 0x450]
mov eax, dword [edx]
mov dword [ebp - 0x8c0], eax
mov ecx, dword [ebp - 0x8c0]
mov dword [ebp - 0x8c4], ecx
lea edx, [ebp - 0x8c4]
mov dword [ebp - 0x8c8], edx
mov eax, dword [ebp - 0x1fc]
or eax, 0x2000
mov dword [ebp - 0x1fc], eax
mov ecx, dword [ebp - 0x8c8]
mov dword [ebp - 0x454], ecx
jmp 0x1008b409
mov dword [ebp - 0x8cc], 0
lea edx, [ebp - 0x8cc]
mov dword [ebp - 0x8d0], edx
mov eax, dword [ebp - 0x1fc]
or eax, 0x4000
mov dword [ebp - 0x1fc], eax
mov ecx, dword [ebp - 0x8d0]
mov dword [ebp - 0x454], ecx
mov edx, dword [ebp - 0x454]
mov dword [ebp - 0x8d4], edx
mov eax, dword [ebp - 0x8d4]
mov ecx, dword [eax]
mov dword [ebp - 0x398], ecx
mov edx, dword [ebp - 0x1fc]
or edx, 0x8000
mov dword [ebp - 0x1fc], edx
mov eax, dword [ebp - 0x1fc]
and eax, 0x4000
je 0x1008b44c
and dword [ebp - 0x1fc], 0xffffbfff
mov ecx, dword [ebp - 0x1fc]
and ecx, 0x2000
je 0x1008b464
and dword [ebp - 0x1fc], 0xffffdfff
mov edx, dword [ebp - 0x1fc]
or edx, 0x1000
mov dword [ebp - 0x1fc], edx
lea eax, [ebp - 0x398]
mov dword [ebp - 0x8d8], eax
mov ecx, dword [ebp - 0x20c]
add ecx, 0x14
mov dword [ebp - 0x2d0], ecx
mov dword [ebp - 0x8dc], 0x100a0020
mov edx, dword [ebp - 0x2d0]
movzx eax, byte [edx + 0x10]
test eax, eax
je 0x1008b4b9
mov ecx, 0x18
add ecx, 1
mov dword [ebp - 0x458], ecx
jmp 0x1008b4c3
mov dword [ebp - 0x458], 0x18
mov edx, dword [ebp - 0x458]
mov dword [ebp - 0x45c], edx
mov eax, dword [ebp - 0x2d0]
cmp dword [eax + 4], 0
je 0x1008b501
mov ecx, dword [ebp - 0x2d0]
add ecx, 8
call fcn.10039c20
movzx ecx, al
test ecx, ecx
je 0x1008b501
mov edx, dword [ebp - 0x2d0]
mov eax, dword [ebp - 0x45c]
cmp eax, dword [edx + 0xc]
jbe 0x1008b52e
mov dword [ebp - 0x39c], 0
mov ecx, dword [ebp - 0x1fc]
or ecx, 0x10000
mov dword [ebp - 0x1fc], ecx
lea edx, [ebp - 0x39c]
mov dword [ebp - 0x904], edx
jmp 0x1008b682
mov eax, dword [ebp - 0x8dc]
mov dword [ebp - 0x8e0], eax
mov ecx, dword [ebp - 0x8e0]
mov dword [ebp - 0x8e8], ecx
mov edx, dword [ebp - 0x2d0]
add edx, 8
mov dword [ebp - 0x8e4], edx
mov eax, dword [ebp - 0x45c]
push eax
mov ecx, dword [ebp - 0x8e4]
call fcn.10039c30
mov ecx, dword [ebp - 0x8e8]
mov dword [eax], ecx
mov edx, 0x18
shl edx, 2
mov eax, dword [ebp - 0x2d0]
add edx, dword [eax + 4]
mov dword [ebp - 0x460], edx
mov ecx, dword [ebp - 0x460]
cmp dword [ecx], 0
je 0x1008b5d6
mov edx, dword [ebp - 0x460]
mov eax, dword [edx]
mov dword [ebp - 0x8ec], eax
mov ecx, dword [ebp - 0x8ec]
mov dword [ebp - 0x8f0], ecx
lea edx, [ebp - 0x8f0]
mov dword [ebp - 0x8f4], edx
mov eax, dword [ebp - 0x1fc]
or eax, 0x20000
mov dword [ebp - 0x1fc], eax
mov ecx, dword [ebp - 0x8f4]
mov dword [ebp - 0x464], ecx
jmp 0x1008b609
mov dword [ebp - 0x8f8], 0
lea edx, [ebp - 0x8f8]
mov dword [ebp - 0x8fc], edx
mov eax, dword [ebp - 0x1fc]
or eax, 0x40000
mov dword [ebp - 0x1fc], eax
mov ecx, dword [ebp - 0x8fc]
mov dword [ebp - 0x464], ecx
mov edx, dword [ebp - 0x464]
mov dword [ebp - 0x900], edx
mov eax, dword [ebp - 0x900]
mov ecx, dword [eax]
mov dword [ebp - 0x39c], ecx
mov edx, dword [ebp - 0x1fc]
or edx, 0x80000
mov dword [ebp - 0x1fc], edx
mov eax, dword [ebp - 0x1fc]
and eax, 0x40000
je 0x1008b64c
and dword [ebp - 0x1fc], 0xfffbffff
mov ecx, dword [ebp - 0x1fc]
and ecx, 0x20000
je 0x1008b664
and dword [ebp - 0x1fc], 0xfffdffff
mov edx, dword [ebp - 0x1fc]
or edx, 0x10000
mov dword [ebp - 0x1fc], edx
lea eax, [ebp - 0x39c]
mov dword [ebp - 0x904], eax
mov ecx, dword [ebp - 0x20c]
add ecx, 0x14
mov dword [ebp - 0x2cc], ecx
mov dword [ebp - 0x908], 0x100a0190
mov edx, dword [ebp - 0x2cc]
movzx eax, byte [edx + 0x10]
test eax, eax
je 0x1008b6b9
mov ecx, 0x2c
add ecx, 1
mov dword [ebp - 0x468], ecx
jmp 0x1008b6c3
mov dword [ebp - 0x468], 0x2c
mov edx, dword [ebp - 0x468]
mov dword [ebp - 0x46c], edx
mov eax, dword [ebp - 0x2cc]
cmp dword [eax + 4], 0
je 0x1008b701
mov ecx, dword [ebp - 0x2cc]
add ecx, 8
call fcn.10039c20
movzx ecx, al
test ecx, ecx
je 0x1008b701
mov edx, dword [ebp - 0x2cc]
mov eax, dword [ebp - 0x46c]
cmp eax, dword [edx + 0xc]
jbe 0x1008b72e
mov dword [ebp - 0x3a0], 0
mov ecx, dword [ebp - 0x1fc]
or ecx, 0x100000
mov dword [ebp - 0x1fc], ecx
lea edx, [ebp - 0x3a0]
mov dword [ebp - 0x930], edx
jmp 0x1008b882
mov eax, dword [ebp - 0x908]
mov dword [ebp - 0x90c], eax
mov ecx, dword [ebp - 0x90c]
mov dword [ebp - 0x914], ecx
mov edx, dword [ebp - 0x2cc]
add edx, 8
mov dword [ebp - 0x910], edx
mov eax, dword [ebp - 0x46c]
push eax
mov ecx, dword [ebp - 0x910]
call fcn.10039c30
mov ecx, dword [ebp - 0x914]
mov dword [eax], ecx
mov edx, 0x2c
shl edx, 2
mov eax, dword [ebp - 0x2cc]
add edx, dword [eax + 4]
mov dword [ebp - 0x470], edx
mov ecx, dword [ebp - 0x470]
cmp dword [ecx], 0
je 0x1008b7d6
mov edx, dword [ebp - 0x470]
mov eax, dword [edx]
mov dword [ebp - 0x918], eax
mov ecx, dword [ebp - 0x918]
mov dword [ebp - 0x91c], ecx
lea edx, [ebp - 0x91c]
mov dword [ebp - 0x920], edx
mov eax, dword [ebp - 0x1fc]
or eax, 0x200000
mov dword [ebp - 0x1fc], eax
mov ecx, dword [ebp - 0x920]
mov dword [ebp - 0x474], ecx
jmp 0x1008b809
mov dword [ebp - 0x924], 0
lea edx, [ebp - 0x924]
mov dword [ebp - 0x928], edx
mov eax, dword [ebp - 0x1fc]
or eax, 0x400000
mov dword [ebp - 0x1fc], eax
mov ecx, dword [ebp - 0x928]
mov dword [ebp - 0x474], ecx
mov edx, dword [ebp - 0x474]
mov dword [ebp - 0x92c], edx
mov eax, dword [ebp - 0x92c]
mov ecx, dword [eax]
mov dword [ebp - 0x3a0], ecx
mov edx, dword [ebp - 0x1fc]
or edx, 0x800000
mov dword [ebp - 0x1fc], edx
mov eax, dword [ebp - 0x1fc]
and eax, 0x400000
je 0x1008b84c
and dword [ebp - 0x1fc], 0xffbfffff
mov ecx, dword [ebp - 0x1fc]
and ecx, 0x200000
je 0x1008b864
and dword [ebp - 0x1fc], 0xffdfffff
mov edx, dword [ebp - 0x1fc]
or edx, 0x100000
mov dword [ebp - 0x1fc], edx
lea eax, [ebp - 0x3a0]
mov dword [ebp - 0x930], eax
mov ecx, dword [ebp - 0x20c]
add ecx, 0x8c
mov dword [ebp - 0x248], ecx
mov edx, dword [0x10164550]
mov dword [ebp - 0x934], edx
lea eax, [ebp - 0x2c8]
mov dword [ebp - 0x478], eax
mov ecx, dword [ebp - 0x478]
mov edx, dword [ebp - 0x934]
mov dword [ecx], edx
mov eax, dword [ebp - 0x478]
mov dword [ebp - 0xda4], eax
mov dword [ebp - 4], 5
mov ecx, dword [ebp - 0x248]
mov edx, dword [ebp - 0x2c8]
mov dword [ecx], edx
mov eax, dword [ebp - 0x2c8]
mov ecx, dword [eax]
mov dword [ebp - 0x938], ecx
mov edx, dword [ebp - 0x248]
mov eax, dword [ebp - 0x938]
mov dword [edx + 4], eax
mov ecx, dword [ebp - 0x248]
cmp dword [ecx + 4], 0
jne 0x1008b910
mov dword [ebp - 4], 0xffffffff
jmp 0x1008bb4a
mov dword [ebp - 0x32c], 0
mov edx, dword [ebp - 0x248]
mov eax, dword [edx + 4]
mov ecx, dword [ebp - 0x32c]
mov edx, dword [eax + ecx*4]
mov dword [ebp - 0x47c], edx
cmp dword [ebp - 0x47c], 0
jne 0x1008b944
mov byte [ebp - 0x211], 0
jmp 0x1008b99b
mov eax, dword [0x100f52d4]
mov dword [ebp - 0x93c], eax
push 0x1c
lea ecx, [ebp - 0x1e0]
push ecx
mov edx, dword [ebp - 0x47c]
push edx
call dword [ebp - 0x93c]
test eax, eax
jne 0x1008b972
mov byte [ebp - 0x211], 0
jmp 0x1008b99b
mov eax, dword [ebp - 0x1cc]
and eax, 1
jne 0x1008b98b
mov ecx, dword [ebp - 0x1cc]
and ecx, 0x100
je 0x1008b994
mov byte [ebp - 0x211], 0
jmp 0x1008b99b
mov byte [ebp - 0x211], 1
movzx edx, byte [ebp - 0x211]
test edx, edx
je 0x1008b9ba
mov eax, dword [ebp - 0x32c]
add eax, 1
mov dword [ebp - 0x32c], eax
jmp 0x1008b91a
mov ecx, dword [ebp - 0x248]
mov edx, dword [ebp - 0x32c]
mov dword [ecx + 0xc], edx
mov eax, dword [ebp - 0x248]
cmp dword [eax + 0xc], 0
jne 0x1008b9e1
mov dword [ebp - 4], 0xffffffff
jmp 0x1008bb4a
mov ecx, 1
test ecx, ecx
je 0x1008b9fe
mov edx, dword [ebp - 0x248]
mov eax, dword [edx + 0xc]
add eax, 1
mov dword [ebp - 0x480], eax
jmp 0x1008ba0d
mov ecx, dword [ebp - 0x248]
mov edx, dword [ecx + 0xc]
mov dword [ebp - 0x480], edx
mov edx, dword [ebp - 0x480]
lea ecx, [ebp - 0x944]
call fcn.1003a1e0
mov dword [ebp - 0x940], eax
mov eax, dword [ebp - 0x940]
push eax
mov ecx, dword [ebp - 0x248]
add ecx, 8
call fcn.1003a280
lea ecx, [ebp - 0x944]
call fcn.10039c40
mov ecx, dword [ebp - 0x248]
add ecx, 8
call fcn.10039c20
movzx ecx, al
test ecx, ecx
jne 0x1008ba65
mov dword [ebp - 4], 0xffffffff
jmp 0x1008bb4a
mov ecx, dword [ebp - 0x248]
add ecx, 8
call fcn.1002aa60
mov dword [ebp - 0x948], eax
mov edx, dword [ebp - 0x948]
mov dword [ebp - 0x30], edx
mov eax, 1
test eax, eax
je 0x1008bafe
mov ecx, dword [ebp - 0x30]
mov dword [ebp - 0x94c], ecx
mov edx, dword [ebp - 0x248]
mov eax, dword [edx + 0xc]
lea ecx, [eax*4 + 4]
push ecx
mov edx, dword [ebp - 0x248]
mov eax, dword [edx + 4]
sub eax, 4
push eax
mov ecx, dword [ebp - 0x94c]
push ecx
call sub.VCRUNTIME140.dll_memcpy
add esp, 0xc
mov edx, dword [ebp - 0x30]
mov dword [ebp - 0x950], edx
mov eax, dword [ebp - 0x950]
add eax, 4
mov dword [ebp - 0x954], eax
cmp dword [ebp - 0x2c8], 0
jne 0x1008bae4
jmp 0x1008baf2
mov ecx, dword [ebp - 0x2c8]
mov edx, dword [ebp - 0x954]
mov dword [ecx], edx
mov eax, dword [ebp - 0x248]
mov byte [eax + 0x10], 1
jmp 0x1008bb43
mov ecx, dword [ebp - 0x30]
mov dword [ebp - 0x958], ecx
mov edx, dword [ebp - 0x248]
mov eax, dword [edx + 0xc]
shl eax, 2
push eax
mov ecx, dword [ebp - 0x248]
mov edx, dword [ecx + 4]
push edx
mov eax, dword [ebp - 0x958]
push eax
call sub.VCRUNTIME140.dll_memcpy
add esp, 0xc
cmp dword [ebp - 0x2c8], 0
jne 0x1008bb38
jmp 0x1008bb43
mov ecx, dword [ebp - 0x30]
mov edx, dword [ebp - 0x2c8]
mov dword [edx], ecx
mov dword [ebp - 4], 0xffffffff
mov eax, dword [ebp - 0x20c]
add eax, 0x8c
mov dword [ebp - 0x2b4], eax
mov dword [ebp - 0x95c], 0x1009d1b0
mov ecx, dword [ebp - 0x2b4]
movzx edx, byte [ecx + 0x10]
test edx, edx
je 0x1008bb83
mov eax, 0x43
add eax, 1
mov dword [ebp - 0x484], eax
jmp 0x1008bb8d
mov dword [ebp - 0x484], 0x43
mov ecx, dword [ebp - 0x484]
mov dword [ebp - 0x488], ecx
mov edx, dword [ebp - 0x2b4]
cmp dword [edx + 4], 0
je 0x1008bbcb
mov ecx, dword [ebp - 0x2b4]
add ecx, 8
call fcn.10039c20
movzx eax, al
test eax, eax
je 0x1008bbcb
mov ecx, dword [ebp - 0x2b4]
mov edx, dword [ebp - 0x488]
cmp edx, dword [ecx + 0xc]
jbe 0x1008bbf7
mov dword [ebp - 0x3a4], 0
mov eax, dword [ebp - 0x1fc]
or eax, 0x1000000
mov dword [ebp - 0x1fc], eax
lea ecx, [ebp - 0x3a4]
mov dword [ebp - 0x984], ecx
jmp 0x1008bd4b
mov edx, dword [ebp - 0x95c]
mov dword [ebp - 0x960], edx
mov eax, dword [ebp - 0x960]
mov dword [ebp - 0x968], eax
mov ecx, dword [ebp - 0x2b4]
add ecx, 8
mov dword [ebp - 0x964], ecx
mov edx, dword [ebp - 0x488]
push edx
mov ecx, dword [ebp - 0x964]
call fcn.10039c30
mov ecx, dword [ebp - 0x968]
mov dword [eax], ecx
mov edx, 0x43
shl edx, 2
mov eax, dword [ebp - 0x2b4]
add edx, dword [eax + 4]
mov dword [ebp - 0x48c], edx
mov ecx, dword [ebp - 0x48c]
cmp dword [ecx], 0
je 0x1008bc9f
mov edx, dword [ebp - 0x48c]
mov eax, dword [edx]
mov dword [ebp - 0x96c], eax
mov ecx, dword [ebp - 0x96c]
mov dword [ebp - 0x970], ecx
lea edx, [ebp - 0x970]
mov dword [ebp - 0x974], edx
mov eax, dword [ebp - 0x1fc]
or eax, 0x2000000
mov dword [ebp - 0x1fc], eax
mov ecx, dword [ebp - 0x974]
mov dword [ebp - 0x490], ecx
jmp 0x1008bcd2
mov dword [ebp - 0x978], 0
lea edx, [ebp - 0x978]
mov dword [ebp - 0x97c], edx
mov eax, dword [ebp - 0x1fc]
or eax, 0x4000000
mov dword [ebp - 0x1fc], eax
mov ecx, dword [ebp - 0x97c]
mov dword [ebp - 0x490], ecx
mov edx, dword [ebp - 0x490]
mov dword [ebp - 0x980], edx
mov eax, dword [ebp - 0x980]
mov ecx, dword [eax]
mov dword [ebp - 0x3a4], ecx
mov edx, dword [ebp - 0x1fc]
or edx, 0x8000000
mov dword [ebp - 0x1fc], edx
mov eax, dword [ebp - 0x1fc]
and eax, 0x4000000
je 0x1008bd15
and dword [ebp - 0x1fc], 0xfbffffff
mov ecx, dword [ebp - 0x1fc]
and ecx, 0x2000000
je 0x1008bd2d
and dword [ebp - 0x1fc], 0xfdffffff
mov edx, dword [ebp - 0x1fc]
or edx, 0x1000000
mov dword [ebp - 0x1fc], edx
lea eax, [ebp - 0x3a4]
mov dword [ebp - 0x984], eax
mov ecx, dword [ebp - 0x20c]
add ecx, 0x8c
mov dword [ebp - 0x2b0], ecx
mov dword [ebp - 0x988], 0x1009d200
mov edx, dword [ebp - 0x2b0]
movzx eax, byte [edx + 0x10]
test eax, eax
je 0x1008bd85
mov ecx, 0x52
add ecx, 1
mov dword [ebp - 0x494], ecx
jmp 0x1008bd8f
mov dword [ebp - 0x494], 0x52
mov edx, dword [ebp - 0x494]
mov dword [ebp - 0x498], edx
mov eax, dword [ebp - 0x2b0]
cmp dword [eax + 4], 0
je 0x1008bdcd
mov ecx, dword [ebp - 0x2b0]
add ecx, 8
call fcn.10039c20
movzx ecx, al
test ecx, ecx
je 0x1008bdcd
mov edx, dword [ebp - 0x2b0]
mov eax, dword [ebp - 0x498]
cmp eax, dword [edx + 0xc]
jbe 0x1008bdfa
mov dword [ebp - 0x334], 0
mov ecx, dword [ebp - 0x1fc]
or ecx, 0x10000000
mov dword [ebp - 0x1fc], ecx
lea edx, [ebp - 0x334]
mov dword [ebp - 0x9b0], edx
jmp 0x1008bf4e
mov eax, dword [ebp - 0x988]
mov dword [ebp - 0x98c], eax
mov ecx, dword [ebp - 0x98c]
mov dword [ebp - 0x994], ecx
mov edx, dword [ebp - 0x2b0]
add edx, 8
mov dword [ebp - 0x990], edx
mov eax, dword [ebp - 0x498]
push eax
mov ecx, dword [ebp - 0x990]
call fcn.10039c30
mov ecx, dword [ebp - 0x994]
mov dword [eax], ecx
mov edx, 0x52
shl edx, 2
mov eax, dword [ebp - 0x2b0]
add edx, dword [eax + 4]
mov dword [ebp - 0x49c], edx
mov ecx, dword [ebp - 0x49c]
cmp dword [ecx], 0
je 0x1008bea2
mov edx, dword [ebp - 0x49c]
mov eax, dword [edx]
mov dword [ebp - 0x998], eax
mov ecx, dword [ebp - 0x998]
mov dword [ebp - 0x99c], ecx
lea edx, [ebp - 0x99c]
mov dword [ebp - 0x9a0], edx
mov eax, dword [ebp - 0x1fc]
or eax, 0x20000000
mov dword [ebp - 0x1fc], eax
mov ecx, dword [ebp - 0x9a0]
mov dword [ebp - 0x4a0], ecx
jmp 0x1008bed5
mov dword [ebp - 0x9a4], 0
lea edx, [ebp - 0x9a4]
mov dword [ebp - 0x9a8], edx
mov eax, dword [ebp - 0x1fc]
or eax, 0x40000000
mov dword [ebp - 0x1fc], eax
mov ecx, dword [ebp - 0x9a8]
mov dword [ebp - 0x4a0], ecx
mov edx, dword [ebp - 0x4a0]
mov dword [ebp - 0x9ac], edx
mov eax, dword [ebp - 0x9ac]
mov ecx, dword [eax]
mov dword [ebp - 0x334], ecx
mov edx, dword [ebp - 0x1fc]
or edx, 0x80000000
mov dword [ebp - 0x1fc], edx
mov eax, dword [ebp - 0x1fc]
and eax, 0x40000000
je 0x1008bf18
and dword [ebp - 0x1fc], 0xbfffffff
mov ecx, dword [ebp - 0x1fc]
and ecx, 0x20000000
je 0x1008bf30
and dword [ebp - 0x1fc], 0xdfffffff
mov edx, dword [ebp - 0x1fc]
or edx, 0x10000000
mov dword [ebp - 0x1fc], edx
lea eax, [ebp - 0x334]
mov dword [ebp - 0x9b0], eax
mov ecx, dword [ebp - 0x20c]
add ecx, 0x8c
mov dword [ebp - 0x2c4], ecx
mov dword [ebp - 0x9b4], 0x1009d290
mov edx, dword [ebp - 0x2c4]
movzx eax, byte [edx + 0x10]
test eax, eax
je 0x1008bf88
mov ecx, 0x74
add ecx, 1
mov dword [ebp - 0x4a4], ecx
jmp 0x1008bf92
mov dword [ebp - 0x4a4], 0x74
mov edx, dword [ebp - 0x4a4]
mov dword [ebp - 0x4a8], edx
mov eax, dword [ebp - 0x2c4]
cmp dword [eax + 4], 0
je 0x1008bfd0
mov ecx, dword [ebp - 0x2c4]
add ecx, 8
call fcn.10039c20
movzx ecx, al
test ecx, ecx
je 0x1008bfd0
mov edx, dword [ebp - 0x2c4]
mov eax, dword [ebp - 0x4a8]
cmp eax, dword [edx + 0xc]
jbe 0x1008bffa
mov dword [ebp - 0x338], 0
mov ecx, dword [ebp - 0x200]
or ecx, 1
mov dword [ebp - 0x200], ecx
lea edx, [ebp - 0x338]
mov dword [ebp - 0x9dc], edx
jmp 0x1008c139
mov eax, dword [ebp - 0x9b4]
mov dword [ebp - 0x9b8], eax
mov ecx, dword [ebp - 0x9b8]
mov dword [ebp - 0x9c0], ecx
mov edx, dword [ebp - 0x2c4]
add edx, 8
mov dword [ebp - 0x9bc], edx
mov eax, dword [ebp - 0x4a8]
push eax
mov ecx, dword [ebp - 0x9bc]
call fcn.10039c30
mov ecx, dword [ebp - 0x9c0]
mov dword [eax], ecx
mov edx, 0x74
shl edx, 2
mov eax, dword [ebp - 0x2c4]
add edx, dword [eax + 4]
mov dword [ebp - 0x4ac], edx
mov ecx, dword [ebp - 0x4ac]
cmp dword [ecx], 0
je 0x1008c0a0
mov edx, dword [ebp - 0x4ac]
mov eax, dword [edx]
mov dword [ebp - 0x9c4], eax
mov ecx, dword [ebp - 0x9c4]
mov dword [ebp - 0x9c8], ecx
lea edx, [ebp - 0x9c8]
mov dword [ebp - 0x9cc], edx
mov eax, dword [ebp - 0x200]
or eax, 2
mov dword [ebp - 0x200], eax
mov ecx, dword [ebp - 0x9cc]
mov dword [ebp - 0x4b0], ecx
jmp 0x1008c0d1
mov dword [ebp - 0x9d0], 0
lea edx, [ebp - 0x9d0]
mov dword [ebp - 0x9d4], edx
mov eax, dword [ebp - 0x200]
or eax, 4
mov dword [ebp - 0x200], eax
mov ecx, dword [ebp - 0x9d4]
mov dword [ebp - 0x4b0], ecx
mov edx, dword [ebp - 0x4b0]
mov dword [ebp - 0x9d8], edx
mov eax, dword [ebp - 0x9d8]
mov ecx, dword [eax]
mov dword [ebp - 0x338], ecx
mov edx, dword [ebp - 0x200]
or edx, 8
mov dword [ebp - 0x200], edx
mov eax, dword [ebp - 0x200]
and eax, 4
je 0x1008c10c
and dword [ebp - 0x200], 0xfffffffb
mov ecx, dword [ebp - 0x200]
and ecx, 2
je 0x1008c11e
and dword [ebp - 0x200], 0xfffffffd
mov edx, dword [ebp - 0x200]
or edx, 1
mov dword [ebp - 0x200], edx
lea eax, [ebp - 0x338]
mov dword [ebp - 0x9dc], eax
mov ecx, dword [ebp - 0x20c]
add ecx, 0xdc
mov dword [ebp - 0x24c], ecx
mov edx, dword [0x10164570]
mov dword [ebp - 0x9e0], edx
lea eax, [ebp - 0x2c0]
mov dword [ebp - 0x4b4], eax
mov ecx, dword [ebp - 0x4b4]
mov edx, dword [ebp - 0x9e0]
mov dword [ecx], edx
mov eax, dword [ebp - 0x4b4]
mov dword [ebp - 0xda8], eax
mov dword [ebp - 4], 6
mov ecx, dword [ebp - 0x24c]
mov edx, dword [ebp - 0x2c0]
mov dword [ecx], edx
mov eax, dword [ebp - 0x2c0]
mov ecx, dword [eax]
mov dword [ebp - 0x9e4], ecx
mov edx, dword [ebp - 0x24c]
mov eax, dword [ebp - 0x9e4]
mov dword [edx + 4], eax
mov ecx, dword [ebp - 0x24c]
cmp dword [ecx + 4], 0
jne 0x1008c1c7
mov dword [ebp - 4], 0xffffffff
jmp 0x1008c401
mov dword [ebp - 0x330], 0
mov edx, dword [ebp - 0x24c]
mov eax, dword [edx + 4]
mov ecx, dword [ebp - 0x330]
mov edx, dword [eax + ecx*4]
mov dword [ebp - 0x4b8], edx
cmp dword [ebp - 0x4b8], 0
jne 0x1008c1fb
mov byte [ebp - 0x212], 0
jmp 0x1008c252
mov eax, dword [0x100f52d4]
mov dword [ebp - 0x9e8], eax
push 0x1c
lea ecx, [ebp - 0xe4]
push ecx
mov edx, dword [ebp - 0x4b8]
push edx
call dword [ebp - 0x9e8]
test eax, eax
jne 0x1008c229
mov byte [ebp - 0x212], 0
jmp 0x1008c252
mov eax, dword [ebp - 0xd0]
and eax, 1
jne 0x1008c242
mov ecx, dword [ebp - 0xd0]
and ecx, 0x100
je 0x1008c24b
mov byte [ebp - 0x212], 0
jmp 0x1008c252
mov byte [ebp - 0x212], 1
movzx edx, byte [ebp - 0x212]
test edx, edx
je 0x1008c271
mov eax, dword [ebp - 0x330]
add eax, 1
mov dword [ebp - 0x330], eax
jmp 0x1008c1d1
mov ecx, dword [ebp - 0x24c]
mov edx, dword [ebp - 0x330]
mov dword [ecx + 0xc], edx
mov eax, dword [ebp - 0x24c]
cmp dword [eax + 0xc], 0
jne 0x1008c298
mov dword [ebp - 4], 0xffffffff
jmp 0x1008c401
mov ecx, 1
test ecx, ecx
je 0x1008c2b5
mov edx, dword [ebp - 0x24c]
mov eax, dword [edx + 0xc]
add eax, 1
mov dword [ebp - 0x4bc], eax
jmp 0x1008c2c4
mov ecx, dword [ebp - 0x24c]
mov edx, dword [ecx + 0xc]
mov dword [ebp - 0x4bc], edx
mov edx, dword [ebp - 0x4bc]
lea ecx, [ebp - 0x9f0]
call fcn.1003a1e0
mov dword [ebp - 0x9ec], eax
mov eax, dword [ebp - 0x9ec]
push eax
mov ecx, dword [ebp - 0x24c]
add ecx, 8
call fcn.1003a280
lea ecx, [ebp - 0x9f0]
call fcn.10039c40
mov ecx, dword [ebp - 0x24c]
add ecx, 8
call fcn.10039c20
movzx ecx, al
test ecx, ecx
jne 0x1008c31c
mov dword [ebp - 4], 0xffffffff
jmp 0x1008c401
mov ecx, dword [ebp - 0x24c]
add ecx, 8
call fcn.1002aa60
mov dword [ebp - 0x9f4], eax
mov edx, dword [ebp - 0x9f4]
mov dword [ebp - 0x2c], edx
mov eax, 1
test eax, eax
je 0x1008c3b5
mov ecx, dword [ebp - 0x2c]
mov dword [ebp - 0x9f8], ecx
mov edx, dword [ebp - 0x24c]
mov eax, dword [edx + 0xc]
lea ecx, [eax*4 + 4]
push ecx
mov edx, dword [ebp - 0x24c]
mov eax, dword [edx + 4]
sub eax, 4
push eax
mov ecx, dword [ebp - 0x9f8]
push ecx
call sub.VCRUNTIME140.dll_memcpy
add esp, 0xc
mov edx, dword [ebp - 0x2c]
mov dword [ebp - 0x9fc], edx
mov eax, dword [ebp - 0x9fc]
add eax, 4
mov dword [ebp - 0xa00], eax
cmp dword [ebp - 0x2c0], 0
jne 0x1008c39b
jmp 0x1008c3a9
mov ecx, dword [ebp - 0x2c0]
mov edx, dword [ebp - 0xa00]
mov dword [ecx], edx
mov eax, dword [ebp - 0x24c]
mov byte [eax + 0x10], 1
jmp 0x1008c3fa
mov ecx, dword [ebp - 0x2c]
mov dword [ebp - 0xa04], ecx
mov edx, dword [ebp - 0x24c]
mov eax, dword [edx + 0xc]
shl eax, 2
push eax
mov ecx, dword [ebp - 0x24c]
mov edx, dword [ecx + 4]
push edx
mov eax, dword [ebp - 0xa04]
push eax
call sub.VCRUNTIME140.dll_memcpy
add esp, 0xc
cmp dword [ebp - 0x2c0], 0
jne 0x1008c3ef
jmp 0x1008c3fa
mov ecx, dword [ebp - 0x2c]
mov edx, dword [ebp - 0x2c0]
mov dword [edx], ecx
mov dword [ebp - 4], 0xffffffff
mov eax, dword [ebp - 0x20c]
add eax, 0xdc
mov dword [ebp - 0x2bc], eax
mov dword [ebp - 0xa08], 0x10083260
mov ecx, dword [ebp - 0x2bc]
movzx edx, byte [ecx + 0x10]
test edx, edx
je 0x1008c43a