Function at 0x1008a530
Capabilities:
Inspect section memory permissions

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x100c605f
mov eax, dword fs:[0]
push eax
mov eax, 0x10dc
call fcn.100bdaf0
mov eax, dword [0x100dc040]
xor eax, ebp
mov dword [ebp - 0x10], eax
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov dword [ebp - 0x20c], ecx
mov dword [ebp - 0x200], 0
mov dword [ebp - 0x204], 0
mov dword [ebp - 0x1fc], 0
mov dword [ebp - 0x208], 0
mov eax, dword [0x100f81f8]
mov dword [ebp - 0xe94], eax
mov dword [ebp - 0xc68], 0x100bbf00
mov ecx, dword [ebp - 0xc68]
mov dword [ebp - 0xe6c], ecx
mov edx, dword [ebp - 0xe6c]
mov dword [ebp - 0xe74], edx
mov eax, dword [0x101674fc]
mov ecx, dword [eax + 8]
mov dword [ebp - 0xe8c], ecx
mov edx, dword [ebp - 0xe74]
push edx
push 0xfffffffffffffffc
mov eax, dword [ebp - 0xe8c]
push eax
call dword [ebp - 0xe94]
mov ecx, dword [ebp - 0x20c]
mov dword [ecx + 0x67c], eax
mov edx, dword [ebp - 0x20c]
mov dword [ebp - 0x24c], edx
mov eax, dword [0x10167494]
mov dword [ebp - 0xef0], eax
lea ecx, [ebp - 0x2b0]
mov dword [ebp - 0x4fc], ecx
mov edx, dword [ebp - 0x4fc]
mov eax, dword [ebp - 0xef0]
mov dword [edx], eax
mov ecx, dword [ebp - 0x4fc]
mov dword [ebp - 0xef4], ecx
mov edx, dword [ebp - 0xef4]
mov dword [ebp - 0xfb0], edx
mov dword [ebp - 4], 0
mov eax, dword [ebp - 0x24c]
mov ecx, dword [ebp - 0x2b0]
mov dword [eax], ecx
mov edx, dword [ebp - 0x2b0]
mov eax, dword [edx]
mov dword [ebp - 0xef8], eax
mov ecx, dword [ebp - 0xef8]
mov edx, dword [ebp - 0x24c]
mov dword [edx + 4], ecx
mov eax, dword [ebp - 0x24c]
cmp dword [eax + 4], 0
jne 0x1008a67d
mov dword [ebp - 4], 0xffffffff
jmp 0x1008a8cf
mov dword [ebp - 0x2fc], 0
mov ecx, dword [ebp - 0x24c]
mov edx, dword [ecx + 4]
mov eax, dword [ebp - 0x2fc]
mov ecx, dword [edx + eax*4]
mov dword [ebp - 0xefc], ecx
mov edx, dword [ebp - 0xefc]
mov dword [ebp - 0x5f0], edx
cmp dword [ebp - 0x5f0], 0
jne 0x1008a6bd
mov byte [ebp - 0x21a], 0
jmp 0x1008a714
mov eax, dword [0x100f81f4]
mov dword [ebp - 0xf00], eax
push 0x1c
lea ecx, [ebp - 0x1e0]
push ecx
mov edx, dword [ebp - 0x5f0]
push edx
call dword [ebp - 0xf00]
test eax, eax
jne 0x1008a6eb
mov byte [ebp - 0x21a], 0
jmp 0x1008a714
mov eax, dword [ebp - 0x1cc]
and eax, 1
jne 0x1008a704
mov ecx, dword [ebp - 0x1cc]
and ecx, 0x100
je 0x1008a70d
mov byte [ebp - 0x21a], 0
jmp 0x1008a714
mov byte [ebp - 0x21a], 1
movzx edx, byte [ebp - 0x21a]
test edx, edx
je 0x1008a733
mov eax, dword [ebp - 0x2fc]
add eax, 1
mov dword [ebp - 0x2fc], eax
jmp 0x1008a687
mov ecx, dword [ebp - 0x2fc]
mov dword [ebp - 0xf04], ecx
mov edx, dword [ebp - 0xf04]
mov eax, dword [ebp - 0x24c]
mov dword [eax + 0xc], edx
mov ecx, dword [ebp - 0x24c]
cmp dword [ecx + 0xc], 0
jne 0x1008a766
mov dword [ebp - 4], 0xffffffff
jmp 0x1008a8cf
mov edx, 1
test edx, edx
je 0x1008a783
mov eax, dword [ebp - 0x24c]
mov ecx, dword [eax + 0xc]
add ecx, 1
mov dword [ebp - 0x5f4], ecx
jmp 0x1008a792
mov edx, dword [ebp - 0x24c]
mov eax, dword [edx + 0xc]
mov dword [ebp - 0x5f4], eax
mov edx, dword [ebp - 0x5f4]
lea ecx, [ebp - 0xf0c]
call fcn.1003c4d0
mov dword [ebp - 0xf08], eax
mov ecx, dword [ebp - 0xf08]
push ecx
mov ecx, dword [ebp - 0x24c]
add ecx, 8
call fcn.1003c560
lea ecx, [ebp - 0xf0c]
call fcn.1003bf30
mov ecx, dword [ebp - 0x24c]
add ecx, 8
call fcn.1003bf10
movzx edx, al
test edx, edx
jne 0x1008a7ea
mov dword [ebp - 4], 0xffffffff
jmp 0x1008a8cf
mov ecx, dword [ebp - 0x24c]
add ecx, 8
call fcn.1002c280
mov dword [ebp - 0xf10], eax
mov eax, dword [ebp - 0xf10]
mov dword [ebp - 0x14], eax
mov ecx, 1
test ecx, ecx
je 0x1008a883
mov edx, dword [ebp - 0x14]
mov dword [ebp - 0xf14], edx
mov eax, dword [ebp - 0x24c]
mov ecx, dword [eax + 0xc]
lea edx, [ecx*4 + 4]
push edx
mov eax, dword [ebp - 0x24c]
mov ecx, dword [eax + 4]
sub ecx, 4
push ecx
mov edx, dword [ebp - 0xf14]
push edx
call sub.VCRUNTIME140.dll_memcpy
add esp, 0xc
mov eax, dword [ebp - 0x14]
mov dword [ebp - 0xf18], eax
mov ecx, dword [ebp - 0xf18]
add ecx, 4
mov dword [ebp - 0xf1c], ecx
cmp dword [ebp - 0x2b0], 0
jne 0x1008a869
jmp 0x1008a877
mov edx, dword [ebp - 0x2b0]
mov eax, dword [ebp - 0xf1c]
mov dword [edx], eax
mov ecx, dword [ebp - 0x24c]
mov byte [ecx + 0x10], 1
jmp 0x1008a8c8
mov edx, dword [ebp - 0x14]
mov dword [ebp - 0xf20], edx
mov eax, dword [ebp - 0x24c]
mov ecx, dword [eax + 0xc]
shl ecx, 2
push ecx
mov edx, dword [ebp - 0x24c]
mov eax, dword [edx + 4]
push eax
mov ecx, dword [ebp - 0xf20]
push ecx
call sub.VCRUNTIME140.dll_memcpy
add esp, 0xc
cmp dword [ebp - 0x2b0], 0
jne 0x1008a8bd
jmp 0x1008a8c8
mov edx, dword [ebp - 0x14]
mov eax, dword [ebp - 0x2b0]
mov dword [eax], edx
mov dword [ebp - 4], 0xffffffff
mov ecx, dword [ebp - 0x20c]
mov dword [ebp - 0x2a8], ecx
mov dword [ebp - 0xf24], 0x100a2940
mov edx, dword [ebp - 0xf24]
mov dword [ebp - 0xf28], edx
mov eax, dword [ebp - 0x2a8]
movzx ecx, byte [eax + 0x10]
test ecx, ecx
je 0x1008a90f
mov edx, 0x29
add edx, 1
mov dword [ebp - 0x5f8], edx
jmp 0x1008a919
mov dword [ebp - 0x5f8], 0x29
mov eax, dword [ebp - 0x5f8]
mov dword [ebp - 0x5fc], eax
mov ecx, dword [ebp - 0x2a8]
cmp dword [ecx + 4], 0
je 0x1008a957
mov ecx, dword [ebp - 0x2a8]
add ecx, 8
call fcn.1003bf10
movzx edx, al
test edx, edx
je 0x1008a957
mov eax, dword [ebp - 0x2a8]
mov ecx, dword [ebp - 0x5fc]
cmp ecx, dword [eax + 0xc]
jbe 0x1008a981
mov dword [ebp - 0x608], 0
mov edx, dword [ebp - 0x200]
or edx, 1
mov dword [ebp - 0x200], edx
lea eax, [ebp - 0x608]
mov dword [ebp - 0xfb4], eax
jmp 0x1008aacc
mov ecx, dword [ebp - 0xf28]
mov dword [ebp - 0x640], ecx
mov edx, dword [ebp - 0x640]
mov dword [ebp - 0x648], edx
mov eax, dword [ebp - 0x2a8]
add eax, 8
mov dword [ebp - 0x644], eax
mov ecx, dword [ebp - 0x5fc]
push ecx
mov ecx, dword [ebp - 0x644]
call fcn.1003bf20
mov edx, dword [ebp - 0x648]
mov dword [eax], edx
mov eax, 0x29
shl eax, 2
mov ecx, dword [ebp - 0x2a8]
add eax, dword [ecx + 4]
mov dword [ebp - 0x600], eax
mov edx, dword [ebp - 0x600]
cmp dword [edx], 0
je 0x1008aa33
mov eax, dword [ebp - 0x600]
mov ecx, dword [eax]
mov dword [ebp - 0x64c], ecx
mov edx, dword [ebp - 0x64c]
mov dword [ebp - 0x650], edx
lea eax, [ebp - 0x650]
mov dword [ebp - 0x654], eax
mov ecx, dword [ebp - 0x654]
mov dword [ebp - 0x658], ecx
mov edx, dword [ebp - 0x200]
or edx, 2
mov dword [ebp - 0x200], edx
mov eax, dword [ebp - 0x658]
mov dword [ebp - 0x604], eax
jmp 0x1008aa70
mov dword [ebp - 0x65c], 0
lea ecx, [ebp - 0x65c]
mov dword [ebp - 0x660], ecx
mov edx, dword [ebp - 0x660]
mov dword [ebp - 0x664], edx
mov eax, dword [ebp - 0x200]
or eax, 4
mov dword [ebp - 0x200], eax
mov ecx, dword [ebp - 0x664]
mov dword [ebp - 0x604], ecx
mov edx, dword [ebp - 0x604]
mov dword [ebp - 0x668], edx
mov eax, dword [ebp - 0x668]
mov ecx, dword [eax]
mov dword [ebp - 0x608], ecx
mov edx, dword [ebp - 0x200]
or edx, 8
mov dword [ebp - 0x200], edx
mov eax, dword [ebp - 0x200]
and eax, 4
je 0x1008aaab
and dword [ebp - 0x200], 0xfffffffb
mov ecx, dword [ebp - 0x200]
and ecx, 2
je 0x1008aabd
and dword [ebp - 0x200], 0xfffffffd
mov edx, dword [ebp - 0x200]
or edx, 1
mov dword [ebp - 0x200], edx
mov eax, dword [ebp - 0x20c]
add eax, 0x28
mov dword [ebp - 0x250], eax
mov ecx, dword [0x1016747c]
mov dword [ebp - 0x66c], ecx
lea edx, [ebp - 0x28c]
mov dword [ebp - 0x60c], edx
mov eax, dword [ebp - 0x60c]
mov ecx, dword [ebp - 0x66c]
mov dword [eax], ecx
mov edx, dword [ebp - 0x60c]
mov dword [ebp - 0x670], edx
mov eax, dword [ebp - 0x670]
mov dword [ebp - 0xfbc], eax
mov dword [ebp - 4], 1
mov ecx, dword [ebp - 0x250]
mov edx, dword [ebp - 0x28c]
mov dword [ecx], edx
mov eax, dword [ebp - 0x28c]
mov ecx, dword [eax]
mov dword [ebp - 0x674], ecx
mov edx, dword [ebp - 0x674]
mov eax, dword [ebp - 0x250]
mov dword [eax + 4], edx
mov ecx, dword [ebp - 0x250]
cmp dword [ecx + 4], 0
jne 0x1008ab63
mov dword [ebp - 4], 0xffffffff
jmp 0x1008adb6
mov dword [ebp - 0x300], 0
mov edx, dword [ebp - 0x250]
mov eax, dword [edx + 4]
mov ecx, dword [ebp - 0x300]
mov edx, dword [eax + ecx*4]
mov dword [ebp - 0x678], edx
mov eax, dword [ebp - 0x678]
mov dword [ebp - 0x610], eax
cmp dword [ebp - 0x610], 0
jne 0x1008aba3
mov byte [ebp - 0x20d], 0
jmp 0x1008abfb
mov ecx, dword [0x100f81f4]
mov dword [ebp - 0x67c], ecx
push 0x1c
lea edx, [ebp - 0x1c4]
push edx
mov eax, dword [ebp - 0x610]
push eax
call dword [ebp - 0x67c]
test eax, eax
jne 0x1008abd2
mov byte [ebp - 0x20d], 0
jmp 0x1008abfb
mov ecx, dword [ebp - 0x1b0]
and ecx, 1
jne 0x1008abeb
mov edx, dword [ebp - 0x1b0]
and edx, 0x100
je 0x1008abf4
mov byte [ebp - 0x20d], 0
jmp 0x1008abfb
mov byte [ebp - 0x20d], 1
movzx eax, byte [ebp - 0x20d]
test eax, eax
je 0x1008ac1a
mov ecx, dword [ebp - 0x300]
add ecx, 1
mov dword [ebp - 0x300], ecx
jmp 0x1008ab6d
mov edx, dword [ebp - 0x300]
mov dword [ebp - 0x680], edx
mov eax, dword [ebp - 0x680]
mov ecx, dword [ebp - 0x250]
mov dword [ecx + 0xc], eax
mov edx, dword [ebp - 0x250]
cmp dword [edx + 0xc], 0
jne 0x1008ac4d
mov dword [ebp - 4], 0xffffffff
jmp 0x1008adb6
mov eax, 1
test eax, eax
je 0x1008ac6a
mov ecx, dword [ebp - 0x250]
mov edx, dword [ecx + 0xc]
add edx, 1
mov dword [ebp - 0x614], edx
jmp 0x1008ac79
mov eax, dword [ebp - 0x250]
mov ecx, dword [eax + 0xc]
mov dword [ebp - 0x614], ecx
mov edx, dword [ebp - 0x614]
lea ecx, [ebp - 0x688]
call fcn.1003c4d0
mov dword [ebp - 0x684], eax
mov edx, dword [ebp - 0x684]
push edx
mov ecx, dword [ebp - 0x250]
add ecx, 8
call fcn.1003c560
lea ecx, [ebp - 0x688]
call fcn.1003bf30
mov ecx, dword [ebp - 0x250]
add ecx, 8
call fcn.1003bf10
movzx eax, al
test eax, eax
jne 0x1008acd1
mov dword [ebp - 4], 0xffffffff
jmp 0x1008adb6
mov ecx, dword [ebp - 0x250]
add ecx, 8
call fcn.1002c280
mov dword [ebp - 0x68c], eax
mov ecx, dword [ebp - 0x68c]
mov dword [ebp - 0x2c], ecx
mov edx, 1
test edx, edx
je 0x1008ad6a
mov eax, dword [ebp - 0x2c]
mov dword [ebp - 0x690], eax
mov ecx, dword [ebp - 0x250]
mov edx, dword [ecx + 0xc]
lea eax, [edx*4 + 4]
push eax
mov ecx, dword [ebp - 0x250]
mov edx, dword [ecx + 4]
sub edx, 4
push edx
mov eax, dword [ebp - 0x690]
push eax
call sub.VCRUNTIME140.dll_memcpy
add esp, 0xc
mov ecx, dword [ebp - 0x2c]
mov dword [ebp - 0x694], ecx
mov edx, dword [ebp - 0x694]
add edx, 4
mov dword [ebp - 0x698], edx
cmp dword [ebp - 0x28c], 0
jne 0x1008ad50
jmp 0x1008ad5e
mov eax, dword [ebp - 0x28c]
mov ecx, dword [ebp - 0x698]
mov dword [eax], ecx
mov edx, dword [ebp - 0x250]
mov byte [edx + 0x10], 1
jmp 0x1008adaf
mov eax, dword [ebp - 0x2c]
mov dword [ebp - 0x69c], eax
mov ecx, dword [ebp - 0x250]
mov edx, dword [ecx + 0xc]
shl edx, 2
push edx
mov eax, dword [ebp - 0x250]
mov ecx, dword [eax + 4]
push ecx
mov edx, dword [ebp - 0x69c]
push edx
call sub.VCRUNTIME140.dll_memcpy
add esp, 0xc
cmp dword [ebp - 0x28c], 0
jne 0x1008ada4
jmp 0x1008adaf
mov eax, dword [ebp - 0x2c]
mov ecx, dword [ebp - 0x28c]
mov dword [ecx], eax
mov dword [ebp - 4], 0xffffffff
mov edx, dword [ebp - 0x20c]
add edx, 0x28
mov dword [ebp - 0x2a0], edx
mov dword [ebp - 0x6a0], 0x10096970
mov eax, dword [ebp - 0x6a0]
mov dword [ebp - 0x6a4], eax
mov ecx, dword [ebp - 0x2a0]
movzx edx, byte [ecx + 0x10]
test edx, edx
je 0x1008adf9
mov eax, 5
add eax, 1
mov dword [ebp - 0x618], eax
jmp 0x1008ae03
mov dword [ebp - 0x618], 5
mov ecx, dword [ebp - 0x618]
mov dword [ebp - 0x61c], ecx
mov edx, dword [ebp - 0x2a0]
cmp dword [edx + 4], 0
je 0x1008ae41
mov ecx, dword [ebp - 0x2a0]
add ecx, 8
call fcn.1003bf10
movzx eax, al
test eax, eax
je 0x1008ae41
mov ecx, dword [ebp - 0x2a0]
mov edx, dword [ebp - 0x61c]
cmp edx, dword [ecx + 0xc]
jbe 0x1008ae6b
mov dword [ebp - 0x628], 0
mov eax, dword [ebp - 0x200]
or eax, 0x10
mov dword [ebp - 0x200], eax
lea ecx, [ebp - 0x628]
mov dword [ebp - 0xfc0], ecx
jmp 0x1008afb9
mov edx, dword [ebp - 0x6a4]
mov dword [ebp - 0x6a8], edx
mov eax, dword [ebp - 0x6a8]
mov dword [ebp - 0x6b0], eax
mov ecx, dword [ebp - 0x2a0]
add ecx, 8
mov dword [ebp - 0x6ac], ecx
mov edx, dword [ebp - 0x61c]
push edx
mov ecx, dword [ebp - 0x6ac]
call fcn.1003bf20
mov ecx, dword [ebp - 0x6b0]
mov dword [eax], ecx
mov edx, 5
shl edx, 2
mov eax, dword [ebp - 0x2a0]
add edx, dword [eax + 4]
mov dword [ebp - 0x620], edx
mov ecx, dword [ebp - 0x620]
cmp dword [ecx], 0
je 0x1008af1d
mov edx, dword [ebp - 0x620]
mov eax, dword [edx]
mov dword [ebp - 0x6b4], eax
mov ecx, dword [ebp - 0x6b4]
mov dword [ebp - 0x6b8], ecx
lea edx, [ebp - 0x6b8]
mov dword [ebp - 0x6bc], edx
mov eax, dword [ebp - 0x6bc]
mov dword [ebp - 0x6c0], eax
mov ecx, dword [ebp - 0x200]
or ecx, 0x20
mov dword [ebp - 0x200], ecx
mov edx, dword [ebp - 0x6c0]
mov dword [ebp - 0x624], edx
jmp 0x1008af5a
mov dword [ebp - 0x6c4], 0
lea eax, [ebp - 0x6c4]
mov dword [ebp - 0x6c8], eax
mov ecx, dword [ebp - 0x6c8]
mov dword [ebp - 0x6cc], ecx
mov edx, dword [ebp - 0x200]
or edx, 0x40
mov dword [ebp - 0x200], edx
mov eax, dword [ebp - 0x6cc]
mov dword [ebp - 0x624], eax
mov ecx, dword [ebp - 0x624]
mov dword [ebp - 0x6d0], ecx
mov edx, dword [ebp - 0x6d0]
mov eax, dword [edx]
mov dword [ebp - 0x628], eax
mov ecx, dword [ebp - 0x200]
or ecx, 0x80
mov dword [ebp - 0x200], ecx
mov edx, dword [ebp - 0x200]
and edx, 0x40
je 0x1008af98
and dword [ebp - 0x200], 0xffffffbf
mov eax, dword [ebp - 0x200]
and eax, 0x20
je 0x1008afaa
and dword [ebp - 0x200], 0xffffffdf
mov ecx, dword [ebp - 0x200]
or ecx, 0x10
mov dword [ebp - 0x200], ecx
mov edx, dword [ebp - 0x20c]
add edx, 0x28
mov dword [ebp - 0x298], edx
mov dword [ebp - 0x6d4], 0x10096a30
mov eax, dword [ebp - 0x6d4]
mov dword [ebp - 0x6d8], eax
mov ecx, dword [ebp - 0x298]
movzx edx, byte [ecx + 0x10]
test edx, edx
je 0x1008affc
mov eax, 6
add eax, 1
mov dword [ebp - 0x62c], eax
jmp 0x1008b006
mov dword [ebp - 0x62c], 6
mov ecx, dword [ebp - 0x62c]
mov dword [ebp - 0x630], ecx
mov edx, dword [ebp - 0x298]
cmp dword [edx + 4], 0
je 0x1008b044
mov ecx, dword [ebp - 0x298]
add ecx, 8
call fcn.1003bf10
movzx eax, al
test eax, eax
je 0x1008b044
mov ecx, dword [ebp - 0x298]
mov edx, dword [ebp - 0x630]
cmp edx, dword [ecx + 0xc]
jbe 0x1008b070
mov dword [ebp - 0x33c], 0
mov eax, dword [ebp - 0x200]
or eax, 0x100
mov dword [ebp - 0x200], eax
lea ecx, [ebp - 0x33c]
mov dword [ebp - 0xfc4], ecx
jmp 0x1008b1d2
mov edx, dword [ebp - 0x6d8]
mov dword [ebp - 0x6dc], edx
mov eax, dword [ebp - 0x6dc]
mov dword [ebp - 0x6e4], eax
mov ecx, dword [ebp - 0x298]
add ecx, 8
mov dword [ebp - 0x6e0], ecx
mov edx, dword [ebp - 0x630]
push edx
mov ecx, dword [ebp - 0x6e0]
call fcn.1003bf20
mov ecx, dword [ebp - 0x6e4]
mov dword [eax], ecx
mov edx, 6
shl edx, 2
mov eax, dword [ebp - 0x298]
add edx, dword [eax + 4]
mov dword [ebp - 0x634], edx
mov ecx, dword [ebp - 0x634]
cmp dword [ecx], 0
je 0x1008b125
mov edx, dword [ebp - 0x634]
mov eax, dword [edx]
mov dword [ebp - 0x6e8], eax
mov ecx, dword [ebp - 0x6e8]
mov dword [ebp - 0x6ec], ecx
lea edx, [ebp - 0x6ec]
mov dword [ebp - 0x6f0], edx
mov eax, dword [ebp - 0x6f0]
mov dword [ebp - 0x6f4], eax
mov ecx, dword [ebp - 0x200]
or ecx, 0x200
mov dword [ebp - 0x200], ecx
mov edx, dword [ebp - 0x6f4]
mov dword [ebp - 0x638], edx
jmp 0x1008b165
mov dword [ebp - 0x6f8], 0
lea eax, [ebp - 0x6f8]
mov dword [ebp - 0x6fc], eax
mov ecx, dword [ebp - 0x6fc]
mov dword [ebp - 0x700], ecx
mov edx, dword [ebp - 0x200]
or edx, 0x400
mov dword [ebp - 0x200], edx
mov eax, dword [ebp - 0x700]
mov dword [ebp - 0x638], eax
mov ecx, dword [ebp - 0x638]
mov dword [ebp - 0x704], ecx
mov edx, dword [ebp - 0x704]
mov eax, dword [edx]
mov dword [ebp - 0x33c], eax
mov ecx, dword [ebp - 0x200]
or ecx, 0x800
mov dword [ebp - 0x200], ecx
mov edx, dword [ebp - 0x200]
and edx, 0x400
je 0x1008b1a9
and dword [ebp - 0x200], 0xfffffbff
mov eax, dword [ebp - 0x200]
and eax, 0x200
je 0x1008b1c0
and dword [ebp - 0x200], 0xfffffdff
mov ecx, dword [ebp - 0x200]
or ecx, 0x100
mov dword [ebp - 0x200], ecx
mov edx, dword [ebp - 0x20c]
add edx, 0x28
mov dword [ebp - 0x290], edx
mov dword [ebp - 0x708], 0x10096a60
mov eax, dword [ebp - 0x708]
mov dword [ebp - 0x70c], eax
mov ecx, dword [ebp - 0x290]
movzx edx, byte [ecx + 0x10]
test edx, edx
je 0x1008b215
mov eax, 7
add eax, 1
mov dword [ebp - 0x340], eax
jmp 0x1008b21f
mov dword [ebp - 0x340], 7
mov ecx, dword [ebp - 0x340]
mov dword [ebp - 0x344], ecx
mov edx, dword [ebp - 0x290]
cmp dword [edx + 4], 0
je 0x1008b25d
mov ecx, dword [ebp - 0x290]
add ecx, 8
call fcn.1003bf10
movzx eax, al
test eax, eax
je 0x1008b25d
mov ecx, dword [ebp - 0x290]
mov edx, dword [ebp - 0x344]
cmp edx, dword [ecx + 0xc]
jbe 0x1008b289
mov dword [ebp - 0x350], 0
mov eax, dword [ebp - 0x200]
or eax, 0x1000
mov dword [ebp - 0x200], eax
lea ecx, [ebp - 0x350]
mov dword [ebp - 0xfc8], ecx
jmp 0x1008b3eb
mov edx, dword [ebp - 0x70c]
mov dword [ebp - 0x710], edx
mov eax, dword [ebp - 0x710]
mov dword [ebp - 0x718], eax
mov ecx, dword [ebp - 0x290]
add ecx, 8
mov dword [ebp - 0x714], ecx
mov edx, dword [ebp - 0x344]
push edx
mov ecx, dword [ebp - 0x714]
call fcn.1003bf20
mov ecx, dword [ebp - 0x718]
mov dword [eax], ecx
mov edx, 7
shl edx, 2
mov eax, dword [ebp - 0x290]
add edx, dword [eax + 4]
mov dword [ebp - 0x348], edx
mov ecx, dword [ebp - 0x348]
cmp dword [ecx], 0
je 0x1008b33e
mov edx, dword [ebp - 0x348]
mov eax, dword [edx]
mov dword [ebp - 0x71c], eax
mov ecx, dword [ebp - 0x71c]
mov dword [ebp - 0x720], ecx
lea edx, [ebp - 0x720]
mov dword [ebp - 0x724], edx
mov eax, dword [ebp - 0x724]
mov dword [ebp - 0x728], eax
mov ecx, dword [ebp - 0x200]
or ecx, 0x2000
mov dword [ebp - 0x200], ecx
mov edx, dword [ebp - 0x728]
mov dword [ebp - 0x34c], edx
jmp 0x1008b37e
mov dword [ebp - 0x72c], 0
lea eax, [ebp - 0x72c]
mov dword [ebp - 0x730], eax
mov ecx, dword [ebp - 0x730]
mov dword [ebp - 0x734], ecx
mov edx, dword [ebp - 0x200]
or edx, 0x4000
mov dword [ebp - 0x200], edx
mov eax, dword [ebp - 0x734]
mov dword [ebp - 0x34c], eax
mov ecx, dword [ebp - 0x34c]
mov dword [ebp - 0x738], ecx
mov edx, dword [ebp - 0x738]
mov eax, dword [edx]
mov dword [ebp - 0x350], eax
mov ecx, dword [ebp - 0x200]
or ecx, 0x8000
mov dword [ebp - 0x200], ecx
mov edx, dword [ebp - 0x200]
and edx, 0x4000
je 0x1008b3c2
and dword [ebp - 0x200], 0xffffbfff
mov eax, dword [ebp - 0x200]
and eax, 0x2000
je 0x1008b3d9
and dword [ebp - 0x200], 0xffffdfff
mov ecx, dword [ebp - 0x200]
or ecx, 0x1000
mov dword [ebp - 0x200], ecx
mov edx, dword [ebp - 0x20c]
add edx, 0x28
mov dword [ebp - 0x288], edx
mov dword [ebp - 0x73c], 0x10096ae0
mov eax, dword [ebp - 0x73c]
mov dword [ebp - 0x740], eax
mov ecx, dword [ebp - 0x288]
movzx edx, byte [ecx + 0x10]
test edx, edx
je 0x1008b42e
mov eax, 0x24
add eax, 1
mov dword [ebp - 0x354], eax
jmp 0x1008b438
mov dword [ebp - 0x354], 0x24
mov ecx, dword [ebp - 0x354]
mov dword [ebp - 0x358], ecx
mov edx, dword [ebp - 0x288]
cmp dword [edx + 4], 0
je 0x1008b476
mov ecx, dword [ebp - 0x288]
add ecx, 8
call fcn.1003bf10
movzx eax, al
test eax, eax
je 0x1008b476
mov ecx, dword [ebp - 0x288]
mov edx, dword [ebp - 0x358]
cmp edx, dword [ecx + 0xc]
jbe 0x1008b4a2
mov dword [ebp - 0x364], 0
mov eax, dword [ebp - 0x200]
or eax, 0x10000
mov dword [ebp - 0x200], eax
lea ecx, [ebp - 0x364]
mov dword [ebp - 0xfcc], ecx
jmp 0x1008b604
mov edx, dword [ebp - 0x740]
mov dword [ebp - 0x744], edx
mov eax, dword [ebp - 0x744]
mov dword [ebp - 0x74c], eax
mov ecx, dword [ebp - 0x288]
add ecx, 8
mov dword [ebp - 0x748], ecx
mov edx, dword [ebp - 0x358]
push edx
mov ecx, dword [ebp - 0x748]
call fcn.1003bf20
mov ecx, dword [ebp - 0x74c]
mov dword [eax], ecx
mov edx, 0x24
shl edx, 2
mov eax, dword [ebp - 0x288]
add edx, dword [eax + 4]
mov dword [ebp - 0x35c], edx
mov ecx, dword [ebp - 0x35c]
cmp dword [ecx], 0
je 0x1008b557
mov edx, dword [ebp - 0x35c]
mov eax, dword [edx]
mov dword [ebp - 0x750], eax
mov ecx, dword [ebp - 0x750]
mov dword [ebp - 0x754], ecx
lea edx, [ebp - 0x754]
mov dword [ebp - 0x758], edx
mov eax, dword [ebp - 0x758]
mov dword [ebp - 0x75c], eax
mov ecx, dword [ebp - 0x200]
or ecx, 0x20000
mov dword [ebp - 0x200], ecx
mov edx, dword [ebp - 0x75c]
mov dword [ebp - 0x360], edx
jmp 0x1008b597
mov dword [ebp - 0x760], 0
lea eax, [ebp - 0x760]
mov dword [ebp - 0x764], eax
mov ecx, dword [ebp - 0x764]
mov dword [ebp - 0x768], ecx
mov edx, dword [ebp - 0x200]
or edx, 0x40000
mov dword [ebp - 0x200], edx
mov eax, dword [ebp - 0x768]
mov dword [ebp - 0x360], eax
mov ecx, dword [ebp - 0x360]
mov dword [ebp - 0x76c], ecx
mov edx, dword [ebp - 0x76c]
mov eax, dword [edx]
mov dword [ebp - 0x364], eax
mov ecx, dword [ebp - 0x200]
or ecx, 0x80000
mov dword [ebp - 0x200], ecx
mov edx, dword [ebp - 0x200]
and edx, 0x40000
je 0x1008b5db
and dword [ebp - 0x200], 0xfffbffff
mov eax, dword [ebp - 0x200]
and eax, 0x20000
je 0x1008b5f2
and dword [ebp - 0x200], 0xfffdffff
mov ecx, dword [ebp - 0x200]
or ecx, 0x10000
mov dword [ebp - 0x200], ecx
mov edx, dword [ebp - 0x20c]
add edx, 0x50
mov dword [ebp - 0x254], edx
mov eax, dword [0x10167484]
mov dword [ebp - 0x770], eax
lea ecx, [ebp - 0x2f8]
mov dword [ebp - 0x368], ecx
mov edx, dword [ebp - 0x368]
mov eax, dword [ebp - 0x770]
mov dword [edx], eax
mov ecx, dword [ebp - 0x368]
mov dword [ebp - 0x774], ecx
mov edx, dword [ebp - 0x774]
mov dword [ebp - 0xfd0], edx
mov dword [ebp - 4], 2
mov eax, dword [ebp - 0x254]
mov ecx, dword [ebp - 0x2f8]
mov dword [eax], ecx
mov edx, dword [ebp - 0x2f8]
mov eax, dword [edx]
mov dword [ebp - 0x778], eax
mov ecx, dword [ebp - 0x778]
mov edx, dword [ebp - 0x254]
mov dword [edx + 4], ecx
mov eax, dword [ebp - 0x254]
cmp dword [eax + 4], 0
jne 0x1008b69a
mov dword [ebp - 4], 0xffffffff
jmp 0x1008b8ec
mov dword [ebp - 0x304], 0
mov ecx, dword [ebp - 0x254]
mov edx, dword [ecx + 4]
mov eax, dword [ebp - 0x304]
mov ecx, dword [edx + eax*4]
mov dword [ebp - 0x77c], ecx
mov edx, dword [ebp - 0x77c]
mov dword [ebp - 0x36c], edx
cmp dword [ebp - 0x36c], 0
jne 0x1008b6da
mov byte [ebp - 0x20e], 0
jmp 0x1008b731
mov eax, dword [0x100f81f4]
mov dword [ebp - 0x780], eax
push 0x1c
lea ecx, [ebp - 0x1a8]
push ecx
mov edx, dword [ebp - 0x36c]
push edx
call dword [ebp - 0x780]
test eax, eax
jne 0x1008b708
mov byte [ebp - 0x20e], 0
jmp 0x1008b731
mov eax, dword [ebp - 0x194]
and eax, 1
jne 0x1008b721
mov ecx, dword [ebp - 0x194]
and ecx, 0x100
je 0x1008b72a
mov byte [ebp - 0x20e], 0
jmp 0x1008b731
mov byte [ebp - 0x20e], 1
movzx edx, byte [ebp - 0x20e]
test edx, edx
je 0x1008b750
mov eax, dword [ebp - 0x304]
add eax, 1
mov dword [ebp - 0x304], eax
jmp 0x1008b6a4
mov ecx, dword [ebp - 0x304]
mov dword [ebp - 0x784], ecx
mov edx, dword [ebp - 0x784]
mov eax, dword [ebp - 0x254]
mov dword [eax + 0xc], edx
mov ecx, dword [ebp - 0x254]
cmp dword [ecx + 0xc], 0
jne 0x1008b783
mov dword [ebp - 4], 0xffffffff
jmp 0x1008b8ec
mov edx, 1
test edx, edx
je 0x1008b7a0
mov eax, dword [ebp - 0x254]
mov ecx, dword [eax + 0xc]
add ecx, 1
mov dword [ebp - 0x370], ecx
jmp 0x1008b7af
mov edx, dword [ebp - 0x254]
mov eax, dword [edx + 0xc]
mov dword [ebp - 0x370], eax
mov edx, dword [ebp - 0x370]
lea ecx, [ebp - 0x78c]
call fcn.1003c4d0
mov dword [ebp - 0x788], eax
mov ecx, dword [ebp - 0x788]
push ecx
mov ecx, dword [ebp - 0x254]
add ecx, 8
call fcn.1003c560
lea ecx, [ebp - 0x78c]
call fcn.1003bf30
mov ecx, dword [ebp - 0x254]
add ecx, 8
call fcn.1003bf10
movzx edx, al
test edx, edx
jne 0x1008b807
mov dword [ebp - 4], 0xffffffff
jmp 0x1008b8ec
mov ecx, dword [ebp - 0x254]
add ecx, 8
call fcn.1002c280
mov dword [ebp - 0x790], eax
mov eax, dword [ebp - 0x790]
mov dword [ebp - 0x30], eax
mov ecx, 1
test ecx, ecx
je 0x1008b8a0
mov edx, dword [ebp - 0x30]
mov dword [ebp - 0x794], edx
mov eax, dword [ebp - 0x254]
mov ecx, dword [eax + 0xc]
lea edx, [ecx*4 + 4]
push edx
mov eax, dword [ebp - 0x254]
mov ecx, dword [eax + 4]
sub ecx, 4
push ecx
mov edx, dword [ebp - 0x794]
push edx
call sub.VCRUNTIME140.dll_memcpy
add esp, 0xc
mov eax, dword [ebp - 0x30]
mov dword [ebp - 0x798], eax
mov ecx, dword [ebp - 0x798]
add ecx, 4
mov dword [ebp - 0x79c], ecx
cmp dword [ebp - 0x2f8], 0
jne 0x1008b886
jmp 0x1008b894
mov edx, dword [ebp - 0x2f8]
mov eax, dword [ebp - 0x79c]
mov dword [edx], eax
mov ecx, dword [ebp - 0x254]
mov byte [ecx + 0x10], 1
jmp 0x1008b8e5
mov edx, dword [ebp - 0x30]
mov dword [ebp - 0x7a0], edx
mov eax, dword [ebp - 0x254]
mov ecx, dword [eax + 0xc]
shl ecx, 2
push ecx
mov edx, dword [ebp - 0x254]
mov eax, dword [edx + 4]
push eax
mov ecx, dword [ebp - 0x7a0]
push ecx
call sub.VCRUNTIME140.dll_memcpy
add esp, 0xc
cmp dword [ebp - 0x2f8], 0
jne 0x1008b8da
jmp 0x1008b8e5
mov edx, dword [ebp - 0x30]
mov eax, dword [ebp - 0x2f8]
mov dword [eax], edx
mov dword [ebp - 4], 0xffffffff
mov ecx, dword [ebp - 0x20c]
add ecx, 0x50
mov dword [ebp - 0x2f0], ecx
mov dword [ebp - 0x7a4], 0x10094920
mov edx, dword [ebp - 0x7a4]
mov dword [ebp - 0x7a8], edx
mov eax, dword [ebp - 0x2f0]
movzx ecx, byte [eax + 0x10]
test ecx, ecx
je 0x1008b92f
mov edx, 0x1b
add edx, 1
mov dword [ebp - 0x374], edx
jmp 0x1008b939
mov dword [ebp - 0x374], 0x1b
mov eax, dword [ebp - 0x374]
mov dword [ebp - 0x378], eax
mov ecx, dword [ebp - 0x2f0]
cmp dword [ecx + 4], 0
je 0x1008b977
mov ecx, dword [ebp - 0x2f0]
add ecx, 8
call fcn.1003bf10
movzx edx, al
test edx, edx
je 0x1008b977
mov eax, dword [ebp - 0x2f0]
mov ecx, dword [ebp - 0x378]
cmp ecx, dword [eax + 0xc]
jbe 0x1008b9a4
mov dword [ebp - 0x384], 0
mov edx, dword [ebp - 0x200]
or edx, 0x100000
mov dword [ebp - 0x200], edx
lea eax, [ebp - 0x384]
mov dword [ebp - 0xfb8], eax
jmp 0x1008bb05
mov ecx, dword [ebp - 0x7a8]
mov dword [ebp - 0x7ac], ecx
mov edx, dword [ebp - 0x7ac]
mov dword [ebp - 0x7b4], edx
mov eax, dword [ebp - 0x2f0]
add eax, 8
mov dword [ebp - 0x7b0], eax
mov ecx, dword [ebp - 0x378]
push ecx
mov ecx, dword [ebp - 0x7b0]
call fcn.1003bf20
mov edx, dword [ebp - 0x7b4]
mov dword [eax], edx
mov eax, 0x1b
shl eax, 2
mov ecx, dword [ebp - 0x2f0]
add eax, dword [ecx + 4]
mov dword [ebp - 0x37c], eax
mov edx, dword [ebp - 0x37c]
cmp dword [edx], 0
je 0x1008ba59
mov eax, dword [ebp - 0x37c]
mov ecx, dword [eax]
mov dword [ebp - 0x7b8], ecx
mov edx, dword [ebp - 0x7b8]
mov dword [ebp - 0x7bc], edx
lea eax, [ebp - 0x7bc]
mov dword [ebp - 0x7c0], eax
mov ecx, dword [ebp - 0x7c0]
mov dword [ebp - 0x7c4], ecx
mov edx, dword [ebp - 0x200]
or edx, 0x200000
mov dword [ebp - 0x200], edx
mov eax, dword [ebp - 0x7c4]
mov dword [ebp - 0x380], eax
jmp 0x1008ba98
mov dword [ebp - 0x7c8], 0
lea ecx, [ebp - 0x7c8]
mov dword [ebp - 0x7cc], ecx
mov edx, dword [ebp - 0x7cc]
mov dword [ebp - 0x7d0], edx
mov eax, dword [ebp - 0x200]
or eax, 0x400000
mov dword [ebp - 0x200], eax
mov ecx, dword [ebp - 0x7d0]
mov dword [ebp - 0x380], ecx
mov edx, dword [ebp - 0x380]
mov dword [ebp - 0x7d4], edx
mov eax, dword [ebp - 0x7d4]
mov ecx, dword [eax]
mov dword [ebp - 0x384], ecx
mov edx, dword [ebp - 0x200]
or edx, 0x800000
mov dword [ebp - 0x200], edx
mov eax, dword [ebp - 0x200]
and eax, 0x400000
je 0x1008badb
and dword [ebp - 0x200], 0xffbfffff
mov ecx, dword [ebp - 0x200]
and ecx, 0x200000
je 0x1008baf3
and dword [ebp - 0x200], 0xffdfffff
mov edx, dword [ebp - 0x200]
or edx, 0x100000
mov dword [ebp - 0x200], edx
mov eax, dword [ebp - 0x20c]
add eax, 0x50
mov dword [ebp - 0x2ec], eax
mov dword [ebp - 0x7d8], 0x10094a60
mov ecx, dword [ebp - 0x7d8]
mov dword [ebp - 0x7dc], ecx
mov edx, dword [ebp - 0x2ec]
movzx eax, byte [edx + 0x10]
test eax, eax
je 0x1008bb48
mov ecx, 0x5d
add ecx, 1
mov dword [ebp - 0x388], ecx
jmp 0x1008bb52
mov dword [ebp - 0x388], 0x5d
mov edx, dword [ebp - 0x388]
mov dword [ebp - 0x38c], edx
mov eax, dword [ebp - 0x2ec]
cmp dword [eax + 4], 0
je 0x1008bb90
mov ecx, dword [ebp - 0x2ec]
add ecx, 8
call fcn.1003bf10
movzx ecx, al
test ecx, ecx
je 0x1008bb90
mov edx, dword [ebp - 0x2ec]
mov eax, dword [ebp - 0x38c]
cmp eax, dword [edx + 0xc]
jbe 0x1008bbbd
mov dword [ebp - 0x398], 0
mov ecx, dword [ebp - 0x200]
or ecx, 0x1000000
mov dword [ebp - 0x200], ecx
lea edx, [ebp - 0x398]
mov dword [ebp - 0xfd8], edx
jmp 0x1008bd1f
mov eax, dword [ebp - 0x7dc]
mov dword [ebp - 0x7e0], eax
mov ecx, dword [ebp - 0x7e0]
mov dword [ebp - 0x7e8], ecx
mov edx, dword [ebp - 0x2ec]
add edx, 8
mov dword [ebp - 0x7e4], edx
mov eax, dword [ebp - 0x38c]
push eax
mov ecx, dword [ebp - 0x7e4]
call fcn.1003bf20
mov ecx, dword [ebp - 0x7e8]
mov dword [eax], ecx
mov edx, 0x5d
shl edx, 2
mov eax, dword [ebp - 0x2ec]
add edx, dword [eax + 4]
mov dword [ebp - 0x390], edx
mov ecx, dword [ebp - 0x390]
cmp dword [ecx], 0
je 0x1008bc72
mov edx, dword [ebp - 0x390]
mov eax, dword [edx]
mov dword [ebp - 0x7ec], eax
mov ecx, dword [ebp - 0x7ec]
mov dword [ebp - 0x7f0], ecx
lea edx, [ebp - 0x7f0]
mov dword [ebp - 0x7f4], edx
mov eax, dword [ebp - 0x7f4]
mov dword [ebp - 0x7f8], eax
mov ecx, dword [ebp - 0x200]
or ecx, 0x2000000
mov dword [ebp - 0x200], ecx
mov edx, dword [ebp - 0x7f8]
mov dword [ebp - 0x394], edx
jmp 0x1008bcb2
mov dword [ebp - 0x7fc], 0
lea eax, [ebp - 0x7fc]
mov dword [ebp - 0x800], eax
mov ecx, dword [ebp - 0x800]
mov dword [ebp - 0x804], ecx
mov edx, dword [ebp - 0x200]
or edx, 0x4000000
mov dword [ebp - 0x200], edx
mov eax, dword [ebp - 0x804]
mov dword [ebp - 0x394], eax
mov ecx, dword [ebp - 0x394]
mov dword [ebp - 0x808], ecx
mov edx, dword [ebp - 0x808]
mov eax, dword [edx]
mov dword [ebp - 0x398], eax
mov ecx, dword [ebp - 0x200]
or ecx, 0x8000000
mov dword [ebp - 0x200], ecx
mov edx, dword [ebp - 0x200]
and edx, 0x4000000
je 0x1008bcf6
and dword [ebp - 0x200], 0xfbffffff
mov eax, dword [ebp - 0x200]
and eax, 0x2000000
je 0x1008bd0d
and dword [ebp - 0x200], 0xfdffffff
mov ecx, dword [ebp - 0x200]
or ecx, 0x1000000
mov dword [ebp - 0x200], ecx
mov edx, dword [ebp - 0x20c]
add edx, 0x50
mov dword [ebp - 0x2e8], edx
mov dword [ebp - 0x80c], 0x10094c80
mov eax, dword [ebp - 0x80c]
mov dword [ebp - 0x810], eax
mov ecx, dword [ebp - 0x2e8]
movzx edx, byte [ecx + 0x10]
test edx, edx
je 0x1008bd62
mov eax, 0x5a
add eax, 1
mov dword [ebp - 0x39c], eax
jmp 0x1008bd6c
mov dword [ebp - 0x39c], 0x5a
mov ecx, dword [ebp - 0x39c]
mov dword [ebp - 0x3a0], ecx
mov edx, dword [ebp - 0x2e8]
cmp dword [edx + 4], 0
je 0x1008bdaa
mov ecx, dword [ebp - 0x2e8]
add ecx, 8
call fcn.1003bf10
movzx eax, al
test eax, eax
je 0x1008bdaa
mov ecx, dword [ebp - 0x2e8]
mov edx, dword [ebp - 0x3a0]
cmp edx, dword [ecx + 0xc]
jbe 0x1008bdd6
mov dword [ebp - 0x3ac], 0
mov eax, dword [ebp - 0x200]
or eax, 0x10000000
mov dword [ebp - 0x200], eax
lea ecx, [ebp - 0x3ac]
mov dword [ebp - 0xfdc], ecx
jmp 0x1008bf38
mov edx, dword [ebp - 0x810]
mov dword [ebp - 0x814], edx
mov eax, dword [ebp - 0x814]
mov dword [ebp - 0x81c], eax
mov ecx, dword [ebp - 0x2e8]
add ecx, 8
mov dword [ebp - 0x818], ecx
mov edx, dword [ebp - 0x3a0]
push edx
mov ecx, dword [ebp - 0x818]
call fcn.1003bf20
mov ecx, dword [ebp - 0x81c]
mov dword [eax], ecx
mov edx, 0x5a
shl edx, 2
mov eax, dword [ebp - 0x2e8]
add edx, dword [eax + 4]
mov dword [ebp - 0x3a4], edx
mov ecx, dword [ebp - 0x3a4]
cmp dword [ecx], 0
je 0x1008be8b
mov edx, dword [ebp - 0x3a4]
mov eax, dword [edx]
mov dword [ebp - 0x820], eax
mov ecx, dword [ebp - 0x820]
mov dword [ebp - 0x824], ecx
lea edx, [ebp - 0x824]
mov dword [ebp - 0x828], edx
mov eax, dword [ebp - 0x828]
mov dword [ebp - 0x82c], eax
mov ecx, dword [ebp - 0x200]
or ecx, 0x20000000
mov dword [ebp - 0x200], ecx
mov edx, dword [ebp - 0x82c]
mov dword [ebp - 0x3a8], edx
jmp 0x1008becb
mov dword [ebp - 0x830], 0
lea eax, [ebp - 0x830]
mov dword [ebp - 0x834], eax
mov ecx, dword [ebp - 0x834]
mov dword [ebp - 0x838], ecx
mov edx, dword [ebp - 0x200]
or edx, 0x40000000
mov dword [ebp - 0x200], edx
mov eax, dword [ebp - 0x838]
mov dword [ebp - 0x3a8], eax
mov ecx, dword [ebp - 0x3a8]
mov dword [ebp - 0x83c], ecx
mov edx, dword [ebp - 0x83c]
mov eax, dword [edx]
mov dword [ebp - 0x3ac], eax
mov ecx, dword [ebp - 0x200]
or ecx, 0x80000000
mov dword [ebp - 0x200], ecx
mov edx, dword [ebp - 0x200]
and edx, 0x40000000
je 0x1008bf0f
and dword [ebp - 0x200], 0xbfffffff
mov eax, dword [ebp - 0x200]
and eax, 0x20000000
je 0x1008bf26
and dword [ebp - 0x200], 0xdfffffff
mov ecx, dword [ebp - 0x200]
or ecx, 0x10000000
mov dword [ebp - 0x200], ecx
mov edx, dword [ebp - 0x20c]
add edx, 0x78
mov dword [ebp - 0x220], edx
mov eax, dword [0x1016749c]
mov dword [ebp - 0x840], eax
lea ecx, [ebp - 0x2e4]
mov dword [ebp - 0x3b0], ecx
mov edx, dword [ebp - 0x3b0]
mov eax, dword [ebp - 0x840]
mov dword [edx], eax
mov ecx, dword [ebp - 0x3b0]
mov dword [ebp - 0x844], ecx
mov edx, dword [ebp - 0x844]
mov dword [ebp - 0xfe0], edx
mov dword [ebp - 4], 3
mov eax, dword [ebp - 0x220]
mov ecx, dword [ebp - 0x2e4]
mov dword [eax], ecx
mov edx, dword [ebp - 0x2e4]
mov eax, dword [edx]
mov dword [ebp - 0x848], eax
mov ecx, dword [ebp - 0x848]
mov edx, dword [ebp - 0x220]
mov dword [edx + 4], ecx
mov eax, dword [ebp - 0x220]
cmp dword [eax + 4], 0
jne 0x1008bfce
mov dword [ebp - 4], 0xffffffff
jmp 0x1008c220
mov dword [ebp - 0x308], 0
mov ecx, dword [ebp - 0x220]
mov edx, dword [ecx + 4]
mov eax, dword [ebp - 0x308]
mov ecx, dword [edx + eax*4]
mov dword [ebp - 0x84c], ecx
mov edx, dword [ebp - 0x84c]
mov dword [ebp - 0x3b4], edx
cmp dword [ebp - 0x3b4], 0
jne 0x1008c00e
mov byte [ebp - 0x20f], 0
jmp 0x1008c065
mov eax, dword [0x100f81f4]
mov dword [ebp - 0x850], eax
push 0x1c
lea ecx, [ebp - 0x18c]
push ecx
mov edx, dword [ebp - 0x3b4]
push edx
call dword [ebp - 0x850]
test eax, eax
jne 0x1008c03c
mov byte [ebp - 0x20f], 0
jmp 0x1008c065
mov eax, dword [ebp - 0x178]
and eax, 1
jne 0x1008c055
mov ecx, dword [ebp - 0x178]
and ecx, 0x100
je 0x1008c05e
mov byte [ebp - 0x20f], 0
jmp 0x1008c065
mov byte [ebp - 0x20f], 1
movzx edx, byte [ebp - 0x20f]
test edx, edx
je 0x1008c084
mov eax, dword [ebp - 0x308]
add eax, 1
mov dword [ebp - 0x308], eax
jmp 0x1008bfd8
mov ecx, dword [ebp - 0x308]
mov dword [ebp - 0x854], ecx
mov edx, dword [ebp - 0x854]
mov eax, dword [ebp - 0x220]
mov dword [eax + 0xc], edx
mov ecx, dword [ebp - 0x220]
cmp dword [ecx + 0xc], 0
jne 0x1008c0b7
mov dword [ebp - 4], 0xffffffff
jmp 0x1008c220
mov edx, 1
test edx, edx
je 0x1008c0d4
mov eax, dword [ebp - 0x220]
mov ecx, dword [eax + 0xc]
add ecx, 1
mov dword [ebp - 0x3b8], ecx
jmp 0x1008c0e3
mov edx, dword [ebp - 0x220]
mov eax, dword [edx + 0xc]
mov dword [ebp - 0x3b8], eax
mov edx, dword [ebp - 0x3b8]
lea ecx, [ebp - 0x85c]
call fcn.1003c4d0
mov dword [ebp - 0x858], eax
mov ecx, dword [ebp - 0x858]
push ecx
mov ecx, dword [ebp - 0x220]
add ecx, 8
call fcn.1003c560
lea ecx, [ebp - 0x85c]
call fcn.1003bf30
mov ecx, dword [ebp - 0x220]
add ecx, 8
call fcn.1003bf10
movzx edx, al
test edx, edx
jne 0x1008c13b
mov dword [ebp - 4], 0xffffffff
jmp 0x1008c220
mov ecx, dword [ebp - 0x220]
add ecx, 8
call fcn.1002c280
mov dword [ebp - 0x860], eax
mov eax, dword [ebp - 0x860]
mov dword [ebp - 0x34], eax
mov ecx, 1
test ecx, ecx
je 0x1008c1d4
mov edx, dword [ebp - 0x34]
mov dword [ebp - 0x864], edx
mov eax, dword [ebp - 0x220]
mov ecx, dword [eax + 0xc]
lea edx, [ecx*4 + 4]
push edx
mov eax, dword [ebp - 0x220]
mov ecx, dword [eax + 4]
sub ecx, 4
push ecx
mov edx, dword [ebp - 0x864]
push edx
call sub.VCRUNTIME140.dll_memcpy
add esp, 0xc
mov eax, dword [ebp - 0x34]
mov dword [ebp - 0x868], eax
mov ecx, dword [ebp - 0x868]
add ecx, 4
mov dword [ebp - 0x86c], ecx
cmp dword [ebp - 0x2e4], 0
jne 0x1008c1ba
jmp 0x1008c1c8
mov edx, dword [ebp - 0x2e4]
mov eax, dword [ebp - 0x86c]
mov dword [edx], eax
mov ecx, dword [ebp - 0x220]
mov byte [ecx + 0x10], 1
jmp 0x1008c219
mov edx, dword [ebp - 0x34]
mov dword [ebp - 0x870], edx
mov eax, dword [ebp - 0x220]
mov ecx, dword [eax + 0xc]
shl ecx, 2
push ecx
mov edx, dword [ebp - 0x220]
mov eax, dword [edx + 4]
push eax
mov ecx, dword [ebp - 0x870]
push ecx
call sub.VCRUNTIME140.dll_memcpy
add esp, 0xc
cmp dword [ebp - 0x2e4], 0
jne 0x1008c20e
jmp 0x1008c219
mov edx, dword [ebp - 0x34]
mov eax, dword [ebp - 0x2e4]
mov dword [eax], edx
mov dword [ebp - 4], 0xffffffff
mov ecx, dword [ebp - 0x20c]
add ecx, 0x78
mov dword [ebp - 0x2e0], ecx
mov dword [ebp - 0x874], 0x100aea00
mov edx, dword [ebp - 0x874]
mov dword [ebp - 0x878], edx
mov eax, dword [ebp - 0x2e0]
movzx ecx, byte [eax + 0x10]
test ecx, ecx
je 0x1008c263
mov edx, 0xe
add edx, 1
mov dword [ebp - 0x3bc], edx
jmp 0x1008c26d
mov dword [ebp - 0x3bc], 0xe
mov eax, dword [ebp - 0x3bc]
mov dword [ebp - 0x3c0], eax
mov ecx, dword [ebp - 0x2e0]
cmp dword [ecx + 4], 0
je 0x1008c2ab
mov ecx, dword [ebp - 0x2e0]
add ecx, 8
call fcn.1003bf10
movzx edx, al
test edx, edx
je 0x1008c2ab
mov eax, dword [ebp - 0x2e0]
mov ecx, dword [ebp - 0x3c0]
cmp ecx, dword [eax + 0xc]
jbe 0x1008c2d5
mov dword [ebp - 0x3cc], 0
mov edx, dword [ebp - 0x204]
or edx, 1
mov dword [ebp - 0x204], edx
lea eax, [ebp - 0x3cc]
mov dword [ebp - 0xfe4], eax
jmp 0x1008c420
mov ecx, dword [ebp - 0x878]
mov dword [ebp - 0x87c], ecx
mov edx, dword [ebp - 0x87c]
mov dword [ebp - 0x884], edx
mov eax, dword [ebp - 0x2e0]
add eax, 8
mov dword [ebp - 0x880], eax
mov ecx, dword [ebp - 0x3c0]
push ecx
mov ecx, dword [ebp - 0x880]
call fcn.1003bf20
mov edx, dword [ebp - 0x884]
mov dword [eax], edx
mov eax, 0xe
shl eax, 2
mov ecx, dword [ebp - 0x2e0]
add eax, dword [ecx + 4]
mov dword [ebp - 0x3c4], eax
mov edx, dword [ebp - 0x3c4]
cmp dword [edx], 0
je 0x1008c387
mov eax, dword [ebp - 0x3c4]
mov ecx, dword [eax]
mov dword [ebp - 0x888], ecx
mov edx, dword [ebp - 0x888]
mov dword [ebp - 0x88c], edx
lea eax, [ebp - 0x88c]
mov dword [ebp - 0x890], eax
mov ecx, dword [ebp - 0x890]
mov dword [ebp - 0x894], ecx
mov edx, dword [ebp - 0x204]
or edx, 2
mov dword [ebp - 0x204], edx
mov eax, dword [ebp - 0x894]
mov dword [ebp - 0x3c8], eax
jmp 0x1008c3c4
mov dword [ebp - 0x898], 0
lea ecx, [ebp - 0x898]
mov dword [ebp - 0x89c], ecx
mov edx, dword [ebp - 0x89c]
mov dword [ebp - 0x8a0], edx
mov eax, dword [ebp - 0x204]
or eax, 4
mov dword [ebp - 0x204], eax
mov ecx, dword [ebp - 0x8a0]
mov dword [ebp - 0x3c8], ecx
mov edx, dword [ebp - 0x3c8]
mov dword [ebp - 0x8a4], edx
mov eax, dword [ebp - 0x8a4]
mov ecx, dword [eax]
mov dword [ebp - 0x3cc], ecx
mov edx, dword [ebp - 0x204]
or edx, 8
mov dword [ebp - 0x204], edx
mov eax, dword [ebp - 0x204]
and eax, 4
je 0x1008c3ff
and dword [ebp - 0x204], 0xfffffffb
mov ecx, dword [ebp - 0x204]
and ecx, 2
je 0x1008c411
and dword [ebp - 0x204], 0xfffffffd
mov edx, dword [ebp - 0x204]
or edx, 1
mov dword [ebp - 0x204], edx
mov eax, dword [ebp - 0x20c]
add eax, 0x78
mov dword [ebp - 0x2d0], eax
mov dword [ebp - 0x8a8], 0x100aed30
mov ecx, dword [ebp - 0x8a8]
mov dword [ebp - 0x8ac], ecx
mov edx, dword [ebp - 0x2d0]
movzx eax, byte [edx + 0x10]
test eax, eax
je 0x1008c463
mov ecx, 0x13
add ecx, 1
mov dword [ebp - 0x3d0], ecx
jmp 0x1008c46d
mov dword [ebp - 0x3d0], 0x13
mov edx, dword [ebp - 0x3d0]
mov dword [ebp - 0x3d4], edx
mov eax, dword [ebp - 0x2d0]
cmp dword [eax + 4], 0
je 0x1008c4ab
mov ecx, dword [ebp - 0x2d0]
add ecx, 8
call fcn.1003bf10
movzx ecx, al
test ecx, ecx
je 0x1008c4ab
mov edx, dword [ebp - 0x2d0]
mov eax, dword [ebp - 0x3d4]
cmp eax, dword [edx + 0xc]
jbe 0x1008c4d5
mov dword [ebp - 0x3e0], 0
mov ecx, dword [ebp - 0x204]
or ecx, 0x10
mov dword [ebp - 0x204], ecx
lea edx, [ebp - 0x3e0]
mov dword [ebp - 0xfe8], edx
jmp 0x1008c623
mov eax, dword [ebp - 0x8ac]
mov dword [ebp - 0x8b0], eax
mov ecx, dword [ebp - 0x8b0]
mov dword [ebp - 0x8b8], ecx
mov edx, dword [ebp - 0x2d0]
add edx, 8
mov dword [ebp - 0x8b4], edx
mov eax, dword [ebp - 0x3d4]
push eax
mov ecx, dword [ebp - 0x8b4]
call fcn.1003bf20
mov ecx, dword [ebp - 0x8b8]
mov dword [eax], ecx
mov edx, 0x13
shl edx, 2
mov eax, dword [ebp - 0x2d0]
add edx, dword [eax + 4]
mov dword [ebp - 0x3d8], edx
mov ecx, dword [ebp - 0x3d8]
cmp dword [ecx], 0
je 0x1008c587
mov edx, dword [ebp - 0x3d8]
mov eax, dword [edx]
mov dword [ebp - 0x8bc], eax
mov ecx, dword [ebp - 0x8bc]
mov dword [ebp - 0x8c0], ecx
lea edx, [ebp - 0x8c0]
mov dword [ebp - 0x8c4], edx
mov eax, dword [ebp - 0x8c4]
mov dword [ebp - 0x8c8], eax
mov ecx, dword [ebp - 0x204]
or ecx, 0x20
mov dword [ebp - 0x204], ecx
mov edx, dword [ebp - 0x8c8]
mov dword [ebp - 0x3dc], edx
jmp 0x1008c5c4
mov dword [ebp - 0x8cc], 0
lea eax, [ebp - 0x8cc]
mov dword [ebp - 0x8d0], eax
mov ecx, dword [ebp - 0x8d0]
mov dword [ebp - 0x8d4], ecx
mov edx, dword [ebp - 0x204]
or edx, 0x40
mov dword [ebp - 0x204], edx
mov eax, dword [ebp - 0x8d4]
mov dword [ebp - 0x3dc], eax
mov ecx, dword [ebp - 0x3dc]
mov dword [ebp - 0x8d8], ecx
mov edx, dword [ebp - 0x8d8]
mov eax, dword [edx]
mov dword [ebp - 0x3e0], eax
mov ecx, dword [ebp - 0x204]
or ecx, 0x80
mov dword [ebp - 0x204], ecx
mov edx, dword [ebp - 0x204]
and edx, 0x40
je 0x1008c602
and dword [ebp - 0x204], 0xffffffbf
mov eax, dword [ebp - 0x204]
and eax, 0x20
je 0x1008c614
and dword [ebp - 0x204], 0xffffffdf
mov ecx, dword [ebp - 0x204]
or ecx, 0x10
mov dword [ebp - 0x204], ecx
mov edx, dword [ebp - 0x20c]
add edx, 0x14
mov dword [ebp - 0x224], edx
mov eax, dword [0x101674e0]
mov dword [ebp - 0x8dc], eax
lea ecx, [ebp - 0x2dc]
mov dword [ebp - 0x3e4], ecx
mov edx, dword [ebp - 0x3e4]
mov eax, dword [ebp - 0x8dc]
mov dword [edx], eax
mov ecx, dword [ebp - 0x3e4]
mov dword [ebp - 0x8e0], ecx
mov edx, dword [ebp - 0x8e0]
mov dword [ebp - 0xfec], edx
mov dword [ebp - 4], 4
mov eax, dword [ebp - 0x224]
mov ecx, dword [ebp - 0x2dc]
mov dword [eax], ecx
mov edx, dword [ebp - 0x2dc]
mov eax, dword [edx]
mov dword [ebp - 0x8e4], eax
mov ecx, dword [ebp - 0x8e4]
mov edx, dword [ebp - 0x224]
mov dword [edx + 4], ecx
mov eax, dword [ebp - 0x224]
cmp dword [eax + 4], 0
jne 0x1008c6b9
mov dword [ebp - 4], 0xffffffff
jmp 0x1008c90b
mov dword [ebp - 0x30c], 0
mov ecx, dword [ebp - 0x224]
mov edx, dword [ecx + 4]
mov eax, dword [ebp - 0x30c]
mov ecx, dword [edx + eax*4]
mov dword [ebp - 0x8e8], ecx
mov edx, dword [ebp - 0x8e8]
mov dword [ebp - 0x3e8], edx
cmp dword [ebp - 0x3e8], 0
jne 0x1008c6f9
mov byte [ebp - 0x210], 0
jmp 0x1008c750
mov eax, dword [0x100f81f4]
mov dword [ebp - 0x8ec], eax
push 0x1c
lea ecx, [ebp - 0x170]
push ecx
mov edx, dword [ebp - 0x3e8]
push edx
call dword [ebp - 0x8ec]
test eax, eax
jne 0x1008c727
mov byte [ebp - 0x210], 0
jmp 0x1008c750
mov eax, dword [ebp - 0x15c]
and eax, 1
jne 0x1008c740
mov ecx, dword [ebp - 0x15c]
and ecx, 0x100
je 0x1008c749
mov byte [ebp - 0x210], 0
jmp 0x1008c750
mov byte [ebp - 0x210], 1
movzx edx, byte [ebp - 0x210]
test edx, edx
je 0x1008c76f
mov eax, dword [ebp - 0x30c]
add eax, 1
mov dword [ebp - 0x30c], eax
jmp 0x1008c6c3
mov ecx, dword [ebp - 0x30c]
mov dword [ebp - 0x8f0], ecx
mov edx, dword [ebp - 0x8f0]
mov eax, dword [ebp - 0x224]
mov dword [eax + 0xc], edx
mov ecx, dword [ebp - 0x224]
cmp dword [ecx + 0xc], 0
jne 0x1008c7a2
mov dword [ebp - 4], 0xffffffff
jmp 0x1008c90b
mov edx, 1
test edx, edx
je 0x1008c7bf
mov eax, dword [ebp - 0x224]
mov ecx, dword [eax + 0xc]
add ecx, 1
mov dword [ebp - 0x3ec], ecx
jmp 0x1008c7ce
mov edx, dword [ebp - 0x224]
mov eax, dword [edx + 0xc]
mov dword [ebp - 0x3ec], eax
mov edx, dword [ebp - 0x3ec]
lea ecx, [ebp - 0x8f8]
call fcn.1003c4d0
mov dword [ebp - 0x8f4], eax
mov ecx, dword [ebp - 0x8f4]
push ecx
mov ecx, dword [ebp - 0x224]
add ecx, 8
call fcn.1003c560
lea ecx, [ebp - 0x8f8]
call fcn.1003bf30
mov ecx, dword [ebp - 0x224]
add ecx, 8
call fcn.1003bf10
movzx edx, al
test edx, edx
jne 0x1008c826
mov dword [ebp - 4], 0xffffffff
jmp 0x1008c90b
mov ecx, dword [ebp - 0x224]
add ecx, 8
call fcn.1002c280
mov dword [ebp - 0x8fc], eax
mov eax, dword [ebp - 0x8fc]
mov dword [ebp - 0x38], eax
mov ecx, 1
test ecx, ecx
je 0x1008c8bf
mov edx, dword [ebp - 0x38]
mov dword [ebp - 0x900], edx
mov eax, dword [ebp - 0x224]
mov ecx, dword [eax + 0xc]
lea edx, [ecx*4 + 4]
push edx
mov eax, dword [ebp - 0x224]
mov ecx, dword [eax + 4]
sub ecx, 4
push ecx
mov edx, dword [ebp - 0x900]
push edx
call sub.VCRUNTIME140.dll_memcpy
add esp, 0xc
mov eax, dword [ebp - 0x38]
mov dword [ebp - 0x904], eax
mov ecx, dword [ebp - 0x904]
add ecx, 4
mov dword [ebp - 0x908], ecx
cmp dword [ebp - 0x2dc], 0
jne 0x1008c8a5
jmp 0x1008c8b3
mov edx, dword [ebp - 0x2dc]
mov eax, dword [ebp - 0x908]
mov dword [edx], eax
mov ecx, dword [ebp - 0x224]
mov byte [ecx + 0x10], 1
jmp 0x1008c904
mov edx, dword [ebp - 0x38]
mov dword [ebp - 0x90c], edx
mov eax, dword [ebp - 0x224]
mov ecx, dword [eax + 0xc]
shl ecx, 2
push ecx
mov edx, dword [ebp - 0x224]
mov eax, dword [edx + 4]
push eax
mov ecx, dword [ebp - 0x90c]
push ecx
call sub.VCRUNTIME140.dll_memcpy
add esp, 0xc
cmp dword [ebp - 0x2dc], 0
jne 0x1008c8f9
jmp 0x1008c904
mov edx, dword [ebp - 0x38]
mov eax, dword [ebp - 0x2dc]
mov dword [eax], edx
mov dword [ebp - 4], 0xffffffff
mov ecx, dword [ebp - 0x20c]
add ecx, 0x14
mov dword [ebp - 0x2d8], ecx
mov dword [ebp - 0x910], 0x100a25a0
mov edx, dword [ebp - 0x910]
mov dword [ebp - 0x914], edx
mov eax, dword [ebp - 0x2d8]
movzx ecx, byte [eax + 0x10]
test ecx, ecx
je 0x1008c94e
mov edx, 0x11
add edx, 1
mov dword [ebp - 0x3f0], edx
jmp 0x1008c958
mov dword [ebp - 0x3f0], 0x11
mov eax, dword [ebp - 0x3f0]
mov dword [ebp - 0x3f4], eax
mov ecx, dword [ebp - 0x2d8]
cmp dword [ecx + 4], 0
je 0x1008c996
mov ecx, dword [ebp - 0x2d8]
add ecx, 8
call fcn.1003bf10
movzx edx, al
test edx, edx
je 0x1008c996
mov eax, dword [ebp - 0x2d8]
mov ecx, dword [ebp - 0x3f4]
cmp ecx, dword [eax + 0xc]
jbe 0x1008c9c3
mov dword [ebp - 0x400], 0
mov edx, dword [ebp - 0x204]
or edx, 0x100
mov dword [ebp - 0x204], edx
lea eax, [ebp - 0x400]
mov dword [ebp - 0xfd4], eax
jmp 0x1008cb24
mov ecx, dword [ebp - 0x914]
mov dword [ebp - 0x918], ecx
mov edx, dword [ebp - 0x918]
mov dword [ebp - 0x920], edx
mov eax, dword [ebp - 0x2d8]
add eax, 8
mov dword [ebp - 0x91c], eax
mov ecx, dword [ebp - 0x3f4]
push ecx
mov ecx, dword [ebp - 0x91c]
call fcn.1003bf20
mov edx, dword [ebp - 0x920]
mov dword [eax], edx
mov eax, 0x11
shl eax, 2
mov ecx, dword [ebp - 0x2d8]
add eax, dword [ecx + 4]
mov dword [ebp - 0x3f8], eax
mov edx, dword [ebp - 0x3f8]
cmp dword [edx], 0
je 0x1008ca78
mov eax, dword [ebp - 0x3f8]
mov ecx, dword [eax]
mov dword [ebp - 0x924], ecx
mov edx, dword [ebp - 0x924]
mov dword [ebp - 0x928], edx
lea eax, [ebp - 0x928]
mov dword [ebp - 0x92c], eax
mov ecx, dword [ebp - 0x92c]
mov dword [ebp - 0x930], ecx
mov edx, dword [ebp - 0x204]
or edx, 0x200
mov dword [ebp - 0x204], edx
mov eax, dword [ebp - 0x930]
mov dword [ebp - 0x3fc], eax
jmp 0x1008cab7
mov dword [ebp - 0x934], 0
lea ecx, [ebp - 0x934]
mov dword [ebp - 0x938], ecx
mov edx, dword [ebp - 0x938]
mov dword [ebp - 0x93c], edx
mov eax, dword [ebp - 0x204]
or eax, 0x400
mov dword [ebp - 0x204], eax
mov ecx, dword [ebp - 0x93c]
mov dword [ebp - 0x3fc], ecx
mov edx, dword [ebp - 0x3fc]
mov dword [ebp - 0x940], edx
mov eax, dword [ebp - 0x940]
mov ecx, dword [eax]
mov dword [ebp - 0x400], ecx
mov edx, dword [ebp - 0x204]
or edx, 0x800
mov dword [ebp - 0x204], edx
mov eax, dword [ebp - 0x204]
and eax, 0x400
je 0x1008cafa
and dword [ebp - 0x204], 0xfffffbff
mov ecx, dword [ebp - 0x204]
and ecx, 0x200
je 0x1008cb12
and dword [ebp - 0x204], 0xfffffdff
mov edx, dword [ebp - 0x204]
or edx, 0x100
mov dword [ebp - 0x204], edx
mov eax, dword [ebp - 0x20c]
add eax, 0x14
mov dword [ebp - 0x2d4], eax
mov dword [ebp - 0x944], 0x100a25d0
mov ecx, dword [ebp - 0x944]
mov dword [ebp - 0x948], ecx
mov edx, dword [ebp - 0x2d4]
movzx eax, byte [edx + 0x10]
test eax, eax
je 0x1008cb67
mov ecx, 0x12
add ecx, 1
mov dword [ebp - 0x404], ecx
jmp 0x1008cb71
mov dword [ebp - 0x404], 0x12
mov edx, dword [ebp - 0x404]
mov dword [ebp - 0x408], edx
mov eax, dword [ebp - 0x2d4]
cmp dword [eax + 4], 0
je 0x1008cbaf
mov ecx, dword [ebp - 0x2d4]
add ecx, 8
call fcn.1003bf10
movzx ecx, al
test ecx, ecx
je 0x1008cbaf
mov edx, dword [ebp - 0x2d4]
mov eax, dword [ebp - 0x408]
cmp eax, dword [edx + 0xc]
jbe 0x1008cbdc
mov dword [ebp - 0x414], 0
mov ecx, dword [ebp - 0x204]
or ecx, 0x1000
mov dword [ebp - 0x204], ecx
lea edx, [ebp - 0x414]
mov dword [ebp - 0xf30], edx
jmp 0x1008cd3e
mov eax, dword [ebp - 0x948]
mov dword [ebp - 0x94c], eax
mov ecx, dword [ebp - 0x94c]
mov dword [ebp - 0x954], ecx
mov edx, dword [ebp - 0x2d4]
add edx, 8
mov dword [ebp - 0x950], edx
mov eax, dword [ebp - 0x408]
push eax
mov ecx, dword [ebp - 0x950]
call fcn.1003bf20
mov ecx, dword [ebp - 0x954]
mov dword [eax], ecx
mov edx, 0x12
shl edx, 2
mov eax, dword [ebp - 0x2d4]
add edx, dword [eax + 4]
mov dword [ebp - 0x40c], edx
mov ecx, dword [ebp - 0x40c]
cmp dword [ecx], 0
je 0x1008cc91
mov edx, dword [ebp - 0x40c]
mov eax, dword [edx]
mov dword [ebp - 0x958], eax
mov ecx, dword [ebp - 0x958]
mov dword [ebp - 0x95c], ecx
lea edx, [ebp - 0x95c]
mov dword [ebp - 0x960], edx
mov eax, dword [ebp - 0x960]
mov dword [ebp - 0x964], eax
mov ecx, dword [ebp - 0x204]
or ecx, 0x2000
mov dword [ebp - 0x204], ecx
mov edx, dword [ebp - 0x964]
mov dword [ebp - 0x410], edx
jmp 0x1008ccd1
mov dword [ebp - 0x968], 0
lea eax, [ebp - 0x968]
mov dword [ebp - 0x96c], eax
mov ecx, dword [ebp - 0x96c]
mov dword [ebp - 0x970], ecx
mov edx, dword [ebp - 0x204]
or edx, 0x4000
mov dword [ebp - 0x204], edx
mov eax, dword [ebp - 0x970]
mov dword [ebp - 0x410], eax
mov ecx, dword [ebp - 0x410]
mov dword [ebp - 0x974], ecx
mov edx, dword [ebp - 0x974]
mov eax, dword [edx]
mov dword [ebp - 0x414], eax
mov ecx, dword [ebp - 0x204]
or ecx, 0x8000
mov dword [ebp - 0x204], ecx
mov edx, dword [ebp - 0x204]
and edx, 0x4000
je 0x1008cd15
and dword [ebp - 0x204], 0xffffbfff
mov eax, dword [ebp - 0x204]
and eax, 0x2000
je 0x1008cd2c
and dword [ebp - 0x204], 0xffffdfff
mov ecx, dword [ebp - 0x204]
or ecx, 0x1000
mov dword [ebp - 0x204], ecx
mov edx, dword [ebp - 0x20c]
add edx, 0x14
mov dword [ebp - 0x2cc], edx
mov dword [ebp - 0x978], 0x100a27a0
mov eax, dword [ebp - 0x978]
mov dword [ebp - 0x97c], eax
mov ecx, dword [ebp - 0x2cc]
movzx edx, byte [ecx + 0x10]
test edx, edx
je 0x1008cd81
mov eax, 0x18
add eax, 1
mov dword [ebp - 0x418], eax
jmp 0x1008cd8b
mov dword [ebp - 0x418], 0x18
mov ecx, dword [ebp - 0x418]
mov dword [ebp - 0x41c], ecx
mov edx, dword [ebp - 0x2cc]
cmp dword [edx + 4], 0
je 0x1008cdc9
mov ecx, dword [ebp - 0x2cc]
add ecx, 8
call fcn.1003bf10
movzx eax, al
test eax, eax
je 0x1008cdc9
mov ecx, dword [ebp - 0x2cc]
mov edx, dword [ebp - 0x41c]
cmp edx, dword [ecx + 0xc]
jbe 0x1008cdf5
mov dword [ebp - 0x428], 0
mov eax, dword [ebp - 0x204]
or eax, 0x10000
mov dword [ebp - 0x204], eax
lea ecx, [ebp - 0x428]
mov dword [ebp - 0xf34], ecx
jmp 0x1008cf57
mov edx, dword [ebp - 0x97c]
mov dword [ebp - 0x980], edx
mov eax, dword [ebp - 0x980]
mov dword [ebp - 0x988], eax
mov ecx, dword [ebp - 0x2cc]
add ecx, 8
mov dword [ebp - 0x984], ecx
mov edx, dword [ebp - 0x41c]
push edx
mov ecx, dword [ebp - 0x984]
call fcn.1003bf20
mov ecx, dword [ebp - 0x988]
mov dword [eax], ecx
mov edx, 0x18
shl edx, 2
mov eax, dword [ebp - 0x2cc]
add edx, dword [eax + 4]
mov dword [ebp - 0x420], edx
mov ecx, dword [ebp - 0x420]
cmp dword [ecx], 0
je 0x1008ceaa
mov edx, dword [ebp - 0x420]
mov eax, dword [edx]
mov dword [ebp - 0x98c], eax
mov ecx, dword [ebp - 0x98c]
mov dword [ebp - 0x990], ecx
lea edx, [ebp - 0x990]
mov dword [ebp - 0x994], edx
mov eax, dword [ebp - 0x994]
mov dword [ebp - 0x998], eax
mov ecx, dword [ebp - 0x204]
or ecx, 0x20000
mov dword [ebp - 0x204], ecx
mov edx, dword [ebp - 0x998]
mov dword [ebp - 0x424], edx
jmp 0x1008ceea
mov dword [ebp - 0x99c], 0
lea eax, [ebp - 0x99c]
mov dword [ebp - 0x9a0], eax
mov ecx, dword [ebp - 0x9a0]
mov dword [ebp - 0x9a4], ecx
mov edx, dword [ebp - 0x204]
or edx, 0x40000
mov dword [ebp - 0x204], edx
mov eax, dword [ebp - 0x9a4]
mov dword [ebp - 0x424], eax
mov ecx, dword [ebp - 0x424]
mov dword [ebp - 0x9a8], ecx
mov edx, dword [ebp - 0x9a8]
mov eax, dword [edx]
mov dword [ebp - 0x428], eax
mov ecx, dword [ebp - 0x204]
or ecx, 0x80000
mov dword [ebp - 0x204], ecx
mov edx, dword [ebp - 0x204]
and edx, 0x40000
je 0x1008cf2e
and dword [ebp - 0x204], 0xfffbffff
mov eax, dword [ebp - 0x204]
and eax, 0x20000
je 0x1008cf45
and dword [ebp - 0x204], 0xfffdffff
mov ecx, dword [ebp - 0x204]
or ecx, 0x10000
mov dword [ebp - 0x204], ecx
mov edx, dword [ebp - 0x20c]
add edx, 0x14
mov dword [ebp - 0x2c4], edx
mov dword [ebp - 0x9ac], 0x100a2910
mov eax, dword [ebp - 0x9ac]
mov dword [ebp - 0x9b0], eax
mov ecx, dword [ebp - 0x2c4]
movzx edx, byte [ecx + 0x10]
test edx, edx
je 0x1008cf9a
mov eax, 0x2c
add eax, 1
mov dword [ebp - 0x42c], eax
jmp 0x1008cfa4
mov dword [ebp - 0x42c], 0x2c
mov ecx, dword [ebp - 0x42c]
mov dword [ebp - 0x430], ecx
mov edx, dword [ebp - 0x2c4]
cmp dword [edx + 4], 0
je 0x1008cfe2
mov ecx, dword [ebp - 0x2c4]
add ecx, 8
call fcn.1003bf10
movzx eax, al
test eax, eax
je 0x1008cfe2
mov ecx, dword [ebp - 0x2c4]
mov edx, dword [ebp - 0x430]
cmp edx, dword [ecx + 0xc]
jbe 0x1008d00e
mov dword [ebp - 0x43c], 0
mov eax, dword [ebp - 0x204]
or eax, 0x100000
mov dword [ebp - 0x204], eax
lea ecx, [ebp - 0x43c]
mov dword [ebp - 0xf38], ecx
jmp 0x1008d170
mov edx, dword [ebp - 0x9b0]
mov dword [ebp - 0x9b4], edx
mov eax, dword [ebp - 0x9b4]
mov dword [ebp - 0x9bc], eax
mov ecx, dword [ebp - 0x2c4]
add ecx, 8
mov dword [ebp - 0x9b8], ecx
mov edx, dword [ebp - 0x430]
push edx
mov ecx, dword [ebp - 0x9b8]
call fcn.1003bf20
mov ecx, dword [ebp - 0x9bc]
mov dword [eax], ecx
mov edx, 0x2c
shl edx, 2
mov eax, dword [ebp - 0x2c4]
add edx, dword [eax + 4]
mov dword [ebp - 0x434], edx
mov ecx, dword [ebp - 0x434]
cmp dword [ecx], 0
je 0x1008d0c3
mov edx, dword [ebp - 0x434]
mov eax, dword [edx]
mov dword [ebp - 0x9c0], eax
mov ecx, dword [ebp - 0x9c0]
mov dword [ebp - 0x9c4], ecx
lea edx, [ebp - 0x9c4]
mov dword [ebp - 0x9c8], edx
mov eax, dword [ebp - 0x9c8]
mov dword [ebp - 0x9cc], eax
mov ecx, dword [ebp - 0x204]
or ecx, 0x200000
mov dword [ebp - 0x204], ecx
mov edx, dword [ebp - 0x9cc]
mov dword [ebp - 0x438], edx
jmp 0x1008d103
mov dword [ebp - 0x9d0], 0
lea eax, [ebp - 0x9d0]
mov dword [ebp - 0x9d4], eax
mov ecx, dword [ebp - 0x9d4]
mov dword [ebp - 0x9d8], ecx
mov edx, dword [ebp - 0x204]
or edx, 0x400000
mov dword [ebp - 0x204], edx
mov eax, dword [ebp - 0x9d8]
mov dword [ebp - 0x438], eax
mov ecx, dword [ebp - 0x438]
mov dword [ebp - 0x9dc], ecx
mov edx, dword [ebp - 0x9dc]
mov eax, dword [edx]
mov dword [ebp - 0x43c], eax
mov ecx, dword [ebp - 0x204]
or ecx, 0x800000
mov dword [ebp - 0x204], ecx
mov edx, dword [ebp - 0x204]
and edx, 0x400000
je 0x1008d147
and dword [ebp - 0x204], 0xffbfffff
mov eax, dword [ebp - 0x204]
and eax, 0x200000
je 0x1008d15e
and dword [ebp - 0x204], 0xffdfffff
mov ecx, dword [ebp - 0x204]
or ecx, 0x100000
mov dword [ebp - 0x204], ecx
mov edx, dword [ebp - 0x20c]
add edx, 0x8c
mov dword [ebp - 0x228], edx
mov eax, dword [0x10167490]
mov dword [ebp - 0x9e0], eax
lea ecx, [ebp - 0x2bc]
mov dword [ebp - 0x440], ecx
mov edx, dword [ebp - 0x440]
mov eax, dword [ebp - 0x9e0]
mov dword [edx], eax
mov ecx, dword [ebp - 0x440]
mov dword [ebp - 0x9e4], ecx
mov edx, dword [ebp - 0x9e4]
mov dword [ebp - 0xf3c], edx
mov dword [ebp - 4], 5
mov eax, dword [ebp - 0x228]
mov ecx, dword [ebp - 0x2bc]
mov dword [eax], ecx
mov edx, dword [ebp - 0x2bc]
mov eax, dword [edx]
mov dword [ebp - 0x9e8], eax
mov ecx, dword [ebp - 0x9e8]
mov edx, dword [ebp - 0x228]
mov dword [edx + 4], ecx
mov eax, dword [ebp - 0x228]
cmp dword [eax + 4], 0
jne 0x1008d209
mov dword [ebp - 4], 0xffffffff
jmp 0x1008d45b
mov dword [ebp - 0x310], 0
mov ecx, dword [ebp - 0x228]
mov edx, dword [ecx + 4]
mov eax, dword [ebp - 0x310]
mov ecx, dword [edx + eax*4]
mov dword [ebp - 0x9ec], ecx
mov edx, dword [ebp - 0x9ec]
mov dword [ebp - 0x444], edx
cmp dword [ebp - 0x444], 0
jne 0x1008d249
mov byte [ebp - 0x216], 0
jmp 0x1008d2a0
mov eax, dword [0x100f81f4]
mov dword [ebp - 0x9f0], eax
push 0x1c
lea ecx, [ebp - 0x138]
push ecx
mov edx, dword [ebp - 0x444]
push edx
call dword [ebp - 0x9f0]
test eax, eax
jne 0x1008d277
mov byte [ebp - 0x216], 0
jmp 0x1008d2a0
mov eax, dword [ebp - 0x124]
and eax, 1
jne 0x1008d290
mov ecx, dword [ebp - 0x124]
and ecx, 0x100
je 0x1008d299
mov byte [ebp - 0x216], 0
jmp 0x1008d2a0
mov byte [ebp - 0x216], 1
movzx edx, byte [ebp - 0x216]
test edx, edx
je 0x1008d2bf
mov eax, dword [ebp - 0x310]
add eax, 1
mov dword [ebp - 0x310], eax
jmp 0x1008d213
mov ecx, dword [ebp - 0x310]
mov dword [ebp - 0x9f4], ecx
mov edx, dword [ebp - 0x9f4]
mov eax, dword [ebp - 0x228]
mov dword [eax + 0xc], edx
mov ecx, dword [ebp - 0x228]
cmp dword [ecx + 0xc], 0
jne 0x1008d2f2
mov dword [ebp - 4], 0xffffffff
jmp 0x1008d45b
mov edx, 1
test edx, edx
je 0x1008d30f
mov eax, dword [ebp - 0x228]
mov ecx, dword [eax + 0xc]
add ecx, 1
mov dword [ebp - 0x448], ecx
jmp 0x1008d31e
mov edx, dword [ebp - 0x228]
mov eax, dword [edx + 0xc]
mov dword [ebp - 0x448], eax
mov edx, dword [ebp - 0x448]
lea ecx, [ebp - 0x9fc]
call fcn.1003c4d0
mov dword [ebp - 0x9f8], eax
mov ecx, dword [ebp - 0x9f8]
push ecx
mov ecx, dword [ebp - 0x228]
add ecx, 8
call fcn.1003c560
lea ecx, [ebp - 0x9fc]
call fcn.1003bf30
mov ecx, dword [ebp - 0x228]
add ecx, 8
call fcn.1003bf10
movzx edx, al
test edx, edx
jne 0x1008d376
mov dword [ebp - 4], 0xffffffff
jmp 0x1008d45b
mov ecx, dword [ebp - 0x228]
add ecx, 8
call fcn.1002c280
mov dword [ebp - 0xa00], eax
mov eax, dword [ebp - 0xa00]
mov dword [ebp - 0x3c], eax
mov ecx, 1
test ecx, ecx
je 0x1008d40f
mov edx, dword [ebp - 0x3c]
mov dword [ebp - 0xa04], edx
mov eax, dword [ebp - 0x228]
mov ecx, dword [eax + 0xc]
lea edx, [ecx*4 + 4]
push edx
mov eax, dword [ebp - 0x228]
mov ecx, dword [eax + 4]
sub ecx, 4
push ecx
mov edx, dword [ebp - 0xa04]
push edx
call sub.VCRUNTIME140.dll_memcpy
add esp, 0xc
mov eax, dword [ebp - 0x3c]
mov dword [ebp - 0xa08], eax
mov ecx, dword [ebp - 0xa08]
add ecx, 4
mov dword [ebp - 0xa0c], ecx
cmp dword [ebp - 0x2bc], 0
jne 0x1008d3f5
jmp 0x1008d403
mov edx, dword [ebp - 0x2bc]
mov eax, dword [ebp - 0xa0c]
mov dword [edx], eax
mov ecx, dword [ebp - 0x228]
mov byte [ecx + 0x10], 1
jmp 0x1008d454
mov edx, dword [ebp - 0x3c]
mov dword [ebp - 0xa10], edx
mov eax, dword [ebp - 0x228]
mov ecx, dword [eax + 0xc]
shl ecx, 2
push ecx
mov edx, dword [ebp - 0x228]
mov eax, dword [edx + 4]
push eax
mov ecx, dword [ebp - 0xa10]
push ecx
call sub.VCRUNTIME140.dll_memcpy
add esp, 0xc
cmp dword [ebp - 0x2bc], 0
jne 0x1008d449
jmp 0x1008d454
mov edx, dword [ebp - 0x3c]
mov eax, dword [ebp - 0x2bc]
mov dword [eax], edx
mov dword [ebp - 4], 0xffffffff
mov ecx, dword [ebp - 0x20c]
add ecx, 0x8c
mov dword [ebp - 0x2b4], ecx
mov dword [ebp - 0xa14], 0x1009f5a0
mov edx, dword [ebp - 0xa14]
mov dword [ebp - 0xa18], edx
mov eax, dword [ebp - 0x2b4]
movzx ecx, byte [eax + 0x10]
test ecx, ecx
je 0x1008d4a1
mov edx, 0x43
add edx, 1
mov dword [ebp - 0x44c], edx
jmp 0x1008d4ab
mov dword [ebp - 0x44c], 0x43
mov eax, dword [ebp - 0x44c]
mov dword [ebp - 0x450], eax
mov ecx, dword [ebp - 0x2b4]
cmp dword [ecx + 4], 0
je 0x1008d4e9
mov ecx, dword [ebp - 0x2b4]
add ecx, 8
call fcn.1003bf10
movzx edx, al
test edx, edx
je 0x1008d4e9
mov eax, dword [ebp - 0x2b4]
mov ecx, dword [ebp - 0x450]
cmp ecx, dword [eax + 0xc]
jbe 0x1008d516
mov dword [ebp - 0x45c], 0
mov edx, dword [ebp - 0x204]
or edx, 0x1000000
mov dword [ebp - 0x204], edx
lea eax, [ebp - 0x45c]
mov dword [ebp - 0xf40], eax
jmp 0x1008d677
mov ecx, dword [ebp - 0xa18]
mov dword [ebp - 0xa1c], ecx
mov edx, dword [ebp - 0xa1c]
mov dword [ebp - 0xa24], edx
mov eax, dword [ebp - 0x2b4]
add eax, 8
mov dword [ebp - 0xa20], eax
mov ecx, dword [ebp - 0x450]
push ecx
mov ecx, dword [ebp - 0xa20]
call fcn.1003bf20
mov edx, dword [ebp - 0xa24]
mov dword [eax], edx
mov eax, 0x43
shl eax, 2
mov ecx, dword [ebp - 0x2b4]
add eax, dword [ecx + 4]
mov dword [ebp - 0x454], eax
mov edx, dword [ebp - 0x454]
cmp dword [edx], 0
je 0x1008d5cb
mov eax, dword [ebp - 0x454]
mov ecx, dword [eax]
mov dword [ebp - 0xa28], ecx
mov edx, dword [ebp - 0xa28]
mov dword [ebp - 0xa2c], edx
lea eax, [ebp - 0xa2c]
mov dword [ebp - 0xa30], eax
mov ecx, dword [ebp - 0xa30]
mov dword [ebp - 0xa34], ecx
mov edx, dword [ebp - 0x204]
or edx, 0x2000000
mov dword [ebp - 0x204], edx
mov eax, dword [ebp - 0xa34]
mov dword [ebp - 0x458], eax
jmp 0x1008d60a
mov dword [ebp - 0xa38], 0
lea ecx, [ebp - 0xa38]
mov dword [ebp - 0xa3c], ecx
mov edx, dword [ebp - 0xa3c]
mov dword [ebp - 0xa40], edx
mov eax, dword [ebp - 0x204]
or eax, 0x4000000
mov dword [ebp - 0x204], eax
mov ecx, dword [ebp - 0xa40]
mov dword [ebp - 0x458], ecx
mov edx, dword [ebp - 0x458]
mov dword [ebp - 0xa44], edx
mov eax, dword [ebp - 0xa44]
mov ecx, dword [eax]
mov dword [ebp - 0x45c], ecx
mov edx, dword [ebp - 0x204]
or edx, 0x8000000
mov dword [ebp - 0x204], edx
mov eax, dword [ebp - 0x204]
and eax, 0x4000000
je 0x1008d64d
and dword [ebp - 0x204], 0xfbffffff
mov ecx, dword [ebp - 0x204]
and ecx, 0x2000000
je 0x1008d665
and dword [ebp - 0x204], 0xfdffffff
mov edx, dword [ebp - 0x204]
or edx, 0x1000000
mov dword [ebp - 0x204], edx
mov eax, dword [ebp - 0x20c]
add eax, 0x8c
mov dword [ebp - 0x2ac], eax
mov dword [ebp - 0xa48], 0x1009f5f0
mov ecx, dword [ebp - 0xa48]
mov dword [ebp - 0xa4c], ecx
mov edx, dword [ebp - 0x2ac]
movzx eax, byte [edx + 0x10]
test eax, eax
je 0x1008d6bc
mov ecx, 0x52
add ecx, 1
mov dword [ebp - 0x460], ecx
jmp 0x1008d6c6
mov dword [ebp - 0x460], 0x52
mov edx, dword [ebp - 0x460]
mov dword [ebp - 0x464], edx
mov eax, dword [ebp - 0x2ac]
cmp dword [eax + 4], 0
je 0x1008d704
mov ecx, dword [ebp - 0x2ac]
add ecx, 8
call fcn.1003bf10
movzx ecx, al
test ecx, ecx
je 0x1008d704
mov edx, dword [ebp - 0x2ac]
mov eax, dword [ebp - 0x464]
cmp eax, dword [edx + 0xc]
jbe 0x1008d731
mov dword [ebp - 0x470], 0
mov ecx, dword [ebp - 0x204]
or ecx, 0x10000000
mov dword [ebp - 0x204], ecx
lea edx, [ebp - 0x470]
mov dword [ebp - 0xf44], edx
jmp 0x1008d893
mov eax, dword [ebp - 0xa4c]
mov dword [ebp - 0xa50], eax
mov ecx, dword [ebp - 0xa50]
mov dword [ebp - 0xa58], ecx
mov edx, dword [ebp - 0x2ac]
add edx, 8
mov dword [ebp - 0xa54], edx
mov eax, dword [ebp - 0x464]
push eax
mov ecx, dword [ebp - 0xa54]
call fcn.1003bf20
mov ecx, dword [ebp - 0xa58]
mov dword [eax], ecx
mov edx, 0x52
shl edx, 2
mov eax, dword [ebp - 0x2ac]
add edx, dword [eax + 4]
mov dword [ebp - 0x468], edx
mov ecx, dword [ebp - 0x468]
cmp dword [ecx], 0
je 0x1008d7e6
mov edx, dword [ebp - 0x468]
mov eax, dword [edx]
mov dword [ebp - 0xa5c], eax
mov ecx, dword [ebp - 0xa5c]
mov dword [ebp - 0xa60], ecx
lea edx, [ebp - 0xa60]
mov dword [ebp - 0xa64], edx
mov eax, dword [ebp - 0xa64]
mov dword [ebp - 0xa68], eax
mov ecx, dword [ebp - 0x204]
or ecx, 0x20000000
mov dword [ebp - 0x204], ecx
mov edx, dword [ebp - 0xa68]
mov dword [ebp - 0x46c], edx
jmp 0x1008d826
mov dword [ebp - 0xa6c], 0
lea eax, [ebp - 0xa6c]
mov dword [ebp - 0xa70], eax
mov ecx, dword [ebp - 0xa70]
mov dword [ebp - 0xa74], ecx
mov edx, dword [ebp - 0x204]
or edx, 0x40000000
mov dword [ebp - 0x204], edx
mov eax, dword [ebp - 0xa74]
mov dword [ebp - 0x46c], eax
mov ecx, dword [ebp - 0x46c]
mov dword [ebp - 0xa78], ecx
mov edx, dword [ebp - 0xa78]
mov eax, dword [edx]
mov dword [ebp - 0x470], eax
mov ecx, dword [ebp - 0x204]
or ecx, 0x80000000
mov dword [ebp - 0x204], ecx
mov edx, dword [ebp - 0x204]
and edx, 0x40000000
je 0x1008d86a
and dword [ebp - 0x204], 0xbfffffff
mov eax, dword [ebp - 0x204]
and eax, 0x20000000
je 0x1008d881
and dword [ebp - 0x204], 0xdfffffff
mov ecx, dword [ebp - 0x204]
or ecx, 0x10000000
mov dword [ebp - 0x204], ecx
mov edx, dword [ebp - 0x20c]
add edx, 0x8c
mov dword [ebp - 0x2a4], edx
mov dword [ebp - 0xa7c], 0x1009f680
mov eax, dword [ebp - 0xa7c]
mov dword [ebp - 0xa80], eax
mov ecx, dword [ebp - 0x2a4]
movzx edx, byte [ecx + 0x10]
test edx, edx
je 0x1008d8d9
mov eax, 0x74
add eax, 1
mov dword [ebp - 0x474], eax
jmp 0x1008d8e3
mov dword [ebp - 0x474], 0x74
mov ecx, dword [ebp - 0x474]
mov dword [ebp - 0x478], ecx
mov edx, dword [ebp - 0x2a4]
cmp dword [edx + 4], 0
je 0x1008d921
mov ecx, dword [ebp - 0x2a4]
add ecx, 8
call fcn.1003bf10
movzx eax, al
test eax, eax
je 0x1008d921
mov ecx, dword [ebp - 0x2a4]
mov edx, dword [ebp - 0x478]
cmp edx, dword [ecx + 0xc]
jbe 0x1008d94b
mov dword [ebp - 0x484], 0
mov eax, dword [ebp - 0x1fc]
or eax, 1
mov dword [ebp - 0x1fc], eax
lea ecx, [ebp - 0x484]
mov dword [ebp - 0xf48], ecx
jmp 0x1008da96
mov edx, dword [ebp - 0xa80]
mov dword [ebp - 0xa84], edx
mov eax, dword [ebp - 0xa84]
mov dword [ebp - 0xa8c], eax
mov ecx, dword [ebp - 0x2a4]
add ecx, 8
mov dword [ebp - 0xa88], ecx
mov edx, dword [ebp - 0x478]
push edx
mov ecx, dword [ebp - 0xa88]
call fcn.1003bf20
mov ecx, dword [ebp - 0xa8c]
mov dword [eax], ecx
mov edx, 0x74
shl edx, 2
mov eax, dword [ebp - 0x2a4]
add edx, dword [eax + 4]
mov dword [ebp - 0x47c], edx
mov ecx, dword [ebp - 0x47c]
cmp dword [ecx], 0
je 0x1008d9fd
mov edx, dword [ebp - 0x47c]
mov eax, dword [edx]
mov dword [ebp - 0xa90], eax
mov ecx, dword [ebp - 0xa90]
mov dword [ebp - 0xa94], ecx
lea edx, [ebp - 0xa94]
mov dword [ebp - 0xa98], edx
mov eax, dword [ebp - 0xa98]
mov dword [ebp - 0xa9c], eax
mov ecx, dword [ebp - 0x1fc]
or ecx, 2
mov dword [ebp - 0x1fc], ecx
mov edx, dword [ebp - 0xa9c]
mov dword [ebp - 0x480], edx
jmp 0x1008da3a
mov dword [ebp - 0xaa0], 0
lea eax, [ebp - 0xaa0]
mov dword [ebp - 0xaa4], eax
mov ecx, dword [ebp - 0xaa4]
mov dword [ebp - 0xaa8], ecx
mov edx, dword [ebp - 0x1fc]
or edx, 4
mov dword [ebp - 0x1fc], edx
mov eax, dword [ebp - 0xaa8]
mov dword [ebp - 0x480], eax
mov ecx, dword [ebp - 0x480]
mov dword [ebp - 0xaac], ecx
mov edx, dword [ebp - 0xaac]
mov eax, dword [edx]
mov dword [ebp - 0x484], eax
mov ecx, dword [ebp - 0x1fc]
or ecx, 8
mov dword [ebp - 0x1fc], ecx
mov edx, dword [ebp - 0x1fc]
and edx, 4
je 0x1008da75
and dword [ebp - 0x1fc], 0xfffffffb
mov eax, dword [ebp - 0x1fc]
and eax, 2
je 0x1008da87
and dword [ebp - 0x1fc], 0xfffffffd
mov ecx, dword [ebp - 0x1fc]
or ecx, 1
mov dword [ebp - 0x1fc], ecx
mov edx, dword [ebp - 0x20c]
add edx, 0xdc
mov dword [ebp - 0x248], edx
mov eax, dword [0x101674b0]
mov dword [ebp - 0xab0], eax
lea ecx, [ebp - 0x29c]
mov dword [ebp - 0x488], ecx
mov edx, dword [ebp - 0x488]
mov eax, dword [ebp - 0xab0]
mov dword [edx], eax
mov ecx, dword [ebp - 0x488]
mov dword [ebp - 0xab4], ecx
mov edx, dword [ebp - 0xab4]
mov dword [ebp - 0xf4c], edx
mov dword [ebp - 4], 6
mov eax, dword [ebp - 0x248]
mov ecx, dword [ebp - 0x29c]
mov dword [eax], ecx
mov edx, dword [ebp - 0x29c]
mov eax, dword [edx]
mov dword [ebp - 0xab8], eax
mov ecx, dword [ebp - 0xab8]
mov edx, dword [ebp - 0x248]
mov dword [edx + 4], ecx
mov eax, dword [ebp - 0x248]
cmp dword [eax + 4], 0
jne 0x1008db2f
mov dword [ebp - 4], 0xffffffff
jmp 0x1008dd81
mov dword [ebp - 0x314], 0
mov ecx, dword [ebp - 0x248]
mov edx, dword [ecx + 4]
mov eax, dword [ebp - 0x314]
mov ecx, dword [edx + eax*4]
mov dword [ebp - 0xabc], ecx
mov edx, dword [ebp - 0xabc]
mov dword [ebp - 0x48c], edx
cmp dword [ebp - 0x48c], 0
jne 0x1008db6f
mov byte [ebp - 0x215], 0
jmp 0x1008dbc6
mov eax, dword [0x100f81f4]
mov dword [ebp - 0xac0], eax
push 0x1c
lea ecx, [ebp - 0x11c]
push ecx
mov edx, dword [ebp - 0x48c]
push edx
call dword [ebp - 0xac0]
test eax, eax
jne 0x1008db9d
mov byte [ebp - 0x215], 0
jmp 0x1008dbc6
mov eax, dword [ebp - 0x108]
and eax, 1
jne 0x1008dbb6
mov ecx, dword [ebp - 0x108]
and ecx, 0x100
je 0x1008dbbf
mov byte [ebp - 0x215], 0
jmp 0x1008dbc6
mov byte [ebp - 0x215], 1
movzx edx, byte [ebp - 0x215]
test edx, edx
je 0x1008dbe5
mov eax, dword [ebp - 0x314]
add eax, 1
mov dword [ebp - 0x314], eax
jmp 0x1008db39
mov ecx, dword [ebp - 0x314]
mov dword [ebp - 0xac4], ecx
mov edx, dword [ebp - 0xac4]
mov eax, dword [ebp - 0x248]
mov dword [eax + 0xc], edx
mov ecx, dword [ebp - 0x248]
cmp dword [ecx + 0xc], 0
jne 0x1008dc18
mov dword [ebp - 4], 0xffffffff
jmp 0x1008dd81
mov edx, 1
test edx, edx
je 0x1008dc35
mov eax, dword [ebp - 0x248]
mov ecx, dword [eax + 0xc]
add ecx, 1
mov dword [ebp - 0x490], ecx
jmp 0x1008dc44
mov edx, dword [ebp - 0x248]
mov eax, dword [edx + 0xc]
mov dword [ebp - 0x490], eax
mov edx, dword [ebp - 0x490]
lea ecx, [ebp - 0xacc]
call fcn.1003c4d0
mov dword [ebp - 0xac8], eax
mov ecx, dword [ebp - 0xac8]
push ecx
mov ecx, dword [ebp - 0x248]
add ecx, 8
call fcn.1003c560
lea ecx, [ebp - 0xacc]
call fcn.1003bf30
mov ecx, dword [ebp - 0x248]
add ecx, 8
call fcn.1003bf10
movzx edx, al
test edx, edx
jne 0x1008dc9c
mov dword [ebp - 4], 0xffffffff
jmp 0x1008dd81
mov ecx, dword [ebp - 0x248]
add ecx, 8
call fcn.1002c280
mov dword [ebp - 0xad0], eax
mov eax, dword [ebp - 0xad0]
mov dword [ebp - 0x28], eax
mov ecx, 1
test ecx, ecx
je 0x1008dd35
mov edx, dword [ebp - 0x28]
mov dword [ebp - 0xad4], edx
mov eax, dword [ebp - 0x248]
mov ecx, dword [eax + 0xc]
lea edx, [ecx*4 + 4]
push edx
mov eax, dword [ebp - 0x248]
mov ecx, dword [eax + 4]
sub ecx, 4
push ecx
mov edx, dword [ebp - 0xad4]
push edx
call sub.VCRUNTIME140.dll_memcpy
add esp, 0xc
mov eax, dword [ebp - 0x28]
mov dword [ebp - 0xad8], eax
mov ecx, dword [ebp - 0xad8]
add ecx, 4
mov dword [ebp - 0xadc], ecx
cmp dword [ebp - 0x29c], 0
jne 0x1008dd1b
jmp 0x1008dd29
mov edx, dword [ebp - 0x29c]
mov eax, dword [ebp - 0xadc]
mov dword [edx], eax
mov ecx, dword [ebp - 0x248]
mov byte [ecx + 0x10], 1
jmp 0x1008dd7a
mov edx, dword [ebp - 0x28]
mov dword [ebp - 0xae0], edx
mov eax, dword [ebp - 0x248]
mov ecx, dword [eax + 0xc]
shl ecx, 2
push ecx
mov edx, dword [ebp - 0x248]
mov eax, dword [edx + 4]
push eax
mov ecx, dword [ebp - 0xae0]
push ecx
call sub.VCRUNTIME140.dll_memcpy
add esp, 0xc
cmp dword [ebp - 0x29c], 0
jne 0x1008dd6f
jmp 0x1008dd7a
mov edx, dword [ebp - 0x28]
mov eax, dword [ebp - 0x29c]
mov dword [eax], edx
mov dword [ebp - 4], 0xffffffff
mov ecx, dword [ebp - 0x20c]
add ecx, 0xdc
mov dword [ebp - 0x294], ecx
mov dword [ebp - 0xae4], 0x10084100
mov edx, dword [ebp - 0xae4]
mov dword [ebp - 0xae8], edx
mov eax, dword [ebp - 0x294]
movzx ecx, byte [eax + 0x10]
test ecx, ecx
je 0x1008ddc7