Function at 0x1008cc40
Capabilities:
Inspect section memory permissions

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x1011570f
mov eax, dword fs:[0]
push eax
sub esp, 0xf00
mov eax, dword [0x10139040]
xor eax, ebp
mov dword [ebp - 0x10], eax
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov dword [ebp - 0x20c], ecx
mov dword [ebp - 0x204], 0
mov dword [ebp - 0x1fc], 0
mov dword [ebp - 0x200], 0
mov dword [ebp - 0x208], 0
mov eax, dword [0x10156d18]
mov dword [ebp - 0xd40], eax
mov dword [ebp - 0xb04], 0x100bf570
mov ecx, dword [ebp - 0xb04]
mov dword [ebp - 0xd28], ecx
mov edx, dword [0x10226020]
mov eax, dword [edx + 8]
mov dword [ebp - 0xd30], eax
mov ecx, dword [ebp - 0xd28]
push ecx
push 0xfffffffffffffffc
mov edx, dword [ebp - 0xd30]
push edx
call dword [ebp - 0xd40]
mov ecx, dword [ebp - 0x20c]
mov dword [ecx + 0x700], eax
mov edx, dword [ebp - 0x20c]
add edx, 0x84
mov dword [ebp - 0x230], edx
mov eax, dword [0x10225fb4]
mov dword [ebp - 0xd48], eax
lea ecx, [ebp - 0x268]
mov dword [ebp - 0x518], ecx
mov edx, dword [ebp - 0x518]
mov eax, dword [ebp - 0xd48]
mov dword [edx], eax
mov ecx, dword [ebp - 0x518]
mov dword [ebp - 0xdd4], ecx
mov dword [ebp - 4], 0
mov edx, dword [ebp - 0x230]
mov eax, dword [ebp - 0x268]
mov dword [edx], eax
mov ecx, dword [ebp - 0x268]
mov edx, dword [ecx]
mov dword [ebp - 0xd80], edx
mov eax, dword [ebp - 0x230]
mov ecx, dword [ebp - 0xd80]
mov dword [eax + 4], ecx
mov edx, dword [ebp - 0x230]
cmp dword [edx + 4], 0
jne 0x1008cd78
mov dword [ebp - 4], 0xffffffff
jmp 0x1008cfb3
mov dword [ebp - 0x31c], 0
mov eax, dword [ebp - 0x230]
mov ecx, dword [eax + 4]
mov edx, dword [ebp - 0x31c]
mov eax, dword [ecx + edx*4]
mov dword [ebp - 0x60c], eax
cmp dword [ebp - 0x60c], 0
jne 0x1008cdac
mov byte [ebp - 0x219], 0
jmp 0x1008ce04
mov ecx, dword [0x10156d14]
mov dword [ebp - 0xd84], ecx
push 0x1c
lea edx, [ebp - 0x11c]
push edx
mov eax, dword [ebp - 0x60c]
push eax
call dword [ebp - 0xd84]
test eax, eax
jne 0x1008cddb
mov byte [ebp - 0x219], 0
jmp 0x1008ce04
mov ecx, dword [ebp - 0x108]
and ecx, 1
jne 0x1008cdf4
mov edx, dword [ebp - 0x108]
and edx, 0x100
je 0x1008cdfd
mov byte [ebp - 0x219], 0
jmp 0x1008ce04
mov byte [ebp - 0x219], 1
movzx eax, byte [ebp - 0x219]
test eax, eax
je 0x1008ce23
mov ecx, dword [ebp - 0x31c]
add ecx, 1
mov dword [ebp - 0x31c], ecx
jmp 0x1008cd82
mov edx, dword [ebp - 0x230]
mov eax, dword [ebp - 0x31c]
mov dword [edx + 0xc], eax
mov ecx, dword [ebp - 0x230]
cmp dword [ecx + 0xc], 0
jne 0x1008ce4a
mov dword [ebp - 4], 0xffffffff
jmp 0x1008cfb3
mov edx, 1
test edx, edx
je 0x1008ce67
mov eax, dword [ebp - 0x230]
mov ecx, dword [eax + 0xc]
add ecx, 1
mov dword [ebp - 0x610], ecx
jmp 0x1008ce76
mov edx, dword [ebp - 0x230]
mov eax, dword [edx + 0xc]
mov dword [ebp - 0x610], eax
mov edx, dword [ebp - 0x610]
lea ecx, [ebp - 0xd8c]
call fcn.1003c2a0
mov dword [ebp - 0xd88], eax
mov ecx, dword [ebp - 0xd88]
push ecx
mov ecx, dword [ebp - 0x230]
add ecx, 8
call fcn.1003c340
lea ecx, [ebp - 0xd8c]
call fcn.1003bc90
mov ecx, dword [ebp - 0x230]
add ecx, 8
call fcn.1003bc70
movzx edx, al
test edx, edx
jne 0x1008cece
mov dword [ebp - 4], 0xffffffff
jmp 0x1008cfb3
mov ecx, dword [ebp - 0x230]
add ecx, 8
call fcn.1002cc10
mov dword [ebp - 0xd90], eax
mov eax, dword [ebp - 0xd90]
mov dword [ebp - 0x44], eax
mov ecx, 1
test ecx, ecx
je 0x1008cf67
mov edx, dword [ebp - 0x44]
mov dword [ebp - 0xd94], edx
mov eax, dword [ebp - 0x230]
mov ecx, dword [eax + 0xc]
lea edx, [ecx*4 + 4]
push edx
mov eax, dword [ebp - 0x230]
mov ecx, dword [eax + 4]
sub ecx, 4
push ecx
mov edx, dword [ebp - 0xd94]
push edx
call sub.VCRUNTIME140.dll_memcpy
add esp, 0xc
mov eax, dword [ebp - 0x44]
mov dword [ebp - 0xd98], eax
mov ecx, dword [ebp - 0xd98]
add ecx, 4
mov dword [ebp - 0xd9c], ecx
cmp dword [ebp - 0x268], 0
jne 0x1008cf4d
jmp 0x1008cf5b
mov edx, dword [ebp - 0x268]
mov eax, dword [ebp - 0xd9c]
mov dword [edx], eax
mov ecx, dword [ebp - 0x230]
mov byte [ecx + 0x10], 1
jmp 0x1008cfac
mov edx, dword [ebp - 0x44]
mov dword [ebp - 0xda0], edx
mov eax, dword [ebp - 0x230]
mov ecx, dword [eax + 0xc]
shl ecx, 2
push ecx
mov edx, dword [ebp - 0x230]
mov eax, dword [edx + 4]
push eax
mov ecx, dword [ebp - 0xda0]
push ecx
call sub.VCRUNTIME140.dll_memcpy
add esp, 0xc
cmp dword [ebp - 0x268], 0
jne 0x1008cfa1
jmp 0x1008cfac
mov edx, dword [ebp - 0x44]
mov eax, dword [ebp - 0x268]
mov dword [eax], edx
mov dword [ebp - 4], 0xffffffff
mov ecx, dword [ebp - 0x20c]
add ecx, 0x84
mov dword [ebp - 0x26c], ecx
mov dword [ebp - 0xda4], 0x100a4230
mov edx, dword [ebp - 0x26c]
movzx eax, byte [edx + 0x10]
test eax, eax
je 0x1008cfed
mov ecx, 0x29
add ecx, 1
mov dword [ebp - 0x614], ecx
jmp 0x1008cff7
mov dword [ebp - 0x614], 0x29
mov edx, dword [ebp - 0x614]
mov dword [ebp - 0x618], edx
mov eax, dword [ebp - 0x26c]
cmp dword [eax + 4], 0
je 0x1008d035
mov ecx, dword [ebp - 0x26c]
add ecx, 8
call fcn.1003bc70
movzx ecx, al
test ecx, ecx
je 0x1008d035
mov edx, dword [ebp - 0x26c]
mov eax, dword [ebp - 0x618]
cmp eax, dword [edx + 0xc]
jbe 0x1008d05f
mov dword [ebp - 0x370], 0
mov ecx, dword [ebp - 0x204]
or ecx, 1
mov dword [ebp - 0x204], ecx
lea edx, [ebp - 0x370]
mov dword [ebp - 0x66c], edx
jmp 0x1008d19e
mov eax, dword [ebp - 0xda4]
mov dword [ebp - 0xda8], eax
mov ecx, dword [ebp - 0xda8]
mov dword [ebp - 0xdb0], ecx
mov edx, dword [ebp - 0x26c]
add edx, 8
mov dword [ebp - 0xdac], edx
mov eax, dword [ebp - 0x618]
push eax
mov ecx, dword [ebp - 0xdac]
call fcn.1003bc80
mov ecx, dword [ebp - 0xdb0]
mov dword [eax], ecx
mov edx, 0x29
shl edx, 2
mov eax, dword [ebp - 0x26c]
add edx, dword [eax + 4]
mov dword [ebp - 0x61c], edx
mov ecx, dword [ebp - 0x61c]
cmp dword [ecx], 0
je 0x1008d105
mov edx, dword [ebp - 0x61c]
mov eax, dword [edx]
mov dword [ebp - 0xdb4], eax
mov ecx, dword [ebp - 0xdb4]
mov dword [ebp - 0xdb8], ecx
lea edx, [ebp - 0xdb8]
mov dword [ebp - 0x65c], edx
mov eax, dword [ebp - 0x204]
or eax, 2
mov dword [ebp - 0x204], eax
mov ecx, dword [ebp - 0x65c]
mov dword [ebp - 0x620], ecx
jmp 0x1008d136
mov dword [ebp - 0x660], 0
lea edx, [ebp - 0x660]
mov dword [ebp - 0x664], edx
mov eax, dword [ebp - 0x204]
or eax, 4
mov dword [ebp - 0x204], eax
mov ecx, dword [ebp - 0x664]
mov dword [ebp - 0x620], ecx
mov edx, dword [ebp - 0x620]
mov dword [ebp - 0x668], edx
mov eax, dword [ebp - 0x668]
mov ecx, dword [eax]
mov dword [ebp - 0x370], ecx
mov edx, dword [ebp - 0x204]
or edx, 8
mov dword [ebp - 0x204], edx
mov eax, dword [ebp - 0x204]
and eax, 4
je 0x1008d171
and dword [ebp - 0x204], 0xfffffffb
mov ecx, dword [ebp - 0x204]
and ecx, 2
je 0x1008d183
and dword [ebp - 0x204], 0xfffffffd
mov edx, dword [ebp - 0x204]
or edx, 1
mov dword [ebp - 0x204], edx
lea eax, [ebp - 0x370]
mov dword [ebp - 0x66c], eax
mov ecx, dword [ebp - 0x20c]
add ecx, 0xac
mov dword [ebp - 0x234], ecx
mov edx, dword [0x10225f9c]
mov dword [ebp - 0x670], edx
lea eax, [ebp - 0x270]
mov dword [ebp - 0x624], eax
mov ecx, dword [ebp - 0x624]
mov edx, dword [ebp - 0x670]
mov dword [ecx], edx
mov eax, dword [ebp - 0x624]
mov dword [ebp - 0xdd8], eax
mov dword [ebp - 4], 1
mov ecx, dword [ebp - 0x234]
mov edx, dword [ebp - 0x270]
mov dword [ecx], edx
mov eax, dword [ebp - 0x270]
mov ecx, dword [eax]
mov dword [ebp - 0x674], ecx
mov edx, dword [ebp - 0x234]
mov eax, dword [ebp - 0x674]
mov dword [edx + 4], eax
mov ecx, dword [ebp - 0x234]
cmp dword [ecx + 4], 0
jne 0x1008d22c
mov dword [ebp - 4], 0xffffffff
jmp 0x1008d466
mov dword [ebp - 0x320], 0
mov edx, dword [ebp - 0x234]
mov eax, dword [edx + 4]
mov ecx, dword [ebp - 0x320]
mov edx, dword [eax + ecx*4]
mov dword [ebp - 0x628], edx
cmp dword [ebp - 0x628], 0
jne 0x1008d260
mov byte [ebp - 0x215], 0
jmp 0x1008d2b7
mov eax, dword [0x10156d14]
mov dword [ebp - 0x678], eax
push 0x1c
lea ecx, [ebp - 0x100]
push ecx
mov edx, dword [ebp - 0x628]
push edx
call dword [ebp - 0x678]
test eax, eax
jne 0x1008d28e
mov byte [ebp - 0x215], 0
jmp 0x1008d2b7
mov eax, dword [ebp - 0xec]
and eax, 1
jne 0x1008d2a7
mov ecx, dword [ebp - 0xec]
and ecx, 0x100
je 0x1008d2b0
mov byte [ebp - 0x215], 0
jmp 0x1008d2b7
mov byte [ebp - 0x215], 1
movzx edx, byte [ebp - 0x215]
test edx, edx
je 0x1008d2d6
mov eax, dword [ebp - 0x320]
add eax, 1
mov dword [ebp - 0x320], eax
jmp 0x1008d236
mov ecx, dword [ebp - 0x234]
mov edx, dword [ebp - 0x320]
mov dword [ecx + 0xc], edx
mov eax, dword [ebp - 0x234]
cmp dword [eax + 0xc], 0
jne 0x1008d2fd
mov dword [ebp - 4], 0xffffffff
jmp 0x1008d466
mov ecx, 1
test ecx, ecx
je 0x1008d31a
mov edx, dword [ebp - 0x234]
mov eax, dword [edx + 0xc]
add eax, 1
mov dword [ebp - 0x62c], eax
jmp 0x1008d329
mov ecx, dword [ebp - 0x234]
mov edx, dword [ecx + 0xc]
mov dword [ebp - 0x62c], edx
mov edx, dword [ebp - 0x62c]
lea ecx, [ebp - 0x680]
call fcn.1003c2a0
mov dword [ebp - 0x67c], eax
mov eax, dword [ebp - 0x67c]
push eax
mov ecx, dword [ebp - 0x234]
add ecx, 8
call fcn.1003c340
lea ecx, [ebp - 0x680]
call fcn.1003bc90
mov ecx, dword [ebp - 0x234]
add ecx, 8
call fcn.1003bc70
movzx ecx, al
test ecx, ecx
jne 0x1008d381
mov dword [ebp - 4], 0xffffffff
jmp 0x1008d466
mov ecx, dword [ebp - 0x234]
add ecx, 8
call fcn.1002cc10
mov dword [ebp - 0x684], eax
mov edx, dword [ebp - 0x684]
mov dword [ebp - 0x40], edx
mov eax, 1
test eax, eax
je 0x1008d41a
mov ecx, dword [ebp - 0x40]
mov dword [ebp - 0x688], ecx
mov edx, dword [ebp - 0x234]
mov eax, dword [edx + 0xc]
lea ecx, [eax*4 + 4]
push ecx
mov edx, dword [ebp - 0x234]
mov eax, dword [edx + 4]
sub eax, 4
push eax
mov ecx, dword [ebp - 0x688]
push ecx
call sub.VCRUNTIME140.dll_memcpy
add esp, 0xc
mov edx, dword [ebp - 0x40]
mov dword [ebp - 0x68c], edx
mov eax, dword [ebp - 0x68c]
add eax, 4
mov dword [ebp - 0x690], eax
cmp dword [ebp - 0x270], 0
jne 0x1008d400
jmp 0x1008d40e
mov ecx, dword [ebp - 0x270]
mov edx, dword [ebp - 0x690]
mov dword [ecx], edx
mov eax, dword [ebp - 0x234]
mov byte [eax + 0x10], 1
jmp 0x1008d45f
mov ecx, dword [ebp - 0x40]
mov dword [ebp - 0x694], ecx
mov edx, dword [ebp - 0x234]
mov eax, dword [edx + 0xc]
shl eax, 2
push eax
mov ecx, dword [ebp - 0x234]
mov edx, dword [ecx + 4]
push edx
mov eax, dword [ebp - 0x694]
push eax
call sub.VCRUNTIME140.dll_memcpy
add esp, 0xc
cmp dword [ebp - 0x270], 0
jne 0x1008d454
jmp 0x1008d45f
mov ecx, dword [ebp - 0x40]
mov edx, dword [ebp - 0x270]
mov dword [edx], ecx
mov dword [ebp - 4], 0xffffffff
mov eax, dword [ebp - 0x20c]
add eax, 0xac
mov dword [ebp - 0x274], eax
mov dword [ebp - 0x698], 0x10098710
mov ecx, dword [ebp - 0x274]
movzx edx, byte [ecx + 0x10]
test edx, edx
je 0x1008d49f
mov eax, 5
add eax, 1
mov dword [ebp - 0x630], eax
jmp 0x1008d4a9
mov dword [ebp - 0x630], 5
mov ecx, dword [ebp - 0x630]
mov dword [ebp - 0x634], ecx
mov edx, dword [ebp - 0x274]
cmp dword [edx + 4], 0
je 0x1008d4e7
mov ecx, dword [ebp - 0x274]
add ecx, 8
call fcn.1003bc70
movzx eax, al
test eax, eax
je 0x1008d4e7
mov ecx, dword [ebp - 0x274]
mov edx, dword [ebp - 0x634]
cmp edx, dword [ecx + 0xc]
jbe 0x1008d511
mov dword [ebp - 0x374], 0
mov eax, dword [ebp - 0x204]
or eax, 0x10
mov dword [ebp - 0x204], eax
lea ecx, [ebp - 0x374]
mov dword [ebp - 0x6c0], ecx
jmp 0x1008d653
mov edx, dword [ebp - 0x698]
mov dword [ebp - 0x69c], edx
mov eax, dword [ebp - 0x69c]
mov dword [ebp - 0x6a4], eax
mov ecx, dword [ebp - 0x274]
add ecx, 8
mov dword [ebp - 0x6a0], ecx
mov edx, dword [ebp - 0x634]
push edx
mov ecx, dword [ebp - 0x6a0]
call fcn.1003bc80
mov ecx, dword [ebp - 0x6a4]
mov dword [eax], ecx
mov edx, 5
shl edx, 2
mov eax, dword [ebp - 0x274]
add edx, dword [eax + 4]
mov dword [ebp - 0x638], edx
mov ecx, dword [ebp - 0x638]
cmp dword [ecx], 0
je 0x1008d5b7
mov edx, dword [ebp - 0x638]
mov eax, dword [edx]
mov dword [ebp - 0x6a8], eax
mov ecx, dword [ebp - 0x6a8]
mov dword [ebp - 0x6ac], ecx
lea edx, [ebp - 0x6ac]
mov dword [ebp - 0x6b0], edx
mov eax, dword [ebp - 0x204]
or eax, 0x20
mov dword [ebp - 0x204], eax
mov ecx, dword [ebp - 0x6b0]
mov dword [ebp - 0x63c], ecx
jmp 0x1008d5e8
mov dword [ebp - 0x6b4], 0
lea edx, [ebp - 0x6b4]
mov dword [ebp - 0x6b8], edx
mov eax, dword [ebp - 0x204]
or eax, 0x40
mov dword [ebp - 0x204], eax
mov ecx, dword [ebp - 0x6b8]
mov dword [ebp - 0x63c], ecx
mov edx, dword [ebp - 0x63c]
mov dword [ebp - 0x6bc], edx
mov eax, dword [ebp - 0x6bc]
mov ecx, dword [eax]
mov dword [ebp - 0x374], ecx
mov edx, dword [ebp - 0x204]
or edx, 0x80
mov dword [ebp - 0x204], edx
mov eax, dword [ebp - 0x204]
and eax, 0x40
je 0x1008d626
and dword [ebp - 0x204], 0xffffffbf
mov ecx, dword [ebp - 0x204]
and ecx, 0x20
je 0x1008d638
and dword [ebp - 0x204], 0xffffffdf
mov edx, dword [ebp - 0x204]
or edx, 0x10
mov dword [ebp - 0x204], edx
lea eax, [ebp - 0x374]
mov dword [ebp - 0x6c0], eax
mov ecx, dword [ebp - 0x20c]
add ecx, 0xac
mov dword [ebp - 0x278], ecx
mov dword [ebp - 0x6c4], 0x100987d0
mov edx, dword [ebp - 0x278]
movzx eax, byte [edx + 0x10]
test eax, eax
je 0x1008d68d
mov ecx, 6
add ecx, 1
mov dword [ebp - 0x640], ecx
jmp 0x1008d697
mov dword [ebp - 0x640], 6
mov edx, dword [ebp - 0x640]
mov dword [ebp - 0x644], edx
mov eax, dword [ebp - 0x278]
cmp dword [eax + 4], 0
je 0x1008d6d5
mov ecx, dword [ebp - 0x278]
add ecx, 8
call fcn.1003bc70
movzx ecx, al
test ecx, ecx
je 0x1008d6d5
mov edx, dword [ebp - 0x278]
mov eax, dword [ebp - 0x644]
cmp eax, dword [edx + 0xc]
jbe 0x1008d702
mov dword [ebp - 0x37c], 0
mov ecx, dword [ebp - 0x204]
or ecx, 0x100
mov dword [ebp - 0x204], ecx
lea edx, [ebp - 0x37c]
mov dword [ebp - 0x6ec], edx
jmp 0x1008d856
mov eax, dword [ebp - 0x6c4]
mov dword [ebp - 0x6c8], eax
mov ecx, dword [ebp - 0x6c8]
mov dword [ebp - 0x6d0], ecx
mov edx, dword [ebp - 0x278]
add edx, 8
mov dword [ebp - 0x6cc], edx
mov eax, dword [ebp - 0x644]
push eax
mov ecx, dword [ebp - 0x6cc]
call fcn.1003bc80
mov ecx, dword [ebp - 0x6d0]
mov dword [eax], ecx
mov edx, 6
shl edx, 2
mov eax, dword [ebp - 0x278]
add edx, dword [eax + 4]
mov dword [ebp - 0x648], edx
mov ecx, dword [ebp - 0x648]
cmp dword [ecx], 0
je 0x1008d7aa
mov edx, dword [ebp - 0x648]
mov eax, dword [edx]
mov dword [ebp - 0x6d4], eax
mov ecx, dword [ebp - 0x6d4]
mov dword [ebp - 0x6d8], ecx
lea edx, [ebp - 0x6d8]
mov dword [ebp - 0x6dc], edx
mov eax, dword [ebp - 0x204]
or eax, 0x200
mov dword [ebp - 0x204], eax
mov ecx, dword [ebp - 0x6dc]
mov dword [ebp - 0x64c], ecx
jmp 0x1008d7dd
mov dword [ebp - 0x6e0], 0
lea edx, [ebp - 0x6e0]
mov dword [ebp - 0x6e4], edx
mov eax, dword [ebp - 0x204]
or eax, 0x400
mov dword [ebp - 0x204], eax
mov ecx, dword [ebp - 0x6e4]
mov dword [ebp - 0x64c], ecx
mov edx, dword [ebp - 0x64c]
mov dword [ebp - 0x6e8], edx
mov eax, dword [ebp - 0x6e8]
mov ecx, dword [eax]
mov dword [ebp - 0x37c], ecx
mov edx, dword [ebp - 0x204]
or edx, 0x800
mov dword [ebp - 0x204], edx
mov eax, dword [ebp - 0x204]
and eax, 0x400
je 0x1008d820
and dword [ebp - 0x204], 0xfffffbff
mov ecx, dword [ebp - 0x204]
and ecx, 0x200
je 0x1008d838
and dword [ebp - 0x204], 0xfffffdff
mov edx, dword [ebp - 0x204]
or edx, 0x100
mov dword [ebp - 0x204], edx
lea eax, [ebp - 0x37c]
mov dword [ebp - 0x6ec], eax
mov ecx, dword [ebp - 0x20c]
add ecx, 0xac
mov dword [ebp - 0x27c], ecx
mov dword [ebp - 0x6f0], 0x10098800
mov edx, dword [ebp - 0x27c]
movzx eax, byte [edx + 0x10]
test eax, eax
je 0x1008d890
mov ecx, 7
add ecx, 1
mov dword [ebp - 0x650], ecx
jmp 0x1008d89a
mov dword [ebp - 0x650], 7
mov edx, dword [ebp - 0x650]
mov dword [ebp - 0x654], edx
mov eax, dword [ebp - 0x27c]
cmp dword [eax + 4], 0
je 0x1008d8d8
mov ecx, dword [ebp - 0x27c]
add ecx, 8
call fcn.1003bc70
movzx ecx, al
test ecx, ecx
je 0x1008d8d8
mov edx, dword [ebp - 0x27c]
mov eax, dword [ebp - 0x654]
cmp eax, dword [edx + 0xc]
jbe 0x1008d905
mov dword [ebp - 0x380], 0
mov ecx, dword [ebp - 0x204]
or ecx, 0x1000
mov dword [ebp - 0x204], ecx
lea edx, [ebp - 0x380]
mov dword [ebp - 0x718], edx
jmp 0x1008da59
mov eax, dword [ebp - 0x6f0]
mov dword [ebp - 0x6f4], eax
mov ecx, dword [ebp - 0x6f4]
mov dword [ebp - 0x6fc], ecx
mov edx, dword [ebp - 0x27c]
add edx, 8
mov dword [ebp - 0x6f8], edx
mov eax, dword [ebp - 0x654]
push eax
mov ecx, dword [ebp - 0x6f8]
call fcn.1003bc80
mov ecx, dword [ebp - 0x6fc]
mov dword [eax], ecx
mov edx, 7
shl edx, 2
mov eax, dword [ebp - 0x27c]
add edx, dword [eax + 4]
mov dword [ebp - 0x3b4], edx
mov ecx, dword [ebp - 0x3b4]
cmp dword [ecx], 0
je 0x1008d9ad
mov edx, dword [ebp - 0x3b4]
mov eax, dword [edx]
mov dword [ebp - 0x700], eax
mov ecx, dword [ebp - 0x700]
mov dword [ebp - 0x704], ecx
lea edx, [ebp - 0x704]
mov dword [ebp - 0x708], edx
mov eax, dword [ebp - 0x204]
or eax, 0x2000
mov dword [ebp - 0x204], eax
mov ecx, dword [ebp - 0x708]
mov dword [ebp - 0x3b8], ecx
jmp 0x1008d9e0
mov dword [ebp - 0x70c], 0
lea edx, [ebp - 0x70c]
mov dword [ebp - 0x710], edx
mov eax, dword [ebp - 0x204]
or eax, 0x4000
mov dword [ebp - 0x204], eax
mov ecx, dword [ebp - 0x710]
mov dword [ebp - 0x3b8], ecx
mov edx, dword [ebp - 0x3b8]
mov dword [ebp - 0x714], edx
mov eax, dword [ebp - 0x714]
mov ecx, dword [eax]
mov dword [ebp - 0x380], ecx
mov edx, dword [ebp - 0x204]
or edx, 0x8000
mov dword [ebp - 0x204], edx
mov eax, dword [ebp - 0x204]
and eax, 0x4000
je 0x1008da23
and dword [ebp - 0x204], 0xffffbfff
mov ecx, dword [ebp - 0x204]
and ecx, 0x2000
je 0x1008da3b
and dword [ebp - 0x204], 0xffffdfff
mov edx, dword [ebp - 0x204]
or edx, 0x1000
mov dword [ebp - 0x204], edx
lea eax, [ebp - 0x380]
mov dword [ebp - 0x718], eax
mov ecx, dword [ebp - 0x20c]
add ecx, 0xac
mov dword [ebp - 0x280], ecx
mov dword [ebp - 0x71c], 0x10098880
mov edx, dword [ebp - 0x280]
movzx eax, byte [edx + 0x10]
test eax, eax
je 0x1008da93
mov ecx, 0x24
add ecx, 1
mov dword [ebp - 0x3bc], ecx
jmp 0x1008da9d
mov dword [ebp - 0x3bc], 0x24
mov edx, dword [ebp - 0x3bc]
mov dword [ebp - 0x3c0], edx
mov eax, dword [ebp - 0x280]
cmp dword [eax + 4], 0
je 0x1008dadb
mov ecx, dword [ebp - 0x280]
add ecx, 8
call fcn.1003bc70
movzx ecx, al
test ecx, ecx
je 0x1008dadb
mov edx, dword [ebp - 0x280]
mov eax, dword [ebp - 0x3c0]
cmp eax, dword [edx + 0xc]
jbe 0x1008db08
mov dword [ebp - 0x384], 0
mov ecx, dword [ebp - 0x204]
or ecx, 0x10000
mov dword [ebp - 0x204], ecx
lea edx, [ebp - 0x384]
mov dword [ebp - 0x744], edx
jmp 0x1008dc5c
mov eax, dword [ebp - 0x71c]
mov dword [ebp - 0x720], eax
mov ecx, dword [ebp - 0x720]
mov dword [ebp - 0x728], ecx
mov edx, dword [ebp - 0x280]
add edx, 8
mov dword [ebp - 0x724], edx
mov eax, dword [ebp - 0x3c0]
push eax
mov ecx, dword [ebp - 0x724]
call fcn.1003bc80
mov ecx, dword [ebp - 0x728]
mov dword [eax], ecx
mov edx, 0x24
shl edx, 2
mov eax, dword [ebp - 0x280]
add edx, dword [eax + 4]
mov dword [ebp - 0x3c4], edx
mov ecx, dword [ebp - 0x3c4]
cmp dword [ecx], 0
je 0x1008dbb0
mov edx, dword [ebp - 0x3c4]
mov eax, dword [edx]
mov dword [ebp - 0x72c], eax
mov ecx, dword [ebp - 0x72c]
mov dword [ebp - 0x730], ecx
lea edx, [ebp - 0x730]
mov dword [ebp - 0x734], edx
mov eax, dword [ebp - 0x204]
or eax, 0x20000
mov dword [ebp - 0x204], eax
mov ecx, dword [ebp - 0x734]
mov dword [ebp - 0x3c8], ecx
jmp 0x1008dbe3
mov dword [ebp - 0x738], 0
lea edx, [ebp - 0x738]
mov dword [ebp - 0x73c], edx
mov eax, dword [ebp - 0x204]
or eax, 0x40000
mov dword [ebp - 0x204], eax
mov ecx, dword [ebp - 0x73c]
mov dword [ebp - 0x3c8], ecx
mov edx, dword [ebp - 0x3c8]
mov dword [ebp - 0x740], edx
mov eax, dword [ebp - 0x740]
mov ecx, dword [eax]
mov dword [ebp - 0x384], ecx
mov edx, dword [ebp - 0x204]
or edx, 0x80000
mov dword [ebp - 0x204], edx
mov eax, dword [ebp - 0x204]
and eax, 0x40000
je 0x1008dc26
and dword [ebp - 0x204], 0xfffbffff
mov ecx, dword [ebp - 0x204]
and ecx, 0x20000
je 0x1008dc3e
and dword [ebp - 0x204], 0xfffdffff
mov edx, dword [ebp - 0x204]
or edx, 0x10000
mov dword [ebp - 0x204], edx
lea eax, [ebp - 0x384]
mov dword [ebp - 0x744], eax
mov ecx, dword [ebp - 0x20c]
add ecx, 0xd4
mov dword [ebp - 0x238], ecx
mov edx, dword [0x10225fa4]
mov dword [ebp - 0x748], edx
lea eax, [ebp - 0x284]
mov dword [ebp - 0x3cc], eax
mov ecx, dword [ebp - 0x3cc]
mov edx, dword [ebp - 0x748]
mov dword [ecx], edx
mov eax, dword [ebp - 0x3cc]
mov dword [ebp - 0xddc], eax
mov dword [ebp - 4], 2
mov ecx, dword [ebp - 0x238]
mov edx, dword [ebp - 0x284]
mov dword [ecx], edx
mov eax, dword [ebp - 0x284]
mov ecx, dword [eax]
mov dword [ebp - 0x74c], ecx
mov edx, dword [ebp - 0x238]
mov eax, dword [ebp - 0x74c]
mov dword [edx + 4], eax
mov ecx, dword [ebp - 0x238]
cmp dword [ecx + 4], 0
jne 0x1008dcea
mov dword [ebp - 4], 0xffffffff
jmp 0x1008df24
mov dword [ebp - 0x324], 0
mov edx, dword [ebp - 0x238]
mov eax, dword [edx + 4]
mov ecx, dword [ebp - 0x324]
mov edx, dword [eax + ecx*4]
mov dword [ebp - 0x3d0], edx
cmp dword [ebp - 0x3d0], 0
jne 0x1008dd1e
mov byte [ebp - 0x20d], 0
jmp 0x1008dd75
mov eax, dword [0x10156d14]
mov dword [ebp - 0x750], eax
push 0x1c
lea ecx, [ebp - 0xe4]
push ecx
mov edx, dword [ebp - 0x3d0]
push edx
call dword [ebp - 0x750]
test eax, eax
jne 0x1008dd4c
mov byte [ebp - 0x20d], 0
jmp 0x1008dd75
mov eax, dword [ebp - 0xd0]
and eax, 1
jne 0x1008dd65
mov ecx, dword [ebp - 0xd0]
and ecx, 0x100
je 0x1008dd6e
mov byte [ebp - 0x20d], 0
jmp 0x1008dd75
mov byte [ebp - 0x20d], 1
movzx edx, byte [ebp - 0x20d]
test edx, edx
je 0x1008dd94
mov eax, dword [ebp - 0x324]
add eax, 1
mov dword [ebp - 0x324], eax
jmp 0x1008dcf4
mov ecx, dword [ebp - 0x238]
mov edx, dword [ebp - 0x324]
mov dword [ecx + 0xc], edx
mov eax, dword [ebp - 0x238]
cmp dword [eax + 0xc], 0
jne 0x1008ddbb
mov dword [ebp - 4], 0xffffffff
jmp 0x1008df24
mov ecx, 1
test ecx, ecx
je 0x1008ddd8
mov edx, dword [ebp - 0x238]
mov eax, dword [edx + 0xc]
add eax, 1
mov dword [ebp - 0x3d4], eax
jmp 0x1008dde7
mov ecx, dword [ebp - 0x238]
mov edx, dword [ecx + 0xc]
mov dword [ebp - 0x3d4], edx
mov edx, dword [ebp - 0x3d4]
lea ecx, [ebp - 0x758]
call fcn.1003c2a0
mov dword [ebp - 0x754], eax
mov eax, dword [ebp - 0x754]
push eax
mov ecx, dword [ebp - 0x238]
add ecx, 8
call fcn.1003c340
lea ecx, [ebp - 0x758]
call fcn.1003bc90
mov ecx, dword [ebp - 0x238]
add ecx, 8
call fcn.1003bc70
movzx ecx, al
test ecx, ecx
jne 0x1008de3f
mov dword [ebp - 4], 0xffffffff
jmp 0x1008df24
mov ecx, dword [ebp - 0x238]
add ecx, 8
call fcn.1002cc10
mov dword [ebp - 0x75c], eax
mov edx, dword [ebp - 0x75c]
mov dword [ebp - 0x3c], edx
mov eax, 1
test eax, eax
je 0x1008ded8
mov ecx, dword [ebp - 0x3c]
mov dword [ebp - 0x760], ecx
mov edx, dword [ebp - 0x238]
mov eax, dword [edx + 0xc]
lea ecx, [eax*4 + 4]
push ecx
mov edx, dword [ebp - 0x238]
mov eax, dword [edx + 4]
sub eax, 4
push eax
mov ecx, dword [ebp - 0x760]
push ecx
call sub.VCRUNTIME140.dll_memcpy
add esp, 0xc
mov edx, dword [ebp - 0x3c]
mov dword [ebp - 0x764], edx
mov eax, dword [ebp - 0x764]
add eax, 4
mov dword [ebp - 0x768], eax
cmp dword [ebp - 0x284], 0
jne 0x1008debe
jmp 0x1008decc
mov ecx, dword [ebp - 0x284]
mov edx, dword [ebp - 0x768]
mov dword [ecx], edx
mov eax, dword [ebp - 0x238]
mov byte [eax + 0x10], 1
jmp 0x1008df1d
mov ecx, dword [ebp - 0x3c]
mov dword [ebp - 0x76c], ecx
mov edx, dword [ebp - 0x238]
mov eax, dword [edx + 0xc]
shl eax, 2
push eax
mov ecx, dword [ebp - 0x238]
mov edx, dword [ecx + 4]
push edx
mov eax, dword [ebp - 0x76c]
push eax
call sub.VCRUNTIME140.dll_memcpy
add esp, 0xc
cmp dword [ebp - 0x284], 0
jne 0x1008df12
jmp 0x1008df1d
mov ecx, dword [ebp - 0x3c]
mov edx, dword [ebp - 0x284]
mov dword [edx], ecx
mov dword [ebp - 4], 0xffffffff
mov eax, dword [ebp - 0x20c]
add eax, 0xd4
mov dword [ebp - 0x2fc], eax
mov dword [ebp - 0x770], 0x10096a00
mov ecx, dword [ebp - 0x2fc]
movzx edx, byte [ecx + 0x10]
test edx, edx
je 0x1008df5d
mov eax, 0x1b
add eax, 1
mov dword [ebp - 0x3d8], eax
jmp 0x1008df67
mov dword [ebp - 0x3d8], 0x1b
mov ecx, dword [ebp - 0x3d8]
mov dword [ebp - 0x3dc], ecx
mov edx, dword [ebp - 0x2fc]
cmp dword [edx + 4], 0
je 0x1008dfa5
mov ecx, dword [ebp - 0x2fc]
add ecx, 8
call fcn.1003bc70
movzx eax, al
test eax, eax
je 0x1008dfa5
mov ecx, dword [ebp - 0x2fc]
mov edx, dword [ebp - 0x3dc]
cmp edx, dword [ecx + 0xc]
jbe 0x1008dfd1
mov dword [ebp - 0x388], 0
mov eax, dword [ebp - 0x204]
or eax, 0x100000
mov dword [ebp - 0x204], eax
lea ecx, [ebp - 0x388]
mov dword [ebp - 0x798], ecx
jmp 0x1008e125
mov edx, dword [ebp - 0x770]
mov dword [ebp - 0x774], edx
mov eax, dword [ebp - 0x774]
mov dword [ebp - 0x77c], eax
mov ecx, dword [ebp - 0x2fc]
add ecx, 8
mov dword [ebp - 0x778], ecx
mov edx, dword [ebp - 0x3dc]
push edx
mov ecx, dword [ebp - 0x778]
call fcn.1003bc80
mov ecx, dword [ebp - 0x77c]
mov dword [eax], ecx
mov edx, 0x1b
shl edx, 2
mov eax, dword [ebp - 0x2fc]
add edx, dword [eax + 4]
mov dword [ebp - 0x3e0], edx
mov ecx, dword [ebp - 0x3e0]
cmp dword [ecx], 0
je 0x1008e079
mov edx, dword [ebp - 0x3e0]
mov eax, dword [edx]
mov dword [ebp - 0x780], eax
mov ecx, dword [ebp - 0x780]
mov dword [ebp - 0x784], ecx
lea edx, [ebp - 0x784]
mov dword [ebp - 0x788], edx
mov eax, dword [ebp - 0x204]
or eax, 0x200000
mov dword [ebp - 0x204], eax
mov ecx, dword [ebp - 0x788]
mov dword [ebp - 0x3e4], ecx
jmp 0x1008e0ac
mov dword [ebp - 0x78c], 0
lea edx, [ebp - 0x78c]
mov dword [ebp - 0x790], edx
mov eax, dword [ebp - 0x204]
or eax, 0x400000
mov dword [ebp - 0x204], eax
mov ecx, dword [ebp - 0x790]
mov dword [ebp - 0x3e4], ecx
mov edx, dword [ebp - 0x3e4]
mov dword [ebp - 0x794], edx
mov eax, dword [ebp - 0x794]
mov ecx, dword [eax]
mov dword [ebp - 0x388], ecx
mov edx, dword [ebp - 0x204]
or edx, 0x800000
mov dword [ebp - 0x204], edx
mov eax, dword [ebp - 0x204]
and eax, 0x400000
je 0x1008e0ef
and dword [ebp - 0x204], 0xffbfffff
mov ecx, dword [ebp - 0x204]
and ecx, 0x200000
je 0x1008e107
and dword [ebp - 0x204], 0xffdfffff
mov edx, dword [ebp - 0x204]
or edx, 0x100000
mov dword [ebp - 0x204], edx
lea eax, [ebp - 0x388]
mov dword [ebp - 0x798], eax
mov ecx, dword [ebp - 0x20c]
add ecx, 0xd4
mov dword [ebp - 0x2f8], ecx
mov dword [ebp - 0x79c], 0x10096b40
mov edx, dword [ebp - 0x2f8]
movzx eax, byte [edx + 0x10]
test eax, eax
je 0x1008e15f
mov ecx, 0x5d
add ecx, 1
mov dword [ebp - 0x3e8], ecx
jmp 0x1008e169
mov dword [ebp - 0x3e8], 0x5d
mov edx, dword [ebp - 0x3e8]
mov dword [ebp - 0x3ec], edx
mov eax, dword [ebp - 0x2f8]
cmp dword [eax + 4], 0
je 0x1008e1a7
mov ecx, dword [ebp - 0x2f8]
add ecx, 8
call fcn.1003bc70
movzx ecx, al
test ecx, ecx
je 0x1008e1a7
mov edx, dword [ebp - 0x2f8]
mov eax, dword [ebp - 0x3ec]
cmp eax, dword [edx + 0xc]
jbe 0x1008e1d4
mov dword [ebp - 0x38c], 0
mov ecx, dword [ebp - 0x204]
or ecx, 0x1000000
mov dword [ebp - 0x204], ecx
lea edx, [ebp - 0x38c]
mov dword [ebp - 0x7c4], edx
jmp 0x1008e328
mov eax, dword [ebp - 0x79c]
mov dword [ebp - 0x7a0], eax
mov ecx, dword [ebp - 0x7a0]
mov dword [ebp - 0x7a8], ecx
mov edx, dword [ebp - 0x2f8]
add edx, 8
mov dword [ebp - 0x7a4], edx
mov eax, dword [ebp - 0x3ec]
push eax
mov ecx, dword [ebp - 0x7a4]
call fcn.1003bc80
mov ecx, dword [ebp - 0x7a8]
mov dword [eax], ecx
mov edx, 0x5d
shl edx, 2
mov eax, dword [ebp - 0x2f8]
add edx, dword [eax + 4]
mov dword [ebp - 0x3f0], edx
mov ecx, dword [ebp - 0x3f0]
cmp dword [ecx], 0
je 0x1008e27c
mov edx, dword [ebp - 0x3f0]
mov eax, dword [edx]
mov dword [ebp - 0x7ac], eax
mov ecx, dword [ebp - 0x7ac]
mov dword [ebp - 0x7b0], ecx
lea edx, [ebp - 0x7b0]
mov dword [ebp - 0x7b4], edx
mov eax, dword [ebp - 0x204]
or eax, 0x2000000
mov dword [ebp - 0x204], eax
mov ecx, dword [ebp - 0x7b4]
mov dword [ebp - 0x3f4], ecx
jmp 0x1008e2af
mov dword [ebp - 0x7b8], 0
lea edx, [ebp - 0x7b8]
mov dword [ebp - 0x7bc], edx
mov eax, dword [ebp - 0x204]
or eax, 0x4000000
mov dword [ebp - 0x204], eax
mov ecx, dword [ebp - 0x7bc]
mov dword [ebp - 0x3f4], ecx
mov edx, dword [ebp - 0x3f4]
mov dword [ebp - 0x7c0], edx
mov eax, dword [ebp - 0x7c0]
mov ecx, dword [eax]
mov dword [ebp - 0x38c], ecx
mov edx, dword [ebp - 0x204]
or edx, 0x8000000
mov dword [ebp - 0x204], edx
mov eax, dword [ebp - 0x204]
and eax, 0x4000000
je 0x1008e2f2
and dword [ebp - 0x204], 0xfbffffff
mov ecx, dword [ebp - 0x204]
and ecx, 0x2000000
je 0x1008e30a
and dword [ebp - 0x204], 0xfdffffff
mov edx, dword [ebp - 0x204]
or edx, 0x1000000
mov dword [ebp - 0x204], edx
lea eax, [ebp - 0x38c]
mov dword [ebp - 0x7c4], eax
mov ecx, dword [ebp - 0x20c]
add ecx, 0xd4
mov dword [ebp - 0x2f4], ecx
mov dword [ebp - 0x7c8], 0x10096d60
mov edx, dword [ebp - 0x2f4]
movzx eax, byte [edx + 0x10]
test eax, eax
je 0x1008e362
mov ecx, 0x5a
add ecx, 1
mov dword [ebp - 0x3f8], ecx
jmp 0x1008e36c
mov dword [ebp - 0x3f8], 0x5a
mov edx, dword [ebp - 0x3f8]
mov dword [ebp - 0x3fc], edx
mov eax, dword [ebp - 0x2f4]
cmp dword [eax + 4], 0
je 0x1008e3aa
mov ecx, dword [ebp - 0x2f4]
add ecx, 8
call fcn.1003bc70
movzx ecx, al
test ecx, ecx
je 0x1008e3aa
mov edx, dword [ebp - 0x2f4]
mov eax, dword [ebp - 0x3fc]
cmp eax, dword [edx + 0xc]
jbe 0x1008e3d7
mov dword [ebp - 0x390], 0
mov ecx, dword [ebp - 0x204]
or ecx, 0x10000000
mov dword [ebp - 0x204], ecx
lea edx, [ebp - 0x390]
mov dword [ebp - 0x7f0], edx
jmp 0x1008e52b
mov eax, dword [ebp - 0x7c8]
mov dword [ebp - 0x7cc], eax
mov ecx, dword [ebp - 0x7cc]
mov dword [ebp - 0x7d4], ecx
mov edx, dword [ebp - 0x2f4]
add edx, 8
mov dword [ebp - 0x7d0], edx
mov eax, dword [ebp - 0x3fc]
push eax
mov ecx, dword [ebp - 0x7d0]
call fcn.1003bc80
mov ecx, dword [ebp - 0x7d4]
mov dword [eax], ecx
mov edx, 0x5a
shl edx, 2
mov eax, dword [ebp - 0x2f4]
add edx, dword [eax + 4]
mov dword [ebp - 0x400], edx
mov ecx, dword [ebp - 0x400]
cmp dword [ecx], 0
je 0x1008e47f
mov edx, dword [ebp - 0x400]
mov eax, dword [edx]
mov dword [ebp - 0x7d8], eax
mov ecx, dword [ebp - 0x7d8]
mov dword [ebp - 0x7dc], ecx
lea edx, [ebp - 0x7dc]
mov dword [ebp - 0x7e0], edx
mov eax, dword [ebp - 0x204]
or eax, 0x20000000
mov dword [ebp - 0x204], eax
mov ecx, dword [ebp - 0x7e0]
mov dword [ebp - 0x404], ecx
jmp 0x1008e4b2
mov dword [ebp - 0x7e4], 0
lea edx, [ebp - 0x7e4]
mov dword [ebp - 0x7e8], edx
mov eax, dword [ebp - 0x204]
or eax, 0x40000000
mov dword [ebp - 0x204], eax
mov ecx, dword [ebp - 0x7e8]
mov dword [ebp - 0x404], ecx
mov edx, dword [ebp - 0x404]
mov dword [ebp - 0x7ec], edx
mov eax, dword [ebp - 0x7ec]
mov ecx, dword [eax]
mov dword [ebp - 0x390], ecx
mov edx, dword [ebp - 0x204]
or edx, 0x80000000
mov dword [ebp - 0x204], edx
mov eax, dword [ebp - 0x204]
and eax, 0x40000000
je 0x1008e4f5
and dword [ebp - 0x204], 0xbfffffff
mov ecx, dword [ebp - 0x204]
and ecx, 0x20000000
je 0x1008e50d
and dword [ebp - 0x204], 0xdfffffff
mov edx, dword [ebp - 0x204]
or edx, 0x10000000
mov dword [ebp - 0x204], edx
lea eax, [ebp - 0x390]
mov dword [ebp - 0x7f0], eax
mov ecx, dword [ebp - 0x20c]
add ecx, 0xfc
mov dword [ebp - 0x23c], ecx
mov edx, dword [0x10225fbc]
mov dword [ebp - 0x7f4], edx
lea eax, [ebp - 0x2f0]
mov dword [ebp - 0x408], eax
mov ecx, dword [ebp - 0x408]
mov edx, dword [ebp - 0x7f4]
mov dword [ecx], edx
mov eax, dword [ebp - 0x408]
mov dword [ebp - 0xde0], eax
mov dword [ebp - 4], 3
mov ecx, dword [ebp - 0x23c]
mov edx, dword [ebp - 0x2f0]
mov dword [ecx], edx
mov eax, dword [ebp - 0x2f0]
mov ecx, dword [eax]
mov dword [ebp - 0x7f8], ecx
mov edx, dword [ebp - 0x23c]
mov eax, dword [ebp - 0x7f8]
mov dword [edx + 4], eax
mov ecx, dword [ebp - 0x23c]
cmp dword [ecx + 4], 0
jne 0x1008e5b9
mov dword [ebp - 4], 0xffffffff
jmp 0x1008e7f3
mov dword [ebp - 0x328], 0
mov edx, dword [ebp - 0x23c]
mov eax, dword [edx + 4]
mov ecx, dword [ebp - 0x328]
mov edx, dword [eax + ecx*4]
mov dword [ebp - 0x40c], edx
cmp dword [ebp - 0x40c], 0
jne 0x1008e5ed
mov byte [ebp - 0x20e], 0
jmp 0x1008e644
mov eax, dword [0x10156d14]
mov dword [ebp - 0x7fc], eax
push 0x1c
lea ecx, [ebp - 0xc8]
push ecx
mov edx, dword [ebp - 0x40c]
push edx
call dword [ebp - 0x7fc]
test eax, eax
jne 0x1008e61b
mov byte [ebp - 0x20e], 0
jmp 0x1008e644
mov eax, dword [ebp - 0xb4]
and eax, 1
jne 0x1008e634
mov ecx, dword [ebp - 0xb4]
and ecx, 0x100
je 0x1008e63d
mov byte [ebp - 0x20e], 0
jmp 0x1008e644
mov byte [ebp - 0x20e], 1
movzx edx, byte [ebp - 0x20e]
test edx, edx
je 0x1008e663
mov eax, dword [ebp - 0x328]
add eax, 1
mov dword [ebp - 0x328], eax
jmp 0x1008e5c3
mov ecx, dword [ebp - 0x23c]
mov edx, dword [ebp - 0x328]
mov dword [ecx + 0xc], edx
mov eax, dword [ebp - 0x23c]
cmp dword [eax + 0xc], 0
jne 0x1008e68a
mov dword [ebp - 4], 0xffffffff
jmp 0x1008e7f3
mov ecx, 1
test ecx, ecx
je 0x1008e6a7
mov edx, dword [ebp - 0x23c]
mov eax, dword [edx + 0xc]
add eax, 1
mov dword [ebp - 0x410], eax
jmp 0x1008e6b6
mov ecx, dword [ebp - 0x23c]
mov edx, dword [ecx + 0xc]
mov dword [ebp - 0x410], edx
mov edx, dword [ebp - 0x410]
lea ecx, [ebp - 0x804]
call fcn.1003c2a0
mov dword [ebp - 0x800], eax
mov eax, dword [ebp - 0x800]
push eax
mov ecx, dword [ebp - 0x23c]
add ecx, 8
call fcn.1003c340
lea ecx, [ebp - 0x804]
call fcn.1003bc90
mov ecx, dword [ebp - 0x23c]
add ecx, 8
call fcn.1003bc70
movzx ecx, al
test ecx, ecx
jne 0x1008e70e
mov dword [ebp - 4], 0xffffffff
jmp 0x1008e7f3
mov ecx, dword [ebp - 0x23c]
add ecx, 8
call fcn.1002cc10
mov dword [ebp - 0x808], eax
mov edx, dword [ebp - 0x808]
mov dword [ebp - 0x38], edx
mov eax, 1
test eax, eax
je 0x1008e7a7
mov ecx, dword [ebp - 0x38]
mov dword [ebp - 0x80c], ecx
mov edx, dword [ebp - 0x23c]
mov eax, dword [edx + 0xc]
lea ecx, [eax*4 + 4]
push ecx
mov edx, dword [ebp - 0x23c]
mov eax, dword [edx + 4]
sub eax, 4
push eax
mov ecx, dword [ebp - 0x80c]
push ecx
call sub.VCRUNTIME140.dll_memcpy
add esp, 0xc
mov edx, dword [ebp - 0x38]
mov dword [ebp - 0x810], edx
mov eax, dword [ebp - 0x810]
add eax, 4
mov dword [ebp - 0x814], eax
cmp dword [ebp - 0x2f0], 0
jne 0x1008e78d
jmp 0x1008e79b
mov ecx, dword [ebp - 0x2f0]
mov edx, dword [ebp - 0x814]
mov dword [ecx], edx
mov eax, dword [ebp - 0x23c]
mov byte [eax + 0x10], 1
jmp 0x1008e7ec
mov ecx, dword [ebp - 0x38]
mov dword [ebp - 0x818], ecx
mov edx, dword [ebp - 0x23c]
mov eax, dword [edx + 0xc]
shl eax, 2
push eax
mov ecx, dword [ebp - 0x23c]
mov edx, dword [ecx + 4]
push edx
mov eax, dword [ebp - 0x818]
push eax
call sub.VCRUNTIME140.dll_memcpy
add esp, 0xc
cmp dword [ebp - 0x2f0], 0
jne 0x1008e7e1
jmp 0x1008e7ec
mov ecx, dword [ebp - 0x38]
mov edx, dword [ebp - 0x2f0]
mov dword [edx], ecx
mov dword [ebp - 4], 0xffffffff
mov eax, dword [ebp - 0x20c]
add eax, 0xfc
mov dword [ebp - 0x2ec], eax
mov dword [ebp - 0x81c], 0x100af900
mov ecx, dword [ebp - 0x2ec]
movzx edx, byte [ecx + 0x10]
test edx, edx
je 0x1008e82c
mov eax, 0xe
add eax, 1
mov dword [ebp - 0x414], eax
jmp 0x1008e836
mov dword [ebp - 0x414], 0xe
mov ecx, dword [ebp - 0x414]
mov dword [ebp - 0x418], ecx
mov edx, dword [ebp - 0x2ec]
cmp dword [edx + 4], 0
je 0x1008e874
mov ecx, dword [ebp - 0x2ec]
add ecx, 8
call fcn.1003bc70
movzx eax, al
test eax, eax
je 0x1008e874
mov ecx, dword [ebp - 0x2ec]
mov edx, dword [ebp - 0x418]
cmp edx, dword [ecx + 0xc]
jbe 0x1008e89e
mov dword [ebp - 0x394], 0
mov eax, dword [ebp - 0x1fc]
or eax, 1
mov dword [ebp - 0x1fc], eax
lea ecx, [ebp - 0x394]
mov dword [ebp - 0x844], ecx
jmp 0x1008e9dd
mov edx, dword [ebp - 0x81c]
mov dword [ebp - 0x820], edx
mov eax, dword [ebp - 0x820]
mov dword [ebp - 0x828], eax
mov ecx, dword [ebp - 0x2ec]
add ecx, 8
mov dword [ebp - 0x824], ecx
mov edx, dword [ebp - 0x418]
push edx
mov ecx, dword [ebp - 0x824]
call fcn.1003bc80
mov ecx, dword [ebp - 0x828]
mov dword [eax], ecx
mov edx, 0xe
shl edx, 2
mov eax, dword [ebp - 0x2ec]
add edx, dword [eax + 4]
mov dword [ebp - 0x41c], edx
mov ecx, dword [ebp - 0x41c]
cmp dword [ecx], 0
je 0x1008e944
mov edx, dword [ebp - 0x41c]
mov eax, dword [edx]
mov dword [ebp - 0x82c], eax
mov ecx, dword [ebp - 0x82c]
mov dword [ebp - 0x830], ecx
lea edx, [ebp - 0x830]
mov dword [ebp - 0x834], edx
mov eax, dword [ebp - 0x1fc]
or eax, 2
mov dword [ebp - 0x1fc], eax
mov ecx, dword [ebp - 0x834]
mov dword [ebp - 0x420], ecx
jmp 0x1008e975
mov dword [ebp - 0x838], 0
lea edx, [ebp - 0x838]
mov dword [ebp - 0x83c], edx
mov eax, dword [ebp - 0x1fc]
or eax, 4
mov dword [ebp - 0x1fc], eax
mov ecx, dword [ebp - 0x83c]
mov dword [ebp - 0x420], ecx
mov edx, dword [ebp - 0x420]
mov dword [ebp - 0x840], edx
mov eax, dword [ebp - 0x840]
mov ecx, dword [eax]
mov dword [ebp - 0x394], ecx
mov edx, dword [ebp - 0x1fc]
or edx, 8
mov dword [ebp - 0x1fc], edx
mov eax, dword [ebp - 0x1fc]
and eax, 4
je 0x1008e9b0
and dword [ebp - 0x1fc], 0xfffffffb
mov ecx, dword [ebp - 0x1fc]
and ecx, 2
je 0x1008e9c2
and dword [ebp - 0x1fc], 0xfffffffd
mov edx, dword [ebp - 0x1fc]
or edx, 1
mov dword [ebp - 0x1fc], edx
lea eax, [ebp - 0x394]
mov dword [ebp - 0x844], eax
mov ecx, dword [ebp - 0x20c]
add ecx, 0xfc
mov dword [ebp - 0x2e8], ecx
mov dword [ebp - 0x848], 0x100afc30
mov edx, dword [ebp - 0x2e8]
movzx eax, byte [edx + 0x10]
test eax, eax
je 0x1008ea17
mov ecx, 0x13
add ecx, 1
mov dword [ebp - 0x424], ecx
jmp 0x1008ea21
mov dword [ebp - 0x424], 0x13
mov edx, dword [ebp - 0x424]
mov dword [ebp - 0x428], edx
mov eax, dword [ebp - 0x2e8]
cmp dword [eax + 4], 0
je 0x1008ea5f
mov ecx, dword [ebp - 0x2e8]
add ecx, 8
call fcn.1003bc70
movzx ecx, al
test ecx, ecx
je 0x1008ea5f
mov edx, dword [ebp - 0x2e8]
mov eax, dword [ebp - 0x428]
cmp eax, dword [edx + 0xc]
jbe 0x1008ea89
mov dword [ebp - 0x3b0], 0
mov ecx, dword [ebp - 0x1fc]
or ecx, 0x10
mov dword [ebp - 0x1fc], ecx
lea edx, [ebp - 0x3b0]
mov dword [ebp - 0x870], edx
jmp 0x1008ebcb
mov eax, dword [ebp - 0x848]
mov dword [ebp - 0x84c], eax
mov ecx, dword [ebp - 0x84c]
mov dword [ebp - 0x854], ecx
mov edx, dword [ebp - 0x2e8]
add edx, 8
mov dword [ebp - 0x850], edx
mov eax, dword [ebp - 0x428]
push eax
mov ecx, dword [ebp - 0x850]
call fcn.1003bc80
mov ecx, dword [ebp - 0x854]
mov dword [eax], ecx
mov edx, 0x13
shl edx, 2
mov eax, dword [ebp - 0x2e8]
add edx, dword [eax + 4]
mov dword [ebp - 0x42c], edx
mov ecx, dword [ebp - 0x42c]
cmp dword [ecx], 0
je 0x1008eb2f
mov edx, dword [ebp - 0x42c]
mov eax, dword [edx]
mov dword [ebp - 0x858], eax
mov ecx, dword [ebp - 0x858]
mov dword [ebp - 0x85c], ecx
lea edx, [ebp - 0x85c]
mov dword [ebp - 0x860], edx
mov eax, dword [ebp - 0x1fc]
or eax, 0x20
mov dword [ebp - 0x1fc], eax
mov ecx, dword [ebp - 0x860]
mov dword [ebp - 0x430], ecx
jmp 0x1008eb60
mov dword [ebp - 0x864], 0
lea edx, [ebp - 0x864]
mov dword [ebp - 0x868], edx
mov eax, dword [ebp - 0x1fc]
or eax, 0x40
mov dword [ebp - 0x1fc], eax
mov ecx, dword [ebp - 0x868]
mov dword [ebp - 0x430], ecx
mov edx, dword [ebp - 0x430]
mov dword [ebp - 0x86c], edx
mov eax, dword [ebp - 0x86c]
mov ecx, dword [eax]
mov dword [ebp - 0x3b0], ecx
mov edx, dword [ebp - 0x1fc]
or edx, 0x80
mov dword [ebp - 0x1fc], edx
mov eax, dword [ebp - 0x1fc]
and eax, 0x40
je 0x1008eb9e
and dword [ebp - 0x1fc], 0xffffffbf
mov ecx, dword [ebp - 0x1fc]
and ecx, 0x20
je 0x1008ebb0
and dword [ebp - 0x1fc], 0xffffffdf
mov edx, dword [ebp - 0x1fc]
or edx, 0x10
mov dword [ebp - 0x1fc], edx
lea eax, [ebp - 0x3b0]
mov dword [ebp - 0x870], eax
mov ecx, dword [ebp - 0x20c]
add ecx, 0x98
mov dword [ebp - 0x240], ecx
mov edx, dword [0x10226004]
mov dword [ebp - 0x874], edx
lea eax, [ebp - 0x2e4]
mov dword [ebp - 0x434], eax
mov ecx, dword [ebp - 0x434]
mov edx, dword [ebp - 0x874]
mov dword [ecx], edx
mov eax, dword [ebp - 0x434]
mov dword [ebp - 0xde4], eax
mov dword [ebp - 4], 4
mov ecx, dword [ebp - 0x240]
mov edx, dword [ebp - 0x2e4]
mov dword [ecx], edx
mov eax, dword [ebp - 0x2e4]
mov ecx, dword [eax]
mov dword [ebp - 0x878], ecx
mov edx, dword [ebp - 0x240]
mov eax, dword [ebp - 0x878]
mov dword [edx + 4], eax
mov ecx, dword [ebp - 0x240]
cmp dword [ecx + 4], 0
jne 0x1008ec59
mov dword [ebp - 4], 0xffffffff
jmp 0x1008ee93
mov dword [ebp - 0x32c], 0
mov edx, dword [ebp - 0x240]
mov eax, dword [edx + 4]
mov ecx, dword [ebp - 0x32c]
mov edx, dword [eax + ecx*4]
mov dword [ebp - 0x438], edx
cmp dword [ebp - 0x438], 0
jne 0x1008ec8d
mov byte [ebp - 0x20f], 0
jmp 0x1008ece4
mov eax, dword [0x10156d14]
mov dword [ebp - 0x87c], eax
push 0x1c
lea ecx, [ebp - 0xac]
push ecx
mov edx, dword [ebp - 0x438]
push edx
call dword [ebp - 0x87c]
test eax, eax
jne 0x1008ecbb
mov byte [ebp - 0x20f], 0
jmp 0x1008ece4
mov eax, dword [ebp - 0x98]
and eax, 1
jne 0x1008ecd4
mov ecx, dword [ebp - 0x98]
and ecx, 0x100
je 0x1008ecdd
mov byte [ebp - 0x20f], 0
jmp 0x1008ece4
mov byte [ebp - 0x20f], 1
movzx edx, byte [ebp - 0x20f]
test edx, edx
je 0x1008ed03
mov eax, dword [ebp - 0x32c]
add eax, 1
mov dword [ebp - 0x32c], eax
jmp 0x1008ec63
mov ecx, dword [ebp - 0x240]
mov edx, dword [ebp - 0x32c]
mov dword [ecx + 0xc], edx
mov eax, dword [ebp - 0x240]
cmp dword [eax + 0xc], 0
jne 0x1008ed2a
mov dword [ebp - 4], 0xffffffff
jmp 0x1008ee93
mov ecx, 1
test ecx, ecx
je 0x1008ed47
mov edx, dword [ebp - 0x240]
mov eax, dword [edx + 0xc]
add eax, 1
mov dword [ebp - 0x43c], eax
jmp 0x1008ed56
mov ecx, dword [ebp - 0x240]
mov edx, dword [ecx + 0xc]
mov dword [ebp - 0x43c], edx
mov edx, dword [ebp - 0x43c]
lea ecx, [ebp - 0x884]
call fcn.1003c2a0
mov dword [ebp - 0x880], eax
mov eax, dword [ebp - 0x880]
push eax
mov ecx, dword [ebp - 0x240]
add ecx, 8
call fcn.1003c340
lea ecx, [ebp - 0x884]
call fcn.1003bc90
mov ecx, dword [ebp - 0x240]
add ecx, 8
call fcn.1003bc70
movzx ecx, al
test ecx, ecx
jne 0x1008edae
mov dword [ebp - 4], 0xffffffff
jmp 0x1008ee93
mov ecx, dword [ebp - 0x240]
add ecx, 8
call fcn.1002cc10
mov dword [ebp - 0x888], eax
mov edx, dword [ebp - 0x888]
mov dword [ebp - 0x34], edx
mov eax, 1
test eax, eax
je 0x1008ee47
mov ecx, dword [ebp - 0x34]
mov dword [ebp - 0x88c], ecx
mov edx, dword [ebp - 0x240]
mov eax, dword [edx + 0xc]
lea ecx, [eax*4 + 4]
push ecx
mov edx, dword [ebp - 0x240]
mov eax, dword [edx + 4]
sub eax, 4
push eax
mov ecx, dword [ebp - 0x88c]
push ecx
call sub.VCRUNTIME140.dll_memcpy
add esp, 0xc
mov edx, dword [ebp - 0x34]
mov dword [ebp - 0x890], edx
mov eax, dword [ebp - 0x890]
add eax, 4
mov dword [ebp - 0x894], eax
cmp dword [ebp - 0x2e4], 0
jne 0x1008ee2d
jmp 0x1008ee3b
mov ecx, dword [ebp - 0x2e4]
mov edx, dword [ebp - 0x894]
mov dword [ecx], edx
mov eax, dword [ebp - 0x240]
mov byte [eax + 0x10], 1
jmp 0x1008ee8c
mov ecx, dword [ebp - 0x34]
mov dword [ebp - 0x898], ecx
mov edx, dword [ebp - 0x240]
mov eax, dword [edx + 0xc]
shl eax, 2
push eax
mov ecx, dword [ebp - 0x240]
mov edx, dword [ecx + 4]
push edx
mov eax, dword [ebp - 0x898]
push eax
call sub.VCRUNTIME140.dll_memcpy
add esp, 0xc
cmp dword [ebp - 0x2e4], 0
jne 0x1008ee81
jmp 0x1008ee8c
mov ecx, dword [ebp - 0x34]
mov edx, dword [ebp - 0x2e4]
mov dword [edx], ecx
mov dword [ebp - 4], 0xffffffff
mov eax, dword [ebp - 0x20c]
add eax, 0x98
mov dword [ebp - 0x2e0], eax
mov dword [ebp - 0x89c], 0x100a3ed0
mov ecx, dword [ebp - 0x2e0]
movzx edx, byte [ecx + 0x10]
test edx, edx
je 0x1008eecc
mov eax, 0x11
add eax, 1
mov dword [ebp - 0x440], eax
jmp 0x1008eed6
mov dword [ebp - 0x440], 0x11
mov ecx, dword [ebp - 0x440]
mov dword [ebp - 0x444], ecx
mov edx, dword [ebp - 0x2e0]
cmp dword [edx + 4], 0
je 0x1008ef14
mov ecx, dword [ebp - 0x2e0]
add ecx, 8
call fcn.1003bc70
movzx eax, al
test eax, eax
je 0x1008ef14
mov ecx, dword [ebp - 0x2e0]
mov edx, dword [ebp - 0x444]
cmp edx, dword [ecx + 0xc]
jbe 0x1008ef40
mov dword [ebp - 0x39c], 0
mov eax, dword [ebp - 0x1fc]
or eax, 0x100
mov dword [ebp - 0x1fc], eax
lea ecx, [ebp - 0x39c]
mov dword [ebp - 0x8c4], ecx
jmp 0x1008f094
mov edx, dword [ebp - 0x89c]
mov dword [ebp - 0x8a0], edx
mov eax, dword [ebp - 0x8a0]
mov dword [ebp - 0x8a8], eax
mov ecx, dword [ebp - 0x2e0]
add ecx, 8
mov dword [ebp - 0x8a4], ecx
mov edx, dword [ebp - 0x444]
push edx
mov ecx, dword [ebp - 0x8a4]
call fcn.1003bc80
mov ecx, dword [ebp - 0x8a8]
mov dword [eax], ecx
mov edx, 0x11
shl edx, 2
mov eax, dword [ebp - 0x2e0]
add edx, dword [eax + 4]
mov dword [ebp - 0x448], edx
mov ecx, dword [ebp - 0x448]
cmp dword [ecx], 0
je 0x1008efe8
mov edx, dword [ebp - 0x448]
mov eax, dword [edx]
mov dword [ebp - 0x8ac], eax
mov ecx, dword [ebp - 0x8ac]
mov dword [ebp - 0x8b0], ecx
lea edx, [ebp - 0x8b0]
mov dword [ebp - 0x8b4], edx
mov eax, dword [ebp - 0x1fc]
or eax, 0x200
mov dword [ebp - 0x1fc], eax
mov ecx, dword [ebp - 0x8b4]
mov dword [ebp - 0x44c], ecx
jmp 0x1008f01b
mov dword [ebp - 0x8b8], 0
lea edx, [ebp - 0x8b8]
mov dword [ebp - 0x8bc], edx
mov eax, dword [ebp - 0x1fc]
or eax, 0x400
mov dword [ebp - 0x1fc], eax
mov ecx, dword [ebp - 0x8bc]
mov dword [ebp - 0x44c], ecx
mov edx, dword [ebp - 0x44c]
mov dword [ebp - 0x8c0], edx
mov eax, dword [ebp - 0x8c0]
mov ecx, dword [eax]
mov dword [ebp - 0x39c], ecx
mov edx, dword [ebp - 0x1fc]
or edx, 0x800
mov dword [ebp - 0x1fc], edx
mov eax, dword [ebp - 0x1fc]
and eax, 0x400
je 0x1008f05e
and dword [ebp - 0x1fc], 0xfffffbff
mov ecx, dword [ebp - 0x1fc]
and ecx, 0x200
je 0x1008f076
and dword [ebp - 0x1fc], 0xfffffdff
mov edx, dword [ebp - 0x1fc]
or edx, 0x100
mov dword [ebp - 0x1fc], edx
lea eax, [ebp - 0x39c]
mov dword [ebp - 0x8c4], eax
mov ecx, dword [ebp - 0x20c]
add ecx, 0x98
mov dword [ebp - 0x2dc], ecx
mov dword [ebp - 0x8c8], 0x100a3f00
mov edx, dword [ebp - 0x2dc]
movzx eax, byte [edx + 0x10]
test eax, eax
je 0x1008f0ce
mov ecx, 0x12
add ecx, 1
mov dword [ebp - 0x450], ecx
jmp 0x1008f0d8
mov dword [ebp - 0x450], 0x12
mov edx, dword [ebp - 0x450]
mov dword [ebp - 0x454], edx
mov eax, dword [ebp - 0x2dc]
cmp dword [eax + 4], 0
je 0x1008f116
mov ecx, dword [ebp - 0x2dc]
add ecx, 8
call fcn.1003bc70
movzx ecx, al
test ecx, ecx
je 0x1008f116
mov edx, dword [ebp - 0x2dc]
mov eax, dword [ebp - 0x454]
cmp eax, dword [edx + 0xc]
jbe 0x1008f143
mov dword [ebp - 0x3a0], 0
mov ecx, dword [ebp - 0x1fc]
or ecx, 0x1000
mov dword [ebp - 0x1fc], ecx
lea edx, [ebp - 0x3a0]
mov dword [ebp - 0x8f0], edx
jmp 0x1008f297
mov eax, dword [ebp - 0x8c8]
mov dword [ebp - 0x8cc], eax
mov ecx, dword [ebp - 0x8cc]
mov dword [ebp - 0x8d4], ecx
mov edx, dword [ebp - 0x2dc]
add edx, 8
mov dword [ebp - 0x8d0], edx
mov eax, dword [ebp - 0x454]
push eax
mov ecx, dword [ebp - 0x8d0]
call fcn.1003bc80
mov ecx, dword [ebp - 0x8d4]
mov dword [eax], ecx
mov edx, 0x12
shl edx, 2
mov eax, dword [ebp - 0x2dc]
add edx, dword [eax + 4]
mov dword [ebp - 0x458], edx
mov ecx, dword [ebp - 0x458]
cmp dword [ecx], 0
je 0x1008f1eb
mov edx, dword [ebp - 0x458]
mov eax, dword [edx]
mov dword [ebp - 0x8d8], eax
mov ecx, dword [ebp - 0x8d8]
mov dword [ebp - 0x8dc], ecx
lea edx, [ebp - 0x8dc]
mov dword [ebp - 0x8e0], edx
mov eax, dword [ebp - 0x1fc]
or eax, 0x2000
mov dword [ebp - 0x1fc], eax
mov ecx, dword [ebp - 0x8e0]
mov dword [ebp - 0x45c], ecx
jmp 0x1008f21e
mov dword [ebp - 0x8e4], 0
lea edx, [ebp - 0x8e4]
mov dword [ebp - 0x8e8], edx
mov eax, dword [ebp - 0x1fc]
or eax, 0x4000
mov dword [ebp - 0x1fc], eax
mov ecx, dword [ebp - 0x8e8]
mov dword [ebp - 0x45c], ecx
mov edx, dword [ebp - 0x45c]
mov dword [ebp - 0x8ec], edx
mov eax, dword [ebp - 0x8ec]
mov ecx, dword [eax]
mov dword [ebp - 0x3a0], ecx
mov edx, dword [ebp - 0x1fc]
or edx, 0x8000
mov dword [ebp - 0x1fc], edx
mov eax, dword [ebp - 0x1fc]
and eax, 0x4000
je 0x1008f261
and dword [ebp - 0x1fc], 0xffffbfff
mov ecx, dword [ebp - 0x1fc]
and ecx, 0x2000
je 0x1008f279
and dword [ebp - 0x1fc], 0xffffdfff
mov edx, dword [ebp - 0x1fc]
or edx, 0x1000
mov dword [ebp - 0x1fc], edx
lea eax, [ebp - 0x3a0]
mov dword [ebp - 0x8f0], eax
mov ecx, dword [ebp - 0x20c]
add ecx, 0x98
mov dword [ebp - 0x2d8], ecx
mov dword [ebp - 0x8f4], 0x100a3fd0
mov edx, dword [ebp - 0x2d8]
movzx eax, byte [edx + 0x10]
test eax, eax
je 0x1008f2d1
mov ecx, 0x18
add ecx, 1
mov dword [ebp - 0x460], ecx
jmp 0x1008f2db
mov dword [ebp - 0x460], 0x18
mov edx, dword [ebp - 0x460]
mov dword [ebp - 0x464], edx
mov eax, dword [ebp - 0x2d8]
cmp dword [eax + 4], 0
je 0x1008f319
mov ecx, dword [ebp - 0x2d8]
add ecx, 8
call fcn.1003bc70
movzx ecx, al
test ecx, ecx
je 0x1008f319
mov edx, dword [ebp - 0x2d8]
mov eax, dword [ebp - 0x464]
cmp eax, dword [edx + 0xc]
jbe 0x1008f346
mov dword [ebp - 0x3a4], 0
mov ecx, dword [ebp - 0x1fc]
or ecx, 0x10000
mov dword [ebp - 0x1fc], ecx
lea edx, [ebp - 0x3a4]
mov dword [ebp - 0x91c], edx
jmp 0x1008f49a
mov eax, dword [ebp - 0x8f4]
mov dword [ebp - 0x8f8], eax
mov ecx, dword [ebp - 0x8f8]
mov dword [ebp - 0x900], ecx
mov edx, dword [ebp - 0x2d8]
add edx, 8
mov dword [ebp - 0x8fc], edx
mov eax, dword [ebp - 0x464]
push eax
mov ecx, dword [ebp - 0x8fc]
call fcn.1003bc80
mov ecx, dword [ebp - 0x900]
mov dword [eax], ecx
mov edx, 0x18
shl edx, 2
mov eax, dword [ebp - 0x2d8]
add edx, dword [eax + 4]
mov dword [ebp - 0x468], edx
mov ecx, dword [ebp - 0x468]
cmp dword [ecx], 0
je 0x1008f3ee
mov edx, dword [ebp - 0x468]
mov eax, dword [edx]
mov dword [ebp - 0x904], eax
mov ecx, dword [ebp - 0x904]
mov dword [ebp - 0x908], ecx
lea edx, [ebp - 0x908]
mov dword [ebp - 0x90c], edx
mov eax, dword [ebp - 0x1fc]
or eax, 0x20000
mov dword [ebp - 0x1fc], eax
mov ecx, dword [ebp - 0x90c]
mov dword [ebp - 0x46c], ecx
jmp 0x1008f421
mov dword [ebp - 0x910], 0
lea edx, [ebp - 0x910]
mov dword [ebp - 0x914], edx
mov eax, dword [ebp - 0x1fc]
or eax, 0x40000
mov dword [ebp - 0x1fc], eax
mov ecx, dword [ebp - 0x914]
mov dword [ebp - 0x46c], ecx
mov edx, dword [ebp - 0x46c]
mov dword [ebp - 0x918], edx
mov eax, dword [ebp - 0x918]
mov ecx, dword [eax]
mov dword [ebp - 0x3a4], ecx
mov edx, dword [ebp - 0x1fc]
or edx, 0x80000
mov dword [ebp - 0x1fc], edx
mov eax, dword [ebp - 0x1fc]
and eax, 0x40000
je 0x1008f464
and dword [ebp - 0x1fc], 0xfffbffff
mov ecx, dword [ebp - 0x1fc]
and ecx, 0x20000
je 0x1008f47c
and dword [ebp - 0x1fc], 0xfffdffff
mov edx, dword [ebp - 0x1fc]
or edx, 0x10000
mov dword [ebp - 0x1fc], edx
lea eax, [ebp - 0x3a4]
mov dword [ebp - 0x91c], eax
mov ecx, dword [ebp - 0x20c]
add ecx, 0x98
mov dword [ebp - 0x2d4], ecx
mov dword [ebp - 0x920], 0x100a4200
mov edx, dword [ebp - 0x2d4]
movzx eax, byte [edx + 0x10]
test eax, eax
je 0x1008f4d4
mov ecx, 0x2c
add ecx, 1
mov dword [ebp - 0x470], ecx
jmp 0x1008f4de
mov dword [ebp - 0x470], 0x2c
mov edx, dword [ebp - 0x470]
mov dword [ebp - 0x474], edx
mov eax, dword [ebp - 0x2d4]
cmp dword [eax + 4], 0
je 0x1008f51c
mov ecx, dword [ebp - 0x2d4]
add ecx, 8
call fcn.1003bc70
movzx ecx, al
test ecx, ecx
je 0x1008f51c
mov edx, dword [ebp - 0x2d4]
mov eax, dword [ebp - 0x474]
cmp eax, dword [edx + 0xc]
jbe 0x1008f549
mov dword [ebp - 0x3a8], 0
mov ecx, dword [ebp - 0x1fc]
or ecx, 0x100000
mov dword [ebp - 0x1fc], ecx
lea edx, [ebp - 0x3a8]
mov dword [ebp - 0x948], edx
jmp 0x1008f69d
mov eax, dword [ebp - 0x920]
mov dword [ebp - 0x924], eax
mov ecx, dword [ebp - 0x924]
mov dword [ebp - 0x92c], ecx
mov edx, dword [ebp - 0x2d4]
add edx, 8
mov dword [ebp - 0x928], edx
mov eax, dword [ebp - 0x474]
push eax
mov ecx, dword [ebp - 0x928]
call fcn.1003bc80
mov ecx, dword [ebp - 0x92c]
mov dword [eax], ecx
mov edx, 0x2c
shl edx, 2
mov eax, dword [ebp - 0x2d4]
add edx, dword [eax + 4]
mov dword [ebp - 0x478], edx
mov ecx, dword [ebp - 0x478]
cmp dword [ecx], 0
je 0x1008f5f1
mov edx, dword [ebp - 0x478]
mov eax, dword [edx]
mov dword [ebp - 0x930], eax
mov ecx, dword [ebp - 0x930]
mov dword [ebp - 0x934], ecx
lea edx, [ebp - 0x934]
mov dword [ebp - 0x938], edx
mov eax, dword [ebp - 0x1fc]
or eax, 0x200000
mov dword [ebp - 0x1fc], eax
mov ecx, dword [ebp - 0x938]
mov dword [ebp - 0x47c], ecx
jmp 0x1008f624
mov dword [ebp - 0x93c], 0
lea edx, [ebp - 0x93c]
mov dword [ebp - 0x940], edx
mov eax, dword [ebp - 0x1fc]
or eax, 0x400000
mov dword [ebp - 0x1fc], eax
mov ecx, dword [ebp - 0x940]
mov dword [ebp - 0x47c], ecx
mov edx, dword [ebp - 0x47c]
mov dword [ebp - 0x944], edx
mov eax, dword [ebp - 0x944]
mov ecx, dword [eax]
mov dword [ebp - 0x3a8], ecx
mov edx, dword [ebp - 0x1fc]
or edx, 0x800000
mov dword [ebp - 0x1fc], edx
mov eax, dword [ebp - 0x1fc]
and eax, 0x400000
je 0x1008f667
and dword [ebp - 0x1fc], 0xffbfffff
mov ecx, dword [ebp - 0x1fc]
and ecx, 0x200000
je 0x1008f67f
and dword [ebp - 0x1fc], 0xffdfffff
mov edx, dword [ebp - 0x1fc]
or edx, 0x100000
mov dword [ebp - 0x1fc], edx
lea eax, [ebp - 0x3a8]
mov dword [ebp - 0x948], eax
mov ecx, dword [ebp - 0x20c]
add ecx, 0x110
mov dword [ebp - 0x244], ecx
mov edx, dword [0x10225fb0]
mov dword [ebp - 0x94c], edx
lea eax, [ebp - 0x2d0]
mov dword [ebp - 0x480], eax
mov ecx, dword [ebp - 0x480]
mov edx, dword [ebp - 0x94c]
mov dword [ecx], edx
mov eax, dword [ebp - 0x480]
mov dword [ebp - 0xde8], eax
mov dword [ebp - 4], 5
mov ecx, dword [ebp - 0x244]
mov edx, dword [ebp - 0x2d0]
mov dword [ecx], edx
mov eax, dword [ebp - 0x2d0]
mov ecx, dword [eax]
mov dword [ebp - 0x950], ecx
mov edx, dword [ebp - 0x244]
mov eax, dword [ebp - 0x950]
mov dword [edx + 4], eax
mov ecx, dword [ebp - 0x244]
cmp dword [ecx + 4], 0
jne 0x1008f72b
mov dword [ebp - 4], 0xffffffff
jmp 0x1008f95c
mov dword [ebp - 0x330], 0
mov edx, dword [ebp - 0x244]
mov eax, dword [edx + 4]
mov ecx, dword [ebp - 0x330]
mov edx, dword [eax + ecx*4]
mov dword [ebp - 0x484], edx
cmp dword [ebp - 0x484], 0
jne 0x1008f75f
mov byte [ebp - 0x210], 0
jmp 0x1008f7ad
mov eax, dword [0x10156d14]
mov dword [ebp - 0x954], eax
push 0x1c
lea ecx, [ebp - 0x74]
push ecx
mov edx, dword [ebp - 0x484]
push edx
call dword [ebp - 0x954]
test eax, eax
jne 0x1008f78a
mov byte [ebp - 0x210], 0
jmp 0x1008f7ad
mov eax, dword [ebp - 0x60]
and eax, 1
jne 0x1008f79d
mov ecx, dword [ebp - 0x60]
and ecx, 0x100
je 0x1008f7a6
mov byte [ebp - 0x210], 0
jmp 0x1008f7ad
mov byte [ebp - 0x210], 1
movzx edx, byte [ebp - 0x210]
test edx, edx
je 0x1008f7cc
mov eax, dword [ebp - 0x330]
add eax, 1
mov dword [ebp - 0x330], eax
jmp 0x1008f735
mov ecx, dword [ebp - 0x244]
mov edx, dword [ebp - 0x330]
mov dword [ecx + 0xc], edx
mov eax, dword [ebp - 0x244]
cmp dword [eax + 0xc], 0
jne 0x1008f7f3
mov dword [ebp - 4], 0xffffffff
jmp 0x1008f95c
mov ecx, 1
test ecx, ecx
je 0x1008f810
mov edx, dword [ebp - 0x244]
mov eax, dword [edx + 0xc]
add eax, 1
mov dword [ebp - 0x488], eax
jmp 0x1008f81f
mov ecx, dword [ebp - 0x244]
mov edx, dword [ecx + 0xc]
mov dword [ebp - 0x488], edx
mov edx, dword [ebp - 0x488]
lea ecx, [ebp - 0x95c]
call fcn.1003c2a0
mov dword [ebp - 0x958], eax
mov eax, dword [ebp - 0x958]
push eax
mov ecx, dword [ebp - 0x244]
add ecx, 8
call fcn.1003c340
lea ecx, [ebp - 0x95c]
call fcn.1003bc90
mov ecx, dword [ebp - 0x244]
add ecx, 8
call fcn.1003bc70
movzx ecx, al
test ecx, ecx
jne 0x1008f877
mov dword [ebp - 4], 0xffffffff
jmp 0x1008f95c
mov ecx, dword [ebp - 0x244]
add ecx, 8
call fcn.1002cc10
mov dword [ebp - 0x960], eax
mov edx, dword [ebp - 0x960]
mov dword [ebp - 0x30], edx
mov eax, 1
test eax, eax
je 0x1008f910
mov ecx, dword [ebp - 0x30]
mov dword [ebp - 0x964], ecx
mov edx, dword [ebp - 0x244]
mov eax, dword [edx + 0xc]
lea ecx, [eax*4 + 4]
push ecx
mov edx, dword [ebp - 0x244]
mov eax, dword [edx + 4]
sub eax, 4
push eax
mov ecx, dword [ebp - 0x964]
push ecx
call sub.VCRUNTIME140.dll_memcpy
add esp, 0xc
mov edx, dword [ebp - 0x30]
mov dword [ebp - 0x968], edx
mov eax, dword [ebp - 0x968]
add eax, 4
mov dword [ebp - 0x96c], eax
cmp dword [ebp - 0x2d0], 0
jne 0x1008f8f6
jmp 0x1008f904
mov ecx, dword [ebp - 0x2d0]
mov edx, dword [ebp - 0x96c]
mov dword [ecx], edx
mov eax, dword [ebp - 0x244]
mov byte [eax + 0x10], 1
jmp 0x1008f955
mov ecx, dword [ebp - 0x30]
mov dword [ebp - 0x970], ecx
mov edx, dword [ebp - 0x244]
mov eax, dword [edx + 0xc]
shl eax, 2
push eax
mov ecx, dword [ebp - 0x244]
mov edx, dword [ecx + 4]
push edx
mov eax, dword [ebp - 0x970]
push eax
call sub.VCRUNTIME140.dll_memcpy
add esp, 0xc
cmp dword [ebp - 0x2d0], 0
jne 0x1008f94a
jmp 0x1008f955
mov ecx, dword [ebp - 0x30]
mov edx, dword [ebp - 0x2d0]
mov dword [edx], ecx
mov dword [ebp - 4], 0xffffffff
mov eax, dword [ebp - 0x20c]
add eax, 0x110
mov dword [ebp - 0x2cc], eax
mov dword [ebp - 0x974], 0x100a12a0
mov ecx, dword [ebp - 0x2cc]
movzx edx, byte [ecx + 0x10]
test edx, edx
je 0x1008f995
mov eax, 0x43
add eax, 1
mov dword [ebp - 0x48c], eax
jmp 0x1008f99f
mov dword [ebp - 0x48c], 0x43
mov ecx, dword [ebp - 0x48c]
mov dword [ebp - 0x490], ecx
mov edx, dword [ebp - 0x2cc]
cmp dword [edx + 4], 0
je 0x1008f9dd
mov ecx, dword [ebp - 0x2cc]
add ecx, 8
call fcn.1003bc70
movzx eax, al
test eax, eax
je 0x1008f9dd
mov ecx, dword [ebp - 0x2cc]
mov edx, dword [ebp - 0x490]
cmp edx, dword [ecx + 0xc]
jbe 0x1008fa09
mov dword [ebp - 0x3ac], 0
mov eax, dword [ebp - 0x1fc]
or eax, 0x1000000
mov dword [ebp - 0x1fc], eax
lea ecx, [ebp - 0x3ac]
mov dword [ebp - 0x99c], ecx
jmp 0x1008fb5d
mov edx, dword [ebp - 0x974]
mov dword [ebp - 0x978], edx
mov eax, dword [ebp - 0x978]
mov dword [ebp - 0x980], eax
mov ecx, dword [ebp - 0x2cc]
add ecx, 8
mov dword [ebp - 0x97c], ecx
mov edx, dword [ebp - 0x490]
push edx
mov ecx, dword [ebp - 0x97c]
call fcn.1003bc80
mov ecx, dword [ebp - 0x980]
mov dword [eax], ecx
mov edx, 0x43
shl edx, 2
mov eax, dword [ebp - 0x2cc]
add edx, dword [eax + 4]
mov dword [ebp - 0x494], edx
mov ecx, dword [ebp - 0x494]
cmp dword [ecx], 0
je 0x1008fab1
mov edx, dword [ebp - 0x494]
mov eax, dword [edx]
mov dword [ebp - 0x984], eax
mov ecx, dword [ebp - 0x984]
mov dword [ebp - 0x988], ecx
lea edx, [ebp - 0x988]
mov dword [ebp - 0x98c], edx
mov eax, dword [ebp - 0x1fc]
or eax, 0x2000000
mov dword [ebp - 0x1fc], eax
mov ecx, dword [ebp - 0x98c]
mov dword [ebp - 0x498], ecx
jmp 0x1008fae4
mov dword [ebp - 0x990], 0
lea edx, [ebp - 0x990]
mov dword [ebp - 0x994], edx
mov eax, dword [ebp - 0x1fc]
or eax, 0x4000000
mov dword [ebp - 0x1fc], eax
mov ecx, dword [ebp - 0x994]
mov dword [ebp - 0x498], ecx
mov edx, dword [ebp - 0x498]
mov dword [ebp - 0x998], edx
mov eax, dword [ebp - 0x998]
mov ecx, dword [eax]
mov dword [ebp - 0x3ac], ecx
mov edx, dword [ebp - 0x1fc]
or edx, 0x8000000
mov dword [ebp - 0x1fc], edx
mov eax, dword [ebp - 0x1fc]
and eax, 0x4000000
je 0x1008fb27
and dword [ebp - 0x1fc], 0xfbffffff
mov ecx, dword [ebp - 0x1fc]
and ecx, 0x2000000
je 0x1008fb3f
and dword [ebp - 0x1fc], 0xfdffffff
mov edx, dword [ebp - 0x1fc]
or edx, 0x1000000
mov dword [ebp - 0x1fc], edx
lea eax, [ebp - 0x3ac]
mov dword [ebp - 0x99c], eax
mov ecx, dword [ebp - 0x20c]
add ecx, 0x110
mov dword [ebp - 0x2b8], ecx
mov dword [ebp - 0x9a0], 0x100a12f0
mov edx, dword [ebp - 0x2b8]
movzx eax, byte [edx + 0x10]
test eax, eax
je 0x1008fb97
mov ecx, 0x52
add ecx, 1
mov dword [ebp - 0x49c], ecx
jmp 0x1008fba1
mov dword [ebp - 0x49c], 0x52
mov edx, dword [ebp - 0x49c]
mov dword [ebp - 0x4a0], edx
mov eax, dword [ebp - 0x2b8]
cmp dword [eax + 4], 0
je 0x1008fbdf
mov ecx, dword [ebp - 0x2b8]
add ecx, 8
call fcn.1003bc70
movzx ecx, al
test ecx, ecx
je 0x1008fbdf
mov edx, dword [ebp - 0x2b8]
mov eax, dword [ebp - 0x4a0]
cmp eax, dword [edx + 0xc]
jbe 0x1008fc0c
mov dword [ebp - 0x338], 0
mov ecx, dword [ebp - 0x1fc]
or ecx, 0x10000000
mov dword [ebp - 0x1fc], ecx
lea edx, [ebp - 0x338]
mov dword [ebp - 0x9c8], edx
jmp 0x1008fd60
mov eax, dword [ebp - 0x9a0]
mov dword [ebp - 0x9a4], eax
mov ecx, dword [ebp - 0x9a4]
mov dword [ebp - 0x9ac], ecx
mov edx, dword [ebp - 0x2b8]
add edx, 8
mov dword [ebp - 0x9a8], edx
mov eax, dword [ebp - 0x4a0]
push eax
mov ecx, dword [ebp - 0x9a8]
call fcn.1003bc80
mov ecx, dword [ebp - 0x9ac]
mov dword [eax], ecx
mov edx, 0x52
shl edx, 2
mov eax, dword [ebp - 0x2b8]
add edx, dword [eax + 4]
mov dword [ebp - 0x4a4], edx
mov ecx, dword [ebp - 0x4a4]
cmp dword [ecx], 0
je 0x1008fcb4
mov edx, dword [ebp - 0x4a4]
mov eax, dword [edx]
mov dword [ebp - 0x9b0], eax
mov ecx, dword [ebp - 0x9b0]
mov dword [ebp - 0x9b4], ecx
lea edx, [ebp - 0x9b4]
mov dword [ebp - 0x9b8], edx
mov eax, dword [ebp - 0x1fc]
or eax, 0x20000000
mov dword [ebp - 0x1fc], eax
mov ecx, dword [ebp - 0x9b8]
mov dword [ebp - 0x4a8], ecx
jmp 0x1008fce7
mov dword [ebp - 0x9bc], 0
lea edx, [ebp - 0x9bc]
mov dword [ebp - 0x9c0], edx
mov eax, dword [ebp - 0x1fc]
or eax, 0x40000000
mov dword [ebp - 0x1fc], eax
mov ecx, dword [ebp - 0x9c0]
mov dword [ebp - 0x4a8], ecx
mov edx, dword [ebp - 0x4a8]
mov dword [ebp - 0x9c4], edx
mov eax, dword [ebp - 0x9c4]
mov ecx, dword [eax]
mov dword [ebp - 0x338], ecx
mov edx, dword [ebp - 0x1fc]
or edx, 0x80000000
mov dword [ebp - 0x1fc], edx
mov eax, dword [ebp - 0x1fc]
and eax, 0x40000000
je 0x1008fd2a
and dword [ebp - 0x1fc], 0xbfffffff
mov ecx, dword [ebp - 0x1fc]
and ecx, 0x20000000
je 0x1008fd42
and dword [ebp - 0x1fc], 0xdfffffff
mov edx, dword [ebp - 0x1fc]
or edx, 0x10000000
mov dword [ebp - 0x1fc], edx
lea eax, [ebp - 0x338]
mov dword [ebp - 0x9c8], eax
mov ecx, dword [ebp - 0x20c]
add ecx, 0x110
mov dword [ebp - 0x2b4], ecx
mov dword [ebp - 0x9cc], 0x100a1380
mov edx, dword [ebp - 0x2b4]
movzx eax, byte [edx + 0x10]
test eax, eax
je 0x1008fd9a
mov ecx, 0x74
add ecx, 1
mov dword [ebp - 0x4ac], ecx
jmp 0x1008fda4
mov dword [ebp - 0x4ac], 0x74
mov edx, dword [ebp - 0x4ac]
mov dword [ebp - 0x4b0], edx
mov eax, dword [ebp - 0x2b4]
cmp dword [eax + 4], 0
je 0x1008fde2
mov ecx, dword [ebp - 0x2b4]
add ecx, 8
call fcn.1003bc70
movzx ecx, al
test ecx, ecx
je 0x1008fde2
mov edx, dword [ebp - 0x2b4]
mov eax, dword [ebp - 0x4b0]
cmp eax, dword [edx + 0xc]
jbe 0x1008fe0c
mov dword [ebp - 0x33c], 0
mov ecx, dword [ebp - 0x200]
or ecx, 1
mov dword [ebp - 0x200], ecx
lea edx, [ebp - 0x33c]
mov dword [ebp - 0x9f4], edx
jmp 0x1008ff4b
mov eax, dword [ebp - 0x9cc]
mov dword [ebp - 0x9d0], eax
mov ecx, dword [ebp - 0x9d0]
mov dword [ebp - 0x9d8], ecx
mov edx, dword [ebp - 0x2b4]
add edx, 8
mov dword [ebp - 0x9d4], edx
mov eax, dword [ebp - 0x4b0]
push eax
mov ecx, dword [ebp - 0x9d4]
call fcn.1003bc80
mov ecx, dword [ebp - 0x9d8]
mov dword [eax], ecx
mov edx, 0x74
shl edx, 2
mov eax, dword [ebp - 0x2b4]
add edx, dword [eax + 4]
mov dword [ebp - 0x4b4], edx
mov ecx, dword [ebp - 0x4b4]
cmp dword [ecx], 0
je 0x1008feb2
mov edx, dword [ebp - 0x4b4]
mov eax, dword [edx]
mov dword [ebp - 0x9dc], eax
mov ecx, dword [ebp - 0x9dc]
mov dword [ebp - 0x9e0], ecx
lea edx, [ebp - 0x9e0]
mov dword [ebp - 0x9e4], edx
mov eax, dword [ebp - 0x200]
or eax, 2
mov dword [ebp - 0x200], eax
mov ecx, dword [ebp - 0x9e4]
mov dword [ebp - 0x4b8], ecx
jmp 0x1008fee3
mov dword [ebp - 0x9e8], 0
lea edx, [ebp - 0x9e8]
mov dword [ebp - 0x9ec], edx
mov eax, dword [ebp - 0x200]
or eax, 4
mov dword [ebp - 0x200], eax
mov ecx, dword [ebp - 0x9ec]
mov dword [ebp - 0x4b8], ecx
mov edx, dword [ebp - 0x4b8]
mov dword [ebp - 0x9f0], edx
mov eax, dword [ebp - 0x9f0]
mov ecx, dword [eax]
mov dword [ebp - 0x33c], ecx
mov edx, dword [ebp - 0x200]
or edx, 8
mov dword [ebp - 0x200], edx
mov eax, dword [ebp - 0x200]
and eax, 4
je 0x1008ff1e
and dword [ebp - 0x200], 0xfffffffb
mov ecx, dword [ebp - 0x200]
and ecx, 2
je 0x1008ff30
and dword [ebp - 0x200], 0xfffffffd
mov edx, dword [ebp - 0x200]
or edx, 1
mov dword [ebp - 0x200], edx
lea eax, [ebp - 0x33c]
mov dword [ebp - 0x9f4], eax
mov ecx, dword [ebp - 0x20c]
add ecx, 0x160
mov dword [ebp - 0x248], ecx
mov edx, dword [0x10225fd0]
mov dword [ebp - 0x9f8], edx
lea eax, [ebp - 0x2c8]
mov dword [ebp - 0x4bc], eax
mov ecx, dword [ebp - 0x4bc]
mov edx, dword [ebp - 0x9f8]
mov dword [ecx], edx
mov eax, dword [ebp - 0x4bc]
mov dword [ebp - 0xdec], eax
mov dword [ebp - 4], 6
mov ecx, dword [ebp - 0x248]
mov edx, dword [ebp - 0x2c8]
mov dword [ecx], edx
mov eax, dword [ebp - 0x2c8]
mov ecx, dword [eax]
mov dword [ebp - 0x9fc], ecx
mov edx, dword [ebp - 0x248]
mov eax, dword [ebp - 0x9fc]
mov dword [edx + 4], eax
mov ecx, dword [ebp - 0x248]
cmp dword [ecx + 4], 0
jne 0x1008ffd9
mov dword [ebp - 4], 0xffffffff
jmp 0x10090213
mov dword [ebp - 0x334], 0
mov edx, dword [ebp - 0x248]
mov eax, dword [edx + 4]
mov ecx, dword [ebp - 0x334]
mov edx, dword [eax + ecx*4]
mov dword [ebp - 0x4c0], edx
cmp dword [ebp - 0x4c0], 0
jne 0x1009000d
mov byte [ebp - 0x211], 0
jmp 0x10090064
mov eax, dword [0x10156d14]
mov dword [ebp - 0xa00], eax
push 0x1c
lea ecx, [ebp - 0x1a8]
push ecx
mov edx, dword [ebp - 0x4c0]
push edx
call dword [ebp - 0xa00]
test eax, eax
jne 0x1009003b
mov byte [ebp - 0x211], 0
jmp 0x10090064
mov eax, dword [ebp - 0x194]
and eax, 1
jne 0x10090054
mov ecx, dword [ebp - 0x194]
and ecx, 0x100
je 0x1009005d
mov byte [ebp - 0x211], 0
jmp 0x10090064
mov byte [ebp - 0x211], 1
movzx edx, byte [ebp - 0x211]
test edx, edx
je 0x10090083
mov eax, dword [ebp - 0x334]
add eax, 1
mov dword [ebp - 0x334], eax
jmp 0x1008ffe3
mov ecx, dword [ebp - 0x248]
mov edx, dword [ebp - 0x334]
mov dword [ecx + 0xc], edx
mov eax, dword [ebp - 0x248]
cmp dword [eax + 0xc], 0
jne 0x100900aa
mov dword [ebp - 4], 0xffffffff
jmp 0x10090213
mov ecx, 1
test ecx, ecx
je 0x100900c7
mov edx, dword [ebp - 0x248]
mov eax, dword [edx + 0xc]
add eax, 1
mov dword [ebp - 0x4c4], eax
jmp 0x100900d6
mov ecx, dword [ebp - 0x248]
mov edx, dword [ecx + 0xc]
mov dword [ebp - 0x4c4], edx
mov edx, dword [ebp - 0x4c4]
lea ecx, [ebp - 0xa08]
call fcn.1003c2a0
mov dword [ebp - 0xa04], eax
mov eax, dword [ebp - 0xa04]
push eax
mov ecx, dword [ebp - 0x248]
add ecx, 8
call fcn.1003c340
lea ecx, [ebp - 0xa08]
call fcn.1003bc90
mov ecx, dword [ebp - 0x248]
add ecx, 8
call fcn.1003bc70
movzx ecx, al
test ecx, ecx
jne 0x1009012e
mov dword [ebp - 4], 0xffffffff
jmp 0x10090213
mov ecx, dword [ebp - 0x248]
add ecx, 8
call fcn.1002cc10
mov dword [ebp - 0xa0c], eax
mov edx, dword [ebp - 0xa0c]
mov dword [ebp - 0x2c], edx
mov eax, 1
test eax, eax
je 0x100901c7
mov ecx, dword [ebp - 0x2c]
mov dword [ebp - 0xa10], ecx
mov edx, dword [ebp - 0x248]
mov eax, dword [edx + 0xc]
lea ecx, [eax*4 + 4]
push ecx
mov edx, dword [ebp - 0x248]
mov eax, dword [edx + 4]
sub eax, 4
push eax
mov ecx, dword [ebp - 0xa10]
push ecx
call sub.VCRUNTIME140.dll_memcpy
add esp, 0xc
mov edx, dword [ebp - 0x2c]
mov dword [ebp - 0xa14], edx
mov eax, dword [ebp - 0xa14]
add eax, 4
mov dword [ebp - 0xa18], eax
cmp dword [ebp - 0x2c8], 0
jne 0x100901ad
jmp 0x100901bb
mov ecx, dword [ebp - 0x2c8]
mov edx, dword [ebp - 0xa18]
mov dword [ecx], edx
mov eax, dword [ebp - 0x248]
mov byte [eax + 0x10], 1
jmp 0x1009020c
mov ecx, dword [ebp - 0x2c]
mov dword [ebp - 0xa1c], ecx
mov edx, dword [ebp - 0x248]
mov eax, dword [edx + 0xc]
shl eax, 2
push eax
mov ecx, dword [ebp - 0x248]
mov edx, dword [ecx + 4]
push edx
mov eax, dword [ebp - 0xa1c]
push eax
call sub.VCRUNTIME140.dll_memcpy
add esp, 0xc
cmp dword [ebp - 0x2c8], 0
jne 0x10090201
jmp 0x1009020c
mov ecx, dword [ebp - 0x2c]
mov edx, dword [ebp - 0x2c8]
mov dword [edx], ecx
mov dword [ebp - 4], 0xffffffff
mov eax, dword [ebp - 0x20c]
add eax, 0x160
mov dword [ebp - 0x2c4], eax
mov dword [ebp - 0xa20], 0x10087030
mov ecx, dword [ebp - 0x2c4]
movzx edx, byte [ecx + 0x10]
test edx, edx
je 0x1009024c