Function at 0x100868c1
Capabilities:
Resolve function by parsing pe exports

Disassembly:
mov edi, edi
push ebp
mov ebp, esp
and esp, 0xfffffff8
mov eax, 0x16cc
call fcn.1009f4a0
mov eax, dword [0x100a60a4]
xor eax, esp
mov dword [esp + 0x16c8], eax
push ebx
mov ebx, ecx
push esi
push edi
mov dword [esp + 0x188], ebx
mov eax, dword [ebx + 0x5c]
and eax, 0x9000000
mov byte [esp + 0xab], 0
cmp eax, 0x9000000
mov dword [esp + 0x144], eax
mov dword [esp + 0x16c4], 0
lea eax, [esp + 0x16cc]
sete byte [esp + 0xea]
mov dword [esp + 0x16c8], 0
mov dword [esp + 0x16cc], 0
mov dword [esp + 0x16d0], 0
push dword [ebx + 0x10c]
push eax
lea eax, [esp + 0x16cc]
push eax
lea eax, [esp + 0x18b]
push eax
lea eax, [esp + 0x18e]
push eax
call fcn.100bcf67
mov edx, dword [ebx + 0x10c]
xor esi, esi
xor eax, eax
mov dword [esp + 0xe4], esi
test edx, edx
je 0x10085002
lea ecx, [ebx + 0x64]
nop
test dword [ecx], 0x18000000
jne 0x10084ff2
cmp byte [esp + eax + 0x16cc], 0
jne 0x10084ffb
inc eax
inc esi
add ecx, 8
cmp eax, edx
jb 0x10084fe0
mov dword [esp + 0xe4], esi
push esi
lea eax, [esp + 0x16d0]
mov dword [esp + 0x16c8], 0
push eax
lea eax, [esp + 0x16cc]
mov dword [esp + 0x16d0], 0
push eax
lea eax, [esp + 0xf6]
mov dword [esp + 0x16d8], 0
push eax
lea eax, [esp + 0xbb]
mov dword [esp + 0x16e0], 0
push eax
mov ecx, ebx
call fcn.100841e0
test esi, esi
jne 0x10085069
mov eax, dword [ebx + 0x5c]
shr eax, 0x1a
and al, 1
mov byte [esp + 0xab], al
mov edx, dword [ebx + 0xa0]
mov eax, 1
mov dword [esp + 0x140], eax
mov esi, 0x100a70c8
mov dword [esp + 0x2c], eax
xor eax, eax
mov dword [esp + 0x18c], eax
mov dword [edx + 4], 0
mov dword [edx + 8], 0
mov dword [edx + 0x10], 1
mov dword [edx + 0x14], 0
mov ecx, dword [edx + 4]
mov dword [esp + 0x38], eax
mov eax, 0xe40000
mov dword [esp + 0x170], eax
mov dword [esp + 0x34], eax
mov dword [esp + 0x48], eax
mov eax, dword [edx]
mov dword [esp + 0x30], 0
mov dword [esp + 0x40], 1
mov dword [esp + 0x4c], 1
mov dword [eax + ecx*4], 0xffff0200
mov eax, dword [edx + 4]
mov dword [edx + 8], eax
inc dword [edx + 4]
lea edx, [esi + 1]
mov ecx, dword [ebx + 0xa0]
mov dword [esp + 0x44], 0
mov dword [esp + 0xae0], 8
mov dword [esp + 0xae4], 0
mov dword [esp + 0xae8], 0xf0000
mov dword [esp + 0xaec], 0
mov dword [esp + 0x28], ecx
nop
mov al, byte [esi]
inc esi
test al, al
jne 0x10085130
mov eax, dword [esp + 0x28]
sub esi, edx
mov ecx, dword [ecx + 4]
inc esi
mov eax, dword [eax]
lea edi, [esi + 3]
shr edi, 2
inc edi
mov edx, edi
shl edx, 0x10
or edx, 0xfffe
mov dword [eax + ecx*4], edx
mov ecx, dword [esp + 0x28]
push edi
mov eax, dword [ecx + 4]
mov dword [ecx + 8], eax
inc dword [ecx + 4]
call fcn.10076e40
mov edx, dword [esp + 0x28]
push esi
push 0x100a70c8
mov ecx, dword [edx + 4]
mov eax, dword [edx]
mov dword [eax + ecx*4], 0x54584554
inc dword [edx + 4]
mov ecx, dword [edx + 4]
mov eax, dword [edx]
lea eax, [eax + ecx*4]
push eax
call sub.msvcrt.dll_memcpy
mov ecx, dword [esp + 0x34]
lea eax, [edi - 1]
add esp, 0xc
add dword [ecx + 4], eax
mov esi, dword [ebx + 0x5c]
mov dword [esp + 0x14c], esi
test esi, 0x4000000
je 0x100851d6
cmp byte [esp + 0xab], 0
je 0x100851d6
mov ecx, dword [ebx + 0xa0]
push 0
push 1
call fcn.10083310
mov esi, dword [ebx + 0x5c]
mov dword [esp + 0x14c], esi
jmp 0x10085207
mov eax, 2
mov dword [esp + 0x140], eax
mov dword [esp + 0x2c], eax
mov eax, 0xff0000
mov dword [esp + 0x170], eax
mov dword [esp + 0x34], eax
mov eax, 1
mov dword [esp + 0x18c], eax
mov word [esp + 0x38], ax
test esi, 0x8000000
je 0x10085234
cmp byte [esp + 0xea], 0
je 0x10085234
mov ecx, dword [ebx + 0xa0]
push 1
push 1
call fcn.10083310
mov esi, dword [ebx + 0x5c]
mov dword [esp + 0x14c], esi
jmp 0x10085244
mov dword [esp + 0x40], 2
mov dword [esp + 0x48], 0
mov eax, dword [esp + 0xe4]
mov edx, esi
shr edx, 0x10
xor ecx, ecx
and edx, 0xf
mov byte [esp + 0xeb], 1
mov dword [esp + 0x12c], edx
mov dword [esp + 0x28], ecx
test eax, eax
je 0x1008544b
lea eax, [ebx + 0x64]
lea edi, [esp + 0x1640]
mov dword [esp + 0x128], eax
movzx eax, byte [eax + 3]
and eax, 7
cmp byte [esp + ecx + 0x16c4], 0
je 0x100853e7
test esi, 0x2000000
je 0x10085336
cmp byte [esp + 0xeb], 0
je 0x1008531f
mov esi, dword [ebx + 0xa0]
push 0x10
mov byte [esp + 0xef], 0
mov byte [esi + 0x18], 0
mov ecx, dword [esi + 4]
mov eax, dword [esi]
mov dword [eax + ecx*4], 0x1f
mov eax, dword [esi + 4]
mov dword [esi + 8], eax
inc dword [esi + 4]
mov ecx, dword [esi + 4]
mov eax, dword [esi]
mov dword [eax + ecx*4], 0x80000000
inc dword [esi + 4]
mov ecx, dword [esi + 4]
mov eax, dword [esi]
mov dword [eax + ecx*4], 0xb00f0000
inc dword [esi + 4]
mov edx, dword [esi + 4]
mov ecx, dword [esi + 8]
sub edx, ecx
mov eax, dword [esi]
dec edx
shl edx, 0x18
or dword [eax + ecx*4], edx
mov ecx, esi
call fcn.10076e40
inc dword [esi + 0x10]
cmp byte [esi + 0x18], 0
je 0x10085317
inc dword [esi + 0x14]
mov ecx, dword [esp + 0x28]
mov byte [esi + 0x18], 1
xor eax, eax
mov dword [edi], 3
mov dword [esp + 0x260], eax
mov dword [edi + 4], eax
jmp 0x10085406
cmp eax, edx
jae 0x100853d3
mov esi, dword [ebx + 0xa0]
push 0x10
mov byte [esi + 0x18], 0
mov ecx, dword [esi + 4]
mov eax, dword [esi]
mov dword [eax + ecx*4], 0x1f
mov eax, dword [esi + 4]
mov dword [esi + 8], eax
inc dword [esi + 4]
mov ecx, dword [esi + 4]
mov eax, dword [esi]
mov dword [eax + ecx*4], 0x80000000
inc dword [esi + 4]
mov edx, dword [esi + 4]
mov eax, dword [esi]
mov ecx, dword [esp + 0x2c]
or ecx, 0xb00f0000
mov dword [eax + edx*4], ecx
inc dword [esi + 4]
mov edx, dword [esi + 4]
mov ecx, dword [esi + 8]
sub edx, ecx
mov eax, dword [esi]
dec edx
shl edx, 0x18
or dword [eax + ecx*4], edx
mov ecx, esi
call fcn.10076e40
inc dword [esi + 0x10]
cmp byte [esi + 0x18], 0
je 0x100853a7
inc dword [esi + 0x14]
mov ecx, dword [esp + 0x28]
xor eax, eax
mov byte [esi + 0x18], 1
mov dword [edi], 3
mov word [esp + 0x1f8], cx
mov word [esp + 0x1fa], ax
mov dword [edi + 4], eax
mov eax, dword [esp + 0x1f8]
jmp 0x10085406
mov dword [esp + 0x208], 1
mov eax, dword [esp + 0x208]
jmp 0x100853f9
mov dword [esp + 0x228], 1
mov eax, dword [esp + 0x228]
mov dword [edi], 2
mov dword [edi + 4], 0
mov edx, dword [esp + 0x12c]
inc ecx
mov esi, dword [esp + 0x14c]
mov dword [edi + 8], 0xe40000
mov dword [edi + 0xc], eax
add edi, 0x10
mov eax, dword [esp + 0x128]
add eax, 8
mov dword [esp + 0x28], ecx
mov dword [esp + 0x128], eax
cmp ecx, dword [esp + 0xe4]
jb 0x10085281
mov eax, dword [esp + 0xe4]
xor edi, edi
test eax, eax
je 0x1008554e
mov ecx, dword [esp + 0xe4]
lea eax, [ebx + 0x64]
mov dword [esp + 0x28], eax
jmp 0x10085470
cmp byte [esp + edi + 0x16c4], 0
je 0x10085537
mov eax, dword [eax]
mov esi, dword [ebx + 0xa0]
shr eax, 0x1b
and eax, 3
push 0x10
mov byte [esi + 0x18], 0
mov ecx, dword [esi + 4]
sub eax, 2
je 0x100854d0
sub eax, 1
mov eax, dword [esi]
mov dword [eax + ecx*4], 0x1f
mov eax, dword [esi + 4]
mov dword [esi + 8], eax
je 0x100854bf
inc dword [esi + 4]
mov ecx, dword [esi + 4]
mov eax, dword [esi]
mov dword [eax + ecx*4], 0x90000000
jmp 0x100854ee
inc dword [esi + 4]
mov ecx, dword [esi + 4]
mov eax, dword [esi]
mov dword [eax + ecx*4], 0xa0000000
jmp 0x100854ee
mov eax, dword [esi]
mov dword [eax + ecx*4], 0x1f
mov eax, dword [esi + 4]
mov dword [esi + 8], eax
inc dword [esi + 4]
mov ecx, dword [esi + 4]
mov eax, dword [esi]
mov dword [eax + ecx*4], 0x98000000
inc dword [esi + 4]
mov ecx, edi
mov edx, dword [esi + 4]
or ecx, 0xa00f0800
mov eax, dword [esi]
mov dword [eax + edx*4], ecx
inc dword [esi + 4]
mov ecx, dword [esi + 8]
mov edx, dword [esi + 4]
mov eax, dword [esi]
sub edx, ecx
dec edx
shl edx, 0x18
or dword [eax + ecx*4], edx
mov ecx, esi
call fcn.10076e40
inc dword [esi + 0x10]
cmp byte [esi + 0x18], 0
je 0x10085528
inc dword [esi + 0x14]
mov eax, dword [esp + 0x28]
mov ecx, dword [esp + 0xe4]
mov byte [esi + 0x18], 1
inc edi
add eax, 8
mov dword [esp + 0x28], eax
cmp edi, ecx
jb 0x10085470
mov eax, dword [esp + 0xe4]
xor ecx, ecx
mov dword [esp + 0x1b4], 0
mov dword [esp + 0x178], ecx
xor edi, edi
mov byte [ebx + 0x119], cl
mov ecx, dword [esp + 0x140]
mov dword [esp + 0x16c], ecx
mov ecx, dword [esp + 0x170]
mov dword [esp + 0x168], ecx
mov ecx, dword [esp + 0x38]
mov dword [esp + 0x1bc], 0xe40000
mov dword [esp + 0x1b8], 0xf0000
mov dword [esp + 0x1c0], 1
mov dword [esp + 0x1c8], 0xe40000
mov dword [esp + 0x1c4], 0xf0000
mov dword [esp + 0xac], 2
mov dword [esp + 0xb4], 0xe40000
mov dword [esp + 0xb0], 0xf0000
mov dword [esp + 0x284], 3
mov dword [esp + 0x28c], 0xe40000
mov dword [esp + 0x288], 0xf0000
mov dword [esp + 0x174], 0
mov dword [esp + 0x164], 0
mov dword [esp + 0x230], ecx
mov dword [esp + 0x128], ecx
mov dword [esp + 0x124], edi
test eax, eax
je 0x1008bf31
xor eax, eax
mov dword [esp + 0xa0], 0xf0000
mov dword [esp + 0xa4], 0xe40000
mov dword [esp + 0x20c], 0xa
mov dword [esp + 0x214], 0xe40000
mov dword [esp + 0x210], edi
mov word [esp + 0x21a], ax
jmp 0x10085680
mov ecx, 1
mov dword [esp + 0x10], ecx
mov dword [esp + 0x9c], ecx
cmp edi, 4
jb 0x100856a5
mov eax, 0xa
mov dword [esp + 0x10], eax
mov dword [esp + 0x9c], eax
lea eax, [edi*8 + 0x64]
add eax, ebx
mov dword [esp + 0x148], eax
mov ecx, dword [eax]
mov eax, edi
add eax, eax
mov dword [esp + 0x28], ecx
mov esi, ecx
shr esi, 0x18
and esi, 7
mov edx, dword [esp + eax*8 + 0x1644]
mov ecx, dword [esp + eax*8 + 0x1640]
mov dword [esp + 0x24], edx
mov dword [esp + 0x154], edx
mov edx, dword [esp + eax*8 + 0x1648]
mov dword [esp + 0x108], edx
mov dword [esp + 0x158], edx
mov edx, dword [esp + eax*8 + 0x164c]
mov dword [esp + 0x104], esi
mov dword [esp + 0x3c], ecx
mov dword [esp + 0x150], ecx
mov dword [esp + 0x15c], edx
cmp ecx, 2
je 0x10085959
mov eax, dword [esp + 0x28]
test eax, 0x18000000
je 0x10085959
mov edi, dword [ebx + 0x5c]
lea ecx, [esi + esi]
shr edi, cl
and edi, 3
inc edi
cmp edi, 2
jae 0x10085750
test dword [esp + 0x14c], 0x2000000
je 0x10085750
mov edi, 4
test eax, 0x40000000
je 0x10085763
mov eax, dword [ebx + esi*8 + 0x64]
sar eax, 0x1f
add eax, 4
jmp 0x1008577c
and eax, 0x18000000
mov dword [esp + 0x28], eax
xor eax, eax
cmp dword [esp + 0x28], 0x8000000
setne al
add eax, 2
cmp eax, edi
jbe 0x1008594e
mov esi, dword [ebx + 0xa0]
mov dword [esp + 0x320], 2
mov dword [esp + 0x32c], 1
mov dword [esp + 0x328], 0xe40000
mov ecx, dword [esi + 4]
mov eax, dword [esi]
mov dword [esp + 0x324], 0
mov dword [eax + ecx*4], 1
mov eax, dword [esi + 4]
mov dword [esi + 8], eax
inc dword [esi + 4]
mov ecx, dword [esi + 4]
mov eax, dword [esi]
mov dword [eax + ecx*4], 0x800f0005
lea eax, [esp + 0x320]
inc dword [esi + 4]
mov ecx, esi
push eax
call fcn.10076cc0
mov ecx, dword [esi + 8]
mov eax, dword [esi]
push 0x10
lea edx, [eax + ecx*4]
mov eax, dword [esi + 4]
sub eax, ecx
mov ecx, esi
dec eax
shl eax, 0x18
or dword [edx], eax
call fcn.10076e40
inc dword [esi + 0x10]
cmp byte [esi + 0x18], 0
je 0x10085811
inc dword [esi + 0x14]
mov byte [esi + 0x18], 1
sub edi, 1
je 0x1008587a
sub edi, 1
je 0x10085851
sub edi, 1
jne 0x100858ff
mov esi, dword [ebx + 0xa0]
mov ecx, dword [esi + 4]
mov eax, dword [esi]
mov dword [eax + ecx*4], 1
mov eax, dword [esi + 4]
mov dword [esi + 8], eax
inc dword [esi + 4]
mov ecx, dword [esi + 4]
mov eax, dword [esi]
mov dword [eax + ecx*4], 0x80070005
jmp 0x100858c1
mov esi, dword [ebx + 0xa0]
mov ecx, dword [esi + 4]
mov eax, dword [esi]
mov dword [eax + ecx*4], 1
mov eax, dword [esi + 4]
mov dword [esi + 8], eax
inc dword [esi + 4]
mov ecx, dword [esi + 4]
mov eax, dword [esi]
mov dword [eax + ecx*4], 0x80030005
jmp 0x100858c1
push 0
push 5
lea ecx, [esp + 0xb04]
call fcn.100767d0
mov esi, dword [ebx + 0xa0]
mov ecx, dword [esi + 4]
mov eax, dword [esi]
mov dword [eax + ecx*4], 1
mov eax, dword [esi + 4]
mov ecx, dword [esp + 0xafc]
or ecx, dword [esp + 0xb00]
mov dword [esi + 8], eax
inc dword [esi + 4]
or ecx, 0x80000000
mov edx, dword [esi + 4]
mov eax, dword [esi]
mov dword [eax + edx*4], ecx
inc dword [esi + 4]
lea eax, [esp + 0x150]
push eax
mov ecx, esi
call fcn.10076cc0
mov ecx, dword [esi + 8]
mov eax, dword [esi]
push 0x10
lea edx, [eax + ecx*4]
mov eax, dword [esi + 4]
sub eax, ecx
mov ecx, esi
dec eax
shl eax, 0x18
or dword [edx], eax
call fcn.10076e40
inc dword [esi + 0x10]
cmp byte [esi + 0x18], 0
je 0x100858fb
inc dword [esi + 0x14]
mov byte [esi + 0x18], 1
mov esi, dword [esp + 0x104]
mov edx, 0xe40000
xor ecx, ecx
mov dword [esp + 0xba0], 5
xor eax, eax
mov dword [esp + 0x108], edx
mov dword [esp + 0x158], edx
mov edx, dword [esp + 0xba0]
mov dword [esp + 0x3c], ecx
mov dword [esp + 0x24], eax
mov dword [esp + 0x150], ecx
mov dword [esp + 0x154], eax
mov dword [esp + 0x15c], edx
jmp 0x10085952
mov ecx, dword [esp + 0x3c]
mov edi, dword [esp + 0x124]
lea eax, [edi + 0xc]
mov word [esp + 0x218], di
lea eax, [ebx + eax*8]
mov dword [esp + 0x12c], eax
mov eax, dword [eax]
and eax, 0x1f
cmp dword [esp + 0x174], 0
mov dword [esp + 0x160], eax
je 0x10085e23
test dword [ebx + edi*8 + 0x64], 0x40000000
je 0x10085bbb
mov eax, dword [esp + 0x104]
mov esi, dword [ebx + 0xa0]
cmp dword [ebx + eax*8 + 0x64], 0
jge 0x10085a07
mov eax, dword [esi]
mov dword [esp + 0x330], ecx
mov ecx, dword [esp + 0x24]
mov dword [esp + 0x334], ecx
mov ecx, dword [esi + 4]
mov word [esp + 0x33c], dx
shr edx, 0x10
mov dword [esp + 0x338], 0xaa0000
mov dword [eax + ecx*4], 6
mov eax, dword [esi + 4]
mov dword [esi + 8], eax
inc dword [esi + 4]
mov eax, dword [esi]
mov ecx, dword [esi + 4]
mov word [esp + 0x33e], dx
mov dword [eax + ecx*4], 0x800f0001
lea eax, [esp + 0x330]
jmp 0x10085a88
push 0
push 1
lea ecx, [esp + 0xb10]
call fcn.100767d0
mov ecx, dword [esp + 0x3c]
mov ax, word [esp + 0x15e]
mov dword [esp + 0x340], ecx
mov ecx, dword [esp + 0x24]
mov dword [esp + 0x344], ecx
mov ecx, dword [esi + 4]
mov word [esp + 0x34e], ax
mov eax, dword [esi]
mov word [esp + 0x34c], dx
mov dword [esp + 0x348], 0xff0000
mov dword [eax + ecx*4], 6
mov eax, dword [esi + 4]
mov ecx, dword [esp + 0xb08]
or ecx, dword [esp + 0xb0c]
mov dword [esi + 8], eax
inc dword [esi + 4]
or ecx, 0x80000000
mov eax, dword [esi]
mov edx, dword [esi + 4]
mov dword [eax + edx*4], ecx
lea eax, [esp + 0x340]
inc dword [esi + 4]
mov ecx, esi
push eax
call fcn.10076cc0
mov ecx, dword [esi + 8]
mov eax, dword [esi]
push 0x10
lea edx, [eax + ecx*4]
mov eax, dword [esi + 4]
sub eax, ecx
mov ecx, esi
dec eax
shl eax, 0x18
or dword [edx], eax
call fcn.10076e40
inc dword [esi + 0x10]
cmp byte [esi + 0x18], 0
je 0x10085abb
inc dword [esi + 0x14]
push 0
push 1
lea ecx, [esp + 0xb1c]
mov byte [esi + 0x18], 1
call fcn.100767d0
mov esi, dword [ebx + 0xa0]
mov ax, word [esp + 0xb14]
mov word [esp + 0x35c], ax
mov eax, dword [esp + 0xb1c]
mov ecx, dword [esi + 4]
mov dword [esp + 0x358], eax
xor eax, eax
mov word [esp + 0x35e], ax
mov eax, dword [esi]
mov dword [esp + 0x350], 0
mov dword [esp + 0x354], 0
mov dword [eax + ecx*4], 5
mov eax, dword [esi + 4]
mov dword [esi + 8], eax
inc dword [esi + 4]
mov ecx, dword [esi + 4]
mov eax, dword [esi]
mov dword [eax + ecx*4], 0x800f0001
lea eax, [esp + 0x150]
inc dword [esi + 4]
mov ecx, esi
push eax
call fcn.10076cc0
lea eax, [esp + 0x350]
mov ecx, esi
push eax
call fcn.10076cc0
mov ecx, dword [esi + 8]
mov eax, dword [esi]
push 0x10
lea edx, [eax + ecx*4]
mov eax, dword [esi + 4]
sub eax, ecx
mov ecx, esi
dec eax
shl eax, 0x18
or dword [edx], eax
call fcn.10076e40
inc dword [esi + 0x10]
cmp byte [esi + 0x18], 0
je 0x10085b7d
inc dword [esi + 0x14]
mov dword [esp + 0xbb0], 1
mov eax, dword [esp + 0xbb0]
mov byte [esi + 0x18], 1
mov dword [esp + 0x150], 0
mov dword [esp + 0x154], 0
mov dword [esp + 0x158], 0xe40000
mov dword [esp + 0x15c], eax
mov esi, dword [ebx + 0xa0]
mov dword [esp + 0x360], 0
mov dword [esp + 0x36c], 0xb
mov dword [esp + 0x368], 0xe40000
mov ecx, dword [esi + 4]
mov eax, dword [esi]
mov dword [esp + 0x364], 0
mov dword [eax + ecx*4], 2
mov eax, dword [esi + 4]
mov dword [esi + 8], eax
inc dword [esi + 4]
mov ecx, dword [esi + 4]
mov eax, dword [esi]
mov dword [eax + ecx*4], 0x800f0004
lea eax, [esp + 0x150]
inc dword [esi + 4]
mov ecx, esi
push eax
call fcn.10076cc0
lea eax, [esp + 0x360]
mov ecx, esi
push eax
call fcn.10076cc0
mov ecx, dword [esi + 8]
mov eax, dword [esi]
push 0x10
lea edx, [eax + ecx*4]
mov eax, dword [esi + 4]
sub eax, ecx
mov ecx, esi
dec eax
shl eax, 0x18
or dword [edx], eax
call fcn.10076e40
inc dword [esi + 0x10]
cmp byte [esi + 0x18], 0
je 0x10085c57
inc dword [esi + 0x14]
mov byte [esi + 0x18], 1
mov esi, dword [ebx + 0xa0]
mov dword [esp + 0x370], 0
mov dword [esp + 0x37c], 4
mov dword [esp + 0x378], 0xe40000
mov ecx, dword [esi + 4]
mov eax, dword [esi]
mov dword [esp + 0x374], 0
mov dword [eax + ecx*4], 0x42
mov eax, dword [esi + 4]
mov ecx, dword [esp + 0x10]
mov dword [esi + 8], eax
or ecx, 0x802f0000
inc dword [esi + 4]
mov eax, dword [esi]
mov edx, dword [esi + 4]
mov dword [eax + edx*4], ecx
lea eax, [esp + 0x370]
inc dword [esi + 4]
mov ecx, esi
push eax
call fcn.10076cc0
lea eax, [esp + 0x20c]
mov ecx, esi
push eax
call fcn.10076cc0
mov ecx, dword [esi + 8]
mov eax, dword [esi]
push 0x10
lea edx, [eax + ecx*4]
mov eax, dword [esi + 4]
sub eax, ecx
mov ecx, esi
dec eax
shl eax, 0x18
or dword [edx], eax
call fcn.10076e40
inc dword [esi + 0x10]
cmp byte [esi + 0x18], 0
je 0x10085cfd
inc dword [esi + 0x14]
cmp dword [esp + 0x178], 0
mov byte [esi + 0x18], 1
je 0x10085e13
push 0
push 9
lea ecx, [esp + 0xb28]
call fcn.100767d0
mov esi, dword [ebx + 0xa0]
mov ax, word [esp + 0xb20]
mov word [esp + 0x39c], ax
mov eax, dword [esp + 0xb28]
mov ecx, dword [esi + 4]
mov dword [esp + 0x398], eax
xor eax, eax
mov word [esp + 0x39e], ax
mov dword [esp + 0x380], eax
mov eax, dword [esp + 0x10]
mov word [esp + 0x38c], ax
xor eax, eax
mov word [esp + 0x38e], ax
mov eax, dword [esi]
mov dword [esp + 0x390], 0
mov dword [esp + 0x394], 0
mov dword [esp + 0x388], 0xe40000
mov dword [eax + ecx*4], 5
mov eax, dword [esi + 4]
mov ecx, dword [esp + 0x10]
mov dword [esi + 8], eax
or ecx, 0x80270000
inc dword [esi + 4]
mov eax, dword [esi]
mov edx, dword [esi + 4]
mov dword [esp + 0x384], 0
mov dword [eax + edx*4], ecx
lea eax, [esp + 0x380]
inc dword [esi + 4]
mov ecx, esi
push eax
call fcn.10076cc0
lea eax, [esp + 0x390]
mov ecx, esi
push eax
call fcn.10076cc0
mov ecx, dword [esi + 8]
mov eax, dword [esi]
push 0x10
lea edx, [eax + ecx*4]
mov eax, dword [esi + 4]
sub eax, ecx
mov ecx, esi
dec eax
shl eax, 0x18
or dword [edx], eax
call fcn.10076e40
inc dword [esi + 0x10]
cmp byte [esi + 0x18], 0
je 0x10085e06
inc dword [esi + 0x14]
xor ecx, ecx
mov byte [esi + 0x18], 1
mov dword [esp + 0x178], ecx
mov dword [esp + 0x174], 0
jmp 0x100861c3
cmp eax, 0x16
je 0x10085ed3
cmp eax, 0x17
je 0x10085ed3
cmp byte [esp + edi + 0x16c4], 0
je 0x100861c3
mov esi, dword [esp + 0x10]
sub esp, 0x10
mov eax, esp
sub esp, 0x10
mov ecx, esp
sub esp, 0x10
mov dword [eax], 0
mov dword [eax + 4], esi
mov dword [eax + 8], 0xf0000
mov dword [eax + 0xc], 0
mov eax, dword [esp + 0x248]
mov dword [ecx], 0xa
mov dword [ecx + 4], 0
mov dword [ecx + 8], 0xe40000
mov dword [ecx + 0xc], eax
mov eax, esp
mov ecx, dword [esp + 0x6c]
sub esp, 0xc
mov dword [eax], ecx
mov ecx, dword [esp + 0x60]
mov dword [eax + 4], ecx
mov ecx, dword [esp + 0x144]
mov dword [eax + 8], ecx
mov ecx, ebx
mov dword [eax + 0xc], edx
mov eax, esp
mov dword [eax], 1
mov dword [eax + 4], 0xf0000
mov dword [eax + 8], 0xe40000
mov eax, dword [esp + 0x140]
push eax
push edi
call fcn.10084d40
jmp 0x100861c7
sub esp, 0x10
mov eax, esp
sub esp, 0x10
mov ecx, esp
sub esp, 0x10
mov dword [eax], 0
mov dword [eax + 4], 4
mov dword [eax + 8], 0xf0000
mov dword [eax + 0xc], 0
mov eax, dword [esp + 0x248]
mov dword [ecx], 0xa
mov dword [ecx + 4], 0
mov dword [ecx + 8], 0xe40000
mov dword [ecx + 0xc], eax
mov eax, esp
mov ecx, dword [esp + 0x6c]
sub esp, 0xc
mov dword [eax], ecx
mov ecx, dword [esp + 0x60]
mov dword [eax + 4], ecx
mov ecx, dword [esp + 0x144]
mov dword [eax + 8], ecx
mov ecx, ebx
mov dword [eax + 0xc], edx
mov eax, esp
push esi
push edi
mov dword [eax], 1
mov dword [eax + 4], 0xf0000
mov dword [eax + 8], 0xe40000
call fcn.10084d40
cmp dword [esp + 0x160], 0x17
jne 0x1008605a
mov ecx, dword [ebx + 0xa4]
lea eax, [edi*8 + 0xb4]
push 4
add eax, ecx
mov dword [esp + 0x3a4], 0
push eax
lea eax, [esp + 0xbf8]
mov dword [esp + 0x3b4], 4
push eax
mov dword [esp + 0x3b4], 0xaa0000
mov dword [esp + 0x3b0], 0
call fcn.100778f0
mov ecx, dword [ebx + 0xa4]
lea eax, [edi + 0x16]
push 4
lea eax, [ecx + eax*8]
push eax
lea eax, [esp + 0xc08]
push eax
call fcn.100778f0
mov esi, dword [ebx + 0xa0]
mov ecx, dword [esi + 4]
mov eax, dword [esi]
mov dword [eax + ecx*4], 4
mov eax, dword [esi + 4]
mov dword [esi + 8], eax
inc dword [esi + 4]
mov ecx, dword [esi + 4]
mov eax, dword [esi]
mov dword [eax + ecx*4], 0x80310009
lea eax, [esp + 0x3a0]
inc dword [esi + 4]
mov ecx, esi
push eax
call fcn.10076cc0
lea eax, [esp + 0xc00]
mov ecx, esi
push eax
call fcn.10076cc0
lea eax, [esp + 0xbf0]
mov ecx, esi
push eax
call fcn.10076cc0
mov ecx, dword [esi + 8]
mov eax, dword [esi]
push 0x10
lea edx, [eax + ecx*4]
mov eax, dword [esi + 4]
sub eax, ecx
mov ecx, esi
dec eax
shl eax, 0x18
or dword [edx], eax
call fcn.10076e40
inc dword [esi + 0x10]
cmp byte [esi + 0x18], 0
je 0x1008604b
inc dword [esi + 0x14]
mov byte [esi + 0x18], 1
mov dword [esp + 0x178], 1
mov ecx, dword [ebx + 0xa4]
push 4
lea eax, [ecx + 0x10]
push eax
lea eax, [esp + 0xc28]
push eax
call fcn.100778f0
mov esi, dword [ebx + 0xa0]
mov ecx, dword [esi + 4]
mov eax, dword [esi]
mov dword [eax + ecx*4], 1
mov eax, dword [esi + 4]
mov dword [esi + 8], eax
inc dword [esi + 4]
mov ecx, dword [esi + 4]
mov eax, dword [esi]
mov dword [eax + ecx*4], 0x802f000b
lea eax, [esp + 0xc20]
inc dword [esi + 4]
mov ecx, esi
push eax
call fcn.10076cc0
mov ecx, dword [esi + 8]
mov eax, dword [esi]
push 0x10
lea edx, [eax + ecx*4]
mov eax, dword [esi + 4]
sub eax, ecx
mov ecx, esi
dec eax
shl eax, 0x18
or dword [edx], eax
call fcn.10076e40
inc dword [esi + 0x10]
cmp byte [esi + 0x18], 0
je 0x100860d4
inc dword [esi + 0x14]
mov byte [esi + 0x18], 1
mov eax, edi
mov esi, dword [ebx + 0xa0]
shl eax, 5
add eax, 0xf0
mov dword [esp + 0x3b0], 0
shr eax, 4
mov ecx, dword [esi + 4]
mov word [esp + 0x3cc], ax
xor eax, eax
mov word [esp + 0x3ce], ax
mov eax, dword [esi]
mov dword [esp + 0x3bc], 4
mov dword [esp + 0x3b8], 0xe40000
mov dword [esp + 0x3b4], 0
mov dword [eax + ecx*4], 0x18
mov eax, dword [esi + 4]
mov dword [esi + 8], eax
inc dword [esi + 4]
mov ecx, dword [esi + 4]
mov eax, dword [esi]
mov dword [esp + 0x3c0], 2
mov dword [esp + 0x3c8], 0xe40000
mov dword [esp + 0x3c4], 0
mov dword [eax + ecx*4], 0x8023000b
lea eax, [esp + 0x3b0]
inc dword [esi + 4]
mov ecx, esi
push eax
call fcn.10076cc0
lea eax, [esp + 0x3c0]
mov ecx, esi
push eax
call fcn.10076cc0
mov ecx, dword [esi + 8]
mov eax, dword [esi]
push 0x10
lea edx, [eax + ecx*4]
mov eax, dword [esi + 4]
sub eax, ecx
mov ecx, esi
dec eax
shl eax, 0x18
or dword [edx], eax
call fcn.10076e40
inc dword [esi + 0x10]
cmp byte [esi + 0x18], 0
je 0x100861b4
inc dword [esi + 0x14]
mov byte [esi + 0x18], 1
mov dword [esp + 0x174], 1
mov esi, dword [esp + 0x10]
test edi, edi
jne 0x100861fb
mov eax, dword [esp + 0x140]
mov dword [esp + 0x104], eax
mov dword [esp + 0x14], eax
xor eax, eax
mov dword [esp + 0x28], eax
mov dword [esp + 0x18], eax
mov eax, dword [esp + 0x170]
mov dword [esp + 0x1c], eax
mov eax, dword [esp + 0x230]
jmp 0x1008622e
mov eax, dword [esp + 0x16c]
mov dword [esp + 0x104], eax
mov dword [esp + 0x14], eax
mov eax, dword [esp + 0x164]
mov dword [esp + 0x28], eax
mov dword [esp + 0x18], eax
mov eax, dword [esp + 0x168]
mov dword [esp + 0x1c], eax
mov eax, dword [esp + 0x128]
mov dword [esp + 0x20], eax
mov eax, dword [esp + 0x160]
cmp eax, 0x16
je 0x1008bc8b
cmp eax, 0x17
je 0x1008bc8b
mov eax, dword [esp + 0x12c]
mov eax, dword [eax]
mov ecx, eax
shr ecx, 5
and ecx, 0x1f
mov dword [esp + 0x180], ecx
cmp ecx, 0x1b
jne 0x10086273
mov dword [esp + 0x180], 0x7fffffff
mov ecx, eax
mov dword [esp + 0x1a8], 5
shr ecx, 0xa
xor edi, edi
and ecx, 0x3f
mov dword [esp + 0x1b0], 0xe40000
mov dword [esp + 0x184], ecx
mov ecx, eax
shr eax, 0x16
and eax, 0x3f
shr ecx, 0x10
mov dword [esp + 0x74], eax
and ecx, 0x3f
mov eax, dword [esp + 0x148]
mov dword [esp + 0x50], ecx
mov dword [esp + 0x1ac], 0xf0000
mov dword [esp + 0x118], 5
mov ecx, dword [eax]
mov eax, ecx
and eax, 0x3f
mov dword [esp + 0x22c], ecx
mov dword [esp + 0x12c], eax
mov eax, ecx
shr eax, 6
and eax, 0x3f
mov dword [esp + 0x120], 0xff0000
mov dword [esp + 0x24], eax
mov eax, ecx
shr eax, 0xc
and eax, 0x3f
mov dword [esp + 0x11c], 0x80000
cmp dword [esp + 0x144], 0x9000000
mov dword [esp + 0x3c], eax
mov dword [esp + 0x1d0], 5
mov dword [esp + 0x1d4], 0x70000
mov dword [esp + 0x108], edi
mov dword [esp + 0x1cc], edi
jne 0x1008639f
xor edx, edx
mov dword [esp + 0xb74], edi
mov dword [esp + 0xb78], 5
lea ecx, [esp + 0xac0]
mov dword [esp + 0xb7c], 0x70000
mov dword [esp + 0x78], edx
mov dword [esp + 0xb80], edx
mov dword [esp + 0x1d8], edx
mov dword [esp + 0xac0], edx
mov dword [esp + 0xac4], 5
mov dword [esp + 0xac8], 0x80000
mov dword [esp + 0xacc], edx
jmp 0x100863fe
mov eax, 0x100000
mov dword [esp + 0xb84], edi
mov dword [esp + 0xb88], 5
lea ecx, [esp + 0xad0]
mov dword [esp + 0xb8c], 0x70000
mov dword [esp + 0x78], eax
mov dword [esp + 0xb90], eax
mov dword [esp + 0x1d8], eax
mov dword [esp + 0xad0], edi
mov dword [esp + 0xad4], 5
mov dword [esp + 0xad8], 0x80000
mov dword [esp + 0xadc], eax
mov eax, dword [ecx]
mov dword [esp + 0x130], eax
mov eax, dword [ecx + 4]
mov dword [esp + 0x134], eax
mov eax, dword [ecx + 8]
mov dword [esp + 0x138], eax
mov eax, dword [ecx + 0xc]
mov ecx, dword [esp + 0x124]
mov dword [esp + 0x13c], eax
mov dword [esp + 0x274], 0
mov dword [esp + 0x278], 5
mov dword [esp + 0x27c], 0xf0000
mov dword [esp + 0x280], 0x100000
cmp ecx, 1
jb 0x100867a6
mov eax, dword [ebx + ecx*8 + 0x58]
mov ecx, eax
shr eax, 5
and ecx, 0x1f
and eax, 0x1f
mov dword [esp + 0x264], ecx
mov dword [esp + 0x148], eax
cmp eax, 0x1b
jne 0x1008648f
mov eax, 0x7fffffff
mov dword [esp + 0x148], eax
cmp ecx, 0x11
jne 0x1008656d
cmp eax, ecx
jne 0x10086576
xor eax, eax
mov word [esp + 0x3dc], si
mov esi, dword [ebx + 0xa0]
mov word [esp + 0x3de], ax
mov dword [esp + 0x3d0], 0
mov dword [esp + 0x3d8], 0xe40000
mov ecx, dword [esi + 4]
mov eax, dword [esi]
mov dword [esp + 0x3d4], 0
mov dword [eax + ecx*4], 5
mov eax, dword [esi + 4]
mov dword [esi + 8], eax
inc dword [esi + 4]
mov ecx, dword [esi + 4]
mov eax, dword [esi]
mov dword [eax + ecx*4], 0x802f0000
lea eax, [esp + 0x14]
inc dword [esi + 4]
mov ecx, esi
push eax
call fcn.10076cc0
lea eax, [esp + 0x3d0]
mov ecx, esi
push eax
call fcn.10076cc0
mov ecx, dword [esi + 8]
mov eax, dword [esi]
push 0x10
lea edx, [eax + ecx*4]
mov eax, dword [esi + 4]
sub eax, ecx
mov ecx, esi
dec eax
shl eax, 0x18
or dword [edx], eax
call fcn.10076e40
inc dword [esi + 0x10]
cmp byte [esi + 0x18], 0
je 0x10086540
inc dword [esi + 0x14]
mov byte [esi + 0x18], 1
xor esi, esi
xor eax, eax
mov dword [esp + 0x104], esi
mov dword [esp + 0x14], esi
mov esi, eax
mov dword [esp + 0xbc0], eax
mov dword [esp + 0x28], eax
mov dword [esp + 0x18], eax
mov dword [esp + 0x20], esi
jmp 0x1008679e
cmp eax, 0x11
jne 0x100867a6
xor eax, eax
mov word [esp + 0x3ec], si
mov esi, dword [ebx + 0xa0]
mov word [esp + 0x3ee], ax
mov dword [esp + 0x3e0], 0
mov dword [esp + 0x3e8], 0xe40000
mov ecx, dword [esi + 4]
mov eax, dword [esi]
mov dword [esp + 0x3e4], 0
mov dword [eax + ecx*4], 1
mov eax, dword [esi + 4]
mov dword [esi + 8], eax
inc dword [esi + 4]
mov ecx, dword [esi + 4]
mov eax, dword [esi]
mov dword [eax + ecx*4], 0x802f0000
lea eax, [esp + 0x3e0]
inc dword [esi + 4]
mov ecx, esi
push eax
call fcn.10076cc0
mov ecx, dword [esi + 8]
mov eax, dword [esi]
push 0x10
lea edx, [eax + ecx*4]
mov eax, dword [esi + 4]
sub eax, ecx
mov ecx, esi
dec eax
shl eax, 0x18
or dword [edx], eax
call fcn.10076e40
inc dword [esi + 0x10]
cmp byte [esi + 0x18], 0
je 0x1008660a
inc dword [esi + 0x14]
cmp dword [esp + 0x264], 0x11
mov byte [esi + 0x18], 1
jne 0x100866c4
mov esi, dword [ebx + 0xa0]
mov eax, dword [esp + 0x10]
mov word [esp + 0x3fc], ax
xor eax, eax
mov word [esp + 0x3fe], ax
mov ecx, dword [esi + 4]
mov eax, dword [esi]
mov dword [esp + 0x3f0], 0
mov dword [esp + 0x3f8], 0xe40000
mov dword [esp + 0x3f4], 0
mov dword [eax + ecx*4], 5
mov eax, dword [esi + 4]
mov dword [esi + 8], eax
inc dword [esi + 4]
mov ecx, dword [esi + 4]
mov eax, dword [esi]
mov dword [eax + ecx*4], 0x80270000
lea eax, [esp + 0x14]
inc dword [esi + 4]
mov ecx, esi
push eax
call fcn.10076cc0
lea eax, [esp + 0x3f0]
mov ecx, esi
push eax
call fcn.10076cc0
mov ecx, dword [esi + 8]
mov eax, dword [esi]
push 0x10
lea edx, [eax + ecx*4]
mov eax, dword [esi + 4]
sub eax, ecx
mov ecx, esi
dec eax
shl eax, 0x18
or dword [edx], eax
call fcn.10076e40
inc dword [esi + 0x10]
cmp byte [esi + 0x18], 0
je 0x100866c0
inc dword [esi + 0x14]
mov byte [esi + 0x18], 1
cmp dword [esp + 0x148], 0x11
jne 0x1008677a
mov esi, dword [ebx + 0xa0]
mov eax, dword [esp + 0x10]
mov word [esp + 0x40c], ax
xor eax, eax
mov word [esp + 0x40e], ax
mov ecx, dword [esi + 4]
mov eax, dword [esi]
mov dword [esp + 0x400], 0
mov dword [esp + 0x408], 0xe40000
mov dword [esp + 0x404], 0
mov dword [eax + ecx*4], 5
mov eax, dword [esi + 4]
mov dword [esi + 8], eax
inc dword [esi + 4]
mov ecx, dword [esi + 4]
mov eax, dword [esi]
mov dword [eax + ecx*4], 0x80280000
lea eax, [esp + 0x14]
inc dword [esi + 4]
mov ecx, esi
push eax
call fcn.10076cc0
lea eax, [esp + 0x400]
mov ecx, esi
push eax
call fcn.10076cc0
mov ecx, dword [esi + 8]
mov eax, dword [esi]
push 0x10
lea edx, [eax + ecx*4]
mov eax, dword [esi + 4]
sub eax, ecx
mov ecx, esi
dec eax
shl eax, 0x18
or dword [edx], eax
call fcn.10076e40
inc dword [esi + 0x10]
cmp byte [esi + 0x18], 0
je 0x10086776
inc dword [esi + 0x14]
mov byte [esi + 0x18], 1
xor eax, eax
xor ecx, ecx
mov dword [esp + 0x104], eax
mov dword [esp + 0x14], eax
mov eax, ecx
mov dword [esp + 0xbd0], ecx
mov dword [esp + 0x28], ecx
mov dword [esp + 0x18], ecx
mov dword [esp + 0x20], eax
mov dword [esp + 0x1c], 0xe40000
mov eax, dword [esp + 0x124]
mov ecx, dword [ebx + 0xa4]
add eax, 3
shl eax, 4
push 0x10
add eax, ecx
mov dword [esp + 0x194], 6
push eax
lea eax, [esp + 0x94]
mov dword [esp + 0x1a0], 0xe40000
push eax
mov dword [esp + 0x1a0], 0xf0000
mov dword [esp + 0xc4], 7
mov dword [esp + 0xcc], 0xe40000
mov dword [esp + 0xc8], 0xf0000
mov dword [esp + 0x104], 8
mov dword [esp + 0x10c], 0xe40000
mov dword [esp + 0x108], 0xf0000
mov dword [esp + 0x1a8], 6
mov dword [esp + 0x1b0], 0xe40000
mov dword [esp + 0x1ac], 0xf0000
mov dword [esp + 0xf8], 7
mov dword [esp + 0x100], 0xe40000
mov dword [esp + 0xfc], 0xf0000
mov dword [esp + 0x118], 8
mov dword [esp + 0x120], 0xe40000
mov dword [esp + 0x11c], 0xf0000
call fcn.100bcf67
mov ecx, dword [ebx + 0xa4]
push 0x10
lea eax, [ecx + 0x20]
push eax
lea eax, [esp + 0x5c]
push eax
call fcn.100778f0
mov eax, dword [esp + 0x160]
add eax, 0xfffffffe
cmp eax, 0x18
ja case.0x100868ba.22
jmp dword [eax*4 + 0x1008c0e8]
mov eax, dword [esp + 0x10]
mov word [esp + 0x42c], ax
xor eax, eax
sub esp, 8
mov word [esp + 0x436], ax
lea eax, [esp + 0x6c]
mov dword [esp + 0x418], 0
mov dword [esp + 0x424], 2
mov dword [esp + 0x420], 0xe40000
push eax
lea eax, [esp + 0xc4]
mov dword [esp + 0x420], 0
push eax
lea eax, [esp + 0x420]
mov dword [esp + 0x430], 0
push eax
mov dword [esp + 0x43c], 0xe40000
lea eax, [esp + 0x434]
mov dword [esp + 0x438], 0
push eax
lea eax, [esp + 0x2c]
mov ecx, ebx
push eax
lea eax, [esp + 0x5c]
push eax
lea eax, [esp + 0x4c]
push eax
push 0
push dword [esp + 0x78]
lea eax, [esp + 0x80]
push eax
lea eax, [esp + 0xbc]
push eax
call fcn.10083f40
mov edi, dword [ebx + 0xa0]
mov ecx, dword [edi + 4]
mov eax, dword [edi]
mov dword [eax + ecx*4], 1
mov ecx, edi
mov eax, dword [edi + 4]
mov dword [edi + 8], eax
mov eax, dword [esp + 0x108]
mov edx, eax
inc dword [edi + 4]
and edx, 0x18
mov esi, dword [edi + 4]
shl eax, 0x14
or edx, eax
mov eax, dword [edi]
or edx, 0xff802000
shl edx, 8
or edx, dword [esp + 0x78]
or edx, 0x70005
mov dword [eax + esi*4], edx
lea eax, [esp + 0x64]
inc dword [edi + 4]
push eax
call fcn.10076cc0
mov ecx, edi
call fcn.10076d60
jmp case.0x100868ba.22
mov eax, dword [esp + 0x10]
sub esp, 8
mov word [esp + 0x454], ax
mov ecx, ebx
xor eax, eax
mov dword [esp + 0x438], 0
mov word [esp + 0x456], ax
lea eax, [esp + 0x84]
push eax
lea eax, [esp + 0x104]
mov dword [esp + 0x448], 2
push eax
lea eax, [esp + 0x440]
mov dword [esp + 0x448], 0xe40000
push eax
lea eax, [esp + 0x454]
mov dword [esp + 0x448], 0
push eax
lea eax, [esp + 0x2c]
mov dword [esp + 0x458], 0
push eax
lea eax, [esp + 0x5c]
mov dword [esp + 0x464], 0xe40000
push eax
lea eax, [esp + 0x4c]
mov dword [esp + 0x464], 0
push eax
push 0
push dword [esp + 0x9c]
lea eax, [esp + 0x80]
push eax
lea eax, [esp + 0xbc]
push eax
call fcn.10083f40
mov edi, dword [ebx + 0xa0]
mov ecx, dword [edi + 4]
mov eax, dword [edi]
mov dword [eax + ecx*4], 1
mov ecx, edi
mov eax, dword [edi + 4]
mov dword [edi + 8], eax
mov eax, dword [esp + 0x108]
mov edx, eax
inc dword [edi + 4]
and edx, 0x18
mov esi, dword [edi + 4]
shl eax, 0x14
or edx, eax
mov eax, dword [edi]
or edx, 0xff802000
shl edx, 8
or edx, dword [esp + 0x78]
or edx, 0x70005
mov dword [eax + esi*4], edx
lea eax, [esp + 0x7c]
inc dword [edi + 4]
push eax
call fcn.10076cc0
mov ecx, edi
call fcn.10076d60
jmp case.0x100868ba.22
sub esp, 8
mov esi, dword [esp + 0x18]
xor eax, eax
mov dword [esp + 0x458], 0
mov word [esp + 0x476], ax
mov ecx, ebx
lea eax, [esp + 0x6c]
mov dword [esp + 0x464], 2
push eax
lea eax, [esp + 0xc4]
mov dword [esp + 0x464], 0xe40000
push eax
lea eax, [esp + 0x460]
mov dword [esp + 0x464], 0
push eax
lea eax, [esp + 0x474]
mov dword [esp + 0x474], 0
push eax
lea eax, [esp + 0x2c]
mov word [esp + 0x484], si
push eax
lea eax, [esp + 0x5c]
mov dword [esp + 0x484], 0xe40000
push eax
lea eax, [esp + 0x4c]
mov dword [esp + 0x484], 0
push eax
push 0
push dword [esp + 0x78]
lea eax, [esp + 0x80]
push eax
lea eax, [esp + 0xbc]
push eax
call fcn.10083f40
sub esp, 8
mov dword [esp + 0x478], 0
xor eax, eax
mov dword [esp + 0x484], 2
mov word [esp + 0x496], ax
mov ecx, ebx
lea eax, [esp + 0x84]
mov dword [esp + 0x480], 0xe40000
push eax
lea eax, [esp + 0x104]
mov dword [esp + 0x480], 0
push eax
lea eax, [esp + 0x480]
mov dword [esp + 0x490], 0
push eax
lea eax, [esp + 0x494]
mov word [esp + 0x4a0], si
push eax
lea eax, [esp + 0x2c]
mov dword [esp + 0x4a0], 0xe40000
push eax
lea eax, [esp + 0x5c]
mov dword [esp + 0x4a0], 0
push eax
lea eax, [esp + 0x4c]
push eax
push 0
push dword [esp + 0x9c]
lea eax, [esp + 0x80]
push eax
lea eax, [esp + 0xbc]
push eax
call fcn.10083f40
lea eax, [esp + 0x7c]
mov ecx, ebx
push eax
lea eax, [esp + 0x68]
push eax
lea eax, [esp + 0xc0]
push eax
call fcn.10083e50
mov esi, dword [ebx + 0xa0]
mov eax, dword [esi]
mov ecx, dword [esi + 4]
mov dword [eax + ecx*4], 2
mov eax, dword [esi + 4]
mov dword [esi + 8], eax
inc dword [esi + 4]
mov ecx, edi
mov eax, dword [esi]
and ecx, 0x18
mov edx, dword [esi + 4]
shl edi, 0x14
or ecx, edi
or ecx, 0xff802000
shl ecx, 8
or ecx, dword [esp + 0x78]
or ecx, 0x70005
mov dword [eax + edx*4], ecx
lea eax, [esp + 0x64]
inc dword [esi + 4]
push eax
mov ecx, esi
call fcn.10076cc0
lea eax, [esp + 0x7c]
mov ecx, esi
push eax
call fcn.10076cc0
mov ecx, esi
call fcn.10076d60
jmp case.0x100868ba.22
sub esp, 8
mov esi, dword [esp + 0x18]
xor eax, eax
mov dword [esp + 0x498], 0
mov word [esp + 0x4b6], ax
mov ecx, ebx
lea eax, [esp + 0x6c]
mov dword [esp + 0x4a4], 2
push eax
lea eax, [esp + 0xc4]
mov dword [esp + 0x4a4], 0xe40000
push eax
lea eax, [esp + 0x4a0]
mov dword [esp + 0x4a4], 0
push eax
lea eax, [esp + 0x4b4]
mov dword [esp + 0x4b4], 0
push eax
lea eax, [esp + 0x2c]
mov word [esp + 0x4c4], si
push eax
lea eax, [esp + 0x5c]
mov dword [esp + 0x4c4], 0xe40000
push eax
lea eax, [esp + 0x4c]
mov dword [esp + 0x4c4], 0
push eax
push 0
push dword [esp + 0x78]
lea eax, [esp + 0x80]
push eax
lea eax, [esp + 0xbc]
push eax
call fcn.10083f40
sub esp, 8
mov dword [esp + 0x4b8], 0
xor eax, eax
mov dword [esp + 0x4c4], 2
mov word [esp + 0x4d6], ax
mov ecx, ebx
lea eax, [esp + 0x84]
mov dword [esp + 0x4c0], 0xe40000
push eax
lea eax, [esp + 0x104]
mov dword [esp + 0x4c0], 0
push eax
lea eax, [esp + 0x4c0]
mov dword [esp + 0x4d0], 0
push eax
lea eax, [esp + 0x4d4]
mov word [esp + 0x4e0], si
push eax
lea eax, [esp + 0x2c]
mov dword [esp + 0x4e0], 0xe40000
push eax
lea eax, [esp + 0x5c]
mov dword [esp + 0x4e0], 0
push eax
lea eax, [esp + 0x4c]
push eax
push 0
push dword [esp + 0x9c]
lea eax, [esp + 0x80]
push eax
lea eax, [esp + 0xbc]
push eax
call fcn.10083f40
lea eax, [esp + 0x7c]
mov ecx, ebx
push eax
lea eax, [esp + 0x68]
push eax
lea eax, [esp + 0xc0]
push eax
call fcn.10083e50
mov esi, dword [ebx + 0xa0]
mov eax, dword [esi]
mov ecx, dword [esi + 4]
mov dword [eax + ecx*4], 2
mov eax, dword [esi + 4]
mov dword [esi + 8], eax
inc dword [esi + 4]
mov ecx, dword [esi + 4]
mov eax, dword [esi]
mov dword [eax + ecx*4], 0x80270005
lea eax, [esp + 0x64]
inc dword [esi + 4]
mov ecx, esi
push eax
call fcn.10076cc0
lea eax, [esp + 0x7c]
mov ecx, esi
push eax
call fcn.10076cc0
mov ecx, esi
call fcn.10076d60
mov ecx, dword [ebx + 0xa4]
lea eax, [esp + 0x21c]
push 4
push ecx
push eax
mov dword [esp + 0x4dc], 0
mov dword [esp + 0x4e8], 5
mov dword [esp + 0x4e4], 0xe40000
mov dword [esp + 0x4e0], 0
call fcn.100778f0
mov esi, dword [ebx + 0xa0]
mov eax, dword [esp + 0x21c]
mov dword [esp + 0x4e0], eax
movzx eax, word [esp + 0x228]
mov ecx, dword [esi + 4]
mov word [esp + 0x4ec], ax
mov eax, dword [esp + 0x224]
mov dword [esp + 0x4e8], eax
movzx eax, word [esp + 0x22a]
mov word [esp + 0x4ee], ax
mov eax, dword [esi]
mov dword [esp + 0x4e4], 0x1000000
mov dword [eax + ecx*4], 2
mov ecx, edi
mov eax, dword [esi + 4]
and ecx, 0x18
mov dword [esi + 8], eax
inc dword [esi + 4]
mov eax, dword [esi]
mov edx, dword [esi + 4]
shl edi, 0x14
or ecx, edi
or ecx, 0xff802000
shl ecx, 8
or ecx, dword [esp + 0x78]
or ecx, 0x70005
mov dword [eax + edx*4], ecx
lea eax, [esp + 0x4d0]
inc dword [esi + 4]
mov ecx, esi
push eax
call fcn.10076cc0
lea eax, [esp + 0x4e0]
mov ecx, esi
push eax
call fcn.10076cc0
mov ecx, esi
call fcn.10076d60
jmp case.0x100868ba.22
sub esp, 8
mov esi, dword [esp + 0x18]
xor eax, eax
mov dword [esp + 0x4f8], 0
mov word [esp + 0x516], ax
mov ecx, ebx
lea eax, [esp + 0x6c]
mov dword [esp + 0x504], 2
push eax
lea eax, [esp + 0xc4]
mov dword [esp + 0x504], 0xe40000
push eax
lea eax, [esp + 0x500]
mov dword [esp + 0x504], 0
push eax
lea eax, [esp + 0x514]
mov dword [esp + 0x514], 0
push eax
lea eax, [esp + 0x2c]
mov word [esp + 0x524], si
push eax
lea eax, [esp + 0x5c]
mov dword [esp + 0x524], 0xe40000
push eax
lea eax, [esp + 0x4c]
mov dword [esp + 0x524], 0
push eax
push 0
push dword [esp + 0x78]
lea eax, [esp + 0x80]
push eax
lea eax, [esp + 0xbc]
push eax
call fcn.10083f40
sub esp, 8
mov dword [esp + 0x518], 0
xor eax, eax
mov dword [esp + 0x524], 2
mov word [esp + 0x536], ax
mov ecx, ebx
lea eax, [esp + 0x84]
mov dword [esp + 0x520], 0xe40000
push eax
lea eax, [esp + 0x104]
mov dword [esp + 0x520], 0
push eax
lea eax, [esp + 0x520]
mov dword [esp + 0x530], 0
push eax
lea eax, [esp + 0x534]
mov word [esp + 0x540], si
push eax
lea eax, [esp + 0x2c]
mov dword [esp + 0x540], 0xe40000
push eax
lea eax, [esp + 0x5c]
mov dword [esp + 0x540], 0
push eax
lea eax, [esp + 0x4c]
push eax
push 0
push dword [esp + 0x9c]
lea eax, [esp + 0x80]
push eax
lea eax, [esp + 0xbc]
push eax
call fcn.10083f40
lea eax, [esp + 0x7c]
mov ecx, ebx
push eax
lea eax, [esp + 0x68]
push eax
lea eax, [esp + 0xc0]
push eax
call fcn.10083e50
mov esi, dword [ebx + 0xa0]
mov eax, dword [esi]
mov ecx, dword [esi + 4]
mov dword [eax + ecx*4], 2
mov eax, dword [esi + 4]
mov dword [esi + 8], eax
inc dword [esi + 4]
mov ecx, dword [esi + 4]
mov eax, dword [esi]
mov dword [eax + ecx*4], 0x80270005
lea eax, [esp + 0x64]
inc dword [esi + 4]
mov ecx, esi
push eax
call fcn.10076cc0
lea eax, [esp + 0x7c]
mov ecx, esi
push eax
call fcn.10076cc0
mov ecx, esi
call fcn.10076d60
mov ecx, dword [ebx + 0xa4]
lea eax, [esp + 0x1fc]
push 4
push ecx
push eax
mov dword [esp + 0x53c], 0
mov dword [esp + 0x548], 5
mov dword [esp + 0x544], 0xe40000
mov dword [esp + 0x540], 0
call fcn.100778f0
mov esi, dword [ebx + 0xa0]
mov eax, dword [esp + 0x1fc]
mov dword [esp + 0x540], eax
movzx eax, word [esp + 0x208]
mov ecx, dword [esi + 4]
mov word [esp + 0x54c], ax
mov eax, dword [esp + 0x204]
mov dword [esp + 0x548], eax
movzx eax, word [esp + 0x20a]
mov word [esp + 0x54e], ax
mov eax, dword [esi]
mov dword [esp + 0x544], 0x1000000
mov dword [eax + ecx*4], 2
mov eax, dword [esi + 4]
mov dword [esi + 8], eax
inc dword [esi + 4]
mov ecx, dword [esi + 4]
mov eax, dword [esi]
mov dword [eax + ecx*4], 0x80270005
lea eax, [esp + 0x530]
inc dword [esi + 4]
mov ecx, esi
push eax
call fcn.10076cc0
lea eax, [esp + 0x540]
mov ecx, esi
push eax
call fcn.10076cc0
mov ecx, esi
call fcn.10076d60
mov ecx, dword [ebx + 0xa4]
push 4
mov dword [esp + 0x554], 0
mov dword [esp + 0x560], 5
lea eax, [ecx + 4]
mov dword [esp + 0x55c], 0xe40000
push eax
lea eax, [esp + 0xc38]
mov dword [esp + 0x55c], 0
push eax
call fcn.100778f0
mov esi, dword [ebx + 0xa0]
mov ecx, dword [esi + 4]
mov eax, dword [esi]
mov dword [eax + ecx*4], 5
mov ecx, edi
mov eax, dword [esi + 4]
and ecx, 0x18
shl edi, 0x14
or ecx, edi
mov dword [esi + 8], eax
inc dword [esi + 4]
or ecx, 0xff802000
mov edx, dword [esi + 4]
shl ecx, 8
or ecx, dword [esp + 0x78]
mov eax, dword [esi]
or ecx, 0x70005
mov dword [eax + edx*4], ecx
lea eax, [esp + 0x550]
inc dword [esi + 4]
mov ecx, esi
push eax
call fcn.10076cc0
lea eax, [esp + 0xc30]
mov ecx, esi
push eax
call fcn.10076cc0
mov ecx, esi
call fcn.10076d60
jmp case.0x100868ba.22
sub esp, 8
mov esi, dword [esp + 0x18]
xor eax, eax
mov dword [esp + 0x568], 0
mov word [esp + 0x586], ax
mov ecx, ebx
lea eax, [esp + 0x6c]
mov dword [esp + 0x574], 2
push eax
lea eax, [esp + 0xc4]
mov dword [esp + 0x574], 0xe40000
push eax
lea eax, [esp + 0x570]
mov dword [esp + 0x574], 0
push eax
lea eax, [esp + 0x584]
mov dword [esp + 0x584], 0
push eax
lea eax, [esp + 0x2c]
mov word [esp + 0x594], si
push eax
lea eax, [esp + 0x5c]
mov dword [esp + 0x594], 0xe40000
push eax
lea eax, [esp + 0x4c]
mov dword [esp + 0x594], 0
push eax
push 0
push dword [esp + 0x78]
lea eax, [esp + 0x80]
push eax
lea eax, [esp + 0xbc]
push eax
call fcn.10083f40
sub esp, 8
mov dword [esp + 0x588], 0
xor eax, eax
mov dword [esp + 0x594], 2
mov word [esp + 0x5a6], ax
mov ecx, ebx
lea eax, [esp + 0x84]
mov dword [esp + 0x590], 0xe40000
push eax
lea eax, [esp + 0x104]
mov dword [esp + 0x590], 0
push eax
lea eax, [esp + 0x590]
mov dword [esp + 0x5a0], 0
push eax
lea eax, [esp + 0x5a4]
mov word [esp + 0x5b0], si
push eax
lea eax, [esp + 0x2c]
mov dword [esp + 0x5b0], 0xe40000
push eax
lea eax, [esp + 0x5c]
mov dword [esp + 0x5b0], 0
push eax
lea eax, [esp + 0x4c]
push eax
push 0
push dword [esp + 0x9c]
lea eax, [esp + 0x80]
push eax
lea eax, [esp + 0xbc]
push eax
call fcn.10083f40
lea eax, [esp + 0x7c]
mov ecx, ebx
push eax
lea eax, [esp + 0x68]
push eax
lea eax, [esp + 0xc0]
push eax
call fcn.10083e50
mov eax, dword [esp + 0x7c]
mov dword [esp + 0x5a0], eax
movzx eax, word [esp + 0x88]
mov word [esp + 0x5ac], ax
mov eax, dword [esp + 0x84]
mov dword [esp + 0x5a8], eax
mov esi, dword [ebx + 0xa0]
movzx eax, word [esp + 0x8a]
mov word [esp + 0x5ae], ax
mov dword [esp + 0x5a4], 0x1000000
mov ecx, dword [esi + 4]
mov eax, dword [esi]
mov dword [eax + ecx*4], 2
mov ecx, edi
mov eax, dword [esi + 4]
and ecx, 0x18
mov dword [esi + 8], eax
inc dword [esi + 4]
mov eax, dword [esi]
mov edx, dword [esi + 4]
shl edi, 0x14
or ecx, edi
or ecx, 0xff802000
shl ecx, 8
or ecx, dword [esp + 0x78]
or ecx, 0x70005
mov dword [eax + edx*4], ecx
lea eax, [esp + 0x64]
inc dword [esi + 4]
mov ecx, esi
push eax
call fcn.10076cc0
lea eax, [esp + 0x5a0]
mov ecx, esi
push eax
call fcn.10076cc0
mov ecx, esi
call fcn.10076d60
jmp case.0x100868ba.22
sub esp, 8
mov esi, dword [esp + 0x18]
xor eax, eax
mov dword [esp + 0x5b8], 0
mov word [esp + 0x5d6], ax
mov ecx, ebx
lea eax, [esp + 0x6c]
mov dword [esp + 0x5c4], 2
push eax
lea eax, [esp + 0xc4]
mov dword [esp + 0x5c4], 0xe40000
push eax
lea eax, [esp + 0x5c0]
mov dword [esp + 0x5c4], 0
push eax
lea eax, [esp + 0x5d4]
mov dword [esp + 0x5d4], 0
push eax
lea eax, [esp + 0x2c]
mov word [esp + 0x5e4], si
push eax
lea eax, [esp + 0x5c]
mov dword [esp + 0x5e4], 0xe40000
push eax
lea eax, [esp + 0x4c]
mov dword [esp + 0x5e4], 0
push eax
push 0
push dword [esp + 0x78]
lea eax, [esp + 0x80]
push eax
lea eax, [esp + 0xbc]
push eax
call fcn.10083f40
sub esp, 8
mov dword [esp + 0x5d8], 0
xor eax, eax
mov dword [esp + 0x5e4], 2
mov word [esp + 0x5f6], ax
mov ecx, ebx
lea eax, [esp + 0x84]
mov dword [esp + 0x5e0], 0xe40000
push eax
lea eax, [esp + 0x104]
mov dword [esp + 0x5e0], 0
push eax
lea eax, [esp + 0x5e0]
mov dword [esp + 0x5f0], 0
push eax
lea eax, [esp + 0x5f4]
mov word [esp + 0x600], si
push eax
lea eax, [esp + 0x2c]
mov dword [esp + 0x600], 0xe40000
push eax
lea eax, [esp + 0x5c]
mov dword [esp + 0x600], 0
push eax
lea eax, [esp + 0x4c]
push eax
push 0
push dword [esp + 0x9c]
lea eax, [esp + 0x80]
push eax
lea eax, [esp + 0xbc]
push eax
call fcn.10083f40
lea eax, [esp + 0x64]
mov ecx, ebx
push eax
push eax
lea eax, [esp + 0xc0]
push eax
call fcn.10083e50
mov eax, dword [esp + 0x64]
mov dword [esp + 0x5f0], eax
movzx eax, word [esp + 0x70]
mov word [esp + 0x5fc], ax
mov eax, dword [esp + 0x6c]
mov dword [esp + 0x5f8], eax
mov dword [esp + 0x5f4], 0x1000000
mov ecx, dword [ebx + 0xa4]
movzx eax, word [esp + 0x72]
mov word [esp + 0x5fe], ax
push 4
lea eax, [ecx + 0x1c]
push eax
lea eax, [esp + 0xc48]
push eax
call fcn.100778f0
mov esi, dword [ebx + 0xa0]
mov ecx, dword [esi + 4]
mov eax, dword [esi]
mov dword [eax + ecx*4], 2
mov eax, dword [esi + 4]
mov dword [esi + 8], eax
inc dword [esi + 4]
mov ecx, dword [esi + 4]
mov eax, dword [esi]
mov dword [eax + ecx*4], 0x80270005
lea eax, [esp + 0xc40]
inc dword [esi + 4]
mov ecx, esi
push eax
call fcn.10076cc0
lea eax, [esp + 0x5f0]
mov ecx, esi
push eax
call fcn.10076cc0
mov ecx, esi
call fcn.10076d60
mov esi, dword [ebx + 0xa0]
mov dword [esp + 0x600], 0
mov dword [esp + 0x60c], 5
mov dword [esp + 0x608], 0xe40000
mov ecx, dword [esi + 4]
mov eax, dword [esi]
mov dword [esp + 0x604], 0
mov dword [eax + ecx*4], 4
mov ecx, edi
mov eax, dword [esi + 4]
and ecx, 0x18
mov dword [esi + 8], eax
inc dword [esi + 4]
mov eax, dword [esi]
mov edx, dword [esi + 4]
shl edi, 0x14
or ecx, edi
or ecx, 0xff802000
shl ecx, 8
or ecx, dword [esp + 0x78]
or ecx, 0x70005
mov dword [eax + edx*4], ecx
lea eax, [esp + 0x600]
inc dword [esi + 4]
mov ecx, esi
push eax
call fcn.10076cc0
lea eax, [esp + 0x7c]
mov ecx, esi
push eax
call fcn.10076cc0
lea eax, [esp + 0x64]
mov ecx, esi
push eax
call fcn.10076cc0
mov ecx, esi
call fcn.10076d60
jmp case.0x100868ba.22
sub esp, 8
mov esi, dword [esp + 0x18]
xor eax, eax
mov dword [esp + 0x618], 0
mov word [esp + 0x636], ax
mov ecx, ebx
lea eax, [esp + 0x6c]
mov dword [esp + 0x624], 2
push eax
lea eax, [esp + 0xc4]
mov dword [esp + 0x624], 0xe40000
push eax
lea eax, [esp + 0x620]
mov dword [esp + 0x624], 0
push eax
lea eax, [esp + 0x634]
mov dword [esp + 0x634], 0
push eax
lea eax, [esp + 0x2c]
mov word [esp + 0x644], si
push eax
lea eax, [esp + 0x5c]
mov dword [esp + 0x644], 0xe40000
push eax
lea eax, [esp + 0x4c]
mov dword [esp + 0x644], 0
push eax
push 0
push dword [esp + 0x78]
lea eax, [esp + 0x80]
push eax
lea eax, [esp + 0xbc]
push eax
call fcn.10083f40
sub esp, 8
mov dword [esp + 0x638], 0
xor eax, eax
mov dword [esp + 0x644], 2
mov word [esp + 0x656], ax
mov ecx, ebx
lea eax, [esp + 0x84]
mov dword [esp + 0x640], 0xe40000
push eax
lea eax, [esp + 0x104]
mov dword [esp + 0x640], 0
push eax
lea eax, [esp + 0x640]
mov dword [esp + 0x650], 0
push eax
lea eax, [esp + 0x654]
mov word [esp + 0x660], si
push eax
lea eax, [esp + 0x2c]
mov dword [esp + 0x660], 0xe40000
push eax
lea eax, [esp + 0x5c]
mov dword [esp + 0x660], 0
push eax
lea eax, [esp + 0x4c]
push eax
push 0
push dword [esp + 0x9c]
lea eax, [esp + 0x80]
push eax
lea eax, [esp + 0xbc]
push eax
call fcn.10083f40
lea eax, [esp + 0x7c]
mov ecx, ebx
push eax
lea eax, [esp + 0x68]
push eax
lea eax, [esp + 0xc0]
push eax
call fcn.10083e50
mov esi, dword [ebx + 0xa0]
mov eax, dword [esi]
mov ecx, dword [esi + 4]
mov dword [eax + ecx*4], 5
mov eax, dword [esi + 4]
mov dword [esi + 8], eax
inc dword [esi + 4]
mov ecx, edi
mov eax, dword [esi]
and ecx, 0x18
mov edx, dword [esi + 4]
shl edi, 0x14
or ecx, edi
or ecx, 0xff802000
shl ecx, 8
or ecx, dword [esp + 0x78]
or ecx, 0x70005
mov dword [eax + edx*4], ecx
lea eax, [esp + 0x64]
inc dword [esi + 4]
mov ecx, esi
push eax
call fcn.10076cc0
lea eax, [esp + 0x7c]
mov ecx, esi
push eax
call fcn.10076cc0
mov ecx, esi
call fcn.10076d60
jmp case.0x100868ba.22
sub esp, 8
mov esi, dword [esp + 0x18]
xor eax, eax
mov dword [esp + 0x658], 0
mov word [esp + 0x676], ax
mov ecx, ebx
lea eax, [esp + 0x6c]
mov dword [esp + 0x664], 2
push eax
lea eax, [esp + 0xc4]
mov dword [esp + 0x664], 0xe40000
push eax
lea eax, [esp + 0x660]
mov dword [esp + 0x664], 0
push eax
lea eax, [esp + 0x674]
mov dword [esp + 0x674], 0
push eax
lea eax, [esp + 0x2c]
mov word [esp + 0x684], si
push eax
lea eax, [esp + 0x5c]
mov dword [esp + 0x684], 0xe40000
push eax
lea eax, [esp + 0x4c]
mov dword [esp + 0x684], 0
push eax
push 0
push dword [esp + 0x78]
lea eax, [esp + 0x80]
push eax
lea eax, [esp + 0xbc]
push eax
call fcn.10083f40
sub esp, 8
mov dword [esp + 0x678], 0
xor eax, eax
mov dword [esp + 0x684], 2
mov word [esp + 0x696], ax
mov ecx, ebx
lea eax, [esp + 0x84]
mov dword [esp + 0x680], 0xe40000
push eax
lea eax, [esp + 0x104]
mov dword [esp + 0x680], 0
push eax
lea eax, [esp + 0x680]
mov dword [esp + 0x690], 0
push eax
lea eax, [esp + 0x694]
mov word [esp + 0x6a0], si
push eax
lea eax, [esp + 0x2c]
mov dword [esp + 0x6a0], 0xe40000
push eax
lea eax, [esp + 0x5c]
mov dword [esp + 0x6a0], 0
push eax
lea eax, [esp + 0x4c]
push eax
push 0
push dword [esp + 0x9c]
lea eax, [esp + 0x80]
push eax
lea eax, [esp + 0xbc]
push eax
call fcn.10083f40
lea eax, [esp + 0x7c]
mov ecx, ebx
push eax
lea eax, [esp + 0x68]
push eax
lea eax, [esp + 0xc0]
push eax
call fcn.10083e50
mov esi, dword [ebx + 0xa0]
mov eax, dword [esi]
mov ecx, dword [esi + 4]
mov dword [eax + ecx*4], 5
mov eax, dword [esi + 4]
mov dword [esi + 8], eax
inc dword [esi + 4]
mov ecx, dword [esi + 4]
mov eax, dword [esi]
mov dword [eax + ecx*4], 0x80270005
lea eax, [esp + 0x64]
inc dword [esi + 4]
mov ecx, esi
push eax
call fcn.10076cc0
lea eax, [esp + 0x7c]
mov ecx, esi
push eax
call fcn.10076cc0
mov ecx, esi
call fcn.10076d60
mov esi, dword [ebx + 0xa0]
mov dword [esp + 0x6a0], 0
mov dword [esp + 0x6ac], 5
mov dword [esp + 0x6a8], 0xe40000
mov ecx, dword [esi + 4]
mov eax, dword [esi]
mov dword [esp + 0x6a4], 0
mov dword [esp + 0x690], 0
mov dword [esp + 0x69c], 5
mov dword [eax + ecx*4], 2
mov ecx, edi
mov eax, dword [esi + 4]
and ecx, 0x18
mov dword [esi + 8], eax
inc dword [esi + 4]
mov eax, dword [esi]
mov edx, dword [esi + 4]
shl edi, 0x14
or ecx, edi
mov dword [esp + 0x698], 0xe40000
or ecx, 0xff802000
mov dword [esp + 0x694], 0
shl ecx, 8
or ecx, dword [esp + 0x78]
or ecx, 0x70005
mov dword [eax + edx*4], ecx
lea eax, [esp + 0x690]
inc dword [esi + 4]
mov ecx, esi
push eax
call fcn.10076cc0
lea eax, [esp + 0x6a0]
mov ecx, esi
push eax
call fcn.10076cc0
mov ecx, esi
call fcn.10076d60
jmp case.0x100868ba.22
sub esp, 8
mov esi, dword [esp + 0x18]
xor eax, eax
mov dword [esp + 0x6b8], 0
mov word [esp + 0x6d6], ax
mov ecx, ebx
lea eax, [esp + 0x6c]
mov dword [esp + 0x6c4], 2
push eax
lea eax, [esp + 0xc4]
mov dword [esp + 0x6c4], 0xe40000
push eax
lea eax, [esp + 0x6c0]
mov dword [esp + 0x6c4], 0
push eax
lea eax, [esp + 0x6d4]
mov dword [esp + 0x6d4], 0
push eax
lea eax, [esp + 0x2c]
mov word [esp + 0x6e4], si
push eax
lea eax, [esp + 0x5c]
mov dword [esp + 0x6e4], 0xe40000
push eax
lea eax, [esp + 0x4c]
mov dword [esp + 0x6e4], 0
push eax
push 0
push dword [esp + 0x78]
lea eax, [esp + 0x80]
push eax
lea eax, [esp + 0xbc]
push eax
call fcn.10083f40
sub esp, 8
mov dword [esp + 0x6d8], 0
xor eax, eax
mov dword [esp + 0x6e4], 2
mov word [esp + 0x6f6], ax
mov ecx, ebx
lea eax, [esp + 0x84]
mov dword [esp + 0x6e0], 0xe40000
push eax
lea eax, [esp + 0x104]
mov dword [esp + 0x6e0], 0
push eax
lea eax, [esp + 0x6e0]
mov dword [esp + 0x6f0], 0
push eax
lea eax, [esp + 0x6f4]
mov word [esp + 0x700], si
push eax
lea eax, [esp + 0x2c]
mov dword [esp + 0x700], 0xe40000
push eax
lea eax, [esp + 0x5c]
mov dword [esp + 0x700], 0
push eax
lea eax, [esp + 0x4c]
push eax
push 0
push dword [esp + 0x9c]
lea eax, [esp + 0x80]
push eax
lea eax, [esp + 0xbc]
push eax
call fcn.10083f40
lea eax, [esp + 0x7c]
mov ecx, ebx
push eax
lea eax, [esp + 0x68]
push eax
lea eax, [esp + 0xc0]
push eax
call fcn.10083e50
mov esi, dword [ebx + 0xa0]
mov eax, dword [esi]
mov ecx, dword [esi + 4]
mov dword [eax + ecx*4], 5
mov eax, dword [esi + 4]
mov dword [esi + 8], eax
inc dword [esi + 4]
mov ecx, dword [esi + 4]
mov eax, dword [esi]
mov dword [eax + ecx*4], 0x80270005
lea eax, [esp + 0x64]
inc dword [esi + 4]
mov ecx, esi
push eax
call fcn.10076cc0
lea eax, [esp + 0x7c]
mov ecx, esi
push eax
call fcn.10076cc0
mov ecx, esi
call fcn.10076d60
mov ecx, dword [ebx + 0xa4]
push 4
mov dword [esp + 0x6f4], 0
mov dword [esp + 0x700], 5
lea eax, [ecx + 8]
mov dword [esp + 0x6fc], 0xe40000
push eax
lea eax, [esp + 0xc58]
mov dword [esp + 0x6fc], 0
push eax
call fcn.100778f0
mov esi, dword [ebx + 0xa0]
mov ecx, dword [esi + 4]
mov eax, dword [esi]
mov dword [eax + ecx*4], 5
mov ecx, edi
mov eax, dword [esi + 4]
and ecx, 0x18
mov dword [esi + 8], eax
inc dword [esi + 4]
mov eax, dword [esi]
mov edx, dword [esi + 4]
shl edi, 0x14
or ecx, edi
or ecx, 0xff802000
shl ecx, 8
or ecx, dword [esp + 0x78]
or ecx, 0x70005
mov dword [eax + edx*4], ecx
lea eax, [esp + 0x6f0]
inc dword [esi + 4]
mov ecx, esi
push eax
call fcn.10076cc0
lea eax, [esp + 0xc50]
mov ecx, esi
push eax
call fcn.10076cc0
mov ecx, esi
call fcn.10076d60
jmp case.0x100868ba.22
sub esp, 8
mov esi, dword [esp + 0x18]
xor eax, eax
mov dword [esp + 0x708], 0
mov word [esp + 0x726], ax
mov ecx, ebx
lea eax, [esp + 0x6c]
mov dword [esp + 0x714], 2
push eax
lea eax, [esp + 0xc4]
mov dword [esp + 0x714], 0xe40000
push eax
lea eax, [esp + 0x710]
mov dword [esp + 0x714], 0
push eax
lea eax, [esp + 0x724]
mov dword [esp + 0x724], 0
push eax
lea eax, [esp + 0x2c]
mov word [esp + 0x734], si
push eax
lea eax, [esp + 0x5c]
mov dword [esp + 0x734], 0xe40000
push eax
lea eax, [esp + 0x4c]
mov dword [esp + 0x734], 0
push eax
push 0
push dword [esp + 0x78]
lea eax, [esp + 0x80]
push eax
lea eax, [esp + 0xbc]
push eax
call fcn.10083f40
sub esp, 8
mov dword [esp + 0x728], 0
xor eax, eax
mov dword [esp + 0x734], 2
mov word [esp + 0x746], ax
mov ecx, ebx
lea eax, [esp + 0x84]
mov dword [esp + 0x730], 0xe40000
push eax
lea eax, [esp + 0x104]
mov dword [esp + 0x730], 0
push eax
lea eax, [esp + 0x730]
mov dword [esp + 0x740], 0
push eax
lea eax, [esp + 0x744]
mov word [esp + 0x750], si
push eax
lea eax, [esp + 0x2c]
mov dword [esp + 0x750], 0xe40000
push eax
lea eax, [esp + 0x5c]
mov dword [esp + 0x750], 0
push eax
lea eax, [esp + 0x4c]
push eax
push 0
push dword [esp + 0x9c]
lea eax, [esp + 0x80]
push eax
lea eax, [esp + 0xbc]
push eax
call fcn.10083f40
lea eax, [esp + 0x64]
mov ecx, ebx
push eax
lea eax, [esp + 0x80]
push eax
lea eax, [esp + 0x100]
push eax
call fcn.10083e50
lea eax, [esp + 0x2c]
push eax
lea eax, [esp + 0x80]
push eax
lea eax, [esp + 0x100]
push eax
mov ecx, ebx
call fcn.10083e50
mov esi, dword [ebx + 0xa0]
mov eax, dword [esp + 0x7c]
mov dword [esp + 0x740], eax
movzx eax, word [esp + 0x88]
mov ecx, dword [esi + 4]
mov word [esp + 0x74c], ax
mov eax, dword [esp + 0x84]
mov dword [esp + 0x748], eax
movzx eax, word [esp + 0x8a]
mov word [esp + 0x74e], ax
mov eax, dword [esi]
mov dword [esp + 0x744], 0x1000000
mov dword [eax + ecx*4], 2
mov eax, dword [esi + 4]
mov dword [esi + 8], eax
inc dword [esi + 4]
mov ecx, dword [esi + 4]
mov eax, dword [esi]
mov dword [eax + ecx*4], 0x80270005
lea eax, [esp + 0x64]
inc dword [esi + 4]
mov ecx, esi
push eax
call fcn.10076cc0
lea eax, [esp + 0x740]
mov ecx, esi
push eax
call fcn.10076cc0
mov ecx, esi
call fcn.10076d60
mov esi, dword [ebx + 0xa0]
mov eax, dword [esp + 0x140]
mov dword [esp + 0x760], eax
mov eax, dword [esp + 0x18c]
mov ecx, dword [esi + 4]
mov word [esp + 0x76c], ax
xor eax, eax
mov word [esp + 0x76e], ax
mov eax, dword [esi]
mov dword [esp + 0x750], 0
mov dword [esp + 0x75c], 5
mov dword [esp + 0x758], 0xe40000
mov dword [eax + ecx*4], 4
mov ecx, edi
mov eax, dword [esi + 4]
and ecx, 0x18
mov dword [esi + 8], eax
inc dword [esi + 4]
mov eax, dword [esi]
mov edx, dword [esi + 4]
shl edi, 0x14
or ecx, edi
mov dword [esp + 0x754], 0
or ecx, 0xff802000
mov dword [esp + 0x768], 0xff0000
shl ecx, 8
or ecx, dword [esp + 0x78]
or ecx, 0x70005
mov dword [esp + 0x764], 0
mov dword [eax + edx*4], ecx
lea eax, [esp + 0x750]
inc dword [esi + 4]
mov ecx, esi
push eax
call fcn.10076cc0
lea eax, [esp + 0x760]
jmp 0x10086ca9
sub esp, 8
mov esi, dword [esp + 0x18]
xor eax, eax
mov dword [esp + 0x778], 0
mov word [esp + 0x796], ax
mov ecx, ebx
lea eax, [esp + 0x6c]
mov dword [esp + 0x784], 2
push eax
lea eax, [esp + 0xc4]
mov dword [esp + 0x784], 0xe40000
push eax
lea eax, [esp + 0x780]
mov dword [esp + 0x784], 0
push eax
lea eax, [esp + 0x794]
mov dword [esp + 0x794], 0
push eax
lea eax, [esp + 0x2c]
mov word [esp + 0x7a4], si
push eax
lea eax, [esp + 0x5c]
mov dword [esp + 0x7a4], 0xe40000
push eax
lea eax, [esp + 0x4c]
mov dword [esp + 0x7a4], 0
push eax
push 0
push dword [esp + 0x78]
lea eax, [esp + 0x80]
push eax
lea eax, [esp + 0xbc]
push eax
call fcn.10083f40
sub esp, 8
mov dword [esp + 0x798], 0
xor eax, eax
mov dword [esp + 0x7a4], 2
mov word [esp + 0x7b6], ax
mov ecx, ebx
lea eax, [esp + 0x84]
mov dword [esp + 0x7a0], 0xe40000
push eax
lea eax, [esp + 0x104]
mov dword [esp + 0x7a0], 0
push eax
lea eax, [esp + 0x7a0]
mov dword [esp + 0x7b0], 0
push eax
lea eax, [esp + 0x7b4]
mov word [esp + 0x7c0], si
push eax
lea eax, [esp + 0x2c]
mov dword [esp + 0x7c0], 0xe40000
push eax
lea eax, [esp + 0x5c]
mov dword [esp + 0x7c0], 0
push eax
lea eax, [esp + 0x4c]
push eax
push 0
push dword [esp + 0x9c]
lea eax, [esp + 0x80]
push eax
lea eax, [esp + 0xbc]
push eax
call fcn.10083f40
lea eax, [esp + 0x7c]
mov ecx, ebx
push eax
lea eax, [esp + 0x68]
push eax
lea eax, [esp + 0xc0]
push eax
call fcn.10083e50
mov eax, dword [esp + 0x7c]
mov dword [esp + 0x7b0], eax
movzx eax, word [esp + 0x88]
mov word [esp + 0x7bc], ax
mov eax, dword [esp + 0x84]
mov dword [esp + 0x7b8], eax
mov esi, dword [ebx + 0xa0]
movzx eax, word [esp + 0x8a]
mov word [esp + 0x7be], ax
mov dword [esp + 0x7b4], 0x1000000
mov ecx, dword [esi + 4]
mov eax, dword [esi]
mov dword [eax + ecx*4], 2
mov eax, dword [esi + 4]
mov dword [esi + 8], eax
inc dword [esi + 4]
mov ecx, dword [esi + 4]
mov eax, dword [esi]
mov dword [eax + ecx*4], 0x80270005
lea eax, [esp + 0x64]
inc dword [esi + 4]
mov ecx, esi
push eax
call fcn.10076cc0
lea eax, [esp + 0x7b0]
mov ecx, esi
push eax
call fcn.10076cc0
mov ecx, esi
call fcn.10076d60
push 3
push dword [esp + 0x14]
lea ecx, [esp + 0xb34]
call fcn.100767d0
mov esi, dword [ebx + 0xa0]
movzx eax, word [esp + 0xb2c]
mov word [esp + 0x7dc], ax
mov eax, dword [esp + 0xb34]
mov ecx, dword [esi + 4]
mov dword [esp + 0x7d8], eax
xor eax, eax
mov word [esp + 0x7de], ax
mov dword [esp + 0x7c0], eax
mov dword [esp + 0x7c4], eax
mov eax, dword [esi]
mov dword [esp + 0x7d0], 0
mov dword [esp + 0x7d4], 0
mov dword [esp + 0x7cc], 5
mov dword [eax + ecx*4], 4
mov ecx, edi
mov eax, dword [esi + 4]
and ecx, 0x18
mov dword [esi + 8], eax
inc dword [esi + 4]
mov eax, dword [esi]
mov edx, dword [esi + 4]
shl edi, 0x14
or ecx, edi
mov dword [esp + 0x7c8], 0xe40000
or ecx, 0xff802000
shl ecx, 8
or ecx, dword [esp + 0x78]
or ecx, 0x70005
mov dword [eax + edx*4], ecx
lea eax, [esp + 0x7c0]
inc dword [esi + 4]
mov ecx, esi
push eax
call fcn.10076cc0
lea eax, [esp + 0x7d0]
jmp 0x10086ca9
sub esp, 8
mov esi, dword [esp + 0x18]
xor eax, eax
mov dword [esp + 0x7e8], 0
mov word [esp + 0x806], ax
mov ecx, ebx
lea eax, [esp + 0x6c]
mov dword [esp + 0x7f4], 2
push eax
lea eax, [esp + 0xc4]
mov dword [esp + 0x7f4], 0xe40000
push eax
lea eax, [esp + 0x7f0]
mov dword [esp + 0x7f4], 0
push eax
lea eax, [esp + 0x804]
mov dword [esp + 0x804], 0
push eax
lea eax, [esp + 0x2c]
mov word [esp + 0x814], si
push eax
lea eax, [esp + 0x5c]
mov dword [esp + 0x814], 0xe40000
push eax
lea eax, [esp + 0x4c]
mov dword [esp + 0x814], 0
push eax
push 0
push dword [esp + 0x78]
lea eax, [esp + 0x80]
push eax
lea eax, [esp + 0xbc]
push eax
call fcn.10083f40
sub esp, 8
mov dword [esp + 0x808], 0
xor eax, eax
mov dword [esp + 0x814], 2
mov word [esp + 0x826], ax
mov ecx, ebx
lea eax, [esp + 0x84]
mov dword [esp + 0x810], 0xe40000
push eax
lea eax, [esp + 0x104]
mov dword [esp + 0x810], 0
push eax
lea eax, [esp + 0x810]
mov dword [esp + 0x820], 0
push eax
lea eax, [esp + 0x824]
mov word [esp + 0x830], si
push eax
lea eax, [esp + 0x2c]
mov dword [esp + 0x830], 0xe40000
push eax
lea eax, [esp + 0x5c]
mov dword [esp + 0x830], 0
push eax
lea eax, [esp + 0x4c]
push eax
push 0
push dword [esp + 0x9c]
lea eax, [esp + 0x80]
push eax
lea eax, [esp + 0xbc]
push eax
call fcn.10083f40
lea eax, [esp + 0x64]
mov ecx, ebx
push eax
lea eax, [esp + 0x80]
push eax
lea eax, [esp + 0x100]
push eax
call fcn.10083e50
lea eax, [esp + 0x14]
push eax
lea eax, [esp + 0x80]
push eax
lea eax, [esp + 0x100]
push eax
mov ecx, ebx
call fcn.10083e50
mov esi, dword [ebx + 0xa0]
mov eax, dword [esp + 0x7c]
mov dword [esp + 0x820], eax
movzx eax, word [esp + 0x88]
mov ecx, dword [esi + 4]
mov word [esp + 0x82c], ax
mov eax, dword [esp + 0x84]
mov dword [esp + 0x828], eax
movzx eax, word [esp + 0x8a]
mov word [esp + 0x82e], ax
mov eax, dword [esi]
mov dword [esp + 0x824], 0x1000000
mov dword [eax + ecx*4], 2
mov eax, dword [esi + 4]
mov dword [esi + 8], eax
inc dword [esi + 4]
mov ecx, dword [esi + 4]
mov eax, dword [esi]
mov dword [eax + ecx*4], 0x80270005
lea eax, [esp + 0x64]
inc dword [esi + 4]
mov ecx, esi
push eax
call fcn.10076cc0
lea eax, [esp + 0x820]
mov ecx, esi
push eax
call fcn.10076cc0
mov ecx, esi
call fcn.10076d60
mov esi, dword [ebx + 0xa0]
mov eax, dword [esp + 0x104]
mov dword [esp + 0x840], eax
mov eax, dword [esp + 0x20]
mov ecx, dword [esi + 4]
mov word [esp + 0x84c], ax
mov eax, dword [esp + 0x28]
mov dword [esp + 0x844], eax
movzx eax, word [esp + 0x22]
mov word [esp + 0x84e], ax
mov eax, dword [esi]
mov dword [esp + 0x830], 0
mov dword [esp + 0x83c], 5
mov dword [esp + 0x838], 0xe40000
mov dword [eax + ecx*4], 4
mov ecx, edi
mov eax, dword [esi + 4]
and ecx, 0x18
mov dword [esi + 8], eax
inc dword [esi + 4]
mov eax, dword [esi]
mov edx, dword [esi + 4]
shl edi, 0x14
or ecx, edi
mov dword [esp + 0x834], 0
or ecx, 0xff802000
mov dword [esp + 0x848], 0xff0000
shl ecx, 8
or ecx, dword [esp + 0x78]
or ecx, 0x70005
mov dword [eax + edx*4], ecx
lea eax, [esp + 0x830]
inc dword [esi + 4]
mov ecx, esi
push eax
call fcn.10076cc0
lea eax, [esp + 0x840]
jmp 0x10086ca9
sub esp, 8
mov esi, dword [esp + 0x18]
xor eax, eax
mov dword [esp + 0x858], 0
mov word [esp + 0x876], ax
mov ecx, ebx
lea eax, [esp + 0x6c]
mov dword [esp + 0x864], 2
push eax
lea eax, [esp + 0xc4]
mov dword [esp + 0x864], 0xe40000
push eax
lea eax, [esp + 0x860]
mov dword [esp + 0x864], 0
push eax
lea eax, [esp + 0x874]
mov dword [esp + 0x874], 0
push eax
lea eax, [esp + 0x2c]
mov word [esp + 0x884], si
push eax
lea eax, [esp + 0x5c]
mov dword [esp + 0x884], 0xe40000
push eax
lea eax, [esp + 0x4c]
mov dword [esp + 0x884], 0
push eax
push 0
push dword [esp + 0x78]
lea eax, [esp + 0x80]
push eax
lea eax, [esp + 0xbc]
push eax
call fcn.10083f40
sub esp, 8
mov dword [esp + 0x878], 0
xor eax, eax
mov dword [esp + 0x884], 2
mov word [esp + 0x896], ax
mov ecx, ebx
lea eax, [esp + 0x84]
mov dword [esp + 0x880], 0xe40000
push eax
lea eax, [esp + 0x104]
mov dword [esp + 0x880], 0
push eax
lea eax, [esp + 0x880]
mov dword [esp + 0x890], 0
push eax
lea eax, [esp + 0x894]
mov word [esp + 0x8a0], si
push eax
lea eax, [esp + 0x2c]
mov dword [esp + 0x8a0], 0xe40000
push eax
lea eax, [esp + 0x5c]
mov dword [esp + 0x8a0], 0
push eax
lea eax, [esp + 0x4c]
push eax
push 0
push dword [esp + 0x9c]
lea eax, [esp + 0x80]
push eax
lea eax, [esp + 0xbc]
push eax
call fcn.10083f40
lea eax, [esp + 0x64]
mov ecx, ebx
push eax
lea eax, [esp + 0x80]
push eax
lea eax, [esp + 0x100]
push eax
call fcn.10083e50
lea eax, [esp + 0x54]
push eax
lea eax, [esp + 0x80]
push eax
lea eax, [esp + 0x100]
push eax
mov ecx, ebx
call fcn.10083e50
mov esi, dword [ebx + 0xa0]
mov eax, dword [esp + 0x7c]
mov dword [esp + 0x890], eax
movzx eax, word [esp + 0x88]
mov ecx, dword [esi + 4]
mov word [esp + 0x89c], ax
mov eax, dword [esp + 0x84]
mov dword [esp + 0x898], eax
movzx eax, word [esp + 0x8a]
mov word [esp + 0x89e], ax
mov eax, dword [esi]
mov dword [esp + 0x894], 0x1000000
mov dword [eax + ecx*4], 2
mov eax, dword [esi + 4]
mov dword [esi + 8], eax
inc dword [esi + 4]
mov ecx, dword [esi + 4]
mov eax, dword [esi]
mov dword [eax + ecx*4], 0x80270005
lea eax, [esp + 0x64]
inc dword [esi + 4]
mov ecx, esi
push eax
call fcn.10076cc0
lea eax, [esp + 0x890]
mov ecx, esi
push eax
call fcn.10076cc0
mov ecx, esi
call fcn.10076d60
mov esi, dword [ebx + 0xa0]
mov eax, dword [esp + 0x54]
mov dword [esp + 0x8b0], eax
movzx eax, word [esp + 0x60]
mov ecx, dword [esi + 4]
mov word [esp + 0x8bc], ax
mov eax, dword [esp + 0x58]
mov dword [esp + 0x8b4], eax
movzx eax, word [esp + 0x62]
mov word [esp + 0x8be], ax
mov eax, dword [esi]
mov dword [esp + 0x8a0], 0
mov dword [esp + 0x8ac], 5
mov dword [esp + 0x8a8], 0xe40000
mov dword [eax + ecx*4], 4
mov ecx, edi
mov eax, dword [esi + 4]
and ecx, 0x18
mov dword [esi + 8], eax
inc dword [esi + 4]
mov eax, dword [esi]
mov edx, dword [esi + 4]
shl edi, 0x14
or ecx, edi
mov dword [esp + 0x8a4], 0
or ecx, 0xff802000
mov dword [esp + 0x8b8], 0xff0000
shl ecx, 8
or ecx, dword [esp + 0x78]
or ecx, 0x70005
mov dword [eax + edx*4], ecx
lea eax, [esp + 0x8a0]
inc dword [esi + 4]
mov ecx, esi
push eax
call fcn.10076cc0
lea eax, [esp + 0x8b0]
jmp 0x10086ca9
sub esp, 8
mov esi, dword [esp + 0x18]
xor eax, eax
mov dword [esp + 0x8c8], 0
mov word [esp + 0x8e6], ax
mov ecx, ebx
lea eax, [esp + 0x6c]
mov dword [esp + 0x8d4], 2
push eax
lea eax, [esp + 0xc4]
mov dword [esp + 0x8d4], 0xe40000
push eax
lea eax, [esp + 0x8d0]
mov dword [esp + 0x8d4], 0
push eax
lea eax, [esp + 0x8e4]
mov dword [esp + 0x8e4], 0
push eax
lea eax, [esp + 0x2c]
mov word [esp + 0x8f4], si
push eax
lea eax, [esp + 0x5c]
mov dword [esp + 0x8f4], 0xe40000
push eax
lea eax, [esp + 0x4c]
mov dword [esp + 0x8f4], 0
push eax
push 0
push dword [esp + 0x78]
lea eax, [esp + 0x80]
push eax
lea eax, [esp + 0xbc]
push eax
call fcn.10083f40
sub esp, 8
mov dword [esp + 0x8e8], 0
xor eax, eax
mov dword [esp + 0x8f4], 2
mov word [esp + 0x906], ax
mov ecx, ebx
lea eax, [esp + 0x84]
mov dword [esp + 0x8f0], 0xe40000
push eax
lea eax, [esp + 0x104]
mov dword [esp + 0x8f0], 0
push eax
lea eax, [esp + 0x8f0]
mov dword [esp + 0x900], 0
push eax
lea eax, [esp + 0x904]
mov word [esp + 0x910], si
push eax
lea eax, [esp + 0x2c]
mov dword [esp + 0x910], 0xe40000
push eax
lea eax, [esp + 0x5c]
mov dword [esp + 0x910], 0
push eax
lea eax, [esp + 0x4c]
push eax
push 0
push dword [esp + 0x9c]
lea eax, [esp + 0x80]
push eax
lea eax, [esp + 0xbc]
push eax
call fcn.10083f40
lea eax, [esp + 0x7c]
mov ecx, ebx
push eax
lea eax, [esp + 0x68]
push eax
lea eax, [esp + 0xc0]
push eax
call fcn.10083e50
push 3
push 5
lea ecx, [esp + 0xb4c]
call fcn.100767d0
push 3
push esi
lea ecx, [esp + 0xb40]
call fcn.100767d0
movzx eax, word [esp + 0xb38]
mov ecx, dword [ebx + 0xa4]
mov word [esp + 0x90c], ax
mov eax, dword [esp + 0xb40]
mov dword [esp + 0x908], eax
xor eax, eax
mov word [esp + 0x90e], ax
lea eax, [ecx + 0x1c]
push 4
push eax
lea eax, [esp + 0xc68]
mov dword [esp + 0x908], 0
push eax
mov dword [esp + 0x910], 0x1000000
call fcn.100778f0
mov esi, dword [ebx + 0xa0]
mov ecx, dword [esi + 4]
mov eax, dword [esi]
mov dword [eax + ecx*4], 2
mov eax, dword [esi + 4]
mov ecx, dword [esp + 0xb44]
or ecx, dword [esp + 0xb48]
mov dword [esi + 8], eax
or ecx, 0x80200000
inc dword [esi + 4]
mov eax, dword [esi]
mov edx, dword [esi + 4]
mov dword [eax + edx*4], ecx
lea eax, [esp + 0xc60]
inc dword [esi + 4]
mov ecx, esi
push eax
call fcn.10076cc0
lea eax, [esp + 0x900]
mov ecx, esi
push eax
call fcn.10076cc0
mov ecx, esi
call fcn.10076d60
push 3
push 5
lea ecx, [esp + 0xaf8]
call fcn.100767d0
mov esi, dword [ebx + 0xa0]
movzx eax, word [esp + 0xaf0]
mov word [esp + 0x91c], ax
mov eax, dword [esp + 0xaf8]
mov ecx, dword [esi + 4]
mov dword [esp + 0x918], eax
xor eax, eax
mov word [esp + 0x91e], ax
mov eax, dword [esi]
mov dword [esp + 0x910], 0
mov dword [esp + 0x914], 0
mov dword [eax + ecx*4], 4
mov ecx, edi
mov eax, dword [esi + 4]
and ecx, 0x18
mov dword [esi + 8], eax
inc dword [esi + 4]
mov eax, dword [esi]
mov edx, dword [esi + 4]
shl edi, 0x14
or ecx, edi
or ecx, 0xff802000
shl ecx, 8
or ecx, dword [esp + 0x78]
or ecx, 0x70005
mov dword [eax + edx*4], ecx
lea eax, [esp + 0x910]
inc dword [esi + 4]
mov ecx, esi
push eax
call fcn.10076cc0
lea eax, [esp + 0x7c]
mov ecx, esi
push eax
call fcn.10076cc0
lea eax, [esp + 0x64]
push eax
mov ecx, esi
call fcn.10076cc0
mov ecx, esi
call fcn.10076d60
jmp case.0x100868ba.22
mov eax, dword [esp + 0x10]
mov word [esp + 0x93c], ax
xor eax, eax
sub esp, 8
mov word [esp + 0x946], ax
lea eax, [esp + 0x6c]
mov dword [esp + 0x928], 0
mov dword [esp + 0x934], 2
mov dword [esp + 0x930], 0xe40000
push eax
lea eax, [esp + 0xc4]
mov dword [esp + 0x930], 0
push eax
lea eax, [esp + 0x930]
mov dword [esp + 0x940], 0
push eax
mov dword [esp + 0x94c], 0xe40000
lea eax, [esp + 0x944]
mov dword [esp + 0x948], 0
jmp 0x10086943
sub esp, 8
mov esi, dword [esp + 0x18]
xor eax, eax
mov dword [esp + 0x948], 0
mov word [esp + 0x966], ax
mov ecx, ebx
lea eax, [esp + 0x6c]
mov dword [esp + 0x954], 2
push eax
lea eax, [esp + 0xc4]
mov dword [esp + 0x954], 0xe40000
push eax
lea eax, [esp + 0x950]
mov dword [esp + 0x954], 0
push eax
lea eax, [esp + 0x964]
mov dword [esp + 0x964], 0
push eax
lea eax, [esp + 0x2c]
mov word [esp + 0x974], si
push eax
lea eax, [esp + 0x5c]
mov dword [esp + 0x974], 0xe40000
push eax
lea eax, [esp + 0x4c]
mov dword [esp + 0x974], 0
push eax
push 0
push dword [esp + 0x78]
lea eax, [esp + 0x80]
push eax
lea eax, [esp + 0xbc]
push eax
call fcn.10083f40
sub esp, 8
mov dword [esp + 0x968], 0
xor eax, eax
mov dword [esp + 0x974], 2
mov word [esp + 0x986], ax
mov ecx, ebx
lea eax, [esp + 0x84]
mov dword [esp + 0x970], 0xe40000
push eax
lea eax, [esp + 0x104]
mov dword [esp + 0x970], 0
push eax
lea eax, [esp + 0x970]
mov dword [esp + 0x980], 0
push eax
lea eax, [esp + 0x984]
mov word [esp + 0x990], si
push eax
lea eax, [esp + 0x2c]
mov dword [esp + 0x990], 0xe40000
push eax
lea eax, [esp + 0x5c]
mov dword [esp + 0x990], 0
push eax
lea eax, [esp + 0x4c]
push eax
push 0
push dword [esp + 0x9c]
lea eax, [esp + 0x80]
push eax
lea eax, [esp + 0xbc]
push eax
call fcn.10083f40
lea eax, [esp + 0x7c]
mov ecx, ebx
push eax
lea eax, [esp + 0x68]
push eax
lea eax, [esp + 0xc0]
push eax
call fcn.10083e50
mov eax, dword [esp + 0x64]
mov dword [esp + 0x980], eax
movzx eax, word [esp + 0x70]
mov word [esp + 0x98c], ax
mov eax, dword [esp + 0x68]
mov dword [esp + 0x988], 0xff0000
mov esi, dword [ebx + 0xa0]
mov dword [esp + 0x984], eax
movzx eax, word [esp + 0x72]
mov word [esp + 0x98e], ax
mov ecx, dword [esi + 4]
mov eax, dword [esi]
mov dword [eax + ecx*4], 4
mov ecx, edi
mov eax, dword [esi + 4]
and ecx, 0x18
shl edi, 0x14
or ecx, edi
mov dword [esi + 8], eax
inc dword [esi + 4]
or ecx, 0xff802000
mov eax, dword [esi]
mov edx, dword [esi + 4]
shl ecx, 8
or ecx, dword [esp + 0x78]
or ecx, 0x70005
mov dword [eax + edx*4], ecx
lea eax, [esp + 0x980]
inc dword [esi + 4]
mov ecx, esi
push eax
call fcn.10076cc0
lea eax, [esp + 0x7c]
mov ecx, esi
push eax
call fcn.10076cc0
lea eax, [esp + 0x64]
mov ecx, esi
push eax
call fcn.10076cc0
mov ecx, esi
call fcn.10076d60
jmp case.0x100868ba.22
sub esp, 8
mov esi, dword [esp + 0x18]
xor eax, eax
mov dword [esp + 0x998], 0
mov word [esp + 0x9b6], ax
mov ecx, ebx
lea eax, [esp + 0x6c]
mov dword [esp + 0x9a4], 2
push eax
lea eax, [esp + 0xc4]
mov dword [esp + 0x9a4], 0xe40000
push eax
lea eax, [esp + 0x9a0]
mov dword [esp + 0x9a4], 0
push eax
lea eax, [esp + 0x9b4]
mov dword [esp + 0x9b4], 0
push eax
lea eax, [esp + 0x2c]
mov word [esp + 0x9c4], si
push eax
lea eax, [esp + 0x5c]
mov dword [esp + 0x9c4], 0xe40000
push eax
lea eax, [esp + 0x4c]
mov dword [esp + 0x9c4], 0
push eax
push 0
push dword [esp + 0x78]
lea eax, [esp + 0x80]
push eax
lea eax, [esp + 0xbc]
push eax
call fcn.10083f40
sub esp, 8
mov dword [esp + 0x9b8], 0
xor eax, eax
mov dword [esp + 0x9c4], 2
mov word [esp + 0x9d6], ax
mov ecx, ebx
lea eax, [esp + 0x84]
mov dword [esp + 0x9c0], 0xe40000
push eax
lea eax, [esp + 0x104]
mov dword [esp + 0x9c0], 0
push eax
lea eax, [esp + 0x9c0]
mov dword [esp + 0x9d0], 0
push eax
lea eax, [esp + 0x9d4]
mov word [esp + 0x9e0], si
push eax
lea eax, [esp + 0x2c]
mov dword [esp + 0x9e0], 0xe40000
push eax
lea eax, [esp + 0x5c]
mov dword [esp + 0x9e0], 0
push eax
lea eax, [esp + 0x4c]
push eax
push 0
push dword [esp + 0x9c]
lea eax, [esp + 0x80]
push eax
lea eax, [esp + 0xbc]
push eax
call fcn.10083f40
lea eax, [esp + 0x7c]
mov ecx, ebx
push eax
lea eax, [esp + 0x68]
push eax
lea eax, [esp + 0xc0]
push eax
call fcn.10083e50
mov eax, dword [esp + 0x64]
mov dword [esp + 0x9d0], eax
movzx eax, word [esp + 0x70]
mov word [esp + 0x9dc], ax
mov eax, dword [esp + 0x68]
mov dword [esp + 0x9d8], 0xff0000
mov esi, dword [ebx + 0xa0]
mov dword [esp + 0x9d4], eax
movzx eax, word [esp + 0x72]
mov word [esp + 0x9de], ax
mov ecx, dword [esi + 4]
mov eax, dword [esi]
mov dword [eax + ecx*4], 4
mov ecx, edi
mov eax, dword [esi + 4]
and ecx, 0x18
mov dword [esi + 8], eax
inc dword [esi + 4]
mov eax, dword [esi]
mov edx, dword [esi + 4]
shl edi, 0x14
or ecx, edi
or ecx, 0xff802000
shl ecx, 8
or ecx, dword [esp + 0x78]
or ecx, 0x70005
mov dword [eax + edx*4], ecx
lea eax, [esp + 0x7c]
inc dword [esi + 4]
mov ecx, esi
push eax
call fcn.10076cc0
lea eax, [esp + 0x64]
mov ecx, esi
push eax
call fcn.10076cc0
lea eax, [esp + 0x9d0]
mov ecx, esi
push eax
call fcn.10076cc0
mov ecx, esi
call fcn.10076d60
jmp case.0x100868ba.22
sub esp, 8
mov esi, dword [esp + 0x18]
xor eax, eax
mov dword [esp + 0x9e8], 0
mov word [esp + 0xa06], ax
mov ecx, ebx
lea eax, [esp + 0x6c]
mov dword [esp + 0x9f4], 2
push eax
lea eax, [esp + 0xc4]
mov dword [esp + 0x9f4], 0xe40000
push eax
lea eax, [esp + 0x9f0]
mov dword [esp + 0x9f4], 0
push eax
lea eax, [esp + 0xa04]
mov dword [esp + 0xa04], 0
push eax
lea eax, [esp + 0x2c]
mov word [esp + 0xa14], si
push eax
lea eax, [esp + 0x5c]
mov dword [esp + 0xa14], 0xe40000
push eax
lea eax, [esp + 0x4c]
mov dword [esp + 0xa14], 0
push eax
push 0
push dword [esp + 0x78]
lea eax, [esp + 0x80]
push eax
lea eax, [esp + 0xbc]
push eax
call fcn.10083f40
sub esp, 8
mov dword [esp + 0xa08], 0
xor eax, eax
mov dword [esp + 0xa14], 2
mov word [esp + 0xa26], ax
mov ecx, ebx
lea eax, [esp + 0x84]
mov dword [esp + 0xa10], 0xe40000
push eax
lea eax, [esp + 0x104]
mov dword [esp + 0xa10], 0
push eax
lea eax, [esp + 0xa10]
mov dword [esp + 0xa20], 0
push eax
lea eax, [esp + 0xa24]
mov word [esp + 0xa30], si
push eax
lea eax, [esp + 0x2c]
mov dword [esp + 0xa30], 0xe40000
push eax
lea eax, [esp + 0x5c]
mov dword [esp + 0xa30], 0
push eax
lea eax, [esp + 0x4c]
push eax
push 0
push dword [esp + 0x9c]
lea eax, [esp + 0x80]
push eax
lea eax, [esp + 0xbc]
push eax
call fcn.10083f40
mov ecx, dword [ebx + 0xa4]
push 4
lea eax, [ecx + 0x1c]
push eax
lea eax, [esp + 0xc78]
push eax
call fcn.100778f0
lea eax, [esp + 0xc70]
mov ecx, ebx
push eax
lea eax, [esp + 0x68]
push eax
lea eax, [esp + 0xc0]
push eax
call fcn.10083e50
lea eax, [esp + 0x7c]
mov ecx, ebx
push eax
lea eax, [esp + 0x68]
push eax
lea eax, [esp + 0xc0]
push eax
call fcn.10083e50
push 3
push 5
lea ecx, [esp + 0xb70]
call fcn.100767d0
mov eax, dword [esp + 0x64]
mov ecx, dword [ebx + 0xa4]
mov dword [esp + 0xa20], eax
movzx eax, word [esp + 0x70]
mov word [esp + 0xa2c], ax
movzx eax, word [esp + 0x72]
mov word [esp + 0xa2e], ax
lea eax, [ecx + 0x1c]
push 4
push eax
lea eax, [esp + 0xc88]
mov dword [esp + 0xa30], 0xff0000
push eax
mov dword [esp + 0xa30], 0x1000000
call fcn.100778f0
mov esi, dword [ebx + 0xa0]
mov ecx, dword [esi + 4]
mov eax, dword [esi]
mov dword [eax + ecx*4], 2
mov eax, dword [esi + 4]
mov ecx, dword [esp + 0xb68]
or ecx, dword [esp + 0xb6c]
mov dword [esi + 8], eax
or ecx, 0x80200000
inc dword [esi + 4]
mov eax, dword [esi]
mov edx, dword [esi + 4]
mov dword [eax + edx*4], ecx
lea eax, [esp + 0xc80]
inc dword [esi + 4]
mov ecx, esi
push eax
call fcn.10076cc0
lea eax, [esp + 0xa20]
mov ecx, esi
push eax
call fcn.10076cc0
mov ecx, esi
call fcn.10076d60
push 3
push 5
lea ecx, [esp + 0xb64]
call fcn.100767d0
mov esi, dword [ebx + 0xa0]
movzx eax, word [esp + 0xb5c]
mov word [esp + 0xa3c], ax
mov eax, dword [esp + 0xb64]
mov ecx, dword [esi + 4]
mov dword [esp + 0xa38], eax
xor eax, eax
mov word [esp + 0xa3e], ax
mov eax, dword [esi]
mov dword [esp + 0xa30], 0
mov dword [esp + 0xa34], 0
mov dword [eax + ecx*4], 4
mov ecx, edi
mov eax, dword [esi + 4]
and ecx, 0x18
shl edi, 0x14
or ecx, edi
mov dword [esi + 8], eax
inc dword [esi + 4]
or ecx, 0xff802000
mov edx, dword [esi + 4]
mov eax, dword [esi]
shl ecx, 8
or ecx, dword [esp + 0x78]
or ecx, 0x70005
mov dword [eax + edx*4], ecx
lea eax, [esp + 0xa30]
jmp 0x10088fc3
sub esp, 8
mov esi, dword [esp + 0x18]
xor eax, eax
mov dword [esp + 0xa48], 0
mov word [esp + 0xa66], ax
mov ecx, ebx
lea eax, [esp + 0x6c]
mov dword [esp + 0xa54], 2
push eax
lea eax, [esp + 0xc4]
mov dword [esp + 0xa54], 0xe40000
push eax
lea eax, [esp + 0xa50]
mov dword [esp + 0xa54], 0
push eax
lea eax, [esp + 0xa64]
mov dword [esp + 0xa64], 0
push eax
lea eax, [esp + 0x2c]
mov word [esp + 0xa74], si
push eax
lea eax, [esp + 0x5c]
mov dword [esp + 0xa74], 0xe40000
push eax
lea eax, [esp + 0x4c]
mov dword [esp + 0xa74], 0
push eax
push 0
push dword [esp + 0x78]
lea eax, [esp + 0x80]
push eax
lea eax, [esp + 0xbc]
push eax
call fcn.10083f40
sub esp, 8
mov dword [esp + 0xa68], 0
xor eax, eax
mov dword [esp + 0xa74], 2
mov word [esp + 0xa86], ax
mov ecx, ebx
lea eax, [esp + 0x84]
mov dword [esp + 0xa70], 0xe40000
push eax
lea eax, [esp + 0x104]
mov dword [esp + 0xa70], 0
push eax
lea eax, [esp + 0xa70]
mov dword [esp + 0xa80], 0
push eax
lea eax, [esp + 0xa84]
mov word [esp + 0xa90], si
push eax
lea eax, [esp + 0x2c]
mov dword [esp + 0xa90], 0xe40000
push eax
lea eax, [esp + 0x5c]
mov dword [esp + 0xa90], 0
push eax
lea eax, [esp + 0x4c]
push eax
push 0
push dword [esp + 0x9c]
lea eax, [esp + 0x80]
push eax
lea eax, [esp + 0xbc]
push eax
call fcn.10083f40
mov ecx, dword [ebx + 0xa4]
push 4
lea eax, [ecx + 0x1c]
push eax
lea eax, [esp + 0xc98]
push eax
call fcn.100778f0
lea eax, [esp + 0xc90]
mov ecx, ebx
push eax
lea eax, [esp + 0x68]
push eax
lea eax, [esp + 0xc0]
push eax
call fcn.10083e50
lea eax, [esp + 0x7c]
mov ecx, ebx
push eax
lea eax, [esp + 0x68]
push eax
lea eax, [esp + 0xc0]
push eax
call fcn.10083e50
mov esi, dword [esp + 0x188]
mov eax, dword [esp + 0x64]
mov bx, word [esp + 0x70]
mov di, word [esp + 0x72]
mov ecx, dword [esi + 0xa4]
mov dword [esp + 0xa80], eax
mov eax, dword [esp + 0x6c]
mov dword [esp + 0xa88], eax
push 4
lea eax, [ecx + 0x1c]
mov word [esp + 0xa90], bx
push eax
lea eax, [esp + 0xca8]
mov dword [esp + 0xa8c], 0x1000000
push eax
mov word [esp + 0xa9a], di
call fcn.100778f0
mov esi, dword [esi + 0xa0]
mov ecx, dword [esi + 4]
mov eax, dword [esi]
mov dword [eax + ecx*4], 2
mov eax, dword [esi + 4]
mov dword [esi + 8], eax
inc dword [esi + 4]
mov ecx, dword [esi + 4]
mov eax, dword [esi]
mov dword [eax + ecx*4], 0x80270005
lea eax, [esp + 0xca0]
inc dword [esi + 4]
mov ecx, esi
push eax
call fcn.10076cc0
lea eax, [esp + 0xa80]
mov ecx, esi
push eax
call fcn.10076cc0
mov ecx, esi
call fcn.10076d60
mov eax, dword [esp + 0x64]
mov word [esp + 0xaac], bx
mov ebx, dword [esp + 0x188]
mov dword [esp + 0xaa0], eax
mov eax, dword [esp + 0x68]
mov dword [esp + 0xaa4], eax
mov esi, dword [ebx + 0xa0]
mov dword [esp + 0xa90], 0
mov dword [esp + 0xa9c], 5
mov dword [esp + 0xa98], 0xe40000
mov ecx, dword [esi + 4]
mov eax, dword [esi]
mov dword [esp + 0xa94], 0
mov dword [esp + 0xaa8], 0xff0000
mov word [esp + 0xaae], di
mov dword [eax + ecx*4], 4
mov eax, dword [esi + 4]
mov dword [esi + 8], eax
mov eax, dword [esp + 0x108]
mov ecx, eax
inc dword [esi + 4]
and ecx, 0x18
mov edx, dword [esi + 4]
shl eax, 0x14
or ecx, eax
mov eax, dword [esi]
or ecx, 0xff802000
shl ecx, 8
or ecx, dword [esp + 0x78]
or ecx, 0x70005
mov dword [eax + edx*4], ecx
lea eax, [esp + 0xa90]
inc dword [esi + 4]
push eax
mov ecx, esi
call fcn.10076cc0
lea eax, [esp + 0x7c]
mov ecx, esi
push eax
call fcn.10076cc0
lea eax, [esp + 0xaa0]
mov ecx, esi
push eax
call fcn.10076cc0
mov ecx, esi
call fcn.10076d60
jmp case.0x100868ba.22
sub esp, 8
mov esi, dword [esp + 0x18]
xor eax, eax
mov dword [esp + 0xab8], 0
mov word [esp + 0x2a6], ax
mov ecx, ebx
lea eax, [esp + 0x6c]
mov dword [esp + 0xac4], 2
push eax
lea eax, [esp + 0xc4]
mov dword [esp + 0xac4], 0xe40000
push eax
lea eax, [esp + 0xac0]
mov dword [esp + 0xac4], 0
push eax
lea eax, [esp + 0x2a4]
mov dword [esp + 0x2a4], 0
push eax
lea eax, [esp + 0x2c]
mov word [esp + 0x2b4], si
push eax
lea eax, [esp + 0x5c]
mov dword [esp + 0x2b4], 0xe40000
push eax
lea eax, [esp + 0x4c]
mov dword [esp + 0x2b4], 0
push eax
push 0
push dword [esp + 0x78]
lea eax, [esp + 0x80]
push eax
lea eax, [esp + 0xbc]
push eax
call fcn.10083f40
sub esp, 8
mov dword [esp + 0x2a8], 0
xor eax, eax
mov dword [esp + 0x2b4], 2
mov word [esp + 0x2c6], ax
mov ecx, ebx
lea eax, [esp + 0x84]
mov dword [esp + 0x2b0], 0xe40000
push eax
lea eax, [esp + 0x104]
mov dword [esp + 0x2b0], 0
push eax
lea eax, [esp + 0x2b0]
mov dword [esp + 0x2c0], 0
push eax
lea eax, [esp + 0x2c4]
mov word [esp + 0x2d0], si
push eax
lea eax, [esp + 0x2c]
mov dword [esp + 0x2d0], 0xe40000
push eax
lea eax, [esp + 0x5c]
mov dword [esp + 0x2d0], 0
push eax
lea eax, [esp + 0x4c]
push eax
push 0
push dword [esp + 0x9c]
lea eax, [esp + 0x80]
push eax
lea eax, [esp + 0xbc]
push eax
call fcn.10083f40
mov ecx, dword [ebx + 0xa4]
lea eax, [esp + 0xcb0]
push 4
push ecx
push eax
call fcn.100778f0
lea eax, [esp + 0xcb0]
mov ecx, ebx
push eax
lea eax, [esp + 0x68]
push eax
lea eax, [esp + 0xc0]
push eax
call fcn.10083e50
mov ecx, dword [ebx + 0xa4]
lea eax, [esp + 0xcc0]
push 4
push ecx
push eax
call fcn.100778f0
lea eax, [esp + 0xcc0]
mov ecx, ebx
push eax
lea eax, [esp + 0x80]
push eax
lea eax, [esp + 0x100]
push eax
call fcn.10083e50
mov ecx, dword [ebx + 0xa4]
lea eax, [esp + 0x1ec]
push 4
push ecx
push eax
call fcn.100778f0
mov esi, dword [ebx + 0xa0]
mov eax, dword [esp + 0x1ec]
mov dword [esp + 0x2c0], eax
movzx eax, word [esp + 0x1f8]
mov ecx, dword [esi + 4]
mov word [esp + 0x2cc], ax
mov eax, dword [esp + 0x1f4]
mov dword [esp + 0x2c8], eax
movzx eax, word [esp + 0x1fa]
mov word [esp + 0x2ce], ax
mov eax, dword [esi]
mov dword [esp + 0x2c4], 0x1000000
mov dword [eax + ecx*4], 2
mov eax, dword [esi + 4]
mov dword [esi + 8], eax
inc dword [esi + 4]
mov ecx, dword [esi + 4]
mov eax, dword [esi]
mov dword [eax + ecx*4], 0x80270007
lea eax, [esp + 0x64]
inc dword [esi + 4]
mov ecx, esi
push eax
call fcn.10076cc0
lea eax, [esp + 0x2c0]
mov ecx, esi
push eax
call fcn.10076cc0
mov ecx, esi
call fcn.10076d60
push 6
push 7
lea ecx, [esp + 0xb58]
mov dword [esp + 0x2d8], 0
mov dword [esp + 0x2e4], 7
mov dword [esp + 0x2e0], 0xe40000
mov dword [esp + 0x2dc], 0
call fcn.100767d0
mov ecx, dword [ebx + 0xa4]
push 4
lea eax, [ecx + 8]
push eax
lea eax, [esp + 0xcd8]
push eax
call fcn.100778f0
mov esi, dword [ebx + 0xa0]
mov ecx, dword [esi + 4]
mov eax, dword [esi]
mov dword [eax + ecx*4], 5
mov eax, dword [esi + 4]
mov ecx, dword [esp + 0xb50]
or ecx, dword [esp + 0xb54]
mov dword [esi + 8], eax
or ecx, 0x80200000
inc dword [esi + 4]
mov eax, dword [esi]
mov edx, dword [esi + 4]
mov dword [eax + edx*4], ecx
lea eax, [esp + 0x2d0]
inc dword [esi + 4]
push eax
mov ecx, esi
call fcn.10076cc0
lea eax, [esp + 0xcd0]
mov ecx, esi
push eax
call fcn.10076cc0
mov ecx, esi
call fcn.10076d60
push 6
push 8
lea ecx, [esp + 0x270]
call fcn.100767d0
mov ecx, dword [ebx + 0xa4]
lea eax, [esp + 0x254]
push 4
push ecx
push eax
call fcn.100778f0
mov esi, dword [ebx + 0xa0]
mov eax, dword [esp + 0x254]
mov dword [esp + 0x2e0], eax
movzx eax, word [esp + 0x260]
mov ecx, dword [esi + 4]
mov word [esp + 0x2ec], ax
mov eax, dword [esp + 0x25c]
mov dword [esp + 0x2e8], eax
movzx eax, word [esp + 0x262]
mov word [esp + 0x2ee], ax
mov eax, dword [esi]
mov dword [esp + 0x2e4], 0x1000000
mov dword [eax + ecx*4], 2
mov ecx, esi
mov eax, dword [esi + 4]
mov dword [esi + 8], eax
mov eax, dword [esp + 0x268]
or eax, dword [esp + 0x26c]
inc dword [esi + 4]
or eax, 0x200000
push eax
call fcn.10076da0
lea eax, [esp + 0x7c]
push eax
call fcn.10076cc0
lea eax, [esp + 0x2e0]
mov ecx, esi
push eax
call fcn.10076cc0
mov ecx, esi
call fcn.10076d60
lea eax, [esp + 0xce0]
push eax
lea ecx, [esp + 0xfc]
call fcn.100768e0
lea eax, [esp + 0xcf0]
push eax
lea ecx, [esp + 0xbc]
call fcn.100768e0
mov ecx, dword [ebx + 0xa0]
lea eax, [esp + 0xce0]
push eax
lea eax, [esp + 0xcf4]
push eax
lea eax, [esp + 0x27c]
push eax
push 8
call fcn.10083430
jmp 0x1008ba7f
lea eax, [esp + 0xd00]
push eax
lea ecx, [esp + 0xb0]
call fcn.100768e0
lea eax, [esp + 0xd10]
push eax
lea ecx, [esp + 0xa0]
call fcn.100768e0
sub esp, 8
lea eax, [esp + 0x23c]
mov ecx, ebx
push eax
lea eax, [esp + 0x19c]
push eax
lea eax, [esp + 0xd10]
push eax
lea eax, [esp + 0xd24]
push eax
lea eax, [esp + 0x2c]
push eax
lea eax, [esp + 0x5c]
push eax
lea eax, [esp + 0x4c]
push eax
push 0
push dword [esp + 0x1ac]
lea eax, [esp + 0x80]
push eax
lea eax, [esp + 0xbc]
push eax
call fcn.10083f40
lea eax, [esp + 0xd20]
push eax
lea ecx, [esp + 0xb0]
call fcn.100768e0
lea eax, [esp + 0xd30]
push eax
lea ecx, [esp + 0xa0]
call fcn.100768e0
sub esp, 8
lea eax, [esp + 0x6c]
mov ecx, ebx
push eax
lea eax, [esp + 0xc4]
push eax
lea eax, [esp + 0xd30]
push eax
lea eax, [esp + 0xd44]
push eax
lea eax, [esp + 0x2c]
push eax
lea eax, [esp + 0x5c]
push eax
lea eax, [esp + 0x4c]
push eax
push 0
push dword [esp + 0x78]
lea eax, [esp + 0x80]
push eax
lea eax, [esp + 0xbc]
push eax
call fcn.10083f40
lea eax, [esp + 0xd40]
push eax
lea ecx, [esp + 0xb0]
call fcn.100768e0
lea eax, [esp + 0xd50]
push eax
lea ecx, [esp + 0xa0]
call fcn.100768e0
sub esp, 8
lea eax, [esp + 0x84]
push eax
lea eax, [esp + 0x104]
push eax
lea eax, [esp + 0xd50]
push eax
lea eax, [esp + 0xd64]
push eax
lea eax, [esp + 0x2c]
push eax
lea eax, [esp + 0x5c]
mov ecx, ebx
push eax
lea eax, [esp + 0x4c]
push eax
push 0
push dword [esp + 0x9c]
lea eax, [esp + 0x80]
push eax
lea eax, [esp + 0xbc]
push eax
call fcn.10083f40
lea eax, [esp + 0x64]
mov ecx, ebx
push eax
lea eax, [esp + 0x238]
push eax
lea eax, [esp + 0x198]
push eax
call fcn.10083e50
lea eax, [esp + 0x7c]
mov ecx, ebx
push eax
lea eax, [esp + 0x238]
push eax
lea eax, [esp + 0x198]
push eax
call fcn.10083e50
lea eax, [esp + 0x7c]
mov ecx, ebx
push eax
lea eax, [esp + 0x68]
push eax
lea eax, [esp + 0xc0]
push eax
call fcn.10083e50
mov ecx, dword [ebx + 0xa0]
lea eax, [esp + 0x234]
push eax
lea eax, [esp + 0x80]
push eax
lea eax, [esp + 0x6c]
push eax
lea eax, [esp + 0x1d8]
push eax
push 4
call fcn.100834c0
jmp case.0x100868ba.22
lea eax, [esp + 0xd60]
push eax
lea ecx, [esp + 0xb0]
call fcn.100768e0
lea eax, [esp + 0xd70]
push eax
lea ecx, [esp + 0xa0]
call fcn.100768e0
sub esp, 8
lea eax, [esp + 0x23c]
mov ecx, ebx
push eax
lea eax, [esp + 0x19c]
push eax
lea eax, [esp + 0xd70]
push eax
lea eax, [esp + 0xd84]
push eax
lea eax, [esp + 0x2c]
push eax
lea eax, [esp + 0x5c]
push eax
lea eax, [esp + 0x4c]
push eax
push 0
push dword [esp + 0x1ac]
lea eax, [esp + 0x80]
push eax
lea eax, [esp + 0xbc]
push eax
call fcn.10083f40
lea eax, [esp + 0xc10]
push eax
lea ecx, [esp + 0xb0]
call fcn.100768e0
lea eax, [esp + 0xd80]
push eax
lea ecx, [esp + 0xa0]
call fcn.100768e0
sub esp, 8
lea eax, [esp + 0x6c]
mov ecx, ebx
push eax
lea eax, [esp + 0xc4]
push eax
lea eax, [esp + 0xc20]
push eax
lea eax, [esp + 0xd94]
push eax
lea eax, [esp + 0x2c]
push eax
lea eax, [esp + 0x5c]
push eax
lea eax, [esp + 0x4c]
push eax
push 0
push dword [esp + 0x78]
lea eax, [esp + 0x80]
push eax
lea eax, [esp + 0xbc]
push eax
call fcn.10083f40
lea eax, [esp + 0xd90]
push eax
lea ecx, [esp + 0xb0]
call fcn.100768e0
lea eax, [esp + 0xda0]
push eax
lea ecx, [esp + 0xa0]
call fcn.100768e0
sub esp, 8
lea eax, [esp + 0x84]
push eax
lea eax, [esp + 0x104]
push eax
lea eax, [esp + 0xda0]
push eax
lea eax, [esp + 0xdb4]
push eax
lea eax, [esp + 0x2c]
push eax
lea eax, [esp + 0x5c]
mov ecx, ebx
push eax
lea eax, [esp + 0x4c]
push eax
push 0
push dword [esp + 0x9c]
lea eax, [esp + 0x80]
push eax
lea eax, [esp + 0xbc]
push eax
call fcn.10083f40
lea eax, [esp + 0x64]
mov ecx, ebx
push eax
lea eax, [esp + 0x238]
push eax
lea eax, [esp + 0x198]
push eax
call fcn.10083e50
lea eax, [esp + 0x7c]
mov ecx, ebx
push eax
lea eax, [esp + 0x238]
push eax
lea eax, [esp + 0x198]
push eax
call fcn.10083e50
lea eax, [esp + 0x7c]
mov ecx, ebx
push eax
lea eax, [esp + 0x68]
push eax
lea eax, [esp + 0xc0]
push eax
call fcn.10083e50
lea eax, [esp + 0x7c]
mov ecx, ebx
push eax
lea eax, [esp + 0x68]
push eax
lea eax, [esp + 0x23c]
push eax
lea eax, [esp + 0x1d8]
push eax
call fcn.10083ee0
mov eax, dword [esp + 0x180]
cmp eax, 0x7fffffff
je 0x1008b946
add eax, 0xfffffffe
cmp eax, 0x18
ja case.0x1008a07c.18
jmp dword [eax*4 + 0x1008c14c]
lea eax, [esp + 0xdb0]
push eax
lea ecx, [esp + 0xb0]
call fcn.100768e0
lea eax, [esp + 0xdc0]
push eax
lea ecx, [esp + 0xa0]
call fcn.100768e0
sub esp, 8
lea eax, [esp + 0xdc]
push eax
lea eax, [esp + 0xf8]
push eax
lea eax, [esp + 0xdc0]
push eax
lea eax, [esp + 0xdd4]
jmp 0x1008ba36
lea eax, [esp + 0xdd0]
push eax
lea ecx, [esp + 0xb0]
call fcn.100768e0
lea eax, [esp + 0xde0]
push eax
lea ecx, [esp + 0xa0]
call fcn.100768e0
sub esp, 8
lea eax, [esp + 0xcc]
push eax
lea eax, [esp + 0x118]
push eax
lea eax, [esp + 0xde0]
push eax
lea eax, [esp + 0xdf4]
push eax
lea eax, [esp + 0x2c]
mov ecx, ebx
push eax
lea eax, [esp + 0x5c]
push eax
lea eax, [esp + 0x4c]
push eax
push 1
push dword [esp + 0x64]
lea eax, [esp + 0x80]
push eax
lea eax, [esp + 0xbc]
push eax
call fcn.10083f40
lea eax, [esp + 0xc4]
jmp 0x1008ba6a
lea eax, [esp + 0xdf0]
push eax
lea ecx, [esp + 0xb0]
call fcn.100768e0
lea eax, [esp + 0xe00]
push eax
lea ecx, [esp + 0xa0]
call fcn.100768e0
sub esp, 8
lea eax, [esp + 0xdc]
mov ecx, ebx
push eax
lea eax, [esp + 0xf8]
push eax
lea eax, [esp + 0xe00]
push eax
lea eax, [esp + 0xe14]
push eax
lea eax, [esp + 0x2c]
push eax
lea eax, [esp + 0x5c]
push eax
lea eax, [esp + 0x4c]
push eax
push 1
push dword [esp + 0x4c]
lea eax, [esp + 0x80]
push eax
lea eax, [esp + 0xbc]
push eax
call fcn.10083f40
lea eax, [esp + 0xe10]
push eax
lea ecx, [esp + 0xb0]
call fcn.100768e0
lea eax, [esp + 0xe20]
push eax
lea ecx, [esp + 0xa0]
call fcn.100768e0
sub esp, 8
lea eax, [esp + 0xcc]
mov ecx, ebx
push eax
lea eax, [esp + 0x118]
push eax
lea eax, [esp + 0xe20]
push eax
lea eax, [esp + 0xe34]
push eax
lea eax, [esp + 0x2c]
push eax
lea eax, [esp + 0x5c]
push eax
lea eax, [esp + 0x4c]
push eax
push 1
push dword [esp + 0x64]
lea eax, [esp + 0x80]
push eax
lea eax, [esp + 0xbc]
push eax
call fcn.10083f40
lea eax, [esp + 0xc4]
mov ecx, ebx
push eax
lea eax, [esp + 0xd8]
push eax
lea eax, [esp + 0xf4]
push eax
call fcn.10083e50
lea eax, [esp + 0xc4]
push eax
lea eax, [esp + 0xd8]
mov ecx, dword [ebx + 0xa0]
push eax
lea eax, [esp + 0x138]
push eax
push 2
call fcn.10083430
jmp 0x1008ba7f
lea eax, [esp + 0xe30]
push eax
lea ecx, [esp + 0xb0]
call fcn.100768e0
lea eax, [esp + 0xe40]
push eax
lea ecx, [esp + 0xa0]
call fcn.100768e0
sub esp, 8
lea eax, [esp + 0xdc]
mov ecx, ebx
push eax
lea eax, [esp + 0xf8]
push eax
lea eax, [esp + 0xe40]
push eax
lea eax, [esp + 0xe54]
push eax
lea eax, [esp + 0x2c]
push eax
lea eax, [esp + 0x5c]
push eax
lea eax, [esp + 0x4c]
push eax
push 1
push dword [esp + 0x4c]
lea eax, [esp + 0x80]
push eax
lea eax, [esp + 0xbc]
push eax
call fcn.10083f40
lea eax, [esp + 0xe50]
push eax
lea ecx, [esp + 0xb0]
call fcn.100768e0
lea eax, [esp + 0xe60]
push eax
lea ecx, [esp + 0xa0]
call fcn.100768e0
sub esp, 8
lea eax, [esp + 0xcc]
mov ecx, ebx
push eax
lea eax, [esp + 0x118]
push eax
lea eax, [esp + 0xe60]
push eax
lea eax, [esp + 0xe74]
push eax
lea eax, [esp + 0x2c]
push eax
lea eax, [esp + 0x5c]
push eax
lea eax, [esp + 0x4c]
push eax
push 1
push dword [esp + 0x64]
lea eax, [esp + 0x80]
push eax
lea eax, [esp + 0xbc]
push eax
call fcn.10083f40
lea eax, [esp + 0xc4]
mov ecx, ebx
push eax
lea eax, [esp + 0xd8]
push eax
lea eax, [esp + 0xf4]
push eax
call fcn.10083e50
lea eax, [esp + 0xe70]
push eax
lea ecx, [esp + 0x11c]
call fcn.100768b0
lea eax, [esp + 0xc4]
push eax
lea eax, [esp + 0xd8]
push eax
lea eax, [esp + 0xe78]
push eax
push 2
mov ecx, dword [ebx + 0xa0]
call fcn.10083430
lea eax, [esp + 0xe80]
push eax
lea ecx, [esp + 0x11c]
call fcn.100768e0
lea eax, [esp + 0x1470]
push eax
push ecx
lea eax, [esp + 0x1488]
push eax
call fcn.100835e0
add esp, 4
mov ecx, eax
call fcn.10076730
push eax
lea eax, [esp + 0xe84]
jmp 0x1008a271
lea eax, [esp + 0xe90]
push eax
lea ecx, [esp + 0xb0]
call fcn.100768e0
lea eax, [esp + 0xea0]
push eax
lea ecx, [esp + 0xa0]
call fcn.100768e0
sub esp, 8
lea eax, [esp + 0xdc]
mov ecx, ebx
push eax
lea eax, [esp + 0xf8]
push eax
lea eax, [esp + 0xea0]
push eax
lea eax, [esp + 0xeb4]
push eax
lea eax, [esp + 0x2c]
push eax
lea eax, [esp + 0x5c]
push eax
lea eax, [esp + 0x4c]
push eax
push 1
push dword [esp + 0x4c]
lea eax, [esp + 0x80]
push eax
lea eax, [esp + 0xbc]
push eax
call fcn.10083f40
lea eax, [esp + 0xeb0]
push eax
lea ecx, [esp + 0xb0]
call fcn.100768e0
lea eax, [esp + 0xec0]
push eax
lea ecx, [esp + 0xa0]
call fcn.100768e0
sub esp, 8
lea eax, [esp + 0xcc]
mov ecx, ebx
push eax
lea eax, [esp + 0x118]
push eax
lea eax, [esp + 0xec0]
push eax
lea eax, [esp + 0xed4]
push eax
lea eax, [esp + 0x2c]
push eax
lea eax, [esp + 0x5c]
push eax
lea eax, [esp + 0x4c]
push eax
push 1
push dword [esp + 0x64]
lea eax, [esp + 0x80]
push eax
lea eax, [esp + 0xbc]
push eax
call fcn.10083f40
lea eax, [esp + 0xc4]
mov ecx, ebx
push eax
lea eax, [esp + 0xd8]
push eax
lea eax, [esp + 0xf4]
push eax
call fcn.10083e50
lea eax, [esp + 0xed0]
push eax
lea ecx, [esp + 0x11c]
call fcn.100768b0
lea eax, [esp + 0xc4]
push eax
lea eax, [esp + 0xd8]
push eax
lea eax, [esp + 0xed8]
push eax
push 2
mov ecx, dword [ebx + 0xa0]
call fcn.10083430
lea eax, [esp + 0xee0]
push eax
lea ecx, [esp + 0x11c]
call fcn.100768e0
lea eax, [esp + 0xef0]
push eax
lea ecx, [esp + 0x11c]
call fcn.100768b0
lea eax, [esp + 0x1490]
push eax
push ecx
lea eax, [esp + 0x14a8]
push eax
call fcn.100835e0
add esp, 4
mov ecx, eax
call fcn.10076730
mov ecx, dword [ebx + 0xa0]
push eax
lea eax, [esp + 0xee4]
push eax
lea eax, [esp + 0xef8]
push eax
push 2
call fcn.10083430
lea eax, [esp + 0xf00]
push eax
lea ecx, [esp + 0x11c]
call fcn.100768e0
lea eax, [esp + 0x14b0]
push eax
call fcn.10083620
mov ecx, dword [ebx + 0xa0]
push eax
lea eax, [esp + 0xf04]
push eax
lea eax, [esp + 0x138]
push eax
push 5
call fcn.10083430
jmp 0x1008ba7f
lea eax, [esp + 0xf10]
push eax
lea ecx, [esp + 0xb0]
call fcn.100768e0
lea eax, [esp + 0xf20]
push eax
lea ecx, [esp + 0xa0]
call fcn.100768e0
sub esp, 8
lea eax, [esp + 0xdc]
mov ecx, ebx
push eax
lea eax, [esp + 0xf8]
push eax
lea eax, [esp + 0xf20]
push eax
lea eax, [esp + 0xf34]
push eax
lea eax, [esp + 0x2c]
push eax
lea eax, [esp + 0x5c]
push eax
lea eax, [esp + 0x4c]
push eax
push 1
push dword [esp + 0x4c]
lea eax, [esp + 0x80]
push eax
lea eax, [esp + 0xbc]
push eax
call fcn.10083f40
lea eax, [esp + 0xf30]
push eax
lea ecx, [esp + 0xb0]
call fcn.100768e0
lea eax, [esp + 0xf40]
push eax
lea ecx, [esp + 0xa0]
call fcn.100768e0
sub esp, 8
lea eax, [esp + 0xcc]
mov ecx, ebx
push eax
lea eax, [esp + 0x118]
push eax
lea eax, [esp + 0xf40]
push eax
lea eax, [esp + 0xf54]
push eax
lea eax, [esp + 0x2c]
push eax
lea eax, [esp + 0x5c]
push eax
lea eax, [esp + 0x4c]
push eax
push 1
push dword [esp + 0x64]
lea eax, [esp + 0x80]
push eax
lea eax, [esp + 0xbc]
push eax
call fcn.10083f40
lea eax, [esp + 0xc4]
mov ecx, ebx
push eax
lea eax, [esp + 0xd8]
push eax
lea eax, [esp + 0xf4]
push eax
call fcn.10083e50
lea eax, [esp + 0x14c0]
push eax
lea ecx, [esp + 0xc8]
call fcn.10076730
jmp 0x1008a269
lea eax, [esp + 0xf50]
push eax
lea ecx, [esp + 0xb0]
call fcn.100768e0
lea eax, [esp + 0xf60]
push eax
lea ecx, [esp + 0xa0]
call fcn.100768e0
sub esp, 8
lea eax, [esp + 0xdc]
mov ecx, ebx
push eax
lea eax, [esp + 0xf8]
push eax
lea eax, [esp + 0xf60]
push eax
lea eax, [esp + 0xf74]
push eax
lea eax, [esp + 0x2c]
push eax
lea eax, [esp + 0x5c]
push eax
lea eax, [esp + 0x4c]
push eax
push 1
push dword [esp + 0x4c]
lea eax, [esp + 0x80]
push eax
lea eax, [esp + 0xbc]
push eax
call fcn.10083f40
lea eax, [esp + 0xf70]
push eax
lea ecx, [esp + 0xb0]
call fcn.100768e0
lea eax, [esp + 0xf80]
push eax
lea ecx, [esp + 0xa0]
call fcn.100768e0
sub esp, 8
lea eax, [esp + 0xcc]
mov ecx, ebx
push eax
lea eax, [esp + 0x118]
push eax
lea eax, [esp + 0xf80]
push eax
lea eax, [esp + 0xf94]
push eax
lea eax, [esp + 0x2c]
push eax
lea eax, [esp + 0x5c]
push eax
lea eax, [esp + 0x4c]
push eax
push 1
push dword [esp + 0x64]
lea eax, [esp + 0x80]
push eax
lea eax, [esp + 0xbc]
push eax
call fcn.10083f40
lea eax, [esp + 0xd4]
mov ecx, ebx
push eax
push eax
lea eax, [esp + 0xf4]
push eax
call fcn.10083e50
lea eax, [esp + 0x14d0]
push eax
call fcn.10083560
push eax
lea eax, [esp + 0xd8]
mov ecx, ebx
push eax
lea eax, [esp + 0xf4]
push eax
call fcn.10083e50
lea eax, [esp + 0x14e0]
push eax
call fcn.10083560
push eax
lea eax, [esp + 0xc8]
mov ecx, ebx
push eax
lea eax, [esp + 0x114]
push eax
call fcn.10083e50
lea eax, [esp + 0xc4]
push eax
push ecx
lea eax, [esp + 0x14f8]
push eax
call fcn.10083560
add esp, 4
mov ecx, ebx
push eax
lea eax, [esp + 0xdc]
push eax
lea eax, [esp + 0x13c]
push eax
call fcn.10083ee0
jmp 0x1008ba7f
lea eax, [esp + 0xf90]
push eax
lea ecx, [esp + 0xb0]
call fcn.100768e0
lea eax, [esp + 0xfa0]
push eax
lea ecx, [esp + 0xa0]
call fcn.100768e0
sub esp, 8
lea eax, [esp + 0xdc]
mov ecx, ebx
push eax
lea eax, [esp + 0xf8]
push eax
lea eax, [esp + 0xfa0]
push eax
lea eax, [esp + 0xfb4]
push eax
lea eax, [esp + 0x2c]
push eax
lea eax, [esp + 0x5c]
push eax
lea eax, [esp + 0x4c]
push eax
push 1
push dword [esp + 0x4c]
lea eax, [esp + 0x80]
push eax
lea eax, [esp + 0xbc]
push eax
call fcn.10083f40
lea eax, [esp + 0xfb0]
push eax
lea ecx, [esp + 0xb0]
call fcn.100768e0
lea eax, [esp + 0xfc0]
push eax
lea ecx, [esp + 0xa0]
call fcn.100768e0
sub esp, 8
lea eax, [esp + 0xcc]
mov ecx, ebx
push eax
lea eax, [esp + 0x118]
push eax
lea eax, [esp + 0xfc0]
push eax
lea eax, [esp + 0xfd4]
push eax
lea eax, [esp + 0x2c]
push eax
lea eax, [esp + 0x5c]
push eax
lea eax, [esp + 0x4c]
push eax
push 1
push dword [esp + 0x64]
lea eax, [esp + 0x80]
push eax
lea eax, [esp + 0xbc]
push eax
call fcn.10083f40
lea eax, [esp + 0xc4]
mov ecx, ebx
push eax
lea eax, [esp + 0xd8]
push eax
lea eax, [esp + 0xf4]
push eax
call fcn.10083e50
mov ecx, dword [ebx + 0xa0]
lea eax, [esp + 0xc4]
push eax
lea eax, [esp + 0xd8]
push eax
lea eax, [esp + 0x138]
push eax
push 5
call fcn.10083430
jmp 0x1008ba7f
lea eax, [esp + 0xfd0]
push eax
lea ecx, [esp + 0xb0]
call fcn.100768e0
lea eax, [esp + 0xfe0]
push eax
lea ecx, [esp + 0xa0]
call fcn.100768e0
sub esp, 8
lea eax, [esp + 0xdc]
mov ecx, ebx
push eax
lea eax, [esp + 0xf8]
push eax
lea eax, [esp + 0xfe0]
push eax
lea eax, [esp + 0xff4]
push eax
lea eax, [esp + 0x2c]
push eax
lea eax, [esp + 0x5c]
push eax
lea eax, [esp + 0x4c]
push eax
push 1
push dword [esp + 0x4c]
lea eax, [esp + 0x80]
push eax
lea eax, [esp + 0xbc]
push eax
call fcn.10083f40
lea eax, [esp + 0xff0]
push eax
lea ecx, [esp + 0xb0]
call fcn.100768e0
lea eax, [esp + 0x1000]
push eax
lea ecx, [esp + 0xa0]
call fcn.100768e0
sub esp, 8
lea eax, [esp + 0xcc]
mov ecx, ebx
push eax
lea eax, [esp + 0x118]
push eax
lea eax, [esp + 0x1000]
push eax
lea eax, [esp + 0x1014]
push eax
lea eax, [esp + 0x2c]
push eax
lea eax, [esp + 0x5c]
push eax
lea eax, [esp + 0x4c]
push eax
push 1
push dword [esp + 0x64]
lea eax, [esp + 0x80]
push eax
lea eax, [esp + 0xbc]
push eax
call fcn.10083f40
lea eax, [esp + 0xc4]
mov ecx, ebx
push eax
lea eax, [esp + 0xd8]
push eax
lea eax, [esp + 0xf4]
push eax
call fcn.10083e50
lea eax, [esp + 0x1010]
push eax
lea ecx, [esp + 0x11c]
call fcn.100768b0
lea eax, [esp + 0xc4]
push eax
lea eax, [esp + 0xd8]
push eax
lea eax, [esp + 0x1018]
push eax
push 5
mov ecx, dword [ebx + 0xa0]
call fcn.10083430
lea eax, [esp + 0x1020]
push eax
lea ecx, [esp + 0x11c]
call fcn.100768e0
lea eax, [esp + 0x1030]
push eax
lea ecx, [esp + 0x11c]
call fcn.100768e0
lea eax, [esp + 0x1020]
push eax
lea eax, [esp + 0x1034]
jmp 0x1008a271
lea eax, [esp + 0x1040]
push eax
lea ecx, [esp + 0xb0]
call fcn.100768e0
lea eax, [esp + 0x1050]
push eax
lea ecx, [esp + 0xa0]
call fcn.100768e0
sub esp, 8
lea eax, [esp + 0xdc]
mov ecx, ebx
push eax
lea eax, [esp + 0xf8]
push eax
lea eax, [esp + 0x1050]
push eax
lea eax, [esp + 0x1064]
push eax
lea eax, [esp + 0x2c]
push eax
lea eax, [esp + 0x5c]
push eax
lea eax, [esp + 0x4c]
push eax
push 1
push dword [esp + 0x4c]
lea eax, [esp + 0x80]
push eax
lea eax, [esp + 0xbc]
push eax
call fcn.10083f40
lea eax, [esp + 0x1060]
push eax
lea ecx, [esp + 0xb0]
call fcn.100768e0
lea eax, [esp + 0x1070]
push eax
lea ecx, [esp + 0xa0]
call fcn.100768e0
sub esp, 8
lea eax, [esp + 0xcc]
mov ecx, ebx
push eax
lea eax, [esp + 0x118]
push eax
lea eax, [esp + 0x1070]
push eax
lea eax, [esp + 0x1084]
push eax
lea eax, [esp + 0x2c]
push eax
lea eax, [esp + 0x5c]
push eax
lea eax, [esp + 0x4c]
push eax
push 1
push dword [esp + 0x64]
lea eax, [esp + 0x80]
push eax
lea eax, [esp + 0xbc]
push eax
call fcn.10083f40
lea eax, [esp + 0xc4]
mov ecx, ebx
push eax
lea eax, [esp + 0xd8]
push eax
lea eax, [esp + 0xf4]
push eax
call fcn.10083e50
lea eax, [esp + 0x1080]
push eax
lea ecx, [esp + 0x11c]
call fcn.100768b0
lea eax, [esp + 0xc4]
push eax
lea eax, [esp + 0xd8]
push eax
lea eax, [esp + 0x1088]
push eax
push 5
mov ecx, dword [ebx + 0xa0]
call fcn.10083430
lea eax, [esp + 0x1090]
push eax
lea ecx, [esp + 0x11c]
call fcn.100768e0
lea eax, [esp + 0x1500]
push eax
call fcn.10083660
mov ecx, dword [ebx + 0xa0]
push eax
lea eax, [esp + 0x1094]
push eax
lea eax, [esp + 0x138]
push eax
push 5
call fcn.10083430
jmp 0x1008ba7f
lea eax, [esp + 0x10a0]
push eax
lea ecx, [esp + 0xb0]
call fcn.100768e0
lea eax, [esp + 0x10b0]
push eax
lea ecx, [esp + 0xa0]
call fcn.100768e0
sub esp, 8
lea eax, [esp + 0xdc]
mov ecx, ebx
push eax
lea eax, [esp + 0xf8]
push eax
lea eax, [esp + 0x10b0]
push eax
lea eax, [esp + 0x10c4]
push eax
lea eax, [esp + 0x2c]
push eax
lea eax, [esp + 0x5c]
push eax
lea eax, [esp + 0x4c]
push eax
push 1
push dword [esp + 0x4c]
lea eax, [esp + 0x80]
push eax
lea eax, [esp + 0xbc]
push eax
call fcn.10083f40
lea eax, [esp + 0x10c0]
push eax
lea ecx, [esp + 0xb0]
call fcn.100768e0
lea eax, [esp + 0x10d0]
push eax
lea ecx, [esp + 0xa0]
call fcn.100768e0
sub esp, 8
lea eax, [esp + 0xcc]
mov ecx, ebx
push eax
lea eax, [esp + 0x118]
push eax
lea eax, [esp + 0x10d0]
push eax
lea eax, [esp + 0x10e4]
push eax
lea eax, [esp + 0x2c]
push eax
lea eax, [esp + 0x5c]
push eax
lea eax, [esp + 0x4c]
push eax
push 1
push dword [esp + 0x64]
lea eax, [esp + 0x80]
push eax
lea eax, [esp + 0xbc]
push eax
call fcn.10083f40
lea eax, [esp + 0xd4]
mov ecx, ebx
push eax
lea eax, [esp + 0xc8]
push eax
lea eax, [esp + 0x114]
push eax
call fcn.10083e50
lea eax, [esp + 0x2c]
mov ecx, ebx
push eax
lea eax, [esp + 0xc8]
push eax
lea eax, [esp + 0x114]
push eax
call fcn.10083e50
lea eax, [esp + 0x10e0]
push eax
lea ecx, [esp + 0x11c]
call fcn.100768b0
lea eax, [esp + 0x1510]
push eax
lea ecx, [esp + 0xc8]
call fcn.10076730
mov ecx, dword [ebx + 0xa0]
push eax
lea eax, [esp + 0xd8]
push eax
lea eax, [esp + 0x10e8]
push eax
push 2
call fcn.10083430
lea eax, [esp + 0x10f0]
push eax
lea ecx, [esp + 0x11c]
call fcn.100768e0
lea eax, [esp + 0xc4]
push eax
lea eax, [esp + 0x30]
push eax
lea eax, [esp + 0x10f8]
mov ecx, dword [ebx + 0xa0]
push eax
lea eax, [esp + 0x13c]
push eax
push 4
call fcn.100834c0
jmp 0x1008ba7f
lea eax, [esp + 0x1100]
push eax
lea ecx, [esp + 0xb0]
call fcn.100768e0
lea eax, [esp + 0x1110]
push eax
lea ecx, [esp + 0xa0]
call fcn.100768e0
sub esp, 8
lea eax, [esp + 0xdc]
mov ecx, ebx
push eax
lea eax, [esp + 0xf8]
push eax
lea eax, [esp + 0x1110]
push eax
lea eax, [esp + 0x1124]
push eax
lea eax, [esp + 0x2c]
push eax
lea eax, [esp + 0x5c]
push eax
lea eax, [esp + 0x4c]
push eax
push 1
push dword [esp + 0x4c]
lea eax, [esp + 0x80]
push eax
lea eax, [esp + 0xbc]
push eax
call fcn.10083f40
lea eax, [esp + 0x1120]
push eax
lea ecx, [esp + 0xb0]
call fcn.100768e0
lea eax, [esp + 0x1130]
push eax
lea ecx, [esp + 0xa0]
call fcn.100768e0
sub esp, 8
lea eax, [esp + 0xcc]
mov ecx, ebx
push eax
lea eax, [esp + 0x118]
push eax
lea eax, [esp + 0x1130]
push eax
lea eax, [esp + 0x1144]
push eax
lea eax, [esp + 0x2c]
push eax
lea eax, [esp + 0x5c]
push eax
lea eax, [esp + 0x4c]
push eax
push 1
push dword [esp + 0x64]
lea eax, [esp + 0x80]
push eax
lea eax, [esp + 0xbc]
push eax
call fcn.10083f40
lea eax, [esp + 0xc4]
mov ecx, ebx
push eax
lea eax, [esp + 0xd8]
push eax
lea eax, [esp + 0xf4]
push eax
call fcn.10083e50
lea eax, [esp + 0x1140]
push eax
lea ecx, [esp + 0x11c]
call fcn.100768b0
lea eax, [esp + 0x1520]
push eax
lea ecx, [esp + 0xc8]
call fcn.10076730
push eax
lea eax, [esp + 0xd8]
push eax
mov ecx, dword [ebx + 0xa0]
lea eax, [esp + 0x1148]
push eax
push 2
call fcn.10083430
lea eax, [esp + 0x1150]
push eax
lea ecx, [esp + 0xa0]
call fcn.100768e0
lea eax, [esp + 0x1160]
push eax
lea ecx, [esp + 0x11c]
call fcn.100768e0
lea eax, [esp + 0xc4]
push eax
lea eax, [esp + 0x1154]
push eax
lea eax, [esp + 0x1168]
jmp 0x1008ae89
lea eax, [esp + 0x1170]
push eax
lea ecx, [esp + 0xb0]
call fcn.100768e0
lea eax, [esp + 0x1180]
push eax
lea ecx, [esp + 0xa0]
call fcn.100768e0
sub esp, 8
lea eax, [esp + 0xdc]
mov ecx, ebx
push eax
lea eax, [esp + 0xf8]
push eax
lea eax, [esp + 0x1180]
push eax
lea eax, [esp + 0x1194]
push eax
lea eax, [esp + 0x2c]
push eax
lea eax, [esp + 0x5c]
push eax
lea eax, [esp + 0x4c]
push eax
push 1
push dword [esp + 0x4c]
lea eax, [esp + 0x80]
push eax
lea eax, [esp + 0xbc]
push eax
call fcn.10083f40
lea eax, [esp + 0x1190]
push eax
lea ecx, [esp + 0xb0]
call fcn.100768e0
lea eax, [esp + 0x11a0]
push eax
lea ecx, [esp + 0xa0]
call fcn.100768e0
sub esp, 8
lea eax, [esp + 0xcc]
mov ecx, ebx
push eax
lea eax, [esp + 0x118]
push eax
lea eax, [esp + 0x11a0]
push eax
lea eax, [esp + 0x11b4]
push eax
lea eax, [esp + 0x2c]
push eax
lea eax, [esp + 0x5c]
push eax
lea eax, [esp + 0x4c]
push eax
push 1
push dword [esp + 0x64]
lea eax, [esp + 0x80]
push eax
lea eax, [esp + 0xbc]
push eax
call fcn.10083f40
lea eax, [esp + 0xd4]
mov ecx, ebx
push eax
lea eax, [esp + 0xc8]
push eax
lea eax, [esp + 0x114]
push eax
call fcn.10083e50
lea eax, [esp + 0x14]
mov ecx, ebx
push eax
lea eax, [esp + 0xc8]
push eax
lea eax, [esp + 0x114]
push eax
call fcn.10083e50
lea eax, [esp + 0x11b0]
push eax
lea ecx, [esp + 0x11c]
call fcn.100768b0
lea eax, [esp + 0x1530]
push eax
lea ecx, [esp + 0xc8]
call fcn.10076730
mov ecx, dword [ebx + 0xa0]
push eax
lea eax, [esp + 0xd8]
push eax
lea eax, [esp + 0x11b8]
push eax
push 2
call fcn.10083430
lea eax, [esp + 0x11c0]
push eax
lea ecx, [esp + 0x11c]
call fcn.100768e0
lea eax, [esp + 0xc4]
push eax
lea eax, [esp + 0x18]
push eax
lea eax, [esp + 0x11c8]
jmp 0x1008ae89
lea eax, [esp + 0x11d0]
push eax
lea ecx, [esp + 0xb0]
call fcn.100768e0
lea eax, [esp + 0x11e0]
push eax
lea ecx, [esp + 0xa0]
call fcn.100768e0
sub esp, 8
lea eax, [esp + 0xdc]
mov ecx, ebx
push eax
lea eax, [esp + 0xf8]
push eax
lea eax, [esp + 0x11e0]
push eax
lea eax, [esp + 0x11f4]
push eax
lea eax, [esp + 0x2c]
push eax
lea eax, [esp + 0x5c]
push eax
lea eax, [esp + 0x4c]
push eax
push 1
push dword [esp + 0x4c]
lea eax, [esp + 0x80]
push eax
lea eax, [esp + 0xbc]
push eax
call fcn.10083f40
lea eax, [esp + 0x11f0]
push eax
lea ecx, [esp + 0xb0]
call fcn.100768e0
lea eax, [esp + 0x1200]
push eax
lea ecx, [esp + 0xa0]
call fcn.100768e0
sub esp, 8
lea eax, [esp + 0xcc]
mov ecx, ebx
push eax
lea eax, [esp + 0x118]
push eax
lea eax, [esp + 0x1200]
push eax
lea eax, [esp + 0x1214]
push eax
lea eax, [esp + 0x2c]
push eax
lea eax, [esp + 0x5c]
push eax
lea eax, [esp + 0x4c]
push eax
push 1
push dword [esp + 0x64]
lea eax, [esp + 0x80]
push eax
lea eax, [esp + 0xbc]
push eax
call fcn.10083f40
lea eax, [esp + 0xd4]
mov ecx, ebx
push eax
lea eax, [esp + 0xc8]
push eax
lea eax, [esp + 0x114]
push eax
call fcn.10083e50
lea eax, [esp + 0x54]
mov ecx, ebx
push eax
lea eax, [esp + 0xc8]
push eax
lea eax, [esp + 0x114]
push eax
call fcn.10083e50
lea eax, [esp + 0x1210]
push eax
lea ecx, [esp + 0x11c]
call fcn.100768b0
lea eax, [esp + 0x1540]
push eax
lea ecx, [esp + 0xc8]
call fcn.10076730
mov ecx, dword [ebx + 0xa0]
push eax
lea eax, [esp + 0xd8]
push eax
lea eax, [esp + 0x1218]
push eax
push 2
call fcn.10083430
lea eax, [esp + 0x1220]
push eax
lea ecx, [esp + 0x11c]
call fcn.100768e0
lea eax, [esp + 0xc4]
push eax
lea eax, [esp + 0x58]
push eax
lea eax, [esp + 0x1228]
jmp 0x1008ae89
lea eax, [esp + 0x1230]
push eax
lea ecx, [esp + 0xb0]
call fcn.100768e0
lea eax, [esp + 0x1240]
push eax
lea ecx, [esp + 0xa0]
call fcn.100768e0
sub esp, 8
lea eax, [esp + 0xdc]
mov ecx, ebx
push eax
lea eax, [esp + 0xf8]
push eax
lea eax, [esp + 0x1240]
push eax
lea eax, [esp + 0x1254]
push eax
lea eax, [esp + 0x2c]
push eax
lea eax, [esp + 0x5c]
push eax
lea eax, [esp + 0x4c]
push eax
push 1
push dword [esp + 0x4c]
lea eax, [esp + 0x80]
push eax
lea eax, [esp + 0xbc]
push eax
call fcn.10083f40
lea eax, [esp + 0x1250]
push eax
lea ecx, [esp + 0xb0]
call fcn.100768e0
lea eax, [esp + 0x1260]
push eax
lea ecx, [esp + 0xa0]
call fcn.100768e0
sub esp, 8
lea eax, [esp + 0xcc]
mov ecx, ebx
push eax
lea eax, [esp + 0x118]
push eax
lea eax, [esp + 0x1260]
push eax
lea eax, [esp + 0x1274]
push eax
lea eax, [esp + 0x2c]
push eax
lea eax, [esp + 0x5c]
push eax
lea eax, [esp + 0x4c]
push eax
push 1
push dword [esp + 0x64]
lea eax, [esp + 0x80]
push eax
lea eax, [esp + 0xbc]
push eax
call fcn.10083f40
lea eax, [esp + 0xc4]
mov ecx, ebx
push eax
lea eax, [esp + 0xd8]
push eax
lea eax, [esp + 0xf4]
push eax
call fcn.10083e50
lea eax, [esp + 0x1270]
push eax
lea ecx, [esp + 0x11c]
call fcn.100768b0
lea eax, [esp + 0x1550]
push eax
lea eax, [esp + 0x1454]
push eax
lea ecx, [esp + 0xa4]
call fcn.100768e0
mov ecx, eax
call fcn.10076730
push eax
push ecx
lea eax, [esp + 0x1468]
push eax
call fcn.10083560
mov ecx, dword [ebx + 0xa0]
add esp, 4
push eax
lea eax, [esp + 0x1278]
push eax
push 2
call fcn.10083430
lea eax, [esp + 0x1280]
push eax
lea ecx, [esp + 0x11c]
call fcn.100768e0
lea eax, [esp + 0xd4]
push eax
lea eax, [esp + 0xc8]
push eax
lea eax, [esp + 0x1288]
jmp 0x1008ae89
lea eax, [esp + 0x1290]
push eax
lea ecx, [esp + 0xb0]
call fcn.100768e0
lea eax, [esp + 0x12a0]
push eax
lea ecx, [esp + 0xa0]
call fcn.100768e0
sub esp, 8
lea eax, [esp + 0xdc]
push eax
lea eax, [esp + 0xf8]
push eax
lea eax, [esp + 0x12a0]
push eax
lea eax, [esp + 0x12b4]
jmp 0x1008ba36
lea eax, [esp + 0x12b0]
push eax
lea ecx, [esp + 0xb0]
call fcn.100768e0
lea eax, [esp + 0x12c0]
push eax
lea ecx, [esp + 0xa0]
call fcn.100768e0
sub esp, 8
lea eax, [esp + 0x24c]
mov ecx, ebx
push eax
lea eax, [esp + 0x1a8]
push eax
lea eax, [esp + 0x12c0]
push eax
lea eax, [esp + 0x12d4]
push eax
lea eax, [esp + 0x2c]
push eax
lea eax, [esp + 0x5c]
push eax
lea eax, [esp + 0x4c]
push eax
push 1
push dword [esp + 0x154]
lea eax, [esp + 0x80]
push eax
lea eax, [esp + 0xbc]
push eax
call fcn.10083f40
lea eax, [esp + 0x12d0]
push eax
lea ecx, [esp + 0xb0]
call fcn.100768e0
lea eax, [esp + 0x12e0]
push eax
lea ecx, [esp + 0xa0]
call fcn.100768e0
sub esp, 8
lea eax, [esp + 0xdc]
mov ecx, ebx
push eax
lea eax, [esp + 0xf8]
push eax
lea eax, [esp + 0x12e0]
push eax
lea eax, [esp + 0x12f4]
push eax
lea eax, [esp + 0x2c]
push eax
lea eax, [esp + 0x5c]
push eax
lea eax, [esp + 0x4c]
push eax
push 1
push dword [esp + 0x4c]
lea eax, [esp + 0x80]
push eax
lea eax, [esp + 0xbc]
push eax
call fcn.10083f40
lea eax, [esp + 0x12f0]
push eax
lea ecx, [esp + 0xb0]
call fcn.100768e0
lea eax, [esp + 0x1300]
push eax
lea ecx, [esp + 0xa0]
call fcn.100768e0
sub esp, 8
lea eax, [esp + 0xcc]
push eax
lea eax, [esp + 0x118]
push eax
lea eax, [esp + 0x1300]
push eax
lea eax, [esp + 0x1314]
push eax
lea eax, [esp + 0x2c]
push eax
lea eax, [esp + 0x5c]
mov ecx, ebx
push eax
lea eax, [esp + 0x4c]
push eax
push 1
push dword [esp + 0x64]
lea eax, [esp + 0x80]
push eax
lea eax, [esp + 0xbc]
push eax
call fcn.10083f40
lea eax, [esp + 0xd4]
mov ecx, ebx
push eax
lea eax, [esp + 0x248]
push eax
lea eax, [esp + 0x1a4]
push eax
call fcn.10083e50
lea eax, [esp + 0xc4]
mov ecx, ebx
push eax
lea eax, [esp + 0x248]
push eax
lea eax, [esp + 0x1a4]
push eax
call fcn.10083e50
lea eax, [esp + 0xc4]
mov ecx, ebx
push eax
lea eax, [esp + 0xd8]
push eax
lea eax, [esp + 0xf4]
push eax
call fcn.10083e50
lea eax, [esp + 0x244]
push eax
lea eax, [esp + 0xc8]
push eax
lea eax, [esp + 0xdc]
jmp 0x1008ae89
lea eax, [esp + 0x1310]
push eax
lea ecx, [esp + 0xb0]
call fcn.100768e0
lea eax, [esp + 0x1320]
push eax
lea ecx, [esp + 0xa0]
call fcn.100768e0
sub esp, 8
lea eax, [esp + 0x24c]
mov ecx, ebx
push eax
lea eax, [esp + 0x1a8]
push eax
lea eax, [esp + 0x1320]
push eax
lea eax, [esp + 0x1334]
push eax
lea eax, [esp + 0x2c]
push eax
lea eax, [esp + 0x5c]
push eax
lea eax, [esp + 0x4c]
push eax
push 1
push dword [esp + 0x154]
lea eax, [esp + 0x80]
push eax
lea eax, [esp + 0xbc]
push eax
call fcn.10083f40
lea eax, [esp + 0x1330]
push eax
lea ecx, [esp + 0xb0]
call fcn.100768e0
lea eax, [esp + 0x1340]
push eax
lea ecx, [esp + 0xa0]
call fcn.100768e0
sub esp, 8
lea eax, [esp + 0xdc]
mov ecx, ebx
push eax
lea eax, [esp + 0xf8]
push eax
lea eax, [esp + 0x1340]
push eax
lea eax, [esp + 0x1354]
push eax
lea eax, [esp + 0x2c]
push eax
lea eax, [esp + 0x5c]
push eax
lea eax, [esp + 0x4c]
push eax
push 1
push dword [esp + 0x4c]
lea eax, [esp + 0x80]
push eax
lea eax, [esp + 0xbc]
push eax
call fcn.10083f40
lea eax, [esp + 0x1350]
push eax
lea ecx, [esp + 0xb0]
call fcn.100768e0
lea eax, [esp + 0x1360]
push eax
lea ecx, [esp + 0xa0]
call fcn.100768e0
sub esp, 8
lea eax, [esp + 0xcc]
push eax
lea eax, [esp + 0x118]
push eax
lea eax, [esp + 0x1360]
push eax
lea eax, [esp + 0x1374]
push eax
lea eax, [esp + 0x2c]
push eax
lea eax, [esp + 0x5c]
mov ecx, ebx
push eax
lea eax, [esp + 0x4c]
push eax
push 1
push dword [esp + 0x64]
lea eax, [esp + 0x80]
push eax
lea eax, [esp + 0xbc]
push eax
call fcn.10083f40
lea eax, [esp + 0xd4]
mov ecx, ebx
push eax
lea eax, [esp + 0x248]
push eax
lea eax, [esp + 0x1a4]
push eax
call fcn.10083e50
lea eax, [esp + 0xc4]
mov ecx, ebx
push eax
lea eax, [esp + 0x248]
push eax
lea eax, [esp + 0x1a4]
push eax
call fcn.10083e50
lea eax, [esp + 0xc4]
mov ecx, ebx
push eax
lea eax, [esp + 0xd8]
push eax
lea eax, [esp + 0xf4]
push eax
call fcn.10083e50
lea eax, [esp + 0xc4]
mov ecx, ebx
push eax
lea eax, [esp + 0xd8]
push eax
lea eax, [esp + 0x24c]
push eax
lea eax, [esp + 0x13c]
push eax
call fcn.10083ee0
jmp 0x1008ba7f
lea eax, [esp + 0x1560]
push eax
lea ecx, [esp + 0x18]
call fcn.10076700
jmp 0x1008ba6a
cmp byte [ebx + 0x11a], 0
lea ecx, [esp + 0xac]
je 0x1008b9f3
cmp byte [ebx + 0x11b], 0
je 0x1008b9ab
lea eax, [esp + 0x1370]
push eax
call fcn.100768e0
lea eax, [esp + 0x1380]
push eax
lea ecx, [esp + 0xa0]
call fcn.100768e0
sub esp, 8
lea eax, [esp + 0xdc]
push eax
lea eax, [esp + 0xf8]
push eax
lea eax, [esp + 0x1380]
push eax
lea eax, [esp + 0x1394]
jmp 0x1008ba36
lea eax, [esp + 0x1390]
push eax
call fcn.100768e0
lea eax, [esp + 0x13a0]
push eax
lea ecx, [esp + 0xa0]
call fcn.100768e0
sub esp, 8
lea eax, [esp + 0xcc]
push eax
lea eax, [esp + 0x118]
push eax
lea eax, [esp + 0x13a0]
push eax
lea eax, [esp + 0x13b4]
jmp 0x1008a11c
lea eax, [esp + 0x13b0]
push eax
call fcn.100768e0
lea eax, [esp + 0x13c0]
push eax
lea ecx, [esp + 0xa0]
call fcn.100768e0
sub esp, 8
lea eax, [esp + 0xdc]
push eax
lea eax, [esp + 0xf8]
push eax
lea eax, [esp + 0x13c0]
push eax
lea eax, [esp + 0x13d4]
push eax
lea eax, [esp + 0x2c]
mov ecx, ebx
push eax
lea eax, [esp + 0x5c]
push eax
lea eax, [esp + 0x4c]
push eax
push 1
push dword [esp + 0x4c]
lea eax, [esp + 0x80]
push eax
lea eax, [esp + 0xbc]
push eax
call fcn.100bcf67
lea eax, [esp + 0xd4]
push eax
lea eax, [esp + 0x134]
push eax
push ecx
mov ecx, dword [ebx + 0xa0]
call fcn.100833a0
mov eax, dword [esp + 0xe4]
lea ecx, [esp + 0x1a8]
mov edi, dword [esp + 0x124]
dec eax
cmp edi, eax
jne 0x1008bbbb
cmp dword [esp + 0x144], 0x9000000
jne 0x1008bb79
lea eax, [esp + 0x13d0]
push eax
call fcn.100768e0
lea eax, [esp + 0x40]
push eax
lea eax, [esp + 0x13d4]
push eax
lea eax, [esp + 0x1578]
push eax
lea ecx, [esp + 0x280]
call fcn.10076610
mov ecx, dword [ebx + 0xa0]
push eax
push 2
call fcn.10083430
push 3
push 5
lea ecx, [esp + 0xbec]
call fcn.100767d0
lea eax, [esp + 0x13e0]
push eax
call fcn.100768e0
lea eax, [esp + 0x13e0]
push eax
lea eax, [esp + 0x1584]
push eax
lea ecx, [esp + 0x27c]
call fcn.100765b0
push eax
push ecx
mov ecx, dword [ebx + 0xa0]
call fcn.100833a0
lea eax, [esp + 0x13f0]
push eax
lea ecx, [esp + 0x1ac]
call fcn.100768e0
lea eax, [esp + 0x1400]
push eax
lea ecx, [esp + 0x1c4]
call fcn.100768b0
lea eax, [esp + 0x13f0]
push eax
lea eax, [esp + 0x1404]
push eax
push ecx
mov ecx, dword [ebx + 0xa0]
call fcn.100833a0
jmp 0x1008bf12
lea eax, [esp + 0x1410]
push eax
call fcn.100768e0
lea eax, [esp + 0x1420]
push eax
lea ecx, [esp + 0x1c4]
call fcn.100768b0
lea eax, [esp + 0x1410]
push eax
lea eax, [esp + 0x1424]
push eax
push ecx
mov ecx, dword [ebx + 0xa0]
call fcn.100833a0
jmp 0x1008bf12
mov eax, dword [esp + 0x22c]
mov esi, dword [ebx + 0xa0]
and eax, 0xfc0000
cmp eax, 0x140000
jne 0x1008bc19
lea eax, [esp + 0x1430]
push eax
call fcn.100768e0
lea eax, [esp + 0x1440]
push eax
lea ecx, [esp + 0xb0]
call fcn.100768b0
lea eax, [esp + 0x1430]
push eax
lea eax, [esp + 0x1444]
push eax
push ecx
mov ecx, esi
call fcn.100833a0
mov byte [ebx + 0x119], 1
jmp 0x1008bf12
lea eax, [esp + 0x310]
push eax
call fcn.100768e0
lea eax, [esp + 0x1dc]
push eax
lea ecx, [esp + 0x288]
call fcn.100768b0
lea eax, [esp + 0x310]
push eax
lea eax, [esp + 0x1e0]
push eax
push ecx
mov ecx, esi
call fcn.100833a0
lea eax, [esp + 0x1590]
push eax
lea ecx, [esp + 0x288]
call fcn.100768e0
mov edx, dword [eax]
mov dword [esp + 0x16c], edx
mov edx, dword [eax + 4]
mov dword [esp + 0x164], edx
mov edx, dword [eax + 8]
mov dword [esp + 0x168], edx
mov edx, dword [eax + 0xc]
jmp 0x1008bf0b
cmp byte [ebx + 0x11c], 0
je 0x1008bf12
mov esi, dword [ebx + 0xa0]
mov eax, dword [esp + 0xe4]
dec eax
cmp edi, eax
mov ecx, dword [esi + 4]
mov eax, dword [esi]
jne 0x1008be81
cmp dword [esp + 0x144], 0x9000000
jne 0x1008be25
mov dword [eax + ecx*4], 2
mov eax, dword [esi + 4]
mov dword [esi + 8], eax
inc dword [esi + 4]
mov ecx, dword [esi + 4]
mov eax, dword [esi]
mov dword [eax + ecx*4], 0x80270001
lea eax, [esp + 0x14]
inc dword [esi + 4]
mov ecx, esi
push eax
call fcn.10076cc0
lea eax, [esp + 0x40]
mov ecx, esi
push eax
call fcn.10076cc0
mov ecx, dword [esi + 8]
mov eax, dword [esi]
push 0x10
lea edx, [eax + ecx*4]
mov eax, dword [esi + 4]
sub eax, ecx
mov ecx, esi
dec eax
shl eax, 0x18
or dword [edx], eax
call fcn.10076e40
inc dword [esi + 0x10]
cmp byte [esi + 0x18], 0
je 0x1008bd23
inc dword [esi + 0x14]
mov eax, dword [esp + 0x104]
mov byte [esi + 0x18], 1
mov esi, dword [ebx + 0xa0]
mov dword [esp + 0x2f0], eax
mov eax, dword [esp + 0x20]
mov word [esp + 0x2fc], ax
mov eax, dword [esp + 0x28]
mov ecx, dword [esi + 4]
mov dword [esp + 0x2f4], eax
mov ax, word [esp + 0x22]
mov word [esp + 0x2fe], ax
mov eax, dword [esi]
mov dword [esp + 0x2f8], 0xff0000
mov dword [eax + ecx*4], 1
mov eax, dword [esi + 4]
mov dword [esi + 8], eax
inc dword [esi + 4]
mov ecx, dword [esi + 4]
mov eax, dword [esi]
mov dword [eax + ecx*4], 0x80280001
lea eax, [esp + 0x2f0]
inc dword [esi + 4]
mov ecx, esi
push eax
call fcn.10076cc0
mov ecx, dword [esi + 8]
mov eax, dword [esi]
push 0x10
lea edx, [eax + ecx*4]
mov eax, dword [esi + 4]
sub eax, ecx
mov ecx, esi
dec eax
shl eax, 0x18
or dword [edx], eax
call fcn.10076e40
inc dword [esi + 0x10]
cmp byte [esi + 0x18], 0
je 0x1008bdc5
inc dword [esi + 0x14]
mov byte [esi + 0x18], 1
mov esi, dword [ebx + 0xa0]
mov dword [esp + 0x300], 0
mov dword [esp + 0x30c], 1
mov dword [esp + 0x308], 0xe40000
mov ecx, dword [esi + 4]
mov eax, dword [esi]
mov dword [esp + 0x304], 0
mov dword [eax + ecx*4], 1
mov eax, dword [esi + 4]
mov dword [esi + 8], eax
inc dword [esi + 4]
mov eax, dword [esi]
mov ecx, dword [esi + 4]
mov dword [eax + ecx*4], 0x802f0800
lea eax, [esp + 0x300]
jmp 0x1008be45
mov dword [eax + ecx*4], 1
mov eax, dword [esi + 4]
mov dword [esi + 8], eax
inc dword [esi + 4]
mov eax, dword [esi]
mov ecx, dword [esi + 4]
mov dword [eax + ecx*4], 0x802f0800
lea eax, [esp + 0x14]
inc dword [esi + 4]
mov ecx, esi
push eax
call fcn.10076cc0
mov ecx, dword [esi + 8]
mov eax, dword [esi]
push 0x10
lea edx, [eax + ecx*4]
mov eax, dword [esi + 4]
sub eax, ecx
mov ecx, esi
dec eax
shl eax, 0x18
or dword [edx], eax
call fcn.10076e40
inc dword [esi + 0x10]
cmp byte [esi + 0x18], 0
je 0x1008be78
inc dword [esi + 0x14]
mov byte [esi + 0x18], 1
jmp 0x1008bf12
mov dword [eax + ecx*4], 1
mov eax, dword [esi + 4]
mov dword [esi + 8], eax
inc dword [esi + 4]
mov ecx, dword [esi + 4]
mov eax, dword [esi]
mov dword [eax + ecx*4], 0x802f0003
lea eax, [esp + 0x14]
inc dword [esi + 4]
mov ecx, esi
push eax
call fcn.10076cc0
mov ecx, dword [esi + 8]
mov eax, dword [esi]
push 0x10
lea edx, [eax + ecx*4]
mov eax, dword [esi + 4]
sub eax, ecx
mov ecx, esi
dec eax
shl eax, 0x18
or dword [edx], eax
call fcn.10076e40
inc dword [esi + 0x10]
cmp byte [esi + 0x18], 0
je 0x1008bed4
inc dword [esi + 0x14]
mov dword [esp + 0xbe0], 3
mov edx, dword [esp + 0xbe0]
mov byte [esi + 0x18], 1
mov dword [esp + 0x16c], 0
mov dword [esp + 0x168], 0xe40000
mov dword [esp + 0x164], 0
mov dword [esp + 0x128], edx
mov eax, dword [esp + 0xe4]
inc edi
mov dword [esp + 0x124], edi
cmp edi, eax
jb 0x10085680
test eax, eax
jne 0x1008c08d
cmp dword [esp + 0x144], 0x9000000
jne 0x1008c013
push 7
push 8
lea ecx, [esp + 0x270]
call fcn.100767d0
lea eax, [esp + 0x2c]
push eax
lea eax, [esp + 0x15a4]
push eax
call fcn.100768b0
push eax
push ecx
mov ecx, dword [ebx + 0xa0]
call fcn.100833a0
lea eax, [esp + 0x1dc]
push eax
lea ecx, [esp + 0x26c]
call fcn.100768e0
lea eax, [esp + 0x40]
push eax
lea eax, [esp + 0x1e0]
push eax
push ecx
lea eax, [esp + 0x15bc]
push eax
lea eax, [esp + 0x15d0]
push eax
lea eax, [esp + 0x15e4]
push eax
lea ecx, [esp + 0x1cc]
call fcn.100768b0
mov ecx, eax
call fcn.10076610
mov ecx, eax
call fcn.100832e0
mov ecx, dword [ebx + 0xa0]
push eax
push 2
call fcn.10083430
lea eax, [esp + 0x15e0]
push eax
lea ecx, [esp + 0x30]
call fcn.10076700
push eax
push ecx
lea eax, [esp + 0x15f8]
push eax
lea eax, [esp + 0x160c]
push eax
lea eax, [esp + 0x1620]
push eax
lea ecx, [esp + 0x1c8]
call fcn.100768b0
mov ecx, eax
call fcn.100765b0
jmp 0x1008c035
lea eax, [esp + 0x2c]
push eax
push ecx
lea eax, [esp + 0x1628]
push eax
lea eax, [esp + 0x163c]
push eax
lea ecx, [esp + 0x1c4]
call fcn.100768b0
mov ecx, eax
call fcn.100832e0
push eax
push ecx
mov ecx, dword [ebx + 0xa0]
call fcn.100833a0
lea eax, [esp + 0x1dc]
push eax
lea ecx, [esp + 0x1b8]
call fcn.100768e0
lea eax, [esp + 0x310]
push eax
lea ecx, [esp + 0x1c4]
call fcn.100768b0
lea eax, [esp + 0x1dc]
push eax
lea eax, [esp + 0x314]
push eax
push ecx
mov ecx, dword [ebx + 0xa0]
call fcn.100833a0
lea eax, [esp + 0x1dc]
push eax
lea ecx, [esp + 0x1c4]
call fcn.100768e0
lea eax, [esp + 0x1dc]
push eax
lea eax, [esp + 0xae4]
push eax
push ecx
mov ecx, dword [ebx + 0xa0]
call fcn.100833a0
mov ecx, dword [ebx + 0xa0]
call fcn.10076ca0
mov eax, dword [ebx + 0xa0]
mov ecx, dword [esp + 0x16d4]
pop edi
pop esi
mov eax, dword [eax]
pop ebx
xor ecx, esp
call fcn.1009ebb0
mov esp, ebp
pop ebp
ret