Function at 0x1e771c30
Capabilities:
Inspect section memory permissions

Disassembly:
mov edi, edi
push ebp
mov ebp, esp
sub esp, 0x8e8
push ebx
push esi
mov esi, ecx
mov eax, dword [esi + 0x28]
or ecx, 0xffffffff
mov dword [eax + 0x20], ecx
mov dword [eax + 0x1c], ecx
mov dword [eax + 0x18], ecx
mov dword [eax + 0x14], ecx
mov dword [eax + 0x10], ecx
mov dword [eax + 0xc], ecx
mov dword [eax + 8], ecx
mov dword [eax + 4], ecx
mov dword [eax], ecx
mov dword [eax + 0x24], ecx
mov dword [eax + 0x28], ecx
mov dword [eax + 0x2c], ecx
mov dword [eax + 0x30], ecx
mov dword [eax + 0x34], ecx
mov dword [eax + 0x38], ecx
mov dword [eax + 0x3c], ecx
mov dword [eax + 0x40], ecx
xor ebx, ebx
mov dword [eax + 0x44], ebx
mov eax, dword [esi + 0x28]
push edi
cmp dword [eax], ecx
jne 0x1e771c8d
mov ecx, dword [eax + 0x44]
mov dword [eax], ecx
inc ecx
mov dword [eax + 0x44], ecx
mov ax, word [eax]
xor edx, edx
mov ecx, 1
mov dword [ebp - 0x34], ecx
mov word [ebp - 0x28], ax
mov dword [ebp - 0x2c], 0xe40000
mov dword [ebp - 0x30], ebx
mov word [ebp - 0x26], dx
cmp byte [esi + 0x5131], bl
je 0x1e771cd2
cmp dword [esi + 0x5158], ebx
jne 0x1e771cd2
mov eax, dword [esi + 0x1c]
mov dword [eax + 0x10], ecx
mov ecx, dword [eax]
mov dword [eax + 4], ebx
mov dword [eax + 0x14], ebx
mov dword [ecx], 0xfffe0201
jmp 0x1e771ce6
mov eax, dword [esi + 0x1c]
mov edx, dword [eax]
mov dword [eax + 4], ebx
mov dword [eax + 0x10], ecx
mov dword [eax + 0x14], ebx
mov dword [edx], 0xfffe0200
mov ecx, dword [eax + 4]
mov dword [eax + 8], ecx
inc ecx
mov dword [eax + 4], ecx
mov ecx, dword [esi + 0x1c]
push 0x1e7e5e5c
call fcn.1e76ca50
mov eax, dword [esi + 4]
mov edi, eax
mov ecx, eax
shr edi, 0x12
shr ecx, 0x13
shr eax, 2
and edi, 1
and ecx, 1
and eax, 1
mov dword [ebp - 0x118], edi
mov dword [ebp - 0x3c], ecx
mov dword [ebp - 0x58], eax
mov dword [ebp - 0x54], 4
cmp edi, ebx
je 0x1e771d34
mov dword [ebp - 0x54], 0x44
cmp ecx, ebx
je 0x1e771d3f
or dword [ebp - 0x54], 0x80
mov eax, dword [esi + 0x28]
cmp dword [eax], 0xffffffff
jne 0x1e771d50
mov ecx, dword [eax + 0x44]
mov dword [eax], ecx
inc ecx
mov dword [eax + 0x44], ecx
mov eax, dword [eax]
mov ecx, dword [esi + 0x1c]
push eax
push ebx
push ebx
call fcn.1e770400
test byte [esi + 0x18], 2
je 0x1e771dbb
cmp dword [ebp - 0x58], ebx
je 0x1e771dbb
mov eax, dword [esi + 0x28]
cmp dword [eax + 4], 0xffffffff
jne 0x1e771d7a
mov ecx, dword [eax + 0x44]
mov dword [eax + 4], ecx
inc dword [eax + 0x44]
mov edx, dword [eax + 4]
mov ecx, dword [esi + 0x1c]
push edx
push ebx
push 3
call fcn.1e770400
mov ecx, dword [esi + 0x28]
lea eax, [ebp - 0x138]
push eax
call fcn.1e7707f0
mov ecx, dword [eax]
mov edx, dword [eax + 4]
mov dword [ebp - 0x100], ecx
mov ecx, dword [eax + 8]
mov dword [ebp - 0xfc], edx
mov edx, dword [eax + 0xc]
mov dword [ebp - 0xf8], ecx
mov dword [ebp - 0xf4], edx
mov eax, dword [esi + 4]
mov dword [ebp - 0xd0], ebx
mov dword [ebp - 0x114], ebx
test eax, 0x800000
je 0x1e771e3d
test al, 2
je 0x1e771e00
mov eax, dword [esi + 0x28]
cmp dword [eax + 0x1c], 0xffffffff
jne 0x1e771de7
mov ecx, dword [eax + 0x44]
mov dword [eax + 0x1c], ecx
inc dword [eax + 0x44]
mov edx, dword [eax + 0x1c]
mov ecx, dword [esi + 0x1c]
push edx
push 1
push ebx
call fcn.1e770400
mov dword [ebp - 0xd0], 1
test byte [esi + 0x18], 2
je 0x1e771e3d
cmp dword [ebp - 0x58], ebx
je 0x1e771e3d
test byte [esi + 4], 8
je 0x1e771e3d
mov eax, dword [esi + 0x28]
cmp dword [eax + 0x20], 0xffffffff
jne 0x1e771e23
mov ecx, dword [eax + 0x44]
mov dword [eax + 0x20], ecx
inc dword [eax + 0x44]
mov edx, dword [eax + 0x20]
mov ecx, dword [esi + 0x1c]
push edx
push 1
push 3
call fcn.1e770400
mov dword [ebp - 0x114], 1
cmp edi, ebx
je 0x1e771eab
test byte [esi + 4], 0x10
je 0x1e771e79
mov eax, dword [esi + 0x28]
cmp dword [eax + 0x14], 0xffffffff
jne 0x1e771e59
mov ecx, dword [eax + 0x44]
mov dword [eax + 0x14], ecx
inc dword [eax + 0x44]
mov edx, dword [eax + 0x14]
mov ecx, dword [esi + 0x1c]
push edx
push ebx
push 0xa
call fcn.1e770400
mov ecx, dword [esi + 0x28]
lea eax, [ebp - 0x138]
push eax
call fcn.1e7708e0
jmp 0x1e771e88
mov ecx, dword [esi + 0x24]
lea eax, [ebp - 0x138]
push eax
call fcn.1e76cb70
mov edx, dword [eax + 4]
mov ecx, dword [eax]
mov dword [ebp - 0xdc], edx
mov edx, dword [eax + 0xc]
mov dword [ebp - 0xe0], ecx
mov ecx, dword [eax + 8]
mov dword [ebp - 0xd4], edx
mov dword [ebp - 0xd8], ecx
cmp dword [ebp - 0x3c], ebx
je 0x1e771f1b
test byte [esi + 4], 0x20
je 0x1e771ee9
mov eax, dword [esi + 0x28]
cmp dword [eax + 0x18], 0xffffffff
jne 0x1e771ec8
mov ecx, dword [eax + 0x44]
mov dword [eax + 0x18], ecx
inc dword [eax + 0x44]
mov edx, dword [eax + 0x18]
mov ecx, dword [esi + 0x1c]
push edx
push 1
push 0xa
call fcn.1e770400
mov ecx, dword [esi + 0x28]
lea eax, [ebp - 0x138]
push eax
call fcn.1e770930
jmp 0x1e771ef8
mov ecx, dword [esi + 0x24]
lea eax, [ebp - 0x138]
push eax
call fcn.1e76cbc0
mov edx, dword [eax + 4]
mov ecx, dword [eax]
mov dword [ebp - 0x10c], edx
mov edx, dword [eax + 0xc]
mov dword [ebp - 0x110], ecx
mov ecx, dword [eax + 8]
mov dword [ebp - 0x104], edx
mov dword [ebp - 0x108], ecx
test byte [esi + 8], 0x20
je 0x1e771fc5
test byte [esi + 4], 0x40
je 0x1e771f93
mov eax, dword [esi + 0x28]
cmp dword [eax + 8], 0xffffffff
jne 0x1e771f3d
mov ecx, dword [eax + 0x44]
mov dword [eax + 8], ecx
inc dword [eax + 0x44]
mov edx, dword [eax + 8]
mov ecx, dword [esi + 0x1c]
push edx
push ebx
push 4
call fcn.1e770400
mov eax, dword [esi + 0x28]
cmp dword [eax + 8], 0xffffffff
jne 0x1e771f5e
mov ecx, dword [eax + 0x44]
mov dword [eax + 8], ecx
inc dword [eax + 0x44]
mov dx, word [eax + 8]
xor eax, eax
mov word [ebp - 0x90], dx
xor edx, edx
mov ecx, 1
mov word [ebp - 0x8e], dx
mov dword [ebp - 0x120], eax
mov eax, dword [ebp - 0x90]
mov dword [ebp - 0x128], ecx
mov dword [ebp - 0x124], ebx
jmp 0x1e771fbf
lea ecx, [ebp - 0x138]
push ecx
mov ecx, dword [esi + 0x24]
call fcn.1e76cdc0
mov edx, dword [eax]
mov ecx, dword [eax + 4]
mov dword [ebp - 0x128], edx
mov edx, dword [eax + 8]
mov eax, dword [eax + 0xc]
mov dword [ebp - 0x124], ecx
mov dword [ebp - 0x120], edx
mov dword [ebp - 0x11c], eax
test byte [esi + 0x18], 4
je 0x1e7720b2
test byte [esi + 4], 0x80
je 0x1e772007
mov eax, dword [esi + 0x28]
cmp dword [eax + 0xc], 0xffffffff
jne 0x1e771fe7
mov ecx, dword [eax + 0x44]
mov dword [eax + 0xc], ecx
inc dword [eax + 0x44]
mov edx, dword [eax + 0xc]
mov ecx, dword [esi + 0x1c]
push edx
push ebx
push 1
call fcn.1e770400
mov ecx, dword [esi + 0x28]
lea eax, [ebp - 0x138]
push eax
call fcn.1e770840
jmp 0x1e772016
mov ecx, dword [esi + 0x24]
lea eax, [ebp - 0x138]
push eax
call fcn.1e76cbc0
mov edx, dword [eax + 4]
mov ecx, dword [eax]
mov dword [ebp - 0x78], edx
mov edx, dword [eax + 0xc]
mov dword [ebp - 0x7c], ecx
mov ecx, dword [eax + 8]
mov eax, dword [esi + 4]
mov dword [ebp - 0x70], edx
mov dword [ebp - 0x74], ecx
test eax, 0x4000000
je 0x1e7720b2
test eax, 0x10000
je 0x1e772084
mov eax, dword [esi + 0x28]
cmp dword [eax + 0x10], 0xffffffff
jne 0x1e772050
mov ecx, dword [eax + 0x44]
mov dword [eax + 0x10], ecx
inc dword [eax + 0x44]
mov edx, dword [eax + 0x10]
mov ecx, dword [esi + 0x1c]
push edx
push ebx
push 2
call fcn.1e770400
mov ecx, dword [esi + 0x28]
lea eax, [ebp - 0x138]
push eax
call fcn.1e770890
mov edx, dword [eax + 4]
mov ecx, dword [eax]
mov dword [ebp - 0x64], edx
mov edx, dword [eax + 0xc]
mov dword [ebp - 0x68], ecx
mov ecx, dword [eax + 8]
mov dword [ebp - 0x5c], edx
jmp 0x1e7720af
mov eax, 2
mov ecx, eax
xor edx, edx
mov word [ebp - 0x90], cx
mov word [ebp - 0x8e], dx
mov dword [ebp - 0x68], eax
mov eax, dword [ebp - 0x90]
mov ecx, 0xe40000
mov dword [ebp - 0x64], ebx
mov dword [ebp - 0x5c], eax
mov dword [ebp - 0x60], ecx
mov dword [ebp - 0x50], ebx
mov dword [ebp - 0x6c], 1
lea edi, [ebp - 0x8e8]
mov dword [ebp - 0x38], 0x24
lea esp, [esp]
mov cl, byte [ebp - 0x6c]
test byte [esi + 5], cl
je 0x1e77214a
mov eax, dword [esi + 0x28]
mov ecx, dword [ebp - 0x38]
cmp dword [ecx + eax], 0xffffffff
jne 0x1e7720ed
mov edx, dword [eax + 0x44]
mov dword [ecx + eax], edx
inc dword [eax + 0x44]
mov ecx, dword [ebp - 0x38]
mov edx, dword [ecx + eax]
mov eax, dword [ebp - 0x50]
mov ecx, dword [esi + 0x1c]
push edx
push eax
push 5
call fcn.1e770400
mov eax, dword [esi + 0x28]
mov ecx, dword [ebp - 0x38]
cmp dword [ecx + eax], 0xffffffff
jne 0x1e772117
mov edx, dword [eax + 0x44]
mov dword [ecx + eax], edx
inc dword [eax + 0x44]
mov edx, dword [ebp - 0x38]
mov ax, word [edx + eax]
mov ecx, 1
mov dword [edi], ecx
xor edx, edx
mov word [ebp - 0x90], ax
mov eax, 0xe40000
xor ecx, ecx
mov dword [edi + 4], ecx
mov word [ebp - 0x8e], dx
mov dword [edi + 8], eax
mov eax, dword [ebp - 0x90]
jmp 0x1e772176
mov eax, 2
xor ecx, ecx
mov dword [edi], eax
xor edx, edx
mov word [ebp - 0x13c], cx
xor eax, eax
mov ecx, 0xe40000
mov dword [edi + 4], eax
mov word [ebp - 0x13a], dx
mov eax, dword [ebp - 0x13c]
mov dword [edi + 8], ecx
mov edx, dword [ebp - 0x6c]
mov dword [edi + 0xc], eax
mov eax, dword [ebp - 0x38]
mov ecx, 1
add dword [ebp - 0x50], ecx
add eax, 4
add edi, 0x10
rol edx, 1
mov dword [ebp - 0x38], eax
mov dword [ebp - 0x6c], edx
cmp eax, 0x44
jb 0x1e7720d0
mov eax, dword [ebp - 0x110]
mov edx, dword [ebp - 0x10c]
mov dword [ebp - 0xcc], eax
mov eax, dword [ebp - 0x108]
mov dword [ebp - 0xc8], edx
mov edx, dword [ebp - 0x104]
mov dword [ebp - 0xc4], eax
mov dword [ebp - 0xc0], edx
cmp dword [ebp - 0xd0], ebx
je 0x1e7723a1
mov eax, dword [esi + 0x28]
cmp dword [eax + 0x1c], 0xffffffff
mov dword [ebp - 0x10], ebx
mov dword [ebp - 0xc], 2
mov dword [ebp - 8], 0xf0000
mov dword [ebp - 4], ebx
jne 0x1e772200
mov edx, dword [eax + 0x44]
mov dword [eax + 0x1c], edx
add dword [eax + 0x44], ecx
mov ax, word [eax + 0x1c]
lea edx, [ebp - 0x4c]
mov dword [ebp - 0x4c], ecx
mov word [ebp - 0x40], ax
push edx
xor ecx, ecx
lea eax, [ebp - 0x10]
push eax
mov word [ebp - 0x3e], cx
mov ecx, dword [esi + 0x1c]
mov edi, 0xe40000
push 1
mov dword [ebp - 0x44], edi
mov dword [ebp - 0x48], ebx
call fcn.1e7704f0
mov eax, dword [esi + 0x28]
xor edx, edx
cmp dword [eax], 0xffffffff
mov ecx, 2
mov dword [ebp - 0xbc], ebx
mov word [ebp - 0xb0], cx
mov dword [ebp - 0xb4], edi
mov dword [ebp - 0xb8], ebx
mov word [ebp - 0xae], dx
jne 0x1e772266
mov ecx, dword [eax + 0x44]
mov dword [eax], ecx
inc ecx
mov dword [eax + 0x44], ecx
mov ax, word [eax]
mov word [ebp - 0x40], ax
xor eax, eax
lea ecx, [ebp - 0x4c]
push ecx
mov ecx, dword [esi + 0x1c]
lea edx, [ebp - 0xbc]
mov word [ebp - 0x3e], ax
push edx
lea eax, [ebp - 0x10]
push eax
push 2
mov dword [ebp - 0x4c], 1
mov dword [ebp - 0x44], edi
mov dword [ebp - 0x48], 0x1000000
mov dword [ebp - 0x10], ebx
mov dword [ebp - 0xc], 2
mov dword [ebp - 8], 0x70000
mov dword [ebp - 4], ebx
call fcn.1e770580
mov eax, dword [esi + 0x28]
xor edx, edx
cmp dword [eax], 0xffffffff
mov ecx, 2
mov dword [ebp - 0xf0], ebx
mov word [ebp - 0xe4], cx
mov dword [ebp - 0xe8], edi
mov dword [ebp - 0xec], ebx
mov word [ebp - 0xe2], dx
jne 0x1e7722e9
mov ecx, dword [eax + 0x44]
mov dword [eax], ecx
inc ecx
mov dword [eax + 0x44], ecx
mov ax, word [eax]
xor ecx, ecx
mov word [ebp - 0xae], cx
push 3
lea ecx, [ebp - 0x158]
mov word [ebp - 0xb0], ax
mov edx, 9
xor eax, eax
push ecx
lea ecx, [ebp - 0x4c]
mov dword [ebp - 0xbc], 1
mov dword [ebp - 0xb4], edi
mov dword [ebp - 0xb8], ebx
mov dword [ebp - 0x4c], 2
mov word [ebp - 0x40], dx
mov dword [ebp - 0x44], edi
mov dword [ebp - 0x48], ebx
mov word [ebp - 0x3e], ax
call fcn.1e7698e0
lea edx, [ebp - 0xbc]
push edx
lea eax, [ebp - 0xf0]
push eax
lea ecx, [ebp - 0x158]
push ecx
mov ecx, dword [esi + 0x1c]
lea edx, [ebp - 0x10]
push edx
push 4
mov dword [ebp - 0x10], ebx
mov dword [ebp - 0xc], 2
mov dword [ebp - 8], 0x70000
mov dword [ebp - 4], ebx
call fcn.1e770620
xor eax, eax
mov ecx, 2
xor edx, edx
mov word [ebp - 0x90], cx
mov word [ebp - 0x8e], dx
mov dword [ebp - 0x34], eax
mov eax, dword [ebp - 0x90]
mov ecx, edi
mov dword [ebp - 0x30], ebx
mov dword [ebp - 0x2c], ecx
mov dword [ebp - 0x28], eax
cmp dword [ebp - 0x114], ebx
je 0x1e77257e
mov eax, dword [esi + 0x28]
cmp dword [eax + 0x20], 0xffffffff
mov dword [ebp - 0x10], ebx
mov dword [ebp - 0xc], 3
mov dword [ebp - 8], 0x70000
mov dword [ebp - 4], ebx
jne 0x1e7723d3
mov ecx, dword [eax + 0x44]
mov dword [eax + 0x20], ecx
inc dword [eax + 0x44]
mov dx, word [eax + 0x20]
lea ecx, [ebp - 0x4c]
push ecx
mov ecx, dword [esi + 0x1c]
mov word [ebp - 0x40], dx
lea edx, [ebp - 0x10]
push edx
xor eax, eax
mov edi, 0xe40000
push 1
mov dword [ebp - 0x4c], 1
mov dword [ebp - 0x44], edi
mov dword [ebp - 0x48], ebx
mov word [ebp - 0x3e], ax
call fcn.1e7704f0
mov eax, 3
mov word [ebp - 0xb0], ax
mov dword [ebp - 0xc], eax
mov eax, dword [esi + 0x28]
xor ecx, ecx
cmp dword [eax + 4], 0xffffffff
mov dword [ebp - 0xbc], ebx
mov dword [ebp - 0xb4], edi
mov dword [ebp - 0xb8], ebx
mov word [ebp - 0xae], cx
mov dword [ebp - 0x10], ebx
mov dword [ebp - 8], 0x70000
mov dword [ebp - 4], ebx
jne 0x1e77244e
mov edx, dword [eax + 0x44]
mov dword [eax + 4], edx
inc dword [eax + 0x44]
mov ax, word [eax + 4]
mov word [ebp - 0x40], ax
xor eax, eax
lea ecx, [ebp - 0x4c]
push ecx
mov ecx, dword [esi + 0x1c]
lea edx, [ebp - 0xbc]
mov word [ebp - 0x3e], ax
push edx
lea eax, [ebp - 0x10]
push eax
push 2
mov dword [ebp - 0x4c], 1
mov dword [ebp - 0x44], edi
mov dword [ebp - 0x48], 0x1000000
call fcn.1e770580
mov eax, dword [esi + 0x28]
mov ecx, 3
xor edx, edx
cmp dword [eax + 4], 0xffffffff
mov dword [ebp - 0xf0], ebx
mov word [ebp - 0xe4], cx
mov dword [ebp - 0xe8], edi
mov dword [ebp - 0xec], ebx
mov word [ebp - 0xe2], dx
mov dword [ebp - 0x10], ebx
mov dword [ebp - 0xc], ecx
mov dword [ebp - 8], 0x70000
mov dword [ebp - 4], ebx
jne 0x1e7724cf
mov ecx, dword [eax + 0x44]
mov dword [eax + 4], ecx
inc dword [eax + 0x44]
mov dx, word [eax + 4]
xor eax, eax
mov word [ebp - 0xae], ax
mov ecx, 9
mov word [ebp - 0xb0], dx
push 3
lea eax, [ebp - 0x158]
mov word [ebp - 0x40], cx
xor edx, edx
push eax
lea ecx, [ebp - 0x4c]
mov dword [ebp - 0xbc], 1
mov dword [ebp - 0xb4], edi
mov dword [ebp - 0xb8], ebx
mov dword [ebp - 0x4c], 2
mov dword [ebp - 0x44], edi
mov dword [ebp - 0x48], ebx
mov word [ebp - 0x3e], dx
call fcn.1e7698e0
lea ecx, [ebp - 0xbc]
push ecx
lea edx, [ebp - 0xf0]
push edx
lea eax, [ebp - 0x158]
push eax
lea ecx, [ebp - 0x10]
push ecx
mov ecx, dword [esi + 0x1c]
push 4
call fcn.1e770620
xor eax, eax
mov edx, 3
xor ecx, ecx
mov word [ebp - 0x90], dx
mov word [ebp - 0x8e], cx
mov edx, dword [ebp - 0x90]
mov dword [ebp - 0x100], eax
mov dword [ebp - 0xfc], ebx
mov dword [ebp - 0xf8], edi
mov dword [ebp - 0xf4], edx
mov eax, dword [esi + 0x18]
test al, 4
je 0x1e7733a9
mov eax, dword [esi + 8]
shr eax, 0x12
and eax, 3
xor ecx, ecx
mov dword [ebp - 0x50], eax
push 3
lea edx, [ebp - 0x158]
xor eax, eax
mov word [ebp - 0x3e], cx
mov edi, 2
push edx
lea ecx, [ebp - 0x4c]
mov dword [ebp - 0x10], ebx
mov dword [ebp - 0xc], 8
mov dword [ebp - 8], 0x10000
mov dword [ebp - 4], ebx
mov dword [ebp - 0x4c], edi
mov word [ebp - 0x40], ax
mov dword [ebp - 0x44], 0xe40000
mov dword [ebp - 0x48], ebx
call fcn.1e7698e0
lea eax, [ebp - 0x158]
push eax
lea ecx, [ebp - 0x10]
push ecx
mov ecx, dword [esi + 0x1c]
push 1
call fcn.1e7704f0
push ebx
lea ecx, [ebp - 0x158]
xor edx, edx
xor eax, eax
push ecx
lea ecx, [ebp - 0x4c]
mov dword [ebp - 0x10], ebx
mov dword [ebp - 0xc], 7
mov dword [ebp - 8], 0xf0000
mov dword [ebp - 4], ebx
mov dword [ebp - 0x4c], edi
mov word [ebp - 0x40], dx
mov dword [ebp - 0x44], 0xe40000
mov dword [ebp - 0x48], ebx
mov word [ebp - 0x3e], ax
call fcn.1e7698e0
mov ecx, dword [esi + 0x1c]
lea edx, [ebp - 0x158]
push edx
lea eax, [ebp - 0x10]
push eax
push 1
call fcn.1e7704f0
test byte [esi + 0x18], 2
je 0x1e772697
xor ecx, ecx
push ebx
lea eax, [ebp - 0x158]
mov word [ebp - 0x40], cx
xor edx, edx
push eax
lea ecx, [ebp - 0x4c]
mov dword [ebp - 0x10], ebx
mov dword [ebp - 0xc], 1
mov dword [ebp - 8], 0x70000
mov dword [ebp - 4], ebx
mov dword [ebp - 0x4c], edi
mov dword [ebp - 0x44], 0xe40000
mov dword [ebp - 0x48], ebx
mov word [ebp - 0x3e], dx
call fcn.1e7698e0
lea ecx, [ebp - 0x158]
push ecx
mov ecx, dword [esi + 0x1c]
lea edx, [ebp - 0x10]
push edx
push 1
call fcn.1e7704f0
test byte [esi + 0x18], 1
je 0x1e7726d8
xor eax, eax
lea edx, [ebp - 0x4c]
mov word [ebp - 0x40], ax
push edx
xor ecx, ecx
lea eax, [ebp - 0x10]
push eax
mov word [ebp - 0x3e], cx
mov ecx, dword [esi + 0x1c]
push 1
mov dword [ebp - 0x10], ebx
mov dword [ebp - 0xc], ebx
mov dword [ebp - 8], 0xf0000
mov dword [ebp - 4], ebx
mov dword [ebp - 0x4c], edi
mov dword [ebp - 0x44], 0xe40000
mov dword [ebp - 0x48], ebx
call fcn.1e7704f0
xor edi, edi
lea ebx, [ebx]
push edi
lea ecx, [ebp - 0x8c]
push ecx
lea ecx, [ebp - 0x7c]
call fcn.1e7698e0
cmp edi, dword [ebp - 0x50]
jne 0x1e77272b
xor eax, eax
mov edx, 8
mov word [ebp - 0x90], dx
xor ecx, ecx
xor edx, edx
mov word [ebp - 0x8e], dx
mov dword [ebp - 0x8c], eax
mov dword [ebp - 0x88], eax
mov eax, dword [ebp - 0x90]
mov dword [ebp - 0x84], ecx
mov dword [ebp - 0x80], eax
jmp 0x1e7727a2
mov eax, dword [ebp - 0x8c]
mov dword [ebp - 0x4c], eax
mov eax, dword [ebp - 0x80]
xor edx, edx
mov ecx, 8
mov word [ebp - 0x40], ax
mov word [ebp - 0xb0], cx
mov dword [ebp - 0xc], ecx
mov ecx, dword [ebp - 0x84]
shr eax, 0x10
mov word [ebp - 0xae], dx
lea edx, [ebp - 0x4c]
push edx
mov word [ebp - 0x3e], ax
mov dword [ebp - 0x44], ecx
lea eax, [ebp - 0xbc]
push eax
lea ecx, [ebp - 0x10]
push ecx
mov ecx, dword [esi + 0x1c]
push 2
mov dword [ebp - 0xbc], ebx
mov dword [ebp - 0xb4], ebx
mov dword [ebp - 0xb8], ebx
mov dword [ebp - 0x10], ebx
mov dword [ebp - 8], 0x10000
mov dword [ebp - 4], ebx
mov dword [ebp - 0x48], 0x1000000
call fcn.1e770580
test dword [esi + 4], 0x4000000
je 0x1e772f3f
push edi
lea edx, [ebp - 0x138]
push edx
lea ecx, [ebp - 0x68]
mov dword [ebp - 0x2b8], ebx
mov dword [ebp - 0x2b4], 0xa
mov dword [ebp - 0x2b0], 0x20000
mov dword [ebp - 0x2ac], ebx
call fcn.1e7698e0
mov ecx, dword [esi + 0x1c]
push eax
lea eax, [ebp - 0x2b8]
push eax
push 1
call fcn.1e7704f0
mov ecx, 0xa
xor edx, edx
mov word [ebp - 0x15c], cx
mov dword [ebp - 0x2c4], ecx
mov eax, 1
xor ecx, ecx
mov word [ebp - 0x15a], dx
push eax
lea edx, [ebp - 0x158]
mov word [ebp - 0xe2], cx
push edx
lea ecx, [ebp - 0xf0]
mov dword [ebp - 0x168], ebx
mov dword [ebp - 0x160], 0x550000
mov dword [ebp - 0x164], ebx
mov dword [ebp - 0x2c8], ebx
mov dword [ebp - 0x2c0], 0x20000
mov dword [ebp - 0x2bc], ebx
mov dword [ebp - 0xf0], 2
mov word [ebp - 0xe4], ax
mov dword [ebp - 0xe8], 0xe40000
mov dword [ebp - 0xec], ebx
call fcn.1e7698e0
lea eax, [ebp - 0x158]
push eax
lea ecx, [ebp - 0x168]
push ecx
mov ecx, dword [esi + 0x1c]
lea edx, [ebp - 0x2c8]
push edx
push 5
call fcn.1e770580
xor ecx, ecx
mov eax, 0xa
mov word [ebp - 0x1ca], cx
push 3
lea ecx, [ebp - 0x4a8]
mov word [ebp - 0x1cc], ax
mov dword [ebp - 0x344], eax
mov edx, 1
xor eax, eax
push ecx
lea ecx, [ebp - 0x1b8]
mov dword [ebp - 0x1d8], ebx
mov dword [ebp - 0x1d0], 0x550000
mov dword [ebp - 0x1d4], ebx
mov dword [ebp - 0x348], ebx
mov dword [ebp - 0x340], 0x20000
mov dword [ebp - 0x33c], ebx
mov dword [ebp - 0x1b8], 2
mov word [ebp - 0x1ac], dx
mov dword [ebp - 0x1b0], 0xe40000
mov dword [ebp - 0x1b4], ebx
mov word [ebp - 0x1aa], ax
call fcn.1e7698e0
lea edx, [ebp - 0x4a8]
push edx
lea eax, [ebp - 0x1d8]
push eax
lea ecx, [ebp - 0x348]
push ecx
mov ecx, dword [esi + 0x1c]
push 2
call fcn.1e770580
mov dword [ebp - 0x1f8], ebx
mov edx, 0xa
lea ecx, [ebp - 0x1f8]
push ecx
mov ecx, dword [esi + 0x1c]
mov word [ebp - 0x1ec], dx
lea edx, [ebp - 0x328]
push edx
xor eax, eax
push 0x2e
mov dword [ebp - 0x1f0], 0x550000
mov dword [ebp - 0x1f4], ebx
mov word [ebp - 0x1ea], ax
mov dword [ebp - 0x328], 3
mov dword [ebp - 0x324], ebx
mov dword [ebp - 0x320], 0x10000
mov dword [ebp - 0x31c], ebx
call fcn.1e7704f0
xor eax, eax
mov word [ebp - 0x44c], ax
mov ecx, 2
mov eax, ecx
mov dword [ebp - 0x2a8], eax
xor eax, eax
mov dword [ebp - 0x2a4], eax
mov edx, 1
mov word [ebp - 0x44a], dx
mov edx, 4
mov word [ebp - 0x13c], dx
mov edx, 1
mov word [ebp - 0x13a], dx
mov eax, 0xe40000
mov dword [ebp - 0x2a0], eax
mov eax, dword [ebp - 0x13c]
mov dword [ebp - 0x29c], eax
xor eax, eax
mov word [ebp - 0x30a], ax
sub esp, 0x10
mov eax, esp
mov dword [eax], ebx
mov edx, 6
mov word [ebp - 0x30c], dx
xor edx, edx
mov dword [eax + 4], edx
mov dword [ebp - 0x310], 0xe40000
mov edx, dword [ebp - 0x310]
mov dword [eax + 8], edx
mov edx, dword [ebp - 0x30c]
mov dword [eax + 0xc], edx
mov edx, dword [ebp - 0x34]
sub esp, 0x10
mov eax, esp
mov dword [eax], ecx
xor ecx, ecx
mov dword [eax + 4], ecx
mov ecx, 0xe40000
mov dword [eax + 8], ecx
mov ecx, dword [ebp - 0x44c]
mov dword [eax + 0xc], ecx
mov ecx, dword [ebp - 0x30]
sub esp, 0x10
mov eax, esp
mov dword [eax], edx
mov edx, dword [ebp - 0x2c]
mov dword [eax + 4], ecx
mov ecx, dword [ebp - 0x28]
mov dword [eax + 8], edx
mov dword [eax + 0xc], ecx
xor ecx, ecx
sub esp, 0x10
mov eax, esp
mov dword [eax], ecx
mov ecx, 0xc
mov dword [eax + 4], ecx
mov ecx, 0xf0000
mov dword [eax + 8], ecx
xor ecx, ecx
mov dword [eax + 0xc], ecx
mov ecx, esi
call fcn.1e770e50
mov edx, 6
xor ecx, ecx
mov word [ebp - 0x42c], dx
xor eax, eax
mov word [ebp - 0x42a], ax
mov eax, 0x12
mov word [ebp - 0x40c], ax
xor eax, eax
mov word [ebp - 0x40a], ax
mov eax, 0xc
mov word [ebp - 0x3ec], ax
xor eax, eax
mov word [ebp - 0x3ea], ax
sub esp, 0x10
mov eax, esp
mov dword [eax], ecx
mov dword [eax + 4], ecx
mov ecx, dword [ebp - 0x42c]
mov edx, 0xe40000
mov dword [eax + 8], edx
mov dword [eax + 0xc], ecx
sub esp, 0x10
mov eax, esp
mov ecx, 2
mov dword [eax], ecx
xor ecx, ecx
mov dword [eax + 4], ecx
mov ecx, edx
mov edx, dword [ebp - 0x40c]
mov dword [eax + 8], ecx
mov dword [eax + 0xc], edx
xor ecx, ecx
sub esp, 0x10
mov eax, esp
mov dword [eax], ecx
mov dword [eax + 4], ecx
mov ecx, 0xe40000
mov dword [eax + 8], ecx
mov ecx, dword [ebp - 0x3ec]
mov dword [eax + 0xc], ecx
xor ecx, ecx
sub esp, 0x10
mov eax, esp
mov dword [eax], ecx
mov ecx, 0xa
mov dword [eax + 4], ecx
mov ecx, 0xf0000
mov dword [eax + 8], ecx
xor ecx, ecx
mov dword [eax + 0xc], ecx
mov ecx, esi
call fcn.1e770e50
xor eax, eax
mov word [ebp - 0x3da], ax
mov eax, 0x1a
mov word [ebp - 0x41c], ax
xor eax, eax
mov word [ebp - 0x41a], ax
mov eax, 0xa
xor ecx, ecx
mov word [ebp - 0x43c], ax
xor eax, eax
sub esp, 0x10
mov word [ebp - 0x43a], ax
mov eax, esp
mov dword [eax], ecx
mov dword [eax + 4], ecx
mov edx, 6
mov word [ebp - 0x3dc], dx
mov ecx, dword [ebp - 0x3dc]
mov edx, 0xe40000
mov dword [eax + 8], edx
mov dword [eax + 0xc], ecx
sub esp, 0x10
mov eax, esp
mov ecx, 2
mov dword [eax], ecx
xor ecx, ecx
mov dword [eax + 4], ecx
mov ecx, edx
mov edx, dword [ebp - 0x41c]
mov dword [eax + 8], ecx
mov dword [eax + 0xc], edx
sub esp, 0x10
xor ecx, ecx
mov eax, esp
mov dword [eax], ecx
mov dword [eax + 4], ecx
mov ecx, 0xe40000
mov dword [eax + 8], ecx
mov ecx, dword [ebp - 0x43c]
mov dword [eax + 0xc], ecx
xor ecx, ecx
sub esp, 0x10
mov eax, esp
mov dword [eax], ecx
mov ecx, 9
mov dword [eax + 4], ecx
mov ecx, 0xf0000
mov dword [eax + 8], ecx
xor ecx, ecx
mov dword [eax + 0xc], ecx
mov ecx, esi
call fcn.1e770e50
xor ecx, ecx
mov edx, 7
mov eax, 0xe40000
cmp edi, dword [ebp - 0x50]
jne 0x1e772ca0
mov dword [ebp - 0x230], eax
mov word [ebp - 0x22a], cx
mov dword [ebp - 0x250], eax
xor eax, eax
lea ecx, [ebp - 0x238]
mov word [ebp - 0x22c], dx
mov edx, 9
mov word [ebp - 0x24a], ax
push ecx
mov dword [ebp - 0x238], ebx
mov dword [ebp - 0x234], ebx
mov dword [ebp - 0x258], ebx
mov word [ebp - 0x24c], dx
mov dword [ebp - 0x254], ebx
mov dword [ebp - 0x398], 4
mov dword [ebp - 0x394], ebx
mov dword [ebp - 0x390], 0xf0000
mov dword [ebp - 0x38c], ebx
lea eax, [ebp - 0x258]
lea ecx, [ebp - 0x398]
jmp 0x1e772d1a
mov dword [ebp - 0x270], eax
mov word [ebp - 0x26a], cx
mov dword [ebp - 0x290], eax
xor eax, eax
lea ecx, [ebp - 0x278]
mov word [ebp - 0x26c], dx
mov edx, 9
mov word [ebp - 0x28a], ax
push ecx
mov dword [ebp - 0x278], ebx
mov dword [ebp - 0x274], ebx
mov dword [ebp - 0x298], ebx
mov word [ebp - 0x28c], dx
mov dword [ebp - 0x294], ebx
mov dword [ebp - 0x358], ebx
mov dword [ebp - 0x354], 7
mov dword [ebp - 0x350], 0xf0000
mov dword [ebp - 0x34c], ebx
lea eax, [ebp - 0x298]
lea ecx, [ebp - 0x358]
lea edx, [ebp - 0x8c]
push edx
push eax
push ecx
mov ecx, dword [esi + 0x1c]
push 4
call fcn.1e770620
test byte [esi + 0x18], 1
je 0x1e772dc9
xor edx, edx
xor ecx, ecx
mov word [ebp - 0x27c], dx
mov eax, 0xe40000
mov word [ebp - 0x27a], cx
mov dword [ebp - 0x280], eax
mov edx, 0xa
mov dword [ebp - 0x210], eax
xor eax, eax
lea ecx, [ebp - 0x288]
push ecx
mov word [ebp - 0x20c], dx
lea edx, [ebp - 0x8c]
push edx
mov word [ebp - 0x20a], ax
lea eax, [ebp - 0x218]
push eax
lea ecx, [ebp - 0x3b8]
push ecx
mov ecx, dword [esi + 0x1c]
push 4
mov dword [ebp - 0x288], ebx
mov dword [ebp - 0x284], ebx
mov dword [ebp - 0x218], ebx
mov dword [ebp - 0x214], ebx
mov dword [ebp - 0x3b8], ebx
mov dword [ebp - 0x3b4], ebx
mov dword [ebp - 0x3b0], 0x70000
mov dword [ebp - 0x3ac], ebx
call fcn.1e770620
test byte [esi + 0x18], 2
je 0x1e77339a
cmp dword [ebp - 0x58], ebx
je 0x1e77339a
mov edx, 0x16
xor eax, eax
lea ecx, [ebp - 0x1a8]
push ecx
mov ecx, dword [esi + 0x1c]
mov word [ebp - 0x19c], dx
lea edx, [ebp - 0x100]
mov word [ebp - 0x19a], ax
push edx
lea eax, [ebp - 0x338]
push eax
push 0x17
mov dword [ebp - 0x1a8], 2
mov dword [ebp - 0x1a0], 0xe40000
mov dword [ebp - 0x1a4], ebx
mov dword [ebp - 0x338], ebx
mov dword [ebp - 0x334], 6
mov dword [ebp - 0x330], 0x70000
mov dword [ebp - 0x32c], ebx
call fcn.1e770580
mov ecx, 6
mov word [ebp - 0x21c], cx
xor edx, edx
lea eax, [ebp - 0x2a8]
push eax
lea ecx, [ebp - 0x228]
push ecx
mov ecx, dword [esi + 0x1c]
mov word [ebp - 0x21a], dx
lea edx, [ebp - 0x3c8]
push edx
push 0x17
mov dword [ebp - 0x228], ebx
mov dword [ebp - 0x220], 0xe40000
mov dword [ebp - 0x224], ebx
mov dword [ebp - 0x3c8], ebx
mov dword [ebp - 0x3c4], 0xb
mov dword [ebp - 0x3c0], 0x70000
mov dword [ebp - 0x3bc], ebx
call fcn.1e770580
mov eax, 1
mov word [ebp - 0x1bc], ax
xor ecx, ecx
mov eax, 0xe40000
mov dword [ebp - 0x1c0], eax
mov word [ebp - 0x1ba], cx
mov dword [ebp - 0x260], eax
xor eax, eax
lea ecx, [ebp - 0x1c8]
mov edx, 0xb
mov word [ebp - 0x25a], ax
push ecx
mov dword [ebp - 0x1c8], ebx
mov dword [ebp - 0x1c4], ebx
mov dword [ebp - 0x268], ebx
mov word [ebp - 0x25c], dx
mov dword [ebp - 0x264], ebx
mov dword [ebp - 0x3a8], ebx
mov dword [ebp - 0x3a4], 1
mov dword [ebp - 0x3a0], 0x70000
mov dword [ebp - 0x39c], ebx
lea eax, [ebp - 0x268]
lea ecx, [ebp - 0x3a8]
jmp 0x1e773387
cmp edi, ebx
jne 0x1e772f4a
mov eax, 0xa
jmp 0x1e772f57
mov eax, edi
shl eax, 6
add eax, 0x460
shr eax, 4
xor edx, edx
mov word [ebp - 0x3cc], ax
mov word [ebp - 0x3ca], dx
cmp edi, ebx
jne 0x1e772f70
lea eax, [edx + 0xe]
jmp 0x1e772f7d
mov eax, edi
shl eax, 6
add eax, 0x520
shr eax, 4
mov word [ebp - 0x3fc], ax
mov ecx, 2
mov eax, 0xe40000
xor edx, edx
mov word [ebp - 0x3fa], dx
mov dword [ebp - 0x2d8], ecx
xor ecx, ecx
mov dword [ebp - 0x2d0], eax
mov eax, dword [ebp - 0x3fc]
mov dword [ebp - 0x2d4], ecx
mov dword [ebp - 0x2cc], eax
cmp edi, ebx
jne 0x1e772fc0
lea eax, [edx + 3]
jmp 0x1e772fcd
mov eax, edi
shl eax, 6
add eax, 0x3a0
shr eax, 4
mov word [ebp - 0x45c], ax
xor edx, edx
sub esp, 0x10
mov eax, 6
mov word [ebp - 0x2fc], ax
mov eax, esp
mov dword [eax], ebx
mov dword [eax + 4], edx
mov word [ebp - 0x45a], dx
mov word [ebp - 0x2fa], dx
mov dword [ebp - 0x300], 0xe40000
mov edx, dword [ebp - 0x300]
mov dword [eax + 8], edx
mov edx, dword [ebp - 0x2fc]
mov dword [eax + 0xc], edx
mov edx, dword [ebp - 0x34]
sub esp, 0x10
mov eax, esp
mov ecx, 2
mov dword [eax], ecx
xor ecx, ecx
mov dword [eax + 4], ecx
mov ecx, 0xe40000
mov dword [eax + 8], ecx
mov ecx, dword [ebp - 0x45c]
mov dword [eax + 0xc], ecx
mov ecx, dword [ebp - 0x30]
sub esp, 0x10
mov eax, esp
mov dword [eax], edx
mov edx, dword [ebp - 0x2c]
mov dword [eax + 4], ecx
mov ecx, dword [ebp - 0x28]
mov dword [eax + 8], edx
mov dword [eax + 0xc], ecx
xor ecx, ecx
sub esp, 0x10
mov eax, esp
mov dword [eax], ecx
mov ecx, 9
mov dword [eax + 4], ecx
mov ecx, 0xf0000
mov dword [eax + 8], ecx
xor ecx, ecx
mov dword [eax + 0xc], ecx
mov ecx, esi
call fcn.1e7fad4a
xor ecx, ecx
mov edx, 7
mov eax, 0xe40000
cmp edi, dword [ebp - 0x50]
jne 0x1e773106
mov dword [ebp - 0x1e0], eax
mov word [ebp - 0x1da], cx
mov dword [ebp - 0x240], eax
xor eax, eax
lea ecx, [ebp - 0x1e8]
mov word [ebp - 0x1dc], dx
mov edx, 9
mov word [ebp - 0x23a], ax
push ecx
mov dword [ebp - 0x1e8], ebx
mov dword [ebp - 0x1e4], ebx
mov dword [ebp - 0x248], ebx
mov word [ebp - 0x23c], dx
mov dword [ebp - 0x244], ebx
mov dword [ebp - 0x388], 4
mov dword [ebp - 0x384], ebx
mov dword [ebp - 0x380], 0xf0000
mov dword [ebp - 0x37c], ebx
lea eax, [ebp - 0x248]
lea ecx, [ebp - 0x388]
jmp 0x1e773180
mov dword [ebp - 0x200], eax
mov word [ebp - 0x1fa], cx
mov dword [ebp - 0x180], eax
xor eax, eax
lea ecx, [ebp - 0x208]
mov word [ebp - 0x1fc], dx
mov edx, 9
mov word [ebp - 0x17a], ax
push ecx
mov dword [ebp - 0x208], ebx
mov dword [ebp - 0x204], ebx
mov dword [ebp - 0x188], ebx
mov word [ebp - 0x17c], dx
mov dword [ebp - 0x184], ebx
mov dword [ebp - 0x2e8], ebx
mov dword [ebp - 0x2e4], 7
mov dword [ebp - 0x2e0], 0xf0000
mov dword [ebp - 0x2dc], ebx
lea eax, [ebp - 0x188]
lea ecx, [ebp - 0x2e8]
lea edx, [ebp - 0x8c]
push edx
push eax
push ecx
mov ecx, dword [esi + 0x1c]
push 4
call fcn.1e770620
test byte [esi + 0x18], 1
je 0x1e7732c1
xor ecx, ecx
xor eax, eax
mov word [ebp - 0x46a], ax
sub esp, 0x10
mov eax, esp
mov dword [eax], ecx
mov dword [eax + 4], ecx
mov edx, 6
mov word [ebp - 0x46c], dx
mov ecx, dword [ebp - 0x46c]
mov edx, 0xe40000
mov dword [eax + 8], edx
mov dword [eax + 0xc], ecx
sub esp, 0x10
mov eax, esp
mov ecx, 2
mov dword [eax], ecx
xor ecx, ecx
mov dword [eax + 4], ecx
mov ecx, edx
mov edx, dword [ebp - 0x3cc]
mov dword [eax + 8], ecx
mov ecx, dword [ebp - 0x34]
mov dword [eax + 0xc], edx
mov edx, dword [ebp - 0x30]
sub esp, 0x10
mov eax, esp
mov dword [eax], ecx
mov ecx, dword [ebp - 0x2c]
mov dword [eax + 4], edx
mov edx, dword [ebp - 0x28]
mov dword [eax + 8], ecx
mov dword [eax + 0xc], edx
xor ecx, ecx
sub esp, 0x10
mov eax, esp
mov dword [eax], ecx
mov ecx, 0xa
mov dword [eax + 4], ecx
mov ecx, 0xf0000
mov dword [eax + 8], ecx
xor ecx, ecx
mov dword [eax + 0xc], ecx
mov ecx, esi
call fcn.1e770e50
xor eax, eax
xor ecx, ecx
mov word [ebp - 0x18c], ax
mov eax, 0xe40000
mov word [ebp - 0x18a], cx
mov dword [ebp - 0x190], eax
mov edx, 0xa
mov dword [ebp - 0x170], eax
xor eax, eax
lea ecx, [ebp - 0x198]
push ecx
mov word [ebp - 0x16c], dx
lea edx, [ebp - 0x8c]
push edx
mov word [ebp - 0x16a], ax
lea eax, [ebp - 0x178]
push eax
lea ecx, [ebp - 0x2f8]
push ecx
mov ecx, dword [esi + 0x1c]
push 4
mov dword [ebp - 0x198], ebx
mov dword [ebp - 0x194], ebx
mov dword [ebp - 0x178], ebx
mov dword [ebp - 0x174], ebx
mov dword [ebp - 0x2f8], ebx
mov dword [ebp - 0x2f4], ebx
mov dword [ebp - 0x2f0], 0x70000
mov dword [ebp - 0x2ec], ebx
call fcn.1e770620
test byte [esi + 0x18], 2
je 0x1e77339a
cmp dword [ebp - 0x58], ebx
je 0x1e77339a
lea edx, [ebp - 0x2d8]
push edx
lea eax, [ebp - 0x100]
push eax
lea ecx, [ebp - 0x368]
push ecx
mov ecx, dword [esi + 0x1c]
push 0x17
mov dword [ebp - 0x368], ebx
mov dword [ebp - 0x364], 0xb
mov dword [ebp - 0x360], 0x70000
mov dword [ebp - 0x35c], ebx
call fcn.1e770580
xor ecx, ecx
mov eax, 0xe40000
mov edx, 1
mov dword [ebp - 0xa4], eax
mov word [ebp - 0x9e], cx
mov dword [ebp - 0x18], eax
xor eax, eax
lea ecx, [ebp - 0xac]
mov word [ebp - 0xa0], dx
mov edx, 0xb
mov word [ebp - 0x12], ax
push ecx
mov dword [ebp - 0xac], ebx
mov dword [ebp - 0xa8], ebx
mov dword [ebp - 0x20], ebx
mov word [ebp - 0x14], dx
mov dword [ebp - 0x1c], ebx
mov dword [ebp - 0x378], ebx
mov dword [ebp - 0x374], 1
mov dword [ebp - 0x370], 0x70000
mov dword [ebp - 0x36c], ebx
lea eax, [ebp - 0x20]
lea ecx, [ebp - 0x378]
lea edx, [ebp - 0x8c]
push edx
push eax
push ecx
mov ecx, dword [esi + 0x1c]
push 4
call fcn.1e770620
inc edi
cmp edi, dword [ebp - 0x50]
jbe 0x1e7726e0
jmp 0x1e77354f
test al, 1
je 0x1e773450
xor eax, eax
mov word [ebp - 0x8e], ax
xor ecx, ecx
mov eax, 0xa
mov word [ebp - 0x13c], ax
xor eax, eax
xor edx, edx
mov word [ebp - 0x13a], ax
sub esp, 0x10
mov eax, esp
mov dword [eax], ecx
mov dword [eax + 4], ebx
mov word [ebp - 0x90], dx
mov ecx, dword [ebp - 0x90]
mov edx, 0xe40000
mov dword [eax + 8], edx
mov dword [eax + 0xc], ecx
sub esp, 0x10
mov eax, esp
mov ecx, 2
mov dword [eax], ecx
xor ecx, ecx
mov dword [eax + 4], ecx
mov ecx, edx
mov edx, dword [ebp - 0x13c]
mov dword [eax + 8], ecx
mov ecx, dword [ebp - 0x34]
mov dword [eax + 0xc], edx
mov edx, dword [ebp - 0x30]
sub esp, 0x10
mov eax, esp
mov dword [eax], ecx
mov ecx, dword [ebp - 0x2c]
mov dword [eax + 4], edx
mov edx, dword [ebp - 0x28]
mov dword [eax + 8], ecx
mov dword [eax + 0xc], edx
xor ecx, ecx
sub esp, 0x10
mov eax, esp
mov dword [eax], ecx
mov dword [eax + 4], ecx
mov ecx, 0xf0000
mov dword [eax + 8], ecx
xor ecx, ecx
mov dword [eax + 0xc], ecx
mov ecx, esi
call fcn.1e770e50
test byte [esi + 0x18], 2
je 0x1e7734a8
cmp dword [ebp - 0x58], ebx
je 0x1e7734a8
mov eax, 0xe
xor ecx, ecx
lea edx, [ebp - 0x20]
push edx
mov word [ebp - 0x14], ax
mov word [ebp - 0x12], cx
lea eax, [ebp - 0x100]
push eax
lea ecx, [ebp - 0x10]
push ecx
mov ecx, dword [esi + 0x1c]
push 0x17
mov dword [ebp - 0x10], ebx
mov dword [ebp - 0xc], 1
mov dword [ebp - 8], 0x70000
mov dword [ebp - 4], ebx
mov dword [ebp - 0x20], 2
mov dword [ebp - 0x18], 0xe40000
mov dword [ebp - 0x1c], ebx
call fcn.1e770580
xor eax, eax
mov word [ebp - 0x8e], ax
xor ecx, ecx
mov eax, 3
mov word [ebp - 0x13c], ax
xor eax, eax
mov word [ebp - 0x13a], ax
sub esp, 0x10
mov eax, esp
mov dword [eax], ecx
mov dword [eax + 4], ebx
mov edx, 0xb
mov word [ebp - 0x90], dx
mov ecx, dword [ebp - 0x90]
mov edx, 0xe40000
mov dword [eax + 8], edx
mov dword [eax + 0xc], ecx
sub esp, 0x10
mov eax, esp
mov ecx, 2
mov dword [eax], ecx
xor ecx, ecx
mov dword [eax + 4], ecx
mov ecx, edx
mov edx, dword [ebp - 0x13c]
mov dword [eax + 8], ecx
mov ecx, dword [ebp - 0x34]
mov dword [eax + 0xc], edx
mov edx, dword [ebp - 0x30]
sub esp, 0x10
mov eax, esp
mov dword [eax], ecx
mov ecx, dword [ebp - 0x2c]
mov dword [eax + 4], edx
mov edx, dword [ebp - 0x28]
mov dword [eax + 8], ecx
mov dword [eax + 0xc], edx
sub esp, 0x10
mov eax, esp
mov ecx, 4
mov dword [eax], ecx
xor ecx, ecx
mov dword [eax + 4], ecx
mov ecx, 0xf0000
mov dword [eax + 8], ecx
xor ecx, ecx
mov dword [eax + 0xc], ecx
mov ecx, esi
call fcn.1e770e50
test byte [esi + 0x18], 2
je 0x1e7735f0
cmp dword [ebp - 0x58], ebx
je 0x1e7735f0
test dword [esi + 4], 0x80000000
je 0x1e7735f0
mov eax, 1
lea edx, [ebp - 0x20]
mov word [ebp - 0x14], ax
push edx
xor ecx, ecx
lea eax, [ebp - 0x10]
push eax
mov word [ebp - 0x12], cx
mov ecx, dword [esi + 0x1c]
mov edi, 0x70000
push 0x24
mov dword [ebp - 0x20], ebx
mov dword [ebp - 0x18], 0xe40000
mov dword [ebp - 0x1c], ebx
mov dword [ebp - 0x10], ebx
mov dword [ebp - 0xc], 0xb
mov dword [ebp - 8], edi
mov dword [ebp - 4], ebx
call fcn.1e7704f0
mov ecx, 0xb
mov word [ebp - 0x14], cx
lea eax, [ebp - 0x20]
push eax
lea ecx, [ebp - 0x10]
push ecx
mov ecx, dword [esi + 0x1c]
xor edx, edx
push 1
mov dword [ebp - 0x20], ebx
mov dword [ebp - 0x18], 0xe40000
mov dword [ebp - 0x1c], ebx
mov word [ebp - 0x12], dx
mov dword [ebp - 0x10], ebx
mov dword [ebp - 0xc], 1
mov dword [ebp - 8], edi
mov dword [ebp - 4], ebx
call fcn.1e7704f0
mov edx, dword [esi + 4]
test edx, 0x1000000
je 0x1e773e32
xor edi, edi
mov word [ebp - 0x26], di
mov edi, 0x67
mov word [ebp - 0x5c], di
xor edi, edi
mov ecx, 2
mov eax, 0x66
mov word [ebp - 0x28], ax
mov eax, 0xe40000
mov word [ebp - 0x5a], di
mov edi, 0x64
mov dword [ebp - 0x34], ecx
mov dword [ebp - 0x2c], eax
mov dword [ebp - 0x68], ecx
mov dword [ebp - 0x60], eax
mov dword [ebp - 0x7c], ecx
mov word [ebp - 0x70], di
mov dword [ebp - 0x74], eax
xor edi, edi
mov dword [ebp - 0x8c], ecx
mov dword [ebp - 0x84], eax
xor eax, eax
mov ecx, 0x65
mov dword [ebp - 0x30], ebx
mov dword [ebp - 0x64], ebx
mov dword [ebp - 0x78], ebx
mov word [ebp - 0x6e], di
mov word [ebp - 0x80], cx
mov dword [ebp - 0x88], ebx
mov word [ebp - 0x7e], ax
test edx, 0x40000000
je 0x1e7737d4
mov eax, dword [esi + 8]
mov edi, eax
shr edi, 0xc
and edi, 3
mov dword [ebp - 0xd0], edi
mov ecx, eax
mov edi, eax
shr ecx, 0xa
shr edi, 0xe
shr eax, 0x10
and ecx, 3
and edi, 3
and eax, 3
mov dword [ebp - 0x114], ecx
mov dword [ebp - 0x50], edi
mov dword [ebp - 0x6c], eax
test dl, 0x10
je 0x1e773745
mov edx, dword [ebp - 0xdc]
mov eax, dword [ebp - 0xd8]
cmp ecx, 1
jne 0x1e7736e5
mov ecx, dword [ebp - 0xe0]
mov dword [ebp - 0x34], ecx
mov ecx, dword [ebp - 0xd4]
mov dword [ebp - 0x30], edx
mov dword [ebp - 0x2c], eax
mov dword [ebp - 0x28], ecx
jmp 0x1e7736eb
mov ecx, dword [ebp - 0xd4]
cmp dword [ebp - 0xd0], 1
jne 0x1e773706
mov edi, dword [ebp - 0xe0]
mov dword [ebp - 0x68], edi
mov dword [ebp - 0x64], edx
mov dword [ebp - 0x60], eax
mov dword [ebp - 0x5c], ecx
cmp dword [ebp - 0x50], 1
jne 0x1e77371e
mov edi, dword [ebp - 0xe0]
mov dword [ebp - 0x7c], edi
mov dword [ebp - 0x78], edx
mov dword [ebp - 0x74], eax
mov dword [ebp - 0x70], ecx
cmp dword [ebp - 0x6c], 1
jne 0x1e77373f
mov edi, dword [ebp - 0xe0]
mov dword [ebp - 0x8c], edi
mov dword [ebp - 0x88], edx
mov dword [ebp - 0x84], eax
mov dword [ebp - 0x80], ecx
mov ecx, dword [ebp - 0x114]
test byte [esi + 4], 0x20
je 0x1e7737d4
mov eax, dword [ebp - 0x10c]
cmp ecx, 2
mov ecx, dword [ebp - 0x104]
jne 0x1e77377a
mov edx, dword [ebp - 0x110]
mov dword [ebp - 0x34], edx
mov edx, dword [ebp - 0x108]
mov dword [ebp - 0x30], eax
mov dword [ebp - 0x2c], edx
mov dword [ebp - 0x28], ecx
jmp 0x1e773780
mov edx, dword [ebp - 0x108]
cmp dword [ebp - 0xd0], 2
jne 0x1e77379b
mov edi, dword [ebp - 0x110]
mov dword [ebp - 0x68], edi
mov dword [ebp - 0x64], eax
mov dword [ebp - 0x60], edx
mov dword [ebp - 0x5c], ecx
cmp dword [ebp - 0x50], 2
jne 0x1e7737b3
mov edi, dword [ebp - 0x110]
mov dword [ebp - 0x7c], edi
mov dword [ebp - 0x78], eax
mov dword [ebp - 0x74], edx
mov dword [ebp - 0x70], ecx
cmp dword [ebp - 0x6c], 2
jne 0x1e7737d4
mov edi, dword [ebp - 0x110]
mov dword [ebp - 0x8c], edi
mov dword [ebp - 0x88], eax
mov dword [ebp - 0x84], edx
mov dword [ebp - 0x80], ecx
xor eax, eax
xor edx, edx
mov ecx, 0xa
xor edi, edi
mov word [ebp - 0xf4], cx
mov dword [ebp - 0xbc], eax
mov eax, dword [ebp - 0x8c]
mov ecx, 0xe40000
mov word [ebp - 0xf2], di
mov dword [ebp - 0xb8], edx
mov edx, dword [ebp - 0xf4]
mov dword [ebp - 0xf8], ecx
mov dword [ebp - 0xb4], ecx
mov dword [ebp - 0xb0], edx
mov dword [ebp - 0xf0], ebx
mov dword [ebp - 0xec], 0xa
mov dword [ebp - 0xe8], 0x70000
mov dword [ebp - 0xe4], ebx
cmp eax, 2
je 0x1e773894
mov ecx, dword [ebp - 0x7c]
cmp ecx, 2
je 0x1e773894
cmp ecx, 1
jne 0x1e773852
cmp eax, ecx
je 0x1e773894
mov eax, 7
xor ecx, ecx
lea edx, [ebp - 0x8c]
push edx
mov word [ebp - 0x14], ax
mov word [ebp - 0x12], cx
lea eax, [ebp - 0x20]
push eax
lea ecx, [ebp - 0x7c]
push ecx
mov ecx, dword [esi + 0x1c]
lea edx, [ebp - 0xf0]
push edx
push 4
mov dword [ebp - 0x20], 2
mov dword [ebp - 0x18], 0xe40000
mov dword [ebp - 0x1c], ebx
call fcn.1e770620
jmp 0x1e773904
lea eax, [ebp - 0x7c]
push eax
lea ecx, [ebp - 0xf0]
push ecx
mov ecx, dword [esi + 0x1c]
push 1
call fcn.1e7704f0
mov edx, 7
xor eax, eax
lea ecx, [ebp - 0x20]
push ecx
mov ecx, dword [esi + 0x1c]
mov word [ebp - 0x14], dx
lea edx, [ebp - 0xbc]
mov word [ebp - 0x12], ax
push edx
lea eax, [ebp - 0xf0]
push eax
push 5
mov dword [ebp - 0x20], 2
mov dword [ebp - 0x18], 0xe40000
mov dword [ebp - 0x1c], ebx
call fcn.1e770580
lea ecx, [ebp - 0x8c]
push ecx
mov ecx, dword [esi + 0x1c]
lea edx, [ebp - 0xbc]
push edx
lea eax, [ebp - 0xf0]
push eax
push 2
call fcn.1e770580
test dword [esi + 4], 0x20000000
je 0x1e773988
cmp dword [ebp - 0x3c], ebx
je 0x1e773988
mov ecx, 0xb
xor edx, edx
mov eax, 0xe40000
mov dword [ebp - 0xc4], eax
mov word [ebp - 0x90], cx
mov word [ebp - 0x8e], dx
mov eax, dword [ebp - 0x90]
mov dword [ebp - 0xc0], eax
xor eax, eax
mov dword [ebp - 0xc], ecx
mov ecx, dword [esi + 0x24]
push 4
mov dword [ebp - 0x10], eax
push ecx
lea edx, [ebp - 0x158]
mov eax, 0x70000
xor edi, edi
push edx
mov dword [ebp - 0xcc], edi
mov dword [ebp - 0xc8], ebx
mov dword [ebp - 8], eax
mov dword [ebp - 4], ebx
call fcn.1e76a320
lea eax, [ebp - 0x158]
push eax
lea ecx, [ebp - 0x10]
push ecx
mov ecx, dword [esi + 0x1c]
push 1
call fcn.1e7704f0
jmp 0x1e77398e
mov edi, dword [ebp - 0xcc]
mov eax, dword [esi + 8]
mov ecx, dword [esi + 0x24]
shr eax, 3
and al, 1
sete dl
mov byte [ecx + 0xfa94], dl
test byte [esi + 8], 1
mov byte [ebp - 0x21], al
je 0x1e773ace
cmp al, bl
jne 0x1e7739dc
lea ecx, [ebp - 0x20]
xor edx, edx
xor eax, eax
push ecx
mov ecx, dword [esi + 0x1c]
mov dword [ebp - 0x20], 7
mov word [ebp - 0x14], dx
mov dword [ebp - 0x18], 0xe40000
mov dword [ebp - 0x1c], ebx
mov word [ebp - 0x12], ax
call fcn.1e770750
mov edx, 1
mov word [ebp - 0x90], dx
xor edx, edx
mov word [ebp - 4], dx
mov edx, dword [ebp - 0x58]
push edx
mov edx, dword [ebp - 0xc8]
xor eax, eax
sub esp, 0x10
mov word [ebp - 0x8e], ax
mov word [ebp - 2], ax
mov eax, esp
mov dword [eax], edi
mov dword [eax + 4], edx
mov edx, dword [ebp - 0xc4]
mov dword [eax + 8], edx
mov edx, dword [ebp - 0xc0]
mov dword [eax + 0xc], edx
xor edx, edx
sub esp, 0x10
mov eax, esp
mov dword [eax], edx
mov dword [eax + 4], edx
mov edx, dword [ebp - 0xf8]
mov dword [eax + 8], edx
mov edx, dword [ebp - 0xf4]
mov dword [eax + 0xc], edx
mov edx, dword [ebp - 0x7c]
sub esp, 0x10
mov eax, esp
mov dword [eax], edx
mov edx, dword [ebp - 0x78]
mov dword [eax + 4], edx
mov edx, dword [ebp - 0x74]
mov dword [eax + 8], edx
mov edx, dword [ebp - 0x70]
mov dword [eax + 0xc], edx
mov edx, dword [ebp - 0x34]
sub esp, 0x10
mov eax, esp
mov dword [eax], edx
mov edx, dword [ebp - 0x30]
mov dword [eax + 4], edx
mov edx, dword [ebp - 0x2c]
mov dword [eax + 8], edx
mov edx, dword [ebp - 0x28]
mov dword [eax + 0xc], edx
xor ecx, ecx
sub esp, 0x10
mov eax, esp
mov dword [eax], ecx
mov dword [eax + 4], ecx
mov ecx, 0xe40000
mov dword [eax + 8], ecx
mov ecx, dword [ebp - 0x90]
mov dword [eax + 0xc], ecx
sub esp, 0x10
mov eax, esp
xor ecx, ecx
mov dword [eax], ecx
mov dword [eax + 4], ecx
mov ecx, dword [ebp - 4]
mov dword [ebp - 8], 0xe40000
mov edx, dword [ebp - 8]
mov dword [eax + 8], edx
mov dword [eax + 0xc], ecx
push 3
mov ecx, esi
call fcn.1e770f80
cmp byte [ebp - 0x21], bl
jne 0x1e773acb
mov ecx, dword [esi + 0x1c]
push 0x1d
call fcn.1e770490
mov al, byte [ebp - 0x21]
test byte [esi + 8], 2
je 0x1e773bfa
cmp al, bl
jne 0x1e773b08
lea ecx, [ebp - 0x20]
mov edx, 1
xor eax, eax
push ecx
mov ecx, dword [esi + 0x1c]
mov dword [ebp - 0x20], 7
mov word [ebp - 0x14], dx
mov dword [ebp - 0x18], 0xe40000
mov dword [ebp - 0x1c], ebx
mov word [ebp - 0x12], ax
call fcn.1e770750
mov edx, 1
mov word [ebp - 0x90], dx
xor edx, edx
mov word [ebp - 4], dx
mov edx, dword [ebp - 0x58]
push edx
mov edx, dword [ebp - 0xc8]
xor eax, eax
sub esp, 0x10
mov word [ebp - 0x8e], ax
mov word [ebp - 2], ax
mov eax, esp
mov dword [eax], edi
mov dword [eax + 4], edx
mov edx, dword [ebp - 0xc4]
mov dword [eax + 8], edx
mov edx, dword [ebp - 0xc0]
mov dword [eax + 0xc], edx
xor edx, edx
sub esp, 0x10
mov eax, esp
mov dword [eax], edx
mov dword [eax + 4], edx
mov edx, dword [ebp - 0xf8]
mov dword [eax + 8], edx
mov edx, dword [ebp - 0xf4]
mov dword [eax + 0xc], edx
mov edx, dword [ebp - 0x7c]
sub esp, 0x10
mov eax, esp
mov dword [eax], edx
mov edx, dword [ebp - 0x78]
mov dword [eax + 4], edx
mov edx, dword [ebp - 0x74]
mov dword [eax + 8], edx
mov edx, dword [ebp - 0x70]
mov dword [eax + 0xc], edx
mov edx, dword [ebp - 0x34]
sub esp, 0x10
mov eax, esp
mov dword [eax], edx
mov edx, dword [ebp - 0x30]
mov dword [eax + 4], edx
mov edx, dword [ebp - 0x2c]
mov dword [eax + 8], edx
mov edx, dword [ebp - 0x28]
mov dword [eax + 0xc], edx
xor ecx, ecx
sub esp, 0x10
mov eax, esp
mov dword [eax], ecx
mov dword [eax + 4], ecx
mov ecx, 0xe40000
mov dword [eax + 8], ecx
mov ecx, dword [ebp - 0x90]
mov dword [eax + 0xc], ecx
sub esp, 0x10
mov eax, esp
xor ecx, ecx
mov dword [eax], ecx
mov dword [eax + 4], ecx
mov ecx, dword [ebp - 4]
mov dword [ebp - 8], 0xe40000
mov edx, dword [ebp - 8]
mov dword [eax + 8], edx
mov dword [eax + 0xc], ecx
push 1
mov ecx, esi
call fcn.1e770f80
cmp byte [ebp - 0x21], bl
jne 0x1e773bf7
mov ecx, dword [esi + 0x1c]
push 0x1d
call fcn.1e770490
mov al, byte [ebp - 0x21]
test byte [esi + 8], 4
je 0x1e773d22
cmp al, bl
jne 0x1e773c34
lea ecx, [ebp - 0x20]
mov edx, 2
xor eax, eax
push ecx
mov ecx, dword [esi + 0x1c]
mov dword [ebp - 0x20], 7
mov word [ebp - 0x14], dx
mov dword [ebp - 0x18], 0xe40000
mov dword [ebp - 0x1c], ebx
mov word [ebp - 0x12], ax
call fcn.1e770750
xor eax, eax
mov word [ebp - 0x8e], ax
mov word [ebp - 0x13c], ax
mov word [ebp - 0x13a], ax
mov eax, dword [ebp - 0x58]
push eax
sub esp, 0x10
mov eax, esp
mov dword [eax], edi
mov edi, dword [ebp - 0xc8]
mov dword [eax + 4], edi
mov edi, dword [ebp - 0xc4]
mov dword [eax + 8], edi
mov edi, dword [ebp - 0xc0]
mov dword [eax + 0xc], edi
xor edi, edi
sub esp, 0x10
mov eax, esp
mov dword [eax], edi
mov dword [eax + 4], edi
mov edi, dword [ebp - 0xf8]
mov dword [eax + 8], edi
mov edi, dword [ebp - 0xf4]
mov dword [eax + 0xc], edi
mov edi, dword [ebp - 0x7c]
sub esp, 0x10
mov eax, esp
mov dword [eax], edi
mov edi, dword [ebp - 0x78]
mov dword [eax + 4], edi
mov edi, dword [ebp - 0x74]
mov dword [eax + 8], edi
mov edi, dword [ebp - 0x70]
mov dword [eax + 0xc], edi
mov edi, dword [ebp - 0x34]
sub esp, 0x10
mov eax, esp
mov dword [eax], edi
mov edi, dword [ebp - 0x30]
mov dword [eax + 4], edi
mov edi, dword [ebp - 0x2c]
mov dword [eax + 8], edi
mov edi, dword [ebp - 0x28]
mov dword [eax + 0xc], edi
xor ecx, ecx
sub esp, 0x10
mov eax, esp
mov dword [eax], ecx
mov dword [eax + 4], ecx
mov edx, 1
mov word [ebp - 0x90], dx
mov ecx, dword [ebp - 0x90]
mov edx, 0xe40000
mov dword [eax + 8], edx
mov dword [eax + 0xc], ecx
sub esp, 0x10
mov eax, esp
xor ecx, ecx
mov dword [eax], ecx
mov dword [eax + 4], ecx
mov ecx, edx
mov edx, dword [ebp - 0x13c]
mov dword [eax + 8], ecx
push 2
mov ecx, esi
mov dword [eax + 0xc], edx
call fcn.1e770f80
cmp byte [ebp - 0x21], bl
jne 0x1e773d22
mov ecx, dword [esi + 0x1c]
push 0x1d
call fcn.1e770490
cmp dword [ebp - 0x118], ebx
je 0x1e773d99
lea eax, [ebp - 0xbc]
push eax
lea ecx, [ebp - 0x10]
push ecx
mov ecx, dword [esi + 0x1c]
mov edi, 5
push 1
mov dword [ebp - 0x10], edi
mov dword [ebp - 0xc], ebx
mov dword [ebp - 8], 0x70000
mov dword [ebp - 4], ebx
call fcn.1e7704f0
mov ax, word [ebp - 0x28]
mov ecx, dword [ebp - 0x30]
mov edx, dword [ebp - 0x34]
mov word [ebp - 0x14], ax
mov dword [ebp - 0x1c], ecx
lea eax, [ebp - 0x20]
push eax
lea ecx, [ebp - 0x10]
push ecx
mov ecx, dword [esi + 0x1c]
mov dword [ebp - 0x20], edx
mov dx, word [ebp - 0x26]
push 1
mov dword [ebp - 0x18], 0xff0000
mov word [ebp - 0x12], dx
mov dword [ebp - 0x10], edi
mov dword [ebp - 0xc], ebx
mov dword [ebp - 8], 0x80000
mov dword [ebp - 4], ebx
call fcn.1e7704f0
cmp dword [ebp - 0x3c], ebx
je 0x1e773e95
test dword [esi + 4], 0x20000000
mov dword [ebp - 0x10], 5
mov dword [ebp - 4], ebx
je 0x1e773e15
lea edx, [ebp - 0x68]
push edx
lea eax, [ebp - 0xcc]
push eax
lea ecx, [ebp - 0x10]
push ecx
mov ecx, dword [esi + 0x1c]
mov edi, 1
push 5
mov dword [ebp - 0xc], edi
mov dword [ebp - 8], 0x70000
call fcn.1e770580
mov ax, word [ebp - 0x5c]
mov ecx, dword [ebp - 0x64]
mov edx, dword [ebp - 0x68]
mov word [ebp - 0x14], ax
lea eax, [ebp - 0x20]
mov dword [ebp - 0x1c], ecx
push eax
lea ecx, [ebp - 0x10]
mov dword [ebp - 0x20], edx
mov dx, word [ebp - 0x5a]
push ecx
mov dword [ebp - 0x18], 0xff0000
mov word [ebp - 0x12], dx
mov dword [ebp - 0xc], edi
mov dword [ebp - 8], 0x80000
push edi
jmp 0x1e773e83
lea edx, [ebp - 0x110]
push edx
lea eax, [ebp - 0x10]
push eax
mov dword [ebp - 0xc], 1
mov dword [ebp - 8], 0xf0000
push 1
jmp 0x1e773e8d
cmp dword [ebp - 0x118], ebx
je 0x1e773e63
lea ecx, [ebp - 0xe0]
push ecx
mov ecx, dword [esi + 0x1c]
lea edx, [ebp - 0x10]
push edx
push 1
mov dword [ebp - 0x10], 5
mov dword [ebp - 0xc], ebx
mov dword [ebp - 8], 0xf0000
mov dword [ebp - 4], ebx
call fcn.1e7704f0
cmp dword [ebp - 0x3c], ebx
je 0x1e773e95
lea eax, [ebp - 0x110]
push eax
lea ecx, [ebp - 0x10]
push ecx
mov dword [ebp - 0xc], 1
mov dword [ebp - 8], 0xf0000
push 1
mov dword [ebp - 0x10], 5
mov dword [ebp - 4], ebx
mov ecx, dword [esi + 0x1c]
call fcn.1e7704f0
mov ecx, dword [esi + 4]
test ecx, 0x8000000
je 0x1e77432b
test ecx, 0x200000
je 0x1e77432b
mov eax, dword [esi + 8]
or dword [ebp - 0x54], 0x2000
shr eax, 0x14
and eax, 3
mov dword [ebp - 0x118], eax
mov dword [ebp - 4], ebx
je 0x1e7742d5
xor edx, edx
mov dword [ebp - 0x20], ebx
mov dword [ebp - 0x1c], ebx
mov dword [ebp - 0x10], ebx
mov dword [ebp - 8], 0x10000
mov word [ebp - 0x14], dx
test ecx, 0x10000000
je 0x1e773fb2
xor ecx, ecx
mov eax, 0xe40000
mov word [ebp - 0x12], cx
mov dword [ebp - 0x18], eax
mov dword [ebp - 0xa4], eax
xor eax, eax
lea ecx, [ebp - 0x20]
push ecx
mov ecx, dword [esi + 0x1c]
mov word [ebp - 0xa0], dx
lea edx, [ebp - 0xac]
mov word [ebp - 0x9e], ax
push edx
lea eax, [ebp - 0x10]
push eax
mov edi, 0xb
push 8
mov dword [ebp - 0xac], ebx
mov dword [ebp - 0xa8], ebx
mov dword [ebp - 0xc], edi
call fcn.1e770580
mov ecx, edi
mov word [ebp - 0x14], cx
lea eax, [ebp - 0x20]
push eax
lea ecx, [ebp - 0x10]
push ecx
mov ecx, dword [esi + 0x1c]
xor edx, edx
push 7
mov dword [ebp - 0x20], ebx
mov dword [ebp - 0x18], ebx
mov dword [ebp - 0x1c], ebx
mov word [ebp - 0x12], dx
mov dword [ebp - 0x10], ebx
mov dword [ebp - 0xc], edi
mov dword [ebp - 8], 0x10000
mov dword [ebp - 4], ebx
call fcn.1e7704f0
mov edx, edi
lea ecx, [ebp - 0x20]
push ecx
mov ecx, dword [esi + 0x1c]
mov word [ebp - 0x14], dx
lea edx, [ebp - 0x10]
push edx
xor eax, eax
push 6
mov dword [ebp - 0x20], ebx
mov dword [ebp - 0x18], ebx
mov dword [ebp - 0x1c], ebx
mov word [ebp - 0x12], ax
mov dword [ebp - 0x10], ebx
mov dword [ebp - 0xc], edi
mov dword [ebp - 8], 0x10000
mov dword [ebp - 4], ebx
call fcn.1e7704f0
jmp 0x1e773ff6
xor ecx, ecx
mov word [ebp - 0x8e], cx
xor eax, eax
lea ecx, [ebp - 0x20]
push ecx
mov ecx, dword [esi + 0x1c]
mov word [ebp - 0x90], ax
mov eax, dword [ebp - 0x90]
lea edx, [ebp - 0x10]
push edx
shr eax, 0x10
push 0x23
mov dword [ebp - 0xc], 0xb
mov dword [ebp - 0x18], 0xaa0000
mov word [ebp - 0x12], ax
call fcn.1e7704f0
mov edi, 0xb
mov eax, dword [ebp - 0x118]
sub eax, 1
je 0x1e774201
sub eax, 1
je 0x1e7740b8
sub eax, 1
jne 0x1e77432b
xor ecx, ecx
mov eax, 0xb
lea edx, [ebp - 0x138]
mov word [ebp - 0x12], cx
mov ecx, dword [esi + 0x24]
push edx
mov dword [ebp - 0x20], ebx
mov word [ebp - 0x14], ax
mov dword [ebp - 0x18], ebx
mov dword [ebp - 0x1c], ebx
mov dword [ebp - 0x10], ebx
mov dword [ebp - 0xc], eax
mov dword [ebp - 8], 0x10000
mov dword [ebp - 4], ebx
call fcn.1e76ccd0
push eax
lea eax, [ebp - 0x20]
push eax
lea ecx, [ebp - 0x10]
push ecx
mov ecx, dword [esi + 0x1c]
push 5
call fcn.1e770580
lea ecx, [ebp - 0x6e8]
mov edx, 0xb
xor eax, eax
push ecx
mov ecx, dword [esi + 0x24]
mov dword [ebp - 0x20], ebx
mov word [ebp - 0x14], dx
mov dword [ebp - 0x18], ebx
mov dword [ebp - 0x1c], ebx
mov word [ebp - 0x12], ax
mov dword [ebp - 0x10], 4
mov dword [ebp - 0xc], 1
mov dword [ebp - 8], 0xf0000
mov dword [ebp - 4], ebx
call fcn.1e76cd20
mov ecx, dword [esi + 0x1c]
push eax
lea edx, [ebp - 0x20]
push edx
lea eax, [ebp - 0x10]
push eax
push 2
call fcn.1e770580
jmp 0x1e77432b
mov ecx, edi
lea eax, [ebp - 0x6c8]
mov word [ebp - 0x14], cx
mov ecx, dword [esi + 0x24]
xor edx, edx
push eax
mov dword [ebp - 0x20], ebx
mov dword [ebp - 0x18], ebx
mov dword [ebp - 0x1c], ebx
mov word [ebp - 0x12], dx
mov dword [ebp - 0x10], ebx
mov dword [ebp - 0xc], edi
mov dword [ebp - 8], 0x10000
mov dword [ebp - 4], ebx
call fcn.1e76cd70
push eax
lea ecx, [ebp - 0x20]
push ecx
mov ecx, dword [esi + 0x1c]
lea edx, [ebp - 0x10]
push edx
push 5
call fcn.1e770580
xor ecx, ecx
mov eax, edi
mov word [ebp - 0x12], cx
mov word [ebp - 0x14], ax
mov edx, edi
xor eax, eax
lea ecx, [ebp - 0x20]
push ecx
mov ecx, dword [esi + 0x1c]
mov word [ebp - 0xa0], dx
lea edx, [ebp - 0xac]
mov word [ebp - 0x9e], ax
push edx
lea eax, [ebp - 0x10]
push eax
push 5
mov dword [ebp - 0x20], ebx
mov dword [ebp - 0x18], ebx
mov dword [ebp - 0x1c], ebx
mov dword [ebp - 0xac], ebx
mov dword [ebp - 0xa4], ebx
mov dword [ebp - 0xa8], ebx
mov dword [ebp - 0x10], ebx
mov dword [ebp - 0xc], edi
mov dword [ebp - 8], 0x10000
mov dword [ebp - 4], ebx
call fcn.1e770580
mov ecx, edi
mov word [ebp - 0x90], cx
xor edx, edx
mov word [ebp - 0x8e], dx
mov eax, dword [ebp - 0x90]
lea ecx, [ebp - 0x20]
push ecx
mov ecx, dword [esi + 0x24]
lea edx, [ebp - 0x158]
shr eax, 0x10
push edx
mov dword [ebp - 0x10], ebx
mov dword [ebp - 0xc], 0xa
mov dword [ebp - 8], 0xf0000
mov dword [ebp - 4], ebx
mov dword [ebp - 0x20], ebx
mov word [ebp - 0x14], di
mov dword [ebp - 0x18], ebx
mov dword [ebp - 0x1c], 0x1000000
mov word [ebp - 0x12], ax
call fcn.1e76cc80
mov ecx, dword [esi + 0x1c]
push eax
lea eax, [ebp - 0x10]
push eax
push 0x20
call fcn.1e770580
push ebx
lea ecx, [ebp - 0x78]
mov dword [ebp - 0x78], 0xa
call fcn.1e769970
mov cx, word [ebp - 0x78]
mov edx, dword [ebp - 0x70]
mov word [ebp - 0x14], cx
lea ecx, [ebp - 0x20]
mov dword [ebp - 0x18], edx
xor eax, eax
push ecx
lea edx, [ebp - 0x10]
mov dword [ebp - 0x20], ebx
mov dword [ebp - 0x1c], ebx
mov word [ebp - 0x12], ax
mov dword [ebp - 4], ebx
push edx
jmp 0x1e77430c
xor ecx, ecx
lea edx, [ebp - 0x4a8]
mov eax, edi
mov word [ebp - 0x12], cx
mov ecx, dword [esi + 0x24]
push edx
mov dword [ebp - 0x20], ebx
mov word [ebp - 0x14], ax
mov dword [ebp - 0x18], ebx
mov dword [ebp - 0x1c], ebx
mov dword [ebp - 0x10], ebx
mov dword [ebp - 0xc], edi
mov dword [ebp - 8], 0x10000
mov dword [ebp - 4], ebx
call fcn.1e76cd70
push eax
lea eax, [ebp - 0x20]
push eax
lea ecx, [ebp - 0x10]
push ecx
mov ecx, dword [esi + 0x1c]
push 5
call fcn.1e770580
xor eax, eax
mov edx, edi
mov word [ebp - 0x90], dx
mov word [ebp - 0x8e], ax
mov ecx, dword [ebp - 0x90]
shr ecx, 0x10
lea edx, [ebp - 0x20]
push edx
lea eax, [ebp - 0x638]
mov word [ebp - 0x12], cx
mov ecx, dword [esi + 0x24]
push eax
mov dword [ebp - 0x10], ebx
mov dword [ebp - 0xc], 0xa
mov dword [ebp - 8], 0xf0000
mov dword [ebp - 4], ebx
mov dword [ebp - 0x20], ebx
mov word [ebp - 0x14], di
mov dword [ebp - 0x18], ebx
mov dword [ebp - 0x1c], 0x1000000
call fcn.1e76cc80
push eax
lea ecx, [ebp - 0x10]
push ecx
mov ecx, dword [esi + 0x1c]
push 0x20
call fcn.1e770580
push ebx
lea ecx, [ebp - 0x78]
mov dword [ebp - 0x78], 0xa
call fcn.1e769970
mov eax, dword [ebp - 0x70]
mov dx, word [ebp - 0x78]
mov dword [ebp - 0x20], ebx
mov dword [ebp - 0x18], eax
mov dword [ebp - 0x1c], ebx
xor ecx, ecx
mov dword [ebp - 4], ebx
jmp 0x1e7742fc
mov ecx, dword [ebp - 0x110]
mov eax, dword [ebp - 0x10c]
mov dx, word [ebp - 0x104]
mov dword [ebp - 0x20], ecx
mov cx, word [ebp - 0x102]
mov dword [ebp - 0x18], 0xff0000
mov dword [ebp - 0x1c], eax
mov word [ebp - 0x14], dx
lea edx, [ebp - 0x20]
push edx
lea eax, [ebp - 0x10]
push eax
mov word [ebp - 0x12], cx
mov ecx, dword [esi + 0x1c]
push 1
mov dword [ebp - 0x10], 4
mov dword [ebp - 0xc], 1
mov dword [ebp - 8], 0xf0000
call fcn.1e7704f0
mov eax, dword [esi + 8]
test al, 0x20
je 0x1e77488c
test dword [esi + 4], 0x100000
je 0x1e77488c
or dword [ebp - 0x54], 0x20
test al, 0x10
je 0x1e77485f
push ebx
lea ecx, [ebp - 0xc8]
mov dword [ebp - 0xc8], 0xb
call fcn.1e769970
mov edi, dword [ebp - 0xc8]
xor ecx, ecx
mov eax, 0xe40000
xor edx, edx
mov word [ebp - 0x14], cx
mov word [ebp - 0xa0], cx
mov dword [ebp - 0x18], eax
mov dword [ebp - 0xa4], eax
mov eax, dword [ebp - 0xc4]
lea ecx, [ebp - 0x20]
push ecx
mov ecx, dword [esi + 0x1c]
mov word [ebp - 0x12], dx
mov word [ebp - 0x9e], dx
lea edx, [ebp - 0xac]
mov dword [ebp - 8], eax
push edx
lea eax, [ebp - 0x10]
push eax
push 8
mov dword [ebp - 0x20], ebx
mov dword [ebp - 0x1c], ebx
mov dword [ebp - 0xac], ebx
mov dword [ebp - 0xa8], ebx
mov dword [ebp - 0x10], ebx
mov dword [ebp - 0xc], edi
mov dword [ebp - 4], ebx
call fcn.1e770580
mov ecx, dword [ebp - 0xc0]
mov eax, dword [ebp - 0xc4]
mov dword [ebp - 0x18], ecx
xor edx, edx
lea ecx, [ebp - 0x20]
push ecx
mov ecx, dword [esi + 0x1c]
mov word [ebp - 0x12], dx
lea edx, [ebp - 0x10]
push edx
push 7
mov dword [ebp - 0x20], ebx
mov word [ebp - 0x14], di
mov dword [ebp - 0x1c], ebx
mov dword [ebp - 0x10], ebx
mov dword [ebp - 0xc], edi
mov dword [ebp - 8], eax
mov dword [ebp - 4], ebx
call fcn.1e7704f0
mov eax, dword [ebp - 0xc0]
mov edx, dword [ebp - 0xc4]
xor ecx, ecx
mov dword [ebp - 0x18], eax
mov word [ebp - 0x12], cx
lea eax, [ebp - 0x20]
push eax
lea ecx, [ebp - 0x10]
push ecx
mov ecx, dword [esi + 0x1c]
push 6
mov dword [ebp - 0x20], ebx
mov word [ebp - 0x14], di
mov dword [ebp - 0x1c], ebx
mov dword [ebp - 0x10], ebx
mov dword [ebp - 0xc], edi
mov dword [ebp - 8], edx
mov dword [ebp - 4], ebx
call fcn.1e7704f0
push ebx
lea ecx, [ebp - 0x64]
mov dword [ebp - 0x64], 0xa
call fcn.1e769970
mov edi, dword [ebp - 0x64]
mov edx, dword [ebp - 0x60]
mov dword [ebp - 0x10], ebx
mov dword [ebp - 0xc], edi
mov dword [ebp - 8], edx
mov dword [ebp - 4], ebx
lea eax, [ebp - 0x138]
mov ecx, dword [esi + 0x24]
push eax
call fcn.1e76ceb0
push eax
lea ecx, [ebp - 0x10]
push ecx
mov ecx, dword [esi + 0x1c]
push 1
call fcn.1e7704f0
mov edx, dword [ebp - 0x5c]
mov cx, word [ebp - 0xc8]
mov dword [ebp - 0x18], edx
mov edx, dword [ebp - 0xc0]
xor eax, eax
mov word [ebp - 0xa0], cx
mov ecx, dword [ebp - 0x60]
mov dword [ebp - 0xa4], edx
lea edx, [ebp - 0x20]
mov word [ebp - 0x12], ax
mov word [ebp - 0x9e], ax
push edx
mov dword [ebp - 8], ecx
lea eax, [ebp - 0xac]
push eax
lea ecx, [ebp - 0x138]
push ecx
mov ecx, dword [esi + 0x24]
mov dword [ebp - 0x20], ebx
mov word [ebp - 0x14], di
mov dword [ebp - 0x1c], ebx
mov dword [ebp - 0xac], ebx
mov dword [ebp - 0xa8], ebx
mov dword [ebp - 0x10], ebx
mov dword [ebp - 0xc], edi
mov dword [ebp - 4], ebx
call fcn.1e76cf00
mov ecx, dword [esi + 0x1c]
push eax
lea edx, [ebp - 0x10]
push edx
push 4
call fcn.1e770620
mov ax, word [ebp - 0xc8]
mov ecx, dword [ebp - 0xc0]
mov word [ebp - 0x14], ax
mov eax, dword [ebp - 0x5c]
mov dword [ebp - 0x18], ecx
xor edx, edx
xor ecx, ecx
mov dword [ebp - 0xa4], eax
mov word [ebp - 0x12], dx
mov edx, dword [ebp - 0x60]
lea eax, [ebp - 0x138]
mov word [ebp - 0x9e], cx
mov ecx, dword [esi + 0x24]
push eax
mov dword [ebp - 0x20], ebx
mov dword [ebp - 0x1c], ebx
mov dword [ebp - 0xac], ebx
mov word [ebp - 0xa0], di
mov dword [ebp - 0xa8], ebx
mov dword [ebp - 0x10], ebx
mov dword [ebp - 0xc], edi
mov dword [ebp - 8], edx
mov dword [ebp - 4], ebx
call fcn.1e76ce60
push eax
lea ecx, [ebp - 0x20]
push ecx
mov ecx, dword [esi + 0x1c]
lea edx, [ebp - 0xac]
push edx
lea eax, [ebp - 0x10]
push eax
push 4
call fcn.1e770620
mov dword [ebp - 0x20], ebx
mov word [ebp - 0x14], di
mov dword [ebp - 0x1c], ebx
cmp byte [esi + 0x5131], bl
je 0x1e7746d6
mov ecx, dword [ebp - 0x5c]
lea eax, [ebp - 0x138]
mov dword [ebp - 0x18], ecx
mov ecx, dword [esi + 0x24]
xor edx, edx
push eax
mov word [ebp - 0x12], dx
call fcn.1e76cbc0
push eax
lea ecx, [ebp - 0x20]
push ecx
mov ecx, dword [esi + 0x1c]
push 6
call fcn.1e7706d0
mov ecx, dword [esi + 0x24]
lea edx, [ebp - 0x138]
push edx
mov dword [ebp - 0x10], 4
mov dword [ebp - 0xc], 2
mov dword [ebp - 8], 0xf0000
mov dword [ebp - 4], ebx
call fcn.1e76ce10
mov ecx, dword [esi + 0x1c]
push eax
lea eax, [ebp - 0x10]
push eax
push 1
call fcn.1e7704f0
mov ecx, dword [esi + 0x1c]
push 0x2a
call fcn.1e770490
mov ecx, dword [ebp - 0x5c]
mov eax, dword [ebp - 0x60]
mov dword [ebp - 0x18], ecx
xor edx, edx
lea ecx, [ebp - 0x20]
push ecx
mov ecx, dword [esi + 0x1c]
mov word [ebp - 0x12], dx
lea edx, [ebp - 0x10]
push edx
push 7
mov dword [ebp - 0x20], ebx
mov word [ebp - 0x14], di
mov dword [ebp - 0x1c], ebx
mov dword [ebp - 0x10], ebx
mov dword [ebp - 0xc], edi
mov dword [ebp - 8], eax
mov dword [ebp - 4], ebx
call fcn.1e7704f0
mov eax, dword [ebp - 0x5c]
mov edx, dword [ebp - 0x60]
xor ecx, ecx
mov dword [ebp - 0x18], eax
lea eax, [ebp - 0x138]
mov word [ebp - 0x12], cx
mov ecx, dword [esi + 0x24]
push eax
mov dword [ebp - 0x20], ebx
mov word [ebp - 0x14], di
mov dword [ebp - 0x1c], ebx
mov dword [ebp - 0x10], ebx
mov dword [ebp - 0xc], edi
mov dword [ebp - 8], edx
mov dword [ebp - 4], ebx
call fcn.1e76cf50
push eax
lea ecx, [ebp - 0x20]
push ecx
mov ecx, dword [esi + 0x1c]
lea edx, [ebp - 0x10]
push edx
push 5
call fcn.1e770580
mov eax, dword [ebp - 0x5c]
xor ecx, ecx
mov dword [ebp - 0x20], ebx
mov word [ebp - 0x14], di
mov dword [ebp - 0x18], eax
mov dword [ebp - 0x1c], ebx
mov word [ebp - 0x12], cx
lea edx, [ebp - 0x20]
push edx
lea eax, [ebp - 0x128]
push eax
lea ecx, [ebp - 0x10]
push ecx
mov ecx, dword [esi + 0x1c]
push 5
mov dword [ebp - 0x10], 4
mov dword [ebp - 0xc], 2
mov dword [ebp - 8], 0xf0000
mov dword [ebp - 4], ebx
call fcn.1e770580
mov ecx, dword [esi + 0x1c]
push 0x2b
call fcn.1e770490
jmp 0x1e77488c
mov edx, dword [ebp - 0x5c]
lea ecx, [ebp - 0x138]
xor eax, eax
push ecx
mov ecx, dword [esi + 0x24]
mov dword [ebp - 0x18], edx
mov word [ebp - 0x12], ax
mov dword [ebp - 0x10], ebx
mov dword [ebp - 0xc], 0xa
mov dword [ebp - 8], 0x20000
mov dword [ebp - 4], ebx
call fcn.1e76cbc0
mov ecx, dword [esi + 0x1c]
push eax
lea edx, [ebp - 0x20]
push edx
lea eax, [ebp - 0x10]
push eax
push 0xc
call fcn.1e770580
mov ecx, 0xa
lea eax, [ebp - 0x138]
mov word [ebp - 0x14], cx
xor edx, edx
mov dword [ebp - 0xc], ecx
mov ecx, dword [esi + 0x24]
push eax
mov dword [ebp - 0x20], ebx
mov dword [ebp - 0x18], 0x550000
mov dword [ebp - 0x1c], ebx
mov word [ebp - 0x12], dx
mov dword [ebp - 0x10], ebx
mov dword [ebp - 8], 0x40000
mov dword [ebp - 4], ebx
call fcn.1e76ce10
push eax
lea ecx, [ebp - 0x20]
push ecx
mov ecx, dword [esi + 0x1c]
lea edx, [ebp - 0x10]
push edx
push 5
call fcn.1e770580
mov eax, dword [ebp - 0x5c]
mov edx, dword [ebp - 0x60]
xor ecx, ecx
mov dword [ebp - 0x18], eax
mov word [ebp - 0x12], cx
lea eax, [ebp - 0x20]
push eax
lea ecx, [ebp - 0x10]
push ecx
mov ecx, dword [esi + 0x1c]
push 7
mov dword [ebp - 0x20], ebx
mov word [ebp - 0x14], di
mov dword [ebp - 0x1c], ebx
mov dword [ebp - 0x10], ebx
mov dword [ebp - 0xc], edi
mov dword [ebp - 8], edx
mov dword [ebp - 4], ebx
call fcn.1e7704f0
mov edx, dword [ebp - 0x5c]
mov ecx, dword [ebp - 0x60]
mov dword [ebp - 0x18], edx
lea edx, [ebp - 0x138]
xor eax, eax
mov dword [ebp - 8], ecx
mov ecx, dword [esi + 0x24]
push edx
mov dword [ebp - 0x20], ebx
mov word [ebp - 0x14], di
mov dword [ebp - 0x1c], ebx
mov word [ebp - 0x12], ax
mov dword [ebp - 0x10], ebx
mov dword [ebp - 0xc], edi
mov dword [ebp - 4], ebx
call fcn.1e76cf50
push eax
lea eax, [ebp - 0x20]
push eax
lea ecx, [ebp - 0x10]
push ecx
mov ecx, dword [esi + 0x1c]
push 5
call fcn.1e770580
mov ecx, dword [ebp - 0x5c]
xor eax, eax
mov edx, 0xa
mov word [ebp - 0x12], ax
mov word [ebp - 0x14], dx
mov dword [ebp - 0xa4], ecx
xor edx, edx
lea eax, [ebp - 0x20]
push eax
lea ecx, [ebp - 0xac]
push ecx
mov ecx, dword [esi + 0x1c]
mov word [ebp - 0x9e], dx
lea edx, [ebp - 0x128]
push edx
lea eax, [ebp - 0x10]
push eax
push 4
mov dword [ebp - 0x20], ebx
mov dword [ebp - 0x18], 0xaa0000
mov dword [ebp - 0x1c], ebx
mov dword [ebp - 0xac], ebx
mov word [ebp - 0xa0], di
mov dword [ebp - 0xa8], ebx
mov dword [ebp - 0x10], 4
mov dword [ebp - 0xc], 2
mov dword [ebp - 8], 0xf0000
mov dword [ebp - 4], ebx
call fcn.1e770620
jmp 0x1e77488c
lea ecx, [ebp - 0x128]
push ecx
mov ecx, dword [esi + 0x1c]
lea edx, [ebp - 0x10]
push edx
push 1
mov dword [ebp - 0x10], 4
mov dword [ebp - 0xc], 2
mov dword [ebp - 8], 0xf0000
mov dword [ebp - 4], ebx
call fcn.1e7704f0
mov eax, dword [esi + 8]
shr eax, 6
and eax, 0xf
mov ecx, eax
shl ecx, 8
or dword [ebp - 0x54], ecx
mov dword [ebp - 0x114], eax
mov dword [ebp - 0x6c], ebx
cmp eax, ebx
jbe 0x1e776017
xor eax, eax
mov edx, 0xa
mov word [ebp - 0x13c], dx
xor edx, edx
xor edi, edi
mov ecx, 0xe40000
mov dword [ebp - 0x128], eax
mov word [ebp - 0x13a], di
mov eax, dword [ebp - 0x13c]
mov dword [ebp - 0x124], edx
mov dword [ebp - 0x120], ecx
mov ecx, 0xa
mov edx, 0xf0000
mov dword [ebp - 0x11c], eax
xor eax, eax
mov dword [ebp - 0x88], ecx
mov dword [ebp - 0x84], edx
mov ecx, 0xb
xor edx, edx
mov dword [ebp - 0x8c], eax
mov dword [ebp - 0x80], ebx
mov word [ebp - 0x90], cx
mov word [ebp - 0x8e], dx
mov dword [ebp - 0x458], 6
mov dword [ebp - 0x450], 0xf0000
mov dword [ebp - 0x44c], ebx
mov dword [ebp - 0x50], 0x10
mov dword [ebp - 0xd0], 0x1e0
jmp 0x1e774950
mov eax, dword [ebp - 0x6c]
push eax
mov ecx, esi
call fcn.1e769f70
cmp eax, 0x30000
ja 0x1e774f68
je 0x1e774a2d
cmp eax, 0x10000
je 0x1e7749a4
cmp eax, 0x20000
jne 0x1e774f6f
xor ecx, ecx
xor eax, eax
xor edx, edx
mov word [ebp - 0x64c], cx
mov word [ebp - 0x64a], dx
mov edi, dword [ebp - 0x64c]
mov dword [ebp - 0x3c], 2
jmp 0x1e7756e9
mov ecx, 1
xor edx, edx
mov word [ebp - 0x65c], cx
xor eax, eax
mov word [ebp - 0x65a], dx
mov edi, dword [ebp - 0x65c]
mov ecx, 0xe40000
mov dword [ebp - 0x34], eax
mov dword [ebp - 0x30], ebx
mov dword [ebp - 0x2c], ecx
mov dword [ebp - 0x28], edi
cmp dword [ebp - 0x58], ebx
jne 0x1e774a21
mov ecx, dword [esi + 0x24]
push 4
push ecx
lea eax, [ebp - 0x6c8]
push eax
mov dword [ebp - 0x568], ebx
mov dword [ebp - 0x564], 1
mov dword [ebp - 0x560], 0x70000
mov dword [ebp - 0x55c], ebx
call fcn.1e76a320
lea ecx, [ebp - 0x6c8]
push ecx
mov ecx, dword [esi + 0x1c]
lea edx, [ebp - 0x568]
push edx
push 1
call fcn.1e7704f0
mov dword [ebp - 0x3c], 2
jmp 0x1e7756fa
test dword [esi + 4], 0x2000000
je 0x1e774ce7
push ebx
lea ecx, [ebp - 0x64]
mov dword [ebp - 0x64], 9
call fcn.1e769970
xor eax, eax
lea edx, [ebp - 0x20]
mov word [ebp - 0x14], ax
push edx
xor ecx, ecx
lea eax, [ebp - 0x548]
push eax
mov word [ebp - 0x12], cx
mov ecx, dword [esi + 0x1c]
mov edi, 0xe40000
push 0x24
mov dword [ebp - 0x20], ebx
mov dword [ebp - 0x18], edi
mov dword [ebp - 0x1c], ebx
mov dword [ebp - 0x548], ebx
mov dword [ebp - 0x544], 0xa
mov dword [ebp - 0x540], 0x70000
mov dword [ebp - 0x53c], ebx
call fcn.1e7704f0
xor edx, edx
mov ecx, 0xa
cmp dword [ebp - 0x58], ebx
je 0x1e774c8a
mov word [ebp - 0xa0], cx
mov eax, edi
mov edi, dword [ebp - 0x64]
mov ecx, 1
mov word [ebp - 0x16c], cx
mov dword [ebp - 0xa4], eax
mov dword [ebp - 0x170], eax
mov eax, dword [ebp - 0x60]
lea ecx, [ebp - 0xac]
push ecx
mov ecx, dword [esi + 0x1c]
mov word [ebp - 0x9e], dx
mov word [ebp - 0x16a], dx
lea edx, [ebp - 0x178]
mov dword [ebp - 0x5c0], eax
push edx
lea eax, [ebp - 0x5c8]
push eax
push 8
mov dword [ebp - 0xac], ebx
mov dword [ebp - 0xa8], ebx
mov dword [ebp - 0x178], ebx
mov dword [ebp - 0x174], ebx
mov dword [ebp - 0x5c8], ebx
mov dword [ebp - 0x5c4], edi
mov dword [ebp - 0x5bc], ebx
call fcn.1e770580
mov eax, dword [ebp - 0x5c]
xor ecx, ecx
mov word [ebp - 0x18a], cx
xor edx, edx
mov dword [ebp - 0x190], eax
mov dword [ebp - 0x180], eax
mov eax, dword [ebp - 0x60]
lea ecx, [ebp - 0x198]
push ecx
mov ecx, dword [esi + 0x1c]
mov word [ebp - 0x17a], dx
lea edx, [ebp - 0x188]
mov dword [ebp - 0x4d0], eax
push edx
lea eax, [ebp - 0x4d8]
push eax
push 2
mov dword [ebp - 0x198], ebx
mov word [ebp - 0x18c], di
mov dword [ebp - 0x194], ebx
mov dword [ebp - 0x188], ebx
mov word [ebp - 0x17c], di
mov dword [ebp - 0x184], ebx
mov dword [ebp - 0x4d8], ebx
mov dword [ebp - 0x4d4], edi
mov dword [ebp - 0x4cc], ebx
call fcn.1e770580
mov ecx, 0xa
mov eax, 0xe40000
mov word [ebp - 0x1fc], cx
xor edx, edx
mov ecx, 1
mov dword [ebp - 0x200], eax
mov dword [ebp - 0x240], eax
mov word [ebp - 0x23c], cx
mov ecx, dword [ebp - 0x5c]
xor eax, eax
mov word [ebp - 0x1fa], dx
mov word [ebp - 0x23a], dx
mov word [ebp - 0x67c], di
mov word [ebp - 0x67a], ax
mov edx, dword [ebp - 0x67c]
mov dword [ebp - 0x208], ebx
mov dword [ebp - 0x204], ebx
mov dword [ebp - 0x248], ebx
mov dword [ebp - 0x244], ebx
mov dword [ebp - 0x608], ebx
mov dword [ebp - 0x604], 0xb
mov dword [ebp - 0x600], 0x70000
mov dword [ebp - 0x5fc], ebx
mov dword [ebp - 0x1e8], ebx
mov word [ebp - 0x1dc], di
mov dword [ebp - 0x1e0], ecx
mov dword [ebp - 0x1e4], 0x1000000
shr edx, 0x10
lea eax, [ebp - 0x208]
push eax
lea ecx, [ebp - 0x248]
push ecx
mov ecx, dword [esi + 0x1c]
mov word [ebp - 0x1da], dx
lea edx, [ebp - 0x1e8]
push edx
lea eax, [ebp - 0x608]
push eax
push 4
call fcn.1e770620
jmp 0x1e774f3f
mov word [ebp - 0x25c], cx
lea eax, [ebp - 0x268]
push eax
lea ecx, [ebp - 0x588]
push ecx
mov ecx, dword [esi + 0x1c]
push 1
mov dword [ebp - 0x268], ebx
mov dword [ebp - 0x260], edi
mov dword [ebp - 0x264], ebx
mov word [ebp - 0x25a], dx
mov dword [ebp - 0x588], ebx
mov dword [ebp - 0x584], 0xb
mov dword [ebp - 0x580], 0x70000
mov dword [ebp - 0x57c], ebx
call fcn.1e7704f0
jmp 0x1e774f3f
cmp dword [ebp - 0x58], ebx
je 0x1e774e76
push ebx
lea ecx, [ebp - 0x10c]
mov dword [ebp - 0x10c], 9
call fcn.1e769970
mov edi, dword [ebp - 0x10c]
mov edx, 1
mov ecx, edx
mov word [ebp - 0x69c], dx
xor edx, edx
xor eax, eax
mov word [ebp - 0x6fa], dx
mov word [ebp - 0x69a], ax
mov eax, dword [ebp - 0x108]
mov edx, dword [ebp - 0x69c]
shr edx, 0x10
mov dword [ebp - 0x4e0], eax
mov word [ebp - 0x6fc], cx
mov eax, 0xaa0000
mov word [ebp - 0x1ba], dx
mov edx, dword [ebp - 0x6fc]
mov dword [ebp - 0x1c0], eax
mov dword [ebp - 0x220], eax
mov word [ebp - 0x1bc], cx
mov word [ebp - 0x21c], cx
shr edx, 0x10
lea eax, [ebp - 0x1c8]
push eax
lea ecx, [ebp - 0x228]
push ecx
mov ecx, dword [esi + 0x1c]
mov word [ebp - 0x21a], dx
lea edx, [ebp - 0x4e8]
push edx
push 2
mov dword [ebp - 0x4e8], ebx
mov dword [ebp - 0x4e4], edi
mov dword [ebp - 0x4dc], ebx
mov dword [ebp - 0x1c8], ebx
mov dword [ebp - 0x1c4], ebx
mov dword [ebp - 0x228], ebx
mov dword [ebp - 0x224], ebx
call fcn.1e770580
xor ecx, ecx
mov word [ebp - 0x19a], cx
xor edx, edx
mov eax, 1
mov word [ebp - 0x19c], ax
mov eax, dword [ebp - 0x104]
mov word [ebp - 0x6aa], dx
mov word [ebp - 0x6ac], di
mov ecx, dword [ebp - 0x6ac]
shr ecx, 0x10
lea edx, [ebp - 0x1a8]
push edx
mov dword [ebp - 0x210], eax
mov word [ebp - 0x20a], cx
lea eax, [ebp - 0x218]
push eax
lea ecx, [ebp - 0x4f8]
push ecx
mov ecx, dword [esi + 0x1c]
push 5
mov dword [ebp - 0x1a8], ebx
mov dword [ebp - 0x1a0], 0xe40000
mov dword [ebp - 0x1a4], ebx
mov dword [ebp - 0x4f8], ebx
mov dword [ebp - 0x4f4], 0xb
mov dword [ebp - 0x4f0], 0x70000
mov dword [ebp - 0x4ec], ebx
mov dword [ebp - 0x218], ebx
mov word [ebp - 0x20c], di
mov dword [ebp - 0x214], 0x1000000
call fcn.1e770580
jmp 0x1e774ec0
mov ecx, dword [esi + 0x24]
push 4
push ecx
lea edx, [ebp - 0x6e8]
push edx
mov dword [ebp - 0x518], ebx
mov dword [ebp - 0x514], 0xb
mov dword [ebp - 0x510], 0x70000
mov dword [ebp - 0x50c], ebx
call fcn.1e76a320
lea eax, [ebp - 0x6e8]
push eax
lea ecx, [ebp - 0x518]
push ecx
mov ecx, dword [esi + 0x1c]
push 1
call fcn.1e7704f0
mov ecx, dword [esi + 0x24]
mov edx, 0xb
xor eax, eax
mov word [ebp - 0x27c], dx
push 4
lea edx, [ecx + 0xc]
mov word [ebp - 0x27a], ax
push edx
lea eax, [ebp - 0x138]
push eax
mov dword [ebp - 0x288], ebx
mov dword [ebp - 0x280], 0xe40000
mov dword [ebp - 0x284], ebx
call fcn.1e76a320
lea ecx, [ebp - 0x138]
push ecx
mov ecx, dword [esi + 0x1c]
lea edx, [ebp - 0x288]
push edx
lea eax, [ebp - 0x538]
push eax
push 2
mov dword [ebp - 0x538], ebx
mov dword [ebp - 0x534], 0xb
mov dword [ebp - 0x530], 0x40000
mov dword [ebp - 0x52c], ebx
call fcn.1e770580
xor eax, eax
mov ecx, 0xb
xor edx, edx
mov word [ebp - 0x66c], cx
mov word [ebp - 0x66a], dx
mov edi, dword [ebp - 0x66c]
mov dword [ebp - 0x3c], 2
jmp 0x1e7756e9
cmp eax, 0x40000
je 0x1e774fab
and eax, 7
mov ecx, eax
movzx eax, byte [eax + esi + 0xc]
shl ecx, 4
mov edx, dword [ebp + ecx - 0x8e8]
mov edi, dword [ebp + ecx - 0x8dc]
lea ecx, [ebp + ecx - 0x8e8]
mov dword [ebp - 0x34], edx
mov edx, dword [ecx + 4]
mov dword [ebp - 0x30], edx
mov edx, dword [ecx + 8]
shr eax, 6
mov dword [ebp - 0x2c], edx
mov dword [ebp - 0x3c], eax
jmp 0x1e7756f7
push ebx
lea ecx, [ebp - 0xc8]
mov dword [ebp - 0xc8], 9
call fcn.1e769970
test dword [esi + 4], 0x2000000
je 0x1e77531a
xor eax, eax
lea edx, [ebp - 0x298]
mov word [ebp - 0x28c], ax
push edx
xor ecx, ecx
lea eax, [ebp - 0x558]
push eax
mov word [ebp - 0x28a], cx
mov ecx, dword [esi + 0x1c]
push 0x24
mov dword [ebp - 0x298], ebx
mov dword [ebp - 0x290], 0xe40000
mov dword [ebp - 0x294], ebx
mov dword [ebp - 0x558], ebx
mov dword [ebp - 0x554], 0xa
mov dword [ebp - 0x550], 0x70000
mov dword [ebp - 0x54c], ebx
call fcn.1e7704f0
xor edx, edx
mov ecx, 0xa
cmp dword [ebp - 0x58], ebx
je 0x1e775233
mov edi, dword [ebp - 0xc8]
mov word [ebp - 0x26c], cx
mov eax, 0xe40000
mov ecx, 1
mov word [ebp - 0x24c], cx
mov dword [ebp - 0x270], eax
mov dword [ebp - 0x250], eax
mov eax, dword [ebp - 0xc4]
lea ecx, [ebp - 0x278]
push ecx
mov ecx, dword [esi + 0x1c]
mov word [ebp - 0x26a], dx
mov word [ebp - 0x24a], dx
lea edx, [ebp - 0x258]
mov dword [ebp - 0x570], eax
push edx
lea eax, [ebp - 0x578]
push eax
push 8
mov dword [ebp - 0x278], ebx
mov dword [ebp - 0x274], ebx
mov dword [ebp - 0x258], ebx
mov dword [ebp - 0x254], ebx
mov dword [ebp - 0x578], ebx
mov dword [ebp - 0x574], edi
mov dword [ebp - 0x56c], ebx
call fcn.1e770580
mov eax, dword [ebp - 0xc0]
xor ecx, ecx
mov word [ebp - 0x22a], cx
xor edx, edx
mov dword [ebp - 0x230], eax
mov dword [ebp - 0x1f0], eax
mov eax, dword [ebp - 0xc4]
lea ecx, [ebp - 0x238]
push ecx
mov ecx, dword [esi + 0x1c]
mov word [ebp - 0x1ea], dx
lea edx, [ebp - 0x1f8]
mov dword [ebp - 0x590], eax
push edx
lea eax, [ebp - 0x598]
push eax
push 2
mov dword [ebp - 0x238], ebx
mov word [ebp - 0x22c], di
mov dword [ebp - 0x234], ebx
mov dword [ebp - 0x1f8], ebx
mov word [ebp - 0x1ec], di
mov dword [ebp - 0x1f4], ebx
mov dword [ebp - 0x598], ebx
mov dword [ebp - 0x594], edi
mov dword [ebp - 0x58c], ebx
call fcn.1e770580
mov ecx, 0xa
mov eax, 0xe40000
mov word [ebp - 0x1cc], cx
xor edx, edx
mov ecx, 1
mov dword [ebp - 0x1d0], eax
mov dword [ebp - 0x1b0], eax
mov word [ebp - 0x1ac], cx
mov ecx, dword [ebp - 0xc0]
xor eax, eax
mov word [ebp - 0x1ca], dx
mov word [ebp - 0x1aa], dx
mov word [ebp - 0x6ec], di
mov word [ebp - 0x6ea], ax
mov edx, dword [ebp - 0x6ec]
mov dword [ebp - 0x1d8], ebx
mov dword [ebp - 0x1d4], ebx
mov dword [ebp - 0x1b8], ebx
mov dword [ebp - 0x1b4], ebx
mov dword [ebp - 0x5b8], ebx
mov dword [ebp - 0x5b4], 8
mov dword [ebp - 0x5b0], 0x70000
mov dword [ebp - 0x5ac], ebx
mov dword [ebp - 0x4c8], ebx
mov word [ebp - 0x4bc], di
mov dword [ebp - 0x4c0], ecx
mov dword [ebp - 0x4c4], 0x1000000
shr edx, 0x10
lea eax, [ebp - 0x1d8]
push eax
lea ecx, [ebp - 0x1b8]
push ecx
mov ecx, dword [esi + 0x1c]
mov word [ebp - 0x4ba], dx
lea edx, [ebp - 0x4c8]
push edx
lea eax, [ebp - 0x5b8]
push eax
push 4
call fcn.1e770620
mov edi, 8
jmp 0x1e775290
mov word [ebp - 0x47c], cx
lea eax, [ebp - 0x488]
push eax
lea ecx, [ebp - 0x628]
push ecx
mov ecx, dword [esi + 0x1c]
mov edi, 8
push 1
mov dword [ebp - 0x488], ebx
mov dword [ebp - 0x480], 0xe40000
mov dword [ebp - 0x484], ebx
mov word [ebp - 0x47a], dx
mov dword [ebp - 0x628], ebx
mov dword [ebp - 0x624], edi
mov dword [ebp - 0x620], 0x70000
mov dword [ebp - 0x61c], ebx
call fcn.1e7704f0
xor eax, eax
mov edx, edi
mov word [ebp - 0x68c], dx
mov word [ebp - 0x68a], ax
mov edx, dword [ebp - 0x68c]
mov ecx, edi
lea eax, [ebp - 0x868]
mov word [ebp - 0x48c], cx
mov ecx, dword [esi + 0x24]
shr edx, 0x10
push eax
mov dword [ebp - 0x498], ebx
mov dword [ebp - 0x490], 0xaa0000
mov dword [ebp - 0x494], ebx
mov word [ebp - 0x48a], dx
mov dword [ebp - 0x618], ebx
mov dword [ebp - 0x614], edi
mov dword [ebp - 0x610], 0x40000
mov dword [ebp - 0x60c], ebx
call fcn.1e76cc10
push eax
lea ecx, [ebp - 0x498]
push ecx
mov ecx, dword [esi + 0x1c]
lea edx, [ebp - 0x618]
push edx
push 2
call fcn.1e770580
jmp 0x1e775496
cmp dword [ebp - 0x58], ebx
je 0x1e775684
mov edi, dword [ebp - 0xc8]
xor ecx, ecx
mov word [ebp - 0x6ca], cx
mov ecx, dword [ebp - 0xc4]
mov eax, 1
mov edx, eax
mov word [ebp - 0x6cc], ax
xor eax, eax
mov dword [ebp - 0x5e0], ecx
mov ecx, dword [ebp - 0x6cc]
mov word [ebp - 0x63a], ax
mov eax, 0xaa0000
shr ecx, 0x10
mov dword [ebp - 0x4b0], eax
mov dword [ebp - 0x370], eax
mov word [ebp - 0x63c], dx
mov eax, dword [ebp - 0x63c]
mov word [ebp - 0x4aa], cx
shr eax, 0x10
lea ecx, [ebp - 0x4b8]
push ecx
mov ecx, dword [esi + 0x1c]
mov word [ebp - 0x4ac], dx
mov word [ebp - 0x36c], dx
lea edx, [ebp - 0x378]
mov word [ebp - 0x36a], ax
push edx
lea eax, [ebp - 0x5e8]
push eax
push 2
mov dword [ebp - 0x5e8], ebx
mov dword [ebp - 0x5e4], edi
mov dword [ebp - 0x5dc], ebx
mov dword [ebp - 0x4b8], ebx
mov dword [ebp - 0x4b4], ebx
mov dword [ebp - 0x378], ebx
mov dword [ebp - 0x374], ebx
call fcn.1e770580
xor edx, edx
xor eax, eax
mov ecx, 1
mov word [ebp - 0x35c], cx
mov ecx, dword [ebp - 0xc0]
mov word [ebp - 0x35a], dx
mov word [ebp - 0x62a], ax
mov word [ebp - 0x62c], di
mov edx, dword [ebp - 0x62c]
mov dword [ebp - 0x2d0], ecx
shr edx, 0x10
lea eax, [ebp - 0x368]
push eax
lea ecx, [ebp - 0x2d8]
push ecx
mov ecx, dword [esi + 0x1c]
mov word [ebp - 0x2ca], dx
lea edx, [ebp - 0x5d8]
push edx
push 5
mov dword [ebp - 0x368], ebx
mov dword [ebp - 0x360], 0xe40000
mov dword [ebp - 0x364], ebx
mov dword [ebp - 0x5d8], ebx
mov dword [ebp - 0x5d4], 8
mov dword [ebp - 0x5d0], 0x70000
mov dword [ebp - 0x5cc], ebx
mov dword [ebp - 0x2d8], ebx
mov word [ebp - 0x2cc], di
mov dword [ebp - 0x2d4], 0x1000000
call fcn.1e770580
mov edi, 8
mov eax, edi
mov word [ebp - 0x2ec], ax
xor ecx, ecx
mov eax, 0xe40000
mov word [ebp - 0x2ea], cx
mov dword [ebp - 0x2f0], eax
mov edx, edi
mov dword [ebp - 0x2e0], eax
xor eax, eax
lea ecx, [ebp - 0x2f8]
push ecx
mov ecx, dword [esi + 0x1c]
mov word [ebp - 0x2dc], dx
lea edx, [ebp - 0x2e8]
mov word [ebp - 0x2da], ax
push edx
lea eax, [ebp - 0x508]
push eax
push edi
mov dword [ebp - 0x2f8], ebx
mov dword [ebp - 0x2f4], ebx
mov dword [ebp - 0x2e8], ebx
mov dword [ebp - 0x2e4], ebx
mov dword [ebp - 0x508], ebx
mov dword [ebp - 0x504], edi
mov dword [ebp - 0x500], 0x40000
mov dword [ebp - 0x4fc], ebx
call fcn.1e770580
mov ecx, edi
mov word [ebp - 0x37c], cx
lea eax, [ebp - 0x388]
push eax
lea ecx, [ebp - 0x5a8]
push ecx
mov ecx, dword [esi + 0x1c]
xor edx, edx
push 7
mov dword [ebp - 0x388], ebx
mov dword [ebp - 0x380], 0xaa0000
mov dword [ebp - 0x384], ebx
mov word [ebp - 0x37a], dx
mov dword [ebp - 0x5a8], ebx
mov dword [ebp - 0x5a4], edi
mov dword [ebp - 0x5a0], 0x40000
mov dword [ebp - 0x59c], ebx
call fcn.1e7704f0
lea ecx, [ebp - 0x828]
mov edx, edi
xor eax, eax
push ecx
mov ecx, dword [esi + 0x24]
mov dword [ebp - 0x308], ebx
mov word [ebp - 0x2fc], dx
mov dword [ebp - 0x300], 0xaa0000
mov dword [ebp - 0x304], ebx
mov word [ebp - 0x2fa], ax
mov dword [ebp - 0x528], ebx
mov dword [ebp - 0x524], edi
mov dword [ebp - 0x520], 0x40000
mov dword [ebp - 0x51c], ebx
call fcn.1e7771b0
mov ecx, dword [esi + 0x1c]
push eax
lea edx, [ebp - 0x308]
push edx
lea eax, [ebp - 0x528]
push eax
push 5
call fcn.1e770580
xor edx, edx
mov ecx, edi
mov dword [ebp - 0x3a8], ebx
mov word [ebp - 0x39c], cx
mov dword [ebp - 0x3a0], 0xaa0000
mov dword [ebp - 0x3a4], ebx
mov word [ebp - 0x39a], dx
mov dword [ebp - 0x3c8], ebx
mov word [ebp - 0x3bc], di
mov dword [ebp - 0x3c0], 0xe40000
mov dword [ebp - 0x3c4], ebx
xor eax, eax
lea ecx, [ebp - 0x748]
push ecx
mov ecx, dword [esi + 0x24]
mov word [ebp - 0x3ba], ax
mov dword [ebp - 0x5f8], ebx
mov dword [ebp - 0x5f4], 0xb
mov dword [ebp - 0x5f0], 0x30000
mov dword [ebp - 0x5ec], ebx
call fcn.1e7771b0
push eax
lea edx, [ebp - 0x3a8]
push edx
lea eax, [ebp - 0x3c8]
push eax
lea ecx, [ebp - 0x5f8]
push ecx
mov ecx, dword [esi + 0x1c]
push 4
call fcn.1e770620
jmp 0x1e7756c5
mov ecx, dword [esi + 0x24]
lea edx, [ebp - 0x7e8]
push edx
mov dword [ebp - 0x3d8], ebx
mov dword [ebp - 0x3d4], 0xb
mov dword [ebp - 0x3d0], 0x30000
mov dword [ebp - 0x3cc], ebx
call fcn.1e7771b0
mov ecx, dword [esi + 0x1c]
push eax
lea eax, [ebp - 0x3d8]
push eax
push 1
call fcn.1e7704f0
xor eax, eax
mov ecx, 0xb
xor edx, edx
mov word [ebp - 0x49c], cx
mov word [ebp - 0x49a], dx
mov edi, dword [ebp - 0x49c]
mov dword [ebp - 0x3c], 1
mov ecx, 0xe40000
mov dword [ebp - 0x34], eax
mov dword [ebp - 0x30], ebx
mov dword [ebp - 0x2c], ecx
mov dword [ebp - 0x28], edi
mov eax, dword [ebp - 0x34]
mov ecx, dword [ebp - 0x30]
mov edx, dword [ebp - 0x2c]
mov dword [ebp - 0xe0], eax
mov eax, dword [ebp - 0x6c]
mov dword [ebp - 0xdc], ecx
push eax
mov ecx, esi
mov dword [ebp - 0xd8], edx
mov dword [ebp - 0xd4], edi
call fcn.1e769fd0
mov ecx, eax
and ecx, 0xfffffeff
mov dword [ebp - 0x118], eax
je 0x1e775d4b
mov eax, dword [ebp - 0xd0]
xor edx, edx
shr eax, 4
mov word [ebp - 0x15a], dx
lea edx, [eax + 1]
mov word [ebp - 0xe4], dx
xor edx, edx
mov word [ebp - 0xe2], dx
lea edx, [eax + 2]
mov word [ebp - 0x15c], ax
add eax, 3
mov word [ebp - 0xb0], dx
xor edx, edx
mov word [ebp - 0x40], ax
xor eax, eax
mov dword [ebp - 0x168], 2
mov dword [ebp - 0x160], 0xe40000
mov dword [ebp - 0x164], ebx
mov dword [ebp - 0xf0], 2
mov dword [ebp - 0xe8], 0xe40000
mov dword [ebp - 0xec], ebx
mov dword [ebp - 0xbc], 2
mov dword [ebp - 0xb4], 0xe40000
mov dword [ebp - 0xb8], ebx
mov word [ebp - 0xae], dx
mov dword [ebp - 0x4c], 2
mov dword [ebp - 0x44], 0xe40000
mov dword [ebp - 0x48], ebx
mov word [ebp - 0x3e], ax
mov dword [ebp - 0x38], ecx
cmp ecx, 4
jb 0x1e7757f4
mov dword [ebp - 0x38], 4
xor eax, eax
cmp dword [ebp - 0x34], 2
mov dword [ebp - 0x478], eax
mov ecx, 0xb
mov eax, 0xf0000
mov dword [ebp - 0x474], ecx
mov dword [ebp - 0x470], eax
mov dword [ebp - 0x46c], ebx
jne 0x1e7758ec
mov eax, dword [ebp - 0x3c]
sub eax, ebx
je 0x1e77588d
sub eax, 1
je 0x1e775864
sub eax, 1
je 0x1e77583b
lea edx, [ebp - 0x478]
jmp 0x1e7758af
lea eax, [ebp - 0x34]
mov dword [ebp - 0x464], ecx
push eax
lea ecx, [ebp - 0x468]
mov dword [ebp - 0x468], ebx
mov dword [ebp - 0x460], 0x70000
mov dword [ebp - 0x45c], ebx
push ecx
jmp 0x1e7758b4
lea edx, [ebp - 0x34]
push edx
lea eax, [ebp - 0x408]
mov dword [ebp - 0x408], ebx
mov dword [ebp - 0x404], ecx
mov dword [ebp - 0x400], 0x30000
mov dword [ebp - 0x3fc], ebx
push eax
jmp 0x1e7758b4
mov dword [ebp - 0x448], ebx
mov dword [ebp - 0x444], ecx
mov dword [ebp - 0x440], 0x10000
mov dword [ebp - 0x43c], ebx
lea edx, [ebp - 0x448]
lea ecx, [ebp - 0x34]
push ecx
push edx
mov ecx, dword [esi + 0x1c]
push 1
call fcn.1e7704f0
xor eax, eax
mov ecx, 0xb
xor edx, edx
mov word [ebp - 0x14c], cx
mov word [ebp - 0x14a], dx
mov edi, dword [ebp - 0x14c]
mov ecx, 0xe40000
mov dword [ebp - 0x34], eax
mov dword [ebp - 0x30], ebx
mov dword [ebp - 0x2c], ecx
mov dword [ebp - 0x28], edi
mov eax, dword [ebp - 0x3c]
cmp eax, 3
ja case.default.0x1e7758f8
jmp dword [eax*4 + 0x1e776044]
mov eax, dword [ebp - 0x34]
mov ecx, dword [ebp - 0x30]
lea edx, [ebp - 0x168]
push edx
mov dword [ebp - 0x2a8], eax
mov dword [ebp - 0x2a4], ecx
mov ecx, dword [ebp - 0x38]
lea eax, [ebp - 0x2a8]
push eax
push ecx
lea edx, [ebp - 0x768]
mov word [ebp - 0x29c], di
shr edi, 0x10
push edx
lea ecx, [ebp - 0x8c]
mov dword [ebp - 0x2a0], ebx
mov word [ebp - 0x29a], di
call fcn.1e76c8d0
mov ecx, dword [esi + 0x1c]
push eax
push 5
call fcn.1e770580
mov edx, dword [ebp - 0x38]
lea eax, [ebp - 0xf0]
push eax
lea ecx, [ebp - 0x128]
push ecx
push edx
lea eax, [ebp - 0x718]
push eax
lea ecx, [ebp - 0x8c]
call fcn.1e76c8d0
mov ecx, dword [esi + 0x1c]
push eax
push 2
call fcn.1e770580
jmp case.default.0x1e7758f8
mov ecx, dword [ebp - 0x34]
mov edx, dword [ebp - 0x30]
mov ax, word [ebp - 0x26]
mov dword [ebp - 0x338], ecx
lea ecx, [ebp - 0x168]
push ecx
mov dword [ebp - 0x334], edx
lea edx, [ebp - 0x338]
mov word [ebp - 0x32a], ax
mov eax, dword [ebp - 0x38]
push edx
push eax
lea ecx, [ebp - 0x788]
push ecx
lea ecx, [ebp - 0x8c]
mov word [ebp - 0x32c], di
mov dword [ebp - 0x330], ebx
call fcn.1e76c8d0
mov ecx, dword [esi + 0x1c]
push eax
push 5
call fcn.1e770580
mov edx, dword [ebp - 0x34]
mov eax, dword [ebp - 0x30]
mov cx, word [ebp - 0x26]
mov dword [ebp - 0x3b8], edx
lea edx, [ebp - 0x128]
push edx
mov dword [ebp - 0x3b4], eax
mov word [ebp - 0x3aa], cx
lea eax, [ebp - 0xf0]
push eax
lea ecx, [ebp - 0x3b8]
push ecx
mov word [ebp - 0x3ac], di
mov edi, dword [ebp - 0x38]
push edi
lea edx, [ebp - 0x808]
push edx
lea ecx, [ebp - 0x8c]
mov dword [ebp - 0x3b0], 0x550000
call fcn.1e76c8d0
mov ecx, dword [esi + 0x1c]
push eax
push 4
call fcn.1e770620
lea eax, [ebp - 0xbc]
push eax
lea ecx, [ebp - 0x128]
push ecx
push edi
lea edx, [ebp - 0x7a8]
push edx
jmp 0x1e775970
mov eax, dword [ebp - 0x34]
mov ecx, dword [ebp - 0x30]
movzx edx, word [ebp - 0x26]
mov dword [ebp - 0x358], eax
mov dword [ebp - 0x354], ecx
lea eax, [ebp - 0x168]
push eax
lea ecx, [ebp - 0x358]
push ecx
mov word [ebp - 0x34a], dx
mov edx, dword [ebp - 0x38]
push edx
lea eax, [ebp - 0x848]
push eax
lea ecx, [ebp - 0x8c]
mov word [ebp - 0x34c], di
mov dword [ebp - 0x350], ebx
call fcn.1e76c8d0
mov ecx, dword [esi + 0x1c]
push eax
push 5
call fcn.1e770580
mov ecx, dword [ebp - 0x34]
mov edx, dword [ebp - 0x30]
mov ax, word [ebp - 0x26]
mov dword [ebp - 0x398], ecx
mov dword [ebp - 0x394], edx
lea ecx, [ebp - 0x128]
push ecx
mov ecx, dword [ebp - 0x38]
lea edx, [ebp - 0xf0]
push edx
mov word [ebp - 0x38a], ax
lea eax, [ebp - 0x398]
push eax
push ecx
lea edx, [ebp - 0x7c8]
push edx
lea ecx, [ebp - 0x8c]
mov word [ebp - 0x38c], di
mov dword [ebp - 0x390], 0x550000
call fcn.1e76c8d0
mov ecx, dword [esi + 0x1c]
push eax
push 4
call fcn.1e770620
mov eax, dword [ebp - 0x34]
mov ecx, dword [ebp - 0x30]
movzx edx, word [ebp - 0x26]
mov dword [ebp - 0x318], eax
mov dword [ebp - 0x314], ecx
lea eax, [ebp - 0x128]
push eax
lea ecx, [ebp - 0xbc]
push ecx
mov word [ebp - 0x30a], dx
lea edx, [ebp - 0x318]
push edx
mov word [ebp - 0x30c], di
mov edi, dword [ebp - 0x38]
push edi
lea eax, [ebp - 0x728]
push eax
lea ecx, [ebp - 0x8c]
mov dword [ebp - 0x310], 0xaa0000
call fcn.1e76c8d0
mov ecx, dword [esi + 0x1c]
push eax
push 4
call fcn.1e770620
lea ecx, [ebp - 0x4c]
push ecx
lea edx, [ebp - 0x128]
push edx
push edi
lea eax, [ebp - 0x738]
jmp 0x1e77596f
mov ecx, dword [ebp - 0x34]
mov edx, dword [ebp - 0x30]
movzx eax, word [ebp - 0x26]
mov dword [ebp - 0x328], ecx
lea ecx, [ebp - 0x168]
push ecx
mov dword [ebp - 0x324], edx
lea edx, [ebp - 0x328]
mov word [ebp - 0x31a], ax
mov eax, dword [ebp - 0x38]
push edx
push eax
lea ecx, [ebp - 0x758]
push ecx
lea ecx, [ebp - 0x8c]
mov word [ebp - 0x31c], di
mov dword [ebp - 0x320], ebx
call fcn.1e76c8d0
mov ecx, dword [esi + 0x1c]
push eax
push 5
call fcn.1e770580
mov edx, dword [ebp - 0x34]
mov eax, dword [ebp - 0x30]
mov cx, word [ebp - 0x26]
mov dword [ebp - 0x348], edx
mov dword [ebp - 0x344], eax
lea edx, [ebp - 0x128]
push edx
mov edx, dword [ebp - 0x38]
mov word [ebp - 0x33a], cx
lea eax, [ebp - 0xf0]
push eax
lea ecx, [ebp - 0x348]
push ecx
push edx
lea eax, [ebp - 0x778]
push eax
lea ecx, [ebp - 0x8c]
mov word [ebp - 0x33c], di
mov dword [ebp - 0x340], 0x550000
call fcn.1e76c8d0
mov ecx, dword [esi + 0x1c]
push eax
push 4
call fcn.1e770620
mov ecx, dword [ebp - 0x34]
mov edx, dword [ebp - 0x30]
movzx eax, word [ebp - 0x26]
mov dword [ebp - 0x2c8], ecx
mov dword [ebp - 0x2c4], edx
lea ecx, [ebp - 0x128]
push ecx
mov ecx, dword [ebp - 0x38]
lea edx, [ebp - 0xbc]
push edx
mov word [ebp - 0x2ba], ax
lea eax, [ebp - 0x2c8]
push eax
push ecx
lea edx, [ebp - 0x798]
push edx
lea ecx, [ebp - 0x8c]
mov word [ebp - 0x2bc], di
mov dword [ebp - 0x2c0], 0xaa0000
call fcn.1e76c8d0
mov ecx, dword [esi + 0x1c]
push eax
push 4
call fcn.1e770620
mov eax, dword [ebp - 0x34]
mov ecx, dword [ebp - 0x30]
mov dx, word [ebp - 0x26]
mov dword [ebp - 0x2b8], eax
lea eax, [ebp - 0x128]
mov dword [ebp - 0x2b4], ecx
mov word [ebp - 0x2ac], di
mov dword [ebp - 0x2b0], 0xff0000
mov word [ebp - 0x2aa], dx
push eax
lea ecx, [ebp - 0x4c]
mov eax, dword [ebp - 0x38]
push ecx
lea edx, [ebp - 0x2b8]
push edx
push eax
lea ecx, [ebp - 0x7b8]
push ecx
lea ecx, [ebp - 0x8c]
call fcn.1e76c8d0
mov ecx, dword [esi + 0x1c]
push eax
push 4
call fcn.1e770620
mov edx, dword [ebp - 0x38]
dec edx
xor eax, eax
mov dword [ebp - 0xe0], eax
mov dword [ebp - 0xdc], eax
mov eax, 0xe40000
mov dword [ebp - 0xd8], eax
mov eax, dword [ebp - 0x13c]
mov dword [ebp - 0x3c], edx
mov dword [ebp - 0xd4], eax
jmp 0x1e775d51
mov eax, dword [ebp - 0xd4]
test dword [ebp - 0x118], 0x100
mov ecx, dword [ebp - 0xe0]
mov edx, dword [ebp - 0xdc]
mov dword [ebp - 0x100], ecx
mov ecx, dword [ebp - 0xd8]
mov dword [ebp - 0xfc], edx
mov dword [ebp - 0xf8], ecx
mov dword [ebp - 0xf4], eax
je 0x1e775f96
cmp byte [esi + 0x5130], bl
je 0x1e775eae
cmp dword [ebp - 0xe0], ebx
je 0x1e775e5b
cmp dword [ebp - 0x3c], 3
je 0x1e775ea2
mov ecx, dword [esi + 0x1c]
lea edx, [ebp - 0xe0]
push edx
lea eax, [ebp - 0x428]
push eax
mov edi, 0xb
push 1
mov dword [ebp - 0x428], ebx
mov dword [ebp - 0x424], edi
mov dword [ebp - 0x420], 0x70000
mov dword [ebp - 0x41c], ebx
call fcn.1e7704f0
mov ecx, dword [ebp - 0x3c]
push ecx
lea edx, [ebp - 0x7d8]
push edx
lea ecx, [ebp - 0xe0]
mov dword [ebp - 0x3e8], ebx
mov dword [ebp - 0x3e4], edi
mov dword [ebp - 0x3e0], 0x80000
mov dword [ebp - 0x3dc], ebx
call fcn.1e7698e0
mov ecx, dword [esi + 0x1c]
push eax
lea eax, [ebp - 0x3e8]
push eax
push 1
call fcn.1e7704f0
mov ecx, dword [ebp - 0x90]
xor eax, eax
mov dword [ebp - 0x100], eax
mov dword [ebp - 0xfc], eax
mov eax, 0xe40000
mov dword [ebp - 0xf8], eax
mov dword [ebp - 0xf4], ecx
mov dword [ebp - 0x3c], 3
jmp 0x1e775f96
mov edx, dword [ebp - 0x3c]
movzx eax, ax
mov dword [ebp - 0x3f4], eax
push edx
lea eax, [ebp - 0x7f8]
push eax
lea ecx, [ebp - 0xe0]
mov dword [ebp - 0x3f8], ebx
mov dword [ebp - 0x3f0], 0x80000
mov dword [ebp - 0x3ec], ebx
call fcn.1e7698e0
push eax
lea ecx, [ebp - 0x3f8]
push ecx
mov ecx, dword [esi + 0x1c]
push 1
call fcn.1e7704f0
mov dword [ebp - 0x3c], 3
jmp 0x1e775f96
push ebx
lea ecx, [ebp - 0x78]
mov dword [ebp - 0x78], 0xa
call fcn.1e769970
mov eax, dword [ebp - 0x3c]
mov edx, dword [ebp - 0x74]
mov edi, dword [ebp - 0x78]
push eax
lea ecx, [ebp - 0x818]
push ecx
lea ecx, [ebp - 0xe0]
mov dword [ebp - 0x418], ebx
mov dword [ebp - 0x414], edi
mov dword [ebp - 0x410], edx
mov dword [ebp - 0x40c], ebx
call fcn.1e7698e0
mov ecx, dword [esi + 0x1c]
push eax
lea edx, [ebp - 0x418]
push edx
push 6
call fcn.1e7704f0
mov eax, dword [ebp - 0x70]
mov edx, dword [ebp - 0xe0]
mov dword [ebp - 8], eax
movzx eax, word [ebp - 0xd4]
xor ecx, ecx
mov word [ebp - 2], cx
mov dword [ebp - 0x434], eax
mov ecx, 0xf0000
mov dword [ebp - 0x438], edx
mov edx, dword [ebp - 0x3c]
mov dword [ebp - 0x430], ecx
lea eax, [ebp - 0x10]
push eax
lea ecx, [ebp - 0xe0]
push ecx
inc edx
push edx
lea eax, [ebp - 0x838]
push eax
lea ecx, [ebp - 0x438]
mov dword [ebp - 0x10], ebx
mov word [ebp - 4], di
mov dword [ebp - 0xc], ebx
mov dword [ebp - 0x42c], ebx
call fcn.1e76c8d0
mov ecx, dword [esi + 0x1c]
push eax
push 5
call fcn.1e770580
mov ecx, dword [ebp - 0x90]
xor eax, eax
mov dword [ebp - 0x100], eax
mov dword [ebp - 0xfc], eax
mov eax, 0xe40000
mov dword [ebp - 0xf8], eax
mov dword [ebp - 0xf4], ecx
mov edx, dword [ebp - 0x6c]
mov edi, dword [ebp - 0x3c]
lea eax, [ebp - 0x100]
push eax
lea ecx, [edi + 1]
mov dword [ebp - 0x454], edx
push ecx
lea edx, [ebp - 0x858]
push edx
lea ecx, [ebp - 0x458]
call fcn.1e76c8d0
mov ecx, dword [esi + 0x1c]
push eax
push 1
call fcn.1e7704f0
cmp edi, 3
ja case.0x1e775fcf.1
jmp dword [edi*4 + 0x1e776054]
mov eax, 3
jmp 0x1e775ff1
mov ecx, dword [ebp - 0x50]
mov edx, 1
shl edx, cl
or dword [ebp - 0x54], edx
jmp case.0x1e775fcf.1
mov eax, 2
mov ecx, dword [ebp - 0x50]
shl eax, cl
or dword [ebp - 0x54], eax
mov eax, dword [ebp - 0x6c]
add dword [ebp - 0x50], 2
add dword [ebp - 0xd0], 0x40
inc eax
mov dword [ebp - 0x6c], eax
cmp eax, dword [ebp - 0x114]
jb 0x1e774950
mov eax, dword [esi + 0x1c]
mov ecx, dword [ebp - 0x54]
mov dword [esi + 0x14], ecx
mov edx, dword [eax + 4]
mov ecx, dword [eax]
mov dword [ecx + edx*4], 0xffff
mov ecx, dword [eax + 4]
mov dword [eax + 8], ecx
inc ecx
mov dword [eax + 4], ecx
mov edx, dword [esi + 0x1c]
mov eax, dword [edx]
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret