Function at 0x10009a00
Capabilities:
Get thread local storage value
Resolve function by parsing pe exports

Disassembly:
sub esp, 0xf8
mov eax, dword [0x1002b150]
push ebx
push esi
push edi
mov esi, 0x10033b38
push ebp
push eax
call dword [sym.imp.KERNEL32.dll_TlsGetValue]
lea edi, [eax + 0x6cc]
mov ebp, eax
mov ecx, 9
xor edx, edx
rep movsd dword es:[edi], dword [esi]
mov eax, dword [esp + 0x10c]
mov dword [esp + 0x20], edx
mov ecx, dword [eax + 0x114]
test ecx, ecx
je 0x10009a56
movsx eax, dx
cmp dword [ecx + eax*4], 0
je 0x10009a4e
inc dword [esp + 0x20]
inc dx
cmp dx, 9
jle 0x10009a41
mov eax, dword [esp + 0x10c]
mov ebx, dword [eax + 0xa0]
movsx edx, word [ebx*2 + 0x10033b18]
mov ax, word [eax + 0x74]
mov ebx, dword [esp + 0x10c]
mov word [esp + 0x12], ax
mov esi, 8
mov eax, dword [ebx + 0x11c]
mov dword [esp + 0x1c], edx
mov dx, word [0x10033afa]
test eax, eax
je 0x10009a97
mov esi, eax
mov eax, dword [esp + 0x20]
lea ebx, [eax + eax*2]
mov eax, dword [esp + 0x10c]
lea edi, [esi + ebx*4 + 0x102]
mov eax, dword [eax + 0x18]
mov dword [esp + 0x60], edi
test eax, eax
je 0x10009ac6
cmp eax, 1
jl 0x10009aeb
cmp eax, 3
jg 0x10009aeb
add dword [esp + 0x60], 0x24
movsx eax, word [0x10033afe]
imul eax, dword [esp + 0x1c]
movsx ebx, word [0x10033b02]
add eax, dword [esp + 0x60]
lea esi, [ebx + ebx*2]
mov dword [esp + 0x5c], eax
lea edi, [eax + esi*2]
mov dword [esp + 0x68], edi
movsx eax, word [0x10033b02]
mov edi, dword [esp + 0x68]
add edi, eax
add eax, edi
mov dword [esp + 0x78], edi
mov dword [esp + 0x64], eax
test ecx, ecx
je 0x10009b16
cmp dword [ecx + 0x1c], 0
je 0x10009b16
mov esi, dword [ecx + 0x12c]
add esi, eax
jmp 0x10009b1a
mov esi, dword [esp + 0x64]
mov dword [esp + 0x58], esi
test ecx, ecx
je 0x10009b34
cmp dword [ecx + 0xc], 0
je 0x10009b34
mov esi, dword [esp + 0x58]
add esi, dword [ecx + 0x11c]
jmp 0x10009b38
mov esi, dword [esp + 0x58]
mov dword [esp + 0x54], esi
test ecx, ecx
je 0x10009b52
cmp dword [ecx + 0x14], 0
je 0x10009b52
mov esi, dword [esp + 0x54]
add esi, dword [ecx + 0x124]
jmp 0x10009b56
mov esi, dword [esp + 0x54]
mov dword [esp + 0x50], esi
test ecx, ecx
je 0x10009b70
cmp dword [ecx + 0x18], 0
je 0x10009b70
mov esi, dword [esp + 0x50]
add esi, dword [ecx + 0x128]
jmp 0x10009b74
mov esi, dword [esp + 0x50]
mov dword [esp + 0x4c], esi
test ecx, ecx
je 0x10009b8e
cmp dword [ecx + 0x20], 0
je 0x10009b8e
mov esi, dword [esp + 0x4c]
add esi, dword [ecx + 0x130]
jmp 0x10009b92
mov esi, dword [esp + 0x4c]
mov dword [esp + 0x48], esi
test ecx, ecx
je 0x10009bac
cmp dword [ecx + 0x24], 0
je 0x10009bac
mov esi, dword [esp + 0x48]
add esi, dword [ecx + 0x134]
jmp 0x10009bb0
mov esi, dword [esp + 0x48]
mov dword [esp + 0x44], esi
test ecx, ecx
je 0x10009bca
cmp dword [ecx + 8], 0
je 0x10009bca
mov esi, dword [esp + 0x44]
add esi, dword [ecx + 0x118]
jmp 0x10009bce
mov esi, dword [esp + 0x44]
mov dword [esp + 0x40], esi
test ecx, ecx
je 0x10009be7
cmp dword [ecx], 0
je 0x10009be7
mov esi, dword [esp + 0x40]
add esi, dword [ecx + 0x110]
jmp 0x10009beb
mov esi, dword [esp + 0x40]
mov dword [esp + 0x3c], esi
test ecx, ecx
je 0x10009c05
cmp dword [ecx + 0x10], 0
je 0x10009c05
mov esi, dword [esp + 0x3c]
add esi, dword [ecx + 0x120]
jmp 0x10009c09
mov esi, dword [esp + 0x3c]
mov dword [esp + 0x38], esi
test ecx, ecx
je 0x10009c27
cmp dword [ecx + 4], 0
je 0x10009c27
mov eax, dword [ecx + 0x114]
add eax, dword [esp + 0x38]
mov dword [esp + 0x24], eax
jmp 0x10009c2f
mov ecx, dword [esp + 0x38]
mov dword [esp + 0x24], ecx
movzx eax, dx
shl eax, 6
mov ecx, dword [esp + 0x24]
mov dword [esp + 0x6c], eax
add eax, 4
imul eax, dword [esp + 0x1c]
add ecx, eax
xor eax, eax
mov word [esp + 0x34], ax
mov dword [esp + 0x2c], ecx
mov word [esp + 0x98], ax
mov word [esp + 0x28], ax
cmp word [esp + 0x1c], ax
jle 0x10009ce5
movsx edx, word [esp + 0x28]
xor si, si
mov eax, dword [esp + 0x10c]
mov word [esp + edx*2 + 0x7c], 0
mov edi, dword [eax + edx*4 + 0x4c]
lea ecx, [eax + edx*4]
mov word [esp + edx*2 + 0x84], 0
movsx eax, si
movzx bx, byte [eax + edi]
add word [esp + edx*2 + 0x84], bx
mov ebx, dword [ecx + 0x5c]
inc si
movzx ax, byte [eax + ebx]
add word [esp + edx*2 + 0x7c], ax
cmp si, 0x10
jl 0x10009c8d
mov ax, word [esp + edx*2 + 0x84]
add ax, 0x10
add word [esp + 0x98], ax
mov ax, word [esp + edx*2 + 0x7c]
add ax, 0x10
inc word [esp + 0x28]
mov cx, word [esp + 0x28]
add word [esp + 0x34], ax
cmp cx, word [esp + 0x1c]
jl 0x10009c66
mov edx, dword [esp + 0x1c]
mov eax, dword [esp + 0x98]
shl edx, 2
and eax, 0xffff
add eax, edx
mov ecx, dword [esp + 0x2c]
add ecx, eax
mov eax, dword [esp + 0x34]
and eax, 0xffff
mov dword [esp + 0x28], ecx
add eax, edx
add ecx, eax
mov eax, dword [esp + 0x12]
and eax, 0xffff
mov dword [ebp + 0x6f0], ecx
mov dword [esp + 0x34], eax
movsx eax, word [0x10033b00]
imul eax, dword [esp + 0x34]
add eax, ecx
mov ecx, dword [esp + 0x10c]
mov dword [ebp + 0x6f4], eax
cmp dword [ecx + 0x108], 0
mov dword [ebp + 0x614], 3
je 0x10009d5c
mov dword [ebp + 0x614], 1
mov eax, dword [esp + 0x10c]
mov ecx, dword [eax]
lea esi, [ebp + 0x5f0]
mov dword [ebp + 0x5d8], ecx
mov ecx, dword [esp + 0x1c]
mov edx, dword [eax + 4]
cmp ecx, 1
mov dword [ebp + 0x5e4], edx
mov dword [ebp + 0x5ec], ecx
jne 0x10009d91
mov dword [esi], 8
jmp 0x10009d97
mov edi, dword [esp + 0x60]
mov dword [esi], edi
mov eax, dword [esp + 0x10c]
mov edi, dword [esp + 0x68]
mov ecx, dword [eax + 0x18]
mov eax, dword [esp + 0x1c]
movsx edx, word [ecx*2 + 0x10033b08]
mov ecx, dword [esp + 0x78]
mov dword [ebp + 0x608], edx
mov dword [ebp + 0x620], eax
mov eax, dword [esp + 0x10c]
mov dword [ebp + 0x62c], edi
mov dword [ebp + 0x638], ecx
mov edx, dword [eax + 0x78]
movsx ecx, word [edx*2 + 0x10033b28]
mov dword [ebp + 0x650], ecx
mov edx, dword [eax + 8]
mov dword [ebp + 0x65c], edx
mov ecx, dword [eax + 0xc]
mov eax, dword [esp + 0x34]
mov dword [ebp + 0x668], ecx
mov dword [ebp + 0x670], eax
mov edx, dword [ebp + 0x6f0]
mov dword [ebp + 0x674], edx
mov dword [ebp + 0x67c], eax
mov eax, dword [esp + 0x10c]
mov ecx, dword [ebp + 0x6f4]
mov dword [ebp + 0x680], ecx
mov ecx, dword [esp + 0x1c]
mov edx, dword [eax + 0x10]
cmp ecx, 1
mov dword [ebp + 0x698], edx
mov dword [ebp + 0x6a0], ecx
jne 0x10009e47
mov eax, dword [esp + 0x24]
lea ecx, [eax + ecx*4]
jmp 0x10009e4b
mov ecx, dword [esp + 0x24]
mov edx, dword [esp + 0x1c]
mov dword [ebp + 0x6a4], ecx
mov dword [ebp + 0x6ac], edx
cmp edx, 1
jne 0x10009e69
mov eax, dword [esp + 0x2c]
lea ecx, [eax + edx*4]
jmp 0x10009e6d
mov ecx, dword [esp + 0x2c]
mov edx, dword [esp + 0x1c]
lea edi, [ebp + 0x6bc]
mov dword [ebp + 0x6b0], ecx
cmp edx, 1
mov dword [ebp + 0x6b8], edx
jne 0x10009e91
mov eax, dword [esp + 0x28]
lea ecx, [eax + edx*4]
jmp 0x10009e95
mov ecx, dword [esp + 0x28]
mov eax, dword [esp + 0x10c]
mov dword [edi], ecx
mov eax, dword [eax + 0x18]
test eax, eax
jl 0x10009edb
cmp eax, 3
jg 0x10009edb
mov cx, word [0x10033afe]
mov eax, dword [esp + 0x10c]
shl cl, 3
mov edx, dword [eax + 0x2c]
shl edx, cl
mov ebx, dword [esp + 0x5c]
mov dword [ebp + 0x6d4], edx
mov eax, dword [eax + 0x1c]
add eax, edx
mov dword [ebp + 0x6d4], eax
mov dword [ebp + 0x6ec], ebx
mov eax, dword [esp + 0x10c]
mov ecx, dword [eax + 0x11c]
test ecx, ecx
jne 0x10009f1f
lea eax, [esp + 0x18]
push 2
mov dword [esp + 0x1c], 8
push eax
push 0xffffffffffffffff
push 0x10033b60
call fcn.1000e380
add esp, 0x10
mov dword [ebp + 0x5d84], eax
test eax, eax
je 0x10009f4a
pop ebp
pop edi
pop esi
pop ebx
add esp, 0xf8
ret
lea edx, [esp + 0x18]
push 2
mov dword [esp + 0x1c], 0
push edx
push ecx
push 0x10033b60
call fcn.1000e380
add esp, 0x10
mov dword [ebp + 0x5d84], eax
test eax, eax
jne 0x1000df5c
mov eax, dword [esp + 0x20]
mov ecx, dword [esp + 0x10c]
mov dword [esp + 0x18], 2
add ax, 0x15
mov word [esp + 0x10], ax
mov eax, dword [ecx + 0x18]
cmp eax, 1
jl 0x10009f79
cmp eax, 3
jg 0x10009f79
add word [esp + 0x10], 3
mov eax, dword [esp + 0x10c]
cmp dword [eax + 0x120], 0x4949
je 0x10009fa4
movzx cx, byte [esp + 0x10]
shl cx, 8
movzx ax, byte [esp + 0x11]
or cx, ax
mov word [esp + 0x10], cx
lea eax, [esp + 0x18]
push 2
lea ecx, [esp + 0x14]
push eax
push 0xffffffffffffffff
push ecx
call fcn.1000e380
add esp, 0x10
mov dword [ebp + 0x5d84], eax
test eax, eax
jne 0x1000df5c
mov eax, dword [esp + 0x10c]
mov dword [esp + 0x18], 0xc
cmp dword [eax + 0x120], 0x4949
jne 0x1000a014
lea eax, [esp + 0x18]
push 2
push eax
lea ecx, [ebp + 0x5c4]
push 0xffffffffffffffff
push ecx
call fcn.1000e380
add esp, 0x10
mov dword [ebp + 0x5d84], eax
test eax, eax
je 0x1000a175
pop ebp
pop edi
pop esi
pop ebx
add esp, 0xf8
ret
mov ax, word [ebp + 0x5c4]
movzx cx, al
shl cx, 8
movzx ax, ah
or cx, ax
mov word [esp + 0x98], cx
mov ax, word [ebp + 0x5c6]
movzx cx, al
shl cx, 8
xor edx, edx
movzx ax, ah
or cx, ax
mov dword [esp + 0x78], 0
mov word [esp + 0x9a], cx
mov ecx, dword [ebp + 0x5c8]
mov eax, ecx
mov dl, ch
sar eax, 0x10
mov byte [esp + 0x78], cl
shl edx, 0x10
xor ecx, ecx
shl dword [esp + 0x78], 0x18
or edx, dword [esp + 0x78]
mov cl, al
shl ecx, 8
and edx, 0xffff0000
mov dword [esp + 0x78], 0
mov byte [esp + 0x78], ah
or ecx, dword [esp + 0x78]
and ecx, 0xffff
or edx, ecx
mov dword [esp + 0x9c], edx
cmp word [ebp + 0x5c6], 3
jne 0x1000a0fc
cmp dword [ebp + 0x5c8], 2
jg 0x1000a0fc
mov ecx, dword [ebp + 0x5cc]
xor edx, edx
mov dword [esp + 0x78], 0
mov eax, ecx
sar eax, 0x10
mov dl, ah
mov byte [esp + 0x78], al
shl edx, 0x10
xor eax, eax
shl dword [esp + 0x78], 0x18
or edx, dword [esp + 0x78]
mov al, cl
shl eax, 8
and edx, 0xffff0000
mov dword [esp + 0x78], 0
mov byte [esp + 0x78], ch
or eax, dword [esp + 0x78]
jmp 0x1000a140
mov eax, dword [ebp + 0x5cc]
xor edx, edx
mov ecx, eax
mov dl, ah
mov dword [esp + 0x78], 0
sar ecx, 0x10
mov byte [esp + 0x78], al
shl edx, 0x10
xor eax, eax
shl dword [esp + 0x78], 0x18
or edx, dword [esp + 0x78]
mov al, cl
shl eax, 8
and edx, 0xffff0000
mov dword [esp + 0x78], 0
mov byte [esp + 0x78], ch
or eax, dword [esp + 0x78]
and eax, 0xffff
push 2
or edx, eax
lea ecx, [esp + 0x9c]
lea eax, [esp + 0x1c]
mov dword [esp + 0xa4], edx
push eax
push 0xffffffffffffffff
push ecx
call fcn.1000e380
add esp, 0x10
mov dword [ebp + 0x5d84], eax
test eax, eax
jne 0x1000df5c
mov eax, dword [esp + 0x10c]
cmp dword [eax + 0x120], 0x4949
jne 0x1000a1b9
lea eax, [esp + 0x18]
push 2
push eax
lea ecx, [ebp + 0x5d0]
push 0xffffffffffffffff
push ecx
call fcn.1000e380
add esp, 0x10
mov dword [ebp + 0x5d84], eax
test eax, eax
je 0x1000a321
pop ebp
pop edi
pop esi
pop ebx
add esp, 0xf8
ret
mov ax, word [ebp + 0x5d0]
movzx cx, al
shl cx, 8
movzx ax, ah
or cx, ax
mov word [esp + 0x98], cx
mov ax, word [ebp + 0x5d2]
movzx cx, al
shl cx, 8
xor edx, edx
movzx ax, ah
or cx, ax
mov dword [esp + 0x78], 0
mov word [esp + 0x9a], cx
mov eax, dword [ebp + 0x5d4]
mov ecx, eax
mov dl, ah
sar ecx, 0x10
mov byte [esp + 0x78], al
shl edx, 0x10
xor eax, eax
shl dword [esp + 0x78], 0x18
or edx, dword [esp + 0x78]
mov al, cl
shl eax, 8
and edx, 0xffff0000
mov dword [esp + 0x78], 0
mov byte [esp + 0x78], ch
or eax, dword [esp + 0x78]
and eax, 0xffff
or edx, eax
mov dword [esp + 0x9c], edx
cmp word [ebp + 0x5d2], 3
jne 0x1000a2a8
cmp dword [ebp + 0x5d4], 2
jg 0x1000a2a8
mov eax, dword [ebp + 0x5d8]
xor edx, edx
mov dword [esp + 0x78], 0
mov ecx, eax
sar ecx, 0x10
mov dl, ch
mov byte [esp + 0x78], cl
shl edx, 0x10
xor ecx, ecx
shl dword [esp + 0x78], 0x18
or edx, dword [esp + 0x78]
mov cl, al
shl ecx, 8
and edx, 0xffff0000
mov dword [esp + 0x78], 0
mov byte [esp + 0x78], ah
or ecx, dword [esp + 0x78]
and ecx, 0xffff
or edx, ecx
jmp 0x1000a2f3
mov eax, dword [ebp + 0x5d8]
xor edx, edx
mov ecx, eax
mov dl, ah
mov dword [esp + 0x78], 0
sar ecx, 0x10
mov byte [esp + 0x78], al
shl edx, 0x10
xor eax, eax
shl dword [esp + 0x78], 0x18
or edx, dword [esp + 0x78]
mov al, cl
shl eax, 8
and edx, 0xffff0000
mov dword [esp + 0x78], 0
mov byte [esp + 0x78], ch
or eax, dword [esp + 0x78]
and eax, 0xffff
or edx, eax
lea eax, [esp + 0x18]
push 2
lea ecx, [esp + 0x9c]
push eax
mov dword [esp + 0xa8], edx
push 0xffffffffffffffff
push ecx
call fcn.1000e380
add esp, 0x10
mov dword [ebp + 0x5d84], eax
test eax, eax
jne 0x1000df5c
mov eax, dword [esp + 0x10c]
cmp dword [eax + 0x120], 0x4949
jne 0x1000a365
lea eax, [esp + 0x18]
push 2
push eax
lea ecx, [ebp + 0x5dc]
push 0xffffffffffffffff
push ecx
call fcn.1000e380
add esp, 0x10
mov dword [ebp + 0x5d84], eax
test eax, eax
je 0x1000a4c6
pop ebp
pop edi
pop esi
pop ebx
add esp, 0xf8
ret
mov ax, word [ebp + 0x5dc]
movzx cx, al
shl cx, 8
movzx ax, ah
or cx, ax
mov word [esp + 0x98], cx
mov ax, word [ebp + 0x5de]
movzx cx, al
shl cx, 8
xor edx, edx
movzx ax, ah
or cx, ax
mov dword [esp + 0x78], 0
mov word [esp + 0x9a], cx
mov eax, dword [ebp + 0x5e0]
mov ecx, eax
mov dl, ah
sar ecx, 0x10
mov byte [esp + 0x78], al
shl edx, 0x10
xor eax, eax
shl dword [esp + 0x78], 0x18
or edx, dword [esp + 0x78]
mov al, cl
shl eax, 8
and edx, 0xffff0000
mov dword [esp + 0x78], 0
mov byte [esp + 0x78], ch
or eax, dword [esp + 0x78]
and eax, 0xffff
or edx, eax
mov dword [esp + 0x9c], edx
cmp word [ebp + 0x5de], 3
jne 0x1000a44c
cmp dword [ebp + 0x5e0], 2
jg 0x1000a44c
mov eax, dword [ebp + 0x5e4]
xor edx, edx
mov dword [esp + 0x78], 0
mov ecx, eax
sar ecx, 0x10
mov dl, ch
mov byte [esp + 0x78], cl
shl edx, 0x10
xor ecx, ecx
shl dword [esp + 0x78], 0x18
or edx, dword [esp + 0x78]
mov cl, al
shl ecx, 8
and edx, 0xffff0000
mov dword [esp + 0x78], 0
mov byte [esp + 0x78], ah
or ecx, dword [esp + 0x78]
jmp 0x1000a490
mov ecx, dword [ebp + 0x5e4]
xor edx, edx
mov eax, ecx
mov dl, ch
mov dword [esp + 0x78], 0
sar eax, 0x10
mov byte [esp + 0x78], cl
shl edx, 0x10
xor ecx, ecx
shl dword [esp + 0x78], 0x18
or edx, dword [esp + 0x78]
mov cl, al
shl ecx, 8
and edx, 0xffff0000
mov dword [esp + 0x78], 0
mov byte [esp + 0x78], ah
or ecx, dword [esp + 0x78]
and ecx, 0xffff
push 2
or edx, ecx
lea eax, [esp + 0x1c]
lea ecx, [esp + 0x9c]
push eax
mov dword [esp + 0xa8], edx
push 0xffffffffffffffff
push ecx
call fcn.1000e380
add esp, 0x10
mov dword [ebp + 0x5d84], eax
test eax, eax
jne 0x1000df5c
mov eax, dword [esp + 0x10c]
cmp dword [eax + 0x120], 0x4949
jne 0x1000a50a
lea eax, [esp + 0x18]
push 2
push eax
lea ecx, [ebp + 0x5e8]
push 0xffffffffffffffff
push ecx
call fcn.1000e380
add esp, 0x10
mov dword [ebp + 0x5d84], eax
test eax, eax
je 0x1000a66b
pop ebp
pop edi
pop esi
pop ebx
add esp, 0xf8
ret
mov ax, word [ebp + 0x5e8]
movzx cx, al
shl cx, 8
movzx ax, ah
or cx, ax
mov word [esp + 0x98], cx
mov ax, word [ebp + 0x5ea]
movzx cx, al
shl cx, 8
xor edx, edx
movzx ax, ah
or cx, ax
mov dword [esp + 0x78], 0
mov word [esp + 0x9a], cx
mov ecx, dword [ebp + 0x5ec]
mov eax, ecx
mov dl, ch
sar eax, 0x10
mov byte [esp + 0x78], cl
shl edx, 0x10
xor ecx, ecx
shl dword [esp + 0x78], 0x18
or edx, dword [esp + 0x78]
mov cl, al
shl ecx, 8
and edx, 0xffff0000
mov dword [esp + 0x78], 0
mov byte [esp + 0x78], ah
or ecx, dword [esp + 0x78]
and ecx, 0xffff
or edx, ecx
mov dword [esp + 0x9c], edx
cmp word [ebp + 0x5ea], 3
jne 0x1000a5f6
cmp dword [ebp + 0x5ec], 2
jg 0x1000a5f6
mov eax, dword [esi]
xor edx, edx
mov dword [esp + 0x78], 0
mov ecx, eax
sar ecx, 0x10
mov dl, ch
mov byte [esp + 0x78], cl
shl edx, 0x10
xor ecx, ecx
shl dword [esp + 0x78], 0x18
or edx, dword [esp + 0x78]
mov cl, al
shl ecx, 8
and edx, 0xffff0000
mov dword [esp + 0x78], 0
mov byte [esp + 0x78], ah
or ecx, dword [esp + 0x78]
and ecx, 0xffff
or edx, ecx
jmp 0x1000a63d
mov eax, dword [esi]
xor edx, edx
mov ecx, eax
mov dl, ah
mov dword [esp + 0x78], 0
sar ecx, 0x10
mov byte [esp + 0x78], al
shl edx, 0x10
xor eax, eax
shl dword [esp + 0x78], 0x18
or edx, dword [esp + 0x78]
mov al, cl
shl eax, 8
and edx, 0xffff0000
mov dword [esp + 0x78], 0
mov byte [esp + 0x78], ch
or eax, dword [esp + 0x78]
and eax, 0xffff
or edx, eax
lea eax, [esp + 0x18]
push 2
lea ecx, [esp + 0x9c]
push eax
mov dword [esp + 0xa8], edx
push 0xffffffffffffffff
push ecx
call fcn.1000e380
add esp, 0x10
mov dword [ebp + 0x5d84], eax
test eax, eax
jne 0x1000df5c
mov eax, dword [esp + 0x10c]
cmp dword [eax + 0x120], 0x4949
jne 0x1000a6af
lea eax, [esp + 0x18]
push 2
push eax
lea ecx, [ebp + 0x5f4]
push 0xffffffffffffffff
push ecx
call fcn.1000e380
add esp, 0x10
mov dword [ebp + 0x5d84], eax
test eax, eax
je 0x1000a818
pop ebp
pop edi
pop esi
pop ebx
add esp, 0xf8
ret
mov cx, word [ebp + 0x5f4]
movzx ax, cl
shl ax, 8
movzx cx, ch
or ax, cx
mov word [esp + 0x98], ax
mov ax, word [ebp + 0x5f6]
movzx cx, al
shl cx, 8
xor edx, edx
movzx ax, ah
or cx, ax
mov dword [esp + 0x78], 0
mov word [esp + 0x9a], cx
mov ecx, dword [ebp + 0x5f8]
mov eax, ecx
mov dl, ch
sar eax, 0x10
mov byte [esp + 0x78], cl
shl edx, 0x10
xor ecx, ecx
shl dword [esp + 0x78], 0x18
or edx, dword [esp + 0x78]
mov cl, al
shl ecx, 8
and edx, 0xffff0000
mov dword [esp + 0x78], 0
mov byte [esp + 0x78], ah
or ecx, dword [esp + 0x78]
and ecx, 0xffff
or edx, ecx
mov dword [esp + 0x9c], edx
cmp word [ebp + 0x5f6], 3
jne 0x1000a79f
cmp dword [ebp + 0x5f8], 2
jg 0x1000a79f
mov eax, dword [ebp + 0x5fc]
xor edx, edx
mov dword [esp + 0x78], 0
mov ecx, eax
sar ecx, 0x10
mov dl, ch
mov byte [esp + 0x78], cl
shl edx, 0x10
xor ecx, ecx
shl dword [esp + 0x78], 0x18
or edx, dword [esp + 0x78]
mov cl, al
shl ecx, 8
and edx, 0xffff0000
mov dword [esp + 0x78], 0
mov byte [esp + 0x78], ah
or ecx, dword [esp + 0x78]
and ecx, 0xffff
or edx, ecx
jmp 0x1000a7ea
mov eax, dword [ebp + 0x5fc]
xor edx, edx
mov ecx, eax
mov dl, ah
mov dword [esp + 0x78], 0
sar ecx, 0x10
mov byte [esp + 0x78], al
shl edx, 0x10
xor eax, eax
shl dword [esp + 0x78], 0x18
or edx, dword [esp + 0x78]
mov al, cl
shl eax, 8
and edx, 0xffff0000
mov dword [esp + 0x78], 0
mov byte [esp + 0x78], ch
or eax, dword [esp + 0x78]
and eax, 0xffff
or edx, eax
lea eax, [esp + 0x18]
push 2
lea ecx, [esp + 0x9c]
push eax
mov dword [esp + 0xa8], edx
push 0xffffffffffffffff
push ecx
call fcn.1000e380
add esp, 0x10
mov dword [ebp + 0x5d84], eax
test eax, eax
jne 0x1000df5c
mov eax, dword [esp + 0x10c]
cmp dword [eax + 0x120], 0x4949
jne 0x1000a85c
lea eax, [esp + 0x18]
push 2
push eax
lea ecx, [ebp + 0x600]
push 0xffffffffffffffff
push ecx
call fcn.1000e380
add esp, 0x10
mov dword [ebp + 0x5d84], eax
test eax, eax
je 0x1000a9bc
pop ebp
pop edi
pop esi
pop ebx
add esp, 0xf8
ret
mov cx, word [ebp + 0x600]
movzx ax, cl
shl ax, 8
movzx cx, ch
or ax, cx
mov word [esp + 0x98], ax
mov ax, word [ebp + 0x602]
movzx cx, al
shl cx, 8
xor edx, edx
movzx ax, ah
or cx, ax
mov dword [esp + 0x78], 0
mov word [esp + 0x9a], cx
mov eax, dword [ebp + 0x604]
mov ecx, eax
mov dl, ah
sar ecx, 0x10
mov byte [esp + 0x78], al
shl edx, 0x10
xor eax, eax
shl dword [esp + 0x78], 0x18
or edx, dword [esp + 0x78]
mov al, cl
shl eax, 8
and edx, 0xffff0000
mov dword [esp + 0x78], 0
mov byte [esp + 0x78], ch
or eax, dword [esp + 0x78]
and eax, 0xffff
or edx, eax
mov dword [esp + 0x9c], edx
cmp word [ebp + 0x602], 3
jne 0x1000a943
cmp dword [ebp + 0x604], 2
jg 0x1000a943
mov ecx, dword [ebp + 0x608]
xor edx, edx
mov dword [esp + 0x78], 0
mov eax, ecx
sar eax, 0x10
mov dl, ah
mov byte [esp + 0x78], al
shl edx, 0x10
xor eax, eax
shl dword [esp + 0x78], 0x18
or edx, dword [esp + 0x78]
mov al, cl
shl eax, 8
and edx, 0xffff0000
mov dword [esp + 0x78], 0
mov byte [esp + 0x78], ch
or eax, dword [esp + 0x78]
jmp 0x1000a987
mov eax, dword [ebp + 0x608]
xor edx, edx
mov ecx, eax
mov dl, ah
mov dword [esp + 0x78], 0
sar ecx, 0x10
mov byte [esp + 0x78], al
shl edx, 0x10
xor eax, eax
shl dword [esp + 0x78], 0x18
or edx, dword [esp + 0x78]
mov al, cl
shl eax, 8
and edx, 0xffff0000
mov dword [esp + 0x78], 0
mov byte [esp + 0x78], ch
or eax, dword [esp + 0x78]
and eax, 0xffff
push 2
or edx, eax
lea ecx, [esp + 0x9c]
lea eax, [esp + 0x1c]
mov dword [esp + 0xa4], edx
push eax
push 0xffffffffffffffff
push ecx
call fcn.1000e380
add esp, 0x10
mov dword [ebp + 0x5d84], eax
test eax, eax
jne 0x1000df5c
mov eax, dword [esp + 0x10c]
mov eax, dword [eax + 0x114]
test eax, eax
je 0x1000ab27
cmp dword [eax + 0x1c], 0
je 0x1000ab27
mov esi, dword [esp + 0x64]
mov ecx, dword [esp + 0x10c]
mov word [esp + 0x8c], 0x10d
cmp dword [ecx + 0x120], 0x4949
mov word [esp + 0x8e], 2
mov eax, dword [eax + 0x12c]
mov dword [esp + 0x90], eax
mov dword [esp + 0x94], esi
jne 0x1000aa4c
lea eax, [esp + 0x18]
push 2
lea ecx, [esp + 0x90]
push eax
push 0xffffffffffffffff
push ecx
call fcn.1000e380
add esp, 0x10
mov dword [ebp + 0x5d84], eax
test eax, eax
je 0x1000ab27
pop ebp
pop edi
pop esi
pop ebx
add esp, 0xf8
ret
mov eax, dword [esp + 0x90]
xor ecx, ecx
sar eax, 0x10
mov cl, byte [esp + 0x91]
shl ecx, 0x10
xor edx, edx
mov word [esp + 0x98], 0xd01
mov word [esp + 0x9a], 0x200
mov dl, byte [esp + 0x90]
mov dword [esp + 0x78], 0
shl edx, 0x18
mov byte [esp + 0x78], ah
or ecx, edx
xor edx, edx
and ecx, 0xffff0000
mov dl, al
shl edx, 8
mov eax, dword [esp + 0x94]
sar eax, 0x10
or edx, dword [esp + 0x78]
and edx, 0xffff
or ecx, edx
xor edx, edx
mov dl, byte [esp + 0x95]
mov dword [esp + 0x9c], ecx
shl edx, 0x10
xor ecx, ecx
mov cl, byte [esp + 0x94]
mov dword [esp + 0x78], 0
shl ecx, 0x18
mov byte [esp + 0x78], ah
or edx, ecx
xor ecx, ecx
and edx, 0xffff0000
mov cl, al
shl ecx, 8
push 2
or ecx, dword [esp + 0x7c]
lea eax, [esp + 0x1c]
and ecx, 0xffff
push eax
or edx, ecx
push 0xffffffffffffffff
lea ecx, [esp + 0xa4]
mov dword [esp + 0xac], edx
push ecx
call fcn.1000e380
add esp, 0x10
mov dword [ebp + 0x5d84], eax
test eax, eax
jne 0x1000df5c
mov eax, dword [esp + 0x10c]
mov eax, dword [eax + 0x114]
test eax, eax
je 0x1000ac92
cmp dword [eax + 0xc], 0
je 0x1000ac92
mov esi, dword [esp + 0x58]
mov ecx, dword [esp + 0x10c]
mov word [esp + 0x8c], 0x10e
cmp dword [ecx + 0x120], 0x4949
mov word [esp + 0x8e], 2
mov eax, dword [eax + 0x11c]
mov dword [esp + 0x90], eax
mov dword [esp + 0x94], esi
jne 0x1000abb7
lea eax, [esp + 0x18]
push 2
lea ecx, [esp + 0x90]
push eax
push 0xffffffffffffffff
push ecx
call fcn.1000e380
add esp, 0x10
mov dword [ebp + 0x5d84], eax
test eax, eax
je 0x1000ac92
pop ebp
pop edi
pop esi
pop ebx
add esp, 0xf8
ret
mov eax, dword [esp + 0x90]
xor ecx, ecx
sar eax, 0x10
mov cl, byte [esp + 0x91]
shl ecx, 0x10
xor edx, edx
mov word [esp + 0x98], 0xe01
mov word [esp + 0x9a], 0x200
mov dl, byte [esp + 0x90]
mov dword [esp + 0x78], 0
shl edx, 0x18
mov byte [esp + 0x78], ah
or ecx, edx
xor edx, edx
and ecx, 0xffff0000
mov dl, al
shl edx, 8
mov eax, dword [esp + 0x94]
sar eax, 0x10
or edx, dword [esp + 0x78]
and edx, 0xffff
or ecx, edx
xor edx, edx
mov dl, byte [esp + 0x94]
mov dword [esp + 0x9c], ecx
shl edx, 0x18
xor ecx, ecx
mov cl, byte [esp + 0x95]
mov dword [esp + 0x78], 0
shl ecx, 0x10
mov byte [esp + 0x78], ah
or ecx, edx
xor edx, edx
and ecx, 0xffff0000
mov dl, al
shl edx, 8
push 2
or edx, dword [esp + 0x7c]
lea eax, [esp + 0x1c]
and edx, 0xffff
push eax
or ecx, edx
push 0xffffffffffffffff
mov dword [esp + 0xac], ecx
lea ecx, [esp + 0xa4]
push ecx
call fcn.1000e380
add esp, 0x10
mov dword [ebp + 0x5d84], eax
test eax, eax
jne 0x1000df5c
mov eax, dword [esp + 0x10c]
mov eax, dword [eax + 0x114]
test eax, eax
je 0x1000adfd
cmp dword [eax + 0x14], 0
je 0x1000adfd
mov esi, dword [esp + 0x54]
mov ecx, dword [esp + 0x10c]
mov word [esp + 0x8c], 0x10f
cmp dword [ecx + 0x120], 0x4949
mov word [esp + 0x8e], 2
mov eax, dword [eax + 0x124]
mov dword [esp + 0x90], eax
mov dword [esp + 0x94], esi
jne 0x1000ad22
lea eax, [esp + 0x18]
push 2
lea ecx, [esp + 0x90]
push eax
push 0xffffffffffffffff
push ecx
call fcn.1000e380
add esp, 0x10
mov dword [ebp + 0x5d84], eax
test eax, eax
je 0x1000adfd
pop ebp
pop edi
pop esi
pop ebx
add esp, 0xf8
ret
mov eax, dword [esp + 0x90]
xor ecx, ecx
sar eax, 0x10
mov cl, byte [esp + 0x91]
shl ecx, 0x10
xor edx, edx
mov word [esp + 0x98], 0xf01
mov word [esp + 0x9a], 0x200
mov dl, byte [esp + 0x90]
mov dword [esp + 0x78], 0
shl edx, 0x18
mov byte [esp + 0x78], ah
or ecx, edx
xor edx, edx
and ecx, 0xffff0000
mov dl, al
shl edx, 8
mov eax, dword [esp + 0x94]
sar eax, 0x10
or edx, dword [esp + 0x78]
and edx, 0xffff
or ecx, edx
xor edx, edx
mov dl, byte [esp + 0x94]
mov dword [esp + 0x9c], ecx
shl edx, 0x18
xor ecx, ecx
mov cl, byte [esp + 0x95]
mov dword [esp + 0x78], 0
shl ecx, 0x10
mov byte [esp + 0x78], ah
or ecx, edx
xor edx, edx
and ecx, 0xffff0000
mov dl, al
shl edx, 8
push 2
or edx, dword [esp + 0x7c]
lea eax, [esp + 0x1c]
and edx, 0xffff
push eax
or ecx, edx
push 0xffffffffffffffff
mov dword [esp + 0xac], ecx
lea ecx, [esp + 0xa4]
push ecx
call fcn.1000e380
add esp, 0x10
mov dword [ebp + 0x5d84], eax
test eax, eax
jne 0x1000df5c
mov eax, dword [esp + 0x10c]
mov eax, dword [eax + 0x114]
test eax, eax
je 0x1000af68
cmp dword [eax + 0x18], 0
je 0x1000af68
mov esi, dword [esp + 0x50]
mov ecx, dword [esp + 0x10c]
mov word [esp + 0x8c], 0x110
cmp dword [ecx + 0x120], 0x4949
mov word [esp + 0x8e], 2
mov eax, dword [eax + 0x128]
mov dword [esp + 0x90], eax
mov dword [esp + 0x94], esi
jne 0x1000ae8d
lea eax, [esp + 0x18]
push 2
lea ecx, [esp + 0x90]
push eax
push 0xffffffffffffffff
push ecx
call fcn.1000e380
add esp, 0x10
mov dword [ebp + 0x5d84], eax
test eax, eax
je 0x1000af68
pop ebp
pop edi
pop esi
pop ebx
add esp, 0xf8
ret
mov eax, dword [esp + 0x90]
xor ecx, ecx
sar eax, 0x10
mov cl, byte [esp + 0x91]
shl ecx, 0x10
xor edx, edx
mov word [esp + 0x98], 0x1001
mov word [esp + 0x9a], 0x200
mov dl, byte [esp + 0x90]
mov dword [esp + 0x78], 0
shl edx, 0x18
mov byte [esp + 0x78], ah
or ecx, edx
xor edx, edx
and ecx, 0xffff0000
mov dl, al
shl edx, 8
mov eax, dword [esp + 0x94]
sar eax, 0x10
or edx, dword [esp + 0x78]
and edx, 0xffff
or ecx, edx
xor edx, edx
mov dl, byte [esp + 0x94]
mov dword [esp + 0x9c], ecx
shl edx, 0x18
xor ecx, ecx
mov cl, byte [esp + 0x95]
mov dword [esp + 0x78], 0
shl ecx, 0x10
mov byte [esp + 0x78], ah
or ecx, edx
xor edx, edx
and ecx, 0xffff0000
mov dl, al
shl edx, 8
push 2
or edx, dword [esp + 0x7c]
lea eax, [esp + 0x1c]
and edx, 0xffff
push eax
or ecx, edx
push 0xffffffffffffffff
mov dword [esp + 0xac], ecx
lea ecx, [esp + 0xa4]
push ecx
call fcn.1000e380
add esp, 0x10
mov dword [ebp + 0x5d84], eax
test eax, eax
jne 0x1000df5c
mov eax, dword [esp + 0x10c]
cmp dword [eax + 0x120], 0x4949
jne 0x1000afac
lea eax, [esp + 0x18]
push 2
push eax
lea ecx, [ebp + 0x60c]
push 0xffffffffffffffff
push ecx
call fcn.1000e380
add esp, 0x10
mov dword [ebp + 0x5d84], eax
test eax, eax
je 0x1000b114
pop ebp
pop edi
pop esi
pop ebx
add esp, 0xf8
ret
mov cx, word [ebp + 0x60c]
movzx ax, cl
shl ax, 8
movzx cx, ch
or ax, cx
mov word [esp + 0x98], ax
mov cx, word [ebp + 0x60e]
movzx ax, cl
shl ax, 8
xor edx, edx
movzx cx, ch
or ax, cx
mov dword [esp + 0x78], 0
mov word [esp + 0x9a], ax
mov eax, dword [ebp + 0x610]
mov ecx, eax
mov dl, ah
sar ecx, 0x10
mov byte [esp + 0x78], al
shl edx, 0x10
xor eax, eax
shl dword [esp + 0x78], 0x18
or edx, dword [esp + 0x78]
mov al, cl
shl eax, 8
and edx, 0xffff0000
mov dword [esp + 0x78], 0
mov byte [esp + 0x78], ch
or eax, dword [esp + 0x78]
and eax, 0xffff
or edx, eax
mov dword [esp + 0x9c], edx
cmp word [ebp + 0x60e], 3
jne 0x1000b09b
cmp dword [ebp + 0x610], 2
jg 0x1000b09b
mov eax, dword [ebp + 0x614]
xor edx, edx
mov dword [esp + 0x78], 0
mov ecx, eax
sar ecx, 0x10
mov dl, ch
mov byte [esp + 0x78], cl
shl edx, 0x10
xor ecx, ecx
shl dword [esp + 0x78], 0x18
or edx, dword [esp + 0x78]
mov cl, al
shl ecx, 8
and edx, 0xffff0000
mov dword [esp + 0x78], 0
mov byte [esp + 0x78], ah
or ecx, dword [esp + 0x78]
and ecx, 0xffff
or edx, ecx
jmp 0x1000b0e6
mov eax, dword [ebp + 0x614]
xor edx, edx
mov ecx, eax
mov dl, ah
mov dword [esp + 0x78], 0
sar ecx, 0x10
mov byte [esp + 0x78], al
shl edx, 0x10
xor eax, eax
shl dword [esp + 0x78], 0x18
or edx, dword [esp + 0x78]
mov al, cl
shl eax, 8
and edx, 0xffff0000
mov dword [esp + 0x78], 0
mov byte [esp + 0x78], ch
or eax, dword [esp + 0x78]
and eax, 0xffff
or edx, eax
lea eax, [esp + 0x18]
push 2
lea ecx, [esp + 0x9c]
push eax
mov dword [esp + 0xa8], edx
push 0xffffffffffffffff
push ecx
call fcn.1000e380
add esp, 0x10
mov dword [ebp + 0x5d84], eax
test eax, eax
jne 0x1000df5c
mov eax, dword [esp + 0x10c]
cmp dword [eax + 0x120], 0x4949
jne 0x1000b158
lea eax, [esp + 0x18]
push 2
push eax
lea ecx, [ebp + 0x618]
push 0xffffffffffffffff
push ecx
call fcn.1000e380
add esp, 0x10
mov dword [ebp + 0x5d84], eax
test eax, eax
je 0x1000b2c0
pop ebp
pop edi
pop esi
pop ebx
add esp, 0xf8
ret
mov cx, word [ebp + 0x618]
movzx ax, cl
shl ax, 8
movzx cx, ch
or ax, cx
mov word [esp + 0x98], ax
mov cx, word [ebp + 0x61a]
movzx ax, cl
shl ax, 8
xor edx, edx
movzx cx, ch
or ax, cx
mov dword [esp + 0x78], 0
mov word [esp + 0x9a], ax
mov eax, dword [ebp + 0x61c]
mov ecx, eax
mov dl, ah
sar ecx, 0x10
mov byte [esp + 0x78], al
shl edx, 0x10
xor eax, eax
shl dword [esp + 0x78], 0x18
or edx, dword [esp + 0x78]
mov al, cl
shl eax, 8
and edx, 0xffff0000
mov dword [esp + 0x78], 0
mov byte [esp + 0x78], ch
or eax, dword [esp + 0x78]
and eax, 0xffff
or edx, eax
mov dword [esp + 0x9c], edx
cmp word [ebp + 0x61a], 3
jne 0x1000b247
cmp dword [ebp + 0x61c], 2
jg 0x1000b247
mov eax, dword [ebp + 0x620]
xor edx, edx
mov dword [esp + 0x78], 0
mov ecx, eax
sar ecx, 0x10
mov dl, ch
mov byte [esp + 0x78], cl
shl edx, 0x10
xor ecx, ecx
shl dword [esp + 0x78], 0x18
or edx, dword [esp + 0x78]
mov cl, al
shl ecx, 8
and edx, 0xffff0000
mov dword [esp + 0x78], 0
mov byte [esp + 0x78], ah
or ecx, dword [esp + 0x78]
and ecx, 0xffff
or edx, ecx
jmp 0x1000b292
mov eax, dword [ebp + 0x620]
xor edx, edx
mov ecx, eax
mov dl, ah
mov dword [esp + 0x78], 0
sar ecx, 0x10
mov byte [esp + 0x78], al
shl edx, 0x10
xor eax, eax
shl dword [esp + 0x78], 0x18
or edx, dword [esp + 0x78]
mov al, cl
shl eax, 8
and edx, 0xffff0000
mov dword [esp + 0x78], 0
mov byte [esp + 0x78], ch
or eax, dword [esp + 0x78]
and eax, 0xffff
or edx, eax
lea eax, [esp + 0x18]
push 2
lea ecx, [esp + 0x9c]
push eax
mov dword [esp + 0xa8], edx
push 0xffffffffffffffff
push ecx
call fcn.1000e380
add esp, 0x10
mov dword [ebp + 0x5d84], eax
test eax, eax
jne 0x1000df5c
mov eax, dword [esp + 0x10c]
cmp dword [eax + 0x120], 0x4949
jne 0x1000b304
lea eax, [esp + 0x18]
push 2
push eax
lea ecx, [ebp + 0x624]
push 0xffffffffffffffff
push ecx
call fcn.1000e380
add esp, 0x10
mov dword [ebp + 0x5d84], eax
test eax, eax
je 0x1000b46c
pop ebp
pop edi
pop esi
pop ebx
add esp, 0xf8
ret
mov ax, word [ebp + 0x624]
movzx cx, al
shl cx, 8
movzx ax, ah
or cx, ax
mov word [esp + 0x98], cx
mov cx, word [ebp + 0x626]
movzx ax, cl
shl ax, 8
xor edx, edx
movzx cx, ch
or ax, cx
mov dword [esp + 0x78], 0
mov word [esp + 0x9a], ax
mov eax, dword [ebp + 0x628]
mov ecx, eax
mov dl, ah
sar ecx, 0x10
mov byte [esp + 0x78], al
shl edx, 0x10
xor eax, eax
shl dword [esp + 0x78], 0x18
or edx, dword [esp + 0x78]
mov al, cl
shl eax, 8
and edx, 0xffff0000
mov dword [esp + 0x78], 0
mov byte [esp + 0x78], ch
or eax, dword [esp + 0x78]
and eax, 0xffff
or edx, eax
mov dword [esp + 0x9c], edx
cmp word [ebp + 0x626], 3
jne 0x1000b3f2
cmp dword [ebp + 0x628], 2
jg 0x1000b3f2
mov ecx, dword [ebp + 0x62c]
xor edx, edx
mov dword [esp + 0x78], 0
mov eax, ecx
sar eax, 0x10
mov dl, ah
mov byte [esp + 0x78], al
shl edx, 0x10
xor eax, eax
shl dword [esp + 0x78], 0x18
or edx, dword [esp + 0x78]
mov al, cl
shl eax, 8
and edx, 0xffff0000
mov dword [esp + 0x78], 0
mov byte [esp + 0x78], ch
or eax, dword [esp + 0x78]
and eax, 0xffff
or edx, eax
jmp 0x1000b43e
mov ecx, dword [ebp + 0x62c]
xor edx, edx
mov eax, ecx
mov dl, ch
mov dword [esp + 0x78], 0
sar eax, 0x10
mov byte [esp + 0x78], cl
shl edx, 0x10
xor ecx, ecx
shl dword [esp + 0x78], 0x18
or edx, dword [esp + 0x78]
mov cl, al
shl ecx, 8
and edx, 0xffff0000
mov dword [esp + 0x78], 0
mov byte [esp + 0x78], ah
or ecx, dword [esp + 0x78]
and ecx, 0xffff
or edx, ecx
lea eax, [esp + 0x18]
push 2
lea ecx, [esp + 0x9c]
push eax
mov dword [esp + 0xa8], edx
push 0xffffffffffffffff
push ecx
call fcn.1000e380
add esp, 0x10
mov dword [ebp + 0x5d84], eax
test eax, eax
jne 0x1000df5c
mov eax, dword [esp + 0x10c]
cmp dword [eax + 0x120], 0x4949
jne 0x1000b4b0
lea eax, [esp + 0x18]
push 2
push eax
lea ecx, [ebp + 0x630]
push 0xffffffffffffffff
push ecx
call fcn.1000e380
add esp, 0x10
mov dword [ebp + 0x5d84], eax
test eax, eax
je 0x1000b619
pop ebp
pop edi
pop esi
pop ebx
add esp, 0xf8
ret
mov cx, word [ebp + 0x630]
movzx ax, cl
shl ax, 8
movzx cx, ch
or ax, cx
mov word [esp + 0x98], ax
mov cx, word [ebp + 0x632]
movzx ax, cl
shl ax, 8
xor edx, edx
movzx cx, ch
or ax, cx
mov dword [esp + 0x78], 0
mov word [esp + 0x9a], ax
mov ecx, dword [ebp + 0x634]
mov eax, ecx
mov dl, ch
sar eax, 0x10
mov byte [esp + 0x78], cl
shl edx, 0x10
xor ecx, ecx
shl dword [esp + 0x78], 0x18
or edx, dword [esp + 0x78]
mov cl, al
shl ecx, 8
and edx, 0xffff0000
mov dword [esp + 0x78], 0
mov byte [esp + 0x78], ah
or ecx, dword [esp + 0x78]
and ecx, 0xffff
or edx, ecx
mov dword [esp + 0x9c], edx
cmp word [ebp + 0x632], 3
jne 0x1000b5a0
cmp dword [ebp + 0x634], 2
jg 0x1000b5a0
mov eax, dword [ebp + 0x638]
xor edx, edx
mov dword [esp + 0x78], 0
mov ecx, eax
sar ecx, 0x10
mov dl, ch
mov byte [esp + 0x78], cl
shl edx, 0x10
xor ecx, ecx
shl dword [esp + 0x78], 0x18
or edx, dword [esp + 0x78]
mov cl, al
shl ecx, 8
and edx, 0xffff0000
mov dword [esp + 0x78], 0
mov byte [esp + 0x78], ah
or ecx, dword [esp + 0x78]
and ecx, 0xffff
or edx, ecx
jmp 0x1000b5eb
mov eax, dword [ebp + 0x638]
xor edx, edx
mov ecx, eax
mov dl, ah
mov dword [esp + 0x78], 0
sar ecx, 0x10
mov byte [esp + 0x78], al
shl edx, 0x10
xor eax, eax
shl dword [esp + 0x78], 0x18
or edx, dword [esp + 0x78]
mov al, cl
shl eax, 8
and edx, 0xffff0000
mov dword [esp + 0x78], 0
mov byte [esp + 0x78], ch
or eax, dword [esp + 0x78]
and eax, 0xffff
or edx, eax
lea eax, [esp + 0x18]
push 2
lea ecx, [esp + 0x9c]
push eax
mov dword [esp + 0xa8], edx
push 0xffffffffffffffff
push ecx
call fcn.1000e380
add esp, 0x10
mov dword [ebp + 0x5d84], eax
test eax, eax
jne 0x1000df5c
mov eax, dword [esp + 0x10c]
cmp dword [eax + 0x120], 0x4949
jne 0x1000b65d
lea eax, [esp + 0x18]
push 2
push eax
lea ecx, [ebp + 0x63c]
push 0xffffffffffffffff
push ecx
call fcn.1000e380
add esp, 0x10
mov dword [ebp + 0x5d84], eax
test eax, eax
je 0x1000b7be
pop ebp
pop edi
pop esi
pop ebx
add esp, 0xf8
ret
mov cx, word [ebp + 0x63c]
movzx ax, cl
shl ax, 8
movzx cx, ch
or ax, cx
mov word [esp + 0x98], ax
mov cx, word [ebp + 0x63e]
movzx ax, cl
shl ax, 8
xor edx, edx
movzx cx, ch
or ax, cx
mov dword [esp + 0x78], 0
mov word [esp + 0x9a], ax
mov eax, dword [ebp + 0x640]
mov ecx, eax
mov dl, ah
sar ecx, 0x10
mov byte [esp + 0x78], al
shl edx, 0x10
xor eax, eax
shl dword [esp + 0x78], 0x18
or edx, dword [esp + 0x78]
mov al, cl
shl eax, 8
and edx, 0xffff0000
mov dword [esp + 0x78], 0
mov byte [esp + 0x78], ch
or eax, dword [esp + 0x78]
and eax, 0xffff
or edx, eax
mov dword [esp + 0x9c], edx
cmp word [ebp + 0x63e], 3
jne 0x1000b744
cmp dword [ebp + 0x640], 2
jg 0x1000b744
mov eax, dword [ebp + 0x644]
xor edx, edx
mov dword [esp + 0x78], 0
mov ecx, eax
sar ecx, 0x10
mov dl, ch
mov byte [esp + 0x78], cl
shl edx, 0x10
xor ecx, ecx
shl dword [esp + 0x78], 0x18
or edx, dword [esp + 0x78]
mov cl, al
shl ecx, 8
and edx, 0xffff0000
mov dword [esp + 0x78], 0
mov byte [esp + 0x78], ah
or ecx, dword [esp + 0x78]
jmp 0x1000b788
mov ecx, dword [ebp + 0x644]
xor edx, edx
mov eax, ecx
mov dl, ch
mov dword [esp + 0x78], 0
sar eax, 0x10
mov byte [esp + 0x78], cl
shl edx, 0x10
xor ecx, ecx
shl dword [esp + 0x78], 0x18
or edx, dword [esp + 0x78]
mov cl, al
shl ecx, 8
and edx, 0xffff0000
mov dword [esp + 0x78], 0
mov byte [esp + 0x78], ah
or ecx, dword [esp + 0x78]
and ecx, 0xffff
push 2
or edx, ecx
lea eax, [esp + 0x1c]
lea ecx, [esp + 0x9c]
push eax
mov dword [esp + 0xa8], edx
push 0xffffffffffffffff
push ecx
call fcn.1000e380
add esp, 0x10
mov dword [ebp + 0x5d84], eax
test eax, eax
jne 0x1000df5c
mov eax, dword [esp + 0x10c]
mov eax, dword [eax + 0x114]
test eax, eax
je 0x1000b929
cmp dword [eax + 0x20], 0
je 0x1000b929
mov esi, dword [esp + 0x4c]
mov ecx, dword [esp + 0x10c]
mov word [esp + 0x8c], 0x11d
cmp dword [ecx + 0x120], 0x4949
mov word [esp + 0x8e], 2
mov eax, dword [eax + 0x130]
mov dword [esp + 0x90], eax
mov dword [esp + 0x94], esi
jne 0x1000b84e
lea eax, [esp + 0x18]
push 2
lea ecx, [esp + 0x90]
push eax
push 0xffffffffffffffff
push ecx
call fcn.1000e380
add esp, 0x10
mov dword [ebp + 0x5d84], eax
test eax, eax
je 0x1000b929
pop ebp
pop edi
pop esi
pop ebx
add esp, 0xf8
ret
mov eax, dword [esp + 0x90]
xor ecx, ecx
sar eax, 0x10
mov cl, byte [esp + 0x91]
shl ecx, 0x10
xor edx, edx
mov word [esp + 0x98], 0x1d01
mov word [esp + 0x9a], 0x200
mov dl, byte [esp + 0x90]
mov dword [esp + 0x78], 0
shl edx, 0x18
mov byte [esp + 0x78], ah
or ecx, edx
xor edx, edx
and ecx, 0xffff0000
mov dl, al
shl edx, 8
mov eax, dword [esp + 0x94]
sar eax, 0x10
or edx, dword [esp + 0x78]
and edx, 0xffff
or ecx, edx
xor edx, edx
mov dl, byte [esp + 0x95]
mov dword [esp + 0x9c], ecx
shl edx, 0x10
xor ecx, ecx
mov cl, byte [esp + 0x94]
mov dword [esp + 0x78], 0
shl ecx, 0x18
mov byte [esp + 0x78], ah
or edx, ecx
xor ecx, ecx
and edx, 0xffff0000
mov cl, al
shl ecx, 8
push 2
or ecx, dword [esp + 0x7c]
lea eax, [esp + 0x1c]
and ecx, 0xffff
push eax
or edx, ecx
push 0xffffffffffffffff
lea ecx, [esp + 0xa4]
mov dword [esp + 0xac], edx
push ecx
call fcn.1000e380
add esp, 0x10
mov dword [ebp + 0x5d84], eax
test eax, eax
jne 0x1000df5c
mov eax, dword [esp + 0x10c]
cmp dword [eax + 0x120], 0x4949
jne 0x1000b96d
lea eax, [esp + 0x18]
push 2
push eax
lea ecx, [ebp + 0x648]
push 0xffffffffffffffff
push ecx
call fcn.1000e380
add esp, 0x10
mov dword [ebp + 0x5d84], eax
test eax, eax
je 0x1000bacd
pop ebp
pop edi
pop esi
pop ebx
add esp, 0xf8
ret
mov cx, word [ebp + 0x648]
movzx ax, cl
shl ax, 8
movzx cx, ch
or ax, cx
mov word [esp + 0x98], ax
mov cx, word [ebp + 0x64a]
movzx ax, cl
shl ax, 8
xor edx, edx
movzx cx, ch
or ax, cx
mov dword [esp + 0x78], 0
mov word [esp + 0x9a], ax
mov eax, dword [ebp + 0x64c]
mov ecx, eax
mov dl, ah
sar ecx, 0x10
mov byte [esp + 0x78], al
shl edx, 0x10
xor eax, eax
shl dword [esp + 0x78], 0x18
or edx, dword [esp + 0x78]
mov al, cl
shl eax, 8
and edx, 0xffff0000
mov dword [esp + 0x78], 0
mov byte [esp + 0x78], ch
or eax, dword [esp + 0x78]
and eax, 0xffff
or edx, eax
mov dword [esp + 0x9c], edx
cmp word [ebp + 0x64a], 3
jne 0x1000ba54
cmp dword [ebp + 0x64c], 2
jg 0x1000ba54
mov ecx, dword [ebp + 0x650]
xor edx, edx
mov dword [esp + 0x78], 0
mov eax, ecx
sar eax, 0x10
mov dl, ah
mov byte [esp + 0x78], al
shl edx, 0x10
xor eax, eax
shl dword [esp + 0x78], 0x18
or edx, dword [esp + 0x78]
mov al, cl
shl eax, 8
and edx, 0xffff0000
mov dword [esp + 0x78], 0
mov byte [esp + 0x78], ch
or eax, dword [esp + 0x78]
jmp 0x1000ba98
mov eax, dword [ebp + 0x650]
xor edx, edx
mov ecx, eax
mov dl, ah
mov dword [esp + 0x78], 0
sar ecx, 0x10
mov byte [esp + 0x78], al
shl edx, 0x10
xor eax, eax
shl dword [esp + 0x78], 0x18
or edx, dword [esp + 0x78]
mov al, cl
shl eax, 8
and edx, 0xffff0000
mov dword [esp + 0x78], 0
mov byte [esp + 0x78], ch
or eax, dword [esp + 0x78]
and eax, 0xffff
push 2
or edx, eax
lea ecx, [esp + 0x9c]
lea eax, [esp + 0x1c]
mov dword [esp + 0xa4], edx
push eax
push 0xffffffffffffffff
push ecx
call fcn.1000e380
add esp, 0x10
mov dword [ebp + 0x5d84], eax
test eax, eax
jne 0x1000df5c
mov eax, dword [esp + 0x10c]
mov eax, dword [eax + 0x114]
test eax, eax
je 0x1000bc38
cmp dword [eax + 0x24], 0
je 0x1000bc38
mov esi, dword [esp + 0x48]
mov ecx, dword [esp + 0x10c]
mov word [esp + 0x8c], 0x131
cmp dword [ecx + 0x120], 0x4949
mov word [esp + 0x8e], 2
mov eax, dword [eax + 0x134]
mov dword [esp + 0x90], eax
mov dword [esp + 0x94], esi
jne 0x1000bb5d
lea eax, [esp + 0x18]
push 2
lea ecx, [esp + 0x90]
push eax
push 0xffffffffffffffff
push ecx
call fcn.1000e380
add esp, 0x10
mov dword [ebp + 0x5d84], eax
test eax, eax
je 0x1000bc38
pop ebp
pop edi
pop esi
pop ebx
add esp, 0xf8
ret
mov eax, dword [esp + 0x90]
xor edx, edx
sar eax, 0x10
mov dl, byte [esp + 0x91]
shl edx, 0x10
xor ecx, ecx
mov word [esp + 0x98], 0x3101
mov word [esp + 0x9a], 0x200
mov cl, byte [esp + 0x90]
mov dword [esp + 0x78], 0
shl ecx, 0x18
mov byte [esp + 0x78], ah
or edx, ecx
xor ecx, ecx
and edx, 0xffff0000
mov cl, al
shl ecx, 8
mov eax, dword [esp + 0x94]
sar eax, 0x10
or ecx, dword [esp + 0x78]
and ecx, 0xffff
or edx, ecx
xor ecx, ecx
mov cl, byte [esp + 0x95]
mov dword [esp + 0x9c], edx
shl ecx, 0x10
xor edx, edx
mov dl, byte [esp + 0x94]
mov dword [esp + 0x78], 0
shl edx, 0x18
mov byte [esp + 0x78], ah
or ecx, edx
xor edx, edx
and ecx, 0xffff0000
mov dl, al
shl edx, 8
push 2
or edx, dword [esp + 0x7c]
lea eax, [esp + 0x1c]
and edx, 0xffff
push eax
or ecx, edx
push 0xffffffffffffffff
mov dword [esp + 0xac], ecx
lea ecx, [esp + 0xa4]
push ecx
call fcn.1000e380
add esp, 0x10
mov dword [ebp + 0x5d84], eax
test eax, eax
jne 0x1000df5c
mov eax, dword [esp + 0x10c]
mov eax, dword [eax + 0x114]
test eax, eax
je 0x1000bda3
cmp dword [eax + 8], 0
je 0x1000bda3
mov esi, dword [esp + 0x44]
mov ecx, dword [esp + 0x10c]
mov word [esp + 0x8c], 0x132
cmp dword [ecx + 0x120], 0x4949
mov word [esp + 0x8e], 2
mov eax, dword [eax + 0x118]
mov dword [esp + 0x90], eax
mov dword [esp + 0x94], esi
jne 0x1000bcc8
lea eax, [esp + 0x18]
push 2
lea ecx, [esp + 0x90]
push eax
push 0xffffffffffffffff
push ecx
call fcn.1000e380
add esp, 0x10
mov dword [ebp + 0x5d84], eax
test eax, eax
je 0x1000bda3
pop ebp
pop edi
pop esi
pop ebx
add esp, 0xf8
ret
mov eax, dword [esp + 0x90]
xor ecx, ecx
sar eax, 0x10
mov cl, byte [esp + 0x91]
shl ecx, 0x10
xor edx, edx
mov word [esp + 0x98], 0x3201
mov word [esp + 0x9a], 0x200
mov dl, byte [esp + 0x90]
mov dword [esp + 0x78], 0
shl edx, 0x18
mov byte [esp + 0x78], ah
or ecx, edx
xor edx, edx
and ecx, 0xffff0000
mov dl, al
shl edx, 8
mov eax, dword [esp + 0x94]
sar eax, 0x10
or edx, dword [esp + 0x78]
and edx, 0xffff
or ecx, edx
xor edx, edx
mov dl, byte [esp + 0x94]
mov dword [esp + 0x9c], ecx
shl edx, 0x18
xor ecx, ecx
mov cl, byte [esp + 0x95]
mov dword [esp + 0x78], 0
shl ecx, 0x10
mov byte [esp + 0x78], ah
or ecx, edx
xor edx, edx
and ecx, 0xffff0000
mov dl, al
shl edx, 8
push 2
or edx, dword [esp + 0x7c]
lea eax, [esp + 0x1c]
and edx, 0xffff
push eax
or ecx, edx
push 0xffffffffffffffff
mov dword [esp + 0xac], ecx
lea ecx, [esp + 0xa4]
push ecx
call fcn.1000e380
add esp, 0x10
mov dword [ebp + 0x5d84], eax
test eax, eax
jne 0x1000df5c
mov eax, dword [esp + 0x10c]
mov eax, dword [eax + 0x114]
test eax, eax
je 0x1000bf0d
cmp dword [eax], 0
je 0x1000bf0d
mov esi, dword [esp + 0x40]
mov ecx, dword [esp + 0x10c]
mov word [esp + 0x8c], 0x13b
cmp dword [ecx + 0x120], 0x4949
mov word [esp + 0x8e], 2
mov eax, dword [eax + 0x110]
mov dword [esp + 0x90], eax
mov dword [esp + 0x94], esi
jne 0x1000be32
lea eax, [esp + 0x18]
push 2
lea ecx, [esp + 0x90]
push eax
push 0xffffffffffffffff
push ecx
call fcn.1000e380
add esp, 0x10
mov dword [ebp + 0x5d84], eax
test eax, eax
je 0x1000bf0d
pop ebp
pop edi
pop esi
pop ebx
add esp, 0xf8
ret
mov eax, dword [esp + 0x90]
xor ecx, ecx
sar eax, 0x10
mov cl, byte [esp + 0x91]
shl ecx, 0x10
xor edx, edx
mov word [esp + 0x98], 0x3b01
mov word [esp + 0x9a], 0x200
mov dl, byte [esp + 0x90]
mov dword [esp + 0x78], 0
shl edx, 0x18
mov byte [esp + 0x78], ah
or ecx, edx
xor edx, edx
and ecx, 0xffff0000
mov dl, al
shl edx, 8
mov eax, dword [esp + 0x94]
sar eax, 0x10
or edx, dword [esp + 0x78]
and edx, 0xffff
or ecx, edx
xor edx, edx
mov dl, byte [esp + 0x95]
mov dword [esp + 0x9c], ecx
shl edx, 0x10
xor ecx, ecx
mov cl, byte [esp + 0x94]
mov dword [esp + 0x78], 0
shl ecx, 0x18
mov byte [esp + 0x78], ah
or edx, ecx
xor ecx, ecx
and edx, 0xffff0000
mov cl, al
shl ecx, 8
push 2
or ecx, dword [esp + 0x7c]
lea eax, [esp + 0x1c]
and ecx, 0xffff
push eax
or edx, ecx
push 0xffffffffffffffff
lea ecx, [esp + 0xa4]
mov dword [esp + 0xac], edx
push ecx
call fcn.1000e380
add esp, 0x10
mov dword [ebp + 0x5d84], eax
test eax, eax
jne 0x1000df5c
mov eax, dword [esp + 0x10c]
mov eax, dword [eax + 0x114]
test eax, eax
je 0x1000c078
cmp dword [eax + 0x10], 0
je 0x1000c078
mov esi, dword [esp + 0x3c]
mov ecx, dword [esp + 0x10c]
mov word [esp + 0x8c], 0x13c
cmp dword [ecx + 0x120], 0x4949
mov word [esp + 0x8e], 2
mov eax, dword [eax + 0x120]
mov dword [esp + 0x90], eax
mov dword [esp + 0x94], esi
jne 0x1000bf9d
lea eax, [esp + 0x18]
push 2
lea ecx, [esp + 0x90]
push eax
push 0xffffffffffffffff
push ecx
call fcn.1000e380
add esp, 0x10
mov dword [ebp + 0x5d84], eax
test eax, eax
je 0x1000c078
pop ebp
pop edi
pop esi
pop ebx
add esp, 0xf8
ret
mov eax, dword [esp + 0x90]
xor edx, edx
sar eax, 0x10
mov dl, byte [esp + 0x91]
shl edx, 0x10
xor ecx, ecx
mov word [esp + 0x98], 0x3c01
mov word [esp + 0x9a], 0x200
mov cl, byte [esp + 0x90]
mov dword [esp + 0x78], 0
shl ecx, 0x18
mov byte [esp + 0x78], ah
or edx, ecx
xor ecx, ecx
and edx, 0xffff0000
mov cl, al
shl ecx, 8
mov eax, dword [esp + 0x94]
sar eax, 0x10
or ecx, dword [esp + 0x78]
and ecx, 0xffff
or edx, ecx
xor ecx, ecx
mov cl, byte [esp + 0x95]
mov dword [esp + 0x9c], edx
shl ecx, 0x10
xor edx, edx
mov dl, byte [esp + 0x94]
mov dword [esp + 0x78], 0
shl edx, 0x18
mov byte [esp + 0x78], ah
or ecx, edx
xor edx, edx
and ecx, 0xffff0000
mov dl, al
shl edx, 8
push 2
or edx, dword [esp + 0x7c]
lea eax, [esp + 0x1c]
and edx, 0xffff
push eax
or ecx, edx
push 0xffffffffffffffff
mov dword [esp + 0xac], ecx
lea ecx, [esp + 0xa4]
push ecx
call fcn.1000e380
add esp, 0x10
mov dword [ebp + 0x5d84], eax
test eax, eax
jne 0x1000df5c
mov eax, dword [esp + 0x10c]
cmp dword [eax + 0x120], 0x4949
jne 0x1000c0bc
lea eax, [esp + 0x18]
push 2
push eax
lea ecx, [ebp + 0x654]
push 0xffffffffffffffff
push ecx
call fcn.1000e380
add esp, 0x10
mov dword [ebp + 0x5d84], eax
test eax, eax
je 0x1000c21d
pop ebp
pop edi
pop esi
pop ebx
add esp, 0xf8
ret
mov ax, word [ebp + 0x654]
movzx cx, al
shl cx, 8
movzx ax, ah
or cx, ax
mov word [esp + 0x98], cx
mov cx, word [ebp + 0x656]
movzx ax, cl
shl ax, 8
xor edx, edx
movzx cx, ch
or ax, cx
mov dword [esp + 0x78], 0
mov word [esp + 0x9a], ax
mov eax, dword [ebp + 0x658]
mov ecx, eax
mov dl, ah
sar ecx, 0x10
mov byte [esp + 0x78], al
shl edx, 0x10
xor eax, eax
shl dword [esp + 0x78], 0x18
or edx, dword [esp + 0x78]
mov al, cl
shl eax, 8
and edx, 0xffff0000
mov dword [esp + 0x78], 0
mov byte [esp + 0x78], ch
or eax, dword [esp + 0x78]
and eax, 0xffff
or edx, eax
mov dword [esp + 0x9c], edx
cmp word [ebp + 0x656], 3
jne 0x1000c1a3
cmp dword [ebp + 0x658], 2
jg 0x1000c1a3
mov eax, dword [ebp + 0x65c]
xor edx, edx
mov dword [esp + 0x78], 0
mov ecx, eax
sar ecx, 0x10
mov dl, ch
mov byte [esp + 0x78], cl
shl edx, 0x10
xor ecx, ecx
shl dword [esp + 0x78], 0x18
or edx, dword [esp + 0x78]
mov cl, al
shl ecx, 8
and edx, 0xffff0000
mov dword [esp + 0x78], 0
mov byte [esp + 0x78], ah
or ecx, dword [esp + 0x78]
jmp 0x1000c1e7
mov ecx, dword [ebp + 0x65c]
xor edx, edx
mov eax, ecx
mov dl, ch
mov dword [esp + 0x78], 0
sar eax, 0x10
mov byte [esp + 0x78], cl
shl edx, 0x10
xor ecx, ecx
shl dword [esp + 0x78], 0x18
or edx, dword [esp + 0x78]
mov cl, al
shl ecx, 8
and edx, 0xffff0000
mov dword [esp + 0x78], 0
mov byte [esp + 0x78], ah
or ecx, dword [esp + 0x78]
and ecx, 0xffff
push 2
or edx, ecx
lea eax, [esp + 0x1c]
lea ecx, [esp + 0x9c]
push eax
mov dword [esp + 0xa8], edx
push 0xffffffffffffffff
push ecx
call fcn.1000e380
add esp, 0x10
mov dword [ebp + 0x5d84], eax
test eax, eax
jne 0x1000df5c
mov eax, dword [esp + 0x10c]
cmp dword [eax + 0x120], 0x4949
jne 0x1000c261
lea eax, [esp + 0x18]
push 2
push eax
lea ecx, [ebp + 0x660]
push 0xffffffffffffffff
push ecx
call fcn.1000e380
add esp, 0x10
mov dword [ebp + 0x5d84], eax
test eax, eax
je 0x1000c3c9
pop ebp
pop edi
pop esi
pop ebx
add esp, 0xf8
ret
mov cx, word [ebp + 0x660]
movzx ax, cl
shl ax, 8
movzx cx, ch
or ax, cx
mov word [esp + 0x98], ax
mov cx, word [ebp + 0x662]
movzx ax, cl
shl ax, 8
xor edx, edx
movzx cx, ch
or ax, cx
mov dword [esp + 0x78], 0
mov word [esp + 0x9a], ax
mov eax, dword [ebp + 0x664]
mov ecx, eax
mov dl, ah
sar ecx, 0x10
mov byte [esp + 0x78], al
shl edx, 0x10
xor eax, eax
shl dword [esp + 0x78], 0x18
or edx, dword [esp + 0x78]
mov al, cl
shl eax, 8
and edx, 0xffff0000
mov dword [esp + 0x78], 0
mov byte [esp + 0x78], ch
or eax, dword [esp + 0x78]
and eax, 0xffff
or edx, eax
mov dword [esp + 0x9c], edx
cmp word [ebp + 0x662], 3
jne 0x1000c350
cmp dword [ebp + 0x664], 2
jg 0x1000c350
mov eax, dword [ebp + 0x668]
xor edx, edx
mov dword [esp + 0x78], 0
mov ecx, eax
sar ecx, 0x10
mov dl, ch
mov byte [esp + 0x78], cl
shl edx, 0x10
xor ecx, ecx
shl dword [esp + 0x78], 0x18
or edx, dword [esp + 0x78]
mov cl, al
shl ecx, 8
and edx, 0xffff0000
mov dword [esp + 0x78], 0
mov byte [esp + 0x78], ah
or ecx, dword [esp + 0x78]
and ecx, 0xffff
or edx, ecx
jmp 0x1000c39b
mov eax, dword [ebp + 0x668]
xor edx, edx
mov ecx, eax
mov dl, ah
mov dword [esp + 0x78], 0
sar ecx, 0x10
mov byte [esp + 0x78], al
shl edx, 0x10
xor eax, eax
shl dword [esp + 0x78], 0x18
or edx, dword [esp + 0x78]
mov al, cl
shl eax, 8
and edx, 0xffff0000
mov dword [esp + 0x78], 0
mov byte [esp + 0x78], ch
or eax, dword [esp + 0x78]
and eax, 0xffff
or edx, eax
lea eax, [esp + 0x18]
push 2
lea ecx, [esp + 0x9c]
push eax
mov dword [esp + 0xa8], edx
push 0xffffffffffffffff
push ecx
call fcn.1000e380
add esp, 0x10
mov dword [ebp + 0x5d84], eax
test eax, eax
jne 0x1000df5c
mov eax, dword [esp + 0x10c]
cmp dword [eax + 0x120], 0x4949
jne 0x1000c40d
lea eax, [esp + 0x18]
push 2
push eax
lea ecx, [ebp + 0x66c]
push 0xffffffffffffffff
push ecx
call fcn.1000e380
add esp, 0x10
mov dword [ebp + 0x5d84], eax
test eax, eax
je 0x1000c576
pop ebp
pop edi
pop esi
pop ebx
add esp, 0xf8
ret
mov cx, word [ebp + 0x66c]
movzx ax, cl
shl ax, 8
movzx cx, ch
or ax, cx
mov word [esp + 0x98], ax
mov cx, word [ebp + 0x66e]
movzx ax, cl
shl ax, 8
xor edx, edx
movzx cx, ch
or ax, cx
mov dword [esp + 0x78], 0
mov word [esp + 0x9a], ax
mov ecx, dword [ebp + 0x670]
mov eax, ecx
mov dl, ch
sar eax, 0x10
mov byte [esp + 0x78], cl
shl edx, 0x10
xor ecx, ecx
shl dword [esp + 0x78], 0x18
or edx, dword [esp + 0x78]
mov cl, al
shl ecx, 8
and edx, 0xffff0000
mov dword [esp + 0x78], 0
mov byte [esp + 0x78], ah
or ecx, dword [esp + 0x78]
and ecx, 0xffff
or edx, ecx
mov dword [esp + 0x9c], edx
cmp word [ebp + 0x66e], 3
jne 0x1000c4fd
cmp dword [ebp + 0x670], 2
jg 0x1000c4fd
mov eax, dword [ebp + 0x674]
xor edx, edx
mov dword [esp + 0x78], 0
mov ecx, eax
sar ecx, 0x10
mov dl, ch
mov byte [esp + 0x78], cl
shl edx, 0x10
xor ecx, ecx
shl dword [esp + 0x78], 0x18
or edx, dword [esp + 0x78]
mov cl, al
shl ecx, 8
and edx, 0xffff0000
mov dword [esp + 0x78], 0
mov byte [esp + 0x78], ah
or ecx, dword [esp + 0x78]
and ecx, 0xffff
or edx, ecx
jmp 0x1000c548
mov eax, dword [ebp + 0x674]
xor edx, edx
mov ecx, eax
mov dl, ah
mov dword [esp + 0x78], 0
sar ecx, 0x10
mov byte [esp + 0x78], al
shl edx, 0x10
xor eax, eax
shl dword [esp + 0x78], 0x18
or edx, dword [esp + 0x78]
mov al, cl
shl eax, 8
and edx, 0xffff0000
mov dword [esp + 0x78], 0
mov byte [esp + 0x78], ch
or eax, dword [esp + 0x78]
and eax, 0xffff
or edx, eax
lea eax, [esp + 0x18]
push 2
lea ecx, [esp + 0x9c]
push eax
mov dword [esp + 0xa8], edx
push 0xffffffffffffffff
push ecx
call fcn.1000e380
add esp, 0x10
mov dword [ebp + 0x5d84], eax
test eax, eax
jne 0x1000df5c
mov eax, dword [esp + 0x10c]
cmp dword [eax + 0x120], 0x4949
jne 0x1000c5ba
lea eax, [esp + 0x18]
push 2
push eax
lea ecx, [ebp + 0x678]
push 0xffffffffffffffff
push ecx
call fcn.1000e380
add esp, 0x10
mov dword [ebp + 0x5d84], eax
test eax, eax
je 0x1000c71a
pop ebp
pop edi
pop esi
pop ebx
add esp, 0xf8
ret
mov cx, word [ebp + 0x678]
movzx ax, cl
shl ax, 8
movzx cx, ch
or ax, cx
mov word [esp + 0x98], ax
mov cx, word [ebp + 0x67a]
movzx ax, cl
shl ax, 8
xor edx, edx
movzx cx, ch
or ax, cx
mov dword [esp + 0x78], 0
mov word [esp + 0x9a], ax
mov eax, dword [ebp + 0x67c]
mov ecx, eax
mov dl, ah
sar ecx, 0x10
mov byte [esp + 0x78], al
shl edx, 0x10
xor eax, eax
shl dword [esp + 0x78], 0x18
or edx, dword [esp + 0x78]
mov al, cl
shl eax, 8
and edx, 0xffff0000
mov dword [esp + 0x78], 0
mov byte [esp + 0x78], ch
or eax, dword [esp + 0x78]
and eax, 0xffff
or edx, eax
mov dword [esp + 0x9c], edx
cmp word [ebp + 0x67a], 3
jne 0x1000c6a1
cmp dword [ebp + 0x67c], 2
jg 0x1000c6a1
mov ecx, dword [ebp + 0x680]
xor edx, edx
mov dword [esp + 0x78], 0
mov eax, ecx
sar eax, 0x10
mov dl, ah
mov byte [esp + 0x78], al
shl edx, 0x10
xor eax, eax
shl dword [esp + 0x78], 0x18
or edx, dword [esp + 0x78]
mov al, cl
shl eax, 8
and edx, 0xffff0000
mov dword [esp + 0x78], 0
mov byte [esp + 0x78], ch
or eax, dword [esp + 0x78]
jmp 0x1000c6e5
mov eax, dword [ebp + 0x680]
xor edx, edx
mov ecx, eax
mov dl, ah
mov dword [esp + 0x78], 0
sar ecx, 0x10
mov byte [esp + 0x78], al
shl edx, 0x10
xor eax, eax
shl dword [esp + 0x78], 0x18
or edx, dword [esp + 0x78]
mov al, cl
shl eax, 8
and edx, 0xffff0000
mov dword [esp + 0x78], 0
mov byte [esp + 0x78], ch
or eax, dword [esp + 0x78]
and eax, 0xffff
push 2
or edx, eax
lea ecx, [esp + 0x9c]
lea eax, [esp + 0x1c]
mov dword [esp + 0xa4], edx
push eax
push 0xffffffffffffffff
push ecx
call fcn.1000e380
add esp, 0x10
mov dword [ebp + 0x5d84], eax
test eax, eax
jne 0x1000df5c
mov eax, dword [esp + 0x10c]
cmp dword [eax + 0x120], 0x4949
jne 0x1000c75e
lea eax, [esp + 0x18]
push 2
push eax
lea ecx, [ebp + 0x684]
push 0xffffffffffffffff
push ecx
call fcn.1000e380
add esp, 0x10
mov dword [ebp + 0x5d84], eax
test eax, eax
je 0x1000c8c7
pop ebp
pop edi
pop esi
pop ebx
add esp, 0xf8
ret
mov cx, word [ebp + 0x684]
movzx ax, cl
shl ax, 8
movzx cx, ch
or ax, cx
mov word [esp + 0x98], ax
mov cx, word [ebp + 0x686]
movzx ax, cl
shl ax, 8
xor edx, edx
movzx cx, ch
or ax, cx
mov dword [esp + 0x78], 0
mov word [esp + 0x9a], ax
mov ecx, dword [ebp + 0x688]
mov eax, ecx
mov dl, ch
sar eax, 0x10
mov byte [esp + 0x78], cl
shl edx, 0x10
xor ecx, ecx
shl dword [esp + 0x78], 0x18
or edx, dword [esp + 0x78]
mov cl, al
shl ecx, 8
and edx, 0xffff0000
mov dword [esp + 0x78], 0
mov byte [esp + 0x78], ah
or ecx, dword [esp + 0x78]
and ecx, 0xffff
or edx, ecx
mov dword [esp + 0x9c], edx
cmp word [ebp + 0x686], 3
jne 0x1000c84e
cmp dword [ebp + 0x688], 2
jg 0x1000c84e
mov eax, dword [ebp + 0x68c]
xor edx, edx
mov dword [esp + 0x78], 0
mov ecx, eax
sar ecx, 0x10
mov dl, ch
mov byte [esp + 0x78], cl
shl edx, 0x10
xor ecx, ecx
shl dword [esp + 0x78], 0x18
or edx, dword [esp + 0x78]
mov cl, al
shl ecx, 8
and edx, 0xffff0000
mov dword [esp + 0x78], 0
mov byte [esp + 0x78], ah
or ecx, dword [esp + 0x78]
and ecx, 0xffff
or edx, ecx
jmp 0x1000c899
mov eax, dword [ebp + 0x68c]
xor edx, edx
mov ecx, eax
mov dl, ah
mov dword [esp + 0x78], 0
sar ecx, 0x10
mov byte [esp + 0x78], al
shl edx, 0x10
xor eax, eax
shl dword [esp + 0x78], 0x18
or edx, dword [esp + 0x78]
mov al, cl
shl eax, 8
and edx, 0xffff0000
mov dword [esp + 0x78], 0
mov byte [esp + 0x78], ch
or eax, dword [esp + 0x78]
and eax, 0xffff
or edx, eax
lea eax, [esp + 0x18]
push 2
lea ecx, [esp + 0x9c]
push eax
mov dword [esp + 0xa8], edx
push 0xffffffffffffffff
push ecx
call fcn.1000e380
add esp, 0x10
mov dword [ebp + 0x5d84], eax
test eax, eax
jne 0x1000df5c
mov eax, dword [esp + 0x10c]
cmp dword [eax + 0x120], 0x4949
jne 0x1000c90b
lea eax, [esp + 0x18]
push 2
push eax
lea ecx, [ebp + 0x690]
push 0xffffffffffffffff
push ecx
call fcn.1000e380
add esp, 0x10
mov dword [ebp + 0x5d84], eax
test eax, eax
je 0x1000ca73
pop ebp
pop edi
pop esi
pop ebx
add esp, 0xf8
ret
mov cx, word [ebp + 0x690]
movzx ax, cl
shl ax, 8
movzx cx, ch
or ax, cx
mov word [esp + 0x98], ax
mov cx, word [ebp + 0x692]
movzx ax, cl
shl ax, 8
xor edx, edx
movzx cx, ch
or ax, cx
mov dword [esp + 0x78], 0
mov word [esp + 0x9a], ax
mov eax, dword [ebp + 0x694]
mov ecx, eax
mov dl, ah
sar ecx, 0x10
mov byte [esp + 0x78], al
shl edx, 0x10
xor eax, eax
shl dword [esp + 0x78], 0x18
or edx, dword [esp + 0x78]
mov al, cl
shl eax, 8
and edx, 0xffff0000
mov dword [esp + 0x78], 0
mov byte [esp + 0x78], ch
or eax, dword [esp + 0x78]
and eax, 0xffff
or edx, eax
mov dword [esp + 0x9c], edx
cmp word [ebp + 0x692], 3
jne 0x1000c9fa
cmp dword [ebp + 0x694], 2
jg 0x1000c9fa
mov eax, dword [ebp + 0x698]
xor edx, edx
mov dword [esp + 0x78], 0
mov ecx, eax
sar ecx, 0x10
mov dl, ch
mov byte [esp + 0x78], cl
shl edx, 0x10
xor ecx, ecx
shl dword [esp + 0x78], 0x18
or edx, dword [esp + 0x78]
mov cl, al
shl ecx, 8
and edx, 0xffff0000
mov dword [esp + 0x78], 0
mov byte [esp + 0x78], ah
or ecx, dword [esp + 0x78]
and ecx, 0xffff
or edx, ecx
jmp 0x1000ca45
mov eax, dword [ebp + 0x698]
xor edx, edx
mov ecx, eax
mov dl, ah
mov dword [esp + 0x78], 0
sar ecx, 0x10
mov byte [esp + 0x78], al
shl edx, 0x10
xor eax, eax
shl dword [esp + 0x78], 0x18
or edx, dword [esp + 0x78]
mov al, cl
shl eax, 8
and edx, 0xffff0000
mov dword [esp + 0x78], 0
mov byte [esp + 0x78], ch
or eax, dword [esp + 0x78]
and eax, 0xffff
or edx, eax
lea eax, [esp + 0x18]
push 2
lea ecx, [esp + 0x9c]
push eax
mov dword [esp + 0xa8], edx
push 0xffffffffffffffff
push ecx
call fcn.1000e380
add esp, 0x10
mov dword [ebp + 0x5d84], eax
test eax, eax
jne 0x1000df5c
mov eax, dword [esp + 0x10c]
cmp dword [eax + 0x120], 0x4949
jne 0x1000cab7
lea eax, [esp + 0x18]
push 2
push eax
lea ecx, [ebp + 0x69c]
push 0xffffffffffffffff
push ecx
call fcn.1000e380
add esp, 0x10
mov dword [ebp + 0x5d84], eax
test eax, eax
je 0x1000cc20
pop ebp
pop edi
pop esi
pop ebx
add esp, 0xf8
ret
mov cx, word [ebp + 0x69c]
movzx ax, cl
shl ax, 8
movzx cx, ch
or ax, cx
mov word [esp + 0x98], ax
mov cx, word [ebp + 0x69e]
movzx ax, cl
shl ax, 8
xor edx, edx
movzx cx, ch
or ax, cx
mov dword [esp + 0x78], 0
mov word [esp + 0x9a], ax
mov ecx, dword [ebp + 0x6a0]
mov eax, ecx
mov dl, ch
sar eax, 0x10
mov byte [esp + 0x78], cl
shl edx, 0x10
xor ecx, ecx
shl dword [esp + 0x78], 0x18
or edx, dword [esp + 0x78]
mov cl, al
shl ecx, 8
and edx, 0xffff0000
mov dword [esp + 0x78], 0
mov byte [esp + 0x78], ah
or ecx, dword [esp + 0x78]
and ecx, 0xffff
or edx, ecx
mov dword [esp + 0x9c], edx
cmp word [ebp + 0x69e], 3
jne 0x1000cba7
cmp dword [ebp + 0x6a0], 2
jg 0x1000cba7
mov eax, dword [ebp + 0x6a4]
xor edx, edx
mov dword [esp + 0x78], 0
mov ecx, eax
sar ecx, 0x10
mov dl, ch
mov byte [esp + 0x78], cl
shl edx, 0x10
xor ecx, ecx
shl dword [esp + 0x78], 0x18
or edx, dword [esp + 0x78]
mov cl, al
shl ecx, 8
and edx, 0xffff0000
mov dword [esp + 0x78], 0
mov byte [esp + 0x78], ah
or ecx, dword [esp + 0x78]
and ecx, 0xffff
or edx, ecx
jmp 0x1000cbf2
mov eax, dword [ebp + 0x6a4]
xor edx, edx
mov ecx, eax
mov dl, ah
mov dword [esp + 0x78], 0
sar ecx, 0x10
mov byte [esp + 0x78], al
shl edx, 0x10
xor eax, eax
shl dword [esp + 0x78], 0x18
or edx, dword [esp + 0x78]
mov al, cl
shl eax, 8
and edx, 0xffff0000
mov dword [esp + 0x78], 0
mov byte [esp + 0x78], ch
or eax, dword [esp + 0x78]
and eax, 0xffff
or edx, eax
lea eax, [esp + 0x18]
push 2
lea ecx, [esp + 0x9c]
push eax
mov dword [esp + 0xa8], edx
push 0xffffffffffffffff
push ecx
call fcn.1000e380
add esp, 0x10
mov dword [ebp + 0x5d84], eax
test eax, eax
jne 0x1000df5c
mov eax, dword [esp + 0x10c]
cmp dword [eax + 0x120], 0x4949
jne 0x1000cc64
lea eax, [esp + 0x18]
push 2
push eax
lea ecx, [ebp + 0x6a8]
push 0xffffffffffffffff
push ecx
call fcn.1000e380
add esp, 0x10
mov dword [ebp + 0x5d84], eax
test eax, eax
je 0x1000cdc5
pop ebp
pop edi
pop esi
pop ebx
add esp, 0xf8
ret
mov cx, word [ebp + 0x6a8]
movzx ax, cl
shl ax, 8
movzx cx, ch
or ax, cx
mov word [esp + 0x98], ax
mov cx, word [ebp + 0x6aa]
movzx ax, cl
shl ax, 8
xor edx, edx
movzx cx, ch
or ax, cx
mov dword [esp + 0x78], 0
mov word [esp + 0x9a], ax
mov eax, dword [ebp + 0x6ac]
mov ecx, eax
mov dl, ah
sar ecx, 0x10
mov byte [esp + 0x78], al
shl edx, 0x10
xor eax, eax
shl dword [esp + 0x78], 0x18
or edx, dword [esp + 0x78]
mov al, cl
shl eax, 8
and edx, 0xffff0000
mov dword [esp + 0x78], 0
mov byte [esp + 0x78], ch
or eax, dword [esp + 0x78]
and eax, 0xffff
or edx, eax
mov dword [esp + 0x9c], edx
cmp word [ebp + 0x6aa], 3
jne 0x1000cd4b
cmp dword [ebp + 0x6ac], 2
jg 0x1000cd4b
mov eax, dword [ebp + 0x6b0]
xor edx, edx
mov dword [esp + 0x78], 0
mov ecx, eax
sar ecx, 0x10
mov dl, ch
mov byte [esp + 0x78], cl
shl edx, 0x10
xor ecx, ecx
shl dword [esp + 0x78], 0x18
or edx, dword [esp + 0x78]
mov cl, al
shl ecx, 8
and edx, 0xffff0000
mov dword [esp + 0x78], 0
mov byte [esp + 0x78], ah
or ecx, dword [esp + 0x78]
jmp 0x1000cd8f
mov ecx, dword [ebp + 0x6b0]
xor edx, edx
mov eax, ecx
mov dl, ch
mov dword [esp + 0x78], 0
sar eax, 0x10
mov byte [esp + 0x78], cl
shl edx, 0x10
xor ecx, ecx
shl dword [esp + 0x78], 0x18
or edx, dword [esp + 0x78]
mov cl, al
shl ecx, 8
and edx, 0xffff0000
mov dword [esp + 0x78], 0
mov byte [esp + 0x78], ah
or ecx, dword [esp + 0x78]
and ecx, 0xffff
push 2
or edx, ecx
lea eax, [esp + 0x1c]
lea ecx, [esp + 0x9c]
push eax
mov dword [esp + 0xa8], edx
push 0xffffffffffffffff
push ecx
call fcn.1000e380
add esp, 0x10
mov dword [ebp + 0x5d84], eax
test eax, eax
jne 0x1000df5c
mov eax, dword [esp + 0x10c]
cmp dword [eax + 0x120], 0x4949
jne 0x1000ce09
lea eax, [esp + 0x18]
push 2
push eax
lea ecx, [ebp + 0x6b4]
push 0xffffffffffffffff
push ecx
call fcn.1000e380
add esp, 0x10
mov dword [ebp + 0x5d84], eax
test eax, eax
je 0x1000cf6a
pop ebp
pop edi
pop esi
pop ebx
add esp, 0xf8
ret
mov ax, word [ebp + 0x6b4]
movzx cx, al
shl cx, 8
movzx ax, ah
or cx, ax
mov word [esp + 0x98], cx
mov cx, word [ebp + 0x6b6]
movzx ax, cl
shl ax, 8
xor edx, edx
movzx cx, ch
or ax, cx
mov dword [esp + 0x78], 0
mov word [esp + 0x9a], ax
mov ecx, dword [ebp + 0x6b8]
mov eax, ecx
mov dl, ch
sar eax, 0x10
mov byte [esp + 0x78], cl
shl edx, 0x10
xor ecx, ecx
shl dword [esp + 0x78], 0x18
or edx, dword [esp + 0x78]
mov cl, al
shl ecx, 8
and edx, 0xffff0000
mov dword [esp + 0x78], 0
mov byte [esp + 0x78], ah
or ecx, dword [esp + 0x78]
and ecx, 0xffff
or edx, ecx
mov dword [esp + 0x9c], edx
cmp word [ebp + 0x6b6], 3
jne 0x1000cef5
cmp dword [ebp + 0x6b8], 2
jg 0x1000cef5
mov eax, dword [edi]
xor edx, edx
mov dword [esp + 0x78], 0
mov ecx, eax
sar ecx, 0x10
mov dl, ch
mov byte [esp + 0x78], cl
shl edx, 0x10
xor ecx, ecx
shl dword [esp + 0x78], 0x18
or edx, dword [esp + 0x78]
mov cl, al
shl ecx, 8
and edx, 0xffff0000
mov dword [esp + 0x78], 0
mov byte [esp + 0x78], ah
or ecx, dword [esp + 0x78]
and ecx, 0xffff
or edx, ecx
jmp 0x1000cf3c
mov eax, dword [edi]
xor edx, edx
mov ecx, eax
mov dl, ah
mov dword [esp + 0x78], 0
sar ecx, 0x10
mov byte [esp + 0x78], al
shl edx, 0x10
xor eax, eax
shl dword [esp + 0x78], 0x18
or edx, dword [esp + 0x78]
mov al, cl
shl eax, 8
and edx, 0xffff0000
mov dword [esp + 0x78], 0
mov byte [esp + 0x78], ch
or eax, dword [esp + 0x78]
and eax, 0xffff
or edx, eax
lea eax, [esp + 0x18]
push 2
lea ecx, [esp + 0x9c]
push eax
mov dword [esp + 0xa8], edx
push 0xffffffffffffffff
push ecx
call fcn.1000e380
add esp, 0x10
mov dword [ebp + 0x5d84], eax
test eax, eax
jne 0x1000df5c
mov eax, dword [esp + 0x10c]
mov eax, dword [eax + 0x18]
cmp eax, 1
jl 0x1000d155
cmp eax, 3
jg 0x1000d155
xor si, si
mov eax, dword [esp + 0x10c]
cmp dword [eax + 0x120], 0x4949
jne 0x1000cfd6
lea eax, [esp + 0x18]
push 2
movsx ecx, si
lea edx, [ecx + ecx*2]
push eax
push 0xffffffffffffffff
lea eax, [ebp + edx*4]
add eax, 0x6cc
push eax
call fcn.1000e380
add esp, 0x10
mov dword [ebp + 0x5d84], eax
test eax, eax
je 0x1000d149
pop ebp
pop edi
pop esi
pop ebx
add esp, 0xf8
ret
mov dword [esp + 0x78], 0
movsx eax, si
xor edx, edx
lea ecx, [eax + eax*2]
mov ax, word [ebp + ecx*4 + 0x6cc]
lea edi, [ebp + ecx*4]
movzx cx, al
shl cx, 8
movzx ax, ah
or cx, ax
mov word [esp + 0x98], cx
mov ax, word [edi + 0x6ce]
movzx cx, al
shl cx, 8
movzx ax, ah
or cx, ax
mov word [esp + 0x9a], cx
mov eax, dword [edi + 0x6d0]
mov ecx, eax
mov dl, ah
sar ecx, 0x10
mov byte [esp + 0x78], al
shl edx, 0x10
xor eax, eax
shl dword [esp + 0x78], 0x18
or edx, dword [esp + 0x78]
mov al, cl
shl eax, 8
and edx, 0xffff0000
mov dword [esp + 0x78], 0
mov byte [esp + 0x78], ch
or eax, dword [esp + 0x78]
and eax, 0xffff
or edx, eax
mov dword [esp + 0x9c], edx
cmp word [edi + 0x6ce], 3
jne 0x1000d0d0
cmp dword [edi + 0x6d0], 2
jg 0x1000d0d0
mov eax, dword [edi + 0x6d4]
xor edx, edx
mov dword [esp + 0x78], 0
mov ecx, eax
sar ecx, 0x10
mov dl, ch
mov byte [esp + 0x78], cl
shl edx, 0x10
xor ecx, ecx
shl dword [esp + 0x78], 0x18
or edx, dword [esp + 0x78]
mov cl, al
shl ecx, 8
and edx, 0xffff0000
mov dword [esp + 0x78], 0
mov byte [esp + 0x78], ah
or ecx, dword [esp + 0x78]
and ecx, 0xffff
or edx, ecx
jmp 0x1000d11b
mov eax, dword [edi + 0x6d4]
xor edx, edx
mov ecx, eax
mov dl, ah
mov dword [esp + 0x78], 0
sar ecx, 0x10
mov byte [esp + 0x78], al
shl edx, 0x10
xor eax, eax
shl dword [esp + 0x78], 0x18
or edx, dword [esp + 0x78]
mov al, cl
shl eax, 8
and edx, 0xffff0000
mov dword [esp + 0x78], 0
mov byte [esp + 0x78], ch
or eax, dword [esp + 0x78]
and eax, 0xffff
or edx, eax
lea eax, [esp + 0x18]
push 2
lea ecx, [esp + 0x9c]
push eax
mov dword [esp + 0xa8], edx
push 0xffffffffffffffff
push ecx
call fcn.1000e380
add esp, 0x10
mov dword [ebp + 0x5d84], eax
test eax, eax
jne 0x1000d1e5
inc si
cmp si, 3
jl 0x1000cf89
mov eax, dword [esp + 0x10c]
mov eax, dword [eax + 0x114]
test eax, eax
je 0x1000d2d1
cmp dword [eax + 4], 0
je 0x1000d2d1
mov esi, dword [esp + 0x38]
mov ecx, dword [esp + 0x10c]
mov word [esp + 0x8c], 0x8298
cmp dword [ecx + 0x120], 0x4949
mov word [esp + 0x8e], 2
mov eax, dword [eax + 0x114]
mov dword [esp + 0x90], eax
mov dword [esp + 0x94], esi
jne 0x1000d1f6
lea eax, [esp + 0x18]
push 2
lea ecx, [esp + 0x90]
push eax
push 0xffffffffffffffff
push ecx
call fcn.1000e380
add esp, 0x10
mov dword [ebp + 0x5d84], eax
test eax, eax
je 0x1000d2d1
pop ebp
pop edi
pop esi
pop ebx
add esp, 0xf8
ret
mov eax, dword [ebp + 0x5d84]
pop ebp
pop edi
pop esi
pop ebx
add esp, 0xf8
ret
mov eax, dword [esp + 0x90]
xor edx, edx
sar eax, 0x10
mov dl, byte [esp + 0x91]
shl edx, 0x10
xor ecx, ecx
mov word [esp + 0x98], 0x9882
mov word [esp + 0x9a], 0x200
mov cl, byte [esp + 0x90]
mov dword [esp + 0x78], 0
shl ecx, 0x18
mov byte [esp + 0x78], ah
or edx, ecx
xor ecx, ecx
and edx, 0xffff0000
mov cl, al
shl ecx, 8
mov eax, dword [esp + 0x94]
sar eax, 0x10
or ecx, dword [esp + 0x78]
and ecx, 0xffff
or edx, ecx
xor ecx, ecx
mov cl, byte [esp + 0x95]
mov dword [esp + 0x9c], edx
shl ecx, 0x10
xor edx, edx
mov dl, byte [esp + 0x94]
mov dword [esp + 0x78], 0
shl edx, 0x18
mov byte [esp + 0x78], ah
or ecx, edx
xor edx, edx
and ecx, 0xffff0000
mov dl, al
shl edx, 8
push 2
or edx, dword [esp + 0x7c]
lea eax, [esp + 0x1c]
and edx, 0xffff
push eax
or ecx, edx
push 0xffffffffffffffff
mov dword [esp + 0xac], ecx
lea ecx, [esp + 0xa4]
push ecx
call fcn.1000e380
add esp, 0x10
mov dword [ebp + 0x5d84], eax
test eax, eax
jne 0x1000df5c
lea eax, [esp + 0x18]
push 2
lea ecx, [esp + 0x18]
push eax
mov dword [esp + 0x20], 4
mov dword [esp + 0x1c], 0
push 0xffffffffffffffff
push ecx
call fcn.1000e380
add esp, 0x10
mov dword [ebp + 0x5d84], eax
test eax, eax
jne 0x1000df5c
movsx eax, word [0x10033afe]
xor dx, dx
mov dword [esp + 0x18], eax
cmp word [esp + 0x1c], dx
jle 0x1000d33c
movsx ecx, dx
inc dx
mov eax, dword [esp + 0x10c]
cmp dx, word [esp + 0x1c]
mov ebx, dword [eax + ecx*4 + 0xa4]
mov word [esp + ecx*2 + 0x98], bx
jl 0x1000d31a
mov eax, dword [esp + 0x10c]
mov ecx, dword [eax + 0x120]
cmp ecx, 0x4949
jne 0x1000d35c
mov word [eax + 0xa4], 8
jmp 0x1000d36c
mov eax, dword [esp + 0x10c]
mov word [eax + 0xa4], 0x800
mov eax, dword [esp + 0x10c]
cmp ecx, 0x4949
jne 0x1000d386
mov word [eax + 0xa8], 8
jmp 0x1000d38f
mov word [eax + 0xa8], 0x800
mov eax, dword [esp + 0x10c]
cmp ecx, 0x4949
jne 0x1000d3a9
mov word [eax + 0xac], 8
jmp 0x1000d3b2
mov word [eax + 0xac], 0x800
mov eax, dword [esp + 0x10c]
cmp ecx, 0x4949
mov word [eax + 0xb0], 0
xor si, si
cmp word [esp + 0x1c], si
jle 0x1000d40e
lea eax, [esp + 0x18]
push 2
mov edx, dword [esp + 0x110]
push eax
movsx ecx, si
push 0xffffffffffffffff
lea ecx, [edx + ecx*4]
add ecx, 0xa4
push ecx
call fcn.1000e380
add esp, 0x10
mov dword [ebp + 0x5d84], eax
test eax, eax
jne 0x1000d4a6
inc si
cmp si, word [esp + 0x1c]
jl 0x1000d3d2
xor cx, cx
cmp word [esp + 0x1c], cx
jle 0x1000d43f
movsx edx, cx
inc cx
mov eax, dword [esp + 0x10c]
mov esi, dword [esp + edx*2 + 0x98]
and esi, 0xffff
cmp cx, word [esp + 0x1c]
mov dword [eax + edx*4 + 0xa4], esi
jl 0x1000d418
mov eax, dword [esp + 0x10c]
mov eax, dword [eax + 0x18]
test eax, eax
jl 0x1000d539
cmp eax, 3
jg 0x1000d539
mov ax, word [0x10033b02]
mov edx, dword [esp + 0x10c]
imul ax, ax, 6
movzx ecx, ax
mov esi, 0x10033b98
mov dword [esp + 0x18], ecx
cmp dword [edx + 0xa0], 0
je 0x1000d485
mov esi, 0x10033b68
lea edi, [esp + 0x98]
mov eax, dword [esp + 0x10c]
mov eax, dword [eax + 0x120]
cmp eax, 0x4949
jne 0x1000d4b7
mov ecx, dword [esi]
mov dword [edi], ecx
jmp 0x1000d501
mov eax, dword [ebp + 0x5d84]
pop ebp
pop edi
pop esi
pop ebx
add esp, 0xf8
ret
mov edx, dword [esi]
xor ebx, ebx
mov ecx, edx
mov bl, dh
mov dword [esp + 0x78], 0
shr ecx, 0x10
mov byte [esp + 0x78], dl
shl ebx, 0x10
xor edx, edx
shl dword [esp + 0x78], 0x18
or ebx, dword [esp + 0x78]
mov dl, cl
shl edx, 8
and ebx, 0xffff0000
mov dword [esp + 0x78], 0
mov byte [esp + 0x78], ch
or edx, dword [esp + 0x78]
and edx, 0xffff
or ebx, edx
mov dword [edi], ebx
add edi, 4
add esi, 4
lea ecx, [esp + 0xc8]
cmp edi, ecx
jb 0x1000d499
lea eax, [esp + 0x18]
push 2
lea ecx, [esp + 0x9c]
push eax
push 0xffffffffffffffff
push ecx
call fcn.1000e380
add esp, 0x10
mov dword [ebp + 0x5d84], eax
test eax, eax
jne 0x1000df5c
movsx eax, word [0x10033b02]
cdq
sub eax, edx
mov ecx, dword [esp + 0x10c]
mov dword [esp + 0x30], 1
sar eax, 1
movsx eax, ax
mov dword [esp + 0x18], eax
mov eax, dword [ecx + 0x120]
cmp eax, 0x4949
je 0x1000d571
mov dword [esp + 0x30], 0x1000000
cmp eax, 0x4949
mov eax, dword [esp + 0x10c]
mov ecx, dword [eax + 0x7c]
jne 0x1000d588
mov dword [esp + 0x74], ecx
jmp 0x1000d5e7
mov eax, ecx
xor edx, edx
sar eax, 0x10
mov dl, ch
mov dword [esp + 0x98], 0
shl edx, 0x10
mov byte [esp + 0x98], cl
shl dword [esp + 0x98], 0x18
or edx, dword [esp + 0x98]
xor ecx, ecx
and edx, 0xffff0000
mov cl, al
mov dword [esp + 0x98], 0
shl ecx, 8
mov byte [esp + 0x98], ah
or ecx, dword [esp + 0x98]
and ecx, 0xffff
or edx, ecx
mov dword [esp + 0x74], edx
lea eax, [esp + 0x18]
push 2
lea ecx, [esp + 0x78]
push eax
push 0xffffffffffffffff
push ecx
call fcn.1000e380
add esp, 0x10
mov dword [ebp + 0x5d84], eax
test eax, eax
jne 0x1000df5c
lea eax, [esp + 0x18]
push 2
lea ecx, [esp + 0x34]
push eax
push 0xffffffffffffffff
push ecx
call fcn.1000e380
add esp, 0x10
mov dword [ebp + 0x5d84], eax
test eax, eax
jne 0x1000df5c
mov eax, dword [esp + 0x10c]
mov dword [esp + 0x30], 1
mov eax, dword [eax + 0x120]
cmp eax, 0x4949
je 0x1000d653
mov dword [esp + 0x30], 0x1000000
cmp eax, 0x4949
mov eax, dword [esp + 0x10c]
jne 0x1000d66d
mov ecx, dword [eax + 0x84]
mov dword [esp + 0x70], ecx
jmp 0x1000d6d1
mov eax, dword [eax + 0x84]
xor edx, edx
mov ecx, eax
mov dl, ah
mov dword [esp + 0x98], 0
sar ecx, 0x10
mov byte [esp + 0x98], al
shl edx, 0x10
xor eax, eax
shl dword [esp + 0x98], 0x18
or edx, dword [esp + 0x98]
mov al, cl
shl eax, 8
and edx, 0xffff0000
mov dword [esp + 0x98], 0
mov byte [esp + 0x98], ch
or eax, dword [esp + 0x98]
and eax, 0xffff
or edx, eax
mov dword [esp + 0x70], edx
lea eax, [esp + 0x18]
push 2
lea ecx, [esp + 0x74]
push eax
push 0xffffffffffffffff
push ecx
call fcn.1000e380
add esp, 0x10
mov dword [ebp + 0x5d84], eax
test eax, eax
jne 0x1000df5c
lea eax, [esp + 0x18]
push 2
lea ecx, [esp + 0x34]
push eax
push 0xffffffffffffffff
push ecx
call fcn.1000e380
add esp, 0x10
mov dword [ebp + 0x5d84], eax
test eax, eax
jne 0x1000df5c
mov eax, dword [esp + 0x10c]
mov ecx, dword [eax + 0x114]
test ecx, ecx
je 0x1000d75d
cmp dword [ecx + 0x1c], 0
je 0x1000d75d
mov eax, dword [ecx + 0x12c]
push 2
mov dword [esp + 0x1c], eax
lea eax, [esp + 0x1c]
push eax
mov ecx, dword [ecx + 0x1c]
push 0xffffffffffffffff
push ecx
call fcn.1000e380
add esp, 0x10
mov dword [ebp + 0x5d84], eax
test eax, eax
jne 0x1000df5c
mov eax, dword [esp + 0x10c]
mov ecx, dword [eax + 0x114]
test ecx, ecx
je 0x1000d7a1
cmp dword [ecx + 0xc], 0
je 0x1000d7a1
mov eax, dword [ecx + 0x11c]
push 2
mov dword [esp + 0x1c], eax
lea eax, [esp + 0x1c]
push eax
mov ecx, dword [ecx + 0xc]
push 0xffffffffffffffff
push ecx
call fcn.1000e380
add esp, 0x10
mov dword [ebp + 0x5d84], eax
test eax, eax
jne 0x1000df5c
mov eax, dword [esp + 0x10c]
mov ecx, dword [eax + 0x114]
test ecx, ecx
je 0x1000d7e5
cmp dword [ecx + 0x14], 0
je 0x1000d7e5
mov eax, dword [ecx + 0x124]
push 2
mov dword [esp + 0x1c], eax
lea eax, [esp + 0x1c]
push eax
mov ecx, dword [ecx + 0x14]
push 0xffffffffffffffff
push ecx
call fcn.1000e380
add esp, 0x10
mov dword [ebp + 0x5d84], eax
test eax, eax
jne 0x1000df5c
mov eax, dword [esp + 0x10c]
mov ecx, dword [eax + 0x114]
test ecx, ecx
je 0x1000d829
cmp dword [ecx + 0x18], 0
je 0x1000d829
mov eax, dword [ecx + 0x128]
push 2
mov dword [esp + 0x1c], eax
lea eax, [esp + 0x1c]
push eax
mov ecx, dword [ecx + 0x18]
push 0xffffffffffffffff
push ecx
call fcn.1000e380
add esp, 0x10
mov dword [ebp + 0x5d84], eax
test eax, eax
jne 0x1000df5c
mov eax, dword [esp + 0x10c]
mov ecx, dword [eax + 0x114]
test ecx, ecx
je 0x1000d86d
cmp dword [ecx + 0x20], 0
je 0x1000d86d
mov eax, dword [ecx + 0x130]
push 2
mov dword [esp + 0x1c], eax
lea eax, [esp + 0x1c]
push eax
mov ecx, dword [ecx + 0x20]
push 0xffffffffffffffff
push ecx
call fcn.1000e380
add esp, 0x10
mov dword [ebp + 0x5d84], eax
test eax, eax
jne 0x1000df5c
mov eax, dword [esp + 0x10c]
mov ecx, dword [eax + 0x114]
test ecx, ecx
je 0x1000d8b1
cmp dword [ecx + 0x24], 0
je 0x1000d8b1
mov eax, dword [ecx + 0x134]
push 2
mov dword [esp + 0x1c], eax
lea eax, [esp + 0x1c]
push eax
mov ecx, dword [ecx + 0x24]
push 0xffffffffffffffff
push ecx
call fcn.1000e380
add esp, 0x10
mov dword [ebp + 0x5d84], eax
test eax, eax
jne 0x1000df5c
mov eax, dword [esp + 0x10c]
mov ecx, dword [eax + 0x114]
test ecx, ecx
je 0x1000d8f5
cmp dword [ecx + 8], 0
je 0x1000d8f5
mov eax, dword [ecx + 0x118]
push 2
mov dword [esp + 0x1c], eax
lea eax, [esp + 0x1c]
push eax
mov ecx, dword [ecx + 8]
push 0xffffffffffffffff
push ecx
call fcn.1000e380
add esp, 0x10
mov dword [ebp + 0x5d84], eax
test eax, eax
jne 0x1000df5c
mov eax, dword [esp + 0x10c]
mov ecx, dword [eax + 0x114]
test ecx, ecx
je 0x1000d937
cmp dword [ecx], 0
je 0x1000d937
mov eax, dword [ecx + 0x110]
push 2
mov dword [esp + 0x1c], eax
lea eax, [esp + 0x1c]
push eax
mov ecx, dword [ecx]
push 0xffffffffffffffff
push ecx
call fcn.1000e380
add esp, 0x10
mov dword [ebp + 0x5d84], eax
test eax, eax
jne 0x1000df5c
mov eax, dword [esp + 0x10c]
mov ecx, dword [eax + 0x114]
test ecx, ecx
je 0x1000d97b
cmp dword [ecx + 0x10], 0
je 0x1000d97b
mov eax, dword [ecx + 0x120]
push 2
mov dword [esp + 0x1c], eax
lea eax, [esp + 0x1c]
push eax
mov ecx, dword [ecx + 0x10]
push 0xffffffffffffffff
push ecx
call fcn.1000e380
add esp, 0x10
mov dword [ebp + 0x5d84], eax
test eax, eax
jne 0x1000df5c
mov eax, dword [esp + 0x10c]
mov ecx, dword [eax + 0x114]
test ecx, ecx
je 0x1000d9bf
cmp dword [ecx + 4], 0
je 0x1000d9bf
mov eax, dword [ecx + 0x114]
push 2
mov dword [esp + 0x1c], eax
lea eax, [esp + 0x1c]
push eax
mov ecx, dword [ecx + 4]
push 0xffffffffffffffff
push ecx
call fcn.1000e380
add esp, 0x10
mov dword [ebp + 0x5d84], eax
test eax, eax
jne 0x1000df5c
xor si, si
mov eax, dword [esp + 0x24]
mov dword [esp + 0x18], 4
mov edx, dword [esp + 0x1c]
cmp dx, si
lea ecx, [eax + edx*4]
mov dword [esp + 0x14], ecx
jle 0x1000dadc
mov edi, 0x40
mov eax, dword [esp + 0x10c]
cmp dword [eax + 0x120], 0x4949
je 0x1000da47
mov eax, dword [esp + 0x14]
xor ecx, ecx
sar eax, 0x10
mov cl, byte [esp + 0x15]
shl ecx, 0x10
xor edx, edx
mov dword [esp + 0x98], 0
mov dl, byte [esp + 0x14]
mov byte [esp + 0x98], ah
shl edx, 0x18
or ecx, edx
xor edx, edx
and ecx, 0xffff0000
mov dl, al
shl edx, 8
or edx, dword [esp + 0x98]
and edx, 0xffff
or ecx, edx
mov dword [esp + 0x14], ecx
lea eax, [esp + 0x18]
push 2
lea ecx, [esp + 0x18]
push eax
push 0xffffffffffffffff
push ecx
call fcn.1000e380
add esp, 0x10
mov dword [ebp + 0x5d84], eax
test eax, eax
jne 0x1000db78
mov eax, dword [esp + 0x10c]
cmp dword [eax + 0x120], 0x4949
je 0x1000dacb
xor si, si
mov eax, dword [esp + 0x6c]
cmp word [esp + 0x1c], si
mov dword [esp + 0x18], eax
jle 0x1000db40
movsx ecx, si
xor dx, dx
mov eax, dword [esp + 0x10c]
mov edi, dword [eax + ecx*4 + 0x3c]
movsx eax, dx
inc dx
mov cl, byte [edi + eax*4]
cmp dx, 0x40
mov byte [esp + eax + 0xc8], cl
jl 0x1000daff
lea eax, [esp + 0x18]
push 2
lea ecx, [esp + 0xcc]
push eax
push 0xffffffffffffffff
push ecx
call fcn.1000e380
add esp, 0x10
mov dword [ebp + 0x5d84], eax
test eax, eax
jne 0x1000db89
xor si, si
mov eax, dword [esp + 0x2c]
mov dword [esp + 0x18], 4
mov edx, dword [esp + 0x1c]
cmp dx, si
lea ecx, [eax + edx*4]
mov dword [esp + 0x14], ecx
jle 0x1000dc8e
mov eax, dword [esp + 0x10c]
cmp dword [eax + 0x120], 0x4949
jne 0x1000db9a
mov eax, dword [ebp + 0x5d84]
pop ebp
pop edi
pop esi
pop ebx
add esp, 0xf8
ret
xor si, si
cmp word [esp + 0x1c], si
jle 0x1000dd0a
pop ebp
pop edi
pop esi
pop ebx
add esp, 0xf8
ret