Function at 0x101177c0
Capabilities:
Inspect section memory permissions

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x102893e8
mov eax, dword fs:[0]
push eax
sub esp, 0xf9c
mov eax, dword [0x1036413c]
xor eax, ebp
mov dword [ebp - 0x10], eax
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov dword [ebp - 0x278], ecx
mov dword [ebp - 0x268], 0
mov dword [ebp - 0x26c], 0
mov dword [ebp - 0x270], 0
mov dword [ebp - 0x274], 0
mov ecx, 0x10478ba8
call fcn.102758d0
push 0
push str.Valve001
call dword [sym.imp.USER32.dll_FindWindowA]
mov dword [ebp - 0xe68], eax
mov eax, dword [0x10367810]
mov dword [ebp - 0xe70], eax
mov dword [ebp - 0xc00], 0x101a5e10
mov ecx, dword [ebp - 0xc00]
push ecx
push 0xfffffffffffffffc
mov edx, dword [ebp - 0xe68]
push edx
call dword [ebp - 0xe70]
mov ecx, dword [ebp - 0x278]
mov dword [ecx + 0x67c], eax
mov edx, dword [ebp - 0x278]
mov dword [ebp - 0x28c], edx
mov eax, dword [0x10452c28]
mov dword [ebp - 0xe80], eax
lea ecx, [ebp - 0x2f8]
mov dword [ebp - 0x5a4], ecx
mov edx, dword [ebp - 0x5a4]
mov eax, dword [ebp - 0xe80]
mov dword [edx], eax
mov ecx, dword [ebp - 0x5a4]
mov dword [ebp - 0xf24], ecx
mov dword [ebp - 4], 0
mov edx, dword [ebp - 0x28c]
mov eax, dword [ebp - 0x2f8]
mov dword [edx], eax
mov ecx, dword [ebp - 0x2f8]
mov edx, dword [ecx]
mov dword [ebp - 0xe88], edx
mov eax, dword [ebp - 0x28c]
mov ecx, dword [ebp - 0xe88]
mov dword [eax + 4], ecx
mov edx, dword [ebp - 0x28c]
cmp dword [edx + 4], 0
jne 0x101178f4
mov dword [ebp - 4], 0xffffffff
jmp 0x10117b2f
mov dword [ebp - 0x3ac], 0
mov eax, dword [ebp - 0x28c]
mov ecx, dword [eax + 4]
mov edx, dword [ebp - 0x3ac]
mov eax, dword [ecx + edx*4]
mov dword [ebp - 0x698], eax
cmp dword [ebp - 0x698], 0
jne 0x10117928
mov byte [ebp - 0x288], 0
jmp 0x10117980
mov ecx, dword [0x1036780c]
mov dword [ebp - 0xe98], ecx
push 0x1c
lea edx, [ebp - 0xe4]
push edx
mov eax, dword [ebp - 0x698]
push eax
call dword [ebp - 0xe98]
test eax, eax
jne 0x10117957
mov byte [ebp - 0x288], 0
jmp 0x10117980
mov ecx, dword [ebp - 0xd0]
and ecx, 1
jne 0x10117970
mov edx, dword [ebp - 0xd0]
and edx, 0x100
je 0x10117979
mov byte [ebp - 0x288], 0
jmp 0x10117980
mov byte [ebp - 0x288], 1
movzx eax, byte [ebp - 0x288]
test eax, eax
je 0x1011799f
mov ecx, dword [ebp - 0x3ac]
add ecx, 1
mov dword [ebp - 0x3ac], ecx
jmp 0x101178fe
mov edx, dword [ebp - 0x28c]
mov eax, dword [ebp - 0x3ac]
mov dword [edx + 0xc], eax
mov ecx, dword [ebp - 0x28c]
cmp dword [ecx + 0xc], 0
jne 0x101179c6
mov dword [ebp - 4], 0xffffffff
jmp 0x10117b2f
mov edx, 1
test edx, edx
je 0x101179e3
mov eax, dword [ebp - 0x28c]
mov ecx, dword [eax + 0xc]
add ecx, 1
mov dword [ebp - 0x69c], ecx
jmp 0x101179f2
mov edx, dword [ebp - 0x28c]
mov eax, dword [edx + 0xc]
mov dword [ebp - 0x69c], eax
mov edx, dword [ebp - 0x69c]
lea ecx, [ebp - 0xeb0]
call fcn.10081640
mov dword [ebp - 0xea0], eax
mov ecx, dword [ebp - 0xea0]
push ecx
mov ecx, dword [ebp - 0x28c]
add ecx, 8
call fcn.100816e0
lea ecx, [ebp - 0xeb0]
call fcn.1007d530
mov ecx, dword [ebp - 0x28c]
add ecx, 8
call fcn.1007d4d0
movzx edx, al
test edx, edx
jne 0x10117a4a
mov dword [ebp - 4], 0xffffffff
jmp 0x10117b2f
mov ecx, dword [ebp - 0x28c]
add ecx, 8
call fcn.1007d4f0
mov dword [ebp - 0xeb8], eax
mov eax, dword [ebp - 0xeb8]
mov dword [ebp - 0x54], eax
mov ecx, 1
test ecx, ecx
je 0x10117ae3
mov edx, dword [ebp - 0x54]
mov dword [ebp - 0xec0], edx
mov eax, dword [ebp - 0x28c]
mov ecx, dword [eax + 0xc]
lea edx, [ecx*4 + 4]
push edx
mov eax, dword [ebp - 0x28c]
mov ecx, dword [eax + 4]
sub ecx, 4
push ecx
mov edx, dword [ebp - 0xec0]
push edx
call fcn.101d8af0
add esp, 0xc
mov eax, dword [ebp - 0x54]
mov dword [ebp - 0xec4], eax
mov ecx, dword [ebp - 0xec4]
add ecx, 4
mov dword [ebp - 0xec8], ecx
cmp dword [ebp - 0x2f8], 0
jne 0x10117ac9
jmp 0x10117ad7
mov edx, dword [ebp - 0x2f8]
mov eax, dword [ebp - 0xec8]
mov dword [edx], eax
mov ecx, dword [ebp - 0x28c]
mov byte [ecx + 0x10], 1
jmp 0x10117b28
mov edx, dword [ebp - 0x54]
mov dword [ebp - 0xecc], edx
mov eax, dword [ebp - 0x28c]
mov ecx, dword [eax + 0xc]
shl ecx, 2
push ecx
mov edx, dword [ebp - 0x28c]
mov eax, dword [edx + 4]
push eax
mov ecx, dword [ebp - 0xecc]
push ecx
call fcn.101d8af0
add esp, 0xc
cmp dword [ebp - 0x2f8], 0
jne 0x10117b1d
jmp 0x10117b28
mov edx, dword [ebp - 0x54]
mov eax, dword [ebp - 0x2f8]
mov dword [eax], edx
mov dword [ebp - 4], 0xffffffff
mov ecx, dword [ebp - 0x278]
mov dword [ebp - 0x2f4], ecx
mov dword [ebp - 0xed0], 0x1016d460
mov edx, dword [ebp - 0x2f4]
movzx eax, byte [edx + 0x10]
test eax, eax
je 0x10117b63
mov ecx, 0x29
add ecx, 1
mov dword [ebp - 0x6a0], ecx
jmp 0x10117b6d
mov dword [ebp - 0x6a0], 0x29
mov edx, dword [ebp - 0x6a0]
mov dword [ebp - 0x6a4], edx
mov eax, dword [ebp - 0x2f4]
cmp dword [eax + 4], 0
je 0x10117bab
mov ecx, dword [ebp - 0x2f4]
add ecx, 8
call fcn.1007d4d0
movzx ecx, al
test ecx, ecx
je 0x10117bab
mov edx, dword [ebp - 0x2f4]
mov eax, dword [ebp - 0x6a4]
cmp eax, dword [edx + 0xc]
jbe 0x10117bd5
mov dword [ebp - 0x458], 0
mov ecx, dword [ebp - 0x268]
or ecx, 1
mov dword [ebp - 0x268], ecx
lea edx, [ebp - 0x458]
mov dword [ebp - 0xef8], edx
jmp 0x10117d14
mov eax, dword [ebp - 0xed0]
mov dword [ebp - 0xed4], eax
mov ecx, dword [ebp - 0xed4]
mov dword [ebp - 0xedc], ecx
mov edx, dword [ebp - 0x2f4]
add edx, 8
mov dword [ebp - 0xed8], edx
mov eax, dword [ebp - 0x6a4]
push eax
mov ecx, dword [ebp - 0xed8]
call fcn.1007d510
mov ecx, dword [ebp - 0xedc]
mov dword [eax], ecx
mov edx, 0x29
shl edx, 2
mov eax, dword [ebp - 0x2f4]
add edx, dword [eax + 4]
mov dword [ebp - 0x6a8], edx
mov ecx, dword [ebp - 0x6a8]
cmp dword [ecx], 0
je 0x10117c7b
mov edx, dword [ebp - 0x6a8]
mov eax, dword [edx]
mov dword [ebp - 0xee0], eax
mov ecx, dword [ebp - 0xee0]
mov dword [ebp - 0xee4], ecx
lea edx, [ebp - 0xee4]
mov dword [ebp - 0xee8], edx
mov eax, dword [ebp - 0x268]
or eax, 2
mov dword [ebp - 0x268], eax
mov ecx, dword [ebp - 0xee8]
mov dword [ebp - 0x6ac], ecx
jmp 0x10117cac
mov dword [ebp - 0xeec], 0
lea edx, [ebp - 0xeec]
mov dword [ebp - 0xef0], edx
mov eax, dword [ebp - 0x268]
or eax, 4
mov dword [ebp - 0x268], eax
mov ecx, dword [ebp - 0xef0]
mov dword [ebp - 0x6ac], ecx
mov edx, dword [ebp - 0x6ac]
mov dword [ebp - 0xef4], edx
mov eax, dword [ebp - 0xef4]
mov ecx, dword [eax]
mov dword [ebp - 0x458], ecx
mov edx, dword [ebp - 0x268]
or edx, 8
mov dword [ebp - 0x268], edx
mov eax, dword [ebp - 0x268]
and eax, 4
je 0x10117ce7
and dword [ebp - 0x268], 0xfffffffb
mov ecx, dword [ebp - 0x268]
and ecx, 2
je 0x10117cf9
and dword [ebp - 0x268], 0xfffffffd
mov edx, dword [ebp - 0x268]
or edx, 1
mov dword [ebp - 0x268], edx
lea eax, [ebp - 0x458]
mov dword [ebp - 0xef8], eax
mov ecx, dword [ebp - 0x278]
add ecx, 0x28
mov dword [ebp - 0x290], ecx
mov edx, dword [0x10452c10]
mov dword [ebp - 0xefc], edx
lea eax, [ebp - 0x2fc]
mov dword [ebp - 0x6b0], eax
mov ecx, dword [ebp - 0x6b0]
mov edx, dword [ebp - 0xefc]
mov dword [ecx], edx
mov eax, dword [ebp - 0x6b0]
mov dword [ebp - 0xf28], eax
mov dword [ebp - 4], 1
mov ecx, dword [ebp - 0x290]
mov edx, dword [ebp - 0x2fc]
mov dword [ecx], edx
mov eax, dword [ebp - 0x2fc]
mov ecx, dword [eax]
mov dword [ebp - 0xf00], ecx
mov edx, dword [ebp - 0x290]
mov eax, dword [ebp - 0xf00]
mov dword [edx + 4], eax
mov ecx, dword [ebp - 0x290]
cmp dword [ecx + 4], 0
jne 0x10117d9f
mov dword [ebp - 4], 0xffffffff
jmp 0x10117fd9
mov dword [ebp - 0x3a4], 0
mov edx, dword [ebp - 0x290]
mov eax, dword [edx + 4]
mov ecx, dword [ebp - 0x3a4]
mov edx, dword [eax + ecx*4]
mov dword [ebp - 0x6b4], edx
cmp dword [ebp - 0x6b4], 0
jne 0x10117dd3
mov byte [ebp - 0x284], 0
jmp 0x10117e2a
mov eax, dword [0x1036780c]
mov dword [ebp - 0xf04], eax
push 0x1c
lea ecx, [ebp - 0x100]
push ecx
mov edx, dword [ebp - 0x6b4]
push edx
call dword [ebp - 0xf04]
test eax, eax
jne 0x10117e01
mov byte [ebp - 0x284], 0
jmp 0x10117e2a
mov eax, dword [ebp - 0xec]
and eax, 1
jne 0x10117e1a
mov ecx, dword [ebp - 0xec]
and ecx, 0x100
je 0x10117e23
mov byte [ebp - 0x284], 0
jmp 0x10117e2a
mov byte [ebp - 0x284], 1
movzx edx, byte [ebp - 0x284]
test edx, edx
je 0x10117e49
mov eax, dword [ebp - 0x3a4]
add eax, 1
mov dword [ebp - 0x3a4], eax
jmp 0x10117da9
mov ecx, dword [ebp - 0x290]
mov edx, dword [ebp - 0x3a4]
mov dword [ecx + 0xc], edx
mov eax, dword [ebp - 0x290]
cmp dword [eax + 0xc], 0
jne 0x10117e70
mov dword [ebp - 4], 0xffffffff
jmp 0x10117fd9
mov ecx, 1
test ecx, ecx
je 0x10117e8d
mov edx, dword [ebp - 0x290]
mov eax, dword [edx + 0xc]
add eax, 1
mov dword [ebp - 0x6b8], eax
jmp 0x10117e9c
mov ecx, dword [ebp - 0x290]
mov edx, dword [ecx + 0xc]
mov dword [ebp - 0x6b8], edx
mov edx, dword [ebp - 0x6b8]
lea ecx, [ebp - 0x708]
call fcn.10081640
mov dword [ebp - 0xf08], eax
mov eax, dword [ebp - 0xf08]
push eax
mov ecx, dword [ebp - 0x290]
add ecx, 8
call fcn.100816e0
lea ecx, [ebp - 0x708]
call fcn.1007d530
mov ecx, dword [ebp - 0x290]
add ecx, 8
call fcn.1007d4d0
movzx ecx, al
test ecx, ecx
jne 0x10117ef4
mov dword [ebp - 4], 0xffffffff
jmp 0x10117fd9
mov ecx, dword [ebp - 0x290]
add ecx, 8
call fcn.1007d4f0
mov dword [ebp - 0x70c], eax
mov edx, dword [ebp - 0x70c]
mov dword [ebp - 0x48], edx
mov eax, 1
test eax, eax
je 0x10117f8d
mov ecx, dword [ebp - 0x48]
mov dword [ebp - 0x710], ecx
mov edx, dword [ebp - 0x290]
mov eax, dword [edx + 0xc]
lea ecx, [eax*4 + 4]
push ecx
mov edx, dword [ebp - 0x290]
mov eax, dword [edx + 4]
sub eax, 4
push eax
mov ecx, dword [ebp - 0x710]
push ecx
call fcn.101d8af0
add esp, 0xc
mov edx, dword [ebp - 0x48]
mov dword [ebp - 0x714], edx
mov eax, dword [ebp - 0x714]
add eax, 4
mov dword [ebp - 0x718], eax
cmp dword [ebp - 0x2fc], 0
jne 0x10117f73
jmp 0x10117f81
mov ecx, dword [ebp - 0x2fc]
mov edx, dword [ebp - 0x718]
mov dword [ecx], edx
mov eax, dword [ebp - 0x290]
mov byte [eax + 0x10], 1
jmp 0x10117fd2
mov ecx, dword [ebp - 0x48]
mov dword [ebp - 0x71c], ecx
mov edx, dword [ebp - 0x290]
mov eax, dword [edx + 0xc]
shl eax, 2
push eax
mov ecx, dword [ebp - 0x290]
mov edx, dword [ecx + 4]
push edx
mov eax, dword [ebp - 0x71c]
push eax
call fcn.101d8af0
add esp, 0xc
cmp dword [ebp - 0x2fc], 0
jne 0x10117fc7
jmp 0x10117fd2
mov ecx, dword [ebp - 0x48]
mov edx, dword [ebp - 0x2fc]
mov dword [edx], ecx
mov dword [ebp - 4], 0xffffffff
mov eax, dword [ebp - 0x278]
add eax, 0x28
mov dword [ebp - 0x300], eax
mov dword [ebp - 0x720], 0x10146620
mov ecx, dword [ebp - 0x300]
movzx edx, byte [ecx + 0x10]
test edx, edx
je 0x10118010
mov eax, 5
add eax, 1
mov dword [ebp - 0x6bc], eax
jmp 0x1011801a
mov dword [ebp - 0x6bc], 5
mov ecx, dword [ebp - 0x6bc]
mov dword [ebp - 0x6c0], ecx
mov edx, dword [ebp - 0x300]
cmp dword [edx + 4], 0
je 0x10118058
mov ecx, dword [ebp - 0x300]
add ecx, 8
call fcn.1007d4d0
movzx eax, al
test eax, eax
je 0x10118058
mov ecx, dword [ebp - 0x300]
mov edx, dword [ebp - 0x6c0]
cmp edx, dword [ecx + 0xc]
jbe 0x10118082
mov dword [ebp - 0x45c], 0
mov eax, dword [ebp - 0x268]
or eax, 0x10
mov dword [ebp - 0x268], eax
lea ecx, [ebp - 0x45c]
mov dword [ebp - 0x748], ecx
jmp 0x101181c4
mov edx, dword [ebp - 0x720]
mov dword [ebp - 0x724], edx
mov eax, dword [ebp - 0x724]
mov dword [ebp - 0x72c], eax
mov ecx, dword [ebp - 0x300]
add ecx, 8
mov dword [ebp - 0x728], ecx
mov edx, dword [ebp - 0x6c0]
push edx
mov ecx, dword [ebp - 0x728]
call fcn.1007d510
mov ecx, dword [ebp - 0x72c]
mov dword [eax], ecx
mov edx, 5
shl edx, 2
mov eax, dword [ebp - 0x300]
add edx, dword [eax + 4]
mov dword [ebp - 0x6c4], edx
mov ecx, dword [ebp - 0x6c4]
cmp dword [ecx], 0
je 0x10118128
mov edx, dword [ebp - 0x6c4]
mov eax, dword [edx]
mov dword [ebp - 0x730], eax
mov ecx, dword [ebp - 0x730]
mov dword [ebp - 0x734], ecx
lea edx, [ebp - 0x734]
mov dword [ebp - 0x738], edx
mov eax, dword [ebp - 0x268]
or eax, 0x20
mov dword [ebp - 0x268], eax
mov ecx, dword [ebp - 0x738]
mov dword [ebp - 0x6c8], ecx
jmp 0x10118159
mov dword [ebp - 0x73c], 0
lea edx, [ebp - 0x73c]
mov dword [ebp - 0x740], edx
mov eax, dword [ebp - 0x268]
or eax, 0x40
mov dword [ebp - 0x268], eax
mov ecx, dword [ebp - 0x740]
mov dword [ebp - 0x6c8], ecx
mov edx, dword [ebp - 0x6c8]
mov dword [ebp - 0x744], edx
mov eax, dword [ebp - 0x744]
mov ecx, dword [eax]
mov dword [ebp - 0x45c], ecx
mov edx, dword [ebp - 0x268]
or edx, 0x80
mov dword [ebp - 0x268], edx
mov eax, dword [ebp - 0x268]
and eax, 0x40
je 0x10118197
and dword [ebp - 0x268], 0xffffffbf
mov ecx, dword [ebp - 0x268]
and ecx, 0x20
je 0x101181a9
and dword [ebp - 0x268], 0xffffffdf
mov edx, dword [ebp - 0x268]
or edx, 0x10
mov dword [ebp - 0x268], edx
lea eax, [ebp - 0x45c]
mov dword [ebp - 0x748], eax
mov ecx, dword [ebp - 0x278]
add ecx, 0x28
mov dword [ebp - 0x304], ecx
mov dword [ebp - 0x74c], 0x101466b0
mov edx, dword [ebp - 0x304]
movzx eax, byte [edx + 0x10]
test eax, eax
je 0x101181fb
mov ecx, 6
add ecx, 1
mov dword [ebp - 0x6cc], ecx
jmp 0x10118205
mov dword [ebp - 0x6cc], 6
mov edx, dword [ebp - 0x6cc]
mov dword [ebp - 0x6d0], edx
mov eax, dword [ebp - 0x304]
cmp dword [eax + 4], 0
je 0x10118243
mov ecx, dword [ebp - 0x304]
add ecx, 8
call fcn.1007d4d0
movzx ecx, al
test ecx, ecx
je 0x10118243
mov edx, dword [ebp - 0x304]
mov eax, dword [ebp - 0x6d0]
cmp eax, dword [edx + 0xc]
jbe 0x10118270
mov dword [ebp - 0x3f4], 0
mov ecx, dword [ebp - 0x268]
or ecx, 0x100
mov dword [ebp - 0x268], ecx
lea edx, [ebp - 0x3f4]
mov dword [ebp - 0x774], edx
jmp 0x101183c4
mov eax, dword [ebp - 0x74c]
mov dword [ebp - 0x750], eax
mov ecx, dword [ebp - 0x750]
mov dword [ebp - 0x758], ecx
mov edx, dword [ebp - 0x304]
add edx, 8
mov dword [ebp - 0x754], edx
mov eax, dword [ebp - 0x6d0]
push eax
mov ecx, dword [ebp - 0x754]
call fcn.1007d510
mov ecx, dword [ebp - 0x758]
mov dword [eax], ecx
mov edx, 6
shl edx, 2
mov eax, dword [ebp - 0x304]
add edx, dword [eax + 4]
mov dword [ebp - 0x6d4], edx
mov ecx, dword [ebp - 0x6d4]
cmp dword [ecx], 0
je 0x10118318
mov edx, dword [ebp - 0x6d4]
mov eax, dword [edx]
mov dword [ebp - 0x75c], eax
mov ecx, dword [ebp - 0x75c]
mov dword [ebp - 0x760], ecx
lea edx, [ebp - 0x760]
mov dword [ebp - 0x764], edx
mov eax, dword [ebp - 0x268]
or eax, 0x200
mov dword [ebp - 0x268], eax
mov ecx, dword [ebp - 0x764]
mov dword [ebp - 0x6d8], ecx
jmp 0x1011834b
mov dword [ebp - 0x768], 0
lea edx, [ebp - 0x768]
mov dword [ebp - 0x76c], edx
mov eax, dword [ebp - 0x268]
or eax, 0x400
mov dword [ebp - 0x268], eax
mov ecx, dword [ebp - 0x76c]
mov dword [ebp - 0x6d8], ecx
mov edx, dword [ebp - 0x6d8]
mov dword [ebp - 0x770], edx
mov eax, dword [ebp - 0x770]
mov ecx, dword [eax]
mov dword [ebp - 0x3f4], ecx
mov edx, dword [ebp - 0x268]
or edx, 0x800
mov dword [ebp - 0x268], edx
mov eax, dword [ebp - 0x268]
and eax, 0x400
je 0x1011838e
and dword [ebp - 0x268], 0xfffffbff
mov ecx, dword [ebp - 0x268]
and ecx, 0x200
je 0x101183a6
and dword [ebp - 0x268], 0xfffffdff
mov edx, dword [ebp - 0x268]
or edx, 0x100
mov dword [ebp - 0x268], edx
lea eax, [ebp - 0x3f4]
mov dword [ebp - 0x774], eax
mov ecx, dword [ebp - 0x278]
add ecx, 0x28
mov dword [ebp - 0x308], ecx
mov dword [ebp - 0x778], 0x101466d0
mov edx, dword [ebp - 0x308]
movzx eax, byte [edx + 0x10]
test eax, eax
je 0x101183fb
mov ecx, 7
add ecx, 1
mov dword [ebp - 0x6dc], ecx
jmp 0x10118405
mov dword [ebp - 0x6dc], 7
mov edx, dword [ebp - 0x6dc]
mov dword [ebp - 0x6e0], edx
mov eax, dword [ebp - 0x308]
cmp dword [eax + 4], 0
je 0x10118443
mov ecx, dword [ebp - 0x308]
add ecx, 8
call fcn.1007d4d0
movzx ecx, al
test ecx, ecx
je 0x10118443
mov edx, dword [ebp - 0x308]
mov eax, dword [ebp - 0x6e0]
cmp eax, dword [edx + 0xc]
jbe 0x10118470
mov dword [ebp - 0x3fc], 0
mov ecx, dword [ebp - 0x268]
or ecx, 0x1000
mov dword [ebp - 0x268], ecx
lea edx, [ebp - 0x3fc]
mov dword [ebp - 0x7a0], edx
jmp 0x101185c4
mov eax, dword [ebp - 0x778]
mov dword [ebp - 0x77c], eax
mov ecx, dword [ebp - 0x77c]
mov dword [ebp - 0x784], ecx
mov edx, dword [ebp - 0x308]
add edx, 8
mov dword [ebp - 0x780], edx
mov eax, dword [ebp - 0x6e0]
push eax
mov ecx, dword [ebp - 0x780]
call fcn.1007d510
mov ecx, dword [ebp - 0x784]
mov dword [eax], ecx
mov edx, 7
shl edx, 2
mov eax, dword [ebp - 0x308]
add edx, dword [eax + 4]
mov dword [ebp - 0x6e4], edx
mov ecx, dword [ebp - 0x6e4]
cmp dword [ecx], 0
je 0x10118518
mov edx, dword [ebp - 0x6e4]
mov eax, dword [edx]
mov dword [ebp - 0x788], eax
mov ecx, dword [ebp - 0x788]
mov dword [ebp - 0x78c], ecx
lea edx, [ebp - 0x78c]
mov dword [ebp - 0x790], edx
mov eax, dword [ebp - 0x268]
or eax, 0x2000
mov dword [ebp - 0x268], eax
mov ecx, dword [ebp - 0x790]
mov dword [ebp - 0x6e8], ecx
jmp 0x1011854b
mov dword [ebp - 0x794], 0
lea edx, [ebp - 0x794]
mov dword [ebp - 0x798], edx
mov eax, dword [ebp - 0x268]
or eax, 0x4000
mov dword [ebp - 0x268], eax
mov ecx, dword [ebp - 0x798]
mov dword [ebp - 0x6e8], ecx
mov edx, dword [ebp - 0x6e8]
mov dword [ebp - 0x79c], edx
mov eax, dword [ebp - 0x79c]
mov ecx, dword [eax]
mov dword [ebp - 0x3fc], ecx
mov edx, dword [ebp - 0x268]
or edx, 0x8000
mov dword [ebp - 0x268], edx
mov eax, dword [ebp - 0x268]
and eax, 0x4000
je 0x1011858e
and dword [ebp - 0x268], 0xffffbfff
mov ecx, dword [ebp - 0x268]
and ecx, 0x2000
je 0x101185a6
and dword [ebp - 0x268], 0xffffdfff
mov edx, dword [ebp - 0x268]
or edx, 0x1000
mov dword [ebp - 0x268], edx
lea eax, [ebp - 0x3fc]
mov dword [ebp - 0x7a0], eax
mov ecx, dword [ebp - 0x278]
add ecx, 0x28
mov dword [ebp - 0x30c], ecx
mov dword [ebp - 0x7a4], 0x10146750
mov edx, dword [ebp - 0x30c]
movzx eax, byte [edx + 0x10]
test eax, eax
je 0x101185fb
mov ecx, 0x24
add ecx, 1
mov dword [ebp - 0x6ec], ecx
jmp 0x10118605
mov dword [ebp - 0x6ec], 0x24
mov edx, dword [ebp - 0x6ec]
mov dword [ebp - 0x6f0], edx
mov eax, dword [ebp - 0x30c]
cmp dword [eax + 4], 0
je 0x10118643
mov ecx, dword [ebp - 0x30c]
add ecx, 8
call fcn.1007d4d0
movzx ecx, al
test ecx, ecx
je 0x10118643
mov edx, dword [ebp - 0x30c]
mov eax, dword [ebp - 0x6f0]
cmp eax, dword [edx + 0xc]
jbe 0x10118670
mov dword [ebp - 0x404], 0
mov ecx, dword [ebp - 0x268]
or ecx, 0x10000
mov dword [ebp - 0x268], ecx
lea edx, [ebp - 0x404]
mov dword [ebp - 0x7cc], edx
jmp 0x101187c4
mov eax, dword [ebp - 0x7a4]
mov dword [ebp - 0x7a8], eax
mov ecx, dword [ebp - 0x7a8]
mov dword [ebp - 0x7b0], ecx
mov edx, dword [ebp - 0x30c]
add edx, 8
mov dword [ebp - 0x7ac], edx
mov eax, dword [ebp - 0x6f0]
push eax
mov ecx, dword [ebp - 0x7ac]
call fcn.1007d510
mov ecx, dword [ebp - 0x7b0]
mov dword [eax], ecx
mov edx, 0x24
shl edx, 2
mov eax, dword [ebp - 0x30c]
add edx, dword [eax + 4]
mov dword [ebp - 0x6f4], edx
mov ecx, dword [ebp - 0x6f4]
cmp dword [ecx], 0
je 0x10118718
mov edx, dword [ebp - 0x6f4]
mov eax, dword [edx]
mov dword [ebp - 0x7b4], eax
mov ecx, dword [ebp - 0x7b4]
mov dword [ebp - 0x7b8], ecx
lea edx, [ebp - 0x7b8]
mov dword [ebp - 0x7bc], edx
mov eax, dword [ebp - 0x268]
or eax, 0x20000
mov dword [ebp - 0x268], eax
mov ecx, dword [ebp - 0x7bc]
mov dword [ebp - 0x6f8], ecx
jmp 0x1011874b
mov dword [ebp - 0x7c0], 0
lea edx, [ebp - 0x7c0]
mov dword [ebp - 0x7c4], edx
mov eax, dword [ebp - 0x268]
or eax, 0x40000
mov dword [ebp - 0x268], eax
mov ecx, dword [ebp - 0x7c4]
mov dword [ebp - 0x6f8], ecx
mov edx, dword [ebp - 0x6f8]
mov dword [ebp - 0x7c8], edx
mov eax, dword [ebp - 0x7c8]
mov ecx, dword [eax]
mov dword [ebp - 0x404], ecx
mov edx, dword [ebp - 0x268]
or edx, 0x80000
mov dword [ebp - 0x268], edx
mov eax, dword [ebp - 0x268]
and eax, 0x40000
je 0x1011878e
and dword [ebp - 0x268], 0xfffbffff
mov ecx, dword [ebp - 0x268]
and ecx, 0x20000
je 0x101187a6
and dword [ebp - 0x268], 0xfffdffff
mov edx, dword [ebp - 0x268]
or edx, 0x10000
mov dword [ebp - 0x268], edx
lea eax, [ebp - 0x404]
mov dword [ebp - 0x7cc], eax
mov ecx, dword [ebp - 0x278]
add ecx, 0x28
mov dword [ebp - 0x310], ecx
mov dword [ebp - 0x7d0], 0x1016c8d0
mov edx, dword [ebp - 0x310]
movzx eax, byte [edx + 0x10]
test eax, eax
je 0x101187fb
mov ecx, 0x17
add ecx, 1
mov dword [ebp - 0x6fc], ecx
jmp 0x10118805
mov dword [ebp - 0x6fc], 0x17
mov edx, dword [ebp - 0x6fc]
mov dword [ebp - 0x700], edx
mov eax, dword [ebp - 0x310]
cmp dword [eax + 4], 0
je 0x10118843
mov ecx, dword [ebp - 0x310]
add ecx, 8
call fcn.1007d4d0
movzx ecx, al
test ecx, ecx
je 0x10118843
mov edx, dword [ebp - 0x310]
mov eax, dword [ebp - 0x700]
cmp eax, dword [edx + 0xc]
jbe 0x10118870
mov dword [ebp - 0x414], 0
mov ecx, dword [ebp - 0x268]
or ecx, 0x100000
mov dword [ebp - 0x268], ecx
lea edx, [ebp - 0x414]
mov dword [ebp - 0x7f8], edx
jmp 0x101189c4
mov eax, dword [ebp - 0x7d0]
mov dword [ebp - 0x7d4], eax
mov ecx, dword [ebp - 0x7d4]
mov dword [ebp - 0x7dc], ecx
mov edx, dword [ebp - 0x310]
add edx, 8
mov dword [ebp - 0x7d8], edx
mov eax, dword [ebp - 0x700]
push eax
mov ecx, dword [ebp - 0x7d8]
call fcn.1007d510
mov ecx, dword [ebp - 0x7dc]
mov dword [eax], ecx
mov edx, 0x17
shl edx, 2
mov eax, dword [ebp - 0x310]
add edx, dword [eax + 4]
mov dword [ebp - 0x464], edx
mov ecx, dword [ebp - 0x464]
cmp dword [ecx], 0
je 0x10118918
mov edx, dword [ebp - 0x464]
mov eax, dword [edx]
mov dword [ebp - 0x7e0], eax
mov ecx, dword [ebp - 0x7e0]
mov dword [ebp - 0x7e4], ecx
lea edx, [ebp - 0x7e4]
mov dword [ebp - 0x7e8], edx
mov eax, dword [ebp - 0x268]
or eax, 0x200000
mov dword [ebp - 0x268], eax
mov ecx, dword [ebp - 0x7e8]
mov dword [ebp - 0x468], ecx
jmp 0x1011894b
mov dword [ebp - 0x7ec], 0
lea edx, [ebp - 0x7ec]
mov dword [ebp - 0x7f0], edx
mov eax, dword [ebp - 0x268]
or eax, 0x400000
mov dword [ebp - 0x268], eax
mov ecx, dword [ebp - 0x7f0]
mov dword [ebp - 0x468], ecx
mov edx, dword [ebp - 0x468]
mov dword [ebp - 0x7f4], edx
mov eax, dword [ebp - 0x7f4]
mov ecx, dword [eax]
mov dword [ebp - 0x414], ecx
mov edx, dword [ebp - 0x268]
or edx, 0x800000
mov dword [ebp - 0x268], edx
mov eax, dword [ebp - 0x268]
and eax, 0x400000
je 0x1011898e
and dword [ebp - 0x268], 0xffbfffff
mov ecx, dword [ebp - 0x268]
and ecx, 0x200000
je 0x101189a6
and dword [ebp - 0x268], 0xffdfffff
mov edx, dword [ebp - 0x268]
or edx, 0x100000
mov dword [ebp - 0x268], edx
lea eax, [ebp - 0x414]
mov dword [ebp - 0x7f8], eax
mov ecx, dword [ebp - 0x278]
add ecx, 0x50
mov dword [ebp - 0x2a0], ecx
mov edx, dword [0x10452c18]
mov dword [ebp - 0x7fc], edx
lea eax, [ebp - 0x314]
mov dword [ebp - 0x46c], eax
mov ecx, dword [ebp - 0x46c]
mov edx, dword [ebp - 0x7fc]
mov dword [ecx], edx
mov eax, dword [ebp - 0x46c]
mov dword [ebp - 0xf2c], eax
mov dword [ebp - 4], 2
mov ecx, dword [ebp - 0x2a0]
mov edx, dword [ebp - 0x314]
mov dword [ecx], edx
mov eax, dword [ebp - 0x314]
mov ecx, dword [eax]
mov dword [ebp - 0x800], ecx
mov edx, dword [ebp - 0x2a0]
mov eax, dword [ebp - 0x800]
mov dword [edx + 4], eax
mov ecx, dword [ebp - 0x2a0]
cmp dword [ecx + 4], 0
jne 0x10118a4f
mov dword [ebp - 4], 0xffffffff
jmp 0x10118c83
mov dword [ebp - 0x388], 0
mov edx, dword [ebp - 0x2a0]
mov eax, dword [edx + 4]
mov ecx, dword [ebp - 0x388]
mov edx, dword [eax + ecx*4]
mov dword [ebp - 0x470], edx
cmp dword [ebp - 0x470], 0
jne 0x10118a83
mov byte [ebp - 0x285], 0
jmp 0x10118ad4
mov eax, dword [0x1036780c]
mov dword [ebp - 0x804], eax
push 0x1c
lea ecx, [ebp - 0x90]
push ecx
mov edx, dword [ebp - 0x470]
push edx
call dword [ebp - 0x804]
test eax, eax
jne 0x10118ab1
mov byte [ebp - 0x285], 0
jmp 0x10118ad4
mov eax, dword [ebp - 0x7c]
and eax, 1
jne 0x10118ac4
mov ecx, dword [ebp - 0x7c]
and ecx, 0x100
je 0x10118acd
mov byte [ebp - 0x285], 0
jmp 0x10118ad4
mov byte [ebp - 0x285], 1
movzx edx, byte [ebp - 0x285]
test edx, edx
je 0x10118af3
mov eax, dword [ebp - 0x388]
add eax, 1
mov dword [ebp - 0x388], eax
jmp 0x10118a59
mov ecx, dword [ebp - 0x2a0]
mov edx, dword [ebp - 0x388]
mov dword [ecx + 0xc], edx
mov eax, dword [ebp - 0x2a0]
cmp dword [eax + 0xc], 0
jne 0x10118b1a
mov dword [ebp - 4], 0xffffffff
jmp 0x10118c83
mov ecx, 1
test ecx, ecx
je 0x10118b37
mov edx, dword [ebp - 0x2a0]
mov eax, dword [edx + 0xc]
add eax, 1
mov dword [ebp - 0x474], eax
jmp 0x10118b46
mov ecx, dword [ebp - 0x2a0]
mov edx, dword [ecx + 0xc]
mov dword [ebp - 0x474], edx
mov edx, dword [ebp - 0x474]
lea ecx, [ebp - 0x80c]
call fcn.10081640
mov dword [ebp - 0x808], eax
mov eax, dword [ebp - 0x808]
push eax
mov ecx, dword [ebp - 0x2a0]
add ecx, 8
call fcn.100816e0
lea ecx, [ebp - 0x80c]
call fcn.1007d530
mov ecx, dword [ebp - 0x2a0]
add ecx, 8
call fcn.1007d4d0
movzx ecx, al
test ecx, ecx
jne 0x10118b9e
mov dword [ebp - 4], 0xffffffff
jmp 0x10118c83
mov ecx, dword [ebp - 0x2a0]
add ecx, 8
call fcn.1007d4f0
mov dword [ebp - 0x810], eax
mov edx, dword [ebp - 0x810]
mov dword [ebp - 0x50], edx
mov eax, 1
test eax, eax
je 0x10118c37
mov ecx, dword [ebp - 0x50]
mov dword [ebp - 0x814], ecx
mov edx, dword [ebp - 0x2a0]
mov eax, dword [edx + 0xc]
lea ecx, [eax*4 + 4]
push ecx
mov edx, dword [ebp - 0x2a0]
mov eax, dword [edx + 4]
sub eax, 4
push eax
mov ecx, dword [ebp - 0x814]
push ecx
call fcn.101d8af0
add esp, 0xc
mov edx, dword [ebp - 0x50]
mov dword [ebp - 0x818], edx
mov eax, dword [ebp - 0x818]
add eax, 4
mov dword [ebp - 0x81c], eax
cmp dword [ebp - 0x314], 0
jne 0x10118c1d
jmp 0x10118c2b
mov ecx, dword [ebp - 0x314]
mov edx, dword [ebp - 0x81c]
mov dword [ecx], edx
mov eax, dword [ebp - 0x2a0]
mov byte [eax + 0x10], 1
jmp 0x10118c7c
mov ecx, dword [ebp - 0x50]
mov dword [ebp - 0x820], ecx
mov edx, dword [ebp - 0x2a0]
mov eax, dword [edx + 0xc]
shl eax, 2
push eax
mov ecx, dword [ebp - 0x2a0]
mov edx, dword [ecx + 4]
push edx
mov eax, dword [ebp - 0x820]
push eax
call fcn.101d8af0
add esp, 0xc
cmp dword [ebp - 0x314], 0
jne 0x10118c71
jmp 0x10118c7c
mov ecx, dword [ebp - 0x50]
mov edx, dword [ebp - 0x314]
mov dword [edx], ecx
mov dword [ebp - 4], 0xffffffff
mov eax, dword [ebp - 0x278]
add eax, 0x50
mov dword [ebp - 0x318], eax
mov dword [ebp - 0x824], 0x101442d0
mov ecx, dword [ebp - 0x318]
movzx edx, byte [ecx + 0x10]
test edx, edx
je 0x10118cba
mov eax, 0x1b
add eax, 1
mov dword [ebp - 0x478], eax
jmp 0x10118cc4
mov dword [ebp - 0x478], 0x1b
mov ecx, dword [ebp - 0x478]
mov dword [ebp - 0x47c], ecx
mov edx, dword [ebp - 0x318]
cmp dword [edx + 4], 0
je 0x10118d02
mov ecx, dword [ebp - 0x318]
add ecx, 8
call fcn.1007d4d0
movzx eax, al
test eax, eax
je 0x10118d02
mov ecx, dword [ebp - 0x318]
mov edx, dword [ebp - 0x47c]
cmp edx, dword [ecx + 0xc]
jbe 0x10118d2e
mov dword [ebp - 0x41c], 0
mov eax, dword [ebp - 0x268]
or eax, 0x1000000
mov dword [ebp - 0x268], eax
lea ecx, [ebp - 0x41c]
mov dword [ebp - 0x84c], ecx
jmp 0x10118e82
mov edx, dword [ebp - 0x824]
mov dword [ebp - 0x828], edx
mov eax, dword [ebp - 0x828]
mov dword [ebp - 0x830], eax
mov ecx, dword [ebp - 0x318]
add ecx, 8
mov dword [ebp - 0x82c], ecx
mov edx, dword [ebp - 0x47c]
push edx
mov ecx, dword [ebp - 0x82c]
call fcn.1007d510
mov ecx, dword [ebp - 0x830]
mov dword [eax], ecx
mov edx, 0x1b
shl edx, 2
mov eax, dword [ebp - 0x318]
add edx, dword [eax + 4]
mov dword [ebp - 0x480], edx
mov ecx, dword [ebp - 0x480]
cmp dword [ecx], 0
je 0x10118dd6
mov edx, dword [ebp - 0x480]
mov eax, dword [edx]
mov dword [ebp - 0x834], eax
mov ecx, dword [ebp - 0x834]
mov dword [ebp - 0x838], ecx
lea edx, [ebp - 0x838]
mov dword [ebp - 0x83c], edx
mov eax, dword [ebp - 0x268]
or eax, 0x2000000
mov dword [ebp - 0x268], eax
mov ecx, dword [ebp - 0x83c]
mov dword [ebp - 0x484], ecx
jmp 0x10118e09
mov dword [ebp - 0x840], 0
lea edx, [ebp - 0x840]
mov dword [ebp - 0x844], edx
mov eax, dword [ebp - 0x268]
or eax, 0x4000000
mov dword [ebp - 0x268], eax
mov ecx, dword [ebp - 0x844]
mov dword [ebp - 0x484], ecx
mov edx, dword [ebp - 0x484]
mov dword [ebp - 0x848], edx
mov eax, dword [ebp - 0x848]
mov ecx, dword [eax]
mov dword [ebp - 0x41c], ecx
mov edx, dword [ebp - 0x268]
or edx, 0x8000000
mov dword [ebp - 0x268], edx
mov eax, dword [ebp - 0x268]
and eax, 0x4000000
je 0x10118e4c
and dword [ebp - 0x268], 0xfbffffff
mov ecx, dword [ebp - 0x268]
and ecx, 0x2000000
je 0x10118e64
and dword [ebp - 0x268], 0xfdffffff
mov edx, dword [ebp - 0x268]
or edx, 0x1000000
mov dword [ebp - 0x268], edx
lea eax, [ebp - 0x41c]
mov dword [ebp - 0x84c], eax
mov ecx, dword [ebp - 0x278]
add ecx, 0x50
mov dword [ebp - 0x31c], ecx
mov dword [ebp - 0x850], 0x101444f0
mov edx, dword [ebp - 0x31c]
movzx eax, byte [edx + 0x10]
test eax, eax
je 0x10118eb9
mov ecx, 0x5d
add ecx, 1
mov dword [ebp - 0x488], ecx
jmp 0x10118ec3
mov dword [ebp - 0x488], 0x5d
mov edx, dword [ebp - 0x488]
mov dword [ebp - 0x48c], edx
mov eax, dword [ebp - 0x31c]
cmp dword [eax + 4], 0
je 0x10118f01
mov ecx, dword [ebp - 0x31c]
add ecx, 8
call fcn.1007d4d0
movzx ecx, al
test ecx, ecx
je 0x10118f01
mov edx, dword [ebp - 0x31c]
mov eax, dword [ebp - 0x48c]
cmp eax, dword [edx + 0xc]
jbe 0x10118f2e
mov dword [ebp - 0x420], 0
mov ecx, dword [ebp - 0x268]
or ecx, 0x10000000
mov dword [ebp - 0x268], ecx
lea edx, [ebp - 0x420]
mov dword [ebp - 0x878], edx
jmp 0x10119082
mov eax, dword [ebp - 0x850]
mov dword [ebp - 0x854], eax
mov ecx, dword [ebp - 0x854]
mov dword [ebp - 0x85c], ecx
mov edx, dword [ebp - 0x31c]
add edx, 8
mov dword [ebp - 0x858], edx
mov eax, dword [ebp - 0x48c]
push eax
mov ecx, dword [ebp - 0x858]
call fcn.1007d510
mov ecx, dword [ebp - 0x85c]
mov dword [eax], ecx
mov edx, 0x5d
shl edx, 2
mov eax, dword [ebp - 0x31c]
add edx, dword [eax + 4]
mov dword [ebp - 0x490], edx
mov ecx, dword [ebp - 0x490]
cmp dword [ecx], 0
je 0x10118fd6
mov edx, dword [ebp - 0x490]
mov eax, dword [edx]
mov dword [ebp - 0x860], eax
mov ecx, dword [ebp - 0x860]
mov dword [ebp - 0x864], ecx
lea edx, [ebp - 0x864]
mov dword [ebp - 0x868], edx
mov eax, dword [ebp - 0x268]
or eax, 0x20000000
mov dword [ebp - 0x268], eax
mov ecx, dword [ebp - 0x868]
mov dword [ebp - 0x494], ecx
jmp 0x10119009
mov dword [ebp - 0x86c], 0
lea edx, [ebp - 0x86c]
mov dword [ebp - 0x870], edx
mov eax, dword [ebp - 0x268]
or eax, 0x40000000
mov dword [ebp - 0x268], eax
mov ecx, dword [ebp - 0x870]
mov dword [ebp - 0x494], ecx
mov edx, dword [ebp - 0x494]
mov dword [ebp - 0x874], edx
mov eax, dword [ebp - 0x874]
mov ecx, dword [eax]
mov dword [ebp - 0x420], ecx
mov edx, dword [ebp - 0x268]
or edx, 0x80000000
mov dword [ebp - 0x268], edx
mov eax, dword [ebp - 0x268]
and eax, 0x40000000
je 0x1011904c
and dword [ebp - 0x268], 0xbfffffff
mov ecx, dword [ebp - 0x268]
and ecx, 0x20000000
je 0x10119064
and dword [ebp - 0x268], 0xdfffffff
mov edx, dword [ebp - 0x268]
or edx, 0x10000000
mov dword [ebp - 0x268], edx
lea eax, [ebp - 0x420]
mov dword [ebp - 0x878], eax
mov ecx, dword [ebp - 0x278]
add ecx, 0x78
mov dword [ebp - 0x2c8], ecx
mov edx, dword [0x10452c30]
mov dword [ebp - 0x87c], edx
lea eax, [ebp - 0x320]
mov dword [ebp - 0x498], eax
mov ecx, dword [ebp - 0x498]
mov edx, dword [ebp - 0x87c]
mov dword [ecx], edx
mov eax, dword [ebp - 0x498]
mov dword [ebp - 0xf30], eax
mov dword [ebp - 4], 3
mov ecx, dword [ebp - 0x2c8]
mov edx, dword [ebp - 0x320]
mov dword [ecx], edx
mov eax, dword [ebp - 0x320]
mov ecx, dword [eax]
mov dword [ebp - 0x880], ecx
mov edx, dword [ebp - 0x2c8]
mov eax, dword [ebp - 0x880]
mov dword [edx + 4], eax
mov ecx, dword [ebp - 0x2c8]
cmp dword [ecx + 4], 0
jne 0x1011910d
mov dword [ebp - 4], 0xffffffff
jmp 0x10119347
mov dword [ebp - 0x3c4], 0
mov edx, dword [ebp - 0x2c8]
mov eax, dword [edx + 4]
mov ecx, dword [ebp - 0x3c4]
mov edx, dword [eax + ecx*4]
mov dword [ebp - 0x49c], edx
cmp dword [ebp - 0x49c], 0
jne 0x10119141
mov byte [ebp - 0x286], 0
jmp 0x10119198
mov eax, dword [0x1036780c]
mov dword [ebp - 0x884], eax
push 0x1c
lea ecx, [ebp - 0x11c]
push ecx
mov edx, dword [ebp - 0x49c]
push edx
call dword [ebp - 0x884]
test eax, eax
jne 0x1011916f
mov byte [ebp - 0x286], 0
jmp 0x10119198
mov eax, dword [ebp - 0x108]
and eax, 1
jne 0x10119188
mov ecx, dword [ebp - 0x108]
and ecx, 0x100
je 0x10119191
mov byte [ebp - 0x286], 0
jmp 0x10119198
mov byte [ebp - 0x286], 1
movzx edx, byte [ebp - 0x286]
test edx, edx
je 0x101191b7
mov eax, dword [ebp - 0x3c4]
add eax, 1
mov dword [ebp - 0x3c4], eax
jmp 0x10119117
mov ecx, dword [ebp - 0x2c8]
mov edx, dword [ebp - 0x3c4]
mov dword [ecx + 0xc], edx
mov eax, dword [ebp - 0x2c8]
cmp dword [eax + 0xc], 0
jne 0x101191de
mov dword [ebp - 4], 0xffffffff
jmp 0x10119347
mov ecx, 1
test ecx, ecx
je 0x101191fb
mov edx, dword [ebp - 0x2c8]
mov eax, dword [edx + 0xc]
add eax, 1
mov dword [ebp - 0x4a0], eax
jmp 0x1011920a
mov ecx, dword [ebp - 0x2c8]
mov edx, dword [ecx + 0xc]
mov dword [ebp - 0x4a0], edx
mov edx, dword [ebp - 0x4a0]
lea ecx, [ebp - 0x88c]
call fcn.10081640
mov dword [ebp - 0x888], eax
mov eax, dword [ebp - 0x888]
push eax
mov ecx, dword [ebp - 0x2c8]
add ecx, 8
call fcn.100816e0
lea ecx, [ebp - 0x88c]
call fcn.1007d530
mov ecx, dword [ebp - 0x2c8]
add ecx, 8
call fcn.1007d4d0
movzx ecx, al
test ecx, ecx
jne 0x10119262
mov dword [ebp - 4], 0xffffffff
jmp 0x10119347
mov ecx, dword [ebp - 0x2c8]
add ecx, 8
call fcn.1007d4f0
mov dword [ebp - 0x890], eax
mov edx, dword [ebp - 0x890]
mov dword [ebp - 0x4c], edx
mov eax, 1
test eax, eax
je 0x101192fb
mov ecx, dword [ebp - 0x4c]
mov dword [ebp - 0x894], ecx
mov edx, dword [ebp - 0x2c8]
mov eax, dword [edx + 0xc]
lea ecx, [eax*4 + 4]
push ecx
mov edx, dword [ebp - 0x2c8]
mov eax, dword [edx + 4]
sub eax, 4
push eax
mov ecx, dword [ebp - 0x894]
push ecx
call fcn.101d8af0
add esp, 0xc
mov edx, dword [ebp - 0x4c]
mov dword [ebp - 0x898], edx
mov eax, dword [ebp - 0x898]
add eax, 4
mov dword [ebp - 0x89c], eax
cmp dword [ebp - 0x320], 0
jne 0x101192e1
jmp 0x101192ef
mov ecx, dword [ebp - 0x320]
mov edx, dword [ebp - 0x89c]
mov dword [ecx], edx
mov eax, dword [ebp - 0x2c8]
mov byte [eax + 0x10], 1
jmp 0x10119340
mov ecx, dword [ebp - 0x4c]
mov dword [ebp - 0x8a0], ecx
mov edx, dword [ebp - 0x2c8]
mov eax, dword [edx + 0xc]
shl eax, 2
push eax
mov ecx, dword [ebp - 0x2c8]
mov edx, dword [ecx + 4]
push edx
mov eax, dword [ebp - 0x8a0]
push eax
call fcn.101d8af0
add esp, 0xc
cmp dword [ebp - 0x320], 0
jne 0x10119335
jmp 0x10119340
mov ecx, dword [ebp - 0x4c]
mov edx, dword [ebp - 0x320]
mov dword [edx], ecx
mov dword [ebp - 4], 0xffffffff
mov eax, dword [ebp - 0x278]
add eax, 0x78
mov dword [ebp - 0x328], eax
mov dword [ebp - 0x8a4], 0x1018a780
mov ecx, dword [ebp - 0x328]
movzx edx, byte [ecx + 0x10]
test edx, edx
je 0x1011937e
mov eax, 0xe
add eax, 1
mov dword [ebp - 0x4a4], eax
jmp 0x10119388
mov dword [ebp - 0x4a4], 0xe
mov ecx, dword [ebp - 0x4a4]
mov dword [ebp - 0x4a8], ecx
mov edx, dword [ebp - 0x328]
cmp dword [edx + 4], 0
je 0x101193c6
mov ecx, dword [ebp - 0x328]
add ecx, 8
call fcn.1007d4d0
movzx eax, al
test eax, eax
je 0x101193c6
mov ecx, dword [ebp - 0x328]
mov edx, dword [ebp - 0x4a8]
cmp edx, dword [ecx + 0xc]
jbe 0x101193f0
mov dword [ebp - 0x424], 0
mov eax, dword [ebp - 0x26c]
or eax, 1
mov dword [ebp - 0x26c], eax
lea ecx, [ebp - 0x424]
mov dword [ebp - 0x8cc], ecx
jmp 0x1011952f
mov edx, dword [ebp - 0x8a4]
mov dword [ebp - 0x8a8], edx
mov eax, dword [ebp - 0x8a8]
mov dword [ebp - 0x8b0], eax
mov ecx, dword [ebp - 0x328]
add ecx, 8
mov dword [ebp - 0x8ac], ecx
mov edx, dword [ebp - 0x4a8]
push edx
mov ecx, dword [ebp - 0x8ac]
call fcn.1007d510
mov ecx, dword [ebp - 0x8b0]
mov dword [eax], ecx
mov edx, 0xe
shl edx, 2
mov eax, dword [ebp - 0x328]
add edx, dword [eax + 4]
mov dword [ebp - 0x4ac], edx
mov ecx, dword [ebp - 0x4ac]
cmp dword [ecx], 0
je 0x10119496
mov edx, dword [ebp - 0x4ac]
mov eax, dword [edx]
mov dword [ebp - 0x8b4], eax
mov ecx, dword [ebp - 0x8b4]
mov dword [ebp - 0x8b8], ecx
lea edx, [ebp - 0x8b8]
mov dword [ebp - 0x8bc], edx
mov eax, dword [ebp - 0x26c]
or eax, 2
mov dword [ebp - 0x26c], eax
mov ecx, dword [ebp - 0x8bc]
mov dword [ebp - 0x4b0], ecx
jmp 0x101194c7
mov dword [ebp - 0x8c0], 0
lea edx, [ebp - 0x8c0]
mov dword [ebp - 0x8c4], edx
mov eax, dword [ebp - 0x26c]
or eax, 4
mov dword [ebp - 0x26c], eax
mov ecx, dword [ebp - 0x8c4]
mov dword [ebp - 0x4b0], ecx
mov edx, dword [ebp - 0x4b0]
mov dword [ebp - 0x8c8], edx
mov eax, dword [ebp - 0x8c8]
mov ecx, dword [eax]
mov dword [ebp - 0x424], ecx
mov edx, dword [ebp - 0x26c]
or edx, 8
mov dword [ebp - 0x26c], edx
mov eax, dword [ebp - 0x26c]
and eax, 4
je 0x10119502
and dword [ebp - 0x26c], 0xfffffffb
mov ecx, dword [ebp - 0x26c]
and ecx, 2
je 0x10119514
and dword [ebp - 0x26c], 0xfffffffd
mov edx, dword [ebp - 0x26c]
or edx, 1
mov dword [ebp - 0x26c], edx
lea eax, [ebp - 0x424]
mov dword [ebp - 0x8cc], eax
mov ecx, dword [ebp - 0x278]
add ecx, 0x78
mov dword [ebp - 0x32c], ecx
mov dword [ebp - 0x8d0], 0x1018ac50
mov edx, dword [ebp - 0x32c]
movzx eax, byte [edx + 0x10]
test eax, eax
je 0x10119566
mov ecx, 0x13
add ecx, 1
mov dword [ebp - 0x4b4], ecx
jmp 0x10119570
mov dword [ebp - 0x4b4], 0x13
mov edx, dword [ebp - 0x4b4]
mov dword [ebp - 0x4b8], edx
mov eax, dword [ebp - 0x32c]
cmp dword [eax + 4], 0
je 0x101195ae
mov ecx, dword [ebp - 0x32c]
add ecx, 8
call fcn.1007d4d0
movzx ecx, al
test ecx, ecx
je 0x101195ae
mov edx, dword [ebp - 0x32c]
mov eax, dword [ebp - 0x4b8]
cmp eax, dword [edx + 0xc]
jbe 0x101195d8
mov dword [ebp - 0x3f0], 0
mov ecx, dword [ebp - 0x26c]
or ecx, 0x10
mov dword [ebp - 0x26c], ecx
lea edx, [ebp - 0x3f0]
mov dword [ebp - 0x8f8], edx
jmp 0x1011971a
mov eax, dword [ebp - 0x8d0]
mov dword [ebp - 0x8d4], eax
mov ecx, dword [ebp - 0x8d4]
mov dword [ebp - 0x8dc], ecx
mov edx, dword [ebp - 0x32c]
add edx, 8
mov dword [ebp - 0x8d8], edx
mov eax, dword [ebp - 0x4b8]
push eax
mov ecx, dword [ebp - 0x8d8]
call fcn.1007d510
mov ecx, dword [ebp - 0x8dc]
mov dword [eax], ecx
mov edx, 0x13
shl edx, 2
mov eax, dword [ebp - 0x32c]
add edx, dword [eax + 4]
mov dword [ebp - 0x4bc], edx
mov ecx, dword [ebp - 0x4bc]
cmp dword [ecx], 0
je 0x1011967e
mov edx, dword [ebp - 0x4bc]
mov eax, dword [edx]
mov dword [ebp - 0x8e0], eax
mov ecx, dword [ebp - 0x8e0]
mov dword [ebp - 0x8e4], ecx
lea edx, [ebp - 0x8e4]
mov dword [ebp - 0x8e8], edx
mov eax, dword [ebp - 0x26c]
or eax, 0x20
mov dword [ebp - 0x26c], eax
mov ecx, dword [ebp - 0x8e8]
mov dword [ebp - 0x4c0], ecx
jmp 0x101196af
mov dword [ebp - 0x8ec], 0
lea edx, [ebp - 0x8ec]
mov dword [ebp - 0x8f0], edx
mov eax, dword [ebp - 0x26c]
or eax, 0x40
mov dword [ebp - 0x26c], eax
mov ecx, dword [ebp - 0x8f0]
mov dword [ebp - 0x4c0], ecx
mov edx, dword [ebp - 0x4c0]
mov dword [ebp - 0x8f4], edx
mov eax, dword [ebp - 0x8f4]
mov ecx, dword [eax]
mov dword [ebp - 0x3f0], ecx
mov edx, dword [ebp - 0x26c]
or edx, 0x80
mov dword [ebp - 0x26c], edx
mov eax, dword [ebp - 0x26c]
and eax, 0x40
je 0x101196ed
and dword [ebp - 0x26c], 0xffffffbf
mov ecx, dword [ebp - 0x26c]
and ecx, 0x20
je 0x101196ff
and dword [ebp - 0x26c], 0xffffffdf
mov edx, dword [ebp - 0x26c]
or edx, 0x10
mov dword [ebp - 0x26c], edx
lea eax, [ebp - 0x3f0]
mov dword [ebp - 0x8f8], eax
mov ecx, dword [ebp - 0x278]
add ecx, 0x14
mov dword [ebp - 0x2c4], ecx
mov edx, dword [0x10452c70]
mov dword [ebp - 0x8fc], edx
lea eax, [ebp - 0x330]
mov dword [ebp - 0x4c4], eax
mov ecx, dword [ebp - 0x4c4]
mov edx, dword [ebp - 0x8fc]
mov dword [ecx], edx
mov eax, dword [ebp - 0x4c4]
mov dword [ebp - 0xf34], eax
mov dword [ebp - 4], 4
mov ecx, dword [ebp - 0x2c4]
mov edx, dword [ebp - 0x330]
mov dword [ecx], edx
mov eax, dword [ebp - 0x330]
mov ecx, dword [eax]
mov dword [ebp - 0x900], ecx
mov edx, dword [ebp - 0x2c4]
mov eax, dword [ebp - 0x900]
mov dword [edx + 4], eax
mov ecx, dword [ebp - 0x2c4]
cmp dword [ecx + 4], 0
jne 0x101197a5
mov dword [ebp - 4], 0xffffffff
jmp 0x101199df
mov dword [ebp - 0x38c], 0
mov edx, dword [ebp - 0x2c4]
mov eax, dword [edx + 4]
mov ecx, dword [ebp - 0x38c]
mov edx, dword [eax + ecx*4]
mov dword [ebp - 0x4c8], edx
cmp dword [ebp - 0x4c8], 0
jne 0x101197d9
mov byte [ebp - 0x287], 0
jmp 0x10119830
mov eax, dword [0x1036780c]
mov dword [ebp - 0x904], eax
push 0x1c
lea ecx, [ebp - 0x138]
push ecx
mov edx, dword [ebp - 0x4c8]
push edx
call dword [ebp - 0x904]
test eax, eax
jne 0x10119807
mov byte [ebp - 0x287], 0
jmp 0x10119830
mov eax, dword [ebp - 0x124]
and eax, 1
jne 0x10119820
mov ecx, dword [ebp - 0x124]
and ecx, 0x100
je 0x10119829
mov byte [ebp - 0x287], 0
jmp 0x10119830
mov byte [ebp - 0x287], 1
movzx edx, byte [ebp - 0x287]
test edx, edx
je 0x1011984f
mov eax, dword [ebp - 0x38c]
add eax, 1
mov dword [ebp - 0x38c], eax
jmp 0x101197af
mov ecx, dword [ebp - 0x2c4]
mov edx, dword [ebp - 0x38c]
mov dword [ecx + 0xc], edx
mov eax, dword [ebp - 0x2c4]
cmp dword [eax + 0xc], 0
jne 0x10119876
mov dword [ebp - 4], 0xffffffff
jmp 0x101199df
mov ecx, 1
test ecx, ecx
je 0x10119893
mov edx, dword [ebp - 0x2c4]
mov eax, dword [edx + 0xc]
add eax, 1
mov dword [ebp - 0x4cc], eax
jmp 0x101198a2
mov ecx, dword [ebp - 0x2c4]
mov edx, dword [ecx + 0xc]
mov dword [ebp - 0x4cc], edx
mov edx, dword [ebp - 0x4cc]
lea ecx, [ebp - 0x90c]
call fcn.10081640
mov dword [ebp - 0x908], eax
mov eax, dword [ebp - 0x908]
push eax
mov ecx, dword [ebp - 0x2c4]
add ecx, 8
call fcn.100816e0
lea ecx, [ebp - 0x90c]
call fcn.1007d530
mov ecx, dword [ebp - 0x2c4]
add ecx, 8
call fcn.1007d4d0
movzx ecx, al
test ecx, ecx
jne 0x101198fa
mov dword [ebp - 4], 0xffffffff
jmp 0x101199df
mov ecx, dword [ebp - 0x2c4]
add ecx, 8
call fcn.1007d4f0
mov dword [ebp - 0x910], eax
mov edx, dword [ebp - 0x910]
mov dword [ebp - 0x24], edx
mov eax, 1
test eax, eax
je 0x10119993
mov ecx, dword [ebp - 0x24]
mov dword [ebp - 0x914], ecx
mov edx, dword [ebp - 0x2c4]
mov eax, dword [edx + 0xc]
lea ecx, [eax*4 + 4]
push ecx
mov edx, dword [ebp - 0x2c4]
mov eax, dword [edx + 4]
sub eax, 4
push eax
mov ecx, dword [ebp - 0x914]
push ecx
call fcn.101d8af0
add esp, 0xc
mov edx, dword [ebp - 0x24]
mov dword [ebp - 0x918], edx
mov eax, dword [ebp - 0x918]
add eax, 4
mov dword [ebp - 0x91c], eax
cmp dword [ebp - 0x330], 0
jne 0x10119979
jmp 0x10119987
mov ecx, dword [ebp - 0x330]
mov edx, dword [ebp - 0x91c]
mov dword [ecx], edx
mov eax, dword [ebp - 0x2c4]
mov byte [eax + 0x10], 1
jmp 0x101199d8
mov ecx, dword [ebp - 0x24]
mov dword [ebp - 0x920], ecx
mov edx, dword [ebp - 0x2c4]
mov eax, dword [edx + 0xc]
shl eax, 2
push eax
mov ecx, dword [ebp - 0x2c4]
mov edx, dword [ecx + 4]
push edx
mov eax, dword [ebp - 0x920]
push eax
call fcn.101d8af0
add esp, 0xc
cmp dword [ebp - 0x330], 0
jne 0x101199cd
jmp 0x101199d8
mov ecx, dword [ebp - 0x24]
mov edx, dword [ebp - 0x330]
mov dword [edx], ecx
mov dword [ebp - 4], 0xffffffff
mov eax, dword [ebp - 0x278]
add eax, 0x14
mov dword [ebp - 0x334], eax
mov dword [ebp - 0x924], 0x1016c600
mov ecx, dword [ebp - 0x334]
movzx edx, byte [ecx + 0x10]
test edx, edx
je 0x10119a16
mov eax, 0x10
add eax, 1
mov dword [ebp - 0x4d0], eax
jmp 0x10119a20
mov dword [ebp - 0x4d0], 0x10
mov ecx, dword [ebp - 0x4d0]
mov dword [ebp - 0x4d4], ecx
mov edx, dword [ebp - 0x334]
cmp dword [edx + 4], 0
je 0x10119a5e
mov ecx, dword [ebp - 0x334]
add ecx, 8
call fcn.1007d4d0
movzx eax, al
test eax, eax
je 0x10119a5e
mov ecx, dword [ebp - 0x334]
mov edx, dword [ebp - 0x4d4]
cmp edx, dword [ecx + 0xc]
jbe 0x10119a8a
mov dword [ebp - 0x428], 0
mov eax, dword [ebp - 0x26c]
or eax, 0x100
mov dword [ebp - 0x26c], eax
lea ecx, [ebp - 0x428]
mov dword [ebp - 0x94c], ecx
jmp 0x10119bde
mov edx, dword [ebp - 0x924]
mov dword [ebp - 0x928], edx
mov eax, dword [ebp - 0x928]
mov dword [ebp - 0x930], eax
mov ecx, dword [ebp - 0x334]
add ecx, 8
mov dword [ebp - 0x92c], ecx
mov edx, dword [ebp - 0x4d4]
push edx
mov ecx, dword [ebp - 0x92c]
call fcn.1007d510
mov ecx, dword [ebp - 0x930]
mov dword [eax], ecx
mov edx, 0x10
shl edx, 2
mov eax, dword [ebp - 0x334]
add edx, dword [eax + 4]
mov dword [ebp - 0x4d8], edx
mov ecx, dword [ebp - 0x4d8]
cmp dword [ecx], 0
je 0x10119b32
mov edx, dword [ebp - 0x4d8]
mov eax, dword [edx]
mov dword [ebp - 0x934], eax
mov ecx, dword [ebp - 0x934]
mov dword [ebp - 0x938], ecx
lea edx, [ebp - 0x938]
mov dword [ebp - 0x93c], edx
mov eax, dword [ebp - 0x26c]
or eax, 0x200
mov dword [ebp - 0x26c], eax
mov ecx, dword [ebp - 0x93c]
mov dword [ebp - 0x4dc], ecx
jmp 0x10119b65
mov dword [ebp - 0x940], 0
lea edx, [ebp - 0x940]
mov dword [ebp - 0x944], edx
mov eax, dword [ebp - 0x26c]
or eax, 0x400
mov dword [ebp - 0x26c], eax
mov ecx, dword [ebp - 0x944]
mov dword [ebp - 0x4dc], ecx
mov edx, dword [ebp - 0x4dc]
mov dword [ebp - 0x948], edx
mov eax, dword [ebp - 0x948]
mov ecx, dword [eax]
mov dword [ebp - 0x428], ecx
mov edx, dword [ebp - 0x26c]
or edx, 0x800
mov dword [ebp - 0x26c], edx
mov eax, dword [ebp - 0x26c]
and eax, 0x400
je 0x10119ba8
and dword [ebp - 0x26c], 0xfffffbff
mov ecx, dword [ebp - 0x26c]
and ecx, 0x200
je 0x10119bc0
and dword [ebp - 0x26c], 0xfffffdff
mov edx, dword [ebp - 0x26c]
or edx, 0x100
mov dword [ebp - 0x26c], edx
lea eax, [ebp - 0x428]
mov dword [ebp - 0x94c], eax
mov ecx, dword [ebp - 0x278]
add ecx, 0x14
mov dword [ebp - 0x338], ecx
mov dword [ebp - 0x950], 0x1016c620
mov edx, dword [ebp - 0x338]
movzx eax, byte [edx + 0x10]
test eax, eax
je 0x10119c15
mov ecx, 0x11
add ecx, 1
mov dword [ebp - 0x4e0], ecx
jmp 0x10119c1f
mov dword [ebp - 0x4e0], 0x11
mov edx, dword [ebp - 0x4e0]
mov dword [ebp - 0x4e4], edx
mov eax, dword [ebp - 0x338]
cmp dword [eax + 4], 0
je 0x10119c5d
mov ecx, dword [ebp - 0x338]
add ecx, 8
call fcn.1007d4d0
movzx ecx, al
test ecx, ecx
je 0x10119c5d
mov edx, dword [ebp - 0x338]
mov eax, dword [ebp - 0x4e4]
cmp eax, dword [edx + 0xc]
jbe 0x10119c8a
mov dword [ebp - 0x42c], 0
mov ecx, dword [ebp - 0x26c]
or ecx, 0x1000
mov dword [ebp - 0x26c], ecx
lea edx, [ebp - 0x42c]
mov dword [ebp - 0x978], edx
jmp 0x10119dde
mov eax, dword [ebp - 0x950]
mov dword [ebp - 0x954], eax
mov ecx, dword [ebp - 0x954]
mov dword [ebp - 0x95c], ecx
mov edx, dword [ebp - 0x338]
add edx, 8
mov dword [ebp - 0x958], edx
mov eax, dword [ebp - 0x4e4]
push eax
mov ecx, dword [ebp - 0x958]
call fcn.1007d510
mov ecx, dword [ebp - 0x95c]
mov dword [eax], ecx
mov edx, 0x11
shl edx, 2
mov eax, dword [ebp - 0x338]
add edx, dword [eax + 4]
mov dword [ebp - 0x4e8], edx
mov ecx, dword [ebp - 0x4e8]
cmp dword [ecx], 0
je 0x10119d32
mov edx, dword [ebp - 0x4e8]
mov eax, dword [edx]
mov dword [ebp - 0x960], eax
mov ecx, dword [ebp - 0x960]
mov dword [ebp - 0x964], ecx
lea edx, [ebp - 0x964]
mov dword [ebp - 0x968], edx
mov eax, dword [ebp - 0x26c]
or eax, 0x2000
mov dword [ebp - 0x26c], eax
mov ecx, dword [ebp - 0x968]
mov dword [ebp - 0x4ec], ecx
jmp 0x10119d65
mov dword [ebp - 0x96c], 0
lea edx, [ebp - 0x96c]
mov dword [ebp - 0x970], edx
mov eax, dword [ebp - 0x26c]
or eax, 0x4000
mov dword [ebp - 0x26c], eax
mov ecx, dword [ebp - 0x970]
mov dword [ebp - 0x4ec], ecx
mov edx, dword [ebp - 0x4ec]
mov dword [ebp - 0x974], edx
mov eax, dword [ebp - 0x974]
mov ecx, dword [eax]
mov dword [ebp - 0x42c], ecx
mov edx, dword [ebp - 0x26c]
or edx, 0x8000
mov dword [ebp - 0x26c], edx
mov eax, dword [ebp - 0x26c]
and eax, 0x4000
je 0x10119da8
and dword [ebp - 0x26c], 0xffffbfff
mov ecx, dword [ebp - 0x26c]
and ecx, 0x2000
je 0x10119dc0
and dword [ebp - 0x26c], 0xffffdfff
mov edx, dword [ebp - 0x26c]
or edx, 0x1000
mov dword [ebp - 0x26c], edx
lea eax, [ebp - 0x42c]
mov dword [ebp - 0x978], eax
mov ecx, dword [ebp - 0x278]
add ecx, 0x14
mov dword [ebp - 0x33c], ecx
mov dword [ebp - 0x97c], 0x1016c650
mov edx, dword [ebp - 0x33c]
movzx eax, byte [edx + 0x10]
test eax, eax
je 0x10119e15
mov ecx, 0x12
add ecx, 1
mov dword [ebp - 0x4f0], ecx
jmp 0x10119e1f
mov dword [ebp - 0x4f0], 0x12
mov edx, dword [ebp - 0x4f0]
mov dword [ebp - 0x4f4], edx
mov eax, dword [ebp - 0x33c]
cmp dword [eax + 4], 0
je 0x10119e5d
mov ecx, dword [ebp - 0x33c]
add ecx, 8
call fcn.1007d4d0
movzx ecx, al
test ecx, ecx
je 0x10119e5d
mov edx, dword [ebp - 0x33c]
mov eax, dword [ebp - 0x4f4]
cmp eax, dword [edx + 0xc]
jbe 0x10119e8a
mov dword [ebp - 0x460], 0
mov ecx, dword [ebp - 0x26c]
or ecx, 0x10000
mov dword [ebp - 0x26c], ecx
lea edx, [ebp - 0x460]
mov dword [ebp - 0x9a4], edx
jmp 0x10119fde
mov eax, dword [ebp - 0x97c]
mov dword [ebp - 0x980], eax
mov ecx, dword [ebp - 0x980]
mov dword [ebp - 0x988], ecx
mov edx, dword [ebp - 0x33c]
add edx, 8
mov dword [ebp - 0x984], edx
mov eax, dword [ebp - 0x4f4]
push eax
mov ecx, dword [ebp - 0x984]
call fcn.1007d510
mov ecx, dword [ebp - 0x988]
mov dword [eax], ecx
mov edx, 0x12
shl edx, 2
mov eax, dword [ebp - 0x33c]
add edx, dword [eax + 4]
mov dword [ebp - 0x4f8], edx
mov ecx, dword [ebp - 0x4f8]
cmp dword [ecx], 0
je 0x10119f32
mov edx, dword [ebp - 0x4f8]
mov eax, dword [edx]
mov dword [ebp - 0x98c], eax
mov ecx, dword [ebp - 0x98c]
mov dword [ebp - 0x990], ecx
lea edx, [ebp - 0x990]
mov dword [ebp - 0x994], edx
mov eax, dword [ebp - 0x26c]
or eax, 0x20000
mov dword [ebp - 0x26c], eax
mov ecx, dword [ebp - 0x994]
mov dword [ebp - 0x4fc], ecx
jmp 0x10119f65
mov dword [ebp - 0x998], 0
lea edx, [ebp - 0x998]
mov dword [ebp - 0x99c], edx
mov eax, dword [ebp - 0x26c]
or eax, 0x40000
mov dword [ebp - 0x26c], eax
mov ecx, dword [ebp - 0x99c]
mov dword [ebp - 0x4fc], ecx
mov edx, dword [ebp - 0x4fc]
mov dword [ebp - 0x9a0], edx
mov eax, dword [ebp - 0x9a0]
mov ecx, dword [eax]
mov dword [ebp - 0x460], ecx
mov edx, dword [ebp - 0x26c]
or edx, 0x80000
mov dword [ebp - 0x26c], edx
mov eax, dword [ebp - 0x26c]
and eax, 0x40000
je 0x10119fa8
and dword [ebp - 0x26c], 0xfffbffff
mov ecx, dword [ebp - 0x26c]
and ecx, 0x20000
je 0x10119fc0
and dword [ebp - 0x26c], 0xfffdffff
mov edx, dword [ebp - 0x26c]
or edx, 0x10000
mov dword [ebp - 0x26c], edx
lea eax, [ebp - 0x460]
mov dword [ebp - 0x9a4], eax
mov ecx, dword [ebp - 0x278]
add ecx, 0x14
mov dword [ebp - 0x340], ecx
mov dword [ebp - 0x9a8], 0x1016d0a0
mov edx, dword [ebp - 0x340]
movzx eax, byte [edx + 0x10]
test eax, eax
je 0x1011a015
mov ecx, 0x18
add ecx, 1
mov dword [ebp - 0x500], ecx
jmp 0x1011a01f
mov dword [ebp - 0x500], 0x18
mov edx, dword [ebp - 0x500]
mov dword [ebp - 0x504], edx
mov eax, dword [ebp - 0x340]
cmp dword [eax + 4], 0
je 0x1011a05d
mov ecx, dword [ebp - 0x340]
add ecx, 8
call fcn.1007d4d0
movzx ecx, al
test ecx, ecx
je 0x1011a05d
mov edx, dword [ebp - 0x340]
mov eax, dword [ebp - 0x504]
cmp eax, dword [edx + 0xc]
jbe 0x1011a08a
mov dword [ebp - 0x434], 0
mov ecx, dword [ebp - 0x26c]
or ecx, 0x100000
mov dword [ebp - 0x26c], ecx
lea edx, [ebp - 0x434]
mov dword [ebp - 0x9d0], edx
jmp 0x1011a1de
mov eax, dword [ebp - 0x9a8]
mov dword [ebp - 0x9ac], eax
mov ecx, dword [ebp - 0x9ac]
mov dword [ebp - 0x9b4], ecx
mov edx, dword [ebp - 0x340]
add edx, 8
mov dword [ebp - 0x9b0], edx
mov eax, dword [ebp - 0x504]
push eax
mov ecx, dword [ebp - 0x9b0]
call fcn.1007d510
mov ecx, dword [ebp - 0x9b4]
mov dword [eax], ecx
mov edx, 0x18
shl edx, 2
mov eax, dword [ebp - 0x340]
add edx, dword [eax + 4]
mov dword [ebp - 0x508], edx
mov ecx, dword [ebp - 0x508]
cmp dword [ecx], 0
je 0x1011a132
mov edx, dword [ebp - 0x508]
mov eax, dword [edx]
mov dword [ebp - 0x9b8], eax
mov ecx, dword [ebp - 0x9b8]
mov dword [ebp - 0x9bc], ecx
lea edx, [ebp - 0x9bc]
mov dword [ebp - 0x9c0], edx
mov eax, dword [ebp - 0x26c]
or eax, 0x200000
mov dword [ebp - 0x26c], eax
mov ecx, dword [ebp - 0x9c0]
mov dword [ebp - 0x50c], ecx
jmp 0x1011a165
mov dword [ebp - 0x9c4], 0
lea edx, [ebp - 0x9c4]
mov dword [ebp - 0x9c8], edx
mov eax, dword [ebp - 0x26c]
or eax, 0x400000
mov dword [ebp - 0x26c], eax
mov ecx, dword [ebp - 0x9c8]
mov dword [ebp - 0x50c], ecx
mov edx, dword [ebp - 0x50c]
mov dword [ebp - 0x9cc], edx
mov eax, dword [ebp - 0x9cc]
mov ecx, dword [eax]
mov dword [ebp - 0x434], ecx
mov edx, dword [ebp - 0x26c]
or edx, 0x800000
mov dword [ebp - 0x26c], edx
mov eax, dword [ebp - 0x26c]
and eax, 0x400000
je 0x1011a1a8
and dword [ebp - 0x26c], 0xffbfffff
mov ecx, dword [ebp - 0x26c]
and ecx, 0x200000
je 0x1011a1c0
and dword [ebp - 0x26c], 0xffdfffff
mov edx, dword [ebp - 0x26c]
or edx, 0x100000
mov dword [ebp - 0x26c], edx
lea eax, [ebp - 0x434]
mov dword [ebp - 0x9d0], eax
mov ecx, dword [ebp - 0x278]
add ecx, 0x14
mov dword [ebp - 0x344], ecx
mov dword [ebp - 0x9d4], 0x1016d160
mov edx, dword [ebp - 0x344]
movzx eax, byte [edx + 0x10]
test eax, eax
je 0x1011a215
mov ecx, 0x2c
add ecx, 1
mov dword [ebp - 0x510], ecx
jmp 0x1011a21f
mov dword [ebp - 0x510], 0x2c
mov edx, dword [ebp - 0x510]
mov dword [ebp - 0x514], edx
mov eax, dword [ebp - 0x344]
cmp dword [eax + 4], 0
je 0x1011a25d
mov ecx, dword [ebp - 0x344]
add ecx, 8
call fcn.1007d4d0
movzx ecx, al
test ecx, ecx
je 0x1011a25d
mov edx, dword [ebp - 0x344]
mov eax, dword [ebp - 0x514]
cmp eax, dword [edx + 0xc]
jbe 0x1011a28a
mov dword [ebp - 0x43c], 0
mov ecx, dword [ebp - 0x26c]
or ecx, 0x1000000
mov dword [ebp - 0x26c], ecx
lea edx, [ebp - 0x43c]
mov dword [ebp - 0x9fc], edx
jmp 0x1011a3de
mov eax, dword [ebp - 0x9d4]
mov dword [ebp - 0x9d8], eax
mov ecx, dword [ebp - 0x9d8]
mov dword [ebp - 0x9e0], ecx
mov edx, dword [ebp - 0x344]
add edx, 8
mov dword [ebp - 0x9dc], edx
mov eax, dword [ebp - 0x514]
push eax
mov ecx, dword [ebp - 0x9dc]
call fcn.1007d510
mov ecx, dword [ebp - 0x9e0]
mov dword [eax], ecx
mov edx, 0x2c
shl edx, 2
mov eax, dword [ebp - 0x344]
add edx, dword [eax + 4]
mov dword [ebp - 0x518], edx
mov ecx, dword [ebp - 0x518]
cmp dword [ecx], 0
je 0x1011a332
mov edx, dword [ebp - 0x518]
mov eax, dword [edx]
mov dword [ebp - 0x9e4], eax
mov ecx, dword [ebp - 0x9e4]
mov dword [ebp - 0x9e8], ecx
lea edx, [ebp - 0x9e8]
mov dword [ebp - 0x9ec], edx
mov eax, dword [ebp - 0x26c]
or eax, 0x2000000
mov dword [ebp - 0x26c], eax
mov ecx, dword [ebp - 0x9ec]
mov dword [ebp - 0x51c], ecx
jmp 0x1011a365
mov dword [ebp - 0x9f0], 0
lea edx, [ebp - 0x9f0]
mov dword [ebp - 0x9f4], edx
mov eax, dword [ebp - 0x26c]
or eax, 0x4000000
mov dword [ebp - 0x26c], eax
mov ecx, dword [ebp - 0x9f4]
mov dword [ebp - 0x51c], ecx
mov edx, dword [ebp - 0x51c]
mov dword [ebp - 0x9f8], edx
mov eax, dword [ebp - 0x9f8]
mov ecx, dword [eax]
mov dword [ebp - 0x43c], ecx
mov edx, dword [ebp - 0x26c]
or edx, 0x8000000
mov dword [ebp - 0x26c], edx
mov eax, dword [ebp - 0x26c]
and eax, 0x4000000
je 0x1011a3a8
and dword [ebp - 0x26c], 0xfbffffff
mov ecx, dword [ebp - 0x26c]
and ecx, 0x2000000
je 0x1011a3c0
and dword [ebp - 0x26c], 0xfdffffff
mov edx, dword [ebp - 0x26c]
or edx, 0x1000000
mov dword [ebp - 0x26c], edx
lea eax, [ebp - 0x43c]
mov dword [ebp - 0x9fc], eax
mov ecx, dword [ebp - 0x278]
add ecx, 0x8c
mov dword [ebp - 0x2c0], ecx
mov edx, dword [0x10452c24]
mov dword [ebp - 0xa00], edx
lea eax, [ebp - 0x348]
mov dword [ebp - 0x520], eax
mov ecx, dword [ebp - 0x520]
mov edx, dword [ebp - 0xa00]
mov dword [ecx], edx
mov eax, dword [ebp - 0x520]
mov dword [ebp - 0xf38], eax
mov dword [ebp - 4], 5
mov ecx, dword [ebp - 0x2c0]
mov edx, dword [ebp - 0x348]
mov dword [ecx], edx
mov eax, dword [ebp - 0x348]
mov ecx, dword [eax]
mov dword [ebp - 0xa04], ecx
mov edx, dword [ebp - 0x2c0]
mov eax, dword [ebp - 0xa04]
mov dword [edx + 4], eax
mov ecx, dword [ebp - 0x2c0]
cmp dword [ecx + 4], 0
jne 0x1011a46c
mov dword [ebp - 4], 0xffffffff
jmp 0x1011a6a6
mov dword [ebp - 0x390], 0
mov edx, dword [ebp - 0x2c0]
mov eax, dword [edx + 4]
mov ecx, dword [ebp - 0x390]
mov edx, dword [eax + ecx*4]
mov dword [ebp - 0x524], edx
cmp dword [ebp - 0x524], 0
jne 0x1011a4a0
mov byte [ebp - 0x279], 0
jmp 0x1011a4f7
mov eax, dword [0x1036780c]
mov dword [ebp - 0xa08], eax
push 0x1c
lea ecx, [ebp - 0x154]
push ecx
mov edx, dword [ebp - 0x524]
push edx
call dword [ebp - 0xa08]
test eax, eax
jne 0x1011a4ce
mov byte [ebp - 0x279], 0
jmp 0x1011a4f7
mov eax, dword [ebp - 0x140]
and eax, 1
jne 0x1011a4e7
mov ecx, dword [ebp - 0x140]
and ecx, 0x100
je 0x1011a4f0
mov byte [ebp - 0x279], 0
jmp 0x1011a4f7
mov byte [ebp - 0x279], 1
movzx edx, byte [ebp - 0x279]
test edx, edx
je 0x1011a516
mov eax, dword [ebp - 0x390]
add eax, 1
mov dword [ebp - 0x390], eax
jmp 0x1011a476
mov ecx, dword [ebp - 0x2c0]
mov edx, dword [ebp - 0x390]
mov dword [ecx + 0xc], edx
mov eax, dword [ebp - 0x2c0]
cmp dword [eax + 0xc], 0
jne 0x1011a53d
mov dword [ebp - 4], 0xffffffff
jmp 0x1011a6a6
mov ecx, 1
test ecx, ecx
je 0x1011a55a
mov edx, dword [ebp - 0x2c0]
mov eax, dword [edx + 0xc]
add eax, 1
mov dword [ebp - 0x528], eax
jmp 0x1011a569
mov ecx, dword [ebp - 0x2c0]
mov edx, dword [ecx + 0xc]
mov dword [ebp - 0x528], edx
mov edx, dword [ebp - 0x528]
lea ecx, [ebp - 0xa10]
call fcn.10081640
mov dword [ebp - 0xa0c], eax
mov eax, dword [ebp - 0xa0c]
push eax
mov ecx, dword [ebp - 0x2c0]
add ecx, 8
call fcn.100816e0
lea ecx, [ebp - 0xa10]
call fcn.1007d530
mov ecx, dword [ebp - 0x2c0]
add ecx, 8
call fcn.1007d4d0
movzx ecx, al
test ecx, ecx
jne 0x1011a5c1
mov dword [ebp - 4], 0xffffffff
jmp 0x1011a6a6
mov ecx, dword [ebp - 0x2c0]
add ecx, 8
call fcn.1007d4f0
mov dword [ebp - 0xa14], eax
mov edx, dword [ebp - 0xa14]
mov dword [ebp - 0x44], edx
mov eax, 1
test eax, eax
je 0x1011a65a
mov ecx, dword [ebp - 0x44]
mov dword [ebp - 0xa18], ecx
mov edx, dword [ebp - 0x2c0]
mov eax, dword [edx + 0xc]
lea ecx, [eax*4 + 4]
push ecx
mov edx, dword [ebp - 0x2c0]
mov eax, dword [edx + 4]
sub eax, 4
push eax
mov ecx, dword [ebp - 0xa18]
push ecx
call fcn.101d8af0
add esp, 0xc
mov edx, dword [ebp - 0x44]
mov dword [ebp - 0xa1c], edx
mov eax, dword [ebp - 0xa1c]
add eax, 4
mov dword [ebp - 0xa20], eax
cmp dword [ebp - 0x348], 0
jne 0x1011a640
jmp 0x1011a64e
mov ecx, dword [ebp - 0x348]
mov edx, dword [ebp - 0xa20]
mov dword [ecx], edx
mov eax, dword [ebp - 0x2c0]
mov byte [eax + 0x10], 1
jmp 0x1011a69f
mov ecx, dword [ebp - 0x44]
mov dword [ebp - 0xa24], ecx
mov edx, dword [ebp - 0x2c0]
mov eax, dword [edx + 0xc]
shl eax, 2
push eax
mov ecx, dword [ebp - 0x2c0]
mov edx, dword [ecx + 4]
push edx
mov eax, dword [ebp - 0xa24]
push eax
call fcn.101d8af0
add esp, 0xc
cmp dword [ebp - 0x348], 0
jne 0x1011a694
jmp 0x1011a69f
mov ecx, dword [ebp - 0x44]
mov edx, dword [ebp - 0x348]
mov dword [edx], ecx
mov dword [ebp - 4], 0xffffffff
mov eax, dword [ebp - 0x278]
add eax, 0x8c
mov dword [ebp - 0x34c], eax
mov dword [ebp - 0xa28], 0x1015f300
mov ecx, dword [ebp - 0x34c]
movzx edx, byte [ecx + 0x10]
test edx, edx
je 0x1011a6df
mov eax, 0x43
add eax, 1
mov dword [ebp - 0x52c], eax
jmp 0x1011a6e9
mov dword [ebp - 0x52c], 0x43
mov ecx, dword [ebp - 0x52c]
mov dword [ebp - 0x530], ecx
mov edx, dword [ebp - 0x34c]
cmp dword [edx + 4], 0
je 0x1011a727
mov ecx, dword [ebp - 0x34c]
add ecx, 8
call fcn.1007d4d0
movzx eax, al
test eax, eax
je 0x1011a727
mov ecx, dword [ebp - 0x34c]
mov edx, dword [ebp - 0x530]
cmp edx, dword [ecx + 0xc]
jbe 0x1011a753
mov dword [ebp - 0x440], 0
mov eax, dword [ebp - 0x26c]
or eax, 0x10000000
mov dword [ebp - 0x26c], eax
lea ecx, [ebp - 0x440]
mov dword [ebp - 0xa50], ecx
jmp 0x1011a8a7
mov edx, dword [ebp - 0xa28]
mov dword [ebp - 0xa2c], edx
mov eax, dword [ebp - 0xa2c]
mov dword [ebp - 0xa34], eax
mov ecx, dword [ebp - 0x34c]
add ecx, 8
mov dword [ebp - 0xa30], ecx
mov edx, dword [ebp - 0x530]
push edx
mov ecx, dword [ebp - 0xa30]
call fcn.1007d510
mov ecx, dword [ebp - 0xa34]
mov dword [eax], ecx
mov edx, 0x43
shl edx, 2
mov eax, dword [ebp - 0x34c]
add edx, dword [eax + 4]
mov dword [ebp - 0x534], edx
mov ecx, dword [ebp - 0x534]
cmp dword [ecx], 0
je 0x1011a7fb
mov edx, dword [ebp - 0x534]
mov eax, dword [edx]
mov dword [ebp - 0xa38], eax
mov ecx, dword [ebp - 0xa38]
mov dword [ebp - 0xa3c], ecx
lea edx, [ebp - 0xa3c]
mov dword [ebp - 0xa40], edx
mov eax, dword [ebp - 0x26c]
or eax, 0x20000000
mov dword [ebp - 0x26c], eax
mov ecx, dword [ebp - 0xa40]
mov dword [ebp - 0x538], ecx
jmp 0x1011a82e
mov dword [ebp - 0xa44], 0
lea edx, [ebp - 0xa44]
mov dword [ebp - 0xa48], edx
mov eax, dword [ebp - 0x26c]
or eax, 0x40000000
mov dword [ebp - 0x26c], eax
mov ecx, dword [ebp - 0xa48]
mov dword [ebp - 0x538], ecx
mov edx, dword [ebp - 0x538]
mov dword [ebp - 0xa4c], edx
mov eax, dword [ebp - 0xa4c]
mov ecx, dword [eax]
mov dword [ebp - 0x440], ecx
mov edx, dword [ebp - 0x26c]
or edx, 0x80000000
mov dword [ebp - 0x26c], edx
mov eax, dword [ebp - 0x26c]
and eax, 0x40000000
je 0x1011a871
and dword [ebp - 0x26c], 0xbfffffff
mov ecx, dword [ebp - 0x26c]
and ecx, 0x20000000
je 0x1011a889
and dword [ebp - 0x26c], 0xdfffffff
mov edx, dword [ebp - 0x26c]
or edx, 0x10000000
mov dword [ebp - 0x26c], edx
lea eax, [ebp - 0x440]
mov dword [ebp - 0xa50], eax
mov ecx, dword [ebp - 0x278]
add ecx, 0x8c
mov dword [ebp - 0x350], ecx
mov dword [ebp - 0xa54], 0x1015f360
mov edx, dword [ebp - 0x350]
movzx eax, byte [edx + 0x10]
test eax, eax
je 0x1011a8e1
mov ecx, 0x52
add ecx, 1
mov dword [ebp - 0x53c], ecx
jmp 0x1011a8eb
mov dword [ebp - 0x53c], 0x52
mov edx, dword [ebp - 0x53c]
mov dword [ebp - 0x540], edx
mov eax, dword [ebp - 0x350]
cmp dword [eax + 4], 0
je 0x1011a929
mov ecx, dword [ebp - 0x350]
add ecx, 8
call fcn.1007d4d0
movzx ecx, al
test ecx, ecx
je 0x1011a929
mov edx, dword [ebp - 0x350]
mov eax, dword [ebp - 0x540]
cmp eax, dword [edx + 0xc]
jbe 0x1011a953
mov dword [ebp - 0x448], 0
mov ecx, dword [ebp - 0x270]
or ecx, 1
mov dword [ebp - 0x270], ecx
lea edx, [ebp - 0x448]
mov dword [ebp - 0xa7c], edx
jmp 0x1011aa92
mov eax, dword [ebp - 0xa54]
mov dword [ebp - 0xa58], eax
mov ecx, dword [ebp - 0xa58]
mov dword [ebp - 0xa60], ecx
mov edx, dword [ebp - 0x350]
add edx, 8
mov dword [ebp - 0xa5c], edx
mov eax, dword [ebp - 0x540]
push eax
mov ecx, dword [ebp - 0xa5c]
call fcn.1007d510
mov ecx, dword [ebp - 0xa60]
mov dword [eax], ecx
mov edx, 0x52
shl edx, 2
mov eax, dword [ebp - 0x350]
add edx, dword [eax + 4]
mov dword [ebp - 0x544], edx
mov ecx, dword [ebp - 0x544]
cmp dword [ecx], 0
je 0x1011a9f9
mov edx, dword [ebp - 0x544]
mov eax, dword [edx]
mov dword [ebp - 0xa64], eax
mov ecx, dword [ebp - 0xa64]
mov dword [ebp - 0xa68], ecx
lea edx, [ebp - 0xa68]
mov dword [ebp - 0xa6c], edx
mov eax, dword [ebp - 0x270]
or eax, 2
mov dword [ebp - 0x270], eax
mov ecx, dword [ebp - 0xa6c]
mov dword [ebp - 0x548], ecx
jmp 0x1011aa2a
mov dword [ebp - 0xa70], 0
lea edx, [ebp - 0xa70]
mov dword [ebp - 0xa74], edx
mov eax, dword [ebp - 0x270]
or eax, 4
mov dword [ebp - 0x270], eax
mov ecx, dword [ebp - 0xa74]
mov dword [ebp - 0x548], ecx
mov edx, dword [ebp - 0x548]
mov dword [ebp - 0xa78], edx
mov eax, dword [ebp - 0xa78]
mov ecx, dword [eax]
mov dword [ebp - 0x448], ecx
mov edx, dword [ebp - 0x270]
or edx, 8
mov dword [ebp - 0x270], edx
mov eax, dword [ebp - 0x270]
and eax, 4
je 0x1011aa65
and dword [ebp - 0x270], 0xfffffffb
mov ecx, dword [ebp - 0x270]
and ecx, 2
je 0x1011aa77
and dword [ebp - 0x270], 0xfffffffd
mov edx, dword [ebp - 0x270]
or edx, 1
mov dword [ebp - 0x270], edx
lea eax, [ebp - 0x448]
mov dword [ebp - 0xa7c], eax
mov ecx, dword [ebp - 0x278]
add ecx, 0x8c
mov dword [ebp - 0x354], ecx
mov dword [ebp - 0xa80], 0x1015f410
mov edx, dword [ebp - 0x354]
movzx eax, byte [edx + 0x10]
test eax, eax
je 0x1011aacc
mov ecx, 0x74
add ecx, 1
mov dword [ebp - 0x54c], ecx
jmp 0x1011aad6
mov dword [ebp - 0x54c], 0x74
mov edx, dword [ebp - 0x54c]
mov dword [ebp - 0x550], edx
mov eax, dword [ebp - 0x354]
cmp dword [eax + 4], 0
je 0x1011ab14
mov ecx, dword [ebp - 0x354]
add ecx, 8
call fcn.1007d4d0
movzx ecx, al
test ecx, ecx
je 0x1011ab14
mov edx, dword [ebp - 0x354]
mov eax, dword [ebp - 0x550]
cmp eax, dword [edx + 0xc]
jbe 0x1011ab3e
mov dword [ebp - 0x450], 0
mov ecx, dword [ebp - 0x270]
or ecx, 0x10
mov dword [ebp - 0x270], ecx
lea edx, [ebp - 0x450]
mov dword [ebp - 0xaa8], edx
jmp 0x1011ac80
mov eax, dword [ebp - 0xa80]
mov dword [ebp - 0xa84], eax
mov ecx, dword [ebp - 0xa84]
mov dword [ebp - 0xa8c], ecx
mov edx, dword [ebp - 0x354]
add edx, 8
mov dword [ebp - 0xa88], edx
mov eax, dword [ebp - 0x550]
push eax
mov ecx, dword [ebp - 0xa88]
call fcn.1007d510
mov ecx, dword [ebp - 0xa8c]
mov dword [eax], ecx
mov edx, 0x74
shl edx, 2
mov eax, dword [ebp - 0x354]
add edx, dword [eax + 4]
mov dword [ebp - 0x554], edx
mov ecx, dword [ebp - 0x554]
cmp dword [ecx], 0
je 0x1011abe4
mov edx, dword [ebp - 0x554]
mov eax, dword [edx]
mov dword [ebp - 0xa90], eax
mov ecx, dword [ebp - 0xa90]
mov dword [ebp - 0xa94], ecx
lea edx, [ebp - 0xa94]
mov dword [ebp - 0xa98], edx
mov eax, dword [ebp - 0x270]
or eax, 0x20
mov dword [ebp - 0x270], eax
mov ecx, dword [ebp - 0xa98]
mov dword [ebp - 0x558], ecx
jmp 0x1011ac15
mov dword [ebp - 0xa9c], 0
lea edx, [ebp - 0xa9c]
mov dword [ebp - 0xaa0], edx
mov eax, dword [ebp - 0x270]
or eax, 0x40
mov dword [ebp - 0x270], eax
mov ecx, dword [ebp - 0xaa0]
mov dword [ebp - 0x558], ecx
mov edx, dword [ebp - 0x558]
mov dword [ebp - 0xaa4], edx
mov eax, dword [ebp - 0xaa4]
mov ecx, dword [eax]
mov dword [ebp - 0x450], ecx
mov edx, dword [ebp - 0x270]
or edx, 0x80
mov dword [ebp - 0x270], edx
mov eax, dword [ebp - 0x270]
and eax, 0x40
je 0x1011ac53
and dword [ebp - 0x270], 0xffffffbf
mov ecx, dword [ebp - 0x270]
and ecx, 0x20
je 0x1011ac65
and dword [ebp - 0x270], 0xffffffdf
mov edx, dword [ebp - 0x270]
or edx, 0x10
mov dword [ebp - 0x270], edx
lea eax, [ebp - 0x450]
mov dword [ebp - 0xaa8], eax
mov ecx, dword [ebp - 0x278]
add ecx, 0xdc
mov dword [ebp - 0x2bc], ecx
mov edx, dword [0x10452c44]
mov dword [ebp - 0xaac], edx
lea eax, [ebp - 0x324]
mov dword [ebp - 0x55c], eax
mov ecx, dword [ebp - 0x55c]
mov edx, dword [ebp - 0xaac]
mov dword [ecx], edx
mov eax, dword [ebp - 0x55c]
mov dword [ebp - 0xf3c], eax
mov dword [ebp - 4], 6
mov ecx, dword [ebp - 0x2bc]
mov edx, dword [ebp - 0x324]
mov dword [ecx], edx
mov eax, dword [ebp - 0x324]
mov ecx, dword [eax]
mov dword [ebp - 0xab0], ecx
mov edx, dword [ebp - 0x2bc]
mov eax, dword [ebp - 0xab0]
mov dword [edx + 4], eax
mov ecx, dword [ebp - 0x2bc]
cmp dword [ecx + 4], 0
jne 0x1011ad0e
mov dword [ebp - 4], 0xffffffff
jmp 0x1011af48
mov dword [ebp - 0x394], 0
mov edx, dword [ebp - 0x2bc]
mov eax, dword [edx + 4]
mov ecx, dword [ebp - 0x394]
mov edx, dword [eax + ecx*4]
mov dword [ebp - 0x560], edx
cmp dword [ebp - 0x560], 0
jne 0x1011ad42
mov byte [ebp - 0x27a], 0
jmp 0x1011ad99
mov eax, dword [0x1036780c]
mov dword [ebp - 0xab4], eax
push 0x1c
lea ecx, [ebp - 0x170]
push ecx
mov edx, dword [ebp - 0x560]
push edx
call dword [ebp - 0xab4]
test eax, eax
jne 0x1011ad70
mov byte [ebp - 0x27a], 0
jmp 0x1011ad99
mov eax, dword [ebp - 0x15c]
and eax, 1
jne 0x1011ad89
mov ecx, dword [ebp - 0x15c]
and ecx, 0x100
je 0x1011ad92
mov byte [ebp - 0x27a], 0
jmp 0x1011ad99
mov byte [ebp - 0x27a], 1
movzx edx, byte [ebp - 0x27a]
test edx, edx
je 0x1011adb8
mov eax, dword [ebp - 0x394]
add eax, 1
mov dword [ebp - 0x394], eax
jmp 0x1011ad18
mov ecx, dword [ebp - 0x2bc]
mov edx, dword [ebp - 0x394]
mov dword [ecx + 0xc], edx
mov eax, dword [ebp - 0x2bc]
cmp dword [eax + 0xc], 0
jne 0x1011addf
mov dword [ebp - 4], 0xffffffff
jmp 0x1011af48
mov ecx, 1
test ecx, ecx
je 0x1011adfc
mov edx, dword [ebp - 0x2bc]
mov eax, dword [edx + 0xc]
add eax, 1
mov dword [ebp - 0x564], eax
jmp 0x1011ae0b
mov ecx, dword [ebp - 0x2bc]
mov edx, dword [ecx + 0xc]
mov dword [ebp - 0x564], edx
mov edx, dword [ebp - 0x564]
lea ecx, [ebp - 0xabc]
call fcn.10081640
mov dword [ebp - 0xab8], eax
mov eax, dword [ebp - 0xab8]
push eax
mov ecx, dword [ebp - 0x2bc]
add ecx, 8
call fcn.100816e0
lea ecx, [ebp - 0xabc]
call fcn.1007d530
mov ecx, dword [ebp - 0x2bc]
add ecx, 8
call fcn.1007d4d0
movzx ecx, al
test ecx, ecx
jne 0x1011ae63
mov eax, dword [ebp - 0x278]
add eax, 0xdc
mov dword [ebp - 0x358], eax
mov dword [ebp - 0xad4], 0x1010dce0
mov ecx, dword [ebp - 0x358]
movzx edx, byte [ecx + 0x10]
test edx, edx
je 0x1011af81