Function at 0x1001beec
Capabilities:
Inspect section memory permissions

Disassembly:
push 0xc40
mov eax, 0x1002c37d
call fcn.1001f742
mov esi, dword [ebp + 8]
mov dword [ebp - 0xc38], esi
xor ebx, ebx
mov dword [ebp - 0xc48], ebx
and dword [ebp - 0xc4c], ebx
xor eax, eax
mov dword [ebp - 0xc40], eax
mov dword [ebp - 0xc34], eax
mov dword [ebp - 0xc30], eax
mov dword [ebp - 0xc3c], eax
and dword [ebp - 4], eax
wait
push 0xa
sub esp, 0xc
mov dword [esp + 8], 0x40100000
mov dword [esp + 4], 0x3e800000
mov dword [esp], 0x3f400000
push 0x11
lea ecx, [ebp - 0x854]
call fcn.1001e85a
xor eax, eax
mov dword [ebp - 0x38], eax
mov dword [ebp - 0x34], eax
mov dword [ebp - 0x30], eax
mov dword [ebp - 0x50], eax
mov dword [ebp - 0x4c], eax
mov dword [ebp - 0x48], eax
mov dword [ebp - 0xc44], eax
mov dword [ebp - 0x20], eax
mov dword [ebp - 0x1c], eax
mov dword [ebp - 0x18], eax
lea eax, [ebp - 0x20]
push eax
push 0xe7c
lea ecx, [ebp - 0x854]
call fcn.1001e8d1
mov ecx, eax
call fcn.1001e8af
mov ecx, dword [ebp - 0x20]
test ecx, ecx
je 0x1001bfbc
mov eax, dword [ebp - 0x18]
sub eax, ecx
and eax, 0xfffffffc
push eax
push ecx
call fcn.100053aa
pop ecx
pop ecx
xor eax, eax
mov dword [ebp - 0x20], eax
mov dword [ebp - 0x1c], eax
mov dword [ebp - 0x18], eax
jmp 0x1001bfbe
xor eax, eax
mov dword [ebp - 0x48], eax
mov dword [ebp - 0x48], eax
mov ecx, dword [ebp - 0x38]
test ecx, ecx
je 0x1001bfe7
mov eax, dword [ebp - 0x30]
sub eax, ecx
and eax, 0xfffffffc
push eax
push ecx
call fcn.100053aa
pop ecx
pop ecx
xor eax, eax
mov dword [ebp - 0x38], eax
mov dword [ebp - 0x34], eax
mov dword [ebp - 0x30], eax
lea ecx, [ebp - 0x854]
call fcn.1001ec3d
wait
or dword [ebp - 4], 0xffffffff
jmp 0x1001c027
xor ecx, ecx
mov eax, dword [esi]
lea edx, [eax + 4]
mov dword [ebp - 0xc48], edx
mov edx, dword [eax]
mov dword [ebp - 0xc34], edx
add eax, 8
add eax, edx
mov dword [0x10037fdc], eax
mov eax, dword [esi]
mov eax, dword [eax + edx + 4]
mov dword [0x10037fe0], eax
mov dword [ebp - 0xc4c], ecx
mov dword [ebp - 0x44c], ecx
mov dword [ebp - 0x43c], ecx
push 0xf
pop edx
mov dword [ebp - 0x438], edx
mov edi, 0x10037330
mov eax, edi
cmp dword [0x10037344], 0x10
cmovae eax, dword [0x10037330]
mov dword [ebp - 0x38c], ecx
mov dword [ebp - 0x37c], ecx
mov dword [ebp - 0x378], edx
movzx eax, byte [eax]
push eax
lea ecx, [ebp - 0x38c]
call fcn.10013e70
lea eax, [ebp - 0x38c]
push eax
lea ecx, [ebp - 0x83c]
call fcn.10003cb0
mov esi, 0x10036d38
cmp dword [0x10036d4c], 0x10
cmovae esi, dword [0x10036d38]
xor eax, eax
mov dword [ebp - 0x41c], eax
mov dword [ebp - 0x40c], eax
push 0xf
pop ecx
mov dword [ebp - 0x408], ecx
mov dword [ebp - 0x374], eax
mov dword [ebp - 0x364], eax
mov dword [ebp - 0x360], ecx
mov al, byte [0x10036ba1]
mov byte [ebp - 0xc38], al
push dword [ebp - 0xc38]
lea ecx, [ebp - 0x374]
call fcn.10013e70
lea eax, [ebp - 0x374]
push eax
lea ecx, [ebp - 0x764]
call fcn.10003cb0
xor eax, eax
mov dword [ebp - 0x434], eax
mov dword [ebp - 0x424], eax
push 0xf
pop ecx
mov dword [ebp - 0x420], ecx
mov dword [ebp - 0x404], eax
mov dword [ebp - 0x3f4], eax
mov dword [ebp - 0x3f0], ecx
mov dword [ebp - 0x3ec], eax
mov dword [ebp - 0x3dc], eax
mov dword [ebp - 0x3d8], ecx
mov dword [ebp - 0x3d4], eax
mov dword [ebp - 0x3c4], eax
mov dword [ebp - 0x3c0], ecx
mov eax, 0x10036d20
cmp dword [0x10036d34], 0x10
cmovae eax, dword [0x10036d20]
movsx eax, byte [eax + 2]
push eax
call fcn.1002289a
pop ecx
mov byte [ebp - 0xc38], al
push dword [ebp - 0xc38]
push 1
push 0
lea ecx, [ebp - 0x3d4]
call fcn.10013db0
push eax
lea ecx, [ebp - 0x74c]
call fcn.10003cb0
lea eax, [ebp - 0x3ec]
push eax
lea eax, [ebp - 0x74c]
push eax
push dword [ebp - 0xc44]
lea ecx, [ebp - 0x554]
call fcn.100078b0
mov al, byte [0x10036ba1]
mov byte [ebp - 0xc38], al
push dword [ebp - 0xc38]
lea ecx, [ebp - 0x554]
call fcn.10013e70
lea eax, [ebp - 0x554]
push eax
lea ecx, [ebp - 0x53c]
call fcn.10003cb0
mov al, byte [0x10037006]
mov byte [ebp - 0xc38], al
push dword [ebp - 0xc38]
lea ecx, [ebp - 0x53c]
call fcn.10013e70
lea eax, [ebp - 0x53c]
push eax
lea ecx, [ebp - 0x734]
call fcn.10003cb0
lea eax, [ebp - 0x404]
push eax
lea eax, [ebp - 0x734]
push eax
push dword [ebp - 0xc44]
lea ecx, [ebp - 0x524]
call fcn.100078b0
mov al, byte [0x10036d6e]
mov byte [ebp - 0xc38], al
push dword [ebp - 0xc38]
lea ecx, [ebp - 0x524]
call fcn.10013e70
lea eax, [ebp - 0x524]
push eax
lea ecx, [ebp - 0x71c]
call fcn.10003cb0
lea eax, [ebp - 0x434]
push eax
lea eax, [ebp - 0x71c]
push eax
push dword [ebp - 0xc44]
lea ecx, [ebp - 0x704]
call fcn.100078b0
lea eax, [ebp - 0x764]
push eax
lea eax, [ebp - 0x704]
push eax
push dword [ebp - 0xc44]
lea ecx, [ebp - 0x6ec]
call fcn.100078b0
lea eax, [ebp - 0x41c]
push eax
lea eax, [ebp - 0x6ec]
push eax
push dword [ebp - 0xc44]
lea ecx, [ebp - 0x50c]
call fcn.100078b0
movzx eax, byte [esi + 6]
push eax
lea ecx, [ebp - 0x50c]
call fcn.10013e70
lea eax, [ebp - 0x50c]
push eax
lea ecx, [ebp - 0x6d4]
call fcn.10003cb0
lea eax, [ebp - 0x83c]
push eax
lea eax, [ebp - 0x6d4]
push eax
push dword [ebp - 0xc44]
lea ecx, [ebp - 0x4f4]
call fcn.100078b0
mov al, byte [0x10037234]
mov byte [ebp - 0xc38], al
push dword [ebp - 0xc38]
lea ecx, [ebp - 0x4f4]
call fcn.10013e70
lea eax, [ebp - 0x4f4]
push eax
lea ecx, [ebp - 0xc2c]
call fcn.10003cb0
lea eax, [ebp - 0x44c]
push eax
lea eax, [ebp - 0xc2c]
push eax
push dword [ebp - 0xc44]
lea ecx, [ebp - 0x3bc]
call fcn.100078b0
lea eax, [ebp - 0x3bc]
cmp dword [ebp - 0x3a8], 0x10
cmovae eax, dword [ebp - 0x3bc]
push eax
call dword [sym.imp.KERNEL32.dll_GetModuleHandleA]
mov dword [0x10037fec], eax
push 0xf
test eax, eax
je 0x1001c8d8
xor ebx, ebx
mov dword [ebp - 0x3a4], ebx
mov dword [ebp - 0x394], ebx
pop esi
mov dword [ebp - 0x390], esi
mov dword [ebp - 0x1c4], ebx
mov dword [ebp - 0x1b4], ebx
mov dword [ebp - 0x1b0], esi
mov al, byte [0x10036b21]
mov byte [ebp - 0xc38], al
push dword [ebp - 0xc38]
lea ecx, [ebp - 0x1c4]
call fcn.10013e70
lea eax, [ebp - 0x1c4]
push eax
lea ecx, [ebp - 0xc14]
call fcn.10003cb0
mov dword [ebp - 0x17c], ebx
mov dword [ebp - 0x16c], ebx
mov dword [ebp - 0x168], esi
mov al, byte [0x10036ba3]
mov byte [ebp - 0xc38], al
push dword [ebp - 0xc38]
lea ecx, [ebp - 0x17c]
call fcn.10013e70
lea eax, [ebp - 0x17c]
push eax
lea ecx, [ebp - 0xbfc]
call fcn.10003cb0
mov dword [ebp - 0x35c], ebx
mov dword [ebp - 0x34c], ebx
mov dword [ebp - 0x348], esi
mov dword [ebp - 0xbc], ebx
mov dword [ebp - 0xac], ebx
mov dword [ebp - 0xa8], esi
mov al, byte [0x10036e72]
mov byte [ebp - 0xc38], al
push dword [ebp - 0xc38]
push 1
push ebx
lea ecx, [ebp - 0xbc]
call fcn.10013db0
push eax
lea ecx, [ebp - 0xbe4]
call fcn.10003cb0
mov dword [ebp - 0x164], ebx
mov dword [ebp - 0x154], ebx
mov dword [ebp - 0x150], esi
mov al, byte [0x10037006]
mov byte [ebp - 0xc38], al
push dword [ebp - 0xc38]
lea ecx, [ebp - 0x164]
call fcn.10013e70
lea eax, [ebp - 0x164]
push eax
lea ecx, [ebp - 0xbcc]
call fcn.10003cb0
mov dword [ebp - 0x8c], ebx
mov dword [ebp - 0x7c], ebx
mov dword [ebp - 0x78], esi
movsx eax, byte [0x10036f6a]
push eax
call fcn.1002289a
pop ecx
mov byte [ebp - 0xc38], al
push dword [ebp - 0xc38]
push 1
push ebx
lea ecx, [ebp - 0x8c]
call fcn.10013db0
push eax
lea ecx, [ebp - 0xbb4]
call fcn.10003cb0
push 0x10
pop edi
cmp dword [0x10036d4c], edi
mov eax, 0x10036d38
cmovae eax, dword [0x10036d38]
mov dword [ebp - 0x134], ebx
mov dword [ebp - 0x124], ebx
mov dword [ebp - 0x120], esi
movzx eax, byte [eax + 6]
push eax
lea ecx, [ebp - 0x134]
call fcn.10013e70
lea eax, [ebp - 0x134]
push eax
lea ecx, [ebp - 0xb9c]
call fcn.10003cb0
mov dword [ebp - 0x344], ebx
mov dword [ebp - 0x334], ebx
mov dword [ebp - 0x330], esi
mov eax, 0x10037180
cmp dword [0x10037194], edi
cmovae eax, dword [0x10037180]
mov dword [ebp - 0x11c], ebx
mov dword [ebp - 0x10c], ebx
mov dword [ebp - 0x108], esi
movzx eax, byte [eax + 2]
push eax
lea ecx, [ebp - 0x11c]
call fcn.10013e70
lea eax, [ebp - 0x11c]
push eax
lea ecx, [ebp - 0xb84]
call fcn.10003cb0
mov dword [ebp - 0x32c], ebx
mov dword [ebp - 0x31c], ebx
mov dword [ebp - 0x318], esi
mov dword [ebp - 0x314], ebx
mov dword [ebp - 0x304], ebx
mov dword [ebp - 0x300], esi
mov dword [ebp - 0x2fc], ebx
mov dword [ebp - 0x2ec], ebx
mov dword [ebp - 0x2e8], esi
mov dword [ebp - 0x74], ebx
mov dword [ebp - 0x64], ebx
mov dword [ebp - 0x60], esi
movsx eax, byte [0x1003719b]
push eax
call fcn.1002289a
pop ecx
mov byte [ebp - 0xc38], al
push dword [ebp - 0xc38]
push 1
push ebx
lea ecx, [ebp - 0x74]
call fcn.10013db0
push eax
lea ecx, [ebp - 0x4dc]
call fcn.10003cb0
mov al, byte [0x10036c22]
mov byte [ebp - 0xc38], al
push dword [ebp - 0xc38]
lea ecx, [ebp - 0x4dc]
call fcn.10013e70
lea eax, [ebp - 0x4dc]
push eax
lea ecx, [ebp - 0xb6c]
call fcn.10003cb0
lea eax, [ebp - 0x2fc]
push eax
lea eax, [ebp - 0xb6c]
push eax
push dword [ebp - 0xc44]
lea ecx, [ebp - 0xb54]
call fcn.100078b0
lea eax, [ebp - 0x314]
push eax
lea eax, [ebp - 0xb54]
push eax
push dword [ebp - 0xc44]
lea ecx, [ebp - 0x4c4]
call fcn.100078b0
mov al, byte [0x10037002]
mov byte [ebp - 0xc38], al
push dword [ebp - 0xc38]
lea ecx, [ebp - 0x4c4]
call fcn.10013e70
lea eax, [ebp - 0x4c4]
push eax
lea ecx, [ebp - 0xb3c]
call fcn.10003cb0
lea eax, [ebp - 0x32c]
push eax
lea eax, [ebp - 0xb3c]
push eax
push dword [ebp - 0xc44]
lea ecx, [ebp - 0x4ac]
call fcn.100078b0
mov al, byte [0x10037082]
mov byte [ebp - 0xc38], al
push dword [ebp - 0xc38]
lea ecx, [ebp - 0x4ac]
call fcn.10013e70
lea eax, [ebp - 0x4ac]
push eax
lea ecx, [ebp - 0xb24]
call fcn.10003cb0
lea eax, [ebp - 0xb84]
push eax
lea eax, [ebp - 0xb24]
push eax
push dword [ebp - 0xc44]
lea ecx, [ebp - 0xb0c]
call fcn.100078b0
lea eax, [ebp - 0x344]
push eax
lea eax, [ebp - 0xb0c]
push eax
push dword [ebp - 0xc44]
lea ecx, [ebp - 0x6a4]
call fcn.100078b0
mov al, byte [0x10036a8c]
mov byte [ebp - 0xc38], al
push dword [ebp - 0xc38]
lea ecx, [ebp - 0x6a4]
call fcn.10013e70
lea eax, [ebp - 0x6a4]
push eax
lea ecx, [ebp - 0xaf4]
call fcn.10003cb0
lea eax, [ebp - 0xb9c]
push eax
lea eax, [ebp - 0xaf4]
push eax
push dword [ebp - 0xc44]
lea ecx, [ebp - 0xadc]
call fcn.100078b0
lea eax, [ebp - 0xbb4]
push eax
lea eax, [ebp - 0xadc]
push eax
push dword [ebp - 0xc44]
lea ecx, [ebp - 0xac4]
call fcn.100078b0
lea eax, [ebp - 0xbcc]
push eax
lea eax, [ebp - 0xac4]
push eax
push dword [ebp - 0xc44]
lea ecx, [ebp - 0xaac]
call fcn.100078b0
lea eax, [ebp - 0xbe4]
push eax
lea eax, [ebp - 0xaac]
push eax
push dword [ebp - 0xc44]
lea ecx, [ebp - 0xa94]
call fcn.100078b0
lea eax, [ebp - 0x35c]
push eax
lea eax, [ebp - 0xa94]
push eax
push dword [ebp - 0xc44]
lea ecx, [ebp - 0x68c]
call fcn.100078b0
mov al, byte [0x10037082]
mov byte [ebp - 0xc38], al
push dword [ebp - 0xc38]
lea ecx, [ebp - 0x68c]
call fcn.10013e70
lea eax, [ebp - 0x68c]
push eax
lea ecx, [ebp - 0xa7c]
call fcn.10003cb0
lea eax, [ebp - 0xbfc]
push eax
lea eax, [ebp - 0xa7c]
push eax
push dword [ebp - 0xc44]
lea ecx, [ebp - 0xa64]
call fcn.100078b0
lea eax, [ebp - 0xc14]
push eax
lea eax, [ebp - 0xa64]
push eax
push dword [ebp - 0xc44]
lea ecx, [ebp - 0xa4c]
call fcn.100078b0
lea eax, [ebp - 0x3a4]
push eax
lea eax, [ebp - 0xa4c]
push eax
push dword [ebp - 0xc44]
lea ecx, [ebp - 0x674]
call fcn.100078b0
mov al, byte [0x10037082]
mov byte [ebp - 0xc38], al
push dword [ebp - 0xc38]
lea ecx, [ebp - 0x674]
call fcn.10013e70
lea eax, [ebp - 0x674]
push eax
lea ecx, [ebp - 0x494]
call fcn.10003cb0
lea eax, [ebp - 0x494]
cmp dword [ebp - 0x480], edi
cmovae eax, dword [ebp - 0x494]
push eax
push dword [0x10037fec]
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
mov edx, eax
mov ecx, 0x1ff
or ebx, 0xffffffff
jmp 0x1001d161
xor eax, eax
mov dword [ebp - 0x2e4], eax
mov dword [ebp - 0x2d4], eax
pop ecx
mov dword [ebp - 0x2d0], ecx
cmp dword [0x10037344], 0x10
cmovae edi, dword [0x10037330]
mov dword [ebp - 0x104], eax
mov dword [ebp - 0xf4], eax
mov dword [ebp - 0xf0], ecx
movzx eax, byte [edi]
push eax
lea ecx, [ebp - 0x104]
call fcn.10013e70
lea eax, [ebp - 0x104]
push eax
lea ecx, [ebp - 0xa34]
call fcn.10003cb0
mov edi, 0x10036d38
mov esi, edi
cmp dword [0x10036d4c], 0x10
cmovae esi, dword [0x10036d38]
xor eax, eax
mov dword [ebp - 0x2cc], eax
mov dword [ebp - 0x2bc], eax
push 0xf
pop ecx
mov dword [ebp - 0x2b8], ecx
mov dword [ebp - 0xec], eax
mov dword [ebp - 0xdc], eax
mov dword [ebp - 0xd8], ecx
mov al, byte [0x10036ba1]
mov byte [ebp - 0xc38], al
push dword [ebp - 0xc38]
lea ecx, [ebp - 0xec]
call fcn.10013e70
lea eax, [ebp - 0xec]
push eax
lea ecx, [ebp - 0xa1c]
call fcn.10003cb0
xor eax, eax
mov dword [ebp - 0x2b4], eax
mov dword [ebp - 0x2a4], eax
push 0xf
pop ecx
mov dword [ebp - 0x2a0], ecx
mov dword [ebp - 0x1f4], eax
mov dword [ebp - 0x1e4], eax
mov dword [ebp - 0x1e0], ecx
mov dword [ebp - 0x29c], eax
mov dword [ebp - 0x28c], eax
mov dword [ebp - 0x288], ecx
mov dword [ebp - 0xa4], eax
mov dword [ebp - 0x94], eax
mov dword [ebp - 0x90], ecx
cmp dword [0x10036d34], 0x10
mov eax, 0x10036d20
cmovae eax, dword [0x10036d20]
movsx eax, byte [eax + 2]
push eax
call fcn.1002289a
pop ecx
mov byte [ebp - 0xc38], al
push dword [ebp - 0xc38]
push 1
push 0
lea ecx, [ebp - 0xa4]
call fcn.10013db0
push eax
lea ecx, [ebp - 0xa04]
call fcn.10003cb0
lea eax, [ebp - 0x29c]
push eax
lea eax, [ebp - 0xa04]
push eax
push dword [ebp - 0xc44]
lea ecx, [ebp - 0x65c]
call fcn.100078b0
mov al, byte [0x10036ba1]
mov byte [ebp - 0xc38], al
push dword [ebp - 0xc38]
lea ecx, [ebp - 0x65c]
call fcn.10013e70
lea eax, [ebp - 0x65c]
push eax
lea ecx, [ebp - 0x644]
call fcn.10003cb0
mov al, byte [0x10037006]
mov byte [ebp - 0xc38], al
push dword [ebp - 0xc38]
lea ecx, [ebp - 0x644]
call fcn.10013e70
lea eax, [ebp - 0x644]
push eax
lea ecx, [ebp - 0x9ec]
call fcn.10003cb0
lea eax, [ebp - 0x1f4]
push eax
lea eax, [ebp - 0x9ec]
push eax
push dword [ebp - 0xc44]
lea ecx, [ebp - 0x62c]
call fcn.100078b0
mov al, byte [0x10036d6e]
mov byte [ebp - 0xc38], al
push dword [ebp - 0xc38]
lea ecx, [ebp - 0x62c]
call fcn.10013e70
lea eax, [ebp - 0x62c]
push eax
lea ecx, [ebp - 0x9d4]
call fcn.10003cb0
lea eax, [ebp - 0x2b4]
push eax
lea eax, [ebp - 0x9d4]
push eax
push dword [ebp - 0xc44]
lea ecx, [ebp - 0x9bc]
call fcn.100078b0
lea eax, [ebp - 0xa1c]
push eax
lea eax, [ebp - 0x9bc]
push eax
push dword [ebp - 0xc44]
lea ecx, [ebp - 0x9a4]
call fcn.100078b0
lea eax, [ebp - 0x2cc]
push eax
lea eax, [ebp - 0x9a4]
push eax
push dword [ebp - 0xc44]
lea ecx, [ebp - 0x614]
call fcn.100078b0
movzx eax, byte [esi + 6]
push eax
lea ecx, [ebp - 0x614]
call fcn.10013e70
lea eax, [ebp - 0x614]
push eax
lea ecx, [ebp - 0x98c]
call fcn.10003cb0
lea eax, [ebp - 0xa34]
push eax
lea eax, [ebp - 0x98c]
push eax
push dword [ebp - 0xc44]
lea ecx, [ebp - 0x5fc]
call fcn.100078b0
mov al, byte [0x10037234]
mov byte [ebp - 0xc38], al
push dword [ebp - 0xc38]
lea ecx, [ebp - 0x5fc]
call fcn.10013e70
lea eax, [ebp - 0x5fc]
push eax
lea ecx, [ebp - 0x974]
call fcn.10003cb0
lea eax, [ebp - 0x2e4]
push eax
lea eax, [ebp - 0x974]
push eax
push dword [ebp - 0xc44]
lea ecx, [ebp - 0x47c]
call fcn.100078b0
lea eax, [ebp - 0x47c]
cmp dword [ebp - 0x468], 0x10
cmovae eax, dword [ebp - 0x47c]
push eax
call dword [sym.imp.KERNEL32.dll_LoadLibraryA]
mov dword [0x10037fec], eax
test eax, eax
je 0x1001d157
xor eax, eax
mov dword [ebp - 0x284], eax
mov dword [ebp - 0x274], eax
push 0xf
pop esi
mov dword [ebp - 0x270], esi
mov dword [ebp - 0xd4], eax
mov dword [ebp - 0xc4], eax
mov dword [ebp - 0xc0], esi
mov al, byte [0x10036b21]
mov byte [ebp - 0xc38], al
push dword [ebp - 0xc38]
lea ecx, [ebp - 0xd4]
call fcn.10013e70
lea eax, [ebp - 0xd4]
push eax
lea ecx, [ebp - 0x95c]
call fcn.10003cb0
and dword [ebp - 0x1dc], 0
and dword [ebp - 0x1cc], 0
mov dword [ebp - 0x1c8], esi
mov al, byte [0x10036ba3]
mov byte [ebp - 0xc38], al
push dword [ebp - 0xc38]
lea ecx, [ebp - 0x1dc]
call fcn.10013e70
lea eax, [ebp - 0x1dc]
push eax
lea ecx, [ebp - 0x944]
call fcn.10003cb0
xor ecx, ecx
mov dword [ebp - 0x26c], ecx
mov dword [ebp - 0x25c], ecx
mov dword [ebp - 0x258], esi
mov dword [ebp - 0x2c], ecx
mov dword [ebp - 0x1c], ecx
mov dword [ebp - 0x18], esi
mov al, byte [0x10036e72]
mov byte [ebp - 0xc38], al
push dword [ebp - 0xc38]
push 1
push ecx
lea ecx, [ebp - 0x2c]
call fcn.10013db0
push eax
lea ecx, [ebp - 0x92c]
call fcn.10003cb0
and dword [ebp - 0x14c], 0
and dword [ebp - 0x13c], 0
mov dword [ebp - 0x138], esi
mov al, byte [0x10037006]
mov byte [ebp - 0xc38], al
push dword [ebp - 0xc38]
lea ecx, [ebp - 0x14c]
call fcn.10013e70
lea eax, [ebp - 0x14c]
push eax
lea ecx, [ebp - 0x914]
call fcn.10003cb0
and dword [ebp - 0x44], 0
and dword [ebp - 0x34], 0
mov dword [ebp - 0x30], esi
movsx eax, byte [0x10036f6a]
push eax
call fcn.1002289a
pop ecx
mov byte [ebp - 0xc38], al
push dword [ebp - 0xc38]
push 1
push 0
lea ecx, [ebp - 0x44]
call fcn.10013db0
push eax
lea ecx, [ebp - 0x8fc]
call fcn.10003cb0
cmp dword [0x10036d4c], 0x10
cmovae edi, dword [0x10036d38]
and dword [ebp - 0x1ac], 0
and dword [ebp - 0x19c], 0
mov dword [ebp - 0x198], esi
movzx eax, byte [edi + 6]
push eax
lea ecx, [ebp - 0x1ac]
call fcn.10013e70
lea eax, [ebp - 0x1ac]
push eax
lea ecx, [ebp - 0x8e4]
call fcn.10003cb0
xor ecx, ecx
mov dword [ebp - 0x254], ecx
mov dword [ebp - 0x244], ecx
mov dword [ebp - 0x240], esi
mov eax, 0x10037180
push 0x10
pop edi
cmp dword [0x10037194], edi
cmovae eax, dword [0x10037180]
mov dword [ebp - 0x194], ecx
mov dword [ebp - 0x184], ecx
mov dword [ebp - 0x180], esi
movzx eax, byte [eax + 2]
push eax
lea ecx, [ebp - 0x194]
call fcn.10013e70
lea eax, [ebp - 0x194]
push eax
lea ecx, [ebp - 0x8cc]
call fcn.10003cb0
xor eax, eax
mov dword [ebp - 0x23c], eax
mov dword [ebp - 0x22c], eax
mov dword [ebp - 0x228], esi
mov dword [ebp - 0x224], eax
mov dword [ebp - 0x214], eax
mov dword [ebp - 0x210], esi
mov dword [ebp - 0x20c], eax
mov dword [ebp - 0x1fc], eax
mov dword [ebp - 0x1f8], esi
mov dword [ebp - 0x5c], eax
mov dword [ebp - 0x4c], eax
mov dword [ebp - 0x48], esi
movsx eax, byte [0x1003719b]
push eax
call fcn.1002289a
pop ecx
mov byte [ebp - 0xc38], al
push dword [ebp - 0xc38]
push 1
push 0
lea ecx, [ebp - 0x5c]
call fcn.10013db0
push eax
lea ecx, [ebp - 0x5e4]
call fcn.10003cb0
mov al, byte [0x10036c22]
mov byte [ebp - 0xc38], al
push dword [ebp - 0xc38]
lea ecx, [ebp - 0x5e4]
call fcn.10013e70
lea eax, [ebp - 0x5e4]
push eax
lea ecx, [ebp - 0x8b4]
call fcn.10003cb0
lea eax, [ebp - 0x20c]
push eax
lea eax, [ebp - 0x8b4]
push eax
push dword [ebp - 0xc44]
lea ecx, [ebp - 0x89c]
call fcn.100078b0
lea eax, [ebp - 0x224]
push eax
lea eax, [ebp - 0x89c]
push eax
push dword [ebp - 0xc44]
lea ecx, [ebp - 0x5cc]
call fcn.100078b0
mov al, byte [0x10037002]
mov byte [ebp - 0xc38], al
push dword [ebp - 0xc38]
lea ecx, [ebp - 0x5cc]
call fcn.10013e70
lea eax, [ebp - 0x5cc]
push eax
lea ecx, [ebp - 0x884]
call fcn.10003cb0
lea eax, [ebp - 0x23c]
push eax
lea eax, [ebp - 0x884]
push eax
push dword [ebp - 0xc44]
lea ecx, [ebp - 0x5b4]
call fcn.100078b0
mov al, byte [0x10037082]
mov byte [ebp - 0xc38], al
push dword [ebp - 0xc38]
lea ecx, [ebp - 0x5b4]
call fcn.10013e70
lea eax, [ebp - 0x5b4]
push eax
lea ecx, [ebp - 0x86c]
call fcn.10003cb0
lea eax, [ebp - 0x8cc]
push eax
lea eax, [ebp - 0x86c]
push eax
push dword [ebp - 0xc44]
lea ecx, [ebp - 0x77c]
call fcn.100078b0
lea eax, [ebp - 0x254]
push eax
lea eax, [ebp - 0x77c]
push eax
push dword [ebp - 0xc44]
lea ecx, [ebp - 0x59c]
call fcn.100078b0
mov al, byte [0x10036a8c]
mov byte [ebp - 0xc38], al
push dword [ebp - 0xc38]
lea ecx, [ebp - 0x59c]
call fcn.10013e70
lea eax, [ebp - 0x59c]
push eax
lea ecx, [ebp - 0x824]
call fcn.10003cb0
lea eax, [ebp - 0x8e4]
push eax
lea eax, [ebp - 0x824]
push eax
push dword [ebp - 0xc44]
lea ecx, [ebp - 0x80c]
call fcn.100078b0
lea eax, [ebp - 0x8fc]
push eax
lea eax, [ebp - 0x80c]
push eax
push dword [ebp - 0xc44]
lea ecx, [ebp - 0x7f4]
call fcn.100078b0
lea eax, [ebp - 0x914]
push eax
lea eax, [ebp - 0x7f4]
push eax
push dword [ebp - 0xc44]
lea ecx, [ebp - 0x7dc]
call fcn.100078b0
lea eax, [ebp - 0x92c]
push eax
lea eax, [ebp - 0x7dc]
push eax
push dword [ebp - 0xc44]
lea ecx, [ebp - 0x7c4]
call fcn.100078b0
lea eax, [ebp - 0x26c]
push eax
lea eax, [ebp - 0x7c4]
push eax
push dword [ebp - 0xc44]
lea ecx, [ebp - 0x584]
call fcn.100078b0
mov al, byte [0x10037082]
mov byte [ebp - 0xc38], al
push dword [ebp - 0xc38]
lea ecx, [ebp - 0x584]
call fcn.10013e70
lea eax, [ebp - 0x584]
push eax
lea ecx, [ebp - 0x7ac]
call fcn.10003cb0
lea eax, [ebp - 0x944]
push eax
lea eax, [ebp - 0x7ac]
push eax
push dword [ebp - 0xc44]
lea ecx, [ebp - 0x794]
call fcn.100078b0
lea eax, [ebp - 0x95c]
push eax
lea eax, [ebp - 0x794]
push eax
push dword [ebp - 0xc44]
lea ecx, [ebp - 0x6bc]
call fcn.100078b0
lea eax, [ebp - 0x284]
push eax
lea eax, [ebp - 0x6bc]
push eax
push dword [ebp - 0xc44]
lea ecx, [ebp - 0x56c]
call fcn.100078b0
mov al, byte [0x10037082]
mov byte [ebp - 0xc38], al
push dword [ebp - 0xc38]
lea ecx, [ebp - 0x56c]
call fcn.10013e70
lea eax, [ebp - 0x56c]
push eax
lea ecx, [ebp - 0x464]
call fcn.10003cb0
lea eax, [ebp - 0x464]
cmp dword [ebp - 0x450], edi
cmovae eax, dword [ebp - 0x464]
push eax
push dword [0x10037fec]
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
mov edx, eax
mov eax, 0x1ff
mov dword [ebp - 0xc30], eax
or eax, 0xffffffff
mov dword [ebp - 0xc40], eax
jmp 0x1001d15c
xor edx, edx
push 0x10
pop edi
mov ecx, 0xfffffe00
mov dword [ebp - 0xc3c], ecx
lea eax, [ebp - 0xc4c]
push eax
push 0x40
push dword [ebp - 0xc34]
push dword [ebp - 0xc48]
call edx
mov dword [ebp - 0xc38], eax
mov eax, dword [ebp - 0xc30]
test eax, 0x100
je 0x1001d1ad
and eax, 0xfffffeff
mov dword [ebp - 0xc30], eax
lea ecx, [ebp - 0x464]
call fcn.10003f1f
mov eax, dword [ebp - 0xc30]
test al, al
jns 0x1001d1cd
and eax, 0xffffff7f
mov dword [ebp - 0xc30], eax
lea ecx, [ebp - 0x56c]
call fcn.10003f1f
mov eax, dword [ebp - 0xc30]
test al, 0x40
je 0x1001d1eb
and eax, 0xffffffbf
mov dword [ebp - 0xc30], eax
lea ecx, [ebp - 0x6bc]
call fcn.10003f1f
mov eax, dword [ebp - 0xc30]
test al, 0x20
je 0x1001d209
and eax, 0xffffffdf
mov dword [ebp - 0xc30], eax
lea ecx, [ebp - 0x794]
call fcn.10003f1f
mov eax, dword [ebp - 0xc30]
test al, 0x10
je 0x1001d227
and eax, 0xffffffef
mov dword [ebp - 0xc30], eax
lea ecx, [ebp - 0x7ac]
call fcn.10003f1f
mov eax, dword [ebp - 0xc30]
test al, 8
je 0x1001d245
and eax, 0xfffffff7
mov dword [ebp - 0xc30], eax
lea ecx, [ebp - 0x584]
call fcn.10003f1f
mov eax, dword [ebp - 0xc30]
test al, 4
je 0x1001d263
and eax, 0xfffffffb
mov dword [ebp - 0xc30], eax
lea ecx, [ebp - 0x7c4]
call fcn.10003f1f
mov eax, dword [ebp - 0xc30]
test al, 2
je 0x1001d281
and eax, 0xfffffffd
mov dword [ebp - 0xc30], eax
lea ecx, [ebp - 0x7dc]
call fcn.10003f1f
mov eax, dword [ebp - 0xc30]
test al, 1
je 0x1001d290
lea ecx, [ebp - 0x7f4]
call fcn.10003f1f
mov eax, dword [ebp - 0xc40]
test eax, eax
jns 0x1001d2b6
and eax, 0x7fffffff
mov dword [ebp - 0xc40], eax
lea ecx, [ebp - 0x80c]
call fcn.10003f1f
mov eax, dword [ebp - 0xc40]
test eax, 0x40000000
je 0x1001d2d9
and eax, 0xbfffffff
mov dword [ebp - 0xc40], eax
lea ecx, [ebp - 0x824]
call fcn.10003f1f
mov eax, dword [ebp - 0xc40]
test eax, 0x20000000
je 0x1001d2fc
and eax, 0xdfffffff
mov dword [ebp - 0xc40], eax
lea ecx, [ebp - 0x59c]
call fcn.10003f1f
mov eax, dword [ebp - 0xc40]
test eax, 0x10000000
je 0x1001d31f
and eax, 0xefffffff
mov dword [ebp - 0xc40], eax
lea ecx, [ebp - 0x77c]
call fcn.10003f1f
mov eax, dword [ebp - 0xc40]
test eax, 0x8000000
je 0x1001d342
and eax, 0xf7ffffff
mov dword [ebp - 0xc40], eax
lea ecx, [ebp - 0x86c]
call fcn.10003f1f
mov eax, dword [ebp - 0xc40]
test eax, 0x4000000
je 0x1001d365
and eax, 0xfbffffff
mov dword [ebp - 0xc40], eax
lea ecx, [ebp - 0x5b4]
call fcn.10003f1f
mov eax, dword [ebp - 0xc40]
test eax, 0x2000000
je 0x1001d388
and eax, 0xfdffffff
mov dword [ebp - 0xc40], eax
lea ecx, [ebp - 0x884]
call fcn.10003f1f
mov eax, dword [ebp - 0xc40]
test eax, 0x1000000
je 0x1001d3ab
and eax, 0xfeffffff
mov dword [ebp - 0xc40], eax
lea ecx, [ebp - 0x5cc]
call fcn.10003f1f
mov eax, dword [ebp - 0xc40]
test eax, 0x800000
je 0x1001d3ce
and eax, 0xff7fffff
mov dword [ebp - 0xc40], eax
lea ecx, [ebp - 0x89c]
call fcn.10003f1f
mov eax, dword [ebp - 0xc40]
test eax, 0x400000
je 0x1001d3f1
and eax, 0xffbfffff
mov dword [ebp - 0xc40], eax
lea ecx, [ebp - 0x8b4]
call fcn.10003f1f
mov eax, dword [ebp - 0xc40]
test eax, 0x200000
je 0x1001d414
and eax, 0xffdfffff
mov dword [ebp - 0xc40], eax
lea ecx, [ebp - 0x5e4]
call fcn.10003f1f
mov eax, dword [ebp - 0xc40]
mov esi, 0x1000
test eax, 0x100000
je 0x1001d487
and eax, 0xffefffff
mov dword [ebp - 0xc40], eax
mov ecx, dword [ebp - 0x48]
cmp ecx, edi
jb 0x1001d478
lea eax, [ecx + 1]
mov dword [ebp - 0xc30], eax
mov ecx, dword [ebp - 0x5c]
mov dword [ebp - 0xc34], ecx
cmp eax, esi
jb 0x1001d469
lea eax, [ebp - 0xc30]
push eax
lea eax, [ebp - 0xc34]
push eax
call fcn.10001533
pop ecx
pop ecx
mov eax, dword [ebp - 0xc30]
mov ecx, dword [ebp - 0xc34]
push eax
push ecx
call fcn.1001f295
pop ecx
pop ecx
mov eax, dword [ebp - 0xc40]
and dword [ebp - 0x4c], 0
mov dword [ebp - 0x48], 0xf
mov byte [ebp - 0x5c], 0
test eax, 0x80000
je 0x1001d4ec
and eax, 0xfff7ffff
mov dword [ebp - 0xc40], eax
mov ecx, dword [ebp - 0x1f8]
cmp ecx, edi
jb 0x1001d4ec
lea eax, [ecx + 1]
mov dword [ebp - 0xc34], eax
mov ecx, dword [ebp - 0x20c]
mov dword [ebp - 0xc30], ecx
cmp eax, esi
jb 0x1001d4dd
lea eax, [ebp - 0xc34]
push eax
lea eax, [ebp - 0xc30]
push eax
call fcn.10001533
pop ecx
pop ecx
mov eax, dword [ebp - 0xc34]
mov ecx, dword [ebp - 0xc30]
push eax
push ecx
call fcn.1001f295
pop ecx
pop ecx
mov eax, dword [ebp - 0xc40]
test eax, 0x40000
je 0x1001d551
and eax, 0xfffbffff
mov dword [ebp - 0xc40], eax
mov ecx, dword [ebp - 0x210]
cmp ecx, edi
jb 0x1001d551
lea eax, [ecx + 1]
mov dword [ebp - 0xc34], eax
mov ecx, dword [ebp - 0x224]
mov dword [ebp - 0xc30], ecx
cmp eax, esi
jb 0x1001d542
lea eax, [ebp - 0xc34]
push eax
lea eax, [ebp - 0xc30]
push eax
call fcn.10001533
pop ecx
pop ecx
mov eax, dword [ebp - 0xc34]
mov ecx, dword [ebp - 0xc30]
push eax
push ecx
call fcn.1001f295
pop ecx
pop ecx
mov eax, dword [ebp - 0xc40]
test eax, 0x20000
je 0x1001d5b6
and eax, 0xfffdffff
mov dword [ebp - 0xc40], eax
mov ecx, dword [ebp - 0x228]
cmp ecx, edi
jb 0x1001d5b6
lea eax, [ecx + 1]
mov dword [ebp - 0xc34], eax
mov ecx, dword [ebp - 0x23c]
mov dword [ebp - 0xc30], ecx
cmp eax, esi
jb 0x1001d5a7
lea eax, [ebp - 0xc34]
push eax
lea eax, [ebp - 0xc30]
push eax
call fcn.10001533
pop ecx
pop ecx
mov eax, dword [ebp - 0xc34]
mov ecx, dword [ebp - 0xc30]
push eax
push ecx
call fcn.1001f295
pop ecx
pop ecx
mov eax, dword [ebp - 0xc40]
test eax, 0x10000
je 0x1001d5d9
and eax, 0xfffeffff
mov dword [ebp - 0xc40], eax
lea ecx, [ebp - 0x8cc]
call fcn.10003f1f
mov eax, dword [ebp - 0xc40]
test eax, 0x8000
je 0x1001d63e
and eax, 0xffff7fff
mov dword [ebp - 0xc40], eax
mov ecx, dword [ebp - 0x180]
cmp ecx, edi
jb 0x1001d63e
lea eax, [ecx + 1]
mov dword [ebp - 0xc34], eax
mov ecx, dword [ebp - 0x194]
mov dword [ebp - 0xc30], ecx
cmp eax, esi
jb 0x1001d62f
lea eax, [ebp - 0xc34]
push eax
lea eax, [ebp - 0xc30]
push eax
call fcn.10001533
pop ecx
pop ecx
mov eax, dword [ebp - 0xc34]
mov ecx, dword [ebp - 0xc30]
push eax
push ecx
call fcn.1001f295
pop ecx
pop ecx
mov eax, dword [ebp - 0xc40]
test eax, 0x4000
je 0x1001d6a3
and eax, 0xffffbfff
mov dword [ebp - 0xc40], eax
mov ecx, dword [ebp - 0x240]
cmp ecx, edi
jb 0x1001d6a3
lea eax, [ecx + 1]
mov dword [ebp - 0xc34], eax
mov ecx, dword [ebp - 0x254]
mov dword [ebp - 0xc30], ecx
cmp eax, esi
jb 0x1001d694
lea eax, [ebp - 0xc34]
push eax
lea eax, [ebp - 0xc30]
push eax
call fcn.10001533
pop ecx
pop ecx
mov eax, dword [ebp - 0xc34]
mov ecx, dword [ebp - 0xc30]
push eax
push ecx
call fcn.1001f295
pop ecx
pop ecx
mov eax, dword [ebp - 0xc40]
test eax, 0x2000
je 0x1001d6c6
and eax, 0xffffdfff
mov dword [ebp - 0xc40], eax
lea ecx, [ebp - 0x8e4]
call fcn.10003f1f
mov eax, dword [ebp - 0xc40]
test esi, eax
je 0x1001d728
and eax, 0xffffefff
mov dword [ebp - 0xc40], eax
mov ecx, dword [ebp - 0x198]
cmp ecx, edi
jb 0x1001d728
lea eax, [ecx + 1]
mov dword [ebp - 0xc34], eax
mov ecx, dword [ebp - 0x1ac]
mov dword [ebp - 0xc30], ecx
cmp eax, esi
jb 0x1001d719
lea eax, [ebp - 0xc34]
push eax
lea eax, [ebp - 0xc30]
push eax
call fcn.10001533
pop ecx
pop ecx
mov eax, dword [ebp - 0xc34]
mov ecx, dword [ebp - 0xc30]
push eax
push ecx
call fcn.1001f295
pop ecx
pop ecx
mov eax, dword [ebp - 0xc40]
test eax, 0x800
je 0x1001d74b
and eax, 0xfffff7ff
mov dword [ebp - 0xc40], eax
lea ecx, [ebp - 0x8fc]
call fcn.10003f1f
mov eax, dword [ebp - 0xc40]
test eax, 0x400
je 0x1001d7b9
and eax, 0xfffffbff
mov dword [ebp - 0xc40], eax
mov ecx, dword [ebp - 0x30]
cmp ecx, edi
jb 0x1001d7aa
lea eax, [ecx + 1]
mov dword [ebp - 0xc34], eax
mov ecx, dword [ebp - 0x44]
mov dword [ebp - 0xc30], ecx
cmp eax, esi
jb 0x1001d79b
lea eax, [ebp - 0xc34]
push eax
lea eax, [ebp - 0xc30]
push eax
call fcn.10001533
pop ecx
pop ecx
mov eax, dword [ebp - 0xc34]
mov ecx, dword [ebp - 0xc30]
push eax
push ecx
call fcn.1001f295
pop ecx
pop ecx
mov eax, dword [ebp - 0xc40]
and dword [ebp - 0x34], 0
mov dword [ebp - 0x30], 0xf
mov byte [ebp - 0x44], 0
mov edi, 0xfffffdff
test eax, 0x200
je 0x1001d7de
and eax, edi
mov dword [ebp - 0xc40], eax
lea ecx, [ebp - 0x914]
call fcn.10003f1f
mov eax, dword [ebp - 0xc40]
test eax, 0x100
je 0x1001d844
and eax, 0xfffffeff
mov dword [ebp - 0xc40], eax
mov ecx, dword [ebp - 0x138]
cmp ecx, 0x10
jb 0x1001d844
lea eax, [ecx + 1]
mov dword [ebp - 0xc34], eax
mov ecx, dword [ebp - 0x14c]
mov dword [ebp - 0xc30], ecx
cmp eax, esi
jb 0x1001d835
lea eax, [ebp - 0xc34]
push eax
lea eax, [ebp - 0xc30]
push eax
call fcn.10001533
pop ecx
pop ecx
mov eax, dword [ebp - 0xc34]
mov ecx, dword [ebp - 0xc30]
push eax
push ecx
call fcn.1001f295
pop ecx
pop ecx
mov eax, dword [ebp - 0xc40]
test al, al
jns 0x1001d864
and eax, 0xffffff7f
mov dword [ebp - 0xc40], eax
lea ecx, [ebp - 0x92c]
call fcn.10003f1f
mov eax, dword [ebp - 0xc40]
test al, 0x40
je 0x1001d8ce
and eax, 0xffffffbf
mov dword [ebp - 0xc40], eax
mov ecx, dword [ebp - 0x18]
cmp ecx, 0x10
jb 0x1001d8bf
lea eax, [ecx + 1]
mov dword [ebp - 0xc34], eax
mov ecx, dword [ebp - 0x2c]
mov dword [ebp - 0xc30], ecx
cmp eax, esi
jb 0x1001d8b0
lea eax, [ebp - 0xc34]
push eax
lea eax, [ebp - 0xc30]
push eax
call fcn.10001533
pop ecx
pop ecx
mov eax, dword [ebp - 0xc34]
mov ecx, dword [ebp - 0xc30]
push eax
push ecx
call fcn.1001f295
pop ecx
pop ecx
mov eax, dword [ebp - 0xc40]
and dword [ebp - 0x1c], 0
mov dword [ebp - 0x18], 0xf
mov byte [ebp - 0x2c], 0
test al, 0x20
je 0x1001d92f
and eax, 0xffffffdf
mov dword [ebp - 0xc40], eax
mov ecx, dword [ebp - 0x258]
cmp ecx, 0x10
jb 0x1001d92f
lea eax, [ecx + 1]
mov dword [ebp - 0xc34], eax
mov ecx, dword [ebp - 0x26c]
mov dword [ebp - 0xc30], ecx
cmp eax, esi
jb 0x1001d920
lea eax, [ebp - 0xc34]
push eax
lea eax, [ebp - 0xc30]
push eax
call fcn.10001533
pop ecx
pop ecx
mov eax, dword [ebp - 0xc34]
mov ecx, dword [ebp - 0xc30]
push eax
push ecx
call fcn.1001f295
pop ecx
pop ecx
mov eax, dword [ebp - 0xc40]
test al, 0x10
je 0x1001d94d
and eax, 0xffffffef
mov dword [ebp - 0xc40], eax
lea ecx, [ebp - 0x944]
call fcn.10003f1f
mov eax, dword [ebp - 0xc40]
test al, 8
je 0x1001d9ae
and eax, 0xfffffff7
mov dword [ebp - 0xc40], eax
mov ecx, dword [ebp - 0x1c8]
cmp ecx, 0x10
jb 0x1001d9ae
lea eax, [ecx + 1]
mov dword [ebp - 0xc34], eax
mov ecx, dword [ebp - 0x1dc]
mov dword [ebp - 0xc30], ecx
cmp eax, esi
jb 0x1001d99f
lea eax, [ebp - 0xc34]
push eax
lea eax, [ebp - 0xc30]
push eax
call fcn.10001533
pop ecx
pop ecx
mov eax, dword [ebp - 0xc34]
mov ecx, dword [ebp - 0xc30]
push eax
push ecx
call fcn.1001f295
pop ecx
pop ecx
mov eax, dword [ebp - 0xc40]
test al, 4
je 0x1001d9cc
and eax, 0xfffffffb
mov dword [ebp - 0xc40], eax
lea ecx, [ebp - 0x95c]
call fcn.10003f1f
mov eax, dword [ebp - 0xc40]
test al, 2
je 0x1001da2d
and eax, 0xfffffffd
mov dword [ebp - 0xc40], eax
mov ecx, dword [ebp - 0xc0]
cmp ecx, 0x10
jb 0x1001da2d
lea eax, [ecx + 1]
mov dword [ebp - 0xc34], eax
mov ecx, dword [ebp - 0xd4]
mov dword [ebp - 0xc30], ecx
cmp eax, esi
jb 0x1001da1e
lea eax, [ebp - 0xc34]
push eax
lea eax, [ebp - 0xc30]
push eax
call fcn.10001533
pop ecx
pop ecx
mov eax, dword [ebp - 0xc34]
mov ecx, dword [ebp - 0xc30]
push eax
push ecx
call fcn.1001f295
pop ecx
pop ecx
mov eax, dword [ebp - 0xc40]
test al, 1
je 0x1001da7d
mov eax, dword [ebp - 0x270]
cmp eax, 0x10
jb 0x1001da7d
inc eax
mov dword [ebp - 0xc34], eax
mov ecx, dword [ebp - 0x284]
mov dword [ebp - 0xc30], ecx
cmp eax, esi
jb 0x1001da74
lea eax, [ebp - 0xc34]
push eax
lea eax, [ebp - 0xc30]
push eax
call fcn.10001533
pop ecx
pop ecx
mov eax, dword [ebp - 0xc34]
mov ecx, dword [ebp - 0xc30]
push eax
push ecx
call fcn.1001f295
pop ecx
pop ecx
mov eax, dword [ebp - 0xc3c]
test eax, eax
jns 0x1001daa3
and eax, 0x7fffffff
mov dword [ebp - 0xc3c], eax
lea ecx, [ebp - 0x47c]
call fcn.10003f1f
mov eax, dword [ebp - 0xc3c]
test eax, 0x40000000
je 0x1001dac6
and eax, 0xbfffffff
mov dword [ebp - 0xc3c], eax
lea ecx, [ebp - 0x974]
call fcn.10003f1f
mov eax, dword [ebp - 0xc3c]
test eax, 0x20000000
je 0x1001dae9
and eax, 0xdfffffff
mov dword [ebp - 0xc3c], eax
lea ecx, [ebp - 0x5fc]
call fcn.10003f1f
mov eax, dword [ebp - 0xc3c]
test eax, 0x10000000
je 0x1001db0c
and eax, 0xefffffff
mov dword [ebp - 0xc3c], eax
lea ecx, [ebp - 0x98c]
call fcn.10003f1f
mov eax, dword [ebp - 0xc3c]
test eax, 0x8000000
je 0x1001db2f
and eax, 0xf7ffffff
mov dword [ebp - 0xc3c], eax
lea ecx, [ebp - 0x614]
call fcn.10003f1f
mov eax, dword [ebp - 0xc3c]
test eax, 0x4000000
je 0x1001db52
and eax, 0xfbffffff
mov dword [ebp - 0xc3c], eax
lea ecx, [ebp - 0x9a4]
call fcn.10003f1f
mov eax, dword [ebp - 0xc3c]
test eax, 0x2000000
je 0x1001db75
and eax, 0xfdffffff
mov dword [ebp - 0xc3c], eax
lea ecx, [ebp - 0x9bc]
call fcn.10003f1f
mov eax, dword [ebp - 0xc3c]
test eax, 0x1000000
je 0x1001db98
and eax, 0xfeffffff
mov dword [ebp - 0xc3c], eax
lea ecx, [ebp - 0x9d4]
call fcn.10003f1f
mov eax, dword [ebp - 0xc3c]
test eax, 0x800000
je 0x1001dbbb
and eax, 0xff7fffff
mov dword [ebp - 0xc3c], eax
lea ecx, [ebp - 0x62c]
call fcn.10003f1f
mov eax, dword [ebp - 0xc3c]
test eax, 0x400000
je 0x1001dbde
and eax, 0xffbfffff
mov dword [ebp - 0xc3c], eax
lea ecx, [ebp - 0x9ec]
call fcn.10003f1f
mov eax, dword [ebp - 0xc3c]
test eax, 0x200000
je 0x1001dc01
and eax, 0xffdfffff
mov dword [ebp - 0xc3c], eax
lea ecx, [ebp - 0x644]
call fcn.10003f1f
mov eax, dword [ebp - 0xc3c]
test eax, 0x100000
je 0x1001dc24
and eax, 0xffefffff
mov dword [ebp - 0xc3c], eax
lea ecx, [ebp - 0x65c]
call fcn.10003f1f
mov eax, dword [ebp - 0xc3c]
test eax, 0x80000
je 0x1001dc47
and eax, 0xfff7ffff
mov dword [ebp - 0xc3c], eax
lea ecx, [ebp - 0xa04]
call fcn.10003f1f
mov eax, dword [ebp - 0xc3c]
test eax, 0x40000
je 0x1001dcc5
and eax, 0xfffbffff
mov dword [ebp - 0xc3c], eax
mov ecx, dword [ebp - 0x90]
cmp ecx, 0x10
jb 0x1001dcad
lea eax, [ecx + 1]
mov dword [ebp - 0xc34], eax
mov ecx, dword [ebp - 0xa4]
mov dword [ebp - 0xc30], ecx
cmp eax, esi
jb 0x1001dc9e
lea eax, [ebp - 0xc34]
push eax
lea eax, [ebp - 0xc30]
push eax
call fcn.10001533
pop ecx
pop ecx
mov eax, dword [ebp - 0xc34]
mov ecx, dword [ebp - 0xc30]
push eax
push ecx
call fcn.1001f295
pop ecx
pop ecx
mov eax, dword [ebp - 0xc3c]
and dword [ebp - 0x94], 0
mov dword [ebp - 0x90], 0xf
mov byte [ebp - 0xa4], 0
test eax, 0x20000
je 0x1001dd2b
and eax, 0xfffdffff
mov dword [ebp - 0xc3c], eax
mov ecx, dword [ebp - 0x288]
cmp ecx, 0x10
jb 0x1001dd2b
lea eax, [ecx + 1]
mov dword [ebp - 0xc34], eax
mov ecx, dword [ebp - 0x29c]
mov dword [ebp - 0xc30], ecx
cmp eax, esi
jb 0x1001dd1c
lea eax, [ebp - 0xc34]
push eax
lea eax, [ebp - 0xc30]
push eax
call fcn.10001533
pop ecx
pop ecx
mov eax, dword [ebp - 0xc34]
mov ecx, dword [ebp - 0xc30]
push eax
push ecx
call fcn.1001f295
pop ecx
pop ecx
mov eax, dword [ebp - 0xc3c]
test eax, 0x10000
je 0x1001dd91
and eax, 0xfffeffff
mov dword [ebp - 0xc3c], eax
mov ecx, dword [ebp - 0x1e0]
cmp ecx, 0x10
jb 0x1001dd91
lea eax, [ecx + 1]
mov dword [ebp - 0xc34], eax
mov ecx, dword [ebp - 0x1f4]
mov dword [ebp - 0xc30], ecx
cmp eax, esi
jb 0x1001dd82
lea eax, [ebp - 0xc34]
push eax
lea eax, [ebp - 0xc30]
push eax
call fcn.10001533
pop ecx
pop ecx
mov eax, dword [ebp - 0xc34]
mov ecx, dword [ebp - 0xc30]
push eax
push ecx
call fcn.1001f295
pop ecx
pop ecx
mov eax, dword [ebp - 0xc3c]
test eax, 0x8000
je 0x1001ddf7
and eax, 0xffff7fff
mov dword [ebp - 0xc3c], eax
mov ecx, dword [ebp - 0x2a0]
cmp ecx, 0x10
jb 0x1001ddf7
lea eax, [ecx + 1]
mov dword [ebp - 0xc34], eax
mov ecx, dword [ebp - 0x2b4]
mov dword [ebp - 0xc30], ecx
cmp eax, esi
jb 0x1001dde8
lea eax, [ebp - 0xc34]
push eax
lea eax, [ebp - 0xc30]
push eax
call fcn.10001533
pop ecx
pop ecx
mov eax, dword [ebp - 0xc34]
mov ecx, dword [ebp - 0xc30]
push eax
push ecx
call fcn.1001f295
pop ecx
pop ecx
mov eax, dword [ebp - 0xc3c]
test eax, 0x4000
je 0x1001de1a
and eax, 0xffffbfff
mov dword [ebp - 0xc3c], eax
lea ecx, [ebp - 0xa1c]
call fcn.10003f1f
mov eax, dword [ebp - 0xc3c]
test eax, 0x2000
je 0x1001de80
and eax, 0xffffdfff
mov dword [ebp - 0xc3c], eax
mov ecx, dword [ebp - 0xd8]
cmp ecx, 0x10
jb 0x1001de80
lea eax, [ecx + 1]
mov dword [ebp - 0xc34], eax
mov ecx, dword [ebp - 0xec]
mov dword [ebp - 0xc30], ecx
cmp eax, esi
jb 0x1001de71
lea eax, [ebp - 0xc34]
push eax
lea eax, [ebp - 0xc30]
push eax
call fcn.10001533
pop ecx
pop ecx
mov eax, dword [ebp - 0xc34]
mov ecx, dword [ebp - 0xc30]
push eax
push ecx
call fcn.1001f295
pop ecx
pop ecx
mov eax, dword [ebp - 0xc3c]
test esi, eax
je 0x1001dee3
and eax, 0xffffefff
mov dword [ebp - 0xc3c], eax
mov ecx, dword [ebp - 0x2b8]
cmp ecx, 0x10
jb 0x1001dee3
lea eax, [ecx + 1]
mov dword [ebp - 0xc34], eax
mov ecx, dword [ebp - 0x2cc]
mov dword [ebp - 0xc30], ecx
cmp eax, esi
jb 0x1001ded4
lea eax, [ebp - 0xc34]
push eax
lea eax, [ebp - 0xc30]
push eax
call fcn.10001533
pop ecx
pop ecx
mov eax, dword [ebp - 0xc34]
mov ecx, dword [ebp - 0xc30]
push eax
push ecx
call fcn.1001f295
pop ecx
pop ecx
mov eax, dword [ebp - 0xc3c]
test eax, 0x800
je 0x1001df06
and eax, 0xfffff7ff
mov dword [ebp - 0xc3c], eax
lea ecx, [ebp - 0xa34]
call fcn.10003f1f
mov eax, dword [ebp - 0xc3c]
test eax, 0x400
je 0x1001df6c
and eax, 0xfffffbff
mov dword [ebp - 0xc3c], eax
mov ecx, dword [ebp - 0xf0]
cmp ecx, 0x10
jb 0x1001df6c
lea eax, [ecx + 1]
mov dword [ebp - 0xc34], eax
mov ecx, dword [ebp - 0x104]
mov dword [ebp - 0xc30], ecx
cmp eax, esi
jb 0x1001df5d
lea eax, [ebp - 0xc34]
push eax
lea eax, [ebp - 0xc30]
push eax
call fcn.10001533
pop ecx
pop ecx
mov eax, dword [ebp - 0xc34]
mov ecx, dword [ebp - 0xc30]
push eax
push ecx
call fcn.1001f295
pop ecx
pop ecx
mov eax, dword [ebp - 0xc3c]
test eax, 0x200
je 0x1001dfcf
and eax, edi
mov dword [ebp - 0xc3c], eax
mov ecx, dword [ebp - 0x2d0]
cmp ecx, 0x10
jb 0x1001dfcf
lea eax, [ecx + 1]
mov dword [ebp - 0xc34], eax
mov ecx, dword [ebp - 0x2e4]
mov dword [ebp - 0xc30], ecx
cmp eax, esi
jb 0x1001dfc0
lea eax, [ebp - 0xc34]
push eax
lea eax, [ebp - 0xc30]
push eax
call fcn.10001533
pop ecx
pop ecx
mov eax, dword [ebp - 0xc34]
mov ecx, dword [ebp - 0xc30]
push eax
push ecx
call fcn.1001f295
pop ecx
pop ecx
mov eax, dword [ebp - 0xc3c]
test eax, 0x100
je 0x1001dff2
and eax, 0xfffffeff
mov dword [ebp - 0xc3c], eax
lea ecx, [ebp - 0x494]
call fcn.10003f1f
mov eax, dword [ebp - 0xc3c]
test al, al
jns 0x1001e012
and eax, 0xffffff7f
mov dword [ebp - 0xc3c], eax
lea ecx, [ebp - 0x674]
call fcn.10003f1f
mov eax, dword [ebp - 0xc3c]
test al, 0x40
je 0x1001e030
and eax, 0xffffffbf
mov dword [ebp - 0xc3c], eax
lea ecx, [ebp - 0xa4c]
call fcn.10003f1f
mov eax, dword [ebp - 0xc3c]
test al, 0x20
je 0x1001e04e
and eax, 0xffffffdf
mov dword [ebp - 0xc3c], eax
lea ecx, [ebp - 0xa64]
call fcn.10003f1f
mov eax, dword [ebp - 0xc3c]
test al, 0x10
je 0x1001e06c
and eax, 0xffffffef
mov dword [ebp - 0xc3c], eax
lea ecx, [ebp - 0xa7c]
call fcn.10003f1f
mov eax, dword [ebp - 0xc3c]
test al, 8
je 0x1001e08a
and eax, 0xfffffff7
mov dword [ebp - 0xc3c], eax
lea ecx, [ebp - 0x68c]
call fcn.10003f1f
mov eax, dword [ebp - 0xc3c]
test al, 4
je 0x1001e0a8
and eax, 0xfffffffb
mov dword [ebp - 0xc3c], eax
lea ecx, [ebp - 0xa94]
call fcn.10003f1f
mov eax, dword [ebp - 0xc3c]
test al, 2
je 0x1001e0c6
and eax, 0xfffffffd
mov dword [ebp - 0xc3c], eax
lea ecx, [ebp - 0xaac]
call fcn.10003f1f
mov eax, dword [ebp - 0xc3c]
test al, 1
je 0x1001e0d5
lea ecx, [ebp - 0xac4]
call fcn.10003f1f
test ebx, ebx
jns 0x1001e0ea
and ebx, 0x7fffffff
lea ecx, [ebp - 0xadc]
call fcn.10003f1f
test ebx, 0x40000000
je 0x1001e103
and ebx, 0xbfffffff
lea ecx, [ebp - 0xaf4]
call fcn.10003f1f
test ebx, 0x20000000
je 0x1001e11c
and ebx, 0xdfffffff
lea ecx, [ebp - 0x6a4]
call fcn.10003f1f
test ebx, 0x10000000
je 0x1001e135
and ebx, 0xefffffff
lea ecx, [ebp - 0xb0c]
call fcn.10003f1f
test ebx, 0x8000000
je 0x1001e14e
and ebx, 0xf7ffffff
lea ecx, [ebp - 0xb24]
call fcn.10003f1f
test ebx, 0x4000000
je 0x1001e167
and ebx, 0xfbffffff
lea ecx, [ebp - 0x4ac]
call fcn.10003f1f
test ebx, 0x2000000
je 0x1001e180
and ebx, 0xfdffffff
lea ecx, [ebp - 0xb3c]
call fcn.10003f1f
test ebx, 0x1000000
je 0x1001e199
and ebx, 0xfeffffff
lea ecx, [ebp - 0x4c4]
call fcn.10003f1f
test ebx, 0x800000
je 0x1001e1b2
and ebx, 0xff7fffff
lea ecx, [ebp - 0xb54]
call fcn.10003f1f
test ebx, 0x400000
je 0x1001e1cb
and ebx, 0xffbfffff
lea ecx, [ebp - 0xb6c]
call fcn.10003f1f
test ebx, 0x200000
je 0x1001e1e4
and ebx, 0xffdfffff
lea ecx, [ebp - 0x4dc]
call fcn.10003f1f
test ebx, 0x100000
je 0x1001e247
and ebx, 0xffefffff
mov eax, dword [ebp - 0x60]
cmp eax, 0x10
jb 0x1001e238
inc eax
mov dword [ebp - 0xc34], eax
mov ecx, dword [ebp - 0x74]
mov dword [ebp - 0xc30], ecx
cmp eax, esi
jb 0x1001e22f
lea eax, [ebp - 0xc34]
push eax
lea eax, [ebp - 0xc30]
push eax
call fcn.10001533
pop ecx
pop ecx
mov eax, dword [ebp - 0xc34]
mov ecx, dword [ebp - 0xc30]
push eax
push ecx
call fcn.1001f295
pop ecx
pop ecx
and dword [ebp - 0x64], 0
mov dword [ebp - 0x60], 0xf
mov byte [ebp - 0x74], 0
test ebx, 0x80000
je 0x1001e2a1
and ebx, 0xfff7ffff
mov eax, dword [ebp - 0x2e8]
cmp eax, 0x10
jb 0x1001e2a1
inc eax
mov dword [ebp - 0xc34], eax
mov ecx, dword [ebp - 0x2fc]
mov dword [ebp - 0xc30], ecx
cmp eax, esi
jb 0x1001e298
lea eax, [ebp - 0xc34]
push eax
lea eax, [ebp - 0xc30]
push eax
call fcn.10001533
pop ecx
pop ecx
mov eax, dword [ebp - 0xc34]
mov ecx, dword [ebp - 0xc30]
push eax
push ecx
call fcn.1001f295
pop ecx
pop ecx
test ebx, 0x40000
je 0x1001e2fb
and ebx, 0xfffbffff
mov eax, dword [ebp - 0x300]
cmp eax, 0x10
jb 0x1001e2fb
inc eax
mov dword [ebp - 0xc34], eax
mov ecx, dword [ebp - 0x314]
mov dword [ebp - 0xc30], ecx
cmp eax, esi
jb 0x1001e2f2
lea eax, [ebp - 0xc34]
push eax
lea eax, [ebp - 0xc30]
push eax
call fcn.10001533
pop ecx
pop ecx
mov eax, dword [ebp - 0xc34]
mov ecx, dword [ebp - 0xc30]
push eax
push ecx
call fcn.1001f295
pop ecx
pop ecx
test ebx, 0x20000
je 0x1001e355
and ebx, 0xfffdffff
mov eax, dword [ebp - 0x318]
cmp eax, 0x10
jb 0x1001e355
inc eax
mov dword [ebp - 0xc34], eax
mov ecx, dword [ebp - 0x32c]
mov dword [ebp - 0xc30], ecx
cmp eax, esi
jb 0x1001e34c
lea eax, [ebp - 0xc34]
push eax
lea eax, [ebp - 0xc30]
push eax
call fcn.10001533
pop ecx
pop ecx
mov eax, dword [ebp - 0xc34]
mov ecx, dword [ebp - 0xc30]
push eax
push ecx
call fcn.1001f295
pop ecx
pop ecx
test ebx, 0x10000
je 0x1001e36e
and ebx, 0xfffeffff
lea ecx, [ebp - 0xb84]
call fcn.10003f1f
test ebx, 0x8000
je 0x1001e3c8
and ebx, 0xffff7fff
mov eax, dword [ebp - 0x108]
cmp eax, 0x10
jb 0x1001e3c8
inc eax
mov dword [ebp - 0xc34], eax
mov ecx, dword [ebp - 0x11c]
mov dword [ebp - 0xc30], ecx
cmp eax, esi
jb 0x1001e3bf
lea eax, [ebp - 0xc34]
push eax
lea eax, [ebp - 0xc30]
push eax
call fcn.10001533
pop ecx
pop ecx
mov eax, dword [ebp - 0xc34]
mov ecx, dword [ebp - 0xc30]
push eax
push ecx
call fcn.1001f295
pop ecx
pop ecx
test ebx, 0x4000
je 0x1001e422
and ebx, 0xffffbfff
mov eax, dword [ebp - 0x330]
cmp eax, 0x10
jb 0x1001e422
inc eax
mov dword [ebp - 0xc34], eax
mov ecx, dword [ebp - 0x344]
mov dword [ebp - 0xc30], ecx
cmp eax, esi
jb 0x1001e419
lea eax, [ebp - 0xc34]
push eax
lea eax, [ebp - 0xc30]
push eax
call fcn.10001533
pop ecx
pop ecx
mov eax, dword [ebp - 0xc34]
mov ecx, dword [ebp - 0xc30]
push eax
push ecx
call fcn.1001f295
pop ecx
pop ecx
test ebx, 0x2000
je 0x1001e43b
and ebx, 0xffffdfff
lea ecx, [ebp - 0xb9c]
call fcn.10003f1f
test esi, ebx
je 0x1001e491
and ebx, 0xffffefff
mov eax, dword [ebp - 0x120]
cmp eax, 0x10
jb 0x1001e491
inc eax
mov dword [ebp - 0xc34], eax
mov ecx, dword [ebp - 0x134]
mov dword [ebp - 0xc30], ecx
cmp eax, esi
jb 0x1001e488
lea eax, [ebp - 0xc34]
push eax
lea eax, [ebp - 0xc30]
push eax
call fcn.10001533
pop ecx
pop ecx
mov eax, dword [ebp - 0xc34]
mov ecx, dword [ebp - 0xc30]
push eax
push ecx
call fcn.1001f295
pop ecx
pop ecx
test ebx, 0x800
je 0x1001e4aa
and ebx, 0xfffff7ff
lea ecx, [ebp - 0xbb4]
call fcn.10003f1f
test ebx, 0x400
je 0x1001e513
and ebx, 0xfffffbff
mov eax, dword [ebp - 0x78]
cmp eax, 0x10
jb 0x1001e501
inc eax
mov dword [ebp - 0xc34], eax
mov ecx, dword [ebp - 0x8c]
mov dword [ebp - 0xc30], ecx
cmp eax, esi
jb 0x1001e4f8
lea eax, [ebp - 0xc34]
push eax
lea eax, [ebp - 0xc30]
push eax
call fcn.10001533
pop ecx
pop ecx
mov eax, dword [ebp - 0xc34]
mov ecx, dword [ebp - 0xc30]
push eax
push ecx
call fcn.1001f295
pop ecx
pop ecx
and dword [ebp - 0x7c], 0
mov dword [ebp - 0x78], 0xf
mov byte [ebp - 0x8c], 0
test ebx, 0x200
je 0x1001e528
and ebx, edi
lea ecx, [ebp - 0xbcc]
call fcn.10003f1f
test ebx, 0x100
je 0x1001e582
and ebx, 0xfffffeff
mov eax, dword [ebp - 0x150]
cmp eax, 0x10
jb 0x1001e582
inc eax
mov dword [ebp - 0xc34], eax
mov ecx, dword [ebp - 0x164]
mov dword [ebp - 0xc30], ecx
cmp eax, esi
jb 0x1001e579
lea eax, [ebp - 0xc34]
push eax
lea eax, [ebp - 0xc30]
push eax
call fcn.10001533
pop ecx
pop ecx
mov eax, dword [ebp - 0xc34]
mov ecx, dword [ebp - 0xc30]
push eax
push ecx
call fcn.1001f295
pop ecx
pop ecx
test bl, bl
jns 0x1001e597
and ebx, 0xffffff7f
lea ecx, [ebp - 0xbe4]
call fcn.10003f1f
test bl, 0x40
je 0x1001e603
and ebx, 0xffffffbf
mov eax, dword [ebp - 0xa8]
cmp eax, 0x10
jb 0x1001e5eb
inc eax
mov dword [ebp - 0xc34], eax
mov ecx, dword [ebp - 0xbc]
mov dword [ebp - 0xc30], ecx
cmp eax, esi
jb 0x1001e5e2
lea eax, [ebp - 0xc34]
push eax
lea eax, [ebp - 0xc30]
push eax
call fcn.10001533
pop ecx
pop ecx
mov eax, dword [ebp - 0xc34]
mov ecx, dword [ebp - 0xc30]
push eax
push ecx
call fcn.1001f295
pop ecx
pop ecx
and dword [ebp - 0xac], 0
mov dword [ebp - 0xa8], 0xf
mov byte [ebp - 0xbc], 0
test bl, 0x20
je 0x1001e657
and ebx, 0xffffffdf
mov eax, dword [ebp - 0x348]
cmp eax, 0x10
jb 0x1001e657
inc eax
mov dword [ebp - 0xc34], eax
mov ecx, dword [ebp - 0x35c]
mov dword [ebp - 0xc30], ecx
cmp eax, esi
jb 0x1001e64e
lea eax, [ebp - 0xc34]
push eax
lea eax, [ebp - 0xc30]
push eax
call fcn.10001533
pop ecx
pop ecx
mov eax, dword [ebp - 0xc34]
mov ecx, dword [ebp - 0xc30]
push eax
push ecx
call fcn.1001f295
pop ecx
pop ecx
test bl, 0x10
je 0x1001e66a
and ebx, 0xffffffef
lea ecx, [ebp - 0xbfc]
call fcn.10003f1f
test bl, 8
je 0x1001e6be
and ebx, 0xfffffff7
mov eax, dword [ebp - 0x168]
cmp eax, 0x10
jb 0x1001e6be
inc eax
mov dword [ebp - 0xc34], eax
mov ecx, dword [ebp - 0x17c]
mov dword [ebp - 0xc30], ecx
cmp eax, esi
jb 0x1001e6b5
lea eax, [ebp - 0xc34]
push eax
lea eax, [ebp - 0xc30]
push eax
call fcn.10001533
pop ecx
pop ecx
mov eax, dword [ebp - 0xc34]
mov ecx, dword [ebp - 0xc30]
push eax
push ecx
call fcn.1001f295
pop ecx
pop ecx
test bl, 4
je 0x1001e6d1
and ebx, 0xfffffffb
lea ecx, [ebp - 0xc14]
call fcn.10003f1f
test bl, 2
je 0x1001e725
and ebx, 0xfffffffd
mov eax, dword [ebp - 0x1b0]
cmp eax, 0x10
jb 0x1001e725
inc eax
mov dword [ebp - 0xc34], eax
mov ecx, dword [ebp - 0x1c4]
mov dword [ebp - 0xc30], ecx
cmp eax, esi
jb 0x1001e71c
lea eax, [ebp - 0xc34]
push eax
lea eax, [ebp - 0xc30]
push eax
call fcn.10001533
pop ecx
pop ecx
mov eax, dword [ebp - 0xc34]
mov ecx, dword [ebp - 0xc30]
push eax
push ecx
call fcn.1001f295
pop ecx
pop ecx
test bl, 1
je 0x1001e735
lea ecx, [ebp - 0x3a4]
call fcn.10003f1f
lea ecx, [ebp - 0x3bc]
call fcn.10003f1f
lea ecx, [ebp - 0xc2c]
call fcn.10003f1f
lea ecx, [ebp - 0x4f4]
call fcn.10003f1f
lea ecx, [ebp - 0x6d4]
call fcn.10003f1f
lea ecx, [ebp - 0x50c]
call fcn.10003f1f
lea ecx, [ebp - 0x6ec]
call fcn.10003f1f
lea ecx, [ebp - 0x704]
call fcn.10003f1f
lea ecx, [ebp - 0x71c]
call fcn.10003f1f
lea ecx, [ebp - 0x524]
call fcn.10003f1f
lea ecx, [ebp - 0x734]
call fcn.10003f1f
lea ecx, [ebp - 0x53c]
call fcn.10003f1f
lea ecx, [ebp - 0x554]
call fcn.10003f1f
lea ecx, [ebp - 0x74c]
call fcn.10003f1f
lea ecx, [ebp - 0x3d4]
call fcn.10003f1f
lea ecx, [ebp - 0x3ec]
call fcn.10003f1f
lea ecx, [ebp - 0x404]
call fcn.10003f1f
lea ecx, [ebp - 0x434]
call fcn.10003f1f
lea ecx, [ebp - 0x764]
call fcn.10003f1f
lea ecx, [ebp - 0x374]
call fcn.10003f1f
lea ecx, [ebp - 0x41c]
call fcn.10003f1f
lea ecx, [ebp - 0x83c]
call fcn.10003f1f
lea ecx, [ebp - 0x38c]
call fcn.10003f1f
lea ecx, [ebp - 0x44c]
call fcn.10003f1f
cmp dword [ebp - 0xc38], 0
je 0x1001e84f
push dword [0x10037fe0]
push dword [0x10037fdc]
call dword [ebp - 0xc48]
pop ecx
pop ecx
call fcn.1001f6ca
ret