Function at 0x10086a60
Capabilities:
Resolve function by parsing pe exports

Disassembly:
mov edi, edi
push ebp
mov ebp, esp
and esp, 0xfffffff8
mov eax, 0x16e0
call fcn.100a1ec0
mov eax, dword [0x100a80a4]
xor eax, esp
mov dword [esp + 0x16dc], eax
push esi
mov esi, ecx
push edi
mov dword [esp + 0x7c], esi
mov eax, dword [esi + 0x5c]
and eax, 0x9000000
mov byte [esp + 0xab], 0
cmp eax, 0x9000000
mov dword [esp + 0x15c], eax
mov dword [esp + 0x16d4], 0
lea eax, [esp + 0x16dc]
sete byte [esp + 0xde]
mov dword [esp + 0x16d8], 0
mov dword [esp + 0x16dc], 0
mov dword [esp + 0x16e0], 0
push dword [esi + 0x10c]
push eax
lea eax, [esp + 0x16dc]
push eax
lea eax, [esp + 0x196]
push eax
lea eax, [esp + 0x19b]
push eax
call fcn.10085d10
mov ecx, dword [esi + 0x10c]
xor edi, edi
xor eax, eax
mov dword [esp + 0xe0], edi
test ecx, ecx
je 0x10086b41
jmp 0x10086b20
test dword [esi + eax*8 + 0x64], 0x18000000
jne 0x10086b34
cmp byte [esp + eax + 0x16dc], 0
jne 0x10086b3a
inc eax
inc edi
cmp eax, ecx
jb 0x10086b20
mov dword [esp + 0xe0], edi
push edi
lea eax, [esp + 0x16e0]
mov dword [esp + 0x16d8], 0
push eax
lea eax, [esp + 0x16dc]
mov dword [esp + 0x16e0], 0
push eax
lea eax, [esp + 0xea]
mov dword [esp + 0x16e8], 0
push eax
lea eax, [esp + 0xbb]
mov dword [esp + 0x16f0], 0
push eax
mov ecx, esi
call fcn.10085d10
test edi, edi
jne 0x10086ba8
mov eax, dword [esi + 0x5c]
shr eax, 0x1a
and al, 1
mov byte [esp + 0xab], al
mov eax, 1
mov dword [esp + 0x44], 1
mov dword [esp + 0x164], eax
lea edi, [esp + 0x1650]
mov dword [esp + 0x2c], eax
xor eax, eax
mov dword [esp + 0x1bc], eax
mov dword [esp + 0x38], eax
mov eax, 0xe40000
mov dword [esp + 0x1a8], eax
mov dword [esp + 0x34], eax
xor eax, eax
mov dword [esp + 0x160], eax
mov dword [esp + 0x30], eax
mov dword [esp + 0x1b8], eax
mov dword [esp + 0x50], 1
lea esi, [eax + 8]
mov dword [esp + 0x4c], 0xe40000
mov dword [esp + 0x48], eax
nop
mov ecx, edi
call fcn.10047ea0
add edi, 0x10
sub esi, 1
jne 0x10086c10
mov dword [esp + 0xd40], esi
mov dword [esp + 0xd48], esi
mov esi, dword [esp + 0x7c]
mov dword [esp + 0xd3c], 8
mov dword [esp + 0xd44], 0xf0000
mov edx, dword [esi + 0xa0]
mov dword [edx + 4], 0
mov dword [edx + 0x10], 1
mov dword [edx + 0x14], 0
mov eax, dword [edx]
mov dword [eax], 0xffff0200
mov ecx, dword [edx + 4]
lea eax, [ecx + 1]
mov dword [edx + 4], eax
mov dword [edx + 8], ecx
mov ecx, dword [esi + 0xa0]
mov esi, 0x100a90c8
mov dword [esp + 0x28], ecx
lea edx, [esi + 1]
mov al, byte [esi]
inc esi
test al, al
jne 0x10086c88
mov ecx, dword [ecx + 4]
sub esi, edx
mov eax, dword [esp + 0x28]
inc esi
mov eax, dword [eax]
lea edi, [esi + 3]
shr edi, 2
inc edi
mov edx, edi
shl edx, 0x10
or edx, 0xfffe
mov dword [eax + ecx*4], edx
mov edx, dword [esp + 0x28]
push edi
mov ecx, dword [edx + 4]
lea eax, [ecx + 1]
mov dword [edx + 4], eax
mov dword [edx + 8], ecx
mov ecx, edx
call fcn.10077d00
mov edx, dword [esp + 0x28]
push esi
push 0x100a90c8
mov ecx, dword [edx + 4]
mov eax, dword [edx]
mov dword [eax + ecx*4], 0x54584554
inc dword [edx + 4]
mov ecx, dword [edx + 4]
mov eax, dword [edx]
lea eax, [eax + ecx*4]
push eax
call sub.msvcrt.dll_memcpy
mov ecx, dword [esp + 0x34]
lea eax, [edi - 1]
mov edi, dword [esp + 0x88]
add esp, 0xc
add dword [ecx + 4], eax
mov esi, dword [edi + 0x5c]
mov dword [esp + 0x154], esi
test esi, 0x4000000
je 0x10086d48
cmp byte [esp + 0xab], 0
je 0x10086d48
mov ecx, dword [edi + 0xa0]
push 0
push 1
call fcn.10084b70
mov esi, dword [edi + 0x5c]
mov eax, dword [esp + 0x38]
mov dword [esp + 0x154], esi
mov dword [esp + 0x190], eax
jmp 0x10086dea
push 3
lea eax, [esp + 0x16c]
mov dword [esp + 0x300], 2
push eax
lea ecx, [esp + 0x304]
mov dword [esp + 0x310], 1
mov dword [esp + 0x30c], 0xe40000
mov dword [esp + 0x308], 0
call fcn.10077570
mov eax, dword [esp + 0x168]
mov dword [esp + 0x164], eax
mov dword [esp + 0x2c], eax
mov eax, dword [esp + 0x16c]
mov dword [esp + 0x160], eax
mov dword [esp + 0x30], eax
mov eax, dword [esp + 0x170]
mov dword [esp + 0x1a8], eax
mov dword [esp + 0x34], eax
mov eax, dword [esp + 0x174]
mov dword [esp + 0x190], eax
mov dword [esp + 0x38], eax
mov ax, word [esp + 0x3a]
mov dword [esp + 0x1b8], eax
mov ax, word [esp + 0x38]
mov dword [esp + 0x1bc], eax
test esi, 0x8000000
je 0x10086e17
cmp byte [esp + 0xde], 0
je 0x10086e17
mov ecx, dword [edi + 0xa0]
push 1
push 1
call fcn.10084b70
mov esi, dword [edi + 0x5c]
mov dword [esp + 0x154], esi
jmp 0x10086e85
push 0
lea eax, [esp + 0x16c]
mov dword [esp + 0x310], 2
push eax
lea ecx, [esp + 0x314]
mov dword [esp + 0x320], 1
mov dword [esp + 0x31c], 0xe40000
mov dword [esp + 0x318], 0
call fcn.10077570
mov eax, dword [esp + 0x168]
mov dword [esp + 0x44], eax
mov eax, dword [esp + 0x16c]
mov dword [esp + 0x48], eax
mov eax, dword [esp + 0x170]
mov dword [esp + 0x4c], eax
mov eax, dword [esp + 0x174]
mov dword [esp + 0x50], eax
mov eax, dword [esp + 0xe0]
xor edx, edx
shr esi, 0x10
and esi, 0xf
mov byte [esp + 0xdf], 1
mov dword [esp + 0x158], esi
mov dword [esp + 0x28], edx
test eax, eax
je 0x1008717a
lea ecx, [esp + 0x1650]
mov dword [esp + 0x80], ecx
lea ecx, [ecx]
movzx eax, byte [edi + edx*8 + 0x67]
and eax, 7
cmp byte [esp + edx + 0x16d4], 0
je 0x10087044
test dword [esp + 0x154], 0x2000000
je 0x10086f89
cmp byte [esp + 0xdf], 0
je 0x10086f72
mov esi, dword [edi + 0xa0]
push 0x10
mov byte [esp + 0xe3], 0
mov byte [esi + 0x18], 0
mov ecx, dword [esi + 4]
mov eax, dword [esi]
mov dword [eax + ecx*4], 0x1f
mov eax, dword [esi + 4]
lea ecx, [eax + 1]
mov dword [esi + 4], ecx
mov dword [esi + 8], eax
mov eax, dword [esi]
mov dword [eax + ecx*4], 0x80000000
inc dword [esi + 4]
mov ecx, dword [esi + 4]
mov eax, dword [esi]
mov dword [eax + ecx*4], 0xb00f0000
inc dword [esi + 4]
mov ecx, dword [esi + 8]
mov edx, dword [esi + 4]
mov eax, dword [esi]
sub edx, ecx
dec edx
shl edx, 0x18
or dword [eax + ecx*4], edx
lea eax, [eax + ecx*4]
mov ecx, esi
call fcn.10077d00
inc dword [esi + 0x10]
cmp byte [esi + 0x18], 0
je 0x10086f63
inc dword [esi + 0x14]
mov ecx, dword [esp + 0x80]
mov edx, dword [esp + 0x28]
mov byte [esi + 0x18], 1
xor eax, eax
mov dword [ecx], 3
mov dword [esp + 0x274], eax
mov dword [ecx + 4], eax
jmp 0x10087063
cmp eax, esi
jae 0x10087030
mov esi, dword [edi + 0xa0]
push 0x10
mov byte [esi + 0x18], 0
mov ecx, dword [esi + 4]
mov eax, dword [esi]
mov dword [eax + ecx*4], 0x1f
mov eax, dword [esi + 4]
lea ecx, [eax + 1]
mov dword [esi + 4], ecx
mov dword [esi + 8], eax
mov eax, dword [esi]
mov dword [eax + ecx*4], 0x80000000
inc dword [esi + 4]
mov edx, dword [esi + 4]
mov eax, dword [esi]
mov ecx, dword [esp + 0x2c]
or ecx, 0xb00f0000
mov dword [eax + edx*4], ecx
inc dword [esi + 4]
mov ecx, dword [esi + 8]
mov edx, dword [esi + 4]
mov eax, dword [esi]
sub edx, ecx
dec edx
shl edx, 0x18
or dword [eax + ecx*4], edx
lea eax, [eax + ecx*4]
mov ecx, esi
call fcn.10077d00
inc dword [esi + 0x10]
cmp byte [esi + 0x18], 0
je 0x10086ffd
inc dword [esi + 0x14]
mov ecx, dword [esp + 0x80]
xor eax, eax
mov edx, dword [esp + 0x28]
mov byte [esi + 0x18], 1
mov word [esp + 0x174], dx
mov dword [ecx], 3
mov word [esp + 0x176], ax
mov dword [ecx + 4], eax
mov eax, dword [esp + 0x174]
jmp 0x10087063
mov dword [esp + 0x214], 1
mov eax, dword [esp + 0x214]
jmp 0x10087056
mov dword [esp + 0x224], 1
mov eax, dword [esp + 0x224]
mov dword [ecx], 2
mov dword [ecx + 4], 0
mov esi, dword [esp + 0x158]
inc edx
mov dword [ecx + 8], 0xe40000
mov dword [ecx + 0xc], eax
add ecx, 0x10
mov dword [esp + 0x28], edx
mov dword [esp + 0x80], ecx
cmp edx, dword [esp + 0xe0]
jb 0x10086ec0
mov ecx, dword [esp + 0xe0]
xor eax, eax
mov dword [esp + 0x14], eax
lea ecx, [ecx]
cmp byte [esp + eax + 0x16d4], 0
je 0x10087166
mov eax, dword [edi + eax*8 + 0x64]
mov esi, dword [edi + 0xa0]
shr eax, 0x1b
and eax, 3
push 0x10
mov byte [esi + 0x18], 0
mov ecx, dword [esi + 4]
sub eax, 2
je 0x100870fa
sub eax, 1
mov eax, dword [esi]
mov dword [eax + ecx*4], 0x1f
mov eax, dword [esi + 4]
lea ecx, [eax + 1]
mov dword [esi + 4], ecx
mov dword [esi + 8], eax
mov eax, dword [esi]
je 0x100870f1
mov dword [eax + ecx*4], 0x90000000
jmp 0x10087118
mov dword [eax + ecx*4], 0xa0000000
jmp 0x10087118
mov eax, dword [esi]
mov dword [eax + ecx*4], 0x1f
mov eax, dword [esi + 4]
lea ecx, [eax + 1]
mov dword [esi + 4], ecx
mov dword [esi + 8], eax
mov eax, dword [esi]
mov dword [eax + ecx*4], 0x98000000
inc dword [esi + 4]
mov edx, dword [esi + 4]
mov eax, dword [esi]
mov ecx, dword [esp + 0x18]
or ecx, 0xa00f0800
mov dword [eax + edx*4], ecx
inc dword [esi + 4]
mov ecx, dword [esi + 8]
mov edx, dword [esi + 4]
mov eax, dword [esi]
sub edx, ecx
dec edx
shl edx, 0x18
or dword [eax + ecx*4], edx
lea eax, [eax + ecx*4]
mov ecx, esi
call fcn.10077d00
inc dword [esi + 0x10]
cmp byte [esi + 0x18], 0
je 0x10087157
inc dword [esi + 0x14]
mov eax, dword [esp + 0x14]
mov ecx, dword [esp + 0xe0]
mov byte [esi + 0x18], 1
inc eax
mov dword [esp + 0x14], eax
cmp eax, ecx
jb 0x100870a0
mov eax, dword [esp + 0xe0]
xor ecx, ecx
mov dword [esp + 0x148], 0
mov dword [esp + 0x1b0], ecx
xor edx, edx
mov byte [edi + 0x119], cl
mov ecx, dword [esp + 0x164]
mov dword [esp + 0x1a0], ecx
mov ecx, dword [esp + 0x160]
mov dword [esp + 0x198], ecx
mov ecx, dword [esp + 0x1a8]
mov dword [esp + 0x19c], ecx
mov ecx, dword [esp + 0x190]
mov dword [esp + 0x150], 0xe40000
mov dword [esp + 0x14c], 0xf0000
mov dword [esp + 0x1e0], 1
mov dword [esp + 0x1e8], 0xe40000
mov dword [esp + 0x1e4], 0xf0000
mov dword [esp + 0xfc], 2
mov dword [esp + 0x104], 0xe40000
mov dword [esp + 0x100], 0xf0000
mov dword [esp + 0x1ec], 3
mov dword [esp + 0x1f4], 0xe40000
mov dword [esp + 0x1f0], 0xf0000
mov dword [esp + 0x1ac], 0
mov dword [esp + 0x194], ecx
mov dword [esp + 0xa4], edx
test eax, eax
je 0x1008e439
xor eax, eax
mov dword [esp + 0xe8], 0xf0000
mov dword [esp + 0xec], 0xe40000
mov dword [esp + 0x238], 0xa
mov dword [esp + 0x240], 0xe40000
mov dword [esp + 0x23c], edx
mov word [esp + 0x246], ax
mov edi, edi
mov ecx, 1
mov dword [esp + 0x10], ecx
mov dword [esp + 0xe4], ecx
cmp edx, 4
jb 0x100872c5
mov eax, 0xa
mov dword [esp + 0x10], eax
mov dword [esp + 0xe4], eax
lea eax, [edx*8]
mov dword [esp + 0x12c], eax
mov eax, dword [edi + eax + 0x64]
mov esi, eax
mov dword [esp + 0x28], eax
mov eax, edx
add eax, eax
shr esi, 0x18
and esi, 7
mov dword [esp + 0x134], esi
mov edx, dword [esp + eax*8 + 0x1654]
mov ecx, dword [esp + eax*8 + 0x1650]
mov dword [esp + 0x14], edx
mov dword [esp + 0x17c], edx
mov edx, dword [esp + eax*8 + 0x1658]
mov eax, dword [esp + eax*8 + 0x165c]
mov dword [esp + 0x40], edx
mov dword [esp + 0x180], edx
mov edx, dword [esp + 0xa4]
mov dword [esp + 0xd8], ecx
mov dword [esp + 0x178], ecx
mov dword [esp + 0x80], eax
mov dword [esp + 0x184], eax
cmp ecx, 2
je 0x1008758b
test dword [esp + 0x28], 0x18000000
je 0x1008758b
mov eax, dword [edi + 0x5c]
lea ecx, [esi + esi]
shr eax, cl
and eax, 3
inc eax
mov dword [esp + 0x130], eax
cmp eax, 2
jae 0x1008738b
test dword [esp + 0x154], 0x2000000
je 0x1008738b
mov eax, 4
mov dword [esp + 0x130], eax
mov ecx, dword [esp + 0x28]
test ecx, 0x40000000
je 0x100873a3
mov ecx, dword [edi + esi*8 + 0x64]
sar ecx, 0x1f
add ecx, 4
jmp 0x100873bd
and ecx, 0x18000000
mov dword [esp + 0x28], ecx
xor ecx, ecx
cmp dword [esp + 0x28], 0x8000000
setne cl
add ecx, 2
cmp ecx, eax
jbe 0x10087584
mov esi, dword [edi + 0xa0]
mov dword [esp + 0x31c], 2
mov dword [esp + 0x328], 1
mov dword [esp + 0x324], 0xe40000
mov dword [esp + 0x320], 0
mov ecx, dword [esi + 4]
mov eax, dword [esi]
mov dword [eax + ecx*4], 1
mov eax, dword [esi + 4]
lea ecx, [eax + 1]
mov dword [esi + 4], ecx
mov dword [esi + 8], eax
mov eax, dword [esi]
mov dword [eax + ecx*4], 0x800f0005
lea eax, [esp + 0x31c]
inc dword [esi + 4]
mov ecx, esi
push eax
call fcn.10077b30
mov ecx, dword [esi + 8]
mov eax, dword [esi]
push 0x10
lea edx, [eax + ecx*4]
mov eax, dword [esi + 4]
sub eax, ecx
mov ecx, esi
dec eax
shl eax, 0x18
or dword [edx], eax
call fcn.10077d00
inc dword [esi + 0x10]
cmp byte [esi + 0x18], 0
je 0x10087452
inc dword [esi + 0x14]
mov eax, dword [esp + 0x130]
mov byte [esi + 0x18], 1
sub eax, 1
je 0x100874c2
sub eax, 1
je 0x10087499
sub eax, 1
jne 0x10087527
mov esi, dword [edi + 0xa0]
mov ecx, dword [esi + 4]
mov eax, dword [esi]
mov dword [eax + ecx*4], 1
mov eax, dword [esi + 4]
lea ecx, [eax + 1]
mov dword [esi + 4], ecx
mov dword [esi + 8], eax
mov eax, dword [esi]
mov dword [eax + ecx*4], 0x80070005
jmp 0x100874e9
mov esi, dword [edi + 0xa0]
mov ecx, dword [esi + 4]
mov eax, dword [esi]
mov dword [eax + ecx*4], 1
mov eax, dword [esi + 4]
lea ecx, [eax + 1]
mov dword [esi + 4], ecx
mov dword [esi + 8], eax
mov eax, dword [esi]
mov dword [eax + ecx*4], 0x80030005
jmp 0x100874e9
mov esi, dword [edi + 0xa0]
mov ecx, dword [esi + 4]
mov eax, dword [esi]
mov dword [eax + ecx*4], 1
mov eax, dword [esi + 4]
lea ecx, [eax + 1]
mov dword [esi + 4], ecx
mov dword [esi + 8], eax
mov eax, dword [esi]
mov dword [eax + ecx*4], 0x80010005
inc dword [esi + 4]
lea eax, [esp + 0x178]
push eax
mov ecx, esi
call fcn.10077b30
mov ecx, dword [esi + 8]
mov eax, dword [esi]
push 0x10
lea edx, [eax + ecx*4]
mov eax, dword [esi + 4]
sub eax, ecx
mov ecx, esi
dec eax
shl eax, 0x18
or dword [edx], eax
call fcn.10077d00
inc dword [esi + 0x10]
cmp byte [esi + 0x18], 0
je 0x10087523
inc dword [esi + 0x14]
mov byte [esi + 0x18], 1
mov esi, dword [esp + 0x134]
xor eax, eax
mov edx, 0xe40000
mov dword [esp + 0xd8], eax
xor ecx, ecx
mov dword [esp + 0xdf4], 5
mov dword [esp + 0x178], eax
mov eax, dword [esp + 0xdf4]
mov dword [esp + 0x40], edx
mov dword [esp + 0x180], edx
mov edx, dword [esp + 0xa4]
mov dword [esp + 0x14], ecx
mov dword [esp + 0x17c], ecx
mov dword [esp + 0x80], eax
mov dword [esp + 0x184], eax
jmp 0x1008758b
mov eax, dword [esp + 0x80]
mov ecx, dword [edi + edx*8 + 0x60]
and ecx, 0x1f
mov word [esp + 0x244], dx
cmp dword [esp + 0x1ac], 0
mov dword [esp + 0x28], ecx
je 0x10087aa2
mov ecx, dword [esp + 0x12c]
test dword [edi + ecx + 0x64], 0x40000000
je 0x1008783a
mov ecx, dword [esp + 0x134]
mov esi, dword [edi + 0xa0]
mov dword [esp + 0x80], esi
cmp dword [edi + ecx*8 + 0x64], 0
mov ecx, dword [esp + 0xd8]
jge 0x1008766b
mov dword [esp + 0x32c], ecx
mov ecx, dword [esp + 0x14]
mov word [esp + 0x338], ax
mov dword [esp + 0x330], ecx
mov dword [esp + 0x334], 0xaa0000
shr eax, 0x10
mov word [esp + 0x33a], ax
mov ecx, dword [esi + 4]
mov eax, dword [esi]
mov dword [eax + ecx*4], 6
mov eax, dword [esi + 4]
lea ecx, [eax + 1]
mov dword [esi + 4], ecx
mov dword [esi + 8], eax
mov eax, dword [esi]
mov dword [eax + ecx*4], 0x800f0001
lea eax, [esp + 0x32c]
inc dword [esi + 4]
mov ecx, esi
push eax
call fcn.10077b30
mov ecx, dword [esi + 8]
mov eax, dword [esi]
push 0x10
lea edx, [eax + ecx*4]
mov eax, dword [esi + 4]
sub eax, ecx
mov ecx, esi
dec eax
shl eax, 0x18
or dword [edx], eax
call fcn.10077d00
jmp 0x1008772e
mov word [esp + 0x348], ax
mov eax, dword [esp + 0x14]
mov dword [esp + 0x340], eax
mov ax, word [esp + 0x186]
push 0
mov dword [esp + 0x340], ecx
lea ecx, [esp + 0xd60]
push 1
mov dword [esp + 0x34c], 0xff0000
mov word [esp + 0x352], ax
call fcn.100775e0
mov eax, dword [esp + 0x80]
mov edx, dword [esp + 0xd5c]
mov esi, dword [esp + 0xd60]
mov edi, dword [esp + 0x80]
or esi, edx
mov ecx, dword [eax + 4]
or esi, 0x80000000
mov eax, dword [eax]
mov dword [eax + ecx*4], 6
mov eax, dword [esp + 0x80]
mov eax, dword [eax + 4]
lea ecx, [eax + 1]
mov dword [edi + 4], ecx
mov dword [edi + 8], eax
mov eax, edi
mov eax, dword [eax]
mov dword [eax + ecx*4], esi
mov esi, edi
lea eax, [esp + 0x33c]
mov ecx, esi
push eax
inc dword [esi + 4]
call fcn.10077b30
mov ecx, dword [esi + 8]
mov eax, dword [esi]
push 0x10
lea edx, [eax + ecx*4]
mov eax, dword [esi + 4]
sub eax, ecx
mov ecx, esi
dec eax
shl eax, 0x18
or dword [edx], eax
call fcn.10077d00
mov edi, dword [esp + 0x7c]
inc dword [esi + 0x10]
cmp byte [esi + 0x18], 0
je 0x1008773a
inc dword [esi + 0x14]
push 0
mov byte [esi + 0x18], 1
lea ecx, [esp + 0xd6c]
mov esi, dword [edi + 0xa0]
push 1
call fcn.100775e0
mov ax, word [esp + 0xd68]
mov ecx, dword [esi + 4]
mov word [esp + 0x358], ax
mov eax, dword [esp + 0xd70]
mov dword [esp + 0x354], eax
xor eax, eax
mov word [esp + 0x35a], ax
mov eax, dword [esi]
mov dword [esp + 0x34c], 0
mov dword [esp + 0x350], 0
mov dword [eax + ecx*4], 5
mov eax, dword [esi + 4]
lea ecx, [eax + 1]
mov dword [esi + 4], ecx
mov dword [esi + 8], eax
mov eax, dword [esi]
mov dword [eax + ecx*4], 0x800f0001
lea eax, [esp + 0x178]
inc dword [esi + 4]
mov ecx, esi
push eax
call fcn.10077b30
lea eax, [esp + 0x34c]
mov ecx, esi
push eax
call fcn.10077b30
mov ecx, dword [esi + 8]
mov eax, dword [esi]
push 0x10
lea edx, [eax + ecx*4]
mov eax, dword [esi + 4]
sub eax, ecx
mov ecx, esi
dec eax
shl eax, 0x18
or dword [edx], eax
call fcn.10077d00
inc dword [esi + 0x10]
cmp byte [esi + 0x18], 0
je 0x100877fc
inc dword [esi + 0x14]
mov dword [esp + 0xe04], 1
mov eax, dword [esp + 0xe04]
mov byte [esi + 0x18], 1
mov dword [esp + 0x178], 0
mov dword [esp + 0x17c], 0
mov dword [esp + 0x180], 0xe40000
mov dword [esp + 0x184], eax
mov esi, dword [edi + 0xa0]
mov dword [esp + 0x35c], 0
mov dword [esp + 0x368], 0xb
mov dword [esp + 0x364], 0xe40000
mov ecx, dword [esi + 4]
mov eax, dword [esi]
mov dword [esp + 0x360], 0
mov dword [eax + ecx*4], 2
mov eax, dword [esi + 4]
lea ecx, [eax + 1]
mov dword [esi + 4], ecx
mov dword [esi + 8], eax
mov eax, dword [esi]
mov dword [eax + ecx*4], 0x800f0004
lea eax, [esp + 0x178]
inc dword [esi + 4]
mov ecx, esi
push eax
call fcn.10077b30
lea eax, [esp + 0x35c]
mov ecx, esi
push eax
call fcn.10077b30
mov ecx, dword [esi + 8]
mov eax, dword [esi]
push 0x10
lea edx, [eax + ecx*4]
mov eax, dword [esi + 4]
sub eax, ecx
mov ecx, esi
dec eax
shl eax, 0x18
or dword [edx], eax
call fcn.10077d00
inc dword [esi + 0x10]
cmp byte [esi + 0x18], 0
je 0x100878d6
inc dword [esi + 0x14]
mov byte [esi + 0x18], 1
mov esi, dword [edi + 0xa0]
mov dword [esp + 0x36c], 0
mov dword [esp + 0x378], 4
mov dword [esp + 0x374], 0xe40000
mov ecx, dword [esi + 4]
mov eax, dword [esi]
mov dword [esp + 0x370], 0
mov dword [eax + ecx*4], 0x42
mov eax, dword [esi + 4]
mov ecx, dword [esp + 0x10]
or ecx, 0x802f0000
lea edx, [eax + 1]
mov dword [esi + 4], edx
mov dword [esi + 8], eax
mov eax, dword [esi]
mov dword [eax + edx*4], ecx
lea eax, [esp + 0x36c]
inc dword [esi + 4]
mov ecx, esi
push eax
call fcn.10077b30
lea eax, [esp + 0x238]
mov ecx, esi
push eax
call fcn.10077b30
mov ecx, dword [esi + 8]
mov eax, dword [esi]
push 0x10
lea edx, [eax + ecx*4]
mov eax, dword [esi + 4]
sub eax, ecx
mov ecx, esi
dec eax
shl eax, 0x18
or dword [edx], eax
call fcn.10077d00
inc dword [esi + 0x10]
cmp byte [esi + 0x18], 0
je 0x1008797c
inc dword [esi + 0x14]
cmp dword [esp + 0x1b0], 0
mov byte [esi + 0x18], 1
je 0x10087a92
mov esi, dword [edi + 0xa0]
lea ecx, [esp + 0xd74]
push 0
push 9
call fcn.100775e0
mov ax, word [esp + 0xd74]
mov ecx, dword [esi + 4]
mov word [esp + 0x398], ax
mov eax, dword [esp + 0xd7c]
mov dword [esp + 0x394], eax
xor eax, eax
mov word [esp + 0x39a], ax
mov dword [esp + 0x37c], eax
mov eax, dword [esp + 0x10]
mov word [esp + 0x388], ax
xor eax, eax
mov word [esp + 0x38a], ax
mov eax, dword [esi]
mov dword [esp + 0x38c], 0
mov dword [esp + 0x390], 0
mov dword [esp + 0x384], 0xe40000
mov dword [eax + ecx*4], 5
mov eax, dword [esi + 4]
mov ecx, dword [esp + 0x10]
or ecx, 0x80270000
mov dword [esp + 0x380], 0
lea edx, [eax + 1]
mov dword [esi + 4], edx
mov dword [esi + 8], eax
mov eax, dword [esi]
mov dword [eax + edx*4], ecx
lea eax, [esp + 0x37c]
inc dword [esi + 4]
mov ecx, esi
push eax
call fcn.10077b30
lea eax, [esp + 0x38c]
mov ecx, esi
push eax
call fcn.10077b30
mov ecx, dword [esi + 8]
mov eax, dword [esi]
push 0x10
lea edx, [eax + ecx*4]
mov eax, dword [esi + 4]
sub eax, ecx
mov ecx, esi
dec eax
shl eax, 0x18
or dword [edx], eax
call fcn.10077d00
inc dword [esi + 0x10]
cmp byte [esi + 0x18], 0
je 0x10087a85
inc dword [esi + 0x14]
xor ecx, ecx
mov byte [esi + 0x18], 1
mov dword [esp + 0x1b0], ecx
mov dword [esp + 0x1ac], 0
jmp 0x10087e5a
cmp ecx, 0x16
je 0x10087b52
cmp ecx, 0x17
je 0x10087b52
cmp byte [esp + edx + 0x16d4], 0
je 0x10087e65
mov ecx, dword [esp + 0x10]
sub esp, 0x10
mov eax, esp
sub esp, 0x10
mov dword [eax], 0
mov dword [eax + 4], ecx
mov ecx, esp
mov dword [eax + 8], 0xf0000
sub esp, 0x10
mov dword [eax + 0xc], 0
mov eax, dword [esp + 0x274]
mov dword [ecx], 0xa
mov dword [ecx + 4], 0
mov dword [ecx + 8], 0xe40000
mov dword [ecx + 0xc], eax
mov eax, esp
mov ecx, dword [esp + 0x108]
sub esp, 0xc
mov dword [eax], ecx
mov ecx, dword [esp + 0x50]
mov dword [eax + 4], ecx
mov ecx, dword [esp + 0x7c]
mov dword [eax + 8], ecx
mov ecx, dword [esp + 0xbc]
mov dword [eax + 0xc], ecx
mov eax, esp
push esi
push edx
mov ecx, edi
mov dword [eax], 1
mov dword [eax + 4], 0xf0000
mov dword [eax + 8], 0xe40000
call 0x100bdc76
jmp 0x10087e5a
sub esp, 0x10
mov eax, esp
sub esp, 0x10
mov ecx, esp
sub esp, 0x10
mov dword [eax], 0
mov dword [eax + 4], 4
mov dword [eax + 8], 0xf0000
mov dword [eax + 0xc], 0
mov eax, dword [esp + 0x274]
mov dword [ecx], 0xa
mov dword [ecx + 4], 0
mov dword [ecx + 8], 0xe40000
mov dword [ecx + 0xc], eax
mov eax, esp
mov ecx, dword [esp + 0x108]
sub esp, 0xc
mov dword [eax], ecx
mov ecx, dword [esp + 0x50]
mov dword [eax + 4], ecx
mov ecx, dword [esp + 0x7c]
mov dword [eax + 8], ecx
mov ecx, dword [esp + 0xbc]
mov dword [eax + 0xc], ecx
mov eax, esp
push esi
push edx
mov ecx, edi
mov dword [eax], 1
mov dword [eax + 4], 0xf0000
mov dword [eax + 8], 0xe40000
call fcn.10086880
cmp dword [esp + 0x28], 0x17
jne 0x10087cf4
mov eax, dword [esp + 0x12c]
mov ecx, dword [edi + 0xa4]
add eax, 0xb4
mov esi, dword [edi + 0xa0]
add eax, ecx
push 4
push eax
lea eax, [esp + 0xe6c]
push eax
call fcn.10078870
mov edx, dword [esp + 0xa4]
mov ecx, dword [edi + 0xa4]
add edx, 0x16
push 4
lea eax, [ecx + edx*8]
push eax
lea eax, [esp + 0xe5c]
push eax
call fcn.10078870
mov ecx, dword [esi + 4]
mov eax, dword [esi]
mov dword [esp + 0x1484], 4
mov dword [esp + 0x39c], 0
mov dword [esp + 0x3a8], 4
mov dword [eax + ecx*4], 4
mov eax, dword [esi + 4]
mov dword [esp + 0x3a4], 0xaa0000
mov dword [esp + 0x3a0], 0
lea ecx, [eax + 1]
mov dword [esi + 4], ecx
mov dword [esi + 8], eax
mov eax, dword [esi]
mov dword [eax + ecx*4], 0x80310009
lea eax, [esp + 0x39c]
inc dword [esi + 4]
mov ecx, esi
push eax
call fcn.10077b30
lea eax, [esp + 0xe54]
mov ecx, esi
push eax
call fcn.10077b30
lea eax, [esp + 0xe64]
mov ecx, esi
push eax
call fcn.10077b30
mov ecx, dword [esi + 8]
mov eax, dword [esi]
push 0x10
lea edx, [eax + ecx*4]
mov eax, dword [esi + 4]
sub eax, ecx
mov ecx, esi
dec eax
shl eax, 0x18
or dword [edx], eax
call fcn.10077d00
inc dword [esi + 0x10]
cmp byte [esi + 0x18], 0
je 0x10087ce5
inc dword [esi + 0x14]
mov byte [esi + 0x18], 1
mov dword [esp + 0x1b0], 1
mov ecx, dword [edi + 0xa4]
mov esi, dword [edi + 0xa0]
push 4
lea eax, [ecx + 0x10]
push eax
lea eax, [esp + 0xe7c]
push eax
call fcn.10078870
mov ecx, dword [esi + 4]
mov eax, dword [esi]
mov dword [eax + ecx*4], 1
mov eax, dword [esi + 4]
lea ecx, [eax + 1]
mov dword [esi + 4], ecx
mov dword [esi + 8], eax
mov eax, dword [esi]
mov dword [eax + ecx*4], 0x802f000b
lea eax, [esp + 0xe74]
inc dword [esi + 4]
mov ecx, esi
push eax
call fcn.10077b30
mov ecx, dword [esi + 8]
mov eax, dword [esi]
push 0x10
lea edx, [eax + ecx*4]
mov eax, dword [esi + 4]
sub eax, ecx
mov ecx, esi
dec eax
shl eax, 0x18
or dword [edx], eax
call fcn.10077d00
inc dword [esi + 0x10]
cmp byte [esi + 0x18], 0
je 0x10087d6e
inc dword [esi + 0x14]
mov eax, dword [esp + 0xa4]
mov byte [esi + 0x18], 1
mov esi, dword [edi + 0xa0]
shl eax, 5
add eax, 0xf0
mov dword [esp + 0x3bc], 2
shr eax, 4
mov word [esp + 0x3c8], ax
xor eax, eax
mov word [esp + 0x3ca], ax
mov dword [esp + 0x3c4], 0xe40000
mov dword [esp + 0x3c0], 0
mov ecx, dword [esi + 4]
mov dword [esp + 0x3ac], eax
mov dword [esp + 0x3b0], eax
mov eax, dword [esi]
mov dword [esp + 0x3b8], 4
mov dword [esp + 0x3b4], 0xe40000
mov dword [eax + ecx*4], 0x18
mov eax, dword [esi + 4]
lea ecx, [eax + 1]
mov dword [esi + 4], ecx
mov dword [esi + 8], eax
mov eax, dword [esi]
mov dword [eax + ecx*4], 0x8023000b
lea eax, [esp + 0x3ac]
inc dword [esi + 4]
mov ecx, esi
push eax
call fcn.10077b30
lea eax, [esp + 0x3bc]
mov ecx, esi
push eax
call fcn.10077b30
mov ecx, dword [esi + 8]
mov eax, dword [esi]
push 0x10
lea edx, [eax + ecx*4]
mov eax, dword [esi + 4]
sub eax, ecx
mov ecx, esi
dec eax
shl eax, 0x18
or dword [edx], eax
call fcn.10077d00
inc dword [esi + 0x10]
cmp byte [esi + 0x18], 0
je 0x10087e4b
inc dword [esi + 0x14]
mov byte [esi + 0x18], 1
mov dword [esp + 0x1ac], 1
mov edx, dword [esp + 0xa4]
mov ecx, dword [esp + 0x28]
test edx, edx
jne 0x10087ea1
mov eax, dword [esp + 0x164]
mov dword [esp + 0xd8], eax
mov dword [esp + 0x18], eax
mov eax, dword [esp + 0x160]
mov dword [esp + 0x80], eax
mov dword [esp + 0x1c], eax
mov eax, dword [esp + 0x1a8]
mov dword [esp + 0x20], eax
mov eax, dword [esp + 0x190]
jmp 0x10087ed7
mov eax, dword [esp + 0x1a0]
mov dword [esp + 0xd8], eax
mov dword [esp + 0x18], eax
mov eax, dword [esp + 0x198]
mov dword [esp + 0x80], eax
mov dword [esp + 0x1c], eax
mov eax, dword [esp + 0x19c]
mov dword [esp + 0x20], eax
mov eax, dword [esp + 0x194]
mov dword [esp + 0x24], eax
cmp ecx, 0x16
je 0x1008e18e
cmp ecx, 0x17
je 0x1008e18e
mov eax, dword [edi + edx*8 + 0x60]
mov ecx, eax
shr ecx, 5
and ecx, 0x1f
mov dword [esp + 0x1b4], ecx
cmp ecx, 0x1b
jne 0x10087f10
mov dword [esp + 0x1b4], 0x7fffffff
mov ecx, eax
mov dword [esp + 0x148], 5
mov esi, eax
shr ecx, 0xa
shr eax, 0x16
and ecx, 0x3f
and eax, 0x3f
mov dword [esp + 0x1c4], ecx
mov ecx, dword [edi + edx*8 + 0x64]
mov dword [esp + 0xc], eax
lea eax, [edx*8]
mov eax, ecx
shr esi, 0x10
and eax, 0x3f
mov dword [esp + 0x278], ecx
mov dword [esp + 0x158], eax
and esi, 0x3f
mov eax, ecx
mov dword [esp + 0x3c], esi
shr eax, 6
and eax, 0x3f
mov dword [esp + 0x150], 0xe40000
mov dword [esp + 0x40], eax
mov eax, ecx
shr eax, 0xc
and eax, 0x3f
mov dword [esp + 0x14c], 0xf0000
mov dword [esp + 0x14], eax
xor eax, eax
cmp dword [esp + 0x15c], 0x9000000
mov dword [esp + 0x120], 5
mov dword [esp + 0x128], 0xff0000
mov dword [esp + 0x124], 0x80000
mov dword [esp + 0x22c], 5
mov dword [esp + 0x230], 0x70000
mov dword [esp + 0x54], eax
mov dword [esp + 0x228], eax
jne 0x1008803b
xor ecx, ecx
mov dword [esp + 0xd4c], eax
mov dword [esp + 0x58], ecx
mov dword [esp + 0xd58], ecx
mov dword [esp + 0x234], ecx
lea ecx, [esp + 0xccc]
mov dword [esp + 0xd50], 5
mov dword [esp + 0xd54], 0x70000
mov dword [esp + 0xccc], eax
mov dword [esp + 0xcd0], 5
mov dword [esp + 0xcd4], 0x80000
mov dword [esp + 0xcd8], eax
jmp 0x1008809a
mov ecx, 0x100000
mov dword [esp + 0xdc8], eax
mov dword [esp + 0x58], ecx
mov dword [esp + 0xdd4], ecx
mov dword [esp + 0x234], ecx
mov dword [esp + 0xce8], ecx
lea ecx, [esp + 0xcdc]
mov dword [esp + 0xdcc], 5
mov dword [esp + 0xdd0], 0x70000
mov dword [esp + 0xcdc], eax
mov dword [esp + 0xce0], 5
mov dword [esp + 0xce4], 0x80000
mov eax, dword [ecx]
mov dword [esp + 0x1a4], eax
mov dword [esp + 0x138], eax
mov eax, dword [ecx + 4]
mov dword [esp + 0x130], eax
mov dword [esp + 0x13c], eax
mov eax, dword [ecx + 8]
mov dword [esp + 0x134], eax
mov dword [esp + 0x140], eax
mov eax, dword [ecx + 0xc]
mov dword [esp + 0x12c], eax
mov dword [esp + 0x144], eax
mov dword [esp + 0x208], 0
mov dword [esp + 0x20c], 5
mov dword [esp + 0x210], 0xf0000
mov dword [esp + 0x214], 0x100000
cmp edx, 1
jb 0x10088470
mov eax, dword [edi + edx*8 + 0x58]
mov ecx, eax
shr eax, 5
and ecx, 0x1f
and eax, 0x1f
mov dword [esp + 0x18c], ecx
mov dword [esp + 0x1c0], eax
cmp eax, 0x1b
jne 0x10088140
mov eax, 0x7fffffff
mov dword [esp + 0x1c0], eax
cmp ecx, 0x11
jne 0x10088225
cmp eax, ecx
jne 0x1008822e
mov esi, dword [edi + 0xa0]
mov eax, dword [esp + 0x10]
mov word [esp + 0x3d8], ax
xor eax, eax
mov word [esp + 0x3da], ax
mov ecx, dword [esi + 4]
mov eax, dword [esi]
mov dword [esp + 0x3cc], 0
mov dword [esp + 0x3d4], 0xe40000
mov dword [esp + 0x3d0], 0
mov dword [eax + ecx*4], 5
mov eax, dword [esi + 4]
lea ecx, [eax + 1]
mov dword [esi + 4], ecx
mov dword [esi + 8], eax
mov eax, dword [esi]
mov dword [eax + ecx*4], 0x802f0000
lea eax, [esp + 0x18]
inc dword [esi + 4]
mov ecx, esi
push eax
call fcn.10077b30
lea eax, [esp + 0x3cc]
mov ecx, esi
push eax
call fcn.10077b30
mov ecx, dword [esi + 8]
mov eax, dword [esi]
push 0x10
lea edx, [eax + ecx*4]
mov eax, dword [esi + 4]
sub eax, ecx
mov ecx, esi
dec eax
shl eax, 0x18
or dword [edx], eax
call fcn.10077d00
inc dword [esi + 0x10]
cmp byte [esi + 0x18], 0
je 0x100881f5
inc dword [esi + 0x14]
mov byte [esi + 0x18], 1
xor esi, esi
xor eax, eax
mov dword [esp + 0xd8], esi
mov dword [esp + 0x18], esi
mov esi, eax
mov dword [esp + 0xe14], eax
mov dword [esp + 0x80], eax
mov dword [esp + 0x1c], eax
mov dword [esp + 0x24], esi
jmp 0x1008845d
cmp eax, 0x11
jne 0x10088470
mov esi, dword [edi + 0xa0]
mov eax, dword [esp + 0x10]
mov word [esp + 0x3e8], ax
xor eax, eax
mov word [esp + 0x3ea], ax
mov ecx, dword [esi + 4]
mov eax, dword [esi]
mov dword [esp + 0x3dc], 0
mov dword [esp + 0x3e4], 0xe40000
mov dword [esp + 0x3e0], 0
mov dword [eax + ecx*4], 1
mov eax, dword [esi + 4]
lea ecx, [eax + 1]
mov dword [esi + 4], ecx
mov dword [esi + 8], eax
mov eax, dword [esi]
mov dword [eax + ecx*4], 0x802f0000
lea eax, [esp + 0x3dc]
inc dword [esi + 4]
mov ecx, esi
push eax
call fcn.10077b30
mov ecx, dword [esi + 8]
mov eax, dword [esi]
push 0x10
lea edx, [eax + ecx*4]
mov eax, dword [esi + 4]
sub eax, ecx
mov ecx, esi
dec eax
shl eax, 0x18
or dword [edx], eax
call fcn.10077d00
inc dword [esi + 0x10]
cmp byte [esi + 0x18], 0
je 0x100882c6
inc dword [esi + 0x14]
cmp dword [esp + 0x18c], 0x11
mov byte [esi + 0x18], 1
jne 0x10088380
mov esi, dword [edi + 0xa0]
mov eax, dword [esp + 0x10]
mov word [esp + 0x3f8], ax
xor eax, eax
mov word [esp + 0x3fa], ax
mov ecx, dword [esi + 4]
mov eax, dword [esi]
mov dword [esp + 0x3ec], 0
mov dword [esp + 0x3f4], 0xe40000
mov dword [esp + 0x3f0], 0
mov dword [eax + ecx*4], 5
mov eax, dword [esi + 4]
lea ecx, [eax + 1]
mov dword [esi + 4], ecx
mov dword [esi + 8], eax
mov eax, dword [esi]
mov dword [eax + ecx*4], 0x80270000
lea eax, [esp + 0x18]
inc dword [esi + 4]
mov ecx, esi
push eax
call fcn.10077b30
lea eax, [esp + 0x3ec]
mov ecx, esi
push eax
call fcn.10077b30
mov ecx, dword [esi + 8]
mov eax, dword [esi]
push 0x10
lea edx, [eax + ecx*4]
mov eax, dword [esi + 4]
sub eax, ecx
mov ecx, esi
dec eax
shl eax, 0x18
or dword [edx], eax
call fcn.10077d00
inc dword [esi + 0x10]
cmp byte [esi + 0x18], 0
je 0x1008837c
inc dword [esi + 0x14]
mov byte [esi + 0x18], 1
cmp dword [esp + 0x1c0], 0x11
jne 0x10088436
mov esi, dword [edi + 0xa0]
mov eax, dword [esp + 0x10]
mov word [esp + 0x408], ax
xor eax, eax
mov word [esp + 0x40a], ax
mov ecx, dword [esi + 4]
mov eax, dword [esi]
mov dword [esp + 0x3fc], 0
mov dword [esp + 0x404], 0xe40000
mov dword [esp + 0x400], 0
mov dword [eax + ecx*4], 5
mov eax, dword [esi + 4]
lea ecx, [eax + 1]
mov dword [esi + 4], ecx
mov dword [esi + 8], eax
mov eax, dword [esi]
mov dword [eax + ecx*4], 0x80280000
lea eax, [esp + 0x18]
inc dword [esi + 4]
mov ecx, esi
push eax
call fcn.10077b30
lea eax, [esp + 0x3fc]
mov ecx, esi
push eax
call fcn.10077b30
mov ecx, dword [esi + 8]
mov eax, dword [esi]
push 0x10
lea edx, [eax + ecx*4]
mov eax, dword [esi + 4]
sub eax, ecx
mov ecx, esi
dec eax
shl eax, 0x18
or dword [edx], eax
call fcn.10077d00
inc dword [esi + 0x10]
cmp byte [esi + 0x18], 0
je 0x10088432
inc dword [esi + 0x14]
mov byte [esi + 0x18], 1
xor eax, eax
xor ecx, ecx
mov dword [esp + 0xd8], eax
mov dword [esp + 0x18], eax
mov eax, ecx
mov dword [esp + 0xe24], ecx
mov dword [esp + 0x80], ecx
mov dword [esp + 0x1c], ecx
mov dword [esp + 0x24], eax
mov esi, dword [esp + 0x3c]
mov edx, dword [esp + 0xa4]
mov dword [esp + 0x20], 0xe40000
mov ecx, dword [edi + 0xa4]
lea eax, [edx + 3]
shl eax, 4
push 0x10
add eax, ecx
mov dword [esp + 0x1cc], 6
push eax
lea eax, [esp + 0x9c]
mov dword [esp + 0x1d8], 0xe40000
push eax
mov dword [esp + 0x1d8], 0xf0000
mov dword [esp + 0xb8], 7
mov dword [esp + 0xc0], 0xe40000
mov dword [esp + 0xbc], 0xf0000
mov dword [esp + 0x114], 8
mov dword [esp + 0x11c], 0xe40000
mov dword [esp + 0x118], 0xf0000
mov dword [esp + 0x1e0], 6
mov dword [esp + 0x1e8], 0xe40000
mov dword [esp + 0x1e4], 0xf0000
mov dword [esp + 0xfc], 7
mov dword [esp + 0x104], 0xe40000
mov dword [esp + 0x100], 0xf0000
mov dword [esp + 0x120], 8
mov dword [esp + 0x128], 0xe40000
mov dword [esp + 0x124], 0xf0000
call fcn.10078870
mov ecx, dword [edi + 0xa4]
push 0x10
lea eax, [ecx + 0x20]
push eax
lea eax, [esp + 0x64]
push eax
call fcn.10078870
mov eax, dword [esp + 0x28]
add eax, 0xfffffffe
cmp eax, 0x18
ja case.0x1008857a.22
jmp dword [eax*4 + 0x1008e630]
sub esp, 8
mov esi, dword [esp + 0x18]
xor eax, eax
mov dword [esp + 0x414], 0
mov word [esp + 0x432], ax
mov ecx, edi
lea eax, [esp + 0x74]
mov dword [esp + 0x420], 2
push eax
lea eax, [esp + 0xb8]
mov dword [esp + 0x420], 0xe40000
push eax
lea eax, [esp + 0x41c]
mov dword [esp + 0x420], 0
push eax
lea eax, [esp + 0x430]
mov dword [esp + 0x430], 0
push eax
lea eax, [esp + 0x30]
mov word [esp + 0x440], si
push eax
lea eax, [esp + 0x60]
mov dword [esp + 0x440], 0xe40000
push eax
lea eax, [esp + 0x4c]
mov dword [esp + 0x440], 0
push eax
push 0
push dword [esp + 0x64]
lea eax, [esp + 0x88]
push eax
lea eax, [esp + 0xc4]
push eax
call fcn.10085a60
mov edx, dword [edi + 0xa0]
mov dword [esp + 0xc], edx
mov ecx, dword [edx + 4]
mov eax, dword [edx]
mov dword [eax + ecx*4], 1
mov eax, dword [edx + 4]
mov ecx, dword [esp + 0xc]
lea edx, [eax + 1]
mov dword [ecx + 4], edx
mov dword [ecx + 8], eax
mov eax, dword [esp + 0x54]
mov ecx, eax
and ecx, 0x18
shl eax, 0x14
or ecx, eax
mov eax, dword [esp + 0xc]
or ecx, 0xff802000
shl ecx, 8
or ecx, dword [esp + 0x58]
mov eax, dword [eax]
or ecx, 0x70005
mov dword [eax + edx*4], ecx
lea ecx, [esp + 0x6c]
mov eax, dword [esp + 0xc]
push ecx
mov ecx, eax
inc dword [eax + 4]
call fcn.10077b30
mov eax, dword [esp + 0xc]
push 0x10
mov ecx, dword [eax + 8]
mov eax, dword [eax]
lea edx, [eax + ecx*4]
mov eax, dword [esp + 0x10]
mov eax, dword [eax + 4]
sub eax, ecx
mov ecx, dword [esp + 0x10]
dec eax
shl eax, 0x18
or dword [edx], eax
call fcn.10077d00
mov eax, dword [esp + 0xc]
inc dword [eax + 0x10]
cmp byte [eax + 0x18], 0
je 0x100886c9
inc dword [eax + 0x14]
mov byte [eax + 0x18], 1
jmp 0x10089021
sub esp, 8
mov esi, dword [esp + 0x18]
xor eax, eax
mov dword [esp + 0x434], 0
mov word [esp + 0x452], ax
mov ecx, edi
lea eax, [esp + 0x8c]
mov dword [esp + 0x440], 2
push eax
lea eax, [esp + 0x114]
mov dword [esp + 0x440], 0xe40000
push eax
lea eax, [esp + 0x43c]
mov dword [esp + 0x440], 0
push eax
lea eax, [esp + 0x450]
mov dword [esp + 0x450], 0
push eax
lea eax, [esp + 0x30]
mov word [esp + 0x460], si
push eax
lea eax, [esp + 0x60]
mov dword [esp + 0x460], 0xe40000
push eax
lea eax, [esp + 0x4c]
mov dword [esp + 0x460], 0
push eax
push 0
push dword [esp + 0x34]
lea eax, [esp + 0x88]
push eax
lea eax, [esp + 0xc4]
push eax
call fcn.10085a60
mov edx, dword [edi + 0xa0]
mov dword [esp + 0xc], edx
mov ecx, dword [edx + 4]
mov eax, dword [edx]
mov dword [eax + ecx*4], 1
mov eax, dword [edx + 4]
mov ecx, dword [esp + 0xc]
lea edx, [eax + 1]
mov dword [ecx + 4], edx
mov dword [ecx + 8], eax
mov eax, dword [esp + 0x54]
mov ecx, eax
and ecx, 0x18
shl eax, 0x14
or ecx, eax
mov eax, dword [esp + 0xc]
or ecx, 0xff802000
shl ecx, 8
or ecx, dword [esp + 0x58]
mov eax, dword [eax]
or ecx, 0x70005
mov dword [eax + edx*4], ecx
lea ecx, [esp + 0x84]
jmp 0x10088684
sub esp, 8
mov esi, dword [esp + 0x18]
xor eax, eax
mov dword [esp + 0x454], 0
mov word [esp + 0x472], ax
mov ecx, edi
lea eax, [esp + 0x74]
mov dword [esp + 0x460], 2
push eax
lea eax, [esp + 0xb8]
mov dword [esp + 0x460], 0xe40000
push eax
lea eax, [esp + 0x45c]
mov dword [esp + 0x460], 0
push eax
lea eax, [esp + 0x470]
mov dword [esp + 0x470], 0
push eax
lea eax, [esp + 0x30]
mov word [esp + 0x480], si
push eax
lea eax, [esp + 0x60]
mov dword [esp + 0x480], 0xe40000
push eax
lea eax, [esp + 0x4c]
mov dword [esp + 0x480], 0
push eax
push 0
push dword [esp + 0x64]
lea eax, [esp + 0x88]
push eax
lea eax, [esp + 0xc4]
push eax
call fcn.10085a60
sub esp, 8
mov dword [esp + 0x474], 0
xor eax, eax
mov dword [esp + 0x480], 2
mov word [esp + 0x492], ax
mov ecx, edi
lea eax, [esp + 0x8c]
mov dword [esp + 0x47c], 0xe40000
push eax
lea eax, [esp + 0x114]
mov dword [esp + 0x47c], 0
push eax
lea eax, [esp + 0x47c]
mov dword [esp + 0x48c], 0
push eax
lea eax, [esp + 0x490]
mov word [esp + 0x49c], si
push eax
lea eax, [esp + 0x30]
mov dword [esp + 0x49c], 0xe40000
push eax
lea eax, [esp + 0x60]
mov dword [esp + 0x49c], 0
push eax
lea eax, [esp + 0x4c]
push eax
push 0
push dword [esp + 0x34]
lea eax, [esp + 0x88]
push eax
lea eax, [esp + 0xc4]
push eax
call fcn.10085a60
lea eax, [esp + 0x84]
mov ecx, edi
push eax
lea eax, [esp + 0x70]
push eax
lea eax, [esp + 0xb4]
push eax
call fcn.10085950
mov edx, dword [edi + 0xa0]
mov dword [esp + 0xc], edx
mov eax, dword [edx]
mov ecx, dword [edx + 4]
mov dword [eax + ecx*4], 2
mov eax, dword [edx + 4]
mov ecx, dword [esp + 0xc]
lea edx, [eax + 1]
mov dword [ecx + 4], edx
mov dword [ecx + 8], eax
mov eax, dword [esp + 0x54]
mov ecx, eax
and ecx, 0x18
shl eax, 0x14
or ecx, eax
mov eax, dword [esp + 0xc]
or ecx, 0xff802000
shl ecx, 8
or ecx, dword [esp + 0x58]
mov eax, dword [eax]
or ecx, 0x70005
mov dword [eax + edx*4], ecx
lea ecx, [esp + 0x6c]
mov eax, dword [esp + 0xc]
push ecx
mov ecx, eax
inc dword [eax + 4]
call fcn.10077b30
mov ecx, dword [esp + 0xc]
lea eax, [esp + 0x84]
push eax
jmp 0x1008868e
sub esp, 8
mov esi, dword [esp + 0x18]
xor eax, eax
mov dword [esp + 0x494], 0
mov word [esp + 0x4b2], ax
mov ecx, edi
lea eax, [esp + 0x74]
mov dword [esp + 0x4a0], 2
push eax
lea eax, [esp + 0xb8]
mov dword [esp + 0x4a0], 0xe40000
push eax
lea eax, [esp + 0x49c]
mov dword [esp + 0x4a0], 0
push eax
lea eax, [esp + 0x4b0]
mov dword [esp + 0x4b0], 0
push eax
lea eax, [esp + 0x30]
mov word [esp + 0x4c0], si
push eax
lea eax, [esp + 0x60]
mov dword [esp + 0x4c0], 0xe40000
push eax
lea eax, [esp + 0x4c]
mov dword [esp + 0x4c0], 0
push eax
push 0
push dword [esp + 0x64]
lea eax, [esp + 0x88]
push eax
lea eax, [esp + 0xc4]
push eax
call fcn.10085a60
sub esp, 8
mov dword [esp + 0x4b4], 0
xor eax, eax
mov dword [esp + 0x4c0], 2
mov word [esp + 0x4d2], ax
mov ecx, edi
lea eax, [esp + 0x8c]
mov dword [esp + 0x4bc], 0xe40000
push eax
lea eax, [esp + 0x114]
mov dword [esp + 0x4bc], 0
push eax
lea eax, [esp + 0x4bc]
mov dword [esp + 0x4cc], 0
push eax
lea eax, [esp + 0x4d0]
mov word [esp + 0x4dc], si
push eax
lea eax, [esp + 0x30]
mov dword [esp + 0x4dc], 0xe40000
push eax
lea eax, [esp + 0x60]
mov dword [esp + 0x4dc], 0
push eax
lea eax, [esp + 0x4c]
push eax
push 0
push dword [esp + 0x34]
lea eax, [esp + 0x88]
push eax
lea eax, [esp + 0xc4]
push eax
call fcn.10085a60
lea eax, [esp + 0x84]
mov ecx, edi
push eax
lea eax, [esp + 0x70]
push eax
lea eax, [esp + 0xb4]
push eax
call fcn.10085950
mov edx, dword [edi + 0xa0]
mov dword [esp + 0x28], edx
mov eax, dword [edx]
mov ecx, dword [edx + 4]
mov dword [eax + ecx*4], 2
mov eax, dword [edx + 4]
lea ecx, [eax + 1]
mov dword [edx + 4], ecx
mov dword [edx + 8], eax
mov eax, dword [edx]
mov dword [eax + ecx*4], 0x80270005
lea eax, [esp + 0x6c]
inc dword [edx + 4]
mov ecx, edx
push eax
call fcn.10077b30
mov ecx, dword [esp + 0x28]
lea eax, [esp + 0x84]
push eax
call fcn.10077b30
mov eax, dword [esp + 0x28]
push 0x10
mov ecx, dword [eax + 8]
mov eax, dword [eax]
lea edx, [eax + ecx*4]
mov eax, dword [esp + 0x2c]
mov eax, dword [eax + 4]
sub eax, ecx
mov ecx, dword [esp + 0x2c]
dec eax
shl eax, 0x18
or dword [edx], eax
call fcn.10077d00
mov eax, dword [esp + 0x28]
inc dword [eax + 0x10]
cmp byte [eax + 0x18], 0
je 0x10088bc7
inc dword [eax + 0x14]
mov byte [eax + 0x18], 1
mov eax, dword [edi + 0xa0]
mov ecx, dword [edi + 0xa4]
push 4
mov dword [esp + 0x10], eax
lea eax, [esp + 0xcf0]
push ecx
push eax
call fcn.10078870
mov eax, dword [esp + 0xcec]
mov dword [esp + 0x4dc], eax
movzx eax, word [esp + 0xcf8]
mov word [esp + 0x4e8], ax
mov eax, dword [esp + 0xcf4]
mov dword [esp + 0x4e4], eax
movzx eax, word [esp + 0xcfa]
mov word [esp + 0x4ea], ax
mov eax, dword [esp + 0xc]
mov dword [esp + 0x4e0], 0x1000000
mov dword [esp + 0x4cc], 0
mov dword [esp + 0x4d8], 5
mov ecx, dword [eax + 4]
mov eax, dword [eax]
mov dword [esp + 0x4d4], 0xe40000
mov dword [esp + 0x4d0], 0
mov dword [eax + ecx*4], 2
mov ecx, dword [esp + 0xc]
mov eax, dword [ecx + 4]
lea edx, [eax + 1]
mov dword [ecx + 4], edx
mov dword [ecx + 8], eax
mov eax, dword [esp + 0x54]
mov ecx, eax
and ecx, 0x18
shl eax, 0x14
or ecx, eax
mov eax, dword [esp + 0xc]
or ecx, 0xff802000
shl ecx, 8
or ecx, dword [esp + 0x58]
mov eax, dword [eax]
or ecx, 0x70005
mov dword [eax + edx*4], ecx
lea ecx, [esp + 0x4cc]
mov eax, dword [esp + 0xc]
push ecx
mov ecx, eax
inc dword [eax + 4]
call fcn.10077b30
mov ecx, dword [esp + 0xc]
lea eax, [esp + 0x4dc]
push eax
jmp 0x1008868e
sub esp, 8
mov esi, dword [esp + 0x18]
xor eax, eax
mov dword [esp + 0x4f4], 0
mov word [esp + 0x512], ax
mov ecx, edi
lea eax, [esp + 0x74]
mov dword [esp + 0x500], 2
push eax
lea eax, [esp + 0xb8]
mov dword [esp + 0x500], 0xe40000
push eax
lea eax, [esp + 0x4fc]
mov dword [esp + 0x500], 0
push eax
lea eax, [esp + 0x510]
mov dword [esp + 0x510], 0
push eax
lea eax, [esp + 0x30]
mov word [esp + 0x520], si
push eax
lea eax, [esp + 0x60]
mov dword [esp + 0x520], 0xe40000
push eax
lea eax, [esp + 0x4c]
mov dword [esp + 0x520], 0
push eax
push 0
push dword [esp + 0x64]
lea eax, [esp + 0x88]
push eax
lea eax, [esp + 0xc4]
push eax
call fcn.10085a60
sub esp, 8
mov dword [esp + 0x514], 0
xor eax, eax
mov dword [esp + 0x520], 2
mov word [esp + 0x532], ax
mov ecx, edi
lea eax, [esp + 0x8c]
mov dword [esp + 0x51c], 0xe40000
push eax
lea eax, [esp + 0x114]
mov dword [esp + 0x51c], 0
push eax
lea eax, [esp + 0x51c]
mov dword [esp + 0x52c], 0
push eax
lea eax, [esp + 0x530]
mov word [esp + 0x53c], si
push eax
lea eax, [esp + 0x30]
mov dword [esp + 0x53c], 0xe40000
push eax
lea eax, [esp + 0x60]
mov dword [esp + 0x53c], 0
push eax
lea eax, [esp + 0x4c]
push eax
push 0
push dword [esp + 0x34]
lea eax, [esp + 0x88]
push eax
lea eax, [esp + 0xc4]
push eax
call fcn.10085a60
lea eax, [esp + 0x84]
mov ecx, edi
push eax
lea eax, [esp + 0x70]
push eax
lea eax, [esp + 0xb4]
push eax
call fcn.10085950
mov esi, dword [edi + 0xa0]
mov ecx, dword [esi + 4]
mov eax, dword [esi]
mov dword [eax + ecx*4], 2
mov eax, dword [esi + 4]
lea ecx, [eax + 1]
mov dword [esi + 4], ecx
mov dword [esi + 8], eax
mov eax, dword [esi]
mov dword [eax + ecx*4], 0x80270005
lea eax, [esp + 0x6c]
inc dword [esi + 4]
mov ecx, esi
push eax
call fcn.10077b30
lea eax, [esp + 0x84]
mov ecx, esi
push eax
call fcn.10077b30
mov ecx, esi
call fcn.10077c00
mov ecx, dword [edi + 0xa4]
lea eax, [esp + 0xcfc]
mov esi, dword [edi + 0xa0]
push 4
push ecx
push eax
call fcn.10078870
mov eax, dword [esp + 0xcfc]
mov dword [esp + 0x53c], eax
movzx eax, word [esp + 0xd08]
mov word [esp + 0x548], ax
mov eax, dword [esp + 0xd04]
mov dword [esp + 0x544], eax
movzx eax, word [esp + 0xd0a]
mov word [esp + 0x54a], ax
mov dword [esp + 0x540], 0x1000000
mov ecx, dword [esi + 4]
mov eax, dword [esi]
mov dword [esp + 0x52c], 0
mov dword [esp + 0x538], 5
mov dword [esp + 0x534], 0xe40000
mov dword [eax + ecx*4], 2
mov eax, dword [esi + 4]
mov dword [esp + 0x530], 0
lea ecx, [eax + 1]
mov dword [esi + 4], ecx
mov dword [esi + 8], eax
mov eax, dword [esi]
mov dword [eax + ecx*4], 0x80270005
lea eax, [esp + 0x52c]
inc dword [esi + 4]
mov ecx, esi
push eax
call fcn.10077b30
lea eax, [esp + 0x53c]
mov ecx, esi
push eax
call fcn.10077b30
mov ecx, esi
call fcn.10077c00
mov ecx, dword [edi + 0xa4]
mov esi, dword [edi + 0xa0]
push 4
lea eax, [ecx + 4]
push eax
lea eax, [esp + 0xe8c]
push eax
call fcn.10078870
mov ecx, dword [esi + 4]
mov eax, dword [esi]
mov dword [esp + 0x54c], 0
mov dword [esp + 0x558], 5
mov dword [esp + 0x554], 0xe40000
mov dword [eax + ecx*4], 5
mov eax, dword [esi + 4]
mov dword [esp + 0x550], 0
lea edx, [eax + 1]
mov dword [esi + 4], edx
mov dword [esi + 8], eax
mov eax, dword [esp + 0x54]
mov ecx, eax
and ecx, 0x18
shl eax, 0x14
or ecx, eax
or ecx, 0xff802000
shl ecx, 8
mov eax, dword [esi]
or ecx, dword [esp + 0x58]
or ecx, 0x70005
mov dword [eax + edx*4], ecx
lea eax, [esp + 0x54c]
inc dword [esi + 4]
mov ecx, esi
push eax
call fcn.10077b30
lea eax, [esp + 0xe84]
push eax
mov ecx, esi
call fcn.10077b30
mov ecx, esi
call fcn.10077c00
mov esi, dword [esp + 0x10]
mov eax, dword [esp + 0x1b4]
cmp eax, 0x7fffffff
je 0x1008dc88
add eax, 0xfffffffe
cmp eax, 0x18
ja case.0x1008903f.18
jmp dword [eax*4 + 0x1008e694]
sub esp, 8
mov esi, dword [esp + 0x18]
xor eax, eax
mov dword [esp + 0x564], 0
mov word [esp + 0x582], ax
mov ecx, edi
lea eax, [esp + 0x74]
mov dword [esp + 0x570], 2
push eax
lea eax, [esp + 0xb8]
mov dword [esp + 0x570], 0xe40000
push eax
lea eax, [esp + 0x56c]
mov dword [esp + 0x570], 0
push eax
lea eax, [esp + 0x580]
mov dword [esp + 0x580], 0
push eax
lea eax, [esp + 0x30]
mov word [esp + 0x590], si
push eax
lea eax, [esp + 0x60]
mov dword [esp + 0x590], 0xe40000
push eax
lea eax, [esp + 0x4c]
mov dword [esp + 0x590], 0
push eax
push 0
push dword [esp + 0x64]
lea eax, [esp + 0x88]
push eax
lea eax, [esp + 0xc4]
push eax
call fcn.10085a60
sub esp, 8
mov dword [esp + 0x584], 0
xor eax, eax
mov dword [esp + 0x590], 2
mov word [esp + 0x5a2], ax
mov ecx, edi
lea eax, [esp + 0x8c]
mov dword [esp + 0x58c], 0xe40000
push eax
lea eax, [esp + 0x114]
mov dword [esp + 0x58c], 0
push eax
lea eax, [esp + 0x58c]
mov dword [esp + 0x59c], 0
push eax
lea eax, [esp + 0x5a0]
mov word [esp + 0x5ac], si
push eax
lea eax, [esp + 0x30]
mov dword [esp + 0x5ac], 0xe40000
push eax
lea eax, [esp + 0x60]
mov dword [esp + 0x5ac], 0
push eax
lea eax, [esp + 0x4c]
push eax
push 0
push dword [esp + 0x34]
lea eax, [esp + 0x88]
push eax
lea eax, [esp + 0xc4]
push eax
call fcn.10085a60
lea eax, [esp + 0x84]
mov ecx, edi
push eax
lea eax, [esp + 0x70]
push eax
lea eax, [esp + 0xb4]
push eax
call fcn.10085950
mov esi, dword [edi + 0xa0]
mov eax, dword [esp + 0x84]
mov dword [esp + 0x59c], eax
movzx eax, word [esp + 0x90]
mov word [esp + 0x5a8], ax
mov eax, dword [esp + 0x8c]
mov dword [esp + 0x5a4], eax
movzx eax, word [esp + 0x92]
mov word [esp + 0x5aa], ax
mov dword [esp + 0x5a0], 0x1000000
mov ecx, dword [esi + 4]
mov eax, dword [esi]
mov dword [eax + ecx*4], 2
mov eax, dword [esi + 4]
lea edx, [eax + 1]
mov dword [esi + 4], edx
mov dword [esi + 8], eax
mov eax, dword [esp + 0x54]
mov ecx, eax
and ecx, 0x18
shl eax, 0x14
or ecx, eax
mov eax, dword [esi]
or ecx, 0xff802000
shl ecx, 8
or ecx, dword [esp + 0x58]
or ecx, 0x70005
mov dword [eax + edx*4], ecx
lea eax, [esp + 0x6c]
inc dword [esi + 4]
mov ecx, esi
push eax
call fcn.10077b30
lea eax, [esp + 0x59c]
jmp 0x1008900e
sub esp, 8
mov esi, dword [esp + 0x18]
xor eax, eax
mov dword [esp + 0x5b4], 0
mov word [esp + 0x5d2], ax
mov ecx, edi
lea eax, [esp + 0x74]
mov dword [esp + 0x5c0], 2
push eax
lea eax, [esp + 0xb8]
mov dword [esp + 0x5c0], 0xe40000
push eax
lea eax, [esp + 0x5bc]
mov dword [esp + 0x5c0], 0
push eax
lea eax, [esp + 0x5d0]
mov dword [esp + 0x5d0], 0
push eax
lea eax, [esp + 0x30]
mov word [esp + 0x5e0], si
push eax
lea eax, [esp + 0x60]
mov dword [esp + 0x5e0], 0xe40000
push eax
lea eax, [esp + 0x4c]
mov dword [esp + 0x5e0], 0
push eax
push 0
push dword [esp + 0x64]
lea eax, [esp + 0x88]
push eax
lea eax, [esp + 0xc4]
push eax
call fcn.10085a60
sub esp, 8
mov dword [esp + 0x5d4], 0
xor eax, eax
mov dword [esp + 0x5e0], 2
mov word [esp + 0x5f2], ax
mov ecx, edi
lea eax, [esp + 0x8c]
mov dword [esp + 0x5dc], 0xe40000
push eax
lea eax, [esp + 0x114]
mov dword [esp + 0x5dc], 0
push eax
lea eax, [esp + 0x5dc]
mov dword [esp + 0x5ec], 0
push eax
lea eax, [esp + 0x5f0]
mov word [esp + 0x5fc], si
push eax
lea eax, [esp + 0x30]
mov dword [esp + 0x5fc], 0xe40000
push eax
lea eax, [esp + 0x60]
mov dword [esp + 0x5fc], 0
push eax
lea eax, [esp + 0x4c]
push eax
push 0
push dword [esp + 0x34]
lea eax, [esp + 0x88]
push eax
lea eax, [esp + 0xc4]
push eax
call fcn.10085a60
lea eax, [esp + 0x6c]
mov ecx, edi
push eax
push eax
lea eax, [esp + 0xb4]
push eax
call fcn.10085950
mov esi, dword [edi + 0xa0]
mov eax, dword [esp + 0x6c]
mov dword [esp + 0x5ec], eax
movzx eax, word [esp + 0x78]
mov word [esp + 0x5f8], ax
mov eax, dword [esp + 0x74]
mov dword [esp + 0x5f4], eax
movzx eax, word [esp + 0x7a]
mov word [esp + 0x5fa], ax
mov dword [esp + 0x5f0], 0x1000000
mov ecx, dword [edi + 0xa4]
push 4
lea eax, [ecx + 0x1c]
push eax
lea eax, [esp + 0xe9c]
push eax
call fcn.10078870
mov ecx, dword [esi + 4]
mov eax, dword [esi]
mov dword [eax + ecx*4], 2
mov eax, dword [esi + 4]
lea ecx, [eax + 1]
mov dword [esi + 4], ecx
mov dword [esi + 8], eax
mov eax, dword [esi]
mov dword [eax + ecx*4], 0x80270005
lea eax, [esp + 0xe94]
inc dword [esi + 4]
mov ecx, esi
push eax
call fcn.10077b30
lea eax, [esp + 0x5ec]
mov ecx, esi
push eax
call fcn.10077b30
mov ecx, esi
call fcn.10077c00
mov esi, dword [edi + 0xa0]
mov dword [esp + 0x5fc], 0
mov dword [esp + 0x608], 5
mov dword [esp + 0x604], 0xe40000
mov ecx, dword [esi + 4]
mov eax, dword [esi]
mov dword [esp + 0x600], 0
mov dword [eax + ecx*4], 4
mov eax, dword [esi + 4]
lea edx, [eax + 1]
mov dword [esi + 4], edx
mov dword [esi + 8], eax
mov eax, dword [esp + 0x54]
mov ecx, eax
and ecx, 0x18
shl eax, 0x14
or ecx, eax
mov eax, dword [esi]
or ecx, 0xff802000
shl ecx, 8
or ecx, dword [esp + 0x58]
or ecx, 0x70005
mov dword [eax + edx*4], ecx
lea eax, [esp + 0x5fc]
inc dword [esi + 4]
mov ecx, esi
push eax
call fcn.10077b30
lea eax, [esp + 0x84]
mov ecx, esi
push eax
call fcn.10077b30
lea eax, [esp + 0x6c]
jmp 0x1008900e
sub esp, 8
mov esi, dword [esp + 0x18]
xor eax, eax
mov dword [esp + 0x614], 0
mov word [esp + 0x632], ax
mov ecx, edi
lea eax, [esp + 0x74]
mov dword [esp + 0x620], 2
push eax
lea eax, [esp + 0xb8]
mov dword [esp + 0x620], 0xe40000
push eax
lea eax, [esp + 0x61c]
mov dword [esp + 0x620], 0
push eax
lea eax, [esp + 0x630]
mov dword [esp + 0x630], 0
push eax
lea eax, [esp + 0x30]
mov word [esp + 0x640], si
push eax
lea eax, [esp + 0x60]
mov dword [esp + 0x640], 0xe40000
push eax
lea eax, [esp + 0x4c]
mov dword [esp + 0x640], 0
push eax
push 0
push dword [esp + 0x64]
lea eax, [esp + 0x88]
push eax
lea eax, [esp + 0xc4]
push eax
call fcn.10085a60
sub esp, 8
mov dword [esp + 0x634], 0
xor eax, eax
mov dword [esp + 0x640], 2
mov word [esp + 0x652], ax
mov ecx, edi
lea eax, [esp + 0x8c]
mov dword [esp + 0x63c], 0xe40000
push eax
lea eax, [esp + 0x114]
mov dword [esp + 0x63c], 0
push eax
lea eax, [esp + 0x63c]
mov dword [esp + 0x64c], 0
push eax
lea eax, [esp + 0x650]
mov word [esp + 0x65c], si
push eax
lea eax, [esp + 0x30]
mov dword [esp + 0x65c], 0xe40000
push eax
lea eax, [esp + 0x60]
mov dword [esp + 0x65c], 0
push eax
lea eax, [esp + 0x4c]
push eax
push 0
push dword [esp + 0x34]
lea eax, [esp + 0x88]
push eax
lea eax, [esp + 0xc4]
push eax
call fcn.10085a60
lea eax, [esp + 0x84]
mov ecx, edi
push eax
lea eax, [esp + 0x70]
push eax
lea eax, [esp + 0xb4]
push eax
call fcn.10085950
mov esi, dword [edi + 0xa0]
mov eax, dword [esi]
mov ecx, dword [esi + 4]
mov dword [eax + ecx*4], 5
mov eax, dword [esi + 4]
lea edx, [eax + 1]
mov dword [esi + 4], edx
mov dword [esi + 8], eax
mov eax, dword [esp + 0x54]
mov ecx, eax
and ecx, 0x18
shl eax, 0x14
or ecx, eax
mov eax, dword [esi]
or ecx, 0xff802000
shl ecx, 8
or ecx, dword [esp + 0x58]
or ecx, 0x70005
mov dword [eax + edx*4], ecx
lea eax, [esp + 0x6c]
inc dword [esi + 4]
mov ecx, esi
push eax
call fcn.10077b30
lea eax, [esp + 0x84]
jmp 0x1008900e
sub esp, 8
mov esi, dword [esp + 0x18]
xor eax, eax
mov dword [esp + 0x654], 0
mov word [esp + 0x672], ax
mov ecx, edi
lea eax, [esp + 0x74]
mov dword [esp + 0x660], 2
push eax
lea eax, [esp + 0xb8]
mov dword [esp + 0x660], 0xe40000
push eax
lea eax, [esp + 0x65c]
mov dword [esp + 0x660], 0
push eax
lea eax, [esp + 0x670]
mov dword [esp + 0x670], 0
push eax
lea eax, [esp + 0x30]
mov word [esp + 0x680], si
push eax
lea eax, [esp + 0x60]
mov dword [esp + 0x680], 0xe40000
push eax
lea eax, [esp + 0x4c]
mov dword [esp + 0x680], 0
push eax
push 0
push dword [esp + 0x64]
lea eax, [esp + 0x88]
push eax
lea eax, [esp + 0xc4]
push eax
call fcn.10085a60
sub esp, 8
mov dword [esp + 0x674], 0
xor eax, eax
mov dword [esp + 0x680], 2
mov word [esp + 0x692], ax
mov ecx, edi
lea eax, [esp + 0x8c]
mov dword [esp + 0x67c], 0xe40000
push eax
lea eax, [esp + 0x114]
mov dword [esp + 0x67c], 0
push eax
lea eax, [esp + 0x67c]
mov dword [esp + 0x68c], 0
push eax
lea eax, [esp + 0x690]
mov word [esp + 0x69c], si
push eax
lea eax, [esp + 0x30]
mov dword [esp + 0x69c], 0xe40000
push eax
lea eax, [esp + 0x60]
mov dword [esp + 0x69c], 0
push eax
lea eax, [esp + 0x4c]
push eax
push 0
push dword [esp + 0x34]
lea eax, [esp + 0x88]
push eax
lea eax, [esp + 0xc4]
push eax
call fcn.10085a60
lea eax, [esp + 0x84]
mov ecx, edi
push eax
lea eax, [esp + 0x70]
push eax
lea eax, [esp + 0xb4]
push eax
call fcn.10085950
mov esi, dword [edi + 0xa0]
mov ecx, dword [esi + 4]
mov eax, dword [esi]
mov dword [eax + ecx*4], 5
mov eax, dword [esi + 4]
lea ecx, [eax + 1]
mov dword [esi + 4], ecx
mov dword [esi + 8], eax
mov eax, dword [esi]
mov dword [eax + ecx*4], 0x80270005
lea eax, [esp + 0x6c]
inc dword [esi + 4]
mov ecx, esi
push eax
call fcn.10077b30
lea eax, [esp + 0x84]
mov ecx, esi
push eax
call fcn.10077b30
mov ecx, esi
call fcn.10077c00
mov esi, dword [edi + 0xa0]
mov dword [esp + 0x69c], 0
mov dword [esp + 0x6a8], 5
mov dword [esp + 0x6a4], 0xe40000
mov ecx, dword [esi + 4]
mov eax, dword [esi]
mov dword [esp + 0x6a0], 0
mov dword [esp + 0x68c], 0
mov dword [esp + 0x698], 5
mov dword [eax + ecx*4], 2
mov eax, dword [esi + 4]
mov dword [esp + 0x694], 0xe40000
mov dword [esp + 0x690], 0
lea edx, [eax + 1]
mov dword [esi + 4], edx
mov dword [esi + 8], eax
mov eax, dword [esp + 0x54]
mov ecx, eax
and ecx, 0x18
shl eax, 0x14
or ecx, eax
mov eax, dword [esi]
or ecx, 0xff802000
shl ecx, 8
or ecx, dword [esp + 0x58]
or ecx, 0x70005
mov dword [eax + edx*4], ecx
lea eax, [esp + 0x68c]
inc dword [esi + 4]
mov ecx, esi
push eax
call fcn.10077b30
lea eax, [esp + 0x69c]
jmp 0x1008900e
sub esp, 8
mov esi, dword [esp + 0x18]
xor eax, eax
mov dword [esp + 0x6b4], 0
mov word [esp + 0x6d2], ax
mov ecx, edi
lea eax, [esp + 0x74]
mov dword [esp + 0x6c0], 2
push eax
lea eax, [esp + 0xb8]
mov dword [esp + 0x6c0], 0xe40000
push eax
lea eax, [esp + 0x6bc]
mov dword [esp + 0x6c0], 0
push eax
lea eax, [esp + 0x6d0]
mov dword [esp + 0x6d0], 0
push eax
lea eax, [esp + 0x30]
mov word [esp + 0x6e0], si
push eax
lea eax, [esp + 0x60]
mov dword [esp + 0x6e0], 0xe40000
push eax
lea eax, [esp + 0x4c]
mov dword [esp + 0x6e0], 0
push eax
push 0
push dword [esp + 0x64]
lea eax, [esp + 0x88]
push eax
lea eax, [esp + 0xc4]
push eax
call fcn.10085a60
sub esp, 8
mov dword [esp + 0x6d4], 0
xor eax, eax
mov dword [esp + 0x6e0], 2
mov word [esp + 0x6f2], ax
mov ecx, edi
lea eax, [esp + 0x8c]
mov dword [esp + 0x6dc], 0xe40000
push eax
lea eax, [esp + 0x114]
mov dword [esp + 0x6dc], 0
push eax
lea eax, [esp + 0x6dc]
mov dword [esp + 0x6ec], 0
push eax
lea eax, [esp + 0x6f0]
mov word [esp + 0x6fc], si
push eax
lea eax, [esp + 0x30]
mov dword [esp + 0x6fc], 0xe40000
push eax
lea eax, [esp + 0x60]
mov dword [esp + 0x6fc], 0
push eax
lea eax, [esp + 0x4c]
push eax
push 0
push dword [esp + 0x34]
lea eax, [esp + 0x88]
push eax
lea eax, [esp + 0xc4]
push eax
call fcn.10085a60
lea eax, [esp + 0x84]
mov ecx, edi
push eax
lea eax, [esp + 0x70]
push eax
lea eax, [esp + 0xb4]
push eax
call fcn.10085950
mov esi, dword [edi + 0xa0]
mov ecx, dword [esi + 4]
mov eax, dword [esi]
mov dword [eax + ecx*4], 5
mov eax, dword [esi + 4]
lea ecx, [eax + 1]
mov dword [esi + 4], ecx
mov dword [esi + 8], eax
mov eax, dword [esi]
mov dword [eax + ecx*4], 0x80270005
lea eax, [esp + 0x6c]
inc dword [esi + 4]
mov ecx, esi
push eax
call fcn.10077b30
lea eax, [esp + 0x84]
mov ecx, esi
push eax
call fcn.10077b30
mov ecx, esi
call fcn.10077c00
mov ecx, dword [edi + 0xa4]
mov esi, dword [edi + 0xa0]
push 4
lea eax, [ecx + 8]
push eax
lea eax, [esp + 0xeac]
push eax
call fcn.10078870
mov ecx, dword [esi + 4]
mov eax, dword [esi]
mov dword [esp + 0x6ec], 0
mov dword [esp + 0x6f8], 5
mov dword [esp + 0x6f4], 0xe40000
mov dword [eax + ecx*4], 5
mov eax, dword [esi + 4]
mov dword [esp + 0x6f0], 0
lea edx, [eax + 1]
mov dword [esi + 4], edx
mov dword [esi + 8], eax
mov eax, dword [esp + 0x54]
mov ecx, eax
and ecx, 0x18
shl eax, 0x14
or ecx, eax
mov eax, dword [esi]
or ecx, 0xff802000
shl ecx, 8
or ecx, dword [esp + 0x58]
or ecx, 0x70005
mov dword [eax + edx*4], ecx
lea eax, [esp + 0x6ec]
inc dword [esi + 4]
mov ecx, esi
push eax
call fcn.10077b30
lea eax, [esp + 0xea4]
jmp 0x1008900e
sub esp, 8
mov esi, dword [esp + 0x18]
xor eax, eax
mov dword [esp + 0x704], 0
mov word [esp + 0x722], ax
mov ecx, edi
lea eax, [esp + 0x74]
mov dword [esp + 0x710], 2
push eax
lea eax, [esp + 0xb8]
mov dword [esp + 0x710], 0xe40000
push eax
lea eax, [esp + 0x70c]
mov dword [esp + 0x710], 0
push eax
lea eax, [esp + 0x720]
mov dword [esp + 0x720], 0
push eax
lea eax, [esp + 0x30]
mov word [esp + 0x730], si
push eax
lea eax, [esp + 0x60]
mov dword [esp + 0x730], 0xe40000
push eax
lea eax, [esp + 0x4c]
mov dword [esp + 0x730], 0
push eax
push 0
push dword [esp + 0x64]
lea eax, [esp + 0x88]
push eax
lea eax, [esp + 0xc4]
push eax
call fcn.10085a60
sub esp, 8
mov dword [esp + 0x724], 0
xor eax, eax
mov dword [esp + 0x730], 2
mov word [esp + 0x742], ax
mov ecx, edi
lea eax, [esp + 0x8c]
mov dword [esp + 0x72c], 0xe40000
push eax
lea eax, [esp + 0x114]
mov dword [esp + 0x72c], 0
push eax
lea eax, [esp + 0x72c]
mov dword [esp + 0x73c], 0
push eax
lea eax, [esp + 0x740]
mov word [esp + 0x74c], si
push eax
lea eax, [esp + 0x30]
mov dword [esp + 0x74c], 0xe40000
push eax
lea eax, [esp + 0x60]
mov dword [esp + 0x74c], 0
push eax
lea eax, [esp + 0x4c]
push eax
push 0
push dword [esp + 0x34]
lea eax, [esp + 0x88]
push eax
lea eax, [esp + 0xc4]
push eax
call fcn.10085a60
lea eax, [esp + 0x6c]
mov ecx, edi
push eax
lea eax, [esp + 0x88]
push eax
lea eax, [esp + 0x110]
push eax
call fcn.10085950
lea eax, [esp + 0x2c]
push eax
lea eax, [esp + 0x88]
push eax
lea eax, [esp + 0x110]
push eax
mov ecx, edi
call fcn.10085950
mov esi, dword [edi + 0xa0]
mov eax, dword [esp + 0x84]
mov dword [esp + 0x73c], eax
movzx eax, word [esp + 0x90]
mov word [esp + 0x748], ax
mov eax, dword [esp + 0x8c]
mov dword [esp + 0x744], eax
movzx eax, word [esp + 0x92]
mov word [esp + 0x74a], ax
mov dword [esp + 0x740], 0x1000000
mov ecx, dword [esi + 4]
mov eax, dword [esi]
mov dword [eax + ecx*4], 2
mov eax, dword [esi + 4]
lea ecx, [eax + 1]
mov dword [esi + 4], ecx
mov dword [esi + 8], eax
mov eax, dword [esi]
mov dword [eax + ecx*4], 0x80270005
lea eax, [esp + 0x6c]
inc dword [esi + 4]
mov ecx, esi
push eax
call fcn.10077b30
lea eax, [esp + 0x73c]
mov ecx, esi
push eax
call fcn.10077b30
mov ecx, esi
call fcn.10077c00
mov esi, dword [edi + 0xa0]
mov eax, dword [esp + 0x164]
mov dword [esp + 0x75c], eax
mov eax, dword [esp + 0x1bc]
mov word [esp + 0x768], ax
mov eax, dword [esp + 0x160]
mov dword [esp + 0x760], eax
mov eax, dword [esp + 0x1b8]
mov word [esp + 0x76a], ax
mov dword [esp + 0x764], 0xff0000
mov ecx, dword [esi + 4]
mov eax, dword [esi]
mov dword [esp + 0x74c], 0
mov dword [esp + 0x758], 5
mov dword [esp + 0x754], 0xe40000
mov dword [eax + ecx*4], 4
mov eax, dword [esi + 4]
mov dword [esp + 0x750], 0
lea edx, [eax + 1]
mov dword [esi + 4], edx
mov dword [esi + 8], eax
mov eax, dword [esp + 0x54]
mov ecx, eax
and ecx, 0x18
shl eax, 0x14
or ecx, eax
mov eax, dword [esi]
or ecx, 0xff802000
shl ecx, 8
or ecx, dword [esp + 0x58]
or ecx, 0x70005
mov dword [eax + edx*4], ecx
lea eax, [esp + 0x74c]
inc dword [esi + 4]
mov ecx, esi
push eax
call fcn.10077b30
lea eax, [esp + 0x75c]
mov ecx, esi
push eax
call fcn.10077b30
lea eax, [esp + 0x84]
jmp 0x1008900e
sub esp, 8
mov esi, dword [esp + 0x18]
xor eax, eax
mov dword [esp + 0x774], 0
mov word [esp + 0x792], ax
mov ecx, edi
lea eax, [esp + 0x74]
mov dword [esp + 0x780], 2
push eax
lea eax, [esp + 0xb8]
mov dword [esp + 0x780], 0xe40000
push eax
lea eax, [esp + 0x77c]
mov dword [esp + 0x780], 0
push eax
lea eax, [esp + 0x790]
mov dword [esp + 0x790], 0
push eax
lea eax, [esp + 0x30]
mov word [esp + 0x7a0], si
push eax
lea eax, [esp + 0x60]
mov dword [esp + 0x7a0], 0xe40000
push eax
lea eax, [esp + 0x4c]
mov dword [esp + 0x7a0], 0
push eax
push 0
push dword [esp + 0x64]
lea eax, [esp + 0x88]
push eax
lea eax, [esp + 0xc4]
push eax
call fcn.10085a60
sub esp, 8
mov dword [esp + 0x794], 0
xor eax, eax
mov dword [esp + 0x7a0], 2
mov word [esp + 0x7b2], ax
mov ecx, edi
lea eax, [esp + 0x8c]
mov dword [esp + 0x79c], 0xe40000
push eax
lea eax, [esp + 0x114]
mov dword [esp + 0x79c], 0
push eax
lea eax, [esp + 0x79c]
mov dword [esp + 0x7ac], 0
push eax
lea eax, [esp + 0x7b0]
mov word [esp + 0x7bc], si
push eax
lea eax, [esp + 0x30]
mov dword [esp + 0x7bc], 0xe40000
push eax
lea eax, [esp + 0x60]
mov dword [esp + 0x7bc], 0
push eax
lea eax, [esp + 0x4c]
push eax
push 0
push dword [esp + 0x34]
lea eax, [esp + 0x88]
push eax
lea eax, [esp + 0xc4]
push eax
call fcn.10085a60
lea eax, [esp + 0x84]
mov ecx, edi
push eax
lea eax, [esp + 0x70]
push eax
lea eax, [esp + 0xb4]
push eax
call fcn.10085950
mov esi, dword [edi + 0xa0]
mov eax, dword [esp + 0x84]
mov dword [esp + 0x7ac], eax
movzx eax, word [esp + 0x90]
mov word [esp + 0x7b8], ax
mov eax, dword [esp + 0x8c]
mov dword [esp + 0x7b4], eax
movzx eax, word [esp + 0x92]
mov word [esp + 0x7ba], ax
mov dword [esp + 0x7b0], 0x1000000
mov ecx, dword [esi + 4]
mov eax, dword [esi]
mov dword [eax + ecx*4], 2
mov eax, dword [esi + 4]
lea ecx, [eax + 1]
mov dword [esi + 4], ecx
mov dword [esi + 8], eax
mov eax, dword [esi]
mov dword [eax + ecx*4], 0x80270005
lea eax, [esp + 0x6c]
inc dword [esi + 4]
mov ecx, esi
push eax
call fcn.10077b30
lea eax, [esp + 0x7ac]
mov ecx, esi
push eax
call fcn.10077b30
mov ecx, esi
call fcn.10077c00
mov esi, dword [edi + 0xa0]
lea ecx, [esp + 0xd80]
push 3
push dword [esp + 0x14]
call fcn.100775e0
movzx eax, word [esp + 0xd80]
mov ecx, dword [esi + 4]
mov word [esp + 0x7d8], ax
mov eax, dword [esp + 0xd88]
mov dword [esp + 0x7d4], eax
xor eax, eax
mov word [esp + 0x7da], ax
mov dword [esp + 0x7bc], eax
mov dword [esp + 0x7c0], eax
mov eax, dword [esi]
mov dword [esp + 0x7cc], 0
mov dword [esp + 0x7d0], 0
mov dword [esp + 0x7c8], 5
mov dword [eax + ecx*4], 4
mov eax, dword [esi + 4]
mov dword [esp + 0x7c4], 0xe40000
lea edx, [eax + 1]
mov dword [esi + 4], edx
mov dword [esi + 8], eax
mov eax, dword [esp + 0x54]
mov ecx, eax
and ecx, 0x18
shl eax, 0x14
or ecx, eax
mov eax, dword [esi]
or ecx, 0xff802000
shl ecx, 8
or ecx, dword [esp + 0x58]
or ecx, 0x70005
mov dword [eax + edx*4], ecx
lea eax, [esp + 0x7bc]
inc dword [esi + 4]
mov ecx, esi
push eax
call fcn.10077b30
lea eax, [esp + 0x7cc]
mov ecx, esi
push eax
call fcn.10077b30
lea eax, [esp + 0x84]
jmp 0x1008900e
sub esp, 8
mov esi, dword [esp + 0x18]
xor eax, eax
mov dword [esp + 0x7e4], 0
mov word [esp + 0x802], ax
mov ecx, edi
lea eax, [esp + 0x74]
mov dword [esp + 0x7f0], 2
push eax
lea eax, [esp + 0xb8]
mov dword [esp + 0x7f0], 0xe40000
push eax
lea eax, [esp + 0x7ec]
mov dword [esp + 0x7f0], 0
push eax
lea eax, [esp + 0x800]
mov dword [esp + 0x800], 0
push eax
lea eax, [esp + 0x30]
mov word [esp + 0x810], si
push eax
lea eax, [esp + 0x60]
mov dword [esp + 0x810], 0xe40000
push eax
lea eax, [esp + 0x4c]
mov dword [esp + 0x810], 0
push eax
push 0
push dword [esp + 0x64]
lea eax, [esp + 0x88]
push eax
lea eax, [esp + 0xc4]
push eax
call fcn.10085a60
sub esp, 8
mov dword [esp + 0x804], 0
xor eax, eax
mov dword [esp + 0x810], 2
mov word [esp + 0x822], ax
mov ecx, edi
lea eax, [esp + 0x8c]
mov dword [esp + 0x80c], 0xe40000
push eax
lea eax, [esp + 0x114]
mov dword [esp + 0x80c], 0
push eax
lea eax, [esp + 0x80c]
mov dword [esp + 0x81c], 0
push eax
lea eax, [esp + 0x820]
mov word [esp + 0x82c], si
push eax
lea eax, [esp + 0x30]
mov dword [esp + 0x82c], 0xe40000
push eax
lea eax, [esp + 0x60]
mov dword [esp + 0x82c], 0
push eax
lea eax, [esp + 0x4c]
push eax
push 0
push dword [esp + 0x34]
lea eax, [esp + 0x88]
push eax
lea eax, [esp + 0xc4]
push eax
call fcn.10085a60
lea eax, [esp + 0x6c]
mov ecx, edi
push eax
lea eax, [esp + 0x88]
push eax
lea eax, [esp + 0x110]
push eax
call fcn.10085950
lea eax, [esp + 0x18]
push eax
lea eax, [esp + 0x88]
push eax
lea eax, [esp + 0x110]
push eax
mov ecx, edi
call fcn.10085950
mov esi, dword [edi + 0xa0]
mov eax, dword [esp + 0x84]
mov dword [esp + 0x81c], eax
movzx eax, word [esp + 0x90]
mov word [esp + 0x828], ax
mov eax, dword [esp + 0x8c]
mov dword [esp + 0x824], eax
movzx eax, word [esp + 0x92]
mov word [esp + 0x82a], ax
mov dword [esp + 0x820], 0x1000000
mov ecx, dword [esi + 4]
mov eax, dword [esi]
mov dword [eax + ecx*4], 2
mov eax, dword [esi + 4]
lea ecx, [eax + 1]
mov dword [esi + 4], ecx
mov dword [esi + 8], eax
mov eax, dword [esi]
mov dword [eax + ecx*4], 0x80270005
lea eax, [esp + 0x6c]
inc dword [esi + 4]
mov ecx, esi
push eax
call fcn.10077b30
lea eax, [esp + 0x81c]
mov ecx, esi
push eax
call fcn.10077b30
mov ecx, esi
call fcn.10077c00
mov esi, dword [edi + 0xa0]
mov eax, dword [esp + 0xd8]
mov dword [esp + 0x83c], eax
mov eax, dword [esp + 0x24]
mov word [esp + 0x848], ax
mov eax, dword [esp + 0x80]
mov dword [esp + 0x840], eax
mov ax, word [esp + 0x26]
mov word [esp + 0x84a], ax
mov dword [esp + 0x844], 0xff0000
mov ecx, dword [esi + 4]
mov eax, dword [esi]
mov dword [esp + 0x82c], 0
mov dword [esp + 0x838], 5
mov dword [esp + 0x834], 0xe40000
mov dword [eax + ecx*4], 4
mov eax, dword [esi + 4]
mov dword [esp + 0x830], 0
lea edx, [eax + 1]
mov dword [esi + 4], edx
mov dword [esi + 8], eax
mov eax, dword [esp + 0x54]
mov ecx, eax
and ecx, 0x18
shl eax, 0x14
or ecx, eax
mov eax, dword [esi]
or ecx, 0xff802000
shl ecx, 8
or ecx, dword [esp + 0x58]
or ecx, 0x70005
mov dword [eax + edx*4], ecx
lea eax, [esp + 0x82c]
inc dword [esi + 4]
mov ecx, esi
push eax
call fcn.10077b30
lea eax, [esp + 0x83c]
mov ecx, esi
push eax
call fcn.10077b30
lea eax, [esp + 0x84]
jmp 0x1008900e
sub esp, 8
mov esi, dword [esp + 0x18]
xor eax, eax
mov dword [esp + 0x854], 0
mov word [esp + 0x872], ax
mov ecx, edi
lea eax, [esp + 0x74]
mov dword [esp + 0x860], 2
push eax
lea eax, [esp + 0xb8]
mov dword [esp + 0x860], 0xe40000
push eax
lea eax, [esp + 0x85c]
mov dword [esp + 0x860], 0
push eax
lea eax, [esp + 0x870]
mov dword [esp + 0x870], 0
push eax
lea eax, [esp + 0x30]
mov word [esp + 0x880], si
push eax
lea eax, [esp + 0x60]
mov dword [esp + 0x880], 0xe40000
push eax
lea eax, [esp + 0x4c]
mov dword [esp + 0x880], 0
push eax
push 0
push dword [esp + 0x64]
lea eax, [esp + 0x88]
push eax
lea eax, [esp + 0xc4]
push eax
call fcn.10085a60
sub esp, 8
mov dword [esp + 0x874], 0
xor eax, eax
mov dword [esp + 0x880], 2
mov word [esp + 0x892], ax
mov ecx, edi
lea eax, [esp + 0x8c]
mov dword [esp + 0x87c], 0xe40000
push eax
lea eax, [esp + 0x114]
mov dword [esp + 0x87c], 0
push eax
lea eax, [esp + 0x87c]
mov dword [esp + 0x88c], 0
push eax
lea eax, [esp + 0x890]
mov word [esp + 0x89c], si
push eax
lea eax, [esp + 0x30]
mov dword [esp + 0x89c], 0xe40000
push eax
lea eax, [esp + 0x60]
mov dword [esp + 0x89c], 0
push eax
lea eax, [esp + 0x4c]
push eax
push 0
push dword [esp + 0x34]
lea eax, [esp + 0x88]
push eax
lea eax, [esp + 0xc4]
push eax
call fcn.10085a60
lea eax, [esp + 0x6c]
mov ecx, edi
push eax
lea eax, [esp + 0x88]
push eax
lea eax, [esp + 0x110]
push eax
call fcn.10085950
lea eax, [esp + 0x5c]
push eax
lea eax, [esp + 0x88]
push eax
lea eax, [esp + 0x110]
push eax
mov ecx, edi
call fcn.10085950
mov esi, dword [edi + 0xa0]
mov eax, dword [esp + 0x84]
mov dword [esp + 0x88c], eax
movzx eax, word [esp + 0x90]
mov word [esp + 0x898], ax
mov eax, dword [esp + 0x8c]
mov dword [esp + 0x894], eax
movzx eax, word [esp + 0x92]
mov word [esp + 0x89a], ax
mov dword [esp + 0x890], 0x1000000
mov ecx, dword [esi + 4]
mov eax, dword [esi]
mov dword [eax + ecx*4], 2
mov eax, dword [esi + 4]
lea ecx, [eax + 1]
mov dword [esi + 4], ecx
mov dword [esi + 8], eax
mov eax, dword [esi]
mov dword [eax + ecx*4], 0x80270005
lea eax, [esp + 0x6c]
inc dword [esi + 4]
mov ecx, esi
push eax
call fcn.10077b30
lea eax, [esp + 0x88c]
mov ecx, esi
push eax
call fcn.10077b30
mov ecx, esi
call fcn.10077c00
mov esi, dword [edi + 0xa0]
mov eax, dword [esp + 0x5c]
mov dword [esp + 0x8ac], eax
movzx eax, word [esp + 0x68]
mov word [esp + 0x8b8], ax
mov eax, dword [esp + 0x60]
mov dword [esp + 0x8b0], eax
movzx eax, word [esp + 0x6a]
mov word [esp + 0x8ba], ax
mov dword [esp + 0x8b4], 0xff0000
mov ecx, dword [esi + 4]
mov eax, dword [esi]
mov dword [esp + 0x89c], 0
mov dword [esp + 0x8a8], 5
mov dword [esp + 0x8a4], 0xe40000
mov dword [eax + ecx*4], 4
mov eax, dword [esi + 4]
mov dword [esp + 0x8a0], 0
lea edx, [eax + 1]
mov dword [esi + 4], edx
mov dword [esi + 8], eax
mov eax, dword [esp + 0x54]
mov ecx, eax
and ecx, 0x18
shl eax, 0x14
or ecx, eax
mov eax, dword [esi]
or ecx, 0xff802000
shl ecx, 8
or ecx, dword [esp + 0x58]
or ecx, 0x70005
mov dword [eax + edx*4], ecx
lea eax, [esp + 0x89c]
inc dword [esi + 4]
mov ecx, esi
push eax
call fcn.10077b30
lea eax, [esp + 0x8ac]
mov ecx, esi
push eax
call fcn.10077b30
lea eax, [esp + 0x84]
jmp 0x1008900e
sub esp, 8
mov esi, dword [esp + 0x18]
xor eax, eax
mov dword [esp + 0x8c4], 0
mov word [esp + 0x8e2], ax
mov ecx, edi
lea eax, [esp + 0x74]
mov dword [esp + 0x8d0], 2
push eax
lea eax, [esp + 0xb8]
mov dword [esp + 0x8d0], 0xe40000
push eax
lea eax, [esp + 0x8cc]
mov dword [esp + 0x8d0], 0
push eax
lea eax, [esp + 0x8e0]
mov dword [esp + 0x8e0], 0
push eax
lea eax, [esp + 0x30]
mov word [esp + 0x8f0], si
push eax
lea eax, [esp + 0x60]
mov dword [esp + 0x8f0], 0xe40000
push eax
lea eax, [esp + 0x4c]
mov dword [esp + 0x8f0], 0
push eax
push 0
push dword [esp + 0x64]
lea eax, [esp + 0x88]
push eax
lea eax, [esp + 0xc4]
push eax
call fcn.10085a60
sub esp, 8
mov dword [esp + 0x8e4], 0
xor eax, eax
mov dword [esp + 0x8f0], 2
mov word [esp + 0x902], ax
mov ecx, edi
lea eax, [esp + 0x8c]
mov dword [esp + 0x8ec], 0xe40000
push eax
lea eax, [esp + 0x114]
mov dword [esp + 0x8ec], 0
push eax
lea eax, [esp + 0x8ec]
mov dword [esp + 0x8fc], 0
push eax
lea eax, [esp + 0x900]
mov word [esp + 0x90c], si
push eax
lea eax, [esp + 0x30]
mov dword [esp + 0x90c], 0xe40000
push eax
lea eax, [esp + 0x60]
mov dword [esp + 0x90c], 0
push eax
lea eax, [esp + 0x4c]
push eax
push 0
push dword [esp + 0x34]
lea eax, [esp + 0x88]
push eax
lea eax, [esp + 0xc4]
push eax
call fcn.10085a60
lea eax, [esp + 0x84]
mov ecx, edi
push eax
lea eax, [esp + 0x70]
push eax
lea eax, [esp + 0xb4]
push eax
call fcn.10085950
mov edi, dword [edi + 0xa0]
lea ecx, [esp + 0xd8c]
push 3
push esi
call fcn.100775e0
mov dword [esp + 0x8fc], 0
movzx eax, word [esp + 0xd8c]
mov ecx, dword [esp + 0x7c]
mov word [esp + 0x908], ax
mov eax, dword [esp + 0xd94]
mov dword [esp + 0x904], eax
xor eax, eax
mov word [esp + 0x90a], ax
mov dword [esp + 0x900], 0x1000000
mov ecx, dword [ecx + 0xa4]
push 4
lea eax, [ecx + 0x1c]
push eax
lea eax, [esp + 0xebc]
push eax
call fcn.10078870
push 3
push 5
lea ecx, [esp + 0xda0]
call fcn.100775e0
mov ecx, dword [edi + 4]
mov eax, dword [edi]
mov esi, dword [esp + 0xd98]
mov edx, dword [esp + 0xd9c]
or esi, edx
or esi, 0x80200000
mov dword [eax + ecx*4], 2
mov eax, dword [edi + 4]
lea ecx, [eax + 1]
mov dword [edi + 4], ecx
mov dword [edi + 8], eax
mov eax, dword [edi]
mov dword [eax + ecx*4], esi
lea eax, [esp + 0xeb4]
inc dword [edi + 4]
mov ecx, edi
push eax
call fcn.10077b30
lea eax, [esp + 0x8fc]
mov ecx, edi
push eax
call fcn.10077b30
mov ecx, edi
call fcn.10077c00
mov edi, dword [esp + 0x7c]
lea ecx, [esp + 0xda4]
push 3
push 5
mov esi, dword [edi + 0xa0]
call fcn.100775e0
movzx eax, word [esp + 0xda4]
mov ecx, dword [esi + 4]
mov word [esp + 0x918], ax
mov eax, dword [esp + 0xdac]
mov dword [esp + 0x914], eax
xor eax, eax
mov word [esp + 0x91a], ax
mov eax, dword [esi]
mov dword [esp + 0x90c], 0
mov dword [esp + 0x910], 0
mov dword [eax + ecx*4], 4
mov eax, dword [esi + 4]
lea edx, [eax + 1]
mov dword [esi + 4], edx
mov dword [esi + 8], eax
mov eax, dword [esp + 0x54]
mov ecx, eax
and ecx, 0x18
shl eax, 0x14
or ecx, eax
mov eax, dword [esi]
or ecx, 0xff802000
shl ecx, 8
or ecx, dword [esp + 0x58]
or ecx, 0x70005
mov dword [eax + edx*4], ecx
lea eax, [esp + 0x90c]
jmp 0x100894f1
mov eax, dword [esp + 0x10]
sub esp, 8
mov word [esp + 0x940], ax
mov ecx, edi
xor eax, eax
mov dword [esp + 0x924], 0
mov word [esp + 0x942], ax
lea eax, [esp + 0x74]
push eax
lea eax, [esp + 0xb8]
mov dword [esp + 0x934], 2
push eax
lea eax, [esp + 0x92c]
mov dword [esp + 0x934], 0xe40000
push eax
lea eax, [esp + 0x940]
mov dword [esp + 0x934], 0
push eax
lea eax, [esp + 0x30]
mov dword [esp + 0x944], 0
push eax
lea eax, [esp + 0x60]
mov dword [esp + 0x950], 0xe40000
push eax
lea eax, [esp + 0x4c]
mov dword [esp + 0x950], 0
push eax
push 0
push esi
lea eax, [esp + 0x88]
push eax
lea eax, [esp + 0xc4]
push eax
call fcn.10085a60
mov edi, dword [edi + 0xa0]
mov ecx, dword [edi + 4]
mov eax, dword [edi]
mov dword [eax + ecx*4], 1
mov ecx, edi
mov eax, dword [edi + 4]
lea esi, [eax + 1]
mov dword [edi + 4], esi
mov dword [edi + 8], eax
mov eax, dword [esp + 0x54]
mov edx, eax
and edx, 0x18
shl eax, 0x14
or edx, eax
mov eax, dword [edi]
or edx, 0xff802000
shl edx, 8
or edx, dword [esp + 0x58]
or edx, 0x70005
mov dword [eax + esi*4], edx
lea eax, [esp + 0x6c]
inc dword [edi + 4]
push eax
call fcn.10077b30
mov ecx, edi
call fcn.10077c00
mov edi, dword [esp + 0x7c]
jmp case.0x1008857a.22
sub esp, 8
mov esi, dword [esp + 0x18]
xor eax, eax
mov dword [esp + 0x944], 0
mov word [esp + 0x962], ax
mov ecx, edi
lea eax, [esp + 0x74]
mov dword [esp + 0x950], 2
push eax
lea eax, [esp + 0xb8]
mov dword [esp + 0x950], 0xe40000
push eax
lea eax, [esp + 0x94c]
mov dword [esp + 0x950], 0
push eax
lea eax, [esp + 0x960]
mov dword [esp + 0x960], 0
push eax
lea eax, [esp + 0x30]
mov word [esp + 0x970], si
push eax
lea eax, [esp + 0x60]
mov dword [esp + 0x970], 0xe40000
push eax
lea eax, [esp + 0x4c]
mov dword [esp + 0x970], 0
push eax
push 0
push dword [esp + 0x64]
lea eax, [esp + 0x88]
push eax
lea eax, [esp + 0xc4]
push eax
call fcn.10085a60
sub esp, 8
mov dword [esp + 0x964], 0
xor eax, eax
mov dword [esp + 0x970], 2
mov word [esp + 0x982], ax
mov ecx, edi
lea eax, [esp + 0x8c]
mov dword [esp + 0x96c], 0xe40000
push eax
lea eax, [esp + 0x114]
mov dword [esp + 0x96c], 0
push eax
lea eax, [esp + 0x96c]
mov dword [esp + 0x97c], 0
push eax
lea eax, [esp + 0x980]
mov word [esp + 0x98c], si
push eax
lea eax, [esp + 0x30]
mov dword [esp + 0x98c], 0xe40000
push eax
lea eax, [esp + 0x60]
mov dword [esp + 0x98c], 0
push eax
lea eax, [esp + 0x4c]
push eax
push 0
push dword [esp + 0x34]
lea eax, [esp + 0x88]
push eax
lea eax, [esp + 0xc4]
push eax
call fcn.10085a60
lea eax, [esp + 0x84]
mov ecx, edi
push eax
lea eax, [esp + 0x70]
push eax
lea eax, [esp + 0xb4]
push eax
call fcn.10085950
mov esi, dword [edi + 0xa0]
mov eax, dword [esp + 0x6c]
mov dword [esp + 0x97c], eax
movzx eax, word [esp + 0x78]
mov word [esp + 0x988], ax
mov dword [esp + 0x984], 0xff0000
mov eax, dword [esp + 0x70]
mov dword [esp + 0x980], eax
movzx eax, word [esp + 0x7a]
mov word [esp + 0x98a], ax
mov ecx, dword [esi + 4]
mov eax, dword [esi]
mov dword [eax + ecx*4], 4
mov eax, dword [esi + 4]
lea edx, [eax + 1]
mov dword [esi + 4], edx
mov dword [esi + 8], eax
mov eax, dword [esp + 0x54]
mov ecx, eax
and ecx, 0x18
shl eax, 0x14
or ecx, eax
mov eax, dword [esi]
or ecx, 0xff802000
shl ecx, 8
or ecx, dword [esp + 0x58]
or ecx, 0x70005
mov dword [eax + edx*4], ecx
lea eax, [esp + 0x97c]
jmp 0x100894f1
sub esp, 8
mov esi, dword [esp + 0x18]
xor eax, eax
mov dword [esp + 0x994], 0
mov word [esp + 0x9b2], ax
mov ecx, edi
lea eax, [esp + 0x74]
mov dword [esp + 0x9a0], 2
push eax
lea eax, [esp + 0xb8]
mov dword [esp + 0x9a0], 0xe40000
push eax
lea eax, [esp + 0x99c]
mov dword [esp + 0x9a0], 0
push eax
lea eax, [esp + 0x9b0]
mov dword [esp + 0x9b0], 0
push eax
lea eax, [esp + 0x30]
mov word [esp + 0x9c0], si
push eax
lea eax, [esp + 0x60]
mov dword [esp + 0x9c0], 0xe40000
push eax
lea eax, [esp + 0x4c]
mov dword [esp + 0x9c0], 0
push eax
push 0
push dword [esp + 0x64]
lea eax, [esp + 0x88]
push eax
lea eax, [esp + 0xc4]
push eax
call fcn.10085a60
sub esp, 8
mov dword [esp + 0x9b4], 0
xor eax, eax
mov dword [esp + 0x9c0], 2
mov word [esp + 0x9d2], ax
mov ecx, edi
lea eax, [esp + 0x8c]
mov dword [esp + 0x9bc], 0xe40000
push eax
lea eax, [esp + 0x114]
mov dword [esp + 0x9bc], 0
push eax
lea eax, [esp + 0x9bc]
mov dword [esp + 0x9cc], 0
push eax
lea eax, [esp + 0x9d0]
mov word [esp + 0x9dc], si
push eax
lea eax, [esp + 0x30]
mov dword [esp + 0x9dc], 0xe40000
push eax
lea eax, [esp + 0x60]
mov dword [esp + 0x9dc], 0
push eax
lea eax, [esp + 0x4c]
push eax
push 0
push dword [esp + 0x34]
lea eax, [esp + 0x88]
push eax
lea eax, [esp + 0xc4]
push eax
call fcn.10085a60
lea eax, [esp + 0x84]
mov ecx, edi
push eax
lea eax, [esp + 0x70]
push eax
lea eax, [esp + 0xb4]
push eax
call fcn.10085950
mov esi, dword [edi + 0xa0]
mov eax, dword [esp + 0x6c]
mov dword [esp + 0x9cc], eax
movzx eax, word [esp + 0x78]
mov word [esp + 0x9d8], ax
mov dword [esp + 0x9d4], 0xff0000
mov eax, dword [esp + 0x70]
mov dword [esp + 0x9d0], eax
movzx eax, word [esp + 0x7a]
mov word [esp + 0x9da], ax
mov ecx, dword [esi + 4]
mov eax, dword [esi]
mov dword [eax + ecx*4], 4
mov eax, dword [esi + 4]
lea edx, [eax + 1]
mov dword [esi + 4], edx
mov dword [esi + 8], eax
mov eax, dword [esp + 0x54]
mov ecx, eax
and ecx, 0x18
shl eax, 0x14
or ecx, eax
mov eax, dword [esi]
or ecx, 0xff802000
shl ecx, 8
or ecx, dword [esp + 0x58]
or ecx, 0x70005
mov dword [eax + edx*4], ecx
lea eax, [esp + 0x84]
inc dword [esi + 4]
mov ecx, esi
push eax
call fcn.10077b30
lea eax, [esp + 0x6c]
mov ecx, esi
push eax
call fcn.10077b30
lea eax, [esp + 0x9cc]
jmp 0x1008900e
sub esp, 8
mov esi, dword [esp + 0x18]
xor eax, eax
mov dword [esp + 0x9e4], 0
mov word [esp + 0xa02], ax
mov ecx, edi
lea eax, [esp + 0x74]
mov dword [esp + 0x9f0], 2
push eax
lea eax, [esp + 0xb8]
mov dword [esp + 0x9f0], 0xe40000
push eax
lea eax, [esp + 0x9ec]
mov dword [esp + 0x9f0], 0
push eax
lea eax, [esp + 0xa00]
mov dword [esp + 0xa00], 0
push eax
lea eax, [esp + 0x30]
mov word [esp + 0xa10], si
push eax
lea eax, [esp + 0x60]
mov dword [esp + 0xa10], 0xe40000
push eax
lea eax, [esp + 0x4c]
mov dword [esp + 0xa10], 0
push eax
push 0
push dword [esp + 0x64]
lea eax, [esp + 0x88]
push eax
lea eax, [esp + 0xc4]
push eax
call fcn.10085a60
sub esp, 8
mov dword [esp + 0xa04], 0
xor eax, eax
mov dword [esp + 0xa10], 2
mov word [esp + 0xa22], ax
mov ecx, edi
lea eax, [esp + 0x8c]
mov dword [esp + 0xa0c], 0xe40000
push eax
lea eax, [esp + 0x114]
mov dword [esp + 0xa0c], 0
push eax
lea eax, [esp + 0xa0c]
mov dword [esp + 0xa1c], 0
push eax
lea eax, [esp + 0xa20]
mov word [esp + 0xa2c], si
push eax
lea eax, [esp + 0x30]
mov dword [esp + 0xa2c], 0xe40000
push eax
lea eax, [esp + 0x60]
mov dword [esp + 0xa2c], 0
push eax
lea eax, [esp + 0x4c]
push eax
push 0
push dword [esp + 0x34]
lea eax, [esp + 0x88]
push eax
lea eax, [esp + 0xc4]
push eax
call fcn.10085a60
mov ecx, dword [edi + 0xa4]
push 4
lea eax, [ecx + 0x1c]
push eax
lea eax, [esp + 0xecc]
push eax
call fcn.10078870
lea eax, [esp + 0xec4]
mov ecx, edi
push eax
lea eax, [esp + 0x70]
push eax
lea eax, [esp + 0xb4]
push eax
call fcn.10085950
lea eax, [esp + 0x84]
mov ecx, edi
push eax
lea eax, [esp + 0x70]
push eax
lea eax, [esp + 0xb4]
push eax
call fcn.10085950
mov edi, dword [edi + 0xa0]
mov eax, dword [esp + 0x6c]
mov ecx, dword [esp + 0x7c]
mov dword [esp + 0xa1c], eax
movzx eax, word [esp + 0x78]
mov word [esp + 0xa28], ax
movzx eax, word [esp + 0x7a]
mov word [esp + 0xa2a], ax
mov dword [esp + 0xa24], 0xff0000
mov dword [esp + 0xa20], 0x1000000
mov ecx, dword [ecx + 0xa4]
push 4
lea eax, [ecx + 0x1c]
push eax
lea eax, [esp + 0xedc]
push eax
call fcn.10078870
push 3
push 5
lea ecx, [esp + 0xdc4]
call fcn.100775e0
mov ecx, dword [edi + 4]
mov eax, dword [edi]
mov esi, dword [esp + 0xdbc]
mov edx, dword [esp + 0xdc0]
or esi, edx
or esi, 0x80200000
mov dword [eax + ecx*4], 2
mov eax, dword [edi + 4]
lea ecx, [eax + 1]
mov dword [edi + 4], ecx
mov dword [edi + 8], eax
mov eax, dword [edi]
mov dword [eax + ecx*4], esi
lea eax, [esp + 0xed4]
inc dword [edi + 4]
mov ecx, edi
push eax
call fcn.10077b30
lea eax, [esp + 0xa1c]
mov ecx, edi
push eax
call fcn.10077b30
mov ecx, edi
call fcn.10077c00
mov edi, dword [esp + 0x7c]
lea ecx, [esp + 0xdb0]
push 3
push 5
mov esi, dword [edi + 0xa0]
call fcn.100775e0
movzx eax, word [esp + 0xdb0]
mov ecx, dword [esi + 4]
mov word [esp + 0xa38], ax
mov eax, dword [esp + 0xdb8]
mov dword [esp + 0xa34], eax
xor eax, eax
mov word [esp + 0xa3a], ax
mov eax, dword [esi]
mov dword [esp + 0xa2c], 0
mov dword [esp + 0xa30], 0
mov dword [eax + ecx*4], 4
mov eax, dword [esi + 4]
lea edx, [eax + 1]
mov dword [esi + 4], edx
mov dword [esi + 8], eax
mov eax, dword [esp + 0x54]
mov ecx, eax
and ecx, 0x18
shl eax, 0x14
or ecx, eax
or ecx, 0xff802000
mov eax, dword [esi]
shl ecx, 8
or ecx, dword [esp + 0x58]
or ecx, 0x70005
mov dword [eax + edx*4], ecx
lea eax, [esp + 0xa2c]
jmp 0x100894f1
sub esp, 8
mov esi, dword [esp + 0x18]
xor eax, eax
mov dword [esp + 0xa44], 0
mov word [esp + 0xa62], ax
mov ecx, edi
lea eax, [esp + 0x74]
mov dword [esp + 0xa50], 2
push eax
lea eax, [esp + 0xb8]
mov dword [esp + 0xa50], 0xe40000
push eax
lea eax, [esp + 0xa4c]
mov dword [esp + 0xa50], 0
push eax
lea eax, [esp + 0xa60]
mov dword [esp + 0xa60], 0
push eax
lea eax, [esp + 0x30]
mov word [esp + 0xa70], si
push eax
lea eax, [esp + 0x60]
mov dword [esp + 0xa70], 0xe40000
push eax
lea eax, [esp + 0x4c]
mov dword [esp + 0xa70], 0
push eax
push 0
push dword [esp + 0x64]
lea eax, [esp + 0x88]
push eax
lea eax, [esp + 0xc4]
push eax
call fcn.10085a60
sub esp, 8
mov dword [esp + 0xa64], 0
xor eax, eax
mov dword [esp + 0xa70], 2
mov word [esp + 0xa82], ax
mov ecx, edi
lea eax, [esp + 0x8c]
mov dword [esp + 0xa6c], 0xe40000
push eax
lea eax, [esp + 0x114]
mov dword [esp + 0xa6c], 0
push eax
lea eax, [esp + 0xa6c]
mov dword [esp + 0xa7c], 0
push eax
lea eax, [esp + 0xa80]
mov word [esp + 0xa8c], si
push eax
lea eax, [esp + 0x30]
mov dword [esp + 0xa8c], 0xe40000
push eax
lea eax, [esp + 0x60]
mov dword [esp + 0xa8c], 0
push eax
lea eax, [esp + 0x4c]
push eax
push 0
push dword [esp + 0x34]
lea eax, [esp + 0x88]
push eax
lea eax, [esp + 0xc4]
push eax
call fcn.10085a60
mov ecx, dword [edi + 0xa4]
push 4
lea eax, [ecx + 0x1c]
push eax
lea eax, [esp + 0xeec]
push eax
call fcn.10078870
lea eax, [esp + 0xee4]
mov ecx, edi
push eax
lea eax, [esp + 0x70]
push eax
lea eax, [esp + 0xb4]
push eax
call fcn.10085950
lea eax, [esp + 0x84]
mov ecx, edi
push eax
lea eax, [esp + 0x70]
push eax
lea eax, [esp + 0xb4]
push eax
call fcn.10085950
mov esi, dword [edi + 0xa0]
mov eax, dword [esp + 0x6c]
mov ecx, dword [esp + 0x7c]
mov di, word [esp + 0x7a]
mov dword [esp + 0xa7c], eax
mov ax, word [esp + 0x78]
mov word [esp + 0xa88], ax
mov eax, dword [esp + 0x74]
mov dword [esp + 0xa84], eax
mov dword [esp + 0xa80], 0x1000000
mov word [esp + 0xa8a], di
mov ecx, dword [ecx + 0xa4]
push 4
lea eax, [ecx + 0x1c]
push eax
lea eax, [esp + 0xefc]
push eax
call fcn.10078870
mov ecx, dword [esi + 4]
mov eax, dword [esi]
mov dword [eax + ecx*4], 2
mov eax, dword [esi + 4]
lea ecx, [eax + 1]
mov dword [esi + 4], ecx
mov dword [esi + 8], eax
mov eax, dword [esi]
mov dword [eax + ecx*4], 0x80270005
lea eax, [esp + 0xef4]
inc dword [esi + 4]
mov ecx, esi
push eax
call fcn.10077b30
lea eax, [esp + 0xa7c]
mov ecx, esi
push eax
call fcn.10077b30
mov ecx, esi
call fcn.10077c00
mov eax, dword [esp + 0x7c]
mov dword [esp + 0xa8c], 0
mov dword [esp + 0xa98], 5
mov dword [esp + 0xa94], 0xe40000
mov esi, dword [eax + 0xa0]
mov eax, dword [esp + 0x6c]
mov dword [esp + 0xa9c], eax
mov ax, word [esp + 0x78]
mov word [esp + 0xaa8], ax
mov eax, dword [esp + 0x70]
mov dword [esp + 0xaa0], eax
mov dword [esp + 0xaa4], 0xff0000
mov word [esp + 0xaaa], di
mov ecx, dword [esi + 4]
mov eax, dword [esi]
mov dword [esp + 0xa90], 0
mov dword [eax + ecx*4], 4
mov eax, dword [esi + 4]
lea edx, [eax + 1]
mov dword [esi + 4], edx
mov dword [esi + 8], eax
mov eax, dword [esp + 0x54]
mov ecx, eax
and ecx, 0x18
shl eax, 0x14
or ecx, eax
mov eax, dword [esi]
or ecx, 0xff802000
shl ecx, 8
or ecx, dword [esp + 0x58]
or ecx, 0x70005
mov dword [eax + edx*4], ecx
lea eax, [esp + 0xa8c]
inc dword [esi + 4]
push eax
mov ecx, esi
call fcn.10077b30
lea eax, [esp + 0x84]
mov ecx, esi
push eax
call fcn.10077b30
lea eax, [esp + 0xa9c]
mov ecx, esi
push eax
call fcn.10077b30
mov ecx, esi
call fcn.10077c00
mov edi, dword [esp + 0x7c]
jmp case.0x1008857a.22
sub esp, 8
mov esi, dword [esp + 0x18]
xor eax, eax
mov dword [esp + 0xab4], 0
mov word [esp + 0xad2], ax
mov ecx, edi
lea eax, [esp + 0x74]
mov dword [esp + 0xac0], 2
push eax
lea eax, [esp + 0xb8]
mov dword [esp + 0xac0], 0xe40000
push eax
lea eax, [esp + 0xabc]
mov dword [esp + 0xac0], 0
push eax
lea eax, [esp + 0xad0]
mov dword [esp + 0xad0], 0
push eax
lea eax, [esp + 0x30]
mov word [esp + 0xae0], si
push eax
lea eax, [esp + 0x60]
mov dword [esp + 0xae0], 0xe40000
push eax
lea eax, [esp + 0x4c]
mov dword [esp + 0xae0], 0
push eax
push 0
push dword [esp + 0x64]
lea eax, [esp + 0x88]
push eax
lea eax, [esp + 0xc4]
push eax
call fcn.10085a60
sub esp, 8
mov dword [esp + 0xad4], 0
xor eax, eax
mov dword [esp + 0xae0], 2
mov word [esp + 0xaf2], ax
mov ecx, edi
lea eax, [esp + 0x8c]
mov dword [esp + 0xadc], 0xe40000
push eax
lea eax, [esp + 0x114]
mov dword [esp + 0xadc], 0
push eax
lea eax, [esp + 0xadc]
mov dword [esp + 0xaec], 0
push eax
lea eax, [esp + 0xaf0]
mov word [esp + 0xafc], si
push eax
lea eax, [esp + 0x30]
mov dword [esp + 0xafc], 0xe40000
push eax
lea eax, [esp + 0x60]
mov dword [esp + 0xafc], 0
push eax
lea eax, [esp + 0x4c]
push eax
push 0
push dword [esp + 0x34]
lea eax, [esp + 0x88]
push eax
lea eax, [esp + 0xc4]
push eax
call fcn.10085a60
mov ecx, dword [edi + 0xa4]
lea eax, [esp + 0xf04]
push 4
push ecx
push eax
call fcn.10078870
lea eax, [esp + 0xf04]
mov ecx, edi
push eax
lea eax, [esp + 0x70]
push eax
lea eax, [esp + 0xb4]
push eax
call fcn.10085950
mov ecx, dword [edi + 0xa4]
lea eax, [esp + 0xe44]
push 4
push ecx
push eax
call fcn.10078870
lea eax, [esp + 0xe44]
mov ecx, edi
push eax
lea eax, [esp + 0x88]
push eax
lea eax, [esp + 0x110]
push eax
call fcn.10085950
mov ecx, dword [edi + 0xa4]
lea eax, [esp + 0xd0c]
mov esi, dword [edi + 0xa0]
push 4
push ecx
push eax
call fcn.10078870
mov eax, dword [esp + 0xd0c]
mov dword [esp + 0xaec], eax
movzx eax, word [esp + 0xd18]
mov word [esp + 0xaf8], ax
mov eax, dword [esp + 0xd14]
mov dword [esp + 0xaf4], eax
movzx eax, word [esp + 0xd1a]
mov word [esp + 0xafa], ax
mov dword [esp + 0xaf0], 0x1000000
mov ecx, dword [esi + 4]
mov eax, dword [esi]
mov dword [eax + ecx*4], 2
mov eax, dword [esi + 4]
lea ecx, [eax + 1]
mov dword [esi + 4], ecx
mov dword [esi + 8], eax
mov eax, dword [esi]
mov dword [eax + ecx*4], 0x80270007
lea eax, [esp + 0x6c]
inc dword [esi + 4]
mov ecx, esi
push eax
call fcn.10077b30
lea eax, [esp + 0xaec]
mov ecx, esi
push eax
call fcn.10077b30
mov ecx, esi
call fcn.10077c00
mov ecx, dword [edi + 0xa4]
mov esi, dword [edi + 0xa0]
push 4
lea eax, [ecx + 8]
push eax
lea eax, [esp + 0xf1c]
push eax
call fcn.10078870
mov ecx, dword [esi + 4]
mov eax, dword [esi]
mov dword [esp + 0xafc], 0
mov dword [esp + 0xb08], 7
mov dword [esp + 0xb04], 0xe40000
mov dword [eax + ecx*4], 5
mov eax, dword [esi + 4]
mov dword [esp + 0xb00], 0
lea ecx, [eax + 1]
mov dword [esi + 4], ecx
mov dword [esi + 8], eax
mov eax, dword [esi]
mov dword [eax + ecx*4], 0x80270007
lea eax, [esp + 0xafc]
inc dword [esi + 4]
mov ecx, esi
push eax
call fcn.10077b30
lea eax, [esp + 0xf14]
mov ecx, esi
push eax
call fcn.10077b30
mov ecx, esi
call fcn.10077c00
mov ecx, dword [edi + 0xa4]
lea eax, [esp + 0xd1c]
mov esi, dword [edi + 0xa0]
push 4
push ecx
push eax
call fcn.10078870
mov eax, dword [esp + 0xd1c]
mov dword [esp + 0xb0c], eax
movzx eax, word [esp + 0xd28]
mov word [esp + 0xb18], ax
mov eax, dword [esp + 0xd24]
mov dword [esp + 0xb14], eax
movzx eax, word [esp + 0xd2a]
mov word [esp + 0xb1a], ax
mov dword [esp + 0xb10], 0x1000000
mov ecx, dword [esi + 4]
mov eax, dword [esi]
mov dword [eax + ecx*4], 2
mov eax, dword [esi + 4]
lea ecx, [eax + 1]
mov dword [esi + 4], ecx
mov dword [esi + 8], eax
mov eax, dword [esi]
mov dword [eax + ecx*4], 0x80270008
lea eax, [esp + 0x84]
inc dword [esi + 4]
mov ecx, esi
push eax
call fcn.10077b30
lea eax, [esp + 0xb0c]
mov ecx, esi
push eax
call fcn.10077b30
mov ecx, esi
call fcn.10077c00
mov esi, dword [edi + 0xa0]
mov dword [esp + 0xb2c], 0
mov dword [esp + 0xb38], 8
mov dword [esp + 0xb34], 0xe40000
mov ecx, dword [esi + 4]
mov eax, dword [esi]
mov dword [esp + 0xb30], 0
mov dword [esp + 0xb1c], 0
mov dword [esp + 0xb28], 7
mov dword [eax + ecx*4], 8
mov eax, dword [esi + 4]
mov dword [esp + 0xb24], 0xe40000
mov dword [esp + 0xb20], 0
lea ecx, [eax + 1]
mov dword [esi + 4], ecx
mov dword [esi + 8], eax
mov eax, dword [esi]
mov dword [eax + ecx*4], 0x803f0005
lea eax, [esp + 0xb1c]
inc dword [esi + 4]
mov ecx, esi
push eax
call fcn.10077b30
lea eax, [esp + 0xb2c]
jmp 0x1008df7b
sub esp, 8
mov esi, dword [esp + 0x18]
xor eax, eax
mov dword [esp + 0xb44], 0
mov word [esp + 0xb62], ax
mov ecx, edi
lea eax, [esp + 0x250]
mov dword [esp + 0xb50], 2
push eax
lea eax, [esp + 0x1d4]
mov dword [esp + 0xb50], 0xe40000
push eax
lea eax, [esp + 0xb4c]
mov dword [esp + 0xb50], 0
push eax
lea eax, [esp + 0xb60]
mov dword [esp + 0xb60], 0
push eax
lea eax, [esp + 0x30]
mov word [esp + 0xb70], si
push eax
lea eax, [esp + 0x60]
mov dword [esp + 0xb70], 0xe40000
push eax
lea eax, [esp + 0x4c]
mov dword [esp + 0xb70], 0
push eax
push 0
push dword [esp + 0x1ec]
lea eax, [esp + 0x88]
push eax
lea eax, [esp + 0xc4]
push eax
call fcn.10085a60
sub esp, 8
mov dword [esp + 0xb64], 0
xor eax, eax
mov dword [esp + 0xb70], 2
mov word [esp + 0xb82], ax
mov ecx, edi
lea eax, [esp + 0x74]
mov dword [esp + 0xb6c], 0xe40000
push eax
lea eax, [esp + 0xb8]
mov dword [esp + 0xb6c], 0
push eax
lea eax, [esp + 0xb6c]
mov dword [esp + 0xb7c], 0
push eax
lea eax, [esp + 0xb80]
mov word [esp + 0xb8c], si
push eax
lea eax, [esp + 0x30]
mov dword [esp + 0xb8c], 0xe40000
push eax
lea eax, [esp + 0x60]
mov dword [esp + 0xb8c], 0
push eax
lea eax, [esp + 0x4c]
push eax
push 0
push dword [esp + 0x64]
lea eax, [esp + 0x88]
push eax
lea eax, [esp + 0xc4]
push eax
call fcn.10085a60
xor eax, eax
mov dword [esp + 0xb7c], 0
sub esp, 8
mov word [esp + 0xba2], ax
lea eax, [esp + 0x8c]
mov dword [esp + 0xb90], 2
mov dword [esp + 0xb8c], 0xe40000
mov dword [esp + 0xb88], 0
push eax
mov dword [esp + 0xb98], 0
lea eax, [esp + 0x114]
mov word [esp + 0xba4], si
mov dword [esp + 0xba0], 0xe40000
mov dword [esp + 0xb9c], 0
push eax
lea eax, [esp + 0xb8c]
mov ecx, edi
push eax
lea eax, [esp + 0xba0]
push eax
lea eax, [esp + 0x30]
push eax
lea eax, [esp + 0x60]
push eax
lea eax, [esp + 0x4c]
push eax
push 0
push dword [esp + 0x34]
lea eax, [esp + 0x88]
push eax
lea eax, [esp + 0xc4]
push eax
call fcn.10085a60
lea eax, [esp + 0x6c]
mov ecx, edi
push eax
lea eax, [esp + 0x24c]
push eax
lea eax, [esp + 0x1d0]
push eax
call fcn.10085950
lea eax, [esp + 0x84]
mov ecx, edi
push eax
lea eax, [esp + 0x24c]
push eax
lea eax, [esp + 0x1d0]
push eax
call fcn.10085950
lea eax, [esp + 0x84]
mov ecx, edi
push eax
lea eax, [esp + 0x70]
push eax
lea eax, [esp + 0xb4]
push eax
call fcn.10085950
mov esi, dword [edi + 0xa0]
mov ecx, dword [esi + 4]
mov eax, dword [esi]
mov dword [eax + ecx*4], 4
mov eax, dword [esi + 4]
lea edx, [eax + 1]
mov dword [esi + 4], edx
mov dword [esi + 8], eax
mov eax, dword [esp + 0x54]
mov ecx, eax
and ecx, 0x18
shl eax, 0x14
or ecx, eax
mov eax, dword [esi]
or ecx, 0xff802000
shl ecx, 8
or ecx, dword [esp + 0x58]
or ecx, 0x70005
mov dword [eax + edx*4], ecx
lea eax, [esp + 0x6c]
inc dword [esi + 4]
mov ecx, esi
push eax
call fcn.10077b30
lea eax, [esp + 0x84]
mov ecx, esi
push eax
call fcn.10077b30
lea eax, [esp + 0x248]
jmp 0x1008900e
sub esp, 8
mov esi, dword [esp + 0x18]
xor eax, eax
mov dword [esp + 0xba4], 0
mov word [esp + 0xbc2], ax
mov ecx, edi
lea eax, [esp + 0x250]
mov dword [esp + 0xbb0], 2
push eax
lea eax, [esp + 0x1d4]
mov dword [esp + 0xbb0], 0xe40000
push eax
lea eax, [esp + 0xbac]
mov dword [esp + 0xbb0], 0
push eax
lea eax, [esp + 0xbc0]
mov dword [esp + 0xbc0], 0
push eax
lea eax, [esp + 0x30]
mov word [esp + 0xbd0], si
push eax
lea eax, [esp + 0x60]
mov dword [esp + 0xbd0], 0xe40000
push eax
lea eax, [esp + 0x4c]
mov dword [esp + 0xbd0], 0
push eax
push 0
push dword [esp + 0x1ec]
lea eax, [esp + 0x88]
push eax
lea eax, [esp + 0xc4]
push eax
call fcn.10085a60
sub esp, 8
mov dword [esp + 0xbc4], 0
xor eax, eax
mov dword [esp + 0xbd0], 2
mov word [esp + 0xbe2], ax
mov ecx, edi
lea eax, [esp + 0x74]
mov dword [esp + 0xbcc], 0xe40000
push eax
lea eax, [esp + 0xb8]
mov dword [esp + 0xbcc], 0
push eax
lea eax, [esp + 0xbcc]
mov dword [esp + 0xbdc], 0
push eax
lea eax, [esp + 0xbe0]
mov word [esp + 0xbec], si
push eax
lea eax, [esp + 0x30]
mov dword [esp + 0xbec], 0xe40000
push eax
lea eax, [esp + 0x60]
mov dword [esp + 0xbec], 0
push eax
lea eax, [esp + 0x4c]
push eax
push 0
push dword [esp + 0x64]
lea eax, [esp + 0x88]
push eax
lea eax, [esp + 0xc4]
push eax
call fcn.10085a60
xor eax, eax
mov dword [esp + 0xbdc], 0
sub esp, 8
mov word [esp + 0xc02], ax
lea eax, [esp + 0x8c]
mov dword [esp + 0xbf0], 2
mov dword [esp + 0xbec], 0xe40000
mov dword [esp + 0xbe8], 0
push eax
mov dword [esp + 0xbf8], 0
lea eax, [esp + 0x114]
mov word [esp + 0xc04], si
mov dword [esp + 0xc00], 0xe40000
mov dword [esp + 0xbfc], 0
push eax
lea eax, [esp + 0xbec]
mov ecx, edi
push eax
lea eax, [esp + 0xc00]
push eax
lea eax, [esp + 0x30]
push eax
lea eax, [esp + 0x60]
push eax
lea eax, [esp + 0x4c]
push eax
push 0
push dword [esp + 0x34]
lea eax, [esp + 0x88]
push eax
lea eax, [esp + 0xc4]
push eax
call fcn.10085a60
lea eax, [esp + 0x6c]
mov ecx, edi
push eax
lea eax, [esp + 0x24c]
push eax
lea eax, [esp + 0x1d0]
push eax
call fcn.10085950
lea eax, [esp + 0x84]
mov ecx, edi
push eax
lea eax, [esp + 0x24c]
push eax
lea eax, [esp + 0x1d0]
push eax
call fcn.10085950
lea eax, [esp + 0x84]
mov ecx, edi
push eax
lea eax, [esp + 0x70]
push eax
lea eax, [esp + 0xb4]
push eax
call fcn.10085950
lea eax, [esp + 0x84]
mov ecx, edi
push eax
lea eax, [esp + 0x70]
push eax
lea eax, [esp + 0x250]
push eax
lea eax, [esp + 0x234]
push eax
call fcn.100859f0
jmp 0x10089021
sub esp, 8
mov dword [esp + 0xc04], 0
xor eax, eax
mov dword [esp + 0xc10], 2
mov word [esp + 0xc22], ax
mov ecx, edi
lea eax, [esp + 0xd0]
mov dword [esp + 0xc0c], 0xe40000
push eax
lea eax, [esp + 0xfc]
mov dword [esp + 0xc0c], 0
push eax
lea eax, [esp + 0xc0c]
mov dword [esp + 0xc1c], 0
push eax
lea eax, [esp + 0xc20]
mov word [esp + 0xc2c], si
push eax
lea eax, [esp + 0x30]
mov dword [esp + 0xc2c], 0xe40000
push eax
lea eax, [esp + 0x60]
mov dword [esp + 0xc2c], 0
push eax
lea eax, [esp + 0x4c]
push eax
push 1
push dword [esp + 0x68]
lea eax, [esp + 0x88]
push eax
lea eax, [esp + 0xc4]
push eax
call fcn.10085a60
mov esi, dword [edi + 0xa0]
mov eax, dword [esi]
mov ecx, dword [esi + 4]
mov dword [eax + ecx*4], 1
mov edx, dword [esi + 4]
lea eax, [edx + 1]
mov dword [esi + 4], eax
mov dword [esi + 8], edx
jmp 0x1008df65
sub esp, 8
mov dword [esp + 0xc24], 0
xor eax, eax
mov dword [esp + 0xc30], 2
mov word [esp + 0xc42], ax
mov ecx, edi
lea eax, [esp + 0xc0]
mov dword [esp + 0xc2c], 0xe40000
push eax
lea eax, [esp + 0x120]
mov dword [esp + 0xc2c], 0
push eax
lea eax, [esp + 0xc2c]
mov dword [esp + 0xc3c], 0
push eax
lea eax, [esp + 0xc40]
mov word [esp + 0xc4c], si
push eax
lea eax, [esp + 0x30]
mov dword [esp + 0xc4c], 0xe40000
push eax
lea eax, [esp + 0x60]
mov dword [esp + 0xc4c], 0
push eax
lea eax, [esp + 0x4c]
push eax
push 1
push dword [esp + 0x3c]
lea eax, [esp + 0x88]
push eax
lea eax, [esp + 0xc4]
push eax
call fcn.10085a60
mov esi, dword [edi + 0xa0]
mov ecx, dword [esi + 4]
mov eax, dword [esi]
mov dword [eax + ecx*4], 1
mov ecx, esi
mov edx, dword [esi + 4]
lea eax, [edx + 1]
mov dword [esi + 4], eax
lea eax, [esp + 0x138]
push eax
mov dword [esi + 8], edx
call fcn.10084dd0
lea eax, [esp + 0xb8]
jmp 0x1008df7b
sub esp, 8
mov dword [esp + 0xc44], 0
xor eax, eax
mov dword [esp + 0xc50], 2
mov word [esp + 0xc62], ax
mov ecx, edi
lea eax, [esp + 0xd0]
mov dword [esp + 0xc4c], 0xe40000
push eax
lea eax, [esp + 0xfc]
mov dword [esp + 0xc4c], 0
push eax
lea eax, [esp + 0xc4c]
mov dword [esp + 0xc5c], 0
push eax
lea eax, [esp + 0xc60]
mov word [esp + 0xc6c], si
push eax
lea eax, [esp + 0x30]
mov dword [esp + 0xc6c], 0xe40000
push eax
lea eax, [esp + 0x60]
mov dword [esp + 0xc6c], 0
push eax
lea eax, [esp + 0x4c]
push eax
push 1
push dword [esp + 0x68]
lea eax, [esp + 0x88]
push eax
lea eax, [esp + 0xc4]
push eax
call fcn.10085a60
sub esp, 8
mov dword [esp + 0xc64], 0
xor eax, eax
mov dword [esp + 0xc70], 2
mov word [esp + 0xc82], ax
mov ecx, edi
lea eax, [esp + 0xc0]
mov dword [esp + 0xc6c], 0xe40000
push eax
lea eax, [esp + 0x120]
mov dword [esp + 0xc6c], 0
push eax
lea eax, [esp + 0xc6c]
mov dword [esp + 0xc7c], 0
push eax
lea eax, [esp + 0xc80]
mov word [esp + 0xc8c], si
push eax
lea eax, [esp + 0x30]
mov dword [esp + 0xc8c], 0xe40000
push eax
lea eax, [esp + 0x60]
mov dword [esp + 0xc8c], 0
push eax
lea eax, [esp + 0x4c]
push eax
push 1
push dword [esp + 0x3c]
lea eax, [esp + 0x88]
push eax
lea eax, [esp + 0xc4]
push eax
call fcn.10085a60
lea eax, [esp + 0xb8]
mov ecx, edi
push eax
lea eax, [esp + 0xcc]
push eax
lea eax, [esp + 0xf8]
push eax
call fcn.10085950
mov esi, dword [edi + 0xa0]
mov ecx, dword [esi + 4]
mov eax, dword [esi]
mov dword [eax + ecx*4], 2
mov ecx, dword [esi + 4]
lea eax, [ecx + 1]
mov dword [esi + 4], eax
lea eax, [esp + 0x138]
mov dword [esi + 8], ecx
push eax
mov ecx, esi
call fcn.10084dd0
lea eax, [esp + 0xc8]
mov ecx, esi
push eax
call fcn.10077b30
lea eax, [esp + 0xb8]
jmp 0x1008df7b
sub esp, 8
mov dword [esp + 0xc84], 0
xor eax, eax
mov dword [esp + 0xc90], 2
mov word [esp + 0xca2], ax
mov ecx, edi
lea eax, [esp + 0xd0]
mov dword [esp + 0xc8c], 0xe40000
push eax
lea eax, [esp + 0xfc]
mov dword [esp + 0xc8c], 0
push eax
lea eax, [esp + 0xc8c]
mov dword [esp + 0xc9c], 0
push eax
lea eax, [esp + 0xca0]
mov word [esp + 0xcac], si
push eax
lea eax, [esp + 0x30]
mov dword [esp + 0xcac], 0xe40000
push eax
lea eax, [esp + 0x60]
mov dword [esp + 0xcac], 0
push eax
lea eax, [esp + 0x4c]
push eax
push 1
push dword [esp + 0x68]
lea eax, [esp + 0x88]
push eax
lea eax, [esp + 0xc4]
push eax
call fcn.10085a60
sub esp, 8
mov dword [esp + 0xca4], 0
xor eax, eax
mov dword [esp + 0xcb0], 2
mov word [esp + 0xcc2], ax
mov ecx, edi
lea eax, [esp + 0xc0]
mov dword [esp + 0xcac], 0xe40000
push eax
lea eax, [esp + 0x120]
mov dword [esp + 0xcac], 0
push eax
lea eax, [esp + 0xcac]
mov dword [esp + 0xcbc], 0
push eax
lea eax, [esp + 0xcc0]
mov word [esp + 0xccc], si
push eax
lea eax, [esp + 0x30]
mov dword [esp + 0xccc], 0xe40000
push eax
lea eax, [esp + 0x60]
mov dword [esp + 0xccc], 0
push eax
lea eax, [esp + 0x4c]
push eax
push 1
push dword [esp + 0x3c]
lea eax, [esp + 0x88]
push eax
lea eax, [esp + 0xc4]
push eax
call fcn.10085a60
lea eax, [esp + 0xb8]
mov ecx, edi
push eax
lea eax, [esp + 0xcc]
push eax
lea eax, [esp + 0xf8]
push eax
call fcn.10085950
mov esi, dword [edi + 0xa0]
mov dword [esp + 0x268], 0
mov dword [esp + 0x26c], 5
mov dword [esp + 0x270], 0x80000
mov ecx, dword [esi + 4]
mov eax, dword [esi]
mov dword [esp + 0x274], 0
mov dword [eax + ecx*4], 2
mov ecx, dword [esi + 4]
lea eax, [ecx + 1]
mov dword [esi + 4], eax
lea eax, [esp + 0x268]
mov dword [esi + 8], ecx
mov ecx, esi
push eax
call fcn.10084dd0
lea eax, [esp + 0xc8]
mov ecx, esi
push eax
call fcn.10077b30
lea eax, [esp + 0xb8]
mov ecx, esi
push eax
call fcn.10077b30
mov ecx, esi
call fcn.10077c00
mov ecx, dword [edi + 0xa4]
lea eax, [esp + 0xd2c]
mov esi, dword [edi + 0xa0]
push 4
push ecx
push eax
call fcn.10078870
mov eax, dword [esp + 0xd2c]
lea ecx, [esp + 0x120]
mov dword [esp + 0xcbc], eax
movzx eax, word [esp + 0xd38]
mov word [esp + 0xcc8], ax
mov eax, dword [esp + 0xd34]
mov dword [esp + 0xcc4], eax
movzx eax, word [esp + 0xd3a]
mov word [esp + 0xcca], ax
lea eax, [esp + 0xf24]
push eax
mov dword [esp + 0xcc4], 0x1000000
call fcn.10077700
lea eax, [esp + 0xcbc]
mov ecx, esi
push eax
lea eax, [esp + 0xf28]
push eax
lea eax, [esp + 0x140]
push eax
push 2
call fcn.10084c90
jmp 0x1008df8a
lea eax, [esp + 0xf34]
push eax
lea ecx, [esp + 0x100]
call fcn.10077700
lea eax, [esp + 0xf44]
push eax
lea ecx, [esp + 0xe8]
call fcn.10077700
sub esp, 8
lea eax, [esp + 0xd0]
mov ecx, edi
push eax
lea eax, [esp + 0xfc]
push eax
lea eax, [esp + 0xf44]
push eax
lea eax, [esp + 0xf58]
push eax
lea eax, [esp + 0x30]
push eax
lea eax, [esp + 0x60]
push eax
lea eax, [esp + 0x4c]
push eax
push 1
push dword [esp + 0x68]
lea eax, [esp + 0x88]
push eax
lea eax, [esp + 0xc4]
push eax
call fcn.10085a60
lea eax, [esp + 0xf54]
push eax
lea ecx, [esp + 0x100]
call fcn.10077700
lea eax, [esp + 0xf64]
push eax
lea ecx, [esp + 0xe8]
call fcn.10077700
sub esp, 8
lea eax, [esp + 0xc0]
mov ecx, edi
push eax
lea eax, [esp + 0x120]
push eax
lea eax, [esp + 0xf64]
push eax
lea eax, [esp + 0xf78]
push eax
lea eax, [esp + 0x30]
push eax
lea eax, [esp + 0x60]
push eax
lea eax, [esp + 0x4c]
push eax
push 1
push dword [esp + 0x3c]
lea eax, [esp + 0x88]
push eax
lea eax, [esp + 0xc4]
push eax
call fcn.10085a60
lea eax, [esp + 0xb8]
mov ecx, edi
push eax
lea eax, [esp + 0xcc]
push eax
lea eax, [esp + 0xf8]
push eax
call fcn.10085950
lea eax, [esp + 0xf74]
push eax
lea ecx, [esp + 0x124]
call fcn.100776d0
lea eax, [esp + 0xb8]
push eax
lea eax, [esp + 0xcc]
push eax
lea eax, [esp + 0xf7c]
push eax
push 2
mov ecx, dword [edi + 0xa0]
call fcn.10084c90
mov edi, dword [edi + 0xa0]
lea eax, [esp + 0x1490]
push eax
call fcn.10084ea0
lea ecx, [esp + 0x14a0]
push ecx
mov ecx, eax
call fcn.10077530
mov esi, eax
lea ecx, [esp + 0x120]
lea eax, [esp + 0xf84]
push eax
call fcn.10077700
lea eax, [esp + 0xf94]
push eax
lea ecx, [esp + 0x124]
call fcn.100776d0
push esi
lea eax, [esp + 0xf88]
mov ecx, edi
push eax
lea eax, [esp + 0xf9c]
push eax
push 2
call fcn.10084c90
mov eax, dword [esp + 0x7c]
mov edi, dword [eax + 0xa0]
lea eax, [esp + 0x14b0]
push eax
call fcn.10084ee0
mov esi, eax
lea ecx, [esp + 0x120]
lea eax, [esp + 0xfa4]
push eax
call fcn.10077700
lea eax, [esp + 0xfa4]
push esi
push eax
lea eax, [esp + 0x140]
mov ecx, edi
push eax
push 5
call fcn.10084c90
mov edi, dword [esp + 0x7c]
jmp 0x1008df8a
lea eax, [esp + 0xfb4]
push eax
lea ecx, [esp + 0x100]
call fcn.10077700
lea eax, [esp + 0xfc4]
push eax
lea ecx, [esp + 0xe8]
call fcn.10077700
sub esp, 8
lea eax, [esp + 0xd0]
mov ecx, edi
push eax
lea eax, [esp + 0xfc]
push eax
lea eax, [esp + 0xfc4]
push eax
lea eax, [esp + 0xfd8]
push eax
lea eax, [esp + 0x30]
push eax
lea eax, [esp + 0x60]
push eax
lea eax, [esp + 0x4c]
push eax
push 1
push dword [esp + 0x68]
lea eax, [esp + 0x88]
push eax
lea eax, [esp + 0xc4]
push eax
call fcn.10085a60
lea eax, [esp + 0xfd4]
push eax
lea ecx, [esp + 0x100]
call fcn.10077700
lea eax, [esp + 0xfe4]
push eax
lea ecx, [esp + 0xe8]
call fcn.10077700
sub esp, 8
lea eax, [esp + 0xc0]
mov ecx, edi
push eax
lea eax, [esp + 0x120]
push eax
lea eax, [esp + 0xfe4]
push eax
lea eax, [esp + 0xff8]
push eax
lea eax, [esp + 0x30]
push eax
lea eax, [esp + 0x60]
push eax
lea eax, [esp + 0x4c]
push eax
push 1
push dword [esp + 0x3c]
lea eax, [esp + 0x88]
push eax
lea eax, [esp + 0xc4]
push eax
call fcn.10085a60
lea eax, [esp + 0xb8]
mov ecx, edi
push eax
lea eax, [esp + 0xcc]
push eax
lea eax, [esp + 0xf8]
push eax
call fcn.10085950
mov esi, dword [edi + 0xa0]
lea eax, [esp + 0x14c0]
push eax
lea ecx, [esp + 0xbc]
call fcn.10077530
push eax
lea eax, [esp + 0xcc]
push eax
lea eax, [esp + 0x140]
push eax
push 2
mov ecx, esi
call fcn.10084c90
jmp 0x1008df8a
lea eax, [esp + 0xff4]
push eax
lea ecx, [esp + 0x100]
call fcn.10077700
lea eax, [esp + 0x1004]
push eax
lea ecx, [esp + 0xe8]
call fcn.10077700
sub esp, 8
lea eax, [esp + 0xd0]
mov ecx, edi
push eax
lea eax, [esp + 0xfc]
push eax
lea eax, [esp + 0x1004]
push eax
lea eax, [esp + 0x1018]
push eax
lea eax, [esp + 0x30]
push eax
lea eax, [esp + 0x60]
push eax
lea eax, [esp + 0x4c]
push eax
push 1
push dword [esp + 0x68]
lea eax, [esp + 0x88]
push eax
lea eax, [esp + 0xc4]
push eax
call fcn.10085a60
lea eax, [esp + 0x1014]
push eax
lea ecx, [esp + 0x100]
call fcn.10077700
lea eax, [esp + 0x1024]
push eax
lea ecx, [esp + 0xe8]
call fcn.10077700
sub esp, 8
lea eax, [esp + 0xc0]
mov ecx, edi
push eax
lea eax, [esp + 0x120]
push eax
lea eax, [esp + 0x1024]
push eax
lea eax, [esp + 0x1038]
push eax
lea eax, [esp + 0x30]
push eax
lea eax, [esp + 0x60]
push eax
lea eax, [esp + 0x4c]
push eax
push 1
push dword [esp + 0x3c]
lea eax, [esp + 0x88]
push eax
lea eax, [esp + 0xc4]
push eax
call fcn.10085a60
lea eax, [esp + 0xc8]
mov ecx, edi
push eax
push eax
lea eax, [esp + 0xf8]
push eax
call fcn.10085950
lea eax, [esp + 0x14d0]
push eax
call fcn.10084e20
push eax
lea eax, [esp + 0xcc]
mov ecx, edi
push eax
lea eax, [esp + 0xf8]
push eax
call fcn.10085950
lea eax, [esp + 0x14e0]
push eax
call fcn.10084e20
push eax
lea eax, [esp + 0xbc]
mov ecx, edi
push eax
lea eax, [esp + 0x11c]
push eax
call fcn.10085950
lea eax, [esp + 0xb8]
push eax
push ecx
lea eax, [esp + 0x14f8]
push eax
call fcn.10084e20
add esp, 4
mov ecx, edi
push eax
lea eax, [esp + 0xd0]
push eax
lea eax, [esp + 0x144]
push eax
call fcn.100859f0
jmp 0x1008df8a
lea eax, [esp + 0x1034]
push eax
lea ecx, [esp + 0x100]
call fcn.10077700
lea eax, [esp + 0x1044]
push eax
lea ecx, [esp + 0xe8]
call fcn.10077700
sub esp, 8
lea eax, [esp + 0xd0]
mov ecx, edi
push eax
lea eax, [esp + 0xfc]
push eax
lea eax, [esp + 0x1044]
push eax
lea eax, [esp + 0x1058]
push eax
lea eax, [esp + 0x30]
push eax
lea eax, [esp + 0x60]
push eax
lea eax, [esp + 0x4c]
push eax
push 1
push dword [esp + 0x68]
lea eax, [esp + 0x88]
push eax
lea eax, [esp + 0xc4]
push eax
call fcn.10085a60
lea eax, [esp + 0x1054]
push eax
lea ecx, [esp + 0x100]
call fcn.10077700
lea eax, [esp + 0x1064]
push eax
lea ecx, [esp + 0xe8]
call fcn.10077700
sub esp, 8
lea eax, [esp + 0xc0]
mov ecx, edi
push eax
lea eax, [esp + 0x120]
push eax
lea eax, [esp + 0x1064]
push eax
lea eax, [esp + 0x1078]
push eax
lea eax, [esp + 0x30]
push eax
lea eax, [esp + 0x60]
push eax
lea eax, [esp + 0x4c]
push eax
push 1
push dword [esp + 0x3c]
lea eax, [esp + 0x88]
push eax
lea eax, [esp + 0xc4]
push eax
call fcn.10085a60
lea eax, [esp + 0xb8]
mov ecx, edi
push eax
lea eax, [esp + 0xcc]
push eax
lea eax, [esp + 0xf8]
push eax
call fcn.10085950
mov ecx, dword [edi + 0xa0]
lea eax, [esp + 0xb8]
push eax
lea eax, [esp + 0xcc]
push eax
lea eax, [esp + 0x140]
push eax
push 5
call fcn.10084c90
jmp 0x1008df8a
lea eax, [esp + 0x1074]
push eax
lea ecx, [esp + 0x100]
call fcn.10077700
lea eax, [esp + 0x1084]
push eax
lea ecx, [esp + 0xe8]
call fcn.10077700
sub esp, 8
lea eax, [esp + 0xd0]
mov ecx, edi
push eax
lea eax, [esp + 0xfc]
push eax
lea eax, [esp + 0x1084]
push eax
lea eax, [esp + 0x1098]
push eax
lea eax, [esp + 0x30]
push eax
lea eax, [esp + 0x60]
push eax
lea eax, [esp + 0x4c]
push eax
push 1
push dword [esp + 0x68]
lea eax, [esp + 0x88]
push eax
lea eax, [esp + 0xc4]
push eax
call fcn.10085a60
lea eax, [esp + 0x1094]
push eax
lea ecx, [esp + 0x100]
call fcn.10077700
lea eax, [esp + 0x10a4]
push eax
lea ecx, [esp + 0xe8]
call fcn.10077700
sub esp, 8
lea eax, [esp + 0xc0]
mov ecx, edi
push eax
lea eax, [esp + 0x120]
push eax
lea eax, [esp + 0x10a4]
push eax
lea eax, [esp + 0x10b8]
push eax
lea eax, [esp + 0x30]
push eax
lea eax, [esp + 0x60]
push eax
lea eax, [esp + 0x4c]
push eax
push 1
push dword [esp + 0x3c]
lea eax, [esp + 0x88]
push eax
lea eax, [esp + 0xc4]
push eax
call fcn.10085a60
lea eax, [esp + 0xb8]
mov ecx, edi
push eax
lea eax, [esp + 0xcc]
push eax
lea eax, [esp + 0xf8]
push eax
call fcn.10085950
lea eax, [esp + 0x10b4]
push eax
lea ecx, [esp + 0x124]
call fcn.100776d0
lea eax, [esp + 0xb8]
push eax
lea eax, [esp + 0xcc]
push eax
lea eax, [esp + 0x10bc]
push eax
push 5
mov ecx, dword [edi + 0xa0]
call fcn.10084c90
lea eax, [esp + 0x10c4]
push eax
lea ecx, [esp + 0x124]
call fcn.10077700
lea eax, [esp + 0x10d4]
push eax
lea ecx, [esp + 0x124]
call fcn.10077700
mov ecx, dword [edi + 0xa0]
lea eax, [esp + 0x10c4]
push eax
lea eax, [esp + 0x10d8]
push eax
lea eax, [esp + 0x140]
push eax
push 2
call fcn.10084c90
jmp 0x1008df8a
lea eax, [esp + 0x10e4]
push eax
lea ecx, [esp + 0x100]
call fcn.10077700
lea eax, [esp + 0x10f4]
push eax
lea ecx, [esp + 0xe8]
call fcn.10077700
sub esp, 8
lea eax, [esp + 0xd0]
mov ecx, edi
push eax
lea eax, [esp + 0xfc]
push eax
lea eax, [esp + 0x10f4]
push eax
lea eax, [esp + 0x1108]
push eax
lea eax, [esp + 0x30]
push eax
lea eax, [esp + 0x60]
push eax
lea eax, [esp + 0x4c]
push eax
push 1
push dword [esp + 0x68]
lea eax, [esp + 0x88]
push eax
lea eax, [esp + 0xc4]
push eax
call fcn.10085a60
lea eax, [esp + 0x1104]
push eax
lea ecx, [esp + 0x100]
call fcn.10077700
lea eax, [esp + 0x1114]
push eax
lea ecx, [esp + 0xe8]
call fcn.10077700
sub esp, 8
lea eax, [esp + 0xc0]
mov ecx, edi
push eax
lea eax, [esp + 0x120]
push eax
lea eax, [esp + 0x1114]
push eax
lea eax, [esp + 0x1128]
push eax
lea eax, [esp + 0x30]
push eax
lea eax, [esp + 0x60]
push eax
lea eax, [esp + 0x4c]
push eax
push 1
push dword [esp + 0x3c]
lea eax, [esp + 0x88]
push eax
lea eax, [esp + 0xc4]
push eax
call fcn.10085a60
lea eax, [esp + 0xb8]
mov ecx, edi
push eax
lea eax, [esp + 0xcc]
push eax
lea eax, [esp + 0xf8]
push eax
call fcn.10085950
lea eax, [esp + 0x1124]
push eax
lea ecx, [esp + 0x124]
call fcn.100776d0
lea eax, [esp + 0xb8]
push eax
lea eax, [esp + 0xcc]
push eax
lea eax, [esp + 0x112c]
push eax
push 5
mov ecx, dword [edi + 0xa0]
call fcn.10084c90
mov edi, dword [edi + 0xa0]
lea eax, [esp + 0x1500]
push eax
call fcn.10084f20
mov esi, eax
lea ecx, [esp + 0x120]
lea eax, [esp + 0x1134]
push eax
call fcn.10077700
lea eax, [esp + 0x1134]
jmp 0x1008c7f6
lea eax, [esp + 0x1144]
push eax
lea ecx, [esp + 0x100]
call fcn.10077700
lea eax, [esp + 0x1154]
push eax
lea ecx, [esp + 0xe8]
call fcn.10077700
sub esp, 8
lea eax, [esp + 0xd0]
mov ecx, edi
push eax
lea eax, [esp + 0xfc]
push eax
lea eax, [esp + 0x1154]
push eax
lea eax, [esp + 0x1168]
push eax
lea eax, [esp + 0x30]
push eax
lea eax, [esp + 0x60]
push eax
lea eax, [esp + 0x4c]
push eax
push 1
push dword [esp + 0x68]
lea eax, [esp + 0x88]
push eax
lea eax, [esp + 0xc4]
push eax
call fcn.10085a60
lea eax, [esp + 0x1164]
push eax
lea ecx, [esp + 0x100]
call fcn.10077700
lea eax, [esp + 0x1174]
push eax
lea ecx, [esp + 0xe8]
call fcn.10077700
sub esp, 8
lea eax, [esp + 0xc0]
mov ecx, edi
push eax
lea eax, [esp + 0x120]
push eax
lea eax, [esp + 0x1174]
push eax
lea eax, [esp + 0x1188]
push eax
lea eax, [esp + 0x30]
push eax
lea eax, [esp + 0x60]
push eax
lea eax, [esp + 0x4c]
push eax
push 1
push dword [esp + 0x3c]
lea eax, [esp + 0x88]
push eax
lea eax, [esp + 0xc4]
push eax
call fcn.10085a60
lea eax, [esp + 0xc8]
mov ecx, edi
push eax
lea eax, [esp + 0xbc]
push eax
lea eax, [esp + 0x11c]
push eax
call fcn.10085950
lea eax, [esp + 0x2c]
mov ecx, edi
push eax
lea eax, [esp + 0xbc]
push eax
lea eax, [esp + 0x11c]
push eax
call fcn.10085950
mov edi, dword [edi + 0xa0]
lea eax, [esp + 0x1510]
push eax
lea ecx, [esp + 0xbc]
call fcn.10077530
mov esi, eax
lea ecx, [esp + 0x120]
lea eax, [esp + 0x1184]
push eax
call fcn.100776d0
push esi
lea eax, [esp + 0xcc]
mov ecx, edi
push eax
lea eax, [esp + 0x118c]
push eax
push 2
call fcn.10084c90
lea eax, [esp + 0x1194]
push eax
lea ecx, [esp + 0x124]
call fcn.10077700
lea eax, [esp + 0xb8]
push eax
lea eax, [esp + 0x30]
push eax
lea eax, [esp + 0x119c]
mov edi, dword [esp + 0x84]
mov ecx, dword [edi + 0xa0]
push eax
lea eax, [esp + 0x144]
push eax
push 4
call fcn.10084d30
jmp 0x1008df8a
lea eax, [esp + 0x11a4]
push eax
lea ecx, [esp + 0x100]
call fcn.10077700
lea eax, [esp + 0x11b4]
push eax
lea ecx, [esp + 0xe8]
call fcn.10077700
sub esp, 8
lea eax, [esp + 0xd0]
mov ecx, edi
push eax
lea eax, [esp + 0xfc]
push eax
lea eax, [esp + 0x11b4]
push eax
lea eax, [esp + 0x11c8]
push eax
lea eax, [esp + 0x30]
push eax
lea eax, [esp + 0x60]
push eax
lea eax, [esp + 0x4c]
push eax
push 1
push dword [esp + 0x68]
lea eax, [esp + 0x88]
push eax
lea eax, [esp + 0xc4]
push eax
call fcn.10085a60
lea eax, [esp + 0x11c4]
push eax
lea ecx, [esp + 0x100]
call fcn.10077700
lea eax, [esp + 0x11d4]
push eax
lea ecx, [esp + 0xe8]
call fcn.10077700
sub esp, 8
lea eax, [esp + 0xc0]
mov ecx, edi
push eax
lea eax, [esp + 0x120]
push eax
lea eax, [esp + 0x11d4]
push eax
lea eax, [esp + 0x11e8]
push eax
lea eax, [esp + 0x30]
push eax
lea eax, [esp + 0x60]
push eax
lea eax, [esp + 0x4c]
push eax
push 1
push dword [esp + 0x3c]
lea eax, [esp + 0x88]
push eax
lea eax, [esp + 0xc4]
push eax
call fcn.10085a60
lea eax, [esp + 0xb8]
mov ecx, edi
push eax
lea eax, [esp + 0xcc]
push eax
lea eax, [esp + 0xf8]
push eax
call fcn.10085950
mov edi, dword [edi + 0xa0]
lea eax, [esp + 0x1520]
push eax
lea ecx, [esp + 0xbc]
call fcn.10077530
mov esi, eax
lea ecx, [esp + 0x120]
lea eax, [esp + 0x11e4]
push eax
call fcn.100776d0
push esi
lea eax, [esp + 0xcc]
mov ecx, edi
push eax
lea eax, [esp + 0x11ec]
push eax
push 2
call fcn.10084c90
lea eax, [esp + 0x11f4]
push eax
lea ecx, [esp + 0xe8]
call fcn.10077700
lea eax, [esp + 0x1204]
push eax
lea ecx, [esp + 0x124]
call fcn.10077700
lea eax, [esp + 0xb8]
push eax
lea eax, [esp + 0x11f8]
push eax
lea eax, [esp + 0x120c]
jmp 0x1008d0c3
lea eax, [esp + 0x1214]
push eax
lea ecx, [esp + 0x100]
call fcn.10077700
lea eax, [esp + 0x1224]
push eax
lea ecx, [esp + 0xe8]
call fcn.10077700
sub esp, 8
lea eax, [esp + 0xd0]
mov ecx, edi
push eax
lea eax, [esp + 0xfc]
push eax
lea eax, [esp + 0x1224]
push eax
lea eax, [esp + 0x1238]
push eax
lea eax, [esp + 0x30]
push eax
lea eax, [esp + 0x60]
push eax
lea eax, [esp + 0x4c]
push eax
push 1
push dword [esp + 0x68]
lea eax, [esp + 0x88]
push eax
lea eax, [esp + 0xc4]
push eax
call fcn.10085a60
lea eax, [esp + 0x1234]
push eax
lea ecx, [esp + 0x100]
call fcn.10077700
lea eax, [esp + 0x1244]
push eax
lea ecx, [esp + 0xe8]
call fcn.10077700
sub esp, 8
lea eax, [esp + 0xc0]
mov ecx, edi
push eax
lea eax, [esp + 0x120]
push eax
lea eax, [esp + 0x1244]
push eax
lea eax, [esp + 0x1258]
push eax
lea eax, [esp + 0x30]
push eax
lea eax, [esp + 0x60]
push eax
lea eax, [esp + 0x4c]
push eax
push 1
push dword [esp + 0x3c]
lea eax, [esp + 0x88]
push eax
lea eax, [esp + 0xc4]
push eax
call fcn.10085a60
lea eax, [esp + 0xc8]
mov ecx, edi
push eax
lea eax, [esp + 0xbc]
push eax
lea eax, [esp + 0x11c]
push eax
call fcn.10085950
lea eax, [esp + 0x18]
mov ecx, edi
push eax
lea eax, [esp + 0xbc]
push eax
lea eax, [esp + 0x11c]
push eax
call fcn.10085950
mov edi, dword [edi + 0xa0]
lea eax, [esp + 0x1530]
push eax
lea ecx, [esp + 0xbc]
call fcn.10077530
mov esi, eax
lea ecx, [esp + 0x120]
lea eax, [esp + 0x1254]
push eax
call fcn.100776d0
push esi
lea eax, [esp + 0xcc]
mov ecx, edi
push eax
lea eax, [esp + 0x125c]
push eax
push 2
call fcn.10084c90
lea eax, [esp + 0x1264]
push eax
lea ecx, [esp + 0x124]
call fcn.10077700
lea eax, [esp + 0xb8]
push eax
lea eax, [esp + 0x1c]
push eax
lea eax, [esp + 0x126c]
jmp 0x1008d0c3
lea eax, [esp + 0x1274]
push eax
lea ecx, [esp + 0x100]
call fcn.10077700
lea eax, [esp + 0x1284]
push eax
lea ecx, [esp + 0xe8]
call fcn.10077700
sub esp, 8
lea eax, [esp + 0xd0]
mov ecx, edi
push eax
lea eax, [esp + 0xfc]
push eax
lea eax, [esp + 0x1284]
push eax
lea eax, [esp + 0x1298]
push eax
lea eax, [esp + 0x30]
push eax
lea eax, [esp + 0x60]
push eax
lea eax, [esp + 0x4c]
push eax
push 1
push dword [esp + 0x68]
lea eax, [esp + 0x88]
push eax
lea eax, [esp + 0xc4]
push eax
call fcn.10085a60
lea eax, [esp + 0x1294]
push eax
lea ecx, [esp + 0x100]
call fcn.10077700
lea eax, [esp + 0x12a4]
push eax
lea ecx, [esp + 0xe8]
call fcn.10077700
sub esp, 8
lea eax, [esp + 0xc0]
mov ecx, edi
push eax
lea eax, [esp + 0x120]
push eax
lea eax, [esp + 0x12a4]
push eax
lea eax, [esp + 0x12b8]
push eax
lea eax, [esp + 0x30]
push eax
lea eax, [esp + 0x60]
push eax
lea eax, [esp + 0x4c]
push eax
push 1
push dword [esp + 0x3c]
lea eax, [esp + 0x88]
push eax
lea eax, [esp + 0xc4]
push eax
call fcn.10085a60
lea eax, [esp + 0xc8]
mov ecx, edi
push eax
lea eax, [esp + 0xbc]
push eax
lea eax, [esp + 0x11c]
push eax
call fcn.10085950
lea eax, [esp + 0x5c]
mov ecx, edi
push eax
lea eax, [esp + 0xbc]
push eax
lea eax, [esp + 0x11c]
push eax
call fcn.10085950
mov edi, dword [edi + 0xa0]
lea eax, [esp + 0x1540]
push eax
lea ecx, [esp + 0xbc]
call fcn.10077530
mov esi, eax
lea ecx, [esp + 0x120]
lea eax, [esp + 0x12b4]
push eax
call fcn.100776d0
push esi
lea eax, [esp + 0xcc]
mov ecx, edi
push eax
lea eax, [esp + 0x12bc]
push eax
push 2
call fcn.10084c90
lea eax, [esp + 0x12c4]
push eax
lea ecx, [esp + 0x124]
call fcn.10077700
lea eax, [esp + 0xb8]
push eax
lea eax, [esp + 0x60]
push eax
lea eax, [esp + 0x12cc]
jmp 0x1008d0c3
lea eax, [esp + 0x12d4]
push eax
lea ecx, [esp + 0x100]
call fcn.10077700
lea eax, [esp + 0x12e4]
push eax
lea ecx, [esp + 0xe8]
call fcn.10077700
sub esp, 8
lea eax, [esp + 0xd0]
mov ecx, edi
push eax
lea eax, [esp + 0xfc]
push eax
lea eax, [esp + 0x12e4]
push eax
lea eax, [esp + 0x12f8]
push eax
lea eax, [esp + 0x30]
push eax
lea eax, [esp + 0x60]
push eax
lea eax, [esp + 0x4c]
push eax
push 1
push dword [esp + 0x68]
lea eax, [esp + 0x88]
push eax
lea eax, [esp + 0xc4]
push eax
call fcn.10085a60
lea eax, [esp + 0x12f4]
push eax
lea ecx, [esp + 0x100]
call fcn.10077700
lea eax, [esp + 0x1304]
push eax
lea ecx, [esp + 0xe8]
call fcn.10077700
sub esp, 8
lea eax, [esp + 0xc0]
mov ecx, edi
push eax
lea eax, [esp + 0x120]
push eax
lea eax, [esp + 0x1304]
push eax
lea eax, [esp + 0x1318]
push eax
lea eax, [esp + 0x30]
push eax
lea eax, [esp + 0x60]
push eax
lea eax, [esp + 0x4c]
push eax
push 1
push dword [esp + 0x3c]
lea eax, [esp + 0x88]
push eax
lea eax, [esp + 0xc4]
push eax
call fcn.10085a60
lea eax, [esp + 0xb8]
mov ecx, edi
push eax
lea eax, [esp + 0xcc]
push eax
lea eax, [esp + 0xf8]
push eax
call fcn.10085950
mov eax, dword [edi + 0xa0]
lea ecx, [esp + 0xe4]
mov dword [esp + 0x18c], eax
lea eax, [esp + 0x1550]
push eax
call fcn.10077700
lea ecx, [esp + 0x1560]
push ecx
mov ecx, eax
call fcn.10077530
mov edi, eax
lea eax, [esp + 0x1570]
push eax
call fcn.10084e20
mov esi, eax
lea ecx, [esp + 0x120]
lea eax, [esp + 0x1314]
push eax
call fcn.100776d0
mov ecx, dword [esp + 0x18c]
lea eax, [esp + 0x1314]
push edi
push esi
push eax
push 2
call fcn.10084c90
lea eax, [esp + 0x1324]
push eax
lea ecx, [esp + 0x124]
call fcn.10077700
lea eax, [esp + 0xc8]
push eax
lea eax, [esp + 0xbc]
push eax
lea eax, [esp + 0x132c]
jmp 0x1008d0c3
lea eax, [esp + 0x1334]
push eax
lea ecx, [esp + 0x100]
call fcn.10077700
lea eax, [esp + 0x1344]
push eax
lea ecx, [esp + 0xe8]
call fcn.10077700
sub esp, 8
lea eax, [esp + 0xd0]
mov ecx, edi
push eax
lea eax, [esp + 0xfc]
push eax
lea eax, [esp + 0x1344]
push eax
lea eax, [esp + 0x1358]
push eax
lea eax, [esp + 0x30]
push eax
lea eax, [esp + 0x60]
push eax
lea eax, [esp + 0x4c]
push eax
push 1
push dword [esp + 0x68]
lea eax, [esp + 0x88]
push eax
lea eax, [esp + 0xc4]
push eax
call fcn.10085a60
lea eax, [esp + 0xc8]
push eax
lea eax, [esp + 0x13c]
push eax
push ecx
mov ecx, dword [edi + 0xa0]
call fcn.10084c00
jmp 0x1008df8a
lea eax, [esp + 0x1354]
push eax
lea ecx, [esp + 0x100]
call fcn.10077700
lea eax, [esp + 0x1364]
push eax
lea ecx, [esp + 0xe8]
call fcn.10077700
sub esp, 8
lea eax, [esp + 0x260]
mov ecx, edi
push eax
lea eax, [esp + 0x1e0]
push eax
lea eax, [esp + 0x1364]
push eax
lea eax, [esp + 0x1378]
push eax
lea eax, [esp + 0x30]
push eax
lea eax, [esp + 0x60]
push eax
lea eax, [esp + 0x4c]
push eax
push 1
push dword [esp + 0x180]
lea eax, [esp + 0x88]
push eax
lea eax, [esp + 0xc4]
push eax
call fcn.10085a60
lea eax, [esp + 0x1374]
push eax
lea ecx, [esp + 0x100]
call fcn.10077700
lea eax, [esp + 0x1384]
push eax
lea ecx, [esp + 0xe8]
call fcn.10077700
sub esp, 8
lea eax, [esp + 0xd0]
mov ecx, edi
push eax
lea eax, [esp + 0xfc]
push eax
lea eax, [esp + 0x1384]
push eax
lea eax, [esp + 0x1398]
push eax
lea eax, [esp + 0x30]
push eax
lea eax, [esp + 0x60]
push eax
lea eax, [esp + 0x4c]
push eax
push 1
push dword [esp + 0x68]
lea eax, [esp + 0x88]
push eax
lea eax, [esp + 0xc4]
push eax
call fcn.10085a60
lea eax, [esp + 0x1394]
push eax
lea ecx, [esp + 0x100]
call fcn.10077700
lea eax, [esp + 0x13a4]
push eax
lea ecx, [esp + 0xe8]
call fcn.10077700
sub esp, 8
lea eax, [esp + 0xc0]
push eax
lea eax, [esp + 0x120]
push eax
lea eax, [esp + 0x13a4]
push eax
lea eax, [esp + 0x13b8]
push eax
lea eax, [esp + 0x30]
push eax
lea eax, [esp + 0x60]
mov ecx, edi
push eax
lea eax, [esp + 0x4c]
push eax
push 1
push dword [esp + 0x3c]
lea eax, [esp + 0x88]
push eax
lea eax, [esp + 0xc4]
push eax
call fcn.10085a60
lea eax, [esp + 0xc8]
mov ecx, edi
push eax
lea eax, [esp + 0x25c]
push eax
lea eax, [esp + 0x1dc]
push eax
call fcn.10085950
lea eax, [esp + 0xb8]
mov ecx, edi
push eax
lea eax, [esp + 0x25c]
push eax
lea eax, [esp + 0x1dc]
push eax
call fcn.10085950
lea eax, [esp + 0xb8]
mov ecx, edi
push eax
lea eax, [esp + 0xcc]
push eax
lea eax, [esp + 0xf8]
push eax
call fcn.10085950
lea eax, [esp + 0x258]
push eax
lea eax, [esp + 0xbc]
push eax
lea eax, [esp + 0xd0]
jmp 0x1008d0ca
lea eax, [esp + 0x13b4]
push eax
lea ecx, [esp + 0x100]
call fcn.10077700
lea eax, [esp + 0x13c4]
push eax
lea ecx, [esp + 0xe8]
call fcn.10077700
sub esp, 8
lea eax, [esp + 0x260]
mov ecx, edi
push eax
lea eax, [esp + 0x1e0]
push eax
lea eax, [esp + 0x13c4]
push eax
lea eax, [esp + 0x13d8]
push eax
lea eax, [esp + 0x30]
push eax
lea eax, [esp + 0x60]
push eax
lea eax, [esp + 0x4c]
push eax
push 1
push dword [esp + 0x180]
lea eax, [esp + 0x88]
push eax
lea eax, [esp + 0xc4]
push eax
call fcn.10085a60
lea eax, [esp + 0x13d4]
push eax
lea ecx, [esp + 0x100]
call fcn.10077700
lea eax, [esp + 0x13e4]
push eax
lea ecx, [esp + 0xe8]
call fcn.10077700
sub esp, 8
lea eax, [esp + 0xd0]
mov ecx, edi
push eax
lea eax, [esp + 0xfc]
push eax
lea eax, [esp + 0x13e4]
push eax
lea eax, [esp + 0x13f8]
push eax
lea eax, [esp + 0x30]
push eax
lea eax, [esp + 0x60]
push eax
lea eax, [esp + 0x4c]
push eax
push 1
push dword [esp + 0x68]
lea eax, [esp + 0x88]
push eax
lea eax, [esp + 0xc4]
push eax
call fcn.10085a60
lea eax, [esp + 0x13f4]
push eax
lea ecx, [esp + 0x100]
call fcn.10077700
lea eax, [esp + 0x1404]
push eax
lea ecx, [esp + 0xe8]
call fcn.10077700
sub esp, 8
lea eax, [esp + 0xc0]
push eax
lea eax, [esp + 0x120]
push eax
lea eax, [esp + 0x1404]
push eax
lea eax, [esp + 0x1418]
push eax
lea eax, [esp + 0x30]
push eax
lea eax, [esp + 0x60]
mov ecx, edi
push eax
lea eax, [esp + 0x4c]
push eax
push 1
push dword [esp + 0x3c]
lea eax, [esp + 0x88]
push eax
lea eax, [esp + 0xc4]
push eax
call fcn.10085a60
lea eax, [esp + 0xc8]
mov ecx, edi
push eax
lea eax, [esp + 0x25c]
push eax
lea eax, [esp + 0x1dc]
push eax
call fcn.10085950
lea eax, [esp + 0xb8]
mov ecx, edi
push eax
lea eax, [esp + 0x25c]
push eax
lea eax, [esp + 0x1dc]
push eax
call fcn.10085950
lea eax, [esp + 0xb8]
mov ecx, edi
push eax
lea eax, [esp + 0xcc]
push eax
lea eax, [esp + 0xf8]
push eax
call fcn.10085950
lea eax, [esp + 0xb8]
mov ecx, edi
push eax
lea eax, [esp + 0xcc]
push eax
lea eax, [esp + 0x260]
push eax
lea eax, [esp + 0x144]
push eax
call fcn.100859f0
jmp 0x1008df8a
mov edi, dword [edi + 0xa0]
mov eax, dword [esp + 0xd8]
mov dword [esp + 0x27c], eax
mov eax, dword [esp + 0x24]
mov word [esp + 0x288], ax
mov eax, dword [esp + 0x80]
mov dword [esp + 0x280], eax
mov ax, word [esp + 0x26]
mov word [esp + 0x28a], ax
mov dword [esp + 0x284], 0xff0000
mov ecx, dword [edi + 4]
mov eax, dword [edi]
mov dword [eax + ecx*4], 1
mov ecx, edi
mov eax, dword [edi + 4]
lea esi, [eax + 1]
mov dword [edi + 4], esi
mov dword [edi + 8], eax
mov eax, dword [esp + 0x1a4]
mov edx, eax
and edx, 0x18
shl eax, 0x14
or edx, eax
mov eax, dword [edi]
or edx, 0xff802000
shl edx, 8
or edx, dword [esp + 0x12c]
or edx, dword [esp + 0x134]
or edx, dword [esp + 0x130]
mov dword [eax + esi*4], edx
lea eax, [esp + 0x27c]
inc dword [edi + 4]
push eax
call fcn.10077b30
mov ecx, edi
call fcn.10077c00
mov edi, dword [esp + 0x7c]
jmp 0x1008df8a
xor eax, eax
sub esp, 8
mov ecx, edi
cmp byte [edi + 0x11a], al
je 0x1008dea0
cmp byte [edi + 0x11b], al
je 0x1008dd98
mov dword [esp + 0x294], eax
mov dword [esp + 0x298], eax
mov dword [esp + 0x2a4], eax
mov dword [esp + 0x2a8], eax
mov word [esp + 0x2b2], ax
lea eax, [esp + 0xd0]
push eax
lea eax, [esp + 0xfc]
mov dword [esp + 0x2a4], 2
push eax
lea eax, [esp + 0x29c]
mov dword [esp + 0x2a4], 0xe40000
push eax
lea eax, [esp + 0x2b0]
mov word [esp + 0x2bc], si
push eax
lea eax, [esp + 0x30]
mov dword [esp + 0x2bc], 0xe40000
push eax
lea eax, [esp + 0x60]
push eax
lea eax, [esp + 0x4c]
push eax
push 1
push dword [esp + 0x68]
lea eax, [esp + 0x88]
push eax
lea eax, [esp + 0xc4]
push eax
call fcn.10085a60
mov esi, dword [edi + 0xa0]
mov ecx, dword [esi + 4]
mov eax, dword [esi]
mov dword [eax + ecx*4], 1
mov eax, dword [esi + 4]
lea edx, [eax + 1]
mov dword [esi + 4], edx
mov dword [esi + 8], eax
mov eax, dword [esp + 0x1a4]
mov ecx, eax
and ecx, 0x18
shl eax, 0x14
or ecx, eax
mov eax, dword [esi]
or ecx, 0xff802000
shl ecx, 8
or ecx, dword [esp + 0x12c]
or ecx, dword [esp + 0x134]
or ecx, dword [esp + 0x130]
mov dword [eax + edx*4], ecx
inc dword [esi + 4]
jmp 0x1008df74
mov word [esp + 0x2d2], ax
lea eax, [esp + 0xc0]
push eax
lea eax, [esp + 0x120]
mov dword [esp + 0x2b8], 0
push eax
lea eax, [esp + 0x2bc]
mov dword [esp + 0x2c8], 2
push eax
lea eax, [esp + 0x2d0]
mov dword [esp + 0x2c8], 0xe40000
push eax
lea eax, [esp + 0x30]
mov dword [esp + 0x2c8], 0
push eax
lea eax, [esp + 0x60]
mov dword [esp + 0x2d8], 0
push eax
lea eax, [esp + 0x4c]
mov word [esp + 0x2e8], si
push eax
push 1
push dword [esp + 0x3c]
lea eax, [esp + 0x88]
mov dword [esp + 0x2f0], 0xe40000
push eax
lea eax, [esp + 0xc4]
mov dword [esp + 0x2f0], 0
push eax
call fcn.10085a60
mov esi, dword [edi + 0xa0]
mov ecx, dword [esi + 4]
mov eax, dword [esi]
mov dword [eax + ecx*4], 1
mov eax, dword [esi + 4]
lea edx, [eax + 1]
mov dword [esi + 4], edx
mov dword [esi + 8], eax
mov eax, dword [esp + 0x1a4]
mov ecx, eax
and ecx, 0x18
shl eax, 0x14
or ecx, eax
mov eax, dword [esi]
or ecx, 0xff802000
shl ecx, 8
or ecx, dword [esp + 0x12c]
or ecx, dword [esp + 0x134]
or ecx, dword [esp + 0x130]
mov dword [eax + edx*4], ecx
lea eax, [esp + 0xb8]
inc dword [esi + 4]
jmp 0x1008df7b
mov word [esp + 0x22e], ax
lea eax, [esp + 0xd0]
push eax
lea eax, [esp + 0xfc]
mov dword [esp + 0x2d8], 0
push eax
lea eax, [esp + 0x2dc]
mov dword [esp + 0x2e8], 2
push eax
lea eax, [esp + 0x22c]
mov dword [esp + 0x2e8], 0xe40000
push eax
lea eax, [esp + 0x30]
mov dword [esp + 0x2e8], 0
push eax
lea eax, [esp + 0x60]
mov dword [esp + 0x234], 0
push eax
lea eax, [esp + 0x4c]
mov word [esp + 0x244], si
push eax
push 1
push dword [esp + 0x68]
lea eax, [esp + 0x88]
mov dword [esp + 0x24c], 0xe40000
push eax
lea eax, [esp + 0xc4]
mov dword [esp + 0x24c], 0
push eax
call fcn.10085a60
mov esi, dword [edi + 0xa0]
mov ecx, dword [esi + 4]
mov eax, dword [esi]
mov dword [eax + ecx*4], 1
mov ecx, dword [esi + 4]
lea eax, [ecx + 1]
mov dword [esi + 4], eax
mov dword [esi + 8], ecx
lea eax, [esp + 0x138]
mov ecx, esi
push eax
call fcn.10084dd0
lea eax, [esp + 0xc8]
push eax
mov ecx, esi
call fcn.10077b30
mov ecx, esi
call fcn.10077c00
mov eax, dword [esp + 0xe0]
lea ecx, [esp + 0x148]
mov esi, dword [edi + 0xa0]
dec eax
cmp dword [esp + 0xa4], eax
jne 0x1008e0c4
cmp dword [esp + 0x15c], 0x9000000
jne 0x1008e086
lea eax, [esp + 0x1414]
push eax
call fcn.10077700
lea eax, [esp + 0x1580]
push eax
lea ecx, [esp + 0x20c]
call fcn.10077490
lea ecx, [esp + 0x44]
push ecx
lea ecx, [esp + 0x1418]
push ecx
push eax
push 2
mov ecx, esi
call fcn.10084c90
mov esi, dword [edi + 0xa0]
lea ecx, [esp + 0xe28]
push 3
push 5
call fcn.100775e0
lea eax, [esp + 0x1424]
push eax
call fcn.10077700
lea eax, [esp + 0x1590]
push eax
lea ecx, [esp + 0x20c]
call fcn.10077460
lea ecx, [esp + 0x1424]
push ecx
push eax
push ecx
mov ecx, esi
call fcn.10084c00
lea eax, [esp + 0x1434]
push eax
lea ecx, [esp + 0x14c]
call fcn.10077700
lea eax, [esp + 0x1444]
push eax
lea ecx, [esp + 0x1e4]
call fcn.100776d0
lea eax, [esp + 0x1434]
push eax
lea eax, [esp + 0x1448]
push eax
push ecx
mov ecx, dword [edi + 0xa0]
call fcn.10084c00
jmp 0x1008e418
lea eax, [esp + 0x1454]
push eax
call fcn.10077700
lea eax, [esp + 0x1464]
push eax
lea ecx, [esp + 0x1e4]
call fcn.100776d0
lea eax, [esp + 0x1454]
push eax
lea eax, [esp + 0x1468]
push eax
push ecx
mov ecx, esi
call fcn.10084c00
jmp 0x1008e418
mov eax, dword [esp + 0x278]
and eax, 0xfc0000
cmp eax, 0x140000
jne 0x1008e11c
lea eax, [esp + 0x1474]
push eax
call fcn.10077700
lea eax, [esp + 0xe34]
push eax
lea ecx, [esp + 0x100]
call fcn.100776d0
lea eax, [esp + 0x1474]
push eax
lea eax, [esp + 0xe38]
push eax
push ecx
mov ecx, esi
call fcn.10084c00
mov byte [edi + 0x119], 1
jmp 0x1008e418
lea eax, [esp + 0x2ec]
push eax
call fcn.10077700
lea eax, [esp + 0x1f8]
push eax
lea ecx, [esp + 0x1f0]
call fcn.100776d0
lea eax, [esp + 0x2ec]
push eax
lea eax, [esp + 0x1fc]
push eax
push ecx
mov ecx, esi
call fcn.10084c00
lea eax, [esp + 0x15a0]
push eax
lea ecx, [esp + 0x1f0]
call fcn.10077700
mov esi, dword [eax]
mov dword [esp + 0x1a0], esi
mov esi, dword [eax + 4]
mov dword [esp + 0x198], esi
mov esi, dword [eax + 8]
mov dword [esp + 0x19c], esi
mov esi, dword [eax + 0xc]
jmp 0x1008e411
cmp byte [edi + 0x11c], 0
je 0x1008e41f
mov esi, dword [edi + 0xa0]
mov eax, dword [esp + 0xe0]
dec eax
cmp edx, eax
mov ecx, dword [esi + 4]
mov eax, dword [esi]
jne 0x1008e387
cmp dword [esp + 0x15c], 0x9000000
jne 0x1008e365
mov dword [eax + ecx*4], 2
mov eax, dword [esi + 4]
lea ecx, [eax + 1]
mov dword [esi + 4], ecx
mov dword [esi + 8], eax
mov eax, dword [esi]
mov dword [eax + ecx*4], 0x80270001
lea eax, [esp + 0x18]
inc dword [esi + 4]
mov ecx, esi
push eax
call fcn.10077b30
lea eax, [esp + 0x44]
mov ecx, esi
push eax
call fcn.10077b30
mov ecx, dword [esi + 8]
mov eax, dword [esi]
push 0x10
lea edx, [eax + ecx*4]
mov eax, dword [esi + 4]
sub eax, ecx
mov ecx, esi
dec eax
shl eax, 0x18
or dword [edx], eax
call fcn.10077d00
inc dword [esi + 0x10]
cmp byte [esi + 0x18], 0
je 0x1008e226
inc dword [esi + 0x14]
mov eax, dword [esp + 0xd8]
mov byte [esi + 0x18], 1
mov esi, dword [edi + 0xa0]
mov dword [esp + 0x2dc], eax
mov eax, dword [esp + 0x24]
mov word [esp + 0x2e8], ax
mov eax, dword [esp + 0x80]
mov dword [esp + 0x2e0], eax
mov ax, word [esp + 0x26]
mov word [esp + 0x2ea], ax
mov dword [esp + 0x2e4], 0xff0000
mov ecx, dword [esi + 4]
mov eax, dword [esi]
mov dword [eax + ecx*4], 1
mov eax, dword [esi + 4]
lea ecx, [eax + 1]
mov dword [esi + 4], ecx
mov dword [esi + 8], eax
mov eax, dword [esi]
mov dword [eax + ecx*4], 0x80280001
lea eax, [esp + 0x2dc]
inc dword [esi + 4]
mov ecx, esi
push eax
call fcn.10077b30
mov ecx, dword [esi + 8]
mov eax, dword [esi]
push 0x10
lea edx, [eax + ecx*4]
mov eax, dword [esi + 4]
sub eax, ecx
mov ecx, esi
dec eax
shl eax, 0x18
or dword [edx], eax
call fcn.10077d00
inc dword [esi + 0x10]
cmp byte [esi + 0x18], 0
je 0x1008e2cb
inc dword [esi + 0x14]
mov byte [esi + 0x18], 1
mov esi, dword [edi + 0xa0]
mov dword [esp + 0x168], 0
mov dword [esp + 0x174], 1
mov dword [esp + 0x170], 0xe40000
mov ecx, dword [esi + 4]
mov eax, dword [esi]
mov dword [esp + 0x16c], 0
mov dword [eax + ecx*4], 1
mov eax, dword [esi + 4]
lea ecx, [eax + 1]
mov dword [esi + 4], ecx
mov dword [esi + 8], eax
mov eax, dword [esi]
mov dword [eax + ecx*4], 0x802f0800
lea eax, [esp + 0x168]
inc dword [esi + 4]
mov ecx, esi
push eax
call fcn.10077b30
mov ecx, dword [esi + 8]
mov eax, dword [esi]
push 0x10
lea edx, [eax + ecx*4]
mov eax, dword [esi + 4]
sub eax, ecx
mov ecx, esi
dec eax
shl eax, 0x18
or dword [edx], eax
call fcn.10077d00
inc dword [esi + 0x10]
cmp byte [esi + 0x18], 0
je 0x1008e35c
inc dword [esi + 0x14]
mov byte [esi + 0x18], 1
jmp 0x1008e418
mov dword [eax + ecx*4], 1
mov eax, dword [esi + 4]
lea ecx, [eax + 1]
mov dword [esi + 4], ecx
mov dword [esi + 8], eax
mov eax, dword [esi]
mov dword [eax + ecx*4], 0x802f0800
lea eax, [esp + 0x18]
jmp 0x1008e329
mov dword [eax + ecx*4], 1
mov eax, dword [esi + 4]
lea ecx, [eax + 1]
mov dword [esi + 4], ecx
mov dword [esi + 8], eax
mov eax, dword [esi]
mov dword [eax + ecx*4], 0x802f0003
lea eax, [esp + 0x18]
inc dword [esi + 4]
mov ecx, esi
push eax
call fcn.10077b30
mov ecx, dword [esi + 8]
mov eax, dword [esi]
push 0x10
lea edx, [eax + ecx*4]
mov eax, dword [esi + 4]
sub eax, ecx
mov ecx, esi
dec eax
shl eax, 0x18
or dword [edx], eax
call fcn.10077d00
inc dword [esi + 0x10]
cmp byte [esi + 0x18], 0
je 0x1008e3da
inc dword [esi + 0x14]
mov byte [esi + 0x18], 1
mov dword [esp + 0xde4], 3
mov esi, dword [esp + 0xde4]
mov dword [esp + 0x1a0], 0
mov dword [esp + 0x19c], 0xe40000
mov dword [esp + 0x198], 0
mov dword [esp + 0x194], esi
mov edx, dword [esp + 0xa4]
inc edx
mov dword [esp + 0xa4], edx
cmp edx, dword [esp + 0xe0]
jb 0x100872a0
jmp 0x1008e5d9
cmp dword [esp + 0x15c], 0x9000000
mov esi, dword [edi + 0xa0]
jne 0x1008e563
push 7
push 8
lea ecx, [esp + 0x1f4]
call fcn.100775e0
lea eax, [esp + 0x15b0]
push eax
call fcn.100776d0
lea ecx, [esp + 0x2c]
push ecx
push eax
push ecx
mov ecx, esi
call fcn.10084c00
mov esi, dword [edi + 0xa0]
lea eax, [esp + 0x1f8]
push eax
lea ecx, [esp + 0x1f0]
call fcn.10077700
lea eax, [esp + 0x15c0]
push eax
lea ecx, [esp + 0x14c]
call fcn.100776d0
lea ecx, [esp + 0x15d0]
push ecx
mov ecx, eax
call fcn.10077490
push ecx
lea ecx, [esp + 0x15e4]
push ecx
mov ecx, eax
call fcn.10084b20
lea ecx, [esp + 0x44]
push ecx
lea ecx, [esp + 0x1fc]
push ecx
push eax
push 2
mov ecx, esi
call fcn.10084c90
mov edi, dword [edi + 0xa0]
lea eax, [esp + 0x15f0]
push eax
lea ecx, [esp + 0x30]
call fcn.100774f0
mov esi, eax
lea ecx, [esp + 0x148]
lea eax, [esp + 0x1600]
push eax
call fcn.100776d0
lea ecx, [esp + 0x1610]
push ecx
mov ecx, eax
call fcn.10077460
push ecx
lea ecx, [esp + 0x1624]
push ecx
mov ecx, eax
call fcn.10084b20
push esi
push eax
push ecx
mov ecx, edi
call fcn.10084c00
lea eax, [esp + 0x1f8]
push eax
lea ecx, [esp + 0x14c]
call fcn.10077700
lea eax, [esp + 0x2ec]
push eax
lea ecx, [esp + 0x1e4]
call fcn.100776d0
mov edi, dword [esp + 0x7c]
jmp 0x1008e5bd
lea eax, [esp + 0x1630]
push eax
lea ecx, [esp + 0x14c]
call fcn.100776d0
push ecx
lea ecx, [esp + 0x1644]
push ecx
mov ecx, eax
call fcn.10084b20
lea ecx, [esp + 0x2c]
push ecx
push eax
push ecx
mov ecx, esi
call fcn.10084c00
lea eax, [esp + 0x1f8]
push eax
lea ecx, [esp + 0x14c]
call fcn.10077700
lea eax, [esp + 0x2ec]
push eax
lea ecx, [esp + 0x1e4]
call fcn.100776d0
lea eax, [esp + 0x1f8]
push eax
lea eax, [esp + 0x2f0]
push eax
push ecx
mov ecx, dword [edi + 0xa0]
call fcn.10084c00
lea eax, [esp + 0x1f8]
push eax
lea ecx, [esp + 0x1e4]
call fcn.10077700
lea eax, [esp + 0x1f8]
push eax
lea eax, [esp + 0xd40]
push eax
push ecx
mov ecx, dword [edi + 0xa0]
call fcn.10084c00
mov ecx, dword [edi + 0xa0]
call fcn.10077b10
mov eax, dword [edi + 0xa0]
mov ecx, dword [esp + 0x16e4]
pop edi
pop esi
mov eax, dword [eax]
xor ecx, esp
call fcn.100a1500
mov esp, ebp
pop ebp
ret