Function at 0x8e9f40
Capabilities:
Inspect section memory permissions
Resolve function by parsing pe exports

Disassembly:
push ebp
push edi
push esi
push ebx
sub esp, 0xcc
mov edi, dword [esp + 0xe0]
mov edx, dword [esp + 0xe8]
mov ebp, dword [esp + 0xe4]
mov eax, dword [edi + 0x1ffc]
shl edx, 4
mov ecx, dword [edi + 0x420]
mov dword [esp + 0x4c], edx
shl ebp, 4
imul edx, dword [edi + 0x17e0]
mov dword [esp + 0x34], eax
mov eax, dword [esp + 0x4c]
imul eax, dword [edi + 0x17dc]
add edx, ebp
sar edx, 1
add eax, ebp
add ecx, eax
mov dword [esp + 0xb8], eax
add eax, dword [edi + 0xf0]
mov dword [esp + 0xbc], edx
mov dword [esp + 0xc0], edx
mov dword [edi + 0x179c], eax
mov eax, dword [edi + 0x424]
mov dword [edi + 0x175c], ecx
add eax, edx
mov dword [edi + 0x1760], eax
mov eax, edx
add eax, dword [edi + 0xf4]
mov dword [edi + 0x17a0], eax
mov eax, dword [edi + 0x428]
add eax, edx
add edx, dword [edi + 0xf8]
cmp dword [edi + 0x1ffc], 1
mov dword [edi + 0x1764], eax
mov dword [edi + 0x17a4], edx
ja 0x8ebcc6
mov esi, dword [edi + 0xb0]
cmp esi, dword [edi + 0x17dc]
jne 0x8ebcfe
mov eax, dword [edi + 0xb4]
cmp eax, dword [edi + 0x17e0]
jne 0x8ebce2
mov ecx, dword [edi + 0x16b4]
mov ebx, dword [edi + 0x814]
mov edx, dword [edi + 0x810]
movzx eax, byte [ecx + 0x1d0]
cmp eax, 0xe
jbe switch.0x008ea046
mov eax, edx
sar eax, 7
jmp 0x8ea053
jmp dword [eax*4 + 0xbaf268]
lea eax, [edx + edx]
sar eax, 7
mov dword [edi + 0x1724], eax
movzx eax, byte [ecx + 0x1d4]
cmp eax, 0xe
jbe switch.0x008ea435
mov eax, edx
sar eax, 7
nop
mov dword [edi + 0x1728], eax
movzx eax, byte [ecx + 0x1d8]
cmp eax, 0xe
jbe switch.0x008ea423
mov eax, edx
sar eax, 7
nop
lea esi, [esi]
mov edx, dword [edi + 0x1484]
mov dword [edi + 0x172c], eax
mov ebx, dword [ecx + 0x200]
mov eax, edx
shl eax, 0xc
add eax, dword [edi + 0x1800]
lea eax, [eax + edx + 0x800]
mov dword [edi + 0x1804], eax
mov eax, dword [edi + 0x1730]
and eax, 1
cmp eax, 1
mov eax, dword [edi + 0x850]
sbb ecx, ecx
add ecx, 2
sar ebx, cl
test eax, eax
je 0x8ea3d4
mov eax, ebp
neg eax
sub eax, 0x10
mov dword [edi + 0x1744], eax
mov eax, dword [esp + 0x4c]
neg eax
sub eax, 0x10
mov dword [edi + 0x174c], eax
mov eax, dword [edi + 0x90]
shl eax, 4
sub eax, ebp
mov dword [edi + 0x1748], eax
mov eax, dword [edi + 0x94]
shl eax, 4
sub eax, dword [esp + 0x4c]
mov dword [edi + 0x1750], eax
test ebx, ebx
je 0x8ea171
mov ecx, dword [edi + 0x1744]
mov eax, ebx
neg eax
mov edx, eax
cmp eax, ecx
jge 0x8ea131
mov edx, ecx
mov ecx, dword [edi + 0x1748]
mov dword [edi + 0x1744], edx
mov edx, ebx
cmp ebx, ecx
jle 0x8ea145
mov edx, ecx
mov dword [edi + 0x1748], edx
mov edx, dword [edi + 0x174c]
cmp eax, edx
jge 0x8ea157
mov eax, edx
mov edx, dword [edi + 0x1750]
mov dword [edi + 0x174c], eax
mov eax, ebx
cmp ebx, edx
jle 0x8ea16b
mov eax, edx
mov dword [edi + 0x1750], eax
mov ecx, dword [edi + 0x175c]
mov dword [edi + 0x16b8], 0
mov dword [esp + 4], esi
mov dword [esp + 0x3c], ecx
mov dword [esp], ecx
call dword [edi + 0x888]
mov ebx, eax
mov eax, dword [edi + 0xb0]
mov dword [esp + 4], eax
mov eax, dword [esp + 0x3c]
mov dword [esp], eax
call dword [edi + 0x88c]
mov edx, dword [esp + 0xe8]
imul edx, dword [edi + 0x98]
add eax, 0x1f4
mov dword [esp + 0x38], eax
mov eax, ebx
imul eax, ebx
sub ebx, 0xffffff80
sar ebx, 8
shr eax, 8
sub dword [esp + 0x38], eax
mov eax, dword [esp + 0xe4]
add eax, dword [edi + 0x744]
mov byte [eax + edx], bl
mov ecx, dword [esp + 0x38]
mov eax, dword [esp + 0xe8]
imul eax, dword [edi + 0x98]
mov edx, dword [edi + 0x73c]
add eax, dword [esp + 0xe4]
sub ecx, 0xffffff80
sar ecx, 8
add dword [edi + 0x17e8], ecx
mov word [edx + eax*2], cx
mov eax, dword [edi + 0x16b4]
mov eax, dword [eax + 0x278]
test eax, eax
jne 0x8ea885
mov dword [esp + 0x48], 0
mov eax, dword [edi + 0x1534]
mov edx, dword [esp + 0x34]
sub eax, 5
add edx, 1
cmp eax, 1
mov dword [esp + 0x44], edx
jbe 0x8ea740
mov eax, dword [edi + 0x1814]
mov ecx, dword [esp + 0x4c]
mov dword [esp + 0x40], 0
shl eax, 4
mov dword [esp + 0xc8], eax
mov eax, dword [edi + 0x1818]
sub dword [esp + 0xc8], ebp
shl eax, 4
mov dword [esp + 0xc4], eax
sub dword [esp + 0xc4], ecx
mov eax, dword [edi + 0xb0]
mov dword [esp + 0x10], 0x10
mov dword [esp + 0xc], eax
imul eax, dword [esp + 0xc4]
add eax, dword [edi + 0x179c]
add eax, dword [esp + 0xc8]
mov dword [esp], 0
mov dword [esp + 8], eax
mov eax, dword [esp + 0x3c]
mov dword [esp + 4], eax
call dword [edi + 0x8a4]
mov ebp, dword [esp + 0x48]
mov edx, dword [edi + 0x740]
mov ecx, eax
mov dword [esp + 0x54], eax
mov eax, dword [esp + 0xe8]
sub ecx, 0xffffff80
imul eax, dword [edi + 0x98]
add eax, dword [esp + 0xe4]
sar ecx, 8
add dword [edi + 0x17e4], ecx
test ebp, ebp
mov word [edx + eax*2], cx
je 0x8ea447
mov edx, dword [edi + 0x814]
mov ecx, dword [esp + 0x38]
mov ebx, dword [esp + 0x54]
shr edx, 7
imul eax, edx, 0x64
lea eax, [ecx + eax - 0x1f4]
cmp ebx, eax
jbe 0x8ea324
mov ebx, eax
lea eax, [edx + edx*4]
mov edx, dword [esp + 0x38]
cmp ebx, 0x7f
mov ebp, dword [edi + 0x17ec]
lea ecx, [edx + eax*4 - 0x1f4]
jg 0x8eab23
movzx esi, byte [ebx + 0xbccd60]
cmp ecx, 0x7f
jg 0x8ea9cb
movzx edx, byte [ecx + 0xbccd60]
lea eax, [esi + ebp]
sub eax, edx
cmp dword [esp + 0x48], 2
mov dword [edi + 0x17ec], eax
je 0x8eb324
movzx ecx, byte [esp + 0x44]
mov eax, dword [esp + 0xc4]
shl dword [esp + 0xc8], cl
shl eax, cl
cmp dword [esp + 0x48], 4
mov dword [esp + 0xc4], eax
je 0x8eb43b
cmp dword [esp + 0x48], 0x100
movzx ecx, word [esp + 0x48]
je 0x8eb402
mov ebx, dword [esp + 0xe8]
imul ebx, dword [edi + 0x98]
mov eax, dword [edi + 0x1824]
mov edx, ebx
add edx, dword [esp + 0xe4]
mov word [eax + edx*2], cx
add esp, 0xcc
pop ebx
pop esi
pop edi
pop ebp
ret
cmp dword [edi + 0x18], 1
je 0x8eb003
mov eax, ebp
neg eax
mov dword [edi + 0x1744], eax
mov eax, dword [esp + 0x4c]
neg eax
mov dword [edi + 0x174c], eax
mov eax, dword [edi + 0x90]
shl eax, 4
sub eax, ebp
sub eax, 0x10
mov dword [edi + 0x1748], eax
mov eax, dword [edi + 0x94]
shl eax, 4
sub eax, dword [esp + 0x4c]
sub eax, 0x10
mov dword [edi + 0x1750], eax
jmp 0x8ea11b
jmp dword [eax*4 + 0xbaf2a4]
lea eax, [edx + edx]
sar eax, 7
jmp 0x8ea090
jmp dword [eax*4 + 0xbaf2e0]
lea eax, [edx + edx]
sar eax, 7
jmp 0x8ea070
mov eax, dword [edi + 0x16b4]
mov esi, dword [eax + 0x22c]
test esi, esi
jle 0x8eb4a9
mov edx, dword [edi + 0x814]
mov ecx, dword [esp + 0x38]
shr edx, 7
imul eax, edx, 0x64
lea eax, [ecx + eax - 0x1f4]
mov ecx, dword [esp + 0x54]
cmp ecx, eax
ja 0x8eade7
mov ebx, dword [esp + 0x38]
lea eax, [edx + edx*4]
cmp ecx, 0x7f
mov ebp, dword [edi + 0x17ec]
lea esi, [ebx + eax*4 - 0x1f4]
jle 0x8eac7b
xor eax, eax
cmp ecx, 0x3fffffff
jle 0x8ea4ad
sub ecx, 0x40000000
mov al, 1
lea edx, [eax + eax]
shl eax, 2
add eax, 1
shl eax, 0x1c
cmp ecx, eax
jl 0x8ea4c2
sub ecx, eax
add edx, 1
lea eax, [edx*4 + 1]
shl eax, 0x1a
cmp ecx, eax
lea ebx, [edx + edx]
jl 0x8ea4d8
sub ecx, eax
add ebx, 1
lea eax, [ebx*4 + 1]
shl eax, 0x18
cmp ecx, eax
lea edx, [ebx + ebx]
jl 0x8ea4ee
sub ecx, eax
add edx, 1
lea eax, [edx*4 + 1]
shl eax, 0x16
cmp ecx, eax
lea ebx, [edx + edx]
jl 0x8ea504
sub ecx, eax
add ebx, 1
lea eax, [ebx*4 + 1]
shl eax, 0x14
cmp ecx, eax
lea edx, [ebx + ebx]
jl 0x8ea51a
sub ecx, eax
add edx, 1
lea eax, [edx*4 + 1]
shl eax, 0x12
cmp ecx, eax
lea ebx, [edx + edx]
jl 0x8ea530
sub ecx, eax
add ebx, 1
lea eax, [ebx*4 + 1]
shl eax, 0x10
cmp ecx, eax
lea edx, [ebx + ebx]
jl 0x8ea546
sub ecx, eax
add edx, 1
lea eax, [edx*4 + 1]
shl eax, 0xe
cmp ecx, eax
lea ebx, [edx + edx]
jl 0x8ea55c
sub ecx, eax
add ebx, 1
lea eax, [ebx*4 + 1]
shl eax, 0xc
cmp ecx, eax
lea edx, [ebx + ebx]
jl 0x8ea572
sub ecx, eax
add edx, 1
lea eax, [edx*4 + 1]
shl eax, 0xa
cmp ecx, eax
lea ebx, [edx + edx]
jl 0x8ea588
sub ecx, eax
add ebx, 1
lea eax, [ebx*4 + 1]
shl eax, 8
cmp ecx, eax
lea edx, [ebx + ebx]
jl 0x8ea59e
sub ecx, eax
add edx, 1
lea eax, [edx*4 + 1]
shl eax, 6
cmp ecx, eax
lea ebx, [edx + edx]
jl 0x8ea5b4
sub ecx, eax
add ebx, 1
lea eax, [ebx*4 + 1]
shl eax, 4
cmp ecx, eax
lea edx, [ebx + ebx]
jl 0x8ea5ca
sub ecx, eax
add edx, 1
lea eax, [edx*4 + 1]
shl eax, 2
cmp ecx, eax
lea ebx, [edx + edx]
jl 0x8ea5e0
sub ecx, eax
add ebx, 1
lea eax, [ebx*4 + 1]
cmp eax, ecx
setle al
cmp esi, 0x7f
movzx eax, al
lea ebx, [eax + ebx*2]
jg 0x8eac8b
movzx edx, byte [esi + 0xbccd60]
lea eax, [ebx + ebp]
mov ecx, dword [esp + 0x38]
sub eax, edx
mov edx, dword [esp + 0x54]
mov dword [edi + 0x17ec], eax
lea eax, [edx + edx + 0xc800]
cmp dword [esp + 0x38], eax
setl al
movzx ebp, al
lea eax, [ecx + ecx + 0xc800]
cmp edx, eax
jl 0x8eaf8c
cmp dword [edi + 0x808], 0x18
jg 0x8eaf8c
movzx ecx, byte [esp + 0x44]
shl dword [esp + 0xc8], cl
shl dword [esp + 0xc4], cl
mov eax, dword [edi + 0x38]
test al, 4
je 0x8ea674
mov edx, dword [edi + 0x16b8]
test edx, edx
jne 0x8ea674
cmp dword [esp + 0x38], 0x3200
jg 0x8eaf07
mov eax, dword [edi + 0x98]
imul eax, dword [edi + 0x1818]
mov esi, dword [esp + 0xc4]
mov ebx, dword [esp + 0xc8]
mov edx, dword [edi + 0x14d4]
add eax, dword [edi + 0x1814]
shl eax, 2
mov word [edx + eax], bx
mov word [eax + edx + 2], si
mov edx, dword [edi + 0x1828]
mov eax, dword [edi + 0x618]
lea ecx, [edx*4]
add edx, dword [edi + 0x9c]
mov word [eax + ecx], bx
mov word [ecx + eax + 2], si
shl edx, 2
mov word [ecx + eax + 4], bx
mov word [ecx + eax + 6], si
mov word [eax + edx], bx
mov word [edx + eax + 2], si
mov word [edx + eax + 4], bx
mov word [edx + eax + 6], si
test byte [edi + 0x3b], 0x20
mov ecx, ebp
je 0x8ea3a8
mov eax, dword [edi + 0x16b8]
test eax, eax
jne 0x8ea3a8
lea eax, [edi + 0x151c]
xor edx, edx
lea ecx, [edi + 0x14ec]
mov dword [esp], eax
mov eax, edi
mov dword [esp + 0xc], 0
mov dword [esp + 8], esi
mov dword [esp + 4], ebx
call fcn.008b82d0
mov ecx, ebp
cmp eax, 0x7fffffff
je 0x8ea3a8
or ch, 1
jmp 0x8ea3a8
mov esi, dword [edi + 0x1828]
mov eax, dword [edi + 0x618]
mov ebp, dword [edi + 0x9c]
lea edx, [esi*4]
mov dword [esp + 0x30], eax
movsx eax, word [edx + eax - 4]
mov ecx, dword [esp + 0x30]
mov dword [esp + 0x70], eax
movsx eax, word [edx + ecx - 2]
movzx ecx, byte [esp + 0x44]
mov dword [esp + 0x74], eax
mov eax, dword [edi + 0x1748]
shl eax, cl
cmp dword [esp + 0x70], eax
jle 0x8ea78a
mov dword [esp + 0x70], eax
mov eax, dword [edi + 0x20dc]
test eax, eax
jne 0x8ea94e
mov ecx, dword [esp + 0x30]
sub esi, ebp
lea edx, [esi*4]
movsx eax, word [ecx + edx]
mov dword [esp + 0x78], eax
movsx eax, word [edx + ecx + 2]
mov dword [esp + 0x7c], eax
movsx eax, word [edx + ecx + 8]
mov dword [esp + 0x80], eax
movsx eax, word [edx + ecx + 0xa]
movzx ecx, byte [esp + 0x44]
mov dword [esp + 0x84], eax
mov edx, dword [edi + 0x1750]
shl edx, cl
cmp dword [esp + 0x7c], edx
jle 0x8ea7ea
movzx ecx, byte [esp + 0x44]
mov dword [esp + 0x7c], edx
mov eax, dword [edi + 0x1744]
shl eax, cl
cmp dword [esp + 0x80], eax
jge 0x8ea802
mov dword [esp + 0x80], eax
cmp dword [esp + 0x84], edx
jle 0x8ea812
mov dword [esp + 0x84], edx
mov eax, dword [esp + 0x78]
mov esi, dword [esp + 0x70]
mov edx, dword [esp + 0x80]
cmp eax, esi
jge 0x8eae22
cmp edx, eax
jle 0x8ea837
cmp esi, edx
mov eax, esi
jg 0x8eae34
mov dword [esp + 0x88], eax
mov edx, dword [esp + 0x7c]
mov eax, dword [esp + 0x74]
mov ecx, dword [esp + 0x84]
cmp edx, eax
jge 0x8eaf73
cmp ecx, edx
jle 0x8ea863
cmp eax, ecx
mov edx, eax
jg 0x8eaf85
cmp dword [edi + 0x18], 2
mov dword [esp + 0x8c], edx
je 0x8eb3ea
mov dword [edi + 0x1754], esi
mov dword [edi + 0x1758], eax
jmp 0x8ea962
mov ecx, dword [esp + 0xe8]
mov eax, edi
mov edx, dword [esp + 0xe4]
mov dword [esp], 1
call fcn.008b2220
lea esi, [eax + 0x80]
mov ecx, eax
mov eax, dword [edi + 0x16b4]
sar esi, 8
cmp esi, dword [eax + 0x278]
jge 0x8eadee
mov edx, dword [edi + 0x814]
mov ebx, dword [esp + 0x38]
shr edx, 7
imul eax, edx, 0x64
lea eax, [ebx + eax - 0x1f4]
mov ebx, ecx
cmp ecx, eax
jbe 0x8ea8dd
mov ebx, eax
lea eax, [edx + edx*4]
mov edx, dword [esp + 0x38]
mov ebp, dword [edi + 0x17ec]
lea ecx, [edx + eax*4 - 0x1f4]
mov eax, dword [esp + 0xe8]
imul eax, dword [edi + 0x98]
mov edx, eax
mov eax, dword [edi + 0x740]
add edx, dword [esp + 0xe4]
add dword [edi + 0x17e4], esi
cmp ebx, 0x7f
mov word [eax + edx*2], si
jg 0x8eb1cc
movzx esi, byte [ebx + 0xbccd60]
cmp ecx, 0x7f
jg 0x8eb074
movzx edx, byte [ecx + 0xbccd60]
lea eax, [esi + ebp]
sub eax, edx
mov dword [edi + 0x17ec], eax
add esp, 0xcc
pop ebx
pop esi
pop edi
pop ebp
ret
mov eax, dword [esp + 0x70]
mov dword [edi + 0x1754], eax
mov eax, dword [esp + 0x74]
mov dword [edi + 0x1758], eax
movzx ecx, byte [esp + 0x44]
mov eax, 0x10000
mov dword [esp + 0x24], 0x10
mov dword [esp + 0x20], 0
sar eax, cl
mov dword [esp + 0x1c], eax
mov eax, dword [edi + 0x14d4]
mov dword [esp + 0x14], 0
mov dword [esp + 0x10], 0
mov dword [esp], edi
mov dword [esp + 0x18], eax
lea eax, [esp + 0x68]
mov dword [esp + 0xc], eax
lea eax, [esp + 0xc4]
mov dword [esp + 8], eax
lea eax, [esp + 0xc8]
mov dword [esp + 4], eax
call fcn.008d3d80
mov dword [esp + 0x40], eax
jmp 0x8ea286
xor eax, eax
cmp ecx, 0x3fffffff
jg 0x8eae3b
lea edx, [eax + eax]
shl eax, 2
add eax, 1
shl eax, 0x1c
cmp ecx, eax
jl 0x8ea9ee
sub ecx, eax
add edx, 1
lea eax, [edx*4 + 1]
shl eax, 0x1a
cmp ecx, eax
lea ebx, [edx + edx]
jl 0x8eaa04
sub ecx, eax
add ebx, 1
lea eax, [ebx*4 + 1]
shl eax, 0x18
cmp ecx, eax
lea edx, [ebx + ebx]
jl 0x8eaa1a
sub ecx, eax
add edx, 1
lea eax, [edx*4 + 1]
shl eax, 0x16
cmp ecx, eax
lea ebx, [edx + edx]
jl 0x8eaa30
sub ecx, eax
add ebx, 1
lea eax, [ebx*4 + 1]
shl eax, 0x14
cmp ecx, eax
lea edx, [ebx + ebx]
jl 0x8eaa46
sub ecx, eax
add edx, 1
lea eax, [edx*4 + 1]
shl eax, 0x12
cmp ecx, eax
lea ebx, [edx + edx]
jl 0x8eaa5c
sub ecx, eax
add ebx, 1
lea eax, [ebx*4 + 1]
shl eax, 0x10
cmp ecx, eax
lea edx, [ebx + ebx]
jl 0x8eaa72
sub ecx, eax
add edx, 1
lea eax, [edx*4 + 1]
shl eax, 0xe
cmp ecx, eax
lea ebx, [edx + edx]
jl 0x8eaa88
sub ecx, eax
add ebx, 1
lea eax, [ebx*4 + 1]
shl eax, 0xc
cmp ecx, eax
lea edx, [ebx + ebx]
jl 0x8eaa9e
sub ecx, eax
add edx, 1
lea eax, [edx*4 + 1]
shl eax, 0xa
cmp ecx, eax
lea ebx, [edx + edx]
jl 0x8eaab4
sub ecx, eax
add ebx, 1
lea eax, [ebx*4 + 1]
shl eax, 8
cmp ecx, eax
lea edx, [ebx + ebx]
jl 0x8eaaca
sub ecx, eax
add edx, 1
lea eax, [edx*4 + 1]
shl eax, 6
cmp ecx, eax
lea ebx, [edx + edx]
jl 0x8eaae0
sub ecx, eax
add ebx, 1
lea eax, [ebx*4 + 1]
shl eax, 4
cmp ecx, eax
lea edx, [ebx + ebx]
jl 0x8eaaf6
sub ecx, eax
add edx, 1
lea eax, [edx*4 + 1]
shl eax, 2
cmp ecx, eax
lea ebx, [edx + edx]
jl 0x8eab0c
sub ecx, eax
add ebx, 1
lea eax, [ebx*4 + 1]
cmp eax, ecx
setle al
movzx eax, al
lea edx, [eax + ebx*2]
jmp 0x8ea358
xor eax, eax
cmp ebx, 0x3fffffff
jg 0x8eae5c
lea edx, [eax + eax]
shl eax, 2
add eax, 1
shl eax, 0x1c
cmp ebx, eax
jl 0x8eab46
sub ebx, eax
add edx, 1
lea eax, [edx*4 + 1]
shl eax, 0x1a
cmp ebx, eax
lea esi, [edx + edx]
jl 0x8eab5c
sub ebx, eax
add esi, 1
lea eax, [esi*4 + 1]
shl eax, 0x18
cmp ebx, eax
lea edx, [esi + esi]
jl 0x8eab72
sub ebx, eax
add edx, 1
lea eax, [edx*4 + 1]
shl eax, 0x16
cmp ebx, eax
lea esi, [edx + edx]
jl 0x8eab88
sub ebx, eax
add esi, 1
lea eax, [esi*4 + 1]
shl eax, 0x14
cmp ebx, eax
lea edx, [esi + esi]
jl 0x8eab9e
sub ebx, eax
add edx, 1
lea eax, [edx*4 + 1]
shl eax, 0x12
cmp ebx, eax
lea esi, [edx + edx]
jl 0x8eabb4
sub ebx, eax
add esi, 1
lea eax, [esi*4 + 1]
shl eax, 0x10
cmp ebx, eax
lea edx, [esi + esi]
jl 0x8eabca
sub ebx, eax
add edx, 1
lea eax, [edx*4 + 1]
shl eax, 0xe
cmp ebx, eax
lea esi, [edx + edx]
jl 0x8eabe0
sub ebx, eax
add esi, 1
lea eax, [esi*4 + 1]
shl eax, 0xc
cmp ebx, eax
lea edx, [esi + esi]
jl 0x8eabf6
sub ebx, eax
add edx, 1
lea eax, [edx*4 + 1]
shl eax, 0xa
cmp ebx, eax
lea esi, [edx + edx]
jl 0x8eac0c
sub ebx, eax
add esi, 1
lea eax, [esi*4 + 1]
shl eax, 8
cmp ebx, eax
lea edx, [esi + esi]
jl 0x8eac22
sub ebx, eax
add edx, 1
lea eax, [edx*4 + 1]
shl eax, 6
cmp ebx, eax
lea esi, [edx + edx]
jl 0x8eac38
sub ebx, eax
add esi, 1
lea eax, [esi*4 + 1]
shl eax, 4
cmp ebx, eax
lea edx, [esi + esi]
jl 0x8eac4e
sub ebx, eax
add edx, 1
lea eax, [edx*4 + 1]
shl eax, 2
cmp ebx, eax
lea esi, [edx + edx]
jl 0x8eac64
sub ebx, eax
add esi, 1
lea eax, [esi*4 + 1]
cmp eax, ebx
setle al
movzx eax, al
lea esi, [eax + esi*2]
jmp 0x8ea348
cmp esi, 0x7f
movzx ebx, byte [ecx + 0xbccd60]
jle 0x8ea5fb
xor eax, eax
cmp esi, 0x3fffffff
jle 0x8eac9d
sub esi, 0x40000000
mov al, 1
lea edx, [eax + eax]
shl eax, 2
add eax, 1
shl eax, 0x1c
cmp esi, eax
jl 0x8eacb2
sub esi, eax
add edx, 1
lea eax, [edx*4 + 1]
shl eax, 0x1a
cmp esi, eax
lea ecx, [edx + edx]
jl 0x8eacc8
sub esi, eax
add ecx, 1
lea eax, [ecx*4 + 1]
shl eax, 0x18
cmp esi, eax
lea edx, [ecx + ecx]
jl 0x8eacde
sub esi, eax
add edx, 1
lea eax, [edx*4 + 1]
shl eax, 0x16
cmp esi, eax
lea ecx, [edx + edx]
jl 0x8eacf4
sub esi, eax
add ecx, 1
lea eax, [ecx*4 + 1]
shl eax, 0x14
cmp esi, eax
lea edx, [ecx + ecx]
jl 0x8ead0a
sub esi, eax
add edx, 1
lea eax, [edx*4 + 1]
shl eax, 0x12
cmp esi, eax
lea ecx, [edx + edx]
jl 0x8ead20
sub esi, eax
add ecx, 1
lea eax, [ecx*4 + 1]
shl eax, 0x10
cmp esi, eax
lea edx, [ecx + ecx]
jl 0x8ead36
sub esi, eax
add edx, 1
lea eax, [edx*4 + 1]
shl eax, 0xe
cmp esi, eax
lea ecx, [edx + edx]
jl 0x8ead4c
sub esi, eax
add ecx, 1
lea eax, [ecx*4 + 1]
shl eax, 0xc
cmp esi, eax
lea edx, [ecx + ecx]
jl 0x8ead62
sub esi, eax
add edx, 1
lea eax, [edx*4 + 1]
shl eax, 0xa
cmp esi, eax
lea ecx, [edx + edx]
jl 0x8ead78
sub esi, eax
add ecx, 1
lea eax, [ecx*4 + 1]
shl eax, 8
cmp esi, eax
lea edx, [ecx + ecx]
jl 0x8ead8e
sub esi, eax
add edx, 1
lea eax, [edx*4 + 1]
shl eax, 6
cmp esi, eax
lea ecx, [edx + edx]
jl 0x8eada4
sub esi, eax
add ecx, 1
lea eax, [ecx*4 + 1]
shl eax, 4
cmp esi, eax
lea edx, [ecx + ecx]
jl 0x8eadba
sub esi, eax
add edx, 1
lea eax, [edx*4 + 1]
shl eax, 2
cmp esi, eax
lea ecx, [edx + edx]
jl 0x8eadd0
sub esi, eax
add ecx, 1
lea eax, [ecx*4 + 1]
cmp eax, esi
setle al
movzx eax, al
lea edx, [eax + ecx*2]
jmp 0x8ea602
mov ecx, eax
jmp 0x8ea47e
cmp esi, dword [eax + 0x27c]
jge 0x8ea227
mov eax, dword [esp + 0xe8]
imul eax, dword [edi + 0x98]
mov edx, dword [edi + 0x1824]
add eax, dword [esp + 0xe4]
movzx eax, word [edx + eax*2]
mov dword [esp + 0x48], eax
jmp 0x8ea22f
cmp edx, eax
jge 0x8ea837
cmp esi, edx
mov eax, esi
jge 0x8ea837
mov eax, edx
jmp 0x8ea837
mov al, 1
sub ecx, 0x40000000
lea edx, [eax + eax]
shl eax, 2
add eax, 1
shl eax, 0x1c
cmp ecx, eax
jl 0x8ea9ee
jmp 0x8ea9e9
mov al, 1
sub ebx, 0x40000000
lea edx, [eax + eax]
shl eax, 2
add eax, 1
shl eax, 0x1c
cmp ebx, eax
jl 0x8eab46
jmp 0x8eab41
lea eax, [edx*4]
sar eax, 7
jmp 0x8ea053
mov eax, 1
jmp 0x8ea053
lea eax, [edx + edx*2]
sar eax, 8
jmp 0x8ea053
mov eax, ebx
sar eax, 7
jmp 0x8ea053
lea eax, [edx*4]
sar eax, 7
jmp 0x8ea070
mov eax, 1
jmp 0x8ea070
lea eax, [edx + edx*2]
sar eax, 8
jmp 0x8ea070
mov eax, ebx
sar eax, 7
jmp 0x8ea070
lea eax, [edx*4]
sar eax, 7
jmp 0x8ea090
mov eax, 1
jmp 0x8ea090
lea eax, [edx + edx*2]
sar eax, 8
jmp 0x8ea090
mov eax, ebx
sar eax, 7
jmp 0x8ea090
cmp dword [esp + 0x54], 0xa00
jle 0x8ea674
mov ebx, dword [esp + 0x44]
mov eax, edi
mov ecx, dword [esp + 0xc4]
mov edx, dword [esp + 0xc8]
mov dword [esp], ebx
call fcn.008c5ef0
cmp eax, 0x7fffffff
je 0x8eaf3b
or ebp, 4
mov eax, dword [edi + 0x98]
imul eax, dword [edi + 0x1818]
mov edx, dword [edi + 0x14d4]
mov esi, dword [esp + 0xc4]
add eax, dword [edi + 0x1814]
mov ebx, dword [esp + 0xc8]
shl eax, 2
mov word [eax + edx + 2], si
mov word [edx + eax], bx
jmp 0x8ea6e9
cmp ecx, edx
jge 0x8ea863
cmp eax, ecx
mov edx, eax
jge 0x8ea863
mov edx, ecx
jmp 0x8ea863
mov ebx, dword [esp + 0x40]
lea eax, [esp + 0xc4]
or ebp, 2
mov dword [esp + 8], eax
lea eax, [esp + 0xc8]
mov dword [esp + 0x1c], 0x10
mov dword [esp + 0x18], 0
mov dword [esp + 0x14], 0
mov dword [esp + 0x10], 0
mov dword [esp + 0xc], ebx
mov dword [esp + 4], eax
mov dword [esp], edi
call dword [edi + 0x1808]
mov eax, dword [edi + 0x38]
test al, 0x40
je 0x8ea658
mov ebx, dword [esp + 0xc8]
test ebx, ebx
jne 0x8eaffb
mov ecx, dword [esp + 0xc4]
test ecx, ecx
je 0x8ea658
or ebp, 8
jmp 0x8ea658
xor eax, eax
cmp ebp, 0x10
setl al
sub eax, 1
and eax, 0xfffffff1
mov dword [edi + 0x1744], eax
xor eax, eax
cmp dword [esp + 0x4c], 0x10
setl al
sub eax, 1
and eax, 0xfffffff1
mov dword [edi + 0x174c], eax
mov eax, dword [edi + 0x90]
shl eax, 4
sub eax, 0x10
cmp ebp, eax
setge al
movzx eax, al
sub eax, 1
and eax, 0xf
mov dword [edi + 0x1748], eax
mov eax, dword [edi + 0x94]
shl eax, 4
sub eax, 0x10
cmp dword [esp + 0x4c], eax
setge al
movzx eax, al
sub eax, 1
and eax, 0xf
mov dword [edi + 0x1750], eax
jmp 0x8ea11b
xor eax, eax
cmp ecx, 0x3fffffff
jg 0x8eb49c
lea edx, [eax + eax]
shl eax, 2
add eax, 1
shl eax, 0x1c
cmp ecx, eax
jl 0x8eb097
sub ecx, eax
add edx, 1
lea eax, [edx*4 + 1]
shl eax, 0x1a
cmp ecx, eax
lea ebx, [edx + edx]
jl 0x8eb0ad
sub ecx, eax
add ebx, 1
lea eax, [ebx*4 + 1]
shl eax, 0x18
cmp ecx, eax
lea edx, [ebx + ebx]
jl 0x8eb0c3
sub ecx, eax
add edx, 1
lea eax, [edx*4 + 1]
shl eax, 0x16
cmp ecx, eax
lea ebx, [edx + edx]
jl 0x8eb0d9
sub ecx, eax
add ebx, 1
lea eax, [ebx*4 + 1]
shl eax, 0x14
cmp ecx, eax
lea edx, [ebx + ebx]
jl 0x8eb0ef
sub ecx, eax
add edx, 1
lea eax, [edx*4 + 1]
shl eax, 0x12
cmp ecx, eax
lea ebx, [edx + edx]
jl 0x8eb105
sub ecx, eax
add ebx, 1
lea eax, [ebx*4 + 1]
shl eax, 0x10
cmp ecx, eax
lea edx, [ebx + ebx]
jl 0x8eb11b
sub ecx, eax
add edx, 1
lea eax, [edx*4 + 1]
shl eax, 0xe
cmp ecx, eax
lea ebx, [edx + edx]
jl 0x8eb131
sub ecx, eax
add ebx, 1
lea eax, [ebx*4 + 1]
shl eax, 0xc
cmp ecx, eax
lea edx, [ebx + ebx]
jl 0x8eb147
sub ecx, eax
add edx, 1
lea eax, [edx*4 + 1]
shl eax, 0xa
cmp ecx, eax
lea ebx, [edx + edx]
jl 0x8eb15d
sub ecx, eax
add ebx, 1
lea eax, [ebx*4 + 1]
shl eax, 8
cmp ecx, eax
lea edx, [ebx + ebx]
jl 0x8eb173
sub ecx, eax
add edx, 1
lea eax, [edx*4 + 1]
shl eax, 6
cmp ecx, eax
lea ebx, [edx + edx]
jl 0x8eb189
sub ecx, eax
add ebx, 1
lea eax, [ebx*4 + 1]
shl eax, 4
cmp ecx, eax
lea edx, [ebx + ebx]
jl 0x8eb19f
sub ecx, eax
add edx, 1
lea eax, [edx*4 + 1]
shl eax, 2
cmp ecx, eax
lea ebx, [edx + edx]
jl 0x8eb1b5
sub ecx, eax
add ebx, 1
lea eax, [ebx*4 + 1]
cmp eax, ecx
setle al
movzx eax, al
lea edx, [eax + ebx*2]
jmp 0x8ea938
xor eax, eax
cmp ebx, 0x3fffffff
jg 0x8eb48f
lea edx, [eax + eax]
shl eax, 2
add eax, 1
shl eax, 0x1c
cmp ebx, eax
jl 0x8eb1ef
sub ebx, eax
add edx, 1
lea eax, [edx*4 + 1]
shl eax, 0x1a
cmp ebx, eax
lea esi, [edx + edx]
jl 0x8eb205
sub ebx, eax
add esi, 1
lea eax, [esi*4 + 1]
shl eax, 0x18
cmp ebx, eax
lea edx, [esi + esi]
jl 0x8eb21b
sub ebx, eax
add edx, 1
lea eax, [edx*4 + 1]
shl eax, 0x16
cmp ebx, eax
lea esi, [edx + edx]
jl 0x8eb231
sub ebx, eax
add esi, 1
lea eax, [esi*4 + 1]
shl eax, 0x14
cmp ebx, eax
lea edx, [esi + esi]
jl 0x8eb247
sub ebx, eax
add edx, 1
lea eax, [edx*4 + 1]
shl eax, 0x12
cmp ebx, eax
lea esi, [edx + edx]
jl 0x8eb25d
sub ebx, eax
add esi, 1
lea eax, [esi*4 + 1]
shl eax, 0x10
cmp ebx, eax
lea edx, [esi + esi]
jl 0x8eb273
sub ebx, eax
add edx, 1
lea eax, [edx*4 + 1]
shl eax, 0xe
cmp ebx, eax
lea esi, [edx + edx]
jl 0x8eb289
sub ebx, eax
add esi, 1
lea eax, [esi*4 + 1]
shl eax, 0xc
cmp ebx, eax
lea edx, [esi + esi]
jl 0x8eb29f
sub ebx, eax
add edx, 1
lea eax, [edx*4 + 1]
shl eax, 0xa
cmp ebx, eax
lea esi, [edx + edx]
jl 0x8eb2b5
sub ebx, eax
add esi, 1
lea eax, [esi*4 + 1]
shl eax, 8
cmp ebx, eax
lea edx, [esi + esi]
jl 0x8eb2cb
sub ebx, eax
add edx, 1
lea eax, [edx*4 + 1]
shl eax, 6
cmp ebx, eax
lea esi, [edx + edx]
jl 0x8eb2e1
sub ebx, eax
add esi, 1
lea eax, [esi*4 + 1]
shl eax, 4
cmp ebx, eax
lea edx, [esi + esi]
jl 0x8eb2f7
sub ebx, eax
add edx, 1
lea eax, [edx*4 + 1]
shl eax, 2
cmp ebx, eax
lea esi, [edx + edx]
jl 0x8eb30d
sub ebx, eax
add esi, 1
lea eax, [esi*4 + 1]
cmp eax, ebx
setle al
movzx eax, al
lea esi, [eax + esi*2]
jmp 0x8ea928
mov ecx, dword [esp + 0x40]
lea eax, [esp + 0xc4]
mov dword [esp + 8], eax
lea eax, [esp + 0xc8]
mov dword [esp + 0x1c], 0x10
mov dword [esp + 0x18], 0
mov dword [esp + 0xc], ecx
mov dword [esp + 0x14], 0
mov dword [esp + 0x10], 0
mov dword [esp + 4], eax
mov dword [esp], edi
call dword [edi + 0x1808]
mov eax, dword [edi + 0x98]
imul eax, dword [edi + 0x1818]
mov esi, dword [esp + 0xc4]
mov ebx, dword [esp + 0xc8]
mov edx, dword [edi + 0x14d4]
add eax, dword [edi + 0x1814]
shl eax, 2
mov word [edx + eax], bx
mov word [eax + edx + 2], si
mov edx, dword [edi + 0x1828]
mov eax, dword [edi + 0x618]
lea ecx, [edx*4]
add edx, dword [edi + 0x9c]
mov word [eax + ecx], bx
mov word [ecx + eax + 2], si
mov word [ecx + eax + 4], bx
shl edx, 2
mov word [ecx + eax + 6], si
mov ecx, 2
mov word [eax + edx], bx
mov word [edx + eax + 2], si
mov word [edx + eax + 4], bx
mov word [edx + eax + 6], si
jmp 0x8ea3a8
mov eax, dword [esp + 0x88]
mov dword [edi + 0x1758], edx
mov dword [edi + 0x1754], eax
jmp 0x8ea962
mov dword [esp + 8], eax
mov eax, dword [esp + 0xc8]
lea ecx, [edi + 0x14ec]
xor edx, edx
mov dword [esp + 0xc], 1
mov dword [esp + 4], eax
lea eax, [edi + 0x151c]
mov dword [esp], eax
mov eax, edi
call fcn.008b82d0
mov ecx, 0x100
jmp 0x8ea3a8
mov edx, dword [esp + 0xc8]
mov ecx, eax
mov eax, edi
mov ebx, dword [esp + 0x44]
mov dword [esp], ebx
call fcn.008c5ef0
mov eax, dword [edi + 0x98]
imul eax, dword [edi + 0x1818]
mov ecx, dword [edi + 0x14d4]
mov edx, dword [esp + 0xc8]
add eax, dword [edi + 0x1814]
shl eax, 2
mov word [ecx + eax], dx
mov edx, dword [esp + 0xc4]
mov word [eax + ecx + 2], dx
mov ecx, 4
jmp 0x8ea3a8
sub ebx, 0x40000000
mov al, 1
jmp 0x8eb1da
sub ecx, 0x40000000
mov al, 1
jmp 0x8eb082
mov eax, dword [esp + 0x40]
mov dword [esp + 0x1c], 0x10
mov dword [esp + 0x18], 0
mov dword [esp + 0x14], 0
mov dword [esp + 0xc], eax
lea eax, [esp + 0xc4]
mov dword [esp + 8], eax
lea eax, [esp + 0xc8]
mov dword [esp + 0x10], 0
mov dword [esp + 4], eax
mov dword [esp], edi
call dword [edi + 0x1808]
mov edx, dword [edi + 0x16b4]
mov dword [esp + 0x58], eax
mov eax, dword [edx + 0x1d4]
cmp eax, dword [edx + 0x1d8]
je 0x8eb516
mov eax, dword [edi + 0x16b8]
test eax, eax
je 0x8ebd1a
mov edx, dword [edi + 0x38]
test dl, 4
je 0x8eb540
mov eax, dword [edi + 0x16b8]
test eax, eax
jne 0x8eb540
cmp dword [esp + 0x38], 0x3200
jle 0x8eb540
cmp dword [esp + 0x54], 0xa00
jg 0x8ebdba
mov dword [esp + 0x50], 2
and edx, 0x20000000
je 0x8eb55e
mov eax, dword [edi + 0x16b8]
test eax, eax
je 0x8ebd69
mov eax, dword [edi + 0x98]
imul eax, dword [edi + 0x1818]
add eax, dword [edi + 0x1814]
mov edx, dword [edi + 0x14d4]
mov ebp, dword [esp + 0xc4]
mov esi, dword [esp + 0xc8]
shl eax, 2
cmp dword [esp + 0x50], 4
mov word [eax + edx + 2], bp
mov word [edx + eax], si
je 0x8eb5da
mov eax, dword [edi + 0x1828]
mov edx, dword [edi + 0x618]
lea ecx, [eax*4]
add eax, dword [edi + 0x9c]
mov word [edx + ecx], si
mov word [ecx + edx + 2], bp
shl eax, 2
mov word [ecx + edx + 4], si
mov word [ecx + edx + 6], bp
mov word [edx + eax], si
mov word [eax + edx + 2], bp
mov word [eax + edx + 4], si
mov word [eax + edx + 6], bp
mov eax, dword [edi + 0x16b4]
cmp byte [eax + 0x1d8], 1
je 0x8ebcb7
imul ecx, ebx, 0x1010101
mov ebx, dword [edi + 0x16fc]
mov dword [ebx], ecx
mov dword [ebx + 4], ecx
mov dword [ebx + 8], ecx
mov dword [ebx + 0xc], ecx
mov eax, dword [edi + 0xb0]
mov dword [ebx + eax], ecx
mov eax, dword [edi + 0xb0]
mov dword [eax + ebx + 4], ecx
mov eax, dword [edi + 0xb0]
mov dword [eax + ebx + 8], ecx
mov eax, dword [edi + 0xb0]
mov dword [eax + ebx + 0xc], ecx
mov eax, dword [edi + 0xb0]
mov dword [ebx + eax*2], ecx
mov eax, dword [edi + 0xb0]
mov dword [ebx + eax*2 + 4], ecx
mov eax, dword [edi + 0xb0]
mov dword [ebx + eax*2 + 8], ecx
mov eax, dword [edi + 0xb0]
mov dword [ebx + eax*2 + 0xc], ecx
mov eax, dword [edi + 0xb0]
lea eax, [eax + eax*2]
mov dword [eax + ebx], ecx
mov eax, dword [edi + 0xb0]
lea eax, [eax + eax*2]
mov dword [ebx + eax + 4], ecx
mov eax, dword [edi + 0xb0]
lea eax, [eax + eax*2]
mov dword [ebx + eax + 8], ecx
mov eax, dword [edi + 0xb0]
lea eax, [eax + eax*2]
mov dword [ebx + eax + 0xc], ecx
mov eax, dword [edi + 0xb0]
mov dword [ebx + eax*4], ecx
mov eax, dword [edi + 0xb0]
mov dword [ebx + eax*4 + 4], ecx
mov eax, dword [edi + 0xb0]
mov dword [ebx + eax*4 + 8], ecx
mov eax, dword [edi + 0xb0]
mov dword [ebx + eax*4 + 0xc], ecx
mov eax, dword [edi + 0xb0]
lea eax, [eax + eax*4]
mov dword [eax + ebx], ecx
mov eax, dword [edi + 0xb0]
lea eax, [eax + eax*4]
mov dword [ebx + eax + 4], ecx
mov eax, dword [edi + 0xb0]
lea eax, [eax + eax*4]
mov dword [ebx + eax + 8], ecx
mov eax, dword [edi + 0xb0]
lea eax, [eax + eax*4]
mov dword [ebx + eax + 0xc], ecx
mov eax, dword [edi + 0xb0]
lea eax, [eax + eax*2]
mov dword [ebx + eax*2], ecx
mov eax, dword [edi + 0xb0]
lea eax, [eax + eax*2]
mov dword [ebx + eax*2 + 4], ecx
mov eax, dword [edi + 0xb0]
lea eax, [eax + eax*2]
mov dword [ebx + eax*2 + 8], ecx
mov eax, dword [edi + 0xb0]
lea eax, [eax + eax*2]
mov dword [ebx + eax*2 + 0xc], ecx
mov edx, dword [edi + 0xb0]
lea eax, [edx*8]
sub eax, edx
mov dword [eax + ebx], ecx
mov edx, dword [edi + 0xb0]
lea eax, [edx*8]
sub eax, edx
mov dword [ebx + eax + 4], ecx
mov edx, dword [edi + 0xb0]
lea eax, [edx*8]
sub eax, edx
mov dword [ebx + eax + 8], ecx
mov edx, dword [edi + 0xb0]
lea eax, [edx*8]
sub eax, edx
mov dword [ebx + eax + 0xc], ecx
mov eax, dword [edi + 0xb0]
mov dword [ebx + eax*8], ecx
mov eax, dword [edi + 0xb0]
mov dword [ebx + eax*8 + 4], ecx
mov eax, dword [edi + 0xb0]
mov dword [ebx + eax*8 + 8], ecx
mov eax, dword [edi + 0xb0]
mov dword [ebx + eax*8 + 0xc], ecx
mov eax, dword [edi + 0xb0]
lea eax, [eax + eax*8]
mov dword [eax + ebx], ecx
mov eax, dword [edi + 0xb0]
lea eax, [eax + eax*8]
mov dword [ebx + eax + 4], ecx
mov eax, dword [edi + 0xb0]
lea eax, [eax + eax*8]
mov dword [ebx + eax + 8], ecx
mov eax, dword [edi + 0xb0]
lea eax, [eax + eax*8]
mov dword [ebx + eax + 0xc], ecx
mov eax, dword [edi + 0xb0]
lea eax, [eax + eax*4]
mov dword [ebx + eax*2], ecx
mov eax, dword [edi + 0xb0]
lea eax, [eax + eax*4]
mov dword [ebx + eax*2 + 4], ecx
mov eax, dword [edi + 0xb0]
lea eax, [eax + eax*4]
mov dword [ebx + eax*2 + 8], ecx
mov eax, dword [edi + 0xb0]
lea eax, [eax + eax*4]
mov dword [ebx + eax*2 + 0xc], ecx
mov eax, dword [edi + 0xb0]
lea edx, [eax + eax*4]
lea edx, [eax + edx*2]
mov dword [edx + ebx], ecx
mov eax, dword [edi + 0xb0]
lea edx, [eax + eax*4]
lea edx, [eax + edx*2]
mov dword [ebx + edx + 4], ecx
mov eax, dword [edi + 0xb0]
lea edx, [eax + eax*4]
lea edx, [eax + edx*2]
mov dword [ebx + edx + 8], ecx
mov eax, dword [edi + 0xb0]
lea edx, [eax + eax*4]
lea edx, [eax + edx*2]
mov dword [ebx + edx + 0xc], ecx
mov eax, dword [edi + 0xb0]
lea eax, [eax + eax*2]
mov dword [ebx + eax*4], ecx
mov eax, dword [edi + 0xb0]
lea eax, [eax + eax*2]
mov dword [ebx + eax*4 + 4], ecx
mov eax, dword [edi + 0xb0]
lea eax, [eax + eax*2]
mov dword [ebx + eax*4 + 8], ecx
mov eax, dword [edi + 0xb0]
lea eax, [eax + eax*2]
mov dword [ebx + eax*4 + 0xc], ecx
mov eax, dword [edi + 0xb0]
lea edx, [eax + eax*2]
lea edx, [eax + edx*4]
mov dword [edx + ebx], ecx
mov eax, dword [edi + 0xb0]
lea edx, [eax + eax*2]
lea edx, [eax + edx*4]
mov dword [ebx + edx + 4], ecx
mov eax, dword [edi + 0xb0]
lea edx, [eax + eax*2]
lea edx, [eax + edx*4]
mov dword [ebx + edx + 8], ecx
mov eax, dword [edi + 0xb0]
lea edx, [eax + eax*2]
lea edx, [eax + edx*4]
mov dword [ebx + edx + 0xc], ecx
imul eax, dword [edi + 0xb0], 0xe
mov dword [eax + ebx], ecx
imul eax, dword [edi + 0xb0], 0xe
mov dword [ebx + eax + 4], ecx
imul eax, dword [edi + 0xb0], 0xe
mov dword [ebx + eax + 8], ecx
imul eax, dword [edi + 0xb0], 0xe
mov dword [ebx + eax + 0xc], ecx
mov edx, dword [edi + 0xb0]
mov eax, edx
shl eax, 4
sub eax, edx
mov dword [eax + ebx], ecx
mov edx, dword [edi + 0xb0]
mov eax, edx
shl eax, 4
sub eax, edx
mov dword [ebx + eax + 4], ecx
mov edx, dword [edi + 0xb0]
mov eax, edx
shl eax, 4
sub eax, edx
mov dword [ebx + eax + 8], ecx
mov edx, dword [edi + 0xb0]
mov eax, edx
shl eax, 4
sub eax, edx
mov edx, dword [esp + 0x3c]
mov dword [ebx + eax + 0xc], ecx
mov dword [esp + 0x10], 0x10
mov eax, dword [edi + 0xb0]
mov dword [esp + 4], ebx
mov dword [esp + 8], edx
mov dword [esp], edi
mov dword [esp + 0xc], eax
call dword [edi + 0x9e4]
mov edx, eax
mov eax, dword [edi + 0x172c]
shl eax, 4
lea eax, [edx + eax]
cmp dword [esp + 0x58], eax
jle 0x8eb9d8
mov eax, dword [esp + 0xe8]
imul eax, dword [edi + 0x98]
mov edx, dword [edi + 0x620]
add eax, dword [esp + 0xe4]
mov dword [esp + 0x50], 1
mov dword [edx + eax*4], 1
mov edx, dword [edi + 0x814]
mov ecx, dword [esp + 0x38]
mov ebx, dword [esp + 0x54]
shr edx, 7
imul eax, edx, 0x64
lea eax, [ecx + eax - 0x1f4]
cmp ebx, eax
jbe 0x8eb993
mov ebx, eax
lea eax, [edx + edx*4]
mov edx, dword [esp + 0x38]
cmp ebx, 0x7f
mov ebp, dword [edi + 0x17ec]
lea ecx, [edx + eax*4 - 0x1f4]
jg 0x8ebb5b
movzx esi, byte [ebx + 0xbccd60]
cmp ecx, 0x7f
jg 0x8eb9ff
movzx edx, byte [ecx + 0xbccd60]
movzx ecx, word [esp + 0x50]
lea eax, [esi + ebp]
sub eax, edx
mov dword [edi + 0x17ec], eax
jmp 0x8ea3a8
mov eax, dword [esp + 0xe8]
imul eax, dword [edi + 0x98]
mov edx, dword [edi + 0x620]
add eax, dword [esp + 0xe4]
mov dword [edx + eax*4], 0
jmp 0x8eb972
xor eax, eax
cmp ecx, 0x3fffffff
jle 0x8eba11
sub ecx, 0x40000000
mov al, 1
lea edx, [eax + eax]
shl eax, 2
add eax, 1
shl eax, 0x1c
cmp ecx, eax
jl 0x8eba26
sub ecx, eax
add edx, 1
lea eax, [edx*4 + 1]
shl eax, 0x1a
cmp ecx, eax
lea ebx, [edx + edx]
jl 0x8eba3c
sub ecx, eax
add ebx, 1
lea eax, [ebx*4 + 1]
shl eax, 0x18
cmp ecx, eax
lea edx, [ebx + ebx]
jl 0x8eba52
sub ecx, eax
add edx, 1
lea eax, [edx*4 + 1]
shl eax, 0x16
cmp ecx, eax
lea ebx, [edx + edx]
jl 0x8eba68
sub ecx, eax
add ebx, 1
lea eax, [ebx*4 + 1]
shl eax, 0x14
cmp ecx, eax
lea edx, [ebx + ebx]
jl 0x8eba7e
sub ecx, eax
add edx, 1
lea eax, [edx*4 + 1]
shl eax, 0x12
cmp ecx, eax
lea ebx, [edx + edx]
jl 0x8eba94
sub ecx, eax
add ebx, 1
lea eax, [ebx*4 + 1]
shl eax, 0x10
cmp ecx, eax
lea edx, [ebx + ebx]
jl 0x8ebaaa
sub ecx, eax
add edx, 1
lea eax, [edx*4 + 1]
shl eax, 0xe
cmp ecx, eax
lea ebx, [edx + edx]
jl 0x8ebac0
sub ecx, eax
add ebx, 1
lea eax, [ebx*4 + 1]
shl eax, 0xc
cmp ecx, eax
lea edx, [ebx + ebx]
jl 0x8ebad6
sub ecx, eax
add edx, 1
lea eax, [edx*4 + 1]
shl eax, 0xa
cmp ecx, eax
lea ebx, [edx + edx]
jl 0x8ebaec
sub ecx, eax
add ebx, 1
lea eax, [ebx*4 + 1]
shl eax, 8
cmp ecx, eax
lea edx, [ebx + ebx]
jl 0x8ebb02
sub ecx, eax
add edx, 1
lea eax, [edx*4 + 1]
shl eax, 6
cmp ecx, eax
lea ebx, [edx + edx]
jl 0x8ebb18
sub ecx, eax
add ebx, 1
lea eax, [ebx*4 + 1]
shl eax, 4
cmp ecx, eax
lea edx, [ebx + ebx]
jl 0x8ebb2e
sub ecx, eax
add edx, 1
lea eax, [edx*4 + 1]
shl eax, 2
cmp ecx, eax
lea ebx, [edx + edx]
jl 0x8ebb44
sub ecx, eax
add ebx, 1
lea eax, [ebx*4 + 1]
cmp eax, ecx
setle al
movzx eax, al
lea edx, [eax + ebx*2]
jmp 0x8eb9c3
xor eax, eax
cmp ebx, 0x3fffffff
jle 0x8ebb6d
sub ebx, 0x40000000
mov al, 1
lea edx, [eax + eax]
shl eax, 2
add eax, 1
shl eax, 0x1c
cmp ebx, eax
jl 0x8ebb82
sub ebx, eax
add edx, 1
lea eax, [edx*4 + 1]
shl eax, 0x1a
cmp ebx, eax
lea esi, [edx + edx]
jl 0x8ebb98
sub ebx, eax
add esi, 1
lea eax, [esi*4 + 1]
shl eax, 0x18
cmp ebx, eax
lea edx, [esi + esi]
jl 0x8ebbae
sub ebx, eax
add edx, 1
lea eax, [edx*4 + 1]
shl eax, 0x16
cmp ebx, eax
lea esi, [edx + edx]
jl 0x8ebbc4
sub ebx, eax
add esi, 1
lea eax, [esi*4 + 1]
shl eax, 0x14
cmp ebx, eax
lea edx, [esi + esi]
jl 0x8ebbda
sub ebx, eax
add edx, 1
lea eax, [edx*4 + 1]
shl eax, 0x12
cmp ebx, eax
lea esi, [edx + edx]
jl 0x8ebbf0
sub ebx, eax
add esi, 1
lea eax, [esi*4 + 1]
shl eax, 0x10
cmp ebx, eax
lea edx, [esi + esi]
jl 0x8ebc06
sub ebx, eax
add edx, 1
lea eax, [edx*4 + 1]
shl eax, 0xe
cmp ebx, eax
lea esi, [edx + edx]
jl 0x8ebc1c
sub ebx, eax
add esi, 1
lea eax, [esi*4 + 1]
shl eax, 0xc
cmp ebx, eax
lea edx, [esi + esi]
jl 0x8ebc32
sub ebx, eax
add edx, 1
lea eax, [edx*4 + 1]
shl eax, 0xa
cmp ebx, eax
lea esi, [edx + edx]
jl 0x8ebc48
sub ebx, eax
add esi, 1
lea eax, [esi*4 + 1]
shl eax, 8
cmp ebx, eax
lea edx, [esi + esi]
jl 0x8ebc5e
sub ebx, eax
add edx, 1
lea eax, [edx*4 + 1]
shl eax, 6
cmp ebx, eax
lea esi, [edx + edx]
jl 0x8ebc74
sub ebx, eax
add esi, 1
lea eax, [esi*4 + 1]
shl eax, 4
cmp ebx, eax
lea edx, [esi + esi]
jl 0x8ebc8a
sub ebx, eax
add edx, 1
lea eax, [edx*4 + 1]
shl eax, 2
cmp ebx, eax
lea esi, [edx + edx]
jl 0x8ebca0
sub ebx, eax
add esi, 1
lea eax, [esi*4 + 1]
cmp eax, ebx
setle al
movzx eax, al
lea esi, [eax + esi*2]
jmp 0x8eb9b7
mov edx, dword [esp + 0x38]
sub edx, 0x1f4
jmp 0x8eb932
mov dword [esp + 8], 0x498
mov dword [esp + 4], 0xbae5d0
mov dword [esp], 0xbaf204
call sub.msvcrt.dll__assert
mov dword [esp + 8], 0x49a
mov dword [esp + 4], 0xbae5d0
mov dword [esp], 0xbaf24a
call sub.msvcrt.dll__assert
mov dword [esp + 8], 0x499
mov dword [esp + 4], 0xbae5d0
mov dword [esp], 0xbaf231
call sub.msvcrt.dll__assert
mov eax, dword [esp + 0xc4]
mov dword [esp + 0x1c], 1
mov dword [esp + 0x18], 0x10
mov dword [esp + 0x14], 0
mov dword [esp + 8], eax
mov eax, dword [esp + 0xc8]
mov dword [esp + 0x10], 0
mov dword [esp + 0xc], 0
mov dword [esp], edi
mov dword [esp + 4], eax
call fcn.008971f0
mov dword [esp + 0x58], eax
jmp 0x8eb516
mov eax, dword [esp + 0xc4]
xor edx, edx
lea ecx, [edi + 0x14ec]
mov dword [esp + 0xc], 0
mov dword [esp + 8], eax
mov eax, dword [esp + 0xc8]
mov dword [esp + 4], eax
lea eax, [edi + 0x151c]
mov dword [esp], eax
mov eax, edi
call fcn.008b82d0
cmp dword [esp + 0x58], eax
jle 0x8eb55e
mov dword [esp + 0x58], eax
mov dword [esp + 0x50], 0x100
jmp 0x8eb55e
mov eax, dword [esp + 0x44]
mov ecx, dword [esp + 0xc4]
mov edx, dword [esp + 0xc8]
mov dword [esp], eax
mov eax, edi
call fcn.008c5ef0
cmp dword [esp + 0x58], eax
jg 0x8ebdec
mov edx, dword [edi + 0x38]
mov dword [esp + 0x50], 2
jmp 0x8eb548
mov edx, dword [edi + 0x38]
mov dword [esp + 0x58], eax
mov dword [esp + 0x50], 4
jmp 0x8eb548