Function at 0xba6130
Capabilities:
Resolve function by parsing pe exports

Disassembly:
push ebp
mov eax, 0x294c
push edi
push esi
push ebx
call fcn.01087f10
sub esp, eax
mov eax, dword [esp + 0x2960]
mov dword [esp], eax
call fcn.00b99f30
lea edx, [esp + 0x94]
mov dword [esp], edx
mov dword [esp + 8], 0x280c
mov dword [esp + 4], 0
mov ebx, eax
call sub.msvcrt.dll_memset
mov eax, dword [esp + 0x2960]
mov edx, dword [esp + 0x2960]
mov dword [esp + 0x9c], ebx
mov dword [eax + 0x9e678], ebx
mov eax, dword [ebx*4 + 0x126c860]
mov dword [edx + 0x9e67c], eax
mov eax, dword [ebx*4 + 0x126c960]
mov edx, dword [edx + 0x38f84]
mov dword [esp + 0x94], eax
xor eax, eax
cmp edx, 1
sete al
xor esi, esi
lea eax, [eax + eax*2 + 1]
imul eax, dword [ebx*4 + 0x126ca60]
mov dword [esp + 0x98], eax
mov eax, dword [esp + 0x2960]
mov ebx, dword [eax + 0x194]
xor eax, eax
cmp ebx, 5
jle 0xba61ec
cmp edx, 1
mov al, 1
mov si, 1
je 0xba6b20
mov edi, dword [esp + 0x2960]
mov dword [esp + 0xa4], esi
mov ecx, dword [edi + 0x184]
mov dword [edi + 0x3a538], ebx
mov dword [edi + 0x3a534], ecx
mov edi, dword [edi + 0x19c]
xor ecx, ecx
test edi, edi
je 0xba6220
test edx, edx
je 0xba6590
mov ebp, dword [esp + 0x2960]
mov dword [esp + 0x114], 0x10000000
mov dword [esp + 0xd0], 0x10000000
mov dword [esp + 0xbc], 0x10000000
cmp dword [ebp + 0x1a8], 1
mov dword [ebp + 0x3a53c], ecx
mov ecx, 0
mov dword [ebp + 0x9d6ac], 0
cmovle eax, ecx
cmp edx, 2
mov dword [ebp + 0x3a540], eax
mov dword [ebp + 0x3a544], 0
mov dword [esp + 0xb4], 0x10000000
mov dword [esp + 0xac], 0x10000000
je 0xba6ad0
mov eax, dword [ebp + 0x18c]
mov ecx, ebp
mov edi, dword [ecx + 0x910]
sub eax, 0x10
mov dword [esp + 0x44], eax
mov eax, dword [ebp + 0x3a520]
mov dword [esp + 0x4c], edi
mov ebp, eax
neg ebp
mov dword [esp + 0x54], eax
mov eax, ebp
shl eax, 6
sub eax, 0x60
mov dword [ecx + 0x3a548], eax
mov ecx, dword [esp + 0x54]
not ecx
add ecx, dword [edi + 0x43c]
mov edi, dword [esp + 0x2960]
mov eax, ecx
shl eax, 6
add eax, 0x60
mov dword [edi + 0x3a550], eax
mov eax, dword [esp + 0x44]
mov edi, ebp
shl edi, 4
lea ebp, [edi - 8]
neg eax
cmp eax, ebp
mov dword [esp + 0x50], eax
jg 0xba630f
cmp ebp, dword [esp + 0x44]
cmovg ebp, dword [esp + 0x44]
mov dword [esp + 0x50], ebp
mov edi, dword [esp + 0x50]
shl ecx, 4
mov ebp, dword [esp + 0x2960]
mov dword [ebp + 0x3a568], edi
lea edi, [ecx + 8]
mov ecx, eax
cmp eax, edi
jg 0xba633e
mov ecx, dword [esp + 0x44]
cmp edi, dword [esp + 0x44]
mov ebp, dword [esp + 0x2960]
cmovle ecx, edi
mov dword [ebp + 0x3a570], ecx
lea ecx, [ecx*4 + 0x40]
mov edi, dword [esp + 0x50]
mov dword [ebp + 0x3a560], ecx
mov ecx, dword [esp + 0x54]
lea edi, [edi*4 - 0x40]
test ecx, ecx
mov dword [ebp + 0x3a558], edi
jne 0xba641f
mov edi, dword [ebp + 0x3a524]
mov ebp, edi
neg ebp
mov dword [esp + 0x48], ebp
mov ecx, ebp
mov ebp, dword [esp + 0x2960]
shl ecx, 6
sub ecx, 0x60
mov dword [ebp + 0x3a54c], ecx
mov ecx, edi
mov edi, dword [esp + 0x4c]
not ecx
add ecx, dword [edi + 0x440]
mov edi, dword [esp + 0x2960]
mov ebp, ecx
shl ebp, 6
add ebp, 0x60
mov dword [edi + 0x3a554], ebp
mov edi, dword [esp + 0x48]
shl edi, 4
lea ebp, [edi - 8]
mov edi, eax
cmp eax, ebp
jg 0xba63cf
mov edi, dword [esp + 0x44]
cmp ebp, dword [esp + 0x44]
cmovle edi, ebp
mov ebp, dword [esp + 0x2960]
shl ecx, 4
add ecx, 8
cmp eax, ecx
mov dword [ebp + 0x3a56c], edi
jg 0xba63f1
mov eax, dword [esp + 0x44]
cmp ecx, dword [esp + 0x44]
cmovle eax, ecx
mov ecx, dword [esp + 0x2960]
mov dword [ecx + 0x3a574], eax
lea ecx, [edi*4 - 0x40]
mov edi, dword [esp + 0x2960]
lea eax, [eax*4 + 0x40]
mov dword [edi + 0x3a55c], ecx
mov dword [edi + 0x3a564], eax
cmp edx, 1
mov dword [esp + 0x18c], 0x10000000
mov dword [esp + 0x180], 0x10000000
mov dword [esp + 0xdd0], 0x10000000
mov dword [esp + 0xb00], 0x10000000
mov dword [esp + 0x570], 0x10000000
mov dword [esp + 0xdd4], 0x10000000
mov dword [esp + 0xb04], 0x10000000
mov dword [esp + 0x574], 0x10000000
mov dword [esp + 0xdd8], 0x10000000
mov dword [esp + 0xb08], 0x10000000
mov dword [esp + 0x578], 0x10000000
mov dword [esp + 0xddc], 0x10000000
mov dword [esp + 0xb0c], 0x10000000
mov dword [esp + 0x57c], 0x10000000
mov dword [esp + 0x1414], 0x10000000
mov dword [esp + 0x1360], 0x10000000
je 0xba6940
mov eax, dword [esp + 0x2960]
mov edi, dword [esp + 0x2960]
mov ecx, dword [eax + 0x3a528]
mov eax, ecx
sub eax, dword [edi + 0x38f88]
cmp eax, 4
jle 0xba6562
test esi, esi
jne 0xba6562
cmp dword [edi + 0x3a5d0], 2
jbe 0xba6562
cmp dword [edi + 0x3a5cc], 2
jbe 0xba6562
cmp dword [edi + 0x3a5d4], 2
jbe 0xba6562
cmp dword [edi + 0x3a5d8], 2
jbe 0xba6562
test edx, edx
jne 0xba6537
mov esi, dword [edi + 0x39804]
mov esi, dword [esi + 0xc8]
cmp byte [esi + ecx], 2
jbe 0xba65a0
mov ebp, dword [esp + 0x2960]
mov ecx, dword [ebp + 0x9eef4]
add ecx, dword [ebp + 0x9eef8]
add ecx, dword [ebp + 0x9eefc]
lea ecx, [ecx + ecx*2]
cmp eax, ecx
jl 0xba6562
mov dword [esp + 0xa8], 1
test edx, edx
je 0xba65a0
cmp edx, 1
je 0xba7788
mov eax, dword [esp + 0x2960]
lea edx, [esp + 0x94]
call fcn.00b9bd20
add esp, 0x294c
pop ebx
pop esi
pop edi
pop ebp
ret
xor ecx, ecx
cmp ebx, 4
setg cl
jmp 0xba6220
mov eax, dword [esp + 0x2960]
mov dword [esp + 0xb0], 0
mov eax, dword [eax + 0x1ac]
test eax, eax
jne 0xba6a58
mov eax, dword [esp + 0x2960]
mov eax, dword [eax + 0x170]
mov dword [esp + 0x84], eax
lea eax, [esp + 0x94]
call fcn.00b9f700
mov edx, dword [esp + 0x2960]
mov dword [esp + 0x60], 0
mov ecx, dword [esp + 0x2960]
mov dword [esp + 0x293c], 0x7fffffff
mov dword [esp + 0x28a0], 0
mov eax, dword [edx + 0x39800]
lea edx, [esp + 0x293c]
mov dword [esp + 0x180], 0x7fffffff
cmp eax, 1
cmovle edx, dword [esp + 0x60]
test eax, eax
mov dword [esp + 0x60], edx
mov edx, dword [esp + 0xa0]
mov dword [esp + 0x28a4], edx
mov edx, dword [ecx + 0x9df38]
mov dword [esp + 0x28d8], edx
mov edx, dword [ecx + 0x9df3c]
mov dword [esp + 0x28dc], edx
mov edx, dword [ecx + 0x9dba0]
mov dword [esp + 0x28c8], edx
mov edx, dword [ecx + 0x9dba4]
mov dword [esp + 0x28cc], edx
mov edx, dword [ecx + 0x9dba8]
mov dword [esp + 0x28d0], edx
jle 0xba6b50
lea ebp, [esp + 0x190]
mov ebx, ecx
lea edi, [esp + 0x28e0]
add ecx, 0x9d60c
mov dword [esp + 0x48], ebp
lea esi, [esp + 0x28a0]
xor ebp, ebp
mov dword [esp + 0x64], edi
lea eax, [esp + 0x28f8]
mov edx, ebp
lea edi, [esp + 0x134]
add ebx, 0x9dbb8
mov ebp, dword [esp + 0x2960]
mov dword [esp + 0x4c], ecx
mov dword [esp + 0x54], 0x7fffffff
mov dword [esp + 0x58], esi
mov dword [esp + 0x5c], eax
mov dword [esp + 0x68], edi
jmp 0xba6907
lea eax, [edx + 1]
mov ecx, 0x10
cmp eax, 0xffff
jbe 0xba76c3
shr eax, 0x10
sub eax, 1
cmp eax, 0xff
ja 0xba76c1
mov ecx, 0x20
add ecx, dword [eax*4 + 0x1268c40]
imul esi, ecx
mov eax, dword [esp + 0x54]
mov ecx, dword [esp + 0x4c]
mov edi, dword [esp + 0x64]
mov dword [esp + 0x28ac], edx
sub eax, esi
mov dword [esp + 0x293c], eax
mov eax, dword [ebx]
mov dword [esp + 0x28a8], esi
mov dword [esp + 0x28b0], eax
mov eax, dword [ebx + 4]
mov dword [esp + 0x28b4], eax
mov eax, dword [ebx + 8]
mov dword [esp + 0x28b8], eax
mov eax, dword [ebx + 0xc]
mov dword [esp + 0x28bc], eax
mov eax, dword [ebx + 0x10]
mov dword [esp + 0x28c0], eax
mov eax, dword [ebx + 0x14]
mov dword [esp + 0x28c4], eax
mov eax, dword [ecx + 0x8ac]
mov dword [esp + 0xc], edi
mov dword [esp + 8], edx
mov dword [esp + 0x38], edx
mov dword [esp + 0x28d4], eax
mov dword [esp + 4], 0
mov dword [esp], ebp
call fcn.00b8e0e0
mov edx, dword [esp + 0x38]
lea eax, [esp + 0x2938]
mov ecx, dword [esp + 0x5c]
mov dword [esp + 0x10], eax
mov dword [esp + 4], 0
mov dword [esp + 8], edx
mov dword [esp + 0xc], ecx
mov dword [esp], ebp
call fcn.00b8f5d0
mov eax, dword [esp + 0x2938]
mov ecx, dword [esp + 0x58]
mov edi, dword [esp + 0x60]
mov dword [esp], ebp
mov dword [esp + 0xc], eax
mov eax, dword [esp + 0x5c]
mov dword [esp + 4], ecx
mov dword [esp + 0x10], edi
mov dword [esp + 8], eax
call fcn.00bd4960
mov edx, dword [esp + 0x38]
mov ecx, dword [esp + 0x28ec]
test edx, edx
jne 0xba6830
mov eax, dword [esp + 0xb0]
test eax, eax
je 0xba6830
imul eax, dword [esp + 0x94], 0x12c
mov edi, ecx
sub edi, dword [esp + 0x28e8]
cmp edi, eax
jl 0xba76d7
nop
mov eax, dword [esp + 0x28f4]
mov edi, dword [esp + 0x28f0]
mov dword [esp + 0x50], eax
mov eax, dword [ebp + 0x3a548]
add ecx, esi
add esi, dword [esp + 0x293c]
mov dword [esp + 0x28ec], ecx
cmp edi, eax
mov dword [esp + 0x54], esi
mov dword [esp + 0x293c], esi
mov esi, dword [ebp + 0x3a550]
jl 0xba6874
cmp edi, esi
mov eax, esi
cmovle eax, edi
mov edi, dword [ebp + 0x3a54c]
mov dword [esp + 0x28f0], eax
mov esi, dword [ebp + 0x3a554]
mov dword [esp + 0x44], edi
mov edi, dword [esp + 0x50]
cmp dword [esp + 0x44], edi
jg 0xba689e
cmp edi, esi
cmovle esi, edi
mov dword [esp + 0x44], esi
mov esi, dword [esp + 0x44]
cmp ecx, dword [esp + 0x180]
mov dword [esp + 0x28f4], esi
jge 0xba68c1
mov edi, dword [esp + 0x68]
mov ecx, 0x16
mov esi, dword [esp + 0x58]
rep movsd dword es:[edi], dword [esi]
mov ecx, dword [ebp + 0x3a528]
add edx, 1
add ebx, 0x18
mov edi, dword [esp + 0x4c]
mov esi, dword [esp + 0x48]
add dword [esp + 0x4c], 4
shl ecx, 2
add ecx, dword [edi]
movzx edi, word [esp + 0x44]
mov word [ecx], ax
cwde
mov dword [esi], eax
movsx eax, di
mov word [ecx + 2], di
mov dword [esi + 4], eax
add esi, 0x28
cmp edx, dword [ebp + 0x39800]
mov dword [esp + 0x48], esi
jge 0xba6b50
mov eax, dword [ebp + 0x38fc0]
mov esi, dword [esp + 0x94]
sub eax, 1
cmp eax, 1
je 0xba671b
jle 0xba76d0
cmp edx, 0xfe
ja 0xba66e8
mov ecx, dword [edx*4 + 0x1268c40]
jmp 0xba6718
mov dword [esp + 0x1524], 0x10000000
mov dword [esp + 0x1518], 0x10000000
mov dword [esp + 0x286c], 0x10000000
mov dword [esp + 0x2168], 0x10000000
mov dword [esp + 0x1e98], 0x10000000
mov dword [esp + 0x1908], 0x10000000
mov dword [esp + 0x2870], 0x10000000
mov dword [esp + 0x216c], 0x10000000
mov dword [esp + 0x1e9c], 0x10000000
mov dword [esp + 0x190c], 0x10000000
mov dword [esp + 0x2874], 0x10000000
mov dword [esp + 0x2170], 0x10000000
mov dword [esp + 0x1ea0], 0x10000000
mov dword [esp + 0x1910], 0x10000000
mov dword [esp + 0x2878], 0x10000000
mov dword [esp + 0x2174], 0x10000000
mov dword [esp + 0x1ea4], 0x10000000
mov dword [esp + 0x1914], 0x10000000
mov dword [esp + 0x2880], 0x10000000
mov dword [esp + 0x287c], 0x10000000
mov dword [esp + 0x2868], 0x10000000
mov dword [esp + 0x2864], 0x10000000
mov dword [esp + 0x2860], 0x10000000
mov dword [esp + 0x27ac], 0x10000000
mov dword [esp + 0x26f8], 0x10000000
jmp 0xba64d8
cmp ebx, 2
jg 0xba6b40
mov eax, dword [esp + 0x2960]
cmp dword [eax + 0x3a5d0], 6
je 0xba6a90
cmp dword [eax + 0x3a5cc], 6
je 0xba6a90
cmp dword [eax + 0x3a5d4], 6
je 0xba6a90
cmp dword [eax + 0x3a5d8], 6
jne 0xba65c0
mov eax, dword [esp + 0x2960]
mov dword [esp + 4], 0
mov dword [esp], eax
call fcn.00bacdd0
test eax, eax
je 0xba65c0
mov eax, dword [esp + 0x2960]
mov dword [eax + 0x9d694], 6
mov dword [eax + 0x9d698], 0x10
jmp 0xba656f
mov eax, ebp
mov ecx, 0x10000000
lea edx, [esp + 0x94]
call fcn.00ba5790
mov eax, dword [esp + 0x2960]
cmp dword [eax + 0x3a538], 6
mov dword [eax + 0x9d694], 1
jle 0xba656f
mov eax, dword [esp + 0x2960]
lea edx, [esp + 0x94]
call fcn.00b9f010
jmp 0xba656f
mov eax, dword [esp + 0x2960]
cmp dword [eax + 0x1a0], 1
sbb eax, eax
add eax, 1
mov esi, eax
jmp 0xba61ec
mov dword [esp + 0xb0], 1
jmp 0xba65c0
mov eax, dword [esp + 0x140]
mov ebp, dword [esp + 0x2960]
mov byte [ebp + 0x9e0dc], al
mov byte [ebp + 0x9e0dd], al
mov byte [ebp + 0x9e0de], al
mov byte [ebp + 0x9e0df], al
mov byte [ebp + 0x9e0e4], al
mov byte [ebp + 0x9e0e5], al
mov byte [ebp + 0x9e0e6], al
mov byte [ebp + 0x9e0e7], al
mov byte [ebp + 0x9e0ec], al
mov byte [ebp + 0x9e0ed], al
mov byte [ebp + 0x9e0ee], al
mov byte [ebp + 0x9e0ef], al
mov byte [ebp + 0x9e0f4], al
mov byte [ebp + 0x9e0f5], al
mov byte [ebp + 0x9e0f6], al
mov byte [ebp + 0x9e0f7], al
mov eax, dword [esp + 0xa4]
mov dword [ebp + 0x9d694], 4
test eax, eax
je 0xba6d06
mov eax, dword [esp + 0x180]
mov edx, dword [esp + 0x184]
mov dword [ebp + 0x9d698], 0x10
mov dword [esp + 0xac], eax
mov eax, dword [esp + 0x188]
mov word [ebp + 0x9e190], dx
mov word [ebp + 0x9e194], dx
mov word [ebp + 0x9e198], dx
mov word [ebp + 0x9e192], ax
mov word [ebp + 0x9e196], ax
mov word [ebp + 0x9e19a], ax
mov word [ebp + 0x9e19c], dx
mov word [ebp + 0x9e19e], ax
mov word [ebp + 0x9e1b0], dx
mov word [ebp + 0x9e1b2], ax
mov word [ebp + 0x9e1b4], dx
mov word [ebp + 0x9e1b6], ax
mov word [ebp + 0x9e1b8], dx
mov word [ebp + 0x9e1ba], ax
mov word [ebp + 0x9e1bc], dx
mov word [ebp + 0x9e1be], ax
mov word [ebp + 0x9e1d0], dx
mov word [ebp + 0x9e1d2], ax
mov word [ebp + 0x9e1d4], dx
mov word [ebp + 0x9e1d6], ax
mov word [ebp + 0x9e1d8], dx
mov word [ebp + 0x9e1da], ax
mov word [ebp + 0x9e1dc], dx
mov word [ebp + 0x9e1de], ax
mov word [ebp + 0x9e1f0], dx
mov word [ebp + 0x9e1f2], ax
mov word [ebp + 0x9e1f4], dx
mov word [ebp + 0x9e1f6], ax
mov word [ebp + 0x9e1f8], dx
mov word [ebp + 0x9e1fc], dx
mov edx, dword [esp + 0x98]
mov word [ebp + 0x9e1fa], ax
mov word [ebp + 0x9e1fe], ax
mov eax, ebp
call fcn.00ba1110
mov dword [esp + 0x180], eax
mov eax, dword [esp + 0x2960]
cmp dword [eax + 0x9d694], 6
je 0xba6582
mov ebp, dword [esp + 0x84]
and ebp, 0x10
mov dword [esp + 0x84], ebp
je 0xba7ad2
mov eax, dword [esp + 0x2960]
mov edi, dword [eax + 0x1a4]
mov edx, eax
test edi, edi
jne 0xba7d3c
mov eax, dword [eax + 0x38fc0]
mov esi, dword [esp + 0x140]
mov edi, dword [esp + 0x94]
sub eax, 1
cmp eax, 1
je 0xba6d96
jle 0xba9852
cmp esi, 0xfe
jbe 0xba95bd
lea eax, [esi + 1]
xor edx, edx
cmp eax, 0xffff
mov ecx, 0x10
jbe 0xba6d7d
shr eax, 0x10
mov cl, 0x30
sub eax, 1
mov dl, 0x20
cmp eax, 0xff
jbe 0xba6d8c
shr eax, 8
mov edx, ecx
sub eax, 1
add edx, dword [eax*4 + 0x1268c40]
imul edi, edx
mov ecx, dword [esp + 0x2960]
lea eax, [esi + esi*2]
mov edx, dword [esp + 0x184]
lea ebx, [ecx + eax*8 + 0x9dbb8]
mov dword [ecx + 0x9d698], 0xd
mov ecx, dword [esp + 0x188]
lea eax, [esi + esi*4]
lea eax, [esp + eax*8 + 0x184]
mov dword [eax + 0xc], edx
lea ebp, [eax + 0xc]
mov edx, dword [esp + 0x2960]
mov dword [esp + 0x44], ebp
lea ebp, [esp + 0x410]
mov dword [eax + 0x10], ecx
mov eax, dword [esp + 0xa0]
lea ecx, [esi + 0x277ac]
mov dword [esp + 0x410], 3
mov dword [esp + 0x418], edi
mov dword [esp + 0x41c], esi
mov dword [esp + 0x414], eax
mov eax, dword [edx + 0x9df38]
mov dword [esp + 0x448], eax
mov eax, dword [edx + 0x9df3c]
mov dword [esp + 0x44c], eax
mov eax, dword [edx + 0x9dba0]
mov dword [esp + 0x438], eax
mov eax, dword [edx + 0x9dba4]
mov dword [esp + 0x43c], eax
mov eax, dword [edx + 0x9dba8]
mov dword [esp + 0x440], eax
mov eax, dword [ebx]
mov dword [esp + 0x420], eax
mov eax, dword [ebx + 4]
mov dword [esp + 0x424], eax
mov eax, dword [ebx + 8]
mov dword [esp + 0x428], eax
mov eax, dword [ebx + 0xc]
mov dword [esp + 0x42c], eax
mov eax, dword [ebx + 0x10]
mov dword [esp + 0x430], eax
mov eax, dword [ebx + 0x14]
mov dword [esp + 0x434], eax
mov eax, dword [edx + ecx*4 + 8]
mov dword [esp + 0x48], ecx
mov dword [esp], edx
mov dword [esp + 0xc], 2
mov dword [esp + 0x444], eax
lea eax, [esp + 0x450]
mov dword [esp + 0x10], eax
mov dword [esp + 8], 0
mov dword [esp + 4], 0
call fcn.00b8da30
mov eax, dword [esp + 0x44]
mov dword [esp + 0x10], 0
mov dword [esp + 0xc], 1
mov dword [esp + 4], ebp
mov dword [esp + 8], eax
mov eax, dword [esp + 0x2960]
mov dword [esp], eax
call fcn.00bd4960
mov eax, dword [esp + 0x2960]
mov edx, dword [eax + 0x3a548]
mov ecx, dword [eax + 0x3a550]
mov eax, dword [esp + 0x460]
cmp edx, eax
jg 0xba6f17
cmp eax, ecx
mov edx, ecx
cmovle edx, eax
mov eax, dword [esp + 0x2960]
mov ecx, dword [esp + 0x464]
mov dword [esp + 0x460], edx
mov ebp, dword [eax + 0x3a554]
mov eax, dword [eax + 0x3a54c]
cmp eax, ecx
jg 0xba6f43
cmp ecx, ebp
mov eax, ebp
cmovle eax, ecx
mov ebp, dword [esp + 0x2960]
mov dword [esp + 0x464], eax
mov ecx, dword [esp + 0x44]
mov word [ebp + 0x9e192], ax
mov word [ebp + 0x9e196], ax
mov word [ebp + 0x9e1b2], ax
mov word [ebp + 0x9e1b6], ax
mov eax, dword [esp + 0x460]
mov word [ebp + 0x9e190], dx
mov word [ebp + 0x9e194], dx
mov word [ebp + 0x9e1b0], dx
mov word [ebp + 0x9e1b4], dx
mov edx, dword [esp + 0x464]
lea ebp, [esp + 0x468]
mov dword [ecx + 8], eax
mov eax, dword [esp + 0x45c]
mov dword [ecx + 0xc], edx
mov edx, dword [esp + 0x2960]
add eax, edi
add eax, dword [esp + 0x94]
mov dword [esp + 0x468], 3
mov dword [esp + 0x470], edi
mov dword [esp + 0x45c], eax
mov eax, dword [esp + 0xa0]
mov dword [esp + 0x474], esi
mov dword [esp + 0x46c], eax
mov eax, dword [edx + 0x9df38]
mov dword [esp + 0x4a0], eax
mov eax, dword [edx + 0x9df3c]
mov dword [esp + 0x4a4], eax
mov eax, dword [edx + 0x9dba0]
add eax, 8
mov dword [esp + 0x490], eax
mov eax, dword [edx + 0x9dba4]
add eax, 4
mov dword [esp + 0x494], eax
mov eax, dword [edx + 0x9dba8]
add eax, 4
mov dword [esp + 0x498], eax
mov eax, dword [ebx]
mov ecx, dword [esp + 0x48]
add eax, 8
mov dword [esp + 0x478], eax
mov eax, dword [ebx + 4]
add eax, 8
mov dword [esp + 0x47c], eax
mov eax, dword [ebx + 8]
add eax, 8
mov dword [esp + 0x480], eax
mov eax, dword [ebx + 0xc]
add eax, 8
mov dword [esp + 0x484], eax
mov eax, dword [ebx + 0x10]
add eax, 4
mov dword [esp + 0x488], eax
mov eax, dword [ebx + 0x14]
add eax, 4
mov dword [esp + 0x48c], eax
mov eax, dword [edx + ecx*4 + 8]
mov dword [esp], edx
mov dword [esp + 0xc], 2
mov dword [esp + 8], 4
add eax, 0x10
mov dword [esp + 0x49c], eax
lea eax, [esp + 0x4a8]
mov dword [esp + 0x10], eax
mov dword [esp + 4], 0
call fcn.00b8da30
mov eax, dword [esp + 0x44]
mov dword [esp + 0x10], 0
mov dword [esp + 0xc], 2
mov dword [esp + 4], ebp
mov dword [esp + 8], eax
mov eax, dword [esp + 0x2960]
mov dword [esp], eax
call fcn.00bd4960
mov eax, dword [esp + 0x2960]
mov edx, dword [eax + 0x3a548]
mov ecx, dword [eax + 0x3a550]
mov eax, dword [esp + 0x4b8]
cmp edx, eax
jg 0xba7111
cmp eax, ecx
mov edx, ecx
cmovle edx, eax
mov eax, dword [esp + 0x2960]
mov ecx, dword [esp + 0x4bc]
mov dword [esp + 0x4b8], edx
mov ebp, dword [eax + 0x3a554]
mov eax, dword [eax + 0x3a54c]
cmp ecx, eax
jl 0xba713d
cmp ecx, ebp
mov eax, ebp
cmovle eax, ecx
mov ebp, dword [esp + 0x2960]
mov dword [esp + 0x4bc], eax
mov ecx, dword [esp + 0x44]
mov word [ebp + 0x9e19a], ax
mov word [ebp + 0x9e19e], ax
mov word [ebp + 0x9e1ba], ax
mov word [ebp + 0x9e1be], ax
mov eax, dword [esp + 0x4b8]
mov word [ebp + 0x9e198], dx
mov word [ebp + 0x9e19c], dx
mov word [ebp + 0x9e1b8], dx
mov word [ebp + 0x9e1bc], dx
mov edx, dword [esp + 0x4bc]
lea ebp, [esp + 0x4c0]
mov dword [ecx + 0x10], eax
mov eax, dword [esp + 0x4b4]
mov dword [ecx + 0x14], edx
add eax, edi
add eax, dword [esp + 0x94]
mov dword [esp + 0x4c0], 3
mov dword [esp + 0x4c8], edi
mov dword [esp + 0x4b4], eax
mov eax, dword [esp + 0xa0]
mov dword [esp + 0x4cc], esi
mov dword [esp + 0x4c4], eax
mov eax, dword [esp + 0x2960]
mov ecx, dword [eax + 0x9df3c]
mov edx, dword [eax + 0x9df38]
mov dword [esp + 0x40], ecx
mov dword [esp + 0x4fc], ecx
mov ecx, eax
mov eax, dword [eax + 0x9dba0]
mov dword [esp + 0x4f8], edx
sub eax, 0xffffff80
mov dword [esp + 0x4e8], eax
mov eax, dword [ecx + 0x9dba4]
add eax, 0x40
mov dword [esp + 0x4ec], eax
mov eax, dword [ecx + 0x9dba8]
add eax, 0x40
mov dword [esp + 0x4f0], eax
mov ecx, dword [ebx]
lea eax, [edx*8]
shl edx, 4
add ecx, eax
mov dword [esp + 0x4d0], ecx
mov ecx, dword [ebx + 4]
add ecx, eax
mov dword [esp + 0x4d4], ecx
mov ecx, dword [ebx + 8]
add ecx, eax
add eax, dword [ebx + 0xc]
mov dword [esp + 0x4d8], ecx
mov ecx, dword [ebx + 0x10]
mov dword [esp + 0x4dc], eax
mov eax, dword [esp + 0x40]
shl eax, 2
add ecx, eax
add eax, dword [ebx + 0x14]
mov dword [esp + 0x4e0], ecx
mov ecx, dword [esp + 0x2960]
mov dword [esp + 0x4e4], eax
mov eax, dword [esp + 0x48]
add edx, dword [ecx + eax*4 + 8]
lea eax, [esp + 0x500]
mov dword [esp], ecx
mov dword [esp + 0x4f4], edx
mov dword [esp + 0x10], eax
mov dword [esp + 0xc], 2
mov dword [esp + 8], 8
mov dword [esp + 4], 0
call fcn.00b8da30
mov eax, dword [esp + 0x44]
mov dword [esp + 0x10], 0
mov dword [esp + 0xc], 3
mov dword [esp + 4], ebp
mov dword [esp + 8], eax
mov eax, dword [esp + 0x2960]
mov dword [esp], eax
call fcn.00bd4960
mov eax, dword [esp + 0x2960]
mov edx, dword [eax + 0x3a548]
mov ecx, dword [eax + 0x3a550]
mov eax, dword [esp + 0x510]
cmp eax, edx
jl 0xba731c
cmp ecx, eax
mov edx, eax
cmovle edx, ecx
mov eax, dword [esp + 0x2960]
mov ecx, dword [esp + 0x514]
mov dword [esp + 0x510], edx
mov ebp, dword [eax + 0x3a554]
mov eax, dword [eax + 0x3a54c]
cmp ecx, eax
jl 0xba7348
cmp ebp, ecx
mov eax, ecx
cmovle eax, ebp
mov ebp, dword [esp + 0x2960]
mov dword [esp + 0x514], eax
mov ecx, dword [esp + 0x44]
mov word [ebp + 0x9e1d0], dx
mov word [ebp + 0x9e1d2], ax
mov word [ebp + 0x9e1d4], dx
mov word [ebp + 0x9e1d6], ax
mov word [ebp + 0x9e1f0], dx
mov word [ebp + 0x9e1f2], ax
mov word [ebp + 0x9e1f4], dx
mov edx, dword [esp + 0x514]
mov word [ebp + 0x9e1f6], ax
mov eax, dword [esp + 0x510]
lea ebp, [esp + 0x518]
mov dword [ecx + 0x1c], edx
mov dword [ecx + 0x18], eax
mov eax, dword [esp + 0x50c]
mov dword [esp + 0x524], esi
mov esi, dword [esp + 0x2960]
mov dword [esp + 0x518], 3
mov dword [esp + 0x520], edi
add eax, edi
mov edx, dword [esi + 0x9dba0]
add eax, dword [esp + 0x94]
mov ecx, dword [esi + 0x9df3c]
add edx, 0x88
mov dword [esp + 0x540], edx
mov edx, dword [esi + 0x9dba4]
mov dword [esp + 0x50c], eax
mov eax, dword [esp + 0xa0]
mov dword [esp + 0x554], ecx
add edx, 0x44
mov dword [esp + 0x544], edx
mov edx, dword [esi + 0x9dba8]
mov dword [esp + 0x51c], eax
mov eax, dword [esi + 0x9df38]
add edx, 0x44
mov dword [esp + 0x550], eax
lea eax, [eax*8 + 8]
mov dword [esp + 0x548], edx
mov edx, dword [ebx]
add edx, eax
mov dword [esp + 0x528], edx
mov edx, dword [ebx + 4]
add edx, eax
mov dword [esp + 0x52c], edx
mov edx, dword [ebx + 8]
add edx, eax
mov dword [esp + 0x530], edx
mov edx, dword [ebx + 0xc]
add edx, eax
add eax, eax
mov dword [esp + 0x534], edx
lea edx, [ecx*4 + 4]
mov ecx, dword [ebx + 0x10]
add ecx, edx
add edx, dword [ebx + 0x14]
mov dword [esp + 0x538], ecx
mov dword [esp + 0x53c], edx
mov edx, dword [esp + 0x48]
add eax, dword [esi + edx*4 + 8]
mov dword [esp + 0xc], 2
mov dword [esp + 8], 0xc
mov dword [esp + 0x54c], eax
lea eax, [esp + 0x558]
mov dword [esp + 0x10], eax
mov dword [esp + 4], 0
mov dword [esp], esi
call fcn.00b8da30
mov ecx, dword [esp + 0x44]
mov dword [esp + 0x10], 0
mov dword [esp + 0xc], 4
mov dword [esp + 4], ebp
mov dword [esp + 8], ecx
mov dword [esp], esi
call fcn.00bd4960
mov edx, dword [esi + 0x3a548]
mov eax, dword [esp + 0x568]
mov ecx, dword [esi + 0x3a550]
cmp edx, eax
jg 0xba7510
cmp eax, ecx
mov edx, ecx
cmovle edx, eax
mov eax, dword [esp + 0x2960]
mov ecx, dword [esp + 0x56c]
mov dword [esp + 0x568], edx
mov ebx, dword [eax + 0x3a554]
mov eax, dword [eax + 0x3a54c]
cmp eax, ecx
jg 0xba753c
cmp ecx, ebx
mov eax, ebx
cmovle eax, ecx
mov esi, dword [esp + 0x2960]
mov dword [esp + 0x56c], eax
mov ebp, dword [esp + 0x44]
mov ebx, dword [esp + 0x564]
mov word [esi + 0x9e1da], ax
mov ecx, dword [esi + 0x38fc0]
mov word [esi + 0x9e1de], ax
mov word [esi + 0x9e1fa], ax
add ebx, edi
mov word [esi + 0x9e1fe], ax
mov eax, dword [esp + 0x568]
mov word [esi + 0x9e1d8], dx
sub ecx, 1
mov word [esi + 0x9e1dc], dx
mov word [esi + 0x9e1f8], dx
mov word [esi + 0x9e1fc], dx
mov edx, dword [esp + 0x56c]
mov dword [ebp + 0x20], eax
mov eax, dword [esp + 0x94]
mov dword [ebp + 0x24], edx
mov edx, dword [esp + 0x45c]
add edx, dword [esp + 0x4b4]
add ebx, eax
add edx, dword [esp + 0x50c]
mov dword [esp + 0x564], ebx
add ebx, edx
cmp ecx, 1
mov edx, dword [esp + 0x140]
je 0xba7629
jle 0xba984b
cmp edx, 0xfe
jbe 0xba95c9
add edx, 1
xor ecx, ecx
cmp edx, 0xffff
mov esi, 0x10
jbe 0xba760f
shr edx, 0x10
mov si, 0x30
sub edx, 1
mov cl, 0x20
cmp edx, 0xff
jbe 0xba761f
shr edx, 8
mov ecx, esi
sub edx, 1
add ecx, dword [edx*4 + 0x1268c40]
imul eax, ecx
mov ebp, dword [esp + 0xa4]
sub ebx, eax
mov dword [esp + 0x18c], ebx
test ebp, ebp
je 0xba769b
cmp ebx, dword [esp + 0xac]
jge 0xba764d
mov dword [esp + 0xac], ebx
mov eax, dword [esp + 0x2960]
mov edx, dword [esp + 0x98]
mov dword [eax + 0x9d694], 5
mov dword [eax + 0x9d6a8], 3
mov dword [eax + 0x9d6a4], 3
mov dword [eax + 0x9d6a0], 3
mov dword [eax + 0x9d69c], 3
call fcn.00ba1110
mov ebx, eax
mov dword [esp + 0x18c], eax
mov esi, dword [esp + 0x180]
cmp esi, ebx
jg 0xba8d0e
mov ebx, esi
mov dword [esp + 0x44], 0x10
mov dword [esp + 0x48], 4
jmp 0xba7aeb
mov cl, 0x30
shr eax, 8
sub eax, 1
jmp 0xba6711
xor esi, esi
jmp 0xba671b
lea ecx, [esp + 0x2930]
mov dword [esp + 4], ecx
mov dword [esp + 0x38], edx
mov dword [esp], ebp
call fcn.00b8e570
mov eax, dword [esp + 0x28f4]
mov edi, dword [esp + 0x28f0]
mov edx, dword [esp + 0x38]
mov dword [esp + 0x50], eax
mov eax, edi
sub eax, dword [esp + 0x2930]
mov ecx, eax
sar ecx, 0x1f
xor eax, ecx
sub eax, ecx
mov ecx, dword [esp + 0x50]
sub ecx, dword [esp + 0x2934]
mov dword [esp + 0x54], ecx
sar ecx, 0x1f
mov dword [esp + 0x44], ecx
mov ecx, dword [esp + 0x54]
xor ecx, dword [esp + 0x44]
sub ecx, dword [esp + 0x44]
add eax, ecx
mov ecx, dword [esp + 0x28ec]
cmp eax, 1
jg 0xba6842
mov dword [esp + 0x38], edx
mov dword [esp + 4], 0
mov dword [esp], ebp
call fcn.00bacdd0
mov edx, dword [esp + 0x38]
test eax, eax
jne 0xbaa3e0
mov eax, dword [esp + 0x28f4]
mov ecx, dword [esp + 0x28ec]
mov edi, dword [esp + 0x28f0]
mov dword [esp + 0x50], eax
jmp 0xba6842
mov eax, dword [esp + 0x2960]
mov edx, dword [eax + 0x9e694]
mov dword [eax + 0x9d694], 0x12
test edx, edx
je 0xba8cc0
xor dword [eax + 0x38fb8], 1
xor esi, esi
mov dword [esp + 0x2938], 1
mov dword [esp + 4], 0
mov dword [esp], eax
call fcn.00b8e5e0
test eax, eax
mov dword [esp + 0x289c], eax
je 0xba77f9
mov eax, dword [esp + 0x2938]
test eax, eax
jne 0xba8efa
mov edx, dword [esp + 0x2960]
mov eax, dword [edx + 0x38fb8]
add dword [edx + eax*4 + 0x9efb8], esi
mov eax, dword [esp + 0x2960]
lea edx, [esp + 0x2938]
mov ebp, dword [esp + 0x289c]
mov dword [esp + 0x2938], 1
xor dword [eax + 0x38fb8], 1
xor eax, eax
test ebp, ebp
cmovne eax, edx
mov dword [esp + 4], eax
mov eax, dword [esp + 0x2960]
mov dword [esp], eax
call fcn.00b8e5e0
test eax, eax
mov dword [esp + 0x289c], eax
jne 0xba7d14
xor esi, esi
mov eax, dword [esp + 0x289c]
test eax, eax
mov ebx, 0x10000000
je 0xba78a3
mov eax, dword [esp + 0x2960]
mov ebx, dword [eax + 0x9e694]
test ebx, ebx
je 0xba8d52
mov ecx, dword [eax + 0x9e68c]
mov ebx, 0x10000000
test ecx, ecx
jne 0xba78a3
mov edx, dword [esp + 0xa4]
test edx, edx
jne 0xba9175
mov eax, dword [esp + 0x2960]
mov ebp, dword [eax + 0x9e694]
test ebp, ebp
je 0xba964c
test esi, esi
jne 0xba656f
mov eax, dword [esp + 0x2960]
mov ebp, dword [eax + 0x170]
lea eax, [esp + 0x94]
call fcn.00b9f700
mov edi, dword [esp + 0x289c]
test edi, edi
jne 0xba8fc8
mov eax, dword [esp + 0x2960]
lea edx, [esp + 0x94]
mov edi, 8
call fcn.00ba1240
mov esi, dword [esp + 0x180]
mov eax, dword [esp + 0x1518]
cmp esi, eax
jle 0xba7903
mov esi, eax
mov di, 0xc
mov eax, dword [esp + 0x2860]
cmp eax, esi
jge 0xba7915
mov esi, eax
mov edi, 0x10
mov eax, dword [esp + 0x2864]
cmp eax, esi
jge 0xba7927
mov esi, eax
mov edi, 7
cmp ebx, esi
jle 0xba95d5
and ebp, 0x100
mov ebx, 0x10
jne 0xba938e
mov ecx, dword [esp + 0xa4]
mov eax, dword [esp + 0x2960]
test ecx, ecx
mov dword [eax + 0x9d698], ebx
jne 0xba9364
cmp ebx, 0x10
je 0xba9689
cmp ebx, 0xe
je 0xba97d2
cmp ebx, 0xf
je 0xba9859
cmp ebx, 0xd
je 0xba9f19
mov eax, dword [esp + 0x2960]
mov ecx, esi
lea edx, [esp + 0x94]
call fcn.00ba5790
cmp dword [esp + 0xbc], esi
jl 0xba8d7e
cmp edi, 7
setg cl
mov ebp, ecx
mov eax, dword [esp + 0x2960]
mov edx, dword [eax + 0x198]
mov dword [eax + 0x9d694], edi
test edx, edx
jne 0xba943b
mov edx, ebp
test dl, dl
je 0xba656f
mov eax, dword [esp + 0x2960]
cmp dword [eax + 0x3a538], 6
jle 0xba656f
cmp edi, 0x11
jg 0xba656f
lea edx, [esp + 0x94]
call fcn.00b9bd20
cmp ebx, 0x10
je 0xbaa392
cmp ebx, 0xe
je 0xbaa2a0
cmp ebx, 0xf
je 0xbaa207
cmp ebx, 0xd
jne 0xba656f
mov edx, dword [esp + 0x2960]
mov eax, dword [edx + 0x9d69c]
cmp eax, 3
je 0xbaab3f
cmp eax, 7
je 0xbaab05
mov edx, dword [esp + 0x2960]
mov eax, dword [edx + 0x9d6a0]
cmp eax, 3
je 0xbaaac5
cmp eax, 7
je 0xbaaa8b
mov edx, dword [esp + 0x2960]
mov eax, dword [edx + 0x9d6a4]
cmp eax, 3
je 0xbaa944
cmp eax, 7
je 0xbaa90a
mov edx, dword [esp + 0x2960]
mov eax, dword [edx + 0x9d6a8]
cmp eax, 3
je 0xbaa890
cmp eax, 7
jne 0xba656f
mov eax, dword [esp + 0x98]
mov dword [esp + 0x10], 1
mov dword [esp + 0xc], 0xc
mov dword [esp + 8], eax
lea eax, [esp + 0x18b0]
mov dword [esp + 4], eax
mov eax, dword [esp + 0x2960]
mov dword [esp], eax
call fcn.00bdcbb0
jmp 0xba656f
mov ebx, dword [esp + 0x180]
mov dword [esp + 0x44], 0x10
mov dword [esp + 0x48], 4
mov esi, ebx
mov ecx, dword [esp + 0xa4]
mov eax, dword [esp + 0x4b0]
add eax, dword [esp + 0x508]
test ecx, ecx
je 0xba7b18
imul eax, dword [esp + 0x98]
mov edx, eax
sar edx, 0x1f
idiv dword [esp + 0x94]
mov edi, dword [esp + 0x84]
test edi, edi
je 0xba7b32
add eax, esi
cmp dword [esp + 0x18c], eax
jl 0xba8177
mov ebp, dword [esp + 0x44]
test ecx, ecx
mov eax, dword [esp + 0x2960]
mov dword [eax + 0x9d698], ebp
jne 0xba8ce0
cmp dword [esp + 0x44], 0x10
je 0xba914f
cmp dword [esp + 0x44], 0xe
je 0xba9244
cmp dword [esp + 0x44], 0xf
je 0xba8b48
cmp dword [esp + 0x44], 0xd
je 0xba8db7
mov eax, dword [esp + 0x2960]
mov ecx, ebx
lea edx, [esp + 0x94]
call fcn.00ba5790
mov eax, dword [esp + 0x2960]
mov esi, dword [eax + 0x3a53c]
test esi, esi
je 0xba8cb2
mov ecx, dword [esp + 0xa4]
test ecx, ecx
jne 0xba8cb2
mov edx, dword [esp + 0xb4]
cmp edx, ebx
jl 0xba7bcf
mov eax, dword [esp + 0xbc]
cmp eax, ebx
jl 0xba7bcf
cmp dword [esp + 0xd0], ebx
jge 0xba7c2d
mov ecx, dword [esp + 0x114]
cmp ecx, 0xfffffff
jle 0xba7bff
mov eax, dword [esp + 0x2960]
lea edx, [esp + 0x94]
call fcn.00b9bb20
mov edx, dword [esp + 0xb4]
mov ecx, dword [esp + 0x114]
mov eax, dword [esp + 0xbc]
add edx, ecx
add dword [esp + 0xd0], ecx
mov dword [esp + 0xb4], edx
add eax, ecx
mov dword [esp + 0xbc], eax
cmp ebx, eax
jle 0xba7c2d
mov ebx, eax
mov dword [esp + 0x48], 1
mov edx, dword [esp + 0x2960]
mov ebp, dword [esp + 0x48]
add dword [edx + 0x9efb0], eax
add dword [edx + 0x9efb4], ebx
cmp dword [edx + 0x3a538], 6
mov dword [edx + 0x9d694], ebp
jle 0xba656f
cmp ebp, 2
jbe 0xba6b01
cmp dword [esp + 0x44], 0x10
je 0xba8f27
cmp dword [esp + 0x44], 0xe
je 0xba94e0
cmp dword [esp + 0x44], 0xf
je 0xba96f5
cmp dword [esp + 0x44], 0xd
jne 0xba656f
mov eax, dword [esp + 0x2960]
lea edx, [esp + 0x94]
call fcn.00b9bd20
mov eax, dword [esp + 0x2960]
cmp dword [eax + 0x9d69c], 3
je 0xbaa984
cmp dword [eax + 0x9d6a0], 3
je 0xbaa84f
cmp dword [eax + 0x9d6a4], 3
je 0xbaa80e
cmp dword [eax + 0x9d6a8], 3
jne 0xba656f
mov eax, dword [esp + 0x98]
mov dword [esp + 0x10], 0
mov dword [esp + 0xc], 0xc
mov dword [esp + 8], eax
lea eax, [esp + 0x518]
mov dword [esp + 4], eax
mov eax, dword [esp + 0x2960]
mov dword [esp], eax
call fcn.00bdcbb0
jmp 0xba656f
mov edi, dword [esp + 0x2938]
test edi, edi
jne 0xba8d8a
mov edx, dword [esp + 0x2960]
mov eax, dword [edx + 0x38fb8]
add dword [edx + eax*4 + 0x9efb8], esi
jmp 0xba784b
mov eax, dword [eax + 0x39800]
mov dword [edx + 0x9d698], 0xd
sub eax, 1
cmp eax, 0
mov dword [esp + 0x68], eax
jle 0xba9641
mov esi, dword [esp + 0x140]
test esi, esi
jne 0xba7dd7
mov eax, dword [esp + 0x2960]
mov ebx, dword [eax + 0x3a5cc]
test ebx, ebx
je 0xba7dd7
mov ecx, dword [eax + 0x3a5d0]
test ecx, ecx
je 0xba7dd7
movsx edx, byte [eax + 0x9e0d3]
movsx eax, byte [eax + 0x9e0d4]
mov ecx, dword [esp + 0x2960]
cmp edx, eax
cmovl edx, eax
xor eax, eax
test edx, edx
cmovns eax, edx
movsx edx, byte [ecx + 0x9e0d6]
cmp eax, edx
cmovl eax, edx
movsx edx, byte [ecx + 0x9e0d8]
cmp eax, edx
cmovge edx, eax
movsx eax, byte [ecx + 0x9e0db]
cmp edx, eax
cmovl edx, eax
movsx eax, byte [ecx + 0x9e0eb]
cmp edx, eax
cmovge eax, edx
mov dword [esp + 0x68], eax
mov eax, dword [esp + 0x2960]
lea edx, [esp + 0x190]
mov edi, dword [esp + 0x68]
mov ebp, dword [esp + 0x2960]
mov esi, dword [eax + 0x3a528]
xor eax, eax
shl esi, 2
nop
lea esi, [esi]
mov ecx, dword [ebp + eax*4 + 0x9d60c]
add eax, 1
add ecx, esi
movsx ebx, word [ecx]
movsx ecx, word [ecx + 2]
mov dword [edx], ebx
mov dword [edx + 4], ecx
add edx, 0x28
cmp eax, edi
jle 0xba7e00
mov esi, dword [esp + 0x94]
lea ebp, [esp + 0x94]
mov ebx, dword [esp + 0x2960]
lea eax, [esp + 0x198]
mov dword [esp + 0x88], ebp
lea ebp, [esp + 0x28a0]
mov dword [esp + 0x8c], eax
xor eax, eax
mov dword [esp + 0x4c], esi
imul edx, eax, 0x58
mov esi, eax
sar esi, 1
mov ecx, eax
mov edi, esi
and ecx, 1
shl edi, 4
lea edx, [esp + edx + 0x410]
mov dword [esp + 0x50], edx
mov edx, dword [esp + 0xa0]
mov dword [esp + 0x44], esi
shl esi, 3
mov dword [esp + 0x64], esi
sar esi, 1
mov dword [esp + 0x78], esi
mov esi, dword [esp + 0x64]
mov dword [esp + 0x28a4], edx
mov edx, dword [ebx + 0x9df38]
mov dword [esp + 0x28a0], 3
mov dword [esp + 0x28d8], edx
mov edx, dword [ebx + 0x9df3c]
mov dword [esp + 0x28dc], edx
lea edx, [ecx + edi]
shl edx, 3
add edx, dword [ebx + 0x9dba0]
mov dword [esp + 0x28c8], edx
lea edx, [ecx*8]
mov dword [esp + 0x6c], edx
sar edx, 1
lea esi, [edx + esi*8]
mov dword [esp + 0x48], esi
mov dword [esp + 0x70], edx
mov edx, dword [esp + 0x48]
add edx, dword [ebx + 0x9dba8]
add esi, dword [ebx + 0x9dba4]
mov dword [esp + 0x28d0], edx
mov edx, dword [esp + 0x50]
mov dword [esp + 0x28cc], esi
mov dword [edx + 0x4c], 0x7fffffff
mov edx, dword [esp + 0x68]
test edx, edx
js 0xba95f7
mov esi, dword [esp + 0x44]
lea edx, [eax*4]
add ecx, ecx
add eax, 1
mov dword [esp + 0x7c], edx
lea edx, [ecx + 0xc]
add ecx, 0xd
mov dword [esp + 0x74], eax
lea eax, [edx + edi]
add edi, ecx
mov dword [esp + 0x60], eax
lea eax, [esi + esi + 1]
mov esi, dword [esp + 0x4c]
shl eax, 3
add ecx, eax
add edx, eax
mov dword [esp + 0x54], ecx
mov ecx, dword [esp + 0x88]
mov eax, ebx
mov dword [esp + 0x58], edx
mov edx, dword [esp + 0x8c]
mov dword [esp + 0x5c], edi
add ecx, 0x37c
mov dword [esp + 0x44], edx
xor edx, edx
mov dword [esp + 0x80], ecx
jmp 0xba8140
lea edi, [edx + 1]
mov ecx, edi
cmp ecx, 0xffff
mov dword [esp + 0x48], edi
mov edi, 0x10
jbe 0xba8ba0
shr ecx, 0x10
sub ecx, 1
cmp ecx, 0xff
ja 0xba8b9c
mov edi, 0x20
add edi, dword [ecx*4 + 0x1268c40]
imul esi, edi
mov ecx, dword [esp + 0x64]
mov edi, dword [eax + 0x9dbb8]
imul ecx, dword [esp + 0x28d8]
add ecx, dword [esp + 0x6c]
mov dword [esp + 0x28ac], edx
mov dword [esp + 0x28a8], esi
add edi, ecx
mov dword [esp + 0x28b0], edi
mov edi, dword [eax + 0x9dbbc]
add edi, ecx
mov dword [esp + 0x28b4], edi
mov edi, dword [eax + 0x9dbc0]
add edi, ecx
mov dword [esp + 0x28b8], edi
mov edi, dword [eax + 0x9dbc4]
add edi, ecx
mov dword [esp + 0x28bc], edi
mov edi, dword [esp + 0x78]
imul edi, dword [esp + 0x28dc]
add edi, dword [esp + 0x70]
mov dword [esp + 0x4c], edi
add edi, dword [eax + 0x9dbc8]
mov dword [esp + 0x28c0], edi
mov edi, dword [esp + 0x4c]
add edi, dword [eax + 0x9dbcc]
mov dword [esp + 0x28c4], edi
mov edi, dword [ebx + edx*4 + 0x9deb8]
lea ecx, [edi + ecx*2]
mov edi, dword [esp + 0x5c]
mov dword [esp + 0x28d4], ecx
mov ecx, dword [esp + 0x60]
mov byte [ebx + ecx + 0x9e0d0], dl
mov ecx, dword [esp + 0x58]
mov byte [ebx + edi + 0x9e0d0], dl
mov edi, dword [esp + 0x54]
mov byte [ebx + ecx + 0x9e0d0], dl
lea ecx, [esp + 0x28e0]
mov byte [ebx + edi + 0x9e0d0], dl
mov dword [esp + 0x10], ecx
mov dword [esp + 0xc], 2
mov edi, dword [esp + 0x7c]
mov dword [esp + 0x3c], eax
mov dword [esp + 0x38], edx
mov dword [esp + 4], 0
mov dword [esp + 8], edi
mov dword [esp], ebx
call fcn.00b8da30
mov edx, dword [esp + 0x38]
mov ecx, dword [esp + 0x74]
mov dword [esp + 0x10], 0
mov dword [esp + 4], ebp
lea edx, [edx + edx*4]
lea edx, [esp + edx*8 + 0x190]
mov dword [esp + 0xc], ecx
mov dword [esp + 8], edx
mov dword [esp], ebx
call fcn.00bd4960
mov edx, dword [ebp + 0x50]
mov edi, dword [esp + 0x44]
mov ecx, dword [ebp + 0x54]
add esi, dword [esp + 0x28ec]
mov eax, dword [esp + 0x3c]
mov dword [edi], edx
mov edx, dword [esp + 0x50]
mov dword [esp + 0x28ec], esi
mov dword [edi + 4], ecx
cmp esi, dword [edx + 0x4c]
jge 0xba8123
mov edi, dword [esp + 0x80]
mov esi, ebp
mov ecx, 0x16
rep movsd dword es:[edi], dword [esi]
mov edx, dword [esp + 0x48]
add eax, 0x18
add dword [esp + 0x44], 0x28
cmp edx, dword [esp + 0x68]
jg 0xba8bc0
mov esi, dword [esp + 0x94]
mov ecx, dword [ebx + 0x38fc0]
sub ecx, 1
cmp ecx, 1
je 0xba8b90
jle 0xba8bb0
cmp edx, 0xfe
ja 0xba7f84
lea ecx, [edx + 1]
mov edi, dword [edx*4 + 0x1268c40]
mov dword [esp + 0x48], ecx
jmp 0xba7fbc
mov eax, dword [esp + 0x2960]
lea esi, [esp + 0x28a0]
lea edi, [esp + 0x28e0]
mov dword [esp + 0x88], ebx
mov dword [esp + 0x6c], 0
mov ebp, eax
mov edx, eax
mov dword [eax + 0x9d698], 0xe
mov ebx, ebp
mov dword [esp + 0x84], eax
lea eax, [esp + 0x28f8]
mov dword [esp + 0x50], 0
mov dword [esp + 0x58], esi
mov dword [esp + 0x64], edi
mov dword [esp + 0x5c], eax
imul eax, dword [esp + 0x50], 0x58
lea edi, [esp + 0x1364]
mov dword [esp + 0x28a0], 1
mov dword [esp + 0x4c], 0
lea eax, [esp + eax + 0x1364]
mov dword [esp + 0x54], eax
mov eax, dword [esp + 0x6c]
mov dword [esp + 0x80], edx
mov ecx, dword [esp + eax*2 + 0x41c]
mov esi, eax
mov eax, dword [esp + eax*2 + 0x474]
mov dword [esp + 0x2930], ecx
cmp ecx, eax
mov ecx, dword [ebx + 0x9dba4]
mov dword [esp + 0x2934], eax
setne al
add edi, esi
movzx eax, al
add eax, 1
mov dword [esp + 0x70], eax
mov eax, dword [esp + 0xa0]
mov dword [esp + 0x7c], edi
mov dword [esp + 0x28a4], eax
mov eax, dword [ebx + 0x9df38]
mov dword [esp + 0x28d8], eax
mov eax, dword [ebx + 0x9df3c]
mov dword [esp + 0x28dc], eax
mov eax, dword [esp + 0x50]
shl eax, 7
add eax, dword [ebx + 0x9dba0]
mov dword [esp + 0x28c8], eax
mov eax, dword [esp + 0x50]
shl eax, 3
mov dword [esp + 0x60], eax
sar eax, 1
mov dword [esp + 0x74], eax
shl eax, 4
add ecx, eax
add eax, dword [ebx + 0x9dba8]
mov dword [esp + 0x28cc], ecx
mov dword [esp + 0x28d0], eax
mov eax, dword [esp + 0x54]
mov dword [eax + 0x4c], 0x7fffffff
mov eax, dword [esp + 0x50]
add eax, eax
mov dword [esp + 0x78], eax
mov edx, dword [esp + 0x4c]
mov ecx, dword [esp + 0x94]
mov eax, dword [esp + edx*4 + 0x2930]
mov edx, dword [ebx + 0x38fc0]
mov dword [esp + 0x68], ecx
sub edx, 1
cmp edx, 1
je 0xba8329
jle 0xba9339
cmp eax, 0xfe
jbe 0xba8d72
lea edx, [eax + 1]
xor ecx, ecx
cmp edx, 0xffff
mov edi, 0x10
jbe 0xba8309
shr edx, 0x10
mov di, 0x30
sub edx, 1
mov cl, 0x20
cmp edx, 0xff
jbe 0xba8319
shr edx, 8
mov ecx, edi
sub edx, 1
add ecx, dword [edx*4 + 0x1268c40]
imul ecx, dword [esp + 0x68]
mov dword [esp + 0x68], ecx
mov esi, dword [esp + 0x68]
mov dword [esp + 0x28ac], eax
mov dword [esp + 0x28a8], esi
lea esi, [eax + eax*4]
mov edx, dword [esp + esi*8 + 0x190]
mov ecx, dword [esp + esi*8 + 0x194]
mov dword [esp + 0x28f8], edx
mov edx, dword [esp + 0x78]
mov dword [esp + 0x28fc], ecx
add edx, esi
mov esi, dword [esp + edx*8 + 0x198]
mov edi, dword [esp + edx*8 + 0x19c]
mov ecx, dword [esp + edx*8 + 0x1a4]
mov edx, dword [esp + edx*8 + 0x1a0]
mov dword [esp + 0x2900], esi
mov dword [esp + 0x2904], edi
mov dword [esp + 0x290c], ecx
mov ecx, dword [esp + 0x60]
mov dword [esp + 0x2908], edx
lea edx, [eax + eax*2]
lea edx, [ebx + edx*8]
imul ecx, dword [esp + 0x28d8]
mov edi, dword [edx + 0x9dbb8]
mov esi, dword [edx + 0x9dbc8]
add edi, ecx
mov dword [esp + 0x28b0], edi
mov edi, dword [edx + 0x9dbbc]
add edi, ecx
mov dword [esp + 0x28b4], edi
mov edi, dword [edx + 0x9dbc0]
add edi, ecx
mov dword [esp + 0x28b8], edi
mov edi, dword [edx + 0x9dbc4]
add edi, ecx
mov dword [esp + 0x28bc], edi
mov edi, dword [esp + 0x74]
imul edi, dword [esp + 0x28dc]
add esi, edi
mov dword [esp + 0x28c0], esi
mov esi, dword [ebx + eax*4 + 0x9deb8]
add edi, dword [edx + 0x9dbcc]
lea ecx, [esi + ecx*2]
mov dword [esp + 0x28c4], edi
mov dword [esp + 0x28d4], ecx
mov edi, dword [esp + 0x64]
mov byte [ebp + 0x9e0dc], al
mov byte [ebp + 0x9e0dd], al
mov byte [ebp + 0x9e0de], al
mov byte [ebp + 0x9e0df], al
mov byte [ebp + 0x9e0e4], al
mov byte [ebp + 0x9e0e5], al
mov byte [ebp + 0x9e0e6], al
mov byte [ebp + 0x9e0e7], al
mov eax, dword [esp + 0x60]
mov dword [esp + 0x10], edi
mov dword [esp + 0xc], 4
mov dword [esp + 4], 0
mov dword [esp + 8], eax
mov dword [esp], ebx
call fcn.00b8da30
mov edx, dword [esp + 0x5c]
mov esi, dword [esp + 0x58]
mov dword [esp + 0x10], 0
mov dword [esp + 0xc], 3
mov dword [esp + 8], edx
mov dword [esp + 4], esi
mov dword [esp], ebx
call fcn.00bd4960
mov eax, dword [ebx + 0x3a548]
mov edx, dword [esp + 0x28f0]
mov esi, dword [esp + 0x68]
add esi, dword [esp + 0x28ec]
mov ecx, dword [ebx + 0x3a550]
cmp eax, edx
mov dword [esp + 0x28ec], esi
jg 0xba84cf
cmp edx, ecx
mov eax, ecx
cmovle eax, edx
mov dword [esp + 0x28f0], eax
mov edx, dword [esp + 0x28f4]
mov eax, dword [ebx + 0x3a54c]
mov ecx, dword [ebx + 0x3a554]
cmp eax, edx
jg 0xba84f4
cmp edx, ecx
mov eax, ecx
cmovle eax, edx
mov dword [esp + 0x28f4], eax
mov eax, dword [esp + 0x54]
cmp esi, dword [eax + 0x4c]
jge 0xba8513
mov edi, dword [esp + 0x7c]
mov ecx, 0x16
mov esi, dword [esp + 0x58]
rep movsd dword es:[edi], dword [esi]
add dword [esp + 0x4c], 1
mov edx, dword [esp + 0x70]
cmp dword [esp + 0x4c], edx
jl 0xba82b6
mov ecx, dword [esp + 0x54]
mov edx, dword [esp + 0x80]
add dword [esp + 0x50], 1
add dword [esp + 0x6c], 0x58
mov eax, dword [ecx + 0x54]
mov esi, ecx
mov ecx, dword [ecx + 0x50]
mov word [edx + 0x9e192], ax
mov word [edx + 0x9e196], ax
mov word [edx + 0x9e19a], ax
mov word [edx + 0x9e19e], ax
mov word [edx + 0x9e1b2], ax
mov word [edx + 0x9e1b6], ax
mov word [edx + 0x9e1ba], ax
mov word [edx + 0x9e1be], ax
mov eax, dword [esi + 0xc]
mov word [edx + 0x9e190], cx
mov word [edx + 0x9e194], cx
mov word [edx + 0x9e198], cx
mov word [edx + 0x9e19c], cx
mov word [edx + 0x9e1b0], cx
mov word [edx + 0x9e1b4], cx
mov word [edx + 0x9e1b8], cx
mov word [edx + 0x9e1bc], cx
add edx, 0x40
mov byte [ebp + 0x9e0dc], al
mov byte [ebp + 0x9e0dd], al
mov byte [ebp + 0x9e0de], al
mov byte [ebp + 0x9e0df], al
mov byte [ebp + 0x9e0e4], al
mov byte [ebp + 0x9e0e5], al
mov byte [ebp + 0x9e0e6], al
mov byte [ebp + 0x9e0e7], al
add ebp, 0x10
cmp dword [esp + 0x50], 2
jne 0xba81cd
mov edx, dword [esp + 0x1408]
mov eax, dword [esp + 0x13b0]
mov ebx, dword [esp + 0x88]
add eax, edx
mov edx, dword [esp + 0xa4]
mov dword [esp + 0x68], eax
mov dword [esp + 0x1360], eax
test edx, edx
je 0xba865c
cmp eax, dword [esp + 0xac]
jge 0xba8634
mov dword [esp + 0xac], eax
mov eax, dword [esp + 0x2960]
mov edx, dword [esp + 0x98]
mov dword [eax + 0x9d694], 4
call fcn.00ba1110
mov dword [esp + 0x68], eax
mov dword [esp + 0x1360], eax
cmp ebx, dword [esp + 0x68]
jle 0xba935b
mov dword [esp + 0x44], 0xe
mov dword [esp + 0x48], 4
mov eax, dword [esp + 0x2960]
lea edx, [esp + 0x94]
mov dword [esp + 0x70], edx
mov edx, dword [esp + 0x84]
mov dword [esp + 0x50], 0
mov dword [eax + 0x9d698], 0xf
mov ebx, eax
mov ebp, eax
imul eax, dword [esp + 0x50], 0x58
mov dword [esp + 0x28a0], 2
mov dword [esp + 0x54], 0
lea eax, [esp + eax + 0x1418]
mov dword [esp + 0x60], eax
mov eax, dword [esp + 0x70]
mov ecx, dword [eax + 0x388]
mov esi, eax
mov eax, dword [eax + 0x438]
mov dword [esp + 0x2930], ecx
cmp ecx, eax
mov dword [esp + 0x2934], eax
setne al
add esi, 0x1384
movzx eax, al
add eax, 1
mov dword [esp + 0x74], eax
mov eax, dword [esp + 0xa0]
mov dword [esp + 0x28a4], eax
mov eax, dword [ebp + 0x9df38]
mov dword [esp + 0x28d8], eax
mov eax, dword [ebp + 0x9df3c]
mov dword [esp + 0x28dc], eax
mov eax, dword [esp + 0x50]
shl eax, 3
mov dword [esp + 0x4c], eax
add eax, dword [ebp + 0x9dba0]
mov dword [esp + 0x28c8], eax
mov eax, dword [esp + 0x4c]
sar eax, 1
mov dword [esp + 0x6c], eax
add eax, dword [ebp + 0x9dba4]
mov dword [esp + 0x28cc], eax
mov eax, dword [esp + 0x6c]
add eax, dword [ebp + 0x9dba8]
mov dword [esp + 0x28d0], eax
mov eax, dword [esp + 0x60]
mov dword [eax + 0x4c], 0x7fffffff
mov eax, dword [esp + 0x50]
shl eax, 4
mov dword [esp + 0x7c], eax
mov eax, dword [esp + 0x50]
shl eax, 2
mov dword [esp + 0x80], eax
mov dword [esp + 0x84], esi
mov dword [esp + 0x88], edx
mov edx, dword [esp + 0x54]
mov ecx, dword [esp + 0x94]
mov eax, dword [esp + edx*4 + 0x2930]
mov edx, dword [ebp + 0x38fc0]
mov dword [esp + 0x78], ecx
sub edx, 1
cmp edx, 1
je 0xba880a
jle 0xba9237
cmp eax, 0xfe
jbe 0xba8d66
lea edx, [eax + 1]
xor ecx, ecx
cmp edx, 0xffff
mov edi, 0x10
jbe 0xba87ea
shr edx, 0x10
mov di, 0x30
sub edx, 1
mov cl, 0x20
cmp edx, 0xff
jbe 0xba87fa
shr edx, 8
mov ecx, edi
sub edx, 1
add ecx, dword [edx*4 + 0x1268c40]
imul ecx, dword [esp + 0x78]
mov dword [esp + 0x78], ecx
mov esi, dword [esp + 0x78]
mov dword [esp + 0x28ac], eax
mov dword [esp + 0x28a8], esi
lea esi, [eax + eax*4]
mov edx, dword [esp + esi*8 + 0x190]
mov ecx, dword [esp + esi*8 + 0x194]
mov dword [esp + 0x28f8], edx
mov edx, dword [esp + 0x50]
mov dword [esp + 0x28fc], ecx
add edx, esi
mov esi, dword [esp + edx*8 + 0x198]
mov edi, dword [esp + edx*8 + 0x19c]
mov ecx, dword [esp + edx*8 + 0x1ac]
mov edx, dword [esp + edx*8 + 0x1a8]
mov dword [esp + 0x2900], esi
mov dword [esp + 0x2904], edi
mov dword [esp + 0x290c], ecx
mov ecx, dword [esp + 0x4c]
mov dword [esp + 0x2908], edx
lea edx, [eax + eax*2]
lea edx, [ebp + edx*8]
add ecx, dword [edx + 0x9dbb8]
mov dword [esp + 0x28b0], ecx
mov ecx, dword [esp + 0x4c]
add ecx, dword [edx + 0x9dbbc]
mov dword [esp + 0x28b4], ecx
mov ecx, dword [esp + 0x4c]
add ecx, dword [edx + 0x9dbc0]
mov dword [esp + 0x28b8], ecx
mov ecx, dword [esp + 0x4c]
add ecx, dword [edx + 0x9dbc4]
mov dword [esp + 0x28bc], ecx
mov ecx, dword [esp + 0x6c]
add ecx, dword [edx + 0x9dbc8]
mov edx, dword [edx + 0x9dbcc]
add edx, dword [esp + 0x6c]
mov dword [esp + 0x28c0], ecx
mov dword [esp + 0x28c4], edx
mov edx, dword [esp + 0x7c]
add edx, dword [ebp + eax*4 + 0x9deb8]
mov edi, dword [esp + 0x64]
mov byte [ebx + 0x9e0dc], al
mov byte [ebx + 0x9e0dd], al
mov byte [ebx + 0x9e0e4], al
mov byte [ebx + 0x9e0e5], al
mov byte [ebx + 0x9e0ec], al
mov byte [ebx + 0x9e0ed], al
mov byte [ebx + 0x9e0f4], al
mov byte [ebx + 0x9e0f5], al
mov eax, dword [esp + 0x80]
mov dword [esp + 0x28d4], edx
mov dword [esp + 0x10], edi
mov dword [esp + 0xc], 2
mov dword [esp + 8], eax
mov dword [esp + 4], 0
mov dword [esp], ebp
call fcn.00b8da30
mov edx, dword [esp + 0x5c]
mov esi, dword [esp + 0x58]
mov dword [esp + 0x10], 0
mov dword [esp + 0xc], 3
mov dword [esp + 8], edx
mov dword [esp + 4], esi
mov dword [esp], ebp
call fcn.00bd4960
mov eax, dword [ebp + 0x3a548]
mov edx, dword [esp + 0x28f0]
mov esi, dword [esp + 0x78]
add esi, dword [esp + 0x28ec]
mov ecx, dword [ebp + 0x3a550]
cmp eax, edx
mov dword [esp + 0x28ec], esi
jg 0xba89ab
cmp edx, ecx
mov eax, ecx
cmovle eax, edx
mov dword [esp + 0x28f0], eax
mov edx, dword [esp + 0x28f4]
mov eax, dword [ebp + 0x3a54c]
mov ecx, dword [ebp + 0x3a554]
cmp eax, edx
jg 0xba89d0
cmp edx, ecx
mov eax, ecx
cmovle eax, edx
mov dword [esp + 0x28f4], eax
mov eax, dword [esp + 0x60]
cmp esi, dword [eax + 0x4c]
jge 0xba89f2
mov edi, dword [esp + 0x84]
mov ecx, 0x16
mov esi, dword [esp + 0x58]
rep movsd dword es:[edi], dword [esi]
add dword [esp + 0x54], 1
mov edx, dword [esp + 0x74]
cmp dword [esp + 0x54], edx
jl 0xba8797
mov ecx, dword [esp + 0x60]
mov edx, dword [esp + 0x88]
add dword [esp + 0x50], 1
add dword [esp + 0x70], 0x58
mov eax, dword [ecx + 0x54]
mov esi, ecx
mov ecx, dword [ecx + 0x50]
mov word [edx + 0x9e192], ax
mov word [edx + 0x9e196], ax
mov word [edx + 0x9e1b2], ax
mov word [edx + 0x9e1b6], ax
mov word [edx + 0x9e1d2], ax
mov word [edx + 0x9e1d6], ax
mov word [edx + 0x9e1f2], ax
mov word [edx + 0x9e1f6], ax
mov eax, dword [esi + 0xc]
mov word [edx + 0x9e190], cx
mov word [edx + 0x9e194], cx
mov word [edx + 0x9e1b0], cx
mov word [edx + 0x9e1b4], cx
mov word [edx + 0x9e1d0], cx
mov word [edx + 0x9e1d4], cx
mov word [edx + 0x9e1f0], cx
mov word [edx + 0x9e1f4], cx
add edx, 8
mov byte [ebx + 0x9e0dc], al
mov byte [ebx + 0x9e0dd], al
mov byte [ebx + 0x9e0e4], al
mov byte [ebx + 0x9e0e5], al
mov byte [ebx + 0x9e0ec], al
mov byte [ebx + 0x9e0ed], al
mov byte [ebx + 0x9e0f4], al
mov byte [ebx + 0x9e0f5], al
add ebx, 2
cmp dword [esp + 0x50], 2
jne 0xba86a5
mov eax, dword [esp + 0xa4]
xor ecx, ecx
mov ebx, dword [esp + 0x1464]
add ebx, dword [esp + 0x14bc]
test eax, eax
mov dword [esp + 0x1414], ebx
je 0xba8b35
cmp ebx, dword [esp + 0xac]
jge 0xba8b08
mov dword [esp + 0xac], ebx
mov eax, dword [esp + 0x2960]
mov edx, dword [esp + 0x98]
mov dword [eax + 0x9d694], 4
call fcn.00ba1110
mov ecx, dword [esp + 0xa4]
mov ebx, eax
mov dword [esp + 0x1414], eax
cmp dword [esp + 0x68], ebx
jg 0xba9346
mov ebx, dword [esp + 0x68]
jmp 0xba7b32
lea eax, [esp + 0x1418]
mov dword [esp + 4], eax
mov eax, dword [esp + 0x2960]
mov dword [esp], eax
call fcn.00bd8ce0
lea eax, [esp + 0x1470]
mov dword [esp + 4], eax
mov eax, dword [esp + 0x2960]
mov dword [esp], eax
call fcn.00bd8ce0
mov ebx, dword [esp + 0x1464]
add ebx, dword [esp + 0x14bc]
jmp 0xba7b77
lea edi, [edx + 1]
mov dword [esp + 0x48], edi
jmp 0xba7fbf
mov di, 0x30
shr ecx, 8
sub ecx, 1
jmp 0xba7fb5
lea ecx, [edx + 1]
xor esi, esi
mov dword [esp + 0x48], ecx
jmp 0xba7fbf
mov eax, dword [esp + 0x50]
mov edx, dword [esp + 0x94]
mov edi, dword [esp + 0x60]
mov ecx, dword [eax + 0x4c]
mov dword [esp + 0x4c], edx
mov edx, dword [eax + 0x54]
mov esi, dword [esp + 0x5c]
mov eax, dword [eax + 0x50]
add ecx, dword [esp + 0x4c]
mov word [ebx + edi*4 + 0x9e162], dx
add dword [esp + 0x88], 0x58
add dword [esp + 0x8c], 8
mov word [ebx + edi*4 + 0x9e160], ax
mov edi, dword [esp + 0x58]
mov word [ebx + esi*4 + 0x9e160], ax
mov word [ebx + esi*4 + 0x9e162], dx
mov esi, dword [esp + 0x54]
mov word [ebx + edi*4 + 0x9e160], ax
mov word [ebx + edi*4 + 0x9e162], dx
mov word [ebx + esi*4 + 0x9e162], dx
mov edx, dword [esp + 0x50]
mov word [ebx + esi*4 + 0x9e160], ax
mov eax, dword [edx + 0xc]
mov edx, dword [esp + 0x60]
mov byte [ebx + edx + 0x9e0d0], al
mov edx, dword [esp + 0x5c]
mov byte [ebx + edx + 0x9e0d0], al
mov byte [ebx + edi + 0x9e0d0], al
mov byte [ebx + esi + 0x9e0d0], al
mov eax, dword [esp + 0x50]
mov dword [eax + 0x4c], ecx
mov eax, dword [esp + 0x74]
cmp eax, 4
jne 0xba7e56
mov eax, dword [esp + 0xa4]
mov ebx, dword [esp + 0x45c]
add ebx, dword [esp + 0x4b4]
add ebx, dword [esp + 0x50c]
add ebx, dword [esp + 0x564]
test eax, eax
mov dword [esp + 0x18c], ebx
jne 0xba763d
jmp 0xba769b
mov eax, dword [esp + 0xbc]
jmp 0xba7c1f
mov dword [esp + 4], 0
xor esi, esi
mov dword [esp], eax
call fcn.00b8e5e0
mov dword [esp + 0x289c], eax
jmp 0xba7852
mov ebp, dword [esp + 0x48]
mov dword [eax + 0x9d694], ebp
mov ebp, dword [eax + 0x174]
test ebp, ebp
jne 0xba928b
mov eax, dword [esp + 0x2960]
mov dword [eax + 0x9e674], 0
jmp 0xba7b77
mov eax, dword [esp + 0x2960]
mov dword [esp + 0x44], 0xd
mov dword [esp + 0x48], 5
mov dword [eax + 0x9d6a8], 3
mov dword [eax + 0x9d6a4], 3
mov dword [eax + 0x9d6a0], 3
mov dword [eax + 0x9d69c], 3
jmp 0xba7aeb
mov dword [esp], eax
call fcn.00b90d40
mov eax, dword [esp + 0x2960]
jmp 0xba7870
mov ecx, dword [eax*4 + 0x1268c40]
jmp 0xba8801
mov ecx, dword [eax*4 + 0x1268c40]
jmp 0xba8320
xor ebp, ebp
mov edi, 1
jmp 0xba79aa
mov eax, dword [esp + 0x2960]
mov dword [esp], eax
call fcn.00b90d40
mov eax, dword [esp + 0x2960]
mov dword [esp + 4], 1
mov dword [esp], eax
call fcn.00bacdd0
mov esi, eax
jmp 0xba7d23
mov edx, dword [esp + 0x2960]
mov eax, dword [edx + 0x9d69c]
cmp eax, 1
je 0xba9a67
jle 0xba9cd0
cmp eax, 2
je 0xba9a20
cmp eax, 3
nop
je 0xba99fa
mov eax, dword [esp + 0x2960]
xor ebx, ebx
mov dword [esp + 8], 0x1268918
mov dword [esp + 4], 0
mov dword [esp], eax
call fcn.00b84fd0
mov edx, dword [esp + 0x2960]
mov eax, dword [edx + 0x9d6a0]
cmp eax, 1
je 0xba99b3
jle 0xba9e40
cmp eax, 2
je 0xba996c
cmp eax, 3
nop
je 0xba9946
mov eax, dword [esp + 0x2960]
mov dword [esp + 8], 0x1268918
mov dword [esp + 4], 0
mov dword [esp], eax
call fcn.00b84fd0
mov edx, dword [esp + 0x2960]
mov eax, dword [edx + 0x9d6a4]
cmp eax, 1
je 0xba9b1b
jle 0xba9d61
cmp eax, 2
je 0xba9ad4
cmp eax, 3
lea esi, [esi]
je 0xba9aae
mov eax, dword [esp + 0x2960]
mov dword [esp + 8], 0x1268918
mov dword [esp + 4], 0
mov dword [esp], eax
call fcn.00b84fd0
mov edx, dword [esp + 0x2960]
mov eax, dword [edx + 0x9d6a8]
cmp eax, 1
je 0xba9b62
jle 0xba9bf0
cmp eax, 2
je 0xba9ba9
cmp eax, 3
lea esi, [esi]
je 0xba9920
mov eax, dword [esp + 0x2960]
mov dword [esp + 8], 0x1268918
mov dword [esp + 4], 0
mov dword [esp], eax
call fcn.00b84fd0
jmp 0xba7b77
mov eax, dword [esp + 0x2960]
mov dword [esp], eax
call fcn.00b90d40
mov eax, dword [esp + 0x2960]
mov dword [esp + 4], 1
mov dword [esp], eax
call fcn.00bacdd0
mov esi, eax
jmp 0xba77e5
mov eax, dword [esp + 0x140]
mov edx, dword [esp + 0x2960]
mov byte [edx + 0x9e0dc], al
mov byte [edx + 0x9e0dd], al
mov byte [edx + 0x9e0de], al
mov byte [edx + 0x9e0df], al
mov byte [edx + 0x9e0e4], al
mov byte [edx + 0x9e0e5], al
mov byte [edx + 0x9e0e6], al
mov byte [edx + 0x9e0e7], al
mov byte [edx + 0x9e0ec], al
mov byte [edx + 0x9e0ed], al
mov byte [edx + 0x9e0ee], al
mov byte [edx + 0x9e0ef], al
mov byte [edx + 0x9e0f4], al
mov byte [edx + 0x9e0f5], al
mov byte [edx + 0x9e0f6], al
mov byte [edx + 0x9e0f7], al
mov eax, dword [esp + 0x98]
mov dword [esp + 0x10], 0
mov dword [esp + 0xc], 0
mov dword [esp], edx
mov dword [esp + 8], eax
lea eax, [esp + 0x134]
mov dword [esp + 4], eax
call fcn.00bdcbb0
jmp 0xba656f
mov edx, dword [esp + 0x2960]
mov dword [esp + 0xc], 0x20
mov dword [esp + 0x2864], 0
mov eax, dword [edx + 0x9dbac]
mov dword [esp + 4], 0x10
mov dword [esp + 8], eax
mov eax, dword [edx + 0x9dba0]
mov dword [esp], eax
call dword [edx + 0x9f5d4]
mov ecx, dword [esp + 0x2960]
mov dword [esp + 0xc], 0x20
mov esi, eax
mov dword [esp + 0x2864], eax
mov eax, dword [esp + 0x94]
add eax, esi
mov dword [esp + 0x286c], eax
mov eax, dword [ecx + 0x9dbac]
mov dword [esp + 4], 0x10
add eax, 8
mov dword [esp + 8], eax
mov eax, dword [ecx + 0x9dba0]
add eax, 8
mov dword [esp], eax
call dword [ecx + 0x9f5d4]
mov edi, dword [esp + 0x2960]
mov dword [esp + 0xc], 0x20
add esi, eax
add eax, dword [esp + 0x94]
mov dword [esp + 0x2864], esi
mov dword [esp + 0x2870], eax
mov eax, dword [edi + 0x9dbac]
mov dword [esp + 4], 0x10
add eax, 0x100
mov dword [esp + 8], eax
mov eax, dword [edi + 0x9dba0]
sub eax, 0xffffff80
mov dword [esp], eax
call dword [edi + 0x9f5d4]
mov dword [esp + 0xc], 0x20
add esi, eax
add eax, dword [esp + 0x94]
mov dword [esp + 0x2864], esi
mov dword [esp + 0x2874], eax
mov eax, dword [edi + 0x9dbac]
mov dword [esp + 4], 0x10
add eax, 0x108
mov dword [esp + 8], eax
mov eax, dword [edi + 0x9dba0]
add eax, 0x88
mov dword [esp], eax
call dword [edi + 0x9f5d4]
mov ecx, dword [esp + 0x94]
lea edx, [eax + ecx]
add eax, esi
mov esi, dword [esp + 0xa4]
add ecx, eax
mov dword [esp + 0x2878], edx
mov dword [esp + 0x2864], ecx
test esi, esi
je 0xba78d3
cmp ecx, dword [esp + 0xac]
jge 0xba9126
mov dword [esp + 0xac], ecx
mov eax, dword [esp + 0x2960]
mov edx, dword [esp + 0x98]
mov dword [eax + 0x9d694], 7
call fcn.00ba1110
mov dword [esp + 0x2864], eax
jmp 0xba78d3
lea eax, [esp + 0x134]
mov dword [esp + 4], eax
mov eax, dword [esp + 0x2960]
mov dword [esp], eax
call fcn.00bd8ce0
mov ebx, dword [esp + 0x180]
jmp 0xba7b77
mov edx, eax
mov dword [esp + 0xc], 0x20
mov eax, dword [eax + 0x9dbac]
mov dword [esp + 4], 0x10
mov dword [esp + 8], eax
mov eax, dword [edx + 0x9dba0]
mov dword [esp], eax
call dword [edx + 0x9f580]
mov ecx, dword [esp + 0x2960]
mov dword [esp + 0xc], 0x20
mov ebx, eax
mov eax, dword [ecx + 0x9dbb0]
mov dword [esp + 4], 0x10
mov dword [esp + 8], eax
mov eax, dword [ecx + 0x9dba4]
mov dword [esp], eax
call dword [ecx + 0x9f58c]
mov edi, dword [esp + 0x2960]
mov dword [esp + 0xc], 0x20
add ebx, eax
mov eax, dword [edi + 0x9dbb4]
mov dword [esp + 4], 0x10
mov dword [esp + 8], eax
mov eax, dword [edi + 0x9dba8]
mov dword [esp], eax
call dword [edi + 0x9f58c]
add ebx, eax
mov eax, dword [esp + 0x98]
lea eax, [eax + eax*2]
add eax, eax
cmp eax, ebx
jl 0xba78a3
mov dword [edi + 0x9d694], 0x12
lea edx, [esp + 0x94]
mov eax, edi
call fcn.00b9bd20
jmp 0xba6582
mov dword [esp + 0x78], 0
jmp 0xba880a
lea eax, [esp + 0x1364]
mov dword [esp + 4], eax
mov eax, dword [esp + 0x2960]
mov dword [esp], eax
call fcn.00bd8ce0
lea eax, [esp + 0x13bc]
mov dword [esp + 4], eax
mov eax, dword [esp + 0x2960]
mov dword [esp], eax
call fcn.00bd8ce0
mov ebx, dword [esp + 0x13b0]
add ebx, dword [esp + 0x1408]
jmp 0xba7b77
mov dword [esp], eax
call fcn.00b8d870
test eax, eax
je 0xba8cf8
mov eax, dword [esp + 0x2960]
lea edx, [esp + 0x94]
mov dword [eax + 0x9e674], 1
call fcn.00b9bd20
mov eax, dword [esp + 0x2960]
mov edx, dword [esp + 0x2960]
mov esi, dword [eax + 0x9d6ac]
xor eax, eax
test esi, esi
sete al
mov dword [edx + 0x9d6ac], eax
mov edx, dword [esp + 0x98]
mov eax, dword [esp + 0x2960]
call fcn.00ba1110
cmp ebx, eax
mov esi, eax
jl 0xba9663
test ebx, ebx
mov eax, dword [esp + 0xac]
jle 0xba9323
imul esi
mov dword [esp + 8], ebx
mov dword [esp + 4], edx
mov edx, ebx
sar edx, 0x1f
mov dword [esp], eax
mov dword [esp + 0xc], edx
call fcn.01087f40
mov dword [esp + 0xac], eax
test eax, eax
jne 0xba9332
mov dword [esp + 0xac], 1
mov ebx, esi
jmp 0xba7b77
mov dword [esp + 0x68], 0
jmp 0xba8329
mov dword [esp + 0x44], 0xf
mov dword [esp + 0x48], 4
jmp 0xba7b32
mov dword [esp + 0x68], ebx
jmp 0xba8676
mov edx, dword [eax + 0x174]
mov dword [eax + 0x9d694], edi
test edx, edx
jne 0xbaa0a0
mov eax, dword [esp + 0x2960]
mov dword [eax + 0x9e674], 0
jmp 0xba7980
mov eax, dword [esp + 0x2960]
lea edx, [esp + 0x94]
call fcn.00ba2300
mov ebp, dword [esp + 0x2868]
cmp ebp, esi
jge 0xba7940
mov eax, dword [esp + 0x2960]
mov edx, dword [eax + 0x9d69c]
cmp edx, dword [eax + 0x9d6a0]
je 0xba9ed3
mov ecx, eax
mov eax, dword [eax + 0x9d6a4]
cmp eax, dword [ecx + 0x9d6a8]
je 0xba9ed3
mov esi, ebp
mov ebx, 0xd
mov edi, 0x11
cmp edx, eax
je 0xba9406
mov eax, dword [esp + 0x2960]
mov edx, dword [eax + 0x9d6a8]
cmp dword [eax + 0x9d6a0], edx
jne 0xba7940
mov eax, dword [esp + 0x2960]
lea edx, [esp + 0x94]
call fcn.00ba4320
mov eax, dword [esp + 0x2880]
cmp eax, esi
jge 0xba7940
mov edi, dword [esp + 0x2898]
mov esi, eax
mov ebx, 0xf
jmp 0xba7940
mov edx, eax
mov eax, dword [esp + 0x130]
shl eax, 4
add eax, dword [esp + 0x14c8]
mov esi, dword [edx + eax*4 + 0x9ea98]
mov eax, dword [edx + 0x9d698]
cmp eax, 0xe
je 0xba9df4
jg 0xba98d2
cmp eax, 0xd
jne 0xba79c5
mov eax, dword [esp + 0x2960]
cmp dword [eax + 0x9d69c], 0xb
je 0xbaa9fa
cmp dword [eax + 0x9d6a0], 0xb
je 0xbaa9c5
cmp dword [eax + 0x9d6a4], 0xb
je 0xbaa7d9
cmp dword [eax + 0x9d6a8], 0xb
jne 0xba79c5
lea eax, [esp + 0x18b0]
mov dword [esp + 8], eax
lea eax, [esp + 0x518]
mov dword [esp + 4], eax
mov eax, dword [esp + 0x2960]
mov dword [esp + 0xc], esi
mov dword [esp], eax
call fcn.00bd8d80
jmp 0xba79c5
mov ecx, dword [esp + 0x2960]
mov eax, dword [esp + 0x1370]
mov byte [ecx + 0x9e0dc], al
mov byte [ecx + 0x9e0dd], al
mov byte [ecx + 0x9e0de], al
mov byte [ecx + 0x9e0df], al
mov byte [ecx + 0x9e0e4], al
mov byte [ecx + 0x9e0e5], al
mov byte [ecx + 0x9e0e6], al
mov byte [ecx + 0x9e0e7], al
mov eax, dword [esp + 0x13c8]
mov byte [ecx + 0x9e0ec], al
mov byte [ecx + 0x9e0ed], al
mov byte [ecx + 0x9e0ee], al
mov byte [ecx + 0x9e0ef], al
mov byte [ecx + 0x9e0f4], al
mov byte [ecx + 0x9e0f5], al
mov byte [ecx + 0x9e0f6], al
mov byte [ecx + 0x9e0f7], al
mov eax, dword [esp + 0x98]
mov dword [esp + 0x10], 0
mov dword [esp + 0xc], 0
mov dword [esp], ecx
mov dword [esp + 8], eax
lea eax, [esp + 0x1364]
mov dword [esp + 4], eax
call fcn.00bdcbb0
mov eax, dword [esp + 0x98]
mov dword [esp + 0x10], 0
mov dword [esp + 0xc], 8
mov dword [esp + 8], eax
lea eax, [esp + 0x13bc]
mov dword [esp + 4], eax
mov eax, dword [esp + 0x2960]
mov dword [esp], eax
call fcn.00bdcbb0
jmp 0xba656f
mov edx, dword [esi*4 + 0x1268c40]
jmp 0xba6d93
mov ecx, dword [edx*4 + 0x1268c40]
jmp 0xba7626
mov eax, dword [esp + 0x2960]
lea edx, [esp + 0x94]
mov dword [eax + 0x9d694], 0x12
call fcn.00b9bd20
jmp 0xba6582
lea edx, [ecx + ecx]
add eax, 1
lea ecx, [edx + 0xc]
add edx, 0xd
lea esi, [edi + ecx]
add edi, edx
mov dword [esp + 0x5c], edi
mov edi, dword [esp + 0x44]
mov dword [esp + 0x48], edx
mov dword [esp + 0x74], eax
mov eax, dword [esp + 0x50]
mov dword [esp + 0x60], esi
lea edx, [edi + edi + 1]
mov edi, esi
shl edx, 3
add ecx, edx
add edx, dword [esp + 0x48]
mov dword [esp + 0x58], ecx
mov ecx, 0x7fffffff
mov dword [esp + 0x54], edx
jmp 0xba8bd6
jge 0xba7dd7
jmp 0xba7e1f
mov dword [esp + 4], 1
mov dword [esp], eax
call fcn.00bacdd0
mov esi, eax
jmp 0xba78a3
mov eax, dword [esp + 0x2960]
mov edx, dword [esp + 0x2960]
mov edi, dword [eax + 0x9d6ac]
xor eax, eax
test edi, edi
sete al
mov dword [edx + 0x9d6ac], eax
jmp 0xba7b77
mov eax, dword [esp + 0x94]
lea eax, [eax + eax*2]
sub dword [esp + 0x180], eax
sub dword [esp + 0x1518], eax
cmp edi, 8
je 0xbaa362
cmp edi, 0xc
je 0xbaa332
cmp edi, 0x10
jne 0xba7980
lea eax, [esp + 0x134]
mov dword [esp + 4], eax
mov eax, dword [esp + 0x2960]
mov dword [esp], eax
call fcn.00bd8ce0
lea eax, [esp + 0x14cc]
mov dword [esp + 4], eax
mov eax, dword [esp + 0x2960]
mov dword [esp], eax
call fcn.00bd8ce0
jmp 0xba7980
mov edx, dword [esp + 0x2960]
mov eax, dword [esp + 0x1424]
mov byte [edx + 0x9e0dc], al
mov byte [edx + 0x9e0dd], al
mov byte [edx + 0x9e0e4], al
mov byte [edx + 0x9e0e5], al
mov byte [edx + 0x9e0ec], al
mov byte [edx + 0x9e0ed], al
mov byte [edx + 0x9e0f4], al
mov byte [edx + 0x9e0f5], al
mov eax, dword [esp + 0x147c]
mov byte [edx + 0x9e0de], al
mov byte [edx + 0x9e0df], al
mov byte [edx + 0x9e0e6], al
mov byte [edx + 0x9e0e7], al
mov byte [edx + 0x9e0ee], al
mov byte [edx + 0x9e0ef], al
mov byte [edx + 0x9e0f6], al
mov byte [edx + 0x9e0f7], al
mov eax, dword [esp + 0x98]
mov dword [esp + 0x10], 0
mov dword [esp + 0xc], 0
mov dword [esp], edx
mov dword [esp + 8], eax
lea eax, [esp + 0x1418]
mov dword [esp + 4], eax
call fcn.00bdcbb0
mov eax, dword [esp + 0x98]
mov dword [esp + 0x10], 0
mov dword [esp + 0xc], 4
mov dword [esp + 8], eax
lea eax, [esp + 0x1470]
mov dword [esp + 4], eax
mov eax, dword [esp + 0x2960]
mov dword [esp], eax
call fcn.00bdcbb0
jmp 0xba656f
cmp dword [esp + 0x2884], 7
jne 0xbaa171
lea eax, [esp + 0x26fc]
mov dword [esp + 4], eax
mov eax, dword [esp + 0x2960]
mov dword [esp], eax
call fcn.00bd8ce0
cmp dword [esp + 0x2888], 7
je 0xba982c
lea eax, [esp + 0x13bc]
mov dword [esp + 4], eax
mov eax, dword [esp + 0x2960]
mov dword [esp], eax
call fcn.00bd8ce0
cmp dword [esp + 0x2888], 3
je 0xba7980
lea eax, [esp + 0x2754]
mov dword [esp + 4], eax
mov eax, dword [esp + 0x2960]
mov dword [esp], eax
call fcn.00bd8ce0
jmp 0xba7980
xor eax, eax
jmp 0xba7629
xor edi, edi
jmp 0xba6d96
cmp dword [esp + 0x288c], 7
jne 0xbaa070
lea eax, [esp + 0x27b0]
mov dword [esp + 4], eax
mov eax, dword [esp + 0x2960]
mov dword [esp], eax
call fcn.00bd8ce0
cmp dword [esp + 0x2890], 7
je 0xba98b3
lea eax, [esp + 0x1470]
mov dword [esp + 4], eax
mov eax, dword [esp + 0x2960]
mov dword [esp], eax
call fcn.00bd8ce0
cmp dword [esp + 0x2890], 3
je 0xba7980
lea eax, [esp + 0x2808]
mov dword [esp + 4], eax
mov eax, dword [esp + 0x2960]
mov dword [esp], eax
call fcn.00bd8ce0
jmp 0xba7980
cmp eax, 0xf
je 0xba9c83
cmp eax, 0x10
nop
jne 0xba79c5
cmp edi, 0x10
jne 0xba79c5
lea eax, [esp + 0x14cc]
mov dword [esp + 8], eax
lea eax, [esp + 0x134]
mov dword [esp + 4], eax
mov eax, dword [esp + 0x2960]
mov dword [esp + 0xc], esi
mov dword [esp], eax
call fcn.00bd8d80
jmp 0xba79c5
lea eax, [esp + 0x518]
mov dword [esp + 4], eax
mov eax, dword [esp + 0x2960]
mov dword [esp], eax
call fcn.00bd8ce0
add ebx, dword [esp + 0x564]
jmp 0xba7b77
lea eax, [esp + 0x468]
mov dword [esp + 4], eax
mov eax, dword [esp + 0x2960]
mov dword [esp], eax
call fcn.00bd8ce0
add ebx, dword [esp + 0x4b4]
jmp 0xba8e55
lea eax, [esp + 0xf40]
mov dword [esp + 4], eax
mov eax, dword [esp + 0x2960]
mov dword [esp], eax
call fcn.00bd8ce0
lea eax, [esp + 0xf98]
mov dword [esp + 4], eax
mov eax, dword [esp + 0x2960]
mov dword [esp], eax
call fcn.00bd8ce0
add ebx, dword [esp + 0xf8c]
add ebx, dword [esp + 0xfe4]
jmp 0xba8e55
lea eax, [esp + 0xbc0]
mov dword [esp + 4], eax
mov eax, dword [esp + 0x2960]
mov dword [esp], eax
call fcn.00bd8ce0
lea eax, [esp + 0xc18]
mov dword [esp + 4], eax
mov eax, dword [esp + 0x2960]
mov dword [esp], eax
call fcn.00bd8ce0
add ebx, dword [esp + 0xc0c]
add ebx, dword [esp + 0xc64]
jmp 0xba8e55
lea eax, [esp + 0x410]
mov dword [esp + 4], eax
mov eax, dword [esp + 0x2960]
mov dword [esp], eax
call fcn.00bd8ce0
mov ebx, dword [esp + 0x45c]
jmp 0xba8e07
lea eax, [esp + 0xde0]
mov dword [esp + 4], eax
mov eax, dword [esp + 0x2960]
mov dword [esp], eax
call fcn.00bd8ce0
lea eax, [esp + 0xe38]
mov dword [esp + 4], eax
mov eax, dword [esp + 0x2960]
mov dword [esp], eax
call fcn.00bd8ce0
mov ebx, dword [esp + 0xe2c]
add ebx, dword [esp + 0xe84]
jmp 0xba8e07
lea eax, [esp + 0xb10]
mov dword [esp + 4], eax
mov eax, dword [esp + 0x2960]
mov dword [esp], eax
call fcn.00bd8ce0
lea eax, [esp + 0xb68]
mov dword [esp + 4], eax
mov eax, dword [esp + 0x2960]
mov dword [esp], eax
call fcn.00bd8ce0
mov ebx, dword [esp + 0xb5c]
add ebx, dword [esp + 0xbb4]
jmp 0xba8e07
lea eax, [esp + 0x4c0]
mov dword [esp + 4], eax
mov eax, dword [esp + 0x2960]
mov dword [esp], eax
call fcn.00bd8ce0
add ebx, dword [esp + 0x50c]
jmp 0xba8ea5
lea eax, [esp + 0x10a0]
mov dword [esp + 4], eax
mov eax, dword [esp + 0x2960]
mov dword [esp], eax
call fcn.00bd8ce0
lea eax, [esp + 0x10f8]
mov dword [esp + 4], eax
mov eax, dword [esp + 0x2960]
mov dword [esp], eax
call fcn.00bd8ce0
add ebx, dword [esp + 0x10ec]
add ebx, dword [esp + 0x1144]
jmp 0xba8ea5
lea eax, [esp + 0xc70]
mov dword [esp + 4], eax
mov eax, dword [esp + 0x2960]
mov dword [esp], eax
call fcn.00bd8ce0
lea eax, [esp + 0xcc8]
mov dword [esp + 4], eax
mov eax, dword [esp + 0x2960]
mov dword [esp], eax
call fcn.00bd8ce0
add ebx, dword [esp + 0xcbc]
add ebx, dword [esp + 0xd14]
jmp 0xba8ea5
lea eax, [esp + 0xd20]
mov dword [esp + 4], eax
mov eax, dword [esp + 0x2960]
mov dword [esp], eax
call fcn.00bd8ce0
lea eax, [esp + 0xd78]
mov dword [esp + 4], eax
mov eax, dword [esp + 0x2960]
mov dword [esp], eax
call fcn.00bd8ce0
add ebx, dword [esp + 0xd6c]
add ebx, dword [esp + 0xdc4]
jmp 0xba7b77
lea eax, [esp + 0x1200]
mov dword [esp + 4], eax
mov eax, dword [esp + 0x2960]
mov dword [esp], eax
call fcn.00bd8ce0
lea eax, [esp + 0x1258]
mov dword [esp + 4], eax
mov eax, dword [esp + 0x2960]
mov dword [esp], eax
call fcn.00bd8ce0
add ebx, dword [esp + 0x124c]
add ebx, dword [esp + 0x12a4]
jmp 0xba7b77
test eax, eax
jne 0xba8ed6
lea eax, [esp + 0x9a0]
mov dword [esp + 4], eax
mov eax, dword [esp + 0x2960]
mov dword [esp], eax
call fcn.00bd8ce0
lea eax, [esp + 0x9f8]
mov dword [esp + 4], eax
mov eax, dword [esp + 0x2960]
mov dword [esp], eax
call fcn.00bd8ce0
lea eax, [esp + 0xa50]
mov dword [esp + 4], eax
mov eax, dword [esp + 0x2960]
mov dword [esp], eax
call fcn.00bd8ce0
lea eax, [esp + 0xaa8]
mov dword [esp + 4], eax
mov eax, dword [esp + 0x2960]
mov dword [esp], eax
call fcn.00bd8ce0
mov eax, dword [esp + 0x9ec]
add eax, dword [esp + 0xa44]
add eax, dword [esp + 0xa9c]
add eax, dword [esp + 0xaf4]
add ebx, eax
jmp 0xba7b77
cmp dword [esp + 0x288c], 0xb
je 0xbaaa2f
cmp dword [esp + 0x2890], 0xb
jne 0xba79c5
lea eax, [esp + 0x2808]
mov dword [esp + 8], eax
lea eax, [esp + 0x1470]
mov dword [esp + 4], eax
mov eax, dword [esp + 0x2960]
mov dword [esp + 0xc], esi
mov dword [esp], eax
call fcn.00bd8d80
jmp 0xba79c5
test eax, eax
jne 0xba8de6
lea eax, [esp + 0x580]
mov dword [esp + 4], eax
mov eax, dword [esp + 0x2960]
mov dword [esp], eax
call fcn.00bd8ce0
lea eax, [esp + 0x5d8]
mov dword [esp + 4], eax
mov eax, dword [esp + 0x2960]
mov dword [esp], eax
call fcn.00bd8ce0
lea eax, [esp + 0x630]
mov dword [esp + 4], eax
mov eax, dword [esp + 0x2960]
mov dword [esp], eax
call fcn.00bd8ce0
lea eax, [esp + 0x688]
mov dword [esp + 4], eax
mov eax, dword [esp + 0x2960]
mov dword [esp], eax
call fcn.00bd8ce0
mov ebx, dword [esp + 0x5cc]
add ebx, dword [esp + 0x624]
add ebx, dword [esp + 0x67c]
add ebx, dword [esp + 0x6d4]
jmp 0xba8e07
test eax, eax
jne 0xba8e86
lea eax, [esp + 0x840]
mov dword [esp + 4], eax
mov eax, dword [esp + 0x2960]
mov dword [esp], eax
call fcn.00bd8ce0
lea eax, [esp + 0x898]
mov dword [esp + 4], eax
mov eax, dword [esp + 0x2960]
mov dword [esp], eax
call fcn.00bd8ce0
lea eax, [esp + 0x8f0]
mov dword [esp + 4], eax
mov eax, dword [esp + 0x2960]
mov dword [esp], eax
call fcn.00bd8ce0
lea eax, [esp + 0x948]
mov dword [esp + 4], eax
mov eax, dword [esp + 0x2960]
mov dword [esp], eax
call fcn.00bd8ce0
mov eax, dword [esp + 0x88c]
add eax, dword [esp + 0x8e4]
add eax, dword [esp + 0x93c]
add eax, dword [esp + 0x994]
add ebx, eax
jmp 0xba8ea5
cmp dword [esp + 0x2884], 0xb
je 0xbaaa5d
cmp dword [esp + 0x2888], 0xb
jne 0xba79c5
lea eax, [esp + 0x2754]
mov dword [esp + 8], eax
lea eax, [esp + 0x13bc]
mov dword [esp + 4], eax
mov eax, dword [esp + 0x2960]
mov dword [esp + 0xc], esi
mov dword [esp], eax
call fcn.00bd8d80
jmp 0xba79c5
test eax, eax
jne 0xba8e36
lea eax, [esp + 0x6e0]
mov dword [esp + 4], eax
mov eax, dword [esp + 0x2960]
mov dword [esp], eax
call fcn.00bd8ce0
lea eax, [esp + 0x738]
mov dword [esp + 4], eax
mov eax, dword [esp + 0x2960]
mov dword [esp], eax
call fcn.00bd8ce0
lea eax, [esp + 0x790]
mov dword [esp + 4], eax
mov eax, dword [esp + 0x2960]
mov dword [esp], eax
call fcn.00bd8ce0
lea eax, [esp + 0x7e8]
mov dword [esp + 4], eax
mov eax, dword [esp + 0x2960]
mov dword [esp], eax
call fcn.00bd8ce0
mov eax, dword [esp + 0x72c]
add eax, dword [esp + 0x784]
add eax, dword [esp + 0x7dc]
add eax, dword [esp + 0x834]
add ebx, eax
jmp 0xba8e55
mov eax, dword [esp + 0x2960]
lea edx, [esp + 0x94]
call fcn.00ba2e90
mov esi, dword [esp + 0x287c]
cmp ebp, esi
jg 0xbaa402
mov eax, dword [esp + 0x2960]
mov esi, ebp
mov ebx, 0xd
mov edi, 0x11
mov edx, dword [eax + 0x9d69c]
mov eax, dword [eax + 0x9d6a4]
jmp 0xba93e9
mov eax, dword [esp + 0x2960]
mov ebp, dword [eax + 0x9d69c]
cmp ebp, 0xc
je 0xba9f55
mov eax, dword [ebp*4 + 0x126c7c0]
xor edx, edx
cmp ebp, 0xb
sete dl
mov dword [esp + 0x44], edx
test eax, eax
jne 0xbaa485
mov eax, dword [ebp*4 + 0x126c804]
test eax, eax
jne 0xbaa426
mov eax, dword [esp + 0x2960]
mov ebp, dword [eax + 0x9d6a0]
cmp ebp, 0xc
je 0xba9f91
mov eax, dword [ebp*4 + 0x126c7c0]
xor edx, edx
cmp ebp, 0xb
sete dl
mov dword [esp + 0x44], edx
test eax, eax
jne 0xbaa550
mov ebp, dword [ebp*4 + 0x126c804]
test ebp, ebp
jne 0xbaa4f0
mov eax, dword [esp + 0x2960]
mov ebp, dword [eax + 0x9d6a4]
cmp ebp, 0xc
je 0xba9fcd
mov eax, dword [ebp*4 + 0x126c7c0]
xor edx, edx
cmp ebp, 0xb
sete dl
mov dword [esp + 0x44], edx
test eax, eax
jne 0xbaa616
mov eax, dword [ebp*4 + 0x126c804]
test eax, eax
jne 0xbaa5b7
mov eax, dword [esp + 0x2960]
mov ebp, dword [eax + 0x9d6a8]
cmp ebp, 0xc
je 0xba7980
mov eax, dword [ebp*4 + 0x126c7c0]
xor edx, edx
cmp ebp, 0xb
sete dl
mov dword [esp + 0x44], edx
test eax, eax
jne 0xbaa1a0
mov ebp, dword [ebp*4 + 0x126c804]
test ebp, ebp
je 0xba7980
mov ebp, dword [esp + 0x18fc]
mov eax, dword [esp + 0x94]
mov edx, ebp
lea eax, [eax + eax*2]
sub edx, eax
mov dword [esp + 0x18fc], edx
lea edx, [esp + 0x18b0]
mov dword [esp + 4], edx
mov edx, dword [esp + 0x2960]
mov dword [esp + 0x3c], eax
mov dword [esp], edx
call fcn.00bd8ce0
mov ecx, dword [esp + 0x44]
mov eax, dword [esp + 0x3c]
test ecx, ecx
jne 0xba7980
add eax, dword [esp + 0x18fc]
sub eax, ebp
add dword [esp + 0x2868], eax
jmp 0xba7980
lea eax, [esp + 0x1418]
mov dword [esp + 4], eax
mov eax, dword [esp + 0x2960]
mov dword [esp], eax
call fcn.00bd8ce0
cmp dword [esp + 0x288c], 3
je 0xba9881
jmp 0xba9867
mov dword [esp], eax
call fcn.00b8d870
test eax, eax
je 0xba9378
mov eax, dword [esp + 0x2960]
lea edx, [esp + 0x94]
mov dword [eax + 0x9e674], 1
call fcn.00b9bd20
mov eax, dword [esp + 0x2960]
mov edx, dword [esp + 0x2960]
mov ecx, dword [eax + 0x9d6ac]
xor eax, eax
test ecx, ecx
sete al
mov dword [edx + 0x9d6ac], eax
mov edx, dword [esp + 0x98]
mov eax, dword [esp + 0x2960]
call fcn.00ba1110
cmp esi, eax
mov ebp, eax
jl 0xbaa14a
test esi, esi
mov eax, dword [esp + 0xac]
jle 0xbaa134
imul ebp
mov dword [esp + 8], esi
mov dword [esp + 4], edx
mov edx, esi
sar edx, 0x1f
mov dword [esp], eax
mov dword [esp + 0xc], edx
call fcn.01087f40
mov dword [esp + 0xac], eax
test eax, eax
jne 0xbaa143
mov dword [esp + 0xac], 1
mov esi, ebp
jmp 0xba7980
mov eax, dword [esp + 0x2960]
mov edx, dword [esp + 0x2960]
mov eax, dword [eax + 0x9d6ac]
test eax, eax
sete al
movzx eax, al
mov dword [edx + 0x9d6ac], eax
jmp 0xba7980
lea eax, [esp + 0x1364]
mov dword [esp + 4], eax
mov eax, dword [esp + 0x2960]
mov dword [esp], eax
call fcn.00bd8ce0
cmp dword [esp + 0x2884], 3
je 0xba97fa
jmp 0xba97e0
mov edx, dword [esp + 0x564]
mov eax, dword [esp + 0x94]
mov ecx, edx
lea eax, [eax + eax*2]
sub ecx, eax
mov dword [esp + 0x564], ecx
lea ecx, [esp + 0x518]
mov dword [esp + 4], ecx
mov ecx, dword [esp + 0x2960]
mov dword [esp + 0x3c], eax
mov dword [esp + 0x38], edx
mov dword [esp], ecx
call fcn.00bd8ce0
mov eax, dword [esp + 0x44]
mov edx, dword [esp + 0x38]
test eax, eax
mov eax, dword [esp + 0x3c]
jne 0xba9ffe
add eax, dword [esp + 0x564]
sub eax, edx
add dword [esp + 0x2868], eax
jmp 0xba9ffe
mov eax, dword [esp + 0x288c]
mov edx, dword [esp + 0x2960]
cmp eax, 3
mov dword [edx + 0x9d6a4], eax
mov dword [edx + 0x9d69c], eax
je 0xbaa79f
cmp eax, 7
je 0xbaa765
mov eax, dword [esp + 0x2890]
mov edx, dword [esp + 0x2960]
cmp eax, 3
mov dword [edx + 0x9d6a8], eax
mov dword [edx + 0x9d6a0], eax
je 0xbaa67d
cmp eax, 7
jne 0xba656f
mov eax, dword [esp + 0x98]
mov dword [esp + 0x10], 1
mov dword [esp + 0xc], 4
mov dword [esp + 8], eax
lea eax, [esp + 0x2808]
mov dword [esp + 4], eax
mov eax, dword [esp + 0x2960]
mov dword [esp], eax
call fcn.00bdcbb0
jmp 0xba656f
mov eax, dword [esp + 0x2884]
mov edx, dword [esp + 0x2960]
cmp eax, 3
mov dword [edx + 0x9d6a0], eax
mov dword [edx + 0x9d69c], eax
je 0xbaa72b
cmp eax, 7
je 0xbaa6f1
mov eax, dword [esp + 0x2888]
mov edx, dword [esp + 0x2960]
cmp eax, 3
mov dword [edx + 0x9d6a8], eax
mov dword [edx + 0x9d6a4], eax
je 0xbaa6b7
cmp eax, 7
jne 0xba656f
mov eax, dword [esp + 0x98]
mov dword [esp + 0x10], 1
mov dword [esp + 0xc], 8
mov dword [esp + 8], eax
lea eax, [esp + 0x2754]
mov dword [esp + 4], eax
mov eax, dword [esp + 0x2960]
mov dword [esp], eax
call fcn.00bdcbb0
jmp 0xba656f
lea eax, [esp + 0x14cc]
mov dword [esp + 4], eax
mov eax, dword [esp + 0x2960]
mov dword [esp], eax
call fcn.00bd8ce0
mov eax, dword [esp + 0x94]
lea esi, [eax + eax*2]
add esi, dword [esp + 0x1518]
jmp 0xba7980
lea eax, [esp + 0x134]
mov dword [esp + 4], eax
mov eax, dword [esp + 0x2960]
mov dword [esp], eax
call fcn.00bd8ce0
mov eax, dword [esp + 0x94]
lea esi, [eax + eax*2]
add esi, dword [esp + 0x180]
jmp 0xba7980
cmp edi, 8
je 0xbaa8d0
cmp edi, 0xc
jne 0xba656f
mov eax, dword [esp + 0x98]
mov dword [esp + 0x10], 1
mov dword [esp + 0xc], 0
mov dword [esp + 8], eax
lea eax, [esp + 0x14cc]
mov dword [esp + 4], eax
mov eax, dword [esp + 0x2960]
mov dword [esp], eax
call fcn.00bdcbb0
jmp 0xba656f
mov eax, dword [esp + 0x2960]
lea edx, [esp + 0x94]
mov dword [eax + 0x9d694], 6
call fcn.00b9bd20
jmp 0xba6cf2
mov eax, dword [esp + 0x2960]
mov ebx, 0xe
mov edi, dword [esp + 0x2894]
mov edx, dword [eax + 0x9d69c]
mov eax, dword [eax + 0x9d6a4]
jmp 0xba93e9
mov ebp, dword [esp + 0x17f4]
mov eax, dword [esp + 0x94]
mov ecx, dword [esp + 0x2960]
mov edx, ebp
lea eax, [eax + eax*2]
sub edx, eax
mov dword [esp + 0x17f4], edx
lea edx, [esp + 0x17a8]
mov dword [esp + 0x3c], eax
mov dword [esp + 4], edx
mov dword [esp], ecx
call fcn.00bd8ce0
mov eax, dword [esp + 0x44]
test eax, eax
mov eax, dword [esp + 0x3c]
jne 0xba9f55
add eax, dword [esp + 0x17f4]
sub eax, ebp
add dword [esp + 0x2868], eax
jmp 0xba9f55
mov edx, dword [esp + 0x45c]
mov eax, dword [esp + 0x94]
mov ecx, edx
lea eax, [eax + eax*2]
sub ecx, eax
mov dword [esp + 0x45c], ecx
lea ecx, [esp + 0x410]
mov dword [esp + 4], ecx
mov ecx, dword [esp + 0x2960]
mov dword [esp + 0x3c], eax
mov dword [esp + 0x38], edx
mov dword [esp], ecx
call fcn.00bd8ce0
mov eax, dword [esp + 0x44]
mov edx, dword [esp + 0x38]
test eax, eax
mov eax, dword [esp + 0x3c]
jne 0xba9f46
add eax, dword [esp + 0x45c]
sub eax, edx
add dword [esp + 0x2868], eax
jmp 0xba9f46
mov ebp, dword [esp + 0x184c]
mov eax, dword [esp + 0x94]
mov ecx, dword [esp + 0x2960]
mov edx, ebp
lea eax, [eax + eax*2]
sub edx, eax
mov dword [esp + 0x184c], edx
lea edx, [esp + 0x1800]
mov dword [esp], ecx
mov dword [esp + 0x3c], eax
mov dword [esp + 4], edx
call fcn.00bd8ce0
mov ecx, dword [esp + 0x44]
mov eax, dword [esp + 0x3c]
test ecx, ecx
jne 0xba9f91
add eax, dword [esp + 0x184c]
sub eax, ebp
add dword [esp + 0x2868], eax
jmp 0xba9f91
mov edx, dword [esp + 0x4b4]
mov eax, dword [esp + 0x94]
mov ecx, edx
lea eax, [eax + eax*2]
sub ecx, eax
mov dword [esp + 0x4b4], ecx
lea ecx, [esp + 0x468]
mov dword [esp + 4], ecx
mov ecx, dword [esp + 0x2960]
mov dword [esp + 0x3c], eax
mov dword [esp + 0x38], edx
mov dword [esp], ecx
call fcn.00bd8ce0
mov edx, dword [esp + 0x44]
mov eax, dword [esp + 0x3c]
test edx, edx
mov edx, dword [esp + 0x38]
jne 0xba9f82
add eax, dword [esp + 0x4b4]
sub eax, edx
add dword [esp + 0x2868], eax
jmp 0xba9f82
mov ebp, dword [esp + 0x18a4]
mov eax, dword [esp + 0x94]
mov ecx, dword [esp + 0x2960]
mov edx, ebp
lea eax, [eax + eax*2]
sub edx, eax
mov dword [esp + 0x18a4], edx
lea edx, [esp + 0x1858]
mov dword [esp + 0x3c], eax
mov dword [esp + 4], edx
mov dword [esp], ecx
call fcn.00bd8ce0
mov eax, dword [esp + 0x44]
test eax, eax
mov eax, dword [esp + 0x3c]
jne 0xba9fcd
add eax, dword [esp + 0x18a4]
sub eax, ebp
add dword [esp + 0x2868], eax
jmp 0xba9fcd
mov edx, dword [esp + 0x50c]
mov eax, dword [esp + 0x94]
mov ecx, edx
lea eax, [eax + eax*2]
sub ecx, eax
mov dword [esp + 0x50c], ecx
lea ecx, [esp + 0x4c0]
mov dword [esp + 4], ecx
mov ecx, dword [esp + 0x2960]
mov dword [esp + 0x3c], eax
mov dword [esp + 0x38], edx
mov dword [esp], ecx
call fcn.00bd8ce0
mov eax, dword [esp + 0x44]
mov edx, dword [esp + 0x38]
test eax, eax
mov eax, dword [esp + 0x3c]
jne 0xba9fbe
add eax, dword [esp + 0x50c]
sub eax, edx
add dword [esp + 0x2868], eax
jmp 0xba9fbe
mov eax, dword [esp + 0x98]
mov dword [esp + 0x10], 0
mov dword [esp + 0xc], 4
mov dword [esp], edx
mov dword [esp + 8], eax
lea eax, [esp + 0x1470]
mov dword [esp + 4], eax
call fcn.00bdcbb0
mov eax, dword [esp + 0x2890]
jmp 0xbaa256
mov eax, dword [esp + 0x98]
mov dword [esp + 0x10], 0
mov dword [esp + 0xc], 8
mov dword [esp], edx
mov dword [esp + 8], eax
lea eax, [esp + 0x13bc]
mov dword [esp + 4], eax
call fcn.00bdcbb0
mov eax, dword [esp + 0x2888]
jmp 0xbaa2ef
mov eax, dword [esp + 0x98]
mov dword [esp + 0x10], 1
mov dword [esp + 0xc], 0
mov dword [esp + 8], eax
lea eax, [esp + 0x26fc]
mov dword [esp + 4], eax
mov eax, dword [esp + 0x2960]
mov dword [esp], eax
call fcn.00bdcbb0
jmp 0xbaa2cc
mov eax, dword [esp + 0x98]
mov dword [esp + 0x10], 0
mov dword [esp + 0xc], 0
mov dword [esp], edx
mov dword [esp + 8], eax
lea eax, [esp + 0x1364]
mov dword [esp + 4], eax
call fcn.00bdcbb0
mov eax, dword [esp + 0x2884]
jmp 0xbaa2c3
mov eax, dword [esp + 0x98]
mov dword [esp + 0x10], 1
mov dword [esp + 0xc], 0
mov dword [esp + 8], eax
lea eax, [esp + 0x27b0]
mov dword [esp + 4], eax
mov eax, dword [esp + 0x2960]
mov dword [esp], eax
call fcn.00bdcbb0
jmp 0xbaa233
mov eax, dword [esp + 0x98]
mov dword [esp + 0x10], 0
mov dword [esp + 0xc], 0
mov dword [esp], edx
mov dword [esp + 8], eax
lea eax, [esp + 0x1418]
mov dword [esp + 4], eax
call fcn.00bdcbb0
mov eax, dword [esp + 0x288c]
jmp 0xbaa22a
lea eax, [esp + 0x1858]
mov dword [esp + 8], eax
lea eax, [esp + 0x4c0]
mov dword [esp + 4], eax
mov eax, dword [esp + 0x2960]
mov dword [esp + 0xc], esi
mov dword [esp], eax
call fcn.00bd8d80
mov eax, dword [esp + 0x2960]
jmp 0xba94a1
mov eax, dword [esp + 0x98]
mov dword [esp + 0x10], 0
mov dword [esp + 0xc], 8
mov dword [esp + 8], eax
lea eax, [esp + 0x4c0]
mov dword [esp + 4], eax
mov eax, dword [esp + 0x2960]
mov dword [esp], eax
call fcn.00bdcbb0
mov eax, dword [esp + 0x2960]
jmp 0xba7ccd
mov eax, dword [esp + 0x98]
mov dword [esp + 0x10], 0
mov dword [esp + 0xc], 4
mov dword [esp + 8], eax
lea eax, [esp + 0x468]
mov dword [esp + 4], eax
mov eax, dword [esp + 0x2960]
mov dword [esp], eax
call fcn.00bdcbb0
mov eax, dword [esp + 0x2960]
jmp 0xba7cc0
mov eax, dword [esp + 0x98]
mov dword [esp + 0x10], 0
mov dword [esp + 0xc], 0xc
mov dword [esp], edx
mov dword [esp + 8], eax
lea eax, [esp + 0x518]
mov dword [esp + 4], eax
call fcn.00bdcbb0
mov ecx, dword [esp + 0x2960]
mov eax, dword [ecx + 0x9d6a8]
jmp 0xba7a8f
mov eax, dword [esp + 0x98]
mov dword [esp + 0x10], 0
mov dword [esp + 0xc], 0
mov dword [esp + 8], eax
lea eax, [esp + 0x134]
mov dword [esp + 4], eax
mov eax, dword [esp + 0x2960]
mov dword [esp], eax
call fcn.00bdcbb0
jmp 0xba656f
mov eax, dword [esp + 0x98]
mov dword [esp + 0x10], 1
mov dword [esp + 0xc], 8
mov dword [esp + 8], eax
lea eax, [esp + 0x1858]
mov dword [esp + 4], eax
mov eax, dword [esp + 0x2960]
mov dword [esp], eax
call fcn.00bdcbb0
jmp 0xba7a79
mov eax, dword [esp + 0x98]
mov dword [esp + 0x10], 0
mov dword [esp + 0xc], 8
mov dword [esp], edx
mov dword [esp + 8], eax
lea eax, [esp + 0x4c0]
mov dword [esp + 4], eax
call fcn.00bdcbb0
mov ecx, dword [esp + 0x2960]
mov eax, dword [ecx + 0x9d6a4]
jmp 0xba7a70
mov eax, dword [esp + 0x98]
mov dword [esp + 0x10], 0
mov dword [esp + 0xc], 0
mov dword [esp + 8], eax
lea eax, [esp + 0x410]
mov dword [esp + 4], eax
mov eax, dword [esp + 0x2960]
mov dword [esp], eax
call fcn.00bdcbb0
mov eax, dword [esp + 0x2960]
jmp 0xba7cb3
lea eax, [esp + 0x1800]
mov dword [esp + 8], eax
lea eax, [esp + 0x468]
mov dword [esp + 4], eax
mov eax, dword [esp + 0x2960]
mov dword [esp + 0xc], esi
mov dword [esp], eax
call fcn.00bd8d80
mov eax, dword [esp + 0x2960]
jmp 0xba9494
lea eax, [esp + 0x17a8]
mov dword [esp + 8], eax
lea eax, [esp + 0x410]
mov dword [esp + 4], eax
mov eax, dword [esp + 0x2960]
mov dword [esp + 0xc], esi
mov dword [esp], eax
call fcn.00bd8d80
mov eax, dword [esp + 0x2960]
jmp 0xba9487
lea eax, [esp + 0x27b0]
mov dword [esp + 8], eax
lea eax, [esp + 0x1418]
mov dword [esp + 4], eax
mov eax, dword [esp + 0x2960]
mov dword [esp + 0xc], esi
mov dword [esp], eax
call fcn.00bd8d80
jmp 0xba9c91
lea eax, [esp + 0x26fc]
mov dword [esp + 8], eax
lea eax, [esp + 0x1364]
mov dword [esp + 4], eax
mov eax, dword [esp + 0x2960]
mov dword [esp + 0xc], esi
mov dword [esp], eax
call fcn.00bd8d80
jmp 0xba9e02
mov eax, dword [esp + 0x98]
mov dword [esp + 0x10], 1
mov dword [esp + 0xc], 4
mov dword [esp + 8], eax
lea eax, [esp + 0x1800]
mov dword [esp + 4], eax
mov eax, dword [esp + 0x2960]
mov dword [esp], eax
call fcn.00bdcbb0
jmp 0xba7a5a
mov eax, dword [esp + 0x98]
mov dword [esp + 0x10], 0
mov dword [esp + 0xc], 4
mov dword [esp], edx
mov dword [esp + 8], eax
lea eax, [esp + 0x468]
mov dword [esp + 4], eax
call fcn.00bdcbb0
mov ecx, dword [esp + 0x2960]
mov eax, dword [ecx + 0x9d6a0]
jmp 0xba7a51
mov eax, dword [esp + 0x98]
mov dword [esp + 0x10], 1
mov dword [esp + 0xc], 0
mov dword [esp + 8], eax
lea eax, [esp + 0x17a8]
mov dword [esp + 4], eax
mov eax, dword [esp + 0x2960]
mov dword [esp], eax
call fcn.00bdcbb0
jmp 0xba7a3b
mov eax, dword [esp + 0x98]
mov dword [esp + 0x10], 0
mov dword [esp + 0xc], 0
mov dword [esp], edx
mov dword [esp + 8], eax
lea eax, [esp + 0x410]
mov dword [esp + 4], eax
call fcn.00bdcbb0
mov ecx, dword [esp + 0x2960]
mov eax, dword [ecx + 0x9d69c]
jmp 0xba7a32