Function at 0x8b7b41
Capabilities:
Resolve function by parsing pe exports

Disassembly:
push ebp
push edi
push esi
push ebx
sub esp, 0xac
mov edi, dword [esp + 0xc0]
mov ebp, dword [esp + 0xc4]
mov ebx, dword [edi + 0x18]
test ebx, ebx
jne 0x8b7ebc
mov edx, dword [edi]
mov ecx, dword [edx + 0x290]
test ecx, ecx
je 0x8b83f4
mov eax, dword [edi + 0xa0]
mov esi, dword [edi + 0x2018]
imul eax, dword [edi + 0x201c]
add eax, esi
test byte [edx + 0x194], 0x40
mov dword [esp + 0xa8], eax
jne 0x8b87d3
mov ebx, dword [edi + 0x7f4]
mov eax, dword [edi + 0xa90]
mov ecx, dword [esp + 0xa8]
mov byte [ecx + ebx], al
mov edx, dword [edi + 0x2024]
test edx, edx
jne 0x8b7bdc
mov ecx, dword [edi + 0x296c]
mov esi, 0x80
shl esi, cl
mov dword [edi + 0x9f8], esi
mov dword [edi + 0x9f4], esi
mov dword [edi + 0x9f0], esi
cmp word [edi + 0x3c], 0
js 0x8b8853
mov edx, dword [edi + 0x38]
test edx, edx
je 0x8b7c06
mov ebx, dword [edi + 0x10]
test ebx, ebx
jne 0x8b91a0
cmp dword [edi + 0xab0], 3
je 0x8b91a0
mov esi, dword [edi]
mov dword [esp + 0x20], 8
mov eax, dword [edi + 0x7b4]
mov ecx, dword [esi + 0x290]
mov ebx, dword [edi + 0x7b0]
mov dword [esp + 0x98], eax
sar dword [esp + 0x20], cl
test edx, edx
jne 0x8b7c87
mov ecx, dword [esp + 0xa8]
mov edx, dword [edi + 0xa68]
mov esi, dword [edi + 0x7ec]
add ecx, dword [edi + 0xa6c]
test edx, edx
je 0x8b8f78
mov dword [edi + 0xa68], 0
mov eax, 0x63
movzx edx, byte [ecx]
add dl, 1
cmp dl, 0x64
cmovb eax, edx
mov byte [ecx], al
movzx ecx, al
cmp ecx, esi
jl 0x8b7c84
mov esi, dword [edi + 0x7f0]
test esi, esi
jne 0x8b83e9
mov edx, dword [edi + 0x38]
mov ecx, dword [edi + 0x29a8]
mov esi, ebx
mov eax, dword [esp + 0x20]
imul eax, ebx
shl esi, cl
test ecx, ecx
cmove ebx, eax
mov eax, dword [edi + 0x2064]
mov ecx, dword [edi + 0x2060]
mov dword [esp + 0xa0], eax
mov eax, dword [edi + 0x2024]
mov dword [esp + 0x9c], ebx
test eax, eax
mov ebx, dword [edi + 0x205c]
mov dword [esp + 0xa4], ecx
jne 0x8b8a0a
test edx, edx
jne 0x8b7d23
mov eax, dword [edi + 0x1d3c]
lea edx, [edi + 0x1084]
test al, 1
jne 0x8b9258
test al, 2
je 0x8b7d23
lea eax, [edi + 0x330]
mov dword [esp + 0x10], edx
mov edx, dword [esp + 0xa0]
mov dword [esp + 0xc], eax
mov dword [esp + 4], edx
mov ecx, dword [esp + 0xa4]
mov edx, ebx
mov eax, edi
mov dword [esp + 8], 1
mov dword [esp], ecx
call fcn.008b48cf
cmp dword [edi + 0x2014], 1
jg 0x8b83e9
mov ecx, dword [edi]
mov eax, dword [ecx + 0x2c0]
test eax, eax
je 0x8b7d6b
cmp eax, 7
jle 0x8b7d4f
cmp dword [edi + 0xab0], 3
je 0x8b83e9
cmp eax, 0x1f
jle 0x8b7d62
cmp dword [edi + 0xab0], 1
jne 0x8b83e9
cmp eax, 0x2f
jg 0x8b83e9
mov edx, dword [edi + 0x38]
test edx, edx
jne 0x8b7d9b
mov eax, dword [edi + 0x28]
test eax, eax
jne 0x8b9ca1
mov eax, dword [edi + 0x30]
cmp eax, 1
je 0x8b9ca1
cmp eax, 2
je 0x8b9ca1
cmp eax, 0xd
je 0x8b9c93
mov edx, dword [edi + 0xa90]
mov eax, edi
mov dword [esp + 4], ebx
mov dword [esp + 0xc], edx
mov edx, ebp
mov dword [esp + 8], esi
mov dword [esp], 0
call fcn.008b79a1
mov eax, dword [edi + 0xa90]
mov ecx, dword [esp + 0x20]
mov dword [esp + 0xc], eax
lea edx, [ebp + 0x80]
lea eax, [ebx + ecx]
mov dword [esp + 8], esi
mov dword [esp], 1
mov dword [esp + 4], eax
mov eax, edi
call fcn.008b79a1
mov ecx, dword [edi + 0xa90]
add ebx, dword [esp + 0x9c]
lea edx, [ebp + 0x100]
mov eax, edi
mov dword [esp + 0xc], ecx
mov dword [esp + 4], ebx
mov dword [esp + 8], esi
mov dword [esp], 2
call fcn.008b79a1
mov eax, dword [edi + 0xa90]
add ebx, dword [esp + 0x20]
mov dword [esp + 0xc], eax
lea edx, [ebp + 0x180]
mov eax, edi
mov dword [esp + 4], ebx
mov dword [esp + 8], esi
mov dword [esp], 3
call fcn.008b79a1
mov ebx, dword [edi + 0x2998]
test ebx, ebx
je 0x8ba7d8
mov eax, dword [edi + 0xa94]
lea edx, [ebp + 0x200]
mov ecx, dword [esp + 0x98]
mov dword [esp + 0xc], eax
mov ebx, dword [esp + 0xa4]
mov eax, edi
mov dword [esp + 8], ecx
mov dword [esp + 4], ebx
mov dword [esp], 4
call fcn.008b79a1
mov esi, dword [edi + 0xa94]
lea edx, [ebp + 0x280]
mov ebp, dword [esp + 0x98]
mov dword [esp + 0xc], esi
mov ecx, dword [esp + 0xa0]
mov dword [esp + 8], ebp
mov dword [esp + 4], ecx
mov dword [esp], 5
mov eax, edi
call fcn.008b79a1
jmp 0x8b83e9
mov edx, dword [edi]
mov ebx, dword [edx + 0x290]
test ebx, ebx
je 0x8b81e6
mov eax, dword [edi + 0xa0]
mov ecx, dword [edi + 0x2018]
imul eax, dword [edi + 0x201c]
add eax, ecx
test byte [edx + 0x194], 0x40
mov dword [esp + 0x64], eax
jne 0x8b86af
mov edx, dword [edi + 0x7f4]
mov ecx, dword [edi + 0xa90]
mov ebx, dword [esp + 0x64]
mov byte [ebx + edx], cl
mov esi, dword [edi + 0x2024]
test esi, esi
jne 0x8b870b
mov eax, dword [edi + 0x1c]
test eax, eax
jne 0x8b7f28
mov esi, dword [edi + 0x2778]
test esi, esi
je 0x8b91b4
mov ebx, dword [edi + 0xa70]
mov edx, dword [esp + 0x64]
cmp byte [edx + ebx], 0
jne 0x8b95e6
cmp word [edi + 0x3c], 0
js 0x8b8739
mov edx, dword [edi + 0x38]
test edx, edx
je 0x8b7f66
mov ecx, dword [edi + 0x10]
test ecx, ecx
jne 0x8b918c
cmp dword [edi + 0xab0], 3
je 0x8b918c
mov eax, dword [edi]
mov dword [esp + 0x1c], 8
mov esi, dword [edi + 0x7b4]
mov ecx, dword [eax + 0x290]
mov ebx, dword [edi + 0x7b0]
mov dword [esp + 0x54], esi
sar dword [esp + 0x1c], cl
test edx, edx
jne 0x8b7fe1
mov ecx, dword [esp + 0x64]
mov edx, dword [edi + 0xa68]
mov esi, dword [edi + 0x7ec]
add ecx, dword [edi + 0xa6c]
test edx, edx
je 0x8b8f9e
mov dword [edi + 0xa68], 0
mov eax, 0x63
movzx edx, byte [ecx]
add dl, 1
cmp dl, 0x64
cmovb eax, edx
mov byte [ecx], al
movzx ecx, al
cmp ecx, esi
jl 0x8b7fde
mov esi, dword [edi + 0x7f0]
test esi, esi
jne 0x8b83e9
mov edx, dword [edi + 0x38]
mov ecx, dword [edi + 0x29a8]
mov esi, ebx
mov eax, dword [esp + 0x1c]
imul eax, ebx
shl esi, cl
test ecx, ecx
cmove ebx, eax
mov eax, dword [edi + 0x2064]
mov ecx, dword [edi + 0x2060]
mov dword [esp + 0x5c], eax
mov eax, dword [edi + 0x2024]
mov dword [esp + 0x58], ebx
test eax, eax
mov ebx, dword [edi + 0x205c]
mov dword [esp + 0x60], ecx
jne 0x8b8b2c
test edx, edx
jne 0x8b806e
mov eax, dword [edi + 0x1d3c]
lea edx, [edi + 0x1084]
test al, 1
jne 0x8b9296
test al, 2
je 0x8b806e
lea eax, [edi + 0x330]
mov dword [esp + 0x10], edx
mov edx, dword [esp + 0x5c]
mov dword [esp + 0xc], eax
mov dword [esp + 4], edx
mov ecx, dword [esp + 0x60]
mov edx, ebx
mov eax, edi
mov dword [esp + 8], 1
mov dword [esp], ecx
call fcn.008b48cf
cmp dword [edi + 0x2014], 1
jg 0x8b83e9
mov ecx, dword [edi]
mov eax, dword [ecx + 0x2c0]
test eax, eax
je 0x8b80b6
cmp eax, 7
jle 0x8b809a
cmp dword [edi + 0xab0], 3
je 0x8b83e9
cmp eax, 0x1f
jle 0x8b80ad
cmp dword [edi + 0xab0], 1
jne 0x8b83e9
cmp eax, 0x2f
jg 0x8b83e9
mov edx, dword [edi + 0x38]
test edx, edx
jne 0x8b80e6
mov eax, dword [edi + 0x28]
test eax, eax
jne 0x8ba282
mov eax, dword [edi + 0x30]
cmp eax, 1
je 0x8ba282
cmp eax, 2
je 0x8ba282
cmp eax, 0xd
je 0x8ba274
mov edx, dword [edi + 0xa90]
mov eax, edi
mov dword [esp + 4], ebx
mov dword [esp + 0xc], edx
mov edx, ebp
mov dword [esp + 8], esi
mov dword [esp], 0
call fcn.008b79a1
mov eax, dword [edi + 0xa90]
mov ecx, dword [esp + 0x1c]
mov dword [esp + 0xc], eax
lea edx, [ebp + 0x80]
lea eax, [ebx + ecx]
mov dword [esp + 8], esi
mov dword [esp], 1
mov dword [esp + 4], eax
mov eax, edi
call fcn.008b79a1
mov ecx, dword [edi + 0xa90]
add ebx, dword [esp + 0x58]
lea edx, [ebp + 0x100]
mov eax, edi
mov dword [esp + 0xc], ecx
mov dword [esp + 4], ebx
mov dword [esp + 8], esi
mov dword [esp], 2
call fcn.008b79a1
mov eax, dword [edi + 0xa90]
add ebx, dword [esp + 0x1c]
mov dword [esp + 0xc], eax
lea edx, [ebp + 0x180]
mov eax, edi
mov dword [esp + 4], ebx
mov dword [esp + 8], esi
mov dword [esp], 3
call fcn.008b79a1
mov ebx, dword [edi + 0x2998]
test ebx, ebx
je 0x8ba573
mov eax, dword [edi + 0xa94]
lea edx, [ebp + 0x200]
mov ecx, dword [esp + 0x54]
mov dword [esp + 0xc], eax
mov ebx, dword [esp + 0x60]
mov eax, edi
mov dword [esp + 8], ecx
mov dword [esp + 4], ebx
mov dword [esp], 4
call fcn.008b79a1
mov esi, dword [edi + 0xa94]
lea edx, [ebp + 0x280]
mov ecx, dword [esp + 0x5c]
mov ebp, dword [esp + 0x54]
mov dword [esp + 0xc], esi
mov dword [esp + 8], ebp
jmp 0x8b7ea5
mov eax, dword [edi + 0xa0]
mov esi, dword [edi + 0x2018]
imul eax, dword [edi + 0x201c]
add eax, esi
test byte [edx + 0x194], 0x40
mov dword [esp + 0x48], eax
jne 0x8b8741
mov edx, dword [edi + 0x7f4]
mov eax, dword [edi + 0xa90]
mov ecx, dword [esp + 0x48]
mov byte [ecx + edx], al
mov ebx, dword [edi + 0x2024]
test ebx, ebx
jne 0x8b879d
mov esi, dword [edi + 0x1c]
test esi, esi
jne 0x8b8242
mov ebx, dword [edi + 0x2778]
test ebx, ebx
je 0x8b91d8
mov ecx, dword [edi + 0xa70]
mov edx, dword [esp + 0x48]
cmp byte [edx + ecx], 0
jne 0x8b95f3
cmp word [edi + 0x3c], 0
js 0x8b87cb
mov edx, dword [edi + 0x38]
test edx, edx
je 0x8b828b
mov ecx, dword [edi + 0x10]
test ecx, ecx
jne 0x8b827b
mov eax, dword [edi + 0xab0]
cmp eax, 3
jne 0x8b8291
mov esi, dword [edi]
cmp dword [esi + 0x224], 2
jne 0x8b83e9
mov eax, dword [edi + 0xab0]
mov ecx, dword [edi + 0x7b0]
mov ebx, dword [edi + 0x7b4]
cmp eax, 3
mov dword [esp + 0x34], ecx
mov dword [esp + 0x30], ebx
mov dword [esp + 0x2c], 0
je 0x8b8e6f
mov dword [esp + 0x2c], 1
test edx, edx
jne 0x8b8315
mov ecx, dword [esp + 0x48]
mov edx, dword [edi + 0xa68]
mov ebx, dword [edi + 0x7ec]
add ecx, dword [edi + 0xa6c]
test edx, edx
je 0x8b8f52
mov dword [edi + 0xa68], 0
mov eax, 0x63
movzx edx, byte [ecx]
add dl, 1
cmp dl, 0x64
cmovb eax, edx
mov byte [ecx], al
movzx ecx, al
cmp ecx, ebx
jl 0x8b8312
mov ebx, dword [edi + 0x7f0]
test ebx, ebx
jne 0x8b83e9
mov edx, dword [edi + 0x38]
mov ecx, dword [edi + 0x29a8]
mov esi, dword [esp + 0x34]
mov eax, dword [esp + 0x34]
shl esi, cl
shl eax, 3
test ecx, ecx
mov ecx, dword [esp + 0x2c]
cmovne eax, dword [esp + 0x34]
test ecx, ecx
mov dword [esp + 0x38], eax
je 0x8b89e5
mov eax, dword [edi + 0x205c]
mov ebx, dword [edi + 0x2060]
mov dword [esp + 0x44], eax
mov dword [esp + 0x40], ebx
mov eax, dword [edi + 0x2064]
mov dword [esp + 0x3c], eax
mov eax, dword [edi + 0x2024]
test eax, eax
jne 0x8b8863
test edx, edx
jne 0x8b83d0
mov edx, dword [edi + 0x2010]
mov ecx, dword [edi + 0x1ffc]
test edx, edx
jne 0x8b9240
lea edx, [edi + 0xd04]
mov eax, dword [edi + 0x1d3c]
test al, 1
jne 0x8ba41c
test al, 2
je 0x8b83d0
mov dword [esp + 0x10], edx
mov edx, dword [esp + 0x40]
mov dword [esp + 0x14], ecx
lea ebx, [edi + 0x330]
mov ecx, dword [esp + 0x3c]
mov dword [esp], edx
mov eax, edi
mov edx, dword [esp + 0x44]
mov dword [esp + 0xc], ebx
mov dword [esp + 8], 1
mov dword [esp + 4], ecx
call fcn.008a8835
cmp dword [edi + 0x2014], 1
jle 0x8b92d1
mov ebp, dword [esp + 0x2c]
test ebp, ebp
je 0x8b8e89
add esp, 0xac
pop ebx
pop esi
pop edi
pop ebp
ret
mov eax, dword [edi + 0xa0]
mov esi, dword [edi + 0x2018]
imul eax, dword [edi + 0x201c]
add eax, esi
test byte [edx + 0x194], 0x40
mov dword [esp + 0x8c], eax
jne 0x8b8813
mov edx, dword [edi + 0x7f4]
mov eax, dword [edi + 0xa90]
mov ecx, dword [esp + 0x8c]
mov byte [ecx + edx], al
mov ebx, dword [edi + 0x2024]
test ebx, ebx
jne 0x8b845c
mov ecx, dword [edi + 0x296c]
mov esi, 0x80
shl esi, cl
mov dword [edi + 0x9f8], esi
mov dword [edi + 0x9f4], esi
mov dword [edi + 0x9f0], esi
cmp word [edi + 0x3c], 0
js 0x8b885b
mov edx, dword [edi + 0x38]
test edx, edx
je 0x8b8490
mov ebx, dword [edi + 0x10]
test ebx, ebx
jne 0x8b8481
mov eax, dword [edi + 0xab0]
cmp eax, 3
jne 0x8b8496
mov eax, dword [edi]
cmp dword [eax + 0x224], 2
jne 0x8b83e9
mov eax, dword [edi + 0xab0]
mov ecx, dword [edi + 0x7b0]
mov esi, dword [edi + 0x7b4]
cmp eax, 3
mov dword [esp + 0x78], ecx
mov dword [esp + 0x74], esi
mov dword [esp + 0x70], 0
je 0x8b8f12
mov dword [esp + 0x70], 1
test edx, edx
jne 0x8b851d
mov ecx, dword [esp + 0x8c]
mov edx, dword [edi + 0xa68]
mov ebx, dword [edi + 0x7ec]
add ecx, dword [edi + 0xa6c]
test edx, edx
je 0x8b8f2c
mov dword [edi + 0xa68], 0
mov eax, 0x63
movzx edx, byte [ecx]
add dl, 1
cmp dl, 0x64
cmovb eax, edx
movzx esi, al
mov byte [ecx], al
cmp esi, ebx
jl 0x8b851a
mov ecx, dword [edi + 0x7f0]
test ecx, ecx
jne 0x8b83e9
mov edx, dword [edi + 0x38]
mov ecx, dword [edi + 0x29a8]
mov esi, dword [esp + 0x78]
mov ebx, dword [esp + 0x78]
shl ebx, 3
shl esi, cl
mov eax, dword [esp + 0x70]
test ecx, ecx
cmovne ebx, dword [esp + 0x78]
test eax, eax
mov dword [esp + 0x7c], ebx
je 0x8b8e44
mov eax, dword [edi + 0x2060]
mov ebx, dword [edi + 0x205c]
mov dword [esp + 0x84], eax
mov dword [esp + 0x88], ebx
mov eax, dword [edi + 0x2064]
mov ebx, dword [edi + 0x2024]
mov dword [esp + 0x80], eax
test ebx, ebx
jne 0x8b8cad
test edx, edx
jne 0x8b85ea
mov edx, dword [edi + 0x2010]
mov ecx, dword [edi + 0x1ffc]
test edx, edx
jne 0x8b9228
lea edx, [edi + 0xd04]
mov eax, dword [edi + 0x1d3c]
test al, 1
jne 0x8b9c3f
test al, 2
je 0x8b85ea
lea eax, [edi + 0x330]
mov dword [esp + 0x10], edx
mov edx, dword [esp + 0x84]
mov dword [esp + 0x14], ecx
mov dword [esp + 0xc], eax
mov ecx, dword [esp + 0x80]
mov dword [esp], edx
mov eax, edi
mov edx, dword [esp + 0x88]
mov dword [esp + 8], 1
mov dword [esp + 4], ecx
call fcn.008a8835
cmp dword [edi + 0x2014], 1
jle 0x8b9454
mov ebp, dword [esp + 0x70]
test ebp, ebp
jne 0x8b83e9
mov ebp, dword [esp + 0x78]
mov edx, dword [esp + 0x88]
mov dword [esp + 0xc], 0x10
mov dword [esp + 8], ebp
mov dword [esp + 4], edx
mov esi, dword [edi + 0x205c]
mov dword [esp], esi
mov esi, 0x10
call dword [edi + 0xd04]
mov ecx, dword [edi + 0x2998]
mov eax, esi
sar eax, cl
mov ebx, dword [esp + 0x74]
mov ebp, dword [esp + 0x84]
mov edx, dword [edi + 0x2994]
mov dword [esp + 8], ebx
mov dword [esp + 0xc], eax
mov dword [esp + 4], ebp
shl edx, 4
mov eax, dword [edi + 0x2060]
mov dword [esp], eax
call dword [edi + edx + 0xd04]
mov ecx, dword [edi + 0x2998]
mov edx, dword [edi + 0x2994]
sar esi, cl
mov ebx, dword [esp + 0x74]
shl edx, 4
mov dword [esp + 0xc], esi
mov dword [esp + 8], ebx
mov eax, dword [esp + 0x80]
mov dword [esp + 4], eax
mov ebx, dword [edi + 0x2064]
mov dword [esp], ebx
call dword [edi + edx + 0xd04]
add esp, 0xac
pop ebx
pop esi
pop edi
pop ebp
ret
lea edx, [eax + eax*2]
xor esi, esi
xor ebx, ebx
shl edx, 8
add edx, dword [edi + 0x858]
xor ecx, ecx
movzx eax, byte [edi + ecx + 0x16d8]
add ecx, 1
lea eax, [ebx + eax]
movzx eax, word [ebp + eax*2]
mov word [edx], ax
add edx, 2
cmp ecx, 0x3f
jle 0x8b86c1
add esi, 1
add ebx, 0x40
cmp esi, 5
jle 0x8b86bf
mov edx, dword [edi + 0x7f4]
mov ecx, dword [edi + 0xa90]
mov ebx, dword [esp + 0x64]
mov byte [ebx + edx], cl
mov esi, dword [edi + 0x2024]
test esi, esi
je 0x8b7f13
mov esi, dword [edi + 0x1c]
test esi, esi
jne 0x8b8720
mov ebx, dword [edi + 0x2778]
test ebx, ebx
je 0x8b7f3c
mov edx, dword [edi + 0xa70]
mov eax, dword [esp + 0x64]
mov byte [eax + edx], 1
cmp word [edi + 0x3c], 0
jns 0x8b7f47
mov edx, dword [edi + 0x38]
jmp 0x8b7f66
lea edx, [eax + eax*2]
xor esi, esi
xor ebx, ebx
shl edx, 8
add edx, dword [edi + 0x858]
xor ecx, ecx
movzx eax, byte [edi + ecx + 0x16d8]
add ecx, 1
lea eax, [ebx + eax]
movzx eax, word [ebp + eax*2]
mov word [edx], ax
add edx, 2
cmp ecx, 0x3f
jle 0x8b8753
add esi, 1
add ebx, 0x40
cmp esi, 5
jle 0x8b8751
mov edx, dword [edi + 0x7f4]
mov eax, dword [edi + 0xa90]
mov ecx, dword [esp + 0x48]
mov byte [ecx + edx], al
mov ebx, dword [edi + 0x2024]
test ebx, ebx
je 0x8b822d
mov esi, dword [edi + 0x1c]
test esi, esi
jne 0x8b87b2
mov ebx, dword [edi + 0x2778]
test ebx, ebx
je 0x8b8256
mov edx, dword [edi + 0xa70]
mov eax, dword [esp + 0x48]
mov byte [eax + edx], 1
cmp word [edi + 0x3c], 0
jns 0x8b8261
mov edx, dword [edi + 0x38]
jmp 0x8b828b
lea edx, [eax + eax*2]
xor esi, esi
xor ebx, ebx
shl edx, 8
add edx, dword [edi + 0x858]
xor ecx, ecx
movzx eax, byte [edi + ecx + 0x16d8]
add ecx, 1
lea eax, [ebx + eax]
movzx eax, word [ebp + eax*2]
mov word [edx], ax
add edx, 2
cmp ecx, 0x3f
jle 0x8b87e5
add esi, 1
add ebx, 0x40
cmp esi, 5
jle 0x8b87e3
jmp 0x8b7b9d
lea edx, [eax + eax*2]
xor esi, esi
xor ebx, ebx
shl edx, 8
add edx, dword [edi + 0x858]
xor ecx, ecx
movzx eax, byte [edi + ecx + 0x16d8]
add ecx, 1
lea eax, [ebx + eax]
movzx eax, word [ebp + eax*2]
mov word [edx], ax
add edx, 2
cmp ecx, 0x3f
jle 0x8b8825
add esi, 1
add ebx, 0x40
cmp esi, 5
jle 0x8b8823
jmp 0x8b841d
mov edx, dword [edi + 0x38]
jmp 0x8b7c06
mov edx, dword [edi + 0x38]
jmp 0x8b8490
test edx, edx
jne 0x8b8876
mov ecx, dword [edi + 0x30]
sub ecx, 1
cmp ecx, 1
jbe 0x8b9600
mov eax, dword [edi + 0xa90]
mov edx, dword [esp + 0x44]
mov dword [esp + 8], esi
mov dword [esp + 0xc], eax
mov dword [esp + 4], edx
mov eax, edi
mov edx, ebp
mov dword [esp], 0
call fcn.008b78f2
mov ebx, dword [esp + 0x44]
mov ecx, dword [edi + 0xa90]
add ebx, 8
lea edx, [ebp + 0x80]
mov eax, edi
mov dword [esp + 0xc], ecx
mov dword [esp + 4], ebx
mov dword [esp + 8], esi
mov dword [esp], 1
call fcn.008b78f2
mov eax, dword [edi + 0xa90]
mov ebx, dword [esp + 0x44]
lea edx, [ebp + 0x100]
mov dword [esp + 0xc], eax
add ebx, dword [esp + 0x38]
mov eax, edi
mov dword [esp + 8], esi
mov dword [esp + 4], ebx
mov dword [esp], 2
add ebx, 8
call fcn.008b78f2
mov ecx, dword [edi + 0xa90]
mov eax, edi
lea edx, [ebp + 0x180]
mov dword [esp + 0xc], ecx
mov dword [esp + 8], esi
mov dword [esp + 4], ebx
mov dword [esp], 3
call fcn.008b78f2
mov eax, dword [edi + 0x2998]
test eax, eax
jne 0x8b90d2
mov eax, dword [edi + 0xa94]
sar esi, 1
lea edx, [ebp + 0x200]
mov ecx, dword [esp + 0x40]
mov dword [esp + 0xc], eax
mov eax, edi
mov ebx, dword [esp + 0x38]
mov dword [esp + 4], ecx
mov dword [esp + 8], esi
mov dword [esp], 4
call fcn.008b78f2
mov eax, dword [edi + 0xa94]
lea edx, [ebp + 0x280]
mov ecx, dword [esp + 0x3c]
mov dword [esp + 0xc], eax
mov eax, edi
sar ebx, 1
mov dword [esp + 4], ecx
mov dword [esp + 8], esi
mov dword [esp], 5
call fcn.008b78f2
mov eax, dword [edi + 0xa94]
mov ecx, dword [esp + 0x40]
lea edx, [ebp + 0x300]
add ecx, ebx
mov dword [esp + 0xc], eax
mov eax, edi
mov dword [esp + 8], esi
mov dword [esp + 4], ecx
mov dword [esp], 6
call fcn.008b78f2
lea edx, [ebp + 0x380]
add ebx, dword [esp + 0x3c]
mov ebp, dword [edi + 0xa94]
mov dword [esp + 8], esi
mov dword [esp + 4], ebx
mov dword [esp + 0xc], ebp
mov dword [esp], 7
mov eax, edi
call fcn.008b78f2
jmp 0x8b83dd
mov ebx, dword [esp + 0x34]
mov eax, dword [esp + 0x34]
mov ecx, dword [edi + 0xa8c]
shl ebx, 4
shl eax, 5
mov dword [esp + 0x44], ecx
add ebx, ecx
add eax, ecx
mov dword [esp + 0x40], ebx
jmp 0x8b8359
test edx, edx
jne 0x8b8a1d
mov edx, dword [edi + 0x30]
sub edx, 1
cmp edx, 1
jbe 0x8b9913
mov edx, dword [edi + 0xa90]
mov eax, edi
mov dword [esp + 4], ebx
mov dword [esp + 0xc], edx
mov edx, ebp
mov dword [esp + 8], esi
mov dword [esp], 0
call fcn.008b78f2
mov eax, dword [edi + 0xa90]
mov ecx, dword [esp + 0x20]
mov dword [esp + 0xc], eax
lea edx, [ebp + 0x80]
lea eax, [ebx + ecx]
mov dword [esp + 8], esi
mov dword [esp], 1
mov dword [esp + 4], eax
mov eax, edi
call fcn.008b78f2
mov ecx, dword [edi + 0xa90]
add ebx, dword [esp + 0x9c]
lea edx, [ebp + 0x100]
mov eax, edi
mov dword [esp + 0xc], ecx
mov dword [esp + 4], ebx
mov dword [esp + 8], esi
mov dword [esp], 2
call fcn.008b78f2
mov eax, dword [edi + 0xa90]
add ebx, dword [esp + 0x20]
mov dword [esp + 0xc], eax
lea edx, [ebp + 0x180]
mov eax, edi
mov dword [esp + 4], ebx
mov dword [esp + 8], esi
mov dword [esp], 3
call fcn.008b78f2
mov ebx, dword [edi + 0x2998]
test ebx, ebx
je 0x8b901e
mov eax, dword [edi + 0xa94]
lea edx, [ebp + 0x200]
mov ecx, dword [esp + 0x98]
mov dword [esp + 0xc], eax
mov ebx, dword [esp + 0xa4]
mov eax, edi
mov dword [esp + 8], ecx
mov dword [esp + 4], ebx
mov dword [esp], 4
call fcn.008b78f2
mov esi, dword [edi + 0xa94]
lea edx, [ebp + 0x280]
mov ecx, dword [esp + 0xa0]
mov ebp, dword [esp + 0x98]
mov dword [esp + 0xc], esi
mov dword [esp + 8], ebp
jmp 0x8b900e
test edx, edx
jne 0x8b8b3f
mov eax, dword [edi + 0x30]
sub eax, 1
cmp eax, 1
jbe 0x8b978d
mov edx, dword [edi + 0xa90]
mov eax, edi
mov dword [esp + 4], ebx
mov dword [esp + 0xc], edx
mov edx, ebp
mov dword [esp + 8], esi
mov dword [esp], 0
call fcn.008b78f2
mov eax, dword [edi + 0xa90]
mov ecx, dword [esp + 0x1c]
mov dword [esp + 0xc], eax
lea edx, [ebp + 0x80]
lea eax, [ebx + ecx]
mov dword [esp + 8], esi
mov dword [esp], 1
mov dword [esp + 4], eax
mov eax, edi
call fcn.008b78f2
mov eax, dword [edi + 0xa90]
add ebx, dword [esp + 0x58]
lea edx, [ebp + 0x100]
mov dword [esp + 0xc], eax
mov eax, edi
mov dword [esp + 4], ebx
mov dword [esp + 8], esi
mov dword [esp], 2
call fcn.008b78f2
mov ecx, dword [edi + 0xa90]
add ebx, dword [esp + 0x1c]
lea edx, [ebp + 0x180]
mov eax, edi
mov dword [esp + 4], ebx
mov dword [esp + 0xc], ecx
mov dword [esp + 8], esi
mov dword [esp], 3
call fcn.008b78f2
mov ebx, dword [edi + 0x2998]
test ebx, ebx
jne 0x8b8fc4
mov eax, dword [edi + 0xa94]
sar esi, 1
lea edx, [ebp + 0x200]
mov ecx, dword [esp + 0x60]
mov dword [esp + 0xc], eax
mov eax, edi
mov ebx, dword [esp + 0x58]
mov dword [esp + 4], ecx
mov dword [esp + 8], esi
mov dword [esp], 4
call fcn.008b78f2
mov eax, dword [edi + 0xa94]
lea edx, [ebp + 0x280]
mov ecx, dword [esp + 0x5c]
mov dword [esp + 0xc], eax
mov eax, edi
sar ebx, 1
mov dword [esp + 4], ecx
mov dword [esp + 8], esi
mov dword [esp], 5
call fcn.008b78f2
mov eax, dword [edi + 0xa94]
mov ecx, dword [esp + 0x60]
lea edx, [ebp + 0x300]
add ecx, ebx
mov dword [esp + 0xc], eax
mov eax, edi
mov dword [esp + 8], esi
mov dword [esp + 4], ecx
mov dword [esp], 6
call fcn.008b78f2
lea edx, [ebp + 0x380]
mov ebp, dword [edi + 0xa94]
mov dword [esp + 0xc], ebp
mov dword [esp + 8], esi
add ebx, dword [esp + 0x5c]
mov dword [esp + 4], ebx
mov dword [esp], 7
mov eax, edi
call fcn.008b78f2
add esp, 0xac
pop ebx
pop esi
pop edi
pop ebp
ret
test edx, edx
jne 0x8b8cc0
mov ebx, dword [edi + 0x30]
sub ebx, 1
cmp ebx, 1
jbe 0x8b9a97
mov eax, dword [edi + 0xa90]
mov edx, dword [esp + 0x88]
mov dword [esp + 8], esi
mov dword [esp + 0xc], eax
mov dword [esp + 4], edx
mov eax, edi
mov edx, ebp
mov dword [esp], 0
call fcn.008b78f2
mov ebx, dword [esp + 0x88]
mov ecx, dword [edi + 0xa90]
add ebx, 8
lea edx, [ebp + 0x80]
mov eax, edi
mov dword [esp + 0xc], ecx
mov dword [esp + 4], ebx
mov dword [esp + 8], esi
mov dword [esp], 1
call fcn.008b78f2
mov eax, dword [edi + 0xa90]
mov ebx, dword [esp + 0x88]
lea edx, [ebp + 0x100]
mov dword [esp + 0xc], eax
add ebx, dword [esp + 0x7c]
mov eax, edi
mov dword [esp + 8], esi
mov dword [esp + 4], ebx
mov dword [esp], 2
add ebx, 8
call fcn.008b78f2
mov ecx, dword [edi + 0xa90]
lea edx, [ebp + 0x180]
mov eax, edi
mov dword [esp + 0xc], ecx
mov dword [esp + 8], esi
mov dword [esp + 4], ebx
mov dword [esp], 3
call fcn.008b78f2
mov edx, dword [edi + 0x2998]
test edx, edx
jne 0x8b912c
mov eax, dword [edi + 0xa94]
sar esi, 1
lea edx, [ebp + 0x200]
mov ecx, dword [esp + 0x84]
mov dword [esp + 0xc], eax
mov eax, edi
mov ebx, dword [esp + 0x7c]
mov dword [esp + 4], ecx
mov dword [esp + 8], esi
mov dword [esp], 4
call fcn.008b78f2
mov eax, dword [edi + 0xa94]
lea edx, [ebp + 0x280]
mov ecx, dword [esp + 0x80]
mov dword [esp + 0xc], eax
mov eax, edi
sar ebx, 1
mov dword [esp + 4], ecx
mov dword [esp + 8], esi
mov dword [esp], 5
call fcn.008b78f2
mov eax, dword [edi + 0xa94]
mov ecx, dword [esp + 0x84]
lea edx, [ebp + 0x300]
add ecx, ebx
mov dword [esp + 0xc], eax
mov eax, edi
mov dword [esp + 8], esi
mov dword [esp + 4], ecx
mov dword [esp], 6
call fcn.008b78f2
lea edx, [ebp + 0x380]
add ebx, dword [esp + 0x80]
mov ebp, dword [edi + 0xa94]
mov dword [esp + 8], esi
mov dword [esp + 4], ebx
mov dword [esp + 0xc], ebp
mov dword [esp], 7
mov eax, edi
call fcn.008b78f2
jmp 0x8b85f7
mov eax, dword [esp + 0x78]
mov ecx, dword [edi + 0xa8c]
shl eax, 4
mov dword [esp + 0x88], ecx
add eax, ecx
mov dword [esp + 0x84], eax
mov eax, dword [esp + 0x78]
shl eax, 5
add eax, ecx
jmp 0x8b8567
test edx, edx
jne 0x8b82b6
mov eax, dword [edi]
mov esi, dword [eax + 0x3c]
test esi, esi
je 0x8b82be
jmp 0x8b82b6
mov ebp, dword [esp + 0x34]
mov edx, dword [esp + 0x44]
mov dword [esp + 0xc], 0x10
mov dword [esp + 8], ebp
mov dword [esp + 4], edx
mov esi, dword [edi + 0x205c]
mov dword [esp], esi
mov esi, 0x10
call dword [edi + 0xd04]
mov ecx, dword [edi + 0x2998]
mov eax, esi
sar eax, cl
mov ebx, dword [esp + 0x30]
mov ebp, dword [esp + 0x40]
mov edx, dword [edi + 0x2994]
mov dword [esp + 8], ebx
mov dword [esp + 0xc], eax
mov dword [esp + 4], ebp
shl edx, 4
mov eax, dword [edi + 0x2060]
mov dword [esp], eax
call dword [edi + edx + 0xd04]
mov edx, dword [edi + 0x2994]
mov ecx, dword [edi + 0x2998]
sar esi, cl
mov ebx, dword [esp + 0x30]
shl edx, 4
mov eax, dword [esp + 0x3c]
mov dword [esp + 0xc], esi
mov dword [esp + 8], ebx
jmp 0x8b8690
test edx, edx
jne 0x8b84bb
mov eax, dword [edi]
mov ebx, dword [eax + 0x3c]
test ebx, ebx
je 0x8b84c3
jmp 0x8b84bb
mov ebx, dword [edi + 0x7f0]
test ebx, ebx
jne 0x8b9207
movzx eax, byte [ecx]
add al, 1
cmp al, 0x63
jbe 0x8ba06c
mov byte [ecx], 0x63
mov edx, dword [edi + 0x38]
jmp 0x8b851d
mov esi, dword [edi + 0x7f0]
test esi, esi
jne 0x8b91fc
movzx eax, byte [ecx]
add al, 1
cmp al, 0x63
jbe 0x8ba467
mov byte [ecx], 0x63
mov edx, dword [edi + 0x38]
jmp 0x8b8315
mov eax, dword [edi + 0x7f0]
test eax, eax
jne 0x8b921d
movzx eax, byte [ecx]
add al, 1
cmp al, 0x63
jbe 0x8ba076
mov byte [ecx], 0x63
mov edx, dword [edi + 0x38]
jmp 0x8b7c87
mov eax, dword [edi + 0x7f0]
test eax, eax
jne 0x8b9212
movzx eax, byte [ecx]
add al, 1
cmp al, 0x63
jbe 0x8ba471
mov byte [ecx], 0x63
mov edx, dword [edi + 0x38]
jmp 0x8b7fe1
mov eax, dword [edi + 0xa94]
lea edx, [ebp + 0x200]
mov ecx, dword [esp + 0x54]
mov dword [esp + 0xc], eax
mov ebx, dword [esp + 0x60]
mov eax, edi
mov dword [esp + 8], ecx
mov dword [esp + 4], ebx
mov dword [esp], 4
call fcn.008b78f2
mov esi, dword [edi + 0xa94]
lea edx, [ebp + 0x280]
mov ebp, dword [esp + 0x54]
mov dword [esp + 0xc], esi
mov ecx, dword [esp + 0x5c]
mov dword [esp + 8], ebp
mov dword [esp + 4], ecx
mov dword [esp], 5
jmp 0x8b8c9b
mov eax, dword [edi + 0xa94]
sar esi, 1
lea edx, [ebp + 0x200]
mov ecx, dword [esp + 0xa4]
mov dword [esp + 0xc], eax
mov eax, edi
mov ebx, dword [esp + 0x9c]
mov dword [esp + 4], ecx
mov dword [esp + 8], esi
mov dword [esp], 4
call fcn.008b78f2
mov eax, dword [edi + 0xa94]
lea edx, [ebp + 0x280]
mov ecx, dword [esp + 0xa0]
mov dword [esp + 0xc], eax
mov eax, edi
sar ebx, 1
mov dword [esp + 4], ecx
mov dword [esp + 8], esi
mov dword [esp], 5
call fcn.008b78f2
mov eax, dword [edi + 0xa94]
mov ecx, dword [esp + 0xa4]
lea edx, [ebp + 0x300]
add ecx, ebx
mov dword [esp + 0xc], eax
mov eax, edi
mov dword [esp + 8], esi
mov dword [esp + 4], ecx
mov dword [esp], 6
call fcn.008b78f2
lea edx, [ebp + 0x380]
add ebx, dword [esp + 0xa0]
mov ebp, dword [edi + 0xa94]
mov dword [esp + 8], esi
mov dword [esp + 0xc], ebp
jmp 0x8b8c90
mov eax, dword [esp + 0x30]
mov esi, dword [edi + 0xa94]
lea edx, [ebp + 0x200]
mov dword [esp + 8], eax
mov ecx, dword [esp + 0x40]
mov eax, edi
mov dword [esp + 0xc], esi
mov dword [esp + 4], ecx
mov dword [esp], 4
call fcn.008b78f2
mov ebx, dword [edi + 0xa94]
lea edx, [ebp + 0x280]
mov esi, dword [esp + 0x30]
mov ebp, dword [esp + 0x3c]
mov dword [esp + 0xc], ebx
mov dword [esp + 8], esi
mov dword [esp + 4], ebp
mov dword [esp], 5
jmp 0x8b89d9
mov eax, dword [esp + 0x74]
mov esi, dword [edi + 0xa94]
lea edx, [ebp + 0x200]
mov dword [esp + 8], eax
mov ecx, dword [esp + 0x84]
mov eax, edi
mov dword [esp + 0xc], esi
mov dword [esp + 4], ecx
mov dword [esp], 4
call fcn.008b78f2
mov ebx, dword [edi + 0xa94]
lea edx, [ebp + 0x280]
mov esi, dword [esp + 0x74]
mov ebp, dword [esp + 0x80]
mov dword [esp + 0xc], ebx
mov dword [esp + 8], esi
mov dword [esp + 4], ebp
mov dword [esp], 5
jmp 0x8b8e38
mov esi, dword [edi]
cmp dword [esi + 0x224], 2
jne 0x8b83e9
jmp 0x8b7f66
mov eax, dword [edi]
cmp dword [eax + 0x224], 2
jne 0x8b83e9
jmp 0x8b7c06
mov ecx, dword [edi + 0x296c]
mov eax, 0x80
shl eax, cl
mov dword [edi + 0x9f8], eax
mov dword [edi + 0x9f4], eax
mov dword [edi + 0x9f0], eax
jmp 0x8b7f3c
mov ecx, dword [edi + 0x296c]
mov eax, 0x80
shl eax, cl
mov dword [edi + 0x9f8], eax
mov dword [edi + 0x9f4], eax
mov dword [edi + 0x9f0], eax
jmp 0x8b8256
mov byte [ecx], 0
mov edx, dword [edi + 0x38]
jmp 0x8b8315
mov byte [ecx], 0
mov edx, dword [edi + 0x38]
jmp 0x8b851d
mov byte [ecx], 0
mov edx, dword [edi + 0x38]
jmp 0x8b7fe1
mov byte [ecx], 0
mov edx, dword [edi + 0x38]
jmp 0x8b7c87
cmp dword [edi + 0xab0], 3
lea edx, [edi + 0xd84]
jne 0x8b859a
jmp 0x8b8594
cmp dword [edi + 0xab0], 3
lea edx, [edi + 0xd84]
jne 0x8b8389
jmp 0x8b8383
mov dword [esp + 0x10], edx
lea eax, [edi + 0xf8]
mov edx, dword [esp + 0xa0]
mov dword [esp + 0xc], eax
mov dword [esp + 4], edx
mov eax, edi
mov edx, ebx
mov dword [esp + 8], 0
mov dword [esp], ecx
call fcn.008b48cf
lea edx, [edi + 0x1090]
mov eax, dword [edi + 0x1d3c]
jmp 0x8b7cea
mov dword [esp + 0x10], edx
lea eax, [edi + 0xf8]
mov edx, dword [esp + 0x5c]
mov dword [esp + 0xc], eax
mov dword [esp + 4], edx
mov eax, edi
mov edx, ebx
mov dword [esp + 8], 0
mov dword [esp], ecx
call fcn.008b48cf
lea edx, [edi + 0x1090]
mov eax, dword [edi + 0x1d3c]
jmp 0x8b803b
mov eax, dword [edi]
mov eax, dword [eax + 0x2c0]
test eax, eax
je 0x8b930b
cmp eax, 7
jle 0x8b92f0
cmp dword [edi + 0xab0], 3
je 0x8b83dd
cmp eax, 0x1f
jle 0x8b9302
cmp dword [edi + 0xab0], 1
jne 0x8b83dd
cmp eax, 0x2f
jg 0x8b83dd
mov edx, dword [edi + 0x38]
test edx, edx
jne 0x8b933b
mov ecx, dword [edi + 0x28]
test ecx, ecx
jne 0x8b9e97
mov eax, dword [edi + 0x30]
cmp eax, 1
je 0x8b9e97
cmp eax, 2
je 0x8b9e97
cmp eax, 0xd
je 0x8b9e89
mov eax, dword [edi + 0xa90]
mov edx, dword [esp + 0x44]
mov dword [esp + 8], esi
mov dword [esp + 0xc], eax
mov dword [esp + 4], edx
mov eax, edi
mov edx, ebp
mov dword [esp], 0
call fcn.008b79a1
mov ebx, dword [esp + 0x44]
mov ecx, dword [edi + 0xa90]
add ebx, 8
lea edx, [ebp + 0x80]
mov eax, edi
mov dword [esp + 0xc], ecx
mov dword [esp + 4], ebx
mov dword [esp + 8], esi
mov dword [esp], 1
call fcn.008b79a1
mov eax, dword [edi + 0xa90]
mov ebx, dword [esp + 0x44]
lea edx, [ebp + 0x100]
mov dword [esp + 0xc], eax
add ebx, dword [esp + 0x38]
mov eax, edi
mov dword [esp + 8], esi
mov dword [esp + 4], ebx
mov dword [esp], 2
add ebx, 8
call fcn.008b79a1
mov ecx, dword [edi + 0xa90]
mov eax, edi
lea edx, [ebp + 0x180]
mov dword [esp + 0xc], ecx
mov dword [esp + 8], esi
mov dword [esp + 4], ebx
mov dword [esp], 3
call fcn.008b79a1
mov eax, dword [edi + 0x2998]
test eax, eax
je 0x8ba8cb
mov eax, dword [esp + 0x30]
mov esi, dword [edi + 0xa94]
lea edx, [ebp + 0x200]
mov dword [esp + 8], eax
mov ecx, dword [esp + 0x40]
mov eax, edi
mov dword [esp + 0xc], esi
mov dword [esp + 4], ecx
mov dword [esp], 4
call fcn.008b79a1
mov ebx, dword [edi + 0xa94]
lea edx, [ebp + 0x280]
mov esi, dword [esp + 0x30]
mov ebp, dword [esp + 0x3c]
mov dword [esp + 0xc], ebx
mov dword [esp + 8], esi
mov dword [esp + 4], ebp
mov dword [esp], 5
mov eax, edi
call fcn.008b79a1
jmp 0x8b83dd
mov ebx, dword [edi]
mov eax, dword [ebx + 0x2c0]
test eax, eax
je 0x8b948e
cmp eax, 7
jle 0x8b9473
cmp dword [edi + 0xab0], 3
je 0x8b85f7
cmp eax, 0x1f
jle 0x8b9485
cmp dword [edi + 0xab0], 1
jne 0x8b85f7
cmp eax, 0x2f
jg 0x8b85f7
mov edx, dword [edi + 0x38]
test edx, edx
jne 0x8b94be
mov ecx, dword [edi + 0x28]
test ecx, ecx
jne 0x8ba08e
mov eax, dword [edi + 0x30]
cmp eax, 1
je 0x8ba08e
cmp eax, 2
je 0x8ba08e
cmp eax, 0xd
je 0x8ba080
mov eax, dword [edi + 0xa90]
mov edx, dword [esp + 0x88]
mov dword [esp + 8], esi
mov dword [esp + 0xc], eax
mov dword [esp + 4], edx
mov eax, edi
mov edx, ebp
mov dword [esp], 0
call fcn.008b79a1
mov ebx, dword [esp + 0x88]
mov ecx, dword [edi + 0xa90]
add ebx, 8
lea edx, [ebp + 0x80]
mov eax, edi
mov dword [esp + 0xc], ecx
mov dword [esp + 4], ebx
mov dword [esp + 8], esi
mov dword [esp], 1
call fcn.008b79a1
mov eax, dword [edi + 0xa90]
mov ebx, dword [esp + 0x88]
lea edx, [ebp + 0x100]
mov dword [esp + 0xc], eax
add ebx, dword [esp + 0x7c]
mov eax, edi
mov dword [esp + 8], esi
mov dword [esp + 4], ebx
mov dword [esp], 2
add ebx, 8
call fcn.008b79a1
mov ecx, dword [edi + 0xa90]
lea edx, [ebp + 0x180]
mov eax, edi
mov dword [esp + 4], ebx
mov dword [esp + 0xc], ecx
mov dword [esp + 8], esi
mov dword [esp], 3
call fcn.008b79a1
mov ebx, dword [edi + 0x2998]
test ebx, ebx
je 0x8ba625
mov eax, dword [esp + 0x74]
mov esi, dword [edi + 0xa94]
lea edx, [ebp + 0x200]
mov dword [esp + 8], eax
mov ecx, dword [esp + 0x84]
mov eax, edi
mov dword [esp + 0xc], esi
mov dword [esp + 4], ecx
mov dword [esp], 4
call fcn.008b79a1
mov ebx, dword [edi + 0xa94]
lea edx, [ebp + 0x280]
mov esi, dword [esp + 0x74]
mov ebp, dword [esp + 0x80]
mov dword [esp + 0xc], ebx
mov dword [esp + 8], esi
mov dword [esp + 4], ebp
mov dword [esp], 5
mov eax, edi
call fcn.008b79a1
jmp 0x8b85f7
mov dword [esp], edi
call fcn.008b7a23
jmp 0x8b7f3c
mov dword [esp], edi
call fcn.008b7a23
jmp 0x8b8256
mov ecx, dword [esp + 0x44]
mov dword [esp + 8], ebp
mov dword [esp + 4], esi
mov dword [esp], ecx
lea ebx, [ebp + 0x80]
call dword [edi + 0x16d0]
mov edx, dword [esp + 0x44]
mov dword [esp + 8], ebx
add edx, 8
mov dword [esp + 4], esi
mov dword [esp], edx
call dword [edi + 0x16d0]
mov ebx, dword [esp + 0x44]
lea eax, [ebp + 0x100]
add ebx, dword [esp + 0x38]
mov dword [esp + 8], eax
mov dword [esp + 4], esi
mov dword [esp], ebx
add ebx, 8
call dword [edi + 0x16d0]
lea ecx, [ebp + 0x180]
mov dword [esp + 4], esi
mov dword [esp + 8], ecx
mov dword [esp], ebx
call dword [edi + 0x16d0]
mov edx, dword [edi + 0x2998]
test edx, edx
jne 0x8ba88e
mov ecx, dword [edi + 0x29a8]
mov esi, dword [esp + 0x30]
mov eax, dword [esp + 0x40]
shl esi, cl
lea edx, [ebp + 0x200]
mov ebx, dword [esp + 0x30]
mov dword [esp], eax
shl ebx, 3
mov dword [esp + 8], edx
test ecx, ecx
mov dword [esp + 4], esi
cmovne ebx, dword [esp + 0x30]
call dword [edi + 0x16d0]
mov edx, dword [esp + 0x3c]
lea ecx, [ebp + 0x280]
mov dword [esp], edx
mov dword [esp + 4], esi
mov dword [esp + 8], ecx
call dword [edi + 0x16d0]
mov ecx, dword [esp + 0x40]
lea eax, [ebp + 0x300]
add ecx, ebx
mov dword [esp + 8], eax
mov dword [esp + 4], esi
mov dword [esp + 0x24], ecx
mov dword [esp], ecx
call dword [edi + 0x16d0]
add ebx, dword [esp + 0x3c]
lea edx, [ebp + 0x380]
mov dword [esp + 8], edx
mov dword [esp + 4], esi
mov dword [esp], ebx
call dword [edi + 0x16d0]
mov eax, dword [edi + 0x2994]
test eax, eax
jne 0x8b83dd
mov ecx, dword [esp + 0x40]
lea eax, [ebp + 0x400]
mov dword [esp + 4], esi
add ecx, 8
mov dword [esp + 8], eax
mov dword [esp], ecx
call dword [edi + 0x16d0]
mov eax, dword [esp + 0x3c]
lea edx, [ebp + 0x480]
add eax, 8
mov dword [esp + 8], edx
mov dword [esp + 4], esi
mov dword [esp], eax
call dword [edi + 0x16d0]
mov edx, dword [esp + 0x24]
lea ecx, [ebp + 0x500]
add edx, 8
mov dword [esp + 4], esi
mov dword [esp + 8], ecx
mov dword [esp], edx
call dword [edi + 0x16d0]
lea eax, [ebp + 0x580]
mov dword [esp + 4], esi
lea esi, [ebx + 8]
mov dword [esp + 8], eax
mov dword [esp], esi
call dword [edi + 0x16d0]
jmp 0x8b83dd
mov dword [esp], ebx
mov dword [esp + 8], ebp
mov dword [esp + 4], esi
call dword [edi + 0x16d0]
mov edx, dword [esp + 0x1c]
lea eax, [ebp + 0x80]
lea ecx, [ebx + edx]
mov dword [esp + 8], eax
mov dword [esp + 4], esi
mov dword [esp], ecx
call dword [edi + 0x16d0]
add ebx, dword [esp + 0x58]
lea eax, [ebp + 0x100]
mov dword [esp + 8], eax
mov dword [esp], ebx
mov dword [esp + 4], esi
call dword [edi + 0x16d0]
add ebx, dword [esp + 0x1c]
lea ecx, [ebp + 0x180]
mov dword [esp + 8], ecx
mov dword [esp + 4], esi
mov dword [esp], ebx
call dword [edi + 0x16d0]
mov edx, dword [edi + 0x2998]
test edx, edx
jne 0x8ba536
mov ecx, dword [edi + 0x29a8]
mov esi, dword [esp + 0x54]
mov ebx, dword [esp + 0x54]
shl esi, cl
lea edx, [ebp + 0x200]
shl ebx, 3
test ecx, ecx
mov ecx, dword [esp + 0x60]
mov dword [esp + 8], edx
mov dword [esp], ecx
mov dword [esp + 4], esi
cmovne ebx, dword [esp + 0x54]
call dword [edi + 0x16d0]
mov edx, dword [esp + 0x5c]
lea eax, [ebp + 0x280]
mov dword [esp], edx
mov dword [esp + 8], eax
mov dword [esp + 4], esi
call dword [edi + 0x16d0]
mov eax, dword [esp + 0x60]
lea ecx, [ebp + 0x300]
add eax, ebx
mov dword [esp + 8], ecx
mov dword [esp + 4], esi
mov dword [esp + 0x4c], eax
mov dword [esp], eax
call dword [edi + 0x16d0]
add ebx, dword [esp + 0x5c]
lea edx, [ebp + 0x380]
mov dword [esp + 8], edx
mov dword [esp + 4], esi
mov dword [esp], ebx
call dword [edi + 0x16d0]
mov ecx, dword [edi + 0x2994]
test ecx, ecx
jne 0x8b83e9
mov eax, dword [esp + 0x60]
lea edx, [ebp + 0x400]
mov dword [esp + 4], esi
add eax, 8
mov dword [esp + 8], edx
mov dword [esp], eax
call dword [edi + 0x16d0]
mov edx, dword [esp + 0x5c]
lea ecx, [ebp + 0x480]
add edx, 8
mov dword [esp + 8], ecx
mov dword [esp + 4], esi
mov dword [esp], edx
call dword [edi + 0x16d0]
lea eax, [ebp + 0x500]
mov dword [esp + 4], esi
mov dword [esp + 8], eax
mov eax, dword [esp + 0x4c]
add eax, 8
mov dword [esp], eax
call dword [edi + 0x16d0]
lea ecx, [ebp + 0x580]
lea ebp, [ebx + 8]
mov dword [esp + 8], ecx
mov dword [esp + 4], esi
mov dword [esp], ebp
call dword [edi + 0x16d0]
jmp 0x8b83e9
mov dword [esp], ebx
mov dword [esp + 8], ebp
mov dword [esp + 4], esi
call dword [edi + 0x16d0]
mov edx, dword [esp + 0x20]
lea eax, [ebp + 0x80]
lea ecx, [ebx + edx]
mov dword [esp + 8], eax
mov dword [esp + 4], esi
mov dword [esp], ecx
call dword [edi + 0x16d0]
add ebx, dword [esp + 0x9c]
lea eax, [ebp + 0x100]
mov dword [esp + 8], eax
mov dword [esp], ebx
mov dword [esp + 4], esi
call dword [edi + 0x16d0]
add ebx, dword [esp + 0x20]
lea ecx, [ebp + 0x180]
mov dword [esp + 8], ecx
mov dword [esp + 4], esi
mov dword [esp], ebx
call dword [edi + 0x16d0]
mov edx, dword [edi + 0x2998]
test edx, edx
jne 0x8ba97d
mov ecx, dword [edi + 0x29a8]
mov esi, dword [esp + 0x98]
mov ebx, dword [esp + 0x98]
shl esi, cl
lea edx, [ebp + 0x200]
shl ebx, 3
test ecx, ecx
mov ecx, dword [esp + 0xa4]
mov dword [esp + 8], edx
mov dword [esp], ecx
mov dword [esp + 4], esi
cmovne ebx, dword [esp + 0x98]
call dword [edi + 0x16d0]
mov edx, dword [esp + 0xa0]
lea eax, [ebp + 0x280]
mov dword [esp], edx
mov dword [esp + 8], eax
mov dword [esp + 4], esi
call dword [edi + 0x16d0]
mov eax, dword [esp + 0xa4]
lea ecx, [ebp + 0x300]
add eax, ebx
mov dword [esp + 8], ecx
mov dword [esp + 4], esi
mov dword [esp + 0x90], eax
mov dword [esp], eax
call dword [edi + 0x16d0]
add ebx, dword [esp + 0xa0]
lea edx, [ebp + 0x380]
mov dword [esp + 8], edx
mov dword [esp + 4], esi
mov dword [esp], ebx
call dword [edi + 0x16d0]
mov ecx, dword [edi + 0x2994]
test ecx, ecx
jne 0x8b83e9
mov eax, dword [esp + 0xa4]
lea edx, [ebp + 0x400]
mov dword [esp + 4], esi
add eax, 8
mov dword [esp + 8], edx
mov dword [esp], eax
call dword [edi + 0x16d0]
mov edx, dword [esp + 0xa0]
lea ecx, [ebp + 0x480]
add edx, 8
mov dword [esp + 8], ecx
mov dword [esp + 4], esi
mov dword [esp], edx
call dword [edi + 0x16d0]
lea eax, [ebp + 0x500]
mov dword [esp + 4], esi
mov dword [esp + 8], eax
mov eax, dword [esp + 0x90]
jmp 0x8b98e8
mov ecx, dword [esp + 0x88]
mov dword [esp + 8], ebp
mov dword [esp + 4], esi
mov dword [esp], ecx
lea ebx, [ebp + 0x80]
call dword [edi + 0x16d0]
mov edx, dword [esp + 0x88]
mov dword [esp + 8], ebx
add edx, 8
mov dword [esp + 4], esi
mov dword [esp], edx
call dword [edi + 0x16d0]
mov ebx, dword [esp + 0x88]
lea eax, [ebp + 0x100]
add ebx, dword [esp + 0x7c]
mov dword [esp + 8], eax
mov dword [esp + 4], esi
mov dword [esp], ebx
add ebx, 8
call dword [edi + 0x16d0]
lea ecx, [ebp + 0x180]
mov dword [esp + 4], esi
mov dword [esp + 8], ecx
mov dword [esp], ebx
call dword [edi + 0x16d0]
mov edx, dword [edi + 0x2998]
test edx, edx
jne 0x8ba74e
mov ecx, dword [edi + 0x29a8]
mov esi, dword [esp + 0x74]
mov eax, dword [esp + 0x84]
shl esi, cl
lea edx, [ebp + 0x200]
mov ebx, dword [esp + 0x74]
mov dword [esp], eax
shl ebx, 3
mov dword [esp + 8], edx
test ecx, ecx
mov dword [esp + 4], esi
cmovne ebx, dword [esp + 0x74]
call dword [edi + 0x16d0]
mov edx, dword [esp + 0x80]
lea ecx, [ebp + 0x280]
mov dword [esp], edx
mov dword [esp + 4], esi
mov dword [esp + 8], ecx
call dword [edi + 0x16d0]
mov ecx, dword [esp + 0x84]
lea eax, [ebp + 0x300]
add ecx, ebx
mov dword [esp + 8], eax
mov dword [esp + 4], esi
mov dword [esp + 0x68], ecx
mov dword [esp], ecx
call dword [edi + 0x16d0]
add ebx, dword [esp + 0x80]
lea edx, [ebp + 0x380]
mov dword [esp + 8], edx
mov dword [esp + 4], esi
mov dword [esp], ebx
call dword [edi + 0x16d0]
mov eax, dword [edi + 0x2994]
test eax, eax
jne 0x8b85f7
mov ecx, dword [esp + 0x84]
lea eax, [ebp + 0x400]
mov dword [esp + 4], esi
add ecx, 8
mov dword [esp + 8], eax
mov dword [esp], ecx
call dword [edi + 0x16d0]
mov eax, dword [esp + 0x80]
lea edx, [ebp + 0x480]
add eax, 8
mov dword [esp + 8], edx
mov dword [esp + 4], esi
mov dword [esp], eax
call dword [edi + 0x16d0]
mov edx, dword [esp + 0x68]
lea ecx, [ebp + 0x500]
add edx, 8
mov dword [esp + 4], esi
mov dword [esp + 8], ecx
mov dword [esp], edx
call dword [edi + 0x16d0]
lea eax, [ebp + 0x580]
mov dword [esp + 4], esi
lea esi, [ebx + 8]
mov dword [esp + 8], eax
mov dword [esp], esi
call dword [edi + 0x16d0]
jmp 0x8b85f7
mov eax, dword [esp + 0x80]
mov dword [esp + 0x14], ecx
mov dword [esp + 0x10], edx
mov ecx, dword [esp + 0x84]
mov dword [esp + 4], eax
mov edx, dword [esp + 0x88]
mov eax, edi
lea ebx, [edi + 0xf8]
mov dword [esp], ecx
mov dword [esp + 0xc], ebx
mov dword [esp + 8], 0
call fcn.008a8835
lea edx, [edi + 0xd44]
mov ecx, dword [edi + 0x2000]
mov eax, dword [edi + 0x1d3c]
jmp 0x8b85a8
mov ecx, dword [edi + 0x2894]
test ecx, ecx
jne 0x8b7d9b
mov edx, ebp
mov eax, edi
mov dword [esp + 4], ebx
mov dword [esp + 8], esi
mov dword [esp], 0
call fcn.008b7955
mov ecx, dword [esp + 0x20]
lea edx, [ebp + 0x80]
mov dword [esp + 8], esi
lea eax, [ebx + ecx]
mov dword [esp], 1
mov dword [esp + 4], eax
mov eax, edi
call fcn.008b7955
add ebx, dword [esp + 0x9c]
lea edx, [ebp + 0x100]
mov eax, edi
mov dword [esp + 4], ebx
mov dword [esp + 8], esi
mov dword [esp], 2
call fcn.008b7955
add ebx, dword [esp + 0x20]
lea edx, [ebp + 0x180]
mov eax, edi
mov dword [esp + 8], esi
mov dword [esp + 4], ebx
mov dword [esp], 3
call fcn.008b7955
mov edx, dword [edi + 0x2998]
test edx, edx
jne 0x8ba791
mov ecx, dword [edi + 0x29a8]
mov esi, dword [esp + 0x98]
mov ebx, dword [esp + 0x98]
shl esi, cl
shl ebx, 3
lea edx, [ebp + 0x200]
test ecx, ecx
mov eax, edi
mov ecx, dword [esp + 0xa4]
cmovne ebx, dword [esp + 0x98]
mov dword [esp + 4], ecx
mov dword [esp + 8], esi
mov dword [esp], 4
call fcn.008b7955
mov eax, dword [esp + 0xa0]
lea edx, [ebp + 0x280]
mov dword [esp + 4], eax
mov eax, edi
mov dword [esp + 8], esi
mov dword [esp], 5
call fcn.008b7955
mov ecx, dword [esp + 0xa4]
lea edx, [ebp + 0x300]
mov eax, edi
add ecx, ebx
mov dword [esp + 8], esi
mov dword [esp], 6
mov dword [esp + 0x94], ecx
mov dword [esp + 4], ecx
call fcn.008b7955
add ebx, dword [esp + 0xa0]
lea edx, [ebp + 0x380]
mov eax, edi
mov dword [esp + 8], esi
mov dword [esp + 4], ebx
mov dword [esp], 7
call fcn.008b7955
mov edx, dword [edi + 0x2994]
test edx, edx
jne 0x8b83e9
mov ecx, dword [esp + 0xa4]
lea edx, [ebp + 0x400]
mov eax, edi
add ecx, 8
mov dword [esp + 8], esi
mov dword [esp], 8
mov dword [esp + 4], ecx
call fcn.008b7955
mov eax, dword [esp + 0xa0]
add eax, 8
lea edx, [ebp + 0x480]
mov dword [esp + 8], esi
mov dword [esp + 4], eax
mov eax, edi
mov dword [esp], 9
call fcn.008b7955
lea edx, [ebp + 0x500]
mov dword [esp + 8], esi
mov eax, dword [esp + 0x94]
add eax, 8
mov dword [esp], 0xa
mov dword [esp + 4], eax
mov eax, edi
call fcn.008b7955
lea edx, [ebp + 0x580]
lea ebp, [ebx + 8]
mov dword [esp + 8], esi
mov dword [esp + 4], ebp
mov dword [esp], 0xb
mov eax, edi
call fcn.008b7955
jmp 0x8b83e9
mov ebx, dword [edi + 0x2894]
test ebx, ebx
jne 0x8b933b
cmp dword [edi + 0x30], 0x13
je 0x8ba4c1
mov eax, dword [esp + 0x44]
mov edx, ebp
mov dword [esp + 8], esi
mov dword [esp + 4], eax
mov eax, edi
mov dword [esp], 0
call fcn.008b7955
mov ecx, dword [esp + 0x44]
lea edx, [ebp + 0x80]
add ecx, 8
mov eax, edi
mov dword [esp + 8], esi
mov dword [esp + 4], ecx
mov dword [esp], 1
call fcn.008b7955
mov ebx, dword [esp + 0x44]
lea edx, [ebp + 0x100]
mov eax, edi
add ebx, dword [esp + 0x38]
mov dword [esp + 8], esi
mov dword [esp], 2
mov dword [esp + 4], ebx
call fcn.008b7955
add ebx, 8
lea edx, [ebp + 0x180]
mov eax, edi
mov dword [esp + 8], esi
mov dword [esp + 4], ebx
mov dword [esp], 3
call fcn.008b7955
mov edx, dword [edi + 0x2998]
test edx, edx
jne 0x8ba47b
mov ecx, dword [edi + 0x29a8]
mov eax, dword [esp + 0x40]
mov esi, dword [esp + 0x30]
mov ebx, dword [esp + 0x30]
shl esi, cl
lea edx, [ebp + 0x200]
shl ebx, 3
mov dword [esp + 4], eax
test ecx, ecx
mov eax, edi
cmovne ebx, dword [esp + 0x30]
mov dword [esp + 8], esi
mov dword [esp], 4
call fcn.008b7955
mov ecx, dword [esp + 0x3c]
lea edx, [ebp + 0x280]
mov eax, edi
mov dword [esp + 4], ecx
mov dword [esp + 8], esi
mov dword [esp], 5
call fcn.008b7955
mov eax, dword [esp + 0x40]
lea edx, [ebp + 0x300]
mov dword [esp + 8], esi
add eax, ebx
mov dword [esp], 6
mov dword [esp + 0x28], eax
mov dword [esp + 4], eax
mov eax, edi
call fcn.008b7955
add ebx, dword [esp + 0x3c]
lea edx, [ebp + 0x380]
mov eax, edi
mov dword [esp + 8], esi
mov dword [esp + 4], ebx
mov dword [esp], 7
call fcn.008b7955
mov edx, dword [edi + 0x2994]
test edx, edx
jne 0x8b83dd
mov eax, dword [esp + 0x40]
lea edx, [ebp + 0x400]
mov dword [esp + 8], esi
add eax, 8
mov dword [esp], 8
mov dword [esp + 4], eax
mov eax, edi
call fcn.008b7955
mov ecx, dword [esp + 0x3c]
lea edx, [ebp + 0x480]
add ecx, 8
mov eax, edi
mov dword [esp + 8], esi
mov dword [esp + 4], ecx
mov dword [esp], 9
call fcn.008b7955
mov eax, dword [esp + 0x28]
lea edx, [ebp + 0x500]
mov dword [esp + 8], esi
add eax, 8
mov dword [esp], 0xa
mov dword [esp + 4], eax
mov eax, edi
call fcn.008b7955
mov dword [esp + 8], esi
lea esi, [ebx + 8]
lea edx, [ebp + 0x580]
mov dword [esp + 4], esi
mov dword [esp], 0xb
mov eax, edi
call fcn.008b7955
jmp 0x8b83dd
mov byte [ecx], al
mov edx, dword [edi + 0x38]
jmp 0x8b851d
mov byte [ecx], al
mov edx, dword [edi + 0x38]
jmp 0x8b7c87
mov eax, dword [edi + 0x2894]
test eax, eax
jne 0x8b94be
mov eax, dword [esp + 0x88]
mov edx, ebp
mov dword [esp + 8], esi
mov dword [esp + 4], eax
mov eax, edi
mov dword [esp], 0
call fcn.008b7955
mov ecx, dword [esp + 0x88]
lea edx, [ebp + 0x80]
add ecx, 8
mov eax, edi
mov dword [esp + 8], esi
mov dword [esp + 4], ecx
mov dword [esp], 1
call fcn.008b7955
mov ebx, dword [esp + 0x88]
lea edx, [ebp + 0x100]
mov eax, edi
add ebx, dword [esp + 0x7c]
mov dword [esp + 8], esi
mov dword [esp], 2
mov dword [esp + 4], ebx
call fcn.008b7955
add ebx, 8
lea edx, [ebp + 0x180]
mov eax, edi
mov dword [esp + 8], esi
mov dword [esp + 4], ebx
mov dword [esp], 3
call fcn.008b7955
mov edx, dword [edi + 0x2998]
test edx, edx
jne 0x8ba4ea
mov ecx, dword [edi + 0x29a8]
mov eax, dword [esp + 0x84]
mov esi, dword [esp + 0x74]
mov ebx, dword [esp + 0x74]
shl esi, cl
lea edx, [ebp + 0x200]
shl ebx, 3
mov dword [esp + 4], eax
test ecx, ecx
mov eax, edi
cmovne ebx, dword [esp + 0x74]
mov dword [esp + 8], esi
mov dword [esp], 4
call fcn.008b7955
mov ecx, dword [esp + 0x80]
lea edx, [ebp + 0x280]
mov eax, edi
mov dword [esp + 4], ecx
mov dword [esp + 8], esi
mov dword [esp], 5
call fcn.008b7955
mov eax, dword [esp + 0x84]
lea edx, [ebp + 0x300]
mov dword [esp + 8], esi
add eax, ebx
mov dword [esp], 6
mov dword [esp + 0x6c], eax
mov dword [esp + 4], eax
mov eax, edi
call fcn.008b7955
add ebx, dword [esp + 0x80]
lea edx, [ebp + 0x380]
mov eax, edi
mov dword [esp + 8], esi
mov dword [esp + 4], ebx
mov dword [esp], 7
call fcn.008b7955
mov edx, dword [edi + 0x2994]
test edx, edx
jne 0x8b85f7
mov eax, dword [esp + 0x84]
lea edx, [ebp + 0x400]
mov dword [esp + 8], esi
add eax, 8
mov dword [esp], 8
mov dword [esp + 4], eax
mov eax, edi
call fcn.008b7955
mov ecx, dword [esp + 0x80]
lea edx, [ebp + 0x480]
add ecx, 8
mov eax, edi
mov dword [esp + 8], esi
mov dword [esp + 4], ecx
mov dword [esp], 9
call fcn.008b7955
mov eax, dword [esp + 0x6c]
lea edx, [ebp + 0x500]
mov dword [esp + 8], esi
add eax, 8
mov dword [esp], 0xa
mov dword [esp + 4], eax
mov eax, edi
call fcn.008b7955
mov dword [esp + 8], esi
lea esi, [ebx + 8]
lea edx, [ebp + 0x580]
mov dword [esp + 4], esi
mov dword [esp], 0xb
mov eax, edi
call fcn.008b7955
jmp 0x8b85f7
mov ecx, dword [edi + 0x2894]
test ecx, ecx
jne 0x8b80e6
cmp dword [edi + 0x30], 0x13
je 0x8ba729
mov edx, ebp
mov eax, edi
mov dword [esp + 4], ebx
mov dword [esp + 8], esi
mov dword [esp], 0
call fcn.008b7955
mov ecx, dword [esp + 0x1c]
lea edx, [ebp + 0x80]
mov dword [esp + 8], esi
lea eax, [ebx + ecx]
mov dword [esp], 1
mov dword [esp + 4], eax
mov eax, edi
call fcn.008b7955
add ebx, dword [esp + 0x58]
lea edx, [ebp + 0x100]
mov eax, edi
mov dword [esp + 4], ebx
mov dword [esp + 8], esi
mov dword [esp], 2
call fcn.008b7955
add ebx, dword [esp + 0x1c]
lea edx, [ebp + 0x180]
mov eax, edi
mov dword [esp + 8], esi
mov dword [esp + 4], ebx
mov dword [esp], 3
call fcn.008b7955
mov edx, dword [edi + 0x2998]
test edx, edx
jne 0x8ba6e3
mov ecx, dword [edi + 0x29a8]
mov esi, dword [esp + 0x54]
mov ebx, dword [esp + 0x54]
shl esi, cl
shl ebx, 3
lea edx, [ebp + 0x200]
test ecx, ecx
mov eax, edi
mov ecx, dword [esp + 0x60]
cmovne ebx, dword [esp + 0x54]
mov dword [esp + 4], ecx
mov dword [esp + 8], esi
mov dword [esp], 4
call fcn.008b7955
mov eax, dword [esp + 0x5c]
lea edx, [ebp + 0x280]
mov dword [esp + 4], eax
mov eax, edi
mov dword [esp + 8], esi
mov dword [esp], 5
call fcn.008b7955
mov ecx, dword [esp + 0x60]
lea edx, [ebp + 0x300]
mov eax, edi
add ecx, ebx
mov dword [esp + 8], esi
mov dword [esp], 6
mov dword [esp + 0x50], ecx
mov dword [esp + 4], ecx
call fcn.008b7955
add ebx, dword [esp + 0x5c]
lea edx, [ebp + 0x380]
mov eax, edi
mov dword [esp + 8], esi
mov dword [esp + 4], ebx
mov dword [esp], 7
call fcn.008b7955
mov edx, dword [edi + 0x2994]
test edx, edx
jne 0x8b83e9
mov ecx, dword [esp + 0x60]
lea edx, [ebp + 0x400]
mov eax, edi
add ecx, 8
mov dword [esp + 8], esi
mov dword [esp], 8
mov dword [esp + 4], ecx
call fcn.008b7955
mov eax, dword [esp + 0x5c]
add eax, 8
lea edx, [ebp + 0x480]
mov dword [esp + 8], esi
mov dword [esp + 4], eax
mov eax, edi
mov dword [esp], 9
call fcn.008b7955
lea edx, [ebp + 0x500]
mov eax, dword [esp + 0x50]
mov dword [esp + 8], esi
jmp 0x8b9e50
lea eax, [edi + 0xf8]
mov dword [esp + 0x14], ecx
mov dword [esp + 0x10], edx
mov ecx, dword [esp + 0x40]
mov dword [esp + 0xc], eax
mov ebx, dword [esp + 0x3c]
mov edx, dword [esp + 0x44]
mov eax, edi
mov dword [esp], ecx
mov dword [esp + 8], 0
mov dword [esp + 4], ebx
call fcn.008a8835
lea edx, [edi + 0xd44]
mov ecx, dword [edi + 0x2000]
mov eax, dword [edi + 0x1d3c]
jmp 0x8b8397
mov byte [ecx], al
mov edx, dword [edi + 0x38]
jmp 0x8b8315
mov byte [ecx], al
mov edx, dword [edi + 0x38]
jmp 0x8b7fe1
lea edx, [ebp + 0x200]
mov ecx, dword [esp + 0x30]
mov ebx, dword [esp + 0x40]
mov eax, edi
mov dword [esp + 8], ecx
mov dword [esp + 4], ebx
mov dword [esp], 4
call fcn.008b7955
lea edx, [ebp + 0x280]
mov esi, dword [esp + 0x3c]
mov ebp, dword [esp + 0x30]
mov dword [esp], 5
mov dword [esp + 8], ebp
mov dword [esp + 4], esi
jmp 0x8ba060
mov esi, dword [esp + 0x3c]
mov edx, dword [esp + 0x40]
mov ebx, dword [esp + 0x44]
mov dword [esp + 0x10], esi
mov dword [esp + 0xc], edx
mov dword [esp + 8], ebx
mov dword [esp + 4], ebp
mov dword [esp], edi
call fcn.00936f1e
jmp 0x8b83dd
lea edx, [ebp + 0x200]
mov ecx, dword [esp + 0x74]
mov ebx, dword [esp + 0x84]
mov eax, edi
mov dword [esp + 8], ecx
mov dword [esp + 4], ebx
mov dword [esp], 4
call fcn.008b7955
lea edx, [ebp + 0x280]
mov esi, dword [esp + 0x80]
mov ebp, dword [esp + 0x74]
mov dword [esp], 5
mov dword [esp + 8], ebp
mov dword [esp + 4], esi
jmp 0x8ba268
mov ecx, dword [esp + 0x60]
lea eax, [ebp + 0x200]
mov edx, dword [esp + 0x54]
mov dword [esp], ecx
mov dword [esp + 8], eax
mov dword [esp + 4], edx
call dword [edi + 0x16d0]
lea ebx, [ebp + 0x280]
mov esi, dword [esp + 0x54]
mov ecx, dword [esp + 0x5c]
mov dword [esp + 8], ebx
mov dword [esp + 4], esi
mov dword [esp], ecx
jmp 0x8b9908
mov eax, dword [edi + 0xa94]
mov ebx, esi
lea edx, [ebp + 0x200]
sar ebx, 1
mov ecx, dword [esp + 0x60]
mov dword [esp + 0xc], eax
mov eax, edi
mov esi, dword [esp + 0x58]
mov dword [esp + 4], ecx
mov dword [esp + 8], ebx
mov dword [esp], 4
call fcn.008b79a1
mov eax, dword [edi + 0xa94]
lea edx, [ebp + 0x280]
mov ecx, dword [esp + 0x5c]
mov dword [esp + 0xc], eax
mov eax, edi
sar esi, 1
mov dword [esp + 4], ecx
mov dword [esp + 8], ebx
mov dword [esp], 5
call fcn.008b79a1
mov eax, dword [edi + 0xa94]
mov ecx, dword [esp + 0x60]
lea edx, [ebp + 0x300]
add ecx, esi
mov dword [esp + 0xc], eax
mov eax, edi
mov dword [esp + 8], ebx
mov dword [esp + 4], ecx
mov dword [esp], 6
call fcn.008b79a1
lea edx, [ebp + 0x380]
mov ebp, dword [edi + 0xa94]
add esi, dword [esp + 0x5c]
mov dword [esp + 8], ebx
mov dword [esp + 0xc], ebp
mov dword [esp + 4], esi
mov dword [esp], 7
jmp 0x8b7eb0
mov eax, dword [edi + 0xa94]
mov ebx, esi
lea edx, [ebp + 0x200]
sar ebx, 1
mov ecx, dword [esp + 0x84]
mov dword [esp + 0xc], eax
mov eax, edi
mov esi, dword [esp + 0x7c]
mov dword [esp + 4], ecx
mov dword [esp + 8], ebx
mov dword [esp], 4
call fcn.008b79a1
mov eax, dword [edi + 0xa94]
lea edx, [ebp + 0x280]
mov ecx, dword [esp + 0x80]
mov dword [esp + 0xc], eax
mov eax, edi
sar esi, 1
mov dword [esp + 4], ecx
mov dword [esp + 8], ebx
mov dword [esp], 5
call fcn.008b79a1
mov eax, dword [edi + 0xa94]
mov ecx, dword [esp + 0x84]
lea edx, [ebp + 0x300]
add ecx, esi
mov dword [esp + 0xc], eax
mov eax, edi
mov dword [esp + 8], ebx
mov dword [esp + 4], ecx
mov dword [esp], 6
call fcn.008b79a1
lea edx, [ebp + 0x380]
add esi, dword [esp + 0x80]
mov ebp, dword [edi + 0xa94]
mov dword [esp + 8], ebx
mov dword [esp + 0xc], ebp
mov dword [esp + 4], esi
mov dword [esp], 7
jmp 0x8b95da
mov eax, dword [esp + 0x54]
lea edx, [ebp + 0x200]
mov ebx, dword [esp + 0x60]
mov dword [esp + 8], eax
mov eax, edi
mov dword [esp + 4], ebx
mov dword [esp], 4
call fcn.008b7955
mov esi, dword [esp + 0x54]
lea edx, [ebp + 0x280]
mov dword [esp + 8], esi
mov ecx, dword [esp + 0x5c]
mov dword [esp + 4], ecx
mov dword [esp], 5
jmp 0x8b9e7d
mov edx, dword [esp + 0x5c]
mov esi, dword [esp + 0x60]
mov dword [esp + 8], ebx
mov dword [esp + 0x10], edx
mov dword [esp + 0xc], esi
mov dword [esp + 4], ebp
mov dword [esp], edi
call fcn.00936f1e
jmp 0x8b83e9
lea ecx, [ebp + 0x200]
mov ebx, dword [esp + 0x74]
mov edx, dword [esp + 0x84]
mov dword [esp + 8], ecx
mov dword [esp + 4], ebx
mov dword [esp], edx
call dword [edi + 0x16d0]
lea eax, [ebp + 0x280]
mov esi, dword [esp + 0x80]
mov ebp, dword [esp + 0x74]
mov dword [esp + 8], eax
mov dword [esp], esi
mov dword [esp + 4], ebp
jmp 0x8b9c34
mov eax, dword [esp + 0x98]
lea edx, [ebp + 0x200]
mov ebx, dword [esp + 0xa4]
mov dword [esp + 8], eax
mov eax, edi
mov dword [esp + 4], ebx
mov dword [esp], 4
call fcn.008b7955
mov esi, dword [esp + 0x98]
lea edx, [ebp + 0x280]
mov ecx, dword [esp + 0xa0]
mov dword [esp + 8], esi
jmp 0x8ba719
mov eax, dword [edi + 0xa94]
mov ebx, esi
lea edx, [ebp + 0x200]
sar ebx, 1
mov ecx, dword [esp + 0xa4]
mov dword [esp + 0xc], eax
mov eax, edi
mov esi, dword [esp + 0x9c]
mov dword [esp + 4], ecx
mov dword [esp + 8], ebx
mov dword [esp], 4
call fcn.008b79a1
mov eax, dword [edi + 0xa94]
lea edx, [ebp + 0x280]
mov ecx, dword [esp + 0xa0]
mov dword [esp + 0xc], eax
mov eax, edi
sar esi, 1
mov dword [esp + 4], ecx
mov dword [esp + 8], ebx
mov dword [esp], 5
call fcn.008b79a1
mov eax, dword [edi + 0xa94]
mov ecx, dword [esp + 0xa4]
lea edx, [ebp + 0x300]
add ecx, esi
mov dword [esp + 0xc], eax
mov eax, edi
mov dword [esp + 8], ebx
mov dword [esp + 4], ecx
mov dword [esp], 6
call fcn.008b79a1
lea edx, [ebp + 0x380]
add esi, dword [esp + 0xa0]
mov ebp, dword [edi + 0xa94]
mov dword [esp + 8], ebx
mov dword [esp + 0xc], ebp
jmp 0x8ba615
lea ecx, [ebp + 0x200]
mov ebx, dword [esp + 0x30]
mov edx, dword [esp + 0x40]
mov dword [esp + 8], ecx
mov dword [esp + 4], ebx
mov dword [esp], edx
call dword [edi + 0x16d0]
lea eax, [ebp + 0x280]
mov esi, dword [esp + 0x3c]
mov ebp, dword [esp + 0x30]
mov dword [esp + 8], eax
mov dword [esp], esi
mov dword [esp + 4], ebp
jmp 0x8b9782
mov eax, dword [edi + 0xa94]
mov ebx, esi
lea edx, [ebp + 0x200]
sar ebx, 1
mov ecx, dword [esp + 0x40]
mov dword [esp + 0xc], eax
mov eax, edi
mov esi, dword [esp + 0x38]
mov dword [esp + 4], ecx
mov dword [esp + 8], ebx
mov dword [esp], 4
call fcn.008b79a1
mov eax, dword [edi + 0xa94]
lea edx, [ebp + 0x280]
mov ecx, dword [esp + 0x3c]
mov dword [esp + 0xc], eax
mov eax, edi
sar esi, 1
mov dword [esp + 4], ecx
mov dword [esp + 8], ebx
mov dword [esp], 5
call fcn.008b79a1
mov eax, dword [edi + 0xa94]
mov ecx, dword [esp + 0x40]
lea edx, [ebp + 0x300]
add ecx, esi
mov dword [esp + 0xc], eax
mov eax, edi
mov dword [esp + 8], ebx
mov dword [esp + 4], ecx
mov dword [esp], 6
call fcn.008b79a1
lea edx, [ebp + 0x380]
add esi, dword [esp + 0x3c]
mov ebp, dword [edi + 0xa94]
mov dword [esp + 8], ebx
mov dword [esp + 0xc], ebp
mov dword [esp + 4], esi
mov dword [esp], 7
jmp 0x8b9448
mov ecx, dword [esp + 0xa4]
lea eax, [ebp + 0x200]
mov edx, dword [esp + 0x98]
mov dword [esp], ecx
mov dword [esp + 8], eax
mov dword [esp + 4], edx
call dword [edi + 0x16d0]
lea ebx, [ebp + 0x280]
mov esi, dword [esp + 0x98]
mov ecx, dword [esp + 0xa0]
mov dword [esp + 8], ebx
mov dword [esp + 4], esi
mov dword [esp], ecx
jmp 0x8b9908