Function at 0xbdcbb0
Capabilities:
Resolve function by parsing pe exports

Disassembly:
push ebp
push edi
push esi
push ebx
sub esp, 0x1dc
mov edx, dword [esp + 0x200]
mov ecx, dword [esp + 0x1fc]
mov esi, dword [esp + 0x1f0]
lea eax, [edx + edx*2]
mov edx, dword [esp + 0x1f4]
shl eax, 4
add eax, dword [ecx*4 + 0x1271a20]
mov edi, dword [edx]
lea eax, [esi + eax*4 + 0x9e160]
mov dword [esp + 0x58], eax
mov ecx, dword [esp + 0x58]
mov eax, dword [edi*4 + 0x1271a80]
mov ebx, dword [edi*8 + 0x1271960]
mov ebp, dword [edi*8 + 0x1271964]
lea eax, [ecx + eax*2]
mov ecx, edx
sar ebx, 2
sar ebp, 2
test edi, edi
mov dword [esp + 0x80], eax
mov dword [esp + 0x70], ebp
jne 0xbde0b7
mov ecx, dword [ecx + 0x50]
mov edx, dword [edx + 0x4c]
mov dword [esp + 0x48], ecx
mov ecx, dword [esp + 0x1f4]
mov dword [esp + 0x40], edx
mov edx, dword [ecx + 0x54]
mov ecx, dword [ecx + 0x40]
add edi, 0x27d70
mov dword [esp + 0x1cc], 0x10
mov dword [esp + 0x4c], ecx
mov ecx, dword [esp + 0x1f4]
mov eax, dword [esp + 0x4c]
mov ecx, dword [ecx + 0x44]
add eax, eax
mov dword [esp + 0x84], ecx
mov ecx, dword [esp + 0x1f4]
mov ebp, dword [ecx + 4]
mov dword [esp + 0x14], edx
mov ecx, ebp
sub ecx, eax
mov eax, dword [esp + 0x84]
mov dword [esp + 0x74], ecx
mov ecx, ebp
add eax, eax
sub ecx, eax
mov dword [esp + 0x78], ecx
mov ecx, dword [esp + 0x70]
lea eax, [esp + 0x1cc]
mov dword [esp + 0xc], eax
shl ecx, 2
mov dword [esp + 0x5c], ecx
lea ecx, [ebx*4]
mov dword [esp + 0x60], ecx
mov ecx, dword [esp + 0x1f4]
add ecx, 0x10
mov dword [esp + 0x64], ecx
mov ecx, dword [esp + 0x5c]
mov dword [esp + 0x1c], ecx
mov ecx, dword [esp + 0x60]
mov dword [esp + 0x18], ecx
mov ecx, dword [esp + 0x48]
mov dword [esp + 0x10], ecx
lea ecx, [esp + 0xa0]
mov dword [esp + 8], ecx
mov ecx, dword [esp + 0x1f4]
mov eax, dword [ecx + 0x38]
mov ecx, dword [esp + 0x64]
mov dword [esp + 0x3c], edx
mov dword [esp + 4], eax
mov dword [esp], ecx
call dword [esi + 0x9f63c]
mov ecx, dword [esp + 0x1cc]
mov dword [esp + 0x68], edi
mov edi, dword [esp + 0x1f4]
mov dword [esp + 4], 0x10
mov dword [esp + 0xc], ecx
mov ecx, dword [esp + 0x68]
mov dword [esp + 8], eax
mov eax, dword [edi + 0x28]
mov dword [esp], eax
call dword [esi + ecx*4 + 8]
mov ecx, dword [esp + 0x74]
mov edi, dword [esp + 0x48]
mov edx, dword [esp + 0x3c]
movsx edi, word [ecx + edi*2]
mov ecx, dword [esp + 0x78]
add eax, edi
movsx edi, word [ecx + edx*2]
mov ecx, dword [esp + 0x80]
add edi, eax
movzx eax, word [esp + 0x48]
mov word [ecx], ax
mov ecx, dword [esp + 0x58]
mov word [ecx], ax
mov ecx, dword [esp + 0x80]
mov eax, dword [esp + 0x1fc]
mov word [ecx + 2], dx
mov ecx, dword [esp + 0x58]
add eax, 3
mov word [ecx + 2], dx
mov edx, dword [esp + 0x1fc]
mov ecx, dword [esp + 0x1f4]
test edx, edx
cmovns eax, dword [esp + 0x1fc]
sar eax, 2
mov dword [esp + 0x88], eax
mov eax, dword [ecx]
mov ecx, dword [esp + 0x88]
mov dword [esp], esi
mov dword [esp + 0xc], eax
mov dword [esp + 8], ecx
mov ecx, dword [esp + 0x1f8]
mov dword [esp + 4], ecx
call fcn.00ba5ee0
mov edx, dword [esp + 0x3c]
cmp eax, dword [esp + 0x40]
cmovg eax, dword [esp + 0x40]
cmp edx, dword [esp + 0x84]
mov dword [esp + 0x8c], eax
jne 0xbdd755
mov ecx, dword [esp + 0x4c]
cmp dword [esp + 0x48], ecx
jne 0xbdd755
mov eax, dword [esi + 0x3a55c]
add eax, 2
cmp edx, eax
jle 0xbde0ac
mov eax, dword [esi + 0x3a564]
sub eax, 2
cmp edx, eax
jge 0xbde0ac
mov ebp, dword [esp + 0x48]
mov ecx, dword [esp + 0x4c]
sub ebp, 2
cmp ebp, ecx
mov dword [esp + 0x40], ebp
je 0xbde41e
mov ecx, dword [esp + 0x60]
lea eax, [esp + 0x1cc]
mov ebp, dword [esp + 0x5c]
mov dword [esp + 0x14], edx
mov dword [esp + 0xc], eax
mov dword [esp + 0x18], ecx
lea ecx, [esp + 0xa0]
mov dword [esp + 0x1c], ebp
mov ebp, dword [esp + 0x40]
mov dword [esp + 8], ecx
mov ecx, dword [esp + 0x1f4]
mov dword [esp + 0x1cc], 0x10
mov dword [esp + 0x10], ebp
mov ebp, dword [esp + 0x64]
mov eax, dword [ecx + 0x38]
mov dword [esp + 0x3c], edx
mov dword [esp], ebp
mov dword [esp + 4], eax
call dword [esi + 0x9f63c]
mov ecx, dword [esp + 0x1cc]
mov dword [esp + 4], 0x10
mov ebp, dword [esp + 0x68]
mov dword [esp + 0xc], ecx
mov ecx, dword [esp + 0x1f4]
mov dword [esp + 8], eax
mov eax, dword [ecx + 0x28]
mov dword [esp], eax
call dword [esi + ebp*4 + 8]
mov ebp, dword [esp + 0x40]
mov edx, dword [esp + 0x3c]
mov ecx, eax
mov eax, dword [esp + 0x74]
movsx ebp, word [eax + ebp*2]
add ecx, ebp
mov ebp, dword [esp + 0x78]
movsx eax, word [ebp + edx*2]
add eax, ecx
cmp edi, eax
mov dword [esp + 0x1ac], eax
cmova edi, eax
mov ecx, dword [esp + 0x48]
mov ebp, dword [esp + 0x4c]
sub ecx, 1
mov dword [esp + 0x54], ecx
cmp ecx, ebp
lea ecx, [edx + 2]
mov dword [esp + 0x90], ecx
je 0xbde3ff
mov ecx, dword [esp + 0x60]
lea eax, [esp + 0xa0]
mov ebp, dword [esp + 0x5c]
mov dword [esp + 8], eax
mov dword [esp + 0x1cc], 0x10
mov dword [esp + 0x18], ecx
mov ecx, dword [esp + 0x54]
mov dword [esp + 0x1c], ebp
mov ebp, dword [esp + 0x90]
mov dword [esp + 0x10], ecx
mov ecx, dword [esp + 0x1f4]
mov dword [esp + 0x14], ebp
lea ebp, [esp + 0x1cc]
mov dword [esp + 0xc], ebp
mov ebp, dword [esp + 0x64]
mov eax, dword [ecx + 0x38]
mov dword [esp + 0x3c], edx
mov dword [esp], ebp
mov dword [esp + 4], eax
call dword [esi + 0x9f63c]
mov ecx, dword [esp + 0x1cc]
mov dword [esp + 4], 0x10
mov ebp, dword [esp + 0x68]
mov dword [esp + 0xc], ecx
mov ecx, dword [esp + 0x1f4]
mov dword [esp + 8], eax
mov eax, dword [ecx + 0x28]
mov dword [esp], eax
call dword [esi + ebp*4 + 8]
mov ebp, dword [esp + 0x54]
mov edx, dword [esp + 0x3c]
mov ecx, eax
mov eax, dword [esp + 0x74]
movsx ebp, word [eax + ebp*2]
add ecx, ebp
mov ebp, dword [esp + 0x78]
mov dword [esp + 0x44], ecx
mov ecx, dword [esp + 0x90]
movsx eax, word [ebp + ecx*2]
add eax, dword [esp + 0x44]
cmp edi, eax
mov dword [esp + 0x1b0], eax
cmova edi, eax
mov ecx, dword [esp + 0x48]
mov ebp, dword [esp + 0x4c]
add ecx, 1
cmp ecx, ebp
mov dword [esp + 0x7c], ecx
je 0xbde3db
mov ecx, dword [esp + 0x5c]
lea eax, [esp + 0x1cc]
mov ebp, dword [esp + 0x60]
mov dword [esp + 0xc], eax
mov dword [esp + 0x1cc], 0x10
mov dword [esp + 0x1c], ecx
mov ecx, dword [esp + 0x90]
mov dword [esp + 0x18], ebp
mov ebp, dword [esp + 0x7c]
mov dword [esp + 0x14], ecx
lea ecx, [esp + 0xa0]
mov dword [esp + 8], ecx
mov ecx, dword [esp + 0x1f4]
mov dword [esp + 0x10], ebp
mov ebp, dword [esp + 0x64]
mov eax, dword [ecx + 0x38]
mov dword [esp + 0x3c], edx
mov dword [esp], ebp
mov dword [esp + 4], eax
call dword [esi + 0x9f63c]
mov ecx, dword [esp + 0x1cc]
mov dword [esp + 4], 0x10
mov ebp, dword [esp + 0x68]
mov dword [esp + 0xc], ecx
mov ecx, dword [esp + 0x1f4]
mov dword [esp + 8], eax
mov eax, dword [ecx + 0x28]
mov dword [esp], eax
call dword [esi + ebp*4 + 8]
mov ebp, dword [esp + 0x7c]
mov edx, dword [esp + 0x3c]
mov ecx, eax
mov eax, dword [esp + 0x74]
movsx ebp, word [eax + ebp*2]
add ecx, ebp
mov ebp, dword [esp + 0x78]
mov dword [esp + 0x44], ecx
mov ecx, dword [esp + 0x90]
movsx eax, word [ebp + ecx*2]
add eax, dword [esp + 0x44]
cmp edi, eax
mov dword [esp + 0x1b4], eax
cmova edi, eax
mov ebp, dword [esp + 0x48]
mov ecx, dword [esp + 0x4c]
add ebp, 2
cmp ebp, ecx
mov dword [esp + 0x94], ebp
je 0xbde3be
mov ecx, dword [esp + 0x60]
lea eax, [esp + 0x1cc]
mov ebp, dword [esp + 0x5c]
mov dword [esp + 0x14], edx
mov dword [esp + 0xc], eax
mov dword [esp + 0x18], ecx
lea ecx, [esp + 0xa0]
mov dword [esp + 0x1c], ebp
mov ebp, dword [esp + 0x94]
mov dword [esp + 8], ecx
mov ecx, dword [esp + 0x1f4]
mov dword [esp + 0x1cc], 0x10
mov dword [esp + 0x10], ebp
mov ebp, dword [esp + 0x64]
mov eax, dword [ecx + 0x38]
mov dword [esp + 0x3c], edx
mov dword [esp], ebp
mov dword [esp + 4], eax
call dword [esi + 0x9f63c]
mov ecx, dword [esp + 0x1cc]
mov dword [esp + 4], 0x10
mov ebp, dword [esp + 0x68]
mov dword [esp + 0xc], ecx
mov ecx, dword [esp + 0x1f4]
mov dword [esp + 8], eax
mov eax, dword [ecx + 0x28]
mov dword [esp], eax
call dword [esi + ebp*4 + 8]
mov ebp, dword [esp + 0x94]
mov edx, dword [esp + 0x3c]
mov ecx, eax
mov eax, dword [esp + 0x74]
movsx ebp, word [eax + ebp*2]
add ecx, ebp
mov ebp, dword [esp + 0x78]
movsx eax, word [ebp + edx*2]
add eax, ecx
cmp edi, eax
mov dword [esp + 0x1b8], eax
cmova edi, eax
mov ecx, dword [esp + 0x7c]
cmp dword [esp + 0x4c], ecx
je 0xbde398
lea ebp, [edx - 2]
mov dword [esp + 0x6c], ebp
mov ecx, dword [esp + 0x5c]
lea eax, [esp + 0x1cc]
mov ebp, dword [esp + 0x60]
mov dword [esp + 0xc], eax
mov dword [esp + 0x1cc], 0x10
mov dword [esp + 0x1c], ecx
mov ecx, dword [esp + 0x6c]
mov dword [esp + 0x18], ebp
mov ebp, dword [esp + 0x7c]
mov dword [esp + 0x14], ecx
lea ecx, [esp + 0xa0]
mov dword [esp + 8], ecx
mov ecx, dword [esp + 0x1f4]
mov dword [esp + 0x10], ebp
mov ebp, dword [esp + 0x64]
mov eax, dword [ecx + 0x38]
mov dword [esp + 0x3c], edx
mov dword [esp], ebp
mov dword [esp + 4], eax
call dword [esi + 0x9f63c]
mov ecx, dword [esp + 0x1cc]
mov dword [esp + 4], 0x10
mov ebp, dword [esp + 0x68]
mov dword [esp + 0xc], ecx
mov ecx, dword [esp + 0x1f4]
mov dword [esp + 8], eax
mov eax, dword [ecx + 0x28]
mov dword [esp], eax
call dword [esi + ebp*4 + 8]
mov ebp, dword [esp + 0x7c]
mov edx, dword [esp + 0x3c]
mov ecx, eax
mov eax, dword [esp + 0x74]
movsx ebp, word [eax + ebp*2]
add ecx, ebp
mov ebp, dword [esp + 0x78]
mov dword [esp + 0x44], ecx
mov ecx, dword [esp + 0x6c]
movsx eax, word [ebp + ecx*2]
add eax, dword [esp + 0x44]
cmp edi, eax
mov dword [esp + 0x1bc], eax
cmova edi, eax
mov ecx, dword [esp + 0x54]
cmp dword [esp + 0x4c], ecx
je 0xbde377
mov ecx, dword [esp + 0x5c]
lea eax, [esp + 0x1cc]
mov ebp, dword [esp + 0x60]
mov dword [esp + 0xc], eax
mov dword [esp + 0x1cc], 0x10
mov dword [esp + 0x1c], ecx
mov ecx, dword [esp + 0x6c]
mov dword [esp + 0x18], ebp
mov ebp, dword [esp + 0x54]
mov dword [esp + 0x14], ecx
lea ecx, [esp + 0xa0]
mov dword [esp + 8], ecx
mov ecx, dword [esp + 0x1f4]
mov dword [esp + 0x10], ebp
mov ebp, dword [esp + 0x64]
mov eax, dword [ecx + 0x38]
mov dword [esp + 0x3c], edx
mov dword [esp], ebp
mov dword [esp + 4], eax
call dword [esi + 0x9f63c]
mov ecx, dword [esp + 0x1cc]
mov dword [esp + 4], 0x10
mov ebp, dword [esp + 0x68]
mov dword [esp + 0xc], ecx
mov ecx, dword [esp + 0x1f4]
mov dword [esp + 8], eax
mov eax, dword [ecx + 0x28]
mov dword [esp], eax
call dword [esi + ebp*4 + 8]
mov ebp, dword [esp + 0x54]
mov edx, dword [esp + 0x3c]
mov ecx, eax
mov eax, dword [esp + 0x74]
movsx ebp, word [eax + ebp*2]
add ecx, ebp
mov ebp, dword [esp + 0x78]
mov dword [esp + 0x44], ecx
mov ecx, dword [esp + 0x6c]
movsx eax, word [ebp + ecx*2]
add eax, dword [esp + 0x44]
cmp eax, edi
mov dword [esp + 0x1c0], eax
cmovb edi, eax
mov eax, edi
shl eax, 4
add eax, edi
shr eax, 4
cmp eax, dword [esp + 0x1ac]
mov dword [esp + 0x50], eax
jae 0xbde728
mov ebp, dword [esp + 0x48]
mov dword [esp + 0x98], 0xfffffffe
mov dword [esp + 0x40], ebp
mov ecx, dword [esp + 0x50]
mov ebp, edx
cmp ecx, dword [esp + 0x1b0]
jae 0xbdeb3c
mov ecx, dword [esp + 0x50]
cmp ecx, dword [esp + 0x1b4]
jae 0xbdeaa7
mov ecx, dword [esp + 0x50]
cmp ecx, dword [esp + 0x1b8]
jae 0xbdea17
mov ecx, dword [esp + 0x50]
cmp ecx, dword [esp + 0x1bc]
jae 0xbde985
mov ecx, dword [esp + 0x50]
cmp dword [esp + 0x1c0], ecx
jbe 0xbde69e
cmp dword [esp + 0x98], 0xfffffffe
je 0xbdd897
mov edx, dword [esp + 0x98]
mov dword [esp + 0x9c], ebx
mov ebx, dword [esp + 0x1f4]
mov dword [esp + 0x7c], 9
mov dword [esp + 0x28], edx
jmp 0xbdd6df
mov eax, dword [ecx*8 + 0x1271aa4]
add eax, ebp
mov dword [esp + 0x44], eax
mov ecx, dword [esp + 0x5c]
lea eax, [esp + 0x1cc]
mov dword [esp + 0x10], edx
mov dword [esp + 0xc], eax
mov dword [esp + 0x1cc], 0x10
mov dword [esp + 0x1c], ecx
mov ecx, dword [esp + 0x60]
mov dword [esp + 0x18], ecx
mov ecx, dword [esp + 0x44]
mov dword [esp + 0x14], ecx
lea ecx, [esp + 0xa0]
mov dword [esp + 8], ecx
mov ecx, dword [esp + 0x64]
mov eax, dword [ebx + 0x38]
mov dword [esp + 0x3c], edx
mov dword [esp], ecx
mov dword [esp + 4], eax
call dword [esi + 0x9f63c]
mov dword [esp + 4], 0x10
mov ecx, eax
mov eax, dword [esp + 0x1cc]
mov dword [esp + 8], ecx
mov ecx, dword [esp + 0x68]
mov dword [esp + 0xc], eax
mov eax, dword [ebx + 0x28]
mov dword [esp], eax
call dword [esi + ecx*4 + 8]
mov edx, dword [esp + 0x3c]
mov ecx, dword [esp + 0x74]
mov dword [esp + 0x50], eax
movsx eax, word [ecx + edx*2]
mov edx, dword [esp + 0x44]
mov ecx, dword [esp + 0x78]
add eax, dword [esp + 0x50]
mov dword [esp + 0x50], eax
movsx eax, word [ecx + edx*2]
add eax, dword [esp + 0x50]
cmp edi, eax
mov dword [esp + 0x1ac], eax
cmova edi, eax
mov edx, dword [esp + 0x48]
add edx, 1
mov dword [esp + 0x50], edx
mov ecx, dword [esp + 0x50]
mov edx, dword [esp + 0x40]
mov eax, dword [ecx*8 + 0x1271aa4]
add edx, dword [ecx*8 + 0x1271aa0]
add eax, ebp
cmp edx, dword [esp + 0x4c]
mov dword [esp + 0x44], eax
jne 0xbdd4d6
mov ecx, dword [esp + 0x84]
cmp eax, ecx
je 0xbde35b
mov ecx, dword [esp + 0x5c]
lea eax, [esp + 0x1cc]
mov dword [esp + 0x10], edx
mov dword [esp + 0xc], eax
mov dword [esp + 0x1cc], 0x10
mov dword [esp + 0x1c], ecx
mov ecx, dword [esp + 0x60]
mov dword [esp + 0x18], ecx
mov ecx, dword [esp + 0x44]
mov dword [esp + 0x14], ecx
lea ecx, [esp + 0xa0]
mov dword [esp + 8], ecx
mov ecx, dword [esp + 0x64]
mov eax, dword [ebx + 0x38]
mov dword [esp + 0x3c], edx
mov dword [esp], ecx
mov dword [esp + 4], eax
call dword [esi + 0x9f63c]
mov dword [esp + 4], 0x10
mov ecx, eax
mov eax, dword [esp + 0x1cc]
mov dword [esp + 8], ecx
mov ecx, dword [esp + 0x68]
mov dword [esp + 0xc], eax
mov eax, dword [ebx + 0x28]
mov dword [esp], eax
call dword [esi + ecx*4 + 8]
mov edx, dword [esp + 0x3c]
mov ecx, dword [esp + 0x74]
mov dword [esp + 0x54], eax
movsx eax, word [ecx + edx*2]
mov edx, dword [esp + 0x44]
mov ecx, dword [esp + 0x78]
add eax, dword [esp + 0x54]
mov dword [esp + 0x54], eax
movsx eax, word [ecx + edx*2]
add eax, dword [esp + 0x54]
cmp edi, eax
mov dword [esp + 0x1b0], eax
cmova edi, eax
mov edx, dword [esp + 0x48]
add edx, 2
mov dword [esp + 0x54], edx
mov ecx, dword [esp + 0x54]
mov edx, dword [esp + 0x40]
mov eax, dword [ecx*8 + 0x1271aa4]
add edx, dword [ecx*8 + 0x1271aa0]
add eax, ebp
cmp edx, dword [esp + 0x4c]
mov dword [esp + 0x44], eax
jne 0xbdd5c2
mov ecx, dword [esp + 0x84]
cmp eax, ecx
je 0xbde34b
mov ecx, dword [esp + 0x5c]
lea eax, [esp + 0x1cc]
mov dword [esp + 0x10], edx
mov dword [esp + 0xc], eax
mov dword [esp + 0x1cc], 0x10
mov dword [esp + 0x1c], ecx
mov ecx, dword [esp + 0x60]
mov dword [esp + 0x18], ecx
mov ecx, dword [esp + 0x44]
mov dword [esp + 0x14], ecx
lea ecx, [esp + 0xa0]
mov dword [esp + 8], ecx
mov ecx, dword [esp + 0x64]
mov eax, dword [ebx + 0x38]
mov dword [esp + 0x3c], edx
mov dword [esp], ecx
mov dword [esp + 4], eax
call dword [esi + 0x9f63c]
mov dword [esp + 4], 0x10
mov ecx, eax
mov eax, dword [esp + 0x1cc]
mov dword [esp + 8], ecx
mov ecx, dword [esp + 0x68]
mov dword [esp + 0xc], eax
mov eax, dword [ebx + 0x28]
mov dword [esp], eax
call dword [esi + ecx*4 + 8]
mov edx, dword [esp + 0x3c]
mov ecx, dword [esp + 0x74]
mov dword [esp + 0x6c], eax
movsx eax, word [ecx + edx*2]
mov edx, dword [esp + 0x44]
mov ecx, dword [esp + 0x78]
add eax, dword [esp + 0x6c]
mov dword [esp + 0x6c], eax
movsx eax, word [ecx + edx*2]
add eax, dword [esp + 0x6c]
cmp edi, eax
mov dword [esp + 0x1b4], eax
cmova edi, eax
mov edx, edi
shl edx, 4
add edx, edi
shr edx, 4
cmp dword [esp + 0x1ac], edx
jbe 0xbde275
mov ecx, dword [esp + 0x40]
mov dword [esp + 0x90], ebp
mov dword [esp + 0x28], 0xfffffffe
mov dword [esp + 0x6c], ecx
cmp edx, dword [esp + 0x1b0]
jae 0xbde1b8
cmp edx, dword [esp + 0x1b4]
jae 0xbde117
mov edx, dword [esp + 0x6c]
mov ebp, dword [esp + 0x90]
mov dword [esp + 0x40], edx
cmp dword [esp + 0x28], 0xfffffffe
je 0xbdd890
sub dword [esp + 0x7c], 1
je 0xbdd890
mov ecx, dword [esp + 0x28]
mov eax, dword [esi + 0x3a55c]
mov ecx, dword [ecx*4 + 0x1271ae4]
add eax, 2
cmp ebp, eax
mov dword [esp + 0x48], ecx
jle 0xbdd890
mov eax, dword [esi + 0x3a564]
sub eax, 2
cmp ebp, eax
jge 0xbdd890
mov edx, dword [esp + 0x40]
add edx, dword [ecx*8 + 0x1271aa0]
cmp edx, dword [esp + 0x4c]
jne 0xbdd3dd
mov ecx, dword [esp + 0x48]
mov eax, dword [ecx*8 + 0x1271aa4]
mov ecx, dword [esp + 0x84]
add eax, ebp
cmp eax, ecx
mov dword [esp + 0x44], eax
jne 0xbdd3ea
mov dword [esp + 0x1ac], 0x10000000
jmp 0xbdd49a
mov ecx, dword [esp + 0x4c]
cmp ecx, dword [esi + 0x3a558]
jl 0xbdcdfa
cmp ecx, dword [esi + 0x3a560]
mov eax, dword [esi + 0x3a55c]
jg 0xbdce00
cmp dword [esp + 0x84], eax
jl 0xbdce00
mov ecx, dword [esp + 0x84]
cmp ecx, dword [esi + 0x3a564]
jg 0xbdce00
mov ecx, dword [esp + 0x5c]
lea eax, [esp + 0x1cc]
mov dword [esp + 0xc], eax
mov dword [esp + 0x1cc], 0x10
mov dword [esp + 0x1c], ecx
mov ecx, dword [esp + 0x60]
mov dword [esp + 0x18], ecx
mov ecx, dword [esp + 0x84]
mov dword [esp + 0x14], ecx
mov ecx, dword [esp + 0x4c]
mov dword [esp + 0x10], ecx
lea ecx, [esp + 0xa0]
mov dword [esp + 8], ecx
mov ecx, dword [esp + 0x1f4]
mov eax, dword [ecx + 0x38]
mov ecx, dword [esp + 0x64]
mov dword [esp + 0x3c], edx
mov dword [esp + 4], eax
mov dword [esp], ecx
call dword [esi + 0x9f63c]
mov ecx, dword [esp + 0x1cc]
mov dword [esp + 4], 0x10
mov dword [esp + 0xc], ecx
mov ecx, dword [esp + 0x1f4]
mov dword [esp + 8], eax
mov eax, dword [ecx + 0x28]
mov ecx, dword [esp + 0x68]
mov dword [esp], eax
call dword [esi + ecx*4 + 8]
mov edx, dword [esp + 0x3c]
mov ecx, eax
movsx eax, word [ebp]
lea eax, [ecx + eax*2]
cmp edi, eax
cmova edi, eax
mov ecx, edi
shl ecx, 4
add ecx, edi
shr ecx, 4
cmp eax, ecx
jbe 0xbdec3d
cmp edx, dword [esp + 0x84]
jne 0xbdcdfa
mov ebp, dword [esp + 0x4c]
cmp dword [esp + 0x48], ebp
jne 0xbdcdfa
mov ecx, dword [esp + 0x1f4]
mov ecx, dword [ecx + 0x50]
mov dword [esp + 0x4c], ecx
mov ecx, dword [esp + 0x1f4]
mov ecx, dword [ecx + 0x54]
mov dword [esp + 0x84], ecx
jmp 0xbdcdfa
mov ebx, dword [esp + 0x9c]
mov edx, dword [esp + 0x4c]
cmp dword [esp + 0x40], edx
jne 0xbde36b
mov ecx, dword [esp + 0x84]
lea edx, [ebp - 1]
mov dword [esp + 0x7c], edx
cmp edx, ecx
je 0xbde493
mov ecx, dword [esp + 0x60]
lea eax, [esp + 0x1cc]
mov edx, dword [esp + 0x5c]
mov dword [esp + 0xc], eax
mov dword [esp + 0x1cc], 0x10
mov dword [esp + 0x18], ecx
mov ecx, dword [esp + 0x40]
mov dword [esp + 0x1c], edx
mov edx, dword [esp + 0x7c]
mov dword [esp + 0x10], ecx
mov ecx, dword [esp + 0x1f4]
mov dword [esp + 0x14], edx
lea edx, [esp + 0xa0]
mov dword [esp + 8], edx
mov edx, dword [esp + 0x64]
mov eax, dword [ecx + 0x38]
mov dword [esp], edx
mov dword [esp + 4], eax
call dword [esi + 0x9f63c]
mov edx, dword [esp + 0x1cc]
mov ecx, dword [esp + 0x1f4]
mov dword [esp + 4], 0x10
mov dword [esp + 0xc], edx
mov edx, dword [esp + 0x68]
mov dword [esp + 8], eax
mov eax, dword [ecx + 0x28]
mov dword [esp], eax
call dword [esi + edx*4 + 8]
mov ecx, dword [esp + 0x40]
mov edx, eax
mov eax, dword [esp + 0x74]
movsx ecx, word [eax + ecx*2]
add edx, ecx
mov ecx, dword [esp + 0x78]
mov dword [esp + 0x44], edx
mov edx, dword [esp + 0x7c]
movsx eax, word [ecx + edx*2]
lea edx, [ebp + 1]
add eax, dword [esp + 0x44]
mov ecx, dword [esp + 0x4c]
mov dword [esp + 0x54], edx
cmp edi, eax
cmova edi, eax
cmp dword [esp + 0x40], ecx
mov dword [esp + 0x1ac], eax
je 0xbde49e
mov ecx, dword [esp + 0x60]
lea eax, [esp + 0x1cc]
mov edx, dword [esp + 0x5c]
mov dword [esp + 0xc], eax
mov dword [esp + 0x1cc], 0x10
mov dword [esp + 0x18], ecx
mov ecx, dword [esp + 0x40]
mov dword [esp + 0x1c], edx
mov edx, dword [esp + 0x54]
mov dword [esp + 0x10], ecx
mov ecx, dword [esp + 0x1f4]
mov dword [esp + 0x14], edx
lea edx, [esp + 0xa0]
mov dword [esp + 8], edx
mov edx, dword [esp + 0x64]
mov eax, dword [ecx + 0x38]
mov dword [esp], edx
mov dword [esp + 4], eax
call dword [esi + 0x9f63c]
mov edx, dword [esp + 0x1cc]
mov ecx, dword [esp + 0x1f4]
mov dword [esp + 4], 0x10
mov dword [esp + 0xc], edx
mov edx, dword [esp + 0x68]
mov dword [esp + 8], eax
mov eax, dword [ecx + 0x28]
mov dword [esp], eax
call dword [esi + edx*4 + 8]
mov ecx, dword [esp + 0x40]
mov edx, eax
mov eax, dword [esp + 0x74]
movsx ecx, word [eax + ecx*2]
add edx, ecx
mov ecx, dword [esp + 0x78]
mov dword [esp + 0x44], edx
mov edx, dword [esp + 0x54]
movsx eax, word [ecx + edx*2]
add eax, dword [esp + 0x44]
cmp edi, eax
mov dword [esp + 0x1b0], eax
cmova edi, eax
mov edx, dword [esp + 0x40]
mov ecx, dword [esp + 0x4c]
sub edx, 1
cmp edx, ecx
mov dword [esp + 0x48], edx
jne 0xbdda60
cmp ebp, dword [esp + 0x84]
je 0xbdebc9
mov edx, dword [esp + 0x5c]
lea eax, [esp + 0xa0]
mov ecx, dword [esp + 0x60]
mov dword [esp + 0x14], ebp
mov dword [esp + 8], eax
mov dword [esp + 0x1c], edx
mov edx, dword [esp + 0x48]
mov dword [esp + 0x18], ecx
lea ecx, [esp + 0x1cc]
mov dword [esp + 0xc], ecx
mov ecx, dword [esp + 0x64]
mov dword [esp + 0x1cc], 0x10
mov dword [esp + 0x10], edx
mov edx, dword [esp + 0x1f4]
mov eax, dword [edx + 0x38]
mov dword [esp], ecx
mov dword [esp + 4], eax
call dword [esi + 0x9f63c]
mov edx, dword [esp + 0x1cc]
mov dword [esp + 4], 0x10
mov ecx, dword [esp + 0x68]
mov dword [esp + 0xc], edx
mov edx, dword [esp + 0x1f4]
mov dword [esp + 8], eax
mov eax, dword [edx + 0x28]
mov dword [esp], eax
call dword [esi + ecx*4 + 8]
mov ecx, dword [esp + 0x48]
mov edx, eax
mov eax, dword [esp + 0x74]
movsx ecx, word [eax + ecx*2]
add edx, ecx
mov ecx, dword [esp + 0x78]
movsx eax, word [ecx + ebp*2]
add eax, edx
cmp edi, eax
mov dword [esp + 0x1b4], eax
cmova edi, eax
mov edx, dword [esp + 0x40]
mov ecx, dword [esp + 0x4c]
add edx, 1
cmp edx, ecx
mov dword [esp + 0x50], edx
jne 0xbddb2a
cmp ebp, dword [esp + 0x84]
je 0xbdebd9
mov edx, dword [esp + 0x5c]
lea eax, [esp + 0xa0]
mov ecx, dword [esp + 0x60]
mov dword [esp + 0x14], ebp
mov dword [esp + 8], eax
mov dword [esp + 0x1c], edx
mov edx, dword [esp + 0x50]
mov dword [esp + 0x18], ecx
lea ecx, [esp + 0x1cc]
mov dword [esp + 0xc], ecx
mov ecx, dword [esp + 0x64]
mov dword [esp + 0x1cc], 0x10
mov dword [esp + 0x10], edx
mov edx, dword [esp + 0x1f4]
mov eax, dword [edx + 0x38]
mov dword [esp], ecx
mov dword [esp + 4], eax
call dword [esi + 0x9f63c]
mov edx, dword [esp + 0x1cc]
mov dword [esp + 4], 0x10
mov ecx, dword [esp + 0x68]
mov dword [esp + 0xc], edx
mov edx, dword [esp + 0x1f4]
mov dword [esp + 8], eax
mov eax, dword [edx + 0x28]
mov dword [esp], eax
call dword [esi + ecx*4 + 8]
mov ecx, dword [esp + 0x50]
mov edx, eax
mov eax, dword [esp + 0x74]
movsx ecx, word [eax + ecx*2]
add edx, ecx
mov ecx, dword [esp + 0x78]
movsx eax, word [ecx + ebp*2]
add eax, edx
cmp edi, eax
mov dword [esp + 0x1b8], eax
cmova edi, eax
mov edx, dword [esp + 0x48]
cmp dword [esp + 0x4c], edx
jne 0xbddbef
mov ecx, dword [esp + 0x84]
cmp dword [esp + 0x7c], ecx
je 0xbde467
mov edx, dword [esp + 0x60]
lea eax, [esp + 0xa0]
mov ecx, dword [esp + 0x5c]
mov dword [esp + 8], eax
mov dword [esp + 0x1cc], 0x10
mov dword [esp + 0x18], edx
mov edx, dword [esp + 0x48]
mov dword [esp + 0x1c], ecx
mov ecx, dword [esp + 0x7c]
mov dword [esp + 0x10], edx
mov edx, dword [esp + 0x1f4]
mov dword [esp + 0x14], ecx
lea ecx, [esp + 0x1cc]
mov dword [esp + 0xc], ecx
mov ecx, dword [esp + 0x64]
mov eax, dword [edx + 0x38]
mov dword [esp], ecx
mov dword [esp + 4], eax
call dword [esi + 0x9f63c]
mov edx, dword [esp + 0x1cc]
mov dword [esp + 4], 0x10
mov ecx, dword [esp + 0x68]
mov dword [esp + 0xc], edx
mov edx, dword [esp + 0x1f4]
mov dword [esp + 8], eax
mov eax, dword [edx + 0x28]
mov dword [esp], eax
call dword [esi + ecx*4 + 8]
mov ecx, dword [esp + 0x48]
mov edx, eax
mov eax, dword [esp + 0x74]
movsx ecx, word [eax + ecx*2]
add edx, ecx
mov ecx, dword [esp + 0x78]
mov dword [esp + 0x44], edx
mov edx, dword [esp + 0x7c]
movsx eax, word [ecx + edx*2]
add eax, dword [esp + 0x44]
mov edx, dword [esp + 0x48]
cmp edi, eax
cmova edi, eax
cmp dword [esp + 0x4c], edx
mov dword [esp + 0x1bc], eax
je 0xbde472
mov ecx, dword [esp + 0x60]
lea eax, [esp + 0x1cc]
mov edx, dword [esp + 0x5c]
mov dword [esp + 0xc], eax
mov dword [esp + 0x1cc], 0x10
mov dword [esp + 0x18], ecx
mov ecx, dword [esp + 0x48]
mov dword [esp + 0x1c], edx
mov edx, dword [esp + 0x54]
mov dword [esp + 0x10], ecx
mov ecx, dword [esp + 0x1f4]
mov dword [esp + 0x14], edx
lea edx, [esp + 0xa0]
mov dword [esp + 8], edx
mov edx, dword [esp + 0x64]
mov eax, dword [ecx + 0x38]
mov dword [esp], edx
mov dword [esp + 4], eax
call dword [esi + 0x9f63c]
mov edx, dword [esp + 0x1cc]
mov ecx, dword [esp + 0x1f4]
mov dword [esp + 4], 0x10
mov dword [esp + 0xc], edx
mov edx, dword [esp + 0x68]
mov dword [esp + 8], eax
mov eax, dword [ecx + 0x28]
mov dword [esp], eax
call dword [esi + edx*4 + 8]
mov ecx, dword [esp + 0x48]
mov edx, eax
mov eax, dword [esp + 0x74]
movsx ecx, word [eax + ecx*2]
add edx, ecx
mov ecx, dword [esp + 0x78]
mov dword [esp + 0x44], edx
mov edx, dword [esp + 0x54]
movsx eax, word [ecx + edx*2]
add eax, dword [esp + 0x44]
cmp edi, eax
mov dword [esp + 0x1c0], eax
cmova edi, eax
mov ecx, dword [esp + 0x50]
cmp dword [esp + 0x4c], ecx
jne 0xbddd88
mov ecx, dword [esp + 0x84]
cmp dword [esp + 0x7c], ecx
je 0xbde43b
mov ecx, dword [esp + 0x60]
lea eax, [esp + 0x1cc]
mov edx, dword [esp + 0x5c]
mov dword [esp + 0xc], eax
mov dword [esp + 0x1cc], 0x10
mov dword [esp + 0x18], ecx
mov ecx, dword [esp + 0x50]
mov dword [esp + 0x1c], edx
mov edx, dword [esp + 0x7c]
mov dword [esp + 0x10], ecx
mov ecx, dword [esp + 0x1f4]
mov dword [esp + 0x14], edx
lea edx, [esp + 0xa0]
mov dword [esp + 8], edx
mov edx, dword [esp + 0x64]
mov eax, dword [ecx + 0x38]
mov dword [esp], edx
mov dword [esp + 4], eax
call dword [esi + 0x9f63c]
mov edx, dword [esp + 0x1cc]
mov ecx, dword [esp + 0x1f4]
mov dword [esp + 4], 0x10
mov dword [esp + 0xc], edx
mov edx, dword [esp + 0x68]
mov dword [esp + 8], eax
mov eax, dword [ecx + 0x28]
mov dword [esp], eax
call dword [esi + edx*4 + 8]
mov ecx, dword [esp + 0x50]
mov edx, eax
mov eax, dword [esp + 0x74]
movsx ecx, word [eax + ecx*2]
add edx, ecx
mov ecx, dword [esp + 0x78]
mov dword [esp + 0x44], edx
mov edx, dword [esp + 0x7c]
movsx eax, word [ecx + edx*2]
add eax, dword [esp + 0x44]
mov edx, dword [esp + 0x50]
cmp edi, eax
cmova edi, eax
cmp dword [esp + 0x4c], edx
mov dword [esp + 0x1c4], eax
je 0xbde446
mov edx, dword [esp + 0x60]
lea eax, [esp + 0xa0]
mov ecx, dword [esp + 0x5c]
mov dword [esp + 8], eax
mov dword [esp + 0x1cc], 0x10
mov dword [esp + 0x18], edx
mov edx, dword [esp + 0x50]
mov dword [esp + 0x1c], ecx
mov ecx, dword [esp + 0x54]
mov dword [esp + 0x10], edx
mov edx, dword [esp + 0x1f4]
mov dword [esp + 0x14], ecx
lea ecx, [esp + 0x1cc]
mov dword [esp + 0xc], ecx
mov ecx, dword [esp + 0x64]
mov eax, dword [edx + 0x38]
mov dword [esp], ecx
mov dword [esp + 4], eax
call dword [esi + 0x9f63c]
mov edx, dword [esp + 0x1cc]
mov dword [esp + 4], 0x10
mov ecx, dword [esp + 0x68]
mov dword [esp + 0xc], edx
mov edx, dword [esp + 0x1f4]
mov dword [esp + 8], eax
mov eax, dword [edx + 0x28]
mov dword [esp], eax
call dword [esi + ecx*4 + 8]
mov ecx, dword [esp + 0x50]
mov edx, eax
mov eax, dword [esp + 0x74]
movsx ecx, word [eax + ecx*2]
add edx, ecx
mov ecx, dword [esp + 0x78]
mov dword [esp + 0x44], edx
mov edx, dword [esp + 0x54]
movsx eax, word [ecx + edx*2]
add eax, dword [esp + 0x44]
cmp eax, edi
mov dword [esp + 0x1c8], eax
cmovb edi, eax
mov eax, edi
shl eax, 4
add edi, eax
shr edi, 4
cmp edi, dword [esp + 0x1ac]
mov dword [esp + 0x5c], ebp
jae 0xbde819
cmp edi, dword [esp + 0x1b0]
jae 0xbde7a1
mov edx, dword [esp + 0x40]
cmp edi, dword [esp + 0x1b4]
mov dword [esp + 0x4c], edx
jae 0xbde625
cmp edi, dword [esp + 0x1b8]
jae 0xbde5b4
cmp edi, dword [esp + 0x1bc]
jae 0xbde53c
cmp edi, dword [esp + 0x1c0]
jae 0xbde4c4
cmp edi, dword [esp + 0x1c4]
jae 0xbde90d
cmp edi, dword [esp + 0x1c8]
jae 0xbde895
mov ecx, dword [esp + 0x1f4]
mov edi, dword [esp + 0x8c]
mov edx, dword [esp + 0x5c]
mov ebp, dword [esp + 0x4c]
mov dword [ecx + 0x4c], edi
mov edi, dword [esp + 0x70]
mov dword [ecx + 0x54], edx
mov dword [ecx + 0x50], ebp
mov ecx, dword [esp + 0x1fc]
test edi, edi
movzx eax, byte [ecx + 0x1271b00]
movzx edx, byte [ecx + 0x1271b10]
jle 0xbde0ac
mov edi, dword [esp + 0x200]
movzx eax, al
movzx edx, dl
mov dword [esp + 0x40], 0
lea ecx, [edi + edi*2]
mov edi, ebp
movzx ebp, word [esp + 0x5c]
lea eax, [eax + ecx*2]
lea eax, [edx + eax*8]
lea edx, [esi + eax*4]
mov eax, ebp
mov ecx, edx
shl eax, 0x10
mov dword [esp + 0x58], eax
mov dword [esp + 0x60], edx
nop
lea esi, [esi]
test ebx, ebx
jle 0xbde02a
cmp ebx, 1
jbe 0xbdec1f
movzx edx, word [esp + 0x4c]
lea esi, [ecx + 0x9e190]
xor eax, eax
or edx, dword [esp + 0x58]
nop
mov dword [esi + eax*4], edx
add eax, 1
cmp ebx, eax
jne 0xbde020
add dword [esp + 0x40], 1
add ecx, 0x20
mov edx, dword [esp + 0x70]
cmp dword [esp + 0x40], edx
jne 0xbde000
mov ecx, dword [esp + 0x1f4]
mov edi, dword [esp + 0x4c]
movzx ebp, word [esp + 0x5c]
mov edx, dword [esp + 0x60]
sub edi, dword [ecx + 0x40]
sub bp, word [ecx + 0x44]
mov dword [esp + 0x40], 0
mov dword [esp + 0x4c], edi
movzx edi, word [esp + 0x4c]
mov eax, ebp
shl eax, 0x10
mov dword [esp + 0x44], eax
test ebx, ebx
jle 0xbde09a
cmp ebx, 1
jbe 0xbdec01
movzx ecx, word [esp + 0x4c]
lea esi, [edx + 0x9e310]
xor eax, eax
or ecx, dword [esp + 0x44]
nop
mov dword [esi + eax*4], ecx
add eax, 1
cmp ebx, eax
jne 0xbde090
add dword [esp + 0x40], 1
add edx, 0x20
mov ecx, dword [esp + 0x70]
cmp dword [esp + 0x40], ecx
jne 0xbde071
add esp, 0x1dc
pop ebx
pop esi
pop edi
pop ebp
ret
mov ebp, dword [esp + 0x1fc]
mov edx, dword [edx + 0x50]
mov dword [esp + 0x40], 0x10000000
test ebp, ebp
mov dword [esp + 0x48], edx
mov edx, dword [ecx + 0x54]
je 0xbdcc3f
mov eax, ecx
mov ebp, dword [esp + 0x1fc]
mov ecx, dword [esp + 0x200]
add eax, 0x40
mov dword [esp + 0x3c], edx
mov dword [esp + 0x10], eax
mov dword [esp + 0xc], ebx
mov dword [esp + 4], ecx
mov dword [esp + 8], ebp
mov dword [esp], esi
call fcn.00b8da30
mov edx, dword [esp + 0x3c]
mov ecx, dword [esp + 0x1f4]
jmp 0xbdcc3f
mov edx, dword [esp + 0x54]
movzx eax, word [esp + 0x40]
mov ecx, dword [edx*8 + 0x1271aa0]
mov edx, dword [esp + 0x80]
add eax, ecx
mov word [edx], ax
mov edx, dword [esp + 0x58]
mov word [edx], ax
mov edx, dword [esp + 0x54]
mov edx, dword [edx*8 + 0x1271aa4]
mov dword [esp + 0x48], edx
movzx eax, word [esp + 0x48]
mov edx, dword [esp + 0x80]
add eax, ebp
mov word [edx + 2], ax
mov edx, dword [esp + 0x58]
mov word [edx + 2], ax
mov edx, dword [esp + 0x88]
mov eax, dword [ebx]
mov dword [esp + 0x3c], ecx
mov dword [esp], esi
mov dword [esp + 8], edx
mov edx, dword [esp + 0x1f8]
mov dword [esp + 0xc], eax
mov dword [esp + 4], edx
call fcn.00ba5ee0
mov ecx, dword [esp + 0x3c]
cmp dword [esp + 0x8c], eax
jle 0xbde337
add dword [esp + 0x40], ecx
mov ecx, dword [esp + 0x50]
add ebp, dword [esp + 0x48]
mov dword [esp + 0x8c], eax
mov dword [esp + 0x28], ecx
jmp 0xbdd6c9
mov ecx, dword [esp + 0x50]
movzx eax, word [esp + 0x40]
mov ecx, dword [ecx*8 + 0x1271aa0]
add eax, ecx
mov dword [esp + 0x94], ecx
mov ecx, dword [esp + 0x80]
mov word [ecx], ax
mov ecx, dword [esp + 0x58]
mov word [ecx], ax
mov ecx, dword [esp + 0x50]
mov eax, dword [esp + 0x80]
mov ecx, dword [ecx*8 + 0x1271aa4]
mov dword [esp + 0x98], ecx
add ecx, ebp
mov word [eax + 2], cx
mov eax, dword [esp + 0x58]
mov word [eax + 2], cx
mov ecx, dword [esp + 0x88]
mov eax, dword [ebx]
mov dword [esp + 0x3c], edx
mov dword [esp], esi
mov dword [esp + 8], ecx
mov ecx, dword [esp + 0x1f8]
mov dword [esp + 0xc], eax
mov dword [esp + 4], ecx
call fcn.00ba5ee0
mov edx, dword [esp + 0x3c]
cmp dword [esp + 0x8c], eax
jle 0xbdd6ad
mov ecx, dword [esp + 0x40]
add ecx, dword [esp + 0x94]
mov dword [esp + 0x8c], eax
mov dword [esp + 0x6c], ecx
mov ecx, dword [esp + 0x98]
add ecx, ebp
mov dword [esp + 0x90], ecx
mov ecx, dword [esp + 0x48]
mov dword [esp + 0x28], ecx
jmp 0xbdd6ad
mov ecx, dword [esp + 0x48]
movzx eax, word [esp + 0x40]
mov ecx, dword [ecx*8 + 0x1271aa0]
add eax, ecx
mov dword [esp + 0x44], ecx
mov ecx, dword [esp + 0x80]
mov word [ecx], ax
mov ecx, dword [esp + 0x58]
mov word [ecx], ax
mov ecx, dword [esp + 0x48]
mov ecx, dword [ecx*8 + 0x1271aa4]
mov dword [esp + 0x90], ecx
movzx eax, word [esp + 0x90]
mov ecx, dword [esp + 0x80]
add eax, ebp
mov word [ecx + 2], ax
mov ecx, dword [esp + 0x58]
mov word [ecx + 2], ax
mov ecx, dword [esp + 0x88]
mov eax, dword [ebx]
mov dword [esp + 0x3c], edx
mov dword [esp], esi
mov dword [esp + 8], ecx
mov ecx, dword [esp + 0x1f8]
mov dword [esp + 0xc], eax
mov dword [esp + 4], ecx
call fcn.00ba5ee0
mov edx, dword [esp + 0x3c]
cmp dword [esp + 0x8c], eax
jle 0xbdd689
mov ecx, dword [esp + 0x44]
add ecx, dword [esp + 0x40]
mov dword [esp + 0x8c], eax
mov dword [esp + 0x6c], ecx
mov ecx, dword [esp + 0x90]
add ecx, ebp
mov dword [esp + 0x90], ecx
mov ecx, dword [esp + 0x48]
sub ecx, 1
mov dword [esp + 0x28], ecx
jmp 0xbdd6a0
mov ecx, dword [esp + 0x6c]
mov ebp, dword [esp + 0x90]
mov dword [esp + 0x40], ecx
jmp 0xbdd6c9
mov dword [esp + 0x1b4], 0x10000000
jmp 0xbdd672
mov dword [esp + 0x1b0], 0x10000000
jmp 0xbdd586
lea ecx, [ebp - 1]
mov dword [esp + 0x7c], ecx
jmp 0xbdd8bb
mov ebp, dword [esp + 0x84]
cmp dword [esp + 0x6c], ebp
jne 0xbdd263
mov dword [esp + 0x1c0], 0x10000000
jmp 0xbdd324
mov ebp, dword [esp + 0x84]
lea ecx, [edx - 2]
mov dword [esp + 0x6c], ecx
cmp ecx, ebp
jne 0xbdd194
mov dword [esp + 0x1bc], 0x10000000
jmp 0xbdd255
cmp edx, dword [esp + 0x84]
jne 0xbdd0c6
mov dword [esp + 0x1b8], 0x10000000
jmp 0xbdd17f
mov ecx, dword [esp + 0x84]
cmp dword [esp + 0x90], ecx
jne 0xbdcfe5
mov dword [esp + 0x1b4], 0x10000000
jmp 0xbdd0ac
mov ebp, dword [esp + 0x84]
cmp ecx, ebp
jne 0xbdcf07
mov dword [esp + 0x1b0], 0x10000000
jmp 0xbdcfce
cmp edx, dword [esp + 0x84]
jne 0xbdce33
mov dword [esp + 0x1ac], 0x10000000
jmp 0xbdcee6
mov dword [esp + 0x1c4], 0x10000000
mov edx, dword [esp + 0x84]
cmp dword [esp + 0x54], edx
jne 0xbdde4e
mov dword [esp + 0x1c8], 0x10000000
jmp 0xbddf06
mov dword [esp + 0x1bc], 0x10000000
mov edx, dword [esp + 0x84]
cmp dword [esp + 0x54], edx
jne 0xbddcb5
mov dword [esp + 0x1c0], 0x10000000
jmp 0xbddd6d
mov dword [esp + 0x1ac], 0x10000000
mov ecx, dword [esp + 0x84]
lea edx, [ebp + 1]
mov dword [esp + 0x54], edx
cmp edx, ecx
jne 0xbdd988
mov dword [esp + 0x1b0], 0x10000000
jmp 0xbdda40
movzx eax, word [esp + 0x40]
mov ecx, dword [esp + 0x80]
mov edx, dword [esp + 0x58]
sub eax, 1
mov word [ecx], ax
mov word [edx], ax
lea eax, [ebp + 1]
mov word [ecx + 2], ax
mov ecx, dword [esp + 0x1f4]
mov word [edx + 2], ax
mov edx, dword [esp + 0x88]
mov eax, dword [ecx]
mov ecx, dword [esp + 0x1f8]
mov dword [esp + 8], edx
mov dword [esp], esi
mov dword [esp + 0xc], eax
mov dword [esp + 4], ecx
call fcn.00ba5ee0
cmp dword [esp + 0x8c], eax
jle 0xbddf6a
mov edx, dword [esp + 0x54]
mov ecx, dword [esp + 0x48]
mov dword [esp + 0x8c], eax
mov dword [esp + 0x5c], edx
mov dword [esp + 0x4c], ecx
jmp 0xbddf6a
movzx eax, word [esp + 0x40]
mov edx, dword [esp + 0x80]
mov ecx, dword [esp + 0x58]
sub eax, 1
mov word [edx], ax
mov word [ecx], ax
lea eax, [ebp - 1]
mov word [edx + 2], ax
mov edx, dword [esp + 0x1f4]
mov word [ecx + 2], ax
mov ecx, dword [esp + 0x88]
mov eax, dword [edx]
mov edx, dword [esp + 0x1f8]
mov dword [esp + 8], ecx
mov dword [esp], esi
mov dword [esp + 0xc], eax
mov dword [esp + 4], edx
call fcn.00ba5ee0
cmp dword [esp + 0x8c], eax
jle 0xbddf5d
mov ecx, dword [esp + 0x7c]
mov edx, dword [esp + 0x48]
mov dword [esp + 0x8c], eax
mov dword [esp + 0x5c], ecx
mov dword [esp + 0x4c], edx
jmp 0xbddf5d
movzx eax, word [esp + 0x40]
mov edx, dword [esp + 0x80]
mov ecx, dword [esp + 0x58]
add eax, 1
mov word [edx], ax
mov word [ecx], ax
mov word [edx + 2], bp
mov edx, dword [esp + 0x1f4]
mov word [ecx + 2], bp
mov ecx, dword [esp + 0x88]
mov eax, dword [edx]
mov edx, dword [esp + 0x1f8]
mov dword [esp + 8], ecx
mov dword [esp], esi
mov dword [esp + 0xc], eax
mov dword [esp + 4], edx
call fcn.00ba5ee0
cmp dword [esp + 0x8c], eax
jle 0xbddf50
mov ecx, dword [esp + 0x50]
mov dword [esp + 0x5c], ebp
mov dword [esp + 0x8c], eax
mov dword [esp + 0x4c], ecx
jmp 0xbddf50
movzx eax, word [esp + 0x40]
mov ecx, dword [esp + 0x80]
mov edx, dword [esp + 0x58]
sub eax, 1
mov word [ecx], ax
mov word [edx], ax
mov word [ecx + 2], bp
mov ecx, dword [esp + 0x1f4]
mov word [edx + 2], bp
mov edx, dword [esp + 0x88]
mov eax, dword [ecx]
mov ecx, dword [esp + 0x1f8]
mov dword [esp + 8], edx
mov dword [esp], esi
mov dword [esp + 0xc], eax
mov dword [esp + 4], ecx
call fcn.00ba5ee0
mov edx, dword [esp + 0x40]
cmp dword [esp + 0x8c], eax
mov dword [esp + 0x4c], edx
jle 0xbddf43
mov ecx, dword [esp + 0x48]
mov dword [esp + 0x5c], ebp
mov dword [esp + 0x8c], eax
mov dword [esp + 0x4c], ecx
jmp 0xbddf43
movzx eax, word [esp + 0x48]
sub edx, 2
mov ecx, dword [esp + 0x80]
sub eax, 1
mov word [ecx], ax
mov ecx, dword [esp + 0x58]
mov word [ecx], ax
mov ecx, dword [esp + 0x80]
mov word [ecx + 2], dx
mov ecx, dword [esp + 0x58]
mov word [ecx + 2], dx
mov edx, dword [esp + 0x1f4]
mov ecx, dword [esp + 0x88]
mov eax, dword [edx]
mov edx, dword [esp + 0x1f8]
mov dword [esp + 8], ecx
mov dword [esp], esi
mov dword [esp + 0xc], eax
mov dword [esp + 4], edx
call fcn.00ba5ee0
cmp eax, dword [esp + 0x8c]
jge 0xbdd3a9
mov ecx, dword [esp + 0x54]
mov ebp, dword [esp + 0x6c]
mov dword [esp + 0x8c], eax
mov dword [esp + 0x98], 5
mov dword [esp + 0x40], ecx
jmp 0xbdd3b7
movzx eax, word [esp + 0x48]
mov ecx, dword [esp + 0x80]
mov ebp, dword [esp + 0x58]
sub eax, 2
mov word [ecx], ax
mov word [ebp], ax
mov word [ecx + 2], dx
mov ecx, dword [esp + 0x1f4]
mov word [ebp + 2], dx
mov ebp, dword [esp + 0x88]
mov eax, dword [ecx]
mov ecx, dword [esp + 0x1f8]
mov dword [esp + 0x3c], edx
mov dword [esp + 8], ebp
mov dword [esp + 0xc], eax
mov dword [esp + 4], ecx
mov dword [esp], esi
call fcn.00ba5ee0
mov edx, dword [esp + 0x3c]
cmp dword [esp + 0x8c], eax
jle 0xbdebe9
mov dword [esp + 0x8c], eax
mov dword [esp + 0x98], 0
jmp 0xbdd352
movzx ecx, word [esp + 0x40]
lea eax, [ebp + 1]
mov edx, dword [esp + 0x80]
mov word [edx], cx
mov edx, dword [esp + 0x58]
mov word [edx], cx
mov edx, dword [esp + 0x80]
mov ecx, dword [esp + 0x58]
mov word [edx + 2], ax
mov edx, dword [esp + 0x1f4]
mov word [ecx + 2], ax
mov ecx, dword [esp + 0x88]
mov eax, dword [edx]
mov edx, dword [esp + 0x1f8]
mov dword [esp + 8], ecx
mov dword [esp], esi
mov dword [esp + 0xc], eax
mov dword [esp + 4], edx
call fcn.00ba5ee0
cmp dword [esp + 0x8c], eax
jle 0xbddf2e
mov ecx, dword [esp + 0x54]
mov dword [esp + 0x8c], eax
mov dword [esp + 0x5c], ecx
jmp 0xbddf2e
movzx ecx, word [esp + 0x40]
lea eax, [ebp - 1]
mov edx, dword [esp + 0x80]
mov word [edx], cx
mov edx, dword [esp + 0x58]
mov word [edx], cx
mov edx, dword [esp + 0x80]
mov ecx, dword [esp + 0x58]
mov word [edx + 2], ax
mov edx, dword [esp + 0x1f4]
mov word [ecx + 2], ax
mov ecx, dword [esp + 0x88]
mov eax, dword [edx]
mov edx, dword [esp + 0x1f8]
mov dword [esp + 8], ecx
mov dword [esp], esi
mov dword [esp + 0xc], eax
mov dword [esp + 4], edx
call fcn.00ba5ee0
mov dword [esp + 0x5c], ebp
cmp dword [esp + 0x8c], eax
jle 0xbddf21
mov ecx, dword [esp + 0x7c]
mov dword [esp + 0x8c], eax
mov dword [esp + 0x5c], ecx
jmp 0xbddf21
movzx eax, word [esp + 0x40]
add ebp, 1
mov ecx, dword [esp + 0x80]
mov edi, dword [esp + 0x58]
mov edx, dword [esp + 0x1f4]
add eax, 1
mov word [ecx], ax
mov word [edi], ax
mov word [ecx + 2], bp
mov eax, dword [edx]
mov word [edi + 2], bp
mov ecx, dword [esp + 0x88]
mov edi, dword [esp + 0x1f8]
mov dword [esp], esi
mov dword [esp + 0xc], eax
mov dword [esp + 8], ecx
mov dword [esp + 4], edi
call fcn.00ba5ee0
cmp eax, dword [esp + 0x8c]
jge 0xbddf84
mov ebp, dword [esp + 0x54]
mov edx, dword [esp + 0x50]
mov dword [esp + 0x8c], eax
mov dword [esp + 0x5c], ebp
mov dword [esp + 0x4c], edx
jmp 0xbddf84
movzx eax, word [esp + 0x40]
mov edx, dword [esp + 0x80]
mov ecx, dword [esp + 0x58]
add eax, 1
mov word [edx], ax
mov word [ecx], ax
lea eax, [ebp - 1]
mov word [edx + 2], ax
mov edx, dword [esp + 0x1f4]
mov word [ecx + 2], ax
mov ecx, dword [esp + 0x88]
mov eax, dword [edx]
mov edx, dword [esp + 0x1f8]
mov dword [esp + 8], ecx
mov dword [esp], esi
mov dword [esp + 0xc], eax
mov dword [esp + 4], edx
call fcn.00ba5ee0
cmp dword [esp + 0x8c], eax
jle 0xbddf77
mov ecx, dword [esp + 0x7c]
mov edx, dword [esp + 0x50]
mov dword [esp + 0x8c], eax
mov dword [esp + 0x5c], ecx
mov dword [esp + 0x4c], edx
jmp 0xbddf77
movzx eax, word [esp + 0x48]
mov ecx, dword [esp + 0x80]
add eax, 1
mov word [ecx], ax
mov ecx, dword [esp + 0x58]
mov word [ecx], ax
mov ecx, dword [esp + 0x80]
lea eax, [edx - 2]
mov word [ecx + 2], ax
mov ecx, dword [esp + 0x58]
mov word [ecx + 2], ax
mov eax, dword [esp + 0x1f4]
mov ecx, dword [eax]
mov dword [esp + 0x3c], edx
mov dword [esp], esi
mov dword [esp + 0xc], ecx
mov ecx, dword [esp + 0x88]
mov dword [esp + 8], ecx
mov ecx, dword [esp + 0x1f8]
mov dword [esp + 4], ecx
call fcn.00ba5ee0
mov edx, dword [esp + 0x3c]
cmp dword [esp + 0x8c], eax
jle 0xbdd398
mov ecx, dword [esp + 0x7c]
mov ebp, dword [esp + 0x6c]
mov dword [esp + 0x8c], eax
mov dword [esp + 0x98], 4
mov dword [esp + 0x40], ecx
jmp 0xbdd398
movzx eax, word [esp + 0x48]
mov ecx, dword [esp + 0x80]
add eax, 2
mov word [ecx], ax
mov ecx, dword [esp + 0x58]
mov word [ecx], ax
mov ecx, dword [esp + 0x80]
mov eax, dword [esp + 0x1f4]
mov word [ecx + 2], dx
mov ecx, dword [esp + 0x58]
mov word [ecx + 2], dx
mov ecx, dword [eax]
mov dword [esp + 0x3c], edx
mov dword [esp], esi
mov dword [esp + 0xc], ecx
mov ecx, dword [esp + 0x88]
mov dword [esp + 8], ecx
mov ecx, dword [esp + 0x1f8]
mov dword [esp + 4], ecx
call fcn.00ba5ee0
mov edx, dword [esp + 0x3c]
cmp dword [esp + 0x8c], eax
jle 0xbdd387
mov ecx, dword [esp + 0x94]
mov ebp, edx
mov dword [esp + 0x8c], eax
mov dword [esp + 0x98], 3
mov dword [esp + 0x40], ecx
jmp 0xbdd387
movzx eax, word [esp + 0x48]
mov ecx, dword [esp + 0x80]
add eax, 1
mov word [ecx], ax
mov ecx, dword [esp + 0x58]
mov word [ecx], ax
mov ecx, dword [esp + 0x80]
lea eax, [edx + 2]
mov word [ecx + 2], ax
mov ecx, dword [esp + 0x58]
mov word [ecx + 2], ax
mov eax, dword [esp + 0x1f4]
mov ecx, dword [eax]
mov dword [esp + 0x3c], edx
mov dword [esp], esi
mov dword [esp + 0xc], ecx
mov ecx, dword [esp + 0x88]
mov dword [esp + 8], ecx
mov ecx, dword [esp + 0x1f8]
mov dword [esp + 4], ecx
call fcn.00ba5ee0
mov edx, dword [esp + 0x3c]
cmp dword [esp + 0x8c], eax
jle 0xbdd376
mov ecx, dword [esp + 0x7c]
mov ebp, dword [esp + 0x90]
mov dword [esp + 0x8c], eax
mov dword [esp + 0x98], 2
mov dword [esp + 0x40], ecx
jmp 0xbdd376
movzx eax, word [esp + 0x48]
mov ebp, dword [esp + 0x80]
mov ecx, dword [esp + 0x58]
sub eax, 1
mov word [ebp], ax
mov word [ecx], ax
lea eax, [edx + 2]
mov word [ebp + 2], ax
mov ebp, dword [esp + 0x88]
mov word [ecx + 2], ax
mov ecx, dword [esp + 0x1f4]
mov eax, dword [ecx]
mov ecx, dword [esp + 0x1f8]
mov dword [esp + 8], ebp
mov dword [esp + 0x3c], edx
mov dword [esp + 0xc], eax
mov dword [esp + 4], ecx
mov dword [esp], esi
call fcn.00ba5ee0
mov edx, dword [esp + 0x3c]
cmp dword [esp + 0x8c], eax
mov ebp, edx
jle 0xbdd365
mov ecx, dword [esp + 0x54]
mov ebp, dword [esp + 0x90]
mov dword [esp + 0x8c], eax
mov dword [esp + 0x98], 1
mov dword [esp + 0x40], ecx
jmp 0xbdd365
mov dword [esp + 0x1b4], 0x10000000
jmp 0xbddb0a
mov dword [esp + 0x1b8], 0x10000000
jmp 0xbddbd4
mov ecx, dword [esp + 0x48]
mov dword [esp + 0x98], 0xfffffffe
mov dword [esp + 0x40], ecx
jmp 0xbdd352
xor eax, eax
mov word [edx + eax*4 + 0x9e310], di
mov word [edx + eax*4 + 0x9e312], bp
add eax, 1
cmp eax, ebx
jne 0xbdec03
jmp 0xbde09a
xor eax, eax
mov word [ecx + eax*4 + 0x9e190], di
mov word [ecx + eax*4 + 0x9e192], bp
add eax, 1
cmp eax, ebx
jne 0xbdec21
jmp 0xbde02a
movzx eax, word [esp + 0x4c]
mov ebp, dword [esp + 0x80]
mov ecx, dword [esp + 0x58]
mov word [ebp], ax
movzx ebp, word [esp + 0x84]
mov word [ecx], ax
mov ecx, dword [esp + 0x80]
mov word [ecx + 2], bp
mov ecx, dword [esp + 0x58]
mov word [ecx + 2], bp
mov ecx, dword [esp + 0x1f4]
mov ebp, dword [esp + 0x88]
mov eax, dword [ecx]
mov ecx, dword [esp + 0x1f8]
mov dword [esp + 8], ebp
mov dword [esp], esi
mov dword [esp + 0xc], eax
mov dword [esp + 4], ecx
call fcn.00ba5ee0
mov edx, dword [esp + 0x3c]
cmp dword [esp + 0x8c], eax
jle 0xbdd84a
mov ecx, dword [esp + 0x4c]
mov edx, dword [esp + 0x84]
mov dword [esp + 0x8c], eax
mov dword [esp + 0x48], ecx
jmp 0xbdd865