Function at 0x8486c0
Capabilities:
Resolve function by parsing pe exports

Disassembly:
push ebp
mov ebp, eax
push edi
push esi
push ebx
sub esp, 0x46c
mov eax, dword [eax]
mov dword [esp + 0x3c], ecx
mov ebx, dword [ebp + 0x1814]
mov dword [esp + 0x64], 8
mov dword [esp + 0x40], edx
mov eax, dword [eax + 0x298]
mov dword [esp + 0x54], ebx
mov ecx, eax
mov dword [esp + 0x60], eax
mov eax, dword [ebp + 0x1818]
sar dword [esp + 0x64], cl
cmp dword [ebp + 0x153c], 4
mov dword [esp + 0x58], eax
ja case.default.0x848715
mov eax, dword [ebp + 0x153c]
jmp dword [eax*4 + 0xbaa510]
mov eax, dword [esp + 0x484]
movzx ecx, byte [esp + 0x60]
mov ebx, dword [esp + 0x484]
shl eax, 5
add eax, ebp
mov edx, dword [eax + 0x1544]
mov eax, dword [eax + 0x1540]
mov ebx, dword [ebp + ebx*8 + 0x1580]
mov dword [esp + 0x28], eax
mov eax, 2
shl eax, cl
lea edi, [eax - 1]
mov eax, dword [ebp + 0x5c8]
mov dword [esp + 0xac], ebx
mov ebx, dword [ebp + 0xa4]
add eax, eax
mov dword [esp + 0xc8], eax
mov eax, dword [ebp + 0x5cc]
sar ebx, cl
mov dword [esp + 0xb4], ebx
mov ebx, dword [ebp + 0xa8]
add eax, eax
mov dword [esp + 0xcc], eax
mov eax, dword [ebp + 0x1ffc]
sar ebx, cl
mov dword [esp + 0xb0], ebx
test eax, eax
je 0x8487c0
mov eax, dword [esp + 0x28]
movzx ecx, byte [esp + 0x60]
shr eax, 0x1f
add dword [esp + 0x28], eax
mov eax, edx
sar dword [esp + 0x28], 1
shr eax, 0x1f
lea edx, [eax + edx]
sar edx, 1
mov eax, 1
mov ebx, edx
mov esi, dword [esp + 0x60]
shl eax, cl
sub eax, 1
imul eax, dword [esp + 0xac]
add esi, 1
mov ecx, esi
sub ebx, eax
mov eax, dword [esp + 0x28]
mov edx, ebx
and edx, edi
mov dword [esp + 0xc0], edx
mov edx, dword [esp + 0x28]
and eax, edi
mov dword [esp + 0xc4], eax
mov eax, dword [esp + 0x54]
sar edx, cl
add eax, eax
imul eax, dword [esp + 0x64]
add edx, eax
mov eax, dword [esp + 0x58]
mov dword [esp + 0xdc], edx
mov edx, ebx
sar edx, cl
add eax, eax
imul eax, dword [esp + 0x64]
sar eax, 1
add edx, eax
mov eax, dword [ebp + 0x18]
mov dword [esp + 0xd8], edx
cmp eax, 2
je 0x84c914
sub eax, 1
je 0x84c9ee
mov eax, dword [esp + 0x28]
mov edx, ebx
mov ecx, esi
shr edx, 0x1f
add edx, ebx
sar edx, 1
shr eax, 0x1f
add eax, dword [esp + 0x28]
sar eax, 1
mov ebx, eax
sar eax, cl
mov ecx, dword [esp + 0x64]
and ebx, edi
imul ecx, dword [esp + 0x54]
and edi, edx
mov dword [esp + 0xbc], ebx
mov dword [esp + 0xb8], edi
add eax, ecx
mov ecx, esi
mov dword [esp + 0xd4], eax
mov eax, dword [esp + 0x64]
sar edx, cl
imul eax, dword [esp + 0x58]
sar eax, 1
add edx, eax
mov dword [esp + 0xd0], edx
mov ebx, dword [esp + 0x488]
mov eax, dword [esp + 0xd8]
imul eax, dword [esp + 0xc8]
mov ecx, dword [esp + 0x488]
add eax, dword [ebx]
add ebx, 4
add eax, dword [esp + 0xdc]
mov dword [esp + 0xf8], ebx
mov ebx, dword [esp + 0x488]
mov dword [esp + 0xe8], eax
mov eax, dword [esp + 0xd0]
imul eax, dword [esp + 0xcc]
mov edx, eax
add eax, dword [ebx + 8]
add edx, dword [ecx + 4]
add ecx, 8
add edx, dword [esp + 0xd4]
add eax, dword [esp + 0xd4]
mov dword [esp + 0xf4], ecx
mov dword [esp + 0xe4], edx
mov edx, dword [esp + 0xb4]
mov dword [esp + 0xe0], eax
xor eax, eax
cmp dword [esp + 0xc4], 0
setne al
sub edx, eax
mov eax, edx
mov edx, dword [esp + 0x64]
add edx, edx
sub eax, edx
cmp dword [esp + 0xdc], eax
ja 0x848961
mov edx, dword [esp + 0xb0]
xor eax, eax
sar edx, 1
cmp dword [esp + 0xc0], 0
setne al
sub edx, eax
sub edx, dword [esp + 0x64]
cmp dword [esp + 0xd8], edx
jbe 0x8489d9
mov eax, dword [esp + 0xd8]
mov ecx, dword [esp + 0xb0]
mov ebx, dword [esp + 0xb4]
mov dword [esp + 0x10], 0x12
mov edx, dword [esp + 0xe8]
add eax, eax
mov dword [esp + 0x18], eax
mov eax, dword [esp + 0xdc]
mov dword [esp + 0x20], ecx
mov dword [esp + 0x1c], ebx
mov dword [esp + 0xc], 0x11
mov dword [esp + 0x14], eax
mov eax, dword [ebp + 0xb0]
mov dword [esp + 4], edx
mov dword [esp + 8], eax
mov eax, dword [ebp + 0x7f8]
mov dword [esp], eax
call fcn.00848470
mov ecx, dword [ebp + 0x7f8]
test byte [ebp + 0x39], 0x20
mov dword [esp + 0xe8], ecx
je 0x84cb43
mov edi, dword [esp + 0xac]
test edi, edi
je 0x848a05
mov eax, dword [ebp + 0xb4]
mov ebx, dword [ebp + 0xb0]
add dword [esp + 0xe8], ebx
add dword [esp + 0xe4], eax
add dword [esp + 0xe0], eax
mov eax, dword [esp + 0x48c]
mov ebx, 2
sub ebx, dword [esp + 0x60]
mov edi, dword [esp + 0x60]
mov dword [esp + 0x38], 2
sub eax, 4
mov ecx, ebx
shl dword [esp + 0xc0], cl
shl dword [esp + 0xc4], cl
mov edx, dword [esp + 0xc4]
shl edi, 2
mov dword [esp + 0xec], eax
mov eax, dword [esp + 0xc0]
mov ecx, dword [esp + 0x64]
mov dword [esp + 0x10], edx
mov edx, dword [esp + 0xe8]
mov dword [esp + 0x14], eax
mov eax, dword [esp + 0xc8]
mov dword [esp + 0xc], ecx
mov ecx, dword [esp + 0x40]
mov dword [esp + 4], edx
mov dword [esp + 8], eax
mov eax, dword [esp + 0x48c]
mov dword [esp], ecx
call dword [edi + eax - 4]
test byte [ebp + 0x39], 0x20
je 0x84c826
mov eax, dword [esp + 0x484]
mov dword [esp + 0x108], 8
mov esi, dword [ebp + 0x1ffc]
shl eax, 5
add eax, ebp
mov ebx, dword [eax + 0x154c]
mov eax, dword [eax + 0x1548]
mov dword [esp + 0x28], eax
mov eax, dword [esp + 0x484]
mov eax, dword [ebp + eax*8 + 0x1584]
mov dword [esp + 0xfc], eax
mov eax, dword [ebp]
mov eax, dword [eax + 0x298]
mov ecx, eax
mov dword [esp + 0x10c], eax
mov eax, dword [ebp + 0xa4]
shl dword [esp + 0x38], cl
sar dword [esp + 0x108], cl
movzx ecx, byte [esp + 0x10c]
mov edi, dword [esp + 0x38]
sar eax, cl
mov dword [esp + 0x104], eax
mov eax, dword [ebp + 0xa8]
sub edi, 1
sar eax, cl
mov dword [esp + 0x100], eax
mov eax, dword [ebp + 0x5c8]
add eax, eax
mov dword [esp + 0x120], eax
mov eax, dword [ebp + 0x5cc]
add eax, eax
test esi, esi
mov dword [esp + 0x124], eax
je 0x848b5d
mov eax, dword [esp + 0x28]
movzx ecx, byte [esp + 0x10c]
shr eax, 0x1f
add dword [esp + 0x28], eax
mov eax, ebx
sar dword [esp + 0x28], 1
shr eax, 0x1f
lea ebx, [eax + ebx]
sar ebx, 1
mov edx, 1
mov esi, dword [esp + 0x10c]
mov eax, edx
sub edx, dword [esp + 0xfc]
shl eax, cl
mov ecx, dword [ebp + 0x1814]
sub eax, 1
add esi, 1
imul eax, edx
mov dword [esp + 0x150], ecx
mov ecx, esi
add ebx, eax
mov eax, dword [esp + 0x28]
mov edx, ebx
and edx, edi
mov dword [esp + 0x118], edx
mov edx, dword [esp + 0x28]
and eax, edi
mov dword [esp + 0x11c], eax
mov eax, dword [esp + 0x150]
sar edx, cl
add eax, eax
imul eax, dword [esp + 0x108]
add edx, eax
mov eax, dword [ebp + 0x1818]
mov dword [esp + 0x134], edx
mov edx, ebx
sar edx, cl
mov dword [esp + 0x14c], eax
add eax, eax
imul eax, dword [esp + 0x108]
sar eax, 1
add edx, eax
mov eax, dword [ebp + 0x18]
mov dword [esp + 0x130], edx
cmp eax, 2
je 0x84c8b9
sub eax, 1
je 0x84c96f
mov eax, dword [esp + 0x28]
mov edx, ebx
mov ecx, esi
shr edx, 0x1f
add edx, ebx
sar edx, 1
shr eax, 0x1f
add eax, dword [esp + 0x28]
sar eax, 1
mov ebx, eax
sar eax, cl
mov ecx, dword [esp + 0x108]
and ebx, edi
imul ecx, dword [esp + 0x150]
and edi, edx
mov dword [esp + 0x114], ebx
mov dword [esp + 0x110], edi
add eax, ecx
mov ecx, esi
mov dword [esp + 0x12c], eax
mov eax, dword [esp + 0x108]
sar edx, cl
imul eax, dword [esp + 0x14c]
sar eax, 1
add edx, eax
mov dword [esp + 0x128], edx
mov ebx, dword [esp + 0x488]
mov eax, dword [esp + 0x130]
imul eax, dword [esp + 0x120]
mov ecx, dword [esp + 0xf8]
add eax, dword [ebx]
add eax, dword [esp + 0x134]
mov ebx, dword [esp + 0xf4]
mov dword [esp + 0x140], eax
mov eax, dword [esp + 0x128]
imul eax, dword [esp + 0x124]
mov edx, eax
add eax, dword [ebx]
add edx, dword [ecx]
add eax, dword [esp + 0x12c]
add edx, dword [esp + 0x12c]
mov dword [esp + 0x138], eax
xor eax, eax
mov dword [esp + 0x13c], edx
mov edx, dword [esp + 0x104]
cmp dword [esp + 0x11c], 0
setne al
sub edx, eax
mov eax, edx
mov edx, dword [esp + 0x108]
add edx, edx
sub eax, edx
cmp dword [esp + 0x134], eax
ja 0x848d1b
mov edx, dword [esp + 0x100]
xor eax, eax
sar edx, 1
cmp dword [esp + 0x118], 0
setne al
sub edx, eax
sub edx, dword [esp + 0x64]
cmp dword [esp + 0x130], edx
jbe 0x848d93
mov eax, dword [esp + 0x130]
mov ecx, dword [esp + 0x100]
mov ebx, dword [esp + 0x104]
mov dword [esp + 0x10], 0x12
mov edx, dword [esp + 0x140]
add eax, eax
mov dword [esp + 0x18], eax
mov eax, dword [esp + 0x134]
mov dword [esp + 0x20], ecx
mov dword [esp + 0x1c], ebx
mov dword [esp + 0xc], 0x11
mov dword [esp + 0x14], eax
mov eax, dword [ebp + 0xb0]
mov dword [esp + 4], edx
mov dword [esp + 8], eax
mov eax, dword [ebp + 0x7f8]
mov dword [esp], eax
call fcn.00848470
mov ecx, dword [ebp + 0x7f8]
test byte [ebp + 0x39], 0x20
mov dword [esp + 0x140], ecx
je 0x84ca5b
mov edx, dword [esp + 0xfc]
mov ebx, dword [ebp + 0xb4]
mov eax, dword [ebp + 0xb0]
test edx, edx
mov dword [esp + 0x144], ebx
je 0x848dc6
add dword [esp + 0x140], eax
add dword [esp + 0x13c], ebx
add dword [esp + 0x138], ebx
mov ebx, 2
mov edi, dword [esp + 0x10c]
sub ebx, dword [esp + 0x10c]
add eax, dword [esp + 0x40]
mov ecx, ebx
shl dword [esp + 0x118], cl
shl dword [esp + 0x11c], cl
mov edx, dword [esp + 0x118]
shl edi, 2
mov ecx, dword [esp + 0x11c]
mov dword [esp], eax
mov dword [esp + 0x14], edx
mov edx, dword [esp + 0x64]
mov dword [esp + 0x10], ecx
mov ecx, dword [esp + 0x120]
mov dword [esp + 0xc], edx
mov edx, dword [esp + 0x140]
mov dword [esp + 8], ecx
mov ecx, dword [esp + 0xec]
mov dword [esp + 4], edx
call dword [ecx + edi]
test byte [ebp + 0x39], 0x20
jne case.default.0x848715
mov esi, dword [esp + 0x114]
mov ecx, ebx
mov eax, dword [esp + 0x110]
mov edx, dword [esp + 0x124]
add edi, dword [esp + 0x48c]
shl esi, cl
shl eax, cl
mov ebx, eax
mov dword [esp + 0x14], eax
mov eax, dword [esp + 0x64]
mov dword [esp + 0x10], esi
mov ecx, dword [ebp + 0x2164]
mov dword [esp + 8], edx
sar eax, cl
mov ecx, dword [esp + 0x13c]
mov dword [esp + 0xc], eax
mov eax, dword [esp + 0x3c]
add eax, dword [esp + 0x144]
mov dword [esp + 4], ecx
mov dword [esp], eax
call dword [edi]
mov eax, dword [esp + 0x64]
mov dword [esp + 0x14], ebx
mov ebx, dword [esp + 0x124]
mov dword [esp + 0x10], esi
mov ecx, dword [ebp + 0x2164]
mov dword [esp + 8], ebx
sar eax, cl
mov dword [esp + 0xc], eax
mov eax, dword [esp + 0x138]
mov dword [esp + 4], eax
mov eax, dword [esp + 0x480]
add eax, dword [esp + 0x144]
mov dword [esp], eax
call dword [edi]
add esp, 0x46c
pop ebx
pop esi
pop edi
pop ebp
ret
mov eax, dword [ebp + 0x2134]
cmp eax, 3
mov dword [esp + 0x3a4], eax
je 0x84b4dd
mov eax, dword [esp + 0x484]
mov ebx, dword [esp + 0x64]
movzx ecx, byte [esp + 0x60]
mov edx, dword [ebp + 0x5cc]
shl eax, 5
add ebx, ebx
add eax, ebp
mov dword [esp + 0x2b4], ebx
mov ebx, dword [eax + 0x1544]
mov eax, dword [eax + 0x1540]
mov dword [esp + 0x24c], edx
mov dword [esp + 0x28], eax
mov eax, 2
shl eax, cl
lea edi, [eax - 1]
mov eax, dword [ebp + 0xa4]
sar eax, cl
mov dword [esp + 0x220], eax
mov eax, dword [ebp + 0xa8]
sar eax, cl
mov dword [esp + 0x21c], eax
mov eax, dword [ebp + 0x5c8]
mov dword [esp + 0x250], eax
mov eax, dword [ebp + 0x1ffc]
test eax, eax
je 0x848f8b
mov eax, dword [esp + 0x28]
shr eax, 0x1f
add dword [esp + 0x28], eax
mov eax, ebx
sar dword [esp + 0x28], 1
shr eax, 0x1f
lea ebx, [eax + ebx]
sar ebx, 1
mov eax, ebx
mov ecx, dword [esp + 0x28]
and eax, edi
mov esi, dword [esp + 0x60]
mov dword [esp + 0x3c8], eax
mov eax, dword [esp + 0x54]
mov edx, dword [esp + 0x28]
and ecx, edi
add esi, 1
add eax, eax
imul eax, dword [esp + 0x64]
mov dword [esp + 0x3d0], ecx
mov ecx, esi
sar edx, cl
add edx, eax
mov eax, dword [esp + 0x58]
mov dword [esp + 0x23c], edx
mov edx, ebx
sar edx, cl
add eax, eax
imul eax, dword [esp + 0x64]
add edx, eax
mov eax, dword [ebp + 0x18]
mov dword [esp + 0x238], edx
cmp eax, 2
je 0x84be38
sub eax, 1
je 0x84c50b
mov eax, dword [esp + 0x28]
mov edx, ebx
shr edx, 0x1f
add edx, ebx
sar edx, 1
shr eax, 0x1f
add eax, dword [esp + 0x28]
sar eax, 1
mov ebx, eax
sar eax, cl
mov ecx, dword [esp + 0x64]
and ebx, edi
imul ecx, dword [esp + 0x54]
and edi, edx
mov dword [esp + 0x3c4], ebx
mov dword [esp + 0x3c0], edi
add eax, ecx
mov ecx, esi
mov dword [esp + 0x454], eax
mov eax, dword [esp + 0x64]
sar edx, cl
imul eax, dword [esp + 0x58]
add edx, eax
mov dword [esp + 0x450], edx
mov ebx, dword [esp + 0x488]
mov eax, dword [esp + 0x238]
imul eax, dword [esp + 0x250]
add eax, dword [ebx]
add eax, dword [esp + 0x23c]
mov dword [esp + 0x460], eax
mov eax, dword [esp + 0x450]
imul eax, dword [esp + 0x24c]
mov edx, eax
add eax, dword [ebx + 8]
add edx, dword [ebx + 4]
add eax, dword [esp + 0x454]
add edx, dword [esp + 0x454]
mov dword [esp + 0x3d8], eax
xor eax, eax
mov dword [esp + 0x3e4], edx
mov edx, dword [esp + 0x220]
cmp dword [esp + 0x3d0], 0
setne al
sub edx, eax
mov eax, edx
sub eax, dword [esp + 0x2b4]
cmp eax, dword [esp + 0x23c]
jb 0x84af80
xor eax, eax
mov edx, dword [esp + 0x21c]
cmp dword [esp + 0x3c8], 0
setne al
sub edx, eax
mov eax, edx
sub eax, dword [esp + 0x2b4]
cmp eax, dword [esp + 0x238]
jb 0x84af80
cmp dword [esp + 0x3a4], 1
je 0x849123
mov eax, dword [ebp + 0xb4]
mov ecx, dword [ebp + 0xb0]
add dword [esp + 0x460], ecx
add dword [esp + 0x3e4], eax
add dword [esp + 0x3d8], eax
mov ebx, 2
mov edi, dword [esp + 0x60]
sub ebx, dword [esp + 0x60]
mov dword [esp + 0x34], 2
mov ecx, ebx
shl dword [esp + 0x3c8], cl
mov eax, dword [esp + 0x3c8]
shl edi, 2
shl dword [esp + 0x3d0], cl
mov edx, dword [esp + 0x3d0]
mov ecx, dword [esp + 0x2b4]
mov dword [esp + 0x14], eax
mov eax, dword [esp + 0x250]
mov dword [esp + 0x10], edx
mov edx, dword [esp + 0x460]
mov dword [esp + 0xc], ecx
mov ecx, dword [esp + 0x40]
mov dword [esp + 8], eax
mov eax, dword [esp + 0x48c]
mov dword [esp + 4], edx
mov dword [esp], ecx
call dword [edi + eax - 4]
test byte [ebp + 0x39], 0x20
je 0x84bc84
mov eax, dword [ebp + 0x217c]
test eax, eax
jne 0x8491b5
mov eax, dword [ebp + 0x758]
mov dword [esp + 0x488], eax
mov eax, dword [ebp]
lea edx, [ebp + 0xdbc]
mov ecx, dword [ebp + 0x2134]
mov ebx, dword [ebp + 0x1814]
mov dword [esp + 0x438], edx
mov eax, dword [eax + 0x298]
mov dword [esp + 0x298], ecx
mov dword [esp + 0x440], ebx
mov dword [esp + 0x224], 8
mov dword [esp + 0x444], eax
mov eax, dword [ebp + 0x1818]
shl dword [esp + 0x484], 5
movzx ecx, byte [esp + 0x444]
shl dword [esp + 0x34], cl
mov edi, dword [esp + 0x34]
mov dword [esp + 0x29c], eax
mov eax, dword [esp + 0x484]
mov edx, dword [ebp + 0x5cc]
sar dword [esp + 0x224], cl
sub edi, 1
add eax, ebp
mov ebx, dword [eax + 0x1554]
mov eax, dword [eax + 0x1550]
mov dword [esp + 0x3f0], edx
mov dword [esp + 0x28], eax
mov eax, dword [ebp + 0xa4]
sar eax, cl
mov dword [esp + 0x3fc], eax
mov eax, dword [ebp + 0xa8]
sar eax, cl
mov dword [esp + 0x3f8], eax
mov eax, dword [ebp + 0x5c8]
mov dword [esp + 0x3f4], eax
mov eax, dword [ebp + 0x1ffc]
test eax, eax
je 0x84929a
mov eax, dword [esp + 0x28]
shr eax, 0x1f
add dword [esp + 0x28], eax
mov eax, ebx
sar dword [esp + 0x28], 1
shr eax, 0x1f
lea ebx, [eax + ebx]
sar ebx, 1
mov eax, ebx
mov ecx, dword [esp + 0x28]
and eax, edi
mov esi, dword [esp + 0x444]
mov dword [esp + 0x3cc], eax
mov eax, dword [esp + 0x440]
mov edx, dword [esp + 0x28]
and ecx, edi
add esi, 1
add eax, eax
imul eax, dword [esp + 0x224]
mov dword [esp + 0x3d4], ecx
mov ecx, esi
sar edx, cl
add edx, eax
mov eax, dword [esp + 0x29c]
mov dword [esp + 0x3ec], edx
mov edx, ebx
sar edx, cl
add eax, eax
imul eax, dword [esp + 0x224]
add edx, eax
mov eax, dword [ebp + 0x18]
mov dword [esp + 0x3e8], edx
cmp eax, 2
je 0x84bddd
sub eax, 1
je 0x84c494
mov eax, dword [esp + 0x28]
mov edx, ebx
shr edx, 0x1f
add edx, ebx
mov ebx, dword [esp + 0x440]
imul ebx, dword [esp + 0x224]
shr eax, 0x1f
add eax, dword [esp + 0x28]
sar edx, 1
sar eax, 1
mov ecx, eax
and ecx, edi
and edi, edx
mov dword [esp + 0x22c], ecx
mov ecx, esi
sar eax, cl
add eax, ebx
mov dword [esp + 0x234], eax
mov eax, dword [esp + 0x29c]
sar edx, cl
imul eax, dword [esp + 0x224]
mov dword [esp + 0x228], edi
add edx, eax
mov dword [esp + 0x230], edx
mov edx, dword [esp + 0x488]
mov eax, dword [esp + 0x3e8]
imul eax, dword [esp + 0x3f4]
mov ecx, dword [esp + 0x488]
add eax, dword [edx]
add eax, dword [esp + 0x3ec]
mov ebx, dword [esp + 0x3fc]
mov dword [esp + 0x248], eax
mov eax, dword [esp + 0x230]
imul eax, dword [esp + 0x3f0]
mov edx, eax
add eax, dword [ecx + 8]
add eax, dword [esp + 0x234]
add edx, dword [ecx + 4]
add edx, dword [esp + 0x234]
mov dword [esp + 0x240], eax
xor eax, eax
cmp dword [esp + 0x3d4], 0
mov dword [esp + 0x244], edx
mov edx, dword [esp + 0x224]
setne al
sub ebx, eax
add edx, edx
mov eax, ebx
sub eax, edx
cmp dword [esp + 0x3ec], eax
ja 0x84ae29
xor eax, eax
mov edx, dword [esp + 0x3f8]
cmp dword [esp + 0x3cc], 0
setne al
sub edx, eax
mov eax, edx
sub eax, dword [esp + 0x2b4]
cmp dword [esp + 0x3e8], eax
ja 0x84ae29
cmp dword [esp + 0x298], 2
je 0x849458
mov eax, dword [ebp + 0xb0]
add dword [esp + 0x248], eax
mov eax, dword [ebp + 0xb4]
add dword [esp + 0x244], eax
add dword [esp + 0x240], eax
mov ebx, 2
sub ebx, dword [esp + 0x444]
mov ecx, ebx
shl dword [esp + 0x3cc], cl
shl dword [esp + 0x3d4], cl
mov eax, dword [esp + 0x3cc]
mov edx, dword [esp + 0x3d4]
mov ecx, dword [esp + 0x2b4]
mov dword [esp + 0x14], eax
mov eax, dword [esp + 0x3f4]
mov dword [esp + 0x10], edx
mov edx, dword [esp + 0x248]
mov dword [esp + 0xc], ecx
mov ecx, dword [esp + 0x40]
mov dword [esp + 8], eax
mov eax, dword [esp + 0x444]
mov dword [esp + 4], edx
mov edx, dword [esp + 0x438]
mov dword [esp], ecx
call dword [edx + eax*4 - 4]
test byte [ebp + 0x39], 0x20
jne case.default.0x848715
mov esi, dword [esp + 0x22c]
mov ecx, ebx
mov eax, dword [esp + 0x228]
mov edx, dword [esp + 0x3f0]
shl esi, cl
shl eax, cl
mov dword [esp + 0x14], eax
mov ebx, eax
mov eax, dword [esp + 0x2b4]
mov dword [esp + 0x10], esi
mov ecx, dword [ebp + 0x2164]
mov dword [esp + 8], edx
mov edx, dword [esp + 0x444]
sar eax, cl
mov ecx, dword [esp + 0x244]
mov dword [esp + 0xc], eax
mov eax, dword [esp + 0x3c]
mov dword [esp + 4], ecx
mov dword [esp], eax
call dword [ebp + edx*4 + 0xdbc]
mov eax, dword [esp + 0x240]
mov dword [esp + 0x14], ebx
mov edx, dword [esp + 0x480]
mov dword [esp + 0x10], esi
mov ecx, dword [ebp + 0x2164]
sar dword [esp + 0x2b4], cl
mov ecx, dword [esp + 0x2b4]
mov ebx, dword [esp + 0x3f0]
mov dword [esp + 4], eax
mov dword [esp], edx
mov dword [esp + 0xc], ecx
mov ecx, dword [esp + 0x444]
mov dword [esp + 8], ebx
call dword [ebp + ecx*4 + 0xdbc]
jmp case.default.0x848715
shl dword [esp + 0x484], 5
mov eax, dword [esp + 0x484]
movzx ecx, byte [esp + 0x60]
mov edx, dword [esp + 0x64]
mov esi, dword [ebp + 0x1ffc]
add eax, ebp
mov ebx, dword [eax + 0x1544]
mov eax, dword [eax + 0x1540]
add edx, edx
mov dword [esp + 0x6c], edx
mov edx, dword [ebp + 0x5cc]
mov dword [esp + 0x28], eax
mov eax, 2
shl eax, cl
lea edi, [eax - 1]
mov eax, dword [ebp + 0xa4]
mov dword [esp + 0xa4], edx
sar eax, cl
mov dword [esp + 0x74], eax
mov eax, dword [ebp + 0xa8]
sar eax, cl
test esi, esi
mov dword [esp + 0x70], eax
mov eax, dword [ebp + 0x5c8]
mov dword [esp + 0xa8], eax
je 0x84960c
mov eax, dword [esp + 0x28]
shr eax, 0x1f
add dword [esp + 0x28], eax
mov eax, ebx
sar dword [esp + 0x28], 1
shr eax, 0x1f
lea ebx, [eax + ebx]
sar ebx, 1
mov eax, ebx
mov ecx, dword [esp + 0x28]
and eax, edi
mov esi, dword [esp + 0x60]
mov dword [esp + 0x80], eax
mov eax, dword [esp + 0x54]
mov edx, dword [esp + 0x28]
and ecx, edi
add esi, 1
add eax, eax
imul eax, dword [esp + 0x64]
mov dword [esp + 0x84], ecx
mov ecx, esi
sar edx, cl
add edx, eax
mov eax, dword [esp + 0x58]
mov dword [esp + 0x94], edx
mov edx, ebx
sar edx, cl
add eax, eax
imul eax, dword [esp + 0x64]
add edx, eax
mov eax, dword [ebp + 0x18]
mov dword [esp + 0x90], edx
cmp eax, 2
je 0x84b488
sub eax, 1
je 0x84bd1d
mov eax, dword [esp + 0x28]
mov edx, ebx
mov ecx, esi
shr edx, 0x1f
add edx, ebx
sar edx, 1
shr eax, 0x1f
add eax, dword [esp + 0x28]
sar eax, 1
mov ebx, eax
sar eax, cl
mov ecx, dword [esp + 0x64]
and ebx, edi
imul ecx, dword [esp + 0x54]
and edi, edx
mov dword [esp + 0x7c], ebx
mov dword [esp + 0x78], edi
add eax, ecx
mov ecx, esi
mov dword [esp + 0x8c], eax
mov eax, dword [esp + 0x64]
sar edx, cl
imul eax, dword [esp + 0x58]
add edx, eax
mov dword [esp + 0x88], edx
mov ebx, dword [esp + 0x488]
mov eax, dword [esp + 0x90]
imul eax, dword [esp + 0xa8]
add eax, dword [ebx]
add eax, dword [esp + 0x94]
mov dword [esp + 0xa0], eax
mov eax, dword [esp + 0x88]
imul eax, dword [esp + 0xa4]
mov edx, eax
add eax, dword [ebx + 8]
add edx, dword [ebx + 4]
add eax, dword [esp + 0x8c]
add edx, dword [esp + 0x8c]
mov dword [esp + 0x98], eax
xor eax, eax
mov dword [esp + 0x9c], edx
mov edx, dword [esp + 0x74]
cmp dword [esp + 0x84], 0
setne al
sub edx, eax
mov eax, edx
sub eax, dword [esp + 0x6c]
cmp dword [esp + 0x94], eax
ja 0x849761
xor eax, eax
mov ecx, dword [esp + 0x70]
cmp dword [esp + 0x80], 0
setne al
sub ecx, eax
mov eax, ecx
sub eax, dword [esp + 0x6c]
cmp dword [esp + 0x90], eax
jbe 0x8497d1
mov ebx, dword [esp + 0x70]
mov eax, dword [esp + 0x74]
mov edx, dword [esp + 0x90]
mov ecx, dword [esp + 0x94]
mov dword [esp + 0x20], ebx
mov ebx, dword [esp + 0xa0]
mov dword [esp + 0x1c], eax
mov dword [esp + 0x18], edx
mov dword [esp + 0x14], ecx
mov dword [esp + 0x10], 0x11
mov dword [esp + 0xc], 0x11
mov eax, dword [ebp + 0xb0]
mov dword [esp + 4], ebx
mov dword [esp + 8], eax
mov eax, dword [ebp + 0x7f8]
mov dword [esp], eax
call fcn.00848470
mov eax, dword [ebp + 0x7f8]
test byte [ebp + 0x39], 0x20
mov dword [esp + 0xa0], eax
je 0x84c183
mov ebx, 2
mov edi, dword [esp + 0x60]
sub ebx, dword [esp + 0x60]
mov ecx, ebx
shl dword [esp + 0x80], cl
mov eax, dword [esp + 0x80]
shl edi, 2
shl dword [esp + 0x84], cl
mov edx, dword [esp + 0x84]
mov ecx, dword [esp + 0x6c]
mov dword [esp + 0x14], eax
mov eax, dword [esp + 0xa8]
mov dword [esp + 0x10], edx
mov edx, dword [esp + 0xa0]
mov dword [esp + 0xc], ecx
mov ecx, dword [esp + 0x40]
mov dword [esp + 8], eax
mov eax, dword [esp + 0x48c]
mov dword [esp + 4], edx
mov dword [esp], ecx
call dword [edi + eax - 4]
test byte [ebp + 0x39], 0x20
jne case.default.0x848715
mov esi, dword [esp + 0x7c]
mov ecx, ebx
mov eax, dword [esp + 0x78]
mov edx, dword [esp + 0xa4]
add edi, dword [esp + 0x48c]
shl esi, cl
shl eax, cl
mov dword [esp + 0x14], eax
mov ebx, eax
mov eax, dword [esp + 0x6c]
mov dword [esp + 0x10], esi
mov ecx, dword [ebp + 0x2164]
mov dword [esp + 8], edx
sar eax, cl
mov ecx, dword [esp + 0x9c]
mov dword [esp + 0xc], eax
mov eax, dword [esp + 0x3c]
mov dword [esp + 4], ecx
mov dword [esp], eax
call dword [edi]
mov eax, dword [esp + 0x480]
mov dword [esp + 0x14], ebx
mov ebx, dword [esp + 0x98]
mov dword [esp + 0x10], esi
mov ecx, dword [ebp + 0x2164]
sar dword [esp + 0x6c], cl
mov edx, dword [esp + 0x6c]
mov ecx, dword [esp + 0xa4]
mov dword [esp + 4], ebx
mov dword [esp], eax
mov dword [esp + 0xc], edx
mov dword [esp + 8], ecx
call dword [edi]
jmp case.default.0x848715
mov eax, dword [esp + 0x484]
mov edx, dword [esp + 0x58]
mov ecx, dword [esp + 0x54]
mov ebx, dword [ebp + 0xb0]
shl eax, 5
add eax, ebp
add edx, edx
add ecx, ecx
mov dword [esp + 0x2c4], edx
mov edx, dword [eax + 0x1544]
mov dword [esp + 0x294], ecx
movzx ecx, byte [esp + 0x60]
mov dword [esp + 0x2ac], ebx
mov ebx, dword [eax + 0x1540]
mov eax, dword [ebp + 0xa8]
sar eax, cl
mov dword [esp + 0x330], eax
mov eax, dword [ebp + 0xa4]
sar eax, cl
mov dword [esp + 0x324], eax
mov eax, dword [esp + 0x488]
mov eax, dword [eax]
mov dword [esp + 0x2fc], eax
mov eax, 2
shl eax, cl
mov ecx, dword [ebp + 0x1ffc]
lea esi, [eax - 1]
test ecx, ecx
je 0x84996a
mov eax, ebx
shr eax, 0x1f
lea ebx, [eax + ebx]
mov eax, edx
shr eax, 0x1f
lea edx, [eax + edx]
sar ebx, 1
sar edx, 1
mov eax, edx
mov ecx, dword [esp + 0x60]
mov edi, ebx
and eax, esi
mov dword [esp + 0x2ec], eax
mov eax, dword [esp + 0x64]
imul eax, dword [esp + 0x294]
add ecx, 1
sar edi, cl
sar edx, cl
mov ecx, dword [esp + 0x324]
add edi, eax
mov dword [esp + 0x31c], eax
mov eax, dword [esp + 0x64]
imul eax, dword [esp + 0x2c4]
add edx, eax
mov dword [esp + 0x314], eax
mov eax, dword [esp + 0x2ac]
imul eax, edx
add eax, edi
add eax, dword [esp + 0x2fc]
and esi, ebx
mov dword [esp + 0x300], eax
setne al
movzx eax, al
sub ecx, eax
mov eax, ecx
sub eax, dword [esp + 0x64]
cmp edi, eax
ja 0x849a01
xor eax, eax
mov ecx, dword [esp + 0x330]
cmp dword [esp + 0x2ec], 0
setne al
sub ecx, eax
mov eax, ecx
sub eax, dword [esp + 0x64]
cmp edx, eax
jbe 0x849a5f
mov eax, dword [esp + 0x64]
mov ebx, dword [esp + 0x330]
mov ecx, dword [esp + 0x324]
mov dword [esp + 0x18], edx
add eax, 1
mov dword [esp + 0x20], ebx
mov ebx, dword [esp + 0x2ac]
mov dword [esp + 0x10], eax
mov dword [esp + 0xc], eax
mov eax, dword [esp + 0x300]
mov dword [esp + 0x1c], ecx
mov dword [esp + 0x14], edi
mov dword [esp + 8], ebx
mov dword [esp + 4], eax
mov eax, dword [ebp + 0x7f8]
mov dword [esp], eax
call fcn.00848470
mov edx, dword [ebp + 0x7f8]
mov dword [esp + 0x300], edx
mov ebx, 2
mov edx, dword [esp + 0x64]
mov ecx, ebx
sub ecx, dword [esp + 0x60]
shl dword [esp + 0x2ec], cl
mov eax, dword [esp + 0x2ec]
shl esi, cl
mov ecx, dword [esp + 0x2ac]
mov dword [esp + 0xc], edx
mov edx, dword [esp + 0x40]
mov dword [esp + 0x10], esi
mov dword [esp + 0x14], eax
mov eax, dword [esp + 0x300]
mov dword [esp + 8], ecx
mov ecx, dword [esp + 0x60]
mov dword [esp], edx
mov dword [esp + 4], eax
mov eax, dword [esp + 0x48c]
call dword [eax + ecx*4]
mov edx, dword [esp + 0x484]
shl edx, 5
add edx, ebp
mov eax, dword [edx + 0x1544]
mov ecx, dword [edx + 0x1540]
mov esi, dword [edx + 0x154c]
mov edx, dword [edx + 0x1548]
mov dword [esp + 0x2d8], eax
mov eax, dword [ebp]
mov dword [esp + 0x2e4], ecx
mov ecx, dword [ebp + 0xb0]
mov eax, dword [eax + 0x298]
mov dword [esp + 0x2c8], ecx
movzx ecx, byte [esp + 0x60]
mov dword [esp + 0x2b8], eax
mov eax, dword [ebp + 0xa8]
sar eax, cl
mov dword [esp + 0x334], eax
mov eax, dword [ebp + 0xa4]
sar eax, cl
movzx ecx, byte [esp + 0x2b8]
mov dword [esp + 0x328], eax
mov eax, dword [esp + 0x488]
shl ebx, cl
mov eax, dword [eax]
sub ebx, 1
mov dword [esp + 0x304], eax
mov eax, dword [ebp + 0x1ffc]
test eax, eax
je 0x849b62
mov eax, edx
shr eax, 0x1f
lea edx, [eax + edx]
mov eax, esi
shr eax, 0x1f
lea esi, [eax + esi]
sar edx, 1
sar esi, 1
mov eax, esi
mov ecx, dword [esp + 0x2b8]
mov edi, edx
and eax, ebx
mov dword [esp + 0x2f0], eax
mov eax, dword [esp + 0x294]
add ecx, 1
sar esi, cl
add eax, 1
imul eax, dword [esp + 0x64]
sar edi, cl
mov ecx, dword [esp + 0x314]
add edi, eax
mov dword [esp + 0x320], eax
mov eax, dword [esp + 0x2c8]
add ecx, esi
mov esi, edx
mov edx, dword [esp + 0x328]
imul eax, ecx
add eax, edi
add eax, dword [esp + 0x304]
and esi, ebx
mov dword [esp + 0x308], eax
setne al
movzx eax, al
sub edx, eax
mov eax, edx
sub eax, dword [esp + 0x64]
cmp edi, eax
ja 0x849bf5
xor eax, eax
mov edx, dword [esp + 0x334]
cmp dword [esp + 0x2f0], 0
setne al
sub edx, eax
mov eax, edx
sub eax, dword [esp + 0x64]
cmp ecx, eax
jbe 0x849c53
mov ebx, dword [esp + 0x334]
mov eax, dword [esp + 0x64]
mov dword [esp + 0x18], ecx
mov edx, dword [esp + 0x328]
mov ecx, dword [esp + 0x2c8]
mov dword [esp + 0x20], ebx
mov ebx, dword [esp + 0x308]
add eax, 1
mov dword [esp + 0x1c], edx
mov dword [esp + 0x14], edi
mov dword [esp + 0x10], eax
mov dword [esp + 0xc], eax
mov dword [esp + 8], ecx
mov dword [esp + 4], ebx
mov eax, dword [ebp + 0x7f8]
mov dword [esp], eax
call fcn.00848470
mov eax, dword [ebp + 0x7f8]
mov dword [esp + 0x308], eax
mov ebx, 2
mov edx, dword [esp + 0x64]
mov ecx, ebx
sub ecx, dword [esp + 0x2b8]
shl dword [esp + 0x2f0], cl
mov eax, dword [esp + 0x2f0]
shl esi, cl
mov ecx, dword [esp + 0x2c8]
mov dword [esp + 0xc], edx
mov dword [esp + 0x10], esi
mov dword [esp + 0x14], eax
mov eax, dword [esp + 0x308]
mov dword [esp + 8], ecx
mov ecx, dword [esp + 0x48c]
mov dword [esp + 4], eax
mov eax, edx
mov edx, dword [esp + 0x2b8]
add eax, dword [esp + 0x40]
mov dword [esp], eax
call dword [ecx + edx*4]
mov edx, dword [esp + 0x484]
shl edx, 5
add edx, ebp
mov eax, dword [edx + 0x1548]
mov ecx, dword [edx + 0x154c]
mov esi, dword [edx + 0x1554]
mov edx, dword [edx + 0x1550]
mov dword [esp + 0x2e8], eax
mov eax, dword [ebp + 0xb0]
mov dword [esp + 0x2dc], ecx
mov ecx, dword [ebp + 0xa8]
mov dword [esp + 0x2cc], eax
mov eax, dword [ebp]
mov dword [esp + 0x338], ecx
movzx ecx, byte [esp + 0x60]
sar dword [esp + 0x338], cl
mov eax, dword [eax + 0x298]
mov dword [esp + 0x2bc], eax
mov eax, dword [ebp + 0xa4]
sar eax, cl
movzx ecx, byte [esp + 0x2bc]
mov dword [esp + 0x32c], eax
mov eax, dword [esp + 0x488]
shl ebx, cl
mov eax, dword [eax]
sub ebx, 1
mov dword [esp + 0x30c], eax
mov eax, dword [ebp + 0x1ffc]
test eax, eax
je 0x849d63
mov eax, edx
shr eax, 0x1f
lea edx, [eax + edx]
mov eax, esi
shr eax, 0x1f
lea esi, [eax + esi]
sar edx, 1
sar esi, 1
mov ecx, dword [esp + 0x2bc]
mov eax, esi
mov edi, dword [esp + 0x31c]
and eax, ebx
mov dword [esp + 0x2f4], eax
mov eax, edx
add ecx, 1
sar eax, cl
add edi, eax
mov eax, dword [esp + 0x2c4]
sar esi, cl
add eax, 1
imul eax, dword [esp + 0x64]
lea ecx, [esi + eax]
mov esi, edx
mov edx, dword [esp + 0x32c]
mov dword [esp + 0x318], eax
mov eax, dword [esp + 0x2cc]
imul eax, ecx
add eax, edi
add eax, dword [esp + 0x30c]
and esi, ebx
mov dword [esp + 0x310], eax
setne al
movzx eax, al
sub edx, eax
mov eax, edx
sub eax, dword [esp + 0x64]
cmp edi, eax
ja 0x849df7
xor eax, eax
mov edx, dword [esp + 0x338]
cmp dword [esp + 0x2f4], 0
setne al
sub edx, eax
mov eax, edx
sub eax, dword [esp + 0x64]
cmp ecx, eax
jbe 0x849e55
mov ebx, dword [esp + 0x338]
mov eax, dword [esp + 0x64]
mov dword [esp + 0x18], ecx
mov edx, dword [esp + 0x32c]
mov ecx, dword [esp + 0x2cc]
mov dword [esp + 0x20], ebx
mov ebx, dword [esp + 0x310]
add eax, 1
mov dword [esp + 0x1c], edx
mov dword [esp + 0x14], edi
mov dword [esp + 0x10], eax
mov dword [esp + 0xc], eax
mov dword [esp + 8], ecx
mov dword [esp + 4], ebx
mov eax, dword [ebp + 0x7f8]
mov dword [esp], eax
call fcn.00848470
mov eax, dword [ebp + 0x7f8]
mov dword [esp + 0x310], eax
mov ebx, 2
mov edx, dword [esp + 0x64]
mov ecx, ebx
sub ecx, dword [esp + 0x2bc]
shl dword [esp + 0x2f4], cl
mov eax, dword [esp + 0x2f4]
shl esi, cl
mov ecx, dword [esp + 0x2cc]
mov dword [esp + 0xc], edx
mov dword [esp + 0x10], esi
mov dword [esp + 0x14], eax
mov eax, dword [esp + 0x310]
mov dword [esp + 8], ecx
mov dword [esp + 4], eax
mov eax, edx
mov edx, dword [esp + 0x2bc]
imul eax, ecx
mov ecx, dword [esp + 0x48c]
add eax, dword [esp + 0x40]
mov dword [esp], eax
call dword [ecx + edx*4]
mov edx, dword [esp + 0x484]
mov ecx, dword [esp + 0x2e4]
shl edx, 5
add edx, ebp
mov eax, dword [edx + 0x1550]
add dword [esp + 0x2e8], eax
mov eax, dword [edx + 0x1554]
add dword [esp + 0x2dc], eax
mov eax, dword [ebp + 0xb0]
add ecx, dword [esp + 0x2e8]
mov esi, dword [edx + 0x155c]
mov edx, dword [edx + 0x1558]
mov dword [esp + 0x2e0], ecx
mov ecx, dword [esp + 0x2d8]
mov dword [esp + 0x2d0], eax
mov eax, dword [ebp]
add ecx, dword [esp + 0x2dc]
mov eax, dword [eax + 0x298]
mov dword [esp + 0x2d4], ecx
mov ecx, dword [ebp + 0xa8]
mov dword [esp + 0x2c0], eax
mov eax, dword [ebp + 0xa4]
mov dword [esp + 0x254], ecx
movzx ecx, byte [esp + 0x60]
sar dword [esp + 0x254], cl
sar eax, cl
movzx ecx, byte [esp + 0x2c0]
mov dword [esp + 0x258], eax
mov eax, dword [esp + 0x488]
shl ebx, cl
mov eax, dword [eax]
sub ebx, 1
mov dword [esp + 0x2f8], eax
mov eax, dword [ebp + 0x1ffc]
test eax, eax
je 0x849f92
mov eax, edx
shr eax, 0x1f
lea edx, [eax + edx]
mov eax, esi
shr eax, 0x1f
lea esi, [eax + esi]
sar edx, 1
sar esi, 1
mov eax, esi
mov ecx, dword [esp + 0x2c0]
mov edi, edx
and eax, ebx
mov dword [esp + 0x25c], eax
mov eax, dword [esp + 0x318]
add ecx, 1
sar esi, cl
sar edi, cl
lea ecx, [esi + eax]
mov eax, dword [esp + 0x2d0]
add edi, dword [esp + 0x320]
mov esi, dword [esp + 0x2f8]
imul eax, ecx
add eax, edi
add esi, eax
and ebx, edx
mov edx, dword [esp + 0x258]
setne al
movzx eax, al
sub edx, eax
mov eax, edx
sub eax, dword [esp + 0x64]
cmp edi, eax
ja 0x84a00e
xor eax, eax
mov edx, dword [esp + 0x254]
cmp dword [esp + 0x25c], 0
setne al
sub edx, eax
mov eax, edx
sub eax, dword [esp + 0x64]
cmp ecx, eax
jbe 0x84a05e
mov edx, dword [esp + 0x254]
mov eax, dword [esp + 0x64]
mov dword [esp + 0x18], ecx
mov ecx, dword [esp + 0x2d0]
mov dword [esp + 4], esi
mov dword [esp + 0x20], edx
mov edx, dword [esp + 0x258]
add eax, 1
mov dword [esp + 0x14], edi
mov dword [esp + 0x10], eax
mov dword [esp + 0x1c], edx
mov dword [esp + 0xc], eax
mov dword [esp + 8], ecx
mov eax, dword [ebp + 0x7f8]
mov dword [esp], eax
call fcn.00848470
mov esi, dword [ebp + 0x7f8]
mov edi, 2
mov edx, dword [esp + 0x64]
mov ecx, edi
sub ecx, dword [esp + 0x2c0]
shl dword [esp + 0x25c], cl
mov eax, dword [esp + 0x25c]
shl ebx, cl
mov ecx, dword [esp + 0x2d0]
mov dword [esp + 0x10], ebx
mov ebx, dword [esp + 0x2c0]
mov dword [esp + 0xc], edx
mov dword [esp + 0x14], eax
mov eax, ecx
add eax, 1
imul eax, edx
add eax, dword [esp + 0x40]
mov dword [esp + 8], ecx
mov dword [esp + 4], esi
mov dword [esp], eax
mov eax, dword [esp + 0x48c]
call dword [eax + ebx*4]
mov edx, dword [esp + 0x2e0]
shl dword [esp + 0x484], 5
mov eax, dword [esp + 0x484]
mov ecx, dword [ebp + 0x38]
mov ebx, dword [esp + 0x2d4]
add eax, ebp
add edx, dword [eax + 0x1558]
add ebx, dword [eax + 0x155c]
mov dword [esp + 0x48], ecx
and ch, 0x20
jne case.default.0x848715
mov eax, dword [ebp]
mov dword [esp + 0x278], 8
mov eax, dword [eax + 0x298]
mov ecx, eax
mov esi, eax
mov dword [esp + 0x27c], eax
mov eax, dword [ebp + 0xa4]
add esi, 1
shl edi, cl
sar dword [esp + 0x278], cl
mov ecx, esi
sub edi, 1
sar eax, cl
mov dword [esp + 0x274], eax
mov eax, dword [ebp + 0xa8]
sar eax, cl
mov dword [esp + 0x270], eax
mov eax, dword [ebp + 0x1ffc]
test eax, eax
je 0x84a162
mov eax, edx
shr eax, 0x1f
lea edx, [eax + edx]
mov eax, ebx
shr eax, 0x1f
lea ebx, [eax + ebx]
sar edx, 1
sar ebx, 1
mov eax, edx
and eax, 0xf
movzx ecx, byte [eax + 0xbaa6a0]
sar edx, 3
mov eax, ebx
and eax, 0xf
sar ebx, 3
add ecx, edx
movzx edx, byte [eax + 0xbaa6a0]
mov dword [esp + 0x28], ecx
mov eax, dword [esp + 0x278]
and ecx, edi
imul eax, dword [ebp + 0x1814]
mov dword [esp + 0x264], ecx
mov ecx, esi
sar dword [esp + 0x28], cl
add edx, ebx
add eax, dword [esp + 0x28]
and edi, edx
sar edx, cl
mov dword [esp + 0x260], edi
mov dword [esp + 0x268], eax
mov eax, dword [esp + 0x278]
imul eax, dword [ebp + 0x1818]
lea edi, [edx + eax]
mov edx, dword [ebp + 0xb4]
mov eax, edi
imul eax, edx
add eax, dword [esp + 0x268]
mov ebx, eax
mov dword [esp + 0x284], eax
mov eax, dword [esp + 0x488]
add ebx, dword [eax + 4]
test dword [esp + 0x48], 0x4000
je 0x84b22c
xor eax, eax
mov ecx, dword [esp + 0x274]
cmp dword [esp + 0x264], 0
setne al
sub ecx, eax
mov eax, ecx
sub eax, dword [esp + 0x278]
cmp dword [esp + 0x268], eax
ja 0x84a24e
xor eax, eax
mov ecx, dword [esp + 0x270]
cmp dword [esp + 0x260], 0
setne al
sub ecx, eax
mov eax, ecx
sub eax, dword [esp + 0x278]
cmp edi, eax
jbe 0x84b22c
mov eax, dword [esp + 0x270]
mov ecx, dword [esp + 0x274]
mov dword [esp + 8], edx
mov dword [esp + 4], ebx
mov dword [esp + 0x20], eax
mov eax, dword [esp + 0x268]
mov dword [esp + 0x1c], ecx
mov dword [esp + 0x18], edi
mov dword [esp + 0x10], 9
mov dword [esp + 0x14], eax
mov dword [esp + 0xc], 9
mov eax, dword [ebp + 0x7f8]
mov dword [esp], eax
call fcn.00848470
mov ebx, dword [ebp + 0x7f8]
mov edx, dword [ebp + 0xb4]
mov dword [esp + 0x26c], 1
jmp 0x84b237
mov ebx, dword [esp + 0x484]
mov edx, dword [esp + 0x64]
mov ecx, dword [esp + 0x48c]
mov ebx, dword [ebp + ebx*8 + 0x1580]
add edx, edx
sub ecx, 4
mov dword [esp + 0x288], edx
mov eax, ebx
add eax, 1
cmp dword [ebp + 0x2134], eax
mov dword [esp + 0x290], ecx
mov dword [esp + 0x3a0], ebx
je 0x84a30c
cmp dword [ebp + 0x824], 3
je 0x84a30c
mov eax, dword [ebp + 0x217c]
test eax, eax
je 0x84b3ae
mov edx, dword [esp + 0x488]
mov dword [esp + 0x39c], edx
mov eax, dword [esp + 0x484]
movzx ecx, byte [esp + 0x60]
mov edx, dword [ebp + 0x5cc]
shl eax, 5
add eax, ebp
mov ebx, dword [eax + 0x1544]
mov eax, dword [eax + 0x1540]
mov dword [esp + 0x38c], edx
mov dword [esp + 0x28], eax
mov eax, 2
shl eax, cl
lea edi, [eax - 1]
mov eax, dword [ebp + 0xa4]
sar eax, cl
mov dword [esp + 0x398], eax
mov eax, dword [ebp + 0xa8]
sar eax, cl
mov dword [esp + 0x394], eax
mov eax, dword [ebp + 0x5c8]
mov dword [esp + 0x390], eax
mov eax, dword [ebp + 0x1ffc]
test eax, eax
je 0x84a3a0
mov eax, dword [esp + 0x28]
shr eax, 0x1f
add dword [esp + 0x28], eax
mov eax, ebx
sar dword [esp + 0x28], 1
shr eax, 0x1f
lea ebx, [eax + ebx]
sar ebx, 1
mov eax, ebx
mov ecx, dword [esp + 0x28]
and eax, edi
mov esi, dword [esp + 0x60]
mov dword [esp + 0x360], eax
mov eax, dword [esp + 0x54]
mov edx, dword [esp + 0x28]
and ecx, edi
add esi, 1
add eax, eax
imul eax, dword [esp + 0x64]
mov dword [esp + 0x364], ecx
mov ecx, esi
sar edx, cl
add edx, eax
mov eax, dword [esp + 0x58]
mov dword [esp + 0x388], edx
mov edx, ebx
sar edx, cl
add eax, eax
imul eax, dword [esp + 0x64]
add edx, eax
mov eax, dword [ebp + 0x18]
mov dword [esp + 0x384], edx
cmp eax, 2
je 0x84b42d
sub eax, 1
je 0x84bd70
mov eax, dword [esp + 0x28]
mov edx, ebx
shr edx, 0x1f
add edx, ebx
sar edx, 1
shr eax, 0x1f
add eax, dword [esp + 0x28]
sar eax, 1
mov ebx, eax
sar eax, cl
mov ecx, dword [esp + 0x64]
and ebx, edi
imul ecx, dword [esp + 0x54]
and edi, edx
mov dword [esp + 0x35c], ebx
mov dword [esp + 0x358], edi
add eax, ecx
mov ecx, esi
mov dword [esp + 0x380], eax
mov eax, dword [esp + 0x64]
sar edx, cl
imul eax, dword [esp + 0x58]
add edx, eax
mov dword [esp + 0x37c], edx
mov edx, dword [esp + 0x39c]
mov eax, dword [esp + 0x384]
imul eax, dword [esp + 0x390]
mov ecx, dword [esp + 0x39c]
add eax, dword [edx]
add eax, dword [esp + 0x388]
mov ebx, dword [esp + 0x398]
mov dword [esp + 0x378], eax
mov eax, dword [esp + 0x37c]
imul eax, dword [esp + 0x38c]
mov edx, eax
add eax, dword [ecx + 8]
add eax, dword [esp + 0x380]
add edx, dword [ecx + 4]
add edx, dword [esp + 0x380]
mov dword [esp + 0x36c], eax
xor eax, eax
cmp dword [esp + 0x364], 0
mov dword [esp + 0x374], edx
setne al
sub ebx, eax
mov eax, ebx
sub eax, dword [esp + 0x288]
cmp dword [esp + 0x388], eax
ja 0x84a509
xor eax, eax
mov ecx, dword [esp + 0x394]
cmp dword [esp + 0x360], 0
setne al
sub ecx, eax
mov eax, ecx
sub eax, dword [esp + 0x64]
cmp dword [esp + 0x384], eax
jbe 0x84a57f
mov eax, dword [esp + 0x394]
mov edx, dword [esp + 0x398]
mov ecx, dword [esp + 0x384]
mov ebx, dword [esp + 0x388]
mov dword [esp + 0x20], eax
mov dword [esp + 0x1c], edx
mov dword [esp + 0x18], ecx
mov dword [esp + 0x14], ebx
mov dword [esp + 0x10], 0x11
mov dword [esp + 0xc], 0x11
mov eax, dword [ebp + 0xb0]
mov dword [esp + 8], eax
mov eax, dword [esp + 0x378]
mov dword [esp + 4], eax
mov eax, dword [ebp + 0x7f8]
mov dword [esp], eax
call fcn.00848470
mov edx, dword [ebp + 0x7f8]
test byte [ebp + 0x39], 0x20
mov dword [esp + 0x378], edx
je 0x84c0a4
mov eax, dword [esp + 0x3a0]
test eax, eax
je 0x84a5ab
mov eax, dword [ebp + 0xb4]
mov ebx, dword [ebp + 0xb0]
add dword [esp + 0x378], ebx
add dword [esp + 0x374], eax
add dword [esp + 0x36c], eax
mov ebx, 2
mov edi, dword [esp + 0x60]
sub ebx, dword [esp + 0x60]
mov ecx, ebx
shl dword [esp + 0x360], cl
mov eax, dword [esp + 0x360]
shl edi, 2
shl dword [esp + 0x364], cl
mov edx, dword [esp + 0x364]
mov ecx, dword [esp + 0x64]
mov dword [esp + 0x14], eax
mov eax, dword [esp + 0x390]
mov dword [esp + 0x10], edx
mov edx, dword [esp + 0x378]
mov dword [esp + 0xc], ecx
mov ecx, dword [esp + 0x40]
mov dword [esp + 8], eax
mov eax, dword [esp + 0x290]
mov dword [esp + 4], edx
mov dword [esp], ecx
call dword [eax + edi]
test byte [ebp + 0x39], 0x20
je 0x84b30c
mov eax, dword [ebp + 0xb0]
mov ecx, dword [ebp + 0x2164]
mov edx, dword [esp + 0x3c]
mov ebx, dword [ebp + 0x1818]
mov dword [esp + 0x44], eax
mov eax, dword [esp + 0x288]
imul eax, dword [esp + 0x44]
add eax, dword [esp + 0x40]
mov dword [esp + 0x340], ebx
mov dword [esp + 0x354], eax
mov eax, dword [esp + 0x288]
sar eax, cl
mov ecx, dword [ebp + 0x1814]
imul eax, dword [ebp + 0xb4]
mov dword [esp + 0x33c], ecx
add edx, eax
add eax, dword [esp + 0x480]
mov dword [esp + 0x350], edx
mov dword [esp + 0x348], eax
mov eax, dword [ebp]
mov eax, dword [eax + 0x298]
mov dword [esp + 0x28c], eax
mov eax, dword [esp + 0x484]
mov eax, dword [ebp + eax*8 + 0x1584]
mov dword [esp + 0x50], eax
add eax, 1
cmp dword [ebp + 0x2134], eax
je 0x84a6ca
cmp dword [ebp + 0x824], 3
je 0x84a6ca
mov edi, dword [ebp + 0x217c]
test edi, edi
je 0x84b39f
mov ecx, dword [esp + 0x488]
mov dword [esp + 0x68], ecx
shl dword [esp + 0x484], 5
mov eax, dword [esp + 0x484]
mov ebx, dword [esp + 0x288]
movzx ecx, byte [esp + 0x28c]
mov esi, dword [ebp + 0x1ffc]
add eax, ebp
mov edx, dword [ebp + 0x5cc]
add ebx, dword [eax + 0x154c]
mov eax, dword [eax + 0x1548]
mov dword [esp + 0x19c], 8
sar dword [esp + 0x19c], cl
mov dword [esp + 0x28], eax
mov eax, 2
shl eax, cl
lea edi, [eax - 1]
mov eax, dword [ebp + 0xa4]
mov dword [esp + 0x1cc], edx
sar eax, cl
mov dword [esp + 0x198], eax
mov eax, dword [ebp + 0xa8]
sar eax, cl
test esi, esi
mov dword [esp + 0x194], eax
mov eax, dword [ebp + 0x5c8]
mov dword [esp + 0x1d0], eax
je 0x84a77c
mov eax, dword [esp + 0x28]
shr eax, 0x1f
add dword [esp + 0x28], eax
mov eax, ebx
sar dword [esp + 0x28], 1
shr eax, 0x1f
lea ebx, [eax + ebx]
sar ebx, 1
mov eax, ebx
mov ecx, dword [esp + 0x28]
and eax, edi
mov esi, dword [esp + 0x28c]
mov dword [esp + 0x1a8], eax
mov eax, dword [esp + 0x33c]
mov edx, dword [esp + 0x28]
and ecx, edi
add esi, 1
add eax, eax
imul eax, dword [esp + 0x19c]
mov dword [esp + 0x1ac], ecx
mov ecx, esi
sar edx, cl
add edx, eax
mov eax, dword [esp + 0x340]
mov dword [esp + 0x1bc], edx
mov edx, ebx
sar edx, cl
add eax, eax
imul eax, dword [esp + 0x19c]
add edx, eax
mov eax, dword [ebp + 0x18]
mov dword [esp + 0x1b8], edx
cmp eax, 2
je 0x84b3d2
sub eax, 1
je 0x84beea
mov eax, dword [esp + 0x28]
mov edx, ebx
mov ecx, esi
shr edx, 0x1f
add edx, ebx
sar edx, 1
shr eax, 0x1f
add eax, dword [esp + 0x28]
sar eax, 1
mov ebx, eax
sar eax, cl
mov ecx, dword [esp + 0x19c]
and ebx, edi
imul ecx, dword [esp + 0x33c]
and edi, edx
mov dword [esp + 0x1a4], ebx
mov dword [esp + 0x1a0], edi
add eax, ecx
mov ecx, esi
mov dword [esp + 0x1b4], eax
mov eax, dword [esp + 0x19c]
sar edx, cl
imul eax, dword [esp + 0x340]
add edx, eax
mov dword [esp + 0x1b0], edx
mov ebx, dword [esp + 0x68]
mov eax, dword [esp + 0x1b8]
imul eax, dword [esp + 0x1d0]
add eax, dword [ebx]
add eax, dword [esp + 0x1bc]
mov dword [esp + 0x1c8], eax
mov eax, dword [esp + 0x1b0]
imul eax, dword [esp + 0x1cc]
mov edx, eax
add eax, dword [ebx + 8]
add edx, dword [ebx + 4]
add eax, dword [esp + 0x1b4]
add edx, dword [esp + 0x1b4]
mov dword [esp + 0x1c0], eax
xor eax, eax
mov dword [esp + 0x1c4], edx
mov edx, dword [esp + 0x198]
cmp dword [esp + 0x1ac], 0
setne al
sub edx, eax
mov eax, edx
mov edx, dword [esp + 0x19c]
add edx, edx
sub eax, edx
cmp dword [esp + 0x1bc], eax
ja 0x84a8fc
xor eax, eax
mov ecx, dword [esp + 0x194]
cmp dword [esp + 0x1a8], 0
setne al
sub ecx, eax
mov eax, ecx
sub eax, dword [esp + 0x64]
cmp dword [esp + 0x1b8], eax
jbe 0x84a970
mov ebx, dword [esp + 0x194]
mov eax, dword [esp + 0x198]
mov edx, dword [esp + 0x1b8]
mov ecx, dword [esp + 0x1bc]
mov dword [esp + 0x20], ebx
mov ebx, dword [esp + 0x44]
mov dword [esp + 0x1c], eax
mov eax, dword [esp + 0x1c8]
mov dword [esp + 0x18], edx
mov dword [esp + 0x14], ecx
mov dword [esp + 0x10], 0x11
mov dword [esp + 0xc], 0x11
mov dword [esp + 8], ebx
mov dword [esp + 4], eax
mov eax, dword [ebp + 0x7f8]
mov dword [esp], eax
call fcn.00848470
mov edx, dword [ebp + 0x7f8]
test byte [ebp + 0x39], 0x20
mov dword [esp + 0x1c8], edx
je 0x84bfc5
mov ebx, dword [esp + 0x50]
test ebx, ebx
je 0x84a999
mov eax, dword [ebp + 0xb4]
mov ecx, dword [ebp + 0xb0]
add dword [esp + 0x1c8], ecx
add dword [esp + 0x1c4], eax
add dword [esp + 0x1c0], eax
mov ebx, 2
mov edi, dword [esp + 0x28c]
sub ebx, dword [esp + 0x28c]
mov ecx, ebx
shl dword [esp + 0x1a8], cl
mov eax, dword [esp + 0x1a8]
shl edi, 2
shl dword [esp + 0x1ac], cl
mov edx, dword [esp + 0x1ac]
mov ecx, dword [esp + 0x64]
mov dword [esp + 0x14], eax
mov eax, dword [esp + 0x1d0]
mov dword [esp + 0x10], edx
mov edx, dword [esp + 0x1c8]
mov dword [esp + 0xc], ecx
mov ecx, dword [esp + 0x354]
mov dword [esp + 8], eax
mov eax, dword [esp + 0x290]
mov dword [esp + 4], edx
mov dword [esp], ecx
call dword [eax + edi]
test byte [ebp + 0x39], 0x20
jne case.default.0x848715
mov esi, dword [esp + 0x1a4]
mov ecx, ebx
mov eax, dword [esp + 0x1a0]
mov edx, dword [esp + 0x1cc]
add edi, dword [esp + 0x48c]
shl esi, cl
shl eax, cl
mov dword [esp + 0x14], eax
mov ebx, eax
mov eax, dword [esp + 0x64]
mov dword [esp + 0x10], esi
mov ecx, dword [ebp + 0x2164]
mov dword [esp + 8], edx
sar eax, cl
mov ecx, dword [esp + 0x1c4]
mov dword [esp + 0xc], eax
mov eax, dword [esp + 0x350]
mov dword [esp + 4], ecx
mov dword [esp], eax
call dword [edi]
mov eax, dword [esp + 0x64]
mov dword [esp + 0x14], ebx
mov edx, dword [esp + 0x1cc]
mov dword [esp + 0x10], esi
mov ecx, dword [ebp + 0x2164]
mov ebx, dword [esp + 0x348]
mov dword [esp + 8], edx
sar eax, cl
mov ecx, dword [esp + 0x1c0]
mov dword [esp + 0xc], eax
mov dword [esp], ebx
mov dword [esp + 4], ecx
call dword [edi]
jmp case.default.0x848715
mov edx, dword [ebp + 0x2134]
cmp edx, 3
je 0x84871c
mov ecx, dword [esp + 0x484]
mov ecx, dword [ebp + ecx*8 + 0x1580]
mov eax, ecx
add eax, 1
cmp edx, eax
mov dword [esp + 0x4c], ecx
je 0x84aae8
cmp dword [ebp + 0x824], 3
je 0x84aae8
mov eax, dword [ebp + 0x217c]
test eax, eax
je 0x84b3c0
mov eax, dword [esp + 0x64]
shl dword [esp + 0x484], 5
movzx ecx, byte [esp + 0x60]
mov edx, dword [ebp + 0x5cc]
add eax, eax
mov dword [esp + 0x154], eax
mov eax, dword [esp + 0x484]
mov dword [esp + 0x18c], edx
add eax, ebp
mov ebx, dword [eax + 0x1544]
mov eax, dword [eax + 0x1540]
mov dword [esp + 0x28], eax
mov eax, 2
shl eax, cl
lea edi, [eax - 1]
mov eax, dword [ebp + 0xa4]
sar eax, cl
mov dword [esp + 0x15c], eax
mov eax, dword [ebp + 0xa8]
sar eax, cl
mov dword [esp + 0x158], eax
mov eax, dword [ebp + 0x5c8]
mov dword [esp + 0x190], eax
mov eax, dword [ebp + 0x1ffc]
test eax, eax
je 0x84ab80
mov eax, dword [esp + 0x28]
shr eax, 0x1f
add dword [esp + 0x28], eax
mov eax, ebx
sar dword [esp + 0x28], 1
shr eax, 0x1f
lea ebx, [eax + ebx]
sar ebx, 1
mov eax, ebx
mov ecx, dword [esp + 0x28]
and eax, edi
mov esi, dword [esp + 0x60]
mov dword [esp + 0x168], eax
mov eax, dword [esp + 0x54]
mov edx, dword [esp + 0x28]
and ecx, edi
add esi, 1
add eax, eax
imul eax, dword [esp + 0x64]
mov dword [esp + 0x16c], ecx
mov ecx, esi
sar edx, cl
add edx, eax
mov eax, dword [esp + 0x58]
mov dword [esp + 0x17c], edx
mov edx, ebx
sar edx, cl
add eax, eax
imul eax, dword [esp + 0x64]
add edx, eax
mov eax, dword [ebp + 0x18]
mov dword [esp + 0x178], edx
cmp eax, 2
je 0x84be8f
sub eax, 1
je 0x84c43b
mov eax, dword [esp + 0x28]
mov edx, ebx
mov ecx, esi
shr edx, 0x1f
add edx, ebx
sar edx, 1
shr eax, 0x1f
add eax, dword [esp + 0x28]
sar eax, 1
mov ebx, eax
sar eax, cl
mov ecx, dword [esp + 0x64]
and ebx, edi
imul ecx, dword [esp + 0x54]
and edi, edx
mov dword [esp + 0x164], ebx
mov dword [esp + 0x160], edi
add eax, ecx
mov ecx, esi
mov dword [esp + 0x174], eax
mov eax, dword [esp + 0x64]
sar edx, cl
imul eax, dword [esp + 0x58]
add edx, eax
mov dword [esp + 0x170], edx
mov ebx, dword [esp + 0x488]
mov eax, dword [esp + 0x178]
imul eax, dword [esp + 0x190]
add eax, dword [ebx]
add eax, dword [esp + 0x17c]
mov dword [esp + 0x188], eax
mov eax, dword [esp + 0x170]
imul eax, dword [esp + 0x18c]
mov edx, eax
add eax, dword [ebx + 8]
add edx, dword [ebx + 4]
add eax, dword [esp + 0x174]
add edx, dword [esp + 0x174]
mov dword [esp + 0x180], eax
xor eax, eax
mov dword [esp + 0x184], edx
mov edx, dword [esp + 0x15c]
cmp dword [esp + 0x16c], 0
setne al
sub edx, eax
mov eax, edx
sub eax, dword [esp + 0x154]
cmp dword [esp + 0x17c], eax
ja 0x84b0d7
xor eax, eax
mov ecx, dword [esp + 0x158]
cmp dword [esp + 0x168], 0
setne al
sub ecx, eax
mov eax, ecx
sub eax, dword [esp + 0x154]
cmp dword [esp + 0x178], eax
ja 0x84b0d7
mov eax, dword [esp + 0x4c]
test eax, eax
je 0x84ad18
mov eax, dword [ebp + 0xb0]
add dword [esp + 0x188], eax
mov eax, dword [ebp + 0xb4]
add dword [esp + 0x184], eax
add dword [esp + 0x180], eax
mov ebx, 2
mov edi, dword [esp + 0x60]
sub ebx, dword [esp + 0x60]
mov ecx, ebx
shl dword [esp + 0x168], cl
mov eax, dword [esp + 0x168]
shl edi, 2
shl dword [esp + 0x16c], cl
mov edx, dword [esp + 0x16c]
mov ecx, dword [esp + 0x154]
mov dword [esp + 0x14], eax
mov eax, dword [esp + 0x190]
mov dword [esp + 0x10], edx
mov edx, dword [esp + 0x188]
mov dword [esp + 0xc], ecx
mov ecx, dword [esp + 0x40]
mov dword [esp + 8], eax
mov eax, dword [esp + 0x48c]
mov dword [esp + 4], edx
mov dword [esp], ecx
call dword [edi + eax - 4]
test byte [ebp + 0x39], 0x20
jne case.default.0x848715
mov esi, dword [esp + 0x164]
mov ecx, ebx
mov eax, dword [esp + 0x160]
mov edx, dword [esp + 0x18c]
add edi, dword [esp + 0x48c]
shl esi, cl
shl eax, cl
mov dword [esp + 0x14], eax
mov ebx, eax
mov eax, dword [esp + 0x154]
mov dword [esp + 0x10], esi
mov ecx, dword [ebp + 0x2164]
mov dword [esp + 8], edx
sar eax, cl
mov ecx, dword [esp + 0x184]
mov dword [esp + 0xc], eax
mov eax, dword [esp + 0x3c]
mov dword [esp + 4], ecx
mov dword [esp], eax
call dword [edi]
mov eax, dword [esp + 0x480]
mov dword [esp + 0x14], ebx
mov ebx, dword [esp + 0x180]
mov dword [esp + 0x10], esi
mov ecx, dword [ebp + 0x2164]
sar dword [esp + 0x154], cl
mov edx, dword [esp + 0x154]
mov ecx, dword [esp + 0x18c]
mov dword [esp + 4], ebx
mov dword [esp], eax
mov dword [esp + 0xc], edx
mov dword [esp + 8], ecx
call dword [edi]
jmp case.default.0x848715
mov ecx, dword [esp + 0x3f8]
mov ebx, dword [esp + 0x3fc]
mov eax, dword [esp + 0x3e8]
mov edx, dword [esp + 0x3ec]
mov dword [esp + 0x20], ecx
mov ecx, dword [esp + 0x248]
mov dword [esp + 0x1c], ebx
mov dword [esp + 0x18], eax
mov dword [esp + 0x14], edx
mov dword [esp + 0x10], 0x11
mov dword [esp + 0xc], 0x11
mov eax, dword [ebp + 0xb0]
mov dword [esp + 4], ecx
mov dword [esp + 8], eax
mov eax, dword [ebp + 0x7f8]
mov dword [esp], eax
call fcn.00848470
mov ebx, dword [ebp + 0x7f8]
test byte [ebp + 0x39], 0x20
mov dword [esp + 0x248], ebx
jne 0x84942d
mov eax, ebx
mov edi, dword [esp + 0x3f8]
mov ebx, dword [ebp + 0xb0]
mov esi, dword [esp + 0x3fc]
mov edx, dword [esp + 0x230]
mov ecx, dword [esp + 0x234]
sar edi, 1
lea ebx, [ebx + ebx*8]
sar esi, 1
lea ebx, [eax + ebx*2]
mov dword [esp + 0x18], edx
mov dword [esp + 0x14], ecx
mov dword [esp + 0x20], edi
mov dword [esp + 0x1c], esi
mov dword [esp + 0x10], 9
mov dword [esp + 0xc], 9
mov eax, dword [ebp + 0xb4]
mov dword [esp], ebx
mov dword [esp + 8], eax
mov eax, dword [esp + 0x244]
mov dword [esp + 4], eax
call fcn.00848470
mov ecx, dword [esp + 0x230]
lea edx, [ebx + 0x10]
mov eax, dword [esp + 0x234]
mov dword [esp + 0x3e0], edx
mov edx, dword [esp + 0x240]
mov dword [esp + 0x20], edi
mov dword [esp + 0x18], ecx
mov ecx, dword [esp + 0x3e0]
mov dword [esp + 0x1c], esi
mov dword [esp + 0x14], eax
mov dword [esp + 0x10], 9
mov dword [esp + 0xc], 9
mov eax, dword [ebp + 0xb4]
mov dword [esp + 4], edx
mov dword [esp], ecx
mov dword [esp + 8], eax
call fcn.00848470
mov dword [esp + 0x244], ebx
mov ebx, dword [esp + 0x3e0]
mov dword [esp + 0x240], ebx
jmp 0x84942d
mov ecx, dword [esp + 0x21c]
mov ebx, dword [esp + 0x220]
mov eax, dword [esp + 0x238]
mov edx, dword [esp + 0x23c]
mov dword [esp + 0x20], ecx
mov ecx, dword [esp + 0x460]
mov dword [esp + 0x1c], ebx
mov dword [esp + 0x18], eax
mov dword [esp + 0x14], edx
mov dword [esp + 0x10], 0x11
mov dword [esp + 0xc], 0x11
mov eax, dword [ebp + 0xb0]
mov dword [esp + 4], ecx
mov dword [esp + 8], eax
mov eax, dword [ebp + 0x7f8]
mov dword [esp], eax
call fcn.00848470
mov ebx, dword [ebp + 0x7f8]
test byte [ebp + 0x39], 0x20
mov dword [esp + 0x460], ebx
jne 0x8490f8
mov eax, ebx
mov edi, dword [esp + 0x21c]
mov ebx, dword [ebp + 0xb0]
mov esi, dword [esp + 0x220]
mov edx, dword [esp + 0x450]
mov ecx, dword [esp + 0x454]
sar edi, 1
lea ebx, [ebx + ebx*8]
sar esi, 1
lea ebx, [eax + ebx*2]
mov dword [esp + 0x18], edx
mov dword [esp + 0x14], ecx
mov dword [esp + 0x20], edi
mov dword [esp + 0x1c], esi
mov dword [esp + 0x10], 9
mov dword [esp + 0xc], 9
mov eax, dword [ebp + 0xb4]
mov dword [esp], ebx
mov dword [esp + 8], eax
mov eax, dword [esp + 0x3e4]
mov dword [esp + 4], eax
call fcn.00848470
mov ecx, dword [esp + 0x450]
lea edx, [ebx + 0x10]
mov eax, dword [esp + 0x454]
mov dword [esp + 0x3dc], edx
mov edx, dword [esp + 0x3d8]
mov dword [esp + 0x20], edi
mov dword [esp + 0x18], ecx
mov ecx, dword [esp + 0x3dc]
mov dword [esp + 0x1c], esi
mov dword [esp + 0x14], eax
mov dword [esp + 0x10], 9
mov dword [esp + 0xc], 9
mov eax, dword [ebp + 0xb4]
mov dword [esp + 4], edx
mov dword [esp], ecx
mov dword [esp + 8], eax
call fcn.00848470
mov dword [esp + 0x3e4], ebx
mov ebx, dword [esp + 0x3dc]
mov dword [esp + 0x3d8], ebx
jmp 0x8490f8
mov ebx, dword [esp + 0x158]
mov eax, dword [esp + 0x15c]
mov edx, dword [esp + 0x178]
mov ecx, dword [esp + 0x17c]
mov dword [esp + 0x20], ebx
mov ebx, dword [esp + 0x188]
mov dword [esp + 0x1c], eax
mov dword [esp + 0x18], edx
mov dword [esp + 0x14], ecx
mov dword [esp + 0x10], 0x11
mov dword [esp + 0xc], 0x11
mov eax, dword [ebp + 0xb0]
mov dword [esp + 4], ebx
mov dword [esp + 8], eax
mov eax, dword [ebp + 0x7f8]
mov dword [esp], eax
call fcn.00848470
mov eax, dword [ebp + 0x7f8]
test byte [ebp + 0x39], 0x20
mov dword [esp + 0x188], eax
jne 0x84acef
mov ebx, dword [ebp + 0xb0]
mov edi, dword [esp + 0x158]
mov esi, dword [esp + 0x15c]
mov edx, dword [esp + 0x170]
mov ecx, dword [esp + 0x174]
lea ebx, [ebx + ebx*8]
sar edi, 1
sar esi, 1
lea ebx, [eax + ebx*2]
mov dword [esp + 0x18], edx
mov dword [esp + 0x14], ecx
mov dword [esp + 0x20], edi
mov dword [esp + 0x1c], esi
mov dword [esp + 0x10], 9
mov dword [esp + 0xc], 9
mov eax, dword [ebp + 0xb4]
mov dword [esp], ebx
mov dword [esp + 8], eax
mov eax, dword [esp + 0x184]
mov dword [esp + 4], eax
call fcn.00848470
mov ecx, dword [esp + 0x170]
lea edx, [ebx + 0x10]
mov eax, dword [esp + 0x174]
mov dword [esp + 0x430], edx
mov edx, dword [esp + 0x180]
mov dword [esp + 0x20], edi
mov dword [esp + 0x18], ecx
mov ecx, dword [esp + 0x430]
mov dword [esp + 0x1c], esi
mov dword [esp + 0x14], eax
mov dword [esp + 0x10], 9
mov dword [esp + 0xc], 9
mov eax, dword [ebp + 0xb4]
mov dword [esp + 4], edx
mov dword [esp], ecx
mov dword [esp + 8], eax
call fcn.00848470
mov dword [esp + 0x184], ebx
mov ebx, dword [esp + 0x430]
mov dword [esp + 0x180], ebx
jmp 0x84acef
mov dword [esp + 0x26c], 0
mov eax, dword [esp + 0x264]
mov ecx, 2
mov esi, dword [esp + 0x260]
sub ecx, dword [esp + 0x27c]
mov dword [esp + 4], ebx
mov ebx, dword [esp + 0x3c]
mov dword [esp + 8], edx
shl eax, cl
mov dword [esp + 0x44c], eax
shl esi, cl
mov eax, dword [esp + 0x48c]
mov ecx, dword [esp + 0x27c]
mov dword [esp + 0x14], esi
mov dword [esp], ebx
lea ecx, [eax + ecx*4]
mov eax, dword [esp + 0x44c]
mov dword [esp + 0x280], ecx
mov ecx, dword [esp + 0x278]
mov dword [esp + 0x10], eax
mov eax, dword [esp + 0x280]
mov dword [esp + 0xc], ecx
call dword [eax]
mov ecx, dword [esp + 0x488]
mov eax, dword [esp + 0x26c]
mov edx, dword [esp + 0x284]
add edx, dword [ecx + 8]
test eax, eax
jne 0x84bf69
mov ebx, dword [esp + 0x44c]
mov eax, dword [esp + 0x278]
mov dword [esp + 0x14], esi
mov ecx, dword [esp + 0x280]
mov dword [esp + 0x10], ebx
mov dword [esp + 0xc], eax
mov eax, dword [ebp + 0xb4]
mov dword [esp + 4], edx
mov edx, dword [esp + 0x480]
mov dword [esp + 8], eax
mov dword [esp], edx
call dword [ecx]
add esp, 0x46c
pop ebx
pop esi
pop edi
pop ebp
ret
mov esi, dword [esp + 0x35c]
mov ecx, ebx
mov eax, dword [esp + 0x358]
mov edx, dword [esp + 0x38c]
add edi, dword [esp + 0x48c]
shl esi, cl
shl eax, cl
mov dword [esp + 0x14], eax
mov ebx, eax
mov eax, dword [esp + 0x64]
mov dword [esp + 0x10], esi
mov ecx, dword [ebp + 0x2164]
mov dword [esp + 8], edx
sar eax, cl
mov ecx, dword [esp + 0x374]
mov dword [esp + 0xc], eax
mov eax, dword [esp + 0x3c]
mov dword [esp + 4], ecx
mov dword [esp], eax
call dword [edi]
mov eax, dword [esp + 0x64]
mov dword [esp + 0x14], ebx
mov edx, dword [esp + 0x38c]
mov dword [esp + 0x10], esi
mov ecx, dword [ebp + 0x2164]
mov ebx, dword [esp + 0x480]
mov dword [esp + 8], edx
sar eax, cl
mov ecx, dword [esp + 0x36c]
mov dword [esp + 0xc], eax
mov dword [esp], ebx
mov dword [esp + 4], ecx
call dword [edi]
jmp 0x84a61a
mov edx, dword [ebp + 0x758]
mov dword [esp + 0x68], edx
jmp 0x84a6d5
mov eax, dword [ebp + 0x758]
mov dword [esp + 0x39c], eax
jmp 0x84a31a
mov ebx, dword [ebp + 0x758]
mov dword [esp + 0x488], ebx
jmp 0x84aae8
sar dword [esp + 0x28], 1
mov eax, dword [esp + 0x1ac]
sar ebx, 1
and dword [esp + 0x28], edi
and ebx, edi
mov edx, dword [esp + 0x28]
mov ecx, dword [esp + 0x1a8]
and eax, 1
or eax, edx
and ecx, 1
or ecx, ebx
mov ebx, dword [esp + 0x1bc]
mov dword [esp + 0x1a4], eax
mov eax, dword [esp + 0x1b8]
mov dword [esp + 0x1a0], ecx
sar ebx, 1
sar eax, 1
mov dword [esp + 0x1b4], ebx
mov dword [esp + 0x1b0], eax
jmp 0x84a855
sar dword [esp + 0x28], 1
mov eax, dword [esp + 0x364]
sar ebx, 1
and dword [esp + 0x28], edi
and ebx, edi
mov edx, dword [esp + 0x28]
mov ecx, dword [esp + 0x360]
and eax, 1
or eax, edx
and ecx, 1
or ecx, ebx
mov ebx, dword [esp + 0x388]
mov dword [esp + 0x35c], eax
mov eax, dword [esp + 0x384]
mov dword [esp + 0x358], ecx
sar ebx, 1
sar eax, 1
mov dword [esp + 0x380], ebx
mov dword [esp + 0x37c], eax
jmp 0x84a45c
sar dword [esp + 0x28], 1
mov eax, dword [esp + 0x84]
sar ebx, 1
and dword [esp + 0x28], edi
and ebx, edi
mov edx, dword [esp + 0x28]
mov ecx, dword [esp + 0x80]
and eax, 1
or eax, edx
and ecx, 1
or ecx, ebx
mov ebx, dword [esp + 0x94]
mov dword [esp + 0x7c], eax
mov eax, dword [esp + 0x90]
mov dword [esp + 0x78], ecx
sar ebx, 1
sar eax, 1
mov dword [esp + 0x8c], ebx
mov dword [esp + 0x88], eax
jmp 0x8496c4
shl dword [esp + 0x484], 5
mov ebx, dword [esp + 0x488]
lea ecx, [ebp + 0xdbc]
mov eax, dword [esp + 0x488]
mov edx, dword [esp + 0x484]
mov dword [esp + 0x5c], 0
add ebx, 4
add eax, 8
lea edx, [ebp + edx + 0x1544]
mov dword [esp + 0x2a0], eax
mov eax, edx
mov dword [esp + 0x43c], ebx
mov dword [esp + 0x2b0], edx
mov dword [esp + 0x2c], ecx
mov ecx, dword [eax - 4]
mov edx, dword [eax]
mov eax, 2
mov ebx, dword [esp + 0x48c]
mov dword [esp + 0x1e0], 8
mov dword [esp + 0x28], ecx
movzx ecx, byte [esp + 0x60]
sar dword [esp + 0x1e0], cl
sub ebx, 4
mov dword [esp + 0x2a8], ebx
mov ebx, dword [ebp + 0xa4]
shl eax, cl
lea edi, [eax - 1]
mov eax, dword [ebp + 0x5c8]
sar ebx, cl
mov dword [esp + 0x1dc], ebx
mov ebx, dword [ebp + 0xa8]
add eax, eax
mov dword [esp + 0x1f4], eax
mov eax, dword [ebp + 0x5cc]
sar ebx, cl
mov dword [esp + 0x1d8], ebx
add eax, eax
mov dword [esp + 0x1f8], eax
mov eax, dword [ebp + 0x1ffc]
test eax, eax
je 0x84b5cf
mov eax, dword [esp + 0x28]
movzx ecx, byte [esp + 0x60]
shr eax, 0x1f
add dword [esp + 0x28], eax
mov eax, edx
sar dword [esp + 0x28], 1
shr eax, 0x1f
lea edx, [eax + edx]
sar edx, 1
mov eax, 1
mov ebx, edx
mov esi, dword [esp + 0x60]
shl eax, cl
sub eax, 1
imul eax, dword [esp + 0x5c]
add esi, 1
mov ecx, esi
sub ebx, eax
mov eax, dword [esp + 0x28]
mov edx, ebx
and edx, edi
mov dword [esp + 0x1ec], edx
mov edx, dword [esp + 0x28]
and eax, edi
mov dword [esp + 0x1f0], eax
mov eax, dword [esp + 0x54]
sar edx, cl
add eax, eax
imul eax, dword [esp + 0x1e0]
add edx, eax
mov eax, dword [esp + 0x58]
mov dword [esp + 0x208], edx
mov edx, ebx
sar edx, cl
add eax, eax
imul eax, dword [esp + 0x1e0]
sar eax, 1
add edx, eax
mov eax, dword [ebp + 0x18]
mov dword [esp + 0x204], edx
cmp eax, 2
je 0x84c385
sub eax, 1
je 0x84c564
mov eax, dword [esp + 0x28]
mov edx, ebx
shr edx, 0x1f
add edx, ebx
sar edx, 1
shr eax, 0x1f
add eax, dword [esp + 0x28]
sar eax, 1
mov ebx, eax
sar eax, cl
mov ecx, dword [esp + 0x1e0]
and ebx, edi
imul ecx, dword [esp + 0x54]
and edi, edx
mov dword [esp + 0x1e8], ebx
mov dword [esp + 0x1e4], edi
add eax, ecx
mov ecx, esi
mov dword [esp + 0x200], eax
mov eax, dword [esp + 0x1e0]
sar edx, cl
imul eax, dword [esp + 0x58]
sar eax, 1
add edx, eax
mov dword [esp + 0x1fc], edx
mov edx, dword [esp + 0x488]
mov eax, dword [esp + 0x204]
imul eax, dword [esp + 0x1f4]
mov ecx, dword [esp + 0x43c]
add eax, dword [edx]
add eax, dword [esp + 0x208]
mov ebx, dword [esp + 0x2a0]
mov dword [esp + 0x458], eax
mov eax, dword [esp + 0x1fc]
imul eax, dword [esp + 0x1f8]
mov edx, eax
add eax, dword [ebx]
add edx, dword [ecx]
add eax, dword [esp + 0x200]
add edx, dword [esp + 0x200]
mov dword [esp + 0x400], eax
xor eax, eax
mov dword [esp + 0x410], edx
mov edx, dword [esp + 0x1dc]
cmp dword [esp + 0x1f0], 0
setne al
sub edx, eax
mov eax, edx
mov edx, dword [esp + 0x1e0]
add edx, edx
sub eax, edx
cmp eax, dword [esp + 0x208]
jb 0x84b764
mov edx, dword [esp + 0x1d8]
xor eax, eax
sar edx, 1
cmp dword [esp + 0x1ec], 0
setne al
sub edx, eax
sub edx, dword [esp + 0x64]
cmp edx, dword [esp + 0x204]
jae 0x84b7dc
mov eax, dword [esp + 0x204]
mov ecx, dword [esp + 0x1d8]
mov ebx, dword [esp + 0x1dc]
mov dword [esp + 0x10], 0x12
mov edx, dword [esp + 0x458]
add eax, eax
mov dword [esp + 0x18], eax
mov eax, dword [esp + 0x208]
mov dword [esp + 0x20], ecx
mov dword [esp + 0x1c], ebx
mov dword [esp + 0xc], 0x11
mov dword [esp + 0x14], eax
mov eax, dword [ebp + 0xb0]
mov dword [esp + 4], edx
mov dword [esp + 8], eax
mov eax, dword [ebp + 0x7f8]
mov dword [esp], eax
call fcn.00848470
mov ecx, dword [ebp + 0x7f8]
test byte [ebp + 0x39], 0x20
mov dword [esp + 0x458], ecx
je 0x84c73e
mov edi, dword [esp + 0x5c]
test edi, edi
je 0x84b805
mov eax, dword [ebp + 0xb4]
mov ebx, dword [ebp + 0xb0]
add dword [esp + 0x458], ebx
add dword [esp + 0x410], eax
add dword [esp + 0x400], eax
mov ebx, 2
mov edi, dword [esp + 0x60]
sub ebx, dword [esp + 0x60]
mov dword [esp + 0x30], 2
mov ecx, ebx
shl dword [esp + 0x1ec], cl
mov eax, dword [esp + 0x1ec]
shl edi, 2
shl dword [esp + 0x1f0], cl
mov edx, dword [esp + 0x1f0]
mov ecx, dword [esp + 0x64]
mov dword [esp + 0x14], eax
mov eax, dword [esp + 0x1f4]
mov dword [esp + 0x10], edx
mov edx, dword [esp + 0x458]
mov dword [esp + 0xc], ecx
mov ecx, dword [esp + 0x40]
mov dword [esp + 8], eax
mov eax, dword [esp + 0x2a8]
mov dword [esp + 4], edx
mov dword [esp], ecx
call dword [eax + edi]
test byte [ebp + 0x39], 0x20
je 0x84c25c
mov eax, dword [ebp]
mov ecx, dword [esp + 0x2b0]
mov edx, dword [ebp + 0x1818]
mov esi, dword [ebp + 0x1ffc]
mov eax, dword [eax + 0x298]
mov ebx, dword [ecx + 8]
mov dword [esp + 0x3ac], edx
mov edx, dword [esp + 0x5c]
mov dword [esp + 0x42c], 8
mov dword [esp + 0x2a4], eax
mov eax, dword [ebp + 0x1814]
xor edx, 1
mov dword [esp + 0x1d4], edx
mov dword [esp + 0x3a8], eax
mov eax, dword [ecx + 4]
movzx ecx, byte [esp + 0x2a4]
shl dword [esp + 0x30], cl
mov edi, dword [esp + 0x30]
mov dword [esp + 0x28], eax
mov eax, dword [ebp + 0xa4]
sar dword [esp + 0x42c], cl
sub edi, 1
sar eax, cl
mov dword [esp + 0x428], eax
mov eax, dword [ebp + 0xa8]
sar eax, cl
mov dword [esp + 0x424], eax
mov eax, dword [ebp + 0x5c8]
add eax, eax
mov dword [esp + 0x420], eax
mov eax, dword [ebp + 0x5cc]
add eax, eax
test esi, esi
mov dword [esp + 0x41c], eax
je 0x84b949
mov eax, dword [esp + 0x28]
shr eax, 0x1f
add dword [esp + 0x28], eax
mov eax, ebx
sar dword [esp + 0x28], 1
shr eax, 0x1f
lea ebx, [eax + ebx]
sar ebx, 1
movzx ecx, byte [esp + 0x2a4]
mov eax, 1
mov edx, eax
mov esi, dword [esp + 0x2a4]
sub edx, dword [esp + 0x1d4]
shl eax, cl
sub eax, 1
add esi, 1
imul edx, eax
mov eax, dword [esp + 0x28]
mov ecx, esi
and eax, edi
add ebx, edx
mov dword [esp + 0x3bc], eax
mov eax, dword [esp + 0x3a8]
mov edx, ebx
and edx, edi
mov dword [esp + 0x3b8], edx
mov edx, dword [esp + 0x28]
add eax, eax
imul eax, dword [esp + 0x42c]
sar edx, cl
add edx, eax
mov eax, dword [esp + 0x3ac]
mov dword [esp + 0x418], edx
mov edx, ebx
sar edx, cl
add eax, eax
imul eax, dword [esp + 0x42c]
sar eax, 1
add edx, eax
mov eax, dword [ebp + 0x18]
mov dword [esp + 0x414], edx
cmp eax, 2
je 0x84c3e0
sub eax, 1
je 0x84c5d7
mov eax, dword [esp + 0x28]
mov edx, ebx
mov ecx, esi
shr edx, 0x1f
add edx, ebx
sar edx, 1
shr eax, 0x1f
add eax, dword [esp + 0x28]
sar eax, 1
mov ebx, eax
sar eax, cl
mov ecx, dword [esp + 0x42c]
and ebx, edi
imul ecx, dword [esp + 0x3a8]
and edi, edx
mov dword [esp + 0x3b4], ebx
mov dword [esp + 0x3b0], edi
add eax, ecx
mov ecx, esi
mov dword [esp + 0x468], eax
mov eax, dword [esp + 0x42c]
sar edx, cl
imul eax, dword [esp + 0x3ac]
sar eax, 1
add edx, eax
mov dword [esp + 0x464], edx
mov ebx, dword [esp + 0x488]
mov eax, dword [esp + 0x414]
imul eax, dword [esp + 0x420]
mov ecx, dword [esp + 0x43c]
add eax, dword [ebx]
add eax, dword [esp + 0x418]
mov ebx, dword [esp + 0x2a0]
mov dword [esp + 0x214], eax
mov eax, dword [esp + 0x464]
imul eax, dword [esp + 0x41c]
mov edx, eax
add eax, dword [ebx]
add edx, dword [ecx]
add eax, dword [esp + 0x468]
add edx, dword [esp + 0x468]
mov dword [esp + 0x20c], eax
xor eax, eax
mov dword [esp + 0x210], edx
mov edx, dword [esp + 0x428]
cmp dword [esp + 0x3bc], 0
setne al
sub edx, eax
mov eax, edx
mov edx, dword [esp + 0x42c]
add edx, edx
sub eax, edx
cmp dword [esp + 0x418], eax
ja 0x84bafc
mov edx, dword [esp + 0x424]
xor eax, eax
sar edx, 1
cmp dword [esp + 0x3b8], 0
setne al
sub edx, eax
sub edx, dword [esp + 0x64]
cmp dword [esp + 0x414], edx
jbe 0x84bb74
mov eax, dword [esp + 0x414]
mov ecx, dword [esp + 0x424]
mov ebx, dword [esp + 0x428]
mov dword [esp + 0x10], 0x12
mov edx, dword [esp + 0x214]
add eax, eax
mov dword [esp + 0x18], eax
mov eax, dword [esp + 0x418]
mov dword [esp + 0x20], ecx
mov dword [esp + 0x1c], ebx
mov dword [esp + 0xc], 0x11
mov dword [esp + 0x14], eax
mov eax, dword [ebp + 0xb0]
mov dword [esp + 4], edx
mov dword [esp + 8], eax
mov eax, dword [ebp + 0x7f8]
mov dword [esp], eax
call fcn.00848470
mov ecx, dword [ebp + 0x7f8]
test byte [ebp + 0x39], 0x20
mov dword [esp + 0x214], ecx
je 0x84c656
mov eax, dword [ebp + 0xb4]
mov ecx, dword [esp + 0x480]
mov edx, dword [ebp + 0xb0]
mov esi, dword [esp + 0x40]
mov ebx, dword [esp + 0x3c]
add ecx, eax
mov dword [esp + 0x344], ecx
mov ecx, dword [esp + 0x1d4]
add esi, edx
add ebx, eax
mov dword [esp + 0x34c], ebx
test ecx, ecx
je 0x84bbc3
add dword [esp + 0x214], edx
add dword [esp + 0x210], eax
add dword [esp + 0x20c], eax
mov ebx, 2
mov edi, dword [esp + 0x2a4]
sub ebx, dword [esp + 0x2a4]
mov dword [esp], esi
mov ecx, ebx
shl dword [esp + 0x3b8], cl
shl dword [esp + 0x3bc], cl
mov eax, dword [esp + 0x3b8]
shl edi, 2
mov edx, dword [esp + 0x3bc]
mov ecx, dword [esp + 0x64]
mov dword [esp + 0x14], eax
mov eax, dword [esp + 0x420]
mov dword [esp + 0x10], edx
mov edx, dword [esp + 0x214]
mov dword [esp + 0xc], ecx
mov ecx, dword [esp + 0x2a8]
mov dword [esp + 8], eax
mov dword [esp + 4], edx
call dword [ecx + edi]
test byte [ebp + 0x39], 0x20
je 0x84c2ef
add dword [esp + 0x5c], 1
add dword [esp + 0x2b0], 0x10
cmp dword [esp + 0x5c], 2
je case.default.0x848715
mov eax, dword [esp + 0x2c]
mov edx, dword [ebp + 0x1814]
mov ecx, dword [ebp + 0x1818]
mov dword [esp + 0x48c], eax
mov eax, dword [ebp]
mov dword [esp + 0x54], edx
mov dword [esp + 0x58], ecx
mov eax, dword [eax + 0x298]
mov dword [esp + 0x60], eax
mov eax, dword [esp + 0x2b0]
jmp 0x84b530
mov esi, dword [esp + 0x3c4]
mov ecx, ebx
mov eax, dword [esp + 0x3c0]
mov edx, dword [esp + 0x24c]
add edi, dword [esp + 0x48c]
shl esi, cl
shl eax, cl
mov dword [esp + 0x14], eax
mov ebx, eax
mov eax, dword [esp + 0x2b4]
mov dword [esp + 0x10], esi
mov ecx, dword [ebp + 0x2164]
mov dword [esp + 8], edx
sar eax, cl
mov ecx, dword [esp + 0x3e4]
mov dword [esp + 0xc], eax
mov eax, dword [esp + 0x3c]
mov dword [esp + 4], ecx
mov dword [esp], eax
call dword [edi]
mov eax, dword [esp + 0x2b4]
mov dword [esp + 0x14], ebx
mov edx, dword [esp + 0x24c]
mov dword [esp + 0x10], esi
mov ecx, dword [ebp + 0x2164]
mov ebx, dword [esp + 0x480]
mov dword [esp + 8], edx
sar eax, cl
mov ecx, dword [esp + 0x3d8]
mov dword [esp + 0xc], eax
mov dword [esp], ebx
mov dword [esp + 4], ecx
call dword [edi]
jmp 0x84919e
mov eax, dword [esp + 0x28]
mov edx, ebx
sar edx, 0x1f
shr edx, 0x1e
add edx, ebx
sar eax, 0x1f
shr eax, 0x1e
add eax, dword [esp + 0x28]
sar edx, 2
lea ebx, [edx + edx]
sar eax, 2
and ebx, edi
lea ecx, [eax + eax]
and ecx, edi
mov dword [esp + 0x7c], ecx
movzx ecx, byte [esp + 0x60]
mov dword [esp + 0x78], ebx
sar eax, cl
mov ecx, dword [esp + 0x64]
imul ecx, dword [esp + 0x54]
add eax, ecx
movzx ecx, byte [esp + 0x60]
mov dword [esp + 0x8c], eax
jmp 0x8496b0
mov eax, ebx
mov edx, dword [esp + 0x28]
sar eax, 0x1f
shr eax, 0x1e
add eax, ebx
sar eax, 2
lea ecx, [eax + eax]
and ecx, edi
sar edx, 0x1f
shr edx, 0x1e
mov dword [esp + 0x358], ecx
movzx ecx, byte [esp + 0x60]
add edx, dword [esp + 0x28]
sar edx, 2
lea ebx, [edx + edx]
sar edx, cl
mov ecx, dword [esp + 0x64]
and ebx, edi
imul ecx, dword [esp + 0x54]
mov dword [esp + 0x35c], ebx
add edx, ecx
movzx ecx, byte [esp + 0x60]
mov dword [esp + 0x380], edx
mov edx, dword [esp + 0x64]
imul edx, dword [esp + 0x58]
sar eax, cl
add eax, edx
mov dword [esp + 0x37c], eax
jmp 0x84a45c
sar dword [esp + 0x28], 1
mov eax, dword [esp + 0x3d4]
sar ebx, 1
and dword [esp + 0x28], edi
and ebx, edi
mov edx, dword [esp + 0x28]
mov ecx, dword [esp + 0x3cc]
and eax, 1
or eax, edx
and ecx, 1
or ecx, ebx
mov ebx, dword [esp + 0x3ec]
mov dword [esp + 0x22c], eax
mov eax, dword [esp + 0x3e8]
mov dword [esp + 0x228], ecx
sar ebx, 1
sar eax, 1
mov dword [esp + 0x234], ebx
mov dword [esp + 0x230], eax
jmp 0x849371
mov eax, dword [esp + 0x28]
mov ecx, edx
mov edx, dword [esp + 0x23c]
sar ebx, 1
and ebx, edi
sar ecx, 1
sar eax, 1
and eax, edi
mov dword [esp + 0x3c4], eax
mov eax, dword [esp + 0x3d0]
sar edx, 1
mov dword [esp + 0x454], edx
mov dword [esp + 0x450], ecx
and eax, 1
or dword [esp + 0x3c4], eax
mov eax, dword [esp + 0x3c8]
and eax, 1
or ebx, eax
mov dword [esp + 0x3c0], ebx
jmp 0x849047
sar dword [esp + 0x28], 1
mov eax, dword [esp + 0x16c]
sar ebx, 1
and dword [esp + 0x28], edi
and ebx, edi
mov edx, dword [esp + 0x28]
mov ecx, dword [esp + 0x168]
and eax, 1
or eax, edx
and ecx, 1
or ecx, ebx
mov ebx, dword [esp + 0x17c]
mov dword [esp + 0x164], eax
mov eax, dword [esp + 0x178]
mov dword [esp + 0x160], ecx
sar ebx, 1
sar eax, 1
mov dword [esp + 0x174], ebx
mov dword [esp + 0x170], eax
jmp 0x84ac3e
mov edx, dword [esp + 0x28]
mov eax, ebx
sar eax, 0x1f
shr eax, 0x1e
add eax, ebx
sar edx, 0x1f
shr edx, 0x1e
add edx, dword [esp + 0x28]
sar eax, 2
lea ebx, [eax + eax]
sar edx, 2
and ebx, edi
lea ecx, [edx + edx]
and ecx, edi
mov dword [esp + 0x1a4], ecx
movzx ecx, byte [esp + 0x28c]
mov dword [esp + 0x1a0], ebx
sar edx, cl
mov ecx, dword [esp + 0x19c]
imul ecx, dword [esp + 0x33c]
add edx, ecx
movzx ecx, byte [esp + 0x28c]
mov dword [esp + 0x1b4], edx
mov edx, dword [esp + 0x19c]
imul edx, dword [esp + 0x340]
sar eax, cl
add eax, edx
mov dword [esp + 0x1b0], eax
jmp 0x84a855
mov eax, dword [esp + 0x274]
mov ebx, dword [esp + 0x270]
mov ecx, dword [esp + 0x268]
mov dword [esp + 0x18], edi
mov dword [esp + 0x1c], eax
mov dword [esp + 0x20], ebx
mov dword [esp + 0x14], ecx
mov dword [esp + 0x10], 9
mov dword [esp + 0xc], 9
mov eax, dword [ebp + 0xb4]
mov dword [esp + 4], edx
mov dword [esp + 8], eax
mov eax, dword [ebp + 0x7f8]
mov dword [esp], eax
call fcn.00848470
mov edx, dword [ebp + 0x7f8]
jmp 0x84b2c6
mov ebx, dword [ebp + 0xb0]
mov edi, dword [esp + 0x194]
mov esi, dword [esp + 0x198]
mov ecx, dword [esp + 0x1b0]
mov eax, dword [esp + 0x1b4]
lea ebx, [ebx + ebx*8]
sar edi, 1
sar esi, 1
lea ebx, [edx + ebx*2]
mov edx, dword [esp + 0x1c4]
mov dword [esp + 0x18], ecx
mov dword [esp + 0x20], edi
mov dword [esp + 0x1c], esi
mov dword [esp + 0x14], eax
mov dword [esp + 0x10], 9
mov dword [esp + 0xc], 9
mov eax, dword [ebp + 0xb4]
mov dword [esp + 4], edx
mov dword [esp], ebx
mov dword [esp + 8], eax
call fcn.00848470
mov eax, dword [esp + 0x1b0]
lea ecx, [ebx + 0x10]
mov edx, dword [esp + 0x1b4]
mov dword [esp + 0x20], edi
mov dword [esp + 0x1c], esi
mov dword [esp + 0x18], eax
mov dword [esp + 0x14], edx
mov dword [esp + 0x10], 9
mov dword [esp + 0xc], 9
mov eax, dword [ebp + 0xb4]
mov dword [esp + 0x368], ecx
mov ecx, dword [esp + 0x1c0]
mov dword [esp + 8], eax
mov eax, dword [esp + 0x368]
mov dword [esp + 4], ecx
mov dword [esp], eax
call fcn.00848470
mov edx, dword [esp + 0x368]
mov dword [esp + 0x1c4], ebx
mov dword [esp + 0x1c0], edx
jmp 0x84a970
mov ebx, dword [ebp + 0xb0]
mov edi, dword [esp + 0x394]
mov esi, dword [esp + 0x398]
mov ecx, dword [esp + 0x37c]
mov eax, dword [esp + 0x380]
lea ebx, [ebx + ebx*8]
sar edi, 1
sar esi, 1
lea ebx, [edx + ebx*2]
mov edx, dword [esp + 0x374]
mov dword [esp + 0x18], ecx
mov dword [esp + 0x20], edi
mov dword [esp + 0x1c], esi
mov dword [esp + 0x14], eax
mov dword [esp + 0x10], 9
mov dword [esp + 0xc], 9
mov eax, dword [ebp + 0xb4]
mov dword [esp + 4], edx
mov dword [esp], ebx
mov dword [esp + 8], eax
call fcn.00848470
mov eax, dword [esp + 0x37c]
lea ecx, [ebx + 0x10]
mov edx, dword [esp + 0x380]
mov dword [esp + 0x20], edi
mov dword [esp + 0x1c], esi
mov dword [esp + 0x18], eax
mov dword [esp + 0x14], edx
mov dword [esp + 0x10], 9
mov dword [esp + 0xc], 9
mov eax, dword [ebp + 0xb4]
mov dword [esp + 0x370], ecx
mov ecx, dword [esp + 0x36c]
mov dword [esp + 8], eax
mov eax, dword [esp + 0x370]
mov dword [esp + 4], ecx
mov dword [esp], eax
call fcn.00848470
mov edx, dword [esp + 0x370]
mov dword [esp + 0x374], ebx
mov dword [esp + 0x36c], edx
jmp 0x84a57f
mov ebx, dword [ebp + 0xb0]
mov edi, dword [esp + 0x70]
mov esi, dword [esp + 0x74]
mov edx, dword [esp + 0x88]
mov ecx, dword [esp + 0x8c]
lea ebx, [ebx + ebx*8]
sar edi, 1
sar esi, 1
lea ebx, [eax + ebx*2]
mov dword [esp + 0x18], edx
mov dword [esp + 0x14], ecx
mov dword [esp + 0x20], edi
mov dword [esp + 0x1c], esi
mov dword [esp + 0x10], 9
mov dword [esp + 0xc], 9
mov eax, dword [ebp + 0xb4]
mov dword [esp], ebx
mov dword [esp + 8], eax
mov eax, dword [esp + 0x9c]
mov dword [esp + 4], eax
call fcn.00848470
mov ecx, dword [esp + 0x88]
lea edx, [ebx + 0x10]
mov eax, dword [esp + 0x8c]
mov dword [esp + 0x45c], edx
mov edx, dword [esp + 0x98]
mov dword [esp + 0x20], edi
mov dword [esp + 0x18], ecx
mov ecx, dword [esp + 0x45c]
mov dword [esp + 0x1c], esi
mov dword [esp + 0x14], eax
mov dword [esp + 0x10], 9
mov dword [esp + 0xc], 9
mov eax, dword [ebp + 0xb4]
mov dword [esp + 4], edx
mov dword [esp], ecx
mov dword [esp + 8], eax
call fcn.00848470
mov dword [esp + 0x9c], ebx
mov ebx, dword [esp + 0x45c]
mov dword [esp + 0x98], ebx
jmp 0x8497d1
mov esi, dword [esp + 0x1e8]
mov ecx, ebx
mov eax, dword [esp + 0x1e4]
mov edx, dword [esp + 0x1f8]
add edi, dword [esp + 0x48c]
shl esi, cl
shl eax, cl
mov dword [esp + 0x14], eax
mov ebx, eax
mov eax, dword [esp + 0x64]
mov dword [esp + 0x10], esi
mov ecx, dword [ebp + 0x2164]
mov dword [esp + 8], edx
sar eax, cl
mov ecx, dword [esp + 0x410]
mov dword [esp + 0xc], eax
mov eax, dword [esp + 0x3c]
mov dword [esp + 4], ecx
mov dword [esp], eax
call dword [edi]
mov eax, dword [esp + 0x64]
mov dword [esp + 0x14], ebx
mov edx, dword [esp + 0x1f8]
mov dword [esp + 0x10], esi
mov ecx, dword [ebp + 0x2164]
mov ebx, dword [esp + 0x480]
mov dword [esp + 8], edx
sar eax, cl
mov ecx, dword [esp + 0x400]
mov dword [esp + 0xc], eax
mov dword [esp], ebx
mov dword [esp + 4], ecx
call dword [edi]
jmp 0x84b87c
mov esi, dword [esp + 0x3b4]
mov ecx, ebx
mov eax, dword [esp + 0x3b0]
mov edx, dword [esp + 0x41c]
add edi, dword [esp + 0x48c]
shl esi, cl
shl eax, cl
mov dword [esp + 0x14], eax
mov ebx, eax
mov eax, dword [esp + 0x64]
mov dword [esp + 0x10], esi
mov ecx, dword [ebp + 0x2164]
mov dword [esp + 8], edx
sar eax, cl
mov ecx, dword [esp + 0x210]
mov dword [esp + 0xc], eax
mov eax, dword [esp + 0x34c]
mov dword [esp + 4], ecx
mov dword [esp], eax
call dword [edi]
mov eax, dword [esp + 0x64]
mov dword [esp + 0x14], ebx
mov edx, dword [esp + 0x41c]
mov dword [esp + 0x10], esi
mov ecx, dword [ebp + 0x2164]
mov ebx, dword [esp + 0x344]
mov dword [esp + 8], edx
sar eax, cl
mov ecx, dword [esp + 0x20c]
mov dword [esp + 0xc], eax
mov dword [esp], ebx
mov dword [esp + 4], ecx
call dword [edi]
jmp 0x84bc34
sar dword [esp + 0x28], 1
mov eax, dword [esp + 0x1f0]
sar ebx, 1
and dword [esp + 0x28], edi
and ebx, edi
mov edx, dword [esp + 0x28]
mov ecx, dword [esp + 0x208]
and eax, 1
or eax, edx
mov dword [esp + 0x1e8], eax
mov eax, dword [esp + 0x1ec]
sar ecx, 1
mov dword [esp + 0x200], ecx
and eax, 1
or ebx, eax
mov dword [esp + 0x1e4], ebx
mov ebx, dword [esp + 0x204]
sar ebx, 1
mov dword [esp + 0x1fc], ebx
jmp 0x84b6ae
sar dword [esp + 0x28], 1
mov eax, dword [esp + 0x3bc]
sar ebx, 1
and dword [esp + 0x28], edi
and ebx, edi
mov edx, dword [esp + 0x28]
mov ecx, dword [esp + 0x3b8]
and eax, 1
or eax, edx
and ecx, 1
or ecx, ebx
mov ebx, dword [esp + 0x418]
mov dword [esp + 0x3b4], eax
mov eax, dword [esp + 0x414]
mov dword [esp + 0x3b0], ecx
sar ebx, 1
sar eax, 1
mov dword [esp + 0x468], ebx
mov dword [esp + 0x464], eax
jmp 0x84ba46
mov eax, dword [esp + 0x28]
mov edx, ebx
sar edx, 0x1f
shr edx, 0x1e
add edx, ebx
sar eax, 0x1f
shr eax, 0x1e
add eax, dword [esp + 0x28]
sar edx, 2
lea ebx, [edx + edx]
sar eax, 2
and ebx, edi
lea ecx, [eax + eax]
and ecx, edi
mov dword [esp + 0x164], ecx
movzx ecx, byte [esp + 0x60]
mov dword [esp + 0x160], ebx
sar eax, cl
mov ecx, dword [esp + 0x64]
imul ecx, dword [esp + 0x54]
add eax, ecx
movzx ecx, byte [esp + 0x60]
mov dword [esp + 0x174], eax
jmp 0x84ac2a
mov edx, dword [esp + 0x28]
mov eax, ebx
sar eax, 0x1f
shr eax, 0x1e
add eax, ebx
sar edx, 0x1f
shr edx, 0x1e
add edx, dword [esp + 0x28]
sar eax, 2
lea ebx, [eax + eax]
sar edx, 2
and ebx, edi
lea ecx, [edx + edx]
and ecx, edi
mov dword [esp + 0x22c], ecx
movzx ecx, byte [esp + 0x444]
mov dword [esp + 0x228], ebx
mov ebx, dword [esp + 0x440]
imul ebx, dword [esp + 0x224]
sar edx, cl
sar eax, cl
add edx, ebx
mov ebx, dword [esp + 0x29c]
imul ebx, dword [esp + 0x224]
mov dword [esp + 0x234], edx
add eax, ebx
mov dword [esp + 0x230], eax
jmp 0x849371
mov edx, ebx
mov eax, dword [esp + 0x28]
sar edx, 0x1f
shr edx, 0x1e
add edx, ebx
sar edx, 2
lea ecx, [edx + edx]
and ecx, edi
sar eax, 0x1f
shr eax, 0x1e
mov dword [esp + 0x3c0], ecx
movzx ecx, byte [esp + 0x60]
add eax, dword [esp + 0x28]
sar eax, 2
lea ebx, [eax + eax]
sar eax, cl
mov ecx, dword [esp + 0x64]
and ebx, edi
imul ecx, dword [esp + 0x54]
mov dword [esp + 0x3c4], ebx
add eax, ecx
movzx ecx, byte [esp + 0x60]
mov dword [esp + 0x454], eax
jmp 0x849033
mov eax, ebx
mov edx, dword [esp + 0x28]
sar eax, 0x1f
shr eax, 0x1e
add eax, ebx
sar eax, 2
lea ecx, [eax + eax]
and ecx, edi
sar edx, 0x1f
shr edx, 0x1e
mov dword [esp + 0x1e4], ecx
movzx ecx, byte [esp + 0x60]
add edx, dword [esp + 0x28]
sar edx, 2
lea ebx, [edx + edx]
sar edx, cl
mov ecx, dword [esp + 0x1e0]
and ebx, edi
imul ecx, dword [esp + 0x54]
mov dword [esp + 0x1e8], ebx
add edx, ecx
movzx ecx, byte [esp + 0x60]
mov dword [esp + 0x200], edx
mov edx, dword [esp + 0x1e0]
imul edx, dword [esp + 0x58]
sar eax, cl
add eax, edx
mov dword [esp + 0x1fc], eax
jmp 0x84b6ae
mov edx, dword [esp + 0x28]
mov eax, ebx
sar eax, 0x1f
shr eax, 0x1e
add eax, ebx
sar edx, 0x1f
shr edx, 0x1e
add edx, dword [esp + 0x28]
sar eax, 2
lea ebx, [eax + eax]
sar edx, 2
and ebx, edi
lea ecx, [edx + edx]
and ecx, edi
mov dword [esp + 0x3b4], ecx
movzx ecx, byte [esp + 0x2a4]
mov dword [esp + 0x3b0], ebx
sar edx, cl
mov ecx, dword [esp + 0x42c]
imul ecx, dword [esp + 0x3a8]
add edx, ecx
movzx ecx, byte [esp + 0x2a4]
mov dword [esp + 0x468], edx
mov edx, dword [esp + 0x42c]
imul edx, dword [esp + 0x3ac]
sar eax, cl
add eax, edx
mov dword [esp + 0x464], eax
jmp 0x84ba46
mov ebx, dword [ebp + 0xb0]
mov edi, dword [esp + 0x424]
mov esi, dword [esp + 0x428]
mov eax, dword [esp + 0x464]
mov edx, dword [esp + 0x468]
lea ebx, [ebx + ebx*8]
sar edi, 1
sar esi, 1
add eax, eax
lea ebx, [ecx + ebx*2]
mov ecx, dword [esp + 0x210]
mov dword [esp + 0x14], edx
mov dword [esp + 0x40c], eax
mov dword [esp + 0x20], edi
mov dword [esp + 0x1c], esi
mov dword [esp + 0x18], eax
mov dword [esp + 0x10], 0xa
mov dword [esp + 0xc], 9
mov eax, dword [ebp + 0xb4]
mov dword [esp + 4], ecx
mov dword [esp], ebx
mov dword [esp + 8], eax
call fcn.00848470
mov edx, dword [esp + 0x40c]
lea eax, [ebx + 0x10]
mov ecx, dword [esp + 0x468]
mov dword [esp + 0x408], eax
mov dword [esp + 0x20], edi
mov dword [esp + 0x18], edx
mov edx, dword [esp + 0x408]
mov dword [esp + 0x14], ecx
mov dword [esp + 0x1c], esi
mov dword [esp + 0x10], 0xa
mov dword [esp + 0xc], 9
mov eax, dword [ebp + 0xb4]
mov dword [esp], edx
mov dword [esp + 8], eax
mov eax, dword [esp + 0x20c]
mov dword [esp + 4], eax
call fcn.00848470
mov ecx, dword [esp + 0x408]
mov dword [esp + 0x210], ebx
mov dword [esp + 0x20c], ecx
jmp 0x84bb74
mov ebx, dword [ebp + 0xb0]
mov edi, dword [esp + 0x1d8]
mov esi, dword [esp + 0x1dc]
mov eax, dword [esp + 0x1fc]
mov edx, dword [esp + 0x200]
lea ebx, [ebx + ebx*8]
sar edi, 1
sar esi, 1
add eax, eax
lea ebx, [ecx + ebx*2]
mov ecx, dword [esp + 0x410]
mov dword [esp + 0x14], edx
mov dword [esp + 0x218], eax
mov dword [esp + 0x20], edi
mov dword [esp + 0x1c], esi
mov dword [esp + 0x18], eax
mov dword [esp + 0x10], 0xa
mov dword [esp + 0xc], 9
mov eax, dword [ebp + 0xb4]
mov dword [esp + 4], ecx
mov dword [esp], ebx
mov dword [esp + 8], eax
call fcn.00848470
mov edx, dword [esp + 0x218]
lea eax, [ebx + 0x10]
mov ecx, dword [esp + 0x200]
mov dword [esp + 0x404], eax
mov dword [esp + 0x20], edi
mov dword [esp + 0x18], edx
mov edx, dword [esp + 0x404]
mov dword [esp + 0x14], ecx
mov dword [esp + 0x1c], esi
mov dword [esp + 0x10], 0xa
mov dword [esp + 0xc], 9
mov eax, dword [ebp + 0xb4]
mov dword [esp], edx
mov dword [esp + 8], eax
mov eax, dword [esp + 0x400]
mov dword [esp + 4], eax
call fcn.00848470
mov ecx, dword [esp + 0x404]
mov dword [esp + 0x410], ebx
mov dword [esp + 0x400], ecx
jmp 0x84b7dc
mov esi, dword [esp + 0xbc]
mov ecx, ebx
mov eax, dword [esp + 0xb8]
mov edx, dword [esp + 0xcc]
add edi, dword [esp + 0x48c]
shl esi, cl
shl eax, cl
mov dword [esp + 0x14], eax
mov ebx, eax
mov eax, dword [esp + 0x64]
mov dword [esp + 0x10], esi
mov ecx, dword [ebp + 0x2164]
mov dword [esp + 8], edx
sar eax, cl
mov ecx, dword [esp + 0xe4]
mov dword [esp + 0xc], eax
mov eax, dword [esp + 0x3c]
mov dword [esp + 4], ecx
mov dword [esp], eax
call dword [edi]
mov eax, dword [esp + 0x64]
mov dword [esp + 0x14], ebx
mov edx, dword [esp + 0xcc]
mov dword [esp + 0x10], esi
mov ecx, dword [ebp + 0x2164]
mov ebx, dword [esp + 0x480]
mov dword [esp + 8], edx
sar eax, cl
mov ecx, dword [esp + 0xe0]
mov dword [esp + 0xc], eax
mov dword [esp], ebx
mov dword [esp + 4], ecx
call dword [edi]
jmp 0x848a8e
sar dword [esp + 0x28], 1
mov edx, dword [esp + 0x11c]
sar ebx, 1
and dword [esp + 0x28], edi
and ebx, edi
mov ecx, dword [esp + 0x28]
mov eax, dword [esp + 0x118]
and edx, 1
or edx, ecx
mov ecx, dword [esp + 0x130]
mov dword [esp + 0x114], edx
mov edx, dword [esp + 0x134]
and eax, 1
or eax, ebx
mov dword [esp + 0x110], eax
sar ecx, 1
sar edx, 1
mov dword [esp + 0x12c], edx
mov dword [esp + 0x128], ecx
jmp 0x848c65
sar dword [esp + 0x28], 1
mov eax, dword [esp + 0xc4]
sar ebx, 1
and dword [esp + 0x28], edi
and ebx, edi
mov edx, dword [esp + 0x28]
mov ecx, dword [esp + 0xc0]
and eax, 1
or eax, edx
and ecx, 1
or ecx, ebx
mov ebx, dword [esp + 0xdc]
mov dword [esp + 0xbc], eax
mov eax, dword [esp + 0xd8]
mov dword [esp + 0xb8], ecx
sar ebx, 1
sar eax, 1
mov dword [esp + 0xd4], ebx
mov dword [esp + 0xd0], eax
jmp 0x848898
mov eax, ebx
mov edx, dword [esp + 0x28]
sar eax, 0x1f
shr eax, 0x1e
add eax, ebx
sar eax, 2
lea ecx, [eax + eax]
and ecx, edi
sar edx, 0x1f
shr edx, 0x1e
mov dword [esp + 0x110], ecx
movzx ecx, byte [esp + 0x10c]
add edx, dword [esp + 0x28]
sar edx, 2
lea ebx, [edx + edx]
sar edx, cl
mov ecx, dword [esp + 0x108]
and ebx, edi
imul ecx, dword [esp + 0x150]
mov dword [esp + 0x114], ebx
add edx, ecx
movzx ecx, byte [esp + 0x10c]
mov dword [esp + 0x12c], edx
mov edx, dword [esp + 0x108]
imul edx, dword [esp + 0x14c]
sar eax, cl
add eax, edx
mov dword [esp + 0x128], eax
jmp 0x848c65
mov edx, dword [esp + 0x28]
mov eax, ebx
sar eax, 0x1f
shr eax, 0x1e
add eax, ebx
sar edx, 0x1f
shr edx, 0x1e
add edx, dword [esp + 0x28]
sar eax, 2
lea ebx, [eax + eax]
sar edx, 2
and ebx, edi
lea ecx, [edx + edx]
and ecx, edi
mov dword [esp + 0xbc], ecx
movzx ecx, byte [esp + 0x60]
mov dword [esp + 0xb8], ebx
sar edx, cl
mov ecx, dword [esp + 0x64]
imul ecx, dword [esp + 0x54]
add edx, ecx
movzx ecx, byte [esp + 0x60]
mov dword [esp + 0xd4], edx
mov edx, dword [esp + 0x64]
imul edx, dword [esp + 0x58]
sar eax, cl
add eax, edx
mov dword [esp + 0xd0], eax
jmp 0x848898
mov ebx, dword [ebp + 0xb0]
mov edi, dword [esp + 0x100]
mov esi, dword [esp + 0x104]
mov eax, dword [esp + 0x128]
mov edx, dword [esp + 0x12c]
lea ebx, [ebx + ebx*8]
sar edi, 1
sar esi, 1
add eax, eax
lea ebx, [ecx + ebx*2]
mov ecx, dword [esp + 0x13c]
mov dword [esp + 0x14], edx
mov dword [esp + 0x148], eax
mov dword [esp + 0x20], edi
mov dword [esp + 0x1c], esi
mov dword [esp + 0x18], eax
mov dword [esp + 0x10], 0xa
mov dword [esp + 0xc], 9
mov eax, dword [ebp + 0xb4]
mov dword [esp + 4], ecx
mov dword [esp], ebx
mov dword [esp + 8], eax
call fcn.00848470
mov edx, dword [esp + 0x148]
lea eax, [ebx + 0x10]
mov ecx, dword [esp + 0x12c]
mov dword [esp + 0x434], eax
mov dword [esp + 0x20], edi
mov dword [esp + 0x18], edx
mov edx, dword [esp + 0x434]
mov dword [esp + 0x14], ecx
mov dword [esp + 0x1c], esi
mov dword [esp + 0x10], 0xa
mov dword [esp + 0xc], 9
mov eax, dword [ebp + 0xb4]
mov dword [esp], edx
mov dword [esp + 8], eax
mov eax, dword [esp + 0x138]
mov dword [esp + 4], eax
call fcn.00848470
mov ecx, dword [esp + 0x434]
mov dword [esp + 0x13c], ebx
mov dword [esp + 0x138], ecx
jmp 0x848d93
mov ebx, dword [ebp + 0xb0]
mov edi, dword [esp + 0xb0]
mov esi, dword [esp + 0xb4]
mov eax, dword [esp + 0xd0]
mov edx, dword [esp + 0xd4]
lea ebx, [ebx + ebx*8]
sar edi, 1
sar esi, 1
add eax, eax
lea ebx, [ecx + ebx*2]
mov ecx, dword [esp + 0xe4]
mov dword [esp + 0x14], edx
mov dword [esp + 0xf0], eax
mov dword [esp + 0x20], edi
mov dword [esp + 0x1c], esi
mov dword [esp + 0x18], eax
mov dword [esp + 0x10], 0xa
mov dword [esp + 0xc], 9
mov eax, dword [ebp + 0xb4]
mov dword [esp + 4], ecx
mov dword [esp], ebx
mov dword [esp + 8], eax
call fcn.00848470
mov edx, dword [esp + 0xf0]
lea eax, [ebx + 0x10]
mov ecx, dword [esp + 0xd4]
mov dword [esp + 0x448], eax
mov dword [esp + 0x20], edi
mov dword [esp + 0x18], edx
mov edx, dword [esp + 0x448]
mov dword [esp + 0x14], ecx
mov dword [esp + 0x1c], esi
mov dword [esp + 0x10], 0xa
mov dword [esp + 0xc], 9
mov eax, dword [ebp + 0xb4]
mov dword [esp], edx
mov dword [esp + 8], eax
mov eax, dword [esp + 0xe0]
mov dword [esp + 4], eax
call fcn.00848470
mov ecx, dword [esp + 0x448]
mov dword [esp + 0xe4], ebx
mov dword [esp + 0xe0], ecx
jmp 0x8489d9