Function at 0x6d7834
Capabilities:
Resolve function by parsing pe exports

Disassembly:
test dword [0x84efac], 0xffffff80
jne 0x6d7864
test dword [0x84efac], 0xffffffff
jne 0x6da774
call fcn.0079f000
jmp fcn.006d7834
push ebx
mov ebx, esp
and esp, 0xfffffff8
push edi
push esi
push ebp
sub esp, 0x354
mov ebp, ecx
mov al, byte [ebp + 0x1f2]
test al, al
jne 0x6d7886
mov eax, dword [ebx + 0x10]
test eax, eax
jg 0x6d7897
xor eax, eax
add esp, 0x354
pop ebp
pop esi
pop edi
mov esp, ebx
pop ebx
ret 0x14
mov eax, dword [ebx + 0x10]
lea esi, [eax + eax]
add esi, esi
push esi
call sub.MSVCRT.dll_void____cdecl_operator_new_unsigned_int_
mov dword [esp + 0x338], eax
add esp, 4
mov ecx, dword [ebx + 8]
mov eax, dword [ecx]
mov edx, dword [ebp + 0x23c]
mov edi, dword [ebx + 0xc]
lea edx, [edx + edi*4]
push 0
push edx
call dword [eax + 0xc]
mov ecx, dword [ebx + 8]
mov edx, dword [ecx]
push 0
push esi
mov eax, dword [esp + 0x33c]
push eax
call dword [edx + 0x1c]
cmp eax, esi
jne 0x6da31b
xor esi, esi
xor edi, edi
xor edx, edx
mov dword [esp + 0x338], esi
xor eax, eax
mov dword [esp + 0x34c], edi
mov dword [esp + 0x33c], edx
mov dword [esp + 0x340], eax
mov eax, 0xffffffff
mov dword [esp + 0x2d0], eax
xor eax, eax
mov dword [esp + 0x2a8], eax
xor eax, eax
mov dword [esp + 0x2b8], eax
mov eax, 0x78
mov dword [esp + 0x2d4], eax
mov eax, 0xffffffff
mov dword [esp + 0x2bc], eax
xor eax, eax
mov dword [esp + 0x344], eax
xor eax, eax
mov dword [esp + 0x23c], eax
mov eax, 0x7f
mov dword [esp + 0x2b0], eax
mov eax, 1
fld dword [0x88b854]
fstp qword [esp + 0x308]
fld dword [0x88b854]
fstp qword [esp + 0x2e0]
fld dword [0x88b850]
fstp qword [esp + 0x2c8]
fld dword [0x88b84c]
fstp qword [esp + 0x318]
fld dword [0x88b848]
fstp qword [esp + 0x2c0]
fld dword [0x88b854]
fstp qword [esp + 0x300]
fld dword [0x88b854]
fstp qword [esp + 0x2f8]
fld dword [0x88b850]
fstp qword [esp + 0x2f0]
fld dword [0x88b84c]
fstp qword [esp + 0x310]
fld dword [0x88b848]
fstp qword [esp + 0x2e8]
fld dword [0x88b844]
fld st(0)
fstp qword [esp + 0x258]
fld dword [0x88b854]
fstp qword [esp + 0x250]
fld st(0)
fstp qword [esp + 0x248]
fld dword [0x88b854]
fstp qword [esp + 0x240]
fld dword [0x88b84c]
fstp qword [esp + 0x288]
fld dword [0x88b840]
fld st(0)
fstp qword [esp + 0x290]
mov dword [esp + 0x238], eax
lea eax, [ebp + 0x78]
fld dword [0x88b83c]
fstp qword [esp + 0x298]
fld dword [0x88b854]
fstp qword [esp + 0x2a0]
fld dword [ebp + 0x40]
fstp qword [esp + 0x320]
fld dword [ebp + 0x44]
fstp qword [esp + 0x268]
fld dword [ebp + 0x48]
fstp qword [esp + 0x280]
fld dword [ebp + 0x4c]
fstp qword [esp + 0x270]
fld dword [ebp + 0x50]
fstp qword [esp + 0x260]
fld dword [ebp + 0x54]
fstp qword [esp + 0x278]
mov dword [esp + 0x2d8], eax
mov al, byte [ebp + 0x10c]
test al, al
je 0x6d7aa9
mov eax, dword [ebp + 0x78]
mov dword [esp + 0x338], eax
mov al, byte [ebp + 0x10d]
test al, al
je 0x6d7abd
mov eax, dword [ebp + 0x7c]
mov dword [esp + 0x34c], eax
mov al, byte [ebp + 0x10e]
test al, al
je 0x6d7ad4
mov eax, dword [ebp + 0x80]
mov dword [esp + 0x33c], eax
mov al, byte [ebp + 0x10f]
test al, al
je 0x6d7aeb
mov eax, dword [ebp + 0x84]
mov dword [esp + 0x340], eax
mov al, byte [ebp + 0x110]
test al, al
je 0x6d7b03
movzx eax, byte [ebp + 0x88]
mov dword [esp + 0x2a8], eax
mov al, byte [ebp + 0x111]
test al, al
je 0x6d7b1a
mov eax, dword [ebp + 0x8c]
mov dword [esp + 0x2b8], eax
mov al, byte [ebp + 0x112]
test al, al
je 0x6d7b31
mov eax, dword [ebp + 0x90]
mov dword [esp + 0x2d4], eax
mov al, byte [ebp + 0x113]
test al, al
je 0x6d7b48
mov eax, dword [ebp + 0x94]
mov dword [esp + 0x2bc], eax
mov al, byte [ebp + 0x114]
test al, al
je 0x6d7b5f
mov eax, dword [ebp + 0x98]
mov dword [esp + 0x344], eax
mov al, byte [ebp + 0x115]
test al, al
je 0x6d7b76
mov eax, dword [ebp + 0x9c]
mov dword [esp + 0x23c], eax
mov al, byte [ebp + 0x116]
test al, al
je 0x6d7b8d
mov eax, dword [ebp + 0xa0]
mov dword [esp + 0x2b0], eax
mov al, byte [ebp + 0x117]
test al, al
je 0x6d7ba4
fld dword [ebp + 0xa4]
fstp qword [esp + 0x308]
mov al, byte [ebp + 0x118]
test al, al
je 0x6d7bbb
fld dword [ebp + 0xa8]
fstp qword [esp + 0x2e0]
mov al, byte [ebp + 0x119]
test al, al
je 0x6d7bd2
fld dword [ebp + 0xac]
fstp qword [esp + 0x2c8]
mov al, byte [ebp + 0x11a]
test al, al
je 0x6d7be9
fld dword [ebp + 0xb0]
fstp qword [esp + 0x318]
mov al, byte [ebp + 0x11b]
test al, al
je 0x6d7c00
fld dword [ebp + 0xb4]
fstp qword [esp + 0x2c0]
mov al, byte [ebp + 0x11c]
test al, al
je 0x6d7c17
fld dword [ebp + 0xc8]
fstp qword [esp + 0x300]
mov al, byte [ebp + 0x11d]
test al, al
je 0x6d7c2e
fld dword [ebp + 0xcc]
fstp qword [esp + 0x2f8]
mov al, byte [ebp + 0x11e]
test al, al
je 0x6d7c45
fld dword [ebp + 0xd0]
fstp qword [esp + 0x2f0]
mov al, byte [ebp + 0x11f]
test al, al
je 0x6d7c5c
fld dword [ebp + 0xd4]
fstp qword [esp + 0x310]
mov al, byte [ebp + 0x120]
test al, al
je 0x6d7c73
fld dword [ebp + 0xd8]
fstp qword [esp + 0x2e8]
mov al, byte [ebp + 0x122]
test al, al
je 0x6d7c8a
fld dword [ebp + 0xb8]
fstp qword [esp + 0x288]
mov al, byte [ebp + 0x123]
test al, al
je 0x6d7ca1
fld dword [ebp + 0xbc]
fstp qword [esp + 0x290]
mov al, byte [ebp + 0x124]
test al, al
je 0x6d7cb9
movzx eax, byte [ebp + 0xc0]
mov dword [esp + 0x238], eax
mov al, byte [ebp + 0x125]
test al, al
je 0x6d7cd0
fld dword [ebp + 0xdc]
fstp qword [esp + 0x298]
mov al, byte [ebp + 0x126]
test al, al
je 0x6d7ce7
fld dword [ebp + 0xe0]
fstp qword [esp + 0x2a0]
mov al, byte [ebp + 0x12a]
test al, al
je 0x6d7cfe
fld dword [ebp + 0xf0]
fstp qword [esp + 0x258]
mov al, byte [ebp + 0x129]
test al, al
je 0x6d7d15
fld dword [ebp + 0xec]
fstp qword [esp + 0x250]
mov al, byte [ebp + 0x12f]
test al, al
je 0x6d7d2c
fld dword [ebp + 0x104]
fstp qword [esp + 0x248]
mov al, byte [ebp + 0x12e]
test al, al
je 0x6d7d43
fld dword [ebp + 0x100]
fstp qword [esp + 0x240]
mov al, byte [ebp + 0x127]
test al, al
je 0x6d7d5a
fld dword [ebp + 0xe4]
fstp qword [esp + 0x268]
mov al, byte [ebp + 0x128]
test al, al
je 0x6d7d71
fld dword [ebp + 0xe8]
fstp qword [esp + 0x320]
mov al, byte [ebp + 0x12b]
test al, al
je 0x6d7d88
fld dword [ebp + 0xf4]
fstp qword [esp + 0x270]
mov al, byte [ebp + 0x12c]
test al, al
je 0x6d7d9f
fld dword [ebp + 0xf8]
fstp qword [esp + 0x280]
mov al, byte [ebp + 0x12d]
test al, al
je 0x6d7db6
fld dword [ebp + 0xfc]
fstp qword [esp + 0x260]
mov al, byte [ebp + 0x130]
test al, al
je 0x6d7dcd
fld dword [ebp + 0x108]
fstp qword [esp + 0x278]
xor edi, edi
xor eax, eax
xor ecx, ecx
mov dword [esp + 0x10], eax
xor edx, edx
xor esi, esi
mov dword [esp + 0x14], eax
mov dword [esp + 0x18], eax
mov dword [esp + 0x2b4], esi
xor esi, esi
mov dword [esp + 0x1c], eax
mov byte [esp + 0x20], al
mov dword [esp + 0x24], eax
mov dword [esp + 0x28], 0x78
mov dword [esp + 0x2c], 0xffffffff
mov dword [esp + 0x30], eax
mov dword [esp + 0x34], eax
mov dword [esp + 0x38], 0x7f
mov dword [esp + 0x3c], esi
xor esi, esi
mov dword [esp + 0x40], esi
mov esi, 0x3e4ccccd
mov dword [esp + 0x44], esi
mov esi, 0x3f000000
mov dword [esp + 0x48], esi
mov esi, 0x3e99999a
mov dword [esp + 0x4c], esi
mov esi, 0x3f000000
mov dword [esp + 0x50], esi
mov esi, 0x3f800000
mov dword [esp + 0x54], esi
mov esi, 0x3f800000
mov byte [esp + 0x58], 1
mov dword [esp + 0x5c], esi
xor esi, esi
mov dword [esp + 0x60], esi
xor esi, esi
mov dword [esp + 0x64], esi
mov esi, 0x3e4ccccd
mov dword [esp + 0x68], esi
mov esi, 0x3f000000
mov dword [esp + 0x6c], esi
mov esi, 0x3e99999a
mov dword [esp + 0x70], esi
mov esi, 0x3f800000
mov dword [esp + 0x74], esi
xor esi, esi
mov dword [esp + 0x78], esi
xor esi, esi
mov dword [esp + 0x7c], esi
xor esi, esi
mov dword [esp + 0x80], esi
xor esi, esi
mov dword [esp + 0x84], esi
xor esi, esi
mov dword [esp + 0x88], esi
xor esi, esi
mov dword [esp + 0x8c], esi
xor esi, esi
mov dword [esp + 0x90], esi
xor esi, esi
mov dword [esp + 0x94], esi
xor esi, esi
mov dword [esp + 0x98], esi
xor esi, esi
mov dword [esp + 0x9c], esi
xor esi, esi
mov dword [esp + 0xa0], esi
mov byte [esp + 0xa4], al
xor esi, esi
mov byte [esp + 0xa5], al
mov byte [esp + 0xa6], al
mov byte [esp + 0xa7], al
mov byte [esp + 0xa8], al
mov byte [esp + 0xa9], al
mov byte [esp + 0xaa], al
mov byte [esp + 0xab], al
mov byte [esp + 0xac], al
mov byte [esp + 0xad], al
mov byte [esp + 0xae], al
mov byte [esp + 0xaf], al
mov byte [esp + 0xb0], al
mov byte [esp + 0xb1], al
mov byte [esp + 0xb2], al
mov byte [esp + 0xb3], al
mov byte [esp + 0xb4], al
mov byte [esp + 0xb5], al
mov byte [esp + 0xb6], al
mov byte [esp + 0xb7], al
mov byte [esp + 0xb8], al
mov byte [esp + 0xba], al
mov byte [esp + 0xbb], al
mov byte [esp + 0xbc], al
mov byte [esp + 0xb9], al
mov byte [esp + 0xbd], al
mov byte [esp + 0xbe], al
mov byte [esp + 0xbf], al
mov byte [esp + 0xc0], al
mov byte [esp + 0xc1], al
mov byte [esp + 0xc2], al
mov byte [esp + 0xc3], al
mov byte [esp + 0xc4], al
mov byte [esp + 0xc5], al
mov byte [esp + 0xc6], al
mov byte [esp + 0xc7], al
mov byte [esp + 0xc8], al
mov eax, dword [ebx + 0x10]
test eax, eax
mov eax, dword [esp + 0x2b4]
jle 0x6da75c
mov dword [esp + 0x2b4], eax
mov dword [esp + 0x2ac], edx
mov dword [esp + 0x330], ecx
mov dword [esp + 0x230], edi
mov dword [esp + 0x234], ebp
mov ebp, dword [ebx + 0x10]
fstp qword [esp + 0x328]
fstp st(0)
lea esi, [esi]
mov eax, dword [esp + 0x334]
movzx eax, word [eax + esi*4]
inc esi
cmp eax, 0x3a
ja case.0x6d8050.14
mov eax, dword [eax*4 + 0x88b8c0]
jmp eax
mov edi, dword [esp + 0x334]
movsx eax, word [edi + esi*4 - 2]
mov dword [esp + 0x2bc], eax
mov dword [esp + 0x2c], eax
mov byte [esp + 0xab], 1
jmp case.0x6d8050.14
mov eax, dword [esp + 0x334]
movsx ecx, word [eax + esi*4 - 2]
mov edx, 0x3f
cmp ecx, 0x3f
cmovl edx, ecx
mov dword [esp + 0x344], edx
mov dword [esp + 0x30], edx
mov byte [esp + 0xac], 1
jmp case.0x6d8050.14
mov edx, dword [esp + 0x334]
movsx ecx, word [edx + esi*4 - 2]
xor edi, edi
cmp ecx, 0x32
mov eax, dword [esp + 0x238]
cmovl eax, edi
mov dword [esp + 0x238], eax
mov byte [esp + 0x58], al
mov byte [esp + 0xbc], 1
jmp case.0x6d8050.14
mov edi, dword [esp + 0x334]
movzx eax, word [edi + esi*4 - 2]
and eax, 1
mov dword [esp + 0x2a8], eax
mov byte [esp + 0x20], al
mov byte [esp + 0xa8], 1
jmp case.0x6d8050.14
mov eax, dword [esp + 0x334]
movsx edx, word [eax + esi*4 - 2]
mov dword [esp + 0x2d0], edx
jmp case.0x6d8050.14
fld qword [0x88b7a0]
mov eax, dword [esp + 0x334]
movsx edx, word [eax + esi*4 - 2]
mov dword [esp + 0x228], edx
fild dword [esp + 0x228]
fmul qword [0x88b798]
fxch st(1)
fstp qword [esp]
fstp qword [esp + 8]
call sub.MSVCRT.dll_pow
fld qword [esp + 0x290]
fmul st(1)
fstp qword [esp + 0x290]
fld qword [esp + 0x328]
fmulp st(1)
fst qword [esp + 0x328]
fstp dword [esp + 0x54]
mov byte [esp + 0xbb], 1
jmp case.0x6d8050.14
fld qword [0x88b7a0]
mov eax, dword [esp + 0x334]
movsx edx, word [eax + esi*4 - 2]
mov dword [esp + 0x228], edx
fild dword [esp + 0x228]
fmul qword [0x88b788]
fxch st(1)
fstp qword [esp]
fstp qword [esp + 8]
call sub.MSVCRT.dll_pow
fld qword [esp + 0x290]
fmul st(1)
fstp qword [esp + 0x290]
fld qword [esp + 0x328]
fmulp st(1)
fst qword [esp + 0x328]
fstp dword [esp + 0x54]
mov byte [esp + 0xbb], 1
jmp case.0x6d8050.14
mov eax, dword [esp + 0x334]
movsx edx, word [eax + esi*4 - 2]
shl edx, 0xf
add dword [esp + 0x34c], edx
mov ecx, dword [esp + 0x330]
add ecx, edx
mov dword [esp + 0x330], ecx
mov dword [esp + 0x14], ecx
mov byte [esp + 0xa5], 1
jmp case.0x6d8050.14
mov eax, dword [esp + 0x334]
movsx edx, word [eax + esi*4 - 2]
shl edx, 0xf
add dword [esp + 0x338], edx
mov ecx, dword [esp + 0x230]
add ecx, edx
mov dword [esp + 0x230], ecx
mov dword [esp + 0x10], ecx
mov byte [esp + 0xa4], 1
jmp case.0x6d8050.14
mov edi, dword [esp + 0x334]
movzx eax, word [edi + esi*4 - 2]
movzx edx, al
mov dword [esp + 0x2b0], edx
sar eax, 8
mov cl, 1
mov dword [esp + 0x23c], eax
mov dword [esp + 0x38], edx
mov dword [esp + 0x34], eax
mov byte [esp + 0xae], cl
mov byte [esp + 0xad], cl
jmp case.0x6d8050.14
mov edi, dword [esp + 0x334]
movzx eax, word [edi + esi*4 - 2]
movzx edx, al
mov dword [esp + 0x2d4], edx
sar eax, 8
mov cl, 1
mov dword [esp + 0x2b8], eax
mov dword [esp + 0x28], edx
mov dword [esp + 0x24], eax
mov byte [esp + 0xaa], cl
mov byte [esp + 0xa9], cl
jmp case.0x6d8050.14
fld qword [0x88b7a0]
mov eax, dword [esp + 0x334]
movsx edx, word [eax + esi*4 - 2]
fstp qword [esp]
mov dword [esp + 0x228], edx
fild dword [esp + 0x228]
fmul qword [0x88b798]
fstp qword [esp + 8]
call sub.MSVCRT.dll_pow
fst qword [esp + 0x2c0]
fstp dword [esp + 0x4c]
mov byte [esp + 0xb3], 1
jmp case.0x6d8050.14
mov eax, dword [esp + 0x334]
movsx edx, word [eax + esi*4 - 2]
mov dword [esp + 0x228], edx
fild dword [esp + 0x228]
fmul dword [0x88b834]
fst qword [esp + 0x318]
fstp dword [esp + 0x48]
mov byte [esp + 0xb2], 1
jmp case.0x6d8050.14
fld qword [0x88b7a0]
mov eax, dword [esp + 0x334]
movsx edx, word [eax + esi*4 - 2]
fstp qword [esp]
mov dword [esp + 0x228], edx
fild dword [esp + 0x228]
fmul qword [0x88b798]
fstp qword [esp + 8]
call sub.MSVCRT.dll_pow
fst qword [esp + 0x2c8]
fstp dword [esp + 0x44]
mov byte [esp + 0xb1], 1
jmp case.0x6d8050.14
fld qword [0x88b7a0]
mov eax, dword [esp + 0x334]
movsx edx, word [eax + esi*4 - 2]
fstp qword [esp]
mov dword [esp + 0x228], edx
fild dword [esp + 0x228]
fmul qword [0x88b798]
fstp qword [esp + 8]
call sub.MSVCRT.dll_pow
fst qword [esp + 0x2e0]
fstp dword [esp + 0x40]
mov byte [esp + 0xb0], 1
jmp case.0x6d8050.14
fld qword [0x88b7a0]
mov eax, dword [esp + 0x334]
movsx edx, word [eax + esi*4 - 2]
fstp qword [esp]
mov dword [esp + 0x228], edx
fild dword [esp + 0x228]
fmul qword [0x88b798]
fstp qword [esp + 8]
call sub.MSVCRT.dll_pow
fst qword [esp + 0x308]
fstp dword [esp + 0x3c]
mov byte [esp + 0xaf], 1
jmp case.0x6d8050.14
fld qword [0x88b7a0]
mov eax, dword [esp + 0x334]
movsx edx, word [eax + esi*4 - 2]
fstp qword [esp]
mov dword [esp + 0x228], edx
fild dword [esp + 0x228]
fmul qword [0x88b798]
fstp qword [esp + 8]
call sub.MSVCRT.dll_pow
fst qword [esp + 0x2e8]
fstp dword [esp + 0x70]
mov byte [esp + 0xb8], 1
jmp case.0x6d8050.14
mov eax, dword [esp + 0x334]
movsx edx, word [eax + esi*4 - 2]
mov dword [esp + 0x228], edx
fild dword [esp + 0x228]
fmul dword [0x88b834]
fst qword [esp + 0x310]
fstp dword [esp + 0x6c]
mov byte [esp + 0xb7], 1
jmp case.0x6d8050.14
fld qword [0x88b7a0]
mov eax, dword [esp + 0x334]
movsx edx, word [eax + esi*4 - 2]
fstp qword [esp]
mov dword [esp + 0x228], edx
fild dword [esp + 0x228]
fmul qword [0x88b798]
fstp qword [esp + 8]
call sub.MSVCRT.dll_pow
fst qword [esp + 0x2f0]
fstp dword [esp + 0x68]
mov byte [esp + 0xb6], 1
jmp case.0x6d8050.14
fld qword [0x88b7a0]
mov eax, dword [esp + 0x334]
movsx edx, word [eax + esi*4 - 2]
fstp qword [esp]
mov dword [esp + 0x228], edx
fild dword [esp + 0x228]
fmul qword [0x88b798]
fstp qword [esp + 8]
call sub.MSVCRT.dll_pow
fst qword [esp + 0x2f8]
fstp dword [esp + 0x64]
mov byte [esp + 0xb5], 1
jmp case.0x6d8050.14
fld qword [0x88b7a0]
mov eax, dword [esp + 0x334]
movsx edx, word [eax + esi*4 - 2]
fstp qword [esp]
mov dword [esp + 0x228], edx
fild dword [esp + 0x228]
fmul qword [0x88b798]
fstp qword [esp + 8]
call sub.MSVCRT.dll_pow
fst qword [esp + 0x300]
fstp dword [esp + 0x60]
mov byte [esp + 0xb4], 1
jmp case.0x6d8050.14
fld qword [0x88b7a0]
mov eax, dword [esp + 0x334]
movsx edx, word [eax + esi*4 - 2]
fstp qword [esp]
mov dword [esp + 0x228], edx
fild dword [esp + 0x228]
fmul qword [0x88b798]
fstp qword [esp + 8]
call sub.MSVCRT.dll_pow
fst qword [esp + 0x240]
fstp dword [esp + 0x98]
mov byte [esp + 0xc6], 1
jmp case.0x6d8050.14
fld qword [0x88b7a0]
mov eax, dword [esp + 0x334]
movsx edx, word [eax + esi*4 - 2]
fstp qword [esp]
mov dword [esp + 0x228], edx
fild dword [esp + 0x228]
fmul qword [0x88b798]
fstp qword [esp + 8]
call sub.MSVCRT.dll_pow
fmul dword [0x88b844]
fst qword [esp + 0x248]
fstp dword [esp + 0x9c]
mov byte [esp + 0xc7], 1
jmp case.0x6d8050.14
fld qword [0x88b7a0]
mov eax, dword [esp + 0x334]
movsx edx, word [eax + esi*4 - 2]
fstp qword [esp]
mov dword [esp + 0x228], edx
fild dword [esp + 0x228]
fmul qword [0x88b798]
fstp qword [esp + 8]
call sub.MSVCRT.dll_pow
fst qword [esp + 0x250]
fstp dword [esp + 0x84]
mov byte [esp + 0xc1], 1
jmp case.0x6d8050.14
fld qword [0x88b7a0]
mov eax, dword [esp + 0x334]
movsx edx, word [eax + esi*4 - 2]
fstp qword [esp]
mov dword [esp + 0x228], edx
fild dword [esp + 0x228]
fmul qword [0x88b798]
fstp qword [esp + 8]
call sub.MSVCRT.dll_pow
fmul dword [0x88b844]
fst qword [esp + 0x258]
fstp dword [esp + 0x88]
mov byte [esp + 0xc2], 1
jmp case.0x6d8050.14
mov eax, dword [esp + 0x334]
movsx edx, word [eax + esi*4 - 2]
add edx, 0x1f4
mov dword [esp + 0x228], edx
fild dword [esp + 0x228]
fmul dword [0x88b838]
fst qword [esp + 0x288]
fstp dword [esp + 0x50]
mov byte [esp + 0xba], 1
jmp case.0x6d8050.14
mov eax, dword [esp + 0x334]
movsx edx, word [eax + esi*4 - 2]
mov dword [esp + 0x228], edx
fild dword [esp + 0x228]
fmul qword [0x88b798]
fst qword [esp + 0x260]
fstp dword [esp + 0x94]
mov byte [esp + 0xc5], 1
jmp case.0x6d8050.14
mov eax, dword [esp + 0x334]
movsx edx, word [eax + esi*4 - 2]
shl edx, 0xf
add dword [esp + 0x340], edx
mov ecx, dword [esp + 0x2b4]
add ecx, edx
mov dword [esp + 0x2b4], ecx
mov dword [esp + 0x1c], ecx
mov byte [esp + 0xa7], 1
jmp case.0x6d8050.14
mov eax, dword [esp + 0x334]
movsx edx, word [eax + esi*4 - 2]
mov dword [esp + 0x228], edx
fild dword [esp + 0x228]
fmul qword [0x88b790]
fst qword [esp + 0x268]
fstp dword [esp + 0x7c]
mov byte [esp + 0xbf], 1
jmp case.0x6d8050.14
mov eax, dword [esp + 0x334]
movsx edx, word [eax + esi*4 - 2]
mov dword [esp + 0x228], edx
fild dword [esp + 0x228]
fmul qword [0x88b798]
fst qword [esp + 0x270]
fstp dword [esp + 0x8c]
mov byte [esp + 0xc3], 1
jmp case.0x6d8050.14
mov eax, dword [esp + 0x334]
movsx edx, word [eax + esi*4 - 2]
mov dword [esp + 0x228], edx
fild dword [esp + 0x228]
fmul qword [0x88b780]
fst qword [esp + 0x2a0]
fstp dword [esp + 0x78]
mov byte [esp + 0xbe], 1
jmp case.0x6d8050.14
fld qword [0x88b7a0]
mov eax, dword [esp + 0x334]
movsx edx, word [eax + esi*4 - 2]
fstp qword [esp]
mov dword [esp + 0x228], edx
fild dword [esp + 0x228]
fmul qword [0x88b798]
fstp qword [esp + 8]
call sub.MSVCRT.dll_pow
fmul dword [0x88b844]
fst qword [esp + 0x298]
fstp dword [esp + 0x74]
mov byte [esp + 0xbd], 1
jmp case.0x6d8050.14
mov eax, dword [esp + 0x334]
movsx edx, word [eax + esi*4 - 2]
mov dword [esp + 0x228], edx
fild dword [esp + 0x228]
fmul qword [0x88b798]
fst qword [esp + 0x320]
fstp dword [esp + 0x80]
mov byte [esp + 0xc0], 1
jmp case.0x6d8050.14
mov eax, dword [esp + 0x334]
movsx edx, word [eax + esi*4 - 2]
mov dword [esp + 0x228], edx
fild dword [esp + 0x228]
fmul qword [0x88b798]
fst qword [esp + 0x278]
fstp dword [esp + 0xa0]
mov byte [esp + 0xc8], 1
jmp case.0x6d8050.14
mov eax, dword [esp + 0x334]
movsx edx, word [eax + esi*4 - 2]
mov dword [esp + 0x228], edx
fild dword [esp + 0x228]
fmul qword [0x88b798]
fst qword [esp + 0x280]
fstp dword [esp + 0x90]
mov byte [esp + 0xc4], 1
jmp case.0x6d8050.14
mov eax, dword [esp + 0x334]
movsx edx, word [eax + esi*4 - 2]
shl edx, 0xf
add dword [esp + 0x33c], edx
mov ecx, dword [esp + 0x2ac]
add ecx, edx
mov dword [esp + 0x2ac], ecx
mov dword [esp + 0x18], ecx
mov byte [esp + 0xa6], 1
jmp case.0x6d8050.14
mov eax, dword [esp + 0x334]
movsx edx, word [eax + esi*4 - 2]
mov ecx, dword [esp + 0x330]
add dword [esp + 0x34c], edx
add ecx, edx
mov dword [esp + 0x330], ecx
mov dword [esp + 0x14], ecx
mov byte [esp + 0xa5], 1
jmp case.0x6d8050.14
mov eax, dword [esp + 0x334]
movsx edx, word [eax + esi*4 - 2]
mov ecx, dword [esp + 0x230]
add dword [esp + 0x338], edx
add ecx, edx
mov dword [esp + 0x230], ecx
mov dword [esp + 0x10], ecx
mov byte [esp + 0xa4], 1
jmp case.0x6d8050.14
mov eax, dword [esp + 0x334]
movsx edx, word [eax + esi*4 - 2]
mov ecx, dword [esp + 0x2b4]
add dword [esp + 0x340], edx
add ecx, edx
mov dword [esp + 0x2b4], ecx
mov dword [esp + 0x1c], ecx
mov byte [esp + 0xa7], 1
jmp case.0x6d8050.14
mov eax, dword [esp + 0x334]
movsx edx, word [eax + esi*4 - 2]
mov ecx, dword [esp + 0x2ac]
add dword [esp + 0x33c], edx
add ecx, edx
mov dword [esp + 0x2ac], ecx
mov dword [esp + 0x18], ecx
mov byte [esp + 0xa6], 1
cmp esi, ebp
jl 0x6d8034
mov ebp, dword [esp + 0x234]
mov al, byte [ebp + 0x1f0]
test al, al
je 0x6d8b7a
mov eax, dword [esp + 0x2d0]
cmp eax, 0xffffffff
jne 0x6d8b7a
lea esi, [esp + 0x10]
mov edi, dword [esp + 0x2d8]
mov ecx, 0x2f
rep movsd dword es:[edi], dword [esi]
mov byte [ebp + 0x1f0], 0
mov eax, dword [esp + 0x2b8]
mov esi, dword [esp + 0x2d4]
cmp eax, esi
mov ecx, dword [esp + 0x23c]
mov edi, dword [esp + 0x2b0]
mov edx, esi
jg 0x6d8ba5
mov edx, eax
mov dword [esp + 0x2b4], edx
jg 0x6d8bb0
mov eax, esi
mov dword [esp + 0x2b8], eax
cmp ecx, edi
mov esi, 0
mov eax, edi
jg 0x6d8bc4
mov eax, ecx
mov dword [esp + 0x2ac], eax
mov edx, eax
mov eax, ecx
jg 0x6d8bd3
mov eax, edi
cmp edx, 0
cmovl edx, esi
cmp eax, 0x7f
mov dword [esp + 0x2ac], edx
mov edx, 0x7f
cmovg eax, edx
mov edx, dword [esp + 0x2b4]
cmp edx, 0
mov dword [esp + 0x2b0], eax
mov eax, 0
cmovl edx, eax
mov eax, 0x7f
mov dword [esp + 0x2b4], edx
mov edx, dword [esp + 0x2b8]
cmp edx, 0x7f
cmovg edx, eax
mov eax, dword [esp + 0x334]
mov dword [esp + 0x2b8], edx
push eax
call fcn.007703b0
pop ecx
mov eax, dword [esp + 0x2d0]
cmp eax, 0xffffffff
je 0x6da297
fld dword [ebp + 4]
fld dword [0x88b84c]
fsubr st(1)
fabs
fld qword [0x88b778]
fcompi st(1)
fstp st(0)
fld qword [esp + 0x288]
fcmovb st(0), st(1)
fstp st(1)
fstp qword [esp + 0x288]
fld qword [esp + 0x290]
fmul dword [ebp + 0x68]
fstp qword [esp + 0x290]
fld qword [esp + 0x298]
fmul dword [ebp + 0x6c]
fstp qword [esp]
call sub.MSVCRT.dll_log
mov eax, dword [esp + 0x238]
movzx edx, al
fadd qword [0x88b770]
fmul qword [0x88b768]
fld dword [0x88b854]
fcomi st(1)
fcmovb st(0), st(1)
fstp st(1)
fld dword [0x88b840]
fcomi st(1)
fcmovnbe st(0), st(1)
fstp st(1)
fstp qword [esp + 0x298]
fld dword [ebp + 0x70]
fld qword [0x88b760]
fcompi st(1)
fld qword [esp + 0x2a0]
fcmovb st(0), st(1)
fstp st(1)
fstp qword [esp + 0x2a0]
test edx, edx
je 0x6d8cef
mov al, byte [ebp + 0x74]
test al, al
je 0x6d8cef
mov al, 1
jmp 0x6d8cf1
xor al, al
mov byte [esp + 0x2d4], al
mov esi, dword [ebp + 0x58]
cmp esi, 0xffffffff
je 0x6d8d45
mov eax, dword [ebp + 0x5c]
cmp eax, 0xffffffff
je 0x6d8d45
mov edx, dword [esp + 0x2b8]
cmp edx, esi
jl 0x6da297
mov edx, dword [esp + 0x2b4]
cmp edx, eax
jg 0x6da297
cmp esi, edx
cmovg edx, esi
mov dword [esp + 0x2b4], edx
mov edx, dword [esp + 0x2b8]
cmp eax, edx
cmovl edx, eax
mov dword [esp + 0x2b8], edx
mov eax, dword [ebp + 0x64]
cmp eax, 0xffffffff
je 0x6d8d60
mov edx, dword [esp + 0x2ac]
cmp eax, edx
cmovg edx, eax
mov dword [esp + 0x2ac], edx
mov eax, dword [ebp + 0x60]
cmp eax, 0xffffffff
je 0x6d8d7b
mov edx, dword [esp + 0x2b0]
cmp eax, edx
cmovl edx, eax
mov dword [esp + 0x2b0], edx
lea ecx, [esp + 0xcc]
call fcn.006ebda8
xor esi, esi
lea edx, [ebp + 0x300]
mov eax, edx
xor ecx, ecx
mov edi, dword [esp + 0x2d0]
test edi, edi
jle 0x6d8dd2
mov dword [esp + 0x330], edx
mov edx, edi
mov dword [esp + 0x334], esi
mov dword [esp + 0x234], ebp
mov eax, dword [eax + 4]
inc ecx
cmp ecx, edx
jl 0x6d8db5
mov edx, dword [esp + 0x330]
mov esi, dword [esp + 0x334]
mov ebp, dword [esp + 0x234]
mov edi, dword [eax]
xor eax, eax
movzx ecx, word [edi + 0x2c]
mov dword [esp + 0x348], edi
cmp ecx, 0xf
mov dword [esp + 0x238], eax
jle 0x6d8e3c
mov ecx, dword [esp + 0xcc]
test ecx, ecx
je 0x6d8e0c
mov dword [esp + 0xcc], 0
je 0x6d8e0c
push 1
call fcn.00433260
mov ecx, dword [esp + 0xd0]
test ecx, ecx
je 0x6d8e2b
je 0x6d8e2b
mov dword [esp + 0xd0], 0
push 1
call fcn.00433290
xor eax, eax
add esp, 0x354
pop ebp
pop esi
pop edi
mov esp, ebx
pop ebx
ret 0x14
mov eax, edi
xor edi, edi
mov dword [esp + 0x230], eax
mov eax, edx
mov dword [esp + 0x2d0], edi
mov edi, dword [ebp + 0x300]
test edi, edi
je 0x6d8eb1
mov dword [esp + 0x330], edx
mov edx, dword [esp + 0x2d0]
mov dword [esp + 0x334], esi
mov dword [esp + 0x2d8], ecx
mov dword [esp + 0x234], ebp
lea esi, [esi]
inc edx
mov eax, dword [eax + 4]
mov ecx, dword [eax]
test ecx, ecx
jne 0x6d8e84
mov dword [esp + 0x2d0], edx
mov edx, dword [esp + 0x330]
mov esi, dword [esp + 0x334]
mov ecx, dword [esp + 0x2d8]
mov ebp, dword [esp + 0x234]
mov al, byte [0x84f844]
test al, al
je 0x6d8edf
and ecx, 0xf
cmp ecx, 4
je 0x6da392
cmp ecx, 2
je 0x6da339
mov eax, dword [esp + 0x348]
mov dword [esp + 0x230], eax
jmp 0x6d8eed
mov eax, dword [esp + 0x348]
mov dword [esp + 0x230], eax
mov eax, dword [esp + 0x230]
test eax, eax
je 0x6da70d
mov edx, dword [ebp + 0x1f8]
mov eax, dword [ebp + 0x1f4]
mov edi, dword [eax + edx*4 + 0x1f30]
mov dword [esp + 0x23c], edi
test edi, edi
je 0x6da6be
mov eax, dword [esp + 0x2bc]
cmp eax, 0xffffffff
je 0x6da6a7
mov edx, 0x3c
cmp eax, 0xff
cmove eax, edx
lea ecx, [esp + 0xd4]
mov dword [esp + 0x2bc], eax
call fcn.00736414
lea ecx, [esp + 0xd8]
call fcn.00736414
lea ecx, [esp + 0xdc]
call fcn.00736414
lea edi, [esp + 0xe0]
xor eax, eax
mov ecx, 0x40
rep stosd dword es:[edi], eax
lea edx, [esp + 0xe0]
push 0x14
mov eax, dword [esp + 0x234]
push eax
push edx
call dword [sym.imp.MSVCRT.dll_strncpy]
add esp, 0xc
lea ecx, [esp + 0x1e0]
lea eax, [esp + 0xe0]
push eax
call fcn.00701780
lea ecx, [esp + 0xd4]
push eax
call fcn.007017d0
lea ecx, [esp + 0x1e0]
call fcn.00701810
test esi, esi
je 0x6d9013
lea edi, [esp + 0xe0]
xor eax, eax
mov ecx, 0x40
rep stosd dword es:[edi], eax
lea eax, [esp + 0xe0]
push 0x14
push esi
push eax
call dword [sym.imp.MSVCRT.dll_strncpy]
add esp, 0xc
lea ecx, [esp + 0x1e4]
lea eax, [esp + 0xe0]
push eax
call fcn.00701780
lea ecx, [esp + 0xd8]
push eax
call fcn.007017d0
lea ecx, [esp + 0x1e4]
call fcn.00701810
lea ecx, [esp + 0xcc]
lea edi, [ebp + 0x2c0]
lea esi, [esp + 0xd4]
lea edx, [esp + 0xd8]
lea eax, [esp + 0xdc]
push eax
push edx
push esi
push edi
call fcn.006ef530
movzx eax, al
test eax, eax
je 0x6da2a8
mov eax, dword [esp + 0x238]
test eax, eax
je 0x6d91a8
mov eax, dword [esp + 0x23c]
mov eax, dword [eax + 0x8e18]
xor esi, esi
test eax, eax
jle 0x6d912e
mov dword [esp + 0x230], eax
mov dword [esp + 0x234], ebp
lea esi, [esi]
mov eax, dword [esp + 0x23c]
mov eax, dword [eax + esi*4 + 0x10]
movzx ecx, byte [eax + 0x140]
mov edx, dword [esp + 0x2bc]
cmp ecx, edx
jne 0x6d9117
movzx ecx, byte [eax + 0x138]
mov edx, dword [esp + 0x2ac]
cmp ecx, edx
jne 0x6d9117
movzx ecx, byte [eax + 0x139]
mov edx, dword [esp + 0x2b0]
cmp ecx, edx
jne 0x6d9117
movzx ecx, byte [eax + 0x13a]
mov edx, dword [esp + 0x2b4]
cmp ecx, edx
jne 0x6d9117
movzx ecx, byte [eax + 0x13b]
mov edx, dword [esp + 0x2b8]
cmp ecx, edx
jne 0x6d9117
mov ecx, dword [eax + 0x28]
test ecx, ecx
je 0x6d9117
add ecx, 0x344
lea eax, [esp + 0xcc]
push 1
push eax
call fcn.006ea21c
mov dword [esp + 0x238], eax
movzx ebp, al
test ebp, ebp
jne 0x6da3e1
inc esi
mov eax, dword [esp + 0x230]
cmp esi, eax
jl 0x6d9084
mov ebp, dword [esp + 0x234]
cmp esi, eax
jge 0x6d91a8
lea ecx, [esp + 0xdc]
call fcn.00701810
lea ecx, [esp + 0xd8]
call fcn.00701810
lea ecx, [esp + 0xd4]
call fcn.00701810
mov ecx, dword [esp + 0xcc]
test ecx, ecx
je 0x6d9175
mov dword [esp + 0xcc], 0
je 0x6d9175
push 1
call fcn.00433260
mov ecx, dword [esp + 0xd0]
test ecx, ecx
je 0x6d9194
je 0x6d9194
mov dword [esp + 0xd0], 0
push 1
call fcn.00433290
mov eax, 1
add esp, 0x354
pop ebp
pop esi
pop edi
mov esp, ebx
pop ebx
ret 0x14
mov eax, dword [ebp + 0x1f4]
push dword [eax + 0x1e68]
push dword [eax + 0x1ae4]
push 0xffffffffffffffff
mov ecx, dword [esp + 0x248]
call fcn.006b70b8
mov esi, eax
test esi, esi
je 0x6da634
xor dl, dl
lea edi, [esp + 0xe0]
mov byte [esp + 0x2d0], dl
push dword [ebx + 0x14]
push 0x88be4c
push edi
call dword [sym.imp.MSVCRT.dll_sprintf]
add esp, 0xc
lea ecx, [esp + 0x1e8]
lea edx, [esp + 0xe0]
push edx
call fcn.00701780
lea ecx, [esi + 4]
push eax
call fcn.007017d0
lea ecx, [esp + 0x1e8]
call fcn.00701810
mov dl, byte [esp + 0x2d4]
mov edi, dword [esp + 0x344]
test edi, edi
mov byte [esi + 0x20], dl
jle 0x6d9237
mov edx, edi
mov dword [esi + 0x10], edx
mov edx, 1
mov edi, 3
mov dword [esi + 0x4168], edx
mov byte [esi + 0x4386], dl
mov byte [esi + 0x4387], 6
mov word [esi + 0x40e8], dx
mov dword [esi + 0x40ec], 0x3f800000
mov dword [esi + 0x46b8], edx
mov byte [esi + 0x48d6], dl
mov byte [esi + 0x48d7], dl
mov word [esi + 0x4638], di
mov dword [esi + 0x463c], 0x3daaaaab
mov dword [esi + 0x5a8], edx
mov dword [esi + 0x8bc], 2
mov word [esi + 0x528], dx
mov dword [esi + 0x52c], 0x3f800000
mov byte [esi + 0x8cc], dl
mov dword [esi + 0x5dc], 0
fld qword [esp + 0x308]
fmul dword [ebp + 8]
fmul dword [0x88b82c]
fst qword [esp + 0x308]
fstp dword [esi + 0x5e4]
fld qword [esp + 0x2e0]
fmul dword [ebp + 0xc]
fmul dword [0x88b82c]
fstp dword [esi + 0x5e8]
fld qword [esp + 0x2c8]
fmul dword [ebp + 0x10]
fmul dword [0x88b82c]
fstp dword [esi + 0x5ec]
fld qword [esp + 0x318]
fadd dword [ebp + 0x14]
fld dword [0x88b828]
fcomi st(1)
fcmovnbe st(0), st(1)
fstp st(1)
fld dword [0x88b854]
fcomi st(1)
fcmovb st(0), st(1)
fstp st(1)
fchs
fld qword [0x88b7a0]
fstp qword [esp]
fmul qword [0x88b758]
fstp qword [esp + 8]
call sub.MSVCRT.dll_pow
fstp dword [esi + 0x5e0]
fld qword [esp + 0x2c0]
fmul dword [ebp + 0x18]
fmul dword [0x88b82c]
fstp dword [esi + 0x5f0]
fld qword [0x88b750]
fld qword [esp + 0x308]
fcompi st(1)
fstp st(0)
jb 0x6d93a4
mov dl, 1
mov edi, 4
mov byte [esp + 0x2d0], dl
mov edx, 1
mov dword [esi + 0x4410], edx
mov byte [esi + 0x462e], dl
mov byte [esi + 0x462f], 6
mov word [esi + 0x4390], di
mov dword [esi + 0x4394], 0x3f800000
mov edx, 1
fld qword [esp + 0x320]
fadd st(0)
fld qword [esp + 0x268]
fadd st(0)
mov dword [esp + 0x238], edx
mov dword [esp + 0x230], esi
mov dword [esp + 0x234], ebp
fstp qword [esp + 0x2c0]
fstp qword [esp + 0x2c8]
fld qword [esp + 0x268]
jmp 0x6d93f5
mov dword [esp + 0x238], esi
fld qword [esp + 0x268]
fld dword [0x88b824]
fcompi st(1)
jb 0x6d9424
fld dword [0x88b820]
fcompi st(1)
jbe 0x6d9414
fstp st(0)
mov esi, dword [esp + 0x238]
jmp 0x6d9434
fstp st(0)
mov esi, dword [esp + 0x238]
jmp 0x6d963d
fstp st(0)
mov esi, dword [esp + 0x238]
lea esi, [esi]
imul ebp, esi, 0x3bc
mov eax, dword [esp + 0x230]
lea edx, [eax + ebp]
mov dword [edx + 0x8bc], 2
cmp esi, 1
jne 0x6d94e4
mov al, 1
mov ecx, 4
mov byte [esp + 0x2d0], al
mov word [edx + 0x528], cx
fld qword [esp + 0x2c0]
fstp dword [esp + 0x1ec]
mov edi, dword [esp + 0x1ec]
and edi, 0x40000000
add edi, edi
sar edi, 0x1f
and edi, 0x7fffffff
mov eax, edi
mov dword [esp + 0x1f0], edi
xor eax, 0xffffffff
and edi, 0x40000000
and eax, dword [esp + 0x1ec]
or eax, edi
mov dword [esp + 0x1ec], eax
movss xmm1, dword [esp + 0x1ec]
mulss xmm1, dword [0x88b84c]
mov eax, dword [esp + 0x230]
movss dword [ebp + eax + 0x52c], xmm1
jmp 0x6d955e
cmp esi, 2
jne 0x6d955e
mov eax, 3
mov word [edx + 0x528], ax
fld qword [esp + 0x2c8]
mov eax, dword [esp + 0x230]
fstp dword [esp + 0x1ec]
mov ecx, dword [esp + 0x1ec]
and ecx, 0x40000000
add ecx, ecx
sar ecx, 0x1f
and ecx, 0x7fffffff
mov dword [esp + 0x1f0], ecx
mov edi, ecx
xor edi, 0xffffffff
and edi, dword [esp + 0x1ec]
and ecx, 0x40000000
or edi, ecx
mov dword [esp + 0x1ec], edi
movss xmm1, dword [esp + 0x1ec]
mulss xmm1, dword [0x88b84c]
movss dword [ebp + eax + 0x52c], xmm1
mov eax, 1
mov edi, dword [esp + 0x230]
mov ecx, dword [esp + 0x234]
mov byte [ebp + edi + 0x8cc], al
cmp esi, 1
mov dword [edx + 0x5a8], eax
mov dword [ebp + edi + 0x5dc], 0
fld qword [esp + 0x300]
fmul dword [ecx + 0x1c]
fmul dword [0x88b82c]
fst dword [edx + 0x5e4]
fld qword [esp + 0x2f8]
fmul dword [ecx + 0x20]
fmul dword [0x88b82c]
fstp dword [ebp + edi + 0x5e8]
fld qword [esp + 0x2f0]
fmul dword [ecx + 0x24]
fmul dword [0x88b82c]
fstp dword [ebp + edi + 0x5ec]
je 0x6da614
fstp st(0)
fld qword [esp + 0x310]
mov eax, ecx
fadd dword [eax + 0x28]
fld dword [0x88b828]
fcomi st(1)
fcmovnbe st(0), st(1)
fstp st(1)
fld dword [0x88b854]
fcomi st(1)
fcmovb st(0), st(1)
fstp st(1)
fchs
fld qword [0x88b7a0]
fstp qword [esp]
fmul qword [0x88b758]
fstp qword [esp + 8]
call sub.MSVCRT.dll_pow
mov edx, edi
mov eax, dword [esp + 0x234]
fstp dword [ebp + edx + 0x5e0]
fld qword [esp + 0x2e8]
fmul dword [eax + 0x2c]
fmul dword [0x88b82c]
fstp dword [ebp + edx + 0x5f0]
inc esi
cmp esi, 3
jge 0x6d9664
cmp esi, 1
je 0x6d93e7
cmp esi, 2
je 0x6da3f4
jmp 0x6d9434
mov esi, dword [esp + 0x230]
mov ebp, dword [esp + 0x234]
mov eax, 3
fld qword [esp + 0x260]
fadd st(0)
fld qword [esp + 0x280]
fadd st(0)
fld qword [esp + 0x270]
fadd st(0)
mov dword [esp + 0x230], esi
mov dword [esp + 0x234], ebp
fld qword [esp + 0x280]
fld qword [esp + 0x270]
fld qword [esp + 0x260]
jmp 0x6d96d2
mov dword [esp + 0x230], esi
mov dword [esp + 0x234], ebp
fstp st(1)
fstp st(0)
fld qword [esp + 0x270]
fxch st(1)
fld dword [0x88b824]
fcomi st(2)
jb 0x6d9754
fld dword [0x88b820]
fcompi st(3)
jbe 0x6d9724
cmp eax, 4
jne 0x6da434
fstp st(2)
mov esi, dword [esp + 0x230]
mov ebp, dword [esp + 0x234]
fld qword [esp + 0x258]
fld qword [esp + 0x250]
fxch st(1)
fxch st(2)
fxch st(3)
jmp 0x6d9784
fstp st(0)
fstp st(1)
mov esi, dword [esp + 0x230]
mov ebp, dword [esp + 0x234]
fld qword [esp + 0x258]
fld qword [esp + 0x250]
jmp 0x6d9953
cmp eax, 4
jne 0x6da5ee
fstp st(2)
mov esi, dword [esp + 0x230]
mov ebp, dword [esp + 0x234]
fld qword [esp + 0x258]
fld qword [esp + 0x250]
fxch st(1)
fxch st(2)
fxch st(3)
lea esi, [esi]
fcompi st(4)
jb 0x6d9796
fld dword [0x88b820]
fcompi st(4)
jbe 0x6d9953
imul ecx, eax, 0x3bc
lea edi, [esi + ecx]
mov edx, 1
mov dword [edi + 0x5a8], edx
cmp eax, 3
mov dword [edi + 0x8bc], edx
je 0x6d98b4
cmp eax, 4
jne 0x6d9834
mov edx, 3
mov word [edi + 0x528], dx
fxch st(5)
fst dword [esp + 0x1ec]
mov edx, dword [esp + 0x1ec]
and edx, 0x40000000
add edx, edx
sar edx, 0x1f
and edx, 0x7fffffff
mov dword [esp + 0x1f0], edx
mov edi, edx
xor edi, 0xffffffff
and edi, dword [esp + 0x1ec]
and edx, 0x40000000
or edi, edx
mov dword [esp + 0x1ec], edi
movss xmm0, dword [esp + 0x1ec]
mulss xmm0, dword [0x88b84c]
movss dword [ecx + esi + 0x52c], xmm0
fxch st(5)
jmp 0x6d9928
cmp eax, 5
jne 0x6d9928
mov edx, 1
mov word [edi + 0x528], dx
fxch st(6)
fst dword [esp + 0x1ec]
mov edx, dword [esp + 0x1ec]
and edx, 0x40000000
add edx, edx
sar edx, 0x1f
and edx, 0x7fffffff
mov dword [esp + 0x1f0], edx
mov edi, edx
xor edi, 0xffffffff
and edi, dword [esp + 0x1ec]
and edx, 0x40000000
or edi, edx
mov dword [esp + 0x1ec], edi
movss xmm0, dword [esp + 0x1ec]
mulss xmm0, dword [0x88b84c]
movss dword [ecx + esi + 0x52c], xmm0
fxch st(6)
jmp 0x6d9928
mov dl, 1
mov byte [esp + 0x2d0], dl
mov edx, 4
mov word [edi + 0x528], dx
fxch st(4)
fst dword [esp + 0x1ec]
mov edx, dword [esp + 0x1ec]
and edx, 0x40000000
add edx, edx
sar edx, 0x1f
and edx, 0x7fffffff
mov dword [esp + 0x1f0], edx
mov edi, edx
xor edi, 0xffffffff
and edi, dword [esp + 0x1ec]
and edx, 0x40000000
or edi, edx
mov dword [esp + 0x1ec], edi
movss xmm0, dword [esp + 0x1ec]
mulss xmm0, dword [0x88b84c]
movss dword [ecx + esi + 0x52c], xmm0
fxch st(4)
mov byte [ecx + esi + 0x8cc], 0
fld st(1)
mov dword [ecx + esi + 0x5b0], 2
fmul dword [ebp + 0x34]
fstp dword [ecx + esi + 0x8c4]
fld st(0)
fmul dword [ebp + 0x30]
fstp dword [ecx + esi + 0x5b4]
inc eax
cmp eax, 6
jge 0x6d9984
cmp eax, 3
je 0x6d96b7
cmp eax, 4
je 0x6da494
cmp eax, 5
je 0x6da464
jmp 0x6d9796
fstp st(4)
fstp st(4)
fstp st(4)
fstp st(0)
fstp st(2)
fstp st(0)
fstp st(0)
fld dword [0x88b824]
fld qword [esp + 0x278]
fcompi st(1)
fstp st(0)
ja 0x6d99bc
fld dword [0x88b820]
fld qword [esp + 0x278]
fcompi st(1)
fstp st(0)
jae 0x6d9a6d
mov edx, 1
mov edi, 3
mov dword [esi + 0x1c10], edx
mov dword [esi + 0x1f24], edx
mov word [esi + 0x1b90], di
fld qword [esp + 0x278]
fadd st(0)
fstp dword [esp + 0x1ec]
mov edx, dword [esp + 0x1ec]
and edx, 0x40000000
add edx, edx
sar edx, 0x1f
and edx, 0x7fffffff
mov edi, edx
mov dword [esp + 0x1f0], edx
xor edi, 0xffffffff
and edx, 0x40000000
and edi, dword [esp + 0x1ec]
or edi, edx
mov dword [esp + 0x1ec], edi
movss xmm0, dword [esp + 0x1ec]
mulss xmm0, dword [0x88b84c]
movss dword [esi + 0x1b94], xmm0
mov byte [esi + 0x1f34], 0
mov dword [esi + 0x1c18], 2
fld qword [esp + 0x248]
fmul dword [ebp + 0x3c]
fstp dword [esi + 0x1f2c]
fld qword [esp + 0x240]
fmul dword [ebp + 0x38]
fstp dword [esi + 0x1c1c]
fld dword [0x88b818]
fld qword [esp + 0x298]
fcompi st(1)
fstp st(0)
jb 0x6d9a8f
mov dl, byte [esp + 0x2d0]
test dl, dl
je 0x6d9b81
mov dword [esi + 0x95e8], 3
movss xmm4, dword [0x88b80c]
movss xmm3, dword [0x88b808]
fld dword [0x88b814]
fld dword [0x88b810]
fld qword [esp + 0x298]
fmul st(1)
fadd st(2)
fstp dword [esp + 0x1ec]
mov edi, dword [esp + 0x1ec]
and edi, 0x40000000
add edi, edi
sar edi, 0x1f
and edi, 0x7fffffff
mov edx, edi
xor edx, 0xffffffff
and edi, 0x40000000
and edx, dword [esp + 0x1ec]
or edx, edi
mov dword [esp + 0x1ec], edx
movss xmm1, dword [esp + 0x1ec]
addss xmm1, xmm4
mulss xmm1, xmm3
fmul qword [esp + 0x2a0]
faddp st(1)
fstp dword [esp + 0x1ec]
mov edx, dword [esp + 0x1ec]
and edx, 0x40000000
add edx, edx
sar edx, 0x1f
and edx, 0x7fffffff
mov edi, edx
mov dword [esp + 0x1f0], edx
xor edi, 0xffffffff
and edx, 0x40000000
and edi, dword [esp + 0x1ec]
or edi, edx
mov dword [esp + 0x1ec], edi
addss xmm4, dword [esp + 0x1ec]
mulss xmm4, xmm3
movss dword [esi + 0x95fc], xmm4
mov dl, byte [esi + 0x462e]
cmp dl, 1
je 0x6da5a9
movss dword [esi + 0x95f8], xmm1
push esi
mov ecx, dword [esp + 0x240]
call fcn.004e3efc
mov edi, eax
test edi, edi
jl 0x6da53d
push esi
mov ecx, dword [esp + 0x240]
call fcn.006c2a68
push eax
mov ecx, dword [esp + 0x240]
call fcn.006c2bb8
mov edx, dword [esp + 0x23c]
mov esi, dword [edx + edi*4 + 0x4010]
push esi
mov ecx, dword [esp + 0x240]
call fcn.006c2a68
push eax
mov ecx, dword [esp + 0x240]
call fcn.006c2738
mov dword [esp + 0x2d8], eax
mov edx, eax
test edx, edx
je 0x6da4ca
push 0
call fcn.006f4c6c
mov dword [esp + 0x2d4], eax
add esp, 4
xor edx, edx
lea ecx, [ebp + 0x2e8]
mov dword [esp + 0x238], edx
mov dword [esp + 0x2d4], ecx
call fcn.006ea05c
movzx edx, al
test edx, edx
je 0x6da4b0
mov edx, dword [esp + 0x2d8]
push edx
mov ecx, dword [esp + 0x240]
call fcn.006c29c8
lea edi, [esp + 0xcc]
mov edx, dword [ebp + 0x1f4]
add edx, 4
movzx ecx, byte [ebp + 0x1f3]
mov eax, dword [esp + 0x238]
push eax
xor eax, eax
push ecx
push eax
push dword [ebp + 0x1fc]
push eax
mov eax, dword [esp + 0x2e4]
push eax
push edx
push edi
mov ecx, dword [esp + 0x2f8]
call fcn.006e002c
cmp eax, 4
je 0x6da4a4
test eax, eax
jne 0x6da214
mov byte [ebp + 0x1f3], 0
mov edx, dword [esp + 0x2d8]
push edx
mov ecx, dword [esp + 0x240]
call fcn.006c29c8
mov edi, dword [ebx + 0x18]
mov edx, dword [esp + 0x2a8]
test edx, edx
mov dword [edi], eax
jne 0x6d9ce6
xor edx, edx
mov edi, dword [esp + 0x2d8]
mov dword [edi + 0x58], edx
mov dword [edi + 0x5c], edx
mov dword [edi + 0x60], edx
mov dword [edi + 0x6c], edx
mov byte [edi + 0x64], dl
mov dword [edi + 0x68], 0x3f800000
mov byte [edi + 0x65], dl
mov byte [edi + 0x66], dl
mov edx, dword [edi + 0x28]
mov dword [esp + 0x23c], edx
jmp 0x6d9dc4
mov ecx, dword [esp + 0x2d4]
call fcn.006ea05c
movzx edx, al
test edx, edx
je 0x6d9d0f
mov edx, dword [esp + 0x2d8]
mov edi, dword [edx + 0x28]
mov dword [esp + 0x23c], edi
jmp 0x6d9dc4
mov edx, dword [esp + 0x2d8]
mov edi, dword [edx + 0x28]
mov edx, dword [edi + 0x234]
mov dword [esp + 0x23c], edi
test edx, edx
je 0x6d9dc4
mov edi, dword [esp + 0x2d8]
mov eax, dword [edi + 0x58]
mov edx, dword [edi + 0x5c]
add edx, dword [edi + 0x58]
mov edi, dword [esp + 0x23c]
mov edi, dword [edi + 0x35c]
mov dword [esp + 0x2a8], edi
add eax, dword [esp + 0x338]
add dword [esp + 0x34c], edx
xor edx, edx
cmp eax, 0
cmovg edx, eax
mov dword [esp + 0x2d0], edx
lea edx, [edx + 4]
cmp edx, edi
jle 0x6d9d8e
mov edx, edi
lea edi, [edx - 4]
mov eax, dword [esp + 0x2d8]
mov dword [esp + 0x2d0], edi
mov dword [eax + 0x58], edi
jmp 0x6d9d9f
mov edi, dword [esp + 0x2d0]
mov eax, dword [esp + 0x2d8]
mov dword [eax + 0x58], edi
mov edi, dword [esp + 0x34c]
cmp edx, edi
jg 0x6d9dac
mov edx, edi
mov edi, dword [esp + 0x2a8]
cmp edx, edi
cmovl edi, edx
mov edx, eax
sub edi, dword [esp + 0x2d0]
mov dword [edx + 0x5c], edi
mov edx, dword [esp + 0x2bc]
mov edi, dword [esp + 0x2d8]
mov byte [edi + 0x140], dl
mov edx, dword [esp + 0x348]
movsx edx, byte [edx + 0x29]
fld qword [0x88b7a0]
fstp qword [esp]
mov dword [esp + 0x228], edx
fild dword [esp + 0x228]
fmul qword [0x88b798]
fstp qword [esp + 8]
call sub.MSVCRT.dll_pow
mov edx, edi
mov edi, dword [esp + 0x23c]
fmul qword [esp + 0x290]
fstp dword [edx + 0x14c]
mov edx, dword [edi + 0x360]
cmp edx, 2
jge 0x6d9e3e
fld qword [esp + 0x288]
mov edx, dword [esp + 0x2d8]
fstp dword [edx + 0x148]
mov edx, dword [esp + 0x2b4]
mov edi, dword [esp + 0x2d8]
mov byte [edi + 0x13a], dl
mov edx, dword [esp + 0x2b8]
mov byte [edi + 0x13b], dl
mov edx, dword [esp + 0x2ac]
mov byte [edi + 0x138], dl
mov edx, dword [esp + 0x2b0]
mov byte [edi + 0x139], dl
mov edx, dword [esp + 0x33c]
mov dword [edi + 0x130], edx
mov edx, dword [esp + 0x340]
neg edx
mov dword [edi + 0x134], edx
xor edx, edx
push edx
push edx
push 1
mov ecx, edi
call fcn.006e3dcc
lea ecx, [esp + 0x1f8]
call fcn.00736414
mov ecx, dword [esp + 0x2d4]
call fcn.006ea05c
movzx edx, al
test edx, edx
jne 0x6da192
mov edx, edi
mov edi, dword [edx + 0x28]
mov edx, dword [edi + 0x234]
test edx, edx
je 0x6da192
lea ecx, [esp + 0x1fc]
call fcn.006ebda8
mov ecx, dword [ebp + 0x1f4]
add ecx, 4
mov edx, dword [esp + 0x2d8]
push dword [edx + 0x28]
call fcn.006d47a4
mov edi, eax
mov edx, dword [esp + 0x2d8]
mov ecx, dword [edx + 0x28]
add ecx, 0x344
lea edx, [esp + 0x204]
push edx
call fcn.006ec268
lea ecx, [esp + 0x204]
lea edx, [esp + 0x20c]
push 0
push edx
call fcn.006ecde8
lea edx, [esp + 0x1f8]
push dword [esp + 0x20c]
push edi
push 0x86d9dc
push edx
call fcn.007020f0
add esp, 0x10
lea ecx, [esp + 0x20c]
call fcn.00701810
mov ecx, dword [esp + 0x204]
test ecx, ecx
je 0x6d9f79
mov dword [esp + 0x204], 0
je 0x6d9f79
push 1
call fcn.00433260
mov ecx, dword [esp + 0x208]
test ecx, ecx
je 0x6d9f98
mov dword [esp + 0x208], 0
je 0x6d9f98
push 1
call fcn.00433290
lea ecx, [esp + 0x1f8]
push 1
call fcn.00701c60
lea ecx, [esp + 0x210]
call fcn.006ebda8
lea ecx, [esp + 0x210]
add ebp, 0x2f0
push ebp
call fcn.006e9d34
lea ecx, [esp + 0x218]
lea edx, [esp + 0x1f8]
push 0
push edx
call fcn.006ea08c
lea ecx, [esp + 0x210]
push eax
call fcn.006ea37c
mov ecx, dword [esp + 0x218]
test ecx, ecx
je 0x6da007
mov dword [esp + 0x218], 0
je 0x6da007
push 1
call fcn.00433260
mov ecx, dword [esp + 0x21c]
test ecx, ecx
je 0x6da026
mov dword [esp + 0x21c], 0
je 0x6da026
push 1
call fcn.00433290
add esp, 0xfffffff8
mov ecx, esp
push 0x86d9e4
call fcn.00701780
lea ecx, [esp + 0x218]
mov dword [esp + 4], 0xffffffff
call fcn.006eda14
mov edx, dword [esp + 0x2d8]
mov ecx, dword [edx + 0x28]
lea edi, [esp + 0x210]
xor ebp, ebp
push ebp
push ebp
push ebp
push edi
call fcn.006c42c8
mov ebp, dword [esp + 0x2d8]
mov ebp, dword [ebp + 0x28]
lea ecx, [ebp + 0x60]
mov edx, dword [ebp + 0x60]
call dword [edx + 0x24]
mov dword [ebp + 0x5c], 0
lea ecx, [ebp + 0x98]
mov edx, dword [ebp + 0x98]
call dword [edx + 0x24]
mov dword [ebp + 0x94], 0
lea ecx, [ebp + 0xd0]
mov edx, dword [ebp + 0xd0]
call dword [edx + 0x24]
mov dword [ebp + 0xcc], 0
lea ecx, [ebp + 0x108]
mov edx, dword [ebp + 0x108]
call dword [edx + 0x24]
mov dword [ebp + 0x104], 0
lea ecx, [ebp + 0x140]
mov edx, dword [ebp + 0x140]
call dword [edx + 0x24]
mov dword [ebp + 0x13c], 0
lea ecx, [ebp + 0x178]
mov edx, dword [ebp + 0x178]
call dword [edx + 0x24]
xor edx, edx
mov dword [ebp + 0x174], edx
mov dword [ebp + 0x234], edx
mov ecx, dword [esp + 0x210]
test ecx, ecx
mov dword [ebp + 0x35c], edx
mov dword [ebp + 0x360], edx
mov dword [esi + 0x9654], 3
je 0x6da135
mov dword [esp + 0x210], 0
je 0x6da135
push 1
call fcn.00433260
mov ecx, dword [esp + 0x214]
test ecx, ecx
je 0x6da154
mov dword [esp + 0x214], 0
je 0x6da154
push 1
call fcn.00433290
mov ecx, dword [esp + 0x1fc]
test ecx, ecx
je 0x6da173
mov dword [esp + 0x1fc], 0
je 0x6da173
push 1
call fcn.00433260
mov ecx, dword [esp + 0x200]
test ecx, ecx
je 0x6da192
mov dword [esp + 0x200], 0
je 0x6da192
push 1
call fcn.00433290
lea ecx, [esp + 0x1f8]
call fcn.00701810
lea ecx, [esp + 0xdc]
call fcn.00701810
lea ecx, [esp + 0xd8]
call fcn.00701810
lea ecx, [esp + 0xd4]
call fcn.00701810
mov ecx, dword [esp + 0xcc]
test ecx, ecx
je 0x6da1e1
mov dword [esp + 0xcc], 0
je 0x6da1e1
push 1
call fcn.00433260
mov ecx, dword [esp + 0xd0]
test ecx, ecx
je 0x6da200
je 0x6da200
mov dword [esp + 0xd0], 0
push 1
call fcn.00433290
mov eax, 1
add esp, 0x354
pop ebp
pop esi
pop edi
mov esp, ebx
pop ebx
ret 0x14
mov eax, dword [esp + 0x2d8]
push eax
mov ecx, dword [esp + 0x240]
call fcn.006c29c8
push eax
mov ecx, dword [esp + 0x240]
call fcn.006c2b28
lea ecx, [esp + 0xdc]
call fcn.00701810
lea ecx, [esp + 0xd8]
call fcn.00701810
lea ecx, [esp + 0xd4]
call fcn.00701810
mov ecx, dword [esp + 0xcc]
test ecx, ecx
je 0x6da278
mov dword [esp + 0xcc], 0
je 0x6da278
push 1
call fcn.00433260
mov ecx, dword [esp + 0xd0]
test ecx, ecx
je 0x6da297
je 0x6da297
mov dword [esp + 0xd0], 0
push 1
call fcn.00433290
xor eax, eax
add esp, 0x354
pop ebp
pop esi
pop edi
mov esp, ebx
pop ebx
ret 0x14
lea ecx, [esp + 0xdc]
call fcn.00701810
lea ecx, [esp + 0xd8]
call fcn.00701810
lea ecx, [esp + 0xd4]
call fcn.00701810
mov ecx, dword [esp + 0xcc]
test ecx, ecx
je 0x6da2eb
mov dword [esp + 0xcc], 0
je 0x6da2eb
push 1
call fcn.00433260
mov ecx, dword [esp + 0xd0]
test ecx, ecx
je 0x6da30a
je 0x6da30a
mov dword [esp + 0xd0], 0
push 1
call fcn.00433290
xor eax, eax
add esp, 0x354
pop ebp
pop esi
pop edi
mov esp, ebx
pop ebx
ret 0x14
mov eax, dword [esp + 0x334]
push eax
call fcn.007703b0
xor eax, eax
add esp, 0x358
pop ebp
pop esi
pop edi
mov esp, ebx
pop ebx
ret 0x14
mov esi, dword [esp + 0x348]
movzx ecx, word [esi + 0x2a]
mov eax, dword [esp + 0x2d0]
cmp ecx, eax
jge 0x6d8eed
xor eax, eax
test ecx, ecx
jle 0x6da37d
mov dword [esp + 0x334], esi
mov dword [esp + 0x234], ebp
mov edx, dword [edx + 4]
inc eax
cmp eax, ecx
jl 0x6da367
mov esi, dword [esp + 0x334]
mov ebp, dword [esp + 0x234]
mov eax, dword [edx]
mov dword [esp + 0x230], eax
mov dword [esp + 0x238], eax
jmp 0x6d8eed
mov eax, dword [esp + 0x348]
mov edi, dword [esp + 0x2d0]
mov dword [esp + 0x230], eax
movzx eax, word [eax + 0x2a]
cmp eax, edi
jge 0x6d8eed
xor esi, esi
test eax, eax
jle 0x6da3d3
mov dword [esp + 0x234], ebp
lea esi, [esi]
mov edx, dword [edx + 4]
inc esi
cmp esi, eax
jl 0x6da3c4
mov ebp, dword [esp + 0x234]
mov esi, dword [edx]
mov dword [esp + 0x238], esi
jmp 0x6d8eed
mov eax, dword [esp + 0x230]
mov ebp, dword [esp + 0x234]
jmp 0x6d912e
fld dword [0x88b824]
fld qword [esp + 0x320]
fcompi st(1)
fstp st(0)
ja 0x6d9434
fld dword [0x88b820]
fld qword [esp + 0x320]
fcompi st(1)
fstp st(0)
jb 0x6d9434
jmp 0x6d963d
fstp st(0)
fstp st(1)
mov esi, dword [esp + 0x230]
mov ebp, dword [esp + 0x234]
fld qword [esp + 0x258]
fld qword [esp + 0x250]
jmp 0x6d9796
fld dword [0x88b824]
fcompi st(3)
jb 0x6d9796
fld dword [0x88b820]
fcompi st(3)
ja 0x6d9796
jmp 0x6d9953
fld dword [0x88b824]
jmp 0x6d9784
mov byte [ebp + 0x1f2], 1
jmp 0x6da214
xor edx, edx
mov dword [esp + 0x2d0], edx
call fcn.006f4c8c
mov dword [esp + 0x238], eax
jmp 0x6d9c22
lea ecx, [esp + 0xdc]
call fcn.00701810
lea ecx, [esp + 0xd8]
call fcn.00701810
lea ecx, [esp + 0xd4]
call fcn.00701810
mov ecx, dword [esp + 0xcc]
test ecx, ecx
je 0x6da50d
mov dword [esp + 0xcc], 0
je 0x6da50d
push 1
call fcn.00433260
mov ecx, dword [esp + 0xd0]
test ecx, ecx
je 0x6da52c
je 0x6da52c
mov dword [esp + 0xd0], 0
push 1
call fcn.00433290
xor eax, eax
add esp, 0x354
pop ebp
pop esi
pop edi
mov esp, ebx
pop ebx
ret 0x14
lea eax, [esi + 0x9654]
lea edi, [esi + 0xa0e8]
lea edx, [esp + 0x1f4]
push edx
mov ecx, esi
push edi
push eax
call fcn.0068b0d0
lea edx, [esp + 0x1f4]
mov ecx, esi
push edx
call fcn.0069bfb8
lea edx, [esp + 0x1f4]
mov ecx, esi
push edx
call fcn.0069c048
lea eax, [esi + 0x95e8]
lea edi, [esi + 0xa0c4]
lea edx, [esp + 0x1f4]
push edx
mov ecx, esi
push edi
push eax
call fcn.006835c0
lea edx, [esp + 0x1f4]
mov ecx, esi
push edx
call fcn.0068bcb0
jmp 0x6d9bc0
movss xmm0, dword [0x88b804]
mulss xmm0, xmm1
movss xmm4, dword [0x88b840]
movss dword [esi + 0x95f8], xmm0
movss xmm3, xmm4
subss xmm3, xmm0
movss xmm2, dword [0x88b800]
addss xmm2, xmm1
mulss xmm3, xmm2
addss xmm4, xmm3
movss dword [esi + 0x4394], xmm4
jmp 0x6d9b81
fstp st(0)
fstp st(1)
mov esi, dword [esp + 0x230]
mov ebp, dword [esp + 0x234]
fld qword [esp + 0x258]
fld qword [esp + 0x250]
jmp 0x6d9796
fld dword [0x88b81c]
fcompi st(1)
fstp st(0)
jbe 0x6d95d8
mov dword [edx + 0x5e4], 0
jmp 0x6d95d8
lea ecx, [esp + 0xdc]
call fcn.00701810
lea ecx, [esp + 0xd8]
call fcn.00701810
lea ecx, [esp + 0xd4]
call fcn.00701810
mov ecx, dword [esp + 0xcc]
test ecx, ecx
je 0x6da677
mov dword [esp + 0xcc], 0
je 0x6da677
push 1
call fcn.00433260
mov ecx, dword [esp + 0xd0]
test ecx, ecx
je 0x6da696
je 0x6da696
mov dword [esp + 0xd0], 0
push 1
call fcn.00433290
xor eax, eax
add esp, 0x354
pop ebp
pop esi
pop edi
mov esp, ebx
pop ebx
ret 0x14
mov edi, dword [esp + 0x348]
movzx eax, byte [edi + 0x28]
mov dword [esp + 0x2bc], eax
jmp 0x6d8f2e
mov ecx, dword [esp + 0xcc]
test ecx, ecx
je 0x6da6dd
mov dword [esp + 0xcc], 0
je 0x6da6dd
push 1
call fcn.00433260
mov ecx, dword [esp + 0xd0]
test ecx, ecx
je 0x6da6fc
je 0x6da6fc
mov dword [esp + 0xd0], 0
push 1
call fcn.00433290
xor eax, eax
add esp, 0x354
pop ebp
pop esi
pop edi
mov esp, ebx
pop ebx
ret 0x14
mov ecx, dword [esp + 0xcc]
test ecx, ecx
je 0x6da72c
mov dword [esp + 0xcc], 0
je 0x6da72c
push 1
call fcn.00433260
mov ecx, dword [esp + 0xd0]
test ecx, ecx
je 0x6da74b
je 0x6da74b
mov dword [esp + 0xd0], 0
push 1
call fcn.00433290
xor eax, eax
add esp, 0x354
pop ebp
pop esi
pop edi
mov esp, ebx
pop ebx
ret 0x14
fstp st(0)
fstp st(0)
jmp 0x6d8b52
push ebx
mov ebx, esp
and esp, 0xfffffff8
push edi
push esi
push ebp
sub esp, 0x354
mov ebp, ecx
mov al, byte [ebp + 0x1f2]
test al, al
jne 0x6da796
mov eax, dword [ebx + 0x10]
test eax, eax
jg 0x6da7a7
xor eax, eax
add esp, 0x354
pop ebp
pop esi
pop edi
mov esp, ebx
pop ebx
ret 0x14
mov eax, dword [ebx + 0x10]
lea esi, [eax + eax]
add esi, esi
push esi
call sub.MSVCRT.dll_void____cdecl_operator_new_unsigned_int_
mov dword [esp + 0x2d4], eax
add esp, 4
mov ecx, dword [ebx + 8]
mov eax, dword [ecx]
mov edx, dword [ebp + 0x23c]
mov edi, dword [ebx + 0xc]
lea edx, [edx + edi*4]
push 0
push edx
call dword [eax + 0xc]
mov ecx, dword [ebx + 8]
mov edx, dword [ecx]
push 0
push esi
mov eax, dword [esp + 0x2d8]
push eax
call dword [edx + 0x1c]
cmp eax, esi
jne 0x6db994
xor esi, esi
xor edi, edi
xor edx, edx
mov dword [esp + 0x334], esi
xor eax, eax
mov dword [esp + 0x34c], edi
mov dword [esp + 0x338], edx
mov dword [esp + 0x33c], eax
mov eax, 0xffffffff
mov dword [esp + 0x254], eax
xor eax, eax
mov dword [esp + 0x240], eax
xor eax, eax
mov dword [esp + 0x244], eax
mov eax, 0x78
mov dword [esp + 0x248], eax
mov eax, 0xffffffff
mov dword [esp + 0x340], eax
xor eax, eax
mov dword [esp + 0x344], eax
xor eax, eax
mov dword [esp + 0x24c], eax
mov eax, 0x7f
mov dword [esp + 0x250], eax
mov al, 1
fld dword [0x88ba5c]
fstp qword [esp + 0x2f0]
fld dword [0x88ba5c]
fstp qword [esp + 0x2c0]
fld dword [0x88ba58]
fstp qword [esp + 0x2c8]
fld dword [0x88ba54]
fstp qword [esp + 0x308]
fld dword [0x88ba50]
fstp qword [esp + 0x300]
fld dword [0x88ba5c]
fstp qword [esp + 0x2e0]
fld dword [0x88ba5c]
fstp qword [esp + 0x2e8]
fld dword [0x88ba58]
fstp qword [esp + 0x2d8]
fld dword [0x88ba54]
fstp qword [esp + 0x318]
fld dword [0x88ba50]
fstp qword [esp + 0x2f8]
fld dword [0x88ba4c]
fld st(0)
fstp qword [esp + 0x258]
fld dword [0x88ba5c]
fstp qword [esp + 0x260]
fld st(0)
fstp qword [esp + 0x268]
fld dword [0x88ba5c]
fstp qword [esp + 0x270]
fld dword [0x88ba54]
fstp qword [esp + 0x278]
fld dword [0x88ba48]
fld st(0)
fstp qword [esp + 0x2b0]
mov byte [esp + 0x23c], al
lea eax, [ebp + 0x78]
fld dword [0x88ba44]
fstp qword [esp + 0x2b8]
fld dword [0x88ba5c]
fstp qword [esp + 0x280]
fld dword [ebp + 0x40]
fstp qword [esp + 0x310]
fld dword [ebp + 0x44]
fstp qword [esp + 0x288]
fld dword [ebp + 0x48]
fstp qword [esp + 0x290]
fld dword [ebp + 0x4c]
fstp qword [esp + 0x298]
fld dword [ebp + 0x50]
fstp qword [esp + 0x2a0]
fld dword [ebp + 0x54]
fstp qword [esp + 0x2a8]
mov dword [esp + 0x2d4], eax
mov al, byte [ebp + 0x10c]
test al, al
je 0x6da9b6
mov eax, dword [ebp + 0x78]
mov dword [esp + 0x334], eax
mov al, byte [ebp + 0x10d]
test al, al
je 0x6da9ca
mov eax, dword [ebp + 0x7c]
mov dword [esp + 0x34c], eax
mov al, byte [ebp + 0x10e]
test al, al
je 0x6da9e1
mov eax, dword [ebp + 0x80]
mov dword [esp + 0x338], eax
mov al, byte [ebp + 0x10f]
test al, al
je 0x6da9f8
mov eax, dword [ebp + 0x84]
mov dword [esp + 0x33c], eax
mov al, byte [ebp + 0x110]
test al, al
je 0x6daa10
movzx eax, byte [ebp + 0x88]
mov dword [esp + 0x240], eax
mov al, byte [ebp + 0x111]
test al, al
je 0x6daa27
mov eax, dword [ebp + 0x8c]
mov dword [esp + 0x244], eax
mov al, byte [ebp + 0x112]
test al, al
je 0x6daa3e
mov eax, dword [ebp + 0x90]
mov dword [esp + 0x248], eax
mov al, byte [ebp + 0x113]
test al, al
je 0x6daa55
mov eax, dword [ebp + 0x94]
mov dword [esp + 0x340], eax
mov al, byte [ebp + 0x114]
test al, al
je 0x6daa6c
mov eax, dword [ebp + 0x98]
mov dword [esp + 0x344], eax
mov al, byte [ebp + 0x115]
test al, al
je 0x6daa83
mov eax, dword [ebp + 0x9c]
mov dword [esp + 0x24c], eax
mov al, byte [ebp + 0x116]
test al, al
je 0x6daa9a
mov eax, dword [ebp + 0xa0]
mov dword [esp + 0x250], eax
mov al, byte [ebp + 0x117]
test al, al
je 0x6daab1
fld dword [ebp + 0xa4]
fstp qword [esp + 0x2f0]
mov al, byte [ebp + 0x118]
test al, al
je 0x6daac8
fld dword [ebp + 0xa8]
fstp qword [esp + 0x2c0]
mov al, byte [ebp + 0x119]
test al, al
je 0x6daadf
fld dword [ebp + 0xac]
fstp qword [esp + 0x2c8]
mov al, byte [ebp + 0x11a]
test al, al
je 0x6daaf6
fld dword [ebp + 0xb0]
fstp qword [esp + 0x308]
mov al, byte [ebp + 0x11b]
test al, al
je 0x6dab0d
fld dword [ebp + 0xb4]
fstp qword [esp + 0x300]
mov al, byte [ebp + 0x11c]
test al, al
je 0x6dab24
fld dword [ebp + 0xc8]
fstp qword [esp + 0x2e0]
mov al, byte [ebp + 0x11d]
test al, al
je 0x6dab3b
fld dword [ebp + 0xcc]
fstp qword [esp + 0x2e8]
mov al, byte [ebp + 0x11e]
test al, al
je 0x6dab52
fld dword [ebp + 0xd0]
fstp qword [esp + 0x2d8]
mov al, byte [ebp + 0x11f]
test al, al
je 0x6dab69
fld dword [ebp + 0xd4]
fstp qword [esp + 0x318]
mov al, byte [ebp + 0x120]
test al, al
je 0x6dab80
fld dword [ebp + 0xd8]
fstp qword [esp + 0x2f8]
mov al, byte [ebp + 0x122]
test al, al
je 0x6dab97
fld dword [ebp + 0xb8]
fstp qword [esp + 0x278]
mov al, byte [ebp + 0x123]
test al, al
je 0x6dabae
fld dword [ebp + 0xbc]
fstp qword [esp + 0x2b0]
mov al, byte [ebp + 0x124]
test al, al
je 0x6dabc5
mov al, byte [ebp + 0xc0]
mov byte [esp + 0x23c], al
mov al, byte [ebp + 0x125]
test al, al
je 0x6dabdc
fld dword [ebp + 0xdc]
fstp qword [esp + 0x2b8]
mov al, byte [ebp + 0x126]
test al, al
je 0x6dabf3
fld dword [ebp + 0xe0]
fstp qword [esp + 0x280]
mov al, byte [ebp + 0x12a]
test al, al
je 0x6dac0a
fld dword [ebp + 0xf0]
fstp qword [esp + 0x258]
mov al, byte [ebp + 0x129]
test al, al
je 0x6dac21
fld dword [ebp + 0xec]
fstp qword [esp + 0x260]
mov al, byte [ebp + 0x12f]
test al, al
je 0x6dac38
fld dword [ebp + 0x104]
fstp qword [esp + 0x268]
mov al, byte [ebp + 0x12e]
test al, al
je 0x6dac4f
fld dword [ebp + 0x100]
fstp qword [esp + 0x270]
mov al, byte [ebp + 0x127]
test al, al
je 0x6dac66
fld dword [ebp + 0xe4]
fstp qword [esp + 0x288]
mov al, byte [ebp + 0x128]
test al, al
je 0x6dac7d
fld dword [ebp + 0xe8]
fstp qword [esp + 0x310]
mov al, byte [ebp + 0x12b]
test al, al
je 0x6dac94
fld dword [ebp + 0xf4]
fstp qword [esp + 0x298]
mov al, byte [ebp + 0x12c]
test al, al
je 0x6dacab
fld dword [ebp + 0xf8]
fstp qword [esp + 0x290]
mov al, byte [ebp + 0x12d]
test al, al
je 0x6dacc2
fld dword [ebp + 0xfc]
fstp qword [esp + 0x2a0]
mov al, byte [ebp + 0x130]
test al, al
je 0x6dacd9
fld dword [ebp + 0x108]
fstp qword [esp + 0x2a8]
xor edi, edi
xor eax, eax
xor ecx, ecx
mov dword [esp + 0x10], eax
xor edx, edx
xor esi, esi
mov dword [esp + 0x14], eax
mov dword [esp + 0x18], eax
mov dword [esp + 0x238], esi
xor esi, esi
mov dword [esp + 0x1c], eax
mov byte [esp + 0x20], al
mov dword [esp + 0x24], eax
mov dword [esp + 0x28], 0x78
mov dword [esp + 0x2c], 0xffffffff
mov dword [esp + 0x30], eax
mov dword [esp + 0x34], eax
mov dword [esp + 0x38], 0x7f
mov dword [esp + 0x3c], esi
xor esi, esi
mov dword [esp + 0x40], esi
mov esi, 0x3e4ccccd
mov dword [esp + 0x44], esi
mov esi, 0x3f000000
mov dword [esp + 0x48], esi
mov esi, 0x3e99999a
mov dword [esp + 0x4c], esi
mov esi, 0x3f000000
mov dword [esp + 0x50], esi
mov esi, 0x3f800000
mov dword [esp + 0x54], esi
mov esi, 0x3f800000
mov byte [esp + 0x58], 1
mov dword [esp + 0x5c], esi
xor esi, esi
mov dword [esp + 0x60], esi
xor esi, esi
mov dword [esp + 0x64], esi
mov esi, 0x3e4ccccd
mov dword [esp + 0x68], esi
mov esi, 0x3f000000
mov dword [esp + 0x6c], esi
mov esi, 0x3e99999a
mov dword [esp + 0x70], esi
mov esi, 0x3f800000
mov dword [esp + 0x74], esi
xor esi, esi
mov dword [esp + 0x78], esi
xor esi, esi
mov dword [esp + 0x7c], esi
xor esi, esi
mov dword [esp + 0x80], esi
xor esi, esi
mov dword [esp + 0x84], esi
xor esi, esi
mov dword [esp + 0x88], esi
xor esi, esi
mov dword [esp + 0x8c], esi
xor esi, esi
mov dword [esp + 0x90], esi
xor esi, esi
mov dword [esp + 0x94], esi
xor esi, esi
mov dword [esp + 0x98], esi
xor esi, esi
mov dword [esp + 0x9c], esi
xor esi, esi
mov dword [esp + 0xa0], esi
mov byte [esp + 0xa4], al
xor esi, esi
mov byte [esp + 0xa5], al
mov byte [esp + 0xa6], al
mov byte [esp + 0xa7], al
mov byte [esp + 0xa8], al
mov byte [esp + 0xa9], al
mov byte [esp + 0xaa], al
mov byte [esp + 0xab], al
mov byte [esp + 0xac], al
mov byte [esp + 0xad], al
mov byte [esp + 0xae], al
mov byte [esp + 0xaf], al
mov byte [esp + 0xb0], al
mov byte [esp + 0xb1], al
mov byte [esp + 0xb2], al
mov byte [esp + 0xb3], al
mov byte [esp + 0xb4], al
mov byte [esp + 0xb5], al
mov byte [esp + 0xb6], al
mov byte [esp + 0xb7], al
mov byte [esp + 0xb8], al
mov byte [esp + 0xba], al
mov byte [esp + 0xbb], al
mov byte [esp + 0xbc], al
mov byte [esp + 0xb9], al
mov byte [esp + 0xbd], al
mov byte [esp + 0xbe], al
mov byte [esp + 0xbf], al
mov byte [esp + 0xc0], al
mov byte [esp + 0xc1], al
mov byte [esp + 0xc2], al
mov byte [esp + 0xc3], al
mov byte [esp + 0xc4], al
mov byte [esp + 0xc5], al
mov byte [esp + 0xc6], al
mov byte [esp + 0xc7], al
mov byte [esp + 0xc8], al
mov eax, dword [esp + 0x238]
mov dword [esp + 0x238], eax
mov dword [esp + 0x320], edx
mov dword [esp + 0x330], ecx
mov dword [esp + 0x230], edi
mov dword [esp + 0x234], ebp
fstp qword [esp + 0x328]
mov ebp, dword [esp + 0x2d0]
fstp st(0)
mov eax, dword [ebx + 0x10]
cmp esi, eax
jge 0x6db9b2
movzx eax, word [ebp + esi*4]
cmp eax, 0x3a
ja case.0x6daf55.14
mov eax, dword [eax*4 + 0x88ba60]
jmp eax
movsx eax, word [ebp + esi*4 + 2]
mov dword [esp + 0x340], eax
mov dword [esp + 0x2c], eax
mov byte [esp + 0xab], 1
jmp case.0x6daf55.14
movsx eax, word [ebp + esi*4 + 2]
cmp eax, 0x3f
mov dword [esp + 0x344], eax
jle 0x6dafa1
mov eax, 0x3f
mov dword [esp + 0x344], eax
mov dword [esp + 0x30], eax
mov byte [esp + 0xac], 1
jmp case.0x6daf55.14
movsx eax, word [ebp + esi*4 + 2]
cmp eax, 0x32
jge 0x6dafc7
xor al, al
mov byte [esp + 0x23c], al
mov al, byte [esp + 0x23c]
mov byte [esp + 0x58], al
mov byte [esp + 0xbc], 1
jmp case.0x6daf55.14
movzx eax, word [ebp + esi*4 + 2]
and eax, 1
mov dword [esp + 0x240], eax
mov byte [esp + 0x20], al
mov byte [esp + 0xa8], 1
jmp case.0x6daf55.14
movsx eax, word [ebp + esi*4 + 2]
mov dword [esp + 0x254], eax
jmp case.0x6daf55.14
fld qword [0x88ba00]
movsx eax, word [ebp + esi*4 + 2]
mov dword [esp + 0x228], eax
fild dword [esp + 0x228]
fmul qword [0x88b9f8]
fxch st(1)
fstp qword [esp]
fstp qword [esp + 8]
call sub.MSVCRT.dll_pow
fld qword [esp + 0x2b0]
fmul st(1)
fstp qword [esp + 0x2b0]
fld qword [esp + 0x328]
fmulp st(1)
fst qword [esp + 0x328]
fstp dword [esp + 0x54]
mov byte [esp + 0xbb], 1
jmp case.0x6daf55.14
fld qword [0x88ba00]
movsx eax, word [ebp + esi*4 + 2]
mov dword [esp + 0x228], eax
fild dword [esp + 0x228]
fmul qword [0x88b9e8]
fxch st(1)
fstp qword [esp]
fstp qword [esp + 8]
call sub.MSVCRT.dll_pow
fld qword [esp + 0x2b0]
fmul st(1)
fstp qword [esp + 0x2b0]
fld qword [esp + 0x328]
fmulp st(1)
fst qword [esp + 0x328]
fstp dword [esp + 0x54]
mov byte [esp + 0xbb], 1
jmp case.0x6daf55.14
movsx eax, word [ebp + esi*4 + 2]
shl eax, 0xf
mov edx, dword [esp + 0x330]
add dword [esp + 0x34c], eax
add edx, eax
mov dword [esp + 0x330], edx
mov dword [esp + 0x14], edx
mov byte [esp + 0xa5], 1
jmp case.0x6daf55.14
movsx eax, word [ebp + esi*4 + 2]
shl eax, 0xf
mov edx, dword [esp + 0x230]
add dword [esp + 0x334], eax
add edx, eax
mov dword [esp + 0x230], edx
mov dword [esp + 0x10], edx
mov byte [esp + 0xa4], 1
jmp case.0x6daf55.14
movzx eax, word [ebp + esi*4 + 2]
movzx edx, al
mov dword [esp + 0x24c], eax
mov ecx, eax
sar ecx, 8
mov dword [esp + 0x250], edx
mov eax, edx
mov dword [esp + 0x24c], ecx
mov dword [esp + 0x38], eax
mov eax, ecx
mov dword [esp + 0x34], eax
mov al, 1
mov byte [esp + 0xae], al
mov byte [esp + 0xad], al
jmp case.0x6daf55.14
movzx eax, word [ebp + esi*4 + 2]
movzx edx, al
mov dword [esp + 0x244], eax
mov ecx, eax
sar ecx, 8
mov dword [esp + 0x248], edx
mov eax, edx
mov dword [esp + 0x244], ecx
mov dword [esp + 0x28], eax
mov eax, ecx
mov dword [esp + 0x24], eax
mov al, 1
mov byte [esp + 0xaa], al
mov byte [esp + 0xa9], al
jmp case.0x6daf55.14
fld qword [0x88ba00]
movsx eax, word [ebp + esi*4 + 2]
fstp qword [esp]
mov dword [esp + 0x228], eax
fild dword [esp + 0x228]
fmul qword [0x88b9f8]
fstp qword [esp + 8]
call sub.MSVCRT.dll_pow
fst qword [esp + 0x300]
fstp dword [esp + 0x4c]
mov byte [esp + 0xb3], 1
jmp case.0x6daf55.14
movsx eax, word [ebp + esi*4 + 2]
mov dword [esp + 0x228], eax
fild dword [esp + 0x228]
fmul dword [0x88ba3c]
fst qword [esp + 0x308]
fstp dword [esp + 0x48]
mov byte [esp + 0xb2], 1
jmp case.0x6daf55.14
fld qword [0x88ba00]
movsx eax, word [ebp + esi*4 + 2]
fstp qword [esp]
mov dword [esp + 0x228], eax
fild dword [esp + 0x228]
fmul qword [0x88b9f8]
fstp qword [esp + 8]
call sub.MSVCRT.dll_pow
fst qword [esp + 0x2c8]
fstp dword [esp + 0x44]
mov byte [esp + 0xb1], 1
jmp case.0x6daf55.14
fld qword [0x88ba00]
movsx eax, word [ebp + esi*4 + 2]
fstp qword [esp]
mov dword [esp + 0x228], eax
fild dword [esp + 0x228]
fmul qword [0x88b9f8]
fstp qword [esp + 8]
call sub.MSVCRT.dll_pow
fst qword [esp + 0x2c0]
fstp dword [esp + 0x40]
mov byte [esp + 0xb0], 1
jmp case.0x6daf55.14
fld qword [0x88ba00]
movsx eax, word [ebp + esi*4 + 2]
fstp qword [esp]
mov dword [esp + 0x228], eax
fild dword [esp + 0x228]
fmul qword [0x88b9f8]
fstp qword [esp + 8]
call sub.MSVCRT.dll_pow
fst qword [esp + 0x2f0]
fstp dword [esp + 0x3c]
mov byte [esp + 0xaf], 1
jmp case.0x6daf55.14
fld qword [0x88ba00]
movsx eax, word [ebp + esi*4 + 2]
fstp qword [esp]
mov dword [esp + 0x228], eax
fild dword [esp + 0x228]
fmul qword [0x88b9f8]
fstp qword [esp + 8]
call sub.MSVCRT.dll_pow
fst qword [esp + 0x2f8]
fstp dword [esp + 0x70]
mov byte [esp + 0xb8], 1
jmp case.0x6daf55.14
movsx eax, word [ebp + esi*4 + 2]
mov dword [esp + 0x228], eax
fild dword [esp + 0x228]
fmul dword [0x88ba3c]
fst qword [esp + 0x318]
fstp dword [esp + 0x6c]
mov byte [esp + 0xb7], 1
jmp case.0x6daf55.14
fld qword [0x88ba00]
movsx eax, word [ebp + esi*4 + 2]
fstp qword [esp]
mov dword [esp + 0x228], eax
fild dword [esp + 0x228]
fmul qword [0x88b9f8]
fstp qword [esp + 8]
call sub.MSVCRT.dll_pow
fst qword [esp + 0x2d8]
fstp dword [esp + 0x68]
mov byte [esp + 0xb6], 1
jmp case.0x6daf55.14
fld qword [0x88ba00]
movsx eax, word [ebp + esi*4 + 2]
fstp qword [esp]
mov dword [esp + 0x228], eax
fild dword [esp + 0x228]
fmul qword [0x88b9f8]
fstp qword [esp + 8]
call sub.MSVCRT.dll_pow
fst qword [esp + 0x2e8]
fstp dword [esp + 0x64]
mov byte [esp + 0xb5], 1
jmp case.0x6daf55.14
fld qword [0x88ba00]
movsx eax, word [ebp + esi*4 + 2]
fstp qword [esp]
mov dword [esp + 0x228], eax
fild dword [esp + 0x228]
fmul qword [0x88b9f8]
fstp qword [esp + 8]
call sub.MSVCRT.dll_pow
fst qword [esp + 0x2e0]
fstp dword [esp + 0x60]
mov byte [esp + 0xb4], 1
jmp case.0x6daf55.14
fld qword [0x88ba00]
movsx eax, word [ebp + esi*4 + 2]
fstp qword [esp]
mov dword [esp + 0x228], eax
fild dword [esp + 0x228]
fmul qword [0x88b9f8]
fstp qword [esp + 8]
call sub.MSVCRT.dll_pow
fst qword [esp + 0x270]
fstp dword [esp + 0x98]
mov byte [esp + 0xc6], 1
jmp case.0x6daf55.14
fld qword [0x88ba00]
movsx eax, word [ebp + esi*4 + 2]
fstp qword [esp]
mov dword [esp + 0x228], eax
fild dword [esp + 0x228]
fmul qword [0x88b9f8]
fstp qword [esp + 8]
call sub.MSVCRT.dll_pow
fmul dword [0x88ba4c]
fst qword [esp + 0x268]
fstp dword [esp + 0x9c]
mov byte [esp + 0xc7], 1
jmp case.0x6daf55.14
fld qword [0x88ba00]
movsx eax, word [ebp + esi*4 + 2]
fstp qword [esp]
mov dword [esp + 0x228], eax
fild dword [esp + 0x228]
fmul qword [0x88b9f8]
fstp qword [esp + 8]
call sub.MSVCRT.dll_pow
fst qword [esp + 0x260]
fstp dword [esp + 0x84]
mov byte [esp + 0xc1], 1
jmp case.0x6daf55.14
fld qword [0x88ba00]
movsx eax, word [ebp + esi*4 + 2]
fstp qword [esp]
mov dword [esp + 0x228], eax
fild dword [esp + 0x228]
fmul qword [0x88b9f8]
fstp qword [esp + 8]
call sub.MSVCRT.dll_pow
fmul dword [0x88ba4c]
fst qword [esp + 0x258]
fstp dword [esp + 0x88]
mov byte [esp + 0xc2], 1
jmp case.0x6daf55.14
movsx eax, word [ebp + esi*4 + 2]
add eax, 0x1f4
mov dword [esp + 0x228], eax
fild dword [esp + 0x228]
fmul dword [0x88ba40]
fst qword [esp + 0x278]
fstp dword [esp + 0x50]
mov byte [esp + 0xba], 1
jmp case.0x6daf55.14
movsx eax, word [ebp + esi*4 + 2]
mov dword [esp + 0x228], eax
fild dword [esp + 0x228]
fmul qword [0x88b9f8]
fst qword [esp + 0x2a0]
fstp dword [esp + 0x94]
mov byte [esp + 0xc5], 1
jmp case.0x6daf55.14
movsx eax, word [ebp + esi*4 + 2]
shl eax, 0xf
mov edx, dword [esp + 0x238]
add dword [esp + 0x33c], eax
add edx, eax
mov dword [esp + 0x238], edx
mov dword [esp + 0x1c], edx
mov byte [esp + 0xa7], 1
jmp case.0x6daf55.14
movsx eax, word [ebp + esi*4 + 2]
mov dword [esp + 0x228], eax
fild dword [esp + 0x228]
fmul qword [0x88b9f0]
fst qword [esp + 0x288]
fstp dword [esp + 0x7c]
mov byte [esp + 0xbf], 1
jmp case.0x6daf55.14
movsx eax, word [ebp + esi*4 + 2]
mov dword [esp + 0x228], eax
fild dword [esp + 0x228]
fmul qword [0x88b9f8]
fst qword [esp + 0x298]
fstp dword [esp + 0x8c]
mov byte [esp + 0xc3], 1
jmp case.0x6daf55.14
movsx eax, word [ebp + esi*4 + 2]
mov dword [esp + 0x228], eax
fild dword [esp + 0x228]
fmul qword [0x88b9e0]
fst qword [esp + 0x280]
fstp dword [esp + 0x78]
mov byte [esp + 0xbe], 1
jmp case.0x6daf55.14
fld qword [0x88ba00]
movsx eax, word [ebp + esi*4 + 2]
fstp qword [esp]
mov dword [esp + 0x228], eax
fild dword [esp + 0x228]
fmul qword [0x88b9f8]
fstp qword [esp + 8]
call sub.MSVCRT.dll_pow
fmul dword [0x88ba4c]
fst qword [esp + 0x2b8]
fstp dword [esp + 0x74]
mov byte [esp + 0xbd], 1
jmp case.0x6daf55.14
movsx eax, word [ebp + esi*4 + 2]
mov dword [esp + 0x228], eax
fild dword [esp + 0x228]
fmul qword [0x88b9f8]
fst qword [esp + 0x310]
fstp dword [esp + 0x80]
mov byte [esp + 0xc0], 1
jmp case.0x6daf55.14
movsx eax, word [ebp + esi*4 + 2]
mov dword [esp + 0x228], eax
fild dword [esp + 0x228]
fmul qword [0x88b9f8]
fst qword [esp + 0x2a8]
fstp dword [esp + 0xa0]
mov byte [esp + 0xc8], 1
jmp case.0x6daf55.14
movsx eax, word [ebp + esi*4 + 2]
mov dword [esp + 0x228], eax
fild dword [esp + 0x228]
fmul qword [0x88b9f8]
fst qword [esp + 0x290]
fstp dword [esp + 0x90]
mov byte [esp + 0xc4], 1
jmp case.0x6daf55.14
movsx eax, word [ebp + esi*4 + 2]
shl eax, 0xf
mov edx, dword [esp + 0x320]
add dword [esp + 0x338], eax
add edx, eax
mov dword [esp + 0x320], edx
mov dword [esp + 0x18], edx
mov byte [esp + 0xa6], 1
jmp case.0x6daf55.14
movsx eax, word [ebp + esi*4 + 2]
mov edx, dword [esp + 0x330]
add edx, eax
add dword [esp + 0x34c], eax
mov dword [esp + 0x330], edx
mov dword [esp + 0x14], edx
mov byte [esp + 0xa5], 1
jmp case.0x6daf55.14
movsx eax, word [ebp + esi*4 + 2]
mov edx, dword [esp + 0x230]
add edx, eax
add dword [esp + 0x334], eax
mov dword [esp + 0x230], edx
mov dword [esp + 0x10], edx
mov byte [esp + 0xa4], 1
jmp case.0x6daf55.14
movsx eax, word [ebp + esi*4 + 2]
mov edx, dword [esp + 0x238]
add edx, eax
add dword [esp + 0x33c], eax
mov dword [esp + 0x238], edx
mov dword [esp + 0x1c], edx
mov byte [esp + 0xa7], 1
jmp case.0x6daf55.14
movsx eax, word [ebp + esi*4 + 2]
mov edx, dword [esp + 0x320]
add edx, eax
add dword [esp + 0x338], eax
mov dword [esp + 0x320], edx
mov dword [esp + 0x18], edx
mov byte [esp + 0xa6], 1
inc esi
jmp 0x6daf35
mov eax, dword [esp + 0x2d0]
push eax
call fcn.007703b0
xor eax, eax
add esp, 0x358
pop ebp
pop esi
pop edi
mov esp, ebx
pop ebx
ret 0x14
mov ebp, dword [esp + 0x234]
mov al, byte [ebp + 0x1f0]
test al, al
je 0x6db9e1
mov eax, dword [esp + 0x254]
cmp eax, 0xffffffff
jne 0x6db9e1
lea esi, [esp + 0x10]
mov edi, dword [esp + 0x2d4]
mov ecx, 0x2f
rep movsd dword es:[edi], dword [esi]
mov byte [ebp + 0x1f0], 0
mov eax, dword [esp + 0x244]
mov edx, dword [esp + 0x248]
cmp eax, edx
jle 0x6dba08
mov dword [esp + 0x244], edx
mov dword [esp + 0x248], eax
mov eax, dword [esp + 0x24c]
mov edx, dword [esp + 0x250]
cmp eax, edx
jle 0x6dba28
mov dword [esp + 0x24c], edx
mov dword [esp + 0x250], eax
mov eax, dword [esp + 0x24c]
test eax, eax
jge 0x6dba3c
xor eax, eax
mov dword [esp + 0x24c], eax
mov eax, dword [esp + 0x250]
cmp eax, 0x7f
jle 0x6dba54
mov eax, 0x7f
mov dword [esp + 0x250], eax
mov eax, dword [esp + 0x244]
test eax, eax
jge 0x6dba68
xor eax, eax
mov dword [esp + 0x244], eax
mov eax, dword [esp + 0x248]
cmp eax, 0x7f
jle 0x6dba80
mov eax, 0x7f
mov dword [esp + 0x248], eax
mov eax, dword [esp + 0x2d0]
push eax
call fcn.007703b0
pop ecx
mov eax, dword [esp + 0x254]
cmp eax, 0xffffffff
je 0x6dd267
fld dword [ebp + 4]
fld st(0)
fadd dword [0x88ba38]
fabs
fcomp qword [0x88b9d8]
fnstsw ax
sahf
jbe 0x6dbabd
fst qword [esp + 0x278]
fstp st(0)
fld qword [esp + 0x2b0]
fmul dword [ebp + 0x68]
fstp qword [esp + 0x2b0]
fld qword [esp + 0x2b8]
fmul dword [ebp + 0x6c]
fstp qword [esp]
call sub.MSVCRT.dll_log
fadd qword [0x88b9d0]
fmul qword [0x88b9c8]
fst qword [esp + 0x2b8]
fcomp dword [0x88ba5c]
fnstsw ax
sahf
jae 0x6dbb0f
fld dword [0x88ba5c]
fstp qword [esp + 0x2b8]
jmp 0x6dbb2e
fld qword [esp + 0x2b8]
fcomp dword [0x88ba48]
fnstsw ax
sahf
jbe 0x6dbb2e
fld dword [0x88ba48]
fstp qword [esp + 0x2b8]
fld dword [ebp + 0x70]
fcom qword [0x88b9c0]
fnstsw ax
sahf
jbe 0x6dbb43
fst qword [esp + 0x280]
fstp st(0)
mov al, byte [esp + 0x23c]
test al, al
je 0x6dbb5b
mov al, byte [ebp + 0x74]
test al, al
je 0x6dbb5b
mov al, 1
jmp 0x6dbb5d
xor al, al
mov byte [esp + 0x2d4], al
mov esi, dword [ebp + 0x58]
cmp esi, 0xffffffff
je 0x6dbbaf
mov eax, dword [ebp + 0x5c]
cmp eax, 0xffffffff
je 0x6dbbaf
mov edx, dword [esp + 0x248]
cmp edx, esi
jl 0x6dd267
mov edx, dword [esp + 0x244]
cmp edx, eax
jg 0x6dd267
cmp edx, esi
jge 0x6dbb9d
mov dword [esp + 0x244], esi
mov edx, dword [esp + 0x248]
cmp edx, eax
jle 0x6dbbaf
mov dword [esp + 0x248], eax
mov edx, dword [ebp + 0x64]
cmp edx, 0xffffffff
je 0x6dbbc9
mov eax, dword [esp + 0x24c]
cmp edx, eax
jle 0x6dbbc9
mov dword [esp + 0x24c], edx
mov edx, dword [ebp + 0x60]
cmp edx, 0xffffffff
je 0x6dbbe3
mov eax, dword [esp + 0x250]
cmp edx, eax
jge 0x6dbbe3
mov dword [esp + 0x250], edx
lea ecx, [esp + 0xcc]
call fcn.006ebda8
xor esi, esi
lea edx, [ebp + 0x300]
mov eax, edx
xor ecx, ecx
mov edi, dword [esp + 0x254]
test edi, edi
jle 0x6dbc41
mov dword [esp + 0x2d0], edx
mov edx, edi
mov dword [esp + 0x238], esi
mov dword [esp + 0x234], ebp
lea esi, [esi]
mov eax, dword [eax + 4]
inc ecx
cmp ecx, edx
jl 0x6dbc24
mov edx, dword [esp + 0x2d0]
mov esi, dword [esp + 0x238]
mov ebp, dword [esp + 0x234]
mov edi, dword [eax]
xor eax, eax
movzx ecx, word [edi + 0x2c]
mov dword [esp + 0x348], edi
cmp ecx, 0xf
mov dword [esp + 0x320], eax
jle 0x6dbcab
mov ecx, dword [esp + 0xcc]
test ecx, ecx
je 0x6dbc7b
mov dword [esp + 0xcc], 0
je 0x6dbc7b
push 1
call fcn.00433260
mov ecx, dword [esp + 0xd0]
test ecx, ecx
je 0x6dbc9a
je 0x6dbc9a
mov dword [esp + 0xd0], 0
push 1
call fcn.00433290
xor eax, eax
add esp, 0x354
pop ebp
pop esi
pop edi
mov esp, ebx
pop ebx
ret 0x14
mov eax, edi
xor edi, edi
mov dword [esp + 0x230], eax
mov eax, edx
mov dword [esp + 0x254], edi
mov edi, dword [ebp + 0x300]
test edi, edi
je 0x6dbd21
mov dword [esp + 0x2d0], edx
mov edx, dword [esp + 0x254]
mov dword [esp + 0x238], esi
mov dword [esp + 0x330], ecx
mov dword [esp + 0x234], ebp
nop
lea esi, [esi]
inc edx
mov eax, dword [eax + 4]
mov ecx, dword [eax]
test ecx, ecx
jne 0x6dbcf4
mov dword [esp + 0x254], edx
mov edx, dword [esp + 0x2d0]
mov esi, dword [esp + 0x238]
mov ecx, dword [esp + 0x330]
mov ebp, dword [esp + 0x234]
mov al, byte [0x84f844]
test al, al
je 0x6dbd54
and ecx, 0xf
cmp ecx, 4
je 0x6dc590
cmp ecx, 2
je 0x6dc537
cmp ecx, 1
jne 0x6dbd62
mov eax, dword [esp + 0x348]
mov dword [esp + 0x230], eax
jmp 0x6dbd62
mov eax, dword [esp + 0x348]
mov dword [esp + 0x230], eax
mov eax, dword [esp + 0x230]
test eax, eax
je 0x6dd4c6
mov edx, dword [ebp + 0x1f8]
mov eax, dword [ebp + 0x1f4]
mov edi, dword [eax + edx*4 + 0x1f30]
mov dword [esp + 0x23c], edi
test edi, edi
je 0x6dd477
mov edi, dword [esp + 0x348]
movzx eax, byte [edi + 0x28]
mov edx, dword [esp + 0x340]
mov dword [esp + 0x254], eax
cmp edx, 0xffffffff
je 0x6dbdba
mov eax, edx
mov dword [esp + 0x254], eax
cmp eax, 0xff
jne 0x6dbdcd
mov eax, 0x3c
mov dword [esp + 0x254], eax
lea ecx, [esp + 0xd4]
call fcn.00736414
lea ecx, [esp + 0xd8]
call fcn.00736414
lea ecx, [esp + 0xdc]
call fcn.00736414
lea edi, [esp + 0xe0]
xor eax, eax
mov ecx, 0x40
rep stosd dword es:[edi], eax
lea edx, [esp + 0xe0]
push 0x14
mov eax, dword [esp + 0x234]
push eax
push edx
call dword [sym.imp.MSVCRT.dll_strncpy]
add esp, 0xc
lea ecx, [esp + 0x1e0]
lea eax, [esp + 0xe0]
push eax
call fcn.00701780
lea ecx, [esp + 0xd4]
push eax
call fcn.007017d0
lea ecx, [esp + 0x1e0]
call fcn.00701810
test esi, esi
je 0x6dbe9e
lea edi, [esp + 0xe0]
xor eax, eax
mov ecx, 0x40
rep stosd dword es:[edi], eax
lea eax, [esp + 0xe0]
push 0x14
push esi
push eax
call dword [sym.imp.MSVCRT.dll_strncpy]
add esp, 0xc
lea ecx, [esp + 0x1e4]
lea eax, [esp + 0xe0]
push eax
call fcn.00701780
lea ecx, [esp + 0xd8]
push eax
call fcn.007017d0
lea ecx, [esp + 0x1e4]
call fcn.00701810
lea ecx, [esp + 0xcc]
lea edi, [ebp + 0x2c0]
lea esi, [esp + 0xd4]
lea edx, [esp + 0xd8]
lea eax, [esp + 0xdc]
push eax
push edx
push esi
push edi
call fcn.006ef530
movzx eax, al
test eax, eax
je 0x6dc4c4
mov eax, dword [esp + 0x320]
test eax, eax
je 0x6dbfbe
mov eax, dword [esp + 0x23c]
mov eax, dword [eax + 0x8e18]
xor esi, esi
test eax, eax
jle 0x6dbfbe
mov dword [esp + 0x230], eax
mov dword [esp + 0x234], ebp
lea esi, [esi]
lea edi, [edi]
mov eax, dword [esp + 0x23c]
mov eax, dword [eax + esi*4 + 0x10]
movzx ecx, byte [eax + 0x140]
inc esi
mov edx, dword [esp + 0x254]
cmp ecx, edx
jne 0x6dbfa8
movzx ecx, byte [eax + 0x138]
mov edx, dword [esp + 0x24c]
cmp ecx, edx
jne 0x6dbfa8
movzx ecx, byte [eax + 0x139]
mov edx, dword [esp + 0x250]
cmp ecx, edx
jne 0x6dbfa8
movzx ecx, byte [eax + 0x13a]
mov edx, dword [esp + 0x244]
cmp ecx, edx
jne 0x6dbfa8
movzx ecx, byte [eax + 0x13b]
mov edx, dword [esp + 0x248]
cmp ecx, edx
jne 0x6dbfa8
mov ecx, dword [eax + 0x28]
test ecx, ecx
je 0x6dbfa8
add ecx, 0x344
lea eax, [esp + 0xcc]
push 1
push eax
call fcn.006ea21c
mov dword [esp + 0x238], eax
movzx ebp, al
test ebp, ebp
jne 0x6dc5e1
mov eax, dword [esp + 0x230]
cmp esi, eax
jl 0x6dbf14
mov ebp, dword [esp + 0x234]
mov eax, dword [ebp + 0x1f4]
push dword [eax + 0x1e68]
push dword [eax + 0x1ae4]
push 0xffffffffffffffff
mov ecx, dword [esp + 0x248]
call fcn.006b70b8
mov dword [esp + 0x230], eax
test eax, eax
je 0x6dd404
xor al, al
lea edx, [esp + 0xe0]
mov byte [esp + 0x2d0], al
push dword [ebx + 0x14]
push 0x88be4c
push edx
call dword [sym.imp.MSVCRT.dll_sprintf]
add esp, 0xc
lea ecx, [esp + 0x1e8]
lea eax, [esp + 0xe0]
push eax
call fcn.00701780
mov edx, dword [esp + 0x230]
lea ecx, [edx + 4]
push eax
call fcn.007017d0
lea ecx, [esp + 0x1e8]
call fcn.00701810
mov al, byte [esp + 0x2d4]
mov edx, dword [esp + 0x230]
mov esi, dword [esp + 0x344]
mov byte [edx + 0x20], al
test esi, esi
jle 0x6dc060
mov eax, esi
mov dword [edx + 0x10], eax
mov edx, 1
mov edi, dword [esp + 0x230]
mov esi, 3
mov dword [edi + 0x4168], edx
mov byte [edi + 0x4386], dl
mov byte [edi + 0x4387], 6
mov word [edi + 0x40e8], dx
mov dword [edi + 0x40ec], 0x3f800000
mov dword [edi + 0x46b8], edx
mov byte [edi + 0x48d6], dl
mov byte [edi + 0x48d7], dl
mov word [edi + 0x4638], si
mov dword [edi + 0x463c], 0x3daaaaab
mov dword [edi + 0x5a8], edx
mov dword [edi + 0x8bc], 2
mov word [edi + 0x528], dx
mov dword [edi + 0x52c], 0x3f800000
mov byte [edi + 0x8cc], dl
mov dword [edi + 0x5dc], 0
fld qword [esp + 0x2f0]
fmul dword [ebp + 8]
fmul dword [0x88ba30]
fst qword [esp + 0x2f0]
fstp dword [edi + 0x5e4]
fld qword [esp + 0x2c0]
fmul dword [ebp + 0xc]
fmul dword [0x88ba30]
fstp dword [edi + 0x5e8]
fld qword [esp + 0x2c8]
fmul dword [ebp + 0x10]
fmul dword [0x88ba30]
fstp dword [edi + 0x5ec]
fld qword [esp + 0x308]
fadd dword [ebp + 0x14]
fst qword [esp + 0x308]
fcomp dword [0x88ba2c]
fnstsw ax
sahf
jbe 0x6dc15d
fld dword [0x88ba2c]
fstp qword [esp + 0x308]
jmp 0x6dc17c
fld qword [esp + 0x308]
fcomp dword [0x88ba5c]
fnstsw ax
sahf
jae 0x6dc17c
fld dword [0x88ba5c]
fstp qword [esp + 0x308]
fld qword [0x88ba00]
fstp qword [esp]
fld qword [esp + 0x308]
fchs
fmul qword [0x88b9b8]
fstp qword [esp + 8]
call sub.MSVCRT.dll_pow
mov edx, edi
fstp dword [edx + 0x5e0]
fld qword [esp + 0x300]
fmul dword [ebp + 0x18]
fmul dword [0x88ba30]
fstp dword [edx + 0x5f0]
fld qword [esp + 0x2f0]
fcomp qword [0x88b9b0]
fnstsw ax
sahf
jb 0x6dc204
mov al, 1
mov edx, 1
mov byte [esp + 0x2d0], al
mov esi, 4
mov dword [edi + 0x4410], edx
mov byte [edi + 0x462e], dl
mov byte [edi + 0x462f], 6
mov word [edi + 0x4390], si
mov dword [edi + 0x4394], 0x3f800000
mov eax, 1
fld qword [esp + 0x310]
fadd st(0)
fld qword [esp + 0x288]
fadd st(0)
mov dword [esp + 0x238], eax
mov dword [esp + 0x234], ebp
fstp qword [esp + 0x2c0]
fstp qword [esp + 0x2c8]
fld qword [esp + 0x288]
jmp 0x6dc24e
mov dword [esp + 0x238], esi
fld qword [esp + 0x288]
fcom dword [0x88ba28]
fnstsw ax
sahf
ja 0x6dc284
fcom dword [0x88ba24]
fnstsw ax
sahf
jae 0x6dc274
fstp st(0)
mov esi, dword [esp + 0x238]
jmp 0x6dc294
fstp st(0)
mov esi, dword [esp + 0x238]
jmp 0x6dc49c
fstp st(0)
mov esi, dword [esp + 0x238]
lea esi, [esi]
imul ebp, esi, 0x3bc
mov eax, dword [esp + 0x230]
lea edx, [eax + ebp]
mov dword [edx + 0x8bc], 2
cmp esi, 1
jne 0x6dc334
mov al, 1
mov ecx, 4
mov byte [esp + 0x2d0], al
mov word [edx + 0x528], cx
fld qword [esp + 0x2c0]
fstp dword [esp + 0x1ec]
mov edi, dword [esp + 0x1ec]
and edi, 0x40000000
add edi, edi
sar edi, 0x1f
and edi, 0x7fffffff
mov eax, edi
mov dword [esp + 0x1f0], edi
xor eax, 0xffffffff
and edi, 0x40000000
and eax, dword [esp + 0x1ec]
or eax, edi
mov dword [esp + 0x1ec], eax
mov eax, dword [esp + 0x230]
fld dword [esp + 0x1ec]
fmul dword [0x88ba54]
fstp dword [ebp + eax + 0x52c]
jmp 0x6dc3a8
cmp esi, 2
jne 0x6dc3a8
mov eax, 3
mov word [edx + 0x528], ax
fld qword [esp + 0x2c8]
mov eax, dword [esp + 0x230]
fstp dword [esp + 0x1ec]
mov ecx, dword [esp + 0x1ec]
and ecx, 0x40000000
add ecx, ecx
sar ecx, 0x1f
and ecx, 0x7fffffff
mov dword [esp + 0x1f0], ecx
mov edi, ecx
xor edi, 0xffffffff
and edi, dword [esp + 0x1ec]
and ecx, 0x40000000
or edi, ecx
mov dword [esp + 0x1ec], edi
fld dword [esp + 0x1ec]
fmul dword [0x88ba54]
fstp dword [ebp + eax + 0x52c]
mov eax, 1
mov edi, dword [esp + 0x230]
mov ecx, dword [esp + 0x234]
mov byte [ebp + edi + 0x8cc], al
cmp esi, 1
mov dword [edx + 0x5a8], eax
mov dword [ebp + edi + 0x5dc], 0
fld qword [esp + 0x2e0]
fmul dword [ecx + 0x1c]
fmul dword [0x88ba30]
fst dword [edx + 0x5e4]
fld qword [esp + 0x2e8]
fmul dword [ecx + 0x20]
fmul dword [0x88ba30]
fstp dword [ebp + edi + 0x5e8]
fld qword [esp + 0x2d8]
fmul dword [ecx + 0x24]
fmul dword [0x88ba30]
fstp dword [ebp + edi + 0x5ec]
je 0x6dd3e4
fstp st(0)
fld qword [esp + 0x318]
mov edx, ecx
fadd dword [edx + 0x28]
fcom dword [0x88ba2c]
fnstsw ax
sahf
jbe 0x6dc444
fstp st(0)
fld dword [0x88ba2c]
jmp 0x6dc457
fcom dword [0x88ba5c]
fnstsw ax
sahf
jae 0x6dc457
fstp st(0)
fld dword [0x88ba5c]
fld qword [0x88ba00]
fxch st(1)
fchs
fxch st(1)
fstp qword [esp]
fmul qword [0x88b9b8]
fstp qword [esp + 8]
call sub.MSVCRT.dll_pow
mov edx, edi
mov eax, dword [esp + 0x234]
fstp dword [ebp + edx + 0x5e0]
fld qword [esp + 0x2f8]
fmul dword [eax + 0x2c]
fmul dword [0x88ba30]
fstp dword [ebp + edx + 0x5f0]
inc esi
cmp esi, 3
jge 0x6dc694
cmp esi, 1
je 0x6dc240
cmp esi, 2
je 0x6dc657
jmp 0x6dc294
lea ecx, [esp + 0xdc]
call fcn.00701810
lea ecx, [esp + 0xd8]
call fcn.00701810
lea ecx, [esp + 0xd4]
call fcn.00701810
mov ecx, dword [esp + 0xcc]
test ecx, ecx
je 0x6dc507
mov dword [esp + 0xcc], 0
je 0x6dc507
push 1
call fcn.00433260
mov ecx, dword [esp + 0xd0]
test ecx, ecx
je 0x6dc526
je 0x6dc526
mov dword [esp + 0xd0], 0
push 1
call fcn.00433290
xor eax, eax
add esp, 0x354
pop ebp
pop esi
pop edi
mov esp, ebx
pop ebx
ret 0x14
mov esi, dword [esp + 0x348]
movzx ecx, word [esi + 0x2a]
mov eax, dword [esp + 0x254]
cmp ecx, eax
jge 0x6dbd62
xor eax, eax
test ecx, ecx
jle 0x6dc57b
mov dword [esp + 0x238], esi
mov dword [esp + 0x234], ebp
mov edx, dword [edx + 4]
inc eax
cmp eax, ecx
jl 0x6dc565
mov esi, dword [esp + 0x238]
mov ebp, dword [esp + 0x234]
mov eax, dword [edx]
mov dword [esp + 0x230], eax
mov dword [esp + 0x320], eax
jmp 0x6dbd62
mov eax, dword [esp + 0x348]
mov edi, dword [esp + 0x254]
mov dword [esp + 0x230], eax
movzx eax, word [eax + 0x2a]
cmp eax, edi
jge 0x6dbd62
xor esi, esi
test eax, eax
jle 0x6dc5d3
mov dword [esp + 0x234], ebp
lea esi, [esi]
mov edx, dword [edx + 4]
inc esi
cmp esi, eax
jl 0x6dc5c4
mov ebp, dword [esp + 0x234]
mov esi, dword [edx]
mov dword [esp + 0x320], esi
jmp 0x6dbd62
lea ecx, [esp + 0xdc]
call fcn.00701810
lea ecx, [esp + 0xd8]
call fcn.00701810
lea ecx, [esp + 0xd4]
call fcn.00701810
mov ecx, dword [esp + 0xcc]
test ecx, ecx
je 0x6dc624
mov dword [esp + 0xcc], 0
je 0x6dc624
push 1
call fcn.00433260
mov ecx, dword [esp + 0xd0]
test ecx, ecx
je 0x6dc643
je 0x6dc643
mov dword [esp + 0xd0], 0
push 1
call fcn.00433290
mov eax, 1
add esp, 0x354
pop ebp
pop esi
pop edi
mov esp, ebx
pop ebx
ret 0x14
fld qword [esp + 0x310]
fcomp dword [0x88ba28]
fnstsw ax
sahf
ja 0x6dc294
fld qword [esp + 0x310]
fcomp dword [0x88ba24]
fnstsw ax
sahf
jb 0x6dc294
jmp 0x6dc49c
mov ebp, dword [esp + 0x234]
mov edx, 3
fld qword [esp + 0x2a0]
fadd st(0)
fld qword [esp + 0x290]
fadd st(0)
fld qword [esp + 0x298]
fadd st(0)
mov dword [esp + 0x234], ebp
fld qword [esp + 0x2a0]
fld qword [esp + 0x298]
fld qword [esp + 0x290]
fld qword [esp + 0x260]
jmp 0x6dc6f2
mov dword [esp + 0x234], ebp
fstp st(0)
fld qword [esp + 0x298]
fxch st(2)
fld dword [0x88ba28]
fcom st(3)
fnstsw ax
sahf
jb 0x6dc754
fxch st(3)
fcom dword [0x88ba24]
fnstsw ax
sahf
jae 0x6dc734
cmp edx, 4
jne 0x6dc984
fstp st(0)
mov ecx, dword [esp + 0x230]
mov ebp, dword [esp + 0x234]
fld qword [esp + 0x258]
fxch st(1)
fxch st(3)
jmp 0x6dc784
fstp st(3)
fstp st(2)
mov ecx, dword [esp + 0x230]
mov ebp, dword [esp + 0x234]
fld qword [esp + 0x258]
jmp 0x6dc93a
cmp edx, 4
jne 0x6dd3c1
fstp st(3)
mov ecx, dword [esp + 0x230]
mov ebp, dword [esp + 0x234]
fld qword [esp + 0x258]
fxch st(1)
fxch st(3)
lea esi, [esi]
lea edi, [edi]
fcomp st(2)
fnstsw ax
sahf
jb 0x6dc79e
fxch st(1)
fcom dword [0x88ba24]
fnstsw ax
sahf
fxch st(1)
jae 0x6dc93a
imul edi, edx, 0x3bc
lea esi, [ecx + edi]
mov eax, 1
mov dword [esi + 0x5a8], eax
cmp edx, 3
mov dword [esi + 0x8bc], eax
je 0x6dc8a4
cmp edx, 4
jne 0x6dc834
mov eax, 3
mov word [esi + 0x528], ax
fxch st(5)
fst dword [esp + 0x1ec]
mov eax, dword [esp + 0x1ec]
and eax, 0x40000000
add eax, eax
sar eax, 0x1f
and eax, 0x7fffffff
mov dword [esp + 0x1f0], eax
mov esi, eax
xor esi, 0xffffffff
and esi, dword [esp + 0x1ec]
and eax, 0x40000000
or esi, eax
mov dword [esp + 0x1ec], esi
fld dword [esp + 0x1ec]
fmul dword [0x88ba54]
fstp dword [edi + ecx + 0x52c]
fxch st(5)
jmp 0x6dc90f
cmp edx, 5
jne 0x6dc90f
mov eax, 1
mov word [esi + 0x528], ax
fxch st(6)
fst dword [esp + 0x1ec]
mov eax, dword [esp + 0x1ec]
and eax, 0x40000000
add eax, eax
sar eax, 0x1f
and eax, 0x7fffffff
mov dword [esp + 0x1f0], eax
mov esi, eax
xor esi, 0xffffffff
and esi, dword [esp + 0x1ec]
and eax, 0x40000000
or esi, eax
mov dword [esp + 0x1ec], esi
fld dword [esp + 0x1ec]
fmul dword [0x88ba54]
fstp dword [edi + ecx + 0x52c]
fxch st(6)
jmp 0x6dc90f
mov al, 1
mov byte [esp + 0x2d0], al
mov eax, 4
mov word [esi + 0x528], ax
fxch st(4)
fst dword [esp + 0x1ec]
mov eax, dword [esp + 0x1ec]
and eax, 0x40000000
add eax, eax
sar eax, 0x1f
and eax, 0x7fffffff
mov dword [esp + 0x1f0], eax
mov esi, eax
xor esi, 0xffffffff
and esi, dword [esp + 0x1ec]
and eax, 0x40000000
or esi, eax
mov dword [esp + 0x1ec], esi
fld dword [esp + 0x1ec]
fmul dword [0x88ba54]
fstp dword [edi + ecx + 0x52c]
fxch st(4)
mov byte [edi + ecx + 0x8cc], 0
fld st(0)
mov dword [edi + ecx + 0x5b0], 2
fmul dword [ebp + 0x34]
fstp dword [edi + ecx + 0x8c4]
fld st(2)
fmul dword [ebp + 0x30]
fstp dword [edi + ecx + 0x5b4]
inc edx
cmp edx, 6
jge 0x6dc9b4
cmp edx, 3
je 0x6dc6e0
cmp edx, 4
je 0x6dc9a4
cmp edx, 5
jne 0x6dc79e
fxch st(3)
fcom dword [0x88ba28]
fnstsw ax
sahf
fxch st(3)
ja 0x6dc79e
fxch st(3)
fcom dword [0x88ba24]
fnstsw ax
sahf
fxch st(3)
jb 0x6dc79e
jmp 0x6dc93a
fstp st(3)
fstp st(2)
mov ecx, dword [esp + 0x230]
mov ebp, dword [esp + 0x234]
fld qword [esp + 0x258]
jmp 0x6dc79e
fld dword [0x88ba28]
jmp 0x6dc784
fstp st(4)
fstp st(4)
fstp st(4)
fstp st(0)
fstp st(1)
fstp st(1)
fstp st(0)
fld qword [esp + 0x2a8]
fcomp dword [0x88ba28]
fnstsw ax
sahf
ja 0x6dc9ea
fld qword [esp + 0x2a8]
fcomp dword [0x88ba24]
fnstsw ax
sahf
jae 0x6dca9c
mov eax, 1
mov ecx, dword [esp + 0x230]
mov edx, 3
mov dword [ecx + 0x1c10], eax
mov dword [ecx + 0x1f24], eax
mov word [ecx + 0x1b90], dx
fld qword [esp + 0x2a8]
fadd st(0)
fstp dword [esp + 0x1ec]
mov esi, dword [esp + 0x1ec]
and esi, 0x40000000
add esi, esi
sar esi, 0x1f
and esi, 0x7fffffff
mov edi, esi
mov dword [esp + 0x1f0], esi
xor edi, 0xffffffff
and esi, 0x40000000
and edi, dword [esp + 0x1ec]
or edi, esi
mov dword [esp + 0x1ec], edi
fld dword [esp + 0x1ec]
fmul dword [0x88ba54]
fstp dword [ecx + 0x1b94]
mov byte [ecx + 0x1f34], 0
mov dword [ecx + 0x1c18], 2
fld qword [esp + 0x268]
fmul dword [ebp + 0x3c]
fstp dword [ecx + 0x1f2c]
fld qword [esp + 0x270]
fmul dword [ebp + 0x38]
fstp dword [ecx + 0x1c1c]
fld qword [esp + 0x2b8]
fcomp dword [0x88ba1c]
fnstsw ax
sahf
jb 0x6dcabd
mov al, byte [esp + 0x2d0]
test al, al
je 0x6dcbaa
mov ecx, dword [esp + 0x230]
mov dword [ecx + 0x95e8], 3
fld dword [0x88ba18]
fld dword [0x88ba14]
fld qword [esp + 0x2b8]
fmul st(1)
fadd st(2)
fstp dword [esp + 0x1ec]
mov esi, dword [esp + 0x1ec]
and esi, 0x40000000
add esi, esi
sar esi, 0x1f
and esi, 0x7fffffff
mov edi, esi
xor edi, 0xffffffff
and esi, 0x40000000
and edi, dword [esp + 0x1ec]
or edi, esi
mov dword [esp + 0x1ec], edi
fld dword [0x88ba10]
fld dword [0x88ba0c]
fld dword [esp + 0x1ec]
fadd st(2)
fmul st(1)
fxch st(3)
fmul qword [esp + 0x280]
faddp st(4)
fxch st(3)
fstp dword [esp + 0x1ec]
mov eax, dword [esp + 0x1ec]
and eax, 0x40000000
add eax, eax
sar eax, 0x1f
and eax, 0x7fffffff
mov dword [esp + 0x1f0], eax
mov edx, eax
xor edx, 0xffffffff
and edx, dword [esp + 0x1ec]
and eax, 0x40000000
or edx, eax
mov dword [esp + 0x1ec], edx
mov al, byte [ecx + 0x462e]
cmp al, 1
fld dword [esp + 0x1ec]
faddp st(1)
fmulp st(2)
fxch st(1)
fstp dword [ecx + 0x95fc]
je 0x6dd396
mov eax, ecx
fstp dword [eax + 0x95f8]
mov eax, dword [esp + 0x230]
push eax
mov ecx, dword [esp + 0x240]
call fcn.004e3efc
mov esi, eax
test esi, esi
jl 0x6dd311
mov edx, dword [esp + 0x230]
push edx
mov ecx, dword [esp + 0x240]
call fcn.006c2a68
push eax
mov ecx, dword [esp + 0x240]
call fcn.006c2bb8
mov edx, dword [esp + 0x23c]
mov eax, dword [edx + esi*4 + 0x4010]
mov dword [esp + 0x230], eax
mov eax, dword [esp + 0x230]
push eax
mov ecx, dword [esp + 0x240]
call fcn.006c2a68
push eax
mov ecx, dword [esp + 0x240]
call fcn.006c2738
mov esi, eax
test esi, esi
je 0x6dd29e
push 0
call fcn.006f4c6c
mov dword [esp + 0x23c], eax
add esp, 4
xor edx, edx
lea ecx, [ebp + 0x2e8]
mov dword [esp + 0x2d0], edx
mov dword [esp + 0x2d4], ecx
call fcn.006ea05c
movzx edx, al
test edx, edx
je 0x6dd284
push esi
mov ecx, dword [esp + 0x240]
call fcn.006c29c8
lea edi, [esp + 0xcc]
mov edx, dword [ebp + 0x1f4]
add edx, 4
movzx ecx, byte [ebp + 0x1f3]
mov eax, dword [esp + 0x2d0]
push eax
xor eax, eax
push ecx
mov ecx, esi
push eax
push dword [ebp + 0x1fc]
push eax
mov eax, dword [esp + 0x24c]
push eax
push edx
push edi
call fcn.006e002c
cmp eax, 4
je 0x6dd278
test eax, eax
jne 0x6dd1eb
mov byte [ebp + 0x1f3], 0
push esi
mov ecx, dword [esp + 0x240]
call fcn.006c29c8
mov edi, dword [ebx + 0x18]
mov edx, dword [esp + 0x240]
test edx, edx
mov dword [edi], eax
jne 0x6dcd0a
xor edx, edx
mov edi, dword [esi + 0x28]
mov dword [esi + 0x58], edx
mov dword [esi + 0x5c], edx
mov dword [esi + 0x60], edx
mov dword [esi + 0x6c], edx
mov byte [esi + 0x64], dl
mov dword [esi + 0x68], 0x3f800000
mov byte [esi + 0x65], dl
mov byte [esi + 0x66], dl
mov dword [esp + 0x240], edi
jmp 0x6dcdc9
mov ecx, dword [esp + 0x2d4]
call fcn.006ea05c
movzx edx, al
test edx, edx
je 0x6dcd2c
mov edx, dword [esi + 0x28]
mov dword [esp + 0x240], edx
jmp 0x6dcdc9
mov edx, dword [esi + 0x28]
mov edi, dword [edx + 0x234]
test edi, edi
mov dword [esp + 0x240], edx
je 0x6dcdc9
mov eax, dword [esi + 0x58]
mov edx, dword [esi + 0x5c]
mov edi, dword [esp + 0x240]
add edx, dword [esi + 0x58]
mov edi, dword [edi + 0x35c]
add eax, dword [esp + 0x334]
mov dword [esp + 0x2d0], eax
add dword [esp + 0x34c], edx
test eax, eax
jge 0x6dcd7e
xor eax, eax
xor edx, edx
mov dword [esp + 0x2d0], edx
lea edx, [eax + 4]
cmp edx, edi
jle 0x6dcd8f
lea eax, [edi - 4]
mov edx, edi
mov dword [esi + 0x58], eax
jmp 0x6dcd99
mov ecx, dword [esp + 0x2d0]
mov dword [esi + 0x58], ecx
mov ecx, dword [esp + 0x34c]
cmp ecx, edx
jge 0x6dcdab
mov dword [esp + 0x34c], edx
mov edx, dword [esp + 0x34c]
cmp edx, edi
jle 0x6dcdbd
mov dword [esp + 0x34c], edi
mov edx, dword [esp + 0x34c]
sub edx, eax
mov dword [esi + 0x5c], edx
mov edx, dword [esp + 0x254]
mov edi, dword [esp + 0x348]
mov byte [esi + 0x140], dl
movsx edx, byte [edi + 0x29]
fld qword [0x88ba00]
fstp qword [esp]
mov dword [esp + 0x228], edx
fild dword [esp + 0x228]
fmul qword [0x88b9f8]
fstp qword [esp + 8]
call sub.MSVCRT.dll_pow
mov edx, dword [esp + 0x240]
fmul qword [esp + 0x2b0]
fstp dword [esi + 0x14c]
mov edi, dword [edx + 0x360]
cmp edi, 2
jge 0x6dce33
fld qword [esp + 0x278]
fstp dword [esi + 0x148]
mov edx, dword [esp + 0x244]
mov edi, dword [esp + 0x338]
mov byte [esi + 0x13a], dl
mov edx, dword [esp + 0x248]
mov byte [esi + 0x13b], dl
mov edx, dword [esp + 0x24c]
mov byte [esi + 0x138], dl
mov edx, dword [esp + 0x250]
mov byte [esi + 0x139], dl
mov edx, dword [esp + 0x33c]
neg edx
mov dword [esi + 0x130], edi
mov ecx, esi
mov dword [esi + 0x134], edx
xor edx, edx
push edx
push edx
push 1
call fcn.006e3dcc
lea ecx, [esp + 0x1f8]
call fcn.00736414
mov ecx, dword [esp + 0x2d4]
call fcn.006ea05c
movzx edx, al
test edx, edx
jne 0x6dd169
mov edx, dword [esi + 0x28]
mov edi, dword [edx + 0x234]
test edi, edi
je 0x6dd169
lea ecx, [esp + 0x1fc]
call fcn.006ebda8
mov ecx, dword [ebp + 0x1f4]
add ecx, 4
push dword [esi + 0x28]
call fcn.006d47a4
mov edi, eax
mov ecx, dword [esi + 0x28]
add ecx, 0x344
lea edx, [esp + 0x204]
push edx
call fcn.006ec268
lea ecx, [esp + 0x204]
lea edx, [esp + 0x20c]
push 0
push edx
call fcn.006ecde8
lea edx, [esp + 0x1f8]
push dword [esp + 0x20c]
push edi
push 0x86d9dc
push edx
call fcn.007020f0
add esp, 0x10
lea ecx, [esp + 0x20c]
call fcn.00701810
mov ecx, dword [esp + 0x204]
test ecx, ecx
je 0x6dcf57
mov dword [esp + 0x204], 0
je 0x6dcf57
push 1
call fcn.00433260
mov ecx, dword [esp + 0x208]
test ecx, ecx
je 0x6dcf76
mov dword [esp + 0x208], 0
je 0x6dcf76
push 1
call fcn.00433290
lea ecx, [esp + 0x1f8]
push 1
call fcn.00701c60
lea ecx, [esp + 0x210]
call fcn.006ebda8
lea ecx, [esp + 0x210]
add ebp, 0x2f0
push ebp
call fcn.006e9d34
lea ecx, [esp + 0x218]
lea edx, [esp + 0x1f8]
push 0
push edx
call fcn.006ea08c
lea ecx, [esp + 0x210]
push eax
call fcn.006ea37c
mov ecx, dword [esp + 0x218]
test ecx, ecx
je 0x6dcfe5
mov dword [esp + 0x218], 0
je 0x6dcfe5
push 1
call fcn.00433260
mov ecx, dword [esp + 0x21c]
test ecx, ecx
je 0x6dd004
mov dword [esp + 0x21c], 0
je 0x6dd004
push 1
call fcn.00433290
add esp, 0xfffffff8
mov ecx, esp
push 0x86d9e4
call fcn.00701780
lea ecx, [esp + 0x218]
mov dword [esp + 4], 0xffffffff
call fcn.006eda14
mov ecx, dword [esi + 0x28]
lea ebp, [esp + 0x210]
xor edx, edx
push edx
push edx
push edx
push ebp
call fcn.006c42c8
mov ebp, dword [esi + 0x28]
lea ecx, [ebp + 0x60]
mov eax, dword [ebp + 0x60]
call dword [eax + 0x24]
mov dword [ebp + 0x5c], 0
lea ecx, [ebp + 0x98]
mov eax, dword [ebp + 0x98]
call dword [eax + 0x24]
mov dword [ebp + 0x94], 0
lea ecx, [ebp + 0xd0]
mov eax, dword [ebp + 0xd0]
call dword [eax + 0x24]
mov dword [ebp + 0xcc], 0
lea ecx, [ebp + 0x108]
mov eax, dword [ebp + 0x108]
call dword [eax + 0x24]
mov dword [ebp + 0x104], 0
lea ecx, [ebp + 0x140]
mov eax, dword [ebp + 0x140]
call dword [eax + 0x24]
mov dword [ebp + 0x13c], 0
lea ecx, [ebp + 0x178]
mov eax, dword [ebp + 0x178]
call dword [eax + 0x24]
xor eax, eax
mov edx, dword [esp + 0x230]
mov dword [ebp + 0x174], eax
mov ecx, dword [esp + 0x210]
test ecx, ecx
mov dword [ebp + 0x234], eax
mov dword [ebp + 0x35c], eax
mov dword [ebp + 0x360], eax
mov dword [edx + 0x9654], 3
je 0x6dd10c
mov dword [esp + 0x210], 0
je 0x6dd10c
push 1
call fcn.00433260
mov ecx, dword [esp + 0x214]
test ecx, ecx
je 0x6dd12b
mov dword [esp + 0x214], 0
je 0x6dd12b
push 1
call fcn.00433290
mov ecx, dword [esp + 0x1fc]
test ecx, ecx
je 0x6dd14a
mov dword [esp + 0x1fc], 0
je 0x6dd14a
push 1
call fcn.00433260
mov ecx, dword [esp + 0x200]
test ecx, ecx
je 0x6dd169
mov dword [esp + 0x200], 0
je 0x6dd169
push 1
call fcn.00433290
lea ecx, [esp + 0x1f8]
call fcn.00701810
lea ecx, [esp + 0xdc]
call fcn.00701810
lea ecx, [esp + 0xd8]
call fcn.00701810
lea ecx, [esp + 0xd4]
call fcn.00701810
mov ecx, dword [esp + 0xcc]
test ecx, ecx
je 0x6dd1b8
mov dword [esp + 0xcc], 0
je 0x6dd1b8
push 1
call fcn.00433260
mov ecx, dword [esp + 0xd0]
test ecx, ecx
je 0x6dd1d7
je 0x6dd1d7
mov dword [esp + 0xd0], 0
push 1
call fcn.00433290
mov eax, 1
add esp, 0x354
pop ebp
pop esi
pop edi
mov esp, ebx
pop ebx
ret 0x14
push esi
mov ecx, dword [esp + 0x240]
call fcn.006c29c8
push eax
mov ecx, dword [esp + 0x240]
call fcn.006c2b28
lea ecx, [esp + 0xdc]
call fcn.00701810
lea ecx, [esp + 0xd8]
call fcn.00701810
lea ecx, [esp + 0xd4]
call fcn.00701810
mov ecx, dword [esp + 0xcc]
test ecx, ecx
je 0x6dd248
mov dword [esp + 0xcc], 0
je 0x6dd248
push 1
call fcn.00433260
mov ecx, dword [esp + 0xd0]
test ecx, ecx
je 0x6dd267
je 0x6dd267
mov dword [esp + 0xd0], 0
push 1
call fcn.00433290
xor eax, eax
add esp, 0x354
pop ebp
pop esi
pop edi
mov esp, ebx
pop ebx
ret 0x14
mov byte [ebp + 0x1f2], 1
jmp 0x6dd1eb
xor edx, edx
mov dword [esp + 0x238], edx
call fcn.006f4c8c
mov dword [esp + 0x2d0], eax
jmp 0x6dcc60
lea ecx, [esp + 0xdc]
call fcn.00701810
lea ecx, [esp + 0xd8]
call fcn.00701810
lea ecx, [esp + 0xd4]
call fcn.00701810
mov ecx, dword [esp + 0xcc]
test ecx, ecx
je 0x6dd2e1
mov dword [esp + 0xcc], 0
je 0x6dd2e1
push 1
call fcn.00433260
mov ecx, dword [esp + 0xd0]
test ecx, ecx
je 0x6dd300
je 0x6dd300
mov dword [esp + 0xd0], 0
push 1
call fcn.00433290
xor eax, eax
add esp, 0x354
pop ebp
pop esi
pop edi
mov esp, ebx
pop ebx
ret 0x14
mov ecx, dword [esp + 0x230]
lea esi, [ecx + 0x9654]
lea edx, [ecx + 0xa0e8]
lea eax, [esp + 0x1f4]
push eax
push edx
push esi
call fcn.0068b0d0
lea eax, [esp + 0x1f4]
push eax
mov ecx, dword [esp + 0x234]
call fcn.0069bfb8
lea eax, [esp + 0x1f4]
push eax
mov ecx, dword [esp + 0x234]
call fcn.0069c048
mov ecx, dword [esp + 0x230]
lea esi, [ecx + 0x95e8]
lea edx, [ecx + 0xa0c4]
lea eax, [esp + 0x1f4]
push eax
push edx
push esi
call fcn.006835c0
lea eax, [esp + 0x1f4]
push eax
mov ecx, dword [esp + 0x234]
call fcn.0068bcb0
jmp 0x6dcbfe
fld dword [0x88ba08]
fmul st(1)
mov eax, ecx
fst dword [eax + 0x95f8]
fld dword [0x88ba48]
fsubr st(1), st(0)
fsubr st(2), st(0)
fxch st(1)
fmulp st(2)
fsubrp st(1)
fstp dword [eax + 0x4394]
jmp 0x6dcbaa
fstp st(0)
fstp st(2)
mov ecx, dword [esp + 0x230]
mov ebp, dword [esp + 0x234]
fld qword [esp + 0x258]
jmp 0x6dc79e
fcomp dword [0x88ba20]
fnstsw ax
sahf
jae 0x6dc422
mov dword [edx + 0x5e4], 0
jmp 0x6dc422
lea ecx, [esp + 0xdc]
call fcn.00701810
lea ecx, [esp + 0xd8]
call fcn.00701810
lea ecx, [esp + 0xd4]
call fcn.00701810
mov ecx, dword [esp + 0xcc]
test ecx, ecx
je 0x6dd447
mov dword [esp + 0xcc], 0
je 0x6dd447
push 1
call fcn.00433260
mov ecx, dword [esp + 0xd0]
test ecx, ecx
je 0x6dd466
je 0x6dd466
mov dword [esp + 0xd0], 0
push 1
call fcn.00433290
xor eax, eax
add esp, 0x354
pop ebp
pop esi
pop edi
mov esp, ebx
pop ebx
ret 0x14
mov ecx, dword [esp + 0xcc]
test ecx, ecx
je 0x6dd496
mov dword [esp + 0xcc], 0
je 0x6dd496
push 1
call fcn.00433260
mov ecx, dword [esp + 0xd0]
test ecx, ecx
je 0x6dd4b5
je 0x6dd4b5
mov dword [esp + 0xd0], 0
push 1
call fcn.00433290
xor eax, eax
add esp, 0x354
pop ebp
pop esi
pop edi
mov esp, ebx
pop ebx
ret 0x14
mov ecx, dword [esp + 0xcc]
test ecx, ecx
je 0x6dd4e5
mov dword [esp + 0xcc], 0
je 0x6dd4e5
push 1
call fcn.00433260
mov ecx, dword [esp + 0xd0]
test ecx, ecx
je 0x6dd504
je 0x6dd504
mov dword [esp + 0xd0], 0
push 1
call fcn.00433290
xor eax, eax
add esp, 0x354
pop ebp
pop esi
pop edi
mov esp, ebx
pop ebx
ret 0x14