Function at 0x6a8964
Capabilities:
Get geographical location

Disassembly:
push ebp
mov ebp, esp
push ecx
mov ecx, 0xf7
push 0
push 0
dec ecx
jne 0x6a896d
xchg dword [ebp - 4], ecx
push ebx
push esi
push edi
mov byte [ebp - 0x321], cl
mov dword [ebp - 0x320], edx
mov dword [ebp - 0x31c], eax
mov eax, dword [ebp - 0x31c]
call fcn.004042a4
mov eax, dword [ebp - 0x320]
call fcn.004042a4
xor eax, eax
push ebp
push 0x6ad37e
push dword fs:[eax]
mov dword fs:[eax], esp
lea edx, [ebp - 0x608]
mov eax, dword [ebp - 0x31c]
call fcn.0044bf5c
mov edx, dword [ebp - 0x608]
mov eax, 0x6ad3a0
call fcn.004043d8
test eax, eax
jle 0x6a8a27
mov edx, dword [ebp - 0x31c]
lea eax, [ebp - 0x604]
call fcn.0040619e
lea eax, [ebp - 0x604]
call fcn.004066e7
call fcn.00402898
lea edx, [ebp - 0x31c]
lea eax, [ebp - 0x604]
call fcn.004044d8
lea eax, [ebp - 0x604]
call fcn.00406630
call fcn.00402898
lea eax, [ebp - 0x604]
call fcn.00406308
call fcn.00402898
mov eax, dword [ebp - 0x320]
call fcn.004040f0
dec eax
jle 0x6a8a72
mov eax, dword [ebp - 0x320]
call fcn.004040f0
mov edx, dword [ebp - 0x320]
cmp byte [edx + eax - 1], 0x5c
jne 0x6a8a72
lea eax, [ebp - 0x320]
push eax
mov eax, dword [ebp - 0x320]
call fcn.004040f0
mov ecx, eax
dec ecx
mov edx, 1
mov eax, dword [ebp - 0x320]
call fcn.004042f4
mov eax, dword [ebp - 0x320]
mov edx, 0x6ad3b0
call fcn.00404200
jne 0x6a8a8f
lea eax, [ebp - 0x320]
call fcn.00403e74
mov eax, dword [0x841dc0]
mov edx, dword [ebp - 0x31c]
call fcn.00403ec8
lea edx, [ebp - 0x608]
mov eax, dword [ebp - 0x31c]
call fcn.00409be0
mov edx, dword [ebp - 0x608]
lea eax, [ebp - 0x708]
mov ecx, 0xff
call fcn.004040cc
lea edx, [ebp - 0x708]
lea eax, [ebp - 0x3e5]
mov cl, 0x14
call fcn.00402d1c
lea edx, [ebp - 0x3e5]
mov eax, 0x6ad3b4
call fcn.00402b9c
mov dword [ebp - 4], eax
cmp dword [ebp - 4], 1
jle 0x6a8b20
lea eax, [ebp - 0x720]
push eax
mov ecx, dword [ebp - 4]
dec ecx
mov edx, 1
lea eax, [ebp - 0x3e5]
call fcn.004028f0
lea edx, [ebp - 0x720]
lea eax, [ebp - 0x3e5]
mov cl, 0x14
call fcn.00402d1c
mov byte [ebp - 0x3c5], 0
mov byte [ebp - 0x315], 0
mov byte [0x94e920], 0
lea eax, [ebp - 0x164]
call fcn.00403e74
lea eax, [ebp - 0x1c4]
call fcn.00403e74
mov byte [ebp - 0x179], 0
mov byte [ebp - 0x40e], 0
mov eax, dword [0x841478]
mov byte [eax], 0
lea eax, [ebp - 0x30a]
mov edx, 0x94e880
mov cl, 1
call fcn.00402d1c
mov dword [0x94e8e0], 0xffffffff
xor eax, eax
mov dword [ebp - 0x200], eax
mov dword [ebp - 0x1fc], 0x3ff00000
xor eax, eax
mov dword [ebp - 0x314], eax
mov dword [ebp - 0x310], 0x3ff00000
mov eax, dword [0x8408e0]
mov byte [eax], 0
lea ecx, [ebp - 0x158]
mov edx, 0x6ad3c0
mov eax, dword [ebp - 0x31c]
call fcn.00409a28
lea ecx, [ebp - 0x1f0]
mov edx, 0x6ad3d0
mov eax, dword [ebp - 0x31c]
call fcn.00409a28
lea ecx, [ebp - 0x1f4]
mov edx, 0x6ad3e0
mov eax, dword [ebp - 0x31c]
call fcn.00409a28
lea ecx, [ebp - 0x304]
mov edx, 0x6ad3f0
mov eax, dword [ebp - 0x31c]
call fcn.00409a28
lea ecx, [ebp - 0x1f8]
mov edx, 0x6ad400
mov eax, dword [ebp - 0x31c]
call fcn.00409a28
lea ecx, [ebp - 0x308]
mov edx, 0x6ad410
mov eax, dword [ebp - 0x31c]
call fcn.00409a28
lea edx, [ebp - 0x330]
mov eax, dword [ebp - 0x158]
call fcn.00409be0
lea edx, [ebp - 0x334]
mov eax, dword [ebp - 0x1f4]
call fcn.00409be0
lea edx, [ebp - 0x608]
mov eax, dword [ebp - 0x330]
call fcn.00408fa8
mov edx, dword [ebp - 0x608]
lea eax, [ebp - 0x708]
mov ecx, 0xff
call fcn.004040cc
lea edx, [ebp - 0x708]
lea eax, [ebp - 0x336]
mov cl, 1
call fcn.00402d1c
lea eax, [ebp - 0x608]
push eax
mov ecx, 1
mov edx, 2
mov eax, dword [ebp - 0x330]
call fcn.004042f4
mov edx, dword [ebp - 0x608]
lea eax, [ebp - 0x708]
mov ecx, 0xff
call fcn.004040cc
lea edx, [ebp - 0x708]
lea eax, [ebp - 0x338]
mov cl, 1
call fcn.00402d1c
lea edx, [ebp - 0x608]
mov eax, dword [ebp - 0x31c]
call fcn.00408fe4
mov edx, dword [ebp - 0x608]
mov eax, 0x6ad420
call fcn.004043d8
test eax, eax
jle 0x6a8dfc
lea eax, [ebp - 0x394]
mov edx, dword [ebp - 0x31c]
call fcn.00403f0c
mov eax, dword [ebp - 0x394]
call fcn.004040f0
test eax, eax
jle 0x6a8d5e
mov dword [ebp - 0x3cc], eax
mov dword [ebp - 0x38c], 1
mov eax, dword [ebp - 0x394]
mov edx, dword [ebp - 0x38c]
cmp byte [eax + edx - 1], 0x2f
jne 0x6a8d50
lea eax, [ebp - 0x394]
call fcn.004042c0
mov edx, dword [ebp - 0x38c]
mov byte [eax + edx - 1], 0x5c
inc dword [ebp - 0x38c]
dec dword [ebp - 0x3cc]
jne 0x6a8d27
lea ecx, [ebp - 0x32c]
mov edx, 0x6ad430
mov eax, dword [ebp - 0x394]
call fcn.00409a28
mov eax, dword [ebp - 0x320]
call fcn.0044c49c
test al, al
je 0x6a8dc5
lea eax, [ebp - 0x608]
call fcn.0044c07c
push dword [ebp - 0x608]
push 0x6ad3b0
lea edx, [ebp - 0x724]
mov eax, dword [ebp - 0x32c]
call fcn.00409be0
push dword [ebp - 0x724]
lea eax, [ebp - 0x32c]
mov edx, 3
call fcn.004041b0
jmp 0x6a8e92
push dword [ebp - 0x320]
push 0x6ad3b0
lea edx, [ebp - 0x608]
mov eax, dword [ebp - 0x32c]
call fcn.00409be0
push dword [ebp - 0x608]
lea eax, [ebp - 0x32c]
mov edx, 3
call fcn.004041b0
jmp 0x6a8e92
lea ecx, [ebp - 0x32c]
mov edx, 0x6ad430
mov eax, dword [ebp - 0x31c]
call fcn.00409a28
mov eax, dword [ebp - 0x320]
call fcn.0044c49c
test al, al
je 0x6a8e60
lea eax, [ebp - 0x608]
call fcn.0044c07c
push dword [ebp - 0x608]
push 0x6ad3b0
lea edx, [ebp - 0x724]
mov eax, dword [ebp - 0x32c]
call fcn.00409be0
push dword [ebp - 0x724]
lea eax, [ebp - 0x32c]
mov edx, 3
call fcn.004041b0
jmp 0x6a8e92
push dword [ebp - 0x320]
push 0x6ad3b0
lea edx, [ebp - 0x608]
mov eax, dword [ebp - 0x32c]
call fcn.00409be0
push dword [ebp - 0x608]
lea eax, [ebp - 0x32c]
mov edx, 3
call fcn.004041b0
lea edx, [ebp - 0x608]
mov eax, dword [ebp - 0x158]
call fcn.00409c60
mov edx, dword [ebp - 0x608]
lea eax, [ebp - 0x158]
call fcn.00403f0c
lea edx, [ebp - 0x608]
mov eax, dword [ebp - 0x1f4]
call fcn.00409c60
mov edx, dword [ebp - 0x608]
lea eax, [ebp - 0x1f4]
call fcn.00403f0c
xor eax, eax
mov dword [ebp - 0x38c], eax
mov eax, dword [ebp - 0x38c]
xor edx, edx
mov dword [ebp + eax*8 - 0x1c0], edx
mov dword [ebp + eax*8 - 0x1bc], edx
inc dword [ebp - 0x38c]
cmp dword [ebp - 0x38c], 8
jne 0x6a8ede
xor eax, eax
mov dword [ebp - 0x1d4], eax
mov dword [ebp - 0x1d0], eax
xor eax, eax
mov dword [ebp - 0x1dc], eax
mov dword [ebp - 0x1d8], eax
xor eax, eax
mov dword [ebp - 0x1ec], eax
mov dword [ebp - 0x1e8], eax
xor eax, eax
mov dword [ebp - 0x1e4], eax
mov dword [ebp - 0x1e0], eax
mov byte [ebp - 0x17a], 0
mov byte [ebp - 0x202], 0
mov byte [ebp - 0x30b], 0
mov byte [ebp - 0x201], 0
mov byte [ebp - 0x3aa], 0
mov byte [ebp - 0x3a9], 0
mov byte [ebp - 0x203], 0
cmp byte [ebp + 8], 0
je 0x6a8fb8
lea edx, [ebp - 0x608]
mov eax, dword [ebp - 0x31c]
call fcn.0044bf5c
mov edx, dword [ebp - 0x608]
mov eax, 0x6ad440
call fcn.004043d8
test eax, eax
jle 0x6a8fb8
mov eax, dword [0x841dc0]
mov eax, dword [eax]
call fcn.004f3c7c
mov eax, 0x6ad450
call fcn.004097b8
test al, al
je 0x6a8fb8
push ebp
call fcn.006a6cec
pop ecx
lea edx, [ebp - 0x608]
mov eax, dword [ebp - 0x31c]
call fcn.0044bf5c
mov edx, dword [ebp - 0x608]
mov eax, 0x6ad464
call fcn.004043d8
test eax, eax
jle 0x6a8fea
push ebp
mov eax, dword [ebp - 0x31c]
call fcn.006a870c
pop ecx
fld qword [ebp - 0x1c0]
fabs
fstp xword [ebp - 0x730]
wait
fld qword [ebp - 0x1b8]
fabs
fld xword [ebp - 0x730]
faddp st(1)
fstp xword [ebp - 0x73c]
wait
fld qword [ebp - 0x1b0]
fabs
fld xword [ebp - 0x73c]
faddp st(1)
fstp xword [ebp - 0x748]
wait
fld qword [ebp - 0x1a8]
fabs
fld xword [ebp - 0x748]
faddp st(1)
fstp xword [ebp - 0x754]
wait
fld qword [ebp - 0x1a0]
fabs
fld xword [ebp - 0x754]
faddp st(1)
fstp xword [ebp - 0x760]
wait
fld qword [ebp - 0x198]
fabs
fld xword [ebp - 0x760]
faddp st(1)
fcomp dword [0x6ad46c]
fnstsw ax
sahf
jne 0x6a9079
mov byte [ebp - 0x17a], 0
jmp 0x6a9080
mov byte [ebp - 0x17a], 1
cmp byte [ebp - 0x17a], 0
jne 0x6a909f
mov eax, dword [ebp - 0x304]
call fcn.004097b8
test al, al
je 0x6a909f
push ebp
call fcn.006a6708
pop ecx
fld qword [ebp - 0x1c0]
fabs
fstp xword [ebp - 0x730]
wait
fld qword [ebp - 0x1b8]
fabs
fld xword [ebp - 0x730]
faddp st(1)
fstp xword [ebp - 0x73c]
wait
fld qword [ebp - 0x1b0]
fabs
fld xword [ebp - 0x73c]
faddp st(1)
fstp xword [ebp - 0x748]
wait
fld qword [ebp - 0x1a8]
fabs
fld xword [ebp - 0x748]
faddp st(1)
fstp xword [ebp - 0x754]
wait
fld qword [ebp - 0x1a0]
fabs
fld xword [ebp - 0x754]
faddp st(1)
fstp xword [ebp - 0x760]
wait
fld qword [ebp - 0x198]
fabs
fld xword [ebp - 0x760]
faddp st(1)
fcomp dword [0x6ad46c]
fnstsw ax
sahf
jne 0x6a912e
mov byte [ebp - 0x17a], 0
jmp 0x6a9135
mov byte [ebp - 0x17a], 1
lea ecx, [ebp - 0x304]
mov edx, 0x6ad478
mov eax, dword [ebp - 0x31c]
call fcn.00409a28
cmp byte [ebp - 0x17a], 0
jne 0x6a9208
mov eax, dword [ebp - 0x304]
call fcn.004097b8
test al, al
je 0x6a9208
push ebp
call fcn.006a6708
pop ecx
fld qword [ebp - 0x1c0]
fabs
fstp xword [ebp - 0x730]
wait
fld qword [ebp - 0x1b8]
fabs
fld xword [ebp - 0x730]
faddp st(1)
fstp xword [ebp - 0x73c]
wait
fld qword [ebp - 0x1b0]
fabs
fld xword [ebp - 0x73c]
faddp st(1)
fstp xword [ebp - 0x748]
wait
fld qword [ebp - 0x1a8]
fabs
fld xword [ebp - 0x748]
faddp st(1)
fstp xword [ebp - 0x754]
wait
fld qword [ebp - 0x1a0]
fabs
fld xword [ebp - 0x754]
faddp st(1)
fstp xword [ebp - 0x760]
wait
fld qword [ebp - 0x198]
fabs
fld xword [ebp - 0x760]
faddp st(1)
fcomp dword [0x6ad46c]
fnstsw ax
sahf
jne 0x6a9201
mov byte [ebp - 0x17a], 0
jmp 0x6a9208
mov byte [ebp - 0x17a], 1
lea ecx, [ebp - 0x304]
mov edx, 0x6ad488
mov eax, dword [ebp - 0x31c]
call fcn.00409a28
cmp byte [ebp - 0x17a], 0
jne 0x6a92db
mov eax, dword [ebp - 0x304]
call fcn.004097b8
test al, al
je 0x6a92db
push ebp
call fcn.006a6708
pop ecx
fld qword [ebp - 0x1c0]
fabs
fstp xword [ebp - 0x730]
wait
fld qword [ebp - 0x1b8]
fabs
fld xword [ebp - 0x730]
faddp st(1)
fstp xword [ebp - 0x73c]
wait
fld qword [ebp - 0x1b0]
fabs
fld xword [ebp - 0x73c]
faddp st(1)
fstp xword [ebp - 0x748]
wait
fld qword [ebp - 0x1a8]
fabs
fld xword [ebp - 0x748]
faddp st(1)
fstp xword [ebp - 0x754]
wait
fld qword [ebp - 0x1a0]
fabs
fld xword [ebp - 0x754]
faddp st(1)
fstp xword [ebp - 0x760]
wait
fld qword [ebp - 0x198]
fabs
fld xword [ebp - 0x760]
faddp st(1)
fcomp dword [0x6ad46c]
fnstsw ax
sahf
jne 0x6a92d4
mov byte [ebp - 0x17a], 0
jmp 0x6a92db
mov byte [ebp - 0x17a], 1
lea ecx, [ebp - 0x304]
mov edx, 0x6ad498
mov eax, dword [ebp - 0x31c]
call fcn.00409a28
cmp byte [ebp - 0x17a], 0
jne 0x6a93ae
mov eax, dword [ebp - 0x304]
call fcn.004097b8
test al, al
je 0x6a93ae
push ebp
call fcn.006a68cc
pop ecx
fld qword [ebp - 0x1c0]
fabs
fstp xword [ebp - 0x730]
wait
fld qword [ebp - 0x1b8]
fabs
fld xword [ebp - 0x730]
faddp st(1)
fstp xword [ebp - 0x73c]
wait
fld qword [ebp - 0x1b0]
fabs
fld xword [ebp - 0x73c]
faddp st(1)
fstp xword [ebp - 0x748]
wait
fld qword [ebp - 0x1a8]
fabs
fld xword [ebp - 0x748]
faddp st(1)
fstp xword [ebp - 0x754]
wait
fld qword [ebp - 0x1a0]
fabs
fld xword [ebp - 0x754]
faddp st(1)
fstp xword [ebp - 0x760]
wait
fld qword [ebp - 0x198]
fabs
fld xword [ebp - 0x760]
faddp st(1)
fcomp dword [0x6ad46c]
fnstsw ax
sahf
jne 0x6a93a7
mov byte [ebp - 0x17a], 0
jmp 0x6a93ae
mov byte [ebp - 0x17a], 1
mov eax, dword [ebp - 0x158]
call fcn.004097b8
test al, al
jne 0x6a9459
lea eax, [ebp - 0x764]
mov edx, dword [ebp - 0x158]
mov dl, byte [edx]
mov byte [eax + 1], dl
mov byte [eax], 1
lea edx, [ebp - 0x764]
lea eax, [ebp - 0x768]
call fcn.00402d00
lea eax, [ebp - 0x76c]
mov edx, dword [ebp - 0x158]
mov dl, byte [edx + 1]
mov byte [eax + 1], dl
mov byte [eax], 1
lea edx, [ebp - 0x76c]
lea eax, [ebp - 0x768]
mov cl, 2
call fcn.00402cd0
lea edx, [ebp - 0x768]
lea eax, [ebp - 0x77c]
call fcn.00402d00
mov edx, 0x6ad4a0
lea eax, [ebp - 0x77c]
mov cl, 0xc
call fcn.00402cd0
lea edx, [ebp - 0x77c]
lea eax, [ebp - 0x608]
call fcn.00404094
mov edx, dword [ebp - 0x608]
lea eax, [ebp - 0x158]
mov ecx, dword [ebp - 0x330]
call fcn.0040413c
mov eax, dword [ebp - 0x1f4]
call fcn.004097b8
test al, al
jne 0x6a9504
lea eax, [ebp - 0x764]
mov edx, dword [ebp - 0x1f4]
mov dl, byte [edx]
mov byte [eax + 1], dl
mov byte [eax], 1
lea edx, [ebp - 0x764]
lea eax, [ebp - 0x768]
call fcn.00402d00
lea eax, [ebp - 0x76c]
mov edx, dword [ebp - 0x1f4]
mov dl, byte [edx + 1]
mov byte [eax + 1], dl
mov byte [eax], 1
lea edx, [ebp - 0x76c]
lea eax, [ebp - 0x768]
mov cl, 2
call fcn.00402cd0
lea edx, [ebp - 0x768]
lea eax, [ebp - 0x77c]
call fcn.00402d00
mov edx, 0x6ad4a0
lea eax, [ebp - 0x77c]
mov cl, 0xc
call fcn.00402cd0
lea edx, [ebp - 0x77c]
lea eax, [ebp - 0x608]
call fcn.00404094
mov edx, dword [ebp - 0x608]
lea eax, [ebp - 0x1f4]
mov ecx, dword [ebp - 0x334]
call fcn.0040413c
mov eax, dword [ebp - 0x158]
call fcn.004097b8
test al, al
je 0x6a9521
push ebp
call fcn.006a3448
pop ecx
mov byte [ebp - 0x202], 1
mov eax, dword [ebp - 0x1f0]
call fcn.004097b8
test al, al
je 0x6a953e
push ebp
call fcn.006a4174
pop ecx
mov byte [ebp - 0x202], 1
mov eax, dword [ebp - 0x1f4]
call fcn.004097b8
test al, al
je 0x6a955b
push ebp
call fcn.006a4d00
pop ecx
mov byte [ebp - 0x202], 1
mov eax, dword [ebp - 0x308]
call fcn.004097b8
test al, al
je 0x6a9587
push ebp
call fcn.006a6a00
pop ecx
lea ecx, [ebp - 0x304]
mov edx, 0x6ad410
mov eax, dword [ebp - 0x31c]
call fcn.00409a28
mov eax, dword [ebp - 0x1f8]
call fcn.004097b8
test al, al
je 0x6a95a7
mov eax, 0x1e
call fcn.00798d60
push ebp
call fcn.006a54bc
pop ecx
lea ecx, [ebp - 0x724]
xor edx, edx
mov eax, dword [ebp - 0x304]
call fcn.00409a28
mov eax, dword [ebp - 0x724]
lea edx, [ebp - 0x608]
call fcn.00409be0
mov edx, dword [ebp - 0x608]
lea eax, [ebp - 0x708]
mov ecx, 0xff
call fcn.004040cc
lea edx, [ebp - 0x708]
mov eax, dword [0x841478]
mov cl, 0x32
call fcn.00402d1c
mov eax, dword [ebp - 0x164]
call fcn.0044c49c
test al, al
jne 0x6a9609
mov byte [ebp - 0x3a9], 1
fld qword [ebp - 0x1c0]
fabs
fstp xword [ebp - 0x730]
wait
fld qword [ebp - 0x1b8]
fabs
fld xword [ebp - 0x730]
faddp st(1)
fstp xword [ebp - 0x73c]
wait
fld qword [ebp - 0x1b0]
fabs
fld xword [ebp - 0x73c]
faddp st(1)
fstp xword [ebp - 0x748]
wait
fld qword [ebp - 0x1a8]
fabs
fld xword [ebp - 0x748]
faddp st(1)
fstp xword [ebp - 0x754]
wait
fld qword [ebp - 0x1a0]
fabs
fld xword [ebp - 0x754]
faddp st(1)
fstp xword [ebp - 0x760]
wait
fld qword [ebp - 0x198]
fabs
fld xword [ebp - 0x760]
faddp st(1)
fcomp dword [0x6ad46c]
fnstsw ax
sahf
jne 0x6a9698
mov byte [ebp - 0x17a], 0
jmp 0x6a969f
mov byte [ebp - 0x17a], 1
mov eax, dword [ebp - 0x1c4]
call fcn.0044c49c
test al, al
je 0x6a96b7
mov byte [ebp - 0x30b], 0
jmp 0x6a96be
mov byte [ebp - 0x30b], 1
cmp byte [ebp - 0x201], 0
jne 0x6a9896
mov eax, dword [0x840bb0]
mov edi, eax
mov esi, 0x6ad4ac
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
mov edx, dword [ebp - 0x1c8]
mov eax, 0x6ad4c0
call fcn.004043d8
test eax, eax
jle 0x6a9705
mov eax, dword [0x840bb0]
mov edi, eax
mov esi, 0x6ad4c4
movsd dword es:[edi], dword [esi]
movsw word es:[edi], word [esi]
movsb byte es:[edi], byte [esi]
mov byte [ebp - 0x201], 1
mov edx, dword [ebp - 0x1c8]
mov eax, 0x6ad4d4
call fcn.004043d8
test eax, eax
jle 0x6a9730
mov eax, dword [0x840bb0]
mov edi, eax
mov esi, 0x6ad4d8
movsd dword es:[edi], dword [esi]
movsw word es:[edi], word [esi]
movsb byte es:[edi], byte [esi]
mov byte [ebp - 0x201], 1
mov edx, dword [ebp - 0x1c8]
mov eax, 0x6ad4e8
call fcn.004043d8
test eax, eax
jle 0x6a975a
mov eax, dword [0x840bb0]
mov edi, eax
mov esi, 0x6ad4ec
movsd dword es:[edi], dword [esi]
movsw word es:[edi], word [esi]
mov byte [ebp - 0x201], 1
mov edx, dword [ebp - 0x1c8]
mov eax, 0x6ad4fc
call fcn.004043d8
test eax, eax
jle 0x6a9784
mov eax, dword [0x840bb0]
mov edi, eax
mov esi, 0x6ad4ac
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
mov byte [ebp - 0x201], 1
mov edx, dword [ebp - 0x1c8]
mov eax, 0x6ad508
call fcn.004043d8
test eax, eax
jle 0x6a97b3
mov eax, dword [0x840bb0]
mov edi, eax
mov esi, 0x6ad50c
mov ecx, 6
rep movsd dword es:[edi], dword [esi]
movsb byte es:[edi], byte [esi]
mov byte [ebp - 0x201], 1
mov edx, dword [ebp - 0x1c8]
mov eax, 0x6ad530
call fcn.004043d8
test eax, eax
jle 0x6a97e1
mov eax, dword [0x840bb0]
mov edi, eax
mov esi, 0x6ad538
mov ecx, 5
rep movsd dword es:[edi], dword [esi]
mov byte [ebp - 0x201], 1
mov edx, dword [ebp - 0x1c8]
mov eax, 0x6ad554
call fcn.004043d8
test eax, eax
jle 0x6a980c
mov eax, dword [0x840bb0]
mov edi, eax
mov esi, 0x6ad55c
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsw word es:[edi], word [esi]
mov byte [ebp - 0x201], 1
mov edx, dword [ebp - 0x1c8]
mov eax, 0x6ad570
call fcn.004043d8
test eax, eax
jle 0x6a983c
mov eax, dword [0x840bb0]
mov edi, eax
mov esi, 0x6ad578
mov ecx, 3
rep movsd dword es:[edi], dword [esi]
movsw word es:[edi], word [esi]
mov byte [ebp - 0x201], 1
mov edx, dword [ebp - 0x1c8]
mov eax, 0x6ad590
call fcn.004043d8
test eax, eax
jle 0x6a9865
mov eax, dword [0x840bb0]
mov edi, eax
mov esi, 0x6ad598
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
mov byte [ebp - 0x201], 1
mov edx, dword [ebp - 0x1c8]
mov eax, 0x6ad5a8
call fcn.004043d8
test eax, eax
jle 0x6a9896
mov eax, dword [0x840bb0]
mov edi, eax
mov esi, 0x6ad5b0
mov ecx, 8
rep movsd dword es:[edi], dword [esi]
movsw word es:[edi], word [esi]
movsb byte es:[edi], byte [esi]
mov byte [ebp - 0x201], 1
cmp byte [ebp - 0x203], 0
je 0x6a98a6
mov byte [ebp - 0x17a], 1
cmp byte [ebp - 0x17a], 0
jne 0x6a98be
mov dword [ebp - 0x328], 7
jmp 0x6ad2ae
fld qword [ebp - 0x1d4]
fadd qword [ebp - 0x1dc]
fadd qword [ebp - 0x1e4]
fadd qword [ebp - 0x1ec]
fcomp dword [0x6ad46c]
fnstsw ax
sahf
jne 0x6a98ea
mov byte [ebp - 0x3aa], 0
jmp 0x6a98f1
mov byte [ebp - 0x3aa], 1
cmp byte [ebp - 0x321], 0
je 0x6a9946
push 0x40
lea edx, [ebp - 0x608]
mov eax, 0x6a30f4
call fcn.00405e74
mov eax, dword [ebp - 0x608]
call fcn.004042b4
push eax
lea edx, [ebp - 0x724]
mov eax, 0x6a30ec
call fcn.00405e74
mov eax, dword [ebp - 0x724]
call fcn.004042b4
push eax
mov eax, dword [0x8415a0]
mov eax, dword [eax]
call fcn.00439350
push eax
call sub.USER32.DLL_MessageBoxA
mov eax, dword [0x8417e4]
mov eax, dword [eax]
call fcn.0042d188
lea eax, [ebp - 0x608]
lea edx, [ebp - 0x179]
call fcn.00404094
mov eax, dword [ebp - 0x608]
call fcn.0044c49c
test al, al
je 0x6a9ab0
mov al, byte [ebp - 0x337]
add al, 0xd0
sub al, 0xa
jae 0x6a9ab0
lea eax, [ebp - 0x336]
mov edx, 0x6ad5d4
xor ecx, ecx
mov cl, byte [eax]
inc ecx
call fcn.00402dd0
jne 0x6a99ab
mov esi, 0x6ad5d8
lea edi, [ebp - 0x179]
movsd dword es:[edi], dword [esi]
movsw word es:[edi], word [esi]
lea eax, [ebp - 0x336]
mov edx, 0x6ad5e0
xor ecx, ecx
mov cl, byte [eax]
inc ecx
call fcn.00402dd0
jne 0x6a99d0
mov esi, 0x6ad5e4
lea edi, [ebp - 0x179]
movsd dword es:[edi], dword [esi]
movsw word es:[edi], word [esi]
lea eax, [ebp - 0x336]
mov edx, 0x6ad5ec
xor ecx, ecx
mov cl, byte [eax]
inc ecx
call fcn.00402dd0
jne 0x6a99f5
mov esi, 0x6ad5f0
lea edi, [ebp - 0x179]
movsd dword es:[edi], dword [esi]
movsw word es:[edi], word [esi]
lea eax, [ebp - 0x336]
mov edx, 0x6ad5f8
xor ecx, ecx
mov cl, byte [eax]
inc ecx
call fcn.00402dd0
jne 0x6a9a1a
mov esi, 0x6ad5fc
lea edi, [ebp - 0x179]
movsd dword es:[edi], dword [esi]
movsw word es:[edi], word [esi]
lea eax, [ebp - 0x336]
mov edx, 0x6ad604
xor ecx, ecx
mov cl, byte [eax]
inc ecx
call fcn.00402dd0
jne 0x6a9a3f
mov esi, 0x6ad5f0
lea edi, [ebp - 0x179]
movsd dword es:[edi], dword [esi]
movsw word es:[edi], word [esi]
lea eax, [ebp - 0x336]
mov edx, 0x6ad608
xor ecx, ecx
mov cl, byte [eax]
inc ecx
call fcn.00402dd0
jne 0x6a9a64
mov esi, 0x6ad60c
lea edi, [ebp - 0x179]
movsd dword es:[edi], dword [esi]
movsw word es:[edi], word [esi]
lea eax, [ebp - 0x336]
mov edx, 0x6ad614
xor ecx, ecx
mov cl, byte [eax]
inc ecx
call fcn.00402dd0
jne 0x6a9a8a
mov esi, 0x6ad618
lea edi, [ebp - 0x179]
movsd dword es:[edi], dword [esi]
movsw word es:[edi], word [esi]
movsb byte es:[edi], byte [esi]
lea eax, [ebp - 0x336]
mov edx, 0x6ad620
xor ecx, ecx
mov cl, byte [eax]
inc ecx
call fcn.00402dd0
jne 0x6a9ab0
mov esi, 0x6ad624
lea edi, [ebp - 0x179]
movsd dword es:[edi], dword [esi]
movsw word es:[edi], word [esi]
movsb byte es:[edi], byte [esi]
lea edx, [ebp - 0x608]
mov eax, dword [ebp - 0x164]
call fcn.006a3258
mov edx, dword [ebp - 0x608]
lea eax, [ebp - 0x708]
mov ecx, 0xff
call fcn.004040cc
lea edx, [ebp - 0x708]
lea eax, [ebp - 0x40e]
mov cl, 0x28
call fcn.00402d1c
lea eax, [ebp - 0x608]
lea edx, [ebp - 0x179]
call fcn.00404094
mov eax, dword [ebp - 0x608]
call fcn.0044c49c
test al, al
je 0x6a9c52
push dword [ebp - 0x164]
push 0x6ad634
lea eax, [ebp - 0x608]
lea edx, [ebp - 0x3e5]
call fcn.00404094
push dword [ebp - 0x608]
push 0x6ad640
lea eax, [ebp - 0x164]
mov edx, 4
call fcn.004041b0
lea eax, [ebp - 0x708]
mov edx, dword [ebp - 0x330]
mov ecx, 0xff
call fcn.004040cc
lea edx, [ebp - 0x708]
lea eax, [ebp - 0x179]
mov cl, 0x14
call fcn.00402d1c
lea eax, [ebp - 0x608]
lea edx, [ebp - 0x40e]
call fcn.00404094
mov eax, dword [ebp - 0x608]
call fcn.0044c49c
test al, al
jne 0x6a9dd5
mov eax, dword [ebp - 0x320]
call fcn.0044c49c
test al, al
je 0x6a9bff
lea eax, [ebp - 0x608]
call fcn.0044c07c
push dword [ebp - 0x608]
push 0x6ad3b0
lea eax, [ebp - 0x724]
lea edx, [ebp - 0x40e]
call fcn.00404094
push dword [ebp - 0x724]
lea eax, [ebp - 0x780]
lea edx, [ebp - 0x179]
call fcn.00404094
push dword [ebp - 0x780]
push 0x6ad430
lea eax, [ebp - 0x32c]
mov edx, 5
call fcn.004041b0
jmp 0x6a9dd5
push dword [ebp - 0x320]
push 0x6ad3b0
lea eax, [ebp - 0x608]
lea edx, [ebp - 0x40e]
call fcn.00404094
push dword [ebp - 0x608]
lea eax, [ebp - 0x724]
lea edx, [ebp - 0x179]
call fcn.00404094
push dword [ebp - 0x724]
push 0x6ad430
lea eax, [ebp - 0x32c]
mov edx, 5
call fcn.004041b0
jmp 0x6a9dd5
mov edx, 0x6ad644
lea eax, [ebp - 0x798]
call fcn.00402d00
lea edx, [ebp - 0x179]
lea eax, [ebp - 0x798]
mov cl, 0x16
call fcn.00402cd0
lea edx, [ebp - 0x798]
lea eax, [ebp - 0x7b0]
call fcn.00402d00
mov edx, 0x6ad648
lea eax, [ebp - 0x7b0]
mov cl, 0x17
call fcn.00402cd0
lea edx, [ebp - 0x7b0]
lea eax, [ebp - 0x179]
mov cl, 0x14
call fcn.00402d1c
push dword [ebp - 0x164]
lea eax, [ebp - 0x608]
lea edx, [ebp - 0x179]
call fcn.00404094
push dword [ebp - 0x608]
push 0x6ad634
lea eax, [ebp - 0x724]
lea edx, [ebp - 0x3e5]
call fcn.00404094
push dword [ebp - 0x724]
push 0x6ad640
lea eax, [ebp - 0x164]
mov edx, 5
call fcn.004041b0
lea eax, [ebp - 0x608]
lea edx, [ebp - 0x40e]
call fcn.00404094
mov eax, dword [ebp - 0x608]
call fcn.0044c49c
test al, al
jne 0x6a9dd5
mov eax, dword [ebp - 0x320]
call fcn.0044c49c
test al, al
je 0x6a9d87
lea eax, [ebp - 0x608]
call fcn.0044c07c
push dword [ebp - 0x608]
push 0x6ad3b0
lea eax, [ebp - 0x724]
lea edx, [ebp - 0x40e]
call fcn.00404094
push dword [ebp - 0x724]
lea eax, [ebp - 0x780]
lea edx, [ebp - 0x179]
call fcn.00404094
push dword [ebp - 0x780]
push 0x6ad430
lea eax, [ebp - 0x32c]
mov edx, 5
call fcn.004041b0
jmp 0x6a9dd5
push dword [ebp - 0x320]
push 0x6ad3b0
lea eax, [ebp - 0x608]
lea edx, [ebp - 0x40e]
call fcn.00404094
push dword [ebp - 0x608]
lea eax, [ebp - 0x724]
lea edx, [ebp - 0x179]
call fcn.00404094
push dword [ebp - 0x724]
push 0x6ad430
lea eax, [ebp - 0x32c]
mov edx, 5
call fcn.004041b0
cmp byte [ebp - 0x3a9], 0
je 0x6a9e06
lea eax, [ebp - 0x708]
mov edx, dword [ebp - 0x164]
mov ecx, 0xff
call fcn.004040cc
lea edx, [ebp - 0x708]
mov eax, dword [0x841478]
mov cl, 0x32
call fcn.00402d1c
cmp byte [ebp - 0x321], 0
je 0x6a9f18
mov eax, dword [0x841348]
mov eax, dword [eax]
mov eax, dword [eax + 0x7c]
add eax, 0x6c
mov edx, dword [ebp - 0x32c]
call fcn.00403ec8
mov eax, dword [0x841348]
mov eax, dword [eax]
mov eax, dword [eax + 0x7c]
mov edx, dword [eax]
call dword [edx + 0x34]
test al, al
je 0x6a9ef8
lea edx, [ebp - 0x32c]
mov eax, dword [0x841348]
mov eax, dword [eax]
mov eax, dword [eax + 0x7c]
call fcn.0044a6a0
lea edx, [ebp - 0x724]
mov eax, dword [0x841348]
mov eax, dword [eax]
mov eax, dword [eax + 0x7c]
call fcn.0044a6a0
mov eax, dword [ebp - 0x724]
lea edx, [ebp - 0x608]
call fcn.00409af0
mov edx, dword [ebp - 0x608]
mov eax, dword [0x841348]
mov eax, dword [eax]
mov eax, dword [eax + 0x7c]
call fcn.0044a718
lea eax, [ebp - 0x608]
call fcn.0044c07c
mov eax, dword [ebp - 0x608]
call fcn.004028d4
call fcn.00402898
mov eax, dword [0x8417e4]
mov eax, dword [eax]
call fcn.0042d188
call fcn.0078e510
call fcn.0078e5d8
mov al, 1
call fcn.0078e6d4
call fcn.0078e988
call fcn.00793404
mov al, 1
call fcn.0071a16c
mov al, 1
call fcn.0070926c
call fcn.0071a29c
call fcn.0070937c
mov eax, dword [0x841d04]
xor edx, edx
mov dword [eax + 4], edx
jmp 0x6a9f18
lea eax, [ebp - 0x608]
call fcn.0044c07c
mov eax, dword [ebp - 0x608]
call fcn.004028d4
call fcn.00402898
jmp 0x6ad2ae
mov eax, dword [0x84208c]
xor edx, edx
mov dword [eax], edx
mov dword [eax + 4], 0x40590000
mov eax, dword [0x842028]
mov byte [eax], 0
mov eax, dword [0x841698]
mov byte [eax], 0
mov eax, dword [0x841364]
mov byte [eax], 0
mov eax, dword [0x841578]
xor edx, edx
mov dword [eax], edx
mov eax, dword [0x84138c]
xor edx, edx
mov dword [eax], edx
mov eax, dword [0x840fb8]
mov byte [eax], 0
mov eax, dword [0x841de0]
mov byte [eax], 0
mov eax, dword [0x841bbc]
mov word [eax], 0x4501
mov eax, dword [0x84208c]
xor edx, edx
mov dword [eax], edx
mov dword [eax + 4], 0x40590000
cmp byte [ebp - 0x203], 0
jne 0x6a9f8f
mov eax, 0x1e
call fcn.00798d60
mov eax, dword [0x840cf8]
mov eax, dword [eax]
mov eax, dword [eax + 0x1e8]
call fcn.00444b04
mov eax, dword [0x840940]
mov dword [eax], 0x73655903
mov eax, dword [0x841d5c]
mov edx, 0x6ad654
call fcn.00403ec8
cmp dword [0x94e8e0], 0xffffffff
jne 0x6a9fce
mov dword [0x94e8e0], 1
mov eax, dword [0x841c80]
mov dword [eax], 4
cmp byte [ebp - 0x202], 0
je 0x6a9ff8
cmp byte [ebp - 0x30b], 0
je 0x6a9ff8
cmp byte [ebp - 0x201], 0
jne 0x6aa30a
mov eax, dword [0x8417e4]
mov eax, dword [eax]
call fcn.0042d188
mov eax, dword [ebp - 0x1c4]
call fcn.0044c49c
test al, al
je 0x6aa155
lea eax, [ebp - 0x720]
push eax
mov ecx, 2
mov edx, 2
lea eax, [ebp - 0x3e5]
call fcn.004028f0
lea edx, [ebp - 0x720]
lea eax, [ebp - 0x608]
call fcn.00404094
mov eax, dword [ebp - 0x608]
call fcn.0044c3e0
fstp qword [ebp - 0x340]
wait
lea eax, [ebp - 0x720]
push eax
mov ecx, 3
mov edx, 4
lea eax, [ebp - 0x3e5]
call fcn.004028f0
lea edx, [ebp - 0x720]
lea eax, [ebp - 0x608]
call fcn.00404094
mov eax, dword [ebp - 0x608]
call fcn.0044c3e0
fstp qword [ebp - 0x348]
wait
fld qword [ebp - 0x340]
fcomp dword [0x6ad46c]
fnstsw ax
sahf
jbe 0x6aa155
fld qword [ebp - 0x348]
fcomp dword [0x6ad46c]
fnstsw ax
sahf
jbe 0x6aa155
cmp byte [ebp - 0x3e5], 0
jbe 0x6aa155
mov al, byte [ebp - 0x3e4]
add al, 0xc0
cmp al, 0x37
ja 0x6aa0e2
and eax, 0x7f
bt dword [0x6ad678], eax
jae 0x6aa155
fld qword [ebp - 0x348]
fchs
fstp qword [ebp - 0x348]
wait
fld xword [0x6ad680]
fmul qword [ebp - 0x348]
add esp, 0xfffffff4
fstp xword [esp]
wait
call fcn.004a7564
mov dword [ebp - 0x7b4], eax
fild dword [ebp - 0x7b4]
fmul dword [0x6ad68c]
fadd dword [0x6ad690]
fstp qword [ebp - 0x340]
wait
fld qword [ebp - 0x340]
fadd dword [0x6ad694]
fld xword [0x6ad680]
fmulp st(1)
call fcn.00402c98
lea edx, [ebp - 0x1c4]
call fcn.004094a8
mov byte [ebp - 0x30b], 1
mov al, byte [0x94e8d9]
or al, byte [0x94e8e4]
je 0x6aa260
cmp byte [ebp - 0x30b], 0
je 0x6aa181
mov eax, 0x94e87c
mov edx, dword [ebp - 0x1c4]
call fcn.00403ec8
jmp 0x6aa18b
mov eax, 0x94e87c
call fcn.00403e74
cmp byte [ebp - 0x201], 0
je 0x6aa1a8
mov eax, 0x94e888
mov edx, dword [0x840bb0]
mov cl, 0x50
call fcn.00402d1c
jmp 0x6aa1af
mov byte [0x94e888], 0
mov eax, 0x94e880
lea edx, [ebp - 0x30a]
mov cl, 1
call fcn.00402d1c
mov eax, 0x6ad6a0
call fcn.00798864
test al, al
jne 0x6aa1e7
mov ecx, dword [0x841c3c]
mov eax, dword [0x8417e4]
mov eax, dword [eax]
mov edx, dword [0x680754]
call fcn.0042d2e8
lea edx, [ebp - 0x724]
mov eax, dword [ebp - 0x31c]
call fcn.00409be0
mov ecx, dword [ebp - 0x724]
lea eax, [ebp - 0x608]
mov edx, 0x6ad6b8
call fcn.0040413c
mov edx, dword [ebp - 0x608]
mov eax, dword [0x841c3c]
mov eax, dword [eax]
mov eax, dword [eax + 0x208]
call fcn.004340a4
mov eax, dword [0x841c3c]
mov eax, dword [eax]
call fcn.0042a82c
mov dword [ebp - 4], eax
cmp dword [ebp - 4], 0x3e7
je 0x6aa24d
mov dword [ebp - 0x328], 0x2694
jmp 0x6ad2ae
mov byte [0x94e8d9], 0
mov eax, dword [0x8417e4]
mov eax, dword [eax]
call fcn.0042d188
lea eax, [ebp - 0x1c4]
mov edx, dword [0x94e87c]
call fcn.00403f0c
mov eax, dword [0x840bb0]
mov edx, 0x94e888
mov cl, 0x50
call fcn.00402d1c
mov eax, dword [0x94e8dc]
mov dword [0x94e8e0], eax
lea eax, [ebp - 0x30a]
mov edx, 0x94e880
mov cl, 1
call fcn.00402d1c
lea edx, [ebp - 0x608]
mov eax, dword [0x8417d0]
call fcn.00405e74
mov edx, dword [ebp - 0x608]
mov eax, dword [0x94e884]
call fcn.00404200
jne 0x6aa2d4
mov dword [ebp - 0x200], 0xdbf487fd
mov dword [ebp - 0x1fc], 0x3fd381d7
lea edx, [ebp - 0x608]
mov eax, dword [0x8417d0]
call fcn.00405e74
mov edx, dword [ebp - 0x608]
mov eax, dword [0x94e884]
call fcn.00404200
jne 0x6aa30a
mov dword [ebp - 0x314], 0xdbf487fd
mov dword [ebp - 0x310], 0x3fd381d7
cmp dword [0x94e8e0], 1
jne 0x6aa331
mov eax, dword [ebp - 0x1c4]
call fcn.0044c49c
test al, al
je 0x6aa331
mov dword [ebp - 0x328], 5
jmp 0x6ad2ae
cmp dword [0x94e8e0], 3
jne 0x6aa358
mov eax, dword [ebp - 0x1c4]
call fcn.0044c49c
test al, al
je 0x6aa358
mov dword [ebp - 0x328], 5
jmp 0x6ad2ae
cmp dword [0x94e8e0], 4
jne 0x6aa37f
mov eax, dword [ebp - 0x1c4]
call fcn.0044c49c
test al, al
je 0x6aa37f
mov dword [ebp - 0x328], 5
jmp 0x6ad2ae
cmp dword [0x94e8e0], 1
je 0x6aa3a5
cmp dword [0x94e8e0], 3
je 0x6aa3a5
cmp dword [0x94e8e0], 4
je 0x6aa3a5
lea eax, [ebp - 0x1c4]
call fcn.00403e74
lea eax, [ebp - 0x608]
mov edx, dword [0x840bb0]
call fcn.00404094
mov eax, dword [ebp - 0x608]
call fcn.00558658
mov edx, dword [0x84125c]
mov dword [edx], eax
xor eax, eax
mov dword [ebp - 0x384], eax
xor eax, eax
mov dword [ebp - 0x388], eax
lea edx, [ebp - 0x608]
mov eax, dword [ebp - 0x31c]
call fcn.0044bf5c
mov edx, dword [ebp - 0x608]
mov eax, 0x6ad6c8
call fcn.004043d8
test eax, eax
jle 0x6aa429
lea ecx, [ebp - 0x388]
lea edx, [ebp - 0x384]
mov eax, dword [ebp - 0x31c]
call fcn.007564e4
test al, al
jne 0x6aa429
xor eax, eax
mov dword [ebp - 0x384], eax
xor eax, eax
mov dword [ebp - 0x388], eax
lea edx, [ebp - 0x608]
mov eax, dword [ebp - 0x31c]
call fcn.0044bf5c
mov edx, dword [ebp - 0x608]
mov eax, 0x6ad6d8
call fcn.004043d8
test eax, eax
jle 0x6aa480
lea eax, [ebp - 0x38c]
push eax
lea ecx, [ebp - 0x388]
lea edx, [ebp - 0x384]
mov eax, dword [ebp - 0x31c]
call fcn.005307d0
test al, al
jne 0x6aa480
xor eax, eax
mov dword [ebp - 0x384], eax
xor eax, eax
mov dword [ebp - 0x388], eax
lea edx, [ebp - 0x608]
mov eax, dword [ebp - 0x31c]
call fcn.0044bf5c
mov edx, dword [ebp - 0x608]
mov eax, 0x6ad6e8
call fcn.004043d8
test eax, eax
jle 0x6aa4d0
lea ecx, [ebp - 0x388]
lea edx, [ebp - 0x384]
mov eax, dword [ebp - 0x31c]
call fcn.00757aa0
test al, al
jne 0x6aa4d0
xor eax, eax
mov dword [ebp - 0x384], eax
xor eax, eax
mov dword [ebp - 0x388], eax
lea edx, [ebp - 0x608]
mov eax, dword [ebp - 0x31c]
call fcn.0044bf5c
mov edx, dword [ebp - 0x608]
mov eax, 0x6ad440
call fcn.004043d8
test eax, eax
jle 0x6aa520
lea ecx, [ebp - 0x388]
lea edx, [ebp - 0x384]
mov eax, dword [ebp - 0x31c]
call fcn.004f2dec
test al, al
jne 0x6aa520
xor eax, eax
mov dword [ebp - 0x384], eax
xor eax, eax
mov dword [ebp - 0x388], eax
lea edx, [ebp - 0x608]
mov eax, dword [ebp - 0x31c]
call fcn.0044bf5c
mov edx, dword [ebp - 0x608]
mov eax, 0x6ad6f8
call fcn.004043d8
test eax, eax
jle 0x6aa5cb
xor eax, eax
push ebp
push 0x6aa5b7
push dword fs:[eax]
mov dword fs:[eax], esp
lea eax, [ebp - 0x388]
push eax
lea eax, [ebp - 0x384]
push eax
mov eax, dword [ebp - 0x31c]
call fcn.004042b4
push eax
mov eax, dword [0x840824]
mov eax, dword [eax]
call eax
add esp, 0xc
test eax, eax
je 0x6aa5ad
call fcn.006a3144
xor eax, eax
mov dword [ebp - 0x384], eax
xor eax, eax
mov dword [ebp - 0x388], eax
mov dword [ebp - 0x328], 7
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0x6ad2ae
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0x6aa5cb
lea edx, [ebp - 0x608]
mov eax, dword [ebp - 0x31c]
call fcn.0044bf5c
mov edx, dword [ebp - 0x608]
mov eax, 0x6ad464
call fcn.004043d8
test eax, eax
jle 0x6aa63d
xor eax, eax
push ebp
push 0x6aa633
push dword fs:[eax]
mov dword fs:[eax], esp
lea ecx, [ebp - 0x388]
lea edx, [ebp - 0x384]
mov eax, dword [ebp - 0x31c]
call fcn.0074d8d4
test al, al
jne 0x6aa629
xor eax, eax
mov dword [ebp - 0x384], eax
xor eax, eax
mov dword [ebp - 0x388], eax
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0x6aa63d
mov eax, dword [0x841d58]
xor edx, edx
mov dword [eax], edx
mov eax, dword [0x841ab8]
xor edx, edx
mov dword [eax], edx
mov eax, dword [0x841d58]
mov edx, dword [ebp - 0x384]
mov dword [eax + 4], edx
mov eax, dword [0x841ab8]
xor edx, edx
mov dword [eax + 4], edx
mov eax, dword [0x841d58]
xor edx, edx
mov dword [eax + 0xc], edx
mov eax, dword [0x841ab8]
mov edx, dword [ebp - 0x388]
mov dword [eax + 0xc], edx
mov eax, dword [0x841d58]
mov edx, dword [ebp - 0x384]
mov dword [eax + 8], edx
mov eax, dword [0x841ab8]
mov edx, dword [ebp - 0x388]
mov dword [eax + 8], edx
mov dword [ebp - 0x3c0], 0x3e8
mov dword [ebp - 0x3c4], 0x3e8
cmp dword [ebp - 0x384], 0
je 0x6aa6d0
mov eax, dword [ebp - 0x384]
mov dword [ebp - 0x3c0], eax
mov eax, dword [ebp - 0x388]
mov dword [ebp - 0x3c4], eax
lea eax, [ebp - 0x1c4]
push eax
mov ecx, 2
mov edx, 1
mov eax, dword [ebp - 0x1c4]
call fcn.004042f4
cmp byte [ebp - 0x203], 0
jne 0x6aa844
cmp byte [ebp - 0x3c5], 0
je 0x6aa714
xor eax, eax
mov dword [ebp - 0x3b0], eax
xor eax, eax
mov dword [ebp - 0x3b4], eax
jmp 0x6aa736
fld qword [ebp - 0x1b8]
call fcn.00402c98
mov dword [ebp - 0x3b0], eax
fld qword [ebp - 0x1b0]
call fcn.00402c98
mov dword [ebp - 0x3b4], eax
mov eax, dword [ebp - 0x3b0]
add eax, dword [ebp - 0x3c0]
mov dword [ebp - 0x3b8], eax
mov eax, dword [ebp - 0x3b4]
add eax, dword [ebp - 0x3c4]
mov dword [ebp - 0x3bc], eax
lea edx, [ebp - 0x608]
mov eax, dword [ebp - 0x3b0]
call fcn.004094a8
mov edx, dword [ebp - 0x608]
lea eax, [ebp - 0x708]
mov ecx, 0xff
call fcn.004040cc
lea edx, [ebp - 0x708]
mov eax, dword [0x842148]
mov cl, 0xf
call fcn.00402d1c
lea edx, [ebp - 0x608]
mov eax, dword [ebp - 0x3b4]
call fcn.004094a8
mov edx, dword [ebp - 0x608]
lea eax, [ebp - 0x708]
mov ecx, 0xff
call fcn.004040cc
lea edx, [ebp - 0x708]
mov eax, dword [0x841ea0]
mov cl, 0xf
call fcn.00402d1c
lea edx, [ebp - 0x608]
mov eax, dword [ebp - 0x3b8]
call fcn.004094a8
mov edx, dword [ebp - 0x608]
lea eax, [ebp - 0x708]
mov ecx, 0xff
call fcn.004040cc
lea edx, [ebp - 0x708]
mov eax, dword [0x842148]
add eax, 0x10
mov cl, 0xf
call fcn.00402d1c
lea edx, [ebp - 0x608]
mov eax, dword [ebp - 0x3bc]
call fcn.004094a8
mov edx, dword [ebp - 0x608]
lea eax, [ebp - 0x708]
mov ecx, 0xff
call fcn.004040cc
lea edx, [ebp - 0x708]
mov eax, dword [0x841ea0]
add eax, 0x10
mov cl, 0xf
call fcn.00402d1c
fld qword [ebp - 0x1c0]
fmul qword [ebp - 0x200]
fstp qword [ebp - 0x1c0]
wait
fld qword [ebp - 0x1a8]
fmul qword [ebp - 0x200]
fstp qword [ebp - 0x1a8]
wait
fld qword [ebp - 0x1a0]
fmul qword [ebp - 0x200]
fstp qword [ebp - 0x1a0]
wait
fld qword [ebp - 0x198]
fmul qword [ebp - 0x200]
fstp qword [ebp - 0x198]
wait
cmp dword [0x94e8e0], 0
jne 0x6aabb2
mov eax, dword [0x841d5c]
mov edx, 0x6ad708
call fcn.00403ec8
mov eax, dword [ebp - 0x1a0]
mov dword [ebp - 0x350], eax
mov eax, dword [ebp - 0x19c]
mov dword [ebp - 0x34c], eax
mov eax, dword [ebp - 0x198]
mov dword [ebp - 0x358], eax
mov eax, dword [ebp - 0x194]
mov dword [ebp - 0x354], eax
push dword [ebp - 0x354]
push dword [ebp - 0x358]
lea eax, [ebp - 0x608]
call fcn.00787dd0
mov edx, dword [ebp - 0x608]
lea eax, [ebp - 0x708]
mov ecx, 0xff
call fcn.004040cc
lea edx, [ebp - 0x708]
mov eax, dword [0x841868]
mov cl, 0xf
call fcn.00402d1c
push dword [ebp - 0x354]
push dword [ebp - 0x358]
lea eax, [ebp - 0x608]
call fcn.00787e34
mov edx, dword [ebp - 0x608]
lea eax, [ebp - 0x708]
mov ecx, 0xff
call fcn.004040cc
lea edx, [ebp - 0x708]
mov eax, dword [0x840960]
mov cl, 0xf
call fcn.00402d1c
fld qword [ebp - 0x358]
fcomp dword [0x6ad46c]
fnstsw ax
sahf
jae 0x6aa977
mov eax, dword [0x840c14]
mov word [eax], 0x5301
jmp 0x6aa981
mov eax, dword [0x840c14]
mov word [eax], 0x4e01
push dword [ebp - 0x34c]
push dword [ebp - 0x350]
lea eax, [ebp - 0x608]
call fcn.00787dd0
mov edx, dword [ebp - 0x608]
lea eax, [ebp - 0x708]
mov ecx, 0xff
call fcn.004040cc
lea edx, [ebp - 0x708]
mov eax, dword [0x841254]
mov cl, 0xf
call fcn.00402d1c
push dword [ebp - 0x34c]
push dword [ebp - 0x350]
lea eax, [ebp - 0x608]
call fcn.00787e34
mov edx, dword [ebp - 0x608]
lea eax, [ebp - 0x708]
mov ecx, 0xff
call fcn.004040cc
lea edx, [ebp - 0x708]
mov eax, dword [0x8420d4]
mov cl, 0xf
call fcn.00402d1c
fld qword [ebp - 0x350]
fcomp dword [0x6ad46c]
fnstsw ax
sahf
jae 0x6aaa1c
mov eax, dword [0x841eb8]
mov word [eax], 0x5701
jmp 0x6aaa26
mov eax, dword [0x841eb8]
mov word [eax], 0x4501
fild dword [ebp - 0x3c0]
fmul qword [ebp - 0x1c0]
fadd qword [ebp - 0x1a0]
fstp qword [ebp - 0x350]
wait
fild dword [ebp - 0x3c4]
fmul qword [ebp - 0x1a8]
fadd qword [ebp - 0x198]
fstp qword [ebp - 0x358]
wait
push dword [ebp - 0x354]
push dword [ebp - 0x358]
lea eax, [ebp - 0x608]
call fcn.00787dd0
mov edx, dword [ebp - 0x608]
lea eax, [ebp - 0x708]
mov ecx, 0xff
call fcn.004040cc
lea edx, [ebp - 0x708]
mov eax, dword [0x841868]
add eax, 0x10
mov cl, 0xf
call fcn.00402d1c
push dword [ebp - 0x354]
push dword [ebp - 0x358]
lea eax, [ebp - 0x608]
call fcn.00787e34
mov edx, dword [ebp - 0x608]
lea eax, [ebp - 0x708]
mov ecx, 0xff
call fcn.004040cc
lea edx, [ebp - 0x708]
mov eax, dword [0x840960]
add eax, 0x10
mov cl, 0xf
call fcn.00402d1c
fld qword [ebp - 0x358]
fcomp dword [0x6ad46c]
fnstsw ax
sahf
jae 0x6aaafa
mov eax, dword [0x840c14]
mov word [eax + 0x10], 0x5301
jmp 0x6aab05
mov eax, dword [0x840c14]
mov word [eax + 0x10], 0x4e01
push dword [ebp - 0x34c]
push dword [ebp - 0x350]
lea eax, [ebp - 0x608]
call fcn.00787dd0
mov edx, dword [ebp - 0x608]
lea eax, [ebp - 0x708]
mov ecx, 0xff
call fcn.004040cc
lea edx, [ebp - 0x708]
mov eax, dword [0x841254]
add eax, 0x10
mov cl, 0xf
call fcn.00402d1c
push dword [ebp - 0x34c]
push dword [ebp - 0x350]
lea eax, [ebp - 0x608]
call fcn.00787e34
mov edx, dword [ebp - 0x608]
lea eax, [ebp - 0x708]
mov ecx, 0xff
call fcn.004040cc
lea edx, [ebp - 0x708]
mov eax, dword [0x8420d4]
add eax, 0x10
mov cl, 0xf
call fcn.00402d1c
fld qword [ebp - 0x350]
fcomp dword [0x6ad46c]
fnstsw ax
sahf
jae 0x6aaba7
mov eax, dword [0x841eb8]
mov word [eax + 0x10], 0x5701
jmp 0x6aabb2
mov eax, dword [0x841eb8]
mov word [eax + 0x10], 0x4501
cmp byte [ebp - 0x203], 0
je 0x6aac09
mov dword [ebp - 0x38c], 1
lea eax, [ebp - 0x708]
mov edx, dword [ebp - 0x1c4]
mov ecx, 0xff
call fcn.004040cc
lea edx, [ebp - 0x708]
mov eax, dword [ebp - 0x38c]
add eax, eax
mov ecx, dword [0x841c08]
lea eax, [ecx + eax*8 - 0x10]
mov cl, 0xf
call fcn.00402d1c
inc dword [ebp - 0x38c]
cmp dword [ebp - 0x38c], 0x1f
jne 0x6aabc5
cmp dword [0x94e8e0], 1
jne 0x6ab891
mov eax, dword [0x841d5c]
mov edx, 0x6ad654
call fcn.00403ec8
cmp byte [ebp - 0x3aa], 0
jne 0x6ab084
mov eax, dword [0x840ff4]
mov word [eax], 0x4e01
lea eax, [ebp - 0x30a]
mov edx, 0x6ad71c
xor ecx, ecx
mov cl, byte [eax]
inc ecx
call fcn.00402dd0
jne 0x6aac5d
mov eax, dword [0x840ff4]
mov word [eax], 0x5301
mov eax, dword [0x840ff4]
mov word [eax + 0x10], 0x4e01
lea eax, [ebp - 0x30a]
mov edx, 0x6ad71c
xor ecx, ecx
mov cl, byte [eax]
inc ecx
call fcn.00402dd0
jne 0x6aac8a
mov eax, dword [0x840ff4]
mov word [eax + 0x10], 0x5301
lea eax, [ebp - 0x708]
mov edx, dword [ebp - 0x1c4]
mov ecx, 0xff
call fcn.004040cc
lea edx, [ebp - 0x708]
mov eax, dword [0x841c08]
mov cl, 0xf
call fcn.00402d1c
lea eax, [ebp - 0x708]
mov edx, dword [ebp - 0x1c4]
mov ecx, 0xff
call fcn.004040cc
lea edx, [ebp - 0x708]
mov eax, dword [0x841c08]
add eax, 0x10
mov cl, 0xf
call fcn.00402d1c
cmp byte [ebp - 0x203], 0
jne 0x6ab891
fld qword [ebp - 0x198]
fcomp dword [0x6ad46c]
fnstsw ax
sahf
jae 0x6aad25
fld qword [ebp - 0x198]
fabs
fsubr dword [0x6ad720]
fstp qword [ebp - 0x198]
wait
mov eax, dword [0x840ff4]
mov word [eax], 0x5301
mov eax, dword [0x840ff4]
mov word [eax + 0x10], 0x5301
cmp byte [ebp - 0x315], 0
je 0x6aaee9
fld qword [ebp - 0x1a8]
add esp, 0xfffffff4
fstp xword [esp]
wait
lea eax, [ebp - 0x724]
push eax
mov ecx, 6
mov edx, 0xe
xor eax, eax
call fcn.0040a7f8
mov eax, dword [ebp - 0x724]
lea edx, [ebp - 0x608]
call fcn.0044c290
mov edx, dword [ebp - 0x608]
lea eax, [ebp - 0x708]
mov ecx, 0xff
call fcn.004040cc
lea edx, [ebp - 0x708]
mov eax, dword [0x840d40]
mov cl, 0xf
call fcn.00402d1c
fld qword [ebp - 0x188]
add esp, 0xfffffff4
fstp xword [esp]
wait
lea eax, [ebp - 0x724]
push eax
mov ecx, 6
mov edx, 0xe
xor eax, eax
call fcn.0040a7f8
mov eax, dword [ebp - 0x724]
lea edx, [ebp - 0x608]
call fcn.0044c290
mov edx, dword [ebp - 0x608]
lea eax, [ebp - 0x708]
mov ecx, 0xff
call fcn.004040cc
lea edx, [ebp - 0x708]
mov eax, dword [0x840648]
mov cl, 0xf
call fcn.00402d1c
fild dword [ebp - 0x3c0]
fmul qword [ebp - 0x1c0]
fild dword [ebp - 0x3c4]
fmul qword [ebp - 0x1b8]
fsubp st(1)
fadd qword [ebp - 0x1a8]
add esp, 0xfffffff4
fstp xword [esp]
wait
lea eax, [ebp - 0x724]
push eax
mov ecx, 6
mov edx, 0xe
xor eax, eax
call fcn.0040a7f8
mov eax, dword [ebp - 0x724]
lea edx, [ebp - 0x608]
call fcn.0044c290
mov edx, dword [ebp - 0x608]
lea eax, [ebp - 0x708]
mov ecx, 0xff
call fcn.004040cc
lea edx, [ebp - 0x708]
mov eax, dword [0x840d40]
add eax, 0x10
mov cl, 0xf
call fcn.00402d1c
fild dword [ebp - 0x3c0]
fmul qword [ebp - 0x1a0]
fild dword [ebp - 0x3c4]
fmul qword [ebp - 0x198]
fsubp st(1)
fadd qword [ebp - 0x188]
add esp, 0xfffffff4
fstp xword [esp]
wait
lea eax, [ebp - 0x724]
push eax
mov ecx, 6
mov edx, 0xe
xor eax, eax
call fcn.0040a7f8
mov eax, dword [ebp - 0x724]
lea edx, [ebp - 0x608]
call fcn.0044c290
mov edx, dword [ebp - 0x608]
lea eax, [ebp - 0x708]
mov ecx, 0xff
call fcn.004040cc
lea edx, [ebp - 0x708]
mov eax, dword [0x840648]
add eax, 0x10
mov cl, 0xf
call fcn.00402d1c
jmp 0x6ab891
fld qword [ebp - 0x1a0]
add esp, 0xfffffff4
fstp xword [esp]
wait
lea eax, [ebp - 0x724]
push eax
mov ecx, 6
mov edx, 0xe
xor eax, eax
call fcn.0040a7f8
mov eax, dword [ebp - 0x724]
lea edx, [ebp - 0x608]
call fcn.0044c290
mov edx, dword [ebp - 0x608]
lea eax, [ebp - 0x708]
mov ecx, 0xff
call fcn.004040cc
lea edx, [ebp - 0x708]
mov eax, dword [0x840d40]
mov cl, 0xf
call fcn.00402d1c
fld qword [ebp - 0x198]
add esp, 0xfffffff4
fstp xword [esp]
wait
lea eax, [ebp - 0x724]
push eax
mov ecx, 6
mov edx, 0xe
xor eax, eax
call fcn.0040a7f8
mov eax, dword [ebp - 0x724]
lea edx, [ebp - 0x608]
call fcn.0044c290
mov edx, dword [ebp - 0x608]
lea eax, [ebp - 0x708]
mov ecx, 0xff
call fcn.004040cc
lea edx, [ebp - 0x708]
mov eax, dword [0x840648]
mov cl, 0xf
call fcn.00402d1c
fild dword [ebp - 0x3c0]
fmul qword [ebp - 0x1c0]
fadd qword [ebp - 0x1a0]
add esp, 0xfffffff4
fstp xword [esp]
wait
lea eax, [ebp - 0x724]
push eax
mov ecx, 6
mov edx, 0xe
xor eax, eax
call fcn.0040a7f8
mov eax, dword [ebp - 0x724]
lea edx, [ebp - 0x608]
call fcn.0044c290
mov edx, dword [ebp - 0x608]
lea eax, [ebp - 0x708]
mov ecx, 0xff
call fcn.004040cc
lea edx, [ebp - 0x708]
mov eax, dword [0x840d40]
add eax, 0x10
mov cl, 0xf
call fcn.00402d1c
fild dword [ebp - 0x3c4]
fmul qword [ebp - 0x1a8]
fadd qword [ebp - 0x198]
add esp, 0xfffffff4
fstp xword [esp]
wait
lea eax, [ebp - 0x724]
push eax
mov ecx, 6
mov edx, 0xe
xor eax, eax
call fcn.0040a7f8
mov eax, dword [ebp - 0x724]
lea edx, [ebp - 0x608]
call fcn.0044c290
mov edx, dword [ebp - 0x608]
lea eax, [ebp - 0x708]
mov ecx, 0xff
call fcn.004040cc
lea edx, [ebp - 0x708]
mov eax, dword [0x840648]
add eax, 0x10
mov cl, 0xf
call fcn.00402d1c
jmp 0x6ab891
mov eax, dword [0x841f04]
mov edx, dword [ebp - 0x1d4]
mov dword [eax], edx
mov edx, dword [ebp - 0x1d0]
mov dword [eax + 4], edx
mov eax, dword [0x841f04]
mov edx, dword [0x841f04]
mov ecx, dword [edx]
mov dword [eax + 0x18], ecx
mov ecx, dword [edx + 4]
mov dword [eax + 0x1c], ecx
mov eax, dword [0x841f04]
mov edx, dword [ebp - 0x1dc]
mov dword [eax + 8], edx
mov edx, dword [ebp - 0x1d8]
mov dword [eax + 0xc], edx
mov eax, dword [0x841f04]
mov edx, dword [0x841f04]
mov ecx, dword [edx + 8]
mov dword [eax + 0x10], ecx
mov ecx, dword [edx + 0xc]
mov dword [eax + 0x14], ecx
mov eax, dword [0x8409e0]
mov edx, dword [ebp - 0x1e4]
mov dword [eax], edx
mov edx, dword [ebp - 0x1e0]
mov dword [eax + 4], edx
mov eax, dword [0x8409e0]
mov edx, dword [0x8409e0]
mov ecx, dword [edx]
mov dword [eax + 8], ecx
mov ecx, dword [edx + 4]
mov dword [eax + 0xc], ecx
mov eax, dword [0x8409e0]
mov edx, dword [ebp - 0x1ec]
mov dword [eax + 0x10], edx
mov edx, dword [ebp - 0x1e8]
mov dword [eax + 0x14], edx
mov eax, dword [0x8409e0]
mov edx, dword [0x8409e0]
mov ecx, dword [edx + 0x10]
mov dword [eax + 0x18], ecx
mov ecx, dword [edx + 0x14]
mov dword [eax + 0x1c], ecx
lea eax, [ebp - 0x398]
mov edx, dword [ebp - 0x1c4]
call fcn.00403f0c
mov eax, dword [0x8409e0]
push dword [eax + 4]
push dword [eax]
mov eax, dword [0x841f04]
push dword [eax + 4]
push dword [eax]
mov eax, dword [0x84125c]
mov eax, dword [eax]
push eax
lea ecx, [ebp - 0x3a8]
lea edx, [ebp - 0x3a0]
lea eax, [ebp - 0x1c4]
call fcn.00559a90
fld qword [ebp - 0x3a0]
fsub qword [ebp - 0x1a0]
fdiv qword [ebp - 0x1c0]
call fcn.00402c90
mov edx, dword [0x841d58]
mov dword [edx], eax
fld qword [ebp - 0x3a8]
fsub qword [ebp - 0x198]
fdiv qword [ebp - 0x1a8]
call fcn.00402c90
mov edx, dword [0x841ab8]
mov dword [edx], eax
mov eax, dword [0x8409e0]
push dword [eax + 0xc]
push dword [eax + 8]
fld xword [0x6ad724]
mov eax, dword [0x841f04]
fsubr qword [eax + 8]
add esp, 0xfffffff8
fstp qword [esp]
wait
mov eax, dword [0x84125c]
mov eax, dword [eax]
push eax
lea ecx, [ebp - 0x3a8]
lea edx, [ebp - 0x3a0]
lea eax, [ebp - 0x1c4]
call fcn.00559a90
fld qword [ebp - 0x3a0]
fsub qword [ebp - 0x1a0]
fdiv qword [ebp - 0x1c0]
call fcn.00402c90
mov edx, dword [0x841d58]
mov dword [edx + 4], eax
fld qword [ebp - 0x3a8]
fsub qword [ebp - 0x198]
fdiv qword [ebp - 0x1a8]
call fcn.00402c90
mov edx, dword [0x841ab8]
mov dword [edx + 4], eax
mov eax, dword [0x8409e0]
push dword [eax + 0x14]
push dword [eax + 0x10]
fld xword [0x6ad724]
mov eax, dword [0x841f04]
fsubr qword [eax + 0x10]
add esp, 0xfffffff8
fstp qword [esp]
wait
mov eax, dword [0x84125c]
mov eax, dword [eax]
push eax
lea ecx, [ebp - 0x3a8]
lea edx, [ebp - 0x3a0]
lea eax, [ebp - 0x1c4]
call fcn.00559a90
fld qword [ebp - 0x3a0]
fsub qword [ebp - 0x1a0]
fdiv qword [ebp - 0x1c0]
call fcn.00402c90
mov edx, dword [0x841d58]
mov dword [edx + 8], eax
fld qword [ebp - 0x3a8]
fsub qword [ebp - 0x198]
fdiv qword [ebp - 0x1a8]
call fcn.00402c90
mov edx, dword [0x841ab8]
mov dword [edx + 8], eax
mov eax, dword [0x8409e0]
push dword [eax + 0x1c]
push dword [eax + 0x18]
mov eax, dword [0x841f04]
push dword [eax + 0x1c]
push dword [eax + 0x18]
mov eax, dword [0x84125c]
mov eax, dword [eax]
push eax
lea ecx, [ebp - 0x3a8]
lea edx, [ebp - 0x3a0]
lea eax, [ebp - 0x1c4]
call fcn.00559a90
fld qword [ebp - 0x3a0]
fsub qword [ebp - 0x1a0]
fdiv qword [ebp - 0x1c0]
call fcn.00402c90
mov edx, dword [0x841d58]
mov dword [edx + 0xc], eax
fld qword [ebp - 0x3a8]
fsub qword [ebp - 0x198]
fdiv qword [ebp - 0x1a8]
call fcn.00402c90
mov edx, dword [0x841ab8]
mov dword [edx + 0xc], eax
mov eax, dword [ebp - 0x1c4]
call fcn.0044c3e0
call fcn.00402c98
mov dword [ebp - 4], eax
mov eax, dword [ebp - 0x398]
call fcn.0044c3e0
call fcn.00402c98
mov dword [ebp - 0x38c], eax
mov eax, dword [ebp - 0x38c]
inc eax
cmp eax, dword [ebp - 4]
jl 0x6ab36e
mov eax, dword [ebp - 0x38c]
dec eax
cmp eax, dword [ebp - 4]
jle 0x6ab3e9
mov byte [ebp - 0x3aa], 0
mov eax, dword [0x841d58]
xor edx, edx
mov dword [eax], edx
mov eax, dword [0x841ab8]
xor edx, edx
mov dword [eax], edx
mov eax, dword [0x841d58]
mov edx, dword [ebp - 0x384]
mov dword [eax + 4], edx
mov eax, dword [0x841ab8]
xor edx, edx
mov dword [eax + 4], edx
mov eax, dword [0x841d58]
xor edx, edx
mov dword [eax + 0xc], edx
mov eax, dword [0x841ab8]
mov edx, dword [ebp - 0x388]
mov dword [eax + 0xc], edx
mov eax, dword [0x841d58]
mov edx, dword [ebp - 0x384]
mov dword [eax + 8], edx
mov eax, dword [0x841ab8]
mov edx, dword [ebp - 0x388]
mov dword [eax + 8], edx
lea eax, [ebp - 0x1c4]
mov edx, dword [ebp - 0x398]
call fcn.00403f0c
jmp 0x6aabb2
lea edx, [ebp - 0x608]
mov eax, dword [0x841d58]
mov eax, dword [eax]
call fcn.004094a8
mov edx, dword [ebp - 0x608]
lea eax, [ebp - 0x708]
mov ecx, 0xff
call fcn.004040cc
lea edx, [ebp - 0x708]
mov eax, dword [0x842148]
mov cl, 0xf
call fcn.00402d1c
lea edx, [ebp - 0x608]
mov eax, dword [0x841ab8]
mov eax, dword [eax]
call fcn.004094a8
mov edx, dword [ebp - 0x608]
lea eax, [ebp - 0x708]
mov ecx, 0xff
call fcn.004040cc
lea edx, [ebp - 0x708]
mov eax, dword [0x841ea0]
mov cl, 0xf
call fcn.00402d1c
mov eax, dword [0x8409e0]
push dword [eax + 4]
push dword [eax]
lea eax, [ebp - 0x608]
call fcn.00787dd0
mov edx, dword [ebp - 0x608]
lea eax, [ebp - 0x708]
mov ecx, 0xff
call fcn.004040cc
lea edx, [ebp - 0x708]
mov eax, dword [0x841868]
mov cl, 0xf
call fcn.00402d1c
mov eax, dword [0x8409e0]
push dword [eax + 4]
push dword [eax]
lea eax, [ebp - 0x608]
call fcn.00787e34
mov edx, dword [ebp - 0x608]
lea eax, [ebp - 0x708]
mov ecx, 0xff
call fcn.004040cc
lea edx, [ebp - 0x708]
mov eax, dword [0x840960]
mov cl, 0xf
call fcn.00402d1c
mov eax, dword [0x840c14]
mov word [eax], 0x4e01
mov eax, dword [0x841f04]
push dword [eax + 4]
push dword [eax]
lea eax, [ebp - 0x608]
call fcn.00787dd0
mov edx, dword [ebp - 0x608]
lea eax, [ebp - 0x708]
mov ecx, 0xff
call fcn.004040cc
lea edx, [ebp - 0x708]
mov eax, dword [0x841254]
mov cl, 0xf
call fcn.00402d1c
mov eax, dword [0x841f04]
push dword [eax + 4]
push dword [eax]
lea eax, [ebp - 0x608]
call fcn.00787e34
mov edx, dword [ebp - 0x608]
lea eax, [ebp - 0x708]
mov ecx, 0xff
call fcn.004040cc
lea edx, [ebp - 0x708]
mov eax, dword [0x8420d4]
mov cl, 0xf
call fcn.00402d1c
mov eax, dword [0x841eb8]
mov word [eax], 0x5701
lea edx, [ebp - 0x608]
mov eax, dword [0x841d58]
mov eax, dword [eax + 4]
call fcn.004094a8
mov edx, dword [ebp - 0x608]
lea eax, [ebp - 0x708]
mov ecx, 0xff
call fcn.004040cc
lea edx, [ebp - 0x708]
mov eax, dword [0x842148]
add eax, 0x10
mov cl, 0xf
call fcn.00402d1c
lea edx, [ebp - 0x608]
mov eax, dword [0x841ab8]
mov eax, dword [eax + 4]
call fcn.004094a8
mov edx, dword [ebp - 0x608]
lea eax, [ebp - 0x708]
mov ecx, 0xff
call fcn.004040cc
lea edx, [ebp - 0x708]
mov eax, dword [0x841ea0]
add eax, 0x10
mov cl, 0xf
call fcn.00402d1c
mov eax, dword [0x8409e0]
push dword [eax + 0xc]
push dword [eax + 8]
lea eax, [ebp - 0x608]
call fcn.00787dd0
mov edx, dword [ebp - 0x608]
lea eax, [ebp - 0x708]
mov ecx, 0xff
call fcn.004040cc
lea edx, [ebp - 0x708]
mov eax, dword [0x841868]
add eax, 0x10
mov cl, 0xf
call fcn.00402d1c
mov eax, dword [0x8409e0]
push dword [eax + 0xc]
push dword [eax + 8]
lea eax, [ebp - 0x608]
call fcn.00787e34
mov edx, dword [ebp - 0x608]
lea eax, [ebp - 0x708]
mov ecx, 0xff
call fcn.004040cc
lea edx, [ebp - 0x708]
mov eax, dword [0x840960]
add eax, 0x10
mov cl, 0xf
call fcn.00402d1c
mov eax, dword [0x840c14]
mov word [eax + 0x10], 0x4e01
mov eax, dword [0x841f04]
push dword [eax + 0xc]
push dword [eax + 8]
lea eax, [ebp - 0x608]
call fcn.00787dd0
mov edx, dword [ebp - 0x608]
lea eax, [ebp - 0x708]
mov ecx, 0xff
call fcn.004040cc
lea edx, [ebp - 0x708]
mov eax, dword [0x841254]
add eax, 0x10
mov cl, 0xf
call fcn.00402d1c
mov eax, dword [0x841f04]
push dword [eax + 0xc]
push dword [eax + 8]
lea eax, [ebp - 0x608]
call fcn.00787e34
mov edx, dword [ebp - 0x608]
lea eax, [ebp - 0x708]
mov ecx, 0xff
call fcn.004040cc
lea edx, [ebp - 0x708]
mov eax, dword [0x8420d4]
add eax, 0x10
mov cl, 0xf
call fcn.00402d1c
mov eax, dword [0x841eb8]
mov word [eax + 0x10], 0x5701
lea edx, [ebp - 0x608]
mov eax, dword [0x841d58]
mov eax, dword [eax + 8]
call fcn.004094a8
mov edx, dword [ebp - 0x608]
lea eax, [ebp - 0x708]
mov ecx, 0xff
call fcn.004040cc
lea edx, [ebp - 0x708]
mov eax, dword [0x842148]
add eax, 0x20
mov cl, 0xf
call fcn.00402d1c
lea edx, [ebp - 0x608]
mov eax, dword [0x841ab8]
mov eax, dword [eax + 8]
call fcn.004094a8
mov edx, dword [ebp - 0x608]
lea eax, [ebp - 0x708]
mov ecx, 0xff
call fcn.004040cc
lea edx, [ebp - 0x708]
mov eax, dword [0x841ea0]
add eax, 0x20
mov cl, 0xf
call fcn.00402d1c
mov eax, dword [0x8409e0]
push dword [eax + 0x14]
push dword [eax + 0x10]
lea eax, [ebp - 0x608]
call fcn.00787dd0
mov edx, dword [ebp - 0x608]
lea eax, [ebp - 0x708]
mov ecx, 0xff
call fcn.004040cc
lea edx, [ebp - 0x708]
mov eax, dword [0x841868]
add eax, 0x20
mov cl, 0xf
call fcn.00402d1c
mov eax, dword [0x8409e0]
push dword [eax + 0x14]
push dword [eax + 0x10]
lea eax, [ebp - 0x608]
call fcn.00787e34
mov edx, dword [ebp - 0x608]
lea eax, [ebp - 0x708]
mov ecx, 0xff
call fcn.004040cc
lea edx, [ebp - 0x708]
mov eax, dword [0x840960]
add eax, 0x20
mov cl, 0xf
call fcn.00402d1c
mov eax, dword [0x840c14]
mov word [eax + 0x20], 0x4e01
mov eax, dword [0x841f04]
push dword [eax + 0x14]
push dword [eax + 0x10]
lea eax, [ebp - 0x608]
call fcn.00787dd0
mov edx, dword [ebp - 0x608]
lea eax, [ebp - 0x708]
mov ecx, 0xff
call fcn.004040cc
lea edx, [ebp - 0x708]
mov eax, dword [0x841254]
add eax, 0x20
mov cl, 0xf
call fcn.00402d1c
mov eax, dword [0x841f04]
push dword [eax + 0x14]
push dword [eax + 0x10]
lea eax, [ebp - 0x608]
call fcn.00787e34
mov edx, dword [ebp - 0x608]
lea eax, [ebp - 0x708]
mov ecx, 0xff
call fcn.004040cc
lea edx, [ebp - 0x708]
mov eax, dword [0x8420d4]
add eax, 0x20
mov cl, 0xf
call fcn.00402d1c
mov eax, dword [0x841eb8]
mov word [eax + 0x20], 0x5701
cmp dword [0x94e8e0], 2
jne 0x6ab8a9
mov eax, dword [0x841d5c]
mov edx, 0x6ad738
call fcn.00403ec8
cmp dword [0x94e8e0], 3
jne 0x6ab8c1
mov eax, dword [0x841d5c]
mov edx, 0x6ad754
call fcn.00403ec8
cmp dword [0x94e8e0], 4
jne 0x6ab8d9
mov eax, dword [0x841d5c]
mov edx, 0x6ad778
call fcn.00403ec8
cmp dword [0x94e8e0], 5
jne 0x6ab8f1
mov eax, dword [0x841d5c]
mov edx, 0x6ad790
call fcn.00403ec8
cmp dword [0x94e8e0], 6
jne 0x6ab909
mov eax, dword [0x841d5c]
mov edx, 0x6ad7b0
call fcn.00403ec8
cmp dword [0x94e8e0], 7
jne 0x6ab921
mov eax, dword [0x841d5c]
mov edx, 0x6ad7cc
call fcn.00403ec8
cmp dword [0x94e8e0], 8
jne 0x6ab939
mov eax, dword [0x841d5c]
mov edx, 0x6ad7e8
call fcn.00403ec8
cmp dword [0x94e8e0], 9
jne 0x6ab951
mov eax, dword [0x841d5c]
mov edx, 0x6ad804
call fcn.00403ec8
cmp dword [0x94e8e0], 0xa
jne 0x6ab969
mov eax, dword [0x841d5c]
mov edx, 0x6ad820
call fcn.00403ec8
cmp dword [0x94e8e0], 0xb
jne 0x6ab981
mov eax, dword [0x841d5c]
mov edx, 0x6ad840
call fcn.00403ec8
cmp dword [0x94e8e0], 0xc
jne 0x6ab999
mov eax, dword [0x841d5c]
mov edx, 0x6ad85c
call fcn.00403ec8
cmp dword [0x94e8e0], 0xd
jne 0x6ab9b1
mov eax, dword [0x841d5c]
mov edx, 0x6ad880
call fcn.00403ec8
cmp dword [0x94e8e0], 0xe
jne 0x6ab9c9
mov eax, dword [0x841d5c]
mov edx, 0x6ad8a4
call fcn.00403ec8
cmp dword [0x94e8e0], 0xf
jne 0x6ab9e1
mov eax, dword [0x841d5c]
mov edx, 0x6ad8d4
call fcn.00403ec8
cmp dword [0x94e8e0], 0x13
jne 0x6ab9f9
mov eax, dword [0x841d5c]
mov edx, 0x6ad8fc
call fcn.00403ec8
mov eax, dword [0x94e8e0]
add eax, 0xfffffffe
sub eax, 0xe
jb 0x6aba0f
sub eax, 3
jne 0x6ac4c6
cmp byte [ebp - 0x203], 0
jne 0x6ac4c6
mov eax, dword [ebp - 0x1a0]
mov dword [ebp - 0x3a0], eax
mov eax, dword [ebp - 0x19c]
mov dword [ebp - 0x39c], eax
mov eax, dword [ebp - 0x198]
mov dword [ebp - 0x3a8], eax
mov eax, dword [ebp - 0x194]
mov dword [ebp - 0x3a4], eax
mov eax, dword [0x94e8e0]
cmp eax, 0x13
ja case.0x6aba5a.0
jmp dword [eax*4 + 0x6aba61]
push dword [0x94e8fc]
push dword [0x94e8f8]
push dword [0x94e904]
push dword [0x94e900]
push dword [0x94e91c]
push dword [0x94e918]
fld qword [0x94e908]
fmul qword [ebp - 0x314]
add esp, 0xfffffff8
fstp qword [esp]
wait
fld qword [0x94e910]
fmul qword [ebp - 0x314]
add esp, 0xfffffff8
fstp qword [esp]
wait
push dword [ebp - 0x39c]
push dword [ebp - 0x3a0]
push dword [ebp - 0x3a4]
push dword [ebp - 0x3a8]
mov ecx, dword [0x84125c]
mov ecx, dword [ecx]
lea edx, [ebp - 0x350]
lea eax, [ebp - 0x358]
call fcn.0055b7a0
jmp case.0x6aba5a.0
push dword [ebp - 0x39c]
push dword [ebp - 0x3a0]
push dword [ebp - 0x3a4]
push dword [ebp - 0x3a8]
mov eax, dword [0x84125c]
mov eax, dword [eax]
push eax
lea ecx, [ebp - 0x350]
lea edx, [ebp - 0x358]
mov eax, dword [ebp - 0x1c4]
call fcn.0055aeb0
jmp case.0x6aba5a.0
push dword [ebp - 0x39c]
push dword [ebp - 0x3a0]
push dword [ebp - 0x3a4]
push dword [ebp - 0x3a8]
mov eax, dword [0x84125c]
mov eax, dword [eax]
push eax
lea ecx, [ebp - 0x350]
lea edx, [ebp - 0x358]
mov eax, dword [ebp - 0x1c4]
call fcn.0055b424
jmp case.0x6aba5a.0
push dword [ebp - 0x39c]
push dword [ebp - 0x3a0]
push dword [ebp - 0x3a4]
push dword [ebp - 0x3a8]
lea edx, [ebp - 0x350]
lea eax, [ebp - 0x358]
call fcn.00554f50
jmp case.0x6aba5a.0
push dword [ebp - 0x39c]
push dword [ebp - 0x3a0]
push dword [ebp - 0x3a4]
push dword [ebp - 0x3a8]
mov ecx, dword [0x84125c]
mov ecx, dword [ecx]
lea edx, [ebp - 0x350]
lea eax, [ebp - 0x358]
call fcn.0055b8c8
jmp case.0x6aba5a.0
push dword [ebp - 0x39c]
push dword [ebp - 0x3a0]
push dword [ebp - 0x3a4]
push dword [ebp - 0x3a8]
mov ecx, dword [0x84125c]
mov ecx, dword [ecx]
lea edx, [ebp - 0x350]
lea eax, [ebp - 0x358]
call fcn.005651d4
jmp case.0x6aba5a.0
push dword [ebp - 0x39c]
push dword [ebp - 0x3a0]
push dword [ebp - 0x3a4]
push dword [ebp - 0x3a8]
mov ecx, dword [0x84125c]
mov ecx, dword [ecx]
lea edx, [ebp - 0x350]
lea eax, [ebp - 0x358]
call fcn.0055b9c8
jmp case.0x6aba5a.0
push dword [ebp - 0x39c]
push dword [ebp - 0x3a0]
push dword [ebp - 0x3a4]
push dword [ebp - 0x3a8]
mov ecx, dword [0x84125c]
mov ecx, dword [ecx]
lea edx, [ebp - 0x350]
lea eax, [ebp - 0x358]
call fcn.0055baf4
jmp case.0x6aba5a.0
push dword [ebp - 0x39c]
push dword [ebp - 0x3a0]
push dword [ebp - 0x3a4]
push dword [ebp - 0x3a8]
mov ecx, dword [0x84125c]
mov ecx, dword [ecx]
lea edx, [ebp - 0x350]
lea eax, [ebp - 0x358]
call fcn.0055bc20
jmp case.0x6aba5a.0
push dword [ebp - 0x39c]
push dword [ebp - 0x3a0]
push dword [ebp - 0x3a4]
push dword [ebp - 0x3a8]
mov ecx, dword [0x84125c]
mov ecx, dword [ecx]
lea edx, [ebp - 0x350]
lea eax, [ebp - 0x358]
call fcn.0055bd5c
jmp case.0x6aba5a.0
push dword [ebp - 0x39c]
push dword [ebp - 0x3a0]
push dword [ebp - 0x3a4]
push dword [ebp - 0x3a8]
mov ecx, dword [0x84125c]
mov ecx, dword [ecx]
lea edx, [ebp - 0x350]
lea eax, [ebp - 0x358]
call fcn.005746b0
jmp case.0x6aba5a.0
push dword [ebp - 0x39c]
push dword [ebp - 0x3a0]
push dword [ebp - 0x3a4]
push dword [ebp - 0x3a8]
mov ecx, dword [0x84125c]
mov ecx, dword [ecx]
lea edx, [ebp - 0x350]
lea eax, [ebp - 0x358]
call fcn.00574788
jmp case.0x6aba5a.0
push dword [ebp - 0x39c]
push dword [ebp - 0x3a0]
push dword [ebp - 0x3a4]
push dword [ebp - 0x3a8]
mov ecx, dword [0x84125c]
mov ecx, dword [ecx]
lea edx, [ebp - 0x350]
lea eax, [ebp - 0x358]
call fcn.0057485c
jmp case.0x6aba5a.0
push dword [ebp - 0x39c]
push dword [ebp - 0x3a0]
push dword [ebp - 0x3a4]
push dword [ebp - 0x3a8]
mov ecx, dword [0x84125c]
mov ecx, dword [ecx]
lea edx, [ebp - 0x350]
lea eax, [ebp - 0x358]
call fcn.00574938
jmp case.0x6aba5a.0
push dword [ebp - 0x39c]
push dword [ebp - 0x3a0]
push dword [ebp - 0x3a4]
push dword [ebp - 0x3a8]
mov ecx, dword [0x84125c]
mov ecx, dword [ecx]
lea edx, [ebp - 0x350]
lea eax, [ebp - 0x358]
call fcn.00574a1c
push dword [ebp - 0x354]
push dword [ebp - 0x358]
lea eax, [ebp - 0x608]
call fcn.00787dd0
mov edx, dword [ebp - 0x608]
lea eax, [ebp - 0x708]
mov ecx, 0xff
call fcn.004040cc
lea edx, [ebp - 0x708]
mov eax, dword [0x841868]
mov cl, 0xf
call fcn.00402d1c
push dword [ebp - 0x354]
push dword [ebp - 0x358]
lea eax, [ebp - 0x608]
call fcn.00787e34
mov edx, dword [ebp - 0x608]
lea eax, [ebp - 0x708]
mov ecx, 0xff
call fcn.004040cc
lea edx, [ebp - 0x708]
mov eax, dword [0x840960]
mov cl, 0xf
call fcn.00402d1c
fld qword [ebp - 0x358]
fcomp dword [0x6ad46c]
fnstsw ax
sahf
jae 0x6abeb9
mov eax, dword [0x840c14]
mov word [eax], 0x5301
jmp 0x6abec3
mov eax, dword [0x840c14]
mov word [eax], 0x4e01
push dword [ebp - 0x34c]
push dword [ebp - 0x350]
lea eax, [ebp - 0x608]
call fcn.00787dd0
mov edx, dword [ebp - 0x608]
lea eax, [ebp - 0x708]
mov ecx, 0xff
call fcn.004040cc
lea edx, [ebp - 0x708]
mov eax, dword [0x841254]
mov cl, 0xf
call fcn.00402d1c
push dword [ebp - 0x34c]
push dword [ebp - 0x350]
lea eax, [ebp - 0x608]
call fcn.00787e34
mov edx, dword [ebp - 0x608]
lea eax, [ebp - 0x708]
mov ecx, 0xff
call fcn.004040cc
lea edx, [ebp - 0x708]
mov eax, dword [0x8420d4]
mov cl, 0xf
call fcn.00402d1c
fld qword [ebp - 0x350]
fcomp dword [0x6ad46c]
fnstsw ax
sahf
jae 0x6abf5e
mov eax, dword [0x841eb8]
mov word [eax], 0x5701
jmp 0x6abf68
mov eax, dword [0x841eb8]
mov word [eax], 0x4501
fild dword [ebp - 0x3c0]
fmul qword [ebp - 0x1c0]
fadd qword [ebp - 0x1a0]
fstp qword [ebp - 0x3a0]
wait
fild dword [ebp - 0x3c4]
fmul qword [ebp - 0x1a8]
fadd qword [ebp - 0x198]
fstp qword [ebp - 0x3a8]
wait
mov eax, dword [0x94e8e0]
cmp eax, 0x13
ja case.0x6abfa8.0
jmp dword [eax*4 + 0x6abfaf]
push dword [0x94e8fc]
push dword [0x94e8f8]
push dword [0x94e904]
push dword [0x94e900]
push dword [0x94e91c]
push dword [0x94e918]
fld qword [0x94e908]
fmul qword [ebp - 0x314]
add esp, 0xfffffff8
fstp qword [esp]
wait
fld qword [0x94e910]
fmul qword [ebp - 0x314]
add esp, 0xfffffff8
fstp qword [esp]
wait
push dword [ebp - 0x39c]
push dword [ebp - 0x3a0]
push dword [ebp - 0x3a4]
push dword [ebp - 0x3a8]
mov ecx, dword [0x84125c]
mov ecx, dword [ecx]
lea edx, [ebp - 0x350]
lea eax, [ebp - 0x358]
call fcn.0055b7a0
jmp case.0x6abfa8.0
push dword [ebp - 0x39c]
push dword [ebp - 0x3a0]
push dword [ebp - 0x3a4]
push dword [ebp - 0x3a8]
mov eax, dword [0x84125c]
mov eax, dword [eax]
push eax
lea ecx, [ebp - 0x350]
lea edx, [ebp - 0x358]
mov eax, dword [ebp - 0x1c4]
call fcn.0055aeb0
jmp case.0x6abfa8.0
push dword [ebp - 0x39c]
push dword [ebp - 0x3a0]
push dword [ebp - 0x3a4]
push dword [ebp - 0x3a8]
mov eax, dword [0x84125c]
mov eax, dword [eax]
push eax
lea ecx, [ebp - 0x350]
lea edx, [ebp - 0x358]
mov eax, dword [ebp - 0x1c4]
call fcn.0055b424
jmp case.0x6abfa8.0
push dword [ebp - 0x39c]
push dword [ebp - 0x3a0]
push dword [ebp - 0x3a4]
push dword [ebp - 0x3a8]
lea edx, [ebp - 0x350]
lea eax, [ebp - 0x358]
call fcn.00554f50
jmp case.0x6abfa8.0
push dword [ebp - 0x39c]
push dword [ebp - 0x3a0]
push dword [ebp - 0x3a4]
push dword [ebp - 0x3a8]
mov ecx, dword [0x84125c]
mov ecx, dword [ecx]
lea edx, [ebp - 0x350]
lea eax, [ebp - 0x358]
call fcn.0055b8c8
jmp case.0x6abfa8.0
push dword [ebp - 0x39c]
push dword [ebp - 0x3a0]
push dword [ebp - 0x3a4]
push dword [ebp - 0x3a8]
mov ecx, dword [0x84125c]
mov ecx, dword [ecx]
lea edx, [ebp - 0x350]
lea eax, [ebp - 0x358]
call fcn.005651d4
jmp case.0x6abfa8.0
push dword [ebp - 0x39c]
push dword [ebp - 0x3a0]
push dword [ebp - 0x3a4]
push dword [ebp - 0x3a8]
mov ecx, dword [0x84125c]
mov ecx, dword [ecx]
lea edx, [ebp - 0x350]
lea eax, [ebp - 0x358]
call fcn.0055b9c8
jmp case.0x6abfa8.0
push dword [ebp - 0x39c]
push dword [ebp - 0x3a0]
push dword [ebp - 0x3a4]
push dword [ebp - 0x3a8]
mov ecx, dword [0x84125c]
mov ecx, dword [ecx]
lea edx, [ebp - 0x350]
lea eax, [ebp - 0x358]
call fcn.0055baf4
jmp case.0x6abfa8.0
push dword [ebp - 0x39c]
push dword [ebp - 0x3a0]
push dword [ebp - 0x3a4]
push dword [ebp - 0x3a8]
mov ecx, dword [0x84125c]
mov ecx, dword [ecx]
lea edx, [ebp - 0x350]
lea eax, [ebp - 0x358]
call fcn.0055bc20
jmp case.0x6abfa8.0
push dword [ebp - 0x39c]
push dword [ebp - 0x3a0]
push dword [ebp - 0x3a4]
push dword [ebp - 0x3a8]
mov ecx, dword [0x84125c]
mov ecx, dword [ecx]
lea edx, [ebp - 0x350]
lea eax, [ebp - 0x358]
call fcn.0055bd5c
jmp case.0x6abfa8.0
push dword [ebp - 0x39c]
push dword [ebp - 0x3a0]
push dword [ebp - 0x3a4]
push dword [ebp - 0x3a8]
mov ecx, dword [0x84125c]
mov ecx, dword [ecx]
lea edx, [ebp - 0x350]
lea eax, [ebp - 0x358]
call fcn.005746b0
jmp case.0x6abfa8.0
push dword [ebp - 0x39c]
push dword [ebp - 0x3a0]
push dword [ebp - 0x3a4]
push dword [ebp - 0x3a8]
mov ecx, dword [0x84125c]
mov ecx, dword [ecx]
lea edx, [ebp - 0x350]
lea eax, [ebp - 0x358]
call fcn.00574788
jmp case.0x6abfa8.0
push dword [ebp - 0x39c]
push dword [ebp - 0x3a0]
push dword [ebp - 0x3a4]
push dword [ebp - 0x3a8]
mov ecx, dword [0x84125c]
mov ecx, dword [ecx]
lea edx, [ebp - 0x350]
lea eax, [ebp - 0x358]
call fcn.0057485c
jmp case.0x6abfa8.0
push dword [ebp - 0x39c]
push dword [ebp - 0x3a0]
push dword [ebp - 0x3a4]
push dword [ebp - 0x3a8]
mov ecx, dword [0x84125c]
mov ecx, dword [ecx]
lea edx, [ebp - 0x350]
lea eax, [ebp - 0x358]
call fcn.00574938
jmp case.0x6abfa8.0
push dword [ebp - 0x39c]
push dword [ebp - 0x3a0]
push dword [ebp - 0x3a4]
push dword [ebp - 0x3a8]
mov ecx, dword [0x84125c]
mov ecx, dword [ecx]
lea edx, [ebp - 0x350]
lea eax, [ebp - 0x358]
call fcn.00574a1c
push dword [ebp - 0x354]
push dword [ebp - 0x358]
lea eax, [ebp - 0x608]
call fcn.00787dd0
mov edx, dword [ebp - 0x608]
lea eax, [ebp - 0x708]
mov ecx, 0xff
call fcn.004040cc
lea edx, [ebp - 0x708]
mov eax, dword [0x841868]
add eax, 0x10
mov cl, 0xf
call fcn.00402d1c
push dword [ebp - 0x354]
push dword [ebp - 0x358]
lea eax, [ebp - 0x608]
call fcn.00787e34
mov edx, dword [ebp - 0x608]
lea eax, [ebp - 0x708]
mov ecx, 0xff
call fcn.004040cc
lea edx, [ebp - 0x708]
mov eax, dword [0x840960]
add eax, 0x10
mov cl, 0xf
call fcn.00402d1c
fld qword [ebp - 0x358]
fcomp dword [0x6ad46c]
fnstsw ax
sahf
jae 0x6ac40e
mov eax, dword [0x840c14]
mov word [eax + 0x10], 0x5301
jmp 0x6ac419
mov eax, dword [0x840c14]
mov word [eax + 0x10], 0x4e01
push dword [ebp - 0x34c]
push dword [ebp - 0x350]
lea eax, [ebp - 0x608]
call fcn.00787dd0
mov edx, dword [ebp - 0x608]
lea eax, [ebp - 0x708]
mov ecx, 0xff
call fcn.004040cc
lea edx, [ebp - 0x708]
mov eax, dword [0x841254]
add eax, 0x10
mov cl, 0xf
call fcn.00402d1c
push dword [ebp - 0x34c]
push dword [ebp - 0x350]
lea eax, [ebp - 0x608]
call fcn.00787e34
mov edx, dword [ebp - 0x608]
lea eax, [ebp - 0x708]
mov ecx, 0xff
call fcn.004040cc
lea edx, [ebp - 0x708]
mov eax, dword [0x8420d4]
add eax, 0x10
mov cl, 0xf
call fcn.00402d1c
fld qword [ebp - 0x350]
fcomp dword [0x6ad46c]
fnstsw ax
sahf
jae 0x6ac4bb
mov eax, dword [0x841eb8]
mov word [eax + 0x10], 0x5701
jmp 0x6ac4c6
mov eax, dword [0x841eb8]
mov word [eax + 0x10], 0x4501
cmp dword [0x94e8e0], 0x10
jne 0x6ac8d9
mov eax, dword [0x841d5c]
mov edx, 0x6ad928
call fcn.00403ec8
cmp byte [ebp - 0x203], 0
jne 0x6ac8d9
fld qword [0x94e908]
fchs
fmul qword [ebp - 0x314]
fadd qword [ebp - 0x1a0]
fstp qword [ebp - 0x3a0]
wait
fld qword [0x94e910]
fchs
fmul qword [ebp - 0x314]
fadd qword [ebp - 0x198]
fstp qword [ebp - 0x3a8]
wait
push dword [0x94e8fc]
push dword [0x94e8f8]
push dword [0x94e8ec]
push dword [0x94e8e8]
push dword [0x94e8f4]
push dword [0x94e8f0]
push dword [0x94e904]
push dword [0x94e900]
push dword [ebp - 0x39c]
push dword [ebp - 0x3a0]
push dword [ebp - 0x3a4]
push dword [ebp - 0x3a8]
mov ecx, dword [0x84125c]
mov ecx, dword [ecx]
lea edx, [ebp - 0x350]
lea eax, [ebp - 0x358]
call fcn.00569790
push dword [ebp - 0x354]
push dword [ebp - 0x358]
lea eax, [ebp - 0x608]
call fcn.00787dd0
mov edx, dword [ebp - 0x608]
lea eax, [ebp - 0x708]
mov ecx, 0xff
call fcn.004040cc
lea edx, [ebp - 0x708]
mov eax, dword [0x841868]
mov cl, 0xf
call fcn.00402d1c
push dword [ebp - 0x354]
push dword [ebp - 0x358]
lea eax, [ebp - 0x608]
call fcn.00787e34
mov edx, dword [ebp - 0x608]
lea eax, [ebp - 0x708]
mov ecx, 0xff
call fcn.004040cc
lea edx, [ebp - 0x708]
mov eax, dword [0x840960]
mov cl, 0xf
call fcn.00402d1c
fld qword [ebp - 0x358]
fcomp dword [0x6ad46c]
fnstsw ax
sahf
jae 0x6ac621
mov eax, dword [0x840c14]
mov word [eax], 0x5301
jmp 0x6ac62b
mov eax, dword [0x840c14]
mov word [eax], 0x4e01
push dword [ebp - 0x34c]
push dword [ebp - 0x350]
lea eax, [ebp - 0x608]
call fcn.00787dd0
mov edx, dword [ebp - 0x608]
lea eax, [ebp - 0x708]
mov ecx, 0xff
call fcn.004040cc
lea edx, [ebp - 0x708]
mov eax, dword [0x841254]
mov cl, 0xf
call fcn.00402d1c
push dword [ebp - 0x34c]
push dword [ebp - 0x350]
lea eax, [ebp - 0x608]
call fcn.00787e34
mov edx, dword [ebp - 0x608]
lea eax, [ebp - 0x708]
mov ecx, 0xff
call fcn.004040cc
lea edx, [ebp - 0x708]
mov eax, dword [0x8420d4]
mov cl, 0xf
call fcn.00402d1c
fld qword [ebp - 0x350]
fcomp dword [0x6ad46c]
fnstsw ax
sahf
jae 0x6ac6c6
mov eax, dword [0x841eb8]
mov word [eax], 0x5701
jmp 0x6ac6d0
mov eax, dword [0x841eb8]
mov word [eax], 0x4501
fild dword [ebp - 0x3c0]
fmul qword [ebp - 0x1c0]
fadd qword [ebp - 0x1a0]
fld qword [0x94e908]
fmul qword [ebp - 0x314]
fsubp st(1)
fstp qword [ebp - 0x3a0]
wait
fild dword [ebp - 0x3c4]
fmul qword [ebp - 0x1a8]
fadd qword [ebp - 0x198]
fld qword [0x94e910]
fmul qword [ebp - 0x314]
fsubp st(1)
fstp qword [ebp - 0x3a8]
wait
push dword [0x94e8fc]
push dword [0x94e8f8]
push dword [0x94e8ec]
push dword [0x94e8e8]
push dword [0x94e8f4]
push dword [0x94e8f0]
push dword [0x94e904]
push dword [0x94e900]
push dword [ebp - 0x39c]
push dword [ebp - 0x3a0]
push dword [ebp - 0x3a4]
push dword [ebp - 0x3a8]
mov ecx, dword [0x84125c]
mov ecx, dword [ecx]
lea edx, [ebp - 0x350]
lea eax, [ebp - 0x358]
call fcn.00569790
push dword [ebp - 0x354]
push dword [ebp - 0x358]
lea eax, [ebp - 0x608]
call fcn.00787dd0
mov edx, dword [ebp - 0x608]
lea eax, [ebp - 0x708]
mov ecx, 0xff
call fcn.004040cc
lea edx, [ebp - 0x708]
mov eax, dword [0x841868]
add eax, 0x10
mov cl, 0xf
call fcn.00402d1c
push dword [ebp - 0x354]
push dword [ebp - 0x358]
lea eax, [ebp - 0x608]
call fcn.00787e34
mov edx, dword [ebp - 0x608]
lea eax, [ebp - 0x708]
mov ecx, 0xff
call fcn.004040cc
lea edx, [ebp - 0x708]
mov eax, dword [0x840960]
add eax, 0x10
mov cl, 0xf
call fcn.00402d1c
fld qword [ebp - 0x358]
fcomp dword [0x6ad46c]
fnstsw ax
sahf
jae 0x6ac821
mov eax, dword [0x840c14]
mov word [eax + 0x10], 0x5301
jmp 0x6ac82c
mov eax, dword [0x840c14]
mov word [eax + 0x10], 0x4e01
push dword [ebp - 0x34c]
push dword [ebp - 0x350]
lea eax, [ebp - 0x608]
call fcn.00787dd0
mov edx, dword [ebp - 0x608]
lea eax, [ebp - 0x708]
mov ecx, 0xff
call fcn.004040cc
lea edx, [ebp - 0x708]
mov eax, dword [0x841254]
add eax, 0x10
mov cl, 0xf
call fcn.00402d1c
push dword [ebp - 0x34c]
push dword [ebp - 0x350]
lea eax, [ebp - 0x608]
call fcn.00787e34
mov edx, dword [ebp - 0x608]
lea eax, [ebp - 0x708]
mov ecx, 0xff
call fcn.004040cc
lea edx, [ebp - 0x708]
mov eax, dword [0x8420d4]
add eax, 0x10
mov cl, 0xf
call fcn.00402d1c
fld qword [ebp - 0x350]
fcomp dword [0x6ad46c]
fnstsw ax
sahf
jae 0x6ac8ce
mov eax, dword [0x841eb8]
mov word [eax + 0x10], 0x5701
jmp 0x6ac8d9
mov eax, dword [0x841eb8]
mov word [eax + 0x10], 0x4501
cmp dword [0x94e8e0], 0x11
jne 0x6acc6a
mov eax, dword [0x841d5c]
mov edx, 0x6ad944
call fcn.00403ec8
cmp byte [ebp - 0x203], 0
jne 0x6acc6a
mov eax, dword [ebp - 0x1a0]
mov dword [ebp - 0x3a0], eax
mov eax, dword [ebp - 0x19c]
mov dword [ebp - 0x39c], eax
mov eax, dword [ebp - 0x198]
mov dword [ebp - 0x3a8], eax
mov eax, dword [ebp - 0x194]
mov dword [ebp - 0x3a4], eax
push dword [ebp - 0x39c]
push dword [ebp - 0x3a0]
push dword [ebp - 0x3a4]
push dword [ebp - 0x3a8]
mov ecx, dword [0x84125c]
mov ecx, dword [ecx]
lea edx, [ebp - 0x350]
lea eax, [ebp - 0x358]
call fcn.00574b00
push dword [ebp - 0x354]
push dword [ebp - 0x358]
lea eax, [ebp - 0x608]
call fcn.00787dd0
mov edx, dword [ebp - 0x608]
lea eax, [ebp - 0x708]
mov ecx, 0xff
call fcn.004040cc
lea edx, [ebp - 0x708]
mov eax, dword [0x841868]
mov cl, 0xf
call fcn.00402d1c
push dword [ebp - 0x354]
push dword [ebp - 0x358]
lea eax, [ebp - 0x608]
call fcn.00787e34
mov edx, dword [ebp - 0x608]
lea eax, [ebp - 0x708]
mov ecx, 0xff
call fcn.004040cc
lea edx, [ebp - 0x708]
mov eax, dword [0x840960]
mov cl, 0xf
call fcn.00402d1c
fld qword [ebp - 0x358]
fcomp dword [0x6ad46c]
fnstsw ax
sahf
jae 0x6ac9fe
mov eax, dword [0x840c14]
mov word [eax], 0x5301
jmp 0x6aca08
mov eax, dword [0x840c14]
mov word [eax], 0x4e01
push dword [ebp - 0x34c]
push dword [ebp - 0x350]
lea eax, [ebp - 0x608]
call fcn.00787dd0
mov edx, dword [ebp - 0x608]
lea eax, [ebp - 0x708]
mov ecx, 0xff
call fcn.004040cc
lea edx, [ebp - 0x708]
mov eax, dword [0x841254]
mov cl, 0xf
call fcn.00402d1c
push dword [ebp - 0x34c]
push dword [ebp - 0x350]
lea eax, [ebp - 0x608]
call fcn.00787e34
mov edx, dword [ebp - 0x608]
lea eax, [ebp - 0x708]
mov ecx, 0xff
call fcn.004040cc
lea edx, [ebp - 0x708]
mov eax, dword [0x8420d4]
mov cl, 0xf
call fcn.00402d1c
fld qword [ebp - 0x350]
fcomp dword [0x6ad46c]
fnstsw ax
sahf
jae 0x6acaa3
mov eax, dword [0x841eb8]
mov word [eax], 0x5701
jmp 0x6acaad
mov eax, dword [0x841eb8]
mov word [eax], 0x4501
fild dword [ebp - 0x3c0]
fmul qword [ebp - 0x1c0]
fadd qword [ebp - 0x1a0]
fstp qword [ebp - 0x3a0]
wait
fild dword [ebp - 0x3c4]
fmul qword [ebp - 0x1a8]
fadd qword [ebp - 0x198]
fstp qword [ebp - 0x3a8]
wait
push dword [ebp - 0x39c]
push dword [ebp - 0x3a0]
push dword [ebp - 0x3a4]
push dword [ebp - 0x3a8]
mov ecx, dword [0x84125c]
mov ecx, dword [ecx]
lea edx, [ebp - 0x350]
lea eax, [ebp - 0x358]
call fcn.00574b00
push dword [ebp - 0x354]
push dword [ebp - 0x358]
lea eax, [ebp - 0x608]
call fcn.00787dd0
mov edx, dword [ebp - 0x608]
lea eax, [ebp - 0x708]
mov ecx, 0xff
call fcn.004040cc
lea edx, [ebp - 0x708]
mov eax, dword [0x841868]
add eax, 0x10
mov cl, 0xf
call fcn.00402d1c
push dword [ebp - 0x354]
push dword [ebp - 0x358]
lea eax, [ebp - 0x608]
call fcn.00787e34
mov edx, dword [ebp - 0x608]
lea eax, [ebp - 0x708]
mov ecx, 0xff
call fcn.004040cc
lea edx, [ebp - 0x708]
mov eax, dword [0x840960]
add eax, 0x10
mov cl, 0xf
call fcn.00402d1c
fld qword [ebp - 0x358]
fcomp dword [0x6ad46c]
fnstsw ax
sahf
jae 0x6acbb2
mov eax, dword [0x840c14]
mov word [eax + 0x10], 0x5301
jmp 0x6acbbd
mov eax, dword [0x840c14]
mov word [eax + 0x10], 0x4e01
push dword [ebp - 0x34c]
push dword [ebp - 0x350]
lea eax, [ebp - 0x608]
call fcn.00787dd0
mov edx, dword [ebp - 0x608]
lea eax, [ebp - 0x708]
mov ecx, 0xff
call fcn.004040cc
lea edx, [ebp - 0x708]
mov eax, dword [0x841254]
add eax, 0x10
mov cl, 0xf
call fcn.00402d1c
push dword [ebp - 0x34c]
push dword [ebp - 0x350]
lea eax, [ebp - 0x608]
call fcn.00787e34
mov edx, dword [ebp - 0x608]
lea eax, [ebp - 0x708]
mov ecx, 0xff
call fcn.004040cc
lea edx, [ebp - 0x708]
mov eax, dword [0x8420d4]
add eax, 0x10
mov cl, 0xf
call fcn.00402d1c
fld qword [ebp - 0x350]
fcomp dword [0x6ad46c]
fnstsw ax
sahf
jae 0x6acc5f
mov eax, dword [0x841eb8]
mov word [eax + 0x10], 0x5701
jmp 0x6acc6a
mov eax, dword [0x841eb8]
mov word [eax + 0x10], 0x4501
cmp dword [0x94e8e0], 0x12
jne 0x6ad07d
mov eax, dword [0x841d5c]
mov edx, 0x6ad970
call fcn.00403ec8
cmp byte [ebp - 0x203], 0
jne 0x6ad07d
fld qword [0x94e908]
fchs
fmul qword [ebp - 0x314]
fadd qword [ebp - 0x1a0]
fstp qword [ebp - 0x3a0]
wait
fld qword [0x94e910]
fchs
fmul qword [ebp - 0x314]
fadd qword [ebp - 0x198]
fstp qword [ebp - 0x3a8]
wait
push dword [0x94e8ec]
push dword [0x94e8e8]
push dword [0x94e8f4]
push dword [0x94e8f0]
push dword [0x94e904]
push dword [0x94e900]
push dword [0x94e8fc]
push dword [0x94e8f8]
push dword [ebp - 0x39c]
push dword [ebp - 0x3a0]
push dword [ebp - 0x3a4]
push dword [ebp - 0x3a8]
mov ecx, dword [0x84125c]
mov ecx, dword [ecx]
lea edx, [ebp - 0x350]
lea eax, [ebp - 0x358]
call fcn.00555704
push dword [ebp - 0x354]
push dword [ebp - 0x358]
lea eax, [ebp - 0x608]
call fcn.00787dd0
mov edx, dword [ebp - 0x608]
lea eax, [ebp - 0x708]
mov ecx, 0xff
call fcn.004040cc
lea edx, [ebp - 0x708]
mov eax, dword [0x841868]
mov cl, 0xf
call fcn.00402d1c
push dword [ebp - 0x354]
push dword [ebp - 0x358]
lea eax, [ebp - 0x608]
call fcn.00787e34
mov edx, dword [ebp - 0x608]
lea eax, [ebp - 0x708]
mov ecx, 0xff
call fcn.004040cc
lea edx, [ebp - 0x708]
mov eax, dword [0x840960]
mov cl, 0xf
call fcn.00402d1c
fld qword [ebp - 0x358]
fcomp dword [0x6ad46c]
fnstsw ax
sahf
jae 0x6acdc5
mov eax, dword [0x840c14]
mov word [eax], 0x5301
jmp 0x6acdcf
mov eax, dword [0x840c14]
mov word [eax], 0x4e01
push dword [ebp - 0x34c]
push dword [ebp - 0x350]
lea eax, [ebp - 0x608]
call fcn.00787dd0
mov edx, dword [ebp - 0x608]
lea eax, [ebp - 0x708]
mov ecx, 0xff
call fcn.004040cc
lea edx, [ebp - 0x708]
mov eax, dword [0x841254]
mov cl, 0xf
call fcn.00402d1c
push dword [ebp - 0x34c]
push dword [ebp - 0x350]
lea eax, [ebp - 0x608]
call fcn.00787e34
mov edx, dword [ebp - 0x608]
lea eax, [ebp - 0x708]
mov ecx, 0xff
call fcn.004040cc
lea edx, [ebp - 0x708]
mov eax, dword [0x8420d4]
mov cl, 0xf
call fcn.00402d1c
fld qword [ebp - 0x350]
fcomp dword [0x6ad46c]
fnstsw ax
sahf
jae 0x6ace6a
mov eax, dword [0x841eb8]
mov word [eax], 0x5701
jmp 0x6ace74
mov eax, dword [0x841eb8]
mov word [eax], 0x4501
fild dword [ebp - 0x3c0]
fmul qword [ebp - 0x1c0]
fadd qword [ebp - 0x1a0]
fld qword [0x94e908]
fmul qword [ebp - 0x314]
fsubp st(1)
fstp qword [ebp - 0x3a0]
wait
fild dword [ebp - 0x3c4]
fmul qword [ebp - 0x1a8]
fadd qword [ebp - 0x198]
fld qword [0x94e910]
fmul qword [ebp - 0x314]
fsubp st(1)
fstp qword [ebp - 0x3a8]
wait
push dword [0x94e8ec]
push dword [0x94e8e8]
push dword [0x94e8f4]
push dword [0x94e8f0]
push dword [0x94e904]
push dword [0x94e900]
push dword [0x94e8fc]
push dword [0x94e8f8]
push dword [ebp - 0x39c]
push dword [ebp - 0x3a0]
push dword [ebp - 0x3a4]
push dword [ebp - 0x3a8]
mov ecx, dword [0x84125c]
mov ecx, dword [ecx]
lea edx, [ebp - 0x350]
lea eax, [ebp - 0x358]
call fcn.00555704
push dword [ebp - 0x354]
push dword [ebp - 0x358]
lea eax, [ebp - 0x608]
call fcn.00787dd0
mov edx, dword [ebp - 0x608]
lea eax, [ebp - 0x708]
mov ecx, 0xff
call fcn.004040cc
lea edx, [ebp - 0x708]
mov eax, dword [0x841868]
add eax, 0x10
mov cl, 0xf
call fcn.00402d1c
push dword [ebp - 0x354]
push dword [ebp - 0x358]
lea eax, [ebp - 0x608]
call fcn.00787e34
mov edx, dword [ebp - 0x608]
lea eax, [ebp - 0x708]
mov ecx, 0xff
call fcn.004040cc
lea edx, [ebp - 0x708]
mov eax, dword [0x840960]
add eax, 0x10
mov cl, 0xf
call fcn.00402d1c
fld qword [ebp - 0x358]
fcomp dword [0x6ad46c]
fnstsw ax
sahf
jae 0x6acfc5
mov eax, dword [0x840c14]
mov word [eax + 0x10], 0x5301
jmp 0x6acfd0
mov eax, dword [0x840c14]
mov word [eax + 0x10], 0x4e01
push dword [ebp - 0x34c]
push dword [ebp - 0x350]
lea eax, [ebp - 0x608]
call fcn.00787dd0
mov edx, dword [ebp - 0x608]
lea eax, [ebp - 0x708]
mov ecx, 0xff
call fcn.004040cc
lea edx, [ebp - 0x708]
mov eax, dword [0x841254]
add eax, 0x10
mov cl, 0xf
call fcn.00402d1c
push dword [ebp - 0x34c]
push dword [ebp - 0x350]
lea eax, [ebp - 0x608]
call fcn.00787e34
mov edx, dword [ebp - 0x608]
lea eax, [ebp - 0x708]
mov ecx, 0xff
call fcn.004040cc
lea edx, [ebp - 0x708]
mov eax, dword [0x8420d4]
add eax, 0x10
mov cl, 0xf
call fcn.00402d1c
fld qword [ebp - 0x350]
fcomp dword [0x6ad46c]
fnstsw ax
sahf
jae 0x6ad072
mov eax, dword [0x841eb8]
mov word [eax + 0x10], 0x5701
jmp 0x6ad07d
mov eax, dword [0x841eb8]
mov word [eax + 0x10], 0x4501
cmp dword [0x94e8e0], 0xfffffff6
jne 0x6ad095
mov eax, dword [0x841d5c]
mov edx, 0x6ad990
call fcn.00403ec8
fld qword [0x94e908]
fmul qword [ebp - 0x314]
mov eax, dword [0x841b8c]
fstp qword [eax]
wait
fld qword [0x94e910]
fmul qword [ebp - 0x314]
mov eax, dword [0x841918]
fstp qword [eax]
wait
lea eax, [ebp - 0x608]
mov edx, dword [0x842148]
call fcn.00404094
mov eax, dword [ebp - 0x608]
call fcn.00409514
mov edx, dword [0x841c7c]
mov dword [edx], eax
lea eax, [ebp - 0x608]
mov edx, dword [0x841ea0]
call fcn.00404094
mov eax, dword [ebp - 0x608]
call fcn.00409514
mov edx, dword [0x8419f8]
mov dword [edx], eax
xor eax, eax
call fcn.006a0380
mov eax, dword [0x8415a0]
mov eax, dword [eax]
xor ecx, ecx
xor edx, edx
call fcn.00762f84
call fcn.007a11a0
mov eax, dword [0x84211c]
mov eax, dword [eax]
mov dword [ebp - 0x38c], eax
mov eax, dword [0x8420d0]
mov eax, dword [eax]
mov dword [ebp - 4], eax
mov eax, dword [0x84211c]
mov edx, dword [ebp - 0x384]
mov dword [eax], edx
mov eax, dword [0x8420d0]
mov edx, dword [ebp - 0x388]
mov dword [eax], edx
xor eax, eax
push ebp
push 0x6ad2a7
push dword fs:[eax]
mov dword fs:[eax], esp
cmp byte [ebp - 0x321], 0
je 0x6ad267
mov eax, dword [0x84184c]
mov edx, dword [ebp - 0x32c]
call fcn.00403ec8
mov eax, dword [0x8415a0]
mov eax, dword [eax]
mov edx, dword [ebp - 0x32c]
call fcn.00760cc8
push 0x40
lea edx, [ebp - 0x608]
mov eax, 0x6a30f4
call fcn.00405e74
mov eax, dword [ebp - 0x608]
call fcn.004042b4
push eax
lea edx, [ebp - 0x780]
mov eax, 0x6a30fc
call fcn.00405e74
push dword [ebp - 0x780]
push 0x6ad9a4
push 0x6ad9b0
push 0x6ad9a4
push 0x6ad9b0
lea edx, [ebp - 0x7b8]
mov eax, 0x6a3104
call fcn.00405e74
push dword [ebp - 0x7b8]
push 0x6ad9a4
push 0x6ad9b0
push 0x6ad9a4
push 0x6ad9b0
lea edx, [ebp - 0x7bc]
mov eax, 0x6a310c
call fcn.00405e74
push dword [ebp - 0x7bc]
lea eax, [ebp - 0x724]
mov edx, 0xb
call fcn.004041b0
mov eax, dword [ebp - 0x724]
call fcn.004042b4
push eax
mov eax, dword [0x8415a0]
mov eax, dword [eax]
call fcn.00439350
push eax
call sub.USER32.DLL_MessageBoxA
mov eax, dword [0x8417e4]
mov eax, dword [eax]
call fcn.0042d188
mov edx, dword [0x84184c]
mov edx, dword [edx]
mov eax, dword [0x8415a0]
mov eax, dword [eax]
call fcn.00766b2c
jmp 0x6ad279
mov eax, dword [0x8415a0]
mov eax, dword [eax]
mov edx, dword [ebp - 0x32c]
call fcn.00760cc8
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
push 0x6ad2ae
cmp byte [ebp - 0x321], 0
jne 0x6ad2a6
mov eax, dword [0x84211c]
mov edx, dword [ebp - 0x38c]
mov dword [eax], edx
mov eax, dword [0x8420d0]
mov edx, dword [ebp - 4]
mov dword [eax], edx
ret
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
push 0x6ad388
lea eax, [ebp - 0x7bc]
mov edx, 2
call fcn.00403e98
lea eax, [ebp - 0x780]
call fcn.00403e74
lea eax, [ebp - 0x724]
call fcn.00403e74
lea eax, [ebp - 0x608]
call fcn.00403e74
lea eax, [ebp - 0x3d0]
call fcn.00403e74
lea eax, [ebp - 0x398]
mov edx, 2
call fcn.00403e98
lea eax, [ebp - 0x334]
mov edx, 3
call fcn.00403e98
lea eax, [ebp - 0x320]
mov edx, 2
call fcn.00403e98
lea eax, [ebp - 0x308]
mov edx, 2
call fcn.00403e98
lea eax, [ebp - 0x1f8]
mov edx, 3
call fcn.00403e98
lea eax, [ebp - 0x1cc]
mov edx, 3
call fcn.00403e98
lea eax, [ebp - 0x180]
call fcn.00403e74
lea eax, [ebp - 0x164]
mov edx, 2
call fcn.00403e98
lea eax, [ebp - 0x158]
call fcn.00403e74
ret