Function at 0x6a9450
Capabilities:
Resolve function by parsing pe exports

Disassembly:
push ebp
mov ebp, esp
and esp, 0xfffffff8
push 0xffffffffffffffff
push 0x9789df
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
sub esp, 0x948
push ebx
push ebp
push esi
mov ebp, ecx
push edi
push 0
lea ecx, [esp + 0x9c]
call fcn.00735050
mov eax, dword [ebp + 0x339c]
mov edx, dword [ebp + 0x3404]
lea esi, [ebp + 0x339c]
lea ebx, [ebp + 0x3404]
lea ecx, [ebp + 0x3428]
mov dword [esp + 0x960], 0
push ecx
push 0x1002
push eax
mov ecx, ebx
mov dword [esp + 0x94], ebx
call dword [edx + 0x28]
test eax, eax
jne 0x6a94de
push ecx
mov ecx, esp
mov dword [esp + 0x58], esp
push esi
call fcn.0091203e
lea ecx, [esp + 0x9c]
call fcn.007355a0
mov edx, dword [ebx]
push 0
push 0
mov ecx, ebx
call dword [edx + 0x30]
mov eax, dword [ebp + 0x44c]
mov ecx, dword [ebp + 0x448]
push eax
push ecx
mov ecx, ebp
call fcn.008f5ce0
fcomp qword [0x9cb960]
mov edi, 0x3ff00000
fnstsw ax
test ah, 1
je 0x6a9520
mov dword [ebp + 0x448], 0
mov dword [ebp + 0x44c], edi
mov ecx, ebp
xor esi, esi
call fcn.006a6de0
mov dx, word [ebp + 0x3350]
mov word [ebp + 0xb142], dx
mov ax, word [ebp + 0x3354]
mov word [ebp + 0xb144], ax
mov ecx, dword [ebp + 0x3368]
mov dword [ebp + 0xb148], ecx
mov edx, dword [ebp + 0x336c]
mov dword [ebp + 0xb14c], edx
mov eax, dword [ebp + 0x3370]
mov dword [ebp + 0xb1b0], eax
mov ecx, dword [ebp + 0x3374]
mov dword [ebp + 0xb1b4], ecx
mov edx, dword [ebp + 0x3370]
mov eax, dword [ebp + 0x3374]
mov ecx, ebp
mov dword [esp + 0x8c], edx
mov dword [esp + 0x90], eax
call fcn.006a8050
movsx ecx, word [0xa8e7a6]
cmp dword [ebp + 0x3350], ecx
jne 0x6a95bc
mov edx, dword [ebp + 0xb14c]
mov eax, dword [ebp + 0xb148]
push edx
push eax
mov ecx, ebp
call fcn.006a84f0
jmp 0x6a95d1
mov ecx, dword [ebp + 0xb14c]
mov edx, dword [ebp + 0xb148]
push ecx
push edx
mov ecx, ebp
call fcn.006a8110
test eax, eax
mov dword [esp + 0x30], eax
jle 0x6aafd3
lea ecx, [esp + 0x78]
call fcn.00911f0c
lea ecx, [esp + 0x34]
mov byte [esp + 0x960], 1
call fcn.00911f0c
lea ecx, [esp + 0x2c]
mov byte [esp + 0x960], 2
call fcn.00911f0c
lea ecx, [esp + 0x20]
mov byte [esp + 0x960], 3
call fcn.00911f0c
lea ecx, [esp + 0x1c]
mov byte [esp + 0x960], 4
call fcn.00911f0c
lea ecx, [esp + 0x50]
mov byte [esp + 0x960], 5
call fcn.00911f0c
lea ecx, [esp + 0x60]
mov byte [esp + 0x960], 6
call fcn.00911f0c
lea ecx, [esp + 0x74]
mov byte [esp + 0x960], 7
call fcn.00911f0c
movsx eax, word [0xa8e7a6]
mov ecx, dword [ebp + 0x3350]
mov esi, dword [esp + 0x30]
cmp ecx, eax
mov byte [esp + 0x960], 8
mov dword [esp + 0x54], 0
mov dword [esp + 0x58], 0
push esi
mov ecx, ebp
jne 0x6a96b8
call fcn.006a7950
mov ecx, dword [ebp + 0x3344]
push ecx
mov ecx, ebp
call fcn.006a79a0
mov edx, dword [ebp + 0x3344]
mov ecx, ebp
push edx
call fcn.006a79e0
push esi
mov ecx, ebp
call fcn.006a8610
jmp 0x6a96e1
call fcn.006a7880
mov eax, dword [ebp + 0x3344]
mov ecx, ebp
push eax
call fcn.006a78d0
mov ecx, dword [ebp + 0x3344]
push ecx
mov ecx, ebp
call fcn.006a7910
push esi
mov ecx, ebp
call fcn.006a8430
lea edx, [ebp + 0xc6a4]
lea ecx, [esp + 0x50]
push edx
mov dword [esp + 0x3c], eax
call fcn.00911f06
lea eax, [ebp + 0xc709]
lea ecx, [esp + 0x60]
push eax
call fcn.00911f06
mov ecx, dword [esp + 0x50]
mov ebx, dword [0xb20964]
mov byte [ebp + 0xb198], 0
mov ax, word [0xa8e768]
mov word [ebp + 0xb140], ax
lea eax, [ebp + 0xb150]
push 0x3c
push ecx
push eax
call ebx
mov edx, dword [esp + 0x6c]
lea esi, [ebp + 0xb18d]
push 0xa
push edx
push esi
call ebx
fld qword [ebp + 0xd5f0]
fmul qword [ebp + 0x448]
mov ecx, dword [ebp + 0xc69c]
add esp, 0x18
mov dword [ebp + 0xb1a0], ecx
mov ecx, ebp
push 2
fstp qword [ebp + 0xb1b8]
fld qword [ebp + 0xd5f8]
fmul qword [ebp + 0x448]
fstp qword [ebp + 0xb1c0]
fld qword [ebp + 0xd600]
fmul qword [ebp + 0x448]
fstp qword [ebp + 0xb1c8]
fld qword [ebp + 0xd608]
fmul qword [ebp + 0x448]
fstp qword [ebp + 0xb1d0]
mov ax, word [ebp + 0xc682]
fld qword [ebp + 0xd610]
mov word [ebp + 0xb142], ax
mov edx, dword [ebp + 0xb1bc]
fmul qword [ebp + 0x448]
mov eax, dword [ebp + 0xb1b8]
push edx
push eax
fstp qword [ebp + 0xb1e0]
fld qword [ebp + 0xd618]
fmul qword [ebp + 0x448]
fstp qword [ebp + 0xb1e8]
fld qword [ebp + 0xd620]
fmul qword [ebp + 0x448]
fstp qword [ebp + 0xb210]
fld qword [ebp + 0xd628]
fmul qword [ebp + 0x448]
fstp qword [ebp + 0xb1f0]
fld qword [ebp + 0xd630]
fmul qword [ebp + 0x448]
fstp qword [ebp + 0xb1f8]
fld qword [ebp + 0xd638]
fmul qword [ebp + 0x448]
fstp qword [ebp + 0xb200]
fld qword [ebp + 0xd640]
fmul qword [ebp + 0x448]
fstp qword [ebp + 0xb208]
call fcn.006a7f60
fstp qword [ebp + 0xb1b8]
mov ecx, dword [ebp + 0xb1c4]
mov edx, dword [ebp + 0xb1c0]
push 2
push ecx
push edx
mov ecx, ebp
call fcn.006a7f60
fstp qword [ebp + 0xb1c0]
mov eax, dword [ebp + 0xb1cc]
push 2
mov ecx, dword [ebp + 0xb1c8]
push eax
push ecx
mov ecx, ebp
call fcn.006a7f60
fstp qword [ebp + 0xb1c8]
mov edx, dword [ebp + 0xb1d4]
mov eax, dword [ebp + 0xb1d0]
push 2
push edx
push eax
mov ecx, ebp
call fcn.006a7f60
mov ecx, dword [ebp + 0xb1e4]
mov edx, dword [ebp + 0xb1e0]
fstp qword [ebp + 0xb1d0]
push 2
push ecx
push edx
mov ecx, ebp
call fcn.006a7f60
mov eax, dword [ebp + 0xb1f4]
mov ecx, dword [ebp + 0xb1f0]
fstp qword [ebp + 0xb1e0]
push 2
push eax
push ecx
mov ecx, ebp
call fcn.006a7f60
mov edx, dword [ebp + 0xb1fc]
mov eax, dword [ebp + 0xb1f8]
fstp qword [ebp + 0xb1f0]
push 2
push edx
push eax
mov ecx, ebp
call fcn.006a7f60
mov ecx, dword [ebp + 0xb204]
mov edx, dword [ebp + 0xb200]
fstp qword [ebp + 0xb1f8]
push 2
push ecx
push edx
mov ecx, ebp
call fcn.006a7f60
mov eax, dword [ebp + 0xb20c]
mov ecx, dword [ebp + 0xb208]
fstp qword [ebp + 0xb200]
push 2
push eax
push ecx
mov ecx, ebp
call fcn.006a7f60
mov edx, dword [ebp + 0xb1ec]
mov eax, dword [ebp + 0xb1e8]
fstp qword [ebp + 0xb208]
push 2
push edx
push eax
mov ecx, ebp
call fcn.006a7f60
mov ecx, dword [ebp + 0xb214]
mov edx, dword [ebp + 0xb210]
fstp qword [ebp + 0xb1e8]
push 2
push ecx
push edx
mov ecx, ebp
call fcn.006a7f60
mov ax, word [ebp + 0xc71e]
fstp qword [ebp + 0xb210]
cmp ax, 2
jne 0x6a9979
mov word [ebp + 0xb146], 9
jmp 0x6a99d5
cmp ax, 4
jne 0x6a998a
mov word [ebp + 0xb146], 0xa
jmp 0x6a99d5
cmp ax, 5
jne 0x6a999b
mov word [ebp + 0xb146], 0xb
jmp 0x6a99d5
cmp ax, 6
jne 0x6a99ac
mov word [ebp + 0xb146], 0xc
jmp 0x6a99d5
cmp ax, 7
jne 0x6a99bd
mov word [ebp + 0xb146], 0xd
jmp 0x6a99d5
cmp ax, 8
jne 0x6a99cc
mov word [ebp + 0xb146], ax
jmp 0x6a99d5
mov word [ebp + 0xb146], 0
mov al, byte [0xa8e798]
test al, al
jne 0x6a9a03
push esi
nop
call fcn.00b18bb9
mov dword [esp + 0x18], eax
add esp, 4
fild dword [esp + 0x14]
fst qword [ebp + 0x440]
fcomp qword [0x9cb960]
fnstsw ax
test ah, 1
je 0x6a9a13
mov dword [ebp + 0x440], 0
mov dword [ebp + 0x444], edi
mov eax, dword [ebp + 0x100]
test eax, eax
jle 0x6aa70e
cmp eax, dword [ebp + 0x104]
je 0x6aa70e
mov eax, dword [ebp + 0x108]
test eax, eax
jle 0x6aa70e
mov eax, dword [esp + 0x38]
xor esi, esi
test eax, eax
jle 0x6a9aa8
movsx eax, word [0xa8e7a6]
cmp dword [ebp + 0x3350], eax
jne 0x6a9a66
mov ecx, dword [esp + 0x30]
lea edx, [ecx + esi + 1]
mov ecx, ebp
push edx
call fcn.006a7950
jmp 0x6a9a76
mov eax, dword [esp + 0x30]
lea ecx, [eax + esi + 1]
push ecx
mov ecx, ebp
call fcn.006a7880
fld qword [ebp + 0xc688]
call fcn.00912a20
cmp eax, dword [ebp + 0x104]
je 0x6a9a94
mov eax, dword [esp + 0x38]
inc esi
cmp esi, eax
jl 0x6a9a45
jmp 0x6a9aa8
mov edx, dword [ebp + 0xc690]
mov eax, dword [ebp + 0xc694]
mov dword [esp + 0x54], edx
mov dword [esp + 0x58], eax
mov ecx, dword [esp + 0x58]
mov edx, dword [esp + 0x54]
push ecx
push edx
mov ecx, ebp
call fcn.008f5ce0
fcomp qword [0x9cb9a0]
fnstsw ax
test ah, 1
jne 0x6aa6ec
mov eax, dword [ebp + 0x104]
mov ecx, ebp
push eax
call fcn.006a7a20
mov ecx, dword [ebp + 0x104]
push ecx
mov ecx, ebp
call fcn.006a7aa0
mov edx, dword [ebp + 0x104]
mov ecx, ebp
push edx
call fcn.006a7b20
lea esi, [ebp + 0xd668]
lea ecx, [esp + 0x2c]
push esi
call fcn.00911f06
mov eax, dword [ebp + 0x430]
mov ecx, dword [ebp + 0x434]
mov edx, dword [ebp + 0x438]
mov dword [esp + 0x6c], eax
mov eax, dword [ebp + 0x43c]
mov dword [esp + 0x70], ecx
push 0xa77754
push 0xa82f7c
lea ecx, [esp + 0x34]
mov dword [esp + 0x6c], edx
mov dword [esp + 0x70], eax
call fcn.009121a0
push 0xa7775c
push 0xa82f70
lea ecx, [esp + 0x34]
call fcn.009121a0
mov ecx, dword [ebp + 0x100]
push ecx
mov ecx, ebp
call fcn.006a7a20
mov edx, dword [ebp + 0x100]
mov ecx, ebp
push edx
call fcn.006a7aa0
mov eax, dword [ebp + 0x100]
mov ecx, ebp
push eax
call fcn.006a7b20
push esi
lea ecx, [esp + 0x24]
call fcn.00911f06
mov ecx, dword [ebp + 0x430]
mov edx, dword [ebp + 0x434]
mov eax, dword [ebp + 0x438]
mov dword [esp + 0x7c], ecx
mov ecx, dword [ebp + 0x43c]
push 0xa77754
mov dword [esp + 0x44], ecx
push 0xa82f7c
lea ecx, [esp + 0x28]
mov dword [esp + 0x88], edx
mov dword [esp + 0x44], eax
call fcn.009121a0
push 0xa7775c
push 0xa82f70
lea ecx, [esp + 0x28]
call fcn.009121a0
mov edx, dword [esp + 0x40]
mov eax, dword [esp + 0x3c]
push edx
push eax
mov ecx, ebp
call fcn.008f5ce0
fld dword [ebp + 0x70]
fcompp
fnstsw ax
test ah, 0x41
jne 0x6a9c07
mov ecx, dword [esp + 0x7c]
mov edx, dword [esp + 0x80]
mov dword [esp + 0x3c], ecx
mov dword [esp + 0x40], edx
lea eax, [esp + 0x50]
lea ecx, [esp + 0x1c]
push eax
call fcn.00911f3c
mov ecx, dword [esp + 0x50]
mov al, byte [ecx]
cmp al, 0x43
je 0x6aa1ca
cmp al, 0x63
je 0x6aa1ca
cmp al, 0x4d
je 0x6a9eca
cmp al, 0x6d
je 0x6a9eca
mov al, byte [ecx + 1]
cmp al, 0x3a
je 0x6a9d79
cmp al, 0x7c
je 0x6a9d79
lea ecx, [esp + 0x18]
call fcn.00911f0c
lea ecx, [esp + 0x24]
mov byte [esp + 0x960], 0x24
call fcn.00911f0c
lea ecx, [esp + 0x44]
mov byte [esp + 0x960], 0x25
call fcn.00911f0c
lea ecx, [esp + 0x14]
push 8
mov bl, 0x26
push ecx
lea ecx, [esp + 0x34]
mov byte [esp + 0x968], bl
call fcn.00912044
push eax
lea ecx, [esp + 0x1c]
mov byte [esp + 0x964], 0x27
call fcn.00911f3c
lea ecx, [esp + 0x14]
mov byte [esp + 0x960], bl
call fcn.00911ee2
lea edx, [esp + 0x14]
push 8
push edx
lea ecx, [esp + 0x28]
call fcn.00912044
push eax
lea ecx, [esp + 0x28]
mov byte [esp + 0x964], 0x28
call fcn.00911f3c
lea ecx, [esp + 0x14]
mov byte [esp + 0x960], bl
call fcn.00911ee2
mov eax, dword [esp + 0x24]
mov ecx, dword [esp + 0x18]
push eax
push ecx
lea ecx, [esp + 0x24]
call fcn.009121a0
test eax, eax
jne 0x6a9d46
push 0xa77754
push 0xa82f7c
lea ecx, [esp + 0x28]
call fcn.009121a0
lea edx, [esp + 0x1c]
lea eax, [esp + 0x20]
push edx
lea ecx, [esp + 0x18]
push eax
push ecx
call fcn.009121d6
push eax
lea ecx, [esp + 0x20]
mov byte [esp + 0x964], 0x29
call fcn.00911f3c
lea ecx, [esp + 0x14]
mov byte [esp + 0x960], bl
call fcn.00911ee2
lea ecx, [esp + 0x44]
mov byte [esp + 0x960], 0x25
call fcn.00911ee2
lea ecx, [esp + 0x24]
mov byte [esp + 0x960], 0x24
call fcn.00911ee2
mov byte [esp + 0x960], 8
lea ecx, [esp + 0x18]
jmp 0x6aa57a
mov esi, 3
lea ecx, [esp + 0x18]
mov ebx, esi
call fcn.00911f0c
lea ecx, [esp + 0x24]
mov byte [esp + 0x960], 0x1f
call fcn.00911f0c
mov ecx, dword [esp + 0x50]
mov byte [esp + 0x960], 0x20
mov al, byte [ecx + 3]
cmp al, 0x2e
je 0x6a9db5
cmp al, 0x3a
je 0x6a9db5
cmp al, 0x7c
jne 0x6a9dba
mov esi, 5
mov al, byte [ecx + 5]
cmp al, 0x2e
je 0x6a9dc9
cmp al, 0x3a
je 0x6a9dc9
cmp al, 0x7c
jne 0x6a9dcc
add esi, 2
lea edx, [esp + 0x14]
push esi
push edx
lea ecx, [esp + 0x24]
call fcn.00912044
push eax
lea ecx, [esp + 0x1c]
mov byte [esp + 0x964], 0x21
call fcn.00911f3c
lea ecx, [esp + 0x14]
mov byte [esp + 0x960], 0x20
call fcn.00911ee2
mov ecx, dword [esp + 0x20]
mov al, byte [ecx + 3]
cmp al, 0x2e
je 0x6a9e11
cmp al, 0x3a
je 0x6a9e11
cmp al, 0x7c
jne 0x6a9e16
mov ebx, 5
mov al, byte [ecx + 5]
cmp al, 0x2e
je 0x6a9e25
cmp al, 0x3a
je 0x6a9e25
cmp al, 0x7c
jne 0x6a9e28
add ebx, 2
lea eax, [esp + 0x14]
push ebx
push eax
lea ecx, [esp + 0x28]
call fcn.00912044
push eax
lea ecx, [esp + 0x28]
mov byte [esp + 0x964], 0x22
call fcn.00911f3c
lea ecx, [esp + 0x14]
mov byte [esp + 0x960], 0x20
call fcn.00911ee2
mov ecx, dword [esp + 0x24]
mov edx, dword [esp + 0x18]
push ecx
push edx
lea ecx, [esp + 0x24]
call fcn.009121a0
test eax, eax
jne 0x6a9ea8
lea eax, [esp + 0x1c]
lea ecx, [esp + 0x20]
push eax
lea edx, [esp + 0x18]
push ecx
push edx
call fcn.009121d6
push eax
lea ecx, [esp + 0x20]
mov byte [esp + 0x964], 0x23
call fcn.00911f3c
lea ecx, [esp + 0x14]
mov byte [esp + 0x960], 0x20
call fcn.00911ee2
lea ecx, [esp + 0x24]
mov byte [esp + 0x960], 0x1f
call fcn.00911ee2
mov byte [esp + 0x960], 8
lea ecx, [esp + 0x18]
jmp 0x6aa57a
lea ecx, [esp + 0x18]
call fcn.00911f0c
lea ecx, [esp + 0x24]
mov byte [esp + 0x960], 0x16
call fcn.00911f0c
lea eax, [esp + 0x14]
mov bl, 0x17
push 3
push eax
lea ecx, [esp + 0x24]
mov byte [esp + 0x968], bl
call fcn.00912044
push eax
lea ecx, [esp + 0x1c]
mov byte [esp + 0x964], 0x18
call fcn.00911f3c
lea ecx, [esp + 0x14]
mov byte [esp + 0x960], bl
call fcn.00911ee2
mov edi, dword [esp + 0x18]
mov esi, 0xa81410
mov eax, edi
mov dl, byte [eax]
mov cl, dl
cmp dl, byte [esi]
jne 0x6a9f4e
test cl, cl
je 0x6a9f4a
mov dl, byte [eax + 1]
mov cl, dl
cmp dl, byte [esi + 1]
jne 0x6a9f4e
add eax, 2
add esi, 2
test cl, cl
jne 0x6a9f2a
xor eax, eax
jmp 0x6a9f53
sbb eax, eax
sbb eax, 0xffffffff
test eax, eax
je 0x6a9ff2
mov esi, 0xa8140c
mov eax, edi
mov dl, byte [eax]
mov cl, dl
cmp dl, byte [esi]
jne 0x6a9f86
test cl, cl
je 0x6a9f82
mov dl, byte [eax + 1]
mov cl, dl
cmp dl, byte [esi + 1]
jne 0x6a9f86
add eax, 2
add esi, 2
test cl, cl
jne 0x6a9f62
xor eax, eax
jmp 0x6a9f8b
sbb eax, eax
sbb eax, 0xffffffff
test eax, eax
je 0x6a9ff2
mov esi, 0xa81408
mov eax, edi
mov dl, byte [eax]
mov cl, dl
cmp dl, byte [esi]
jne 0x6a9fba
test cl, cl
je 0x6a9fb6
mov dl, byte [eax + 1]
mov cl, dl
cmp dl, byte [esi + 1]
jne 0x6a9fba
add eax, 2
add esi, 2
test cl, cl
jne 0x6a9f96
xor eax, eax
jmp 0x6a9fbf
sbb eax, eax
sbb eax, 0xffffffff
test eax, eax
je 0x6a9ff2
lea eax, [esp + 0x14]
push 8
push eax
lea ecx, [esp + 0x24]
call fcn.00912044
push eax
lea ecx, [esp + 0x1c]
mov byte [esp + 0x964], 0x1a
call fcn.00911f3c
mov byte [esp + 0x960], bl
lea ecx, [esp + 0x14]
jmp 0x6aa01f
lea ecx, [esp + 0x14]
push 7
push ecx
lea ecx, [esp + 0x24]
call fcn.00912044
push eax
lea ecx, [esp + 0x1c]
mov byte [esp + 0x964], 0x19
call fcn.00911f3c
mov byte [esp + 0x960], bl
lea ecx, [esp + 0x14]
call fcn.00911ee2
lea edx, [esp + 0x14]
push 3
push edx
lea ecx, [esp + 0x28]
call fcn.00912044
push eax
lea ecx, [esp + 0x28]
mov byte [esp + 0x964], 0x1b
call fcn.00911f3c
lea ecx, [esp + 0x14]
mov byte [esp + 0x960], bl
call fcn.00911ee2
mov edi, dword [esp + 0x24]
mov esi, 0xa81410
mov eax, edi
mov dl, byte [eax]
mov cl, dl
cmp dl, byte [esi]
jne 0x6aa085
test cl, cl
je 0x6aa081
mov dl, byte [eax + 1]
mov cl, dl
cmp dl, byte [esi + 1]
jne 0x6aa085
add eax, 2
add esi, 2
test cl, cl
jne 0x6aa061
xor eax, eax
jmp 0x6aa08a
sbb eax, eax
sbb eax, 0xffffffff
test eax, eax
je 0x6aa129
mov esi, 0xa8140c
mov eax, edi
mov dl, byte [eax]
mov cl, dl
cmp dl, byte [esi]
jne 0x6aa0bd
test cl, cl
je 0x6aa0b9
mov dl, byte [eax + 1]
mov cl, dl
cmp dl, byte [esi + 1]
jne 0x6aa0bd
add eax, 2
add esi, 2
test cl, cl
jne 0x6aa099
xor eax, eax
jmp 0x6aa0c2
sbb eax, eax
sbb eax, 0xffffffff
test eax, eax
je 0x6aa129
mov esi, 0xa81408
mov eax, edi
mov dl, byte [eax]
mov cl, dl
cmp dl, byte [esi]
jne 0x6aa0f1
test cl, cl
je 0x6aa0ed
mov dl, byte [eax + 1]
mov cl, dl
cmp dl, byte [esi + 1]
jne 0x6aa0f1
add eax, 2
add esi, 2
test cl, cl
jne 0x6aa0cd
xor eax, eax
jmp 0x6aa0f6
sbb eax, eax
sbb eax, 0xffffffff
test eax, eax
je 0x6aa129
lea eax, [esp + 0x14]
push 8
push eax
lea ecx, [esp + 0x28]
call fcn.00912044
push eax
lea ecx, [esp + 0x28]
mov byte [esp + 0x964], 0x1d
call fcn.00911f3c
mov byte [esp + 0x960], bl
lea ecx, [esp + 0x14]
jmp 0x6aa156
lea ecx, [esp + 0x14]
push 7
push ecx
lea ecx, [esp + 0x28]
call fcn.00912044
push eax
lea ecx, [esp + 0x28]
mov byte [esp + 0x964], 0x1c
call fcn.00911f3c
mov byte [esp + 0x960], bl
lea ecx, [esp + 0x14]
call fcn.00911ee2
mov edx, dword [esp + 0x24]
mov eax, dword [esp + 0x18]
push edx
push eax
lea ecx, [esp + 0x24]
call fcn.009121a0
test eax, eax
jne 0x6aa1a8
lea ecx, [esp + 0x1c]
lea edx, [esp + 0x20]
push ecx
lea eax, [esp + 0x18]
push edx
push eax
call fcn.009121d6
push eax
lea ecx, [esp + 0x20]
mov byte [esp + 0x964], 0x1e
call fcn.00911f3c
lea ecx, [esp + 0x14]
mov byte [esp + 0x960], bl
call fcn.00911ee2
lea ecx, [esp + 0x24]
mov byte [esp + 0x960], 0x16
call fcn.00911ee2
mov byte [esp + 0x960], 8
lea ecx, [esp + 0x18]
jmp 0x6aa57a
lea ecx, [esp + 0x24]
call fcn.00911f0c
lea ecx, [esp + 0x18]
mov byte [esp + 0x960], 9
call fcn.00911f0c
lea ecx, [esp + 0x44]
mov byte [esp + 0x960], 0xa
call fcn.00911f0c
lea ecx, [esp + 0x14]
push 8
push ecx
lea ecx, [esp + 0x34]
mov byte [esp + 0x968], 0xb
call fcn.00912044
push eax
lea ecx, [esp + 0x48]
mov byte [esp + 0x964], 0xc
call fcn.00911f3c
lea ecx, [esp + 0x14]
mov byte [esp + 0x960], 0xb
call fcn.00911ee2
mov edi, dword [esp + 0x44]
mov esi, 0xa82f64
mov eax, edi
mov dl, byte [eax]
mov bl, byte [esi]
mov cl, dl
cmp dl, bl
jne 0x6aa263
test cl, cl
je 0x6aa25f
mov dl, byte [eax + 1]
mov bl, byte [esi + 1]
mov cl, dl
cmp dl, bl
jne 0x6aa263
add eax, 2
add esi, 2
test cl, cl
jne 0x6aa23b
xor eax, eax
jmp 0x6aa268
sbb eax, eax
sbb eax, 0xffffffff
test eax, eax
jne 0x6aa370
lea eax, [esp + 0x2c]
lea ecx, [esp + 0x24]
push eax
call fcn.00911f3c
push 0xa907a4
push 0xa82f58
lea ecx, [esp + 0x34]
call fcn.009121a0
lea ecx, [esp + 0x14]
push 3
push ecx
lea ecx, [esp + 0x34]
call fcn.00912044
push eax
lea ecx, [esp + 0x28]
mov byte [esp + 0x964], 0xd
call fcn.00911f3c
lea ecx, [esp + 0x14]
mov byte [esp + 0x960], 0xb
call fcn.00911ee2
push 0xa907a4
push 0xa82f58
lea ecx, [esp + 0x28]
call fcn.009121a0
lea edx, [esp + 0x14]
push 3
push edx
lea ecx, [esp + 0x28]
call fcn.00912044
push eax
lea ecx, [esp + 0x1c]
mov byte [esp + 0x964], 0xe
call fcn.00911f3c
lea ecx, [esp + 0x14]
mov byte [esp + 0x960], 0xb
call fcn.00911ee2
mov eax, dword [esp + 0x18]
mov ecx, dword [esp + 0x24]
push eax
push ecx
lea ecx, [esp + 0x24]
call fcn.009121a0
test eax, eax
jne 0x6aa358
lea edx, [esp + 0x1c]
lea eax, [esp + 0x18]
push edx
lea ecx, [esp + 0x18]
push eax
push ecx
call fcn.009121d6
push eax
lea ecx, [esp + 0x20]
mov byte [esp + 0x964], 0xf
call fcn.00911f3c
mov byte [esp + 0x960], 0xb
lea ecx, [esp + 0x14]
call fcn.00911ee2
push 0xa76eac
push 0xa76eb0
lea ecx, [esp + 0x24]
call fcn.009121a0
jmp 0x6aa54c
mov esi, 0xa82f4c
mov eax, edi
mov dl, byte [eax]
mov bl, byte [esi]
mov cl, dl
cmp dl, bl
jne 0x6aa39f
test cl, cl
je 0x6aa39b
mov dl, byte [eax + 1]
mov bl, byte [esi + 1]
mov cl, dl
cmp dl, bl
jne 0x6aa39f
add eax, 2
add esi, 2
test cl, cl
jne 0x6aa377
xor eax, eax
jmp 0x6aa3a4
sbb eax, eax
sbb eax, 0xffffffff
test eax, eax
jne 0x6aa498
lea eax, [esp + 0x2c]
lea ecx, [esp + 0x24]
push eax
call fcn.00911f3c
push 0xa907a4
push 0xa82f40
lea ecx, [esp + 0x34]
call fcn.009121a0
lea ecx, [esp + 0x14]
push 3
push ecx
lea ecx, [esp + 0x34]
call fcn.00912044
push eax
lea ecx, [esp + 0x28]
mov byte [esp + 0x964], 0x10
call fcn.00911f3c
lea ecx, [esp + 0x14]
mov byte [esp + 0x960], 0xb
call fcn.00911ee2
push 0xa907a4
push 0xa82f40
lea ecx, [esp + 0x28]
call fcn.009121a0
lea edx, [esp + 0x14]
push 3
push edx
lea ecx, [esp + 0x28]
call fcn.00912044
push eax
lea ecx, [esp + 0x1c]
mov byte [esp + 0x964], 0x11
call fcn.00911f3c
lea ecx, [esp + 0x14]
mov byte [esp + 0x960], 0xb
call fcn.00911ee2
mov eax, dword [esp + 0x18]
mov ecx, dword [esp + 0x24]
push eax
push ecx
lea ecx, [esp + 0x24]
call fcn.009121a0
test eax, eax
jne 0x6aa358
lea edx, [esp + 0x1c]
lea eax, [esp + 0x18]
push edx
lea ecx, [esp + 0x18]
push eax
push ecx
call fcn.009121d6
push eax
lea ecx, [esp + 0x20]
mov byte [esp + 0x964], 0x12
call fcn.00911f3c
mov byte [esp + 0x960], 0xb
lea ecx, [esp + 0x14]
jmp 0x6aa353
lea edx, [esp + 0x14]
push 3
push edx
lea ecx, [esp + 0x34]
call fcn.00912044
push eax
lea ecx, [esp + 0x28]
mov byte [esp + 0x964], 0x13
call fcn.00911f3c
lea ecx, [esp + 0x14]
mov byte [esp + 0x960], 0xb
call fcn.00911ee2
lea eax, [esp + 0x14]
push 3
push eax
lea ecx, [esp + 0x28]
call fcn.00912044
push eax
lea ecx, [esp + 0x1c]
mov byte [esp + 0x964], 0x14
call fcn.00911f3c
lea ecx, [esp + 0x14]
mov byte [esp + 0x960], 0xb
call fcn.00911ee2
mov ecx, dword [esp + 0x18]
mov edx, dword [esp + 0x24]
push ecx
push edx
lea ecx, [esp + 0x24]
call fcn.009121a0
test eax, eax
jne 0x6aa54c
lea eax, [esp + 0x1c]
lea ecx, [esp + 0x18]
push eax
lea edx, [esp + 0x18]
push ecx
push edx
call fcn.009121d6
push eax
lea ecx, [esp + 0x20]
mov byte [esp + 0x964], 0x15
call fcn.00911f3c
lea ecx, [esp + 0x14]
mov byte [esp + 0x960], 0xb
call fcn.00911ee2
lea ecx, [esp + 0x44]
mov byte [esp + 0x960], 0xa
call fcn.00911ee2
lea ecx, [esp + 0x18]
mov byte [esp + 0x960], 9
call fcn.00911ee2
mov byte [esp + 0x960], 8
lea ecx, [esp + 0x24]
call fcn.00911ee2
mov eax, dword [esp + 0x1c]
mov esi, dword [0xb20968]
push 0x3c
push eax
lea eax, [ebp + 0xb150]
push eax
call esi
mov ecx, dword [esp + 0x6c]
push 0xa
lea eax, [ebp + 0xb18d]
push ecx
push eax
call esi
fld qword [esp + 0x94]
fsub qword [esp + 0x84]
add esp, 0x18
mov ecx, ebp
push 2
fstp qword [esp + 0x70]
fld qword [esp + 0x70]
fmul qword [esp + 0x58]
sub esp, 8
fmul qword [ebp + 0x448]
fstp qword [esp]
call fcn.006a7f60
fadd qword [ebp + 0xb1b8]
push 2
mov ecx, ebp
sub esp, 8
fstp qword [ebp + 0xb1b8]
fld qword [esp + 0x78]
fmul qword [esp + 0x60]
fmul qword [ebp + 0x448]
fstp qword [esp]
call fcn.006a7f60
fadd qword [ebp + 0xb1c8]
push 2
mov ecx, ebp
sub esp, 8
fstp qword [ebp + 0xb1c8]
fld qword [esp + 0x48]
fsub qword [esp + 0x70]
fstp qword [esp + 0x70]
fld qword [esp + 0x70]
fmul qword [esp + 0x60]
fmul qword [ebp + 0x448]
fstp qword [esp]
call fcn.006a7f60
fadd qword [ebp + 0xb1f0]
push 2
mov ecx, ebp
sub esp, 8
fstp qword [ebp + 0xb1f0]
fld qword [esp + 0x70]
fmul qword [esp + 0x60]
fmul qword [ebp + 0x448]
fstp qword [esp]
call fcn.006a7f60
fadd qword [ebp + 0xb200]
mov edx, dword [ebp + 0xb1bc]
mov eax, dword [ebp + 0xb1b8]
push 2
push edx
push eax
mov ecx, ebp
fstp qword [ebp + 0xb200]
call fcn.006a7f60
mov ecx, dword [ebp + 0xb1f4]
mov edx, dword [ebp + 0xb1f0]
fstp qword [ebp + 0xb1b8]
push 2
push ecx
push edx
mov ecx, ebp
call fcn.006a7f60
mov eax, dword [ebp + 0xb1cc]
mov ecx, dword [ebp + 0xb1c8]
fstp qword [ebp + 0xb1f0]
push 2
push eax
push ecx
mov ecx, ebp
call fcn.006a7f60
mov edx, dword [ebp + 0xb204]
mov eax, dword [ebp + 0xb200]
fstp qword [ebp + 0xb1c8]
push 2
push edx
push eax
mov ecx, ebp
call fcn.006a7f60
mov ecx, dword [ebp + 0x100]
fstp qword [ebp + 0xb200]
mov dword [ebp + 0xb1a0], ecx
jmp 0x6aa6f6
mov dword [ebp + 0xb1a0], 0
lea eax, [ebp + 0xb150]
lea ecx, [ebp + 0xdb70]
push eax
call fcn.00912560
mov ebx, dword [0x9ca7e8]
mov eax, dword [ebp + 0xe0]
test eax, eax
jle 0x6aa9df
cmp eax, 0x7d0
jge 0x6aa9df
shl eax, 6
mov dword [esp + 0x64], 0
mov dword [esp + 0x68], 0
lea edx, [eax + ebp + 0x341c]
lea eax, [esp + 0x14]
push edx
push 0xa76de0
push eax
mov dword [esp + 0x78], 0
mov dword [esp + 0x7c], 0
mov dword [esp + 0x88], 0
mov dword [esp + 0x8c], 0
mov dword [esp + 0x48], 0
mov dword [esp + 0x4c], 0
mov dword [esp + 0x50], 0
mov dword [esp + 0x54], 0
mov dword [esp + 0x30], 0
mov dword [esp + 0x34], 0
call fcn.00912362
push eax
lea ecx, [esp + 0x78]
mov byte [esp + 0x964], 0x2a
call fcn.00911f3c
lea ecx, [esp + 0x14]
mov byte [esp + 0x960], 8
call fcn.00911ee2
lea ecx, [esp + 0x74]
lea ebx, [ebp + 0xb150]
push ecx
lea edx, [esp + 0x58]
push ebx
push edx
call fcn.00912362
push eax
lea ecx, [esp + 0x20]
mov byte [esp + 0x964], 0x2b
call fcn.00911f3c
lea ecx, [esp + 0x54]
mov byte [esp + 0x960], 8
call fcn.00911ee2
mov eax, dword [esp + 0x1c]
push 0x3c
push eax
push ebx
nop
call fcn.00b18bcb
lea edi, [ebp + 0xc709]
or ecx, 0xffffffff
xor eax, eax
add esp, 0xc
repne scasb al, byte es:[edi]
not ecx
sub edi, ecx
mov edx, ecx
mov esi, edi
lea edi, [ebp + 0xb18d]
shr ecx, 2
rep movsd dword es:[edi], dword [esi]
mov ecx, edx
and ecx, 3
rep movsb byte es:[edi], byte [esi]
fld dword [ebp + 0x68]
mov eax, dword [ebp + 0xe0]
shl eax, 6
fcomp qword [eax + ebp + 0x3420]
lea ecx, [eax + ebp]
fnstsw ax
test ah, 1
je 0x6aa866
fld qword [ebp + 0xb1c0]
fmul qword [ecx + 0x3420]
jmp 0x6aa86a
fld qword [esp + 0x64]
fld dword [ebp + 0x68]
fcomp qword [ecx + 0x3428]
fnstsw ax
test ah, 1
je 0x6aa888
fld qword [ecx + 0x3428]
fmul qword [ebp + 0xb1c8]
jmp 0x6aa88c
fld qword [esp + 0x6c]
fld dword [ebp + 0x68]
fcomp qword [ecx + 0x3420]
fnstsw ax
test ah, 1
je 0x6aa8aa
fld qword [ecx + 0x3430]
fmul qword [ebp + 0xb1d0]
jmp 0x6aa8ae
fld qword [esp + 0x7c]
fld st(0)
fsub qword [ebp + 0xb1d0]
fld st(2)
fsub qword [ebp + 0xb1c8]
faddp st(1)
fld st(3)
fsub qword [ebp + 0xb1c0]
faddp st(1)
fadd qword [ebp + 0xb1b8]
fstp qword [ebp + 0xb1b8]
fxch st(2)
fstp qword [ebp + 0xb1c0]
fstp qword [ebp + 0xb1c8]
fstp qword [ebp + 0xb1d0]
fld dword [ebp + 0x68]
fcomp qword [ecx + 0x3420]
fnstsw ax
test ah, 1
je 0x6aa908
fld qword [ecx + 0x3420]
fmul qword [ebp + 0xb1f8]
jmp 0x6aa90c
fld qword [esp + 0x3c]
fld dword [ebp + 0x68]
fcomp qword [ecx + 0x3428]
fnstsw ax
test ah, 1
je 0x6aa92a
fld qword [ebp + 0xb200]
fmul qword [ecx + 0x3428]
jmp 0x6aa92e
fld qword [esp + 0x44]
fld dword [ebp + 0x68]
fcomp qword [ecx + 0x3420]
fnstsw ax
test ah, 1
je 0x6aa94c
fld qword [ecx + 0x3430]
fmul qword [ebp + 0xb208]
jmp 0x6aa950
fld qword [esp + 0x24]
fld st(0)
fsub qword [ebp + 0xb208]
fld st(2)
fsub qword [ebp + 0xb200]
mov ecx, dword [ebp + 0xb1bc]
mov edx, dword [ebp + 0xb1b8]
faddp st(1)
fld st(3)
fsub qword [ebp + 0xb1f8]
push 2
push ecx
push edx
mov ecx, ebp
faddp st(1)
fadd qword [ebp + 0xd628]
fstp qword [ebp + 0xb1f0]
fxch st(2)
fstp qword [ebp + 0xb1f8]
fstp qword [ebp + 0xb200]
fstp qword [ebp + 0xb208]
call fcn.006a7f60
mov eax, dword [ebp + 0xb1f4]
mov ecx, dword [ebp + 0xb1f0]
fstp qword [ebp + 0xb1b8]
push 2
push eax
push ecx
mov ecx, ebp
call fcn.006a7f60
fstp qword [ebp + 0xb1f0]
push ebx
lea ecx, [ebp + 0xdb70]
mov byte [ebp + 0xb198], 1
call fcn.00912560
mov ebx, dword [0xb2096c]
mov edx, dword [ebp + 0x44c]
mov eax, dword [ebp + 0x448]
push edx
push eax
mov ecx, ebp
call fcn.008f5ce0
fcomp qword [0x9cb960]
fnstsw ax
test ah, 0x41
jne 0x6aaa38
mov ecx, dword [ebp + 0x44c]
mov edx, dword [ebp + 0x448]
push ecx
lea esi, [ebp + 0xb150]
push edx
push esi
lea eax, [esp + 0x84]
push str._s_X_1.0f
push eax
call fcn.00911f42
mov ecx, dword [esp + 0x8c]
push 0x3c
push ecx
push esi
call ebx
add esp, 0x20
push 1
mov ecx, ebp
call fcn.006a7f10
mov eax, dword [esp + 0x38]
mov dword [esp + 0x18], 1
test eax, eax
jle 0x6aad94
mov edx, eax
mov dword [esp + 0x24], 0
inc edx
lea edi, [ebp + 0xd668]
mov dword [esp + 0x14], 2
mov dword [esp + 0x18], edx
mov ecx, ebp
call fcn.006a6de0
movsx eax, word [0xa8e7a6]
mov ecx, dword [ebp + 0x3350]
mov edx, dword [esp + 0x24]
cmp ecx, eax
mov ecx, dword [esp + 0x30]
lea eax, [ecx + edx + 1]
mov ecx, ebp
push eax
jne 0x6aaaa0
call fcn.006a7950
jmp 0x6aaaa5
call fcn.006a7880
fld qword [ebp + 0xc688]
call fcn.00912a20
cmp eax, dword [ebp + 0x104]
jne 0x6aaac4
mov ecx, dword [ebp + 0x100]
test ecx, ecx
mov esi, ecx
jg 0x6aaac6
mov esi, eax
mov eax, dword [0xa8e7a0]
mov dword [esp + 0x44], esi
cmp esi, eax
jle 0x6aaaf3
mov ecx, esi
sub ecx, eax
push ecx
mov ecx, ebp
call fcn.006a7a60
mov ecx, dword [0xa8e7a0]
mov edx, esi
sub edx, ecx
mov ecx, ebp
push edx
call fcn.006a7ae0
jmp 0x6aab03
push esi
mov ecx, ebp
call fcn.006a7a20
push esi
mov ecx, ebp
call fcn.006a7aa0
mov eax, dword [0xa8e7a0]
cmp esi, eax
jle 0x6aab18
sub esi, eax
mov ecx, ebp
push esi
call fcn.006a7eb0
jmp 0x6aab20
push esi
mov ecx, ebp
call fcn.006a7b20
mov ecx, dword [ebp + 0x43c]
mov eax, dword [ebp + 0x438]
mov dword [esp + 0x40], ecx
push edi
lea ecx, [esp + 0x38]
mov dword [esp + 0x40], eax
call fcn.00911f06
mov edx, dword [esp + 0x3c]
mov eax, dword [esp + 0x40]
fild dword [esp + 0x44]
mov ecx, dword [esp + 0x34]
mov si, word [ebp + 0xd664]
mov dword [ebp + 0xb1f0], edx
mov dword [ebp + 0xb1f4], eax
fstp qword [ebp + 0xb148]
push 0x3c
lea eax, [ebp + 0xb150]
push ecx
push eax
call ebx
lea eax, [ebp + 0xd6b0]
push 0xa
push eax
lea eax, [ebp + 0xb18d]
push eax
call ebx
fld qword [ebp + 0xc690]
fmul qword [ebp + 0x448]
mov edx, dword [ebp + 0x430]
mov eax, dword [ebp + 0x434]
add esp, 0x18
lea ecx, [esi + 0x11]
mov word [ebp + 0xb146], cx
fstp qword [ebp + 0xb1b0]
mov dword [ebp + 0xb1b8], edx
mov dword [ebp + 0xb1bc], eax
mov eax, dword [ebp + 0xe0]
mov byte [ebp + 0xb198], 0
test eax, eax
jle 0x6aacba
cmp cx, 0x11
jne 0x6aac19
shl eax, 6
sub esp, 8
mov ecx, ebp
fld qword [eax + ebp + 0x3420]
fsub qword [0x9cb960]
fstp qword [esp]
call fcn.008f5ce0
fld dword [ebp + 0x70]
fcompp
fnstsw ax
test ah, 1
je 0x6aacb3
mov ecx, dword [ebp + 0xe0]
shl ecx, 6
fld qword [ecx + ebp + 0x3420]
jmp 0x6aac9e
movsx edx, cx
cmp edx, dword [ebp + 0x94]
jne 0x6aac5f
shl eax, 6
sub esp, 8
mov ecx, ebp
fld qword [eax + ebp + 0x3428]
fsub qword [0x9cb960]
fstp qword [esp]
call fcn.008f5ce0
fld dword [ebp + 0x70]
fcompp
fnstsw ax
test ah, 1
je 0x6aacb3
mov eax, dword [ebp + 0xe0]
shl eax, 6
fld qword [eax + ebp + 0x3428]
jmp 0x6aac9e
cmp cx, 0x13
jne 0x6aacba
shl eax, 6
sub esp, 8
mov ecx, ebp
fld qword [eax + ebp + 0x3430]
fsub qword [0x9cb960]
fstp qword [esp]
call fcn.008f5ce0
fld dword [ebp + 0x70]
fcompp
fnstsw ax
test ah, 1
je 0x6aacb3
mov ecx, dword [ebp + 0xe0]
shl ecx, 6
fld qword [ecx + ebp + 0x3430]
fmul qword [ebp + 0xb1b0]
fstp qword [ebp + 0xb1b0]
mov byte [ebp + 0xb198], 1
jmp 0x6aacba
mov byte [ebp + 0xb198], 0
mov al, byte [0xa8e788]
test al, al
je 0x6aad30
cmp si, 6
jne 0x6aad30
push 0xa76eb0
lea ecx, [esp + 0x38]
call fcn.009121e8
cmp eax, 0xffffffff
jne 0x6aad27
push 0xa76eac
lea ecx, [esp + 0x38]
call fcn.009121e8
cmp eax, 0xffffffff
jne 0x6aad27
cmp byte [0xa8e787], 1
jne 0x6aad30
push 0xa7775c
lea ecx, [esp + 0x38]
call fcn.009121e8
cmp eax, 0xffffffff
jne 0x6aad27
cmp byte [0xa8e787], 1
jne 0x6aad30
push 0xa77754
lea ecx, [esp + 0x38]
call fcn.009121e8
cmp eax, 0xffffffff
je 0x6aad30
mov word [ebp + 0xb146], 0x18
cmp dword [0xa8fd0c], 1
jne 0x6aad6c
nop
call fcn.00b18bdd
cdq
mov ecx, 0x64
idiv ecx
mov eax, 0x66666667
imul edx
sar edx, 2
mov eax, edx
shr eax, 0x1f
add edx, eax
mov dword [esp + 0x44], edx
fild dword [esp + 0x44]
fdivr qword [ebp + 0xb1b0]
fstp qword [ebp + 0xb1b0]
mov esi, dword [esp + 0x14]
mov ecx, ebp
push esi
call fcn.006a7f10
mov eax, dword [esp + 0x24]
mov ecx, dword [esp + 0x38]
inc esi
inc eax
cmp eax, ecx
mov dword [esp + 0x14], esi
mov dword [esp + 0x24], eax
jl 0x6aaa72
mov eax, ecx
xor esi, esi
cmp eax, esi
mov dword [ebp + 0xe0], esi
mov dword [esp + 0x24], esi
jle 0x6aaf40
mov ecx, dword [esp + 0x18]
lea ebx, [ebp + 0xd668]
lea edi, [ecx + 1]
jmp 0x6aadbb
mov esi, dword [esp + 0x24]
mov ecx, ebp
call fcn.006a6de0
movsx edx, word [0xa8e7a6]
cmp dword [ebp + 0x3350], edx
jne 0x6aade3
mov eax, dword [esp + 0x30]
lea ecx, [eax + esi + 1]
push ecx
mov ecx, ebp
call fcn.006a7950
jmp 0x6aadf3
mov edx, dword [esp + 0x30]
mov ecx, ebp
lea eax, [edx + esi + 1]
push eax
call fcn.006a7880
fld qword [ebp + 0xc688]
call fcn.00912a20
mov esi, eax
mov eax, dword [0xa8e7a0]
cmp esi, eax
mov dword [esp + 0x14], esi
jle 0x6aae2d
mov ecx, esi
sub ecx, eax
push ecx
mov ecx, ebp
call fcn.006a7a60
mov ecx, dword [0xa8e7a0]
mov edx, esi
sub edx, ecx
mov ecx, ebp
push edx
call fcn.006a7ae0
jmp 0x6aae3d
push esi
mov ecx, ebp
call fcn.006a7a20
push esi
mov ecx, ebp
call fcn.006a7aa0
push ebx
lea ecx, [esp + 0x38]
call fcn.00911f06
cmp word [ebp + 0xd664], 3
jne 0x6aaf2b
mov eax, dword [0xa8e7a0]
cmp esi, eax
jle 0x6aae6a
sub esi, eax
mov ecx, ebp
push esi
call fcn.006a7eb0
jmp 0x6aae72
push esi
mov ecx, ebp
call fcn.006a7b20
mov ecx, dword [ebp + 0x43c]
mov eax, dword [ebp + 0x438]
mov dword [esp + 0x40], ecx
push ebx
lea ecx, [esp + 0x38]
mov dword [esp + 0x40], eax
call fcn.00911f06
mov edx, dword [esp + 0x3c]
mov eax, dword [esp + 0x40]
fild dword [esp + 0x14]
mov ecx, dword [esp + 0x34]
mov esi, dword [0xb20970]
mov dword [ebp + 0xb1f0], edx
mov dword [ebp + 0xb1f4], eax
fstp qword [ebp + 0xb148]
push 0x3c
lea eax, [ebp + 0xb150]
push ecx
push eax
call esi
lea edx, [ebp + 0xd6b0]
push 0xa
lea eax, [ebp + 0xb18d]
push edx
push eax
call esi
fld qword [esp + 0xa4]
fmul qword [ebp + 0xc690]
mov eax, dword [ebp + 0x430]
mov ecx, dword [ebp + 0x434]
add esp, 0x18
mov word [ebp + 0xb146], 3
fmul qword [ebp + 0x448]
push edi
fdiv qword [ebp + 0x440]
fstp qword [ebp + 0xb1b0]
mov dword [ebp + 0xb1b8], eax
mov dword [ebp + 0xb1bc], ecx
mov ecx, ebp
call fcn.006a7f10
mov ecx, dword [esp + 0x18]
inc ecx
inc edi
mov dword [esp + 0x18], ecx
mov eax, dword [esp + 0x24]
mov ecx, dword [esp + 0x38]
inc eax
cmp eax, ecx
mov dword [esp + 0x24], eax
jl 0x6aadb7
lea ecx, [esp + 0x74]
mov byte [esp + 0x960], 7
call fcn.00911ee2
lea ecx, [esp + 0x60]
mov byte [esp + 0x960], 6
call fcn.00911ee2
lea ecx, [esp + 0x50]
mov byte [esp + 0x960], 5
call fcn.00911ee2
lea ecx, [esp + 0x1c]
mov byte [esp + 0x960], 4
call fcn.00911ee2
lea ecx, [esp + 0x20]
mov byte [esp + 0x960], 3
call fcn.00911ee2
lea ecx, [esp + 0x2c]
mov byte [esp + 0x960], 2
call fcn.00911ee2
lea ecx, [esp + 0x34]
mov byte [esp + 0x960], 1
call fcn.00911ee2
lea ecx, [esp + 0x78]
mov byte [esp + 0x960], 0
call fcn.00911ee2
mov ebx, dword [esp + 0x88]
mov esi, dword [esp + 0x18]
mov ecx, ebp
call fcn.006a6de0
push 0
mov ecx, ebp
mov dword [ebp + 0xb1a0], esi
call fcn.006a7f10
mov edx, dword [ebx]
mov ecx, ebx
call dword [edx + 0x54]
push fcn.00911ee2
push 0x12d
lea eax, [esp + 0x104]
push 4
push eax
mov dword [esp + 0x970], 0x2c
call fcn.009128f2
lea ecx, [esp + 0x98]
mov dword [esp + 0x960], 0xffffffff
call fcn.00911f36
mov ecx, dword [esp + 0x958]
pop edi
mov dword fs:[0], ecx
pop esi
pop ebp
pop ebx
mov esp, ebp
pop ebp
ret