Function at 0x5dd23f
Capabilities:
Encode data using base64
Parse pe header
Resolve function by parsing pe exports
Validate payment card number using luhn algorithm

Disassembly:
jmp 0x8cdef0
push ebx
mov ebx, esp
sub esp, 8
and esp, 0xfffffff8
add esp, 4
push ebp
mov ebp, dword [ebx + 4]
mov dword [esp + 4], ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x9a6836
mov eax, dword fs:[0]
push eax
push ebx
mov eax, 0x1a70
call fcn.005de0e5
push esi
push edi
push ecx
lea edi, [ebp - 0x1480]
mov ecx, 0x51c
mov eax, 0xcccccccc
rep stosd dword es:[edi], eax
pop ecx
mov eax, dword [0x9fc300]
xor eax, ebp
mov dword [ebp - 0x14], eax
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov dword [ebp - 0x1c], ecx
mov ecx, 0x27a702a
call fcn.005e2d5c
mov eax, dword [ebp - 0x1c]
cmp dword [eax + 0x1d4], 0
je 0x8cdf67
jmp 0x8d9d49
mov eax, dword [0xc62eb8]
mov dword [ebp - 0x28], eax
mov eax, dword [ebp - 0x1c]
movsx ecx, byte [eax + 0xa41]
cmp ecx, 1
jne 0x8cdfa0
mov eax, dword [0xc62eb8]
mov ecx, dword [eax + 0x4c]
cmp ecx, dword [ebp - 0x1c]
je 0x8cdfa0
mov eax, dword [ebp - 0x1c]
mov ecx, dword [eax + 0x76c]
push ecx
mov ecx, dword [0xc62ea4]
call fcn.005df792
mov eax, dword [ebp - 0x1c]
movsx ecx, byte [eax + 0xa59]
test ecx, ecx
jne 0x8cdfc1
mov eax, dword [ebp - 0x1c]
movsx ecx, byte [eax + 0xa41]
cmp ecx, 1
jne 0x8ce566
mov eax, dword [ebp - 0x1c]
cmp dword [eax + 0x71c], 0
je 0x8cdfdd
mov eax, dword [ebp - 0x1c]
mov ecx, dword [eax + 0x71c]
mov dword [ecx + 0x24], 0
mov eax, dword [ebp - 0x1c]
cmp dword [eax + 0x720], 0
je 0x8cdff9
mov eax, dword [ebp - 0x1c]
mov ecx, dword [eax + 0x720]
mov dword [ecx + 0x24], 0
mov eax, dword [ebp - 0x1c]
cmp dword [eax + 0x724], 0
je 0x8ce015
mov eax, dword [ebp - 0x1c]
mov ecx, dword [eax + 0x724]
mov dword [ecx + 0x24], 0
mov eax, dword [ebp - 0x1c]
cmp dword [eax + 0x714], 0
je 0x8ce031
mov eax, dword [ebp - 0x1c]
mov ecx, dword [eax + 0x714]
mov dword [ecx + 0x24], 0
mov eax, dword [ebp - 0x1c]
cmp dword [eax + 0x718], 0
je 0x8ce04d
mov eax, dword [ebp - 0x1c]
mov ecx, dword [eax + 0x718]
mov dword [ecx + 0x24], 0
mov eax, 4
imul ecx, eax, 0
mov edx, dword [ebp - 0x1c]
cmp dword [edx + ecx + 0x728], 0
je 0x8ce07b
mov eax, 4
imul ecx, eax, 0
mov edx, dword [ebp - 0x1c]
mov eax, dword [edx + ecx + 0x728]
mov dword [eax + 0x24], 0
mov eax, 4
shl eax, 0
mov ecx, dword [ebp - 0x1c]
cmp dword [ecx + eax + 0x728], 0
je 0x8ce0a9
mov eax, 4
shl eax, 0
mov ecx, dword [ebp - 0x1c]
mov edx, dword [ecx + eax + 0x728]
mov dword [edx + 0x24], 0
mov eax, dword [ebp - 0x1c]
cmp dword [eax + 0x738], 0
je 0x8ce0c5
mov eax, dword [ebp - 0x1c]
mov ecx, dword [eax + 0x738]
mov dword [ecx + 0x24], 0
mov eax, dword [ebp - 0x1c]
cmp dword [eax + 0x73c], 0
je 0x8ce0e1
mov eax, dword [ebp - 0x1c]
mov ecx, dword [eax + 0x73c]
mov dword [ecx + 0x24], 0
mov eax, dword [ebp - 0x1c]
cmp dword [eax + 0x740], 0
je 0x8ce0fd
mov eax, dword [ebp - 0x1c]
mov ecx, dword [eax + 0x740]
mov dword [ecx + 0x24], 0
mov eax, dword [ebp - 0x1c]
cmp dword [eax + 0x744], 0
je 0x8ce119
mov eax, dword [ebp - 0x1c]
mov ecx, dword [eax + 0x744]
mov dword [ecx + 0x24], 0
mov eax, dword [ebp - 0x1c]
cmp dword [eax + 0x748], 0
je 0x8ce135
mov eax, dword [ebp - 0x1c]
mov ecx, dword [eax + 0x748]
mov dword [ecx + 0x24], 0
mov eax, dword [ebp - 0x1c]
cmp dword [eax + 0x74c], 0
je 0x8ce151
mov eax, dword [ebp - 0x1c]
mov ecx, dword [eax + 0x74c]
mov dword [ecx + 0x24], 0
mov eax, dword [ebp - 0x1c]
cmp dword [eax + 0x750], 0
je 0x8ce16d
mov eax, dword [ebp - 0x1c]
mov ecx, dword [eax + 0x750]
mov dword [ecx + 0x24], 0
mov eax, dword [ebp - 0x1c]
cmp dword [eax + 0x754], 0
je 0x8ce189
mov eax, dword [ebp - 0x1c]
mov ecx, dword [eax + 0x754]
mov dword [ecx + 0x24], 0
mov eax, dword [ebp - 0x1c]
cmp dword [eax + 0x758], 0
je 0x8ce1a5
mov eax, dword [ebp - 0x1c]
mov ecx, dword [eax + 0x758]
mov dword [ecx + 0x24], 0
mov eax, dword [ebp - 0x1c]
cmp dword [eax + 0x75c], 0
je 0x8ce1c1
mov eax, dword [ebp - 0x1c]
mov ecx, dword [eax + 0x75c]
mov dword [ecx + 0x24], 0
mov eax, 4
imul ecx, eax, 0
mov edx, dword [ebp - 0x1c]
cmp dword [edx + ecx + 0x760], 0
je 0x8ce20e
mov eax, 4
imul ecx, eax, 0
mov edx, dword [ebp - 0x1c]
mov eax, dword [edx + ecx + 0x760]
mov ecx, dword [eax + 0x80]
mov dword [ecx + 0x24], 0
mov eax, 4
imul ecx, eax, 0
mov edx, dword [ebp - 0x1c]
mov eax, dword [edx + ecx + 0x760]
mov dword [eax + 0x24], 0
mov eax, 4
shl eax, 0
mov ecx, dword [ebp - 0x1c]
cmp dword [ecx + eax + 0x760], 0
je 0x8ce25b
mov eax, 4
shl eax, 0
mov ecx, dword [ebp - 0x1c]
mov edx, dword [ecx + eax + 0x760]
mov eax, dword [edx + 0x80]
mov dword [eax + 0x24], 0
mov eax, 4
shl eax, 0
mov ecx, dword [ebp - 0x1c]
mov edx, dword [ecx + eax + 0x760]
mov dword [edx + 0x24], 0
mov eax, dword [ebp - 0x1c]
cmp dword [eax + 0x768], 0
je 0x8ce277
mov eax, dword [ebp - 0x1c]
mov ecx, dword [eax + 0x768]
mov dword [ecx + 0x48], 0
mov eax, dword [ebp - 0x1c]
cmp dword [eax + 0x76c], 0
je 0x8ce293
mov eax, dword [ebp - 0x1c]
mov ecx, dword [eax + 0x76c]
mov dword [ecx + 0x48], 0
mov dword [ebp - 0x34], 0
jmp 0x8ce2a5
mov eax, dword [ebp - 0x34]
add eax, 1
mov dword [ebp - 0x34], eax
cmp dword [ebp - 0x34], 7
jge 0x8ce319
mov eax, dword [ebp - 0x34]
mov ecx, dword [ebp - 0x1c]
cmp dword [ecx + eax*4 + 0x778], 0
je 0x8ce2cf
mov eax, dword [ebp - 0x34]
mov ecx, dword [ebp - 0x1c]
mov edx, dword [ecx + eax*4 + 0x778]
mov dword [edx + 0x24], 0
mov eax, dword [ebp - 0x34]
mov ecx, dword [ebp - 0x1c]
cmp dword [ecx + eax*4 + 0x794], 0
je 0x8ce2f3
mov eax, dword [ebp - 0x34]
mov ecx, dword [ebp - 0x1c]
mov edx, dword [ecx + eax*4 + 0x794]
mov dword [edx + 0x24], 0
mov eax, dword [ebp - 0x34]
mov ecx, dword [ebp - 0x1c]
cmp dword [ecx + eax*4 + 0x7b0], 0
je 0x8ce317
mov eax, dword [ebp - 0x34]
mov ecx, dword [ebp - 0x1c]
mov edx, dword [ecx + eax*4 + 0x7b0]
mov dword [edx + 0x24], 0
jmp 0x8ce29c
mov dword [ebp - 0x40], 0
jmp 0x8ce32b
mov eax, dword [ebp - 0x40]
add eax, 1
mov dword [ebp - 0x40], eax
cmp dword [ebp - 0x40], 4
jge 0x8ce357
mov eax, dword [ebp - 0x40]
mov ecx, dword [ebp - 0x1c]
cmp dword [ecx + eax*4 + 0x7cc], 0
je 0x8ce355
mov eax, dword [ebp - 0x40]
mov ecx, dword [ebp - 0x1c]
mov edx, dword [ecx + eax*4 + 0x7cc]
mov dword [edx + 0x48], 0
jmp 0x8ce322
mov dword [ebp - 0x4c], 0
jmp 0x8ce369
mov eax, dword [ebp - 0x4c]
add eax, 1
mov dword [ebp - 0x4c], eax
cmp dword [ebp - 0x4c], 5
jge 0x8ce395
mov eax, dword [ebp - 0x4c]
mov ecx, dword [ebp - 0x1c]
cmp dword [ecx + eax*4 + 0x7dc], 0
je 0x8ce393
mov eax, dword [ebp - 0x4c]
mov ecx, dword [ebp - 0x1c]
mov edx, dword [ecx + eax*4 + 0x7dc]
mov dword [edx + 0x24], 0
jmp 0x8ce360
mov eax, dword [ebp - 0x1c]
mov ecx, dword [eax + 0x60]
mov edx, 4
imul eax, edx, 0
cmp dword [ecx + eax + 0x2f8], 0
je 0x8ce47b
mov eax, dword [ebp - 0x1c]
mov ecx, dword [eax + 0x60]
mov edx, 4
imul eax, edx, 0
mov ecx, dword [ecx + eax + 0x2f8]
mov dword [ecx + 0x2900], 0
mov eax, dword [ebp - 0x1c]
mov ecx, dword [eax + 0x60]
mov edx, 4
imul eax, edx, 0
mov ecx, dword [ecx + eax + 0x2f8]
mov byte [ecx + 0x28f0], 0
mov eax, dword [ebp - 0x1c]
mov ecx, dword [eax + 0x60]
mov edx, 4
imul eax, edx, 0
mov ecx, dword [ecx + eax + 0x2f8]
mov byte [ecx + 0x28f8], 0
mov eax, dword [ebp - 0x1c]
mov ecx, dword [eax + 0x60]
mov edx, 4
imul eax, edx, 0
mov ecx, dword [ecx + eax + 0x2f8]
mov byte [ecx + 0x28f1], 0
mov eax, dword [ebp - 0x1c]
mov ecx, dword [eax + 0x60]
mov edx, 4
imul eax, edx, 0
mov ecx, dword [ecx + eax + 0x2f8]
mov byte [ecx + 0x28fa], 0
mov eax, dword [ebp - 0x1c]
mov ecx, dword [eax + 0x60]
mov edx, 4
imul eax, edx, 0
mov ecx, dword [ecx + eax + 0x2f8]
mov dword [ecx + 0x28f4], 0
mov eax, dword [ebp - 0x1c]
mov ecx, dword [eax + 0x60]
mov edx, 4
imul eax, edx, 0
mov ecx, dword [ecx + eax + 0x2f8]
mov byte [ecx + 0x28f9], 0
mov eax, dword [ebp - 0x1c]
mov ecx, dword [eax + 0x60]
mov edx, 4
shl edx, 0
cmp dword [ecx + edx + 0x2f8], 0
je 0x8ce561
mov eax, dword [ebp - 0x1c]
mov ecx, dword [eax + 0x60]
mov edx, 4
shl edx, 0
mov eax, dword [ecx + edx + 0x2f8]
mov dword [eax + 0x2900], 0
mov eax, dword [ebp - 0x1c]
mov ecx, dword [eax + 0x60]
mov edx, 4
shl edx, 0
mov eax, dword [ecx + edx + 0x2f8]
mov byte [eax + 0x28f0], 0
mov eax, dword [ebp - 0x1c]
mov ecx, dword [eax + 0x60]
mov edx, 4
shl edx, 0
mov eax, dword [ecx + edx + 0x2f8]
mov byte [eax + 0x28f8], 0
mov eax, dword [ebp - 0x1c]
mov ecx, dword [eax + 0x60]
mov edx, 4
shl edx, 0
mov eax, dword [ecx + edx + 0x2f8]
mov byte [eax + 0x28f1], 0
mov eax, dword [ebp - 0x1c]
mov ecx, dword [eax + 0x60]
mov edx, 4
shl edx, 0
mov eax, dword [ecx + edx + 0x2f8]
mov byte [eax + 0x28fa], 0
mov eax, dword [ebp - 0x1c]
mov ecx, dword [eax + 0x60]
mov edx, 4
shl edx, 0
mov eax, dword [ecx + edx + 0x2f8]
mov dword [eax + 0x28f4], 0
mov eax, dword [ebp - 0x1c]
mov ecx, dword [eax + 0x60]
mov edx, 4
shl edx, 0
mov eax, dword [ecx + edx + 0x2f8]
mov byte [eax + 0x28f9], 0
jmp 0x8d9d49
cmp dword [0xc6aff4], 1
je 0x8ce57c
cmp dword [0xc6aff8], 1
jne 0x8ce86e
mov eax, dword [ebp - 0x1c]
cmp dword [eax + 0x738], 0
je 0x8ce598
mov eax, dword [ebp - 0x1c]
mov ecx, dword [eax + 0x738]
mov dword [ecx + 0x24], 0
mov eax, dword [ebp - 0x1c]
cmp dword [eax + 0x714], 0
je 0x8ce5b4
mov eax, dword [ebp - 0x1c]
mov ecx, dword [eax + 0x714]
mov dword [ecx + 0x24], 0
mov eax, dword [ebp - 0x1c]
cmp dword [eax + 0x718], 0
je 0x8ce5d0
mov eax, dword [ebp - 0x1c]
mov ecx, dword [eax + 0x718]
mov dword [ecx + 0x24], 0
mov eax, dword [ebp - 0x1c]
cmp dword [eax + 0x720], 0
je 0x8ce5ec
mov eax, dword [ebp - 0x1c]
mov ecx, dword [eax + 0x720]
mov dword [ecx + 0x24], 0
mov eax, dword [ebp - 0x1c]
cmp dword [eax + 0x75c], 0
je 0x8ce608
mov eax, dword [ebp - 0x1c]
mov ecx, dword [eax + 0x75c]
mov dword [ecx + 0x24], 0
mov eax, 4
imul ecx, eax, 0
mov edx, dword [ebp - 0x1c]
cmp dword [edx + ecx + 0x728], 0
je 0x8ce636
mov eax, 4
imul ecx, eax, 0
mov edx, dword [ebp - 0x1c]
mov eax, dword [edx + ecx + 0x728]
mov dword [eax + 0x24], 0
mov eax, 4
shl eax, 0
mov ecx, dword [ebp - 0x1c]
cmp dword [ecx + eax + 0x728], 0
je 0x8ce664
mov eax, 4
shl eax, 0
mov ecx, dword [ebp - 0x1c]
mov edx, dword [ecx + eax + 0x728]
mov dword [edx + 0x24], 0
mov eax, dword [ebp - 0x1c]
cmp dword [eax + 0x73c], 0
je 0x8ce680
mov eax, dword [ebp - 0x1c]
mov ecx, dword [eax + 0x73c]
mov dword [ecx + 0x24], 0
mov eax, dword [ebp - 0x1c]
cmp dword [eax + 0x758], 0
je 0x8ce69c
mov eax, dword [ebp - 0x1c]
mov ecx, dword [eax + 0x758]
mov dword [ecx + 0x24], 0
mov eax, dword [ebp - 0x1c]
cmp dword [eax + 0x768], 0
je 0x8ce6b8
mov eax, dword [ebp - 0x1c]
mov ecx, dword [eax + 0x768]
mov dword [ecx + 0x48], 0
mov eax, 4
imul ecx, eax, 0
mov edx, dword [ebp - 0x1c]
cmp dword [edx + ecx + 0x760], 0
je 0x8ce6e6
mov eax, 4
imul ecx, eax, 0
mov edx, dword [ebp - 0x1c]
mov eax, dword [edx + ecx + 0x760]
mov dword [eax + 0x24], 0
mov eax, 4
shl eax, 0
mov ecx, dword [ebp - 0x1c]
cmp dword [ecx + eax + 0x760], 0
je 0x8ce714
mov eax, 4
shl eax, 0
mov ecx, dword [ebp - 0x1c]
mov edx, dword [ecx + eax + 0x760]
mov dword [edx + 0x24], 0
mov dword [ebp - 0x58], 0
jmp 0x8ce726
mov eax, dword [ebp - 0x58]
add eax, 1
mov dword [ebp - 0x58], eax
cmp dword [ebp - 0x58], 4
jge 0x8ce752
mov eax, dword [ebp - 0x58]
mov ecx, dword [ebp - 0x1c]
cmp dword [ecx + eax*4 + 0x7cc], 0
je 0x8ce750
mov eax, dword [ebp - 0x58]
mov ecx, dword [ebp - 0x1c]
mov edx, dword [ecx + eax*4 + 0x7cc]
mov dword [edx + 0x48], 0
jmp 0x8ce71d
mov eax, dword [ebp - 0x1c]
mov ecx, dword [eax + 0x60]
mov edx, 4
imul eax, edx, 0
cmp dword [ecx + eax + 0x2f8], 0
je 0x8ce7e0
mov eax, dword [ebp - 0x1c]
mov ecx, dword [eax + 0x60]
mov edx, 4
imul eax, edx, 0
mov ecx, dword [ecx + eax + 0x2f8]
mov dword [ecx + 0x2900], 0
mov eax, dword [ebp - 0x1c]
mov ecx, dword [eax + 0x60]
mov edx, 4
imul eax, edx, 0
mov ecx, dword [ecx + eax + 0x2f8]
mov byte [ecx + 0x28fa], 0
mov eax, dword [ebp - 0x1c]
mov ecx, dword [eax + 0x60]
mov edx, 4
imul eax, edx, 0
mov ecx, dword [ecx + eax + 0x2f8]
mov dword [ecx + 0x28f4], 0
mov eax, dword [ebp - 0x1c]
mov ecx, dword [eax + 0x60]
mov edx, 4
imul eax, edx, 0
mov ecx, dword [ecx + eax + 0x2f8]
mov byte [ecx + 0x28f9], 0
mov eax, dword [ebp - 0x1c]
mov ecx, dword [eax + 0x60]
mov edx, 4
shl edx, 0
cmp dword [ecx + edx + 0x2f8], 0
je 0x8ce86e
mov eax, dword [ebp - 0x1c]
mov ecx, dword [eax + 0x60]
mov edx, 4
shl edx, 0
mov eax, dword [ecx + edx + 0x2f8]
mov dword [eax + 0x2900], 0
mov eax, dword [ebp - 0x1c]
mov ecx, dword [eax + 0x60]
mov edx, 4
shl edx, 0
mov eax, dword [ecx + edx + 0x2f8]
mov byte [eax + 0x28fa], 0
mov eax, dword [ebp - 0x1c]
mov ecx, dword [eax + 0x60]
mov edx, 4
shl edx, 0
mov eax, dword [ecx + edx + 0x2f8]
mov dword [eax + 0x28f4], 0
mov eax, dword [ebp - 0x1c]
mov ecx, dword [eax + 0x60]
mov edx, 4
shl edx, 0
mov eax, dword [ecx + edx + 0x2f8]
mov byte [eax + 0x28f9], 0
mov eax, dword [ebp - 0x1c]
cmp dword [eax + 0x6bc], 0
je 0x8d5139
mov eax, dword [ebp - 0x1c]
mov ecx, dword [ebx + 8]
cmp ecx, dword [eax + 0x6bc]
jbe 0x8d5139
mov eax, dword [ebp - 0x1c]
mov ecx, dword [ebp - 0x1c]
movss xmm0, dword [eax + 0x6c8]
subss xmm0, dword [ecx + 0x2c]
push ecx
movss dword [esp], xmm0
mov edx, dword [ebp - 0x1c]
mov eax, dword [ebp - 0x1c]
movss xmm0, dword [edx + 0x6c0]
subss xmm0, dword [eax + 0x28]
push ecx
movss dword [esp], xmm0
call fcn.005ddf7d
add esp, 8
fstp dword [ebp - 0x1a74]
movss xmm0, dword [ebp - 0x1a74]
addss xmm0, dword [0x9b4704]
movss dword [ebp - 0x64], xmm0
mov eax, dword [ebp - 0x1c]
cmp dword [eax + 0x6cc], 0
je 0x8ce8fc
mov eax, dword [0xc62eb8]
cmp dword [eax + 0x4c], 0
jne 0x8ce90a
xor eax, eax
mov ecx, dword [ebp - 0x1c]
mov word [ecx + 0x6d0], ax
jmp 0x8ce961
mov eax, dword [ebp - 0x1c]
mov ecx, dword [eax + 0x6cc]
cvttss2si edx, dword [ecx + 0x2c]
push edx
mov eax, dword [ebp - 0x1c]
mov ecx, dword [eax + 0x6cc]
cvttss2si edx, dword [ecx + 0x28]
push edx
mov eax, dword [0xc62eb8]
mov ecx, dword [eax + 0x4c]
cvttss2si edx, dword [ecx + 0x2c]
push edx
mov eax, dword [0xc62eb8]
mov ecx, dword [eax + 0x4c]
cvttss2si edx, dword [ecx + 0x28]
push edx
call fcn.005e2a05
add esp, 0x10
mov dword [ebp - 0x70], eax
cmp dword [ebp - 0x70], 0x14
jle 0x8ce961
xor eax, eax
mov ecx, dword [ebp - 0x1c]
mov word [ecx + 0x6d0], ax
mov eax, dword [ebp - 0x1c]
movsx ecx, word [eax + 0x6d0]
cmp ecx, 0xf8
jge 0x8ce9df
mov eax, dword [ebp - 0x1c]
movsx ecx, word [eax + 0x6d0]
mov edx, dword [ebp - 0x28]
cmp dword [edx + ecx*4 + 0x8bfcc], 0
je 0x8ce9a9
mov eax, dword [ebp - 0x1c]
movsx ecx, word [eax + 0x6d0]
mov edx, dword [ebp - 0x28]
mov eax, dword [ebp - 0x1c]
mov ecx, dword [edx + ecx*4 + 0x8bfcc]
cmp ecx, dword [eax + 0x6bc]
jb 0x8ce9c2
mov eax, dword [ebp - 0x1c]
movsx ecx, word [eax + 0x6d0]
mov edx, dword [ebp - 0x28]
mov eax, dword [ebx + 8]
mov dword [edx + ecx*4 + 0x8bfcc], eax
jmp 0x8ce9df
mov eax, dword [ebp - 0x1c]
movsx ecx, word [eax + 0x6d0]
mov edx, dword [ebp - 0x1c]
mov eax, dword [ebp - 0x28]
mov ecx, dword [eax + ecx*4 + 0x8bfcc]
mov dword [edx + 0x6bc], ecx
mov eax, dword [ebp - 0x1c]
movsx ecx, word [eax + 0x6d0]
test ecx, ecx
jl 0x8ce9fc
mov eax, dword [ebp - 0x1c]
movsx ecx, word [eax + 0x6d0]
cmp ecx, 0x60
jl 0x8cea42
mov eax, dword [ebp - 0x1c]
movsx ecx, word [eax + 0x6d0]
cmp ecx, 0x97
jl 0x8cea20
mov eax, dword [ebp - 0x1c]
movsx ecx, word [eax + 0x6d0]
cmp ecx, 0x99
jle 0x8cea42
mov eax, dword [ebp - 0x1c]
movsx ecx, word [eax + 0x6d0]
cmp ecx, 0x68
je 0x8cea42
mov eax, dword [ebp - 0x1c]
movsx ecx, word [eax + 0x6d0]
cmp ecx, 0x69
jne 0x8d50ae
mov eax, dword [ebp - 0x1c]
movss xmm0, dword [eax + 0x30]
addss xmm0, dword [0x9b04e0]
mov ecx, dword [ebp - 0x1c]
push ecx
movss xmm1, dword [ecx + 0x2c]
movss dword [esp], xmm1
push ecx
movss dword [esp], xmm0
mov edx, dword [ebp - 0x1c]
push ecx
movss xmm0, dword [edx + 0x28]
movss dword [esp], xmm0
lea ecx, [ebp - 0x84]
call fcn.005e0ce6
mov eax, dword [ebp - 0x1c]
push ecx
movss xmm0, dword [eax + 0x6c8]
movss dword [esp], xmm0
mov ecx, dword [ebp - 0x1c]
push ecx
movss xmm0, dword [ecx + 0x6c4]
movss dword [esp], xmm0
mov edx, dword [ebp - 0x1c]
push ecx
movss xmm0, dword [edx + 0x6c0]
movss dword [esp], xmm0
lea ecx, [ebp - 0x98]
call fcn.005e0ce6
mov eax, dword [ebp - 0x1c]
movsx ecx, word [eax + 0x6d0]
cmp ecx, 0x10
jne 0x8cebe0
mov eax, dword [ebp - 0x1c]
mov ecx, dword [eax + 0x6cc]
mov edx, dword [ebp - 0x1c]
movss xmm0, dword [edx + 0x28]
ucomiss xmm0, dword [ecx + 0x28]
lahf
test ah, 0x44
jp 0x8cebdb
mov eax, dword [ebp - 0x1c]
mov ecx, dword [eax + 0x6cc]
mov edx, dword [ebp - 0x1c]
movss xmm0, dword [edx + 0x2c]
ucomiss xmm0, dword [ecx + 0x2c]
lahf
test ah, 0x44
jp 0x8cebdb
push 0xac
call fcn.005de946
add esp, 4
mov dword [ebp - 0xdd0], eax
mov dword [ebp - 4], 0
cmp dword [ebp - 0xdd0], 0
je 0x8ceb92
push 0xac
mov ecx, dword [ebp - 0xdd0]
call fcn.005e3f13
mov eax, dword [ebp - 0x1c]
mov ecx, dword [eax + 0x6cc]
push ecx
push 0
sub esp, 0xc
mov edx, esp
mov eax, dword [ebp - 0x84]
mov dword [edx], eax
mov ecx, dword [ebp - 0x80]
mov dword [edx + 4], ecx
mov eax, dword [ebp - 0x7c]
mov dword [edx + 8], eax
sub esp, 0xc
mov ecx, esp
mov edx, dword [ebp - 0x84]
mov dword [ecx], edx
mov eax, dword [ebp - 0x80]
mov dword [ecx + 4], eax
mov edx, dword [ebp - 0x7c]
mov dword [ecx + 8], edx
mov ecx, dword [ebp - 0xdd0]
call fcn.005e0b51
mov dword [ebp - 0x1a74], eax
jmp 0x8ceb9c
mov dword [ebp - 0x1a74], 0
mov eax, dword [ebp - 0x1a74]
mov dword [ebp - 0xdc4], eax
mov dword [ebp - 4], 0xffffffff
mov ecx, dword [ebp - 0xdc4]
mov dword [ebp - 0xa4], ecx
mov eax, dword [0xc62eb8]
mov ecx, dword [eax + 0x2c]
mov dword [ebp - 0x1a74], ecx
mov edx, dword [ebp - 0xa4]
push edx
mov ecx, dword [ebp - 0x1a74]
call fcn.005e2177
jmp 0x8d50ae
mov eax, dword [ebp - 0x1c]
movsx ecx, word [eax + 0x6d0]
cmp ecx, 3
jne 0x8ced16
mov eax, dword [ebp - 0x98]
mov dword [ebp - 0xb8], eax
mov ecx, dword [ebp - 0x94]
mov dword [ebp - 0xb4], ecx
mov edx, dword [ebp - 0x90]
mov dword [ebp - 0xb0], edx
push ecx
movss xmm0, dword [ebp - 0x90]
movss dword [esp], xmm0
push ecx
movss xmm0, dword [ebp - 0x98]
movss dword [esp], xmm0
lea ecx, [ebp - 0xde0]
call fcn.005de612
mov ecx, dword [eax + 4]
push ecx
mov edx, dword [eax]
push edx
mov ecx, dword [ebp - 0x28]
call fcn.005dd924
cvtsi2ss xmm0, eax
mulss xmm0, dword [0x9b0640]
movss dword [ebp - 0xb4], xmm0
push 0x90
call fcn.005de946
add esp, 4
mov dword [ebp - 0xdf8], eax
mov dword [ebp - 4], 1
cmp dword [ebp - 0xdf8], 0
je 0x8cecc8
push 0x90
mov ecx, dword [ebp - 0xdf8]
call fcn.005dffd0
push 3
sub esp, 0xc
mov eax, esp
mov ecx, dword [ebp - 0xb8]
mov dword [eax], ecx
mov edx, dword [ebp - 0xb4]
mov dword [eax + 4], edx
mov ecx, dword [ebp - 0xb0]
mov dword [eax + 8], ecx
mov ecx, dword [ebp - 0xdf8]
call fcn.005e0917
mov dword [ebp - 0x1a74], eax
jmp 0x8cecd2
mov dword [ebp - 0x1a74], 0
mov edx, dword [ebp - 0x1a74]
mov dword [ebp - 0xdec], edx
mov dword [ebp - 4], 0xffffffff
mov eax, dword [ebp - 0xdec]
mov dword [ebp - 0xc4], eax
mov eax, dword [0xc62eb8]
mov ecx, dword [eax + 0x2c]
mov dword [ebp - 0x1a74], ecx
mov edx, dword [ebp - 0xc4]
push edx
mov ecx, dword [ebp - 0x1a74]
call fcn.005e2177
jmp 0x8d50ae
mov eax, dword [ebp - 0x1c]
movsx ecx, word [eax + 0x6d0]
cmp ecx, 0xd
jne 0x8cef60
push 0xcc
call fcn.005de946
add esp, 4
mov dword [ebp - 0xe10], eax
mov dword [ebp - 4], 2
cmp dword [ebp - 0xe10], 0
je 0x8ced89
push 0xcc
mov ecx, dword [ebp - 0xe10]
call fcn.005de694
push 4
mov eax, dword [ebp - 0x1c]
push ecx
movss xmm0, dword [eax + 0x34]
movss dword [esp], xmm0
push 0xff999999
push 0xb16
mov ecx, dword [ebp - 0xe10]
call fcn.005e0935
mov dword [ebp - 0x1a74], eax
jmp 0x8ced93
mov dword [ebp - 0x1a74], 0
mov ecx, dword [ebp - 0x1a74]
mov dword [ebp - 0xe04], ecx
mov dword [ebp - 4], 0xffffffff
mov edx, dword [ebp - 0xe04]
mov dword [ebp - 0xd0], edx
mov eax, dword [ebp - 0xd0]
mov dword [eax + 0xa4], 0x19d
mov eax, dword [ebp - 0xd0]
mov dword [eax + 0xb0], 0x1f4
mov eax, dword [ebp - 0xd0]
mov dword [eax + 0xb8], 0x1f4
mov eax, dword [ebp - 0x1c]
movsx ecx, byte [eax + 0xa5f]
cmp ecx, 1
jne 0x8cee76
mov eax, dword [ebp - 0x1c]
mov ecx, dword [eax + 0x5c]
mov edx, dword [ebp - 0x1c]
movss xmm0, dword [ecx*8 + 0x27966f4]
mulss xmm0, dword [edx + 0x38]
divss xmm0, dword [0x9b0548]
mov eax, dword [ebp - 0x1c]
addss xmm0, dword [eax + 0x54]
subss xmm0, dword [0x9b0658]
mov ecx, dword [ebp - 0x1c]
push ecx
movss xmm1, dword [ecx + 0x58]
movss dword [esp], xmm1
push ecx
movss dword [esp], xmm0
mov edx, dword [ebp - 0x1c]
push ecx
movss xmm0, dword [edx + 0x50]
movss dword [esp], xmm0
lea ecx, [ebp - 0xe24]
call fcn.005e0ce6
mov eax, dword [ebp - 0xd0]
add eax, 0x74
mov ecx, dword [ebp - 0xe24]
mov dword [eax], ecx
mov edx, dword [ebp - 0xe20]
mov dword [eax + 4], edx
mov ecx, dword [ebp - 0xe1c]
mov dword [eax + 8], ecx
jmp 0x8ceef5
mov eax, dword [ebp - 0x1c]
mov ecx, dword [eax + 0x5c]
mov edx, dword [ebp - 0x1c]
movss xmm0, dword [ecx*8 + 0x27966f4]
mulss xmm0, dword [edx + 0x38]
divss xmm0, dword [0x9b0548]
mov eax, dword [ebp - 0x1c]
addss xmm0, dword [eax + 0x30]
addss xmm0, dword [0x9b0658]
mov ecx, dword [ebp - 0x1c]
push ecx
movss xmm1, dword [ecx + 0x2c]
movss dword [esp], xmm1
push ecx
movss dword [esp], xmm0
mov edx, dword [ebp - 0x1c]
push ecx
movss xmm0, dword [edx + 0x28]
movss dword [esp], xmm0
lea ecx, [ebp - 0xe38]
call fcn.005e0ce6
mov eax, dword [ebp - 0xd0]
add eax, 0x74
mov ecx, dword [ebp - 0xe38]
mov dword [eax], ecx
mov edx, dword [ebp - 0xe34]
mov dword [eax + 4], edx
mov ecx, dword [ebp - 0xe30]
mov dword [eax + 8], ecx
mov eax, dword [ebp - 0xd0]
movss xmm0, dword [0x9b1428]
movss dword [eax + 0x98], xmm0
mov eax, dword [ebp - 0xd0]
movss xmm0, dword [0x9b1428]
movss dword [eax + 0x9c], xmm0
mov eax, dword [ebp - 0xd0]
mov dword [eax + 0x6c], 1
mov eax, dword [ebp - 0xd0]
mov byte [eax + 0xac], 0
mov eax, dword [0xc62eb8]
mov ecx, dword [eax + 0x2c]
mov dword [ebp - 0x1a74], ecx
mov edx, dword [ebp - 0xd0]
push edx
mov ecx, dword [ebp - 0x1a74]
call fcn.005e2177
jmp 0x8d50ae
mov eax, dword [ebp - 0x1c]
movsx ecx, word [eax + 0x6d0]
cmp ecx, 8
je 0x8cef8d
mov eax, dword [ebp - 0x1c]
movsx ecx, word [eax + 0x6d0]
cmp ecx, 0xa
je 0x8cef8d
mov eax, dword [ebp - 0x1c]
movsx ecx, word [eax + 0x6d0]
cmp ecx, 0x12
jne 0x8cefdf
mov eax, dword [0xc62ea4]
mov edx, dword [eax]
mov esi, esp
mov ecx, dword [0xc62ea4]
mov eax, dword [edx + 0x6c]
call eax
cmp esi, esp
call fcn.005e11e1
mov dword [ebp - 0xdc], eax
mov eax, dword [ebp - 0xdc]
mov ecx, dword [eax + 0x54]
cmp ecx, dword [ebp - 0x1c]
jne 0x8cefc9
push 2
mov ecx, dword [ebp - 0xdc]
call fcn.005deb71
push 0
push 0
push 0xa0
call fcn.005de2e3
add esp, 0xc
jmp 0x8d50ae
mov eax, dword [ebp - 0x1c]
movsx ecx, word [eax + 0x6d0]
cmp ecx, 0xb
jne 0x8cf397
mov eax, dword [ebp - 0x84]
mov dword [ebp - 0xf0], eax
mov ecx, dword [ebp - 0x80]
mov dword [ebp - 0xec], ecx
mov edx, dword [ebp - 0x7c]
mov dword [ebp - 0xe8], edx
mov esi, esp
call dword [sym.imp.ucrtbased.dll_rand]
cmp esi, esp
call fcn.005e11e1
cdq
mov ecx, 5
idiv ecx
cvtsi2ss xmm0, edx
movss dword [ebp - 0xfc], xmm0
push 0x184
call fcn.005de946
add esp, 4
mov dword [ebp - 0xe50], eax
mov dword [ebp - 4], 3
cmp dword [ebp - 0xe50], 0
je 0x8cf0bc
push 0x184
mov ecx, dword [ebp - 0xe50]
call fcn.005dfc3d
push 0x50
push 1
push ecx
movss xmm0, dword [0x9b140c]
movss dword [esp], xmm0
push ecx
movss xmm0, dword [0x9b0668]
movss dword [esp], xmm0
push ecx
movss xmm0, dword [0x9b0668]
movss dword [esp], xmm0
push ecx
movss xmm0, dword [0x9b0668]
movss dword [esp], xmm0
push 0x2bc
push 0x38
mov ecx, dword [ebp - 0xe50]
call fcn.005e33d8
mov dword [ebp - 0x1a74], eax
jmp 0x8cf0c6
mov dword [ebp - 0x1a74], 0
mov eax, dword [ebp - 0x1a74]
mov dword [ebp - 0xe44], eax
mov dword [ebp - 4], 0xffffffff
mov ecx, dword [ebp - 0xe44]
mov dword [ebp - 0x108], ecx
mov eax, dword [ebp - 0x108]
mov ecx, dword [eax]
mov edx, dword [ecx + 0x3c]
mov dword [ebp - 0x1a74], edx
mov esi, esp
push 0xff990000
mov ecx, dword [ebp - 0x108]
call dword [ebp - 0x1a74]
cmp esi, esp
call fcn.005e11e1
mov eax, dword [ebp - 0x108]
mov dword [eax + 0x6c], 1
mov eax, dword [ebp - 0x108]
mov dword [eax + 0x104], 1
movss xmm0, dword [ebp - 0xec]
addss xmm0, dword [0x9b0650]
push ecx
movss xmm1, dword [ebp - 0xe8]
movss dword [esp], xmm1
push ecx
movss dword [esp], xmm0
push ecx
movss xmm0, dword [ebp - 0xf0]
movss dword [esp], xmm0
lea ecx, [ebp - 0xe64]
call fcn.005e0ce6
mov eax, dword [ebp - 0x108]
add eax, 0x74
mov ecx, dword [ebp - 0xe64]
mov dword [eax], ecx
mov edx, dword [ebp - 0xe60]
mov dword [eax + 4], edx
mov ecx, dword [ebp - 0xe5c]
mov dword [eax + 8], ecx
mov eax, dword [0xc62eb8]
mov ecx, dword [eax + 0x2c]
mov dword [ebp - 0x1a74], ecx
mov edx, dword [ebp - 0x108]
push edx
mov ecx, dword [ebp - 0x1a74]
call fcn.005e2177
push 0x184
call fcn.005de946
add esp, 4
mov dword [ebp - 0xe7c], eax
mov dword [ebp - 4], 4
cmp dword [ebp - 0xe7c], 0
je 0x8cf26a
push 0x184
mov ecx, dword [ebp - 0xe7c]
call fcn.005dfc3d
push 0x50
push 1
push ecx
movss xmm0, dword [0x9b1f30]
movss dword [esp], xmm0
movss xmm0, dword [ebp - 0xfc]
mulss xmm0, dword [0x9b0658]
addss xmm0, dword [0x9b9380]
push ecx
movss dword [esp], xmm0
movss xmm0, dword [ebp - 0xfc]
mulss xmm0, dword [0x9b0658]
addss xmm0, dword [0x9b4de0]
push ecx
movss dword [esp], xmm0
movss xmm0, dword [ebp - 0xfc]
mulss xmm0, dword [0x9b0658]
addss xmm0, dword [0x9b9380]
push ecx
movss dword [esp], xmm0
push 0x4b0
push 0x3c
mov ecx, dword [ebp - 0xe7c]
call fcn.005e33d8
mov dword [ebp - 0x1a74], eax
jmp 0x8cf274
mov dword [ebp - 0x1a74], 0
mov eax, dword [ebp - 0x1a74]
mov dword [ebp - 0xe70], eax
mov dword [ebp - 4], 0xffffffff
mov ecx, dword [ebp - 0xe70]
mov dword [ebp - 0x114], ecx
mov eax, dword [ebp - 0x114]
mov ecx, dword [eax]
mov edx, dword [ecx + 0x3c]
mov dword [ebp - 0x1a74], edx
mov esi, esp
push 0xff994444
mov ecx, dword [ebp - 0x114]
call dword [ebp - 0x1a74]
cmp esi, esp
call fcn.005e11e1
movss xmm0, dword [0x9b066c]
mulss xmm0, dword [ebp - 0xfc]
divss xmm0, dword [0x9b1a5c]
mov eax, dword [ebp - 0x114]
movss dword [eax + 0x114], xmm0
mov eax, dword [ebp - 0x114]
mov dword [eax + 0x6c], 1
mov eax, dword [ebp - 0x114]
mov dword [eax + 0x104], 1
movss xmm0, dword [ebp - 0xec]
addss xmm0, dword [0x9b0650]
push ecx
movss xmm1, dword [ebp - 0xe8]
movss dword [esp], xmm1
push ecx
movss dword [esp], xmm0
push ecx
movss xmm0, dword [ebp - 0xf0]
movss dword [esp], xmm0
lea ecx, [ebp - 0xe90]
call fcn.005e0ce6
mov eax, dword [ebp - 0x114]
add eax, 0x74
mov ecx, dword [ebp - 0xe90]
mov dword [eax], ecx
mov edx, dword [ebp - 0xe8c]
mov dword [eax + 4], edx
mov ecx, dword [ebp - 0xe88]
mov dword [eax + 8], ecx
mov eax, dword [0xc62eb8]
mov ecx, dword [eax + 0x2c]
mov dword [ebp - 0x1a74], ecx
mov edx, dword [ebp - 0x114]
push edx
mov ecx, dword [ebp - 0x1a74]
call fcn.005e2177
push 0
push 0
push 0xa8
call fcn.005de2e3
add esp, 0xc
jmp 0x8d50ae
mov eax, dword [ebp - 0x1c]
movsx ecx, word [eax + 0x6d0]
cmp ecx, 9
jne 0x8cf477
mov eax, dword [ebp - 0x84]
mov dword [ebp - 0x128], eax
mov ecx, dword [ebp - 0x80]
mov dword [ebp - 0x124], ecx
mov edx, dword [ebp - 0x7c]
mov dword [ebp - 0x120], edx
push 0x90
call fcn.005de946
add esp, 4
mov dword [ebp - 0xea8], eax
mov dword [ebp - 4], 5
cmp dword [ebp - 0xea8], 0
je 0x8cf429
push 0x90
mov ecx, dword [ebp - 0xea8]
call fcn.005e1074
push 0
sub esp, 0xc
mov eax, esp
mov ecx, dword [ebp - 0x84]
mov dword [eax], ecx
mov edx, dword [ebp - 0x80]
mov dword [eax + 4], edx
mov ecx, dword [ebp - 0x7c]
mov dword [eax + 8], ecx
mov ecx, dword [ebp - 0xea8]
call fcn.005e3054
mov dword [ebp - 0x1a74], eax
jmp 0x8cf433
mov dword [ebp - 0x1a74], 0
mov edx, dword [ebp - 0x1a74]
mov dword [ebp - 0xe9c], edx
mov dword [ebp - 4], 0xffffffff
mov eax, dword [ebp - 0xe9c]
mov dword [ebp - 0x134], eax
mov eax, dword [0xc62eb8]
mov ecx, dword [eax + 0x2c]
mov dword [ebp - 0x1a74], ecx
mov edx, dword [ebp - 0x134]
push edx
mov ecx, dword [ebp - 0x1a74]
call fcn.005e2177
jmp 0x8d50ae
mov eax, dword [ebp - 0x1c]
movsx ecx, word [eax + 0x6d0]
cmp ecx, 0xf
jne 0x8cf6c1
push 0xcc
call fcn.005de946
add esp, 4
mov dword [ebp - 0xec0], eax
mov dword [ebp - 4], 6
cmp dword [ebp - 0xec0], 0
je 0x8cf4ea
push 0xcc
mov ecx, dword [ebp - 0xec0]
call fcn.005de694
push 4
mov eax, dword [ebp - 0x1c]
push ecx
movss xmm0, dword [eax + 0x34]
movss dword [esp], xmm0
push 0xff999999
push 0xb16
mov ecx, dword [ebp - 0xec0]
call fcn.005e0935
mov dword [ebp - 0x1a74], eax
jmp 0x8cf4f4
mov dword [ebp - 0x1a74], 0
mov ecx, dword [ebp - 0x1a74]
mov dword [ebp - 0xeb4], ecx
mov dword [ebp - 4], 0xffffffff
mov edx, dword [ebp - 0xeb4]
mov dword [ebp - 0x140], edx
mov eax, dword [ebp - 0x140]
mov dword [eax + 0xa4], 0x19d
mov eax, dword [ebp - 0x140]
mov dword [eax + 0xb0], 0x1f4
mov eax, dword [ebp - 0x140]
mov dword [eax + 0xb8], 0x1f4
mov eax, dword [ebp - 0x1c]
movsx ecx, byte [eax + 0xa5f]
cmp ecx, 1
jne 0x8cf5d7
mov eax, dword [ebp - 0x1c]
mov ecx, dword [eax + 0x5c]
mov edx, dword [ebp - 0x1c]
movss xmm0, dword [ecx*8 + 0x27966f4]
mulss xmm0, dword [edx + 0x38]
divss xmm0, dword [0x9b0548]
mov eax, dword [ebp - 0x1c]
addss xmm0, dword [eax + 0x54]
subss xmm0, dword [0x9b0658]
mov ecx, dword [ebp - 0x1c]
push ecx
movss xmm1, dword [ecx + 0x58]
movss dword [esp], xmm1
push ecx
movss dword [esp], xmm0
mov edx, dword [ebp - 0x1c]
push ecx
movss xmm0, dword [edx + 0x50]
movss dword [esp], xmm0
lea ecx, [ebp - 0xed4]
call fcn.005e0ce6
mov eax, dword [ebp - 0x140]
add eax, 0x74
mov ecx, dword [ebp - 0xed4]
mov dword [eax], ecx
mov edx, dword [ebp - 0xed0]
mov dword [eax + 4], edx
mov ecx, dword [ebp - 0xecc]
mov dword [eax + 8], ecx
jmp 0x8cf656
mov eax, dword [ebp - 0x1c]
mov ecx, dword [eax + 0x5c]
mov edx, dword [ebp - 0x1c]
movss xmm0, dword [ecx*8 + 0x27966f4]
mulss xmm0, dword [edx + 0x38]
divss xmm0, dword [0x9b0548]
mov eax, dword [ebp - 0x1c]
addss xmm0, dword [eax + 0x30]
addss xmm0, dword [0x9b0658]
mov ecx, dword [ebp - 0x1c]
push ecx
movss xmm1, dword [ecx + 0x2c]
movss dword [esp], xmm1
push ecx
movss dword [esp], xmm0
mov edx, dword [ebp - 0x1c]
push ecx
movss xmm0, dword [edx + 0x28]
movss dword [esp], xmm0
lea ecx, [ebp - 0xee8]
call fcn.005e0ce6
mov eax, dword [ebp - 0x140]
add eax, 0x74
mov ecx, dword [ebp - 0xee8]
mov dword [eax], ecx
mov edx, dword [ebp - 0xee4]
mov dword [eax + 4], edx
mov ecx, dword [ebp - 0xee0]
mov dword [eax + 8], ecx
mov eax, dword [ebp - 0x140]
movss xmm0, dword [0x9b1428]
movss dword [eax + 0x98], xmm0
mov eax, dword [ebp - 0x140]
movss xmm0, dword [0x9b1428]
movss dword [eax + 0x9c], xmm0
mov eax, dword [ebp - 0x140]
mov dword [eax + 0x6c], 1
mov eax, dword [ebp - 0x140]
mov byte [eax + 0xac], 0
mov eax, dword [0xc62eb8]
mov ecx, dword [eax + 0x2c]
mov dword [ebp - 0x1a74], ecx
mov edx, dword [ebp - 0x140]
push edx
mov ecx, dword [ebp - 0x1a74]
call fcn.005e2177
jmp 0x8d50ae
mov eax, dword [ebp - 0x1c]
movsx ecx, word [eax + 0x6d0]
cmp ecx, 2
je 0x8cf6f2
mov eax, dword [ebp - 0x1c]
movsx ecx, word [eax + 0x6d0]
cmp ecx, 0xc
je 0x8cf6f2
mov eax, dword [ebp - 0x1c]
movsx ecx, word [eax + 0x6d0]
cmp ecx, 0x1c
jne 0x8cf81b
movss xmm0, dword [ebp - 0x94]
addss xmm0, dword [0x9b04e0]
movss dword [ebp - 0x94], xmm0
mov dword [ebp - 0x14c], 0
mov eax, dword [ebp - 0x1c]
movsx ecx, word [eax + 0x6d0]
cmp ecx, 0xc
jne 0x8cf72d
mov dword [ebp - 0x14c], 1
mov eax, dword [ebp - 0x1c]
movsx ecx, word [eax + 0x6d0]
cmp ecx, 0x1c
jne 0x8cf746
mov dword [ebp - 0x14c], 2
push 0xc8
call fcn.005de946
add esp, 4
mov dword [ebp - 0xf00], eax
mov dword [ebp - 4], 7
cmp dword [ebp - 0xf00], 0
je 0x8cf7cd
push 0xc8
mov ecx, dword [ebp - 0xf00]
call fcn.005dde7e
push 0
mov eax, dword [ebp - 0x14c]
push eax
sub esp, 0xc
mov ecx, esp
mov edx, dword [ebp - 0x98]
mov dword [ecx], edx
mov eax, dword [ebp - 0x94]
mov dword [ecx + 4], eax
mov edx, dword [ebp - 0x90]
mov dword [ecx + 8], edx
sub esp, 0xc
mov eax, esp
mov ecx, dword [ebp - 0x84]
mov dword [eax], ecx
mov edx, dword [ebp - 0x80]
mov dword [eax + 4], edx
mov ecx, dword [ebp - 0x7c]
mov dword [eax + 8], ecx
mov ecx, dword [ebp - 0xf00]
call fcn.005ddbbd
mov dword [ebp - 0x1a74], eax
jmp 0x8cf7d7
mov dword [ebp - 0x1a74], 0
mov edx, dword [ebp - 0x1a74]
mov dword [ebp - 0xef4], edx
mov dword [ebp - 4], 0xffffffff
mov eax, dword [ebp - 0xef4]
mov dword [ebp - 0x158], eax
mov eax, dword [0xc62eb8]
mov ecx, dword [eax + 0x2c]
mov dword [ebp - 0x1a74], ecx
mov edx, dword [ebp - 0x158]
push edx
mov ecx, dword [ebp - 0x1a74]
call fcn.005e2177
jmp 0x8d50ae
mov eax, dword [ebp - 0x1c]
movsx ecx, word [eax + 0x6d0]
cmp ecx, 0x11
jne 0x8cf975
mov eax, dword [ebp - 0x1c]
cmp dword [eax + 0x60], 0
je 0x8cf975
push 0
push 0
push 0x9b
call fcn.005de2e3
add esp, 0xc
mov eax, 4
imul ecx, eax, 0
mov edx, dword [ebp - 0x1c]
cmp dword [edx + ecx + 0x884], 1
jne 0x8cf895
mov eax, dword [ebp - 0x1c]
mov ecx, dword [eax + 0x60]
mov edx, 4
imul eax, edx, 0
cmp dword [ecx + eax + 0x2f8], 0
je 0x8cf895
mov eax, dword [ebp - 0x1c]
mov ecx, dword [eax + 0x60]
mov edx, 4
imul eax, edx, 0
mov ecx, dword [ecx + eax + 0x2f8]
mov byte [ecx + 0x28f0], 1
mov eax, 4
shl eax, 0
mov ecx, dword [ebp - 0x1c]
cmp dword [ecx + eax + 0x884], 1
jne 0x8cf8de
mov eax, dword [ebp - 0x1c]
mov ecx, dword [eax + 0x60]
mov edx, 4
shl edx, 0
cmp dword [ecx + edx + 0x2f8], 0
je 0x8cf8de
mov eax, dword [ebp - 0x1c]
mov ecx, dword [eax + 0x60]
mov edx, 4
shl edx, 0
mov eax, dword [ecx + edx + 0x2f8]
mov byte [eax + 0x28f0], 1
mov eax, 4
imul ecx, eax, 0
mov edx, dword [ebp - 0x1c]
cmp dword [edx + ecx + 0x884], 0
jne 0x8cf970
mov eax, 4
shl eax, 0
mov ecx, dword [ebp - 0x1c]
cmp dword [ecx + eax + 0x884], 0
jne 0x8cf970
mov eax, dword [ebp - 0x1c]
mov ecx, dword [eax + 0x60]
mov edx, 4
imul eax, edx, 0
cmp dword [ecx + eax + 0x2f8], 0
je 0x8cf93c
mov eax, dword [ebp - 0x1c]
mov ecx, dword [eax + 0x60]
mov edx, 4
imul eax, edx, 0
mov ecx, dword [ecx + eax + 0x2f8]
mov byte [ecx + 0x28f0], 1
mov eax, dword [ebp - 0x1c]
mov ecx, dword [eax + 0x60]
mov edx, 4
shl edx, 0
cmp dword [ecx + edx + 0x2f8], 0
je 0x8cf970
mov eax, dword [ebp - 0x1c]
mov ecx, dword [eax + 0x60]
mov edx, 4
shl edx, 0
mov eax, dword [ecx + edx + 0x2f8]
mov byte [eax + 0x28f0], 1
jmp 0x8d50ae
mov eax, dword [ebp - 0x1c]
movsx ecx, word [eax + 0x6d0]
cmp ecx, 0x13
jne 0x8cfacd
mov eax, dword [ebp - 0x1c]
cmp dword [eax + 0x60], 0
je 0x8cfacd
push 0
push 0
push 0xa0
call fcn.005de2e3
add esp, 0xc
mov eax, dword [ebp - 0x1c]
mov ecx, dword [eax + 0x60]
mov edx, 4
imul eax, edx, 0
cmp dword [ecx + eax + 0x2f8], 0
je 0x8cf9dd
mov eax, dword [ebp - 0x1c]
mov ecx, dword [eax + 0x60]
mov edx, 4
imul eax, edx, 0
mov ecx, dword [ecx + eax + 0x2f8]
mov dword [ecx + 0x2900], 4
mov eax, dword [ebp - 0x1c]
mov ecx, dword [eax + 0x60]
mov edx, 4
shl edx, 0
cmp dword [ecx + edx + 0x2f8], 0
je 0x8cfa14
mov eax, dword [ebp - 0x1c]
mov ecx, dword [eax + 0x60]
mov edx, 4
shl edx, 0
mov eax, dword [ecx + edx + 0x2f8]
mov dword [eax + 0x2900], 4
push 0xb0
call fcn.005de946
add esp, 4
mov dword [ebp - 0xf18], eax
mov dword [ebp - 4], 8
cmp dword [ebp - 0xf18], 0
je 0x8cfa7f
push 0xb0
mov ecx, dword [ebp - 0xf18]
call fcn.005df670
push 0
push 0
push 0
sub esp, 0xc
mov eax, esp
mov ecx, dword [ebp - 0x98]
mov dword [eax], ecx
mov edx, dword [ebp - 0x94]
mov dword [eax + 4], edx
mov ecx, dword [ebp - 0x90]
mov dword [eax + 8], ecx
mov ecx, dword [ebp - 0xf18]
call fcn.005dddc5
mov dword [ebp - 0x1a74], eax
jmp 0x8cfa89
mov dword [ebp - 0x1a74], 0
mov edx, dword [ebp - 0x1a74]
mov dword [ebp - 0xf0c], edx
mov dword [ebp - 4], 0xffffffff
mov eax, dword [ebp - 0xf0c]
mov dword [ebp - 0x164], eax
mov eax, dword [0xc62eb8]
mov ecx, dword [eax + 0x2c]
mov dword [ebp - 0x1a74], ecx
mov edx, dword [ebp - 0x164]
push edx
mov ecx, dword [ebp - 0x1a74]
call fcn.005e2177
jmp 0x8d50ae
mov eax, dword [ebp - 0x1c]
movsx ecx, word [eax + 0x6d0]
cmp ecx, 0x14
jne 0x8cff36
push 0
push 0
push 0x99
call fcn.005de2e3
add esp, 0xc
mov eax, dword [ebp - 0x1c]
cmp dword [eax + 0x6cc], 0
je 0x8cff31
mov byte [ebp - 0x16d], 0
mov eax, dword [ebp - 0x1c]
mov ecx, dword [eax + 0x6cc]
cmp dword [ecx + 0x230], 4
je 0x8cfb2c
mov eax, dword [ebp - 0x1c]
mov ecx, dword [eax + 0x6cc]
cmp dword [ecx + 0x230], 8
jne 0x8cfb33
mov byte [ebp - 0x16d], 1
push 0x1c0
call fcn.005de946
add esp, 4
mov dword [ebp - 0xf30], eax
mov dword [ebp - 4], 9
cmp dword [ebp - 0xf30], 0
je 0x8cfbf0
push 0x1c0
mov ecx, dword [ebp - 0xf30]
call fcn.005dfc4c
mov eax, dword [ebp - 0x1c]
mov ecx, dword [eax + 0x6cc]
mov edx, dword [ecx + 0x5c]
mov dword [ebp - 0x1a74], edx
push 0
push 0
sub esp, 0xc
mov ecx, esp
mov dword [ebp - 0xf3c], esp
push ecx
xorps xmm0, xmm0
movss dword [esp], xmm0
push ecx
xorps xmm0, xmm0
movss dword [esp], xmm0
push ecx
xorps xmm0, xmm0
movss dword [esp], xmm0
call fcn.005e0ce6
sub esp, 0xc
mov ecx, esp
mov dword [ebp - 0xf48], esp
push ecx
xorps xmm0, xmm0
movss dword [esp], xmm0
push ecx
xorps xmm0, xmm0
movss dword [esp], xmm0
push ecx
xorps xmm0, xmm0
movss dword [esp], xmm0
call fcn.005e0ce6
mov eax, dword [ebp - 0x1a74]
push eax
mov ecx, dword [ebp - 0xf30]
call fcn.005e19d4
mov dword [ebp - 0x1a78], eax
jmp 0x8cfbfa
mov dword [ebp - 0x1a78], 0
mov ecx, dword [ebp - 0x1a78]
mov dword [ebp - 0xf24], ecx
mov dword [ebp - 4], 0xffffffff
mov edx, dword [ebp - 0xf24]
mov dword [ebp - 0x17c], edx
mov eax, dword [ebp - 0x1c]
cmp dword [eax + 0x6cc], 0
je 0x8cfc4b
mov eax, dword [ebp - 0x1c]
mov ecx, dword [eax + 0x6cc]
movsx edx, byte [ecx + 0xa5f]
test edx, edx
jle 0x8cfc4b
mov eax, dword [ebp - 0x1c]
mov ecx, dword [eax + 0x6cc]
cmp dword [ecx + 0x12c], 0
jne 0x8cfc74
push 0x20
mov eax, dword [ebp - 0x1c]
mov ecx, dword [eax + 0x6cc]
add ecx, 0x172
push ecx
mov edx, dword [ebp - 0x17c]
add edx, 0xf4
push edx
call fcn.005e28b6
add esp, 0xc
jmp 0x8cfcf2
mov eax, dword [ebp - 0x1c]
mov ecx, dword [eax + 0x6cc]
mov edx, dword [ebp - 0x17c]
mov eax, dword [ecx + 0xa64]
mov dword [edx + 0x5c], eax
push 0x20
mov eax, dword [ebp - 0x1c]
mov ecx, dword [eax + 0x6cc]
add ecx, 0x132
push ecx
mov edx, dword [ebp - 0x17c]
add edx, 0xf4
push edx
call fcn.005e28b6
add esp, 0xc
mov eax, dword [ebp - 0x1c]
mov ecx, dword [eax + 0x6cc]
mov edx, dword [ebp - 0x17c]
mov eax, dword [ecx + 0x5c]
mov dword [edx + 0x1b4], eax
push 0x20
mov eax, dword [ebp - 0x1c]
mov ecx, dword [eax + 0x6cc]
add ecx, 0x172
push ecx
mov edx, dword [ebp - 0x17c]
add edx, 0x190
push edx
call fcn.005e28b6
add esp, 0xc
mov eax, dword [ebp - 0x17c]
movss xmm0, dword [0x9b0664]
movss dword [eax + 0x138], xmm0
mov eax, dword [ebp - 0x17c]
movss xmm0, dword [0x9b0664]
movss dword [eax + 0x13c], xmm0
mov eax, dword [ebp - 0x17c]
movss xmm0, dword [0x9b0664]
movss dword [eax + 0x140], xmm0
mov eax, dword [ebp - 0x17c]
mov ecx, dword [eax]
mov edx, dword [ecx + 0x80]
mov dword [ebp - 0x1a74], edx
movzx eax, byte [ebp - 0x16d]
mov esi, esp
push eax
mov ecx, dword [ebp - 0x17c]
call dword [ebp - 0x1a74]
cmp esi, esp
call fcn.005e11e1
mov eax, dword [ebp - 0x17c]
mov dword [eax + 0x168], 1
mov eax, dword [ebp - 0x17c]
mov dword [eax + 0x128], 0xbb8
mov eax, dword [ebp - 0x17c]
mov ecx, dword [eax]
mov edx, dword [ecx + 0x3c]
mov dword [ebp - 0x1a74], edx
mov eax, dword [ebp - 0x1c]
mov ecx, dword [eax + 0x6cc]
mov esi, esp
push ecx
movss xmm0, dword [ecx + 0x2c]
movss dword [esp], xmm0
mov edx, dword [ebp - 0x1c]
mov eax, dword [edx + 0x6cc]
movss xmm0, dword [eax + 0x30]
addss xmm0, dword [0x9b0640]
push ecx
movss dword [esp], xmm0
mov ecx, dword [ebp - 0x1c]
mov edx, dword [ecx + 0x6cc]
push ecx
movss xmm0, dword [edx + 0x28]
movss dword [esp], xmm0
mov ecx, dword [ebp - 0x17c]
call dword [ebp - 0x1a74]
cmp esi, esp
call fcn.005e11e1
mov eax, dword [ebp - 0x1c]
movsx ecx, byte [eax + 0xa5f]
test ecx, ecx
jle 0x8cfea2
mov eax, dword [ebp - 0x1c]
cmp dword [eax + 0x12c], 0
je 0x8cfea2
mov eax, dword [ebp - 0x17c]
cmp dword [eax + 0x60], 0
je 0x8cfe54
mov eax, dword [ebp - 0x17c]
mov ecx, dword [eax + 0x60]
mov dword [ebp - 0x1a74], ecx
mov edx, dword [ebp - 0x17c]
imul eax, dword [edx + 0x5c], 0x2a0
mov ecx, 4
imul edx, ecx, 0
mov eax, dword [eax + edx + 0xc2b4a0]
push eax
mov ecx, dword [ebp - 0x1a74]
call fcn.005de496
mov eax, dword [ebp - 0x17c]
cmp dword [eax + 0x1b0], 0
je 0x8cfea0
mov eax, dword [ebp - 0x17c]
mov ecx, dword [eax + 0x1b0]
mov dword [ebp - 0x1a74], ecx
mov edx, dword [ebp - 0x17c]
imul eax, dword [edx + 0x1b4], 0x2a0
mov ecx, 4
imul edx, ecx, 0x18
mov eax, dword [eax + edx + 0xc2b4a0]
push eax
mov ecx, dword [ebp - 0x1a74]
call fcn.005de496
jmp 0x8cfed9
mov eax, dword [ebp - 0x17c]
mov ecx, dword [eax + 0x60]
mov dword [ebp - 0x1a74], ecx
mov edx, dword [ebp - 0x17c]
imul eax, dword [edx + 0x5c], 0x2a0
mov ecx, 4
imul edx, ecx, 0
mov eax, dword [eax + edx + 0xc2b4a0]
push eax
mov ecx, dword [ebp - 0x1a74]
call fcn.005de496
mov eax, dword [ebp - 0x1c]
mov ecx, dword [eax + 0x6cc]
mov edx, dword [ebp - 0x17c]
mov eax, dword [ecx + 0x34]
mov dword [edx + 0x134], eax
mov eax, dword [ebp - 0x17c]
mov dword [eax + 0x12c], 1
mov eax, dword [ebp - 0x17c]
mov dword [eax + 0x130], 1
mov eax, dword [0xc62eb8]
mov ecx, dword [eax + 0x2c]
mov dword [ebp - 0x1a74], ecx
mov edx, dword [ebp - 0x17c]
push edx
mov ecx, dword [ebp - 0x1a74]
call fcn.005e2177
jmp 0x8d50ae
mov eax, dword [ebp - 0x1c]
movsx ecx, word [eax + 0x6d0]
cmp ecx, 0x16
jne 0x8d003b
movss xmm0, dword [ebp - 0x94]
addss xmm0, dword [0x9b04e0]
push ecx
movss dword [esp], xmm0
push ecx
movss xmm0, dword [ebp - 0x90]
movss dword [esp], xmm0
push ecx
movss xmm0, dword [ebp - 0x98]
movss dword [esp], xmm0
lea ecx, [ebp - 0x190]
call fcn.005e0ce6
push 0x90
call fcn.005de946
add esp, 4
mov dword [ebp - 0xf60], eax
mov dword [ebp - 4], 0xa
cmp dword [ebp - 0xf60], 0
je 0x8cffed
push 0x90
mov ecx, dword [ebp - 0xf60]
call fcn.005e345a
push 1
sub esp, 0xc
mov eax, esp
mov ecx, dword [ebp - 0x190]
mov dword [eax], ecx
mov edx, dword [ebp - 0x18c]
mov dword [eax + 4], edx
mov ecx, dword [ebp - 0x188]
mov dword [eax + 8], ecx
mov ecx, dword [ebp - 0xf60]
call fcn.005e0e99
mov dword [ebp - 0x1a74], eax
jmp 0x8cfff7
mov dword [ebp - 0x1a74], 0
mov edx, dword [ebp - 0x1a74]
mov dword [ebp - 0xf54], edx
mov dword [ebp - 4], 0xffffffff
mov eax, dword [ebp - 0xf54]
mov dword [ebp - 0x19c], eax
mov eax, dword [0xc62eb8]
mov ecx, dword [eax + 0x2c]
mov dword [ebp - 0x1a74], ecx
mov edx, dword [ebp - 0x19c]
push edx
mov ecx, dword [ebp - 0x1a74]
call fcn.005e2177
jmp 0x8d50ae
mov eax, dword [ebp - 0x1c]
movsx ecx, word [eax + 0x6d0]
cmp ecx, 0x17
jne 0x8d01ea
mov eax, dword [ebp - 0x98]
mov dword [ebp - 0x1b0], eax
mov ecx, dword [ebp - 0x94]
mov dword [ebp - 0x1ac], ecx
mov edx, dword [ebp - 0x90]
mov dword [ebp - 0x1a8], edx
mov dword [ebp - 0x1bc], 0
jmp 0x8d008d
mov eax, dword [ebp - 0x1bc]
add eax, 1
mov dword [ebp - 0x1bc], eax
cmp dword [ebp - 0x1bc], 4
jge 0x8d01e5
mov eax, dword [ebp - 0x1bc]
and eax, 0x80000001
jns 0x8d00ac
dec eax
or eax, 0xfffffffe
inc eax
shl eax, 1
cvtsi2ss xmm0, eax
addss xmm0, dword [ebp - 0x98]
subss xmm0, dword [0x9b04e0]
mov eax, dword [ebp - 0x1bc]
cdq
sub eax, edx
sar eax, 1
shl eax, 1
cvtsi2ss xmm1, eax
addss xmm1, dword [ebp - 0x90]
subss xmm1, dword [0x9b04e0]
push ecx
movss dword [esp], xmm1
push ecx
movss xmm1, dword [ebp - 0x94]
movss dword [esp], xmm1
push ecx
movss dword [esp], xmm0
lea ecx, [ebp - 0xf74]
call fcn.005e0ce6
mov ecx, dword [ebp - 0xf74]
mov dword [ebp - 0x1b0], ecx
mov edx, dword [ebp - 0xf70]
mov dword [ebp - 0x1ac], edx
mov eax, dword [ebp - 0xf6c]
mov dword [ebp - 0x1a8], eax
push 0xb0
call fcn.005de946
add esp, 4
mov dword [ebp - 0xf8c], eax
mov dword [ebp - 4], 0xb
cmp dword [ebp - 0xf8c], 0
je 0x8d0197
push 0xb0
mov ecx, dword [ebp - 0xf8c]
call fcn.005df670
push 0
push 0
push 1
sub esp, 0xc
mov eax, esp
mov ecx, dword [ebp - 0x1b0]
mov dword [eax], ecx
mov edx, dword [ebp - 0x1ac]
mov dword [eax + 4], edx
mov ecx, dword [ebp - 0x1a8]
mov dword [eax + 8], ecx
mov ecx, dword [ebp - 0xf8c]
call fcn.005dddc5
mov dword [ebp - 0x1a74], eax
jmp 0x8d01a1
mov dword [ebp - 0x1a74], 0
mov edx, dword [ebp - 0x1a74]
mov dword [ebp - 0xf80], edx
mov dword [ebp - 4], 0xffffffff
mov eax, dword [ebp - 0xf80]
mov dword [ebp - 0x1c8], eax
mov eax, dword [0xc62eb8]
mov ecx, dword [eax + 0x2c]
mov dword [ebp - 0x1a74], ecx
mov edx, dword [ebp - 0x1c8]
push edx
mov ecx, dword [ebp - 0x1a74]
call fcn.005e2177
jmp 0x8d007e
jmp 0x8d50ae
mov eax, dword [ebp - 0x1c]
movsx ecx, word [eax + 0x6d0]
cmp ecx, 0x18
jne 0x8d02e5
movss xmm0, dword [ebp - 0x94]
addss xmm0, dword [0x9b04e0]
movss dword [ebp - 0x94], xmm0
push 0xc0
call fcn.005de946
add esp, 4
mov dword [ebp - 0xfa4], eax
mov dword [ebp - 4], 0xc
cmp dword [ebp - 0xfa4], 0
je 0x8d0297
push 0xc0
mov ecx, dword [ebp - 0xfa4]
call fcn.005e0223
push 0
push 0
sub esp, 0xc
mov eax, esp
mov ecx, dword [ebp - 0x98]
mov dword [eax], ecx
mov edx, dword [ebp - 0x94]
mov dword [eax + 4], edx
mov ecx, dword [ebp - 0x90]
mov dword [eax + 8], ecx
sub esp, 0xc
mov edx, esp
mov eax, dword [ebp - 0x84]
mov dword [edx], eax
mov ecx, dword [ebp - 0x80]
mov dword [edx + 4], ecx
mov eax, dword [ebp - 0x7c]
mov dword [edx + 8], eax
mov ecx, dword [ebp - 0xfa4]
call fcn.005e1f10
mov dword [ebp - 0x1a74], eax
jmp 0x8d02a1
mov dword [ebp - 0x1a74], 0
mov ecx, dword [ebp - 0x1a74]
mov dword [ebp - 0xf98], ecx
mov dword [ebp - 4], 0xffffffff
mov edx, dword [ebp - 0xf98]
mov dword [ebp - 0x1d4], edx
mov eax, dword [0xc62eb8]
mov ecx, dword [eax + 0x2c]
mov dword [ebp - 0x1a74], ecx
mov edx, dword [ebp - 0x1d4]
push edx
mov ecx, dword [ebp - 0x1a74]
call fcn.005e2177
jmp 0x8d50ae
mov eax, dword [ebp - 0x1c]
movsx ecx, word [eax + 0x6d0]
cmp ecx, 0x19
jne 0x8d03ad
push 0x90
call fcn.005de946
add esp, 4
mov dword [ebp - 0xfbc], eax
mov dword [ebp - 4], 0xd
cmp dword [ebp - 0xfbc], 0
je 0x8d035f
push 0x90
mov ecx, dword [ebp - 0xfbc]
call fcn.005e1c45
push 0
sub esp, 0xc
mov eax, esp
mov ecx, dword [ebp - 0x98]
mov dword [eax], ecx
mov edx, dword [ebp - 0x94]
mov dword [eax + 4], edx
mov ecx, dword [ebp - 0x90]
mov dword [eax + 8], ecx
mov ecx, dword [ebp - 0xfbc]
call fcn.005e24fb
mov dword [ebp - 0x1a74], eax
jmp 0x8d0369
mov dword [ebp - 0x1a74], 0
mov edx, dword [ebp - 0x1a74]
mov dword [ebp - 0xfb0], edx
mov dword [ebp - 4], 0xffffffff
mov eax, dword [ebp - 0xfb0]
mov dword [ebp - 0x1e0], eax
mov eax, dword [0xc62eb8]
mov ecx, dword [eax + 0x2c]
mov dword [ebp - 0x1a74], ecx
mov edx, dword [ebp - 0x1e0]
push edx
mov ecx, dword [ebp - 0x1a74]
call fcn.005e2177
jmp 0x8d50ae
mov eax, dword [ebp - 0x1c]
movsx ecx, word [eax + 0x6d0]
cmp ecx, 0x1b
je 0x8d03cf
mov eax, dword [ebp - 0x1c]
movsx ecx, word [eax + 0x6d0]
cmp ecx, 0x1d
jne 0x8d04c2
mov dword [ebp - 0x1ec], 0
mov eax, dword [ebp - 0x1c]
movsx ecx, word [eax + 0x6d0]
cmp ecx, 0x1b
jne 0x8d03f2
mov dword [ebp - 0x1ec], 3
mov eax, dword [ebp - 0x1c]
movsx ecx, word [eax + 0x6d0]
cmp ecx, 0x1d
jne 0x8d040b
mov dword [ebp - 0x1ec], 4
push 0x90
call fcn.005de946
add esp, 4
mov dword [ebp - 0xfd4], eax
mov dword [ebp - 4], 0xe
cmp dword [ebp - 0xfd4], 0
je 0x8d0474
push 0x90
mov ecx, dword [ebp - 0xfd4]
call fcn.005e1132
push 0
push 0
sub esp, 0xc
mov eax, esp
mov ecx, dword [ebp - 0x98]
mov dword [eax], ecx
mov edx, dword [ebp - 0x94]
mov dword [eax + 4], edx
mov ecx, dword [ebp - 0x90]
mov dword [eax + 8], ecx
mov ecx, dword [ebp - 0xfd4]
call fcn.005dd8f2
mov dword [ebp - 0x1a74], eax
jmp 0x8d047e
mov dword [ebp - 0x1a74], 0
mov edx, dword [ebp - 0x1a74]
mov dword [ebp - 0xfc8], edx
mov dword [ebp - 4], 0xffffffff
mov eax, dword [ebp - 0xfc8]
mov dword [ebp - 0x1f8], eax
mov eax, dword [0xc62eb8]
mov ecx, dword [eax + 0x2c]
mov dword [ebp - 0x1a74], ecx
mov edx, dword [ebp - 0x1f8]
push edx
mov ecx, dword [ebp - 0x1a74]
call fcn.005e2177
jmp 0x8d50ae
mov eax, dword [ebp - 0x1c]
movsx ecx, word [eax + 0x6d0]
cmp ecx, 0x1f
jne 0x8d0ae2
mov eax, dword [ebp - 0x1c]
cmp dword [eax + 0x6cc], 0
je 0x8d0add
mov eax, dword [ebp - 0x98]
mov dword [ebp - 0x20c], eax
mov ecx, dword [ebp - 0x94]
mov dword [ebp - 0x208], ecx
mov edx, dword [ebp - 0x90]
mov dword [ebp - 0x204], edx
push ecx
movss xmm0, dword [ebp - 0x90]
movss dword [esp], xmm0
push ecx
movss xmm0, dword [ebp - 0x98]
movss dword [esp], xmm0
lea ecx, [ebp - 0xfe4]
call fcn.005de612
mov ecx, dword [eax + 4]
push ecx
mov edx, dword [eax]
push edx
mov ecx, dword [ebp - 0x28]
call fcn.005dd924
cvtsi2ss xmm0, eax
mulss xmm0, dword [0x9b0640]
movss dword [ebp - 0x208], xmm0
push 0x90
call fcn.005de946
add esp, 4
mov dword [ebp - 0xffc], eax
mov dword [ebp - 4], 0xf
cmp dword [ebp - 0xffc], 0
je 0x8d05ba
push 0x90
mov ecx, dword [ebp - 0xffc]
call fcn.005dffd0
push 4
sub esp, 0xc
mov eax, esp
mov ecx, dword [ebp - 0x20c]
mov dword [eax], ecx
mov edx, dword [ebp - 0x208]
mov dword [eax + 4], edx
mov ecx, dword [ebp - 0x204]
mov dword [eax + 8], ecx
mov ecx, dword [ebp - 0xffc]
call fcn.005e0917
mov dword [ebp - 0x1a74], eax
jmp 0x8d05c4
mov dword [ebp - 0x1a74], 0
mov edx, dword [ebp - 0x1a74]
mov dword [ebp - 0xff0], edx
mov dword [ebp - 4], 0xffffffff
mov eax, dword [ebp - 0xff0]
mov dword [ebp - 0x218], eax
mov eax, dword [0xc62eb8]
mov ecx, dword [eax + 0x2c]
mov dword [ebp - 0x1a74], ecx
mov edx, dword [ebp - 0x218]
push edx
mov ecx, dword [ebp - 0x1a74]
call fcn.005e2177
push 0x90
call fcn.005de946
add esp, 4
mov dword [ebp - 0x1014], eax
mov dword [ebp - 4], 0x10
cmp dword [ebp - 0x1014], 0
je 0x8d0664
push 0x90
mov ecx, dword [ebp - 0x1014]
call fcn.005dffd0
push 4
sub esp, 0xc
mov eax, esp
mov ecx, dword [ebp - 0x84]
mov dword [eax], ecx
mov edx, dword [ebp - 0x80]
mov dword [eax + 4], edx
mov ecx, dword [ebp - 0x7c]
mov dword [eax + 8], ecx
mov ecx, dword [ebp - 0x1014]
call fcn.005e0917
mov dword [ebp - 0x1a74], eax
jmp 0x8d066e
mov dword [ebp - 0x1a74], 0
mov edx, dword [ebp - 0x1a74]
mov dword [ebp - 0x1008], edx
mov dword [ebp - 4], 0xffffffff
mov eax, dword [ebp - 0x1008]
mov dword [ebp - 0x224], eax
mov eax, dword [0xc62eb8]
mov ecx, dword [eax + 0x2c]
mov dword [ebp - 0x1a74], ecx
mov edx, dword [ebp - 0x224]
push edx
mov ecx, dword [ebp - 0x1a74]
call fcn.005e2177
mov byte [ebp - 0x22d], 0
mov eax, dword [ebp - 0x1c]
mov ecx, dword [eax + 0x6cc]
cmp dword [ecx + 0x230], 4
je 0x8d06d8
mov eax, dword [ebp - 0x1c]
mov ecx, dword [eax + 0x6cc]
cmp dword [ecx + 0x230], 8
jne 0x8d06df
mov byte [ebp - 0x22d], 1
push 0x1c0
call fcn.005de946
add esp, 4
mov dword [ebp - 0x102c], eax
mov dword [ebp - 4], 0x11
cmp dword [ebp - 0x102c], 0
je 0x8d079c
push 0x1c0
mov ecx, dword [ebp - 0x102c]
call fcn.005dfc4c
mov eax, dword [ebp - 0x1c]
mov ecx, dword [eax + 0x6cc]
mov edx, dword [ecx + 0x5c]
mov dword [ebp - 0x1a74], edx
push 0
push 0
sub esp, 0xc
mov ecx, esp
mov dword [ebp - 0x1038], esp
push ecx
xorps xmm0, xmm0
movss dword [esp], xmm0
push ecx
xorps xmm0, xmm0
movss dword [esp], xmm0
push ecx
xorps xmm0, xmm0
movss dword [esp], xmm0
call fcn.005e0ce6
sub esp, 0xc
mov ecx, esp
mov dword [ebp - 0x1044], esp
push ecx
xorps xmm0, xmm0
movss dword [esp], xmm0
push ecx
xorps xmm0, xmm0
movss dword [esp], xmm0
push ecx
xorps xmm0, xmm0
movss dword [esp], xmm0
call fcn.005e0ce6
mov eax, dword [ebp - 0x1a74]
push eax
mov ecx, dword [ebp - 0x102c]
call fcn.005e19d4
mov dword [ebp - 0x1a78], eax
jmp 0x8d07a6
mov dword [ebp - 0x1a78], 0
mov ecx, dword [ebp - 0x1a78]
mov dword [ebp - 0x1020], ecx
mov dword [ebp - 4], 0xffffffff
mov edx, dword [ebp - 0x1020]
mov dword [ebp - 0x23c], edx
mov eax, dword [ebp - 0x1c]
cmp dword [eax + 0x6cc], 0
je 0x8d07f7
mov eax, dword [ebp - 0x1c]
mov ecx, dword [eax + 0x6cc]
movsx edx, byte [ecx + 0xa5f]
test edx, edx
jle 0x8d07f7
mov eax, dword [ebp - 0x1c]
mov ecx, dword [eax + 0x6cc]
cmp dword [ecx + 0x12c], 0
jne 0x8d0820
push 0x20
mov eax, dword [ebp - 0x1c]
mov ecx, dword [eax + 0x6cc]
add ecx, 0x172
push ecx
mov edx, dword [ebp - 0x23c]
add edx, 0xf4
push edx
call fcn.005e28b6
add esp, 0xc
jmp 0x8d089e
mov eax, dword [ebp - 0x1c]
mov ecx, dword [eax + 0x6cc]
mov edx, dword [ebp - 0x23c]
mov eax, dword [ecx + 0xa64]
mov dword [edx + 0x5c], eax
push 0x20
mov eax, dword [ebp - 0x1c]
mov ecx, dword [eax + 0x6cc]
add ecx, 0x132
push ecx
mov edx, dword [ebp - 0x23c]
add edx, 0xf4
push edx
call fcn.005e28b6
add esp, 0xc
mov eax, dword [ebp - 0x1c]
mov ecx, dword [eax + 0x6cc]
mov edx, dword [ebp - 0x23c]
mov eax, dword [ecx + 0x5c]
mov dword [edx + 0x1b4], eax
push 0x20
mov eax, dword [ebp - 0x1c]
mov ecx, dword [eax + 0x6cc]
add ecx, 0x172
push ecx
mov edx, dword [ebp - 0x23c]
add edx, 0x190
push edx
call fcn.005e28b6
add esp, 0xc
mov eax, dword [ebp - 0x23c]
movss xmm0, dword [0x9b0664]
movss dword [eax + 0x138], xmm0
mov eax, dword [ebp - 0x23c]
movss xmm0, dword [0x9b0664]
movss dword [eax + 0x13c], xmm0
mov eax, dword [ebp - 0x23c]
movss xmm0, dword [0x9b0664]
movss dword [eax + 0x140], xmm0
mov eax, dword [ebp - 0x23c]
mov ecx, dword [eax]
mov edx, dword [ecx + 0x80]
mov dword [ebp - 0x1a74], edx
movzx eax, byte [ebp - 0x22d]
mov esi, esp
push eax
mov ecx, dword [ebp - 0x23c]
call dword [ebp - 0x1a74]
cmp esi, esp
call fcn.005e11e1
mov eax, dword [ebp - 0x23c]
mov dword [eax + 0x168], 1
mov eax, dword [ebp - 0x23c]
mov dword [eax + 0x128], 0x5dc
mov eax, dword [ebp - 0x23c]
mov ecx, dword [eax]
mov edx, dword [ecx + 0x3c]
mov dword [ebp - 0x1a74], edx
mov eax, dword [ebp - 0x1c]
mov ecx, dword [eax + 0x6cc]
mov esi, esp
push ecx
movss xmm0, dword [ecx + 0x2c]
movss dword [esp], xmm0
mov edx, dword [ebp - 0x1c]
mov eax, dword [edx + 0x6cc]
movss xmm0, dword [eax + 0x30]
addss xmm0, dword [0x9b0640]
push ecx
movss dword [esp], xmm0
mov ecx, dword [ebp - 0x1c]
mov edx, dword [ecx + 0x6cc]
push ecx
movss xmm0, dword [edx + 0x28]
movss dword [esp], xmm0
mov ecx, dword [ebp - 0x23c]
call dword [ebp - 0x1a74]
cmp esi, esp
call fcn.005e11e1
mov eax, dword [ebp - 0x1c]
movsx ecx, byte [eax + 0xa5f]
test ecx, ecx
jle 0x8d0a4e
mov eax, dword [ebp - 0x1c]
cmp dword [eax + 0x12c], 0
je 0x8d0a4e
mov eax, dword [ebp - 0x23c]
cmp dword [eax + 0x60], 0
je 0x8d0a00
mov eax, dword [ebp - 0x23c]
mov ecx, dword [eax + 0x60]
mov dword [ebp - 0x1a74], ecx
mov edx, dword [ebp - 0x23c]
imul eax, dword [edx + 0x5c], 0x2a0
mov ecx, 4
imul edx, ecx, 0
mov eax, dword [eax + edx + 0xc2b4a0]
push eax
mov ecx, dword [ebp - 0x1a74]
call fcn.005de496
mov eax, dword [ebp - 0x23c]
cmp dword [eax + 0x1b0], 0
je 0x8d0a4c
mov eax, dword [ebp - 0x23c]
mov ecx, dword [eax + 0x1b0]
mov dword [ebp - 0x1a74], ecx
mov edx, dword [ebp - 0x23c]
imul eax, dword [edx + 0x1b4], 0x2a0
mov ecx, 4
imul edx, ecx, 0x18
mov eax, dword [eax + edx + 0xc2b4a0]
push eax
mov ecx, dword [ebp - 0x1a74]
call fcn.005de496
jmp 0x8d0a85
mov eax, dword [ebp - 0x23c]
mov ecx, dword [eax + 0x60]
mov dword [ebp - 0x1a74], ecx
mov edx, dword [ebp - 0x23c]
imul eax, dword [edx + 0x5c], 0x2a0
mov ecx, 4
imul edx, ecx, 0
mov eax, dword [eax + edx + 0xc2b4a0]
push eax
mov ecx, dword [ebp - 0x1a74]
call fcn.005de496
mov eax, dword [ebp - 0x1c]
mov ecx, dword [eax + 0x6cc]
mov edx, dword [ebp - 0x23c]
mov eax, dword [ecx + 0x34]
mov dword [edx + 0x134], eax
mov eax, dword [ebp - 0x23c]
mov dword [eax + 0x12c], 1
mov eax, dword [ebp - 0x23c]
mov dword [eax + 0x130], 9
mov eax, dword [0xc62eb8]
mov ecx, dword [eax + 0x2c]
mov dword [ebp - 0x1a74], ecx
mov edx, dword [ebp - 0x23c]
push edx
mov ecx, dword [ebp - 0x1a74]
call fcn.005e2177
jmp 0x8d50ae
mov eax, dword [ebp - 0x1c]
movsx ecx, word [eax + 0x6d0]
cmp ecx, 0x20
jne 0x8d0bbb
push 0xa0
call fcn.005de946
add esp, 4
mov dword [ebp - 0x105c], eax
mov dword [ebp - 4], 0x12
cmp dword [ebp - 0x105c], 0
je 0x8d0b6d
push 0xa0
mov ecx, dword [ebp - 0x105c]
call fcn.005e3a63
push 0x22331100
push 0xffffffffffffffff
mov eax, dword [ebp - 0x1c]
mov ecx, dword [eax + 0x6cc]
push ecx
push 0
sub esp, 0xc
mov edx, esp
mov eax, dword [ebp - 0x98]
mov dword [edx], eax
mov ecx, dword [ebp - 0x94]
mov dword [edx + 4], ecx
mov eax, dword [ebp - 0x90]
mov dword [edx + 8], eax
mov ecx, dword [ebp - 0x105c]
call fcn.005e0ead
mov dword [ebp - 0x1a74], eax
jmp 0x8d0b77
mov dword [ebp - 0x1a74], 0
mov ecx, dword [ebp - 0x1a74]
mov dword [ebp - 0x1050], ecx
mov dword [ebp - 4], 0xffffffff
mov edx, dword [ebp - 0x1050]
mov dword [ebp - 0x248], edx
mov eax, dword [0xc62eb8]
mov ecx, dword [eax + 0x2c]
mov dword [ebp - 0x1a74], ecx
mov edx, dword [ebp - 0x248]
push edx
mov ecx, dword [ebp - 0x1a74]
call fcn.005e2177
jmp 0x8d50ae
mov eax, dword [ebp - 0x1c]
movsx ecx, word [eax + 0x6d0]
cmp ecx, 0x22
jne 0x8d0cb6
movss xmm0, dword [ebp - 0x94]
addss xmm0, dword [0x9b04e0]
movss dword [ebp - 0x94], xmm0
push 0xb0
call fcn.005de946
add esp, 4
mov dword [ebp - 0x1074], eax
mov dword [ebp - 4], 0x13
cmp dword [ebp - 0x1074], 0
je 0x8d0c68
push 0xb0
mov ecx, dword [ebp - 0x1074]
call fcn.005defd6
push 0
push 0
sub esp, 0xc
mov eax, esp
mov ecx, dword [ebp - 0x98]
mov dword [eax], ecx
mov edx, dword [ebp - 0x94]
mov dword [eax + 4], edx
mov ecx, dword [ebp - 0x90]
mov dword [eax + 8], ecx
sub esp, 0xc
mov edx, esp
mov eax, dword [ebp - 0x84]
mov dword [edx], eax
mov ecx, dword [ebp - 0x80]
mov dword [edx + 4], ecx
mov eax, dword [ebp - 0x7c]
mov dword [edx + 8], eax
mov ecx, dword [ebp - 0x1074]
call fcn.005df71a
mov dword [ebp - 0x1a74], eax
jmp 0x8d0c72
mov dword [ebp - 0x1a74], 0
mov ecx, dword [ebp - 0x1a74]
mov dword [ebp - 0x1068], ecx
mov dword [ebp - 4], 0xffffffff
mov edx, dword [ebp - 0x1068]
mov dword [ebp - 0x254], edx
mov eax, dword [0xc62eb8]
mov ecx, dword [eax + 0x2c]
mov dword [ebp - 0x1a74], ecx
mov edx, dword [ebp - 0x254]
push edx
mov ecx, dword [ebp - 0x1a74]
call fcn.005e2177
jmp 0x8d50ae
mov eax, dword [ebp - 0x1c]
movsx ecx, word [eax + 0x6d0]
cmp ecx, 0x25
jne 0x8d12c4
xor eax, eax
mov dword [ebp - 0x264], eax
mov dword [ebp - 0x260], eax
movss xmm0, dword [0x9b04e0]
movss dword [ebp - 0x270], xmm0
mov eax, dword [ebp - 0x1c]
movsx ecx, byte [eax + 0xa5f]
cmp ecx, 1
jne 0x8d0d06
movss xmm0, dword [0x9b0500]
movss dword [ebp - 0x270], xmm0
mov dword [ebp - 0x27c], 0
jmp 0x8d0d21
mov eax, dword [ebp - 0x27c]
add eax, 1
mov dword [ebp - 0x27c], eax
cmp dword [ebp - 0x27c], 2
jge 0x8d12b1
mov esi, esp
call dword [sym.imp.ucrtbased.dll_rand]
cmp esi, esp
call fcn.005e11e1
cdq
mov ecx, 5
idiv ecx
cvtsi2ss xmm0, edx
movss dword [ebp - 0x288], xmm0
mov eax, dword [ebp - 0x27c]
cmp dword [ebp + eax*4 - 0x264], 0
jne 0x8d0f4c
push 0x184
call fcn.005de946
add esp, 4
mov dword [ebp - 0x108c], eax
mov dword [ebp - 4], 0x14
cmp dword [ebp - 0x108c], 0
je 0x8d0e6e
push 0x184
mov ecx, dword [ebp - 0x108c]
call fcn.005dfc3d
push 0x50
push 8
push ecx
xorps xmm0, xmm0
movss dword [esp], xmm0
movss xmm0, dword [0x9b0650]
mulss xmm0, dword [ebp - 0x288]
addss xmm0, dword [0x9b04e0]
mulss xmm0, dword [ebp - 0x270]
cvtsi2ss xmm1, dword [ebp - 0x27c]
mulss xmm1, dword [0x9b0660]
subss xmm0, xmm1
push ecx
movss dword [esp], xmm0
movss xmm0, dword [0x9b0650]
mulss xmm0, dword [ebp - 0x288]
addss xmm0, dword [0x9b04e0]
mulss xmm0, dword [ebp - 0x270]
cvtsi2ss xmm1, dword [ebp - 0x27c]
mulss xmm1, dword [0x9b0660]
subss xmm0, xmm1
push ecx
movss dword [esp], xmm0
movss xmm0, dword [0x9b0650]
mulss xmm0, dword [ebp - 0x288]
addss xmm0, dword [0x9b04e0]
mulss xmm0, dword [ebp - 0x270]
cvtsi2ss xmm1, dword [ebp - 0x27c]
mulss xmm1, dword [0x9b0660]
subss xmm0, xmm1
push ecx
movss dword [esp], xmm0
push 0
push 0x6d
mov ecx, dword [ebp - 0x108c]
call fcn.005e33d8
mov dword [ebp - 0x1a74], eax
jmp 0x8d0e78
mov dword [ebp - 0x1a74], 0
mov eax, dword [ebp - 0x1a74]
mov dword [ebp - 0x1080], eax
mov dword [ebp - 4], 0xffffffff
mov ecx, dword [ebp - 0x27c]
mov edx, dword [ebp - 0x1080]
mov dword [ebp + ecx*4 - 0x264], edx
mov eax, dword [ebp - 0x27c]
mov ecx, dword [ebp + eax*4 - 0x264]
mov dword [ebp - 0x1a74], ecx
mov edx, dword [ebp - 0x27c]
mov eax, dword [ebp + edx*4 - 0x264]
mov ecx, dword [eax]
mov edx, dword [ecx + 0x3c]
mov dword [ebp - 0x1a78], edx
mov esi, esp
push 0xffffdd00
mov ecx, dword [ebp - 0x1a74]
call dword [ebp - 0x1a78]
cmp esi, esp
call fcn.005e11e1
mov eax, dword [ebp - 0x27c]
mov ecx, dword [ebp + eax*4 - 0x264]
mov dword [ecx + 0x6c], 1
mov eax, dword [ebp - 0x27c]
mov ecx, dword [ebp + eax*4 - 0x264]
mov dword [ecx + 0x104], 0
mov eax, dword [ebp - 0x27c]
mov ecx, dword [ebp + eax*4 - 0x264]
mov dword [ecx + 0xf8], 0x7d0
mov eax, dword [0xc62eb8]
mov ecx, dword [eax + 0x2c]
mov dword [ebp - 0x1a74], ecx
mov edx, dword [ebp - 0x27c]
mov eax, dword [ebp + edx*4 - 0x264]
push eax
mov ecx, dword [ebp - 0x1a74]
call fcn.005e2177
mov eax, dword [ebp - 0x27c]
cmp dword [ebp + eax*4 - 0x264], 0
je 0x8d1057
mov eax, dword [ebp - 0x27c]
mov ecx, dword [ebp + eax*4 - 0x264]
mov eax, dword [ebx + 8]
sub eax, dword [ecx + 0xfc]
xor edx, edx
mov ecx, 0x3e8
div ecx
mov dword [ebp - 0x1a74], edx
cvtsi2sd xmm0, dword [ebp - 0x1a74]
mov edx, dword [ebp - 0x1a74]
shr edx, 0x1f
addsd xmm0, qword [edx*8 + 0x9b05f0]
movsd qword [ebp - 0x1a80], xmm0
cvtsd2ss xmm0, qword [ebp - 0x1a80]
mulss xmm0, dword [0x9b1434]
divss xmm0, dword [0x9b0670]
cvtsi2ss xmm1, dword [ebp - 0x27c]
addss xmm0, xmm1
mov eax, dword [ebp - 0x27c]
mov ecx, dword [ebp + eax*4 - 0x264]
movss dword [ecx + 0x114], xmm0
mov eax, dword [ebp - 0x1c]
movss xmm0, dword [eax + 0x28]
addss xmm0, dword [0x9b0664]
mov ecx, dword [ebp - 0x1c]
movss xmm1, dword [ecx + 0x30]
addss xmm1, dword [0x9b4d8c]
mov edx, dword [ebp - 0x1c]
movss xmm2, dword [edx + 0x2c]
addss xmm2, dword [0x9b0664]
push ecx
movss dword [esp], xmm2
push ecx
movss dword [esp], xmm1
push ecx
movss dword [esp], xmm0
lea ecx, [ebp - 0x10a0]
call fcn.005e0ce6
mov eax, dword [ebp - 0x27c]
mov ecx, dword [ebp + eax*4 - 0x264]
add ecx, 0x74
mov edx, dword [ebp - 0x10a0]
mov dword [ecx], edx
mov eax, dword [ebp - 0x109c]
mov dword [ecx + 4], eax
mov edx, dword [ebp - 0x1098]
mov dword [ecx + 8], edx
push 0x184
call fcn.005de946
add esp, 4
mov dword [ebp - 0x10b8], eax
mov dword [ebp - 4], 0x15
cmp dword [ebp - 0x10b8], 0
je 0x8d1127
push 0x184
mov ecx, dword [ebp - 0x10b8]
call fcn.005dfc3d
push 0x50
push 8
push ecx
xorps xmm0, xmm0
movss dword [esp], xmm0
movss xmm0, dword [0x9b0650]
mulss xmm0, dword [ebp - 0x288]
addss xmm0, dword [0x9b04e0]
mulss xmm0, dword [ebp - 0x270]
push ecx
movss dword [esp], xmm0
movss xmm0, dword [0x9b0650]
mulss xmm0, dword [ebp - 0x288]
addss xmm0, dword [0x9b04e0]
mulss xmm0, dword [ebp - 0x270]
push ecx
movss dword [esp], xmm0
movss xmm0, dword [0x9b0650]
mulss xmm0, dword [ebp - 0x288]
addss xmm0, dword [0x9b04e0]
mulss xmm0, dword [ebp - 0x270]
push ecx
movss dword [esp], xmm0
push 0x1f4
push 0x6d
mov ecx, dword [ebp - 0x10b8]
call fcn.005e33d8
mov dword [ebp - 0x1a74], eax
jmp 0x8d1131
mov dword [ebp - 0x1a74], 0
mov eax, dword [ebp - 0x1a74]
mov dword [ebp - 0x10ac], eax
mov dword [ebp - 4], 0xffffffff
mov ecx, dword [ebp - 0x10ac]
mov dword [ebp - 0x294], ecx
mov eax, dword [ebp - 0x294]
mov ecx, dword [eax]
mov edx, dword [ecx + 0x3c]
mov dword [ebp - 0x1a74], edx
mov esi, esp
push 0xffffdd00
mov ecx, dword [ebp - 0x294]
call dword [ebp - 0x1a74]
cmp esi, esp
call fcn.005e11e1
mov eax, dword [ebp - 0x294]
mov dword [eax + 0x6c], 1
mov eax, dword [ebp - 0x294]
mov dword [eax + 0x104], 1
mov eax, dword [ebp - 0x294]
mov dword [eax + 0xf8], 0x7d0
mov eax, dword [ebp - 0x294]
mov ecx, dword [ebx + 8]
sub ecx, dword [eax + 0xfc]
mov eax, ecx
xor edx, edx
mov ecx, 0x3e8
div ecx
mov dword [ebp - 0x1a74], edx
cvtsi2sd xmm0, dword [ebp - 0x1a74]
mov edx, dword [ebp - 0x1a74]
shr edx, 0x1f
addsd xmm0, qword [edx*8 + 0x9b05f0]
movsd qword [ebp - 0x1a80], xmm0
cvtsd2ss xmm0, qword [ebp - 0x1a80]
mulss xmm0, dword [0x9b1434]
divss xmm0, dword [0x9b0670]
mov eax, dword [ebp - 0x294]
movss dword [eax + 0x114], xmm0
mov eax, dword [ebp - 0x1c]
movss xmm0, dword [eax + 0x28]
addss xmm0, dword [0x9b0664]
mov ecx, dword [ebp - 0x1c]
movss xmm1, dword [ecx + 0x30]
addss xmm1, dword [0x9b4d8c]
mov edx, dword [ebp - 0x1c]
movss xmm2, dword [edx + 0x2c]
addss xmm2, dword [0x9b0664]
push ecx
movss dword [esp], xmm2
push ecx
movss dword [esp], xmm1
push ecx
movss dword [esp], xmm0
lea ecx, [ebp - 0x10cc]
call fcn.005e0ce6
mov eax, dword [ebp - 0x294]
add eax, 0x74
mov ecx, dword [ebp - 0x10cc]
mov dword [eax], ecx
mov edx, dword [ebp - 0x10c8]
mov dword [eax + 4], edx
mov ecx, dword [ebp - 0x10c4]
mov dword [eax + 8], ecx
mov eax, dword [ebp - 0x294]
mov ecx, dword [ebp - 0x1c]
mov dword [eax + 0x1c], ecx
mov eax, dword [0xc62eb8]
mov ecx, dword [eax + 0x2c]
mov dword [ebp - 0x1a74], ecx
mov edx, dword [ebp - 0x294]
push edx
mov ecx, dword [ebp - 0x1a74]
call fcn.005e2177
jmp 0x8d0d12
push 0
push 0
push 0x69
call fcn.005de2e3
add esp, 0xc
jmp 0x8d50ae
mov eax, dword [ebp - 0x1c]
movsx ecx, word [eax + 0x6d0]
cmp ecx, 0x26
jne 0x8d14d9
movss xmm0, dword [ebp - 0x94]
addss xmm0, dword [0x9b04e0]
movss dword [ebp - 0x94], xmm0
movss xmm0, dword [ebp - 0x80]
addss xmm0, dword [0x9b04e0]
movss dword [ebp - 0x80], xmm0
mov dword [ebp - 0x2a0], 1
mov eax, dword [ebp - 0x1c]
cmp dword [eax + 0x230], 0x26
jne 0x8d1321
mov dword [ebp - 0x2a0], 2
push 0xc0
call fcn.005de946
add esp, 4
mov dword [ebp - 0x10e4], eax
mov dword [ebp - 4], 0x16
cmp dword [ebp - 0x10e4], 0
je 0x8d13a8
push 0xc0
mov ecx, dword [ebp - 0x10e4]
call fcn.005e0223
push 0
mov eax, dword [ebp - 0x2a0]
push eax
sub esp, 0xc
mov ecx, esp
mov edx, dword [ebp - 0x98]
mov dword [ecx], edx
mov eax, dword [ebp - 0x94]
mov dword [ecx + 4], eax
mov edx, dword [ebp - 0x90]
mov dword [ecx + 8], edx
sub esp, 0xc
mov eax, esp
mov ecx, dword [ebp - 0x84]
mov dword [eax], ecx
mov edx, dword [ebp - 0x80]
mov dword [eax + 4], edx
mov ecx, dword [ebp - 0x7c]
mov dword [eax + 8], ecx
mov ecx, dword [ebp - 0x10e4]
call fcn.005e1f10
mov dword [ebp - 0x1a74], eax
jmp 0x8d13b2
mov dword [ebp - 0x1a74], 0
mov edx, dword [ebp - 0x1a74]
mov dword [ebp - 0x10d8], edx
mov dword [ebp - 4], 0xffffffff
mov eax, dword [ebp - 0x10d8]
mov dword [ebp - 0x2ac], eax
mov eax, dword [0xc62eb8]
mov ecx, dword [eax + 0x2c]
mov dword [ebp - 0x1a74], ecx
mov edx, dword [ebp - 0x2ac]
push edx
mov ecx, dword [ebp - 0x1a74]
call fcn.005e2177
movss xmm0, dword [ebp - 0x94]
addss xmm0, dword [0x9b04e0]
movss dword [ebp - 0x94], xmm0
push 0xc8
call fcn.005de946
add esp, 4
mov dword [ebp - 0x10fc], eax
mov dword [ebp - 4], 0x17
cmp dword [ebp - 0x10fc], 0
je 0x8d148b
push 0xc8
mov ecx, dword [ebp - 0x10fc]
call fcn.005dde7e
push 0
push 4
sub esp, 0xc
mov eax, esp
mov ecx, dword [ebp - 0x98]
mov dword [eax], ecx
mov edx, dword [ebp - 0x94]
mov dword [eax + 4], edx
mov ecx, dword [ebp - 0x90]
mov dword [eax + 8], ecx
sub esp, 0xc
mov edx, esp
mov eax, dword [ebp - 0x84]
mov dword [edx], eax
mov ecx, dword [ebp - 0x80]
mov dword [edx + 4], ecx
mov eax, dword [ebp - 0x7c]
mov dword [edx + 8], eax
mov ecx, dword [ebp - 0x10fc]
call fcn.005ddbbd
mov dword [ebp - 0x1a74], eax
jmp 0x8d1495
mov dword [ebp - 0x1a74], 0
mov ecx, dword [ebp - 0x1a74]
mov dword [ebp - 0x10f0], ecx
mov dword [ebp - 4], 0xffffffff
mov edx, dword [ebp - 0x10f0]
mov dword [ebp - 0x2b8], edx
mov eax, dword [0xc62eb8]
mov ecx, dword [eax + 0x2c]
mov dword [ebp - 0x1a74], ecx
mov edx, dword [ebp - 0x2b8]
push edx
mov ecx, dword [ebp - 0x1a74]
call fcn.005e2177
jmp 0x8d50ae
mov eax, dword [ebp - 0x1c]
movsx ecx, word [eax + 0x6d0]
cmp ecx, 0x28
je 0x8d14fb
mov eax, dword [ebp - 0x1c]
movsx ecx, word [eax + 0x6d0]
cmp ecx, 0x15
jne 0x8d1610
mov dword [ebp - 0x2c4], 0xff33ff66
mov eax, dword [ebp - 0x1c]
movsx ecx, word [eax + 0x6d2]
cmp ecx, 1
jne 0x8d151e
mov dword [ebp - 0x2c4], 0xff66ffaa
mov eax, dword [ebp - 0x1c]
movsx ecx, word [eax + 0x6d2]
cmp ecx, 2
jne 0x8d1537
mov dword [ebp - 0x2c4], 0xff113388
mov eax, dword [ebp - 0x1c]
movsx ecx, word [eax + 0x6d2]
cmp ecx, 3
jne 0x8d1550
mov dword [ebp - 0x2c4], 0xffff8800
push 0x90
call fcn.005de946
add esp, 4
mov dword [ebp - 0x1114], eax
mov dword [ebp - 4], 0x18
cmp dword [ebp - 0x1114], 0
je 0x8d15c2
push 0x90
mov ecx, dword [ebp - 0x1114]
call fcn.005debb2
push 0
push 1
push 0xa
mov eax, dword [ebp - 0x2c4]
push eax
sub esp, 0xc
mov ecx, esp
mov edx, dword [ebp - 0x98]
mov dword [ecx], edx
mov eax, dword [ebp - 0x94]
mov dword [ecx + 4], eax
mov edx, dword [ebp - 0x90]
mov dword [ecx + 8], edx
mov ecx, dword [ebp - 0x1114]
call fcn.005e214a
mov dword [ebp - 0x1a74], eax
jmp 0x8d15cc
mov dword [ebp - 0x1a74], 0
mov eax, dword [ebp - 0x1a74]
mov dword [ebp - 0x1108], eax
mov dword [ebp - 4], 0xffffffff
mov ecx, dword [ebp - 0x1108]
mov dword [ebp - 0x2d0], ecx
mov eax, dword [0xc62eb8]
mov ecx, dword [eax + 0x2c]
mov dword [ebp - 0x1a74], ecx
mov edx, dword [ebp - 0x2d0]
push edx
mov ecx, dword [ebp - 0x1a74]
call fcn.005e2177
jmp 0x8d50ae
mov eax, dword [ebp - 0x1c]
movsx ecx, word [eax + 0x6d0]
cmp ecx, 0x29
je 0x8d1641
mov eax, dword [ebp - 0x1c]
movsx ecx, word [eax + 0x6d0]
cmp ecx, 0x2b
je 0x8d1641
mov eax, dword [ebp - 0x1c]
movsx ecx, word [eax + 0x6d0]
cmp ecx, 0x36
jne 0x8d17a5
mov eax, dword [ebp - 0x98]
mov dword [ebp - 0x2e4], eax
mov ecx, dword [ebp - 0x94]
mov dword [ebp - 0x2e0], ecx
mov edx, dword [ebp - 0x90]
mov dword [ebp - 0x2dc], edx
push ecx
movss xmm0, dword [ebp - 0x90]
movss dword [esp], xmm0
push ecx
movss xmm0, dword [ebp - 0x98]
movss dword [esp], xmm0
lea ecx, [ebp - 0x1124]
call fcn.005de612
mov ecx, dword [eax + 4]
push ecx
mov edx, dword [eax]
push edx
mov ecx, dword [ebp - 0x28]
call fcn.005dd924
cvtsi2ss xmm0, eax
mulss xmm0, dword [0x9b0640]
movss dword [ebp - 0x2e0], xmm0
mov dword [ebp - 0x2f0], 0
mov eax, dword [ebp - 0x1c]
movsx ecx, word [eax + 0x6d0]
cmp ecx, 0x2b
jne 0x8d16d2
mov dword [ebp - 0x2f0], 1
mov eax, dword [ebp - 0x1c]
movsx ecx, word [eax + 0x6d0]
cmp ecx, 0x36
jne 0x8d16eb
mov dword [ebp - 0x2f0], 3
push 0x90
call fcn.005de946
add esp, 4
mov dword [ebp - 0x113c], eax
mov dword [ebp - 4], 0x19
cmp dword [ebp - 0x113c], 0
je 0x8d1757
push 0x90
mov ecx, dword [ebp - 0x113c]
call fcn.005dffd0
mov eax, dword [ebp - 0x2f0]
push eax
sub esp, 0xc
mov ecx, esp
mov edx, dword [ebp - 0x2e4]
mov dword [ecx], edx
mov eax, dword [ebp - 0x2e0]
mov dword [ecx + 4], eax
mov edx, dword [ebp - 0x2dc]
mov dword [ecx + 8], edx
mov ecx, dword [ebp - 0x113c]
call fcn.005e0917
mov dword [ebp - 0x1a74], eax
jmp 0x8d1761
mov dword [ebp - 0x1a74], 0
mov eax, dword [ebp - 0x1a74]
mov dword [ebp - 0x1130], eax
mov dword [ebp - 4], 0xffffffff
mov ecx, dword [ebp - 0x1130]
mov dword [ebp - 0x2fc], ecx
mov eax, dword [0xc62eb8]
mov ecx, dword [eax + 0x2c]
mov dword [ebp - 0x1a74], ecx
mov edx, dword [ebp - 0x2fc]
push edx
mov ecx, dword [ebp - 0x1a74]
call fcn.005e2177
jmp 0x8d50ae
mov eax, dword [ebp - 0x1c]
movsx ecx, word [eax + 0x6d0]
cmp ecx, 0x2a
jne 0x8d188a
push 0xac
call fcn.005de946
add esp, 4
mov dword [ebp - 0x1154], eax
mov dword [ebp - 4], 0x1a
cmp dword [ebp - 0x1154], 0
je 0x8d183c
push 0xac
mov ecx, dword [ebp - 0x1154]
call fcn.005e147f
push 0
sub esp, 0xc
mov ecx, esp
mov dword [ebp - 0x1160], esp
movss xmm0, dword [ebp - 0x80]
subss xmm0, dword [0x9b04e0]
push ecx
movss dword [esp], xmm0
push ecx
movss xmm0, dword [ebp - 0x7c]
movss dword [esp], xmm0
push ecx
movss xmm0, dword [ebp - 0x84]
movss dword [esp], xmm0
call fcn.005e0ce6
mov ecx, dword [ebp - 0x1154]
call fcn.005e1641
mov dword [ebp - 0x1a74], eax
jmp 0x8d1846
mov dword [ebp - 0x1a74], 0
mov eax, dword [ebp - 0x1a74]
mov dword [ebp - 0x1148], eax
mov dword [ebp - 4], 0xffffffff
mov ecx, dword [ebp - 0x1148]
mov dword [ebp - 0x308], ecx
mov eax, dword [0xc62eb8]
mov ecx, dword [eax + 0x2c]
mov dword [ebp - 0x1a74], ecx
mov edx, dword [ebp - 0x308]
push edx
mov ecx, dword [ebp - 0x1a74]
call fcn.005e2177
jmp 0x8d50ae
mov eax, dword [ebp - 0x1c]
movsx ecx, word [eax + 0x6d0]
cmp ecx, 0x2c
jne 0x8d1c96
mov dword [ebp - 0x314], 0
jmp 0x8d18b8
mov eax, dword [ebp - 0x314]
add eax, 1
mov dword [ebp - 0x314], eax
cmp dword [ebp - 0x314], 3
jge 0x8d1c80
push 0x184
call fcn.005de946
add esp, 4
mov dword [ebp - 0x1178], eax
mov dword [ebp - 4], 0x1b
cmp dword [ebp - 0x1178], 0
je 0x8d198e
push 0x184
mov ecx, dword [ebp - 0x1178]
call fcn.005dfc3d
push 0x50
push 1
push ecx
movss xmm0, dword [0x9b140c]
movss dword [esp], xmm0
cvtsi2ss xmm0, dword [ebp - 0x314]
mulss xmm0, dword [0x9b0624]
movss xmm1, dword [0x9b0660]
subss xmm1, xmm0
push ecx
movss dword [esp], xmm1
cvtsi2ss xmm0, dword [ebp - 0x314]
mulss xmm0, dword [0x9b0624]
movss xmm1, dword [0x9b0660]
subss xmm1, xmm0
push ecx
movss dword [esp], xmm1
cvtsi2ss xmm0, dword [ebp - 0x314]
mulss xmm0, dword [0x9b0624]
movss xmm1, dword [0x9b0660]
subss xmm1, xmm0
push ecx
movss dword [esp], xmm1
push 0x320
push 0x38
mov ecx, dword [ebp - 0x1178]
call fcn.005e33d8
mov dword [ebp - 0x1a74], eax
jmp 0x8d1998
mov dword [ebp - 0x1a74], 0
mov eax, dword [ebp - 0x1a74]
mov dword [ebp - 0x116c], eax
mov dword [ebp - 4], 0xffffffff
mov ecx, dword [ebp - 0x116c]
mov dword [ebp - 0x320], ecx
mov eax, dword [ebp - 0x320]
mov ecx, dword [eax]
mov edx, dword [ecx + 0x3c]
mov dword [ebp - 0x1a74], edx
mov esi, esp
mov eax, dword [ebp - 0x314]
mov ecx, dword [eax*4 + 0x9b8f78]
push ecx
mov ecx, dword [ebp - 0x320]
call dword [ebp - 0x1a74]
cmp esi, esp
call fcn.005e11e1
mov eax, dword [ebp - 0x320]
mov dword [eax + 0x6c], 1
mov eax, dword [ebp - 0x320]
mov dword [eax + 0x104], 1
movss xmm0, dword [ebp - 0x80]
addss xmm0, dword [0x9b0500]
push ecx
movss xmm1, dword [ebp - 0x7c]
movss dword [esp], xmm1
push ecx
movss dword [esp], xmm0
push ecx
movss xmm0, dword [ebp - 0x84]
movss dword [esp], xmm0
lea ecx, [ebp - 0x118c]
call fcn.005e0ce6
mov eax, dword [ebp - 0x320]
add eax, 0x74
mov ecx, dword [ebp - 0x118c]
mov dword [eax], ecx
mov edx, dword [ebp - 0x1188]
mov dword [eax + 4], edx
mov ecx, dword [ebp - 0x1184]
mov dword [eax + 8], ecx
mov eax, dword [0xc62eb8]
mov ecx, dword [eax + 0x2c]
mov dword [ebp - 0x1a74], ecx
mov edx, dword [ebp - 0x320]
push edx
mov ecx, dword [ebp - 0x1a74]
call fcn.005e2177
mov esi, esp
call dword [sym.imp.ucrtbased.dll_rand]
cmp esi, esp
call fcn.005e11e1
cdq
mov ecx, 5
idiv ecx
cvtsi2ss xmm0, edx
addss xmm0, dword [0x9b4c14]
movss dword [ebp - 0x32c], xmm0
push 0x184
call fcn.005de946
add esp, 4
mov dword [ebp - 0x11a4], eax
mov dword [ebp - 4], 0x1c
cmp dword [ebp - 0x11a4], 0
je 0x8d1b6a
push 0x184
mov ecx, dword [ebp - 0x11a4]
call fcn.005dfc3d
push 0x50
push 1
push ecx
movss xmm0, dword [0x9b1f30]
movss dword [esp], xmm0
movss xmm0, dword [ebp - 0x32c]
mulss xmm0, dword [0x9b0624]
addss xmm0, dword [0x9b0660]
push ecx
movss dword [esp], xmm0
movss xmm0, dword [ebp - 0x32c]
mulss xmm0, dword [0x9b0624]
addss xmm0, dword [0x9b0660]
push ecx
movss dword [esp], xmm0
movss xmm0, dword [ebp - 0x32c]
mulss xmm0, dword [0x9b0624]
addss xmm0, dword [0x9b0660]
push ecx
movss dword [esp], xmm0
push 0x1f4
push 0x3c
mov ecx, dword [ebp - 0x11a4]
call fcn.005e33d8
mov dword [ebp - 0x1a74], eax
jmp 0x8d1b74
mov dword [ebp - 0x1a74], 0
mov eax, dword [ebp - 0x1a74]
mov dword [ebp - 0x1198], eax
mov dword [ebp - 4], 0xffffffff
mov ecx, dword [ebp - 0x1198]
mov dword [ebp - 0x338], ecx
mov eax, dword [ebp - 0x338]
mov ecx, dword [eax]
mov edx, dword [ecx + 0x3c]
mov dword [ebp - 0x1a74], edx
mov esi, esp
push 0xff333355
mov ecx, dword [ebp - 0x338]
call dword [ebp - 0x1a74]
cmp esi, esp
call fcn.005e11e1
movss xmm0, dword [0x9b066c]
mulss xmm0, dword [ebp - 0x32c]
divss xmm0, dword [0x9b1a5c]
mov eax, dword [ebp - 0x338]
movss dword [eax + 0x114], xmm0
mov eax, dword [ebp - 0x338]
mov dword [eax + 0x6c], 1
mov eax, dword [ebp - 0x338]
mov dword [eax + 0x104], 1
movss xmm0, dword [ebp - 0x80]
addss xmm0, dword [0x9b0500]
push ecx
movss xmm1, dword [ebp - 0x7c]
movss dword [esp], xmm1
push ecx
movss dword [esp], xmm0
push ecx
movss xmm0, dword [ebp - 0x84]
movss dword [esp], xmm0
lea ecx, [ebp - 0x11b8]
call fcn.005e0ce6
mov eax, dword [ebp - 0x338]
add eax, 0x74
mov ecx, dword [ebp - 0x11b8]
mov dword [eax], ecx
mov edx, dword [ebp - 0x11b4]
mov dword [eax + 4], edx
mov ecx, dword [ebp - 0x11b0]
mov dword [eax + 8], ecx
mov eax, dword [0xc62eb8]
mov ecx, dword [eax + 0x2c]
mov dword [ebp - 0x1a74], ecx
mov edx, dword [ebp - 0x338]
push edx
mov ecx, dword [ebp - 0x1a74]
call fcn.005e2177
jmp 0x8d18a9
push 0
push 0
push 0x9f
call fcn.005de2e3
add esp, 0xc
jmp 0x8d50ae
mov eax, dword [ebp - 0x1c]
movsx ecx, word [eax + 0x6d0]
cmp ecx, 0x2e
jne 0x8d2297
push 0x90
call fcn.005de946
add esp, 4
mov dword [ebp - 0x11d0], eax
mov dword [ebp - 4], 0x1d
cmp dword [ebp - 0x11d0], 0
je 0x8d1d8b
push 0x90
mov ecx, dword [ebp - 0x11d0]
call fcn.005df1bb
mov eax, dword [ebp - 0x84]
mov dword [ebp - 0x11f8], eax
mov ecx, dword [ebp - 0x80]
mov dword [ebp - 0x11f4], ecx
mov edx, dword [ebp - 0x7c]
mov dword [ebp - 0x11f0], edx
push 0x3e8
sub esp, 0xc
mov ecx, esp
mov dword [ebp - 0x11dc], esp
push ecx
xorps xmm0, xmm0
movss dword [esp], xmm0
push ecx
xorps xmm0, xmm0
movss dword [esp], xmm0
push ecx
xorps xmm0, xmm0
movss dword [esp], xmm0
call fcn.005e0ce6
push 1
push ecx
movss xmm0, dword [0x9b04e0]
movss dword [esp], xmm0
push 0x7a
push 0
push 0xffff3300
push ecx
movss xmm0, dword [0x9b04e0]
movss dword [esp], xmm0
push 0xf
push 3
sub esp, 0xc
mov eax, esp
mov ecx, dword [ebp - 0x11f8]
mov dword [eax], ecx
mov edx, dword [ebp - 0x11f4]
mov dword [eax + 4], edx
mov ecx, dword [ebp - 0x11f0]
mov dword [eax + 8], ecx
mov ecx, dword [ebp - 0x11d0]
call fcn.005e0200
mov dword [ebp - 0x1a74], eax
jmp 0x8d1d95
mov dword [ebp - 0x1a74], 0
mov edx, dword [ebp - 0x1a74]
mov dword [ebp - 0x11c4], edx
mov dword [ebp - 4], 0xffffffff
mov eax, dword [ebp - 0x11c4]
mov dword [ebp - 0x344], eax
mov eax, dword [0xc62eb8]
mov ecx, dword [eax + 0x2c]
mov dword [ebp - 0x1a74], ecx
mov edx, dword [ebp - 0x344]
push edx
mov ecx, dword [ebp - 0x1a74]
call fcn.005e2177
push 0x90
call fcn.005de946
add esp, 4
mov dword [ebp - 0x1210], eax
mov dword [ebp - 4], 0x1e
cmp dword [ebp - 0x1210], 0
je 0x8d1eb6
push 0x90
mov ecx, dword [ebp - 0x1210]
call fcn.005df1bb
mov eax, dword [ebp - 0x84]
mov dword [ebp - 0x1238], eax
mov ecx, dword [ebp - 0x80]
mov dword [ebp - 0x1234], ecx
mov edx, dword [ebp - 0x7c]
mov dword [ebp - 0x1230], edx
push 0x3e8
sub esp, 0xc
mov ecx, esp
mov dword [ebp - 0x121c], esp
push ecx
xorps xmm0, xmm0
movss dword [esp], xmm0
push ecx
xorps xmm0, xmm0
movss dword [esp], xmm0
push ecx
xorps xmm0, xmm0
movss dword [esp], xmm0
call fcn.005e0ce6
push 1
push ecx
movss xmm0, dword [0x9b04e0]
movss dword [esp], xmm0
push 0x38
push 0
push 0xffff3300
push ecx
movss xmm0, dword [0x9b0658]
movss dword [esp], xmm0
push 0xf
push 1
sub esp, 0xc
mov eax, esp
mov ecx, dword [ebp - 0x1238]
mov dword [eax], ecx
mov edx, dword [ebp - 0x1234]
mov dword [eax + 4], edx
mov ecx, dword [ebp - 0x1230]
mov dword [eax + 8], ecx
mov ecx, dword [ebp - 0x1210]
call fcn.005e0200
mov dword [ebp - 0x1a74], eax
jmp 0x8d1ec0
mov dword [ebp - 0x1a74], 0
mov edx, dword [ebp - 0x1a74]
mov dword [ebp - 0x1204], edx
mov dword [ebp - 4], 0xffffffff
mov eax, dword [ebp - 0x1204]
mov dword [ebp - 0x350], eax
mov eax, dword [0xc62eb8]
mov ecx, dword [eax + 0x2c]
mov dword [ebp - 0x1a74], ecx
mov edx, dword [ebp - 0x350]
push edx
mov ecx, dword [ebp - 0x1a74]
call fcn.005e2177
push 0x90
call fcn.005de946
add esp, 4
mov dword [ebp - 0x1250], eax
mov dword [ebp - 4], 0x1f
cmp dword [ebp - 0x1250], 0
je 0x8d1fe1
push 0x90
mov ecx, dword [ebp - 0x1250]
call fcn.005df1bb
mov eax, dword [ebp - 0x84]
mov dword [ebp - 0x1278], eax
mov ecx, dword [ebp - 0x80]
mov dword [ebp - 0x1274], ecx
mov edx, dword [ebp - 0x7c]
mov dword [ebp - 0x1270], edx
push 0x3e8
sub esp, 0xc
mov ecx, esp
mov dword [ebp - 0x125c], esp
push ecx
xorps xmm0, xmm0
movss dword [esp], xmm0
push ecx
xorps xmm0, xmm0
movss dword [esp], xmm0
push ecx
xorps xmm0, xmm0
movss dword [esp], xmm0
call fcn.005e0ce6
push 1
push ecx
movss xmm0, dword [0x9b04e0]
movss dword [esp], xmm0
push 0x7a
push 0
push 0xff0033ff
push ecx
movss xmm0, dword [0x9b04e0]
movss dword [esp], xmm0
push 0xf
push 2
sub esp, 0xc
mov eax, esp
mov ecx, dword [ebp - 0x1278]
mov dword [eax], ecx
mov edx, dword [ebp - 0x1274]
mov dword [eax + 4], edx
mov ecx, dword [ebp - 0x1270]
mov dword [eax + 8], ecx
mov ecx, dword [ebp - 0x1250]
call fcn.005e0200
mov dword [ebp - 0x1a74], eax
jmp 0x8d1feb
mov dword [ebp - 0x1a74], 0
mov edx, dword [ebp - 0x1a74]
mov dword [ebp - 0x1244], edx
mov dword [ebp - 4], 0xffffffff
mov eax, dword [ebp - 0x1244]
mov dword [ebp - 0x35c], eax
mov eax, dword [0xc62eb8]
mov ecx, dword [eax + 0x2c]
mov dword [ebp - 0x1a74], ecx
mov edx, dword [ebp - 0x35c]
push edx
mov ecx, dword [ebp - 0x1a74]
call fcn.005e2177
push 0x90
call fcn.005de946
add esp, 4
mov dword [ebp - 0x1290], eax
mov dword [ebp - 4], 0x20
cmp dword [ebp - 0x1290], 0
je 0x8d210c
push 0x90
mov ecx, dword [ebp - 0x1290]
call fcn.005df1bb
mov eax, dword [ebp - 0x84]
mov dword [ebp - 0x12b8], eax
mov ecx, dword [ebp - 0x80]
mov dword [ebp - 0x12b4], ecx
mov edx, dword [ebp - 0x7c]
mov dword [ebp - 0x12b0], edx
push 0x3e8
sub esp, 0xc
mov ecx, esp
mov dword [ebp - 0x129c], esp
push ecx
xorps xmm0, xmm0
movss dword [esp], xmm0
push ecx
xorps xmm0, xmm0
movss dword [esp], xmm0
push ecx
xorps xmm0, xmm0
movss dword [esp], xmm0
call fcn.005e0ce6
push 1
push ecx
movss xmm0, dword [0x9b04e0]
movss dword [esp], xmm0
push 0x38
push 0
push 0xff0033ff
push ecx
movss xmm0, dword [0x9b0658]
movss dword [esp], xmm0
push 0xf
push 2
sub esp, 0xc
mov eax, esp
mov ecx, dword [ebp - 0x12b8]
mov dword [eax], ecx
mov edx, dword [ebp - 0x12b4]
mov dword [eax + 4], edx
mov ecx, dword [ebp - 0x12b0]
mov dword [eax + 8], ecx
mov ecx, dword [ebp - 0x1290]
call fcn.005e0200
mov dword [ebp - 0x1a74], eax
jmp 0x8d2116
mov dword [ebp - 0x1a74], 0
mov edx, dword [ebp - 0x1a74]
mov dword [ebp - 0x1284], edx
mov dword [ebp - 4], 0xffffffff
mov eax, dword [ebp - 0x1284]
mov dword [ebp - 0x368], eax
mov eax, dword [0xc62eb8]
mov ecx, dword [eax + 0x2c]
mov dword [ebp - 0x1a74], ecx
mov edx, dword [ebp - 0x368]
push edx
mov ecx, dword [ebp - 0x1a74]
call fcn.005e2177
push 0xc0
call fcn.005de946
add esp, 4
mov dword [ebp - 0x12d0], eax
mov dword [ebp - 4], 0x21
cmp dword [ebp - 0x12d0], 0
je 0x8d21ad
push 0xc0
mov ecx, dword [ebp - 0x12d0]
call fcn.005e38f1
push ecx
movss xmm0, dword [0x9b04e0]
movss dword [esp], xmm0
push 7
push 2
mov ecx, dword [ebp - 0x12d0]
call fcn.005e3a95
mov dword [ebp - 0x1a74], eax
jmp 0x8d21b7
mov dword [ebp - 0x1a74], 0
mov eax, dword [ebp - 0x1a74]
mov dword [ebp - 0x12c4], eax
mov dword [ebp - 4], 0xffffffff
mov ecx, dword [ebp - 0x12c4]
mov dword [ebp - 0x374], ecx
mov eax, dword [ebp - 0x374]
mov dword [eax + 0x6c], 1
mov eax, dword [ebp - 0x374]
mov ecx, dword [eax]
mov edx, dword [ecx + 0x44]
mov dword [ebp - 0x1a74], edx
mov esi, esp
push 0xffaa3300
mov ecx, dword [ebp - 0x374]
call dword [ebp - 0x1a74]
cmp esi, esp
call fcn.005e11e1
mov eax, dword [ebp - 0x374]
mov ecx, dword [eax]
mov edx, dword [ecx + 0x3c]
mov dword [ebp - 0x1a74], edx
sub esp, 8
mov ecx, esp
mov dword [ebp - 0x12dc], esp
push ecx
movss xmm0, dword [ebp - 0x80]
movss dword [esp], xmm0
push ecx
movss xmm0, dword [ebp - 0x84]
movss dword [esp], xmm0
call fcn.005de612
mov ecx, dword [ebp - 0x374]
call dword [ebp - 0x1a74]
mov eax, dword [ebp - 0x374]
mov dword [eax + 0xa0], 0x5dc
mov eax, dword [0xc62eb8]
mov ecx, dword [eax + 0x2c]
mov dword [ebp - 0x1a74], ecx
mov edx, dword [ebp - 0x374]
push edx
mov ecx, dword [ebp - 0x1a74]
call fcn.005e2177
push 0
push 0
push 0x24
call fcn.005de2e3
add esp, 0xc
jmp 0x8d50ae
mov eax, dword [ebp - 0x1c]
movsx ecx, word [eax + 0x6d0]
cmp ecx, 0x30
je 0x8d22b9
mov eax, dword [ebp - 0x1c]
movsx ecx, word [eax + 0x6d0]
cmp ecx, 0x31
jne 0x8d268c
movss xmm0, dword [ebp - 0x80]
subss xmm0, dword [0x9b04e0]
movss dword [ebp - 0x80], xmm0
push 0x94
call fcn.005de946
add esp, 4
mov dword [ebp - 0x12f4], eax
mov dword [ebp - 4], 0x22
cmp dword [ebp - 0x12f4], 0
je 0x8d233a
push 0x94
mov ecx, dword [ebp - 0x12f4]
call fcn.005deef0
push ecx
movss xmm0, dword [0x9b0640]
movss dword [esp], xmm0
push 3
sub esp, 0xc
mov eax, esp
mov ecx, dword [ebp - 0x84]
mov dword [eax], ecx
mov edx, dword [ebp - 0x80]
mov dword [eax + 4], edx
mov ecx, dword [ebp - 0x7c]
mov dword [eax + 8], ecx
mov ecx, dword [ebp - 0x12f4]
call fcn.005e0e94
mov dword [ebp - 0x1a74], eax
jmp 0x8d2344
mov dword [ebp - 0x1a74], 0
mov edx, dword [ebp - 0x1a74]
mov dword [ebp - 0x12e8], edx
mov dword [ebp - 4], 0xffffffff
mov eax, dword [ebp - 0x12e8]
mov dword [ebp - 0x380], eax
mov eax, dword [0xc62eb8]
mov ecx, dword [eax + 0x2c]
mov dword [ebp - 0x1a74], ecx
mov edx, dword [ebp - 0x380]
push edx
mov ecx, dword [ebp - 0x1a74]
call fcn.005e2177
push 0x1c0
call fcn.005de946
add esp, 4
mov dword [ebp - 0x130c], eax
mov dword [ebp - 4], 0x23
cmp dword [ebp - 0x130c], 0
je 0x8d241b
push 0x1c0
mov ecx, dword [ebp - 0x130c]
call fcn.005dfc4c
mov eax, dword [ebp - 0x1c]
mov ecx, dword [eax + 0x6cc]
push ecx
mov edx, dword [ebp - 0x1c]
movsx eax, word [edx + 0x6d0]
sub eax, 0x30
push eax
sub esp, 0xc
mov ecx, esp
mov edx, dword [ebp - 0x98]
mov dword [ecx], edx
mov eax, dword [ebp - 0x94]
mov dword [ecx + 4], eax
mov edx, dword [ebp - 0x90]
mov dword [ecx + 8], edx
sub esp, 0xc
mov eax, esp
mov ecx, dword [ebp - 0x84]
mov dword [eax], ecx
mov edx, dword [ebp - 0x80]
mov dword [eax + 4], edx
mov ecx, dword [ebp - 0x7c]
mov dword [eax + 8], ecx
push 0x14
mov ecx, dword [ebp - 0x130c]
call fcn.005e19d4
mov dword [ebp - 0x1a74], eax
jmp 0x8d2425
mov dword [ebp - 0x1a74], 0
mov edx, dword [ebp - 0x1a74]
mov dword [ebp - 0x1300], edx
mov dword [ebp - 4], 0xffffffff
mov eax, dword [ebp - 0x1300]
mov dword [ebp - 0x38c], eax
mov eax, dword [ebp - 0x1c]
movsx ecx, word [eax + 0x6d0]
cmp ecx, 0x30
jne 0x8d2521
mov eax, 4
mov ecx, dword [ebp - 0x38c]
mov word [ecx + 0xf8], ax
mov eax, 4
mov ecx, dword [ebp - 0x38c]
mov word [ecx + 0xf4], ax
mov eax, 1
mov ecx, dword [ebp - 0x38c]
mov word [ecx + 0xfa], ax
mov eax, 1
mov ecx, dword [ebp - 0x38c]
mov word [ecx + 0xf6], ax
mov eax, dword [ebp - 0x38c]
mov ecx, dword [eax]
mov edx, dword [ecx + 0x80]
mov dword [ebp - 0x1a74], edx
mov esi, esp
push 0
mov ecx, dword [ebp - 0x38c]
call dword [ebp - 0x1a74]
cmp esi, esp
call fcn.005e11e1
mov eax, dword [ebp - 0x38c]
mov ecx, dword [eax + 0x60]
movss xmm0, dword [0x9b0660]
movss dword [ecx + 0x24], xmm0
mov eax, dword [ebp - 0x38c]
mov ecx, dword [eax + 0x60]
movss xmm0, dword [0x9b0660]
movss dword [ecx + 0x28], xmm0
mov eax, dword [ebp - 0x38c]
mov ecx, dword [eax + 0x60]
movss xmm0, dword [0x9b0660]
movss dword [ecx + 0x2c], xmm0
mov eax, dword [ebp - 0x38c]
mov dword [eax + 0x12c], 1
jmp 0x8d25f3
mov eax, dword [ebp - 0x1c]
movsx ecx, word [eax + 0x6d0]
cmp ecx, 0x31
jne 0x8d25f3
mov eax, 2
mov ecx, dword [ebp - 0x38c]
mov word [ecx + 0xf8], ax
mov eax, 2
mov ecx, dword [ebp - 0x38c]
mov word [ecx + 0xf4], ax
xor eax, eax
mov ecx, dword [ebp - 0x38c]
mov word [ecx + 0xfa], ax
xor eax, eax
mov ecx, dword [ebp - 0x38c]
mov word [ecx + 0xf6], ax
mov eax, dword [ebp - 0x38c]
mov ecx, dword [eax]
mov edx, dword [ecx + 0x80]
mov dword [ebp - 0x1a74], edx
mov esi, esp
push 0
mov ecx, dword [ebp - 0x38c]
call dword [ebp - 0x1a74]
cmp esi, esp
call fcn.005e11e1
mov eax, dword [ebp - 0x38c]
mov ecx, dword [eax + 0x60]
movss xmm0, dword [0x9b0650]
movss dword [ecx + 0x24], xmm0
mov eax, dword [ebp - 0x38c]
mov ecx, dword [eax + 0x60]
movss xmm0, dword [0x9b0650]
movss dword [ecx + 0x28], xmm0
mov eax, dword [ebp - 0x38c]
mov ecx, dword [eax + 0x60]
movss xmm0, dword [0x9b0650]
movss dword [ecx + 0x2c], xmm0
mov eax, dword [ebp - 0x38c]
mov dword [eax + 0x12c], 0
mov eax, dword [ebp - 0x38c]
movss xmm0, dword [0x9b04e0]
movss dword [eax + 0x138], xmm0
mov eax, dword [ebp - 0x38c]
movss xmm0, dword [0x9b04e0]
movss dword [eax + 0x13c], xmm0
mov eax, dword [ebp - 0x38c]
movss xmm0, dword [0x9b04e0]
movss dword [eax + 0x140], xmm0
mov eax, dword [ebp - 0x38c]
mov dword [eax + 0x168], 1
mov eax, dword [ebp - 0x38c]
mov ecx, dword [ebp - 0x1c]
mov edx, dword [ecx + 0x34]
mov dword [eax + 0x134], edx
mov eax, dword [ebp - 0x38c]
mov dword [eax + 0x130], 2
mov eax, dword [0xc62eb8]
mov ecx, dword [eax + 0x2c]
mov dword [ebp - 0x1a74], ecx
mov edx, dword [ebp - 0x38c]
push edx
mov ecx, dword [ebp - 0x1a74]
call fcn.005e2177
jmp 0x8d50ae
mov eax, dword [ebp - 0x1c]
movsx ecx, word [eax + 0x6d0]
cmp ecx, 0x32
jne 0x8d2959
movss xmm0, dword [ebp - 0x84]
subss xmm0, dword [0x9b0664]
movss dword [ebp - 0x84], xmm0
movss xmm0, dword [ebp - 0x80]
subss xmm0, dword [0x9b04e0]
movss dword [ebp - 0x80], xmm0
movss xmm0, dword [ebp - 0x7c]
addss xmm0, dword [0x9b0664]
movss dword [ebp - 0x7c], xmm0
mov dword [ebp - 0x398], 0
jmp 0x8d26f6
mov eax, dword [ebp - 0x398]
add eax, 1
mov dword [ebp - 0x398], eax
cmp dword [ebp - 0x398], 3
jge 0x8d2954
cvtsi2ss xmm0, dword [ebp - 0x398]
mulss xmm0, dword [0x9b04c0]
addss xmm0, dword [ebp - 0x84]
movss dword [ebp - 0x84], xmm0
cvtsi2ss xmm0, dword [ebp - 0x398]
mulss xmm0, dword [0x9b04c0]
movss xmm1, dword [ebp - 0x7c]
subss xmm1, xmm0
movss dword [ebp - 0x7c], xmm1
push 0x1c0
call fcn.005de946
add esp, 4
mov dword [ebp - 0x1324], eax
mov dword [ebp - 4], 0x24
cmp dword [ebp - 0x1324], 0
je 0x8d27d9
push 0x1c0
mov ecx, dword [ebp - 0x1324]
call fcn.005dfc4c
mov eax, dword [ebp - 0x1c]
mov ecx, dword [eax + 0x6cc]
push ecx
mov edx, dword [ebp - 0x1c]
movsx eax, word [edx + 0x6d0]
sub eax, 0x30
push eax
sub esp, 0xc
mov ecx, esp
mov edx, dword [ebp - 0x98]
mov dword [ecx], edx
mov eax, dword [ebp - 0x94]
mov dword [ecx + 4], eax
mov edx, dword [ebp - 0x90]
mov dword [ecx + 8], edx
sub esp, 0xc
mov eax, esp
mov ecx, dword [ebp - 0x84]
mov dword [eax], ecx
mov edx, dword [ebp - 0x80]
mov dword [eax + 4], edx
mov ecx, dword [ebp - 0x7c]
mov dword [eax + 8], ecx
push 0x20
mov ecx, dword [ebp - 0x1324]
call fcn.005e19d4
mov dword [ebp - 0x1a74], eax
jmp 0x8d27e3
mov dword [ebp - 0x1a74], 0
mov edx, dword [ebp - 0x1a74]
mov dword [ebp - 0x1318], edx
mov dword [ebp - 4], 0xffffffff
mov eax, dword [ebp - 0x1318]
mov dword [ebp - 0x3a4], eax
xor eax, eax
mov ecx, dword [ebp - 0x3a4]
mov word [ecx + 0xf8], ax
xor eax, eax
mov ecx, dword [ebp - 0x3a4]
mov word [ecx + 0xf4], ax
xor eax, eax
mov ecx, dword [ebp - 0x3a4]
mov word [ecx + 0xfa], ax
xor eax, eax
mov ecx, dword [ebp - 0x3a4]
mov word [ecx + 0xf6], ax
mov eax, dword [ebp - 0x3a4]
mov ecx, dword [eax]
mov edx, dword [ecx + 0x80]
mov dword [ebp - 0x1a74], edx
mov esi, esp
push 0
mov ecx, dword [ebp - 0x3a4]
call dword [ebp - 0x1a74]
cmp esi, esp
call fcn.005e11e1
mov eax, dword [ebp - 0x3a4]
mov ecx, dword [eax + 0x60]
movss xmm0, dword [0x9b0548]
movss dword [ecx + 0x24], xmm0
mov eax, dword [ebp - 0x3a4]
mov ecx, dword [eax + 0x60]
movss xmm0, dword [0x9b0548]
movss dword [ecx + 0x28], xmm0
mov eax, dword [ebp - 0x3a4]
mov ecx, dword [eax + 0x60]
movss xmm0, dword [0x9b0548]
movss dword [ecx + 0x2c], xmm0
mov eax, dword [ebp - 0x3a4]
mov dword [eax + 0x12c], 1
mov eax, dword [ebp - 0x3a4]
movss xmm0, dword [0x9b04e0]
movss dword [eax + 0x138], xmm0
mov eax, dword [ebp - 0x3a4]
movss xmm0, dword [0x9b04e0]
movss dword [eax + 0x13c], xmm0
mov eax, dword [ebp - 0x3a4]
movss xmm0, dword [0x9b04e0]
movss dword [eax + 0x140], xmm0
mov eax, dword [ebp - 0x3a4]
mov dword [eax + 0x168], 1
mov eax, dword [ebp - 0x3a4]
mov ecx, dword [ebp - 0x1c]
mov edx, dword [ecx + 0x34]
mov dword [eax + 0x134], edx
mov eax, dword [ebp - 0x3a4]
mov dword [eax + 0x130], 4
mov eax, dword [0xc62eb8]
mov ecx, dword [eax + 0x2c]
mov dword [ebp - 0x1a74], ecx
mov edx, dword [ebp - 0x3a4]
push edx
mov ecx, dword [ebp - 0x1a74]
call fcn.005e2177
jmp 0x8d26e7
jmp 0x8d50ae
mov eax, dword [ebp - 0x1c]
movsx ecx, word [eax + 0x6d0]
cmp ecx, 0x33
jne 0x8d2a90
mov eax, dword [ebp - 0x1c]
push ecx
movss xmm0, dword [eax + 0x2c]
movss dword [esp], xmm0
mov ecx, dword [ebp - 0x1c]
push ecx
movss xmm0, dword [ecx + 0x30]
movss dword [esp], xmm0
mov edx, dword [ebp - 0x1c]
push ecx
movss xmm0, dword [edx + 0x28]
movss dword [esp], xmm0
lea ecx, [ebp - 0x3b8]
call fcn.005e0ce6
push 0xac
call fcn.005de946
add esp, 4
mov dword [ebp - 0x133c], eax
mov dword [ebp - 4], 0x25
cmp dword [ebp - 0x133c], 0
je 0x8d2a31
push 0xac
mov ecx, dword [ebp - 0x133c]
call fcn.005e3f13
mov eax, dword [ebp - 0x1c]
mov ecx, dword [eax + 0x6cc]
push ecx
push 1
sub esp, 0xc
mov edx, esp
mov eax, dword [ebp - 0x3b8]
mov dword [edx], eax
mov ecx, dword [ebp - 0x3b4]
mov dword [edx + 4], ecx
mov eax, dword [ebp - 0x3b0]
mov dword [edx + 8], eax
sub esp, 0xc
mov ecx, esp
mov edx, dword [ebp - 0x3b8]
mov dword [ecx], edx
mov eax, dword [ebp - 0x3b4]
mov dword [ecx + 4], eax
mov edx, dword [ebp - 0x3b0]
mov dword [ecx + 8], edx
mov ecx, dword [ebp - 0x133c]
call fcn.005e0b51
mov dword [ebp - 0x1a74], eax
jmp 0x8d2a3b
mov dword [ebp - 0x1a74], 0
mov eax, dword [ebp - 0x1a74]
mov dword [ebp - 0x1330], eax
mov dword [ebp - 4], 0xffffffff
mov ecx, dword [ebp - 0x1330]
mov dword [ebp - 0x3c4], ecx
mov eax, dword [0xc62eb8]
mov ecx, dword [eax + 0x2c]
mov dword [ebp - 0x1a74], ecx
mov edx, dword [ebp - 0x3c4]
push edx
mov ecx, dword [ebp - 0x1a74]
call fcn.005e2177
push 0
push 0
push 0x9d
call fcn.005de2e3
add esp, 0xc
jmp 0x8d50ae
mov eax, dword [ebp - 0x1c]
movsx ecx, word [eax + 0x6d0]
cmp ecx, 0x35
jne 0x8d2d84
mov dword [ebp - 0x3d0], 0
jmp 0x8d2abe
mov eax, dword [ebp - 0x3d0]
add eax, 1
mov dword [ebp - 0x3d0], eax
cmp dword [ebp - 0x3d0], 5
jge 0x8d2d7f
mov esi, esp
call dword [sym.imp.ucrtbased.dll_rand]
cmp esi, esp
call fcn.005e11e1
cdq
mov ecx, 0xa
idiv ecx
add edx, 0xa
mov dword [ebp - 0x3dc], edx
cvtsi2ss xmm0, dword [ebp - 0x3d0]
mulss xmm0, dword [0x9b0658]
movss dword [ebp - 0x3e8], xmm0
push 0x184
call fcn.005de946
add esp, 4
mov dword [ebp - 0x1354], eax
mov dword [ebp - 4], 0x26
cmp dword [ebp - 0x1354], 0
je 0x8d2be3
push 0x184
mov ecx, dword [ebp - 0x1354]
call fcn.005dfc3d
push 0x50
push 1
push ecx
movss xmm0, dword [0x9b1f2c]
movss dword [esp], xmm0
cvtsi2ss xmm0, dword [ebp - 0x3dc]
mulss xmm0, dword [0x9b0640]
addss xmm0, dword [0x9b04c0]
addss xmm0, dword [ebp - 0x3e8]
push ecx
movss dword [esp], xmm0
cvtsi2ss xmm0, dword [ebp - 0x3dc]
mulss xmm0, dword [0x9b0658]
addss xmm0, dword [0x9b04c0]
addss xmm0, dword [ebp - 0x3e8]
push ecx
movss dword [esp], xmm0
cvtsi2ss xmm0, dword [ebp - 0x3dc]
mulss xmm0, dword [0x9b0640]
addss xmm0, dword [0x9b04c0]
addss xmm0, dword [ebp - 0x3e8]
push ecx
movss dword [esp], xmm0
imul eax, dword [ebp - 0x3d0], 0xc8
add eax, 0x4b0
push eax
push 0
mov ecx, dword [ebp - 0x1354]
call fcn.005e33d8
mov dword [ebp - 0x1a74], eax
jmp 0x8d2bed
mov dword [ebp - 0x1a74], 0
mov ecx, dword [ebp - 0x1a74]
mov dword [ebp - 0x1348], ecx
mov dword [ebp - 4], 0xffffffff
mov edx, dword [ebp - 0x1348]
mov dword [ebp - 0x3f4], edx
mov esi, esp
call dword [sym.imp.ucrtbased.dll_rand]
cmp esi, esp
call fcn.005e11e1
cdq
mov ecx, 0xa
idiv ecx
sub edx, 5
cvtsi2ss xmm0, edx
mulss xmm0, dword [0x9b0628]
mov edx, dword [ebp - 0x1c]
addss xmm0, dword [edx + 0x28]
movss dword [ebp - 0x1a74], xmm0
mov eax, dword [ebp - 0x1c]
movss xmm0, dword [eax + 0x30]
movss dword [ebp - 0x1a78], xmm0
mov esi, esp
call dword [sym.imp.ucrtbased.dll_rand]
cmp esi, esp
call fcn.005e11e1
cdq
mov ecx, 0xa
idiv ecx
sub edx, 5
cvtsi2ss xmm0, edx
mulss xmm0, dword [0x9b0628]
mov edx, dword [ebp - 0x1c]
addss xmm0, dword [edx + 0x2c]
movss dword [ebp - 0x1a7c], xmm0
push ecx
movss xmm0, dword [ebp - 0x1a7c]
movss dword [esp], xmm0
push ecx
movss xmm0, dword [ebp - 0x1a78]
movss dword [esp], xmm0
push ecx
movss xmm0, dword [ebp - 0x1a74]
movss dword [esp], xmm0
lea ecx, [ebp - 0x1368]
call fcn.005e0ce6
mov eax, dword [ebp - 0x3f4]
add eax, 0x74
mov ecx, dword [ebp - 0x1368]
mov dword [eax], ecx
mov edx, dword [ebp - 0x1364]
mov dword [eax + 4], edx
mov ecx, dword [ebp - 0x1360]
mov dword [eax + 8], ecx
mov eax, dword [ebp - 0x3f4]
add eax, 0x74
mov ecx, dword [ebp - 0x3f4]
add ecx, 0x14c
mov edx, dword [eax]
mov dword [ecx], edx
mov edx, dword [eax + 4]
mov dword [ecx + 4], edx
mov eax, dword [eax + 8]
mov dword [ecx + 8], eax
mov eax, dword [ebp - 0x3f4]
mov dword [eax + 0x6c], 1
mov eax, dword [ebp - 0x3f4]
mov dword [eax + 0x100], 0
mov eax, dword [ebp - 0x3f4]
mov dword [eax + 0x148], 1
mov eax, dword [ebp - 0x3f4]
mov ecx, dword [eax]
mov edx, dword [ecx + 0x3c]
mov dword [ebp - 0x1a74], edx
mov esi, esp
push 0xffffffffffffffff
mov ecx, dword [ebp - 0x3f4]
call dword [ebp - 0x1a74]
cmp esi, esp
call fcn.005e11e1
mov eax, dword [0xc62eb8]
mov ecx, dword [eax + 0x2c]
mov dword [ebp - 0x1a74], ecx
mov edx, dword [ebp - 0x3f4]
push edx
mov ecx, dword [ebp - 0x1a74]
call fcn.005e2177
jmp 0x8d2aaf
jmp 0x8d50ae
mov eax, dword [ebp - 0x1c]
movsx ecx, word [eax + 0x6d0]
cmp ecx, 0x48
je 0x8d2da6
mov eax, dword [ebp - 0x1c]
movsx ecx, word [eax + 0x6d0]
cmp ecx, 0x50
jne 0x8d31a5
mov eax, dword [ebp - 0x1c]
cmp dword [eax + 0x6cc], 0
je 0x8d31a0
mov dword [ebp - 0x400], 0
mov eax, dword [ebp - 0x1c]
movsx ecx, word [eax + 0x6d0]
cmp ecx, 0x50
jne 0x8d2dd9
mov dword [ebp - 0x400], 1
mov eax, dword [0xc62ea4]
mov edx, dword [eax]
mov esi, esp
mov ecx, dword [0xc62ea4]
mov eax, dword [edx + 0x6c]
call eax
cmp esi, esp
call fcn.005e11e1
mov dword [ebp - 0x40c], eax
mov eax, dword [ebp - 0x40c]
mov ecx, dword [eax + 0x54]
cmp ecx, dword [ebp - 0x1c]
jne 0x8d2e15
push 1
mov ecx, dword [ebp - 0x40c]
call fcn.005deb71
push 0xc0
call fcn.005de946
add esp, 4
mov dword [ebp - 0x1380], eax
mov dword [ebp - 4], 0x27
cmp dword [ebp - 0x1380], 0
je 0x8d2e75
push 0xc0
mov ecx, dword [ebp - 0x1380]
call fcn.005e38f1
push ecx
movss xmm0, dword [0x9b04e0]
movss dword [esp], xmm0
push 7
mov eax, dword [ebp - 0x400]
add eax, 2
push eax
mov ecx, dword [ebp - 0x1380]
call fcn.005e3a95
mov dword [ebp - 0x1a74], eax
jmp 0x8d2e7f
mov dword [ebp - 0x1a74], 0
mov ecx, dword [ebp - 0x1a74]
mov dword [ebp - 0x1374], ecx
mov dword [ebp - 4], 0xffffffff
mov edx, dword [ebp - 0x1374]
mov dword [ebp - 0x418], edx
mov eax, dword [ebp - 0x418]
mov ecx, dword [eax]
mov edx, dword [ecx + 0x44]
mov dword [ebp - 0x1a74], edx
mov eax, 4
shl eax, 0
mov esi, esp
mov ecx, dword [ebp - 0x400]
mov edx, dword [eax + ecx*8 + 0x9b8f84]
push edx
mov ecx, dword [ebp - 0x418]
call dword [ebp - 0x1a74]
cmp esi, esp
call fcn.005e11e1
mov eax, dword [ebp - 0x418]
mov dword [eax + 0x6c], 1
mov eax, dword [ebp - 0x418]
mov ecx, dword [eax]
mov edx, dword [ecx + 0x3c]
mov dword [ebp - 0x1a74], edx
sub esp, 8
mov ecx, esp
mov dword [ebp - 0x138c], esp
mov eax, dword [ebp - 0x1c]
mov edx, dword [eax + 0x6cc]
mov eax, dword [ebp - 0x1c]
mov eax, dword [eax + 0x6cc]
push ecx
movss xmm0, dword [eax + 0x2c]
movss dword [esp], xmm0
push ecx
movss xmm0, dword [edx + 0x28]
movss dword [esp], xmm0
call fcn.005de612
mov ecx, dword [ebp - 0x418]
call dword [ebp - 0x1a74]
mov eax, dword [ebp - 0x418]
mov dword [eax + 0xa0], 0x320
mov eax, dword [0xc62eb8]
mov ecx, dword [eax + 0x2c]
mov dword [ebp - 0x1a74], ecx
mov edx, dword [ebp - 0x418]
push edx
mov ecx, dword [ebp - 0x1a74]
call fcn.005e2177
mov dword [ebp - 0x424], 0
jmp 0x8d2f87
mov eax, dword [ebp - 0x424]
add eax, 1
mov dword [ebp - 0x424], eax
cmp dword [ebp - 0x424], 2
jge 0x8d3187
push 0x184
call fcn.005de946
add esp, 4
mov dword [ebp - 0x13a4], eax
mov dword [ebp - 4], 0x28
cmp dword [ebp - 0x13a4], 0
je 0x8d306d
push 0x184
mov ecx, dword [ebp - 0x13a4]
call fcn.005dfc3d
push 0x50
push 1
cvtsi2ss xmm0, dword [ebp - 0x400]
mulss xmm0, dword [0x9b87ac]
addss xmm0, dword [0x9b1f34]
push ecx
movss dword [esp], xmm0
cvtsi2ss xmm0, dword [ebp - 0x424]
mulss xmm0, dword [0x9b0650]
addss xmm0, dword [0x9b04e0]
push ecx
movss dword [esp], xmm0
cvtsi2ss xmm0, dword [ebp - 0x424]
mulss xmm0, dword [0x9b0650]
addss xmm0, dword [0x9b04e0]
push ecx
movss dword [esp], xmm0
cvtsi2ss xmm0, dword [ebp - 0x424]
mulss xmm0, dword [0x9b0650]
addss xmm0, dword [0x9b04e0]
push ecx
movss dword [esp], xmm0
push 0x2bc
mov eax, dword [ebp - 0x400]
lea ecx, [eax*4 + 0x38]
push ecx
mov ecx, dword [ebp - 0x13a4]
call fcn.005e33d8
mov dword [ebp - 0x1a74], eax
jmp 0x8d3077
mov dword [ebp - 0x1a74], 0
mov edx, dword [ebp - 0x1a74]
mov dword [ebp - 0x1398], edx
mov dword [ebp - 4], 0xffffffff
mov eax, dword [ebp - 0x1398]
mov dword [ebp - 0x430], eax
mov eax, dword [ebp - 0x430]
mov ecx, dword [eax]
mov edx, dword [ecx + 0x3c]
mov dword [ebp - 0x1a74], edx
mov eax, dword [ebp - 0x424]
shl eax, 2
mov esi, esp
mov ecx, dword [ebp - 0x400]
mov edx, dword [eax + ecx*8 + 0x9b8f84]
push edx
mov ecx, dword [ebp - 0x430]
call dword [ebp - 0x1a74]
cmp esi, esp
call fcn.005e11e1
mov eax, dword [ebp - 0x430]
mov dword [eax + 0x6c], 1
mov eax, dword [ebp - 0x430]
mov dword [eax + 0x104], 1
mov eax, dword [ebp - 0x1c]
mov ecx, dword [eax + 0x6cc]
mov edx, dword [ebp - 0x1c]
mov eax, dword [edx + 0x6cc]
movss xmm0, dword [eax + 0x30]
addss xmm0, dword [0x9b04e0]
mov edx, dword [ebp - 0x1c]
mov eax, dword [edx + 0x6cc]
push ecx
movss xmm1, dword [eax + 0x2c]
movss dword [esp], xmm1
push ecx
movss dword [esp], xmm0
push ecx
movss xmm0, dword [ecx + 0x28]
movss dword [esp], xmm0
lea ecx, [ebp - 0x13b8]
call fcn.005e0ce6
mov ecx, dword [ebp - 0x430]
add ecx, 0x74
mov edx, dword [ebp - 0x13b8]
mov dword [ecx], edx
mov eax, dword [ebp - 0x13b4]
mov dword [ecx + 4], eax
mov edx, dword [ebp - 0x13b0]
mov dword [ecx + 8], edx
mov eax, dword [0xc62eb8]
mov ecx, dword [eax + 0x2c]
mov dword [ebp - 0x1a74], ecx
mov edx, dword [ebp - 0x430]
push edx
mov ecx, dword [ebp - 0x1a74]
call fcn.005e2177
jmp 0x8d2f78
push 0
push 0
imul eax, dword [ebp - 0x400], 0xb
add eax, 0xa0
push eax
call fcn.005de2e3
add esp, 0xc
jmp 0x8d50ae
mov eax, dword [ebp - 0x1c]
movsx ecx, word [eax + 0x6d0]
cmp ecx, 0x4b
jne 0x8d33b9
mov dword [ebp - 0x43c], 0
jmp 0x8d31d3
mov eax, dword [ebp - 0x43c]
add eax, 1
mov dword [ebp - 0x43c], eax
cmp dword [ebp - 0x43c], 5
jge 0x8d33a3
push 0x184
call fcn.005de946
add esp, 4
mov dword [ebp - 0x13d0], eax
mov dword [ebp - 4], 0x29
cmp dword [ebp - 0x13d0], 0
je 0x8d32a3
push 0x184
mov ecx, dword [ebp - 0x13d0]
call fcn.005dfc3d
push 0x50
push 1
push ecx
xorps xmm0, xmm0
movss dword [esp], xmm0
cvtsi2ss xmm0, dword [ebp - 0x43c]
mulss xmm0, dword [str.333_]
addss xmm0, dword [0x9b04e0]
push ecx
movss dword [esp], xmm0
cvtsi2ss xmm0, dword [ebp - 0x43c]
mulss xmm0, dword [0x9b0664]
addss xmm0, dword [0x9b04e0]
push ecx
movss dword [esp], xmm0
cvtsi2ss xmm0, dword [ebp - 0x43c]
mulss xmm0, dword [str.333_]
addss xmm0, dword [0x9b04e0]
push ecx
movss dword [esp], xmm0
imul eax, dword [ebp - 0x43c], 0xc8
add eax, 0x1f4
push eax
push 0x38
mov ecx, dword [ebp - 0x13d0]
call fcn.005e33d8
mov dword [ebp - 0x1a74], eax
jmp 0x8d32ad
mov dword [ebp - 0x1a74], 0
mov ecx, dword [ebp - 0x1a74]
mov dword [ebp - 0x13c4], ecx
mov dword [ebp - 4], 0xffffffff
mov edx, dword [ebp - 0x13c4]
mov dword [ebp - 0x448], edx
mov eax, dword [ebp - 0x448]
mov ecx, dword [eax]
mov edx, dword [ecx + 0x3c]
mov dword [ebp - 0x1a74], edx
mov esi, esp
push 0xff55aaff
mov ecx, dword [ebp - 0x448]
call dword [ebp - 0x1a74]
cmp esi, esp
call fcn.005e11e1
mov eax, dword [ebp - 0x448]
mov dword [eax + 0x6c], 1
mov eax, dword [ebp - 0x448]
mov dword [eax + 0x104], 1
cvtsi2ss xmm0, dword [ebp - 0x43c]
mulss xmm0, dword [0x9b0658]
addss xmm0, dword [ebp - 0x80]
subss xmm0, dword [0x9b0664]
push ecx
movss xmm1, dword [ebp - 0x7c]
movss dword [esp], xmm1
push ecx
movss dword [esp], xmm0
push ecx
movss xmm0, dword [ebp - 0x84]
movss dword [esp], xmm0
lea ecx, [ebp - 0x13e4]
call fcn.005e0ce6
mov eax, dword [ebp - 0x448]
add eax, 0x74
mov ecx, dword [ebp - 0x13e4]
mov dword [eax], ecx
mov edx, dword [ebp - 0x13e0]
mov dword [eax + 4], edx
mov ecx, dword [ebp - 0x13dc]
mov dword [eax + 8], ecx
mov eax, dword [0xc62eb8]
mov ecx, dword [eax + 0x2c]
mov dword [ebp - 0x1a74], ecx
mov edx, dword [ebp - 0x448]
push edx
mov ecx, dword [ebp - 0x1a74]
call fcn.005e2177
jmp 0x8d31c4
push 0
push 0
push 0xae
call fcn.005de2e3
add esp, 0xc
jmp 0x8d50ae
mov eax, dword [ebp - 0x1c]
movsx ecx, word [eax + 0x6d0]
cmp ecx, 0x4c
jne 0x8d3539
mov dword [ebp - 0x454], 0
jmp 0x8d33e7
mov eax, dword [ebp - 0x454]
add eax, 1
mov dword [ebp - 0x454], eax
cmp dword [ebp - 0x454], 5
jge 0x8d3534
push 0xcc
call fcn.005de946
add esp, 4
mov dword [ebp - 0x13fc], eax
mov dword [ebp - 4], 0x2a
cmp dword [ebp - 0x13fc], 0
je 0x8d3455
push 0xcc
mov ecx, dword [ebp - 0x13fc]
call fcn.005de694
push 1
push ecx
xorps xmm0, xmm0
movss dword [esp], xmm0
mov eax, dword [ebp - 0x454]
mov ecx, dword [eax*4 + 0x9b8f94]
push ecx
push 0xc
mov ecx, dword [ebp - 0x13fc]
call fcn.005e0935
mov dword [ebp - 0x1a74], eax
jmp 0x8d345f
mov dword [ebp - 0x1a74], 0
mov edx, dword [ebp - 0x1a74]
mov dword [ebp - 0x13f0], edx
mov dword [ebp - 4], 0xffffffff
mov eax, dword [ebp - 0x13f0]
mov dword [ebp - 0x460], eax
mov eax, dword [ebp - 0x460]
mov dword [eax + 0xa4], 0
mov eax, dword [ebp - 0x1c]
add eax, 0x50
mov ecx, dword [ebp - 0x460]
add ecx, 0x74
mov edx, dword [eax]
mov dword [ecx], edx
mov edx, dword [eax + 4]
mov dword [ecx + 4], edx
mov eax, dword [eax + 8]
mov dword [ecx + 8], eax
mov eax, dword [ebp - 0x460]
movss xmm0, dword [eax + 0x78]
addss xmm0, dword [0x9b4344]
mov ecx, dword [ebp - 0x460]
movss dword [ecx + 0x78], xmm0
imul eax, dword [ebp - 0x454], 0x32
add eax, 0x514
mov ecx, dword [ebp - 0x460]
mov dword [ecx + 0xb0], eax
mov eax, dword [ebp - 0x460]
movss xmm0, dword [0x9b04e0]
movss dword [eax + 0x98], xmm0
mov eax, dword [ebp - 0x460]
movss xmm0, dword [0x9b04e0]
movss dword [eax + 0x9c], xmm0
mov eax, dword [0xc62eb8]
mov ecx, dword [eax + 0x2c]
mov dword [ebp - 0x1a74], ecx
mov edx, dword [ebp - 0x460]
push edx
mov ecx, dword [ebp - 0x1a74]
call fcn.005e2177
jmp 0x8d33d8
jmp 0x8d50ae
mov eax, dword [ebp - 0x1c]
movsx ecx, word [eax + 0x6d0]
cmp ecx, 0x4d
jne 0x8d3964
mov dword [ebp - 0x46c], 0
jmp 0x8d3567
mov eax, dword [ebp - 0x46c]
add eax, 1
mov dword [ebp - 0x46c], eax
cmp dword [ebp - 0x46c], 5
jge 0x8d395f
push 0x184
call fcn.005de946
add esp, 4
mov dword [ebp - 0x1414], eax
mov dword [ebp - 4], 0x2b
cmp dword [ebp - 0x1414], 0
je 0x8d3645
push 0x184
mov ecx, dword [ebp - 0x1414]
call fcn.005dfc3d
push 0x50
push 8
push ecx
movss xmm0, dword [0x9b140c]
movss dword [esp], xmm0
cvtsi2ss xmm0, dword [ebp - 0x46c]
mulss xmm0, dword [0x9b0624]
movss xmm1, dword [0x9b0650]
subss xmm1, xmm0
push ecx
movss dword [esp], xmm1
cvtsi2ss xmm0, dword [ebp - 0x46c]
mulss xmm0, dword [0x9b0624]
movss xmm1, dword [0x9b0650]
subss xmm1, xmm0
push ecx
movss dword [esp], xmm1
cvtsi2ss xmm0, dword [ebp - 0x46c]
mulss xmm0, dword [0x9b0624]
movss xmm1, dword [0x9b5224]
subss xmm1, xmm0
push ecx
movss dword [esp], xmm1
imul eax, dword [ebp - 0x46c], 0x64
add eax, 0x1f4
push eax
push 0x65
mov ecx, dword [ebp - 0x1414]
call fcn.005e33d8
mov dword [ebp - 0x1a74], eax
jmp 0x8d364f
mov dword [ebp - 0x1a74], 0
mov ecx, dword [ebp - 0x1a74]
mov dword [ebp - 0x1408], ecx
mov dword [ebp - 4], 0xffffffff
mov edx, dword [ebp - 0x1408]
mov dword [ebp - 0x478], edx
mov eax, dword [ebp - 0x478]
mov ecx, dword [eax]
mov edx, dword [ecx + 0x3c]
mov dword [ebp - 0x1a74], edx
mov esi, esp
push 0xff5500ff
mov ecx, dword [ebp - 0x478]
call dword [ebp - 0x1a74]
cmp esi, esp
call fcn.005e11e1
mov eax, dword [ebp - 0x478]
mov dword [eax + 0x6c], 1
mov eax, dword [ebp - 0x478]
mov dword [eax + 0x104], 1
mov eax, dword [ebp - 0x1c]
movss xmm0, dword [eax + 0x30]
addss xmm0, dword [0x9b0650]
cvtsi2ss xmm1, dword [ebp - 0x46c]
mulss xmm1, dword [0x9b0650]
addss xmm0, xmm1
mov ecx, dword [ebp - 0x1c]
push ecx
movss xmm1, dword [ecx + 0x2c]
movss dword [esp], xmm1
push ecx
movss dword [esp], xmm0
mov edx, dword [ebp - 0x1c]
push ecx
movss xmm0, dword [edx + 0x28]
movss dword [esp], xmm0
lea ecx, [ebp - 0x1428]
call fcn.005e0ce6
mov eax, dword [ebp - 0x478]
add eax, 0x74
mov ecx, dword [ebp - 0x1428]
mov dword [eax], ecx
mov edx, dword [ebp - 0x1424]
mov dword [eax + 4], edx
mov ecx, dword [ebp - 0x1420]
mov dword [eax + 8], ecx
mov eax, dword [0xc62eb8]
mov ecx, dword [eax + 0x2c]
mov dword [ebp - 0x1a74], ecx
mov edx, dword [ebp - 0x478]
push edx
mov ecx, dword [ebp - 0x1a74]
call fcn.005e2177
mov esi, esp
call dword [sym.imp.ucrtbased.dll_rand]
cmp esi, esp
call fcn.005e11e1
cdq
mov ecx, 5
idiv ecx
cvtsi2ss xmm0, edx
movss dword [ebp - 0x484], xmm0
push 0x184
call fcn.005de946
add esp, 4
mov dword [ebp - 0x1440], eax
mov dword [ebp - 4], 0x2c
cmp dword [ebp - 0x1440], 0
je 0x8d3832
push 0x184
mov ecx, dword [ebp - 0x1440]
call fcn.005dfc3d
push 0x50
push 8
push ecx
movss xmm0, dword [0x9b1f30]
movss dword [esp], xmm0
movss xmm0, dword [ebp - 0x484]
mulss xmm0, dword [0x9b0624]
addss xmm0, dword [0x9b0640]
push ecx
movss dword [esp], xmm0
movss xmm0, dword [ebp - 0x484]
mulss xmm0, dword [0x9b0624]
addss xmm0, dword [0x9b0640]
push ecx
movss dword [esp], xmm0
movss xmm0, dword [ebp - 0x484]
mulss xmm0, dword [0x9b0624]
addss xmm0, dword [0x9b0640]
push ecx
movss dword [esp], xmm0
imul eax, dword [ebp - 0x46c], 0x64
add eax, 0x1f4
push eax
push 0x65
mov ecx, dword [ebp - 0x1440]
call fcn.005e33d8
mov dword [ebp - 0x1a74], eax
jmp 0x8d383c
mov dword [ebp - 0x1a74], 0
mov ecx, dword [ebp - 0x1a74]
mov dword [ebp - 0x1434], ecx
mov dword [ebp - 4], 0xffffffff
mov edx, dword [ebp - 0x1434]
mov dword [ebp - 0x490], edx
mov eax, dword [ebp - 0x490]
mov ecx, dword [eax]
mov edx, dword [ecx + 0x3c]
mov dword [ebp - 0x1a74], edx
mov esi, esp
push 0xffffffffffffffff
mov ecx, dword [ebp - 0x490]
call dword [ebp - 0x1a74]
cmp esi, esp
call fcn.005e11e1
movss xmm0, dword [0x9b066c]
mulss xmm0, dword [ebp - 0x484]
divss xmm0, dword [0x9b1a5c]
mov eax, dword [ebp - 0x490]
movss dword [eax + 0x114], xmm0
mov eax, dword [ebp - 0x490]
mov dword [eax + 0x6c], 1
mov eax, dword [ebp - 0x490]
mov dword [eax + 0x104], 1
mov eax, dword [ebp - 0x1c]
movss xmm0, dword [eax + 0x30]
addss xmm0, dword [0x9b0650]
cvtsi2ss xmm1, dword [ebp - 0x46c]
mulss xmm1, dword [0x9b0650]
addss xmm0, xmm1
mov ecx, dword [ebp - 0x1c]
push ecx
movss xmm1, dword [ecx + 0x2c]
movss dword [esp], xmm1
push ecx
movss dword [esp], xmm0
mov edx, dword [ebp - 0x1c]
push ecx
movss xmm0, dword [edx + 0x28]
movss dword [esp], xmm0
lea ecx, [ebp - 0x1454]
call fcn.005e0ce6
mov eax, dword [ebp - 0x490]
add eax, 0x74
mov ecx, dword [ebp - 0x1454]
mov dword [eax], ecx
mov edx, dword [ebp - 0x1450]
mov dword [eax + 4], edx
mov ecx, dword [ebp - 0x144c]
mov dword [eax + 8], ecx
mov eax, dword [0xc62eb8]
mov ecx, dword [eax + 0x2c]
mov dword [ebp - 0x1a74], ecx
mov edx, dword [ebp - 0x490]
push edx
mov ecx, dword [ebp - 0x1a74]
call fcn.005e2177
jmp 0x8d3558
jmp 0x8d50ae
mov eax, dword [ebp - 0x1c]
movsx ecx, word [eax + 0x6d0]
cmp ecx, 0x51
jne 0x8d3b2d
mov dword [ebp - 0x49c], 0
jmp 0x8d3992
mov eax, dword [ebp - 0x49c]
add eax, 1
mov dword [ebp - 0x49c], eax
cmp dword [ebp - 0x49c], 6
jge 0x8d3b28
push 0x184
call fcn.005de946
add esp, 4
mov dword [ebp - 0x146c], eax
mov dword [ebp - 4], 0x2d
cmp dword [ebp - 0x146c], 0
je 0x8d3a3b
push 0x184
mov ecx, dword [ebp - 0x146c]
call fcn.005dfc3d
push 0x50
push 1
push ecx
xorps xmm0, xmm0
movss dword [esp], xmm0
push ecx
movss xmm0, dword [0x9b0548]
movss dword [esp], xmm0
cvtsi2ss xmm0, dword [ebp - 0x49c]
mulss xmm0, dword [0x9b0650]
addss xmm0, dword [0x9b04e0]
push ecx
movss dword [esp], xmm0
push ecx
movss xmm0, dword [0x9b0548]
movss dword [esp], xmm0
imul eax, dword [ebp - 0x49c], 0x32
add eax, 0x320
push eax
push 0x38
mov ecx, dword [ebp - 0x146c]
call fcn.005e33d8
mov dword [ebp - 0x1a74], eax
jmp 0x8d3a45
mov dword [ebp - 0x1a74], 0
mov ecx, dword [ebp - 0x1a74]
mov dword [ebp - 0x1460], ecx
mov dword [ebp - 4], 0xffffffff
mov edx, dword [ebp - 0x1460]
mov dword [ebp - 0x4a8], edx
mov eax, dword [ebp - 0x4a8]
mov ecx, dword [eax]
mov edx, dword [ecx + 0x3c]
mov dword [ebp - 0x1a74], edx
mov esi, esp
push 0xffffffffffffffff
mov ecx, dword [ebp - 0x4a8]
call dword [ebp - 0x1a74]
cmp esi, esp
call fcn.005e11e1
mov eax, dword [ebp - 0x4a8]
mov dword [eax + 0x6c], 1
mov eax, dword [ebp - 0x4a8]
mov dword [eax + 0x104], 1
movss xmm0, dword [ebp - 0x80]
addss xmm0, dword [0x9b0650]
push ecx
movss xmm1, dword [ebp - 0x7c]
movss dword [esp], xmm1
push ecx
movss dword [esp], xmm0
push ecx
movss xmm0, dword [ebp - 0x84]
movss dword [esp], xmm0
lea ecx, [ebp - 0x1480]
call fcn.005e0ce6
mov eax, dword [ebp - 0x4a8]
add eax, 0x74
mov ecx, dword [ebp - 0x1480]
mov dword [eax], ecx
mov edx, dword [ebp - 0x147c]
mov dword [eax + 4], edx
mov ecx, dword [ebp - 0x1478]
mov dword [eax + 8], ecx
mov eax, dword [0xc62eb8]
mov ecx, dword [eax + 0x2c]
mov dword [ebp - 0x1a74], ecx
mov edx, dword [ebp - 0x4a8]
push edx
mov ecx, dword [ebp - 0x1a74]
call fcn.005e2177
jmp 0x8d3983
jmp 0x8d50ae
mov eax, dword [ebp - 0x1c]
movsx ecx, word [eax + 0x6d0]
cmp ecx, 0x55
jne 0x8d3c1e
push 0x90
call fcn.005de946
add esp, 4
mov dword [ebp - 0x1498], eax
mov dword [ebp - 4], 0x2e
cmp dword [ebp - 0x1498], 0
je 0x8d3bc2
push 0x90
mov ecx, dword [ebp - 0x1498]
call fcn.005deb76
push 1
sub esp, 0xc
mov ecx, esp
mov dword [ebp - 0x14a4], esp
mov eax, dword [ebp - 0x1c]
push ecx
movss xmm0, dword [eax + 0x2c]
movss dword [esp], xmm0
mov edx, dword [ebp - 0x1c]
push ecx
movss xmm0, dword [edx + 0x30]
movss dword [esp], xmm0
mov eax, dword [ebp - 0x1c]
push ecx
movss xmm0, dword [eax + 0x28]
movss dword [esp], xmm0
call fcn.005e0ce6
mov ecx, dword [ebp - 0x1498]
call fcn.005df959
mov dword [ebp - 0x1a74], eax
jmp 0x8d3bcc
mov dword [ebp - 0x1a74], 0
mov ecx, dword [ebp - 0x1a74]
mov dword [ebp - 0x148c], ecx
mov dword [ebp - 4], 0xffffffff
mov edx, dword [ebp - 0x148c]
mov dword [ebp - 0x4b4], edx
mov eax, dword [0xc62eb8]
mov ecx, dword [eax + 0x2c]
mov dword [ebp - 0x1a74], ecx
mov edx, dword [ebp - 0x4b4]
push edx
mov ecx, dword [ebp - 0x1a74]
call fcn.005e2177
push 0
push 0
push 0x25
call fcn.005de2e3
add esp, 0xc
jmp 0x8d50ae
mov eax, dword [ebp - 0x1c]
movsx ecx, word [eax + 0x6d0]
cmp ecx, 0x57
jne 0x8d3d05
push 0x9c
call fcn.005de946
add esp, 4
mov dword [ebp - 0x14bc], eax
mov dword [ebp - 4], 0x2f
cmp dword [ebp - 0x14bc], 0
je 0x8d3cb7
push 0x9c
mov ecx, dword [ebp - 0x14bc]
call fcn.005dd384
mov eax, dword [ebp - 0x1c]
push eax
push 0
sub esp, 0xc
mov ecx, esp
mov dword [ebp - 0x14c8], esp
mov edx, dword [ebp - 0x1c]
push ecx
movss xmm0, dword [edx + 0x2c]
movss dword [esp], xmm0
mov eax, dword [ebp - 0x1c]
push ecx
movss xmm0, dword [eax + 0x30]
movss dword [esp], xmm0
mov edx, dword [ebp - 0x1c]
push ecx
movss xmm0, dword [edx + 0x28]
movss dword [esp], xmm0
call fcn.005e0ce6
mov ecx, dword [ebp - 0x14bc]
call fcn.005dffda
mov dword [ebp - 0x1a74], eax
jmp 0x8d3cc1
mov dword [ebp - 0x1a74], 0
mov eax, dword [ebp - 0x1a74]
mov dword [ebp - 0x14b0], eax
mov dword [ebp - 4], 0xffffffff
mov ecx, dword [ebp - 0x14b0]
mov dword [ebp - 0x4c0], ecx
mov eax, dword [0xc62eb8]
mov ecx, dword [eax + 0x2c]
mov dword [ebp - 0x1a74], ecx
mov edx, dword [ebp - 0x4c0]
push edx
mov ecx, dword [ebp - 0x1a74]
call fcn.005e2177
jmp 0x8d50ae
mov eax, dword [ebp - 0x1c]
movsx ecx, word [eax + 0x6d0]
cmp ecx, 0x58
jne 0x8d410e
mov eax, dword [ebp - 0x1c]
cmp dword [eax + 0x60], 0
je 0x8d410e
mov eax, dword [ebp - 0x1c]
cmp dword [eax + 0x6cc], 0
je 0x8d4109
mov dword [ebp - 0x4cc], 0
jmp 0x8d3d50
mov eax, dword [ebp - 0x4cc]
add eax, 1
mov dword [ebp - 0x4cc], eax
cmp dword [ebp - 0x4cc], 5
jge 0x8d40f8
mov byte [ebp - 0x4d5], 0
mov eax, dword [ebp - 0x1c]
cmp dword [eax + 0x230], 4
je 0x8d3d7c
mov eax, dword [ebp - 0x1c]
cmp dword [eax + 0x230], 8
jne 0x8d3d83
mov byte [ebp - 0x4d5], 1
push 0x1c0
call fcn.005de946
add esp, 4
mov dword [ebp - 0x14e0], eax
mov dword [ebp - 4], 0x30
cmp dword [ebp - 0x14e0], 0
je 0x8d3e6a
push 0x1c0
mov ecx, dword [ebp - 0x14e0]
call fcn.005dfc4c
mov eax, dword [ebp - 0x1c]
mov ecx, dword [eax + 0x5c]
mov dword [ebp - 0x1a74], ecx
push 0
push 0
sub esp, 0xc
mov ecx, esp
mov dword [ebp - 0x14ec], esp
mov edx, dword [ebp - 0x1c]
mov eax, dword [edx + 0x6cc]
push ecx
movss xmm0, dword [eax + 0x2c]
movss dword [esp], xmm0
mov edx, dword [ebp - 0x1c]
mov eax, dword [edx + 0x6cc]
push ecx
movss xmm0, dword [eax + 0x30]
movss dword [esp], xmm0
mov edx, dword [ebp - 0x1c]
mov eax, dword [edx + 0x6cc]
push ecx
movss xmm0, dword [eax + 0x28]
movss dword [esp], xmm0
call fcn.005e0ce6
sub esp, 0xc
mov ecx, esp
mov dword [ebp - 0x14f8], esp
mov edx, dword [ebp - 0x1c]
push ecx
movss xmm0, dword [edx + 0x2c]
movss dword [esp], xmm0
mov eax, dword [ebp - 0x1c]
push ecx
movss xmm0, dword [eax + 0x30]
movss dword [esp], xmm0
mov edx, dword [ebp - 0x1c]
push ecx
movss xmm0, dword [edx + 0x28]
movss dword [esp], xmm0
call fcn.005e0ce6
mov eax, dword [ebp - 0x1a74]
push eax
mov ecx, dword [ebp - 0x14e0]
call fcn.005e19d4
mov dword [ebp - 0x1a78], eax
jmp 0x8d3e74
mov dword [ebp - 0x1a78], 0
mov ecx, dword [ebp - 0x1a78]
mov dword [ebp - 0x14d4], ecx
mov dword [ebp - 4], 0xffffffff
mov edx, dword [ebp - 0x14d4]
mov dword [ebp - 0x4e4], edx
mov eax, dword [ebp - 0x4e4]
mov ecx, dword [ebp - 0x1c]
mov edx, dword [ecx + 0x38]
mov dword [eax + 0x38], edx
mov eax, dword [ebp - 0x1c]
movsx ecx, byte [eax + 0xa5f]
test ecx, ecx
jle 0x8d3ef7
mov eax, dword [ebp - 0x1c]
cmp dword [eax + 0x12c], 0
je 0x8d3ef7
mov byte [ebp - 0x4d5], 0
push 0x20
mov eax, dword [ebp - 0x1c]
add eax, 0x132
push eax
mov ecx, dword [ebp - 0x4e4]
add ecx, 0xf4
push ecx
call fcn.005e28b6
add esp, 0xc
mov eax, dword [ebp - 0x4e4]
mov ecx, dword [ebp - 0x1c]
mov edx, dword [ecx + 0xa64]
mov dword [eax + 0x5c], edx
jmp 0x8d3f17
push 0x20
mov eax, dword [ebp - 0x1c]
add eax, 0x172
push eax
mov ecx, dword [ebp - 0x4e4]
add ecx, 0xf4
push ecx
call fcn.005e28b6
add esp, 0xc
mov eax, dword [ebp - 0x4e4]
mov dword [eax + 0x168], 1
mov eax, dword [ebp - 0x4e4]
movss xmm0, dword [0x9b0664]
movss dword [eax + 0x138], xmm0
mov eax, dword [ebp - 0x4e4]
movss xmm0, dword [0x9b0658]
movss dword [eax + 0x13c], xmm0
mov eax, dword [ebp - 0x4e4]
movss xmm0, dword [0x9b0650]
movss dword [eax + 0x140], xmm0
mov eax, dword [ebp - 0x4e4]
mov ecx, dword [eax]
mov edx, dword [ecx + 0x80]
mov dword [ebp - 0x1a74], edx
movzx eax, byte [ebp - 0x4d5]
mov esi, esp
push eax
mov ecx, dword [ebp - 0x4e4]
call dword [ebp - 0x1a74]
cmp esi, esp
call fcn.005e11e1
mov eax, dword [ebp - 0x4e4]
mov ecx, dword [ebx + 8]
mov dword [eax + 0x124], ecx
imul eax, dword [ebp - 0x4cc], 0xc8
add eax, 0x64
mov ecx, dword [ebp - 0x4e4]
mov dword [ecx + 0x128], eax
mov eax, dword [ebp - 0x4e4]
mov ecx, dword [eax]
mov edx, dword [ecx + 0x3c]
mov dword [ebp - 0x1a74], edx
mov esi, esp
mov eax, dword [ebp - 0x1c]
push ecx
movss xmm0, dword [eax + 0x2c]
movss dword [esp], xmm0
mov ecx, dword [ebp - 0x1c]
movss xmm0, dword [ecx + 0x30]
addss xmm0, dword [0x9b0640]
push ecx
movss dword [esp], xmm0
mov edx, dword [ebp - 0x1c]
push ecx
movss xmm0, dword [edx + 0x28]
movss dword [esp], xmm0
mov ecx, dword [ebp - 0x4e4]
call dword [ebp - 0x1a74]
cmp esi, esp
call fcn.005e11e1
mov eax, dword [ebp - 0x4e4]
mov ecx, dword [ebp - 0x1c]
mov edx, dword [ecx + 0x34]
mov dword [eax + 0x134], edx
mov eax, dword [ebp - 0x4e4]
mov ecx, dword [ebp - 0x4e4]
mov edx, dword [ecx + 0x134]
mov dword [eax + 0x188], edx
mov eax, dword [ebp - 0x4e4]
mov dword [eax + 0x12c], 1
mov eax, dword [ebp - 0x4e4]
mov ecx, dword [eax + 0x60]
mov dword [ebp - 0x1a74], ecx
mov edx, dword [ebp - 0x1c]
imul eax, dword [edx + 0x5c], 0x1a40
mov ecx, dword [ebp - 0x1c]
imul edx, dword [ecx + 0x244], 0x70
lea eax, [eax + edx + 0xba0440]
mov ecx, dword [ebp - 0x1c]
imul edx, dword [ecx + 0x5c], 0x2a0
mov ecx, dword [ebp - 0x1c]
mov ecx, dword [ecx + 0x9f4]
mov edx, dword [edx + ecx*4 + 0xc2b4a0]
movsx eax, word [eax + edx*2]
push eax
mov ecx, dword [ebp - 0x1a74]
call fcn.005de496
mov eax, dword [ebp - 0x1c]
mov ecx, dword [eax + 0x60]
mov edx, dword [ebp - 0x4e4]
mov eax, dword [edx + 0x60]
mov ecx, dword [ecx + 0x2e4]
mov dword [eax + 0x2e4], ecx
mov eax, dword [ebp - 0x4e4]
mov dword [eax + 0x130], 6
mov eax, dword [0xc62eb8]
mov ecx, dword [eax + 0x2c]
mov dword [ebp - 0x1a74], ecx
mov edx, dword [ebp - 0x4e4]
push edx
mov ecx, dword [ebp - 0x1a74]
call fcn.005e2177
jmp 0x8d3d41
push 0
push 0
push 0xa0
call fcn.005de2e3
add esp, 0xc
jmp 0x8d50ae
mov eax, dword [ebp - 0x1c]
movsx ecx, word [eax + 0x6d0]
cmp ecx, 0x59
jne 0x8d459a
mov dword [ebp - 0x4f0], 0
jmp 0x8d413c
mov eax, dword [ebp - 0x4f0]
add eax, 1
mov dword [ebp - 0x4f0], eax
cmp dword [ebp - 0x4f0], 5
jge 0x8d4595
mov byte [ebp - 0x4f9], 0
mov eax, dword [ebp - 0x1c]
cmp dword [eax + 0x230], 4
je 0x8d4168
mov eax, dword [ebp - 0x1c]
cmp dword [eax + 0x230], 8
jne 0x8d416f
mov byte [ebp - 0x4f9], 1
push 0x1c0
call fcn.005de946
add esp, 4
mov dword [ebp - 0x1510], eax
mov dword [ebp - 4], 0x31
cmp dword [ebp - 0x1510], 0
je 0x8d4226
push 0x1c0
mov ecx, dword [ebp - 0x1510]
call fcn.005dfc4c
mov eax, dword [ebp - 0x1c]
mov ecx, dword [eax + 0x5c]
mov dword [ebp - 0x1a74], ecx
push 0
push 0
sub esp, 0xc
mov ecx, esp
mov dword [ebp - 0x151c], esp
push ecx
xorps xmm0, xmm0
movss dword [esp], xmm0
push ecx
xorps xmm0, xmm0
movss dword [esp], xmm0
push ecx
xorps xmm0, xmm0
movss dword [esp], xmm0
call fcn.005e0ce6
sub esp, 0xc
mov ecx, esp
mov dword [ebp - 0x1528], esp
push ecx
xorps xmm0, xmm0
movss dword [esp], xmm0
push ecx
xorps xmm0, xmm0
movss dword [esp], xmm0
push ecx
xorps xmm0, xmm0
movss dword [esp], xmm0
call fcn.005e0ce6
mov edx, dword [ebp - 0x1a74]
push edx
mov ecx, dword [ebp - 0x1510]
call fcn.005e19d4
mov dword [ebp - 0x1a78], eax
jmp 0x8d4230
mov dword [ebp - 0x1a78], 0
mov eax, dword [ebp - 0x1a78]
mov dword [ebp - 0x1504], eax
mov dword [ebp - 4], 0xffffffff
mov ecx, dword [ebp - 0x1504]
mov dword [ebp - 0x508], ecx
mov eax, dword [ebp - 0x1c]
movsx ecx, byte [eax + 0xa5f]
test ecx, ecx
jle 0x8d4322
mov eax, dword [ebp - 0x1c]
cmp dword [eax + 0x12c], 0
je 0x8d4322
mov byte [ebp - 0x4f9], 0
mov eax, dword [ebp - 0x508]
mov ecx, dword [ebp - 0x1c]
mov edx, dword [ecx + 0xa64]
mov dword [eax + 0x5c], edx
push 0x20
mov eax, dword [ebp - 0x1c]
add eax, 0x132
push eax
mov ecx, dword [ebp - 0x508]
add ecx, 0xf4
push ecx
call fcn.005e28b6
add esp, 0xc
mov eax, dword [ebp - 0x508]
mov ecx, dword [ebp - 0x1c]
mov edx, dword [ecx + 0x38]
mov dword [eax + 0x38], edx
mov eax, dword [ebp - 0x508]
mov ecx, dword [eax]
mov edx, dword [ecx + 0x3c]
mov dword [ebp - 0x1a74], edx
mov eax, dword [ebp - 0x1c]
mov ecx, dword [eax + 0x12c]
mov esi, esp
push ecx
movss xmm0, dword [ecx + 0x14]
movss dword [esp], xmm0
mov edx, dword [ebp - 0x1c]
movss xmm0, dword [edx + 0x30]
addss xmm0, dword [0x9b0640]
push ecx
movss dword [esp], xmm0
mov eax, dword [ebp - 0x1c]
mov ecx, dword [eax + 0x12c]
push ecx
movss xmm0, dword [ecx + 0xc]
movss dword [esp], xmm0
mov ecx, dword [ebp - 0x508]
call dword [ebp - 0x1a74]
cmp esi, esp
call fcn.005e11e1
jmp 0x8d43a9
push 0x20
mov eax, dword [ebp - 0x1c]
add eax, 0x172
push eax
mov ecx, dword [ebp - 0x508]
add ecx, 0xf4
push ecx
call fcn.005e28b6
add esp, 0xc
mov eax, dword [ebp - 0x508]
mov ecx, dword [ebp - 0x1c]
mov edx, dword [ecx + 0x38]
mov dword [eax + 0x38], edx
mov eax, dword [ebp - 0x508]
mov ecx, dword [eax]
mov edx, dword [ecx + 0x3c]
mov dword [ebp - 0x1a74], edx
mov esi, esp
mov eax, dword [ebp - 0x1c]
push ecx
movss xmm0, dword [eax + 0x2c]
movss dword [esp], xmm0
mov ecx, dword [ebp - 0x1c]
movss xmm0, dword [ecx + 0x30]
addss xmm0, dword [0x9b0640]
push ecx
movss dword [esp], xmm0
mov edx, dword [ebp - 0x1c]
push ecx
movss xmm0, dword [edx + 0x28]
movss dword [esp], xmm0
mov ecx, dword [ebp - 0x508]
call dword [ebp - 0x1a74]
cmp esi, esp
call fcn.005e11e1
mov eax, dword [ebp - 0x508]
mov dword [eax + 0x168], 1
mov eax, dword [ebp - 0x508]
movss xmm0, dword [0x9b0658]
movss dword [eax + 0x138], xmm0
mov eax, dword [ebp - 0x508]
movss xmm0, dword [0x9b0658]
movss dword [eax + 0x13c], xmm0
mov eax, dword [ebp - 0x508]
movss xmm0, dword [0x9b0658]
movss dword [eax + 0x140], xmm0
mov eax, dword [ebp - 0x508]
mov ecx, dword [eax]
mov edx, dword [ecx + 0x80]
mov dword [ebp - 0x1a74], edx
movzx eax, byte [ebp - 0x4f9]
mov esi, esp
push eax
mov ecx, dword [ebp - 0x508]
call dword [ebp - 0x1a74]
cmp esi, esp
call fcn.005e11e1
imul eax, dword [ebp - 0x4f0], 0x64
add eax, dword [ebx + 8]
mov ecx, dword [ebp - 0x508]
mov dword [ecx + 0x124], eax
imul eax, dword [ebp - 0x4f0], 0x32
add eax, 0x190
mov ecx, dword [ebp - 0x508]
mov dword [ecx + 0x128], eax
mov eax, dword [ebp - 0x508]
mov ecx, dword [ebp - 0x1c]
mov edx, dword [ecx + 0x34]
mov dword [eax + 0x134], edx
mov eax, dword [ebp - 0x508]
mov ecx, dword [ebp - 0x508]
mov edx, dword [ecx + 0x134]
mov dword [eax + 0x188], edx
mov eax, dword [ebp - 0x508]
mov dword [eax + 0x12c], 1
mov eax, dword [ebp - 0x508]
mov ecx, dword [eax + 0x60]
mov dword [ebp - 0x1a74], ecx
mov edx, dword [ebp - 0x1c]
imul eax, dword [edx + 0x5c], 0x1a40
mov ecx, dword [ebp - 0x1c]
imul edx, dword [ecx + 0x244], 0x70
lea eax, [eax + edx + 0xba0440]
mov ecx, dword [ebp - 0x1c]
imul edx, dword [ecx + 0x5c], 0x2a0
mov ecx, dword [ebp - 0x1c]
mov ecx, dword [ecx + 0x9f4]
mov edx, dword [edx + ecx*4 + 0xc2b4a0]
movsx eax, word [eax + edx*2]
push eax
mov ecx, dword [ebp - 0x1a74]
call fcn.005de496
mov eax, dword [ebp - 0x1c]
movsx ecx, byte [eax + 0xa5f]
test ecx, ecx
jle 0x8d4545
mov eax, dword [ebp - 0x1c]
cmp dword [eax + 0x12c], 0
je 0x8d4545
mov eax, dword [ebp - 0x508]
cmp dword [eax + 0x60], 0
je 0x8d4545
mov eax, dword [ebp - 0x508]
mov ecx, dword [eax + 0x60]
mov dword [ebp - 0x1a74], ecx
mov edx, dword [ebp - 0x1c]
imul eax, dword [edx + 0xa64], 0x2a0
mov ecx, 4
imul edx, ecx, 3
mov eax, dword [eax + edx + 0xc2b4a0]
push eax
mov ecx, dword [ebp - 0x1a74]
call fcn.005de496
mov eax, dword [ebp - 0x1c]
mov ecx, dword [eax + 0x60]
mov edx, dword [ebp - 0x508]
mov eax, dword [edx + 0x60]
mov ecx, dword [ecx + 0x2e4]
mov dword [eax + 0x2e4], ecx
mov eax, dword [ebp - 0x508]
mov dword [eax + 0x130], 0
mov eax, dword [0xc62eb8]
mov ecx, dword [eax + 0x2c]
mov dword [ebp - 0x1a74], ecx
mov edx, dword [ebp - 0x508]
push edx
mov ecx, dword [ebp - 0x1a74]
call fcn.005e2177
jmp 0x8d412d
jmp 0x8d50ae
mov eax, dword [ebp - 0x1c]
movsx ecx, word [eax + 0x6d0]
cmp ecx, 0x5a
jne 0x8d45bf
push 0
push 0
push 0xa9
call fcn.005de2e3
add esp, 0xc
jmp 0x8d50ae
mov eax, dword [ebp - 0x1c]
movsx ecx, word [eax + 0x6d0]
cmp ecx, 0x4f
jne 0x8d4b5e
movss xmm0, dword [ebp - 0x94]
addss xmm0, dword [0x9b1424]
movss dword [ebp - 0x94], xmm0
mov eax, dword [ebp - 0x98]
mov dword [ebp - 0x51c], eax
mov ecx, dword [ebp - 0x94]
mov dword [ebp - 0x518], ecx
mov edx, dword [ebp - 0x90]
mov dword [ebp - 0x514], edx
mov dword [ebp - 0x528], 3
mov eax, dword [ebp - 0x1c]
cmp dword [eax + 0x6cc], 0
je 0x8d46f6
mov eax, dword [ebp - 0x1c]
mov ecx, dword [eax + 0x6cc]
mov edx, dword [ebp - 0x1c]
mov eax, dword [edx + 0x6cc]
movss xmm0, dword [eax + 0x38]
divss xmm0, dword [0x9b2d90]
mov edx, dword [ebp - 0x1c]
mov eax, dword [edx + 0x6cc]
addss xmm0, dword [eax + 0x30]
mov edx, dword [ebp - 0x1c]
mov eax, dword [edx + 0x6cc]
push ecx
movss xmm1, dword [eax + 0x2c]
movss dword [esp], xmm1
push ecx
movss dword [esp], xmm0
push ecx
movss xmm0, dword [ecx + 0x28]
movss dword [esp], xmm0
lea ecx, [ebp - 0x153c]
call fcn.005e0ce6
mov ecx, dword [ebp - 0x153c]
mov dword [ebp - 0x51c], ecx
mov edx, dword [ebp - 0x1538]
mov dword [ebp - 0x518], edx
mov eax, dword [ebp - 0x1534]
mov dword [ebp - 0x514], eax
mov eax, 2
imul ecx, eax, 3
mov edx, dword [ebp - 0x1c]
movzx eax, word [edx + ecx + 0x658]
cdq
mov ecx, 0x50
idiv ecx
add eax, dword [ebp - 0x528]
mov dword [ebp - 0x528], eax
cmp dword [ebp - 0x528], 3
jge 0x8d46e3
mov dword [ebp - 0x528], 3
cmp dword [ebp - 0x528], 6
jle 0x8d46f6
mov dword [ebp - 0x528], 6
mov eax, dword [ebp - 0x84]
mov dword [ebp - 0x53c], eax
mov ecx, dword [ebp - 0x80]
mov dword [ebp - 0x538], ecx
mov edx, dword [ebp - 0x7c]
mov dword [ebp - 0x534], edx
mov dword [ebp - 0x548], 0
mov dword [ebp - 0x554], 0
jmp 0x8d4739
mov eax, dword [ebp - 0x554]
add eax, 1
mov dword [ebp - 0x554], eax
mov eax, dword [ebp - 0x554]
cmp eax, dword [ebp - 0x528]
jge 0x8d4b59
mov esi, esp
call dword [sym.imp.ucrtbased.dll_rand]
cmp esi, esp
call fcn.005e11e1
cdq
mov ecx, 0x3e8
idiv ecx
mov dword [ebp - 0x560], edx
cmp dword [ebp - 0x554], 1
jle 0x8d4780
mov eax, dword [ebp - 0x554]
add eax, 3
mov dword [ebp - 0x548], eax
movss xmm0, dword [ebp - 0x53c]
subss xmm0, dword [0x9b0640]
mov eax, dword [ebp - 0x1c]
movss xmm1, dword [eax + 0x38]
mulss xmm1, dword [0x9b04e0]
cvtsi2ss xmm2, dword [ebp - 0x554]
divss xmm2, dword [0x9b1fac]
mulss xmm2, dword [0x9b066c]
mulss xmm2, dword [0x9b0548]
push ecx
movss dword [esp], xmm2
movss dword [ebp - 0x1a74], xmm0
movss dword [ebp - 0x1a78], xmm1
call fcn.005de3e2
add esp, 4
fstp dword [ebp - 0x1a7c]
movss xmm0, dword [ebp - 0x1a78]
mulss xmm0, dword [ebp - 0x1a7c]
movss xmm1, dword [ebp - 0x1a74]
addss xmm1, xmm0
movss dword [ebp - 0x53c], xmm1
movss xmm0, dword [ebp - 0x534]
subss xmm0, dword [0x9b0640]
mov eax, dword [ebp - 0x1c]
movss xmm1, dword [eax + 0x38]
mulss xmm1, dword [0x9b04e0]
cvtsi2ss xmm2, dword [ebp - 0x554]
divss xmm2, dword [0x9b1fac]
mulss xmm2, dword [0x9b066c]
mulss xmm2, dword [0x9b0548]
push ecx
movss dword [esp], xmm2
movss dword [ebp - 0x1a74], xmm0
movss dword [ebp - 0x1a78], xmm1
call fcn.005e36d5
add esp, 4
fstp dword [ebp - 0x1a7c]
movss xmm0, dword [ebp - 0x1a78]
mulss xmm0, dword [ebp - 0x1a7c]
movss xmm1, dword [ebp - 0x1a74]
addss xmm1, xmm0
movss dword [ebp - 0x534], xmm1
mov eax, dword [ebp - 0x1c]
mov ecx, dword [ebp - 0x1c]
movss xmm0, dword [eax + 0x30]
addss xmm0, dword [ecx + 0x38]
movss dword [ebp - 0x538], xmm0
mov dword [ebp - 0x56c], 0x777777
mov eax, dword [ebp - 0x548]
mov dword [ebp - 0x1a74], eax
mov ecx, dword [ebp - 0x1a74]
sub ecx, 5
mov dword [ebp - 0x1a74], ecx
cmp dword [ebp - 0x1a74], 3
ja case.default.0x8d48dc
mov edx, dword [ebp - 0x1a74]
jmp dword [edx*4 + 0x8d9f20]
mov dword [ebp - 0x56c], 0x883333
jmp case.default.0x8d48dc
mov dword [ebp - 0x56c], 0x884388
jmp case.default.0x8d48dc
mov dword [ebp - 0x56c], 0x338843
jmp case.default.0x8d48dc
mov dword [ebp - 0x56c], 0x222288
push 0x184
call fcn.005de946
add esp, 4
mov dword [ebp - 0x1554], eax
mov dword [ebp - 4], 0x32
cmp dword [ebp - 0x1554], 0
je 0x8d499d
push 0x184
mov ecx, dword [ebp - 0x1554]
call fcn.005dfc3d
push 0x50
push 1
push ecx
xorps xmm0, xmm0
movss dword [esp], xmm0
push ecx
movss xmm0, dword [0x9b04e0]
movss dword [esp], xmm0
push ecx
movss xmm0, dword [0x9b04e0]
movss dword [esp], xmm0
push ecx
movss xmm0, dword [0x9b04e0]
movss dword [esp], xmm0
imul eax, dword [ebp - 0x554], 0x64
add eax, 0x190
push eax
push 0x38
mov ecx, dword [ebp - 0x1554]
call fcn.005e33d8
mov dword [ebp - 0x1a74], eax
jmp 0x8d49a7
mov dword [ebp - 0x1a74], 0
mov ecx, dword [ebp - 0x1a74]
mov dword [ebp - 0x1548], ecx
mov dword [ebp - 4], 0xffffffff
mov edx, dword [ebp - 0x1548]
mov dword [ebp - 0x578], edx
mov eax, dword [ebp - 0x578]
mov ecx, dword [eax]
mov edx, dword [ecx + 0x3c]
mov dword [ebp - 0x1a74], edx
mov esi, esp
mov eax, dword [ebp - 0x56c]
push eax
mov ecx, dword [ebp - 0x578]
call dword [ebp - 0x1a74]
cmp esi, esp
call fcn.005e11e1
mov eax, dword [ebp - 0x578]
mov dword [eax + 0x6c], 1
mov eax, dword [ebp - 0x578]
mov dword [eax + 0x104], 2
mov eax, dword [ebp - 0x578]
add eax, 0x74
mov ecx, dword [ebp - 0x53c]
mov dword [eax], ecx
mov edx, dword [ebp - 0x538]
mov dword [eax + 4], edx
mov ecx, dword [ebp - 0x534]
mov dword [eax + 8], ecx
mov eax, dword [0xc62eb8]
mov ecx, dword [eax + 0x2c]
mov dword [ebp - 0x1a74], ecx
mov edx, dword [ebp - 0x578]
push edx
mov ecx, dword [ebp - 0x1a74]
call fcn.005e2177
push 0x94
call fcn.005de946
add esp, 4
mov dword [ebp - 0x156c], eax
mov dword [ebp - 4], 0x33
cmp dword [ebp - 0x156c], 0
je 0x8d4af2
push 0x94
mov ecx, dword [ebp - 0x156c]
call fcn.005e0ef8
push 0
mov eax, dword [ebp - 0x548]
push eax
push 0
push 0x97
mov ecx, dword [ebp - 0x1c]
movsx edx, word [ecx + 0x6d2]
push edx
sub esp, 0xc
mov eax, esp
mov ecx, dword [ebp - 0x51c]
mov dword [eax], ecx
mov edx, dword [ebp - 0x518]
mov dword [eax + 4], edx
mov ecx, dword [ebp - 0x514]
mov dword [eax + 8], ecx
sub esp, 0xc
mov edx, esp
mov eax, dword [ebp - 0x53c]
mov dword [edx], eax
mov ecx, dword [ebp - 0x538]
mov dword [edx + 4], ecx
mov eax, dword [ebp - 0x534]
mov dword [edx + 8], eax
mov ecx, dword [ebp - 0x156c]
call fcn.005dfada
mov dword [ebp - 0x1a74], eax
jmp 0x8d4afc
mov dword [ebp - 0x1a74], 0
mov ecx, dword [ebp - 0x1a74]
mov dword [ebp - 0x1560], ecx
mov dword [ebp - 4], 0xffffffff
mov edx, dword [ebp - 0x1560]
mov dword [ebp - 0x584], edx
imul eax, dword [ebp - 0x554], 0x64
mov ecx, dword [ebp - 0x584]
add eax, dword [ecx + 0x24]
mov edx, dword [ebp - 0x584]
mov dword [edx + 0x24], eax
mov eax, dword [0xc62eb8]
mov ecx, dword [eax + 0x2c]
mov dword [ebp - 0x1a74], ecx
mov edx, dword [ebp - 0x584]
push edx
mov ecx, dword [ebp - 0x1a74]
call fcn.005e2177
jmp 0x8d472a
jmp 0x8d50ae
mov eax, dword [ebp - 0x1c]
movsx ecx, word [eax + 0x6d0]
cmp ecx, 0x97
jl 0x8d4b82
mov eax, dword [ebp - 0x1c]
movsx ecx, word [eax + 0x6d0]
cmp ecx, 0x99
jle 0x8d4bb3
mov eax, dword [ebp - 0x1c]
movsx ecx, word [eax + 0x6d0]
cmp ecx, 0x68
je 0x8d4bb3
mov eax, dword [ebp - 0x1c]
movsx ecx, word [eax + 0x6d0]
cmp ecx, 0x69
je 0x8d4bb3
mov eax, dword [ebp - 0x1c]
movsx ecx, word [eax + 0x6d0]
cmp ecx, 0x5a
jne 0x8d50ae
mov eax, dword [ebp - 0x1c]
mov ecx, dword [eax + 0x5c]
mov edx, dword [ebp - 0x1c]
movss xmm0, dword [ecx*8 + 0x27966f4]
mulss xmm0, dword [edx + 0x38]
mulss xmm0, dword [str.333_]
mov eax, dword [ebp - 0x1c]
addss xmm0, dword [eax + 0x30]
movss dword [ebp - 0x80], xmm0
mov eax, dword [ebp - 0x1c]
cmp dword [eax + 0x5c], 8
jne 0x8d4c02
mov eax, dword [ebp - 0x1c]
movss xmm0, dword [0x9b04e0]
mulss xmm0, dword [eax + 0x38]
addss xmm0, dword [ebp - 0x80]
movss dword [ebp - 0x80], xmm0
movss xmm0, dword [ebp - 0x94]
addss xmm0, dword [0x9b1424]
movss dword [ebp - 0x94], xmm0
mov eax, dword [ebp - 0x98]
mov dword [ebp - 0x598], eax
mov ecx, dword [ebp - 0x94]
mov dword [ebp - 0x594], ecx
mov edx, dword [ebp - 0x90]
mov dword [ebp - 0x590], edx
mov eax, dword [ebp - 0x1c]
cmp dword [eax + 0x6cc], 0
je 0x8d4ccf
mov eax, dword [ebp - 0x1c]
mov ecx, dword [eax + 0x6cc]
mov edx, dword [ebp - 0x1c]
mov eax, dword [edx + 0x6cc]
movss xmm0, dword [eax + 0x38]
divss xmm0, dword [0x9b1428]
mov edx, dword [ebp - 0x1c]
mov eax, dword [edx + 0x6cc]
addss xmm0, dword [eax + 0x30]
mov edx, dword [ebp - 0x1c]
mov eax, dword [edx + 0x6cc]
push ecx
movss xmm1, dword [eax + 0x2c]
movss dword [esp], xmm1
push ecx
movss dword [esp], xmm0
push ecx
movss xmm0, dword [ecx + 0x28]
movss dword [esp], xmm0
lea ecx, [ebp - 0x1580]
call fcn.005e0ce6
mov ecx, dword [ebp - 0x1580]
mov dword [ebp - 0x598], ecx
mov edx, dword [ebp - 0x157c]
mov dword [ebp - 0x594], edx
mov eax, dword [ebp - 0x1578]
mov dword [ebp - 0x590], eax
mov eax, dword [ebp - 0x1c]
mov ecx, dword [eax + 0xa24]
add ecx, 1
mov edx, dword [ebp - 0x1c]
mov dword [edx + 0xa24], ecx
mov eax, dword [ebp - 0x1c]
movsx ecx, byte [eax + 0xa5d]
cmp ecx, 1
jne 0x8d4e38
mov eax, 4
imul ecx, eax, 0
mov edx, dword [ebp - 0x1c]
cmp dword [edx + ecx + 0x760], 0
je 0x8d4e38
mov eax, dword [ebp - 0x1c]
movsx ecx, byte [eax + 0x229]
cmp ecx, 1
je 0x8d4e38
mov eax, dword [ebp - 0x1c]
movsx ecx, byte [eax + 0xa41]
test ecx, ecx
jne 0x8d4e38
push 0x94
call fcn.005de946
add esp, 4
mov dword [ebp - 0x1598], eax
mov dword [ebp - 4], 0x34
cmp dword [ebp - 0x1598], 0
je 0x8d4def
push 0x94
mov ecx, dword [ebp - 0x1598]
call fcn.005e0ef8
mov eax, dword [ebp - 0x1c]
mov ecx, dword [eax + 0xaa4]
push ecx
push 0
mov edx, dword [ebp - 0x1c]
movzx eax, byte [edx + 0xa5e]
push eax
push 0x2710
mov ecx, dword [ebp - 0x1c]
movsx edx, word [ecx + 0x6d2]
push edx
sub esp, 0xc
mov eax, esp
mov ecx, dword [ebp - 0x598]
mov dword [eax], ecx
mov edx, dword [ebp - 0x594]
mov dword [eax + 4], edx
mov ecx, dword [ebp - 0x590]
mov dword [eax + 8], ecx
mov edx, 4
imul eax, edx, 0
mov ecx, dword [ebp - 0x1c]
mov edx, dword [ecx + eax + 0x760]
add edx, 0x74
sub esp, 0xc
mov eax, esp
mov ecx, dword [edx]
mov dword [eax], ecx
mov ecx, dword [edx + 4]
mov dword [eax + 4], ecx
mov edx, dword [edx + 8]
mov dword [eax + 8], edx
mov ecx, dword [ebp - 0x1598]
call fcn.005dfada
mov dword [ebp - 0x1a74], eax
jmp 0x8d4df9
mov dword [ebp - 0x1a74], 0
mov eax, dword [ebp - 0x1a74]
mov dword [ebp - 0x158c], eax
mov dword [ebp - 4], 0xffffffff
mov ecx, dword [ebp - 0x158c]
mov dword [ebp - 0x5a4], ecx
mov eax, dword [0xc62eb8]
mov ecx, dword [eax + 0x2c]
mov dword [ebp - 0x1a74], ecx
mov edx, dword [ebp - 0x5a4]
push edx
mov ecx, dword [ebp - 0x1a74]
call fcn.005e2177
mov eax, dword [ebp - 0x1c]
movsx ecx, word [eax + 0x6d0]
cmp ecx, 0x69
jne 0x8d4f4e
mov eax, dword [ebp - 0x1c]
movsx ecx, word [eax + 0x6d2]
cmp ecx, 2
jne 0x8d4f4e
push 0xc8
call fcn.005de946
add esp, 4
mov dword [ebp - 0x15b0], eax
mov dword [ebp - 4], 0x35
cmp dword [ebp - 0x15b0], 0
je 0x8d4ee8
push 0xc8
mov ecx, dword [ebp - 0x15b0]
call fcn.005dde7e
mov eax, dword [ebp - 0x1c]
mov ecx, dword [eax + 0x6cc]
push ecx
push 3
sub esp, 0xc
mov edx, esp
mov eax, dword [ebp - 0x598]
mov dword [edx], eax
mov ecx, dword [ebp - 0x594]
mov dword [edx + 4], ecx
mov eax, dword [ebp - 0x590]
mov dword [edx + 8], eax
sub esp, 0xc
mov ecx, esp
mov edx, dword [ebp - 0x84]
mov dword [ecx], edx
mov eax, dword [ebp - 0x80]
mov dword [ecx + 4], eax
mov edx, dword [ebp - 0x7c]
mov dword [ecx + 8], edx
mov ecx, dword [ebp - 0x15b0]
call fcn.005ddbbd
mov dword [ebp - 0x1a74], eax
jmp 0x8d4ef2
mov dword [ebp - 0x1a74], 0
mov eax, dword [ebp - 0x1a74]
mov dword [ebp - 0x15a4], eax
mov dword [ebp - 4], 0xffffffff
mov ecx, dword [ebp - 0x15a4]
mov dword [ebp - 0x5b0], ecx
mov eax, dword [0xc62eb8]
mov ecx, dword [eax + 0x2c]
mov dword [ebp - 0x1a74], ecx
mov edx, dword [ebp - 0x5b0]
push edx
mov ecx, dword [ebp - 0x1a74]
call fcn.005e2177
mov eax, dword [ebp - 0x1c]
mov ecx, dword [eax + 0x6bc]
add ecx, 0x2bc
mov edx, dword [ebp - 0x1c]
mov dword [edx + 0x6bc], ecx
jmp 0x8d50ae
mov eax, dword [0xc62ea4]
add eax, 0x750
mov dword [ebp - 0x5bc], eax
mov eax, 8
imul ecx, eax, 6
mov edx, dword [0xc62ea4]
movsx eax, word [edx + ecx + 0x7dc]
mov dword [ebp - 0x5c8], eax
cmp dword [ebp - 0x5c8], 0x3f2
jne 0x8d4f95
mov eax, 0x63
mov ecx, dword [ebp - 0x1c]
mov word [ecx + 0x6d2], ax
push 0x94
call fcn.005de946
add esp, 4
mov dword [ebp - 0x15c8], eax
mov dword [ebp - 4], 0x36
cmp dword [ebp - 0x15c8], 0
je 0x8d504d
push 0x94
mov ecx, dword [ebp - 0x15c8]
call fcn.005e0ef8
mov eax, dword [ebp - 0x1c]
mov ecx, dword [eax + 0xaa4]
push ecx
mov edx, dword [ebp - 0x1c]
movzx eax, byte [edx + 0x1a1]
push eax
mov ecx, dword [ebp - 0x1c]
movzx edx, byte [ecx + 0xa5e]
push edx
mov eax, dword [ebp - 0x1c]
movsx ecx, word [eax + 0x6d0]
push ecx
mov edx, dword [ebp - 0x1c]
movsx eax, word [edx + 0x6d2]
push eax
sub esp, 0xc
mov ecx, esp
mov edx, dword [ebp - 0x598]
mov dword [ecx], edx
mov eax, dword [ebp - 0x594]
mov dword [ecx + 4], eax
mov edx, dword [ebp - 0x590]
mov dword [ecx + 8], edx
sub esp, 0xc
mov eax, esp
mov ecx, dword [ebp - 0x84]
mov dword [eax], ecx
mov edx, dword [ebp - 0x80]
mov dword [eax + 4], edx
mov ecx, dword [ebp - 0x7c]
mov dword [eax + 8], ecx
mov ecx, dword [ebp - 0x15c8]
call fcn.005dfada
mov dword [ebp - 0x1a74], eax
jmp 0x8d5057
mov dword [ebp - 0x1a74], 0
mov edx, dword [ebp - 0x1a74]
mov dword [ebp - 0x15bc], edx
mov dword [ebp - 4], 0xffffffff
mov eax, dword [ebp - 0x15bc]
mov dword [ebp - 0x5d4], eax
mov eax, dword [0xc62eb8]
mov ecx, dword [eax + 0x2c]
mov dword [ebp - 0x1a74], ecx
mov edx, dword [ebp - 0x5d4]
push edx
mov ecx, dword [ebp - 0x1a74]
call fcn.005e2177
mov eax, dword [ebp - 0x1c]
mov ecx, dword [eax + 0x6bc]
add ecx, 0x1f4
mov edx, dword [ebp - 0x1c]
mov dword [edx + 0x6bc], ecx
mov eax, dword [ebp - 0x1c]
movsx ecx, word [eax + 0x6d0]
cmp ecx, 0x97
jl 0x8d50d2
mov eax, dword [ebp - 0x1c]
movsx ecx, word [eax + 0x6d0]
cmp ecx, 0x99
jle 0x8d50ff
mov eax, dword [ebp - 0x1c]
movsx ecx, word [eax + 0x6d0]
cmp ecx, 0x68
je 0x8d50ff
mov eax, dword [ebp - 0x1c]
movsx ecx, word [eax + 0x6d0]
cmp ecx, 0x69
je 0x8d50ff
mov eax, dword [ebp - 0x1c]
movsx ecx, word [eax + 0x6d0]
cmp ecx, 0x5a
jne 0x8d5117
mov eax, dword [ebp - 0x1c]
cmp dword [eax + 0xa18], 0
je 0x8d5117
mov eax, dword [ebp - 0x1c]
cmp dword [eax + 0xa24], 2
jl 0x8d5139
push 0x18
push 0
mov eax, dword [ebp - 0x1c]
add eax, 0x6bc
push eax
call fcn.005df85f
add esp, 0xc
mov eax, dword [ebp - 0x1c]
mov dword [eax + 0xa24], 0
mov eax, dword [ebp - 0x1c]
movsx ecx, byte [eax + 0xa3e]
cmp ecx, 1
jne 0x8d55c0
cmp dword [0xc6aff0], 0
jne 0x8d55c0
mov eax, dword [ebp - 0x1c]
mov ecx, dword [ebx + 8]
sub ecx, dword [eax + 0x824]
cmp ecx, 0x1f4
jbe 0x8d550c
mov esi, esp
call dword [sym.imp.ucrtbased.dll_rand]
cmp esi, esp
call fcn.005e11e1
cdq
mov ecx, 5
idiv ecx
cvtsi2ss xmm0, edx
movss dword [ebp - 0x5e0], xmm0
movss xmm0, dword [0x9b0548]
movss dword [ebp - 0x5ec], xmm0
mov eax, dword [ebp - 0x1c]
movsx ecx, byte [eax + 0xa5f]
cmp ecx, 1
jne 0x8d51c3
movss xmm0, dword [0x9b0500]
movss dword [ebp - 0x5ec], xmm0
mov dword [ebp - 0x5f8], 0
jmp 0x8d51de
mov eax, dword [ebp - 0x5f8]
add eax, 1
mov dword [ebp - 0x5f8], eax
cmp dword [ebp - 0x5f8], 2
jge 0x8d5500
mov eax, dword [ebp - 0x5f8]
mov ecx, dword [ebp - 0x1c]
cmp dword [ecx + eax*4 + 0x728], 0
jne 0x8d53e4
push 0x184
call fcn.005de946
add esp, 4
mov dword [ebp - 0x15e0], eax
mov dword [ebp - 4], 0x37
cmp dword [ebp - 0x15e0], 0
je 0x8d530b
push 0x184
mov ecx, dword [ebp - 0x15e0]
call fcn.005dfc3d
push 0x50
push 8
push ecx
xorps xmm0, xmm0
movss dword [esp], xmm0
movss xmm0, dword [0x9b0650]
mulss xmm0, dword [ebp - 0x5e0]
addss xmm0, dword [0x9b04e0]
mulss xmm0, dword [ebp - 0x5ec]
cvtsi2ss xmm1, dword [ebp - 0x5f8]
mulss xmm1, dword [0x9b0660]
subss xmm0, xmm1
push ecx
movss dword [esp], xmm0
movss xmm0, dword [0x9b0650]
mulss xmm0, dword [ebp - 0x5e0]
addss xmm0, dword [0x9b04e0]
mulss xmm0, dword [ebp - 0x5ec]
cvtsi2ss xmm1, dword [ebp - 0x5f8]
mulss xmm1, dword [0x9b0660]
subss xmm0, xmm1
push ecx
movss dword [esp], xmm0
movss xmm0, dword [0x9b0650]
mulss xmm0, dword [ebp - 0x5e0]
addss xmm0, dword [0x9b04e0]
mulss xmm0, dword [ebp - 0x5ec]
cvtsi2ss xmm1, dword [ebp - 0x5f8]
mulss xmm1, dword [0x9b0660]
subss xmm0, xmm1
push ecx
movss dword [esp], xmm0
push 0
push 0x6d
mov ecx, dword [ebp - 0x15e0]
call fcn.005e33d8
mov dword [ebp - 0x1a74], eax
jmp 0x8d5315
mov dword [ebp - 0x1a74], 0
mov eax, dword [ebp - 0x1a74]
mov dword [ebp - 0x15d4], eax
mov dword [ebp - 4], 0xffffffff
mov ecx, dword [ebp - 0x5f8]
mov edx, dword [ebp - 0x1c]
mov eax, dword [ebp - 0x15d4]
mov dword [edx + ecx*4 + 0x728], eax
mov eax, dword [ebp - 0x5f8]
mov ecx, dword [ebp - 0x1c]
mov edx, dword [ecx + eax*4 + 0x728]
mov dword [ebp - 0x1a74], edx
mov eax, dword [ebp - 0x5f8]
mov ecx, dword [ebp - 0x1c]
mov edx, dword [ecx + eax*4 + 0x728]
mov eax, dword [edx]
mov ecx, dword [eax + 0x3c]
mov dword [ebp - 0x1a78], ecx
mov esi, esp
push 0xffffdd00
mov ecx, dword [ebp - 0x1a74]
call dword [ebp - 0x1a78]
cmp esi, esp
call fcn.005e11e1
mov eax, dword [ebp - 0x5f8]
mov ecx, dword [ebp - 0x1c]
mov edx, dword [ecx + eax*4 + 0x728]
mov dword [edx + 0x6c], 1
mov eax, dword [ebp - 0x5f8]
mov ecx, dword [ebp - 0x1c]
mov edx, dword [ecx + eax*4 + 0x728]
mov dword [edx + 0x104], 0
mov eax, dword [0xc62eb8]
mov ecx, dword [eax + 0x2c]
mov dword [ebp - 0x1a74], ecx
mov edx, dword [ebp - 0x5f8]
mov eax, dword [ebp - 0x1c]
mov ecx, dword [eax + edx*4 + 0x728]
push ecx
mov ecx, dword [ebp - 0x1a74]
call fcn.005e2177
mov eax, dword [ebp - 0x5f8]
mov ecx, dword [ebp - 0x1c]
cmp dword [ecx + eax*4 + 0x728], 0
je 0x8d54fb
mov eax, dword [ebp - 0x5f8]
mov ecx, dword [ebp - 0x1c]
mov edx, dword [ecx + eax*4 + 0x728]
mov eax, dword [ebx + 8]
sub eax, dword [edx + 0xfc]
xor edx, edx
mov ecx, 0x3e8
div ecx
mov dword [ebp - 0x1a74], edx
cvtsi2sd xmm0, dword [ebp - 0x1a74]
mov edx, dword [ebp - 0x1a74]
shr edx, 0x1f
addsd xmm0, qword [edx*8 + 0x9b05f0]
movsd qword [ebp - 0x1a80], xmm0
cvtsd2ss xmm0, qword [ebp - 0x1a80]
mulss xmm0, dword [0x9b1434]
divss xmm0, dword [0x9b0670]
cvtsi2ss xmm1, dword [ebp - 0x5f8]
addss xmm0, xmm1
mov eax, dword [ebp - 0x5f8]
mov ecx, dword [ebp - 0x1c]
mov edx, dword [ecx + eax*4 + 0x728]
movss dword [edx + 0x114], xmm0
mov eax, dword [ebp - 0x1c]
movss xmm0, dword [eax + 0x28]
addss xmm0, dword [0x9b0664]
mov ecx, dword [ebp - 0x1c]
movss xmm1, dword [ecx + 0x30]
addss xmm1, dword [0x9b4d8c]
mov edx, dword [ebp - 0x1c]
movss xmm2, dword [edx + 0x2c]
addss xmm2, dword [0x9b0664]
push ecx
movss dword [esp], xmm2
push ecx
movss dword [esp], xmm1
push ecx
movss dword [esp], xmm0
lea ecx, [ebp - 0x15f4]
call fcn.005e0ce6
mov eax, dword [ebp - 0x5f8]
mov ecx, dword [ebp - 0x1c]
mov edx, dword [ecx + eax*4 + 0x728]
add edx, 0x74
mov eax, dword [ebp - 0x15f4]
mov dword [edx], eax
mov ecx, dword [ebp - 0x15f0]
mov dword [edx + 4], ecx
mov eax, dword [ebp - 0x15ec]
mov dword [edx + 8], eax
jmp 0x8d51cf
mov eax, dword [ebp - 0x1c]
mov ecx, dword [ebx + 8]
mov dword [eax + 0x824], ecx
mov dword [ebp - 0x604], 0
jmp 0x8d5527
mov eax, dword [ebp - 0x604]
add eax, 1
mov dword [ebp - 0x604], eax
cmp dword [ebp - 0x604], 2
jge 0x8d55be
mov eax, dword [ebp - 0x604]
mov ecx, dword [ebp - 0x1c]
cmp dword [ecx + eax*4 + 0x728], 0
je 0x8d55b9
mov eax, dword [ebp - 0x1c]
movss xmm0, dword [eax + 0x54]
addss xmm0, dword [0x9b1424]
mov ecx, dword [ebp - 0x1c]
movss xmm1, dword [ecx + 0x58]
addss xmm1, dword [0x9b0664]
push ecx
movss dword [esp], xmm1
push ecx
movss dword [esp], xmm0
mov edx, dword [ebp - 0x1c]
push ecx
movss xmm0, dword [edx + 0x50]
movss dword [esp], xmm0
lea ecx, [ebp - 0x1608]
call fcn.005e0ce6
mov eax, dword [ebp - 0x604]
mov ecx, dword [ebp - 0x1c]
mov edx, dword [ecx + eax*4 + 0x728]
add edx, 0x74
mov eax, dword [ebp - 0x1608]
mov dword [edx], eax
mov ecx, dword [ebp - 0x1604]
mov dword [edx + 4], ecx
mov eax, dword [ebp - 0x1600]
mov dword [edx + 8], eax
jmp 0x8d5518
jmp 0x8d5629
mov dword [ebp - 0x610], 0
jmp 0x8d55db
mov eax, dword [ebp - 0x610]
add eax, 1
mov dword [ebp - 0x610], eax
cmp dword [ebp - 0x610], 2
jge 0x8d5629
mov eax, dword [ebp - 0x610]
mov ecx, dword [ebp - 0x1c]
cmp dword [ecx + eax*4 + 0x728], 0
je 0x8d5627
mov eax, dword [ebp - 0x610]
mov ecx, dword [ebp - 0x1c]
mov edx, dword [ecx + eax*4 + 0x728]
push edx
mov ecx, dword [0xc62ea4]
call fcn.005df792
mov eax, dword [ebp - 0x610]
mov ecx, dword [ebp - 0x1c]
mov dword [ecx + eax*4 + 0x728], 0
jmp 0x8d55cc
mov eax, dword [ebp - 0x1c]
movsx ecx, byte [eax + 0xa39]
cmp ecx, 1
jne 0x8d5682
mov eax, dword [ebp - 0x1c]
mov ecx, dword [ebx + 8]
sub ecx, dword [eax + 0x818]
cmp ecx, 0x3e8
jbe 0x8d5682
mov eax, dword [ebp - 0x1c]
cmp dword [eax + 0x720], 0
je 0x8d5676
mov eax, dword [ebp - 0x1c]
mov ecx, dword [eax + 0x720]
mov dword [ebp - 0x1a74], ecx
mov edx, dword [ebx + 8]
push edx
mov ecx, dword [ebp - 0x1a74]
call fcn.005e14d4
mov eax, dword [ebp - 0x1c]
mov ecx, dword [ebx + 8]
mov dword [eax + 0x818], ecx
mov eax, dword [ebp - 0x1c]
movsx ecx, byte [eax + 0xa3c]
cmp ecx, 1
jne 0x8d579d
mov dword [ebp - 0x61c], 0x3e8
mov eax, dword [ebp - 0x1c]
cmp dword [eax + 0x230], 0x38
jne 0x8d56c3
mov eax, dword [ebp - 0x1c]
movsx ecx, word [eax + 0x172]
test ecx, ecx
jne 0x8d56c3
mov dword [ebp - 0x61c], 0xbb8
mov eax, dword [ebp - 0x1c]
mov ecx, dword [ebx + 8]
sub ecx, dword [eax + 0x81c]
cmp ecx, dword [ebp - 0x61c]
jbe 0x8d579d
mov eax, dword [ebp - 0x1c]
cmp dword [eax + 0x724], 0
je 0x8d579d
mov eax, dword [ebp - 0x1c]
cmp dword [eax + 0x230], 0x38
jne 0x8d574b
mov eax, dword [ebp - 0x1c]
movsx ecx, word [eax + 0x172]
test ecx, ecx
jne 0x8d574b
mov esi, esp
call dword [sym.imp.ucrtbased.dll_rand]
cmp esi, esp
call fcn.005e11e1
cdq
mov ecx, 0x32
idiv ecx
neg edx
cvtsi2ss xmm0, edx
divss xmm0, dword [0x9b1fd0]
movss dword [ebp - 0x1a74], xmm0
mov edx, dword [ebp - 0x1c]
mov eax, dword [edx + 0x724]
movss xmm0, dword [ebp - 0x1a74]
movss dword [eax + 0xac], xmm0
mov eax, dword [ebp - 0x1c]
mov ecx, dword [eax + 0x724]
mov dword [ebp - 0x1a74], ecx
mov edx, dword [ebx + 8]
push edx
mov ecx, dword [ebp - 0x1a74]
call fcn.005e14d4
mov eax, dword [ebp - 0x1c]
mov ecx, dword [eax + 0x5c]
mov edx, dword [ebp - 0x1c]
movss xmm0, dword [ecx*8 + 0x27966f0]
mulss xmm0, dword [edx + 0x38]
mov eax, dword [ebp - 0x1c]
mov ecx, dword [eax + 0x724]
movss dword [ecx + 0x90], xmm0
mov eax, dword [ebp - 0x1c]
mov ecx, dword [ebx + 8]
mov dword [eax + 0x81c], ecx
mov eax, dword [ebp - 0x1c]
movsx ecx, byte [eax + 0xa3f]
cmp ecx, 1
jne 0x8d58e2
mov eax, dword [ebp - 0x1c]
mov ecx, dword [ebx + 8]
sub ecx, dword [eax + 0x830]
cmp ecx, 0x3e8
jbe 0x8d58e2
mov eax, dword [ebp - 0x1c]
push ecx
movss xmm0, dword [eax + 0x2c]
movss dword [esp], xmm0
mov ecx, dword [ebp - 0x1c]
push ecx
movss xmm0, dword [ecx + 0x30]
movss dword [esp], xmm0
mov edx, dword [ebp - 0x1c]
push ecx
movss xmm0, dword [edx + 0x28]
movss dword [esp], xmm0
lea ecx, [ebp - 0x630]
call fcn.005e0ce6
push 0xac
call fcn.005de946
add esp, 4
mov dword [ebp - 0x1620], eax
mov dword [ebp - 4], 0x38
cmp dword [ebp - 0x1620], 0
je 0x8d588d
push 0xac
mov ecx, dword [ebp - 0x1620]
call fcn.005e3f13
mov eax, dword [ebp - 0x1c]
mov ecx, dword [eax + 0x6cc]
push ecx
push 1
sub esp, 0xc
mov edx, esp
mov eax, dword [ebp - 0x630]
mov dword [edx], eax
mov ecx, dword [ebp - 0x62c]
mov dword [edx + 4], ecx
mov eax, dword [ebp - 0x628]
mov dword [edx + 8], eax
sub esp, 0xc
mov ecx, esp
mov edx, dword [ebp - 0x630]
mov dword [ecx], edx
mov eax, dword [ebp - 0x62c]
mov dword [ecx + 4], eax
mov edx, dword [ebp - 0x628]
mov dword [ecx + 8], edx
mov ecx, dword [ebp - 0x1620]
call fcn.005e0b51
mov dword [ebp - 0x1a74], eax
jmp 0x8d5897
mov dword [ebp - 0x1a74], 0
mov eax, dword [ebp - 0x1a74]
mov dword [ebp - 0x1614], eax
mov dword [ebp - 4], 0xffffffff
mov ecx, dword [ebp - 0x1614]
mov dword [ebp - 0x63c], ecx
mov eax, dword [0xc62eb8]
mov ecx, dword [eax + 0x2c]
mov dword [ebp - 0x1a74], ecx
mov edx, dword [ebp - 0x63c]
push edx
mov ecx, dword [ebp - 0x1a74]
call fcn.005e2177
mov eax, dword [ebp - 0x1c]
mov ecx, dword [ebx + 8]
mov dword [eax + 0x830], ecx
mov eax, dword [ebp - 0x1c]
movsx ecx, byte [eax + 0xa56]
cmp ecx, 1
je 0x8d5901
mov eax, dword [ebp - 0x1c]
cmp dword [eax + 0x230], 0x2c
jne 0x8d5d67
mov eax, dword [ebp - 0x1c]
movsx ecx, byte [eax + 0x229]
cmp ecx, 1
je 0x8d5d67
cmp dword [0xc6aff0], 0
jne 0x8d5d67
mov dword [ebp - 0x648], 0
jmp 0x8d593c
mov eax, dword [ebp - 0x648]
add eax, 1
mov dword [ebp - 0x648], eax
cmp dword [ebp - 0x648], 2
jge 0x8d5d65
mov eax, dword [ebp - 0x648]
mov ecx, dword [ebp - 0x1c]
cmp dword [ecx + eax*4 + 0x7dc], 0
je 0x8d5c5f
mov eax, dword [ebp - 0x648]
cdq
mov ecx, 5
idiv ecx
cvtsi2ss xmm0, edx
mulss xmm0, dword [0x9b04e0]
divss xmm0, dword [0x9b4c14]
mov eax, dword [ebx + 8]
xor edx, edx
mov ecx, 0x1388
div ecx
mov dword [ebp - 0x1a74], edx
cvtsi2sd xmm1, dword [ebp - 0x1a74]
mov edx, dword [ebp - 0x1a74]
shr edx, 0x1f
addsd xmm1, qword [edx*8 + 0x9b05f0]
movsd qword [ebp - 0x1a80], xmm1
cvtsd2ss xmm1, qword [ebp - 0x1a80]
divss xmm1, dword [0x9b4c8c]
addss xmm0, xmm1
mulss xmm0, dword [0x9b1434]
movss dword [ebp - 0x654], xmm0
mov eax, dword [ebp - 0x648]
and eax, 0x80000001
jns 0x8d59ec
dec eax
or eax, 0xfffffffe
inc eax
test eax, eax
jne 0x8d5a10
mov eax, dword [ebp - 0x648]
mov ecx, dword [ebp - 0x1c]
mov edx, dword [ecx + eax*4 + 0x7dc]
movss xmm0, dword [ebp - 0x654]
movss dword [edx + 0x8c], xmm0
mov eax, dword [ebp - 0x648]
cdq
mov ecx, 3
idiv ecx
cmp edx, 1
jne 0x8d5a43
mov eax, dword [ebp - 0x648]
mov ecx, dword [ebp - 0x1c]
mov edx, dword [ecx + eax*4 + 0x7dc]
movss xmm0, dword [ebp - 0x654]
movss dword [edx + 0x90], xmm0
mov eax, dword [ebp - 0x1c]
movsx ecx, byte [eax + 0xa5f]
cmp ecx, 1
jne 0x8d5afd
mov eax, dword [ebp - 0x1c]
push ecx
movss xmm0, dword [eax + 0x58]
movss dword [esp], xmm0
mov ecx, dword [ebp - 0x1c]
push ecx
movss xmm0, dword [ecx + 0x54]
movss dword [esp], xmm0
mov edx, dword [ebp - 0x1c]
push ecx
movss xmm0, dword [edx + 0x50]
movss dword [esp], xmm0
lea ecx, [ebp - 0x1634]
call fcn.005e0ce6
mov eax, dword [ebp - 0x648]
mov ecx, dword [ebp - 0x1c]
mov edx, dword [ecx + eax*4 + 0x7dc]
add edx, 0x74
mov eax, dword [ebp - 0x1634]
mov dword [edx], eax
mov ecx, dword [ebp - 0x1630]
mov dword [edx + 4], ecx
mov eax, dword [ebp - 0x162c]
mov dword [edx + 8], eax
mov eax, dword [ebp - 0x648]
mov ecx, dword [ebp - 0x1c]
mov edx, dword [ecx + eax*4 + 0x7dc]
movss xmm0, dword [0x9b2d90]
movss dword [edx + 0x98], xmm0
mov eax, dword [ebp - 0x648]
mov ecx, dword [ebp - 0x1c]
mov edx, dword [ecx + eax*4 + 0x7dc]
movss xmm0, dword [0x9b2d90]
movss dword [edx + 0x9c], xmm0
jmp 0x8d5bbe
mov eax, dword [ebp - 0x1c]
mov ecx, dword [eax + 0x5c]
mov edx, dword [ebp - 0x1c]
movss xmm0, dword [ecx*8 + 0x27966f4]
mulss xmm0, dword [edx + 0x38]
divss xmm0, dword [0x9b0548]
mov eax, dword [ebp - 0x1c]
addss xmm0, dword [eax + 0x30]
mov ecx, dword [ebp - 0x1c]
push ecx
movss xmm1, dword [ecx + 0x2c]
movss dword [esp], xmm1
push ecx
movss dword [esp], xmm0
mov edx, dword [ebp - 0x1c]
push ecx
movss xmm0, dword [edx + 0x28]
movss dword [esp], xmm0
lea ecx, [ebp - 0x1648]
call fcn.005e0ce6
mov eax, dword [ebp - 0x648]
mov ecx, dword [ebp - 0x1c]
mov edx, dword [ecx + eax*4 + 0x7dc]
add edx, 0x74
mov eax, dword [ebp - 0x1648]
mov dword [edx], eax
mov ecx, dword [ebp - 0x1644]
mov dword [edx + 4], ecx
mov eax, dword [ebp - 0x1640]
mov dword [edx + 8], eax
mov eax, dword [ebp - 0x648]
mov ecx, dword [ebp - 0x1c]
mov edx, dword [ecx + eax*4 + 0x7dc]
movss xmm0, dword [0x9b04e0]
movss dword [edx + 0x98], xmm0
mov eax, dword [ebp - 0x648]
mov ecx, dword [ebp - 0x1c]
mov edx, dword [ecx + eax*4 + 0x7dc]
movss xmm0, dword [0x9b04e0]
movss dword [edx + 0x9c], xmm0
mov eax, dword [ebp - 0x1c]
cmp dword [eax + 0x230], 0x2c
jne 0x8d5c5a
mov eax, dword [ebp - 0x648]
mov ecx, dword [ebp - 0x1c]
mov edx, dword [ecx + eax*4 + 0x7dc]
mov dword [edx + 0xa4], 0x2d
mov eax, dword [ebp - 0x648]
mov ecx, dword [ebp - 0x1c]
mov edx, dword [ecx + eax*4 + 0x7dc]
mov eax, dword [ebp - 0x1c]
mov ecx, dword [eax + 0x38]
mov dword [edx + 0x98], ecx
mov eax, dword [ebp - 0x648]
mov ecx, dword [ebp - 0x1c]
mov edx, dword [ecx + eax*4 + 0x7dc]
mov eax, dword [ebp - 0x1c]
mov ecx, dword [eax + 0x38]
mov dword [edx + 0x9c], ecx
mov eax, dword [ebp - 0x1c]
movss xmm0, dword [eax + 0x38]
mulss xmm0, dword [0x9b93a0]
mov ecx, dword [ebp - 0x648]
mov edx, dword [ebp - 0x1c]
mov eax, dword [edx + ecx*4 + 0x7dc]
addss xmm0, dword [eax + 0x78]
mov ecx, dword [ebp - 0x648]
mov edx, dword [ebp - 0x1c]
mov eax, dword [edx + ecx*4 + 0x7dc]
movss dword [eax + 0x78], xmm0
jmp 0x8d5d60
push 0xcc
call fcn.005de946
add esp, 4
mov dword [ebp - 0x1660], eax
mov dword [ebp - 4], 0x39
cmp dword [ebp - 0x1660], 0
je 0x8d5cc0
push 0xcc
mov ecx, dword [ebp - 0x1660]
call fcn.005de694
push 1
push ecx
xorps xmm0, xmm0
movss dword [esp], xmm0
mov eax, dword [ebp - 0x648]
mov ecx, dword [eax*4 + 0x9b8fa8]
push ecx
push 0xc
mov ecx, dword [ebp - 0x1660]
call fcn.005e0935
mov dword [ebp - 0x1a74], eax
jmp 0x8d5cca
mov dword [ebp - 0x1a74], 0
mov edx, dword [ebp - 0x1a74]
mov dword [ebp - 0x1654], edx
mov dword [ebp - 4], 0xffffffff
mov eax, dword [ebp - 0x648]
mov ecx, dword [ebp - 0x1c]
mov edx, dword [ebp - 0x1654]
mov dword [ecx + eax*4 + 0x7dc], edx
mov eax, dword [ebp - 0x648]
mov ecx, dword [ebp - 0x1c]
mov edx, dword [ecx + eax*4 + 0x7dc]
mov dword [edx + 0xa4], 0
mov eax, dword [ebp - 0x1c]
add eax, 0x50
mov ecx, dword [ebp - 0x648]
mov edx, dword [ebp - 0x1c]
mov ecx, dword [edx + ecx*4 + 0x7dc]
add ecx, 0x74
mov edx, dword [eax]
mov dword [ecx], edx
mov edx, dword [eax + 4]
mov dword [ecx + 4], edx
mov eax, dword [eax + 8]
mov dword [ecx + 8], eax
mov eax, dword [0xc62eb8]
mov ecx, dword [eax + 0x2c]
mov dword [ebp - 0x1a74], ecx
mov edx, dword [ebp - 0x648]
mov eax, dword [ebp - 0x1c]
mov ecx, dword [eax + edx*4 + 0x7dc]
push ecx
mov ecx, dword [ebp - 0x1a74]
call fcn.005e2177
jmp 0x8d592d
jmp 0x8d5dd0
mov dword [ebp - 0x660], 0
jmp 0x8d5d82
mov eax, dword [ebp - 0x660]
add eax, 1
mov dword [ebp - 0x660], eax
cmp dword [ebp - 0x660], 5
jge 0x8d5dd0
mov eax, dword [ebp - 0x660]
mov ecx, dword [ebp - 0x1c]
cmp dword [ecx + eax*4 + 0x7dc], 0
je 0x8d5dce
mov eax, dword [ebp - 0x660]
mov ecx, dword [ebp - 0x1c]
mov edx, dword [ecx + eax*4 + 0x7dc]
push edx
mov ecx, dword [0xc62ea4]
call fcn.005df792
mov eax, dword [ebp - 0x660]
mov ecx, dword [ebp - 0x1c]
mov dword [ecx + eax*4 + 0x7dc], 0
jmp 0x8d5d73
cmp dword [0xc6aff8], 0
jne 0x8d5f46
mov eax, dword [ebp - 0x1c]
movsx ecx, byte [eax + 0xa5b]
cmp ecx, 1
jne 0x8d5f46
mov eax, dword [ebp - 0x1c]
mov ecx, dword [ebx + 8]
sub ecx, dword [eax + 0x85c]
cmp ecx, 0xfa
jbe 0x8d5f46
mov eax, dword [ebp - 0x1c]
push ecx
movss xmm0, dword [eax + 0x2c]
movss dword [esp], xmm0
mov ecx, dword [ebp - 0x1c]
push ecx
movss xmm0, dword [ecx + 0x30]
movss dword [esp], xmm0
mov edx, dword [ebp - 0x1c]
push ecx
movss xmm0, dword [edx + 0x28]
movss dword [esp], xmm0
lea ecx, [ebp - 0x674]
call fcn.005e0ce6
push 0xac
call fcn.005de946
add esp, 4
mov dword [ebp - 0x1678], eax
mov dword [ebp - 4], 0x3a
cmp dword [ebp - 0x1678], 0
je 0x8d5ec7
push 0xac
mov ecx, dword [ebp - 0x1678]
call fcn.005e3f13
mov eax, dword [ebp - 0x1c]
push eax
push 2
sub esp, 0xc
mov ecx, esp
mov edx, dword [ebp - 0x674]
mov dword [ecx], edx
mov eax, dword [ebp - 0x670]
mov dword [ecx + 4], eax
mov edx, dword [ebp - 0x66c]
mov dword [ecx + 8], edx
sub esp, 0xc
mov eax, esp
mov ecx, dword [ebp - 0x674]
mov dword [eax], ecx
mov edx, dword [ebp - 0x670]
mov dword [eax + 4], edx
mov ecx, dword [ebp - 0x66c]
mov dword [eax + 8], ecx
mov ecx, dword [ebp - 0x1678]
call fcn.005e0b51
mov dword [ebp - 0x1a74], eax
jmp 0x8d5ed1
mov dword [ebp - 0x1a74], 0
mov edx, dword [ebp - 0x1a74]
mov dword [ebp - 0x166c], edx
mov dword [ebp - 4], 0xffffffff
mov eax, dword [ebp - 0x166c]
mov dword [ebp - 0x680], eax
mov eax, dword [0xc62eb8]
mov ecx, dword [eax + 0x2c]
mov dword [ebp - 0x1a74], ecx
mov edx, dword [ebp - 0x680]
push edx
mov ecx, dword [ebp - 0x1a74]
call fcn.005e2177
mov eax, dword [ebp - 0x1c]
mov ecx, dword [ebx + 8]
mov dword [eax + 0x85c], ecx
mov eax, dword [ebp - 0x1c]
cmp dword [eax + 0x714], 0
je 0x8d5f46
mov eax, dword [ebp - 0x1c]
mov ecx, dword [eax + 0x714]
mov dword [ebp - 0x1a74], ecx
mov edx, dword [ebx + 8]
push edx
mov ecx, dword [ebp - 0x1a74]
call fcn.005e14d4
mov eax, dword [ebp - 0x1c]
movsx ecx, byte [eax + 0xa3a]
cmp ecx, 1
jne 0x8d6173
mov eax, dword [ebp - 0x1c]
cmp dword [eax + 0x738], 0
je 0x8d5fcd
mov eax, dword [ebp - 0x1c]
movss xmm0, dword [eax + 0x30]
addss xmm0, dword [0x9b0658]
mov ecx, dword [ebp - 0x1c]
push ecx
movss xmm1, dword [ecx + 0x2c]
movss dword [esp], xmm1
push ecx
movss dword [esp], xmm0
mov edx, dword [ebp - 0x1c]
push ecx
movss xmm0, dword [edx + 0x28]
movss dword [esp], xmm0
lea ecx, [ebp - 0x168c]
call fcn.005e0ce6
mov eax, dword [ebp - 0x1c]
mov ecx, dword [eax + 0x738]
add ecx, 0x74
mov edx, dword [ebp - 0x168c]
mov dword [ecx], edx
mov eax, dword [ebp - 0x1688]
mov dword [ecx + 4], eax
mov edx, dword [ebp - 0x1684]
mov dword [ecx + 8], edx
jmp 0x8d6171
push 0x124
call fcn.005de946
add esp, 4
mov dword [ebp - 0x16a4], eax
mov dword [ebp - 4], 0x3b
cmp dword [ebp - 0x16a4], 0
je 0x8d604f
push 0x124
mov ecx, dword [ebp - 0x16a4]
call fcn.005e079b
push 0xbb8
push ecx
xorps xmm0, xmm0
movss dword [esp], xmm0
push ecx
movss xmm0, dword [0x9b2d90]
movss dword [esp], xmm0
push ecx
movss xmm0, dword [0x9b2d90]
movss dword [esp], xmm0
push ecx
movss xmm0, dword [0x9b2d90]
movss dword [esp], xmm0
push 0
push 0x5e
mov ecx, dword [ebp - 0x16a4]
call fcn.005df42c
mov dword [ebp - 0x1a74], eax
jmp 0x8d6059
mov dword [ebp - 0x1a74], 0
mov eax, dword [ebp - 0x1a74]
mov dword [ebp - 0x1698], eax
mov dword [ebp - 4], 0xffffffff
mov ecx, dword [ebp - 0x1c]
mov edx, dword [ebp - 0x1698]
mov dword [ecx + 0x738], edx
mov eax, dword [ebp - 0x1c]
cmp dword [eax + 0x738], 0
je 0x8d6171
mov eax, dword [ebp - 0x1c]
mov ecx, dword [eax + 0x738]
mov dword [ecx + 0x104], 2
mov eax, dword [ebp - 0x1c]
mov ecx, dword [eax + 0x738]
mov dword [ecx + 0x6c], 1
mov eax, dword [ebp - 0x1c]
movss xmm0, dword [eax + 0x30]
addss xmm0, dword [0x9b0658]
mov ecx, dword [ebp - 0x1c]
push ecx
movss xmm1, dword [ecx + 0x2c]
movss dword [esp], xmm1
push ecx
movss dword [esp], xmm0
mov edx, dword [ebp - 0x1c]
push ecx
movss xmm0, dword [edx + 0x28]
movss dword [esp], xmm0
lea ecx, [ebp - 0x16b8]
call fcn.005e0ce6
mov eax, dword [ebp - 0x1c]
mov ecx, dword [eax + 0x738]
add ecx, 0x74
mov edx, dword [ebp - 0x16b8]
mov dword [ecx], edx
mov eax, dword [ebp - 0x16b4]
mov dword [ecx + 4], eax
mov edx, dword [ebp - 0x16b0]
mov dword [ecx + 8], edx
mov eax, dword [ebp - 0x1c]
mov ecx, dword [eax + 0x738]
mov dword [ebp - 0x1a74], ecx
mov edx, dword [ebp - 0x1c]
mov eax, dword [edx + 0x738]
mov ecx, dword [eax]
mov edx, dword [ecx + 0x3c]
mov dword [ebp - 0x1a78], edx
mov esi, esp
push 0x33333333
mov ecx, dword [ebp - 0x1a74]
call dword [ebp - 0x1a78]
cmp esi, esp
call fcn.005e11e1
mov eax, dword [0xc62eb8]
mov ecx, dword [eax + 0x2c]
mov dword [ebp - 0x1a74], ecx
mov edx, dword [ebp - 0x1c]
mov eax, dword [edx + 0x738]
push eax
mov ecx, dword [ebp - 0x1a74]
call fcn.005e2177
jmp 0x8d61a1
mov eax, dword [ebp - 0x1c]
cmp dword [eax + 0x738], 0
je 0x8d61a1
mov eax, dword [ebp - 0x1c]
mov ecx, dword [eax + 0x738]
push ecx
mov ecx, dword [0xc62ea4]
call fcn.005df792
mov eax, dword [ebp - 0x1c]
mov dword [eax + 0x738], 0
cmp dword [0xc6aff4], 0
jne 0x8d6636
mov eax, dword [ebp - 0x1c]
movsx ecx, byte [eax + 0xa42]
cmp ecx, 1
jne 0x8d6636
mov eax, dword [ebp - 0x1c]
cmp dword [eax + 0x9f4], 2
je 0x8d61dd
mov eax, dword [ebp - 0x1c]
cmp dword [eax + 0x9f4], 3
jne 0x8d6636
mov eax, dword [ebp - 0x1c]
mov ecx, dword [ebx + 8]
sub ecx, dword [eax + 0x84c]
cmp ecx, 0x50
jbe 0x8d6636
mov byte [ebp - 0x689], 0
mov eax, dword [ebp - 0x1c]
cmp dword [eax + 0x230], 4
je 0x8d6211
mov eax, dword [ebp - 0x1c]
cmp dword [eax + 0x230], 8
jne 0x8d6218
mov byte [ebp - 0x689], 1
push 0x1c0
call fcn.005de946
add esp, 4
mov dword [ebp - 0x16d0], eax
mov dword [ebp - 4], 0x3c
cmp dword [ebp - 0x16d0], 0
je 0x8d62cf
push 0x1c0
mov ecx, dword [ebp - 0x16d0]
call fcn.005dfc4c
mov eax, dword [ebp - 0x1c]
mov ecx, dword [eax + 0x5c]
mov dword [ebp - 0x1a74], ecx
push 0
push 0
sub esp, 0xc
mov ecx, esp
mov dword [ebp - 0x16dc], esp
push ecx
xorps xmm0, xmm0
movss dword [esp], xmm0
push ecx
xorps xmm0, xmm0
movss dword [esp], xmm0
push ecx
xorps xmm0, xmm0
movss dword [esp], xmm0
call fcn.005e0ce6
sub esp, 0xc
mov ecx, esp
mov dword [ebp - 0x16e8], esp
push ecx
xorps xmm0, xmm0
movss dword [esp], xmm0
push ecx
xorps xmm0, xmm0
movss dword [esp], xmm0
push ecx
xorps xmm0, xmm0
movss dword [esp], xmm0
call fcn.005e0ce6
mov edx, dword [ebp - 0x1a74]
push edx
mov ecx, dword [ebp - 0x16d0]
call fcn.005e19d4
mov dword [ebp - 0x1a78], eax
jmp 0x8d62d9
mov dword [ebp - 0x1a78], 0
mov eax, dword [ebp - 0x1a78]
mov dword [ebp - 0x16c4], eax
mov dword [ebp - 4], 0xffffffff
mov ecx, dword [ebp - 0x16c4]
mov dword [ebp - 0x698], ecx
mov eax, dword [ebp - 0x1c]
movsx ecx, byte [eax + 0xa5f]
test ecx, ecx
jle 0x8d63cb
mov eax, dword [ebp - 0x1c]
cmp dword [eax + 0x12c], 0
je 0x8d63cb
mov byte [ebp - 0x689], 0
mov eax, dword [ebp - 0x698]
mov ecx, dword [ebp - 0x1c]
mov edx, dword [ecx + 0xa64]
mov dword [eax + 0x5c], edx
push 0x20
mov eax, dword [ebp - 0x1c]
add eax, 0x132
push eax
mov ecx, dword [ebp - 0x698]
add ecx, 0xf4
push ecx
call fcn.005e28b6
add esp, 0xc
mov eax, dword [ebp - 0x698]
mov ecx, dword [ebp - 0x1c]
mov edx, dword [ecx + 0x38]
mov dword [eax + 0x38], edx
mov eax, dword [ebp - 0x698]
mov ecx, dword [eax]
mov edx, dword [ecx + 0x3c]
mov dword [ebp - 0x1a74], edx
mov eax, dword [ebp - 0x1c]
mov ecx, dword [eax + 0x12c]
mov esi, esp
push ecx
movss xmm0, dword [ecx + 0x14]
movss dword [esp], xmm0
mov edx, dword [ebp - 0x1c]
movss xmm0, dword [edx + 0x30]
addss xmm0, dword [0x9b0640]
push ecx
movss dword [esp], xmm0
mov eax, dword [ebp - 0x1c]
mov ecx, dword [eax + 0x12c]
push ecx
movss xmm0, dword [ecx + 0xc]
movss dword [esp], xmm0
mov ecx, dword [ebp - 0x698]
call dword [ebp - 0x1a74]
cmp esi, esp
call fcn.005e11e1
jmp 0x8d6452
push 0x20
mov eax, dword [ebp - 0x1c]
add eax, 0x172
push eax
mov ecx, dword [ebp - 0x698]
add ecx, 0xf4
push ecx
call fcn.005e28b6
add esp, 0xc
mov eax, dword [ebp - 0x698]
mov ecx, dword [ebp - 0x1c]
mov edx, dword [ecx + 0x38]
mov dword [eax + 0x38], edx
mov eax, dword [ebp - 0x698]
mov ecx, dword [eax]
mov edx, dword [ecx + 0x3c]
mov dword [ebp - 0x1a74], edx
mov esi, esp
mov eax, dword [ebp - 0x1c]
push ecx
movss xmm0, dword [eax + 0x2c]
movss dword [esp], xmm0
mov ecx, dword [ebp - 0x1c]
movss xmm0, dword [ecx + 0x30]
addss xmm0, dword [0x9b0640]
push ecx
movss dword [esp], xmm0
mov edx, dword [ebp - 0x1c]
push ecx
movss xmm0, dword [edx + 0x28]
movss dword [esp], xmm0
mov ecx, dword [ebp - 0x698]
call dword [ebp - 0x1a74]
cmp esi, esp
call fcn.005e11e1
mov eax, dword [ebp - 0x698]
mov dword [eax + 0x168], 1
mov eax, dword [ebp - 0x698]
movss xmm0, dword [0x9b0658]
movss dword [eax + 0x138], xmm0
mov eax, dword [ebp - 0x698]
movss xmm0, dword [0x9b0658]
movss dword [eax + 0x13c], xmm0
mov eax, dword [ebp - 0x698]
movss xmm0, dword [0x9b0658]
movss dword [eax + 0x140], xmm0
mov eax, dword [ebp - 0x698]
mov ecx, dword [eax]
mov edx, dword [ecx + 0x80]
mov dword [ebp - 0x1a74], edx
movzx eax, byte [ebp - 0x689]
mov esi, esp
push eax
mov ecx, dword [ebp - 0x698]
call dword [ebp - 0x1a74]
cmp esi, esp
call fcn.005e11e1
mov eax, dword [ebp - 0x698]
mov ecx, dword [ebx + 8]
mov dword [eax + 0x124], ecx
mov eax, dword [ebp - 0x698]
mov dword [eax + 0x128], 0xc8
mov eax, dword [ebp - 0x698]
mov ecx, dword [ebp - 0x1c]
mov edx, dword [ecx + 0x34]
mov dword [eax + 0x134], edx
mov eax, dword [ebp - 0x698]
mov ecx, dword [ebp - 0x698]
mov edx, dword [ecx + 0x134]
mov dword [eax + 0x188], edx
mov eax, dword [ebp - 0x698]
mov dword [eax + 0x12c], 1
mov eax, dword [ebp - 0x698]
mov ecx, dword [eax + 0x60]
mov dword [ebp - 0x1a74], ecx
mov edx, dword [ebp - 0x1c]
imul eax, dword [edx + 0x5c], 0x1a40
mov ecx, dword [ebp - 0x1c]
imul edx, dword [ecx + 0x244], 0x70
lea eax, [eax + edx + 0xba0440]
mov ecx, dword [ebp - 0x1c]
imul edx, dword [ecx + 0x5c], 0x2a0
mov ecx, dword [ebp - 0x1c]
mov ecx, dword [ecx + 0x9f4]
mov edx, dword [edx + ecx*4 + 0xc2b4a0]
movsx eax, word [eax + edx*2]
push eax
mov ecx, dword [ebp - 0x1a74]
call fcn.005de496
mov eax, dword [ebp - 0x1c]
movsx ecx, byte [eax + 0xa5f]
test ecx, ecx
jle 0x8d65df
mov eax, dword [ebp - 0x1c]
cmp dword [eax + 0x12c], 0
je 0x8d65df
mov eax, dword [ebp - 0x698]
cmp dword [eax + 0x60], 0
je 0x8d65df
mov eax, dword [ebp - 0x698]
mov ecx, dword [eax + 0x60]
mov dword [ebp - 0x1a74], ecx
mov edx, dword [ebp - 0x1c]
imul eax, dword [edx + 0xa64], 0x2a0
mov ecx, 4
imul edx, ecx, 3
mov eax, dword [eax + edx + 0xc2b4a0]
push eax
mov ecx, dword [ebp - 0x1a74]
call fcn.005de496
mov eax, dword [ebp - 0x1c]
mov ecx, dword [eax + 0x60]
mov edx, dword [ebp - 0x698]
mov eax, dword [edx + 0x60]
mov ecx, dword [ecx + 0x2e4]
mov dword [eax + 0x2e4], ecx
mov eax, dword [ebp - 0x698]
mov dword [eax + 0x130], 0
mov eax, dword [0xc62eb8]
mov ecx, dword [eax + 0x2c]
mov dword [ebp - 0x1a74], ecx
mov edx, dword [ebp - 0x698]
push edx
mov ecx, dword [ebp - 0x1a74]
call fcn.005e2177
mov eax, dword [ebp - 0x1c]
mov ecx, dword [ebx + 8]
mov dword [eax + 0x84c], ecx
mov eax, dword [ebp - 0x1c]
movsx ecx, byte [eax + 0xa3d]
cmp ecx, 1
jne 0x8d6853
mov eax, dword [ebp - 0x1c]
cmp dword [eax + 0x73c], 0
je 0x8d66bd
mov eax, dword [ebp - 0x1c]
movss xmm0, dword [eax + 0x30]
addss xmm0, dword [0x9b0660]
mov ecx, dword [ebp - 0x1c]
push ecx
movss xmm1, dword [ecx + 0x2c]
movss dword [esp], xmm1
push ecx
movss dword [esp], xmm0
mov edx, dword [ebp - 0x1c]
push ecx
movss xmm0, dword [edx + 0x28]
movss dword [esp], xmm0
lea ecx, [ebp - 0x16fc]
call fcn.005e0ce6
mov eax, dword [ebp - 0x1c]
mov ecx, dword [eax + 0x73c]
add ecx, 0x74
mov edx, dword [ebp - 0x16fc]
mov dword [ecx], edx
mov eax, dword [ebp - 0x16f8]
mov dword [ecx + 4], eax
mov edx, dword [ebp - 0x16f4]
mov dword [ecx + 8], edx
jmp 0x8d6851
push 0x124
call fcn.005de946
add esp, 4
mov dword [ebp - 0x1714], eax
mov dword [ebp - 4], 0x3d
cmp dword [ebp - 0x1714], 0
je 0x8d673f
push 0x124
mov ecx, dword [ebp - 0x1714]
call fcn.005e079b
push 0x1388
push ecx
xorps xmm0, xmm0
movss dword [esp], xmm0
push ecx
movss xmm0, dword [0x9b2d90]
movss dword [esp], xmm0
push ecx
movss xmm0, dword [0x9b2d90]
movss dword [esp], xmm0
push ecx
movss xmm0, dword [0x9b2d90]
movss dword [esp], xmm0
push 0
push 0x5d
mov ecx, dword [ebp - 0x1714]
call fcn.005df42c
mov dword [ebp - 0x1a74], eax
jmp 0x8d6749
mov dword [ebp - 0x1a74], 0
mov eax, dword [ebp - 0x1a74]
mov dword [ebp - 0x1708], eax
mov dword [ebp - 4], 0xffffffff
mov ecx, dword [ebp - 0x1c]
mov edx, dword [ebp - 0x1708]
mov dword [ecx + 0x73c], edx
mov eax, dword [ebp - 0x1c]
mov ecx, dword [eax + 0x73c]
mov dword [ecx + 0x104], 3
mov eax, dword [ebp - 0x1c]
mov ecx, dword [eax + 0x73c]
mov dword [ecx + 0x6c], 1
mov eax, dword [ebp - 0x1c]
movss xmm0, dword [eax + 0x30]
addss xmm0, dword [0x9b0660]
mov ecx, dword [ebp - 0x1c]
push ecx
movss xmm1, dword [ecx + 0x2c]
movss dword [esp], xmm1
push ecx
movss dword [esp], xmm0
mov edx, dword [ebp - 0x1c]
push ecx
movss xmm0, dword [edx + 0x28]
movss dword [esp], xmm0
lea ecx, [ebp - 0x1728]
call fcn.005e0ce6
mov eax, dword [ebp - 0x1c]
mov ecx, dword [eax + 0x73c]
add ecx, 0x74
mov edx, dword [ebp - 0x1728]
mov dword [ecx], edx
mov eax, dword [ebp - 0x1724]
mov dword [ecx + 4], eax
mov edx, dword [ebp - 0x1720]
mov dword [ecx + 8], edx
mov eax, dword [ebp - 0x1c]
mov ecx, dword [eax + 0x73c]
mov dword [ebp - 0x1a74], ecx
mov edx, dword [ebp - 0x1c]
mov eax, dword [edx + 0x73c]
mov ecx, dword [eax]
mov edx, dword [ecx + 0x3c]
mov dword [ebp - 0x1a78], edx
mov esi, esp
push 0x88888800
mov ecx, dword [ebp - 0x1a74]
call dword [ebp - 0x1a78]
cmp esi, esp
call fcn.005e11e1
mov eax, dword [0xc62eb8]
mov ecx, dword [eax + 0x2c]
mov dword [ebp - 0x1a74], ecx
mov edx, dword [ebp - 0x1c]
mov eax, dword [edx + 0x73c]
push eax
mov ecx, dword [ebp - 0x1a74]
call fcn.005e2177
jmp 0x8d6881
mov eax, dword [ebp - 0x1c]
cmp dword [eax + 0x73c], 0
je 0x8d6881
mov eax, dword [ebp - 0x1c]
mov ecx, dword [eax + 0x73c]
push ecx
mov ecx, dword [0xc62ea4]
call fcn.005df792
mov eax, dword [ebp - 0x1c]
mov dword [eax + 0x73c], 0
mov eax, dword [ebp - 0x1c]
movsx ecx, byte [eax + 0xa41]
cmp ecx, 1
jne 0x8d6aaf
mov eax, dword [0xc62eb8]
mov ecx, dword [eax + 0x4c]
cmp ecx, dword [ebp - 0x1c]
jne 0x8d6aaf
mov eax, dword [ebp - 0x1c]
cmp dword [eax + 0x740], 0
je 0x8d6919
mov eax, dword [ebp - 0x1c]
movss xmm0, dword [eax + 0x30]
addss xmm0, dword [0x9b0664]
mov ecx, dword [ebp - 0x1c]
push ecx
movss xmm1, dword [ecx + 0x2c]
movss dword [esp], xmm1
push ecx
movss dword [esp], xmm0
mov edx, dword [ebp - 0x1c]
push ecx
movss xmm0, dword [edx + 0x28]
movss dword [esp], xmm0
lea ecx, [ebp - 0x173c]
call fcn.005e0ce6
mov eax, dword [ebp - 0x1c]
mov ecx, dword [eax + 0x740]
add ecx, 0x74
mov edx, dword [ebp - 0x173c]
mov dword [ecx], edx
mov eax, dword [ebp - 0x1738]
mov dword [ecx + 4], eax
mov edx, dword [ebp - 0x1734]
mov dword [ecx + 8], edx
jmp 0x8d6aad
push 0x124
call fcn.005de946
add esp, 4
mov dword [ebp - 0x1754], eax
mov dword [ebp - 4], 0x3e
cmp dword [ebp - 0x1754], 0
je 0x8d699b
push 0x124
mov ecx, dword [ebp - 0x1754]
call fcn.005e079b
push 0x1388
push ecx
xorps xmm0, xmm0
movss dword [esp], xmm0
push ecx
movss xmm0, dword [0x9b1424]
movss dword [esp], xmm0
push ecx
movss xmm0, dword [0x9b1424]
movss dword [esp], xmm0
push ecx
movss xmm0, dword [0x9b1424]
movss dword [esp], xmm0
push 0
push 0x5e
mov ecx, dword [ebp - 0x1754]
call fcn.005df42c
mov dword [ebp - 0x1a74], eax
jmp 0x8d69a5
mov dword [ebp - 0x1a74], 0
mov eax, dword [ebp - 0x1a74]
mov dword [ebp - 0x1748], eax
mov dword [ebp - 4], 0xffffffff
mov ecx, dword [ebp - 0x1c]
mov edx, dword [ebp - 0x1748]
mov dword [ecx + 0x740], edx
mov eax, dword [ebp - 0x1c]
mov ecx, dword [eax + 0x740]
mov dword [ecx + 0x104], 4
mov eax, dword [ebp - 0x1c]
mov ecx, dword [eax + 0x740]
mov dword [ecx + 0x6c], 1
mov eax, dword [ebp - 0x1c]
movss xmm0, dword [eax + 0x30]
addss xmm0, dword [0x9b0664]
mov ecx, dword [ebp - 0x1c]
push ecx
movss xmm1, dword [ecx + 0x2c]
movss dword [esp], xmm1
push ecx
movss dword [esp], xmm0
mov edx, dword [ebp - 0x1c]
push ecx
movss xmm0, dword [edx + 0x28]
movss dword [esp], xmm0
lea ecx, [ebp - 0x1768]
call fcn.005e0ce6
mov eax, dword [ebp - 0x1c]
mov ecx, dword [eax + 0x740]
add ecx, 0x74
mov edx, dword [ebp - 0x1768]
mov dword [ecx], edx
mov eax, dword [ebp - 0x1764]
mov dword [ecx + 4], eax
mov edx, dword [ebp - 0x1760]
mov dword [ecx + 8], edx
mov eax, dword [ebp - 0x1c]
mov ecx, dword [eax + 0x740]
mov dword [ebp - 0x1a74], ecx
mov edx, dword [ebp - 0x1c]
mov eax, dword [edx + 0x740]
mov ecx, dword [eax]
mov edx, dword [ecx + 0x3c]
mov dword [ebp - 0x1a78], edx
mov esi, esp
push 0xaaaa0000
mov ecx, dword [ebp - 0x1a74]
call dword [ebp - 0x1a78]
cmp esi, esp
call fcn.005e11e1
mov eax, dword [0xc62eb8]
mov ecx, dword [eax + 0x2c]
mov dword [ebp - 0x1a74], ecx
mov edx, dword [ebp - 0x1c]
mov eax, dword [edx + 0x740]
push eax
mov ecx, dword [ebp - 0x1a74]
call fcn.005e2177
jmp 0x8d6add
mov eax, dword [ebp - 0x1c]
cmp dword [eax + 0x740], 0
je 0x8d6add
mov eax, dword [ebp - 0x1c]
mov ecx, dword [eax + 0x740]
push ecx
mov ecx, dword [0xc62ea4]
call fcn.005df792
mov eax, dword [ebp - 0x1c]
mov dword [eax + 0x740], 0
mov eax, dword [ebp - 0x1c]
cmp dword [eax + 0x230], 8
jne 0x8d6afc
mov eax, dword [ebp - 0x1c]
movsx ecx, byte [eax + 0xa5a]
cmp ecx, 1
je 0x8d6b86
mov eax, dword [ebp - 0x1c]
cmp dword [eax + 0x230], 8
jne 0x8d6b86
mov eax, 4
imul ecx, eax, 0
mov edx, dword [ebp - 0x1c]
cmp dword [edx + ecx + 0x778], 0
je 0x8d6b86
mov dword [ebp - 0x6a4], 0
jmp 0x8d6b38
mov eax, dword [ebp - 0x6a4]
add eax, 1
mov dword [ebp - 0x6a4], eax
cmp dword [ebp - 0x6a4], 7
jge 0x8d6b86
mov eax, dword [ebp - 0x6a4]
mov ecx, dword [ebp - 0x1c]
cmp dword [ecx + eax*4 + 0x778], 0
je 0x8d6b84
mov eax, dword [ebp - 0x6a4]
mov ecx, dword [ebp - 0x1c]
mov edx, dword [ecx + eax*4 + 0x778]
push edx
mov ecx, dword [0xc62ea4]
call fcn.005df792
mov eax, dword [ebp - 0x6a4]
mov ecx, dword [ebp - 0x1c]
mov dword [ecx + eax*4 + 0x778], 0
jmp 0x8d6b29
mov eax, dword [ebp - 0x1c]
movsx ecx, byte [eax + 0xa45]
cmp ecx, 1
jne 0x8d6ba3
mov eax, dword [ebp - 0x1c]
movsx ecx, byte [eax + 0xa46]
test ecx, ecx
je 0x8d6bd6
mov eax, dword [ebp - 0x1c]
cmp dword [eax + 0x744], 0
je 0x8d6bd1
mov eax, dword [ebp - 0x1c]
mov ecx, dword [eax + 0x744]
push ecx
mov ecx, dword [0xc62ea4]
call fcn.005df792
mov eax, dword [ebp - 0x1c]
mov dword [eax + 0x744], 0
jmp 0x8d6f20
mov eax, dword [ebp - 0x1c]
cmp dword [eax + 0x744], 0
jne 0x8d6e23
push 0x184
call fcn.005de946
add esp, 4
mov dword [ebp - 0x1780], eax
mov dword [ebp - 4], 0x3f
cmp dword [ebp - 0x1780], 0
je 0x8d6c6a
push 0x184
mov ecx, dword [ebp - 0x1780]
call fcn.005dfc3d
push 0x50
push 1
push ecx
xorps xmm0, xmm0
movss dword [esp], xmm0
push ecx
movss xmm0, dword [0x9b0660]
movss dword [esp], xmm0
push ecx
movss xmm0, dword [0x9b0660]
movss dword [esp], xmm0
push ecx
movss xmm0, dword [0x9b0660]
movss dword [esp], xmm0
push 0
push 0x1b6
mov ecx, dword [ebp - 0x1780]
call fcn.005e33d8
mov dword [ebp - 0x1a74], eax
jmp 0x8d6c74
mov dword [ebp - 0x1a74], 0
mov eax, dword [ebp - 0x1a74]
mov dword [ebp - 0x1774], eax
mov dword [ebp - 4], 0xffffffff
mov ecx, dword [ebp - 0x1c]
mov edx, dword [ebp - 0x1774]
mov dword [ecx + 0x744], edx
mov eax, dword [ebp - 0x1c]
mov ecx, dword [eax + 0x744]
mov dword [ecx + 0x6c], 1
mov eax, dword [ebp - 0x1c]
mov ecx, dword [eax + 0x744]
mov dword [ecx + 0x104], 2
mov eax, dword [ebp - 0x1c]
movsx ecx, byte [eax + 0xa5f]
cmp ecx, 1
jne 0x8d6d44
mov eax, dword [ebp - 0x1c]
mov ecx, dword [eax + 0x5c]
mov edx, dword [ebp - 0x1c]
movss xmm0, dword [ecx*8 + 0x27966f4]
mulss xmm0, dword [edx + 0x38]
mov eax, dword [ebp - 0x1c]
addss xmm0, dword [eax + 0x54]
subss xmm0, dword [0x9b0658]
mov ecx, dword [ebp - 0x1c]
push ecx
movss xmm1, dword [ecx + 0x58]
movss dword [esp], xmm1
push ecx
movss dword [esp], xmm0
mov edx, dword [ebp - 0x1c]
push ecx
movss xmm0, dword [edx + 0x50]
movss dword [esp], xmm0
lea ecx, [ebp - 0x1794]
call fcn.005e0ce6
mov eax, dword [ebp - 0x1c]
mov ecx, dword [eax + 0x744]
add ecx, 0x74
mov edx, dword [ebp - 0x1794]
mov dword [ecx], edx
mov eax, dword [ebp - 0x1790]
mov dword [ecx + 4], eax
mov edx, dword [ebp - 0x178c]
mov dword [ecx + 8], edx
jmp 0x8d6db6
mov eax, dword [ebp - 0x1c]
mov ecx, dword [eax + 0x5c]
mov edx, dword [ebp - 0x1c]
movss xmm0, dword [ecx*8 + 0x27966f4]
mulss xmm0, dword [edx + 0x38]
mov eax, dword [ebp - 0x1c]
addss xmm0, dword [eax + 0x30]
mov ecx, dword [ebp - 0x1c]
push ecx
movss xmm1, dword [ecx + 0x2c]
movss dword [esp], xmm1
push ecx
movss dword [esp], xmm0
mov edx, dword [ebp - 0x1c]
push ecx
movss xmm0, dword [edx + 0x28]
movss dword [esp], xmm0
lea ecx, [ebp - 0x17a8]
call fcn.005e0ce6
mov eax, dword [ebp - 0x1c]
mov ecx, dword [eax + 0x744]
add ecx, 0x74
mov edx, dword [ebp - 0x17a8]
mov dword [ecx], edx
mov eax, dword [ebp - 0x17a4]
mov dword [ecx + 4], eax
mov edx, dword [ebp - 0x17a0]
mov dword [ecx + 8], edx
mov eax, dword [ebp - 0x1c]
mov ecx, dword [eax + 0x744]
mov dword [ecx + 0x148], 0xa
mov eax, dword [ebp - 0x1c]
mov ecx, dword [eax + 0x744]
movss xmm0, dword [0x9b0640]
movss dword [ecx + 0x13c], xmm0
mov eax, dword [ebp - 0x1c]
mov ecx, dword [eax + 0x744]
movss xmm0, dword [0x9b0640]
movss dword [ecx + 0x140], xmm0
mov eax, dword [0xc62eb8]
mov ecx, dword [eax + 0x2c]
mov dword [ebp - 0x1a74], ecx
mov edx, dword [ebp - 0x1c]
mov eax, dword [edx + 0x744]
push eax
mov ecx, dword [ebp - 0x1a74]
call fcn.005e2177
jmp 0x8d6f20
mov eax, dword [ebp - 0x1c]
movsx ecx, byte [eax + 0xa5f]
cmp ecx, 1
jne 0x8d6eae
mov eax, dword [ebp - 0x1c]
mov ecx, dword [eax + 0x5c]
mov edx, dword [ebp - 0x1c]
movss xmm0, dword [ecx*8 + 0x27966f4]
mulss xmm0, dword [edx + 0x38]
mov eax, dword [ebp - 0x1c]
addss xmm0, dword [eax + 0x54]
subss xmm0, dword [0x9b0658]
mov ecx, dword [ebp - 0x1c]
push ecx
movss xmm1, dword [ecx + 0x58]
movss dword [esp], xmm1
push ecx
movss dword [esp], xmm0
mov edx, dword [ebp - 0x1c]
push ecx
movss xmm0, dword [edx + 0x50]
movss dword [esp], xmm0
lea ecx, [ebp - 0x17bc]
call fcn.005e0ce6
mov eax, dword [ebp - 0x1c]
mov ecx, dword [eax + 0x744]
add ecx, 0x74
mov edx, dword [ebp - 0x17bc]
mov dword [ecx], edx
mov eax, dword [ebp - 0x17b8]
mov dword [ecx + 4], eax
mov edx, dword [ebp - 0x17b4]
mov dword [ecx + 8], edx
jmp 0x8d6f20
mov eax, dword [ebp - 0x1c]
mov ecx, dword [eax + 0x5c]
mov edx, dword [ebp - 0x1c]
movss xmm0, dword [ecx*8 + 0x27966f4]
mulss xmm0, dword [edx + 0x38]
mov eax, dword [ebp - 0x1c]
addss xmm0, dword [eax + 0x30]
mov ecx, dword [ebp - 0x1c]
push ecx
movss xmm1, dword [ecx + 0x2c]
movss dword [esp], xmm1
push ecx
movss dword [esp], xmm0
mov edx, dword [ebp - 0x1c]
push ecx
movss xmm0, dword [edx + 0x28]
movss dword [esp], xmm0
lea ecx, [ebp - 0x17d0]
call fcn.005e0ce6
mov eax, dword [ebp - 0x1c]
mov ecx, dword [eax + 0x744]
add ecx, 0x74
mov edx, dword [ebp - 0x17d0]
mov dword [ecx], edx
mov eax, dword [ebp - 0x17cc]
mov dword [ecx + 4], eax
mov edx, dword [ebp - 0x17c8]
mov dword [ecx + 8], edx
mov eax, dword [ebp - 0x1c]
movsx ecx, byte [eax + 0xa46]
cmp ecx, 1
jne 0x8d6f3d
mov eax, dword [ebp - 0x1c]
movsx ecx, byte [eax + 0xa45]
test ecx, ecx
je 0x8d6f70
mov eax, dword [ebp - 0x1c]
cmp dword [eax + 0x748], 0
je 0x8d6f6b
mov eax, dword [ebp - 0x1c]
mov ecx, dword [eax + 0x748]
push ecx
mov ecx, dword [0xc62ea4]
call fcn.005df792
mov eax, dword [ebp - 0x1c]
mov dword [eax + 0x748], 0
jmp 0x8d72ba
mov eax, dword [ebp - 0x1c]
cmp dword [eax + 0x748], 0
jne 0x8d71bd
push 0x184
call fcn.005de946
add esp, 4
mov dword [ebp - 0x17e8], eax
mov dword [ebp - 4], 0x40
cmp dword [ebp - 0x17e8], 0
je 0x8d7004
push 0x184
mov ecx, dword [ebp - 0x17e8]
call fcn.005dfc3d
push 0x50
push 1
push ecx
xorps xmm0, xmm0
movss dword [esp], xmm0
push ecx
movss xmm0, dword [0x9b0660]
movss dword [esp], xmm0
push ecx
movss xmm0, dword [0x9b0660]
movss dword [esp], xmm0
push ecx
movss xmm0, dword [0x9b0660]
movss dword [esp], xmm0
push 0
push 0x1b7
mov ecx, dword [ebp - 0x17e8]
call fcn.005e33d8
mov dword [ebp - 0x1a74], eax
jmp 0x8d700e
mov dword [ebp - 0x1a74], 0
mov eax, dword [ebp - 0x1a74]
mov dword [ebp - 0x17dc], eax
mov dword [ebp - 4], 0xffffffff
mov ecx, dword [ebp - 0x1c]
mov edx, dword [ebp - 0x17dc]
mov dword [ecx + 0x748], edx
mov eax, dword [ebp - 0x1c]
mov ecx, dword [eax + 0x748]
mov dword [ecx + 0x6c], 1
mov eax, dword [ebp - 0x1c]
mov ecx, dword [eax + 0x748]
mov dword [ecx + 0x104], 2
mov eax, dword [ebp - 0x1c]
movsx ecx, byte [eax + 0xa5f]
cmp ecx, 1
jne 0x8d70de
mov eax, dword [ebp - 0x1c]
mov ecx, dword [eax + 0x5c]
mov edx, dword [ebp - 0x1c]
movss xmm0, dword [ecx*8 + 0x27966f4]
mulss xmm0, dword [edx + 0x38]
mov eax, dword [ebp - 0x1c]
addss xmm0, dword [eax + 0x54]
subss xmm0, dword [0x9b0658]
mov ecx, dword [ebp - 0x1c]
push ecx
movss xmm1, dword [ecx + 0x58]
movss dword [esp], xmm1
push ecx
movss dword [esp], xmm0
mov edx, dword [ebp - 0x1c]
push ecx
movss xmm0, dword [edx + 0x50]
movss dword [esp], xmm0
lea ecx, [ebp - 0x17fc]
call fcn.005e0ce6
mov eax, dword [ebp - 0x1c]
mov ecx, dword [eax + 0x748]
add ecx, 0x74
mov edx, dword [ebp - 0x17fc]
mov dword [ecx], edx
mov eax, dword [ebp - 0x17f8]
mov dword [ecx + 4], eax
mov edx, dword [ebp - 0x17f4]
mov dword [ecx + 8], edx
jmp 0x8d7150
mov eax, dword [ebp - 0x1c]
mov ecx, dword [eax + 0x5c]
mov edx, dword [ebp - 0x1c]
movss xmm0, dword [ecx*8 + 0x27966f4]
mulss xmm0, dword [edx + 0x38]
mov eax, dword [ebp - 0x1c]
addss xmm0, dword [eax + 0x30]
mov ecx, dword [ebp - 0x1c]
push ecx
movss xmm1, dword [ecx + 0x2c]
movss dword [esp], xmm1
push ecx
movss dword [esp], xmm0
mov edx, dword [ebp - 0x1c]
push ecx
movss xmm0, dword [edx + 0x28]
movss dword [esp], xmm0
lea ecx, [ebp - 0x1810]
call fcn.005e0ce6
mov eax, dword [ebp - 0x1c]
mov ecx, dword [eax + 0x748]
add ecx, 0x74
mov edx, dword [ebp - 0x1810]
mov dword [ecx], edx
mov eax, dword [ebp - 0x180c]
mov dword [ecx + 4], eax
mov edx, dword [ebp - 0x1808]
mov dword [ecx + 8], edx
mov eax, dword [ebp - 0x1c]
mov ecx, dword [eax + 0x748]
mov dword [ecx + 0x148], 0xa
mov eax, dword [ebp - 0x1c]
mov ecx, dword [eax + 0x748]
movss xmm0, dword [0x9b0640]
movss dword [ecx + 0x13c], xmm0
mov eax, dword [ebp - 0x1c]
mov ecx, dword [eax + 0x748]
movss xmm0, dword [0x9b0640]
movss dword [ecx + 0x140], xmm0
mov eax, dword [0xc62eb8]
mov ecx, dword [eax + 0x2c]
mov dword [ebp - 0x1a74], ecx
mov edx, dword [ebp - 0x1c]
mov eax, dword [edx + 0x748]
push eax
mov ecx, dword [ebp - 0x1a74]
call fcn.005e2177
jmp 0x8d72ba
mov eax, dword [ebp - 0x1c]
movsx ecx, byte [eax + 0xa5f]
cmp ecx, 1
jne 0x8d7248
mov eax, dword [ebp - 0x1c]
mov ecx, dword [eax + 0x5c]
mov edx, dword [ebp - 0x1c]
movss xmm0, dword [ecx*8 + 0x27966f4]
mulss xmm0, dword [edx + 0x38]
mov eax, dword [ebp - 0x1c]
addss xmm0, dword [eax + 0x54]
subss xmm0, dword [0x9b0658]
mov ecx, dword [ebp - 0x1c]
push ecx
movss xmm1, dword [ecx + 0x58]
movss dword [esp], xmm1
push ecx
movss dword [esp], xmm0
mov edx, dword [ebp - 0x1c]
push ecx
movss xmm0, dword [edx + 0x50]
movss dword [esp], xmm0
lea ecx, [ebp - 0x1824]
call fcn.005e0ce6
mov eax, dword [ebp - 0x1c]
mov ecx, dword [eax + 0x748]
add ecx, 0x74
mov edx, dword [ebp - 0x1824]
mov dword [ecx], edx
mov eax, dword [ebp - 0x1820]
mov dword [ecx + 4], eax
mov edx, dword [ebp - 0x181c]
mov dword [ecx + 8], edx
jmp 0x8d72ba
mov eax, dword [ebp - 0x1c]
mov ecx, dword [eax + 0x5c]
mov edx, dword [ebp - 0x1c]
movss xmm0, dword [ecx*8 + 0x27966f4]
mulss xmm0, dword [edx + 0x38]
mov eax, dword [ebp - 0x1c]
addss xmm0, dword [eax + 0x30]
mov ecx, dword [ebp - 0x1c]
push ecx
movss xmm1, dword [ecx + 0x2c]
movss dword [esp], xmm1
push ecx
movss dword [esp], xmm0
mov edx, dword [ebp - 0x1c]
push ecx
movss xmm0, dword [edx + 0x28]
movss dword [esp], xmm0
lea ecx, [ebp - 0x1838]
call fcn.005e0ce6
mov eax, dword [ebp - 0x1c]
mov ecx, dword [eax + 0x748]
add ecx, 0x74
mov edx, dword [ebp - 0x1838]
mov dword [ecx], edx
mov eax, dword [ebp - 0x1834]
mov dword [ecx + 4], eax
mov edx, dword [ebp - 0x1830]
mov dword [ecx + 8], edx
mov eax, dword [ebp - 0x1c]
movsx ecx, byte [eax + 0xa46]
cmp ecx, 1
jne 0x8d72d8
mov eax, dword [ebp - 0x1c]
movsx ecx, byte [eax + 0xa45]
cmp ecx, 1
je 0x8d730b
mov eax, dword [ebp - 0x1c]
cmp dword [eax + 0x74c], 0
je 0x8d7306
mov eax, dword [ebp - 0x1c]
mov ecx, dword [eax + 0x74c]
push ecx
mov ecx, dword [0xc62ea4]
call fcn.005df792
mov eax, dword [ebp - 0x1c]
mov dword [eax + 0x74c], 0
jmp 0x8d7655
mov eax, dword [ebp - 0x1c]
cmp dword [eax + 0x74c], 0
jne 0x8d7558
push 0x184
call fcn.005de946
add esp, 4
mov dword [ebp - 0x1850], eax
mov dword [ebp - 4], 0x41
cmp dword [ebp - 0x1850], 0
je 0x8d739f
push 0x184
mov ecx, dword [ebp - 0x1850]
call fcn.005dfc3d
push 0x50
push 1
push ecx
xorps xmm0, xmm0
movss dword [esp], xmm0
push ecx
movss xmm0, dword [0x9b0660]
movss dword [esp], xmm0
push ecx
movss xmm0, dword [0x9b0660]
movss dword [esp], xmm0
push ecx
movss xmm0, dword [0x9b0660]
movss dword [esp], xmm0
push 0
push 0x1b8
mov ecx, dword [ebp - 0x1850]
call fcn.005e33d8
mov dword [ebp - 0x1a74], eax
jmp 0x8d73a9
mov dword [ebp - 0x1a74], 0
mov eax, dword [ebp - 0x1a74]
mov dword [ebp - 0x1844], eax
mov dword [ebp - 4], 0xffffffff
mov ecx, dword [ebp - 0x1c]
mov edx, dword [ebp - 0x1844]
mov dword [ecx + 0x74c], edx
mov eax, dword [ebp - 0x1c]
mov ecx, dword [eax + 0x74c]
mov dword [ecx + 0x6c], 1
mov eax, dword [ebp - 0x1c]
mov ecx, dword [eax + 0x74c]
mov dword [ecx + 0x104], 2
mov eax, dword [ebp - 0x1c]
movsx ecx, byte [eax + 0xa5f]
cmp ecx, 1
jne 0x8d7479
mov eax, dword [ebp - 0x1c]
mov ecx, dword [eax + 0x5c]
mov edx, dword [ebp - 0x1c]
movss xmm0, dword [ecx*8 + 0x27966f4]
mulss xmm0, dword [edx + 0x38]
mov eax, dword [ebp - 0x1c]
addss xmm0, dword [eax + 0x54]
subss xmm0, dword [0x9b0658]
mov ecx, dword [ebp - 0x1c]
push ecx
movss xmm1, dword [ecx + 0x58]
movss dword [esp], xmm1
push ecx
movss dword [esp], xmm0
mov edx, dword [ebp - 0x1c]
push ecx
movss xmm0, dword [edx + 0x50]
movss dword [esp], xmm0
lea ecx, [ebp - 0x1864]
call fcn.005e0ce6
mov eax, dword [ebp - 0x1c]
mov ecx, dword [eax + 0x74c]
add ecx, 0x74
mov edx, dword [ebp - 0x1864]
mov dword [ecx], edx
mov eax, dword [ebp - 0x1860]
mov dword [ecx + 4], eax
mov edx, dword [ebp - 0x185c]
mov dword [ecx + 8], edx
jmp 0x8d74eb
mov eax, dword [ebp - 0x1c]
mov ecx, dword [eax + 0x5c]
mov edx, dword [ebp - 0x1c]
movss xmm0, dword [ecx*8 + 0x27966f4]
mulss xmm0, dword [edx + 0x38]
mov eax, dword [ebp - 0x1c]
addss xmm0, dword [eax + 0x30]
mov ecx, dword [ebp - 0x1c]
push ecx
movss xmm1, dword [ecx + 0x2c]
movss dword [esp], xmm1
push ecx
movss dword [esp], xmm0
mov edx, dword [ebp - 0x1c]
push ecx
movss xmm0, dword [edx + 0x28]
movss dword [esp], xmm0
lea ecx, [ebp - 0x1878]
call fcn.005e0ce6
mov eax, dword [ebp - 0x1c]
mov ecx, dword [eax + 0x74c]
add ecx, 0x74
mov edx, dword [ebp - 0x1878]
mov dword [ecx], edx
mov eax, dword [ebp - 0x1874]
mov dword [ecx + 4], eax
mov edx, dword [ebp - 0x1870]
mov dword [ecx + 8], edx
mov eax, dword [ebp - 0x1c]
mov ecx, dword [eax + 0x74c]
mov dword [ecx + 0x148], 0xa
mov eax, dword [ebp - 0x1c]
mov ecx, dword [eax + 0x74c]
movss xmm0, dword [0x9b0640]
movss dword [ecx + 0x13c], xmm0
mov eax, dword [ebp - 0x1c]
mov ecx, dword [eax + 0x74c]
movss xmm0, dword [0x9b0640]
movss dword [ecx + 0x140], xmm0
mov eax, dword [0xc62eb8]
mov ecx, dword [eax + 0x2c]
mov dword [ebp - 0x1a74], ecx
mov edx, dword [ebp - 0x1c]
mov eax, dword [edx + 0x74c]
push eax
mov ecx, dword [ebp - 0x1a74]
call fcn.005e2177
jmp 0x8d7655
mov eax, dword [ebp - 0x1c]
movsx ecx, byte [eax + 0xa5f]
cmp ecx, 1
jne 0x8d75e3
mov eax, dword [ebp - 0x1c]
mov ecx, dword [eax + 0x5c]
mov edx, dword [ebp - 0x1c]
movss xmm0, dword [ecx*8 + 0x27966f4]
mulss xmm0, dword [edx + 0x38]
mov eax, dword [ebp - 0x1c]
addss xmm0, dword [eax + 0x54]
subss xmm0, dword [0x9b0658]
mov ecx, dword [ebp - 0x1c]
push ecx
movss xmm1, dword [ecx + 0x58]
movss dword [esp], xmm1
push ecx
movss dword [esp], xmm0
mov edx, dword [ebp - 0x1c]
push ecx
movss xmm0, dword [edx + 0x50]
movss dword [esp], xmm0
lea ecx, [ebp - 0x188c]
call fcn.005e0ce6
mov eax, dword [ebp - 0x1c]
mov ecx, dword [eax + 0x74c]
add ecx, 0x74
mov edx, dword [ebp - 0x188c]
mov dword [ecx], edx
mov eax, dword [ebp - 0x1888]
mov dword [ecx + 4], eax
mov edx, dword [ebp - 0x1884]
mov dword [ecx + 8], edx
jmp 0x8d7655
mov eax, dword [ebp - 0x1c]
mov ecx, dword [eax + 0x5c]
mov edx, dword [ebp - 0x1c]
movss xmm0, dword [ecx*8 + 0x27966f4]
mulss xmm0, dword [edx + 0x38]
mov eax, dword [ebp - 0x1c]
addss xmm0, dword [eax + 0x30]
mov ecx, dword [ebp - 0x1c]
push ecx
movss xmm1, dword [ecx + 0x2c]
movss dword [esp], xmm1
push ecx
movss dword [esp], xmm0
mov edx, dword [ebp - 0x1c]
push ecx
movss xmm0, dword [edx + 0x28]
movss dword [esp], xmm0
lea ecx, [ebp - 0x18a0]
call fcn.005e0ce6
mov eax, dword [ebp - 0x1c]
mov ecx, dword [eax + 0x74c]
add ecx, 0x74
mov edx, dword [ebp - 0x18a0]
mov dword [ecx], edx
mov eax, dword [ebp - 0x189c]
mov dword [ecx + 4], eax
mov edx, dword [ebp - 0x1898]
mov dword [ecx + 8], edx
cmp dword [0xc6aff4], 0
jne 0x8d7ba2
mov eax, dword [ebp - 0x1c]
movsx ecx, byte [eax + 0xa57]
cmp ecx, 1
jne 0x8d7ba2
mov esi, esp
call dword [sym.imp.ucrtbased.dll_rand]
cmp esi, esp
call fcn.005e11e1
cdq
mov ecx, 5
idiv ecx
mov dword [ebp - 0x6b0], edx
push 0x184
call fcn.005de946
add esp, 4
mov dword [ebp - 0x18b8], eax
mov dword [ebp - 4], 0x42
cmp dword [ebp - 0x18b8], 0
je 0x8d774a
push 0x184
mov ecx, dword [ebp - 0x18b8]
call fcn.005dfc3d
push 0x50
push 1
push ecx
xorps xmm0, xmm0
movss dword [esp], xmm0
cvtsi2ss xmm0, dword [ebp - 0x6b0]
mulss xmm0, dword [0x9b0628]
addss xmm0, dword [0x9b0628]
push ecx
movss dword [esp], xmm0
cvtsi2ss xmm0, dword [ebp - 0x6b0]
mulss xmm0, dword [0x9b0630]
addss xmm0, dword [0x9b0628]
push ecx
movss dword [esp], xmm0
cvtsi2ss xmm0, dword [ebp - 0x6b0]
mulss xmm0, dword [0x9b0628]
addss xmm0, dword [0x9b0628]
push ecx
movss dword [esp], xmm0
push 0x5dc
push 0x38
mov ecx, dword [ebp - 0x18b8]
call fcn.005e33d8
mov dword [ebp - 0x1a74], eax
jmp 0x8d7754
mov dword [ebp - 0x1a74], 0
mov eax, dword [ebp - 0x1a74]
mov dword [ebp - 0x18ac], eax
mov dword [ebp - 4], 0xffffffff
mov ecx, dword [ebp - 0x18ac]
mov dword [ebp - 0x6bc], ecx
mov eax, dword [ebp - 0x1c]
mov ecx, dword [eax + 0x5c]
mov edx, dword [ebp - 0x1c]
movss xmm0, dword [ecx*8 + 0x27966f4]
mulss xmm0, dword [edx + 0x38]
mov eax, dword [ebp - 0x1c]
addss xmm0, dword [eax + 0x30]
cvtsi2ss xmm1, dword [ebp - 0x6b0]
mulss xmm1, dword [0x9b0630]
subss xmm0, xmm1
movss dword [ebp - 0x6c8], xmm0
mov esi, esp
call dword [sym.imp.ucrtbased.dll_rand]
cmp esi, esp
call fcn.005e11e1
cdq
mov ecx, 0xa
idiv ecx
sub edx, 5
cvtsi2ss xmm0, edx
mulss xmm0, dword [0x9b0638]
mov edx, dword [ebp - 0x1c]
addss xmm0, dword [edx + 0x2c]
movss dword [ebp - 0x6d4], xmm0
mov esi, esp
call dword [sym.imp.ucrtbased.dll_rand]
cmp esi, esp
call fcn.005e11e1
cdq
mov ecx, 0xa
idiv ecx
sub edx, 5
cvtsi2ss xmm0, edx
mulss xmm0, dword [0x9b0638]
mov edx, dword [ebp - 0x1c]
addss xmm0, dword [edx + 0x28]
push ecx
movss xmm1, dword [ebp - 0x6d4]
movss dword [esp], xmm1
push ecx
movss xmm1, dword [ebp - 0x6c8]
movss dword [esp], xmm1
push ecx
movss dword [esp], xmm0
lea ecx, [ebp - 0x18cc]
call fcn.005e0ce6
mov eax, dword [ebp - 0x6bc]
add eax, 0x74
mov ecx, dword [ebp - 0x18cc]
mov dword [eax], ecx
mov edx, dword [ebp - 0x18c8]
mov dword [eax + 4], edx
mov ecx, dword [ebp - 0x18c4]
mov dword [eax + 8], ecx
mov eax, dword [ebp - 0x6bc]
add eax, 0x74
mov ecx, dword [ebp - 0x6bc]
add ecx, 0x14c
mov edx, dword [eax]
mov dword [ecx], edx
mov edx, dword [eax + 4]
mov dword [ecx + 4], edx
mov eax, dword [eax + 8]
mov dword [ecx + 8], eax
mov eax, dword [ebp - 0x6bc]
mov dword [eax + 0x6c], 1
mov eax, dword [ebp - 0x6bc]
mov dword [eax + 0x100], 0
mov eax, dword [ebp - 0x6b0]
cdq
mov ecx, 3
idiv ecx
mov eax, dword [ebp - 0x6bc]
mov dword [eax + 0x148], edx
mov eax, dword [ebp - 0x6bc]
movss xmm0, dword [0x9b8d00]
movss dword [eax + 0x140], xmm0
mov eax, dword [ebp - 0x6bc]
movss xmm0, dword [0x9b0640]
movss dword [eax + 0x13c], xmm0
mov eax, dword [ebp - 0x6bc]
mov ecx, dword [eax]
mov edx, dword [ecx + 0x3c]
mov dword [ebp - 0x1a74], edx
mov esi, esp
push 0xffff3300
mov ecx, dword [ebp - 0x6bc]
call dword [ebp - 0x1a74]
cmp esi, esp
call fcn.005e11e1
mov eax, dword [0xc62eb8]
mov ecx, dword [eax + 0x2c]
mov dword [ebp - 0x1a74], ecx
mov edx, dword [ebp - 0x6bc]
push edx
mov ecx, dword [ebp - 0x1a74]
call fcn.005e2177
push 0x184
call fcn.005de946
add esp, 4
mov dword [ebp - 0x18e4], eax
mov dword [ebp - 4], 0x43
cmp dword [ebp - 0x18e4], 0
je 0x8d79f2
push 0x184
mov ecx, dword [ebp - 0x18e4]
call fcn.005dfc3d
push 0x50
push 1
push ecx
movss xmm0, dword [0x9b1f2c]
movss dword [esp], xmm0
cvtsi2ss xmm0, dword [ebp - 0x6b0]
mulss xmm0, dword [0x9b0640]
addss xmm0, dword [0x9b0640]
push ecx
movss dword [esp], xmm0
cvtsi2ss xmm0, dword [ebp - 0x6b0]
mulss xmm0, dword [0x9b0630]
addss xmm0, dword [0x9b1f50]
push ecx
movss dword [esp], xmm0
cvtsi2ss xmm0, dword [ebp - 0x6b0]
mulss xmm0, dword [0x9b0640]
addss xmm0, dword [0x9b0640]
push ecx
movss dword [esp], xmm0
push 0x5dc
push 0
mov ecx, dword [ebp - 0x18e4]
call fcn.005e33d8
mov dword [ebp - 0x1a74], eax
jmp 0x8d79fc
mov dword [ebp - 0x1a74], 0
mov eax, dword [ebp - 0x1a74]
mov dword [ebp - 0x18d8], eax
mov dword [ebp - 4], 0xffffffff
mov ecx, dword [ebp - 0x18d8]
mov dword [ebp - 0x6e0], ecx
mov esi, esp
call dword [sym.imp.ucrtbased.dll_rand]
cmp esi, esp
call fcn.005e11e1
cdq
mov ecx, 0xa
idiv ecx
sub edx, 5
cvtsi2ss xmm0, edx
mulss xmm0, dword [0x9b0624]
mov edx, dword [ebp - 0x1c]
addss xmm0, dword [edx + 0x28]
movss dword [ebp - 0x1a74], xmm0
mov eax, dword [ebp - 0x1c]
movss xmm0, dword [eax + 0x30]
movss dword [ebp - 0x1a78], xmm0
mov esi, esp
call dword [sym.imp.ucrtbased.dll_rand]
cmp esi, esp
call fcn.005e11e1
cdq
mov ecx, 0xa
idiv ecx
sub edx, 5
cvtsi2ss xmm0, edx
mulss xmm0, dword [0x9b0624]
mov edx, dword [ebp - 0x1c]
addss xmm0, dword [edx + 0x2c]
movss dword [ebp - 0x1a7c], xmm0
push ecx
movss xmm0, dword [ebp - 0x1a7c]
movss dword [esp], xmm0
push ecx
movss xmm0, dword [ebp - 0x1a78]
movss dword [esp], xmm0
push ecx
movss xmm0, dword [ebp - 0x1a74]
movss dword [esp], xmm0
lea ecx, [ebp - 0x18f8]
call fcn.005e0ce6
mov eax, dword [ebp - 0x6e0]
add eax, 0x74
mov ecx, dword [ebp - 0x18f8]
mov dword [eax], ecx
mov edx, dword [ebp - 0x18f4]
mov dword [eax + 4], edx
mov ecx, dword [ebp - 0x18f0]
mov dword [eax + 8], ecx
mov eax, dword [ebp - 0x6e0]
add eax, 0x74
mov ecx, dword [ebp - 0x6e0]
add ecx, 0x14c
mov edx, dword [eax]
mov dword [ecx], edx
mov edx, dword [eax + 4]
mov dword [ecx + 4], edx
mov eax, dword [eax + 8]
mov dword [ecx + 8], eax
mov eax, dword [ebp - 0x6e0]
mov dword [eax + 0x6c], 1
mov eax, dword [ebp - 0x6e0]
mov dword [eax + 0x100], 0
mov eax, dword [ebp - 0x6e0]
mov dword [eax + 0x148], 1
mov eax, dword [ebp - 0x6e0]
movss xmm0, dword [0x9b2d90]
movss dword [eax + 0x140], xmm0
mov eax, dword [ebp - 0x6e0]
mov ecx, dword [eax]
mov edx, dword [ecx + 0x3c]
mov dword [ebp - 0x1a74], edx
mov esi, esp
push 0xffff0000
mov ecx, dword [ebp - 0x6e0]
call dword [ebp - 0x1a74]
cmp esi, esp
call fcn.005e11e1
mov eax, dword [0xc62eb8]
mov ecx, dword [eax + 0x2c]
mov dword [ebp - 0x1a74], ecx
mov edx, dword [ebp - 0x6e0]
push edx
mov ecx, dword [ebp - 0x1a74]
call fcn.005e2177
cmp dword [0xc6aff8], 0
jne 0x8d7e68
mov eax, dword [ebp - 0x1c]
movsx ecx, byte [eax + 0xa40]
cmp ecx, 1
jne 0x8d7e68
mov eax, dword [ebp - 0x1c]
cmp dword [eax + 0x768], 0
jne 0x8d7e68
mov eax, dword [ebp - 0x1c]
movss xmm0, dword [eax + 0x30]
addss xmm0, dword [0x9b1428]
mov ecx, dword [ebp - 0x1c]
push ecx
movss xmm1, dword [ecx + 0x2c]
movss dword [esp], xmm1
push ecx
movss dword [esp], xmm0
mov edx, dword [ebp - 0x1c]
push ecx
movss xmm0, dword [edx + 0x28]
movss dword [esp], xmm0
lea ecx, [ebp - 0x6f4]
call fcn.005e0ce6
push 0x1c0
call fcn.005de946
add esp, 4
mov dword [ebp - 0x1910], eax
mov dword [ebp - 4], 0x44
cmp dword [ebp - 0x1910], 0
je 0x8d7c9b
push 0x1c0
mov ecx, dword [ebp - 0x1910]
call fcn.005dfc4c
mov eax, dword [ebp - 0x1c]
push eax
push 3
sub esp, 0xc
mov ecx, esp
mov edx, dword [ebp - 0x6f4]
mov dword [ecx], edx
mov eax, dword [ebp - 0x6f0]
mov dword [ecx + 4], eax
mov edx, dword [ebp - 0x6ec]
mov dword [ecx + 8], edx
sub esp, 0xc
mov eax, esp
mov ecx, dword [ebp - 0x6f4]
mov dword [eax], ecx
mov edx, dword [ebp - 0x6f0]
mov dword [eax + 4], edx
mov ecx, dword [ebp - 0x6ec]
mov dword [eax + 8], ecx
push 0x20
mov ecx, dword [ebp - 0x1910]
call fcn.005e19d4
mov dword [ebp - 0x1a74], eax
jmp 0x8d7ca5
mov dword [ebp - 0x1a74], 0
mov edx, dword [ebp - 0x1a74]
mov dword [ebp - 0x1904], edx
mov dword [ebp - 4], 0xffffffff
mov eax, dword [ebp - 0x1c]
mov ecx, dword [ebp - 0x1904]
mov dword [eax + 0x768], ecx
mov eax, dword [ebp - 0x1c]
mov ecx, dword [eax + 0x768]
xor edx, edx
mov word [ecx + 0xf8], dx
mov eax, dword [ebp - 0x1c]
mov ecx, dword [eax + 0x768]
xor edx, edx
mov word [ecx + 0xf4], dx
mov eax, dword [ebp - 0x1c]
mov ecx, dword [eax + 0x768]
xor edx, edx
mov word [ecx + 0xfa], dx
mov eax, dword [ebp - 0x1c]
mov ecx, dword [eax + 0x768]
xor edx, edx
mov word [ecx + 0xf6], dx
mov eax, dword [ebp - 0x1c]
mov ecx, dword [eax + 0x768]
mov dword [ebp - 0x1a74], ecx
mov edx, dword [ebp - 0x1c]
mov eax, dword [edx + 0x768]
mov ecx, dword [eax]
mov edx, dword [ecx + 0x80]
mov dword [ebp - 0x1a78], edx
mov esi, esp
push 0
mov ecx, dword [ebp - 0x1a74]
call dword [ebp - 0x1a78]
cmp esi, esp
call fcn.005e11e1
mov eax, dword [ebp - 0x1c]
mov ecx, dword [eax + 0x768]
mov dword [ecx + 0x128], 0
mov eax, dword [ebp - 0x1c]
mov ecx, dword [eax + 0x768]
mov edx, dword [ecx + 0x60]
movss xmm0, dword [0x9b0658]
movss dword [edx + 0x24], xmm0
mov eax, dword [ebp - 0x1c]
mov ecx, dword [eax + 0x768]
mov edx, dword [ecx + 0x60]
movss xmm0, dword [0x9b0658]
movss dword [edx + 0x28], xmm0
mov eax, dword [ebp - 0x1c]
mov ecx, dword [eax + 0x768]
mov edx, dword [ecx + 0x60]
movss xmm0, dword [0x9b0658]
movss dword [edx + 0x2c], xmm0
mov eax, dword [ebp - 0x1c]
mov ecx, dword [eax + 0x768]
mov dword [ecx + 0x12c], 1
mov eax, dword [ebp - 0x1c]
mov ecx, dword [eax + 0x768]
movss xmm0, dword [0x9b04e0]
movss dword [ecx + 0x138], xmm0
mov eax, dword [ebp - 0x1c]
mov ecx, dword [eax + 0x768]
movss xmm0, dword [0x9b04e0]
movss dword [ecx + 0x13c], xmm0
mov eax, dword [ebp - 0x1c]
mov ecx, dword [eax + 0x768]
movss xmm0, dword [0x9b04e0]
movss dword [ecx + 0x140], xmm0
mov eax, dword [ebp - 0x1c]
mov ecx, dword [eax + 0x768]
mov dword [ecx + 0x168], 1
mov eax, dword [ebp - 0x1c]
mov ecx, dword [eax + 0x768]
mov edx, dword [ebp - 0x1c]
mov eax, dword [edx + 0x34]
mov dword [ecx + 0x134], eax
mov eax, dword [ebp - 0x1c]
mov ecx, dword [eax + 0x768]
mov dword [ecx + 0x130], 5
mov eax, dword [0xc62eb8]
mov ecx, dword [eax + 0x2c]
mov dword [ebp - 0x1a74], ecx
mov edx, dword [ebp - 0x1c]
mov eax, dword [edx + 0x768]
push eax
mov ecx, dword [ebp - 0x1a74]
call fcn.005e2177
jmp 0x8d7ea4
mov eax, dword [ebp - 0x1c]
movsx ecx, byte [eax + 0xa40]
test ecx, ecx
jne 0x8d7ea4
mov eax, dword [ebp - 0x1c]
cmp dword [eax + 0x768], 0
je 0x8d7ea4
mov eax, dword [ebp - 0x1c]
mov ecx, dword [eax + 0x768]
push ecx
mov ecx, dword [0xc62ea4]
call fcn.005df792
mov eax, dword [ebp - 0x1c]
mov dword [eax + 0x768], 0
cmp dword [0xc6aff4], 0
jne 0x8d8231
mov eax, dword [ebp - 0x1c]
movsx ecx, byte [eax + 0xa5c]
cmp ecx, 1
jne 0x8d8231
mov eax, dword [ebp - 0x1c]
cmp dword [eax + 0x75c], 0
jne 0x8d8115
push 0xcc
call fcn.005de946
add esp, 4
mov dword [ebp - 0x1928], eax
mov dword [ebp - 4], 0x45
cmp dword [ebp - 0x1928], 0
je 0x8d7f34
push 0xcc
mov ecx, dword [ebp - 0x1928]
call fcn.005de694
push 0
mov eax, dword [ebp - 0x1c]
push ecx
movss xmm0, dword [eax + 0x34]
movss dword [esp], xmm0
push 0xff999999
push 0xb16
mov ecx, dword [ebp - 0x1928]
call fcn.005e0935
mov dword [ebp - 0x1a74], eax
jmp 0x8d7f3e
mov dword [ebp - 0x1a74], 0
mov ecx, dword [ebp - 0x1a74]
mov dword [ebp - 0x191c], ecx
mov dword [ebp - 4], 0xffffffff
mov edx, dword [ebp - 0x1c]
mov eax, dword [ebp - 0x191c]
mov dword [edx + 0x75c], eax
mov eax, dword [ebp - 0x1c]
cmp dword [eax + 0x75c], 0
je 0x8d8110
mov eax, dword [ebp - 0x1c]
mov ecx, dword [eax + 0x75c]
mov dword [ecx + 0xa4], 0x19d
mov eax, dword [ebp - 0x1c]
mov ecx, dword [eax + 0x75c]
mov dword [ecx + 0xb8], 0x5dc
mov eax, dword [ebp - 0x1c]
movsx ecx, byte [eax + 0xa5f]
cmp ecx, 1
jne 0x8d8021
mov eax, dword [ebp - 0x1c]
mov ecx, dword [eax + 0x5c]
mov edx, dword [ebp - 0x1c]
movss xmm0, dword [ecx*8 + 0x27966f4]
mulss xmm0, dword [edx + 0x38]
mov eax, dword [ebp - 0x1c]
addss xmm0, dword [eax + 0x54]
addss xmm0, dword [0x9b935c]
mov ecx, dword [ebp - 0x1c]
push ecx
movss xmm1, dword [ecx + 0x58]
movss dword [esp], xmm1
push ecx
movss dword [esp], xmm0
mov edx, dword [ebp - 0x1c]
push ecx
movss xmm0, dword [edx + 0x50]
movss dword [esp], xmm0
lea ecx, [ebp - 0x193c]
call fcn.005e0ce6
mov eax, dword [ebp - 0x1c]
mov ecx, dword [eax + 0x75c]
add ecx, 0x74
mov edx, dword [ebp - 0x193c]
mov dword [ecx], edx
mov eax, dword [ebp - 0x1938]
mov dword [ecx + 4], eax
mov edx, dword [ebp - 0x1934]
mov dword [ecx + 8], edx
jmp 0x8d809b
mov eax, dword [ebp - 0x1c]
mov ecx, dword [eax + 0x5c]
mov edx, dword [ebp - 0x1c]
movss xmm0, dword [ecx*8 + 0x27966f4]
mulss xmm0, dword [edx + 0x38]
mov eax, dword [ebp - 0x1c]
addss xmm0, dword [eax + 0x30]
addss xmm0, dword [0x9b0500]
mov ecx, dword [ebp - 0x1c]
push ecx
movss xmm1, dword [ecx + 0x2c]
movss dword [esp], xmm1
push ecx
movss dword [esp], xmm0
mov edx, dword [ebp - 0x1c]
push ecx
movss xmm0, dword [edx + 0x28]
movss dword [esp], xmm0
lea ecx, [ebp - 0x1950]
call fcn.005e0ce6
mov eax, dword [ebp - 0x1c]
mov ecx, dword [eax + 0x75c]
add ecx, 0x74
mov edx, dword [ebp - 0x1950]
mov dword [ecx], edx
mov eax, dword [ebp - 0x194c]
mov dword [ecx + 4], eax
mov edx, dword [ebp - 0x1948]
mov dword [ecx + 8], edx
mov eax, dword [ebp - 0x1c]
mov ecx, dword [eax + 0x75c]
movss xmm0, dword [0x9b0548]
movss dword [ecx + 0x98], xmm0
mov eax, dword [ebp - 0x1c]
mov ecx, dword [eax + 0x75c]
movss xmm0, dword [0x9b2d90]
movss dword [ecx + 0x9c], xmm0
mov eax, dword [ebp - 0x1c]
mov ecx, dword [eax + 0x75c]
mov dword [ecx + 0x6c], 1
mov eax, dword [ebp - 0x1c]
mov ecx, dword [eax + 0x75c]
mov byte [ecx + 0xac], 1
mov eax, dword [0xc62eb8]
mov ecx, dword [eax + 0x2c]
mov dword [ebp - 0x1a74], ecx
mov edx, dword [ebp - 0x1c]
mov eax, dword [edx + 0x75c]
push eax
mov ecx, dword [ebp - 0x1a74]
call fcn.005e2177
jmp 0x8d822f
mov eax, dword [ebp - 0x1c]
movsx ecx, byte [eax + 0xa5f]
cmp ecx, 1
jne 0x8d81a0
mov eax, dword [ebp - 0x1c]
mov ecx, dword [eax + 0x5c]
mov edx, dword [ebp - 0x1c]
movss xmm0, dword [ecx*8 + 0x27966f4]
mulss xmm0, dword [edx + 0x38]
mov eax, dword [ebp - 0x1c]
addss xmm0, dword [eax + 0x54]
addss xmm0, dword [0x9b935c]
mov ecx, dword [ebp - 0x1c]
push ecx
movss xmm1, dword [ecx + 0x58]
movss dword [esp], xmm1
push ecx
movss dword [esp], xmm0
mov edx, dword [ebp - 0x1c]
push ecx
movss xmm0, dword [edx + 0x50]
movss dword [esp], xmm0
lea ecx, [ebp - 0x1964]
call fcn.005e0ce6
mov eax, dword [ebp - 0x1c]
mov ecx, dword [eax + 0x75c]
add ecx, 0x74
mov edx, dword [ebp - 0x1964]
mov dword [ecx], edx
mov eax, dword [ebp - 0x1960]
mov dword [ecx + 4], eax
mov edx, dword [ebp - 0x195c]
mov dword [ecx + 8], edx
jmp 0x8d821a
mov eax, dword [ebp - 0x1c]
mov ecx, dword [eax + 0x5c]
mov edx, dword [ebp - 0x1c]
movss xmm0, dword [ecx*8 + 0x27966f4]
mulss xmm0, dword [edx + 0x38]
mov eax, dword [ebp - 0x1c]
addss xmm0, dword [eax + 0x30]
addss xmm0, dword [0x9b0500]
mov ecx, dword [ebp - 0x1c]
push ecx
movss xmm1, dword [ecx + 0x2c]
movss dword [esp], xmm1
push ecx
movss dword [esp], xmm0
mov edx, dword [ebp - 0x1c]
push ecx
movss xmm0, dword [edx + 0x28]
movss dword [esp], xmm0
lea ecx, [ebp - 0x1978]
call fcn.005e0ce6
mov eax, dword [ebp - 0x1c]
mov ecx, dword [eax + 0x75c]
add ecx, 0x74
mov edx, dword [ebp - 0x1978]
mov dword [ecx], edx
mov eax, dword [ebp - 0x1974]
mov dword [ecx + 4], eax
mov edx, dword [ebp - 0x1970]
mov dword [ecx + 8], edx
mov eax, dword [ebp - 0x1c]
mov ecx, dword [eax + 0x75c]
mov edx, dword [ebp - 0x1c]
mov eax, dword [edx + 0x34]
mov dword [ecx + 0x8c], eax
jmp 0x8d826d
mov eax, dword [ebp - 0x1c]
movsx ecx, byte [eax + 0xa5c]
test ecx, ecx
jne 0x8d826d
mov eax, dword [ebp - 0x1c]
cmp dword [eax + 0x75c], 0
je 0x8d826d
mov eax, dword [ebp - 0x1c]
mov ecx, dword [eax + 0x75c]
push ecx
mov ecx, dword [0xc62ea4]
call fcn.005df792
mov eax, dword [ebp - 0x1c]
mov dword [eax + 0x75c], 0
mov eax, dword [ebp - 0x1c]
movsx ecx, byte [eax + 0xa5d]
cmp ecx, 1
jne 0x8d85e2
mov eax, dword [ebp - 0x1c]
movsx ecx, byte [eax + 0x229]
cmp ecx, 1
je 0x8d85e2
mov eax, dword [ebp - 0x1c]
movsx ecx, byte [eax + 0xa41]
test ecx, ecx
jne 0x8d85e2
mov dword [ebp - 0x700], 0
jmp 0x8d82c0
mov eax, dword [ebp - 0x700]
add eax, 1
mov dword [ebp - 0x700], eax
cmp dword [ebp - 0x700], 2
jge 0x8d85e0
mov eax, dword [ebp - 0x700]
mov ecx, dword [ebp - 0x1c]
cmp dword [ecx + eax*4 + 0x760], 0
jne 0x8d85db
push 0xcc
call fcn.005de946
add esp, 4
mov dword [ebp - 0x1990], eax
mov dword [ebp - 4], 0x46
cmp dword [ebp - 0x1990], 0
je 0x8d838e
push 0xcc
mov ecx, dword [ebp - 0x1990]
call fcn.005e318f
push 0
push 1
mov eax, dword [ebp - 0x1c]
push eax
push 1
sub esp, 0xc
mov ecx, esp
mov dword [ebp - 0x199c], esp
mov edx, dword [ebp - 0x1c]
movss xmm0, dword [edx + 0x30]
addss xmm0, dword [0x9b1f50]
cvtsi2ss xmm1, dword [ebp - 0x700]
mulss xmm1, dword [0x9b0650]
addss xmm0, xmm1
mov eax, dword [ebp - 0x1c]
push ecx
movss xmm1, dword [eax + 0x2c]
movss dword [esp], xmm1
push ecx
movss dword [esp], xmm0
mov edx, dword [ebp - 0x1c]
push ecx
movss xmm0, dword [edx + 0x28]
movss dword [esp], xmm0
call fcn.005e0ce6
mov ecx, dword [ebp - 0x1990]
call fcn.005e3405
mov dword [ebp - 0x1a74], eax
jmp 0x8d8398
mov dword [ebp - 0x1a74], 0
mov eax, dword [ebp - 0x1a74]
mov dword [ebp - 0x1984], eax
mov dword [ebp - 4], 0xffffffff
mov ecx, dword [ebp - 0x700]
mov edx, dword [ebp - 0x1c]
mov eax, dword [ebp - 0x1984]
mov dword [edx + ecx*4 + 0x760], eax
mov eax, dword [ebp - 0x1c]
movsx ecx, byte [eax + 0xa5f]
cmp ecx, 1
jne 0x8d8457
mov eax, dword [ebp - 0x1c]
mov ecx, dword [eax + 0x5c]
mov edx, dword [ebp - 0x1c]
movss xmm0, dword [ecx*8 + 0x27966f4]
mulss xmm0, dword [edx + 0x38]
mov eax, dword [ebp - 0x1c]
addss xmm0, dword [eax + 0x54]
subss xmm0, dword [0x9b0658]
mov ecx, dword [ebp - 0x1c]
push ecx
movss xmm1, dword [ecx + 0x58]
movss dword [esp], xmm1
push ecx
movss dword [esp], xmm0
mov edx, dword [ebp - 0x1c]
push ecx
movss xmm0, dword [edx + 0x50]
movss dword [esp], xmm0
lea ecx, [ebp - 0x19b0]
call fcn.005e0ce6
mov eax, dword [ebp - 0x700]
mov ecx, dword [ebp - 0x1c]
mov edx, dword [ecx + eax*4 + 0x760]
add edx, 0x74
mov eax, dword [ebp - 0x19b0]
mov dword [edx], eax
mov ecx, dword [ebp - 0x19ac]
mov dword [edx + 4], ecx
mov eax, dword [ebp - 0x19a8]
mov dword [edx + 8], eax
jmp 0x8d84d0
mov eax, dword [ebp - 0x1c]
mov ecx, dword [eax + 0x5c]
mov edx, dword [ebp - 0x1c]
movss xmm0, dword [ecx*8 + 0x27966f4]
mulss xmm0, dword [edx + 0x38]
mov eax, dword [ebp - 0x1c]
addss xmm0, dword [eax + 0x30]
mov ecx, dword [ebp - 0x1c]
push ecx
movss xmm1, dword [ecx + 0x2c]
movss dword [esp], xmm1
push ecx
movss dword [esp], xmm0
mov edx, dword [ebp - 0x1c]
push ecx
movss xmm0, dword [edx + 0x28]
movss dword [esp], xmm0
lea ecx, [ebp - 0x19c4]
call fcn.005e0ce6
mov eax, dword [ebp - 0x700]
mov ecx, dword [ebp - 0x1c]
mov edx, dword [ecx + eax*4 + 0x760]
add edx, 0x74
mov eax, dword [ebp - 0x19c4]
mov dword [edx], eax
mov ecx, dword [ebp - 0x19c0]
mov dword [edx + 4], ecx
mov eax, dword [ebp - 0x19bc]
mov dword [edx + 8], eax
mov eax, dword [ebx + 8]
mov dword [ebp - 0x1a74], eax
cvtsi2sd xmm0, dword [ebp - 0x1a74]
mov ecx, dword [ebp - 0x1a74]
shr ecx, 0x1f
addsd xmm0, qword [ecx*8 + 0x9b05f0]
movsd qword [ebp - 0x1a80], xmm0
cvtsd2ss xmm0, qword [ebp - 0x1a80]
cvtsi2ss xmm1, dword [ebp - 0x700]
mulss xmm1, dword [0x9b4c20]
divss xmm1, dword [0x9b0548]
subss xmm0, xmm1
call fcn.005e084f
mov edx, dword [ebp - 0x700]
mov ecx, dword [ebp - 0x1c]
mov edx, dword [ecx + edx*4 + 0x760]
mov dword [edx + 0x90], eax
mov eax, dword [ebp - 0x700]
mov ecx, dword [ebp - 0x1c]
mov edx, dword [ecx + eax*4 + 0x760]
mov dword [edx + 0xb4], 0xb17
mov eax, dword [ebp - 0x700]
mov ecx, dword [ebp - 0x1c]
mov edx, dword [ecx + eax*4 + 0x760]
mov dword [edx + 0x6c], 1
mov eax, dword [ebp - 0x700]
mov ecx, dword [ebp - 0x1c]
mov edx, dword [ecx + eax*4 + 0x760]
movss xmm0, dword [0x9b0508]
movss dword [edx + 0xb8], xmm0
mov eax, dword [ebp - 0x700]
mov ecx, dword [ebp - 0x1c]
mov edx, dword [ecx + eax*4 + 0x760]
mov dword [ebp - 0x1a74], edx
push 0xff999999
mov ecx, dword [ebp - 0x1a74]
call fcn.005e174f
mov eax, dword [0xc62eb8]
mov ecx, dword [eax + 0x2c]
mov dword [ebp - 0x1a74], ecx
mov edx, dword [ebp - 0x700]
mov eax, dword [ebp - 0x1c]
mov ecx, dword [eax + edx*4 + 0x760]
push ecx
mov ecx, dword [ebp - 0x1a74]
call fcn.005e2177
jmp 0x8d82b1
jmp 0x8d864b
mov dword [ebp - 0x70c], 0
jmp 0x8d85fd
mov eax, dword [ebp - 0x70c]
add eax, 1
mov dword [ebp - 0x70c], eax
cmp dword [ebp - 0x70c], 2
jge 0x8d864b
mov eax, dword [ebp - 0x70c]
mov ecx, dword [ebp - 0x1c]
cmp dword [ecx + eax*4 + 0x760], 0
je 0x8d8649
mov eax, dword [ebp - 0x70c]
mov ecx, dword [ebp - 0x1c]
mov edx, dword [ecx + eax*4 + 0x760]
push edx
mov ecx, dword [0xc62ea4]
call fcn.005df792
mov eax, dword [ebp - 0x70c]
mov ecx, dword [ebp - 0x1c]
mov dword [ecx + eax*4 + 0x760], 0
jmp 0x8d85ee
mov eax, dword [ebp - 0x1c]
movsx ecx, word [eax + 0xa7e]
cmp ecx, 0x2f1
jne 0x8d893f
mov eax, dword [ebp - 0x1c]
cmp dword [eax + 0x76c], 0
jne 0x8d893f
mov eax, dword [ebp - 0x1c]
mov ecx, dword [eax + 0x5c]
movss xmm0, dword [ecx*8 + 0x27966f4]
addss xmm0, dword [0x9b0658]
mov edx, dword [ebp - 0x1c]
mulss xmm0, dword [edx + 0x38]
mov eax, dword [ebp - 0x1c]
push ecx
movss xmm1, dword [eax + 0x2c]
movss dword [esp], xmm1
push ecx
movss dword [esp], xmm0
mov ecx, dword [ebp - 0x1c]
push ecx
movss xmm0, dword [ecx + 0x28]
movss dword [esp], xmm0
lea ecx, [ebp - 0x720]
call fcn.005e0ce6
mov eax, dword [ebp - 0x1c]
cmp dword [eax + 0x76c], 0
jne 0x8d8785
push 0x1c0
call fcn.005de946
add esp, 4
mov dword [ebp - 0x19dc], eax
mov dword [ebp - 4], 0x47
cmp dword [ebp - 0x19dc], 0
je 0x8d8759
push 0x1c0
mov ecx, dword [ebp - 0x19dc]
call fcn.005dfc4c
mov eax, dword [ebp - 0x1c]
push eax
push 3
sub esp, 0xc
mov ecx, esp
mov edx, dword [ebp - 0x720]
mov dword [ecx], edx
mov eax, dword [ebp - 0x71c]
mov dword [ecx + 4], eax
mov edx, dword [ebp - 0x718]
mov dword [ecx + 8], edx
sub esp, 0xc
mov eax, esp
mov ecx, dword [ebp - 0x720]
mov dword [eax], ecx
mov edx, dword [ebp - 0x71c]
mov dword [eax + 4], edx
mov ecx, dword [ebp - 0x718]
mov dword [eax + 8], ecx
push 0x14
mov ecx, dword [ebp - 0x19dc]
call fcn.005e19d4
mov dword [ebp - 0x1a74], eax
jmp 0x8d8763
mov dword [ebp - 0x1a74], 0
mov edx, dword [ebp - 0x1a74]
mov dword [ebp - 0x19d0], edx
mov dword [ebp - 4], 0xffffffff
mov eax, dword [ebp - 0x1c]
mov ecx, dword [ebp - 0x19d0]
mov dword [eax + 0x76c], ecx
mov eax, dword [ebp - 0x1c]
cmp dword [eax + 0x76c], 0
je 0x8d893a
mov eax, dword [ebp - 0x1c]
mov ecx, dword [eax + 0x76c]
mov edx, 2
mov word [ecx + 0xf8], dx
mov eax, dword [ebp - 0x1c]
mov ecx, dword [eax + 0x76c]
mov edx, 2
mov word [ecx + 0xf4], dx
mov eax, dword [ebp - 0x1c]
mov ecx, dword [eax + 0x76c]
xor edx, edx
mov word [ecx + 0xfa], dx
mov eax, dword [ebp - 0x1c]
mov ecx, dword [eax + 0x76c]
xor edx, edx
mov word [ecx + 0xf6], dx
mov eax, dword [ebp - 0x1c]
mov ecx, dword [eax + 0x76c]
mov dword [ebp - 0x1a74], ecx
mov edx, dword [ebp - 0x1c]
mov eax, dword [edx + 0x76c]
mov ecx, dword [eax]
mov edx, dword [ecx + 0x80]
mov dword [ebp - 0x1a78], edx
mov esi, esp
push 0
mov ecx, dword [ebp - 0x1a74]
call dword [ebp - 0x1a78]
cmp esi, esp
call fcn.005e11e1
mov eax, dword [ebp - 0x1c]
mov ecx, dword [eax + 0x76c]
mov dword [ecx + 0x128], 0
mov eax, dword [ebp - 0x1c]
mov ecx, dword [eax + 0x76c]
mov edx, dword [ecx + 0x60]
movss xmm0, dword [0x9b932c]
movss dword [edx + 0x24], xmm0
mov eax, dword [ebp - 0x1c]
mov ecx, dword [eax + 0x76c]
mov edx, dword [ecx + 0x60]
movss xmm0, dword [0x9b932c]
movss dword [edx + 0x28], xmm0
mov eax, dword [ebp - 0x1c]
mov ecx, dword [eax + 0x76c]
mov edx, dword [ecx + 0x60]
movss xmm0, dword [0x9b932c]
movss dword [edx + 0x2c], xmm0
mov eax, dword [ebp - 0x1c]
mov ecx, dword [eax + 0x76c]
mov dword [ecx + 0x12c], 0
mov eax, dword [ebp - 0x1c]
mov ecx, dword [eax + 0x76c]
movss xmm0, dword [0x9b04e0]
movss dword [ecx + 0x138], xmm0
mov eax, dword [ebp - 0x1c]
mov ecx, dword [eax + 0x76c]
movss xmm0, dword [0x9b04e0]
movss dword [ecx + 0x13c], xmm0
mov eax, dword [ebp - 0x1c]
mov ecx, dword [eax + 0x76c]
movss xmm0, dword [0x9b04e0]
movss dword [ecx + 0x140], xmm0
mov eax, dword [ebp - 0x1c]
mov ecx, dword [eax + 0x76c]
mov dword [ecx + 0x168], 1
mov eax, dword [ebp - 0x1c]
mov ecx, dword [eax + 0x76c]
mov edx, dword [ebp - 0x1c]
mov eax, dword [edx + 0x34]
mov dword [ecx + 0x134], eax
mov eax, dword [ebp - 0x1c]
mov ecx, dword [eax + 0x76c]
mov dword [ecx + 0x130], 7
mov eax, dword [0xc62eb8]
mov ecx, dword [eax + 0x2c]
mov dword [ebp - 0x1a74], ecx
mov edx, dword [ebp - 0x1c]
mov eax, dword [edx + 0x76c]
push eax
mov ecx, dword [ebp - 0x1a74]
call fcn.005e2177
jmp 0x8d953b
mov eax, dword [ebp - 0x1c]
movsx ecx, word [eax + 0xa7e]
cmp ecx, 0x301
jne 0x8d8c3b
mov eax, dword [ebp - 0x1c]
cmp dword [eax + 0x76c], 0
jne 0x8d8c3b
mov eax, dword [ebp - 0x1c]
mov ecx, dword [eax + 0x5c]
movss xmm0, dword [ecx*8 + 0x27966f4]
addss xmm0, dword [0x9b0658]
mov edx, dword [ebp - 0x1c]
mulss xmm0, dword [edx + 0x38]
mov eax, dword [ebp - 0x1c]
addss xmm0, dword [eax + 0x30]
mov ecx, dword [ebp - 0x1c]
push ecx
movss xmm1, dword [ecx + 0x2c]
movss dword [esp], xmm1
push ecx
movss dword [esp], xmm0
mov edx, dword [ebp - 0x1c]
push ecx
movss xmm0, dword [edx + 0x28]
movss dword [esp], xmm0
lea ecx, [ebp - 0x734]
call fcn.005e0ce6
mov eax, dword [ebp - 0x1c]
cmp dword [eax + 0x76c], 0
jne 0x8d8a81
push 0x1c0
call fcn.005de946
add esp, 4
mov dword [ebp - 0x19f4], eax
mov dword [ebp - 4], 0x48
cmp dword [ebp - 0x19f4], 0
je 0x8d8a55
push 0x1c0
mov ecx, dword [ebp - 0x19f4]
call fcn.005dfc4c
mov eax, dword [ebp - 0x1c]
push eax
push 4
sub esp, 0xc
mov ecx, esp
mov edx, dword [ebp - 0x734]
mov dword [ecx], edx
mov eax, dword [ebp - 0x730]
mov dword [ecx + 4], eax
mov edx, dword [ebp - 0x72c]
mov dword [ecx + 8], edx
sub esp, 0xc
mov eax, esp
mov ecx, dword [ebp - 0x734]
mov dword [eax], ecx
mov edx, dword [ebp - 0x730]
mov dword [eax + 4], edx
mov ecx, dword [ebp - 0x72c]
mov dword [eax + 8], ecx
push 0x20
mov ecx, dword [ebp - 0x19f4]
call fcn.005e19d4
mov dword [ebp - 0x1a74], eax
jmp 0x8d8a5f
mov dword [ebp - 0x1a74], 0
mov edx, dword [ebp - 0x1a74]
mov dword [ebp - 0x19e8], edx
mov dword [ebp - 4], 0xffffffff
mov eax, dword [ebp - 0x1c]
mov ecx, dword [ebp - 0x19e8]
mov dword [eax + 0x76c], ecx
mov eax, dword [ebp - 0x1c]
cmp dword [eax + 0x76c], 0
je 0x8d8c36
mov eax, dword [ebp - 0x1c]
mov ecx, dword [eax + 0x76c]
mov edx, 1
mov word [ecx + 0xf8], dx
mov eax, dword [ebp - 0x1c]
mov ecx, dword [eax + 0x76c]
mov edx, 1
mov word [ecx + 0xf4], dx
mov eax, dword [ebp - 0x1c]
mov ecx, dword [eax + 0x76c]
xor edx, edx
mov word [ecx + 0xfa], dx
mov eax, dword [ebp - 0x1c]
mov ecx, dword [eax + 0x76c]
xor edx, edx
mov word [ecx + 0xf6], dx
mov eax, dword [ebp - 0x1c]
mov ecx, dword [eax + 0x76c]
mov dword [ebp - 0x1a74], ecx
mov edx, dword [ebp - 0x1c]
mov eax, dword [edx + 0x76c]
mov ecx, dword [eax]
mov edx, dword [ecx + 0x80]
mov dword [ebp - 0x1a78], edx
mov esi, esp
push 0
mov ecx, dword [ebp - 0x1a74]
call dword [ebp - 0x1a78]
cmp esi, esp
call fcn.005e11e1
mov eax, dword [ebp - 0x1c]
mov ecx, dword [eax + 0x76c]
mov dword [ecx + 0x128], 0
mov eax, dword [ebp - 0x1c]
mov ecx, dword [eax + 0x76c]
mov edx, dword [ecx + 0x60]
movss xmm0, dword [0x9b1424]
movss dword [edx + 0x24], xmm0
mov eax, dword [ebp - 0x1c]
mov ecx, dword [eax + 0x76c]
mov edx, dword [ecx + 0x60]
movss xmm0, dword [0x9b1424]
movss dword [edx + 0x28], xmm0
mov eax, dword [ebp - 0x1c]
mov ecx, dword [eax + 0x76c]
mov edx, dword [ecx + 0x60]
movss xmm0, dword [0x9b1424]
movss dword [edx + 0x2c], xmm0
mov eax, dword [ebp - 0x1c]
mov ecx, dword [eax + 0x76c]
mov dword [ecx + 0x12c], 1
mov eax, dword [ebp - 0x1c]
mov ecx, dword [eax + 0x76c]
movss xmm0, dword [0x9b04e0]
movss dword [ecx + 0x138], xmm0
mov eax, dword [ebp - 0x1c]
mov ecx, dword [eax + 0x76c]
movss xmm0, dword [0x9b04e0]
movss dword [ecx + 0x13c], xmm0
mov eax, dword [ebp - 0x1c]
mov ecx, dword [eax + 0x76c]
movss xmm0, dword [0x9b04e0]
movss dword [ecx + 0x140], xmm0
mov eax, dword [ebp - 0x1c]
mov ecx, dword [eax + 0x76c]
mov dword [ecx + 0x168], 1
mov eax, dword [ebp - 0x1c]
mov ecx, dword [eax + 0x76c]
mov edx, dword [ebp - 0x1c]
mov eax, dword [edx + 0x34]
mov dword [ecx + 0x134], eax
mov eax, dword [ebp - 0x1c]
mov ecx, dword [eax + 0x76c]
mov dword [ecx + 0x130], 5
mov eax, dword [0xc62eb8]
mov ecx, dword [eax + 0x2c]
mov dword [ebp - 0x1a74], ecx
mov edx, dword [ebp - 0x1c]
mov eax, dword [edx + 0x76c]
push eax
mov ecx, dword [ebp - 0x1a74]
call fcn.005e2177
jmp 0x8d953b
mov eax, dword [ebp - 0x1c]
movsx ecx, word [eax + 0xa7e]
cmp ecx, 0x6be
jne 0x8d8f37
mov eax, dword [ebp - 0x1c]
cmp dword [eax + 0x76c], 0
jne 0x8d8f37
mov eax, dword [ebp - 0x1c]
mov ecx, dword [eax + 0x5c]
movss xmm0, dword [ecx*8 + 0x27966f4]
addss xmm0, dword [0x9b0658]
mov edx, dword [ebp - 0x1c]
mulss xmm0, dword [edx + 0x38]
mov eax, dword [ebp - 0x1c]
addss xmm0, dword [eax + 0x30]
mov ecx, dword [ebp - 0x1c]
push ecx
movss xmm1, dword [ecx + 0x2c]
movss dword [esp], xmm1
push ecx
movss dword [esp], xmm0
mov edx, dword [ebp - 0x1c]
push ecx
movss xmm0, dword [edx + 0x28]
movss dword [esp], xmm0
lea ecx, [ebp - 0x748]
call fcn.005e0ce6
mov eax, dword [ebp - 0x1c]
cmp dword [eax + 0x76c], 0
jne 0x8d8d7d
push 0x1c0
call fcn.005de946
add esp, 4
mov dword [ebp - 0x1a0c], eax
mov dword [ebp - 4], 0x49
cmp dword [ebp - 0x1a0c], 0
je 0x8d8d51
push 0x1c0
mov ecx, dword [ebp - 0x1a0c]
call fcn.005dfc4c
mov eax, dword [ebp - 0x1c]
push eax
push 5
sub esp, 0xc
mov ecx, esp
mov edx, dword [ebp - 0x748]
mov dword [ecx], edx
mov eax, dword [ebp - 0x744]
mov dword [ecx + 4], eax
mov edx, dword [ebp - 0x740]
mov dword [ecx + 8], edx
sub esp, 0xc
mov eax, esp
mov ecx, dword [ebp - 0x748]
mov dword [eax], ecx
mov edx, dword [ebp - 0x744]
mov dword [eax + 4], edx
mov ecx, dword [ebp - 0x740]
mov dword [eax + 8], ecx
push 0x20
mov ecx, dword [ebp - 0x1a0c]
call fcn.005e19d4
mov dword [ebp - 0x1a74], eax
jmp 0x8d8d5b
mov dword [ebp - 0x1a74], 0
mov edx, dword [ebp - 0x1a74]
mov dword [ebp - 0x1a00], edx
mov dword [ebp - 4], 0xffffffff
mov eax, dword [ebp - 0x1c]
mov ecx, dword [ebp - 0x1a00]
mov dword [eax + 0x76c], ecx
mov eax, dword [ebp - 0x1c]
cmp dword [eax + 0x76c], 0
je 0x8d8f32
mov eax, dword [ebp - 0x1c]
mov ecx, dword [eax + 0x76c]
mov edx, 2
mov word [ecx + 0xf8], dx
mov eax, dword [ebp - 0x1c]
mov ecx, dword [eax + 0x76c]
mov edx, 2
mov word [ecx + 0xf4], dx
mov eax, dword [ebp - 0x1c]
mov ecx, dword [eax + 0x76c]
xor edx, edx
mov word [ecx + 0xfa], dx
mov eax, dword [ebp - 0x1c]
mov ecx, dword [eax + 0x76c]
xor edx, edx
mov word [ecx + 0xf6], dx
mov eax, dword [ebp - 0x1c]
mov ecx, dword [eax + 0x76c]
mov dword [ebp - 0x1a74], ecx
mov edx, dword [ebp - 0x1c]
mov eax, dword [edx + 0x76c]
mov ecx, dword [eax]
mov edx, dword [ecx + 0x80]
mov dword [ebp - 0x1a78], edx
mov esi, esp
push 0
mov ecx, dword [ebp - 0x1a74]
call dword [ebp - 0x1a78]
cmp esi, esp
call fcn.005e11e1
mov eax, dword [ebp - 0x1c]
mov ecx, dword [eax + 0x76c]
mov dword [ecx + 0x128], 0
mov eax, dword [ebp - 0x1c]
mov ecx, dword [eax + 0x76c]
mov edx, dword [ecx + 0x60]
movss xmm0, dword [0x9b04e0]
movss dword [edx + 0x24], xmm0
mov eax, dword [ebp - 0x1c]
mov ecx, dword [eax + 0x76c]
mov edx, dword [ecx + 0x60]
movss xmm0, dword [0x9b04e0]
movss dword [edx + 0x28], xmm0
mov eax, dword [ebp - 0x1c]
mov ecx, dword [eax + 0x76c]
mov edx, dword [ecx + 0x60]
movss xmm0, dword [0x9b04e0]
movss dword [edx + 0x2c], xmm0
mov eax, dword [ebp - 0x1c]
mov ecx, dword [eax + 0x76c]
mov dword [ecx + 0x12c], 0
mov eax, dword [ebp - 0x1c]
mov ecx, dword [eax + 0x76c]
movss xmm0, dword [0x9b04e0]
movss dword [ecx + 0x138], xmm0
mov eax, dword [ebp - 0x1c]
mov ecx, dword [eax + 0x76c]
movss xmm0, dword [0x9b04e0]
movss dword [ecx + 0x13c], xmm0
mov eax, dword [ebp - 0x1c]
mov ecx, dword [eax + 0x76c]
movss xmm0, dword [0x9b04e0]
movss dword [ecx + 0x140], xmm0
mov eax, dword [ebp - 0x1c]
mov ecx, dword [eax + 0x76c]
mov dword [ecx + 0x168], 1
mov eax, dword [ebp - 0x1c]
mov ecx, dword [eax + 0x76c]
mov edx, dword [ebp - 0x1c]
mov eax, dword [edx + 0x34]
mov dword [ecx + 0x134], eax
mov eax, dword [ebp - 0x1c]
mov ecx, dword [eax + 0x76c]
mov dword [ecx + 0x130], 5
mov eax, dword [0xc62eb8]
mov ecx, dword [eax + 0x2c]
mov dword [ebp - 0x1a74], ecx
mov edx, dword [ebp - 0x1c]
mov eax, dword [edx + 0x76c]
push eax
mov ecx, dword [ebp - 0x1a74]
call fcn.005e2177
jmp 0x8d953b
mov eax, dword [ebp - 0x1c]
movsx ecx, word [eax + 0xa7e]
cmp ecx, 0xf3c
jl 0x8d8f5b
mov eax, dword [ebp - 0x1c]
movsx ecx, word [eax + 0xa7e]
cmp ecx, 0xf44
jle 0x8d8f95
mov eax, dword [ebp - 0x1c]
movsx ecx, word [eax + 0xa7e]
cmp ecx, 0xf47
jl 0x8d8f7f
mov eax, dword [ebp - 0x1c]
movsx ecx, word [eax + 0xa7e]
cmp ecx, 0xf4c
jle 0x8d8f95
mov eax, dword [ebp - 0x1c]
movsx ecx, word [eax + 0xa7e]
cmp ecx, 0xfdc
jne 0x8d9471
mov eax, dword [ebp - 0x1c]
cmp dword [eax + 0x76c], 0
jne 0x8d9471
mov eax, dword [ebp - 0x1c]
mov ecx, dword [eax + 0x5c]
movss xmm0, dword [ecx*8 + 0x27966f4]
addss xmm0, dword [0x9b0658]
mov edx, dword [ebp - 0x1c]
mulss xmm0, dword [edx + 0x38]
mov eax, dword [ebp - 0x1c]
addss xmm0, dword [eax + 0x30]
mov ecx, dword [ebp - 0x1c]
push ecx
movss xmm1, dword [ecx + 0x2c]
movss dword [esp], xmm1
push ecx
movss dword [esp], xmm0
mov edx, dword [ebp - 0x1c]
push ecx
movss xmm0, dword [edx + 0x28]
movss dword [esp], xmm0
lea ecx, [ebp - 0x75c]
call fcn.005e0ce6
mov eax, dword [ebp - 0x1c]
cmp dword [eax + 0x76c], 0
jne 0x8d90c1
push 0x1c0
call fcn.005de946
add esp, 4
mov dword [ebp - 0x1a24], eax
mov dword [ebp - 4], 0x4a
cmp dword [ebp - 0x1a24], 0
je 0x8d9095
push 0x1c0
mov ecx, dword [ebp - 0x1a24]
call fcn.005dfc4c
mov eax, dword [ebp - 0x1c]
push eax
push 6
sub esp, 0xc
mov ecx, esp
mov edx, dword [ebp - 0x75c]
mov dword [ecx], edx
mov eax, dword [ebp - 0x758]
mov dword [ecx + 4], eax
mov edx, dword [ebp - 0x754]
mov dword [ecx + 8], edx
sub esp, 0xc
mov eax, esp
mov ecx, dword [ebp - 0x75c]
mov dword [eax], ecx
mov edx, dword [ebp - 0x758]
mov dword [eax + 4], edx
mov ecx, dword [ebp - 0x754]
mov dword [eax + 8], ecx
push 0x20
mov ecx, dword [ebp - 0x1a24]
call fcn.005e19d4
mov dword [ebp - 0x1a74], eax
jmp 0x8d909f
mov dword [ebp - 0x1a74], 0
mov edx, dword [ebp - 0x1a74]
mov dword [ebp - 0x1a18], edx
mov dword [ebp - 4], 0xffffffff
mov eax, dword [ebp - 0x1c]
mov ecx, dword [ebp - 0x1a18]
mov dword [eax + 0x76c], ecx
mov eax, dword [ebp - 0x1c]
cmp dword [eax + 0x76c], 0
je 0x8d946c
mov eax, dword [ebp - 0x1c]
mov ecx, dword [eax + 0x76c]
mov edx, 3
mov word [ecx + 0xf8], dx
mov eax, dword [ebp - 0x1c]
mov ecx, dword [eax + 0x76c]
mov edx, 3
mov word [ecx + 0xf4], dx
mov eax, dword [ebp - 0x1c]
movsx ecx, word [eax + 0xa7e]
cmp ecx, 0xf3c
je 0x8d9155
mov eax, dword [ebp - 0x1c]
movsx ecx, word [eax + 0xa7e]
cmp ecx, 0xf3f
je 0x8d9155
mov eax, dword [ebp - 0x1c]
movsx ecx, word [eax + 0xa7e]
cmp ecx, 0xf42
je 0x8d9155
mov eax, dword [ebp - 0x1c]
movsx ecx, word [eax + 0xa7e]
cmp ecx, 0xf47
jl 0x8d917e
mov eax, dword [ebp - 0x1c]
movsx ecx, word [eax + 0xa7e]
cmp ecx, 0xf49
jg 0x8d917e
mov eax, dword [ebp - 0x1c]
mov ecx, dword [eax + 0x76c]
xor edx, edx
mov word [ecx + 0xfa], dx
mov eax, dword [ebp - 0x1c]
mov ecx, dword [eax + 0x76c]
xor edx, edx
mov word [ecx + 0xf6], dx
jmp 0x8d9315
mov eax, dword [ebp - 0x1c]
movsx ecx, word [eax + 0xa7e]
cmp ecx, 0xf3d
je 0x8d91b4
mov eax, dword [ebp - 0x1c]
movsx ecx, word [eax + 0xa7e]
cmp ecx, 0xf40
je 0x8d91b4
mov eax, dword [ebp - 0x1c]
movsx ecx, word [eax + 0xa7e]
cmp ecx, 0xf43
jne 0x8d91e3
mov eax, dword [ebp - 0x1c]
mov ecx, dword [eax + 0x76c]
mov edx, 1
mov word [ecx + 0xfa], dx
mov eax, dword [ebp - 0x1c]
mov ecx, dword [eax + 0x76c]
mov edx, 1
mov word [ecx + 0xf6], dx
jmp 0x8d9315
mov eax, dword [ebp - 0x1c]
movsx ecx, word [eax + 0xa7e]
cmp ecx, 0xf3e
je 0x8d9219
mov eax, dword [ebp - 0x1c]
movsx ecx, word [eax + 0xa7e]
cmp ecx, 0xf41
je 0x8d9219
mov eax, dword [ebp - 0x1c]
movsx ecx, word [eax + 0xa7e]
cmp ecx, 0xf44
jne 0x8d9248
mov eax, dword [ebp - 0x1c]
mov ecx, dword [eax + 0x76c]
mov edx, 2
mov word [ecx + 0xfa], dx
mov eax, dword [ebp - 0x1c]
mov ecx, dword [eax + 0x76c]
mov edx, 2
mov word [ecx + 0xf6], dx
jmp 0x8d9315
mov eax, dword [ebp - 0x1c]
movsx ecx, word [eax + 0xa7e]
cmp ecx, 0xf4a
jne 0x8d9289
mov eax, dword [ebp - 0x1c]
mov ecx, dword [eax + 0x76c]
mov edx, 3
mov word [ecx + 0xfa], dx
mov eax, dword [ebp - 0x1c]
mov ecx, dword [eax + 0x76c]
mov edx, 3
mov word [ecx + 0xf6], dx
jmp 0x8d9315
mov eax, dword [ebp - 0x1c]
movsx ecx, word [eax + 0xa7e]
cmp ecx, 0xf4b
je 0x8d92ad
mov eax, dword [ebp - 0x1c]
movsx ecx, word [eax + 0xa7e]
cmp ecx, 0xf4c
jne 0x8d92d9
mov eax, dword [ebp - 0x1c]
mov ecx, dword [eax + 0x76c]
mov edx, 4
mov word [ecx + 0xfa], dx
mov eax, dword [ebp - 0x1c]
mov ecx, dword [eax + 0x76c]
mov edx, 4
mov word [ecx + 0xf6], dx
jmp 0x8d9315
mov eax, dword [ebp - 0x1c]
movsx ecx, word [eax + 0xa7e]
cmp ecx, 0xfdc
jne 0x8d9315
mov eax, dword [ebp - 0x1c]
mov ecx, dword [eax + 0x76c]
mov edx, 1
mov word [ecx + 0xfa], dx
mov eax, dword [ebp - 0x1c]
mov ecx, dword [eax + 0x76c]
mov edx, 1
mov word [ecx + 0xf6], dx
mov eax, dword [ebp - 0x1c]
mov ecx, dword [eax + 0x76c]
mov dword [ebp - 0x1a74], ecx
mov edx, dword [ebp - 0x1c]
mov eax, dword [edx + 0x76c]
mov ecx, dword [eax]
mov edx, dword [ecx + 0x80]
mov dword [ebp - 0x1a78], edx
mov esi, esp
push 0
mov ecx, dword [ebp - 0x1a74]
call dword [ebp - 0x1a78]
cmp esi, esp
call fcn.005e11e1
mov eax, dword [ebp - 0x1c]
mov ecx, dword [eax + 0x76c]
mov dword [ecx + 0x128], 0
mov eax, dword [ebp - 0x1c]
mov ecx, dword [eax + 0x76c]
mov edx, dword [ecx + 0x60]
movss xmm0, dword [0x9b04e0]
movss dword [edx + 0x24], xmm0
mov eax, dword [ebp - 0x1c]
mov ecx, dword [eax + 0x76c]
mov edx, dword [ecx + 0x60]
movss xmm0, dword [0x9b04e0]
movss dword [edx + 0x28], xmm0
mov eax, dword [ebp - 0x1c]
mov ecx, dword [eax + 0x76c]
mov edx, dword [ecx + 0x60]
movss xmm0, dword [0x9b04e0]
movss dword [edx + 0x2c], xmm0
mov eax, dword [ebp - 0x1c]
mov ecx, dword [eax + 0x76c]
mov dword [ecx + 0x12c], 1
mov eax, dword [ebp - 0x1c]
mov ecx, dword [eax + 0x76c]
movss xmm0, dword [0x9b04e0]
movss dword [ecx + 0x138], xmm0
mov eax, dword [ebp - 0x1c]
mov ecx, dword [eax + 0x76c]
movss xmm0, dword [0x9b04e0]
movss dword [ecx + 0x13c], xmm0
mov eax, dword [ebp - 0x1c]
mov ecx, dword [eax + 0x76c]
movss xmm0, dword [0x9b04e0]
movss dword [ecx + 0x140], xmm0
mov eax, dword [ebp - 0x1c]
mov ecx, dword [eax + 0x76c]
mov dword [ecx + 0x168], 1
mov eax, dword [ebp - 0x1c]
mov ecx, dword [eax + 0x76c]
mov edx, dword [ebp - 0x1c]
mov eax, dword [edx + 0x34]
mov dword [ecx + 0x134], eax
mov eax, dword [ebp - 0x1c]
mov ecx, dword [eax + 0x76c]
mov dword [ecx + 0x130], 5
mov eax, dword [0xc62eb8]
mov ecx, dword [eax + 0x2c]
mov dword [ebp - 0x1a74], ecx
mov edx, dword [ebp - 0x1c]
mov eax, dword [edx + 0x76c]
push eax
mov ecx, dword [ebp - 0x1a74]
call fcn.005e2177
jmp 0x8d953b
mov eax, dword [ebp - 0x1c]
movsx ecx, word [eax + 0xa7e]
cmp ecx, 0x2f1
je 0x8d953b
mov eax, dword [ebp - 0x1c]
movsx ecx, word [eax + 0xa7e]
cmp ecx, 0x301
je 0x8d953b
mov eax, dword [ebp - 0x1c]
movsx ecx, word [eax + 0xa7e]
cmp ecx, 0x6be
je 0x8d953b
mov eax, dword [ebp - 0x1c]
movsx ecx, word [eax + 0xa7e]
cmp ecx, 0xf3c
jl 0x8d94d7
mov eax, dword [ebp - 0x1c]
movsx ecx, word [eax + 0xa7e]
cmp ecx, 0xf44
jle 0x8d953b
mov eax, dword [ebp - 0x1c]
movsx ecx, word [eax + 0xa7e]
cmp ecx, 0xf47
jl 0x8d94fb
mov eax, dword [ebp - 0x1c]
movsx ecx, word [eax + 0xa7e]
cmp ecx, 0xf4c
jle 0x8d953b
mov eax, dword [ebp - 0x1c]
movsx ecx, word [eax + 0xa7e]
cmp ecx, 0xfdc
je 0x8d953b
mov eax, dword [ebp - 0x1c]
cmp dword [eax + 0x76c], 0
je 0x8d953b
mov eax, dword [ebp - 0x1c]
mov ecx, dword [eax + 0x76c]
push ecx
mov ecx, dword [0xc62ea4]
call fcn.005df792
mov eax, dword [ebp - 0x1c]
mov dword [eax + 0x76c], 0
mov eax, dword [ebp - 0x1c]
mov ecx, dword [ebx + 8]
sub ecx, dword [eax + 0x860]
cmp ecx, 0x5dc
jbe 0x8d9568
mov eax, dword [ebp - 0x1c]
movsx ecx, byte [eax + 0xa34]
cmp ecx, 1
jne 0x8d9568
mov eax, dword [ebp - 0x1c]
mov byte [eax + 0xa34], 0
mov eax, dword [ebp - 0x1c]
movsx ecx, byte [eax + 0xa34]
cmp ecx, 1
jne 0x8d9a2e
mov eax, dword [ebp - 0x1c]
mov ecx, dword [ebx + 8]
sub ecx, dword [eax + 0x82c]
cmp ecx, 0x12c
jbe 0x8d9a2e
mov byte [ebp - 0x765], 0
mov eax, dword [ebp - 0x1c]
cmp dword [eax + 0x230], 4
je 0x8d95b2
mov eax, dword [ebp - 0x1c]
cmp dword [eax + 0x230], 8
jne 0x8d95b9
mov byte [ebp - 0x765], 1
push 0x1c0
call fcn.005de946
add esp, 4
mov dword [ebp - 0x1a3c], eax
mov dword [ebp - 4], 0x4b
cmp dword [ebp - 0x1a3c], 0
je 0x8d9670
push 0x1c0
mov ecx, dword [ebp - 0x1a3c]
call fcn.005dfc4c
mov eax, dword [ebp - 0x1c]
mov ecx, dword [eax + 0x5c]
mov dword [ebp - 0x1a74], ecx
push 0
push 0
sub esp, 0xc
mov ecx, esp
mov dword [ebp - 0x1a48], esp
push ecx
xorps xmm0, xmm0
movss dword [esp], xmm0
push ecx
xorps xmm0, xmm0
movss dword [esp], xmm0
push ecx
xorps xmm0, xmm0
movss dword [esp], xmm0
call fcn.005e0ce6
sub esp, 0xc
mov ecx, esp
mov dword [ebp - 0x1a54], esp
push ecx
xorps xmm0, xmm0
movss dword [esp], xmm0
push ecx
xorps xmm0, xmm0
movss dword [esp], xmm0
push ecx
xorps xmm0, xmm0
movss dword [esp], xmm0
call fcn.005e0ce6
mov edx, dword [ebp - 0x1a74]
push edx
mov ecx, dword [ebp - 0x1a3c]
call fcn.005e19d4
mov dword [ebp - 0x1a78], eax
jmp 0x8d967a
mov dword [ebp - 0x1a78], 0
mov eax, dword [ebp - 0x1a78]
mov dword [ebp - 0x1a30], eax
mov dword [ebp - 4], 0xffffffff
mov ecx, dword [ebp - 0x1a30]
mov dword [ebp - 0x774], ecx
mov eax, dword [ebp - 0x1c]
movsx ecx, byte [eax + 0xa5f]
test ecx, ecx
jle 0x8d9719
mov eax, dword [ebp - 0x1c]
cmp dword [eax + 0x12c], 0
je 0x8d9719
mov eax, dword [ebp - 0x774]
mov ecx, dword [ebp - 0x1c]
mov edx, dword [ecx + 0xa64]
mov dword [eax + 0x5c], edx
push 0x20
mov eax, dword [ebp - 0x1c]
add eax, 0x132
push eax
mov ecx, dword [ebp - 0x774]
add ecx, 0xf4
push ecx
call fcn.005e28b6
add esp, 0xc
mov eax, dword [ebp - 0x774]
mov ecx, dword [ebp - 0x1c]
mov edx, dword [ecx + 0x5c]
mov dword [eax + 0x1b4], edx
push 0x20
mov eax, dword [ebp - 0x1c]
add eax, 0x172
push eax
mov ecx, dword [ebp - 0x774]
add ecx, 0x190
push ecx
call fcn.005e28b6
add esp, 0xc
jmp 0x8d9739
push 0x20
mov eax, dword [ebp - 0x1c]
add eax, 0x172
push eax
mov ecx, dword [ebp - 0x774]
add ecx, 0xf4
push ecx
call fcn.005e28b6
add esp, 0xc
mov eax, dword [ebp - 0x774]
mov dword [eax + 0x168], 1
mov eax, dword [ebp - 0x774]
movss xmm0, dword [0x9b0664]
movss dword [eax + 0x138], xmm0
mov eax, dword [ebp - 0x774]
movss xmm0, dword [0x9b0664]
movss dword [eax + 0x13c], xmm0
mov eax, dword [ebp - 0x774]
movss xmm0, dword [0x9b0664]
movss dword [eax + 0x140], xmm0
mov eax, dword [ebp - 0x774]
mov ecx, dword [eax]
mov edx, dword [ecx + 0x80]
mov dword [ebp - 0x1a74], edx
movzx eax, byte [ebp - 0x765]
mov esi, esp
push eax
mov ecx, dword [ebp - 0x774]
call dword [ebp - 0x1a74]
cmp esi, esp
call fcn.005e11e1
mov eax, dword [ebp - 0x774]
mov ecx, dword [ebx + 8]
mov dword [eax + 0x124], ecx
mov eax, dword [ebp - 0x774]
mov dword [eax + 0x128], 0x2bc
mov eax, dword [ebp - 0x774]
mov ecx, dword [eax]
mov edx, dword [ecx + 0x3c]
mov dword [ebp - 0x1a74], edx
mov esi, esp
mov eax, dword [ebp - 0x1c]
push ecx
movss xmm0, dword [eax + 0x2c]
movss dword [esp], xmm0
mov ecx, dword [ebp - 0x1c]
movss xmm0, dword [ecx + 0x30]
addss xmm0, dword [0x9b0640]
push ecx
movss dword [esp], xmm0
mov edx, dword [ebp - 0x1c]
push ecx
movss xmm0, dword [edx + 0x28]
movss dword [esp], xmm0
mov ecx, dword [ebp - 0x774]
call dword [ebp - 0x1a74]
cmp esi, esp
call fcn.005e11e1
mov eax, dword [ebp - 0x774]
mov ecx, dword [ebp - 0x1c]
mov edx, dword [ecx + 0x34]
mov dword [eax + 0x134], edx
mov eax, dword [ebp - 0x774]
mov ecx, dword [ebp - 0x774]
mov edx, dword [ecx + 0x134]
mov dword [eax + 0x188], edx
mov eax, dword [ebp - 0x774]
mov dword [eax + 0x12c], 1
mov eax, dword [ebp - 0x1c]
movsx ecx, byte [eax + 0xa5f]
test ecx, ecx
jle 0x8d995a
mov eax, dword [ebp - 0x1c]
cmp dword [eax + 0x12c], 0
je 0x8d995a
mov eax, dword [ebp - 0x774]
cmp dword [eax + 0x60], 0
je 0x8d98f2
mov eax, dword [ebp - 0x774]
mov ecx, dword [eax + 0x60]
mov dword [ebp - 0x1a74], ecx
mov edx, dword [ebp - 0x1c]
imul eax, dword [edx + 0x5c], 0x1a40
mov ecx, dword [ebp - 0x1c]
imul edx, dword [ecx + 0x244], 0x70
lea eax, [eax + edx + 0xba0440]
mov ecx, dword [ebp - 0x1c]
imul edx, dword [ecx + 0xa64], 0x2a0
mov ecx, dword [ebp - 0x1c]
mov ecx, dword [ecx + 0x9f4]
mov edx, dword [edx + ecx*4 + 0xc2b4a0]
movsx eax, word [eax + edx*2]
push eax
mov ecx, dword [ebp - 0x1a74]
call fcn.005de496
mov eax, dword [ebp - 0x774]
cmp dword [eax + 0x1b0], 0
je 0x8d9958
mov eax, dword [ebp - 0x774]
mov ecx, dword [eax + 0x1b0]
mov dword [ebp - 0x1a74], ecx
mov edx, dword [ebp - 0x1c]
imul eax, dword [edx + 0x5c], 0x1a40
mov ecx, dword [ebp - 0x1c]
imul edx, dword [ecx + 0x244], 0x70
lea eax, [eax + edx + 0xba0440]
mov ecx, dword [ebp - 0x1c]
imul edx, dword [ecx + 0x5c], 0x2a0
mov ecx, dword [ebp - 0x1c]
mov ecx, dword [ecx + 0x9f4]
mov edx, dword [edx + ecx*4 + 0xc2b500]
movsx eax, word [eax + edx*2]
push eax
mov ecx, dword [ebp - 0x1a74]
call fcn.005de496
jmp 0x8d99ba
mov eax, dword [ebp - 0x774]
cmp dword [eax + 0x60], 0
je 0x8d99ba
mov eax, dword [ebp - 0x774]
mov ecx, dword [eax + 0x60]
mov dword [ebp - 0x1a74], ecx
mov edx, dword [ebp - 0x1c]
imul eax, dword [edx + 0x5c], 0x1a40
mov ecx, dword [ebp - 0x1c]
imul edx, dword [ecx + 0x244], 0x70
lea eax, [eax + edx + 0xba0440]
mov ecx, dword [ebp - 0x1c]
imul edx, dword [ecx + 0x5c], 0x2a0
mov ecx, dword [ebp - 0x1c]
mov ecx, dword [ecx + 0x9f4]
mov edx, dword [edx + ecx*4 + 0xc2b4a0]
movsx eax, word [eax + edx*2]
push eax
mov ecx, dword [ebp - 0x1a74]
call fcn.005de496
mov eax, dword [ebp - 0x774]
cmp dword [eax + 0x60], 0
je 0x8d99e1
mov eax, dword [ebp - 0x1c]
mov ecx, dword [eax + 0x60]
mov edx, dword [ebp - 0x774]
mov eax, dword [edx + 0x60]
mov ecx, dword [ecx + 0x2e4]
mov dword [eax + 0x2e4], ecx
mov eax, dword [ebp - 0x774]
mov dword [eax + 0x130], 0
push 0
push 0
push 0xa0
call fcn.005df8a0
add esp, 0xc
mov eax, dword [0xc62eb8]
mov ecx, dword [eax + 0x2c]
mov dword [ebp - 0x1a74], ecx
mov edx, dword [ebp - 0x774]
push edx
mov ecx, dword [ebp - 0x1a74]
call fcn.005e2177
mov eax, dword [ebp - 0x1c]
mov ecx, dword [ebx + 8]
mov dword [eax + 0x82c], ecx
mov eax, dword [ebp - 0x1c]
movsx ecx, word [eax + 0x6d0]
cmp ecx, 0x66
jne 0x8d9b11
mov eax, dword [ebp - 0x1c]
cmp dword [eax + 0xaac], 0
jne 0x8d9b11
mov eax, dword [ebp - 0x1c]
movsx eax, word [eax + 0x234]
cdq
mov ecx, 0xa
idiv ecx
mov dword [ebp - 0x780], edx
cmp dword [ebp - 0x780], 6
jne 0x8d9a7c
mov ecx, dword [ebp - 0x1c]
call fcn.005dfb98
jmp 0x8d9ae0
cmp dword [ebp - 0x780], 7
jne 0x8d9a8f
mov ecx, dword [ebp - 0x1c]
call fcn.005e2f41
jmp 0x8d9ae0
cmp dword [ebp - 0x780], 8
je 0x8d9ac5
mov eax, dword [ebp - 0x1c]
movsx ecx, word [eax + 0x234]
cmp ecx, 0x16
jl 0x8d9ab6
mov eax, dword [ebp - 0x1c]
movsx ecx, word [eax + 0x234]
cmp ecx, 0x19
jle 0x8d9ac5
mov eax, dword [ebp - 0x1c]
movsx ecx, word [eax + 0x234]
cmp ecx, 0x20
jne 0x8d9acf
mov ecx, dword [ebp - 0x1c]
call fcn.005de842
jmp 0x8d9ae0
cmp dword [ebp - 0x780], 9
jne 0x8d9ae0
mov ecx, dword [ebp - 0x1c]
call fcn.005e13df
mov eax, dword [ebp - 0x1c]
mov dword [eax + 0xaac], 1
mov eax, dword [0xc62eb4]
mov edx, dword [eax]
mov esi, esp
mov ecx, dword [0xc62eb4]
mov eax, dword [edx + 8]
call eax
cmp esi, esp
call fcn.005e11e1
mov ecx, dword [ebp - 0x1c]
mov dword [ecx + 0xaa8], eax
mov eax, dword [ebp - 0x1c]
cmp dword [eax + 0xaac], 1
jne 0x8d9d49
mov eax, dword [ebp - 0x1c]
movsx ecx, byte [eax + 0xa5e]
cmp ecx, 1
jne 0x8d9d49
mov eax, dword [ebp - 0x1c]
mov ecx, dword [eax + 0xaa8]
add ecx, 0x4e2
cmp dword [ebx + 8], ecx
jbe 0x8d9d49
mov eax, dword [ebp - 0x1c]
movss xmm0, dword [eax + 0x30]
addss xmm0, dword [0x9b0548]
mov ecx, dword [ebp - 0x1c]
push ecx
movss xmm1, dword [ecx + 0x2c]
movss dword [esp], xmm1
push ecx
movss dword [esp], xmm0
mov edx, dword [ebp - 0x1c]
push ecx
movss xmm0, dword [edx + 0x28]
movss dword [esp], xmm0
lea ecx, [ebp - 0x794]
call fcn.005e0ce6
mov eax, dword [ebp - 0x1c]
movsx eax, word [eax + 0x234]
cdq
mov ecx, 0xa
idiv ecx
mov dword [ebp - 0x7a0], eax
mov dword [ebp - 0x7ac], 0
jmp 0x8d9bbc
mov eax, dword [ebp - 0x7ac]
add eax, 1
mov dword [ebp - 0x7ac], eax
cmp dword [ebp - 0x7ac], 3
jge 0x8d9d3c
push 0x184
call fcn.005de946
add esp, 4
mov dword [ebp - 0x1a6c], eax
mov dword [ebp - 4], 0x4c
cmp dword [ebp - 0x1a6c], 0
je 0x8d9c86
push 0x184
mov ecx, dword [ebp - 0x1a6c]
call fcn.005dfc3d
push 0x50
push 1
push ecx
movss xmm0, dword [0x9b1f34]
movss dword [esp], xmm0
cvtsi2ss xmm0, dword [ebp - 0x7ac]
mulss xmm0, dword [0x9b0664]
addss xmm0, dword [0x9b1a5c]
push ecx
movss dword [esp], xmm0
cvtsi2ss xmm0, dword [ebp - 0x7ac]
mulss xmm0, dword [0x9b2d90]
addss xmm0, dword [0x9b1a5c]
push ecx
movss dword [esp], xmm0
cvtsi2ss xmm0, dword [ebp - 0x7ac]
mulss xmm0, dword [0x9b2d90]
addss xmm0, dword [0x9b1a5c]
push ecx
movss dword [esp], xmm0
push 0x2bc
push 0x38
mov ecx, dword [ebp - 0x1a6c]
call fcn.005e33d8
mov dword [ebp - 0x1a74], eax
jmp 0x8d9c90
mov dword [ebp - 0x1a74], 0
mov eax, dword [ebp - 0x1a74]
mov dword [ebp - 0x1a60], eax
mov dword [ebp - 4], 0xffffffff
mov ecx, dword [ebp - 0x1a60]
mov dword [ebp - 0x7b8], ecx
mov eax, dword [ebp - 0x7b8]
mov ecx, dword [eax]
mov edx, dword [ecx + 0x3c]
mov dword [ebp - 0x1a74], edx
mov esi, esp
push 0xffffffffffffffff
mov ecx, dword [ebp - 0x7b8]
call dword [ebp - 0x1a74]
cmp esi, esp
call fcn.005e11e1
mov eax, dword [ebp - 0x7b8]
mov dword [eax + 0x6c], 1
mov eax, dword [ebp - 0x7b8]
mov dword [eax + 0x104], 1
mov eax, dword [ebp - 0x7b8]
add eax, 0x74
mov ecx, dword [ebp - 0x794]
mov dword [eax], ecx
mov edx, dword [ebp - 0x790]
mov dword [eax + 4], edx
mov ecx, dword [ebp - 0x78c]
mov dword [eax + 8], ecx
mov eax, dword [0xc62eb8]
mov ecx, dword [eax + 0x2c]
mov dword [ebp - 0x1a74], ecx
mov edx, dword [ebp - 0x7b8]
push edx
mov ecx, dword [ebp - 0x1a74]
call fcn.005e2177
jmp 0x8d9bad
mov eax, dword [ebp - 0x1c]
mov dword [eax + 0xaac], 0
push edx
mov ecx, ebp
push eax
lea edx, [0x8d9d7c]
call fcn.005e078c
pop eax
pop edx
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
mov ecx, dword [ebp - 0x14]
xor ecx, ebp
call fcn.005df77e
mov esp, ebp
pop ebp
mov esp, ebx
pop ebx
ret 4