Function at 0x6aa80e40
Capabilities:
Resolve function by parsing pe exports

Disassembly:
push ebp
push edi
push esi
push ebx
xor ebx, ebx
sub esp, 0x9c
mov edx, dword [esp + 0xbc]
mov esi, dword [edx]
mov eax, esi
and eax, 0xffffffcf
mov dword [edx], eax
mov eax, esi
and eax, 7
cmp eax, 4
ja case.default.0x6aa80e6a
jmp dword [eax*4 + 0x6ae56c20]
fld st(0)
fadd st(1)
fadd dword [0x6ae56c6c]
fstp qword [esp + 0x68]
sub dword [esp + 0x6c], 0x3400000
fld st(0)
fsub dword [0x6ae56c70]
fld qword [esp + 0x68]
fxch st(1)
fucom st(1)
fnstsw ax
sahf
ja 0x6aa81dd2
fxch st(1)
fchs
fucompp
fnstsw ax
sahf
ja 0x6aa8184d
jmp 0x6aa80ec1
fstp st(0)
fstp st(0)
jmp 0x6aa80ec1
fstp st(0)
fstp st(0)
fstp st(0)
jmp 0x6aa80ec1
fstp st(0)
fstp qword [esp + 0x38]
cmp dword [esp + 0x20], 0xe
jg 0x6aa81570
mov eax, dword [esp + 0x50]
test eax, eax
js 0x6aa81570
mov esi, dword [esp + 0x48]
mov edx, dword [esp + 0x20]
test esi, esi
fld qword [edx*8 + 0x6ae56c80]
jg 0x6aa818e3
mov eax, dword [esp + 0xc4]
shr eax, 0x1f
test al, al
je 0x6aa818e3
mov ecx, dword [esp + 0x48]
test ecx, ecx
jne 0x6aa81851
fmul dword [0x6ae56c70]
fld qword [esp + 0x38]
fxch st(1)
fucompp
fnstsw ax
sahf
jae 0x6aa81853
add edx, 2
xor edi, edi
mov dword [esp + 0x28], edx
mov dword [esp + 0x38], 0
mov byte [ebx], 0x31
lea esi, [ebx + 1]
mov dword [esp + 0x40], 0
mov dword [esp + 0x24], 0x20
mov eax, dword [esp + 0x38]
mov dword [esp], eax
call fcn.6aa82f90
test edi, edi
je 0x6aa80f71
cmp dword [esp + 0x40], edi
jne 0x6aa81b8d
mov dword [esp], edi
call fcn.6aa82f90
mov dword [esp], ebp
call fcn.6aa82f90
mov eax, dword [esp + 0xcc]
mov ecx, dword [esp + 0x28]
mov edx, dword [esp + 0xc8]
mov byte [esi], 0
test eax, eax
mov dword [edx], ecx
je 0x6aa80f9d
mov eax, dword [esp + 0xcc]
mov dword [eax], esi
mov edx, dword [esp + 0xbc]
mov ecx, dword [esp + 0x24]
or dword [edx], ecx
lea esi, [esi]
add esp, 0x9c
mov eax, ebx
pop ebx
pop esi
pop edi
pop ebp
ret
mov eax, dword [esp + 0xb0]
xor edx, edx
mov edi, dword [eax]
cmp edi, 0x20
jle 0x6aa80fde
mov eax, 0x20
add eax, eax
add edx, 1
cmp edi, eax
jg 0x6aa80fd5
mov dword [esp], edx
call fcn.6aa82ed0
mov edx, dword [esp + 0xb8]
mov ebp, eax
lea eax, [edi - 1]
sar eax, 5
lea ebx, [edx + eax*4]
mov eax, dword [esp + 0xb8]
lea edx, [ebp + 0x14]
mov ecx, edx
mov dword [esp + 0x20], edx
mov edx, dword [eax]
add eax, 4
mov dword [ecx], edx
add ecx, 4
cmp ebx, eax
jae 0x6aa81008
mov edx, dword [esp + 0x20]
sub ecx, edx
sar ecx, 2
nop
lea eax, [ecx - 1]
mov edx, dword [ebp + eax*4 + 0x14]
test edx, edx
jne 0x6aa814f0
test eax, eax
mov ecx, eax
jne 0x6aa81020
mov dword [ebp + 0x10], 0
mov dword [esp + 0x40], 0
mov dword [esp], ebp
call fcn.6aa839e0
mov ecx, dword [esp + 0xb4]
mov dword [esp + 0x50], ecx
test eax, eax
mov dword [esp + 0x8c], eax
jne 0x6aa814c1
mov ebx, dword [ebp + 0x10]
test ebx, ebx
jne 0x6aa81130
mov dword [esp], ebp
call fcn.6aa82f90
mov ecx, dword [esp + 0xc8]
mov eax, dword [esp + 0xcc]
mov dword [ecx], 1
mov dword [esp + 8], 1
mov dword [esp + 4], eax
mov dword [esp], 0x6ae56c1d
call fcn.6aa82b00
add esp, 0x9c
mov ebx, eax
mov eax, ebx
pop ebx
pop esi
pop edi
pop ebp
ret
mov edx, dword [esp + 0xc8]
mov ecx, dword [esp + 0xcc]
mov dword [edx], 0xffff8000
mov dword [esp + 8], 3
mov dword [esp + 4], ecx
mov dword [esp], 0x6ae56c19
call fcn.6aa82b00
add esp, 0x9c
mov ebx, eax
mov eax, ebx
pop ebx
pop esi
pop edi
pop ebp
ret
mov ecx, dword [esp + 0xc8]
mov eax, dword [esp + 0xcc]
mov dword [ecx], 0xffff8000
mov dword [esp + 8], 8
mov dword [esp + 4], eax
mov dword [esp], 0x6ae56c10
call fcn.6aa82b00
add esp, 0x9c
mov ebx, eax
mov eax, ebx
pop ebx
pop esi
pop edi
pop ebp
ret
lea eax, [esp + 0x8c]
mov dword [esp + 4], eax
mov dword [esp], ebp
call fcn.6aa83690
mov eax, dword [esp + 0x50]
mov edx, dword [esp + 0x40]
lea ecx, [eax + edx - 1]
fstp qword [esp + 0x38]
mov ebx, dword [esp + 0x3c]
mov edx, ecx
mov dword [esp + 0x78], ecx
sar edx, 0x1f
mov eax, edx
xor eax, ecx
and ebx, 0xfffff
sub eax, edx
or ebx, 0x3ff00000
sub eax, 0x435
mov dword [esp + 0x3c], ebx
test eax, eax
fld qword [esp + 0x38]
fsub dword [0x6ae56c34]
fmul qword [0x6ae56c38]
fadd qword [0x6ae56c40]
fild dword [esp + 0x78]
fmul qword [0x6ae56c48]
faddp st(1)
jle 0x6aa811b1
mov dword [esp + 0x78], eax
fild dword [esp + 0x78]
fmul qword [0x6ae56c50]
faddp st(1)
fnstcw word [esp + 0x7e]
movzx eax, word [esp + 0x7e]
mov ah, 0xc
mov word [esp + 0x7c], ax
fldcw word [esp + 0x7c]
fist dword [esp + 0x20]
fldcw word [esp + 0x7e]
fldz
fucomp st(1)
fnstsw ax
sahf
ja 0x6aa818b0
fstp st(0)
mov eax, ecx
shl eax, 0x14
add eax, ebx
cmp dword [esp + 0x20], 0x16
mov dword [esp + 0x3c], eax
mov dword [esp + 0x5c], 1
ja 0x6aa8121f
mov edx, dword [esp + 0x20]
fld qword [edx*8 + 0x6ae56c80]
fld qword [esp + 0x38]
fxch st(1)
fucompp
fnstsw ax
sahf
jbe 0x6aa817e0
sub dword [esp + 0x20], 1
mov dword [esp + 0x5c], 0
mov eax, dword [esp + 0x40]
mov dword [esp + 0x54], 0
sub eax, ecx
sub eax, 1
mov dword [esp + 0x4c], eax
js 0x6aa81881
mov ecx, dword [esp + 0x20]
test ecx, ecx
js 0x6aa81894
mov edx, dword [esp + 0x20]
add dword [esp + 0x4c], edx
mov dword [esp + 0x58], 0
mov dword [esp + 0x60], edx
cmp dword [esp + 0xc0], 9
ja 0x6aa81510
cmp dword [esp + 0xc0], 5
jle 0x6aa823df
sub dword [esp + 0xc0], 4
xor eax, eax
cmp dword [esp + 0xc0], 3
je 0x6aa81802
jg 0x6aa81b64
cmp dword [esp + 0xc0], 2
jne 0x6aa8151b
mov dword [esp + 0x64], 0
mov edx, dword [esp + 0xc4]
test edx, edx
jle 0x6aa81d7e
cmp dword [esp + 0xc4], 0xe
setbe dl
mov ecx, dword [esp + 0xc4]
and edx, eax
mov dword [esp + 0x8c], ecx
mov eax, ecx
mov dword [esp + 0x70], ecx
mov dword [esp + 0x48], ecx
mov dword [esp], eax
mov byte [esp + 0x18], dl
call fcn.6aa82ac0
mov ecx, dword [esp + 0xb0]
movzx edx, byte [esp + 0x18]
mov ecx, dword [ecx + 0xc]
mov ebx, eax
sub ecx, 1
cmp ecx, 0
mov dword [esp + 0x44], ecx
je 0x6aa81316
jl 0x6aa81840
and esi, 8
jne 0x6aa817f0
test dl, dl
je 0x6aa80ec5
mov edx, dword [esp + 0x44]
or edx, dword [esp + 0x20]
jne 0x6aa80ec5
mov eax, dword [esp + 0x5c]
mov dword [esp + 0x8c], 0
fld qword [esp + 0x38]
test eax, eax
je 0x6aa81350
fld1
fucomp st(1)
fnstsw ax
sahf
ja 0x6aa82091
fld st(0)
mov eax, dword [esp + 0x48]
fadd st(1)
fadd dword [0x6ae56c6c]
fstp qword [esp + 0x68]
sub dword [esp + 0x6c], 0x3400000
test eax, eax
je 0x6aa80e87
mov edx, dword [esp + 0x48]
fld st(0)
mov dword [esp + 0x74], 0
mov eax, dword [esp + 0x64]
test eax, eax
je 0x6aa81def
fld qword [esp + 0x68]
lea esi, [ebx + 1]
fld dword [0x6ae56c74]
fdiv qword [edx*8 + 0x6ae56c78]
fnstcw word [esp + 0x7e]
mov dword [esp + 0x8c], 0
movzx eax, word [esp + 0x7e]
mov ah, 0xc
mov word [esp + 0x7c], ax
fsubrp st(1)
fxch st(1)
fldcw word [esp + 0x7c]
fist dword [esp + 0x78]
fldcw word [esp + 0x7e]
mov ecx, dword [esp + 0x78]
mov dword [esp + 0x78], ecx
add ecx, 0x30
fild dword [esp + 0x78]
fsubp st(1)
fxch st(1)
mov byte [ebx], cl
fucom st(1)
fnstsw ax
sahf
ja 0x6aa81490
fld st(1)
fsubr dword [0x6ae56c60]
fxch st(1)
fucom st(1)
fnstsw ax
fstp st(1)
sahf
ja 0x6aa81788
mov eax, dword [esp + 0x8c]
add eax, 1
cmp eax, edx
mov dword [esp + 0x8c], eax
jge 0x6aa80eb1
fld dword [0x6ae56c64]
jmp 0x6aa81457
fld st(1)
fsubr dword [0x6ae56c60]
fxch st(1)
fucom st(1)
fnstsw ax
fstp st(1)
sahf
ja 0x6aa81790
mov eax, dword [esp + 0x8c]
add eax, 1
cmp edx, eax
mov dword [esp + 0x8c], eax
jle 0x6aa80eb7
fxch st(1)
fxch st(2)
fmul st(1), st(0)
fmul st(2), st(0)
fxch st(2)
fldcw word [esp + 0x7c]
fist dword [esp + 0x78]
fldcw word [esp + 0x7e]
mov eax, dword [esp + 0x78]
mov dword [esp + 0x78], eax
lea ecx, [eax + 0x30]
fild dword [esp + 0x78]
fsubp st(1)
fxch st(1)
mov byte [esi], cl
add esi, 1
fucom st(1)
fnstsw ax
sahf
jbe 0x6aa81423
fstp st(0)
fstp st(1)
fstp st(1)
jmp 0x6aa81494
fstp st(0)
fstp st(1)
fldz
fxch st(1)
fucompp
fnstsw ax
sahf
jp 0x6aa822d3
jne 0x6aa822d3
mov edx, dword [esp + 0x74]
mov dword [esp + 0x24], 0
add edx, 1
mov dword [esp + 0x28], edx
jmp 0x6aa80f71
mov dword [esp + 4], eax
mov dword [esp], ebp
call fcn.6aa838d0
mov eax, dword [esp + 0x8c]
mov edx, dword [esp + 0xb4]
sub dword [esp + 0x40], eax
add edx, eax
mov dword [esp + 0x50], edx
jmp 0x6aa81066
bsr eax, dword [ebp + ecx*4 + 0x10]
mov dword [ebp + 0x10], ecx
shl ecx, 5
xor eax, 0x1f
sub ecx, eax
mov dword [esp + 0x40], ecx
jmp 0x6aa81044
mov dword [esp + 0xc0], 0
mov dword [esp + 0x78], edi
xor edx, edx
fild dword [esp + 0x78]
fmul qword [0x6ae56c58]
mov dword [esp + 0x64], 1
mov dword [esp + 0x70], 0xffffffff
mov dword [esp + 0x48], 0xffffffff
mov dword [esp + 0xc4], 0
fldcw word [esp + 0x7c]
fistp dword [esp + 0x78]
fldcw word [esp + 0x7e]
mov eax, dword [esp + 0x78]
add eax, 3
mov dword [esp + 0x8c], eax
jmp 0x6aa812de
mov eax, dword [esp + 0x64]
test eax, eax
je 0x6aa818d0
cmp dword [esp + 0xc0], 1
jle 0x6aa81ed5
mov eax, dword [esp + 0x48]
sub eax, 1
cmp dword [esp + 0x58], eax
jl 0x6aa81daa
mov esi, dword [esp + 0x58]
sub esi, eax
mov eax, dword [esp + 0x48]
test eax, eax
js 0x6aa81ff7
mov edx, dword [esp + 0x48]
mov ecx, dword [esp + 0x54]
mov dword [esp + 0x8c], edx
mov edi, edx
mov dword [esp + 0x50], ecx
mov dword [esp], 1
add dword [esp + 0x54], edi
add dword [esp + 0x4c], edi
call fcn.6aa830e0
mov edi, eax
mov eax, dword [esp + 0x4c]
test eax, eax
jle 0x6aa81609
mov eax, dword [esp + 0x50]
test eax, eax
jle 0x6aa81609
mov eax, dword [esp + 0x4c]
mov edx, dword [esp + 0x50]
cmp eax, edx
jle 0x6aa815f6
mov eax, edx
sub dword [esp + 0x54], eax
sub dword [esp + 0x50], eax
sub dword [esp + 0x4c], eax
mov dword [esp + 0x8c], eax
mov eax, dword [esp + 0x58]
test eax, eax
jle 0x6aa81659
mov ecx, dword [esp + 0x64]
test ecx, ecx
je 0x6aa81d93
test esi, esi
jle 0x6aa8164d
mov dword [esp], edi
mov dword [esp + 4], esi
call fcn.6aa83270
mov dword [esp + 4], ebp
mov dword [esp], eax
mov edi, eax
call fcn.6aa83110
mov dword [esp], ebp
mov dword [esp + 0x18], eax
call fcn.6aa82f90
mov eax, dword [esp + 0x18]
mov ebp, eax
mov eax, dword [esp + 0x58]
sub eax, esi
jne 0x6aa81dbf
mov dword [esp], 1
call fcn.6aa830e0
mov edx, dword [esp + 0x60]
test edx, edx
mov dword [esp + 0x38], eax
jle 0x6aa81685
mov edx, dword [esp + 0x60]
mov dword [esp], eax
mov dword [esp + 4], edx
call fcn.6aa83270
mov dword [esp + 0x38], eax
cmp dword [esp + 0xc0], 1
mov dword [esp + 0x58], 0
jle 0x6aa81ce1
mov eax, dword [esp + 0x60]
mov esi, 0x1f
test eax, eax
je 0x6aa816b7
mov edx, dword [esp + 0x38]
mov eax, dword [edx + 0x10]
bsr esi, dword [edx + eax*4 + 0x10]
xor esi, 0x1f
sub esi, dword [esp + 0x4c]
mov ecx, dword [esp + 0x54]
sub esi, 4
and esi, 0x1f
add ecx, esi
mov eax, esi
test ecx, ecx
mov dword [esp + 0x8c], esi
jle 0x6aa816e9
mov dword [esp], ebp
mov dword [esp + 4], ecx
call fcn.6aa83390
mov ebp, eax
mov eax, dword [esp + 0x8c]
add eax, dword [esp + 0x4c]
test eax, eax
jle 0x6aa81705
mov dword [esp + 4], eax
mov eax, dword [esp + 0x38]
mov dword [esp], eax
call fcn.6aa83390
mov dword [esp + 0x38], eax
mov eax, dword [esp + 0x5c]
test eax, eax
jne 0x6aa81baa
cmp dword [esp + 0xc0], 2
jle 0x6aa819c8
mov eax, dword [esp + 0x48]
test eax, eax
jg 0x6aa819c8
mov eax, dword [esp + 0x48]
test eax, eax
jne 0x6aa8185d
mov eax, dword [esp + 0x38]
mov dword [esp + 8], 0
mov dword [esp + 4], 5
mov dword [esp], eax
call fcn.6aa82fe0
mov dword [esp], ebp
mov dword [esp + 4], eax
mov dword [esp + 0x38], eax
call fcn.6aa83490
test eax, eax
jle 0x6aa8185d
mov edx, dword [esp + 0x20]
add edx, 2
mov dword [esp + 0x28], edx
jmp 0x6aa80f39
movzx ecx, byte [eax - 1]
mov esi, eax
jmp 0x6aa817a2
fstp st(0)
fstp st(0)
fstp st(0)
jmp 0x6aa817a2
fstp st(0)
fstp st(0)
fstp st(0)
fstp st(0)
jmp 0x6aa817a2
fstp st(0)
fstp st(0)
fstp st(0)
fstp st(0)
cmp cl, 0x39
lea eax, [esi - 1]
jne 0x6aa821c2
cmp eax, ebx
jne 0x6aa81780
add dword [esp + 0x74], 1
mov ecx, 0x31
mov byte [ebx], 0x30
mov byte [eax], cl
mov ecx, dword [esp + 0x74]
mov dword [esp + 0x24], 0x20
add ecx, 1
mov dword [esp + 0x28], ecx
jmp 0x6aa80f71
mov dword [esp + 0x5c], 0
jmp 0x6aa8121f
mov eax, 3
sub eax, dword [esp + 0x44]
mov dword [esp + 0x44], eax
jmp 0x6aa81316
mov dword [esp + 0x64], 0
mov edx, dword [esp + 0xc4]
add edx, dword [esp + 0x20]
mov dword [esp + 0x70], edx
add edx, 1
test edx, edx
mov dword [esp + 0x48], edx
jle 0x6aa81d5f
cmp edx, 0xe
mov dword [esp + 0x8c], edx
setbe dl
and edx, eax
mov eax, dword [esp + 0x48]
jmp 0x6aa812de
mov dword [esp + 0x44], 2
jmp 0x6aa8130d
fstp st(0)
jmp 0x6aa81853
fstp st(0)
mov dword [esp + 0x38], 0
xor edi, edi
mov ecx, dword [esp + 0xc4]
mov esi, ebx
mov dword [esp + 0x40], 0
mov dword [esp + 0x24], 0x10
neg ecx
mov dword [esp + 0x28], ecx
jmp 0x6aa80f4f
neg eax
mov dword [esp + 0x54], eax
mov dword [esp + 0x4c], 0
jmp 0x6aa8123a
mov ecx, dword [esp + 0x20]
sub dword [esp + 0x54], ecx
mov dword [esp + 0x60], 0
neg ecx
mov dword [esp + 0x58], ecx
jmp 0x6aa8125a
fild dword [esp + 0x20]
fucompp
fnstsw ax
sahf
jp 0x6aa818c1
je 0x6aa811dc
sub dword [esp + 0x20], 1
jmp 0x6aa811dc
mov ecx, dword [esp + 0x54]
xor edi, edi
mov esi, dword [esp + 0x58]
mov dword [esp + 0x50], ecx
jmp 0x6aa815d8
fld qword [esp + 0x38]
lea esi, [ebx + 1]
fld st(0)
fdiv st(2)
fnstcw word [esp + 0x7e]
mov dword [esp + 0x8c], 1
movzx eax, word [esp + 0x7e]
mov ah, 0xc
mov word [esp + 0x7c], ax
fldcw word [esp + 0x7c]
fistp dword [esp + 0x78]
fldcw word [esp + 0x7e]
mov ecx, dword [esp + 0x78]
mov dword [esp + 0x78], ecx
lea eax, [ecx + 0x30]
fild dword [esp + 0x78]
fmul st(2)
mov byte [ebx], al
fsubp st(1)
fldz
fxch st(1)
fucom st(1)
fnstsw ax
fstp st(1)
sahf
jnp 0x6aa822eb
mov eax, dword [esp + 0x8c]
cmp dword [esp + 0x48], eax
je 0x6aa81d2c
fld dword [0x6ae56c64]
mov edx, dword [esp + 0x48]
jmp 0x6aa81967
mov eax, dword [esp + 0x8c]
cmp edx, eax
je 0x6aa81d2a
add eax, 1
fmul st(1), st(0)
mov dword [esp + 0x8c], eax
fld st(1)
fdiv st(3)
fldcw word [esp + 0x7c]
fistp dword [esp + 0x78]
fldcw word [esp + 0x7e]
mov ecx, dword [esp + 0x78]
mov dword [esp + 0x78], ecx
lea eax, [ecx + 0x30]
fild dword [esp + 0x78]
fmul st(3)
mov byte [esi], al
add esi, 1
fsubp st(2)
fldz
fxch st(2)
fucom st(2)
fnstsw ax
fstp st(2)
sahf
jp 0x6aa81958
jne 0x6aa81958
fstp st(0)
fstp st(0)
fstp st(0)
mov ecx, dword [esp + 0x20]
mov dword [esp + 0x24], 0
add ecx, 1
mov dword [esp + 0x28], ecx
jmp 0x6aa80f71
mov eax, dword [esp + 0x64]
test eax, eax
je 0x6aa81c0a
add esi, dword [esp + 0x50]
test esi, esi
jle 0x6aa819ea
mov dword [esp], edi
mov dword [esp + 4], esi
call fcn.6aa83390
mov edi, eax
mov esi, dword [esp + 0x58]
mov edx, edi
test esi, esi
jne 0x6aa820e0
mov dword [esp + 0x28], ebx
mov esi, edx
mov dword [esp + 0x4c], ebx
mov ebx, edi
mov dword [esp + 0x8c], 1
mov dword [esp + 0x40], edi
jmp 0x6aa81af5
mov dword [esp], edx
mov dword [esp + 0x18], eax
call fcn.6aa82f90
mov eax, dword [esp + 0x18]
mov edx, dword [esp + 0xc0]
or edx, eax
jne 0x6aa81a4b
mov ecx, dword [esp + 0xb8]
test byte [ecx], 1
jne 0x6aa81a4b
mov edx, dword [esp + 0x44]
test edx, edx
je 0x6aa8230d
test edi, edi
js 0x6aa81f41
or edi, dword [esp + 0xc0]
jne 0x6aa81a6c
mov edx, dword [esp + 0xb8]
test byte [edx], 1
je 0x6aa81f41
test eax, eax
jg 0x6aa82139
mov edx, dword [esp + 0x28]
movzx eax, byte [esp + 0x2c]
mov ecx, dword [esp + 0x48]
mov byte [edx], al
add edx, 1
cmp dword [esp + 0x8c], ecx
mov dword [esp + 0x28], edx
je 0x6aa82124
mov dword [esp], ebp
mov dword [esp + 8], 0
mov dword [esp + 4], 0xa
call fcn.6aa82fe0
cmp ebx, esi
mov dword [esp + 8], 0
mov dword [esp + 4], 0xa
mov dword [esp], ebx
mov ebp, eax
je 0x6aa81b59
call fcn.6aa82fe0
mov dword [esp], esi
mov dword [esp + 8], 0
mov dword [esp + 4], 0xa
mov ebx, eax
call fcn.6aa82fe0
mov esi, eax
add dword [esp + 0x8c], 1
mov eax, dword [esp + 0x38]
mov dword [esp], ebp
mov dword [esp + 4], eax
call fcn.6aa82b70
mov dword [esp + 4], ebx
mov dword [esp], ebp
mov dword [esp + 0x34], eax
add eax, 0x30
mov dword [esp + 0x2c], eax
call fcn.6aa83490
mov dword [esp + 4], esi
mov edi, eax
mov eax, dword [esp + 0x38]
mov dword [esp], eax
call fcn.6aa83500
mov edx, eax
mov eax, 1
mov ecx, dword [edx + 0xc]
test ecx, ecx
jne 0x6aa81a18
mov dword [esp + 4], edx
mov dword [esp], ebp
mov dword [esp + 0x18], edx
call fcn.6aa83490
mov edx, dword [esp + 0x18]
jmp 0x6aa81a18
call fcn.6aa82fe0
mov ebx, eax
mov esi, eax
jmp 0x6aa81aed
cmp dword [esp + 0xc0], 4
je 0x6aa81d1d
cmp dword [esp + 0xc0], 5
jne 0x6aa8151b
mov dword [esp + 0x64], 1
jmp 0x6aa8180a
mov edx, dword [esp + 0x40]
test edx, edx
je 0x6aa80f69
mov eax, dword [esp + 0x40]
mov dword [esp], eax
call fcn.6aa82f90
jmp 0x6aa80f69
mov eax, dword [esp + 0x38]
mov dword [esp], ebp
mov dword [esp + 4], eax
call fcn.6aa83490
test eax, eax
jns 0x6aa81711
mov dword [esp], ebp
mov dword [esp + 8], 0
mov dword [esp + 4], 0xa
sub dword [esp + 0x20], 1
call fcn.6aa82fe0
mov ebp, eax
mov eax, dword [esp + 0x64]
test eax, eax
jne 0x6aa82346
cmp dword [esp + 0xc0], 2
mov edx, dword [esp + 0x70]
jle 0x6aa81c06
cmp dword [esp + 0x70], 0
jle 0x6aa823e9
mov dword [esp + 0x48], edx
mov esi, ebx
mov dword [esp + 0x24], edi
mov edi, dword [esp + 0x48]
mov dword [esp + 0x30], ebx
mov ebx, dword [esp + 0x38]
mov dword [esp + 0x8c], 1
jmp 0x6aa81c52
mov dword [esp], ebp
mov dword [esp + 8], 0
mov dword [esp + 4], 0xa
call fcn.6aa82fe0
add dword [esp + 0x8c], 1
mov ebp, eax
mov dword [esp + 4], ebx
mov dword [esp], ebp
call fcn.6aa82b70
add eax, 0x30
mov byte [esi], al
add esi, 1
cmp edi, dword [esp + 0x8c]
jg 0x6aa81c30
mov edi, dword [esp + 0x24]
mov ebx, dword [esp + 0x30]
mov dword [esp + 0x2c], eax
mov dword [esp + 0x40], 0
mov eax, dword [esp + 0x44]
test eax, eax
je 0x6aa8202a
cmp dword [esp + 0x44], 2
je 0x6aa82062
cmp dword [ebp + 0x10], 1
jle 0x6aa82214
movzx ecx, byte [esi - 1]
jmp 0x6aa81cb6
movzx ecx, byte [eax - 1]
mov esi, eax
cmp cl, 0x39
lea eax, [esi - 1]
jne 0x6aa82184
cmp eax, ebx
jne 0x6aa81cb0
mov edx, dword [esp + 0x20]
mov byte [ebx], 0x31
mov dword [esp + 0x24], 0x20
add edx, 2
mov dword [esp + 0x28], edx
jmp 0x6aa80f4f
cmp dword [esp + 0x40], 1
jne 0x6aa8169b
mov ecx, dword [esp + 0xb0]
mov eax, dword [ecx + 4]
add eax, 1
cmp dword [esp + 0xb4], eax
jle 0x6aa8169b
add dword [esp + 0x54], 1
add dword [esp + 0x4c], 1
mov dword [esp + 0x58], 1
jmp 0x6aa8169b
mov dword [esp + 0x64], 1
jmp 0x6aa812aa
fstp st(0)
mov eax, dword [esp + 0x44]
test eax, eax
je 0x6aa81f0c
fstp st(0)
fstp st(0)
cmp dword [esp + 0x44], 1
je 0x6aa82019
mov ecx, dword [esp + 0x20]
mov dword [esp + 0x24], 0x10
add ecx, 1
mov dword [esp + 0x28], ecx
jmp 0x6aa80f71
cmp dword [esp + 0x48], 0xe
mov dword [esp + 0x8c], 1
setbe dl
and edx, eax
mov eax, 1
jmp 0x6aa812de
mov edx, 1
mov dword [esp + 0xc4], 1
jmp 0x6aa812c4
mov ecx, dword [esp + 0x58]
mov dword [esp], ebp
mov dword [esp + 4], ecx
call fcn.6aa83270
mov ebp, eax
jmp 0x6aa81659
mov ecx, eax
xor esi, esi
sub ecx, dword [esp + 0x58]
mov dword [esp + 0x58], eax
add dword [esp + 0x60], ecx
jmp 0x6aa815a1
mov dword [esp], ebp
mov dword [esp + 4], eax
call fcn.6aa83270
mov ebp, eax
jmp 0x6aa81659
fstp st(0)
fstp st(0)
fstp st(0)
mov dword [esp + 0x28], 2
xor edi, edi
mov dword [esp + 0x38], 0
jmp 0x6aa80f39
fld qword [esp + 0x68]
mov esi, ebx
fnstcw word [esp + 0x7e]
fmul qword [edx*8 + 0x6ae56c78]
mov dword [esp + 0x8c], 1
movzx eax, word [esp + 0x7e]
fld qword [esp + 0x38]
mov ah, 0xc
fld dword [0x6ae56c64]
fxch st(3)
mov word [esp + 0x7c], ax
jmp 0x6aa81e33
fmul st(2)
add eax, 1
mov dword [esp + 0x8c], eax
fld st(0)
fldcw word [esp + 0x7c]
fist dword [esp + 0x78]
fldcw word [esp + 0x7e]
mov eax, dword [esp + 0x78]
test eax, eax
je 0x6aa81e55
fstp st(1)
mov dword [esp + 0x78], eax
fild dword [esp + 0x78]
fsubp st(1)
jmp 0x6aa81e57
fstp st(0)
lea ecx, [eax + 0x30]
mov byte [esi], cl
mov eax, dword [esp + 0x8c]
add esi, 1
cmp eax, edx
jne 0x6aa81e25
fstp st(2)
fxch st(1)
fld dword [0x6ae56c74]
fld st(2)
fadd st(1)
fxch st(2)
fucom st(2)
fnstsw ax
fstp st(2)
sahf
ja 0x6aa8179a
fsubrp st(2)
fxch st(1)
fucomp st(1)
fnstsw ax
sahf
jbe 0x6aa80ebf
fstp st(1)
fldz
fxch st(1)
fucompp
fnstsw ax
sahf
jp 0x6aa82253
jne 0x6aa82253
mov dword [esp + 0x24], 0
jmp 0x6aa81ebd
movzx ecx, byte [eax - 1]
mov esi, eax
cmp cl, 0x30
lea eax, [esi - 1]
je 0x6aa81eb7
mov edx, dword [esp + 0x74]
add edx, 1
mov dword [esp + 0x28], edx
jmp 0x6aa80f71
mov eax, dword [esp + 0xb0]
sub edi, dword [esp + 0x40]
mov ecx, dword [eax + 4]
mov eax, dword [esp + 0x50]
sub eax, edi
cmp eax, ecx
jl 0x6aa821a1
mov edx, dword [esp + 0x54]
add edi, 1
mov dword [esp + 0x8c], edi
mov esi, dword [esp + 0x58]
mov dword [esp + 0x50], edx
jmp 0x6aa815c2
fadd st(0)
fucom st(1)
fnstsw ax
sahf
ja 0x6aa82015
fxch st(1)
fucompp
fnstsw ax
sahf
jp 0x6aa81f28
je 0x6aa8223e
mov edx, dword [esp + 0x20]
movzx ecx, byte [esi - 1]
mov dword [esp + 0x24], 0x10
mov dword [esp + 0x74], edx
jmp 0x6aa81ebd
mov ecx, dword [esp + 0x44]
mov edx, esi
mov dword [esp + 0x40], ebx
mov esi, dword [esp + 0x28]
mov ebx, dword [esp + 0x4c]
mov edi, dword [esp + 0x2c]
test ecx, ecx
je 0x6aa821d4
cmp dword [ebp + 0x10], 1
jle 0x6aa821ca
cmp dword [esp + 0x44], 2
je 0x6aa821f0
mov dword [esp + 0x24], ebx
mov ebx, edx
jmp 0x6aa81faf
mov dword [esp], ebp
mov ebx, edi
mov dword [esp + 8], 0
mov dword [esp + 4], 0xa
call fcn.6aa82fe0
mov ebp, eax
mov eax, dword [esp + 0x38]
mov dword [esp], ebp
mov dword [esp + 4], eax
call fcn.6aa82b70
add eax, 0x30
mov dword [esp + 0x2c], eax
mov eax, dword [esp + 0x38]
mov dword [esp + 4], ebx
mov dword [esp], eax
call fcn.6aa83490
test eax, eax
jle 0x6aa82260
movzx ecx, byte [esp + 0x2c]
mov byte [esi], cl
add esi, 1
mov dword [esp + 8], 0
mov dword [esp + 4], 0xa
mov dword [esp], ebx
call fcn.6aa82fe0
cmp dword [esp + 0x40], ebx
mov edi, eax
jne 0x6aa81f7c
mov dword [esp + 0x40], eax
jmp 0x6aa81f7c
mov edx, dword [esp + 0x54]
xor edi, edi
sub edx, dword [esp + 0x48]
mov dword [esp + 0x8c], 0
mov dword [esp + 0x50], edx
jmp 0x6aa815c2
fstp st(0)
fstp st(0)
mov edx, dword [esp + 0x20]
movzx ecx, byte [esi - 1]
mov dword [esp + 0x74], edx
jmp 0x6aa817a2
mov dword [esp], ebp
mov dword [esp + 4], 1
call fcn.6aa83390
mov ebp, eax
mov eax, dword [esp + 0x38]
mov dword [esp], ebp
mov dword [esp + 4], eax
call fcn.6aa83490
cmp eax, 0
jg 0x6aa81ca4
jne 0x6aa82062
test byte [esp + 0x2c], 1
jne 0x6aa81ca4
cmp dword [ebp + 0x10], 1
jle 0x6aa823a2
mov dword [esp + 0x24], 0x10
jmp 0x6aa82078
mov esi, eax
cmp byte [esi - 1], 0x30
lea eax, [esi - 1]
je 0x6aa82076
mov edx, dword [esp + 0x20]
add edx, 1
mov dword [esp + 0x28], edx
jmp 0x6aa80f4f
mov eax, dword [esp + 0x48]
test eax, eax
je 0x6aa80e71
mov eax, dword [esp + 0x70]
test eax, eax
jle 0x6aa80ec1
fld st(0)
mov edx, dword [esp + 0x70]
fmul dword [0x6ae56c64]
mov dword [esp + 0x74], 0xffffffff
fst qword [esp + 0x38]
fld st(0)
fmul dword [0x6ae56c68]
fadd dword [0x6ae56c6c]
fstp qword [esp + 0x68]
sub dword [esp + 0x6c], 0x3400000
jmp 0x6aa81380
mov eax, dword [edi + 4]
mov dword [esp], eax
call fcn.6aa82ed0
lea edx, [eax + 0xc]
mov esi, eax
mov eax, dword [edi + 0x10]
mov dword [esp], edx
lea ecx, [eax*4 + 8]
lea eax, [edi + 0xc]
mov dword [esp + 8], ecx
mov dword [esp + 4], eax
call sub.msvcrt.dll_memcpy
mov dword [esp + 4], 1
mov dword [esp], esi
call fcn.6aa83390
mov edx, eax
jmp 0x6aa819f8
mov edx, esi
mov esi, dword [esp + 0x28]
mov dword [esp + 0x40], ebx
mov edi, edx
mov ebx, dword [esp + 0x4c]
jmp 0x6aa81c83
cmp dword [esp + 0x44], 2
je 0x6aa81a74
cmp dword [esp + 0x2c], 0x39
mov edx, esi
mov dword [esp + 0x40], ebx
mov esi, dword [esp + 0x28]
mov ebx, dword [esp + 0x4c]
je 0x6aa8222c
movzx eax, byte [esp + 0x2c]
mov edi, edx
mov ecx, dword [esp + 0x20]
mov dword [esp + 0x24], 0x20
add eax, 1
add ecx, 1
mov byte [esi], al
add esi, 1
mov dword [esp + 0x28], ecx
jmp 0x6aa80f4f
add ecx, 1
mov byte [eax], cl
mov ecx, dword [esp + 0x20]
mov dword [esp + 0x24], 0x20
add ecx, 1
mov dword [esp + 0x28], ecx
jmp 0x6aa80f4f
mov edi, dword [esp + 0x50]
mov esi, dword [esp + 0x58]
sub edi, ecx
mov ecx, dword [esp + 0x54]
add edi, 1
mov dword [esp + 0x8c], edi
mov dword [esp + 0x50], ecx
jmp 0x6aa815c2
add ecx, 1
jmp 0x6aa817bf
cmp dword [ebp + 0x14], 0
jne 0x6aa81f69
test eax, eax
jg 0x6aa8227f
mov dword [esp + 0x24], 0
cmp dword [ebp + 0x10], 1
jg 0x6aa821f0
cmp dword [ebp + 0x14], 0
je 0x6aa821f8
mov dword [esp + 0x24], 0x10
movzx eax, byte [esp + 0x2c]
mov edi, edx
mov byte [esi], al
mov ecx, dword [esp + 0x20]
add esi, 1
add ecx, 1
mov dword [esp + 0x28], ecx
jmp 0x6aa80f4f
mov ecx, dword [ebp + 0x14]
test ecx, ecx
jne 0x6aa81ca4
mov dword [esp + 0x24], 0
jmp 0x6aa82078
mov byte [esi], 0x39
mov edi, edx
add esi, 1
mov ecx, 0x39
jmp 0x6aa81cb6
mov edx, dword [esp + 0x20]
and ecx, 1
movzx ecx, byte [esi - 1]
mov dword [esp + 0x74], edx
jne 0x6aa817a2
mov dword [esp + 0x24], 0x10
jmp 0x6aa81ebd
cmp dword [esp + 0x2c], 0x39
mov edx, ebx
mov ebx, dword [esp + 0x24]
je 0x6aa8222c
add dword [esp + 0x2c], 1
mov dword [esp + 0x24], 0x20
jmp 0x6aa821f8
mov dword [esp], ebp
mov dword [esp + 4], 1
mov dword [esp + 0x18], edx
call fcn.6aa83390
mov ebp, eax
mov eax, dword [esp + 0x38]
mov dword [esp], ebp
mov dword [esp + 4], eax
call fcn.6aa83490
mov edx, dword [esp + 0x18]
cmp eax, 0
jle 0x6aa8237e
mov ecx, dword [esp + 0x34]
add ecx, 0x31
cmp edi, 0x39
mov dword [esp + 0x2c], ecx
je 0x6aa8222c
mov dword [esp + 0x24], 0x20
jmp 0x6aa821e4
mov ecx, dword [esp + 0x74]
mov dword [esp + 0x24], 0x10
add ecx, 1
mov dword [esp + 0x28], ecx
jmp 0x6aa80f71
jne 0x6aa8193b
fstp st(0)
fstp st(0)
mov edx, dword [esp + 0x20]
mov dword [esp + 0x24], 0
add edx, 1
mov dword [esp + 0x28], edx
jmp 0x6aa80f71
cmp dword [esp + 0x2c], 0x39
mov edx, esi
mov dword [esp + 0x40], ebx
mov esi, dword [esp + 0x28]
mov ebx, dword [esp + 0x4c]
je 0x6aa8222c
test edi, edi
jle 0x6aa823b9
mov ecx, dword [esp + 0x34]
mov dword [esp + 0x24], 0x20
add ecx, 0x31
mov dword [esp + 0x2c], ecx
jmp 0x6aa821f8
mov dword [esp], edi
mov dword [esp + 8], 0
mov dword [esp + 4], 0xa
call fcn.6aa82fe0
cmp dword [esp + 0x70], 0
mov edi, eax
jg 0x6aa82371
cmp dword [esp + 0xc0], 2
jg 0x6aa82395
mov edx, dword [esp + 0x70]
mov dword [esp + 0x48], edx
jmp 0x6aa819d4
jne 0x6aa822c6
test byte [esp + 0x2c], 1
je 0x6aa822c6
nop
jmp 0x6aa822b2
mov ecx, dword [esp + 0x70]
mov dword [esp + 0x48], ecx
jmp 0x6aa8172b
cmp dword [ebp + 0x14], 0
mov dword [esp + 0x24], 0
jne 0x6aa8206c
jmp 0x6aa82078
cmp dword [ebp + 0x10], 1
mov dword [esp + 0x24], 0x10
jg 0x6aa821f8
cmp dword [ebp + 0x14], 1
sbb eax, eax
not eax
and eax, 0x10
mov dword [esp + 0x24], eax
jmp 0x6aa821f8
mov eax, 1
jmp 0x6aa81280
mov dword [esp + 0x48], edx
jmp 0x6aa8172b