Function at 0x8f3b27
Capabilities:
Check for software breakpoints

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x40
mov dword [ebp - 4], 0
mov dword [ebp - 8], 0
mov dword [ebp - 0xc], 0
mov dword [ebp - 0x10], 0
mov dword [ebp - 0x14], 0
mov dword [ebp - 0x18], 0
mov dword [ebp - 0x1c], esp
lea eax, [ebp - 8]
push eax
lea eax, [ebp - 4]
push eax
mov eax, 0x78
call fcn.009106d3
cmp dword [ebp - 0x1c], esp
je 0x8f3b81
push 6
call fcn.009106cd
add esp, 4
mov dword [0xcc], eax
cmp dword [0xcc], 0
je 0x8f3b9d
mov eax, 0
jmp 0x8f4bc6
mov dword [ebp - 0x20], 1
mov eax, dword [ebp - 4]
cmp eax, 0
jge 0x8f3bb9
push 0xa
call fcn.009106cd
add esp, 4
mov dword [ebp - 0x1c], eax
lea ebx, [ebp - 0x20]
call fcn.0085f4bc
push ecx
shl ecx, 2
add ecx, 8
push ecx
call fcn.009106c1
add esp, 4
mov edi, eax
mov dword [edi], 1
add edi, 4
pop ecx
push eax
push ecx
lea esi, [ebp - 0x1c]
lodsd eax, dword [esi]
stosd dword es:[edi], eax
mov ebx, dword [ebp + 8]
mov ebx, dword [ebx]
call fcn.0085f4bc
pop edx
test ecx, ecx
je 0x8f3cc8
push edi
push edx
push ecx
push ebx
mov ebx, dword [ebx]
push ebx
push ebx
mov ebx, dword [ebx]
test ebx, ebx
je 0x8f3c11
push ebx
call fcn.009106c7
add esp, 4
pop ebx
add ebx, 4
push ebx
mov ebx, dword [ebx]
test ebx, ebx
je 0x8f3c25
push ebx
call fcn.009106c7
add esp, 4
pop ebx
add ebx, 4
push ebx
mov ebx, dword [ebx]
test ebx, ebx
je 0x8f3c39
push ebx
call fcn.009106c7
add esp, 4
pop ebx
add ebx, 4
push ebx
mov ebx, dword [ebx]
test ebx, ebx
je 0x8f3c4d
push ebx
call fcn.009106c7
add esp, 4
pop ebx
add ebx, 4
push ebx
mov ebx, dword [ebx]
test ebx, ebx
je 0x8f3c61
push ebx
call fcn.009106c7
add esp, 4
pop ebx
add ebx, 4
push ebx
mov ebx, dword [ebx]
test ebx, ebx
je 0x8f3c75
push ebx
call fcn.009106c7
add esp, 4
pop ebx
add ebx, 4
push ebx
mov ebx, dword [ebx]
test ebx, ebx
je 0x8f3c89
push ebx
call fcn.009106c7
add esp, 4
pop ebx
add ebx, 0x14
push ebx
mov ebx, dword [ebx]
test ebx, ebx
je 0x8f3c9d
push ebx
call fcn.009106c7
add esp, 4
pop ebx
add ebx, 4
push ebx
mov ebx, dword [ebx]
test ebx, ebx
je 0x8f3cb1
push ebx
call fcn.009106c7
add esp, 4
pop ebx
call fcn.009106c7
add esp, 4
pop ebx
pop ecx
add ebx, 4
dec ecx
jne 0x8f3bfc
pop edx
pop edi
test edx, edx
je 0x8f3cfa
mov ebx, edi
push edx
push ebx
push 0x34
call fcn.009106c1
add esp, 4
pop ebx
push ebx
mov dword [ebx], eax
mov ebx, eax
mov edi, eax
xor eax, eax
mov ecx, 0xd
rep stosd dword es:[edi], eax
pop ebx
pop edx
add ebx, 4
dec edx
jne 0x8f3cd2
mov ebx, dword [ebp + 8]
push dword [ebx]
call fcn.009106c7
add esp, 4
pop eax
mov ebx, dword [ebp + 8]
mov dword [ebx], eax
push 0x80000301
push 0
push dword [ebp - 8]
push 1
mov ebx, 0x1bc
call fcn.009106d9
add esp, 0x10
mov dword [ebp - 0x1c], eax
mov eax, dword [ebp - 0x1c]
push eax
mov ebx, dword [ebp - 0xc]
test ebx, ebx
je 0x8f3d40
push ebx
call fcn.009106c7
add esp, 4
pop eax
mov dword [ebp - 0xc], eax
mov dword [ebp - 0x1c], esp
mov eax, dword [ebp - 0xc]
test eax, eax
je 0x8f3d51
add eax, 8
push eax
push dword [ebp - 8]
push dword [ebp - 4]
mov eax, 0x79
call fcn.009106d3
cmp dword [ebp - 0x1c], esp
je 0x8f3d74
push 6
call fcn.009106cd
add esp, 4
mov dword [0xcc], eax
mov dword [ebp - 0x10], 1
mov eax, dword [ebp - 4]
xor ecx, ecx
push eax
lea eax, [ebp - 0x14]
mov ebx, eax
pop eax
inc ecx
push ecx
push ebx
mov dword [ebx], ecx
push eax
cmp ecx, eax
jg 0x8f4bbb
mov ebx, dword [ebp + 8]
mov ebx, dword [ebx]
call fcn.0085f4bc
push ebx
push ecx
mov eax, dword [ebp - 0x14]
dec eax
jns 0x8f3db9
push 4
call fcn.009106cd
add esp, 4
pop ecx
pop ebx
cmp eax, ecx
jl 0x8f3dcc
push 1
call fcn.009106cd
add esp, 4
shl eax, 2
add ebx, eax
mov ebx, dword [ebx]
mov dword [ebp - 0x1c], ebx
push 0x80000301
push 0
push 0x10
push 0x80000301
push 0
push dword [ebp - 0x10]
push 0x80000005
push 0
mov eax, dword [ebp - 0xc]
test eax, eax
jne 0x8f3dff
mov eax, 0xb59
push eax
push 3
mov ebx, 0x1a8
call fcn.009106d9
add esp, 0x28
mov dword [ebp - 0x20], eax
lea eax, [ebp - 0x20]
push eax
call fcn.008f4bde
mov dword [ebp - 0x24], eax
mov ebx, dword [ebp - 0x20]
test ebx, ebx
je 0x8f3e31
push ebx
call fcn.009106c7
add esp, 4
mov eax, dword [ebp - 0x24]
push eax
mov ebx, dword [ebp - 0x1c]
mov ebx, dword [ebx]
test ebx, ebx
je 0x8f3e47
push ebx
call fcn.009106c7
add esp, 4
pop eax
mov ebx, dword [ebp - 0x1c]
mov dword [ebx], eax
add dword [ebp - 0x10], 0x10
mov ebx, dword [ebp + 8]
mov ebx, dword [ebx]
call fcn.0085f4bc
push ebx
push ecx
mov eax, dword [ebp - 0x14]
dec eax
jns 0x8f3e70
push 4
call fcn.009106cd
add esp, 4
pop ecx
pop ebx
cmp eax, ecx
jl 0x8f3e83
push 1
call fcn.009106cd
add esp, 4
shl eax, 2
add ebx, eax
mov ebx, dword [ebx]
add ebx, 4
mov dword [ebp - 0x1c], ebx
push 0x80000301
push 0
push 0x10
push 0x80000301
push 0
push dword [ebp - 0x10]
push 0x80000005
push 0
mov eax, dword [ebp - 0xc]
test eax, eax
jne 0x8f3eb9
mov eax, 0xb59
push eax
push 3
mov ebx, 0x1a8
call fcn.009106d9
add esp, 0x28
mov dword [ebp - 0x20], eax
lea eax, [ebp - 0x20]
push eax
call fcn.008f4bde
mov dword [ebp - 0x24], eax
mov ebx, dword [ebp - 0x20]
test ebx, ebx
je 0x8f3eeb
push ebx
call fcn.009106c7
add esp, 4
mov eax, dword [ebp - 0x24]
push eax
mov ebx, dword [ebp - 0x1c]
mov ebx, dword [ebx]
test ebx, ebx
je 0x8f3f01
push ebx
call fcn.009106c7
add esp, 4
pop eax
mov ebx, dword [ebp - 0x1c]
mov dword [ebx], eax
add dword [ebp - 0x10], 0x10
push 0xa0000301
push 0
lea eax, [ebp - 0x10]
push eax
push 0x80000301
push 0
push 3
push 0x80000005
push 0
mov eax, dword [ebp - 0xc]
test eax, eax
jne 0x8f3f35
mov eax, 0xb59
push eax
push 3
mov ebx, 0x19c
call fcn.009106d9
add esp, 0x28
mov dword [ebp - 0x24], eax
mov dword [ebp - 0x20], edx
mov dword [ebp - 0x1c], ecx
mov ecx, dword [ebp - 0x1c]
mov edx, dword [ebp - 0x20]
mov eax, dword [ebp - 0x24]
cmp ecx, 0x80000101
jne 0x8f3f69
and eax, 0xff
jmp 0x8f3fb4
cmp ecx, 0x80000201
jne 0x8f3f74
cwde
jmp 0x8f3fb4
cmp ecx, 0x80000301
je 0x8f3fb4
cmp ecx, 0x80000401
je 0x8f3fb4
mov dword [ebp - 0x2c], eax
cmp ecx, 0x80000501
je 0x8f3fa4
cmp ecx, 0x80000601
je 0x8f3fa9
push 2
call fcn.009106cd
add esp, 4
fld dword [ebp - 0x2c]
jmp 0x8f3faf
mov dword [ebp - 0x28], edx
fld qword [ebp - 0x2c]
call fcn.0085ff26
mov dword [ebp - 0x18], eax
mov ebx, dword [ebp + 8]
mov ebx, dword [ebx]
call fcn.0085f4bc
push ebx
push ecx
mov eax, dword [ebp - 0x14]
dec eax
jns 0x8f3fd6
push 4
call fcn.009106cd
add esp, 4
pop ecx
pop ebx
cmp eax, ecx
jl 0x8f3fe9
push 1
call fcn.009106cd
add esp, 4
shl eax, 2
add ebx, eax
mov ebx, dword [ebx]
add ebx, 8
mov dword [ebp - 0x1c], ebx
push dword [ebp - 0x18]
call fcn.008f4cc6
mov dword [ebp - 0x20], eax
mov eax, dword [ebp - 0x20]
push eax
mov ebx, dword [ebp - 0x1c]
mov ebx, dword [ebx]
test ebx, ebx
je 0x8f4017
push ebx
call fcn.009106c7
add esp, 4
pop eax
mov ebx, dword [ebp - 0x1c]
mov dword [ebx], eax
push 0xa0000301
push 0
lea eax, [ebp - 0x10]
push eax
push 0x80000301
push 0
push 3
push 0x80000005
push 0
mov eax, dword [ebp - 0xc]
test eax, eax
jne 0x8f4047
mov eax, 0xb59
push eax
push 3
mov ebx, 0x19c
call fcn.009106d9
add esp, 0x28
mov dword [ebp - 0x24], eax
mov dword [ebp - 0x20], edx
mov dword [ebp - 0x1c], ecx
mov ecx, dword [ebp - 0x1c]
mov edx, dword [ebp - 0x20]
mov eax, dword [ebp - 0x24]
cmp ecx, 0x80000101
jne 0x8f407b
and eax, 0xff
jmp 0x8f40c6
cmp ecx, 0x80000201
jne 0x8f4086
cwde
jmp 0x8f40c6
cmp ecx, 0x80000301
je 0x8f40c6
cmp ecx, 0x80000401
je 0x8f40c6
mov dword [ebp - 0x2c], eax
cmp ecx, 0x80000501
je 0x8f40b6
cmp ecx, 0x80000601
je 0x8f40bb
push 2
call fcn.009106cd
add esp, 4
fld dword [ebp - 0x2c]
jmp 0x8f40c1
mov dword [ebp - 0x28], edx
fld qword [ebp - 0x2c]
call fcn.0085ff26
mov dword [ebp - 0x18], eax
mov ebx, dword [ebp + 8]
mov ebx, dword [ebx]
call fcn.0085f4bc
push ebx
push ecx
mov eax, dword [ebp - 0x14]
dec eax
jns 0x8f40e8
push 4
call fcn.009106cd
add esp, 4
pop ecx
pop ebx
cmp eax, ecx
jl 0x8f40fb
push 1
call fcn.009106cd
add esp, 4
shl eax, 2
add ebx, eax
mov ebx, dword [ebx]
add ebx, 0xc
mov dword [ebp - 0x1c], ebx
push dword [ebp - 0x18]
call fcn.008f4cc6
mov dword [ebp - 0x20], eax
mov eax, dword [ebp - 0x20]
push eax
mov ebx, dword [ebp - 0x1c]
mov ebx, dword [ebx]
test ebx, ebx
je 0x8f4129
push ebx
call fcn.009106c7
add esp, 4
pop eax
mov ebx, dword [ebp - 0x1c]
mov dword [ebx], eax
push 0xa0000301
push 0
lea eax, [ebp - 0x10]
push eax
push 0x80000301
push 0
push 3
push 0x80000005
push 0
mov eax, dword [ebp - 0xc]
test eax, eax
jne 0x8f4159
mov eax, 0xb59
push eax
push 3
mov ebx, 0x19c
call fcn.009106d9
add esp, 0x28
mov dword [ebp - 0x24], eax
mov dword [ebp - 0x20], edx
mov dword [ebp - 0x1c], ecx
mov ecx, dword [ebp - 0x1c]
mov edx, dword [ebp - 0x20]
mov eax, dword [ebp - 0x24]
cmp ecx, 0x80000101
jne 0x8f418d
and eax, 0xff
jmp 0x8f41d8
cmp ecx, 0x80000201
jne 0x8f4198
cwde
jmp 0x8f41d8
cmp ecx, 0x80000301
je 0x8f41d8
cmp ecx, 0x80000401
je 0x8f41d8
mov dword [ebp - 0x2c], eax
cmp ecx, 0x80000501
je 0x8f41c8
cmp ecx, 0x80000601
je 0x8f41cd
push 2
call fcn.009106cd
add esp, 4
fld dword [ebp - 0x2c]
jmp 0x8f41d3
mov dword [ebp - 0x28], edx
fld qword [ebp - 0x2c]
call fcn.0085ff26
mov dword [ebp - 0x18], eax
mov ebx, dword [ebp + 8]
mov ebx, dword [ebx]
call fcn.0085f4bc
push ebx
push ecx
mov eax, dword [ebp - 0x14]
dec eax
jns 0x8f41fa
push 4
call fcn.009106cd
add esp, 4
pop ecx
pop ebx
cmp eax, ecx
jl 0x8f420d
push 1
call fcn.009106cd
add esp, 4
shl eax, 2
add ebx, eax
mov ebx, dword [ebx]
add ebx, 0x10
mov dword [ebp - 0x1c], ebx
push dword [ebp - 0x18]
call fcn.008f4cc6
mov dword [ebp - 0x20], eax
mov eax, dword [ebp - 0x20]
push eax
mov ebx, dword [ebp - 0x1c]
mov ebx, dword [ebx]
test ebx, ebx
je 0x8f423b
push ebx
call fcn.009106c7
add esp, 4
pop eax
mov ebx, dword [ebp - 0x1c]
mov dword [ebx], eax
push 0xa0000301
push 0
lea eax, [ebp - 0x10]
push eax
push 0x80000301
push 0
push 3
push 0x80000005
push 0
mov eax, dword [ebp - 0xc]
test eax, eax
jne 0x8f426b
mov eax, 0xb59
push eax
push 3
mov ebx, 0x19c
call fcn.009106d9
add esp, 0x28
mov dword [ebp - 0x24], eax
mov dword [ebp - 0x20], edx
mov dword [ebp - 0x1c], ecx
mov ecx, dword [ebp - 0x1c]
mov edx, dword [ebp - 0x20]
mov eax, dword [ebp - 0x24]
cmp ecx, 0x80000101
jne 0x8f429f
and eax, 0xff
jmp 0x8f42ea
cmp ecx, 0x80000201
jne 0x8f42aa
cwde
jmp 0x8f42ea
cmp ecx, 0x80000301
je 0x8f42ea
cmp ecx, 0x80000401
je 0x8f42ea
mov dword [ebp - 0x2c], eax
cmp ecx, 0x80000501
je 0x8f42da
cmp ecx, 0x80000601
je 0x8f42df
push 2
call fcn.009106cd
add esp, 4
fld dword [ebp - 0x2c]
jmp 0x8f42e5
mov dword [ebp - 0x28], edx
fld qword [ebp - 0x2c]
call fcn.0085ff26
mov dword [ebp - 0x18], eax
mov ebx, dword [ebp + 8]
mov ebx, dword [ebx]
call fcn.0085f4bc
push ebx
push ecx
mov eax, dword [ebp - 0x14]
dec eax
jns 0x8f430c
push 4
call fcn.009106cd
add esp, 4
pop ecx
pop ebx
cmp eax, ecx
jl 0x8f431f
push 1
call fcn.009106cd
add esp, 4
shl eax, 2
add ebx, eax
mov ebx, dword [ebx]
add ebx, 0x14
mov dword [ebp - 0x1c], ebx
push dword [ebp - 0x18]
call fcn.008f4cc6
mov dword [ebp - 0x20], eax
mov eax, dword [ebp - 0x20]
push eax
mov ebx, dword [ebp - 0x1c]
mov ebx, dword [ebx]
test ebx, ebx
je 0x8f434d
push ebx
call fcn.009106c7
add esp, 4
pop eax
mov ebx, dword [ebp - 0x1c]
mov dword [ebx], eax
push 0xa0000301
push 0
lea eax, [ebp - 0x10]
push eax
push 0x80000301
push 0
push 3
push 0x80000005
push 0
mov eax, dword [ebp - 0xc]
test eax, eax
jne 0x8f437d
mov eax, 0xb59
push eax
push 3
mov ebx, 0x19c
call fcn.009106d9
add esp, 0x28
mov dword [ebp - 0x24], eax
mov dword [ebp - 0x20], edx
mov dword [ebp - 0x1c], ecx
mov ecx, dword [ebp - 0x1c]
mov edx, dword [ebp - 0x20]
mov eax, dword [ebp - 0x24]
cmp ecx, 0x80000101
jne 0x8f43b1
and eax, 0xff
jmp 0x8f43fc
cmp ecx, 0x80000201
jne 0x8f43bc
cwde
jmp 0x8f43fc
cmp ecx, 0x80000301
je 0x8f43fc
cmp ecx, 0x80000401
je 0x8f43fc
mov dword [ebp - 0x2c], eax
cmp ecx, 0x80000501
je 0x8f43ec
cmp ecx, 0x80000601
je 0x8f43f1
push 2
call fcn.009106cd
add esp, 4
fld dword [ebp - 0x2c]
jmp 0x8f43f7
mov dword [ebp - 0x28], edx
fld qword [ebp - 0x2c]
call fcn.0085ff26
mov dword [ebp - 0x18], eax
mov ebx, dword [ebp + 8]
mov ebx, dword [ebx]
call fcn.0085f4bc
push ebx
push ecx
mov eax, dword [ebp - 0x14]
dec eax
jns 0x8f441e
push 4
call fcn.009106cd
add esp, 4
pop ecx
pop ebx
cmp eax, ecx
jl 0x8f4431
push 1
call fcn.009106cd
add esp, 4
shl eax, 2
add ebx, eax
mov ebx, dword [ebx]
add ebx, 0x18
mov dword [ebp - 0x1c], ebx
push dword [ebp - 0x18]
call fcn.008f4cc6
mov dword [ebp - 0x20], eax
mov eax, dword [ebp - 0x20]
push eax
mov ebx, dword [ebp - 0x1c]
mov ebx, dword [ebx]
test ebx, ebx
je 0x8f445f
push ebx
call fcn.009106c7
add esp, 4
pop eax
mov ebx, dword [ebp - 0x1c]
mov dword [ebx], eax
mov ebx, dword [ebp + 8]
mov ebx, dword [ebx]
call fcn.0085f4bc
push ebx
push ecx
mov eax, dword [ebp - 0x14]
dec eax
jns 0x8f4484
push 4
call fcn.009106cd
add esp, 4
pop ecx
pop ebx
cmp eax, ecx
jl 0x8f4497
push 1
call fcn.009106cd
add esp, 4
shl eax, 2
add ebx, eax
mov ebx, dword [ebx]
add ebx, 0x1c
mov dword [ebp - 0x1c], ebx
push 0xa0000301
push 0
lea eax, [ebp - 0x10]
push eax
push 0x80000301
push 0
push 3
push 0x80000005
push 0
mov eax, dword [ebp - 0xc]
test eax, eax
jne 0x8f44ce
mov eax, 0xb59
push eax
push 3
mov ebx, 0x19c
call fcn.009106d9
add esp, 0x28
mov dword [ebp - 0x28], eax
mov dword [ebp - 0x24], edx
mov dword [ebp - 0x20], ecx
mov ecx, dword [ebp - 0x20]
mov edx, dword [ebp - 0x24]
mov eax, dword [ebp - 0x28]
cmp ecx, 0x80000101
jne 0x8f4502
and eax, 0xff
jmp 0x8f454d
cmp ecx, 0x80000201
jne 0x8f450d
cwde
jmp 0x8f454d
cmp ecx, 0x80000301
je 0x8f454d
cmp ecx, 0x80000401
je 0x8f454d
mov dword [ebp - 0x30], eax
cmp ecx, 0x80000501
je 0x8f453d
cmp ecx, 0x80000601
je 0x8f4542
push 2
call fcn.009106cd
add esp, 4
fld dword [ebp - 0x30]
jmp 0x8f4548
mov dword [ebp - 0x2c], edx
fld qword [ebp - 0x30]
call fcn.0085ff26
mov ebx, dword [ebp - 0x1c]
mov dword [ebx], eax
mov ebx, dword [ebp + 8]
mov ebx, dword [ebx]
call fcn.0085f4bc
push ebx
push ecx
mov eax, dword [ebp - 0x14]
dec eax
jns 0x8f4571
push 4
call fcn.009106cd
add esp, 4
pop ecx
pop ebx
cmp eax, ecx
jl 0x8f4584
push 1
call fcn.009106cd
add esp, 4
shl eax, 2
add ebx, eax
mov ebx, dword [ebx]
add ebx, 0x20
mov dword [ebp - 0x1c], ebx
push 0xa0000301
push 0
lea eax, [ebp - 0x10]
push eax
push 0x80000301
push 0
push 3
push 0x80000005
push 0
mov eax, dword [ebp - 0xc]
test eax, eax
jne 0x8f45bb
mov eax, 0xb59
push eax
push 3
mov ebx, 0x19c
call fcn.009106d9
add esp, 0x28
mov dword [ebp - 0x28], eax
mov dword [ebp - 0x24], edx
mov dword [ebp - 0x20], ecx
mov ecx, dword [ebp - 0x20]
mov edx, dword [ebp - 0x24]
mov eax, dword [ebp - 0x28]
cmp ecx, 0x80000101
jne 0x8f45ef
and eax, 0xff
jmp 0x8f463a
cmp ecx, 0x80000201
jne 0x8f45fa
cwde
jmp 0x8f463a
cmp ecx, 0x80000301
je 0x8f463a
cmp ecx, 0x80000401
je 0x8f463a
mov dword [ebp - 0x30], eax
cmp ecx, 0x80000501
je 0x8f462a
cmp ecx, 0x80000601
je 0x8f462f
push 2
call fcn.009106cd
add esp, 4
fld dword [ebp - 0x30]
jmp 0x8f4635
mov dword [ebp - 0x2c], edx
fld qword [ebp - 0x30]
call fcn.0085ff26
mov ebx, dword [ebp - 0x1c]
mov dword [ebx], eax
mov ebx, dword [ebp + 8]
mov ebx, dword [ebx]
call fcn.0085f4bc
push ebx
push ecx
mov eax, dword [ebp - 0x14]
dec eax
jns 0x8f465e
push 4
call fcn.009106cd
add esp, 4
pop ecx
pop ebx
cmp eax, ecx
jl 0x8f4671
push 1
call fcn.009106cd
add esp, 4
shl eax, 2
add ebx, eax
mov ebx, dword [ebx]
add ebx, 0x24
mov dword [ebp - 0x1c], ebx
push 0xa0000301
push 0
lea eax, [ebp - 0x10]
push eax
push 0x80000301
push 0
push 3
push 0x80000005
push 0
mov eax, dword [ebp - 0xc]
test eax, eax
jne 0x8f46a8
mov eax, 0xb59
push eax
push 3
mov ebx, 0x19c
call fcn.009106d9
add esp, 0x28
mov dword [ebp - 0x28], eax
mov dword [ebp - 0x24], edx
mov dword [ebp - 0x20], ecx
mov ecx, dword [ebp - 0x20]
mov edx, dword [ebp - 0x24]
mov eax, dword [ebp - 0x28]
cmp ecx, 0x80000101
jne 0x8f46dc
and eax, 0xff
jmp 0x8f4727
cmp ecx, 0x80000201
jne 0x8f46e7
cwde
jmp 0x8f4727
cmp ecx, 0x80000301
je 0x8f4727
cmp ecx, 0x80000401
je 0x8f4727
mov dword [ebp - 0x30], eax
cmp ecx, 0x80000501
je 0x8f4717
cmp ecx, 0x80000601
je 0x8f471c
push 2
call fcn.009106cd
add esp, 4
fld dword [ebp - 0x30]
jmp 0x8f4722
mov dword [ebp - 0x2c], edx
fld qword [ebp - 0x30]
call fcn.0085ff26
mov ebx, dword [ebp - 0x1c]
mov dword [ebx], eax
mov ebx, dword [ebp + 8]
mov ebx, dword [ebx]
call fcn.0085f4bc
push ebx
push ecx
mov eax, dword [ebp - 0x14]
dec eax
jns 0x8f474b
push 4
call fcn.009106cd
add esp, 4
pop ecx
pop ebx
cmp eax, ecx
jl 0x8f475e
push 1
call fcn.009106cd
add esp, 4
shl eax, 2
add ebx, eax
mov ebx, dword [ebx]
add ebx, 0x28
mov dword [ebp - 0x1c], ebx
push 0xa0000301
push 0
lea eax, [ebp - 0x10]
push eax
push 0x80000301
push 0
push 3
push 0x80000005
push 0
mov eax, dword [ebp - 0xc]
test eax, eax
jne 0x8f4795
mov eax, 0xb59
push eax
push 3
mov ebx, 0x19c
call fcn.009106d9
add esp, 0x28
mov dword [ebp - 0x28], eax
mov dword [ebp - 0x24], edx
mov dword [ebp - 0x20], ecx
mov ecx, dword [ebp - 0x20]
mov edx, dword [ebp - 0x24]
mov eax, dword [ebp - 0x28]
cmp ecx, 0x80000101
jne 0x8f47c9
and eax, 0xff
jmp 0x8f4814
cmp ecx, 0x80000201
jne 0x8f47d4
cwde
jmp 0x8f4814
cmp ecx, 0x80000301
je 0x8f4814
cmp ecx, 0x80000401
je 0x8f4814
mov dword [ebp - 0x30], eax
cmp ecx, 0x80000501
je 0x8f4804
cmp ecx, 0x80000601
je 0x8f4809
push 2
call fcn.009106cd
add esp, 4
fld dword [ebp - 0x30]
jmp 0x8f480f
mov dword [ebp - 0x2c], edx
fld qword [ebp - 0x30]
call fcn.0085ff26
mov ebx, dword [ebp - 0x1c]
mov dword [ebx], eax
push 0xa0000301
push 0
lea eax, [ebp - 0x10]
push eax
push 0x80000301
push 0
push 3
push 0x80000005
push 0
mov eax, dword [ebp - 0xc]
test eax, eax
jne 0x8f4843
mov eax, 0xb59
push eax
push 3
mov ebx, 0x19c
call fcn.009106d9
add esp, 0x28
mov dword [ebp - 0x24], eax
mov dword [ebp - 0x20], edx
mov dword [ebp - 0x1c], ecx
mov ecx, dword [ebp - 0x1c]
mov edx, dword [ebp - 0x20]
mov eax, dword [ebp - 0x24]
cmp ecx, 0x80000101
jne 0x8f4877
and eax, 0xff
jmp 0x8f48c2
cmp ecx, 0x80000201
jne 0x8f4882
cwde
jmp 0x8f48c2
cmp ecx, 0x80000301
je 0x8f48c2
cmp ecx, 0x80000401
je 0x8f48c2
mov dword [ebp - 0x2c], eax
cmp ecx, 0x80000501
je 0x8f48b2
cmp ecx, 0x80000601
je 0x8f48b7
push 2
call fcn.009106cd
add esp, 4
fld dword [ebp - 0x2c]
jmp 0x8f48bd
mov dword [ebp - 0x28], edx
fld qword [ebp - 0x2c]
call fcn.0085ff26
mov dword [ebp - 0x18], eax
mov ebx, dword [ebp + 8]
mov ebx, dword [ebx]
call fcn.0085f4bc
push ebx
push ecx
mov eax, dword [ebp - 0x14]
dec eax
jns 0x8f48e4
push 4
call fcn.009106cd
add esp, 4
pop ecx
pop ebx
cmp eax, ecx
jl 0x8f48f7
push 1
call fcn.009106cd
add esp, 4
shl eax, 2
add ebx, eax
mov ebx, dword [ebx]
add ebx, 0x2c
mov dword [ebp - 0x1c], ebx
mov ebx, dword [ebp + 8]
mov ebx, dword [ebx]
call fcn.0085f4bc
push ebx
push ecx
mov eax, dword [ebp - 0x14]
dec eax
jns 0x8f4923
push 4
call fcn.009106cd
add esp, 4
pop ecx
pop ebx
cmp eax, ecx
jl 0x8f4936
push 1
call fcn.009106cd
add esp, 4
shl eax, 2
add ebx, eax
mov ebx, dword [ebx]
add ebx, 0x28
mov dword [ebp - 0x20], ebx
mov ebx, dword [ebp + 8]
mov ebx, dword [ebx]
call fcn.0085f4bc
push ebx
push ecx
mov eax, dword [ebp - 0x14]
dec eax
jns 0x8f4962
push 4
call fcn.009106cd
add esp, 4
pop ecx
pop ebx
cmp eax, ecx
jl 0x8f4975
push 1
call fcn.009106cd
add esp, 4
shl eax, 2
add ebx, eax
mov ebx, dword [ebx]
add ebx, 0x24
mov dword [ebp - 0x24], ebx
mov ebx, dword [ebp - 0x20]
fild dword [ebx]
fstp qword [ebp - 0x2c]
fld qword [ebp - 0x2c]
mov ebx, dword [ebp - 0x24]
fild dword [ebx]
fstp qword [ebp - 0x34]
fmul qword [ebp - 0x34]
fstp qword [ebp - 0x3c]
fld qword [ebp - 0x3c]
call fcn.0085ff26
push 0x80000301
push 0
push eax
push 0x80000301
push 0
push dword [ebp - 0x18]
push 2
mov ebx, 0x910
call fcn.009106d9
add esp, 0x1c
mov dword [ebp - 0x40], eax
mov eax, dword [ebp - 0x40]
push eax
mov ebx, dword [ebp - 0x1c]
mov ebx, dword [ebx]
test ebx, ebx
je 0x8f49e0
push ebx
call fcn.009106c7
add esp, 4
pop eax
mov ebx, dword [ebp - 0x1c]
mov dword [ebx], eax
push 0xa0000301
push 0
lea eax, [ebp - 0x10]
push eax
push 0x80000301
push 0
push 3
push 0x80000005
push 0
mov eax, dword [ebp - 0xc]
test eax, eax
jne 0x8f4a10
mov eax, 0xb59
push eax
push 3
mov ebx, 0x19c
call fcn.009106d9
add esp, 0x28
mov dword [ebp - 0x24], eax
mov dword [ebp - 0x20], edx
mov dword [ebp - 0x1c], ecx
mov ecx, dword [ebp - 0x1c]
mov edx, dword [ebp - 0x20]
mov eax, dword [ebp - 0x24]
cmp ecx, 0x80000101
jne 0x8f4a44
and eax, 0xff
jmp 0x8f4a8f
cmp ecx, 0x80000201
jne 0x8f4a4f
cwde
jmp 0x8f4a8f
cmp ecx, 0x80000301
je 0x8f4a8f
cmp ecx, 0x80000401
je 0x8f4a8f
mov dword [ebp - 0x2c], eax
cmp ecx, 0x80000501
je 0x8f4a7f
cmp ecx, 0x80000601
je 0x8f4a84
push 2
call fcn.009106cd
add esp, 4
fld dword [ebp - 0x2c]
jmp 0x8f4a8a
mov dword [ebp - 0x28], edx
fld qword [ebp - 0x2c]
call fcn.0085ff26
mov dword [ebp - 0x18], eax
mov ebx, dword [ebp + 8]
mov ebx, dword [ebx]
call fcn.0085f4bc
push ebx
push ecx
mov eax, dword [ebp - 0x14]
dec eax
jns 0x8f4ab1
push 4
call fcn.009106cd
add esp, 4
pop ecx
pop ebx
cmp eax, ecx
jl 0x8f4ac4
push 1
call fcn.009106cd
add esp, 4
shl eax, 2
add ebx, eax
mov ebx, dword [ebx]
add ebx, 0x30
mov dword [ebp - 0x1c], ebx
mov ebx, dword [ebp + 8]
mov ebx, dword [ebx]
call fcn.0085f4bc
push ebx
push ecx
mov eax, dword [ebp - 0x14]
dec eax
jns 0x8f4af0
push 4
call fcn.009106cd
add esp, 4
pop ecx
pop ebx
cmp eax, ecx
jl 0x8f4b03
push 1
call fcn.009106cd
add esp, 4
shl eax, 2
add ebx, eax
mov ebx, dword [ebx]
add ebx, 0x28
mov dword [ebp - 0x20], ebx
mov ebx, dword [ebp + 8]
mov ebx, dword [ebx]
call fcn.0085f4bc
push ebx
push ecx
mov eax, dword [ebp - 0x14]
dec eax
jns 0x8f4b2f
push 4
call fcn.009106cd
add esp, 4
pop ecx
pop ebx
cmp eax, ecx
jl 0x8f4b42
push 1
call fcn.009106cd
add esp, 4
shl eax, 2
add ebx, eax
mov ebx, dword [ebx]
add ebx, 0x24
mov dword [ebp - 0x24], ebx
mov ebx, dword [ebp - 0x20]
fild dword [ebx]
fstp qword [ebp - 0x2c]
fld qword [ebp - 0x2c]
mov ebx, dword [ebp - 0x24]
fild dword [ebx]
fstp qword [ebp - 0x34]
fmul qword [ebp - 0x34]
fstp qword [ebp - 0x3c]
fld qword [ebp - 0x3c]
call fcn.0085ff26
push 0x80000301
push 0
push eax
push 0x80000301
push 0
push dword [ebp - 0x18]
push 2
mov ebx, 0x910
call fcn.009106d9
add esp, 0x1c
mov dword [ebp - 0x40], eax
mov eax, dword [ebp - 0x40]
push eax
mov ebx, dword [ebp - 0x1c]
mov ebx, dword [ebx]
test ebx, ebx
je 0x8f4bad
push ebx
call fcn.009106c7
add esp, 4
pop eax
mov ebx, dword [ebp - 0x1c]
mov dword [ebx], eax
pop eax
pop ebx
pop ecx
jmp 0x8f3d8c
add esp, 0xc
mov eax, dword [ebp - 4]
jmp 0x8f4bc6
push eax
mov ebx, dword [ebp - 0xc]
test ebx, ebx
je 0x8f4bd7
push ebx
call fcn.009106c7
add esp, 4
pop eax
mov esp, ebp
pop ebp
ret 4