Function at 0x993120
Capabilities:
Create thread
Hide graphical window

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x278
mov eax, dword [0x9f8274]
xor eax, ebp
mov dword [ebp - 4], eax
push ebx
push esi
push edi
push 0x9ede9c
call fcn.009b6b20
add esp, 4
mov dword [ebp - 0x1f4], eax
mov dword [ebp - 0x24c], 0x30
mov dword [ebp - 0x248], 3
mov dword [ebp - 0x244], 0
mov dword [ebp - 0x240], 0
mov dword [ebp - 0x23c], 0
push 0
call dword [sym.imp.KERNEL32.dll_GetModuleHandleW]
mov dword [ebp - 0x238], eax
push 0x101
mov eax, dword [ebp + 8]
push eax
call dword [sym.imp.USER32.dll_LoadIconW]
mov dword [ebp - 0x234], eax
mov dword [ebp - 0x230], 0
mov dword [ebp - 0x22c], 0
mov dword [ebp - 0x228], 0
mov ecx, dword [ebp - 0x1f4]
mov dword [ebp - 0x224], ecx
mov dword [ebp - 0x220], 0
push 3
call fcn.00401000
add esp, 4
mov edx, dword [ebp + 0x10]
mov dword [ebp - 0x1f8], edx
mov dword [ebp - 0x1ec], 0xa04e10
mov eax, dword [ebp - 0x1ec]
mov dword [ebp - 0x25c], eax
mov ecx, dword [ebp - 0x1f8]
mov dx, word [ecx]
mov word [ebp - 0x1e6], dx
mov eax, dword [ebp - 0x1ec]
mov cx, word [ebp - 0x1e6]
mov word [eax], cx
mov edx, dword [ebp - 0x1f8]
add edx, 2
mov dword [ebp - 0x1f8], edx
mov eax, dword [ebp - 0x1ec]
add eax, 2
mov dword [ebp - 0x1ec], eax
cmp word [ebp - 0x1e6], 0
jne 0x9931fb
mov dword [ebp - 0x244], 0x98db60
lea ecx, [ebp - 0x24c]
push ecx
call dword [sym.imp.USER32.dll_RegisterClassExW]
movzx edx, ax
test edx, edx
jne 0x993268
xor eax, eax
jmp 0x9950b7
mov eax, dword [ebp + 8]
mov dword [0xa06284], eax
call fcn.00478da0
mov ecx, dword [ebp - 0x1f4]
push ecx
mov edx, dword [ebp - 0x1f4]
push edx
call dword [0xa06860]
test eax, eax
je 0x994f74
xorps xmm0, xmm0
movsd qword [ebp - 0x1dc], xmm0
xorps xmm0, xmm0
movsd qword [ebp - 0x1d0], xmm0
mov dword [ebp - 0x128], 0
mov dword [ebp - 0x1bc], 0
mov dword [ebp - 0x1f0], 0
mov dword [ebp - 0x1d4], 1
mov dword [ebp - 0x174], 0
mov dword [ebp - 0x1fc], 0
mov dword [ebp - 0x1a8], 0
mov dword [ebp - 0x1a4], 0
mov dword [ebp - 0x17c], 0
mov dword [ebp - 0x180], 0
mov dword [ebp - 0x1ac], 0
mov dword [ebp - 0x184], 0
mov dword [ebp - 0x188], 0
mov dword [ebp - 0x18c], 0
mov dword [ebp - 0x190], 0
mov dword [ebp - 0x1b0], 0
mov dword [ebp - 0x19c], 0
mov dword [ebp - 0x1a0], 0
mov dword [ebp - 0x250], 0
mov byte [ebp - 0x11d], 0
mov byte [ebp - 0x11e], 0
mov byte [ebp - 0x123], 0
mov byte [ebp - 0x11f], 0
mov byte [ebp - 0x120], 0
mov byte [ebp - 0x121], 0
mov byte [ebp - 0x151], 0
mov byte [ebp - 0x124], 0
mov byte [ebp - 0x122], 0
mov byte [ebp - 0x129], 0
xorps xmm0, xmm0
movsd qword [ebp - 0x1dc], xmm0
xorps xmm0, xmm0
movsd qword [ebp - 0x1d0], xmm0
xorps xmm0, xmm0
movsd qword [ebp - 0x1d0], xmm0
jmp 0x9933e6
movsd xmm0, qword [ebp - 0x1d0]
addsd xmm0, qword [0x9d9048]
movsd qword [ebp - 0x1d0], xmm0
movsd xmm0, qword [0x9d9958]
comisd xmm0, xmmword [ebp - 0x1d0]
jbe 0x993497
movsd xmm0, qword [0x9d9228]
mulsd xmm0, qword [ebp - 0x1d0]
mulsd xmm0, qword [ebp - 0x1d0]
movsd xmm1, qword [ebp - 0x1d0]
mulsd xmm1, qword [ebp - 0x1d0]
subsd xmm0, xmm1
movsd xmm1, qword [0x9d90c0]
mulsd xmm1, qword [ebp - 0x1d0]
mulsd xmm1, qword [ebp - 0x1d0]
addsd xmm1, qword [0x9d9138]
divsd xmm0, xmm1
addsd xmm0, qword [ebp - 0x1dc]
movsd qword [ebp - 0x1dc], xmm0
movsd xmm0, qword [ebp - 0x1dc]
comisd xmm0, xmmword [0x9d9190]
jbe 0x993492
movsd xmm0, qword [0x9d8fb8]
mulsd xmm0, qword [ebp - 0x1d0]
movsd xmm1, qword [ebp - 0x1dc]
subsd xmm1, xmm0
movsd qword [ebp - 0x1dc], xmm1
jmp 0x9933ce
xorps xmm0, xmm0
comisd xmm0, xmmword [ebp - 0x1dc]
jbe 0x9934c7
ror byte [eax - 0x24], 1
cmp ebx, esp
inc edx
iretd
mov dword [ebp - 0x20c], 0x9934a4
mov dword [ebp - 0x21c], 0x9934ac
mov eax, dword [ebp - 0x20c]
mov dword [ebp - 0x1c4], eax
mov ecx, dword [ebp - 0x21c]
mov dword [ebp - 0x210], ecx
mov byte [ebp - 0x151], 0x1a
mov dword [ebp - 0x128], 0
mov dword [ebp - 0x1bc], 0
mov dword [ebp - 0x128], 0
jmp 0x993529
mov edx, dword [ebp - 0x128]
add edx, 1
mov dword [ebp - 0x128], edx
cmp dword [ebp - 0x128], 0x100
jae 0x99354a
mov eax, dword [ebp - 0x128]
mov cl, byte [ebp - 0x128]
mov byte [ebp + eax - 0x10c], cl
jmp 0x99351a
mov dword [ebp - 0x1bc], 0
mov byte [ebp - 0x121], 0
mov dword [ebp - 0x128], 0xff
jmp 0x993576
mov edx, dword [ebp - 0x128]
sub edx, 1
mov dword [ebp - 0x128], edx
cmp dword [ebp - 0x128], 0
jbe 0x9937f0
mov dword [ebp - 0x1f0], 0
mov dword [ebp - 0x1d4], 1
mov dword [ebp - 0x174], 0
mov eax, dword [ebp - 0x1d4]
cmp eax, dword [ebp - 0x128]
jae 0x9935c1
mov ecx, dword [ebp - 0x1d4]
lea edx, [ecx + ecx + 1]
mov dword [ebp - 0x1d4], edx
jmp 0x9935a1
mov eax, dword [ebp - 0x1bc]
mov dword [ebp - 0x200], eax
cmp dword [ebp - 0x200], 3
ja case.default.0x9935e0
mov ecx, dword [ebp - 0x200]
jmp dword [ecx*4 + 0x9950cc]
movzx edx, byte [ebp - 0x121]
movzx ebx, byte [ebp + edx - 0x10c]
movsd xmm0, qword [ebp - 0x1dc]
call fcn.009b6e60
and eax, 0xff
add ebx, eax
mov byte [ebp - 0x121], bl
jmp 0x9936c9
movzx eax, byte [ebp - 0x121]
movzx ebx, byte [ebp + eax - 0x10c]
movsd xmm0, qword [ebp - 0x1dc]
call fcn.009b6e60
shr eax, 8
and eax, 0xff
add ebx, eax
mov byte [ebp - 0x121], bl
jmp 0x9936c9
movzx ecx, byte [ebp - 0x121]
movzx ebx, byte [ebp + ecx - 0x10c]
movsd xmm0, qword [ebp - 0x1dc]
call fcn.009b6e60
shr eax, 0x10
and eax, 0xff
add ebx, eax
mov byte [ebp - 0x121], bl
jmp 0x9936c9
movzx edx, byte [ebp - 0x121]
movzx ebx, byte [ebp + edx - 0x10c]
movsd xmm0, qword [ebp - 0x1dc]
call fcn.009b6e60
shr eax, 0x18
and eax, 0xff
add ebx, eax
mov byte [ebp - 0x121], bl
jmp 0x9936c9
movzx eax, byte [ebp - 0x121]
movzx ecx, byte [ebp + eax - 0x10c]
mov edx, dword [ebp - 0x210]
add edx, dword [ebp - 0x1bc]
movzx eax, byte [edx - 4]
add ecx, eax
mov byte [ebp - 0x121], cl
mov ecx, dword [ebp - 0x1bc]
add ecx, 1
mov dword [ebp - 0x1bc], ecx
movzx edx, byte [ebp - 0x151]
cmp dword [ebp - 0x1bc], edx
jb 0x993707
mov dword [ebp - 0x1bc], 0
movzx eax, byte [ebp - 0x151]
movzx ecx, byte [ebp - 0x121]
add ecx, eax
mov byte [ebp - 0x121], cl
movzx edx, byte [ebp - 0x121]
and edx, dword [ebp - 0x1d4]
mov dword [ebp - 0x174], edx
mov eax, dword [ebp - 0x1f0]
add eax, 1
mov dword [ebp - 0x1f0], eax
cmp dword [ebp - 0x1f0], 0xb
jbe 0x993746
mov eax, dword [ebp - 0x174]
xor edx, edx
div dword [ebp - 0x128]
mov dword [ebp - 0x174], edx
mov ecx, dword [ebp - 0x174]
cmp ecx, dword [ebp - 0x128]
ja 0x9935c1
mov edx, dword [ebp - 0x128]
cmp edx, dword [ebp - 0x174]
je 0x9937eb
mov eax, dword [ebp - 0x174]
movzx ecx, byte [ebp + eax - 0x10c]
mov edx, dword [ebp - 0x128]
movzx eax, byte [ebp + edx - 0x10c]
xor eax, ecx
mov ecx, dword [ebp - 0x128]
mov byte [ebp + ecx - 0x10c], al
mov edx, dword [ebp - 0x128]
movzx eax, byte [ebp + edx - 0x10c]
mov ecx, dword [ebp - 0x174]
movzx edx, byte [ebp + ecx - 0x10c]
xor edx, eax
mov eax, dword [ebp - 0x174]
mov byte [ebp + eax - 0x10c], dl
mov ecx, dword [ebp - 0x174]
movzx edx, byte [ebp + ecx - 0x10c]
mov eax, dword [ebp - 0x128]
movzx ecx, byte [ebp + eax - 0x10c]
xor ecx, edx
mov edx, dword [ebp - 0x128]
mov byte [ebp + edx - 0x10c], cl
jmp 0x993567
mov eax, 1
shl eax, 0
mov cl, byte [ebp + eax - 0x10c]
mov byte [ebp - 0x11d], cl
mov edx, 1
imul eax, edx, 3
mov cl, byte [ebp + eax - 0x10c]
mov byte [ebp - 0x11e], cl
movsd xmm0, qword [0x9d96d8]
movsd qword [ebp - 0x198], xmm0
movsd xmm0, qword [0x9d95b8]
movsd qword [ebp - 0x1e4], xmm0
movsd xmm0, qword [0x9d9478]
movsd qword [ebp - 0x160], xmm0
movsd xmm0, qword [0x9d9338]
movsd qword [ebp - 0x1b8], xmm0
movsd xmm0, qword [ebp - 0x160]
mulsd xmm0, qword [ebp - 0x1b8]
movsd qword [ebp - 0x160], xmm0
movsd xmm0, qword [ebp - 0x198]
subsd xmm0, qword [ebp - 0x1b8]
movsd qword [ebp - 0x198], xmm0
movsd xmm0, qword [ebp - 0x198]
subsd xmm0, qword [ebp - 0x1b8]
movsd qword [ebp - 0x198], xmm0
movsd xmm0, qword [ebp - 0x160]
mulsd xmm0, qword [ebp - 0x1b8]
movsd qword [ebp - 0x160], xmm0
movsd xmm0, qword [ebp - 0x160]
comisd xmm0, xmmword [ebp - 0x1b8]
jbe 0x993946
mov edx, 1
imul eax, edx, 5
mov cl, byte [ebp + eax - 0x10c]
mov byte [ebp - 0x123], cl
movsd xmm0, qword [ebp - 0x1e4]
addsd xmm0, qword [ebp - 0x160]
movsd qword [ebp - 0x1e4], xmm0
movsd xmm0, qword [ebp - 0x160]
subsd xmm0, qword [ebp - 0x1b8]
movsd qword [ebp - 0x160], xmm0
movsd xmm0, qword [ebp - 0x198]
subsd xmm0, qword [ebp - 0x1e4]
movsd qword [ebp - 0x198], xmm0
movsd xmm0, qword [ebp - 0x160]
mulsd xmm0, qword [ebp - 0x1b8]
movsd qword [ebp - 0x160], xmm0
jmp 0x993ada
movsd xmm0, qword [ebp - 0x198]
addsd xmm0, qword [ebp - 0x160]
movsd qword [ebp - 0x198], xmm0
movsd xmm0, qword [ebp - 0x1b8]
addsd xmm0, qword [ebp - 0x1e4]
movsd qword [ebp - 0x1b8], xmm0
movsd xmm0, qword [ebp - 0x160]
mulsd xmm0, qword [ebp - 0x198]
movsd qword [ebp - 0x160], xmm0
movsd xmm0, qword [ebp - 0x198]
mulsd xmm0, qword [ebp - 0x160]
movsd qword [ebp - 0x198], xmm0
movsd xmm0, qword [ebp - 0x1b8]
divsd xmm0, qword [ebp - 0x198]
movsd qword [ebp - 0x1b8], xmm0
movsd xmm0, qword [ebp - 0x1e4]
divsd xmm0, qword [ebp - 0x160]
movsd qword [ebp - 0x1e4], xmm0
movsd xmm0, qword [ebp - 0x160]
mulsd xmm0, qword [ebp - 0x1b8]
movsd qword [ebp - 0x160], xmm0
movsd xmm0, qword [ebp - 0x198]
subsd xmm0, qword [ebp - 0x1e4]
movsd qword [ebp - 0x198], xmm0
movsd xmm0, qword [ebp - 0x198]
comisd xmm0, xmmword [ebp - 0x160]
jbe 0x993a7a
movsd xmm0, qword [ebp - 0x1b8]
divsd xmm0, qword [ebp - 0x1e4]
movsd qword [ebp - 0x1b8], xmm0
movsd xmm0, qword [ebp - 0x160]
divsd xmm0, qword [ebp - 0x198]
movsd qword [ebp - 0x160], xmm0
movsd xmm0, qword [ebp - 0x198]
mulsd xmm0, qword [ebp - 0x160]
movsd qword [ebp - 0x198], xmm0
movsd xmm0, qword [ebp - 0x1e4]
subsd xmm0, qword [ebp - 0x1b8]
movsd qword [ebp - 0x1e4], xmm0
jmp 0x993ada
movsd xmm0, qword [ebp - 0x160]
mulsd xmm0, qword [ebp - 0x1b8]
movsd qword [ebp - 0x160], xmm0
movsd xmm0, qword [ebp - 0x160]
divsd xmm0, qword [ebp - 0x1b8]
movsd qword [ebp - 0x160], xmm0
movsd xmm0, qword [ebp - 0x160]
divsd xmm0, qword [ebp - 0x1b8]
movsd qword [ebp - 0x160], xmm0
movsd xmm0, qword [ebp - 0x198]
divsd xmm0, qword [ebp - 0x1e4]
movsd qword [ebp - 0x198], xmm0
mov edx, 1
imul eax, edx, 7
mov cl, byte [ebp + eax - 0x10c]
mov byte [ebp - 0x11f], cl
movzx edx, byte [ebp - 0x121]
mov al, byte [ebp + edx - 0x10c]
mov byte [ebp - 0x120], al
mov dword [ebp - 0x1fc], 8
cmp dword [ebp - 0x1fc], 2
jle 0x994f07
mov ecx, dword [ebp - 0x1fc]
and ecx, 1
jne 0x994f07
mov dword [ebp - 0x128], 0
mov dword [ebp - 0x1a8], 0
mov edx, dword [ebp - 0x1a8]
add edx, 1
mov dword [ebp - 0x1a8], edx
mov dword [ebp - 0x1a4], 0
mov eax, dword [ebp - 0x128]
shl eax, 1
mov dword [ebp - 0x1a4], eax
mov dword [ebp - 0x17c], 0
mov ecx, dword [ebp - 0x1c4]
add ecx, dword [ebp - 0x1a4]
movzx edx, byte [ecx]
add edx, dword [ebp - 0x17c]
mov dword [ebp - 0x17c], edx
mov dword [ebp - 0x180], 0
movss xmm0, dword [0x9d9c7c]
movss dword [ebp - 0x178], xmm0
movss xmm0, dword [0x9d9c3c]
movss dword [ebp - 0x1c8], xmm0
movss xmm0, dword [0x9d9bb0]
movss dword [ebp - 0x1c0], xmm0
movss xmm0, dword [0x9d9adc]
movss dword [ebp - 0x16c], xmm0
movss xmm0, dword [0x9d9a04]
movss dword [ebp - 0x168], xmm0
movss xmm0, dword [ebp - 0x16c]
subss xmm0, dword [ebp - 0x168]
movss dword [ebp - 0x16c], xmm0
movss xmm0, dword [ebp - 0x1c0]
addss xmm0, dword [ebp - 0x168]
movss dword [ebp - 0x1c0], xmm0
movss xmm0, dword [ebp - 0x178]
subss xmm0, dword [ebp - 0x168]
movss dword [ebp - 0x178], xmm0
movss xmm0, dword [ebp - 0x1c0]
subss xmm0, dword [ebp - 0x168]
movss dword [ebp - 0x1c0], xmm0
movss xmm0, dword [ebp - 0x1c8]
addss xmm0, dword [ebp - 0x168]
movss dword [ebp - 0x1c8], xmm0
movss xmm0, dword [ebp - 0x16c]
comiss xmm0, dword [ebp - 0x1c8]
jbe 0x993ce9
movss xmm0, dword [ebp - 0x16c]
addss xmm0, dword [ebp - 0x168]
movss dword [ebp - 0x16c], xmm0
movss xmm0, dword [ebp - 0x168]
addss xmm0, dword [ebp - 0x178]
movss dword [ebp - 0x168], xmm0
movss xmm0, dword [ebp - 0x178]
addss xmm0, dword [ebp - 0x1c8]
movss dword [ebp - 0x178], xmm0
movss xmm0, dword [ebp - 0x16c]
mulss xmm0, dword [ebp - 0x168]
movss dword [ebp - 0x16c], xmm0
movss xmm0, dword [ebp - 0x168]
subss xmm0, dword [ebp - 0x178]
movss dword [ebp - 0x168], xmm0
jmp 0x993d72
mov eax, dword [ebp - 0x180]
add eax, 0xce
mov dword [ebp - 0x180], eax
movss xmm0, dword [ebp - 0x178]
subss xmm0, dword [ebp - 0x1c8]
movss dword [ebp - 0x178], xmm0
movss xmm0, dword [ebp - 0x1c0]
mulss xmm0, dword [ebp - 0x16c]
movss dword [ebp - 0x1c0], xmm0
movss xmm0, dword [ebp - 0x1c0]
mulss xmm0, dword [ebp - 0x16c]
movss dword [ebp - 0x1c0], xmm0
movss xmm0, dword [ebp - 0x178]
subss xmm0, dword [ebp - 0x1c8]
movss dword [ebp - 0x178], xmm0
movss xmm0, dword [ebp - 0x16c]
mulss xmm0, dword [ebp - 0x168]
movss dword [ebp - 0x16c], xmm0
mov dword [ebp - 0x1ac], 0
mov ecx, dword [ebp - 0x128]
lea edx, [ecx + ecx + 1]
mov dword [ebp - 0x1ac], edx
mov dword [ebp - 0x184], 0
mov eax, dword [ebp - 0x1c4]
add eax, dword [ebp - 0x1ac]
movzx ecx, byte [eax]
add ecx, dword [ebp - 0x184]
mov dword [ebp - 0x184], ecx
mov dword [ebp - 0x188], 0
mov edx, dword [ebp - 0x188]
add edx, 0x3a
mov dword [ebp - 0x188], edx
mov dword [ebp - 0x18c], 0
mov eax, dword [ebp - 0x17c]
sub eax, dword [ebp - 0x180]
add eax, dword [ebp - 0x18c]
mov dword [ebp - 0x18c], eax
mov dword [ebp - 0x190], 0
mov ecx, dword [ebp - 0x184]
sub ecx, dword [ebp - 0x188]
add ecx, dword [ebp - 0x190]
mov dword [ebp - 0x190], ecx
mov dword [ebp - 0x1b0], 0
mov edx, dword [ebp - 0x18c]
shl edx, 4
mov dword [ebp - 0x1b0], edx
mov dword [ebp - 0x19c], 0
mov eax, dword [ebp - 0x190]
mov dword [ebp - 0x19c], eax
mov dword [ebp - 0x1a0], 0
mov ecx, dword [ebp - 0x1b0]
or ecx, dword [ebp - 0x19c]
mov dword [ebp - 0x1a0], ecx
mov byte [ebp - 0x124], 0
mov dl, byte [ebp - 0x1a0]
mov byte [ebp - 0x124], dl
mov byte [ebp - 0x122], 0
movzx eax, byte [ebp - 0x120]
mov cl, byte [ebp + eax - 0x10c]
mov byte [ebp - 0x122], cl
movzx edx, byte [ebp - 0x11d]
movzx eax, byte [ebp + edx - 0x10c]
movzx ecx, byte [ebp - 0x11e]
add ecx, eax
mov byte [ebp - 0x11e], cl
mov dl, byte [ebp - 0x11d]
add dl, 1
mov byte [ebp - 0x11d], dl
movzx eax, byte [ebp - 0x11e]
movzx ecx, byte [ebp - 0x120]
mov dl, byte [ebp + eax - 0x10c]
mov byte [ebp + ecx - 0x10c], dl
movzx eax, byte [ebp - 0x11f]
movzx ecx, byte [ebp - 0x11e]
mov dl, byte [ebp + eax - 0x10c]
mov byte [ebp + ecx - 0x10c], dl
movzx eax, byte [ebp - 0x11d]
movzx ecx, byte [ebp - 0x11f]
mov dl, byte [ebp + eax - 0x10c]
mov byte [ebp + ecx - 0x10c], dl
movzx eax, byte [ebp - 0x11d]
mov cl, byte [ebp - 0x122]
mov byte [ebp + eax - 0x10c], cl
movzx edx, byte [ebp - 0x122]
movzx eax, byte [ebp + edx - 0x10c]
movzx ecx, byte [ebp - 0x123]
add ecx, eax
mov byte [ebp - 0x123], cl
movzx edx, byte [ebp - 0x124]
movzx eax, byte [ebp - 0x11e]
movzx ecx, byte [ebp + eax - 0x10c]
movzx eax, byte [ebp - 0x11d]
movzx eax, byte [ebp + eax - 0x10c]
add ecx, eax
and ecx, 0xff
movzx ecx, byte [ebp + ecx - 0x10c]
xor edx, ecx
movzx eax, byte [ebp - 0x11f]
movzx ecx, byte [ebp + eax - 0x10c]
movzx eax, byte [ebp - 0x120]
movzx eax, byte [ebp + eax - 0x10c]
add ecx, eax
movzx eax, byte [ebp - 0x123]
movzx eax, byte [ebp + eax - 0x10c]
add ecx, eax
and ecx, 0xff
movzx ecx, byte [ebp + ecx - 0x10c]
movzx eax, byte [ebp + ecx - 0x10c]
xor edx, eax
mov byte [ebp - 0x11f], dl
mov cl, byte [ebp - 0x124]
mov byte [ebp - 0x120], cl
mov dl, byte [ebp - 0x11f]
mov byte [ebp - 0x129], dl
cmp dword [ebp - 0x128], 0
jbe 0x993ff4
movsx ax, byte [ebp - 0x129]
mov ecx, dword [ebp - 0x128]
mov word [ebp + ecx*2 - 0xe], ax
mov edx, dword [ebp - 0x128]
add edx, 1
mov dword [ebp - 0x128], edx
mov eax, dword [ebp - 0x1a8]
add eax, 1
mov dword [ebp - 0x1a8], eax
mov ecx, dword [ebp - 0x128]
shl ecx, 1
mov dword [ebp - 0x1a4], ecx
mov edx, dword [ebp - 0x1c4]
add edx, dword [ebp - 0x1a4]
movzx eax, byte [edx]
mov dword [ebp - 0x17c], eax
mov dword [ebp - 0x180], 0xce
mov ecx, dword [ebp - 0x128]
lea edx, [ecx + ecx + 1]
mov dword [ebp - 0x1ac], edx
mov eax, dword [ebp - 0x1c4]
add eax, dword [ebp - 0x1ac]
movzx ecx, byte [eax]
mov dword [ebp - 0x184], ecx
mov dword [ebp - 0x188], 0x3a
mov edx, dword [ebp - 0x17c]
sub edx, dword [ebp - 0x180]
mov dword [ebp - 0x18c], edx
mov eax, dword [ebp - 0x184]
sub eax, dword [ebp - 0x188]
mov dword [ebp - 0x190], eax
mov ecx, dword [ebp - 0x18c]
shl ecx, 4
mov dword [ebp - 0x1b0], ecx
mov edx, dword [ebp - 0x190]
mov dword [ebp - 0x19c], edx
mov eax, dword [ebp - 0x1b0]
or eax, dword [ebp - 0x19c]
mov dword [ebp - 0x1a0], eax
mov cl, byte [ebp - 0x1a0]
mov byte [ebp - 0x124], cl
movzx edx, byte [ebp - 0x120]
mov al, byte [ebp + edx - 0x10c]
mov byte [ebp - 0x122], al
movzx ecx, byte [ebp - 0x11d]
movzx edx, byte [ebp + ecx - 0x10c]
movzx eax, byte [ebp - 0x11e]
add eax, edx
mov byte [ebp - 0x11e], al
mov cl, byte [ebp - 0x11d]
add cl, 1
mov byte [ebp - 0x11d], cl
movzx edx, byte [ebp - 0x11e]
movzx eax, byte [ebp - 0x120]
mov cl, byte [ebp + edx - 0x10c]
mov byte [ebp + eax - 0x10c], cl
movzx edx, byte [ebp - 0x11f]
movzx eax, byte [ebp - 0x11e]
mov cl, byte [ebp + edx - 0x10c]
mov byte [ebp + eax - 0x10c], cl
movzx edx, byte [ebp - 0x11d]
movzx eax, byte [ebp - 0x11f]
mov cl, byte [ebp + edx - 0x10c]
mov byte [ebp + eax - 0x10c], cl
movzx edx, byte [ebp - 0x11d]
mov al, byte [ebp - 0x122]
mov byte [ebp + edx - 0x10c], al
movzx ecx, byte [ebp - 0x122]
movzx edx, byte [ebp + ecx - 0x10c]
movzx eax, byte [ebp - 0x123]
add eax, edx
mov byte [ebp - 0x123], al
movzx ecx, byte [ebp - 0x124]
movzx edx, byte [ebp - 0x11e]
movzx eax, byte [ebp + edx - 0x10c]
movzx edx, byte [ebp - 0x11d]
movzx edx, byte [ebp + edx - 0x10c]
add eax, edx
and eax, 0xff
movzx eax, byte [ebp + eax - 0x10c]
xor ecx, eax
movzx edx, byte [ebp - 0x11f]
movzx eax, byte [ebp + edx - 0x10c]
movzx edx, byte [ebp - 0x120]
movzx edx, byte [ebp + edx - 0x10c]
add eax, edx
movzx edx, byte [ebp - 0x123]
movzx edx, byte [ebp + edx - 0x10c]
add eax, edx
and eax, 0xff
movzx eax, byte [ebp + eax - 0x10c]
movzx edx, byte [ebp + eax - 0x10c]
xor ecx, edx
mov byte [ebp - 0x11f], cl
mov al, byte [ebp - 0x124]
mov byte [ebp - 0x120], al
mov cl, byte [ebp - 0x11f]
mov byte [ebp - 0x129], cl
cmp dword [ebp - 0x128], 0
jbe 0x99424a
movsx dx, byte [ebp - 0x129]
mov eax, dword [ebp - 0x128]
mov word [ebp + eax*2 - 0xe], dx
mov ecx, dword [ebp - 0x128]
add ecx, 1
mov dword [ebp - 0x128], ecx
mov edx, dword [ebp - 0x1a8]
add edx, 1
mov dword [ebp - 0x1a8], edx
mov eax, dword [ebp - 0x128]
shl eax, 1
mov dword [ebp - 0x1a4], eax
mov ecx, dword [ebp - 0x1c4]
add ecx, dword [ebp - 0x1a4]
movzx edx, byte [ecx]
mov dword [ebp - 0x17c], edx
mov dword [ebp - 0x180], 0xce
mov eax, dword [ebp - 0x128]
lea ecx, [eax + eax + 1]
mov dword [ebp - 0x1ac], ecx
mov edx, dword [ebp - 0x1c4]
add edx, dword [ebp - 0x1ac]
movzx eax, byte [edx]
mov dword [ebp - 0x184], eax
mov dword [ebp - 0x188], 0x3a
mov ecx, dword [ebp - 0x17c]
sub ecx, dword [ebp - 0x180]
mov dword [ebp - 0x18c], ecx
mov edx, dword [ebp - 0x184]
sub edx, dword [ebp - 0x188]
mov dword [ebp - 0x190], edx
mov eax, dword [ebp - 0x18c]
shl eax, 4
mov dword [ebp - 0x1b0], eax
mov ecx, dword [ebp - 0x190]
mov dword [ebp - 0x19c], ecx
mov edx, dword [ebp - 0x1b0]
or edx, dword [ebp - 0x19c]
mov dword [ebp - 0x1a0], edx
mov al, byte [ebp - 0x1a0]
mov byte [ebp - 0x124], al
movzx ecx, byte [ebp - 0x120]
mov dl, byte [ebp + ecx - 0x10c]
mov byte [ebp - 0x122], dl
movzx eax, byte [ebp - 0x11d]
movzx ecx, byte [ebp + eax - 0x10c]
movzx edx, byte [ebp - 0x11e]
add edx, ecx
mov byte [ebp - 0x11e], dl
mov al, byte [ebp - 0x11d]
add al, 1
mov byte [ebp - 0x11d], al
movzx ecx, byte [ebp - 0x11e]
movzx edx, byte [ebp - 0x120]
mov al, byte [ebp + ecx - 0x10c]
mov byte [ebp + edx - 0x10c], al
movzx ecx, byte [ebp - 0x11f]
movzx edx, byte [ebp - 0x11e]
mov al, byte [ebp + ecx - 0x10c]
mov byte [ebp + edx - 0x10c], al
movzx ecx, byte [ebp - 0x11d]
movzx edx, byte [ebp - 0x11f]
mov al, byte [ebp + ecx - 0x10c]
mov byte [ebp + edx - 0x10c], al
movzx ecx, byte [ebp - 0x11d]
mov dl, byte [ebp - 0x122]
mov byte [ebp + ecx - 0x10c], dl
movzx eax, byte [ebp - 0x122]
movzx ecx, byte [ebp + eax - 0x10c]
movzx edx, byte [ebp - 0x123]
add edx, ecx
mov byte [ebp - 0x123], dl
movzx eax, byte [ebp - 0x124]
movzx ecx, byte [ebp - 0x11e]
movzx edx, byte [ebp + ecx - 0x10c]
movzx ecx, byte [ebp - 0x11d]
movzx ecx, byte [ebp + ecx - 0x10c]
add edx, ecx
and edx, 0xff
movzx edx, byte [ebp + edx - 0x10c]
xor eax, edx
movzx ecx, byte [ebp - 0x11f]
movzx edx, byte [ebp + ecx - 0x10c]
movzx ecx, byte [ebp - 0x120]
movzx ecx, byte [ebp + ecx - 0x10c]
add edx, ecx
movzx ecx, byte [ebp - 0x123]
movzx ecx, byte [ebp + ecx - 0x10c]
add edx, ecx
and edx, 0xff
movzx edx, byte [ebp + edx - 0x10c]
movzx ecx, byte [ebp + edx - 0x10c]
xor eax, ecx
mov byte [ebp - 0x11f], al
mov dl, byte [ebp - 0x124]
mov byte [ebp - 0x120], dl
mov al, byte [ebp - 0x11f]
mov byte [ebp - 0x129], al
cmp dword [ebp - 0x128], 0
jbe 0x9944a1
movsx cx, byte [ebp - 0x129]
mov edx, dword [ebp - 0x128]
mov word [ebp + edx*2 - 0xe], cx
mov eax, dword [ebp - 0x128]
add eax, 1
mov dword [ebp - 0x128], eax
mov ecx, dword [ebp - 0x1a8]
add ecx, 1
mov dword [ebp - 0x1a8], ecx
mov edx, dword [ebp - 0x128]
shl edx, 1
mov dword [ebp - 0x1a4], edx
mov eax, dword [ebp - 0x1c4]
add eax, dword [ebp - 0x1a4]
movzx ecx, byte [eax]
mov dword [ebp - 0x17c], ecx
mov dword [ebp - 0x180], 0xce
mov edx, dword [ebp - 0x128]
lea eax, [edx + edx + 1]
mov dword [ebp - 0x1ac], eax
mov ecx, dword [ebp - 0x1c4]
add ecx, dword [ebp - 0x1ac]
movzx edx, byte [ecx]
mov dword [ebp - 0x184], edx
mov dword [ebp - 0x188], 0x3a
mov eax, dword [ebp - 0x17c]
sub eax, dword [ebp - 0x180]
mov dword [ebp - 0x18c], eax
movss xmm0, dword [0x9d9bc8]
movss dword [ebp - 0x164], xmm0
movss xmm0, dword [0x9d9b34]
movss dword [ebp - 0x13c], xmm0
movss xmm0, dword [0x9d9ac0]
movss dword [ebp - 0x14c], xmm0
movss xmm0, dword [0x9d9a30]
movss dword [ebp - 0x148], xmm0
movss xmm0, dword [0x9d99a8]
movss dword [ebp - 0x134], xmm0
movss xmm0, dword [ebp - 0x14c]
mulss xmm0, dword [ebp - 0x134]
movss dword [ebp - 0x14c], xmm0
movss xmm0, dword [ebp - 0x148]
subss xmm0, dword [ebp - 0x134]
movss dword [ebp - 0x148], xmm0
movss xmm0, dword [ebp - 0x148]
mulss xmm0, dword [ebp - 0x134]
movss dword [ebp - 0x148], xmm0
movss xmm0, dword [ebp - 0x148]
addss xmm0, dword [ebp - 0x134]
movss dword [ebp - 0x148], xmm0
movss xmm0, dword [ebp - 0x13c]
subss xmm0, dword [ebp - 0x134]
movss dword [ebp - 0x13c], xmm0
movss xmm0, dword [ebp - 0x134]
comiss xmm0, dword [ebp - 0x14c]
jbe 0x994802
movss xmm0, dword [ebp - 0x13c]
addss xmm0, dword [ebp - 0x148]
movss dword [ebp - 0x13c], xmm0
movss xmm0, dword [ebp - 0x14c]
mulss xmm0, dword [ebp - 0x134]
movss dword [ebp - 0x14c], xmm0
movss xmm0, dword [ebp - 0x13c]
subss xmm0, dword [ebp - 0x148]
movss dword [ebp - 0x13c], xmm0
movss xmm0, dword [ebp - 0x13c]
subss xmm0, dword [ebp - 0x148]
movss dword [ebp - 0x13c], xmm0
movss xmm0, dword [ebp - 0x134]
divss xmm0, dword [ebp - 0x13c]
movss dword [ebp - 0x134], xmm0
movss xmm0, dword [ebp - 0x164]
subss xmm0, dword [ebp - 0x14c]
movss dword [ebp - 0x164], xmm0
movss xmm0, dword [ebp - 0x13c]
addss xmm0, dword [ebp - 0x148]
movss dword [ebp - 0x13c], xmm0
movss xmm0, dword [ebp - 0x148]
addss xmm0, dword [ebp - 0x164]
movss dword [ebp - 0x148], xmm0
movss xmm0, dword [ebp - 0x164]
mulss xmm0, dword [ebp - 0x14c]
movss dword [ebp - 0x164], xmm0
movss xmm0, dword [ebp - 0x13c]
subss xmm0, dword [ebp - 0x148]
movss dword [ebp - 0x13c], xmm0
movss xmm0, dword [ebp - 0x164]
comiss xmm0, dword [ebp - 0x148]
jbe 0x994785
movss xmm0, dword [ebp - 0x14c]
divss xmm0, dword [ebp - 0x134]
movss dword [ebp - 0x14c], xmm0
movss xmm0, dword [ebp - 0x164]
subss xmm0, dword [ebp - 0x14c]
movss dword [ebp - 0x164], xmm0
movss xmm0, dword [ebp - 0x134]
divss xmm0, dword [ebp - 0x13c]
movss dword [ebp - 0x134], xmm0
movss xmm0, dword [ebp - 0x134]
mulss xmm0, dword [ebp - 0x13c]
movss dword [ebp - 0x134], xmm0
movss xmm0, dword [ebp - 0x148]
subss xmm0, dword [ebp - 0x164]
movss dword [ebp - 0x148], xmm0
jmp 0x9947fd
movss xmm0, dword [ebp - 0x14c]
divss xmm0, dword [ebp - 0x134]
movss dword [ebp - 0x14c], xmm0
movss xmm0, dword [ebp - 0x134]
divss xmm0, dword [ebp - 0x13c]
movss dword [ebp - 0x134], xmm0
movss xmm0, dword [ebp - 0x14c]
subss xmm0, dword [ebp - 0x134]
movss dword [ebp - 0x14c], xmm0
movss xmm0, dword [ebp - 0x13c]
divss xmm0, dword [ebp - 0x148]
movss dword [ebp - 0x13c], xmm0
movss xmm0, dword [ebp - 0x134]
subss xmm0, dword [ebp - 0x13c]
movss dword [ebp - 0x134], xmm0
jmp 0x99488c
movss xmm0, dword [ebp - 0x134]
addss xmm0, dword [ebp - 0x13c]
movss dword [ebp - 0x134], xmm0
movss xmm0, dword [ebp - 0x134]
subss xmm0, dword [ebp - 0x13c]
movss dword [ebp - 0x134], xmm0
movss xmm0, dword [ebp - 0x164]
addss xmm0, dword [ebp - 0x14c]
movss dword [ebp - 0x164], xmm0
mov ecx, dword [ebp - 0x184]
sub ecx, dword [ebp - 0x188]
mov dword [ebp - 0x190], ecx
movss xmm0, dword [ebp - 0x164]
addss xmm0, dword [ebp - 0x14c]
movss dword [ebp - 0x164], xmm0
movss xmm0, dword [ebp - 0x134]
subss xmm0, dword [ebp - 0x13c]
movss dword [ebp - 0x134], xmm0
mov edx, dword [ebp - 0x18c]
shl edx, 4
mov dword [ebp - 0x1b0], edx
mov eax, dword [ebp - 0x190]
mov dword [ebp - 0x19c], eax
mov ecx, dword [ebp - 0x1b0]
or ecx, dword [ebp - 0x19c]
mov dword [ebp - 0x1a0], ecx
mov dl, byte [ebp - 0x1a0]
mov byte [ebp - 0x124], dl
movzx eax, byte [ebp - 0x120]
mov cl, byte [ebp + eax - 0x10c]
mov byte [ebp - 0x122], cl
movzx edx, byte [ebp - 0x11d]
movzx eax, byte [ebp + edx - 0x10c]
movzx ecx, byte [ebp - 0x11e]
add ecx, eax
mov byte [ebp - 0x11e], cl
mov dl, byte [ebp - 0x11d]
add dl, 1
mov byte [ebp - 0x11d], dl
movzx eax, byte [ebp - 0x11e]
movzx ecx, byte [ebp - 0x120]
mov dl, byte [ebp + eax - 0x10c]
mov byte [ebp + ecx - 0x10c], dl
movzx eax, byte [ebp - 0x11f]
movzx ecx, byte [ebp - 0x11e]
mov dl, byte [ebp + eax - 0x10c]
mov byte [ebp + ecx - 0x10c], dl
movzx eax, byte [ebp - 0x11d]
movzx ecx, byte [ebp - 0x11f]
mov dl, byte [ebp + eax - 0x10c]
mov byte [ebp + ecx - 0x10c], dl
movzx eax, byte [ebp - 0x11d]
mov cl, byte [ebp - 0x122]
mov byte [ebp + eax - 0x10c], cl
movzx edx, byte [ebp - 0x122]
movzx eax, byte [ebp + edx - 0x10c]
movzx ecx, byte [ebp - 0x123]
add ecx, eax
mov byte [ebp - 0x123], cl
movss xmm0, dword [0x9d9c70]
movss dword [ebp - 0x138], xmm0
movss xmm0, dword [0x9d9c40]
movss dword [ebp - 0x140], xmm0
movss xmm0, dword [0x9d9be4]
movss dword [ebp - 0x170], xmm0
movss xmm0, dword [0x9d9b5c]
movss dword [ebp - 0x158], xmm0
movss xmm0, dword [0x9d9ae0]
movss dword [ebp - 0x144], xmm0
movss xmm0, dword [0x9d9a48]
movss dword [ebp - 0x150], xmm0
movss xmm0, dword [0x9d99b8]
movss dword [ebp - 0x130], xmm0
movss xmm0, dword [ebp - 0x150]
mulss xmm0, dword [ebp - 0x130]
movss dword [ebp - 0x150], xmm0
movss xmm0, dword [ebp - 0x144]
mulss xmm0, dword [ebp - 0x130]
movss dword [ebp - 0x144], xmm0
movss xmm0, dword [ebp - 0x138]
mulss xmm0, dword [ebp - 0x130]
movss dword [ebp - 0x138], xmm0
movss xmm0, dword [ebp - 0x158]
mulss xmm0, dword [ebp - 0x130]
movss dword [ebp - 0x158], xmm0
movss xmm0, dword [ebp - 0x170]
mulss xmm0, dword [ebp - 0x130]
movss dword [ebp - 0x170], xmm0
movss xmm0, dword [ebp - 0x144]
mulss xmm0, dword [ebp - 0x130]
movss dword [ebp - 0x144], xmm0
movss xmm0, dword [ebp - 0x138]
subss xmm0, dword [ebp - 0x130]
movss dword [ebp - 0x138], xmm0
movss xmm0, dword [ebp - 0x130]
comiss xmm0, dword [ebp - 0x144]
jbe 0x994d78
movss xmm0, dword [ebp - 0x144]
mulss xmm0, dword [ebp - 0x150]
movss dword [ebp - 0x144], xmm0
movss xmm0, dword [ebp - 0x170]
subss xmm0, dword [ebp - 0x158]
movss dword [ebp - 0x170], xmm0
movss xmm0, dword [ebp - 0x138]
addss xmm0, dword [ebp - 0x140]
movss dword [ebp - 0x138], xmm0
movss xmm0, dword [ebp - 0x158]
mulss xmm0, dword [ebp - 0x144]
movss dword [ebp - 0x158], xmm0
movss xmm0, dword [ebp - 0x130]
mulss xmm0, dword [ebp - 0x138]
movss dword [ebp - 0x130], xmm0
movss xmm0, dword [ebp - 0x158]
addss xmm0, dword [ebp - 0x144]
movss dword [ebp - 0x158], xmm0
movss xmm0, dword [ebp - 0x144]
mulss xmm0, dword [ebp - 0x150]
movss dword [ebp - 0x144], xmm0
movss xmm0, dword [ebp - 0x158]
subss xmm0, dword [ebp - 0x144]
movss dword [ebp - 0x158], xmm0
movss xmm0, dword [ebp - 0x138]
addss xmm0, dword [ebp - 0x140]
movss dword [ebp - 0x138], xmm0
movss xmm0, dword [ebp - 0x130]
divss xmm0, dword [ebp - 0x138]
movss dword [ebp - 0x130], xmm0
movss xmm0, dword [ebp - 0x130]
addss xmm0, dword [ebp - 0x138]
movss dword [ebp - 0x130], xmm0
movss xmm0, dword [ebp - 0x138]
addss xmm0, dword [ebp - 0x140]
movss dword [ebp - 0x138], xmm0
movss xmm0, dword [ebp - 0x138]
subss xmm0, dword [ebp - 0x140]
movss dword [ebp - 0x138], xmm0
movss xmm0, dword [ebp - 0x150]
mulss xmm0, dword [ebp - 0x130]
movss dword [ebp - 0x150], xmm0
movss xmm0, dword [ebp - 0x150]
comiss xmm0, dword [ebp - 0x158]
jbe 0x994ccb
movss xmm0, dword [ebp - 0x140]
subss xmm0, dword [ebp - 0x158]
movss dword [ebp - 0x140], xmm0
movss xmm0, dword [ebp - 0x130]
mulss xmm0, dword [ebp - 0x140]
movss dword [ebp - 0x130], xmm0
movss xmm0, dword [ebp - 0x130]
divss xmm0, dword [ebp - 0x140]
movss dword [ebp - 0x130], xmm0
movss xmm0, dword [ebp - 0x150]
divss xmm0, dword [ebp - 0x138]
movss dword [ebp - 0x150], xmm0
movss xmm0, dword [ebp - 0x130]
divss xmm0, dword [ebp - 0x140]
movss dword [ebp - 0x130], xmm0
movss xmm0, dword [ebp - 0x170]
divss xmm0, dword [ebp - 0x144]
movss dword [ebp - 0x170], xmm0
movss xmm0, dword [ebp - 0x150]
addss xmm0, dword [ebp - 0x138]
movss dword [ebp - 0x150], xmm0
jmp 0x994d73
movss xmm0, dword [ebp - 0x130]
mulss xmm0, dword [ebp - 0x138]
movss dword [ebp - 0x130], xmm0
movss xmm0, dword [ebp - 0x140]
subss xmm0, dword [ebp - 0x170]
movss dword [ebp - 0x140], xmm0
movss xmm0, dword [ebp - 0x140]
divss xmm0, dword [ebp - 0x170]
movss dword [ebp - 0x140], xmm0
movss xmm0, dword [ebp - 0x130]
mulss xmm0, dword [ebp - 0x138]
movss dword [ebp - 0x130], xmm0
movss xmm0, dword [ebp - 0x138]
addss xmm0, dword [ebp - 0x140]
movss dword [ebp - 0x138], xmm0
movss xmm0, dword [ebp - 0x144]
subss xmm0, dword [ebp - 0x150]
movss dword [ebp - 0x144], xmm0
movss xmm0, dword [ebp - 0x130]
addss xmm0, dword [ebp - 0x138]
movss dword [ebp - 0x130], xmm0
jmp 0x994ea6
movzx edx, byte [ebp - 0x124]
movzx eax, byte [ebp - 0x11e]
movzx ecx, byte [ebp + eax - 0x10c]
movzx eax, byte [ebp - 0x11d]
movzx eax, byte [ebp + eax - 0x10c]
add ecx, eax
and ecx, 0xff
movzx ecx, byte [ebp + ecx - 0x10c]
xor edx, ecx
movzx eax, byte [ebp - 0x11f]
movzx ecx, byte [ebp + eax - 0x10c]
movzx eax, byte [ebp - 0x120]
movzx eax, byte [ebp + eax - 0x10c]
add ecx, eax
movzx eax, byte [ebp - 0x123]
movzx eax, byte [ebp + eax - 0x10c]
add ecx, eax
and ecx, 0xff
movzx ecx, byte [ebp + ecx - 0x10c]
movzx eax, byte [ebp + ecx - 0x10c]
xor edx, eax
mov byte [ebp - 0x11f], dl
movss xmm0, dword [ebp - 0x138]
mulss xmm0, dword [ebp - 0x140]
movss dword [ebp - 0x138], xmm0
movss xmm0, dword [ebp - 0x140]
mulss xmm0, dword [ebp - 0x170]
movss dword [ebp - 0x140], xmm0
movss xmm0, dword [ebp - 0x138]
mulss xmm0, dword [ebp - 0x140]
movss dword [ebp - 0x138], xmm0
movss xmm0, dword [ebp - 0x170]
mulss xmm0, dword [ebp - 0x158]
movss dword [ebp - 0x170], xmm0
movss xmm0, dword [ebp - 0x150]
addss xmm0, dword [ebp - 0x130]
movss dword [ebp - 0x150], xmm0
movss xmm0, dword [ebp - 0x144]
mulss xmm0, dword [ebp - 0x150]
movss dword [ebp - 0x144], xmm0
movss xmm0, dword [ebp - 0x158]
mulss xmm0, dword [ebp - 0x144]
movss dword [ebp - 0x158], xmm0
mov cl, byte [ebp - 0x124]
mov byte [ebp - 0x120], cl
mov dl, byte [ebp - 0x11f]
mov byte [ebp - 0x129], dl
cmp dword [ebp - 0x128], 0
jbe 0x994eda
movsx ax, byte [ebp - 0x129]
mov ecx, dword [ebp - 0x128]
mov word [ebp + ecx*2 - 0xe], ax
mov edx, 2
imul eax, edx, 3
mov dword [ebp - 0x204], eax
cmp dword [ebp - 0x204], 8
jae 0x994ef3
jmp 0x994ef8
call fcn.009b6d77
xor ecx, ecx
mov edx, dword [ebp - 0x204]
mov word [ebp + edx - 0xc], cx
jmp 0x994f58
mov dword [ebp - 0x128], 0
jmp 0x994f22
mov eax, dword [ebp - 0x128]
add eax, 1
mov dword [ebp - 0x128], eax
cmp dword [ebp - 0x128], 4
jae 0x994f58
mov ecx, dword [ebp - 0x128]
shl ecx, 1
mov dword [ebp - 0x208], ecx
cmp dword [ebp - 0x208], 8
jae 0x994f44
jmp 0x994f49
call fcn.009b6d77
xor edx, edx
mov eax, dword [ebp - 0x208]
mov word [ebp + eax - 0xc], dx
jmp 0x994f13
lea ecx, [ebp - 0xc]
push ecx
push 0xa04e10
call fcn.009b821b
add esp, 8
test eax, eax
jne 0x994f74
xor eax, eax
jmp 0x9950b7
push 0
mov edx, dword [ebp - 0x238]
push edx
push 0
push 0
push 0x4b
push 0x118
push 0x64
push 0x64
push 0x10ca0000
mov eax, dword [ebp - 0x1f4]
push eax
mov ecx, dword [ebp - 0x224]
push ecx
push 0
call dword [sym.imp.USER32.dll_CreateWindowExW]
mov dword [0xa06280], eax
cmp dword [0xa06280], 0
jne 0x994fbf
mov eax, 1
jmp 0x9950b7
lea edx, [ebp - 0x11c]
push edx
mov eax, dword [0xa06280]
push eax
call dword [sym.imp.USER32.dll_GetWindowRect]
push 0
call dword [sym.imp.USER32.dll_GetSystemMetrics]
sub eax, dword [ebp - 0x114]
cdq
sub eax, edx
sar eax, 1
mov dword [ebp - 0x218], eax
push 1
call dword [sym.imp.USER32.dll_GetSystemMetrics]
sub eax, dword [ebp - 0x110]
cdq
sub eax, edx
sar eax, 1
mov dword [ebp - 0x214], eax
push 5
push 0
push 0
mov ecx, dword [ebp - 0x214]
push ecx
mov edx, dword [ebp - 0x218]
push edx
push 0
mov eax, dword [0xa06280]
push eax
call dword [sym.imp.USER32.dll_SetWindowPos]
mov ecx, dword [ebp + 0x14]
push ecx
mov edx, dword [0xa06280]
push edx
call dword [sym.imp.USER32.dll_ShowWindow]
mov eax, dword [0xa06280]
push eax
call dword [sym.imp.USER32.dll_UpdateWindow]
push 0
push 0
push 0
push 0x98dd60
push 0
push 0
call dword [sym.imp.KERNEL32.dll_CreateThread]
mov dword [ebp - 0x254], eax
push 0
push 0
push 0
push 0x993020
push 0
push 0
call dword [sym.imp.KERNEL32.dll_CreateThread]
mov dword [ebp - 0x258], eax
push 0
push 0
push 0
lea ecx, [ebp - 0x278]
push ecx
call dword [sym.imp.USER32.dll_GetMessageW]
test eax, eax
je 0x9950ac
lea edx, [ebp - 0x278]
push edx
call dword [sym.imp.USER32.dll_TranslateMessage]
lea eax, [ebp - 0x278]
push eax
call dword [sym.imp.USER32.dll_DispatchMessageW]
jmp 0x995079
call fcn.004010a0
mov eax, dword [ebp - 0x270]
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.009b6e52
mov esp, ebp
pop ebp
ret 0x10