Function at 0x98ee2f
Capabilities:
Create thread
Hide graphical window

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x298
mov eax, dword [0x9f2274]
xor eax, ebp
mov dword [ebp - 4], eax
push ebx
push esi
push edi
push 0x9e7f78
call fcn.009b13c0
add esp, 4
mov dword [ebp - 0x204], eax
mov dword [ebp - 0x264], 0x30
mov dword [ebp - 0x260], 3
mov dword [ebp - 0x25c], 0
mov dword [ebp - 0x258], 0
mov dword [ebp - 0x254], 0
push 0
call dword [sym.imp.KERNEL32.dll_GetModuleHandleW]
mov dword [ebp - 0x250], eax
push 0x101
mov eax, dword [ebp + 8]
push eax
call dword [sym.imp.USER32.dll_LoadIconW]
mov dword [ebp - 0x24c], eax
mov dword [ebp - 0x248], 0
mov dword [ebp - 0x244], 0
mov dword [ebp - 0x240], 0
mov ecx, dword [ebp - 0x204]
mov dword [ebp - 0x23c], ecx
mov dword [ebp - 0x238], 0
push 3
call fcn.00401000
add esp, 4
mov edx, dword [ebp + 0x10]
mov dword [ebp - 0x20c], edx
mov dword [ebp - 0x1f8], 0x9ff610
mov eax, dword [ebp - 0x1f8]
mov dword [ebp - 0x268], eax
mov ecx, dword [ebp - 0x20c]
mov dx, word [ecx]
mov word [ebp - 0x1ca], dx
mov eax, dword [ebp - 0x1f8]
mov cx, word [ebp - 0x1ca]
mov word [eax], cx
mov edx, dword [ebp - 0x20c]
add edx, 2
mov dword [ebp - 0x20c], edx
mov eax, dword [ebp - 0x1f8]
add eax, 2
mov dword [ebp - 0x1f8], eax
cmp word [ebp - 0x1ca], 0
jne 0x98ea3b
mov dword [ebp - 0x25c], 0x98a850
lea ecx, [ebp - 0x264]
push ecx
call dword [sym.imp.USER32.dll_RegisterClassExW]
movzx edx, ax
test edx, edx
jne 0x98eaa8
xor eax, eax
jmp 0x9907f3
mov eax, dword [ebp + 8]
mov dword [0xa00a84], eax
call fcn.00469f40
mov ecx, dword [ebp - 0x204]
push ecx
mov edx, dword [ebp - 0x204]
push edx
call dword [0xa00c38]
test eax, eax
je 0x9906b0
xorps xmm0, xmm0
movsd qword [ebp - 0x1dc], xmm0
xorps xmm0, xmm0
movsd qword [ebp - 0x1c8], xmm0
mov dword [ebp - 0x128], 0
mov dword [ebp - 0x1ac], 0
mov dword [ebp - 0x1fc], 0
mov dword [ebp - 0x1d0], 1
mov dword [ebp - 0x16c], 0
mov dword [ebp - 0x208], 0
mov dword [ebp - 0x184], 0
mov dword [ebp - 0x188], 0
mov dword [ebp - 0x178], 0
mov dword [ebp - 0x158], 0
mov dword [ebp - 0x198], 0
mov dword [ebp - 0x15c], 0
mov dword [ebp - 0x160], 0
mov dword [ebp - 0x164], 0
mov dword [ebp - 0x168], 0
mov dword [ebp - 0x17c], 0
mov dword [ebp - 0x180], 0
mov dword [ebp - 0x18c], 0
mov dword [ebp - 0x26c], 0
mov byte [ebp - 0x11d], 0
mov byte [ebp - 0x11e], 0
mov byte [ebp - 0x122], 0
mov byte [ebp - 0x11f], 0
mov byte [ebp - 0x120], 0
mov byte [ebp - 0x121], 0
mov byte [ebp - 0x145], 0
mov byte [ebp - 0x123], 0
mov byte [ebp - 0x124], 0
mov byte [ebp - 0x129], 0
xorps xmm0, xmm0
movsd qword [ebp - 0x1dc], xmm0
xorps xmm0, xmm0
movsd qword [ebp - 0x1c8], xmm0
xorps xmm0, xmm0
movsd qword [ebp - 0x1c8], xmm0
jmp 0x98ec26
movsd xmm0, qword [ebp - 0x1c8]
addsd xmm0, qword [0x9d3050]
movsd qword [ebp - 0x1c8], xmm0
movsd xmm0, qword [0x9d35b8]
comisd xmm0, xmmword [ebp - 0x1c8]
jbe 0x98ecd7
movsd xmm0, qword [0x9d31a0]
mulsd xmm0, qword [ebp - 0x1c8]
mulsd xmm0, qword [ebp - 0x1c8]
movsd xmm1, qword [ebp - 0x1c8]
mulsd xmm1, qword [ebp - 0x1c8]
subsd xmm0, xmm1
movsd xmm1, qword [0x9d30a8]
mulsd xmm1, qword [ebp - 0x1c8]
mulsd xmm1, qword [ebp - 0x1c8]
addsd xmm1, qword [0x9d30f0]
divsd xmm0, xmm1
addsd xmm0, qword [ebp - 0x1dc]
movsd qword [ebp - 0x1dc], xmm0
movsd xmm0, qword [ebp - 0x1dc]
comisd xmm0, xmmword [0x9d3170]
jbe 0x98ecd2
movsd xmm0, qword [0x9d3020]
mulsd xmm0, qword [ebp - 0x1c8]
movsd xmm1, qword [ebp - 0x1dc]
subsd xmm1, xmm0
movsd qword [ebp - 0x1dc], xmm1
jmp 0x98ec0e
xorps xmm0, xmm0
comisd xmm0, xmmword [ebp - 0x1dc]
jbe 0x98ed0f
adc esp, dword [edi - 0x5fea56f0]
or ebp, dword [eax + 0x497e463c]
jge 0x98ed64
insd dword es:[edi], dx
daa
xor dh, byte [esp + edi*2 + 0x4a]
pop esp
pop edi
cmp ebp, dword fs:[ebx + 0x30]
xor byte [ebx + edi + 0x5f], dh
cmp eax, 0x55444d67
xor byte [ecx + ebp*8 - 0x7b], dl
sbb dword [eax], eax
add bh, al
test esp, ebx
std
invalid
mov dword [ebp - 0x224], 0x98ece4
mov dword [ebp - 0x228], 0x98ecec
mov eax, dword [ebp - 0x224]
mov dword [ebp - 0x1b4], eax
mov ecx, dword [ebp - 0x228]
mov dword [ebp - 0x22c], ecx
mov byte [ebp - 0x145], 0x22
mov dword [ebp - 0x128], 0
mov dword [ebp - 0x1ac], 0
mov dword [ebp - 0x128], 0
jmp 0x98ed71
mov edx, dword [ebp - 0x128]
add edx, 1
mov dword [ebp - 0x128], edx
fdivr st(6)
invalid
cmp dword [ebp - 0x128], 0x100
jae 0x98ed92
mov eax, dword [ebp - 0x128]
mov cl, byte [ebp - 0x128]
mov byte [ebp + eax - 0x10c], cl
jmp 0x98ed62
mov dword [ebp - 0x1ac], 0
mov byte [ebp - 0x121], 0
mov dword [ebp - 0x128], 0xff
jmp 0x98edbe
mov edx, dword [ebp - 0x128]
sub edx, 1
mov dword [ebp - 0x128], edx
cmp dword [ebp - 0x128], 0
jbe 0x98f038
mov dword [ebp - 0x1fc], 0
mov dword [ebp - 0x1d0], 1
mov dword [ebp - 0x16c], 0
mov eax, dword [ebp - 0x1d0]
cmp eax, dword [ebp - 0x128]
jae 0x98ee09
mov ecx, dword [ebp - 0x1d0]
lea edx, [ecx + ecx + 1]
mov dword [ebp - 0x1d0], edx
jmp 0x98ede9
mov eax, dword [ebp - 0x1ac]
mov dword [ebp - 0x218], eax
cmp dword [ebp - 0x218], 3
ja case.default.0x98ee28
mov ecx, dword [ebp - 0x218]
jmp dword [ecx*4 + 0x990808]
movzx edx, byte [ebp - 0x121]
movzx ebx, byte [ebp + edx - 0x10c]
movsd xmm0, qword [ebp - 0x1dc]
call fcn.009b1700
and eax, 0xff
add ebx, eax
mov byte [ebp - 0x121], bl
jmp 0x98ef11
movzx eax, byte [ebp - 0x121]
movzx ebx, byte [ebp + eax - 0x10c]
movsd xmm0, qword [ebp - 0x1dc]
call fcn.009b1700
shr eax, 8
and eax, 0xff
add ebx, eax
mov byte [ebp - 0x121], bl
jmp 0x98ef11
movzx ecx, byte [ebp - 0x121]
movzx ebx, byte [ebp + ecx - 0x10c]
movsd xmm0, qword [ebp - 0x1dc]
call fcn.009b1700
shr eax, 0x10
and eax, 0xff
add ebx, eax
mov byte [ebp - 0x121], bl
jmp 0x98ef11
movzx edx, byte [ebp - 0x121]
movzx ebx, byte [ebp + edx - 0x10c]
movsd xmm0, qword [ebp - 0x1dc]
call fcn.009b1700
shr eax, 0x18
and eax, 0xff
add ebx, eax
mov byte [ebp - 0x121], bl
jmp 0x98ef11
movzx eax, byte [ebp - 0x121]
movzx ecx, byte [ebp + eax - 0x10c]
mov edx, dword [ebp - 0x22c]
add edx, dword [ebp - 0x1ac]
movzx eax, byte [edx - 4]
add ecx, eax
mov byte [ebp - 0x121], cl
mov ecx, dword [ebp - 0x1ac]
add ecx, 1
mov dword [ebp - 0x1ac], ecx
movzx edx, byte [ebp - 0x145]
cmp dword [ebp - 0x1ac], edx
jb 0x98ef4f
mov dword [ebp - 0x1ac], 0
movzx eax, byte [ebp - 0x145]
movzx ecx, byte [ebp - 0x121]
add ecx, eax
mov byte [ebp - 0x121], cl
movzx edx, byte [ebp - 0x121]
and edx, dword [ebp - 0x1d0]
mov dword [ebp - 0x16c], edx
mov eax, dword [ebp - 0x1fc]
add eax, 1
mov dword [ebp - 0x1fc], eax
cmp dword [ebp - 0x1fc], 0xb
jbe 0x98ef8e
mov eax, dword [ebp - 0x16c]
xor edx, edx
div dword [ebp - 0x128]
mov dword [ebp - 0x16c], edx
mov ecx, dword [ebp - 0x16c]
cmp ecx, dword [ebp - 0x128]
ja 0x98ee09
mov edx, dword [ebp - 0x128]
cmp edx, dword [ebp - 0x16c]
je 0x98f033
mov eax, dword [ebp - 0x16c]
movzx ecx, byte [ebp + eax - 0x10c]
mov edx, dword [ebp - 0x128]
movzx eax, byte [ebp + edx - 0x10c]
xor eax, ecx
mov ecx, dword [ebp - 0x128]
mov byte [ebp + ecx - 0x10c], al
mov edx, dword [ebp - 0x128]
movzx eax, byte [ebp + edx - 0x10c]
mov ecx, dword [ebp - 0x16c]
movzx edx, byte [ebp + ecx - 0x10c]
xor edx, eax
mov eax, dword [ebp - 0x16c]
mov byte [ebp + eax - 0x10c], dl
mov ecx, dword [ebp - 0x16c]
movzx edx, byte [ebp + ecx - 0x10c]
mov eax, dword [ebp - 0x128]
movzx ecx, byte [ebp + eax - 0x10c]
xor ecx, edx
mov edx, dword [ebp - 0x128]
mov byte [ebp + edx - 0x10c], cl
jmp 0x98edaf
mov eax, 1
shl eax, 0
mov cl, byte [ebp + eax - 0x10c]
mov byte [ebp - 0x11d], cl
mov edx, 1
imul eax, edx, 3
mov cl, byte [ebp + eax - 0x10c]
mov byte [ebp - 0x11e], cl
mov edx, 1
imul eax, edx, 5
mov cl, byte [ebp + eax - 0x10c]
mov byte [ebp - 0x122], cl
mov edx, 1
imul eax, edx, 7
mov cl, byte [ebp + eax - 0x10c]
mov byte [ebp - 0x11f], cl
movzx edx, byte [ebp - 0x121]
mov al, byte [ebp + edx - 0x10c]
mov byte [ebp - 0x120], al
mov dword [ebp - 0x208], 8
cmp dword [ebp - 0x208], 2
jle 0x990643
mov ecx, dword [ebp - 0x208]
and ecx, 1
jne 0x990643
mov dword [ebp - 0x128], 0
mov dword [ebp - 0x184], 0
mov edx, dword [ebp - 0x184]
add edx, 1
mov dword [ebp - 0x184], edx
mov dword [ebp - 0x188], 0
mov eax, dword [ebp - 0x128]
shl eax, 1
mov dword [ebp - 0x188], eax
mov dword [ebp - 0x178], 0
mov ecx, dword [ebp - 0x1b4]
add ecx, dword [ebp - 0x188]
movzx edx, byte [ecx]
add edx, dword [ebp - 0x178]
mov dword [ebp - 0x178], edx
mov dword [ebp - 0x158], 0
mov eax, dword [ebp - 0x158]
add eax, 7
mov dword [ebp - 0x158], eax
mov dword [ebp - 0x198], 0
mov ecx, dword [ebp - 0x128]
lea edx, [ecx + ecx + 1]
mov dword [ebp - 0x198], edx
mov dword [ebp - 0x15c], 0
mov eax, dword [ebp - 0x1b4]
add eax, dword [ebp - 0x198]
movzx ecx, byte [eax]
add ecx, dword [ebp - 0x15c]
mov dword [ebp - 0x15c], ecx
mov dword [ebp - 0x160], 0
mov edx, dword [ebp - 0x160]
add edx, 0x9c
mov dword [ebp - 0x160], edx
mov dword [ebp - 0x164], 0
mov eax, dword [ebp - 0x178]
sub eax, dword [ebp - 0x158]
add eax, dword [ebp - 0x164]
mov dword [ebp - 0x164], eax
mov dword [ebp - 0x168], 0
mov ecx, dword [ebp - 0x15c]
sub ecx, dword [ebp - 0x160]
add ecx, dword [ebp - 0x168]
mov dword [ebp - 0x168], ecx
mov dword [ebp - 0x17c], 0
mov edx, dword [ebp - 0x164]
shl edx, 4
mov dword [ebp - 0x17c], edx
mov dword [ebp - 0x180], 0
mov eax, dword [ebp - 0x168]
mov dword [ebp - 0x180], eax
mov dword [ebp - 0x18c], 0
movsd xmm0, qword [0x9d3510]
movsd qword [ebp - 0x214], xmm0
movsd xmm0, qword [0x9d34a0]
movsd qword [ebp - 0x1ec], xmm0
movsd xmm0, qword [0x9d33e0]
movsd qword [ebp - 0x278], xmm0
movsd xmm0, qword [0x9d3348]
movsd qword [ebp - 0x1f4], xmm0
movsd xmm0, qword [0x9d32a0]
movsd qword [ebp - 0x1e4], xmm0
movsd xmm0, qword [0x9d31f8]
movsd qword [ebp - 0x1a8], xmm0
movsd xmm0, qword [ebp - 0x1ec]
mulsd xmm0, qword [ebp - 0x1a8]
movsd qword [ebp - 0x1ec], xmm0
movsd xmm0, qword [ebp - 0x1f4]
subsd xmm0, qword [ebp - 0x1a8]
movsd qword [ebp - 0x1f4], xmm0
movsd xmm0, qword [ebp - 0x1ec]
subsd xmm0, qword [ebp - 0x1a8]
movsd qword [ebp - 0x1ec], xmm0
movsd xmm0, qword [ebp - 0x1ec]
addsd xmm0, qword [ebp - 0x1a8]
movsd qword [ebp - 0x1ec], xmm0
movsd xmm0, qword [ebp - 0x1f4]
mulsd xmm0, qword [ebp - 0x1a8]
movsd qword [ebp - 0x1f4], xmm0
movsd xmm0, qword [ebp - 0x1e4]
mulsd xmm0, qword [ebp - 0x1a8]
movsd qword [ebp - 0x1e4], xmm0
movsd xmm0, qword [ebp - 0x1a8]
comisd xmm0, xmmword [ebp - 0x1ec]
jbe 0x98f3b2
movsd xmm0, qword [ebp - 0x214]
addsd xmm0, qword [ebp - 0x1ec]
movsd qword [ebp - 0x214], xmm0
movsd xmm0, qword [ebp - 0x1a8]
mulsd xmm0, qword [ebp - 0x214]
movsd qword [ebp - 0x1a8], xmm0
movsd xmm0, qword [ebp - 0x1a8]
addsd xmm0, qword [ebp - 0x214]
movsd qword [ebp - 0x1a8], xmm0
movsd xmm0, qword [ebp - 0x1e4]
divsd xmm0, qword [ebp - 0x1a8]
movsd qword [ebp - 0x1e4], xmm0
movsd xmm0, qword [ebp - 0x1a8]
addsd xmm0, qword [ebp - 0x214]
movsd qword [ebp - 0x1a8], xmm0
movsd xmm0, qword [ebp - 0x1f4]
mulsd xmm0, qword [ebp - 0x1e4]
movsd qword [ebp - 0x1f4], xmm0
jmp 0x98f454
movsd xmm0, qword [ebp - 0x1ec]
subsd xmm0, qword [ebp - 0x278]
movsd qword [ebp - 0x1ec], xmm0
movsd xmm0, qword [ebp - 0x1f4]
addsd xmm0, qword [ebp - 0x1e4]
movsd qword [ebp - 0x1f4], xmm0
movsd xmm0, qword [ebp - 0x1f4]
mulsd xmm0, qword [ebp - 0x1e4]
movsd qword [ebp - 0x1f4], xmm0
movsd xmm0, qword [ebp - 0x1e4]
addsd xmm0, qword [ebp - 0x1a8]
movsd qword [ebp - 0x1e4], xmm0
movsd xmm0, qword [ebp - 0x1e4]
mulsd xmm0, qword [ebp - 0x1a8]
movsd qword [ebp - 0x1e4], xmm0
mov ecx, dword [ebp - 0x17c]
or ecx, dword [ebp - 0x180]
mov dword [ebp - 0x18c], ecx
movsd xmm0, qword [ebp - 0x1a8]
subsd xmm0, qword [ebp - 0x214]
movsd qword [ebp - 0x1a8], xmm0
mov byte [ebp - 0x123], 0
mov dl, byte [ebp - 0x18c]
mov byte [ebp - 0x123], dl
mov byte [ebp - 0x124], 0
movzx eax, byte [ebp - 0x120]
mov cl, byte [ebp + eax - 0x10c]
mov byte [ebp - 0x124], cl
movzx edx, byte [ebp - 0x11d]
movzx eax, byte [ebp + edx - 0x10c]
movzx ecx, byte [ebp - 0x11e]
add ecx, eax
mov byte [ebp - 0x11e], cl
mov dl, byte [ebp - 0x11d]
add dl, 1
mov byte [ebp - 0x11d], dl
movzx eax, byte [ebp - 0x11e]
movzx ecx, byte [ebp - 0x120]
mov dl, byte [ebp + eax - 0x10c]
mov byte [ebp + ecx - 0x10c], dl
movzx eax, byte [ebp - 0x11f]
movzx ecx, byte [ebp - 0x11e]
mov dl, byte [ebp + eax - 0x10c]
mov byte [ebp + ecx - 0x10c], dl
movzx eax, byte [ebp - 0x11d]
movzx ecx, byte [ebp - 0x11f]
mov dl, byte [ebp + eax - 0x10c]
mov byte [ebp + ecx - 0x10c], dl
movzx eax, byte [ebp - 0x11d]
mov cl, byte [ebp - 0x124]
mov byte [ebp + eax - 0x10c], cl
movzx edx, byte [ebp - 0x124]
movzx eax, byte [ebp + edx - 0x10c]
movzx ecx, byte [ebp - 0x122]
add ecx, eax
mov byte [ebp - 0x122], cl
movzx edx, byte [ebp - 0x123]
movzx eax, byte [ebp - 0x11e]
movzx ecx, byte [ebp + eax - 0x10c]
movzx eax, byte [ebp - 0x11d]
movzx eax, byte [ebp + eax - 0x10c]
add ecx, eax
and ecx, 0xff
movzx ecx, byte [ebp + ecx - 0x10c]
xor edx, ecx
movzx eax, byte [ebp - 0x11f]
movzx ecx, byte [ebp + eax - 0x10c]
movzx eax, byte [ebp - 0x120]
movzx eax, byte [ebp + eax - 0x10c]
add ecx, eax
movzx eax, byte [ebp - 0x122]
movzx eax, byte [ebp + eax - 0x10c]
add ecx, eax
and ecx, 0xff
movzx ecx, byte [ebp + ecx - 0x10c]
movzx eax, byte [ebp + ecx - 0x10c]
xor edx, eax
mov byte [ebp - 0x11f], dl
mov cl, byte [ebp - 0x123]
mov byte [ebp - 0x120], cl
mov dl, byte [ebp - 0x11f]
mov byte [ebp - 0x129], dl
cmp dword [ebp - 0x128], 0
jbe 0x98f5ef
movsx ax, byte [ebp - 0x129]
mov ecx, dword [ebp - 0x128]
mov word [ebp + ecx*2 - 0xe], ax
mov edx, dword [ebp - 0x128]
add edx, 1
mov dword [ebp - 0x128], edx
mov eax, dword [ebp - 0x184]
add eax, 1
mov dword [ebp - 0x184], eax
mov ecx, dword [ebp - 0x128]
shl ecx, 1
mov dword [ebp - 0x188], ecx
mov edx, dword [ebp - 0x1b4]
add edx, dword [ebp - 0x188]
movzx eax, byte [edx]
mov dword [ebp - 0x178], eax
mov dword [ebp - 0x158], 7
mov ecx, dword [ebp - 0x128]
lea edx, [ecx + ecx + 1]
mov dword [ebp - 0x198], edx
mov eax, dword [ebp - 0x1b4]
add eax, dword [ebp - 0x198]
movzx ecx, byte [eax]
mov dword [ebp - 0x15c], ecx
mov dword [ebp - 0x160], 0x9c
mov edx, dword [ebp - 0x178]
sub edx, dword [ebp - 0x158]
mov dword [ebp - 0x164], edx
mov eax, dword [ebp - 0x15c]
sub eax, dword [ebp - 0x160]
mov dword [ebp - 0x168], eax
mov ecx, dword [ebp - 0x164]
shl ecx, 4
mov dword [ebp - 0x17c], ecx
mov edx, dword [ebp - 0x168]
mov dword [ebp - 0x180], edx
mov eax, dword [ebp - 0x17c]
or eax, dword [ebp - 0x180]
mov dword [ebp - 0x18c], eax
mov cl, byte [ebp - 0x18c]
mov byte [ebp - 0x123], cl
movzx edx, byte [ebp - 0x120]
mov al, byte [ebp + edx - 0x10c]
mov byte [ebp - 0x124], al
movzx ecx, byte [ebp - 0x11d]
movzx edx, byte [ebp + ecx - 0x10c]
movzx eax, byte [ebp - 0x11e]
add eax, edx
mov byte [ebp - 0x11e], al
mov cl, byte [ebp - 0x11d]
add cl, 1
mov byte [ebp - 0x11d], cl
movzx edx, byte [ebp - 0x11e]
movzx eax, byte [ebp - 0x120]
mov cl, byte [ebp + edx - 0x10c]
mov byte [ebp + eax - 0x10c], cl
movzx edx, byte [ebp - 0x11f]
movzx eax, byte [ebp - 0x11e]
mov cl, byte [ebp + edx - 0x10c]
mov byte [ebp + eax - 0x10c], cl
movzx edx, byte [ebp - 0x11d]
movzx eax, byte [ebp - 0x11f]
mov cl, byte [ebp + edx - 0x10c]
mov byte [ebp + eax - 0x10c], cl
movzx edx, byte [ebp - 0x11d]
mov al, byte [ebp - 0x124]
mov byte [ebp + edx - 0x10c], al
movsd xmm0, qword [0x9d3540]
movsd qword [ebp - 0x1bc], xmm0
movsd xmm0, qword [0x9d3480]
movsd qword [ebp - 0x194], xmm0
movsd xmm0, qword [0x9d3370]
movsd qword [ebp - 0x1a0], xmm0
movsd xmm0, qword [0x9d3270]
movsd qword [ebp - 0x174], xmm0
movsd xmm0, qword [ebp - 0x1a0]
mulsd xmm0, qword [ebp - 0x174]
movsd qword [ebp - 0x1a0], xmm0
movsd xmm0, qword [ebp - 0x1bc]
mulsd xmm0, qword [ebp - 0x174]
movsd qword [ebp - 0x1bc], xmm0
movsd xmm0, qword [ebp - 0x1a0]
subsd xmm0, qword [ebp - 0x174]
movsd qword [ebp - 0x1a0], xmm0
movsd xmm0, qword [ebp - 0x194]
subsd xmm0, qword [ebp - 0x174]
movsd qword [ebp - 0x194], xmm0
movsd xmm0, qword [ebp - 0x174]
comisd xmm0, xmmword [ebp - 0x1bc]
jbe 0x98f9bb
movsd xmm0, qword [ebp - 0x194]
subsd xmm0, qword [ebp - 0x1a0]
movsd qword [ebp - 0x194], xmm0
movsd xmm0, qword [ebp - 0x1a0]
addsd xmm0, qword [ebp - 0x174]
movsd qword [ebp - 0x1a0], xmm0
movsd xmm0, qword [ebp - 0x174]
subsd xmm0, qword [ebp - 0x1bc]
movsd qword [ebp - 0x174], xmm0
movsd xmm0, qword [ebp - 0x174]
mulsd xmm0, qword [ebp - 0x1bc]
movsd qword [ebp - 0x174], xmm0
movsd xmm0, qword [ebp - 0x1bc]
addsd xmm0, qword [ebp - 0x194]
movsd qword [ebp - 0x1bc], xmm0
movsd xmm0, qword [ebp - 0x174]
mulsd xmm0, qword [ebp - 0x1bc]
movsd qword [ebp - 0x174], xmm0
movsd xmm0, qword [ebp - 0x1bc]
subsd xmm0, qword [ebp - 0x194]
movsd qword [ebp - 0x1bc], xmm0
movsd xmm0, qword [ebp - 0x194]
divsd xmm0, qword [ebp - 0x1a0]
movsd qword [ebp - 0x194], xmm0
movsd xmm0, qword [ebp - 0x174]
comisd xmm0, xmmword [ebp - 0x194]
jbe 0x98f959
movsd xmm0, qword [ebp - 0x1a0]
mulsd xmm0, qword [ebp - 0x1bc]
movsd qword [ebp - 0x1a0], xmm0
movsd xmm0, qword [ebp - 0x194]
divsd xmm0, qword [ebp - 0x174]
movsd qword [ebp - 0x194], xmm0
movsd xmm0, qword [ebp - 0x194]
mulsd xmm0, qword [ebp - 0x174]
movsd qword [ebp - 0x194], xmm0
movsd xmm0, qword [ebp - 0x1a0]
divsd xmm0, qword [ebp - 0x1bc]
movsd qword [ebp - 0x1a0], xmm0
jmp 0x98f9b9
movsd xmm0, qword [ebp - 0x174]
divsd xmm0, qword [ebp - 0x194]
movsd qword [ebp - 0x174], xmm0
movsd xmm0, qword [ebp - 0x174]
divsd xmm0, qword [ebp - 0x194]
movsd qword [ebp - 0x174], xmm0
movsd xmm0, qword [ebp - 0x1a0]
mulsd xmm0, qword [ebp - 0x1bc]
movsd qword [ebp - 0x1a0], xmm0
movsd xmm0, qword [ebp - 0x194]
subsd xmm0, qword [ebp - 0x174]
movsd qword [ebp - 0x194], xmm0
jmp 0x98fa39
movsd xmm0, qword [ebp - 0x1a0]
addsd xmm0, qword [ebp - 0x1bc]
movsd qword [ebp - 0x1a0], xmm0
movsd xmm0, qword [ebp - 0x1a0]
addsd xmm0, qword [ebp - 0x1bc]
movsd qword [ebp - 0x1a0], xmm0
movsd xmm0, qword [ebp - 0x1bc]
addsd xmm0, qword [ebp - 0x1a0]
movsd qword [ebp - 0x1bc], xmm0
movzx ecx, byte [ebp - 0x124]
movzx edx, byte [ebp + ecx - 0x10c]
movzx eax, byte [ebp - 0x122]
add eax, edx
mov byte [ebp - 0x122], al
movsd xmm0, qword [ebp - 0x194]
subsd xmm0, qword [ebp - 0x174]
movsd qword [ebp - 0x194], xmm0
movzx ecx, byte [ebp - 0x123]
movzx edx, byte [ebp - 0x11e]
movzx eax, byte [ebp + edx - 0x10c]
movzx edx, byte [ebp - 0x11d]
movzx edx, byte [ebp + edx - 0x10c]
add eax, edx
and eax, 0xff
movzx eax, byte [ebp + eax - 0x10c]
xor ecx, eax
movzx edx, byte [ebp - 0x11f]
movzx eax, byte [ebp + edx - 0x10c]
movzx edx, byte [ebp - 0x120]
movzx edx, byte [ebp + edx - 0x10c]
add eax, edx
movzx edx, byte [ebp - 0x122]
movzx edx, byte [ebp + edx - 0x10c]
add eax, edx
and eax, 0xff
movzx eax, byte [ebp + eax - 0x10c]
movzx edx, byte [ebp + eax - 0x10c]
xor ecx, edx
mov byte [ebp - 0x11f], cl
mov al, byte [ebp - 0x123]
mov byte [ebp - 0x120], al
mov cl, byte [ebp - 0x11f]
mov byte [ebp - 0x129], cl
cmp dword [ebp - 0x128], 0
jbe 0x98faf1
movsx dx, byte [ebp - 0x129]
mov eax, dword [ebp - 0x128]
mov word [ebp + eax*2 - 0xe], dx
mov ecx, dword [ebp - 0x128]
add ecx, 1
mov dword [ebp - 0x128], ecx
mov edx, dword [ebp - 0x184]
add edx, 1
mov dword [ebp - 0x184], edx
mov eax, dword [ebp - 0x128]
shl eax, 1
mov dword [ebp - 0x188], eax
mov ecx, dword [ebp - 0x1b4]
add ecx, dword [ebp - 0x188]
movzx edx, byte [ecx]
mov dword [ebp - 0x178], edx
mov dword [ebp - 0x158], 7
mov eax, dword [ebp - 0x128]
lea ecx, [eax + eax + 1]
mov dword [ebp - 0x198], ecx
mov edx, dword [ebp - 0x1b4]
add edx, dword [ebp - 0x198]
movzx eax, byte [edx]
mov dword [ebp - 0x15c], eax
mov dword [ebp - 0x160], 0x9c
mov ecx, dword [ebp - 0x178]
sub ecx, dword [ebp - 0x158]
mov dword [ebp - 0x164], ecx
mov edx, dword [ebp - 0x15c]
sub edx, dword [ebp - 0x160]
mov dword [ebp - 0x168], edx
mov eax, dword [ebp - 0x164]
shl eax, 4
mov dword [ebp - 0x17c], eax
mov ecx, dword [ebp - 0x168]
mov dword [ebp - 0x180], ecx
mov edx, dword [ebp - 0x17c]
or edx, dword [ebp - 0x180]
mov dword [ebp - 0x18c], edx
mov al, byte [ebp - 0x18c]
mov byte [ebp - 0x123], al
movzx ecx, byte [ebp - 0x120]
mov dl, byte [ebp + ecx - 0x10c]
mov byte [ebp - 0x124], dl
movss xmm0, dword [0x9d3734]
movss dword [ebp - 0x14c], xmm0
movss xmm0, dword [0x9d3708]
movss dword [ebp - 0x1d4], xmm0
movss xmm0, dword [0x9d36d4]
movss dword [ebp - 0x1b0], xmm0
movss xmm0, dword [0x9d36a4]
movss dword [ebp - 0x200], xmm0
movss xmm0, dword [0x9d3670]
movss dword [ebp - 0x1c0], xmm0
movss xmm0, dword [0x9d3644]
movss dword [ebp - 0x13c], xmm0
movss xmm0, dword [0x9d3610]
movss dword [ebp - 0x154], xmm0
movss xmm0, dword [ebp - 0x13c]
mulss xmm0, dword [ebp - 0x154]
movss dword [ebp - 0x13c], xmm0
movss xmm0, dword [ebp - 0x1b0]
mulss xmm0, dword [ebp - 0x154]
movss dword [ebp - 0x1b0], xmm0
movss xmm0, dword [ebp - 0x200]
mulss xmm0, dword [ebp - 0x154]
movss dword [ebp - 0x200], xmm0
movss xmm0, dword [ebp - 0x1c0]
mulss xmm0, dword [ebp - 0x154]
movss dword [ebp - 0x1c0], xmm0
movss xmm0, dword [ebp - 0x200]
subss xmm0, dword [ebp - 0x154]
movss dword [ebp - 0x200], xmm0
movss xmm0, dword [ebp - 0x13c]
mulss xmm0, dword [ebp - 0x154]
movss dword [ebp - 0x13c], xmm0
movss xmm0, dword [ebp - 0x1b0]
subss xmm0, dword [ebp - 0x154]
movss dword [ebp - 0x1b0], xmm0
movss xmm0, dword [ebp - 0x13c]
comiss xmm0, dword [ebp - 0x154]
jbe 0x98fde2
movzx eax, byte [ebp - 0x11d]
movzx ecx, byte [ebp + eax - 0x10c]
movzx edx, byte [ebp - 0x11e]
add edx, ecx
mov byte [ebp - 0x11e], dl
mov al, byte [ebp - 0x11d]
add al, 1
mov byte [ebp - 0x11d], al
movss xmm0, dword [ebp - 0x14c]
subss xmm0, dword [ebp - 0x1b0]
movss dword [ebp - 0x14c], xmm0
movss xmm0, dword [ebp - 0x1c0]
addss xmm0, dword [ebp - 0x154]
movss dword [ebp - 0x1c0], xmm0
movss xmm0, dword [ebp - 0x13c]
addss xmm0, dword [ebp - 0x14c]
movss dword [ebp - 0x13c], xmm0
movss xmm0, dword [ebp - 0x13c]
addss xmm0, dword [ebp - 0x14c]
movss dword [ebp - 0x13c], xmm0
movss xmm0, dword [ebp - 0x13c]
addss xmm0, dword [ebp - 0x14c]
movss dword [ebp - 0x13c], xmm0
movss xmm0, dword [ebp - 0x14c]
addss xmm0, dword [ebp - 0x1b0]
movss dword [ebp - 0x14c], xmm0
movss xmm0, dword [ebp - 0x14c]
subss xmm0, dword [ebp - 0x1b0]
movss dword [ebp - 0x14c], xmm0
jmp 0x98fe8a
movss xmm0, dword [ebp - 0x13c]
addss xmm0, dword [ebp - 0x154]
movss dword [ebp - 0x13c], xmm0
movss xmm0, dword [ebp - 0x1d4]
addss xmm0, dword [ebp - 0x1b0]
movss dword [ebp - 0x1d4], xmm0
movss xmm0, dword [ebp - 0x13c]
subss xmm0, dword [ebp - 0x154]
movss dword [ebp - 0x13c], xmm0
movss xmm0, dword [ebp - 0x1c0]
addss xmm0, dword [ebp - 0x13c]
movss dword [ebp - 0x1c0], xmm0
movss xmm0, dword [ebp - 0x14c]
addss xmm0, dword [ebp - 0x1d4]
movss dword [ebp - 0x14c], xmm0
movss xmm0, dword [ebp - 0x14c]
mulss xmm0, dword [ebp - 0x1d4]
movss dword [ebp - 0x14c], xmm0
movss xmm0, dword [ebp - 0x14c]
subss xmm0, dword [ebp - 0x1d4]
movss dword [ebp - 0x14c], xmm0
movzx ecx, byte [ebp - 0x11e]
movzx edx, byte [ebp - 0x120]
mov al, byte [ebp + ecx - 0x10c]
mov byte [ebp + edx - 0x10c], al
movzx ecx, byte [ebp - 0x11f]
movzx edx, byte [ebp - 0x11e]
mov al, byte [ebp + ecx - 0x10c]
mov byte [ebp + edx - 0x10c], al
movzx ecx, byte [ebp - 0x11d]
movzx edx, byte [ebp - 0x11f]
mov al, byte [ebp + ecx - 0x10c]
mov byte [ebp + edx - 0x10c], al
movzx ecx, byte [ebp - 0x11d]
mov dl, byte [ebp - 0x124]
mov byte [ebp + ecx - 0x10c], dl
movzx eax, byte [ebp - 0x124]
movzx ecx, byte [ebp + eax - 0x10c]
movzx edx, byte [ebp - 0x122]
add edx, ecx
mov byte [ebp - 0x122], dl
movzx eax, byte [ebp - 0x123]
movzx ecx, byte [ebp - 0x11e]
movzx edx, byte [ebp + ecx - 0x10c]
movzx ecx, byte [ebp - 0x11d]
movzx ecx, byte [ebp + ecx - 0x10c]
add edx, ecx
and edx, 0xff
movzx edx, byte [ebp + edx - 0x10c]
xor eax, edx
movzx ecx, byte [ebp - 0x11f]
movzx edx, byte [ebp + ecx - 0x10c]
movzx ecx, byte [ebp - 0x120]
movzx ecx, byte [ebp + ecx - 0x10c]
add edx, ecx
movzx ecx, byte [ebp - 0x122]
movzx ecx, byte [ebp + ecx - 0x10c]
add edx, ecx
and edx, 0xff
movzx edx, byte [ebp + edx - 0x10c]
movzx ecx, byte [ebp + edx - 0x10c]
xor eax, ecx
mov byte [ebp - 0x11f], al
mov dl, byte [ebp - 0x123]
mov byte [ebp - 0x120], dl
mov al, byte [ebp - 0x11f]
mov byte [ebp - 0x129], al
cmp dword [ebp - 0x128], 0
jbe 0x98ffca
movsx cx, byte [ebp - 0x129]
mov edx, dword [ebp - 0x128]
mov word [ebp + edx*2 - 0xe], cx
mov eax, dword [ebp - 0x128]
add eax, 1
mov dword [ebp - 0x128], eax
mov ecx, dword [ebp - 0x184]
add ecx, 1
mov dword [ebp - 0x184], ecx
mov edx, dword [ebp - 0x128]
shl edx, 1
mov dword [ebp - 0x188], edx
mov eax, dword [ebp - 0x1b4]
add eax, dword [ebp - 0x188]
movzx ecx, byte [eax]
mov dword [ebp - 0x178], ecx
mov dword [ebp - 0x158], 7
mov edx, dword [ebp - 0x128]
lea eax, [edx + edx + 1]
mov dword [ebp - 0x198], eax
mov ecx, dword [ebp - 0x1b4]
add ecx, dword [ebp - 0x198]
movzx edx, byte [ecx]
mov dword [ebp - 0x15c], edx
mov dword [ebp - 0x160], 0x9c
movss xmm0, dword [0x9d3730]
movss dword [ebp - 0x134], xmm0
movss xmm0, dword [0x9d36f0]
movss dword [ebp - 0x130], xmm0
movss xmm0, dword [0x9d36c8]
movss dword [ebp - 0x144], xmm0
movss xmm0, dword [0x9d3680]
movss dword [ebp - 0x140], xmm0
movss xmm0, dword [0x9d3654]
movss dword [ebp - 0x138], xmm0
movss xmm0, dword [0x9d3614]
movss dword [ebp - 0x150], xmm0
movss xmm0, dword [ebp - 0x140]
addss xmm0, dword [ebp - 0x150]
movss dword [ebp - 0x140], xmm0
movss xmm0, dword [ebp - 0x138]
subss xmm0, dword [ebp - 0x150]
movss dword [ebp - 0x138], xmm0
movss xmm0, dword [ebp - 0x140]
addss xmm0, dword [ebp - 0x150]
movss dword [ebp - 0x140], xmm0
movss xmm0, dword [ebp - 0x140]
addss xmm0, dword [ebp - 0x150]
movss dword [ebp - 0x140], xmm0
movss xmm0, dword [ebp - 0x134]
addss xmm0, dword [ebp - 0x150]
movss dword [ebp - 0x134], xmm0
movss xmm0, dword [ebp - 0x138]
subss xmm0, dword [ebp - 0x150]
movss dword [ebp - 0x138], xmm0
movss xmm0, dword [ebp - 0x134]
comiss xmm0, dword [ebp - 0x138]
jbe 0x9901f0
movss xmm0, dword [ebp - 0x134]
addss xmm0, dword [ebp - 0x130]
movss dword [ebp - 0x134], xmm0
movss xmm0, dword [ebp - 0x144]
addss xmm0, dword [ebp - 0x140]
movss dword [ebp - 0x144], xmm0
movss xmm0, dword [ebp - 0x130]
mulss xmm0, dword [ebp - 0x144]
movss dword [ebp - 0x130], xmm0
mov eax, dword [ebp - 0x178]
sub eax, dword [ebp - 0x158]
mov dword [ebp - 0x164], eax
movss xmm0, dword [ebp - 0x134]
subss xmm0, dword [ebp - 0x130]
movss dword [ebp - 0x134], xmm0
movss xmm0, dword [ebp - 0x140]
mulss xmm0, dword [ebp - 0x138]
movss dword [ebp - 0x140], xmm0
movss xmm0, dword [ebp - 0x138]
subss xmm0, dword [ebp - 0x150]
movss dword [ebp - 0x138], xmm0
jmp 0x99044a
movss xmm0, dword [ebp - 0x130]
divss xmm0, dword [ebp - 0x144]
movss dword [ebp - 0x130], xmm0
movss xmm0, dword [ebp - 0x130]
subss xmm0, dword [ebp - 0x144]
movss dword [ebp - 0x130], xmm0
movss xmm0, dword [ebp - 0x130]
mulss xmm0, dword [ebp - 0x144]
movss dword [ebp - 0x130], xmm0
movss xmm0, dword [ebp - 0x130]
addss xmm0, dword [ebp - 0x144]
movss dword [ebp - 0x130], xmm0
movss xmm0, dword [ebp - 0x140]
mulss xmm0, dword [ebp - 0x138]
movss dword [ebp - 0x140], xmm0
movss xmm0, dword [ebp - 0x134]
divss xmm0, dword [ebp - 0x130]
movss dword [ebp - 0x134], xmm0
movss xmm0, dword [ebp - 0x144]
mulss xmm0, dword [ebp - 0x138]
movss dword [ebp - 0x144], xmm0
movss xmm0, dword [ebp - 0x130]
divss xmm0, dword [ebp - 0x140]
movss dword [ebp - 0x130], xmm0
movss xmm0, dword [ebp - 0x138]
addss xmm0, dword [ebp - 0x134]
movss dword [ebp - 0x138], xmm0
movss xmm0, dword [ebp - 0x150]
subss xmm0, dword [ebp - 0x130]
movss dword [ebp - 0x150], xmm0
movss xmm0, dword [ebp - 0x138]
subss xmm0, dword [ebp - 0x134]
movss dword [ebp - 0x138], xmm0
movss xmm0, dword [ebp - 0x130]
mulss xmm0, dword [ebp - 0x140]
movss dword [ebp - 0x130], xmm0
movss xmm0, dword [ebp - 0x134]
comiss xmm0, dword [ebp - 0x138]
jbe 0x9903ba
movss xmm0, dword [ebp - 0x144]
addss xmm0, dword [ebp - 0x140]
movss dword [ebp - 0x144], xmm0
movss xmm0, dword [ebp - 0x134]
addss xmm0, dword [ebp - 0x130]
movss dword [ebp - 0x134], xmm0
movss xmm0, dword [ebp - 0x134]
mulss xmm0, dword [ebp - 0x130]
movss dword [ebp - 0x134], xmm0
movss xmm0, dword [ebp - 0x138]
addss xmm0, dword [ebp - 0x150]
movss dword [ebp - 0x138], xmm0
movss xmm0, dword [ebp - 0x144]
subss xmm0, dword [ebp - 0x140]
movss dword [ebp - 0x144], xmm0
movss xmm0, dword [ebp - 0x134]
subss xmm0, dword [ebp - 0x130]
movss dword [ebp - 0x134], xmm0
jmp 0x99044a
movss xmm0, dword [ebp - 0x144]
mulss xmm0, dword [ebp - 0x140]
movss dword [ebp - 0x144], xmm0
movss xmm0, dword [ebp - 0x134]
divss xmm0, dword [ebp - 0x130]
movss dword [ebp - 0x134], xmm0
movss xmm0, dword [ebp - 0x138]
addss xmm0, dword [ebp - 0x150]
movss dword [ebp - 0x138], xmm0
movss xmm0, dword [ebp - 0x150]
subss xmm0, dword [ebp - 0x134]
movss dword [ebp - 0x150], xmm0
movss xmm0, dword [ebp - 0x130]
divss xmm0, dword [ebp - 0x144]
movss dword [ebp - 0x130], xmm0
movss xmm0, dword [ebp - 0x134]
mulss xmm0, dword [ebp - 0x130]
movss dword [ebp - 0x134], xmm0
mov ecx, dword [ebp - 0x15c]
sub ecx, dword [ebp - 0x160]
mov dword [ebp - 0x168], ecx
mov edx, dword [ebp - 0x164]
shl edx, 4
mov dword [ebp - 0x17c], edx
mov eax, dword [ebp - 0x168]
mov dword [ebp - 0x180], eax
mov ecx, dword [ebp - 0x17c]
or ecx, dword [ebp - 0x180]
mov dword [ebp - 0x18c], ecx
mov dl, byte [ebp - 0x18c]
mov byte [ebp - 0x123], dl
movzx eax, byte [ebp - 0x120]
mov cl, byte [ebp + eax - 0x10c]
mov byte [ebp - 0x124], cl
movzx edx, byte [ebp - 0x11d]
movzx eax, byte [ebp + edx - 0x10c]
movzx ecx, byte [ebp - 0x11e]
add ecx, eax
mov byte [ebp - 0x11e], cl
mov dl, byte [ebp - 0x11d]
add dl, 1
mov byte [ebp - 0x11d], dl
movzx eax, byte [ebp - 0x11e]
movzx ecx, byte [ebp - 0x120]
mov dl, byte [ebp + eax - 0x10c]
mov byte [ebp + ecx - 0x10c], dl
movzx eax, byte [ebp - 0x11f]
movzx ecx, byte [ebp - 0x11e]
mov dl, byte [ebp + eax - 0x10c]
mov byte [ebp + ecx - 0x10c], dl
movzx eax, byte [ebp - 0x11d]
movzx ecx, byte [ebp - 0x11f]
mov dl, byte [ebp + eax - 0x10c]
mov byte [ebp + ecx - 0x10c], dl
movzx eax, byte [ebp - 0x11d]
mov cl, byte [ebp - 0x124]
mov byte [ebp + eax - 0x10c], cl
movzx edx, byte [ebp - 0x124]
movzx eax, byte [ebp + edx - 0x10c]
movzx ecx, byte [ebp - 0x122]
add ecx, eax
mov byte [ebp - 0x122], cl
movzx edx, byte [ebp - 0x123]
movzx eax, byte [ebp - 0x11e]
movzx ecx, byte [ebp + eax - 0x10c]
movzx eax, byte [ebp - 0x11d]
movzx eax, byte [ebp + eax - 0x10c]
add ecx, eax
and ecx, 0xff
movzx ecx, byte [ebp + ecx - 0x10c]
xor edx, ecx
movzx eax, byte [ebp - 0x11f]
movzx ecx, byte [ebp + eax - 0x10c]
movzx eax, byte [ebp - 0x120]
movzx eax, byte [ebp + eax - 0x10c]
add ecx, eax
movzx eax, byte [ebp - 0x122]
movzx eax, byte [ebp + eax - 0x10c]
add ecx, eax
and ecx, 0xff
movzx ecx, byte [ebp + ecx - 0x10c]
movzx eax, byte [ebp + ecx - 0x10c]
xor edx, eax
mov byte [ebp - 0x11f], dl
mov cl, byte [ebp - 0x123]
mov byte [ebp - 0x120], cl
mov dl, byte [ebp - 0x11f]
mov byte [ebp - 0x129], dl
cmp dword [ebp - 0x128], 0
jbe 0x990616
movsx ax, byte [ebp - 0x129]
mov ecx, dword [ebp - 0x128]
mov word [ebp + ecx*2 - 0xe], ax
mov edx, 2
imul eax, edx, 3
mov dword [ebp - 0x21c], eax
cmp dword [ebp - 0x21c], 8
jae 0x99062f
jmp 0x990634
call fcn.009b1617
xor ecx, ecx
mov edx, dword [ebp - 0x21c]
mov word [ebp + edx - 0xc], cx
jmp 0x990694
mov dword [ebp - 0x128], 0
jmp 0x99065e
mov eax, dword [ebp - 0x128]
add eax, 1
mov dword [ebp - 0x128], eax
cmp dword [ebp - 0x128], 4
jae 0x990694
mov ecx, dword [ebp - 0x128]
shl ecx, 1
mov dword [ebp - 0x220], ecx
cmp dword [ebp - 0x220], 8
jae 0x990680
jmp 0x990685
call fcn.009b1617
xor edx, edx
mov eax, dword [ebp - 0x220]
mov word [ebp + eax - 0xc], dx
jmp 0x99064f
lea ecx, [ebp - 0xc]
push ecx
push 0x9ff610
call fcn.009b2abb
add esp, 8
test eax, eax
jne 0x9906b0
xor eax, eax
jmp 0x9907f3
push 0
mov edx, dword [ebp - 0x250]
push edx
push 0
push 0
push 0x4b
push 0x118
push 0x64
push 0x64
push 0x10ca0000
mov eax, dword [ebp - 0x204]
push eax
mov ecx, dword [ebp - 0x23c]
push ecx
push 0
call dword [sym.imp.USER32.dll_CreateWindowExW]
mov dword [0xa00a80], eax
cmp dword [0xa00a80], 0
jne 0x9906fb
mov eax, 1
jmp 0x9907f3
lea edx, [ebp - 0x11c]
push edx
mov eax, dword [0xa00a80]
push eax
call dword [sym.imp.USER32.dll_GetWindowRect]
push 0
call dword [sym.imp.USER32.dll_GetSystemMetrics]
sub eax, dword [ebp - 0x114]
cdq
sub eax, edx
sar eax, 1
mov dword [ebp - 0x234], eax
push 1
call dword [sym.imp.USER32.dll_GetSystemMetrics]
sub eax, dword [ebp - 0x110]
cdq
sub eax, edx
sar eax, 1
mov dword [ebp - 0x230], eax
push 5
push 0
push 0
mov ecx, dword [ebp - 0x230]
push ecx
mov edx, dword [ebp - 0x234]
push edx
push 0
mov eax, dword [0xa00a80]
push eax
call dword [sym.imp.USER32.dll_SetWindowPos]
mov ecx, dword [ebp + 0x14]
push ecx
mov edx, dword [0xa00a80]
push edx
call dword [sym.imp.USER32.dll_ShowWindow]
mov eax, dword [0xa00a80]
push eax
call dword [sym.imp.USER32.dll_UpdateWindow]
push 0
push 0
push 0
push 0x98aa50
push 0
push 0
call dword [sym.imp.KERNEL32.dll_CreateThread]
mov dword [ebp - 0x27c], eax
push 0
push 0
push 0
push 0x98e860
push 0
push 0
call dword [sym.imp.KERNEL32.dll_CreateThread]
mov dword [ebp - 0x270], eax
push 0
push 0
push 0
lea ecx, [ebp - 0x298]
push ecx
call dword [sym.imp.USER32.dll_GetMessageW]
test eax, eax
je 0x9907e8
lea edx, [ebp - 0x298]
push edx
call dword [sym.imp.USER32.dll_TranslateMessage]
lea eax, [ebp - 0x298]
push eax
call dword [sym.imp.USER32.dll_DispatchMessageW]
jmp 0x9907b5
call fcn.004010a0
mov eax, dword [ebp - 0x290]
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.009b16f2
mov esp, ebp
pop ebp
ret 0x10