Function at 0x6222f0
Capabilities:
Check for software breakpoints

Disassembly:
push ebp
mov ebp, esp
sub esp, 8
push 0x406666
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
sub esp, 0x208
push ebx
push esi
push edi
mov dword [ebp - 8], esp
mov dword [ebp - 4], 0x401930
mov eax, dword [0x96e1b8]
xor ebx, ebx
cmp eax, ebx
mov dword [ebp - 0x14], ebx
mov dword [ebp - 0x18], ebx
mov dword [ebp - 0x24], ebx
mov dword [ebp - 0x28], ebx
mov dword [ebp - 0x34], ebx
mov dword [ebp - 0x40], ebx
mov dword [ebp - 0x48], ebx
mov dword [ebp - 0x4c], ebx
mov dword [ebp - 0x54], ebx
mov dword [ebp - 0x5c], ebx
mov dword [ebp - 0x60], ebx
mov dword [ebp - 0x64], ebx
mov dword [ebp - 0x68], ebx
mov dword [ebp - 0x6c], ebx
mov dword [ebp - 0x70], ebx
mov dword [ebp - 0x74], ebx
mov dword [ebp - 0x84], ebx
mov dword [ebp - 0x94], ebx
mov dword [ebp - 0xa4], ebx
mov dword [ebp - 0xb4], ebx
mov dword [ebp - 0xc4], ebx
mov dword [ebp - 0xd4], ebx
mov dword [ebp - 0xe4], ebx
mov dword [ebp - 0xf4], ebx
mov dword [ebp - 0x104], ebx
mov dword [ebp - 0x114], ebx
mov dword [ebp - 0x124], ebx
mov dword [ebp - 0x134], ebx
mov dword [ebp - 0x144], ebx
mov dword [ebp - 0x154], ebx
mov dword [ebp - 0x164], ebx
mov dword [ebp - 0x168], ebx
mov dword [ebp - 0x16c], ebx
mov dword [ebp - 0x1ac], ebx
mov dword [ebp - 0x1b0], ebx
mov dword [ebp - 0x1b4], ebx
jne 0x6223e3
mov edi, dword [0xa34228]
push 0x96e1b8
push 0x423f1c
call edi
jmp 0x6223e9
mov edi, dword [0xa3422c]
mov esi, dword [0x96e1b8]
lea ecx, [ebp - 0x168]
push ecx
push esi
mov eax, dword [esi]
call dword [eax + 0x1b8]
cmp eax, ebx
fnclex
jge 0x62241b
mov ebx, dword [0xa34230]
push 0x1b8
push 0x440958
push esi
push eax
call ebx
jmp 0x622421
mov ebx, dword [0xa34234]
cmp word [ebp - 0x168], 0xffff
jne 0x622803
mov edx, dword [0x96c9d0]
mov word [0x96d5e6], 0
push edx
push 0x443938
nop
call fcn.009a9d75
test eax, eax
jne 0x625406
mov eax, dword [0x96e1b8]
test eax, eax
jne 0x62246c
push 0x96e1b8
push 0x423f1c
call edi
mov eax, dword [0x96e1b8]
mov ecx, dword [eax]
push eax
call dword [ecx + 0x324]
mov esi, dword [0xa34238]
lea edx, [ebp - 0x68]
push eax
push edx
call esi
mov edi, eax
lea ecx, [ebp - 0x16c]
push ecx
push edi
mov eax, dword [edi]
call dword [eax + 0x108]
test eax, eax
fnclex
jge 0x6224a8
push 0x108
push 0x43c178
push edi
push eax
call ebx
mov edx, dword [0x96cbc0]
mov ebx, dword [0xa3423c]
lea ecx, [ebp - 0x68]
fld dword [edx]
fsub dword [0x96d208]
cmp dword [section..data], 0
jne 0x6224d0
fdiv dword [0x96d1c4]
jmp 0x6224db
push dword [0x96d1c4]
call fcn.00406678
fld dword [ebp - 0x16c]
cmp dword [section..data], 0
jne 0x6224f2
fdiv dword [0x401320]
jmp 0x6224fd
push dword [0x401320]
call fcn.00406678
fsubp st(1)
fstp dword [ebp - 0x50]
fnstsw ax
test al, 0xd
jne 0x625655
call ebx
mov eax, dword [0x96e1b8]
test eax, eax
jne 0x62252c
push 0x96e1b8
push 0x423f1c
nop
call fcn.009a9d90
mov eax, dword [0x96e1b8]
mov ecx, dword [eax]
push eax
call dword [ecx + 0x324]
lea edx, [ebp - 0x68]
push eax
push edx
call esi
mov edi, eax
lea ecx, [ebp - 0x16c]
push ecx
push edi
mov eax, dword [edi]
call dword [eax + 0x110]
test eax, eax
fnclex
jge 0x622566
push 0x110
push 0x43c178
push edi
push eax
nop
call fcn.009a9d99
mov edx, dword [0x96cbdc]
lea ecx, [ebp - 0x68]
fld dword [0x96d214]
fsub dword [edx]
cmp dword [section..data], 0
jne 0x622588
fdiv dword [0x96d1c4]
jmp 0x622593
push dword [0x96d1c4]
call fcn.00406678
fld dword [ebp - 0x16c]
cmp dword [section..data], 0
jne 0x6225aa
fdiv dword [0x401320]
jmp 0x6225b5
push dword [0x401320]
call fcn.00406678
fsubp st(1)
fstp dword [ebp - 0x58]
fnstsw ax
test al, 0xd
jne 0x625655
call ebx
mov eax, dword [0x96e034]
test eax, eax
jne 0x6225e4
push 0x96e034
push 0x42fb24
nop
call fcn.009a9da2
mov eax, dword [0x96e034]
mov ecx, dword [eax]
push eax
call dword [ecx + 0x330]
lea edx, [ebp - 0x68]
push eax
push edx
call esi
mov edi, eax
lea ecx, [ebp - 0x6c]
push ecx
push edi
mov eax, dword [edi]
call dword [eax + 0x188]
test eax, eax
fnclex
jge 0x62261b
push 0x188
push 0x43c178
push edi
push eax
nop
call fcn.009a9dab
mov eax, dword [0x96e1b8]
test eax, eax
jne 0x622639
push 0x96e1b8
push 0x423f1c
nop
call fcn.009a9db4
mov eax, dword [0x96e1b8]
mov edx, dword [eax]
push eax
call dword [edx + 0x324]
push eax
lea eax, [ebp - 0x74]
push eax
call esi
mov edi, dword [ebp - 0x58]
sub esp, 0x10
mov dword [ebp - 0x12c], edi
mov edi, dword [ebp - 0x50]
mov ebx, esp
mov ecx, 0xa
mov dword [ebp - 0x11c], edi
mov edi, ecx
mov dword [ebx], ecx
mov ecx, dword [ebp - 0x160]
mov esi, eax
mov eax, 0x80020004
mov dword [ebx + 4], ecx
mov edx, eax
mov dword [ebp - 0x10c], eax
mov dword [ebp - 0xfc], eax
mov dword [ebx + 8], eax
mov eax, dword [ebp - 0x158]
sub esp, 0x10
mov dword [ebp - 0x134], 4
mov dword [ebx + 0xc], eax
mov ecx, esp
mov eax, 0xa
sub esp, 0x10
mov dword [ecx], eax
mov eax, dword [ebp - 0x150]
mov dword [ebp - 0x124], 4
mov dword [ebp - 0x114], edi
mov dword [ecx + 4], eax
mov eax, 0xa
mov dword [ebp - 0x104], edi
mov edi, dword [ebp - 0x6c]
mov dword [ecx + 8], edx
mov edx, dword [ebp - 0x148]
mov dword [ebp - 0x204], edi
mov dword [ebp - 0x6c], 0
mov dword [ecx + 0xc], edx
mov edx, dword [ebp - 0x140]
mov ecx, esp
sub esp, 0x10
mov edi, dword [esi]
mov dword [ecx], eax
mov eax, 0x80020004
mov dword [ecx + 4], edx
mov edx, dword [ebp - 0x134]
mov dword [ecx + 8], eax
mov eax, dword [ebp - 0x138]
mov dword [ecx + 0xc], eax
mov eax, dword [ebp - 0x130]
mov ecx, esp
sub esp, 0x10
mov dword [ecx], edx
mov edx, dword [ebp - 0x12c]
mov dword [ecx + 4], eax
mov eax, dword [ebp - 0x128]
mov dword [ecx + 8], edx
mov edx, dword [ebp - 0x124]
mov dword [ecx + 0xc], eax
mov eax, dword [ebp - 0x120]
mov ecx, esp
sub esp, 0x10
mov dword [ecx], edx
mov edx, dword [ebp - 0x11c]
mov dword [ecx + 4], eax
mov eax, dword [ebp - 0x118]
mov dword [ecx + 8], edx
mov edx, dword [ebp - 0x114]
mov dword [ecx + 0xc], eax
mov eax, dword [ebp - 0x110]
mov ecx, esp
mov dword [ecx], edx
mov edx, dword [ebp - 0x10c]
mov dword [ecx + 4], eax
mov dword [ecx + 8], edx
mov eax, dword [ebp - 0x108]
mov edx, dword [ebp - 0x104]
sub esp, 0x10
mov dword [ecx + 0xc], eax
mov eax, dword [ebp - 0x100]
mov ecx, esp
push 0
push 0
mov dword [ecx], edx
mov edx, dword [ebp - 0xfc]
mov dword [ecx + 4], eax
mov eax, dword [ebp - 0xf8]
mov dword [ecx + 8], edx
lea edx, [ebp - 0x70]
mov dword [ecx + 0xc], eax
mov ecx, dword [ebp - 0x204]
push ecx
push edx
nop
call fcn.009a9dbd
push eax
push esi
call dword [edi + 0x280]
test eax, eax
fnclex
jge 0x6227e1
push 0x280
push 0x43c178
push esi
push eax
nop
call fcn.009a9dc6
lea eax, [ebp - 0x74]
lea ecx, [ebp - 0x70]
push eax
lea edx, [ebp - 0x68]
push ecx
push edx
push 3
nop
call fcn.009a9dcf
add esp, 0x10
wait
push 0x6254b4
jmp 0x62547e
mov edx, dword [0x96c9d8]
mov esi, dword [0xa34240]
lea ecx, [ebp - 0x1ac]
mov word [0x96c9d4], 0
call esi
mov eax, dword [ebp - 0x1ac]
push eax
push 0x443170
nop
call fcn.009a9de1
test eax, eax
jne 0x622840
call fcn.0070feb0
jmp 0x623cae
mov ecx, dword [ebp - 0x1ac]
push ecx
push 0x44317c
nop
call fcn.009a9dea
test eax, eax
jne 0x622860
call fcn.0070feb0
jmp 0x623cae
mov edx, dword [ebp - 0x1ac]
push edx
push 0x4431b8
nop
call fcn.009a9df3
test eax, eax
jne 0x622964
mov edx, dword [0x96c9dc]
lea ecx, [ebp - 0x1b0]
call esi
mov eax, dword [ebp - 0x1b0]
mov esi, dword [0xa34244]
push eax
push 0x4431e0
call esi
test eax, eax
jne 0x6228aa
call fcn.00756170
jmp 0x623cae
mov ecx, dword [ebp - 0x1b0]
push ecx
push 0x4431ec
call esi
test eax, eax
jne 0x6228c6
call fcn.007e35f0
jmp 0x623cae
mov edx, dword [ebp - 0x1b0]
push edx
push 0x443210
call esi
test eax, eax
jne 0x6228e2
call fcn.007ea300
jmp 0x623cae
mov eax, dword [ebp - 0x1b0]
push eax
push 0x44321c
call esi
test eax, eax
jne 0x6228fe
call fcn.0079e330
jmp 0x623cae
mov ecx, dword [ebp - 0x1b0]
push ecx
push 0x4432ac
call esi
test eax, eax
jne 0x62291a
call fcn.0070feb0
jmp 0x623cae
mov edx, dword [ebp - 0x1b0]
push edx
push 0x443228
call esi
test eax, eax
je 0x62295a
mov eax, dword [ebp - 0x1b0]
push eax
push 0x443234
call esi
test eax, eax
je 0x62295a
mov ecx, dword [ebp - 0x1b0]
push ecx
push 0x443240
call esi
test eax, eax
je 0x62295a
call fcn.00747490
jmp 0x623cae
call fcn.007bb960
jmp 0x623cae
mov edx, dword [ebp - 0x1ac]
push edx
push 0x44324c
nop
call fcn.009a9e05
test eax, eax
jne 0x622984
call fcn.008258a0
jmp 0x623cae
mov eax, dword [ebp - 0x1ac]
push eax
push 0x44327c
nop
call fcn.009a9e0e
test eax, eax
jne 0x6229a4
call fcn.007739b0
jmp 0x623cae
mov ecx, dword [ebp - 0x1ac]
push ecx
push 0x443288
nop
call fcn.009a9e17
test eax, eax
jne 0x6229c4
call fcn.00776c00
jmp 0x623cae
mov edx, dword [ebp - 0x1ac]
push edx
push 0x4432a0
nop
call fcn.009a9e20
test eax, eax
jne 0x6229e4
call fcn.00779040
jmp 0x623cae
mov eax, dword [ebp - 0x1ac]
push eax
push 0x4432b8
nop
call fcn.009a9e29
test eax, eax
jne 0x622a04
call fcn.0077b1a0
jmp 0x623cae
mov ecx, dword [ebp - 0x1ac]
push ecx
push 0x4432c4
nop
call int.009a9e32
test eax, eax
jne 0x622a24
call fcn.0081c150
jmp 0x623cae
mov edx, dword [ebp - 0x1ac]
push edx
push 0x4432d0
nop
call fcn.009a9e3b
test eax, eax
jne 0x622a44
call fcn.006fe610
jmp 0x623cae
mov edx, dword [0x96c9d0]
lea ecx, [ebp - 0x1b4]
mov word [0x96d5e6], 0
call esi
mov eax, dword [ebp - 0x1b4]
mov esi, dword [0xa34248]
push eax
push 0x44308c
call esi
test eax, eax
jne 0x622a7d
call fcn.006024b0
jmp 0x623cae
mov ecx, dword [ebp - 0x1b4]
push ecx
push 0x443968
call esi
test eax, eax
jne 0x622f08
mov edx, dword [0x96cda0]
mov esi, dword [0xa3424c]
fld dword [edx]
call esi
mov edi, eax
mov eax, dword [0x96cda0]
mov dword [ebp - 0x20], edi
fld dword [eax + 4]
call esi
mov cx, word [0x96c3be]
mov dword [ebp - 0x38], eax
cmp ax, cx
jg 0x622efe
cmp di, cx
jg 0x622efe
cmp ax, di
je 0x622efe
mov dx, di
add dx, 1
jo 0x62565a
cmp dx, ax
jne 0x622c86
cmp di, 1
jle 0x622c86
mov ax, word [0x96c3e6]
mov esi, 1
mov word [ebp - 0x1bc], ax
mov dword [ebp - 0x1c], esi
cmp si, word [ebp - 0x1bc]
jg 0x622efe
cmp word [0x96c42a], 0
je 0x622c01
movsx ebx, di
mov edi, dword [0xa34250]
dec ebx
cmp ebx, 0xe1
jb 0x622b3b
call edi
movsx esi, si
dec esi
cmp esi, 0x2ee0
jb 0x622b49
call edi
cmp ebx, 0xe1
jb 0x622b53
call edi
cmp esi, 0x2ee0
jb 0x622b5d
call edi
mov cx, word [ebp - 0x20]
sub cx, 1
jo 0x62565a
movsx edi, cx
dec edi
cmp edi, 0xe1
jb 0x622b7d
nop
call fcn.009a9e5f
cmp esi, 0x2ee0
jb 0x622b8b
nop
call fcn.009a9e68
movsx eax, word [ebp - 0x38]
dec eax
cmp eax, 0xe1
mov dword [ebp - 0x174], eax
jb 0x622ba3
nop
call fcn.009a9e71
cmp esi, 0x2ee0
jb 0x622bb1
nop
call fcn.009a9e7a
lea eax, [esi + esi*4]
lea ecx, [esi + esi*4]
lea eax, [eax + eax*4]
lea ecx, [ecx + ecx*4]
lea edx, [ebx + eax*8]
add eax, edx
lea edx, [ebx + ecx*8]
add ecx, edx
mov edx, dword [0x96c414]
fld dword [edx + eax*4]
fadd dword [edx + ecx*4]
lea eax, [esi + esi*4]
lea eax, [eax + eax*4]
lea ecx, [edi + eax*8]
add eax, ecx
lea ecx, [esi + esi*4]
mov esi, dword [ebp - 0x174]
fsub dword [edx + eax*4]
lea ecx, [ecx + ecx*4]
lea esi, [esi + ecx*8]
add ecx, esi
fstp dword [edx + ecx*4]
fnstsw ax
test al, 0xd
jne 0x625655
jmp 0x622c6a
movsx edi, word [ebp - 0x20]
dec edi
cmp edi, 0xe1
jb 0x622c14
nop
call fcn.009a9e83
movsx esi, word [ebp - 0x1c]
dec esi
cmp esi, 0x2ee0
jb 0x622c27
nop
call fcn.009a9e8c
movsx ebx, word [ebp - 0x38]
dec ebx
cmp ebx, 0xe1
jb 0x622c3a
nop
call fcn.009a9e95
cmp esi, 0x2ee0
jb 0x622c48
nop
call fcn.009a9e9e
lea eax, [esi + esi*4]
lea esi, [esi + esi*4]
lea eax, [eax + eax*4]
lea ecx, [esi + esi*4]
lea edx, [edi + eax*8]
add eax, edx
lea edx, [ebx + ecx*8]
add ecx, edx
mov edx, dword [0x96c414]
mov eax, dword [edx + eax*4]
mov dword [edx + ecx*4], eax
mov eax, 1
mov edi, dword [ebp - 0x20]
add ax, word [ebp - 0x1c]
jo 0x62565a
mov esi, eax
mov dword [ebp - 0x1c], esi
jmp 0x622b0c
add ax, 1
jo 0x62565a
xor edx, edx
cmp di, ax
mov ax, di
setne dl
add ax, 1
jo 0x62565a
xor ebx, ebx
cmp ax, cx
mov cx, word [0x96c3e6]
setg bl
or edx, ebx
jne 0x622e5b
mov ebx, 1
mov word [ebp - 0x1c4], cx
mov dword [ebp - 0x1c], ebx
cmp bx, word [ebp - 0x1c4]
jg 0x622efe
cmp word [0x96c42a], 0
je 0x622dce
movsx edi, word [ebp - 0x20]
dec edi
cmp edi, 0xe1
jb 0x622cf9
nop
call fcn.009a9ea7
movsx esi, bx
dec esi
cmp esi, 0x2ee0
jb 0x622d0b
nop
call fcn.009a9eb0
mov dx, word [ebp - 0x20]
add dx, 1
jo 0x62565a
movsx eax, dx
dec eax
cmp eax, 0xe1
mov dword [ebp - 0x184], eax
jb 0x622d30
nop
call fcn.009a9eb9
cmp esi, 0x2ee0
jb 0x622d3e
nop
call fcn.009a9ec2
cmp edi, 0xe1
jb 0x622d4c
nop
call fcn.009a9ecb
cmp esi, 0x2ee0
jb 0x622d5a
nop
call fcn.009a9ed4
movsx ebx, word [ebp - 0x38]
dec ebx
cmp ebx, 0xe1
jb 0x622d6d
nop
call fcn.009a9edd
cmp esi, 0x2ee0
jb 0x622d7b
nop
call fcn.009a9ee6
lea eax, [esi + esi*4]
mov edx, dword [ebp - 0x184]
lea eax, [eax + eax*4]
lea ecx, [edi + eax*8]
add eax, ecx
lea ecx, [esi + esi*4]
lea ecx, [ecx + ecx*4]
lea edx, [edx + ecx*8]
add ecx, edx
mov edx, dword [0x96c414]
fld dword [edx + eax*4]
fsub dword [edx + ecx*4]
lea eax, [esi + esi*4]
lea eax, [eax + eax*4]
lea ecx, [edi + eax*8]
add eax, ecx
lea ecx, [esi + esi*4]
fadd dword [edx + eax*4]
lea ecx, [ecx + ecx*4]
lea esi, [ebx + ecx*8]
mov ebx, dword [ebp - 0x1c]
add ecx, esi
fstp dword [edx + ecx*4]
fnstsw ax
test al, 0xd
jne 0x625655
jmp 0x622e40
movsx eax, di
dec eax
cmp eax, 0xe1
mov dword [ebp - 0x17c], eax
jb 0x622de5
nop
call fcn.009a9eef
movsx esi, bx
dec esi
cmp esi, 0x2ee0
jb 0x622df7
nop
call fcn.009a9ef8
movsx edi, word [ebp - 0x38]
dec edi
cmp edi, 0xe1
jb 0x622e0a
nop
call fcn.009a9f01
cmp esi, 0x2ee0
jb 0x622e18
nop
call fcn.009a9f0a
mov edx, dword [ebp - 0x17c]
lea eax, [esi + esi*4]
lea esi, [esi + esi*4]
lea eax, [eax + eax*4]
lea ecx, [edx + eax*8]
add eax, ecx
lea ecx, [esi + esi*4]
lea edx, [edi + ecx*8]
add ecx, edx
mov edx, dword [0x96c414]
mov eax, dword [edx + eax*4]
mov dword [edx + ecx*4], eax
mov edi, dword [ebp - 0x20]
mov eax, 1
add ax, bx
jo 0x62565a
mov ebx, eax
mov dword [ebp - 0x1c], ebx
jmp 0x622ccb
mov word [ebp - 0x1cc], cx
mov ebx, 1
cmp bx, word [ebp - 0x1cc]
jg 0x622efe
movsx eax, di
dec eax
cmp eax, 0xe1
mov dword [ebp - 0x17c], eax
jb 0x622e8b
nop
call fcn.009a9f13
movsx esi, bx
dec esi
cmp esi, 0x2ee0
jb 0x622e9d
nop
call fcn.009a9f1c
movsx edi, word [ebp - 0x38]
dec edi
cmp edi, 0xe1
jb 0x622eb0
nop
call fcn.009a9f25
cmp esi, 0x2ee0
jb 0x622ebe
nop
call fcn.009a9f2e
mov edx, dword [ebp - 0x17c]
lea eax, [esi + esi*4]
lea esi, [esi + esi*4]
lea eax, [eax + eax*4]
lea ecx, [edx + eax*8]
add eax, ecx
lea ecx, [esi + esi*4]
lea edx, [edi + ecx*8]
mov edi, dword [ebp - 0x20]
add ecx, edx
mov edx, dword [0x96c414]
mov eax, dword [edx + eax*4]
mov dword [edx + ecx*4], eax
mov eax, 1
add ax, bx
jo 0x62565a
mov ebx, eax
jmp 0x622e67
call fcn.00605cd0
jmp 0x623cae
mov ecx, dword [ebp - 0x1b4]
push ecx
push 0x443984
call esi
test eax, eax
jne 0x623059
movsx edx, word [0x96c3e6]
mov esi, dword [0x96cda0]
mov dword [ebp - 0x210], edx
fild dword [ebp - 0x210]
fstp dword [ebp - 0x214]
fld dword [esi + 4]
fcomp dword [ebp - 0x214]
fnstsw ax
test ah, 0x41
jne 0x622f54
mov ecx, 1
jmp 0x622f56
xor ecx, ecx
fild dword [ebp - 0x210]
fstp dword [ebp - 0x218]
fld dword [esi]
fcomp dword [ebp - 0x218]
fnstsw ax
test ah, 0x41
jne 0x622f78
mov edx, 1
jmp 0x622f7a
xor edx, edx
fld dword [esi + 4]
fcomp dword [esi]
fnstsw ax
test ah, 0x40
je 0x622f8d
mov eax, 1
jmp 0x622f8f
xor eax, eax
or ecx, edx
neg ecx
sbb ecx, ecx
neg ecx
or ecx, eax
jne 0x622efe
mov ax, word [0x96c3be]
mov word [ebp - 0x1d4], ax
mov eax, 1
mov dword [ebp - 0x1c], eax
cmp ax, word [ebp - 0x1d4]
jg 0x622efe
mov ebx, dword [0xa34254]
movsx edi, ax
dec edi
cmp edi, 0xe1
jb 0x622fdb
call ebx
mov esi, dword [0x96cda0]
fld dword [esi]
nop
call fcn.009a9f40
mov esi, eax
dec esi
cmp esi, 0x2ee0
jb 0x622ff0
call ebx
cmp edi, 0xe1
jb 0x622ffa
call ebx
mov ecx, dword [0x96cda0]
fld dword [ecx + 4]
nop
call fcn.009a9f49
mov ebx, eax
dec ebx
cmp ebx, 0x2ee0
jb 0x62301a
nop
call fcn.009a9f52
lea eax, [esi + esi*4]
lea ecx, [ebx + ebx*4]
lea eax, [eax + eax*4]
lea ecx, [ecx + ecx*4]
lea edx, [edi + eax*8]
add eax, edx
lea edx, [edi + ecx*8]
add ecx, edx
mov edx, dword [0x96c414]
mov eax, dword [edx + eax*4]
mov dword [edx + ecx*4], eax
mov esi, dword [0x96cda0]
mov eax, 1
add ax, word [ebp - 0x1c]
jo 0x62565a
mov dword [ebp - 0x1c], eax
jmp 0x622fb4
mov ecx, dword [ebp - 0x1b4]
push ecx
push 0x4439a0
call esi
test eax, eax
jne 0x62309c
mov edx, dword [0x96cda0]
fld dword [edx]
fcomp dword [0x4014ac]
mov word [0x96dfb2], 1
fnstsw ax
test ah, 0x40
jne 0x623092
mov word [0x96dfb2], 0
call fcn.0069f430
jmp 0x623cae
mov eax, dword [ebp - 0x1b4]
push eax
push 0x4439c0
call esi
test eax, eax
jne 0x6230cc
mov ecx, dword [0x96cda0]
fld dword [ecx]
nop
call fcn.009a9f5b
mov word [0x96dfb4], ax
call fcn.006d38e0
jmp 0x623cae
mov edx, dword [ebp - 0x1b4]
push edx
push 0x4439e0
call esi
test eax, eax
jne 0x623139
mov edx, dword [0x96cda0]
fld dword [0x4014ac]
fcomp dword [edx]
fnstsw ax
test ah, 1
jne 0x6230fa
mov ecx, 1
jmp 0x6230fc
xor ecx, ecx
fld dword [edx]
fcomp dword [0x401928]
fnstsw ax
test ah, 1
jne 0x623112
mov eax, 1
jmp 0x623114
xor eax, eax
or ecx, eax
jne 0x62312b
fld dword [edx]
nop
call fcn.009a9f64
mov word [0x96dfac], ax
jmp 0x623cae
mov word [0x96dfac], 0
jmp 0x623cae
mov eax, dword [ebp - 0x1b4]
push eax
push 0x443a0c
call esi
test eax, eax
jne 0x6231a6
mov edx, dword [0x96cda0]
fld dword [0x4014ac]
fcomp dword [edx]
fnstsw ax
test ah, 1
jne 0x623167
mov ecx, 1
jmp 0x623169
xor ecx, ecx
fld dword [edx]
fcomp dword [0x401928]
fnstsw ax
test ah, 1
jne 0x62317f
mov eax, 1
jmp 0x623181
xor eax, eax
or ecx, eax
jne 0x623198
fld dword [edx]
nop
call fcn.009a9f6d
mov word [0x96dfae], ax
jmp 0x623cae
mov word [0x96dfae], 0
jmp 0x623cae
mov ecx, dword [ebp - 0x1b4]
push ecx
push 0x443a2c
call esi
test eax, eax
jne 0x6232ea
mov eax, dword [0x96cda0]
mov edx, dword [eax]
mov dword [0x96d1a0], edx
mov eax, dword [eax + 4]
mov dword [0x96d19c], eax
mov eax, dword [0x96e034]
test eax, eax
jne 0x6231eb
push 0x96e034
push 0x42fb24
call edi
mov eax, dword [0x96e034]
mov ecx, dword [eax]
push eax
call dword [ecx + 0x2fc]
mov ebx, dword [0xa34258]
lea edx, [ebp - 0x68]
push eax
push edx
call ebx
fld dword [0x96d1a0]
cmp dword [section..data], 0
jne 0x623218
fdiv dword [0x96d1c4]
jmp 0x623223
push dword [0x96d1c4]
call fcn.00406678
mov esi, eax
mov ecx, dword [esi]
push ecx
fnstsw ax
test al, 0xd
jne 0x625655
fstp dword [esp]
push esi
call dword [ecx + 0x8c]
test eax, eax
fnclex
jge 0x623254
push 0x8c
push 0x43c178
push esi
push eax
nop
call fcn.009a9f7f
mov edi, dword [0x40130c]
lea ecx, [ebp - 0x68]
call edi
mov eax, dword [0x96e034]
test eax, eax
jne 0x62327d
push 0x96e034
push 0x42fb24
nop
call int.009a9f88
mov eax, dword [0x96e034]
mov edx, dword [eax]
push eax
call dword [edx + 0x2fc]
push eax
lea eax, [ebp - 0x68]
push eax
call ebx
fld dword [0x96d19c]
cmp dword [section..data], 0
jne 0x6232a4
fdiv dword [0x96d1c4]
jmp 0x6232af
push dword [0x96d1c4]
call fcn.00406678
mov esi, eax
mov ecx, dword [esi]
push ecx
fnstsw ax
test al, 0xd
jne 0x625655
fstp dword [esp]
push esi
call dword [ecx + 0x84]
test eax, eax
fnclex
jge 0x6232e0
push 0x84
push 0x43c178
push esi
push eax
nop
call fcn.009a9f91
lea ecx, [ebp - 0x68]
call edi
jmp 0x623cae
mov edx, dword [ebp - 0x1b4]
push edx
push 0x443a50
call esi
test eax, eax
jne 0x623cae
mov eax, dword [0x96e034]
test eax, eax
jne 0x62331a
push 0x96e034
push 0x42fb24
call edi
mov eax, dword [0x96e034]
mov ecx, dword [eax]
push eax
call dword [ecx + 0x2fc]
mov edi, dword [0xa3425c]
lea edx, [ebp - 0x68]
push eax
push edx
call edi
mov esi, eax
lea ecx, [ebp - 0x16c]
push ecx
push esi
mov eax, dword [esi]
call dword [eax + 0x108]
test eax, eax
fnclex
jge 0x623356
push 0x108
push 0x43c178
push esi
push eax
call ebx
mov edx, dword [0x96cbc0]
mov ebx, dword [0xa34260]
lea ecx, [ebp - 0x68]
fld dword [edx]
fsub dword [0x96d208]
cmp dword [section..data], 0
jne 0x62337e
fdiv dword [0x96d1c4]
jmp 0x623389
push dword [0x96d1c4]
call fcn.00406678
fld dword [ebp - 0x16c]
cmp dword [section..data], 0
jne 0x6233a0
fdiv dword [0x401320]
jmp 0x6233ab
push dword [0x401320]
call fcn.00406678
fsubp st(1)
fstp dword [ebp - 0x50]
fnstsw ax
test al, 0xd
jne 0x625655
call ebx
mov eax, dword [0x96e034]
test eax, eax
jne 0x6233da
push 0x96e034
push 0x42fb24
nop
call fcn.009a9fac
mov eax, dword [0x96e034]
mov ecx, dword [eax]
push eax
call dword [ecx + 0x2fc]
lea edx, [ebp - 0x68]
push eax
push edx
call edi
mov esi, eax
lea ecx, [ebp - 0x16c]
push ecx
push esi
mov eax, dword [esi]
call dword [eax + 0x110]
test eax, eax
fnclex
jge 0x623414
push 0x110
push 0x43c178
push esi
push eax
nop
call fcn.009a9fb5
mov edx, dword [0x96cbdc]
lea ecx, [ebp - 0x68]
fld dword [0x96d214]
fsub dword [edx]
cmp dword [section..data], 0
jne 0x623436
fdiv dword [0x96d1c4]
jmp 0x623441
push dword [0x96d1c4]
call fcn.00406678
fld dword [ebp - 0x16c]
cmp dword [section..data], 0
jne 0x623458
fdiv dword [0x401320]
jmp 0x623463
push dword [0x401320]
call fcn.00406678
fsubp st(1)
fstp dword [ebp - 0x58]
fnstsw ax
test al, 0xd
jne 0x625655
call ebx
cmp dword [0x96d234], 0xffffff
je 0x62355a
mov eax, dword [0x96e034]
test eax, eax
jne 0x6234a2
push 0x96e034
push 0x42fb24
nop
call fcn.009a9fbe
mov eax, dword [0x96e034]
mov ecx, dword [eax]
push eax
call dword [ecx + 0x330]
lea edx, [ebp - 0x68]
push eax
push edx
call edi
mov esi, eax
push 0xffffff
push esi
mov eax, dword [esi]
call dword [eax + 0x54]
test eax, eax
fnclex
jge 0x6234d4
push 0x54
push 0x43c178
push esi
push eax
nop
call fcn.009a9fc7
lea ecx, [ebp - 0x68]
call ebx
mov eax, dword [0x96e21c]
test eax, eax
jne 0x6234f7
push 0x96e21c
push 0x411cd8
nop
call fcn.009a9fd0
mov eax, dword [0x96e21c]
mov ecx, dword [eax]
push eax
call dword [ecx + 0x328]
lea edx, [ebp - 0x68]
push eax
push edx
call edi
mov esi, eax
lea ecx, [ebp - 0x168]
push ecx
push esi
mov eax, dword [esi]
call dword [eax + 0xe0]
test eax, eax
fnclex
jge 0x623531
push 0xe0
push 0x43cab0
push esi
push eax
nop
call fcn.009a9fd9
mov si, word [ebp - 0x168]
lea ecx, [ebp - 0x68]
call ebx
neg si
sbb esi, esi
add esi, 4
mov word [0x96d250], si
call fcn.00689af0
mov word [0x96d250], 0
mov eax, dword [0x96e034]
test eax, eax
jne 0x623578
push 0x96e034
push 0x42fb24
nop
call fcn.009a9fe2
mov eax, dword [0x96e034]
mov edx, dword [eax]
push eax
call dword [edx + 0x2fc]
push eax
lea eax, [ebp - 0x68]
push eax
call edi
mov edx, dword [0x96d1a8]
mov esi, eax
push edx
push esi
mov ecx, dword [esi]
call dword [ecx + 0x7c]
test eax, eax
fnclex
jge 0x6235ac
push 0x7c
push 0x43c178
push esi
push eax
nop
call fcn.009a9feb
lea ecx, [ebp - 0x68]
call ebx
mov eax, dword [0x96e034]
test eax, eax
jne 0x6235cf
push 0x96e034
push 0x42fb24
nop
call fcn.009a9ff4
mov eax, dword [0x96e034]
mov ecx, dword [eax]
push eax
call dword [ecx + 0x2fc]
lea edx, [ebp - 0x68]
push eax
push edx
call edi
mov ecx, dword [0x96d1a4]
mov esi, eax
push ecx
push esi
mov eax, dword [esi]
call dword [eax + 0x74]
test eax, eax
fnclex
jge 0x623603
push 0x74
push 0x43c178
push esi
push eax
nop
call fcn.009a9ffd
lea ecx, [ebp - 0x68]
call ebx
mov eax, dword [0x96e034]
test eax, eax
jne 0x623626
push 0x96e034
push 0x42fb24
nop
call fcn.009aa006
mov eax, dword [0x96e034]
mov edx, dword [eax]
push eax
call dword [edx + 0x2fc]
push eax
lea eax, [ebp - 0x68]
push eax
call edi
mov esi, eax
push 0xffffffffffffffff
push esi
mov ecx, dword [esi]
call dword [ecx + 0x9c]
test eax, eax
fnclex
jge 0x62365b
push 0x9c
push 0x43c178
push esi
push eax
nop
call fcn.009aa00f
lea ecx, [ebp - 0x68]
call ebx
mov eax, dword [0x96e034]
test eax, eax
jne 0x62367e
push 0x96e034
push 0x42fb24
nop
call fcn.009aa018
mov eax, dword [0x96e034]
mov edx, dword [eax]
push eax
call dword [edx + 0x2fc]
push eax
lea eax, [ebp - 0x68]
push eax
call edi
mov esi, eax
push 0xffffffffffffffff
push esi
mov ecx, dword [esi]
call dword [ecx + 0x94]
test eax, eax
fnclex
jge 0x6236b3
push 0x94
push 0x43c178
push esi
push eax
nop
call fcn.009aa021
lea ecx, [ebp - 0x68]
call ebx
mov eax, dword [0x96e034]
test eax, eax
jne 0x6236d6
push 0x96e034
push 0x42fb24
nop
call fcn.009aa02a
mov eax, dword [0x96e034]
mov edx, dword [eax]
push eax
call dword [edx + 0x330]
push eax
lea eax, [ebp - 0x68]
push eax
call edi
mov esi, eax
lea edx, [ebp - 0x6c]
push edx
push esi
mov ecx, dword [esi]
call dword [ecx + 0x188]
test eax, eax
fnclex
jge 0x62370d
push 0x188
push 0x43c178
push esi
push eax
nop
call fcn.009aa033
mov eax, dword [0x96e034]
test eax, eax
jne 0x62372b
push 0x96e034
push 0x42fb24
nop
call fcn.009aa03c
mov eax, dword [0x96e034]
mov ecx, dword [eax]
push eax
call dword [ecx + 0x2fc]
lea edx, [ebp - 0x74]
push eax
push edx
call edi
mov edi, dword [ebp - 0x58]
mov ecx, 0xa
mov dword [ebp - 0x12c], edi
mov edi, dword [ebp - 0x50]
mov dword [ebp - 0x11c], edi
mov edi, ecx
mov dword [ebp - 0x114], edi
mov dword [ebp - 0x104], edi
mov edi, dword [ebp - 0x6c]
sub esp, 0x10
mov dword [ebp - 0x208], edi
mov edi, esp
mov esi, eax
mov eax, 0x80020004
mov dword [edi], ecx
mov ecx, dword [ebp - 0x160]
mov edx, eax
mov dword [ebp - 0x10c], eax
mov dword [edi + 4], ecx
mov dword [ebp - 0xfc], eax
sub esp, 0x10
mov dword [ebp - 0x134], 4
mov dword [edi + 8], eax
mov eax, dword [ebp - 0x158]
mov ecx, esp
sub esp, 0x10
mov dword [edi + 0xc], eax
mov eax, 0xa
mov dword [ecx], eax
mov eax, dword [ebp - 0x150]
mov dword [ebp - 0x124], 4
mov dword [ebp - 0x6c], 0
mov dword [ecx + 4], eax
mov eax, 0xa
mov ebx, dword [esi]
mov dword [ecx + 8], edx
mov edx, dword [ebp - 0x148]
mov dword [ecx + 0xc], edx
mov edx, dword [ebp - 0x140]
mov ecx, esp
sub esp, 0x10
mov dword [ecx], eax
mov eax, 0x80020004
mov dword [ecx + 4], edx
mov edx, dword [ebp - 0x134]
mov dword [ecx + 8], eax
mov eax, dword [ebp - 0x138]
mov dword [ecx + 0xc], eax
mov eax, dword [ebp - 0x130]
mov ecx, esp
sub esp, 0x10
mov dword [ecx], edx
mov edx, dword [ebp - 0x12c]
mov dword [ecx + 4], eax
mov eax, dword [ebp - 0x128]
mov dword [ecx + 8], edx
mov edx, dword [ebp - 0x124]
mov dword [ecx + 0xc], eax
mov eax, dword [ebp - 0x120]
mov ecx, esp
sub esp, 0x10
mov dword [ecx], edx
mov edx, dword [ebp - 0x11c]
mov dword [ecx + 4], eax
mov eax, dword [ebp - 0x118]
mov dword [ecx + 8], edx
mov edx, dword [ebp - 0x114]
mov dword [ecx + 0xc], eax
mov eax, dword [ebp - 0x110]
mov ecx, esp
mov dword [ecx], edx
mov edx, dword [ebp - 0x10c]
mov dword [ecx + 4], eax
mov dword [ecx + 8], edx
mov eax, dword [ebp - 0x108]
mov edx, dword [ebp - 0x104]
sub esp, 0x10
mov dword [ecx + 0xc], eax
mov eax, dword [ebp - 0x100]
mov ecx, esp
mov edi, dword [0xa34264]
push 0
mov dword [ecx], edx
mov edx, dword [ebp - 0xfc]
push 0
mov dword [ecx + 4], eax
mov eax, dword [ebp - 0xf8]
mov dword [ecx + 8], edx
lea edx, [ebp - 0x70]
mov dword [ecx + 0xc], eax
mov ecx, dword [ebp - 0x208]
push ecx
push edx
call edi
push eax
push esi
call dword [ebx + 0x280]
test eax, eax
fnclex
jge 0x6238d9
mov ebx, dword [0xa34268]
push 0x280
push 0x43c178
push esi
push eax
call ebx
jmp 0x6238df
mov ebx, dword [0xa3426c]
lea eax, [ebp - 0x74]
lea ecx, [ebp - 0x70]
push eax
lea edx, [ebp - 0x68]
push ecx
push edx
push 3
nop
call fcn.009aa060
mov eax, dword [0x96e034]
add esp, 0x10
test eax, eax
jne 0x623914
push 0x96e034
push 0x42fb24
nop
call fcn.009aa069
mov eax, dword [0x96e034]
mov ecx, dword [eax]
push eax
call dword [ecx + 0x330]
lea edx, [ebp - 0x68]
push eax
push edx
call edi
mov esi, eax
push 0
push esi
mov eax, dword [esi]
call dword [eax + 0x9c]
test eax, eax
fnclex
jge 0x623945
push 0x9c
push 0x43c178
push esi
push eax
call ebx
lea ecx, [ebp - 0x68]
nop
call fcn.009aa072
mov eax, dword [0x96e034]
test eax, eax
jne 0x62396c
push 0x96e034
push 0x42fb24
nop
call fcn.009aa07b
mov eax, dword [0x96e034]
mov ecx, dword [eax]
push eax
call dword [ecx + 0x330]
lea edx, [ebp - 0x68]
push eax
push edx
call edi
mov esi, eax
push 0
push esi
mov eax, dword [esi]
call dword [eax + 0x94]
test eax, eax
fnclex
jge 0x62399d
push 0x94
push 0x43c178
push esi
push eax
call ebx
lea ecx, [ebp - 0x68]
nop
call fcn.009aa084
lea ecx, [ebp - 0x168]
mov dword [ebp - 0x168], 0x65
push ecx
call fcn.00870360
cmp word [0x96c098], 6
jne 0x623a8b
mov eax, dword [0x96e034]
test eax, eax
jne 0x6239e8
push 0x96e034
push 0x42fb24
nop
call fcn.009aa08d
mov eax, dword [0x96e034]
mov edx, dword [eax]
push eax
call dword [edx + 0x2fc]
push eax
lea eax, [ebp - 0x68]
push eax
call edi
mov esi, eax
lea edx, [ebp - 0x6c]
push edx
push esi
mov ecx, dword [esi]
call dword [ecx + 0x188]
test eax, eax
fnclex
jge 0x623a1b
push 0x188
push 0x43c178
push esi
push eax
call ebx
mov eax, dword [0x9706d8]
test eax, eax
jne 0x623a34
push 0x9706d8
push 0x43c168
nop
call fcn.009aa096
mov ecx, dword [0x96c2ac]
mov eax, dword [ebp - 0x6c]
mov esi, dword [0x9706d8]
push ecx
lea edx, [ebp - 0x70]
push eax
mov dword [ebp - 0x6c], 0
mov ebx, dword [esi]
push edx
call edi
push eax
push esi
call dword [ebx + 0x40]
test eax, eax
fnclex
jge 0x623a72
mov ebx, dword [0xa34270]
push 0x40
push 0x43c158
push esi
push eax
call ebx
jmp 0x623a78
mov ebx, dword [0xa34274]
lea eax, [ebp - 0x70]
lea ecx, [ebp - 0x68]
push eax
push ecx
push 2
nop
call fcn.009aa0b1
add esp, 0xc
mov eax, dword [0x96e034]
test eax, eax
jne 0x623aa9
push 0x96e034
push 0x42fb24
nop
call fcn.009aa0ba
mov eax, dword [0x96e034]
mov edx, dword [eax]
push eax
call dword [edx + 0x2fc]
push eax
lea eax, [ebp - 0x68]
push eax
call edi
mov esi, eax
push esi
mov ecx, dword [esi]
call dword [ecx + 0x278]
test eax, eax
fnclex
jge 0x623ad8
push 0x278
push 0x43c178
push esi
push eax
call ebx
lea ecx, [ebp - 0x68]
nop
call fcn.009aa0c3
mov eax, dword [0x96e034]
test eax, eax
jne 0x623aff
push 0x96e034
push 0x42fb24
nop
call fcn.009aa0cc
mov eax, dword [0x96e034]
mov edx, dword [eax]
push eax
call dword [edx + 0x2fc]
push eax
lea eax, [ebp - 0x68]
push eax
call edi
mov esi, eax
push 0
push esi
mov ecx, dword [esi]
call dword [ecx + 0x9c]
test eax, eax
fnclex
jge 0x623b30
push 0x9c
push 0x43c178
push esi
push eax
call ebx
lea ecx, [ebp - 0x68]
nop
call fcn.009aa0d5
mov eax, dword [0x96e034]
test eax, eax
jne 0x623b57
push 0x96e034
push 0x42fb24
nop
call fcn.009aa0de
mov eax, dword [0x96e034]
mov edx, dword [eax]
push eax
call dword [edx + 0x2fc]
push eax
lea eax, [ebp - 0x68]
push eax
call edi
mov esi, eax
push 0
push esi
mov ecx, dword [esi]
call dword [ecx + 0x94]
test eax, eax
fnclex
jge 0x623b88
push 0x94
push 0x43c178
push esi
push eax
call ebx
lea ecx, [ebp - 0x68]
nop
call fcn.009aa0e7
mov eax, dword [0x96e034]
test eax, eax
jne 0x623baf
push 0x96e034
push 0x42fb24
nop
call fcn.009aa0f0
mov eax, dword [0x96e034]
mov edx, dword [eax]
push eax
call dword [edx + 0x330]
push eax
lea eax, [ebp - 0x68]
push eax
call edi
mov esi, eax
push 0xffffffffffffffff
push esi
mov ecx, dword [esi]
call dword [ecx + 0x9c]
test eax, eax
fnclex
jge 0x623be0
push 0x9c
push 0x43c178
push esi
push eax
call ebx
lea ecx, [ebp - 0x68]
nop
call fcn.009aa0f9
mov eax, dword [0x96e034]
test eax, eax
jne 0x623c07
push 0x96e034
push 0x42fb24
nop
call fcn.009aa102
mov eax, dword [0x96e034]
mov edx, dword [eax]
push eax
call dword [edx + 0x330]
push eax
lea eax, [ebp - 0x68]
push eax
call edi
mov esi, eax
push 0xffffffffffffffff
push esi
mov ecx, dword [esi]
call dword [ecx + 0x94]
test eax, eax
fnclex
jge 0x623c38
push 0x94
push 0x43c178
push esi
push eax
call ebx
lea ecx, [ebp - 0x68]
nop
call fcn.009aa10b
cmp dword [0x96d234], 0xffffff
je 0x623cae
mov eax, dword [0x96e034]
test eax, eax
jne 0x623c6b
push 0x96e034
push 0x42fb24
nop
call fcn.009aa114
mov eax, dword [0x96e034]
mov edx, dword [eax]
push eax
call dword [edx + 0x330]
push eax
lea eax, [ebp - 0x68]
push eax
call edi
mov edx, dword [0x96d234]
mov esi, eax
push edx
push esi
mov ecx, dword [esi]
call dword [ecx + 0x54]
test eax, eax
fnclex
jge 0x623c9b
push 0x54
push 0x43c178
push esi
push eax
call ebx
lea ecx, [ebp - 0x68]
nop
call fcn.009aa11d
call fcn.005c33b0
call fcn.00689af0
cmp word [0x96d5e6], 6
jle 0x624d31
cmp word [0x96c9d4], 0
je 0x624d28
mov di, word [0x96d5f8]
neg di
sbb edi, edi
and edi, 0xa
add edi, 3
cmp word [0x96c9ca], 0
mov dword [ebp - 0x1c], edi
jne 0x623fec
mov eax, dword [0x96c9d0]
push eax
push 0x43c0f0
nop
call fcn.009aa126
test eax, eax
je 0x623fec
cmp word [0x96d5f8], 0
je 0x623d3b
mov cx, word [0x96c9c8]
mov dx, word [0x96c9f0]
mov eax, dword [0x96c9d0]
push 0
push ecx
push edx
push eax
push 0
push edi
push 0x443348
nop
call fcn.009aa12f
jmp 0x623fe0
movsx ebx, word [0x96d4e4]
dec ebx
cmp ebx, 0xd
jb 0x623d4e
nop
call fcn.009aa138
movsx esi, word [0x96d4e4]
dec esi
cmp esi, 0xd
jb 0x623d61
nop
call fcn.009aa141
mov eax, dword [0x96d504]
mov cx, word [eax + ebx*2]
add cx, 1
jo 0x62565a
mov word [eax + esi*2], cx
movsx esi, word [0x96d4e4]
dec esi
cmp esi, 0xd
jb 0x623d8b
nop
call fcn.009aa14a
mov edx, dword [0x96d504]
mov cx, word [0x96c9c8]
mov ax, word [edx + esi*2]
mov dx, word [0x96c9f0]
push eax
mov eax, dword [0x96c9d0]
push ecx
push edx
push eax
push 0
push edi
push 0x443348
nop
call fcn.009aa153
add esp, 0x1c
cmp word [0x96c0ac], 0
je 0x623ee1
call fcn.008d9350
mov eax, dword [0x96e1cc]
test eax, eax
jne 0x623dee
push 0x96e1cc
push 0x40dfd0
nop
call fcn.009aa15c
mov eax, dword [0x96e1cc]
mov ecx, dword [eax]
push eax
call dword [ecx + 0x318]
lea edx, [ebp - 0x68]
push eax
push edx
nop
call fcn.009aa165
movsx esi, word [0x96d4e4]
dec esi
mov ebx, eax
cmp esi, 0xd
mov dword [ebp - 0xfc], 0x80020004
mov dword [ebp - 0x104], 0xa
jb 0x623e2b
nop
call fcn.009aa16e
mov ecx, dword [ebp - 0x104]
mov edx, dword [ebp - 0x100]
sub esp, 0x10
mov edi, dword [ebx]
mov eax, esp
mov dword [eax], ecx
mov ecx, dword [ebp - 0xfc]
mov dword [eax + 4], edx
mov edx, dword [ebp - 0xf8]
mov dword [eax + 8], ecx
mov dword [eax + 0xc], edx
mov eax, dword [0x96d504]
mov cx, word [eax + esi*2]
push ecx
nop
call fcn.009aa177
mov edx, eax
lea ecx, [ebp - 0x5c]
nop
call fcn.009aa180
mov esi, dword [0x401088]
push eax
push 0x43def8
call esi
mov edx, eax
lea ecx, [ebp - 0x60]
nop
call fcn.009aa189
mov edx, dword [0x96c9d0]
push eax
push edx
call esi
mov edx, eax
lea ecx, [ebp - 0x64]
nop
call fcn.009aa192
push eax
push ebx
call dword [edi + 0x1ec]
test eax, eax
fnclex
jge 0x623ebe
push 0x1ec
push 0x440b64
push ebx
push eax
nop
call fcn.009aa19b
lea eax, [ebp - 0x64]
lea ecx, [ebp - 0x60]
push eax
lea edx, [ebp - 0x5c]
push ecx
push edx
push 3
nop
call fcn.009aa1a4
add esp, 0x10
lea ecx, [ebp - 0x68]
nop
call fcn.009aa1ad
mov edi, dword [ebp - 0x1c]
xor ebx, ebx
cmp word [0x96c0bc], bx
je 0x623fe3
mov eax, dword [0x96e034]
mov word [0x96c0bc], bx
cmp eax, ebx
mov word [0x96c0ba], bx
jne 0x623f1c
push 0x96e034
push 0x42fb24
nop
call fcn.009aa1b6
mov eax, dword [0x96e034]
mov ecx, dword [eax]
push 0x43cddc
push ebx
push 3
push eax
call dword [ecx + 0x488]
mov esi, dword [0xa34278]
lea edx, [ebp - 0x68]
push eax
push edx
call esi
push eax
lea eax, [ebp - 0x84]
push eax
nop
call fcn.009aa1c8
add esp, 0x10
push eax
nop
call fcn.009aa1d1
lea ecx, [ebp - 0x6c]
push eax
push ecx
call esi
mov esi, eax
lea eax, [ebp - 0x70]
lea ecx, [ebp - 0x94]
mov dword [ebp - 0x8c], 0x27
mov dword [ebp - 0x94], 2
mov edx, dword [esi]
push eax
push ecx
push esi
call dword [edx + 0x24]
cmp eax, ebx
fnclex
jge 0x623f95
push 0x24
push 0x43cddc
push esi
push eax
nop
call fcn.009aa1da
mov eax, dword [ebp - 0x70]
push ebx
push eax
mov esi, eax
mov edx, dword [eax]
call dword [edx + 0x38]
cmp eax, ebx
fnclex
jge 0x623fb6
push 0x38
push 0x43cdec
push esi
push eax
nop
call fcn.009aa1e3
lea eax, [ebp - 0x70]
lea ecx, [ebp - 0x6c]
push eax
lea edx, [ebp - 0x68]
push ecx
push edx
push 3
nop
call fcn.009aa1ec
lea eax, [ebp - 0x94]
lea ecx, [ebp - 0x84]
push eax
push ecx
push 2
nop
call fcn.009aa1f5
add esp, 0x1c
mov word [0x96c9ca], 1
mov edx, dword [0x96c9f0]
mov ax, word [0x96c9ca]
mov dword [ebp - 0x1dc], edx
mov word [ebp - 0x18], ax
mov ax, word [ebp - 0x18]
cmp ax, word [ebp - 0x1dc]
jg 0x624d1f
movsx esi, ax
dec esi
cmp esi, 0xc
jb 0x624022
nop
call fcn.009aa1fe
mov ecx, dword [0x96ca28]
movsx eax, word [ecx + esi*2]
dec eax
cmp eax, 0xcd
ja case.0x624040.15
xor edx, edx
mov dl, byte [eax + 0x625504]
jmp dword [edx*4 + 0x6254c8]
movsx esi, word [ebp - 0x18]
mov edi, dword [0xa3427c]
dec esi
cmp esi, 0xc
jb 0x624059
call edi
mov eax, dword [0x96cba4]
movsx eax, word [eax + esi*2]
add eax, 0xfffffff6
cmp eax, 0x70
ja case.0x624076.13
xor ecx, ecx
mov cl, byte [eax + 0x6255e4]
jmp dword [ecx*4 + 0x6255d4]
movsx eax, word [ebp - 0x18]
dec eax
cmp eax, 0xc
mov dword [ebp - 0x194], eax
jb 0x62408f
call edi
movsx eax, word [ebp - 0x18]
dec eax
cmp eax, 0xc
mov dword [ebp - 0x190], eax
jb 0x6240a1
call edi
movsx eax, word [ebp - 0x18]
dec eax
cmp eax, 0xc
mov dword [ebp - 0x18c], eax
jb 0x6240b3
call edi
movsx eax, word [ebp - 0x18]
dec eax
cmp eax, 0xc
mov dword [ebp - 0x188], eax
jb 0x6240c5
call edi
movsx eax, word [ebp - 0x18]
dec eax
cmp eax, 0xc
mov dword [ebp - 0x184], eax
jb 0x6240d7
call edi
movsx eax, word [ebp - 0x18]
dec eax
cmp eax, 0xc
mov dword [ebp - 0x180], eax
jb 0x6240e9
call edi
movsx ebx, word [ebp - 0x18]
dec ebx
cmp ebx, 0xc
jb 0x6240f9
nop
call fcn.009aa210
movsx edi, word [ebp - 0x18]
dec edi
cmp edi, 0xc
jb 0x624109
nop
call fcn.009aa219
movsx esi, word [ebp - 0x18]
dec esi
cmp esi, 0xc
jb 0x624119
nop
call fcn.009aa222
mov edx, dword [0x96cc4c]
movsx esi, word [edx + esi*2]
add esi, 0x8000
cmp esi, 0x10000
jb 0x624137
nop
call fcn.009aa22b
mov eax, dword [0x96cf88]
mov ecx, dword [ebp - 0x194]
mov edx, dword [eax + ecx*4]
mov eax, dword [0x96cf6c]
mov ecx, dword [ebp - 0x190]
push edx
mov edx, dword [eax + ecx*4]
mov eax, dword [0x96cf18]
mov ecx, dword [ebp - 0x18c]
push edx
mov edx, dword [eax + ecx*4]
mov eax, dword [0x96cefc]
mov ecx, dword [ebp - 0x188]
push edx
mov edx, dword [eax + ecx*4]
mov eax, dword [0x96cbdc]
mov ecx, dword [ebp - 0x184]
push edx
mov edx, dword [eax + ecx*4]
mov eax, dword [0x96cbc0]
mov ecx, dword [ebp - 0x180]
push edx
mov edx, dword [eax + ecx*4]
mov eax, dword [0x96cee0]
push edx
mov edx, dword [0x96cec4]
mov cx, word [eax + ebx*2]
mov ax, word [edx + edi*2]
push ecx
mov ecx, dword [0x96d37c]
push eax
mov eax, dword [ebp - 0x1c]
mov dx, word [ecx + esi*2]
push edx
push 0x6b
push eax
push 0x443a70
nop
call fcn.009aa234
add esp, 0x30
jmp 0x624d05
movsx eax, word [ebp - 0x18]
dec eax
cmp eax, 0xc
mov dword [ebp - 0x1a8], eax
jb 0x6241dc
call edi
movsx eax, word [ebp - 0x18]
dec eax
cmp eax, 0xc
mov dword [ebp - 0x1a4], eax
jb 0x6241ee
call edi
movsx eax, word [ebp - 0x18]
dec eax
cmp eax, 0xc
mov dword [ebp - 0x1a0], eax
jb 0x624200
call edi
movsx eax, word [ebp - 0x18]
dec eax
cmp eax, 0xc
mov dword [ebp - 0x19c], eax
jb 0x624212
call edi
movsx eax, word [ebp - 0x18]
dec eax
cmp eax, 0xc
mov dword [ebp - 0x198], eax
jb 0x624224
call edi
movsx eax, word [ebp - 0x18]
dec eax
cmp eax, 0xc
mov dword [ebp - 0x194], eax
jb 0x624236
call edi
movsx eax, word [ebp - 0x18]
dec eax
cmp eax, 0xc
mov dword [ebp - 0x190], eax
jb 0x624248
call edi
movsx eax, word [ebp - 0x18]
dec eax
cmp eax, 0xc
mov dword [ebp - 0x18c], eax
jb 0x62425a
call edi
movsx esi, word [ebp - 0x18]
dec esi
cmp esi, 0xc
jb 0x624266
call edi
mov ecx, dword [0x96ccd8]
movsx eax, word [ecx + esi*2]
add eax, 0x8000
cmp eax, 0x10000
mov dword [ebp - 0x188], eax
jb 0x624284
call edi
movsx eax, word [ebp - 0x18]
dec eax
cmp eax, 0xc
mov dword [ebp - 0x180], eax
jb 0x624296
call edi
movsx edi, word [ebp - 0x18]
mov ebx, dword [0xa34280]
dec edi
cmp edi, 0xc
jb 0x6242a8
call ebx
movsx esi, word [ebp - 0x18]
dec esi
cmp esi, 0xc
jb 0x6242b4
call ebx
mov edx, dword [0x96cc4c]
movsx esi, word [edx + esi*2]
add esi, 0x8000
cmp esi, 0x10000
jb 0x6242ce
call ebx
movsx ebx, word [ebp - 0x18]
dec ebx
cmp ebx, 0xc
jb 0x6242de
nop
call fcn.009aa246
mov eax, dword [0x96cf88]
mov ecx, dword [ebp - 0x1a8]
mov edx, dword [eax + ecx*4]
mov eax, dword [0x96cf6c]
mov ecx, dword [ebp - 0x1a4]
push edx
mov edx, dword [eax + ecx*4]
mov eax, dword [0x96cf18]
mov ecx, dword [ebp - 0x1a0]
push edx
mov edx, dword [eax + ecx*4]
mov eax, dword [0x96cefc]
mov ecx, dword [ebp - 0x19c]
push edx
mov edx, dword [eax + ecx*4]
mov eax, dword [0x96cbdc]
mov ecx, dword [ebp - 0x198]
push edx
mov edx, dword [eax + ecx*4]
mov eax, dword [0x96cbc0]
mov ecx, dword [ebp - 0x194]
push edx
mov edx, dword [eax + ecx*4]
mov eax, dword [0x96cf50]
mov ecx, dword [ebp - 0x190]
push edx
mov dx, word [eax + ecx*2]
mov eax, dword [0x96cf34]
mov ecx, dword [ebp - 0x18c]
push edx
mov dx, word [eax + ecx*2]
mov eax, dword [0x96d37c]
mov ecx, dword [ebp - 0x188]
push edx
mov dx, word [eax + ecx*2]
mov ecx, dword [0x96cee0]
push edx
mov edx, dword [ebp - 0x180]
mov cx, word [ecx + edx*2]
mov edx, dword [0x96cec4]
push ecx
mov cx, word [edx + edi*2]
mov dx, word [eax + esi*2]
mov eax, dword [0x96cba4]
push ecx
push edx
mov edx, dword [ebp - 0x1c]
mov cx, word [eax + ebx*2]
push ecx
push edx
push 0x443a84
nop
call fcn.009aa24f
add esp, 0x3c
jmp 0x624d05
movsx edi, word [ebp - 0x18]
dec edi
cmp edi, 0xc
jb 0x6243ba
nop
call fcn.009aa258
movsx ebx, word [ebp - 0x18]
dec ebx
cmp ebx, 0xc
jb 0x6243ca
nop
call fcn.009aa261
movsx esi, word [ebp - 0x18]
dec esi
cmp esi, 0xc
jb 0x6243da
nop
call fcn.009aa26a
mov eax, dword [0x96cd68]
mov edx, dword [0x96cbdc]
mov ecx, dword [eax + edi*4]
mov eax, dword [edx + ebx*4]
push ecx
mov ecx, dword [0x96cbc0]
push eax
mov eax, dword [ebp - 0x1c]
mov edx, dword [ecx + esi*4]
push edx
push 0x65
push eax
push 0x443a98
nop
call fcn.009aa273
add esp, 0x18
cmp word [0x96c0e6], 0
je 0x624d05
lea ecx, [ebp - 0x18]
lea edx, [ebp - 0x168]
push ecx
push edx
mov dword [ebp - 0x168], 0xa
call fcn.006fe120
jmp 0x624d05
movsx esi, word [ebp - 0x18]
dec esi
cmp esi, 0xc
jb 0x624444
call edi
mov eax, dword [0x96cb6c]
fld dword [eax + esi*4]
fcomp dword [0x4014ac]
fnstsw ax
test ah, 0x40
je 0x624460
mov ebx, 1
jmp 0x624462
xor ebx, ebx
movsx esi, word [ebp - 0x18]
dec esi
cmp esi, 0xc
jb 0x62446e
call edi
mov ecx, dword [0x96cb88]
fld dword [ecx + esi*4]
fcomp dword [0x4014ac]
fnstsw ax
test ah, 0x40
je 0x62448b
mov eax, 1
jmp 0x62448d
xor eax, eax
test eax, ebx
jne 0x6245b7
movsx edi, word [ebp - 0x18]
dec edi
cmp edi, 0xc
jb 0x6244a5
nop
call fcn.009aa27c
movsx ebx, word [ebp - 0x18]
dec ebx
cmp ebx, 0xc
jb 0x6244b5
nop
call fcn.009aa285
movsx esi, word [ebp - 0x18]
dec esi
cmp esi, 0xc
jb 0x6244c5
nop
call fcn.009aa28e
mov ecx, dword [0x96cbc0]
mov edx, dword [0x96cb6c]
fld dword [ecx + edi*4]
fsub dword [edx + ebx*4]
fstp dword [ecx + esi*4]
fnstsw ax
test al, 0xd
jne 0x625655
movsx esi, word [ebp - 0x18]
dec esi
cmp esi, 0xc
jb 0x6244f4
nop
call fcn.009aa297
movsx edi, word [ebp - 0x18]
dec edi
cmp edi, 0xc
jb 0x624504
nop
call fcn.009aa2a0
movsx ebx, word [ebp - 0x18]
dec ebx
cmp ebx, 0xc
jb 0x624514
nop
call fcn.009aa2a9
mov ecx, dword [0x96cbdc]
mov eax, dword [0x96cb88]
fld dword [ecx + esi*4]
fsub dword [eax + edi*4]
fstp dword [ecx + ebx*4]
fnstsw ax
test al, 0xd
jne 0x625655
movsx esi, word [ebp - 0x18]
dec esi
cmp esi, 0xc
jb 0x624542
nop
call fcn.009aa2b2
movsx ebx, word [ebp - 0x18]
mov edi, dword [0xa34284]
dec ebx
cmp ebx, 0xc
jb 0x624554
call edi
mov ecx, dword [0x96cb88]
mov eax, dword [0x96cb6c]
mov edx, dword [ecx + esi*4]
mov ecx, dword [eax + ebx*4]
mov eax, dword [ebp - 0x1c]
push edx
mov edx, dword [ebp - 0x18]
push ecx
push edx
push 0xffffffffffffff9b
push eax
push 0x443aa4
nop
call fcn.009aa2c4
movsx esi, word [ebp - 0x18]
add esp, 0x18
dec esi
cmp esi, 0xc
jb 0x62458b
call edi
mov ecx, dword [0x96cb6c]
mov dword [ecx + esi*4], 0
movsx esi, word [ebp - 0x18]
dec esi
cmp esi, 0xc
jb 0x6245a4
call edi
mov edx, dword [0x96cb88]
mov edi, dword [0xa34288]
mov dword [edx + esi*4], 0
movsx esi, word [ebp - 0x18]
dec esi
cmp esi, 0xc
jb 0x6245c3
call edi
mov eax, dword [0x96cc68]
movsx esi, word [eax + esi*2]
add esi, 0x8000
cmp esi, 0x10000
jb 0x6245dc
call edi
mov ecx, dword [0x96d37c]
mov dx, word [ecx + esi*2]
movsx esi, word [ebp - 0x18]
dec esi
mov word [ebp - 0x2c], dx
cmp esi, 0xc
jb 0x6245f6
call edi
mov eax, dword [0x96ccf4]
movsx esi, word [eax + esi*2]
add esi, 0x8000
cmp esi, 0x10000
jb 0x62460f
call edi
mov ecx, dword [0x96d37c]
cmp word [0x96cdac], 0
mov dx, word [ecx + esi*2]
mov word [ebp - 0x30], dx
je 0x62465a
movsx esi, word [ebp - 0x18]
dec esi
cmp esi, 0xc
jb 0x624633
call edi
mov eax, dword [0x96cdc0]
mov cx, word [eax + esi*2]
movsx esi, word [ebp - 0x18]
dec esi
mov word [ebp - 0x2c], cx
cmp esi, 0xc
jb 0x62464c
call edi
mov edx, dword [0x96cddc]
mov ax, word [edx + esi*2]
mov word [ebp - 0x30], ax
movsx esi, word [ebp - 0x18]
dec esi
cmp esi, 0xc
jb 0x624666
call edi
mov ecx, dword [0x96cba4]
cmp word [ecx + esi*2], 4
jne 0x62468d
movsx esi, word [ebp - 0x18]
dec esi
cmp esi, 0xc
jb 0x62467f
call edi
mov edx, dword [0x96cc68]
mov ax, word [edx + esi*2]
mov word [ebp - 0x2c], ax
movsx esi, word [ebp - 0x18]
dec esi
cmp esi, 0xc
jb 0x624699
call edi
mov ecx, dword [0x96cc4c]
movsx eax, word [ecx + esi*2]
add eax, 0x8000
cmp eax, 0x10000
mov dword [ebp - 0x18c], eax
jb 0x6246b7
call edi
movsx eax, word [ebp - 0x18]
dec eax
cmp eax, 0xc
mov dword [ebp - 0x184], eax
jb 0x6246c9
call edi
movsx esi, word [ebp - 0x18]
dec esi
cmp esi, 0xc
jb 0x6246d5
call edi
mov edx, dword [0x96ccd8]
movsx ebx, word [edx + esi*2]
add ebx, 0x8000
cmp ebx, 0x10000
jb 0x6246f3
nop
call fcn.009aa2d6
movsx eax, word [ebp - 0x18]
dec eax
cmp eax, 0xc
mov dword [ebp - 0x178], eax
jb 0x624709
nop
call fcn.009aa2df
movsx edi, word [ebp - 0x18]
dec edi
cmp edi, 0xc
jb 0x624719
nop
call fcn.009aa2e8
movsx esi, word [ebp - 0x18]
dec esi
cmp esi, 0xc
jb 0x624729
nop
call fcn.009aa2f1
mov eax, dword [ebp - 0x2c]
mov ecx, dword [ebp - 0x18c]
push eax
mov eax, dword [0x96d37c]
mov dx, word [eax + ecx*2]
mov ecx, dword [0x96cc84]
push edx
mov edx, dword [ebp - 0x184]
mov cx, word [ecx + edx*2]
mov dx, word [eax + ebx*2]
mov eax, dword [ebp - 0x30]
push ecx
mov ecx, dword [0x96cbdc]
push edx
mov edx, dword [ebp - 0x178]
push eax
mov eax, dword [ecx + edx*4]
mov ecx, dword [0x96cbc0]
push eax
mov eax, dword [0x96cba4]
mov edx, dword [ecx + edi*4]
mov cx, word [eax + esi*2]
push edx
mov edx, dword [ebp - 0x1c]
push ecx
push 1
push edx
push 0x443638
nop
call fcn.009aa2fa
add esp, 0x2c
jmp 0x624d05
movsx esi, word [ebp - 0x18]
mov ebx, dword [0xa3428c]
dec esi
cmp esi, 0xc
jb 0x6247a6
call ebx
mov eax, dword [0x96cd84]
cmp word [eax + esi*2], 0
movsx esi, word [ebp - 0x18]
je 0x62487f
dec esi
cmp esi, 0xc
jb 0x6247c2
call ebx
mov ecx, dword [0x96ca44]
mov edx, dword [ecx + esi*4]
push edx
push 0x443668
nop
call fcn.009aa30c
movsx ebx, word [ebp - 0x18]
test eax, eax
jne 0x624812
dec ebx
cmp ebx, 0xc
jb 0x6247eb
nop
call fcn.009aa315
movsx esi, word [ebp - 0x18]
dec esi
cmp esi, 0xc
jb 0x6247fb
nop
call fcn.009aa31e
mov eax, dword [0x96cd68]
mov edx, dword [0x96cda0]
mov ecx, dword [eax + ebx*4]
mov eax, dword [edx + esi*4]
push ecx
push eax
push 0xc
jmp 0x624843
dec ebx
cmp ebx, 0xc
jb 0x62481e
nop
call fcn.009aa327
movsx esi, word [ebp - 0x18]
dec esi
cmp esi, 0xc
jb 0x62482e
nop
call fcn.009aa330
mov ecx, dword [0x96cd68]
mov eax, dword [0x96cda0]
mov edx, dword [ecx + ebx*4]
mov ecx, dword [eax + esi*4]
push edx
push ecx
push 2
push edi
push 0x443ab0
nop
call fcn.009aa339
add esp, 0x14
cmp word [0x96c0e6], 0
je case.0x624040.15
lea edx, [ebp - 0x18]
lea eax, [ebp - 0x168]
push edx
push eax
mov dword [ebp - 0x168], 2
call fcn.006fe120
jmp case.0x624040.15
dec esi
cmp esi, 0xc
jb 0x624887
call ebx
mov ecx, dword [0x96cda0]
mov edx, dword [ecx + esi*4]
push edx
push 3
push edi
push 0x43e800
nop
call fcn.009aa342
add esp, 0x10
cmp word [0x96c0e6], 0
je case.0x624040.15
lea eax, [ebp - 0x18]
lea ecx, [ebp - 0x168]
push eax
push ecx
mov dword [ebp - 0x168], 3
call fcn.006fe120
jmp case.0x624040.15
movsx esi, word [ebp - 0x18]
dec esi
cmp esi, 0xc
jb 0x6248df
nop
call fcn.009aa34b
mov edx, dword [0x96cd68]
mov eax, dword [edx + esi*4]
push eax
mov eax, dword [0x96ce34]
mov ecx, dword [eax + 0x14]
mov edx, dword [eax + 0x10]
push ecx
mov ecx, dword [eax + 0xc]
push edx
mov edx, dword [eax + 8]
push ecx
mov ecx, dword [eax + 4]
push edx
mov edx, dword [eax]
push ecx
push edx
push 4
push edi
push 0x443abc
nop
call fcn.009aa354
add esp, 0x28
cmp word [0x96c0e6], 0
je case.0x624040.15
lea eax, [ebp - 0x18]
lea ecx, [ebp - 0x168]
push eax
push ecx
mov dword [ebp - 0x168], 4
call fcn.006fe120
jmp case.0x624040.15
movsx esi, word [ebp - 0x18]
dec esi
cmp esi, 0xc
jb 0x624953
nop
call fcn.009aa35d
mov edx, dword [0x96cd68]
mov eax, dword [edx + esi*4]
push eax
push 5
push edi
push 0x43e750
nop
call fcn.009aa366
add esp, 0x10
jmp case.0x624040.15
movsx esi, word [ebp - 0x18]
dec esi
cmp esi, 0xc
jb 0x624983
nop
call fcn.009aa36f
mov ecx, dword [0x96cc68]
mov ebx, dword [0xa34290]
movsx edi, word [ecx + esi*2]
add edi, 0x8000
cmp edi, 0x10000
jb 0x6249a3
call ebx
movsx esi, word [ebp - 0x18]
dec esi
cmp esi, 0xc
jb 0x6249af
call ebx
mov edx, dword [0x96cc4c]
movsx esi, word [edx + esi*2]
add esi, 0x8000
cmp esi, 0x10000
jb 0x6249c9
call ebx
mov eax, dword [0x96d37c]
mov cx, word [eax + edi*2]
mov dx, word [eax + esi*2]
push ecx
push edx
push 6
jmp 0x624cf3
movsx ebx, word [ebp - 0x18]
dec ebx
cmp ebx, 0xc
jb 0x6249ef
nop
call fcn.009aa381
movsx esi, word [ebp - 0x18]
dec esi
cmp esi, 0xc
jb 0x6249ff
nop
call fcn.009aa38a
mov ecx, dword [0x96ce88]
mov eax, dword [0x96ce6c]
mov dx, word [ecx + ebx*2]
mov cx, word [eax + esi*2]
push edx
push ecx
push 7
push edi
push 0x43c2a8
nop
call fcn.009aa393
add esp, 0x14
jmp case.0x624040.15
movsx esi, word [ebp - 0x18]
dec esi
cmp esi, 0xc
jb 0x624a3a
nop
call fcn.009aa39c
mov edx, dword [0x96ce6c]
mov ax, word [edx + esi*2]
push eax
push 8
push edi
push 0x43ed54
nop
call fcn.009aa3a5
add esp, 0x10
jmp case.0x624040.15
movsx esi, word [ebp - 0x18]
dec esi
cmp esi, 0xc
jb 0x624a6b
nop
call fcn.009aa3ae
mov ecx, dword [0x96ce6c]
movsx esi, word [ecx + esi*2]
add esi, 0x8000
cmp esi, 0x10000
jb 0x624a89
nop
call fcn.009aa3b7
mov edx, dword [0x96d37c]
mov ax, word [edx + esi*2]
push eax
push 9
push edi
push 0x43ed54
nop
call fcn.009aa3c0
add esp, 0x10
jmp case.0x624040.15
movsx esi, word [ebp - 0x18]
dec esi
cmp esi, 0xc
jb 0x624aba
nop
call fcn.009aa3c9
mov ecx, dword [0x96ce6c]
movsx esi, word [ecx + esi*2]
add esi, 0x8000
cmp esi, 0x10000
jb 0x624ad8
nop
call fcn.009aa3d2
mov edx, dword [0x96d37c]
mov ax, word [edx + esi*2]
push eax
push 0xa
push edi
push 0x43ed54
nop
call fcn.009aa3db
add esp, 0x10
jmp case.0x624040.15
movsx esi, word [ebp - 0x18]
dec esi
cmp esi, 0xc
jb 0x624b09
nop
call fcn.009aa3e4
mov ecx, dword [0x96ce6c]
mov ebx, dword [0xa34294]
movsx edi, word [ecx + esi*2]
add edi, 0x8000
cmp edi, 0x10000
jb 0x624b29
call ebx
movsx esi, word [ebp - 0x18]
dec esi
cmp esi, 0xc
jb 0x624b35
call ebx
mov edx, dword [0x96cc4c]
movsx esi, word [edx + esi*2]
add esi, 0x8000
cmp esi, 0x10000
jb 0x624b4f
call ebx
mov eax, dword [0x96d37c]
mov cx, word [eax + edi*2]
mov dx, word [eax + esi*2]
push ecx
push edx
push 0xb
jmp 0x624cf3
movsx esi, word [ebp - 0x18]
dec esi
cmp esi, 0xc
jb 0x624b75
nop
call fcn.009aa3f6
mov ecx, dword [0x96ce6c]
movsx esi, word [ecx + esi*2]
add esi, 0x8000
cmp esi, 0x10000
jb 0x624b93
nop
call fcn.009aa3ff
mov edx, dword [0x96d37c]
mov ax, word [edx + esi*2]
push eax
push 0xd
push edi
push 0x43ed54
nop
call fcn.009aa408
add esp, 0x10
jmp case.0x624040.15
movsx esi, word [ebp - 0x18]
dec esi
cmp esi, 0xc
jb 0x624bc4
nop
call fcn.009aa411
mov ecx, dword [0x96ce6c]
mov ebx, dword [0xa34298]
movsx edi, word [ecx + esi*2]
add edi, 0x8000
cmp edi, 0x10000
jb 0x624be4
call ebx
movsx esi, word [ebp - 0x18]
dec esi
cmp esi, 0xc
jb 0x624bf0
call ebx
mov edx, dword [0x96cc4c]
movsx esi, word [edx + esi*2]
add esi, 0x8000
cmp esi, 0x10000
jb 0x624c0a
call ebx
mov eax, dword [0x96d37c]
mov cx, word [eax + edi*2]
mov dx, word [eax + esi*2]
push ecx
push edx
push 0xf
jmp 0x624cf3
movsx esi, word [ebp - 0x18]
dec esi
cmp esi, 0xc
jb 0x624c30
nop
call fcn.009aa423
mov ecx, dword [0x96cc68]
mov ebx, dword [0xa3429c]
movsx edi, word [ecx + esi*2]
add edi, 0x8000
cmp edi, 0x10000
jb 0x624c50
call ebx
movsx esi, word [ebp - 0x18]
dec esi
cmp esi, 0xc
jb 0x624c5c
call ebx
mov edx, dword [0x96cc4c]
movsx esi, word [edx + esi*2]
add esi, 0x8000
cmp esi, 0x10000
jb 0x624c76
call ebx
mov eax, dword [0x96d37c]
mov cx, word [eax + edi*2]
mov dx, word [eax + esi*2]
push ecx
push edx
push 0x6a
jmp 0x624cf3
movsx esi, word [ebp - 0x18]
dec esi
cmp esi, 0xc
jb 0x624c99
nop
call fcn.009aa435
mov ecx, dword [0x96cc68]
mov ebx, dword [0xa342a0]
movsx edi, word [ecx + esi*2]
add edi, 0x8000
cmp edi, 0x10000
jb 0x624cb9
call ebx
movsx esi, word [ebp - 0x18]
dec esi
cmp esi, 0xc
jb 0x624cc5
call ebx
mov edx, dword [0x96cc4c]
movsx esi, word [edx + esi*2]
add esi, 0x8000
cmp esi, 0x10000
jb 0x624cdf
call ebx
mov eax, dword [0x96d37c]
mov cx, word [eax + edi*2]
mov dx, word [eax + esi*2]
push ecx
push edx
push 0xce
mov eax, dword [ebp - 0x1c]
push eax
push 0x43c2a8
nop
call fcn.009aa447
add esp, 0x14
mov edi, dword [ebp - 0x1c]
mov eax, 1
add ax, word [ebp - 0x18]
jo 0x62565a
mov dword [ebp - 0x18], eax
jmp 0x624002
mov word [0x96c9ca], 0
mov word [0x96cdac], 0
cmp word [0x96df86], 0
je 0x6253a4
push 0x96d4ea
call fcn.00860060
movsx esi, word [0x96d4ea]
add esi, 0x8000
cmp esi, 0x10000
jb 0x624d64
nop
call fcn.009aa450
mov ecx, dword [0x96d37c]
mov dx, word [ecx + esi*2]
push edx
nop
call fcn.009aa459
mov dword [ebp - 0x7c], eax
lea eax, [ebp - 0x84]
lea ecx, [ebp - 0x94]
push eax
push ecx
mov dword [ebp - 0x84], 8
nop
call fcn.009aa462
lea edx, [ebp - 0x94]
push edx
nop
call fcn.009aa46b
mov edx, eax
lea ecx, [ebp - 0x24]
nop
call fcn.009aa474
lea eax, [ebp - 0x94]
lea ecx, [ebp - 0x84]
push eax
push ecx
push 2
nop
call fcn.009aa47d
mov esi, dword [0x401228]
add esp, 0xc
lea edx, [ebp - 0x84]
mov ebx, 0x80020004
push edx
mov dword [ebp - 0x7c], ebx
mov dword [ebp - 0x84], 0xa
call esi
mov edi, dword [0xa342a4]
lea ecx, [ebp - 0x84]
mov word [0x96c09a], ax
call edi
push 3
nop
call fcn.009aa48f
mov eax, dword [0x96d4e0]
push eax
push 3
push 0xffffffffffffffff
push 0x4001
nop
call fcn.009aa498
lea ecx, [ebp - 0x84]
mov dword [ebp - 0x7c], ebx
push ecx
mov dword [ebp - 0x84], 0xa
call esi
mov ebx, eax
lea ecx, [ebp - 0x84]
mov dword [ebp - 0x44], ebx
call edi
mov edx, 0x44301c
lea ecx, [ebp - 0x34]
nop
call fcn.009aa4a1
mov edx, dword [ebp - 0x34]
push edx
push ebx
push 0xffffffffffffffff
push 0x4002
nop
call fcn.009aa4aa
mov edi, dword [0x401044]
push 3
nop
call fcn.009aa4b3
test ax, ax
push 3
jne 0x62533a
lea eax, [ebp - 0x28]
push eax
call edi
mov ecx, dword [ebp - 0x28]
push ecx
push ebx
push 0x43e79c
nop
call fcn.009aa4bc
mov esi, dword [0x401124]
add esp, 0xc
lea edx, [ebp - 0x28]
lea ecx, [ebp - 0x84]
mov eax, 2
mov dword [ebp - 0xfc], edx
push ecx
mov dword [ebp - 0x7c], eax
mov dword [ebp - 0x84], eax
push eax
lea edx, [ebp - 0x104]
lea eax, [ebp - 0x94]
push edx
push eax
mov dword [ebp - 0x11c], 0x443054
mov dword [ebp - 0x124], 0x8008
mov dword [ebp - 0x104], 0x4008
call esi
lea ecx, [ebp - 0xb4]
push 0x22
push ecx
nop
call fcn.009aa4c5
lea edx, [ebp - 0x28]
lea eax, [ebp - 0xc4]
mov dword [ebp - 0x12c], edx
push eax
lea ecx, [ebp - 0x134]
push 4
lea edx, [ebp - 0xd4]
push ecx
push edx
mov dword [ebp - 0xbc], 1
mov dword [ebp - 0xc4], 2
mov dword [ebp - 0x134], 0x4008
call esi
mov esi, dword [0xa342a8]
lea eax, [ebp - 0x124]
lea ecx, [ebp - 0x94]
push eax
lea edx, [ebp - 0xa4]
push ecx
push edx
call esi
push eax
lea eax, [ebp - 0xb4]
lea ecx, [ebp - 0xd4]
push eax
lea edx, [ebp - 0xe4]
push ecx
push edx
call esi
push eax
lea eax, [ebp - 0xf4]
push eax
nop
call fcn.009aa4d7
push eax
nop
call fcn.009aa4e0
lea ecx, [ebp - 0xd4]
mov si, ax
lea edx, [ebp - 0xb4]
push ecx
lea eax, [ebp - 0xc4]
push edx
lea ecx, [ebp - 0x94]
push eax
lea edx, [ebp - 0x84]
push ecx
push edx
push 5
nop
call fcn.009aa4e9
add esp, 0x18
test si, si
je 0x624e62
mov ecx, dword [ebp - 0x24]
lea eax, [ebp - 0x28]
push ecx
mov dword [ebp - 0xfc], eax
mov dword [ebp - 0x104], 0x4008
nop
call fcn.009aa4f2
push eax
lea edx, [ebp - 0x104]
lea eax, [ebp - 0x84]
push edx
push eax
nop
call fcn.009aa4fb
mov ecx, dword [ebp - 0x24]
lea edx, [ebp - 0x84]
lea eax, [ebp - 0x114]
push edx
push eax
mov dword [ebp - 0x10c], ecx
mov dword [ebp - 0x114], 0x8008
nop
call fcn.009aa504
lea ecx, [ebp - 0x84]
mov si, ax
nop
call fcn.009aa50d
test si, si
je 0x624e62
lea ecx, [ebp - 0x28]
push 3
push ecx
call edi
mov edx, dword [ebp - 0x28]
push edx
push ebx
push 0x43e79c
nop
call fcn.009aa516
mov eax, dword [0x96c85c]
add esp, 0xc
mov dword [ebp - 0x1ec], eax
mov dword [ebp - 0x18], 1
mov cx, word [ebp - 0x1ec]
cmp word [ebp - 0x18], cx
jg 0x6250f5
lea edx, [ebp - 0x28]
push 3
push edx
call edi
movsx esi, word [ebp - 0x18]
dec esi
cmp esi, 0x200
jb 0x62507e
nop
call fcn.009aa51f
movsx ebx, word [ebp - 0x18]
dec ebx
cmp ebx, 0x200
jb 0x625091
nop
call fcn.009aa528
movsx edi, word [ebp - 0x18]
dec edi
cmp edi, 0x200
jb 0x6250a4
nop
call fcn.009aa531
mov eax, dword [0x96c8a8]
mov edx, dword [0x96c88c]
push 0
push 0
mov cx, word [eax + esi*2]
mov eax, dword [edx + ebx*4]
push ecx
mov ecx, dword [0x96c870]
push eax
mov eax, dword [ebp - 0x44]
mov edx, dword [ecx + edi*4]
push edx
push eax
push 0x443acc
nop
call fcn.009aa53a
mov edi, dword [0x401044]
mov eax, 1
add esp, 0x1c
add ax, word [ebp - 0x18]
jo 0x62565a
mov dword [ebp - 0x18], eax
jmp 0x625052
mov ax, word [0x96d8ec]
mov dword [ebp - 0x18], 1
sub ax, 1
jo 0x62565a
mov dword [ebp - 0x1f4], eax
cmp word [ebp - 0x18], ax
jg 0x6251b4
lea ecx, [ebp - 0x28]
push 3
push ecx
call edi
movsx esi, word [ebp - 0x18]
dec esi
cmp esi, 0x1400
jb 0x625137
nop
call fcn.009aa543
movsx ebx, word [ebp - 0x18]
dec ebx
cmp ebx, 0x1400
jb 0x62514a
nop
call fcn.009aa54c
movsx edi, word [ebp - 0x18]
dec edi
cmp edi, 0x1400
jb 0x62515d
nop
call fcn.009aa555
mov edx, dword [0x96d9b0]
mov ecx, dword [0x96d91c]
push 0
push 0
mov ax, word [edx + esi*2]
mov edx, dword [ecx + ebx*4]
push eax
mov eax, dword [0x96d900]
push edx
mov edx, dword [ebp - 0x44]
mov ecx, dword [eax + edi*4]
push ecx
push edx
push 0x443acc
nop
call fcn.009aa55e
mov edi, dword [0x401044]
mov eax, 1
add esp, 0x1c
add ax, word [ebp - 0x18]
jo 0x62565a
mov dword [ebp - 0x18], eax
mov eax, dword [ebp - 0x1f4]
jmp 0x625112
mov eax, dword [0x96c75c]
mov dword [ebp - 0x18], 1
mov dword [ebp - 0x1fc], eax
mov cx, word [ebp - 0x1fc]
cmp word [ebp - 0x18], cx
jg 0x625332
lea edx, [ebp - 0x14]
lea eax, [ebp - 0x54]
push edx
lea ecx, [ebp - 0x4c]
push eax
lea edx, [ebp - 0x48]
push ecx
lea eax, [ebp - 0x40]
push edx
push eax
push 3
push 0x443ad8
nop
call fcn.009aa567
add esp, 0x1c
cmp word [ebp - 0x54], 0
jge 0x625253
movsx esi, word [ebp - 0x18]
mov ebx, dword [0xa342ac]
dec esi
cmp esi, 0x1400
jb 0x625217
call ebx
mov ecx, dword [0x96c7c4]
cmp word [ecx + esi*2], 0
jne 0x62522d
mov dword [ebp - 0x54], 0xfffffaff
jmp 0x625259
movsx esi, word [ebp - 0x18]
dec esi
cmp esi, 0x1400
jb 0x62523c
call ebx
mov edx, dword [0x96c7c4]
mov cx, word [edx + esi*2]
nop
call fcn.009aa579
neg eax
mov dword [ebp - 0x54], eax
jmp 0x625259
mov ebx, dword [0xa342b0]
cmp word [ebp - 0x14], 0
jge 0x6252a8
movsx esi, word [ebp - 0x18]
dec esi
cmp esi, 0x1400
jb 0x62526f
call ebx
mov eax, dword [0x96c7e0]
cmp word [eax + esi*2], 0
jne 0x625284
mov dword [ebp - 0x14], 0xfffffaff
jmp 0x6252a8
movsx esi, word [ebp - 0x18]
dec esi
cmp esi, 0x1400
jb 0x625293
call ebx
mov ecx, dword [0x96c7e0]
mov cx, word [ecx + esi*2]
nop
call fcn.009aa58b
neg eax
mov dword [ebp - 0x14], eax
movsx edi, word [ebp - 0x18]
dec edi
cmp edi, 0x1400
jb 0x6252b7
call ebx
movsx ebx, word [ebp - 0x18]
dec ebx
cmp ebx, 0x1400
jb 0x6252ca
nop
call fcn.009aa594
movsx esi, word [ebp - 0x18]
dec esi
cmp esi, 0x1400
jb 0x6252dd
nop
call fcn.009aa59d
mov edx, dword [ebp - 0x14]
mov ecx, dword [0x96c7a8]
mov eax, dword [ebp - 0x54]
push edx
mov dx, word [ecx + edi*2]
push eax
mov eax, dword [0x96c78c]
push edx
mov edx, dword [0x96c770]
mov ecx, dword [eax + ebx*4]
mov eax, dword [edx + esi*4]
push ecx
mov ecx, dword [ebp - 0x44]
push eax
push ecx
push 0x443acc
nop
call fcn.009aa5a6
mov edi, dword [0x401044]
mov eax, 1
add esp, 0x1c
add ax, word [ebp - 0x18]
jo 0x62565a
mov dword [ebp - 0x18], eax
jmp 0x6251c6
mov ebx, dword [ebp - 0x44]
jmp 0x624e62
mov esi, dword [0xa342b4]
call esi
push ebx
call esi
mov edx, dword [ebp - 0x34]
mov esi, dword [0xa342b8]
push edx
push ebx
push 0xffffffffffffffff
push 0x4001
call esi
mov eax, dword [0x96d4e0]
push eax
push 3
push 0xffffffffffffffff
push 0x4002
call esi
mov esi, dword [0xa342bc]
push ebx
nop
call fcn.009aa5ca
test ax, ax
push ebx
jne 0x625395
lea ecx, [ebp - 0x28]
push ecx
call edi
mov edx, dword [ebp - 0x28]
push edx
push 3
push 0x43e79c
call esi
add esp, 0xc
jmp 0x625370
nop
call fcn.009aa5d3
mov word [0x96df86], 0
mov ax, word [0x96d5e4]
mov cx, word [0x96d5e8]
cmp word [0x96d704], 3
mov word [0x96d5e6], ax
mov word [0x96d5ea], cx
jne 0x625406
cmp word [0x96d70c], 0
je 0x625406
lea edx, [ebp - 0x168]
mov dword [ebp - 0x168], 0x57
push edx
call fcn.00870360
mov ax, word [0x96c098]
mov word [0x96d710], 0
sub ax, 6
neg ax
sbb eax, eax
mov word [0x96d70c], ax
wait
push 0x6254b4
jmp 0x62547e
lea ecx, [ebp - 0x1b4]
lea edx, [ebp - 0x1b0]
push ecx
lea eax, [ebp - 0x1ac]
push edx
push eax
push 3
nop
call fcn.009aa5f7
mov esi, dword [0x401310]
add esp, 0x10
lea ecx, [ebp - 0x24]
call esi
lea ecx, [ebp - 0x28]
call esi
lea ecx, [ebp - 0x34]
call esi
ret
jmp fcn.0040666c
nop
call fcn.009aa600