RANGE 0x8c1640
008c1640 push ebx
008c1641 mov ebx, dword ptr [esp + 0xc]
008c1645 push ebp
008c1646 mov ebp, dword ptr [esp + 0xc]
008c164a push esi
008c164b push edi
008c164c push 1
008c164e push ebx
008c164f push ebp
008c1650 mov edi, edx
008c1652 mov esi, ecx
008c1654 mov dword ptr [0x1de6628], 0
008c165e call 0x8a54f0
008c1663 mov dword ptr [esp + 0x14], eax
008c1667 test eax, eax
008c1669 je 0x8c16b4
008c166b cmp dword ptr [0x1de6628], 0
008c1672 mov dword ptr [0x1de6660], 1
008c167c jne 0x8c173d
008c1682 test esi, esi
008c1684 je 0x8c173d
008c168a mov eax, dword ptr [esi + 0x14]
008c168d cmp dword ptr [eax], -1
008c1690 mov dword ptr [esp + 0x18], eax
008c1694 je 0x8c173d
008c169a test dword ptr [eax + 8], 0x8000
008c16a1 jne 0x8c173d
008c16a7 call 0x499000
008c16ac test eax, eax
008c16ae je 0x8c1716
008c16b0 xor ecx, ecx
008c16b2 jmp 0x8c1721
008c16b4 cmp ebp, 6
008c16b7 jne 0x8c173d
008c16bd test esi, esi
008c16bf je 0x8c170a
008c16c1 mov eax, dword ptr [esi + 0x14]
008c16c4 cmp dword ptr [eax], -1
008c16c7 mov dword ptr [esp + 0x18], eax
008c16cb je 0x8c170a
008c16cd test dword ptr [eax + 8], 0x8000
008c16d4 jne 0x8c170a
008c16d6 call 0x499000
008c16db test eax, eax
008c16dd je 0x8c16e3
008c16df xor ecx, ecx
008c16e1 jmp 0x8c16ee
008c16e3 mov eax, dword ptr [esp + 0x18]
008c16e7 mov ecx, dword ptr [eax]
008c16e9 cmp ecx, -1
008c16ec je 0x8c170a
008c16ee movss xmm0, dword ptr [0xec6e14]
008c16f6 push 0x51
008c16f8 push ecx
008c16f9 movss dword ptr [esp], xmm0
008c16fe push 0
008c1700 mov edx, 0x40
008c1705 call 0x8a4950
008c170a mov dword ptr [0x1de665c], 1
008c1714 jmp 0x8c173d
008c1716 mov ecx, dword ptr [esp + 0x18]
008c171a mov ecx, dword ptr [ecx]
008c171c cmp ecx, -1
008c171f je 0x8c173d
008c1721 movss xmm0, dword ptr [0xec6e14]
008c1729 push 0x31
008c172b push ecx
008c172c movss dword ptr [esp], xmm0
008c1731 push 0
008c1733 mov edx, 0x20
008c1738 call 0x8a4950
008c173d test ebx, ebx
008c173f je 0x8c1763
008c1741 mov eax, dword ptr [0x1de660c]
008c1746 test eax, eax
008c1748 je 0x8c1763
008c174a cmp edi, eax
008c174c jne 0x8c1763
008c174e xorps xmm0, xmm0
008c1751 mov dword ptr [0x1de660c], 0
008c175b movss dword ptr [0x1de6610], xmm0
008c1763 push ebx
008c1764 push ebp
008c1765 mov edx, edi
008c1767 mov ecx, esi
008c1769 call 0x913c90
008c176e push ebx
008c176f push ebp
008c1770 mov edx, edi
008c1772 mov ecx, esi
008c1774 call 0x913f50
008c1779 push ebx
008c177a push ebp
008c177b mov edx, edi
008c177d mov ecx, esi
008c177f call 0x912730
008c1784 push ebx
008c1785 push ebp
008c1786 mov edx, edi
008c1788 mov ecx, esi
008c178a call 0x910500
008c178f push ebx
008c1790 push ebp
008c1791 mov edx, edi
008c1793 mov ecx, esi
008c1795 call 0x90efc0
008c179a push ebx
008c179b push ebp
008c179c mov edx, edi
008c179e mov ecx, esi
008c17a0 call 0x9136e0
008c17a5 push ebx
008c17a6 push ebp
008c17a7 mov edx, edi
008c17a9 mov ecx, esi
008c17ab call 0x912e20
008c17b0 push ebx
008c17b1 push ebp
008c17b2 mov edx, edi
008c17b4 mov ecx, esi
008c17b6 call 0x90f780
008c17bb mov ecx, dword ptr [esi + 0x4c]
008c17be mov dword ptr [esp + 0x18], ecx
008c17c2 cmp ecx, dword ptr [0x1dee624]
008c17c8 jne 0x8c1859
008c17ce test edi, edi
008c17d0 je 0x8c17df
008c17d2 call 0x6bfac0
008c17d7 test eax, eax
008c17d9 je 0x8c17df
008c17db test ebx, ebx
008c17dd je 0x8c1859
008c17df cmp ebp, 6
008c17e2 je 0x8c1859
008c17e4 cmp ebp, 1
008c17e7 je 0x8c1859
008c17e9 cmp dword ptr [esp + 0x14], 0
008c17ee jne 0x8c183b
008c17f0 cmp dword ptr [0x1de6628], 0
008c17f7 jne 0x8c183b
008c17f9 mov edx, edi
008c17fb mov ecx, esi
008c17fd call 0x885c30
008c1802 test eax, eax
008c1804 je 0x8c180a
008c1806 test ebx, ebx
008c1808 je 0x8c183b
008c180a cmp dword ptr [0x1de665c], 0
008c1811 jne 0x8c183b
008c1813 movss xmm0, dword ptr [0xec6e14]
008c181b push 0x4e
008c181d push ecx
008c181e movss dword ptr [esp], xmm0
008c1823 push 0
008c1825 mov edx, 0x3d
008c182a mov ecx, esi
008c182c call 0x8bfc50
008c1831 mov dword ptr [0x1de665c], 1
008c183b movss xmm0, dword ptr [0xec6e14]
008c1843 push 0x28
008c1845 push ecx
008c1846 movss dword ptr [esp], xmm0
008c184b push 0
008c184d mov edx, 0x17
008c1852 mov ecx, edi
008c1854 call 0x8bfc50
008c1859 mov edx, dword ptr [esp + 0x18]
008c185d cmp edx, dword ptr [0x1dee620]
008c1863 jne 0x8c18af
008c1865 cmp ebp, 8
008c1868 jne 0x8c18af
008c186a test edi, edi
008c186c je 0x8c18af
008c186e mov edi, dword ptr [edi + 0x14]
008c1871 cmp dword ptr [edi], -1
008c1874 je 0x8c18af
008c1876 test dword ptr [edi + 8], 0x8000
008c187d jne 0x8c18af
008c187f call 0x499000
008c1884 test eax, eax
008c1886 je 0x8c188c
008c1888 xor ecx, ecx
008c188a jmp 0x8c1893
008c188c mov ecx, dword ptr [edi]
008c188e cmp ecx, -1
008c1891 je 0x8c18af
008c1893 movss xmm0, dword ptr [0xec6e14]
008c189b push 0x28
008c189d push ecx
008c189e movss dword ptr [esp], xmm0
008c18a3 push 0
008c18a5 mov edx, 0x17
008c18aa call 0x8a4950
008c18af pop edi
008c18b0 pop esi
008c18b1 xor eax, eax
008c18b3 pop ebp
008c18b4 mov dword ptr [0x1de6660], eax
008c18b9 mov dword ptr [0x1de665c], eax
008c18be pop ebx
008c18bf ret 8
008c18c2 insb byte ptr es:[edi], dx
008c18c3 int3 
008c18c4 int3 
008c18c5 int3 
008c18c6 int3 
008c18c7 int3 
008c18c8 int3 
008c18c9 int3 
008c18ca int3 
008c18cb int3 
008c18cc int3 
008c18cd int3 
008c18ce int3 
008c18cf int3 
008c18d0 jmp 0x8c0590
008c18d5 int3 
008c18d6 int3 
008c18d7 int3 
008c18d8 int3 
008c18d9 int3 
008c18da int3 
008c18db int3 
008c18dc int3 
008c18dd int3 
008c18de int3 
008c18df int3 
008c18e0 cmp dword ptr [esp + 0x18], 0
008c18e5 push edi
008c18e6 mov edi, edx
008c18e8 jne 0x8c1b54
008c18ee test ecx, ecx
008c18f0 je 0x8c1b54
008c18f6 mov eax, dword ptr [ecx + 0x18]
008c18f9 mov edx, dword ptr [eax + 4]
008c18fc movzx eax, byte ptr [edx + 3]
008c1900 cmp eax, 0x15
008c1903 je 0x8c1b54
008c1909 cmp eax, 0x16
008c190c je 0x8c1b54
008c1912 test edi, edi
008c1914 je 0x8c1b54
008c191a mov eax, 1
008c191f cmp dword ptr [ecx + 0x74], eax
008c1922 jne 0x8c1b54
008c1928 cmp dword ptr [edi + 0x74], eax
RANGE 0x6fbd40
006fbd40 push ebx
006fbd41 push ebp
006fbd42 mov ebp, dword ptr [esp + 0xc]
006fbd46 test edi, edi
006fbd48 je 0x6fbd8f
006fbd4a mov ebx, dword ptr [edi + 0x14]
006fbd4d cmp dword ptr [ebx], -1
006fbd50 je 0x6fbd8f
006fbd52 test dword ptr [ebx + 8], 0x8000
006fbd59 jne 0x6fbd8f
006fbd5b call 0x499000
006fbd60 test eax, eax
006fbd62 je 0x6fbd68
006fbd64 xor ebx, ebx
006fbd66 jmp 0x6fbd6f
006fbd68 mov ebx, dword ptr [ebx]
006fbd6a cmp ebx, -1
006fbd6d je 0x6fbd8f
006fbd6f movzx eax, byte ptr [ebx + 0x1d82f20]
006fbd76 inc eax
006fbd77 jns 0x6fbd7d
006fbd79 xor eax, eax
006fbd7b jmp 0x6fbd89
006fbd7d cmp eax, 0xff
006fbd82 jl 0x6fbd89
006fbd84 mov eax, 0xff
006fbd89 mov byte ptr [ebx + 0x1d82f20], al
006fbd8f mov ebx, dword ptr [esp + 0x10]
006fbd93 push ebx
006fbd94 push ebp
006fbd95 mov edx, edi
006fbd97 mov ecx, esi
006fbd99 call 0x8c1640
006fbd9e push ebx
006fbd9f push ebp
006fbda0 mov edx, edi
006fbda2 mov ecx, esi
006fbda4 call 0x6f28c0
006fbda9 mov edx, edi
006fbdab mov ecx, esi
006fbdad call 0x8743f0
006fbdb2 lea eax, [ebp - 1]
006fbdb5 cmp eax, 0xe
006fbdb8 ja 0x6fbddd
006fbdba movzx eax, byte ptr [eax + 0x6fbe70]
006fbdc1 jmp dword ptr [eax*4 + 0x6fbe5c]
006fbdc8 mov ebx, 1
006fbdcd jmp 0x6fbddf
006fbdcf mov ebx, 3
006fbdd4 jmp 0x6fbddf
006fbdd6 mov ebx, 2
006fbddb jmp 0x6fbddf
006fbddd xor ebx, ebx
006fbddf mov ecx, dword ptr [esp + 0x10]
006fbde3 push ebp
006fbde4 push ecx
006fbde5 mov edx, edi
006fbde7 mov ecx, esi
006fbde9 call 0x8bf490
006fbdee mov edx, dword ptr [esi + 0xb00]
006fbdf4 mov ecx, dword ptr [edx + 0x30]
006fbdf7 call 0x6d58f0
006fbdfc mov ecx, dword ptr [esi + 0x4c]
006fbdff push ebx
006fbe00 push edi
006fbe01 mov edx, esi
006fbe03 call 0x89dab0
006fbe08 call 0x8f3d20
006fbe0d test eax, eax
006fbe0f je 0x6fbe3d
006fbe11 mov eax, dword ptr [esi + 0x14]
006fbe14 test eax, eax
006fbe16 je 0x6fbe3d
006fbe18 cmp dword ptr [eax], -1
006fbe1b je 0x6fbe3d
006fbe1d xor eax, eax
006fbe1f cmp dword ptr [esi + 0x4c], 0x1d955d0
006fbe26 setne al
006fbe29 mov ecx, eax
006fbe2b shl ecx, 4
006fbe2e add ecx, ebp
006fbe30 add ecx, eax
006fbe32 mov dword ptr [ecx*4 + 0x1d805b0], 1
006fbe3d mov edx, ebp
006fbe3f mov ecx, esi
006fbe41 call 0x9ae1d0
006fbe46 mov edx, dword ptr [esp + 0x10]
006fbe4a mov ecx, dword ptr [esi + 0xb00]
006fbe50 call 0xa36bc0
006fbe55 pop ebp
006fbe56 pop ebx
006fbe57 ret 8
006fbe5a mov edi, edi
006fbe5c fnstsw word ptr [ebp - 0x4230ff91]
006fbe62 outsd dx, dword ptr [esi]
006fbe63 add al, cl
006fbe65 mov ebp, 0xbdd6006f
006fbe6a outsd dx, dword ptr [esi]
006fbe6b add ch, bl
006fbe6d mov ebp, 0x100006f
006fbe72 add al, 4
006fbe74 add al, byte ptr [ebx]
006fbe76 add byte ptr [eax], al
006fbe78 add al, 4
006fbe7a add al, 0
006fbe7c add al, 0
006fbe7e add ah, cl
006fbe80 sub esp, 0x10
006fbe83 cmp dword ptr [0x1b22be8], 0
006fbe8a push ebx
006fbe8b push esi
006fbe8c push edi
006fbe8d mov edi, edx
006fbe8f mov ebx, ecx
006fbe91 je 0x6fbecc
006fbe93 lea eax, [esp + 0xc]
006fbe97 push eax
006fbe98 push 0xff4
006fbe9d mov edx, 0x408505d6
006fbea2 mov ecx, 0x1b22bf8
006fbea7 mov dword ptr [esp + 0x14], 0
006fbeaf mov dword ptr [esp + 0x18], 1
006fbeb7 mov dword ptr [esp + 0x1c], 0xf2da44
006fbebf mov dword ptr [esp + 0x20], 0x67aea0
006fbec7 call 0x67b040
006fbecc mov esi, dword ptr [esp + 0x20]
006fbed0 push esi
006fbed1 mov edx, edi
006fbed3 mov ecx, ebx
006fbed5 call 0x89c9d0
006fbeda push esi
006fbedb mov edx, edi
006fbedd mov ecx, ebx
006fbedf call 0x886430
006fbee4 push esi
006fbee5 call 0x6eedc0
006fbeea mov eax, dword ptr [esi + 0x3c]
006fbeed and dword ptr [eax + 0x1684], 0xffffffef
006fbef4 push edi
006fbef5 mov edx, ebx
006fbef7 mov ecx, esi
006fbef9 call 0x8b2cf0
006fbefe pop edi
006fbeff pop esi
006fbf00 pop ebx
006fbf01 add esp, 0x10
006fbf04 ret 4
006fbf07 lahf 
006fbf08 int3 
006fbf09 int3 
006fbf0a int3 
006fbf0b int3 
006fbf0c int3 
006fbf0d int3 
006fbf0e int3 
006fbf0f int3 
006fbf10 push esi
006fbf11 mov esi, ecx
006fbf13 push esi
006fbf14 call 0x6eedc0
006fbf19 mov ecx, esi
006fbf1b pop esi
006fbf1c jmp 0x8c1e70
006fbf21 int3 
006fbf22 int3 
006fbf23 int3 
006fbf24 int3 
006fbf25 int3 
006fbf26 int3 
006fbf27 int3 
006fbf28 int3 
006fbf29 int3 
006fbf2a int3 
006fbf2b int3 
006fbf2c int3 
006fbf2d int3 
006fbf2e int3 
006fbf2f int3 
RANGE 0x9b0d10
009b0d10 sub ecx, 0
009b0d13 je 0x9b0d18
009b0d15 xor eax, eax
009b0d17 ret 
009b0d18 mov eax, 1
009b0d1d ret 
009b0d1e int3 
009b0d1f int3 
009b0d20 imul ecx, ecx, 0x34
009b0d23 mov eax, dword ptr [ecx + 0xf4df08]
009b0d29 ret 
009b0d2a int3 
009b0d2b int3 
009b0d2c int3 
009b0d2d int3 
009b0d2e int3 
009b0d2f int3 
009b0d30 imul ecx, ecx, 0x34
009b0d33 mov eax, dword ptr [ecx + 0xf4df0c]
009b0d39 ret 
009b0d3a int3 
009b0d3b int3 
009b0d3c int3 
009b0d3d int3 
009b0d3e int3 
009b0d3f int3 
RANGE 0x882800
00882800 movss xmm1, dword ptr [0xec9918]
00882808 movss xmm0, dword ptr [0x1dee884]
00882810 comiss xmm1, xmm0
00882813 jbe 0x88281c
00882815 fld dword ptr [0xec6e1c]
0088281b ret 
0088281c movss xmm1, dword ptr [0xec7210]
00882824 comiss xmm1, xmm0
00882827 jbe 0x882830
00882829 fld dword ptr [0xec6e18]
0088282f ret 
00882830 movss xmm1, dword ptr [0xf0da30]
00882838 comiss xmm1, xmm0
0088283b jbe 0x882844