RANGE 0x89dab0
0089dab0 mov eax, dword ptr [ecx + 0x44]
0089dab3 push ebx
0089dab4 push edi
0089dab5 mov edi, edx
0089dab7 mov ebx, 1
0089dabc test eax, eax
0089dabe je 0x89daf4
0089dac0 cmp dword ptr [eax + 0x24], ebx
0089dac3 jne 0x89daf4
0089dac5 test eax, eax
0089dac7 je 0x89db51
0089dacd cmp dword ptr [eax + 0x24], ebx
0089dad0 jne 0x89db51
0089dad2 test eax, eax
0089dad4 je 0x89db51
0089dad6 mov eax, 0x1e0ee20
0089dadb cmp ecx, 0x1d955d0
0089dae1 je 0x89dae8
0089dae3 mov eax, 0x1e12838
0089dae8 mov ecx, dword ptr [esp + 0x10]
0089daec add word ptr [eax + ecx*2 + 0x2eb8], bx
0089daf4 call 0x48ef10
0089daf9 cmp eax, 3
0089dafc jne 0x89db51
0089dafe mov eax, dword ptr [edi + 0x4c]
0089db01 mov eax, dword ptr [eax + 0x44]
0089db04 push esi
0089db05 mov esi, dword ptr [esp + 0x10]
0089db09 test eax, eax
0089db0b je 0x89db12
0089db0d cmp dword ptr [eax + 0x24], ebx
0089db10 je 0x89db21
0089db12 mov ecx, dword ptr [esi + 0x4c]
0089db15 mov eax, dword ptr [ecx + 0x44]
0089db18 test eax, eax
0089db1a je 0x89db50
0089db1c cmp dword ptr [eax + 0x24], ebx
0089db1f jne 0x89db50
0089db21 call 0x87ae60
0089db26 mov ecx, eax
0089db28 test ecx, ecx
0089db2a je 0x89db50
0089db2c cmp ecx, edi
0089db2e jne 0x89db37
0089db30 mov edx, 2
0089db35 jmp 0x89db3d
0089db37 cmp ecx, esi
0089db39 jne 0x89db50
0089db3b mov edx, ebx
0089db3d movss xmm0, dword ptr [0xec6e14]
0089db45 push ecx
0089db46 movss dword ptr [esp], xmm0
0089db4b call 0x89d990
0089db50 pop esi
0089db51 pop edi
0089db52 pop ebx
0089db53 ret 8
0089db56 jl 0x89db24
0089db58 int3 
0089db59 int3 
0089db5a int3 
0089db5b int3 
0089db5c int3 
0089db5d int3 
0089db5e int3 
0089db5f int3 
0089db60 mov eax, dword ptr [edx + 0x44]
0089db63 push edi
0089db64 mov edi, ecx
0089db66 test eax, eax
0089db68 je 0x89dbd6
0089db6a mov ecx, 1
0089db6f cmp dword ptr [eax + 0x24], ecx
0089db72 jne 0x89dbd6
0089db74 push esi
0089db75 test eax, eax
0089db77 je 0x89db98
0089db79 cmp dword ptr [eax + 0x24], ecx
0089db7c jne 0x89db98
0089db7e test eax, eax
0089db80 je 0x89db98
0089db82 cmp edx, 0x1d955d0
0089db88 jne 0x89db91
0089db8a mov esi, 0x1e0ee20
0089db8f jmp 0x89db9a
0089db91 mov esi, 0x1e12838
0089db96 jmp 0x89db9a
0089db98 xor esi, esi
0089db9a mov ecx, edi
0089db9c call 0x87aeb0
0089dba1 test eax, eax
0089dba3 jne 0x89dbd5
0089dba5 test esi, esi
0089dba7 je 0x89dbd5
0089dba9 movss xmm1, dword ptr [0xec6e14]
0089dbb1 push ecx
0089dbb2 lea edx, [eax + 3]
0089dbb5 mov ecx, edi
0089dbb7 movss dword ptr [esp], xmm1
0089dbbc call 0x89d990
0089dbc1 movss xmm0, dword ptr [esi + 0x3418]
0089dbc9 addss xmm0, xmm1
0089dbcd movss dword ptr [esi + 0x3418], xmm0
0089dbd5 pop esi
0089dbd6 pop edi
0089dbd7 ret 
0089dbd8 int3 
0089dbd9 int3 
0089dbda int3 
0089dbdb int3 
0089dbdc int3 
0089dbdd int3 
0089dbde int3 
0089dbdf int3 
0089dbe0 mov eax, dword ptr [edx + 0x44]
0089dbe3 push edi
0089dbe4 mov edi, ecx
0089dbe6 test eax, eax
0089dbe8 je 0x89dc56
0089dbea mov ecx, 1
0089dbef cmp dword ptr [eax + 0x24], ecx
0089dbf2 jne 0x89dc56
0089dbf4 push esi
0089dbf5 test eax, eax
0089dbf7 je 0x89dc18
0089dbf9 cmp dword ptr [eax + 0x24], ecx
0089dbfc jne 0x89dc18
0089dbfe test eax, eax
0089dc00 je 0x89dc18
0089dc02 cmp edx, 0x1d955d0
0089dc08 jne 0x89dc11
0089dc0a mov esi, 0x1e0ee20
0089dc0f jmp 0x89dc1a
0089dc11 mov esi, 0x1e12838
0089dc16 jmp 0x89dc1a
0089dc18 xor esi, esi
0089dc1a mov ecx, edi
0089dc1c call 0x87aeb0
0089dc21 test eax, eax
0089dc23 jne 0x89dc55
0089dc25 test esi, esi
0089dc27 je 0x89dc55
0089dc29 movss xmm1, dword ptr [0xec6e14]
0089dc31 push ecx
0089dc32 lea edx, [eax + 4]
0089dc35 mov ecx, edi
0089dc37 movss dword ptr [esp], xmm1
0089dc3c call 0x89d990
0089dc41 movss xmm0, dword ptr [esi + 0x3410]
0089dc49 addss xmm0, xmm1
0089dc4d movss dword ptr [esi + 0x3410], xmm0
0089dc55 pop esi
0089dc56 pop edi
0089dc57 ret 
0089dc58 int3 
0089dc59 int3 
0089dc5a int3 
0089dc5b int3 
0089dc5c int3 
0089dc5d int3 
0089dc5e int3 
0089dc5f int3 
0089dc60 mov eax, dword ptr [edx + 0x44]
0089dc63 push edi
0089dc64 mov edi, ecx
0089dc66 test eax, eax
0089dc68 je 0x89dcd6
0089dc6a mov ecx, 1
0089dc6f cmp dword ptr [eax + 0x24], ecx
0089dc72 jne 0x89dcd6
0089dc74 push esi
0089dc75 test eax, eax
0089dc77 je 0x89dc98
0089dc79 cmp dword ptr [eax + 0x24], ecx
0089dc7c jne 0x89dc98
0089dc7e test eax, eax
0089dc80 je 0x89dc98
0089dc82 cmp edx, 0x1d955d0
0089dc88 jne 0x89dc91
0089dc8a mov esi, 0x1e0ee20
0089dc8f jmp 0x89dc9a
0089dc91 mov esi, 0x1e12838
0089dc96 jmp 0x89dc9a
0089dc98 xor esi, esi
0089dc9a mov ecx, edi
0089dc9c call 0x87aeb0
0089dca1 test eax, eax
0089dca3 jne 0x89dcd5
0089dca5 movss xmm1, dword ptr [0xec6e14]
0089dcad push ecx
0089dcae lea edx, [eax + 0x30]
0089dcb1 mov ecx, edi
0089dcb3 movss dword ptr [esp], xmm1
0089dcb8 call 0x89d990
0089dcbd test esi, esi
0089dcbf je 0x89dcd5
0089dcc1 movss xmm0, dword ptr [esi + 0x342c]
0089dcc9 addss xmm0, xmm1
0089dccd movss dword ptr [esi + 0x342c], xmm0
0089dcd5 pop esi
0089dcd6 pop edi
0089dcd7 ret 
0089dcd8 int3 
0089dcd9 int3 
0089dcda int3 
0089dcdb int3 
0089dcdc int3 
0089dcdd int3 
0089dcde int3 
0089dcdf int3 
0089dce0 mov eax, dword ptr [ecx + 0x44]
0089dce3 push ebx
0089dce4 mov ebx, edx
0089dce6 test eax, eax
0089dce8 je 0x89dd55
0089dcea cmp dword ptr [eax + 0x24], 1
0089dcee jne 0x89dd55
0089dcf0 test eax, eax
0089dcf2 je 0x89dd55
0089dcf4 cmp dword ptr [eax + 0x24], 1
0089dcf8 jne 0x89dd55
0089dcfa test eax, eax
0089dcfc je 0x89dd55
0089dcfe push edi
0089dcff mov edi, 0x1e0ee20
0089dd04 cmp ecx, 0x1d955d0
0089dd0a je 0x89dd11
0089dd0c mov edi, 0x1e12838
0089dd11 push esi
0089dd12 mov esi, dword ptr [esp + 0x10]
0089dd16 lea eax, [esi - 3]
0089dd19 cmp eax, 0x12
0089dd1c ja 0x89dd2c
0089dd1e movzx eax, byte ptr [eax + 0x89dd64]
0089dd25 jmp dword ptr [eax*4 + 0x89dd5c]
0089dd2c mov ecx, ebx
0089dd2e call 0x87aeb0
0089dd33 test eax, eax
0089dd35 jne 0x89dd53
0089dd37 mov ecx, dword ptr [ebx + 0x4c]
0089dd3a call 0x89bbe0
0089dd3f imul eax, eax, 0x16
0089dd42 add eax, esi
0089dd44 inc word ptr [edi + eax*2 + 0x25d8]
0089dd4c lea eax, [edi + eax*2 + 0x25d8]
0089dd53 pop esi
0089dd54 pop edi
0089dd55 pop ebx
0089dd56 ret 0xc
0089dd59 lea ecx, [ecx]
0089dd5c push ebx
0089dd5d fisttp qword ptr [ecx - 0x7622d400]
0089dd63 add byte ptr [eax], al
0089dd65 add dword ptr [ecx], eax
0089dd67 add dword ptr [ecx], eax
0089dd69 add dword ptr [ecx], eax
0089dd6b add dword ptr [ecx], eax
0089dd6d add dword ptr [ecx], eax
0089dd6f add dword ptr [ecx], eax
0089dd71 add dword ptr [eax], eax
0089dd73 add byte ptr [eax], al
0089dd75 add byte ptr [eax], al
0089dd77 int3 
0089dd78 int3 
0089dd79 int3 
0089dd7a int3 
0089dd7b int3 
0089dd7c int3 
0089dd7d int3 
0089dd7e int3 
0089dd7f int3 
0089dd80 mov eax, dword ptr [ecx + 0x44]
0089dd83 push ebx
0089dd84 mov ebx, edx
0089dd86 test eax, eax
0089dd88 je 0x89ddf5
0089dd8a cmp dword ptr [eax + 0x24], 1
0089dd8e jne 0x89ddf5
0089dd90 test eax, eax
0089dd92 je 0x89ddf5
0089dd94 cmp dword ptr [eax + 0x24], 1
0089dd98 jne 0x89ddf5
0089dd9a test eax, eax
0089dd9c je 0x89ddf5
0089dd9e push edi
0089dd9f mov edi, 0x1e0ee20
0089dda4 cmp ecx, 0x1d955d0
0089ddaa je 0x89ddb1
0089ddac mov edi, 0x1e12838
0089ddb1 push esi
0089ddb2 mov esi, dword ptr [esp + 0x10]
0089ddb6 lea eax, [esi - 3]
0089ddb9 cmp eax, 0x12
0089ddbc ja 0x89ddcc
0089ddbe movzx eax, byte ptr [eax + 0x89de04]
0089ddc5 jmp dword ptr [eax*4 + 0x89ddfc]
0089ddcc mov ecx, ebx
0089ddce call 0x87aeb0
0089ddd3 test eax, eax
0089ddd5 jne 0x89ddf3
0089ddd7 mov ecx, dword ptr [ebx + 0x4c]
0089ddda call 0x89bbe0
0089dddf imul eax, eax, 0x16
0089dde2 add eax, esi
0089dde4 inc word ptr [edi + eax*2 + 0x2268]
0089ddec lea eax, [edi + eax*2 + 0x2268]
0089ddf3 pop esi
0089ddf4 pop edi
0089ddf5 pop ebx
0089ddf6 ret 0xc
0089ddf9 lea ecx, [ecx]
0089ddfc fisttp qword ptr [ecx - 0x76223400]
0089de03 add byte ptr [eax], al
0089de05 add dword ptr [ecx], eax
0089de07 add dword ptr [ecx], eax
0089de09 add dword ptr [ecx], eax
0089de0b add dword ptr [ecx], eax
0089de0d add dword ptr [ecx], eax
0089de0f add dword ptr [ecx], eax
0089de11 add dword ptr [eax], eax
0089de13 add byte ptr [eax], al
0089de15 add byte ptr [eax], al
0089de17 int3 
0089de18 int3 
0089de19 int3 
0089de1a int3 
0089de1b int3 
0089de1c int3 
0089de1d int3 
0089de1e int3 
0089de1f int3 
0089de20 mov eax, dword ptr [ecx + 0x44]
0089de23 push ebx
0089de24 mov ebx, edx
0089de26 test eax, eax
0089de28 je 0x89de9a
0089de2a cmp dword ptr [eax + 0x24], 1
0089de2e jne 0x89de9a
0089de30 test eax, eax
0089de32 je 0x89de9a
0089de34 cmp dword ptr [eax + 0x24], 1
0089de38 jne 0x89de9a
0089de3a test eax, eax
0089de3c je 0x89de9a
0089de3e push esi
0089de3f mov esi, 0x1e0ee20
0089de44 cmp ecx, 0x1d955d0
0089de4a je 0x89de51
0089de4c mov esi, 0x1e12838
0089de51 push edi
0089de52 mov edi, dword ptr [esp + 0x10]
0089de56 mov ecx, edi
0089de58 call 0x87aeb0
0089de5d test eax, eax
0089de5f jne 0x89de98
0089de61 mov ecx, dword ptr [edi + 0x4c]
0089de64 call 0x89bbe0
0089de69 lea ecx, [ebx + eax*4]
0089de6c add ecx, eax
0089de6e inc word ptr [esi + ecx*2 + 0x2948]
0089de76 cmp dword ptr [0x12b79c0], 0
0089de7d lea ecx, [esi + ecx*2 + 0x2948]
0089de84 je 0x89de98
0089de86 inc word ptr [esi + eax*2 + 0x2a38]
0089de8e mov dword ptr [0x12b79c0], 0
0089de98 pop edi
0089de99 pop esi
0089de9a pop ebx
0089de9b ret 4
0089de9e pop ebp
0089de9f int3 
0089dea0 mov eax, dword ptr [ecx + 0x44]
0089dea3 push edi
0089dea4 mov edi, edx
0089dea6 test eax, eax
0089dea8 je 0x89def8
0089deaa push ebx
0089deab mov ebx, 1
0089deb0 cmp dword ptr [eax + 0x24], ebx
0089deb3 jne 0x89def7
0089deb5 test eax, eax
0089deb7 je 0x89def7
0089deb9 cmp dword ptr [eax + 0x24], ebx
0089debc jne 0x89def7
0089debe test eax, eax
0089dec0 je 0x89def7
0089dec2 push esi
0089dec3 mov esi, 0x1e0ee20
0089dec8 cmp ecx, 0x1d955d0
0089dece je 0x89ded5
RANGE 0x6f28c0
006f28c0 push esi
006f28c1 mov esi, ecx
006f28c3 push edi
006f28c4 mov edi, edx
006f28c6 test esi, esi
006f28c8 je 0x6f2934
006f28ca call 0x499000
006f28cf test eax, eax
006f28d1 je 0x6f2934
006f28d3 mov ecx, esi
006f28d5 call 0x885130
006f28da test eax, eax
006f28dc jne 0x6f2934
006f28de push ebx
006f28df mov ebx, dword ptr [esp + 0x10]
006f28e3 push eax
006f28e4 mov eax, dword ptr [esp + 0x18]
006f28e8 push eax
006f28e9 push ebx
006f28ea mov edx, edi
006f28ec mov ecx, esi
006f28ee call 0x8a54f0
006f28f3 test eax, eax
006f28f5 jne 0x6f2933
006f28f7 mov ecx, dword ptr [esi + 0x4c]
006f28fa cmp ecx, dword ptr [0x1dee620]
006f2900 jne 0x6f290a
006f2902 inc dword ptr [0x1ce7014]
006f2908 jmp 0x6f2927
006f290a mov eax, dword ptr [0x1ce7018]
006f290f inc eax
006f2910 mov dword ptr [0x1ce7018], eax
006f2915 add eax, dword ptr [0x1ce7014]
006f291b cmp eax, 2
006f291e jl 0x6f2927
006f2920 xor eax, eax
006f2922 call 0x6f1fa0
006f2927 cmp ebx, 7
006f292a jne 0x6f2933
006f292c xor eax, eax
006f292e call 0x6f1fa0
006f2933 pop ebx
006f2934 pop edi
006f2935 pop esi
006f2936 ret 8
006f2939 int1 
006f293a int3 
006f293b int3 
006f293c int3 
006f293d int3 
006f293e int3 
006f293f int3 
006f2940 call 0x499000
006f2945 test eax, eax
006f2947 je 0x6f2a23
006f294d movss xmm0, dword ptr [0x1ce7004]
006f2955 push ebx
006f2956 call 0x6c18d0
006f295b test eax, eax
006f295d jne 0x6f29b6
006f295f push 0x80
006f2964 call 0x6f1f30
006f2969 xorps xmm0, xmm0
006f296c push 0xa
006f296e sub esp, 8
006f2971 movss dword ptr [esp + 4], xmm0
006f2977 movss dword ptr [esp], xmm0
006f297c movss xmm0, dword ptr [0x1ce7004]
006f2984 push 0
006f2986 push eax
006f2987 call 0x6c17b0
006f298c call 0xa4dd20
006f2991 movzx eax, byte ptr [eax + 0xd]
006f2995 movss xmm1, dword ptr [0xf2d338]
006f299d xorps xmm0, xmm0
006f29a0 cvtsi2ss xmm0, eax
006f29a4 mulss xmm0, dword ptr [0xec7378]
006f29ac comiss xmm1, xmm0
006f29af ja 0x6f2a00
006f29b1 movaps xmm0, xmm1
006f29b4 jmp 0x6f2a00
006f29b6 cmp eax, 4
006f29b9 jne 0x6f2a22
006f29bb push 0x100
006f29c0 call 0x6f1f30
006f29c5 xorps xmm0, xmm0
006f29c8 push 0xa
006f29ca sub esp, 8
006f29cd movss dword ptr [esp + 4], xmm0
006f29d3 movss dword ptr [esp], xmm0
006f29d8 movss xmm0, dword ptr [0x1ce7004]
006f29e0 push 0
006f29e2 push eax
006f29e3 call 0x6c17b0
006f29e8 call 0xa4dd20
006f29ed movzx ecx, byte ptr [eax + 0xd]
006f29f1 xorps xmm0, xmm0
006f29f4 cvtsi2ss xmm0, ecx
006f29f8 mulss xmm0, dword ptr [0xf26da4]
006f2a00 cvttss2si ebx, xmm0
006f2a04 call 0xa4dd20
006f2a09 mov byte ptr [eax + 0xd], bl
006f2a0c call 0x498200
006f2a11 mov ecx, dword ptr [eax + 0x14]
006f2a14 push 0
006f2a16 push 0
006f2a18 mov edx, 1
006f2a1d call 0x9a1ae0
006f2a22 pop ebx
006f2a23 ret 
006f2a24 int3 
006f2a25 int3 
006f2a26 int3 
006f2a27 int3 
006f2a28 int3 
006f2a29 int3 
006f2a2a int3 
006f2a2b int3 
006f2a2c int3 
006f2a2d int3 
006f2a2e int3 
006f2a2f int3 
006f2a30 push ebp
006f2a31 mov ebp, esp
006f2a33 and esp, 0xfffffff0
006f2a36 sub esp, 0xc4
006f2a3c push ebx
006f2a3d push esi
006f2a3e mov esi, ecx
006f2a40 mov eax, dword ptr [esi + 0x1b4]
006f2a46 push edi
006f2a47 mov edi, edx
006f2a49 xor edx, edx
006f2a4b mov dword ptr [esp + 0xc], edx
RANGE 0x882800
00882800 movss xmm1, dword ptr [0xec9918]
00882808 movss xmm0, dword ptr [0x1dee884]
00882810 comiss xmm1, xmm0
00882813 jbe 0x88281c
00882815 fld dword ptr [0xec6e1c]
0088281b ret 
0088281c movss xmm1, dword ptr [0xec7210]
00882824 comiss xmm1, xmm0
00882827 jbe 0x882830
00882829 fld dword ptr [0xec6e18]
0088282f ret 
00882830 movss xmm1, dword ptr [0xf0da30]
00882838 comiss xmm1, xmm0
0088283b jbe 0x882844
0088283d fld dword ptr [0xec9918]
00882843 ret 
00882844 movss xmm1, dword ptr [0xedb324]
0088284c comiss xmm1, xmm0
0088284f jbe 0x882858
00882851 fld dword ptr [0xedb320]
00882857 ret 
00882858 fld dword ptr [0xec7210]
0088285e ret 
0088285f int3 
00882860 xorps xmm0, xmm0
00882863 movss dword ptr [0x1dee5e8], xmm0
0088286b mov dword ptr [0x1dee60c], 1
00882875 ret 
00882876 pop eax
00882877 int3 
00882878 int3 
00882879 int3 
0088287a int3 
0088287b int3 
0088287c int3 
0088287d int3 
0088287e int3 
0088287f int3 
00882880 xorps xmm0, xmm0
00882883 movss dword ptr [0x1dee5e8], xmm0