RANGE 0x882c20
00882c20 call 0x4120c0
00882c25 mov edx, 0x19
00882c2a mov ecx, eax
00882c2c call 0x411f40
00882c31 test eax, eax
00882c33 jne 0x882c38
00882c35 xor eax, eax
00882c37 ret 
00882c38 xor ecx, ecx
00882c3a call 0x6b4900
00882c3f test eax, eax
00882c41 je 0x882c35
00882c43 cmp dword ptr [0x1dee5ec], 4
00882c4a jl 0x882c35
00882c4c call 0x8802a0
00882c51 fld dword ptr [0xec6e1c]
00882c57 fxch st(1)
00882c59 fcompi st(1)
00882c5b fstp st(0)
00882c5d ja 0x882c35
00882c5f mov eax, dword ptr [0x1ce716c]
00882c64 test eax, eax
00882c66 je 0x882c35
00882c68 mov eax, dword ptr [eax + 0x120]
00882c6e test eax, eax
00882c70 je 0x882c35
00882c72 mov ecx, dword ptr [eax + 0x4c]
00882c75 call 0x882370
00882c7a mov ecx, eax
00882c7c mov edx, eax
00882c7e sar ecx, 0x1f
00882c81 neg edx
00882c83 and edx, ecx
00882c85 not ecx
00882c87 and ecx, eax
00882c89 or edx, ecx
00882c8b xor eax, eax
00882c8d cmp edx, 0xa
00882c90 setle al
00882c93 ret 
00882c94 int3 
00882c95 int3 
00882c96 int3 
00882c97 int3 
00882c98 int3 
00882c99 int3 
00882c9a int3 
00882c9b int3 
00882c9c int3 
00882c9d int3 
00882c9e int3 
00882c9f int3 
00882ca0 push ecx
00882ca1 call 0x6b1910
00882ca6 test eax, eax
00882ca8 je 0x882cbc
00882caa movss xmm0, dword ptr [0xf37cd8]
00882cb2 movss dword ptr [esp], xmm0
00882cb7 fld dword ptr [esp]
00882cba pop ecx
00882cbb ret 
00882cbc movss xmm0, dword ptr [0xf35844]
00882cc4 movss dword ptr [esp], xmm0
00882cc9 fld dword ptr [esp]
00882ccc pop ecx
00882ccd ret 
00882cce test al, 0xcc
00882cd0 push esi
00882cd1 mov esi, ecx
00882cd3 call 0x6b1910
00882cd8 test eax, eax
00882cda je 0x882cf1
00882cdc movss xmm0, dword ptr [0xf37cdc]
00882ce4 movss dword ptr [esi + 0x10], xmm0
00882ce9 mov ecx, esi
00882ceb pop esi
00882cec jmp 0x403fd0
00882cf1 movss xmm0, dword ptr [0xf357a8]
00882cf9 movss dword ptr [esi + 0x10], xmm0
00882cfe mov ecx, esi
00882d00 pop esi
00882d01 jmp 0x403fd0
00882d06 int3 
00882d07 int3 
00882d08 int3 
00882d09 int3 
00882d0a int3 
00882d0b int3 
00882d0c int3 
00882d0d int3 
00882d0e int3 
00882d0f int3 
00882d10 push esi
00882d11 mov esi, ecx
00882d13 mov ecx, dword ptr [0x1e85dbc]
00882d19 call 0xb8f5d0
00882d1e mov ecx, dword ptr [esi + 0x30]
00882d21 xor edx, edx
00882d23 cmp dword ptr [ecx + 0xc], eax
00882d26 pop esi
00882d27 setge dl
00882d2a mov eax, edx
00882d2c ret 
00882d2d int3 
00882d2e arpl sp, cx
00882d30 mov edx, dword ptr [0x1dee5ec]
00882d36 push esi
00882d37 mov esi, ecx
00882d39 test edx, edx
00882d3b jg 0x882d41
00882d3d xor eax, eax
00882d3f jmp 0x882d4c
00882d41 mov ecx, dword ptr [0x1e85dbc]
00882d47 call 0x9b0ce0
00882d4c mov ecx, dword ptr [esi + 0x30]
00882d4f sub eax, dword ptr [ecx + 0xc]
00882d52 movss xmm0, dword ptr [0xec6e18]
00882d5a comiss xmm0, dword ptr [0x1dee638]
00882d61 mov esi, eax
00882d63 jbe 0x882d87
00882d65 push edi
00882d66 mov edi, dword ptr [ecx + 0x10]
00882d69 mov ecx, dword ptr [0x1e85dbc]
00882d6f call 0x9b0d00
00882d74 sub eax, edi
00882d76 dec eax
00882d77 mov ecx, 0
00882d7c sets cl
00882d7f pop edi
00882d80 dec ecx
00882d81 and eax, ecx
00882d83 cmp esi, eax
00882d85 jge 0x882d89
00882d87 mov eax, esi
00882d89 pop esi
00882d8a ret 
00882d8b sub ecx, esp
00882d8d int3 
00882d8e int3 
00882d8f int3 
00882d90 movss xmm0, dword ptr [0xec6e18]
00882d98 comiss xmm0, dword ptr [0x1dee638]
00882d9f push esi
00882da0 push edi
00882da1 mov edi, ecx
00882da3 jbe 0x882dac
00882da5 mov esi, 1
00882daa jmp 0x882dae
00882dac xor esi, esi
00882dae mov edx, dword ptr [0x1dee5ec]
00882db4 mov ecx, dword ptr [0x1e85dbc]
00882dba call 0x9b0ce0
00882dbf mov ecx, dword ptr [edi + 0x30]
00882dc2 dec eax
00882dc3 xor edx, edx
00882dc5 cmp dword ptr [ecx + 0xc], eax
00882dc8 setl dl
00882dcb mov eax, edx
00882dcd test esi, esi
00882dcf je 0x882df6
00882dd1 test eax, eax
00882dd3 je 0x882df6
00882dd5 mov esi, dword ptr [ecx + 0x10]
00882dd8 mov ecx, dword ptr [0x1e85dbc]
00882dde call 0x9b0d00
00882de3 dec eax
00882de4 xor ecx, ecx
00882de6 cmp esi, eax
00882de8 setl cl
00882deb xor edx, edx
00882ded mov eax, ecx
00882def test eax, eax
00882df1 setne dl
00882df4 mov eax, edx
00882df6 pop edi
00882df7 pop esi
00882df8 ret 
00882df9 test ah, -0x34
00882dfc int3 
00882dfd int3 
00882dfe int3 
00882dff int3 
00882e00 mov ecx, 0x12bd3f8
00882e05 call 0x6cd5b0
00882e0a fstp dword ptr [0x1dee6c4]
00882e10 ret 
00882e11 leave 
00882e12 int3 
00882e13 int3 
00882e14 int3 
00882e15 int3 
00882e16 int3 
00882e17 int3 
00882e18 int3 
00882e19 int3 
00882e1a int3 
00882e1b int3 
00882e1c int3 
00882e1d int3 
00882e1e int3 
00882e1f int3 
00882e20 mov eax, dword ptr [0x1e85d3c]
00882e25 movss xmm0, dword ptr [eax*4 + 0xf35874]
00882e2e movss dword ptr [0x1dee670], xmm0
00882e36 ret 
00882e37 add al, 0xcc
00882e39 int3 
00882e3a int3 
00882e3b int3 
00882e3c int3 
00882e3d int3 
00882e3e int3 
00882e3f int3 
00882e40 push ebp
00882e41 mov ebp, esp
00882e43 and esp, 0xfffffff0
00882e46 sub esp, 0x10
00882e49 mov eax, dword ptr [0x1dee620]
00882e4e movaps xmm0, xmmword ptr [0x1dee5d0]
00882e55 mov ecx, dword ptr [eax + 0x30]
00882e58 xorps xmm1, xmm1
00882e5b movaps xmmword ptr [esp], xmm0
RANGE 0x967f30
00967f30 mul ah
00967f32 add dword ptr [ebx + 0x1e4f6a8], esp
00967f38 mov dword ptr [0x1e4f6ac], ecx
00967f3e mov dword ptr [0x1e4f6b0], eax
00967f43 mov dword ptr [0x1e4f6b4], ecx
00967f49 mov dword ptr [0x1e4f6b8], eax
00967f4e mov dword ptr [0x1e4f6bc], ecx
00967f54 mov dword ptr [0x1e4f6c0], eax
00967f59 mov dword ptr [0x1e4f6c4], ecx
00967f5f mov dword ptr [0x1e4f6c8], eax
00967f64 mov dword ptr [0x1e4f6cc], ecx
00967f6a ret 
00967f6b int3 
00967f6c int3 
00967f6d int3 
00967f6e int3 
00967f6f int3 
00967f70 push ecx
00967f71 push esi
00967f72 push edi
00967f73 mov esi, ecx
00967f75 call 0x9f4070
00967f7a cmp esi, eax
00967f7c mov esi, 0x1d95520
00967f81 je 0x967f88
00967f83 mov esi, 0x1d955d0
00967f88 mov eax, dword ptr [esi + 0x30]
00967f8b mov ecx, dword ptr [0x1e85dbc]
00967f91 mov edi, dword ptr [eax + 0xc]
00967f94 call 0xb8f5d0
00967f99 mov edx, dword ptr [0x1dee5ec]
00967f9f sub eax, edi
00967fa1 xorps xmm0, xmm0
00967fa4 cvtsi2ss xmm0, eax
00967fa8 movss dword ptr [esp + 8], xmm0
00967fae movss xmm0, dword ptr [0xec6e18]
00967fb6 comiss xmm0, dword ptr [0x1dee638]
00967fbd jbe 0x967fee
00967fbf mov eax, dword ptr [esi + 0x30]
00967fc2 mov ecx, dword ptr [0x1e85dbc]
00967fc8 mov edi, dword ptr [eax + 0xc]
00967fcb push ebx
00967fcc push ebp
00967fcd mov ebp, dword ptr [eax + 0x10]
00967fd0 mov ebx, ecx
00967fd2 call 0x9b0ce0
00967fd7 mov esi, eax
00967fd9 mov ecx, ebx
00967fdb sub esi, edi
00967fdd call 0x9b0d00
00967fe2 sub eax, ebp
00967fe4 pop ebp
00967fe5 pop ebx
00967fe6 cmp eax, esi
00967fe8 jl 0x968001
00967fea mov eax, esi
00967fec jmp 0x968001
00967fee mov ecx, dword ptr [esi + 0x30]
00967ff1 mov esi, dword ptr [ecx + 0xc]
00967ff4 mov ecx, dword ptr [0x1e85dbc]
00967ffa call 0x9b0ce0
00967fff sub eax, esi
00968001 xorps xmm0, xmm0
00968004 xorps xmm1, xmm1
00968007 cvtsi2ss xmm1, eax
0096800b comiss xmm0, xmm1
0096800e pop edi
0096800f pop esi
00968010 jbe 0x968019
00968012 mov eax, 4
00968017 pop ecx
00968018 ret 
00968019 ucomiss xmm1, xmm0
0096801c lahf 
0096801d test ah, 0x44
00968020 jp 0x968029
00968022 mov eax, 3
00968027 pop ecx
00968028 ret 
00968029 movss xmm1, dword ptr [esp]
0096802e comiss xmm0, xmm1
00968031 jbe 0x96803a
00968033 mov eax, 2
00968038 pop ecx
00968039 ret 
0096803a ucomiss xmm1, xmm0
0096803d lahf 
0096803e test ah, 0x44
00968041 jp 0x96804a
00968043 mov eax, 1
00968048 pop ecx
00968049 ret 
0096804a xor eax, eax
0096804c pop ecx
0096804d ret 
0096804e int3 
0096804f int3 
00968050 movss xmm0, dword ptr [esp + 4]
00968056 push ebp
00968057 push esi
00968058 movaps xmm1, xmm0
0096805b subss xmm1, dword ptr [0xec747c]
00968063 push edi
00968064 mov ebp, edx
00968066 movss dword ptr [esp + 0x10], xmm1
0096806c cvttss2si eax, dword ptr [esp + 0x10]
00968072 xorps xmm2, xmm2
00968075 cvtsi2ss xmm2, eax
00968079 comiss xmm2, xmm1
0096807c jb 0x968088
RANGE 0x8a54b0
008a54b0 sal byte ptr [esp + eax - 0xd], 0xf
008a54b5 adc dword ptr [eax], ecx
008a54b7 pop edi
008a54b8 mov eax, esi
008a54ba pop esi
008a54bb pop ebx
008a54bc add esp, 0x14
008a54bf ret 4
008a54c2 stc 
008a54c3 int3 
008a54c4 int3 
008a54c5 int3 
008a54c6 int3 
008a54c7 int3 
008a54c8 int3 
008a54c9 int3 
008a54ca int3 
008a54cb int3 
008a54cc int3 
008a54cd int3 
008a54ce int3 
008a54cf int3 
008a54d0 movss xmm0, dword ptr [0xf35ffc]
008a54d8 push ecx
008a54d9 movss dword ptr [esp], xmm0
008a54de call 0x885a50
008a54e3 ret 
008a54e4 int3 
008a54e5 int3 
008a54e6 int3 
008a54e7 int3 
008a54e8 int3 
008a54e9 int3 
008a54ea int3 
008a54eb int3 
008a54ec int3 
008a54ed int3 
008a54ee int3 
008a54ef int3 
008a54f0 push ecx
008a54f1 push ebx
008a54f2 push ebp
008a54f3 push esi
008a54f4 mov ebp, ecx
008a54f6 push edi
008a54f7 mov edi, edx
008a54f9 mov dword ptr [esp + 0x10], ebp
008a54fd xor ebx, ebx
008a54ff call 0x6c3e40
008a5504 mov esi, eax
008a5506 cmp esi, 5
008a5509 je 0x8a565f
008a550f cmp esi, 6
008a5512 je 0x8a565f
008a5518 mov eax, dword ptr [ebp + 0x4c]
008a551b cmp eax, dword ptr [0x1dee620]
008a5521 je 0x8a565f
008a5527 cmp eax, dword ptr [0x1dee624]
008a552d jne 0x8a5541
008a552f mov edx, edi
008a5531 mov ecx, ebp
008a5533 call 0x885c30
008a5538 test eax, eax
008a553a je 0x8a5541
008a553c mov ebx, 1
008a5541 mov edi, dword ptr [ebp + 0x4c]
008a5544 mov ebp, dword ptr [esp + 0x1c]
008a5548 test ebx, ebx
008a554a jne 0x8a5606
008a5550 cmp dword ptr [0x1dee5ec], 4
008a5557 jl 0x8a5606
008a555d movss xmm1, dword ptr [0xec9918]
008a5565 movss xmm0, dword ptr [0x1dee638]
008a556d comiss xmm1, xmm0
008a5570 jbe 0x8a55b9
008a5572 mov ecx, dword ptr [esp + 0x10]
008a5576 call 0x6b5300
008a557b mov ecx, eax
008a557d call 0x9a8280
008a5582 test eax, eax
008a5584 jne 0x8a55b1
008a5586 mov ecx, edi
008a5588 call 0x8a2110
008a558d test eax, eax
008a558f jne 0x8a55b1
008a5591 mov ecx, edi
008a5593 call 0x882d10
008a5598 test eax, eax
008a559a jne 0x8a55b1
008a559c test ebp, ebp
008a559e jne 0x8a55b1
008a55a0 test esi, esi
008a55a2 je 0x8a5650
008a55a8 cmp esi, 1
008a55ab je 0x8a5650
008a55b1 movss xmm0, dword ptr [0x1dee638]
008a55b9 cmp dword ptr [0x1dee5ec], 4
008a55c0 jl 0x8a5606
008a55c2 divss xmm0, dword ptr [0x1dee888]
008a55ca addss xmm0, dword ptr [0xec6e14]
008a55d2 cvttss2si eax, xmm0
008a55d6 cmp eax, 1
008a55d9 jne 0x8a5606
008a55db mov ecx, edi
008a55dd call 0x882370
008a55e2 cmp eax, 3
008a55e5 jl 0x8a5606
008a55e7 test esi, esi
008a55e9 je 0x8a55f0
008a55eb cmp esi, 1
008a55ee jne 0x8a5606
RANGE 0x8bde70
008bde70 adc dword ptr [0x1dee5e8], eax
008bde76 mov dword ptr [0x1dee60c], 1
008bde80 pop edi
008bde81 pop esi
008bde82 pop ebx
008bde83 mov esp, ebp
008bde85 pop ebp
008bde86 ret 
008bde87 pushal 
008bde88 int3 
008bde89 int3 
008bde8a int3 
008bde8b int3 
008bde8c int3 
008bde8d int3 
008bde8e int3 
008bde8f int3 
008bde90 cmp dword ptr [0x1dee874], 3
008bde97 jne 0x8bdeae
008bde99 mov dword ptr [0x1dee874], 4
008bdea3 mov dword ptr [0x1dee928], ecx
008bdea9 jmp 0x8bca60
008bdeae ret 
008bdeaf int3 
008bdeb0 mov eax, dword ptr [esp + 8]
008bdeb4 sub esp, 0x14
008bdeb7 push ebp
008bdeb8 push esi
008bdeb9 mov esi, edx
008bdebb mov ebp, ecx
008bdebd test eax, eax
008bdebf je 0x8bdec7
008bdec1 mov dword ptr [eax], 0
008bdec7 call 0x6ce030
008bdecc test eax, eax
008bdece jne 0x8bded8
008bded0 pop esi
008bded1 pop ebp
008bded2 add esp, 0x14
008bded5 ret 0xc
008bded8 cmp dword ptr [esp + 0x28], 0
008bdedd push ebx
008bdede mov ebx, dword ptr [ebp + 0x38]
008bdee1 push edi
008bdee2 mov edi, dword ptr [esi + 0x4c]
008bdee5 jne 0x8be002
008bdeeb cmp dword ptr [esp + 0x28], 0
008bdef0 je 0x8bdf21
008bdef2 mov ecx, esi
008bdef4 call 0x8824d0
008bdef9 fld dword ptr [0xec6fc4]
008bdeff fxch st(1)
008bdf01 fcompi st(1)
008bdf03 fstp st(0)
008bdf05 jbe 0x8bdf21
008bdf07 mov ecx, ebp
008bdf09 call 0x8820a0
008bdf0e test eax, eax
008bdf10 je 0x8bdf21
008bdf12 mov ecx, ebp
008bdf14 call 0x7d0280
008bdf19 test eax, eax
008bdf1b je 0x8be002
008bdf21 mov ecx, edi
008bdf23 call 0x8a2110
008bdf28 test eax, eax
008bdf2a je 0x8bdf77
008bdf2c mov edi, 4
008bdf31 mov edx, 2
008bdf36 mov eax, dword ptr [esp + 0x20]
008bdf3a mov dword ptr [0x1dee8e0], eax
008bdf3f mov ecx, ebp
008bdf41 mov dword ptr [0x1dee8d0], ebp
008bdf47 mov dword ptr [0x1dee8d4], edi
008bdf4d mov dword ptr [0x1dee8d8], edx
008bdf53 mov dword ptr [0x1dee8dc], edx
008bdf59 mov dword ptr [0x1dee8e0], 0
008bdf63 call 0x6c7df0
008bdf68 pop edi
008bdf69 pop ebx
008bdf6a pop esi
008bdf6b mov eax, 1
008bdf70 pop ebp
008bdf71 add esp, 0x14
008bdf74 ret 0xc
008bdf77 mov ecx, dword ptr [0x1e85dbc]
008bdf7d call 0xb8f5d0
008bdf82 mov ecx, dword ptr [edi + 0x30]
008bdf85 cmp dword ptr [ecx + 0xc], eax
008bdf88 jl 0x8bdf91
008bdf8a mov edi, 3
008bdf8f jmp 0x8bdf31
008bdf91 call 0x6a8af0
008bdf96 mov esi, eax
008bdf98 test esi, esi
008bdf9a jne 0x8bdfaa
008bdf9c mov esi, dword ptr [0x1dee878]
008bdfa2 test esi, esi
008bdfa4 je 0x8be086
008bdfaa cmp ebp, esi
008bdfac je 0x8be086
008bdfb2 mov edx, dword ptr [ebp + 0x4c]
008bdfb5 cmp edx, dword ptr [esi + 0x4c]
008bdfb8 jne 0x8be086
008bdfbe mov eax, dword ptr [ebx + 0x1bc]
008bdfc4 dec eax
008bdfc5 je 0x8bdfd8
008bdfc7 sub eax, 2
008bdfca je 0x8bdff6
008bdfcc pop edi
008bdfcd pop ebx
008bdfce pop esi
008bdfcf xor eax, eax
008bdfd1 pop ebp
008bdfd2 add esp, 0x14
008bdfd5 ret 0xc
008bdfd8 mov ecx, esi
008bdfda call 0x8820a0
008bdfdf test eax, eax
008bdfe1 je 0x8be086
008bdfe7 mov ecx, esi
008bdfe9 call 0x7d0280
008bdfee test eax, eax
008bdff0 jne 0x8be086
008bdff6 mov edi, 2
008bdffb mov edx, edi
008bdffd jmp 0x8bdf36
008be002 mov edx, dword ptr [0x1ce716c]
008be008 mov edi, 1
008be00d test edx, edx
008be00f je 0x8be02b
008be011 mov ecx, dword ptr [edx]
008be013 test ecx, ecx
008be015 je 0x8be02b
008be017 cmp dword ptr [ecx + 0x74], edi
008be01a jne 0x8be02b
008be01c mov eax, dword ptr [ecx]