00884990 test ecx, ecx
00884992 je 0x8849ae
00884994 mov eax, dword ptr [0x1de1d48]
00884999 lea edx, [eax + 1]
0088499c cmp edx, 3
0088499f jg 0x8849ae
008849a1 mov dword ptr [eax*4 + 0x1de1d3c], ecx
008849a8 inc dword ptr [0x1de1d48]
008849ae ret 
008849af int3 
008849b0 cmp dword ptr [0x1e85cd4], 8
008849b7 je 0x8849c4
008849b9 test ecx, ecx
008849bb je 0x8849c4
008849bd fld dword ptr [ecx + 0x358]
008849c3 ret 
008849c4 fldz 
008849c6 ret 
008849c7 out 0xcc, al
008849c9 int3 
008849ca int3 
008849cb int3 
008849cc int3 
008849cd int3 
008849ce int3 
008849cf int3 
008849d0 sub esp, 0x20
008849d3 push edi
008849d4 mov ecx, esi
008849d6 call 0x6d6900
008849db fstp dword ptr [esp + 4]
008849df movss xmm0, dword ptr [esi + 0x1274]
008849e7 addss xmm0, dword ptr [esp + 0x28]
008849ed movss dword ptr [esi + 0x1274], xmm0
008849f5 call 0x6b5320
008849fa fstp dword ptr [esp + 0xc]
008849fe call 0x6b5310
00884a03 fstp dword ptr [esp + 8]
00884a07 call 0x6b5320
00884a0c fadd dword ptr [esp + 8]
00884a10 fmul dword ptr [0xec6fd4]
00884a16 fstp dword ptr [esp + 0x10]
00884a1a call 0x6b5310
00884a1f movss xmm0, dword ptr [esp + 0x28]
00884a25 fstp dword ptr [esp + 0x14]
00884a29 comiss xmm0, dword ptr [0xf0fc08]
00884a30 jbe 0x884ab8
00884a36 mov edi, 4
00884a3b cmp dword ptr [esi + 0x1270], edi
00884a41 jge 0x884b3c
00884a47 jmp 0x884a50
00884a49 lea esp, [esp]
00884a50 movss xmm0, dword ptr [edi*4 + 0xf35f0c]
00884a59 movss dword ptr [esp + 0x18], xmm0
00884a5f movss xmm0, dword ptr [edi*4 + 0xf35f20]
00884a68 movss dword ptr [esp + 0x1c], xmm0
00884a6e movss xmm0, dword ptr [edi*4 + 0xf35f34]
00884a77 push ecx
00884a78 movss dword ptr [esp + 0x24], xmm0
00884a7e movss xmm0, dword ptr [esp + 8]
00884a84 lea ecx, [esp + 0x10]
00884a88 movss dword ptr [esp], xmm0
00884a8d call 0x6cb570
00884a92 fsub dword ptr [0xec6fc4]
00884a98 fld dword ptr [esi + 0x1274]
00884a9e fcompi st(1)
00884aa0 fstp st(0)
00884aa2 ja 0x884b36
00884aa8 dec edi
00884aa9 cmp edi, dword ptr [esi + 0x1270]
00884aaf jg 0x884a50
00884ab1 pop edi
00884ab2 add esp, 0x20
00884ab5 ret 4
00884ab8 xor edi, edi
00884aba cmp dword ptr [esi + 0x1270], edi
00884ac0 jle 0x884b3c
00884ac2 jmp 0x884ad0
00884ac4 lea esp, [esp]
00884acb jmp 0x884ad0
00884acd lea ecx, [ecx]
00884ad0 movss xmm0, dword ptr [edi*4 + 0xf35f48]
00884ad9 movss dword ptr [esp + 0x18], xmm0
00884adf movss xmm0, dword ptr [edi*4 + 0xf35f5c]
00884ae8 movss dword ptr [esp + 0x1c], xmm0
00884aee movss xmm0, dword ptr [edi*4 + 0xf35f70]
00884af7 push ecx
00884af8 movss dword ptr [esp + 0x24], xmm0
00884afe movss xmm0, dword ptr [esp + 8]
00884b04 lea ecx, [esp + 0x10]
00884b08 movss dword ptr [esp], xmm0
00884b0d call 0x6cb570
00884b12 fadd dword ptr [0xec6fc4]
00884b18 fld dword ptr [esi + 0x1274]
00884b1e fxch st(1)
00884b20 fcompi st(1)
00884b22 fstp st(0)
00884b24 ja 0x884b36
00884b26 inc edi
00884b27 cmp edi, dword ptr [esi + 0x1270]
00884b2d jl 0x884ad0
00884b2f pop edi
00884b30 add esp, 0x20
00884b33 ret 4
00884b36 mov dword ptr [esi + 0x1270], edi
00884b3c pop edi
00884b3d add esp, 0x20
00884b40 ret 4
00884b43 push esi
00884b44 int3 
00884b45 int3 
00884b46 int3 
00884b47 int3 
00884b48 int3 
00884b49 int3 
00884b4a int3 
00884b4b int3 
00884b4c int3 
00884b4d int3 
00884b4e int3 
00884b4f int3 
00884b50 mov eax, dword ptr [esp + 4]
00884b54 push esi
00884b55 push edi
00884b56 mov esi, edx
00884b58 mov edi, ecx
00884b5a cmp eax, 2
00884b5d jne 0x884b8c
00884b5f mov eax, dword ptr [esp + 0x10]
00884b63 cmp eax, 7
00884b66 je 0x884b72
00884b68 cmp eax, 8
00884b6b je 0x884b72
00884b6d cmp eax, 9
00884b70 jne 0x884bb2
00884b72 mov eax, dword ptr [esp + 0x14]
00884b76 movss xmm0, dword ptr [eax]
00884b7a xorps xmm1, xmm1
00884b7d comiss xmm1, xmm0
00884b80 jbe 0x884bb2
00884b82 mulss xmm0, dword ptr [0xec6fd4]
00884b8a jmp 0x884b9d
00884b8c cmp eax, 1
00884b8f jne 0x884bb2
00884b91 mov eax, dword ptr [esp + 0x14]
00884b95 xorps xmm0, xmm0
00884b98 comiss xmm0, dword ptr [eax]
00884b9b jbe 0x884bb2
00884b9d movss dword ptr [eax], xmm0
00884ba1 call 0x6a9f10
00884ba6 push eax
00884ba7 push 0x3c
00884ba9 mov edx, esi
00884bab mov ecx, edi
00884bad call 0x6ac0f0
00884bb2 pop edi
00884bb3 pop esi
00884bb4 ret 0xc
00884bb7 .byte 0x8f
00884bb8 int3 
00884bb9 int3 
00884bba int3 
00884bbb int3 
00884bbc int3 
00884bbd int3 
00884bbe int3 
00884bbf int3 
00884bc0 mov eax, dword ptr [esp + 4]
00884bc4 cmp eax, 3
00884bc7 je 0x884bce
00884bc9 cmp eax, 4
00884bcc jne 0x884bfd
00884bce mov eax, dword ptr [esp + 8]
00884bd2 cmp eax, 7
00884bd5 je 0x884be1
00884bd7 cmp eax, 8
00884bda je 0x884be1
00884bdc cmp eax, 9
00884bdf jne 0x884bfd
00884be1 mov eax, dword ptr [esp + 0xc]
00884be5 movss xmm0, dword ptr [eax]
00884be9 xorps xmm1, xmm1
00884bec comiss xmm1, xmm0
00884bef jbe 0x884bfd
00884bf1 mulss xmm0, dword ptr [0xec6fd4]
00884bf9 movss dword ptr [eax], xmm0
00884bfd ret 0xc
00884c00 test edx, edx
00884c02 je 0x884c18
00884c04 mov ecx, 0x1e165f0
00884c09 call 0x6ac130
00884c0e test eax, eax
00884c10 je 0x884c18
00884c12 mov eax, 1
00884c17 ret 
00884c18 xor eax, eax
00884c1a ret 
00884c1b sub eax, 0xcccccccc
00884c20 push ecx
00884c21 push esi
00884c22 mov esi, eax
00884c24 mov ecx, esi
00884c26 call 0x6d6900
00884c2b fstp dword ptr [esp + 4]
00884c2f movss xmm0, dword ptr [esi + 0x1274]
00884c37 comiss xmm0, dword ptr [0xf0fc08]
00884c3e jbe 0x884c5a
00884c40 movss xmm0, dword ptr [esp + 4]
00884c46 push ecx
00884c47 mov ecx, 0xf35efc
00884c4c movss dword ptr [esp], xmm0
00884c51 call 0x6cb4c0
00884c56 fstp dword ptr [esp + 4]
00884c5a movss xmm0, dword ptr [esp + 4]
00884c60 push ecx
00884c61 mov ecx, dword ptr [esp + 0x10]
00884c65 movss dword ptr [esp], xmm0
00884c6a call 0x6cb4c0
00884c6f fchs 
00884c71 fmul dword ptr [esi + 0x1274]
00884c77 push ecx
00884c78 fmul dword ptr [esp + 0x14]
00884c7c fstp dword ptr [esp]
00884c7f call 0x8849d0
00884c84 pop esi
00884c85 pop ecx
00884c86 ret 8
00884c89 xor cl, ah
00884c8b int3 
00884c8c int3 
00884c8d int3 
00884c8e int3 
00884c8f int3 
00884c90 push ecx
00884c91 push ebx
00884c92 push esi
00884c93 mov ebx, edx
00884c95 mov esi, ecx
00884c97 call 0x6b1f50
00884c9c test eax, eax
00884c9e jne 0x884e1c
00884ca4 call 0x6c5400
00884ca9 test eax, eax
00884cab jne 0x884e1c
00884cb1 movzx eax, byte ptr [ebx + 0x884e34]
00884cb8 xorps xmm1, xmm1
00884cbb jmp dword ptr [eax*4 + 0x884e20]
00884cc2 movss xmm0, dword ptr [ebx*4 + 0xf35e7c]
00884ccb movss dword ptr [esp + 8], xmm0
00884cd1 test esi, esi
00884cd3 je 0x884d64
00884cd9 cmp dword ptr [esi + 0x74], 1
00884cdd jne 0x884d64
00884ce3 mov edx, dword ptr [esi]
00884ce5 mov eax, dword ptr [edx + 0x20]
00884ce8 push edi
00884ce9 mov ecx, esi
00884ceb call eax
00884ced mov edi, eax
00884cef mov edx, edi
00884cf1 mov ecx, 0x1e165fc
00884cf6 call 0x6ac130
00884cfb test eax, eax
00884cfd je 0x884d18
00884cff mov edx, dword ptr [esi + 0x1270]
00884d05 lea ecx, [esp + 0xc]
00884d09 push ecx
00884d0a push ebx
00884d0b push edx
00884d0c mov edx, edi
00884d0e mov ecx, 0x1e165fc
00884d13 call 0x884b50
00884d18 mov edx, edi
00884d1a mov ecx, 0x1196640
00884d1f call 0x6ac130
00884d24 test eax, eax
00884d26 je 0x884d3a
00884d28 lea eax, [esp + 0xc]
00884d2c push eax
00884d2d push ebx
00884d2e mov edx, edi
00884d30 mov ecx, 0x1196640
00884d35 call 0x6add70
00884d3a mov edx, edi
00884d3c mov ecx, 0x1e165f0
00884d41 call 0x6ac130
00884d46 test eax, eax
00884d48 je 0x884d63
00884d4a mov edx, dword ptr [esi + 0x1270]
00884d50 lea ecx, [esp + 0xc]
00884d54 push ecx
00884d55 push ebx
00884d56 push edx
00884d57 mov edx, edi
00884d59 mov ecx, 0x1e165f0
00884d5e call 0x884bc0
00884d63 pop edi
00884d64 movss xmm0, dword ptr [esp + 8]
00884d6a jmp 0x884e00
00884d6f mov edx, esi
00884d71 call 0x884c00
00884d76 test eax, eax
00884d78 jne 0x884e0b
00884d7e movss xmm0, dword ptr [0xec6e14]
00884d86 push ecx
00884d87 movss dword ptr [esp], xmm0
00884d8c push 0xf35edc
00884d91 mov eax, esi
00884d93 call 0x884c20
00884d98 jmp 0x884e0b
00884d9a mov edx, esi
00884d9c call 0x884c00
00884da1 test eax, eax
00884da3 jne 0x884e0b
00884da5 movss xmm0, dword ptr [0xec6e14]
00884dad push ecx
00884dae movss dword ptr [esp], xmm0
00884db3 push 0xf35ecc
00884db8 mov eax, esi
00884dba call 0x884c20
00884dbf jmp 0x884e0b
00884dc1 mov edx, esi
00884dc3 call 0x884c00
00884dc8 test eax, eax
00884dca jne 0x884e0b
00884dcc movss xmm0, dword ptr [0xec6e14]
00884dd4 push ecx
00884dd5 movss dword ptr [esp], xmm0
00884dda push 0xf35ebc
00884ddf mov eax, esi
00884de1 call 0x884c20
00884de6 jmp 0x884e0b
00884de8 movss xmm0, dword ptr [0xec6e10]
00884df0 subss xmm0, dword ptr [esi + 0x1274]
00884df8 comiss xmm0, xmm1
00884dfb ja 0x884e00
00884dfd movaps xmm0, xmm1
00884e00 push ecx
00884e01 movss dword ptr [esp], xmm0
00884e06 call 0x8849d0
00884e0b xorps xmm0, xmm0
00884e0e mov dword ptr [esi + 0x127c], ebx
00884e14 movss dword ptr [esi + 0x1278], xmm0
00884e1c pop esi
00884e1d pop ebx
00884e1e pop ecx
00884e1f ret 
00884e20 ret 0x884c
00884e23 add byte ptr [edi + 0x4d], ch
00884e26 mov byte ptr [eax], al
00884e28 lcall 0x884d, 0xc100884d
00884e2f add al, ch
00884e31 dec ebp
00884e32 mov byte ptr [eax], al
00884e34 add byte ptr [eax], al
00884e36 add byte ptr [eax], al
00884e38 add byte ptr [eax], al
00884e3a add byte ptr [eax], al
00884e3c add byte ptr [eax], al
00884e3e add byte ptr [eax], al
00884e40 add dword ptr [edx], eax
00884e42 add eax, dword ptr [esp + ecx*8]
00884e45 int3 
00884e46 int3 
00884e47 int3 
00884e48 int3 
00884e49 int3 
00884e4a int3 
00884e4b int3 
00884e4c int3 
00884e4d int3 
00884e4e int3 
00884e4f int3 
00884e50 xor ecx, ecx
00884e52 call 0x9f5440
00884e57 test eax, eax
00884e59 je 0x884e7e
00884e5b mov ecx, dword ptr [eax + 0x30]
00884e5e xorps xmm0, xmm0
00884e61 movss dword ptr [ecx + 0x1274], xmm0
00884e69 mov dword ptr [ecx + 0x1270], 2
00884e73 mov ecx, eax
00884e75 call 0x9f5540
00884e7a test eax, eax
00884e7c jne 0x884e5b
00884e7e ret 
00884e7f int3 
00884e80 sub esp, 8
00884e83 call 0x6b1f50
00884e88 test eax, eax
00884e8a jne 0x884f51
00884e90 call 0x6c5400
00884e95 test eax, eax
00884e97 jne 0x884f51
00884e9d push edi
00884e9e xor ecx, ecx
00884ea0 call 0x9f5440
00884ea5 mov edi, eax
00884ea7 test edi, edi
00884ea9 je 0x884f50
00884eaf movss xmm0, dword ptr [esp + 0x10]
00884eb5 mulss xmm0, dword ptr [0xec7064]
00884ebd movss dword ptr [esp + 8], xmm0
00884ec3 push esi
00884ec4 mov esi, dword ptr [edi + 0x30]
00884ec7 movss xmm0, dword ptr [esi + 0x1278]
00884ecf addss xmm0, dword ptr [esp + 0x14]
00884ed5 mov ecx, esi
00884ed7 movss dword ptr [esi + 0x1278], xmm0
00884edf call 0x6d6900
00884ee4 fstp dword ptr [esp + 8]
00884ee8 movss xmm0, dword ptr [esi + 0x1274]
00884ef0 comiss xmm0, dword ptr [0xf0fc08]
00884ef7 jbe 0x884f13
00884ef9 movss xmm0, dword ptr [esp + 8]
00884eff push ecx
00884f00 mov ecx, 0xf35efc
00884f05 movss dword ptr [esp], xmm0
00884f0a call 0x6cb4c0
00884f0f fstp dword ptr [esp + 8]
00884f13 movss xmm0, dword ptr [esp + 8]
00884f19 push ecx
00884f1a mov ecx, 0xf35eec
00884f1f movss dword ptr [esp], xmm0
00884f24 call 0x6cb4c0
00884f29 fchs 
00884f2b fmul dword ptr [esi + 0x1274]
00884f31 push ecx
00884f32 fmul dword ptr [esp + 0x10]
00884f36 fstp dword ptr [esp]
00884f39 call 0x8849d0
00884f3e mov ecx, edi
00884f40 call 0x9f5540
00884f45 mov edi, eax
00884f47 test edi, edi
00884f49 jne 0x884ec4
00884f4f pop esi
00884f50 pop edi
00884f51 add esp, 8
00884f54 ret 4
00884f57 lahf 
00884f58 int3 
00884f59 int3 
00884f5a int3 
00884f5b int3 
00884f5c int3 
00884f5d int3 
00884f5e int3 
00884f5f int3 
00884f60 push edi
00884f61 mov edi, ecx
00884f63 call 0x6b1f50
00884f68 test eax, eax
00884f6a jne 0x884fa3
00884f6c call 0x6c5400
00884f71 test eax, eax
00884f73 jne 0x884fa3
00884f75 push esi
00884f76 xor ecx, ecx
00884f78 call 0x6b49a0
00884f7d mov esi, eax
00884f7f test esi, esi
00884f81 je 0x884fa2
00884f83 mov edx, edi
00884f85 mov ecx, esi
00884f87 call 0x884c90
00884f8c mov ecx, esi
00884f8e call 0x54b630
00884f93 mov eax, dword ptr [esi]
00884f95 mov edx, dword ptr [eax + 0xc]
00884f98 mov ecx, esi
00884f9a call edx
00884f9c mov esi, eax
00884f9e test esi, esi
00884fa0 jne 0x884f83
00884fa2 pop esi
00884fa3 pop edi
00884fa4 ret 
00884fa5 imul ecx, esp, 0xcccccccc
00884fab int3 
00884fac int3 
00884fad int3 
00884fae int3 
00884faf int3 
00884fb0 push ecx
00884fb1 push esi
00884fb2 push edi
00884fb3 mov esi, edx
00884fb5 mov edi, ecx
00884fb7 call 0x6b1f50
00884fbc test eax, eax
00884fbe jne 0x884fc9
00884fc0 call 0x6c5400
00884fc5 test eax, eax
00884fc7 je 0x884fd1
00884fc9 fldz 
00884fcb pop edi
00884fcc pop esi
00884fcd pop ecx
00884fce ret 4
00884fd1 mov ecx, esi
00884fd3 call 0x6b4fd0
00884fd8 xorps xmm0, xmm0
00884fdb cvtsi2ss xmm0, eax
00884fdf mov ecx, esi
00884fe1 movss dword ptr [esp + 8], xmm0
00884fe7 call 0x6b4fe0
00884fec movss xmm5, dword ptr [esp + 8]
00884ff2 xorps xmm4, xmm4
00884ff5 xorps xmm3, xmm3
00884ff8 cvtsi2ss xmm3, eax
00884ffc lea eax, [esi + esi*4]
00884fff add eax, dword ptr [edi + 0x1270]
00885005 movaps xmm0, xmm3
00885008 movss xmm2, dword ptr [eax*4 + 0xf35a58]
00885011 comiss xmm2, xmm4
00885014 addss xmm0, xmm5
00885018 mulss xmm0, dword ptr [0xec6fd4]
00885020 movss dword ptr [esp + 8], xmm2
00885026 jbe 0x88506d
00885028 movss xmm1, dword ptr [esp + 0x10]
0088502e subss xmm1, xmm0
00885032 movaps xmm5, xmm2
00885035 xorps xmm5, xmmword ptr [0xec6fe0]
0088503c mulss xmm1, xmm5
00885040 subss xmm3, xmm0
00885044 divss xmm1, xmm3
00885048 addss xmm1, xmm2
0088504c comiss xmm4, xmm1
0088504f jbe 0x885054
00885051 movaps xmm1, xmm4
00885054 comiss xmm2, xmm1
00885057 jbe 0x8850ab
00885059 movss dword ptr [esp + 8], xmm1
0088505f fld dword ptr [esp + 8]
00885063 pop edi
00885064 fmul dword ptr [esp + 0xc]
00885068 pop esi
00885069 pop ecx
0088506a ret 4
0088506d comiss xmm4, xmm2
00885070 jbe 0x885077
00885072 movaps xmm3, xmm4
00885075 jmp 0x88507a
00885077 movaps xmm3, xmm2
0088507a comiss xmm2, xmm4
0088507d ja 0x885082
0088507f movaps xmm4, xmm2
00885082 movss xmm1, dword ptr [esp + 0x10]
00885088 subss xmm1, xmm5
0088508c mulss xmm1, xmm2
00885090 subss xmm0, xmm5
00885094 divss xmm1, xmm0
00885098 comiss xmm4, xmm1
0088509b jbe 0x8850a0
0088509d movaps xmm1, xmm4
008850a0 comiss xmm3, xmm1
008850a3 ja 0x885059
008850a5 movss dword ptr [esp + 8], xmm3
008850ab fld dword ptr [esp + 8]
008850af pop edi
008850b0 fmul dword ptr [esp + 0xc]
008850b4 pop esi
008850b5 pop ecx
008850b6 ret 4
008850b9 push es
008850ba int3 
008850bb int3 
008850bc int3 
008850bd int3 
008850be int3 
008850bf int3 
008850c0 test ecx, ecx
008850c2 je 0x8850d2
008850c4 mov eax, dword ptr [ecx + 0x30]
008850c7 test eax, eax
008850c9 je 0x8850d2
008850cb mov eax, dword ptr [eax + 0x1270]
008850d1 ret 
008850d2 mov eax, 2
008850d7 ret 
008850d8 int3 
008850d9 int3 
008850da int3 
008850db int3 
008850dc int3 
008850dd int3 
008850de int3 
008850df int3 
008850e0 test edx, edx
008850e2 jne 0x8850e7
008850e4 xor eax, eax
008850e6 ret 
008850e7 mov ecx, dword ptr [edx + 4]
008850ea mov eax, dword ptr [ecx*4 + 0xf36048]
008850f1 cmp ecx, 0x29
008850f4 jne 0x885121
008850f6 mov edx, dword ptr [edx + 8]
008850f9 xor ecx, ecx
008850fb jmp 0x885100
008850fd lea ecx, [ecx]
00885100 test dword ptr [ecx*4 + 0x12bdd88], edx
00885107 jne 0x885110
00885109 inc ecx
0088510a cmp ecx, 0xd
0088510d jl 0x885100
0088510f ret 
00885110 cmp ecx, -1
00885113 je 0x885121
00885115 cmp ecx, 0xd
00885118 jge 0x885121
0088511a mov eax, dword ptr [ecx*4 + 0xf35f84]
00885121 ret 
00885122 and cl, ah
00885124 int3 
00885125 int3 
00885126 int3 
00885127 int3 
00885128 int3 
00885129 int3 
0088512a int3 
0088512b int3 
0088512c int3 
0088512d int3 
0088512e int3 
0088512f int3 
00885130 push esi
00885131 mov esi, dword ptr [ecx + 0x14]
00885134 or eax, 0xffffffff
00885137 cmp dword ptr [esi], eax
00885139 je 0x885153
0088513b test dword ptr [esi + 8], 0x8000
00885142 jne 0x885153
00885144 call 0x499000
00885149 test eax, eax
0088514b je 0x885151
0088514d xor eax, eax
0088514f pop esi
00885150 ret 
00885151 mov eax, dword ptr [esi]
00885153 pop esi
00885154 ret 
00885155 outsb dx, byte ptr [esi]
00885156 int3 
00885157 int3 
00885158 int3 
00885159 int3 
0088515a int3 
0088515b int3 
0088515c int3 
0088515d int3 
0088515e int3 
0088515f int3 
00885160 push esi
00885161 push edi
00885162 mov esi, ecx
00885164 or edi, 0xffffffff
00885167 call 0x499000
0088516c test eax, eax
0088516e je 0x885175
00885170 pop edi
00885171 xor eax, eax
00885173 pop esi
00885174 ret 
00885175 mov eax, esi
00885177 cmp esi, 0x7fffffff
0088517d jne 0x885181
0088517f mov eax, edi
00885181 pop edi
00885182 pop esi
00885183 ret 
00885184 int3 
00885185 int3 
00885186 int3 
00885187 int3 
00885188 int3 
00885189 int3 
0088518a int3 
0088518b int3 
0088518c int3 
0088518d int3 
0088518e int3 
0088518f int3 
00885190 push ebx
00885191 mov ebx, dword ptr [esp + 8]
00885195 cmp esi, -1
00885198 je 0x885227
0088519e cmp esi, 9
008851a1 ja 0x885227
008851a7 xorps xmm0, xmm0
008851aa or ecx, 0xffffffff
008851ad xor eax, eax
008851af nop 
008851b0 cmp eax, 5
008851b3 jge 0x88522b
008851b5 lea edx, [eax + esi*4]
008851b8 add edx, esi
008851ba shl edx, 4
008851bd comiss xmm0, dword ptr [edx + 0x1de6278]
008851c4 cmovae ecx, eax
008851c7 inc eax
008851c8 cmp ecx, -1
008851cb je 0x8851b0
008851cd lea edx, [ecx + esi*4]
008851d0 add edx, esi
008851d2 shl edx, 4
008851d5 add edx, 0x1de6278
008851db test edx, edx
008851dd je 0x885227
008851df movss xmm0, dword ptr [esp + 0x10]
008851e5 mov eax, dword ptr [esp + 0xc]
008851e9 xor ecx, ecx
008851eb cmp ebx, 0x29
008851ee sete cl
008851f1 movss dword ptr [edx + 0xc], xmm0
008851f6 movss xmm0, dword ptr [0xec704c]
008851fe mov dword ptr [edx + 4], ebx
00885201 mov dword ptr [edx + 8], eax
00885204 movss dword ptr [edx], xmm0
00885208 push ecx
00885209 call 0x8850e0
0088520e movss xmm0, dword ptr [esi*4 + 0x1de2b08]
00885217 push eax
00885218 push ecx
00885219 mov edx, ebx
0088521b mov ecx, esi
0088521d movss dword ptr [esp], xmm0
00885222 call 0xb9f360
00885227 pop ebx
00885228 ret 0xc
0088522b cmp ecx, -1
0088522e jne 0x8851cd
00885230 push edi
00885231 lea edi, [esi + esi*4]
00885234 shl edi, 4
00885237 push 0x40
00885239 lea edx, [edi + 0x1de6288]
0088523f lea ecx, [edi + 0x1de6278]
00885245 call 0xd959c0
0088524a lea edx, [edi + 0x1de62b8]
00885250 pop edi
00885251 jmp 0x8851db
00885253 int3 
00885254 int3 
00885255 int3 
00885256 int3 
00885257 int3 
00885258 int3 
00885259 int3 
0088525a int3 
0088525b int3 
0088525c int3 
0088525d int3 
0088525e int3 
0088525f int3 
00885260 mov eax, dword ptr [0xf37d54]
00885265 mov ecx, dword ptr [0xf37d58]
0088526b mov edx, dword ptr [0xf37d5c]
00885271 mov dword ptr [0x1de6228], eax
00885276 mov eax, dword ptr [0xf37d60]
0088527b mov dword ptr [0x1de622c], ecx
00885281 mov ecx, dword ptr [0xf37d64]
00885287 mov dword ptr [0x1de6230], edx
0088528d mov edx, dword ptr [0xf37d40]
00885293 mov dword ptr [0x1de6234], eax
00885298 mov eax, dword ptr [0xf37d44]
0088529d mov dword ptr [0x1de6238], ecx
008852a3 mov ecx, dword ptr [0xf37d48]
008852a9 mov dword ptr [0x1de623c], edx
008852af mov edx, dword ptr [0xf37d4c]
008852b5 mov dword ptr [0x1de6240], eax
008852ba mov eax, dword ptr [0xf37d50]
008852bf mov dword ptr [0x1de6244], ecx
008852c5 mov ecx, dword ptr [0xf37d2c]
008852cb mov dword ptr [0x1de6248], edx
008852d1 mov edx, dword ptr [0xf37d30]
008852d7 mov dword ptr [0x1de624c], eax
008852dc mov eax, dword ptr [0xf37d34]
008852e1 mov dword ptr [0x1de6250], ecx
008852e7 mov ecx, dword ptr [0xf37d38]
008852ed mov dword ptr [0x1de6254], edx
008852f3 mov edx, dword ptr [0xf37d3c]
008852f9 mov dword ptr [0x1de6258], eax
008852fe mov eax, dword ptr [0xf37d18]
00885303 mov dword ptr [0x1de625c], ecx
00885309 mov ecx, dword ptr [0xf37d1c]
0088530f mov dword ptr [0x1de6260], edx
00885315 mov edx, dword ptr [0xf37d20]
0088531b mov dword ptr [0x1de6264], eax
00885320 mov eax, dword ptr [0xf37d24]
00885325 mov dword ptr [0x1de6268], ecx
0088532b mov ecx, dword ptr [0xf37d28]
00885331 mov dword ptr [0x1de626c], edx
00885337 mov dword ptr [0x1de6270], eax
0088533c mov dword ptr [0x1de6274], ecx
00885342 ret 
00885343 cdq 
00885344 int3 
00885345 int3 
00885346 int3 
00885347 int3 
00885348 int3 
00885349 int3 
0088534a int3 
0088534b int3 
0088534c int3 
0088534d int3 
0088534e int3 
0088534f int3 
00885350 xorps xmm1, xmm1
00885353 push esi
00885354 mov esi, 0x1de6278
00885359 lea esp, [esp]
00885360 movss xmm0, dword ptr [esi]
00885364 comiss xmm0, xmm1
00885367 jbe 0x8853a2
00885369 subss xmm0, dword ptr [esp + 8]
0088536f comiss xmm1, xmm0
00885372 movss dword ptr [esi], xmm0
00885376 jbe 0x88537b
00885378 movaps xmm0, xmm1
0088537b comiss xmm1, xmm0
0088537e movss dword ptr [esi], xmm0
00885382 jb 0x8853a2
00885384 movss xmm0, dword ptr [esi + 0x10]
00885389 comiss xmm0, xmm1
0088538c lea edx, [esi + 0x10]
0088538f jbe 0x8853a2
00885391 push 0x40
00885393 mov ecx, esi
00885395 call 0xd959c0
0088539a xorps xmm1, xmm1
0088539d movss dword ptr [esi + 0x40], xmm1
008853a2 add esi, 0x50
008853a5 cmp esi, 0x1de6598
008853ab jl 0x885360
008853ad pop esi
008853ae ret 4
008853b1 adc al, 0xcc
008853b3 int3 
008853b4 int3 
008853b5 int3 
008853b6 int3 
008853b7 int3 
008853b8 int3 
008853b9 int3 
008853ba int3 
008853bb int3 
008853bc int3 
008853bd int3 
008853be int3 
008853bf int3 
008853c0 push esi
008853c1 xor esi, esi
008853c3 cmp dword ptr [0x1de6224], esi
008853c9 jle 0x8853f5
008853cb jmp 0x8853d0
008853cd lea ecx, [ecx]
008853d0 mov eax, dword ptr [esi*4 + 0x1de61a0]
008853d7 mov eax, dword ptr [eax + 4]
008853da test eax, eax
008853dc je 0x8853e0
008853de call eax
008853e0 inc esi
008853e1 cmp esi, dword ptr [0x1de6224]
008853e7 jl 0x8853d0
008853e9 mov dword ptr [0x1de6664], 0
008853f3 pop esi
008853f4 ret 
008853f5 mov dword ptr [0x1de6664], esi
008853fb pop esi
008853fc ret 
008853fd .byte 0xb8
008853fe int3 
008853ff int3 