00884200 mov ah, 0
00884202 adc ch, ah
00884204 fiadd word ptr [ecx]
00884206 add dword ptr [eax + eax + 0x1dee514], esi
0088420d add eax, eax
0088420f lea edx, [esi + 9]
00884212 xor edi, edi
00884214 cmp edx, 0xa
00884217 jge 0x88423d
00884219 lea eax, [ecx + ecx*4]
0088421c lea eax, [eax + eax + 9]
00884220 mov ebp, dword ptr [eax*4 + 0x1dee4f0]
00884227 lea ebx, [eax + esi]
0088422a mov dword ptr [ebx*4 + 0x1dee4f0], ebp
00884231 cmp esi, 9
00884234 jle 0x88423d
00884236 mov dword ptr [eax*4 + 0x1dee4f0], edi
0088423d lea eax, [edx - 1]
00884240 cmp eax, 0xa
00884243 jge 0x884269
00884245 lea eax, [ecx + ecx*4]
00884248 lea eax, [eax + eax + 9]
0088424c mov ebp, dword ptr [eax*4 + 0x1dee4ec]
00884253 lea ebx, [eax + esi]
00884256 mov dword ptr [ebx*4 + 0x1dee4ec], ebp
0088425d cmp esi, 8
00884260 jle 0x884269
00884262 mov dword ptr [eax*4 + 0x1dee4ec], edi
00884269 lea eax, [edx - 2]
0088426c cmp eax, 0xa
0088426f jge 0x884295
00884271 lea eax, [ecx + ecx*4]
00884274 lea eax, [eax + eax + 9]
00884278 mov ebp, dword ptr [eax*4 + 0x1dee4e8]
0088427f lea ebx, [eax + esi]
00884282 mov dword ptr [ebx*4 + 0x1dee4e8], ebp
00884289 cmp esi, 7
0088428c jle 0x884295
0088428e mov dword ptr [eax*4 + 0x1dee4e8], edi
00884295 lea eax, [edx - 3]
00884298 cmp eax, 0xa
0088429b jge 0x8842c1
0088429d lea eax, [ecx + ecx*4]
008842a0 lea eax, [eax + eax + 9]
008842a4 mov ebp, dword ptr [eax*4 + 0x1dee4e4]
008842ab lea ebx, [eax + esi]
008842ae mov dword ptr [ebx*4 + 0x1dee4e4], ebp
008842b5 cmp esi, 6
008842b8 jle 0x8842c1
008842ba mov dword ptr [eax*4 + 0x1dee4e4], edi
008842c1 lea eax, [edx - 4]
008842c4 cmp eax, 0xa
008842c7 jge 0x8842ed
008842c9 lea eax, [ecx + ecx*4]
008842cc lea eax, [eax + eax + 9]
008842d0 mov ebp, dword ptr [eax*4 + 0x1dee4e0]
008842d7 lea ebx, [eax + esi]
008842da mov dword ptr [ebx*4 + 0x1dee4e0], ebp
008842e1 cmp esi, 5
008842e4 jle 0x8842ed
008842e6 mov dword ptr [eax*4 + 0x1dee4e0], edi
008842ed lea eax, [edx - 5]
008842f0 cmp eax, 0xa
008842f3 jge 0x884319
008842f5 lea eax, [ecx + ecx*4]
008842f8 lea eax, [eax + eax + 9]
008842fc mov ebp, dword ptr [eax*4 + 0x1dee4dc]
00884303 lea ebx, [eax + esi]
00884306 mov dword ptr [ebx*4 + 0x1dee4dc], ebp
0088430d cmp esi, 4
00884310 jle 0x884319
00884312 mov dword ptr [eax*4 + 0x1dee4dc], edi
00884319 lea eax, [edx - 6]
0088431c cmp eax, 0xa
0088431f jge 0x884345
00884321 lea eax, [ecx + ecx*4]
00884324 lea eax, [eax + eax + 9]
00884328 mov ebp, dword ptr [eax*4 + 0x1dee4d8]
0088432f lea ebx, [eax + esi]
00884332 mov dword ptr [ebx*4 + 0x1dee4d8], ebp
00884339 cmp esi, 3
0088433c jle 0x884345
0088433e mov dword ptr [eax*4 + 0x1dee4d8], edi
00884345 lea eax, [edx - 7]
00884348 cmp eax, 0xa
0088434b jge 0x884371
0088434d lea eax, [ecx + ecx*4]
00884350 lea eax, [eax + eax + 9]
00884354 mov ebp, dword ptr [eax*4 + 0x1dee4d4]
0088435b lea ebx, [eax + esi]
0088435e mov dword ptr [ebx*4 + 0x1dee4d4], ebp
00884365 cmp esi, 2
00884368 jle 0x884371
0088436a mov dword ptr [eax*4 + 0x1dee4d4], edi
00884371 lea eax, [edx - 8]
00884374 cmp eax, 0xa
00884377 jge 0x88439d
00884379 lea eax, [ecx + ecx*4]
0088437c lea eax, [eax + eax + 9]
00884380 mov ebp, dword ptr [eax*4 + 0x1dee4d0]
00884387 lea ebx, [eax + esi]
0088438a mov dword ptr [ebx*4 + 0x1dee4d0], ebp
00884391 cmp esi, 1
00884394 jle 0x88439d
00884396 mov dword ptr [eax*4 + 0x1dee4d0], edi
0088439d add edx, -9
008843a0 cmp edx, 0xa
008843a3 jge 0x8843c8
008843a5 lea eax, [ecx + ecx*4]
008843a8 lea eax, [eax + eax + 9]
008843ac mov edx, dword ptr [eax*4 + 0x1dee4cc]
008843b3 lea ecx, [eax + esi]
008843b6 mov dword ptr [ecx*4 + 0x1dee4cc], edx
008843bd cmp esi, edi
008843bf jle 0x8843c8
008843c1 mov dword ptr [eax*4 + 0x1dee4cc], edi
008843c8 pop edi
008843c9 pop esi
008843ca pop ebp
008843cb pop ebx
008843cc ret 
008843cd popfd 
008843ce int3 
008843cf int3 
008843d0 push ecx
008843d1 push ebx
008843d2 push ebp
008843d3 push esi
008843d4 push edi
008843d5 mov esi, edx
008843d7 mov edi, ecx
008843d9 call 0x9f4070
008843de mov edx, dword ptr [esp + 0x18]
008843e2 xorps xmm0, xmm0
008843e5 mov ebx, dword ptr [esp + 0x20]
008843e9 xor ecx, ecx
008843eb cmp edi, eax
008843ed mov eax, dword ptr [esp + 0x1c]
008843f1 setne cl
008843f4 mov dword ptr [esi], 0
008843fa mov dword ptr [edx], 0
00884400 movss dword ptr [eax], xmm0
00884404 mov eax, 9
00884409 lea edi, [ecx + ecx*4]
0088440c mov dword ptr [esp + 0x10], ecx
00884410 lea edi, [edi*8 + 0x1dee4f4]
00884417 mov ecx, dword ptr [edi - 4]
0088441a cmp ecx, ebx
0088441c jl 0x884430
0088441e lea ebp, [eax - 1]
00884421 cmp ecx, ebp
00884423 jl 0x884430
00884425 cmp ecx, dword ptr [esi]
00884427 jle 0x884430
00884429 mov dword ptr [esi], ecx
0088442b lea ecx, [eax - 9]
0088442e mov dword ptr [edx], ecx
00884430 mov ecx, dword ptr [edi]
00884432 cmp ecx, ebx
00884434 jl 0x884445
00884436 cmp ecx, eax
00884438 jl 0x884445
0088443a cmp ecx, dword ptr [esi]
0088443c jle 0x884445
0088443e mov dword ptr [esi], ecx
00884440 lea ecx, [eax - 8]
00884443 mov dword ptr [edx], ecx
00884445 mov ecx, dword ptr [edi + 4]
00884448 cmp ecx, ebx
0088444a jl 0x88445e
0088444c lea ebp, [eax + 1]
0088444f cmp ecx, ebp
00884451 jl 0x88445e
00884453 cmp ecx, dword ptr [esi]
00884455 jle 0x88445e
00884457 mov dword ptr [esi], ecx
00884459 lea ecx, [eax - 7]
0088445c mov dword ptr [edx], ecx
0088445e mov ecx, dword ptr [edi + 8]
00884461 cmp ecx, ebx
00884463 jl 0x884477
00884465 lea ebp, [eax + 2]
00884468 cmp ecx, ebp
0088446a jl 0x884477
0088446c cmp ecx, dword ptr [esi]
0088446e jle 0x884477
00884470 mov dword ptr [esi], ecx
00884472 lea ecx, [eax - 6]
00884475 mov dword ptr [edx], ecx
00884477 mov ecx, dword ptr [edi + 0xc]
0088447a cmp ecx, ebx
0088447c jl 0x884490
0088447e lea ebp, [eax + 3]
00884481 cmp ecx, ebp
00884483 jl 0x884490
00884485 cmp ecx, dword ptr [esi]
00884487 jle 0x884490
00884489 mov dword ptr [esi], ecx
0088448b lea ecx, [eax - 5]
0088448e mov dword ptr [edx], ecx
00884490 add eax, 5
00884493 lea ecx, [eax - 9]
00884496 add edi, 0x14
00884499 cmp ecx, 0xa
0088449c jl 0x884417
008844a2 mov eax, dword ptr [esp + 0x10]
008844a6 mov ecx, dword ptr [edx]
008844a8 pop edi
008844a9 lea eax, [eax + eax*4]
008844ac lea edx, [ecx + eax*2]
008844af fld dword ptr [edx*4 + 0x1dee540]
008844b6 mov eax, dword ptr [esp + 0x18]
008844ba pop esi
008844bb fstp dword ptr [eax]
008844bd pop ebp
008844be pop ebx
008844bf pop ecx
008844c0 ret 0xc
008844c3 fmul st(4)
008844c5 int3 
008844c6 int3 
008844c7 int3 
008844c8 int3 
008844c9 int3 
008844ca int3 
008844cb int3 
008844cc int3 
008844cd int3 
008844ce int3 
008844cf int3 
008844d0 mov eax, dword ptr [esp + 8]
008844d4 push 8
008844d6 push eax
008844d7 mov eax, dword ptr [esp + 0xc]
008844db push eax
008844dc call 0x8843d0
008844e1 ret 8
008844e4 int3 
008844e5 int3 
008844e6 int3 
008844e7 int3 
008844e8 int3 
008844e9 int3 
008844ea int3 
008844eb int3 
008844ec int3 
008844ed int3 
008844ee int3 
008844ef int3 
008844f0 push esi
008844f1 push edi
008844f2 mov esi, edx
008844f4 mov edi, ecx
008844f6 call 0x9f4070
008844fb xor ecx, ecx
008844fd cmp edi, eax
008844ff setne cl
00884502 pop edi
00884503 mov eax, ecx
00884505 lea eax, [eax + eax*4]
00884508 add eax, eax
0088450a add eax, eax
0088450c mov edx, dword ptr [eax + eax + 0x1dee4f0]
00884513 add eax, eax
00884515 mov dword ptr [esi], edx
00884517 fld dword ptr [eax + 0x1dee540]
0088451d mov eax, dword ptr [esp + 8]
00884521 fstp dword ptr [eax]
00884523 pop esi
00884524 ret 4
00884527 sub eax, 0xcccccccc
0088452c int3 
0088452d int3 
0088452e int3 
0088452f int3 
00884530 sub esp, 0x18
00884533 push ebx
00884534 push ebp
00884535 push esi
00884536 push edi
00884537 mov esi, edx
00884539 mov edi, ecx
0088453b call 0x9f4070
00884540 push 8
00884542 lea ecx, [esp + 0x20]
00884546 push ecx
00884547 lea edx, [esp + 0x20]
0088454b push edx
0088454c lea edx, [esp + 0x1c]
00884550 mov ecx, eax
00884552 call 0x8843d0
00884557 call 0x9f4080
0088455c push 8
0088455e lea ecx, [esp + 0x28]
00884562 push ecx
00884563 lea edx, [esp + 0x28]
00884567 push edx
00884568 lea edx, [esp + 0x20]
0088456c mov ecx, eax
0088456e call 0x8843d0
00884573 mov ebx, dword ptr [esp + 0x10]
00884577 mov ebp, dword ptr [esp + 0x14]
0088457b cmp ebx, ebp
0088457d jle 0x884594
0088457f call 0x9f4070
00884584 mov ecx, dword ptr [esp + 0x18]
00884588 movss xmm0, dword ptr [esp + 0x1c]
0088458e mov dword ptr [edi], eax
00884590 mov dword ptr [esi], ebx
00884592 jmp 0x8845a7
00884594 call 0x9f4080
00884599 mov ecx, dword ptr [esp + 0x20]
0088459d movss xmm0, dword ptr [esp + 0x24]
008845a3 mov dword ptr [edi], eax
008845a5 mov dword ptr [esi], ebp
008845a7 mov eax, dword ptr [esp + 0x2c]
008845ab mov edx, dword ptr [esp + 0x30]
008845af pop edi
008845b0 pop esi
008845b1 pop ebp
008845b2 mov dword ptr [eax], ecx
008845b4 movss dword ptr [edx], xmm0
008845b8 pop ebx
008845b9 add esp, 0x18
008845bc ret 8
008845bf int3 
008845c0 push ebx
008845c1 push esi
008845c2 mov ebx, ecx
008845c4 mov eax, dword ptr [ebx + 0x54]
008845c7 push edi
008845c8 mov esi, edx
008845ca xor edi, edi
008845cc call eax
008845ce test eax, eax
008845d0 je 0x8845fe
008845d2 mov ecx, dword ptr [eax + 0x30]
008845d5 test ecx, ecx
008845d7 je 0x8845f3
008845d9 add ecx, 0xc7c
008845df je 0x8845f3
008845e1 mov edx, esi
008845e3 cmp esi, 5
008845e6 jl 0x8845ed
008845e8 mov edx, 5
008845ed imul edx, edx, 0x5c
008845f0 add edi, dword ptr [edx + ecx]
008845f3 mov edx, dword ptr [ebx + 0x58]
008845f6 mov ecx, eax
008845f8 call edx
008845fa test eax, eax
008845fc jne 0x8845d2
008845fe mov eax, edi
00884600 pop edi
00884601 pop esi
00884602 pop ebx
00884603 ret 
00884604 int3 
00884605 int3 
00884606 int3 
00884607 int3 
00884608 int3 
00884609 int3 
0088460a int3 
0088460b int3 
0088460c int3 
0088460d int3 
0088460e int3 
0088460f int3 
00884610 sub esp, 0xc
00884613 imul ecx, ecx, 0x58
00884616 add ecx, 0x1de1e18
0088461c mov dword ptr [esp + 8], edx
00884620 mov dword ptr [esp + 4], 0
00884628 mov eax, ecx
0088462a cmp edx, 0x16
0088462d jge 0x884636
0088462f mov eax, dword ptr [eax + edx*4]
00884632 add esp, 0xc
00884635 ret 
00884636 push ebx
00884637 mov ebx, dword ptr [eax + 0x24]
0088463a push ebp
0088463b push esi
0088463c mov esi, dword ptr [eax + 0x1c]
0088463f mov ebp, dword ptr [eax + 4]
00884642 mov ecx, ebx
00884644 imul ecx, dword ptr [0x1dee948]
0088464b mov edx, esi
0088464d imul edx, dword ptr [0x1dee944]
00884654 add ebp, dword ptr [eax]
00884656 add ecx, edx
00884658 push edi
00884659 mov edi, dword ptr [eax + 0x2c]
0088465c mov edx, edi
0088465e imul edx, dword ptr [0x1dee94c]
00884665 add ebx, esi
00884667 mov esi, dword ptr [eax + 0x28]
0088466a add esi, dword ptr [eax + 0x20]
0088466d add ecx, edx
0088466f mov edx, dword ptr [eax + 0x38]
00884672 mov dword ptr [esp + 0x10], ebx
00884676 mov ebx, esi
00884678 sub ebx, dword ptr [esp + 0x10]
0088467c sub edx, edi
0088467e mov edi, 1
00884683 cmp ecx, 0xa
00884686 jge 0x88468c
00884688 mov edi, dword ptr [esp + 0x14]
0088468c cmp ebp, 0xa
0088468f jl 0x884692
00884691 inc edi
00884692 cmp dword ptr [eax + 8], 0xa
00884696 jl 0x884699
00884698 inc edi
00884699 cmp dword ptr [eax + 0xc], 0xa
0088469d jl 0x8846a0
0088469f inc edi
008846a0 cmp dword ptr [eax + 0x10], 0xa
008846a4 jl 0x8846a7
008846a6 inc edi
008846a7 mov eax, dword ptr [esp + 0x18]
008846ab add eax, -0x16
008846ae cmp eax, 7
008846b1 ja 0x884718
008846b3 jmp dword ptr [eax*4 + 0x884724]
008846ba pop edi
008846bb pop esi
008846bc mov eax, ebp
008846be pop ebp
008846bf pop ebx
008846c0 add esp, 0xc
008846c3 ret 
008846c4 mov eax, dword ptr [esp + 0x10]
008846c8 pop edi
008846c9 pop esi
008846ca pop ebp
008846cb pop ebx
008846cc add esp, 0xc
008846cf ret 
008846d0 pop edi
008846d1 mov eax, esi
008846d3 pop esi
008846d4 pop ebp
008846d5 pop ebx
008846d6 add esp, 0xc
008846d9 ret 
008846da pop edi
008846db pop esi
008846dc pop ebp
008846dd mov eax, ebx
008846df pop ebx
008846e0 add esp, 0xc
008846e3 ret 
008846e4 pop edi
008846e5 pop esi
008846e6 pop ebp
008846e7 mov eax, edx
008846e9 pop ebx
008846ea add esp, 0xc
008846ed ret 
008846ee xor eax, eax
008846f0 cmp edi, 2
008846f3 pop edi
008846f4 pop esi
008846f5 pop ebp
008846f6 setge al
008846f9 pop ebx
008846fa add esp, 0xc
008846fd ret 
008846fe xor eax, eax
00884700 cmp edi, 3
00884703 pop edi
00884704 pop esi
00884705 pop ebp
00884706 setge al
00884709 pop ebx
0088470a add esp, 0xc
0088470d ret 
0088470e pop edi
0088470f pop esi
00884710 pop ebp
00884711 mov eax, ecx
00884713 pop ebx
00884714 add esp, 0xc
00884717 ret 
00884718 pop edi
00884719 pop esi
0088471a pop ebp
0088471b xor eax, eax
0088471d pop ebx
0088471e add esp, 0xc
00884721 ret 
00884722 mov edi, edi
00884724 push cs
00884725 inc edi
00884726 mov byte ptr [eax], al
00884728 mov edx, 0xc4008846
0088472d inc esi
0088472e mov byte ptr [eax], al
00884730 rol byte ptr [esi - 0x78], 1
00884733 add dl, bl
00884735 inc esi
00884736 mov byte ptr [eax], al
00884738 in al, 0x46
0088473a mov byte ptr [eax], al
0088473c out dx, al
0088473d inc esi
0088473e mov byte ptr [eax], al
00884740 inc byte ptr [esi - 0x78]
00884743 add ah, cl
00884745 int3 
00884746 int3 
00884747 int3 
00884748 int3 
00884749 int3 
0088474a int3 
0088474b int3 
0088474c int3 
0088474d int3 
0088474e int3 
0088474f int3 
00884750 push ebx
00884751 push ebp
00884752 mov ebp, dword ptr [esp + 0xc]
00884756 push esi
00884757 xor esi, esi
00884759 push edi
0088475a mov edi, edx
0088475c mov ebx, ecx
0088475e cmp dword ptr [0x1de1d48], esi
00884764 jle 0x884783
00884766 mov eax, dword ptr [esi*4 + 0x1de1d3c]
0088476d push ebx
0088476e push ebp
0088476f push 2
00884771 mov edx, edi
00884773 mov ecx, 1
00884778 call eax
0088477a inc esi
0088477b cmp esi, dword ptr [0x1de1d48]
00884781 jl 0x884766
00884783 test edi, edi
00884785 js 0x884790
00884787 imul edi, edi, 0x58
0088478a add dword ptr [edi + 0x1de1e20], ebp
00884790 pop edi
00884791 pop esi
00884792 pop ebp
00884793 pop ebx
00884794 ret 4
00884797 add eax, 0xcccccccc
0088479c int3 
0088479d int3 
0088479e int3 
0088479f int3 
008847a0 push ecx
008847a1 push ebx
008847a2 push ebp
008847a3 push esi
008847a4 push edi
008847a5 mov edi, ecx
008847a7 xor esi, esi
008847a9 mov dword ptr [esp + 0x10], edx
008847ad test edi, edi
008847af je 0x8847d4
008847b1 mov eax, dword ptr [edi + 0x14]
008847b4 mov ecx, dword ptr [eax]
008847b6 cmp ecx, -1
008847b9 je 0x8847d4
008847bb call 0x4a8260
008847c0 test eax, eax
008847c2 je 0x8847d4
008847c4 mov ecx, eax
008847c6 call 0x695530
008847cb mov esi, eax
008847cd mov ebx, 1
008847d2 jmp 0x8847d9
008847d4 xor ebx, ebx
008847d6 or eax, 0xffffffff
008847d9 mov ebp, dword ptr [esp + 0x18]
008847dd mov ecx, dword ptr [esp + 0x10]
008847e1 push ebp
008847e2 push ecx
008847e3 push eax
008847e4 push 1
008847e6 call 0x883e00
008847eb test ebx, ebx
008847ed jne 0x8847fc
008847ef mov edx, dword ptr [edi + 0x14]
008847f2 cmp dword ptr [edx], -1
008847f5 je 0x884811
008847f7 mov esi, 8
008847fc imul esi, esi, 0x16
008847ff add esi, dword ptr [esp + 0x10]
00884803 add dword ptr [esi*4 + 0x1de1e18], ebp
0088480a lea eax, [esi*4 + 0x1de1e18]
00884811 pop edi
00884812 pop esi
00884813 pop ebp
00884814 pop ebx
00884815 pop ecx
00884816 ret 4
00884819 mov edx, 0xcccccccc
0088481e int3 
0088481f int3 
00884820 push ecx
00884821 push ebx
00884822 push ebp
00884823 push esi
00884824 push edi
00884825 mov edi, ecx
00884827 xor esi, esi
00884829 mov dword ptr [esp + 0x10], edx
0088482d test edi, edi
0088482f je 0x884854
00884831 mov eax, dword ptr [edi + 0x14]
00884834 mov ecx, dword ptr [eax]
00884836 cmp ecx, -1
00884839 je 0x884854
0088483b call 0x4a8260
00884840 test eax, eax
00884842 je 0x884854
00884844 mov ecx, eax
00884846 call 0x695530
0088484b mov esi, eax
0088484d mov ebx, 1
00884852 jmp 0x884859
00884854 xor ebx, ebx
00884856 or eax, 0xffffffff
00884859 mov ebp, dword ptr [esp + 0x18]
0088485d mov ecx, dword ptr [esp + 0x10]
00884861 push ebp
00884862 push ecx
00884863 push eax
00884864 push 2
00884866 call 0x883e00
0088486b test ebx, ebx
0088486d jne 0x88487c
0088486f mov edx, dword ptr [edi + 0x14]
00884872 cmp dword ptr [edx], -1
00884875 je 0x884899
00884877 mov esi, 8
0088487c imul esi, esi, 0x16
0088487f add esi, dword ptr [esp + 0x10]
00884883 mov eax, dword ptr [esi*4 + 0x1de1e18]
0088488a lea ecx, [esi*4 + 0x1de1e18]
00884891 cmp eax, ebp
00884893 jl 0x884899
00884895 sub eax, ebp
00884897 mov dword ptr [ecx], eax
00884899 pop edi
0088489a pop esi
0088489b pop ebp
0088489c pop ebx
0088489d pop ecx
0088489e ret 4
008848a1 and ecx, esp
008848a3 int3 
008848a4 int3 
008848a5 int3 
008848a6 int3 
008848a7 int3 
008848a8 int3 
008848a9 int3 
008848aa int3 
008848ab int3 
008848ac int3 
008848ad int3 
008848ae int3 
008848af int3 
008848b0 sub esp, 8
008848b3 push ebx
008848b4 push ebp
008848b5 push esi
008848b6 push edi
008848b7 mov edi, ecx
008848b9 xor esi, esi
008848bb xor ebp, ebp
008848bd mov dword ptr [esp + 0x14], edx
008848c1 cmp edi, esi
008848c3 je 0x8848ed
008848c5 mov eax, dword ptr [edi + 0x14]
008848c8 mov ecx, dword ptr [eax]
008848ca cmp ecx, -1
008848cd je 0x8848ed
008848cf call 0x4a8260
008848d4 cmp eax, esi
008848d6 je 0x8848ed
008848d8 mov ecx, eax
008848da call 0x695530
008848df mov ebp, eax
008848e1 mov dword ptr [esp + 0x10], 1
008848e9 mov ebx, ebp
008848eb jmp 0x8848f4
008848ed mov dword ptr [esp + 0x10], esi
008848f1 or ebx, 0xffffffff
008848f4 cmp dword ptr [0x1de1d48], esi
008848fa jle 0x884921
008848fc lea esp, [esp]
00884900 mov eax, dword ptr [esp + 0x14]
00884904 push edi
00884905 push 0
00884907 push eax
00884908 mov eax, dword ptr [esi*4 + 0x1de1d3c]
0088490f mov edx, ebx
00884911 mov ecx, 3
00884916 call eax
00884918 inc esi
00884919 cmp esi, dword ptr [0x1de1d48]
0088491f jl 0x884900
00884921 cmp dword ptr [esp + 0x10], 0
00884926 jne 0x884935
00884928 mov ecx, dword ptr [edi + 0x14]
0088492b cmp dword ptr [ecx], -1
0088492e je 0x884947
00884930 mov ebp, 8
00884935 imul ebp, ebp, 0x16
00884938 add ebp, dword ptr [esp + 0x14]
0088493c mov dword ptr [ebp*4 + 0x1de1e18], 0
00884947 pop edi
00884948 pop esi
00884949 pop ebp
0088494a pop ebx
0088494b add esp, 8
0088494e ret 
0088494f int3 
00884950 push esi
00884951 push edi
00884952 mov edi, edx
00884954 mov esi, ecx
00884956 call 0x9f4070
0088495b cmp esi, eax
0088495d mov eax, 0x1d955d0
00884962 je 0x884969
00884964 mov eax, 0x1d95520
00884969 mov eax, dword ptr [eax + 0x3c]
0088496c test eax, eax
0088496e je 0x884981
00884970 mov ecx, dword ptr [esp + 0xc]
00884974 mov dword ptr [eax + 0x3b8], ecx
0088497a mov dword ptr [eax + edi*4 + 0x3b8], ecx
00884981 pop edi
00884982 pop esi
00884983 ret 4
00884986 xchg esp, ecx
00884988 int3 
00884989 int3 
0088498a int3 
0088498b int3 
0088498c int3 
0088498d int3 
0088498e int3 
0088498f int3 
00884990 test ecx, ecx
00884992 je 0x8849ae
00884994 mov eax, dword ptr [0x1de1d48]
00884999 lea edx, [eax + 1]
0088499c cmp edx, 3
0088499f jg 0x8849ae
008849a1 mov dword ptr [eax*4 + 0x1de1d3c], ecx
008849a8 inc dword ptr [0x1de1d48]
008849ae ret 
008849af int3 
008849b0 cmp dword ptr [0x1e85cd4], 8
008849b7 je 0x8849c4
008849b9 test ecx, ecx
008849bb je 0x8849c4
008849bd fld dword ptr [ecx + 0x358]
008849c3 ret 
008849c4 fldz 
008849c6 ret 
008849c7 out 0xcc, al
008849c9 int3 
008849ca int3 
008849cb int3 
008849cc int3 
008849cd int3 
008849ce int3 
008849cf int3 
008849d0 sub esp, 0x20
008849d3 push edi
008849d4 mov ecx, esi
008849d6 call 0x6d6900
008849db fstp dword ptr [esp + 4]
008849df movss xmm0, dword ptr [esi + 0x1274]
008849e7 addss xmm0, dword ptr [esp + 0x28]
008849ed movss dword ptr [esi + 0x1274], xmm0
008849f5 call 0x6b5320
008849fa fstp dword ptr [esp + 0xc]
008849fe call 0x6b5310
00884a03 fstp dword ptr [esp + 8]
00884a07 call 0x6b5320
00884a0c fadd dword ptr [esp + 8]
00884a10 fmul dword ptr [0xec6fd4]
00884a16 fstp dword ptr [esp + 0x10]
00884a1a call 0x6b5310
00884a1f movss xmm0, dword ptr [esp + 0x28]
00884a25 fstp dword ptr [esp + 0x14]
00884a29 comiss xmm0, dword ptr [0xf0fc08]
00884a30 jbe 0x884ab8
00884a36 mov edi, 4
00884a3b cmp dword ptr [esi + 0x1270], edi
00884a41 jge 0x884b3c
00884a47 jmp 0x884a50
00884a49 lea esp, [esp]
00884a50 movss xmm0, dword ptr [edi*4 + 0xf35f0c]
00884a59 movss dword ptr [esp + 0x18], xmm0
00884a5f movss xmm0, dword ptr [edi*4 + 0xf35f20]
00884a68 movss dword ptr [esp + 0x1c], xmm0
00884a6e movss xmm0, dword ptr [edi*4 + 0xf35f34]
00884a77 push ecx
00884a78 movss dword ptr [esp + 0x24], xmm0
00884a7e movss xmm0, dword ptr [esp + 8]
00884a84 lea ecx, [esp + 0x10]
00884a88 movss dword ptr [esp], xmm0
00884a8d call 0x6cb570
00884a92 fsub dword ptr [0xec6fc4]
00884a98 fld dword ptr [esi + 0x1274]
00884a9e fcompi st(1)
00884aa0 fstp st(0)
00884aa2 ja 0x884b36
00884aa8 dec edi
00884aa9 cmp edi, dword ptr [esi + 0x1270]
00884aaf jg 0x884a50
00884ab1 pop edi
00884ab2 add esp, 0x20
00884ab5 ret 4
00884ab8 xor edi, edi
00884aba cmp dword ptr [esi + 0x1270], edi
00884ac0 jle 0x884b3c
00884ac2 jmp 0x884ad0
00884ac4 lea esp, [esp]
00884acb jmp 0x884ad0
00884acd lea ecx, [ecx]
00884ad0 movss xmm0, dword ptr [edi*4 + 0xf35f48]
00884ad9 movss dword ptr [esp + 0x18], xmm0
00884adf movss xmm0, dword ptr [edi*4 + 0xf35f5c]
00884ae8 movss dword ptr [esp + 0x1c], xmm0
00884aee movss xmm0, dword ptr [edi*4 + 0xf35f70]
00884af7 push ecx
00884af8 movss dword ptr [esp + 0x24], xmm0
00884afe movss xmm0, dword ptr [esp + 8]
00884b04 lea ecx, [esp + 0x10]
00884b08 movss dword ptr [esp], xmm0
00884b0d call 0x6cb570
00884b12 fadd dword ptr [0xec6fc4]
00884b18 fld dword ptr [esi + 0x1274]
00884b1e fxch st(1)
00884b20 fcompi st(1)
00884b22 fstp st(0)
00884b24 ja 0x884b36
00884b26 inc edi
00884b27 cmp edi, dword ptr [esi + 0x1270]
00884b2d jl 0x884ad0
00884b2f pop edi
00884b30 add esp, 0x20
00884b33 ret 4
00884b36 mov dword ptr [esi + 0x1270], edi
00884b3c pop edi
00884b3d add esp, 0x20
00884b40 ret 4
00884b43 push esi
00884b44 int3 
00884b45 int3 
00884b46 int3 
00884b47 int3 
00884b48 int3 
00884b49 int3 
00884b4a int3 
00884b4b int3 
00884b4c int3 
00884b4d int3 
00884b4e int3 
00884b4f int3 
00884b50 mov eax, dword ptr [esp + 4]
00884b54 push esi
00884b55 push edi
00884b56 mov esi, edx
00884b58 mov edi, ecx
00884b5a cmp eax, 2
00884b5d jne 0x884b8c
00884b5f mov eax, dword ptr [esp + 0x10]
00884b63 cmp eax, 7
00884b66 je 0x884b72
00884b68 cmp eax, 8
00884b6b je 0x884b72
00884b6d cmp eax, 9
00884b70 jne 0x884bb2
00884b72 mov eax, dword ptr [esp + 0x14]
00884b76 movss xmm0, dword ptr [eax]
00884b7a xorps xmm1, xmm1
00884b7d comiss xmm1, xmm0
00884b80 jbe 0x884bb2
00884b82 mulss xmm0, dword ptr [0xec6fd4]
00884b8a jmp 0x884b9d
00884b8c cmp eax, 1
00884b8f jne 0x884bb2
00884b91 mov eax, dword ptr [esp + 0x14]
00884b95 xorps xmm0, xmm0
00884b98 comiss xmm0, dword ptr [eax]
00884b9b jbe 0x884bb2
00884b9d movss dword ptr [eax], xmm0
00884ba1 call 0x6a9f10
00884ba6 push eax
00884ba7 push 0x3c
00884ba9 mov edx, esi
00884bab mov ecx, edi
00884bad call 0x6ac0f0
00884bb2 pop edi
00884bb3 pop esi
00884bb4 ret 0xc
00884bb7 .byte 0x8f
00884bb8 int3 
00884bb9 int3 
00884bba int3 
00884bbb int3 
00884bbc int3 
00884bbd int3 
00884bbe int3 
00884bbf int3 
00884bc0 mov eax, dword ptr [esp + 4]
00884bc4 cmp eax, 3
00884bc7 je 0x884bce
00884bc9 cmp eax, 4
00884bcc jne 0x884bfd
00884bce mov eax, dword ptr [esp + 8]
00884bd2 cmp eax, 7
00884bd5 je 0x884be1
00884bd7 cmp eax, 8
00884bda je 0x884be1
00884bdc cmp eax, 9
00884bdf jne 0x884bfd
00884be1 mov eax, dword ptr [esp + 0xc]
00884be5 movss xmm0, dword ptr [eax]
00884be9 xorps xmm1, xmm1
00884bec comiss xmm1, xmm0
00884bef jbe 0x884bfd
00884bf1 mulss xmm0, dword ptr [0xec6fd4]
00884bf9 movss dword ptr [eax], xmm0
00884bfd ret 0xc
00884c00 test edx, edx
00884c02 je 0x884c18
00884c04 mov ecx, 0x1e165f0
00884c09 call 0x6ac130
00884c0e test eax, eax
00884c10 je 0x884c18
00884c12 mov eax, 1
00884c17 ret 
00884c18 xor eax, eax
00884c1a ret 
00884c1b sub eax, 0xcccccccc
00884c20 push ecx
00884c21 push esi
00884c22 mov esi, eax
00884c24 mov ecx, esi
00884c26 call 0x6d6900
00884c2b fstp dword ptr [esp + 4]
00884c2f movss xmm0, dword ptr [esi + 0x1274]
00884c37 comiss xmm0, dword ptr [0xf0fc08]
00884c3e jbe 0x884c5a
00884c40 movss xmm0, dword ptr [esp + 4]
00884c46 push ecx
00884c47 mov ecx, 0xf35efc
00884c4c movss dword ptr [esp], xmm0
00884c51 call 0x6cb4c0
00884c56 fstp dword ptr [esp + 4]
00884c5a movss xmm0, dword ptr [esp + 4]
00884c60 push ecx
00884c61 mov ecx, dword ptr [esp + 0x10]
00884c65 movss dword ptr [esp], xmm0
00884c6a call 0x6cb4c0
00884c6f fchs 
00884c71 fmul dword ptr [esi + 0x1274]
00884c77 push ecx
00884c78 fmul dword ptr [esp + 0x14]
00884c7c fstp dword ptr [esp]
00884c7f call 0x8849d0
00884c84 pop esi
00884c85 pop ecx
00884c86 ret 8
00884c89 xor cl, ah
00884c8b int3 
00884c8c int3 
00884c8d int3 
00884c8e int3 
00884c8f int3 
00884c90 push ecx
00884c91 push ebx
00884c92 push esi
00884c93 mov ebx, edx
00884c95 mov esi, ecx
00884c97 call 0x6b1f50
00884c9c test eax, eax
00884c9e jne 0x884e1c
00884ca4 call 0x6c5400
00884ca9 test eax, eax
00884cab jne 0x884e1c
00884cb1 movzx eax, byte ptr [ebx + 0x884e34]
00884cb8 xorps xmm1, xmm1
00884cbb jmp dword ptr [eax*4 + 0x884e20]
00884cc2 movss xmm0, dword ptr [ebx*4 + 0xf35e7c]
00884ccb movss dword ptr [esp + 8], xmm0
00884cd1 test esi, esi
00884cd3 je 0x884d64
00884cd9 cmp dword ptr [esi + 0x74], 1
00884cdd jne 0x884d64
00884ce3 mov edx, dword ptr [esi]
00884ce5 mov eax, dword ptr [edx + 0x20]
00884ce8 push edi
00884ce9 mov ecx, esi
00884ceb call eax
00884ced mov edi, eax
00884cef mov edx, edi
00884cf1 mov ecx, 0x1e165fc
00884cf6 call 0x6ac130
00884cfb test eax, eax
00884cfd je 0x884d18
00884cff mov edx, dword ptr [esi + 0x1270]
00884d05 lea ecx, [esp + 0xc]
00884d09 push ecx
00884d0a push ebx
00884d0b push edx
00884d0c mov edx, edi
00884d0e mov ecx, 0x1e165fc
00884d13 call 0x884b50
00884d18 mov edx, edi
00884d1a mov ecx, 0x1196640
00884d1f call 0x6ac130
00884d24 test eax, eax
00884d26 je 0x884d3a
00884d28 lea eax, [esp + 0xc]
00884d2c push eax
00884d2d push ebx
00884d2e mov edx, edi
00884d30 mov ecx, 0x1196640
00884d35 call 0x6add70
00884d3a mov edx, edi
00884d3c mov ecx, 0x1e165f0
00884d41 call 0x6ac130
00884d46 test eax, eax
00884d48 je 0x884d63
00884d4a mov edx, dword ptr [esi + 0x1270]
00884d50 lea ecx, [esp + 0xc]
00884d54 push ecx
00884d55 push ebx
00884d56 push edx
00884d57 mov edx, edi
00884d59 mov ecx, 0x1e165f0
00884d5e call 0x884bc0
00884d63 pop edi
00884d64 movss xmm0, dword ptr [esp + 8]
00884d6a jmp 0x884e00
00884d6f mov edx, esi
00884d71 call 0x884c00
00884d76 test eax, eax
00884d78 jne 0x884e0b
00884d7e movss xmm0, dword ptr [0xec6e14]
00884d86 push ecx
00884d87 movss dword ptr [esp], xmm0
00884d8c push 0xf35edc
00884d91 mov eax, esi
00884d93 call 0x884c20
00884d98 jmp 0x884e0b
00884d9a mov edx, esi
00884d9c call 0x884c00
00884da1 test eax, eax
00884da3 jne 0x884e0b
00884da5 movss xmm0, dword ptr [0xec6e14]
00884dad push ecx
00884dae movss dword ptr [esp], xmm0
00884db3 push 0xf35ecc
00884db8 mov eax, esi
00884dba call 0x884c20
00884dbf jmp 0x884e0b
00884dc1 mov edx, esi
00884dc3 call 0x884c00
00884dc8 test eax, eax
00884dca jne 0x884e0b
00884dcc movss xmm0, dword ptr [0xec6e14]
00884dd4 push ecx
00884dd5 movss dword ptr [esp], xmm0
00884dda push 0xf35ebc
00884ddf mov eax, esi
00884de1 call 0x884c20
00884de6 jmp 0x884e0b
00884de8 movss xmm0, dword ptr [0xec6e10]
00884df0 subss xmm0, dword ptr [esi + 0x1274]
00884df8 comiss xmm0, xmm1
00884dfb ja 0x884e00
00884dfd movaps xmm0, xmm1
00884e00 push ecx
00884e01 movss dword ptr [esp], xmm0
00884e06 call 0x8849d0
00884e0b xorps xmm0, xmm0
00884e0e mov dword ptr [esi + 0x127c], ebx
00884e14 movss dword ptr [esi + 0x1278], xmm0
00884e1c pop esi
00884e1d pop ebx
00884e1e pop ecx
00884e1f ret 
00884e20 ret 0x884c
00884e23 add byte ptr [edi + 0x4d], ch
00884e26 mov byte ptr [eax], al
00884e28 lcall 0x884d, 0xc100884d
00884e2f add al, ch
00884e31 dec ebp
00884e32 mov byte ptr [eax], al
00884e34 add byte ptr [eax], al
00884e36 add byte ptr [eax], al
00884e38 add byte ptr [eax], al
00884e3a add byte ptr [eax], al
00884e3c add byte ptr [eax], al
00884e3e add byte ptr [eax], al
00884e40 add dword ptr [edx], eax
00884e42 add eax, dword ptr [esp + ecx*8]
00884e45 int3 
00884e46 int3 
00884e47 int3 
00884e48 int3 
00884e49 int3 
00884e4a int3 
00884e4b int3 
00884e4c int3 
00884e4d int3 
00884e4e int3 
00884e4f int3 
00884e50 xor ecx, ecx
00884e52 call 0x9f5440
00884e57 test eax, eax
00884e59 je 0x884e7e
00884e5b mov ecx, dword ptr [eax + 0x30]
00884e5e xorps xmm0, xmm0
00884e61 movss dword ptr [ecx + 0x1274], xmm0
00884e69 mov dword ptr [ecx + 0x1270], 2
00884e73 mov ecx, eax
00884e75 call 0x9f5540
00884e7a test eax, eax
00884e7c jne 0x884e5b
00884e7e ret 
00884e7f int3 
00884e80 sub esp, 8
00884e83 call 0x6b1f50
00884e88 test eax, eax
00884e8a jne 0x884f51
00884e90 call 0x6c5400
00884e95 test eax, eax
00884e97 jne 0x884f51
00884e9d push edi
00884e9e xor ecx, ecx
00884ea0 call 0x9f5440
00884ea5 mov edi, eax
00884ea7 test edi, edi
00884ea9 je 0x884f50
00884eaf movss xmm0, dword ptr [esp + 0x10]
00884eb5 mulss xmm0, dword ptr [0xec7064]
00884ebd movss dword ptr [esp + 8], xmm0
00884ec3 push esi
00884ec4 mov esi, dword ptr [edi + 0x30]
00884ec7 movss xmm0, dword ptr [esi + 0x1278]
00884ecf addss xmm0, dword ptr [esp + 0x14]
00884ed5 mov ecx, esi
00884ed7 movss dword ptr [esi + 0x1278], xmm0
00884edf call 0x6d6900
00884ee4 fstp dword ptr [esp + 8]
00884ee8 movss xmm0, dword ptr [esi + 0x1274]
00884ef0 comiss xmm0, dword ptr [0xf0fc08]
00884ef7 jbe 0x884f13
00884ef9 movss xmm0, dword ptr [esp + 8]
00884eff push ecx
00884f00 mov ecx, 0xf35efc
00884f05 movss dword ptr [esp], xmm0
00884f0a call 0x6cb4c0
00884f0f fstp dword ptr [esp + 8]
00884f13 movss xmm0, dword ptr [esp + 8]
00884f19 push ecx
00884f1a mov ecx, 0xf35eec
00884f1f movss dword ptr [esp], xmm0
00884f24 call 0x6cb4c0
00884f29 fchs 
00884f2b fmul dword ptr [esi + 0x1274]
00884f31 push ecx
00884f32 fmul dword ptr [esp + 0x10]
00884f36 fstp dword ptr [esp]
00884f39 call 0x8849d0
00884f3e mov ecx, edi
00884f40 call 0x9f5540
00884f45 mov edi, eax
00884f47 test edi, edi
00884f49 jne 0x884ec4
00884f4f pop esi
00884f50 pop edi
00884f51 add esp, 8
00884f54 ret 4
00884f57 lahf 
00884f58 int3 
00884f59 int3 
00884f5a int3 
00884f5b int3 
00884f5c int3 
00884f5d int3 
00884f5e int3 
00884f5f int3 
00884f60 push edi
00884f61 mov edi, ecx
00884f63 call 0x6b1f50
00884f68 test eax, eax
00884f6a jne 0x884fa3
00884f6c call 0x6c5400
00884f71 test eax, eax
00884f73 jne 0x884fa3
00884f75 push esi
00884f76 xor ecx, ecx
00884f78 call 0x6b49a0
00884f7d mov esi, eax
00884f7f test esi, esi
00884f81 je 0x884fa2
00884f83 mov edx, edi
00884f85 mov ecx, esi
00884f87 call 0x884c90
00884f8c mov ecx, esi
00884f8e call 0x54b630
00884f93 mov eax, dword ptr [esi]
00884f95 mov edx, dword ptr [eax + 0xc]
00884f98 mov ecx, esi
00884f9a call edx
00884f9c mov esi, eax
00884f9e test esi, esi
00884fa0 jne 0x884f83
00884fa2 pop esi
00884fa3 pop edi
00884fa4 ret 
00884fa5 imul ecx, esp, 0xcccccccc
00884fab int3 
00884fac int3 
00884fad int3 
00884fae int3 
00884faf int3 
00884fb0 push ecx
00884fb1 push esi
00884fb2 push edi
00884fb3 mov esi, edx
00884fb5 mov edi, ecx
00884fb7 call 0x6b1f50
00884fbc test eax, eax
00884fbe jne 0x884fc9
00884fc0 call 0x6c5400
00884fc5 test eax, eax
00884fc7 je 0x884fd1
00884fc9 fldz 
00884fcb pop edi
00884fcc pop esi
00884fcd pop ecx
00884fce ret 4
00884fd1 mov ecx, esi
00884fd3 call 0x6b4fd0
00884fd8 xorps xmm0, xmm0
00884fdb cvtsi2ss xmm0, eax
00884fdf mov ecx, esi
00884fe1 movss dword ptr [esp + 8], xmm0
00884fe7 call 0x6b4fe0
00884fec movss xmm5, dword ptr [esp + 8]
00884ff2 xorps xmm4, xmm4
00884ff5 xorps xmm3, xmm3
00884ff8 cvtsi2ss xmm3, eax
00884ffc lea eax, [esi + esi*4]
00884fff add eax, dword ptr [edi + 0x1270]
00885005 movaps xmm0, xmm3
00885008 movss xmm2, dword ptr [eax*4 + 0xf35a58]
00885011 comiss xmm2, xmm4
00885014 addss xmm0, xmm5
00885018 mulss xmm0, dword ptr [0xec6fd4]
00885020 movss dword ptr [esp + 8], xmm2
00885026 jbe 0x88506d
00885028 movss xmm1, dword ptr [esp + 0x10]
0088502e subss xmm1, xmm0
00885032 movaps xmm5, xmm2
00885035 xorps xmm5, xmmword ptr [0xec6fe0]
0088503c mulss xmm1, xmm5
00885040 subss xmm3, xmm0
00885044 divss xmm1, xmm3
00885048 addss xmm1, xmm2
0088504c comiss xmm4, xmm1
0088504f jbe 0x885054
00885051 movaps xmm1, xmm4
00885054 comiss xmm2, xmm1
00885057 jbe 0x8850ab
00885059 movss dword ptr [esp + 8], xmm1
0088505f fld dword ptr [esp + 8]
00885063 pop edi
00885064 fmul dword ptr [esp + 0xc]
00885068 pop esi
00885069 pop ecx
0088506a ret 4
0088506d comiss xmm4, xmm2
00885070 jbe 0x885077
00885072 movaps xmm3, xmm4
00885075 jmp 0x88507a
00885077 movaps xmm3, xmm2
0088507a comiss xmm2, xmm4
0088507d ja 0x885082
0088507f movaps xmm4, xmm2
00885082 movss xmm1, dword ptr [esp + 0x10]
00885088 subss xmm1, xmm5
0088508c mulss xmm1, xmm2
00885090 subss xmm0, xmm5
00885094 divss xmm1, xmm0
00885098 comiss xmm4, xmm1
0088509b jbe 0x8850a0
0088509d movaps xmm1, xmm4
008850a0 comiss xmm3, xmm1
008850a3 ja 0x885059
008850a5 movss dword ptr [esp + 8], xmm3
008850ab fld dword ptr [esp + 8]
008850af pop edi
008850b0 fmul dword ptr [esp + 0xc]
008850b4 pop esi
008850b5 pop ecx
008850b6 ret 4
008850b9 push es
008850ba int3 
008850bb int3 
008850bc int3 
008850bd int3 
008850be int3 
008850bf int3 
008850c0 test ecx, ecx
008850c2 je 0x8850d2
008850c4 mov eax, dword ptr [ecx + 0x30]
008850c7 test eax, eax
008850c9 je 0x8850d2
008850cb mov eax, dword ptr [eax + 0x1270]
008850d1 ret 
008850d2 mov eax, 2
008850d7 ret 
008850d8 int3 
008850d9 int3 
008850da int3 
008850db int3 
008850dc int3 
008850dd int3 
008850de int3 
008850df int3 
008850e0 test edx, edx
008850e2 jne 0x8850e7
008850e4 xor eax, eax
008850e6 ret 
008850e7 mov ecx, dword ptr [edx + 4]
008850ea mov eax, dword ptr [ecx*4 + 0xf36048]
008850f1 cmp ecx, 0x29
008850f4 jne 0x885121
008850f6 mov edx, dword ptr [edx + 8]
008850f9 xor ecx, ecx
008850fb jmp 0x885100
008850fd lea ecx, [ecx]
00885100 test dword ptr [ecx*4 + 0x12bdd88], edx
00885107 jne 0x885110
00885109 inc ecx
0088510a cmp ecx, 0xd
0088510d jl 0x885100
0088510f ret 
00885110 cmp ecx, -1
00885113 je 0x885121
00885115 cmp ecx, 0xd
00885118 jge 0x885121
0088511a mov eax, dword ptr [ecx*4 + 0xf35f84]
00885121 ret 
00885122 and cl, ah
00885124 int3 
00885125 int3 
00885126 int3 
00885127 int3 
00885128 int3 
00885129 int3 
0088512a int3 
0088512b int3 
0088512c int3 
0088512d int3 
0088512e int3 
0088512f int3 
00885130 push esi
00885131 mov esi, dword ptr [ecx + 0x14]
00885134 or eax, 0xffffffff
00885137 cmp dword ptr [esi], eax
00885139 je 0x885153
0088513b test dword ptr [esi + 8], 0x8000
00885142 jne 0x885153
00885144 call 0x499000
00885149 test eax, eax
0088514b je 0x885151
0088514d xor eax, eax
0088514f pop esi
00885150 ret 
00885151 mov eax, dword ptr [esi]
00885153 pop esi
00885154 ret 
00885155 outsb dx, byte ptr [esi]
00885156 int3 
00885157 int3 
00885158 int3 
00885159 int3 
0088515a int3 
0088515b int3 
0088515c int3 
0088515d int3 
0088515e int3 
0088515f int3 
00885160 push esi
00885161 push edi
00885162 mov esi, ecx
00885164 or edi, 0xffffffff
00885167 call 0x499000
0088516c test eax, eax
0088516e je 0x885175
00885170 pop edi
00885171 xor eax, eax
00885173 pop esi
00885174 ret 
00885175 mov eax, esi
00885177 cmp esi, 0x7fffffff
0088517d jne 0x885181
0088517f mov eax, edi
00885181 pop edi
00885182 pop esi
00885183 ret 
00885184 int3 
00885185 int3 
00885186 int3 
00885187 int3 
00885188 int3 
00885189 int3 
0088518a int3 
0088518b int3 
0088518c int3 
0088518d int3 
0088518e int3 
0088518f int3 
00885190 push ebx
00885191 mov ebx, dword ptr [esp + 8]
00885195 cmp esi, -1
00885198 je 0x885227
0088519e cmp esi, 9
008851a1 ja 0x885227
008851a7 xorps xmm0, xmm0
008851aa or ecx, 0xffffffff
008851ad xor eax, eax
008851af nop 
008851b0 cmp eax, 5
008851b3 jge 0x88522b
008851b5 lea edx, [eax + esi*4]
008851b8 add edx, esi
008851ba shl edx, 4
008851bd comiss xmm0, dword ptr [edx + 0x1de6278]
008851c4 cmovae ecx, eax
008851c7 inc eax
008851c8 cmp ecx, -1
008851cb je 0x8851b0
008851cd lea edx, [ecx + esi*4]
008851d0 add edx, esi
008851d2 shl edx, 4
008851d5 add edx, 0x1de6278
008851db test edx, edx
008851dd je 0x885227
008851df movss xmm0, dword ptr [esp + 0x10]
008851e5 mov eax, dword ptr [esp + 0xc]
008851e9 xor ecx, ecx
008851eb cmp ebx, 0x29
008851ee sete cl
008851f1 movss dword ptr [edx + 0xc], xmm0
008851f6 movss xmm0, dword ptr [0xec704c]
008851fe mov dword ptr [edx + 4], ebx
00885201 mov dword ptr [edx + 8], eax
00885204 movss dword ptr [edx], xmm0
00885208 push ecx
00885209 call 0x8850e0
0088520e movss xmm0, dword ptr [esi*4 + 0x1de2b08]
00885217 push eax
00885218 push ecx
00885219 mov edx, ebx
0088521b mov ecx, esi
0088521d movss dword ptr [esp], xmm0
00885222 call 0xb9f360
00885227 pop ebx
00885228 ret 0xc
0088522b cmp ecx, -1
0088522e jne 0x8851cd
00885230 push edi
00885231 lea edi, [esi + esi*4]
00885234 shl edi, 4
00885237 push 0x40
00885239 lea edx, [edi + 0x1de6288]
0088523f lea ecx, [edi + 0x1de6278]
00885245 call 0xd959c0
0088524a lea edx, [edi + 0x1de62b8]
00885250 pop edi
00885251 jmp 0x8851db
00885253 int3 
00885254 int3 
00885255 int3 
00885256 int3 
00885257 int3 
00885258 int3 
00885259 int3 
0088525a int3 
0088525b int3 
0088525c int3 
0088525d int3 
0088525e int3 
0088525f int3 
00885260 mov eax, dword ptr [0xf37d54]
00885265 mov ecx, dword ptr [0xf37d58]
0088526b mov edx, dword ptr [0xf37d5c]
00885271 mov dword ptr [0x1de6228], eax
00885276 mov eax, dword ptr [0xf37d60]
0088527b mov dword ptr [0x1de622c], ecx
00885281 mov ecx, dword ptr [0xf37d64]
00885287 mov dword ptr [0x1de6230], edx
0088528d mov edx, dword ptr [0xf37d40]
00885293 mov dword ptr [0x1de6234], eax
00885298 mov eax, dword ptr [0xf37d44]
0088529d mov dword ptr [0x1de6238], ecx
008852a3 mov ecx, dword ptr [0xf37d48]
008852a9 mov dword ptr [0x1de623c], edx
008852af mov edx, dword ptr [0xf37d4c]
008852b5 mov dword ptr [0x1de6240], eax
008852ba mov eax, dword ptr [0xf37d50]
008852bf mov dword ptr [0x1de6244], ecx
008852c5 mov ecx, dword ptr [0xf37d2c]
008852cb mov dword ptr [0x1de6248], edx
008852d1 mov edx, dword ptr [0xf37d30]
008852d7 mov dword ptr [0x1de624c], eax
008852dc mov eax, dword ptr [0xf37d34]
008852e1 mov dword ptr [0x1de6250], ecx
008852e7 mov ecx, dword ptr [0xf37d38]
008852ed mov dword ptr [0x1de6254], edx
008852f3 mov edx, dword ptr [0xf37d3c]
008852f9 mov dword ptr [0x1de6258], eax
008852fe mov eax, dword ptr [0xf37d18]
00885303 mov dword ptr [0x1de625c], ecx
00885309 mov ecx, dword ptr [0xf37d1c]
0088530f mov dword ptr [0x1de6260], edx
00885315 mov edx, dword ptr [0xf37d20]
0088531b mov dword ptr [0x1de6264], eax
00885320 mov eax, dword ptr [0xf37d24]
00885325 mov dword ptr [0x1de6268], ecx
0088532b mov ecx, dword ptr [0xf37d28]
00885331 mov dword ptr [0x1de626c], edx
00885337 mov dword ptr [0x1de6270], eax
0088533c mov dword ptr [0x1de6274], ecx
00885342 ret 
00885343 cdq 
00885344 int3 
00885345 int3 
00885346 int3 
00885347 int3 
00885348 int3 
00885349 int3 
0088534a int3 
0088534b int3 
0088534c int3 
0088534d int3 
0088534e int3 
0088534f int3 
00885350 xorps xmm1, xmm1
00885353 push esi
00885354 mov esi, 0x1de6278
00885359 lea esp, [esp]
00885360 movss xmm0, dword ptr [esi]
00885364 comiss xmm0, xmm1
00885367 jbe 0x8853a2
00885369 subss xmm0, dword ptr [esp + 8]
0088536f comiss xmm1, xmm0
00885372 movss dword ptr [esi], xmm0
00885376 jbe 0x88537b
00885378 movaps xmm0, xmm1
0088537b comiss xmm1, xmm0
0088537e movss dword ptr [esi], xmm0
00885382 jb 0x8853a2
00885384 movss xmm0, dword ptr [esi + 0x10]
00885389 comiss xmm0, xmm1
0088538c lea edx, [esi + 0x10]
0088538f jbe 0x8853a2
00885391 push 0x40
00885393 mov ecx, esi
00885395 call 0xd959c0
0088539a xorps xmm1, xmm1
0088539d movss dword ptr [esi + 0x40], xmm1
008853a2 add esi, 0x50
008853a5 cmp esi, 0x1de6598
008853ab jl 0x885360
008853ad pop esi
008853ae ret 4
008853b1 adc al, 0xcc
008853b3 int3 
008853b4 int3 
008853b5 int3 
008853b6 int3 
008853b7 int3 
008853b8 int3 
008853b9 int3 
008853ba int3 
008853bb int3 
008853bc int3 
008853bd int3 
008853be int3 
008853bf int3 
008853c0 push esi
008853c1 xor esi, esi
008853c3 cmp dword ptr [0x1de6224], esi
008853c9 jle 0x8853f5
008853cb jmp 0x8853d0
008853cd lea ecx, [ecx]
008853d0 mov eax, dword ptr [esi*4 + 0x1de61a0]
008853d7 mov eax, dword ptr [eax + 4]
008853da test eax, eax
008853dc je 0x8853e0
008853de call eax
008853e0 inc esi
008853e1 cmp esi, dword ptr [0x1de6224]
008853e7 jl 0x8853d0
008853e9 mov dword ptr [0x1de6664], 0
008853f3 pop esi
008853f4 ret 
008853f5 mov dword ptr [0x1de6664], esi
008853fb pop esi
008853fc ret 
008853fd mov eax, 0x20a1cccc
00885402 out 0xde, al
00885404 add dword ptr [ebx - 0x219a17f3], ecx
0088540a add dword ptr [ebx], edi
0088540c sal dword ptr [eax + ebp - 0x46], 1
00885411 add byte ptr [eax], al
00885413 add byte ptr [ebp - 0x76f98a37], al
00885419 adc eax, 0x1de664c
0088541e xorps xmm0, xmm0
00885421 mov dword ptr [0x1de65e8], eax
00885426 mov dword ptr [0x1de6648], edx
0088542c movss dword ptr [0x1de65ec], xmm0
00885434 ret 4
00885437 cmp dword ptr [0x1de6648], 0
0088543e jne 0x88546e
00885440 call 0x4120b0
00885445 cmp dword ptr [eax + 0x34], 0
00885449 je 0x88546e
0088544b mov ecx, dword ptr [eax + 0x2c]
0088544e lea ecx, [ecx + ecx*2]
00885451 cmp dword ptr [eax + ecx*4 + 0x14], 0xa
00885456 jne 0x88546e
00885458 movss xmm0, dword ptr [0x1de65ec]
00885460 addss xmm0, dword ptr [esp + 4]
00885466 movss dword ptr [0x1de65ec], xmm0
0088546e ret 4
00885471 push esi
00885472 int3 
00885473 int3 
00885474 int3 
00885475 int3 
00885476 int3 
00885477 int3 
00885478 int3 
00885479 int3 
0088547a int3 
0088547b int3 
0088547c int3 
0088547d int3 
0088547e int3 
0088547f int3 
00885480 push ecx
00885481 call 0x401bd0
00885486 fst dword ptr [esp]
00885489 fld dword ptr [0xf37d68]
0088548f fxch st(1)
00885491 fcompi st(1)
00885493 fstp st(0)
00885495 jbe 0x88549e
00885497 mov eax, 1
0088549c pop ecx
0088549d ret 
0088549e movss xmm0, dword ptr [esp]
008854a3 xorps xmm0, xmmword ptr [0xec6fe0]
008854aa comiss xmm0, dword ptr [0xf37d68]
008854b1 jbe 0x8854b8
008854b3 or eax, 0xffffffff
008854b6 pop ecx
008854b7 ret 
008854b8 xor eax, eax
008854ba pop ecx
008854bb ret 
008854bc int3 
008854bd int3 
008854be int3 
008854bf int3 
008854c0 cmp dword ptr [0x1de6600], 0
008854c7 jne 0x8854d7
008854c9 cmp dword ptr [0x1de6604], 0
008854d0 je 0x8854e0
008854d2 jmp 0x88555a
008854d7 cmp dword ptr [0x1de6604], 0
008854de je 0x88555a
008854e0 call 0x4120b0
008854e5 cmp dword ptr [eax + 0x34], 0
008854e9 je 0x88555a
008854eb mov ecx, dword ptr [eax + 0x2c]
008854ee lea ecx, [ecx + ecx*2]
008854f1 cmp dword ptr [eax + ecx*4 + 0x14], 0xa
008854f6 jne 0x88555a
008854f8 push esi
008854f9 mov esi, 8
008854fe call 0xaacb50
00885503 test eax, eax
00885505 jne 0x885513
00885507 mov edx, dword ptr [0x1ce716c]
0088550d mov esi, dword ptr [edx + 0x1bc]
00885513 movzx eax, byte ptr [esi + 0x88557c]
0088551a pop esi
0088551b jmp dword ptr [eax*4 + 0x885570]
00885522 mov ecx, dword ptr [0x1de6604]
00885528 test ecx, ecx
0088552a je 0x88555a
0088552c call 0x7af930
00885531 test eax, eax
00885533 je 0x88555a
00885535 mov ecx, dword ptr [0x1de6604]
0088553b test ecx, ecx
0088553d je 0x88556e
0088553f call 0x6b47f0
00885544 test eax, eax
00885546 je 0x88556e
00885548 mov ecx, dword ptr [0x1de6604]
0088554e mov ecx, dword ptr [ecx + 0x18]
00885551 call 0x7bbb20
00885556 test eax, eax
00885558 jne 0x88556e
0088555a mov dword ptr [0x1de6600], 0
00885564 mov dword ptr [0x1de6604], 0
0088556e ret 
0088556f nop 
00885570 pop edx
00885571 push ebp
00885572 mov byte ptr [eax], al
00885574 xor eax, 0x22008855
00885579 push ebp
0088557a mov byte ptr [eax], al
0088557c add byte ptr [ecx], al
0088557e add byte ptr [ecx], al
00885580 add byte ptr [ecx], al
00885582 add dword ptr [edx], eax
00885584 add byte ptr [eax], al
00885586 int3 
00885587 int3 
00885588 int3 
00885589 int3 
0088558a int3 
0088558b int3 
0088558c int3 
0088558d int3 
0088558e int3 
0088558f int3 
00885590 push ebp
00885591 push esi
00885592 push edi
00885593 xor ecx, ecx
00885595 xor ebp, ebp
00885597 call 0x6b49a0
0088559c mov edi, eax
0088559e test edi, edi
008855a0 je 0x8855df
008855a2 mov esi, dword ptr [edi + 0x14]
008855a5 cmp dword ptr [esi], -1
008855a8 je 0x8855c3
008855aa test dword ptr [esi + 8], 0x8000
008855b1 jne 0x8855c3
008855b3 call 0x499000
008855b8 test eax, eax
008855ba jne 0x8855d5
008855bc mov esi, dword ptr [esi]
008855be cmp esi, -1
008855c1 jne 0x8855d7
008855c3 mov ecx, edi
008855c5 call 0x54b630
008855ca mov eax, dword ptr [edi]
008855cc mov edx, dword ptr [eax + 0xc]
008855cf mov ecx, edi
008855d1 call edx
008855d3 jmp 0x88559c
008855d5 xor esi, esi
008855d7 mov eax, edi
008855d9 cmp esi, dword ptr [esp + 0x10]
008855dd je 0x8855e1
008855df mov eax, ebp
008855e1 pop edi
008855e2 pop esi
008855e3 pop ebp
008855e4 ret 4
008855e7 push 0xcccccccc
008855ec int3 
008855ed int3 
008855ee int3 
008855ef int3 
008855f0 push ecx
008855f1 push ebx
008855f2 push esi
008855f3 mov esi, ecx
008855f5 mov ebx, edx
008855f7 test esi, esi
008855f9 js 0x885708
008855ff cmp esi, dword ptr [0x1de6198]
00885605 jge 0x885708
0088560b movss xmm2, dword ptr [esp + 0x14]
00885611 ucomiss xmm2, dword ptr [0xf0fc08]
00885618 lahf 
00885619 test ah, 0x44
0088561c jnp 0x885708
00885622 lea eax, [esi + esi*4]
00885625 shl eax, 4
00885628 add eax, ebx
0088562a shl eax, 4
0088562d movaps xmm0, xmm2
00885630 addss xmm0, dword ptr [esi*4 + 0x1de2b08]
00885639 movss dword ptr [esi*4 + 0x1de2b08], xmm0
00885642 movss xmm0, dword ptr [eax + 0x1de2b58]
0088564a inc dword ptr [eax + 0x1de2b5c]
00885650 cmp dword ptr [eax + 0x1de2b64], 0
00885657 addss xmm0, xmm2
0088565b movss dword ptr [eax + 0x1de2b58], xmm0
00885663 jne 0x88566f
00885665 mov dword ptr [eax + 0x1de2b64], 1
0088566f movss xmm0, dword ptr [esi*4 + 0x1de2b08]
00885678 movss xmm1, dword ptr [0xf35ffc]
00885680 comiss xmm0, xmm1
00885683 ja 0x885688
00885685 movaps xmm0, xmm1
00885688 movss dword ptr [esi*4 + 0x1de2b08], xmm0
00885691 mov eax, dword ptr [esi*8 + 0x1de6140]
00885698 add eax, dword ptr [esi*8 + 0x1de6144]
0088569f mov ecx, 5
008856a4 cdq 
008856a5 idiv ecx
008856a7 lea eax, [esi + esi*4]
008856aa push edi
008856ab lea ecx, [esp + 0xc]
008856af add edx, eax
008856b1 lea edi, [edx + edx*4]
008856b4 lea edi, [edi*4 + 0x1de5d58]
008856bb mov dword ptr [edi], ebx
008856bd movss dword ptr [edi + 4], xmm2
008856c2 call 0x6b61a0
008856c7 mov ecx, dword ptr [eax]
008856c9 mov edx, dword ptr [esp + 0x1c]
008856cd mov dword ptr [edi + 0x10], ecx
008856d0 mov dword ptr [edi + 8], edx
008856d3 mov eax, dword ptr [esi*8 + 0x1de6144]
008856da pop edi
008856db cmp eax, 5
008856de jl 0x8856e9
008856e0 inc dword ptr [esi*8 + 0x1de6140]
008856e7 jmp 0x8856f1
008856e9 inc eax
008856ea mov dword ptr [esi*8 + 0x1de6144], eax
008856f1 movss xmm0, dword ptr [esp + 0x14]
008856f7 mov eax, dword ptr [esp + 0x10]
008856fb push ecx
008856fc .byte 0xf3
008856fd .byte 0x0f
008856fe .byte 0x11
008856ff .byte 0x04