forked from nmlgc/ReC98
-
Notifications
You must be signed in to change notification settings - Fork 0
/
Copy pathth01_reiiden.asm
35717 lines (32522 loc) · 565 KB
/
th01_reiiden.asm
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
135
136
137
138
139
140
141
142
143
144
145
146
147
148
149
150
151
152
153
154
155
156
157
158
159
160
161
162
163
164
165
166
167
168
169
170
171
172
173
174
175
176
177
178
179
180
181
182
183
184
185
186
187
188
189
190
191
192
193
194
195
196
197
198
199
200
201
202
203
204
205
206
207
208
209
210
211
212
213
214
215
216
217
218
219
220
221
222
223
224
225
226
227
228
229
230
231
232
233
234
235
236
237
238
239
240
241
242
243
244
245
246
247
248
249
250
251
252
253
254
255
256
257
258
259
260
261
262
263
264
265
266
267
268
269
270
271
272
273
274
275
276
277
278
279
280
281
282
283
284
285
286
287
288
289
290
291
292
293
294
295
296
297
298
299
300
301
302
303
304
305
306
307
308
309
310
311
312
313
314
315
316
317
318
319
320
321
322
323
324
325
326
327
328
329
330
331
332
333
334
335
336
337
338
339
340
341
342
343
344
345
346
347
348
349
350
351
352
353
354
355
356
357
358
359
360
361
362
363
364
365
366
367
368
369
370
371
372
373
374
375
376
377
378
379
380
381
382
383
384
385
386
387
388
389
390
391
392
393
394
395
396
397
398
399
400
401
402
403
404
405
406
407
408
409
410
411
412
413
414
415
416
417
418
419
420
421
422
423
424
425
426
427
428
429
430
431
432
433
434
435
436
437
438
439
440
441
442
443
444
445
446
447
448
449
450
451
452
453
454
455
456
457
458
459
460
461
462
463
464
465
466
467
468
469
470
471
472
473
474
475
476
477
478
479
480
481
482
483
484
485
486
487
488
489
490
491
492
493
494
495
496
497
498
499
500
501
502
503
504
505
506
507
508
509
510
511
512
513
514
515
516
517
518
519
520
521
522
523
524
525
526
527
528
529
530
531
532
533
534
535
536
537
538
539
540
541
542
543
544
545
546
547
548
549
550
551
552
553
554
555
556
557
558
559
560
561
562
563
564
565
566
567
568
569
570
571
572
573
574
575
576
577
578
579
580
581
582
583
584
585
586
587
588
589
590
591
592
593
594
595
596
597
598
599
600
601
602
603
604
605
606
607
608
609
610
611
612
613
614
615
616
617
618
619
620
621
622
623
624
625
626
627
628
629
630
631
632
633
634
635
636
637
638
639
640
641
642
643
644
645
646
647
648
649
650
651
652
653
654
655
656
657
658
659
660
661
662
663
664
665
666
667
668
669
670
671
672
673
674
675
676
677
678
679
680
681
682
683
684
685
686
687
688
689
690
691
692
693
694
695
696
697
698
699
700
701
702
703
704
705
706
707
708
709
710
711
712
713
714
715
716
717
718
719
720
721
722
723
724
725
726
727
728
729
730
731
732
733
734
735
736
737
738
739
740
741
742
743
744
745
746
747
748
749
750
751
752
753
754
755
756
757
758
759
760
761
762
763
764
765
766
767
768
769
770
771
772
773
774
775
776
777
778
779
780
781
782
783
784
785
786
787
788
789
790
791
792
793
794
795
796
797
798
799
800
801
802
803
804
805
806
807
808
809
810
811
812
813
814
815
816
817
818
819
820
821
822
823
824
825
826
827
828
829
830
831
832
833
834
835
836
837
838
839
840
841
842
843
844
845
846
847
848
849
850
851
852
853
854
855
856
857
858
859
860
861
862
863
864
865
866
867
868
869
870
871
872
873
874
875
876
877
878
879
880
881
882
883
884
885
886
887
888
889
890
891
892
893
894
895
896
897
898
899
900
901
902
903
904
905
906
907
908
909
910
911
912
913
914
915
916
917
918
919
920
921
922
923
924
925
926
927
928
929
930
931
932
933
934
935
936
937
938
939
940
941
942
943
944
945
946
947
948
949
950
951
952
953
954
955
956
957
958
959
960
961
962
963
964
965
966
967
968
969
970
971
972
973
974
975
976
977
978
979
980
981
982
983
984
985
986
987
988
989
990
991
992
993
994
995
996
997
998
999
1000
;
; +-------------------------------------------------------------------------+
; | This file has been generated by The Interactive Disassembler (IDA) |
; | Copyright (c) 2009 by Hex-Rays, <[email protected]> |
; +-------------------------------------------------------------------------+
;
; Input MD5 : F39FD5A146426CF261F207D7FC878675
; File Name : th01/REIIDEN.EXE
; Format : MS-DOS executable (EXE)
; Base Address: 0h Range: 0h-3B660h Loaded length: 36C14h
; Entry Point : 0:0
; OS type : MS DOS
; Application type: Executable 16bit
.286 ; Force the .model directive to create 16-bit default segments...
.model large
__LARGE__ equ 1
.386 ; ... then switch to what we actually need.
; And yes, we can't move this to an include file for some reason.
include ReC98.inc
include th01/th01.asm
include libs/BorlandC/regs.inc
option emulator
extern @$bdla$qnv:proc
extern @$bnew$qui:proc
extern @$bnwa$qui:proc
extern @_vector_new_$qnvuiuluie:proc
extern @set_new_handler$qnqv$v:proc
extern FTOL@:proc
extern LDIV@:proc
extern LXMUL@:proc
extern SCOPY@:proc
extern __control87:proc
extern __fgetc:proc
extern __lrotl:proc
extern __lrotr:proc
extern __mbcjmstojis:proc
extern __mbctype:byte
extern __turboFloat
extern _close:proc
extern _coreleft:proc
extern _delay:proc
extern _execl:proc
extern _exit:proc
extern _farcalloc:proc
extern _farfree:proc
extern _farheapcheck:proc
extern _farheapchecknode:proc
extern _farmalloc:proc
extern _fclose:proc
extern _filelength:proc
extern _fopen:proc
extern _getvect:proc
extern _int86:proc
extern _intdosx:proc
extern _kbhit:proc
extern _memcmp:proc
extern _memcpy:proc
extern _memset:proc
extern _open:proc
extern _printf:proc
extern _puts:proc
extern _scanf:proc
extern _segread:proc
extern _setvect:proc
extern _strcmp:proc
extern _strcpy:proc
extern _toupper:proc
extern _vsprintf:proc
extern _write:proc
; ===========================================================================
; Segment type: Pure code
_TEXT segment word public 'CODE' use16
assume cs:_TEXT
assume es:nothing, ds:_DATA, fs:nothing, gs:nothing
include libs/piloadc/piloadc.asm
include libs/master.lib/text_clear.asm
include libs/master.lib/text_fillca.asm
include libs/master.lib/graph_400line.asm
include libs/master.lib/graph_clear.asm
include libs/master.lib/graph_show.asm
include libs/master.lib/graph_start.asm
include libs/master.lib/palette_show.asm
include libs/master.lib/palette_init.asm
include libs/master.lib/respal_exist.asm
include libs/master.lib/respal_free.asm
include libs/master.lib/resdata.asm
include libs/master.lib/file_read.asm
include libs/master.lib/file_close.asm
include libs/master.lib/file_exist.asm
include libs/master.lib/file_ropen.asm
include libs/master.lib/file_write.asm
include libs/master.lib/file_create.asm
include libs/master.lib/file_seek.asm
include libs/master.lib/dos_free.asm
include libs/master.lib/dos_axdx.asm
include libs/master.lib/keystart.asm
include libs/master.lib/key_sense.asm
include libs/master.lib/dos_ropen.asm
include libs/master.lib/grcg_setcolor.asm
include libs/master.lib/grcg_pset.asm
include libs/master.lib/egc.asm
include libs/master.lib/iatan2.asm
include libs/master.lib/isqrt.asm
include libs/master.lib/random.asm
_TEXT ends
; ===========================================================================
; Segment type: Pure code
main_01_TEXT segment byte public 'CODE' use16
assume cs:main_01_TEXT
;org 2
assume es:nothing, ss:nothing, ds:_DATA, fs:nothing, gs:nothing
; =============== S U B R O U T I N E =======================================
; Attributes: bp-based frame
sub_B502 proc far
var_8 = word ptr -8
var_6 = word ptr -6
var_4 = word ptr -4
var_2 = word ptr -2
arg_0 = word ptr 6
enter 8, 0
cmp [bp+arg_0], 1
jnz short loc_B559
mov byte_386FC, 0
mov byte_386FD, 0
mov byte_386FE, 0
mov byte_386FF, 0
mov byte_38704, 0
mov byte_38705, 0
mov byte_38706, 0
mov byte_38707, 0
mov byte_38700, 0
mov byte_38701, 0
mov byte_38702, 0
mov byte_38703, 0
mov byte_38708, 0
mov byte_38709, 0
mov byte_34A50, 0
leave
retf
; ---------------------------------------------------------------------------
loc_B559:
push 7
call key_sense
mov [bp+var_2], ax
push 5
call key_sense
mov [bp+var_4], ax
push 8
call key_sense
mov [bp+var_6], ax
push 9
call key_sense
mov [bp+var_8], ax
push 7
call key_sense
or [bp+var_2], ax
push 5
call key_sense
or [bp+var_4], ax
push 8
call key_sense
or [bp+var_6], ax
push 9
call key_sense
or [bp+var_8], ax
mov al, byte_386FC
mov ah, 0
mov dx, [bp+var_2]
and dx, 4
cmp ax, dx
jnz short loc_B5C7
mov al, byte_38704
mov ah, 0
mov dx, [bp+var_6]
and dx, 8
cmp ax, dx
jz short loc_B5DF
loc_B5C7:
test byte ptr [bp+var_2], 4
jnz short loc_B5D3
test byte ptr [bp+var_6], 8
jz short loc_B5DA
loc_B5D3:
mov byte_34A54, 1
jmp short loc_B5DF
; ---------------------------------------------------------------------------
loc_B5DA:
mov byte_34A54, 0
loc_B5DF:
mov al, byte ptr [bp+var_2]
and al, 4
mov byte_386FC, al
mov al, byte ptr [bp+var_6]
and al, 8
mov byte_38704, al
mov al, byte_386FD
mov ah, 0
mov dx, [bp+var_2]
and dx, 20h
cmp ax, dx
jnz short loc_B60D
mov al, byte_38705
mov ah, 0
mov dx, [bp+var_8]
and dx, 8
cmp ax, dx
jz short loc_B625
loc_B60D:
test byte ptr [bp+var_2], 20h
jnz short loc_B619
test byte ptr [bp+var_8], 8
jz short loc_B620
loc_B619:
mov byte_34A55, 1
jmp short loc_B625
; ---------------------------------------------------------------------------
loc_B620:
mov byte_34A55, 0
loc_B625:
mov al, byte ptr [bp+var_2]
and al, 20h
mov byte_386FD, al
mov al, byte ptr [bp+var_8]
and al, 8
mov byte_38705, al
mov al, byte_386FE
mov ah, 0
mov dx, [bp+var_2]
and dx, 8
cmp ax, dx
jnz short loc_B653
mov al, byte_38706
mov ah, 0
mov dx, [bp+var_6]
and dx, 40h
cmp ax, dx
jz short loc_B66B
loc_B653:
test byte ptr [bp+var_2], 8
jnz short loc_B65F
test byte ptr [bp+var_6], 40h
jz short loc_B666
loc_B65F:
or byte_34A4B, 2
jmp short loc_B66B
; ---------------------------------------------------------------------------
loc_B666:
and byte_34A4B, 0FDh
loc_B66B:
mov al, byte ptr [bp+var_2]
and al, 8
mov byte_386FE, al
mov al, byte ptr [bp+var_6]
and al, 40h
mov byte_38706, al
mov al, byte_386FF
mov ah, 0
mov dx, [bp+var_2]
and dx, 10h
cmp ax, dx
jnz short loc_B699
mov al, byte_38707
mov ah, 0
mov dx, [bp+var_8]
and dx, 1
cmp ax, dx
jz short loc_B6B1
loc_B699:
test byte ptr [bp+var_2], 10h
jnz short loc_B6A5
test byte ptr [bp+var_8], 1
jz short loc_B6AC
loc_B6A5:
or byte_34A4B, 1
jmp short loc_B6B1
; ---------------------------------------------------------------------------
loc_B6AC:
and byte_34A4B, 0FEh
loc_B6B1:
mov al, byte ptr [bp+var_2]
and al, 10h
mov byte_386FF, al
mov al, byte ptr [bp+var_8]
and al, 1
mov byte_38707, al
mov al, byte_38700
mov ah, 0
mov dx, [bp+var_4]
and dx, 2
cmp ax, dx
jz short loc_B6FF
test byte ptr [bp+var_4], 2
jz short loc_B6FA
mov byte_34A4E, 1
cmp word_34A6E, 14h
jge short loc_B6E8
inc byte_38708
jmp short loc_B6FF
; ---------------------------------------------------------------------------
loc_B6E8:
mov word_34A6E, 0
mov byte_38708, 1
mov byte_38709, 0
jmp short loc_B6FF
; ---------------------------------------------------------------------------
loc_B6FA:
mov byte_34A4E, 0
loc_B6FF:
mov al, byte ptr [bp+var_4]
and al, 2
mov byte_38700, al
mov al, byte_38701
mov ah, 0
mov dx, [bp+var_4]
and dx, 4
cmp ax, dx
jz short loc_B745
test byte ptr [bp+var_4], 4
jz short loc_B740
mov byte_34A53, 1
cmp word_34A6E, 14h
jge short loc_B72E
inc byte_38709
jmp short loc_B745
; ---------------------------------------------------------------------------
loc_B72E:
mov word_34A6E, 0
mov byte_38709, 1
mov byte_38708, 0
jmp short loc_B745
; ---------------------------------------------------------------------------
loc_B740:
mov byte_34A53, 0
loc_B745:
mov al, byte ptr [bp+var_4]
and al, 4
mov byte_38701, al
push 0
call key_sense
mov [bp+var_2], ax
push 3
call key_sense
mov [bp+var_4], ax
push 0
call key_sense
or [bp+var_2], ax
push 3
call key_sense
or [bp+var_4], ax
mov al, byte_38702
mov ah, 0
mov dx, [bp+var_2]
and dx, 1
cmp ax, dx
jz short loc_B793
test byte ptr [bp+var_2], 1
jz short loc_B793
mov al, 1
sub al, byte_34A51
mov byte_34A51, al
loc_B793:
mov al, byte ptr [bp+var_2]
and al, 1
mov byte_38702, al
mov al, byte_38703
mov ah, 0
mov dx, [bp+var_4]
and dx, 10h
cmp ax, dx
jz short loc_B7CF
test byte ptr [bp+var_4], 10h
jz short loc_B7CA
cmp byte_34A51, 1
jnz short loc_B7C3
cmp byte_34A4E, 1
jnz short loc_B7C3
mov _player_is_hit, 1
loc_B7C3:
mov byte_34A52, 1
jmp short loc_B7CF
; ---------------------------------------------------------------------------
loc_B7CA:
mov byte_34A52, 0
loc_B7CF:
mov al, byte ptr [bp+var_4]
and al, 10h
mov byte_38703, al
cmp byte_38709, 2
jb short loc_B7E5
cmp byte_38708, 2
jnb short loc_B7F3
loc_B7E5:
cmp byte_34A4B, 3
jnz short loc_B802
cmp byte_34A4E, 0
jz short loc_B802
loc_B7F3:
mov byte_34A50, 1
mov byte_38709, 0
mov byte_38708, 0
loc_B802:
cmp _mode_test, 1
jnz short locret_B87A
push 6
call key_sense
mov [bp+var_2], ax
push 6
call key_sense
or [bp+var_2], ax
mov al, byte_3870A
mov ah, 0
mov dx, [bp+var_2]
and dx, 40h
cmp ax, dx
jz short loc_B843
test byte ptr [bp+var_2], 40h
jz short loc_B83E
mov byte_34A4C, 1
nopcall sub_D10B
jmp short loc_B843
; ---------------------------------------------------------------------------
loc_B83E:
mov byte_34A4C, 0
loc_B843:
mov al, byte ptr [bp+var_2]
and al, 40h
mov byte_3870A, al
mov al, byte_3870B
mov ah, 0
mov dx, [bp+var_2]
and dx, 80h
cmp ax, dx
jz short loc_B872
test byte ptr [bp+var_2], 80h
jz short loc_B86D
mov byte_34A4D, 1
nopcall sub_D323
jmp short loc_B872
; ---------------------------------------------------------------------------
loc_B86D:
mov byte_34A4D, 0
loc_B872:
mov al, byte ptr [bp+var_2]
and al, 80h
mov byte_3870B, al
locret_B87A:
leave
retf
sub_B502 endp
; =============== S U B R O U T I N E =======================================
; Attributes: bp-based frame
sub_B87C proc far
push bp
mov bp, sp
mov byte_34A4B, 0
mov byte_34A54, 0
mov byte_34A55, 0
mov byte_34A52, 0
mov byte_34A51, 0
mov byte_34A4E, 0
mov byte_34A53, 0
mov byte_34A4C, 0
mov byte_34A4D, 0
push 1
call sub_B502
pop cx
pop bp
retf
sub_B87C endp
; =============== S U B R O U T I N E =======================================
; Attributes: bp-based frame
sub_B8B5 proc far
var_C = word ptr -0Ch
var_9 = byte ptr -9
var_8 = word ptr -8
var_5 = byte ptr -5
var_4 = word ptr -4
var_2 = word ptr -2
arg_0 = dword ptr 6
arg_4 = word ptr 0Ah
arg_6 = byte ptr 0Ch
enter 0Ch, 0
push si
push di
mov cx, [bp+arg_4]
mov [bp+var_2], cx
les bx, [bp+arg_0]
mov si, es:[bx]
mov ax, 0A000h
mov dx, [bp+var_2]
mov es, ax
assume es:nothing
mov es:[si], dx
mov [bp+var_4], cx
mov es, word ptr [bp+arg_0+2]
assume es:nothing
mov ax, es:[bx]
add ax, 2
mov di, ax
mov ax, 0A000h
mov dx, [bp+var_4]
mov es, ax
assume es:nothing
mov es:[di], dx
mov al, [bp+arg_6]
mov [bp+var_5], al
mov es, word ptr [bp+arg_0+2]
assume es:nothing
mov ax, es:[bx]
mov [bp+var_8], ax
mov ax, 0A200h
mov bx, [bp+var_8]
mov dl, [bp+var_5]
mov es, ax
assume es:nothing
mov es:[bx], dl
mov al, [bp+arg_6]
mov [bp+var_9], al
les bx, [bp+arg_0]
assume es:nothing
mov ax, es:[bx]
add ax, 2
mov [bp+var_C], ax
mov ax, 0A200h
mov bx, [bp+var_C]
mov dl, [bp+var_9]
mov es, ax
assume es:nothing
mov es:[bx], dl
les bx, [bp+arg_0]
assume es:nothing
add word ptr es:[bx], 4
pop di
pop si
leave
retf
sub_B8B5 endp
; =============== S U B R O U T I N E =======================================
; Attributes: bp-based frame
sub_B933 proc far
arg_0 = dword ptr 6
arg_4 = word ptr 0Ah
arg_6 = word ptr 0Ch
push bp
mov bp, sp
push si
push di
xor si, si
jmp short loc_B958
; ---------------------------------------------------------------------------
loc_B93C:
xor di, di
jmp short loc_B952
; ---------------------------------------------------------------------------
loc_B940:
push [bp+arg_6]
push [bp+arg_4]
pushd [bp+arg_0]
call sub_B8B5
add sp, 8
inc di
loc_B952:
cmp di, 28h ; '('
jl short loc_B940
inc si
loc_B958:
cmp si, 5
jl short loc_B93C
pop di
pop si
pop bp
retf
sub_B933 endp
; =============== S U B R O U T I N E =======================================
; Attributes: bp-based frame
sub_B961 proc far
var_48 = byte ptr -48h
outregs = REGS ptr -26h
inregs = REGS ptr -16h
var_6 = word ptr -6
var_4 = word ptr -4
var_2 = word ptr -2
arg_0 = word ptr 6
enter 48h, 0
push si
push di
mov word ptr [bp+inregs+2], ss
lea ax, [bp+var_48]
mov word ptr [bp+inregs+4], ax
mov ax, [bp+arg_0]
mov word ptr [bp+inregs+6], ax
mov byte ptr [bp+inregs+1], 14h
push ss
lea ax, [bp+outregs]
push ax ; outregs
push ss
lea ax, [bp+inregs]
push ax ; inregs
push 18h ; intno
call _int86
mov [bp+var_2], 0
push 50020h
push ss
lea ax, [bp+var_2]
push ax
call sub_B933
add sp, 12h
mov di, 1
jmp loc_BA34
; ---------------------------------------------------------------------------
loc_B9A8:
mov bx, di
add bx, bx
lea ax, [bp+var_48]
add bx, ax
mov al, ss:[bx]
mov ah, 0
shl ax, 8
mov bx, di
add bx, bx
inc bx
lea dx, [bp+var_48]
add bx, dx
mov dl, ss:[bx]
mov dh, 0
add ax, dx
mov [bp+var_4], ax
mov [bp+var_6], 8000h
xor si, si
jmp short loc_B9E9
; ---------------------------------------------------------------------------
loc_B9D6:
push 50020h
push ss
lea ax, [bp+var_2]
push ax
call sub_B8B5
add sp, 8
inc si
loc_B9E9:
cmp si, 0Ch
jb short loc_B9D6
xor si, si
jmp short loc_BA12
; ---------------------------------------------------------------------------
loc_B9F2:
mov ax, [bp+var_6]
test [bp+var_4], ax
jnz short loc_B9FE
push 5
jmp short loc_BA00
; ---------------------------------------------------------------------------
loc_B9FE:
push 1
loc_BA00:
push 20h ; ' '
push ss
lea ax, [bp+var_2]
push ax
call sub_B8B5
add sp, 8
shr [bp+var_6], 1
inc si
loc_BA12:
cmp si, 10h
jb short loc_B9F2
xor si, si
jmp short loc_BA2E
; ---------------------------------------------------------------------------
loc_BA1B:
push 50020h
push ss
lea ax, [bp+var_2]
push ax
call sub_B8B5
add sp, 8
inc si
loc_BA2E:
cmp si, 0Ch
jb short loc_BA1B
inc di
loc_BA34:
cmp di, 10h
jbe loc_B9A8
push 50020h
push ss
lea ax, [bp+var_2]
push ax
call sub_B933
add sp, 8
pop di
pop si
leave
retf 2
sub_B961 endp
; =============== S U B R O U T I N E =======================================
; Attributes: bp-based frame
; int __cdecl __far sub_BA53(union REGS *inregs, int, int, int)
sub_BA53 proc far
outregs = REGS ptr -10h
inregs = dword ptr 6
arg_4 = word ptr 0Ah
arg_6 = word ptr 0Ch
arg_8 = word ptr 0Eh
enter 10h, 0
les bx, [bp+inregs]
mov ax, [bp+arg_6]
mov es:[bx+2], ax
mov ax, [bp+arg_4]
mov es:[bx+4], ax
mov ax, [bp+arg_8]
mov es:[bx+6], ax
mov byte ptr es:[bx+1], 14h
push ss
lea ax, [bp+outregs]
push ax ; outregs
push word ptr [bp+inregs+2]
push bx ; inregs
push 18h ; intno
call _int86
add sp, 0Ah
leave
retf
sub_BA53 endp
; =============== S U B R O U T I N E =======================================
; Attributes: bp-based frame
; int __fastcall __far sub_BA89(int, int, int, int)
sub_BA89 proc far
var_96 = word ptr -96h
var_84 = word ptr -84h
var_72 = word ptr -72h
var_60 = word ptr -60h
var_4E = word ptr -4Eh
var_3C = word ptr -3Ch
var_2A = word ptr -2Ah
inregs = REGS ptr -18h
var_8 = word ptr -8
var_6 = word ptr -6
var_4 = word ptr -4
var_2 = byte ptr -2
var_1 = byte ptr -1
arg_0 = word ptr 6
enter 96h, 0
push si
push di
mov ax, [bp+arg_0]
mov [bp+var_6], ax
push 8053h ; int
push ss ; int
lea ax, [bp+var_96]
push ax ; int
push ss
lea ax, [bp+inregs]
push ax ; inregs
call sub_BA53
push 8054h ; int
push ss ; int
lea ax, [bp+var_84]
push ax ; int
push ss
lea ax, [bp+inregs]
push ax ; inregs
call sub_BA53
push 8041h ; int
push ss ; int
lea ax, [bp+var_72]
push ax ; int
push ss
lea ax, [bp+inregs]
push ax ; inregs
call sub_BA53
push 8047h ; int
push ss ; int
lea ax, [bp+var_60]
push ax ; int
push ss
lea ax, [bp+inregs]
push ax ; inregs
call sub_BA53
push 8045h ; int
push ss ; int
lea ax, [bp+var_4E]
push ax ; int
push ss
lea ax, [bp+inregs]
push ax ; inregs
call sub_BA53
add sp, 32h
mov ax, [bp+var_6]
mov bx, 0Ah
xor dx, dx
div bx
add ax, 8030h
push ax ; int
push ss ; int
lea ax, [bp+var_3C]
push ax ; int
push ss
lea ax, [bp+inregs]
push ax ; inregs
call sub_BA53
mov ax, [bp+var_6]
mov bx, 0Ah
xor dx, dx
div bx
add dx, 8030h
push dx ; int
push ss ; int
lea ax, [bp+var_2A]
push ax ; int
push ss
lea ax, [bp+inregs]
push ax ; inregs
call sub_BA53
mov [bp+var_4], 0
push 10020h
push ss
lea ax, [bp+var_4]
push ax
call sub_B933
add sp, 1Ch
mov di, 2
jmp short loc_BB96
; ---------------------------------------------------------------------------
loc_BB44:
mov [bp+var_8], 0
jmp short loc_BB8F
; ---------------------------------------------------------------------------
loc_BB4B:
mov bx, [bp+var_8]
imul bx, 12h
add bx, di
lea ax, [bp+var_96]
add bx, ax
mov al, ss:[bx]
mov [bp+var_1], al
mov [bp+var_2], 80h
xor si, si
jmp short loc_BB87
; ---------------------------------------------------------------------------
loc_BB67:
mov al, [bp+var_2]
test [bp+var_1], al
jnz short loc_BB73
push 1
jmp short loc_BB75
; ---------------------------------------------------------------------------
loc_BB73:
push 45h ; 'E'
loc_BB75:
push 20h ; ' '
push ss
lea ax, [bp+var_4]
push ax
call sub_B8B5
add sp, 8
shr [bp+var_2], 1
inc si
loc_BB87:
cmp si, 8
jb short loc_BB67
inc [bp+var_8]
loc_BB8F:
cmp [bp+var_8], 5
jb short loc_BB4B
inc di
loc_BB96:
cmp di, 11h
jbe short loc_BB44
push 10020h
push ss
lea ax, [bp+var_4]
push ax
call sub_B933
push 23h ; '#'
call sub_E364
mov [bp+var_4], 0
push 10020h
push ss
lea ax, [bp+var_4]
push ax
call sub_B933
add sp, 12h
mov di, 2
jmp loc_BC58
; ---------------------------------------------------------------------------
loc_BBCE:
xor si, si
jmp short loc_BBE5
; ---------------------------------------------------------------------------
loc_BBD2:
push 10020h