Function at 0x100685b0
Capabilities:
Resolve function by parsing pe exports

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x100ce1a0
mov eax, dword fs:[0]
push eax
sub esp, 0x154
mov eax, dword [0x101344c0]
xor eax, ebp
mov dword [ebp - 0x10], eax
push ebx
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov eax, dword [ebp + 8]
mov ecx, dword [0x10135110]
mov esi, dword [ebp + 0x18]
mov dword [ebp - 0x160], eax
mov eax, dword [ebp + 0xc]
mov dword [ebp - 0x150], eax
mov eax, dword [ebp + 0x10]
mov dword [ebp - 0x100], eax
mov eax, dword [ebp + 0x20]
mov dword [ebp - 0x11c], eax
mov eax, dword [ebp + 0x24]
mov dword [ebp - 0x130], eax
mov eax, dword [ecx + 0x1a6c]
mov byte [eax + 0x84], 1
mov edi, dword [ecx + 0x1a6c]
cmp byte [edi + 0x87], 0
jne 0x1006880b
mov edx, dword [ebp + 0x1c]
mov ecx, edx
mov ebx, dword [0x10135110]
mov eax, edx
shr eax, 0xe
and eax, 0xffffff01
shr ecx, 0x14
mov dword [ebp - 0x108], eax
and ecx, 0xffffff01
mov eax, edx
mov dword [ebp - 0xe4], ebx
shr eax, 0xf
and eax, 0xffffff01
mov dword [ebp - 0xf8], ecx
mov dword [ebp - 0x148], eax
mov eax, edx
shr eax, 0x10
not al
and eax, 0xffffff01
mov dword [ebp - 0xf4], eax
mov eax, edx
shr eax, 0x12
and eax, 0xffffff01
mov dword [ebp - 0x38], eax
test cl, cl
je 0x1006869c
call fcn.10037890
push 0
push dword [ebp - 0x160]
mov ecx, edi
call fcn.1003afc0
movss xmm0, dword [0x1011501c]
push ecx
mov dword [esp], 0xbf800000
push 1
push 0
push dword [ebp - 0x160]
mov dword [ebp - 0x10c], eax
lea eax, [ebp - 0x5c]
push eax
movss dword [ebp - 0x134], xmm0
call fcn.10037ff0
add esp, 0x14
cmp byte [ebp - 0xf8], 0
je 0x100686fa
movss xmm1, dword [ebx + 0x1930]
mulss xmm1, dword [0x10114ff8]
jmp 0x100686ff
movss xmm1, dword [ebp - 0x58]
movss xmm0, dword [ebx + 0x1554]
addss xmm0, xmm0
push ecx
addss xmm0, xmm1
movss dword [esp], xmm0
call fcn.10037d60
push ecx
fstp dword [esp]
push dword [esi + 4]
lea eax, [ebp - 0x64]
push dword [esi]
push eax
call fcn.10037c90
movss xmm4, dword [ebp - 0x5c]
xorps xmm0, xmm0
add esp, 0x14
mov esi, ebx
comiss xmm4, xmm0
jbe 0x10068748
addss xmm4, dword [esi + 0x1568]
jmp 0x1006874b
xorps xmm4, xmm4
cmp byte [ebp - 0xf8], 0
movss xmm3, dword [edi + 0xd0]
movss xmm0, dword [ebp - 0x64]
movaps xmm1, xmm3
movss xmm5, dword [ebp - 0x60]
addss xmm4, xmm0
addss xmm1, xmm0
movss dword [ebp - 0x140], xmm0
movaps xmm0, xmm5
movss dword [ebp - 0x14c], xmm5
addss xmm0, dword [edi + 0xd4]
movss dword [ebp - 0x78], xmm3
movss xmm2, dword [edi + 0xd4]
addss xmm4, xmm3
movss dword [ebp - 0x74], xmm2
movss dword [ebp - 0x70], xmm1
movss dword [ebp - 0x6c], xmm0
movaps xmm0, xmm2
addss xmm0, xmm5
movss dword [ebp - 0x54], xmm3
movss dword [ebp - 0x50], xmm2
movss dword [ebp - 0x4c], xmm4
mov dword [ebp - 0x120], edi
movss dword [ebp - 0x48], xmm0
je 0x1006890a
mov ebx, dword [ebp - 0x10c]
lea eax, [ebp - 0x78]
push eax
lea eax, [ebp - 0x54]
push ebx
push eax
call fcn.1003cf90
add esp, 0xc
test al, al
jne 0x10068829
movss xmm0, dword [esi + 0x1554]
lea eax, [ebp - 0x54]
push ecx
movss dword [esp], xmm0
push eax
call fcn.1003d300
add esp, 8
call fcn.10039be0
xor al, al
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 0x10]
xor ecx, ebp
call fcn.100c9684
mov esp, ebp
pop ebp
ret
lea eax, [esi + 0x164c]
push eax
push 3
call fcn.100421c0
movss xmm0, dword [esi + 0x1558]
add esp, 4
movss dword [esp], xmm0
push 6
call fcn.10042380
movss xmm0, dword [esi + 0x155c]
add esp, 4
movss dword [esp], xmm0
push 7
call fcn.10042380
lea eax, [esi + 0x1550]
push eax
push 1
call fcn.10042300
movss xmm1, dword [ebp - 0x70]
lea eax, [ebp - 0x15c]
movss xmm0, dword [ebp - 0x6c]
subss xmm1, dword [ebp - 0x78]
subss xmm0, dword [ebp - 0x74]
push 0x10004
push 1
push eax
push ebx
push dword [ebp - 0x160]
movss dword [ebp - 0x15c], xmm1
movss dword [ebp - 0x158], xmm0
call fcn.10037380
push 3
mov bl, al
call fcn.10041d10
push 1
call fcn.10041cc0
add esp, 0x2c
test bl, bl
jne 0x100688d2
call fcn.10039710
jmp 0x10068806
mov ebx, dword [esi + 0x1a6c]
movss xmm0, dword [ebp - 0x140]
mov dword [ebp - 0x120], ebx
subss xmm0, dword [ebx + 0x78]
mov ecx, dword [ebx + 0x144]
mov eax, dword [ebx + 0x13c]
bts ecx, eax
mov dword [ebx + 0x144], ecx
movss dword [ebp - 0x140], xmm0
jmp 0x1006893f
movss xmm0, dword [esi + 0x1554]
lea eax, [ebp - 0x54]
push ecx
movss dword [esp], xmm0
push eax
call fcn.1003d300
lea eax, [ebp - 0x78]
push eax
push dword [ebp - 0x10c]
lea eax, [ebp - 0x54]
push eax
call fcn.1003cf90
add esp, 0x14
test al, al
je 0x1006880b
push dword [ebp - 0x10c]
lea eax, [ebp - 0x78]
push eax
call fcn.1003d150
add esp, 8
mov byte [ebp - 0xd9], al
test al, al
je 0x10068965
mov dword [esi + 0x1e60], 1
mov ebx, dword [0x10135110]
xor ecx, ecx
mov eax, dword [ebp - 0x10c]
add ebx, 0x1f78
push eax
push edi
cmp dword [ebx], eax
cmovne ebx, ecx
mov dword [ebp - 0x128], ebx
call fcn.1003aa70
add esp, 8
mov byte [ebp - 0xfb], al
test al, al
je 0x10068a0e
cmp dword [esi + 0x1ce4], edi
jne 0x10068a0e
mov ecx, dword [esi + 0x1cec]
cmp ecx, dword [edi + 0x1a4]
jne 0x10068a0e
mov byte [ebp - 0xda], 1
mov byte [ebp - 0xf9], 0
cmp byte [ebp - 0xd9], 0
je 0x100689d5
cmp byte [esi + 0x3d8], 0
mov byte [ebp - 0xdd], 1
jne 0x100689dc
mov byte [ebp - 0xdd], 0
mov eax, dword [esi + 0x1aa4]
mov ecx, dword [ebp - 0x10c]
cmp eax, ecx
je 0x10068a29
cmp dword [esi + 0x1bdc], ecx
je 0x10068a05
cmp dword [esi + 0x1bd0], ecx
jne 0x10068a29
cmp dword [esi + 0x1bf4], 3
jne 0x10068a29
mov byte [ebp - 0xdb], 1
jmp 0x10068a30
mov byte [ebp - 0xda], 0
test al, al
je 0x100689b5
mov byte [ebp - 0xf9], 1
mov byte [ebp - 0xda], 0
jmp 0x100689bc
mov byte [ebp - 0xdb], 0
cmp byte [ebp - 0xf8], 0
je 0x10068a63
test ebx, ebx
je 0x10068a63
test eax, eax
jne 0x10068a63
mov ecx, dword [ebp - 0x120]
push eax
push str.SCROLLY
call fcn.1003b0f0
cmp dword [esi + 0x1adc], eax
jne 0x10068a63
mov byte [ebp - 0xdc], 1
jmp 0x10068a7e
cmp byte [ebp - 0xf8], 0
mov byte [ebp - 0xdc], 0
je 0x10068a9c
mov byte [ebp - 0xdc], 0
test ebx, ebx
je 0x10068a9c
mov ecx, dword [ebp - 0x120]
push 0
push str.SCROLLY
call fcn.1003b0f0
cmp dword [esi + 0x1aa4], eax
jne 0x10068a9c
mov cl, 1
jmp 0x10068a9e
xor cl, cl
mov eax, dword [ebp - 0x10c]
mov dl, byte [ebp - 0xdb]
mov byte [ebp - 0xe6], cl
mov byte [ebp - 0x101], 0
cmp dword [esi + 0x1aa4], eax
je 0x10068af9
test byte [ebp + 0x1c], 0x10
jne 0x10068ac9
test dl, dl
je 0x10068af9
mov eax, dword [ebp - 0xf8]
test al, al
jne 0x10068aff
mov byte [ebp - 0xec], 1
movss xmm0, dword [0x10115014]
movss dword [ebp - 0x144], xmm0
test ebx, ebx
je 0x10068b1d
xor al, 1
cmp byte [ebx + 0x53], al
je 0x10068b1d
mov al, 1
jmp 0x10068b1f
mov eax, dword [ebp - 0xf8]
mov byte [ebp - 0xec], 0
test al, al
je 0x10068ada
mov esi, dword [ebp - 0x120]
movss xmm0, dword [esi + 0x54]
mov esi, dword [ebp - 0xe4]
jmp 0x10068ae2
xor al, al
cmp byte [ebp - 0xfb], 0
mov byte [ebp - 0xfa], al
mov dword [ebp - 0x13c], 0x63
mov dword [ebp - 0x110], 1
jne 0x10068b6a
cmp byte [ebp - 0xdd], 0
jne 0x10068b6a
cmp byte [ebp - 0xdc], 0
jne 0x10068b6a
test dl, dl
jne 0x10068b6a
mov byte [ebp - 0xdc], dl
test cl, cl
jne 0x10068b71
mov byte [ebp - 0xe5], cl
jmp 0x10068b86
mov byte [ebp - 0xdc], 1
mov ecx, dword [ebp - 0x10c]
mov byte [ebp - 0xe5], 1
cmp dword [esi + 0x1aa4], ecx
jne 0x10068b8e
test al, al
je 0x10068d09
lea ebx, [esi + 0x1f78]
mov esi, dword [ebp - 0x100]
mov dword [ebx + 0xe68], 0xbe99999a
mov dword [ebp - 0x128], ebx
lea ecx, [esi + 1]
nop dword [eax]
mov al, byte [esi]
inc esi
test al, al
jne 0x10068bb0
sub esi, ecx
lea ecx, [ebx + 0x24]
inc esi
push esi
call fcn.10047ad0
push esi
push dword [ebp - 0x100]
push dword [ebx + 0x2c]
call sub.VCRUNTIME140.dll_memcpy
mov esi, dword [ebp + 0x14]
lea ecx, [ebx + 0xc]
add esp, 0xc
mov dword [ebp - 0x68], 0
lea eax, [esi + 1]
push eax
call fcn.1004ff90
push 0
lea ecx, [ebx + 0x18]
call fcn.10047ad0
lea eax, [ebp - 0x68]
mov byte [ebx + 0x30], 0
push eax
push 0
push dword [ebp - 0x100]
push esi
push dword [ebx + 0x14]
call fcn.1003c100
mov dword [ebx + 4], eax
add esp, 0x14
mov eax, dword [ebp - 0x68]
sub eax, dword [ebp - 0x100]
mov dword [ebx + 8], eax
mov eax, dword [ebp - 0x10c]
cmp dword [ebx], eax
jne 0x10068c3f
cmp byte [ebp - 0xfa], 0
jne 0x10068c3f
mov ecx, ebx
call fcn.10067310
jmp 0x10068ccd
mov edx, dword [ebp - 0xf8]
mov dword [ebx], eax
xor eax, eax
mov word [ebx + 0xe5a], ax
mov dword [ebx + 0xe60], eax
mov eax, dword [ebp - 0x13c]
mov word [ebx + 0xe5c], ax
mov al, dl
xor al, 1
mov dword [ebx + 0x38], 0
mov dword [ebx + 0xe64], 0x3e7
mov dword [ebx + 0x40], 0
mov dword [ebx + 0x44], 0
mov dword [ebx + 0x3c], 0
mov word [ebx + 0x51], 1
mov dword [ebx + 0x58], 0
mov byte [ebx + 0x50], 0
mov byte [ebx + 0x53], al
mov byte [ebx + 0x48], 0
mov dword [ebx + 0x4c], 0
test dl, dl
jne 0x10068cd3
mov edx, dword [ebp - 0xec]
cmp byte [ebp - 0xda], 0
movzx edx, dl
cmovne edx, dword [ebp - 0x110]
mov dword [ebp - 0xec], edx
mov edx, dword [ebp - 0xf8]
test dword [ebp + 0x1c], 0x2000
je 0x10068ce0
mov byte [ebx + 0x48], 1
mov esi, dword [ebp - 0xe4]
test dl, dl
jne 0x10068d09
cmp byte [ebp - 0xf9], dl
jne 0x10068d02
cmp byte [ebp - 0xdd], dl
je 0x10068d09
cmp byte [esi + 0xfc], dl
je 0x10068d09
mov byte [ebp - 0xec], 1
mov eax, dword [ebp - 0x10c]
cmp dword [esi + 0x1aa4], eax
mov esi, eax
je 0x10068dc0
cmp byte [ebp - 0xdc], 0
je 0x10068dc0
push edi
push esi
call fcn.10044a90
push edi
push esi
call fcn.10044ee0
push edi
call fcn.1003a8d0
mov edi, dword [ebp - 0xe4]
add esp, 0x14
mov edx, dword [ebp - 0xf8]
mov eax, dword [edi + 0x1ab8]
or eax, 3
mov dword [edi + 0x1ab8], eax
test dl, dl
jne 0x10068d66
test byte [ebp + 0x1c], 0x80
je 0x10068d6f
or eax, 0xc
mov dword [edi + 0x1ab8], eax
mov eax, dword [edi + 0x1ac0]
or dword [edi + 0x1abc], 2
or eax, 0x180
mov ecx, dword [edi + 0x1ac4]
mov dword [edi + 0x1ac0], eax
mov dword [edi + 0x1ac4], ecx
test dl, dl
je 0x10068da6
or eax, 0x60
mov dword [edi + 0x1ac4], ecx
mov dword [edi + 0x1ac0], eax
test dword [ebp + 0x1c], 0x440
je 0x10068dc6
or eax, 1
mov dword [edi + 0x1ac4], ecx
mov dword [edi + 0x1ac0], eax
jmp 0x10068dc6
mov edi, dword [ebp - 0xe4]
cmp dword [edi + 0x1aa4], esi
jne 0x10068e05
test ebx, ebx
jne 0x10068dd7
call fcn.100389f0
cmp dword [edi + 0x1aa4], esi
jne 0x10068e05
cmp byte [edi + 0x3d8], 0
je 0x10068e12
cmp byte [ebp - 0xe5], 0
jne 0x10068e12
cmp byte [ebp - 0xdc], 0
jne 0x10068e12
mov byte [ebp - 0x101], 1
mov cl, 1
jmp 0x10068e18
test ebx, ebx
je 0x10068e16
cmp byte [ebp - 0xe6], 0
je 0x10068e16
mov cl, 1
jmp 0x10068e18
xor cl, cl
mov byte [ebp - 0xed], cl
test ebx, ebx
je 0x10068e35
mov eax, dword [ebx + 0x40]
cmp eax, dword [ebx + 0x44]
je 0x10068e35
test cl, cl
je 0x10068e35
mov edx, 1
jmp 0x10068e37
xor dl, dl
mov eax, dword [ebp - 0x108]
mov dword [ebp - 0x12c], edx
mov byte [ebp - 0xfb], dl
mov byte [ebp - 0xf9], 0
mov byte [ebp - 0xfa], 0
test al, al
je 0x10068ed5
test ebx, ebx
je 0x10068ed5
test cl, cl
jne 0x10068e67
test dl, dl
je 0x10068edd
mov eax, dword [ebp + 0x14]
lea ecx, [ebx + 0xc]
inc eax
mov dword [ebp - 0x68], 0
push eax
call fcn.1004ff90
lea eax, [ebp - 0x68]
push eax
push 0
push dword [ebp - 0x100]
push dword [ebx + 0xc]
push dword [ebx + 0x14]
call fcn.1003c100
mov dword [ebx + 4], eax
add esp, 0x14
mov eax, dword [ebp - 0x68]
mov ecx, ebx
sub eax, dword [ebp - 0x100]
mov dword [ebx + 8], eax
call fcn.10067310
mov ecx, dword [ebx + 0x40]
xor edx, edx
cmp ecx, dword [ebx + 0x44]
movzx eax, byte [ebp - 0xfb]
mov esi, dword [ebp - 0x10c]
cmovne edx, eax
mov cl, byte [ebp - 0xed]
mov eax, dword [ebp - 0x108]
mov dword [ebp - 0x12c], edx
test cl, cl
jne 0x10068ee5
test dl, dl
jne 0x10068ee5
cmp dword [edi + 0x1aa4], esi
jne 0x10068ef6
test al, al
jne 0x10068ef6
test ebx, ebx
je 0x10068ef6
cmp byte [ebx + 0x30], al
je 0x10068ef6
mov al, 1
jmp 0x10068ef8
xor al, al
cmp dword [ebp - 0x150], 0
mov byte [ebp - 0xfb], al
je 0x10068f1f
test al, al
je 0x10068f10
mov eax, dword [ebx + 0x20]
jmp 0x10068f16
mov eax, dword [ebp - 0x100]
cmp byte [eax], 0
jne 0x10068f1f
mov al, 1
jmp 0x10068f21
xor al, al
cmp byte [ebp - 0x148], 0
mov byte [ebp - 0xdd], al
je 0x10068f97
test al, al
jne 0x10068f97
mov ecx, dword [edi + 0x192c]
push 0x2a
call fcn.1004ad50
mov ecx, dword [edi + 0x192c]
lea esi, [edi + 0x2df4]
mov edx, eax
push esi
mov ecx, dword [ecx + 0x10]
mov dword [esi + 0x10], ecx
mov ecx, dword [edi + 0x192c]
mov ecx, dword [ecx + 0x40]
mov dword [esi + 0x40], ecx
mov ecx, dword [edi + 0x192c]
mov eax, dword [ecx + 0x44]
mov dword [esi + 0x44], eax
mov eax, dword [edi + 0x192c]
mov eax, dword [eax + 0x48]
mov dword [esi + 0x48], eax
mov eax, dword [edi + 0x192c]
mov eax, dword [eax + 0x30]
mov dword [esi + 0x30], eax
mov dword [esi + 0x2c], edx
mov eax, dword [edx + 4]
mov dword [esi + 0xc], eax
call fcn.10041e20
add esp, 4
mov ecx, dword [ebp - 0x10c]
movss xmm0, dword [0x100cf714]
mov dword [ebp - 0x158], 0
cmp dword [edi + 0x1aa4], ecx
jne 0x10069382
mov eax, dword [ebx + 8]
mov edx, dword [ebp + 0x1c]
mov esi, dword [ebp - 0x11c]
mov dword [ebp - 0x158], eax
mov eax, dword [ebp + 0x14]
mov dword [ebx + 0x34], eax
mov eax, dword [ebp - 0x130]
mov dword [ebx + 0xe78], eax
mov byte [ebx + 0xe6e], 0
mov dword [ebx + 0xe70], edx
mov dword [ebx + 0xe74], esi
cmp byte [edi + 0xec], 0
mov dword [edi + 0x3130], 1
sete al
cmp byte [ebp - 0xf8], 0
mov byte [edi + 0x1ab1], al
movss xmm7, dword [edi + 0xe4]
subss xmm7, dword [ebp - 0x78]
subss xmm7, dword [edi + 0x1550]
addss xmm7, dword [ebx + 0x38]
je 0x1006904f
mov eax, dword [ebp - 0x120]
movss xmm1, dword [edi + 0xe8]
subss xmm1, dword [eax + 0xd4]
subss xmm1, dword [edi + 0x1554]
jmp 0x1006905b
movss xmm1, dword [edi + 0x1930]
mulss xmm1, xmm0
cmp byte [ebp - 0xec], 0
mov al, byte [edi + 0xb1]
mov byte [ebp - 0xda], al
jne 0x100691db
mov cl, byte [ebp - 0xd9]
test cl, cl
je 0x10069092
test al, al
jne 0x1006910a
cmp byte [edi + 0x3dd], al
jne 0x100691db
cmp byte [edi + 0x3d8], 0
je 0x10069137
cmp byte [ebx + 0xe6d], 0
jne 0x10069137
test cl, cl
je 0x100691fc
cmp byte [ebx + 0x53], 0
je 0x100690d4
push 0
lea eax, [ebp - 0x90]
push ebx
push eax
call fcn.1006c040
movss xmm1, dword [ebp - 0x84]
add esp, 0xc
sub esp, 8
movss dword [esp + 4], xmm1
movss dword [esp], xmm7
push ebx
call fcn.10070cf0
mov edx, dword [ebp + 0x1c]
add esp, 0xc
mov dword [ebx + 0x3c], eax
mov dword [ebx + 0x40], eax
mov dword [ebx + 0x44], eax
mov byte [ebx + 0x52], 0
mov dword [ebx + 0xe68], 0xbe99999a
jmp 0x100691f6
cmp byte [edi + 0x3dd], 0
je 0x10069092
push 0x20000c
mov ecx, ebx
call fcn.1006b840
push 0x60000d
mov ecx, ebx
call fcn.1006b840
mov edx, dword [ebp + 0x1c]
jmp 0x100691f6
cmp byte [edi + 0xec], 0
je 0x100691fc
cmp byte [ebx + 0xe6d], 0
jne 0x10069205
movss xmm0, dword [edi + 0x374]
xorps xmm2, xmm2
ucomiss xmm0, xmm2
lahf
test ah, 0x44
jp 0x1006917a
movss xmm0, dword [edi + 0x378]
ucomiss xmm0, xmm2
lahf
test ah, 0x44
jnp 0x100691fc
cmp byte [ebx + 0x53], 0
je 0x1006919a
push 0
lea eax, [ebp - 0x90]
push ebx
push eax
call fcn.1006c040
movss xmm1, dword [ebp - 0x84]
add esp, 0xc
mov eax, dword [ebx + 0x40]
cmp eax, dword [ebx + 0x44]
jne 0x100691a8
mov eax, dword [ebx + 0x3c]
mov dword [ebx + 0x40], eax
sub esp, 8
movss dword [esp + 4], xmm1
movss dword [esp], xmm7
push ebx
call fcn.10070cf0
mov edx, dword [ebp + 0x1c]
add esp, 0xc
mov dword [ebx + 0x44], eax
mov dword [ebx + 0x3c], eax
mov dword [ebx + 0xe68], 0xbe99999a
mov byte [ebx + 0xe6c], 1
jmp 0x100691f6
mov eax, dword [ebx + 4]
mov dword [ebx + 0x40], 0
mov dword [ebx + 0x44], eax
mov dword [ebx + 0x3c], eax
mov byte [ebx + 0x52], 0
mov byte [ebx + 0xe6d], 1
mov al, byte [ebp - 0xda]
cmp byte [ebx + 0xe6d], 0
je 0x10069215
cmp byte [edi + 0xec], 0
jne 0x10069215
mov byte [ebx + 0xe6d], 0
cmp byte [edi + 0xfc], 0
je 0x10069227
cmp byte [edi + 0xfe], 0
je 0x10069234
test al, al
je 0x1006923d
cmp byte [edi + 0xff], 0
je 0x1006923d
mov byte [ebp - 0xd9], 1
jmp 0x10069244
mov byte [ebp - 0xd9], 0
test edx, 0x400
je 0x10069418
mov eax, dword [0x10135110]
mov eax, dword [eax + 0x34]
test eax, eax
js 0x10069418
push 1
push eax
call fcn.1003cbe0
mov ecx, dword [ebp - 0x108]
add esp, 8
test al, al
mov al, byte [ebp - 0xd9]
je 0x100692e7
test al, al
jne 0x100692e7
cmp byte [edi + 0xfd], al
jne 0x100692e7
test cl, cl
jne 0x100692e7
mov ecx, dword [edi + 0x1510]
mov eax, dword [edi + 0x1508]
lea edx, [ecx + eax*2]
cmp ecx, edx
jae 0x100692b0
nop
mov ax, word [ecx]
add ecx, 2
cmp ax, 9
je 0x100692db
cmp ecx, edx
jb 0x100692a0
push dword [ebp - 0x130]
lea eax, [ebp - 0x68]
mov dword [ebp - 0x68], 9
push esi
push dword [ebp + 0x1c]
push eax
call fcn.1006b4c0
add esp, 0x10
test al, al
je 0x100692db
push dword [ebp - 0x68]
mov ecx, ebx
call fcn.1006b840
mov ecx, dword [ebp - 0x108]
mov al, byte [ebp - 0xd9]
mov edx, dword [ebp + 0x1c]
cmp dword [edi + 0x1508], 0
jle 0x10069382
test al, al
jne 0x10069375
test cl, cl
jne 0x10069375
cmp byte [ebp - 0xdb], cl
jne 0x10069375
xor esi, esi
nop dword [eax]
mov eax, dword [edi + 0x1510]
movzx eax, word [eax + esi*2]
mov dword [ebp - 0x68], eax
cmp eax, 9
jne 0x1006932b
cmp byte [edi + 0xfd], 0
jne 0x10069369
push dword [ebp - 0x130]
lea eax, [ebp - 0x68]
push dword [ebp - 0x11c]
push edx
push eax
call fcn.1006b4c0
add esp, 0x10
test al, al
je 0x10069369
push dword [ebp - 0x68]
lea eax, [ebx + 0x3c]
push eax
push ebx
call fcn.10071390
add esp, 0xc
mov byte [ebx + 0xe6c], 1
mov dword [ebx + 0xe68], 0xbe99999a
mov edx, dword [ebp + 0x1c]
inc esi
cmp esi, dword [edi + 0x1508]
jl 0x10069310
push 0
lea ecx, [edi + 0x1508]
call fcn.1004ff90
mov eax, dword [ebp - 0x10c]
xor cl, cl
mov byte [ebp - 0xd9], cl
cmp dword [edi + 0x1aa4], eax
jne 0x1006a7e0
cmp byte [edi + 0x1ab0], cl
jne 0x1006a2c8
cmp byte [ebp - 0x101], cl
jne 0x1006a2c8
movss xmm0, dword [ebp - 0x14c]
subss xmm0, dword [edi + 0x1554]
mov ecx, dword [ebp - 0x110]
divss xmm0, dword [edi + 0x1930]
cvttss2si eax, xmm0
cmp eax, 1
cmovge ecx, eax
xor esi, esi
mov dword [ebx + 0x4c], ecx
mov eax, 0x400000
cmp byte [edi + 0xfd], 0
mov dword [ebp - 0x110], ecx
cmovne esi, eax
mov al, byte [edi + 0xb1]
mov byte [ebp - 0x123], al
test al, al
je 0x10069429
cmp dword [edi + 0x37c], 0xa
jne 0x10069429
mov byte [ebp - 0xe6], 1
jmp 0x10069434
mov al, byte [ebp - 0xd9]
mov ecx, dword [ebp - 0x108]
jmp 0x100692ea
mov byte [ebp - 0xe6], 0
test al, al
je 0x1006945f
cmp byte [edi + 0xff], 0
mov al, byte [edi + 0xfe]
mov byte [ebp - 0xdc], al
je 0x10069472
cmp byte [edi + 0xfc], 0
jne 0x10069472
test al, al
jne 0x10069472
mov byte [ebp - 0xda], 1
jmp 0x10069479
mov al, byte [edi + 0xfc]
mov byte [ebp - 0xdc], al
mov byte [ebp - 0xe6], 0
mov byte [ebp - 0xda], 0
mov eax, dword [ebp - 0xe4]
mov edi, dword [edi + 0x37c]
cmp byte [eax + 0xb1], 0
je 0x10069493
cmp edi, 8
jmp 0x10069496
cmp edi, 1
sete al
mov byte [ebp - 0xdb], al
test al, al
je 0x100694b3
push 1
push 0x13
call fcn.1006b790
add esp, 8
test al, al
jne 0x100694c8
cmp edi, 2
jne 0x100694f4
push 1
push 0xa
call fcn.1006b790
add esp, 8
test al, al
je 0x100694f4
cmp byte [ebp - 0x108], 0
jne 0x100694f4
cmp byte [ebp - 0x148], 0
jne 0x100694f4
cmp byte [ebp - 0xf8], 0
je 0x100694eb
mov eax, dword [ebx + 0x40]
cmp eax, dword [ebx + 0x44]
je 0x100694f4
mov byte [ebp - 0xe5], 1
jmp 0x100694fb
mov byte [ebp - 0xe5], 0
cmp byte [ebp - 0xdb], 0
je 0x10069514
push 1
push 0x11
call fcn.1006b790
add esp, 8
test al, al
jne 0x10069528
cmp edi, 1
jne 0x1006954b
push edi
push 9
call fcn.1006b790
add esp, 8
test al, al
je 0x1006954b
cmp byte [ebp - 0x148], 0
jne 0x1006954b
cmp byte [ebp - 0xf8], 0
je 0x10069542
mov eax, dword [ebx + 0x40]
cmp eax, dword [ebx + 0x44]
je 0x1006954b
mov byte [ebp - 0x121], 1
jmp 0x10069552
mov byte [ebp - 0x121], 0
cmp byte [ebp - 0xdb], 0
je 0x1006956b
push 1
push 0x12
call fcn.1006b790
add esp, 8
test al, al
jne 0x10069580
cmp edi, 2
jne 0x10069590
push 1
push 9
call fcn.1006b790
add esp, 8
test al, al
je 0x10069590
cmp byte [ebp - 0x108], 0
mov byte [ebp - 0x122], 1
je 0x10069597
mov byte [ebp - 0x122], 0
cmp byte [ebp - 0xdb], 0
je 0x100695cb
push 1
push 0x15
call fcn.1006b790
add esp, 8
test al, al
je 0x100695cb
cmp byte [ebp - 0x108], 0
jne 0x100695cb
cmp byte [ebp - 0xf4], 0
je 0x100695cb
mov byte [ebp - 0x115], 1
jmp 0x100695db
xor al, al
mov byte [ebp - 0x115], al
cmp byte [ebp - 0xdb], al
je 0x100695eb
push 1
push 0x14
call fcn.1006b790
add esp, 8
test al, al
jne 0x10069604
cmp byte [ebp - 0xe6], 0
je 0x1006961d
push 1
push 0x15
call fcn.1006b790
add esp, 8
test al, al
je 0x1006961d
cmp byte [ebp - 0x108], 0
jne 0x1006961d
cmp byte [ebp - 0xf4], 0
mov byte [ebp - 0xe6], 1
jne 0x10069624
mov byte [ebp - 0xe6], 0
push 1
push 1
call fcn.1006b790
add esp, 8
test al, al
je 0x1006968e
cmp byte [ebp - 0xda], 0
je 0x10069644
mov eax, 0x200004
jmp 0x10069658
mov eax, 0x200000
mov ecx, 0x20000c
cmp byte [ebp - 0xdc], 0
cmovne eax, ecx
or eax, esi
push eax
mov ecx, ebx
call fcn.1006b840
mov edi, dword [ebp - 0xe4]
mov cl, byte [ebp - 0xd9]
mov eax, dword [ebx + 0x40]
cmp eax, dword [ebx + 0x44]
je 0x1006a2b2
cmp byte [ebp - 0xed], 0
je 0x1006a2b2
mov al, 1
jmp 0x1006a2b4
push 1
push 2
call fcn.1006b790
add esp, 8
test al, al
je 0x100696b8
cmp byte [ebp - 0xda], 0
je 0x100696ae
mov eax, 0x200005
jmp 0x10069658
mov eax, 0x200001
lea ecx, [eax + 0xc]
jmp 0x1006964e
push 1
push 3
call fcn.1006b790
add esp, 8
test al, al
je 0x1006972c
cmp byte [ebp - 0xf8], 0
je 0x1006972c
mov edi, dword [ebp - 0xe4]
cmp byte [edi + 0xfc], 0
je 0x1006970f
mov esi, dword [ebp - 0x120]
push ecx
movss xmm0, dword [esi + 0x54]
subss xmm0, dword [edi + 0x1930]
maxss xmm0, dword [0x100d0b40]
movss dword [esp], xmm0
push esi
call fcn.10045450
add esp, 8
jmp 0x10069668
movzx eax, byte [ebp - 0xda]
mov ecx, ebx
lea eax, [eax*4 + 0x200002]
or eax, esi
push eax
call fcn.1006b840
jmp 0x10069668
push 1
push 4
call fcn.1006b790
add esp, 8
test al, al
je 0x100697b5
cmp byte [ebp - 0xf8], 0
je 0x100697b5
mov edi, dword [ebp - 0xe4]
cmp byte [edi + 0xfc], 0
je 0x10069798
mov esi, dword [ebp - 0x120]
movss xmm0, dword [edi + 0x1930]
addss xmm0, dword [esi + 0x54]
movss dword [ebp - 0x68], xmm0
call fcn.1003b700
movss xmm0, dword [ebp - 0x68]
fstp dword [ebp - 0xf4]
minss xmm0, dword [ebp - 0xf4]
push ecx
movss dword [esp], xmm0
push esi
call fcn.10045450
add esp, 8
jmp 0x10069668
movzx eax, byte [ebp - 0xda]
mov ecx, ebx
lea eax, [eax*4 + 0x200003]
or eax, esi
push eax
call fcn.1006b840
jmp 0x10069668
push 1
push 5
call fcn.1006b790
add esp, 8
test al, al
je 0x1006980e
cmp byte [ebp - 0xf8], 0
je 0x1006980e
or esi, 0x20000e
mov ecx, ebx
push esi
call fcn.1006b840
movd xmm0, dword [ebp - 0x110]
mov edi, dword [ebp - 0xe4]
movss xmm1, dword [ebp - 0x144]
cvtdq2ps xmm0, xmm0
mulss xmm0, dword [edi + 0x1930]
subss xmm1, xmm0
movss dword [ebp - 0x144], xmm1
jmp 0x10069668
push 1
push 6
call fcn.1006b790
add esp, 8
test al, al
je 0x10069863
cmp byte [ebp - 0xf8], 0
je 0x10069863
or esi, 0x20000f
mov ecx, ebx
push esi
call fcn.1006b840
movd xmm0, dword [ebp - 0x110]
mov edi, dword [ebp - 0xe4]
cvtdq2ps xmm0, xmm0
mulss xmm0, dword [edi + 0x1930]
addss xmm0, dword [ebp - 0x144]
movss dword [ebp - 0x144], xmm0
jmp 0x10069668
push 1
push 7
call fcn.1006b790
add esp, 8
test al, al
je 0x1006989d
mov eax, esi
or eax, 0x200006
or esi, 0x200004
mov edi, dword [ebp - 0xe4]
mov ecx, ebx
cmp byte [edi + 0xfc], 0
cmovne esi, eax
push esi
call fcn.1006b840
jmp 0x10069668
push 1
push 8
call fcn.1006b790
add esp, 8
test al, al
je 0x100698bc
mov eax, esi
or eax, 0x200007
or esi, 0x200005
jmp 0x10069880
push 1
push 0xa
call fcn.1006b790
add esp, 8
test al, al
je 0x100698e1
cmp byte [ebp - 0x108], 0
jne 0x100698e1
or esi, 0x200008
push esi
jmp 0x1006965b
push 1
push 0xb
call fcn.1006b790
add esp, 8
test al, al
je 0x10069981
cmp byte [ebp - 0x108], 0
jne 0x10069981
mov eax, dword [ebx + 0x40]
cmp eax, dword [ebx + 0x44]
jne 0x1006991f
cmp byte [ebp - 0xdc], 0
je 0x10069938
push 0x60000c
mov ecx, ebx
call fcn.1006b840
mov edi, dword [ebp - 0xe4]
or esi, 0x200009
mov ecx, ebx
push esi
call fcn.1006b840
jmp 0x10069668
cmp byte [ebp - 0x123], 0
je 0x1006991f
mov edi, dword [ebp - 0xe4]
cmp byte [edi + 0xff], 0
je 0x10069925
cmp byte [edi + 0xfe], 0
jne 0x10069925
cmp byte [edi + 0xfc], 0
jne 0x10069925
push 0x600004
mov ecx, ebx
call fcn.1006b840
or esi, 0x200009
mov ecx, ebx
push esi
call fcn.1006b840
jmp 0x10069668
push 1
push 0xd
call fcn.1006b790
add esp, 8
test al, al
jne 0x1006a230
push 1
push 0xf
call fcn.1006b790
add esp, 8
test al, al
jne 0x1006a230
push 1
push 0xe
call fcn.1006b790
add esp, 8
test al, al
je 0x100699cc
mov edi, dword [ebp - 0xe4]
mov cl, 1
mov byte [ebp - 0x101], cl
jmp 0x1006966e
mov al, byte [ebp - 0x115]
test al, al
jne 0x1006a20f
cmp byte [ebp - 0xe6], al
jne 0x1006a20f
cmp byte [ebp - 0xdb], al
je 0x10069a1e
push 1
push 0x10
call fcn.1006b790
add esp, 8
test al, al
je 0x10069a1e
mov eax, dword [ebx + 4]
mov dword [ebx + 0x40], 0
mov dword [ebx + 0x44], eax
mov dword [ebx + 0x3c], eax
mov byte [ebx + 0x52], 0
mov byte [ebx + 0xe6c], 1
jmp 0x10069662
mov al, byte [ebp - 0xe5]
test al, al
jne 0x10069ecf
cmp byte [ebp - 0x121], al
jne 0x10069ecf
cmp byte [ebp - 0x122], al
je 0x10069662
call fcn.1003ab70
mov esi, eax
test esi, esi
je 0x10069662
mov ecx, esi
lea edx, [ecx + 1]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x10069a58
sub ecx, edx
lea eax, [ecx*2 + 2]
push eax
call fcn.1003da80
xor edi, edi
mov dword [ebp - 0xf4], eax
add esp, 4
mov dword [ebp - 0x14], edi
cmp byte [esi], 0
je 0x10069ad6
mov ebx, eax
push 0
lea eax, [ebp - 0x14]
push esi
push eax
call fcn.1003bd90
add esp, 0xc
add esi, eax
cmp dword [ebp - 0x14], 0
je 0x10069ac7
push dword [ebp - 0x130]
lea eax, [ebp - 0x14]
push dword [ebp - 0x11c]
push dword [ebp + 0x1c]
push eax
call fcn.1006b4c0
add esp, 0x10
test al, al
je 0x10069ac2
mov ax, word [ebp - 0x14]
mov word [ebx + edi*2], ax
inc edi
cmp byte [esi], 0
jne 0x10069a83
mov ebx, dword [ebp - 0x128]
mov eax, dword [ebp - 0xf4]
mov dword [ebp - 0x14], edi
xor ecx, ecx
mov word [eax + edi*2], cx
test edi, edi
jle 0x10069ec1
mov ecx, dword [ebx + 0x44]
lea esi, [ebx + 0x3c]
mov edi, dword [esi + 4]
mov eax, dword [ebx + 4]
mov dword [ebp - 0xec], ecx
mov dword [ebp - 0x114], edi
cmp edi, ecx
je 0x10069b4e
mov edx, edi
cmp edi, eax
jle 0x10069b0b
mov dword [esi + 4], eax
mov edx, eax
mov edi, ecx
mov dword [ebp - 0x110], edi
cmp ecx, eax
jle 0x10069b22
mov dword [esi + 8], eax
mov edi, eax
mov dword [ebp - 0x110], eax
mov ecx, edi
mov dword [ebp - 0xec], edi
mov edi, edx
mov dword [ebp - 0x114], edi
cmp edx, dword [ebp - 0x110]
jne 0x10069b4e
mov ecx, dword [ebp - 0x110]
mov dword [esi], edx
mov dword [ebp - 0xec], ecx
mov dword [ebp - 0x114], edx
mov edx, dword [esi]
mov dword [ebp - 0x110], edx
cmp edx, eax
jle 0x10069b62
mov dword [esi], eax
mov dword [ebp - 0x110], eax
mov eax, dword [ebx + 4]
cmp edi, ecx
je 0x10069bbd
mov edx, edi
cmp edi, eax
jle 0x10069b74
mov dword [esi + 4], eax
mov edx, eax
mov edi, ecx
mov dword [ebp - 0x68], edi
cmp ecx, eax
jle 0x10069b85
mov dword [esi + 8], eax
mov edi, eax
mov dword [ebp - 0x68], eax
mov ecx, dword [ebp - 0x110]
mov dword [ebp - 0x110], ecx
mov ecx, edi
mov edi, edx
mov dword [ebp - 0xec], ecx
mov dword [ebp - 0x114], edi
cmp edx, dword [ebp - 0x68]
jne 0x10069bbd
mov ecx, dword [ebp - 0x68]
mov dword [esi], edx
mov dword [ebp - 0x110], edx
mov dword [ebp - 0xec], ecx
mov dword [ebp - 0x114], edi
cmp dword [ebp - 0x110], eax
jle 0x10069bc7
mov dword [esi], eax
cmp edi, ecx
je 0x10069dfa
mov eax, dword [ebp - 0x13c]
add esi, 0x20
mov dword [esi + 0xe08], 0x3e7
mov word [esi + 0xe00], ax
cmp edi, ecx
jge 0x10069d00
sub ecx, edi
cmp word [esi + 0xdfe], 0x63
mov dword [ebp - 0xec], ecx
jne 0x10069c12
push esi
call fcn.10071170
mov ecx, dword [ebp - 0xec]
add esp, 4
cmp ecx, 0x3e7
jle 0x10069c2e
xor eax, eax
mov word [esi + 0xdfe], ax
mov dword [esi + 0xe04], eax
jmp 0x10069cea
mov eax, dword [esi + 0xe04]
add eax, ecx
cmp eax, 0x3e7
jle 0x10069c67
mov ebx, dword [ebp - 0xec]
push esi
call fcn.10071170
mov eax, dword [esi + 0xe04]
add esp, 4
add eax, ebx
cmp eax, 0x3e7
jg 0x10069c43
mov ebx, dword [ebp - 0x128]
mov ecx, dword [ebp - 0xec]
movzx eax, word [esi + 0xdfe]
movsx edx, ax
shl edx, 4
lea eax, [eax + 1]
mov word [esi + 0xdfe], ax
add edx, esi
je 0x10069cea
mov dword [edx], edi
mov dword [edx + 4], ecx
mov dword [edx + 8], 0
test ecx, ecx
jne 0x10069c9b
mov dword [edx + 0xc], 0xffffffff
jmp 0x10069cea
mov eax, dword [esi + 0xe04]
mov dword [edx + 0xc], eax
add dword [esi + 0xe04], ecx
mov eax, dword [edx + 0xc]
add eax, 0x318
lea eax, [esi + eax*2]
mov dword [ebp - 0x68], eax
test eax, eax
je 0x10069cea
xor edx, edx
test ecx, ecx
jle 0x10069cea
lea esi, [edi + edi]
mov edi, eax
nop word [eax + eax]
mov eax, dword [ebx + 0x14]
lea esi, [esi + 2]
mov ax, word [esi + eax - 2]
mov word [edi + edx*2], ax
inc edx
cmp edx, ecx
jl 0x10069cd0
mov edi, dword [ebp - 0x114]
push ecx
push edi
push ebx
call fcn.1006bec0
mov eax, dword [ebx + 0x40]
lea esi, [ebx + 0x3c]
mov dword [esi + 8], eax
jmp 0x10069deb
sub edi, ecx
cmp word [esi + 0xdfe], 0x63
jne 0x10069d15
push esi
call fcn.10071170
add esp, 4
cmp edi, 0x3e7
jle 0x10069d31
xor eax, eax
mov word [esi + 0xdfe], ax
mov dword [esi + 0xe04], eax
jmp 0x10069dd4
mov eax, dword [esi + 0xe04]
add eax, edi
cmp eax, 0x3e7
jle 0x10069d58
push esi
call fcn.10071170
mov eax, dword [esi + 0xe04]
add esp, 4
add eax, edi
cmp eax, 0x3e7
jg 0x10069d40
movzx eax, word [esi + 0xdfe]
movsx edx, ax
shl edx, 4
lea eax, [eax + 1]
mov word [esi + 0xdfe], ax
add edx, esi
je 0x10069dd4
mov ecx, dword [ebp - 0xec]
mov dword [edx], ecx
mov dword [edx + 4], edi
mov dword [edx + 8], 0
test edi, edi
jne 0x10069d92
mov dword [edx + 0xc], 0xffffffff
jmp 0x10069dda
mov eax, dword [esi + 0xe04]
mov dword [edx + 0xc], eax
add dword [esi + 0xe04], edi
mov eax, dword [edx + 0xc]
add eax, 0x318
lea eax, [esi + eax*2]
mov dword [ebp - 0x68], eax
test eax, eax
je 0x10069dda
xor edx, edx
test edi, edi
jle 0x10069dda
lea esi, [ecx + ecx]
mov ecx, eax
nop
mov eax, dword [ebx + 0x14]
lea esi, [esi + 2]
mov ax, word [esi + eax - 2]
mov word [ecx + edx*2], ax
inc edx
cmp edx, edi
jl 0x10069dc0
mov ecx, dword [ebp - 0xec]
push edi
push ecx
push ebx
call fcn.1006bec0
mov eax, dword [ebx + 0x44]
lea esi, [ebx + 0x3c]
mov dword [esi + 4], eax
mov ecx, esi
add esp, 0xc
mov byte [ecx + 0x16], 0
mov dword [esi], eax
mov byte [ecx + 0x16], 0
push dword [ebp - 0x14]
push dword [ebp - 0xf4]
push dword [esi]
push ebx
call fcn.1006bf30
add esp, 0x10
test al, al
je 0x10069ea0
mov edi, dword [esi]
add esi, 0x20
mov eax, dword [ebp - 0x13c]
cmp word [esi + 0xdfe], 0x63
mov word [esi + 0xe00], ax
mov dword [esi + 0xe08], 0x3e7
jne 0x10069e45
push esi
call fcn.10071170
add esp, 4
cmp dword [esi + 0xe04], 0x3e7
jle 0x10069e66
push esi
call fcn.10071170
add esp, 4
cmp dword [esi + 0xe04], 0x3e7
jg 0x10069e51
movzx eax, word [esi + 0xdfe]
movsx ecx, ax
shl ecx, 4
lea eax, [eax + 1]
mov word [esi + 0xdfe], ax
mov eax, dword [ebp - 0x14]
add ecx, esi
je 0x10069e97
mov dword [ecx], edi
mov dword [ecx + 4], 0
mov dword [ecx + 8], eax
mov dword [ecx + 0xc], 0xffffffff
add dword [ebx + 0x3c], eax
mov byte [ebx + 0x52], 0
jmp 0x10069eb4
movzx eax, word [esi + 0xe1e]
test ax, ax
je 0x10069eb4
dec eax
mov word [esi + 0xe1e], ax
mov eax, dword [ebp - 0xf4]
mov byte [ebx + 0xe6c], 1
push eax
call fcn.1003dab0
add esp, 4
jmp 0x10069662
mov edi, dword [ebp - 0xe4]
cmp dword [edi + 0xd4], 0
je 0x10069f51
mov eax, dword [ebx + 0x44]
mov ecx, dword [ebx + 0x40]
cmp ecx, eax
je 0x10069ef2
mov edx, eax
cmovge eax, ecx
cmovl edx, ecx
jmp 0x10069ef7
mov eax, dword [ebx + 4]
xor edx, edx
mov ecx, dword [ebx + 0x14]
mov dword [ebp - 0x68], eax
mov dword [ebp - 0xf4], edx
lea eax, [ecx + eax*2]
push eax
lea eax, [ecx + edx*2]
push eax
call fcn.1003c0a0
lea esi, [eax + 1]
push esi
call fcn.1003da80
mov edx, dword [ebx + 0x14]
mov edi, eax
mov eax, dword [ebp - 0x68]
lea ecx, [edx + eax*2]
mov eax, dword [ebp - 0xf4]
push ecx
lea ecx, [edx + eax*2]
push ecx
push esi
push edi
call fcn.1003c2e0
push edi
call fcn.10044b60
push edi
call fcn.1003dab0
mov al, byte [ebp - 0xe5]
add esp, 0x24
mov edi, dword [ebp - 0xe4]
test al, al
je 0x10069668
mov eax, dword [ebx + 0x40]
cmp eax, dword [ebx + 0x44]
jne 0x10069f75
mov eax, dword [ebx + 4]
mov dword [ebx + 0x40], 0
mov dword [ebx + 0x44], eax
mov dword [ebx + 0x3c], eax
mov byte [ebx + 0x52], 0
lea edx, [ebx + 0x3c]
mov byte [ebx + 0xe6c], 1
mov ecx, dword [edx + 8]
mov edi, dword [edx + 4]
mov dword [ebp - 0xec], ecx
mov dword [ebp - 0x68], edi
cmp edi, ecx
je 0x10069662
mov eax, dword [ebx + 4]
cmp edi, eax
jle 0x10069fa5
mov dword [edx + 4], eax
mov edi, eax
mov dword [ebp - 0x68], eax
cmp ecx, eax
jle 0x10069fb4
mov dword [edx + 8], eax
mov ecx, eax
mov dword [ebp - 0xec], eax
cmp edi, ecx
jne 0x10069fba
mov dword [edx], edi
cmp dword [edx], eax
jle 0x10069fc0
mov dword [edx], eax
cmp edi, ecx
je 0x1006a206
mov eax, dword [ebp - 0x13c]
lea esi, [edx + 0x20]
mov dword [esi + 0xe08], 0x3e7
mov word [esi + 0xe00], ax
jge 0x1006a10c
sub ecx, edi
cmp word [esi + 0xdfe], 0x63
mov dword [ebp - 0xec], ecx
jne 0x1006a009
push esi
call fcn.10071170
mov ecx, dword [ebp - 0xec]
add esp, 4
cmp ecx, 0x3e7
jle 0x1006a025
xor eax, eax
mov word [esi + 0xdfe], ax
mov dword [esi + 0xe04], eax
jmp 0x1006a0e7
mov eax, dword [esi + 0xe04]
add eax, ecx
cmp eax, 0x3e7
jle 0x1006a064
mov ebx, dword [ebp - 0xec]
nop word [eax + eax]
push esi
call fcn.10071170
mov eax, dword [esi + 0xe04]
add esp, 4
add eax, ebx
cmp eax, 0x3e7
jg 0x1006a040
mov ebx, dword [ebp - 0x128]
mov ecx, dword [ebp - 0xec]
movzx eax, word [esi + 0xdfe]
movsx edx, ax
shl edx, 4
lea eax, [eax + 1]
mov word [esi + 0xdfe], ax
add edx, esi
je 0x1006a0e7
mov dword [edx], edi
mov dword [edx + 4], ecx
mov dword [edx + 8], 0
test ecx, ecx
jne 0x1006a098
mov dword [edx + 0xc], 0xffffffff
jmp 0x1006a0e7
mov eax, dword [esi + 0xe04]
mov dword [edx + 0xc], eax
add dword [esi + 0xe04], ecx
mov eax, dword [edx + 0xc]
add eax, 0x318
lea eax, [esi + eax*2]
mov dword [ebp - 0xf4], eax
test eax, eax
je 0x1006a0e7
xor edx, edx
test ecx, ecx
jle 0x1006a0e7
lea esi, [edi + edi]
mov edi, eax
nop word [eax + eax]
mov eax, dword [ebx + 0x14]
lea esi, [esi + 2]
mov ax, word [esi + eax - 2]
mov word [edi + edx*2], ax
inc edx
cmp edx, ecx
jl 0x1006a0d0
mov edi, dword [ebp - 0x68]
push ecx
push edi
push ebx
call fcn.1006bec0
mov eax, dword [ebx + 0x40]
lea edx, [ebx + 0x3c]
mov ecx, edx
mov dword [edx + 8], eax
add esp, 0xc
mov byte [ecx + 0x16], 0
mov dword [edx], eax
mov byte [edx + 0x16], 0
jmp 0x10069662
sub edi, ecx
cmp word [esi + 0xdfe], 0x63
jne 0x1006a121
push esi
call fcn.10071170
add esp, 4
cmp edi, 0x3e7
jle 0x1006a13d
xor eax, eax
mov word [esi + 0xdfe], ax
mov dword [esi + 0xe04], eax
jmp 0x1006a1e4
mov eax, dword [esi + 0xe04]
add eax, edi
cmp eax, 0x3e7
jle 0x1006a168
nop dword [eax]
push esi
call fcn.10071170
mov eax, dword [esi + 0xe04]
add esp, 4
add eax, edi
cmp eax, 0x3e7
jg 0x1006a150
movzx eax, word [esi + 0xdfe]
movsx edx, ax
shl edx, 4
lea eax, [eax + 1]
mov word [esi + 0xdfe], ax
add edx, esi
je 0x1006a1e4
mov ecx, dword [ebp - 0xec]
mov dword [edx], ecx
mov dword [edx + 4], edi
mov dword [edx + 8], 0
test edi, edi
jne 0x1006a1a2
mov dword [edx + 0xc], 0xffffffff
jmp 0x1006a1ea
mov eax, dword [esi + 0xe04]
mov dword [edx + 0xc], eax
add dword [esi + 0xe04], edi
mov eax, dword [edx + 0xc]
add eax, 0x318
lea eax, [esi + eax*2]
mov dword [ebp - 0x68], eax
test eax, eax
je 0x1006a1ea
xor edx, edx
test edi, edi
jle 0x1006a1ea
lea esi, [ecx + ecx]
mov ecx, eax
nop
mov eax, dword [ebx + 0x14]
lea esi, [esi + 2]
mov ax, word [esi + eax - 2]
mov word [ecx + edx*2], ax
inc edx
cmp edx, edi
jl 0x1006a1d0
mov ecx, dword [ebp - 0xec]
push edi
push ecx
push ebx
call fcn.1006bec0
mov eax, dword [ebx + 0x44]
lea edx, [ebx + 0x3c]
mov ecx, edx
mov dword [edx + 4], eax
add esp, 0xc
mov byte [ecx + 0x16], 0
mov dword [edx], eax
mov byte [edx + 0x16], 0
jmp 0x10069662
movzx eax, al
mov ecx, ebx
xor eax, 1
add eax, 0x20000a
push eax
call fcn.1006b840
mov eax, dword [ebx + 0x3c]
mov dword [ebx + 0x44], eax
mov dword [ebx + 0x40], eax
jmp 0x10069662
mov edx, dword [ebp + 0x1c]
mov eax, edx
mov edi, dword [ebp - 0xe4]
shr eax, 0xb
and al, 1
cmp byte [ebp - 0xf8], 0
je 0x1006a257
mov cl, byte [edi + 0xfc]
test al, al
je 0x1006a26a
test cl, cl
jne 0x1006a26e
mov byte [ebp - 0x101], 1
mov byte [ebp - 0xfa], 1
jmp 0x10069668
test cl, cl
jne 0x1006a257
cmp byte [ebp - 0x108], 0
jne 0x10069668
push dword [ebp - 0x130]
lea eax, [ebp - 0x68]
mov dword [ebp - 0x68], 0xa
push dword [ebp - 0x11c]
push edx
push eax
call fcn.1006b4c0
add esp, 0x10
test al, al
je 0x10069668
push dword [ebp - 0x68]
mov ecx, ebx
call fcn.1006b840
jmp 0x10069668
xor al, al
mov edx, dword [ebp - 0x12c]
or dl, al
mov eax, dword [ebp - 0x10c]
mov dword [ebp - 0x12c], edx
cmp dword [edi + 0x1aa4], eax
jne 0x1006a7e0
xor eax, eax
mov dword [ebp - 0xf4], 0
mov dword [ebp - 0x114], eax
test cl, cl
je 0x1006a430
cmp byte [ebp - 0x108], al
jne 0x1006a418
mov esi, dword [ebx + 0x2c]
mov ecx, esi
mov eax, dword [ebp - 0x100]
mov dl, byte [eax]
cmp dl, byte [ecx]
jne 0x1006a325
test dl, dl
je 0x1006a321
mov dl, byte [eax + 1]
cmp dl, byte [ecx + 1]
jne 0x1006a325
add eax, 2
add ecx, 2
test dl, dl
jne 0x1006a305
xor eax, eax
jmp 0x1006a32a
sbb eax, eax
or eax, 1
test eax, eax
je 0x1006a418
mov eax, dword [ebx + 0x24]
mov ecx, esi
dec eax
mov dword [ebp - 0xf4], ecx
xor edi, edi
mov dword [ebp - 0x114], eax
mov dword [ebp - 0x80], 0
mov dword [ebp - 0x84], 0
mov dword [ebp - 0x7c], edi
mov dword [ebp - 4], edi
test eax, eax
jle 0x1006a39b
lea esi, [eax + ecx]
push esi
push ecx
call fcn.1003bef0
add esp, 8
lea ecx, [ebp - 0x84]
inc eax
push eax
call fcn.1004ff90
push edi
mov edi, dword [ebp - 0x7c]
push esi
push dword [ebp - 0xf4]
mov esi, dword [ebp - 0x84]
push esi
push edi
call fcn.1003c100
add esp, 0x14
lea eax, [esi - 1]
jmp 0x1006a39d
xor eax, eax
mov esi, dword [ebx + 4]
push eax
push esi
mov dword [ebp - 0x68], eax
lea eax, [ebx + 0x5c]
push 0
push eax
call fcn.10070c20
mov edx, eax
add esp, 0x10
test edx, edx
je 0x1006a3d0
xor ecx, ecx
test esi, esi
jle 0x1006a3d0
nop
mov eax, dword [ebx + 0x14]
mov ax, word [eax + ecx*2]
mov word [edx + ecx*2], ax
inc ecx
cmp ecx, esi
jl 0x1006a3c0
push dword [ebx + 4]
push 0
push ebx
call fcn.1006bec0
mov esi, dword [ebp - 0x68]
add esp, 0xc
test esi, esi
jle 0x1006a3fd
push esi
push edi
push 0
push ebx
call fcn.1006bf30
add esp, 0x10
test al, al
je 0x1006a3fd
mov dword [ebx + 0x3c], esi
mov byte [ebx + 0x52], 0
mov dword [ebp - 4], 1
test edi, edi
je 0x1006a411
push edi
call fcn.1003dab0
add esp, 4
mov dword [ebp - 4], 0xffffffff
cmp byte [ebp - 0xfa], 0
mov eax, dword [ebp + 0x1c]
je 0x1006a6ef
test al, 0x20
je 0x1006a6ef
cmp byte [ebp - 0x108], 0
jne 0x1006a463
mov eax, dword [ebx + 0xc]
lea ecx, [ebx + 0x18]
mov byte [ebx + 0x30], 1
lea eax, [eax*4 + 1]
push eax
call fcn.10047ad0
push 0
push dword [ebx + 0x14]
push dword [ebx + 0x18]
push dword [ebx + 0x20]
call fcn.1003c2e0
add esp, 0x10
mov eax, dword [ebp + 0x1c]
test eax, 0x801c0
je 0x1006a6a2
xor esi, esi
lea edi, [esi + 0x16]
test al, 0x40
je 0x1006a493
push 1
push esi
call fcn.1006b790
add esp, 8
test al, al
mov eax, dword [ebp + 0x1c]
je 0x1006a493
lea esi, [edi + 0x2a]
xor edi, edi
jmp 0x1006a4f5
test al, al
jns 0x1006a4d1
push 1
push 3
call fcn.1006b790
add esp, 8
test al, al
je 0x1006a4b4
mov eax, dword [ebp + 0x1c]
mov esi, 0x80
lea edi, [esi - 0x7d]
jmp 0x1006a4f5
push 1
push 4
call fcn.1006b790
add esp, 8
test al, al
mov eax, dword [ebp + 0x1c]
je 0x1006a4d1
mov esi, 0x80
lea edi, [esi - 0x7c]
jmp 0x1006a4f5
test eax, 0x80000
je 0x1006a4e8
cmp byte [ebx + 0xe6e], 0
je 0x1006a4e8
mov esi, 0x80000
jmp 0x1006a4f5
test eax, 0x100
mov ecx, 0x100
cmovne esi, ecx
test esi, esi
je 0x1006a6a2
mov dword [ebp - 0xa4], eax
xor ecx, ecx
mov eax, dword [ebp - 0x130]
mov dword [ebp - 0xa0], eax
mov eax, dword [ebx + 0x20]
mov dword [ebp - 0x94], eax
mov eax, dword [ebx + 8]
mov dword [ebp - 0x90], eax
mov eax, dword [ebx + 0x34]
mov dword [ebp - 0x8c], eax
mov eax, dword [ebx + 0x3c]
mov dword [ebp - 0xa8], esi
mov esi, dword [ebx + 0x14]
mov dword [ebp - 0x9c], 0
mov word [ebp - 0x87], cx
mov byte [ebp - 0x85], cl
lea eax, [esi + eax*2]
mov dword [ebp - 0x98], edi
push eax
push esi
mov byte [ebp - 0x88], cl
call fcn.1003c0a0
mov ecx, dword [ebx + 0x40]
mov edi, eax
mov dword [ebp - 0x84], edi
lea ecx, [esi + ecx*2]
push ecx
push esi
call fcn.1003c0a0
mov ecx, dword [ebx + 0x44]
mov dword [ebp - 0x68], eax
mov dword [ebp - 0x80], eax
lea ecx, [esi + ecx*2]
push ecx
push esi
call fcn.1003c0a0
mov esi, eax
lea eax, [ebp - 0xa8]
push eax
mov dword [ebp - 0x7c], esi
call dword [ebp - 0x11c]
mov cl, byte [ebp - 0x88]
add esp, 0x1c
mov edx, dword [ebp - 0x84]
mov byte [ebp - 0xe5], cl
cmp edx, edi
jne 0x1006a5bc
test cl, cl
je 0x1006a5e5
mov ecx, dword [ebp - 0x94]
lea eax, [edx + ecx]
push eax
push ecx
call fcn.1003bef0
mov edx, dword [ebp - 0x84]
add esp, 8
mov cl, byte [ebp - 0xe5]
mov dword [ebx + 0x3c], eax
mov byte [ebx + 0xe6c], 1
mov eax, dword [ebp - 0x80]
cmp eax, dword [ebp - 0x68]
jne 0x1006a5f1
test cl, cl
je 0x1006a61a
cmp eax, edx
jne 0x1006a5fa
mov ecx, dword [ebx + 0x3c]
jmp 0x1006a611
mov ecx, dword [ebp - 0x94]
add eax, ecx
push eax
push ecx
call fcn.1003bef0
mov ecx, eax
add esp, 8
mov eax, dword [ebp - 0x80]
mov dword [ebx + 0x40], ecx
mov cl, byte [ebp - 0xe5]
mov edx, dword [ebp - 0x7c]
cmp edx, esi
jne 0x1006a629
test cl, cl
je 0x1006a6a2
cmp edx, eax
jne 0x1006a632
mov eax, dword [ebx + 0x40]
jmp 0x1006a645
mov ecx, dword [ebp - 0x94]
lea eax, [edx + ecx]
push eax
push ecx
call fcn.1003bef0
add esp, 8
cmp byte [ebp - 0xe5], 0
mov dword [ebx + 0x44], eax
je 0x1006a6a2
mov eax, dword [ebp - 0x90]
mov edx, dword [ebp - 0x158]
cmp eax, edx
jle 0x1006a674
cmp byte [ebp - 0x38], 0
je 0x1006a674
lea ecx, [ebx + 0xc]
sub eax, edx
add eax, dword [ecx]
push eax
call fcn.1004ff90
push 0
push 0
push dword [ebp - 0x94]
push dword [ebx + 0xc]
push dword [ebx + 0x14]
call fcn.1003c100
mov dword [ebx + 4], eax
add esp, 0x14
mov eax, dword [ebp - 0x90]
mov dword [ebx + 8], eax
mov dword [ebx + 0xe68], 0xbe99999a
cmp byte [ebp - 0x108], 0
mov edi, dword [ebp - 0x100]
jne 0x1006a6f7
mov esi, dword [ebx + 0x20]
mov ecx, edi
mov eax, esi
mov dl, byte [eax]
cmp dl, byte [ecx]
jne 0x1006a6d8
test dl, dl
je 0x1006a6d4
mov dl, byte [eax + 1]
cmp dl, byte [ecx + 1]
jne 0x1006a6d8
add eax, 2
add ecx, 2
test dl, dl
jne 0x1006a6b8
xor eax, eax
jmp 0x1006a6dd
sbb eax, eax
or eax, 1
test eax, eax
mov eax, dword [ebp + 0x1c]
je 0x1006a6fa
mov ecx, dword [ebx + 8]
mov dword [ebp - 0xf4], esi
jmp 0x1006a700
mov edi, dword [ebp - 0x100]
jmp 0x1006a6fa
mov eax, dword [ebp + 0x1c]
mov ecx, dword [ebp - 0x114]
mov esi, dword [ebp - 0xf4]
test esi, esi
je 0x1006a7bc
cmp byte [ebp - 0x38], 0
je 0x1006a79f
mov dword [ebp - 0xd4], eax
xorps xmm0, xmm0
lea eax, [ecx + 1]
movlpd qword [ebp - 0xcc], xmm0
cmp dword [ebp + 0x14], eax
movlpd qword [ebp - 0xb8], xmm0
cmovge eax, dword [ebp + 0x14]
mov dword [ebp - 0xbc], eax
mov eax, dword [ebp - 0x130]
mov dword [ebp - 0xd0], eax
lea eax, [ebp - 0xd8]
push eax
movlpd qword [ebp - 0xb0], xmm0
mov dword [ebp - 0xd8], 0x40000
mov dword [ebp - 0xc4], edi
mov dword [ebp - 0xc0], ecx
call dword [ebp - 0x11c]
mov edx, dword [ebp - 0xbc]
add esp, 4
mov edi, dword [ebp - 0xc4]
mov dword [ebp - 0x100], edi
lea ecx, [edx - 1]
cmp dword [ebp - 0xc0], ecx
cmovl ecx, dword [ebp - 0xc0]
jmp 0x1006a7a2
mov edx, dword [ebp + 0x14]
lea eax, [ecx + 1]
cmp eax, edx
cmovl edx, eax
push edx
push esi
push edi
call fcn.1003bd60
add esp, 0xc
mov byte [ebp - 0xf9], 1
mov edi, dword [ebp - 0xe4]
mov dword [ebx + 0xe70], 0
mov dword [ebx + 0xe74], 0
mov dword [ebx + 0xe78], 0
cmp byte [ebp - 0x101], 0
mov ecx, dword [ebp - 0x10c]
je 0x1006a802
cmp dword [edi + 0x1aa4], ecx
jne 0x1006a802
call fcn.100389f0
mov ecx, dword [ebp - 0x10c]
cmp byte [ebp - 0xf8], 0
jne 0x1006a8a8
push 1
push ecx
lea eax, [ebp - 0x78]
push eax
call fcn.10042a10
movss xmm0, dword [edi + 0x1558]
add esp, 8
movss dword [esp], xmm0
push 1
push ecx
mov dword [esp], 0x3f800000
push 7
call fcn.1003ad60
add esp, 8
push eax
push dword [ebp - 0x6c]
push dword [ebp - 0x70]
push dword [ebp - 0x74]
push dword [ebp - 0x78]
call fcn.10042800
movss xmm1, dword [ebp - 0x78]
add esp, 0x1c
movss xmm3, dword [ebp - 0x140]
movaps xmm0, xmm1
movss xmm2, dword [ebp - 0x74]
addss xmm0, xmm3
movss dword [ebp - 0x2c], xmm1
movss dword [ebp - 0x28], xmm2
movss dword [ebp - 0x24], xmm0
movaps xmm0, xmm2
addss xmm0, dword [ebp - 0x14c]
movss dword [ebp - 0x20], xmm0
addss xmm1, dword [edi + 0x1550]
addss xmm2, dword [edi + 0x1554]
movss dword [ebp - 0x3c], xmm1
movss dword [ebp - 0x38], xmm2
jmp 0x1006a8f2
movss xmm0, dword [ebp - 0x78]
movss xmm2, dword [ebp - 0x74]
movss xmm3, dword [ebp - 0x140]
mov ecx, dword [ebp - 0x120]
movss dword [ebp - 0x2c], xmm0
addss xmm0, xmm3
movss dword [ebp - 0x28], xmm2
addss xmm2, dword [ebp - 0x14c]
movss dword [ebp - 0x24], xmm0
movss dword [ebp - 0x20], xmm2
mov eax, dword [ecx + 0xd0]
mov ecx, dword [ecx + 0xd4]
mov dword [ebp - 0x3c], eax
mov dword [ebp - 0x38], ecx
cmp byte [ebp - 0xfb], 0
lea eax, [ebp - 0x3c]
movss xmm0, dword [eax]
movss dword [ebp - 0x1c], xmm0
movss xmm0, dword [eax + 4]
movss dword [ebp - 0x18], xmm0
mov dword [ebp - 0x34], 0
mov dword [ebp - 0x30], 0
je 0x1006a928
mov eax, dword [ebx + 0x20]
mov dword [ebp - 0x100], eax
mov dh, byte [ebp - 0xdd]
mov dword [ebp - 0xec], 0
test dh, dh
je 0x1006a968
mov esi, dword [ebp - 0x150]
mov ecx, esi
mov dword [ebp - 0x100], esi
lea edx, [ecx + 1]
nop dword [eax]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x1006a950
sub ecx, edx
mov dh, byte [ebp - 0xdd]
lea eax, [ecx + esi]
mov dword [ebp - 0xec], eax
mov al, byte [ebp - 0xed]
mov ecx, dword [ebp - 0x12c]
test al, al
jne 0x1006aa79
test cl, cl
jne 0x1006aa79
mov esi, dword [ebp - 0x100]
cmp byte [ebp - 0xf8], cl
je 0x1006a9da
mov dl, byte [esi]
lea ebx, [esi + 1]
xor ecx, ecx
test dl, dl
je 0x1006a9b2
nop dword [eax]
cmp dl, 0xa
lea eax, [ecx + 1]
mov dl, byte [ebx]
cmovne eax, ecx
inc ebx
mov ecx, eax
test dl, dl
jne 0x1006a9a0
mov al, byte [ebx - 1]
dec ebx
cmp al, 0xa
je 0x1006a9bf
cmp al, 0xd
je 0x1006a9bf
inc ecx
movd xmm0, ecx
cvtdq2ps xmm0, xmm0
mulss xmm0, dword [edi + 0x1930]
movss dword [ebp - 0x34], xmm3
movss dword [ebp - 0x30], xmm0
jmp 0x1006aa21
test dh, dh
jne 0x1006aa0c
mov eax, dword [ebp - 0x10c]
cmp dword [edi + 0x1aa4], eax
jne 0x1006a9f3
mov ebx, dword [ebx + 8]
add ebx, esi
jmp 0x1006aa12
mov ecx, esi
lea edx, [ecx + 1]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x1006a9f8
sub ecx, edx
mov dh, byte [ebp - 0xdd]
lea ebx, [esi + ecx]
jmp 0x1006aa12
mov ebx, dword [ebp - 0xec]
mov eax, ebx
sub eax, esi
cmp eax, 0x200000
jge 0x1006b33e
push ecx
movzx eax, dh
mov dword [esp], 0x3f800000
push eax
call fcn.1003ad60
movss xmm0, dword [edi + 0x1930]
lea ecx, [ebp - 0x2c]
add esp, 8
xor edx, edx
cmp byte [ebp - 0xf8], dl
cmovne ecx, edx
push ecx
push ecx
mov dword [esp], edx
push ebx
push esi
push eax
lea eax, [ebp - 0x1c]
push eax
mov eax, dword [ebp - 0x120]
push ecx
movss dword [esp], xmm0
push dword [edi + 0x192c]
mov ecx, dword [eax + 0x284]
call fcn.1004a2a0
jmp 0x1006b33e
test dh, dh
jne 0x1006aa92
mov eax, dword [ebx + 8]
add eax, dword [ebp - 0x100]
mov dword [ebp - 0xec], eax
mov al, byte [ebp - 0xed]
mov esi, dword [ebx + 0x14]
xorps xmm0, xmm0
mov edi, 0xfffffc18
mov dword [ebp - 0x14], esi
xor edx, edx
movss dword [ebp - 0x38], xmm0
movss dword [ebp - 0x150], xmm0
mov dword [ebp - 0x68], 0
mov dword [ebp - 0x114], 0
mov dword [ebp - 0x11c], edi
test al, al
je 0x1006aad9
mov eax, dword [ebx + 0x3c]
or edi, 0xffffffff
lea eax, [esi + eax*2]
mov dword [ebp - 0x68], eax
lea edx, [edi + 2]
test cl, cl
je 0x1006aafb
mov ecx, dword [ebx + 0x44]
cmp dword [ebx + 0x40], ecx
mov dword [ebp - 0x11c], 0xffffffff
cmovl ecx, dword [ebx + 0x40]
inc edx
lea eax, [esi + ecx*2]
mov dword [ebp - 0x114], eax
mov eax, dword [ebp - 0xf8]
mov ecx, esi
movzx esi, word [esi]
movzx eax, al
add edx, eax
xor eax, eax
test si, si
je 0x1006ab68
xor ebx, ebx
cmp si, 0xa
jne 0x1006ab48
inc ebx
cmp edi, 0xffffffff
jne 0x1006ab2c
cmp ecx, dword [ebp - 0x68]
jb 0x1006ab2c
dec edx
mov edi, ebx
test edx, edx
jle 0x1006ab56
cmp dword [ebp - 0x11c], 0xffffffff
jne 0x1006ab48
cmp ecx, dword [ebp - 0x114]
jb 0x1006ab48
dec edx
mov dword [ebp - 0x11c], ebx
test edx, edx
jle 0x1006ab56
movzx eax, word [ecx + 2]
add ecx, 2
mov esi, eax
test ax, ax
jne 0x1006ab14
mov dword [ebp - 0xf4], ebx
mov ebx, dword [ebp - 0x128]
mov eax, dword [ebp - 0xf4]
push dword [ebp - 0x14]
inc eax
cmp edi, 0xffffffff
mov ecx, eax
mov dword [ebp - 0xf4], eax
cmovne ecx, edi
mov edi, dword [ebp - 0x68]
mov dword [ebp - 0x158], ecx
mov ecx, dword [ebp - 0x11c]
cmp ecx, 0xffffffff
push edi
cmove ecx, eax
mov dword [ebp - 0x11c], ecx
call fcn.1003bd40
mov ecx, dword [0x10135110]
mov edx, eax
add esp, 8
xorps xmm6, xmm6
xorps xmm1, xmm1
xorps xmm3, xmm3
mov esi, dword [ecx + 0x192c]
movss xmm2, dword [ecx + 0x1930]
divss xmm2, dword [esi + 0x10]
cmp edx, edi
jae 0x1006ac02
movzx eax, word [edx]
add edx, 2
mov ecx, eax
cmp eax, 0xa
jne 0x1006abdc
maxss xmm1, xmm3
movaps xmm3, xmm6
jmp 0x1006abfe
cmp ecx, 0xd
je 0x1006abfe
mov ecx, eax
cmp ecx, dword [esi]
jge 0x1006abf1
mov eax, dword [esi + 8]
movss xmm0, dword [eax + ecx*4]
jmp 0x1006abf6
movss xmm0, dword [esi + 0xc]
mulss xmm0, xmm2
addss xmm3, xmm0
cmp edx, edi
jb 0x1006abc6
movd xmm4, dword [ebp - 0x158]
maxss xmm3, xmm1
mov ecx, dword [ebp - 0xe4]
mov edi, dword [ebp - 0x11c]
cvtdq2ps xmm4, xmm4
movss xmm2, dword [ecx + 0x1930]
mulss xmm4, xmm2
movss dword [ebp - 0x68], xmm3
movss dword [ebp - 0x110], xmm4
test edi, edi
js 0x1006acfa
push dword [ebp - 0x14]
push dword [ebp - 0x114]
call fcn.1003bd40
mov ecx, dword [0x10135110]
mov edx, eax
add esp, 8
xorps xmm6, xmm6
xorps xmm1, xmm1
xorps xmm3, xmm3
mov esi, dword [ecx + 0x192c]
movss xmm2, dword [ecx + 0x1930]
divss xmm2, dword [esi + 0x10]
cmp edx, dword [ebp - 0x114]
jae 0x1006acc3
mov ebx, dword [ebp - 0x114]
movzx eax, word [edx]
add edx, 2
mov ecx, eax
cmp eax, 0xa
jne 0x1006ac97
maxss xmm1, xmm3
movaps xmm3, xmm6
jmp 0x1006acb9
cmp ecx, 0xd
je 0x1006acb9
mov ecx, eax
cmp ecx, dword [esi]
jge 0x1006acac
mov eax, dword [esi + 8]
movss xmm0, dword [eax + ecx*4]
jmp 0x1006acb1
movss xmm0, dword [esi + 0xc]
mulss xmm0, xmm2
addss xmm3, xmm0
cmp edx, ebx
jb 0x1006ac81
mov ebx, dword [ebp - 0x128]
mov ecx, dword [ebp - 0xe4]
maxss xmm3, xmm1
movss xmm4, dword [ebp - 0x110]
movd xmm0, edi
cvtdq2ps xmm0, xmm0
movss xmm2, dword [ecx + 0x1930]
mulss xmm0, xmm2
movss dword [ebp - 0x150], xmm3
movss xmm3, dword [ebp - 0x68]
movss dword [ebp - 0x38], xmm0
mov edx, dword [ebp - 0xf8]
movss xmm5, dword [ebp - 0x140]
test dl, dl
je 0x1006ad25
movd xmm0, dword [ebp - 0xf4]
cvtdq2ps xmm0, xmm0
movss dword [ebp - 0x34], xmm5
mulss xmm0, xmm2
movss dword [ebp - 0x30], xmm0
cmp byte [ebp - 0xed], 0
je 0x1006ae2f
cmp byte [ebx + 0xe6c], 0
je 0x1006ae2f
test dword [ebp + 0x1c], 0x1000
jne 0x1006ad8f
movss xmm1, dword [ebx + 0x38]
movaps xmm2, xmm5
comiss xmm1, xmm3
mulss xmm2, dword [0x10114440]
jbe 0x1006ad6d
movaps xmm1, xmm3
movaps xmm0, xmm6
subss xmm1, xmm2
maxss xmm0, xmm1
jmp 0x1006ad7d
movaps xmm0, xmm3
subss xmm0, xmm5
comiss xmm0, xmm1
jb 0x1006ad96
addss xmm0, xmm2
cvttss2si eax, xmm0
movd xmm0, eax
cvtdq2ps xmm0, xmm0
movss dword [ebx + 0x38], xmm0
jmp 0x1006ad96
mov dword [ebx + 0x38], 0
test dl, dl
je 0x1006ae28
movss xmm2, dword [ebp - 0x144]
movaps xmm0, xmm4
subss xmm0, dword [ecx + 0x1930]
movss xmm3, dword [ebp - 0x14c]
comiss xmm2, xmm0
jbe 0x1006adc7
movaps xmm2, xmm6
maxss xmm2, xmm0
jmp 0x1006ade3
movaps xmm0, xmm4
subss xmm0, xmm3
comiss xmm0, xmm2
jb 0x1006ade3
movss xmm2, dword [ecx + 0x1554]
addss xmm2, xmm2
addss xmm2, xmm0
comiss xmm6, xmm2
movss xmm1, dword [ecx + 0x1554]
jbe 0x1006adf5
movaps xmm1, xmm6
jmp 0x1006ae0a
addss xmm1, xmm1
addss xmm1, dword [ebp - 0x30]
subss xmm1, xmm3
maxss xmm1, xmm6
minss xmm1, xmm2
mov eax, dword [ebp - 0x120]
movss xmm0, dword [eax + 0x54]
subss xmm0, xmm1
addss xmm0, dword [ebp - 0x18]
movss dword [ebp - 0x18], xmm0
movss dword [eax + 0x54], xmm1
mov byte [ebx + 0xe6c], 0
cmp byte [ebp - 0x12c], 0
movss xmm0, dword [ebx + 0x38]
movss dword [ebp - 0xf4], xmm0
je 0x1006b0ca
mov edx, dword [ebx + 0x44]
mov eax, edx
mov ecx, dword [ebx + 0x40]
cmp ecx, edx
mov edi, dword [ebp - 0x14]
cmovl eax, ecx
cmovge edx, ecx
cmp byte [ebp - 0xed], 0
lea esi, [edi + eax*2]
lea edi, [edi + edx*2]
je 0x1006ae75
movss xmm0, dword [0x100cf748]
jmp 0x1006ae7d
movss xmm0, dword [0x10114fbc]
push ecx
movss dword [esp], xmm0
push 0x2f
call fcn.1003ad60
add esp, 8
mov dword [ebp - 0x14], eax
cmp byte [ebp - 0xf8], 0
je 0x1006aeae
xorps xmm0, xmm0
movss dword [ebp - 0x134], xmm0
movss dword [ebp - 0x158], xmm0
jmp 0x1006aec1
movss xmm0, dword [0x100d0cc4]
movss dword [ebp - 0x158], xmm0
xorps xmm0, xmm0
movss xmm5, dword [ebp - 0x18]
movss xmm3, dword [ebp - 0x1c]
addss xmm5, dword [ebp - 0x38]
addss xmm3, dword [ebp - 0x150]
subss xmm5, xmm0
subss xmm3, dword [ebp - 0xf4]
movss dword [ebp - 0x150], xmm5
cmp esi, edi
jae 0x1006b0ca
movss xmm6, dword [ebp - 0x20]
movss xmm7, dword [ebp - 0x28]
mov ecx, dword [ebp - 0xe4]
mov ebx, dword [ebp - 0x14]
nop word [eax + eax]
movaps xmm0, xmm6
addss xmm0, dword [ecx + 0x1930]
comiss xmm5, xmm0
ja 0x1006b0c4
comiss xmm7, xmm5
jbe 0x1006af4a
cmp esi, edi
jae 0x1006b09f
mov ax, word [esi]
add esi, 2
cmp ax, 0xa
je 0x1006b09f
cmp esi, edi
jb 0x1006af31
jmp 0x1006b0c4
mov eax, dword [0x10135110]
xorps xmm0, xmm0
xorps xmm4, xmm4
xorps xmm1, xmm1
mov edx, dword [eax + 0x192c]
movss xmm2, dword [eax + 0x1930]
divss xmm2, dword [edx + 0x10]
cmp esi, edi
jae 0x1006afb6
nop
movzx eax, word [esi]
add esi, 2
mov ecx, eax
cmp eax, 0xa
je 0x1006afa3
cmp ecx, 0xd
je 0x1006af9d
cmp ecx, dword [edx]
jge 0x1006af90
mov eax, dword [edx + 8]
movss xmm0, dword [eax + ecx*4]
jmp 0x1006af95
movss xmm0, dword [edx + 0xc]
mulss xmm0, xmm2
addss xmm1, xmm0
cmp esi, edi
jb 0x1006af70
jmp 0x1006afad
xorps xmm4, xmm4
maxss xmm4, xmm1
xorps xmm1, xmm1
mov ecx, dword [ebp - 0xe4]
xorps xmm0, xmm0
maxss xmm1, xmm4
comiss xmm0, xmm1
jb 0x1006afef
mov eax, dword [ecx + 0x192c]
cmp dword [eax], 0x20
jle 0x1006afd7
mov eax, dword [eax + 8]
movss xmm0, dword [eax + 0x80]
jmp 0x1006afdc
movss xmm0, dword [eax + 0xc]
mulss xmm0, dword [0x100cf714]
cvttss2si eax, xmm0
movd xmm1, eax
cvtdq2ps xmm1, xmm1
movss xmm2, dword [ebp - 0x134]
addss xmm1, xmm3
subss xmm2, dword [ecx + 0x1930]
movss xmm0, dword [ebp - 0x158]
addss xmm3, dword [0x100d0b40]
movss xmm4, dword [ebp - 0x24]
addss xmm0, xmm5
minss xmm1, xmm4
addss xmm2, xmm5
maxss xmm3, dword [ebp - 0x2c]
minss xmm0, xmm6
movss dword [ebp - 0x80], xmm1
maxss xmm2, xmm7
movss dword [ebp - 0x88], xmm3
comiss xmm0, xmm7
movss dword [ebp - 0x84], xmm2
movss dword [ebp - 0x7c], xmm0
jbe 0x1006b09f
comiss xmm6, xmm2
jbe 0x1006b09f
comiss xmm1, dword [ebp - 0x2c]
jbe 0x1006b09f
comiss xmm4, xmm3
jbe 0x1006b09f
push 0xf
push ecx
mov dword [esp], 0
lea eax, [ebp - 0x80]
push ebx
push eax
lea eax, [ebp - 0x88]
push eax
mov eax, dword [ebp - 0x120]
mov ecx, dword [eax + 0x284]
call fcn.10049fd0
movss xmm6, dword [ebp - 0x20]
movss xmm7, dword [ebp - 0x28]
movss xmm5, dword [ebp - 0x150]
mov ecx, dword [ebp - 0xe4]
movss xmm3, dword [ebp - 0x1c]
addss xmm5, dword [ecx + 0x1930]
subss xmm3, dword [ebp - 0xf4]
movss dword [ebp - 0x150], xmm5
cmp esi, edi
jb 0x1006af10
mov ebx, dword [ebp - 0x128]
cmp byte [ebp - 0xf8], 0
mov esi, dword [ebp - 0xec]
jne 0x1006b0ec
mov eax, esi
sub eax, dword [ebp - 0x100]
cmp eax, 0x200000
jge 0x1006b17d
movzx eax, byte [ebp - 0xdd]
push ecx
mov dword [esp], 0x3f800000
push eax
call fcn.1003ad60
movss xmm0, dword [ebp - 0x1c]
lea ecx, [ebp - 0x2c]
subss xmm0, dword [ebp - 0xf4]
mov edi, dword [ebp - 0x120]
add esp, 8
xor edx, edx
cmp byte [ebp - 0xf8], dl
cmovne ecx, edx
movss dword [ebp - 0x138], xmm0
movss xmm0, dword [ebp - 0x18]
subss xmm0, dword [0x100d0b40]
push ecx
push ecx
mov dword [esp], edx
push esi
push dword [ebp - 0x100]
mov esi, dword [ebp - 0xe4]
push eax
lea eax, [ebp - 0x138]
movss dword [ebp - 0x134], xmm0
push eax
movss xmm0, dword [esi + 0x1930]
push ecx
mov ecx, dword [edi + 0x284]
movss dword [esp], xmm0
push dword [esi + 0x192c]
call fcn.1004a2a0
jmp 0x1006b189
mov esi, dword [ebp - 0xe4]
mov edi, dword [ebp - 0x120]
cmp byte [ebp - 0xed], 0
je 0x1006b332
movss xmm0, dword [esi + 0x18]
addss xmm0, dword [ebx + 0xe68]
movss dword [ebx + 0xe68], xmm0
cmp byte [esi + 0xb2], 0
je 0x1006b1fb
xorps xmm1, xmm1
comiss xmm1, xmm0
jae 0x1006b1fb
cvtps2pd xmm0, xmm0
movsd qword [ebp - 0x138], xmm0
fld qword [ebp - 0x138]
fld qword [0x101196e8]
call sub.api_ms_win_crt_math_l1_1_0.dll__CIfmod
movss xmm0, dword [0x10114fd8]
fstp qword [ebp - 0x138]
movsd xmm1, qword [ebp - 0x138]
cvtpd2ps xmm1, xmm1
comiss xmm0, xmm1
jae 0x1006b1fb
xor al, al
jmp 0x1006b1fd
mov al, 1
movss xmm0, dword [ebp - 0x18]
movss xmm1, dword [ebp - 0x1c]
movss xmm5, dword [0x100cf748]
addss xmm0, dword [ebp - 0x110]
addss xmm1, dword [ebp - 0x68]
subss xmm0, dword [0x100d0b40]
subss xmm1, dword [ebp - 0xf4]
movss dword [ebp - 0xf4], xmm0
movaps xmm2, xmm0
movss dword [ebp - 0x134], xmm1
movaps xmm4, xmm1
movss dword [ebp - 0x88], xmm1
movaps xmm3, xmm0
addss xmm4, xmm5
subss xmm2, dword [esi + 0x1930]
subss xmm3, dword [0x10115144]
movss dword [ebp - 0x80], xmm4
addss xmm2, dword [0x100cf714]
movss dword [ebp - 0x7c], xmm3
movss dword [ebp - 0x84], xmm2
test al, al
je 0x1006b305
comiss xmm3, dword [ebp - 0x28]
jbe 0x1006b305
movss xmm0, dword [ebp - 0x20]
comiss xmm0, xmm2
jbe 0x1006b2fd
comiss xmm4, dword [ebp - 0x2c]
jbe 0x1006b2fd
movss xmm0, dword [ebp - 0x24]
comiss xmm0, xmm1
jbe 0x1006b2fd
sub esp, 8
movss dword [ebp - 0x154], xmm1
movss dword [ebp - 0x150], xmm3
mov dword [esp + 4], 0x3f800000
mov dword [esp], 0x3f800000
push 0
call fcn.1003ad60
mov ecx, dword [edi + 0x284]
add esp, 8
push eax
lea eax, [ebp - 0x154]
push eax
lea eax, [ebp - 0x88]
push eax
call fcn.10049160
movss xmm1, dword [ebp - 0x134]
movss xmm5, dword [0x100cf748]
movss xmm0, dword [ebp - 0xf4]
cmp byte [ebp - 0x108], 0
mov ebx, dword [ebp - 0xec]
jne 0x1006b338
subss xmm0, dword [esi + 0x1930]
subss xmm1, xmm5
movss dword [esi + 0x2eac], xmm0
movss dword [esi + 0x2ea8], xmm1
jmp 0x1006b338
mov ebx, dword [ebp - 0xec]
mov esi, dword [ebp - 0x100]
cmp byte [ebp - 0x148], 0
je 0x1006b355
cmp byte [ebp - 0xdd], 0
jne 0x1006b355
call fcn.10041bb0
cmp byte [ebp - 0xf8], 0
je 0x1006b3e8
mov ecx, dword [0x10135110]
mov eax, dword [ecx + 0x1a6c]
mov byte [eax + 0x84], 1
mov eax, dword [ecx + 0x1a6c]
cmp byte [eax + 0x87], 0
jne 0x1006b3de
movss xmm0, dword [eax + 0xd0]
movss xmm1, dword [ebp - 0x30]
movaps xmm2, xmm0
addss xmm1, dword [eax + 0xd4]
addss xmm2, dword [ebp - 0x34]
movss dword [ebp - 0x44], xmm0
movss xmm0, dword [eax + 0xd4]
lea eax, [ebp - 0x34]
push ecx
mov dword [esp], 0xbf800000
push eax
movss dword [ebp - 0x40], xmm0
movss dword [ebp - 0x3c], xmm2
movss dword [ebp - 0x38], xmm1
call fcn.1003d350
push 0
lea eax, [ebp - 0x44]
push 0
push eax
call fcn.1003cf90
add esp, 0x14
call fcn.10039710
call fcn.10039be0
mov eax, dword [ebp - 0xe4]
cmp byte [eax + 0x2efc], 0
je 0x1006b41d
cmp byte [ebp - 0x148], 0
je 0x1006b409
cmp byte [ebp - 0xdd], 0
je 0x1006b41d
push ebx
lea eax, [ebp - 0x1c]
push esi
push eax
call fcn.1003d810
mov eax, dword [ebp - 0xe4]
add esp, 0xc
movss xmm0, dword [ebp - 0x5c]
comiss xmm0, dword [0x100d0b40]
jbe 0x1006b473
movss xmm0, dword [ebp - 0x70]
addss xmm0, dword [eax + 0x1568]
push 1
push 0
push dword [ebp - 0x160]
movss dword [ebp - 0x138], xmm0
movss xmm0, dword [ebp - 0x74]
addss xmm0, dword [eax + 0x1554]
movss dword [ebp - 0x134], xmm0
push dword [ebp - 0x134]
push dword [ebp - 0x138]
call fcn.10042c40
add esp, 0x14
mov al, byte [ebp - 0xf9]
mov ebx, dword [ebp + 0x1c]
test al, al
je 0x1006b49c
test ebx, 0x200000
jne 0x1006b49c
push dword [ebp - 0x10c]
call fcn.1003da60
mov al, byte [ebp - 0xf9]
add esp, 4
movzx ecx, byte [ebp - 0xfa]
test bl, 0x20
movzx eax, al
cmovne eax, ecx
jmp 0x1006880d