Function at 0x70e16858
Capabilities:
Resolve function by parsing pe exports

Disassembly:
push ebp
lea ebp, [esp - 0x64]
sub esp, 0x914
mov eax, dword [ebp + 0x74]
mov edx, dword [eax]
and dword [ebp + 0x58], 0
push ebx
push esi
lea esi, [ebp - 0x7c]
push esi
mov esi, dword [eax + 0xc]
mov ebx, ecx
mov ecx, dword [eax + 4]
mov eax, dword [eax + 8]
add esi, ecx
push esi
mov esi, dword [ebp + 0x6c]
add eax, edx
push eax
push ecx
push edx
lea ecx, [esi + 0xf4]
call fcn.70d52f70
test eax, eax
je 0x70e17a70
push edi
lea ecx, [ebp - 0x23c]
call fcn.70d51c8a
mov ecx, dword [ebp + 0x7c]
and dword [ebp + 0x34], 0
lea eax, [esi + 0x74]
add ecx, 0xfffffff4
mov edx, dword [ecx]
push eax
mov dword [ebp + 0x5c], eax
call dword [edx + 0x3c]
test eax, eax
mov dword [ebp + 0x4c], eax
je 0x70e17380
mov esi, dword [ebp + 0x74]
lea edi, [ebp + 0x3c]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
xor ecx, ecx
movsd dword es:[edi], dword [esi]
xor edx, edx
inc ecx
cmp eax, ecx
mov dword [ebp + 0x54], edx
movsd dword es:[edi], dword [esi]
mov dword [ebp + 0x50], edx
je 0x70e16f1a
cmp eax, 2
je 0x70e16f15
cmp eax, 3
je 0x70e16967
jle 0x70e16f28
cmp eax, 5
jg 0x70e16f28
mov ecx, dword [ebp + 0x7c]
mov esi, dword [ecx]
add ecx, 0xfffffff4
xor eax, eax
cmp esi, 4
sete al
xor edi, edi
cmp dword [ebx + 0x78], edi
jne 0x70e1692a
cmp dword [ebx + 0x40], edi
je 0x70e1692a
cmp dword [ebx + 0x14], edi
mov dword [ebp + 0x54], 1
je 0x70e1692d
mov dword [ebp + 0x54], edi
cmp esi, 3
jne 0x70e16937
call fcn.70e15aab
cmp eax, edi
je 0x70e16eaa
mov ecx, dword [ebp + 0x74]
mov edx, dword [ecx + 8]
mov eax, 0x100
cmp edx, eax
mov dword [ebp + 0x44], edx
jl 0x70e16954
mov dword [ebp + 0x44], eax
mov ecx, dword [ecx + 0xc]
cmp ecx, eax
jl 0x70e16f0b
mov dword [ebp + 0x48], eax
jmp 0x70e16f28
mov eax, dword [ebp + 0x7c]
add eax, 8
push eax
lea ecx, [ebp - 0x1c4]
call fcn.70d52e9d
push dword [ebp + 0x5c]
lea eax, [ebp - 0x1c4]
push eax
lea eax, [ebp - 0x1c4]
push eax
call fcn.70d54413
cmp dword [ebx + 0x14], 0
jne 0x70e16902
cmp dword [ebx + 0x78], 0
jne 0x70e169a9
cmp dword [ebx + 0x40], 0
je 0x70e16902
test byte [ebp - 0x1a0], 8
jne 0x70e16902
lea ecx, [ebp - 0x114]
call fcn.70d51c8a
lea ecx, [ebp - 0xec]
call fcn.70d51c8a
lea ecx, [ebp - 0x214]
call fcn.70d51c8a
lea ecx, [ebp - 0x13c]
call fcn.70d51c8a
lea ecx, [ebp - 0xc4]
call fcn.70d51c8a
fldz
mov eax, dword [ebp + 0x7c]
fstp dword [ebp + 8]
fldz
lea esi, [eax + 0x34]
fstp dword [ebp + 4]
lea edi, [ebp - 0x90]
movsd dword es:[edi], dword [esi]
fldz
fstp dword [ebp]
movsd dword es:[edi], dword [esi]
fldz
fstp dword [ebp - 4]
fldz
movsd dword es:[edi], dword [esi]
fstp dword [ebp - 0x20]
fldz
add eax, 8
push eax
fstp dword [ebp - 0x24]
lea ecx, [ebp - 0x264]
movsd dword es:[edi], dword [esi]
call fcn.70d52e9d
push 2
lea eax, [ebp - 0x1c]
pop ecx
fldz
fstp dword [eax + 4]
fldz
fstp dword [eax]
add eax, 8
dec ecx
jne 0x70e16a30
mov esi, dword [ebp + 0x7c]
mov eax, dword [esi + 0xb8]
mov dword [ebp - 0x1c], eax
mov eax, dword [esi + 0xbc]
mov dword [ebp - 0x18], eax
mov eax, dword [esi + 0xc0]
mov dword [ebp - 0x14], eax
mov eax, dword [esi + 0xc4]
push 2
mov dword [ebp - 0x10], eax
lea eax, [ebp + 0x20]
pop ecx
fldz
fstp dword [eax + 4]
fldz
fstp dword [eax]
add eax, 8
dec ecx
jne 0x70e16a6c
mov ecx, dword [ebp + 0x5c]
push 2
lea eax, [ebp + 0x20]
push eax
lea eax, [ebp - 0x1c]
push eax
call fcn.70d2f18d
lea eax, [ebp + 0x28]
push eax
lea eax, [ebp + 0x20]
push eax
call fcn.70d2925c
test eax, eax
jne 0x70e16902
lea eax, [ebp + 0x28]
push eax
lea eax, [ebp + 0x20]
push eax
call fcn.70d08b54
fadd dword [ebp + 0x20]
mov eax, dword [ebp + 0x24]
xor edi, edi
fstp dword [ebp - 0x24]
inc edi
fld dword [ebp + 0x28]
push edi
fsub dword [ebp + 0x20]
push ecx
fld dword [ebp + 0x2c]
push ecx
fsub dword [ebp + 0x24]
lea ecx, [ebp - 0x13c]
fld st(1)
fpatan
mov dword [ebp - 0x20], eax
fmul qword [0x70d294d0]
fstp dword [ebp + 0x30]
fstp st(0)
fld dword [ebp + 0x24]
fchs
fstp dword [esp + 4]
fld dword [ebp + 0x20]
fchs
fstp dword [esp]
call fcn.70d5b1f3
fld dword [ebp + 0x30]
push edi
push ecx
fchs
lea ecx, [ebp - 0x13c]
fstp dword [esp]
call fcn.70d2a28d
fld dword [ebp + 0x24]
push edi
push ecx
push ecx
fstp dword [esp + 4]
lea ecx, [ebp - 0x13c]
fld dword [ebp + 0x20]
fstp dword [esp]
call fcn.70d5b1f3
fld dword [ebp + 0x24]
push edi
push ecx
fchs
push ecx
fstp dword [esp + 4]
lea ecx, [ebp - 0xc4]
fld dword [ebp + 0x20]
fchs
fstp dword [esp]
call fcn.70d5b1f3
fld dword [ebp + 0x30]
push edi
push ecx
lea ecx, [ebp - 0xc4]
fstp dword [esp]
call fcn.70d2a28d
fld dword [ebp + 0x24]
push edi
push ecx
push ecx
fstp dword [esp + 4]
lea ecx, [ebp - 0xc4]
fld dword [ebp + 0x20]
fstp dword [esp]
call fcn.70d5b1f3
push dword [ebp + 0x5c]
lea ecx, [ebp - 0x114]
call fcn.70d521d2
lea eax, [ebp - 0x13c]
push eax
lea eax, [ebp - 0x114]
push eax
lea eax, [ebp - 0x114]
push eax
call fcn.70d54413
lea eax, [ebp - 0x114]
push eax
lea ecx, [ebp - 0xec]
call fcn.70d521d2
lea ecx, [ebp - 0xec]
call fcn.70d5436c
test eax, eax
jne 0x70e16902
mov edi, dword [ebp + 0x78]
lea eax, [ebp - 0x114]
push eax
mov ecx, edi
call fcn.70d2c617
fldz
mov eax, dword [edi]
push ecx
push ecx
fstp dword [esp + 4]
lea ecx, [ebp - 4]
fldz
fstp dword [esp]
push 0
push 0
push ecx
mov ecx, edi
call dword [eax + 0x38]
lea eax, [ebp - 0xec]
push eax
mov ecx, edi
call fcn.70d2c617
fld dword [ebp + 4]
xor edi, edi
push ecx
fstp dword [esp]
mov dword [ebp + 0x3c], edi
mov dword [ebp + 0x40], edi
call fcn.70d52b9b
fld dword [ebp]
push edi
push ecx
push ecx
fstp dword [esp + 4]
lea ecx, [ebp - 0xc4]
fld dword [ebp - 4]
mov dword [ebp + 0x44], eax
fstp dword [esp]
mov dword [ebp + 0x48], 1
call fcn.70d5b1f3
fld dword [ebp]
push edi
fchs
push ecx
push ecx
fstp dword [esp + 4]
lea ecx, [ebp - 0x214]
fld dword [ebp - 4]
fchs
fstp dword [esp]
call fcn.70d5b1f3
push dword [esi + 0x54]
lea eax, [ebp - 0x24]
push eax
lea eax, [ebp + 0x20]
push eax
lea ecx, [esi - 0xc]
call fcn.70da8578
test eax, eax
jne 0x70e16902
mov edi, dword [ebp + 0x7c]
push 0x26200a
lea eax, [ebp + 0x50]
push eax
lea eax, [edi - 0xc]
push eax
lea eax, [ebp + 0x3c]
push eax
lea eax, [ebp - 0x214]
push eax
mov eax, dword [ebp + 0x6c]
push dword [eax + 0x2c]
push dword [eax + 0x28]
call fcn.70daddd8
mov ecx, dword [ebp + 0x7c]
add edi, 0x34
lea esi, [ebp - 0x90]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
mov dword [ebp + 0x58], eax
lea eax, [ebp - 0x264]
push eax
add ecx, 8
movsd dword es:[edi], dword [esi]
call fcn.70d521d2
cmp dword [ebp + 0x58], 0
mov eax, dword [ebp + 0x7c]
mov ecx, dword [ebp - 0x1c]
mov dword [eax + 0xb8], ecx
mov ecx, dword [ebp - 0x18]
mov dword [eax + 0xbc], ecx
mov ecx, dword [ebp - 0x14]
mov dword [eax + 0xc0], ecx
mov ecx, dword [ebp - 0x10]
mov dword [eax + 0xc4], ecx
jne 0x70e17a6c
push dword [ebp + 0x70]
push dword [ebp + 0x6c]
call fcn.70e14f32
xor edi, edi
cmp eax, edi
mov dword [ebp + 0x7c], eax
je 0x70e16e98
mov ecx, dword [ebp + 0x50]
push edi
push edi
lea eax, [ebp - 0x6c]
push eax
push 0x26200a
push 1
push edi
call fcn.70d3d68d
mov esi, eax
cmp esi, edi
jne 0x70e16e8a
mov eax, dword [ebx]
push edi
lea ecx, [ebp + 0x70]
push ecx
lea ecx, [ebp + 0x38]
push ecx
push dword [ebp + 0x74]
mov ecx, ebx
push dword [ebp + 0x6c]
mov dword [ebp + 0x70], edi
push dword [ebp + 0x7c]
call dword [eax + 0x14]
cmp dword [ebx + 0x78], edi
je 0x70e16d9a
mov ecx, dword [ebp + 0x78]
cmp dword [ecx + 0x44], 4
jne 0x70e16d9a
call fcn.70e1579d
test eax, eax
je 0x70e16d9a
push dword [ebp + 0x78]
mov eax, dword [ebx]
push dword [ebp + 0x6c]
mov ecx, ebx
push dword [ebp + 0x7c]
call dword [eax + 0x68]
fld dword [ebp + 8]
push ecx
fstp dword [esp]
lea eax, [ebp - 0xc4]
push eax
push edi
push 0xf00021
lea eax, [ebp - 0x6c]
push eax
push dword [ebp + 0x7c]
mov ecx, ebx
call fcn.70e16555
push dword [ebp + 0x7c]
mov esi, eax
mov eax, dword [ebx]
mov ecx, ebx
call dword [eax + 0x6c]
jmp 0x70e16e6d
fld dword [ebp + 8]
push ecx
fstp dword [esp]
lea eax, [ebp - 0xc4]
push eax
push 1
push 0x5a0049
lea eax, [ebp - 0x6c]
push eax
push dword [ebp + 0x7c]
mov ecx, ebx
call fcn.70e16555
mov esi, eax
cmp esi, edi
jne 0x70e16e6d
push edi
push 2
push dword [ebp + 0x5c]
lea ecx, [ebp - 0x418]
push dword [ebp + 0x78]
call fcn.70d06a36
cmp dword [ebp - 0x418], 0x47764331
jne 0x70e16e62
cmp dword [ebx + 0x78], edi
je 0x70e16df6
push 4
call dword [sym.imp.GDI32.dll_GetStockObject]
jmp 0x70e16e07
movzx eax, byte [ebx + 0x84]
push 1
push eax
mov ecx, ebx
call fcn.70e14f7e
mov edi, dword [sym.imp.GDI32.dll_SetROP2]
push 9
push dword [ebp + 0x7c]
mov esi, eax
call edi
push esi
push dword [ebp + 0x7c]
lea ecx, [ebp - 0x418]
mov dword [ebp + 0x74], eax
call fcn.70d08b79
push dword [ebp + 0x74]
mov esi, eax
push dword [ebp + 0x7c]
neg esi
sbb esi, esi
inc esi
call edi
test esi, esi
jne 0x70e16e60
fld dword [ebp + 8]
push ecx
fstp dword [esp]
lea eax, [ebp - 0xc4]
push eax
push 1
push 0x5a0049
lea eax, [ebp - 0x6c]
push eax
push dword [ebp + 0x7c]
mov ecx, ebx
call fcn.70e16555
mov esi, eax
xor edi, edi
lea ecx, [ebp - 0x418]
call fcn.70d06da2
push dword [ebp + 0x70]
mov eax, dword [ebx]
push dword [ebp + 0x38]
mov ecx, ebx
push dword [ebp + 0x7c]
call dword [eax + 0x18]
mov ecx, dword [ebp + 0x50]
push edi
lea eax, [ebp - 0x6c]
push eax
call fcn.70d3d3b4
mov ecx, dword [ebp + 0x6c]
push edi
push dword [ebp + 0x7c]
call fcn.70d5b752
jmp 0x70e16e9b
mov esi, dword [ebp + 0x58]
mov ecx, dword [ebp + 0x50]
mov eax, dword [ecx]
call dword [eax + 0x20]
mov eax, esi
jmp 0x70e17a6f
mov esi, dword [ebp + 0x74]
mov ecx, dword [esi + 8]
lea eax, [ecx - 0x100]
cdq
push 5
pop edi
idiv edi
add eax, 0x100
cmp eax, ecx
mov edx, eax
jl 0x70e16ec9
mov edx, ecx
mov edi, 0x400
cmp edx, edi
jge 0x70e16ee0
cmp eax, ecx
jge 0x70e16edb
mov dword [ebp + 0x44], eax
jmp 0x70e16ee3
mov dword [ebp + 0x44], ecx
jmp 0x70e16ee3
mov dword [ebp + 0x44], edi
mov ecx, dword [esi + 0xc]
lea eax, [ecx - 0x100]
cdq
push 5
pop esi
idiv esi
add eax, 0x100
cmp eax, ecx
mov edx, eax
jl 0x70e16eff
mov edx, ecx
cmp edx, edi
jge 0x70e16f10
cmp eax, ecx
jl 0x70e1695f
mov dword [ebp + 0x48], ecx
jmp 0x70e16f28
mov dword [ebp + 0x48], edi
jmp 0x70e16f28
mov dword [ebp + 0x48], ecx
jmp 0x70e16f1d
mov dword [ebp + 0x44], ecx
xor eax, eax
cmp dword [ebx + 0x14], edx
sete al
mov dword [ebp + 0x54], eax
cmp dword [ebx + 0x78], 0
jne 0x70e16f3e
cmp dword [ebx + 0x14], 1
je 0x70e16f3e
cmp dword [ebp + 0x54], 0
je 0x70e17380
push dword [ebp + 0x70]
push dword [ebp + 0x6c]
call fcn.70e14f32
xor edi, edi
cmp eax, edi
mov dword [ebp + 0x60], eax
je 0x70e17380
mov eax, dword [ebp + 0x74]
fldz
fstp dword [ebp + 0x20]
lea ecx, [ebp - 0xc4]
fldz
mov dword [ebp + 0x3c], edi
fstp dword [ebp + 0x24]
mov dword [ebp + 0x40], edi
fild dword [ebp + 0x44]
fstp dword [ebp + 0x28]
fild dword [ebp + 0x48]
fstp dword [ebp + 0x2c]
fild dword [eax]
fstp dword [ebp - 0x1c]
fild dword [eax + 4]
fstp dword [ebp - 0x18]
fild dword [eax + 8]
fstp dword [ebp - 0x14]
fild dword [eax + 0xc]
fstp dword [ebp - 0x10]
call fcn.70d51c8a
lea eax, [ebp - 0x1c]
push eax
lea eax, [ebp + 0x20]
push eax
lea ecx, [ebp - 0xc4]
call fcn.70d52626
lea eax, [ebp - 0xc4]
push eax
push dword [ebp + 0x5c]
lea eax, [ebp - 0xc4]
push eax
call fcn.70d54413
mov ecx, dword [ebp + 0x7c]
add ecx, 0xfffffff4
mov eax, dword [ecx]
call dword [eax + 0x24]
mov esi, eax
cmp esi, edi
mov dword [ebp + 0x34], esi
je 0x70e17039
cmp dword [ebx + 0x78], edi
jne 0x70e16fe9
inc edi
cmp dword [ebx + 0x14], edi
jne 0x70e16fe9
mov eax, dword [esi]
mov ecx, esi
call dword [eax + 0x58]
mov dword [ebx + 0x78], edi
cmp dword [ebp + 0x4c], 4
je 0x70e16ff5
cmp dword [ebp + 0x4c], 5
jne 0x70e17003
and dword [esi + 8], 0
mov dword [esi + 0x14c], 0x3f866666
push 0x26200a
lea eax, [ebp + 0x50]
push eax
push esi
lea eax, [ebp + 0x3c]
push eax
lea eax, [ebp - 0xc4]
push eax
mov eax, dword [ebp + 0x6c]
push dword [eax + 0x2c]
push dword [eax + 0x28]
call fcn.70daddd8
mov edi, eax
mov eax, dword [esi]
push 1
mov ecx, esi
mov dword [ebp + 0x58], edi
call dword [eax]
and dword [ebp + 0x34], 0
jmp 0x70e1703f
push 3
pop edi
mov dword [ebp + 0x58], edi
test edi, edi
jne 0x70e1735f
mov ecx, dword [ebp + 0x50]
test ecx, ecx
je 0x70e1735f
mov esi, dword [ebx + 0x14]
dec esi
neg esi
sbb esi, esi
xor eax, eax
push eax
push eax
lea edx, [ebp - 0x6c]
push edx
push 0x26200a
and esi, 0xfffffffc
push 1
add esi, 4
push eax
or esi, 2
call fcn.70d3d68d
test eax, eax
jne 0x70e17343
mov eax, dword [ebx]
push edi
lea ecx, [ebp + 0x7c]
push ecx
lea ecx, [ebp + 0x70]
push ecx
push dword [ebp + 0x74]
mov ecx, ebx
push dword [ebp + 0x6c]
mov dword [ebp + 0x7c], edi
push dword [ebp + 0x60]
call dword [eax + 0x14]
cmp dword [ebp + 0x54], edi
je 0x70e171da
cmp dword [ebp + 0x48], 1
je 0x70e170b5
cmp dword [ebp + 0x44], 1
jne 0x70e171da
cmp dword [ebx + 0x78], edi
je 0x70e170d1
mov ecx, dword [ebp + 0x78]
cmp dword [ecx + 0x44], 4
jne 0x70e170cc
call fcn.70e1579d
test eax, eax
jne 0x70e170d6
cmp dword [ebx + 0x78], edi
jne 0x70e17113
cmp dword [ebx + 0x40], edi
jne 0x70e17113
push dword [ebp + 0x78]
mov eax, dword [ebx]
push dword [ebp + 0x6c]
mov ecx, ebx
push dword [ebp + 0x60]
call dword [eax + 0x68]
push 0
push 0xf00021
push dword [ebp + 0x74]
lea eax, [ebp + 0x3c]
push eax
lea eax, [ebp - 0x6c]
push eax
push dword [ebp + 0x60]
mov ecx, ebx
call fcn.70e153db
push dword [ebp + 0x60]
mov edi, eax
mov eax, dword [ebx]
mov ecx, ebx
call dword [eax + 0x6c]
jmp 0x70e17325
push 1
push 0x5a0049
push dword [ebp + 0x74]
lea eax, [ebp + 0x3c]
push eax
lea eax, [ebp - 0x6c]
push eax
push dword [ebp + 0x60]
mov ecx, ebx
call fcn.70e153db
mov edi, eax
test edi, edi
jne 0x70e17325
push eax
push esi
push dword [ebp + 0x5c]
lea ecx, [ebp - 0x418]
push dword [ebp + 0x78]
call fcn.70d06a36
cmp dword [ebp - 0x418], 0x47764331
jne 0x70e171ca
cmp dword [ebx + 0x78], edi
je 0x70e17167
push 4
call dword [sym.imp.GDI32.dll_GetStockObject]
jmp 0x70e17178
movzx eax, byte [ebx + 0x84]
push 1
push eax
mov ecx, ebx
call fcn.70e14f7e
mov esi, dword [sym.imp.GDI32.dll_SetROP2]
push 9
push dword [ebp + 0x60]
mov edi, eax
call esi
push edi
push dword [ebp + 0x60]
lea ecx, [ebp - 0x418]
mov dword [ebp + 0x78], eax
call fcn.70d08b79
push dword [ebp + 0x78]
mov edi, eax
push dword [ebp + 0x60]
neg edi
sbb edi, edi
inc edi
call esi
test edi, edi
jne 0x70e171ca
push 1
push 0x5a0049
push dword [ebp + 0x74]
lea eax, [ebp + 0x3c]
push eax
lea eax, [ebp - 0x6c]
push eax
push dword [ebp + 0x60]
mov ecx, ebx
call fcn.70e153db
mov edi, eax
lea ecx, [ebp - 0x418]
call fcn.70d06da2
jmp 0x70e17325
push dword [ebp + 0x78]
mov eax, dword [ebx]
push dword [ebp + 0x6c]
mov ecx, ebx
push dword [ebp + 0x60]
call dword [eax + 0x68]
push edi
lea ecx, [ebp - 0x19c]
call fcn.70d51ccd
push dword [ebp - 0x68]
mov ecx, dword [ebp + 0x50]
push dword [ebp - 0x6c]
lea eax, [ebp - 0x19c]
push eax
call fcn.70d3fe90
mov eax, dword [ebp - 0x5c]
mov ecx, dword [ebp - 0x68]
mov dword [ebp - 0x14c], eax
mov eax, dword [ebp - 0x6c]
mov dword [ebp - 0x198], eax
imul eax, ecx
mov edx, dword [ebp - 0x64]
lea eax, [eax + eax*2]
mov dword [ebp - 0x18c], eax
mov eax, dword [ebx + 0x14]
dec eax
neg eax
sbb eax, eax
and eax, 0xfffffffc
add eax, 4
or eax, 2
cmp dword [ebp + 0x54], edi
mov dword [ebp - 0x194], ecx
mov dword [ebp - 0x144], edx
mov dword [ebp - 0x190], 0x26200a
mov dword [ebp - 0x17c], 3
je 0x70e17273
movzx esi, byte [ebx + 0x3d]
movzx ecx, byte [ebx + 0x3c]
add esi, ecx
sar esi, 1
jmp 0x70e17276
or esi, 0xffffffff
xor ecx, ecx
cmp dword [0x70e6c198], ecx
sete cl
push ecx
push esi
push eax
lea eax, [ebp + 0x3c]
push eax
lea eax, [ebp - 0x19c]
push eax
push dword [ebp + 0x60]
lea ecx, [ebp - 0x8b0]
call fcn.70e1cb1a
xor edi, edi
inc edi
cmp dword [ebp - 0x8b0], 0x47764331
jne 0x70e17305
mov eax, dword [ebp + 0x74]
mov ecx, dword [eax]
mov edx, dword [eax + 4]
mov esi, dword [eax + 8]
mov eax, dword [eax + 0xc]
add eax, edx
push 0xcc0020
mov dword [ebp - 0x84], eax
push 0
lea eax, [ebp - 0x98]
push eax
push dword [ebp + 0x60]
add esi, ecx
mov dword [ebp - 0x98], ecx
mov dword [ebp - 0x88], ecx
lea ecx, [ebp - 0x8b0]
mov dword [ebp - 0x94], edx
mov dword [ebp - 0x90], esi
mov dword [ebp - 0x8c], edx
call fcn.70e1d3b0
mov edi, eax
neg edi
sbb edi, edi
inc edi
push dword [ebp + 0x60]
mov eax, dword [ebx]
mov ecx, ebx
call dword [eax + 0x6c]
lea ecx, [ebp - 0x8b0]
call fcn.70e1d892
lea ecx, [ebp - 0x19c]
call fcn.70d66b8c
push dword [ebp + 0x7c]
mov eax, dword [ebx]
push dword [ebp + 0x70]
mov ecx, ebx
push dword [ebp + 0x60]
call dword [eax + 0x18]
mov ecx, dword [ebp + 0x50]
push 0
lea eax, [ebp - 0x6c]
push eax
call fcn.70d3d3b4
mov ecx, dword [ebp + 0x50]
mov eax, dword [ecx]
call dword [eax + 0x20]
mov ecx, dword [ebp + 0x6c]
push 0
push dword [ebp + 0x60]
call fcn.70d5b752
mov eax, edi
jmp 0x70e17a6f
mov ecx, dword [ebp + 0x6c]
push 0
push dword [ebp + 0x60]
call fcn.70d5b752
mov dword [ebp - 0xc4], 0x70d66920
mov dword [ebp - 0xc0], 0x4c494146
mov eax, dword [ebx + 0x14]
mov esi, dword [ebp + 0x7c]
mov edi, dword [ebp + 0x70]
xor ecx, ecx
sub eax, ecx
mov dword [ebp + 0x30], ecx
je 0x70e17410
dec eax
je 0x70e1739d
push 6
pop eax
jmp 0x70e17a6f
mov eax, dword [ebx + 0x74]
xor edx, edx
cmp eax, ecx
sete dl
cmp eax, ecx
mov dword [ebp + 0x54], edx
je 0x70e173f0
cmp dword [ebx + 0x78], ecx
mov dword [ebp + 0x60], 2
jne 0x70e173c1
mov dword [ebp + 0x60], 0x42
cmp dword [ebx + 0x108], 1
jne 0x70e173d7
cmp dword [ebx + 0x10c], 1
je 0x70e1745c
push dword [ebp + 0x5c]
lea ecx, [ebp - 0x23c]
mov dword [ebp + 0x30], 1
call fcn.70d521d2
xor ecx, ecx
jmp 0x70e1745c
cmp dword [ebx + 0x7c], ecx
je 0x70e173fe
mov dword [ebp + 0x60], 5
jmp 0x70e1745c
mov eax, dword [ebx + 0x78]
neg eax
sbb eax, eax
and eax, 0xffffffd0
add eax, 0x31
mov dword [ebp + 0x60], eax
jmp 0x70e1745c
cmp dword [ebx + 0x74], ecx
je 0x70e1742a
cmp dword [ebx + 0x78], ecx
mov dword [ebp + 0x60], 2
jne 0x70e17455
mov dword [ebp + 0x60], 0x42
jmp 0x70e17448
cmp dword [ebx + 0x7c], ecx
je 0x70e17438
mov dword [ebp + 0x60], 5
jmp 0x70e17448
mov eax, dword [ebx + 0x78]
neg eax
sbb eax, eax
and eax, 0xffffffbe
add eax, 0x43
mov dword [ebp + 0x60], eax
cmp dword [ebx + 0x78], ecx
jne 0x70e17455
cmp dword [ebx + 0x7c], ecx
mov dword [ebp + 0x54], ecx
je 0x70e1745c
mov dword [ebp + 0x54], 1
mov eax, dword [edi + 0x5c]
mov dword [ebp + 0xc], eax
mov eax, dword [ebx + 0x18]
mov dword [ebp - 0x9c], eax
mov eax, dword [ebx + 0x1c]
mov dword [ebp - 0x20], eax
mov eax, dword [esi]
cmp eax, 2
jne 0x70e17513
lea ecx, [esi - 0xc]
call fcn.70d33af5
test eax, eax
je 0x70e175c6
push dword [ebp + 0x5c]
lea ecx, [ebp - 0xec]
call fcn.70d52e9d
lea eax, [ebp - 0xec]
push eax
add esi, 8
push esi
lea eax, [ebp - 0xec]
push eax
call fcn.70d54413
fld1
fstp dword [ebp - 4]
push 2
fldz
lea eax, [ebp - 4]
fstp dword [ebp]
push eax
fldz
lea ecx, [ebp - 0xec]
fstp dword [ebp + 4]
fld1
fstp dword [ebp + 8]
call fcn.70d12ce5
fld dword [ebp]
fmul dword [ebp]
push ecx
fld dword [ebp - 4]
fmul dword [ebp - 4]
faddp st(1)
fsqrt
fstp dword [esp]
call fcn.70d520d5
fld dword [ebp + 8]
fmul dword [ebp + 8]
push ecx
fld dword [ebp + 4]
mov dword [ebx + 0x18], eax
fmul dword [ebp + 4]
faddp st(1)
fsqrt
fstp dword [esp]
call fcn.70d520d5
mov dword [ebx + 0x1c], eax
jmp 0x70e175c6
cmp eax, 1
jne 0x70e17538
fld dword [edi + 0x14]
push ecx
fmul dword [0x70d05250]
fstp dword [esp]
call fcn.70d520c6
mov dword [ebx + 0x18], eax
fld dword [edi + 0x18]
fmul dword [0x70d05250]
jmp 0x70e175a9
mov eax, dword [ebp + 0x4c]
cmp eax, ecx
je 0x70e175c6
cmp eax, 1
je 0x70e175b7
cmp eax, 2
je 0x70e175a6
jle 0x70e175c6
cmp eax, 5
jg 0x70e175c6
mov edi, dword [ebp + 0x74]
fild dword [edi + 8]
push ecx
fmul dword [0x70d91a08]
fstp dword [esp]
call fcn.70d52b9b
mov dword [ebx + 0x18], eax
fild dword [edi + 0xc]
push ecx
fmul dword [0x70d91a08]
fstp dword [esp]
call fcn.70d52b9b
cmp dword [ebp + 0x4c], 3
mov dword [ebx + 0x1c], eax
je 0x70e175c6
lea ecx, [esi - 0xc]
mov eax, dword [ecx]
call dword [eax + 0x24]
test eax, eax
mov dword [ebp + 0x34], eax
je 0x70e175c6
and dword [eax + 8], 0
mov dword [eax + 0x14c], 0x3f866666
jmp 0x70e175c6
fld dword [edi + 0x18]
push ecx
fstp dword [esp]
call fcn.70d520c6
jmp 0x70e1750b
fld dword [edi + 0x14]
push ecx
fstp dword [esp]
call fcn.70d520c6
mov dword [ebx + 0x18], eax
xor eax, eax
inc eax
cmp dword [ebx + 0x18], eax
jge 0x70e175d1
mov dword [ebx + 0x18], eax
cmp dword [ebx + 0x1c], eax
jge 0x70e175d9
mov dword [ebx + 0x1c], eax
mov edi, dword [ebx + 0x18]
cmp edi, eax
jne 0x70e175fe
mov ecx, dword [ebx + 0x1c]
cmp ecx, eax
jne 0x70e175fe
mov eax, dword [ebp - 0x78]
mov esi, dword [ebp - 0x7c]
mov dword [ebp + 0x14], eax
mov eax, dword [ebp - 0x74]
mov dword [ebp + 0x18], eax
mov eax, dword [ebp - 0x70]
mov dword [ebp + 0x1c], eax
jmp 0x70e1764c
mov eax, dword [ebp - 0x7c]
cdq
idiv edi
mov ecx, dword [ebx + 0x1c]
mov esi, edi
imul esi, eax
mov eax, dword [ebp - 0x78]
mov dword [ebp + 0x38], edx
cdq
idiv ecx
mov edi, eax
mov eax, ecx
imul eax, edi
mov edi, dword [ebp + 0x38]
mov dword [ebp + 0x14], eax
mov eax, dword [ebp - 0x74]
add eax, edi
mov edi, dword [ebp - 0x70]
mov dword [ebp + 0x18], eax
add edx, edi
mov edi, dword [ebx + 0x18]
mov dword [ebp + 0x1c], edx
cdq
idiv edi
mov eax, edi
sub eax, edx
add dword [ebp + 0x18], eax
mov eax, dword [ebp + 0x1c]
cdq
idiv ecx
mov eax, ecx
sub eax, edx
add dword [ebp + 0x1c], eax
mov eax, esi
cdq
idiv edi
mov dword [ebp + 0x10], esi
mov dword [ebp - 0x54], eax
mov eax, dword [ebp + 0x14]
cdq
idiv ecx
mov dword [ebp - 0x50], eax
mov eax, dword [ebp + 0x18]
cdq
idiv edi
mov dword [ebp - 0x4c], eax
mov eax, dword [ebp + 0x1c]
cdq
idiv ecx
cmp dword [ebp + 0x30], 0
mov dword [ebp - 0x48], eax
je 0x70e176f7
fild dword [ebp + 0x10]
push ecx
fidiv dword [ebx + 0x108]
fstp dword [esp]
call fcn.70d52b9b
fild dword [ebp + 0x14]
push ecx
mov dword [ebp + 0x10], eax
fidiv dword [ebx + 0x10c]
fstp dword [esp]
call fcn.70d52b9b
fild dword [ebp + 0x18]
push ecx
mov dword [ebp + 0x14], eax
fidiv dword [ebx + 0x108]
fstp dword [esp]
call fcn.70d52b9b
fild dword [ebp + 0x1c]
push ecx
mov dword [ebp + 0x18], eax
fidiv dword [ebx + 0x10c]
fstp dword [esp]
call fcn.70d52b9b
fild dword [ebx + 0x10c]
push 1
push ecx
push ecx
fdivr dword [0x70d522f8]
mov ecx, dword [ebp + 0x5c]
mov dword [ebp + 0x1c], eax
fstp dword [esp + 4]
fild dword [ebx + 0x108]
fdivr dword [0x70d522f8]
fstp dword [esp]
call fcn.70d5e502
mov ecx, dword [ebp + 0x5c]
lea eax, [ebp - 0x98]
push eax
call fcn.70d5454d
fild dword [ebx + 0x1c]
push 1
push ecx
fdivr dword [0x70d522f8]
push ecx
mov ecx, dword [ebp + 0x5c]
fstp dword [esp + 4]
fild dword [ebx + 0x18]
fdivr dword [0x70d522f8]
fstp dword [esp]
call fcn.70d5e502
mov ecx, dword [ebp + 0x5c]
lea eax, [ebp - 0xc]
push eax
call fcn.70d5454d
mov esi, dword [ebp + 0x6c]
xor edi, edi
push 2
mov dword [esi + 0xec], edi
lea eax, [ebp - 0x34]
pop ecx
fldz
fstp dword [eax + 4]
fldz
fstp dword [eax]
add eax, 8
dec ecx
jne 0x70e17748
fild dword [ebp - 0x54]
mov eax, dword [ebp - 0x54]
mov ecx, dword [ebp - 0x4c]
add ecx, eax
mov eax, dword [ebp - 0x50]
fstp dword [ebp - 0x34]
fild dword [ebp - 0x50]
mov dword [ebp + 0x6c], ecx
mov ecx, dword [ebp - 0x48]
add ecx, eax
fstp dword [ebp - 0x30]
fild dword [ebp + 0x6c]
mov dword [ebp + 0x6c], ecx
lea ecx, [ebp - 0x1ec]
fstp dword [ebp - 0x2c]
fild dword [ebp + 0x6c]
fstp dword [ebp - 0x28]
call fcn.70d51c8a
lea eax, [ebp - 0x1ec]
push eax
mov ecx, esi
call fcn.70dc29a0
push 2
lea eax, [ebp - 0x34]
push eax
lea ecx, [ebp - 0x1ec]
call fcn.70d52d84
fld dword [ebp - 0x2c]
fsub dword [ebp - 0x34]
mov eax, dword [ebp - 0x34]
mov dword [ebp - 0x44], eax
mov eax, dword [ebp - 0x30]
fst dword [ebp - 0x3c]
mov dword [ebp - 0x40], eax
fld dword [ebp - 0x28]
fsub dword [ebp - 0x30]
fstp dword [ebp - 0x38]
fcom dword [0x70d51be8]
fnstsw ax
test ah, 5
jp 0x70e177e9
fld dword [ebp - 0x34]
fadd st(1)
fstp dword [ebp - 0x44]
fchs
fstp dword [ebp - 0x3c]
jmp 0x70e177eb
fstp st(0)
fld dword [ebp - 0x38]
fcomp dword [0x70d51be8]
fnstsw ax
test ah, 5
jp 0x70e1780c
fld dword [ebp - 0x38]
fadd dword [ebp - 0x30]
fstp dword [ebp - 0x40]
fld dword [ebp - 0x38]
fchs
fstp dword [ebp - 0x38]
mov eax, dword [ebx]
lea ecx, [ebp + 0x10]
push ecx
lea ecx, [ebp - 0x54]
push ecx
push esi
mov ecx, ebx
call dword [eax + 0x50]
push dword [ebp + 0x70]
push esi
call fcn.70e14f32
cmp eax, edi
mov dword [ebp + 0x6c], eax
je 0x70e17a19
push dword [ebx + 0x1c]
lea eax, [ebx + 0xac]
push dword [ebx + 0x18]
lea ecx, [ebx + 0x9c]
push dword [ebp + 0x60]
push eax
push ecx
mov ecx, dword [ebp + 0xc]
call fcn.70e0d297
cmp eax, edi
mov dword [ebp + 0x58], eax
jne 0x70e17a0c
cmp dword [ebp + 0x54], edi
mov dword [ebp + 0x38], edi
mov dword [ebp + 0x4c], edi
je 0x70e1787c
push edi
lea eax, [ebp + 0x4c]
push eax
lea eax, [ebp + 0x38]
push eax
push dword [ebp + 0x74]
mov ecx, ebx
push esi
push dword [ebp + 0x6c]
call fcn.70e16409
cmp dword [ebx + 0x8c], edi
mov dword [ebx + 0x88], edi
jle 0x70e179ef
mov eax, dword [ebp + 0x60]
and eax, 0x1d
mov dword [ebp - 0x80], eax
cmp dword [ebp - 0x80], edi
je 0x70e17909
push 0
lea eax, [ebx + 0x9c]
lea edi, [esi + 0xf0]
push eax
mov ecx, edi
call fcn.70e153b2
mov ecx, dword [ebp + 0x5c]
and dword [esi + 0xec], 0
lea eax, [ebp - 0xc]
push eax
call fcn.70d10cfb
mov ecx, dword [ebp + 0xc]
lea eax, [ebx + 0x9c]
push eax
push 0
call fcn.70e0dd32
cmp dword [ebp + 0x34], 0
je 0x70e178e4
mov eax, dword [ebp + 0x34]
add eax, 0xc
jmp 0x70e178e7
mov eax, dword [ebp + 0x7c]
push eax
lea eax, [ebp - 0x44]
push eax
push 1
lea eax, [ebp - 0x54]
push eax
push dword [ebp + 0x70]
mov ecx, ebx
push esi
call fcn.70d53fee
mov ecx, edi
mov dword [ebp + 0x58], eax
call fcn.70e14ea9
xor edi, edi
mov ecx, dword [ebp + 0x5c]
lea eax, [ebp - 0x98]
push eax
mov dword [esi + 0xec], edi
call fcn.70d10cfb
cmp dword [ebp + 0x58], edi
jne 0x70e179ef
test byte [ebp + 0x60], 0x62
je 0x70e17996
mov ecx, dword [ebp + 0x7c]
cmp dword [ecx], 1
jne 0x70e17943
mov eax, dword [ebx + 0x18]
cmp eax, 1
je 0x70e17943
mov dword [ecx + 0x114], eax
push 1
lea edi, [ebx + 0xac]
push edi
lea ecx, [esi + 0xf0]
call fcn.70e15311
mov ecx, dword [ebp + 0xc]
push edi
push 1
call fcn.70e0dd32
mov edi, dword [ebp + 0x7c]
push edi
push dword [ebp + 0x78]
mov ecx, ebx
push dword [ebp + 0x74]
push dword [ebp + 0x70]
push esi
call fcn.70d2b894
cmp dword [edi], 1
mov dword [ebp + 0x58], eax
jne 0x70e1798f
xor eax, eax
inc eax
cmp dword [ebx + 0x18], eax
je 0x70e1798f
mov ecx, edi
mov dword [ecx + 0x114], eax
xor edi, edi
cmp dword [ebp + 0x58], edi
jne 0x70e179ef
push dword [ebp + 0x78]
mov edx, dword [ebx]
lea eax, [ebx + 0xac]
push eax
lea eax, [ebx + 0x9c]
push eax
push dword [ebp + 0x70]
mov ecx, ebx
push esi
push dword [ebp + 0x6c]
call dword [edx + 0x80]
cmp eax, edi
mov dword [ebp + 0x58], eax
jne 0x70e179ef
mov eax, dword [ebx + 0x94]
add dword [ebx + 0xa0], eax
mov eax, dword [ebx + 0x90]
add dword [ebx + 0xb0], eax
inc dword [ebx + 0x88]
mov eax, dword [ebx + 0x88]
cmp eax, dword [ebx + 0x8c]
jl 0x70e17897
cmp dword [ebp + 0x54], edi
je 0x70e17a04
push dword [ebp + 0x4c]
mov ecx, ebx
push dword [ebp + 0x38]
push dword [ebp + 0x6c]
call fcn.70e14e58
mov ecx, dword [ebp + 0xc]
call fcn.70e0d231
push edi
push dword [ebp + 0x6c]
mov ecx, esi
call fcn.70d5b752
jmp 0x70e17a2e
mov ecx, dword [ebp + 0x5c]
lea eax, [ebp - 0x98]
push eax
mov dword [esi + 0xec], edi
call fcn.70d10cfb
mov eax, dword [ebx]
push esi
mov ecx, ebx
call dword [eax + 0x54]
cmp dword [ebp + 0x30], edi
je 0x70e17a50
mov ecx, dword [ebp + 0x5c]
lea eax, [ebp - 0x23c]
push eax
mov dword [esi + 0xec], edi
call fcn.70d521d2
mov ecx, dword [ebp + 0x34]
cmp ecx, edi
je 0x70e17a5d
mov eax, dword [ecx]
push 1
call dword [eax]
mov eax, dword [ebp - 0x9c]
mov dword [ebx + 0x18], eax
mov eax, dword [ebp - 0x20]
mov dword [ebx + 0x1c], eax
mov eax, dword [ebp + 0x58]
pop edi
pop esi
pop ebx
add ebp, 0x64
leave
ret 0x14