Function at 0x10068750
Capabilities:
Enumerate pe sections

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x388
push edi
lea edi, [ebp - 0x388]
mov ecx, 0xe2
mov eax, 0xcccccccc
rep stosd dword es:[edi], eax
mov eax, dword [0x101f3540]
xor eax, ebp
mov dword [ebp - 4], eax
mov eax, dword [ebp + 0xc]
cmp dword [eax + 0x4c], 0
jg 0x10068780
int3
mov edx, dword [ebp + 0xc]
push edx
call fcn.100596e0
add esp, 4
mov eax, dword [ebp + 0xc]
mov dword [eax + 8], 0
mov ecx, dword [ebp + 0xc]
mov dword [ecx + 0x20], 0
mov edx, dword [ebp + 0xc]
mov dword [edx + 0x1c], 0
push ecx
xorps xmm0, xmm0
movss dword [esp], xmm0
push ecx
xorps xmm0, xmm0
movss dword [esp], xmm0
lea ecx, [ebp - 0x300]
call fcn.10045520
mov ecx, dword [eax]
mov edx, dword [eax + 4]
mov eax, dword [ebp + 0xc]
mov dword [eax + 0x24], ecx
mov dword [eax + 0x28], edx
push ecx
xorps xmm0, xmm0
movss dword [esp], xmm0
push ecx
xorps xmm0, xmm0
movss dword [esp], xmm0
lea ecx, [ebp - 0x308]
call fcn.10045520
mov ecx, dword [eax]
mov edx, dword [eax + 4]
mov eax, dword [ebp + 0xc]
mov dword [eax + 0x2c], ecx
mov dword [eax + 0x30], edx
mov ecx, dword [ebp + 0xc]
call fcn.100540c0
lea ecx, [ebp - 0x14]
call fcn.10069e70
lea ecx, [ebp - 0x28]
call fcn.10069e40
mov ecx, dword [ebp + 0xc]
mov edx, dword [ecx + 0x4c]
push edx
lea ecx, [ebp - 0x14]
call fcn.1006a800
mov eax, dword [ebp + 0xc]
mov ecx, dword [eax + 0x34]
push ecx
lea ecx, [ebp - 0x28]
call fcn.1006a7b0
lea ecx, [ebp - 0x14]
call fcn.1006a8c0
push eax
push 0
mov edx, dword [ebp - 0xc]
push edx
call fcn.100f8530
add esp, 0xc
lea ecx, [ebp - 0x28]
call fcn.1006a8a0
push eax
push 0
mov eax, dword [ebp - 0x20]
push eax
call fcn.100f8530
add esp, 0xc
mov dword [ebp - 0x30], 0
jmp 0x10068876
mov ecx, dword [ebp - 0x30]
add ecx, 1
mov dword [ebp - 0x30], ecx
mov edx, dword [ebp + 0xc]
mov eax, dword [ebp - 0x30]
cmp eax, dword [edx + 0x4c]
jge 0x10068a86
mov ecx, dword [ebp - 0x30]
push ecx
lea ecx, [ebp - 0x14]
call fcn.1006a0b0
mov dword [ebp - 0x34], eax
mov edx, dword [ebp + 0xc]
add edx, 0x4c
mov dword [ebp - 0x324], edx
mov eax, dword [ebp - 0x30]
push eax
mov ecx, dword [ebp - 0x324]
call fcn.100653c0
mov dword [ebp - 0x38], eax
mov ecx, dword [ebp - 0x34]
mov dword [ebp - 0x3c], ecx
mov edx, dword [ebp - 0x38]
cmp dword [edx + 0x74], 0
je 0x100688e1
mov eax, dword [ebp - 0x38]
mov ecx, dword [eax + 0x74]
call fcn.10047270
movzx ecx, al
test ecx, ecx
je 0x100688e2
mov edx, dword [ebp - 0x38]
mov eax, dword [edx + 0x74]
mov ecx, dword [eax + 0x38]
cmp ecx, dword [ebp + 0xc]
je 0x100688e2
int3
mov eax, dword [ebp - 0x34]
mov dword [eax + 0x30], 0xffffffff
mov dword [ebp - 0x40], 0
jmp 0x100688fe
mov ecx, dword [ebp - 0x40]
add ecx, 1
mov dword [ebp - 0x40], ecx
mov edx, dword [ebp + 0xc]
mov eax, dword [ebp - 0x40]
cmp eax, dword [edx + 0x34]
jge 0x10068942
mov ecx, dword [ebp - 0x34]
cmp dword [ecx + 0x30], 0xffffffff
jne 0x10068942
mov edx, dword [ebp + 0xc]
add edx, 0x34
mov dword [ebp - 0x328], edx
mov eax, dword [ebp - 0x40]
push eax
mov ecx, dword [ebp - 0x328]
call fcn.10046280
mov ecx, dword [ebp - 0x38]
mov edx, dword [ecx + 0x74]
cmp edx, dword [eax]
jne 0x10068940
mov eax, dword [ebp - 0x34]
mov ecx, dword [ebp - 0x40]
mov dword [eax + 0x30], ecx
jmp 0x100688f5
mov edx, dword [ebp - 0x34]
cmp dword [edx + 0x30], 0xffffffff
jne 0x1006894c
int3
mov ecx, dword [ebp - 0x34]
cmp dword [ecx + 0x30], 0xffffffff
jne 0x10068977
mov byte [ebp - 0x309], 0
lea ecx, [ebp - 0x28]
call fcn.10069f10
lea ecx, [ebp - 0x14]
call fcn.10069f50
mov al, byte [ebp - 0x309]
jmp 0x10069adc
mov edx, dword [ebp + 0x10]
push edx
mov eax, dword [ebp - 0x38]
push eax
mov ecx, dword [ebp + 8]
push ecx
mov ecx, dword [ebp - 0x3c]
call fcn.10067520
movzx edx, al
test edx, edx
jne 0x100689b4
mov byte [ebp - 0x30a], 0
lea ecx, [ebp - 0x28]
call fcn.10069f10
lea ecx, [ebp - 0x14]
call fcn.10069f50
mov al, byte [ebp - 0x30a]
jmp 0x10069adc
mov eax, dword [ebp - 0x34]
mov ecx, dword [eax + 0x30]
push ecx
lea ecx, [ebp - 0x28]
call fcn.1006a080
mov dword [ebp - 0x44], eax
mov edx, dword [ebp - 0x38]
cmp dword [edx + 0x30], 0
je 0x100689dd
mov eax, dword [ebp - 0x38]
mov ecx, dword [eax + 0x30]
mov dword [ebp - 0x32c], ecx
jmp 0x100689eb
mov ecx, dword [ebp + 0xc]
call fcn.10054440
mov dword [ebp - 0x32c], eax
mov edx, dword [ebp - 0x34]
mov eax, dword [ebp - 0x32c]
mov dword [edx + 0x2c], eax
mov ecx, dword [ebp - 0x34]
mov edx, dword [ecx + 0x2c]
mov dword [ebp - 0x48], edx
jmp 0x10068a0b
mov eax, dword [ebp - 0x48]
add eax, 4
mov dword [ebp - 0x48], eax
mov ecx, 2
imul edx, ecx, 0
mov eax, dword [ebp - 0x48]
movzx ecx, word [eax + edx]
test ecx, ecx
je 0x10068a58
mov edx, 2
shl edx, 0
mov eax, dword [ebp - 0x48]
movzx ecx, word [eax + edx]
test ecx, ecx
je 0x10068a58
mov edx, 2
shl edx, 0
mov eax, dword [ebp - 0x48]
movzx ecx, word [eax + edx]
push ecx
mov edx, dword [ebp - 0x34]
mov eax, dword [edx + 0x34]
push eax
call fcn.10069be0
add esp, 8
mov ecx, dword [ebp - 0x34]
mov dword [ecx + 0x34], eax
jmp 0x10068a02
mov edx, dword [ebp - 0x44]
mov eax, dword [edx]
add eax, 1
mov ecx, dword [ebp - 0x44]
mov dword [ecx], eax
mov edx, dword [ebp - 0x34]
mov eax, dword [edx + 0x34]
push eax
mov ecx, dword [ebp - 0x44]
mov edx, dword [ecx + 4]
push edx
call fcn.10069be0
add esp, 8
mov ecx, dword [ebp - 0x44]
mov dword [ecx + 4], eax
jmp 0x1006886d
mov dword [ebp - 0x4c], 0
mov dword [ebp - 0x50], 0
jmp 0x10068a9f
mov edx, dword [ebp - 0x50]
add edx, 1
mov dword [ebp - 0x50], edx
mov eax, dword [ebp - 0x50]
cmp eax, dword [ebp - 0x14]
jge 0x10068c4b
mov ecx, dword [ebp - 0x50]
push ecx
lea ecx, [ebp - 0x14]
call fcn.1006a0b0
mov dword [ebp - 0x54], eax
mov edx, dword [ebp - 0x54]
mov eax, dword [edx + 0x30]
push eax
lea ecx, [ebp - 0x28]
call fcn.1006a080
mov dword [ebp - 0x58], eax
mov ecx, dword [ebp - 0x54]
add ecx, 0x3c
mov dword [ebp - 0x330], ecx
mov edx, dword [ebp - 0x54]
mov eax, dword [edx + 0x34]
add eax, 1
push eax
mov ecx, dword [ebp - 0x330]
call fcn.10065730
nop
mov ecx, dword [ebp - 0x58]
add ecx, 0xc
call fcn.10048940
movzx ecx, al
test ecx, ecx
je 0x10068b22
mov edx, dword [ebp - 0x58]
add edx, 0xc
mov dword [ebp - 0x334], edx
mov eax, dword [ebp - 0x58]
mov ecx, dword [eax + 4]
add ecx, 1
push ecx
mov ecx, dword [ebp - 0x334]
call fcn.10065730
nop
mov edx, dword [ebp - 0x54]
mov eax, dword [edx + 0x2c]
mov dword [ebp - 0x5c], eax
jmp 0x10068b36
mov ecx, dword [ebp - 0x5c]
add ecx, 4
mov dword [ebp - 0x5c], ecx
mov edx, 2
imul eax, edx, 0
mov ecx, dword [ebp - 0x5c]
movzx edx, word [ecx + eax]
test edx, edx
je 0x10068c46
mov eax, 2
shl eax, 0
mov ecx, dword [ebp - 0x5c]
movzx edx, word [ecx + eax]
test edx, edx
je 0x10068c46
mov eax, 2
imul ecx, eax, 0
mov edx, dword [ebp - 0x5c]
movzx eax, word [edx + ecx]
mov dword [ebp - 0x60], eax
jmp 0x10068b81
mov ecx, dword [ebp - 0x60]
add ecx, 1
mov dword [ebp - 0x60], ecx
mov edx, 2
shl edx, 0
mov eax, dword [ebp - 0x5c]
movzx ecx, word [eax + edx]
cmp dword [ebp - 0x60], ecx
jg 0x10068c41
mov edx, dword [ebp - 0x58]
add edx, 0xc
mov dword [ebp - 0x338], edx
mov eax, dword [ebp - 0x60]
push eax
mov ecx, dword [ebp - 0x338]
call fcn.10065570
movzx ecx, al
test ecx, ecx
je 0x10068bbd
jmp 0x10068b78
mov edx, dword [ebp - 0x60]
push edx
mov eax, dword [ebp - 0x54]
mov ecx, dword [eax + 0x18]
push ecx
call sub.libfreetype_6.dll_FT_Get_Char_Index
add esp, 8
mov dword [ebp - 0x64], eax
cmp dword [ebp - 0x64], 0
jne 0x10068bdb
jmp 0x10068b78
mov edx, dword [ebp - 0x54]
mov eax, dword [edx + 0x38]
add eax, 1
mov ecx, dword [ebp - 0x54]
mov dword [ecx + 0x38], eax
mov edx, dword [ebp - 0x58]
mov eax, dword [edx + 8]
add eax, 1
mov ecx, dword [ebp - 0x58]
mov dword [ecx + 8], eax
mov edx, dword [ebp - 0x54]
add edx, 0x3c
mov dword [ebp - 0x33c], edx
push 1
mov eax, dword [ebp - 0x60]
push eax
mov ecx, dword [ebp - 0x33c]
call fcn.10065790
mov ecx, dword [ebp - 0x58]
add ecx, 0xc
mov dword [ebp - 0x340], ecx
push 1
mov edx, dword [ebp - 0x60]
push edx
mov ecx, dword [ebp - 0x340]
call fcn.10065790
mov eax, dword [ebp - 0x4c]
add eax, 1
mov dword [ebp - 0x4c], eax
jmp 0x10068b78
jmp 0x10068b2d
jmp 0x10068a96
mov dword [ebp - 0x68], 0
jmp 0x10068c5d
mov ecx, dword [ebp - 0x68]
add ecx, 1
mov dword [ebp - 0x68], ecx
mov edx, dword [ebp - 0x68]
cmp edx, dword [ebp - 0x14]
jge 0x10068d74
mov eax, dword [ebp - 0x68]
push eax
lea ecx, [ebp - 0x14]
call fcn.1006a0b0
mov dword [ebp - 0x6c], eax
mov ecx, dword [ebp - 0x6c]
add ecx, 0x48
mov dword [ebp - 0x344], ecx
mov edx, dword [ebp - 0x6c]
mov eax, dword [edx + 0x38]
push eax
mov ecx, dword [ebp - 0x344]
call fcn.1006a690
mov ecx, dword [ebp - 0x6c]
add ecx, 0x3c
call fcn.1006a360
mov dword [ebp - 0x70], eax
mov ecx, dword [ebp - 0x6c]
add ecx, 0x3c
call fcn.1006a3e0
mov dword [ebp - 0x74], eax
mov ecx, dword [ebp - 0x70]
mov dword [ebp - 0x78], ecx
jmp 0x10068cc3
mov edx, dword [ebp - 0x78]
add edx, 4
mov dword [ebp - 0x78], edx
mov eax, dword [ebp - 0x78]
cmp eax, dword [ebp - 0x74]
jae 0x10068d55
mov ecx, dword [ebp - 0x78]
mov edx, dword [ecx]
mov dword [ebp - 0x7c], edx
cmp dword [ebp - 0x7c], 0
je 0x10068d50
mov dword [ebp - 0x80], 0
jmp 0x10068cef
mov eax, dword [ebp - 0x80]
add eax, 1
mov dword [ebp - 0x80], eax
cmp dword [ebp - 0x80], 0x20
jge 0x10068d50
mov edx, 1
mov ecx, dword [ebp - 0x80]
shl edx, cl
and edx, dword [ebp - 0x7c]
je 0x10068d4e
push 0x1c
push 0
lea eax, [ebp - 0xa0]
push eax
call fcn.100f8530
add esp, 0xc
mov ecx, dword [ebp - 0x78]
sub ecx, dword [ebp - 0x70]
sar ecx, 2
shl ecx, 5
add ecx, dword [ebp - 0x80]
movzx edx, cx
mov dword [ebp - 0x8c], edx
mov eax, dword [ebp - 0x6c]
add eax, 0x48
mov dword [ebp - 0x348], eax
lea ecx, [ebp - 0xa0]
push ecx
mov ecx, dword [ebp - 0x348]
call fcn.1006a470
nop
jmp 0x10068ce6
jmp 0x10068cba
mov ecx, dword [ebp - 0x6c]
add ecx, 0x3c
call fcn.10065540
mov edx, dword [ebp - 0x6c]
mov eax, dword [ebp - 0x6c]
mov ecx, dword [edx + 0x48]
cmp ecx, dword [eax + 0x38]
je 0x10068d6f
int3
jmp 0x10068c54
mov dword [ebp - 0xa8], 0
jmp 0x10068d8f
mov eax, dword [ebp - 0xa8]
add eax, 1
mov dword [ebp - 0xa8], eax
mov ecx, dword [ebp - 0xa8]
cmp ecx, dword [ebp - 0x28]
jge 0x10068db6
mov edx, dword [ebp - 0xa8]
push edx
lea ecx, [ebp - 0x28]
call fcn.1006a080
add eax, 0xc
mov ecx, eax
call fcn.10065540
nop
jmp 0x10068d80
lea ecx, [ebp - 0x28]
call fcn.1006a380
lea ecx, [ebp - 0xb8]
call fcn.10064ca0
mov eax, dword [ebp - 0x4c]
push eax
lea ecx, [ebp - 0xb8]
call fcn.10067050
lea ecx, [ebp - 0xb8]
call fcn.10067180
push eax
push 0
mov ecx, dword [ebp - 0xb0]
push ecx
call fcn.100f8530
add esp, 0xc
mov dword [ebp - 0xc0], 0x40000
mov dword [ebp - 0xc4], 0
lea ecx, [ebp - 0xd4]
call fcn.10069e10
nop
push 0x40000
call fcn.100284c0
add esp, 4
mov dword [ebp - 0x310], eax
lea edx, [ebp - 0x310]
push edx
lea ecx, [ebp - 0xd4]
call fcn.1006a400
nop
mov dword [ebp - 0xdc], 0
mov dword [ebp - 0xe0], 0
mov dword [ebp - 0xe4], 0
jmp 0x10068e6a
mov eax, dword [ebp - 0xe4]
add eax, 1
mov dword [ebp - 0xe4], eax
mov ecx, dword [ebp - 0xe4]
cmp ecx, dword [ebp - 0x14]
jge 0x10069196
mov edx, dword [ebp - 0xe4]
push edx
lea ecx, [ebp - 0x14]
call fcn.1006a0b0
mov dword [ebp - 0xe8], eax
mov eax, dword [ebp + 0xc]
add eax, 0x4c
mov dword [ebp - 0x34c], eax
mov ecx, dword [ebp - 0xe4]
push ecx
mov ecx, dword [ebp - 0x34c]
call fcn.100653c0
mov dword [ebp - 0xec], eax
mov edx, dword [ebp - 0xe8]
cmp dword [edx + 0x38], 0
jne 0x10068ec0
jmp 0x10068e5b
mov eax, dword [ebp - 0xe0]
push eax
lea ecx, [ebp - 0xb8]
call fcn.10065420
mov ecx, dword [ebp - 0xe8]
mov dword [ecx + 0x28], eax
mov edx, dword [ebp - 0xe8]
mov eax, dword [ebp - 0xe0]
add eax, dword [edx + 0x38]
mov dword [ebp - 0xe0], eax
mov ecx, dword [ebp - 0xec]
movss xmm0, dword [ecx + 0x44]
ucomiss xmm0, dword [0x101a7344]
lahf
test ah, 0x44
jnp 0x10068f11
mov byte [ebp - 0x34d], 1
jmp 0x10068f18
mov byte [ebp - 0x34d], 0
mov dl, byte [ebp - 0x34d]
mov byte [ebp - 0xed], dl
movzx eax, byte [ebp - 0xed]
test eax, eax
je 0x10068f4f
mov ecx, dword [ebp - 0xec]
push ecx
movss xmm0, dword [ecx + 0x44]
movss dword [esp], xmm0
lea edx, [ebp - 0x1f4]
push edx
call fcn.10059cd0
add esp, 8
mov eax, dword [ebp + 0xc]
mov ecx, dword [eax + 0x10]
mov dword [ebp - 0x1fc], ecx
mov dword [ebp - 0x200], 0
jmp 0x10068f76
mov edx, dword [ebp - 0x200]
add edx, 1
mov dword [ebp - 0x200], edx
mov eax, dword [ebp - 0xe8]
mov ecx, dword [ebp - 0x200]
cmp ecx, dword [eax + 0x48]
jge 0x10069191
mov edx, dword [ebp - 0xe8]
add edx, 0x48
mov dword [ebp - 0x354], edx
mov eax, dword [ebp - 0x200]
push eax
mov ecx, dword [ebp - 0x354]
call fcn.1006a0e0
mov dword [ebp - 0x204], eax
mov ecx, dword [ebp - 0xe8]
mov dword [ebp - 0x358], ecx
mov edx, dword [ebp - 0x204]
mov eax, dword [edx + 0x14]
push eax
mov ecx, dword [ebp - 0x358]
call fcn.10067860
mov dword [ebp - 0x208], eax
cmp dword [ebp - 0x208], 0
jne 0x10068fe3
int3
cmp dword [ebp - 0x208], 0
jne 0x10068ff1
jmp 0x10068f67
mov edx, dword [ebp - 0xe8]
mov dword [ebp - 0x35c], edx
mov eax, dword [ebp - 0x204]
push eax
mov ecx, dword [ebp - 0x35c]
call fcn.10067920
mov dword [ebp - 0x20c], eax
cmp dword [ebp - 0x20c], 0
jne 0x1006901f
int3
mov edx, dword [ebp - 0x204]
mov eax, dword [ebp - 0x204]
mov ecx, dword [edx]
imul ecx, dword [eax + 4]
mov dword [ebp - 0x210], ecx
mov edx, dword [ebp - 0xc4]
add edx, dword [ebp - 0x210]
cmp edx, 0x40000
jle 0x1006907b
mov dword [ebp - 0xc4], 0
push 0x40000
call fcn.100284c0
add esp, 4
mov dword [ebp - 0x314], eax
lea eax, [ebp - 0x314]
push eax
lea ecx, [ebp - 0xd4]
call fcn.1006a400
nop
lea ecx, [ebp - 0xd4]
call fcn.1006a330
mov ecx, dword [eax]
add ecx, dword [ebp - 0xc4]
mov edx, dword [ebp - 0x204]
mov dword [edx + 0x18], ecx
mov eax, dword [ebp - 0xc4]
add eax, dword [ebp - 0x210]
mov dword [ebp - 0xc4], eax
mov ecx, dword [ebp - 0xe8]
mov dword [ebp - 0x360], ecx
movzx edx, byte [ebp - 0xed]
test edx, edx
je 0x100690ce
lea eax, [ebp - 0x1f4]
mov dword [ebp - 0x364], eax
jmp 0x100690d8
mov dword [ebp - 0x364], 0
mov ecx, dword [ebp - 0x364]
push ecx
mov edx, dword [ebp - 0x204]
mov eax, dword [edx]
push eax
mov ecx, dword [ebp - 0x204]
mov edx, dword [ecx + 0x18]
push edx
mov eax, dword [ebp - 0x20c]
push eax
mov ecx, dword [ebp - 0x360]
call fcn.100679f0
mov ecx, dword [ebp - 0x204]
mov edx, dword [ecx]
add edx, dword [ebp - 0x1fc]
mov eax, dword [ebp - 0x200]
shl eax, 4
mov ecx, dword [ebp - 0xe8]
mov ecx, dword [ecx + 0x28]
mov word [ecx + eax + 4], dx
mov edx, dword [ebp - 0x204]
mov eax, dword [edx + 4]
add eax, dword [ebp - 0x1fc]
mov ecx, dword [ebp - 0x200]
shl ecx, 4
mov edx, dword [ebp - 0xe8]
mov edx, dword [edx + 0x28]
mov word [edx + ecx + 6], ax
mov eax, dword [ebp - 0x200]
shl eax, 4
mov ecx, dword [ebp - 0xe8]
mov edx, dword [ecx + 0x28]
movzx eax, word [edx + eax + 4]
mov ecx, dword [ebp - 0x200]
shl ecx, 4
mov edx, dword [ebp - 0xe8]
mov edx, dword [edx + 0x28]
movzx ecx, word [edx + ecx + 6]
imul eax, ecx
add eax, dword [ebp - 0xdc]
mov dword [ebp - 0xdc], eax
jmp 0x10068f67
jmp 0x10068e5b
cvtsi2ss xmm0, dword [ebp - 0xdc]
push ecx
movss dword [esp], xmm0
call fcn.10067370
add esp, 4
fstp dword [ebp - 0x368]
movss xmm0, dword [ebp - 0x368]
cvttss2si edx, xmm0
add edx, 1
mov dword [ebp - 0x214], edx
mov eax, dword [ebp + 0xc]
mov dword [eax + 0x20], 0
mov ecx, dword [ebp + 0xc]
cmp dword [ecx + 0xc], 0
jle 0x100691eb
mov edx, dword [ebp + 0xc]
mov eax, dword [ebp + 0xc]
mov ecx, dword [eax + 0xc]
mov dword [edx + 0x1c], ecx
jmp 0x10069270
cvtsi2ss xmm0, dword [ebp - 0x214]
comiss xmm0, dword [0x101abc48]
jb 0x10069208
mov dword [ebp - 0x36c], 0x1000
jmp 0x10069264
cvtsi2ss xmm0, dword [ebp - 0x214]
comiss xmm0, dword [0x101abc44]
jb 0x10069225
mov dword [ebp - 0x370], 0x800
jmp 0x10069258
cvtsi2ss xmm0, dword [ebp - 0x214]
comiss xmm0, dword [0x101abc40]
jb 0x10069242
mov dword [ebp - 0x374], 0x400
jmp 0x1006924c
mov dword [ebp - 0x374], 0x200
mov edx, dword [ebp - 0x374]
mov dword [ebp - 0x370], edx
mov eax, dword [ebp - 0x370]
mov dword [ebp - 0x36c], eax
mov ecx, dword [ebp + 0xc]
mov edx, dword [ebp - 0x36c]
mov dword [ecx + 0x1c], edx
mov dword [ebp - 0x218], 0x8000
mov eax, dword [ebp + 0xc]
mov ecx, dword [ebp + 0xc]
mov edx, dword [eax + 0x1c]
sub edx, dword [ecx + 0x10]
mov dword [ebp - 0x21c], edx
lea ecx, [ebp - 0x22c]
call fcn.10069ea0
mov eax, dword [ebp - 0x21c]
push eax
lea ecx, [ebp - 0x22c]
call fcn.1006a850
mov ecx, dword [ebp - 0x22c]
push ecx
mov edx, dword [ebp - 0x224]
push edx
push 0x8000
mov eax, dword [ebp + 0xc]
mov ecx, dword [eax + 0x1c]
push ecx
lea edx, [ebp - 0x264]
push edx
call fcn.10067e70
add esp, 0x14
lea eax, [ebp - 0x264]
push eax
mov ecx, dword [ebp + 0xc]
push ecx
call fcn.100597c0
add esp, 8
mov dword [ebp - 0x26c], 0
jmp 0x10069300
mov edx, dword [ebp - 0x26c]
add edx, 1
mov dword [ebp - 0x26c], edx
mov eax, dword [ebp - 0x26c]
cmp eax, dword [ebp - 0x14]
jge 0x100693ea
mov ecx, dword [ebp - 0x26c]
push ecx
lea ecx, [ebp - 0x14]
call fcn.1006a0b0
mov dword [ebp - 0x270], eax
mov edx, dword [ebp - 0x270]
cmp dword [edx + 0x38], 0
jne 0x10069332
jmp 0x100692f1
mov eax, dword [ebp - 0x270]
mov ecx, dword [eax + 0x38]
push ecx
mov edx, dword [ebp - 0x270]
mov eax, dword [edx + 0x28]
push eax
lea ecx, [ebp - 0x264]
push ecx
call fcn.10067c40
add esp, 0xc
mov dword [ebp - 0x274], 0
jmp 0x10069370
mov edx, dword [ebp - 0x274]
add edx, 1
mov dword [ebp - 0x274], edx
mov eax, dword [ebp - 0x270]
mov ecx, dword [ebp - 0x274]
cmp ecx, dword [eax + 0x38]
jge 0x100693e5
mov edx, dword [ebp - 0x274]
shl edx, 4
mov eax, dword [ebp - 0x270]
mov ecx, dword [eax + 0x28]
cmp dword [ecx + edx + 0xc], 0
je 0x100693e0
mov edx, dword [ebp - 0x274]
shl edx, 4
mov eax, dword [ebp - 0x270]
mov ecx, dword [eax + 0x28]
movzx edx, word [ecx + edx + 0xa]
mov eax, dword [ebp - 0x274]
shl eax, 4
mov ecx, dword [ebp - 0x270]
mov ecx, dword [ecx + 0x28]
movzx eax, word [ecx + eax + 6]
add edx, eax
push edx
mov ecx, dword [ebp + 0xc]
mov edx, dword [ecx + 0x20]
push edx
call fcn.10069be0
add esp, 8
mov ecx, dword [ebp + 0xc]
mov dword [ecx + 0x20], eax
jmp 0x10069361
jmp 0x100692f1
mov edx, dword [ebp + 0xc]
mov eax, dword [edx + 4]
and eax, 1
je 0x10069406
mov ecx, dword [ebp + 0xc]
mov edx, dword [ecx + 0x20]
add edx, 1
mov dword [ebp - 0x378], edx
jmp 0x1006941b
mov eax, dword [ebp + 0xc]
mov ecx, dword [eax + 0x20]
push ecx
call fcn.100674c0
add esp, 4
mov dword [ebp - 0x378], eax
mov edx, dword [ebp + 0xc]
mov eax, dword [ebp - 0x378]
mov dword [edx + 0x20], eax
mov ecx, dword [ebp + 0xc]
cvtsi2ss xmm0, dword [ecx + 0x20]
movss xmm1, dword [0x101a7344]
divss xmm1, xmm0
push ecx
movss dword [esp], xmm1
mov edx, dword [ebp + 0xc]
cvtsi2ss xmm0, dword [edx + 0x1c]
movss xmm1, dword [0x101a7344]
divss xmm1, xmm0
push ecx
movss dword [esp], xmm1
lea ecx, [ebp - 0x31c]
call fcn.10045520
mov ecx, dword [eax]
mov edx, dword [eax + 4]
mov eax, dword [ebp + 0xc]
mov dword [eax + 0x24], ecx
mov dword [eax + 0x28], edx
mov ecx, dword [ebp + 0xc]
mov edx, dword [ebp + 0xc]
mov eax, dword [ecx + 0x1c]
imul eax, dword [edx + 0x20]
push eax
call fcn.100284c0
add esp, 4
mov ecx, dword [ebp + 0xc]
mov dword [ecx + 0x14], eax
mov edx, dword [ebp + 0xc]
mov eax, dword [ebp + 0xc]
mov ecx, dword [edx + 0x1c]
imul ecx, dword [eax + 0x20]
push ecx
push 0
mov edx, dword [ebp + 0xc]
mov eax, dword [edx + 0x14]
push eax
call fcn.100f8530
add esp, 0xc
mov dword [ebp - 0x278], 0
jmp 0x100694ca
mov ecx, dword [ebp - 0x278]
add ecx, 1
mov dword [ebp - 0x278], ecx
mov edx, dword [ebp - 0x278]
cmp edx, dword [ebp - 0x14]
jge 0x100699ff
mov eax, dword [ebp - 0x278]
push eax
lea ecx, [ebp - 0x14]
call fcn.1006a0b0
mov dword [ebp - 0x27c], eax
mov ecx, dword [ebp - 0x27c]
cmp dword [ecx + 0x38], 0
jne 0x100694fc
jmp 0x100694bb
mov edx, dword [ebp + 0xc]
add edx, 0x4c
mov dword [ebp - 0x37c], edx
mov eax, dword [ebp - 0x278]
push eax
mov ecx, dword [ebp - 0x37c]
call fcn.100653c0
mov dword [ebp - 0x280], eax
mov ecx, dword [ebp - 0x280]
mov edx, dword [ecx + 0x74]
mov dword [ebp - 0x284], edx
mov eax, dword [ebp - 0x27c]
movss xmm0, dword [eax + 4]
movss dword [ebp - 0x288], xmm0
mov ecx, dword [ebp - 0x27c]
movss xmm0, dword [ecx + 8]
movss dword [ebp - 0x28c], xmm0
push ecx
movss xmm0, dword [ebp - 0x28c]
movss dword [esp], xmm0
push ecx
movss xmm0, dword [ebp - 0x288]
movss dword [esp], xmm0
mov edx, dword [ebp - 0x280]
push edx
mov eax, dword [ebp - 0x284]
push eax
mov ecx, dword [ebp + 0xc]
push ecx
call fcn.10059750
add esp, 0x14
mov edx, dword [ebp - 0x280]
movss xmm0, dword [edx + 0x28]
movss dword [ebp - 0x290], xmm0
mov eax, dword [ebp - 0x284]
movss xmm0, dword [eax + 0x4c]
addss xmm0, dword [0x101a7340]
cvttss2si ecx, xmm0
cvtsi2ss xmm0, ecx
mov edx, dword [ebp - 0x280]
addss xmm0, dword [edx + 0x2c]
movss dword [ebp - 0x294], xmm0
mov eax, dword [ebp + 0xc]
mov ecx, dword [eax + 0x10]
mov dword [ebp - 0x298], ecx
mov dword [ebp - 0x29c], 0
jmp 0x100695f3
mov edx, dword [ebp - 0x29c]
add edx, 1
mov dword [ebp - 0x29c], edx
mov eax, dword [ebp - 0x27c]
mov ecx, dword [ebp - 0x29c]
cmp ecx, dword [eax + 0x38]
jge 0x100699ed
mov edx, dword [ebp - 0x27c]
add edx, 0x48
mov dword [ebp - 0x380], edx
mov eax, dword [ebp - 0x29c]
push eax
mov ecx, dword [ebp - 0x380]
call fcn.1006a0e0
mov dword [ebp - 0x2a0], eax
mov ecx, dword [ebp - 0x29c]
shl ecx, 4
mov edx, dword [ebp - 0x27c]
add ecx, dword [edx + 0x28]
mov dword [ebp - 0x2a4], ecx
mov eax, dword [ebp - 0x2a4]
cmp dword [eax + 0xc], 0
jne 0x10069654
int3
mov edx, dword [ebp - 0x2a0]
mov dword [ebp - 0x2a8], edx
mov eax, dword [ebp - 0x2a8]
mov ecx, dword [eax]
add ecx, dword [ebp - 0x298]
mov edx, dword [ebp - 0x2a4]
movzx eax, word [edx + 4]
cmp ecx, eax
jle 0x1006967d
int3
mov edx, dword [ebp - 0x2a8]
mov eax, dword [edx + 4]
add eax, dword [ebp - 0x298]
mov ecx, dword [ebp - 0x2a4]
movzx edx, word [ecx + 6]
cmp eax, edx
jle 0x1006969b
int3
mov ecx, dword [ebp - 0x2a4]
movzx edx, word [ecx + 8]
add edx, dword [ebp - 0x298]
mov dword [ebp - 0x2ac], edx
mov eax, dword [ebp - 0x2a4]
movzx ecx, word [eax + 0xa]
add ecx, dword [ebp - 0x298]
mov dword [ebp - 0x2b0], ecx
mov edx, dword [ebp - 0x2a0]
mov eax, dword [edx]
mov dword [ebp - 0x2b4], eax
mov ecx, dword [ebp + 0xc]
mov edx, dword [ecx + 0x1c]
mov dword [ebp - 0x2b8], edx
mov eax, dword [ebp - 0x2a0]
mov ecx, dword [eax + 0x18]
mov dword [ebp - 0x2bc], ecx
mov edx, dword [ebp - 0x2b0]
imul edx, dword [ebp - 0x2b8]
mov eax, dword [ebp + 0xc]
mov ecx, dword [eax + 0x14]
add ecx, edx
add ecx, dword [ebp - 0x2ac]
mov dword [ebp - 0x2c0], ecx
mov edx, dword [ebp - 0x2a8]
mov eax, dword [edx + 4]
mov dword [ebp - 0x2c4], eax
jmp 0x10069755
mov ecx, dword [ebp - 0x2c4]
sub ecx, 1
mov dword [ebp - 0x2c4], ecx
mov edx, dword [ebp - 0x2c0]
add edx, dword [ebp - 0x2b8]
mov dword [ebp - 0x2c0], edx
mov eax, dword [ebp - 0x2bc]
add eax, dword [ebp - 0x2b4]
mov dword [ebp - 0x2bc], eax
cmp dword [ebp - 0x2c4], 0
jle 0x1006977d
mov ecx, dword [ebp - 0x2b4]
push ecx
mov edx, dword [ebp - 0x2bc]
push edx
mov eax, dword [ebp - 0x2c0]
push eax
call fcn.100f7980
add esp, 0xc
jmp 0x10069722
mov ecx, dword [ebp - 0x2a8]
movss xmm0, dword [ecx + 0x10]
movss dword [ebp - 0x2c8], xmm0
mov edx, dword [ebp - 0x280]
push ecx
movss xmm0, dword [edx + 0x38]
movss dword [esp], xmm0
mov eax, dword [ebp - 0x280]
push ecx
movss xmm0, dword [eax + 0x34]
movss dword [esp], xmm0
push ecx
movss xmm0, dword [ebp - 0x2c8]
movss dword [esp], xmm0
call fcn.10069c10
add esp, 0xc
fstp dword [ebp - 0x2cc]
movss xmm0, dword [ebp - 0x290]
movss dword [ebp - 0x2d0], xmm0
movss xmm0, dword [ebp - 0x2c8]
ucomiss xmm0, dword [ebp - 0x2cc]
lahf
test ah, 0x44
jnp 0x10069863
mov ecx, dword [ebp - 0x280]
movzx edx, byte [ecx + 0x1c]
test edx, edx
je 0x1006982b
movss xmm0, dword [ebp - 0x2cc]
subss xmm0, dword [ebp - 0x2c8]
mulss xmm0, dword [0x101a7340]
cvttss2si eax, xmm0
cvtsi2ss xmm0, eax
movss dword [ebp - 0x384], xmm0
jmp 0x1006984b
movss xmm0, dword [ebp - 0x2cc]
subss xmm0, dword [ebp - 0x2c8]
mulss xmm0, dword [0x101a7340]
movss dword [ebp - 0x384], xmm0
movss xmm0, dword [ebp - 0x2d0]
addss xmm0, dword [ebp - 0x384]
movss dword [ebp - 0x2d0], xmm0
mov ecx, dword [ebp - 0x2a8]
cvtsi2ss xmm0, dword [ecx + 8]
addss xmm0, dword [ebp - 0x2d0]
movss dword [ebp - 0x2d4], xmm0
mov edx, dword [ebp - 0x2a8]
cvtsi2ss xmm0, dword [edx + 0xc]
addss xmm0, dword [ebp - 0x294]
movss dword [ebp - 0x2d8], xmm0
mov eax, dword [ebp - 0x2a8]
cvtsi2ss xmm0, dword [eax]
addss xmm0, dword [ebp - 0x2d4]
movss dword [ebp - 0x2dc], xmm0
mov ecx, dword [ebp - 0x2a8]
cvtsi2ss xmm0, dword [ecx + 4]
addss xmm0, dword [ebp - 0x2d8]
movss dword [ebp - 0x2e0], xmm0
cvtsi2ss xmm0, dword [ebp - 0x2ac]
mov edx, dword [ebp + 0xc]
cvtsi2ss xmm1, dword [edx + 0x1c]
divss xmm0, xmm1
movss dword [ebp - 0x2e4], xmm0
cvtsi2ss xmm0, dword [ebp - 0x2b0]
mov eax, dword [ebp + 0xc]
cvtsi2ss xmm1, dword [eax + 0x20]
divss xmm0, xmm1
movss dword [ebp - 0x2e8], xmm0
mov ecx, dword [ebp - 0x2a8]
mov edx, dword [ebp - 0x2ac]
add edx, dword [ecx]
cvtsi2ss xmm0, edx
mov eax, dword [ebp + 0xc]
cvtsi2ss xmm1, dword [eax + 0x1c]
divss xmm0, xmm1
movss dword [ebp - 0x2ec], xmm0
mov ecx, dword [ebp - 0x2a8]
mov edx, dword [ebp - 0x2b0]
add edx, dword [ecx + 4]
cvtsi2ss xmm0, edx
mov eax, dword [ebp + 0xc]
cvtsi2ss xmm1, dword [eax + 0x20]
divss xmm0, xmm1
movss dword [ebp - 0x2f0], xmm0
push ecx
movss xmm0, dword [ebp - 0x2cc]
movss dword [esp], xmm0
push ecx
movss xmm0, dword [ebp - 0x2f0]
movss dword [esp], xmm0
push ecx
movss xmm0, dword [ebp - 0x2ec]
movss dword [esp], xmm0
push ecx
movss xmm0, dword [ebp - 0x2e8]
movss dword [esp], xmm0
push ecx
movss xmm0, dword [ebp - 0x2e4]
movss dword [esp], xmm0
push ecx
movss xmm0, dword [ebp - 0x2e0]
movss dword [esp], xmm0
push ecx
movss xmm0, dword [ebp - 0x2dc]
movss dword [esp], xmm0
push ecx
movss xmm0, dword [ebp - 0x2d8]
movss dword [esp], xmm0
push ecx
movss xmm0, dword [ebp - 0x2d4]
movss dword [esp], xmm0
mov ecx, dword [ebp - 0x2a0]
movzx edx, word [ecx + 0x14]
push edx
mov ecx, dword [ebp - 0x284]
call fcn.100561c0
nop
jmp 0x100695e4
mov eax, dword [ebp - 0x27c]
mov dword [eax + 0x28], 0
jmp 0x100694bb
mov dword [ebp - 0x2f4], 0
jmp 0x10069a1a
mov ecx, dword [ebp - 0x2f4]
add ecx, 1
mov dword [ebp - 0x2f4], ecx
mov edx, dword [ebp - 0x2f4]
cmp edx, dword [ebp - 0xd4]
jge 0x10069a47
mov eax, dword [ebp - 0x2f4]
push eax
lea ecx, [ebp - 0xd4]
call fcn.1006a050
mov ecx, dword [eax]
push ecx
call fcn.10028530
add esp, 4
jmp 0x10069a0b
mov dword [ebp - 0x2f8], 0
jmp 0x10069a62
mov edx, dword [ebp - 0x2f8]
add edx, 1
mov dword [ebp - 0x2f8], edx
mov eax, dword [ebp - 0x2f8]
cmp eax, dword [ebp - 0x14]
jge 0x10069a92
mov ecx, dword [ebp - 0x2f8]
push ecx
lea ecx, [ebp - 0x14]
call fcn.1006a0b0
mov dword [ebp - 0x388], eax
push 0
mov ecx, dword [ebp - 0x388]
call fcn.1006a110
nop
jmp 0x10069a53
mov edx, dword [ebp + 0xc]
push edx
call fcn.10059a10
add esp, 4
mov byte [ebp - 0x31d], 1
lea ecx, [ebp - 0x22c]
call fcn.10069fd0
lea ecx, [ebp - 0xd4]
call fcn.10069ed0
lea ecx, [ebp - 0xb8]
call fcn.10064fa0
lea ecx, [ebp - 0x28]
call fcn.10069f10
lea ecx, [ebp - 0x14]
call fcn.10069f50
mov al, byte [ebp - 0x31d]
push edx
mov ecx, ebp
push eax
lea edx, [0x10069b0c]
call fcn.100f31b0
pop eax
pop edx
pop edi
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.100f3240
add esp, 0x388
cmp ebp, esp
call fcn.100f3210
mov esp, ebp
pop ebp
ret