Function at 0x68a670
Capabilities:
Encode data using xor
Resolve function by parsing pe exports

Disassembly:
sub esp, 0x38
push ebx
push ebp
push esi
mov esi, dword [esp + 0x48]
xor ebp, ebp
mov ebx, ecx
mov eax, dword [esi + 0x14]
push edi
cmp eax, ebp
mov dword [esp + 0x1c], ebx
mov dword [esp + 0x18], ebp
je 0x68a6a7
cmp dword [eax + 4], ebp
je 0x68a6a7
cmp eax, ebp
je 0x68a69c
mov ecx, dword [eax + 4]
jmp 0x68a69e
xor ecx, ecx
mov eax, dword [ecx]
call dword [eax + 0x2c]
mov dword [esp + 0x18], eax
mov eax, dword [esi + 0x14]
or edx, 0xffffffff
or ecx, 0xffffffff
cmp eax, ebp
je 0x68a6c7
cmp dword [eax + 4], ebp
je 0x68a6c7
cmp eax, ebp
je 0x68a6c2
mov eax, dword [eax + 4]
jmp 0x68a6c4
xor eax, eax
mov edx, dword [eax + 0xc]
mov eax, dword [ebx + 0x30]
cmp eax, ebp
je 0x68a6e1
cmp dword [eax + 4], ebp
je 0x68a6e1
cmp eax, ebp
je 0x68a6dc
mov eax, dword [eax + 4]
jmp 0x68a6de
xor eax, eax
mov ecx, dword [eax + 0xc]
mov eax, dword [esi + 0x14]
cmp eax, ebp
je 0x68a703
cmp dword [eax + 4], ebp
je 0x68a703
cmp ecx, 0xffffffff
je 0x68a703
cmp eax, ebp
je 0x68a6fb
mov eax, dword [eax + 4]
jmp 0x68a6fd
xor eax, eax
mov dword [eax + 0x4a8], ecx
mov eax, dword [ebx + 0x30]
cmp eax, ebp
je 0x68a725
cmp dword [eax + 4], ebp
je 0x68a725
cmp edx, 0xffffffff
je 0x68a725
cmp eax, ebp
je 0x68a71d
mov eax, dword [eax + 4]
jmp 0x68a71f
xor eax, eax
mov dword [eax + 0x4ac], edx
fld dword [esi + 4]
mov eax, dword [0x856518]
fmul dword [esp + 0x50]
cmp eax, 1
fstp dword [esp + 0x10]
jne 0x68a77f
mov eax, dword [esi + 0x14]
cmp eax, ebp
je 0x68a746
mov eax, dword [eax + 4]
jmp 0x68a748
xor eax, eax
mov ecx, dword [0x855e48]
cmp ecx, ebp
je 0x68a757
mov ecx, dword [ecx + 4]
jmp 0x68a759
xor ecx, ecx
cmp eax, ecx
jne 0x68a77f
mov eax, dword [0x80f458]
sub eax, ebp
je 0x68a775
dec eax
jne 0x68a77f
fld dword [esp + 0x10]
fmul dword [0x7e2df4]
jmp 0x68a77b
fld dword [esp + 0x10]
fadd st(0), st(0)
fstp dword [esp + 0x10]
mov edi, dword [esp + 0x54]
mov dword [esp + 0x14], 0
cmp edi, 0xffffffff
je 0x68a7bc
mov eax, dword [0x857148]
mov ecx, dword [esi + 8]
imul eax, edi
add eax, ecx
mov ecx, dword [0x857210]
lea ecx, [ecx + eax*4]
call fcn.00413510
fstp dword [esp + 0x20]
mov dword [esp + 0x54], 0
jmp 0x68a85f
mov edx, dword [esp + 0x4c]
mov eax, dword [ebx + 0xc]
cmp eax, 0xffffffff
mov dword [esp + 0x50], ebp
mov esi, dword [edx + 8]
je 0x68a7ec
mov ecx, dword [ebx + 0xc]
lea eax, [esp + 0x50]
push eax
push ecx
call fcn.00695af0
mov eax, dword [esp + 0x58]
add esp, 8
cmp eax, ebp
je 0x68a7ec
mov ecx, dword [eax]
jmp 0x68a7f2
mov ecx, dword [0x89fe8c]
mov eax, dword [0x857148]
mov edx, dword [0x857210]
imul eax, ecx
add eax, esi
lea ecx, [edx + eax*4]
call fcn.00413510
mov eax, dword [esp + 0x4c]
mov dword [esp + 0x50], ebp
fstp dword [esp + 0x20]
mov esi, dword [eax + 8]
mov eax, dword [ebx + 0x18]
cmp eax, 0xffffffff
je 0x68a83d
lea ecx, [esp + 0x50]
mov edx, eax
push ecx
push edx
call fcn.00695af0
mov eax, dword [esp + 0x58]
add esp, 8
cmp eax, ebp
je 0x68a83d
mov ecx, dword [eax]
jmp 0x68a843
mov ecx, dword [0x89fe8c]
mov eax, dword [0x857148]
imul eax, ecx
mov ecx, dword [0x857210]
add eax, esi
lea ecx, [ecx + eax*4]
call fcn.00413510
fstp dword [esp + 0x54]
mov esi, dword [esp + 0x18]
cmp esi, ebp
je 0x68a8a3
mov ecx, dword [esi + 0x960]
cmp ecx, ebp
je 0x68a8a3
fld dword [ecx + 0x1c]
fcomp dword [0x7d18f4]
fnstsw ax
test ah, 0x41
jne 0x68a8a3
mov edx, dword [ecx]
push ebp
mov dword [esp + 0x24], 0
mov dword [esp + 0x58], 0
call dword [edx + 0xc]
mov ecx, dword [esi + 0x960]
push ebp
mov eax, dword [ecx]
call dword [eax + 4]
fld dword [esp + 0x20]
fmul dword [esp + 0x10]
mov byte [esp + 0x50], 0
fst dword [esp + 0x2c]
fcomp dword [0x7cd7b4]
fnstsw ax
test ah, 1
jne 0x68ad18
fld dword [esp + 0x54]
fmul dword [esp + 0x10]
fcomp dword [0x7cd7b4]
fnstsw ax
test ah, 1
jne 0x68ad18
cmp esi, ebp
je 0x68a958
mov eax, dword [ebx + 0x30]
cmp eax, ebp
je 0x68a958
cmp dword [eax + 4], ebp
je 0x68a958
cmp eax, ebp
je 0x68a8f7
mov eax, dword [eax + 4]
jmp 0x68a8f9
xor eax, eax
cmp esi, eax
je 0x68a958
mov eax, dword [ebx + 0x30]
cmp eax, ebp
je 0x68a909
mov eax, dword [eax + 4]
jmp 0x68a90b
xor eax, eax
push eax
mov ecx, esi
call fcn.006d97f0
test al, al
je 0x68a958
mov al, byte [0x855efc]
test al, al
jne 0x68a958
mov eax, dword [ebx + 4]
mov dword [esp + 0x4c], ebp
cmp eax, 0xffffffff
je 0x68c298
lea ecx, [esp + 0x4c]
mov edx, eax
push ecx
push edx
call fcn.00428f80
mov eax, dword [esp + 0x54]
add esp, 8
cmp eax, ebp
je 0x68c298
fld dword [eax]
pop edi
pop esi
pop ebp
pop ebx
add esp, 0x38
ret 0xc
fld dword [esp + 0x10]
fcomp dword [0x7cd7b4]
fnstsw ax
test ah, 0x40
jne 0x68a98c
mov eax, dword [ebx + 0x30]
cmp eax, ebp
je 0x68a98c
cmp dword [eax + 4], ebp
je 0x68a98c
cmp eax, ebp
je 0x68a97e
mov eax, dword [eax + 4]
jmp 0x68a980
xor eax, eax
lea ecx, [eax + 8]
push 1
push 3
mov eax, dword [ecx]
call dword [eax + 0x38]
mov eax, dword [ebx + 0x10]
or esi, 0xffffffff
cmp eax, esi
mov dword [esp + 0x24], ebp
je 0x68a9b6
lea ecx, [esp + 0x24]
mov edx, eax
push ecx
push edx
call fcn.00428f80
mov eax, dword [esp + 0x2c]
add esp, 8
cmp eax, ebp
je 0x68a9b6
fld dword [eax]
jmp 0x68a9bc
fld dword [0x89fe2c]
fcomp dword [0x7cd7b4]
fnstsw ax
test ah, 0x41
jne 0x68abe6
cmp edi, esi
jne 0x68abe6
mov eax, dword [esp + 0x4c]
or edi, 0xffffffff
mov dword [esp + 0x24], ebp
mov esi, dword [eax + 8]
mov eax, dword [ebx + 0x18]
cmp eax, edi
je 0x68aa06
lea ecx, [esp + 0x24]
mov edx, eax
push ecx
push edx
call fcn.00695af0
mov eax, dword [esp + 0x2c]
add esp, 8
cmp eax, ebp
je 0x68aa06
mov ecx, dword [eax]
jmp 0x68aa0c
mov ecx, dword [0x89fe8c]
mov eax, dword [0x857148]
imul eax, ecx
mov ecx, dword [0x857214]
add eax, esi
lea ecx, [ecx + eax*4]
call fcn.00413510
fmul dword [esp + 0x10]
fld dword [esp + 0x10]
mov eax, dword [ebx + 0x10]
mov dword [esp + 0x28], ebp
fsub st(1)
cmp eax, edi
fstp dword [esp + 0x10]
fld dword [esp + 0x54]
fmul st(1)
fstp dword [esp + 0x14]
mov edx, dword [esp + 0x14]
fstp st(0)
mov dword [esp + 0x24], edx
je 0x68aa6e
mov ecx, dword [ebx + 0x10]
lea eax, [esp + 0x28]
push eax
push ecx
call fcn.00428f80
mov eax, dword [esp + 0x30]
add esp, 8
cmp eax, ebp
je 0x68aa6e
fld dword [eax]
jmp 0x68aa74
fld dword [0x89fe2c]
fld dword [esp + 0x14]
fcomp st(1)
fnstsw ax
test ah, 0x41
fstp st(0)
jne 0x68aab6
mov eax, dword [ebx + 0x10]
mov dword [esp + 0x28], ebp
cmp eax, edi
je 0x68aaac
lea edx, [esp + 0x28]
push edx
push eax
call fcn.00428f80
mov eax, dword [esp + 0x30]
add esp, 8
cmp eax, ebp
je 0x68aaac
mov ecx, dword [eax]
mov dword [esp + 0x14], ecx
jmp 0x68aab6
mov edx, dword [0x89fe2c]
mov dword [esp + 0x14], edx
mov eax, dword [ebx + 0x10]
mov dword [esp + 0x28], ebp
cmp eax, edi
je 0x68aade
mov ecx, dword [ebx + 0x10]
lea eax, [esp + 0x28]
push eax
push ecx
call fcn.00428f80
mov eax, dword [esp + 0x30]
add esp, 8
cmp eax, ebp
je 0x68aade
fld dword [eax]
jmp 0x68aae4
fld dword [0x89fe2c]
fsub dword [esp + 0x14]
mov eax, dword [ebx + 0x10]
cmp eax, edi
fstp dword [esp + 0x2c]
je 0x68ab01
lea edx, [esp + 0x2c]
push edx
push eax
call fcn.00694f90
add esp, 8
fld dword [esp + 0x54]
fcomp dword [0x7cd7b4]
fnstsw ax
test ah, 0x40
jne 0x68ab2a
fld dword [esp + 0x14]
fdiv dword [esp + 0x54]
fstp dword [esp + 0x14]
fld dword [esp + 0x24]
fdiv dword [esp + 0x54]
fstp dword [esp + 0x24]
fld dword [esp + 0x24]
fsub dword [esp + 0x14]
mov eax, dword [ebx + 0x14]
mov dword [esp + 0x28], ebp
cmp eax, edi
fadd dword [esp + 0x10]
fstp dword [esp + 0x10]
je 0x68ab65
lea ecx, [esp + 0x28]
mov edx, eax
push ecx
push edx
call fcn.00428f80
mov eax, dword [esp + 0x30]
add esp, 8
cmp eax, ebp
je 0x68ab65
mov eax, dword [eax]
mov dword [esp + 0x54], eax
jmp 0x68ab6f
mov ecx, dword [0x89fe2c]
mov dword [esp + 0x54], ecx
mov eax, dword [ebx + 0x10]
mov dword [esp + 0x2c], ebp
cmp eax, edi
je 0x68ab94
lea edx, [esp + 0x2c]
push edx
push eax
call fcn.00428f80
mov eax, dword [esp + 0x34]
add esp, 8
cmp eax, ebp
je 0x68ab94
fld dword [eax]
jmp 0x68ab9a
fld dword [0x89fe2c]
fcom dword [0x7cd7b4]
fnstsw ax
test ah, 1
je 0x68abb3
fstp st(0)
mov dword [esp + 0x24], 0
jmp 0x68abce
fcom dword [esp + 0x54]
fnstsw ax
test ah, 0x41
jne 0x68abca
mov ecx, dword [esp + 0x54]
fstp st(0)
mov dword [esp + 0x24], ecx
jmp 0x68abce
fstp dword [esp + 0x24]
mov eax, dword [ebx + 0x10]
cmp eax, edi
je 0x68abe3
lea edx, [esp + 0x24]
push edx
push eax
call fcn.00694f90
add esp, 8
or esi, 0xffffffff
fld dword [esp + 0x20]
fmul dword [esp + 0x10]
mov eax, dword [ebx + 4]
mov dword [esp + 0x54], ebp
cmp eax, esi
fstp dword [esp + 0x10]
je 0x68ac19
lea ecx, [esp + 0x54]
mov edx, eax
push ecx
push edx
call fcn.00428f80
mov eax, dword [esp + 0x5c]
add esp, 8
cmp eax, ebp
je 0x68ac19
fld dword [eax]
jmp 0x68ac1f
fld dword [0x89fe2c]
fcomp dword [esp + 0x10]
fnstsw ax
test ah, 1
je 0x68ac5f
mov eax, dword [ebx + 4]
mov dword [esp + 0x54], ebp
cmp eax, esi
je 0x68ac56
mov ecx, dword [ebx + 4]
lea eax, [esp + 0x54]
push eax
push ecx
call fcn.00428f80
mov eax, dword [esp + 0x5c]
add esp, 8
cmp eax, ebp
je 0x68ac56
mov edx, dword [eax]
mov dword [esp + 0x10], edx
jmp 0x68ac5f
mov eax, dword [0x89fe2c]
mov dword [esp + 0x10], eax
mov eax, dword [ebx + 4]
mov dword [esp + 0x54], ebp
cmp eax, esi
je 0x68ac86
lea ecx, [esp + 0x54]
mov edx, eax
push ecx
push edx
call fcn.00428f80
mov eax, dword [esp + 0x5c]
add esp, 8
cmp eax, ebp
je 0x68ac86
fld dword [eax]
jmp 0x68ac8c
fld dword [0x89fe2c]
fsub dword [esp + 0x10]
cmp dword [ebx + 4], esi
fstp dword [esp + 0x2c]
je 0x68acaa
mov ecx, dword [ebx + 4]
lea eax, [esp + 0x2c]
push eax
push ecx
call fcn.00694f90
add esp, 8
mov al, byte [ebx + 0x24]
test al, al
jne 0x68af84
mov eax, dword [ebx + 4]
or esi, 0xffffffff
cmp eax, esi
mov dword [esp + 0x54], ebp
je 0x68acdd
lea edx, [esp + 0x54]
push edx
push eax
call fcn.00428f80
mov eax, dword [esp + 0x5c]
add esp, 8
cmp eax, ebp
je 0x68acdd
fld dword [eax]
jmp 0x68ace3
fld dword [0x89fe2c]
fcom dword [0x7cd794]
fnstsw ax
test ah, 0x41
jne 0x68acf6
fstp dword [esp + 0x2c]
jmp 0x68ad00
fstp st(0)
mov dword [esp + 0x2c], 0x3f800000
mov eax, dword [ebx + 4]
cmp eax, esi
je 0x68af84
lea ecx, [esp + 0x2c]
mov edx, eax
push ecx
push edx
jmp 0x68af7c
mov eax, dword [ebx + 0x30]
mov byte [esp + 0x50], 1
cmp eax, ebp
je 0x68ad40
cmp dword [eax + 4], ebp
je 0x68ad40
cmp eax, ebp
je 0x68ad32
mov eax, dword [eax + 4]
jmp 0x68ad34
xor eax, eax
lea ecx, [eax + 8]
push 1
push 3
mov eax, dword [ecx]
call dword [eax + 0x38]
mov eax, dword [ebx + 4]
mov dword [esp + 0x24], ebp
cmp eax, 0xffffffff
je 0x68ae90
lea ecx, [esp + 0x24]
mov edx, eax
push ecx
push edx
call fcn.00428f80
mov eax, dword [esp + 0x2c]
add esp, 8
cmp eax, ebp
je 0x68ae90
lea esi, [ebx + 8]
mov ecx, esi
call fcn.00694940
cmp eax, ebp
je 0x68ae90
mov ecx, dword [esp + 0x24]
fld dword [ecx]
fcomp dword [eax]
fnstsw ax
test ah, 1
je 0x68ae90
fld dword [esp + 0x20]
fcomp dword [0x7cd7b4]
fnstsw ax
test ah, 0x40
jne 0x68ae90
mov eax, dword [ebx + 4]
mov edx, dword [esp + 0x2c]
or edi, 0xffffffff
mov dword [esp + 0x10], edx
cmp eax, edi
mov dword [esp + 0x54], ebp
je 0x68addd
mov ecx, dword [ebx + 4]
lea eax, [esp + 0x54]
push eax
push ecx
call fcn.00428f80
mov eax, dword [esp + 0x5c]
add esp, 8
cmp eax, ebp
je 0x68addd
mov edx, dword [eax]
mov dword [esp + 0x28], edx
jmp 0x68ade6
mov eax, dword [0x89fe2c]
mov dword [esp + 0x28], eax
mov eax, dword [esi]
mov dword [esp + 0x2c], ebp
cmp eax, edi
je 0x68ae0c
lea ecx, [esp + 0x2c]
mov edx, eax
push ecx
push edx
call fcn.00428f80
mov eax, dword [esp + 0x34]
add esp, 8
cmp eax, ebp
je 0x68ae0c
fld dword [eax]
jmp 0x68ae12
fld dword [0x89fe2c]
fsubr dword [esp + 0x28]
fld dword [esp + 0x10]
fcomp st(1)
fnstsw ax
test ah, 1
je 0x68ae29
fstp dword [esp + 0x10]
jmp 0x68ae44
fstp st(0)
fld dword [esp + 0x10]
fcomp dword [0x7cd7b4]
fnstsw ax
test ah, 0x41
jne 0x68ae44
mov dword [esp + 0x10], 0
mov eax, dword [ebx + 4]
mov dword [esp + 0x54], ebp
cmp eax, edi
je 0x68ae6c
mov ecx, dword [ebx + 4]
lea eax, [esp + 0x54]
push eax
push ecx
call fcn.00428f80
mov eax, dword [esp + 0x5c]
add esp, 8
cmp eax, ebp
je 0x68ae6c
fld dword [eax]
jmp 0x68ae72
fld dword [0x89fe2c]
fsub dword [esp + 0x10]
mov eax, dword [ebx + 4]
cmp eax, edi
fstp dword [esp + 0x2c]
je 0x68af84
lea edx, [esp + 0x2c]
push edx
push eax
jmp 0x68af7c
fld dword [esp + 0x54]
fmul dword [esp + 0x10]
mov eax, dword [ebx + 0x10]
or esi, 0xffffffff
cmp eax, esi
mov dword [esp + 0x10], 0
fstp dword [esp + 0x14]
mov dword [esp + 0x54], ebp
je 0x68aed2
lea ecx, [esp + 0x54]
mov edx, eax
push ecx
push edx
call fcn.00428f80
mov eax, dword [esp + 0x5c]
add esp, 8
cmp eax, ebp
je 0x68aed2
mov eax, dword [eax]
mov dword [esp + 0x28], eax
jmp 0x68aedc
mov ecx, dword [0x89fe2c]
mov dword [esp + 0x28], ecx
mov eax, dword [ebx + 0x14]
mov dword [esp + 0x2c], ebp
cmp eax, esi
je 0x68af01
lea edx, [esp + 0x2c]
push edx
push eax
call fcn.00428f80
mov eax, dword [esp + 0x34]
add esp, 8
cmp eax, ebp
je 0x68af01
fld dword [eax]
jmp 0x68af07
fld dword [0x89fe2c]
fsubr dword [esp + 0x28]
fld dword [esp + 0x14]
fcomp st(1)
fnstsw ax
test ah, 1
je 0x68af1e
fstp dword [esp + 0x14]
jmp 0x68af39
fstp st(0)
fld dword [esp + 0x14]
fcomp dword [0x7cd7b4]
fnstsw ax
test ah, 0x41
jne 0x68af39
mov dword [esp + 0x14], 0
mov eax, dword [ebx + 0x10]
mov dword [esp + 0x54], ebp
cmp eax, esi
je 0x68af60
lea ecx, [esp + 0x54]
mov edx, eax
push ecx
push edx
call fcn.00428f80
mov eax, dword [esp + 0x5c]
add esp, 8
cmp eax, ebp
je 0x68af60
fld dword [eax]
jmp 0x68af66
fld dword [0x89fe2c]
fsub dword [esp + 0x14]
cmp dword [ebx + 0x10], esi
fstp dword [esp + 0x2c]
je 0x68af84
mov ecx, dword [ebx + 0x10]
lea eax, [esp + 0x2c]
push eax
push ecx
call fcn.00694f90
add esp, 8
mov ecx, dword [0x855e48]
cmp ecx, ebp
je 0x68b091
mov edx, dword [ecx + 4]
cmp edx, ebp
je 0x68b088
mov eax, dword [ebx + 0x30]
cmp eax, ebp
je 0x68afa9
mov eax, dword [eax + 4]
jmp 0x68afab
xor eax, eax
cmp eax, edx
jne 0x68b088
mov eax, dword [ebx + 0x30]
cmp eax, ebp
je 0x68afbf
mov ecx, dword [eax + 4]
jmp 0x68afc1
xor ecx, ecx
mov edx, dword [ecx]
lea eax, [esp + 0x3c]
push eax
call dword [edx + 0x38]
mov ecx, dword [esp + 0x4c]
xor esi, esi
mov edi, 0x81c668
mov eax, dword [ecx + 0x14]
cmp eax, ebp
je 0x68b034
cmp dword [eax + 4], ebp
je 0x68b034
mov ecx, dword [esp + 0x4c]
mov eax, dword [ecx + 0x14]
cmp eax, ebp
je 0x68aff2
mov eax, dword [eax + 4]
jmp 0x68aff4
xor eax, eax
mov esi, dword [eax + 0xc]
mov eax, dword [ecx + 0x14]
cmp eax, ebp
je 0x68b003
mov eax, dword [eax + 4]
jmp 0x68b005
xor eax, eax
mov ecx, eax
call fcn.0071fcf0
test eax, eax
je 0x68b034
mov edx, dword [esp + 0x4c]
mov eax, dword [edx + 0x14]
cmp eax, ebp
je 0x68b020
mov eax, dword [eax + 4]
jmp 0x68b022
xor eax, eax
mov ecx, eax
call fcn.0071fcf0
mov eax, dword [eax]
mov ecx, eax
mov edx, dword [eax]
call dword [edx + 0x30]
mov edi, eax
lea ecx, [ebx + 0x10]
call fcn.00413510
fld dword [esp + 0x44]
sub esp, 8
mov eax, dword [ebx + 4]
fstp qword [esp]
fld dword [esp + 0x48]
sub esp, 8
fstp qword [esp]
fld dword [esp + 0x4c]
sub esp, 8
fstp qword [esp]
push eax
sub esp, 8
fstp qword [esp]
fld dword [esp + 0x34]
sub esp, 8
fstp qword [esp]
push esi
push edi
push str._s___d___1.2f___1.2f___1.2f___1.2f___1.2f___1.2f
push str.DRCV
call fcn.0069d9d0
mov ecx, dword [0x855e48]
add esp, 0x3c
cmp ecx, ebp
je 0x68b091
mov eax, dword [ecx + 4]
jmp 0x68b093
xor eax, eax
mov ecx, dword [esp + 0x18]
cmp ecx, eax
jne 0x68b201
cmp ecx, ebp
je 0x68b201
mov esi, ecx
lea eax, [esp + 0x30]
push eax
mov edx, dword [esi]
call dword [edx + 0x38]
mov ecx, esi
mov ebp, 0x81c668
xor ebx, ebx
call fcn.0071fcf0
test eax, eax
je 0x68b0e7
mov ecx, esi
call fcn.0071fcf0
mov eax, dword [eax]
mov ecx, eax
mov edx, dword [eax]
call dword [edx + 0x30]
mov ecx, esi
mov ebp, eax
call fcn.0071fcf0
mov ecx, eax
call fcn.006fb130
mov ebx, eax
mov ecx, dword [esp + 0x1c]
xor edi, edi
mov dword [esp + 0x3c], edi
mov dword [esp + 0x40], edi
mov eax, dword [ecx + 0x30]
mov dword [esp + 0x44], edi
test eax, eax
mov esi, 0x81c668
je 0x68b15a
mov edx, dword [eax + 4]
test edx, edx
je 0x68b15a
test eax, eax
je 0x68b115
mov eax, dword [eax + 4]
jmp 0x68b117
xor eax, eax
mov edi, dword [eax + 0xc]
mov eax, dword [ecx + 0x30]
test eax, eax
je 0x68b126
mov ecx, dword [eax + 4]
jmp 0x68b128
xor ecx, ecx
mov eax, dword [ecx]
lea edx, [esp + 0x3c]
push edx
call dword [eax + 0x38]
mov eax, dword [esp + 0x1c]
mov eax, dword [eax + 0x30]
test eax, eax
je 0x68b142
mov eax, dword [eax + 4]
jmp 0x68b144
xor eax, eax
mov edx, dword [eax]
mov ecx, eax
call dword [edx + 0x68]
push eax
call fcn.00724430
mov ecx, dword [esp + 0x20]
add esp, 4
mov esi, eax
mov eax, dword [ecx + 0x10]
mov dword [esp + 0x54], 0
cmp eax, 0xffffffff
je 0x68b18b
mov ecx, dword [esp + 0x1c]
lea eax, [esp + 0x54]
push eax
mov edx, dword [ecx + 0x10]
push edx
call fcn.00428f80
mov eax, dword [esp + 0x5c]
add esp, 8
test eax, eax
je 0x68b18b
fld dword [eax]
jmp 0x68b191
fld dword [0x89fe2c]
fld dword [esp + 0x44]
push esi
mov eax, dword [esp + 0x20]
sub esp, 8
mov ecx, dword [eax + 4]
fstp qword [esp]
fld dword [esp + 0x4c]
sub esp, 8
fstp qword [esp]
fld dword [esp + 0x50]
sub esp, 8
fstp qword [esp]
push ecx
sub esp, 8
fstp qword [esp]
fld dword [esp + 0x38]
sub esp, 8
fstp qword [esp]
fld dword [esp + 0x68]
push edi
push ebx
push ebp
sub esp, 8
fstp qword [esp]
fld dword [esp + 0x78]
sub esp, 8
fstp qword [esp]
fld dword [esp + 0x7c]
sub esp, 8
fstp qword [esp]
push str._1.2f___1.2f___1.2f___s___d___d___1.2f___1.2f___1.2f___1.2f___1.2f___1.2f___s
push str.DEFC
call fcn.0069d9d0
mov ebx, dword [esp + 0x78]
add esp, 0x5c
xor ebp, ebp
mov eax, dword [ebx + 8]
or esi, 0xffffffff
cmp eax, esi
mov dword [esp + 0x2c], ebp
je 0x68b22d
lea edx, [esp + 0x2c]
push edx
push eax
call fcn.00428f80
mov eax, dword [esp + 0x34]
add esp, 8
cmp eax, ebp
je 0x68b22d
mov ecx, dword [eax]
mov dword [esp + 0x54], ecx
jmp 0x68b237
mov edx, dword [0x89fe2c]
mov dword [esp + 0x54], edx
mov eax, dword [ebx + 4]
mov dword [esp + 0x28], ebp
cmp eax, esi
je 0x68b25f
mov ecx, dword [ebx + 4]
lea eax, [esp + 0x28]
push eax
push ecx
call fcn.00428f80
mov eax, dword [esp + 0x30]
add esp, 8
cmp eax, ebp
je 0x68b25f
fld dword [eax]
jmp 0x68b265
fld dword [0x89fe2c]
fcom dword [0x7cd7b4]
fnstsw ax
test ah, 1
je 0x68b27e
fstp st(0)
mov dword [esp + 0x24], 0
jmp 0x68b299
fcom dword [esp + 0x54]
fnstsw ax
test ah, 0x41
jne 0x68b295
mov edx, dword [esp + 0x54]
fstp st(0)
mov dword [esp + 0x24], edx
jmp 0x68b299
fstp dword [esp + 0x24]
cmp dword [ebx + 4], esi
je 0x68b2af
mov ecx, dword [ebx + 4]
lea eax, [esp + 0x24]
push eax
push ecx
call fcn.00694f90
add esp, 8
fld dword [esp + 0x10]
fcomp dword [0x7cd7b4]
fnstsw ax
test ah, 0x41
jne 0x68b706
mov eax, dword [ebx + 4]
mov dword [esp + 0x54], 0
cmp eax, 0xffffffff
je 0x68b2ee
lea edx, [esp + 0x54]
push edx
push eax
call fcn.00428f80
mov eax, dword [esp + 0x5c]
add esp, 8
test eax, eax
je 0x68b2ee
fld dword [eax]
jmp 0x68b2f4
fld dword [0x89fe2c]
fcomp dword [0x7cd7b4]
fnstsw ax
test ah, 0x41
je 0x68b45c
mov eax, dword [ebx + 0x30]
xor ebp, ebp
test eax, eax
mov dword [esp + 0x3c], ebp
mov dword [esp + 0x40], ebp
mov dword [esp + 0x44], ebp
je 0x68b349
mov ecx, dword [eax + 4]
test ecx, ecx
je 0x68b349
test eax, eax
je 0x68b32a
mov eax, dword [eax + 4]
jmp 0x68b32c
xor eax, eax
mov ebp, dword [eax + 0xc]
mov eax, dword [ebx + 0x30]
test eax, eax
je 0x68b33b
mov eax, dword [eax + 4]
jmp 0x68b33d
xor eax, eax
mov edx, dword [eax]
lea ecx, [esp + 0x3c]
push ecx
mov ecx, eax
call dword [edx + 0x38]
mov eax, dword [esp + 0x18]
xor edi, edi
test eax, eax
mov dword [esp + 0x30], edi
mov dword [esp + 0x34], edi
mov dword [esp + 0x38], edi
mov esi, 0x81c668
je 0x68b394
mov ecx, eax
lea eax, [esp + 0x30]
push eax
mov edx, dword [ecx]
mov edi, dword [ecx + 0xc]
call dword [edx + 0x38]
mov ecx, dword [esp + 0x18]
call fcn.0071fcf0
test eax, eax
je 0x68b394
mov ecx, dword [esp + 0x18]
call fcn.0071fcf0
mov eax, dword [eax]
mov ecx, eax
mov edx, dword [eax]
call dword [edx + 0x30]
mov esi, eax
fld dword [esp + 0x38]
push esi
sub esp, 8
fstp qword [esp]
fld dword [esp + 0x40]
sub esp, 8
fstp qword [esp]
fld dword [esp + 0x44]
sub esp, 8
fstp qword [esp]
fld dword [esp + 0x60]
push edi
sub esp, 8
fstp qword [esp]
fld dword [esp + 0x68]
sub esp, 8
fstp qword [esp]
fld dword [esp + 0x6c]
sub esp, 8
fstp qword [esp]
push ebp
push str._d___1.2f___1.2f___1.2f___d___1.2f___1.2f___1.2f___s
push str.OBDE
call fcn.0069d9d0
mov eax, dword [ebx + 0x30]
add esp, 0x44
test eax, eax
je 0x68b3f1
mov eax, dword [eax + 4]
jmp 0x68b3f3
xor eax, eax
mov ecx, dword [0x855e48]
xor ebp, ebp
cmp ecx, ebp
je 0x68b404
mov ecx, dword [ecx + 4]
jmp 0x68b406
xor ecx, ecx
cmp eax, ecx
jne 0x68b45e
fld dword [esp + 0x38]
push esi
sub esp, 8
fstp qword [esp]
fld dword [esp + 0x40]
sub esp, 8
fstp qword [esp]
fld dword [esp + 0x44]
sub esp, 8
fstp qword [esp]
fld dword [esp + 0x60]
push edi
sub esp, 8
fstp qword [esp]
fld dword [esp + 0x68]
sub esp, 8
fstp qword [esp]
fld dword [esp + 0x6c]
sub esp, 8
fstp qword [esp]
push str._1.2f___1.2f___1.2f___d___1.2f___1.2f___1.2f___s
push str.STDE
call fcn.0069d9d0
add esp, 0x40
jmp 0x68b45e
xor ebp, ebp
mov eax, dword [ebx + 4]
cmp eax, 0xffffffff
je 0x68b696
push eax
call fcn.0045c0b0
add esp, 4
cmp eax, ebp
je 0x68b696
push ebp
add eax, 0x14
push 4
push eax
mov eax, dword [0x8294dc]
lea ecx, [eax*4 + 0x8294b4]
push ecx
call fcn.0045cba0
mov eax, dword [0x8294dc]
add esp, 0x10
lea esi, [eax*4 + 0x8294b4]
inc eax
cmp eax, 8
mov dword [esp + 0x2c], esi
mov dword [0x8294dc], eax
jl 0x68b4b8
mov dword [0x8294dc], ebp
push ebp
call fcn.0045d120
mov eax, dword [0x81c700]
add esp, 4
inc eax
cmp eax, 0x186a0
mov dword [0x81c700], eax
jb 0x68b68e
mov eax, dword [0x820dd0]
mov ecx, dword [0x829478]
mov edx, eax
mov dword [0x81c700], ebp
sub edx, ecx
cmp edx, eax
jne 0x68b506
inc dword [0x8294f0]
call fcn.0045dca0
mov eax, dword [0x820dd0]
mov ecx, dword [0x829478]
mov edx, ecx
sub edx, eax
cmp edx, ecx
jne 0x68b519
inc dword [0x8294f0]
call fcn.0045dca0
mov al, byte [0x81c644]
test al, al
jne 0x68b533
mov ecx, 0x83f450
call fcn.005ddd50
mov byte [0x81c644], 1
call dword [sym.imp.WINMM.dll_timeGetTime]
mov ecx, dword [0x83f450]
cmp eax, ecx
jbe 0x68b547
sub eax, ecx
jmp 0x68b54f
mov ecx, dword [0x83f454]
add eax, ecx
mov ecx, dword [0x829468]
cmp eax, ecx
jb 0x68b56f
mov edx, eax
or edx, ecx
je 0x68b56f
mov edx, eax
sub edx, ecx
cmp edx, 0x3a98
jbe 0x68b68e
mov cl, byte [0x81c6fc]
test cl, cl
jne 0x68b68e
mov ecx, dword [0x8294e8]
mov dword [0x829468], eax
mov eax, dword [0x829478]
cmp ecx, ebp
mov byte [0x81c6fc], 1
not eax
jle 0x68b5eb
mov ebx, 0x820e44
mov dword [esp + 0x54], ecx
mov ecx, dword [ebx]
test ecx, ecx
je 0x68b5dd
mov esi, dword [ecx + 4]
test esi, esi
jle 0x68b5dd
mov edx, dword [ecx]
mov edi, dword [edx + 0xc]
sar edi, 2
test edx, edx
je 0x68b5dd
test esi, esi
jle 0x68b5dd
mov ebp, esi
mov ecx, dword [edx]
xor eax, ecx
lea ecx, [edx + 0x14]
test edi, edi
jle 0x68b5d7
mov esi, edi
xor eax, dword [ecx]
add ecx, 4
dec esi
jne 0x68b5cf
mov edx, dword [edx + 4]
dec ebp
jne 0x68b5c2
mov ecx, dword [esp + 0x54]
add ebx, 4
dec ecx
mov dword [esp + 0x54], ecx
jne 0x68b5a3
cmp eax, dword [0x8294d8]
je 0x68b5fe
inc dword [0x8294f0]
call fcn.0045dca0
mov eax, dword [0x8294e8]
xor esi, esi
cmp eax, esi
je 0x68b67d
mov eax, dword [0x829464]
mov dword [esp + 0x54], esi
cmp eax, esi
je 0x68b643
lea edx, [esp + 0x54]
push edx
push eax
call fcn.00407b70
add esp, 8
test al, al
je 0x68b638
mov eax, dword [esp + 0x54]
cmp eax, esi
je 0x68b638
cmp dword [eax], 0x29874362
je 0x68b643
inc dword [0x8294f0]
call fcn.0045dca0
mov eax, dword [0x8294b0]
mov dword [esp + 0x54], esi
cmp eax, esi
je 0x68b67d
lea ecx, [esp + 0x54]
push ecx
push eax
call fcn.00407b70
add esp, 8
test al, al
je 0x68b672
mov eax, dword [esp + 0x54]
cmp eax, esi
je 0x68b672
cmp dword [eax], 0xbad0bad
je 0x68b67d
inc dword [0x8294f0]
call fcn.0045dca0
mov esi, dword [esp + 0x2c]
mov ebx, dword [esp + 0x1c]
mov byte [0x81c6fc], 0
xor ebp, ebp
cmp esi, ebp
je 0x68b696
fld dword [esi]
jmp 0x68b69c
fld dword [0x89fe2c]
fcomp dword [0x7cd7b4]
fnstsw ax
test ah, 0x41
je 0x68b706
mov esi, dword [esp + 0x18]
cmp esi, ebp
je 0x68bfe2
mov edx, dword [esi]
mov ecx, esi
call dword [edx + 0x44]
test eax, eax
je 0x68b706
mov eax, dword [ebx + 0x30]
cmp eax, ebp
je 0x68b706
cmp dword [eax + 4], ebp
je 0x68b706
cmp eax, ebp
je 0x68b6d5
mov eax, dword [eax + 4]
jmp 0x68b6d7
xor eax, eax
mov edx, dword [eax]
mov ecx, eax
call dword [edx + 0x44]
test eax, eax
je 0x68b706
mov eax, dword [ebx + 0x30]
cmp eax, ebp
je 0x68b6ee
mov ecx, dword [eax + 4]
jmp 0x68b6f0
xor ecx, ecx
mov eax, dword [ecx]
call dword [eax + 0x44]
mov edx, dword [esi]
push eax
mov ecx, esi
call dword [edx + 0x44]
push eax
call fcn.00671320
add esp, 8
mov edi, dword [esp + 0x18]
xor ebp, ebp
cmp edi, ebp
je 0x68bfe2
cmp dword [edi + 0x960], ebp
je 0x68bfe2
mov eax, dword [ebx + 0x30]
mov dword [esp + 0x20], 0x3f800000
cmp eax, ebp
je 0x68b777
cmp dword [eax + 4], ebp
je 0x68b777
cmp eax, ebp
je 0x68b73d
mov eax, dword [eax + 4]
jmp 0x68b73f
xor eax, eax
push eax
mov ecx, edi
call fcn.006d97f0
test al, al
je 0x68b755
mov dword [esp + 0x20], 0xbf800000
jmp 0x68b777
mov eax, dword [ebx + 0x30]
cmp eax, ebp
je 0x68b761
mov eax, dword [eax + 4]
jmp 0x68b763
xor eax, eax
push eax
mov ecx, edi
call fcn.006d9830
test al, al
jne 0x68b777
mov dword [esp + 0x20], 0
mov eax, dword [esp + 0x4c]
mov eax, dword [eax + 0x14]
cmp eax, ebp
je 0x68b787
mov ecx, dword [eax + 4]
jmp 0x68b789
xor ecx, ecx
mov eax, dword [ebx + 0x30]
cmp eax, ebp
je 0x68b795
mov eax, dword [eax + 4]
jmp 0x68b797
xor eax, eax
cmp ecx, eax
je 0x68ba1e
mov eax, dword [ebx + 0x1c]
cmp eax, 0xffffffff
je 0x68b9dc
push eax
call fcn.0045c0b0
add esp, 4
cmp eax, ebp
je 0x68b9dc
mov ecx, dword [0x8294dc]
push ebp
add eax, 0x14
push 4
lea edx, [ecx*4 + 0x8294b4]
push eax
push edx
call fcn.0045cba0
mov eax, dword [0x8294dc]
add esp, 0x10
lea esi, [eax*4 + 0x8294b4]
inc eax
cmp eax, 8
mov dword [esp + 0x2c], esi
mov dword [0x8294dc], eax
jl 0x68b7fa
mov dword [0x8294dc], ebp
push ebp
call fcn.0045d120
mov eax, dword [0x81c700]
add esp, 4
inc eax
cmp eax, 0x186a0
mov dword [0x81c700], eax
jb 0x68b9d4
mov eax, dword [0x820dd0]
mov ecx, dword [0x829478]
mov edx, eax
mov dword [0x81c700], ebp
sub edx, ecx
cmp edx, eax
jne 0x68b848
inc dword [0x8294f0]
call fcn.0045dca0
mov eax, dword [0x820dd0]
mov ecx, dword [0x829478]
mov edx, ecx
sub edx, eax
cmp edx, ecx
jne 0x68b85b
inc dword [0x8294f0]
call fcn.0045dca0
mov al, byte [0x81c644]
test al, al
jne 0x68b875
mov ecx, 0x83f450
call fcn.005ddd50
mov byte [0x81c644], 1
call dword [sym.imp.WINMM.dll_timeGetTime]
mov ecx, dword [0x83f450]
cmp eax, ecx
jbe 0x68b889
sub eax, ecx
jmp 0x68b891
mov ecx, dword [0x83f454]
add eax, ecx
mov ecx, dword [0x829468]
cmp eax, ecx
jb 0x68b8b1
mov edx, eax
or edx, ecx
je 0x68b8b1
mov edx, eax
sub edx, ecx
cmp edx, 0x3a98
jbe 0x68b9d4
mov cl, byte [0x81c6fc]
test cl, cl
jne 0x68b9d4
mov ecx, dword [0x8294e8]
mov dword [0x829468], eax
mov eax, dword [0x829478]
cmp ecx, ebp
mov byte [0x81c6fc], 1
not eax
jle 0x68b92d
mov ebx, 0x820e44
mov dword [esp + 0x54], ecx
mov ecx, dword [ebx]
test ecx, ecx
je 0x68b91f
mov esi, dword [ecx + 4]
test esi, esi
jle 0x68b91f
mov edx, dword [ecx]
mov edi, dword [edx + 0xc]
sar edi, 2
test edx, edx
je 0x68b91f
test esi, esi
jle 0x68b91f
mov ebp, esi
mov ecx, dword [edx]
xor eax, ecx
lea ecx, [edx + 0x14]
test edi, edi
jle 0x68b919
mov esi, edi
xor eax, dword [ecx]
add ecx, 4
dec esi
jne 0x68b911
mov edx, dword [edx + 4]
dec ebp
jne 0x68b904
mov ecx, dword [esp + 0x54]
add ebx, 4
dec ecx
mov dword [esp + 0x54], ecx
jne 0x68b8e5
cmp eax, dword [0x8294d8]
je 0x68b940
inc dword [0x8294f0]
call fcn.0045dca0
mov eax, dword [0x8294e8]
xor esi, esi
cmp eax, esi
je 0x68b9bf
mov eax, dword [0x829464]
mov dword [esp + 0x54], esi
cmp eax, esi
je 0x68b985
lea edx, [esp + 0x54]
push edx
push eax
call fcn.00407b70
add esp, 8
test al, al
je 0x68b97a
mov eax, dword [esp + 0x54]
cmp eax, esi
je 0x68b97a
cmp dword [eax], 0x29874362
je 0x68b985
inc dword [0x8294f0]
call fcn.0045dca0
mov eax, dword [0x8294b0]
mov dword [esp + 0x54], esi
cmp eax, esi
je 0x68b9bf
lea ecx, [esp + 0x54]
push ecx
push eax
call fcn.00407b70
add esp, 8
test al, al
je 0x68b9b4
mov eax, dword [esp + 0x54]
cmp eax, esi
je 0x68b9b4
cmp dword [eax], 0xbad0bad
je 0x68b9bf
inc dword [0x8294f0]
call fcn.0045dca0
mov esi, dword [esp + 0x2c]
mov ebx, dword [esp + 0x1c]
mov edi, dword [esp + 0x18]
mov byte [0x81c6fc], 0
xor ebp, ebp
cmp esi, ebp
je 0x68b9dc
fld dword [esi]
jmp 0x68b9e2
fld dword [0x89fe2c]
mov al, byte [esp + 0x50]
test al, al
je 0x68b9f0
fmul dword [0x7cd778]
mov eax, dword [ebx + 0x30]
cmp eax, ebp
je 0x68b9fc
mov eax, dword [eax + 4]
jmp 0x68b9fe
xor eax, eax
fld dword [esp + 0x14]
fadd dword [esp + 0x10]
mov ecx, dword [edi + 0x960]
push eax
push ecx
fmul st(1)
mov edx, dword [ecx]
fmul dword [esp + 0x28]
fstp dword [esp]
fstp st(0)
call dword [edx + 0x18]
fld dword [esp + 0x10]
fcomp dword [0x7cd7b4]
fnstsw ax
test ah, 0x41
jne 0x68bfe2
mov eax, dword [ebx + 4]
cmp eax, 0xffffffff
je 0x68bcba
push eax
call fcn.0045c0b0
add esp, 4
cmp eax, ebp
je 0x68bcba
push ebp
add eax, 0x14
push 4
push eax
mov eax, dword [0x8294dc]
lea ecx, [eax*4 + 0x8294b4]
push ecx
call fcn.0045cba0
mov eax, dword [0x8294dc]
add esp, 0x10
lea esi, [eax*4 + 0x8294b4]
inc eax
cmp eax, 8
mov dword [esp + 0x54], esi
mov dword [0x8294dc], eax
jl 0x68ba8d
mov dword [0x8294dc], ebp
push ebp
call fcn.0045d120
mov eax, dword [0x81c700]
add esp, 4
inc eax
cmp eax, 0x186a0
mov dword [0x81c700], eax
jb 0x68bcb2
mov eax, dword [0x820dd0]
mov ecx, dword [0x829478]
mov edx, eax
mov dword [0x81c700], ebp
sub edx, ecx
cmp edx, eax
jne 0x68badb
inc dword [0x8294f0]
call fcn.0045dca0
mov eax, dword [0x820dd0]
mov ecx, dword [0x829478]
mov edx, ecx
sub edx, eax
cmp edx, ecx
jne 0x68baee
inc dword [0x8294f0]
call fcn.0045dca0
mov al, byte [0x81c644]
test al, al
jne 0x68bb08
mov ecx, 0x83f450
call fcn.005ddd50
mov byte [0x81c644], 1
call dword [sym.imp.WINMM.dll_timeGetTime]
mov ecx, dword [0x83f450]
cmp eax, ecx
jbe 0x68bb1c
sub eax, ecx
jmp 0x68bb24
mov ecx, dword [0x83f454]
add eax, ecx
mov ecx, dword [0x829468]
cmp eax, ecx
jb 0x68bb44
mov edx, eax
or edx, ecx
je 0x68bb44
mov edx, eax
sub edx, ecx
cmp edx, 0x3a98
jbe 0x68bcb2
mov cl, byte [0x81c6fc]
test cl, cl
jne 0x68bcb2
mov ecx, dword [0x8294e8]
mov dword [0x829468], eax
mov eax, dword [0x829478]
cmp ecx, ebp
mov byte [0x81c6fc], 1
not eax
jle 0x68bbc0
mov ebx, 0x820e44
mov dword [esp + 0x50], ecx
mov ecx, dword [ebx]
test ecx, ecx
je 0x68bbb2
mov esi, dword [ecx + 4]
test esi, esi
jle 0x68bbb2
mov edx, dword [ecx]
mov edi, dword [edx + 0xc]
sar edi, 2
test edx, edx
je 0x68bbb2
test esi, esi
jle 0x68bbb2
mov ebp, esi
mov ecx, dword [edx]
xor eax, ecx
lea ecx, [edx + 0x14]
test edi, edi
jle 0x68bbac
mov esi, edi
xor eax, dword [ecx]
add ecx, 4
dec esi
jne 0x68bba4
mov edx, dword [edx + 4]
dec ebp
jne 0x68bb97
mov ecx, dword [esp + 0x50]
add ebx, 4
dec ecx
mov dword [esp + 0x50], ecx
jne 0x68bb78
cmp eax, dword [0x8294d8]
je 0x68bbd3
inc dword [0x8294f0]
call fcn.0045dca0
mov eax, dword [0x8294e8]
xor esi, esi
cmp eax, esi
je 0x68bc9d
mov eax, dword [0x829464]
mov dword [esp + 0x50], esi
cmp eax, esi
je 0x68bc63
push eax
call fcn.0045c0b0
add esp, 4
cmp eax, esi
je 0x68bc58
mov edx, dword [0x829488]
push esi
add eax, 0x14
push 4
push eax
lea eax, [edx*4 + 0x82948c]
push eax
call fcn.0045cba0
mov eax, dword [0x829488]
add esp, 0x10
lea ecx, [eax*4 + 0x82948c]
inc eax
cmp eax, 8
mov dword [esp + 0x50], ecx
mov dword [0x829488], eax
jl 0x68bc3a
mov dword [0x829488], esi
push esi
call fcn.0045d120
add esp, 4
call fcn.004059e0
mov eax, dword [esp + 0x50]
cmp eax, esi
je 0x68bc58
cmp dword [eax], 0x29874362
je 0x68bc63
inc dword [0x8294f0]
call fcn.0045dca0
mov eax, dword [0x8294b0]
mov dword [esp + 0x50], esi
cmp eax, esi
je 0x68bc9d
lea edx, [esp + 0x50]
push edx
push eax
call fcn.00407b70
add esp, 8
test al, al
je 0x68bc92
mov eax, dword [esp + 0x50]
cmp eax, esi
je 0x68bc92
cmp dword [eax], 0xbad0bad
je 0x68bc9d
inc dword [0x8294f0]
call fcn.0045dca0
mov esi, dword [esp + 0x54]
mov ebx, dword [esp + 0x1c]
mov edi, dword [esp + 0x18]
mov byte [0x81c6fc], 0
xor ebp, ebp
cmp esi, ebp
je 0x68bcba
fld dword [esi]
jmp 0x68bcc0
fld dword [0x89fe2c]
fcomp dword [0x7cd7b4]
fnstsw ax
test ah, 0x41
je 0x68bfe2
mov eax, dword [esp + 0x4c]
mov eax, dword [eax + 0x14]
cmp eax, ebp
je 0x68bce1
mov ecx, dword [eax + 4]
jmp 0x68bce3
xor ecx, ecx
mov eax, dword [ebx + 0x30]
cmp eax, ebp
je 0x68bcef
mov eax, dword [eax + 4]
jmp 0x68bcf1
xor eax, eax
cmp ecx, eax
je 0x68bfe2
mov eax, dword [ebx + 0x30]
cmp eax, ebp
je 0x68bd09
mov ecx, dword [eax + 4]
mov dword [esp + 0x50], ecx
jmp 0x68bd0d
mov dword [esp + 0x50], ebp
mov eax, dword [ebx + 0x20]
cmp eax, 0xffffffff
je 0x68bfc4
push eax
call fcn.0045c0b0
add esp, 4
cmp eax, ebp
je 0x68bfc4
mov edx, dword [0x8294dc]
push ebp
add eax, 0x14
push 4
push eax
lea eax, [edx*4 + 0x8294b4]
push eax
call fcn.0045cba0
mov eax, dword [0x8294dc]
add esp, 0x10
lea esi, [eax*4 + 0x8294b4]
inc eax
cmp eax, 8
mov dword [esp + 0x54], esi
mov dword [0x8294dc], eax
jl 0x68bd68
mov dword [0x8294dc], ebp
push ebp
call fcn.0045d120
mov eax, dword [0x81c700]
add esp, 4
inc eax
cmp eax, 0x186a0
mov dword [0x81c700], eax
jb 0x68bfbc
mov eax, dword [0x820dd0]
mov ecx, dword [0x829478]
mov edx, eax
mov dword [0x81c700], ebp
sub edx, ecx
cmp edx, eax
jne 0x68bdb6
inc dword [0x8294f0]
call fcn.0045dca0
mov eax, dword [0x820dd0]
mov ecx, dword [0x829478]
mov edx, ecx
sub edx, eax
cmp edx, ecx
jne 0x68bdc9
inc dword [0x8294f0]
call fcn.0045dca0
mov al, byte [0x81c644]
test al, al
jne 0x68bde3
mov ecx, 0x83f450
call fcn.005ddd50
mov byte [0x81c644], 1
call dword [sym.imp.WINMM.dll_timeGetTime]
mov ecx, dword [0x83f450]
cmp eax, ecx
jbe 0x68bdf7
sub eax, ecx
jmp 0x68bdff
mov ecx, dword [0x83f454]
add eax, ecx
mov ecx, dword [0x829468]
cmp eax, ecx
jb 0x68be1f
mov edx, eax
or edx, ecx
je 0x68be1f
mov edx, eax
sub edx, ecx
cmp edx, 0x3a98
jbe 0x68bfbc
mov cl, byte [0x81c6fc]
test cl, cl
jne 0x68bfbc
mov ecx, dword [0x8294e8]
mov dword [0x829468], eax
mov eax, dword [0x829478]
cmp ecx, ebp
mov byte [0x81c6fc], 1
not eax
jle 0x68be9b
mov ebx, 0x820e44
mov dword [esp + 0x4c], ecx
mov ecx, dword [ebx]
test ecx, ecx
je 0x68be8d
mov esi, dword [ecx + 4]
test esi, esi
jle 0x68be8d
mov edx, dword [ecx]
mov edi, dword [edx + 0xc]
sar edi, 2
test edx, edx
je 0x68be8d
test esi, esi
jle 0x68be8d
mov ebp, esi
mov ecx, dword [edx]
xor eax, ecx
lea ecx, [edx + 0x14]
test edi, edi
jle 0x68be87
mov esi, edi
xor eax, dword [ecx]
add ecx, 4
dec esi
jne 0x68be7f
mov edx, dword [edx + 4]
dec ebp
jne 0x68be72
mov ecx, dword [esp + 0x4c]
add ebx, 4
dec ecx
mov dword [esp + 0x4c], ecx
jne 0x68be53
cmp eax, dword [0x8294d8]
je 0x68beae
inc dword [0x8294f0]
call fcn.0045dca0
mov eax, dword [0x8294e8]
xor edi, edi
cmp eax, edi
je 0x68bfa7
mov eax, dword [0x829464]
cmp eax, edi
je 0x68bf32
push eax
call fcn.0045c0b0
add esp, 4
cmp eax, edi
je 0x68bf27
mov edx, dword [0x829488]
push edi
add eax, 0x14
push 4
push eax
lea eax, [edx*4 + 0x82948c]
push eax
call fcn.0045cba0
mov eax, dword [0x829488]
add esp, 0x10
lea esi, [eax*4 + 0x82948c]
inc eax
cmp eax, 8
mov dword [0x829488], eax
jl 0x68bf0d
mov dword [0x829488], edi
push edi
call fcn.0045d120
add esp, 4
call fcn.004059e0
cmp esi, edi
je 0x68bf27
cmp dword [esi], 0x29874362
je 0x68bf32
inc dword [0x8294f0]
call fcn.0045dca0
mov eax, dword [0x8294b0]
cmp eax, edi
je 0x68bfa7
push eax
call fcn.0045c0b0
add esp, 4
cmp eax, edi
je 0x68bf9c
mov ecx, dword [0x829488]
push edi
add eax, 0x14
push 4
lea edx, [ecx*4 + 0x82948c]
push eax
push edx
call fcn.0045cba0
mov eax, dword [0x829488]
add esp, 0x10
lea esi, [eax*4 + 0x82948c]
inc eax
cmp eax, 8
mov dword [0x829488], eax
jl 0x68bf82
mov dword [0x829488], edi
push edi
call fcn.0045d120
add esp, 4
call fcn.004059e0
cmp esi, edi
je 0x68bf9c
cmp dword [esi], 0xbad0bad
je 0x68bfa7
inc dword [0x8294f0]
call fcn.0045dca0
mov esi, dword [esp + 0x54]
mov ebx, dword [esp + 0x1c]
mov edi, dword [esp + 0x18]
mov byte [0x81c6fc], 0
xor ebp, ebp
cmp esi, ebp
je 0x68bfc4
fld dword [esi]
jmp 0x68bfca
fld dword [0x89fe2c]
mov edx, dword [esp + 0x50]
mov ecx, dword [edi + 0x960]
fmul dword [esp + 0x20]
mov eax, dword [ecx]
push edx
push ecx
fstp dword [esp]
call dword [eax + 0x1c]
mov eax, dword [ebx + 4]
cmp eax, 0xffffffff
je 0x68c298
push eax
call fcn.0045c0b0
add esp, 4
cmp eax, ebp
je 0x68c298
push ebp
add eax, 0x14
push 4
push eax
mov eax, dword [0x8294dc]
lea ecx, [eax*4 + 0x8294b4]
push ecx
call fcn.0045cba0
mov eax, dword [0x8294dc]
add esp, 0x10
lea esi, [eax*4 + 0x8294b4]
inc eax
cmp eax, 8
mov dword [esp + 0x50], esi
mov dword [0x8294dc], eax
jl 0x68c03c
mov dword [0x8294dc], ebp
push ebp
call fcn.0045d120
mov eax, dword [0x81c700]
add esp, 4
inc eax
cmp eax, 0x186a0
mov dword [0x81c700], eax
jb 0x68c288
mov eax, dword [0x820dd0]
mov ecx, dword [0x829478]
mov edx, eax
mov dword [0x81c700], ebp
sub edx, ecx
cmp edx, eax
jne 0x68c08a
inc dword [0x8294f0]
call fcn.0045dca0
mov eax, dword [0x820dd0]
mov ecx, dword [0x829478]
mov edx, ecx
sub edx, eax
cmp edx, ecx
jne 0x68c09d
inc dword [0x8294f0]
call fcn.0045dca0
mov al, byte [0x81c644]
test al, al
jne 0x68c0b7
mov ecx, 0x83f450
call fcn.005ddd50
mov byte [0x81c644], 1
call dword [sym.imp.WINMM.dll_timeGetTime]
mov ecx, dword [0x83f450]
cmp eax, ecx
jbe 0x68c0cb
sub eax, ecx
jmp 0x68c0d3
mov ecx, dword [0x83f454]
add eax, ecx
mov ecx, dword [0x829468]
cmp eax, ecx
jb 0x68c0f3
mov edx, ecx
or edx, eax
je 0x68c0f3
mov edx, eax
sub edx, ecx
cmp edx, 0x3a98
jbe 0x68c288
mov cl, byte [0x81c6fc]
test cl, cl
jne 0x68c288
mov ecx, dword [0x8294e8]
mov dword [0x829468], eax
mov eax, dword [0x829478]
cmp ecx, ebp
mov byte [0x81c6fc], 1
not eax
jle 0x68c16f
mov ebx, 0x820e44
mov dword [esp + 0x4c], ecx
mov ecx, dword [ebx]
test ecx, ecx
je 0x68c161
mov esi, dword [ecx + 4]
test esi, esi
jle 0x68c161
mov edx, dword [ecx]
mov edi, dword [edx + 0xc]
sar edi, 2
test edx, edx
je 0x68c161
test esi, esi
jle 0x68c161
mov ebp, esi
mov ecx, dword [edx]
xor eax, ecx
lea ecx, [edx + 0x14]
test edi, edi
jle 0x68c15b
mov esi, edi
xor eax, dword [ecx]
add ecx, 4
dec esi
jne 0x68c153
mov edx, dword [edx + 4]
dec ebp
jne 0x68c146
mov ecx, dword [esp + 0x4c]
add ebx, 4
dec ecx
mov dword [esp + 0x4c], ecx
jne 0x68c127
cmp eax, dword [0x8294d8]
je 0x68c182
inc dword [0x8294f0]
call fcn.0045dca0
mov eax, dword [0x8294e8]
xor edi, edi
cmp eax, edi
je 0x68c27b
mov eax, dword [0x829464]
cmp eax, edi
je 0x68c206
push eax
call fcn.0045c0b0
add esp, 4
cmp eax, edi
je 0x68c1fb
mov edx, dword [0x829488]
push edi
add eax, 0x14
push 4
push eax
lea eax, [edx*4 + 0x82948c]
push eax
call fcn.0045cba0
mov eax, dword [0x829488]
add esp, 0x10
lea esi, [eax*4 + 0x82948c]
inc eax
cmp eax, 8
mov dword [0x829488], eax
jl 0x68c1e1
mov dword [0x829488], edi
push edi
call fcn.0045d120
add esp, 4
call fcn.004059e0
cmp esi, edi
je 0x68c1fb
cmp dword [esi], 0x29874362
je 0x68c206
inc dword [0x8294f0]
call fcn.0045dca0
mov eax, dword [0x8294b0]
cmp eax, edi
je 0x68c27b
push eax
call fcn.0045c0b0
add esp, 4
cmp eax, edi
je 0x68c270
mov ecx, dword [0x829488]
push edi
add eax, 0x14
push 4
lea edx, [ecx*4 + 0x82948c]
push eax
push edx
call fcn.0045cba0
mov eax, dword [0x829488]
add esp, 0x10
lea esi, [eax*4 + 0x82948c]
inc eax
cmp eax, 8
mov dword [0x829488], eax
jl 0x68c256
mov dword [0x829488], edi
push edi
call fcn.0045d120
add esp, 4
call fcn.004059e0
cmp esi, edi
je 0x68c270
cmp dword [esi], 0xbad0bad
je 0x68c27b
inc dword [0x8294f0]
call fcn.0045dca0
mov esi, dword [esp + 0x50]
mov byte [0x81c6fc], 0
xor ebp, ebp
cmp esi, ebp
je 0x68c298
fld dword [esi]
pop edi
pop esi
pop ebp
pop ebx
add esp, 0x38
ret 0xc
fld dword [0x89fe2c]
pop edi
pop esi
pop ebp
pop ebx
add esp, 0x38
ret 0xc