Function at 0x1016f6d5
Capabilities:
Resolve function by parsing pe exports

Disassembly:
push ebp
mov ebp, esp
and esp, 0xfffffff8
sub esp, 0x88
mov eax, dword [0x11ad127c]
xor eax, esp
mov dword [esp + 0x84], eax
push esi
mov esi, ecx
push edi
mov edi, dword [ebp + 8]
mov dword [esp + 0x24], esi
mov eax, dword [esi + 0x10]
mov dword [esp + 0x68], edi
test al, 1
je 0x1016f1c5
cmp byte [edi + 0x7fc4], 0
jne 0x1016f19e
mov ecx, edi
mov byte [edi + 0x7fc4], 1
call fcn.100bb7f0
mov ecx, edi
call fcn.100bb600
cmp byte [edi + 0x7fc4], 0
mov ecx, dword [edi + 0x2ca4]
je 0x1016f19e
test ecx, ecx
je 0x1016f135
mov eax, dword [ecx]
mov eax, dword [eax + 0x54]
call eax
mov ecx, dword [edi + 0x7fb8]
shr eax, 0x10
not ecx
and ecx, eax
mov eax, 0
mov dword [esp + 0x48], ecx
mov dword [esp + 0x14], eax
je 0x1016f135
lea esi, [edi + 0x2838]
test cl, 1
je 0x1016f11f
mov edx, dword [esi]
mov ecx, edi
push 0
push eax
call fcn.100baf20
mov ecx, dword [esp + 0x48]
mov eax, dword [esp + 0x14]
shr ecx, 1
inc eax
add esi, 4
mov dword [esp + 0x48], ecx
mov dword [esp + 0x14], eax
test ecx, ecx
jne 0x1016f106
mov esi, dword [esp + 0x24]
mov eax, dword [edi + 0x2c78]
test eax, eax
je 0x1016f19e
mov ecx, dword [eax + 0x14]
test ecx, ecx
je 0x1016f19e
mov eax, dword [edi + 0x7fbc]
not eax
and eax, dword [ecx + 0x5cc]
mov ecx, 0
mov dword [esp + 0x48], eax
mov dword [esp + 0x14], ecx
je 0x1016f19e
lea esi, [edi + 0x2878]
nop dword [eax]
test al, 1
je 0x1016f188
mov edx, dword [esi]
push 1
push ecx
mov ecx, edi
call fcn.100baf20
mov eax, dword [esp + 0x48]
mov ecx, dword [esp + 0x14]
shr eax, 1
inc ecx
add esi, 4
mov dword [esp + 0x48], eax
mov dword [esp + 0x14], ecx
test eax, eax
jne 0x1016f170
mov esi, dword [esp + 0x24]
mov eax, dword [esi + 0x10]
cmp eax, 1
jne 0x1016f1c5
mov dword [esi + 0x10], 0
xor eax, eax
pop edi
pop esi
mov ecx, dword [esp + 0x84]
xor ecx, esp
call fcn.1045066c
mov esp, ebp
pop ebp
ret 4
test eax, 0x40000000
je 0x1016f1d2
push edi
call fcn.1012e860
mov eax, dword fs:[0x2c]
mov ecx, dword [0x11d0c5b8]
mov dword [esp + 0x48], eax
mov eax, dword [eax + ecx*4]
mov dword [esp + 0x2c], eax
mov eax, dword [eax + 0x10]
mov esi, dword [eax + 0x7a68]
mov esi, dword [esi + 8]
mov dword [esp + 0x44], esi
mov eax, dword [esi + 0x20]
add eax, 0xb8
cmp eax, dword [esi + 0x24]
jb 0x1016f212
push 0x2e
mov ecx, esi
call fcn.101e4a10
mov ecx, dword [esp + 0x24]
lea eax, [edi + 0x28b0]
mov edx, dword [esi + 0x20]
mov dword [esp + 0xc], edx
mov dword [esp + 0x10], edx
test dword [ecx + 0x10], 0x200000
je 0x1016f2dd
test byte [edi + 0xf5a], 2
je 0x1016f247
mov edx, dword [eax]
mov dword [esp + 0x4c], eax
test edx, edx
jne 0x1016f251
mov edx, dword [edi + 0x288c]
mov dword [esp + 0x4c], eax
movzx ecx, word [edi + 0x2c70]
movzx eax, word [edi + 0x2c72]
add eax, ecx
mov dword [esp + 0x58], ecx
movzx ecx, word [edi + 0x2c74]
mov dword [esp + 0x60], eax
movzx eax, word [edi + 0x2c76]
add eax, ecx
mov dword [esp + 0x5c], ecx
mov dword [esp + 0x64], eax
mov ecx, edx
lea eax, [esp + 0x64]
push eax
lea eax, [esp + 0x64]
push eax
lea eax, [esp + 0x64]
push eax
lea eax, [esp + 0x64]
push eax
call fcn.10173390
mov edx, dword [esp + 0x64]
movzx eax, word [esp + 0x5c]
mov ecx, dword [esp + 0x60]
shl edx, 0x10
or edx, eax
shl ecx, 0x10
movzx eax, word [esp + 0x58]
or ecx, eax
mov eax, dword [esp + 0xc]
mov dword [eax], 0x20020381
mov dword [eax + 4], ecx
mov ecx, dword [esp + 0x24]
mov dword [eax + 8], edx
lea edx, [eax + 0xc]
mov eax, dword [esp + 0x4c]
mov dword [esp + 0xc], edx
mov dword [esp + 0x10], edx
jmp 0x1016f2e1
mov dword [esp + 0x4c], eax
test dword [ecx + 0x10], 0x8000
xorps xmm0, xmm0
je 0x1016f35d
cmp dword [edi + 0xf84], 0x900
jb 0x1016f35d
mov eax, dword [eax]
test eax, eax
je 0x1016f347
mov edx, dword [eax + 0x20c]
test byte [eax + 0x91], 0x40
mov eax, edx
mov dword [esp + 0x1c], edx
movzx eax, byte [eax + 0x61]
je 0x1016f324
test byte [edx + 0x6d], 0x40
mov edx, 4
cmovne eax, edx
cmp eax, 2
je 0x1016f333
movss xmm0, dword [0x1122d588]
jmp 0x1016f33b
movss xmm0, dword [0x1122d56c]
mulss xmm0, dword [edi + 0x176c]
mov edx, dword [esp + 0xc]
mov dword [edx], 0x2001056f
movss dword [edx + 4], xmm0
add edx, 8
mov dword [esp + 0xc], edx
mov dword [esp + 0x10], edx
test dword [ecx + 0x10], 0x10000
je 0x1016f703
mov eax, dword [esp + 0x2c]
mov ecx, dword [eax + 0x10]
add ecx, 0x8040
cmp byte [ecx + 0xc], 0
je 0x1016f3d4
mov eax, dword [esp + 0x4c]
mov eax, dword [eax]
test eax, eax
je 0x1016f3d4
cmp dword [edi + 0x1530], 0
je 0x1016f3d4
mov eax, dword [eax + 0x20c]
push dword [eax + 0x18c]
call fcn.1017dd60
mov dword [esp + 0x20], eax
test eax, eax
je 0x1016f3d4
mov ecx, dword [edi + 0x1548]
movzx edx, byte [edi + 0x1544]
shl ecx, 8
or edx, ecx
mov ecx, dword [edi + 0x1540]
dec ecx
shl edx, 0x10
movzx eax, cl
or edx, eax
mov eax, dword [esp + 0x20]
mov dword [eax + 0x20], edx
mov eax, dword [edi + 0x1538]
mov ecx, dword [edi + 0x1534]
and eax, 0xf
movzx edx, byte [edi + 0x1548]
and ecx, 0xf
mov dword [esp + 0x28], eax
mov eax, dword [edi + 0x153c]
and eax, 0xf
mov dword [esp + 0x1c], edx
mov dword [esp + 0x18], eax
mov eax, dword [edi + 0x1540]
and eax, 0xf
mov dword [esp + 0x30], eax
cmp eax, 8
jne 0x1016f419
lea ecx, [eax - 7]
jmp 0x1016f432
cmp eax, 1
jne 0x1016f432
cmp ecx, eax
je 0x1016f432
mov dword [esp + 0x30], 2
mov dword [esp + 0x1c], 0
mov edx, dword [esp + 0xc]
mov eax, dword [esp + 0x28]
mov dword [edx], 0x80010565
mov dword [edx + 4], 0x200404e1
mov dword [edx + 8], ecx
mov dword [edx + 0xc], eax
mov eax, dword [esp + 0x18]
mov dword [edx + 0x10], eax
mov eax, dword [esp + 0x30]
mov dword [edx + 0x14], eax
mov eax, dword [esp + 0x1c]
shl eax, 0x10
or eax, 0x800004e6
mov dword [edx + 0x18], eax
cmp dword [edi + 0x1744], 0
je 0x1016f4de
mov eax, dword [edi + 0x174c]
mov ecx, dword [edi + 0x1748]
and eax, 0xf
mov dword [esp + 0x28], eax
and ecx, 0xf
mov eax, dword [edi + 0x1750]
and eax, 0xf
mov dword [esp + 0x10], ecx
movzx ecx, byte [edi + 0x1548]
mov dword [esp + 0x18], eax
mov eax, dword [edi + 0x1754]
and eax, 0xf
mov dword [esp + 0x1c], ecx
mov ecx, dword [esp + 0x10]
mov dword [esp + 0x30], eax
cmp eax, 8
jne 0x1016f4c2
mov ecx, 1
jmp 0x1016f4e2
cmp eax, 1
jne 0x1016f4e2
cmp ecx, eax
je 0x1016f4e2
mov eax, 2
mov dword [esp + 0x1c], 0
mov dword [esp + 0x30], eax
jmp 0x1016f4e2
mov eax, dword [esp + 0x30]
mov dword [edx + 0x1c], 0x20040566
mov dword [edx + 0x20], ecx
mov ecx, dword [esp + 0x28]
mov dword [edx + 0x24], ecx
mov ecx, dword [esp + 0x18]
mov dword [edx + 0x28], ecx
mov dword [edx + 0x2c], eax
mov eax, dword [esp + 0x1c]
shl eax, 0x10
or eax, 0x800003d7
mov dword [edx + 0x30], eax
add edx, 0x34
mov cl, byte [edi + 0xf5a]
test cl, 0x10
je 0x1016f564
cmp dword [edi + 0x1538], 7
jne 0x1016f532
mov dword [edx], 0x800804e3
mov dword [edx + 4], 0x80070568
jmp 0x1016f53f
mov dword [edx], 0x800704e3
mov dword [edx + 4], 0x80080568
mov dword [edx + 8], 0x800104e2
mov dword [edx + 0xc], 0x80010567
add edx, 0x10
mov al, byte [edi + 0xf5a]
and al, 0xef
or al, 0x20
mov byte [edi + 0xf5a], al
mov eax, edx
jmp 0x1016f57c
mov dword [esp + 0x28], edx
mov eax, edx
mov dword [esp + 0x18], eax
test cl, 0x20
je 0x1016f584
and cl, 0xdf
mov byte [edi + 0xf5a], cl
mov dword [esp + 0x18], eax
mov dword [esp + 0x28], edx
mov eax, dword [esp + 0x4c]
mov eax, dword [eax]
mov dword [esp + 0x20], eax
test eax, eax
je 0x1016f59a
mov eax, dword [eax + 0x1f8]
jmp 0x1016f59c
xor eax, eax
mov ecx, dword [edi + 0x1544]
add ecx, eax
mov dword [esp + 0x14], eax
shl ecx, 0x10
and ecx, 0xff0000
mov eax, ecx
or eax, 0x800004e5
cmp dword [esp + 0x20], 0
mov dword [edx], eax
mov edx, dword [esp + 0x18]
cmove edx, dword [esp + 0x28]
or ecx, 0x800003d5
mov eax, dword [esp + 0x14]
mov dword [edx + 4], ecx
cmp dword [edi + 0x1744], 0
mov dword [edi + 0xf64], eax
jne 0x1016f60f
cmp dword [edi + 0x1534], 1
jne 0x1016f60f
cmp dword [edi + 0x1538], 1
jne 0x1016f60f
cmp dword [edi + 0x153c], 1
jne 0x1016f60f
mov dword [edx + 8], 0x800004e7
mov dword [edx + 0xc], 0x800003d6
jmp 0x1016f633
movzx eax, byte [edi + 0x154c]
shl eax, 0x10
or eax, 0x800004e7
mov dword [edx + 8], eax
movzx eax, byte [edi + 0x154c]
shl eax, 0x10
or eax, 0x800003d6
mov dword [edx + 0xc], eax
test byte [edi + 0xf59], 0x20
lea ecx, [edx + 0x10]
mov dword [esp + 0xc], ecx
mov dword [esp + 0x10], ecx
je 0x1016f707
test byte [edi + 0xf5a], 0x30
jne 0x1016f707
mov eax, dword [esp + 0x4c]
mov eax, dword [eax]
mov edx, dword [eax + 0x1b0]
mov dword [ecx], 0x800504e4
add ecx, 4
mov dword [esp + 0xc], ecx
mov dword [ecx], 0x800604e2
mov dword [ecx + 4], 0x80ff04e7
mov eax, dword [edi + 0x1544]
mov ecx, dword [esp + 0x30]
dec ecx
mov dword [esp + 0x18], eax
mov dword [esp + 0x14], ecx
movzx ecx, al
mov eax, dword [esp + 0x1c]
shl eax, 8
or ecx, eax
mov eax, dword [esp + 0x14]
shl ecx, 0x10
movzx eax, al
or ecx, eax
mov eax, dword [esp + 0x14]
mov dword [edx + 0x10], ecx
mov edx, dword [esp + 0xc]
mov dword [edx + 8], 0x20010376
mov dword [edx + 0xc], ecx
cmp eax, 7
ja case.0x1016f6c3.1
jmp dword [eax*4 + 0x1017108c]
mov eax, 0xff
jmp 0x1016f6e1
xor eax, eax
jmp 0x1016f6e1
mov eax, dword [esp + 0x18]
not eax
jmp 0x1016f6e1
mov eax, dword [esp + 0x18]
movzx eax, al
lea ecx, [edx + 0x18]
shl eax, 0x10
or eax, 0x80000368
mov dword [esp + 0xc], ecx
mov dword [edx + 0x10], eax
mov dword [edx + 0x14], 0x801004b2
mov dword [esp + 0x10], ecx
jmp 0x1016f707
mov ecx, dword [esp + 0xc]
mov edx, dword [esp + 0x24]
movss xmm5, dword [0x1122e460]
test byte [edx + 0x10], 4
je 0x1016fb97
movss xmm1, dword [edi + 0xf3c]
mov eax, dword [edi + 0x5e64]
movaps xmm0, xmm1
mulss xmm1, dword [edi + 0xf30]
xorps xmm0, xmm5
movss dword [esp + 0x6c], xmm0
movss dword [esp + 0x70], xmm1
movss xmm1, dword [edi + 0xf38]
movaps xmm0, xmm1
mulss xmm1, dword [0x1122d250]
mulss xmm0, dword [0x1122d270]
movss dword [esp + 0x78], xmm1
movss dword [esp + 0x74], xmm0
cmp byte [eax + 0x12], 0
je 0x1016f7a2
test byte [edx + 0x19750], 4
jne 0x1016fb73
mov eax, dword [esp + 0x2c]
mov eax, dword [eax + 0x10]
mov eax, dword [eax + 0x7a68]
test byte [eax + 0x19750], 4
jne 0x1016f95b
mov eax, dword [edi + 0x5e64]
mov ecx, dword [eax + 4]
test ecx, ecx
je 0x1016f95b
mov ecx, dword [ecx + 8]
lea eax, [ecx + 8]
neg ecx
sbb ecx, ecx
and ecx, eax
je 0x1016f95b
cmp dword [ecx], 0
je 0x1016f95b
mov edx, dword [esp + 0x2c]
mov eax, dword [edx + 0x10]
mov ecx, dword [eax + 0xbe2c]
mov eax, dword [ecx + 0x11d4]
mov ecx, dword [ecx + 0x107c]
mov dword [esp + 0x28], ecx
mov eax, dword [eax + 4]
mov dword [esp + 0x38], eax
inc dword [ecx + eax*4 + 0xb38]
mov eax, dword [edi + 0x5e64]
mov ecx, dword [eax + 4]
test ecx, ecx
je 0x1016f811
mov ecx, dword [ecx + 8]
lea eax, [ecx + 8]
neg ecx
sbb ecx, ecx
and ecx, eax
jmp 0x1016f813
xor ecx, ecx
mov eax, dword [ecx + 0xc0]
test eax, eax
cmovne ecx, eax
mov eax, dword [edx + 0x10]
mov dword [esp + 0x18], ecx
mov eax, dword [eax + 0xbe2c]
mov edx, dword [eax + 0x107c]
mov eax, dword [eax + 0x11d4]
mov dword [esp + 0x14], edx
cmp byte [edx + 0x21], 0
mov eax, dword [eax + 4]
je 0x1016f8e4
mov esi, eax
mov edx, dword [edx + esi*4 + 0x830]
cmp dword [ecx + esi*4 + 0x9cc], edx
je 0x1016f881
mov eax, dword [ecx + 0xa50]
btr eax, esi
mov dword [ecx + 0xa50], eax
mov dword [ecx + esi*4 + 0x9cc], edx
cmp dword [ecx + 0xa4c], edx
jae 0x1016f881
mov dword [ecx + 0xa4c], edx
or byte [ecx + 0xb1], 0x20
mov eax, 1
mov edx, dword [ecx + 0x9c0]
mov ecx, esi
shl eax, cl
test eax, edx
jne 0x1016f8d4
mov edx, dword [esp + 0x18]
mov ecx, dword [esp + 0x14]
push 1
push esi
push edx
call fcn.10287930
mov edx, eax
test edx, edx
jns 0x1016f8d4
mov eax, dword [esp + 0x14]
mov dword [eax + esi*4 + 0x17c4], edx
mov ecx, dword [eax + 0x17c0]
mov eax, dword [esp + 0x10]
mov esi, dword [esp + 0x44]
mov dword [esp + 0xc], eax
mov dword [ecx + 8], edx
jmp 0x1016f944
mov eax, dword [esp + 0x10]
mov esi, dword [esp + 0x44]
mov ecx, dword [esp + 0x18]
mov dword [esp + 0xc], eax
mov eax, dword [esp + 0x2c]
mov eax, dword [eax + 0x10]
mov eax, dword [eax + 0xbe2c]
mov edx, dword [eax + 0x11d4]
mov eax, dword [edx + 8]
cmp eax, 1
je 0x1016f907
cmp eax, 0x16
jne 0x1016f918
push 3
push 0
push ecx
push 0xd6
mov ecx, edx
call fcn.101ced20
mov eax, dword [esp + 0x2c]
mov edx, dword [esp + 0x18]
mov eax, dword [eax + 0x10]
mov ecx, dword [edx + 0xa50]
mov eax, dword [eax + 0xbe2c]
mov eax, dword [eax + 0x11d4]
mov eax, dword [eax + 4]
bts ecx, eax
mov dword [edx + 0xa50], ecx
mov eax, dword [esp + 0x38]
mov ecx, dword [esp + 0x28]
movss xmm5, dword [0x1122e460]
dec dword [ecx + eax*4 + 0xb38]
mov eax, dword [edi + 0x5e64]
mov ecx, dword [esp + 0xc]
mov eax, dword [eax + 0xc]
and eax, 0x1ffff
mov dword [ecx], 0x200108e0
mov dword [ecx + 4], eax
mov eax, dword [edi + 0x5e64]
mov edx, dword [eax + 8]
mov eax, dword [eax + 4]
mov dword [esp + 0x10], edx
test eax, eax
je 0x1016f9a4
mov eax, dword [eax + 8]
mov dword [esp + 0x30], eax
add eax, 8
mov ecx, dword [esp + 0x30]
neg ecx
sbb ecx, ecx
and ecx, eax
mov dword [esp + 0x30], ecx
jmp 0x1016f9ac
mov dword [esp + 0x30], 0
mov eax, dword [esi + 8]
mov edx, dword [esp + 0x30]
mov ecx, dword [esp + 0x10]
test byte [eax + 0x605], 4
jne 0x1016fb2c
mov eax, dword [eax]
mov eax, dword [eax + 0x11d0]
mov dword [eax + 0x16ee0], ecx
mov ecx, dword [esp + 0xc]
mov dword [eax + 0x16edc], edx
mov dword [eax + 0x16ee4], 3
mov eax, dword [esi + 8]
mov dword [esp + 0x1c], eax
test byte [eax + 0x604], 0x10
je 0x1016fa2a
push dword [esp + 0x10]
mov ecx, eax
push 3
push edx
call fcn.101d3100
mov dword [esp + 0x28], eax
mov eax, dword [esp + 0xc]
movzx ecx, dl
mov dword [eax + 8], 0x200208e1
add eax, 0xc
mov dword [esp + 0x14], eax
mov dword [eax], ecx
mov ecx, eax
mov eax, dword [esp + 0x28]
jmp 0x1016fb4f
lea eax, [ecx + 0xc]
mov dword [esp + 0x14], eax
test eax, eax
je 0x1016fa3e
sub eax, dword [esi + 0x1c]
mov dword [esp + 0x20], eax
jmp 0x1016fa46
mov dword [esp + 0x20], 0
mov dword [esp + 0x38], 0
test edx, edx
je 0x1016fa66
mov ecx, dword [esp + 0x1c]
push 3
push edx
call fcn.101d3710
mov ecx, dword [esp + 0xc]
mov dword [esp + 0x38], eax
mov eax, dword [esp + 0x1c]
mov eax, dword [eax + 0x250]
mov dword [esp + 0x18], eax
mov edx, eax
mov eax, dword [eax + 0x28]
mov dword [esp + 0x28], eax
mov edx, dword [edx + 0x20]
mov dword [esp + 0x3c], edx
cmp eax, edx
jae 0x1016fb19
mov ecx, dword [esp + 0x18]
lea eax, [eax + eax*2]
mov edx, dword [esp + 0x38]
mov dword [esp + 0x3c], eax
mov ecx, dword [ecx + 0x1c]
mov dword [esp + 0x18], ecx
and dword [ecx + eax*8 + 4], 0xff000000
mov dword [ecx + eax*8], edx
mov edx, dword [esp + 0x30]
mov dword [ecx + eax*8 + 8], 9
mov eax, dword [esp + 0x10]
test edx, edx
je 0x1016facd
mov edx, dword [edx + 0xb4]
test edx, edx
je 0x1016facd
add eax, edx
mov edx, dword [esp + 0x3c]
mov ecx, dword [esp + 0x18]
mov dword [ecx + edx*8 + 0xc], eax
mov eax, ecx
mov ecx, dword [esp + 0x20]
mov dword [eax + edx*8 + 0x10], ecx
mov eax, dword [esp + 0x1c]
mov ecx, dword [esp + 0x18]
mov eax, dword [eax + 0x5e4]
mov dword [ecx + edx*8 + 0x14], eax
mov eax, dword [esp + 0x1c]
mov ecx, dword [esp + 0xc]
mov eax, dword [eax + 0x250]
inc dword [eax + 0x28]
mov eax, dword [esp + 0x28]
mov dword [ecx + 8], 0x200208e1
mov ecx, dword [esp + 0x14]
mov dword [ecx], eax
jmp 0x1016fb4f
mov eax, dword [esp + 0x3c]
mov dword [ecx + 8], 0x200208e1
mov ecx, dword [esp + 0x14]
mov dword [ecx], eax
jmp 0x1016fb4f
xor eax, eax
add ecx, dword [edx + 0x20]
mov dword [esp + 0x10], ecx
mov ecx, dword [esp + 0xc]
adc eax, dword [edx + 0x24]
movzx eax, al
mov dword [ecx + 8], 0x200208e1
add ecx, 0xc
mov dword [ecx], eax
mov eax, dword [esp + 0x10]
mov edx, dword [esp + 0x24]
mov dword [ecx + 4], eax
add ecx, 8
mov eax, dword [edi + 0x5e64]
mov al, byte [eax + 0x12]
shl al, 2
xor al, byte [edx + 0x19750]
and al, 4
xor byte [edx + 0x19750], al
mov dword [ecx], 0x200108e3
mov dword [ecx + 4], 0xc60
movups xmm0, xmmword [esp + 0x6c]
mov dword [ecx + 8], 0x200408e4
movups xmmword [ecx + 0xc], xmm0
add ecx, 0x1c
mov dword [esp + 0xc], ecx
test dword [edx + 0x10], 0x40000
movss xmm3, dword [0x1122d240]
je 0x1016fc94
cmp dword [edi + 0xf84], 0x800
movaps xmm0, xmm3
movss dword [esp + 0x1c], xmm0
jb 0x1016fc78
mov ecx, dword [edi + 0x2c78]
mov edx, dword [edi + 0x2c88]
mov eax, dword [ecx + 0x44]
mov eax, dword [eax + 0xa0]
mov dword [esp + 0x20], eax
mov eax, edx
sub eax, 0
je 0x1016fbfa
sub eax, 1
jne 0x1016fbf4
cmp dword [esp + 0x20], 0xffffffff
setne al
jmp 0x1016fc0e
mov al, byte [esp + 0x37]
jmp 0x1016fc0e
mov ecx, dword [ecx + 0x14]
call fcn.100b1a00
mov ecx, dword [edi + 0x2c78]
mov edx, dword [edi + 0x2c88]
mov byte [esp + 0x37], al
test al, al
jne 0x1016fdb2
test edx, edx
jne 0x1016fc2e
mov ecx, dword [ecx + 0x14]
call fcn.100b1a00
test al, al
jne 0x1016fdae
movss xmm0, dword [edi + 0x16c8]
mov eax, dword [edi + 0x288c]
maxss xmm0, dword [edi + 0x16cc]
mov eax, dword [eax + 0x20c]
minss xmm0, dword [edi + 0x16f8]
test eax, eax
je 0x1016fc5c
movzx ecx, byte [eax + 0x5c]
jmp 0x1016fc5e
xor ecx, ecx
lea eax, [ecx*8]
sub eax, ecx
mulss xmm0, dword [eax*8 + 0x10f2ce40]
mov edx, dword [esp + 0x24]
mov ecx, dword [esp + 0xc]
mov dword [ecx], 0x20010546
movss dword [ecx + 4], xmm0
mov dword [ecx + 8], 0x2001068b
mov dword [ecx + 0xc], 0
add ecx, 0x10
mov dword [esi + 0x20], ecx
test dword [edx + 0x10], 0x4000
je 0x1016fcaf
mov eax, dword [edx]
mov ecx, edx
push edi
call dword [eax + 0xe8]
mov edx, dword [esp + 0x24]
test dword [edx + 0x10], 0x8000000
je 0x1016fcf5
mov eax, dword [esi + 0x20]
mov ecx, dword [edi + 0xf6c]
add eax, 4
mov dword [esp + 0x3c], ecx
cmp eax, dword [esi + 0x24]
jb 0x1016fcde
push 1
mov ecx, esi
call fcn.101e4a10
mov edx, dword [esp + 0x24]
mov ecx, dword [esp + 0x3c]
mov eax, dword [esi + 0x20]
and ecx, 0xf
shl ecx, 0x10
or ecx, 0x801001d5
mov dword [eax], ecx
add eax, 4
mov dword [esi + 0x20], eax
test byte [edx + 0x10], 2
je 0x1016fd57
mov ecx, dword [edi + 0x7f90]
shr ecx, 0xc
and ecx, 1
mov dword [esp + 0x20], ecx
jne 0x1016fd18
movzx eax, byte [edi + 0x16c0]
mov dword [esp + 0x20], eax
mov eax, dword [esi + 0x20]
add eax, 4
cmp eax, dword [esi + 0x24]
jb 0x1016fd2c
push 1
mov ecx, esi
call fcn.101e4a10
mov eax, dword [esi + 0x20]
mov ecx, dword [esp + 0x20]
shl ecx, 0x10
or ecx, 0x80000544
mov dword [eax], ecx
add eax, 4
mov dword [esi + 0x20], eax
mov ecx, dword [edi + 0x2c78]
push edi
mov ecx, dword [ecx + 0x14]
call fcn.100b0c20
mov edx, dword [esp + 0x24]
test dword [edx + 0x10], 0x1000
je 0x10170d81
mov eax, dword [esi + 0x20]
add eax, 0x50
cmp eax, dword [esi + 0x24]
jb 0x1016fd7c
push 0x14
mov ecx, esi
call fcn.101e4a10
mov edx, dword [esp + 0x24]
test byte [edi + 0xf5b], 0x40
mov ecx, dword [esi + 0x20]
movzx eax, byte [edi + 0x14c0]
mov dword [esp + 0xc], ecx
mov dword [esp + 0x10], ecx
je 0x10170d4e
cmp eax, 1
jae 0x1016fff9
mov eax, 1
jmp 0x1017000b
mov al, byte [esp + 0x37]
movss xmm2, dword [edi + 0x16cc]
movss xmm4, dword [edi + 0x16f8]
movss xmm1, dword [edi + 0x16c8]
test al, al
je 0x1016fc70
cmp dword [esp + 0x20], 0xffffffff
je 0x1016fdde
movaps xmm1, xmm3
jmp 0x1016fde6
maxss xmm1, dword [0x1122d138]
movzx eax, word [edi + 0x28d2]
movd xmm0, eax
cvtdq2ps xmm0, xmm0
mulss xmm0, xmm1
movaps xmm1, xmm3
divss xmm1, xmm0
mulss xmm1, xmm1
movaps xmm0, xmm1
mulss xmm0, dword [edi + 0x16d8]
movss dword [esp + 0x6c], xmm0
movaps xmm0, xmm1
mulss xmm1, dword [edi + 0x16e0]
mulss xmm0, dword [edi + 0x16dc]
movss dword [esp + 0x74], xmm1
movaps xmm1, xmm4
subss xmm1, xmm2
movss dword [esp + 0x70], xmm0
xorps xmm0, xmm0
ucomiss xmm1, xmm0
movss dword [esp + 0x78], xmm1
movss dword [esp + 0x7c], xmm1
lahf
test ah, 0x44
jnp 0x1016fe5c
movaps xmm0, xmm2
xorps xmm0, xmm5
divss xmm0, xmm1
mov ecx, dword [esp + 0x24]
lea edx, [esp + 0x6c]
mov eax, dword [esp + 0xc]
push 2
movss dword [esp + 0x84], xmm0
movss dword [esp + 0x88], xmm4
movss dword [esp + 0x8c], xmm2
push 0xbd
mov dword [esi + 0x20], eax
mov eax, dword [ecx]
push edx
push edi
call dword [eax + 0xb4]
mov eax, dword [esi + 0x20]
add eax, 0x10
cmp eax, dword [esi + 0x24]
jb 0x1016feab
push 4
mov ecx, esi
call fcn.101e4a10
mov eax, dword [edi + 0x2c78]
mov edx, dword [esp + 0x24]
movss xmm0, dword [edi + 0x16f8]
mov ecx, dword [esi + 0x20]
mov eax, dword [eax + 0x14]
mov dword [esp + 0x14], eax
mov eax, dword [edx + 4]
mov dword [esp + 0xc], ecx
ucomiss xmm0, dword [eax + 0xd7a4]
lahf
test ah, 0x44
jp 0x1016ff0b
movss xmm0, dword [edi + 0x16cc]
ucomiss xmm0, dword [0x11229920]
lahf
test ah, 0x44
jp 0x1016ff0b
xorps xmm0, xmm0
movlpd qword [esp + 0x58], xmm0
mov eax, dword [esp + 0x5c]
mov dword [esp + 0x28], eax
mov eax, dword [esp + 0x58]
mov dword [esp + 0x18], eax
jmp 0x1016ff1b
mov dword [esp + 0x18], 0
mov dword [esp + 0x28], 0x20000
mov eax, dword [esp + 0x14]
cmp dword [eax + 0x404], 0
je 0x1016ffee
cmp dword [eax + 0x408], 0xfffe0300
jb 0x1016ff51
cmp dword [eax + 0x584], 4
jbe 0x1016ffee
mov eax, dword [eax + 0x58c]
cmp dword [eax + 0x10], 0xffffffff
jmp 0x1016ff7c
mov eax, dword [esp + 0x2c]
mov eax, dword [eax + 0x10]
mov ecx, dword [eax + 0x7a68]
mov eax, 1
mov ecx, dword [ecx + 0x2cf4]
shl eax, cl
mov ecx, dword [esp + 0x14]
test dword [ecx + 0x5b4], eax
mov ecx, dword [esp + 0xc]
setne al
test al, al
je 0x1016ffee
mov eax, dword [esp + 0x14]
mov edx, dword [eax + 0x6c]
and edx, 0x20000
mov dword [esp + 0x3c], edx
xor edx, edx
cmp edx, dword [esp + 0x18]
mov edx, dword [esp + 0x24]
jne 0x1016ffae
mov ecx, dword [esp + 0x3c]
cmp ecx, dword [esp + 0x28]
mov ecx, dword [esp + 0xc]
je 0x1016ffee
mov edx, dword [eax + 0x6c]
mov ecx, dword [eax + 0x68]
and edx, 0xfffdffff
or ecx, dword [esp + 0x18]
or edx, dword [esp + 0x28]
or byte [eax + 0x5c], 2
movss xmm0, dword [esp + 0x1c]
mov dword [eax + 0x68], ecx
mov dword [eax + 0x6c], edx
mov eax, dword [esp + 0x2c]
mov eax, dword [eax + 0x10]
mov eax, dword [eax + 0x7a68]
or dword [eax + 0xc], 0x8000
jmp 0x1016fc70
movss xmm0, dword [esp + 0x1c]
jmp 0x1016fc78
cmp eax, 0xfe
mov dword [esp + 0x3c], 0xfe
cmova eax, dword [esp + 0x3c]
movd xmm0, eax
xorps xmm6, xmm6
movss xmm1, dword [0x1122d158]
shr eax, 0x1f
cvtdq2pd xmm0, xmm0
movss xmm4, dword [0x1122d240]
addsd xmm0, qword [eax*8 + 0x1122e340]
mov eax, dword [esp + 0x2c]
mov eax, dword [eax + 0x10]
cvtpd2ps xmm5, xmm0
movss xmm2, dword [eax + 0xd420]
ucomiss xmm2, xmm6
mulss xmm5, xmm1
lahf
movss dword [esp + 0x58], xmm5
test ah, 0x44
jnp 0x1017008d
mov ecx, dword [esp + 0x2c]
mov eax, dword [ecx + 0x10]
mov ecx, dword [esp + 0xc]
mov eax, dword [eax + 0xd41c]
movd xmm0, eax
cvtdq2pd xmm0, xmm0
shr eax, 0x1f
addsd xmm0, qword [eax*8 + 0x1122e340]
cvtpd2ps xmm3, xmm0
mulss xmm3, xmm1
jmp 0x101700ca
movaps xmm0, xmm4
movss xmm2, dword [0x1122d434]
subss xmm0, xmm5
movaps xmm1, xmm5
minss xmm1, xmm0
movaps xmm0, xmm4
addss xmm1, xmm1
divss xmm0, xmm1
movss xmm1, dword [0x1122d4cc]
minss xmm1, xmm0
comiss xmm2, xmm1
ja 0x101700c2
movaps xmm2, xmm1
movss xmm3, dword [0x1122d1e4]
movaps xmm0, xmm3
mov eax, dword [edi + 0x5e64]
divss xmm0, xmm2
cmp byte [eax + 0x12], 0
movaps xmm1, xmm5
subss xmm1, xmm0
movaps xmm0, xmm4
subss xmm0, xmm3
maxss xmm1, xmm6
divss xmm0, xmm2
addss xmm0, xmm5
minss xmm0, xmm4
subss xmm0, xmm1
xorps xmm1, xmmword [0x1122e460]
divss xmm4, xmm0
mulss xmm1, xmm4
movss dword [esp + 0x40], xmm4
movss dword [esp + 0x54], xmm1
je 0x1017014a
test byte [edx + 0x19750], 4
jne 0x10170503
mov edx, dword [esp + 0x2c]
mov eax, dword [edx + 0x10]
mov eax, dword [eax + 0x7a68]
test byte [eax + 0x19750], 4
jne 0x10170307
mov eax, dword [edi + 0x5e64]
mov edx, dword [eax + 4]
test edx, edx
je 0x10170307
mov edx, dword [edx + 8]
lea eax, [edx + 8]
neg edx
sbb edx, edx
and edx, eax
je 0x10170307
cmp dword [edx], 0
je 0x10170307
mov ecx, dword [esp + 0x2c]
mov eax, dword [ecx + 0x10]
mov ecx, dword [eax + 0xbe2c]
mov eax, dword [ecx + 0x11d4]
mov ecx, dword [ecx + 0x107c]
mov dword [esp + 0x28], ecx
mov eax, dword [eax + 4]
mov dword [esp + 0x18], eax
inc dword [ecx + eax*4 + 0xb38]
mov eax, dword [edi + 0x5e64]
mov edx, dword [eax + 4]
test edx, edx
je 0x101701b9
mov edx, dword [edx + 8]
lea eax, [edx + 8]
neg edx
sbb edx, edx
and edx, eax
jmp 0x101701bb
xor edx, edx
mov eax, dword [edx + 0xc0]
test eax, eax
cmovne edx, eax
mov eax, dword [esp + 0x2c]
mov dword [esp + 0x14], edx
mov eax, dword [eax + 0x10]
mov eax, dword [eax + 0xbe2c]
mov ecx, dword [eax + 0x107c]
mov eax, dword [eax + 0x11d4]
mov dword [esp + 0x20], ecx
mov ecx, dword [eax + 4]
mov eax, dword [esp + 0x20]
mov dword [esp + 0x38], ecx
cmp byte [eax + 0x21], 0
je 0x1017029a
mov esi, eax
mov eax, dword [esi + ecx*4 + 0x830]
mov dword [esp + 0x3c], eax
cmp dword [edx + ecx*4 + 0x9cc], eax
je 0x1017023d
mov eax, dword [edx + 0xa50]
btr eax, ecx
mov dword [edx + 0xa50], eax
mov eax, dword [esp + 0x3c]
mov dword [edx + ecx*4 + 0x9cc], eax
cmp dword [edx + 0xa4c], eax
jae 0x1017023d
mov dword [edx + 0xa4c], eax
or byte [edx + 0xb1], 0x20
mov eax, 1
mov edx, dword [edx + 0x9c0]
shl eax, cl
test eax, edx
jne 0x1017028a
mov edx, dword [esp + 0x14]
push 1
push ecx
push edx
mov ecx, esi
call fcn.10287930
test eax, eax
jns 0x1017028a
mov ecx, dword [esp + 0x38]
mov dword [esi + ecx*4 + 0x17c4], eax
mov ecx, dword [esi + 0x17c0]
mov esi, dword [esp + 0x44]
mov dword [ecx + 8], eax
mov ecx, dword [esp + 0x10]
mov dword [esp + 0xc], ecx
jmp 0x101702f8
mov eax, dword [esp + 0x10]
mov esi, dword [esp + 0x44]
mov edx, dword [esp + 0x14]
mov dword [esp + 0xc], eax
mov eax, dword [esp + 0x2c]
mov eax, dword [eax + 0x10]
mov eax, dword [eax + 0xbe2c]
mov ecx, dword [eax + 0x11d4]
call fcn.101c2790
test al, al
je 0x101702c8
push 3
push 0
push edx
push 0xd6
call fcn.101ced20
mov eax, dword [esp + 0x2c]
mov edx, dword [esp + 0x14]
mov eax, dword [eax + 0x10]
mov ecx, dword [edx + 0xa50]
mov eax, dword [eax + 0xbe2c]
mov eax, dword [eax + 0x11d4]
mov eax, dword [eax + 4]
bts ecx, eax
mov dword [edx + 0xa50], ecx
mov ecx, dword [esp + 0xc]
mov eax, dword [esp + 0x18]
mov edx, dword [esp + 0x28]
dec dword [edx + eax*4 + 0xb38]
mov eax, dword [edi + 0x5e64]
mov eax, dword [eax + 0xc]
and eax, 0x1ffff
mov dword [ecx], 0x200108e0
mov dword [ecx + 4], eax
mov eax, dword [edi + 0x5e64]
mov edx, dword [eax + 8]
mov dword [esp + 0x10], edx
mov edx, dword [eax + 4]
test edx, edx
je 0x10170340
mov edx, dword [edx + 8]
lea eax, [edx + 8]
neg edx
sbb edx, edx
and edx, eax
jmp 0x10170342
xor edx, edx
mov eax, dword [esi + 8]
mov ecx, dword [esp + 0x10]
mov dword [esp + 0x14], edx
test byte [eax + 0x605], 4
jne 0x101704bc
mov eax, dword [eax]
mov eax, dword [eax + 0x11d0]
mov dword [eax + 0x16ee0], ecx
mov ecx, dword [esp + 0xc]
mov dword [eax + 0x16edc], edx
mov dword [eax + 0x16ee4], 3
mov eax, dword [esi + 8]
mov dword [esp + 0x1c], eax
test byte [eax + 0x604], 0x10
je 0x101703ba
push dword [esp + 0x10]
mov ecx, eax
push 3
push edx
call fcn.101d3100
mov dword [esp + 0x28], eax
mov eax, dword [esp + 0xc]
movzx ecx, dl
lea edx, [eax + 0xc]
mov dword [eax + 8], 0x200208e1
mov eax, dword [esp + 0x28]
mov dword [edx], ecx
jmp 0x101704df
lea eax, [ecx + 0xc]
mov dword [esp + 0x50], eax
test eax, eax
je 0x101703ce
sub eax, dword [esi + 0x1c]
mov dword [esp + 0x30], eax
jmp 0x101703d6
mov dword [esp + 0x30], 0
mov dword [esp + 0x38], 0
test edx, edx
je 0x101703f6
mov ecx, dword [esp + 0x1c]
push 3
push edx
call fcn.101d3710
mov ecx, dword [esp + 0xc]
mov dword [esp + 0x38], eax
mov eax, dword [esp + 0x1c]
mov eax, dword [eax + 0x250]
mov dword [esp + 0x20], eax
mov edx, eax
mov eax, dword [eax + 0x28]
mov dword [esp + 0x28], eax
mov edx, dword [edx + 0x20]
mov dword [esp + 0x3c], edx
cmp eax, edx
jae 0x101704a9
mov ecx, dword [esp + 0x20]
lea eax, [eax + eax*2]
mov edx, dword [esp + 0x38]
mov dword [esp + 0x3c], eax
mov ecx, dword [ecx + 0x1c]
mov dword [esp + 0x18], ecx
and dword [ecx + eax*8 + 4], 0xff000000
mov dword [ecx + eax*8], edx
mov edx, dword [esp + 0x14]
mov dword [ecx + eax*8 + 8], 9
mov eax, dword [esp + 0x10]
test edx, edx
je 0x1017045d
mov edx, dword [edx + 0xb4]
test edx, edx
je 0x1017045d
add eax, edx
mov edx, dword [esp + 0x3c]
mov ecx, dword [esp + 0x18]
mov dword [ecx + edx*8 + 0xc], eax
mov eax, ecx
mov ecx, dword [esp + 0x30]
mov dword [eax + edx*8 + 0x10], ecx
mov eax, dword [esp + 0x1c]
mov ecx, dword [esp + 0x18]
mov eax, dword [eax + 0x5e4]
mov dword [ecx + edx*8 + 0x14], eax
mov eax, dword [esp + 0x1c]
mov ecx, dword [esp + 0xc]
mov edx, dword [esp + 0x50]
mov eax, dword [eax + 0x250]
inc dword [eax + 0x28]
mov eax, dword [esp + 0x28]
mov dword [ecx + 8], 0x200208e1
mov dword [edx], eax
jmp 0x101704df
mov edx, dword [esp + 0x50]
mov eax, dword [esp + 0x3c]
mov dword [ecx + 8], 0x200208e1
mov dword [edx], eax
jmp 0x101704df
xor eax, eax
add ecx, dword [edx + 0x20]
mov dword [esp + 0x10], ecx
adc eax, dword [edx + 0x24]
mov ecx, dword [esp + 0xc]
movzx eax, al
lea edx, [ecx + 0xc]
mov dword [ecx + 8], 0x200208e1
mov dword [edx], eax
mov eax, dword [esp + 0x10]
mov dword [edx + 4], eax
lea ecx, [edx + 8]
mov eax, dword [edi + 0x5e64]
mov edx, dword [esp + 0x24]
mov al, byte [eax + 0x12]
shl al, 2
xor al, byte [edx + 0x19750]
and al, 4
xor byte [edx + 0x19750], al
mov eax, dword [esp + 0x40]
mov dword [ecx], 0x200208e3
mov dword [ecx + 4], 0xc90
mov dword [ecx + 8], eax
add ecx, 0xc
mov eax, dword [edi + 0x5e64]
mov dword [esp + 0xc], ecx
mov dword [esp + 0x10], ecx
cmp byte [eax + 0x12], 0
je 0x1017055e
test byte [edx + 0x19750], 4
jne 0x10170917
mov eax, dword [esp + 0x2c]
mov eax, dword [eax + 0x10]
mov eax, dword [eax + 0x7a68]
test byte [eax + 0x19750], 4
jne 0x1017071b
mov eax, dword [edi + 0x5e64]
mov edx, dword [eax + 4]
test edx, edx
je 0x1017071b
mov edx, dword [edx + 8]
lea eax, [edx + 8]
neg edx
sbb edx, edx
and edx, eax
je 0x1017071b
cmp dword [edx], 0
je 0x1017071b
mov eax, dword [esp + 0x2c]
mov eax, dword [eax + 0x10]
mov ecx, dword [eax + 0xbe2c]
mov eax, dword [ecx + 0x11d4]
mov ecx, dword [ecx + 0x107c]
mov dword [esp + 0x38], ecx
mov eax, dword [eax + 4]
mov dword [esp + 0x3c], eax
inc dword [ecx + eax*4 + 0xb38]
mov eax, dword [edi + 0x5e64]
mov edx, dword [eax + 4]
test edx, edx
je 0x101705cd
mov edx, dword [edx + 8]
lea eax, [edx + 8]
neg edx
sbb edx, edx
and edx, eax
jmp 0x101705cf
xor edx, edx
mov eax, dword [edx + 0xc0]
test eax, eax
cmovne edx, eax
mov eax, dword [esp + 0x2c]
mov dword [esp + 0x14], edx
mov eax, dword [eax + 0x10]
mov eax, dword [eax + 0xbe2c]
mov ecx, dword [eax + 0x107c]
mov eax, dword [eax + 0x11d4]
mov dword [esp + 0x20], ecx
mov ecx, dword [eax + 4]
mov eax, dword [esp + 0x20]
mov dword [esp + 0x50], ecx
cmp byte [eax + 0x21], 0
je 0x101706ae
mov esi, eax
mov eax, dword [esi + ecx*4 + 0x830]
mov dword [esp + 0x40], eax
cmp dword [edx + ecx*4 + 0x9cc], eax
je 0x10170651
mov eax, dword [edx + 0xa50]
btr eax, ecx
mov dword [edx + 0xa50], eax
mov eax, dword [esp + 0x40]
mov dword [edx + ecx*4 + 0x9cc], eax
cmp dword [edx + 0xa4c], eax
jae 0x10170651
mov dword [edx + 0xa4c], eax
or byte [edx + 0xb1], 0x20
mov eax, 1
mov edx, dword [edx + 0x9c0]
shl eax, cl
test eax, edx
jne 0x1017069e
mov edx, dword [esp + 0x14]
push 1
push ecx
push edx
mov ecx, esi
call fcn.10287930
test eax, eax
jns 0x1017069e
mov ecx, dword [esp + 0x50]
mov dword [esi + ecx*4 + 0x17c4], eax
mov ecx, dword [esi + 0x17c0]
mov esi, dword [esp + 0x44]
mov dword [ecx + 8], eax
mov ecx, dword [esp + 0x10]
mov dword [esp + 0xc], ecx
jmp 0x1017070c
mov eax, dword [esp + 0x10]
mov esi, dword [esp + 0x44]
mov edx, dword [esp + 0x14]
mov dword [esp + 0xc], eax
mov eax, dword [esp + 0x2c]
mov eax, dword [eax + 0x10]
mov eax, dword [eax + 0xbe2c]
mov ecx, dword [eax + 0x11d4]
call fcn.101c2790
test al, al
je 0x101706dc
push 3
push 0
push edx
push 0xd6
call fcn.101ced20
mov eax, dword [esp + 0x2c]
mov edx, dword [esp + 0x14]
mov eax, dword [eax + 0x10]
mov ecx, dword [edx + 0xa50]
mov eax, dword [eax + 0xbe2c]
mov eax, dword [eax + 0x11d4]
mov eax, dword [eax + 4]
bts ecx, eax
mov dword [edx + 0xa50], ecx
mov ecx, dword [esp + 0xc]
mov eax, dword [esp + 0x3c]
mov edx, dword [esp + 0x38]
dec dword [edx + eax*4 + 0xb38]
mov eax, dword [edi + 0x5e64]
mov eax, dword [eax + 0xc]
and eax, 0x1ffff
mov dword [ecx], 0x200108e0
mov dword [ecx + 4], eax
mov eax, dword [edi + 0x5e64]
mov edx, dword [eax + 8]
mov dword [esp + 0x10], edx
mov edx, dword [eax + 4]
test edx, edx
je 0x10170754
mov edx, dword [edx + 8]
lea eax, [edx + 8]
neg edx
sbb edx, edx
and edx, eax
jmp 0x10170756
xor edx, edx
mov eax, dword [esi + 8]
mov ecx, dword [esp + 0x10]
mov dword [esp + 0x14], edx
test byte [eax + 0x605], 4
jne 0x101708d0
mov eax, dword [eax]
mov eax, dword [eax + 0x11d0]
mov dword [eax + 0x16ee0], ecx
mov ecx, dword [esp + 0xc]
mov dword [eax + 0x16edc], edx
mov dword [eax + 0x16ee4], 3
mov eax, dword [esi + 8]
mov dword [esp + 0x1c], eax
test byte [eax + 0x604], 0x10
je 0x101707ce
push dword [esp + 0x10]
mov ecx, eax
push 3
push edx
call fcn.101d3100
mov dword [esp + 0x28], eax
mov eax, dword [esp + 0xc]
movzx ecx, dl
lea edx, [eax + 0xc]
mov dword [eax + 8], 0x200208e1
mov eax, dword [esp + 0x28]
mov dword [edx], ecx
jmp 0x101708f3
lea eax, [ecx + 0xc]
mov dword [esp + 0x50], eax
test eax, eax
je 0x101707e2
sub eax, dword [esi + 0x1c]
mov dword [esp + 0x30], eax
jmp 0x101707ea
mov dword [esp + 0x30], 0
mov dword [esp + 0x38], 0
test edx, edx
je 0x1017080a
mov ecx, dword [esp + 0x1c]
push 3
push edx
call fcn.101d3710
mov ecx, dword [esp + 0xc]
mov dword [esp + 0x38], eax
mov eax, dword [esp + 0x1c]
mov eax, dword [eax + 0x250]
mov dword [esp + 0x20], eax
mov edx, eax
mov eax, dword [eax + 0x28]
mov dword [esp + 0x28], eax
mov edx, dword [edx + 0x20]
mov dword [esp + 0x40], edx
cmp eax, edx
jae 0x101708bd
mov ecx, dword [esp + 0x20]
lea eax, [eax + eax*2]
mov edx, dword [esp + 0x38]
mov dword [esp + 0x40], eax
mov ecx, dword [ecx + 0x1c]
mov dword [esp + 0x18], ecx
and dword [ecx + eax*8 + 4], 0xff000000
mov dword [ecx + eax*8], edx
mov edx, dword [esp + 0x14]
mov dword [ecx + eax*8 + 8], 9
mov eax, dword [esp + 0x10]
test edx, edx
je 0x10170871
mov edx, dword [edx + 0xb4]
test edx, edx
je 0x10170871
add eax, edx
mov edx, dword [esp + 0x40]
mov ecx, dword [esp + 0x18]
mov dword [ecx + edx*8 + 0xc], eax
mov eax, ecx
mov ecx, dword [esp + 0x30]
mov dword [eax + edx*8 + 0x10], ecx
mov eax, dword [esp + 0x1c]
mov ecx, dword [esp + 0x18]
mov eax, dword [eax + 0x5e4]
mov dword [ecx + edx*8 + 0x14], eax
mov eax, dword [esp + 0x1c]
mov ecx, dword [esp + 0xc]
mov edx, dword [esp + 0x50]
mov eax, dword [eax + 0x250]
inc dword [eax + 0x28]
mov eax, dword [esp + 0x28]
mov dword [ecx + 8], 0x200208e1
mov dword [edx], eax
jmp 0x101708f3
mov edx, dword [esp + 0x50]
mov eax, dword [esp + 0x40]
mov dword [ecx + 8], 0x200208e1
mov dword [edx], eax
jmp 0x101708f3
xor eax, eax
add ecx, dword [edx + 0x20]
mov dword [esp + 0x10], ecx
adc eax, dword [edx + 0x24]
mov ecx, dword [esp + 0xc]
movzx eax, al
lea edx, [ecx + 0xc]
mov dword [ecx + 8], 0x200208e1
mov dword [edx], eax
mov eax, dword [esp + 0x10]
mov dword [edx + 4], eax
lea ecx, [edx + 8]
mov eax, dword [edi + 0x5e64]
mov edx, dword [esp + 0x24]
mov al, byte [eax + 0x12]
shl al, 2
xor al, byte [edx + 0x19750]
and al, 4
xor byte [edx + 0x19750], al
mov eax, dword [esp + 0x54]
mov dword [ecx], 0x200208e3
mov dword [ecx + 4], 0xc94
mov dword [ecx + 8], eax
add ecx, 0xc
mov eax, dword [edi + 0x5e64]
mov dword [esp + 0xc], ecx
mov dword [esp + 0x10], ecx
cmp byte [eax + 0x12], 0
je 0x10170972
test byte [edx + 0x19750], 4
jne 0x10170d24
mov eax, dword [esp + 0x2c]
mov eax, dword [eax + 0x10]
mov eax, dword [eax + 0x7a68]
test byte [eax + 0x19750], 4
jne 0x10170b2f
mov eax, dword [edi + 0x5e64]
mov edx, dword [eax + 4]
test edx, edx
je 0x10170b2f
mov edx, dword [edx + 8]
lea eax, [edx + 8]
neg edx
sbb edx, edx
and edx, eax
je 0x10170b2f
cmp dword [edx], 0
je 0x10170b2f
mov eax, dword [esp + 0x2c]
mov eax, dword [eax + 0x10]
mov ecx, dword [eax + 0xbe2c]
mov eax, dword [ecx + 0x11d4]
mov ecx, dword [ecx + 0x107c]
mov dword [esp + 0x3c], ecx
mov eax, dword [eax + 4]
mov dword [esp + 0x50], eax
inc dword [ecx + eax*4 + 0xb38]
mov eax, dword [edi + 0x5e64]
mov edx, dword [eax + 4]
test edx, edx
je 0x101709e1
mov edx, dword [edx + 8]
lea eax, [edx + 8]
neg edx
sbb edx, edx
and edx, eax
jmp 0x101709e3
xor edx, edx
mov eax, dword [edx + 0xc0]
test eax, eax
cmovne edx, eax
mov eax, dword [esp + 0x2c]
mov dword [esp + 0x20], edx
mov eax, dword [eax + 0x10]
mov eax, dword [eax + 0xbe2c]
mov ecx, dword [eax + 0x107c]
mov eax, dword [eax + 0x11d4]
mov dword [esp + 0x14], ecx
mov ecx, dword [eax + 4]
mov eax, dword [esp + 0x14]
mov dword [esp + 0x40], ecx
cmp byte [eax + 0x21], 0
je 0x10170ac2
mov esi, eax
mov eax, dword [esi + ecx*4 + 0x830]
mov dword [esp + 0x54], eax
cmp dword [edx + ecx*4 + 0x9cc], eax
je 0x10170a65
mov eax, dword [edx + 0xa50]
btr eax, ecx
mov dword [edx + 0xa50], eax
mov eax, dword [esp + 0x54]
mov dword [edx + ecx*4 + 0x9cc], eax
cmp dword [edx + 0xa4c], eax
jae 0x10170a65
mov dword [edx + 0xa4c], eax
or byte [edx + 0xb1], 0x20
mov esi, 1
mov eax, dword [edx + 0x9c0]
shl esi, cl
test esi, eax
mov esi, dword [esp + 0x14]
jne 0x10170ab6
push 1
push ecx
push edx
mov ecx, esi
call fcn.10287930
test eax, eax
jns 0x10170ab2
mov ecx, dword [esp + 0x40]
mov dword [esi + ecx*4 + 0x17c4], eax
mov ecx, dword [esi + 0x17c0]
mov esi, dword [esp + 0x44]
mov dword [ecx + 8], eax
mov ecx, dword [esp + 0x10]
mov dword [esp + 0xc], ecx
jmp 0x10170b20
mov edx, dword [esp + 0x20]
mov eax, dword [esp + 0x10]
mov esi, dword [esp + 0x44]
mov dword [esp + 0xc], eax
mov eax, dword [esp + 0x2c]
mov eax, dword [eax + 0x10]
mov eax, dword [eax + 0xbe2c]
mov ecx, dword [eax + 0x11d4]
call fcn.101c2790
test al, al
je 0x10170af0
push 3
push 0
push edx
push 0xd6
call fcn.101ced20
mov eax, dword [esp + 0x2c]
mov edx, dword [esp + 0x20]
mov eax, dword [eax + 0x10]
mov ecx, dword [edx + 0xa50]
mov eax, dword [eax + 0xbe2c]
mov eax, dword [eax + 0x11d4]
mov eax, dword [eax + 4]
bts ecx, eax
mov dword [edx + 0xa50], ecx
mov ecx, dword [esp + 0xc]
mov eax, dword [esp + 0x50]
mov edx, dword [esp + 0x3c]
dec dword [edx + eax*4 + 0xb38]
mov eax, dword [edi + 0x5e64]
mov eax, dword [eax + 0xc]
and eax, 0x1ffff
mov dword [ecx], 0x200108e0
mov dword [ecx + 4], eax
mov eax, dword [edi + 0x5e64]
mov ecx, dword [eax + 4]
mov edx, dword [eax + 8]
mov dword [esp + 0x1c], edx
test ecx, ecx
je 0x10170b68
mov ecx, dword [ecx + 8]
lea eax, [ecx + 8]
neg ecx
sbb ecx, ecx
and ecx, eax
jmp 0x10170b6a
xor ecx, ecx
mov eax, dword [esi + 8]
mov dword [esp + 0x14], ecx
test byte [eax + 0x605], 4
jne 0x10170cdd
mov eax, dword [eax]
mov eax, dword [eax + 0x11d0]
mov dword [eax + 0x16edc], ecx
mov dword [eax + 0x16ee0], edx
mov dword [eax + 0x16ee4], 3
mov eax, dword [esi + 8]
mov dword [esp + 0x30], eax
test byte [eax + 0x604], 0x10
je 0x10170bd7
push edx
push 3
push ecx
mov ecx, eax
call fcn.101d3100
mov dword [esp + 0x28], eax
mov eax, dword [esp + 0xc]
movzx ecx, dl
lea edx, [eax + 0xc]
mov dword [eax + 8], 0x200208e1
mov eax, dword [esp + 0x28]
mov dword [edx], ecx
jmp 0x10170d00
mov edx, dword [esp + 0xc]
lea eax, [edx + 0xc]
mov dword [esp + 0x40], eax
test eax, eax
je 0x10170bef
sub eax, dword [esi + 0x1c]
mov dword [esp + 0x10], eax
jmp 0x10170bf7
mov dword [esp + 0x10], 0
mov dword [esp + 0x38], 0
test ecx, ecx
je 0x10170c17
push 3
push ecx
mov ecx, dword [esp + 0x38]
call fcn.101d3710
mov edx, dword [esp + 0xc]
mov dword [esp + 0x38], eax
mov eax, dword [esp + 0x30]
mov eax, dword [eax + 0x250]
mov dword [esp + 0x20], eax
mov ecx, eax
mov eax, dword [eax + 0x28]
mov dword [esp + 0x28], eax
mov ecx, dword [ecx + 0x20]
mov dword [esp + 0x54], ecx
cmp eax, ecx
jae 0x10170cca
mov edx, dword [esp + 0x20]
lea eax, [eax + eax*2]
mov ecx, dword [esp + 0x38]
mov dword [esp + 0x54], eax
mov edx, dword [edx + 0x1c]
mov dword [esp + 0x18], edx
and dword [edx + eax*8 + 4], 0xff000000
mov dword [edx + eax*8], ecx
mov ecx, dword [esp + 0x14]
mov dword [edx + eax*8 + 8], 9
mov eax, dword [esp + 0x1c]
test ecx, ecx
je 0x10170c7e
mov ecx, dword [ecx + 0xb4]
test ecx, ecx
je 0x10170c7e
add eax, ecx
mov ecx, dword [esp + 0x54]
mov edx, dword [esp + 0x18]
mov dword [edx + ecx*8 + 0xc], eax
mov eax, edx
mov edx, dword [esp + 0x10]
mov dword [eax + ecx*8 + 0x10], edx
mov eax, dword [esp + 0x30]
mov edx, dword [esp + 0x18]
mov eax, dword [eax + 0x5e4]
mov dword [edx + ecx*8 + 0x14], eax
mov eax, dword [esp + 0x30]
mov edx, dword [esp + 0xc]
mov eax, dword [eax + 0x250]
inc dword [eax + 0x28]
mov eax, dword [esp + 0x28]
mov dword [edx + 8], 0x200208e1
mov edx, dword [esp + 0x40]
mov dword [edx], eax
jmp 0x10170d00
mov eax, dword [esp + 0x54]
mov dword [edx + 8], 0x200208e1
mov edx, dword [esp + 0x40]
mov dword [edx], eax
jmp 0x10170d00
xor eax, eax
add edx, dword [ecx + 0x20]
mov dword [esp + 0x1c], edx
adc eax, dword [ecx + 0x24]
mov ecx, dword [esp + 0xc]
movzx eax, al
lea edx, [ecx + 0xc]
mov dword [ecx + 8], 0x200208e1
mov dword [edx], eax
mov eax, dword [esp + 0x1c]
mov dword [edx + 4], eax
lea ecx, [edx + 8]
mov eax, dword [edi + 0x5e64]
mov edx, dword [esp + 0x24]
mov al, byte [eax + 0x12]
shl al, 2
xor al, byte [edx + 0x19750]
and al, 4
xor byte [edx + 0x19750], al
movss xmm0, dword [esp + 0x58]
mov dword [ecx], 0x200108e3
mov dword [ecx + 4], 0xc80
shufps xmm0, xmm0, 0
mov dword [ecx + 8], 0x200408e4
movups xmmword [ecx + 0xc], xmm0
add ecx, 0x1c
xorps xmm0, xmm0
jmp 0x10170d6e
movd xmm0, eax
cvtdq2pd xmm0, xmm0
shr eax, 0x1f
addsd xmm0, qword [eax*8 + 0x1122e340]
cvtpd2ps xmm0, xmm0
mulss xmm0, dword [0x1122d158]
mov eax, ecx
mov dword [ecx], 0x200104c4
movss dword [eax + 4], xmm0
add eax, 8
mov dword [esi + 0x20], eax
test dword [edx + 0x10], 0x4000000
je 0x10170edf
mov eax, dword [esp + 0x4c]
mov eax, dword [eax]
mov dword [esp + 0x38], eax
test eax, eax
je 0x10170da9
cmp dword [edi + 0x1498], 0
je 0x10170da9
mov cl, 1
jmp 0x10170daf
xor cl, cl
test eax, eax
je 0x10170dd4
mov eax, dword [eax + 0x20c]
cmp dword [eax + 0x54], 0x5a574152
jne 0x10170dd4
cmp dword [edi + 0x1530], 0
je 0x10170dd4
cmp dword [edi + 0x154c], 0
je 0x10170dd4
mov al, 1
jmp 0x10170dd6
xor al, al
test cl, cl
jne 0x10170df0
test al, al
jne 0x10170df0
mov ecx, dword [edx + 0x19740]
push 0
call fcn.1017a570
jmp 0x10170edf
mov eax, dword [esp + 0x2c]
mov ecx, dword [eax + 0x10]
add ecx, 0x8040
cmp byte [ecx + 0xc], 0
je 0x10170e84
mov eax, dword [esp + 0x38]
mov eax, dword [eax + 0x20c]
mov dword [esp + 0x58], eax
push dword [eax + 0x18c]
call fcn.1017dd60
mov dword [esp + 0x20], eax
test eax, eax
je case.0x10170e57.3
mov eax, dword [esp + 0x58]
xor dl, dl
movsx ecx, byte [eax + 0x58]
add ecx, 0xffffffc8
cmp ecx, 6
ja case.0x10170e40.58
movzx eax, byte [ecx + 0x101710b4]
jmp dword [eax*4 + 0x101710ac]
mov dl, 1
mov eax, dword [edi + 0x14bc]
add eax, 0xfffffffe
cmp eax, 5
ja case.0x10170e57.3
jmp dword [eax*4 + 0x101710bc]
movzx eax, dl
xor eax, 1
shl eax, 0x10
inc eax
jmp 0x10170e79
test dl, dl
mov eax, 0x30001
mov ecx, 0x10000
cmove eax, ecx
mov ecx, dword [esp + 0x20]
mov dword [ecx + 0x18], eax
mov edx, dword [esp + 0x24]
mov eax, dword [esp + 0x38]
mov ecx, dword [edx + 0x19740]
test dword [eax + 0x10], 0x78000000
jne 0x10170ea4
push dword [eax + 0x238]
call fcn.1017a570
jmp 0x10170edf
mov edx, dword [ecx + 0x10]
mov dword [esp + 0x58], ecx
test edx, edx
je 0x10170ed8
cmp dword [edx + 0x274], 0
je 0x10170ece
push edx
call fcn.1017a500
mov ecx, dword [esp + 0x58]
mov eax, dword [ecx + 0x10]
mov byte [eax + 0x278], 1
jmp 0x10170ed8
mov eax, dword [ecx + 0xc]
inc eax
mov dword [edx + 0x26c], eax
mov dword [ecx + 0x10], 0
mov ecx, dword [esp + 0x24]
test dword [ecx + 0x10], 0x80000
je 0x10170ef8
push 1
push edi
call fcn.1016ef10
mov ecx, dword [esp + 0x24]
test dword [ecx + 0x10], 0x10000000
je 0x10171034
mov eax, dword [esp + 0x48]
mov edx, dword [0x11d0c5b8]
mov eax, dword [eax + edx*4]
mov eax, dword [eax + 0x10]
test byte [eax + 0x190], 0x60
je 0x10171034
cmp dword [edi + 0x14ac], 2
jne 0x10170f44
cmp dword [edi + 0x14b0], 1
jne 0x10170f44
cmp dword [edi + 0x170c], 1
jne 0x10170f44
mov dl, 1
jmp 0x10170f46
xor dl, dl
cmp dword [edi + 0x1798], 0
je 0x10170f6e
cmp dword [edi + 0x179c], 2
jne 0x10170f6a
cmp dword [edi + 0x17a0], 1
jne 0x10170f6a
cmp dword [edi + 0x17a4], 1
je 0x10170f6e
xor al, al
jmp 0x10170f70
mov al, 1
cmp dword [edi + 0x14cc], 0
je 0x1017102d
test dl, dl
je 0x10170fac
test al, al
je 0x10170fac
push 1
lea ecx, [esp + 0x48]
call fcn.1001e7f0
mov ecx, dword [esp + 0x24]
mov dword [eax], 0x800004d8
add eax, 4
mov dword [esi + 0x20], eax
or byte [ecx + 0x19750], 8
jmp 0x10171034
test byte [ecx + 0x19750], 8
je 0x10171034
mov eax, dword [esi + 0x20]
add eax, 0xc
cmp eax, dword [esi + 0x24]
jb 0x10170fc9
push 3
mov ecx, esi
call fcn.101e4a10
mov ecx, dword [esp + 0x48]
mov edi, dword [0x11d0c5b8]
mov edx, dword [esi + 0x20]
mov dword [esp + 0x10], edx
mov eax, dword [ecx + edi*4]
mov edi, dword [esp + 0x68]
mov ecx, dword [esp + 0x24]
mov eax, dword [eax + 0x10]
test dword [eax + 0x140], 0x2000
je 0x10171021
push 0
push 0x135c
lea eax, [esp + 0x18]
push eax
call fcn.10153b20
push 1
push 0x135c
lea eax, [esp + 0x18]
push eax
call fcn.10153b20
mov edx, dword [esp + 0x10]
mov ecx, dword [esp + 0x24]
mov dword [edx], 0x800104d8
add edx, 4
mov dword [esi + 0x20], edx
and byte [ecx + 0x19750], 0xf7
test dword [ecx + 0x10], 0x20000000
je 0x1017106b
mov ecx, dword [0x11d0c5b8]
mov eax, dword [esp + 0x48]
mov eax, dword [eax + ecx*4]
lea ecx, [edi + 0x7580]
mov eax, dword [eax + 0x10]
mov eax, dword [eax + 0xd4b8]
mov dword [edi + 0x75a8], eax
call fcn.10183020
mov ecx, dword [esp + 0x24]
and dword [ecx + 0x10], 0x83020000
xor eax, eax
mov ecx, dword [esp + 0x8c]
pop edi
pop esi
xor ecx, esp
call fcn.1045066c
mov esp, ebp
pop ebp
ret 4