Function at 0x1006e960
Capabilities:
Inspect section memory permissions
Resolve function by parsing pe exports

Disassembly:
push ebp
mov ebp, esp
and esp, 0xfffffff0
sub esp, 0x68
mov eax, dword [section..data]
xor eax, esp
mov dword [esp + 0x64], eax
push esi
push edi
mov eax, dword [ebp + 0x10]
mov dword [esp + 0x44], eax
mov eax, dword [ebp + 0x14]
mov edx, dword [ebp + 0x30]
mov ecx, dword [ebp + 0x38]
mov dword [esp + 0x38], eax
mov eax, dword [ebp + 0x18]
mov dword [esp + 0x34], eax
mov eax, dword [ebp + 0x20]
mov dword [esp + 0x40], eax
mov eax, dword [ebp + 0x24]
mov dword [esp + 0x3c], eax
mov eax, dword [ebp + 0x28]
mov dword [esp + 0x48], eax
mov eax, dword [ebp + 0x2c]
mov dword [esp + 0x30], eax
mov eax, dword [ebp + 0x34]
mov dword [esp + 0x14], eax
mov eax, dword [ebp + 0x40]
mov dword [esp + 0x18], eax
mov eax, dword [ebp + 0x44]
mov dword [esp + 0x24], eax
mov eax, dword [ebp + 0x1c]
mov esi, dword [ebp + 8]
add eax, 0xfffe6ff3
mov dword [esp + 0x28], edx
mov edi, dword [ebp + 0x3c]
cmp eax, 0xd1
ja case.0x1006e9e6.102415
movzx eax, byte [eax + 0x100708d0]
jmp dword [eax*4 + 0x10070894]
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x1900e
push esi
call sym.ExuiKrnln_X32.dll_ControlRunElemCmd
cmp dword [esp + 0x40], 0
je case.0x1006e9e6.102415
mov eax, dword [ebp + 0xc]
sub eax, 0
je 0x1006eac8
sub eax, 1
je 0x1006ea92
mov ecx, dword [esp + 0x38]
cmp ecx, 0xffffffff
jle case.0x1006e9e6.102415
cmp dword [esi + 0x118], ecx
jle case.0x1006e9e6.102415
mov eax, dword [esi + 0x114]
test eax, eax
je case.0x1006e9e6.102415
mov eax, dword [eax + ecx*4]
mov edi, dword [esp + 0x44]
mov edx, dword [eax + 8]
mov dword [esp + 0x18], edx
cmp edi, 0xffffffff
jle case.0x1006e9e6.102415
cmp dword [esi + 0x120], edi
jle case.0x1006e9e6.102415
mov eax, dword [esi + 0x11c]
test eax, eax
je case.0x1006e9e6.102415
mov eax, dword [eax + edi*4]
mov eax, dword [eax]
mov eax, dword [eax + ecx*4]
jmp 0x1006eadc
mov edi, dword [esp + 0x44]
mov edx, dword [esi + 0xfc]
mov dword [esp + 0x18], edx
cmp edi, 0xffffffff
jle case.0x1006e9e6.102415
cmp dword [esi + 0x118], edi
jle case.0x1006e9e6.102415
mov eax, dword [esi + 0x114]
test eax, eax
je case.0x1006e9e6.102415
mov eax, dword [eax + edi*4]
jmp 0x1006eadc
mov edx, dword [esi + 0xf0]
lea eax, [esi + 0xf4]
mov edi, dword [esp + 0x44]
mov dword [esp + 0x18], edx
mov eax, dword [eax]
mov dword [esp + 0x30], eax
test eax, eax
je case.0x1006e9e6.102415
test edx, edx
je case.0x1006e9e6.102415
mov edx, dword [esp + 0x34]
cmp dword [eax + edx*4], 0
jne 0x1006eb1c
push 0x10
call fcn.10120e44
mov ecx, dword [esp + 0x34]
xorps xmm0, xmm0
mov edx, dword [esp + 0x38]
add esp, 4
movups xmmword [eax], xmm0
mov dword [ecx + edx*4], eax
mov byte [eax], 1
mov eax, ecx
mov eax, dword [eax + edx*4]
mov ecx, dword [esp + 0x18]
push dword [eax + 4]
mov ecx, dword [ecx + edx*4]
push dword [esp + 0x44]
push 0
mov eax, dword [ecx + 4]
push edx
push dword [esp + 0x48]
push edi
push dword [ebp + 0xc]
push 0x10015
push esi
call eax
test eax, eax
jne case.0x1006e9e6.102415
mov ecx, dword [esp + 0x34]
mov eax, dword [esp + 0x30]
mov edx, dword [ebp + 0xc]
push ecx
push dword [esp + 0x3c]
mov eax, dword [eax + ecx*4]
mov ecx, esi
push edi
mov byte [eax + 0xc], 1
call fcn.1006a820
add esp, 0xc
push 0x18
call fcn.10120e82
add esp, 4
mov dword [esp + 0x14], eax
mov dword [eax + 8], 0
push 0
push 0
push 0
push 0
push 0
push 0
push eax
push 0
push 0
push 0
push 0x19014
push dword [esp + 0x60]
mov dword [eax + 0xc], 0
push dword [esp + 0x68]
mov dword [eax + 0x10], 0
push edi
push dword [ebp + 0xc]
mov dword [eax + 0x14], 0
push esi
mov dword [eax + 4], 0x10
mov dword [eax], 0xffffffff
call sym.ExuiKrnln_X32.dll_ControlRunElemCmd
mov ecx, dword [esp + 0x14]
mov eax, dword [ecx + 8]
mov dword [esp + 0x48], eax
mov eax, dword [ecx + 0xc]
mov dword [esp + 0x2c], eax
mov eax, dword [ecx + 0x10]
mov dword [esp + 0x24], eax
mov eax, dword [ecx + 0x14]
mov dword [esp + 0x14], eax
mov eax, dword [esp + 0x40]
mov dword [0x1016c678], eax
mov eax, dword [esp + 0x3c]
mov dword [0x1016c67c], eax
mov eax, dword [ecx]
mov dword [esp + 0x3c], 0
cmp eax, 1
jge 0x1006ec1f
add eax, 1
mov dword [ecx], eax
jne 0x1006ec1f
push ecx
call fcn.10120e3f
add esp, 4
mov edx, dword [esp + 0x34]
mov eax, dword [esp + 0x18]
push esi
push 0xc0
mov ecx, dword [eax + edx*4]
push dword [ecx + 0x80]
movzx eax, byte [ecx + 0x54]
push 0xff
push dword [ecx + 0x78]
push dword [ecx + 0x74]
push dword [ecx + 0x70]
push dword [ecx + 0x6c]
push dword [ecx + 0x68]
push 0x10
push dword [ecx + 0x40]
push dword [ecx + 0x48]
push dword [ecx + 0x44]
push dword [ecx + 0x64]
push dword [ecx + 0x60]
push dword [ecx + 0x34]
push dword [ecx + 0x2c]
push 1
push eax
mov eax, dword [esp + 0x7c]
push 0
push dword [ecx + 0x3c]
push dword [ecx + 0x5c]
mov eax, dword [eax + edx*4]
push dword [ecx + 0x58]
push dword [eax + 4]
push 0
push dword [esp + 0x78]
push dword [esp + 0x8c]
push dword [esp + 0x98]
push dword [esp + 0xb8]
call sym.ExuiKrnln_X32.dll_PopUpLiteInputEx
mov edx, eax
lea ecx, [esp + 0x3c]
call fcn.100edd20
mov ecx, dword [esp + 0x34]
mov edx, dword [esp + 0x30]
mov eax, dword [edx + ecx*4]
mov edx, dword [esp + 0x3c]
push edx
push dword [0x1016c67c]
mov byte [eax + 0xc], 0
mov eax, dword [esp + 0x20]
push 0
push ecx
push dword [esp + 0x48]
mov eax, dword [eax + ecx*4]
push edi
push dword [ebp + 0xc]
mov eax, dword [eax + 4]
push 0x10016
push esi
call eax
test eax, eax
jne 0x1006ed8b
mov eax, dword [esp + 0x34]
mov ecx, dword [esp + 0x30]
mov edx, dword [ecx + eax*4]
mov eax, dword [edx + 4]
add edx, 4
mov ecx, dword [esp + 0x3c]
mov dword [esp + 0x18], edx
cmp eax, ecx
je 0x1006ed8f
test eax, eax
je 0x1006ed33
mov eax, dword [eax]
test eax, eax
jns 0x1006ed33
mov edi, dword [edx]
inc eax
mov dword [edi], eax
mov eax, dword [edx]
mov edi, dword [esp + 0x44]
cmp dword [eax], 0
jne 0x1006ed33
push eax
call fcn.10120e3f
mov ecx, dword [esp + 0x40]
add esp, 4
mov edx, dword [esp + 0x18]
test ecx, ecx
je 0x1006ede2
cmp dword [ecx + 4], 4
jl 0x1006ede2
mov eax, dword [ecx]
cmp eax, 1
jge 0x1006ed53
dec eax
mov dword [ecx], eax
mov dword [edx], ecx
jmp 0x1006ed8f
mov eax, dword [ecx + 4]
add eax, 8
push eax
call fcn.10120e82
mov edx, dword [esp + 0x40]
mov ecx, eax
mov eax, dword [esp + 0x1c]
add esp, 4
mov dword [eax], ecx
mov eax, dword [edx + 4]
add eax, 8
push eax
push edx
push ecx
call fcn.10124030
mov eax, dword [esp + 0x24]
add esp, 0xc
mov eax, dword [eax]
mov dword [eax], 0xffffffff
mov ecx, dword [esp + 0x3c]
test ecx, ecx
je 0x1006edaa
mov eax, dword [ecx]
cmp eax, 1
jge 0x1006edaa
add eax, 1
mov dword [ecx], eax
jne 0x1006edaa
push ecx
call fcn.10120e3f
add esp, 4
mov eax, dword [ebp + 0xc]
test eax, eax
jne 0x1006edea
push dword [esp + 0x14]
push dword [esp + 0x28]
push dword [esp + 0x34]
push dword [esp + 0x54]
push esi
call sym.ExuiKrnln_X32.dll_ControlAddRedrawRect
push esi
call sym.ExuiKrnln_X32.dll_ControlRedraw
xor eax, eax
pop edi
pop esi
mov ecx, dword [esp + 0x64]
xor ecx, esp
call fcn.10120e31
mov esp, ebp
pop ebp
ret 0x40
mov dword [edx], 0
jmp 0x1006ed8f
push eax
push dword [esp + 0x38]
mov eax, dword [esi + 0x44]
push dword [esp + 0x40]
push edi
push 0x3f8
push esi
call eax
push esi
call sym.ExuiKrnln_X32.dll_ControlRedraw
xor eax, eax
pop edi
pop esi
mov ecx, dword [esp + 0x64]
xor ecx, esp
call fcn.10120e31
mov esp, ebp
pop ebp
ret 0x40
call sym.ExuiKrnln_X32.dll_ClouseLiteInputEx
xor eax, eax
pop edi
pop esi
mov ecx, dword [esp + 0x64]
xor ecx, esp
call fcn.10120e31
mov esp, ebp
pop ebp
ret 0x40
mov eax, dword [ebp + 0xc]
sub eax, 0
je 0x1006ee78
sub eax, 1
je 0x1006ee70
mov eax, dword [esp + 0x38]
cmp eax, 0xffffffff
jle case.0x1006e9e6.102415
cmp dword [esi + 0x118], eax
jle case.0x1006e9e6.102415
mov ecx, dword [esi + 0x114]
test ecx, ecx
je case.0x1006e9e6.102415
mov eax, dword [ecx + eax*4]
mov ecx, dword [eax + 8]
jmp 0x1006ee7e
mov ecx, dword [esi + 0xfc]
jmp 0x1006ee7e
mov ecx, dword [esi + 0xf0]
test ecx, ecx
je case.0x1006e9e6.102415
mov eax, dword [esp + 0x34]
mov eax, dword [ecx + eax*4]
mov eax, dword [eax + 0xc]
pop edi
pop esi
mov ecx, dword [esp + 0x64]
xor ecx, esp
call fcn.10120e31
mov esp, ebp
pop ebp
ret 0x40
mov eax, dword [esp + 0x30]
lea ecx, [eax + 0x3e8]
mov dword [esp + 0x4c], ecx
cmp ecx, 0x7d0
ja 0x1006eef0
push 0x18
call fcn.10120e82
mov edi, eax
add esp, 4
mov dword [edi + 8], 0
mov dword [edi + 0xc], 0
mov dword [edi + 0x10], 0
mov dword [edi + 0x14], 0
mov dword [edi + 4], 0x10
mov dword [edi], 0xffffffff
jmp 0x1006eef2
mov edi, eax
push edi
push dword [esp + 0x3c]
lea eax, [edi + 8]
push dword [esp + 0x4c]
mov dword [esp + 0x38], eax
push dword [ebp + 0xc]
mov eax, dword [esi + 0x44]
push 0x3f6
push esi
call eax
test eax, eax
jne 0x1006ef28
mov dword [edi + 8], eax
mov dword [edi + 0xc], eax
mov eax, dword [esi + 0x50]
mov dword [edi + 0x10], eax
mov eax, dword [esi + 0x54]
mov dword [edi + 0x14], eax
jmp 0x1006ef2f
lea eax, [edi + 8]
mov dword [esp + 0x2c], eax
cmp dword [esp + 0x34], 0xffffffff
je 0x1006f087
mov ecx, dword [ebp + 0xc]
sub ecx, 0
je 0x1006efeb
sub ecx, 1
je 0x1006efb1
mov edx, dword [esp + 0x38]
cmp edx, 0xffffffff
jle case.0x1006e9e6.102415
cmp dword [esi + 0x118], edx
jle case.0x1006e9e6.102415
mov eax, dword [esi + 0x114]
test eax, eax
je case.0x1006e9e6.102415
mov eax, dword [eax + edx*4]
mov ecx, dword [esp + 0x44]
mov eax, dword [eax + 8]
mov dword [esp + 0x18], eax
cmp ecx, 0xffffffff
jle case.0x1006e9e6.102415
cmp dword [esi + 0x120], ecx
jle case.0x1006e9e6.102415
mov eax, dword [esi + 0x11c]
test eax, eax
je case.0x1006e9e6.102415
mov eax, dword [eax + ecx*4]
mov eax, dword [eax]
mov eax, dword [eax + edx*4]
mov dword [esp + 0x28], eax
jmp 0x1006efff
mov ecx, dword [esi + 0xfc]
mov dword [esp + 0x18], ecx
mov ecx, dword [esp + 0x44]
cmp ecx, 0xffffffff
jle case.0x1006e9e6.102415
cmp dword [esi + 0x118], ecx
jle case.0x1006e9e6.102415
mov edx, dword [esi + 0x114]
test edx, edx
je case.0x1006e9e6.102415
mov edx, dword [edx + ecx*4]
mov dword [esp + 0x28], edx
jmp 0x1006efff
mov ecx, dword [esi + 0xf0]
mov dword [esp + 0x18], ecx
lea ecx, [esi + 0xf4]
mov dword [esp + 0x28], ecx
mov eax, dword [esp + 0x28]
cmp dword [eax], 0
mov eax, dword [esp + 0x34]
je case.0x1006e9e6.102415
cmp dword [esp + 0x18], 0
je case.0x1006e9e6.102415
lea edx, [esp + 0x50]
xorps xmm0, xmm0
push edx
mov edx, dword [esp + 0x3c]
lea ecx, [edi + 0x10]
push ecx
push dword [esp + 0x20]
mov ecx, dword [esp + 0x50]
push dword [edi + 0x14]
movaps xmmword [esp + 0x60], xmm0
push dword [edi + 0x10]
push eax
push edx
mov edx, dword [ebp + 0xc]
push ecx
mov ecx, esi
call fcn.1006a4c0
movd xmm0, dword [edi + 8]
cvtdq2ps xmm0, xmm0
addss xmm0, dword [esp + 0x50]
cvttss2si eax, xmm0
movd xmm0, dword [edi + 0xc]
cvtdq2ps xmm0, xmm0
mov dword [edi + 8], eax
addss xmm0, dword [esp + 0x54]
cvttss2si eax, xmm0
mov dword [edi + 0xc], eax
cvttss2si eax, dword [esp + 0x58]
mov dword [edi + 0x10], eax
cvttss2si eax, dword [esp + 0x5c]
mov dword [edi + 0x14], eax
mov eax, dword [esp + 0x3c]
sub eax, 0
je 0x1006f6ad
sub eax, 1
je 0x1006f4e8
sub eax, 1
jne 0x1006f7be
movss xmm2, dword [esi + 0x10c]
movss xmm1, dword [0x10155570]
mov ecx, dword [esi + 0x74]
ucomiss xmm2, xmm1
lahf
test ah, 0x44
jp 0x1006f0cc
movd xmm2, ecx
cvtdq2pd xmm2, xmm2
jmp 0x1006f0fc
movd xmm0, ecx
sub esp, 8
cvtdq2ps xmm0, xmm0
divss xmm0, xmm2
cvtps2pd xmm0, xmm0
movsd qword [esp], xmm0
call fcn.101245f0
movss xmm1, dword [0x10155570]
add esp, 8
fstp qword [esp + 0x18]
movsd xmm2, qword [esp + 0x18]
mov ecx, dword [esp + 0x2c]
mov dword [esp + 0x28], ecx
movd xmm0, dword [ecx]
cvtdq2pd xmm0, xmm0
addsd xmm0, xmm2
cvttsd2si eax, xmm0
mov dword [ecx], eax
movss xmm2, dword [esi + 0x10c]
mov edx, dword [esi + 0x78]
ucomiss xmm2, xmm1
lahf
test ah, 0x44
jp 0x1006f134
movd xmm2, edx
cvtdq2pd xmm2, xmm2
jmp 0x1006f168
movd xmm0, edx
sub esp, 8
cvtdq2ps xmm0, xmm0
divss xmm0, xmm2
cvtps2pd xmm0, xmm0
movsd qword [esp], xmm0
call fcn.101245f0
movss xmm1, dword [0x10155570]
add esp, 8
mov ecx, dword [esp + 0x28]
fstp qword [esp + 0x18]
movsd xmm2, qword [esp + 0x18]
cmp dword [esp + 0x48], 0
movd xmm0, dword [edi + 0xc]
cvtdq2pd xmm0, xmm0
addsd xmm0, xmm2
cvttsd2si edx, xmm0
mov dword [edi + 0xc], edx
movss xmm2, dword [esi + 0x10c]
je 0x1006f2c6
ucomiss xmm2, xmm1
lahf
test ah, 0x44
jnp 0x1006f1cc
movd xmm0, dword [ecx]
sub esp, 8
cvtdq2ps xmm0, xmm0
mulss xmm0, xmm2
cvtps2pd xmm0, xmm0
movsd qword [esp], xmm0
call fcn.101245f0
add esp, 8
call fcn.10140a00
mov ecx, dword [esp + 0x28]
mov edx, dword [edi + 0xc]
movss xmm1, dword [0x10155570]
mov dword [ecx], eax
movss xmm2, dword [esi + 0x10c]
ucomiss xmm2, xmm1
lahf
test ah, 0x44
jnp 0x1006f20b
movd xmm0, edx
sub esp, 8
cvtdq2ps xmm0, xmm0
mulss xmm0, xmm2
cvtps2pd xmm0, xmm0
movsd qword [esp], xmm0
call fcn.101245f0
add esp, 8
call fcn.10140a00
movss xmm1, dword [0x10155570]
mov dword [edi + 0xc], eax
movss xmm2, dword [esi + 0x10c]
ucomiss xmm2, xmm1
lahf
test ah, 0x44
jnp 0x1006f24b
movd xmm0, dword [edi + 0x10]
sub esp, 8
cvtdq2ps xmm0, xmm0
mulss xmm0, xmm2
cvtps2pd xmm0, xmm0
movsd qword [esp], xmm0
call fcn.101245f0
add esp, 8
call fcn.10140a00
movss xmm1, dword [0x10155570]
mov dword [edi + 0x10], eax
movss xmm2, dword [esi + 0x10c]
ucomiss xmm2, xmm1
lahf
test ah, 0x44
jnp 0x1006f283
movd xmm0, dword [edi + 0x14]
sub esp, 8
cvtdq2ps xmm0, xmm0
mulss xmm0, xmm2
cvtps2pd xmm0, xmm0
movsd qword [esp], xmm0
call fcn.101245f0
add esp, 8
call fcn.10140a00
mov dword [edi + 0x14], eax
mov ecx, dword [esp + 0x28]
mov eax, dword [esi + 0x74]
mov dword [esp + 0x18], 0
mov dword [esp + 0x1c], 0
add dword [ecx], eax
mov eax, dword [esi + 0x78]
add dword [edi + 0xc], eax
lea eax, [esp + 0x18]
push eax
push dword [esi + 0x28]
call dword [sym.imp.USER32.dll_ClientToScreen]
mov ecx, dword [esp + 0x28]
mov eax, dword [esp + 0x18]
add dword [ecx], eax
mov eax, dword [esp + 0x1c]
add dword [edi + 0xc], eax
jmp 0x1006f7be
ucomiss xmm2, xmm1
lahf
test ah, 0x44
jnp 0x1006f303
movd xmm0, dword [ecx]
sub esp, 8
cvtdq2ps xmm0, xmm0
mulss xmm0, xmm2
cvtps2pd xmm0, xmm0
movsd qword [esp], xmm0
call fcn.101245f0
add esp, 8
call fcn.10140a00
mov ecx, dword [esp + 0x28]
mov edx, dword [edi + 0xc]
movss xmm1, dword [0x10155570]
mov dword [ecx], eax
movss xmm2, dword [esi + 0x10c]
ucomiss xmm2, xmm1
lahf
test ah, 0x44
jnp 0x1006f342
movd xmm0, edx
sub esp, 8
cvtdq2ps xmm0, xmm0
mulss xmm0, xmm2
cvtps2pd xmm0, xmm0
movsd qword [esp], xmm0
call fcn.101245f0
add esp, 8
call fcn.10140a00
movss xmm1, dword [0x10155570]
mov dword [edi + 0xc], eax
movss xmm2, dword [esi + 0x10c]
ucomiss xmm2, xmm1
lahf
test ah, 0x44
jnp 0x1006f382
movd xmm0, dword [edi + 0x10]
sub esp, 8
cvtdq2ps xmm0, xmm0
mulss xmm0, xmm2
cvtps2pd xmm0, xmm0
movsd qword [esp], xmm0
call fcn.101245f0
add esp, 8
call fcn.10140a00
movss xmm1, dword [0x10155570]
mov dword [edi + 0x10], eax
movss xmm2, dword [esi + 0x10c]
ucomiss xmm2, xmm1
lahf
test ah, 0x44
jnp 0x1006f3ba
movd xmm0, dword [edi + 0x14]
sub esp, 8
cvtdq2ps xmm0, xmm0
mulss xmm0, xmm2
cvtps2pd xmm0, xmm0
movsd qword [esp], xmm0
call fcn.101245f0
add esp, 8
call fcn.10140a00
mov dword [edi + 0x14], eax
mov ecx, dword [esp + 0x28]
mov eax, dword [esi + 0x74]
mov dword [esp + 0x18], 0
mov dword [esp + 0x1c], 0
add dword [ecx], eax
mov eax, dword [esi + 0x78]
add dword [edi + 0xc], eax
lea eax, [esp + 0x18]
push eax
push dword [esi + 0x28]
call dword [sym.imp.USER32.dll_ClientToScreen]
mov ecx, dword [esp + 0x28]
mov eax, dword [esp + 0x18]
movss xmm0, dword [0x10155570]
add dword [ecx], eax
mov eax, dword [esp + 0x1c]
add dword [edi + 0xc], eax
movss xmm1, dword [esi + 0x10c]
ucomiss xmm1, xmm0
lahf
test ah, 0x44
jnp 0x1006f442
movd xmm0, dword [ecx]
sub esp, 8
cvtdq2ps xmm0, xmm0
divss xmm0, xmm1
cvtps2pd xmm0, xmm0
movsd qword [esp], xmm0
call fcn.101245f0
add esp, 8
call fcn.10140a00
mov ecx, dword [esp + 0x28]
movss xmm0, dword [0x10155570]
mov dword [ecx], eax
movss xmm1, dword [esi + 0x10c]
ucomiss xmm1, xmm0
lahf
test ah, 0x44
jnp 0x1006f482
movd xmm0, dword [edi + 0xc]
sub esp, 8
cvtdq2ps xmm0, xmm0
divss xmm0, xmm1
cvtps2pd xmm0, xmm0
movsd qword [esp], xmm0
call fcn.101245f0
add esp, 8
call fcn.10140a00
movss xmm0, dword [0x10155570]
mov dword [edi + 0xc], eax
movss xmm1, dword [esi + 0x10c]
ucomiss xmm1, xmm0
lahf
test ah, 0x44
jnp 0x1006f4c2
movd xmm0, dword [edi + 0x10]
sub esp, 8
cvtdq2ps xmm0, xmm0
divss xmm0, xmm1
cvtps2pd xmm0, xmm0
movsd qword [esp], xmm0
call fcn.101245f0
add esp, 8
call fcn.10140a00
movss xmm0, dword [0x10155570]
mov dword [edi + 0x10], eax
movss xmm1, dword [esi + 0x10c]
ucomiss xmm1, xmm0
lahf
test ah, 0x44
jnp 0x1006f7be
movd xmm0, dword [edi + 0x14]
cvtdq2ps xmm0, xmm0
divss xmm0, xmm1
jmp 0x1006f7a3
movss xmm2, dword [esi + 0x10c]
movss xmm1, dword [0x10155570]
mov ecx, dword [esi + 0x74]
ucomiss xmm2, xmm1
lahf
test ah, 0x44
jp 0x1006f50e
movd xmm2, ecx
cvtdq2pd xmm2, xmm2
jmp 0x1006f53e
movd xmm0, ecx
sub esp, 8
cvtdq2ps xmm0, xmm0
divss xmm0, xmm2
cvtps2pd xmm0, xmm0
movsd qword [esp], xmm0
call fcn.101245f0
movss xmm1, dword [0x10155570]
add esp, 8
fstp qword [esp + 0x18]
movsd xmm2, qword [esp + 0x18]
mov ecx, dword [esp + 0x2c]
movd xmm0, dword [ecx]
cvtdq2pd xmm0, xmm0
addsd xmm0, xmm2
cvttsd2si eax, xmm0
mov dword [ecx], eax
movss xmm2, dword [esi + 0x10c]
mov edx, dword [esi + 0x78]
ucomiss xmm2, xmm1
lahf
test ah, 0x44
jp 0x1006f572
movd xmm2, edx
cvtdq2pd xmm2, xmm2
jmp 0x1006f5a6
movd xmm0, edx
sub esp, 8
cvtdq2ps xmm0, xmm0
divss xmm0, xmm2
cvtps2pd xmm0, xmm0
movsd qword [esp], xmm0
call fcn.101245f0
movss xmm1, dword [0x10155570]
add esp, 8
mov ecx, dword [esp + 0x2c]
fstp qword [esp + 0x18]
movsd xmm2, qword [esp + 0x18]
cmp dword [esp + 0x48], 0
movd xmm0, dword [edi + 0xc]
cvtdq2pd xmm0, xmm0
addsd xmm0, xmm2
cvttsd2si eax, xmm0
mov dword [edi + 0xc], eax
je 0x1006f7be
movss xmm2, dword [esi + 0x10c]
ucomiss xmm2, xmm1
lahf
test ah, 0x44
jnp 0x1006f607
movd xmm0, dword [ecx]
sub esp, 8
cvtdq2ps xmm0, xmm0
divss xmm0, xmm2
cvtps2pd xmm0, xmm0
movsd qword [esp], xmm0
call fcn.101245f0
add esp, 8
call fcn.10140a00
mov ecx, dword [esp + 0x2c]
movss xmm1, dword [0x10155570]
mov dword [ecx], eax
movss xmm2, dword [esi + 0x10c]
ucomiss xmm2, xmm1
lahf
test ah, 0x44
jnp 0x1006f647
movd xmm0, dword [edi + 0xc]
sub esp, 8
cvtdq2ps xmm0, xmm0
divss xmm0, xmm2
cvtps2pd xmm0, xmm0
movsd qword [esp], xmm0
call fcn.101245f0
add esp, 8
call fcn.10140a00
movss xmm1, dword [0x10155570]
mov dword [edi + 0xc], eax
movss xmm2, dword [esi + 0x10c]
ucomiss xmm2, xmm1
lahf
test ah, 0x44
jnp 0x1006f687
movd xmm0, dword [edi + 0x10]
sub esp, 8
cvtdq2ps xmm0, xmm0
divss xmm0, xmm2
cvtps2pd xmm0, xmm0
movsd qword [esp], xmm0
call fcn.101245f0
add esp, 8
call fcn.10140a00
movss xmm1, dword [0x10155570]
mov dword [edi + 0x10], eax
movss xmm2, dword [esi + 0x10c]
ucomiss xmm2, xmm1
lahf
test ah, 0x44
jnp 0x1006f7be
movd xmm0, dword [edi + 0x14]
cvtdq2ps xmm0, xmm0
divss xmm0, xmm2
jmp 0x1006f7a3
cmp dword [esp + 0x48], 0
je 0x1006f7be
movss xmm1, dword [esi + 0x10c]
movss xmm0, dword [0x10155570]
ucomiss xmm1, xmm0
lahf
test ah, 0x44
jnp 0x1006f706
mov eax, dword [esp + 0x2c]
sub esp, 8
movd xmm0, dword [eax]
cvtdq2ps xmm0, xmm0
mulss xmm0, xmm1
cvtps2pd xmm0, xmm0
movsd qword [esp], xmm0
call fcn.101245f0
add esp, 8
call fcn.10140a00
mov ecx, dword [esp + 0x2c]
movss xmm0, dword [0x10155570]
mov dword [ecx], eax
movss xmm1, dword [esi + 0x10c]
ucomiss xmm1, xmm0
lahf
test ah, 0x44
jnp 0x1006f746
movd xmm0, dword [edi + 0xc]
sub esp, 8
cvtdq2ps xmm0, xmm0
mulss xmm0, xmm1
cvtps2pd xmm0, xmm0
movsd qword [esp], xmm0
call fcn.101245f0
add esp, 8
call fcn.10140a00
movss xmm0, dword [0x10155570]
mov dword [edi + 0xc], eax
movss xmm1, dword [esi + 0x10c]
ucomiss xmm1, xmm0
lahf
test ah, 0x44
jnp 0x1006f786
movd xmm0, dword [edi + 0x10]
sub esp, 8
cvtdq2ps xmm0, xmm0
mulss xmm0, xmm1
cvtps2pd xmm0, xmm0
movsd qword [esp], xmm0
call fcn.101245f0
add esp, 8
call fcn.10140a00
movss xmm0, dword [0x10155570]
mov dword [edi + 0x10], eax
movss xmm1, dword [esi + 0x10c]
ucomiss xmm1, xmm0
lahf
test ah, 0x44
jnp 0x1006f7be
movd xmm0, dword [edi + 0x14]
cvtdq2ps xmm0, xmm0
mulss xmm0, xmm1
cvtps2pd xmm0, xmm0
sub esp, 8
movsd qword [esp], xmm0
call fcn.101245f0
add esp, 8
call fcn.10140a00
mov dword [edi + 0x14], eax
cmp dword [esp + 0x40], 0
je 0x1006f7d4
mov eax, dword [esp + 0x2c]
movd xmm0, dword [eax]
cvtdq2ps xmm0, xmm0
movss dword [eax], xmm0
cmp dword [esp + 0x4c], 0x7d0
ja 0x1006f7f8
mov ecx, edi
call fcn.100ed0e0
pop edi
pop esi
mov ecx, dword [esp + 0x64]
xor ecx, esp
call fcn.10120e31
mov esp, ebp
pop ebp
ret 0x40
mov eax, dword [esp + 0x30]
pop edi
pop esi
mov ecx, dword [esp + 0x64]
xor ecx, esp
call fcn.10120e31
mov esp, ebp
pop ebp
ret 0x40
mov eax, dword [ebp + 0xc]
sub eax, 0
je 0x1006f8b8
sub eax, 1
je 0x1006f882
mov ecx, dword [esp + 0x38]
cmp ecx, 0xffffffff
jle case.0x1006e9e6.102415
cmp dword [esi + 0x118], ecx
jle case.0x1006e9e6.102415
mov eax, dword [esi + 0x114]
test eax, eax
je case.0x1006e9e6.102415
mov eax, dword [eax + ecx*4]
mov edi, dword [esp + 0x44]
mov edx, dword [eax + 8]
mov dword [esp + 0x14], edx
cmp edi, 0xffffffff
jle case.0x1006e9e6.102415
cmp dword [esi + 0x120], edi
jle case.0x1006e9e6.102415
mov eax, dword [esi + 0x11c]
test eax, eax
je case.0x1006e9e6.102415
mov eax, dword [eax + edi*4]
mov eax, dword [eax]
mov eax, dword [eax + ecx*4]
jmp 0x1006f8cc
mov edi, dword [esp + 0x44]
mov edx, dword [esi + 0xfc]
mov dword [esp + 0x14], edx
cmp edi, 0xffffffff
jle case.0x1006e9e6.102415
cmp dword [esi + 0x118], edi
jle case.0x1006e9e6.102415
mov eax, dword [esi + 0x114]
test eax, eax
je case.0x1006e9e6.102415
mov eax, dword [eax + edi*4]
jmp 0x1006f8cc
mov edx, dword [esi + 0xf0]
lea eax, [esi + 0xf4]
mov edi, dword [esp + 0x44]
mov dword [esp + 0x14], edx
mov eax, dword [eax]
mov dword [esp + 0x4c], eax
test eax, eax
je case.0x1006e9e6.102415
test edx, edx
je case.0x1006e9e6.102415
mov ecx, dword [esp + 0x34]
cmp dword [eax + ecx*4], 0
jne 0x1006f90e
push 0x10
call fcn.10120e44
mov edx, dword [esp + 0x50]
xorps xmm0, xmm0
mov ecx, dword [esp + 0x38]
add esp, 4
movups xmmword [eax], xmm0
mov dword [edx + ecx*4], eax
mov edx, dword [esp + 0x14]
mov byte [eax], 1
push dword [esp + 0x30]
mov eax, dword [edx + ecx*4]
push dword [esp + 0x4c]
push dword [esp + 0x44]
mov eax, dword [eax + 4]
push ecx
push dword [esp + 0x48]
push edi
push dword [ebp + 0xc]
mov edi, dword [esp + 0x5c]
push edi
push esi
call eax
pop edi
pop esi
mov ecx, dword [esp + 0x64]
xor ecx, esp
call fcn.10120e31
mov esp, ebp
pop ebp
ret 0x40
mov esi, dword [0x1016c4f4]
xor ecx, ecx
mov eax, dword [0x1016c4f0]
mov dword [esp + 0x14], eax
test esi, esi
jle 0x1006f976
mov edi, dword [esp + 0x40]
nop dword [eax]
mov edx, dword [eax + ecx*4]
mov eax, dword [edx]
mov eax, dword [eax + 8]
cmp eax, dword [edi + 8]
je 0x1006f9e7
mov eax, dword [esp + 0x14]
inc ecx
cmp ecx, esi
jl 0x1006f960
xor edi, edi
lea eax, [esi + 2]
test esi, esi
mov edx, 4
cmovns edi, esi
xor ecx, ecx
mul edx
mov dword [esp + 0x2c], edi
seto cl
neg ecx
or ecx, eax
push ecx
mov dword [esp + 0x50], ecx
call fcn.10120e82
add esp, 4
mov esi, eax
mov dword [esp + 0x24], esi
push dword [esp + 0x4c]
push 0
push esi
call fcn.10122ba0
mov dword [0x1016c4f0], esi
lea eax, [edi*4]
mov esi, dword [esp + 0x20]
add esp, 0xc
mov dword [esp + 0x18], eax
test esi, esi
je 0x1006fa34
test edi, edi
jle 0x1006f9ff
push eax
push esi
push dword [esp + 0x2c]
call fcn.10124030
mov eax, dword [esp + 0x24]
add esp, 0xc
jmp 0x1006fa03
inc dword [edx + 0xc]
mov eax, ecx
pop edi
pop esi
mov ecx, dword [esp + 0x64]
xor ecx, esp
call fcn.10120e31
mov esp, ebp
pop ebp
ret 0x40
mov dword [esp + 0x18], eax
mov ecx, dword [0x1016c4f4]
cmp edi, ecx
jge 0x1006fa29
sub ecx, edi
add eax, esi
shl ecx, 2
push ecx
push eax
mov eax, dword [esp + 0x2c]
lea eax, [eax + edi*4]
add eax, 4
push eax
call fcn.10124030
add esp, 0xc
push esi
call fcn.10120e3f
add esp, 4
jmp 0x1006fa38
mov dword [esp + 0x18], eax
inc dword [0x1016c4f4]
push 0x220
call fcn.10120e44
add esp, 4
mov esi, eax
push 0x220
push 0
push esi
call fcn.10122ba0
mov edi, dword [0x1016c4f0]
add esp, 0xc
mov edx, dword [esp + 0x18]
mov ecx, dword [esp + 0x3c]
mov dword [edx + edi], esi
inc dword [esi + 0xc]
mov eax, dword [edx + edi]
mov esi, dword [esp + 0x28]
mov dword [eax + 4], ecx
mov ecx, dword [edx + edi]
mov eax, dword [esp + 0x48]
mov dword [ecx + 8], eax
mov ecx, dword [edx + edi]
mov eax, dword [esp + 0x30]
mov dword [ecx + 0x218], eax
mov ecx, dword [edx + edi]
mov edx, dword [esp + 0x40]
mov dword [ecx + 0x21c], esi
mov ecx, dword [esp + 0x18]
mov ecx, dword [ecx + edi]
call fcn.100ecff0
mov eax, dword [esp + 0x2c]
pop edi
pop esi
mov ecx, dword [esp + 0x64]
xor ecx, esp
call fcn.10120e31
mov esp, ebp
pop ebp
ret 0x40
xor esi, esi
cmp dword [0x1016c4f4], esi
jle case.0x1006e9e6.102415
mov edi, dword [esp + 0x40]
nop dword [eax]
nop dword [eax + eax]
mov eax, dword [0x1016c4f0]
lea ecx, [esi*4]
mov edx, dword [ecx + eax]
mov eax, dword [edx]
mov eax, dword [eax + 8]
cmp eax, dword [edi + 8]
je 0x1006fb17
inc esi
cmp esi, dword [0x1016c4f4]
jl 0x1006fae0
xor eax, eax
pop edi
pop esi
mov ecx, dword [esp + 0x64]
xor ecx, esp
call fcn.10120e31
mov esp, ebp
pop ebp
ret 0x40
mov eax, dword [0x1016c4f0]
dec dword [edx + 0xc]
mov eax, dword [ecx + eax]
cmp dword [eax + 0xc], 0
jne 0x1006fc7c
cmp esi, 0xffffffff
je case.0x1006e9e6.102415
push 0x220
push eax
call fcn.10120e74
mov edi, dword [0x1016c4f4]
add esp, 8
mov edx, dword [0x1016c4f0]
xor ecx, ecx
mov dword [esp + 0x24], edx
lea eax, [edi - 1]
test eax, eax
jle 0x1006fb9d
lea eax, [edi - 1]
mov edx, 4
mul edx
seto cl
neg ecx
or ecx, eax
push ecx
mov dword [esp + 0x50], ecx
call fcn.10120e82
add esp, 4
mov dword [esp + 0x14], eax
push dword [esp + 0x4c]
push 0
push eax
call fcn.10122ba0
mov edi, dword [0x1016c4f4]
add esp, 0xc
mov ecx, dword [esp + 0x14]
mov edx, dword [esp + 0x24]
jmp 0x1006fba1
mov dword [esp + 0x14], ecx
mov dword [0x1016c4f0], ecx
test edx, edx
je 0x1006fe88
lea eax, [edi - 1]
test eax, eax
jle 0x1006fc00
test esi, esi
jle 0x1006fbd7
lea eax, [esi*4]
push eax
push edx
push ecx
call fcn.10124030
mov ecx, dword [esp + 0x20]
lea eax, [edi - 1]
mov edx, dword [esp + 0x30]
add esp, 0xc
sub eax, esi
test eax, eax
jle 0x1006fc00
sub edi, esi
lea eax, [edi*4 - 4]
push eax
lea eax, [edx + 4]
lea eax, [eax + esi*4]
push eax
lea eax, [esi*4]
add eax, ecx
push eax
call fcn.10124030
add esp, 0xc
push dword [esp + 0x24]
jmp 0x1006fe7a
xor esi, esi
cmp dword [0x1016c4f4], esi
jle case.0x1006e9e6.102415
mov edi, dword [esp + 0x40]
nop dword [eax + eax]
mov eax, dword [0x1016c4f0]
mov ecx, dword [eax + esi*4]
mov eax, dword [ecx]
mov eax, dword [eax + 8]
cmp eax, dword [edi + 8]
je 0x1006fc50
inc esi
cmp esi, dword [0x1016c4f4]
jl 0x1006fc20
xor eax, eax
pop edi
pop esi
mov ecx, dword [esp + 0x64]
xor ecx, esp
call fcn.10120e31
mov esp, ebp
pop ebp
ret 0x40
mov eax, dword [esp + 0x3c]
mov edi, dword [esp + 0x48]
mov dword [ecx + 4], eax
mov eax, dword [0x1016c4f0]
mov ecx, dword [eax + esi*4]
mov dword [ecx + 8], edi
mov ecx, dword [eax + esi*4]
mov edi, dword [esp + 0x30]
mov dword [ecx + 0x218], edi
mov ecx, dword [eax + esi*4]
mov dword [ecx + 0x21c], edx
mov eax, esi
pop edi
pop esi
mov ecx, dword [esp + 0x64]
xor ecx, esp
call fcn.10120e31
mov esp, ebp
pop ebp
ret 0x40
mov esi, dword [0x1016c4f4]
xor ecx, ecx
test esi, esi
jle case.0x1006e9e6.102415
mov edi, dword [esp + 0x40]
mov eax, dword [0x1016c4f0]
mov edx, dword [eax + ecx*4]
mov eax, dword [edx]
mov eax, dword [eax + 8]
cmp eax, dword [edi + 8]
je 0x1006fcd1
inc ecx
cmp ecx, esi
jl 0x1006fca5
xor eax, eax
pop edi
pop esi
mov ecx, dword [esp + 0x64]
xor ecx, esp
call fcn.10120e31
mov esp, ebp
pop ebp
ret 0x40
mov eax, edx
pop edi
pop esi
mov ecx, dword [esp + 0x64]
xor ecx, esp
call fcn.10120e31
mov esp, ebp
pop ebp
ret 0x40
mov esi, dword [0x1016c4f4]
xor ecx, ecx
test esi, esi
jle case.0x1006e9e6.102415
mov edi, dword [esp + 0x40]
nop word [eax + eax]
mov eax, dword [0x1016c4f0]
mov edx, dword [eax + ecx*4]
mov eax, dword [edx]
mov eax, dword [eax + 8]
cmp eax, dword [edi + 8]
je 0x1006fd2c
inc ecx
cmp ecx, esi
jl 0x1006fd00
xor eax, eax
pop edi
pop esi
mov ecx, dword [esp + 0x64]
xor ecx, esp
call fcn.10120e31
mov esp, ebp
pop ebp
ret 0x40
mov eax, dword [0x1016c4f0]
inc dword [edx + 0xc]
mov eax, dword [eax + ecx*4]
pop edi
pop esi
mov ecx, dword [esp + 0x64]
xor ecx, esp
call fcn.10120e31
mov esp, ebp
pop ebp
ret 0x40
xor esi, esi
cmp dword [0x1016c4f4], esi
jle case.0x1006e9e6.102415
mov edi, dword [esp + 0x40]
nop dword [eax]
mov eax, dword [0x1016c4f0]
lea ecx, [esi*4]
mov edx, dword [ecx + eax]
mov eax, dword [edx]
mov eax, dword [eax + 8]
cmp eax, dword [edi + 8]
je 0x1006fd97
inc esi
cmp esi, dword [0x1016c4f4]
jl 0x1006fd60
xor eax, eax
pop edi
pop esi
mov ecx, dword [esp + 0x64]
xor ecx, esp
call fcn.10120e31
mov esp, ebp
pop ebp
ret 0x40
mov eax, dword [0x1016c4f0]
dec dword [edx + 0xc]
mov eax, dword [ecx + eax]
cmp dword [eax + 0xc], 0
jne case.0x1006e9e6.102415
push 0x220
push eax
call fcn.10120e74
mov edi, dword [0x1016c4f4]
add esp, 8
mov ecx, dword [0x1016c4f0]
mov dword [esp + 0x18], ecx
lea eax, [edi - 1]
test eax, eax
jle 0x1006fe14
xor ecx, ecx
lea eax, [edi - 1]
mov edx, 4
mul edx
seto cl
neg ecx
or ecx, eax
push ecx
mov dword [esp + 0x50], ecx
call fcn.10120e82
add esp, 4
mov dword [esp + 0x14], eax
push dword [esp + 0x4c]
push 0
push eax
call fcn.10122ba0
mov edi, dword [0x1016c4f4]
add esp, 0xc
mov edx, dword [esp + 0x14]
mov ecx, dword [esp + 0x18]
jmp 0x1006fe1a
xor edx, edx
mov dword [esp + 0x14], edx
mov dword [0x1016c4f0], edx
test ecx, ecx
je 0x1006fe88
lea eax, [edi - 1]
test eax, eax
jle 0x1006fe75
test esi, esi
jle 0x1006fe45
lea eax, [esi*4]
push eax
push ecx
push edx
call fcn.10124030
mov edx, dword [esp + 0x20]
add esp, 0xc
sub edi, esi
lea eax, [edi - 1]
test eax, eax
jle 0x1006fe75
lea eax, [edi*4 - 4]
mov edi, dword [esp + 0x18]
push eax
lea ecx, [esi*4]
lea eax, [edi + 4]
add eax, ecx
push eax
lea eax, [ecx + edx]
push eax
call fcn.10124030
add esp, 0xc
jmp 0x1006fe79
mov edi, dword [esp + 0x18]
push edi
call fcn.10120e3f
mov edi, dword [0x1016c4f4]
add esp, 4
dec edi
xor eax, eax
mov dword [0x1016c4f4], edi
pop edi
pop esi
mov ecx, dword [esp + 0x64]
xor ecx, esp
call fcn.10120e31
mov esp, ebp
pop ebp
ret 0x40
xor eax, eax
mov dword [esp + 0x2c], 0
mov dword [esp + 0x18], eax
mov eax, dword [ebp + 0xc]
sub eax, 0
je 0x1006ff50
sub eax, 1
je 0x1006ff24
mov eax, dword [esp + 0x38]
cmp eax, 0xffffffff
jle 0x1006ff64
cmp dword [esi + 0x118], eax
jle 0x1006ff64
cmp dword [esi + 0x114], 0
je 0x1006ff64
mov edx, dword [esi + 0x114]
mov eax, dword [edx + eax*4]
mov edx, dword [esp + 0x28]
mov eax, dword [eax + 8]
mov dword [esp + 0x2c], eax
mov eax, dword [esp + 0x44]
cmp eax, 0xffffffff
jle 0x1006ff64
cmp dword [esi + 0x120], eax
jle 0x1006ff64
mov esi, dword [esi + 0x11c]
test esi, esi
je 0x1006ff64
mov eax, dword [esi + eax*4]
mov esi, dword [esp + 0x38]
mov eax, dword [eax]
mov eax, dword [eax + esi*4]
mov eax, dword [eax]
jmp 0x1006ff60
mov eax, dword [esi + 0xfc]
mov dword [esp + 0x2c], eax
mov eax, dword [esp + 0x44]
cmp eax, 0xffffffff
jle 0x1006ff64
cmp dword [esi + 0x118], eax
jle 0x1006ff64
mov esi, dword [esi + 0x114]
test esi, esi
je 0x1006ff64
mov eax, dword [esi + eax*4]
mov eax, dword [eax]
jmp 0x1006ff60
mov eax, dword [esi + 0xf0]
mov dword [esp + 0x2c], eax
mov eax, dword [esi + 0xf4]
mov dword [esp + 0x18], eax
mov eax, dword [esp + 0x40]
test eax, eax
je 0x1006ffac
mov esi, dword [esp + 0x34]
shl esi, 2
cmp dword [esp + 0x2c], 0
je 0x1006ff98
mov edx, dword [esp + 0x2c]
mov edx, dword [edx + esi]
mov dword [esp + 0x4c], edx
test edx, edx
je 0x1006ff98
mov edx, dword [edx + 0x28]
mov dword [esp + 0x24], edx
mov dword [eax], edx
mov edx, dword [esp + 0x28]
jmp 0x1006ffb7
mov dword [esp + 0x24], 0
mov edx, dword [esp + 0x24]
mov dword [eax], edx
mov edx, dword [esp + 0x28]
jmp 0x1006ffb7
mov eax, dword [esp + 0x34]
lea esi, [eax*4]
mov eax, dword [esp + 0x3c]
test eax, eax
je 0x1006fff6
cmp dword [esp + 0x2c], 0
je 0x1006ffe4
mov edx, dword [esp + 0x2c]
mov edx, dword [edx + esi]
mov dword [esp + 0x4c], edx
test edx, edx
je 0x1006ffe4
mov eax, edx
mov eax, dword [eax + 0x2c]
mov dword [esp + 0x24], eax
mov eax, dword [esp + 0x3c]
jmp 0x1006ffec
mov dword [esp + 0x24], 0
mov edx, dword [esp + 0x24]
mov dword [eax], edx
mov edx, dword [esp + 0x28]
mov eax, dword [esp + 0x18]
add esi, eax
cmp dword [esp + 0x48], 0
je 0x10070030
test eax, eax
je 0x10070016
mov edx, dword [esi]
test edx, edx
je 0x10070016
mov edx, dword [edx + 4]
mov dword [esp + 0x24], edx
jmp 0x1007001e
mov dword [esp + 0x24], 0
mov edx, dword [esp + 0x48]
mov eax, dword [esp + 0x24]
mov dword [edx], eax
mov edx, dword [esp + 0x28]
mov eax, dword [esp + 0x18]
cmp dword [esp + 0x30], 0
je 0x1007004e
test eax, eax
je 0x10070046
mov eax, dword [esi]
test eax, eax
je 0x10070046
mov eax, dword [eax + 8]
jmp 0x10070048
xor eax, eax
mov esi, dword [esp + 0x30]
mov dword [esi], eax
mov eax, dword [esp + 0x14]
test eax, eax
je 0x100702c8
cmp edx, 0x8000
jg 0x100701b2
je 0x100701a7
cmp edx, 0x80
jg 0x10070118
je 0x1007010d
cmp edx, 8
jg 0x100700d9
je 0x100700ce
cmp edx, 2
jg 0x100700ba
je 0x100700af
cmp edx, 0x80000000
je 0x100700a4
cmp edx, 1
jne 0x100702c8
mov dword [eax], edx
jmp 0x100702c8
mov dword [eax], 0x20
jmp 0x100702c8
mov dword [eax], 2
jmp 0x100702c8
cmp edx, 4
jne 0x100702c8
mov dword [eax], 3
jmp 0x100702c8
mov dword [eax], 4
jmp 0x100702c8
cmp edx, 0x10
je 0x10070102
cmp edx, 0x20
je 0x100700f7
cmp edx, 0x40
jne 0x100702c8
mov dword [eax], 7
jmp 0x100702c8
mov dword [eax], 6
jmp 0x100702c8
mov dword [eax], 5
jmp 0x100702c8
mov dword [eax], 8
jmp 0x100702c8
cmp edx, 0x800
jg 0x1007016a
je 0x1007015f
cmp edx, 0x100
je 0x10070154
cmp edx, 0x200
je 0x10070149
cmp edx, 0x400
jne 0x100702c8
mov dword [eax], 0xb
jmp 0x100702c8
mov dword [eax], 0xa
jmp 0x100702c8
mov dword [eax], 9
jmp 0x100702c8
mov dword [eax], 0xc
jmp 0x100702c8
cmp edx, 0x1000
je 0x1007019c
cmp edx, 0x2000
je 0x10070191
cmp edx, 0x4000
jne 0x100702c8
mov dword [eax], 0xf
jmp 0x100702c8
mov dword [eax], 0xe
jmp 0x100702c8
mov dword [eax], 0xd
jmp 0x100702c8
mov dword [eax], 0x10
jmp 0x100702c8
cmp edx, 0x800000
jg 0x10070258
je 0x10070250
cmp edx, 0x80000
jg 0x10070216
je 0x1007020b
cmp edx, 0x10000
je 0x10070200
cmp edx, 0x20000
je 0x100701f5
cmp edx, 0x40000
jne 0x100702c8
mov dword [eax], 0x13
jmp 0x100702c8
mov dword [eax], 0x12
jmp 0x100702c8
mov dword [eax], 0x11
jmp 0x100702c8
mov dword [eax], 0x14
jmp 0x100702c8
cmp edx, 0x100000
je 0x10070248
cmp edx, 0x200000
je 0x1007023d
cmp edx, 0x400000
jne 0x100702c8
mov dword [eax], 0x17
jmp 0x100702c8
mov dword [eax], 0x16
jmp 0x100702c8
mov dword [eax], 0x15
jmp 0x100702c8
mov dword [eax], 0x18
jmp 0x100702c8
cmp edx, 0x8000000
jg 0x1007029a
je 0x10070292
cmp edx, 0x1000000
je 0x1007028a
cmp edx, 0x2000000
je 0x10070282
cmp edx, 0x4000000
jne 0x100702c8
mov dword [eax], 0x1b
jmp 0x100702c8
mov dword [eax], 0x1a
jmp 0x100702c8
mov dword [eax], 0x19
jmp 0x100702c8
mov dword [eax], 0x1c
jmp 0x100702c8
cmp edx, 0x10000000
je 0x100702c2
cmp edx, 0x20000000
je 0x100702ba
cmp edx, 0x40000000
jne 0x100702c8
mov dword [eax], 0x1f
jmp 0x100702c8
mov dword [eax], 0x1e
jmp 0x100702c8
mov dword [eax], 0x1d
test edi, edi
je case.0x1006e9e6.102415
cmp ecx, 0x8000
jg 0x10070544
je 0x10070529
cmp ecx, 0x80
jg 0x10070426
je 0x1007040b
cmp ecx, 8
jg 0x100703a7
je 0x1007038c
cmp ecx, 2
jg 0x10070368
je 0x1007034d
cmp ecx, 0x80000000
je 0x10070332
cmp ecx, 1
jne case.0x1006e9e6.102415
mov dword [edi], ecx
xor eax, eax
pop edi
pop esi
mov ecx, dword [esp + 0x64]
xor ecx, esp
call fcn.10120e31
mov esp, ebp
pop ebp
ret 0x40
mov dword [edi], 0x20
xor eax, eax
pop edi
pop esi
mov ecx, dword [esp + 0x64]
xor ecx, esp
call fcn.10120e31
mov esp, ebp
pop ebp
ret 0x40
mov dword [edi], 2
xor eax, eax
pop edi
pop esi
mov ecx, dword [esp + 0x64]
xor ecx, esp
call fcn.10120e31
mov esp, ebp
pop ebp
ret 0x40
cmp ecx, 4
jne case.0x1006e9e6.102415
mov dword [edi], 3
xor eax, eax
pop edi
pop esi
mov ecx, dword [esp + 0x64]
xor ecx, esp
call fcn.10120e31
mov esp, ebp
pop ebp
ret 0x40
mov dword [edi], 4
xor eax, eax
pop edi
pop esi
mov ecx, dword [esp + 0x64]
xor ecx, esp
call fcn.10120e31
mov esp, ebp
pop ebp
ret 0x40
cmp ecx, 0x10
je 0x100703f0
cmp ecx, 0x20
je 0x100703d5
cmp ecx, 0x40
jne case.0x1006e9e6.102415
mov dword [edi], 7
xor eax, eax
pop edi
pop esi
mov ecx, dword [esp + 0x64]
xor ecx, esp
call fcn.10120e31
mov esp, ebp
pop ebp
ret 0x40
mov dword [edi], 6
xor eax, eax
pop edi
pop esi
mov ecx, dword [esp + 0x64]
xor ecx, esp
call fcn.10120e31
mov esp, ebp
pop ebp
ret 0x40
mov dword [edi], 5
xor eax, eax
pop edi
pop esi
mov ecx, dword [esp + 0x64]
xor ecx, esp
call fcn.10120e31
mov esp, ebp
pop ebp
ret 0x40
mov dword [edi], 8
xor eax, eax
pop edi
pop esi
mov ecx, dword [esp + 0x64]
xor ecx, esp
call fcn.10120e31
mov esp, ebp
pop ebp
ret 0x40
cmp ecx, 0x800
jg 0x100704bc
je 0x100704a1
cmp ecx, 0x100
je 0x10070486
cmp ecx, 0x200
je 0x1007046b
cmp ecx, 0x400
jne case.0x1006e9e6.102415
mov dword [edi], 0xb
xor eax, eax
pop edi
pop esi
mov ecx, dword [esp + 0x64]
xor ecx, esp
call fcn.10120e31
mov esp, ebp
pop ebp
ret 0x40
mov dword [edi], 0xa
xor eax, eax
pop edi
pop esi
mov ecx, dword [esp + 0x64]
xor ecx, esp
call fcn.10120e31
mov esp, ebp
pop ebp
ret 0x40
mov dword [edi], 9
xor eax, eax
pop edi
pop esi
mov ecx, dword [esp + 0x64]
xor ecx, esp
call fcn.10120e31
mov esp, ebp
pop ebp
ret 0x40
mov dword [edi], 0xc
xor eax, eax
pop edi
pop esi
mov ecx, dword [esp + 0x64]
xor ecx, esp
call fcn.10120e31
mov esp, ebp
pop ebp
ret 0x40
cmp ecx, 0x1000
je 0x1007050e
cmp ecx, 0x2000
je 0x100704f3
cmp ecx, 0x4000
jne case.0x1006e9e6.102415
mov dword [edi], 0xf
xor eax, eax
pop edi
pop esi
mov ecx, dword [esp + 0x64]
xor ecx, esp
call fcn.10120e31
mov esp, ebp
pop ebp
ret 0x40
mov dword [edi], 0xe
xor eax, eax
pop edi
pop esi
mov ecx, dword [esp + 0x64]
xor ecx, esp
call fcn.10120e31
mov esp, ebp
pop ebp
ret 0x40
mov dword [edi], 0xd
xor eax, eax
pop edi
pop esi
mov ecx, dword [esp + 0x64]
xor ecx, esp
call fcn.10120e31
mov esp, ebp
pop ebp
ret 0x40
mov dword [edi], 0x10
xor eax, eax
pop edi
pop esi
mov ecx, dword [esp + 0x64]
xor ecx, esp
call fcn.10120e31
mov esp, ebp
pop ebp
ret 0x40
cmp ecx, 0x800000
jg 0x10070674
je 0x10070659
cmp ecx, 0x80000
jg 0x100705ec
je 0x100705d1
cmp ecx, 0x10000
je 0x100705b6
cmp ecx, 0x20000
je 0x1007059b
cmp ecx, 0x40000
jne case.0x1006e9e6.102415
mov dword [edi], 0x13
xor eax, eax
pop edi
pop esi
mov ecx, dword [esp + 0x64]
xor ecx, esp
call fcn.10120e31
mov esp, ebp
pop ebp
ret 0x40
mov dword [edi], 0x12
xor eax, eax
pop edi
pop esi
mov ecx, dword [esp + 0x64]
xor ecx, esp
call fcn.10120e31
mov esp, ebp
pop ebp
ret 0x40
mov dword [edi], 0x11
xor eax, eax
pop edi
pop esi
mov ecx, dword [esp + 0x64]
xor ecx, esp
call fcn.10120e31
mov esp, ebp
pop ebp
ret 0x40
mov dword [edi], 0x14
xor eax, eax
pop edi
pop esi
mov ecx, dword [esp + 0x64]
xor ecx, esp
call fcn.10120e31
mov esp, ebp
pop ebp
ret 0x40
cmp ecx, 0x100000
je 0x1007063e
cmp ecx, 0x200000
je 0x10070623
cmp ecx, 0x400000
jne case.0x1006e9e6.102415
mov dword [edi], 0x17
xor eax, eax
pop edi
pop esi
mov ecx, dword [esp + 0x64]
xor ecx, esp
call fcn.10120e31
mov esp, ebp
pop ebp
ret 0x40
mov dword [edi], 0x16
xor eax, eax
pop edi
pop esi
mov ecx, dword [esp + 0x64]
xor ecx, esp
call fcn.10120e31
mov esp, ebp
pop ebp
ret 0x40
mov dword [edi], 0x15
xor eax, eax
pop edi
pop esi
mov ecx, dword [esp + 0x64]
xor ecx, esp
call fcn.10120e31
mov esp, ebp
pop ebp
ret 0x40
mov dword [edi], 0x18
xor eax, eax
pop edi
pop esi
mov ecx, dword [esp + 0x64]
xor ecx, esp
call fcn.10120e31
mov esp, ebp
pop ebp
ret 0x40
cmp ecx, 0x8000000
jg 0x1007070a
je 0x100706ef
cmp ecx, 0x1000000
je 0x100706d4
cmp ecx, 0x2000000
je 0x100706b9
cmp ecx, 0x4000000
jne case.0x1006e9e6.102415
mov dword [edi], 0x1b
xor eax, eax
pop edi
pop esi
mov ecx, dword [esp + 0x64]
xor ecx, esp
call fcn.10120e31
mov esp, ebp
pop ebp
ret 0x40
mov dword [edi], 0x1a
xor eax, eax
pop edi
pop esi
mov ecx, dword [esp + 0x64]
xor ecx, esp
call fcn.10120e31
mov esp, ebp
pop ebp
ret 0x40
mov dword [edi], 0x19
xor eax, eax
pop edi
pop esi
mov ecx, dword [esp + 0x64]
xor ecx, esp
call fcn.10120e31
mov esp, ebp
pop ebp
ret 0x40
mov dword [edi], 0x1c
xor eax, eax
pop edi
pop esi
mov ecx, dword [esp + 0x64]
xor ecx, esp
call fcn.10120e31
mov esp, ebp
pop ebp
ret 0x40
cmp ecx, 0x10000000
je 0x1007075c
cmp ecx, 0x20000000
je 0x10070741
cmp ecx, 0x40000000
jne case.0x1006e9e6.102415
mov dword [edi], 0x1f
xor eax, eax
pop edi
pop esi
mov ecx, dword [esp + 0x64]
xor ecx, esp
call fcn.10120e31
mov esp, ebp
pop ebp
ret 0x40
mov dword [edi], 0x1e
xor eax, eax
pop edi
pop esi
mov ecx, dword [esp + 0x64]
xor ecx, esp
call fcn.10120e31
mov esp, ebp
pop ebp
ret 0x40
mov dword [edi], 0x1d
xor eax, eax
pop edi
pop esi
mov ecx, dword [esp + 0x64]
xor ecx, esp
call fcn.10120e31
mov esp, ebp
pop ebp
ret 0x40
push 0xffffffffffffffff
push 0xffffffffffffffff
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push dword [esp + 0x80]
push dword [esp + 0x78]
push edi
push ecx
push dword [esp + 0x80]
push edx
push dword [esp + 0xa4]
push dword [esp + 0xc0]
push dword [esp + 0xb8]
push dword [esp + 0xc0]
push dword [esp + 0xb8]
push dword [esp + 0xc0]
push dword [ebp + 0xc]
push esi
call sym.ExuiKrnln_X32.dll_ControlSetElemAttribute_Custom
xor eax, eax
pop edi
pop esi
mov ecx, dword [esp + 0x64]
xor ecx, esp
call fcn.10120e31
mov esp, ebp
pop ebp
ret 0x40
push 0xffffffffffffffff
push 0xffffffffffffffff
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push dword [esp + 0x80]
push dword [esp + 0x78]
push edi
push ecx
push dword [esp + 0x80]
push edx
push dword [esp + 0xa4]
push dword [esp + 0xc0]
push dword [esp + 0xb8]
push dword [esp + 0xc0]
push dword [esp + 0xb8]
push dword [esp + 0xc0]
push dword [esp + 0xd0]
push dword [ebp + 0xc]
push esi
call sym.ExuiKrnln_X32.dll_ControlSetElemData_Custom
mov ecx, dword [esp + 0x6c]
xor eax, eax
pop edi
pop esi
xor ecx, esp
call fcn.10120e31
mov esp, ebp
pop ebp
ret 0x40