Function at 0x6b2e68
Capabilities:
Resolve function by parsing pe exports

Disassembly:
test dword [0x84efac], 0xffffff80
jne 0x6b2e98
test dword [0x84efac], 0xffffffff
jne 0x6b45d8
call fcn.0079f000
jmp fcn.006b2e68
push edi
push esi
push ebp
push ebx
sub esp, 0xb8
mov edi, ecx
xor ebx, ebx
mov al, byte [edi + 0x8e84]
test al, al
je 0x6b30a0
lea ebp, [edi + 0x9034]
mov eax, dword [edi + 0x9034]
mov ecx, ebp
call dword [eax + 8]
movzx eax, al
test eax, eax
jne 0x6b2fbd
mov al, byte [esp + 0xd8]
test al, al
je 0x6b2ee5
mov ebx, 1
jmp 0x6b30c7
push 1
mov ecx, ebp
push 0x200098
call fcn.006f20c4
test eax, eax
jne 0x6b2f89
mov eax, dword [edi + 0x9034]
mov ecx, ebp
call dword [eax + 0xc]
test eax, eax
je 0x6b2f89
mov dword [eax + 0x200080], 0x3ffff
xor edx, edx
lea ecx, [eax + 0x30]
mov byte [eax + 0x18], dl
mov esi, 2
mov dword [eax + 0x10], edx
mov dword [eax + 8], edx
mov dword [eax + 0xc], edx
mov dword [eax + 0x14], 0
mov dword [eax], 0x8896a0
mov dword [esp + 0x74], eax
mov dword [esp + 0x6c], ebp
mov ebp, ecx
mov dword [esp + 0x70], edi
push 1
mov ecx, ebp
call fcn.006f2054
add ebp, 0x20
dec esi
jne 0x6b2f49
mov eax, dword [esp + 0x74]
mov ebp, dword [esp + 0x6c]
mov edi, dword [esp + 0x70]
xor edx, edx
mov dword [eax + 0x1c], edx
mov dword [eax + 0x20], edx
mov dword [eax + 0x70], edx
mov dword [eax + 0x74], edx
mov dword [eax + 0x24], 0x3f800000
mov dword [eax + 0x28], 0x3f800000
mov byte [eax + 0x2c], dl
mov dword [eax], 0x8896c0
mov eax, dword [edi + 0x9034]
mov ecx, ebp
call dword [eax + 0xc]
mov esi, dword [eax]
mov edx, dword [esp + 0xcc]
mov ecx, eax
push edx
call dword [esi + 0xc]
mov eax, dword [edi + 0x9034]
mov ecx, ebp
call dword [eax + 0xc]
mov edx, dword [esp + 0xd4]
mov ecx, eax
push edx
call fcn.006b5dc8
mov eax, dword [edi + 0x9034]
mov ecx, ebp
call dword [eax + 0xc]
mov edx, dword [eax]
mov ecx, eax
push dword [edi + 0x8e88]
call dword [edx + 0x18]
mov eax, dword [edi + 0x9034]
mov ecx, ebp
call dword [eax + 0xc]
mov dl, byte [edi + 0x8e85]
mov ecx, ebp
mov byte [eax + 0x18], dl
mov eax, dword [edi + 0x9034]
call dword [eax + 0xc]
mov esi, eax
lea ecx, [edi + 0x8e90]
push 0x45b54000
push 0
mov edx, dword [esp + 0xd8]
push edx
push dword [edi + 0x8e8c]
call fcn.0069d8c8
movss xmm2, dword [edi + 0x8ea4]
movss xmm3, dword [edi + 0x8ea0]
mov eax, dword [edi + 0x8ea8]
fld dword [esi + 0x14]
fmulp st(1)
mov ecx, 0x40000
fmul dword [0x888ef0]
mulss xmm2, dword [0x888eec]
fstp dword [esp + 0x58]
addss xmm2, dword [0x888ef8]
mulss xmm3, dword [0x888ee8]
cvttss2si edx, dword [esp + 0x58]
cmp edx, 0x40000
cmovl ecx, edx
add ecx, dword [esi + 0x200078]
and ecx, dword [esi + 0x200080]
mov dword [esi + 0x20007c], ecx
movss dword [esi + 0x200084], xmm2
mov ecx, ebp
movss dword [esi + 0x200090], xmm3
mov dword [esi + 0x200094], eax
mov esi, dword [edi + 0x9034]
call dword [esi + 0xc]
mov byte [eax + 0x2c], 1
jmp 0x6b30c7
lea ebp, [edi + 0x9034]
mov eax, dword [edi + 0x9034]
mov ecx, ebp
call dword [eax + 8]
movzx eax, al
test eax, eax
je 0x6b30c7
mov eax, dword [edi + 0x9034]
mov ecx, ebp
call dword [eax + 0xc]
mov byte [eax + 0x2c], 0
mov al, byte [edi + 0x8eac]
test al, al
je 0x6b3399
lea ebp, [edi + 0x9054]
mov eax, dword [edi + 0x9054]
mov ecx, ebp
call dword [eax + 8]
movzx eax, al
test eax, eax
jne 0x6b3304
mov al, byte [esp + 0xd8]
test al, al
je 0x6b3104
or ebx, 2
jmp 0x6b33c0
push 1
mov ecx, ebp
push 0x8424
call fcn.006f20c4
test eax, eax
jne 0x6b322f
mov eax, dword [edi + 0x9054]
mov ecx, ebp
call dword [eax + 0xc]
test eax, eax
je 0x6b322f
mov dword [eax + 0x8080], 0xfff
xor edx, edx
lea ecx, [eax + 0x30]
mov byte [eax + 0x18], dl
mov esi, 2
mov dword [eax + 0x10], edx
mov dword [eax + 8], edx
mov dword [eax + 0xc], edx
mov dword [eax + 0x14], 0
mov dword [eax], 0x8896a0
mov dword [esp + 0x6c], eax
mov dword [esp + 0x74], ebp
mov ebp, ecx
mov dword [esp + 0x70], edi
push 1
mov ecx, ebp
call fcn.006f2054
add ebp, 0x20
dec esi
jne 0x6b3168
mov eax, dword [esp + 0x6c]
mov ebp, dword [esp + 0x74]
mov edi, dword [esp + 0x70]
xor edx, edx
lea ecx, [eax + 0x8084]
mov esi, 4
mov dword [eax + 0x1c], edx
mov dword [eax + 0x20], edx
mov dword [eax + 0x70], edx
mov dword [eax + 0x74], edx
mov dword [eax + 0x24], 0x3f800000
mov dword [eax + 0x28], 0x3f800000
mov byte [eax + 0x2c], dl
mov dword [eax], 0x8896e0
mov dword [esp + 0x68], ebx
mov ebx, ecx
mov dword [esp + 0x6c], eax
mov dword [esp + 0x74], ebp
mov dword [esp + 0x70], edi
lea esi, [esi]
mov ecx, ebx
call fcn.00445350
mov al, 1
mov byte [ebx + 7], al
mov byte [ebx + 5], al
mov dword [ebx + 0xc0], 0
mov dword [ebx + 0xb4], 0x3f800000
mov dword [ebx + 0xc4], 0x3f800000
mov byte [ebx + 4], 2
mov dword [ebx + 0xac], 0x3e99999a
mov dword [ebx], 0x879940
mov dword [ebx + 0x20], 0x3d99999a
add ebx, 0xe0
dec esi
jne 0x6b31c8
mov ebx, dword [esp + 0x68]
mov eax, dword [esp + 0x6c]
mov ebp, dword [esp + 0x74]
mov edi, dword [esp + 0x70]
mov dword [eax], 0x889700
mov eax, dword [edi + 0x9054]
mov ecx, ebp
call dword [eax + 0xc]
mov esi, dword [eax]
mov edx, dword [esp + 0xcc]
mov ecx, eax
push edx
call dword [esi + 0xc]
mov eax, dword [edi + 0x9054]
mov ecx, ebp
call dword [eax + 0xc]
mov dword [esp + 0x98], eax
lea ecx, [eax + 0x30]
mov edx, dword [eax + 0x30]
mov dword [esp + 0x6c], ecx
call dword [edx + 8]
mov dword [esp + 0x78], eax
movzx edx, al
test edx, edx
jne 0x6b3293
mov edx, dword [esp + 0x98]
mov eax, dword [edx + 0x30]
mov esi, dword [esp + 0xd4]
lea edx, [esi + esi]
add edx, edx
push 1
push edx
mov ecx, dword [esp + 0x74]
call dword [eax + 0x1c]
mov eax, dword [esp + 0x98]
lea ecx, [eax + 0x50]
mov edx, dword [eax + 0x50]
mov dword [esp + 0x78], ecx
call dword [edx + 8]
mov dword [esp + 0x7c], eax
movzx edx, al
test edx, edx
jne 0x6b32d5
mov edx, dword [esp + 0x98]
mov eax, dword [edx + 0x50]
mov esi, dword [esp + 0xd4]
lea edx, [esi + esi]
add edx, edx
push 1
push edx
mov ecx, dword [esp + 0x80]
call dword [eax + 0x1c]
mov eax, dword [esp + 0x98]
mov edx, dword [eax + 0x30]
mov ecx, dword [esp + 0x6c]
call dword [edx + 0xc]
mov edx, dword [esp + 0x98]
mov ecx, dword [esp + 0x78]
mov dword [edx + 0x70], eax
mov eax, dword [edx + 0x50]
call dword [eax + 0xc]
mov edx, dword [esp + 0x98]
mov dword [edx + 0x74], eax
mov eax, dword [edi + 0x9054]
mov ecx, ebp
call dword [eax + 0xc]
mov edx, dword [eax]
mov ecx, eax
push dword [edi + 0x8eb0]
call dword [edx + 0x18]
mov eax, dword [edi + 0x9054]
mov ecx, ebp
call dword [eax + 0xc]
mov dl, byte [edi + 0x8ead]
mov ecx, ebp
mov byte [eax + 0x18], dl
mov eax, dword [edi + 0x9054]
call dword [eax + 0xc]
mov esi, eax
lea ecx, [edi + 0x8ec4]
push 0x41000000
push 0
mov edx, dword [esp + 0xd8]
push edx
push dword [edi + 0x8ebc]
call fcn.0069d798
add esp, 0xfffffff0
mov edx, dword [edi + 0x8eb4]
mov ecx, esi
mov dword [esp], edx
mov edx, dword [edi + 0x8eb8]
mov dword [esp + 4], edx
mov edx, dword [edi + 0x8ec0]
fstp dword [esp + 8]
mov dword [esp + 0xc], edx
call fcn.006b5e38
mov eax, dword [edi + 0x9054]
mov ecx, ebp
call dword [eax + 0xc]
mov byte [eax + 0x2c], 1
jmp 0x6b33c0
lea ebp, [edi + 0x9054]
mov eax, dword [edi + 0x9054]
mov ecx, ebp
call dword [eax + 8]
movzx eax, al
test eax, eax
je 0x6b33c0
mov eax, dword [edi + 0x9054]
mov ecx, ebp
call dword [eax + 0xc]
mov byte [eax + 0x2c], 0
mov al, byte [edi + 0x8ed4]
test al, al
je 0x6b3970
lea esi, [edi + 0x9074]
mov eax, dword [edi + 0x9074]
mov ecx, esi
call dword [eax + 8]
movzx eax, al
test eax, eax
jne 0x6b3606
mov al, byte [esp + 0xd8]
test al, al
je 0x6b33fd
or ebx, 4
jmp 0x6b3997
push 1
mov ecx, esi
push 0x8254
call fcn.006f20c4
test eax, eax
jne 0x6b352f
mov eax, dword [edi + 0x9074]
mov ecx, esi
call dword [eax + 0xc]
test eax, eax
je 0x6b352f
mov dword [eax + 0x8080], 0xfff
xor edx, edx
lea ecx, [eax + 0x30]
mov byte [eax + 0x18], dl
mov ebp, 2
mov dword [eax + 0x10], edx
mov dword [eax + 8], edx
mov dword [eax + 0xc], edx
mov dword [eax + 0x14], 0
mov dword [eax], 0x8896a0
mov dword [esp + 0x6c], eax
mov dword [esp + 0x74], esi
mov esi, ecx
mov dword [esp + 0x70], edi
lea esi, [esi]
push 1
mov ecx, esi
call fcn.006f2054
add esi, 0x20
dec ebp
jne 0x6b3468
mov eax, dword [esp + 0x6c]
mov esi, dword [esp + 0x74]
mov edi, dword [esp + 0x70]
xor edx, edx
lea ecx, [eax + 0x8084]
mov ebp, 2
mov dword [eax + 0x1c], edx
mov dword [eax + 0x20], edx
mov dword [eax + 0x70], edx
mov dword [eax + 0x74], edx
mov dword [eax + 0x24], 0x3f800000
mov dword [eax + 0x28], 0x3f800000
mov byte [eax + 0x2c], dl
mov dword [eax], 0x889720
mov dword [esp + 0x68], ebx
mov ebx, ecx
mov dword [esp + 0x6c], eax
mov dword [esp + 0x74], esi
mov dword [esp + 0x70], edi
lea esi, [esi]
mov ecx, ebx
call fcn.00445350
mov al, 1
mov byte [ebx + 7], al
mov byte [ebx + 5], al
mov dword [ebx + 0xc0], 0
mov dword [ebx + 0xb4], 0x3f800000
mov dword [ebx + 0xc4], 0x3f800000
mov byte [ebx + 4], 2
mov dword [ebx + 0xac], 0x3e99999a
mov dword [ebx], 0x879940
mov dword [ebx + 0x20], 0x3d99999a
add ebx, 0xe0
dec ebp
jne 0x6b34c8
mov ebx, dword [esp + 0x68]
mov eax, dword [esp + 0x6c]
mov esi, dword [esp + 0x74]
mov edi, dword [esp + 0x70]
mov dword [eax], 0x889740
mov eax, dword [edi + 0x9074]
mov ecx, esi
call dword [eax + 0xc]
mov ebp, dword [eax]
mov edx, dword [esp + 0xcc]
mov ecx, eax
push edx
call dword [ebp + 0xc]
mov eax, dword [edi + 0x9074]
mov ecx, esi
call dword [eax + 0xc]
mov dword [esp + 0x98], eax
lea ecx, [eax + 0x30]
mov edx, dword [eax + 0x30]
mov dword [esp + 0x6c], ecx
call dword [edx + 8]
mov dword [esp + 0x7c], eax
movzx edx, al
test edx, edx
jne 0x6b3594
mov edx, dword [esp + 0x98]
mov eax, dword [edx + 0x30]
mov ebp, dword [esp + 0xd4]
lea edx, [ebp + ebp]
add edx, edx
push 1
push edx
mov ecx, dword [esp + 0x74]
call dword [eax + 0x1c]
mov eax, dword [esp + 0x98]
lea ecx, [eax + 0x50]
mov edx, dword [eax + 0x50]
mov dword [esp + 0x78], ecx
call dword [edx + 8]
mov dword [esp + 0x7c], eax
movzx edx, al
test edx, edx
jne 0x6b35d7
mov edx, dword [esp + 0x98]
mov eax, dword [edx + 0x50]
mov ebp, dword [esp + 0xd4]
lea edx, [ebp + ebp]
add edx, edx
push 1
push edx
mov ecx, dword [esp + 0x80]
call dword [eax + 0x1c]
mov eax, dword [esp + 0x98]
mov edx, dword [eax + 0x30]
mov ecx, dword [esp + 0x6c]
call dword [edx + 0xc]
mov edx, dword [esp + 0x98]
mov ecx, dword [esp + 0x78]
mov dword [edx + 0x70], eax
mov eax, dword [edx + 0x50]
call dword [eax + 0xc]
mov edx, dword [esp + 0x98]
mov dword [edx + 0x74], eax
mov eax, dword [edi + 0x9074]
mov ecx, esi
call dword [eax + 0xc]
mov edx, dword [eax]
mov ecx, eax
push dword [edi + 0x8ed8]
call dword [edx + 0x18]
mov eax, dword [edi + 0x9074]
mov ecx, esi
call dword [eax + 0xc]
mov dl, byte [edi + 0x8ed5]
mov ecx, esi
mov byte [eax + 0x18], dl
mov eax, dword [edi + 0x9074]
call dword [eax + 0xc]
mov ebp, eax
lea ecx, [edi + 0x8ef0]
push 0x41000000
push 0
mov edx, dword [esp + 0xd8]
push edx
push dword [edi + 0x8ee4]
call fcn.0069d798
fstp qword [esp + 0x90]
fld dword [edi + 0x8ee0]
movss xmm3, dword [edi + 0x8ee8]
movss xmm4, dword [edi + 0x8eec]
movss dword [esp + 0x8c], xmm3
movss xmm5, dword [ebp + 0x14]
mulss xmm5, dword [edi + 0x8edc]
movss dword [esp + 0x88], xmm4
mulss xmm5, dword [0x888ef0]
mov eax, 0x1000
fmul qword [0x888e08]
fst qword [esp + 0x80]
cvttss2si edx, xmm5
cmp edx, 0x1000
cmovl eax, edx
mov dword [ebp + 0x8250], eax
fstp qword [esp + 0x58]
mov edx, dword [esp + 0x58]
mov ecx, dword [esp + 0x5c]
mov dword [esp + 0x7c], ecx
shr ecx, 0x14
and ecx, 0x7ff
cmp ecx, 0x3fe
jle 0x6b3730
mov dword [esp + 0x98], eax
neg ecx
add ecx, 0x41e
mov dword [esp + 0x68], ebx
mov ebx, dword [esp + 0x7c]
mov eax, ebx
shld eax, edx, 0xb
or eax, 0x80000000
mov dword [esp + 0x78], eax
mov edx, eax
mov eax, dword [esp + 0x98]
shr edx, cl
mov dword [esp + 0x78], edx
neg edx
cmp ebx, 0
mov ebx, dword [esp + 0x78]
cmovge edx, ebx
mov ebx, dword [esp + 0x68]
jmp 0x6b3732
xor edx, edx
cmp edx, eax
jl 0x6b3746
dec eax
mov dword [esp + 0x60], eax
fild dword [esp + 0x60]
fstp qword [esp + 0x80]
lea ecx, [ebp + 0x8084]
mov edx, dword [ebp + 0x8084]
mov dword [esp + 0x78], ecx
push edi
fld qword [esp + 0x94]
fstp dword [esp]
call dword [edx + 0x5c]
fld qword [0x888e00]
fmul qword [esp + 0x90]
fstp qword [esp]
call sub.MSVCRT.dll_log
movss xmm3, dword [0x888ed0]
lea ecx, [ebp + 0x8164]
fsub qword [0x888df8]
fdiv dword [0x84dd14]
fmul dword [0x888ed4]
fadd dword [0x888ed8]
fstp dword [esp + 0x38]
mov edx, dword [esp + 0x38]
and edx, 0x40000000
add edx, edx
sar edx, 0x1f
and edx, 0x7fffffff
mov dword [esp + 0x3c], edx
mov eax, edx
xor eax, 0xffffffff
and eax, dword [esp + 0x38]
and edx, 0x40000000
or eax, edx
mov dword [esp + 0x38], eax
addss xmm3, dword [esp + 0x38]
mulss xmm3, dword [0x888ecc]
movss dword [ebp + 0x8128], xmm3
mov edx, dword [ebp + 0x8164]
mov dword [esp + 0x7c], ecx
push edi
fld qword [esp + 0x94]
fstp dword [esp]
call dword [edx + 0x5c]
fld qword [0x888e00]
fmul qword [esp + 0x90]
fstp qword [esp]
call sub.MSVCRT.dll_log
movss xmm3, dword [0x888ed0]
fsub qword [0x888df8]
fdiv dword [0x84dd14]
fmul dword [0x888ed4]
fadd dword [0x888ed8]
fstp dword [esp + 0x40]
mov edx, dword [esp + 0x40]
and edx, 0x40000000
add edx, edx
sar edx, 0x1f
and edx, 0x7fffffff
mov dword [esp + 0x44], edx
mov eax, edx
xor eax, 0xffffffff
and eax, dword [esp + 0x40]
and edx, 0x40000000
or eax, edx
mov dword [esp + 0x40], eax
addss xmm3, dword [esp + 0x40]
mulss xmm3, dword [0x888ecc]
movss dword [ebp + 0x8208], xmm3
mov edx, dword [ebp + 0x8084]
add esp, 0xfffffff8
fld qword [esp + 0x88]
mov ecx, dword [esp + 0x80]
fstp dword [esp]
mov byte [esp + 4], 0
call dword [edx + 0x10]
mov edx, dword [ebp + 0x8164]
add esp, 0xfffffff8
mov ecx, dword [esp + 0x84]
fld qword [esp + 0x88]
fstp dword [esp]
mov byte [esp + 4], 0
call dword [edx + 0x10]
movss xmm1, dword [esp + 0x88]
mulss xmm1, dword [0x888ec8]
movss xmm3, dword [esp + 0x8c]
movss dword [ebp + 0x8248], xmm1
mulss xmm3, dword [0x888ecc]
lea eax, [esp + 8]
movss dword [ebp + 0x824c], xmm3
fld qword [0x888de8]
fstp qword [esp + 8]
mov dword [esp + 0x10], 0
mov edx, dword [ebp + 0x8084]
push eax
mov ecx, dword [esp + 0x7c]
call dword [edx + 0x30]
fld qword [esp + 8]
fadd dword [ebp + 0x824c]
fld qword [0x888df0]
fcomi st(1)
ja 0x6b45c1
fld qword [0x888de0]
lea esi, [esi]
fadd st(2), st(0)
fxch st(2)
fcomi st(1)
fxch st(2)
jae 0x6b3938
fstp st(0)
fstp st(0)
fstp qword [esp + 8]
mov edx, dword [ebp + 0x8164]
lea eax, [esp + 8]
push eax
mov ecx, dword [esp + 0x80]
call dword [edx + 0x2c]
mov eax, dword [edi + 0x9074]
mov ecx, esi
call dword [eax + 0xc]
mov byte [eax + 0x2c], 1
jmp 0x6b3997
lea ebp, [edi + 0x9074]
mov eax, dword [edi + 0x9074]
mov ecx, ebp
call dword [eax + 8]
movzx eax, al
test eax, eax
je 0x6b3997
mov eax, dword [edi + 0x9074]
mov ecx, ebp
call dword [eax + 0xc]
mov byte [eax + 0x2c], 0
mov al, byte [edi + 0x8f00]
test al, al
je 0x6b3e60
lea ebp, [edi + 0x9094]
mov eax, dword [edi + 0x9094]
mov ecx, ebp
call dword [eax + 8]
movzx eax, al
test eax, eax
jne 0x6b3bca
mov al, byte [esp + 0xd8]
test al, al
je 0x6b39d4
or ebx, 8
jmp 0x6b3e87
push 1
mov ecx, ebp
push 0x284
call fcn.006f20c4
test eax, eax
jne 0x6b3af5
mov eax, dword [edi + 0x9094]
mov ecx, ebp
call dword [eax + 0xc]
test eax, eax
je 0x6b3af5
xor edx, edx
lea ecx, [eax + 0x30]
mov esi, 2
mov byte [eax + 0x18], dl
mov dword [eax + 0x10], edx
mov dword [eax + 8], edx
mov dword [eax + 0xc], edx
mov dword [eax + 0x14], 0
mov dword [eax], 0x8896a0
mov dword [esp + 0x68], ebx
mov ebx, eax
mov dword [esp + 0x6c], ebp
mov ebp, ecx
mov dword [esp + 0x70], edi
nop
lea esi, [esi]
push 1
mov ecx, ebp
call fcn.006f2054
add ebp, 0x20
dec esi
jne 0x6b3a38
mov eax, ebx
mov ebx, dword [esp + 0x68]
mov ebp, dword [esp + 0x6c]
mov edi, dword [esp + 0x70]
xor edx, edx
mov esi, 2
mov dword [eax + 0x1c], edx
mov dword [eax + 0x20], edx
mov dword [eax + 0x70], edx
mov dword [eax + 0x74], edx
mov dword [eax + 0x24], 0x3f800000
mov dword [eax + 0x28], 0x3f800000
mov byte [eax + 0x2c], dl
mov dword [eax], 0x889760
add eax, 0xc4
mov dword [esp + 0x68], ebx
mov dword [esp + 0x6c], ebp
mov ebx, eax
mov dword [esp + 0x70], edi
lea esi, [esi]
mov ecx, ebx
call fcn.00445350
mov dl, 1
mov byte [ebx + 7], dl
mov byte [ebx + 5], dl
mov dword [ebx + 0xc0], 0
mov dword [ebx + 0xb4], 0x3f800000
mov dword [ebx + 0xc4], 0x3f800000
mov byte [ebx + 4], 2
mov dword [ebx + 0xac], 0x3e99999a
mov dword [ebx], 0x879940
mov dword [ebx + 0x20], 0x3d99999a
add ebx, 0xe0
dec esi
jne 0x6b3a98
mov ebx, dword [esp + 0x68]
mov ebp, dword [esp + 0x6c]
mov edi, dword [esp + 0x70]
mov eax, dword [edi + 0x9094]
mov ecx, ebp
call dword [eax + 0xc]
mov esi, dword [eax]
mov edx, dword [esp + 0xcc]
mov ecx, eax
push edx
call dword [esi + 0xc]
mov eax, dword [edi + 0x9094]
mov ecx, ebp
call dword [eax + 0xc]
mov dword [esp + 0x98], eax
lea ecx, [eax + 0x30]
mov edx, dword [eax + 0x30]
mov dword [esp + 0x74], ecx
call dword [edx + 8]
mov dword [esp + 0x78], eax
movzx edx, al
test edx, edx
jne 0x6b3b59
mov edx, dword [esp + 0x98]
mov eax, dword [edx + 0x30]
mov esi, dword [esp + 0xd4]
lea edx, [esi + esi]
add edx, edx
push 1
push edx
mov ecx, dword [esp + 0x7c]
call dword [eax + 0x1c]
mov eax, dword [esp + 0x98]
lea ecx, [eax + 0x50]
mov edx, dword [eax + 0x50]
mov dword [esp + 0x78], ecx
call dword [edx + 8]
mov dword [esp + 0x7c], eax
movzx edx, al
test edx, edx
jne 0x6b3b9b
mov edx, dword [esp + 0x98]
mov eax, dword [edx + 0x50]
mov esi, dword [esp + 0xd4]
lea edx, [esi + esi]
add edx, edx
push 1
push edx
mov ecx, dword [esp + 0x80]
call dword [eax + 0x1c]
mov eax, dword [esp + 0x98]
mov edx, dword [eax + 0x30]
mov ecx, dword [esp + 0x74]
call dword [edx + 0xc]
mov edx, dword [esp + 0x98]
mov ecx, dword [esp + 0x78]
mov dword [edx + 0x70], eax
mov eax, dword [edx + 0x50]
call dword [eax + 0xc]
mov edx, dword [esp + 0x98]
mov dword [edx + 0x74], eax
mov eax, dword [edi + 0x9094]
mov ecx, ebp
call dword [eax + 0xc]
mov edx, dword [eax]
mov ecx, eax
push dword [edi + 0x8f04]
call dword [edx + 0x18]
mov eax, dword [edi + 0x9094]
mov ecx, ebp
call dword [eax + 0xc]
mov dl, byte [edi + 0x8f01]
mov ecx, ebp
mov byte [eax + 0x18], dl
mov eax, dword [edi + 0x9094]
call dword [eax + 0xc]
mov esi, eax
lea ecx, [edi + 0x8f18]
push 0x41000000
push 0
mov edx, dword [esp + 0xd8]
push edx
push dword [edi + 0x8f0c]
call fcn.0069d798
fstp qword [esp + 0x90]
mov edx, dword [edi + 0x8f08]
movss xmm3, dword [edi + 0x8f10]
lea ecx, [esi + 0xc4]
movss dword [esp + 0x88], xmm3
fld dword [edi + 0x8f14]
fstp qword [esp + 0x80]
mov dword [esi + 0xbc], edx
mov dword [esp + 0x7c], ecx
mov edx, dword [esi + 0xc4]
push edi
fld qword [esp + 0x94]
fstp dword [esp]
call dword [edx + 0x5c]
fld qword [0x888e00]
fmul qword [esp + 0x90]
fstp qword [esp]
call sub.MSVCRT.dll_log
movss xmm3, dword [0x888ed0]
lea ecx, [esi + 0x1a4]
fsub qword [0x888df8]
fdiv dword [0x84dd14]
fmul dword [0x888ed4]
fadd dword [0x888ed8]
fstp dword [esp + 0x48]
mov edx, dword [esp + 0x48]
and edx, 0x40000000
add edx, edx
sar edx, 0x1f
and edx, 0x7fffffff
mov dword [esp + 0x4c], edx
mov eax, edx
xor eax, 0xffffffff
and eax, dword [esp + 0x48]
and edx, 0x40000000
or eax, edx
mov dword [esp + 0x48], eax
addss xmm3, dword [esp + 0x48]
mulss xmm3, dword [0x888ecc]
movss dword [esi + 0x168], xmm3
mov edx, dword [esi + 0x1a4]
mov dword [esp + 0x78], ecx
push edi
fld qword [esp + 0x94]
fstp dword [esp]
call dword [edx + 0x5c]
fld qword [0x888e00]
fmul qword [esp + 0x90]
fstp qword [esp]
call sub.MSVCRT.dll_log
movss xmm3, dword [0x888ed0]
fsub qword [0x888df8]
fdiv dword [0x84dd14]
fmul dword [0x888ed4]
fadd dword [0x888ed8]
fstp dword [esp + 0x50]
mov edx, dword [esp + 0x50]
and edx, 0x40000000
add edx, edx
sar edx, 0x1f
and edx, 0x7fffffff
mov dword [esp + 0x54], edx
mov eax, edx
xor eax, 0xffffffff
and eax, dword [esp + 0x50]
and edx, 0x40000000
or eax, edx
mov dword [esp + 0x50], eax
addss xmm3, dword [esp + 0x50]
mulss xmm3, dword [0x888ecc]
movss dword [esi + 0x248], xmm3
mov edx, dword [esi + 0xc4]
push 0
push dword [esi + 0xbc]
mov ecx, dword [esp + 0x84]
call dword [edx + 0x10]
mov edx, dword [esi + 0x1a4]
push 0
push dword [esi + 0xbc]
mov ecx, dword [esp + 0x80]
call dword [edx + 0x10]
fld qword [0x888dd8]
movss xmm1, dword [esp + 0x88]
mulss xmm1, dword [0x888ecc]
fmul qword [esp + 0x80]
lea eax, [esp + 0x20]
fstp dword [esi + 0xb8]
movss dword [esi + 0xc0], xmm1
fld qword [0x888de8]
fstp qword [esp + 0x20]
mov dword [esp + 0x28], 0
mov edx, dword [esi + 0xc4]
push eax
mov ecx, dword [esp + 0x80]
call dword [edx + 0x30]
fld qword [esp + 0x20]
fadd dword [esi + 0xc0]
fld qword [0x888df0]
fcomi st(1)
ja 0x6b45cc
fld qword [0x888de0]
fadd st(2), st(0)
fxch st(2)
fcomi st(1)
fxch st(2)
jae 0x6b3e2b
fstp st(0)
fstp st(0)
fstp qword [esp + 0x20]
mov edx, dword [esi + 0x1a4]
lea eax, [esp + 0x20]
push eax
mov ecx, dword [esp + 0x7c]
call dword [edx + 0x2c]
mov eax, dword [edi + 0x9094]
mov ecx, ebp
call dword [eax + 0xc]
mov byte [eax + 0x2c], 1
jmp 0x6b3e87
lea ebp, [edi + 0x9094]
mov eax, dword [edi + 0x9094]
mov ecx, ebp
call dword [eax + 8]
movzx eax, al
test eax, eax
je 0x6b3e87
mov eax, dword [edi + 0x9094]
mov ecx, ebp
call dword [eax + 0xc]
mov byte [eax + 0x2c], 0
mov al, byte [edi + 0x8f28]
test al, al
je 0x6b458b
lea ebp, [edi + 0x90b4]
mov eax, dword [edi + 0x90b4]
mov ecx, ebp
call dword [eax + 8]
movzx eax, al
test eax, eax
jne 0x6b4076
mov al, byte [esp + 0xd8]
test al, al
je 0x6b3ece
or ebx, 0x10
mov eax, ebx
add esp, 0xb8
pop ebx
pop ebp
pop esi
pop edi
ret 0x10
push 1
mov ecx, ebp
push 0xd021c
call fcn.006f20c4
test eax, eax
jne 0x6b3f98
mov edx, dword [edi + 0x90b4]
mov ecx, ebp
call dword [edx + 0xc]
test eax, eax
je 0x6b3f98
mov dword [eax + 0xd0080], 0x1fff
xor edx, edx
lea ecx, [eax + 0x30]
mov byte [eax + 0x18], dl
mov esi, 2
mov dword [eax + 0x10], edx
mov dword [eax + 8], edx
mov dword [eax + 0xc], edx
mov dword [eax + 0x14], 0
mov dword [eax], 0x8896a0
mov dword [esp + 0x68], ebx
mov dword [esp + 0x70], edi
mov ebx, eax
mov edi, ecx
nop
lea esi, [esi]
push 1
mov ecx, edi
call fcn.006f2054
add edi, 0x20
dec esi
jne 0x6b3f38
mov eax, ebx
mov ebx, dword [esp + 0x68]
mov edi, dword [esp + 0x70]
xor edx, edx
mov dword [eax + 0x1c], edx
mov dword [eax + 0x20], edx
mov dword [eax + 0x70], edx
mov dword [eax + 0x74], edx
mov dword [eax + 0x24], 0x3f800000
mov dword [eax + 0x28], 0x3f800000
mov byte [eax + 0x2c], dl
mov dword [eax], 0x889780
mov dword [eax + 0xd01a0], edx
mov dword [eax + 0xd01b0], edx
mov dword [eax + 0xd01b4], edx
mov byte [eax + 0xd01a4], dl
mov dword [eax + 0xd019c], 0x86a1c4
mov edx, dword [edi + 0x90b4]
mov ecx, ebp
call dword [edx + 0xc]
mov esi, dword [eax]
mov edx, dword [esp + 0xcc]
mov ecx, eax
push edx
call dword [esi + 0xc]
mov edx, dword [edi + 0x90b4]
mov ecx, ebp
call dword [edx + 0xc]
mov dword [esp + 0x98], eax
mov edx, eax
lea ecx, [edx + 0x30]
mov esi, dword [edx + 0x30]
mov dword [esp + 0x78], ecx
call dword [esi + 8]
mov dword [esp + 0x7c], eax
mov edx, eax
movzx esi, dl
test esi, esi
jne 0x6b4003
mov edx, dword [esp + 0x98]
mov eax, dword [edx + 0x30]
mov esi, dword [esp + 0xd4]
lea edx, [esi + esi]
add edx, edx
push 1
push edx
mov ecx, dword [esp + 0x80]
call dword [eax + 0x1c]
mov edx, dword [esp + 0x98]
lea ecx, [edx + 0x50]
mov esi, dword [edx + 0x50]
mov dword [esp + 0x7c], ecx
call dword [esi + 8]
mov dword [esp + 0x74], eax
mov edx, eax
movzx esi, dl
test esi, esi
jne 0x6b4047
mov edx, dword [esp + 0x98]
mov eax, dword [edx + 0x50]
mov esi, dword [esp + 0xd4]
lea edx, [esi + esi]
add edx, edx
push 1
push edx
mov ecx, dword [esp + 0x84]
call dword [eax + 0x1c]
mov edx, dword [esp + 0x98]
mov esi, dword [edx + 0x30]
mov ecx, dword [esp + 0x78]
call dword [esi + 0xc]
mov edx, dword [esp + 0x98]
mov esi, dword [edx + 0x50]
mov ecx, dword [esp + 0x7c]
mov dword [edx + 0x70], eax
call dword [esi + 0xc]
mov edx, dword [esp + 0x98]
mov dword [edx + 0x74], eax
mov edx, dword [edi + 0x90b4]
mov ecx, ebp
call dword [edx + 0xc]
mov edx, dword [eax]
mov ecx, eax
push dword [edi + 0x8f2c]
call dword [edx + 0x18]
mov edx, dword [edi + 0x90b4]
mov ecx, ebp
call dword [edx + 0xc]
mov dl, byte [edi + 0x8f29]
mov ecx, ebp
mov byte [eax + 0x18], dl
mov esi, dword [edi + 0x90b4]
call dword [esi + 0xc]
movss xmm4, dword [edi + 0x8f30]
movss xmm0, dword [edi + 0x8f34]
mulss xmm0, dword [0x888ec0]
fld dword [edi + 0x8f38]
addss xmm0, dword [0x888ec4]
mulss xmm4, dword [eax + 0x14]
fld dword [edi + 0x8f3c]
mulss xmm4, dword [0x888ef0]
mov edx, 0x2000
fld dword [edi + 0x8f40]
movss dword [eax + 0xd018c], xmm0
mov dword [eax + 0xd0190], 0x3f000000
fld dword [0x888ef8]
fsubr st(3), st(0)
fsubr st(1), st(0)
fxch st(3)
fmul dword [0x888eb8]
faddp st(3)
fxch st(2)
fstp dword [eax + 0xd0194]
fmul dword [0x888eb4]
fadd dword [0x888ebc]
fstp dword [eax + 0xd0198]
cvttss2si esi, xmm4
cmp esi, 0x2000
cmovl edx, esi
neg edx
add edx, 0x2000
mov dword [eax + 0xd0148], edx
mov edx, 0xc0000000
fmul qword [0x888dc8]
and edx, 0x40000000
add edx, edx
fadd qword [0x888dd0]
sar edx, 0x1f
and edx, 0x7fffffff
mov dword [0x85faec], edx
xor edx, 0xffffffff
and edx, 0xc0000000
mov dword [0x85fae8], edx
mov esi, dword [0x85faec]
and esi, 0x40000000
or edx, esi
mov dword [0x85fae8], edx
fld dword [0x888ed0]
fadd dword [0x85fae8]
fmul dword [0x888ecc]
fld st(0)
fsubr qword [0x888df0]
fmul qword [0x888db8]
fadd qword [0x888dc0]
fstp qword [esp + 0x80]
fxch st(1)
fmul qword [0x888db0]
fld dword [0x888eb0]
fcomi st(1)
jbe 0x6b41ed
fld dword [0x888eac]
fcompi st(2)
jae 0x6b41ed
fstp st(1)
fld dword [0x888ef8]
jmp 0x6b428d
fxch st(1)
fst qword [esp + 0x90]
fld st(0)
fld st(1)
fxch st(4)
fstp qword [esp + 0xa0]
fld st(1)
fld st(2)
fstp st(4)
fld st(2)
fmul st(0)
fmul st(2), st(0)
fxch st(1)
fmul st(2)
fmul st(5), st(0)
fxch st(4)
fmul st(5)
fld st(3)
fmul st(1)
fld dword [0x888ef8]
faddp st(5)
fld dword [0x888ebc]
fmulp st(3)
fxch st(4)
faddp st(2)
fld dword [0x888ea8]
fmulp st(3)
fxch st(1)
faddp st(2)
fld dword [0x888ea4]
fmulp st(4)
fxch st(1)
faddp st(3)
fld dword [0x888ea0]
fmulp st(4)
fxch st(2)
faddp st(3)
fld dword [0x888e9c]
fmulp st(2)
fxch st(2)
faddp st(1)
fld dword [0x888e98]
fmul st(2)
fld qword [esp + 0x90]
fmulp st(3)
fxch st(2)
fmul dword [0x888e94]
faddp st(2)
faddp st(1)
fld dword [0x888eb0]
fld qword [esp + 0xa0]
fxch st(2)
fadd qword [0x888de0]
fmul qword [0x888da8]
fmul dword [0x888ed4]
fadd dword [0x888ed8]
fstp dword [0x85fae8]
mov esi, dword [0x85fae8]
and esi, 0x40000000
add esi, esi
sar esi, 0x1f
and esi, 0x7fffffff
mov dword [0x85faec], esi
xor esi, 0xffffffff
and esi, dword [0x85fae8]
mov dword [0x85fae8], esi
mov edx, dword [0x85faec]
and edx, 0x40000000
or esi, edx
mov dword [0x85fae8], esi
fld dword [0x85fae8]
fadd dword [0x888ed0]
fld dword [0x888ecc]
fmulp st(1)
fadd dword [0x888998]
fmul dword [0x85faf0]
fmul qword [0x8888f8]
fld st(0)
fmul qword [0x888da0]
fmul qword [0x8888f0]
fld st(0)
fsubr qword [0x888d98]
fcomi st(3)
jae 0x6b433f
fld dword [0x888eac]
fcompi st(1)
jae 0x6b433f
fstp st(0)
fld dword [0x888efc]
jmp 0x6b439d
fxch st(1)
fstp qword [esp + 0x90]
fld st(0)
fmul st(0)
fmul st(1)
fld st(1)
fmul st(1)
fxch st(1)
fst dword [0x85fb0c]
fxch st(1)
fmul st(2)
fld st(2)
fxch st(1)
fst dword [0x85fb10]
fmul st(1), st(0)
fxch st(1)
fmul st(3)
fst dword [0x85fb14]
fld dword [0x85fb00]
fmulp st(3)
fld dword [0x85fb04]
fmulp st(2)
fxch st(2)
faddp st(1)
fld dword [0x85fb08]
fmulp st(2)
faddp st(1)
faddp st(1)
fld qword [esp + 0x90]
fxch st(1)
fxch st(1)
fadd qword [0x888d98]
fcomi st(3)
fxch st(3)
fstp st(0)
jae 0x6b43c1
fld dword [0x888eac]
fcompi st(3)
jae 0x6b43c1
fstp st(2)
fld dword [0x888efc]
jmp 0x6b440b
fld st(2)
fmul st(0)
fmul st(3)
fst dword [0x85fb0c]
fld st(3)
fmul st(1)
fmul st(4)
fld st(4)
fmul st(1)
fxch st(1)
fst dword [0x85fb10]
fxch st(1)
fmul st(5)
fst dword [0x85fb14]
fld dword [0x85fb00]
fmulp st(3)
fld dword [0x85fb04]
fmulp st(2)
fxch st(2)
faddp st(1)
fld dword [0x85fb08]
fmulp st(2)
faddp st(1)
faddp st(3)
fxch st(2)
fdivp st(2)
mov ecx, ebp
fld dword [0x888e90]
fmulp st(1)
fstp dword [eax + 0xd01cc]
fld dword [eax + 0xd0208]
fld dword [eax + 0xd01f8]
fld dword [0x888994]
fmul st(4)
fld qword [0x888df0]
fadd st(1), st(0)
fxch st(1)
fmul dword [eax + 0xd0200]
fstp qword [esp + 0xa8]
fld dword [0x888990]
fmulp st(5)
faddp st(4)
fld st(2)
fxch st(4)
fmul dword [eax + 0xd0204]
fxch st(4)
fmul st(0)
fld st(3)
fxch st(5)
fstp qword [esp + 0xb0]
fxch st(1)
fmul st(4), st(0)
fld st(4)
fsubr st(3)
fld st(2)
fxch st(2)
fmul st(3)
fld dword [eax + 0xd01fc]
fmul st(3), st(0)
fxch st(2)
faddp st(3)
fxch st(2)
fstp qword [esp + 0xa0]
fld st(0)
fadd st(0)
fld qword [0x888d90]
fxch st(1)
fmul st(6)
fxch st(2)
fsubrp st(7)
fmul st(4)
fmul st(5)
fxch st(3)
fmul st(4), st(0)
fxch st(3)
fadd dword [eax + 0xd01f8]
fsubrp st(1)
faddp st(1)
fst dword [eax + 0xd01e4]
fxch st(4)
faddp st(2)
fld st(2)
fxch st(2)
fst dword [eax + 0xd01e8]
fxch st(2)
fadd st(0)
fld qword [esp + 0xa8]
fadd st(1), st(0)
fld qword [esp + 0xb0]
fld st(0)
fadd st(0)
fmul st(6)
fsubp st(3)
fld st(3)
fmul st(2)
faddp st(3)
fxch st(1)
fmulp st(5)
fld st(4)
fsubr st(1)
fsub st(3)
fld qword [0x888df0]
fadd st(6), st(0)
fxch st(2)
fmulp st(4)
fxch st(5)
fsubrp st(3)
fdivrp st(2)
fxch st(1)
fmul st(4), st(0)
fld qword [esp + 0xa0]
fmul st(1)
fxch st(1)
fmul st(3), st(0)
fxch st(5)
fst dword [eax + 0xd01e4]
fxch st(2)
fmul st(5)
fxch st(4)
fmulp st(5)
fxch st(2)
fst dword [eax + 0xd01e8]
fxch st(3)
fst dword [eax + 0xd01ec]
fxch st(4)
fst dword [eax + 0xd01f0]
faddp st(4)
fld st(0)
fxch st(4)
fsubr qword [0x888df0]
fxch st(2)
fadd st(4), st(0)
fxch st(3)
fadd st(4), st(0)
fxch st(2)
fdivrp st(4)
fxch st(3)
fmul qword [esp + 0x80]
fmul st(2), st(0)
fmul st(3), st(0)
fmulp st(1)
fxch st(1)
fstp dword [eax + 0xd01f4]
fxch st(1)
fstp dword [eax + 0xd01e4]
fstp dword [eax + 0xd01e8]
mov edx, dword [edi + 0x90b4]
call dword [edx + 0xc]
mov byte [eax + 0x2c], 1
jmp 0x6b45b2
lea ebp, [edi + 0x90b4]
mov edx, dword [edi + 0x90b4]
mov ecx, ebp
call dword [edx + 8]
movzx edx, al
test edx, edx
je 0x6b45b2
mov edx, dword [edi + 0x90b4]
mov ecx, ebp
call dword [edx + 0xc]
mov byte [eax + 0x2c], 0
mov eax, ebx
add esp, 0xb8
pop ebx
pop ebp
pop esi
pop edi
ret 0x10
fstp st(0)
fstp qword [esp + 8]
jmp 0x6b394a
fstp st(0)
fstp qword [esp + 0x20]
jmp 0x6b3e3d
push edi
push esi
push ebp
push ebx
sub esp, 0xb0
mov ebp, ecx
xor ebx, ebx
mov al, byte [ebp + 0x8e84]
test al, al
je 0x6b4822
lea esi, [ebp + 0x9034]
mov eax, dword [ebp + 0x9034]
mov ecx, esi
call dword [eax + 8]
movzx eax, al
test eax, eax
jne 0x6b46fd
mov al, byte [esp + 0xd0]
test al, al
je 0x6b4625
mov ebx, 1
jmp 0x6b4849
push 1
mov ecx, esi
push 0x200098
call fcn.006f20c4
test eax, eax
jne 0x6b46c9
mov eax, dword [ebp + 0x9034]
mov ecx, esi
call dword [eax + 0xc]
test eax, eax
je 0x6b46c9
mov dword [eax + 0x200080], 0x3ffff
xor edx, edx
lea ecx, [eax + 0x30]
mov byte [eax + 0x18], dl
mov edi, 2
mov dword [eax + 0x10], edx
mov dword [eax + 8], edx
mov dword [eax + 0xc], edx
mov dword [eax + 0x14], 0
mov dword [eax], 0x8896a0
mov dword [esp + 0x74], eax
mov dword [esp + 0x6c], esi
mov dword [esp + 0x70], ebp
mov ebp, ecx
push 1
mov ecx, ebp
call fcn.006f2054
add ebp, 0x20
dec edi
jne 0x6b4689
mov eax, dword [esp + 0x74]
mov esi, dword [esp + 0x6c]
mov ebp, dword [esp + 0x70]
xor edx, edx
mov dword [eax + 0x1c], edx
mov dword [eax + 0x20], edx
mov dword [eax + 0x70], edx
mov dword [eax + 0x74], edx
mov dword [eax + 0x24], 0x3f800000
mov dword [eax + 0x28], 0x3f800000
mov byte [eax + 0x2c], dl
mov dword [eax], 0x8896c0
mov eax, dword [ebp + 0x9034]
mov ecx, esi
call dword [eax + 0xc]
mov edi, dword [eax]
mov edx, dword [esp + 0xc4]
mov ecx, eax
push edx
call dword [edi + 0xc]
mov eax, dword [ebp + 0x9034]
mov ecx, esi
call dword [eax + 0xc]
mov edx, dword [esp + 0xcc]
mov ecx, eax
push edx
call fcn.006b5dc8
mov eax, dword [ebp + 0x9034]
mov ecx, esi
call dword [eax + 0xc]
mov edx, dword [eax]
mov ecx, eax
push dword [ebp + 0x8e88]
call dword [edx + 0x18]
mov eax, dword [ebp + 0x9034]
mov ecx, esi
call dword [eax + 0xc]
mov dl, byte [ebp + 0x8e85]
mov ecx, esi
mov byte [eax + 0x18], dl
mov eax, dword [ebp + 0x9034]
call dword [eax + 0xc]
mov edi, eax
lea ecx, [ebp + 0x8e90]
push 0x45b54000
push 0
mov edx, dword [esp + 0xd0]
push edx
push dword [ebp + 0x8e8c]
call fcn.0069d8c8
fld dword [ebp + 0x8ea4]
mov eax, dword [ebp + 0x8ea8]
fld dword [ebp + 0x8ea0]
fxch st(2)
fmul dword [edi + 0x14]
fmul dword [0x889050]
fstp qword [esp + 0x58]
mov edx, dword [esp + 0x58]
mov dword [esp + 0x78], edx
mov edx, dword [esp + 0x5c]
mov dword [esp + 0x7c], edx
shr edx, 0x14
and edx, 0x7ff
mov dword [esp + 0x74], edx
cmp edx, 0x3fe
jle 0x6b47c8
mov edx, dword [esp + 0x7c]
mov ecx, dword [esp + 0x78]
shld edx, ecx, 0xb
or edx, 0x80000000
mov ecx, dword [esp + 0x74]
neg ecx
add ecx, 0x41e
shr edx, cl
mov ecx, dword [esp + 0x7c]
test ecx, ecx
jge 0x6b47ca
neg edx
jmp 0x6b47ca
xor edx, edx
cmp edx, 0x40000
jl 0x6b47d7
mov edx, 0x40000
add edx, dword [edi + 0x200078]
mov ecx, esi
and edx, dword [edi + 0x200080]
mov dword [edi + 0x20007c], edx
fld dword [0x88904c]
fmulp st(1)
fadd dword [0x889058]
fstp dword [edi + 0x200084]
fld dword [0x889048]
fmulp st(1)
fstp dword [edi + 0x200090]
mov dword [edi + 0x200094], eax
mov eax, dword [ebp + 0x9034]
call dword [eax + 0xc]
mov byte [eax + 0x2c], 1
jmp 0x6b4849
lea esi, [ebp + 0x9034]
mov eax, dword [ebp + 0x9034]
mov ecx, esi
call dword [eax + 8]
movzx eax, al
test eax, eax
je 0x6b4849
mov eax, dword [ebp + 0x9034]
mov ecx, esi
call dword [eax + 0xc]
mov byte [eax + 0x2c], 0
mov al, byte [ebp + 0x8eac]
test al, al
je 0x6b4b19
lea esi, [ebp + 0x9054]
mov eax, dword [ebp + 0x9054]
mov ecx, esi
call dword [eax + 8]
movzx eax, al
test eax, eax
jne 0x6b4a84
mov al, byte [esp + 0xd0]
test al, al
je 0x6b4886
or ebx, 2
jmp 0x6b4b40
push 1
mov ecx, esi
push 0x8424
call fcn.006f20c4
test eax, eax
jne 0x6b49af
mov eax, dword [ebp + 0x9054]
mov ecx, esi
call dword [eax + 0xc]
test eax, eax
je 0x6b49af
mov dword [eax + 0x8080], 0xfff
xor edx, edx
lea ecx, [eax + 0x30]
mov byte [eax + 0x18], dl
mov edi, 2
mov dword [eax + 0x10], edx
mov dword [eax + 8], edx
mov dword [eax + 0xc], edx
mov dword [eax + 0x14], 0
mov dword [eax], 0x8896a0
mov dword [esp + 0x6c], eax
mov dword [esp + 0x74], esi
mov dword [esp + 0x70], ebp
mov ebp, ecx
push 1
mov ecx, ebp
call fcn.006f2054
add ebp, 0x20
dec edi
jne 0x6b48ea
mov eax, dword [esp + 0x6c]
mov esi, dword [esp + 0x74]
mov ebp, dword [esp + 0x70]
xor edx, edx
lea ecx, [eax + 0x8084]
mov edi, 4
mov dword [eax + 0x1c], edx
mov dword [eax + 0x20], edx
mov dword [eax + 0x70], edx
mov dword [eax + 0x74], edx
mov dword [eax + 0x24], 0x3f800000
mov dword [eax + 0x28], 0x3f800000
mov byte [eax + 0x2c], dl
mov dword [eax], 0x8896e0
mov dword [esp + 0x68], ebx
mov ebx, ecx
mov dword [esp + 0x6c], eax
mov dword [esp + 0x74], esi
mov dword [esp + 0x70], ebp
nop
mov ecx, ebx
call fcn.00445350
mov al, 1
mov byte [ebx + 7], al
mov byte [ebx + 5], al
mov dword [ebx + 0xc0], 0
mov dword [ebx + 0xb4], 0x3f800000
mov dword [ebx + 0xc4], 0x3f800000
mov byte [ebx + 4], 2
mov dword [ebx + 0xac], 0x3e99999a
mov dword [ebx], 0x879940
mov dword [ebx + 0x20], 0x3d99999a
add ebx, 0xe0
dec edi
jne 0x6b4948
mov ebx, dword [esp + 0x68]
mov eax, dword [esp + 0x6c]
mov esi, dword [esp + 0x74]
mov ebp, dword [esp + 0x70]
mov dword [eax], 0x889700
mov eax, dword [ebp + 0x9054]
mov ecx, esi
call dword [eax + 0xc]
mov edi, dword [eax]
mov edx, dword [esp + 0xc4]
mov ecx, eax
push edx
call dword [edi + 0xc]
mov eax, dword [ebp + 0x9054]
mov ecx, esi
call dword [eax + 0xc]
mov dword [esp + 0xa0], eax
lea ecx, [eax + 0x30]
mov edx, dword [eax + 0x30]
mov dword [esp + 0x6c], ecx
call dword [edx + 8]
mov dword [esp + 0x7c], eax
movzx edx, al
test edx, edx
jne 0x6b4a13
mov edx, dword [esp + 0xa0]
mov eax, dword [edx + 0x30]
mov edi, dword [esp + 0xcc]
lea edx, [edi + edi]
add edx, edx
push 1
push edx
mov ecx, dword [esp + 0x74]
call dword [eax + 0x1c]
mov eax, dword [esp + 0xa0]
lea ecx, [eax + 0x50]
mov edx, dword [eax + 0x50]
mov dword [esp + 0x78], ecx
call dword [edx + 8]
mov dword [esp + 0x7c], eax
movzx edx, al
test edx, edx
jne 0x6b4a55
mov edx, dword [esp + 0xa0]
mov eax, dword [edx + 0x50]
mov edi, dword [esp + 0xcc]
lea edx, [edi + edi]
add edx, edx
push 1
push edx
mov ecx, dword [esp + 0x80]
call dword [eax + 0x1c]
mov eax, dword [esp + 0xa0]
mov edx, dword [eax + 0x30]
mov ecx, dword [esp + 0x6c]
call dword [edx + 0xc]
mov edx, dword [esp + 0xa0]
mov ecx, dword [esp + 0x78]
mov dword [edx + 0x70], eax
mov eax, dword [edx + 0x50]
call dword [eax + 0xc]
mov edx, dword [esp + 0xa0]
mov dword [edx + 0x74], eax
mov eax, dword [ebp + 0x9054]
mov ecx, esi
call dword [eax + 0xc]
mov edx, dword [eax]
mov ecx, eax
push dword [ebp + 0x8eb0]
call dword [edx + 0x18]
mov eax, dword [ebp + 0x9054]
mov ecx, esi
call dword [eax + 0xc]
mov dl, byte [ebp + 0x8ead]
mov ecx, esi
mov byte [eax + 0x18], dl
mov eax, dword [ebp + 0x9054]
call dword [eax + 0xc]
mov edi, eax
lea ecx, [ebp + 0x8ec4]
push 0x41000000
push 0
mov edx, dword [esp + 0xd0]
push edx
push dword [ebp + 0x8ebc]
call fcn.0069d798
add esp, 0xfffffff0
mov edx, dword [ebp + 0x8eb4]
mov ecx, edi
mov dword [esp], edx
mov edx, dword [ebp + 0x8eb8]
mov dword [esp + 4], edx
mov edx, dword [ebp + 0x8ec0]
fstp dword [esp + 8]
mov dword [esp + 0xc], edx
call fcn.006b5e38
mov eax, dword [ebp + 0x9054]
mov ecx, esi
call dword [eax + 0xc]
mov byte [eax + 0x2c], 1
jmp 0x6b4b40
lea esi, [ebp + 0x9054]
mov eax, dword [ebp + 0x9054]
mov ecx, esi
call dword [eax + 8]
movzx eax, al
test eax, eax
je 0x6b4b40
mov eax, dword [ebp + 0x9054]
mov ecx, esi
call dword [eax + 0xc]
mov byte [eax + 0x2c], 0
mov al, byte [ebp + 0x8ed4]
test al, al
je 0x6b5150
lea esi, [ebp + 0x9074]
mov eax, dword [ebp + 0x9074]
mov ecx, esi
call dword [eax + 8]
movzx eax, al
test eax, eax
jne 0x6b4d84
mov al, byte [esp + 0xd0]
test al, al
je 0x6b4b7d
or ebx, 4
jmp 0x6b5177
push 1
mov ecx, esi
push 0x8254
call fcn.006f20c4
test eax, eax
jne 0x6b4caf
mov eax, dword [ebp + 0x9074]
mov ecx, esi
call dword [eax + 0xc]
test eax, eax
je 0x6b4caf
mov dword [eax + 0x8080], 0xfff
xor edx, edx
lea ecx, [eax + 0x30]
mov byte [eax + 0x18], dl
mov edi, 2
mov dword [eax + 0x10], edx
mov dword [eax + 8], edx
mov dword [eax + 0xc], edx
mov dword [eax + 0x14], 0
mov dword [eax], 0x8896a0
mov dword [esp + 0x6c], eax
mov dword [esp + 0x74], esi
mov dword [esp + 0x70], ebp
mov ebp, ecx
lea esi, [esi]
push 1
mov ecx, ebp
call fcn.006f2054
add ebp, 0x20
dec edi
jne 0x6b4be8
mov eax, dword [esp + 0x6c]
mov esi, dword [esp + 0x74]
mov ebp, dword [esp + 0x70]
xor edx, edx
lea ecx, [eax + 0x8084]
mov edi, 2
mov dword [eax + 0x1c], edx
mov dword [eax + 0x20], edx
mov dword [eax + 0x70], edx
mov dword [eax + 0x74], edx
mov dword [eax + 0x24], 0x3f800000
mov dword [eax + 0x28], 0x3f800000
mov byte [eax + 0x2c], dl
mov dword [eax], 0x889720
mov dword [esp + 0x68], ebx
mov ebx, ecx
mov dword [esp + 0x6c], eax
mov dword [esp + 0x74], esi
mov dword [esp + 0x70], ebp
lea esi, [esi]
mov ecx, ebx
call fcn.00445350
mov al, 1
mov byte [ebx + 7], al
mov byte [ebx + 5], al
mov dword [ebx + 0xc0], 0
mov dword [ebx + 0xb4], 0x3f800000
mov dword [ebx + 0xc4], 0x3f800000
mov byte [ebx + 4], 2
mov dword [ebx + 0xac], 0x3e99999a
mov dword [ebx], 0x879940
mov dword [ebx + 0x20], 0x3d99999a
add ebx, 0xe0
dec edi
jne 0x6b4c48
mov ebx, dword [esp + 0x68]
mov eax, dword [esp + 0x6c]
mov esi, dword [esp + 0x74]
mov ebp, dword [esp + 0x70]
mov dword [eax], 0x889740
mov eax, dword [ebp + 0x9074]
mov ecx, esi
call dword [eax + 0xc]
mov edi, dword [eax]
mov edx, dword [esp + 0xc4]
mov ecx, eax
push edx
call dword [edi + 0xc]
mov eax, dword [ebp + 0x9074]
mov ecx, esi
call dword [eax + 0xc]
mov dword [esp + 0xa0], eax
lea ecx, [eax + 0x30]
mov edx, dword [eax + 0x30]
mov dword [esp + 0x6c], ecx
call dword [edx + 8]
mov dword [esp + 0x7c], eax
movzx edx, al
test edx, edx
jne 0x6b4d13
mov edx, dword [esp + 0xa0]
mov eax, dword [edx + 0x30]
mov edi, dword [esp + 0xcc]
lea edx, [edi + edi]
add edx, edx
push 1
push edx
mov ecx, dword [esp + 0x74]
call dword [eax + 0x1c]
mov eax, dword [esp + 0xa0]
lea ecx, [eax + 0x50]
mov edx, dword [eax + 0x50]
mov dword [esp + 0x78], ecx
call dword [edx + 8]
mov dword [esp + 0x7c], eax
movzx edx, al
test edx, edx
jne 0x6b4d55
mov edx, dword [esp + 0xa0]
mov eax, dword [edx + 0x50]
mov edi, dword [esp + 0xcc]
lea edx, [edi + edi]
add edx, edx
push 1
push edx
mov ecx, dword [esp + 0x80]
call dword [eax + 0x1c]
mov eax, dword [esp + 0xa0]
mov edx, dword [eax + 0x30]
mov ecx, dword [esp + 0x6c]
call dword [edx + 0xc]
mov edx, dword [esp + 0xa0]
mov ecx, dword [esp + 0x78]
mov dword [edx + 0x70], eax
mov eax, dword [edx + 0x50]
call dword [eax + 0xc]
mov edx, dword [esp + 0xa0]
mov dword [edx + 0x74], eax
mov eax, dword [ebp + 0x9074]
mov ecx, esi
call dword [eax + 0xc]
mov edx, dword [eax]
mov ecx, eax
push dword [ebp + 0x8ed8]
call dword [edx + 0x18]
mov eax, dword [ebp + 0x9074]
mov ecx, esi
call dword [eax + 0xc]
mov dl, byte [ebp + 0x8ed5]
mov ecx, esi
mov byte [eax + 0x18], dl
mov eax, dword [ebp + 0x9074]
call dword [eax + 0xc]
mov edi, eax
lea ecx, [ebp + 0x8ef0]
push 0x41000000
push 0
mov edx, dword [esp + 0xd0]
push edx
push dword [ebp + 0x8ee4]
call fcn.0069d798
fstp qword [esp + 0x90]
fld dword [ebp + 0x8ee0]
fld dword [ebp + 0x8ee8]
fstp dword [esp + 0x80]
fld dword [ebp + 0x8eec]
fstp dword [esp + 0x88]
fmul qword [0x888fe8]
fstp qword [esp + 0x98]
fld dword [edi + 0x14]
fmul dword [ebp + 0x8edc]
fmul dword [0x889050]
fstp qword [esp + 0x58]
mov edx, dword [esp + 0x58]
mov ecx, dword [esp + 0x5c]
mov dword [esp + 0xa0], ecx
shr ecx, 0x14
and ecx, 0x7ff
cmp ecx, 0x3fe
jle 0x6b4e7f
mov eax, dword [esp + 0xa0]
neg ecx
shld eax, edx, 0xb
or eax, 0x80000000
add ecx, 0x41e
mov dword [esp + 0x7c], eax
mov edx, eax
shr edx, cl
mov dword [esp + 0x7c], edx
mov edx, dword [esp + 0xa0]
test edx, edx
jge 0x6b4e85
mov edx, dword [esp + 0x7c]
neg edx
mov dword [esp + 0x7c], edx
jmp 0x6b4e85
xor edx, edx
mov dword [esp + 0x7c], edx
mov edx, dword [esp + 0x7c]
cmp edx, 0x1000
jl 0x6b4ea6
mov edx, 0x1000
mov dword [esp + 0x7c], edx
mov dword [edi + 0x8250], 0x1000
jmp 0x6b4eac
mov dword [edi + 0x8250], edx
fld qword [esp + 0x98]
fstp qword [esp + 0x58]
mov edx, dword [esp + 0x58]
mov ecx, dword [esp + 0x5c]
mov dword [esp + 0xa0], ecx
shr ecx, 0x14
and ecx, 0x7ff
cmp ecx, 0x3fe
jle 0x6b4f12
mov eax, dword [esp + 0xa0]
neg ecx
shld eax, edx, 0xb
or eax, 0x80000000
add ecx, 0x41e
mov dword [esp + 0x6c], eax
mov edx, eax
shr edx, cl
mov dword [esp + 0x6c], edx
mov edx, dword [esp + 0xa0]
test edx, edx
jge 0x6b4f18
mov edx, dword [esp + 0x6c]
neg edx
mov dword [esp + 0x6c], edx
jmp 0x6b4f18
xor edx, edx
mov dword [esp + 0x6c], edx
mov edx, dword [esp + 0x6c]
mov eax, dword [esp + 0x7c]
cmp edx, eax
jl 0x6b4f36
mov edx, eax
dec edx
mov dword [esp + 0x60], edx
fild dword [esp + 0x60]
fstp qword [esp + 0x98]
lea ecx, [edi + 0x8084]
mov edx, dword [edi + 0x8084]
mov dword [esp + 0x7c], ecx
push edi
fld qword [esp + 0x94]
fstp dword [esp]
call dword [edx + 0x5c]
fld qword [0x888fe0]
fmul qword [esp + 0x90]
fstp qword [esp]
call sub.MSVCRT.dll_log
lea ecx, [edi + 0x8164]
fsub qword [0x888fd8]
fdiv dword [0x84dd14]
fmul dword [0x889034]
fadd dword [0x889038]
fstp dword [esp + 0x38]
mov edx, dword [esp + 0x38]
and edx, 0x40000000
add edx, edx
sar edx, 0x1f
and edx, 0x7fffffff
mov dword [esp + 0x3c], edx
mov eax, edx
xor eax, 0xffffffff
and eax, dword [esp + 0x38]
and edx, 0x40000000
or eax, edx
mov dword [esp + 0x38], eax
mov edx, dword [edi + 0x8164]
fld dword [0x889030]
fadd dword [esp + 0x38]
fmul dword [0x88902c]
fstp dword [edi + 0x8128]
mov dword [esp + 0x78], ecx
push edi
fld qword [esp + 0x94]
fstp dword [esp]
call dword [edx + 0x5c]
fld qword [0x888fe0]
fmul qword [esp + 0x90]
fstp qword [esp]
call sub.MSVCRT.dll_log
fsub qword [0x888fd8]
fdiv dword [0x84dd14]
fmul dword [0x889034]
fadd dword [0x889038]
fstp dword [esp + 0x40]
mov edx, dword [esp + 0x40]
and edx, 0x40000000
add edx, edx
sar edx, 0x1f
and edx, 0x7fffffff
mov eax, edx
mov dword [esp + 0x44], edx
xor eax, 0xffffffff
and edx, 0x40000000
and eax, dword [esp + 0x40]
or eax, edx
mov dword [esp + 0x40], eax
mov edx, dword [edi + 0x8084]
fld dword [0x889030]
fadd dword [esp + 0x40]
fmul dword [0x88902c]
add esp, 0xfffffff8
mov ecx, dword [esp + 0x84]
fstp dword [edi + 0x8208]
fld qword [esp + 0xa0]
fstp dword [esp]
mov byte [esp + 4], 0
call dword [edx + 0x10]
mov edx, dword [edi + 0x8164]
add esp, 0xfffffff8
mov ecx, dword [esp + 0x80]
fld qword [esp + 0xa0]
fstp dword [esp]
mov byte [esp + 4], 0
call dword [edx + 0x10]
fld dword [0x889028]
lea eax, [esp + 0x20]
fmul dword [esp + 0x88]
fstp dword [edi + 0x8248]
fld dword [0x88902c]
fmul dword [esp + 0x80]
fstp dword [edi + 0x824c]
fld qword [0x888fc8]
fstp qword [esp + 0x20]
mov dword [esp + 0x28], 0
mov edx, dword [edi + 0x8084]
push eax
mov ecx, dword [esp + 0x80]
call dword [edx + 0x30]
fld qword [esp + 0x20]
fadd dword [edi + 0x824c]
fld qword [0x888fd0]
fcom st(1)
fnstsw ax
sahf
ja 0x6b5da3
fld qword [0x888fc0]
lea esi, [esi]
lea edi, [edi]
fadd st(2), st(0)
fxch st(2)
fcom st(1)
fnstsw ax
sahf
fxch st(2)
jae 0x6b5118
fstp st(0)
fstp st(0)
fstp qword [esp + 0x20]
mov edx, dword [edi + 0x8164]
lea eax, [esp + 0x20]
push eax
mov ecx, dword [esp + 0x7c]
call dword [edx + 0x2c]
mov eax, dword [ebp + 0x9074]
mov ecx, esi
call dword [eax + 0xc]
mov byte [eax + 0x2c], 1
jmp 0x6b5177
lea esi, [ebp + 0x9074]
mov eax, dword [ebp + 0x9074]
mov ecx, esi
call dword [eax + 8]
movzx eax, al
test eax, eax
je 0x6b5177
mov eax, dword [ebp + 0x9074]
mov ecx, esi
call dword [eax + 0xc]
mov byte [eax + 0x2c], 0
mov al, byte [ebp + 0x8f00]
test al, al
je 0x6b5633
lea esi, [ebp + 0x9094]
mov eax, dword [ebp + 0x9094]
mov ecx, esi
call dword [eax + 8]
movzx eax, al
test eax, eax
jne 0x6b53aa
mov al, byte [esp + 0xd0]
test al, al
je 0x6b51b4
or ebx, 8
jmp 0x6b565a
push 1
mov ecx, esi
push 0x284
call fcn.006f20c4
test eax, eax
jne 0x6b52d5
mov eax, dword [ebp + 0x9094]
mov ecx, esi
call dword [eax + 0xc]
test eax, eax
je 0x6b52d5
xor edx, edx
lea ecx, [eax + 0x30]
mov edi, 2
mov byte [eax + 0x18], dl
mov dword [eax + 0x10], edx
mov dword [eax + 8], edx
mov dword [eax + 0xc], edx
mov dword [eax + 0x14], 0
mov dword [eax], 0x8896a0
mov dword [esp + 0x68], ebx
mov ebx, eax
mov dword [esp + 0x6c], esi
mov dword [esp + 0x70], ebp
mov ebp, ecx
nop
lea esi, [esi]
push 1
mov ecx, ebp
call fcn.006f2054
add ebp, 0x20
dec edi
jne 0x6b5218
mov eax, ebx
mov ebx, dword [esp + 0x68]
mov esi, dword [esp + 0x6c]
mov ebp, dword [esp + 0x70]
xor edx, edx
mov edi, 2
mov dword [eax + 0x1c], edx
mov dword [eax + 0x20], edx
mov dword [eax + 0x70], edx
mov dword [eax + 0x74], edx
mov dword [eax + 0x24], 0x3f800000
mov dword [eax + 0x28], 0x3f800000
mov byte [eax + 0x2c], dl
mov dword [eax], 0x889760
add eax, 0xc4
mov dword [esp + 0x68], ebx
mov dword [esp + 0x6c], esi
mov ebx, eax
mov dword [esp + 0x70], ebp
lea esi, [esi]
mov ecx, ebx
call fcn.00445350
mov dl, 1
mov byte [ebx + 7], dl
mov byte [ebx + 5], dl
mov dword [ebx + 0xc0], 0
mov dword [ebx + 0xb4], 0x3f800000
mov dword [ebx + 0xc4], 0x3f800000
mov byte [ebx + 4], 2
mov dword [ebx + 0xac], 0x3e99999a
mov dword [ebx], 0x879940
mov dword [ebx + 0x20], 0x3d99999a
add ebx, 0xe0
dec edi
jne 0x6b5278
mov ebx, dword [esp + 0x68]
mov esi, dword [esp + 0x6c]
mov ebp, dword [esp + 0x70]
mov eax, dword [ebp + 0x9094]
mov ecx, esi
call dword [eax + 0xc]
mov edi, dword [eax]
mov edx, dword [esp + 0xc4]
mov ecx, eax
push edx
call dword [edi + 0xc]
mov eax, dword [ebp + 0x9094]
mov ecx, esi
call dword [eax + 0xc]
mov dword [esp + 0xa0], eax
lea ecx, [eax + 0x30]
mov edx, dword [eax + 0x30]
mov dword [esp + 0x74], ecx
call dword [edx + 8]
mov dword [esp + 0x7c], eax
movzx edx, al
test edx, edx
jne 0x6b5339
mov edx, dword [esp + 0xa0]
mov eax, dword [edx + 0x30]
mov edi, dword [esp + 0xcc]
lea edx, [edi + edi]
add edx, edx
push 1
push edx
mov ecx, dword [esp + 0x7c]
call dword [eax + 0x1c]
mov eax, dword [esp + 0xa0]
lea ecx, [eax + 0x50]
mov edx, dword [eax + 0x50]
mov dword [esp + 0x78], ecx
call dword [edx + 8]
mov dword [esp + 0x7c], eax
movzx edx, al
test edx, edx
jne 0x6b537b
mov edx, dword [esp + 0xa0]
mov eax, dword [edx + 0x50]
mov edi, dword [esp + 0xcc]
lea edx, [edi + edi]
add edx, edx
push 1
push edx
mov ecx, dword [esp + 0x80]
call dword [eax + 0x1c]
mov eax, dword [esp + 0xa0]
mov edx, dword [eax + 0x30]
mov ecx, dword [esp + 0x74]
call dword [edx + 0xc]
mov edx, dword [esp + 0xa0]
mov ecx, dword [esp + 0x78]
mov dword [edx + 0x70], eax
mov eax, dword [edx + 0x50]
call dword [eax + 0xc]
mov edx, dword [esp + 0xa0]
mov dword [edx + 0x74], eax
mov eax, dword [ebp + 0x9094]
mov ecx, esi
call dword [eax + 0xc]
mov edx, dword [eax]
mov ecx, eax
push dword [ebp + 0x8f04]
call dword [edx + 0x18]
mov eax, dword [ebp + 0x9094]
mov ecx, esi
call dword [eax + 0xc]
mov dl, byte [ebp + 0x8f01]
mov ecx, esi
mov byte [eax + 0x18], dl
mov eax, dword [ebp + 0x9094]
call dword [eax + 0xc]
mov edi, eax
lea ecx, [ebp + 0x8f18]
push 0x41000000
push 0
mov edx, dword [esp + 0xd0]
push edx
push dword [ebp + 0x8f0c]
call fcn.0069d798
fstp qword [esp + 0x90]
mov edx, dword [ebp + 0x8f08]
lea ecx, [edi + 0xc4]
fld dword [ebp + 0x8f10]
fstp dword [esp + 0x88]
fld dword [ebp + 0x8f14]
fstp qword [esp + 0x80]
mov dword [edi + 0xbc], edx
mov edx, dword [edi + 0xc4]
mov dword [esp + 0x78], ecx
push edi
fld qword [esp + 0x94]
fstp dword [esp]
call dword [edx + 0x5c]
fld qword [0x888fe0]
fmul qword [esp + 0x90]
fstp qword [esp]
call sub.MSVCRT.dll_log
lea ecx, [edi + 0x1a4]
fsub qword [0x888fd8]
fdiv dword [0x84dd14]
fmul dword [0x889034]
fadd dword [0x889038]
fstp dword [esp + 0x48]
mov edx, dword [esp + 0x48]
and edx, 0x40000000
add edx, edx
sar edx, 0x1f
and edx, 0x7fffffff
mov dword [esp + 0x4c], edx
mov eax, edx
xor eax, 0xffffffff
and eax, dword [esp + 0x48]
and edx, 0x40000000
or eax, edx
mov dword [esp + 0x48], eax
mov edx, dword [edi + 0x1a4]
fld dword [0x889030]
fadd dword [esp + 0x48]
fmul dword [0x88902c]
fstp dword [edi + 0x168]
mov dword [esp + 0x7c], ecx
push edi
fld qword [esp + 0x94]
fstp dword [esp]
call dword [edx + 0x5c]
fld qword [0x888fe0]
fmul qword [esp + 0x90]
fstp qword [esp]
call sub.MSVCRT.dll_log
fsub qword [0x888fd8]
fdiv dword [0x84dd14]
fmul dword [0x889034]
fadd dword [0x889038]
fstp dword [esp + 0x50]
mov edx, dword [esp + 0x50]
and edx, 0x40000000
add edx, edx
sar edx, 0x1f
and edx, 0x7fffffff
mov eax, edx
mov dword [esp + 0x54], edx
xor eax, 0xffffffff
and edx, 0x40000000
and eax, dword [esp + 0x50]
or eax, edx
mov dword [esp + 0x50], eax
mov edx, dword [edi + 0xc4]
fld dword [0x889030]
fadd dword [esp + 0x50]
fmul dword [0x88902c]
fstp dword [edi + 0x248]
push 0
push dword [edi + 0xbc]
mov ecx, dword [esp + 0x80]
call dword [edx + 0x10]
mov edx, dword [edi + 0x1a4]
push 0
push dword [edi + 0xbc]
mov ecx, dword [esp + 0x84]
call dword [edx + 0x10]
fld qword [0x888fb8]
lea eax, [esp + 8]
fmul qword [esp + 0x80]
fstp dword [edi + 0xb8]
fld dword [0x88902c]
fmul dword [esp + 0x88]
fstp dword [edi + 0xc0]
fld qword [0x888fc8]
fstp qword [esp + 8]
mov dword [esp + 0x10], 0
mov edx, dword [edi + 0xc4]
push eax
mov ecx, dword [esp + 0x7c]
call dword [edx + 0x30]
fld qword [esp + 8]
fadd dword [edi + 0xc0]
fld qword [0x888fd0]
fcom st(1)
fnstsw ax
sahf
ja 0x6b5dae
fld qword [0x888fc0]
lea esi, [esi]
fadd st(2), st(0)
fxch st(2)
fcom st(1)
fnstsw ax
sahf
fxch st(2)
jae 0x6b55f8
fstp st(0)
fstp st(0)
fstp qword [esp + 8]
mov edx, dword [edi + 0x1a4]
lea eax, [esp + 8]
push eax
mov ecx, dword [esp + 0x80]
call dword [edx + 0x2c]
mov eax, dword [ebp + 0x9094]
mov ecx, esi
call dword [eax + 0xc]
mov byte [eax + 0x2c], 1
jmp 0x6b565a
lea esi, [ebp + 0x9094]
mov eax, dword [ebp + 0x9094]
mov ecx, esi
call dword [eax + 8]
movzx eax, al
test eax, eax
je 0x6b565a
mov eax, dword [ebp + 0x9094]
mov ecx, esi
call dword [eax + 0xc]
mov byte [eax + 0x2c], 0
mov al, byte [ebp + 0x8f28]
test al, al
je 0x6b5d6d
lea esi, [ebp + 0x90b4]
mov eax, dword [ebp + 0x90b4]
mov ecx, esi
call dword [eax + 8]
movzx eax, al
test eax, eax
jne 0x6b5846
mov al, byte [esp + 0xd0]
test al, al
je 0x6b56a1
or ebx, 0x10
mov eax, ebx
add esp, 0xb0
pop ebx
pop ebp
pop esi
pop edi
ret 0x10
push 1
mov ecx, esi
push 0xd021c
call fcn.006f20c4
test eax, eax
jne 0x6b5768
mov edx, dword [ebp + 0x90b4]
mov ecx, esi
call dword [edx + 0xc]
test eax, eax
je 0x6b5768
mov dword [eax + 0xd0080], 0x1fff
xor edx, edx
lea ecx, [eax + 0x30]
mov byte [eax + 0x18], dl
mov edi, 2
mov dword [eax + 0x10], edx
mov dword [eax + 8], edx
mov dword [eax + 0xc], edx
mov dword [eax + 0x14], 0
mov dword [eax], 0x8896a0
mov dword [esp + 0x68], ebx
mov dword [esp + 0x70], ebp
mov ebx, eax
mov ebp, ecx
nop
lea esi, [esi]
push 1
mov ecx, ebp
call fcn.006f2054
add ebp, 0x20
dec edi
jne 0x6b5708
mov eax, ebx
mov ebx, dword [esp + 0x68]
mov ebp, dword [esp + 0x70]
xor edx, edx
mov dword [eax + 0x1c], edx
mov dword [eax + 0x20], edx
mov dword [eax + 0x70], edx
mov dword [eax + 0x74], edx
mov dword [eax + 0x24], 0x3f800000
mov dword [eax + 0x28], 0x3f800000
mov byte [eax + 0x2c], dl
mov dword [eax], 0x889780
mov dword [eax + 0xd01a0], edx
mov dword [eax + 0xd01b0], edx
mov dword [eax + 0xd01b4], edx
mov byte [eax + 0xd01a4], dl
mov dword [eax + 0xd019c], 0x86a1c4
mov edx, dword [ebp + 0x90b4]
mov ecx, esi
call dword [edx + 0xc]
mov edi, dword [eax]
mov edx, dword [esp + 0xc4]
mov ecx, eax
push edx
call dword [edi + 0xc]
mov edx, dword [ebp + 0x90b4]
mov ecx, esi
call dword [edx + 0xc]
mov dword [esp + 0xa0], eax
mov edx, eax
lea ecx, [edx + 0x30]
mov edi, dword [edx + 0x30]
mov dword [esp + 0x78], ecx
call dword [edi + 8]
mov dword [esp + 0x7c], eax
mov edx, eax
movzx edi, dl
test edi, edi
jne 0x6b57d3
mov edx, dword [esp + 0xa0]
mov eax, dword [edx + 0x30]
mov edi, dword [esp + 0xcc]
lea edx, [edi + edi]
add edx, edx
push 1
push edx
mov ecx, dword [esp + 0x80]
call dword [eax + 0x1c]
mov edx, dword [esp + 0xa0]
lea ecx, [edx + 0x50]
mov edi, dword [edx + 0x50]
mov dword [esp + 0x7c], ecx
call dword [edi + 8]
mov dword [esp + 0x74], eax
mov edx, eax
movzx edi, dl
test edi, edi
jne 0x6b5817
mov edx, dword [esp + 0xa0]
mov eax, dword [edx + 0x50]
mov edi, dword [esp + 0xcc]
lea edx, [edi + edi]
add edx, edx
push 1
push edx
mov ecx, dword [esp + 0x84]
call dword [eax + 0x1c]
mov edx, dword [esp + 0xa0]
mov edi, dword [edx + 0x30]
mov ecx, dword [esp + 0x78]
call dword [edi + 0xc]
mov edx, dword [esp + 0xa0]
mov edi, dword [edx + 0x50]
mov ecx, dword [esp + 0x7c]
mov dword [edx + 0x70], eax
call dword [edi + 0xc]
mov edx, dword [esp + 0xa0]
mov dword [edx + 0x74], eax
mov edx, dword [ebp + 0x90b4]
mov ecx, esi
call dword [edx + 0xc]
mov edx, dword [eax]
mov ecx, eax
push dword [ebp + 0x8f2c]
call dword [edx + 0x18]
mov edx, dword [ebp + 0x90b4]
mov ecx, esi
call dword [edx + 0xc]
mov dl, byte [ebp + 0x8f29]
mov ecx, esi
mov byte [eax + 0x18], dl
mov edi, dword [ebp + 0x90b4]
call dword [edi + 0xc]
mov edi, eax
fld dword [ebp + 0x8f30]
fld dword [ebp + 0x8f34]
fld dword [ebp + 0x8f38]
fld dword [ebp + 0x8f3c]
fld dword [ebp + 0x8f40]
fxch st(3)
fmul dword [0x889020]
fadd dword [0x889024]
fstp dword [edi + 0xd018c]
mov dword [edi + 0xd0190], 0x3f000000
fld dword [0x889058]
fsubr st(2), st(0)
fxch st(2)
fmul dword [0x889018]
faddp st(2)
fxch st(1)
fstp dword [edi + 0xd0194]
fmul dword [0x889014]
fadd dword [0x88901c]
fstp dword [edi + 0xd0198]
fxch st(1)
fmul dword [edi + 0x14]
fmul dword [0x889050]
fstp qword [esp + 0x58]
mov eax, dword [esp + 0x58]
mov ecx, dword [esp + 0x5c]
mov dword [esp + 0x7c], ecx
shr ecx, 0x14
and ecx, 0x7ff
cmp ecx, 0x3fe
jle 0x6b5937
mov edx, dword [esp + 0x7c]
neg ecx
shld edx, eax, 0xb
or edx, 0x80000000
add ecx, 0x41e
mov eax, dword [esp + 0x7c]
shr edx, cl
test eax, eax
jge 0x6b5939
neg edx
jmp 0x6b5939
xor edx, edx
cmp edx, 0x2000
jl 0x6b5946
mov edx, 0x2000
neg edx
add edx, 0x2000
mov dword [edi + 0xd0148], edx
mov edx, 0xc0000000
fsubr dword [0x889058]
and edx, 0x40000000
add edx, edx
fmul qword [0x888fa8]
sar edx, 0x1f
and edx, 0x7fffffff
fadd qword [0x888fb0]
mov dword [0x85faec], edx
xor edx, 0xffffffff
and edx, 0xc0000000
mov dword [0x85fae8], edx
mov eax, dword [0x85faec]
and eax, 0x40000000
or edx, eax
mov dword [0x85fae8], edx
fld dword [0x889030]
fadd dword [0x85fae8]
fmul dword [0x88902c]
fld st(0)
fsubr qword [0x888fd0]
fmul qword [0x888f98]
fadd qword [0x888fa0]
fstp qword [esp + 0x80]
fxch st(1)
fmul qword [0x888f90]
fcom dword [0x889010]
fnstsw ax
sahf
jae 0x6b59fb
fcom dword [0x88900c]
fnstsw ax
sahf
jbe 0x6b59fb
fstp st(0)
fld dword [0x889058]
jmp 0x6b5a87
fxch st(1)
fstp qword [esp + 0x98]
fld st(0)
fmul st(0)
fld st(1)
fmul st(1)
fld st(2)
fmul st(1)
fld st(3)
fmul st(1)
fld st(4)
fmul st(1)
fld st(5)
fmul st(1)
fld st(6)
fmul st(1)
fstp qword [esp + 0x90]
fxch st(6)
fadd dword [0x889058]
fld dword [0x88901c]
fmulp st(6)
faddp st(5)
fld dword [0x889008]
fmulp st(4)
fxch st(4)
faddp st(3)
fld dword [0x889004]
fmulp st(2)
fxch st(2)
faddp st(1)
fld dword [0x889000]
fmulp st(2)
faddp st(1)
fld dword [0x888ffc]
fmulp st(2)
faddp st(1)
fld dword [0x888ff8]
fmulp st(2)
fld qword [esp + 0x90]
fmul dword [0x888ff4]
faddp st(2)
faddp st(1)
fld qword [esp + 0x98]
fxch st(1)
fadd qword [0x888fc0]
fmul qword [0x888f88]
fmul dword [0x889034]
fadd dword [0x889038]
fstp dword [0x85fae8]
mov eax, dword [0x85fae8]
and eax, 0x40000000
add eax, eax
sar eax, 0x1f
and eax, 0x7fffffff
mov dword [0x85faec], eax
xor eax, 0xffffffff
and eax, dword [0x85fae8]
mov dword [0x85fae8], eax
mov edx, dword [0x85faec]
and edx, 0x40000000
or eax, edx
mov dword [0x85fae8], eax
fld dword [0x85fae8]
fadd dword [0x889030]
fld dword [0x88902c]
fmulp st(1)
fadd dword [0x888998]
fmul dword [0x85faf0]
fmul qword [0x8888f8]
fld st(0)
fmul qword [0x888f80]
fmul qword [0x8888f0]
fld st(0)
fsubr qword [0x888f78]
fcom dword [0x889010]
fnstsw ax
sahf
jae 0x6b5b3b
fcom dword [0x88900c]
fnstsw ax
sahf
jbe 0x6b5b3b
fstp st(0)
fld dword [0x88905c]
jmp 0x6b5b83
fld st(0)
fmul st(0)
fmul st(1)
fst dword [0x85fb0c]
fld st(1)
fmul st(1)
fmul st(2)
fld st(2)
fmul st(1)
fxch st(1)
fst dword [0x85fb10]
fxch st(1)
fmul st(3)
fst dword [0x85fb14]
fld dword [0x85fb00]
fmulp st(3)
fld dword [0x85fb04]
fmulp st(2)
fxch st(2)
faddp st(1)
fld dword [0x85fb08]
fmulp st(2)
faddp st(1)
faddp st(1)
fxch st(1)
fadd qword [0x888f78]
fcom dword [0x889010]
fnstsw ax
sahf
jae 0x6b5bab
fcom dword [0x88900c]
fnstsw ax
sahf
jbe 0x6b5bab
fstp st(0)
fld dword [0x88905c]
jmp 0x6b5bf3
fld st(0)
fmul st(0)
fmul st(1)
fst dword [0x85fb0c]
fld st(1)
fmul st(1)
fmul st(2)
fld st(2)
fmul st(1)
fxch st(1)
fst dword [0x85fb10]
fxch st(1)
fmul st(3)
fst dword [0x85fb14]
fld dword [0x85fb00]
fmulp st(3)
fld dword [0x85fb04]
fmulp st(2)
fxch st(2)
faddp st(1)
fld dword [0x85fb08]
fmulp st(2)
faddp st(1)
faddp st(1)
fdivp st(1)
mov ecx, esi
fld dword [0x888ff0]
fmulp st(2)
fxch st(1)
fstp dword [edi + 0xd01cc]
fld dword [edi + 0xd0208]
fld dword [edi + 0xd01f8]
fld dword [0x888994]
fmul st(4)
fld qword [0x888fd0]
fadd st(1), st(0)
fxch st(1)
fmul dword [edi + 0xd0200]
fstp qword [esp + 0x90]
fld dword [0x888990]
fmulp st(5)
faddp st(4)
fld st(2)
fxch st(4)
fmul dword [edi + 0xd0204]
fxch st(4)
fmul st(0)
fld st(3)
fxch st(5)
fstp qword [esp + 0xa8]
fxch st(1)
fmul st(4), st(0)
fld st(4)
fsubr st(3)
fld st(2)
fxch st(2)
fmul st(3)
fld dword [edi + 0xd01fc]
fmul st(3), st(0)
fxch st(2)
faddp st(3)
fxch st(2)
fstp qword [esp + 0x98]
fld st(0)
fadd st(0)
fld qword [0x888f70]
fxch st(1)
fmul st(6)
fxch st(2)
fsubrp st(7)
fmul st(4)
fmul st(5)
fxch st(3)
fmul st(4), st(0)
fxch st(3)
fadd dword [edi + 0xd01f8]
fsubrp st(1)
faddp st(1)
fst dword [edi + 0xd01e4]
fxch st(4)
faddp st(2)
fld st(2)
fxch st(2)
fst dword [edi + 0xd01e8]
fxch st(2)
fadd st(0)
fld qword [esp + 0x90]
fadd st(1), st(0)
fld qword [esp + 0xa8]
fld st(0)
fadd st(0)
fmul st(6)
fsubp st(3)
fld st(3)
fmul st(2)
faddp st(3)
fxch st(1)
fmulp st(5)
fld st(4)
fsubr st(1)
fsub st(3)
fld qword [0x888fd0]
fadd st(6), st(0)
fxch st(2)
fmulp st(4)
fxch st(5)
fsubrp st(3)
fdivrp st(2)
fxch st(1)
fmul st(4), st(0)
fld qword [esp + 0x98]
fmul st(1)
fxch st(1)
fmul st(3), st(0)
fxch st(5)
fst dword [edi + 0xd01e4]
fxch st(2)
fmul st(5)
fxch st(4)
fmulp st(5)
fxch st(2)
fst dword [edi + 0xd01e8]
fld st(1)
fadd st(3)
fxch st(4)
fst dword [edi + 0xd01ec]
fxch st(1)
fadd st(4), st(0)
fxch st(5)
fst dword [edi + 0xd01f0]
faddp st(1)
fsubr qword [0x888fd0]
fdivrp st(3)
fxch st(2)
fmul qword [esp + 0x80]
fmul st(1), st(0)
fmul st(2), st(0)
fxch st(1)
fstp dword [edi + 0xd01f4]
fmulp st(2)
fstp dword [edi + 0xd01e4]
fstp dword [edi + 0xd01e8]
mov edx, dword [ebp + 0x90b4]
call dword [edx + 0xc]
mov byte [eax + 0x2c], 1
jmp 0x6b5d94
lea esi, [ebp + 0x90b4]
mov edx, dword [ebp + 0x90b4]
mov ecx, esi
call dword [edx + 8]
movzx edx, al
test edx, edx
je 0x6b5d94
mov edx, dword [ebp + 0x90b4]
mov ecx, esi
call dword [edx + 0xc]
mov byte [eax + 0x2c], 0
mov eax, ebx
add esp, 0xb0
pop ebx
pop ebp
pop esi
pop edi
ret 0x10
fstp st(0)
fstp qword [esp + 0x20]
jmp 0x6b512d
fstp st(0)
fstp qword [esp + 8]
jmp 0x6b560d