
FUNCTION 00dc09d0
00dc09d0 mov eax, dword ptr [esp + 4]
00dc09d4 mov dword ptr [esp + 4], eax
00dc09d8 test eax, eax
00dc09da je 0xdc09e2
00dc09dc mov dword ptr [eax], 0
00dc09e2 mov eax, dword ptr [ecx]
00dc09e4 mov eax, dword ptr [eax + 8]
00dc09e7 push esi
00dc09e8 lea esi, [esp + 8]
00dc09ec push esi
00dc09ed call eax
00dc09ef pop esi
00dc09f0 ret 4
00dc09f3 int3 
00dc09f4 int3 
00dc09f5 int3 
00dc09f6 int3 
00dc09f7 int3 
00dc09f8 int3 
00dc09f9 int3 
00dc09fa int3 
00dc09fb int3 
00dc09fc int3 
00dc09fd int3 
00dc09fe int3 
00dc09ff int3 
00dc0a00 mov eax, dword ptr [esp + 4]
00dc0a04 mov dword ptr [esp + 4], eax
00dc0a08 test eax, eax
00dc0a0a je 0xdc0a12
00dc0a0c mov dword ptr [eax], 0
00dc0a12 mov eax, dword ptr [ecx]
00dc0a14 mov eax, dword ptr [eax + 0xc]
00dc0a17 push esi
00dc0a18 lea esi, [esp + 8]
00dc0a1c push esi
00dc0a1d call eax
00dc0a1f pop esi
00dc0a20 ret 4
00dc0a23 int3 
00dc0a24 int3 
00dc0a25 int3 
00dc0a26 int3 
00dc0a27 int3 
00dc0a28 int3 
00dc0a29 int3 
00dc0a2a int3 
00dc0a2b int3 
00dc0a2c int3 
00dc0a2d int3 
00dc0a2e int3 
00dc0a2f int3 
00dc0a30 mov eax, dword ptr [esp + 4]
00dc0a34 mov dword ptr [esp + 4], eax
00dc0a38 test eax, eax
00dc0a3a je 0xdc0a42
00dc0a3c mov dword ptr [eax], 0
00dc0a42 mov eax, dword ptr [ecx]
00dc0a44 mov eax, dword ptr [eax + 0x10]
00dc0a47 push esi
00dc0a48 lea esi, [esp + 8]
00dc0a4c push esi
00dc0a4d call eax
00dc0a4f pop esi
00dc0a50 ret 4
00dc0a53 int3 
00dc0a54 int3 
00dc0a55 int3 
00dc0a56 int3 
00dc0a57 int3 
00dc0a58 int3 
00dc0a59 int3 
00dc0a5a int3 
00dc0a5b int3 
00dc0a5c int3 
00dc0a5d int3 
00dc0a5e int3 
00dc0a5f int3 
00dc0a60 mov eax, dword ptr [esp + 4]
00dc0a64 mov dword ptr [esp + 4], eax
00dc0a68 test eax, eax
00dc0a6a je 0xdc0a72
00dc0a6c mov dword ptr [eax], 0
00dc0a72 mov eax, dword ptr [ecx]
00dc0a74 mov eax, dword ptr [eax + 0x14]
00dc0a77 push esi
00dc0a78 lea esi, [esp + 8]
00dc0a7c push esi
00dc0a7d call eax
00dc0a7f pop esi
00dc0a80 ret 4
00dc0a83 int3 
00dc0a84 int3 
00dc0a85 int3 
00dc0a86 int3 
00dc0a87 int3 
00dc0a88 int3 
00dc0a89 int3 
00dc0a8a int3 
00dc0a8b int3 
00dc0a8c int3 
00dc0a8d int3 
00dc0a8e int3 
00dc0a8f int3 
00dc0a90 push esi
00dc0a91 mov esi, ecx
00dc0a93 mov eax, dword ptr [esi + 0xc]
00dc0a96 mov dword ptr [esi], 0xfd19cc
00dc0a9c test eax, eax
00dc0a9e jle 0xdc0acf
00dc0aa0 mov eax, dword ptr [esi + 0x14]
00dc0aa3 mov eax, dword ptr [eax + 0x78]
00dc0aa6 sub eax, 0
00dc0aa9 je 0xdc0ac1
00dc0aab call 0xdc05f0
00dc0ab0 mov edx, dword ptr [esi]
00dc0ab2 mov eax, dword ptr [edx + 8]
00dc0ab5 mov ecx, esi
00dc0ab7 call eax
00dc0ab9 mov ecx, esi
00dc0abb pop esi
00dc0abc jmp 0xdbbe80
00dc0ac1 call 0xdc0470
00dc0ac6 mov edx, dword ptr [esi]
00dc0ac8 mov eax, dword ptr [edx + 8]
00dc0acb mov ecx, esi
00dc0acd call eax
00dc0acf mov ecx, esi
00dc0ad1 pop esi
00dc0ad2 jmp 0xdbbe80
00dc0ad7 int3 
00dc0ad8 int3 
00dc0ad9 int3 
00dc0ada int3 
00dc0adb int3 
00dc0adc int3 
00dc0add int3 
00dc0ade int3 
00dc0adf int3 
00dc0ae0 mov eax, 0x1018
00dc0ae5 call 0xe230a0
00dc0aea push esi
00dc0aeb mov esi, ecx
00dc0aed fld dword ptr [esi + 0x60]
00dc0af0 push edi
00dc0af1 fstp dword ptr [esi + 0x10]
00dc0af4 mov edi, edx
00dc0af6 fld dword ptr [esi + 0x68]
00dc0af9 fstp dword ptr [esi + 0x14]
00dc0afc call 0x660050
00dc0b01 mov edx, edi
00dc0b03 mov ecx, eax
00dc0b05 call 0x65fec0
00dc0b0a mov edi, eax
00dc0b0c xor eax, eax
00dc0b0e cmp edi, eax
00dc0b10 je 0xdc0b61
00dc0b12 cmp word ptr [edi], ax
00dc0b15 je 0xdc0b61
00dc0b17 push 0x800
00dc0b1c lea edx, [esp + 0x24]
00dc0b20 lea ecx, [esp + 0xc]
00dc0b24 mov dword ptr [esp + 0x10], eax
00dc0b28 mov dword ptr [esp + 0x14], eax
00dc0b2c mov dword ptr [esp + 0x18], eax
00dc0b30 mov dword ptr [esp + 0x1c], eax
00dc0b34 mov dword ptr [esp + 0xc], 0xfd19cc
00dc0b3c mov dword ptr [esp + 0x20], esi
00dc0b40 call 0xdbbbf0
00dc0b45 mov edx, dword ptr [esp + 0x1024]
00dc0b4c push edx
00dc0b4d mov edx, edi
00dc0b4f lea ecx, [esp + 0xc]
00dc0b53 call 0xdbbe30
00dc0b58 lea ecx, [esp + 8]
00dc0b5c call 0xdc0a90
00dc0b61 pop edi
00dc0b62 pop esi
00dc0b63 add esp, 0x1018
00dc0b69 ret 4
00dc0b6c int3 
00dc0b6d int3 
00dc0b6e int3 
00dc0b6f int3 
00dc0b70 mov eax, 0x1018
00dc0b75 call 0xe230a0
00dc0b7a push ebx
00dc0b7b push esi
00dc0b7c mov esi, ecx
00dc0b7e fld dword ptr [esi + 0x60]
00dc0b81 push edi
00dc0b82 fstp dword ptr [esi + 0x10]
00dc0b85 mov edi, edx
00dc0b87 fld dword ptr [esi + 0x68]
00dc0b8a mov dword ptr [esi + 0xa4], 1
00dc0b94 fstp dword ptr [esi + 0x14]
00dc0b97 call 0x660050
00dc0b9c mov edx, edi
00dc0b9e mov ecx, eax
00dc0ba0 call 0x65fec0
00dc0ba5 mov edi, eax
00dc0ba7 xor ebx, ebx
00dc0ba9 cmp edi, ebx
00dc0bab je 0xdc0c37
00dc0bb1 push 0x800
00dc0bb6 lea edx, [esp + 0x28]
00dc0bba lea ecx, [esp + 0x10]
00dc0bbe mov dword ptr [esp + 0x14], ebx
00dc0bc2 mov dword ptr [esp + 0x18], ebx
00dc0bc6 mov dword ptr [esp + 0x1c], ebx
00dc0bca mov dword ptr [esp + 0x20], ebx
00dc0bce mov dword ptr [esp + 0x10], 0xfd19cc
00dc0bd6 mov dword ptr [esp + 0x24], esi
00dc0bda call 0xdbbbf0
00dc0bdf mov ecx, dword ptr [esp + 0x1028]
00dc0be6 push ecx
00dc0be7 mov edx, edi
00dc0be9 lea ecx, [esp + 0x10]
00dc0bed call 0xdbbe30
00dc0bf2 mov dword ptr [esp + 0xc], 0xfd19cc
00dc0bfa cmp dword ptr [esp + 0x18], ebx
00dc0bfe jle 0xdc0c28
00dc0c00 mov edx, dword ptr [esp + 0x20]
00dc0c04 mov eax, dword ptr [edx + 0x78]
00dc0c07 sub eax, ebx
00dc0c09 lea ecx, [esp + 0xc]
00dc0c0d je 0xdc0c16
00dc0c0f call 0xdc05f0
00dc0c14 jmp 0xdc0c1b
00dc0c16 call 0xdc0470
00dc0c1b mov eax, dword ptr [esp + 0xc]
00dc0c1f mov edx, dword ptr [eax + 8]
00dc0c22 lea ecx, [esp + 0xc]
00dc0c26 call edx
00dc0c28 lea ecx, [esp + 0xc]
00dc0c2c call 0xdbbe80
00dc0c31 mov dword ptr [esi + 0xa4], ebx
00dc0c37 pop edi
00dc0c38 pop esi
00dc0c39 pop ebx
00dc0c3a add esp, 0x1018
00dc0c40 ret 4
00dc0c43 int3 
00dc0c44 int3 
00dc0c45 int3 
00dc0c46 int3 
00dc0c47 int3 
00dc0c48 int3 
00dc0c49 int3 
00dc0c4a int3 
00dc0c4b int3 
00dc0c4c int3 
00dc0c4d int3 
00dc0c4e int3 
00dc0c4f int3 
00dc0c50 mov eax, 0x1018
00dc0c55 call 0xe230a0
00dc0c5a push ebx
00dc0c5b push esi
00dc0c5c mov esi, ecx
00dc0c5e fld dword ptr [esi + 0x60]
00dc0c61 push edi
00dc0c62 fstp dword ptr [esi + 0x10]
00dc0c65 xor ebx, ebx
00dc0c67 fld dword ptr [esi + 0x68]
00dc0c6a mov edi, edx
00dc0c6c push 0x800
00dc0c71 fstp dword ptr [esi + 0x14]
00dc0c74 lea edx, [esp + 0x28]
00dc0c78 lea ecx, [esp + 0x10]
00dc0c7c mov dword ptr [esi + 0xa4], 1
00dc0c86 mov dword ptr [esp + 0x14], ebx
00dc0c8a mov dword ptr [esp + 0x18], ebx
00dc0c8e mov dword ptr [esp + 0x1c], ebx
00dc0c92 mov dword ptr [esp + 0x20], ebx
00dc0c96 mov dword ptr [esp + 0x10], 0xfd19cc
00dc0c9e mov dword ptr [esp + 0x24], esi
00dc0ca2 call 0xdbbbf0
00dc0ca7 mov ecx, dword ptr [esp + 0x1028]
00dc0cae push ecx
00dc0caf mov edx, edi
00dc0cb1 lea ecx, [esp + 0x10]
00dc0cb5 call 0xdbbe30
00dc0cba mov dword ptr [esp + 0xc], 0xfd19cc
00dc0cc2 cmp dword ptr [esp + 0x18], ebx
00dc0cc6 jle 0xdc0cf0
00dc0cc8 mov edx, dword ptr [esp + 0x20]
00dc0ccc mov eax, dword ptr [edx + 0x78]
00dc0ccf sub eax, ebx
00dc0cd1 lea ecx, [esp + 0xc]
00dc0cd5 je 0xdc0cde
00dc0cd7 call 0xdc05f0
00dc0cdc jmp 0xdc0ce3
00dc0cde call 0xdc0470
00dc0ce3 mov eax, dword ptr [esp + 0xc]
00dc0ce7 mov edx, dword ptr [eax + 8]
00dc0cea lea ecx, [esp + 0xc]
00dc0cee call edx
00dc0cf0 lea ecx, [esp + 0xc]
00dc0cf4 call 0xdbbe80
00dc0cf9 pop edi
00dc0cfa mov dword ptr [esi + 0xa4], ebx
00dc0d00 pop esi
00dc0d01 pop ebx
00dc0d02 add esp, 0x1018
00dc0d08 ret 4
00dc0d0b int3 
00dc0d0c int3 
00dc0d0d int3 
00dc0d0e int3 
00dc0d0f int3 
00dc0d10 mov eax, 0x1018
00dc0d15 call 0xe230a0
00dc0d1a fld dword ptr [ecx + 0x60]
00dc0d1d fstp dword ptr [ecx + 0x10]
00dc0d20 push ebx
00dc0d21 fld dword ptr [ecx + 0x68]
00dc0d24 push esi
00dc0d25 xor ebx, ebx
00dc0d27 fstp dword ptr [ecx + 0x14]
00dc0d2a mov esi, edx
00dc0d2c mov dword ptr [esp + 0x1c], ecx
00dc0d30 push 0x800
00dc0d35 lea edx, [esp + 0x24]
00dc0d39 lea ecx, [esp + 0xc]
00dc0d3d mov dword ptr [esp + 0x10], ebx
00dc0d41 mov dword ptr [esp + 0x14], ebx
00dc0d45 mov dword ptr [esp + 0x18], ebx
00dc0d49 mov dword ptr [esp + 0x1c], ebx
00dc0d4d mov dword ptr [esp + 0xc], 0xfd19cc
00dc0d55 call 0xdbbbf0
00dc0d5a mov ecx, dword ptr [esp + 0x1024]
00dc0d61 push ecx
00dc0d62 mov edx, esi
00dc0d64 lea ecx, [esp + 0xc]
00dc0d68 call 0xdbbe30
00dc0d6d mov dword ptr [esp + 8], 0xfd19cc
00dc0d75 cmp dword ptr [esp + 0x14], ebx
00dc0d79 jle 0xdc0da3
00dc0d7b mov edx, dword ptr [esp + 0x1c]
00dc0d7f mov eax, dword ptr [edx + 0x78]
00dc0d82 sub eax, ebx
00dc0d84 lea ecx, [esp + 8]
00dc0d88 je 0xdc0d91
00dc0d8a call 0xdc05f0
00dc0d8f jmp 0xdc0d96
00dc0d91 call 0xdc0470
00dc0d96 mov eax, dword ptr [esp + 8]
00dc0d9a mov edx, dword ptr [eax + 8]
00dc0d9d lea ecx, [esp + 8]
00dc0da1 call edx
00dc0da3 lea ecx, [esp + 8]
00dc0da7 call 0xdbbe80
00dc0dac pop esi
00dc0dad pop ebx
00dc0dae add esp, 0x1018
00dc0db4 ret 4
00dc0db7 int3 
00dc0db8 int3 
00dc0db9 int3 
00dc0dba int3 
00dc0dbb int3 
00dc0dbc int3 
00dc0dbd int3 
00dc0dbe int3 
00dc0dbf int3 
00dc0dc0 push esi
00dc0dc1 mov esi, ecx
00dc0dc3 mov eax, dword ptr [esi + 0xc]
00dc0dc6 mov dword ptr [esi], 0xfd19cc
00dc0dcc test eax, eax
00dc0dce jle 0xdc0df0

FUNCTION 006601c0
006601c0 mov eax, dword ptr [esp + 4]
006601c4 push esi
006601c5 push edi
006601c6 mov edi, dword ptr [edx]
006601c8 mov esi, ecx
006601ca mov dword ptr [esp + 0xc], eax
006601ce test eax, eax
006601d0 je 0x6601ee
006601d2 lea ecx, [esp + 0xc]
006601d6 call 0x65ffb0
006601db test eax, eax
006601dd je 0x6601ee
006601df mov ecx, dword ptr [esp + 0xc]
006601e3 push ecx
006601e4 push eax
006601e5 mov edx, esi
006601e7 mov ecx, edi
006601e9 call 0x660010
006601ee pop edi
006601ef pop esi
006601f0 ret 4
006601f3 retf 
006601f4 int3 
006601f5 int3 
006601f6 int3 
006601f7 int3 
006601f8 int3 
006601f9 int3 
006601fa int3 
006601fb int3 
006601fc int3 
006601fd int3 
006601fe int3 
006601ff int3 
00660200 cmp dword ptr [ecx + 0xc], ecx
00660203 je 0x660227
00660205 push esi
00660206 mov eax, dword ptr [ecx + 0xc]
00660209 mov edx, dword ptr [eax + 8]
0066020c mov esi, dword ptr [eax + 0xc]
0066020f mov dword ptr [edx + 0xc], esi
00660212 mov edx, dword ptr [eax + 0xc]
00660215 mov esi, dword ptr [eax + 8]
00660218 mov dword ptr [edx + 8], esi
0066021b mov dword ptr [eax + 0xc], eax
0066021e mov dword ptr [eax + 8], eax
00660221 cmp dword ptr [ecx + 0xc], ecx
00660224 jne 0x660206
00660226 pop esi
00660227 mov eax, dword ptr [ecx + 8]
0066022a mov edx, dword ptr [ecx + 0xc]
0066022d mov dword ptr [ecx], 0xedb338
00660233 mov dword ptr [eax + 0xc], edx
00660236 mov eax, dword ptr [ecx + 0xc]
00660239 mov edx, dword ptr [ecx + 8]
0066023c mov dword ptr [eax + 8], edx
0066023f mov dword ptr [ecx + 0xc], ecx
00660242 mov dword ptr [ecx + 8], ecx
00660245 ret 
00660246 pop edx
00660247 int3 
00660248 int3 
00660249 int3 
0066024a int3 
0066024b int3 
0066024c int3 
0066024d int3 
0066024e int3 
0066024f int3 
00660250 push ebx
00660251 push ebp
00660252 mov ebp, dword ptr [ecx + 0x2c]
00660255 push esi
00660256 push edi
00660257 mov edi, dword ptr [esp + 0x14]
0066025b mov ebx, edx
0066025d lea esi, [edi + ebp - 1]
00660261 xor edx, edx
00660263 mov eax, esi
00660265 div edi
00660267 sub esi, edx
00660269 mov edx, dword ptr [ecx + 0x30]
0066026c mov eax, esi
0066026e mov edi, eax
00660270 sub edi, ebp
00660272 sub edx, edi
00660274 cmp edx, ebx
00660276 jl 0x660289
00660278 add edi, ebx
0066027a sub edx, ebx
0066027c add dword ptr [ecx + 0x2c], edi
0066027f pop edi
00660280 pop esi
00660281 pop ebp
00660282 mov dword ptr [ecx + 0x30], edx
00660285 pop ebx
00660286 ret 0x10
00660289 pop edi
0066028a pop esi
0066028b pop ebp
0066028c xor eax, eax
0066028e pop ebx
0066028f ret 0x10
00660292 cli 
00660293 int3 
00660294 int3 
00660295 int3 
00660296 int3 
00660297 int3 
00660298 int3 
00660299 int3 
0066029a int3 
0066029b int3 
0066029c int3 
0066029d int3 
0066029e int3 
0066029f int3 
006602a0 push ebx
006602a1 push esi
006602a2 mov esi, ecx
006602a4 xor ebx, ebx
006602a6 push edi
006602a7 lea ecx, [esi + 0x90]
006602ad mov dword ptr [esi + 0xc], ebx
006602b0 mov dword ptr [esi + 4], esi
006602b3 mov dword ptr [esi + 8], esi
006602b6 mov dword ptr [esi], 0xf1ddfc
006602bc call 0xdbcff0
006602c1 mov dword ptr [esi + 0x90], 0xec9b84
006602cb mov dword ptr [esi + 0xc8], ebx
006602d1 or eax, 0xffffffff
006602d4 mov dword ptr [esi + 0xcc], eax
006602da mov dword ptr [esi + 0xd0], ebx
006602e0 mov dword ptr [esi + 0xd4], ebx
006602e6 mov dword ptr [esi + 0xd8], ebx
006602ec push eax
006602ed mov edx, esi
006602ef mov ecx, 0x20e40f0
006602f4 mov dword ptr [esi + 0x2f8], ebx
006602fa mov dword ptr [esi + 0x2fc], eax
00660300 call 0xd9c1a0
00660305 pop edi
00660306 mov eax, esi
00660308 pop esi
00660309 pop ebx
0066030a ret 
0066030b push eax
0066030c int3 
0066030d int3 
0066030e int3 
0066030f int3 
00660310 push esi
00660311 mov esi, ecx
00660313 mov dword ptr [esi], 0xf1ddfc
00660319 mov eax, dword ptr [esi + 0x94]
0066031f mov ecx, dword ptr [esi + 0x98]
00660325 push edi
00660326 lea edi, [esi + 0x90]
0066032c mov dword ptr [eax + 8], ecx
0066032f mov edx, dword ptr [edi + 8]
00660332 mov eax, dword ptr [edi + 4]
00660335 mov dword ptr [edx + 4], eax
00660338 lea ecx, [esi + 0x2dc]
0066033e mov dword ptr [edi + 8], edi
00660341 mov dword ptr [edi + 4], edi
00660344 call 0xda1c60
00660349 lea ecx, [edi + 0x1c]
0066034c call 0xda1c60
00660351 mov ecx, edi
00660353 call 0xdbc140
00660358 mov ecx, dword ptr [esi + 4]
0066035b mov edx, dword ptr [esi + 8]
0066035e mov dword ptr [esi], 0xee3efc
00660364 mov dword ptr [ecx + 8], edx
00660367 mov eax, dword ptr [esi + 8]
0066036a mov ecx, dword ptr [esi + 4]
0066036d mov dword ptr [eax + 4], ecx
00660370 pop edi
00660371 mov dword ptr [esi + 8], esi
00660374 mov dword ptr [esi + 4], esi
00660377 pop esi
00660378 ret 
00660379 dec edi
0066037a int3 
0066037b int3 
0066037c int3 
0066037d int3 
0066037e int3 
0066037f int3 
00660380 sub esp, 0x14
00660383 push esi
00660384 mov esi, ecx
00660386 lea ecx, [esi + 0x2dc]
0066038c call 0xda1c40
00660391 lea eax, [esi + 0x10]
00660394 add esi, 0x90
0066039a mov dword ptr [esp + 0x10], eax
0066039e mov eax, dword ptr [esi]
006603a0 mov eax, dword ptr [eax]
006603a2 lea edx, [esp + 4]
006603a6 mov ecx, esi
006603a8 mov dword ptr [esp + 4], 0x3f96f93
006603b0 mov dword ptr [esp + 8], 0xb96ef939
006603b8 mov dword ptr [esp + 0xc], 0
006603c0 mov dword ptr [esp + 0x14], 0x80
006603c8 call eax
006603ca mov ecx, dword ptr [0x1458a94]
006603d0 mov dword ptr [esi + 8], 0x1458a90
006603d7 mov dword ptr [esi + 4], ecx
006603da mov edx, ecx
006603dc mov dword ptr [edx + 8], esi
006603df mov eax, dword ptr [esi + 8]
006603e2 mov dword ptr [eax + 4], esi
006603e5 pop esi
006603e6 add esp, 0x14
006603e9 ret 

FUNCTION 00686170
00686170 movaps xmm0, xmmword ptr [0xf1f3d0]
00686177 movaps xmmword ptr [ecx + 0x10], xmm0
0068617b movss xmm0, dword ptr [0xec6e14]
00686183 movss dword ptr [ecx + 0x5c], xmm0
00686188 movss dword ptr [ecx + 0x20], xmm0
0068618d movss dword ptr [ecx + 0x34], xmm0
00686192 movss dword ptr [ecx + 0x48], xmm0
00686197 xorps xmm0, xmm0
0068619a movss dword ptr [ecx + 0x2c], xmm0
0068619f movss dword ptr [ecx + 0x3c], xmm0
006861a4 movss dword ptr [ecx + 0x4c], xmm0
006861a9 movss dword ptr [ecx + 0x24], xmm0
006861ae movss dword ptr [ecx + 0x28], xmm0
006861b3 movss dword ptr [ecx + 0x30], xmm0
006861b8 movss dword ptr [ecx + 0x38], xmm0
006861bd movss dword ptr [ecx + 0x40], xmm0
006861c2 movss dword ptr [ecx + 0x44], xmm0
006861c7 movss dword ptr [ecx + 0x50], xmm0
006861cc movss dword ptr [ecx + 0x54], xmm0
006861d1 movss dword ptr [ecx + 0x58], xmm0
006861d6 and dword ptr [ecx + 0x98], 0xfffffff0
006861dd xor eax, eax
006861df movss dword ptr [ecx + 0x60], xmm0
006861e4 movss dword ptr [ecx + 0x64], xmm0
006861e9 movss dword ptr [ecx + 0x68], xmm0
006861ee movss dword ptr [ecx + 0x6c], xmm0
006861f3 movss dword ptr [ecx + 0x7c], xmm0
006861f8 movaps xmm0, xmmword ptr [0xf34a60]
006861ff mov dword ptr [ecx + 0x70], 0xffffffff
00686206 mov dword ptr [ecx + 0x74], eax
00686209 mov dword ptr [ecx + 0x78], eax
0068620c mov dword ptr [ecx + 0x94], eax
00686212 movaps xmmword ptr [ecx + 0x80], xmm0
00686219 mov dword ptr [ecx + 0x90], 0xff000000
00686223 mov dword ptr [ecx + 0x9c], eax
00686229 mov dword ptr [ecx + 0xa4], eax
0068622f mov dword ptr [ecx + 0xa8], eax
00686235 mov dword ptr [ecx + 0xac], eax
0068623b mov dword ptr [ecx + 0xb0], eax
00686241 mov dword ptr [ecx + 0xc0], eax
00686247 mov dword ptr [ecx + 0xc4], eax
0068624d ret 
0068624e or ah, cl
00686250 shr eax, 0x18
00686253 mov edx, ecx
00686255 shr edx, 0x10
00686258 movzx edx, dl
0068625b shl eax, 8
0068625e or eax, edx
00686260 mov edx, ecx
00686262 shr edx, 8
00686265 shl eax, 8
00686268 movzx edx, dl
0068626b or eax, edx
0068626d movzx ecx, cl
00686270 shl eax, 8
00686273 or eax, ecx
00686275 ret 
00686276 sbb cl, ah
00686278 int3 
00686279 int3 
0068627a int3 
0068627b int3 
0068627c int3 
0068627d int3 
0068627e int3 
0068627f int3 
00686280 sub esp, 8
00686283 push ebx
00686284 push esi
00686285 mov ebx, ecx
00686287 push edi
00686288 mov edi, dword ptr [esp + 0x18]
0068628c lea ecx, [esp + 0x18]
00686290 mov esi, edx
00686292 call 0x65ffb0
00686297 cmp eax, 0xfea352ed
0068629c jne 0x6862ea
0068629e mov edi, dword ptr [esp + 0x18]
006862a2 push ebp
006862a3 xor ebp, ebp
006862a5 cmp esi, ebp
006862a7 je 0x6862e9
006862a9 mov ecx, esi
006862ab call 0xd92f00
006862b0 cmp eax, 1
006862b3 jle 0x6862e9
006862b5 movzx eax, word ptr [esi + eax*2 - 2]
006862ba cmp eax, 0x73
006862bd je 0x6862d0
006862bf cmp eax, 0x53
006862c2 je 0x6862d0
006862c4 lea eax, [esp + 0x10]
006862c8 push eax
006862c9 mov edx, 0xa569a969
006862ce jmp 0x6862da
006862d0 lea ecx, [esp + 0x10]
006862d4 push ecx
006862d5 mov edx, 0x7013546e
006862da mov ecx, ebx
006862dc mov dword ptr [esp + 0x18], ebp
006862e0 mov dword ptr [esp + 0x14], ebp
006862e4 call 0x660060
006862e9 pop ebp
006862ea mov eax, edi
006862ec pop edi
006862ed pop esi
006862ee pop ebx
006862ef add esp, 8
006862f2 ret 4
006862f5 sub al, 0xcc
006862f7 int3 
006862f8 int3 
006862f9 int3 
006862fa int3 
006862fb int3 
006862fc int3 
006862fd int3 
006862fe int3 
006862ff int3 
00686300 push ebp
00686301 push esi
00686302 mov ebp, edx
00686304 mov esi, ecx
00686306 call 0x68d8c0
0068630b test eax, eax
0068630d je 0x68634a
0068630f movss xmm0, dword ptr [esi + 0x6c]
00686314 sub esp, 0x10
00686317 movss dword ptr [esp + 0xc], xmm0
0068631d movss xmm0, dword ptr [esi + 0x64]
00686322 movss dword ptr [esp + 8], xmm0
00686328 movss xmm0, dword ptr [esi + 0x68]
0068632d movss dword ptr [esp + 4], xmm0
00686333 movss xmm0, dword ptr [esi + 0x60]
00686338 lea ecx, [esi + 0x20]
0068633b mov edx, 0xff000000
00686340 movss dword ptr [esp], xmm0
00686345 call 0x68d8d0
0068634a cmp dword ptr [esi + 0x9c], 0
00686351 je 0x6863a7
00686353 mov eax, dword ptr [esi + 0x9c]
00686359 mov ecx, dword ptr [eax + 0x48]
0068635c test byte ptr [esi + 0xac], 0x10
00686363 push ebx
00686364 mov ebx, dword ptr [eax + 0x4c]
00686367 mov eax, 0
0068636c setne al
0068636f push edi
00686370 lea edi, [eax*4 + 4]
00686377 test ecx, ecx
00686379 je 0x686386
0068637b push edi
0068637c mov edx, 9
00686381 call 0xdce730
00686386 test ebx, ebx
00686388 je 0x686397
0068638a push edi
0068638b mov edx, 9
00686390 mov ecx, ebx
00686392 call 0xdce730
00686397 mov ecx, dword ptr [esp + 0x14]
0068639b push ecx
0068639c mov edx, ebp
0068639e mov ecx, esi
006863a0 call 0xdc0ae0
006863a5 pop edi
006863a6 pop ebx
006863a7 pop esi
006863a8 pop ebp
006863a9 ret 4
006863ac int3 
006863ad int3 
006863ae int3 
006863af int3 
006863b0 jmp 0xdc0c50
006863b5 int3 
006863b6 int3 
006863b7 int3 
006863b8 int3 
006863b9 int3 
006863ba int3 
006863bb int3 
006863bc int3 
006863bd int3 
006863be int3 
006863bf int3 

FUNCTION 0069e170
0069e170 sub esp, 8
0069e173 push esi
0069e174 mov esi, ecx
0069e176 mov eax, dword ptr [esi]
0069e178 mov eax, dword ptr [eax + 0xc]
0069e17b lea ecx, [esp + 4]
0069e17f push ecx
0069e180 mov ecx, esi
0069e182 mov dword ptr [esp + 0xc], 0x82f6983b
0069e18a mov dword ptr [esp + 8], 0
0069e192 call eax
0069e194 test eax, eax
0069e196 jne 0x69e19f
0069e198 pop esi
0069e199 add esp, 8
0069e19c ret 4
0069e19f mov edx, esi
0069e1a1 lea ecx, [esp + 4]
0069e1a5 call 0x6a57a0
0069e1aa mov ecx, dword ptr [esp + 0x10]
0069e1ae mov dword ptr [ecx], eax
0069e1b0 mov eax, 1
0069e1b5 pop esi
0069e1b6 add esp, 8
0069e1b9 ret 4
0069e1bc int3 
0069e1bd int3 
0069e1be int3 
0069e1bf int3 
0069e1c0 sub esp, 8
0069e1c3 push ebx
0069e1c4 mov ebx, dword ptr [esp + 0x10]
0069e1c8 push ebp
0069e1c9 push esi
0069e1ca push edi
0069e1cb mov edi, ecx
0069e1cd mov ecx, ebx
0069e1cf mov esi, edx
0069e1d1 call 0x69e050
0069e1d6 mov ebp, dword ptr [edi]
0069e1d8 lea ecx, [esp + 0x10]
0069e1dc push ecx
0069e1dd mov edx, eax

FUNCTION 0069e430
0069e430 push ebx
0069e431 push ebp
0069e432 push esi
0069e433 mov esi, dword ptr [ecx + 0x60]
0069e436 push edi
0069e437 test esi, esi
0069e439 jle 0x69e475
0069e43b test edx, edx
0069e43d jne 0x69e475
0069e43f mov ebx, dword ptr [esp + 0x14]
0069e443 test ebx, ebx
0069e445 jne 0x69e45d
0069e447 mov eax, dword ptr [esp + 0x18]
0069e44b test eax, eax
0069e44d je 0x69e451
0069e44f mov dword ptr [eax], ecx
0069e451 mov eax, dword ptr [ecx + 0x68]
0069e454 mov eax, dword ptr [eax]
0069e456 pop edi
0069e457 pop esi
0069e458 pop ebp
0069e459 pop ebx
0069e45a ret 8
0069e45d xor eax, eax
0069e45f test esi, esi
0069e461 jle 0x69e475
0069e463 mov edi, dword ptr [ecx + 0x68]
0069e466 mov ebp, dword ptr [edi]
0069e468 cmp dword ptr [ebp + 4], ebx
0069e46b je 0x69e493
0069e46d inc eax
0069e46e add edi, 4
0069e471 cmp eax, esi
0069e473 jl 0x69e466
0069e475 mov ebp, dword ptr [ecx + 0x68]
0069e478 xor ebx, ebx
0069e47a test esi, esi
0069e47c jle 0x69e4b3
0069e47e mov edi, edi
0069e480 lea eax, [esi + ebx]
0069e483 sar eax, 1
0069e485 mov edi, dword ptr [ebp + eax*4]
0069e489 mov edi, dword ptr [edi]
0069e48b cmp edi, edx
0069e48d jbe 0x69e4aa
0069e48f mov esi, eax
0069e491 jmp 0x69e4af
0069e493 mov edx, dword ptr [esp + 0x18]
0069e497 test edx, edx
0069e499 je 0x69e49d
0069e49b mov dword ptr [edx], ecx
0069e49d mov ecx, dword ptr [ecx + 0x68]
0069e4a0 mov eax, dword ptr [ecx + eax*4]
0069e4a3 pop edi
0069e4a4 pop esi
0069e4a5 pop ebp
0069e4a6 pop ebx
0069e4a7 ret 8
0069e4aa jae 0x69e4b8
0069e4ac lea ebx, [eax + 1]

FUNCTION 0069d740
0069d740 push ecx
0069d741 push esi
0069d742 mov esi, edx
0069d744 test byte ptr [esi + 0x1a], 1
0069d748 push edi
0069d749 mov edi, ecx
0069d74b je 0x69d75a
0069d74d cmp dword ptr [edi + 0x700], 0
0069d754 jne 0x69d868
0069d75a mov ecx, dword ptr [esi + 0xc]
0069d75d lea eax, [esp + 8]
0069d761 push eax
0069d762 mov edx, 0xb50dd1c5
0069d767 mov dword ptr [esp + 0xc], 0
0069d76f call 0x69e120
0069d774 cmp dword ptr [esp + 8], 0
0069d779 je 0x69d868
0069d77f test byte ptr [esi + 0x19], 1
0069d783 je 0x69d792
0069d785 push esi
0069d786 mov edx, 0x5805af13
0069d78b mov ecx, edi
0069d78d call 0x698ef0
0069d792 mov eax, dword ptr [esi + 8]
0069d795 cmp eax, 0x808f1670
0069d79a ja 0x69d812
0069d79c je 0x69d803
0069d79e cmp eax, 0x449d3762
0069d7a3 ja 0x69d7ec
0069d7a5 je 0x69d7dc
0069d7a7 cmp eax, 0x25a349d8
0069d7ac je 0x69d7cc
0069d7ae cmp eax, 0x32b18aa8
0069d7b3 jne 0x69d855
0069d7b9 mov ecx, dword ptr [esp + 0x10]
0069d7bd push ecx
0069d7be mov edx, esi
0069d7c0 mov ecx, edi
0069d7c2 call 0x69b510
0069d7c7 jmp 0x69d855
0069d7cc mov edx, dword ptr [esp + 0x10]
0069d7d0 push edx
0069d7d1 mov edx, esi
0069d7d3 mov ecx, edi
0069d7d5 call 0x69a1f0
0069d7da jmp 0x69d855
0069d7dc mov eax, dword ptr [esp + 0x10]
0069d7e0 push eax
0069d7e1 mov edx, esi
0069d7e3 mov ecx, edi
0069d7e5 call 0x69a280
0069d7ea jmp 0x69d855
0069d7ec cmp eax, 0x7bb2e017
0069d7f1 jne 0x69d855
0069d7f3 mov ecx, dword ptr [esp + 0x10]
0069d7f7 push ecx
0069d7f8 mov edx, esi
0069d7fa mov ecx, edi
0069d7fc call 0x69c840
0069d801 jmp 0x69d855
0069d803 push esi
0069d804 mov edx, 0x93f09c5c
0069d809 mov ecx, edi
0069d80b call 0x698ef0
0069d810 jmp 0x69d855
0069d812 cmp eax, 0x9bb908f9
0069d817 je 0x69d847
0069d819 cmp eax, 0xac016bc1
0069d81e je 0x69d837
0069d820 cmp eax, 0xc576a63f
0069d825 jne 0x69d855
0069d827 mov edx, dword ptr [esp + 0x10]
0069d82b push edx
0069d82c mov edx, esi
0069d82e mov ecx, edi
0069d830 call 0x69bee0
0069d835 jmp 0x69d855
0069d837 mov eax, dword ptr [esp + 0x10]
0069d83b push eax
0069d83c mov edx, esi
0069d83e mov ecx, edi
0069d840 call 0x69b360
0069d845 jmp 0x69d855
0069d847 mov ecx, dword ptr [esp + 0x10]
0069d84b push ecx
0069d84c mov edx, esi
0069d84e mov ecx, edi
0069d850 call 0x69b9a0
0069d855 test byte ptr [esi + 0x19], 2
0069d859 je 0x69d868
0069d85b push esi
0069d85c mov edx, 0x3d9ae4ee
0069d861 mov ecx, edi
0069d863 call 0x698ef0
0069d868 pop edi
0069d869 pop esi
0069d86a pop ecx
0069d86b ret 4
