
FUNCTION 0x69aa40
0069aa40 dec eax
0069aa41 cmp al, 0x33
0069aa43 ror byte ptr [ecx + 0x50890850], cl
0069aa49 adc byte ptr [ecx + 0x50891850], cl
0069aa4f and byte ptr [ecx + 0x50892850], cl
0069aa55 xor byte ptr [ecx + 0x50893850], cl
0069aa5b inc eax
0069aa5c pop edi
0069aa5d mov dword ptr [eax + 0x708], ecx
0069aa63 mov dword ptr [eax + 0x70c], ecx
0069aa69 mov dword ptr [eax + 0x710], 1
0069aa73 mov dword ptr [eax + 0x58], ecx
0069aa76 mov dword ptr [eax + 0x54], ecx
0069aa79 mov dword ptr [eax + 0x750], ecx
0069aa7f movss dword ptr [eax + 0x60], xmm0
0069aa84 movss dword ptr [eax + 0x5c], xmm0
0069aa89 movss dword ptr [eax + 0x758], xmm0
0069aa91 movss dword ptr [eax + 0x754], xmm0
0069aa99 mov dword ptr [eax + 0x44], ecx
0069aa9c mov dword ptr [eax + 0x48], ecx
0069aa9f mov dword ptr [eax + 0x4c], ecx
0069aaa2 mov dword ptr [eax + 0x50], ecx
0069aaa5 mov dword ptr [eax + 0x6fc], ecx
0069aaab pop esi
0069aaac ret 
0069aaad or esp, 0xcec83cc
0069aab3 push esi
0069aab4 push edi
0069aab5 mov esi, edx
0069aab7 lea eax, [esp + 8]
0069aabb mov edi, ecx
0069aabd mov ecx, dword ptr [esi + 0xc]
0069aac0 push eax
0069aac1 mov edx, 0x40d8b2b
0069aac6 mov dword ptr [esp + 0xc], 0
0069aace call 0x69e120
0069aad3 cmp dword ptr [esp + 8], 0
0069aad8 jne 0x69ac7e
0069aade mov dword ptr [edi + 0xc8], esi
0069aae4 test byte ptr [esi + 0x19], 4
0069aae8 jne 0x69aaf3
0069aaea cmp dword ptr [esi + 8], 0x808f1670
0069aaf1 jne 0x69ab00
0069aaf3 push esi
0069aaf4 mov edx, 0x9f89304e
0069aaf9 mov ecx, edi
0069aafb call 0x698ef0
0069ab00 push ebx
0069ab01 mov ebx, dword ptr [esp + 0x20]
0069ab05 test ebx, ebx
0069ab07 je 0x69abae
0069ab0d mov ecx, dword ptr [esi + 0xc]
0069ab10 mov dword ptr [esp + 0x14], 0x82f6983b
0069ab18 mov dword ptr [esp + 0x10], 0
0069ab20 mov eax, dword ptr [ecx]
0069ab22 mov eax, dword ptr [eax + 0xc]
0069ab25 lea edx, [esp + 0x10]
0069ab29 push edx
0069ab2a mov edx, 0xab11f11e
0069ab2f call eax
0069ab31 test eax, eax
0069ab33 je 0x69abae
0069ab35 xor edx, edx
0069ab37 lea ecx, [esp + 0x10]
0069ab3b call 0x6a55c0
0069ab40 fst dword ptr [esp + 0x20]
0069ab44 fldz 
0069ab46 mov ecx, dword ptr [esi + 0xc]
0069ab49 fxch st(1)
0069ab4b fcompi st(1)
0069ab4d fstp st(0)
0069ab4f jbe 0x69aba2
0069ab51 movss xmm0, dword ptr [esp + 0x20]
0069ab57 subss xmm0, dword ptr [esp + 0x1c]
0069ab5d xorps xmm1, xmm1
0069ab60 comiss xmm1, xmm0
0069ab63 jb 0x69ab81
0069ab65 mov eax, dword ptr [ecx]
0069ab67 mov eax, dword ptr [eax + 0x18]
0069ab6a mov edx, 0xab11f11e
0069ab6f call eax
0069ab71 push 0x3d8b7902
0069ab76 mov edx, edi
0069ab78 mov ecx, esi
0069ab7a call 0x69f2e0
0069ab7f jmp 0x69abae
0069ab81 mov dword ptr [esp + 0x14], 0x3ef19c25
0069ab89 movss dword ptr [esp + 0x10], xmm0
0069ab8f mov eax, dword ptr [ecx]
0069ab91 mov eax, dword ptr [eax + 0x10]
0069ab94 lea edx, [esp + 0x10]
0069ab98 push edx
0069ab99 mov edx, 0xab11f11e
0069ab9e call eax
0069aba0 jmp 0x69abae
0069aba2 mov eax, dword ptr [ecx]
0069aba4 mov eax, dword ptr [eax + 0x18]
0069aba7 mov edx, 0xab11f11e
0069abac call eax
0069abae mov eax, dword ptr [esi + 8]
0069abb1 cmp eax, 0x9bb908f9
0069abb6 ja 0x69ac03
0069abb8 je 0x69ac7d
0069abbe cmp eax, 0x32b18aa8
0069abc3 je 0x69ac7d
0069abc9 cmp eax, 0x7bb2e017
0069abce je 0x69abdd
0069abd0 cmp eax, 0x808f1670
0069abd5 je 0x69ac7d
0069abdb jmp 0x69ac58
0069abdd test ebx, ebx
0069abdf je 0x69ac7d
0069abe5 movss xmm0, dword ptr [esp + 0x1c]
0069abeb push ecx
0069abec mov edx, esi
0069abee mov ecx, edi
0069abf0 movss dword ptr [esp], xmm0
0069abf5 call 0x699310
0069abfa pop ebx
0069abfb pop edi
0069abfc pop esi
0069abfd add esp, 0xc
0069ac00 ret 8
0069ac03 cmp eax, 0xac016bc1
0069ac08 je 0x69ac3f
0069ac0a cmp eax, 0xc576a63f
0069ac0f je 0x69ac21
0069ac11 cmp eax, 0xf3edecf5
0069ac16 jne 0x69ac58
0069ac18 pop ebx
0069ac19 pop edi
0069ac1a pop esi
0069ac1b add esp, 0xc
0069ac1e ret 8
0069ac21 movss xmm0, dword ptr [esp + 0x1c]
0069ac27 push ecx
0069ac28 mov edx, esi
0069ac2a mov ecx, edi
0069ac2c movss dword ptr [esp], xmm0
0069ac31 call 0x699510
0069ac36 pop ebx
0069ac37 pop edi
0069ac38 pop esi
0069ac39 add esp, 0xc
0069ac3c ret 8
0069ac3f test ebx, ebx
0069ac41 je 0x69ac58
0069ac43 movss xmm0, dword ptr [esp + 0x1c]
0069ac49 push ecx
0069ac4a mov edx, esi
0069ac4c mov ecx, edi
0069ac4e movss dword ptr [esp], xmm0
0069ac53 call 0x699310
0069ac58 mov esi, dword ptr [esi + 0x1c]
0069ac5b test esi, esi
0069ac5d je 0x69ac7d
0069ac5f nop 
0069ac60 movss xmm0, dword ptr [esp + 0x1c]
0069ac66 push ebx
0069ac67 push ecx
0069ac68 mov edx, esi
0069ac6a mov ecx, edi

FUNCTION 0x69d730
0069d730 daa 
0069d731 add byte ptr [eax], al
0069d733 jl 0x69d6e0
0069d735 pop edi
0069d736 pop esi
0069d737 pop ebx
0069d738 ret 
0069d739 mov esp, 0xcccccccc
0069d73e int3 
0069d73f int3 
0069d740 push ecx
0069d741 push esi
0069d742 mov esi, edx
0069d744 test byte ptr [esi + 0x1a], 1
0069d748 push edi
0069d749 mov edi, ecx
0069d74b je 0x69d75a
0069d74d cmp dword ptr [edi + 0x700], 0
0069d754 jne 0x69d868
0069d75a mov ecx, dword ptr [esi + 0xc]
0069d75d lea eax, [esp + 8]
0069d761 push eax
0069d762 mov edx, 0xb50dd1c5
0069d767 mov dword ptr [esp + 0xc], 0
0069d76f call 0x69e120
0069d774 cmp dword ptr [esp + 8], 0
0069d779 je 0x69d868
0069d77f test byte ptr [esi + 0x19], 1
0069d783 je 0x69d792
0069d785 push esi
0069d786 mov edx, 0x5805af13
0069d78b mov ecx, edi
0069d78d call 0x698ef0
0069d792 mov eax, dword ptr [esi + 8]
0069d795 cmp eax, 0x808f1670
0069d79a ja 0x69d812
0069d79c je 0x69d803
0069d79e cmp eax, 0x449d3762
0069d7a3 ja 0x69d7ec
0069d7a5 je 0x69d7dc
0069d7a7 cmp eax, 0x25a349d8
0069d7ac je 0x69d7cc
0069d7ae cmp eax, 0x32b18aa8
0069d7b3 jne 0x69d855
0069d7b9 mov ecx, dword ptr [esp + 0x10]
0069d7bd push ecx
0069d7be mov edx, esi
0069d7c0 mov ecx, edi
0069d7c2 call 0x69b510
0069d7c7 jmp 0x69d855
0069d7cc mov edx, dword ptr [esp + 0x10]
0069d7d0 push edx
0069d7d1 mov edx, esi
0069d7d3 mov ecx, edi
0069d7d5 call 0x69a1f0
0069d7da jmp 0x69d855
0069d7dc mov eax, dword ptr [esp + 0x10]
0069d7e0 push eax
0069d7e1 mov edx, esi
0069d7e3 mov ecx, edi
0069d7e5 call 0x69a280
0069d7ea jmp 0x69d855
0069d7ec cmp eax, 0x7bb2e017
0069d7f1 jne 0x69d855
0069d7f3 mov ecx, dword ptr [esp + 0x10]
0069d7f7 push ecx
0069d7f8 mov edx, esi
0069d7fa mov ecx, edi
0069d7fc call 0x69c840
0069d801 jmp 0x69d855
0069d803 push esi
0069d804 mov edx, 0x93f09c5c
0069d809 mov ecx, edi
0069d80b call 0x698ef0
0069d810 jmp 0x69d855
0069d812 cmp eax, 0x9bb908f9
0069d817 je 0x69d847
0069d819 cmp eax, 0xac016bc1
0069d81e je 0x69d837
0069d820 cmp eax, 0xc576a63f
0069d825 jne 0x69d855
0069d827 mov edx, dword ptr [esp + 0x10]
0069d82b push edx
0069d82c mov edx, esi
0069d82e mov ecx, edi
0069d830 call 0x69bee0
0069d835 jmp 0x69d855
0069d837 mov eax, dword ptr [esp + 0x10]
0069d83b push eax
0069d83c mov edx, esi
0069d83e mov ecx, edi
0069d840 call 0x69b360
0069d845 jmp 0x69d855
0069d847 mov ecx, dword ptr [esp + 0x10]
0069d84b push ecx
0069d84c mov edx, esi
0069d84e mov ecx, edi
0069d850 call 0x69b9a0
0069d855 test byte ptr [esi + 0x19], 2
0069d859 je 0x69d868
0069d85b push esi
0069d85c mov edx, 0x3d9ae4ee
0069d861 mov ecx, edi
0069d863 call 0x698ef0
0069d868 pop edi
0069d869 pop esi
0069d86a pop ecx
0069d86b ret 4

FUNCTION 0x69b360
0069b360 push ebp
0069b361 mov ebp, esp
0069b363 and esp, 0xfffffff0
0069b366 sub esp, 0x54
0069b369 push ebx
0069b36a push esi
0069b36b push edi
0069b36c mov edi, edx
0069b36e xor ebx, ebx
0069b370 mov dword ptr [esp + 0x1c], edi
0069b374 mov esi, ecx
0069b376 cmp dword ptr [edi + 0x1c], ebx
0069b379 je 0x69b502
0069b37f mov eax, dword ptr [ebp + 8]
0069b382 push eax
0069b383 push edi
0069b384 lea edx, [esp + 0x28]
0069b388 call 0x69ac90
0069b38d mov edi, dword ptr [edi + 0xc]
0069b390 lea ecx, [esp + 0x14]
0069b394 push ecx
0069b395 mov edx, 0x1c81f48a
0069b39a mov ecx, edi
0069b39c mov dword ptr [esp + 0x1c], ebx
0069b3a0 mov dword ptr [esp + 0x18], ebx
0069b3a4 call 0x69e170
0069b3a9 mov edx, dword ptr [esp + 0x14]
0069b3ad cmp edx, ebx
0069b3af je 0x69b4cf
0069b3b5 mov eax, dword ptr [esi + 0x5b0]
0069b3bb cmp eax, 7
0069b3be jge 0x69b4cf
0069b3c4 cmp edx, 0x4905ed7b
0069b3ca jne 0x69b3e7
0069b3cc inc eax
0069b3cd mov dword ptr [esi + 0x5b0], eax
0069b3d3 mov dword ptr [esi + eax*4 + 0x5b4], ebx
0069b3da mov dword ptr [esp + 0x18], 1
0069b3e2 jmp 0x69b4cf
0069b3e7 push 0xe26c9b5d
0069b3ec mov ecx, 0xbb05a9c1
0069b3f1 call 0x699010
0069b3f6 mov ebx, eax
0069b3f8 test ebx, ebx
0069b3fa je 0x69b4a9
0069b400 lea edx, [esp + 0x10]
0069b404 push edx
0069b405 mov edx, 0x1c0390be
0069b40a mov ecx, edi
0069b40c mov dword ptr [esp + 0x14], 0
0069b414 call 0x69e170
0069b419 mov edx, dword ptr [esp + 0x10]
0069b41d test edx, edx
0069b41f je 0x69b4cf
0069b425 cmp edx, 0xdc1bfec5
0069b42b je 0x69b4cf
0069b431 mov ecx, ebx
0069b433 call 0x55c8b0
0069b438 test eax, eax
0069b43a je 0x69b496
0069b43c inc dword ptr [esi + 0x5b0]
0069b442 mov ecx, dword ptr [esi + 0x5b0]
0069b448 xorps xmm0, xmm0
0069b44b mov dword ptr [esi + ecx*4 + 0x5b4], eax
0069b452 lea eax, [esp + 0x18]
0069b456 push eax
0069b457 mov edx, 0xa7f2d377
0069b45c mov ecx, edi
0069b45e movss dword ptr [esp + 0x1c], xmm0
0069b464 call 0x69e0d0
0069b469 movss xmm1, dword ptr [ebx + 8]
0069b46e movss xmm0, dword ptr [esp + 0x18]
0069b474 ucomiss xmm1, xmm0
0069b477 lahf 
0069b478 test ah, 0x44
0069b47b jnp 0x69b48c
0069b47d push ecx
0069b47e xor edx, edx
0069b480 mov ecx, ebx
0069b482 movss dword ptr [esp], xmm0
0069b487 call 0xdd3c70
0069b48c mov dword ptr [esp + 0x18], 1
0069b494 jmp 0x69b4cf
0069b496 mov ecx, dword ptr [esp + 0x10]
0069b49a push ecx
0069b49b mov edx, 1
0069b4a0 mov ecx, esi
0069b4a2 call 0x69a7b0
0069b4a7 jmp 0x69b4cf
0069b4a9 mov edx, dword ptr [esi]
0069b4ab mov eax, dword ptr [esp + 0x14]
0069b4af mov dword ptr [esi + edx*8 + 4], 1
0069b4b7 mov ecx, dword ptr [esi]
0069b4b9 mov dword ptr [esi + ecx*8 + 8], eax
0069b4bd mov edx, dword ptr [esi]
0069b4bf inc edx
0069b4c0 and edx, 0x80000007
0069b4c6 jns 0x69b4cd
0069b4c8 dec edx
0069b4c9 or edx, 0xfffffff8
0069b4cc inc edx
0069b4cd mov dword ptr [esi], edx
0069b4cf mov eax, dword ptr [esp + 0x1c]
0069b4d3 mov edi, dword ptr [eax + 0x1c]
0069b4d6 test edi, edi
0069b4d8 je 0x69b4f5
0069b4da lea ebx, [ebx]
0069b4e0 lea ecx, [esp + 0x20]
0069b4e4 push ecx
0069b4e5 mov edx, edi
0069b4e7 mov ecx, esi
0069b4e9 call 0x69d740
0069b4ee mov edi, dword ptr [edi + 0x20]
0069b4f1 test edi, edi
0069b4f3 jne 0x69b4e0
0069b4f5 cmp dword ptr [esp + 0x18], 0
0069b4fa je 0x69b502
0069b4fc dec dword ptr [esi + 0x5b0]
0069b502 pop edi
0069b503 pop esi
0069b504 pop ebx
0069b505 mov esp, ebp
0069b507 pop ebp
0069b508 ret 4
0069b50b popfd 
0069b50c int3 
0069b50d int3 
0069b50e int3 
0069b50f int3 
0069b510 push ebp
0069b511 mov ebp, esp
0069b513 and esp, 0xfffffff0
0069b516 sub esp, 0x78
0069b519 movss xmm0, dword ptr [0xf1dc58]
0069b521 mov eax, dword ptr [ebp + 8]
0069b524 push esi
0069b525 push edi
0069b526 movss dword ptr [esp + 0x10], xmm0
0069b52c movss dword ptr [esp + 0x14], xmm0
0069b532 xorps xmm0, xmm0
0069b535 mov esi, edx
0069b537 push eax
0069b538 movss dword ptr [esp + 0x24], xmm0
0069b53e movss dword ptr [esp + 0x1c], xmm0
0069b544 movss xmm0, dword ptr [0xec6e14]
0069b54c push esi
0069b54d lea edx, [esp + 0x48]
0069b551 mov edi, ecx
0069b553 movss dword ptr [esp + 0x24], xmm0
0069b559 movss dword ptr [esp + 0x2c], xmm0
0069b55f call 0x69ac90
0069b564 mov esi, dword ptr [esi + 0xc]
0069b567 lea ecx, [esp + 0x10]
0069b56b push ecx
0069b56c mov edx, 0xb0bd77d7
0069b571 mov ecx, esi
0069b573 call 0x69e0d0
0069b578 lea edx, [esp + 0x14]
0069b57c push edx
0069b57d mov edx, 0xc7ba4741
0069b582 mov ecx, esi
0069b584 call 0x69e0d0
0069b589 lea eax, [esp + 0x20]
0069b58d push eax
0069b58e mov edx, 0xc78bc0fd
0069b593 mov ecx, esi
0069b595 call 0x69e0d0
0069b59a lea ecx, [esp + 0x18]
0069b59e push ecx
0069b59f mov edx, 0xb08cf06b
0069b5a4 mov ecx, esi
0069b5a6 call 0x69e0d0
0069b5ab lea edx, [esp + 0x1c]
0069b5af push edx
0069b5b0 mov edx, 0x1a9437d0
0069b5b5 mov ecx, esi
0069b5b7 call 0x69e0d0
0069b5bc lea eax, [esp + 0x24]
0069b5c0 push eax
0069b5c1 mov edx, 0x6d930746
0069b5c6 mov ecx, esi
0069b5c8 call 0x69e0d0
0069b5cd movss xmm1, dword ptr [esp + 0x10]
0069b5d3 mulss xmm1, dword ptr [0xec6fd4]
0069b5db movss dword ptr [esp + 0x10], xmm1
0069b5e1 movss xmm1, dword ptr [esp + 0x14]
0069b5e7 mulss xmm1, dword ptr [0xec6fd4]
0069b5ef lea ecx, [esp + 0x28]
0069b5f3 push ecx
0069b5f4 mov edx, 0x45e79640
0069b5f9 mov ecx, esi
0069b5fb movss dword ptr [esp + 0x18], xmm1
0069b601 mov dword ptr [esp + 0x2c], 0
0069b609 call 0x69e170
0069b60e lea edx, [esp + 0x2c]
0069b612 push edx
0069b613 mov edx, dword ptr [esp + 0x2c]
0069b617 push 0x5c369069
0069b61c mov ecx, 0x1c35620
0069b621 call 0x69e430
0069b626 test eax, eax
0069b628 je 0x69b642
0069b62a mov ecx, dword ptr [esp + 0x2c]
0069b62e mov esi, dword ptr [ecx]
0069b630 push 0
0069b632 push 0
0069b634 push 0
0069b636 mov edx, eax
0069b638 mov eax, dword ptr [esi + 0x18]
0069b63b push 0xbb05a9c1
0069b640 call eax
0069b642 lea ecx, [edi + 0x300]
0069b648 mov dword ptr [0x119622c], eax
0069b64d mov dword ptr [0x1196244], 1
0069b657 mov dword ptr [0x1196248], 5
0069b661 mov dword ptr [0x119624c], 6
0069b66b mov dword ptr [edi + 0x6e8], ecx
0069b671 call 0xd96ee0
0069b676 movss xmm0, dword ptr [0xec6e14]
0069b67e lea ecx, [esp + 0x40]
0069b682 lea edx, [esp + 0x30]
0069b686 mov dword ptr [esp + 0x3c], ecx
0069b68a push edx
0069b68b xor edx, edx
0069b68d mov ecx, 0x1196228
0069b692 mov dword ptr [esp + 0x34], 0x40090
0069b69a movss dword ptr [esp + 0x38], xmm0
0069b6a0 mov dword ptr [esp + 0x3c], 0x40
0069b6a8 call 0xdccf10
0069b6ad push eax
0069b6ae mov edx, 0x2116434
0069b6b3 mov ecx, 7
0069b6b8 call 0xdccf70
0069b6bd movss xmm0, dword ptr [0xec6fe0]
0069b6c5 movss xmm1, dword ptr [esp + 0x10]
0069b6cb xorps xmm1, xmm0
0069b6ce movss dword ptr [eax], xmm1
0069b6d2 movss xmm1, dword ptr [esp + 0x14]
0069b6d8 movss dword ptr [eax + 4], xmm1
0069b6dd xorps xmm1, xmm1
0069b6e0 movss dword ptr [eax + 8], xmm1
0069b6e5 or ecx, 0xffffffff
0069b6e8 mov dword ptr [eax + 0xc], ecx
0069b6eb movss xmm2, dword ptr [esp + 0x20]
0069b6f1 movss dword ptr [eax + 0x10], xmm2
0069b6f6 movss xmm2, dword ptr [esp + 0x18]
0069b6fc movss dword ptr [eax + 0x14], xmm2
0069b701 movss xmm2, dword ptr [esp + 0x10]
0069b707 movss dword ptr [eax + 0x18], xmm2
0069b70c movss xmm2, dword ptr [esp + 0x14]
0069b712 movss dword ptr [eax + 0x1c], xmm2
0069b717 mov dword ptr [eax + 0x24], ecx
0069b71a movss dword ptr [eax + 0x20], xmm1
0069b71f movss xmm2, dword ptr [esp + 0x1c]
0069b725 movss dword ptr [eax + 0x28], xmm2
0069b72a movss xmm2, dword ptr [esp + 0x18]
0069b730 movss dword ptr [eax + 0x2c], xmm2
0069b735 movss xmm2, dword ptr [esp + 0x10]
0069b73b movss dword ptr [eax + 0x30], xmm2
0069b740 movss xmm2, dword ptr [esp + 0x14]
0069b746 xorps xmm2, xmm0
0069b749 movss dword ptr [eax + 0x34], xmm2
0069b74e mov dword ptr [eax + 0x3c], ecx
0069b751 movss dword ptr [eax + 0x38], xmm1
0069b756 movss xmm2, dword ptr [esp + 0x1c]
0069b75c movss dword ptr [eax + 0x40], xmm2
0069b761 movss xmm2, dword ptr [esp + 0x24]
0069b767 movss dword ptr [eax + 0x44], xmm2
0069b76c movss xmm2, dword ptr [esp + 0x10]
0069b772 xorps xmm2, xmm0
0069b775 movss dword ptr [eax + 0x48], xmm2
0069b77a movss xmm2, dword ptr [esp + 0x14]
0069b780 xorps xmm2, xmm0
0069b783 mov dword ptr [eax + 0x54], ecx
0069b786 movss dword ptr [eax + 0x4c], xmm2
0069b78b movss dword ptr [eax + 0x50], xmm1
0069b790 movss xmm0, dword ptr [esp + 0x20]
0069b796 movss dword ptr [eax + 0x58], xmm0
0069b79b movss xmm0, dword ptr [esp + 0x24]
0069b7a1 mov ecx, 4
0069b7a6 movss dword ptr [eax + 0x5c], xmm0
0069b7ab call 0xdcc610
0069b7b0 pop edi
0069b7b1 pop esi
0069b7b2 mov esp, ebp
0069b7b4 pop ebp
0069b7b5 ret 4
0069b7b8 int3 
0069b7b9 int3 
0069b7ba int3 
0069b7bb int3 
0069b7bc int3 
0069b7bd int3 
0069b7be int3 
0069b7bf int3 
0069b7c0 sub esp, 0x14
0069b7c3 push ebx
0069b7c4 push ebp
0069b7c5 push esi
0069b7c6 mov ebx, edx
0069b7c8 push edi
0069b7c9 lea eax, [esp + 0x14]
0069b7cd mov esi, ecx
0069b7cf xor ebp, ebp
0069b7d1 push eax
0069b7d2 mov edx, 0x1c81f48a
0069b7d7 mov ecx, ebx
0069b7d9 mov dword ptr [esp + 0x20], ebx
0069b7dd mov dword ptr [esp + 0x18], ebp
0069b7e1 mov dword ptr [esp + 0x14], ebp
0069b7e5 call 0x69e170
0069b7ea mov edx, dword ptr [esp + 0x14]
0069b7ee cmp edx, ebp
0069b7f0 je 0x69b911
0069b7f6 cmp edx, 0x4905ed7b
0069b7fc je 0x69b911
0069b802 lea ecx, [esp + 0x20]
0069b806 push ecx
0069b807 push 0xe26c9b5d
0069b80c mov ecx, 0x1c35620
0069b811 call 0x69e430
0069b816 cmp eax, ebp
0069b818 je 0x69b835
0069b81a mov ecx, dword ptr [esp + 0x20]
0069b81e mov edi, dword ptr [ecx]
0069b820 push ebp
0069b821 push ebp
0069b822 push ebp
0069b823 mov edx, eax
0069b825 mov eax, dword ptr [edi + 0x18]
0069b828 push 0xbb05a9c1
0069b82d call eax
0069b82f mov edi, eax
0069b831 test edi, edi
0069b833 jne 0x69b85f
0069b835 mov eax, dword ptr [esp + 0x14]
0069b839 mov ecx, dword ptr [esi]
0069b83b mov dword ptr [esi + ecx*8 + 4], 1
0069b843 mov edx, dword ptr [esi]
0069b845 mov dword ptr [esi + edx*8 + 8], eax
0069b849 mov eax, dword ptr [esi]
0069b84b inc eax
0069b84c and eax, 0x80000007
0069b851 jns 0x69b858
0069b853 dec eax
0069b854 or eax, 0xfffffff8
0069b857 inc eax
0069b858 mov dword ptr [esi], eax
0069b85a jmp 0x69b911

FUNCTION 0x69d870
0069d870 sub esp, 0x18
0069d873 push ebx
0069d874 push esi
0069d875 mov esi, edx
0069d877 cmp dword ptr [esi], 0
0069d87a push edi
0069d87b mov ebx, ecx
0069d87d je 0x69d8ca
0069d87f cmp dword ptr [0x1b2b2c8], 0
0069d886 je 0x69d8ca
0069d888 mov eax, 0x67aea0
0069d88d mov dword ptr [esp + 0x20], eax
0069d891 mov dword ptr [esp + 0x18], eax
0069d895 lea eax, [esp + 0xc]
0069d899 push eax
0069d89a push 0x84f
0069d89f mov edx, 0x9b269092
0069d8a4 mov ecx, 0x1b2b2d8
0069d8a9 mov dword ptr [esp + 0x14], 0
0069d8b1 mov dword ptr [esp + 0x18], 2
0069d8b9 mov dword ptr [esp + 0x24], esi
0069d8bd mov dword ptr [esp + 0x1c], 0xf2090c
0069d8c5 call 0x67b040
0069d8ca mov cl, byte ptr [esp + 0x28]
0069d8ce mov byte ptr [esi + 0x18], cl
0069d8d1 mov edi, dword ptr [ebx + 0x84]
0069d8d7 lea eax, [ebx + 0x64]
0069d8da cmp edi, eax
0069d8dc je 0x69d8ec
0069d8de mov edi, edi
0069d8e0 cmp cl, byte ptr [edi + 0x18]
0069d8e3 jge 0x69d8ec
0069d8e5 mov edi, dword ptr [edi + 0x20]
0069d8e8 cmp edi, eax
0069d8ea jne 0x69d8e0
0069d8ec mov edx, ebx
0069d8ee mov ecx, esi
0069d8f0 call 0x69f320
0069d8f5 mov ecx, dword ptr [edi + 0x24]
0069d8f8 mov dword ptr [esi + 0x20], edi
0069d8fb mov dword ptr [esi + 0x24], ecx
0069d8fe mov edx, ecx
0069d900 mov dword ptr [edx + 0x20], esi
0069d903 mov eax, dword ptr [esi + 0x20]
0069d906 mov dword ptr [eax + 0x24], esi
0069d909 mov edi, dword ptr [esi + 0x1c]
0069d90c test edi, edi
0069d90e je 0x69d92d
0069d910 push 0x66464b4a
0069d915 push 0
0069d917 mov edx, edi
0069d919 mov ecx, ebx
0069d91b mov dword ptr [ebx + 0xc8], edi
0069d921 call 0x69a520
0069d926 mov edi, dword ptr [edi + 0x20]
0069d929 test edi, edi
0069d92b jne 0x69d910
0069d92d push 0x66464b4a
0069d932 mov edx, ebx
0069d934 mov ecx, esi
0069d936 call 0x69f2e0
0069d93b mov ecx, ebx
0069d93d call 0x69d6d0
0069d942 mov ecx, dword ptr [esi + 0x2c]
0069d945 test ecx, ecx
0069d947 je 0x69d95a
0069d949 mov eax, dword ptr [ecx]
0069d94b mov eax, dword ptr [eax]
0069d94d push esi
0069d94e mov edx, 0xff08b95a
0069d953 call eax
0069d955 cmp eax, 1
0069d958 je 0x69d989
0069d95a mov edi, dword ptr [ebx + 0x740]
0069d960 add ebx, 0x738
0069d966 cmp edi, ebx
0069d968 je 0x69d989
0069d96a lea ebx, [ebx]
0069d970 mov eax, dword ptr [edi]
0069d972 mov eax, dword ptr [eax]
0069d974 push esi
0069d975 mov edx, 0xff08b95a
0069d97a mov ecx, edi
0069d97c call eax
0069d97e test eax, eax
0069d980 jne 0x69d989
0069d982 mov edi, dword ptr [edi + 8]
0069d985 cmp edi, ebx
0069d987 jne 0x69d970
0069d989 pop edi
0069d98a pop esi
0069d98b pop ebx
0069d98c add esp, 0x18
0069d98f ret 4
0069d992 jns 0x69d960
0069d994 int3 
0069d995 int3 
0069d996 int3 
0069d997 int3 
0069d998 int3 
0069d999 int3 
0069d99a int3 
0069d99b int3 
0069d99c int3 
0069d99d int3 
0069d99e int3 
0069d99f int3 
0069d9a0 push ebp
0069d9a1 push edi
0069d9a2 mov edi, ecx
0069d9a4 xor ebp, ebp
0069d9a6 cmp dword ptr [edi + 0x6d4], ebp
0069d9ac jle 0x69d9ea
0069d9ae push esi
0069d9af lea esi, [edi + 0x5d4]
0069d9b5 cmp byte ptr [esi + 4], 0
0069d9b9 mov edx, dword ptr [esi]
0069d9bb mov ecx, edi
0069d9bd je 0x69d9cb
0069d9bf movzx eax, byte ptr [esi + 5]
0069d9c3 push eax
0069d9c4 call 0x69d870
0069d9c9 jmp 0x69d9d0
0069d9cb call 0x69c010
0069d9d0 inc ebp
0069d9d1 add esi, 8
0069d9d4 cmp ebp, dword ptr [edi + 0x6d4]
0069d9da jl 0x69d9b5
0069d9dc pop esi
0069d9dd mov dword ptr [edi + 0x6d4], 0
0069d9e7 pop edi
0069d9e8 pop ebp
0069d9e9 ret 
0069d9ea mov dword ptr [edi + 0x6d4], ebp
0069d9f0 pop edi
0069d9f1 pop ebp
0069d9f2 ret 
0069d9f3 cmp eax, 0xcccccccc
0069d9f8 int3 
0069d9f9 int3 
0069d9fa int3 
0069d9fb int3 
0069d9fc int3 
0069d9fd int3 
0069d9fe int3 
0069d9ff int3 
0069da00 sub esp, 0xbc
0069da06 push ebx
0069da07 xor eax, eax
0069da09 push ebp
0069da0a xor ebx, ebx
0069da0c mov dword ptr [0x1c35fb4], ebx
0069da12 mov dword ptr [0x1c35fb8], ebx
0069da18 mov dword ptr [0x1c35fbc], ebx
0069da1e push esi
0069da1f mov esi, ecx
0069da21 mov dword ptr [esi], ebx
0069da23 xor ecx, ecx
0069da25 push edi
0069da26 mov edi, 1
0069da2b mov dword ptr [esi + 0x708], edi
0069da31 mov dword ptr [esi + 4], eax
0069da34 mov dword ptr [esi + 8], ecx
0069da37 mov dword ptr [esi + 0xc], eax
0069da3a mov dword ptr [esi + 0x10], ecx
0069da3d mov dword ptr [esi + 0x14], eax
0069da40 mov dword ptr [esi + 0x18], ecx
0069da43 mov dword ptr [esi + 0x1c], eax
0069da46 mov dword ptr [esi + 0x20], ecx
0069da49 mov dword ptr [esi + 0x24], eax
0069da4c mov dword ptr [esi + 0x28], ecx
0069da4f mov dword ptr [esi + 0x2c], eax
0069da52 mov dword ptr [esi + 0x30], ecx
0069da55 mov dword ptr [esi + 0x34], eax
0069da58 mov dword ptr [esi + 0x38], ecx
0069da5b mov dword ptr [esi + 0x3c], eax
0069da5e mov dword ptr [esi + 0x40], ecx
0069da61 mov eax, dword ptr [esi + 0x718]
0069da67 test al, 8
0069da69 je 0x69da72
0069da6b or eax, 0x10000
0069da70 jmp 0x69da77
0069da72 and eax, 0xfffeffff
0069da77 mov dword ptr [esi + 0x718], eax
0069da7d test eax, 0x10000
0069da82 je 0x69dabf
0069da84 movss xmm0, dword ptr [esi + 0x704]
0069da8c comiss xmm0, dword ptr [0xf0fc08]
0069da93 movss xmm1, dword ptr [esp + 0xd0]
0069da9c jbe 0x69daaa
0069da9e subss xmm0, xmm1
0069daa2 movss dword ptr [esi + 0x704], xmm0

FUNCTION 0x699310
00699310 sub esp, 0x20
00699313 xorps xmm0, xmm0
00699316 push ebp
00699317 mov ebp, edx
00699319 push esi
0069931a mov esi, dword ptr [ebp + 0xc]
0069931d lea eax, [esp + 0x14]
00699321 mov dword ptr [esp + 0x1c], ecx
00699325 push eax
00699326 mov edx, 0x178a740b
0069932b mov ecx, esi
0069932d movss dword ptr [esp + 0x18], xmm0
00699333 call 0x69e0d0
00699338 movss xmm1, dword ptr [esp + 0x14]
0069933e xorps xmm0, xmm0
00699341 ucomiss xmm1, xmm0
00699344 lahf 
00699345 test ah, 0x44
00699348 jnp 0x6994fb
0069934e push ebx
0069934f push edi
00699350 lea ecx, [esp + 0x10]
00699354 push ecx
00699355 mov edx, 0xa7f2d377
0069935a mov ecx, esi
0069935c xor ebx, ebx
0069935e xor edi, edi
00699360 movss dword ptr [esp + 0x14], xmm0
00699366 call 0x69e0d0
0069936b movss xmm0, dword ptr [esp + 0x10]
00699371 movss xmm1, dword ptr [esp + 0x1c]
00699377 mulss xmm1, dword ptr [esp + 0x34]
0069937d lea edx, [esp + 0x18]
00699381 addss xmm1, xmm0
00699385 movss dword ptr [esp + 0x20], xmm0
0069938b xorps xmm0, xmm0
0069938e push edx
0069938f mov edx, 0x57666244
00699394 mov ecx, esi
00699396 movss dword ptr [esp + 0x14], xmm1
0069939c movss dword ptr [esp + 0x1c], xmm0
006993a2 movss dword ptr [esp + 0x18], xmm0
006993a8 call 0x69e0d0
006993ad lea eax, [esp + 0x14]
006993b1 push eax
006993b2 mov edx, 0xb1e68183
006993b7 mov ecx, esi
006993b9 call 0x69e0d0
006993be movss xmm1, dword ptr [esp + 0x1c]
006993c4 xorps xmm0, xmm0
006993c7 comiss xmm1, xmm0
006993ca jbe 0x69943b
006993cc movss xmm0, dword ptr [esp + 0x10]
006993d2 comiss xmm0, dword ptr [esp + 0x14]
006993d7 jb 0x6994a6
006993dd lea ecx, [esp + 0x34]
006993e1 push ecx
006993e2 mov edx, 0xbc093fb7
006993e7 mov ecx, esi
006993e9 mov dword ptr [esp + 0x38], ebx
006993ed call 0x69e120
006993f2 cmp dword ptr [esp + 0x34], ebx
006993f6 je 0x699419
006993f8 movss xmm1, dword ptr [esp + 0x14]
006993fe movss xmm0, dword ptr [esp + 0x10]
00699404 subss xmm1, dword ptr [esp + 0x18]
0069940a subss xmm0, xmm1
0069940e movss dword ptr [esp + 0x10], xmm0
00699414 jmp 0x6994a6
00699419 movss xmm0, dword ptr [esp + 0x14]
0069941f movss xmm1, dword ptr [esp + 0x20]
00699425 ucomiss xmm1, xmm0
00699428 lahf 
00699429 movss dword ptr [esp + 0x10], xmm0
0069942f test ah, 0x44
00699432 jnp 0x6994a6
00699434 mov edi, 1
00699439 jmp 0x6994a6
0069943b comiss xmm0, xmm1
0069943e movss xmm0, dword ptr [esp + 0x10]
00699444 jbe 0x6994a6
00699446 movss xmm1, dword ptr [esp + 0x18]
0069944c comiss xmm1, xmm0
0069944f jb 0x6994a6
00699451 lea edx, [esp + 0x34]
00699455 push edx
00699456 mov edx, 0xbc093fb7
0069945b mov ecx, esi
0069945d mov dword ptr [esp + 0x38], ebx
00699461 call 0x69e120
00699466 cmp dword ptr [esp + 0x34], ebx
0069946a je 0x699486
0069946c movss xmm0, dword ptr [esp + 0x14]
00699472 subss xmm0, dword ptr [esp + 0x18]
00699478 addss xmm0, dword ptr [esp + 0x10]
0069947e movss dword ptr [esp + 0x10], xmm0
00699484 jmp 0x6994a6
00699486 movss xmm0, dword ptr [esp + 0x18]
0069948c movss xmm1, dword ptr [esp + 0x20]
00699492 ucomiss xmm1, xmm0
00699495 lahf 
00699496 movss dword ptr [esp + 0x10], xmm0
0069949c test ah, 0x44
0069949f jnp 0x6994a6
006994a1 mov ebx, 1
006994a6 mov eax, dword ptr [esi]
006994a8 mov eax, dword ptr [eax + 0x14]
006994ab lea ecx, [esp + 0x28]
006994af push ecx
006994b0 mov edx, 0xa7f2d377
006994b5 mov ecx, esi
006994b7 mov dword ptr [esp + 0x30], 0x3ef19c25
006994bf movss dword ptr [esp + 0x2c], xmm0
006994c5 call eax
006994c7 test edi, edi
006994c9 je 0x6994e5
006994cb mov edx, dword ptr [esp + 0x24]
006994cf push 0x5ad3f2a6
006994d4 mov ecx, ebp
006994d6 call 0x69f2e0
006994db pop edi
006994dc pop ebx
006994dd pop esi
006994de pop ebp
006994df add esp, 0x20
006994e2 ret 4
006994e5 test ebx, ebx
006994e7 je 0x6994f9
006994e9 mov edx, dword ptr [esp + 0x24]
006994ed push 0xd8737d7a
006994f2 mov ecx, ebp
006994f4 call 0x69f2e0
006994f9 pop edi
006994fa pop ebx
006994fb pop esi
006994fc pop ebp
006994fd add esp, 0x20
00699500 ret 4
00699503 scasb al, byte ptr es:[edi]
00699504 int3 
00699505 int3 
00699506 int3 
00699507 int3 
00699508 int3 
00699509 int3 
0069950a int3 
0069950b int3 
0069950c int3 
0069950d int3 
0069950e int3 
0069950f int3 
00699510 sub esp, 0x28
00699513 push ebx
00699514 push esi
00699515 mov esi, dword ptr [edx + 0x30]
00699518 mov ebx, ecx
0069951a test esi, esi
