
FUNCTION 0x69b360
0069b360 push ebp
0069b361 mov ebp, esp
0069b363 and esp, 0xfffffff0
0069b366 sub esp, 0x54
0069b369 push ebx
0069b36a push esi
0069b36b push edi
0069b36c mov edi, edx
0069b36e xor ebx, ebx
0069b370 mov dword ptr [esp + 0x1c], edi
0069b374 mov esi, ecx
0069b376 cmp dword ptr [edi + 0x1c], ebx
0069b379 je 0x69b502
0069b37f mov eax, dword ptr [ebp + 8]
0069b382 push eax
0069b383 push edi
0069b384 lea edx, [esp + 0x28]
0069b388 call 0x69ac90
0069b38d mov edi, dword ptr [edi + 0xc]
0069b390 lea ecx, [esp + 0x14]
0069b394 push ecx
0069b395 mov edx, 0x1c81f48a
0069b39a mov ecx, edi
0069b39c mov dword ptr [esp + 0x1c], ebx
0069b3a0 mov dword ptr [esp + 0x18], ebx
0069b3a4 call 0x69e170
0069b3a9 mov edx, dword ptr [esp + 0x14]
0069b3ad cmp edx, ebx
0069b3af je 0x69b4cf
0069b3b5 mov eax, dword ptr [esi + 0x5b0]
0069b3bb cmp eax, 7
0069b3be jge 0x69b4cf
0069b3c4 cmp edx, 0x4905ed7b
0069b3ca jne 0x69b3e7
0069b3cc inc eax
0069b3cd mov dword ptr [esi + 0x5b0], eax
0069b3d3 mov dword ptr [esi + eax*4 + 0x5b4], ebx
0069b3da mov dword ptr [esp + 0x18], 1
0069b3e2 jmp 0x69b4cf
0069b3e7 push 0xe26c9b5d
0069b3ec mov ecx, 0xbb05a9c1
0069b3f1 call 0x699010
0069b3f6 mov ebx, eax
0069b3f8 test ebx, ebx
0069b3fa je 0x69b4a9
0069b400 lea edx, [esp + 0x10]
0069b404 push edx
0069b405 mov edx, 0x1c0390be
0069b40a mov ecx, edi
0069b40c mov dword ptr [esp + 0x14], 0
0069b414 call 0x69e170
0069b419 mov edx, dword ptr [esp + 0x10]
0069b41d test edx, edx
0069b41f je 0x69b4cf
0069b425 cmp edx, 0xdc1bfec5
0069b42b je 0x69b4cf
0069b431 mov ecx, ebx
0069b433 call 0x55c8b0
0069b438 test eax, eax
0069b43a je 0x69b496
0069b43c inc dword ptr [esi + 0x5b0]
0069b442 mov ecx, dword ptr [esi + 0x5b0]
0069b448 xorps xmm0, xmm0
0069b44b mov dword ptr [esi + ecx*4 + 0x5b4], eax
0069b452 lea eax, [esp + 0x18]
0069b456 push eax
0069b457 mov edx, 0xa7f2d377
0069b45c mov ecx, edi
0069b45e movss dword ptr [esp + 0x1c], xmm0
0069b464 call 0x69e0d0
0069b469 movss xmm1, dword ptr [ebx + 8]
0069b46e movss xmm0, dword ptr [esp + 0x18]
0069b474 ucomiss xmm1, xmm0
0069b477 lahf 
0069b478 test ah, 0x44
0069b47b jnp 0x69b48c
0069b47d push ecx
0069b47e xor edx, edx
0069b480 mov ecx, ebx
0069b482 movss dword ptr [esp], xmm0
0069b487 call 0xdd3c70
0069b48c mov dword ptr [esp + 0x18], 1
0069b494 jmp 0x69b4cf
0069b496 mov ecx, dword ptr [esp + 0x10]
0069b49a push ecx
0069b49b mov edx, 1
0069b4a0 mov ecx, esi
0069b4a2 call 0x69a7b0
0069b4a7 jmp 0x69b4cf
0069b4a9 mov edx, dword ptr [esi]
0069b4ab mov eax, dword ptr [esp + 0x14]
0069b4af mov dword ptr [esi + edx*8 + 4], 1
0069b4b7 mov ecx, dword ptr [esi]
0069b4b9 mov dword ptr [esi + ecx*8 + 8], eax
0069b4bd mov edx, dword ptr [esi]
0069b4bf inc edx
0069b4c0 and edx, 0x80000007
0069b4c6 jns 0x69b4cd
0069b4c8 dec edx
0069b4c9 or edx, 0xfffffff8
0069b4cc inc edx
0069b4cd mov dword ptr [esi], edx
0069b4cf mov eax, dword ptr [esp + 0x1c]
0069b4d3 mov edi, dword ptr [eax + 0x1c]
0069b4d6 test edi, edi
0069b4d8 je 0x69b4f5
0069b4da lea ebx, [ebx]
0069b4e0 lea ecx, [esp + 0x20]
0069b4e4 push ecx
0069b4e5 mov edx, edi
0069b4e7 mov ecx, esi
0069b4e9 call 0x69d740
0069b4ee mov edi, dword ptr [edi + 0x20]
0069b4f1 test edi, edi
0069b4f3 jne 0x69b4e0
0069b4f5 cmp dword ptr [esp + 0x18], 0
0069b4fa je 0x69b502
0069b4fc dec dword ptr [esi + 0x5b0]
0069b502 pop edi
0069b503 pop esi
0069b504 pop ebx
0069b505 mov esp, ebp
0069b507 pop ebp
0069b508 ret 4
0069b50b popfd 
0069b50c int3 
0069b50d int3 
0069b50e int3 
0069b50f int3 

FUNCTION 0x69b510
0069b510 push ebp
0069b511 mov ebp, esp
0069b513 and esp, 0xfffffff0
0069b516 sub esp, 0x78
0069b519 movss xmm0, dword ptr [0xf1dc58]
0069b521 mov eax, dword ptr [ebp + 8]
0069b524 push esi
0069b525 push edi
0069b526 movss dword ptr [esp + 0x10], xmm0
0069b52c movss dword ptr [esp + 0x14], xmm0
0069b532 xorps xmm0, xmm0
0069b535 mov esi, edx
0069b537 push eax
0069b538 movss dword ptr [esp + 0x24], xmm0
0069b53e movss dword ptr [esp + 0x1c], xmm0
0069b544 movss xmm0, dword ptr [0xec6e14]
0069b54c push esi
0069b54d lea edx, [esp + 0x48]
0069b551 mov edi, ecx
0069b553 movss dword ptr [esp + 0x24], xmm0
0069b559 movss dword ptr [esp + 0x2c], xmm0
0069b55f call 0x69ac90
0069b564 mov esi, dword ptr [esi + 0xc]
0069b567 lea ecx, [esp + 0x10]
0069b56b push ecx
0069b56c mov edx, 0xb0bd77d7
0069b571 mov ecx, esi
0069b573 call 0x69e0d0
0069b578 lea edx, [esp + 0x14]
0069b57c push edx
0069b57d mov edx, 0xc7ba4741
0069b582 mov ecx, esi
0069b584 call 0x69e0d0
0069b589 lea eax, [esp + 0x20]
0069b58d push eax
0069b58e mov edx, 0xc78bc0fd
0069b593 mov ecx, esi
0069b595 call 0x69e0d0
0069b59a lea ecx, [esp + 0x18]
0069b59e push ecx
0069b59f mov edx, 0xb08cf06b
0069b5a4 mov ecx, esi
0069b5a6 call 0x69e0d0
0069b5ab lea edx, [esp + 0x1c]
0069b5af push edx
0069b5b0 mov edx, 0x1a9437d0
0069b5b5 mov ecx, esi
0069b5b7 call 0x69e0d0
0069b5bc lea eax, [esp + 0x24]
0069b5c0 push eax
0069b5c1 mov edx, 0x6d930746
0069b5c6 mov ecx, esi
0069b5c8 call 0x69e0d0
0069b5cd movss xmm1, dword ptr [esp + 0x10]
0069b5d3 mulss xmm1, dword ptr [0xec6fd4]
0069b5db movss dword ptr [esp + 0x10], xmm1
0069b5e1 movss xmm1, dword ptr [esp + 0x14]
0069b5e7 mulss xmm1, dword ptr [0xec6fd4]
0069b5ef lea ecx, [esp + 0x28]
0069b5f3 push ecx
0069b5f4 mov edx, 0x45e79640
0069b5f9 mov ecx, esi
0069b5fb movss dword ptr [esp + 0x18], xmm1
0069b601 mov dword ptr [esp + 0x2c], 0
0069b609 call 0x69e170
0069b60e lea edx, [esp + 0x2c]
0069b612 push edx
0069b613 mov edx, dword ptr [esp + 0x2c]
0069b617 push 0x5c369069
0069b61c mov ecx, 0x1c35620
0069b621 call 0x69e430
0069b626 test eax, eax
0069b628 je 0x69b642
0069b62a mov ecx, dword ptr [esp + 0x2c]
0069b62e mov esi, dword ptr [ecx]
0069b630 push 0
0069b632 push 0
0069b634 push 0
0069b636 mov edx, eax
0069b638 mov eax, dword ptr [esi + 0x18]
0069b63b push 0xbb05a9c1
0069b640 call eax
0069b642 lea ecx, [edi + 0x300]
0069b648 mov dword ptr [0x119622c], eax
0069b64d mov dword ptr [0x1196244], 1
0069b657 mov dword ptr [0x1196248], 5
0069b661 mov dword ptr [0x119624c], 6
0069b66b mov dword ptr [edi + 0x6e8], ecx
0069b671 call 0xd96ee0
0069b676 movss xmm0, dword ptr [0xec6e14]
0069b67e lea ecx, [esp + 0x40]
0069b682 lea edx, [esp + 0x30]
0069b686 mov dword ptr [esp + 0x3c], ecx
0069b68a push edx
0069b68b xor edx, edx
0069b68d mov ecx, 0x1196228
0069b692 mov dword ptr [esp + 0x34], 0x40090
0069b69a movss dword ptr [esp + 0x38], xmm0
0069b6a0 mov dword ptr [esp + 0x3c], 0x40
0069b6a8 call 0xdccf10
0069b6ad push eax
0069b6ae mov edx, 0x2116434
0069b6b3 mov ecx, 7
0069b6b8 call 0xdccf70
0069b6bd movss xmm0, dword ptr [0xec6fe0]
0069b6c5 movss xmm1, dword ptr [esp + 0x10]
0069b6cb xorps xmm1, xmm0
0069b6ce movss dword ptr [eax], xmm1
0069b6d2 movss xmm1, dword ptr [esp + 0x14]
0069b6d8 movss dword ptr [eax + 4], xmm1
0069b6dd xorps xmm1, xmm1
0069b6e0 movss dword ptr [eax + 8], xmm1
0069b6e5 or ecx, 0xffffffff
0069b6e8 mov dword ptr [eax + 0xc], ecx
0069b6eb movss xmm2, dword ptr [esp + 0x20]
0069b6f1 movss dword ptr [eax + 0x10], xmm2
0069b6f6 movss xmm2, dword ptr [esp + 0x18]
0069b6fc movss dword ptr [eax + 0x14], xmm2
0069b701 movss xmm2, dword ptr [esp + 0x10]
0069b707 movss dword ptr [eax + 0x18], xmm2
0069b70c movss xmm2, dword ptr [esp + 0x14]
0069b712 movss dword ptr [eax + 0x1c], xmm2
0069b717 mov dword ptr [eax + 0x24], ecx
0069b71a movss dword ptr [eax + 0x20], xmm1
0069b71f movss xmm2, dword ptr [esp + 0x1c]
0069b725 movss dword ptr [eax + 0x28], xmm2
0069b72a movss xmm2, dword ptr [esp + 0x18]
0069b730 movss dword ptr [eax + 0x2c], xmm2
0069b735 movss xmm2, dword ptr [esp + 0x10]
0069b73b movss dword ptr [eax + 0x30], xmm2
0069b740 movss xmm2, dword ptr [esp + 0x14]
0069b746 xorps xmm2, xmm0
0069b749 movss dword ptr [eax + 0x34], xmm2
0069b74e mov dword ptr [eax + 0x3c], ecx
0069b751 movss dword ptr [eax + 0x38], xmm1
0069b756 movss xmm2, dword ptr [esp + 0x1c]
0069b75c movss dword ptr [eax + 0x40], xmm2
0069b761 movss xmm2, dword ptr [esp + 0x24]
0069b767 movss dword ptr [eax + 0x44], xmm2
0069b76c movss xmm2, dword ptr [esp + 0x10]
0069b772 xorps xmm2, xmm0
0069b775 movss dword ptr [eax + 0x48], xmm2
0069b77a movss xmm2, dword ptr [esp + 0x14]
0069b780 xorps xmm2, xmm0
0069b783 mov dword ptr [eax + 0x54], ecx
0069b786 movss dword ptr [eax + 0x4c], xmm2
0069b78b movss dword ptr [eax + 0x50], xmm1
0069b790 movss xmm0, dword ptr [esp + 0x20]
0069b796 movss dword ptr [eax + 0x58], xmm0
0069b79b movss xmm0, dword ptr [esp + 0x24]
0069b7a1 mov ecx, 4
0069b7a6 movss dword ptr [eax + 0x5c], xmm0
0069b7ab call 0xdcc610
0069b7b0 pop edi
0069b7b1 pop esi
0069b7b2 mov esp, ebp
0069b7b4 pop ebp
0069b7b5 ret 4
0069b7b8 int3 
0069b7b9 int3 
0069b7ba int3 
0069b7bb int3 
0069b7bc int3 
0069b7bd int3 
0069b7be int3 
0069b7bf int3 
0069b7c0 sub esp, 0x14
0069b7c3 push ebx
0069b7c4 push ebp
0069b7c5 push esi
0069b7c6 mov ebx, edx
0069b7c8 push edi
0069b7c9 lea eax, [esp + 0x14]
0069b7cd mov esi, ecx
0069b7cf xor ebp, ebp
0069b7d1 push eax
0069b7d2 mov edx, 0x1c81f48a
0069b7d7 mov ecx, ebx
0069b7d9 mov dword ptr [esp + 0x20], ebx
0069b7dd mov dword ptr [esp + 0x18], ebp
0069b7e1 mov dword ptr [esp + 0x14], ebp
0069b7e5 call 0x69e170
0069b7ea mov edx, dword ptr [esp + 0x14]
0069b7ee cmp edx, ebp
0069b7f0 je 0x69b911
0069b7f6 cmp edx, 0x4905ed7b
0069b7fc je 0x69b911
0069b802 lea ecx, [esp + 0x20]
0069b806 push ecx
0069b807 push 0xe26c9b5d
0069b80c mov ecx, 0x1c35620
0069b811 call 0x69e430
0069b816 cmp eax, ebp
0069b818 je 0x69b835
0069b81a mov ecx, dword ptr [esp + 0x20]
0069b81e mov edi, dword ptr [ecx]
0069b820 push ebp
0069b821 push ebp
0069b822 push ebp
0069b823 mov edx, eax
0069b825 mov eax, dword ptr [edi + 0x18]
0069b828 push 0xbb05a9c1
0069b82d call eax
0069b82f mov edi, eax
0069b831 test edi, edi
0069b833 jne 0x69b85f
0069b835 mov eax, dword ptr [esp + 0x14]
0069b839 mov ecx, dword ptr [esi]
0069b83b mov dword ptr [esi + ecx*8 + 4], 1
0069b843 mov edx, dword ptr [esi]
0069b845 mov dword ptr [esi + edx*8 + 8], eax
0069b849 mov eax, dword ptr [esi]
0069b84b inc eax
0069b84c and eax, 0x80000007
0069b851 jns 0x69b858
0069b853 dec eax
0069b854 or eax, 0xfffffff8
0069b857 inc eax
0069b858 mov dword ptr [esi], eax
0069b85a jmp 0x69b911
0069b85f lea ecx, [esp + 0x10]
0069b863 push ecx
0069b864 mov edx, 0x1c0390be
0069b869 mov ecx, ebx
0069b86b call 0x69e170
0069b870 mov ebx, dword ptr [esp + 0x10]
0069b874 test ebx, ebx
0069b876 je 0x69b911
0069b87c mov edx, ebx
0069b87e mov ecx, edi
0069b880 call 0x55c8b0
0069b885 mov ebp, eax
0069b887 test ebp, ebp
0069b889 jne 0x69b8ad
0069b88b mov edx, dword ptr [esi]
0069b88d mov dword ptr [esi + edx*8 + 4], 2
0069b895 mov eax, dword ptr [esi]
0069b897 mov dword ptr [esi + eax*8 + 8], ebx
0069b89b mov ecx, dword ptr [esi]
0069b89d inc ecx
0069b89e and ecx, 0x80000007
0069b8a4 jns 0x69b8ab
0069b8a6 dec ecx
0069b8a7 or ecx, 0xfffffff8
0069b8aa inc ecx
0069b8ab mov dword ptr [esi], ecx
0069b8ad inc dword ptr [esi + 0x5b0]
0069b8b3 mov eax, dword ptr [esi + 0x5b0]
0069b8b9 xorps xmm0, xmm0
0069b8bc mov ecx, dword ptr [esp + 0x1c]
0069b8c0 lea edx, [esp + 0x18]
0069b8c4 push edx
0069b8c5 mov dword ptr [esi + eax*4 + 0x5b4], ebp
0069b8cc mov edx, 0xa7f2d377
0069b8d1 movss dword ptr [esp + 0x1c], xmm0
0069b8d7 call 0x69e0d0
0069b8dc movss xmm1, dword ptr [edi + 8]
0069b8e1 movss xmm0, dword ptr [esp + 0x18]
0069b8e7 ucomiss xmm1, xmm0
0069b8ea lahf 
0069b8eb test ah, 0x44
0069b8ee jnp 0x69b8ff
0069b8f0 push ecx
0069b8f1 xor edx, edx
0069b8f3 mov ecx, edi
0069b8f5 movss dword ptr [esp], xmm0
0069b8fa call 0xdd3c70
0069b8ff mov eax, dword ptr [esp + 0x2c]
0069b903 mov dword ptr [eax], 1
0069b909 test ebp, ebp
0069b90b jne 0x69b992
0069b911 mov eax, dword ptr [esi + 0x5b0]
0069b917 test eax, eax
0069b919 js 0x69b936
0069b91b cmp dword ptr [esi + eax*4 + 0x5b4], 0
0069b923 je 0x69b936
0069b925 mov eax, dword ptr [esi + eax*4 + 0x5b4]
0069b92c pop edi
0069b92d pop esi
0069b92e pop ebp
0069b92f pop ebx
0069b930 add esp, 0x14
0069b933 ret 8
0069b936 mov ebx, dword ptr [esp + 0x28]
0069b93a test ebx, ebx
0069b93c je 0x69b992
0069b93e lea ecx, [esp + 0x10]
0069b942 push ecx
0069b943 mov ecx, dword ptr [esp + 0x20]
0069b947 mov edx, 0xa8efaf36
0069b94c call 0x69e170
0069b951 mov edi, dword ptr [esp + 0x10]
0069b955 test edi, edi
0069b957 je 0x69b992
0069b959 mov edx, edi
0069b95b mov ecx, ebx
0069b95d call 0x55c8b0
0069b962 test eax, eax
0069b964 jne 0x69b994
0069b966 mov edx, dword ptr [esi]
0069b968 mov dword ptr [esi + edx*8 + 4], 2
0069b970 mov ecx, dword ptr [esi]
0069b972 mov dword ptr [esi + ecx*8 + 8], edi
0069b976 mov edx, dword ptr [esi]
0069b978 inc edx
0069b979 and edx, 0x80000007
0069b97f jns 0x69b986
0069b981 dec edx
0069b982 or edx, 0xfffffff8
0069b985 inc edx
0069b986 pop edi
0069b987 mov dword ptr [esi], edx
0069b989 pop esi
0069b98a pop ebp
0069b98b pop ebx
0069b98c add esp, 0x14
0069b98f ret 8
0069b992 mov eax, ebp
0069b994 pop edi
0069b995 pop esi
0069b996 pop ebp
0069b997 pop ebx
0069b998 add esp, 0x14
0069b99b ret 8
0069b99e add cl, ah

FUNCTION 0x69a1f0
0069a1f0 push ecx
0069a1f1 mov eax, ecx
0069a1f3 lea ecx, [eax + 0x300]
0069a1f9 push esi
0069a1fa mov esi, edx
0069a1fc mov dword ptr [eax + 0x6e8], ecx
0069a202 call 0xd96ee0
0069a207 xorps xmm0, xmm0
0069a20a mov ecx, dword ptr [esi + 0xc]
0069a20d lea eax, [esp + 4]
0069a211 push eax
0069a212 mov edx, 0x4ddb6a2b
0069a217 movss dword ptr [esp + 8], xmm0
0069a21d call 0x69e0d0
0069a222 movss xmm1, dword ptr [esp + 4]
0069a228 movss xmm2, dword ptr [0xee2080]
0069a230 mov eax, dword ptr [esp + 0xc]
0069a234 sub esp, 0x10
0069a237 movaps xmm0, xmm1
0069a23a mulss xmm0, dword ptr [0xec7050]
0069a242 movss dword ptr [esp + 0xc], xmm2
0069a248 addss xmm1, xmm0
0069a24c movss dword ptr [esp + 8], xmm1
0069a252 movss xmm1, dword ptr [0xf20904]
0069a25a movss dword ptr [esp + 4], xmm1
0069a260 mov esi, 0xffc0ffff
0069a265 movss dword ptr [esp], xmm0
0069a26a call 0x699ff0
0069a26f pop esi
0069a270 pop ecx
0069a271 ret 4
0069a274 int3 
0069a275 int3 
0069a276 int3 
0069a277 int3 
0069a278 int3 
0069a279 int3 
0069a27a int3 
0069a27b int3 
0069a27c int3 
0069a27d int3 
0069a27e int3 
0069a27f int3 

FUNCTION 0x698ef0
00698ef0 push ebx
00698ef1 push ebp
00698ef2 push edi
00698ef3 mov edi, dword ptr [esp + 0x10]
00698ef7 cmp dword ptr [edi + 0x2c], 0
00698efb mov ebx, edx
00698efd mov ebp, ecx
00698eff je 0x698f10
00698f01 mov ecx, dword ptr [edi + 0x2c]
00698f04 mov eax, dword ptr [ecx]
00698f06 mov eax, dword ptr [eax]
00698f08 push edi
00698f09 call eax
00698f0b cmp eax, 1
00698f0e je 0x698f38
00698f10 push esi
00698f11 mov esi, dword ptr [ebp + 0x740]
00698f17 add ebp, 0x738
00698f1d cmp esi, ebp
00698f1f je 0x698f37
00698f21 mov eax, dword ptr [esi]
00698f23 mov eax, dword ptr [eax]
00698f25 push edi
00698f26 mov edx, ebx
00698f28 mov ecx, esi
00698f2a call eax
00698f2c test eax, eax
00698f2e jne 0x698f37
00698f30 mov esi, dword ptr [esi + 8]
00698f33 cmp esi, ebp
00698f35 jne 0x698f21
00698f37 pop esi
00698f38 pop edi
00698f39 pop ebp
00698f3a pop ebx
00698f3b ret 4
00698f3e adc ecx, esp
00698f40 mov eax, dword ptr [ecx + 0x73c]
00698f46 add ecx, 0x738
00698f4c mov dword ptr [edx + 8], ecx
00698f4f mov dword ptr [edx + 4], eax
00698f52 mov ecx, eax
00698f54 mov dword ptr [ecx + 8], edx
00698f57 mov eax, dword ptr [edx + 8]
00698f5a mov dword ptr [eax + 4], edx
00698f5d ret 
00698f5e xor ecx, esp
00698f60 mov eax, dword ptr [ecx + 0x740]
00698f66 mov eax, dword ptr [eax + 4]
00698f69 mov dword ptr [edx + 4], eax
00698f6c mov ecx, dword ptr [ecx + 0x740]
00698f72 mov dword ptr [edx + 8], ecx
00698f75 mov dword ptr [eax + 8], edx
00698f78 mov ecx, dword ptr [edx + 8]
00698f7b mov dword ptr [ecx + 4], edx
00698f7e ret 
00698f7f int3 
