Function at 0x433180
Capabilities:
Check os version

Disassembly:
push ebp
mov ebp, esp
and esp, 0xfffffff8
push 0xffffffffffffffff
push 0x66739a
mov eax, dword fs:[0]
push eax
sub esp, 0x94
push esi
push edi
mov eax, dword [0x6d35d0]
xor eax, esp
push eax
lea eax, [esp + 0xa0]
mov dword fs:[0], eax
mov eax, dword [ebx + 8]
mov ecx, dword [eax + 0x13958]
mov dword [esp + 0x34], ecx
fild dword [esp + 0x34]
mov ecx, dword [eax + 0xdf480]
mov edx, dword [eax + 0x1395c]
fdiv qword [0x6a1590]
xor esi, esi
mov dword [esp + 0x38], edx
fstp dword [esp + 0x30]
cmp ecx, esi
je 0x4331e7
mov ecx, dword [ecx + 0xc]
jmp 0x4331e9
xor ecx, ecx
cmp byte [0xf6273c], 0
mov edx, dword [ecx + 0x2c0]
mov ecx, dword [ecx + 0x2c4]
mov byte [eax + 0xdf488], 0
mov dword [esp + 0x34], edx
mov dword [esp + 0x38], ecx
mov dword [ebx + 0x31a0], esi
mov dword [ebx + 0x31a4], esi
je 0x433225
push 0x350
call fcn.0062d956
jmp 0x43324a
cmp dword [0xf62698], esi
jne 0x433240
mov byte [0xf6273c], 1
call fcn.0046ef62
mov byte [0xf6273c], 0
push 0x350
call fcn.0046eda1
mov dword [esp + 0x30], eax
add esp, 4
mov dword [esp + 0xa8], esi
cmp eax, esi
je 0x433267
mov edi, dword [ebx + 8]
push eax
call fcn.00445390
jmp 0x433269
xor eax, eax
or esi, 0xffffffff
mov dword [esp + 0xa8], esi
mov edx, dword [ebx + 0x14]
mov dword [ebx + 0x10], eax
mov eax, dword [ebx + 8]
lea ecx, [ebx + 0x14]
mov dword [ebx + 0x1c], eax
mov eax, dword [edx]
call eax
mov eax, dword [ebx + 0x10]
push 0x1d
mov edi, 0xf
push str.bg_bg_000_000_000_000_000.bmp
lea ecx, [esp + 0x18]
mov dword [ebx + 0x20], eax
mov dword [esp + 0x30], edi
mov dword [esp + 0x2c], 0
mov byte [esp + 0x1c], 0
call fcn.00404c00
push 0
push 1
mov dword [esp + 0xb0], 1
mov edx, dword [ebx + 0x155c]
mov edx, dword [edx + 0x140]
lea ecx, [ebx + 0x155c]
push 0x15
lea eax, [esp + 0x1c]
push eax
call edx
mov dword [esp + 0xa8], esi
cmp dword [esp + 0x28], 0x10
jb 0x4332f7
mov eax, dword [esp + 0x14]
push eax
call fcn.0046efcb
add esp, 4
push 0x10
push str.obje000_000.bmp
lea ecx, [esp + 0x18]
mov dword [esp + 0x30], edi
mov dword [esp + 0x2c], 0
mov byte [esp + 0x1c], 0
call fcn.00404c00
push 0
push 1
mov dword [esp + 0xb0], 2
mov edx, dword [ebx + 0x15f0]
mov edx, dword [edx + 0x140]
lea ecx, [ebx + 0x15f0]
push 0x15
lea eax, [esp + 0x1c]
push eax
call edx
mov dword [esp + 0xa8], esi
cmp dword [esp + 0x28], 0x10
jb 0x43335d
mov eax, dword [esp + 0x14]
push eax
call fcn.0046efcb
add esp, 4
push 0x10
push str.obje000_001.bmp
lea ecx, [esp + 0x18]
mov dword [esp + 0x30], edi
mov dword [esp + 0x2c], 0
mov byte [esp + 0x1c], 0
call fcn.00404c00
push 0
push 1
mov dword [esp + 0xb0], 3
mov edx, dword [ebx + 0x1684]
mov edx, dword [edx + 0x140]
lea edi, [ebx + 0x1684]
push 0x15
lea eax, [esp + 0x1c]
push eax
mov ecx, edi
call edx
mov dword [esp + 0xa8], esi
cmp dword [esp + 0x28], 0x10
jb 0x4333c5
mov eax, dword [esp + 0x14]
push eax
call fcn.0046efcb
add esp, 4
mov eax, 6
mov ecx, 1
mov dword [ebx + 0x171c], edi
mov dword [ebx + 0x1720], eax
mov dword [ebx + 0x1724], ecx
mov eax, dword [ebx + 8]
mov eax, dword [eax + 0x20e8]
cmp eax, ecx
jne 0x433458
push 0x10
push str.objm000_000.bmp
lea ecx, [esp + 0x18]
mov dword [esp + 0x30], 0xf
mov dword [esp + 0x2c], 0
mov byte [esp + 0x1c], 0
call fcn.00404c00
push 0
push 1
mov dword [esp + 0xb0], 4
mov edx, dword [ebx + 0x1728]
mov edx, dword [edx + 0x140]
lea ecx, [ebx + 0x1728]
push 0x15
lea eax, [esp + 0x1c]
push eax
call edx
mov dword [esp + 0xa8], esi
cmp dword [esp + 0x28], 0x10
jb 0x433458
mov eax, dword [esp + 0x14]
push eax
call fcn.0046efcb
add esp, 4
push 0x10
xor edi, edi
push str.obje002_000.bmp
lea ecx, [esp + 0x18]
mov dword [esp + 0x30], 0xf
mov dword [esp + 0x2c], edi
mov byte [esp + 0x1c], 0
call fcn.00404c00
push edi
push 1
mov dword [esp + 0xb0], 5
mov edx, dword [ebx + 0x17bc]
mov edx, dword [edx + 0x140]
lea ecx, [ebx + 0x17bc]
push 0x15
lea eax, [esp + 0x1c]
push eax
call edx
mov dword [esp + 0xa8], esi
cmp dword [esp + 0x28], 0x10
jb 0x4334bf
mov eax, dword [esp + 0x14]
push eax
call fcn.0046efcb
add esp, 4
fld dword [esp + 0x30]
mov dword [esp + 0x2c], edi
fmul qword [0x6a1f20]
mov dword [esp + 0x40], 0
call fcn.00631650
mov dword [esp + 0x48], eax
lea esi, [ebx + 0x1850]
jmp 0x4334f0
mov edx, dword [esi]
mov edx, dword [edx + 0x84]
mov eax, 4
push eax
push edi
mov eax, 3
push eax
push edi
mov eax, 2
push eax
push edi
mov eax, 1
push eax
mov eax, dword [esp + 0x5c]
push edi
push eax
push edi
mov eax, 5
push eax
mov eax, 0xa
push eax
lea eax, [ebx + 0x17bc]
push eax
mov ecx, esi
call edx
mov eax, dword [esi]
mov edx, dword [eax + 0x18]
push 0
mov ecx, esi
call edx
mov eax, dword [esi]
mov edx, dword [eax + 8]
push 1
mov ecx, esi
call edx
mov eax, dword [esi]
mov edx, dword [eax + 0xc]
push 0
mov ecx, esi
call edx
fild dword [esp + 0x2c]
fmul qword [0x6a1f30]
fadd qword [0x6a1f28]
fmul dword [esp + 0x30]
call fcn.00631650
mov ecx, dword [esp + 0x48]
mov edx, dword [esi]
mov edx, dword [edx + 0x2c]
push ecx
push eax
mov ecx, esi
call edx
mov eax, dword [esi]
mov edx, dword [eax + 0x30]
lea ecx, [esp + 0x5c]
push ecx
mov ecx, esi
call edx
mov eax, dword [eax]
add eax, dword [esp + 0x34]
lea ecx, [esp + 0x64]
mov dword [esp + 0x4c], eax
mov eax, dword [esi]
mov edx, dword [eax + 0x30]
push ecx
mov ecx, esi
call edx
mov eax, dword [eax + 4]
add eax, dword [esp + 0x38]
lea ecx, [esp + 0x6c]
mov dword [esp + 0x50], eax
mov eax, dword [esi]
mov edx, dword [eax + 0x34]
push ecx
mov ecx, esi
call edx
fild dword [eax]
fmul dword [esp + 0x30]
call fcn.00631650
mov dword [esp + 0x2c], eax
mov eax, dword [esi]
mov edx, dword [eax + 0x30]
lea ecx, [esp + 0x74]
push ecx
mov ecx, esi
call edx
mov eax, dword [eax]
add eax, dword [esp + 0x2c]
lea ecx, [esp + 0x84]
add eax, dword [esp + 0x34]
push ecx
mov dword [esp + 0x58], eax
mov eax, dword [esi]
mov edx, dword [eax + 0x34]
mov ecx, esi
call edx
fild dword [eax + 4]
fmul dword [esp + 0x30]
call fcn.00631650
mov dword [esp + 0x2c], eax
mov eax, dword [esi]
mov edx, dword [eax + 0x30]
lea ecx, [esp + 0x7c]
push ecx
mov ecx, esi
call edx
mov eax, dword [eax + 4]
add eax, dword [esp + 0x2c]
mov ecx, dword [esp + 0x4c]
add eax, dword [esp + 0x38]
mov edx, dword [esi]
mov edx, dword [edx + 0x38]
mov dword [esp + 0x58], eax
sub esp, 0x10
mov eax, esp
mov dword [eax], ecx
mov ecx, dword [esp + 0x60]
mov dword [eax + 4], ecx
mov ecx, dword [esp + 0x64]
mov dword [eax + 8], ecx
mov ecx, dword [esp + 0x68]
mov dword [eax + 0xc], ecx
mov ecx, esi
call edx
push 0
push esi
lea eax, [ebx + 0x1d00]
push eax
call fcn.00442680
inc edi
add esi, 0x78
mov dword [esp + 0x2c], edi
cmp edi, 0xa
jb 0x4334f0
push 0x10
xor edi, edi
push str.obj_f002_000.bmp
lea ecx, [esp + 0x18]
mov dword [esp + 0x30], 0xf
mov dword [esp + 0x2c], edi
mov byte [esp + 0x1c], 0
call fcn.00404c00
push edi
push 1
mov dword [esp + 0xb0], 6
mov eax, dword [ebx + 0x1d38]
mov eax, dword [eax + 0x140]
lea ecx, [ebx + 0x1d38]
push 0x15
lea edx, [esp + 0x1c]
push edx
call eax
mov dword [esp + 0xa8], 0xffffffff
cmp dword [esp + 0x28], 0x10
jb 0x43371f
cmp byte [0xf6273d], 0
je 0x4336e1
mov ecx, dword [esp + 0x14]
push ecx
call fcn.0062da20
add esp, 4
jmp 0x43371f
mov edx, dword [esp + 0x14]
mov esi, dword [0xf62698]
push edx
call fcn.0046ee0e
cmp dword [0xf62670], edi
jne 0x43371f
mov ecx, dword [0xf62698]
mov byte [0xf6273d], 1
cmp ecx, edi
je 0x433712
mov eax, dword [ecx]
mov edx, dword [eax]
push 1
call edx
mov dword [0xf62698], edi
mov byte [0xf6273d], 0
mov dword [esp + 0x2c], edi
lea esi, [ebx + 0x1dcc]
lea esp, [esp]
mov eax, 4
push eax
xor eax, eax
push eax
mov edx, dword [esi]
mov eax, 3
push eax
xor eax, eax
push eax
mov eax, 2
push eax
xor eax, eax
push eax
mov eax, 1
push eax
xor eax, eax
push eax
push eax
push eax
mov eax, 5
push eax
mov eax, 1
push eax
lea eax, [ebx + 0x1d38]
push eax
mov eax, dword [edx + 0x84]
mov ecx, esi
call eax
mov edx, dword [esi]
mov eax, dword [edx + 0x18]
push 0
mov ecx, esi
call eax
mov edx, dword [esi]
mov eax, dword [edx + 8]
push 1
mov ecx, esi
call eax
mov edx, dword [esi]
mov eax, dword [edx + 0xc]
push 0
mov ecx, esi
call eax
mov eax, 0x55555556
imul edi
mov eax, edx
shr eax, 0x1f
add eax, edx
lea ecx, [eax + eax*2]
sub edi, ecx
mov dword [esp + 0x44], edi
mov dword [esp + 0x3c], eax
fild dword [esp + 0x44]
fmul qword [0x6a1f18]
fadd qword [0x6a16e0]
fld dword [esp + 0x30]
fld st(0)
fmulp st(2)
fxch st(1)
call fcn.00631650
fild dword [esp + 0x3c]
mov edi, eax
fmul qword [0x6a15a0]
fadd qword [0x6a1f10]
fmulp st(1)
call fcn.00631650
mov edx, dword [esi]
push eax
mov eax, dword [edx + 0x2c]
push edi
mov ecx, esi
call eax
mov edx, dword [esi]
mov edx, dword [edx + 0x30]
lea eax, [esp + 0x7c]
push eax
mov ecx, esi
call edx
mov edi, dword [eax]
add edi, dword [esp + 0x34]
mov eax, dword [esi]
mov edx, dword [eax + 0x30]
lea ecx, [esp + 0x84]
push ecx
mov ecx, esi
call edx
mov eax, dword [eax + 4]
add eax, dword [esp + 0x38]
lea ecx, [esp + 0x74]
mov dword [esp + 0x14], eax
mov eax, dword [esi]
mov edx, dword [eax + 0x34]
push ecx
mov ecx, esi
call edx
fild dword [eax]
fmul dword [esp + 0x30]
call fcn.00631650
mov dword [esp + 0x3c], eax
mov eax, dword [esi]
mov edx, dword [eax + 0x30]
lea ecx, [esp + 0x5c]
push ecx
mov ecx, esi
call edx
mov edx, dword [esp + 0x34]
mov ecx, dword [esp + 0x3c]
add ecx, edx
add ecx, dword [eax]
mov eax, dword [esi]
mov edx, dword [eax + 0x34]
mov dword [esp + 0x18], ecx
lea ecx, [esp + 0x64]
push ecx
mov ecx, esi
call edx
fild dword [eax + 4]
fmul dword [esp + 0x30]
call fcn.00631650
mov dword [esp + 0x3c], eax
mov eax, dword [esi]
mov edx, dword [eax + 0x30]
lea ecx, [esp + 0x6c]
push ecx
mov ecx, esi
call edx
mov eax, dword [eax + 4]
add eax, dword [esp + 0x3c]
mov edx, dword [esi]
add eax, dword [esp + 0x38]
sub esp, 0x10
mov ecx, esp
mov dword [ecx], edi
mov edi, dword [esp + 0x24]
mov dword [ecx + 4], edi
mov edi, dword [esp + 0x28]
mov dword [ecx + 8], edi
mov dword [ecx + 0xc], eax
mov eax, dword [edx + 0x38]
mov ecx, esi
call eax
push 0
push esi
lea eax, [ebx + 0x24d4]
push eax
call fcn.00442680
mov edi, dword [esp + 0x2c]
inc edi
add esi, 0x78
mov dword [esp + 0x2c], edi
cmp edi, 0xf
jb 0x433730
push 0x10
push str.obj_f002_001.bmp
lea ecx, [esp + 0x18]
mov dword [esp + 0x30], 0xf
mov dword [esp + 0x2c], 0
mov byte [esp + 0x1c], 0
call fcn.00404c00
push 0
push 1
mov dword [esp + 0xb0], 7
mov edx, dword [ebx + 0x2db8]
mov edx, dword [edx + 0x140]
lea ecx, [ebx + 0x2db8]
push 0x15
lea eax, [esp + 0x1c]
push eax
call edx
mov dword [esp + 0xa8], 0xffffffff
cmp dword [esp + 0x28], 0x10
jb 0x433997
cmp byte [0xf6273d], 0
je 0x433954
mov eax, dword [esp + 0x14]
push eax
call fcn.0062da20
add esp, 4
jmp 0x433997
mov ecx, dword [esp + 0x14]
mov esi, dword [0xf62698]
push ecx
call fcn.0046ee0e
cmp dword [0xf62670], 0
jne 0x433997
mov ecx, dword [0xf62698]
mov byte [0xf6273d], 1
test ecx, ecx
je 0x433986
mov edx, dword [ecx]
mov eax, dword [edx]
push 1
call eax
mov dword [0xf62698], 0
mov byte [0xf6273d], 0
push 0x10
push str.obje003_001.bmp
lea ecx, [esp + 0x18]
mov dword [esp + 0x30], 0xf
mov dword [esp + 0x2c], 0
mov byte [esp + 0x1c], 0
call fcn.00404c00
push 0
push 1
mov dword [esp + 0xb0], 8
mov edx, dword [ebx + 0x2f30]
mov edx, dword [edx + 0x140]
lea ecx, [ebx + 0x2f30]
push 0x15
lea eax, [esp + 0x1c]
push eax
call edx
mov dword [esp + 0xa8], 0xffffffff
cmp dword [esp + 0x28], 0x10
jb 0x433a53
cmp byte [0xf6273d], 0
je 0x433a10
mov eax, dword [esp + 0x14]
push eax
call fcn.0062da20
add esp, 4
jmp 0x433a53
mov ecx, dword [esp + 0x14]
mov esi, dword [0xf62698]
push ecx
call fcn.0046ee0e
cmp dword [0xf62670], 0
jne 0x433a53
mov ecx, dword [0xf62698]
mov byte [0xf6273d], 1
test ecx, ecx
je 0x433a42
mov edx, dword [ecx]
mov eax, dword [edx]
push 1
call eax
mov dword [0xf62698], 0
mov byte [0xf6273d], 0
push 0x10
push str.obje003_002.bmp
lea ecx, [esp + 0x18]
mov dword [esp + 0x30], 0xf
mov dword [esp + 0x2c], 0
mov byte [esp + 0x1c], 0
call fcn.00404c00
push 0
push 1
mov dword [esp + 0xb0], 9
mov edx, dword [ebx + 0x3068]
mov edx, dword [edx + 0x140]
lea edi, [ebx + 0x3068]
push 0x15
lea eax, [esp + 0x1c]
push eax
mov ecx, edi
call edx
mov dword [esp + 0xa8], 0xffffffff
cmp dword [esp + 0x28], 0x10
jb 0x433b11
cmp byte [0xf6273d], 0
je 0x433ace
mov eax, dword [esp + 0x14]
push eax
call fcn.0062da20
add esp, 4
jmp 0x433b11
mov ecx, dword [esp + 0x14]
mov esi, dword [0xf62698]
push ecx
call fcn.0046ee0e
cmp dword [0xf62670], 0
jne 0x433b11
mov ecx, dword [0xf62698]
mov byte [0xf6273d], 1
test ecx, ecx
je 0x433b00
mov edx, dword [ecx]
mov eax, dword [edx]
push 1
call eax
mov dword [0xf62698], 0
mov byte [0xf6273d], 0
mov ecx, 1
push 0x10
mov eax, 0xa
mov dword [ebx + 0x3108], ecx
push str.obje003_003.bmp
lea ecx, [esp + 0x18]
mov dword [ebx + 0x3100], edi
mov dword [ebx + 0x3104], eax
mov dword [esp + 0x30], 0xf
mov dword [esp + 0x2c], 0
mov byte [esp + 0x1c], 0
call fcn.00404c00
push 0
push 1
mov dword [esp + 0xb0], 0xa
mov edx, dword [ebx + 0x310c]
mov edx, dword [edx + 0x140]
lea ecx, [ebx + 0x310c]
push 0x15
lea eax, [esp + 0x1c]
push eax
call edx
mov dword [esp + 0xa8], 0xffffffff
cmp dword [esp + 0x28], 0x10
jb 0x433be9
cmp byte [0xf6273d], 0
je 0x433ba6
mov eax, dword [esp + 0x14]
push eax
call fcn.0062da20
add esp, 4
jmp 0x433be9
mov ecx, dword [esp + 0x14]
mov esi, dword [0xf62698]
push ecx
call fcn.0046ee0e
cmp dword [0xf62670], 0
jne 0x433be9
mov ecx, dword [0xf62698]
mov byte [0xf6273d], 1
test ecx, ecx
je 0x433bd8
mov edx, dword [ecx]
mov eax, dword [edx]
push 1
call eax
mov dword [0xf62698], 0
mov byte [0xf6273d], 0
push 0x10
push str.obje003_004.bmp
lea ecx, [esp + 0x18]
mov dword [esp + 0x30], 0xf
mov dword [esp + 0x2c], 0
mov byte [esp + 0x1c], 0
call fcn.00404c00
push 0
push 1
mov dword [esp + 0xb0], 0xb
mov edx, dword [ebx + 0x2fc4]
mov edx, dword [edx + 0x140]
lea edi, [ebx + 0x2fc4]
push 0x15
lea eax, [esp + 0x1c]
push eax
mov ecx, edi
call edx
mov dword [esp + 0xa8], 0xffffffff
cmp dword [esp + 0x28], 0x10
jb 0x433ca7
cmp byte [0xf6273d], 0
je 0x433c64
mov eax, dword [esp + 0x14]
push eax
call fcn.0062da20
add esp, 4
jmp 0x433ca7
mov ecx, dword [esp + 0x14]
mov esi, dword [0xf62698]
push ecx
call fcn.0046ee0e
cmp dword [0xf62670], 0
jne 0x433ca7
mov ecx, dword [0xf62698]
mov byte [0xf6273d], 1
test ecx, ecx
je 0x433c96
mov edx, dword [ecx]
mov eax, dword [edx]
push 1
call eax
mov dword [0xf62698], 0
mov byte [0xf6273d], 0
mov dword [ebx + 0x305c], edi
mov eax, 0xa
mov dword [ebx + 0x3060], eax
mov ecx, 1
mov dword [ebx + 0x3064], ecx
mov eax, dword [ebx + 8]
or esi, 0xffffffff
mov ecx, 2
mov dword [ebx + 0x1d08], eax
mov dword [ebx + 0x24dc], eax
mov dword [ebx + 0x1d2c], ecx
mov dword [ebx + 0x2500], ecx
mov byte [ebx + 0x31ac], 0
mov dword [ebx + 0x31b0], esi
mov dword [ebx + 0x31b4], esi
mov dword [ebx + 0x31bc], esi
mov byte [ebx + 0x31c0], 0
mov dword [ebx + 0x33e8], eax
test byte [eax + 0x2fd0], 4
je 0x434054
push 0x16
push str.sys_1obj_f700_000.bmp
lea ecx, [esp + 0x18]
mov dword [esp + 0x30], 0xf
mov dword [esp + 0x2c], 0
mov byte [esp + 0x1c], 0
call fcn.00404c00
push 0
push 1
mov dword [esp + 0xb0], 0xc
mov edx, dword [ebx + 0x31c8]
mov edx, dword [edx + 0x140]
lea ecx, [ebx + 0x31c8]
push 0x15
lea eax, [esp + 0x1c]
push eax
call edx
mov dword [esp + 0xa8], esi
cmp dword [esp + 0x28], 0x10
jb 0x433dd1
cmp byte [0xf6273d], 0
je 0x433d8e
mov eax, dword [esp + 0x14]
push eax
call fcn.0062da20
add esp, 4
jmp 0x433dd1
mov ecx, dword [esp + 0x14]
mov esi, dword [0xf62698]
push ecx
call fcn.0046ee0e
cmp dword [0xf62670], 0
jne 0x433dd1
mov ecx, dword [0xf62698]
mov byte [0xf6273d], 1
test ecx, ecx
je 0x433dc0
mov edx, dword [ecx]
mov eax, dword [edx]
push 1
call eax
mov dword [0xf62698], 0
mov byte [0xf6273d], 0
push 0x16
push str.sys_1objj700_001.bmp
lea ecx, [esp + 0x18]
mov dword [esp + 0x30], 0xf
mov dword [esp + 0x2c], 0
mov byte [esp + 0x1c], 0
call fcn.00404c00
push 0
push 1
mov dword [esp + 0xb0], 0xd
mov edx, dword [ebx + 0x325c]
mov edx, dword [edx + 0x140]
lea ecx, [ebx + 0x325c]
push 0x15
lea eax, [esp + 0x1c]
push eax
call edx
mov dword [esp + 0xa8], 0xffffffff
cmp dword [esp + 0x28], 0x10
jb 0x433e8d
cmp byte [0xf6273d], 0
je 0x433e4a
mov eax, dword [esp + 0x14]
push eax
call fcn.0062da20
add esp, 4
jmp 0x433e8d
mov ecx, dword [esp + 0x14]
mov esi, dword [0xf62698]
push ecx
call fcn.0046ee0e
cmp dword [0xf62670], 0
jne 0x433e8d
mov ecx, dword [0xf62698]
mov byte [0xf6273d], 1
test ecx, ecx
je 0x433e7c
mov edx, dword [ecx]
mov eax, dword [edx]
push 1
call eax
mov dword [0xf62698], 0
mov byte [0xf6273d], 0
fld dword [esp + 0x30]
xor edi, edi
fmul qword [0x6a17f8]
mov dword [esp + 0x2c], edi
mov dword [esp + 0x48], 4
mov dword [esp + 0x70], 3
mov dword [esp + 0x68], 5
call fcn.00631650
mov dword [esp + 0x60], eax
lea esi, [ebx + 0x32f0]
mov eax, dword [esp + 0x48]
mov ecx, dword [esp + 0x70]
push eax
mov edx, dword [esi]
push edi
push ecx
mov edx, dword [edx + 0x84]
push edi
mov eax, 2
push eax
push edi
mov eax, 1
push eax
push edi
xor eax, eax
push eax
mov eax, dword [esp + 0x8c]
push edi
push eax
mov eax, 2
push eax
lea eax, [ebx + 0x325c]
push eax
mov ecx, esi
call edx
mov eax, dword [esi]
mov edx, dword [eax + 0x18]
push 0
mov ecx, esi
call edx
mov eax, dword [esi]
mov edx, dword [eax + 8]
push 1
mov ecx, esi
call edx
mov eax, dword [esi]
mov edx, dword [eax + 0xc]
push 1
mov ecx, esi
call edx
fild dword [esp + 0x2c]
fmul qword [0x6a1f58]
fadd qword [0x6a2498]
fmul dword [esp + 0x30]
call fcn.00631650
mov ecx, dword [esp + 0x60]
mov edx, dword [esi]
mov edx, dword [edx + 0x2c]
push ecx
push eax
mov ecx, esi
call edx
mov eax, dword [esi]
mov edx, dword [eax + 0x30]
lea ecx, [esp + 0x7c]
push ecx
mov ecx, esi
call edx
mov eax, dword [eax]
add eax, dword [esp + 0x34]
lea ecx, [esp + 0x84]
mov dword [esp + 0x10], eax
mov eax, dword [esi]
mov edx, dword [eax + 0x30]
push ecx
mov ecx, esi
call edx
mov eax, dword [eax + 4]
add eax, dword [esp + 0x38]
lea ecx, [esp + 0x74]
mov dword [esp + 0x14], eax
mov eax, dword [esi]
mov edx, dword [eax + 0x34]
push ecx
mov ecx, esi
call edx
fild dword [eax]
fmul dword [esp + 0x30]
call fcn.00631650
mov dword [esp + 0x3c], eax
mov eax, dword [esi]
mov edx, dword [eax + 0x30]
lea ecx, [esp + 0x4c]
push ecx
mov ecx, esi
call edx
mov eax, dword [eax]
add eax, dword [esp + 0x3c]
lea ecx, [esp + 0x8c]
add eax, dword [esp + 0x34]
push ecx
mov dword [esp + 0x1c], eax
mov eax, dword [esi]
mov edx, dword [eax + 0x34]
mov ecx, esi
call edx
fild dword [eax + 4]
fmul dword [esp + 0x30]
call fcn.00631650
mov dword [esp + 0x3c], eax
mov eax, dword [esi]
mov edx, dword [eax + 0x30]
lea ecx, [esp + 0x94]
push ecx
mov ecx, esi
call edx
mov eax, dword [eax + 4]
add eax, dword [esp + 0x3c]
mov ecx, dword [esp + 0x10]
add eax, dword [esp + 0x38]
mov edx, dword [esi]
mov edx, dword [edx + 0x38]
mov dword [esp + 0x1c], eax
sub esp, 0x10
mov eax, esp
mov dword [eax], ecx
mov ecx, dword [esp + 0x24]
mov dword [eax + 4], ecx
mov ecx, dword [esp + 0x28]
mov dword [eax + 8], ecx
mov ecx, dword [esp + 0x2c]
mov dword [eax + 0xc], ecx
mov ecx, esi
call edx
push 0
push esi
lea eax, [ebx + 0x33e0]
push eax
call fcn.00442680
inc edi
add esi, 0x78
mov dword [esp + 0x2c], edi
cmp edi, 2
jb 0x433ec4
mov eax, ebx
mov dword [ebx + 0x340c], 2
call fcn.004363e0
mov eax, dword [ebx + 0x2ee0]
mov edx, dword [eax]
push 0
lea ecx, [ebx + 0x2ee0]
push 0
push 0
mov dword [ebx + 0x31a0], 0
call edx
push 0
mov ecx, ebx
call fcn.00435b10
mov eax, dword [ebx + 8]
mov dword [eax + 0x20bc], 0xffffffff
mov ecx, dword [esp + 0xa0]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
mov esp, ebp
pop ebp
ret