Function at 0x4b7300
Capabilities:
Resolve function by parsing pe exports

Disassembly:
push 0xffffffffffffffff
push 0x5a1899
mov eax, dword fs:[0]
push eax
sub esp, 0x734
mov eax, dword [0x691844]
xor eax, esp
mov dword [esp + 0x730], eax
push ebx
push ebp
push esi
push edi
mov eax, dword [0x691844]
xor eax, esp
push eax
lea eax, [esp + 0x748]
mov dword fs:[0], eax
mov eax, dword [esp + 0x75c]
mov edi, dword [esp + 0x758]
mov edx, dword [esp + 0x764]
mov esi, dword [esp + 0x768]
mov ebx, ecx
mov ecx, dword [esp + 0x760]
mov dword [esp + 0x50], eax
lea eax, [edi + 0x218]
mov dword [esp + 0x48], ebx
mov dword [esp + 0x4c], ecx
mov dword [esp + 0x44], edx
mov dword [esp + 0x1c], esi
test eax, eax
je 0x4b7386
push eax
mov ecx, edi
call fcn.0043c0a0
test esi, esi
je 0x4b75d4
cmp dword [esi], 0
je 0x4b75d4
lea ecx, [esp + 0x20]
call fcn.00429880
mov eax, dword [esi + 8]
mov dword [esp + 0x750], 0
cmp eax, 1
jne 0x4b73d9
push 0
lea eax, [esp + 0x24]
push eax
push 0x93
mov ecx, 0x69d200
call fcn.0042f6b0
cmp dword [esp + 0x24], 0
je 0x4b7415
push 0
lea ecx, [esp + 0x24]
push ecx
jmp 0x4b740e
jbe 0x4b7415
movzx edx, ax
push edx
mov ecx, ebx
call fcn.004ae980
test eax, eax
je 0x4b7415
movzx edx, word [eax + 0x26]
push 1
lea ecx, [esp + 0x24]
push ecx
push edx
mov ecx, 0x69d200
call fcn.0042f6b0
cmp dword [esp + 0x24], 0
je 0x4b7415
push 0
lea eax, [esp + 0x24]
push eax
mov ecx, edi
call fcn.0043c090
mov eax, dword [esi + 0xc]
cmp eax, 1
jne 0x4b7443
push 0
lea ecx, [esp + 0x24]
push ecx
push 0x93
mov ecx, 0x69d200
call fcn.0042f6b0
cmp dword [esp + 0x24], 0
je 0x4b747f
push 1
lea edx, [esp + 0x24]
push edx
jmp 0x4b7478
jbe 0x4b747f
movzx eax, ax
push eax
mov ecx, ebx
call fcn.004ae980
test eax, eax
je 0x4b747f
movzx edx, word [eax + 0x26]
push 1
lea ecx, [esp + 0x24]
push ecx
push edx
mov ecx, 0x69d200
call fcn.0042f6b0
cmp dword [esp + 0x24], 0
je 0x4b747f
push 1
lea eax, [esp + 0x24]
push eax
mov ecx, edi
call fcn.0043c090
mov eax, dword [esi + 0x10]
cmp eax, 1
jne 0x4b74ad
push 0
lea ecx, [esp + 0x24]
push ecx
push 0x93
mov ecx, 0x69d200
call fcn.0042f6b0
cmp dword [esp + 0x24], 0
je 0x4b74e9
push 2
lea edx, [esp + 0x24]
push edx
jmp 0x4b74e2
jbe 0x4b74e9
movzx eax, ax
push eax
mov ecx, ebx
call fcn.004ae980
test eax, eax
je 0x4b74e9
movzx edx, word [eax + 0x26]
push 1
lea ecx, [esp + 0x24]
push ecx
push edx
mov ecx, 0x69d200
call fcn.0042f6b0
cmp dword [esp + 0x24], 0
je 0x4b74e9
push 2
lea eax, [esp + 0x24]
push eax
mov ecx, edi
call fcn.0043c090
cmp dword [esi + 0x14], 1
jne 0x4b7515
push 0
lea ecx, [esp + 0x24]
push ecx
push 0x93
mov ecx, 0x69d200
call fcn.0042f6b0
cmp dword [esp + 0x24], 0
je 0x4b7556
push 3
lea edx, [esp + 0x24]
push edx
jmp 0x4b754f
cmp dword [esi + 8], 3
jbe 0x4b7556
movzx eax, word [esi + 0x14]
push eax
mov ecx, ebx
call fcn.004ae980
test eax, eax
je 0x4b7556
movzx edx, word [eax + 0x26]
push 1
lea ecx, [esp + 0x24]
push ecx
push edx
mov ecx, 0x69d200
call fcn.0042f6b0
cmp dword [esp + 0x24], 0
je 0x4b7556
push 3
lea eax, [esp + 0x24]
push eax
mov ecx, edi
call fcn.0043c090
mov eax, dword [esi + 0x18]
cmp eax, 1
jne 0x4b7584
push 0
lea ecx, [esp + 0x24]
push ecx
push 0x93
mov ecx, 0x69d200
call fcn.0042f6b0
cmp dword [esp + 0x24], 0
je 0x4b75c0
push 4
lea edx, [esp + 0x24]
push edx
jmp 0x4b75b9
jbe 0x4b75c0
movzx eax, ax
push eax
mov ecx, ebx
call fcn.004ae980
test eax, eax
je 0x4b75c0
movzx edx, word [eax + 0x26]
push 1
lea ecx, [esp + 0x24]
push ecx
push edx
mov ecx, 0x69d200
call fcn.0042f6b0
cmp dword [esp + 0x24], 0
je 0x4b75c0
push 4
lea eax, [esp + 0x24]
push eax
mov ecx, edi
call fcn.0043c090
lea ecx, [esp + 0x20]
mov dword [esp + 0x750], 0xffffffff
call fcn.00429890
fldz
xor ebp, ebp
fst dword [esp + 0x78]
mov dword [esp + 0x14], ebp
fst dword [esp + 0x134]
mov dword [esp + 0x5c], ebp
fst dword [esp + 0x34]
mov dword [esp + 0x6c], ebp
mov dword [esp + 0x74], ebp
mov dword [esp + 0x68], ebp
mov dword [esp + 0x7c], ebp
mov dword [esp + 0x60], ebp
mov dword [esp + 0x64], ebp
mov dword [esp + 0x58], ebp
mov dword [esp + 0x70], ebp
mov eax, 1
movzx ecx, ax
cmp cx, bp
je 0x4b762e
movzx ecx, cx
add ecx, ecx
add ecx, ecx
fst dword [esp + ecx + 0x11c]
fst dword [esp + ecx + 0x1c]
inc eax
cmp eax, 5
jle 0x4b7614
fstp st(0)
cmp esi, ebp
je 0x4b7781
xor ebx, ebx
test ebx, ebx
jne 0x4b764d
mov ecx, dword [esp + 0x1c]
mov eax, dword [ecx + 8]
jmp 0x4b7687
cmp ebx, 1
jne 0x4b765b
mov edx, dword [esp + 0x1c]
mov eax, dword [edx + 0xc]
jmp 0x4b7687
cmp ebx, 2
jne 0x4b7669
mov eax, dword [esp + 0x1c]
mov eax, dword [eax + 0x10]
jmp 0x4b7687
cmp ebx, 3
jne 0x4b7677
mov ecx, dword [esp + 0x1c]
mov eax, dword [ecx + 0x14]
jmp 0x4b7687
cmp ebx, 4
jne 0x4b776f
mov edx, dword [esp + 0x1c]
mov eax, dword [edx + 0x18]
test eax, eax
je 0x4b776f
cmp eax, 1
je 0x4b776f
test ax, ax
je 0x4b776f
mov esi, dword [esp + 0x48]
movzx ecx, ax
xor edx, edx
mov eax, ecx
div dword [esi + 0x30]
mov eax, dword [esi + 0x34]
mov eax, dword [eax + edx*4]
test eax, eax
je 0x4b776f
lea ecx, [ecx]
cmp dword [eax], ecx
je 0x4b76d0
mov eax, dword [eax + 0xc]
test eax, eax
jne 0x4b76c0
jmp 0x4b776f
mov esi, dword [eax + 4]
test esi, esi
je 0x4b776f
movzx ecx, word [esi + 0x3a]
fld dword [esi + 0xb4]
add dword [esp + 0x5c], ecx
fadd dword [esp + 0x78]
movzx edx, word [esi + 0x3c]
fstp dword [esp + 0x78]
movzx eax, word [esi + 0x3e]
fld1
movzx ecx, word [esi + 0x40]
add dword [esp + 0x68], ecx
add dword [esp + 0x6c], edx
add dword [esp + 0x74], eax
movzx ecx, word [esi + 0x82]
movzx edx, word [esi + 0xa4]
movzx eax, word [esi + 0x80]
add dword [esp + 0x64], ecx
add dword [esp + 0x7c], edx
add dword [esp + 0x60], eax
movzx edx, word [esi + 0x84]
movzx eax, word [esi + 0x86]
add ebp, dword [esi + 0x44]
add dword [esp + 0x58], edx
add dword [esp + 0x70], eax
push ecx
lea ecx, [esi + 0x8c]
fstp dword [esp]
push ecx
lea ecx, [esp + 0x128]
call fcn.00499090
fld1
push ecx
add esi, 0x50
fstp dword [esp]
push esi
lea ecx, [esp + 0x28]
call fcn.00499090
inc ebx
cmp ebx, 5
jl 0x4b7640
mov ebx, dword [esp + 0x48]
mov dword [esp + 0x14], ebp
push 0x7f
lea edx, [esp + 0x149]
push 0
push edx
mov byte [esp + 0x150], 0
call sub.MSVCR90.dll_memset
mov esi, dword [esp + 0x5c]
mov ebp, dword [sym.imp.MSVCR90.dll_sprintf]
lea eax, [esi + 2]
push eax
lea eax, [esp + 0x314]
push 0x5acee4
push eax
call ebp
lea ecx, [esp + 0x31c]
push ecx
lea edx, [esp + 0x160]
push 0x5b1588
push edx
call ebp
movzx eax, word [esi]
add esp, 0x24
test ax, ax
je 0x4b7802
movzx ecx, ax
xor edx, edx
mov eax, ecx
div dword [ebx + 0x9c]
mov eax, dword [ebx + 0xa0]
mov eax, dword [eax + edx*4]
test eax, eax
je 0x4b7802
cmp dword [eax], ecx
je 0x4b7af2
mov eax, dword [eax + 0xc]
test eax, eax
jne 0x4b77f3
push 0xf0f0f0
lea eax, [esp + 0x148]
push eax
mov ecx, edi
call fcn.0043c080
cmp word [esi + 0x38], 0
push 0xf0f0f0
mov ecx, edi
push 0x5af25f
je 0x4b7bed
call fcn.0043c080
xor ebx, ebx
mov dword [esp + 0x80], 0x5ba8cc
mov dword [esp + 0x84], 0x5ba8bc
mov dword [esp + 0x88], 0x5ba8ac
mov dword [esp + 0x8c], 0x5ba898
mov dword [esp + 0x90], 0x5ba888
mov dword [esp + 0x94], 0x5ba874
mov dword [esp + 0x98], 0x5ba868
mov dword [esp + 0x9c], 0x5ba85c
mov dword [esp + 0xa0], 0x5ba850
mov dword [esp + 0xa4], 0x5ba844
mov dword [esp + 0xa8], 0x5ba83c
mov dword [esp + 0xac], 0x5ba830
mov dword [esp + 0xb0], 0x5ba824
mov dword [esp + 0xb4], 0x5ba818
mov dword [esp + 0xb8], 0x5ba804
mov dword [esp + 0xbc], 0x5ba7ec
mov dword [esp + 0xc0], 0x5ba7d4
mov dword [esp + 0xc4], 0x5ba7b8
mov dword [esp + 0xc8], 0x5ba7a4
mov dword [esp + 0xcc], 0x5ba790
mov dword [esp + 0xd0], ebx
mov dword [esp + 0xd4], 1
mov dword [esp + 0xd8], 2
mov dword [esp + 0xdc], 3
mov dword [esp + 0xe0], 4
mov dword [esp + 0xe4], 5
mov dword [esp + 0xe8], 6
mov dword [esp + 0xec], 7
mov dword [esp + 0xf0], 8
mov dword [esp + 0xf4], 9
mov dword [esp + 0xf8], 0xa
mov dword [esp + 0xfc], 0xb
mov dword [esp + 0x100], 0xc
mov dword [esp + 0x104], 0xd
mov dword [esp + 0x108], 0xe
mov dword [esp + 0x10c], 0xf
mov dword [esp + 0x110], 0x10
mov dword [esp + 0x114], 0x11
mov dword [esp + 0x118], 0x12
mov dword [esp + 0x11c], 0x13
jmp 0x4b79f0
push 0x3ff
lea ecx, [esp + 0x349]
push 0
push ecx
mov byte [esp + 0x350], 0
call sub.MSVCR90.dll_memset
mov esi, dword [esp + ebx + 0xdc]
add esp, 0xc
test byte [0x6936f8], 1
jne 0x4b7a53
mov eax, 1
or dword [0x6936f8], eax
mov ecx, 0x6933d8
mov dword [esp + 0x750], eax
call fcn.00540800
push 0x5aa6e0
call fcn.005998a5
add esp, 4
mov dword [esp + 0x750], 0xffffffff
mov edx, dword [esp + 0x50]
movzx eax, word [edx + 0x38]
push esi
push eax
mov ecx, 0x6933d8
call fcn.00540790
fstp dword [esp + 0x54]
cmp esi, 2
je 0x4b7b7d
cmp esi, 4
je 0x4b7b7d
cmp esi, 6
je 0x4b7b7d
cmp esi, 8
je 0x4b7b7d
cmp esi, 0xe
je 0x4b7b4f
cmp esi, 0xf
je 0x4b7b4f
cmp esi, 0x10
je 0x4b7b4f
cmp esi, 0x11
je 0x4b7b4f
cmp esi, 0x12
je 0x4b7b17
cmp esi, 0x13
je 0x4b7b17
fldz
fld dword [esp + 0x54]
fcom st(1)
fnstsw ax
fstp st(1)
test ah, 0x41
jne 0x4b7bb5
call fcn.00599920
mov ecx, dword [esp + ebx + 0x80]
push eax
push ecx
lea edx, [esp + 0x34c]
push edx
call ebp
add esp, 0xc
jmp 0x4b7bb7
mov eax, dword [eax + 4]
test eax, eax
je 0x4b7802
cmp dword [eax], 0
je 0x4b7802
mov ecx, dword [eax + 0xc]
push ecx
lea edx, [esp + 0x148]
push edx
jmp 0x4b780f
fldz
fld dword [esp + 0x54]
fucom st(1)
fnstsw ax
fstp st(1)
test ah, 0x44
jnp 0x4b7bb5
fmul qword [0x5af4d8]
call fcn.00599920
push eax
mov eax, dword [esp + ebx + 0x84]
push eax
lea ecx, [esp + 0x34c]
push ecx
call ebp
add esp, 0xc
jmp 0x4b7bb7
fldz
fld dword [esp + 0x54]
fcom st(1)
fnstsw ax
fstp st(1)
test ah, 0x41
jne 0x4b7bb5
call fcn.00599920
mov edx, dword [esp + ebx + 0x80]
push eax
push edx
lea eax, [esp + 0x34c]
push eax
call ebp
add esp, 0xc
jmp 0x4b7bb7
fld1
fld dword [esp + 0x54]
fucom st(1)
fnstsw ax
fstp st(1)
test ah, 0x44
jnp 0x4b7bb5
fld qword [0x5af4d8]
fmul st(1), st(0)
fsubp st(1)
call fcn.00599920
mov ecx, dword [esp + ebx + 0x80]
push eax
push ecx
lea edx, [esp + 0x34c]
push edx
call ebp
add esp, 0xc
jmp 0x4b7bb7
fstp st(0)
cmp byte [esp + 0x344], 0
je 0x4b7bd5
push 0xff0000
lea eax, [esp + 0x348]
push eax
mov ecx, edi
call fcn.0043c080
add ebx, 4
cmp ebx, 0x50
jl 0x4b79f0
push 0xf0f0f0
push 0x5af25f
mov ecx, edi
call fcn.0043c080
cmp dword [esp + 0x1c], 0
je 0x4b803f
mov eax, dword [esp + 0x14]
test eax, eax
je 0x4b7c3c
push eax
push 0x182
mov ecx, 0x6a0f60
call fcn.004d6bc0
push eax
lea ecx, [esp + 0x1cc]
push 0x5b5eb4
push ecx
call ebp
add esp, 0x10
push 0xcc00cc
lea edx, [esp + 0x1c8]
push edx
mov ecx, edi
call fcn.0043c080
fldz
fld dword [esp + 0x78]
fucom st(1)
fnstsw ax
fstp st(1)
test ah, 0x44
jnp 0x4b7c91
fmul qword [0x5af4d8]
call fcn.00599920
push eax
push 0x182
mov ecx, 0x6a0f60
call fcn.004d6bc0
push eax
lea eax, [esp + 0x1cc]
push 0x5b5e98
push eax
call ebp
add esp, 0x10
push 0xcc00cc
lea ecx, [esp + 0x1c8]
push ecx
mov ecx, edi
call fcn.0043c080
jmp 0x4b7c93
fstp st(0)
mov eax, dword [esp + 0x5c]
mov esi, dword [sym.imp.USER32.dll_wsprintfA]
test eax, eax
je 0x4b7cd8
push eax
push 0x105
mov ecx, 0x6a0f60
call fcn.004d6bc0
push eax
lea edx, [esp + 0x1cc]
push 0x5b5eb4
push edx
call esi
add esp, 0x10
push 0xcc00cc
lea eax, [esp + 0x1c8]
push eax
mov ecx, edi
call fcn.0043c080
mov eax, dword [esp + 0x6c]
test eax, eax
je 0x4b7d17
push eax
push 0x106
mov ecx, 0x6a0f60
call fcn.004d6bc0
push eax
lea ecx, [esp + 0x1cc]
push 0x5b5eb4
push ecx
call esi
add esp, 0x10
push 0xcc00cc
lea edx, [esp + 0x1c8]
push edx
mov ecx, edi
call fcn.0043c080
mov eax, dword [esp + 0x74]
test eax, eax
je 0x4b7d56
push eax
push 0x107
mov ecx, 0x6a0f60
call fcn.004d6bc0
push eax
lea eax, [esp + 0x1cc]
push 0x5b5eb4
push eax
call esi
add esp, 0x10
push 0xcc00cc
lea ecx, [esp + 0x1c8]
push ecx
mov ecx, edi
call fcn.0043c080
mov eax, dword [esp + 0x68]
test eax, eax
je 0x4b7d95
push eax
push 0x108
mov ecx, 0x6a0f60
call fcn.004d6bc0
push eax
lea edx, [esp + 0x1cc]
push 0x5b5eb4
push edx
call esi
add esp, 0x10
push 0xcc00cc
lea eax, [esp + 0x1c8]
push eax
mov ecx, edi
call fcn.0043c080
mov eax, dword [esp + 0x7c]
test eax, eax
je 0x4b7dd4
push eax
push 0x18d
mov ecx, 0x6a0f60
call fcn.004d6bc0
push eax
lea ecx, [esp + 0x1cc]
push 0x5b5eb4
push ecx
call ebp
add esp, 0x10
push 0xcc00cc
lea edx, [esp + 0x1c8]
push edx
mov ecx, edi
call fcn.0043c080
mov ebx, dword [esp + 0x60]
test ebx, ebx
jbe 0x4b7e25
push 0x100
lea eax, [esp + 0x1c8]
push 0
push eax
call sub.MSVCR90.dll_memset
add esp, 0xc
push ebx
push 0x5f1
mov ecx, 0x6a0f60
call fcn.004d6bc0
push eax
lea ecx, [esp + 0x1cc]
push ecx
call esi
add esp, 0xc
push 0xcc00cc
lea edx, [esp + 0x1c8]
push edx
mov ecx, edi
call fcn.0043c080
mov ebx, dword [esp + 0x64]
test ebx, ebx
jbe 0x4b7e76
push 0x100
lea eax, [esp + 0x1c8]
push 0
push eax
call sub.MSVCR90.dll_memset
add esp, 0xc
push ebx
push 0x5f2
mov ecx, 0x6a0f60
call fcn.004d6bc0
push eax
lea ecx, [esp + 0x1cc]
push ecx
call esi
add esp, 0xc
push 0xcc00cc
lea edx, [esp + 0x1c8]
push edx
mov ecx, edi
call fcn.0043c080
mov ebx, dword [esp + 0x58]
test ebx, ebx
jbe 0x4b7ec7
push 0x100
lea eax, [esp + 0x1c8]
push 0
push eax
call sub.MSVCR90.dll_memset
add esp, 0xc
push ebx
push 0x5f3
mov ecx, 0x6a0f60
call fcn.004d6bc0
push eax
lea ecx, [esp + 0x1cc]
push ecx
call esi
add esp, 0xc
push 0xcc00cc
lea edx, [esp + 0x1c8]
push edx
mov ecx, edi
call fcn.0043c080
mov ebx, dword [esp + 0x70]
test ebx, ebx
jbe 0x4b7f18
push 0x100
lea eax, [esp + 0x1c8]
push 0
push eax
call sub.MSVCR90.dll_memset
add esp, 0xc
push ebx
push 0x5f4
mov ecx, 0x6a0f60
call fcn.004d6bc0
push eax
lea ecx, [esp + 0x1cc]
push ecx
call esi
add esp, 0xc
push 0xcc00cc
lea edx, [esp + 0x1c8]
push edx
mov ecx, edi
call fcn.0043c080
mov esi, 1
lea ecx, [ecx]
movzx eax, si
test ax, ax
jne 0x4b7f2c
fldz
jmp 0x4b7f36
movzx eax, ax
fld dword [esp + eax*4 + 0x11c]
fstp dword [esp + 0x14]
fld dword [esp + 0x14]
fmul qword [0x5af4d8]
fstp dword [esp + 0x14]
fldz
fld dword [esp + 0x14]
fucom st(1)
fnstsw ax
fstp st(1)
test ah, 0x44
jnp 0x4b7f99
call fcn.00599920
push eax
lea ecx, [esi + 0x187]
push ecx
mov ecx, 0x6a0f60
call fcn.004d6bc0
push eax
lea edx, [esp + 0x1cc]
push str._s__d__
push edx
call ebp
add esp, 0x10
push 0xcc00cc
lea eax, [esp + 0x1c8]
push eax
mov ecx, edi
call fcn.0043c080
jmp 0x4b7f9b
fstp st(0)
inc esi
cmp esi, 5
jle 0x4b7f20
mov esi, 1
lea ebx, [ebx]
movzx eax, si
test ax, ax
jne 0x4b7fbc
fldz
jmp 0x4b7fc3
movzx ecx, ax
fld dword [esp + ecx*4 + 0x1c]
fstp dword [esp + 0x14]
fld dword [esp + 0x14]
fmul qword [0x5af4d8]
fstp dword [esp + 0x14]
fldz
fld dword [esp + 0x14]
fucom st(1)
fnstsw ax
fstp st(1)
test ah, 0x44
jnp 0x4b8026
call fcn.00599920
push eax
lea edx, [esi + 0x108]
push edx
mov ecx, 0x6a0f60
call fcn.004d6bc0
push eax
lea eax, [esp + 0x1cc]
push str._s__d__
push eax
call ebp
add esp, 0x10
push 0xcc00cc
lea ecx, [esp + 0x1c8]
push ecx
mov ecx, edi
call fcn.0043c080
jmp 0x4b8028
fstp st(0)
inc esi
cmp esi, 5
jle 0x4b7fb0
push 0xcc00cc
push 0x5af25f
mov ecx, edi
call fcn.0043c080
mov ebx, dword [esp + 0x50]
mov ecx, dword [esp + 0x48]
push ebx
push edi
call fcn.004a9250
movzx eax, word [ebx + 0x6a]
sub eax, 1
je 0x4b8068
sub eax, 1
jne 0x4b8084
push 0xe61414
push 0xed
jmp 0x4b8072
push 0xe61414
push 0xec
mov ecx, 0x6a0f60
call fcn.004d6bc0
push eax
mov ecx, edi
call fcn.0043c080
push 0x3f
lea edx, [esp + 0x2c9]
push 0
push edx
mov byte [esp + 0x2d0], 0
call sub.MSVCR90.dll_memset
movzx eax, word [ebx + 0x28]
add esp, 0xc
test eax, 0x800
je 0x4b824e
mov ecx, 0x801
cmp ax, cx
jne 0x4b8173
movzx ecx, word [ebx + 0x38]
mov dword [esp + 0x20], str.null
mov dword [esp + 0x24], 0x5ba788
mov dword [esp + 0x28], 0x5ba780
mov dword [esp + 0x2c], 0x5ba77c
mov dword [esp + 0x30], 0x5ba778
mov dword [esp + 0x34], 0x5ba774
mov dword [esp + 0x38], 0x5ba770
cmp cx, 7
ja 0x4b826a
movzx eax, word [ebx + 0x78]
sub eax, 0
je 0x4b8144
sub eax, 1
jne 0x4b826a
movzx edx, cx
mov eax, dword [esp + edx*4 + 0x20]
push eax
push 0x111
mov ecx, 0x6a0f60
call fcn.004d6bc0
push eax
lea ecx, [esp + 0x2cc]
push str._s___s
push ecx
call ebp
add esp, 0x10
jmp 0x4b826a
movzx edx, cx
mov eax, dword [esp + edx*4 + 0x20]
push eax
push 0x110
mov ecx, 0x6a0f60
call fcn.004d6bc0
push eax
lea ecx, [esp + 0x2cc]
push str._s___s
push ecx
call ebp
add esp, 0x10
jmp 0x4b826a
mov dword [esp + 0x120], 0x5ba58c
mov dword [esp + 0x124], 0x5ba764
mov dword [esp + 0x128], 0x5ba57c
mov dword [esp + 0x12c], 0x5ba574
mov dword [esp + 0x130], 0x5ba56c
mov dword [esp + 0x134], 0x5ba564
mov dword [esp + 0x138], 0x5ba55c
mov dword [esp + 0x13c], 0x5ba75c
mov dword [esp + 0x140], 0x5ba754
mov dword [esp + 0x20], 0x807
mov dword [esp + 0x24], 0x808
mov dword [esp + 0x28], 0x809
mov dword [esp + 0x2c], 0x80e
mov dword [esp + 0x30], 0x80b
mov dword [esp + 0x34], 0x80d
mov dword [esp + 0x38], 0x80a
mov dword [esp + 0x3c], 0x80c
mov dword [esp + 0x40], 0x834
xor esi, esi
movzx edx, word [ebx + 0x28]
cmp dword [esp + esi + 0x20], edx
jne 0x4b8244
mov eax, dword [esp + esi + 0x120]
push eax
lea ecx, [esp + 0x2c8]
push 0x5ba748
push ecx
call ebp
add esp, 0xc
add esi, 4
cmp esi, 0x24
jl 0x4b8220
jmp 0x4b826a
mov edx, 0x8000
cmp ax, dx
jne 0x4b826a
lea eax, [esp + 0x2c4]
push 0x5ba740
push eax
call ebp
add esp, 8
lea ecx, [esp + 0x2c4]
push ecx
lea edx, [edi + 0x190]
push 0x5acee4
push edx
call ebp
mov dword [edi + 0x210], 5
movzx eax, word [ebx + 0x6c]
add esp, 0xc
test ax, ax
je 0x4b82f9
movzx eax, ax
push eax
push 0xee
mov ecx, 0x6a0f60
call fcn.004d6bc0
push eax
lea ecx, [esp + 0x14c]
push ecx
call ebp
mov edx, dword [0x69e254]
mov ax, word [edx + 0x44c]
add esp, 0xc
cmp ax, word [ebx + 0x6c]
jae 0x4b82e0
lea ecx, [esp + 0x144]
push ecx
push 0x5acee4
lea edx, [edi + 0x1d0]
push edx
jmp 0x4b82f4
lea eax, [esp + 0x144]
push eax
push 0x5acee4
lea ecx, [edi + 0x1d0]
push ecx
call ebp
add esp, 0xc
movzx eax, word [ebx + 0x6e]
test ax, ax
je 0x4b8359
movzx edx, ax
push edx
push 0xef
mov ecx, 0x6a0f60
call fcn.004d6bc0
push eax
lea eax, [esp + 0x14c]
push eax
call ebp
mov ecx, dword [0x69e254]
mov dx, word [ecx + 0x6ac]
add esp, 0xc
cmp dx, word [ebx + 0x6e]
jae 0x4b8345
push 0xe61414
lea eax, [esp + 0x148]
push eax
jmp 0x4b8352
push 0xf0f0f0
lea ecx, [esp + 0x148]
push ecx
mov ecx, edi
call fcn.0043c080
movzx eax, word [ebx + 0x70]
test ax, ax
je 0x4b83b9
movzx edx, ax
push edx
push 0xf0
mov ecx, 0x6a0f60
call fcn.004d6bc0
push eax
lea eax, [esp + 0x14c]
push eax
call ebp
mov ecx, dword [0x69e254]
mov dx, word [ecx + 0x6ae]
add esp, 0xc
cmp dx, word [ebx + 0x70]
jae 0x4b83a5
push 0xe61414
lea eax, [esp + 0x148]
push eax
jmp 0x4b83b2
push 0xf0f0f0
lea ecx, [esp + 0x148]
push ecx
mov ecx, edi
call fcn.0043c080
movzx eax, word [ebx + 0x72]
test ax, ax
je 0x4b8419
movzx edx, ax
push edx
push 0xf1
mov ecx, 0x6a0f60
call fcn.004d6bc0
push eax
lea eax, [esp + 0x14c]
push eax
call ebp
mov ecx, dword [0x69e254]
mov dx, word [ecx + 0x6b0]
add esp, 0xc
cmp dx, word [ebx + 0x72]
jae 0x4b8405
push 0xe61414
lea eax, [esp + 0x148]
push eax
jmp 0x4b8412
push 0xf0f0f0
lea ecx, [esp + 0x148]
push ecx
mov ecx, edi
call fcn.0043c080
movzx eax, word [ebx + 0x74]
test ax, ax
je 0x4b8479
movzx edx, ax
push edx
push 0xf2
mov ecx, 0x6a0f60
call fcn.004d6bc0
push eax
lea eax, [esp + 0x14c]
push eax
call ebp
mov ecx, dword [0x69e254]
mov dx, word [ecx + 0x6b2]
add esp, 0xc
cmp dx, word [ebx + 0x74]
jae 0x4b8465
push 0xe61414
lea eax, [esp + 0x148]
push eax
jmp 0x4b8472
push 0xf0f0f0
lea ecx, [esp + 0x148]
push ecx
mov ecx, edi
call fcn.0043c080
movzx eax, word [ebx + 0x3a]
test ax, ax
je 0x4b84bc
movzx edx, ax
push edx
push 0x17e
mov ecx, 0x6a0f60
call fcn.004d6bc0
push eax
lea eax, [esp + 0x14c]
push 0x5b5eb4
push eax
call ebp
add esp, 0x10
push 0x9bdeff
lea ecx, [esp + 0x148]
push ecx
mov ecx, edi
call fcn.0043c080
movzx eax, word [ebx + 0x3c]
test ax, ax
je 0x4b84ff
movzx edx, ax
push edx
push 0x17f
mov ecx, 0x6a0f60
call fcn.004d6bc0
push eax
lea eax, [esp + 0x14c]
push 0x5b5eb4
push eax
call ebp
add esp, 0x10
push 0x9bdeff
lea ecx, [esp + 0x148]
push ecx
mov ecx, edi
call fcn.0043c080
movzx eax, word [ebx + 0x3e]
test ax, ax
je 0x4b8542
movzx edx, ax
push edx
push 0x180
mov ecx, 0x6a0f60
call fcn.004d6bc0
push eax
lea eax, [esp + 0x14c]
push 0x5b5eb4
push eax
call ebp
add esp, 0x10
push 0x9bdeff
lea ecx, [esp + 0x148]
push ecx
mov ecx, edi
call fcn.0043c080
movzx eax, word [ebx + 0x40]
test ax, ax
je 0x4b8585
movzx edx, ax
push edx
push 0x181
mov ecx, 0x6a0f60
call fcn.004d6bc0
push eax
lea eax, [esp + 0x14c]
push 0x5b5eb4
push eax
call ebp
add esp, 0x10
push 0x9bdeff
lea ecx, [esp + 0x148]
push ecx
mov ecx, edi
call fcn.0043c080
mov eax, dword [ebx + 0x44]
test eax, eax
je 0x4b85f5
mov dword [esp + 0x14], eax
fild dword [esp + 0x14]
jge 0x4b859c
fadd dword [0x5af1c8]
fnstcw word [esp + 0x1c]
mov ecx, 0x6a0f60
movzx eax, word [esp + 0x1c]
or eax, 0xc00
mov dword [esp + 0x14], eax
fldcw word [esp + 0x14]
fistp qword [esp + 0x14]
mov edx, dword [esp + 0x14]
push edx
push 0x182
fldcw word [esp + 0x24]
call fcn.004d6bc0
push eax
lea eax, [esp + 0x14c]
push 0x5b5eb4
push eax
call ebp
add esp, 0x10
push 0x9bdeff
lea ecx, [esp + 0x148]
push ecx
mov ecx, edi
call fcn.0043c080
movzx eax, word [ebx + 0x4c]
test ax, ax
je 0x4b8638
movzx edx, ax
push edx
push 0x183
mov ecx, 0x6a0f60
call fcn.004d6bc0
push eax
lea eax, [esp + 0x14c]
push 0x5b5eb4
push eax
call ebp
add esp, 0x10
push 0x9bdeff
lea ecx, [esp + 0x148]
push ecx
mov ecx, edi
call fcn.0043c080
mov eax, dword [ebx + 0x48]
test eax, eax
je 0x4b86ae
mov dword [esp + 0x14], eax
fild dword [esp + 0x14]
jge 0x4b864f
fadd dword [0x5af1c8]
fadd qword [0x5af4e8]
mov ecx, 0x6a0f60
fnstcw word [esp + 0x1c]
movzx eax, word [esp + 0x1c]
or eax, 0xc00
mov dword [esp + 0x14], eax
fldcw word [esp + 0x14]
fistp qword [esp + 0x14]
mov edx, dword [esp + 0x14]
push edx
push 0x184
fldcw word [esp + 0x24]
call fcn.004d6bc0
push eax
lea eax, [esp + 0x14c]
push 0x5b5eb4
push eax
call ebp
add esp, 0x10
push 0x9bdeff
lea ecx, [esp + 0x148]
push ecx
mov ecx, edi
call fcn.0043c080
movzx eax, word [ebx + 0x80]
test ax, ax
jne 0x4b86c7
cmp word [ebx + 0x82], ax
je 0x4b878a
movzx ecx, word [ebx + 0x82]
mov edx, 0x80a
cmp word [ebx + 0x28], dx
je 0x4b8722
cmp ax, cx
movzx eax, ax
jne 0x4b8706
push eax
push 0x185
mov ecx, 0x6a0f60
call fcn.004d6bc0
push eax
lea ecx, [esp + 0x14c]
push 0x5b5ea0
push ecx
call ebp
add esp, 0x10
jmp 0x4b8776
movzx edx, cx
push edx
push eax
push 0x185
mov ecx, 0x6a0f60
call fcn.004d6bc0
push eax
push str._s__d___d
jmp 0x4b8769
cmp ax, cx
movzx eax, ax
jne 0x4b874f
push eax
push 0x185
mov ecx, 0x6a0f60
call fcn.004d6bc0
push eax
lea ecx, [esp + 0x14c]
push 0x5b5e98
push ecx
call ebp
add esp, 0x10
jmp 0x4b8776
movzx edx, cx
push edx
push eax
push 0x185
mov ecx, 0x6a0f60
call fcn.004d6bc0
push eax
push str._s__d_____d__
lea ecx, [esp + 0x154]
push ecx
call ebp
add esp, 0x14
push 0x9bdeff
lea edx, [esp + 0x148]
push edx
mov ecx, edi
call fcn.0043c080
movzx eax, word [ebx + 0x84]
test ax, ax
jne 0x4b87a3
cmp word [ebx + 0x86], ax
je 0x4b8863
mov ecx, 0x80a
cmp word [ebx + 0x28], cx
movzx ecx, word [ebx + 0x86]
movzx edx, ax
je 0x4b87fe
cmp ax, cx
jne 0x4b87e2
push edx
push 0x187
mov ecx, 0x6a0f60
call fcn.004d6bc0
push eax
lea eax, [esp + 0x14c]
push 0x5b5ea0
push eax
call ebp
add esp, 0x10
jmp 0x4b884f
movzx ecx, cx
push ecx
push edx
push 0x187
mov ecx, 0x6a0f60
call fcn.004d6bc0
push eax
push str._s__d___d
jmp 0x4b8842
cmp ax, cx
jne 0x4b8828
push edx
push 0x187
mov ecx, 0x6a0f60
call fcn.004d6bc0
push eax
lea eax, [esp + 0x14c]
push 0x5b5e98
push eax
call ebp
add esp, 0x10
jmp 0x4b884f
movzx ecx, cx
push ecx
push edx
push 0x187
mov ecx, 0x6a0f60
call fcn.004d6bc0
push eax
push str._s__d_____d__
lea eax, [esp + 0x154]
push eax
call ebp
add esp, 0x14
push 0x9bdeff
lea ecx, [esp + 0x148]
push ecx
mov ecx, edi
call fcn.0043c080
fldz
mov esi, 1
movzx eax, si
test ax, ax
jne 0x4b8878
fst dword [esp + 0x14]
jmp 0x4b8886
movzx edx, ax
fld dword [ebx + edx*4 + 0x88]
fstp dword [esp + 0x14]
fld dword [esp + 0x14]
fmul qword [0x5af4d8]
fstp dword [esp + 0x14]
fld st(0)
fld dword [esp + 0x14]
fucom st(1)
fnstsw ax
fstp st(1)
test ah, 0x44
jnp 0x4b88e9
fstp st(1)
call fcn.00599920
push eax
lea eax, [esi + 0x187]
push eax
mov ecx, 0x6a0f60
call fcn.004d6bc0
push eax
lea ecx, [esp + 0x14c]
push str._s__d__
push ecx
call ebp
add esp, 0x10
push 0x9bdeff
lea edx, [esp + 0x148]
push edx
mov ecx, edi
call fcn.0043c080
fldz
jmp 0x4b88eb
fstp st(0)
inc esi
cmp esi, 5
jle 0x4b886a
mov esi, 1
movzx eax, si
test ax, ax
jne 0x4b8908
fst dword [esp + 0x14]
jmp 0x4b8913
movzx eax, ax
fld dword [ebx + eax*4 + 0x4c]
fstp dword [esp + 0x14]
fld dword [esp + 0x14]
fmul qword [0x5af4d8]
fstp dword [esp + 0x14]
fld st(0)
fld dword [esp + 0x14]
fucom st(1)
fnstsw ax
fstp st(1)
test ah, 0x44
jnp 0x4b8976
fstp st(1)
call fcn.00599920
push eax
lea ecx, [esi + 0x108]
push ecx
mov ecx, 0x6a0f60
call fcn.004d6bc0
push eax
lea edx, [esp + 0x14c]
push str._s__d__
push edx
call ebp
add esp, 0x10
push 0x9bdeff
lea eax, [esp + 0x148]
push eax
mov ecx, edi
call fcn.0043c080
fldz
jmp 0x4b8978
fstp st(0)
inc esi
cmp esi, 5
jle 0x4b88fa
movzx eax, word [ebx + 0xa4]
fstp st(0)
test ax, ax
je 0x4b89ca
movzx ecx, ax
push ecx
push 0x18d
mov ecx, 0x6a0f60
call fcn.004d6bc0
push eax
lea edx, [esp + 0x14c]
push 0x5b5eb4
push edx
call ebp
add esp, 0x10
push 0x9bdeff
lea eax, [esp + 0x148]
push eax
mov ecx, edi
call fcn.0043c080
movzx eax, word [ebx + 0xa8]
test ax, ax
je 0x4b8a0f
movzx ecx, ax
push ecx
lea eax, [ebx + 2]
push eax
push 0x18e
mov ecx, 0x6a0f60
call fcn.004d6bc0
push eax
lea edx, [esp + 0x150]
push edx
call ebp
add esp, 0x10
push 0x9bdeff
lea eax, [esp + 0x148]
push eax
mov ecx, edi
call fcn.0043c080
mov ebx, dword [esp + 0x4c]
test ebx, ebx
je 0x4b8ddf
push 0xf0f0f0
push 0x5af25f
mov ecx, edi
call fcn.0043c080
push 0xfcd798
push 0x5ba714
mov ecx, edi
call fcn.0043c080
movzx eax, word [ebx + 8]
test ax, ax
je 0x4b8a80
movzx ecx, ax
push ecx
push 0x17e
mov ecx, 0x6a0f60
call fcn.004d6bc0
push eax
lea edx, [esp + 0x14c]
push 0x5b5eb4
push edx
call ebp
add esp, 0x10
push 0x9bdeff
lea eax, [esp + 0x148]
push eax
mov ecx, edi
call fcn.0043c080
movzx eax, word [ebx + 0xa]
test ax, ax
je 0x4b8ac3
movzx ecx, ax
push ecx
push 0x17f
mov ecx, 0x6a0f60
call fcn.004d6bc0
push eax
lea edx, [esp + 0x14c]
push 0x5b5eb4
push edx
call ebp
add esp, 0x10
push 0x9bdeff
lea eax, [esp + 0x148]
push eax
mov ecx, edi
call fcn.0043c080
movzx eax, word [ebx + 0xc]
test ax, ax
je 0x4b8b06
movzx ecx, ax
push ecx
push 0x180
mov ecx, 0x6a0f60
call fcn.004d6bc0
push eax
lea edx, [esp + 0x14c]
push 0x5b5eb4
push edx
call ebp
add esp, 0x10
push 0x9bdeff
lea eax, [esp + 0x148]
push eax
mov ecx, edi
call fcn.0043c080
movzx eax, word [ebx + 0xe]
test ax, ax
je 0x4b8b49
movzx ecx, ax
push ecx
push 0x181
mov ecx, 0x6a0f60
call fcn.004d6bc0
push eax
lea edx, [esp + 0x14c]
push 0x5b5eb4
push edx
call ebp
add esp, 0x10
push 0x9bdeff
lea eax, [esp + 0x148]
push eax
mov ecx, edi
call fcn.0043c080
mov eax, dword [ebx + 0x10]
test eax, eax
je 0x4b8b87
push eax
push 0x182
mov ecx, 0x6a0f60
call fcn.004d6bc0
push eax
lea ecx, [esp + 0x14c]
push 0x5b5eb4
push ecx
call ebp
add esp, 0x10
push 0x9bdeff
lea edx, [esp + 0x148]
push edx
mov ecx, edi
call fcn.0043c080
movzx eax, word [ebx + 0x14]
test ax, ax
je 0x4b8bca
movzx eax, ax
push eax
push 0x183
mov ecx, 0x6a0f60
call fcn.004d6bc0
push eax
lea ecx, [esp + 0x14c]
push 0x5b5eb4
push ecx
call ebp
add esp, 0x10
push 0x9bdeff
lea edx, [esp + 0x148]
push edx
mov ecx, edi
call fcn.0043c080
mov eax, dword [ebx + 0x16]
test eax, eax
je 0x4b8c08
push eax
push 0x184
mov ecx, 0x6a0f60
call fcn.004d6bc0
push eax
lea eax, [esp + 0x14c]
push 0x5b5eb4
push eax
call ebp
add esp, 0x10
push 0x9bdeff
lea ecx, [esp + 0x148]
push ecx
mov ecx, edi
call fcn.0043c080
movzx eax, word [ebx + 0x32]
test ax, ax
je 0x4b8c3b
movzx edx, ax
push edx
lea eax, [esp + 0x148]
push 0x5ba704
push eax
call ebp
add esp, 0xc
push 0x9bdeff
lea ecx, [esp + 0x148]
push ecx
mov ecx, edi
call fcn.0043c080
movzx eax, word [ebx + 0x34]
test ax, ax
je 0x4b8c7e
movzx edx, ax
push edx
push 0x186
mov ecx, 0x6a0f60
call fcn.004d6bc0
push eax
lea eax, [esp + 0x14c]
push 0x5b5eb4
push eax
call ebp
add esp, 0x10
push 0x9bdeff
lea ecx, [esp + 0x148]
push ecx
mov ecx, edi
call fcn.0043c080
movzx eax, word [ebx + 0x4e]
test ax, ax
je 0x4b8cc1
movzx edx, ax
push edx
push 0x18d
mov ecx, 0x6a0f60
call fcn.004d6bc0
push eax
lea eax, [esp + 0x14c]
push 0x5b5eb4
push eax
call ebp
add esp, 0x10
push 0x9bdeff
lea ecx, [esp + 0x148]
push ecx
mov ecx, edi
call fcn.0043c080
fldz
mov esi, 1
movzx eax, si
test ax, ax
jne 0x4b8cd6
fst dword [esp + 0x14]
jmp 0x4b8ce1
movzx edx, ax
fld dword [ebx + edx*4 + 0x32]
fstp dword [esp + 0x14]
fld dword [esp + 0x14]
fmul qword [0x5af4d8]
fstp dword [esp + 0x4c]
fld st(0)
fld dword [esp + 0x4c]
fucom st(1)
fnstsw ax
fstp st(1)
test ah, 0x44
jnp 0x4b8d44
fstp st(1)
call fcn.00599920
push eax
lea eax, [esi + 0x187]
push eax
mov ecx, 0x6a0f60
call fcn.004d6bc0
push eax
lea ecx, [esp + 0x14c]
push str._s__d__
push ecx
call ebp
add esp, 0x10
push 0x9bdeff
lea edx, [esp + 0x148]
push edx
mov ecx, edi
call fcn.0043c080
fldz
jmp 0x4b8d46
fstp st(0)
inc esi
cmp esi, 5
jle 0x4b8cc8
mov esi, 1
movzx eax, si
test ax, ax
jne 0x4b8d63
fst dword [esp + 0x14]
jmp 0x4b8d6e
movzx eax, ax
fld dword [ebx + eax*4 + 0x16]
fstp dword [esp + 0x14]
fld dword [esp + 0x14]
fmul qword [0x5af4d8]
fstp dword [esp + 0x4c]
fld st(0)
fld dword [esp + 0x4c]
fucom st(1)
fnstsw ax
fstp st(1)
test ah, 0x44
jnp 0x4b8dd1
fstp st(1)
call fcn.00599920
push eax
lea ecx, [esi + 0x108]
push ecx
mov ecx, 0x6a0f60
call fcn.004d6bc0
push eax
lea edx, [esp + 0x14c]
push str._s__d__
push edx
call ebp
add esp, 0x10
push 0x9bdeff
lea eax, [esp + 0x148]
push eax
mov ecx, edi
call fcn.0043c080
fldz
jmp 0x4b8dd3
fstp st(0)
inc esi
cmp esi, 5
jle 0x4b8d55
fstp st(0)
mov ebx, dword [esp + 0x44]
test ebx, ebx
je 0x4b916c
push 0xf0f0f0
push 0x5af25f
mov ecx, edi
call fcn.0043c080
push 0xfcd798
push 0x5ba6ec
mov ecx, edi
call fcn.0043c080
movzx eax, word [ebx + 8]
test ax, ax
je 0x4b8e50
movzx ecx, ax
push ecx
push 0x17e
mov ecx, 0x6a0f60
call fcn.004d6bc0
push eax
lea edx, [esp + 0x14c]
push 0x5b5eb4
push edx
call ebp
add esp, 0x10
push 0x9bdeff
lea eax, [esp + 0x148]
push eax
mov ecx, edi
call fcn.0043c080
movzx eax, word [ebx + 0xa]
test ax, ax
je 0x4b8e93
movzx ecx, ax
push ecx
push 0x17f
mov ecx, 0x6a0f60
call fcn.004d6bc0
push eax
lea edx, [esp + 0x14c]
push 0x5b5eb4
push edx
call ebp
add esp, 0x10
push 0x9bdeff
lea eax, [esp + 0x148]
push eax
mov ecx, edi
call fcn.0043c080
movzx eax, word [ebx + 0xc]
test ax, ax
je 0x4b8ed6
movzx ecx, ax
push ecx
push 0x180
mov ecx, 0x6a0f60
call fcn.004d6bc0
push eax
lea edx, [esp + 0x14c]
push 0x5b5eb4
push edx
call ebp
add esp, 0x10
push 0x9bdeff
lea eax, [esp + 0x148]
push eax
mov ecx, edi
call fcn.0043c080
movzx eax, word [ebx + 0xe]
test ax, ax
je 0x4b8f19
movzx ecx, ax
push ecx
push 0x181
mov ecx, 0x6a0f60
call fcn.004d6bc0
push eax
lea edx, [esp + 0x14c]
push 0x5b5eb4
push edx
call ebp
add esp, 0x10
push 0x9bdeff
lea eax, [esp + 0x148]
push eax
mov ecx, edi
call fcn.0043c080
mov eax, dword [ebx + 0x10]
test eax, eax
je 0x4b8f57
push eax
push 0x182
mov ecx, 0x6a0f60
call fcn.004d6bc0
push eax
lea ecx, [esp + 0x14c]
push 0x5b5eb4
push ecx
call ebp
add esp, 0x10
push 0x9bdeff
lea edx, [esp + 0x148]
push edx
mov ecx, edi
call fcn.0043c080
movzx eax, word [ebx + 0x14]
test ax, ax
je 0x4b8f9a
movzx eax, ax
push eax
push 0x183
mov ecx, 0x6a0f60
call fcn.004d6bc0
push eax
lea ecx, [esp + 0x14c]
push 0x5b5eb4
push ecx
call ebp
add esp, 0x10
push 0x9bdeff
lea edx, [esp + 0x148]
push edx
mov ecx, edi
call fcn.0043c080
mov eax, dword [ebx + 0x16]
test eax, eax
je 0x4b8fd8
push eax
push 0x184
mov ecx, 0x6a0f60
call fcn.004d6bc0
push eax
lea eax, [esp + 0x14c]
push 0x5b5eb4
push eax
call ebp
add esp, 0x10
push 0x9bdeff
lea ecx, [esp + 0x148]
push ecx
mov ecx, edi
call fcn.0043c080
movzx eax, word [ebx + 0x1a]
test ax, ax
je 0x4b900b
movzx edx, ax
push edx
lea eax, [esp + 0x148]
push 0x5ba704
push eax
call ebp
add esp, 0xc
push 0x9bdeff
lea ecx, [esp + 0x148]
push ecx
mov ecx, edi
call fcn.0043c080
movzx eax, word [ebx + 0x1c]
test ax, ax
je 0x4b904e
movzx edx, ax
push edx
push 0x18d
mov ecx, 0x6a0f60
call fcn.004d6bc0
push eax
lea eax, [esp + 0x14c]
push 0x5b5eb4
push eax
call ebp
add esp, 0x10
push 0x9bdeff
lea ecx, [esp + 0x148]
push ecx
mov ecx, edi
call fcn.0043c080
fldz
mov esi, 1
movzx eax, si
test ax, ax
jne 0x4b9063
fst dword [esp + 0x14]
jmp 0x4b906e
movzx edx, ax
fld dword [ebx + edx*4 + 0x32]
fstp dword [esp + 0x14]
fld dword [esp + 0x14]
fmul qword [0x5af4d8]
fstp dword [esp + 0x44]
fld st(0)
fld dword [esp + 0x44]
fucom st(1)
fnstsw ax
fstp st(1)
test ah, 0x44
jnp 0x4b90d1
fstp st(1)
call fcn.00599920
push eax
lea eax, [esi + 0x187]
push eax
mov ecx, 0x6a0f60
call fcn.004d6bc0
push eax
lea ecx, [esp + 0x14c]
push str._s__d__
push ecx
call ebp
add esp, 0x10
push 0x9bdeff
lea edx, [esp + 0x148]
push edx
mov ecx, edi
call fcn.0043c080
fldz
jmp 0x4b90d3
fstp st(0)
inc esi
cmp esi, 5
jle 0x4b9055
mov esi, 1
movzx eax, si
test ax, ax
jne 0x4b90f0
fst dword [esp + 0x14]
jmp 0x4b90fb
movzx eax, ax
fld dword [ebx + eax*4 + 0x1a]
fstp dword [esp + 0x14]
fld dword [esp + 0x14]
fmul qword [0x5af4d8]
fstp dword [esp + 0x44]
fld st(0)
fld dword [esp + 0x44]
fucom st(1)
fnstsw ax
fstp st(1)
test ah, 0x44
jnp 0x4b915e
fstp st(1)
call fcn.00599920
push eax
lea ecx, [esi + 0x108]
push ecx
mov ecx, 0x6a0f60
call fcn.004d6bc0
push eax
lea edx, [esp + 0x14c]
push str._s__d__
push edx
call ebp
add esp, 0x10
push 0x9bdeff
lea eax, [esp + 0x148]
push eax
mov ecx, edi
call fcn.0043c080
fldz
jmp 0x4b9160
fstp st(0)
inc esi
cmp esi, 5
jle 0x4b90e2
fstp st(0)
mov ebx, dword [esp + 0x50]
cmp word [ebx + 0xac], 0
je 0x4b93cd
movzx ecx, word [ebx + 0xaa]
test cx, cx
je 0x4b93cd
xor eax, eax
mov dword [esp + 0x121], eax
mov dword [esp + 0x125], eax
mov dword [esp + 0x129], eax
mov dword [esp + 0x12d], eax
mov dword [esp + 0x131], eax
mov dword [esp + 0x135], eax
mov dword [esp + 0x139], eax
mov word [esp + 0x13d], ax
mov byte [esp + 0x13f], al
movzx eax, cx
dec eax
mov byte [esp + 0x120], 0
cmp eax, 0xa
ja case.default.0x4b91e5
jmp dword [eax*4 + 0x4b9490]
push 0x196
mov ecx, 0x6a0f60
call fcn.004d6bc0
lea edx, [esp + 0x120]
mov cl, byte [eax]
mov byte [edx], cl
inc eax
inc edx
test cl, cl
jne 0x4b9202
jmp case.default.0x4b91e5
push 0x197
mov ecx, 0x6a0f60
call fcn.004d6bc0
lea edx, [esp + 0x120]
mov cl, byte [eax]
mov byte [edx], cl
inc eax
inc edx
test cl, cl
jne 0x4b9227
jmp case.default.0x4b91e5
push 0x198
mov ecx, 0x6a0f60
call fcn.004d6bc0
lea edx, [esp + 0x120]
lea esp, [esp]
mov cl, byte [eax]
mov byte [edx], cl
inc eax
inc edx
test cl, cl
jne 0x4b9250
jmp case.default.0x4b91e5
push 0x199
mov ecx, 0x6a0f60
call fcn.004d6bc0
lea edx, [esp + 0x120]
mov cl, byte [eax]
mov byte [edx], cl
inc eax
inc edx
test cl, cl
jne 0x4b9275
jmp case.default.0x4b91e5
push 0x19a
mov ecx, 0x6a0f60
call fcn.004d6bc0
lea edx, [esp + 0x120]
lea ebx, [ebx]
mov cl, byte [eax]
mov byte [edx], cl
inc eax
inc edx
test cl, cl
jne 0x4b92a0
jmp case.default.0x4b91e5
push 0x19b
mov ecx, 0x6a0f60
call fcn.004d6bc0
lea edx, [esp + 0x120]
mov cl, byte [eax]
mov byte [edx], cl
inc eax
inc edx
test cl, cl
jne 0x4b92c5
jmp case.default.0x4b91e5
push 0x19c
mov ecx, 0x6a0f60
call fcn.004d6bc0
lea edx, [esp + 0x120]
lea ebx, [ebx]
mov cl, byte [eax]
mov byte [edx], cl
inc eax
inc edx
test cl, cl
jne 0x4b92f0
jmp case.default.0x4b91e5
push 0x19d
mov ecx, 0x6a0f60
call fcn.004d6bc0
lea edx, [esp + 0x120]
mov cl, byte [eax]
mov byte [edx], cl
inc eax
inc edx
test cl, cl
jne 0x4b9315
jmp case.default.0x4b91e5
push 0x19e
mov ecx, 0x6a0f60
call fcn.004d6bc0
lea edx, [esp + 0x120]
mov cl, byte [eax]
mov byte [edx], cl
inc eax
inc edx
test cl, cl
jne 0x4b9337
jmp case.default.0x4b91e5
push 0x19f
mov ecx, 0x6a0f60
call fcn.004d6bc0
lea edx, [esp + 0x120]
lea esp, [esp]
mov cl, byte [eax]
mov byte [edx], cl
inc eax
inc edx
test cl, cl
jne 0x4b9360
jmp case.default.0x4b91e5
push 0x1a0
mov ecx, 0x6a0f60
call fcn.004d6bc0
lea edx, [esp + 0x120]
mov cl, byte [eax]
mov byte [edx], cl
inc eax
inc edx
test cl, cl
jne 0x4b9382
movzx ecx, word [ebx + 0xac]
push ecx
lea edx, [esp + 0x124]
push edx
push 0x1a1
mov ecx, 0x6a0f60
call fcn.004d6bc0
push eax
lea eax, [esp + 0x150]
push eax
call ebp
add esp, 0x10
push 0x9bdeff
lea ecx, [esp + 0x148]
push ecx
mov ecx, edi
call fcn.0043c080
mov esi, dword [esp + 0x48]
mov edx, 0x100
test word [ebx + 0x28], dx
je 0x4b93e5
push ebx
push edi
mov ecx, esi
call fcn.004a9e00
cmp word [ebx + 0xca], 0
je 0x4b93f8
push ebx
push edi
mov ecx, esi
call fcn.004b6810
mov eax, 0x834
cmp word [ebx + 0x28], ax
jne 0x4b940c
push ebx
push edi
mov ecx, esi
call fcn.004ab270
movzx ecx, word [ebx + 0x24]
xor edx, edx
mov eax, ecx
div dword [esi + 0x1e8]
mov eax, dword [esi + 0x1ec]
mov edx, dword [eax + edx*4]
test edx, edx
je 0x4b9466
cmp dword [edx], ecx
je 0x4b9434
mov edx, dword [edx + 0xc]
test edx, edx
jne 0x4b9427
jmp 0x4b9466
mov esi, dword [edx + 4]
test esi, esi
je 0x4b9466
push 0xf0f0f0
push 0x5af25f
mov ecx, edi
call fcn.0043c080
lea esp, [esp]
mov ecx, dword [esi]
push 0xc8d7aa
push ecx
mov ecx, edi
call fcn.0043c080
mov esi, dword [esi + 4]
test esi, esi
jne 0x4b9450
mov ecx, dword [esp + 0x748]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebp
pop ebx
mov ecx, dword [esp + 0x730]
xor ecx, esp
call fcn.005997a8
add esp, 0x740
ret 0x14