Function at 0x47cf70
Capabilities:
Create process on windows
Self delete

Disassembly:
enter 0xbb4, 1
push ebx
push ecx
push edx
mov dword [ebp - 8], esp
lea eax, [ebp - 0x194]
push eax
push 0x4ed800
call fcn.0041ac50
lea esi, [ebp - 0x194]
mov edi, 0x4d85f4
call fcn.00415520
test al, al
je 0x4821d9
push 0x4d85f5
push 6
push 0x15
push 0x4b
push 0x18
push 0x20
push 0
push 0
call fcn.0040cd00
mov eax, dword [0x4e91ad]
mov dword [ebp - 0x198], eax
push 1
push 7
push 0x15
push dword [0x4d8608]
push 3
push 0x4d860c
call fcn.004206d2
push 0xb
push 0x16
push 0x4d8620
call fcn.00408840
push 8
push 0x17
push 0x4d862c
call fcn.00408840
mov eax, dword [ebp - 0x198]
call fcn.0040b6d2
push 0x17
push 0x16
push 0x1f
call fcn.00408970
push 0x17
push 0x17
push 0x32
call fcn.00408970
mov eax, dword [ebp - 0x198]
call fcn.004092f2
push 0x17
push 0x16
lea eax, [ebp - 0x298]
push eax
lea eax, [ebp - 0x598]
push eax
push 0x4edc0c
call fcn.0041ac50
lea esi, [ebp - 0x598]
lea edi, [ebp - 0x498]
call fcn.00401b30
mov esi, 0x4d863b
call fcn.00401af0
mov esi, edi
lea edi, [ebp - 0x398]
call fcn.00401b30
lea eax, [ebp - 0x698]
push eax
push 0x4edc21
call fcn.0041ac50
lea esi, [ebp - 0x698]
lea edi, [ebp - 0x398]
call fcn.00401af0
mov eax, edi
push eax
push 0x1f
call fcn.0041b510
lea eax, [ebp - 0x298]
push eax
call fcn.004043a0
push 0x17
push 0x17
push 0x4ed800
call fcn.004043a0
push 0x4e8328
lea eax, [ebp - 0x398]
push eax
push 0x4edc52
call fcn.0041ac50
lea esi, [ebp - 0x398]
lea edi, [ebp - 0x298]
call fcn.00401b30
mov esi, 0x4d863d
call fcn.00401af0
mov eax, edi
push eax
call fcn.00401e60
push 0x4e8328
call fcn.00401210
call fcn.0041b260
push 0x4d8642
push 0x4d8651
push 0x4d865d
push 0x26c
push 0x196
push 1
push 4
push 0xd
lea eax, [ebp - 0x74]
push eax
call fcn.004850c0
mov dword [ebp - 0xc], eax
movzx eax, byte [ebp + 8]
imul eax, eax, 0x640
lea eax, [eax + 0x4edff7]
mov dword [ebp - 0x19c], eax
push 6
push 0x155
push 0x261
push 0x32
push 1
call fcn.00485000
add dword [ebp - 0xc], eax
push 6
push 0x5a
push 0xe6
push 0xf6
push 1
call fcn.00485000
add dword [ebp - 0xc], eax
push 6
push 0x19
push 0xe6
push 0x3c
push 1
call fcn.00485000
add dword [ebp - 0xc], eax
push 0xf0
push 0xb7
push 0xb4
push 0x99
push 1
call fcn.00485000
add dword [ebp - 0xc], eax
push 0xf0
push 0x19
push 0xb4
push 0x99
push 1
call fcn.00485000
add dword [ebp - 0xc], eax
push 0x1a8
push 0x19
push 0xbf
push 0x137
push 1
call fcn.00485000
add dword [ebp - 0xc], eax
push 6
push 0x178
push 0x267
push 0x178
call fcn.00484f00
add dword [ebp - 0xc], eax
push 6
push 0x142
push 0xec
push 0x142
call fcn.00484f00
add dword [ebp - 0xc], eax
push 6
push 0x68
push 0xec
push 0x68
call fcn.00484f00
add dword [ebp - 0xc], eax
push 0xf0
push 0x142
push 0x1a4
push 0x142
call fcn.00484f00
add dword [ebp - 0xc], eax
push 0x1a8
push 0x142
push 0x267
push 0x142
call fcn.00484f00
add dword [ebp - 0xc], eax
push 0x1a8
push 0x10c
push 0x267
push 0x10c
call fcn.00484f00
add dword [ebp - 0xc], eax
push 0x1a8
push 0xea
push 0x267
push 0xea
call fcn.00484f00
add dword [ebp - 0xc], eax
push 0x1a8
push 0xdc
push 0x267
push 0xdc
call fcn.00484f00
add dword [ebp - 0xc], eax
push 0x1a8
push 0xb8
push 0x267
push 0xb8
call fcn.00484f00
add dword [ebp - 0xc], eax
push 0x1a8
push 0xaa
push 0x267
push 0xaa
call fcn.00484f00
add dword [ebp - 0xc], eax
push 0x1a8
push 0x90
push 0x267
push 0x90
call fcn.00484f00
add dword [ebp - 0xc], eax
push 0x1a8
push 0x82
push 0x267
push 0x82
call fcn.00484f00
add dword [ebp - 0xc], eax
push 6
push 0x47
push 0xec
push 0x47
call fcn.00484f00
add dword [ebp - 0xc], eax
push 0xf0
push 0xc5
push 0x1a4
push 0xc5
call fcn.00484f00
add dword [ebp - 0xc], eax
push 0xf0
push 0xa0
push 0x1a4
push 0xa0
call fcn.00484f00
add dword [ebp - 0xc], eax
push 0xf0
push 0x27
push 0x1a4
push 0x27
call fcn.00484f00
add dword [ebp - 0xc], eax
push 0xa9
push 0x150
push 0xa9
push 0x5a
call fcn.00484f00
add dword [ebp - 0xc], eax
push 0x89
push 0x150
push 0x89
push 0x68
call fcn.00484f00
add dword [ebp - 0xc], eax
push 0x6e
push 0x150
push 0x6e
push 0x68
call fcn.00484f00
add dword [ebp - 0xc], eax
push 0xa9
push 0x47
push 0xa9
push 0x19
call fcn.00484f00
add dword [ebp - 0xc], eax
push 0x15c
push 0x150
push 0x15c
push 0xb7
call fcn.00484f00
add dword [ebp - 0xc], eax
push 0x15c
push 0xb2
push 0x15c
push 0x19
call fcn.00484f00
add dword [ebp - 0xc], eax
push 0x21f
push 0x150
push 0x21f
push 0xfe
call fcn.00484f00
add dword [ebp - 0xc], eax
push 0x21f
push 0xf0
push 0x21f
push 0x8c
call fcn.00484f00
add dword [ebp - 0xc], eax
sub esp, 8
mov esi, 0x4d865e
mov edi, esp
movsd dword es:[edi], dword [esi]
movsw word es:[edi], word [esi]
sub esp, 8
mov esi, 0x4d8664
mov edi, esp
movsd dword es:[edi], dword [esi]
movsw word es:[edi], word [esi]
sub esp, 8
mov esi, 0x4d866a
mov edi, esp
movsd dword es:[edi], dword [esi]
movsw word es:[edi], word [esi]
push 0x4d8670
sub esp, 8
mov esi, 0x4d8674
mov edi, esp
movsd dword es:[edi], dword [esi]
movsw word es:[edi], word [esi]
sub esp, 8
mov esi, 0x4d867a
mov edi, esp
movsd dword es:[edi], dword [esi]
movsw word es:[edi], word [esi]
sub esp, 8
mov esi, 0x4d8680
mov edi, esp
movsd dword es:[edi], dword [esi]
movsw word es:[edi], word [esi]
sub esp, 8
mov esi, 0x4d8686
mov edi, esp
movsd dword es:[edi], dword [esi]
movsw word es:[edi], word [esi]
lea eax, [ebp - 0x29c]
push eax
mov esi, 0x4ea17e
lea edi, [ebp - 0x39c]
call fcn.00401b30
mov esi, 0x4ea1a2
call fcn.00401af0
mov eax, edi
push eax
call fcn.0041ac50
lea eax, [ebp - 0x29c]
push eax
call fcn.004849c0
add dword [ebp - 0xc], eax
sub esp, 8
mov esi, 0x4d868c
mov edi, esp
movsd dword es:[edi], dword [esi]
movsw word es:[edi], word [esi]
sub esp, 8
mov esi, 0x4d8692
mov edi, esp
movsd dword es:[edi], dword [esi]
movsw word es:[edi], word [esi]
sub esp, 8
mov esi, 0x4d8698
mov edi, esp
movsd dword es:[edi], dword [esi]
movsw word es:[edi], word [esi]
push 0x4d869e
sub esp, 8
mov esi, 0x4d86a2
mov edi, esp
movsd dword es:[edi], dword [esi]
movsw word es:[edi], word [esi]
sub esp, 8
mov esi, 0x4d86a8
mov edi, esp
movsd dword es:[edi], dword [esi]
movsw word es:[edi], word [esi]
sub esp, 8
mov esi, 0x4d86ae
mov edi, esp
movsd dword es:[edi], dword [esi]
movsw word es:[edi], word [esi]
sub esp, 8
mov esi, 0x4d86b4
mov edi, esp
movsd dword es:[edi], dword [esi]
movsw word es:[edi], word [esi]
push 0x4d86ba
call fcn.004849c0
add dword [ebp - 0xc], eax
sub esp, 8
mov esi, 0x4d86c6
mov edi, esp
movsd dword es:[edi], dword [esi]
movsw word es:[edi], word [esi]
sub esp, 8
mov esi, 0x4d86cc
mov edi, esp
movsd dword es:[edi], dword [esi]
movsw word es:[edi], word [esi]
sub esp, 8
mov esi, 0x4d86d2
mov edi, esp
movsd dword es:[edi], dword [esi]
movsw word es:[edi], word [esi]
push 0x4d86d8
sub esp, 8
mov esi, 0x4d86dc
mov edi, esp
movsd dword es:[edi], dword [esi]
movsw word es:[edi], word [esi]
sub esp, 8
mov esi, 0x4d86e2
mov edi, esp
movsd dword es:[edi], dword [esi]
movsw word es:[edi], word [esi]
sub esp, 8
mov esi, 0x4d86e8
mov edi, esp
movsd dword es:[edi], dword [esi]
movsw word es:[edi], word [esi]
sub esp, 8
mov esi, 0x4d86ee
mov edi, esp
movsd dword es:[edi], dword [esi]
movsw word es:[edi], word [esi]
mov esi, 0x4d86f4
lea edi, [ebp - 0x29c]
call fcn.00401b30
mov esi, 0x4e9e64
call fcn.00401af0
mov eax, edi
push eax
call fcn.004849c0
add dword [ebp - 0xc], eax
sub esp, 8
mov esi, 0x4d8700
mov edi, esp
movsd dword es:[edi], dword [esi]
movsw word es:[edi], word [esi]
sub esp, 8
mov esi, 0x4d8706
mov edi, esp
movsd dword es:[edi], dword [esi]
movsw word es:[edi], word [esi]
sub esp, 8
mov esi, 0x4d870c
mov edi, esp
movsd dword es:[edi], dword [esi]
movsw word es:[edi], word [esi]
push 0x4d8712
sub esp, 8
mov esi, 0x4d8716
mov edi, esp
movsd dword es:[edi], dword [esi]
movsw word es:[edi], word [esi]
sub esp, 8
mov esi, 0x4d871c
mov edi, esp
movsd dword es:[edi], dword [esi]
movsw word es:[edi], word [esi]
sub esp, 8
mov esi, 0x4d8722
mov edi, esp
movsd dword es:[edi], dword [esi]
movsw word es:[edi], word [esi]
sub esp, 8
mov esi, 0x4d8728
mov edi, esp
movsd dword es:[edi], dword [esi]
movsw word es:[edi], word [esi]
mov esi, 0x4d872e
lea edi, [ebp - 0x29c]
call fcn.00401b30
mov esi, 0x4edc52
call fcn.00401af0
mov eax, edi
push eax
call fcn.004849c0
add dword [ebp - 0xc], eax
sub esp, 8
mov esi, 0x4d873f
mov edi, esp
movsd dword es:[edi], dword [esi]
movsw word es:[edi], word [esi]
sub esp, 8
mov esi, 0x4d8745
mov edi, esp
movsd dword es:[edi], dword [esi]
movsw word es:[edi], word [esi]
sub esp, 8
mov esi, 0x4d874b
mov edi, esp
movsd dword es:[edi], dword [esi]
movsw word es:[edi], word [esi]
push 0x4d8751
sub esp, 8
mov esi, 0x4d8755
mov edi, esp
movsd dword es:[edi], dword [esi]
movsw word es:[edi], word [esi]
sub esp, 8
mov esi, 0x4d875b
mov edi, esp
movsd dword es:[edi], dword [esi]
movsw word es:[edi], word [esi]
sub esp, 8
mov esi, 0x4d8761
mov edi, esp
movsd dword es:[edi], dword [esi]
movsw word es:[edi], word [esi]
sub esp, 8
mov esi, 0x4d8767
mov edi, esp
movsd dword es:[edi], dword [esi]
movsw word es:[edi], word [esi]
mov esi, 0x4d876d
lea edi, [ebp - 0x29c]
call fcn.00401b30
mov esi, 0x4ed924
call fcn.00401af0
mov eax, edi
push eax
call fcn.004849c0
add dword [ebp - 0xc], eax
sub esp, 8
mov esi, 0x4d8780
mov edi, esp
movsd dword es:[edi], dword [esi]
movsw word es:[edi], word [esi]
sub esp, 8
mov esi, 0x4d8786
mov edi, esp
movsd dword es:[edi], dword [esi]
movsw word es:[edi], word [esi]
sub esp, 8
mov esi, 0x4d878c
mov edi, esp
movsd dword es:[edi], dword [esi]
movsw word es:[edi], word [esi]
push 0x4d8792
sub esp, 8
mov esi, 0x4d8796
mov edi, esp
movsd dword es:[edi], dword [esi]
movsw word es:[edi], word [esi]
sub esp, 8
mov esi, 0x4d879c
mov edi, esp
movsd dword es:[edi], dword [esi]
movsw word es:[edi], word [esi]
sub esp, 8
mov esi, 0x4d87a2
mov edi, esp
movsd dword es:[edi], dword [esi]
movsw word es:[edi], word [esi]
sub esp, 8
mov esi, 0x4d87a8
mov edi, esp
movsd dword es:[edi], dword [esi]
movsw word es:[edi], word [esi]
mov esi, 0x4d87ae
lea edi, [ebp - 0x49c]
call fcn.00401b30
lea eax, [ebp - 0x4a4]
push eax
movzx eax, byte [ebp + 0xc]
push eax
push 0
call fcn.00436b70
lea esi, [ebp - 0x4a4]
lea edi, [ebp - 0x49c]
call fcn.00401af0
mov esi, edi
lea edi, [ebp - 0x39c]
call fcn.00401b30
mov esi, 0x4d87b4
call fcn.00401af0
mov esi, edi
lea edi, [ebp - 0x29c]
call fcn.00401b30
mov esi, 0x4e9978
call fcn.00401af0
mov eax, edi
push eax
call fcn.004849c0
add dword [ebp - 0xc], eax
sub esp, 8
mov esi, 0x4d87b7
mov edi, esp
movsd dword es:[edi], dword [esi]
movsw word es:[edi], word [esi]
sub esp, 8
mov esi, 0x4d87bd
mov edi, esp
movsd dword es:[edi], dword [esi]
movsw word es:[edi], word [esi]
sub esp, 8
mov esi, 0x4d87c3
mov edi, esp
movsd dword es:[edi], dword [esi]
movsw word es:[edi], word [esi]
push 0x4d87c9
sub esp, 8
mov esi, 0x4d87cd
mov edi, esp
movsd dword es:[edi], dword [esi]
movsw word es:[edi], word [esi]
sub esp, 8
mov esi, 0x4d87d3
mov edi, esp
movsd dword es:[edi], dword [esi]
movsw word es:[edi], word [esi]
sub esp, 8
mov esi, 0x4d87d9
mov edi, esp
movsd dword es:[edi], dword [esi]
movsw word es:[edi], word [esi]
sub esp, 8
mov esi, 0x4d87df
mov edi, esp
movsd dword es:[edi], dword [esi]
movsw word es:[edi], word [esi]
mov esi, 0x4d87e5
lea edi, [ebp - 0x29c]
call fcn.00401b30
mov esi, 0x4edc0c
call fcn.00401af0
mov eax, edi
push eax
call fcn.004849c0
add dword [ebp - 0xc], eax
mov ax, word [ebp + 0x10]
push eax
movzx eax, byte [0x4edc4f]
dec eax
imul eax, eax, 0x40
movzx ebx, byte [0x4efb39]
add eax, ebx
push eax
movzx eax, word [0x4f2762]
push eax
push 0x4ea20e
push 0
push 0
call fcn.0040f4f0
sub esp, 8
mov esi, 0x4d87ec
mov edi, esp
movsd dword es:[edi], dword [esi]
movsw word es:[edi], word [esi]
sub esp, 8
mov esi, 0x4d87f2
mov edi, esp
movsd dword es:[edi], dword [esi]
movsw word es:[edi], word [esi]
sub esp, 8
mov esi, 0x4d87f8
mov edi, esp
movsd dword es:[edi], dword [esi]
movsw word es:[edi], word [esi]
push 0x4d87fe
sub esp, 8
mov esi, 0x4d8802
mov edi, esp
movsd dword es:[edi], dword [esi]
movsw word es:[edi], word [esi]
sub esp, 8
mov esi, 0x4d8808
mov edi, esp
movsd dword es:[edi], dword [esi]
movsw word es:[edi], word [esi]
sub esp, 8
mov esi, 0x4d880e
mov edi, esp
movsd dword es:[edi], dword [esi]
movsw word es:[edi], word [esi]
sub esp, 8
mov esi, 0x4d8814
mov edi, esp
movsd dword es:[edi], dword [esi]
movsw word es:[edi], word [esi]
mov esi, 0x4d881a
lea edi, [ebp - 0x29c]
call fcn.00401b30
mov esi, 0x4ea477
call fcn.00401af0
mov eax, edi
push eax
call fcn.004849c0
add dword [ebp - 0xc], eax
sub esp, 8
mov esi, 0x4d8827
mov edi, esp
movsd dword es:[edi], dword [esi]
movsw word es:[edi], word [esi]
sub esp, 8
mov esi, 0x4d882d
mov edi, esp
movsd dword es:[edi], dword [esi]
movsw word es:[edi], word [esi]
sub esp, 8
mov esi, 0x4d8833
mov edi, esp
movsd dword es:[edi], dword [esi]
movsw word es:[edi], word [esi]
push 0x4d8839
sub esp, 8
mov esi, 0x4d883d
mov edi, esp
movsd dword es:[edi], dword [esi]
movsw word es:[edi], word [esi]
sub esp, 8
mov esi, 0x4d8843
mov edi, esp
movsd dword es:[edi], dword [esi]
movsw word es:[edi], word [esi]
sub esp, 8
mov esi, 0x4d8849
mov edi, esp
movsd dword es:[edi], dword [esi]
movsw word es:[edi], word [esi]
sub esp, 8
mov esi, 0x4d884f
mov edi, esp
movsd dword es:[edi], dword [esi]
movsw word es:[edi], word [esi]
push 0x4d8855
call fcn.004849c0
add dword [ebp - 0xc], eax
lea eax, [ebp - 0x29c]
push eax
lea ebx, [ebp - 0x2b4]
push ebx
movzx eax, byte [ebp + 0xc]
sub esp, 8
fld qword [eax*8 + 0x4ed93c]
fstp qword [esp]
wait
push 0x11
push 2
call fcn.0040b950
lea eax, [ebp - 0x2b4]
push eax
call fcn.0041ac50
lea edi, [ebp - 0x3c]
lea esi, [ebp - 0x29c]
push 0x11
call fcn.00401950
sub esp, 8
mov esi, 0x4d8865
mov edi, esp
movsd dword es:[edi], dword [esi]
movsw word es:[edi], word [esi]
sub esp, 8
mov esi, 0x4d886b
mov edi, esp
movsd dword es:[edi], dword [esi]
movsw word es:[edi], word [esi]
sub esp, 8
mov esi, 0x4d8871
mov edi, esp
movsd dword es:[edi], dword [esi]
movsw word es:[edi], word [esi]
push 0x4d8877
sub esp, 8
mov esi, 0x4d887b
mov edi, esp
movsd dword es:[edi], dword [esi]
movsw word es:[edi], word [esi]
sub esp, 8
mov esi, 0x4d8881
mov edi, esp
movsd dword es:[edi], dword [esi]
movsw word es:[edi], word [esi]
mov eax, 5
movzx ebx, byte [ebp - 0x3c]
imul eax, ebx
mov ebx, 0x262
sub ebx, eax
mov dword [ebp - 0x1a0], ebx
fild dword [ebp - 0x1a0]
lea edi, [ebp - 0x1a8]
call fcn.0040be55
sub esp, 8
lea esi, [ebp - 0x1a8]
mov edi, esp
movsd dword es:[edi], dword [esi]
movsw word es:[edi], word [esi]
sub esp, 8
mov esi, 0x4d8887
mov edi, esp
movsd dword es:[edi], dword [esi]
movsw word es:[edi], word [esi]
lea eax, [ebp - 0x3c]
push eax
call fcn.004849c0
add dword [ebp - 0xc], eax
sub esp, 8
mov esi, 0x4d888d
mov edi, esp
movsd dword es:[edi], dword [esi]
movsw word es:[edi], word [esi]
sub esp, 8
mov esi, 0x4d8893
mov edi, esp
movsd dword es:[edi], dword [esi]
movsw word es:[edi], word [esi]
sub esp, 8
mov esi, 0x4d8899
mov edi, esp
movsd dword es:[edi], dword [esi]
movsw word es:[edi], word [esi]
push 0x4d889f
sub esp, 8
mov esi, 0x4d88a3
mov edi, esp
movsd dword es:[edi], dword [esi]
movsw word es:[edi], word [esi]
sub esp, 8
mov esi, 0x4d88a9
mov edi, esp
movsd dword es:[edi], dword [esi]
movsw word es:[edi], word [esi]
sub esp, 8
mov esi, 0x4d88af
mov edi, esp
movsd dword es:[edi], dword [esi]
movsw word es:[edi], word [esi]
sub esp, 8
mov esi, 0x4d88b5
mov edi, esp
movsd dword es:[edi], dword [esi]
movsw word es:[edi], word [esi]
mov esi, 0x4d88bb
lea edi, [ebp - 0x29c]
call fcn.00401b30
mov esi, 0x4edc21
call fcn.00401af0
mov eax, edi
push eax
call fcn.004849c0
add dword [ebp - 0xc], eax
cmp byte [0x4ed7ae], 0x54
jne 0x47db3b
sub esp, 8
mov esi, 0x4d88c5
mov edi, esp
movsd dword es:[edi], dword [esi]
movsw word es:[edi], word [esi]
sub esp, 8
mov esi, 0x4d88cb
mov edi, esp
movsd dword es:[edi], dword [esi]
movsw word es:[edi], word [esi]
sub esp, 8
mov esi, 0x4d88d1
mov edi, esp
movsd dword es:[edi], dword [esi]
movsw word es:[edi], word [esi]
push 0x4d88d7
sub esp, 8
mov esi, 0x4d88db
mov edi, esp
movsd dword es:[edi], dword [esi]
movsw word es:[edi], word [esi]
sub esp, 8
mov esi, 0x4d88e1
mov edi, esp
movsd dword es:[edi], dword [esi]
movsw word es:[edi], word [esi]
sub esp, 8
mov esi, 0x4d88e7
mov edi, esp
movsd dword es:[edi], dword [esi]
movsw word es:[edi], word [esi]
sub esp, 8
mov esi, 0x4d88ed
mov edi, esp
movsd dword es:[edi], dword [esi]
movsw word es:[edi], word [esi]
mov esi, 0x4d88f3
lea edi, [ebp - 0x29c]
call fcn.00401b30
mov esi, 0x4edb12
call fcn.00401af0
mov eax, edi
push eax
call fcn.004849c0
add dword [ebp - 0xc], eax
jmp 0x47dba8
sub esp, 8
mov esi, 0x4d8905
mov edi, esp
movsd dword es:[edi], dword [esi]
movsw word es:[edi], word [esi]
sub esp, 8
mov esi, 0x4d890b
mov edi, esp
movsd dword es:[edi], dword [esi]
movsw word es:[edi], word [esi]
sub esp, 8
mov esi, 0x4d8911
mov edi, esp
movsd dword es:[edi], dword [esi]
movsw word es:[edi], word [esi]
push 0x4d8917
sub esp, 8
mov esi, 0x4d891b
mov edi, esp
movsd dword es:[edi], dword [esi]
movsw word es:[edi], word [esi]
sub esp, 8
mov esi, 0x4d8921
mov edi, esp
movsd dword es:[edi], dword [esi]
movsw word es:[edi], word [esi]
sub esp, 8
mov esi, 0x4d8927
mov edi, esp
movsd dword es:[edi], dword [esi]
movsw word es:[edi], word [esi]
sub esp, 8
mov esi, 0x4d892d
mov edi, esp
movsd dword es:[edi], dword [esi]
movsw word es:[edi], word [esi]
push 0x4d8933
call fcn.004849c0
add dword [ebp - 0xc], eax
sub esp, 8
mov esi, 0x4d8945
mov edi, esp
movsd dword es:[edi], dword [esi]
movsw word es:[edi], word [esi]
sub esp, 8
mov esi, 0x4d894b
mov edi, esp
movsd dword es:[edi], dword [esi]
movsw word es:[edi], word [esi]
sub esp, 8
mov esi, 0x4d8951
mov edi, esp
movsd dword es:[edi], dword [esi]
movsw word es:[edi], word [esi]
push 0x4d8957
sub esp, 8
mov esi, 0x4d895b
mov edi, esp
movsd dword es:[edi], dword [esi]
movsw word es:[edi], word [esi]
sub esp, 8
mov esi, 0x4d8961
mov edi, esp
movsd dword es:[edi], dword [esi]
movsw word es:[edi], word [esi]
sub esp, 8
mov esi, 0x4d8967
mov edi, esp
movsd dword es:[edi], dword [esi]
movsw word es:[edi], word [esi]
sub esp, 8
mov esi, 0x4d896d
mov edi, esp
movsd dword es:[edi], dword [esi]
movsw word es:[edi], word [esi]
push 0x4d8973
call fcn.004849c0
add dword [ebp - 0xc], eax
fld xword [0x4d8983]
mov eax, dword [ebp - 0x19c]
fld qword [eax + 0x528]
wait
fcompp
wait
fnstsw ax
wait
sahf
jbe 0x47dd3c
lea eax, [ebp - 0x29c]
push eax
lea ebx, [ebp - 0x2b4]
push ebx
mov edi, dword [ebp - 0x19c]
fld qword [edi + 0x538]
mov esi, dword [ebp - 0x19c]
fld qword [esi + 0x548]
faddp st(1)
mov eax, dword [ebp - 0x19c]
fld qword [eax + 0x540]
faddp st(1)
mov esi, dword [ebp - 0x19c]
fld qword [esi + 0x528]
fdivp st(1)
sub esp, 8
fstp qword [esp]
wait
push 0x11
push 2
call fcn.0040b950
lea eax, [ebp - 0x2b4]
push eax
call fcn.0041ac50
lea edi, [ebp - 0x3c]
lea esi, [ebp - 0x29c]
push 0x11
call fcn.00401950
sub esp, 8
mov esi, 0x4d898d
mov edi, esp
movsd dword es:[edi], dword [esi]
movsw word es:[edi], word [esi]
sub esp, 8
mov esi, 0x4d8993
mov edi, esp
movsd dword es:[edi], dword [esi]
movsw word es:[edi], word [esi]
sub esp, 8
mov esi, 0x4d8999
mov edi, esp
movsd dword es:[edi], dword [esi]
movsw word es:[edi], word [esi]
push 0x4d899f
sub esp, 8
mov esi, 0x4d89a3
mov edi, esp
movsd dword es:[edi], dword [esi]
movsw word es:[edi], word [esi]
sub esp, 8
mov esi, 0x4d89a9
mov edi, esp
movsd dword es:[edi], dword [esi]
movsw word es:[edi], word [esi]
mov eax, 5
movzx ebx, byte [ebp - 0x3c]
imul eax, ebx
mov ebx, 0x262
sub ebx, eax
mov dword [ebp - 0x1a0], ebx
fild dword [ebp - 0x1a0]
lea edi, [ebp - 0x1a8]
call fcn.0040be55
sub esp, 8
lea esi, [ebp - 0x1a8]
mov edi, esp
movsd dword es:[edi], dword [esi]
movsw word es:[edi], word [esi]
sub esp, 8
mov esi, 0x4d89af
mov edi, esp
movsd dword es:[edi], dword [esi]
movsw word es:[edi], word [esi]
lea eax, [ebp - 0x3c]
push eax
call fcn.004849c0
add dword [ebp - 0xc], eax
sub esp, 8
mov esi, 0x4d89b5
mov edi, esp
movsd dword es:[edi], dword [esi]
movsw word es:[edi], word [esi]
sub esp, 8
mov esi, 0x4d89bb
mov edi, esp
movsd dword es:[edi], dword [esi]
movsw word es:[edi], word [esi]
sub esp, 8
mov esi, 0x4d89c1
mov edi, esp
movsd dword es:[edi], dword [esi]
movsw word es:[edi], word [esi]
push 0x4d89c7
sub esp, 8
mov esi, 0x4d89cb
mov edi, esp
movsd dword es:[edi], dword [esi]
movsw word es:[edi], word [esi]
sub esp, 8
mov esi, 0x4d89d1
mov edi, esp
movsd dword es:[edi], dword [esi]
movsw word es:[edi], word [esi]
sub esp, 8
mov esi, 0x4d89d7
mov edi, esp
movsd dword es:[edi], dword [esi]
movsw word es:[edi], word [esi]
sub esp, 8
mov esi, 0x4d89dd
mov edi, esp
movsd dword es:[edi], dword [esi]
movsw word es:[edi], word [esi]
push 0x4d89e3
call fcn.004849c0
add dword [ebp - 0xc], eax
sub esp, 8
mov esi, 0x4d89ed
mov edi, esp
movsd dword es:[edi], dword [esi]
movsw word es:[edi], word [esi]
sub esp, 8
mov esi, 0x4d89f3
mov edi, esp
movsd dword es:[edi], dword [esi]
movsw word es:[edi], word [esi]
sub esp, 8
mov esi, 0x4d89f9
mov edi, esp
movsd dword es:[edi], dword [esi]
movsw word es:[edi], word [esi]
push 0x4d89ff
sub esp, 8
mov esi, 0x4d8a03
mov edi, esp
movsd dword es:[edi], dword [esi]
movsw word es:[edi], word [esi]
sub esp, 8
mov esi, 0x4d8a09
mov edi, esp
movsd dword es:[edi], dword [esi]
movsw word es:[edi], word [esi]
sub esp, 8
mov esi, 0x4d8a0f
mov edi, esp
movsd dword es:[edi], dword [esi]
movsw word es:[edi], word [esi]
sub esp, 8
mov esi, 0x4d8a15
mov edi, esp
movsd dword es:[edi], dword [esi]
movsw word es:[edi], word [esi]
push 0x4d8a1b
call fcn.004849c0
add dword [ebp - 0xc], eax
sub esp, 8
mov esi, 0x4d8a1f
mov edi, esp
movsd dword es:[edi], dword [esi]
movsw word es:[edi], word [esi]
sub esp, 8
mov esi, 0x4d8a25
mov edi, esp
movsd dword es:[edi], dword [esi]
movsw word es:[edi], word [esi]
sub esp, 8
mov esi, 0x4d8a2b
mov edi, esp
movsd dword es:[edi], dword [esi]
movsw word es:[edi], word [esi]
push 0x4d8a31
sub esp, 8
mov esi, 0x4d8a35
mov edi, esp
movsd dword es:[edi], dword [esi]
movsw word es:[edi], word [esi]
sub esp, 8
mov esi, 0x4d8a3b
mov edi, esp
movsd dword es:[edi], dword [esi]
movsw word es:[edi], word [esi]
sub esp, 8
mov esi, 0x4d8a41
mov edi, esp
movsd dword es:[edi], dword [esi]
movsw word es:[edi], word [esi]
sub esp, 8
mov esi, 0x4d8a47
mov edi, esp
movsd dword es:[edi], dword [esi]
movsw word es:[edi], word [esi]
push 0x4d8a4d
call fcn.004849c0
add dword [ebp - 0xc], eax
sub esp, 8
mov esi, 0x4d8a52
mov edi, esp
movsd dword es:[edi], dword [esi]
movsw word es:[edi], word [esi]
sub esp, 8
mov esi, 0x4d8a58
mov edi, esp
movsd dword es:[edi], dword [esi]
movsw word es:[edi], word [esi]
sub esp, 8
mov esi, 0x4d8a5e
mov edi, esp
movsd dword es:[edi], dword [esi]
movsw word es:[edi], word [esi]
push 0x4d8a64
sub esp, 8
mov esi, 0x4d8a68
mov edi, esp
movsd dword es:[edi], dword [esi]
movsw word es:[edi], word [esi]
sub esp, 8
mov esi, 0x4d8a6e
mov edi, esp
movsd dword es:[edi], dword [esi]
movsw word es:[edi], word [esi]
sub esp, 8
mov esi, 0x4d8a74
mov edi, esp
movsd dword es:[edi], dword [esi]
movsw word es:[edi], word [esi]
sub esp, 8
mov esi, 0x4d8a7a
mov edi, esp
movsd dword es:[edi], dword [esi]
movsw word es:[edi], word [esi]
push 0x4d8a80
call fcn.004849c0
add dword [ebp - 0xc], eax
sub esp, 8
mov esi, 0x4d8a86
mov edi, esp
movsd dword es:[edi], dword [esi]
movsw word es:[edi], word [esi]
sub esp, 8
mov esi, 0x4d8a8c
mov edi, esp
movsd dword es:[edi], dword [esi]
movsw word es:[edi], word [esi]
sub esp, 8
mov esi, 0x4d8a92
mov edi, esp
movsd dword es:[edi], dword [esi]
movsw word es:[edi], word [esi]
push 0x4d8a98
sub esp, 8
mov esi, 0x4d8a9c
mov edi, esp
movsd dword es:[edi], dword [esi]
movsw word es:[edi], word [esi]
sub esp, 8
mov esi, 0x4d8aa2
mov edi, esp
movsd dword es:[edi], dword [esi]
movsw word es:[edi], word [esi]
sub esp, 8
mov esi, 0x4d8aa8
mov edi, esp
movsd dword es:[edi], dword [esi]
movsw word es:[edi], word [esi]
sub esp, 8
mov esi, 0x4d8aae
mov edi, esp
movsd dword es:[edi], dword [esi]
movsw word es:[edi], word [esi]
push 0x4d8ab4
call fcn.004849c0
add dword [ebp - 0xc], eax
sub esp, 8
mov esi, 0x4d8ac5
mov edi, esp
movsd dword es:[edi], dword [esi]
movsw word es:[edi], word [esi]
sub esp, 8
mov esi, 0x4d8acb
mov edi, esp
movsd dword es:[edi], dword [esi]
movsw word es:[edi], word [esi]
sub esp, 8
mov esi, 0x4d8ad1
mov edi, esp
movsd dword es:[edi], dword [esi]
movsw word es:[edi], word [esi]
push 0x4d8ad7
sub esp, 8
mov esi, 0x4d8adb
mov edi, esp
movsd dword es:[edi], dword [esi]
movsw word es:[edi], word [esi]
sub esp, 8
mov esi, 0x4d8ae1
mov edi, esp
movsd dword es:[edi], dword [esi]
movsw word es:[edi], word [esi]
sub esp, 8
mov esi, 0x4d8ae7
mov edi, esp
movsd dword es:[edi], dword [esi]
movsw word es:[edi], word [esi]
sub esp, 8
mov esi, 0x4d8aed
mov edi, esp
movsd dword es:[edi], dword [esi]
movsw word es:[edi], word [esi]
push 0x4d8af3
call fcn.004849c0
add dword [ebp - 0xc], eax
sub esp, 8
mov esi, 0x4d8af9
mov edi, esp
movsd dword es:[edi], dword [esi]
movsw word es:[edi], word [esi]
sub esp, 8
mov esi, 0x4d8aff
mov edi, esp
movsd dword es:[edi], dword [esi]
movsw word es:[edi], word [esi]
sub esp, 8
mov esi, 0x4d8b05
mov edi, esp
movsd dword es:[edi], dword [esi]
movsw word es:[edi], word [esi]
push 0x4d8b0b
sub esp, 8
mov esi, 0x4d8b0f
mov edi, esp
movsd dword es:[edi], dword [esi]
movsw word es:[edi], word [esi]
sub esp, 8
mov esi, 0x4d8b15
mov edi, esp
movsd dword es:[edi], dword [esi]
movsw word es:[edi], word [esi]
sub esp, 8
mov esi, 0x4d8b1b
mov edi, esp
movsd dword es:[edi], dword [esi]
movsw word es:[edi], word [esi]
sub esp, 8
mov esi, 0x4d8b21
mov edi, esp
movsd dword es:[edi], dword [esi]
movsw word es:[edi], word [esi]
push 0x4d8b27
call fcn.004849c0
add dword [ebp - 0xc], eax
sub esp, 8
mov esi, 0x4d8b38
mov edi, esp
movsd dword es:[edi], dword [esi]
movsw word es:[edi], word [esi]
sub esp, 8
mov esi, 0x4d8b3e
mov edi, esp
movsd dword es:[edi], dword [esi]
movsw word es:[edi], word [esi]
sub esp, 8
mov esi, 0x4d8b44
mov edi, esp
movsd dword es:[edi], dword [esi]
movsw word es:[edi], word [esi]
push 0x4d8b4a
sub esp, 8
mov esi, 0x4d8b4e
mov edi, esp
movsd dword es:[edi], dword [esi]
movsw word es:[edi], word [esi]
sub esp, 8
mov esi, 0x4d8b54
mov edi, esp
movsd dword es:[edi], dword [esi]
movsw word es:[edi], word [esi]
sub esp, 8
mov esi, 0x4d8b5a
mov edi, esp
movsd dword es:[edi], dword [esi]
movsw word es:[edi], word [esi]
sub esp, 8
mov esi, 0x4d8b60
mov edi, esp
movsd dword es:[edi], dword [esi]
movsw word es:[edi], word [esi]
push 0x4d8b66
call fcn.004849c0
add dword [ebp - 0xc], eax
sub esp, 8
mov esi, 0x4d8b6c
mov edi, esp
movsd dword es:[edi], dword [esi]
movsw word es:[edi], word [esi]
sub esp, 8
mov esi, 0x4d8b72
mov edi, esp
movsd dword es:[edi], dword [esi]
movsw word es:[edi], word [esi]
sub esp, 8
mov esi, 0x4d8b78
mov edi, esp
movsd dword es:[edi], dword [esi]
movsw word es:[edi], word [esi]
push 0x4d8b7e
sub esp, 8
mov esi, 0x4d8b82
mov edi, esp
movsd dword es:[edi], dword [esi]
movsw word es:[edi], word [esi]
sub esp, 8
mov esi, 0x4d8b88
mov edi, esp
movsd dword es:[edi], dword [esi]
movsw word es:[edi], word [esi]
sub esp, 8
mov esi, 0x4d8b8e
mov edi, esp
movsd dword es:[edi], dword [esi]
movsw word es:[edi], word [esi]
sub esp, 8
mov esi, 0x4d8b94
mov edi, esp
movsd dword es:[edi], dword [esi]
movsw word es:[edi], word [esi]
push 0x4d8b9a
call fcn.004849c0
add dword [ebp - 0xc], eax
sub esp, 8
mov esi, 0x4d8baa
mov edi, esp
movsd dword es:[edi], dword [esi]
movsw word es:[edi], word [esi]
sub esp, 8
mov esi, 0x4d8bb0
mov edi, esp
movsd dword es:[edi], dword [esi]
movsw word es:[edi], word [esi]
sub esp, 8
mov esi, 0x4d8bb6
mov edi, esp
movsd dword es:[edi], dword [esi]
movsw word es:[edi], word [esi]
push 0x4d8bbc
sub esp, 8
mov esi, 0x4d8bc0
mov edi, esp
movsd dword es:[edi], dword [esi]
movsw word es:[edi], word [esi]
sub esp, 8
mov esi, 0x4d8bc6
mov edi, esp
movsd dword es:[edi], dword [esi]
movsw word es:[edi], word [esi]
sub esp, 8
mov esi, 0x4d8bcc
mov edi, esp
movsd dword es:[edi], dword [esi]
movsw word es:[edi], word [esi]
sub esp, 8
mov esi, 0x4d8bd2
mov edi, esp
movsd dword es:[edi], dword [esi]
movsw word es:[edi], word [esi]
push 0x4d8bd8
call fcn.004849c0
add dword [ebp - 0xc], eax
sub esp, 8
mov esi, 0x4d8bde
mov edi, esp
movsd dword es:[edi], dword [esi]
movsw word es:[edi], word [esi]
sub esp, 8
mov esi, 0x4d8be4
mov edi, esp
movsd dword es:[edi], dword [esi]
movsw word es:[edi], word [esi]
sub esp, 8
mov esi, 0x4d8bea
mov edi, esp
movsd dword es:[edi], dword [esi]
movsw word es:[edi], word [esi]
push 0x4d8bf0
sub esp, 8
mov esi, 0x4d8bf4
mov edi, esp
movsd dword es:[edi], dword [esi]
movsw word es:[edi], word [esi]
sub esp, 8
mov esi, 0x4d8bfa
mov edi, esp
movsd dword es:[edi], dword [esi]
movsw word es:[edi], word [esi]
sub esp, 8
mov esi, 0x4d8c00
mov edi, esp
movsd dword es:[edi], dword [esi]
movsw word es:[edi], word [esi]
sub esp, 8
mov esi, 0x4d8c06
mov edi, esp
movsd dword es:[edi], dword [esi]
movsw word es:[edi], word [esi]
push 0x4d8c0c
call fcn.004849c0
add dword [ebp - 0xc], eax
sub esp, 8
mov esi, 0x4d8c17
mov edi, esp
movsd dword es:[edi], dword [esi]
movsw word es:[edi], word [esi]
sub esp, 8
mov esi, 0x4d8c1d
mov edi, esp
movsd dword es:[edi], dword [esi]
movsw word es:[edi], word [esi]
sub esp, 8
mov esi, 0x4d8c23
mov edi, esp
movsd dword es:[edi], dword [esi]
movsw word es:[edi], word [esi]
push 0x4d8c29
sub esp, 8
mov esi, 0x4d8c2d
mov edi, esp
movsd dword es:[edi], dword [esi]
movsw word es:[edi], word [esi]
sub esp, 8
mov esi, 0x4d8c33
mov edi, esp
movsd dword es:[edi], dword [esi]
movsw word es:[edi], word [esi]
sub esp, 8
mov esi, 0x4d8c39
mov edi, esp
movsd dword es:[edi], dword [esi]
movsw word es:[edi], word [esi]
sub esp, 8
mov esi, 0x4d8c3f
mov edi, esp
movsd dword es:[edi], dword [esi]
movsw word es:[edi], word [esi]
push 0x4d8c45
call fcn.004849c0
add dword [ebp - 0xc], eax
lea eax, [ebp - 0x29c]
push eax
lea ebx, [ebp - 0x2b4]
push ebx
mov edi, dword [ebp - 0x19c]
fld dword [edi + 0x428]
sub esp, 8
fstp qword [esp]
wait
push 4
push 1
call fcn.0040b950
lea eax, [ebp - 0x2b4]
push eax
call fcn.0041ac50
lea edi, [ebp - 0x3c]
lea esi, [ebp - 0x29c]
push 0x11
call fcn.00401950
sub esp, 8
mov esi, 0x4d8c54
mov edi, esp
movsd dword es:[edi], dword [esi]
movsw word es:[edi], word [esi]
sub esp, 8
mov esi, 0x4d8c5a
mov edi, esp
movsd dword es:[edi], dword [esi]
movsw word es:[edi], word [esi]
sub esp, 8
mov esi, 0x4d8c60
mov edi, esp
movsd dword es:[edi], dword [esi]
movsw word es:[edi], word [esi]
push 0x4d8c66
sub esp, 8
mov esi, 0x4d8c6a
mov edi, esp
movsd dword es:[edi], dword [esi]
movsw word es:[edi], word [esi]
sub esp, 8
mov esi, 0x4d8c70
mov edi, esp
movsd dword es:[edi], dword [esi]
movsw word es:[edi], word [esi]
mov eax, 5
movzx ebx, byte [ebp - 0x3c]
imul eax, ebx
mov ebx, 0x84
sub ebx, eax
mov dword [ebp - 0x1a0], ebx
fild dword [ebp - 0x1a0]
lea edi, [ebp - 0x1a8]
call fcn.0040be55
sub esp, 8
lea esi, [ebp - 0x1a8]
mov edi, esp
movsd dword es:[edi], dword [esi]
movsw word es:[edi], word [esi]
sub esp, 8
mov esi, 0x4d8c76
mov edi, esp
movsd dword es:[edi], dword [esi]
movsw word es:[edi], word [esi]
lea eax, [ebp - 0x3c]
push eax
call fcn.004849c0
add dword [ebp - 0xc], eax
lea eax, [ebp - 0x29c]
push eax
lea ebx, [ebp - 0x2b4]
push ebx
mov edi, dword [ebp - 0x19c]
fld dword [edi + 0x428]
fld dword [0x4ec6ff]
fmulp st(1)
fld xword [0x4d8c7c]
fdivp st(1)
sub esp, 8
fstp qword [esp]
wait
push 6
push 2
call fcn.0040b950
lea eax, [ebp - 0x2b4]
push eax
call fcn.0041ac50
lea edi, [ebp - 0x3c]
lea esi, [ebp - 0x29c]
push 0x11
call fcn.00401950
sub esp, 8
mov esi, 0x4d8c86
mov edi, esp
movsd dword es:[edi], dword [esi]
movsw word es:[edi], word [esi]
sub esp, 8
mov esi, 0x4d8c8c
mov edi, esp
movsd dword es:[edi], dword [esi]
movsw word es:[edi], word [esi]
sub esp, 8
mov esi, 0x4d8c92
mov edi, esp
movsd dword es:[edi], dword [esi]
movsw word es:[edi], word [esi]
push 0x4d8c98
sub esp, 8
mov esi, 0x4d8c9c
mov edi, esp
movsd dword es:[edi], dword [esi]
movsw word es:[edi], word [esi]
sub esp, 8
mov esi, 0x4d8ca2
mov edi, esp
movsd dword es:[edi], dword [esi]
movsw word es:[edi], word [esi]
mov eax, 5
movzx ebx, byte [ebp - 0x3c]
imul eax, ebx
mov ebx, 0xa8
sub ebx, eax
mov dword [ebp - 0x1a0], ebx
fild dword [ebp - 0x1a0]
lea edi, [ebp - 0x1a8]
call fcn.0040be55
sub esp, 8
lea esi, [ebp - 0x1a8]
mov edi, esp
movsd dword es:[edi], dword [esi]
movsw word es:[edi], word [esi]
sub esp, 8
mov esi, 0x4d8ca8
mov edi, esp
movsd dword es:[edi], dword [esi]
movsw word es:[edi], word [esi]
lea eax, [ebp - 0x3c]
push eax
call fcn.004849c0
add dword [ebp - 0xc], eax
lea eax, [ebp - 0x29c]
push eax
lea ebx, [ebp - 0x2b4]
push ebx
mov edi, dword [ebp - 0x19c]
sub esp, 8
fld qword [edi + 0x538]
fstp qword [esp]
wait
push 0xe
push 2
call fcn.0040b950
lea eax, [ebp - 0x2b4]
push eax
call fcn.0041ac50
lea edi, [ebp - 0x3c]
lea esi, [ebp - 0x29c]
push 0x11
call fcn.00401950
sub esp, 8
mov esi, 0x4d8cae
mov edi, esp
movsd dword es:[edi], dword [esi]
movsw word es:[edi], word [esi]
sub esp, 8
mov esi, 0x4d8cb4
mov edi, esp
movsd dword es:[edi], dword [esi]
movsw word es:[edi], word [esi]
sub esp, 8
mov esi, 0x4d8cba
mov edi, esp
movsd dword es:[edi], dword [esi]
movsw word es:[edi], word [esi]
push 0x4d8cc0
sub esp, 8
mov esi, 0x4d8cc4
mov edi, esp
movsd dword es:[edi], dword [esi]
movsw word es:[edi], word [esi]
sub esp, 8
mov esi, 0x4d8cca
mov edi, esp
movsd dword es:[edi], dword [esi]
movsw word es:[edi], word [esi]
mov eax, 5
movzx ebx, byte [ebp - 0x3c]
imul eax, ebx
mov ebx, 0xea
sub ebx, eax
mov dword [ebp - 0x1a0], ebx
fild dword [ebp - 0x1a0]
lea edi, [ebp - 0x1a8]
call fcn.0040be55
sub esp, 8
lea esi, [ebp - 0x1a8]
mov edi, esp
movsd dword es:[edi], dword [esi]
movsw word es:[edi], word [esi]
sub esp, 8
mov esi, 0x4d8cd0
mov edi, esp
movsd dword es:[edi], dword [esi]
movsw word es:[edi], word [esi]
lea eax, [ebp - 0x3c]
push eax
call fcn.004849c0
add dword [ebp - 0xc], eax
sub esp, 8
mov esi, 0x4d8cd6
mov edi, esp
movsd dword es:[edi], dword [esi]
movsw word es:[edi], word [esi]
sub esp, 8
mov esi, 0x4d8cdc
mov edi, esp
movsd dword es:[edi], dword [esi]
movsw word es:[edi], word [esi]
sub esp, 8
mov esi, 0x4d8ce2
mov edi, esp
movsd dword es:[edi], dword [esi]
movsw word es:[edi], word [esi]
push 0x4d8ce8
sub esp, 8
mov esi, 0x4d8cec
mov edi, esp
movsd dword es:[edi], dword [esi]
movsw word es:[edi], word [esi]
sub esp, 8
mov esi, 0x4d8cf2
mov edi, esp
movsd dword es:[edi], dword [esi]
movsw word es:[edi], word [esi]
sub esp, 8
mov esi, 0x4d8cf8
mov edi, esp
movsd dword es:[edi], dword [esi]
movsw word es:[edi], word [esi]
sub esp, 8
mov esi, 0x4d8cfe
mov edi, esp
movsd dword es:[edi], dword [esi]
movsw word es:[edi], word [esi]
push 0x4d8d04
call fcn.004849c0
add dword [ebp - 0xc], eax
mov al, byte [0x4efb41]
test al, al
jne 0x47e588
mov bl, byte [0x4efb42]
test bl, bl
jne 0x47e588
mov al, byte [0x4efb43]
test al, al
je 0x47e5de
lea eax, [ebp - 0x29c]
push eax
lea ebx, [ebp - 0x2b4]
push ebx
mov edi, dword [ebp - 0x19c]
fld qword [edi + 0x558]
mov esi, dword [ebp - 0x19c]
fld qword [esi + 0x568]
faddp st(1)
sub esp, 8
fstp qword [esp]
wait
push 0xe
push 2
call fcn.0040b950
lea eax, [ebp - 0x2b4]
push eax
call fcn.0041ac50
lea edi, [ebp - 0x3c]
lea esi, [ebp - 0x29c]
push 0x11
call fcn.00401950
jmp 0x47e5ed
lea edi, [ebp - 0x3c]
mov esi, 0x4d8d11
push 0x11
call fcn.00401950
sub esp, 8
mov esi, 0x4d8d15
mov edi, esp
movsd dword es:[edi], dword [esi]
movsw word es:[edi], word [esi]
sub esp, 8
mov esi, 0x4d8d1b
mov edi, esp
movsd dword es:[edi], dword [esi]
movsw word es:[edi], word [esi]
sub esp, 8
mov esi, 0x4d8d21
mov edi, esp
movsd dword es:[edi], dword [esi]
movsw word es:[edi], word [esi]
push 0x4d8d27
sub esp, 8
mov esi, 0x4d8d2b
mov edi, esp
movsd dword es:[edi], dword [esi]
movsw word es:[edi], word [esi]
sub esp, 8
mov esi, 0x4d8d31
mov edi, esp
movsd dword es:[edi], dword [esi]
movsw word es:[edi], word [esi]
mov eax, 5
movzx ebx, byte [ebp - 0x3c]
imul eax, ebx
mov ebx, 0x265
sub ebx, eax
mov dword [ebp - 0x1a0], ebx
fild dword [ebp - 0x1a0]
lea edi, [ebp - 0x1a8]
call fcn.0040be55
sub esp, 8
lea esi, [ebp - 0x1a8]
mov edi, esp
movsd dword es:[edi], dword [esi]
movsw word es:[edi], word [esi]
sub esp, 8
mov esi, 0x4d8d37
mov edi, esp
movsd dword es:[edi], dword [esi]
movsw word es:[edi], word [esi]
lea eax, [ebp - 0x3c]
push eax
call fcn.004849c0
add dword [ebp - 0xc], eax
sub esp, 8
mov esi, 0x4d8d3d
mov edi, esp
movsd dword es:[edi], dword [esi]
movsw word es:[edi], word [esi]
sub esp, 8
mov esi, 0x4d8d43
mov edi, esp
movsd dword es:[edi], dword [esi]
movsw word es:[edi], word [esi]
sub esp, 8
mov esi, 0x4d8d49
mov edi, esp
movsd dword es:[edi], dword [esi]
movsw word es:[edi], word [esi]
push 0x4d8d4f
sub esp, 8
mov esi, 0x4d8d53
mov edi, esp
movsd dword es:[edi], dword [esi]
movsw word es:[edi], word [esi]
sub esp, 8
mov esi, 0x4d8d59
mov edi, esp
movsd dword es:[edi], dword [esi]
movsw word es:[edi], word [esi]
sub esp, 8
mov esi, 0x4d8d5f
mov edi, esp
movsd dword es:[edi], dword [esi]
movsw word es:[edi], word [esi]
sub esp, 8
mov esi, 0x4d8d65
mov edi, esp
movsd dword es:[edi], dword [esi]
movsw word es:[edi], word [esi]
push 0x4d8d6b
call fcn.004849c0
add dword [ebp - 0xc], eax
lea eax, [ebp - 0x29c]
push eax
lea ebx, [ebp - 0x2b4]
push ebx
mov edi, dword [ebp - 0x19c]
fld dword [edi + 0x42c]
sub esp, 8
fstp qword [esp]
wait
push 4
push 1
call fcn.0040b950
lea eax, [ebp - 0x2b4]
push eax
call fcn.0041ac50
lea edi, [ebp - 0x3c]
lea esi, [ebp - 0x29c]
push 0x11
call fcn.00401950
sub esp, 8
mov esi, 0x4d8d78
mov edi, esp
movsd dword es:[edi], dword [esi]
movsw word es:[edi], word [esi]
sub esp, 8
mov esi, 0x4d8d7e
mov edi, esp
movsd dword es:[edi], dword [esi]
movsw word es:[edi], word [esi]
sub esp, 8
mov esi, 0x4d8d84
mov edi, esp
movsd dword es:[edi], dword [esi]
movsw word es:[edi], word [esi]
push 0x4d8d8a
sub esp, 8
mov esi, 0x4d8d8e
mov edi, esp
movsd dword es:[edi], dword [esi]
movsw word es:[edi], word [esi]
sub esp, 8
mov esi, 0x4d8d94
mov edi, esp
movsd dword es:[edi], dword [esi]
movsw word es:[edi], word [esi]
mov eax, 5
movzx ebx, byte [ebp - 0x3c]
imul eax, ebx
mov ebx, 0x84
sub ebx, eax
mov dword [ebp - 0x1a0], ebx
fild dword [ebp - 0x1a0]
lea edi, [ebp - 0x1a8]
call fcn.0040be55
sub esp, 8
lea esi, [ebp - 0x1a8]
mov edi, esp
movsd dword es:[edi], dword [esi]
movsw word es:[edi], word [esi]
sub esp, 8
mov esi, 0x4d8d9a
mov edi, esp
movsd dword es:[edi], dword [esi]
movsw word es:[edi], word [esi]
lea eax, [ebp - 0x3c]
push eax
call fcn.004849c0
add dword [ebp - 0xc], eax
lea eax, [ebp - 0x29c]
push eax
lea ebx, [ebp - 0x2b4]
push ebx
mov edi, dword [ebp - 0x19c]
fld dword [edi + 0x42c]
fld dword [0x4ec6ff]
fmulp st(1)
fld xword [0x4d8da0]
fdivp st(1)
sub esp, 8
fstp qword [esp]
wait
push 6
push 2
call fcn.0040b950
lea eax, [ebp - 0x2b4]
push eax
call fcn.0041ac50
lea edi, [ebp - 0x3c]
lea esi, [ebp - 0x29c]
push 0x11
call fcn.00401950
sub esp, 8
mov esi, 0x4d8daa
mov edi, esp
movsd dword es:[edi], dword [esi]
movsw word es:[edi], word [esi]
sub esp, 8
mov esi, 0x4d8db0
mov edi, esp
movsd dword es:[edi], dword [esi]
movsw word es:[edi], word [esi]
sub esp, 8
mov esi, 0x4d8db6
mov edi, esp
movsd dword es:[edi], dword [esi]
movsw word es:[edi], word [esi]
push 0x4d8dbc
sub esp, 8
mov esi, 0x4d8dc0
mov edi, esp
movsd dword es:[edi], dword [esi]
movsw word es:[edi], word [esi]
sub esp, 8
mov esi, 0x4d8dc6
mov edi, esp
movsd dword es:[edi], dword [esi]
movsw word es:[edi], word [esi]
mov eax, 5
movzx ebx, byte [ebp - 0x3c]
imul eax, ebx
mov ebx, 0xa8
sub ebx, eax
mov dword [ebp - 0x1a0], ebx
fild dword [ebp - 0x1a0]
lea edi, [ebp - 0x1a8]
call fcn.0040be55
sub esp, 8
lea esi, [ebp - 0x1a8]
mov edi, esp
movsd dword es:[edi], dword [esi]
movsw word es:[edi], word [esi]
sub esp, 8
mov esi, 0x4d8dcc
mov edi, esp
movsd dword es:[edi], dword [esi]
movsw word es:[edi], word [esi]
lea eax, [ebp - 0x3c]
push eax
call fcn.004849c0
add dword [ebp - 0xc], eax
lea eax, [ebp - 0x29c]
push eax
lea ebx, [ebp - 0x2b4]
push ebx
mov edi, dword [ebp - 0x19c]
sub esp, 8
fld qword [edi + 0x548]
fstp qword [esp]
wait
push 0xe
push 2
call fcn.0040b950
lea eax, [ebp - 0x2b4]
push eax
call fcn.0041ac50
lea edi, [ebp - 0x3c]
lea esi, [ebp - 0x29c]
push 0x11
call fcn.00401950
sub esp, 8
mov esi, 0x4d8dd2
mov edi, esp
movsd dword es:[edi], dword [esi]
movsw word es:[edi], word [esi]
sub esp, 8
mov esi, 0x4d8dd8
mov edi, esp
movsd dword es:[edi], dword [esi]
movsw word es:[edi], word [esi]
sub esp, 8
mov esi, 0x4d8dde
mov edi, esp
movsd dword es:[edi], dword [esi]
movsw word es:[edi], word [esi]
push 0x4d8de4
sub esp, 8
mov esi, 0x4d8de8
mov edi, esp
movsd dword es:[edi], dword [esi]
movsw word es:[edi], word [esi]
sub esp, 8
mov esi, 0x4d8dee
mov edi, esp
movsd dword es:[edi], dword [esi]
movsw word es:[edi], word [esi]
mov eax, 5
movzx ebx, byte [ebp - 0x3c]
imul eax, ebx
mov ebx, 0xea
sub ebx, eax
mov dword [ebp - 0x1a0], ebx
fild dword [ebp - 0x1a0]
lea edi, [ebp - 0x1a8]
call fcn.0040be55
sub esp, 8
lea esi, [ebp - 0x1a8]
mov edi, esp
movsd dword es:[edi], dword [esi]
movsw word es:[edi], word [esi]
sub esp, 8
mov esi, 0x4d8df4
mov edi, esp
movsd dword es:[edi], dword [esi]
movsw word es:[edi], word [esi]
lea eax, [ebp - 0x3c]
push eax
call fcn.004849c0
add dword [ebp - 0xc], eax
sub esp, 8
mov esi, 0x4d8dfa
mov edi, esp
movsd dword es:[edi], dword [esi]
movsw word es:[edi], word [esi]
sub esp, 8
mov esi, 0x4d8e00
mov edi, esp
movsd dword es:[edi], dword [esi]
movsw word es:[edi], word [esi]
sub esp, 8
mov esi, 0x4d8e06
mov edi, esp
movsd dword es:[edi], dword [esi]
movsw word es:[edi], word [esi]
push 0x4d8e0c
sub esp, 8
mov esi, 0x4d8e10
mov edi, esp
movsd dword es:[edi], dword [esi]
movsw word es:[edi], word [esi]
sub esp, 8
mov esi, 0x4d8e16
mov edi, esp
movsd dword es:[edi], dword [esi]
movsw word es:[edi], word [esi]
sub esp, 8
mov esi, 0x4d8e1c
mov edi, esp
movsd dword es:[edi], dword [esi]
movsw word es:[edi], word [esi]
sub esp, 8
mov esi, 0x4d8e22
mov edi, esp
movsd dword es:[edi], dword [esi]
movsw word es:[edi], word [esi]
push 0x4d8e28
call fcn.004849c0
add dword [ebp - 0xc], eax
lea eax, [ebp - 0x29c]
push eax
lea ebx, [ebp - 0x2b4]
push ebx
mov edi, dword [ebp - 0x19c]
fld qword [edi + 0x560]
mov esi, dword [ebp - 0x19c]
fld qword [esi + 0x570]
faddp st(1)
sub esp, 8
fstp qword [esp]
wait
push 0xe
push 2
call fcn.0040b950
lea eax, [ebp - 0x2b4]
push eax
call fcn.0041ac50
lea edi, [ebp - 0x3c]
lea esi, [ebp - 0x29c]
push 0x11
call fcn.00401950
sub esp, 8
mov esi, 0x4d8e3b
mov edi, esp
movsd dword es:[edi], dword [esi]
movsw word es:[edi], word [esi]
sub esp, 8
mov esi, 0x4d8e41
mov edi, esp
movsd dword es:[edi], dword [esi]
movsw word es:[edi], word [esi]
sub esp, 8
mov esi, 0x4d8e47
mov edi, esp
movsd dword es:[edi], dword [esi]
movsw word es:[edi], word [esi]
push 0x4d8e4d
sub esp, 8
mov esi, 0x4d8e51
mov edi, esp
movsd dword es:[edi], dword [esi]
movsw word es:[edi], word [esi]
sub esp, 8
mov esi, 0x4d8e57
mov edi, esp
movsd dword es:[edi], dword [esi]
movsw word es:[edi], word [esi]
mov eax, 5
movzx ebx, byte [ebp - 0x3c]
imul eax, ebx
mov ebx, 0x265
sub ebx, eax
mov dword [ebp - 0x1a0], ebx
fild dword [ebp - 0x1a0]
lea edi, [ebp - 0x1a8]
call fcn.0040be55
sub esp, 8
lea esi, [ebp - 0x1a8]
mov edi, esp
movsd dword es:[edi], dword [esi]
movsw word es:[edi], word [esi]
sub esp, 8
mov esi, 0x4d8e5d
mov edi, esp
movsd dword es:[edi], dword [esi]
movsw word es:[edi], word [esi]
lea eax, [ebp - 0x3c]
push eax
call fcn.004849c0
add dword [ebp - 0xc], eax
sub esp, 8
mov esi, 0x4d8e63
mov edi, esp
movsd dword es:[edi], dword [esi]
movsw word es:[edi], word [esi]
sub esp, 8
mov esi, 0x4d8e69
mov edi, esp
movsd dword es:[edi], dword [esi]
movsw word es:[edi], word [esi]
sub esp, 8
mov esi, 0x4d8e6f
mov edi, esp
movsd dword es:[edi], dword [esi]
movsw word es:[edi], word [esi]
push 0x4d8e75
sub esp, 8
mov esi, 0x4d8e79
mov edi, esp
movsd dword es:[edi], dword [esi]
movsw word es:[edi], word [esi]
sub esp, 8
mov esi, 0x4d8e7f
mov edi, esp
movsd dword es:[edi], dword [esi]
movsw word es:[edi], word [esi]
sub esp, 8
mov esi, 0x4d8e85
mov edi, esp
movsd dword es:[edi], dword [esi]
movsw word es:[edi], word [esi]
sub esp, 8
mov esi, 0x4d8e8b
mov edi, esp
movsd dword es:[edi], dword [esi]
movsw word es:[edi], word [esi]
push 0x4d8e91
call fcn.004849c0
add dword [ebp - 0xc], eax
lea eax, [ebp - 0x29c]
push eax
lea ebx, [ebp - 0x2b4]
push ebx
mov edi, dword [ebp - 0x19c]
fld dword [edi + 0x430]
sub esp, 8
fstp qword [esp]
wait
push 4
push 1
call fcn.0040b950
lea eax, [ebp - 0x2b4]
push eax
call fcn.0041ac50
lea edi, [ebp - 0x3c]
lea esi, [ebp - 0x29c]
push 0x11
call fcn.00401950
sub esp, 8
mov esi, 0x4d8e9f
mov edi, esp
movsd dword es:[edi], dword [esi]
movsw word es:[edi], word [esi]
sub esp, 8
mov esi, 0x4d8ea5
mov edi, esp
movsd dword es:[edi], dword [esi]
movsw word es:[edi], word [esi]
sub esp, 8
mov esi, 0x4d8eab
mov edi, esp
movsd dword es:[edi], dword [esi]
movsw word es:[edi], word [esi]
push 0x4d8eb1
sub esp, 8
mov esi, 0x4d8eb5
mov edi, esp
movsd dword es:[edi], dword [esi]
movsw word es:[edi], word [esi]
sub esp, 8
mov esi, 0x4d8ebb
mov edi, esp
movsd dword es:[edi], dword [esi]
movsw word es:[edi], word [esi]
mov eax, 5
movzx ebx, byte [ebp - 0x3c]
imul eax, ebx
mov ebx, 0x84
sub ebx, eax
mov dword [ebp - 0x1a0], ebx
fild dword [ebp - 0x1a0]
lea edi, [ebp - 0x1a8]
call fcn.0040be55
sub esp, 8
lea esi, [ebp - 0x1a8]
mov edi, esp
movsd dword es:[edi], dword [esi]
movsw word es:[edi], word [esi]
sub esp, 8
mov esi, 0x4d8ec1
mov edi, esp
movsd dword es:[edi], dword [esi]
movsw word es:[edi], word [esi]
lea eax, [ebp - 0x3c]
push eax
call fcn.004849c0
add dword [ebp - 0xc], eax
lea eax, [ebp - 0x29c]
push eax
lea ebx, [ebp - 0x2b4]
push ebx
mov edi, dword [ebp - 0x19c]
fld dword [edi + 0x430]
fld dword [0x4ec6ff]
fmulp st(1)
fld xword [0x4d8ec7]
fdivp st(1)
sub esp, 8
fstp qword [esp]
wait
push 6
push 2
call fcn.0040b950
lea eax, [ebp - 0x2b4]
push eax
call fcn.0041ac50
lea edi, [ebp - 0x3c]
lea esi, [ebp - 0x29c]
push 0x11
call fcn.00401950
sub esp, 8
mov esi, 0x4d8ed1
mov edi, esp
movsd dword es:[edi], dword [esi]
movsw word es:[edi], word [esi]
sub esp, 8
mov esi, 0x4d8ed7
mov edi, esp
movsd dword es:[edi], dword [esi]
movsw word es:[edi], word [esi]
sub esp, 8
mov esi, 0x4d8edd
mov edi, esp
movsd dword es:[edi], dword [esi]
movsw word es:[edi], word [esi]
push 0x4d8ee3
sub esp, 8
mov esi, 0x4d8ee7
mov edi, esp
movsd dword es:[edi], dword [esi]
movsw word es:[edi], word [esi]
sub esp, 8
mov esi, 0x4d8eed
mov edi, esp
movsd dword es:[edi], dword [esi]
movsw word es:[edi], word [esi]
mov eax, 5
movzx ebx, byte [ebp - 0x3c]
imul eax, ebx
mov ebx, 0xa8
sub ebx, eax
mov dword [ebp - 0x1a0], ebx
fild dword [ebp - 0x1a0]
lea edi, [ebp - 0x1a8]
call fcn.0040be55
sub esp, 8
lea esi, [ebp - 0x1a8]
mov edi, esp
movsd dword es:[edi], dword [esi]
movsw word es:[edi], word [esi]
sub esp, 8
mov esi, 0x4d8ef3
mov edi, esp
movsd dword es:[edi], dword [esi]
movsw word es:[edi], word [esi]
lea eax, [ebp - 0x3c]
push eax
call fcn.004849c0
add dword [ebp - 0xc], eax
lea eax, [ebp - 0x29c]
push eax
lea ebx, [ebp - 0x2b4]
push ebx
mov edi, dword [ebp - 0x19c]
sub esp, 8
fld qword [edi + 0x540]
fstp qword [esp]
wait
push 0xe
push 2
call fcn.0040b950
lea eax, [ebp - 0x2b4]
push eax
call fcn.0041ac50
lea edi, [ebp - 0x3c]
lea esi, [ebp - 0x29c]
push 0x11
call fcn.00401950
sub esp, 8
mov esi, 0x4d8ef9
mov edi, esp
movsd dword es:[edi], dword [esi]
movsw word es:[edi], word [esi]
sub esp, 8
mov esi, 0x4d8eff
mov edi, esp
movsd dword es:[edi], dword [esi]
movsw word es:[edi], word [esi]
sub esp, 8
mov esi, 0x4d8f05
mov edi, esp
movsd dword es:[edi], dword [esi]
movsw word es:[edi], word [esi]
push 0x4d8f0b
sub esp, 8
mov esi, 0x4d8f0f
mov edi, esp
movsd dword es:[edi], dword [esi]
movsw word es:[edi], word [esi]
sub esp, 8
mov esi, 0x4d8f15
mov edi, esp
movsd dword es:[edi], dword [esi]
movsw word es:[edi], word [esi]
mov eax, 5
movzx ebx, byte [ebp - 0x3c]
imul eax, ebx
mov ebx, 0xea
sub ebx, eax
mov dword [ebp - 0x1a0], ebx
fild dword [ebp - 0x1a0]
lea edi, [ebp - 0x1a8]
call fcn.0040be55
sub esp, 8
lea esi, [ebp - 0x1a8]
mov edi, esp
movsd dword es:[edi], dword [esi]
movsw word es:[edi], word [esi]
sub esp, 8
mov esi, 0x4d8f1b
mov edi, esp
movsd dword es:[edi], dword [esi]
movsw word es:[edi], word [esi]
lea eax, [ebp - 0x3c]
push eax
call fcn.004849c0
add dword [ebp - 0xc], eax
sub esp, 8
mov esi, 0x4d8f21
mov edi, esp
movsd dword es:[edi], dword [esi]
movsw word es:[edi], word [esi]
sub esp, 8
mov esi, 0x4d8f27
mov edi, esp
movsd dword es:[edi], dword [esi]
movsw word es:[edi], word [esi]
sub esp, 8
mov esi, 0x4d8f2d
mov edi, esp
movsd dword es:[edi], dword [esi]
movsw word es:[edi], word [esi]
push 0x4d8f33
sub esp, 8
mov esi, 0x4d8f37
mov edi, esp
movsd dword es:[edi], dword [esi]
movsw word es:[edi], word [esi]
sub esp, 8
mov esi, 0x4d8f3d
mov edi, esp
movsd dword es:[edi], dword [esi]
movsw word es:[edi], word [esi]
sub esp, 8
mov esi, 0x4d8f43
mov edi, esp
movsd dword es:[edi], dword [esi]
movsw word es:[edi], word [esi]
sub esp, 8
mov esi, 0x4d8f49
mov edi, esp
movsd dword es:[edi], dword [esi]
movsw word es:[edi], word [esi]
push 0x4d8f4f
call fcn.004849c0
add dword [ebp - 0xc], eax
mov al, byte [0x4efb44]
test al, al
je 0x47eed0
lea ebx, [ebp - 0x29c]
push ebx
lea eax, [ebp - 0x2b4]
push eax
mov edi, dword [ebp - 0x19c]
fld qword [edi + 0x558]
mov esi, dword [ebp - 0x19c]
fld qword [esi + 0x568]
faddp st(1)
sub esp, 8
fstp qword [esp]
wait
push 0xe
push 2
call fcn.0040b950
lea eax, [ebp - 0x2b4]
push eax
call fcn.0041ac50
lea edi, [ebp - 0x3c]
lea esi, [ebp - 0x29c]
push 0x11
call fcn.00401950
jmp 0x47eedf
lea edi, [ebp - 0x3c]
mov esi, 0x4d8f68
push 0x11
call fcn.00401950
sub esp, 8
mov esi, 0x4d8f6c
mov edi, esp
movsd dword es:[edi], dword [esi]
movsw word es:[edi], word [esi]
sub esp, 8
mov esi, 0x4d8f72
mov edi, esp
movsd dword es:[edi], dword [esi]
movsw word es:[edi], word [esi]
sub esp, 8
mov esi, 0x4d8f78
mov edi, esp
movsd dword es:[edi], dword [esi]
movsw word es:[edi], word [esi]
push 0x4d8f7e
sub esp, 8
mov esi, 0x4d8f82
mov edi, esp
movsd dword es:[edi], dword [esi]
movsw word es:[edi], word [esi]
sub esp, 8
mov esi, 0x4d8f88
mov edi, esp
movsd dword es:[edi], dword [esi]
movsw word es:[edi], word [esi]
mov eax, 5
movzx ebx, byte [ebp - 0x3c]
imul eax, ebx
mov ebx, 0x265
sub ebx, eax
mov dword [ebp - 0x1a0], ebx
fild dword [ebp - 0x1a0]
lea edi, [ebp - 0x1a8]
call fcn.0040be55
sub esp, 8
lea esi, [ebp - 0x1a8]
mov edi, esp
movsd dword es:[edi], dword [esi]
movsw word es:[edi], word [esi]
sub esp, 8
mov esi, 0x4d8f8e
mov edi, esp
movsd dword es:[edi], dword [esi]
movsw word es:[edi], word [esi]
lea eax, [ebp - 0x3c]
push eax
call fcn.004849c0
add dword [ebp - 0xc], eax
sub esp, 8
mov esi, 0x4d8f94
mov edi, esp
movsd dword es:[edi], dword [esi]
movsw word es:[edi], word [esi]
sub esp, 8
mov esi, 0x4d8f9a
mov edi, esp
movsd dword es:[edi], dword [esi]
movsw word es:[edi], word [esi]
sub esp, 8
mov esi, 0x4d8fa0
mov edi, esp
movsd dword es:[edi], dword [esi]
movsw word es:[edi], word [esi]
push 0x4d8fa6
sub esp, 8
mov esi, 0x4d8faa
mov edi, esp
movsd dword es:[edi], dword [esi]
movsw word es:[edi], word [esi]
sub esp, 8
mov esi, 0x4d8fb0
mov edi, esp
movsd dword es:[edi], dword [esi]
movsw word es:[edi], word [esi]
sub esp, 8
mov esi, 0x4d8fb6
mov edi, esp
movsd dword es:[edi], dword [esi]
movsw word es:[edi], word [esi]
sub esp, 8
mov esi, 0x4d8fbc
mov edi, esp
movsd dword es:[edi], dword [esi]
movsw word es:[edi], word [esi]
push 0x4d8fc2
call fcn.004849c0
add dword [ebp - 0xc], eax
lea eax, [ebp - 0x29c]
push eax
lea ebx, [ebp - 0x2b4]
push ebx
mov edi, dword [ebp - 0x19c]
fld dword [edi + 0x43c]
sub esp, 8
fstp qword [esp]
wait
push 6
push 2
call fcn.0040b950
lea eax, [ebp - 0x2b4]
push eax
call fcn.0041ac50
lea edi, [ebp - 0x3c]
lea esi, [ebp - 0x29c]
push 0x11
call fcn.00401950
sub esp, 8
mov esi, 0x4d8fcb
mov edi, esp
movsd dword es:[edi], dword [esi]
movsw word es:[edi], word [esi]
sub esp, 8
mov esi, 0x4d8fd1
mov edi, esp
movsd dword es:[edi], dword [esi]
movsw word es:[edi], word [esi]
sub esp, 8
mov esi, 0x4d8fd7
mov edi, esp
movsd dword es:[edi], dword [esi]
movsw word es:[edi], word [esi]
push 0x4d8fdd
sub esp, 8
mov esi, 0x4d8fe1
mov edi, esp
movsd dword es:[edi], dword [esi]
movsw word es:[edi], word [esi]
sub esp, 8
mov esi, 0x4d8fe7
mov edi, esp
movsd dword es:[edi], dword [esi]
movsw word es:[edi], word [esi]
mov eax, 5
movzx ebx, byte [ebp - 0x3c]
imul eax, ebx
mov ebx, 0xa8
sub ebx, eax
mov dword [ebp - 0x1a0], ebx
fild dword [ebp - 0x1a0]
lea edi, [ebp - 0x1a8]
call fcn.0040be55
sub esp, 8
lea esi, [ebp - 0x1a8]
mov edi, esp
movsd dword es:[edi], dword [esi]
movsw word es:[edi], word [esi]
sub esp, 8
mov esi, 0x4d8fed
mov edi, esp
movsd dword es:[edi], dword [esi]
movsw word es:[edi], word [esi]
lea eax, [ebp - 0x3c]
push eax
call fcn.004849c0
add dword [ebp - 0xc], eax
lea eax, [ebp - 0x29c]
push eax
lea ebx, [ebp - 0x2b4]
push ebx
mov edi, dword [ebp - 0x19c]
sub esp, 8
fld qword [edi + 0x550]
fstp qword [esp]
wait
push 0xe
push 2
call fcn.0040b950
lea eax, [ebp - 0x2b4]
push eax
call fcn.0041ac50
lea edi, [ebp - 0x3c]
lea esi, [ebp - 0x29c]
push 0x11
call fcn.00401950
sub esp, 8
mov esi, 0x4d8ff3
mov edi, esp
movsd dword es:[edi], dword [esi]
movsw word es:[edi], word [esi]
sub esp, 8
mov esi, 0x4d8ff9
mov edi, esp
movsd dword es:[edi], dword [esi]
movsw word es:[edi], word [esi]
sub esp, 8
mov esi, 0x4d8fff
mov edi, esp
movsd dword es:[edi], dword [esi]
movsw word es:[edi], word [esi]
push 0x4d9005
sub esp, 8
mov esi, 0x4d9009
mov edi, esp
movsd dword es:[edi], dword [esi]
movsw word es:[edi], word [esi]
sub esp, 8
mov esi, 0x4d900f
mov edi, esp
movsd dword es:[edi], dword [esi]
movsw word es:[edi], word [esi]
mov eax, 5
movzx ebx, byte [ebp - 0x3c]
imul eax, ebx
mov ebx, 0xea
sub ebx, eax
mov dword [ebp - 0x1a0], ebx
fild dword [ebp - 0x1a0]
lea edi, [ebp - 0x1a8]
call fcn.0040be55
sub esp, 8
lea esi, [ebp - 0x1a8]
mov edi, esp
movsd dword es:[edi], dword [esi]
movsw word es:[edi], word [esi]
sub esp, 8
mov esi, 0x4d9015
mov edi, esp
movsd dword es:[edi], dword [esi]
movsw word es:[edi], word [esi]
lea eax, [ebp - 0x3c]
push eax
call fcn.004849c0
add dword [ebp - 0xc], eax
sub esp, 8
mov esi, 0x4d901b
mov edi, esp
movsd dword es:[edi], dword [esi]
movsw word es:[edi], word [esi]
sub esp, 8
mov esi, 0x4d9021
mov edi, esp
movsd dword es:[edi], dword [esi]
movsw word es:[edi], word [esi]
sub esp, 8
mov esi, 0x4d9027
mov edi, esp
movsd dword es:[edi], dword [esi]
movsw word es:[edi], word [esi]
push 0x4d902d
sub esp, 8
mov esi, 0x4d9031
mov edi, esp
movsd dword es:[edi], dword [esi]
movsw word es:[edi], word [esi]
sub esp, 8
mov esi, 0x4d9037
mov edi, esp
movsd dword es:[edi], dword [esi]
movsw word es:[edi], word [esi]
sub esp, 8
mov esi, 0x4d903d
mov edi, esp
movsd dword es:[edi], dword [esi]
movsw word es:[edi], word [esi]
sub esp, 8
mov esi, 0x4d9043
mov edi, esp
movsd dword es:[edi], dword [esi]
movsw word es:[edi], word [esi]
push 0x4d9049
call fcn.004849c0
add dword [ebp - 0xc], eax
lea eax, [ebp - 0x29c]
push eax
lea ebx, [ebp - 0x2b4]
push ebx
mov edi, dword [ebp - 0x19c]
sub esp, 8
fld qword [edi + 0x5c0]
fstp qword [esp]
wait
push 0xe
push 2
call fcn.0040b950
lea eax, [ebp - 0x2b4]
push eax
call fcn.0041ac50
lea edi, [ebp - 0x3c]
lea esi, [ebp - 0x29c]
push 0x11
call fcn.00401950
sub esp, 8
mov esi, 0x4d9057
mov edi, esp
movsd dword es:[edi], dword [esi]
movsw word es:[edi], word [esi]
sub esp, 8
mov esi, 0x4d905d
mov edi, esp
movsd dword es:[edi], dword [esi]
movsw word es:[edi], word [esi]
sub esp, 8
mov esi, 0x4d9063
mov edi, esp
movsd dword es:[edi], dword [esi]
movsw word es:[edi], word [esi]
push 0x4d9069
sub esp, 8
mov esi, 0x4d906d
mov edi, esp
movsd dword es:[edi], dword [esi]
movsw word es:[edi], word [esi]
sub esp, 8
mov esi, 0x4d9073
mov edi, esp
movsd dword es:[edi], dword [esi]
movsw word es:[edi], word [esi]
mov eax, 5
movzx ebx, byte [ebp - 0x3c]
imul eax, ebx
mov ebx, 0x265
sub ebx, eax
mov dword [ebp - 0x1a0], ebx
fild dword [ebp - 0x1a0]
lea edi, [ebp - 0x1a8]
call fcn.0040be55
sub esp, 8
lea esi, [ebp - 0x1a8]
mov edi, esp
movsd dword es:[edi], dword [esi]
movsw word es:[edi], word [esi]
sub esp, 8
mov esi, 0x4d9079
mov edi, esp
movsd dword es:[edi], dword [esi]
movsw word es:[edi], word [esi]
lea eax, [ebp - 0x3c]
push eax
call fcn.004849c0
add dword [ebp - 0xc], eax
sub esp, 8
mov esi, 0x4d907f
mov edi, esp
movsd dword es:[edi], dword [esi]
movsw word es:[edi], word [esi]
sub esp, 8
mov esi, 0x4d9085
mov edi, esp
movsd dword es:[edi], dword [esi]
movsw word es:[edi], word [esi]
sub esp, 8
mov esi, 0x4d908b
mov edi, esp
movsd dword es:[edi], dword [esi]
movsw word es:[edi], word [esi]
push 0x4d9091
sub esp, 8
mov esi, 0x4d9095
mov edi, esp
movsd dword es:[edi], dword [esi]
movsw word es:[edi], word [esi]
sub esp, 8
mov esi, 0x4d909b
mov edi, esp
movsd dword es:[edi], dword [esi]
movsw word es:[edi], word [esi]
sub esp, 8
mov esi, 0x4d90a1
mov edi, esp
movsd dword es:[edi], dword [esi]
movsw word es:[edi], word [esi]
sub esp, 8
mov esi, 0x4d90a7
mov edi, esp
movsd dword es:[edi], dword [esi]
movsw word es:[edi], word [esi]
push 0x4d90ad
call fcn.004849c0
add dword [ebp - 0xc], eax
lea eax, [ebp - 0x29c]
push eax
lea ebx, [ebp - 0x2b4]
push ebx
mov edi, dword [ebp - 0x19c]
sub esp, 8
fld qword [edi + 0x5d0]
fstp qword [esp]
wait
push 0xe
push 2
call fcn.0040b950
lea eax, [ebp - 0x2b4]
push eax
call fcn.0041ac50
lea edi, [ebp - 0x3c]
lea esi, [ebp - 0x29c]
push 0x11
call fcn.00401950
sub esp, 8
mov esi, 0x4d90c5
mov edi, esp
movsd dword es:[edi], dword [esi]
movsw word es:[edi], word [esi]
sub esp, 8
mov esi, 0x4d90cb
mov edi, esp
movsd dword es:[edi], dword [esi]
movsw word es:[edi], word [esi]
sub esp, 8
mov esi, 0x4d90d1
mov edi, esp
movsd dword es:[edi], dword [esi]
movsw word es:[edi], word [esi]
push 0x4d90d7
sub esp, 8
mov esi, 0x4d90db
mov edi, esp
movsd dword es:[edi], dword [esi]
movsw word es:[edi], word [esi]
sub esp, 8
mov esi, 0x4d90e1
mov edi, esp
movsd dword es:[edi], dword [esi]
movsw word es:[edi], word [esi]
mov eax, 5
movzx ebx, byte [ebp - 0x3c]
imul eax, ebx
mov ebx, 0x265
sub ebx, eax
mov dword [ebp - 0x1a0], ebx
fild dword [ebp - 0x1a0]
lea edi, [ebp - 0x1a8]
call fcn.0040be55
sub esp, 8
lea esi, [ebp - 0x1a8]
mov edi, esp
movsd dword es:[edi], dword [esi]
movsw word es:[edi], word [esi]
sub esp, 8
mov esi, 0x4d90e7
mov edi, esp
movsd dword es:[edi], dword [esi]
movsw word es:[edi], word [esi]
lea eax, [ebp - 0x3c]
push eax
call fcn.004849c0
add dword [ebp - 0xc], eax
sub esp, 8
mov esi, 0x4d90ed
mov edi, esp
movsd dword es:[edi], dword [esi]
movsw word es:[edi], word [esi]
sub esp, 8
mov esi, 0x4d90f3
mov edi, esp
movsd dword es:[edi], dword [esi]
movsw word es:[edi], word [esi]
sub esp, 8
mov esi, 0x4d90f9
mov edi, esp
movsd dword es:[edi], dword [esi]
movsw word es:[edi], word [esi]
push 0x4d90ff
sub esp, 8
mov esi, 0x4d9103
mov edi, esp
movsd dword es:[edi], dword [esi]
movsw word es:[edi], word [esi]
sub esp, 8
mov esi, 0x4d9109
mov edi, esp
movsd dword es:[edi], dword [esi]
movsw word es:[edi], word [esi]
sub esp, 8
mov esi, 0x4d910f
mov edi, esp
movsd dword es:[edi], dword [esi]
movsw word es:[edi], word [esi]
sub esp, 8
mov esi, 0x4d9115
mov edi, esp
movsd dword es:[edi], dword [esi]
movsw word es:[edi], word [esi]
push 0x4d911b
call fcn.004849c0
add dword [ebp - 0xc], eax
lea eax, [ebp - 0x29c]
push eax
lea ebx, [ebp - 0x2b4]
push ebx
mov edi, dword [ebp - 0x19c]
sub esp, 8
fld qword [edi + 0x5c8]
fstp qword [esp]
wait
push 0xe
push 2
call fcn.0040b950
lea eax, [ebp - 0x2b4]
push eax
call fcn.0041ac50
lea edi, [ebp - 0x3c]
lea esi, [ebp - 0x29c]
push 0x11
call fcn.00401950
sub esp, 8
mov esi, 0x4d9129
mov edi, esp
movsd dword es:[edi], dword [esi]
movsw word es:[edi], word [esi]
sub esp, 8
mov esi, 0x4d912f
mov edi, esp
movsd dword es:[edi], dword [esi]
movsw word es:[edi], word [esi]
sub esp, 8
mov esi, 0x4d9135
mov edi, esp
movsd dword es:[edi], dword [esi]
movsw word es:[edi], word [esi]
push 0x4d913b
sub esp, 8
mov esi, 0x4d913f
mov edi, esp
movsd dword es:[edi], dword [esi]
movsw word es:[edi], word [esi]
sub esp, 8
mov esi, 0x4d9145
mov edi, esp
movsd dword es:[edi], dword [esi]
movsw word es:[edi], word [esi]
mov eax, 5
movzx ebx, byte [ebp - 0x3c]
imul eax, ebx
mov ebx, 0x265
sub ebx, eax
mov dword [ebp - 0x1a0], ebx
fild dword [ebp - 0x1a0]
lea edi, [ebp - 0x1a8]
call fcn.0040be55
sub esp, 8
lea esi, [ebp - 0x1a8]
mov edi, esp
movsd dword es:[edi], dword [esi]
movsw word es:[edi], word [esi]
sub esp, 8
mov esi, 0x4d914b
mov edi, esp
movsd dword es:[edi], dword [esi]
movsw word es:[edi], word [esi]
lea eax, [ebp - 0x3c]
push eax
call fcn.004849c0
add dword [ebp - 0xc], eax
sub esp, 8
mov esi, 0x4d9151
mov edi, esp
movsd dword es:[edi], dword [esi]
movsw word es:[edi], word [esi]
sub esp, 8
mov esi, 0x4d9157
mov edi, esp
movsd dword es:[edi], dword [esi]
movsw word es:[edi], word [esi]
sub esp, 8
mov esi, 0x4d915d
mov edi, esp
movsd dword es:[edi], dword [esi]
movsw word es:[edi], word [esi]
push 0x4d9163
sub esp, 8
mov esi, 0x4d9167
mov edi, esp
movsd dword es:[edi], dword [esi]
movsw word es:[edi], word [esi]
sub esp, 8
mov esi, 0x4d916d
mov edi, esp
movsd dword es:[edi], dword [esi]
movsw word es:[edi], word [esi]
sub esp, 8
mov esi, 0x4d9173
mov edi, esp
movsd dword es:[edi], dword [esi]
movsw word es:[edi], word [esi]
sub esp, 8
mov esi, 0x4d9179
mov edi, esp
movsd dword es:[edi], dword [esi]
movsw word es:[edi], word [esi]
push 0x4d917f
call fcn.004849c0
add dword [ebp - 0xc], eax
lea eax, [ebp - 0x29c]
push eax
lea ebx, [ebp - 0x2b4]
push ebx
mov edi, dword [ebp - 0x19c]
sub esp, 8
fld qword [edi + 0x5c8]
fstp qword [esp]
wait
push 0xe
push 2
call fcn.0040b950
lea eax, [ebp - 0x2b4]
push eax
call fcn.0041ac50
lea edi, [ebp - 0x3c]
lea esi, [ebp - 0x29c]
push 0x11
call fcn.00401950
sub esp, 8
mov esi, 0x4d9197
mov edi, esp
movsd dword es:[edi], dword [esi]
movsw word es:[edi], word [esi]
sub esp, 8
mov esi, 0x4d919d
mov edi, esp
movsd dword es:[edi], dword [esi]
movsw word es:[edi], word [esi]
sub esp, 8
mov esi, 0x4d91a3
mov edi, esp
movsd dword es:[edi], dword [esi]
movsw word es:[edi], word [esi]
push 0x4d91a9
sub esp, 8
mov esi, 0x4d91ad
mov edi, esp
movsd dword es:[edi], dword [esi]
movsw word es:[edi], word [esi]
sub esp, 8
mov esi, 0x4d91b3
mov edi, esp
movsd dword es:[edi], dword [esi]
movsw word es:[edi], word [esi]
mov eax, 5
movzx ebx, byte [ebp - 0x3c]
imul eax, ebx
mov ebx, 0x265
sub ebx, eax
mov dword [ebp - 0x1a0], ebx
fild dword [ebp - 0x1a0]
lea edi, [ebp - 0x1a8]
call fcn.0040be55
sub esp, 8
lea esi, [ebp - 0x1a8]
mov edi, esp
movsd dword es:[edi], dword [esi]
movsw word es:[edi], word [esi]
sub esp, 8
mov esi, 0x4d91b9
mov edi, esp
movsd dword es:[edi], dword [esi]
movsw word es:[edi], word [esi]
lea eax, [ebp - 0x3c]
push eax
call fcn.004849c0
add dword [ebp - 0xc], eax
sub esp, 8
mov esi, 0x4d91bf
mov edi, esp
movsd dword es:[edi], dword [esi]
movsw word es:[edi], word [esi]
sub esp, 8
mov esi, 0x4d91c5
mov edi, esp
movsd dword es:[edi], dword [esi]
movsw word es:[edi], word [esi]
sub esp, 8
mov esi, 0x4d91cb
mov edi, esp
movsd dword es:[edi], dword [esi]
movsw word es:[edi], word [esi]
push 0x4d91d1
sub esp, 8
mov esi, 0x4d91d5
mov edi, esp
movsd dword es:[edi], dword [esi]
movsw word es:[edi], word [esi]
sub esp, 8
mov esi, 0x4d91db
mov edi, esp
movsd dword es:[edi], dword [esi]
movsw word es:[edi], word [esi]
sub esp, 8
mov esi, 0x4d91e1
mov edi, esp
movsd dword es:[edi], dword [esi]
movsw word es:[edi], word [esi]
sub esp, 8
mov esi, 0x4d91e7
mov edi, esp
movsd dword es:[edi], dword [esi]
movsw word es:[edi], word [esi]
push 0x4d91ed
call fcn.004849c0
add dword [ebp - 0xc], eax
lea eax, [ebp - 0x29c]
push eax
lea ebx, [ebp - 0x2b4]
push ebx
mov edi, dword [ebp - 0x19c]
fld qword [edi + 0x558]
mov esi, dword [ebp - 0x19c]
fld qword [esi + 0x568]
faddp st(1)
mov eax, dword [ebp - 0x19c]
fld qword [eax + 0x560]
faddp st(1)
mov esi, dword [ebp - 0x19c]
fld qword [esi + 0x570]
faddp st(1)
mov eax, dword [ebp - 0x19c]
fld qword [eax + 0x5c0]
faddp st(1)
mov esi, dword [ebp - 0x19c]
fld qword [esi + 0x5c8]
faddp st(1)
sub esp, 8
fstp qword [esp]
wait
push 0xe
push 2
call fcn.0040b950
lea eax, [ebp - 0x2b4]
push eax
call fcn.0041ac50
lea edi, [ebp - 0x3c]
lea esi, [ebp - 0x29c]
push 0x11
call fcn.00401950
sub esp, 8
mov esi, 0x4d91f4
mov edi, esp
movsd dword es:[edi], dword [esi]
movsw word es:[edi], word [esi]
sub esp, 8
mov esi, 0x4d91fa
mov edi, esp
movsd dword es:[edi], dword [esi]
movsw word es:[edi], word [esi]
sub esp, 8
mov esi, 0x4d9200
mov edi, esp
movsd dword es:[edi], dword [esi]
movsw word es:[edi], word [esi]
push 0x4d9206
sub esp, 8
mov esi, 0x4d920a
mov edi, esp
movsd dword es:[edi], dword [esi]
movsw word es:[edi], word [esi]
sub esp, 8
mov esi, 0x4d9210
mov edi, esp
movsd dword es:[edi], dword [esi]
movsw word es:[edi], word [esi]
mov eax, 5
movzx ebx, byte [ebp - 0x3c]
imul eax, ebx
mov ebx, 0x265
sub ebx, eax
mov dword [ebp - 0x1a0], ebx
fild dword [ebp - 0x1a0]
lea edi, [ebp - 0x1a8]
call fcn.0040be55
sub esp, 8
lea esi, [ebp - 0x1a8]
mov edi, esp
movsd dword es:[edi], dword [esi]
movsw word es:[edi], word [esi]
sub esp, 8
mov esi, 0x4d9216
mov edi, esp
movsd dword es:[edi], dword [esi]
movsw word es:[edi], word [esi]
lea eax, [ebp - 0x3c]
push eax
call fcn.004849c0
add dword [ebp - 0xc], eax
sub esp, 8
mov esi, 0x4d921c
mov edi, esp
movsd dword es:[edi], dword [esi]
movsw word es:[edi], word [esi]
sub esp, 8
mov esi, 0x4d9222
mov edi, esp
movsd dword es:[edi], dword [esi]
movsw word es:[edi], word [esi]
sub esp, 8
mov esi, 0x4d9228
mov edi, esp
movsd dword es:[edi], dword [esi]
movsw word es:[edi], word [esi]
push 0x4d922e
sub esp, 8
mov esi, 0x4d9232
mov edi, esp
movsd dword es:[edi], dword [esi]
movsw word es:[edi], word [esi]
sub esp, 8
mov esi, 0x4d9238
mov edi, esp
movsd dword es:[edi], dword [esi]
movsw word es:[edi], word [esi]
sub esp, 8
mov esi, 0x4d923e
mov edi, esp
movsd dword es:[edi], dword [esi]
movsw word es:[edi], word [esi]
sub esp, 8
mov esi, 0x4d9244
mov edi, esp
movsd dword es:[edi], dword [esi]
movsw word es:[edi], word [esi]
push 0x4d924a
call fcn.004849c0
add dword [ebp - 0xc], eax
sub esp, 8
mov esi, 0x4d9258
mov edi, esp
movsd dword es:[edi], dword [esi]
movsw word es:[edi], word [esi]
sub esp, 8
mov esi, 0x4d925e
mov edi, esp
movsd dword es:[edi], dword [esi]
movsw word es:[edi], word [esi]
sub esp, 8
mov esi, 0x4d9264
mov edi, esp
movsd dword es:[edi], dword [esi]
movsw word es:[edi], word [esi]
push 0x4d926a
sub esp, 8
mov esi, 0x4d926e
mov edi, esp
movsd dword es:[edi], dword [esi]
movsw word es:[edi], word [esi]
sub esp, 8
mov esi, 0x4d9274
mov edi, esp
movsd dword es:[edi], dword [esi]
movsw word es:[edi], word [esi]
sub esp, 8
mov esi, 0x4d927a
mov edi, esp
movsd dword es:[edi], dword [esi]
movsw word es:[edi], word [esi]
sub esp, 8
mov esi, 0x4d9280
mov edi, esp
movsd dword es:[edi], dword [esi]
movsw word es:[edi], word [esi]
push 0x4d9286
call fcn.004849c0
add dword [ebp - 0xc], eax
sub esp, 8
mov esi, 0x4d9294
mov edi, esp
movsd dword es:[edi], dword [esi]
movsw word es:[edi], word [esi]
sub esp, 8
mov esi, 0x4d929a
mov edi, esp
movsd dword es:[edi], dword [esi]
movsw word es:[edi], word [esi]
sub esp, 8
mov esi, 0x4d92a0
mov edi, esp
movsd dword es:[edi], dword [esi]
movsw word es:[edi], word [esi]
push 0x4d92a6
sub esp, 8
mov esi, 0x4d92aa
mov edi, esp
movsd dword es:[edi], dword [esi]
movsw word es:[edi], word [esi]
sub esp, 8
mov esi, 0x4d92b0
mov edi, esp
movsd dword es:[edi], dword [esi]
movsw word es:[edi], word [esi]
sub esp, 8
mov esi, 0x4d92b6
mov edi, esp
movsd dword es:[edi], dword [esi]
movsw word es:[edi], word [esi]
sub esp, 8
mov esi, 0x4d92bc
mov edi, esp
movsd dword es:[edi], dword [esi]
movsw word es:[edi], word [esi]
push 0x4d92c2
call fcn.004849c0
add dword [ebp - 0xc], eax
fld qword [0x4d92c7]
fstp qword [ebp - 0x18]
wait
mov dword [ebp - 0x1a0], 0xc
mov eax, 0
mov dword [ebp - 0xc], eax
inc dword [ebp - 0xc]
imul eax, dword [ebp - 0xc], 0x37
lea eax, [eax + 0x4eba8f]
mov dword [ebp - 0x1a4], eax
lea eax, [ebp - 0x2a4]
push eax
push 0xf
call fcn.0041b490
mov edi, dword [ebp - 0x1a4]
lea esi, [edi + 3]
lea edi, [ebp - 0x2a4]
call fcn.00415520
test al, al
je 0x47fa0e
fld qword [ebp - 0x18]
mov eax, dword [ebp - 0xc]
mov edi, dword [ebp - 0x19c]
fld qword [edi + eax*8 + 0x4c0]
faddp st(1)
fstp qword [ebp - 0x18]
wait
dec dword [ebp - 0x1a0]
jne 0x47f9b8
lea eax, [ebp - 0x3a4]
push eax
lea ebx, [ebp - 0x3bc]
push ebx
mov edi, dword [ebp - 0x19c]
fld qword [edi + 0x530]
fld qword [ebp - 0x18]
fsubp st(1)
sub esp, 8
fstp qword [esp]
wait
push 0xe
push 2
call fcn.0040b950
lea eax, [ebp - 0x3bc]
push eax
call fcn.0041ac50
lea edi, [ebp - 0x3c]
lea esi, [ebp - 0x3a4]
push 0x11
call fcn.00401950
sub esp, 8
mov esi, 0x4d92cf
mov edi, esp
movsd dword es:[edi], dword [esi]
movsw word es:[edi], word [esi]
sub esp, 8
mov esi, 0x4d92d5
mov edi, esp
movsd dword es:[edi], dword [esi]
movsw word es:[edi], word [esi]
sub esp, 8
mov esi, 0x4d92db
mov edi, esp
movsd dword es:[edi], dword [esi]
movsw word es:[edi], word [esi]
push 0x4d92e1
sub esp, 8
mov esi, 0x4d92e5
mov edi, esp
movsd dword es:[edi], dword [esi]
movsw word es:[edi], word [esi]
sub esp, 8
mov esi, 0x4d92eb
mov edi, esp
movsd dword es:[edi], dword [esi]
movsw word es:[edi], word [esi]
mov eax, 5
movzx ebx, byte [ebp - 0x3c]
imul eax, ebx
mov ebx, 0x265
sub ebx, eax
mov dword [ebp - 0x2a8], ebx
fild dword [ebp - 0x2a8]
lea edi, [ebp - 0x2b0]
call fcn.0040be55
sub esp, 8
lea esi, [ebp - 0x2b0]
mov edi, esp
movsd dword es:[edi], dword [esi]
movsw word es:[edi], word [esi]
sub esp, 8
mov esi, 0x4d92f1
mov edi, esp
movsd dword es:[edi], dword [esi]
movsw word es:[edi], word [esi]
lea eax, [ebp - 0x3c]
push eax
call fcn.004849c0
add dword [ebp - 0xc], eax
sub esp, 8
mov esi, 0x4d92f7
mov edi, esp
movsd dword es:[edi], dword [esi]
movsw word es:[edi], word [esi]
sub esp, 8
mov esi, 0x4d92fd
mov edi, esp
movsd dword es:[edi], dword [esi]
movsw word es:[edi], word [esi]
sub esp, 8
mov esi, 0x4d9303
mov edi, esp
movsd dword es:[edi], dword [esi]
movsw word es:[edi], word [esi]
push 0x4d9309
sub esp, 8
mov esi, 0x4d930d
mov edi, esp
movsd dword es:[edi], dword [esi]
movsw word es:[edi], word [esi]
sub esp, 8
mov esi, 0x4d9313
mov edi, esp
movsd dword es:[edi], dword [esi]
movsw word es:[edi], word [esi]
sub esp, 8
mov esi, 0x4d9319
mov edi, esp
movsd dword es:[edi], dword [esi]
movsw word es:[edi], word [esi]
sub esp, 8
mov esi, 0x4d931f
mov edi, esp
movsd dword es:[edi], dword [esi]
movsw word es:[edi], word [esi]
push 0x4d9325
call fcn.004849c0
add dword [ebp - 0xc], eax
sub esp, 8
mov esi, 0x4d9336
mov edi, esp
movsd dword es:[edi], dword [esi]
movsw word es:[edi], word [esi]
sub esp, 8
mov esi, 0x4d933c
mov edi, esp
movsd dword es:[edi], dword [esi]
movsw word es:[edi], word [esi]
sub esp, 8
mov esi, 0x4d9342
mov edi, esp
movsd dword es:[edi], dword [esi]
movsw word es:[edi], word [esi]
push 0x4d9348
sub esp, 8
mov esi, 0x4d934c
mov edi, esp
movsd dword es:[edi], dword [esi]
movsw word es:[edi], word [esi]
sub esp, 8
mov esi, 0x4d9352
mov edi, esp
movsd dword es:[edi], dword [esi]
movsw word es:[edi], word [esi]
sub esp, 8
mov esi, 0x4d9358
mov edi, esp
movsd dword es:[edi], dword [esi]
movsw word es:[edi], word [esi]
sub esp, 8
mov esi, 0x4d935e
mov edi, esp
movsd dword es:[edi], dword [esi]
movsw word es:[edi], word [esi]
push 0x4d9364
call fcn.004849c0
add dword [ebp - 0xc], eax
lea eax, [ebp - 0x3a4]
push eax
lea ebx, [ebp - 0x3bc]
push ebx
sub esp, 8
fld qword [ebp - 0x18]
fstp qword [esp]
wait
push 0xe
push 2
call fcn.0040b950
lea eax, [ebp - 0x3bc]
push eax
call fcn.0041ac50
lea edi, [ebp - 0x3c]
lea esi, [ebp - 0x3a4]
push 0x11
call fcn.00401950
sub esp, 8
mov esi, 0x4d9369
mov edi, esp
movsd dword es:[edi], dword [esi]
movsw word es:[edi], word [esi]
sub esp, 8
mov esi, 0x4d936f
mov edi, esp
movsd dword es:[edi], dword [esi]
movsw word es:[edi], word [esi]
sub esp, 8
mov esi, 0x4d9375
mov edi, esp
movsd dword es:[edi], dword [esi]
movsw word es:[edi], word [esi]
push 0x4d937b
sub esp, 8
mov esi, 0x4d937f
mov edi, esp
movsd dword es:[edi], dword [esi]
movsw word es:[edi], word [esi]
sub esp, 8
mov esi, 0x4d9385
mov edi, esp
movsd dword es:[edi], dword [esi]
movsw word es:[edi], word [esi]
mov eax, 5
movzx ebx, byte [ebp - 0x3c]
imul eax, ebx
mov ebx, 0x265
sub ebx, eax
mov dword [ebp - 0x2a8], ebx
fild dword [ebp - 0x2a8]
lea edi, [ebp - 0x2b0]
call fcn.0040be55
sub esp, 8
lea esi, [ebp - 0x2b0]
mov edi, esp
movsd dword es:[edi], dword [esi]
movsw word es:[edi], word [esi]
sub esp, 8
mov esi, 0x4d938b
mov edi, esp
movsd dword es:[edi], dword [esi]
movsw word es:[edi], word [esi]
lea eax, [ebp - 0x3c]
push eax
call fcn.004849c0
add dword [ebp - 0xc], eax
sub esp, 8
mov esi, 0x4d9391
mov edi, esp
movsd dword es:[edi], dword [esi]
movsw word es:[edi], word [esi]
sub esp, 8
mov esi, 0x4d9397
mov edi, esp
movsd dword es:[edi], dword [esi]
movsw word es:[edi], word [esi]
sub esp, 8
mov esi, 0x4d939d
mov edi, esp
movsd dword es:[edi], dword [esi]
movsw word es:[edi], word [esi]
push 0x4d93a3
sub esp, 8
mov esi, 0x4d93a7
mov edi, esp
movsd dword es:[edi], dword [esi]
movsw word es:[edi], word [esi]
sub esp, 8
mov esi, 0x4d93ad
mov edi, esp
movsd dword es:[edi], dword [esi]
movsw word es:[edi], word [esi]
sub esp, 8
mov esi, 0x4d93b3
mov edi, esp
movsd dword es:[edi], dword [esi]
movsw word es:[edi], word [esi]
sub esp, 8
mov esi, 0x4d93b9
mov edi, esp
movsd dword es:[edi], dword [esi]
movsw word es:[edi], word [esi]
push 0x4d93bf
call fcn.004849c0
add dword [ebp - 0xc], eax
sub esp, 8
mov esi, 0x4d93d0
mov edi, esp
movsd dword es:[edi], dword [esi]
movsw word es:[edi], word [esi]
sub esp, 8
mov esi, 0x4d93d6
mov edi, esp
movsd dword es:[edi], dword [esi]
movsw word es:[edi], word [esi]
sub esp, 8
mov esi, 0x4d93dc
mov edi, esp
movsd dword es:[edi], dword [esi]
movsw word es:[edi], word [esi]
push 0x4d93e2
sub esp, 8
mov esi, 0x4d93e6
mov edi, esp
movsd dword es:[edi], dword [esi]
movsw word es:[edi], word [esi]
sub esp, 8
mov esi, 0x4d93ec
mov edi, esp
movsd dword es:[edi], dword [esi]
movsw word es:[edi], word [esi]
sub esp, 8
mov esi, 0x4d93f2
mov edi, esp
movsd dword es:[edi], dword [esi]
movsw word es:[edi], word [esi]
sub esp, 8
mov esi, 0x4d93f8
mov edi, esp
movsd dword es:[edi], dword [esi]
movsw word es:[edi], word [esi]
push 0x4d93fe
call fcn.004849c0
add dword [ebp - 0xc], eax
lea eax, [ebp - 0x3a4]
push eax
lea ebx, [ebp - 0x3bc]
push ebx
mov edi, dword [ebp - 0x19c]
fld qword [edi + 0x558]
mov esi, dword [ebp - 0x19c]
fld qword [esi + 0x568]
faddp st(1)
mov eax, dword [ebp - 0x19c]
fld qword [eax + 0x560]
faddp st(1)
mov esi, dword [ebp - 0x19c]
fld qword [esi + 0x570]
faddp st(1)
mov eax, dword [ebp - 0x19c]
fld qword [eax + 0x5c0]
faddp st(1)
mov esi, dword [ebp - 0x19c]
fld qword [esi + 0x5c8]
faddp st(1)
sub esp, 8
fstp qword [esp]
wait
push 0xe
push 2
call fcn.0040b950
lea eax, [ebp - 0x3bc]
push eax
call fcn.0041ac50
lea edi, [ebp - 0x3c]
lea esi, [ebp - 0x3a4]
push 0x11
call fcn.00401950
sub esp, 8
mov esi, 0x4d9404
mov edi, esp
movsd dword es:[edi], dword [esi]
movsw word es:[edi], word [esi]
sub esp, 8
mov esi, 0x4d940a
mov edi, esp
movsd dword es:[edi], dword [esi]
movsw word es:[edi], word [esi]
sub esp, 8
mov esi, 0x4d9410
mov edi, esp
movsd dword es:[edi], dword [esi]
movsw word es:[edi], word [esi]
push 0x4d9416
sub esp, 8
mov esi, 0x4d941a
mov edi, esp
movsd dword es:[edi], dword [esi]
movsw word es:[edi], word [esi]
sub esp, 8
mov esi, 0x4d9420
mov edi, esp
movsd dword es:[edi], dword [esi]
movsw word es:[edi], word [esi]
mov eax, 5
movzx ebx, byte [ebp - 0x3c]
imul eax, ebx
mov ebx, 0x265
sub ebx, eax
mov dword [ebp - 0x2a8], ebx
fild dword [ebp - 0x2a8]
lea edi, [ebp - 0x2b0]
call fcn.0040be55
sub esp, 8
lea esi, [ebp - 0x2b0]
mov edi, esp
movsd dword es:[edi], dword [esi]
movsw word es:[edi], word [esi]
sub esp, 8
mov esi, 0x4d9426
mov edi, esp
movsd dword es:[edi], dword [esi]
movsw word es:[edi], word [esi]
lea eax, [ebp - 0x3c]
push eax
call fcn.004849c0
add dword [ebp - 0xc], eax
sub esp, 8
mov esi, 0x4d942c
mov edi, esp
movsd dword es:[edi], dword [esi]
movsw word es:[edi], word [esi]
sub esp, 8
mov esi, 0x4d9432
mov edi, esp
movsd dword es:[edi], dword [esi]
movsw word es:[edi], word [esi]
sub esp, 8
mov esi, 0x4d9438
mov edi, esp
movsd dword es:[edi], dword [esi]
movsw word es:[edi], word [esi]
push 0x4d943e
sub esp, 8
mov esi, 0x4d9442
mov edi, esp
movsd dword es:[edi], dword [esi]
movsw word es:[edi], word [esi]
sub esp, 8
mov esi, 0x4d9448
mov edi, esp
movsd dword es:[edi], dword [esi]
movsw word es:[edi], word [esi]
sub esp, 8
mov esi, 0x4d944e
mov edi, esp
movsd dword es:[edi], dword [esi]
movsw word es:[edi], word [esi]
sub esp, 8
mov esi, 0x4d9454
mov edi, esp
movsd dword es:[edi], dword [esi]
movsw word es:[edi], word [esi]
push 0x4d945a
call fcn.004849c0
add dword [ebp - 0xc], eax
lea eax, [ebp - 0x3a4]
push eax
lea ebx, [ebp - 0x3bc]
push ebx
mov edi, dword [ebp - 0x19c]
sub esp, 8
fld qword [edi + 0x5e0]
fstp qword [esp]
wait
push 0xe
push 2
call fcn.0040b950
lea eax, [ebp - 0x3bc]
push eax
call fcn.0041ac50
lea edi, [ebp - 0x3c]
lea esi, [ebp - 0x3a4]
push 0x11
call fcn.00401950
sub esp, 8
mov esi, 0x4d9464
mov edi, esp
movsd dword es:[edi], dword [esi]
movsw word es:[edi], word [esi]
sub esp, 8
mov esi, 0x4d946a
mov edi, esp
movsd dword es:[edi], dword [esi]
movsw word es:[edi], word [esi]
sub esp, 8
mov esi, 0x4d9470
mov edi, esp
movsd dword es:[edi], dword [esi]
movsw word es:[edi], word [esi]
push 0x4d9476
sub esp, 8
mov esi, 0x4d947a
mov edi, esp
movsd dword es:[edi], dword [esi]
movsw word es:[edi], word [esi]
sub esp, 8
mov esi, 0x4d9480
mov edi, esp
movsd dword es:[edi], dword [esi]
movsw word es:[edi], word [esi]
mov eax, 5
movzx ebx, byte [ebp - 0x3c]
imul eax, ebx
mov ebx, 0x265
sub ebx, eax
mov dword [ebp - 0x2a8], ebx
fild dword [ebp - 0x2a8]
lea edi, [ebp - 0x2b0]
call fcn.0040be55
sub esp, 8
lea esi, [ebp - 0x2b0]
mov edi, esp
movsd dword es:[edi], dword [esi]
movsw word es:[edi], word [esi]
sub esp, 8
mov esi, 0x4d9486
mov edi, esp
movsd dword es:[edi], dword [esi]
movsw word es:[edi], word [esi]
lea eax, [ebp - 0x3c]
push eax
call fcn.004849c0
add dword [ebp - 0xc], eax
sub esp, 8
mov esi, 0x4d948c
mov edi, esp
movsd dword es:[edi], dword [esi]
movsw word es:[edi], word [esi]
sub esp, 8
mov esi, 0x4d9492
mov edi, esp
movsd dword es:[edi], dword [esi]
movsw word es:[edi], word [esi]
sub esp, 8
mov esi, 0x4d9498
mov edi, esp
movsd dword es:[edi], dword [esi]
movsw word es:[edi], word [esi]
push 0x4d949e
sub esp, 8
mov esi, 0x4d94a2
mov edi, esp
movsd dword es:[edi], dword [esi]
movsw word es:[edi], word [esi]
sub esp, 8
mov esi, 0x4d94a8
mov edi, esp
movsd dword es:[edi], dword [esi]
movsw word es:[edi], word [esi]
sub esp, 8
mov esi, 0x4d94ae
mov edi, esp
movsd dword es:[edi], dword [esi]
movsw word es:[edi], word [esi]
sub esp, 8
mov esi, 0x4d94b4
mov edi, esp
movsd dword es:[edi], dword [esi]
movsw word es:[edi], word [esi]
push 0x4d94ba
call fcn.004849c0
add dword [ebp - 0xc], eax
sub esp, 8
mov esi, 0x4d94ca
mov edi, esp
movsd dword es:[edi], dword [esi]
movsw word es:[edi], word [esi]
sub esp, 8
mov esi, 0x4d94d0
mov edi, esp
movsd dword es:[edi], dword [esi]
movsw word es:[edi], word [esi]
sub esp, 8
mov esi, 0x4d94d6
mov edi, esp
movsd dword es:[edi], dword [esi]
movsw word es:[edi], word [esi]
push 0x4d94dc
sub esp, 8
mov esi, 0x4d94e0
mov edi, esp
movsd dword es:[edi], dword [esi]
movsw word es:[edi], word [esi]
sub esp, 8
mov esi, 0x4d94e6
mov edi, esp
movsd dword es:[edi], dword [esi]
movsw word es:[edi], word [esi]
sub esp, 8
mov esi, 0x4d94ec
mov edi, esp
movsd dword es:[edi], dword [esi]
movsw word es:[edi], word [esi]
sub esp, 8
mov esi, 0x4d94f2
mov edi, esp
movsd dword es:[edi], dword [esi]
movsw word es:[edi], word [esi]
push 0x4d94f8
call fcn.004849c0
add dword [ebp - 0xc], eax
lea eax, [ebp - 0x3a4]
push eax
lea ebx, [ebp - 0x3bc]
push ebx
mov edi, dword [ebp - 0x19c]
sub esp, 8
fld qword [edi + 0x5e8]
fstp qword [esp]
wait
push 0xe
push 2
call fcn.0040b950
lea eax, [ebp - 0x3bc]
push eax
call fcn.0041ac50
lea edi, [ebp - 0x3c]
lea esi, [ebp - 0x3a4]
push 0x11
call fcn.00401950
sub esp, 8
mov esi, 0x4d94fe
mov edi, esp
movsd dword es:[edi], dword [esi]
movsw word es:[edi], word [esi]
sub esp, 8
mov esi, 0x4d9504
mov edi, esp
movsd dword es:[edi], dword [esi]
movsw word es:[edi], word [esi]
sub esp, 8
mov esi, 0x4d950a
mov edi, esp
movsd dword es:[edi], dword [esi]
movsw word es:[edi], word [esi]
push 0x4d9510
sub esp, 8
mov esi, 0x4d9514
mov edi, esp
movsd dword es:[edi], dword [esi]
movsw word es:[edi], word [esi]
sub esp, 8
mov esi, 0x4d951a
mov edi, esp
movsd dword es:[edi], dword [esi]
movsw word es:[edi], word [esi]
mov eax, 5
movzx ebx, byte [ebp - 0x3c]
imul eax, ebx
mov ebx, 0x265
sub ebx, eax
mov dword [ebp - 0x2a8], ebx
fild dword [ebp - 0x2a8]
lea edi, [ebp - 0x2b0]
call fcn.0040be55
sub esp, 8
lea esi, [ebp - 0x2b0]
mov edi, esp
movsd dword es:[edi], dword [esi]
movsw word es:[edi], word [esi]
sub esp, 8
mov esi, 0x4d9520
mov edi, esp
movsd dword es:[edi], dword [esi]
movsw word es:[edi], word [esi]
lea eax, [ebp - 0x3c]
push eax
call fcn.004849c0
add dword [ebp - 0xc], eax
sub esp, 8
mov esi, 0x4d9526
mov edi, esp
movsd dword es:[edi], dword [esi]
movsw word es:[edi], word [esi]
sub esp, 8
mov esi, 0x4d952c
mov edi, esp
movsd dword es:[edi], dword [esi]
movsw word es:[edi], word [esi]
sub esp, 8
mov esi, 0x4d9532
mov edi, esp
movsd dword es:[edi], dword [esi]
movsw word es:[edi], word [esi]
push 0x4d9538
sub esp, 8
mov esi, 0x4d953c
mov edi, esp
movsd dword es:[edi], dword [esi]
movsw word es:[edi], word [esi]
sub esp, 8
mov esi, 0x4d9542
mov edi, esp
movsd dword es:[edi], dword [esi]
movsw word es:[edi], word [esi]
sub esp, 8
mov esi, 0x4d9548
mov edi, esp
movsd dword es:[edi], dword [esi]
movsw word es:[edi], word [esi]
sub esp, 8
mov esi, 0x4d954e
mov edi, esp
movsd dword es:[edi], dword [esi]
movsw word es:[edi], word [esi]
push 0x4d9554
call fcn.004849c0
add dword [ebp - 0xc], eax
sub esp, 8
mov esi, 0x4d9565
mov edi, esp
movsd dword es:[edi], dword [esi]
movsw word es:[edi], word [esi]
sub esp, 8
mov esi, 0x4d956b
mov edi, esp
movsd dword es:[edi], dword [esi]
movsw word es:[edi], word [esi]
sub esp, 8
mov esi, 0x4d9571
mov edi, esp
movsd dword es:[edi], dword [esi]
movsw word es:[edi], word [esi]
push 0x4d9577
sub esp, 8
mov esi, 0x4d957b
mov edi, esp
movsd dword es:[edi], dword [esi]
movsw word es:[edi], word [esi]
sub esp, 8
mov esi, 0x4d9581
mov edi, esp
movsd dword es:[edi], dword [esi]
movsw word es:[edi], word [esi]
sub esp, 8
mov esi, 0x4d9587
mov edi, esp
movsd dword es:[edi], dword [esi]
movsw word es:[edi], word [esi]
sub esp, 8
mov esi, 0x4d958d
mov edi, esp
movsd dword es:[edi], dword [esi]
movsw word es:[edi], word [esi]
push 0x4d9593
call fcn.004849c0
add dword [ebp - 0xc], eax
lea eax, [ebp - 0x3a4]
push eax
lea ebx, [ebp - 0x3bc]
push ebx
mov edi, dword [ebp - 0x19c]
sub esp, 8
fld qword [edi + 0x410]
fstp qword [esp]
wait
push 0xe
push 2
call fcn.0040b950
lea eax, [ebp - 0x3bc]
push eax
call fcn.0041ac50
lea edi, [ebp - 0x3c]
lea esi, [ebp - 0x3a4]
push 0x11
call fcn.00401950
sub esp, 8
mov esi, 0x4d9599
mov edi, esp
movsd dword es:[edi], dword [esi]
movsw word es:[edi], word [esi]
sub esp, 8
mov esi, 0x4d959f
mov edi, esp
movsd dword es:[edi], dword [esi]
movsw word es:[edi], word [esi]
sub esp, 8
mov esi, 0x4d95a5
mov edi, esp
movsd dword es:[edi], dword [esi]
movsw word es:[edi], word [esi]
push 0x4d95ab
sub esp, 8
mov esi, 0x4d95af
mov edi, esp
movsd dword es:[edi], dword [esi]
movsw word es:[edi], word [esi]
sub esp, 8
mov esi, 0x4d95b5
mov edi, esp
movsd dword es:[edi], dword [esi]
movsw word es:[edi], word [esi]
mov eax, 5
movzx ebx, byte [ebp - 0x3c]
imul eax, ebx
mov ebx, 0x265
sub ebx, eax
mov dword [ebp - 0x2a8], ebx
fild dword [ebp - 0x2a8]
lea edi, [ebp - 0x2b0]
call fcn.0040be55
sub esp, 8
lea esi, [ebp - 0x2b0]
mov edi, esp
movsd dword es:[edi], dword [esi]
movsw word es:[edi], word [esi]
sub esp, 8
mov esi, 0x4d95bb
mov edi, esp
movsd dword es:[edi], dword [esi]
movsw word es:[edi], word [esi]
lea eax, [ebp - 0x3c]
push eax
call fcn.004849c0
add dword [ebp - 0xc], eax
sub esp, 8
mov esi, 0x4d95c1
mov edi, esp
movsd dword es:[edi], dword [esi]
movsw word es:[edi], word [esi]
sub esp, 8
mov esi, 0x4d95c7
mov edi, esp
movsd dword es:[edi], dword [esi]
movsw word es:[edi], word [esi]
sub esp, 8
mov esi, 0x4d95cd
mov edi, esp
movsd dword es:[edi], dword [esi]
movsw word es:[edi], word [esi]
push 0x4d95d3
sub esp, 8
mov esi, 0x4d95d7
mov edi, esp
movsd dword es:[edi], dword [esi]
movsw word es:[edi], word [esi]
sub esp, 8
mov esi, 0x4d95dd
mov edi, esp
movsd dword es:[edi], dword [esi]
movsw word es:[edi], word [esi]
sub esp, 8
mov esi, 0x4d95e3
mov edi, esp
movsd dword es:[edi], dword [esi]
movsw word es:[edi], word [esi]
sub esp, 8
mov esi, 0x4d95e9
mov edi, esp
movsd dword es:[edi], dword [esi]
movsw word es:[edi], word [esi]
push 0x4d95ef
call fcn.004849c0
add dword [ebp - 0xc], eax
lea eax, [ebp - 0x3a4]
push eax
lea ebx, [ebp - 0x3bc]
push ebx
mov edi, dword [ebp - 0x19c]
sub esp, 8
fld qword [edi + 0x5f0]
fstp qword [esp]
wait
push 0xe
push 2
call fcn.0040b950
lea eax, [ebp - 0x3bc]
push eax
call fcn.0041ac50
lea edi, [ebp - 0x3c]
lea esi, [ebp - 0x3a4]
push 0x11
call fcn.00401950
sub esp, 8
mov esi, 0x4d95fa
mov edi, esp
movsd dword es:[edi], dword [esi]
movsw word es:[edi], word [esi]
sub esp, 8
mov esi, 0x4d9600
mov edi, esp
movsd dword es:[edi], dword [esi]
movsw word es:[edi], word [esi]
sub esp, 8
mov esi, 0x4d9606
mov edi, esp
movsd dword es:[edi], dword [esi]
movsw word es:[edi], word [esi]
push 0x4d960c
sub esp, 8
mov esi, 0x4d9610
mov edi, esp
movsd dword es:[edi], dword [esi]
movsw word es:[edi], word [esi]
sub esp, 8
mov esi, 0x4d9616
mov edi, esp
movsd dword es:[edi], dword [esi]
movsw word es:[edi], word [esi]
mov eax, 5
movzx ebx, byte [ebp - 0x3c]
imul eax, ebx
mov ebx, 0x265
sub ebx, eax
mov dword [ebp - 0x2a8], ebx
fild dword [ebp - 0x2a8]
lea edi, [ebp - 0x2b0]
call fcn.0040be55
sub esp, 8
lea esi, [ebp - 0x2b0]
mov edi, esp
movsd dword es:[edi], dword [esi]
movsw word es:[edi], word [esi]
sub esp, 8
mov esi, 0x4d961c
mov edi, esp
movsd dword es:[edi], dword [esi]
movsw word es:[edi], word [esi]
lea eax, [ebp - 0x3c]
push eax
call fcn.004849c0
add dword [ebp - 0xc], eax
fld qword [0x4d9622]
fstp qword [ebp - 0x18]
wait
mov byte [ebp - 0x7c], 0
mov byte [ebp - 0x2a8], 0xc
mov byte [ebp - 0x78], 0
inc byte [ebp - 0x78]
lea eax, [ebp - 0x3a8]
push eax
push 0xf
call fcn.0041b490
movzx ebx, byte [ebp - 0x78]
imul eax, ebx, 0x37
lea esi, [eax + 0x4eba92]
lea edi, [ebp - 0x3a8]
call fcn.00415520
test al, al
je 0x4806bc
inc byte [ebp - 0x7c]
lea eax, [ebp - 0x4a8]
push eax
lea ebx, [ebp - 0x4c0]
push ebx
movzx eax, byte [ebp - 0x78]
mov edi, dword [ebp - 0x19c]
sub esp, 8
fld qword [edi + eax*8 + 0x4c0]
fstp qword [esp]
wait
push 0xe
push 2
call fcn.0040b950
lea eax, [ebp - 0x4c0]
push eax
call fcn.0041ac50
lea edi, [ebp - 0x3c]
lea esi, [ebp - 0x4a8]
push 0x11
call fcn.00401950
fld qword [ebp - 0x18]
movzx eax, byte [ebp - 0x78]
mov edi, dword [ebp - 0x19c]
fld qword [edi + eax*8 + 0x4c0]
faddp st(1)
fstp qword [ebp - 0x18]
wait
sub esp, 8
mov esi, 0x4d962a
mov edi, esp
movsd dword es:[edi], dword [esi]
movsw word es:[edi], word [esi]
sub esp, 8
mov esi, 0x4d9630
mov edi, esp
movsd dword es:[edi], dword [esi]
movsw word es:[edi], word [esi]
sub esp, 8
mov esi, 0x4d9636
mov edi, esp
movsd dword es:[edi], dword [esi]
movsw word es:[edi], word [esi]
push 0x4d963c
sub esp, 8
mov esi, 0x4d9640
mov edi, esp
movsd dword es:[edi], dword [esi]
movsw word es:[edi], word [esi]
sub esp, 8
mov esi, 0x4d9646
mov edi, esp
movsd dword es:[edi], dword [esi]
movsw word es:[edi], word [esi]
sub esp, 8
mov esi, 0x4d964c
mov edi, esp
movsd dword es:[edi], dword [esi]
movsw word es:[edi], word [esi]
movzx eax, byte [ebp - 0x7c]
dec eax
imul eax, eax, 0xa
mov ebx, 0x138
sub ebx, eax
mov dword [ebp - 0x3ac], ebx
fild dword [ebp - 0x3ac]
lea edi, [ebp - 0x3b4]
call fcn.0040be55
sub esp, 8
lea esi, [ebp - 0x3b4]
mov edi, esp
movsd dword es:[edi], dword [esi]
movsw word es:[edi], word [esi]
movzx eax, byte [ebp - 0x78]
imul ebx, eax, 0x37
lea ebx, [ebx + 0x4eba92]
push ebx
call fcn.004849c0
add dword [ebp - 0xc], eax
sub esp, 8
mov esi, 0x4d9652
mov edi, esp
movsd dword es:[edi], dword [esi]
movsw word es:[edi], word [esi]
sub esp, 8
mov esi, 0x4d9658
mov edi, esp
movsd dword es:[edi], dword [esi]
movsw word es:[edi], word [esi]
sub esp, 8
mov esi, 0x4d965e
mov edi, esp
movsd dword es:[edi], dword [esi]
movsw word es:[edi], word [esi]
push 0x4d9664
sub esp, 8
mov esi, 0x4d9668
mov edi, esp
movsd dword es:[edi], dword [esi]
movsw word es:[edi], word [esi]
sub esp, 8
mov esi, 0x4d966e
mov edi, esp
movsd dword es:[edi], dword [esi]
movsw word es:[edi], word [esi]
mov eax, 5
movzx ebx, byte [ebp - 0x3c]
imul eax, ebx
mov ebx, 0x1a2
sub ebx, eax
mov dword [ebp - 0x3ac], ebx
fild dword [ebp - 0x3ac]
lea edi, [ebp - 0x3b4]
call fcn.0040be55
sub esp, 8
lea esi, [ebp - 0x3b4]
mov edi, esp
movsd dword es:[edi], dword [esi]
movsw word es:[edi], word [esi]
movzx eax, byte [ebp - 0x7c]
dec eax
imul eax, eax, 0xa
mov ebx, 0x138
sub ebx, eax
mov dword [ebp - 0x3b8], ebx
fild dword [ebp - 0x3b8]
lea edi, [ebp - 0x3c0]
call fcn.0040be55
sub esp, 8
lea esi, [ebp - 0x3c0]
mov edi, esp
movsd dword es:[edi], dword [esi]
movsw word es:[edi], word [esi]
lea eax, [ebp - 0x3c]
push eax
call fcn.004849c0
add dword [ebp - 0xc], eax
dec byte [ebp - 0x2a8]
jne 0x4804be
sub esp, 8
mov esi, 0x4d9674
mov edi, esp
movsd dword es:[edi], dword [esi]
movsw word es:[edi], word [esi]
sub esp, 8
mov esi, 0x4d967a
mov edi, esp
movsd dword es:[edi], dword [esi]
movsw word es:[edi], word [esi]
sub esp, 8
mov esi, 0x4d9680
mov edi, esp
movsd dword es:[edi], dword [esi]
movsw word es:[edi], word [esi]
push 0x4d9686
sub esp, 8
mov esi, 0x4d968a
mov edi, esp
movsd dword es:[edi], dword [esi]
movsw word es:[edi], word [esi]
sub esp, 8
mov esi, 0x4d9690
mov edi, esp
movsd dword es:[edi], dword [esi]
movsw word es:[edi], word [esi]
sub esp, 8
mov esi, 0x4d9696
mov edi, esp
movsd dword es:[edi], dword [esi]
movsw word es:[edi], word [esi]
sub esp, 8
mov esi, 0x4d969c
mov edi, esp
movsd dword es:[edi], dword [esi]
movsw word es:[edi], word [esi]
push 0x4d96a2
call fcn.004849c0
add dword [ebp - 0xc], eax
lea eax, [ebp - 0x4a8]
push eax
lea ebx, [ebp - 0x4c0]
push ebx
sub esp, 8
fld qword [ebp - 0x18]
fstp qword [esp]
wait
push 0xe
push 2
call fcn.0040b950
lea eax, [ebp - 0x4c0]
push eax
call fcn.0041ac50
lea edi, [ebp - 0x3c]
lea esi, [ebp - 0x4a8]
push 0x11
call fcn.00401950
sub esp, 8
mov esi, 0x4d96a9
mov edi, esp
movsd dword es:[edi], dword [esi]
movsw word es:[edi], word [esi]
sub esp, 8
mov esi, 0x4d96af
mov edi, esp
movsd dword es:[edi], dword [esi]
movsw word es:[edi], word [esi]
sub esp, 8
mov esi, 0x4d96b5
mov edi, esp
movsd dword es:[edi], dword [esi]
movsw word es:[edi], word [esi]
push 0x4d96bb
sub esp, 8
mov esi, 0x4d96bf
mov edi, esp
movsd dword es:[edi], dword [esi]
movsw word es:[edi], word [esi]
sub esp, 8
mov esi, 0x4d96c5
mov edi, esp
movsd dword es:[edi], dword [esi]
movsw word es:[edi], word [esi]
mov eax, 5
movzx ebx, byte [ebp - 0x3c]
imul eax, ebx
mov ebx, 0x1a2
sub ebx, eax
mov dword [ebp - 0x3ac], ebx
fild dword [ebp - 0x3ac]
lea edi, [ebp - 0x3b4]
call fcn.0040be55
sub esp, 8
lea esi, [ebp - 0x3b4]
mov edi, esp
movsd dword es:[edi], dword [esi]
movsw word es:[edi], word [esi]
sub esp, 8
mov esi, 0x4d96cb
mov edi, esp
movsd dword es:[edi], dword [esi]
movsw word es:[edi], word [esi]
lea eax, [ebp - 0x3c]
push eax
call fcn.004849c0
add dword [ebp - 0xc], eax
mov byte [ebp - 0x7c], 0
mov byte [ebp - 0x3ac], 0xc
mov byte [ebp - 0x78], 0
inc byte [ebp - 0x78]
lea eax, [ebp - 0x4ac]
push eax
push 0xf
call fcn.0041b490
movzx ebx, byte [ebp - 0x78]
imul eax, ebx, 0x30
lea esi, [eax + 0x4eb5c2]
lea edi, [ebp - 0x4ac]
call fcn.00415520
test al, al
je 0x4809fc
inc byte [ebp - 0x7c]
lea eax, [ebp - 0x5ac]
push eax
lea ebx, [ebp - 0x5c4]
push ebx
movzx eax, byte [ebp - 0x78]
mov edi, dword [ebp - 0x19c]
sub esp, 8
fld qword [edi + eax*8 + 0x348]
fstp qword [esp]
wait
push 0xe
push 2
call fcn.0040b950
lea eax, [ebp - 0x5c4]
push eax
call fcn.0041ac50
lea edi, [ebp - 0x3c]
lea esi, [ebp - 0x5ac]
push 0x11
call fcn.00401950
sub esp, 8
mov esi, 0x4d96d1
mov edi, esp
movsd dword es:[edi], dword [esi]
movsw word es:[edi], word [esi]
sub esp, 8
mov esi, 0x4d96d7
mov edi, esp
movsd dword es:[edi], dword [esi]
movsw word es:[edi], word [esi]
sub esp, 8
mov esi, 0x4d96dd
mov edi, esp
movsd dword es:[edi], dword [esi]
movsw word es:[edi], word [esi]
push 0x4d96e3
sub esp, 8
mov esi, 0x4d96e7
mov edi, esp
movsd dword es:[edi], dword [esi]
movsw word es:[edi], word [esi]
sub esp, 8
mov esi, 0x4d96ed
mov edi, esp
movsd dword es:[edi], dword [esi]
movsw word es:[edi], word [esi]
sub esp, 8
mov esi, 0x4d96f3
mov edi, esp
movsd dword es:[edi], dword [esi]
movsw word es:[edi], word [esi]
movzx eax, byte [ebp - 0x7c]
dec eax
imul eax, eax, 0xa
mov ebx, 0x98
sub ebx, eax
mov dword [ebp - 0x4b0], ebx
fild dword [ebp - 0x4b0]
lea edi, [ebp - 0x4b8]
call fcn.0040be55
sub esp, 8
lea esi, [ebp - 0x4b8]
mov edi, esp
movsd dword es:[edi], dword [esi]
movsw word es:[edi], word [esi]
movzx eax, byte [ebp - 0x78]
imul ebx, eax, 0x30
lea ebx, [ebx + 0x4eb5c2]
push ebx
call fcn.004849c0
add dword [ebp - 0xc], eax
sub esp, 8
mov esi, 0x4d96f9
mov edi, esp
movsd dword es:[edi], dword [esi]
movsw word es:[edi], word [esi]
sub esp, 8
mov esi, 0x4d96ff
mov edi, esp
movsd dword es:[edi], dword [esi]
movsw word es:[edi], word [esi]
sub esp, 8
mov esi, 0x4d9705
mov edi, esp
movsd dword es:[edi], dword [esi]
movsw word es:[edi], word [esi]
push 0x4d970b
sub esp, 8
mov esi, 0x4d970f
mov edi, esp
movsd dword es:[edi], dword [esi]
movsw word es:[edi], word [esi]
sub esp, 8
mov esi, 0x4d9715
mov edi, esp
movsd dword es:[edi], dword [esi]
movsw word es:[edi], word [esi]
mov eax, 5
movzx ebx, byte [ebp - 0x3c]
imul eax, ebx
mov ebx, 0x1a2
sub ebx, eax
mov dword [ebp - 0x4b0], ebx
fild dword [ebp - 0x4b0]
lea edi, [ebp - 0x4b8]
call fcn.0040be55
sub esp, 8
lea esi, [ebp - 0x4b8]
mov edi, esp
movsd dword es:[edi], dword [esi]
movsw word es:[edi], word [esi]
movzx eax, byte [ebp - 0x7c]
dec eax
imul eax, eax, 0xa
mov ebx, 0x98
sub ebx, eax
mov dword [ebp - 0x4bc], ebx
fild dword [ebp - 0x4bc]
lea edi, [ebp - 0x4c4]
call fcn.0040be55
sub esp, 8
lea esi, [ebp - 0x4c4]
mov edi, esp
movsd dword es:[edi], dword [esi]
movsw word es:[edi], word [esi]
lea eax, [ebp - 0x3c]
push eax
call fcn.004849c0
add dword [ebp - 0xc], eax
dec byte [ebp - 0x3ac]
jne 0x480818
sub esp, 8
mov esi, 0x4d971b
mov edi, esp
movsd dword es:[edi], dword [esi]
movsw word es:[edi], word [esi]
sub esp, 8
mov esi, 0x4d9721
mov edi, esp
movsd dword es:[edi], dword [esi]
movsw word es:[edi], word [esi]
sub esp, 8
mov esi, 0x4d9727
mov edi, esp
movsd dword es:[edi], dword [esi]
movsw word es:[edi], word [esi]
push 0x4d972d
sub esp, 8
mov esi, 0x4d9731
mov edi, esp
movsd dword es:[edi], dword [esi]
movsw word es:[edi], word [esi]
sub esp, 8
mov esi, 0x4d9737
mov edi, esp
movsd dword es:[edi], dword [esi]
movsw word es:[edi], word [esi]
sub esp, 8
mov esi, 0x4d973d
mov edi, esp
movsd dword es:[edi], dword [esi]
movsw word es:[edi], word [esi]
sub esp, 8
mov esi, 0x4d9743
mov edi, esp
movsd dword es:[edi], dword [esi]
movsw word es:[edi], word [esi]
push 0x4d9749
call fcn.004849c0
add dword [ebp - 0xc], eax
lea eax, [ebp - 0x5ac]
push eax
lea ebx, [ebp - 0x5c4]
push ebx
mov edi, dword [ebp - 0x19c]
sub esp, 8
fld qword [edi + 0x5e8]
fstp qword [esp]
wait
push 0xe
push 2
call fcn.0040b950
lea eax, [ebp - 0x5c4]
push eax
call fcn.0041ac50
lea edi, [ebp - 0x3c]
lea esi, [ebp - 0x5ac]
push 0x11
call fcn.00401950
sub esp, 8
mov esi, 0x4d9750
mov edi, esp
movsd dword es:[edi], dword [esi]
movsw word es:[edi], word [esi]
sub esp, 8
mov esi, 0x4d9756
mov edi, esp
movsd dword es:[edi], dword [esi]
movsw word es:[edi], word [esi]
sub esp, 8
mov esi, 0x4d975c
mov edi, esp
movsd dword es:[edi], dword [esi]
movsw word es:[edi], word [esi]
push 0x4d9762
sub esp, 8
mov esi, 0x4d9766
mov edi, esp
movsd dword es:[edi], dword [esi]
movsw word es:[edi], word [esi]
sub esp, 8
mov esi, 0x4d976c
mov edi, esp
movsd dword es:[edi], dword [esi]
movsw word es:[edi], word [esi]
mov eax, 5
movzx ebx, byte [ebp - 0x3c]
imul eax, ebx
mov ebx, 0x1a2
sub ebx, eax
mov dword [ebp - 0x4b0], ebx
fild dword [ebp - 0x4b0]
lea edi, [ebp - 0x4b8]
call fcn.0040be55
sub esp, 8
lea esi, [ebp - 0x4b8]
mov edi, esp
movsd dword es:[edi], dword [esi]
movsw word es:[edi], word [esi]
sub esp, 8
mov esi, 0x4d9772
mov edi, esp
movsd dword es:[edi], dword [esi]
movsw word es:[edi], word [esi]
lea eax, [ebp - 0x3c]
push eax
call fcn.004849c0
add dword [ebp - 0xc], eax
mov eax, dword [ebp - 0x19c]
fld qword [eax + 0x538]
mov edi, dword [ebp - 0x19c]
fld qword [edi + 0x548]
faddp st(1)
mov esi, dword [ebp - 0x19c]
fld qword [esi + 0x540]
faddp st(1)
mov edi, dword [ebp - 0x19c]
fld qword [edi + 0x550]
fsubp st(1)
fstp qword [ebp - 0x18]
wait
mov byte [ebp - 0x7c], 0
mov byte [ebp - 0x4b0], 5
mov byte [ebp - 0x78], 0
inc byte [ebp - 0x78]
fld xword [0x4d9778]
movzx eax, byte [ebp - 0x78]
fld dword [eax*4 + 0x4ec061]
wait
fcompp
wait
fnstsw ax
wait
sahf
jbe 0x480edb
inc byte [ebp - 0x7c]
fld qword [ebp - 0x18]
movzx eax, byte [ebp - 0x78]
mov edi, dword [ebp - 0x19c]
fld qword [edi + eax*8 + 0x438]
faddp st(1)
fstp qword [ebp - 0x18]
wait
push 5
lea eax, [ebp - 0x28]
mov byte [eax], 0
push eax
movzx eax, byte [ebp - 0x78]
fld dword [eax*4 + 0x4ec061]
fstp qword [ebp - 0x4b8]
wait
lea ebx, [ebp - 0x4b8]
push ebx
push 3
push 0
call fcn.0040ba00
add esp, 8
sub esp, 8
mov esi, 0x4d9782
mov edi, esp
movsd dword es:[edi], dword [esi]
movsw word es:[edi], word [esi]
sub esp, 8
mov esi, 0x4d9788
mov edi, esp
movsd dword es:[edi], dword [esi]
movsw word es:[edi], word [esi]
sub esp, 8
mov esi, 0x4d978e
mov edi, esp
movsd dword es:[edi], dword [esi]
movsw word es:[edi], word [esi]
push 0x4d9794
sub esp, 8
mov esi, 0x4d9798
mov edi, esp
movsd dword es:[edi], dword [esi]
movsw word es:[edi], word [esi]
sub esp, 8
mov esi, 0x4d979e
mov edi, esp
movsd dword es:[edi], dword [esi]
movsw word es:[edi], word [esi]
sub esp, 8
mov esi, 0x4d97a4
mov edi, esp
movsd dword es:[edi], dword [esi]
movsw word es:[edi], word [esi]
movzx eax, byte [ebp - 0x7c]
dec eax
imul eax, eax, 0xa
mov ebx, 0x110
sub ebx, eax
mov dword [ebp - 0x4b4], ebx
fild dword [ebp - 0x4b4]
lea edi, [ebp - 0x4bc]
call fcn.0040be55
sub esp, 8
lea esi, [ebp - 0x4bc]
mov edi, esp
movsd dword es:[edi], dword [esi]
movsw word es:[edi], word [esi]
mov esi, 0x4d97aa
lea edi, [ebp - 0x6bc]
call fcn.00401b30
lea esi, [ebp - 0x28]
call fcn.00401af0
mov esi, edi
lea edi, [ebp - 0x5bc]
call fcn.00401b30
mov esi, 0x4d97ac
call fcn.00401af0
mov eax, edi
push eax
call fcn.004849c0
add dword [ebp - 0xc], eax
lea eax, [ebp - 0x5b0]
push eax
lea ebx, [ebp - 0x5c8]
push ebx
movzx eax, byte [ebp - 0x78]
mov edi, dword [ebp - 0x19c]
fld dword [edi + eax*4 + 8]
sub esp, 8
fstp qword [esp]
wait
push 6
push 2
call fcn.0040b950
lea eax, [ebp - 0x5c8]
push eax
call fcn.0041ac50
lea edi, [ebp - 0x3c]
lea esi, [ebp - 0x5b0]
push 0x11
call fcn.00401950
sub esp, 8
mov esi, 0x4d97b6
mov edi, esp
movsd dword es:[edi], dword [esi]
movsw word es:[edi], word [esi]
sub esp, 8
mov esi, 0x4d97bc
mov edi, esp
movsd dword es:[edi], dword [esi]
movsw word es:[edi], word [esi]
sub esp, 8
mov esi, 0x4d97c2
mov edi, esp
movsd dword es:[edi], dword [esi]
movsw word es:[edi], word [esi]
push 0x4d97c8
sub esp, 8
mov esi, 0x4d97cc
mov edi, esp
movsd dword es:[edi], dword [esi]
movsw word es:[edi], word [esi]
sub esp, 8
mov esi, 0x4d97d2
mov edi, esp
movsd dword es:[edi], dword [esi]
movsw word es:[edi], word [esi]
mov eax, 5
movzx ebx, byte [ebp - 0x3c]
imul eax, ebx
mov ebx, 0xa8
sub ebx, eax
mov dword [ebp - 0x4b4], ebx
fild dword [ebp - 0x4b4]
lea edi, [ebp - 0x4bc]
call fcn.0040be55
sub esp, 8
lea esi, [ebp - 0x4bc]
mov edi, esp
movsd dword es:[edi], dword [esi]
movsw word es:[edi], word [esi]
movzx eax, byte [ebp - 0x7c]
dec eax
imul eax, eax, 0xa
mov ebx, 0x110
sub ebx, eax
mov dword [ebp - 0x4c0], ebx
fild dword [ebp - 0x4c0]
lea edi, [ebp - 0x4c8]
call fcn.0040be55
sub esp, 8
lea esi, [ebp - 0x4c8]
mov edi, esp
movsd dword es:[edi], dword [esi]
movsw word es:[edi], word [esi]
lea eax, [ebp - 0x3c]
push eax
call fcn.004849c0
add dword [ebp - 0xc], eax
lea eax, [ebp - 0x5b0]
push eax
lea ebx, [ebp - 0x5c8]
push ebx
movzx eax, byte [ebp - 0x78]
mov edi, dword [ebp - 0x19c]
sub esp, 8
fld qword [edi + eax*8 + 0x438]
fstp qword [esp]
wait
push 0xe
push 2
call fcn.0040b950
lea eax, [ebp - 0x5c8]
push eax
call fcn.0041ac50
lea edi, [ebp - 0x3c]
lea esi, [ebp - 0x5b0]
push 0x11
call fcn.00401950
sub esp, 8
mov esi, 0x4d97d8
mov edi, esp
movsd dword es:[edi], dword [esi]
movsw word es:[edi], word [esi]
sub esp, 8
mov esi, 0x4d97de
mov edi, esp
movsd dword es:[edi], dword [esi]
movsw word es:[edi], word [esi]
sub esp, 8
mov esi, 0x4d97e4
mov edi, esp
movsd dword es:[edi], dword [esi]
movsw word es:[edi], word [esi]
push 0x4d97ea
sub esp, 8
mov esi, 0x4d97ee
mov edi, esp
movsd dword es:[edi], dword [esi]
movsw word es:[edi], word [esi]
sub esp, 8
mov esi, 0x4d97f4
mov edi, esp
movsd dword es:[edi], dword [esi]
movsw word es:[edi], word [esi]
mov eax, 5
movzx ebx, byte [ebp - 0x3c]
imul eax, ebx
mov ebx, 0xea
sub ebx, eax
mov dword [ebp - 0x4b4], ebx
fild dword [ebp - 0x4b4]
lea edi, [ebp - 0x4bc]
call fcn.0040be55
sub esp, 8
lea esi, [ebp - 0x4bc]
mov edi, esp
movsd dword es:[edi], dword [esi]
movsw word es:[edi], word [esi]
movzx eax, byte [ebp - 0x7c]
dec eax
imul eax, eax, 0xa
mov ebx, 0x110
sub ebx, eax
mov dword [ebp - 0x4c0], ebx
fild dword [ebp - 0x4c0]
lea edi, [ebp - 0x4c8]
call fcn.0040be55
sub esp, 8
lea esi, [ebp - 0x4c8]
mov edi, esp
movsd dword es:[edi], dword [esi]
movsw word es:[edi], word [esi]
lea eax, [ebp - 0x3c]
push eax
call fcn.004849c0
add dword [ebp - 0xc], eax
dec byte [ebp - 0x4b0]
jne 0x480b9b
mov byte [ebp - 0x4b4], 0xc
mov byte [ebp - 0x78], 0
inc byte [ebp - 0x78]
movzx eax, byte [ebp - 0x78]
imul ebx, eax, 0x37
lea edi, [ebx + 0x4eb7fb]
mov dword [ebp - 0x4b8], edi
lea eax, [ebp - 0x5b8]
push eax
push 0xf
call fcn.0041b490
mov edi, dword [ebp - 0x4b8]
lea esi, [edi + 3]
lea edi, [ebp - 0x5b8]
call fcn.00415520
test al, al
je 0x481337
inc byte [ebp - 0x7c]
fld qword [ebp - 0x18]
movzx eax, byte [ebp - 0x78]
mov edi, dword [ebp - 0x19c]
fld qword [edi + eax*8 + 0x460]
faddp st(1)
fstp qword [ebp - 0x18]
wait
sub esp, 8
mov esi, 0x4d97fa
mov edi, esp
movsd dword es:[edi], dword [esi]
movsw word es:[edi], word [esi]
sub esp, 8
mov esi, 0x4d9800
mov edi, esp
movsd dword es:[edi], dword [esi]
movsw word es:[edi], word [esi]
sub esp, 8
mov esi, 0x4d9806
mov edi, esp
movsd dword es:[edi], dword [esi]
movsw word es:[edi], word [esi]
push 0x4d980c
sub esp, 8
mov esi, 0x4d9810
mov edi, esp
movsd dword es:[edi], dword [esi]
movsw word es:[edi], word [esi]
sub esp, 8
mov esi, 0x4d9816
mov edi, esp
movsd dword es:[edi], dword [esi]
movsw word es:[edi], word [esi]
sub esp, 8
mov esi, 0x4d981c
mov edi, esp
movsd dword es:[edi], dword [esi]
movsw word es:[edi], word [esi]
movzx eax, byte [ebp - 0x7c]
dec eax
imul eax, eax, 0xa
mov ebx, 0x110
sub ebx, eax
mov dword [ebp - 0x5bc], ebx
fild dword [ebp - 0x5bc]
lea edi, [ebp - 0x5c4]
call fcn.0040be55
sub esp, 8
lea esi, [ebp - 0x5c4]
mov edi, esp
movsd dword es:[edi], dword [esi]
movsw word es:[edi], word [esi]
mov eax, dword [ebp - 0x4b8]
lea ebx, [eax + 3]
push ebx
call fcn.004849c0
add dword [ebp - 0xc], eax
mov eax, dword [ebp - 0x4b8]
movzx ebx, byte [eax + 2]
mov ax, bx
cmp ax, 0x47
jne 0x481116
lea eax, [ebp - 0x6b8]
push eax
lea ebx, [ebp - 0x6d0]
push ebx
movzx eax, byte [ebp - 0x78]
imul eax, eax, 0x21
mov edi, dword [ebp - 0x19c]
sub esp, 8
fld qword [edi + eax + 0x28]
fstp qword [esp]
wait
push 4
push 1
call fcn.0040b950
lea eax, [ebp - 0x6d0]
push eax
call fcn.0041ac50
lea edi, [ebp - 0x3c]
lea esi, [ebp - 0x6b8]
push 0x11
call fcn.00401950
sub esp, 8
mov esi, 0x4d9822
mov edi, esp
movsd dword es:[edi], dword [esi]
movsw word es:[edi], word [esi]
sub esp, 8
mov esi, 0x4d9828
mov edi, esp
movsd dword es:[edi], dword [esi]
movsw word es:[edi], word [esi]
sub esp, 8
mov esi, 0x4d982e
mov edi, esp
movsd dword es:[edi], dword [esi]
movsw word es:[edi], word [esi]
push 0x4d9834
sub esp, 8
mov esi, 0x4d9838
mov edi, esp
movsd dword es:[edi], dword [esi]
movsw word es:[edi], word [esi]
sub esp, 8
mov esi, 0x4d983e
mov edi, esp
movsd dword es:[edi], dword [esi]
movsw word es:[edi], word [esi]
mov eax, 5
movzx ebx, byte [ebp - 0x3c]
imul eax, ebx
mov ebx, 0x84
sub ebx, eax
mov dword [ebp - 0x5bc], ebx
fild dword [ebp - 0x5bc]
lea edi, [ebp - 0x5c4]
call fcn.0040be55
sub esp, 8
lea esi, [ebp - 0x5c4]
mov edi, esp
movsd dword es:[edi], dword [esi]
movsw word es:[edi], word [esi]
movzx eax, byte [ebp - 0x7c]
dec eax
imul eax, eax, 0xa
mov ebx, 0x110
sub ebx, eax
mov dword [ebp - 0x5c8], ebx
fild dword [ebp - 0x5c8]
lea edi, [ebp - 0x5d0]
call fcn.0040be55
sub esp, 8
lea esi, [ebp - 0x5d0]
mov edi, esp
movsd dword es:[edi], dword [esi]
movsw word es:[edi], word [esi]
lea eax, [ebp - 0x3c]
push eax
call fcn.004849c0
add dword [ebp - 0xc], eax
jmp 0x48122d
cmp ax, 0x53
jne 0x48122d
lea eax, [ebp - 0x6b8]
push eax
lea ebx, [ebp - 0x6d0]
push ebx
movzx eax, byte [ebp - 0x78]
imul eax, eax, 0x21
mov edi, dword [ebp - 0x19c]
sub esp, 8
fld qword [edi + eax + 0x28]
fstp qword [esp]
wait
push 6
push 2
call fcn.0040b950
lea eax, [ebp - 0x6d0]
push eax
call fcn.0041ac50
lea edi, [ebp - 0x3c]
lea esi, [ebp - 0x6b8]
push 0x11
call fcn.00401950
sub esp, 8
mov esi, 0x4d9844
mov edi, esp
movsd dword es:[edi], dword [esi]
movsw word es:[edi], word [esi]
sub esp, 8
mov esi, 0x4d984a
mov edi, esp
movsd dword es:[edi], dword [esi]
movsw word es:[edi], word [esi]
sub esp, 8
mov esi, 0x4d9850
mov edi, esp
movsd dword es:[edi], dword [esi]
movsw word es:[edi], word [esi]
push 0x4d9856
sub esp, 8
mov esi, 0x4d985a
mov edi, esp
movsd dword es:[edi], dword [esi]
movsw word es:[edi], word [esi]
sub esp, 8
mov esi, 0x4d9860
mov edi, esp
movsd dword es:[edi], dword [esi]
movsw word es:[edi], word [esi]
mov eax, 5
movzx ebx, byte [ebp - 0x3c]
imul eax, ebx
mov ebx, 0xa8
sub ebx, eax
mov dword [ebp - 0x5bc], ebx
fild dword [ebp - 0x5bc]
lea edi, [ebp - 0x5c4]
call fcn.0040be55
sub esp, 8
lea esi, [ebp - 0x5c4]
mov edi, esp
movsd dword es:[edi], dword [esi]
movsw word es:[edi], word [esi]
movzx eax, byte [ebp - 0x7c]
dec eax
imul eax, eax, 0xa
mov ebx, 0x110
sub ebx, eax
mov dword [ebp - 0x5c8], ebx
fild dword [ebp - 0x5c8]
lea edi, [ebp - 0x5d0]
call fcn.0040be55
sub esp, 8
lea esi, [ebp - 0x5d0]
mov edi, esp
movsd dword es:[edi], dword [esi]
movsw word es:[edi], word [esi]
lea eax, [ebp - 0x3c]
push eax
call fcn.004849c0
add dword [ebp - 0xc], eax
lea eax, [ebp - 0x6b8]
push eax
lea ebx, [ebp - 0x6d0]
push ebx
movzx eax, byte [ebp - 0x78]
mov edi, dword [ebp - 0x19c]
sub esp, 8
fld qword [edi + eax*8 + 0x460]
fstp qword [esp]
wait
push 0xe
push 2
call fcn.0040b950
lea eax, [ebp - 0x6d0]
push eax
call fcn.0041ac50
lea edi, [ebp - 0x3c]
lea esi, [ebp - 0x6b8]
push 0x11
call fcn.00401950
sub esp, 8
mov esi, 0x4d9866
mov edi, esp
movsd dword es:[edi], dword [esi]
movsw word es:[edi], word [esi]
sub esp, 8
mov esi, 0x4d986c
mov edi, esp
movsd dword es:[edi], dword [esi]
movsw word es:[edi], word [esi]
sub esp, 8
mov esi, 0x4d9872
mov edi, esp
movsd dword es:[edi], dword [esi]
movsw word es:[edi], word [esi]
push 0x4d9878
sub esp, 8
mov esi, 0x4d987c
mov edi, esp
movsd dword es:[edi], dword [esi]
movsw word es:[edi], word [esi]
sub esp, 8
mov esi, 0x4d9882
mov edi, esp
movsd dword es:[edi], dword [esi]
movsw word es:[edi], word [esi]
mov eax, 5
movzx ebx, byte [ebp - 0x3c]
imul eax, ebx
mov ebx, 0xea
sub ebx, eax
mov dword [ebp - 0x5bc], ebx
fild dword [ebp - 0x5bc]
lea edi, [ebp - 0x5c4]
call fcn.0040be55
sub esp, 8
lea esi, [ebp - 0x5c4]
mov edi, esp
movsd dword es:[edi], dword [esi]
movsw word es:[edi], word [esi]
movzx eax, byte [ebp - 0x7c]
dec eax
imul eax, eax, 0xa
mov ebx, 0x110
sub ebx, eax
mov dword [ebp - 0x5c8], ebx
fild dword [ebp - 0x5c8]
lea edi, [ebp - 0x5d0]
call fcn.0040be55
sub esp, 8
lea esi, [ebp - 0x5d0]
mov edi, esp
movsd dword es:[edi], dword [esi]
movsw word es:[edi], word [esi]
lea eax, [ebp - 0x3c]
push eax
call fcn.004849c0
add dword [ebp - 0xc], eax
dec byte [ebp - 0x4b4]
jne 0x480ef2
sub esp, 8
mov esi, 0x4d9888
mov edi, esp
movsd dword es:[edi], dword [esi]
movsw word es:[edi], word [esi]
sub esp, 8
mov esi, 0x4d988e
mov edi, esp
movsd dword es:[edi], dword [esi]
movsw word es:[edi], word [esi]
sub esp, 8
mov esi, 0x4d9894
mov edi, esp
movsd dword es:[edi], dword [esi]
movsw word es:[edi], word [esi]
push 0x4d989a
sub esp, 8
mov esi, 0x4d989e
mov edi, esp
movsd dword es:[edi], dword [esi]
movsw word es:[edi], word [esi]
sub esp, 8
mov esi, 0x4d98a4
mov edi, esp
movsd dword es:[edi], dword [esi]
movsw word es:[edi], word [esi]
sub esp, 8
mov esi, 0x4d98aa
mov edi, esp
movsd dword es:[edi], dword [esi]
movsw word es:[edi], word [esi]
sub esp, 8
mov esi, 0x4d98b0
mov edi, esp
movsd dword es:[edi], dword [esi]
movsw word es:[edi], word [esi]
push 0x4d98b6
call fcn.004849c0
add dword [ebp - 0xc], eax
lea eax, [ebp - 0x6b8]
push eax
lea ebx, [ebp - 0x6d0]
push ebx
sub esp, 8
fld qword [ebp - 0x18]
fstp qword [esp]
wait
push 0xe
push 2
call fcn.0040b950
lea eax, [ebp - 0x6d0]
push eax
call fcn.0041ac50
lea edi, [ebp - 0x3c]
lea esi, [ebp - 0x6b8]
push 0x11
call fcn.00401950
sub esp, 8
mov esi, 0x4d98bd
mov edi, esp
movsd dword es:[edi], dword [esi]
movsw word es:[edi], word [esi]
sub esp, 8
mov esi, 0x4d98c3
mov edi, esp
movsd dword es:[edi], dword [esi]
movsw word es:[edi], word [esi]
sub esp, 8
mov esi, 0x4d98c9
mov edi, esp
movsd dword es:[edi], dword [esi]
movsw word es:[edi], word [esi]
push 0x4d98cf
sub esp, 8
mov esi, 0x4d98d3
mov edi, esp
movsd dword es:[edi], dword [esi]
movsw word es:[edi], word [esi]
sub esp, 8
mov esi, 0x4d98d9
mov edi, esp
movsd dword es:[edi], dword [esi]
movsw word es:[edi], word [esi]
mov eax, 5
movzx ebx, byte [ebp - 0x3c]
imul eax, ebx
mov ebx, 0xea
sub ebx, eax
mov dword [ebp - 0x5bc], ebx
fild dword [ebp - 0x5bc]
lea edi, [ebp - 0x5c4]
call fcn.0040be55
sub esp, 8
lea esi, [ebp - 0x5c4]
mov edi, esp
movsd dword es:[edi], dword [esi]
movsw word es:[edi], word [esi]
sub esp, 8
mov esi, 0x4d98df
mov edi, esp
movsd dword es:[edi], dword [esi]
movsw word es:[edi], word [esi]
lea eax, [ebp - 0x3c]
push eax
call fcn.004849c0
add dword [ebp - 0xc], eax
sub esp, 8
mov esi, 0x4d98e5
mov edi, esp
movsd dword es:[edi], dword [esi]
movsw word es:[edi], word [esi]
sub esp, 8
mov esi, 0x4d98eb
mov edi, esp
movsd dword es:[edi], dword [esi]
movsw word es:[edi], word [esi]
sub esp, 8
mov esi, 0x4d98f1
mov edi, esp
movsd dword es:[edi], dword [esi]
movsw word es:[edi], word [esi]
push 0x4d98f7
sub esp, 8
mov esi, 0x4d98fb
mov edi, esp
movsd dword es:[edi], dword [esi]
movsw word es:[edi], word [esi]
sub esp, 8
mov esi, 0x4d9901
mov edi, esp
movsd dword es:[edi], dword [esi]
movsw word es:[edi], word [esi]
sub esp, 8
mov esi, 0x4d9907
mov edi, esp
movsd dword es:[edi], dword [esi]
movsw word es:[edi], word [esi]
sub esp, 8
mov esi, 0x4d990d
mov edi, esp
movsd dword es:[edi], dword [esi]
movsw word es:[edi], word [esi]
push 0x4d9913
call fcn.004849c0
add dword [ebp - 0xc], eax
sub esp, 8
mov esi, 0x4d993a
mov edi, esp
movsd dword es:[edi], dword [esi]
movsw word es:[edi], word [esi]
sub esp, 8
mov esi, 0x4d9940
mov edi, esp
movsd dword es:[edi], dword [esi]
movsw word es:[edi], word [esi]
sub esp, 8
mov esi, 0x4d9946
mov edi, esp
movsd dword es:[edi], dword [esi]
movsw word es:[edi], word [esi]
push 0x4d994c
sub esp, 8
mov esi, 0x4d9950
mov edi, esp
movsd dword es:[edi], dword [esi]
movsw word es:[edi], word [esi]
sub esp, 8
mov esi, 0x4d9956
mov edi, esp
movsd dword es:[edi], dword [esi]
movsw word es:[edi], word [esi]
sub esp, 8
mov esi, 0x4d995c
mov edi, esp
movsd dword es:[edi], dword [esi]
movsw word es:[edi], word [esi]
sub esp, 8
mov esi, 0x4d9962
mov edi, esp
movsd dword es:[edi], dword [esi]
movsw word es:[edi], word [esi]
push 0x4d9968
call fcn.004849c0
add dword [ebp - 0xc], eax
sub esp, 8
mov esi, 0x4d9992
mov edi, esp
movsd dword es:[edi], dword [esi]
movsw word es:[edi], word [esi]
sub esp, 8
mov esi, 0x4d9998
mov edi, esp
movsd dword es:[edi], dword [esi]
movsw word es:[edi], word [esi]
sub esp, 8
mov esi, 0x4d999e
mov edi, esp
movsd dword es:[edi], dword [esi]
movsw word es:[edi], word [esi]
push 0x4d99a4
sub esp, 8
mov esi, 0x4d99a8
mov edi, esp
movsd dword es:[edi], dword [esi]
movsw word es:[edi], word [esi]
sub esp, 8
mov esi, 0x4d99ae
mov edi, esp
movsd dword es:[edi], dword [esi]
movsw word es:[edi], word [esi]
sub esp, 8
mov esi, 0x4d99b4
mov edi, esp
movsd dword es:[edi], dword [esi]
movsw word es:[edi], word [esi]
sub esp, 8
mov esi, 0x4d99ba
mov edi, esp
movsd dword es:[edi], dword [esi]
movsw word es:[edi], word [esi]
push 0x4d99c0
call fcn.004849c0
add dword [ebp - 0xc], eax
sub esp, 8
mov esi, 0x4d99e7
mov edi, esp
movsd dword es:[edi], dword [esi]
movsw word es:[edi], word [esi]
sub esp, 8
mov esi, 0x4d99ed
mov edi, esp
movsd dword es:[edi], dword [esi]
movsw word es:[edi], word [esi]
sub esp, 8
mov esi, 0x4d99f3
mov edi, esp
movsd dword es:[edi], dword [esi]
movsw word es:[edi], word [esi]
push 0x4d99f9
sub esp, 8
mov esi, 0x4d99fd
mov edi, esp
movsd dword es:[edi], dword [esi]
movsw word es:[edi], word [esi]
sub esp, 8
mov esi, 0x4d9a03
mov edi, esp
movsd dword es:[edi], dword [esi]
movsw word es:[edi], word [esi]
sub esp, 8
mov esi, 0x4d9a09
mov edi, esp
movsd dword es:[edi], dword [esi]
movsw word es:[edi], word [esi]
sub esp, 8
mov esi, 0x4d9a0f
mov edi, esp
movsd dword es:[edi], dword [esi]
movsw word es:[edi], word [esi]
push 0x4d9a15
call fcn.004849c0
add dword [ebp - 0xc], eax
sub esp, 8
mov esi, 0x4d9a1c
mov edi, esp
movsd dword es:[edi], dword [esi]
movsw word es:[edi], word [esi]
sub esp, 8
mov esi, 0x4d9a22
mov edi, esp
movsd dword es:[edi], dword [esi]
movsw word es:[edi], word [esi]
sub esp, 8
mov esi, 0x4d9a28
mov edi, esp
movsd dword es:[edi], dword [esi]
movsw word es:[edi], word [esi]
push 0x4d9a2e
sub esp, 8
mov esi, 0x4d9a32
mov edi, esp
movsd dword es:[edi], dword [esi]
movsw word es:[edi], word [esi]
sub esp, 8
mov esi, 0x4d9a38
mov edi, esp
movsd dword es:[edi], dword [esi]
movsw word es:[edi], word [esi]
sub esp, 8
mov esi, 0x4d9a3e
mov edi, esp
movsd dword es:[edi], dword [esi]
movsw word es:[edi], word [esi]
sub esp, 8
mov esi, 0x4d9a44
mov edi, esp
movsd dword es:[edi], dword [esi]
movsw word es:[edi], word [esi]
push 0x4d9a4a
call fcn.004849c0
add dword [ebp - 0xc], eax
sub esp, 8
mov esi, 0x4d9a6c
mov edi, esp
movsd dword es:[edi], dword [esi]
movsw word es:[edi], word [esi]
sub esp, 8
mov esi, 0x4d9a72
mov edi, esp
movsd dword es:[edi], dword [esi]
movsw word es:[edi], word [esi]
sub esp, 8
mov esi, 0x4d9a78
mov edi, esp
movsd dword es:[edi], dword [esi]
movsw word es:[edi], word [esi]
push 0x4d9a7e
sub esp, 8
mov esi, 0x4d9a82
mov edi, esp
movsd dword es:[edi], dword [esi]
movsw word es:[edi], word [esi]
sub esp, 8
mov esi, 0x4d9a88
mov edi, esp
movsd dword es:[edi], dword [esi]
movsw word es:[edi], word [esi]
sub esp, 8
mov esi, 0x4d9a8e
mov edi, esp
movsd dword es:[edi], dword [esi]
movsw word es:[edi], word [esi]
sub esp, 8
mov esi, 0x4d9a94
mov edi, esp
movsd dword es:[edi], dword [esi]
movsw word es:[edi], word [esi]
push 0x4d9a9a
call fcn.004849c0
add dword [ebp - 0xc], eax
lea eax, [ebp - 0x6b8]
push eax
lea ebx, [ebp - 0x6d0]
push ebx
mov edi, dword [ebp - 0x19c]
sub esp, 8
fld qword [edi + 0x590]
fstp qword [esp]
wait
push 0xe
push 2
call fcn.0040b950
lea eax, [ebp - 0x6d0]
push eax
call fcn.0041ac50
lea edi, [ebp - 0x3c]
lea esi, [ebp - 0x6b8]
push 0x11
call fcn.00401950
sub esp, 8
mov esi, 0x4d9aae
mov edi, esp
movsd dword es:[edi], dword [esi]
movsw word es:[edi], word [esi]
sub esp, 8
mov esi, 0x4d9ab4
mov edi, esp
movsd dword es:[edi], dword [esi]
movsw word es:[edi], word [esi]
sub esp, 8
mov esi, 0x4d9aba
mov edi, esp
movsd dword es:[edi], dword [esi]
movsw word es:[edi], word [esi]
push 0x4d9ac0
sub esp, 8
mov esi, 0x4d9ac4
mov edi, esp
movsd dword es:[edi], dword [esi]
movsw word es:[edi], word [esi]
sub esp, 8
mov esi, 0x4d9aca
mov edi, esp
movsd dword es:[edi], dword [esi]
movsw word es:[edi], word [esi]
mov eax, 5
movzx ebx, byte [ebp - 0x3c]
imul eax, ebx
mov ebx, 0xea
sub ebx, eax
mov dword [ebp - 0x5bc], ebx
fild dword [ebp - 0x5bc]
lea edi, [ebp - 0x5c4]
call fcn.0040be55
sub esp, 8
lea esi, [ebp - 0x5c4]
mov edi, esp
movsd dword es:[edi], dword [esi]
movsw word es:[edi], word [esi]
sub esp, 8
mov esi, 0x4d9ad0
mov edi, esp
movsd dword es:[edi], dword [esi]
movsw word es:[edi], word [esi]
lea eax, [ebp - 0x3c]
push eax
call fcn.004849c0
add dword [ebp - 0xc], eax
sub esp, 8
mov esi, 0x4d9ad6
mov edi, esp
movsd dword es:[edi], dword [esi]
movsw word es:[edi], word [esi]
sub esp, 8
mov esi, 0x4d9adc
mov edi, esp
movsd dword es:[edi], dword [esi]
movsw word es:[edi], word [esi]
sub esp, 8
mov esi, 0x4d9ae2
mov edi, esp
movsd dword es:[edi], dword [esi]
movsw word es:[edi], word [esi]
push 0x4d9ae8
sub esp, 8
mov esi, 0x4d9aec
mov edi, esp
movsd dword es:[edi], dword [esi]
movsw word es:[edi], word [esi]
sub esp, 8
mov esi, 0x4d9af2
mov edi, esp
movsd dword es:[edi], dword [esi]
movsw word es:[edi], word [esi]
sub esp, 8
mov esi, 0x4d9af8
mov edi, esp
movsd dword es:[edi], dword [esi]
movsw word es:[edi], word [esi]
sub esp, 8
mov esi, 0x4d9afe
mov edi, esp
movsd dword es:[edi], dword [esi]
movsw word es:[edi], word [esi]
push 0x4d9b04
call fcn.004849c0
add dword [ebp - 0xc], eax
lea eax, [ebp - 0x6b8]
push eax
lea ebx, [ebp - 0x6d0]
push ebx
mov edi, dword [ebp - 0x19c]
sub esp, 8
fld qword [edi + 0x620]
fstp qword [esp]
wait
push 0xe
push 2
call fcn.0040b950
lea eax, [ebp - 0x6d0]
push eax
call fcn.0041ac50
lea edi, [ebp - 0x3c]
lea esi, [ebp - 0x6b8]
push 0x11
call fcn.00401950
sub esp, 8
mov esi, 0x4d9b15
mov edi, esp
movsd dword es:[edi], dword [esi]
movsw word es:[edi], word [esi]
sub esp, 8
mov esi, 0x4d9b1b
mov edi, esp
movsd dword es:[edi], dword [esi]
movsw word es:[edi], word [esi]
sub esp, 8
mov esi, 0x4d9b21
mov edi, esp
movsd dword es:[edi], dword [esi]
movsw word es:[edi], word [esi]
push 0x4d9b27
sub esp, 8
mov esi, 0x4d9b2b
mov edi, esp
movsd dword es:[edi], dword [esi]
movsw word es:[edi], word [esi]
sub esp, 8
mov esi, 0x4d9b31
mov edi, esp
movsd dword es:[edi], dword [esi]
movsw word es:[edi], word [esi]
mov eax, 5
movzx ebx, byte [ebp - 0x3c]
imul eax, ebx
mov ebx, 0xea
sub ebx, eax
mov dword [ebp - 0x5bc], ebx
fild dword [ebp - 0x5bc]
lea edi, [ebp - 0x5c4]
call fcn.0040be55
sub esp, 8
lea esi, [ebp - 0x5c4]
mov edi, esp
movsd dword es:[edi], dword [esi]
movsw word es:[edi], word [esi]
sub esp, 8
mov esi, 0x4d9b37
mov edi, esp
movsd dword es:[edi], dword [esi]
movsw word es:[edi], word [esi]
lea eax, [ebp - 0x3c]
push eax
call fcn.004849c0
add dword [ebp - 0xc], eax
sub esp, 8
mov esi, 0x4d9b3d
mov edi, esp
movsd dword es:[edi], dword [esi]
movsw word es:[edi], word [esi]
sub esp, 8
mov esi, 0x4d9b43
mov edi, esp
movsd dword es:[edi], dword [esi]
movsw word es:[edi], word [esi]
sub esp, 8
mov esi, 0x4d9b49
mov edi, esp
movsd dword es:[edi], dword [esi]
movsw word es:[edi], word [esi]
push 0x4d9b4f
sub esp, 8
mov esi, 0x4d9b53
mov edi, esp
movsd dword es:[edi], dword [esi]
movsw word es:[edi], word [esi]
sub esp, 8
mov esi, 0x4d9b59
mov edi, esp
movsd dword es:[edi], dword [esi]
movsw word es:[edi], word [esi]
sub esp, 8
mov esi, 0x4d9b5f
mov edi, esp
movsd dword es:[edi], dword [esi]
movsw word es:[edi], word [esi]
sub esp, 8
mov esi, 0x4d9b65
mov edi, esp
movsd dword es:[edi], dword [esi]
movsw word es:[edi], word [esi]
push 0x4d9b6b
call fcn.004849c0
add dword [ebp - 0xc], eax
lea eax, [ebp - 0x6b8]
push eax
lea ebx, [ebp - 0x6d0]
push ebx
mov edi, dword [ebp - 0x19c]
sub esp, 8
fld qword [edi + 0x578]
fstp qword [esp]
wait
push 0xe
push 2
call fcn.0040b950
lea eax, [ebp - 0x6d0]
push eax
call fcn.0041ac50
lea edi, [ebp - 0x3c]
lea esi, [ebp - 0x6b8]
push 0x11
call fcn.00401950
sub esp, 8
mov esi, 0x4d9b86
mov edi, esp
movsd dword es:[edi], dword [esi]
movsw word es:[edi], word [esi]
sub esp, 8
mov esi, 0x4d9b8c
mov edi, esp
movsd dword es:[edi], dword [esi]
movsw word es:[edi], word [esi]
sub esp, 8
mov esi, 0x4d9b92
mov edi, esp
movsd dword es:[edi], dword [esi]
movsw word es:[edi], word [esi]
push 0x4d9b98
sub esp, 8
mov esi, 0x4d9b9c
mov edi, esp
movsd dword es:[edi], dword [esi]
movsw word es:[edi], word [esi]
sub esp, 8
mov esi, 0x4d9ba2
mov edi, esp
movsd dword es:[edi], dword [esi]
movsw word es:[edi], word [esi]
mov eax, 5
movzx ebx, byte [ebp - 0x3c]
imul eax, ebx
mov ebx, 0xea
sub ebx, eax
mov dword [ebp - 0x5bc], ebx
fild dword [ebp - 0x5bc]
lea edi, [ebp - 0x5c4]
call fcn.0040be55
sub esp, 8
lea esi, [ebp - 0x5c4]
mov edi, esp
movsd dword es:[edi], dword [esi]
movsw word es:[edi], word [esi]
sub esp, 8
mov esi, 0x4d9ba8
mov edi, esp
movsd dword es:[edi], dword [esi]
movsw word es:[edi], word [esi]
lea eax, [ebp - 0x3c]
push eax
call fcn.004849c0
add dword [ebp - 0xc], eax
push 0x4e9e81
push 1
push 0x72
push 0x4dcf12
push 1
push 0
mov ax, word [0x4d9bae]
push eax
push 0x4ee206
call fcn.0043a580
sub esp, 8
mov esi, 0x4d9bb0
mov edi, esp
movsd dword es:[edi], dword [esi]
movsw word es:[edi], word [esi]
sub esp, 8
mov esi, 0x4d9bb6
mov edi, esp
movsd dword es:[edi], dword [esi]
movsw word es:[edi], word [esi]
sub esp, 8
mov esi, 0x4d9bbc
mov edi, esp
movsd dword es:[edi], dword [esi]
movsw word es:[edi], word [esi]
push 0x4d9bc2
sub esp, 8
mov esi, 0x4d9bc6
mov edi, esp
movsd dword es:[edi], dword [esi]
movsw word es:[edi], word [esi]
sub esp, 8
mov esi, 0x4d9bcc
mov edi, esp
movsd dword es:[edi], dword [esi]
movsw word es:[edi], word [esi]
sub esp, 8
mov esi, 0x4d9bd2
mov edi, esp
movsd dword es:[edi], dword [esi]
movsw word es:[edi], word [esi]
sub esp, 8
mov esi, 0x4d9bd8
mov edi, esp
movsd dword es:[edi], dword [esi]
movsw word es:[edi], word [esi]
mov esi, 0x4d9bde
lea edi, [ebp - 0x6b8]
call fcn.00401b30
mov esi, dword [0x4ee206]
call fcn.00401af0
mov eax, edi
push eax
call fcn.004849c0
add dword [ebp - 0xc], eax
sub esp, 8
mov esi, 0x4d9be7
mov edi, esp
movsd dword es:[edi], dword [esi]
movsw word es:[edi], word [esi]
sub esp, 8
mov esi, 0x4d9bed
mov edi, esp
movsd dword es:[edi], dword [esi]
movsw word es:[edi], word [esi]
sub esp, 8
mov esi, 0x4d9bf3
mov edi, esp
movsd dword es:[edi], dword [esi]
movsw word es:[edi], word [esi]
push 0x4d9bf9
sub esp, 8
mov esi, 0x4d9bfd
mov edi, esp
movsd dword es:[edi], dword [esi]
movsw word es:[edi], word [esi]
sub esp, 8
mov esi, 0x4d9c03
mov edi, esp
movsd dword es:[edi], dword [esi]
movsw word es:[edi], word [esi]
sub esp, 8
mov esi, 0x4d9c09
mov edi, esp
movsd dword es:[edi], dword [esi]
movsw word es:[edi], word [esi]
sub esp, 8
mov esi, 0x4d9c0f
mov edi, esp
movsd dword es:[edi], dword [esi]
movsw word es:[edi], word [esi]
lea eax, [ebp - 0xab8]
push eax
push 0x4ea13b
call fcn.0041ac50
lea esi, [ebp - 0xab8]
lea edi, [ebp - 0x9b8]
call fcn.00401b30
mov esi, 0x4d9c15
call fcn.00401af0
mov esi, edi
lea edi, [ebp - 0x8b8]
call fcn.00401b30
mov esi, 0x4ea0f1
call fcn.00401af0
mov esi, edi
lea edi, [ebp - 0x7b8]
call fcn.00401b30
mov esi, 0x4d9c1c
call fcn.00401af0
mov esi, edi
lea edi, [ebp - 0x6b8]
call fcn.00401b30
lea eax, [ebp - 0xbb8]
push eax
push 0x4e9e39
call fcn.0041ac50
lea esi, [ebp - 0xbb8]
lea edi, [ebp - 0x6b8]
call fcn.00401af0
mov eax, edi
push eax
call fcn.004849c0
add dword [ebp - 0xc], eax
push 1
push 0x72
push 0x4ee206
call fcn.0043a530
push dword [ebp - 0xc]
push 0x4d9c29
push 0x4d9c2a
push 5
push 0
push 0
push 4
push 0xd
lea eax, [ebp - 0x74]
push eax
call fcn.00482630
push 0x4e8328
call fcn.00401d90
call fcn.0041b260
lea eax, [ebp - 0x94]
push eax
call fcn.00418fe0
mov word [ebp - 0x1c], ax
lea ebx, [ebp - 0x1c]
push ebx
call fcn.00408e40
push 0x4e8328
lea eax, [ebp - 0x94]
push eax
call fcn.00401e60
push 0x4e8328
call fcn.00401210
call fcn.0041b260
push 0x4e8328
mov esi, 0x4d9c2b
lea edi, [ebp - 0x9b8]
call fcn.00401b30
lea eax, [ebp - 0xab8]
push eax
push 0x4edc0c
call fcn.0041ac50
lea esi, [ebp - 0xab8]
lea edi, [ebp - 0x9b8]
call fcn.00401af0
mov esi, edi
lea edi, [ebp - 0x8b8]
call fcn.00401b30
mov esi, 0x4d9c32
call fcn.00401af0
mov esi, edi
lea edi, [ebp - 0x7b8]
call fcn.00401b30
lea eax, [ebp - 0xbb8]
push eax
push 0x4edc21
call fcn.0041ac50
lea esi, [ebp - 0xbb8]
lea edi, [ebp - 0x7b8]
call fcn.00401af0
mov esi, edi
lea edi, [ebp - 0x6b8]
call fcn.00401b30
mov esi, 0x4d9c34
call fcn.00401af0
mov eax, edi
push eax
push 0
call fcn.00421c10
call fcn.00421b30
call fcn.0041b260
push 0x4e8328
call fcn.00421b30
call fcn.0041b260
push 0x4e8328
lea eax, [ebp - 0x8c0]
push eax
movzx ebx, byte [ebp + 0xc]
push ebx
push 0
call fcn.00436b70
lea esi, [ebp - 0x8c0]
lea edi, [ebp - 0x8b8]
call fcn.00401b30
mov esi, 0x4d9c36
call fcn.00401af0
mov esi, edi
lea edi, [ebp - 0x7b8]
call fcn.00401b30
mov esi, 0x4e9978
call fcn.00401af0
mov esi, edi
lea edi, [ebp - 0x6b8]
call fcn.00401b30
mov esi, 0x4d9c39
call fcn.00401af0
mov eax, edi
push eax
push 0
call fcn.00421c10
call fcn.00421b30
call fcn.0041b260
push 0x4e8328
call fcn.00421b30
call fcn.0041b260
push 0x4e8328
push 0xf
push 0x4d9c5c
push 0
call fcn.004224d0
call fcn.00421b30
call fcn.0041b260
push 0x4e8328
call fcn.00401d90
call fcn.0041b260
lea eax, [ebp - 0x88]
push eax
push 0x4d9c6b
push 0x4d9c6c
call fcn.00482450
mov word [ebp - 0x1c], ax
lea ebx, [ebp - 0x1c]
push ebx
call fcn.00408e40
push 0x4e8328
lea eax, [ebp - 0x88]
push eax
call fcn.00401e60
push 0x4e8328
call fcn.00401210
call fcn.0041b260
push 0x4e8328
mov esi, 0x4d9c70
lea edi, [ebp - 0x6b8]
call fcn.00401b30
mov esi, 0x4e951a
call fcn.00401af0
mov eax, edi
push eax
push 0
call fcn.00421c10
add esp, 4
call fcn.0041b260
mov bl, byte [0x4e950c]
test bl, bl
je 0x481f06
mov esi, 0x4e9558
mov edi, 0x4d9c88
call fcn.00415520
test al, al
je 0x481ed5
push 0x4e8328
push 5
push 0x4d9c89
push 0
call fcn.004224d0
push 0x4e9558
push 0
call fcn.00421c10
push 5
push 0x4d9c8e
push 0
call fcn.004224d0
push 0x4e950d
push 0
call fcn.00421c10
add esp, 4
call fcn.0041b260
jmp 0x481f06
push 0x4e8328
mov esi, 0x4d9c93
lea edi, [ebp - 0x6b8]
call fcn.00401b30
mov esi, 0x4e950d
call fcn.00401af0
mov eax, edi
push eax
push 0
call fcn.00421c10
add esp, 4
call fcn.0041b260
push 0x4e8328
push 4
push 0x4d9c99
push 0
call fcn.004224d0
lea eax, [ebp - 0x6b8]
push eax
push 0x4e9534
call fcn.0041ac50
lea ebx, [ebp - 0x6b8]
push ebx
push 0
call fcn.00421c10
add esp, 4
call fcn.0041b260
push 0x4e8328
mov esi, 0x4d9c9d
lea edi, [ebp - 0x6b8]
call fcn.00401b30
lea eax, [ebp - 0x7b8]
push eax
push 0x4ed800
call fcn.0041ac50
lea esi, [ebp - 0x7b8]
lea edi, [ebp - 0x6b8]
call fcn.00401af0
mov eax, edi
push eax
push 0
call fcn.00421c10
add esp, 4
call fcn.0041b260
push 0x4e8328
push 6
push 0x4d9ca2
push 0
call fcn.004224d0
lea eax, [ebp - 0x6b8]
push eax
push 0x4e9534
call fcn.0041ac50
lea ebx, [ebp - 0x6b8]
push ebx
push 0
call fcn.00421c10
add esp, 4
call fcn.0041b260
push 0x4e8328
mov esi, 0x4d9ca8
lea edi, [ebp - 0x7b8]
call fcn.00401b30
lea eax, [ebp - 0x8b8]
push eax
push 0x4edc52
call fcn.0041ac50
lea esi, [ebp - 0x8b8]
lea edi, [ebp - 0x7b8]
call fcn.00401af0
mov esi, edi
lea edi, [ebp - 0x6b8]
call fcn.00401b30
mov esi, 0x4d9cad
call fcn.00401af0
mov eax, edi
push eax
push 0
call fcn.00421c10
add esp, 4
call fcn.0041b260
push 0x4e8328
mov esi, 0x4d9cb2
lea edi, [ebp - 0x9b8]
call fcn.00401b30
lea eax, [ebp - 0xab8]
push eax
lea ebx, [ebp - 0xbb8]
push ebx
push 0x4e9583
call fcn.0041ac50
lea eax, [ebp - 0xbb8]
push eax
call fcn.00482250
lea esi, [ebp - 0xab8]
lea edi, [ebp - 0x9b8]
call fcn.00401af0
mov esi, edi
lea edi, [ebp - 0x8b8]
call fcn.00401b30
mov esi, 0x4d9cb8
call fcn.00401af0
mov esi, edi
lea edi, [ebp - 0x7b8]
call fcn.00401b30
lea esi, [ebp - 0x94]
call fcn.00401af0
mov esi, edi
lea edi, [ebp - 0x6b8]
call fcn.00401b30
mov esi, 0x4d9cd9
call fcn.00401af0
mov eax, edi
push eax
push 0
call fcn.00421c10
call fcn.00421b30
call fcn.0041b260
push 0x4e8328
push 4
push 0x4d9d03
push 0
call fcn.004224d0
lea eax, [ebp - 0x7b8]
push eax
push 0x4edc52
call fcn.0041ac50
lea esi, [ebp - 0x7b8]
lea edi, [ebp - 0x6b8]
call fcn.00401b30
mov esi, 0x4d9d07
call fcn.00401af0
mov eax, edi
push eax
push 0
call fcn.00421c10
call fcn.00421b30
call fcn.0041b260
push 0x4e8328
push 4
push 0x4d9d0c
push 0
call fcn.004224d0
lea eax, [ebp - 0x94]
push eax
push 0
call fcn.00421c10
call fcn.00421b30
call fcn.0041b260
push 0x4e8328
push 4
push 0x4d9d10
push 0
call fcn.004224d0
lea eax, [ebp - 0x88]
push eax
push 0
call fcn.00421c10
call fcn.00421b30
call fcn.0041b260
push 0x4e8328
call fcn.00401d90
call fcn.0041b260
lea eax, [ebp - 0x10]
push eax
push 0x10
call fcn.00403b50
push dword [ebp - 0x10]
lea eax, [ebp - 0x88]
push eax
call fcn.00401a00
push 0
push dword [ebp - 0x10]
call sub.kernel32.dll_WinExec
lea eax, [ebp - 0x10]
push eax
push 0x10
call fcn.00403320
mov word [ebp - 0x5bc], 0x7d0
mov word [ebp - 0x20], 0
inc word [ebp - 0x20]
push 0xea60
call fcn.004821e0
dec word [ebp - 0x5bc]
jne 0x4821bd
call fcn.00402ee0
pop edx
pop ecx
pop ebx
leave
ret 0xc