Function at 0x4cb703
Capabilities:
Parse pe header

Disassembly:
push ebp
mov ebp, esp
push ecx
push ecx
push 0x4044c6
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
mov eax, 0xbc8
call fcn.004044c0
push ebx
push esi
push edi
mov dword [ebp - 8], esp
mov dword [ebp - 4], 0x403000
mov eax, dword [ebp + 8]
mov eax, dword [eax + 0x14]
sub eax, 1
jo 0x4cef61
mov dword [ebp - 0x974], eax
mov dword [ebp - 0x97c], 3
lea edx, [ebp - 0x97c]
lea ecx, [ebp - 0x34]
call fcn.004048d4
lea eax, [ebp - 0x34]
push eax
call fcn.00404772
mov dword [ebp - 0xb68], eax
mov dword [ebp - 0xb64], 1
and dword [ebp - 0x14], 0
jmp 0x4cb790
mov eax, dword [ebp - 0x14]
add eax, dword [ebp - 0xb64]
jo 0x4cef61
mov dword [ebp - 0x14], eax
mov eax, dword [ebp - 0x14]
cmp eax, dword [ebp - 0xb68]
jg 0x4cba2e
mov eax, dword [ebp + 8]
cmp dword [eax + 0x14], 0
jle 0x4cb7f0
fild dword [ebp - 0x14]
fstp qword [ebp - 0xb74]
mov eax, dword [ebp + 8]
fild dword [eax + 0x14]
fstp qword [ebp - 0xb7c]
fld qword [ebp - 0xb74]
fdiv qword [ebp - 0xb7c]
fnstsw ax
test al, 0xd
jne 0x4cef5c
call fcn.00404652
fmul qword [0x402300]
fnstsw ax
test al, 0xd
jne 0x4cef5c
call fcn.0040481a
mov dword [ebp - 0x1c], eax
push dword [ebp - 0x14]
mov eax, dword [ebp + 8]
push dword [eax + 0x58]
call fcn.00404832
movsx eax, word [eax]
test eax, eax
jne 0x4cba29
push dword [ebp + 0xc]
lea eax, [ebp - 0x14]
push eax
push dword [ebp + 8]
call fcn.004ca732
cmp dword [0x52139c], 0
jne 0x4cb83c
push 0x52139c
push 0x407ca4
call fcn.004048c8
mov dword [ebp - 0xb80], 0x52139c
jmp 0x4cb846
mov dword [ebp - 0xb80], 0x52139c
push 0x40bbac
push 0
push 3
mov eax, dword [ebp - 0xb80]
mov eax, dword [eax]
mov ecx, dword [ebp - 0xb80]
mov ecx, dword [ecx]
mov ecx, dword [ecx]
push eax
call dword [ecx + 0x404]
push eax
lea eax, [ebp - 0x54]
push eax
call fcn.0040470c
push eax
lea eax, [ebp - 0x6c]
push eax
call fcn.00404700
add esp, 0x10
push eax
call fcn.00404706
push eax
lea eax, [ebp - 0x58]
push eax
call fcn.0040470c
mov dword [ebp - 0xb34], eax
mov dword [ebp - 0x74], 1
mov dword [ebp - 0x7c], 2
lea eax, [ebp - 0x5c]
push eax
lea eax, [ebp - 0x7c]
push eax
mov eax, dword [ebp - 0xb34]
mov eax, dword [eax]
push dword [ebp - 0xb34]
call dword [eax + 0x24]
fnclex
mov dword [ebp - 0xb38], eax
cmp dword [ebp - 0xb38], 0
jge 0x4cb8ed
push 0x24
push 0x40bbac
push dword [ebp - 0xb34]
push dword [ebp - 0xb38]
call fcn.004048c2
mov dword [ebp - 0xb84], eax
jmp 0x4cb8f4
and dword [ebp - 0xb84], 0
mov eax, dword [ebp - 0x5c]
mov dword [ebp - 0xb3c], eax
push 0x410dd0
push dword [ebp - 0x14]
mov eax, dword [ebp + 8]
push dword [eax + 0x38]
call fcn.00404832
push dword [eax]
call fcn.0040486e
mov edx, eax
lea ecx, [ebp - 0x48]
call fcn.004048b6
push eax
mov eax, dword [ebp - 0xb3c]
mov eax, dword [eax]
push dword [ebp - 0xb3c]
call dword [eax + 0x80]
fnclex
mov dword [ebp - 0xb40], eax
cmp dword [ebp - 0xb40], 0
jge 0x4cb96a
push 0x80
push 0x40bbbc
push dword [ebp - 0xb3c]
push dword [ebp - 0xb40]
call fcn.004048c2
mov dword [ebp - 0xb88], eax
jmp 0x4cb971
and dword [ebp - 0xb88], 0
lea ecx, [ebp - 0x48]
call fcn.00404868
lea eax, [ebp - 0x5c]
push eax
lea eax, [ebp - 0x58]
push eax
lea eax, [ebp - 0x54]
push eax
push 3
call fcn.004046fa
add esp, 0x10
lea eax, [ebp - 0x7c]
push eax
lea eax, [ebp - 0x6c]
push eax
push 2
call fcn.00404898
add esp, 0xc
fild dword [ebp - 0x1c]
fstp dword [ebp - 0x974]
mov dword [ebp - 0x97c], 4
cmp dword [0x52139c], 0
jne 0x4cb9d8
push 0x52139c
push 0x407ca4
call fcn.004048c8
mov dword [ebp - 0xb8c], 0x52139c
jmp 0x4cb9e2
mov dword [ebp - 0xb8c], 0x52139c
push 0x10
pop eax
call fcn.004044c0
lea esi, [ebp - 0x97c]
mov edi, esp
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
push 5
mov eax, dword [ebp - 0xb8c]
mov eax, dword [eax]
mov ecx, dword [ebp - 0xb8c]
mov ecx, dword [ecx]
mov ecx, dword [ecx]
push eax
call dword [ecx + 0x400]
push eax
lea eax, [ebp - 0x54]
push eax
call fcn.0040470c
push eax
call fcn.004046dc
lea ecx, [ebp - 0x54]
call fcn.004046d6
jmp 0x4cb77e
cmp dword [0x52139c], 0
jne 0x4cba52
push 0x52139c
push 0x407ca4
call fcn.004048c8
mov dword [ebp - 0xb90], 0x52139c
jmp 0x4cba5c
mov dword [ebp - 0xb90], 0x52139c
mov eax, dword [ebp - 0xb90]
mov eax, dword [eax]
mov ecx, dword [ebp - 0xb90]
mov ecx, dword [ecx]
mov ecx, dword [ecx]
push eax
call dword [ecx + 0x338]
push eax
lea eax, [ebp - 0x54]
push eax
call fcn.0040470c
mov dword [ebp - 0xb34], eax
lea eax, [ebp - 0xb30]
push eax
mov eax, dword [ebp - 0xb34]
mov eax, dword [eax]
push dword [ebp - 0xb34]
call dword [eax + 0xe0]
fnclex
mov dword [ebp - 0xb38], eax
cmp dword [ebp - 0xb38], 0
jge 0x4cbad4
push 0xe0
push 0x410de0
push dword [ebp - 0xb34]
push dword [ebp - 0xb38]
call fcn.004048c2
mov dword [ebp - 0xb94], eax
jmp 0x4cbadb
and dword [ebp - 0xb94], 0
xor eax, eax
cmp word [ebp - 0xb30], 1
sete al
neg eax
xor ecx, ecx
cmp word [0x521220], 0x1e
setge cl
neg ecx
and ax, cx
mov word [ebp - 0xb3c], ax
lea ecx, [ebp - 0x54]
call fcn.004046d6
movsx eax, word [ebp - 0xb3c]
test eax, eax
je 0x4cc05d
call fcn.004045da
or word [0x52124a], 0xffff
cmp dword [0x52139c], 0
jne 0x4cbb4b
push 0x52139c
push 0x407ca4
call fcn.004048c8
mov dword [ebp - 0xb98], 0x52139c
jmp 0x4cbb55
mov dword [ebp - 0xb98], 0x52139c
mov eax, dword [ebp - 0xb98]
mov eax, dword [eax]
mov dword [ebp - 0xb34], eax
push 0xb
mov eax, dword [ebp - 0xb34]
mov eax, dword [eax]
push dword [ebp - 0xb34]
call dword [eax + 0xa4]
fnclex
mov dword [ebp - 0xb38], eax
cmp dword [ebp - 0xb38], 0
jge 0x4cbbad
push 0xa4
push 0x40aeb8
push dword [ebp - 0xb34]
push dword [ebp - 0xb38]
call fcn.004048c2
mov dword [ebp - 0xb9c], eax
jmp 0x4cbbb4
and dword [ebp - 0xb9c], 0
lea eax, [ebp - 0x34]
push eax
call fcn.0040484a
mov word [ebp - 0xb58], ax
mov word [ebp - 0xb54], 1
mov word [ebp - 0x3c], 1
jmp 0x4cbbea
mov ax, word [ebp - 0x3c]
add ax, word [ebp - 0xb54]
jo 0x4cef61
mov word [ebp - 0x3c], ax
mov ax, word [ebp - 0x3c]
cmp ax, word [ebp - 0xb58]
jg 0x4cbfc3
movsx eax, word [ebp - 0x3c]
push eax
push dword [0x5212e8]
call fcn.00404832
push dword [eax]
push 0x40a6cc
call fcn.004048ce
test eax, eax
je 0x4cbfbe
mov eax, dword [ebp + 8]
push dword [eax + 0x38]
lea eax, [ebp - 0x44]
push eax
call fcn.0040482c
movsx eax, word [ebp - 0x3c]
push eax
push dword [ebp - 0x44]
call fcn.00404832
mov dword [ebp - 0x974], eax
mov dword [ebp - 0x97c], 0x4008
lea eax, [ebp - 0x97c]
push eax
lea eax, [ebp - 0x6c]
push eax
call fcn.004046ca
lea eax, [ebp - 0x44]
push eax
call fcn.00404820
lea eax, [ebp - 0x6c]
push eax
call fcn.004048aa
mov edx, eax
lea ecx, [ebp - 0x38]
call fcn.004048b6
lea ecx, [ebp - 0x6c]
call fcn.00404844
lea eax, [ebp - 0x38]
mov dword [ebp - 0x974], eax
mov dword [ebp - 0x97c], 0x4008
push 4
lea eax, [ebp - 0x97c]
push eax
lea eax, [ebp - 0x6c]
push eax
call fcn.0040487a
lea eax, [ebp - 0x6c]
push eax
lea eax, [ebp - 0x7c]
push eax
call fcn.00404880
mov dword [ebp - 0x984], 0x410d70
mov dword [ebp - 0x98c], 0x8008
lea eax, [ebp - 0x38]
mov dword [ebp - 0x994], eax
mov dword [ebp - 0x99c], 0x4008
push 4
lea eax, [ebp - 0x99c]
push eax
lea eax, [ebp - 0x9c]
push eax
call fcn.0040487a
lea eax, [ebp - 0x9c]
push eax
lea eax, [ebp - 0xac]
push eax
call fcn.00404880
mov dword [ebp - 0x9a4], 0x410d50
mov dword [ebp - 0x9ac], 0x8008
lea eax, [ebp - 0x7c]
push eax
lea eax, [ebp - 0x98c]
push eax
lea eax, [ebp - 0x8c]
push eax
call fcn.00404886
push eax
lea eax, [ebp - 0xac]
push eax
lea eax, [ebp - 0x9ac]
push eax
lea eax, [ebp - 0xbc]
push eax
call fcn.00404886
push eax
lea eax, [ebp - 0xcc]
push eax
call fcn.0040488c
push eax
call fcn.00404892
mov word [ebp - 0xb34], ax
lea eax, [ebp - 0xac]
push eax
lea eax, [ebp - 0x9c]
push eax
lea eax, [ebp - 0x7c]
push eax
lea eax, [ebp - 0x6c]
push eax
push 4
call fcn.00404898
add esp, 0x14
movsx eax, word [ebp - 0xb34]
test eax, eax
je 0x4cbfbe
mov eax, dword [ebp + 8]
push dword [eax + 0x38]
lea eax, [ebp - 0x44]
push eax
call fcn.0040482c
movsx eax, word [ebp - 0x3c]
push eax
push dword [ebp - 0x44]
call fcn.00404832
mov dword [ebp - 0x974], eax
mov dword [ebp - 0x97c], 0x4008
lea eax, [ebp - 0x97c]
push eax
lea eax, [ebp - 0x6c]
push eax
call fcn.004046ca
lea eax, [ebp - 0x44]
push eax
call fcn.00404820
lea eax, [ebp - 0x6c]
push eax
call fcn.004048aa
mov edx, eax
lea ecx, [ebp - 0x38]
call fcn.004048b6
lea ecx, [ebp - 0x6c]
call fcn.00404844
push dword [ebp - 0x38]
call fcn.004d8bec
sub eax, 1
jo 0x4cef61
push eax
push dword [ebp - 0x38]
call fcn.004d8c9a
mov edx, eax
lea ecx, [ebp - 0x48]
call fcn.004048b6
push eax
push 0x410df4
call fcn.0040486e
mov edx, eax
lea ecx, [ebp - 0x40]
call fcn.004048b6
lea ecx, [ebp - 0x48]
call fcn.00404868
call fcn.004045da
lea eax, [ebp - 0x40]
push eax
lea eax, [ebp - 0x38]
push eax
call fcn.004f83d9
cmp dword [0x52139c], 0
jne 0x4cbe66
push 0x52139c
push 0x407ca4
call fcn.004048c8
mov dword [ebp - 0xba0], 0x52139c
jmp 0x4cbe70
mov dword [ebp - 0xba0], 0x52139c
push 0x40bbac
push 0
push 3
mov eax, dword [ebp - 0xba0]
mov eax, dword [eax]
mov ecx, dword [ebp - 0xba0]
mov ecx, dword [ecx]
mov ecx, dword [ecx]
push eax
call dword [ecx + 0x404]
push eax
lea eax, [ebp - 0x54]
push eax
call fcn.0040470c
push eax
lea eax, [ebp - 0x6c]
push eax
call fcn.00404700
add esp, 0x10
push eax
call fcn.00404706
push eax
lea eax, [ebp - 0x58]
push eax
call fcn.0040470c
mov dword [ebp - 0xb34], eax
mov dword [ebp - 0x74], 1
mov dword [ebp - 0x7c], 2
lea eax, [ebp - 0x5c]
push eax
lea eax, [ebp - 0x7c]
push eax
mov eax, dword [ebp - 0xb34]
mov eax, dword [eax]
push dword [ebp - 0xb34]
call dword [eax + 0x24]
fnclex
mov dword [ebp - 0xb38], eax
cmp dword [ebp - 0xb38], 0
jge 0x4cbf17
push 0x24
push 0x40bbac
push dword [ebp - 0xb34]
push dword [ebp - 0xb38]
call fcn.004048c2
mov dword [ebp - 0xba4], eax
jmp 0x4cbf1e
and dword [ebp - 0xba4], 0
mov eax, dword [ebp - 0x5c]
mov dword [ebp - 0xb3c], eax
push 0x410dfc
push dword [ebp - 0x38]
call fcn.0040486e
mov edx, eax
lea ecx, [ebp - 0x48]
call fcn.004048b6
push eax
mov eax, dword [ebp - 0xb3c]
mov eax, dword [eax]
push dword [ebp - 0xb3c]
call dword [eax + 0x80]
fnclex
mov dword [ebp - 0xb40], eax
cmp dword [ebp - 0xb40], 0
jge 0x4cbf87
push 0x80
push 0x40bbbc
push dword [ebp - 0xb3c]
push dword [ebp - 0xb40]
call fcn.004048c2
mov dword [ebp - 0xba8], eax
jmp 0x4cbf8e
and dword [ebp - 0xba8], 0
lea ecx, [ebp - 0x48]
call fcn.00404868
lea eax, [ebp - 0x5c]
push eax
lea eax, [ebp - 0x58]
push eax
lea eax, [ebp - 0x54]
push eax
push 3
call fcn.004046fa
add esp, 0x10
lea eax, [ebp - 0x7c]
push eax
lea eax, [ebp - 0x6c]
push eax
push 2
call fcn.00404898
add esp, 0xc
jmp 0x4cbbd5
cmp dword [0x52139c], 0
jne 0x4cbfe7
push 0x52139c
push 0x407ca4
call fcn.004048c8
mov dword [ebp - 0xbac], 0x52139c
jmp 0x4cbff1
mov dword [ebp - 0xbac], 0x52139c
mov eax, dword [ebp - 0xbac]
mov eax, dword [eax]
mov dword [ebp - 0xb34], eax
push 0
mov eax, dword [ebp - 0xb34]
mov eax, dword [eax]
push dword [ebp - 0xb34]
call dword [eax + 0xa4]
fnclex
mov dword [ebp - 0xb38], eax
cmp dword [ebp - 0xb38], 0
jge 0x4cc049
push 0xa4
push 0x40aeb8
push dword [ebp - 0xb34]
push dword [ebp - 0xb38]
call fcn.004048c2
mov dword [ebp - 0xbb0], eax
jmp 0x4cc050
and dword [ebp - 0xbb0], 0
call fcn.004045da
and word [0x52124a], 0
cmp dword [0x52139c], 0
jne 0x4cc081
push 0x52139c
push 0x407ca4
call fcn.004048c8
mov dword [ebp - 0xbb4], 0x52139c
jmp 0x4cc08b
mov dword [ebp - 0xbb4], 0x52139c
mov eax, dword [ebp - 0xbb4]
mov eax, dword [eax]
mov ecx, dword [ebp - 0xbb4]
mov ecx, dword [ecx]
mov ecx, dword [ecx]
push eax
call dword [ecx + 0x334]
push eax
lea eax, [ebp - 0x54]
push eax
call fcn.0040470c
mov dword [ebp - 0xb34], eax
lea eax, [ebp - 0xb30]
push eax
mov eax, dword [ebp - 0xb34]
mov eax, dword [eax]
push dword [ebp - 0xb34]
call dword [eax + 0xe0]
fnclex
mov dword [ebp - 0xb38], eax
cmp dword [ebp - 0xb38], 0
jge 0x4cc103
push 0xe0
push 0x410de0
push dword [ebp - 0xb34]
push dword [ebp - 0xb38]
call fcn.004048c2
mov dword [ebp - 0xbb8], eax
jmp 0x4cc10a
and dword [ebp - 0xbb8], 0
xor eax, eax
cmp word [ebp - 0xb30], 1
sete al
neg eax
xor ecx, ecx
cmp word [0x521220], 0x1e
setge cl
neg ecx
and ax, cx
mov word [ebp - 0xb3c], ax
lea ecx, [ebp - 0x54]
call fcn.004046d6
movsx eax, word [ebp - 0xb3c]
test eax, eax
je 0x4ce8ed
push 0x410e14
push 9
push 0xffffffffffffffff
push 2
call fcn.00404874
mov dword [ebp - 0x974], 0x410e2c
mov dword [ebp - 0x97c], 8
push 0xd
lea eax, [ebp - 0x6c]
push eax
call fcn.004048bc
push 0xa
lea eax, [ebp - 0x8c]
push eax
call fcn.004048bc
mov dword [ebp - 0x984], 0x410e6c
mov dword [ebp - 0x98c], 8
push 0xd
lea eax, [ebp - 0xbc]
push eax
call fcn.004048bc
push 0xa
lea eax, [ebp - 0xdc]
push eax
call fcn.004048bc
mov dword [ebp - 0x994], 0x410ec8
mov dword [ebp - 0x99c], 8
push 0xd
lea eax, [ebp - 0x10c]
push eax
call fcn.004048bc
push 0xa
lea eax, [ebp - 0x12c]
push eax
call fcn.004048bc
mov dword [ebp - 0x9a4], 0x410f40
mov dword [ebp - 0x9ac], 8
push 0xd
lea eax, [ebp - 0x15c]
push eax
call fcn.004048bc
push 0xa
lea eax, [ebp - 0x17c]
push eax
call fcn.004048bc
mov dword [ebp - 0x9b4], 0x40a6cc
mov dword [ebp - 0x9bc], 8
push 0xd
lea eax, [ebp - 0x1ac]
push eax
call fcn.004048bc
push 0xa
lea eax, [ebp - 0x1cc]
push eax
call fcn.004048bc
mov dword [ebp - 0x9c4], 0x410fcc
mov dword [ebp - 0x9cc], 8
push 0xd
lea eax, [ebp - 0x1fc]
push eax
call fcn.004048bc
push 0xa
lea eax, [ebp - 0x21c]
push eax
call fcn.004048bc
mov dword [ebp - 0x9d4], 0x410fe4
mov dword [ebp - 0x9dc], 8
push 0xd
lea eax, [ebp - 0x24c]
push eax
call fcn.004048bc
push 0xa
lea eax, [ebp - 0x26c]
push eax
call fcn.004048bc
mov dword [ebp - 0x9e4], 0x410ffc
mov dword [ebp - 0x9ec], 8
push 0xd
lea eax, [ebp - 0x29c]
push eax
call fcn.004048bc
push 0xa
lea eax, [ebp - 0x2bc]
push eax
call fcn.004048bc
mov dword [ebp - 0x9f4], 0x411018
mov dword [ebp - 0x9fc], 8
push 0xd
lea eax, [ebp - 0x2ec]
push eax
call fcn.004048bc
push 0xa
lea eax, [ebp - 0x30c]
push eax
call fcn.004048bc
mov dword [ebp - 0xa04], 0x41104c
mov dword [ebp - 0xa0c], 8
push 0xd
lea eax, [ebp - 0x33c]
push eax
call fcn.004048bc
push 0xa
lea eax, [ebp - 0x35c]
push eax
call fcn.004048bc
mov dword [ebp - 0xa14], 0x40a6cc
mov dword [ebp - 0xa1c], 8
push 0xd
lea eax, [ebp - 0x38c]
push eax
call fcn.004048bc
push 0xa
lea eax, [ebp - 0x3ac]
push eax
call fcn.004048bc
mov dword [ebp - 0xa24], 0x411078
mov dword [ebp - 0xa2c], 8
push 0xd
lea eax, [ebp - 0x3dc]
push eax
call fcn.004048bc
push 0xa
lea eax, [ebp - 0x3fc]
push eax
call fcn.004048bc
mov dword [ebp - 0xa34], 0x40a6cc
mov dword [ebp - 0xa3c], 8
push 0xd
lea eax, [ebp - 0x42c]
push eax
call fcn.004048bc
push 0xa
lea eax, [ebp - 0x44c]
push eax
call fcn.004048bc
mov dword [ebp - 0xa44], 0x4110bc
mov dword [ebp - 0xa4c], 8
push 0xd
lea eax, [ebp - 0x47c]
push eax
call fcn.004048bc
push 0xa
lea eax, [ebp - 0x49c]
push eax
call fcn.004048bc
mov dword [ebp - 0xa54], 0x4110e4
mov dword [ebp - 0xa5c], 8
push 0xd
lea eax, [ebp - 0x4cc]
push eax
call fcn.004048bc
push 0xa
lea eax, [ebp - 0x4ec]
push eax
call fcn.004048bc
mov dword [ebp - 0xa64], 0x411118
mov dword [ebp - 0xa6c], 8
push 0xd
lea eax, [ebp - 0x51c]
push eax
call fcn.004048bc
push 0xa
lea eax, [ebp - 0x53c]
push eax
call fcn.004048bc
lea eax, [ebp - 0x97c]
push eax
lea eax, [ebp - 0x6c]
push eax
lea eax, [ebp - 0x7c]
push eax
call fcn.004047d2
push eax
lea eax, [ebp - 0x8c]
push eax
lea eax, [ebp - 0x9c]
push eax
call fcn.004047d2
push eax
lea eax, [ebp - 0x98c]
push eax
lea eax, [ebp - 0xac]
push eax
call fcn.004047d2
push eax
lea eax, [ebp - 0xbc]
push eax
lea eax, [ebp - 0xcc]
push eax
call fcn.004047d2
push eax
lea eax, [ebp - 0xdc]
push eax
lea eax, [ebp - 0xec]
push eax
call fcn.004047d2
push eax
lea eax, [ebp - 0x99c]
push eax
lea eax, [ebp - 0xfc]
push eax
call fcn.004047d2
push eax
lea eax, [ebp - 0x10c]
push eax
lea eax, [ebp - 0x11c]
push eax
call fcn.004047d2
push eax
lea eax, [ebp - 0x12c]
push eax
lea eax, [ebp - 0x13c]
push eax
call fcn.004047d2
push eax
lea eax, [ebp - 0x9ac]
push eax
lea eax, [ebp - 0x14c]
push eax
call fcn.004047d2
push eax
lea eax, [ebp - 0x15c]
push eax
lea eax, [ebp - 0x16c]
push eax
call fcn.004047d2
push eax
lea eax, [ebp - 0x17c]
push eax
lea eax, [ebp - 0x18c]
push eax
call fcn.004047d2
push eax
lea eax, [ebp - 0x9bc]
push eax
lea eax, [ebp - 0x19c]
push eax
call fcn.004047d2
push eax
lea eax, [ebp - 0x1ac]
push eax
lea eax, [ebp - 0x1bc]
push eax
call fcn.004047d2
push eax
lea eax, [ebp - 0x1cc]
push eax
lea eax, [ebp - 0x1dc]
push eax
call fcn.004047d2
push eax
lea eax, [ebp - 0x9cc]
push eax
lea eax, [ebp - 0x1ec]
push eax
call fcn.004047d2
push eax
lea eax, [ebp - 0x1fc]
push eax
lea eax, [ebp - 0x20c]
push eax
call fcn.004047d2
push eax
lea eax, [ebp - 0x21c]
push eax
lea eax, [ebp - 0x22c]
push eax
call fcn.004047d2
push eax
lea eax, [ebp - 0x9dc]
push eax
lea eax, [ebp - 0x23c]
push eax
call fcn.004047d2
push eax
lea eax, [ebp - 0x24c]
push eax
lea eax, [ebp - 0x25c]
push eax
call fcn.004047d2
push eax
lea eax, [ebp - 0x26c]
push eax
lea eax, [ebp - 0x27c]
push eax
call fcn.004047d2
push eax
lea eax, [ebp - 0x9ec]
push eax
lea eax, [ebp - 0x28c]
push eax
call fcn.004047d2
push eax
lea eax, [ebp - 0x29c]
push eax
lea eax, [ebp - 0x2ac]
push eax
call fcn.004047d2
push eax
lea eax, [ebp - 0x2bc]
push eax
lea eax, [ebp - 0x2cc]
push eax
call fcn.004047d2
push eax
lea eax, [ebp - 0x9fc]
push eax
lea eax, [ebp - 0x2dc]
push eax
call fcn.004047d2
push eax
lea eax, [ebp - 0x2ec]
push eax
lea eax, [ebp - 0x2fc]
push eax
call fcn.004047d2
push eax
lea eax, [ebp - 0x30c]
push eax
lea eax, [ebp - 0x31c]
push eax
call fcn.004047d2
push eax
lea eax, [ebp - 0xa0c]
push eax
lea eax, [ebp - 0x32c]
push eax
call fcn.004047d2
push eax
lea eax, [ebp - 0x33c]
push eax
lea eax, [ebp - 0x34c]
push eax
call fcn.004047d2
push eax
lea eax, [ebp - 0x35c]
push eax
lea eax, [ebp - 0x36c]
push eax
call fcn.004047d2
push eax
lea eax, [ebp - 0xa1c]
push eax
lea eax, [ebp - 0x37c]
push eax
call fcn.004047d2
push eax
lea eax, [ebp - 0x38c]
push eax
lea eax, [ebp - 0x39c]
push eax
call fcn.004047d2
push eax
lea eax, [ebp - 0x3ac]
push eax
lea eax, [ebp - 0x3bc]
push eax
call fcn.004047d2
push eax
lea eax, [ebp - 0xa2c]
push eax
lea eax, [ebp - 0x3cc]
push eax
call fcn.004047d2
push eax
lea eax, [ebp - 0x3dc]
push eax
lea eax, [ebp - 0x3ec]
push eax
call fcn.004047d2
push eax
lea eax, [ebp - 0x3fc]
push eax
lea eax, [ebp - 0x40c]
push eax
call fcn.004047d2
push eax
lea eax, [ebp - 0xa3c]
push eax
lea eax, [ebp - 0x41c]
push eax
call fcn.004047d2
push eax
lea eax, [ebp - 0x42c]
push eax
lea eax, [ebp - 0x43c]
push eax
call fcn.004047d2
push eax
lea eax, [ebp - 0x44c]
push eax
lea eax, [ebp - 0x45c]
push eax
call fcn.004047d2
push eax
lea eax, [ebp - 0xa4c]
push eax
lea eax, [ebp - 0x46c]
push eax
call fcn.004047d2
push eax
lea eax, [ebp - 0x47c]
push eax
lea eax, [ebp - 0x48c]
push eax
call fcn.004047d2
push eax
lea eax, [ebp - 0x49c]
push eax
lea eax, [ebp - 0x4ac]
push eax
call fcn.004047d2
push eax
lea eax, [ebp - 0xa5c]
push eax
lea eax, [ebp - 0x4bc]
push eax
call fcn.004047d2
push eax
lea eax, [ebp - 0x4cc]
push eax
lea eax, [ebp - 0x4dc]
push eax
call fcn.004047d2
push eax
lea eax, [ebp - 0x4ec]
push eax
lea eax, [ebp - 0x4fc]
push eax
call fcn.004047d2
push eax
lea eax, [ebp - 0xa6c]
push eax
lea eax, [ebp - 0x50c]
push eax
call fcn.004047d2
push eax
lea eax, [ebp - 0x51c]
push eax
lea eax, [ebp - 0x52c]
push eax
call fcn.004047d2
push eax
lea eax, [ebp - 0x53c]
push eax
lea eax, [ebp - 0x54c]
push eax
call fcn.004047d2
push eax
call fcn.004048aa
mov edx, eax
lea ecx, [ebp - 0x24]
call fcn.004048b6
lea eax, [ebp - 0x23c]
push eax
lea eax, [ebp - 0x22c]
push eax
lea eax, [ebp - 0x21c]
push eax
lea eax, [ebp - 0x20c]
push eax
lea eax, [ebp - 0x1fc]
push eax
lea eax, [ebp - 0x1ec]
push eax
lea eax, [ebp - 0x1dc]
push eax
lea eax, [ebp - 0x1cc]
push eax
lea eax, [ebp - 0x1bc]
push eax
lea eax, [ebp - 0x1ac]
push eax
lea eax, [ebp - 0x19c]
push eax
lea eax, [ebp - 0x18c]
push eax
lea eax, [ebp - 0x17c]
push eax
lea eax, [ebp - 0x16c]
push eax
lea eax, [ebp - 0x15c]
push eax
lea eax, [ebp - 0x14c]
push eax
lea eax, [ebp - 0x13c]
push eax
lea eax, [ebp - 0x12c]
push eax
lea eax, [ebp - 0x11c]
push eax
lea eax, [ebp - 0x10c]
push eax
lea eax, [ebp - 0xfc]
push eax
lea eax, [ebp - 0xec]
push eax
lea eax, [ebp - 0xdc]
push eax
lea eax, [ebp - 0xcc]
push eax
lea eax, [ebp - 0xbc]
push eax
lea eax, [ebp - 0xac]
push eax
lea eax, [ebp - 0x9c]
push eax
lea eax, [ebp - 0x8c]
push eax
lea eax, [ebp - 0x7c]
push eax
lea eax, [ebp - 0x6c]
push eax
lea eax, [ebp - 0x41c]
push eax
lea eax, [ebp - 0x40c]
push eax
lea eax, [ebp - 0x3fc]
push eax
lea eax, [ebp - 0x3ec]
push eax
lea eax, [ebp - 0x3dc]
push eax
lea eax, [ebp - 0x3cc]
push eax
lea eax, [ebp - 0x3bc]
push eax
lea eax, [ebp - 0x3ac]
push eax
lea eax, [ebp - 0x39c]
push eax
lea eax, [ebp - 0x38c]
push eax
lea eax, [ebp - 0x37c]
push eax
lea eax, [ebp - 0x36c]
push eax
lea eax, [ebp - 0x35c]
push eax
lea eax, [ebp - 0x34c]
push eax
lea eax, [ebp - 0x33c]
push eax
lea eax, [ebp - 0x32c]
push eax
lea eax, [ebp - 0x31c]
push eax
lea eax, [ebp - 0x30c]
push eax
lea eax, [ebp - 0x2fc]
push eax
lea eax, [ebp - 0x2ec]
push eax
lea eax, [ebp - 0x2dc]
push eax
lea eax, [ebp - 0x2cc]
push eax
lea eax, [ebp - 0x2bc]
push eax
lea eax, [ebp - 0x2ac]
push eax
lea eax, [ebp - 0x29c]
push eax
lea eax, [ebp - 0x28c]
push eax
lea eax, [ebp - 0x27c]
push eax
lea eax, [ebp - 0x26c]
push eax
lea eax, [ebp - 0x25c]
push eax
lea eax, [ebp - 0x24c]
push eax
lea eax, [ebp - 0x54c]
push eax
lea eax, [ebp - 0x53c]
push eax
lea eax, [ebp - 0x52c]
push eax
lea eax, [ebp - 0x51c]
push eax
lea eax, [ebp - 0x50c]
push eax
lea eax, [ebp - 0x4fc]
push eax
lea eax, [ebp - 0x4ec]
push eax
lea eax, [ebp - 0x4dc]
push eax
lea eax, [ebp - 0x4cc]
push eax
lea eax, [ebp - 0x4bc]
push eax
lea eax, [ebp - 0x4ac]
push eax
lea eax, [ebp - 0x49c]
push eax
lea eax, [ebp - 0x48c]
push eax
lea eax, [ebp - 0x47c]
push eax
lea eax, [ebp - 0x46c]
push eax
lea eax, [ebp - 0x45c]
push eax
lea eax, [ebp - 0x44c]
push eax
lea eax, [ebp - 0x43c]
push eax
lea eax, [ebp - 0x42c]
push eax
push 0x4f
call fcn.00404898
add esp, 0x140
cmp dword [0x52139c], 0
jne 0x4cca66
push 0x52139c
push 0x407ca4
call fcn.004048c8
mov dword [ebp - 0xbbc], 0x52139c
jmp 0x4cca70
mov dword [ebp - 0xbbc], 0x52139c
mov eax, dword [ebp - 0xbbc]
mov eax, dword [eax]
mov ecx, dword [ebp - 0xbbc]
mov ecx, dword [ecx]
mov ecx, dword [ecx]
push eax
call dword [ecx + 0x350]
push eax
lea eax, [ebp - 0x54]
push eax
call fcn.0040470c
mov dword [ebp - 0xb34], eax
lea eax, [ebp - 0xb30]
push eax
mov eax, dword [ebp - 0xb34]
mov eax, dword [eax]
push dword [ebp - 0xb34]
call dword [eax + 0xe0]
fnclex
mov dword [ebp - 0xb38], eax
cmp dword [ebp - 0xb38], 0
jge 0x4ccae8
push 0xe0
push 0x410de0
push dword [ebp - 0xb34]
push dword [ebp - 0xb38]
call fcn.004048c2
mov dword [ebp - 0xbc0], eax
jmp 0x4ccaef
and dword [ebp - 0xbc0], 0
xor eax, eax
cmp word [ebp - 0xb30], 1
sete al
neg eax
mov word [ebp - 0xb3c], ax
lea ecx, [ebp - 0x54]
call fcn.004046d6
movsx eax, word [ebp - 0xb3c]
test eax, eax
je 0x4ccbab
push dword [ebp - 0x24]
push 0x411140
call fcn.0040486e
mov dword [ebp - 0x74], eax
mov dword [ebp - 0x7c], 8
push 0xd
lea eax, [ebp - 0x6c]
push eax
call fcn.004048bc
push 0xa
lea eax, [ebp - 0x9c]
push eax
call fcn.004048bc
lea eax, [ebp - 0x7c]
push eax
lea eax, [ebp - 0x6c]
push eax
lea eax, [ebp - 0x8c]
push eax
call fcn.004047d2
push eax
lea eax, [ebp - 0x9c]
push eax
lea eax, [ebp - 0xac]
push eax
call fcn.004047d2
push eax
call fcn.004048aa
mov edx, eax
lea ecx, [ebp - 0x24]
call fcn.004048b6
lea eax, [ebp - 0xac]
push eax
lea eax, [ebp - 0x9c]
push eax
lea eax, [ebp - 0x8c]
push eax
lea eax, [ebp - 0x6c]
push eax
lea eax, [ebp - 0x7c]
push eax
push 5
call fcn.00404898
add esp, 0x18
push dword [ebp - 0x24]
push 0x411188
call fcn.0040486e
mov dword [ebp - 0x74], eax
mov dword [ebp - 0x7c], 8
push 0xd
lea eax, [ebp - 0x6c]
push eax
call fcn.004048bc
push 0xa
lea eax, [ebp - 0x9c]
push eax
call fcn.004048bc
mov dword [ebp - 0x974], 0x4111a0
mov dword [ebp - 0x97c], 8
push 0xd
lea eax, [ebp - 0xcc]
push eax
call fcn.004048bc
push 0xa
lea eax, [ebp - 0xec]
push eax
call fcn.004048bc
mov dword [ebp - 0x984], 0x40a6cc
mov dword [ebp - 0x98c], 8
push 0xd
lea eax, [ebp - 0x11c]
push eax
call fcn.004048bc
push 0xa
lea eax, [ebp - 0x13c]
push eax
call fcn.004048bc
mov dword [ebp - 0x994], 0x4111b4
mov dword [ebp - 0x99c], 8
push 0xd
lea eax, [ebp - 0x16c]
push eax
call fcn.004048bc
push 0xa
lea eax, [ebp - 0x18c]
push eax
call fcn.004048bc
mov dword [ebp - 0x9a4], 0x40a6cc
mov dword [ebp - 0x9ac], 8
push 0xd
lea eax, [ebp - 0x1bc]
push eax
call fcn.004048bc
push 0xa
lea eax, [ebp - 0x1dc]
push eax
call fcn.004048bc
mov dword [ebp - 0x9b4], 0x4111f8
mov dword [ebp - 0x9bc], 8
push 0xd
lea eax, [ebp - 0x20c]
push eax
call fcn.004048bc
push 0xa
lea eax, [ebp - 0x22c]
push eax
call fcn.004048bc
mov dword [ebp - 0x9c4], 0x411224
mov dword [ebp - 0x9cc], 8
push 0xd
lea eax, [ebp - 0x25c]
push eax
call fcn.004048bc
push 0xa
lea eax, [ebp - 0x27c]
push eax
call fcn.004048bc
mov dword [ebp - 0x9d4], 0x411118
mov dword [ebp - 0x9dc], 8
push 0xd
lea eax, [ebp - 0x2ac]
push eax
call fcn.004048bc
push 0xa
lea eax, [ebp - 0x2cc]
push eax
call fcn.004048bc
lea eax, [ebp - 0x7c]
push eax
lea eax, [ebp - 0x6c]
push eax
lea eax, [ebp - 0x8c]
push eax
call fcn.004047d2
push eax
lea eax, [ebp - 0x9c]
push eax
lea eax, [ebp - 0xac]
push eax
call fcn.004047d2
push eax
lea eax, [ebp - 0x97c]
push eax
lea eax, [ebp - 0xbc]
push eax
call fcn.004047d2
push eax
lea eax, [ebp - 0xcc]
push eax
lea eax, [ebp - 0xdc]
push eax
call fcn.004047d2
push eax
lea eax, [ebp - 0xec]
push eax
lea eax, [ebp - 0xfc]
push eax
call fcn.004047d2
push eax
lea eax, [ebp - 0x98c]
push eax
lea eax, [ebp - 0x10c]
push eax
call fcn.004047d2
push eax
lea eax, [ebp - 0x11c]
push eax
lea eax, [ebp - 0x12c]
push eax
call fcn.004047d2
push eax
lea eax, [ebp - 0x13c]
push eax
lea eax, [ebp - 0x14c]
push eax
call fcn.004047d2
push eax
lea eax, [ebp - 0x99c]
push eax
lea eax, [ebp - 0x15c]
push eax
call fcn.004047d2
push eax
lea eax, [ebp - 0x16c]
push eax
lea eax, [ebp - 0x17c]
push eax
call fcn.004047d2
push eax
lea eax, [ebp - 0x18c]
push eax
lea eax, [ebp - 0x19c]
push eax
call fcn.004047d2
push eax
lea eax, [ebp - 0x9ac]
push eax
lea eax, [ebp - 0x1ac]
push eax
call fcn.004047d2
push eax
lea eax, [ebp - 0x1bc]
push eax
lea eax, [ebp - 0x1cc]
push eax
call fcn.004047d2
push eax
lea eax, [ebp - 0x1dc]
push eax
lea eax, [ebp - 0x1ec]
push eax
call fcn.004047d2
push eax
lea eax, [ebp - 0x9bc]
push eax
lea eax, [ebp - 0x1fc]
push eax
call fcn.004047d2
push eax
lea eax, [ebp - 0x20c]
push eax
lea eax, [ebp - 0x21c]
push eax
call fcn.004047d2
push eax
lea eax, [ebp - 0x22c]
push eax
lea eax, [ebp - 0x23c]
push eax
call fcn.004047d2
push eax
lea eax, [ebp - 0x9cc]
push eax
lea eax, [ebp - 0x24c]
push eax
call fcn.004047d2
push eax
lea eax, [ebp - 0x25c]
push eax
lea eax, [ebp - 0x26c]
push eax
call fcn.004047d2
push eax
lea eax, [ebp - 0x27c]
push eax
lea eax, [ebp - 0x28c]
push eax
call fcn.004047d2
push eax
lea eax, [ebp - 0x9dc]
push eax
lea eax, [ebp - 0x29c]
push eax
call fcn.004047d2
push eax
lea eax, [ebp - 0x2ac]
push eax
lea eax, [ebp - 0x2bc]
push eax
call fcn.004047d2
push eax
lea eax, [ebp - 0x2cc]
push eax
lea eax, [ebp - 0x2dc]
push eax
call fcn.004047d2
push eax
call fcn.004048aa
mov edx, eax
lea ecx, [ebp - 0x24]
call fcn.004048b6
lea eax, [ebp - 0x23c]
push eax
lea eax, [ebp - 0x22c]
push eax
lea eax, [ebp - 0x21c]
push eax
lea eax, [ebp - 0x20c]
push eax
lea eax, [ebp - 0x1fc]
push eax
lea eax, [ebp - 0x1ec]
push eax
lea eax, [ebp - 0x1dc]
push eax
lea eax, [ebp - 0x1cc]
push eax
lea eax, [ebp - 0x1bc]
push eax
lea eax, [ebp - 0x1ac]
push eax
lea eax, [ebp - 0x19c]
push eax
lea eax, [ebp - 0x18c]
push eax
lea eax, [ebp - 0x17c]
push eax
lea eax, [ebp - 0x16c]
push eax
lea eax, [ebp - 0x15c]
push eax
lea eax, [ebp - 0x14c]
push eax
lea eax, [ebp - 0x13c]
push eax
lea eax, [ebp - 0x12c]
push eax
lea eax, [ebp - 0x11c]
push eax
lea eax, [ebp - 0x10c]
push eax
lea eax, [ebp - 0xfc]
push eax
lea eax, [ebp - 0xec]
push eax
lea eax, [ebp - 0xdc]
push eax
lea eax, [ebp - 0xcc]
push eax
lea eax, [ebp - 0xbc]
push eax
lea eax, [ebp - 0xac]
push eax
lea eax, [ebp - 0x9c]
push eax
lea eax, [ebp - 0x8c]
push eax
lea eax, [ebp - 0x6c]
push eax
lea eax, [ebp - 0x7c]
push eax
lea eax, [ebp - 0x2dc]
push eax
lea eax, [ebp - 0x2cc]
push eax
lea eax, [ebp - 0x2bc]
push eax
lea eax, [ebp - 0x2ac]
push eax
lea eax, [ebp - 0x29c]
push eax
lea eax, [ebp - 0x28c]
push eax
lea eax, [ebp - 0x27c]
push eax
lea eax, [ebp - 0x26c]
push eax
lea eax, [ebp - 0x25c]
push eax
lea eax, [ebp - 0x24c]
push eax
push 0x28
call fcn.00404898
add esp, 0xa4
cmp dword [0x52139c], 0
jne 0x4cd04a
push 0x52139c
push 0x407ca4
call fcn.004048c8
mov dword [ebp - 0xbc4], 0x52139c
jmp 0x4cd054
mov dword [ebp - 0xbc4], 0x52139c
mov eax, dword [ebp - 0xbc4]
mov eax, dword [eax]
mov ecx, dword [ebp - 0xbc4]
mov ecx, dword [ecx]
mov ecx, dword [ecx]
push eax
call dword [ecx + 0x350]
push eax
lea eax, [ebp - 0x54]
push eax
call fcn.0040470c
mov dword [ebp - 0xb34], eax
lea eax, [ebp - 0xb30]
push eax
mov eax, dword [ebp - 0xb34]
mov eax, dword [eax]
push dword [ebp - 0xb34]
call dword [eax + 0xe0]
fnclex
mov dword [ebp - 0xb38], eax
cmp dword [ebp - 0xb38], 0
jge 0x4cd0cc
push 0xe0
push 0x410de0
push dword [ebp - 0xb34]
push dword [ebp - 0xb38]
call fcn.004048c2
mov dword [ebp - 0xbc8], eax
jmp 0x4cd0d3
and dword [ebp - 0xbc8], 0
xor eax, eax
cmp word [ebp - 0xb30], 1
sete al
neg eax
mov word [ebp - 0xb3c], ax
lea ecx, [ebp - 0x54]
call fcn.004046d6
movsx eax, word [ebp - 0xb3c]
test eax, eax
je 0x4cd18f
push dword [ebp - 0x24]
push 0x411140
call fcn.0040486e
mov dword [ebp - 0x74], eax
mov dword [ebp - 0x7c], 8
push 0xd
lea eax, [ebp - 0x6c]
push eax
call fcn.004048bc
push 0xa
lea eax, [ebp - 0x9c]
push eax
call fcn.004048bc
lea eax, [ebp - 0x7c]
push eax
lea eax, [ebp - 0x6c]
push eax
lea eax, [ebp - 0x8c]
push eax
call fcn.004047d2
push eax
lea eax, [ebp - 0x9c]
push eax
lea eax, [ebp - 0xac]
push eax
call fcn.004047d2
push eax
call fcn.004048aa
mov edx, eax
lea ecx, [ebp - 0x24]
call fcn.004048b6
lea eax, [ebp - 0xac]
push eax
lea eax, [ebp - 0x9c]
push eax
lea eax, [ebp - 0x8c]
push eax
lea eax, [ebp - 0x6c]
push eax
lea eax, [ebp - 0x7c]
push eax
push 5
call fcn.00404898
add esp, 0x18
push dword [ebp - 0x24]
push 0x411188
call fcn.0040486e
mov dword [ebp - 0x74], eax
mov dword [ebp - 0x7c], 8
push 0xd
lea eax, [ebp - 0x6c]
push eax
call fcn.004048bc
push 0xa
lea eax, [ebp - 0x9c]
push eax
call fcn.004048bc
mov dword [ebp - 0x974], 0x4111a0
mov dword [ebp - 0x97c], 8
push 0xd
lea eax, [ebp - 0xcc]
push eax
call fcn.004048bc
push 0xa
lea eax, [ebp - 0xec]
push eax
call fcn.004048bc
mov dword [ebp - 0x984], 0x40a6cc
mov dword [ebp - 0x98c], 8
push 0xd
lea eax, [ebp - 0x11c]
push eax
call fcn.004048bc
push 0xa
lea eax, [ebp - 0x13c]
push eax
call fcn.004048bc
mov dword [ebp - 0x994], 0x411258
mov dword [ebp - 0x99c], 8
push 0xd
lea eax, [ebp - 0x16c]
push eax
call fcn.004048bc
push 0xa
lea eax, [ebp - 0x18c]
push eax
call fcn.004048bc
mov dword [ebp - 0x9a4], 0x40a6cc
mov dword [ebp - 0x9ac], 8
push 0xd
lea eax, [ebp - 0x1bc]
push eax
call fcn.004048bc
push 0xa
lea eax, [ebp - 0x1dc]
push eax
call fcn.004048bc
mov dword [ebp - 0x9b4], 0x411264
mov dword [ebp - 0x9bc], 8
push 0xd
lea eax, [ebp - 0x20c]
push eax
call fcn.004048bc
push 0xa
lea eax, [ebp - 0x22c]
push eax
call fcn.004048bc
mov dword [ebp - 0x9c4], 0x411278
mov dword [ebp - 0x9cc], 8
push 0xd
lea eax, [ebp - 0x25c]
push eax
call fcn.004048bc
push 0xa
lea eax, [ebp - 0x27c]
push eax
call fcn.004048bc
mov dword [ebp - 0x9d4], 0x40a6cc
mov dword [ebp - 0x9dc], 8
push 0xd
lea eax, [ebp - 0x2ac]
push eax
call fcn.004048bc
push 0xa
lea eax, [ebp - 0x2cc]
push eax
call fcn.004048bc
mov dword [ebp - 0x9e4], 0x4110bc
mov dword [ebp - 0x9ec], 8
push 0xd
lea eax, [ebp - 0x2fc]
push eax
call fcn.004048bc
push 0xa
lea eax, [ebp - 0x31c]
push eax
call fcn.004048bc
mov dword [ebp - 0x9f4], 0x41128c
mov dword [ebp - 0x9fc], 8
push 0xd
lea eax, [ebp - 0x34c]
push eax
call fcn.004048bc
push 0xa
lea eax, [ebp - 0x36c]
push eax
call fcn.004048bc
mov dword [ebp - 0xa04], 0x4112bc
mov dword [ebp - 0xa0c], 8
push 0xd
lea eax, [ebp - 0x39c]
push eax
call fcn.004048bc
push 0xa
lea eax, [ebp - 0x3bc]
push eax
call fcn.004048bc
mov dword [ebp - 0xa14], 0x411300
mov dword [ebp - 0xa1c], 8
push 0xd
lea eax, [ebp - 0x3ec]
push eax
call fcn.004048bc
push 0xa
lea eax, [ebp - 0x40c]
push eax
call fcn.004048bc
mov dword [ebp - 0xa24], 0x411338
mov dword [ebp - 0xa2c], 8
push 0xd
lea eax, [ebp - 0x43c]
push eax
call fcn.004048bc
push 0xa
lea eax, [ebp - 0x45c]
push eax
call fcn.004048bc
mov dword [ebp - 0xa34], 0x411374
mov dword [ebp - 0xa3c], 8
push 0xd
lea eax, [ebp - 0x48c]
push eax
call fcn.004048bc
push 0xa
lea eax, [ebp - 0x4ac]
push eax
call fcn.004048bc
mov dword [ebp - 0xa44], 0x4111a0
mov dword [ebp - 0xa4c], 8
push 0xd
lea eax, [ebp - 0x4dc]
push eax
call fcn.004048bc
push 0xa
lea eax, [ebp - 0x4fc]
push eax
call fcn.004048bc
mov dword [ebp - 0xa54], 0x40a6cc
mov dword [ebp - 0xa5c], 8
push 0xd
lea eax, [ebp - 0x52c]
push eax
call fcn.004048bc
push 0xa
lea eax, [ebp - 0x54c]
push eax
call fcn.004048bc
mov dword [ebp - 0xa64], 0x4111f8
mov dword [ebp - 0xa6c], 8
push 0xd
lea eax, [ebp - 0x57c]
push eax
call fcn.004048bc
push 0xa
lea eax, [ebp - 0x59c]
push eax
call fcn.004048bc
mov dword [ebp - 0xa74], 0x411224
mov dword [ebp - 0xa7c], 8
push 0xd
lea eax, [ebp - 0x5cc]
push eax
call fcn.004048bc
push 0xa
lea eax, [ebp - 0x5ec]
push eax
call fcn.004048bc
mov dword [ebp - 0xa84], 0x4113a0
mov dword [ebp - 0xa8c], 8
push 0xd
lea eax, [ebp - 0x61c]
push eax
call fcn.004048bc
push 0xa
lea eax, [ebp - 0x63c]
push eax
call fcn.004048bc
mov dword [ebp - 0xa94], 0x411300
mov dword [ebp - 0xa9c], 8
push 0xd
lea eax, [ebp - 0x66c]
push eax
call fcn.004048bc
push 0xa
lea eax, [ebp - 0x68c]
push eax
call fcn.004048bc
mov dword [ebp - 0xaa4], 0x411338
mov dword [ebp - 0xaac], 8
push 0xd
lea eax, [ebp - 0x6bc]
push eax
call fcn.004048bc
push 0xa
lea eax, [ebp - 0x6dc]
push eax
call fcn.004048bc
mov dword [ebp - 0xab4], 0x4113f0
mov dword [ebp - 0xabc], 8
push 0xd
lea eax, [ebp - 0x70c]
push eax
call fcn.004048bc
push 0xa
lea eax, [ebp - 0x72c]
push eax
call fcn.004048bc
mov dword [ebp - 0xac4], 0x4111a0
mov dword [ebp - 0xacc], 8
push 0xd
lea eax, [ebp - 0x75c]
push eax
call fcn.004048bc
push 0xa
lea eax, [ebp - 0x77c]
push eax
call fcn.004048bc
mov dword [ebp - 0xad4], 0x40a6cc
mov dword [ebp - 0xadc], 8
push 0xd
lea eax, [ebp - 0x7ac]
push eax
call fcn.004048bc
push 0xa
lea eax, [ebp - 0x7cc]
push eax
call fcn.004048bc
mov dword [ebp - 0xae4], 0x411420
mov dword [ebp - 0xaec], 8
push 0xd
lea eax, [ebp - 0x7fc]
push eax
call fcn.004048bc
push 0xa
lea eax, [ebp - 0x81c]
push eax
call fcn.004048bc
mov dword [ebp - 0xaf4], 0x411454
mov dword [ebp - 0xafc], 8
push 0xd
lea eax, [ebp - 0x84c]
push eax
call fcn.004048bc
push 0xa
lea eax, [ebp - 0x86c]
push eax
call fcn.004048bc
mov dword [ebp - 0xb04], 0x411478
mov dword [ebp - 0xb0c], 8
push 0xd
lea eax, [ebp - 0x89c]
push eax
call fcn.004048bc
push 0xa
lea eax, [ebp - 0x8bc]
push eax
call fcn.004048bc
mov dword [ebp - 0xb14], 0x411488
mov dword [ebp - 0xb1c], 8
push 0xd
lea eax, [ebp - 0x8ec]
push eax
call fcn.004048bc
push 0xa
lea eax, [ebp - 0x90c]
push eax
call fcn.004048bc
mov dword [ebp - 0xb24], 0x40a6cc
mov dword [ebp - 0xb2c], 8
push 0xd
lea eax, [ebp - 0x93c]
push eax
call fcn.004048bc
push 0xa
lea eax, [ebp - 0x95c]
push eax
call fcn.004048bc
lea eax, [ebp - 0x7c]
push eax
lea eax, [ebp - 0x6c]
push eax
lea eax, [ebp - 0x8c]
push eax
call fcn.004047d2
push eax
lea eax, [ebp - 0x9c]
push eax
lea eax, [ebp - 0xac]
push eax
call fcn.004047d2
push eax
lea eax, [ebp - 0x97c]
push eax
lea eax, [ebp - 0xbc]
push eax
call fcn.004047d2
push eax
lea eax, [ebp - 0xcc]
push eax
lea eax, [ebp - 0xdc]
push eax
call fcn.004047d2
push eax
lea eax, [ebp - 0xec]
push eax
lea eax, [ebp - 0xfc]
push eax
call fcn.004047d2
push eax
lea eax, [ebp - 0x98c]
push eax
lea eax, [ebp - 0x10c]
push eax
call fcn.004047d2
push eax
lea eax, [ebp - 0x11c]
push eax
lea eax, [ebp - 0x12c]
push eax
call fcn.004047d2
push eax
lea eax, [ebp - 0x13c]
push eax
lea eax, [ebp - 0x14c]
push eax
call fcn.004047d2
push eax
lea eax, [ebp - 0x99c]
push eax
lea eax, [ebp - 0x15c]
push eax
call fcn.004047d2
push eax
lea eax, [ebp - 0x16c]
push eax
lea eax, [ebp - 0x17c]
push eax
call fcn.004047d2
push eax
lea eax, [ebp - 0x18c]
push eax
lea eax, [ebp - 0x19c]
push eax
call fcn.004047d2
push eax
lea eax, [ebp - 0x9ac]
push eax
lea eax, [ebp - 0x1ac]
push eax
call fcn.004047d2
push eax
lea eax, [ebp - 0x1bc]
push eax
lea eax, [ebp - 0x1cc]
push eax
call fcn.004047d2
push eax
lea eax, [ebp - 0x1dc]
push eax
lea eax, [ebp - 0x1ec]
push eax
call fcn.004047d2
push eax
lea eax, [ebp - 0x9bc]
push eax
lea eax, [ebp - 0x1fc]
push eax
call fcn.004047d2
push eax
lea eax, [ebp - 0x20c]
push eax
lea eax, [ebp - 0x21c]
push eax
call fcn.004047d2
push eax
lea eax, [ebp - 0x22c]
push eax
lea eax, [ebp - 0x23c]
push eax
call fcn.004047d2
push eax
lea eax, [ebp - 0x9cc]
push eax
lea eax, [ebp - 0x24c]
push eax
call fcn.004047d2
push eax
lea eax, [ebp - 0x25c]
push eax
lea eax, [ebp - 0x26c]
push eax
call fcn.004047d2
push eax
lea eax, [ebp - 0x27c]
push eax
lea eax, [ebp - 0x28c]
push eax
call fcn.004047d2
push eax
lea eax, [ebp - 0x9dc]
push eax
lea eax, [ebp - 0x29c]
push eax
call fcn.004047d2
push eax
lea eax, [ebp - 0x2ac]
push eax
lea eax, [ebp - 0x2bc]
push eax
call fcn.004047d2
push eax
lea eax, [ebp - 0x2cc]
push eax
lea eax, [ebp - 0x2dc]
push eax
call fcn.004047d2
push eax
lea eax, [ebp - 0x9ec]
push eax
lea eax, [ebp - 0x2ec]
push eax
call fcn.004047d2
push eax
lea eax, [ebp - 0x2fc]
push eax
lea eax, [ebp - 0x30c]
push eax
call fcn.004047d2
push eax
lea eax, [ebp - 0x31c]
push eax
lea eax, [ebp - 0x32c]
push eax
call fcn.004047d2
push eax
lea eax, [ebp - 0x9fc]
push eax
lea eax, [ebp - 0x33c]
push eax
call fcn.004047d2
push eax
lea eax, [ebp - 0x34c]
push eax
lea eax, [ebp - 0x35c]
push eax
call fcn.004047d2
push eax
lea eax, [ebp - 0x36c]
push eax
lea eax, [ebp - 0x37c]
push eax
call fcn.004047d2
push eax
lea eax, [ebp - 0xa0c]
push eax
lea eax, [ebp - 0x38c]
push eax
call fcn.004047d2
push eax
lea eax, [ebp - 0x39c]
push eax
lea eax, [ebp - 0x3ac]
push eax
call fcn.004047d2
push eax
lea eax, [ebp - 0x3bc]
push eax
lea eax, [ebp - 0x3cc]
push eax
call fcn.004047d2
push eax
lea eax, [ebp - 0xa1c]
push eax
lea eax, [ebp - 0x3dc]
push eax
call fcn.004047d2
push eax
lea eax, [ebp - 0x3ec]
push eax
lea eax, [ebp - 0x3fc]
push eax
call fcn.004047d2
push eax
lea eax, [ebp - 0x40c]
push eax
lea eax, [ebp - 0x41c]
push eax
call fcn.004047d2
push eax
lea eax, [ebp - 0xa2c]
push eax
lea eax, [ebp - 0x42c]
push eax
call fcn.004047d2
push eax
lea eax, [ebp - 0x43c]
push eax
lea eax, [ebp - 0x44c]
push eax
call fcn.004047d2
push eax
lea eax, [ebp - 0x45c]
push eax
lea eax, [ebp - 0x46c]
push eax
call fcn.004047d2
push eax
lea eax, [ebp - 0xa3c]
push eax
lea eax, [ebp - 0x47c]
push eax
call fcn.004047d2
push eax
lea eax, [ebp - 0x48c]
push eax
lea eax, [ebp - 0x49c]
push eax
call fcn.004047d2
push eax
lea eax, [ebp - 0x4ac]
push eax
lea eax, [ebp - 0x4bc]
push eax
call fcn.004047d2
push eax
lea eax, [ebp - 0xa4c]
push eax
lea eax, [ebp - 0x4cc]
push eax
call fcn.004047d2
push eax
lea eax, [ebp - 0x4dc]
push eax
lea eax, [ebp - 0x4ec]
push eax
call fcn.004047d2
push eax
lea eax, [ebp - 0x4fc]
push eax
lea eax, [ebp - 0x50c]
push eax
call fcn.004047d2
push eax
lea eax, [ebp - 0xa5c]
push eax
lea eax, [ebp - 0x51c]
push eax
call fcn.004047d2
push eax
lea eax, [ebp - 0x52c]
push eax
lea eax, [ebp - 0x53c]
push eax
call fcn.004047d2
push eax
lea eax, [ebp - 0x54c]
push eax
lea eax, [ebp - 0x55c]
push eax
call fcn.004047d2
push eax
lea eax, [ebp - 0xa6c]
push eax
lea eax, [ebp - 0x56c]
push eax
call fcn.004047d2
push eax
lea eax, [ebp - 0x57c]
push eax
lea eax, [ebp - 0x58c]
push eax
call fcn.004047d2
push eax
lea eax, [ebp - 0x59c]
push eax
lea eax, [ebp - 0x5ac]
push eax
call fcn.004047d2
push eax
lea eax, [ebp - 0xa7c]
push eax
lea eax, [ebp - 0x5bc]
push eax
call fcn.004047d2
push eax
lea eax, [ebp - 0x5cc]
push eax
lea eax, [ebp - 0x5dc]
push eax
call fcn.004047d2
push eax
lea eax, [ebp - 0x5ec]
push eax
lea eax, [ebp - 0x5fc]
push eax
call fcn.004047d2
push eax
lea eax, [ebp - 0xa8c]
push eax
lea eax, [ebp - 0x60c]
push eax
call fcn.004047d2
push eax
lea eax, [ebp - 0x61c]
push eax
lea eax, [ebp - 0x62c]
push eax
call fcn.004047d2
push eax
lea eax, [ebp - 0x63c]
push eax
lea eax, [ebp - 0x64c]
push eax
call fcn.004047d2
push eax
lea eax, [ebp - 0xa9c]
push eax
lea eax, [ebp - 0x65c]
push eax
call fcn.004047d2
push eax
lea eax, [ebp - 0x66c]
push eax
lea eax, [ebp - 0x67c]
push eax
call fcn.004047d2
push eax
lea eax, [ebp - 0x68c]
push eax
lea eax, [ebp - 0x69c]
push eax
call fcn.004047d2
push eax
lea eax, [ebp - 0xaac]
push eax
lea eax, [ebp - 0x6ac]
push eax
call fcn.004047d2
push eax
lea eax, [ebp - 0x6bc]
push eax
lea eax, [ebp - 0x6cc]
push eax
call fcn.004047d2
push eax
lea eax, [ebp - 0x6dc]
push eax
lea eax, [ebp - 0x6ec]
push eax
call fcn.004047d2
push eax
lea eax, [ebp - 0xabc]
push eax
lea eax, [ebp - 0x6fc]
push eax
call fcn.004047d2
push eax
lea eax, [ebp - 0x70c]
push eax
lea eax, [ebp - 0x71c]
push eax
call fcn.004047d2
push eax
lea eax, [ebp - 0x72c]
push eax
lea eax, [ebp - 0x73c]
push eax
call fcn.004047d2
push eax
lea eax, [ebp - 0xacc]
push eax
lea eax, [ebp - 0x74c]
push eax
call fcn.004047d2
push eax
lea eax, [ebp - 0x75c]
push eax
lea eax, [ebp - 0x76c]
push eax
call fcn.004047d2
push eax
lea eax, [ebp - 0x77c]
push eax
lea eax, [ebp - 0x78c]
push eax
call fcn.004047d2
push eax
lea eax, [ebp - 0xadc]
push eax
lea eax, [ebp - 0x79c]
push eax
call fcn.004047d2
push eax
lea eax, [ebp - 0x7ac]
push eax
lea eax, [ebp - 0x7bc]
push eax
call fcn.004047d2
push eax
lea eax, [ebp - 0x7cc]
push eax
lea eax, [ebp - 0x7dc]
push eax
call fcn.004047d2
push eax
lea eax, [ebp - 0xaec]
push eax
lea eax, [ebp - 0x7ec]
push eax
call fcn.004047d2
push eax
lea eax, [ebp - 0x7fc]
push eax
lea eax, [ebp - 0x80c]
push eax
call fcn.004047d2
push eax
lea eax, [ebp - 0x81c]
push eax
lea eax, [ebp - 0x82c]
push eax
call fcn.004047d2
push eax
lea eax, [ebp - 0xafc]
push eax
lea eax, [ebp - 0x83c]
push eax
call fcn.004047d2
push eax
lea eax, [ebp - 0x84c]
push eax
lea eax, [ebp - 0x85c]
push eax
call fcn.004047d2
push eax
lea eax, [ebp - 0x86c]
push eax
lea eax, [ebp - 0x87c]
push eax
call fcn.004047d2
push eax
lea eax, [ebp - 0xb0c]
push eax
lea eax, [ebp - 0x88c]
push eax
call fcn.004047d2
push eax
lea eax, [ebp - 0x89c]
push eax
lea eax, [ebp - 0x8ac]
push eax
call fcn.004047d2
push eax
lea eax, [ebp - 0x8bc]
push eax
lea eax, [ebp - 0x8cc]
push eax
call fcn.004047d2
push eax
lea eax, [ebp - 0xb1c]
push eax
lea eax, [ebp - 0x8dc]
push eax
call fcn.004047d2
push eax
lea eax, [ebp - 0x8ec]
push eax
lea eax, [ebp - 0x8fc]
push eax
call fcn.004047d2
push eax
lea eax, [ebp - 0x90c]
push eax
lea eax, [ebp - 0x91c]
push eax
call fcn.004047d2
push eax
lea eax, [ebp - 0xb2c]
push eax
lea eax, [ebp - 0x92c]
push eax
call fcn.004047d2
push eax
lea eax, [ebp - 0x93c]
push eax
lea eax, [ebp - 0x94c]
push eax
call fcn.004047d2
push eax
lea eax, [ebp - 0x95c]
push eax
lea eax, [ebp - 0x96c]
push eax
call fcn.004047d2
push eax
call fcn.004048aa
mov edx, eax
lea ecx, [ebp - 0x24]
call fcn.004048b6
lea eax, [ebp - 0x23c]
push eax
lea eax, [ebp - 0x22c]
push eax
lea eax, [ebp - 0x21c]
push eax
lea eax, [ebp - 0x20c]
push eax
lea eax, [ebp - 0x1fc]
push eax
lea eax, [ebp - 0x1ec]
push eax
lea eax, [ebp - 0x1dc]
push eax
lea eax, [ebp - 0x1cc]
push eax
lea eax, [ebp - 0x1bc]
push eax
lea eax, [ebp - 0x1ac]
push eax
lea eax, [ebp - 0x19c]
push eax
lea eax, [ebp - 0x18c]
push eax
lea eax, [ebp - 0x17c]
push eax
lea eax, [ebp - 0x16c]
push eax
lea eax, [ebp - 0x15c]
push eax
lea eax, [ebp - 0x14c]
push eax
lea eax, [ebp - 0x13c]
push eax
lea eax, [ebp - 0x12c]
push eax
lea eax, [ebp - 0x11c]
push eax
lea eax, [ebp - 0x10c]
push eax
lea eax, [ebp - 0xfc]
push eax
lea eax, [ebp - 0xec]
push eax
lea eax, [ebp - 0xdc]
push eax
lea eax, [ebp - 0xcc]
push eax
lea eax, [ebp - 0xbc]
push eax
lea eax, [ebp - 0xac]
push eax
lea eax, [ebp - 0x9c]
push eax
lea eax, [ebp - 0x8c]
push eax
lea eax, [ebp - 0x6c]
push eax
lea eax, [ebp - 0x7c]
push eax
lea eax, [ebp - 0x41c]
push eax
lea eax, [ebp - 0x40c]
push eax
lea eax, [ebp - 0x3fc]
push eax
lea eax, [ebp - 0x3ec]
push eax
lea eax, [ebp - 0x3dc]
push eax
lea eax, [ebp - 0x3cc]
push eax
lea eax, [ebp - 0x3bc]
push eax
lea eax, [ebp - 0x3ac]
push eax
lea eax, [ebp - 0x39c]
push eax
lea eax, [ebp - 0x38c]
push eax
lea eax, [ebp - 0x37c]
push eax
lea eax, [ebp - 0x36c]
push eax
lea eax, [ebp - 0x35c]
push eax
lea eax, [ebp - 0x34c]
push eax
lea eax, [ebp - 0x33c]
push eax
lea eax, [ebp - 0x32c]
push eax
lea eax, [ebp - 0x31c]
push eax
lea eax, [ebp - 0x30c]
push eax
lea eax, [ebp - 0x2fc]
push eax
lea eax, [ebp - 0x2ec]
push eax
lea eax, [ebp - 0x2dc]
push eax
lea eax, [ebp - 0x2cc]
push eax
lea eax, [ebp - 0x2bc]
push eax
lea eax, [ebp - 0x2ac]
push eax
lea eax, [ebp - 0x29c]
push eax
lea eax, [ebp - 0x28c]
push eax
lea eax, [ebp - 0x27c]
push eax
lea eax, [ebp - 0x26c]
push eax
lea eax, [ebp - 0x25c]
push eax
lea eax, [ebp - 0x24c]
push eax
lea eax, [ebp - 0x5fc]
push eax
lea eax, [ebp - 0x5ec]
push eax
lea eax, [ebp - 0x5dc]
push eax
lea eax, [ebp - 0x5cc]
push eax
lea eax, [ebp - 0x5bc]
push eax
lea eax, [ebp - 0x5ac]
push eax
lea eax, [ebp - 0x59c]
push eax
lea eax, [ebp - 0x58c]
push eax
lea eax, [ebp - 0x57c]
push eax
lea eax, [ebp - 0x56c]
push eax
lea eax, [ebp - 0x55c]
push eax
lea eax, [ebp - 0x54c]
push eax
lea eax, [ebp - 0x53c]
push eax
lea eax, [ebp - 0x52c]
push eax
lea eax, [ebp - 0x51c]
push eax
lea eax, [ebp - 0x50c]
push eax
lea eax, [ebp - 0x4fc]
push eax
lea eax, [ebp - 0x4ec]
push eax
lea eax, [ebp - 0x4dc]
push eax
lea eax, [ebp - 0x4cc]
push eax
lea eax, [ebp - 0x4bc]
push eax
lea eax, [ebp - 0x4ac]
push eax
lea eax, [ebp - 0x49c]
push eax
lea eax, [ebp - 0x48c]
push eax
lea eax, [ebp - 0x47c]
push eax
lea eax, [ebp - 0x46c]
push eax
lea eax, [ebp - 0x45c]
push eax
lea eax, [ebp - 0x44c]
push eax
lea eax, [ebp - 0x43c]
push eax
lea eax, [ebp - 0x42c]
push eax
lea eax, [ebp - 0x7dc]
push eax
lea eax, [ebp - 0x7cc]
push eax
lea eax, [ebp - 0x7bc]
push eax
lea eax, [ebp - 0x7ac]
push eax
lea eax, [ebp - 0x79c]
push eax
lea eax, [ebp - 0x78c]
push eax
lea eax, [ebp - 0x77c]
push eax
lea eax, [ebp - 0x76c]
push eax
lea eax, [ebp - 0x75c]
push eax
lea eax, [ebp - 0x74c]
push eax
lea eax, [ebp - 0x73c]
push eax
lea eax, [ebp - 0x72c]
push eax
lea eax, [ebp - 0x71c]
push eax
lea eax, [ebp - 0x70c]
push eax
lea eax, [ebp - 0x6fc]
push eax
lea eax, [ebp - 0x6ec]
push eax
lea eax, [ebp - 0x6dc]
push eax
lea eax, [ebp - 0x6cc]
push eax
lea eax, [ebp - 0x6bc]
push eax
lea eax, [ebp - 0x6ac]
push eax
lea eax, [ebp - 0x69c]
push eax
lea eax, [ebp - 0x68c]
push eax
lea eax, [ebp - 0x67c]
push eax
lea eax, [ebp - 0x66c]
push eax
lea eax, [ebp - 0x65c]
push eax
lea eax, [ebp - 0x64c]
push eax
lea eax, [ebp - 0x63c]
push eax
lea eax, [ebp - 0x62c]
push eax
lea eax, [ebp - 0x61c]
push eax
lea eax, [ebp - 0x60c]
push eax
lea eax, [ebp - 0x96c]
push eax
lea eax, [ebp - 0x95c]
push eax
lea eax, [ebp - 0x94c]
push eax
lea eax, [ebp - 0x93c]
push eax
lea eax, [ebp - 0x92c]
push eax
lea eax, [ebp - 0x91c]
push eax
lea eax, [ebp - 0x90c]
push eax
lea eax, [ebp - 0x8fc]
push eax
lea eax, [ebp - 0x8ec]
push eax
lea eax, [ebp - 0x8dc]
push eax
lea eax, [ebp - 0x8cc]
push eax
lea eax, [ebp - 0x8bc]
push eax
lea eax, [ebp - 0x8ac]
push eax
lea eax, [ebp - 0x89c]
push eax
lea eax, [ebp - 0x88c]
push eax
lea eax, [ebp - 0x87c]
push eax
lea eax, [ebp - 0x86c]
push eax
lea eax, [ebp - 0x85c]
push eax
lea eax, [ebp - 0x84c]
push eax
lea eax, [ebp - 0x83c]
push eax
lea eax, [ebp - 0x82c]
push eax
lea eax, [ebp - 0x81c]
push eax
lea eax, [ebp - 0x80c]
push eax
lea eax, [ebp - 0x7fc]
push eax
lea eax, [ebp - 0x7ec]
push eax
push 0x91
call fcn.00404898
add esp, 0x248
push dword [ebp - 0x24]
push 0x41149c
call fcn.0040486e
mov dword [ebp - 0x74], eax
mov dword [ebp - 0x7c], 8
push 0xd
lea eax, [ebp - 0x6c]
push eax
call fcn.004048bc
push 0xa
lea eax, [ebp - 0x9c]
push eax
call fcn.004048bc
lea eax, [ebp - 0x7c]
push eax
lea eax, [ebp - 0x6c]
push eax
lea eax, [ebp - 0x8c]
push eax
call fcn.004047d2
push eax
lea eax, [ebp - 0x9c]
push eax
lea eax, [ebp - 0xac]
push eax
call fcn.004047d2
push eax
call fcn.004048aa
mov edx, eax
lea ecx, [ebp - 0x24]
call fcn.004048b6
lea eax, [ebp - 0xac]
push eax
lea eax, [ebp - 0x9c]
push eax
lea eax, [ebp - 0x8c]
push eax
lea eax, [ebp - 0x6c]
push eax
lea eax, [ebp - 0x7c]
push eax
push 5
call fcn.00404898
add esp, 0x18
push dword [ebp - 0x24]
push dword [0x5212d4]
push dword [0x5212e8]
call fcn.00404832
push dword [eax]
call fcn.004d8bec
sub eax, 4
jo 0x4cef61
push eax
push dword [0x5212d4]
push dword [0x5212e8]
call fcn.00404832
push dword [eax]
call fcn.004d8c9a
mov edx, eax
lea ecx, [ebp - 0x48]
call fcn.004048b6
push eax
call fcn.0040486e
mov edx, eax
lea ecx, [ebp - 0x4c]
call fcn.004048b6
push eax
push 0x40ba2c
call fcn.0040486e
mov edx, eax
lea ecx, [ebp - 0x50]
call fcn.004048b6
push eax
push 0x4114d8
call fcn.0040486e
mov dword [ebp - 0x74], eax
mov dword [ebp - 0x7c], 8
push 0xd
lea eax, [ebp - 0x6c]
push eax
call fcn.004048bc
push 0xa
lea eax, [ebp - 0x9c]
push eax
call fcn.004048bc
lea eax, [ebp - 0x7c]
push eax
lea eax, [ebp - 0x6c]
push eax
lea eax, [ebp - 0x8c]
push eax
call fcn.004047d2
push eax
lea eax, [ebp - 0x9c]
push eax
lea eax, [ebp - 0xac]
push eax
call fcn.004047d2
push eax
call fcn.004048aa
mov edx, eax
lea ecx, [ebp - 0x24]
call fcn.004048b6
lea eax, [ebp - 0x50]
push eax
lea eax, [ebp - 0x4c]
push eax
lea eax, [ebp - 0x48]
push eax
push 3
call fcn.0040489e
add esp, 0x10
lea eax, [ebp - 0xac]
push eax
lea eax, [ebp - 0x9c]
push eax
lea eax, [ebp - 0x8c]
push eax
lea eax, [ebp - 0x6c]
push eax
lea eax, [ebp - 0x7c]
push eax
push 5
call fcn.00404898
add esp, 0x18
push dword [0x5212e8]
push 1
call fcn.00404838
mov ecx, eax
sub ecx, 1
jo 0x4cef61
call fcn.0040479c
mov word [ebp - 0xb60], ax
mov word [ebp - 0xb5c], 1
and word [ebp - 0x18], 0
jmp 0x4ce3af
mov ax, word [ebp - 0x18]
add ax, word [ebp - 0xb5c]
jo 0x4cef61
mov word [ebp - 0x18], ax
mov ax, word [ebp - 0x18]
cmp ax, word [ebp - 0xb60]
jg 0x4ce7aa
movsx eax, word [ebp - 0x18]
cmp eax, dword [0x5212d4]
je 0x4ce7a5
movsx esi, word [ebp - 0x18]
push dword [0x5212e8]
push 1
call fcn.00404838
sub eax, 1
jo 0x4cef61
cmp esi, eax
jne 0x4ce446
push 0xd
lea eax, [ebp - 0x6c]
push eax
call fcn.004048bc
push 0xa
lea eax, [ebp - 0x7c]
push eax
call fcn.004048bc
lea eax, [ebp - 0x6c]
push eax
lea eax, [ebp - 0x7c]
push eax
lea eax, [ebp - 0x8c]
push eax
call fcn.004047d2
push eax
call fcn.004048aa
mov edx, eax
lea ecx, [ebp - 0x20]
call fcn.004048b6
lea eax, [ebp - 0x8c]
push eax
lea eax, [ebp - 0x7c]
push eax
lea eax, [ebp - 0x6c]
push eax
push 3
call fcn.00404898
add esp, 0x10
jmp 0x4ce4cb
mov dword [ebp - 0x974], 0x4114d8
mov dword [ebp - 0x97c], 8
push 0xd
lea eax, [ebp - 0x6c]
push eax
call fcn.004048bc
push 0xa
lea eax, [ebp - 0x8c]
push eax
call fcn.004048bc
lea eax, [ebp - 0x97c]
push eax
lea eax, [ebp - 0x6c]
push eax
lea eax, [ebp - 0x7c]
push eax
call fcn.004047d2
push eax
lea eax, [ebp - 0x8c]
push eax
lea eax, [ebp - 0x9c]
push eax
call fcn.004047d2
push eax
call fcn.004048aa
mov edx, eax
lea ecx, [ebp - 0x20]
call fcn.004048b6
lea eax, [ebp - 0x9c]
push eax
lea eax, [ebp - 0x8c]
push eax
lea eax, [ebp - 0x7c]
push eax
lea eax, [ebp - 0x6c]
push eax
push 4
call fcn.00404898
add esp, 0x14
push dword [0x5212e8]
lea eax, [ebp - 0x44]
push eax
call fcn.0040482c
movsx eax, word [ebp - 0x18]
push eax
push dword [ebp - 0x44]
call fcn.00404832
mov dword [ebp - 0x974], eax
mov dword [ebp - 0x97c], 0x4008
push 4
lea eax, [ebp - 0x97c]
push eax
lea eax, [ebp - 0x6c]
push eax
call fcn.0040487a
lea eax, [ebp - 0x44]
push eax
call fcn.00404820
lea eax, [ebp - 0x6c]
push eax
lea eax, [ebp - 0x7c]
push eax
call fcn.00404880
lea edx, [ebp - 0x7c]
lea ecx, [ebp - 0xb50]
call fcn.004048d4
lea ecx, [ebp - 0x6c]
call fcn.00404844
mov dword [ebp - 0x974], 0x40ba0c
mov dword [ebp - 0x97c], 0x8008
lea eax, [ebp - 0xb50]
push eax
lea eax, [ebp - 0x97c]
push eax
call fcn.0040480e
movsx eax, ax
test eax, eax
je 0x4ce5ff
push dword [ebp - 0x24]
movsx eax, word [ebp - 0x18]
push eax
push dword [0x5212e8]
call fcn.00404832
push dword [eax]
call fcn.004d8bec
sub eax, 4
jo 0x4cef61
push eax
movsx eax, word [ebp - 0x18]
push eax
push dword [0x5212e8]
call fcn.00404832
push dword [eax]
call fcn.004d8c9a
mov edx, eax
lea ecx, [ebp - 0x48]
call fcn.004048b6
push eax
call fcn.0040486e
mov edx, eax
lea ecx, [ebp - 0x4c]
call fcn.004048b6
push eax
push 0x40ba2c
call fcn.0040486e
mov edx, eax
lea ecx, [ebp - 0x50]
call fcn.004048b6
push eax
push dword [ebp - 0x20]
call fcn.0040486e
mov edx, eax
lea ecx, [ebp - 0x24]
call fcn.004048b6
lea eax, [ebp - 0x50]
push eax
lea eax, [ebp - 0x4c]
push eax
lea eax, [ebp - 0x48]
push eax
push 3
call fcn.0040489e
add esp, 0x10
jmp 0x4ce7a5
mov dword [ebp - 0x974], 0x40ba7c
mov dword [ebp - 0x97c], 0x8008
lea eax, [ebp - 0xb50]
push eax
lea eax, [ebp - 0x97c]
push eax
call fcn.0040480e
movsx eax, ax
test eax, eax
je 0x4ce6c9
push dword [ebp - 0x24]
movsx eax, word [ebp - 0x18]
push eax
push dword [0x5212e8]
call fcn.00404832
push dword [eax]
call fcn.004d8bec
sub eax, 4
jo 0x4cef61
push eax
movsx eax, word [ebp - 0x18]
push eax
push dword [0x5212e8]
call fcn.00404832
push dword [eax]
call fcn.004d8c9a
mov edx, eax
lea ecx, [ebp - 0x48]
call fcn.004048b6
push eax
call fcn.0040486e
mov edx, eax
lea ecx, [ebp - 0x4c]
call fcn.004048b6
push eax
push 0x40ba8c
call fcn.0040486e
mov edx, eax
lea ecx, [ebp - 0x50]
call fcn.004048b6
push eax
push dword [ebp - 0x20]
call fcn.0040486e
mov edx, eax
lea ecx, [ebp - 0x24]
call fcn.004048b6
lea eax, [ebp - 0x50]
push eax
lea eax, [ebp - 0x4c]
push eax
lea eax, [ebp - 0x48]
push eax
push 3
call fcn.0040489e
add esp, 0x10
jmp 0x4ce7a5
mov dword [ebp - 0x974], 0x410d70
mov dword [ebp - 0x97c], 0x8008
lea eax, [ebp - 0xb50]
push eax
lea eax, [ebp - 0x97c]
push eax
call fcn.0040480e
movsx eax, ax
test eax, eax
je 0x4ce738
push dword [ebp - 0x24]
movsx eax, word [ebp - 0x18]
push eax
push dword [0x5212e8]
call fcn.00404832
push dword [eax]
call fcn.0040486e
mov edx, eax
lea ecx, [ebp - 0x48]
call fcn.004048b6
push eax
push dword [ebp - 0x20]
call fcn.0040486e
mov edx, eax
lea ecx, [ebp - 0x24]
call fcn.004048b6
lea ecx, [ebp - 0x48]
call fcn.00404868
jmp 0x4ce7a5
mov dword [ebp - 0x974], 0x410d50
mov dword [ebp - 0x97c], 0x8008
lea eax, [ebp - 0xb50]
push eax
lea eax, [ebp - 0x97c]
push eax
call fcn.0040480e
movsx eax, ax
test eax, eax
je 0x4ce7a5
push dword [ebp - 0x24]
movsx eax, word [ebp - 0x18]
push eax
push dword [0x5212e8]
call fcn.00404832
push dword [eax]
call fcn.0040486e
mov edx, eax
lea ecx, [ebp - 0x48]
call fcn.004048b6
push eax
push dword [ebp - 0x20]
call fcn.0040486e
mov edx, eax
lea ecx, [ebp - 0x24]
call fcn.004048b6
lea ecx, [ebp - 0x48]
call fcn.00404868
jmp 0x4ce39a
lea eax, [ebp - 0x24]
mov dword [ebp - 0x974], eax
mov dword [ebp - 0x97c], 0x4008
push dword [ebp - 0x24]
call fcn.0040465e
sub eax, 6
jo 0x4cef61
push eax
lea eax, [ebp - 0x97c]
push eax
lea eax, [ebp - 0x6c]
push eax
call fcn.004047c0
push 0xd
lea eax, [ebp - 0x7c]
push eax
call fcn.004048bc
push 0xa
lea eax, [ebp - 0x9c]
push eax
call fcn.004048bc
push 0xd
lea eax, [ebp - 0xbc]
push eax
call fcn.004048bc
push 0xa
lea eax, [ebp - 0xdc]
push eax
call fcn.004048bc
mov dword [ebp - 0x984], 0x4114e8
mov dword [ebp - 0x98c], 8
lea eax, [ebp - 0x6c]
push eax
lea eax, [ebp - 0x7c]
push eax
lea eax, [ebp - 0x8c]
push eax
call fcn.004047d2
push eax
lea eax, [ebp - 0x9c]
push eax
lea eax, [ebp - 0xac]
push eax
call fcn.004047d2
push eax
lea eax, [ebp - 0xbc]
push eax
lea eax, [ebp - 0xcc]
push eax
call fcn.004047d2
push eax
lea eax, [ebp - 0xdc]
push eax
lea eax, [ebp - 0xec]
push eax
call fcn.004047d2
push eax
lea eax, [ebp - 0x98c]
push eax
lea eax, [ebp - 0xfc]
push eax
call fcn.004047d2
push eax
push 9
push 0x41150c
call fcn.004046c4
add esp, 0xc
lea eax, [ebp - 0xfc]
push eax
lea eax, [ebp - 0xec]
push eax
lea eax, [ebp - 0xdc]
push eax
lea eax, [ebp - 0xcc]
push eax
lea eax, [ebp - 0xbc]
push eax
lea eax, [ebp - 0xac]
push eax
lea eax, [ebp - 0x9c]
push eax
lea eax, [ebp - 0x8c]
push eax
lea eax, [ebp - 0x7c]
push eax
lea eax, [ebp - 0x6c]
push eax
push 0xa
call fcn.00404898
add esp, 0x2c
push 9
call fcn.00404850
fldz
fstp dword [ebp - 0x974]
mov dword [ebp - 0x97c], 4
cmp dword [0x52139c], 0
jne 0x4ce923
push 0x52139c
push 0x407ca4
call fcn.004048c8
mov dword [ebp - 0xbcc], 0x52139c
jmp 0x4ce92d
mov dword [ebp - 0xbcc], 0x52139c
push 0x10
pop eax
call fcn.004044c0
lea esi, [ebp - 0x97c]
mov edi, esp
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
push 5
mov eax, dword [ebp - 0xbcc]
mov eax, dword [eax]
mov ecx, dword [ebp - 0xbcc]
mov ecx, dword [ecx]
mov ecx, dword [ecx]
push eax
call dword [ecx + 0x400]
push eax
lea eax, [ebp - 0x54]
push eax
call fcn.0040470c
push eax
call fcn.004046dc
lea ecx, [ebp - 0x54]
call fcn.004046d6
cmp dword [0x52139c], 0
jne 0x4ce998
push 0x52139c
push 0x407ca4
call fcn.004048c8
mov dword [ebp - 0xbd0], 0x52139c
jmp 0x4ce9a2
mov dword [ebp - 0xbd0], 0x52139c
push 0x40bbac
push 0
push 3
mov eax, dword [ebp - 0xbd0]
mov eax, dword [eax]
mov ecx, dword [ebp - 0xbd0]
mov ecx, dword [ecx]
mov ecx, dword [ecx]
push eax
call dword [ecx + 0x404]
push eax
lea eax, [ebp - 0x54]
push eax
call fcn.0040470c
push eax
lea eax, [ebp - 0x6c]
push eax
call fcn.00404700
add esp, 0x10
push eax
call fcn.00404706
push eax
lea eax, [ebp - 0x58]
push eax
call fcn.0040470c
mov dword [ebp - 0xb34], eax
mov dword [ebp - 0x74], 1
mov dword [ebp - 0x7c], 2
lea eax, [ebp - 0x5c]
push eax
lea eax, [ebp - 0x7c]
push eax
mov eax, dword [ebp - 0xb34]
mov eax, dword [eax]
push dword [ebp - 0xb34]
call dword [eax + 0x24]
fnclex
mov dword [ebp - 0xb38], eax
cmp dword [ebp - 0xb38], 0
jge 0x4cea49
push 0x24
push 0x40bbac
push dword [ebp - 0xb34]
push dword [ebp - 0xb38]
call fcn.004048c2
mov dword [ebp - 0xbd4], eax
jmp 0x4cea50
and dword [ebp - 0xbd4], 0
mov eax, dword [ebp - 0x5c]
mov dword [ebp - 0xb3c], eax
push 0x40c278
mov eax, dword [ebp - 0xb3c]
mov eax, dword [eax]
push dword [ebp - 0xb3c]
call dword [eax + 0x80]
fnclex
mov dword [ebp - 0xb40], eax
cmp dword [ebp - 0xb40], 0
jge 0x4ceaa6
push 0x80
push 0x40bbbc
push dword [ebp - 0xb3c]
push dword [ebp - 0xb40]
call fcn.004048c2
mov dword [ebp - 0xbd8], eax
jmp 0x4ceaad
and dword [ebp - 0xbd8], 0
lea eax, [ebp - 0x5c]
push eax
lea eax, [ebp - 0x58]
push eax
lea eax, [ebp - 0x54]
push eax
push 3
call fcn.004046fa
add esp, 0x10
lea eax, [ebp - 0x7c]
push eax
lea eax, [ebp - 0x6c]
push eax
push 2
call fcn.00404898
add esp, 0xc
wait
push 0x4cef4b
jmp 0x4cef17
lea ecx, [ebp - 0xb50]
call fcn.00404844
lea ecx, [ebp - 0x20]
call fcn.00404868
lea ecx, [ebp - 0x24]
call fcn.00404868
lea ecx, [ebp - 0x34]
call fcn.00404844
lea ecx, [ebp - 0x38]
call fcn.00404868
lea ecx, [ebp - 0x40]
call fcn.00404868
ret
jmp fcn.004044cc
call fcn.0040477e