Function at 0x499827
Capabilities:
Check http status code

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x5c
push 0x14
call fcn.0059e722
add esp, 4
mov dword [ebp - 4], eax
mov ebx, eax
mov edi, eax
xor eax, eax
mov ecx, 5
rep stosd dword es:[edi], eax
mov dword [ebx], 0x79efaa
mov dword [ebp - 8], 0
mov dword [ebp - 0xc], 0
mov dword [ebp - 0x10], 0
mov dword [ebp - 0x14], 0
push dword [ebp + 0xc]
lea eax, [ebp - 4]
push eax
mov eax, dword [esp]
mov eax, dword [eax]
mov eax, dword [eax]
call dword [eax + 0x10]
push 0xc
lea eax, [ebp - 4]
push eax
mov eax, dword [esp]
mov eax, dword [eax]
mov eax, dword [eax]
call dword [eax + 0xc]
mov dword [ebp - 0x18], 0
push 0
push dword [ebp - 0x18]
mov dword [ebp - 0x1c], 0
push 0
push dword [ebp - 0x1c]
mov dword [ebp - 0x20], 0
push 0
push dword [ebp - 0x20]
lea eax, [ebp - 4]
push eax
mov eax, dword [esp]
mov eax, dword [eax]
mov eax, dword [eax]
call dword [eax + 0x24]
mov dword [ebp - 0x24], eax
mov eax, dword [ebp - 0x24]
push eax
mov ebx, dword [ebp - 8]
test ebx, ebx
je 0x4998dc
push ebx
call fcn.0059e734
add esp, 4
pop eax
mov dword [ebp - 8], eax
push 0x6f5d0e
push dword [ebp - 8]
call fcn.004040a7
add esp, 8
cmp eax, 0
jne 0x4998fe
jmp 0x4a1c3c
xor ecx, ecx
lea eax, [ebp - 0xc]
mov ebx, eax
inc ecx
push ecx
push ebx
mov dword [ebx], ecx
cmp ecx, 0xc8
jg 0x4999f0
mov ebx, dword [0x944f04]
call fcn.00402194
push ebx
push ecx
mov eax, dword [ebp + 8]
dec eax
jns 0x499940
push 0xf3
push 0x403f5fe
push 4
call fcn.0059e728
add esp, 0xc
pop ecx
pop ebx
cmp eax, ecx
jl 0x49995d
push 0xf3
push 0x403f5fe
push 1
call fcn.0059e728
add esp, 0xc
shl eax, 2
add ebx, eax
mov ebx, dword [ebx]
mov ebx, dword [ebx + 0x20]
mov ebx, dword [ebx + 0x48]
call fcn.00402194
push ebx
push ecx
mov eax, dword [ebp - 0xc]
dec eax
jns 0x49998e
push 0xf3
push 0x403f5fe
push 4
call fcn.0059e728
add esp, 0xc
pop ecx
pop ebx
cmp eax, ecx
jl 0x4999ab
push 0xf3
push 0x403f5fe
push 1
call fcn.0059e728
add esp, 0xc
shl eax, 2
add ebx, eax
mov ebx, dword [ebx]
add ebx, 4
mov dword [ebp - 0x18], ebx
mov eax, dword [ebp - 8]
push eax
mov ebx, dword [ebp - 0x18]
push dword [ebx]
call fcn.004040a7
add esp, 8
cmp eax, 0
jne 0x4999d7
jmp 0x4999f0
cmp dword [ebp - 0xc], 0xc8
jne 0x4999e9
jmp 0x4a1c3c
pop ebx
pop ecx
jmp 0x499905
add esp, 8
mov ebx, dword [0x944f04]
call fcn.00402194
push ebx
push ecx
mov eax, dword [ebp + 8]
dec eax
jns 0x499a1d
push 0x1d9
push 0x403f5fe
push 4
call fcn.0059e728
add esp, 0xc
pop ecx
pop ebx
cmp eax, ecx
jl 0x499a3a
push 0x1d9
push 0x403f5fe
push 1
call fcn.0059e728
add esp, 0xc
shl eax, 2
add ebx, eax
mov ebx, dword [ebx]
mov ebx, dword [ebx + 0x20]
mov ebx, dword [ebx + 0x48]
call fcn.00402194
push ebx
push ecx
mov eax, dword [ebp - 0xc]
dec eax
jns 0x499a6b
push 0x1d9
push 0x403f5fe
push 4
call fcn.0059e728
add esp, 0xc
pop ecx
pop ebx
cmp eax, ecx
jl 0x499a88
push 0x1d9
push 0x403f5fe
push 1
call fcn.0059e728
add esp, 0xc
shl eax, 2
add ebx, eax
mov dword [ebp - 0x18], ebx
push dword [ebp - 0x18]
call fcn.00494537
mov ebx, dword [0x944f04]
call fcn.00402194
push ebx
push ecx
mov eax, dword [ebp + 8]
dec eax
jns 0x499ac2
push 0x225
push 0x403f5fe
push 4
call fcn.0059e728
add esp, 0xc
pop ecx
pop ebx
cmp eax, ecx
jl 0x499adf
push 0x225
push 0x403f5fe
push 1
call fcn.0059e728
add esp, 0xc
shl eax, 2
add ebx, eax
mov ebx, dword [ebx]
mov ebx, dword [ebx + 0x20]
mov ebx, dword [ebx + 0x48]
call fcn.00402194
push ebx
push ecx
mov eax, dword [ebp - 0xc]
dec eax
jns 0x499b10
push 0x225
push 0x403f5fe
push 4
call fcn.0059e728
add esp, 0xc
pop ecx
pop ebx
cmp eax, ecx
jl 0x499b2d
push 0x225
push 0x403f5fe
push 1
call fcn.0059e728
add esp, 0xc
shl eax, 2
add ebx, eax
mov ebx, dword [ebx]
add ebx, 8
mov dword [ebp - 0x18], ebx
mov ebx, dword [ebp - 0x18]
cmp dword [ebx], 0
jne 0x499f35
xor ecx, ecx
lea eax, [ebp - 0x10]
mov ebx, eax
inc ecx
push ecx
push ebx
mov dword [ebx], ecx
cmp ecx, 0xc8
jg 0x499f32
mov eax, dword [ebp - 0xc]
cmp dword [ebp - 0x10], eax
je 0x499f2b
mov ebx, dword [0x944f04]
call fcn.00402194
push ebx
push ecx
mov eax, dword [ebp + 8]
dec eax
jns 0x499b94
push 0x2e7
push 0x403f5fe
push 4
call fcn.0059e728
add esp, 0xc
pop ecx
pop ebx
cmp eax, ecx
jl 0x499bb1
push 0x2e7
push 0x403f5fe
push 1
call fcn.0059e728
add esp, 0xc
shl eax, 2
add ebx, eax
mov ebx, dword [ebx]
mov ebx, dword [ebx + 0x20]
mov ebx, dword [ebx + 0x48]
call fcn.00402194
push ebx
push ecx
mov eax, dword [ebp - 0x10]
dec eax
jns 0x499be2
push 0x2e7
push 0x403f5fe
push 4
call fcn.0059e728
add esp, 0xc
pop ecx
pop ebx
cmp eax, ecx
jl 0x499bff
push 0x2e7
push 0x403f5fe
push 1
call fcn.0059e728
add esp, 0xc
shl eax, 2
add ebx, eax
mov ebx, dword [ebx]
mov dword [ebp - 0x18], ebx
mov ebx, dword [0x944f04]
call fcn.00402194
push ebx
push ecx
mov eax, dword [ebp + 8]
dec eax
jns 0x499c33
push 0x2e7
push 0x403f5fe
push 4
call fcn.0059e728
add esp, 0xc
pop ecx
pop ebx
cmp eax, ecx
jl 0x499c50
push 0x2e7
push 0x403f5fe
push 1
call fcn.0059e728
add esp, 0xc
shl eax, 2
add ebx, eax
mov ebx, dword [ebx]
mov ebx, dword [ebx + 0x20]
mov ebx, dword [ebx + 0x48]
call fcn.00402194
push ebx
push ecx
mov eax, dword [ebp - 0xc]
dec eax
jns 0x499c81
push 0x2e7
push 0x403f5fe
push 4
call fcn.0059e728
add esp, 0xc
pop ecx
pop ebx
cmp eax, ecx
jl 0x499c9e
push 0x2e7
push 0x403f5fe
push 1
call fcn.0059e728
add esp, 0xc
shl eax, 2
add ebx, eax
mov ebx, dword [ebx]
mov dword [ebp - 0x1c], ebx
mov ebx, dword [ebp - 0x1c]
mov eax, dword [ebx]
push eax
mov ebx, dword [ebp - 0x18]
push dword [ebx]
call fcn.004040a7
add esp, 8
cmp eax, 0
jne 0x499ed9
mov ebx, dword [0x944f04]
call fcn.00402194
push ebx
push ecx
mov eax, dword [ebp + 8]
dec eax
jns 0x499cee
push 0x35a
push 0x403f5fe
push 4
call fcn.0059e728
add esp, 0xc
pop ecx
pop ebx
cmp eax, ecx
jl 0x499d0b
push 0x35a
push 0x403f5fe
push 1
call fcn.0059e728
add esp, 0xc
shl eax, 2
add ebx, eax
mov ebx, dword [ebx]
mov ebx, dword [ebx + 0x20]
mov ebx, dword [ebx + 0x48]
call fcn.00402194
push ebx
push ecx
mov eax, dword [ebp - 0x10]
dec eax
jns 0x499d3c
push 0x35a
push 0x403f5fe
push 4
call fcn.0059e728
add esp, 0xc
pop ecx
pop ebx
cmp eax, ecx
jl 0x499d59
push 0x35a
push 0x403f5fe
push 1
call fcn.0059e728
add esp, 0xc
shl eax, 2
add ebx, eax
mov ebx, dword [ebx]
add ebx, 4
mov dword [ebp - 0x24], ebx
mov ebx, dword [0x944f04]
call fcn.00402194
push ebx
push ecx
mov eax, dword [ebp + 8]
dec eax
jns 0x499d90
push 0x35a
push 0x403f5fe
push 4
call fcn.0059e728
add esp, 0xc
pop ecx
pop ebx
cmp eax, ecx
jl 0x499dad
push 0x35a
push 0x403f5fe
push 1
call fcn.0059e728
add esp, 0xc
shl eax, 2
add ebx, eax
mov ebx, dword [ebx]
mov ebx, dword [ebx + 0x20]
mov ebx, dword [ebx + 0x48]
call fcn.00402194
push ebx
push ecx
mov eax, dword [ebp - 0xc]
dec eax
jns 0x499dde
push 0x35a
push 0x403f5fe
push 4
call fcn.0059e728
add esp, 0xc
pop ecx
pop ebx
cmp eax, ecx
jl 0x499dfb
push 0x35a
push 0x403f5fe
push 1
call fcn.0059e728
add esp, 0xc
shl eax, 2
add ebx, eax
mov ebx, dword [ebx]
add ebx, 4
mov dword [ebp - 0x28], ebx
mov ebx, dword [ebp - 0x28]
mov eax, dword [ebx]
push eax
mov ebx, dword [ebp - 0x24]
push dword [ebx]
call fcn.004040a7
add esp, 8
cmp eax, 0
je 0x499ed9
mov ebx, dword [0x944f04]
call fcn.00402194
push ebx
push ecx
mov eax, dword [ebp + 8]
dec eax
jns 0x499e4e
push 0x3cd
push 0x403f5fe
push 4
call fcn.0059e728
add esp, 0xc
pop ecx
pop ebx
cmp eax, ecx
jl 0x499e6b
push 0x3cd
push 0x403f5fe
push 1
call fcn.0059e728
add esp, 0xc
shl eax, 2
add ebx, eax
mov ebx, dword [ebx]
mov ebx, dword [ebx + 0x20]
mov ebx, dword [ebx + 0x48]
call fcn.00402194
push ebx
push ecx
mov eax, dword [ebp - 0x10]
dec eax
jns 0x499e9c
push 0x3cd
push 0x403f5fe
push 4
call fcn.0059e728
add esp, 0xc
pop ecx
pop ebx
cmp eax, ecx
jl 0x499eb9
push 0x3cd
push 0x403f5fe
push 1
call fcn.0059e728
add esp, 0xc
shl eax, 2
add ebx, eax
mov ebx, dword [ebx]
add ebx, 8
mov dword [ebp - 0x30], ebx
mov ebx, dword [ebp - 0x30]
cmp dword [ebx], 1
jne 0x499ed9
mov eax, 1
jmp 0x499ede
mov eax, 0
test eax, eax
je 0x499f2b
mov eax, 0x7a5331
mov dword [ebp - 0x18], eax
lea eax, [ebp - 0x18]
push eax
call fcn.00412417
mov dword [ebp - 0x1c], eax
mov ebx, dword [ebp - 0x18]
test ebx, ebx
je 0x499f0a
push ebx
call fcn.0059e734
add esp, 4
lea eax, [ebp - 0x1c]
push eax
push dword [ebp + 8]
call fcn.00412a5b
mov ebx, dword [ebp - 0x1c]
test ebx, ebx
je 0x499f26
push ebx
call fcn.0059e734
add esp, 4
jmp 0x4a1c3c
pop ebx
pop ecx
jmp 0x499b4d
add esp, 8
mov ebx, dword [0x944f04]
call fcn.00402194
push ebx
push ecx
mov eax, dword [ebp + 8]
dec eax
jns 0x499f5f
push 0x4dd
push 0x403f5fe
push 4
call fcn.0059e728
add esp, 0xc
pop ecx
pop ebx
cmp eax, ecx
jl 0x499f7c
push 0x4dd
push 0x403f5fe
push 1
call fcn.0059e728
add esp, 0xc
shl eax, 2
add ebx, eax
mov ebx, dword [ebx]
mov ebx, dword [ebx + 0x20]
mov ebx, dword [ebx + 0x48]
call fcn.00402194
push ebx
push ecx
mov eax, dword [ebp - 0xc]
dec eax
jns 0x499fad
push 0x4dd
push 0x403f5fe
push 4
call fcn.0059e728
add esp, 0xc
pop ecx
pop ebx
cmp eax, ecx
jl 0x499fca
push 0x4dd
push 0x403f5fe
push 1
call fcn.0059e728
add esp, 0xc
shl eax, 2
add ebx, eax
mov ebx, dword [ebx]
add ebx, 8
mov dword [ebp - 0x18], ebx
mov ebx, dword [ebp - 0x18]
cmp dword [ebx], 1
jne 0x49dc82
mov ebx, dword [0x944f04]
call fcn.00402194
push ebx
push ecx
mov eax, dword [ebp + 8]
dec eax
jns 0x49a00d
push 0x549
push 0x403f5fe
push 4
call fcn.0059e728
add esp, 0xc
pop ecx
pop ebx
cmp eax, ecx
jl 0x49a02a
push 0x549
push 0x403f5fe
push 1
call fcn.0059e728
add esp, 0xc
shl eax, 2
add ebx, eax
mov ebx, dword [ebx]
mov ebx, dword [ebx + 0x20]
mov ebx, dword [ebx + 0x48]
call fcn.00402194
push ebx
push ecx
mov eax, dword [ebp - 0xc]
dec eax
jns 0x49a05b
push 0x549
push 0x403f5fe
push 4
call fcn.0059e728
add esp, 0xc
pop ecx
pop ebx
cmp eax, ecx
jl 0x49a078
push 0x549
push 0x403f5fe
push 1
call fcn.0059e728
add esp, 0xc
shl eax, 2
add ebx, eax
mov ebx, dword [ebx]
add ebx, 0x1c
mov dword [ebp - 0x18], ebx
mov ebx, dword [ebp - 0x18]
cmp dword [ebx], 4
jne 0x49a0fb
mov ebx, dword [0x944f04]
call fcn.00402194
push ebx
push ecx
mov eax, dword [ebp + 8]
dec eax
jns 0x49a0bb
push 0x591
push 0x403f5fe
push 4
call fcn.0059e728
add esp, 0xc
pop ecx
pop ebx
cmp eax, ecx
jl 0x49a0d8
push 0x591
push 0x403f5fe
push 1
call fcn.0059e728
add esp, 0xc
shl eax, 2
add ebx, eax
mov ebx, dword [ebx]
mov ebx, dword [ebx + 0x20]
add ebx, 0x4c
mov dword [ebp - 0x20], ebx
mov ebx, dword [ebp - 0x20]
cmp byte [ebx], 0
jne 0x49a0fb
mov eax, 1
jmp 0x49a100
mov eax, 0
test eax, eax
je 0x49a65a
mov eax, str.4D5A00000000000000106001097068795F706F776572
mov dword [ebp - 0x18], eax
lea eax, [ebp - 0x18]
push eax
call fcn.0040cab0
mov dword [ebp - 0x1c], eax
mov ebx, dword [ebp - 0x18]
test ebx, ebx
je 0x49a12c
push ebx
call fcn.0059e734
add esp, 4
mov ebx, dword [0x944f04]
call fcn.00402194
push ebx
push ecx
mov eax, dword [ebp + 8]
dec eax
jns 0x49a156
push 0x675
push 0x403f5fe
push 4
call fcn.0059e728
add esp, 0xc
pop ecx
pop ebx
cmp eax, ecx
jl 0x49a173
push 0x675
push 0x403f5fe
push 1
call fcn.0059e728
add esp, 0xc
shl eax, 2
add ebx, eax
mov ebx, dword [ebx]
mov ebx, dword [ebx + 0x20]
mov ebx, dword [ebx + 0x48]
call fcn.00402194
push ebx
push ecx
mov eax, dword [ebp - 0xc]
dec eax
jns 0x49a1a4
push 0x675
push 0x403f5fe
push 4
call fcn.0059e728
add esp, 0xc
pop ecx
pop ebx
cmp eax, ecx
jl 0x49a1c1
push 0x675
push 0x403f5fe
push 1
call fcn.0059e728
add esp, 0xc
shl eax, 2
add ebx, eax
mov ebx, dword [ebx]
add ebx, 0x10
mov dword [ebp - 0x20], ebx
mov ebx, dword [ebp - 0x20]
fild dword [ebx]
fstp qword [ebp - 0x28]
fld qword [ebp - 0x28]
fchs
fstp qword [ebp - 0x30]
push 0x80000601
push dword [ebp - 0x2c]
push dword [ebp - 0x30]
push 1
mov ebx, 0x59f8d0
call fcn.0059e73a
add esp, 0x10
push 0x80000301
push 0
push eax
push 1
mov ebx, 0x5a01a0
call fcn.0059e73a
add esp, 0x10
mov dword [ebp - 0x38], eax
lea eax, [ebp - 0x38]
push eax
call fcn.00431565
mov dword [ebp - 0x3c], eax
mov ebx, dword [ebp - 0x38]
test ebx, ebx
je 0x49a234
push ebx
call fcn.0059e734
add esp, 4
push dword [ebp - 0x3c]
push dword [ebp - 0x1c]
mov ecx, 2
call fcn.00402e44
add esp, 8
mov dword [ebp - 0x40], eax
mov ebx, dword [ebp - 0x1c]
test ebx, ebx
je 0x49a25a
push ebx
call fcn.0059e734
add esp, 4
mov ebx, dword [ebp - 0x3c]
test ebx, ebx
je 0x49a26a
push ebx
call fcn.0059e734
add esp, 4
mov eax, dword [ebp - 0x40]
push eax
mov ebx, dword [ebp - 0x14]
test ebx, ebx
je 0x49a27e
push ebx
call fcn.0059e734
add esp, 4
pop eax
mov dword [ebp - 0x14], eax
mov ebx, dword [0x944f04]
call fcn.00402194
push ebx
push ecx
mov eax, dword [ebp + 8]
dec eax
jns 0x49a2ac
push 0x6bd
push 0x403f5fe
push 4
call fcn.0059e728
add esp, 0xc
pop ecx
pop ebx
cmp eax, ecx
jl 0x49a2c9
push 0x6bd
push 0x403f5fe
push 1
call fcn.0059e728
add esp, 0xc
shl eax, 2
add ebx, eax
mov ebx, dword [ebx]
mov ebx, dword [ebx + 0x20]
mov ebx, dword [ebx + 0xb8]
add ebx, 4
mov dword [ebp - 0x18], ebx
mov ebx, dword [0x944f04]
call fcn.00402194
push ebx
push ecx
mov eax, dword [ebp + 8]
dec eax
jns 0x49a309
push 0x6f8
push 0x403f5fe
push 4
call fcn.0059e728
add esp, 0xc
pop ecx
pop ebx
cmp eax, ecx
jl 0x49a326
push 0x6f8
push 0x403f5fe
push 1
call fcn.0059e728
add esp, 0xc
shl eax, 2
add ebx, eax
mov ebx, dword [ebx]
mov ebx, dword [ebx + 0x20]
mov ebx, dword [ebx + 0xb8]
add ebx, 4
mov dword [ebp - 0x1c], ebx
mov ebx, dword [0x944f04]
call fcn.00402194
push ebx
push ecx
mov eax, dword [ebp + 8]
dec eax
jns 0x49a366
push 0x6f8
push 0x403f5fe
push 4
call fcn.0059e728
add esp, 0xc
pop ecx
pop ebx
cmp eax, ecx
jl 0x49a383
push 0x6f8
push 0x403f5fe
push 1
call fcn.0059e728
add esp, 0xc
shl eax, 2
add ebx, eax
mov ebx, dword [ebx]
mov ebx, dword [ebx + 0x20]
mov ebx, dword [ebx + 0x48]
call fcn.00402194
push ebx
push ecx
mov eax, dword [ebp - 0xc]
dec eax
jns 0x49a3b4
push 0x6f8
push 0x403f5fe
push 4
call fcn.0059e728
add esp, 0xc
pop ecx
pop ebx
cmp eax, ecx
jl 0x49a3d1
push 0x6f8
push 0x403f5fe
push 1
call fcn.0059e728
add esp, 0xc
shl eax, 2
add ebx, eax
mov ebx, dword [ebx]
add ebx, 0x10
mov dword [ebp - 0x20], ebx
mov ebx, dword [ebp - 0x1c]
fild dword [ebx]
fstp qword [ebp - 0x28]
fld qword [ebp - 0x28]
mov ebx, dword [ebp - 0x20]
fild dword [ebx]
fstp qword [ebp - 0x30]
fsub qword [ebp - 0x30]
fstp qword [ebp - 0x38]
fld qword [ebp - 0x38]
call fcn.00401596
mov ebx, dword [ebp - 0x18]
mov dword [ebx], eax
mov ebx, dword [0x944f04]
call fcn.00402194
push ebx
push ecx
mov eax, dword [ebp + 8]
dec eax
jns 0x49a42e
push 0x765
push 0x403f5fe
push 4
call fcn.0059e728
add esp, 0xc
pop ecx
pop ebx
cmp eax, ecx
jl 0x49a44b
push 0x765
push 0x403f5fe
push 1
call fcn.0059e728
add esp, 0xc
shl eax, 2
add ebx, eax
mov ebx, dword [ebx]
mov ebx, dword [ebx + 0x24]
mov ebx, dword [ebx]
mov dword [ebp - 0x18], ebx
mov ebx, dword [0x944f04]
call fcn.00402194
push ebx
push ecx
mov eax, dword [ebp + 8]
dec eax
jns 0x49a484
push 0x7a0
push 0x403f5fe
push 4
call fcn.0059e728
add esp, 0xc
pop ecx
pop ebx
cmp eax, ecx
jl 0x49a4a1
push 0x7a0
push 0x403f5fe
push 1
call fcn.0059e728
add esp, 0xc
shl eax, 2
add ebx, eax
mov ebx, dword [ebx]
mov ebx, dword [ebx + 0x24]
mov ebx, dword [ebx]
add ebx, 0xc
mov dword [ebp - 0x1c], ebx
push 0x80000301
push 0
mov ebx, dword [ebp - 0x1c]
push dword [ebx]
push 1
mov ebx, 0x5a0e90
call fcn.0059e73a
add esp, 0x10
mov dword [ebp - 0x20], eax
mov ebx, dword [0x944f04]
call fcn.00402194
push ebx
push ecx
mov eax, dword [ebp + 8]
dec eax
jns 0x49a4fe
push 0x7fd
push 0x403f5fe
push 4
call fcn.0059e728
add esp, 0xc
pop ecx
pop ebx
cmp eax, ecx
jl 0x49a51b
push 0x7fd
push 0x403f5fe
push 1
call fcn.0059e728
add esp, 0xc
shl eax, 2
add ebx, eax
mov ebx, dword [ebx]
mov ebx, dword [ebx + 0x24]
mov ebx, dword [ebx + 4]
add ebx, 0x1c
mov dword [ebp - 0x24], ebx
mov ebx, dword [0x944f04]
call fcn.00402194
push ebx
push ecx
mov eax, dword [ebp + 8]
dec eax
jns 0x49a558
push 0x7fd
push 0x403f5fe
push 4
call fcn.0059e728
add esp, 0xc
pop ecx
pop ebx
cmp eax, ecx
jl 0x49a575
push 0x7fd
push 0x403f5fe
push 1
call fcn.0059e728
add esp, 0xc
shl eax, 2
add ebx, eax
mov ebx, dword [ebx]
mov ebx, dword [ebx + 0x20]
mov ebx, dword [ebx + 0x48]
call fcn.00402194
push ebx
push ecx
mov eax, dword [ebp - 0xc]
dec eax
jns 0x49a5a6
push 0x7fd
push 0x403f5fe
push 4
call fcn.0059e728
add esp, 0xc
pop ecx
pop ebx
cmp eax, ecx
jl 0x49a5c3
push 0x7fd
push 0x403f5fe
push 1
call fcn.0059e728
add esp, 0xc
shl eax, 2
add ebx, eax
mov ebx, dword [ebx]
add ebx, 0x10
mov dword [ebp - 0x28], ebx
mov ebx, dword [ebp - 0x24]
fild dword [ebx]
fstp qword [ebp - 0x30]
fld qword [ebp - 0x30]
mov ebx, dword [ebp - 0x28]
fild dword [ebx]
fstp qword [ebp - 0x38]
fsub qword [ebp - 0x38]
fstp qword [ebp - 0x40]
push 0x80000601
push dword [ebp - 0x3c]
push dword [ebp - 0x40]
push 1
mov ebx, 0x5a0e90
call fcn.0059e73a
add esp, 0x10
mov dword [ebp - 0x44], eax
lea eax, [ebp - 0x44]
push eax
mov eax, str.phy_power
mov dword [ebp - 0x48], eax
lea eax, [ebp - 0x48]
push eax
lea eax, [ebp - 0x20]
push eax
push dword [ebp - 0x18]
call fcn.00411d62
mov ebx, dword [ebp - 0x20]
test ebx, ebx
je 0x49a635
push ebx
call fcn.0059e734
add esp, 4
mov ebx, dword [ebp - 0x48]
test ebx, ebx
je 0x49a645
push ebx
call fcn.0059e734
add esp, 4
mov ebx, dword [ebp - 0x44]
test ebx, ebx
je 0x49a655
push ebx
call fcn.0059e734
add esp, 4
jmp 0x49daff
mov ebx, dword [0x944f04]
call fcn.00402194
push ebx
push ecx
mov eax, dword [ebp + 8]
dec eax
jns 0x49a684
push 0x890
push 0x403f5fe
push 4
call fcn.0059e728
add esp, 0xc
pop ecx
pop ebx
cmp eax, ecx
jl 0x49a6a1
push 0x890
push 0x403f5fe
push 1
call fcn.0059e728
add esp, 0xc
shl eax, 2
add ebx, eax
mov ebx, dword [ebx]
mov ebx, dword [ebx + 0x20]
mov ebx, dword [ebx + 0x48]
call fcn.00402194
push ebx
push ecx
mov eax, dword [ebp - 0xc]
dec eax
jns 0x49a6d2
push 0x890
push 0x403f5fe
push 4
call fcn.0059e728
add esp, 0xc
pop ecx
pop ebx
cmp eax, ecx
jl 0x49a6ef
push 0x890
push 0x403f5fe
push 1
call fcn.0059e728
add esp, 0xc
shl eax, 2
add ebx, eax
mov ebx, dword [ebx]
add ebx, 0x1c
mov dword [ebp - 0x4c], ebx
mov ebx, dword [ebp - 0x4c]
cmp dword [ebx], 9
jne 0x49a772
mov ebx, dword [0x944f04]
call fcn.00402194
push ebx
push ecx
mov eax, dword [ebp + 8]
dec eax
jns 0x49a732
push 0x8d8
push 0x403f5fe
push 4
call fcn.0059e728
add esp, 0xc
pop ecx
pop ebx
cmp eax, ecx
jl 0x49a74f
push 0x8d8
push 0x403f5fe
push 1
call fcn.0059e728
add esp, 0xc
shl eax, 2
add ebx, eax
mov ebx, dword [ebx]
mov ebx, dword [ebx + 0x20]
add ebx, 0x50
mov dword [ebp - 0x54], ebx
mov ebx, dword [ebp - 0x54]
cmp byte [ebx], 0
jne 0x49a772
mov eax, 1
jmp 0x49a777
mov eax, 0
test eax, eax
je 0x49acd1
mov eax, str.4D5A00000000000000106001096D61675F706F776572
mov dword [ebp - 0x18], eax
lea eax, [ebp - 0x18]
push eax
call fcn.0040cab0
mov dword [ebp - 0x1c], eax
mov ebx, dword [ebp - 0x18]
test ebx, ebx
je 0x49a7a3
push ebx
call fcn.0059e734
add esp, 4
mov ebx, dword [0x944f04]
call fcn.00402194
push ebx
push ecx
mov eax, dword [ebp + 8]
dec eax
jns 0x49a7cd
push 0x9bc
push 0x403f5fe
push 4
call fcn.0059e728
add esp, 0xc
pop ecx
pop ebx
cmp eax, ecx
jl 0x49a7ea
push 0x9bc
push 0x403f5fe
push 1
call fcn.0059e728
add esp, 0xc
shl eax, 2
add ebx, eax
mov ebx, dword [ebx]
mov ebx, dword [ebx + 0x20]
mov ebx, dword [ebx + 0x48]
call fcn.00402194
push ebx
push ecx
mov eax, dword [ebp - 0xc]
dec eax
jns 0x49a81b
push 0x9bc
push 0x403f5fe
push 4
call fcn.0059e728
add esp, 0xc
pop ecx
pop ebx
cmp eax, ecx
jl 0x49a838
push 0x9bc
push 0x403f5fe
push 1
call fcn.0059e728
add esp, 0xc
shl eax, 2
add ebx, eax
mov ebx, dword [ebx]
add ebx, 0x10
mov dword [ebp - 0x20], ebx
mov ebx, dword [ebp - 0x20]
fild dword [ebx]
fstp qword [ebp - 0x28]
fld qword [ebp - 0x28]
fchs
fstp qword [ebp - 0x30]
push 0x80000601
push dword [ebp - 0x2c]
push dword [ebp - 0x30]
push 1
mov ebx, 0x59f8d0
call fcn.0059e73a
add esp, 0x10
push 0x80000301
push 0
push eax
push 1
mov ebx, 0x5a01a0
call fcn.0059e73a
add esp, 0x10
mov dword [ebp - 0x38], eax
lea eax, [ebp - 0x38]
push eax
call fcn.00431565
mov dword [ebp - 0x3c], eax
mov ebx, dword [ebp - 0x38]
test ebx, ebx
je 0x49a8ab
push ebx
call fcn.0059e734
add esp, 4
push dword [ebp - 0x3c]
push dword [ebp - 0x1c]
mov ecx, 2
call fcn.00402e44
add esp, 8
mov dword [ebp - 0x40], eax
mov ebx, dword [ebp - 0x1c]
test ebx, ebx
je 0x49a8d1
push ebx
call fcn.0059e734
add esp, 4
mov ebx, dword [ebp - 0x3c]
test ebx, ebx
je 0x49a8e1
push ebx
call fcn.0059e734
add esp, 4
mov eax, dword [ebp - 0x40]
push eax
mov ebx, dword [ebp - 0x14]
test ebx, ebx
je 0x49a8f5
push ebx
call fcn.0059e734
add esp, 4
pop eax
mov dword [ebp - 0x14], eax
mov ebx, dword [0x944f04]
call fcn.00402194
push ebx
push ecx
mov eax, dword [ebp + 8]
dec eax
jns 0x49a923
push 0xa04
push 0x403f5fe
push 4
call fcn.0059e728
add esp, 0xc
pop ecx
pop ebx
cmp eax, ecx
jl 0x49a940
push 0xa04
push 0x403f5fe
push 1
call fcn.0059e728
add esp, 0xc
shl eax, 2
add ebx, eax
mov ebx, dword [ebx]
mov ebx, dword [ebx + 0x20]
mov ebx, dword [ebx + 0xb8]
add ebx, 8
mov dword [ebp - 0x18], ebx
mov ebx, dword [0x944f04]
call fcn.00402194
push ebx
push ecx
mov eax, dword [ebp + 8]
dec eax
jns 0x49a980
push 0xa3f
push 0x403f5fe
push 4
call fcn.0059e728
add esp, 0xc
pop ecx
pop ebx
cmp eax, ecx
jl 0x49a99d
push 0xa3f
push 0x403f5fe
push 1
call fcn.0059e728
add esp, 0xc
shl eax, 2
add ebx, eax
mov ebx, dword [ebx]
mov ebx, dword [ebx + 0x20]
mov ebx, dword [ebx + 0xb8]
add ebx, 8
mov dword [ebp - 0x1c], ebx
mov ebx, dword [0x944f04]
call fcn.00402194
push ebx
push ecx
mov eax, dword [ebp + 8]
dec eax
jns 0x49a9dd
push 0xa3f
push 0x403f5fe
push 4
call fcn.0059e728
add esp, 0xc
pop ecx
pop ebx
cmp eax, ecx
jl 0x49a9fa
push 0xa3f
push 0x403f5fe
push 1
call fcn.0059e728
add esp, 0xc
shl eax, 2
add ebx, eax
mov ebx, dword [ebx]
mov ebx, dword [ebx + 0x20]
mov ebx, dword [ebx + 0x48]
call fcn.00402194
push ebx
push ecx
mov eax, dword [ebp - 0xc]
dec eax
jns 0x49aa2b
push 0xa3f
push 0x403f5fe
push 4
call fcn.0059e728
add esp, 0xc
pop ecx
pop ebx
cmp eax, ecx
jl 0x49aa48
push 0xa3f
push 0x403f5fe
push 1
call fcn.0059e728
add esp, 0xc
shl eax, 2
add ebx, eax
mov ebx, dword [ebx]
add ebx, 0x10
mov dword [ebp - 0x20], ebx
mov ebx, dword [ebp - 0x1c]
fild dword [ebx]
fstp qword [ebp - 0x28]
fld qword [ebp - 0x28]
mov ebx, dword [ebp - 0x20]
fild dword [ebx]
fstp qword [ebp - 0x30]
fsub qword [ebp - 0x30]
fstp qword [ebp - 0x38]
fld qword [ebp - 0x38]
call fcn.00401596
mov ebx, dword [ebp - 0x18]
mov dword [ebx], eax
mov ebx, dword [0x944f04]
call fcn.00402194
push ebx
push ecx
mov eax, dword [ebp + 8]
dec eax
jns 0x49aaa5
push 0xaac
push 0x403f5fe
push 4
call fcn.0059e728
add esp, 0xc
pop ecx
pop ebx
cmp eax, ecx
jl 0x49aac2
push 0xaac
push 0x403f5fe
push 1
call fcn.0059e728
add esp, 0xc
shl eax, 2
add ebx, eax
mov ebx, dword [ebx]
mov ebx, dword [ebx + 0x24]
mov ebx, dword [ebx]
mov dword [ebp - 0x18], ebx
mov ebx, dword [0x944f04]
call fcn.00402194
push ebx
push ecx
mov eax, dword [ebp + 8]
dec eax
jns 0x49aafb
push 0xae7
push 0x403f5fe
push 4
call fcn.0059e728
add esp, 0xc
pop ecx
pop ebx
cmp eax, ecx
jl 0x49ab18
push 0xae7
push 0x403f5fe
push 1
call fcn.0059e728
add esp, 0xc
shl eax, 2
add ebx, eax
mov ebx, dword [ebx]
mov ebx, dword [ebx + 0x24]
mov ebx, dword [ebx]
add ebx, 0xc
mov dword [ebp - 0x1c], ebx
push 0x80000301
push 0
mov ebx, dword [ebp - 0x1c]
push dword [ebx]
push 1
mov ebx, 0x5a0e90
call fcn.0059e73a
add esp, 0x10
mov dword [ebp - 0x20], eax
mov ebx, dword [0x944f04]
call fcn.00402194
push ebx
push ecx
mov eax, dword [ebp + 8]
dec eax
jns 0x49ab75
push 0xb44
push 0x403f5fe
push 4
call fcn.0059e728
add esp, 0xc
pop ecx
pop ebx
cmp eax, ecx
jl 0x49ab92
push 0xb44
push 0x403f5fe
push 1
call fcn.0059e728
add esp, 0xc
shl eax, 2
add ebx, eax
mov ebx, dword [ebx]
mov ebx, dword [ebx + 0x24]
mov ebx, dword [ebx + 4]
add ebx, 0x20
mov dword [ebp - 0x24], ebx
mov ebx, dword [0x944f04]
call fcn.00402194
push ebx
push ecx
mov eax, dword [ebp + 8]
dec eax
jns 0x49abcf
push 0xb44
push 0x403f5fe
push 4
call fcn.0059e728
add esp, 0xc
pop ecx
pop ebx
cmp eax, ecx
jl 0x49abec
push 0xb44
push 0x403f5fe
push 1
call fcn.0059e728
add esp, 0xc
shl eax, 2
add ebx, eax
mov ebx, dword [ebx]
mov ebx, dword [ebx + 0x20]
mov ebx, dword [ebx + 0x48]
call fcn.00402194
push ebx
push ecx
mov eax, dword [ebp - 0xc]
dec eax
jns 0x49ac1d
push 0xb44
push 0x403f5fe
push 4
call fcn.0059e728
add esp, 0xc
pop ecx
pop ebx
cmp eax, ecx
jl 0x49ac3a
push 0xb44
push 0x403f5fe
push 1
call fcn.0059e728
add esp, 0xc
shl eax, 2
add ebx, eax
mov ebx, dword [ebx]
add ebx, 0x10
mov dword [ebp - 0x28], ebx
mov ebx, dword [ebp - 0x24]
fild dword [ebx]
fstp qword [ebp - 0x30]
fld qword [ebp - 0x30]
mov ebx, dword [ebp - 0x28]
fild dword [ebx]
fstp qword [ebp - 0x38]
fsub qword [ebp - 0x38]
fstp qword [ebp - 0x40]
push 0x80000601
push dword [ebp - 0x3c]
push dword [ebp - 0x40]
push 1
mov ebx, 0x5a0e90
call fcn.0059e73a
add esp, 0x10
mov dword [ebp - 0x44], eax
lea eax, [ebp - 0x44]
push eax
mov eax, str.mag_power
mov dword [ebp - 0x48], eax
lea eax, [ebp - 0x48]
push eax
lea eax, [ebp - 0x20]
push eax
push dword [ebp - 0x18]
call fcn.00411d62
mov ebx, dword [ebp - 0x20]
test ebx, ebx
je 0x49acac
push ebx
call fcn.0059e734
add esp, 4
mov ebx, dword [ebp - 0x48]
test ebx, ebx
je 0x49acbc
push ebx
call fcn.0059e734
add esp, 4
mov ebx, dword [ebp - 0x44]
test ebx, ebx
je 0x49accc
push ebx
call fcn.0059e734
add esp, 4
jmp 0x49daff
mov ebx, dword [0x944f04]
call fcn.00402194
push ebx
push ecx
mov eax, dword [ebp + 8]
dec eax
jns 0x49acfb
push 0xbd7
push 0x403f5fe
push 4
call fcn.0059e728
add esp, 0xc
pop ecx
pop ebx
cmp eax, ecx
jl 0x49ad18
push 0xbd7
push 0x403f5fe
push 1
call fcn.0059e728
add esp, 0xc
shl eax, 2
add ebx, eax
mov ebx, dword [ebx]
mov ebx, dword [ebx + 0x20]
mov ebx, dword [ebx + 0x48]
call fcn.00402194
push ebx
push ecx
mov eax, dword [ebp - 0xc]
dec eax
jns 0x49ad49
push 0xbd7
push 0x403f5fe
push 4
call fcn.0059e728
add esp, 0xc
pop ecx
pop ebx
cmp eax, ecx
jl 0x49ad66
push 0xbd7
push 0x403f5fe
push 1
call fcn.0059e728
add esp, 0xc
shl eax, 2
add ebx, eax
mov ebx, dword [ebx]
add ebx, 0x1c
mov dword [ebp - 0x4c], ebx
mov ebx, dword [ebp - 0x4c]
cmp dword [ebx], 0xe
jne 0x49ade9
mov ebx, dword [0x944f04]
call fcn.00402194
push ebx
push ecx
mov eax, dword [ebp + 8]
dec eax
jns 0x49ada9
push 0xc1f
push 0x403f5fe
push 4
call fcn.0059e728
add esp, 0xc
pop ecx
pop ebx
cmp eax, ecx
jl 0x49adc6
push 0xc1f
push 0x403f5fe
push 1
call fcn.0059e728
add esp, 0xc
shl eax, 2
add ebx, eax
mov ebx, dword [ebx]
mov ebx, dword [ebx + 0x20]
add ebx, 0x54
mov dword [ebp - 0x54], ebx
mov ebx, dword [ebp - 0x54]
cmp byte [ebx], 0
jne 0x49ade9
mov eax, 1
jmp 0x49adee
mov eax, 0
test eax, eax
je 0x49b1ce
mov ebx, dword [0x944f04]
call fcn.00402194
push ebx
push ecx
mov eax, dword [ebp + 8]
dec eax
jns 0x49ae20
push 0xc5d
push 0x403f5fe
push 4
call fcn.0059e728
add esp, 0xc
pop ecx
pop ebx
cmp eax, ecx
jl 0x49ae3d
push 0xc5d
push 0x403f5fe
push 1
call fcn.0059e728
add esp, 0xc
shl eax, 2
add ebx, eax
mov ebx, dword [ebx]
mov ebx, dword [ebx + 0x20]
mov ebx, dword [ebx + 0xb8]
add ebx, 0xc
mov dword [ebp - 0x18], ebx
mov ebx, dword [0x944f04]
call fcn.00402194
push ebx
push ecx
mov eax, dword [ebp + 8]
dec eax
jns 0x49ae7d
push 0xc98
push 0x403f5fe
push 4
call fcn.0059e728
add esp, 0xc
pop ecx
pop ebx
cmp eax, ecx
jl 0x49ae9a
push 0xc98
push 0x403f5fe
push 1
call fcn.0059e728
add esp, 0xc
shl eax, 2
add ebx, eax
mov ebx, dword [ebx]
mov ebx, dword [ebx + 0x20]
mov ebx, dword [ebx + 0xb8]
add ebx, 0xc
mov dword [ebp - 0x1c], ebx
mov ebx, dword [0x944f04]
call fcn.00402194
push ebx
push ecx
mov eax, dword [ebp + 8]
dec eax
jns 0x49aeda
push 0xc98
push 0x403f5fe
push 4
call fcn.0059e728
add esp, 0xc
pop ecx
pop ebx
cmp eax, ecx
jl 0x49aef7
push 0xc98
push 0x403f5fe
push 1
call fcn.0059e728
add esp, 0xc
shl eax, 2
add ebx, eax
mov ebx, dword [ebx]
mov ebx, dword [ebx + 0x20]
mov ebx, dword [ebx + 0x48]
call fcn.00402194
push ebx
push ecx
mov eax, dword [ebp - 0xc]
dec eax
jns 0x49af28
push 0xc98
push 0x403f5fe
push 4
call fcn.0059e728
add esp, 0xc
pop ecx
pop ebx
cmp eax, ecx
jl 0x49af45
push 0xc98
push 0x403f5fe
push 1
call fcn.0059e728
add esp, 0xc
shl eax, 2
add ebx, eax
mov ebx, dword [ebx]
add ebx, 0x10
mov dword [ebp - 0x20], ebx
mov ebx, dword [ebp - 0x1c]
fild dword [ebx]
fstp qword [ebp - 0x28]
fld qword [ebp - 0x28]
mov ebx, dword [ebp - 0x20]
fild dword [ebx]
fstp qword [ebp - 0x30]
fsub qword [ebp - 0x30]
fstp qword [ebp - 0x38]
fld qword [ebp - 0x38]
call fcn.00401596
mov ebx, dword [ebp - 0x18]
mov dword [ebx], eax
mov ebx, dword [0x944f04]
call fcn.00402194
push ebx
push ecx
mov eax, dword [ebp + 8]
dec eax
jns 0x49afa2
push 0xd05
push 0x403f5fe
push 4
call fcn.0059e728
add esp, 0xc
pop ecx
pop ebx
cmp eax, ecx
jl 0x49afbf
push 0xd05
push 0x403f5fe
push 1
call fcn.0059e728
add esp, 0xc
shl eax, 2
add ebx, eax
mov ebx, dword [ebx]
mov ebx, dword [ebx + 0x24]
mov ebx, dword [ebx]
mov dword [ebp - 0x18], ebx
mov ebx, dword [0x944f04]
call fcn.00402194
push ebx
push ecx
mov eax, dword [ebp + 8]
dec eax
jns 0x49aff8
push 0xd40
push 0x403f5fe
push 4
call fcn.0059e728
add esp, 0xc
pop ecx
pop ebx
cmp eax, ecx
jl 0x49b015
push 0xd40
push 0x403f5fe
push 1
call fcn.0059e728
add esp, 0xc
shl eax, 2
add ebx, eax
mov ebx, dword [ebx]
mov ebx, dword [ebx + 0x24]
mov ebx, dword [ebx]
add ebx, 0xc
mov dword [ebp - 0x1c], ebx
push 0x80000301
push 0
mov ebx, dword [ebp - 0x1c]
push dword [ebx]
push 1
mov ebx, 0x5a0e90
call fcn.0059e73a
add esp, 0x10
mov dword [ebp - 0x20], eax
mov ebx, dword [0x944f04]
call fcn.00402194
push ebx
push ecx
mov eax, dword [ebp + 8]
dec eax
jns 0x49b072
push 0xd9c
push 0x403f5fe
push 4
call fcn.0059e728
add esp, 0xc
pop ecx
pop ebx
cmp eax, ecx
jl 0x49b08f
push 0xd9c
push 0x403f5fe
push 1
call fcn.0059e728
add esp, 0xc
shl eax, 2
add ebx, eax
mov ebx, dword [ebx]
mov ebx, dword [ebx + 0x24]
mov ebx, dword [ebx + 4]
add ebx, 0x24
mov dword [ebp - 0x24], ebx
mov ebx, dword [0x944f04]
call fcn.00402194
push ebx
push ecx
mov eax, dword [ebp + 8]
dec eax
jns 0x49b0cc
push 0xd9c
push 0x403f5fe
push 4
call fcn.0059e728
add esp, 0xc
pop ecx
pop ebx
cmp eax, ecx
jl 0x49b0e9
push 0xd9c
push 0x403f5fe
push 1
call fcn.0059e728
add esp, 0xc
shl eax, 2
add ebx, eax
mov ebx, dword [ebx]
mov ebx, dword [ebx + 0x20]
mov ebx, dword [ebx + 0x48]
call fcn.00402194
push ebx
push ecx
mov eax, dword [ebp - 0xc]
dec eax
jns 0x49b11a
push 0xd9c
push 0x403f5fe
push 4
call fcn.0059e728
add esp, 0xc
pop ecx
pop ebx
cmp eax, ecx
jl 0x49b137
push 0xd9c
push 0x403f5fe
push 1
call fcn.0059e728
add esp, 0xc
shl eax, 2
add ebx, eax
mov ebx, dword [ebx]
add ebx, 0x10
mov dword [ebp - 0x28], ebx
mov ebx, dword [ebp - 0x24]
fild dword [ebx]
fstp qword [ebp - 0x30]
fld qword [ebp - 0x30]
mov ebx, dword [ebp - 0x28]
fild dword [ebx]
fstp qword [ebp - 0x38]
fsub qword [ebp - 0x38]
fstp qword [ebp - 0x40]
push 0x80000601
push dword [ebp - 0x3c]
push dword [ebp - 0x40]
push 1
mov ebx, 0x5a0e90
call fcn.0059e73a
add esp, 0x10
mov dword [ebp - 0x44], eax
lea eax, [ebp - 0x44]
push eax
mov eax, str.max_life
mov dword [ebp - 0x48], eax
lea eax, [ebp - 0x48]
push eax
lea eax, [ebp - 0x20]
push eax
push dword [ebp - 0x18]
call fcn.00411d62
mov ebx, dword [ebp - 0x20]
test ebx, ebx
je 0x49b1a9
push ebx
call fcn.0059e734
add esp, 4
mov ebx, dword [ebp - 0x48]
test ebx, ebx
je 0x49b1b9
push ebx
call fcn.0059e734
add esp, 4
mov ebx, dword [ebp - 0x44]
test ebx, ebx
je 0x49b1c9
push ebx
call fcn.0059e734
add esp, 4
jmp 0x49daff
mov ebx, dword [0x944f04]
call fcn.00402194
push ebx
push ecx
mov eax, dword [ebp + 8]
dec eax
jns 0x49b1f8
push 0xe2f
push 0x403f5fe
push 4
call fcn.0059e728
add esp, 0xc
pop ecx
pop ebx
cmp eax, ecx
jl 0x49b215
push 0xe2f
push 0x403f5fe
push 1
call fcn.0059e728
add esp, 0xc
shl eax, 2
add ebx, eax
mov ebx, dword [ebx]
mov ebx, dword [ebx + 0x20]
mov ebx, dword [ebx + 0x48]
call fcn.00402194
push ebx
push ecx
mov eax, dword [ebp - 0xc]
dec eax
jns 0x49b246
push 0xe2f
push 0x403f5fe
push 4
call fcn.0059e728
add esp, 0xc
pop ecx
pop ebx
cmp eax, ecx
jl 0x49b263
push 0xe2f
push 0x403f5fe
push 1
call fcn.0059e728
add esp, 0xc
shl eax, 2
add ebx, eax
mov ebx, dword [ebx]
add ebx, 0x1c
mov dword [ebp - 0x4c], ebx
mov ebx, dword [ebp - 0x4c]
cmp dword [ebx], 0xd
jne 0x49b2e6
mov ebx, dword [0x944f04]
call fcn.00402194
push ebx
push ecx
mov eax, dword [ebp + 8]
dec eax
jns 0x49b2a6
push 0xe77
push 0x403f5fe
push 4
call fcn.0059e728
add esp, 0xc
pop ecx
pop ebx
cmp eax, ecx
jl 0x49b2c3
push 0xe77
push 0x403f5fe
push 1
call fcn.0059e728
add esp, 0xc
shl eax, 2
add ebx, eax
mov ebx, dword [ebx]
mov ebx, dword [ebx + 0x20]
add ebx, 0x58
mov dword [ebp - 0x54], ebx
mov ebx, dword [ebp - 0x54]
cmp byte [ebx], 0
jne 0x49b2e6
mov eax, 1
jmp 0x49b2eb
mov eax, 0
test eax, eax
je 0x49b845
mov eax, str.4D5A000000000000000A600103646566
mov dword [ebp - 0x18], eax
lea eax, [ebp - 0x18]
push eax
call fcn.0040cab0
mov dword [ebp - 0x1c], eax
mov ebx, dword [ebp - 0x18]
test ebx, ebx
je 0x49b317
push ebx
call fcn.0059e734
add esp, 4
mov ebx, dword [0x944f04]
call fcn.00402194
push ebx
push ecx
mov eax, dword [ebp + 8]
dec eax
jns 0x49b341
push 0xf4f
push 0x403f5fe
push 4
call fcn.0059e728
add esp, 0xc
pop ecx
pop ebx
cmp eax, ecx
jl 0x49b35e
push 0xf4f
push 0x403f5fe
push 1
call fcn.0059e728
add esp, 0xc
shl eax, 2
add ebx, eax
mov ebx, dword [ebx]
mov ebx, dword [ebx + 0x20]
mov ebx, dword [ebx + 0x48]
call fcn.00402194
push ebx
push ecx
mov eax, dword [ebp - 0xc]
dec eax
jns 0x49b38f
push 0xf4f
push 0x403f5fe
push 4
call fcn.0059e728
add esp, 0xc
pop ecx
pop ebx
cmp eax, ecx
jl 0x49b3ac
push 0xf4f
push 0x403f5fe
push 1
call fcn.0059e728
add esp, 0xc
shl eax, 2
add ebx, eax
mov ebx, dword [ebx]
add ebx, 0x10
mov dword [ebp - 0x20], ebx
mov ebx, dword [ebp - 0x20]
fild dword [ebx]
fstp qword [ebp - 0x28]
fld qword [ebp - 0x28]
fchs
fstp qword [ebp - 0x30]
push 0x80000601
push dword [ebp - 0x2c]
push dword [ebp - 0x30]
push 1
mov ebx, 0x59f8d0
call fcn.0059e73a
add esp, 0x10
push 0x80000301
push 0
push eax
push 1
mov ebx, 0x5a01a0
call fcn.0059e73a
add esp, 0x10
mov dword [ebp - 0x38], eax
lea eax, [ebp - 0x38]
push eax
call fcn.00431565
mov dword [ebp - 0x3c], eax
mov ebx, dword [ebp - 0x38]
test ebx, ebx
je 0x49b41f
push ebx
call fcn.0059e734
add esp, 4
push dword [ebp - 0x3c]
push dword [ebp - 0x1c]
mov ecx, 2
call fcn.00402e44
add esp, 8
mov dword [ebp - 0x40], eax
mov ebx, dword [ebp - 0x1c]
test ebx, ebx
je 0x49b445
push ebx
call fcn.0059e734
add esp, 4
mov ebx, dword [ebp - 0x3c]
test ebx, ebx
je 0x49b455
push ebx
call fcn.0059e734
add esp, 4
mov eax, dword [ebp - 0x40]
push eax
mov ebx, dword [ebp - 0x14]
test ebx, ebx
je 0x49b469
push ebx
call fcn.0059e734
add esp, 4
pop eax
mov dword [ebp - 0x14], eax
mov ebx, dword [0x944f04]
call fcn.00402194
push ebx
push ecx
mov eax, dword [ebp + 8]
dec eax
jns 0x49b497
push 0xf97
push 0x403f5fe
push 4
call fcn.0059e728
add esp, 0xc
pop ecx
pop ebx
cmp eax, ecx
jl 0x49b4b4
push 0xf97
push 0x403f5fe
push 1
call fcn.0059e728
add esp, 0xc
shl eax, 2
add ebx, eax
mov ebx, dword [ebx]
mov ebx, dword [ebx + 0x20]
mov ebx, dword [ebx + 0xb8]
add ebx, 0x10
mov dword [ebp - 0x18], ebx
mov ebx, dword [0x944f04]
call fcn.00402194
push ebx
push ecx
mov eax, dword [ebp + 8]
dec eax
jns 0x49b4f4
push 0xfd2
push 0x403f5fe
push 4
call fcn.0059e728
add esp, 0xc
pop ecx
pop ebx
cmp eax, ecx
jl 0x49b511
push 0xfd2
push 0x403f5fe
push 1
call fcn.0059e728
add esp, 0xc
shl eax, 2
add ebx, eax
mov ebx, dword [ebx]
mov ebx, dword [ebx + 0x20]
mov ebx, dword [ebx + 0xb8]
add ebx, 0x10
mov dword [ebp - 0x1c], ebx
mov ebx, dword [0x944f04]
call fcn.00402194
push ebx
push ecx
mov eax, dword [ebp + 8]
dec eax
jns 0x49b551
push 0xfd2
push 0x403f5fe
push 4
call fcn.0059e728
add esp, 0xc
pop ecx
pop ebx
cmp eax, ecx
jl 0x49b56e
push 0xfd2
push 0x403f5fe
push 1
call fcn.0059e728
add esp, 0xc
shl eax, 2
add ebx, eax
mov ebx, dword [ebx]
mov ebx, dword [ebx + 0x20]
mov ebx, dword [ebx + 0x48]
call fcn.00402194
push ebx
push ecx
mov eax, dword [ebp - 0xc]
dec eax
jns 0x49b59f
push 0xfd2
push 0x403f5fe
push 4
call fcn.0059e728
add esp, 0xc
pop ecx
pop ebx
cmp eax, ecx
jl 0x49b5bc
push 0xfd2
push 0x403f5fe
push 1
call fcn.0059e728
add esp, 0xc
shl eax, 2
add ebx, eax
mov ebx, dword [ebx]
add ebx, 0x10
mov dword [ebp - 0x20], ebx
mov ebx, dword [ebp - 0x1c]
fild dword [ebx]
fstp qword [ebp - 0x28]
fld qword [ebp - 0x28]
mov ebx, dword [ebp - 0x20]
fild dword [ebx]
fstp qword [ebp - 0x30]
fsub qword [ebp - 0x30]
fstp qword [ebp - 0x38]
fld qword [ebp - 0x38]
call fcn.00401596
mov ebx, dword [ebp - 0x18]
mov dword [ebx], eax
mov ebx, dword [0x944f04]
call fcn.00402194
push ebx
push ecx
mov eax, dword [ebp + 8]
dec eax
jns 0x49b619
push 0x103f
push 0x403f5fe
push 4
call fcn.0059e728
add esp, 0xc
pop ecx
pop ebx
cmp eax, ecx
jl 0x49b636
push 0x103f
push 0x403f5fe
push 1
call fcn.0059e728
add esp, 0xc
shl eax, 2
add ebx, eax
mov ebx, dword [ebx]
mov ebx, dword [ebx + 0x24]
mov ebx, dword [ebx]
mov dword [ebp - 0x18], ebx
mov ebx, dword [0x944f04]
call fcn.00402194
push ebx
push ecx
mov eax, dword [ebp + 8]
dec eax
jns 0x49b66f
push 0x107a
push 0x403f5fe
push 4
call fcn.0059e728
add esp, 0xc
pop ecx
pop ebx
cmp eax, ecx
jl 0x49b68c
push 0x107a
push 0x403f5fe
push 1
call fcn.0059e728
add esp, 0xc
shl eax, 2
add ebx, eax
mov ebx, dword [ebx]
mov ebx, dword [ebx + 0x24]
mov ebx, dword [ebx]
add ebx, 0xc
mov dword [ebp - 0x1c], ebx
push 0x80000301
push 0
mov ebx, dword [ebp - 0x1c]
push dword [ebx]
push 1
mov ebx, 0x5a0e90
call fcn.0059e73a
add esp, 0x10
mov dword [ebp - 0x20], eax
mov ebx, dword [0x944f04]
call fcn.00402194
push ebx
push ecx
mov eax, dword [ebp + 8]
dec eax
jns 0x49b6e9
push 0x10d1
push 0x403f5fe
push 4
call fcn.0059e728
add esp, 0xc
pop ecx
pop ebx
cmp eax, ecx
jl 0x49b706
push 0x10d1
push 0x403f5fe
push 1
call fcn.0059e728
add esp, 0xc
shl eax, 2
add ebx, eax
mov ebx, dword [ebx]
mov ebx, dword [ebx + 0x24]
mov ebx, dword [ebx + 4]
add ebx, 0x2c
mov dword [ebp - 0x24], ebx
mov ebx, dword [0x944f04]
call fcn.00402194
push ebx
push ecx
mov eax, dword [ebp + 8]
dec eax
jns 0x49b743
push 0x10d1
push 0x403f5fe
push 4
call fcn.0059e728
add esp, 0xc
pop ecx
pop ebx
cmp eax, ecx
jl 0x49b760
push 0x10d1
push 0x403f5fe
push 1
call fcn.0059e728
add esp, 0xc
shl eax, 2
add ebx, eax
mov ebx, dword [ebx]
mov ebx, dword [ebx + 0x20]
mov ebx, dword [ebx + 0x48]
call fcn.00402194
push ebx
push ecx
mov eax, dword [ebp - 0xc]
dec eax
jns 0x49b791
push 0x10d1
push 0x403f5fe
push 4
call fcn.0059e728
add esp, 0xc
pop ecx
pop ebx
cmp eax, ecx
jl 0x49b7ae
push 0x10d1
push 0x403f5fe
push 1
call fcn.0059e728
add esp, 0xc
shl eax, 2
add ebx, eax
mov ebx, dword [ebx]
add ebx, 0x10
mov dword [ebp - 0x28], ebx
mov ebx, dword [ebp - 0x24]
fild dword [ebx]
fstp qword [ebp - 0x30]
fld qword [ebp - 0x30]
mov ebx, dword [ebp - 0x28]
fild dword [ebx]
fstp qword [ebp - 0x38]
fsub qword [ebp - 0x38]
fstp qword [ebp - 0x40]
push 0x80000601
push dword [ebp - 0x3c]
push dword [ebp - 0x40]
push 1
mov ebx, 0x5a0e90
call fcn.0059e73a
add esp, 0x10
mov dword [ebp - 0x44], eax
lea eax, [ebp - 0x44]
push eax
mov eax, 0x79b546
mov dword [ebp - 0x48], eax
lea eax, [ebp - 0x48]
push eax
lea eax, [ebp - 0x20]
push eax
push dword [ebp - 0x18]
call fcn.00411d62
mov ebx, dword [ebp - 0x20]
test ebx, ebx
je 0x49b820
push ebx
call fcn.0059e734
add esp, 4
mov ebx, dword [ebp - 0x48]
test ebx, ebx
je 0x49b830
push ebx
call fcn.0059e734
add esp, 4
mov ebx, dword [ebp - 0x44]
test ebx, ebx
je 0x49b840
push ebx
call fcn.0059e734
add esp, 4
jmp 0x49daff
mov ebx, dword [0x944f04]
call fcn.00402194
push ebx
push ecx
mov eax, dword [ebp + 8]
dec eax
jns 0x49b86f
push 0x1164
push 0x403f5fe
push 4
call fcn.0059e728
add esp, 0xc
pop ecx
pop ebx
cmp eax, ecx
jl 0x49b88c
push 0x1164
push 0x403f5fe
push 1
call fcn.0059e728
add esp, 0xc
shl eax, 2
add ebx, eax
mov ebx, dword [ebx]
mov ebx, dword [ebx + 0x20]
mov ebx, dword [ebx + 0x48]
call fcn.00402194
push ebx
push ecx
mov eax, dword [ebp - 0xc]
dec eax
jns 0x49b8bd
push 0x1164
push 0x403f5fe
push 4
call fcn.0059e728
add esp, 0xc
pop ecx
pop ebx
cmp eax, ecx
jl 0x49b8da
push 0x1164
push 0x403f5fe
push 1
call fcn.0059e728
add esp, 0xc
shl eax, 2
add ebx, eax
mov ebx, dword [ebx]
add ebx, 0x1c
mov dword [ebp - 0x4c], ebx
mov ebx, dword [ebp - 0x4c]
cmp dword [ebx], 0x13
jne 0x49b95d
mov ebx, dword [0x944f04]
call fcn.00402194
push ebx
push ecx
mov eax, dword [ebp + 8]
dec eax
jns 0x49b91d
push 0x11ac
push 0x403f5fe
push 4
call fcn.0059e728
add esp, 0xc
pop ecx
pop ebx
cmp eax, ecx
jl 0x49b93a
push 0x11ac
push 0x403f5fe
push 1
call fcn.0059e728
add esp, 0xc
shl eax, 2
add ebx, eax
mov ebx, dword [ebx]
mov ebx, dword [ebx + 0x20]
add ebx, 0x5c
mov dword [ebp - 0x54], ebx
mov ebx, dword [ebp - 0x54]
cmp byte [ebx], 0
jne 0x49b95d
mov eax, 1
jmp 0x49b962
mov eax, 0
test eax, eax
je 0x49becd
mov eax, str.4D5A000000000000000C6001057370656564
mov dword [ebp - 0x18], eax
lea eax, [ebp - 0x18]
push eax
call fcn.0040cab0
mov dword [ebp - 0x1c], eax
mov ebx, dword [ebp - 0x18]
test ebx, ebx
je 0x49b98e
push ebx
call fcn.0059e734
add esp, 4
mov ebx, dword [0x944f04]
call fcn.00402194
push ebx
push ecx
mov eax, dword [ebp + 8]
dec eax
jns 0x49b9b8
push 0x1288
push 0x403f5fe
push 4
call fcn.0059e728
add esp, 0xc
pop ecx
pop ebx
cmp eax, ecx
jl 0x49b9d5
push 0x1288
push 0x403f5fe
push 1
call fcn.0059e728
add esp, 0xc
shl eax, 2
add ebx, eax
mov ebx, dword [ebx]
mov ebx, dword [ebx + 0x20]
mov ebx, dword [ebx + 0x48]
call fcn.00402194
push ebx
push ecx
mov eax, dword [ebp - 0xc]
dec eax
jns 0x49ba06
push 0x1288
push 0x403f5fe
push 4
call fcn.0059e728
add esp, 0xc
pop ecx
pop ebx
cmp eax, ecx
jl 0x49ba23
push 0x1288
push 0x403f5fe
push 1
call fcn.0059e728
add esp, 0xc
shl eax, 2
add ebx, eax
mov ebx, dword [ebx]
add ebx, 0x10
mov dword [ebp - 0x20], ebx
mov ebx, dword [ebp - 0x20]
fild dword [ebx]
fstp qword [ebp - 0x28]
fld qword [ebp - 0x28]
fchs
fstp qword [ebp - 0x30]
push 0x80000601
push dword [ebp - 0x2c]
push dword [ebp - 0x30]
push 1
mov ebx, 0x59f8d0
call fcn.0059e73a
add esp, 0x10
push 0x80000301
push 0
push eax
push 1
mov ebx, 0x5a01a0
call fcn.0059e73a
add esp, 0x10
mov dword [ebp - 0x38], eax
lea eax, [ebp - 0x38]
push eax
call fcn.00431565
mov dword [ebp - 0x3c], eax
mov ebx, dword [ebp - 0x38]
test ebx, ebx
je 0x49ba96
push ebx
call fcn.0059e734
add esp, 4
push dword [ebp - 0x3c]
push dword [ebp - 0x1c]
mov ecx, 2
call fcn.00402e44
add esp, 8
mov dword [ebp - 0x40], eax
mov ebx, dword [ebp - 0x1c]
test ebx, ebx
je 0x49babc
push ebx
call fcn.0059e734
add esp, 4
mov ebx, dword [ebp - 0x3c]
test ebx, ebx
je 0x49bacc
push ebx
call fcn.0059e734
add esp, 4
mov eax, dword [ebp - 0x40]
push eax
mov ebx, dword [ebp - 0x14]
test ebx, ebx
je 0x49bae0
push ebx
call fcn.0059e734
add esp, 4
pop eax
mov dword [ebp - 0x14], eax
mov ebx, dword [0x944f04]
call fcn.00402194
push ebx
push ecx
mov eax, dword [ebp + 8]
dec eax
jns 0x49bb0e
push 0x12d0
push 0x403f5fe
push 4
call fcn.0059e728
add esp, 0xc
pop ecx
pop ebx
cmp eax, ecx
jl 0x49bb2b
push 0x12d0
push 0x403f5fe
push 1
call fcn.0059e728
add esp, 0xc
shl eax, 2
add ebx, eax
mov ebx, dword [ebx]
mov ebx, dword [ebx + 0x20]
mov ebx, dword [ebx + 0xb8]
add ebx, 0x14
mov dword [ebp - 0x18], ebx
mov ebx, dword [0x944f04]
call fcn.00402194
push ebx
push ecx
mov eax, dword [ebp + 8]
dec eax
jns 0x49bb6b
push 0x130b
push 0x403f5fe
push 4
call fcn.0059e728
add esp, 0xc
pop ecx
pop ebx
cmp eax, ecx
jl 0x49bb88
push 0x130b
push 0x403f5fe
push 1
call fcn.0059e728
add esp, 0xc
shl eax, 2
add ebx, eax
mov ebx, dword [ebx]
mov ebx, dword [ebx + 0x20]
mov ebx, dword [ebx + 0xb8]
add ebx, 0x14
mov dword [ebp - 0x1c], ebx
mov ebx, dword [0x944f04]
call fcn.00402194
push ebx
push ecx
mov eax, dword [ebp + 8]
dec eax
jns 0x49bbc8
push 0x130b
push 0x403f5fe
push 4
call fcn.0059e728
add esp, 0xc
pop ecx
pop ebx
cmp eax, ecx
jl 0x49bbe5
push 0x130b
push 0x403f5fe
push 1
call fcn.0059e728
add esp, 0xc
shl eax, 2
add ebx, eax
mov ebx, dword [ebx]
mov ebx, dword [ebx + 0x20]
mov ebx, dword [ebx + 0x48]
call fcn.00402194
push ebx
push ecx
mov eax, dword [ebp - 0xc]
dec eax
jns 0x49bc16
push 0x130b
push 0x403f5fe
push 4
call fcn.0059e728
add esp, 0xc
pop ecx
pop ebx
cmp eax, ecx
jl 0x49bc33
push 0x130b
push 0x403f5fe
push 1
call fcn.0059e728
add esp, 0xc
shl eax, 2
add ebx, eax
mov ebx, dword [ebx]
add ebx, 0x10
mov dword [ebp - 0x20], ebx
mov ebx, dword [ebp - 0x1c]
mov ax, word [ebx]
cwde
mov dword [ebp - 0x28], eax
fild dword [ebp - 0x28]
fstp qword [ebp - 0x28]
fld qword [ebp - 0x28]
mov ebx, dword [ebp - 0x20]
fild dword [ebx]
fstp qword [ebp - 0x30]
fsub qword [ebp - 0x30]
fstp qword [ebp - 0x38]
fld qword [ebp - 0x38]
call fcn.00401596
mov ebx, dword [ebp - 0x18]
mov word [ebx], ax
mov ebx, dword [0x944f04]
call fcn.00402194
push ebx
push ecx
mov eax, dword [ebp + 8]
dec eax
jns 0x49bc99
push 0x1378
push 0x403f5fe
push 4
call fcn.0059e728
add esp, 0xc
pop ecx
pop ebx
cmp eax, ecx
jl 0x49bcb6
push 0x1378
push 0x403f5fe
push 1
call fcn.0059e728
add esp, 0xc
shl eax, 2
add ebx, eax
mov ebx, dword [ebx]
mov ebx, dword [ebx + 0x24]
mov ebx, dword [ebx]
mov dword [ebp - 0x18], ebx
mov ebx, dword [0x944f04]
call fcn.00402194
push ebx
push ecx
mov eax, dword [ebp + 8]
dec eax
jns 0x49bcef
push 0x13b3
push 0x403f5fe
push 4
call fcn.0059e728
add esp, 0xc
pop ecx
pop ebx
cmp eax, ecx
jl 0x49bd0c
push 0x13b3
push 0x403f5fe
push 1
call fcn.0059e728
add esp, 0xc
shl eax, 2
add ebx, eax
mov ebx, dword [ebx]
mov ebx, dword [ebx + 0x24]
mov ebx, dword [ebx]
add ebx, 0xc
mov dword [ebp - 0x1c], ebx
push 0x80000301
push 0
mov ebx, dword [ebp - 0x1c]
push dword [ebx]
push 1
mov ebx, 0x5a0e90
call fcn.0059e73a
add esp, 0x10
mov dword [ebp - 0x20], eax
mov ebx, dword [0x944f04]
call fcn.00402194
push ebx
push ecx
mov eax, dword [ebp + 8]
dec eax
jns 0x49bd69
push 0x140c
push 0x403f5fe
push 4
call fcn.0059e728
add esp, 0xc
pop ecx
pop ebx
cmp eax, ecx
jl 0x49bd86
push 0x140c
push 0x403f5fe
push 1
call fcn.0059e728
add esp, 0xc
shl eax, 2
add ebx, eax
mov ebx, dword [ebx]
mov ebx, dword [ebx + 0x24]
mov ebx, dword [ebx + 4]
add ebx, 0x30
mov dword [ebp - 0x24], ebx
mov ebx, dword [0x944f04]
call fcn.00402194
push ebx
push ecx
mov eax, dword [ebp + 8]
dec eax
jns 0x49bdc3
push 0x140c
push 0x403f5fe
push 4
call fcn.0059e728
add esp, 0xc
pop ecx
pop ebx
cmp eax, ecx
jl 0x49bde0
push 0x140c
push 0x403f5fe
push 1
call fcn.0059e728
add esp, 0xc
shl eax, 2
add ebx, eax
mov ebx, dword [ebx]
mov ebx, dword [ebx + 0x20]
mov ebx, dword [ebx + 0x48]
call fcn.00402194
push ebx
push ecx
mov eax, dword [ebp - 0xc]
dec eax
jns 0x49be11
push 0x140c
push 0x403f5fe
push 4
call fcn.0059e728
add esp, 0xc
pop ecx
pop ebx
cmp eax, ecx
jl 0x49be2e
push 0x140c
push 0x403f5fe
push 1
call fcn.0059e728
add esp, 0xc
shl eax, 2
add ebx, eax
mov ebx, dword [ebx]
add ebx, 0x10
mov dword [ebp - 0x28], ebx
mov ebx, dword [ebp - 0x24]
mov ax, word [ebx]
cwde
mov dword [ebp - 0x30], eax
fild dword [ebp - 0x30]
fstp qword [ebp - 0x30]
fld qword [ebp - 0x30]
mov ebx, dword [ebp - 0x28]
fild dword [ebx]
fstp qword [ebp - 0x38]
fsub qword [ebp - 0x38]
fstp qword [ebp - 0x40]
push 0x80000601
push dword [ebp - 0x3c]
push dword [ebp - 0x40]
push 1
mov ebx, 0x5a0e90
call fcn.0059e73a
add esp, 0x10
mov dword [ebp - 0x44], eax
lea eax, [ebp - 0x44]
push eax
mov eax, str.speed
mov dword [ebp - 0x48], eax
lea eax, [ebp - 0x48]
push eax
lea eax, [ebp - 0x20]
push eax
push dword [ebp - 0x18]
call fcn.00411d62
mov ebx, dword [ebp - 0x20]
test ebx, ebx
je 0x49bea8
push ebx
call fcn.0059e734
add esp, 4
mov ebx, dword [ebp - 0x48]
test ebx, ebx
je 0x49beb8
push ebx
call fcn.0059e734
add esp, 4
mov ebx, dword [ebp - 0x44]
test ebx, ebx
je 0x49bec8
push ebx
call fcn.0059e734
add esp, 4
jmp 0x49daff
mov ebx, dword [0x944f04]
call fcn.00402194
push ebx
push ecx
mov eax, dword [ebp + 8]
dec eax
jns 0x49bef7
push 0x148d
push 0x403f5fe
push 4
call fcn.0059e728
add esp, 0xc
pop ecx
pop ebx
cmp eax, ecx
jl 0x49bf14
push 0x148d
push 0x403f5fe
push 1
call fcn.0059e728
add esp, 0xc
shl eax, 2
add ebx, eax
mov ebx, dword [ebx]
mov ebx, dword [ebx + 0x20]
mov ebx, dword [ebx + 0x48]
call fcn.00402194
push ebx
push ecx
mov eax, dword [ebp - 0xc]
dec eax
jns 0x49bf45
push 0x148d
push 0x403f5fe
push 4
call fcn.0059e728
add esp, 0xc
pop ecx
pop ebx
cmp eax, ecx
jl 0x49bf62
push 0x148d
push 0x403f5fe
push 1
call fcn.0059e728
add esp, 0xc
shl eax, 2
add ebx, eax
mov ebx, dword [ebx]
add ebx, 0x1c
mov dword [ebp - 0x4c], ebx
mov ebx, dword [ebp - 0x4c]
cmp dword [ebx], 0x11
jne 0x49c5e4
mov ebx, dword [0x944f04]
call fcn.00402194
push ebx
push ecx
mov eax, dword [ebp + 8]
dec eax
jns 0x49bfa5
push 0x14d6
push 0x403f5fe
push 4
call fcn.0059e728
add esp, 0xc
pop ecx
pop ebx
cmp eax, ecx
jl 0x49bfc2
push 0x14d6
push 0x403f5fe
push 1
call fcn.0059e728
add esp, 0xc
shl eax, 2
add ebx, eax
mov ebx, dword [ebx]
mov ebx, dword [ebx + 0x24]
mov ebx, dword [ebx]
mov dword [ebp - 0x18], ebx
mov ebx, dword [0x944f04]
call fcn.00402194
push ebx
push ecx
mov eax, dword [ebp + 8]
dec eax
jns 0x49bffb
push 0x1511
push 0x403f5fe
push 4
call fcn.0059e728
add esp, 0xc
pop ecx
pop ebx
cmp eax, ecx
jl 0x49c018
push 0x1511
push 0x403f5fe
push 1
call fcn.0059e728
add esp, 0xc
shl eax, 2
add ebx, eax
mov ebx, dword [ebx]
mov ebx, dword [ebx + 0x24]
mov ebx, dword [ebx]
add ebx, 0xc
mov dword [ebp - 0x1c], ebx
push 0x80000301
push 0
mov ebx, dword [ebp - 0x1c]
push dword [ebx]
push 1
mov ebx, 0x5a0e90
call fcn.0059e73a
add esp, 0x10
mov dword [ebp - 0x20], eax
mov ebx, dword [0x944f04]
call fcn.00402194
push ebx
push ecx
mov eax, dword [ebp + 8]
dec eax
jns 0x49c075
push 0x1556
push 0x403f5fe
push 4
call fcn.0059e728
add esp, 0xc
pop ecx
pop ebx
cmp eax, ecx
jl 0x49c092
push 0x1556
push 0x403f5fe
push 1
call fcn.0059e728
add esp, 0xc
shl eax, 2
add ebx, eax
mov ebx, dword [ebx]
mov ebx, dword [ebx + 0x24]
mov ebx, dword [ebx + 4]
add ebx, 0x60
mov dword [ebp - 0x24], ebx
push 0x80000201
push 0
mov ebx, dword [ebp - 0x24]
mov ax, word [ebx]
push eax
push 1
mov ebx, 0x5a0e90
call fcn.0059e73a
add esp, 0x10
mov dword [ebp - 0x28], eax
lea eax, [ebp - 0x28]
push eax
mov eax, 0x7a5401
mov dword [ebp - 0x2c], eax
lea eax, [ebp - 0x2c]
push eax
lea eax, [ebp - 0x20]
push eax
push dword [ebp - 0x18]
call fcn.00411d62
mov ebx, dword [ebp - 0x20]
test ebx, ebx
je 0x49c0f4
push ebx
call fcn.0059e734
add esp, 4
mov ebx, dword [ebp - 0x2c]
test ebx, ebx
je 0x49c104
push ebx
call fcn.0059e734
add esp, 4
mov ebx, dword [ebp - 0x28]
test ebx, ebx
je 0x49c114
push ebx
call fcn.0059e734
add esp, 4
mov ebx, dword [0x944f04]
call fcn.00402194
push ebx
push ecx
mov eax, dword [ebp + 8]
dec eax
jns 0x49c13e
push 0x1593
push 0x403f5fe
push 4
call fcn.0059e728
add esp, 0xc
pop ecx
pop ebx
cmp eax, ecx
jl 0x49c15b
push 0x1593
push 0x403f5fe
push 1
call fcn.0059e728
add esp, 0xc
shl eax, 2
add ebx, eax
mov ebx, dword [ebx]
mov ebx, dword [ebx + 0x24]
mov ebx, dword [ebx]
mov dword [ebp - 0x18], ebx
mov ebx, dword [0x944f04]
call fcn.00402194
push ebx
push ecx
mov eax, dword [ebp + 8]
dec eax
jns 0x49c194
push 0x15ce
push 0x403f5fe
push 4
call fcn.0059e728
add esp, 0xc
pop ecx
pop ebx
cmp eax, ecx
jl 0x49c1b1
push 0x15ce
push 0x403f5fe
push 1
call fcn.0059e728
add esp, 0xc
shl eax, 2
add ebx, eax
mov ebx, dword [ebx]
mov ebx, dword [ebx + 0x24]
mov ebx, dword [ebx]
add ebx, 0xc
mov dword [ebp - 0x1c], ebx
push 0x80000301
push 0
mov ebx, dword [ebp - 0x1c]
push dword [ebx]
push 1
mov ebx, 0x5a0e90
call fcn.0059e73a
add esp, 0x10
mov dword [ebp - 0x20], eax
mov ebx, dword [0x944f04]
call fcn.00402194
push ebx
push ecx
mov eax, dword [ebp + 8]
dec eax
jns 0x49c20e
push 0x1613
push 0x403f5fe
push 4
call fcn.0059e728
add esp, 0xc
pop ecx
pop ebx
cmp eax, ecx
jl 0x49c22b
push 0x1613
push 0x403f5fe
push 1
call fcn.0059e728
add esp, 0xc
shl eax, 2
add ebx, eax
mov ebx, dword [ebx]
mov ebx, dword [ebx + 0x24]
mov ebx, dword [ebx + 4]
add ebx, 0x68
mov dword [ebp - 0x24], ebx
push 0x80000201
push 0
mov ebx, dword [ebp - 0x24]
mov ax, word [ebx]
push eax
push 1
mov ebx, 0x5a0e90
call fcn.0059e73a
add esp, 0x10
mov dword [ebp - 0x28], eax
lea eax, [ebp - 0x28]
push eax
mov eax, 0x7a5405
mov dword [ebp - 0x2c], eax
lea eax, [ebp - 0x2c]
push eax
lea eax, [ebp - 0x20]
push eax
push dword [ebp - 0x18]
call fcn.00411d62
mov ebx, dword [ebp - 0x20]
test ebx, ebx
je 0x49c28d
push ebx
call fcn.0059e734
add esp, 4
mov ebx, dword [ebp - 0x2c]
test ebx, ebx
je 0x49c29d
push ebx
call fcn.0059e734
add esp, 4
mov ebx, dword [ebp - 0x28]
test ebx, ebx
je 0x49c2ad
push ebx
call fcn.0059e734
add esp, 4
mov ebx, dword [0x944f04]
call fcn.00402194
push ebx
push ecx
mov eax, dword [ebp + 8]
dec eax
jns 0x49c2d7
push 0x1650
push 0x403f5fe
push 4
call fcn.0059e728
add esp, 0xc
pop ecx
pop ebx
cmp eax, ecx
jl 0x49c2f4
push 0x1650
push 0x403f5fe
push 1
call fcn.0059e728
add esp, 0xc
shl eax, 2
add ebx, eax
mov ebx, dword [ebx]
mov ebx, dword [ebx + 0x24]
mov ebx, dword [ebx]
mov dword [ebp - 0x18], ebx
mov ebx, dword [0x944f04]
call fcn.00402194
push ebx
push ecx
mov eax, dword [ebp + 8]
dec eax
jns 0x49c32d
push 0x168b
push 0x403f5fe
push 4
call fcn.0059e728
add esp, 0xc
pop ecx
pop ebx
cmp eax, ecx
jl 0x49c34a
push 0x168b
push 0x403f5fe
push 1
call fcn.0059e728
add esp, 0xc
shl eax, 2
add ebx, eax
mov ebx, dword [ebx]
mov ebx, dword [ebx + 0x24]
mov ebx, dword [ebx]
add ebx, 0xc
mov dword [ebp - 0x1c], ebx
push 0x80000301
push 0
mov ebx, dword [ebp - 0x1c]
push dword [ebx]
push 1
mov ebx, 0x5a0e90
call fcn.0059e73a
add esp, 0x10
mov dword [ebp - 0x20], eax
mov ebx, dword [0x944f04]
call fcn.00402194
push ebx
push ecx
mov eax, dword [ebp + 8]
dec eax
jns 0x49c3a7
push 0x16d0
push 0x403f5fe
push 4
call fcn.0059e728
add esp, 0xc
pop ecx
pop ebx
cmp eax, ecx
jl 0x49c3c4
push 0x16d0
push 0x403f5fe
push 1
call fcn.0059e728
add esp, 0xc
shl eax, 2
add ebx, eax
mov ebx, dword [ebx]
mov ebx, dword [ebx + 0x24]
mov ebx, dword [ebx + 4]
add ebx, 0x64
mov dword [ebp - 0x24], ebx
push 0x80000201
push 0
mov ebx, dword [ebp - 0x24]
mov ax, word [ebx]
push eax
push 1
mov ebx, 0x5a0e90
call fcn.0059e73a
add esp, 0x10
mov dword [ebp - 0x28], eax
lea eax, [ebp - 0x28]
push eax
mov eax, 0x7a5409
mov dword [ebp - 0x2c], eax
lea eax, [ebp - 0x2c]
push eax
lea eax, [ebp - 0x20]
push eax
push dword [ebp - 0x18]
call fcn.00411d62
mov ebx, dword [ebp - 0x20]
test ebx, ebx
je 0x49c426
push ebx
call fcn.0059e734
add esp, 4
mov ebx, dword [ebp - 0x2c]
test ebx, ebx
je 0x49c436
push ebx
call fcn.0059e734
add esp, 4
mov ebx, dword [ebp - 0x28]
test ebx, ebx
je 0x49c446
push ebx
call fcn.0059e734
add esp, 4
mov ebx, dword [0x944f04]
call fcn.00402194
push ebx
push ecx
mov eax, dword [ebp + 8]
dec eax
jns 0x49c470
push 0x170d
push 0x403f5fe
push 4
call fcn.0059e728
add esp, 0xc
pop ecx
pop ebx
cmp eax, ecx
jl 0x49c48d
push 0x170d
push 0x403f5fe
push 1
call fcn.0059e728
add esp, 0xc
shl eax, 2
add ebx, eax
mov ebx, dword [ebx]
mov ebx, dword [ebx + 0x24]
mov ebx, dword [ebx]
mov dword [ebp - 0x18], ebx
mov ebx, dword [0x944f04]
call fcn.00402194
push ebx
push ecx
mov eax, dword [ebp + 8]
dec eax
jns 0x49c4c6
push 0x1748
push 0x403f5fe
push 4
call fcn.0059e728
add esp, 0xc
pop ecx
pop ebx
cmp eax, ecx
jl 0x49c4e3
push 0x1748
push 0x403f5fe
push 1
call fcn.0059e728
add esp, 0xc
shl eax, 2
add ebx, eax
mov ebx, dword [ebx]
mov ebx, dword [ebx + 0x24]
mov ebx, dword [ebx]
add ebx, 0xc
mov dword [ebp - 0x1c], ebx
push 0x80000301
push 0
mov ebx, dword [ebp - 0x1c]
push dword [ebx]
push 1
mov ebx, 0x5a0e90
call fcn.0059e73a
add esp, 0x10
mov dword [ebp - 0x20], eax
mov ebx, dword [0x944f04]
call fcn.00402194
push ebx
push ecx
mov eax, dword [ebp + 8]
dec eax
jns 0x49c540
push 0x178d
push 0x403f5fe
push 4
call fcn.0059e728
add esp, 0xc
pop ecx
pop ebx
cmp eax, ecx
jl 0x49c55d
push 0x178d
push 0x403f5fe
push 1
call fcn.0059e728
add esp, 0xc
shl eax, 2
add ebx, eax
mov ebx, dword [ebx]
mov ebx, dword [ebx + 0x24]
mov ebx, dword [ebx + 4]
add ebx, 0x6c
mov dword [ebp - 0x24], ebx
push 0x80000201
push 0
mov ebx, dword [ebp - 0x24]
mov ax, word [ebx]
push eax
push 1
mov ebx, 0x5a0e90
call fcn.0059e73a
add esp, 0x10
mov dword [ebp - 0x28], eax
lea eax, [ebp - 0x28]
push eax
mov eax, 0x7a540d
mov dword [ebp - 0x2c], eax
lea eax, [ebp - 0x2c]
push eax
lea eax, [ebp - 0x20]
push eax
push dword [ebp - 0x18]
call fcn.00411d62
mov ebx, dword [ebp - 0x20]
test ebx, ebx
je 0x49c5bf
push ebx
call fcn.0059e734
add esp, 4
mov ebx, dword [ebp - 0x2c]
test ebx, ebx
je 0x49c5cf
push ebx
call fcn.0059e734
add esp, 4
mov ebx, dword [ebp - 0x28]
test ebx, ebx
je 0x49c5df
push ebx
call fcn.0059e734
add esp, 4
jmp 0x49daff
mov ebx, dword [0x944f04]
call fcn.00402194
push ebx
push ecx
mov eax, dword [ebp + 8]
dec eax
jns 0x49c60e
push 0x17dd
push 0x403f5fe
push 4
call fcn.0059e728
add esp, 0xc
pop ecx
pop ebx
cmp eax, ecx
jl 0x49c62b
push 0x17dd
push 0x403f5fe
push 1
call fcn.0059e728
add esp, 0xc
shl eax, 2
add ebx, eax
mov ebx, dword [ebx]
mov ebx, dword [ebx + 0x20]
mov ebx, dword [ebx + 0x48]
call fcn.00402194
push ebx
push ecx
mov eax, dword [ebp - 0xc]
dec eax
jns 0x49c65c
push 0x17dd
push 0x403f5fe
push 4
call fcn.0059e728
add esp, 0xc
pop ecx
pop ebx
cmp eax, ecx
jl 0x49c679
push 0x17dd
push 0x403f5fe
push 1
call fcn.0059e728
add esp, 0xc
shl eax, 2
add ebx, eax
mov ebx, dword [ebx]
add ebx, 0x1c
mov dword [ebp - 0x30], ebx
mov ebx, dword [ebp - 0x30]
cmp dword [ebx], 0
jne 0x49c88b
mov ebx, dword [0x944f04]
call fcn.00402194
push ebx
push ecx
mov eax, dword [ebp + 8]
dec eax
jns 0x49c6bc
push 0x1826
push 0x403f5fe
push 4
call fcn.0059e728
add esp, 0xc
pop ecx
pop ebx
cmp eax, ecx
jl 0x49c6d9
push 0x1826
push 0x403f5fe
push 1
call fcn.0059e728
add esp, 0xc
shl eax, 2
add ebx, eax
mov ebx, dword [ebx]
mov ebx, dword [ebx + 0x24]
mov ebx, dword [ebx + 4]
add ebx, 0x40
mov dword [ebp - 0x18], ebx
mov ebx, dword [0x944f04]
call fcn.00402194
push ebx
push ecx
mov eax, dword [ebp + 8]
dec eax
jns 0x49c716
push 0x1861
push 0x403f5fe
push 4
call fcn.0059e728
add esp, 0xc
pop ecx
pop ebx
cmp eax, ecx
jl 0x49c733
push 0x1861
push 0x403f5fe
push 1
call fcn.0059e728
add esp, 0xc
shl eax, 2
add ebx, eax
mov ebx, dword [ebx]
mov ebx, dword [ebx + 0x24]
mov ebx, dword [ebx + 4]
add ebx, 0x40
mov dword [ebp - 0x1c], ebx
mov ebx, dword [0x944f04]
call fcn.00402194
push ebx
push ecx
mov eax, dword [ebp + 8]
dec eax
jns 0x49c770
push 0x1861
push 0x403f5fe
push 4
call fcn.0059e728
add esp, 0xc
pop ecx
pop ebx
cmp eax, ecx
jl 0x49c78d
push 0x1861
push 0x403f5fe
push 1
call fcn.0059e728
add esp, 0xc
shl eax, 2
add ebx, eax
mov ebx, dword [ebx]
mov ebx, dword [ebx + 0x20]
mov ebx, dword [ebx + 0x48]
call fcn.00402194
push ebx
push ecx
mov eax, dword [ebp - 0xc]
dec eax
jns 0x49c7be
push 0x1861
push 0x403f5fe
push 4
call fcn.0059e728
add esp, 0xc
pop ecx
pop ebx
cmp eax, ecx
jl 0x49c7db
push 0x1861
push 0x403f5fe
push 1
call fcn.0059e728
add esp, 0xc
shl eax, 2
add ebx, eax
mov ebx, dword [ebx]
add ebx, 0x10
mov dword [ebp - 0x20], ebx
mov ebx, dword [ebp - 0x1c]
mov ax, word [ebx]
cwde
mov dword [ebp - 0x28], eax
fild dword [ebp - 0x28]
fstp qword [ebp - 0x28]
fld qword [ebp - 0x28]
mov ebx, dword [ebp - 0x20]
fild dword [ebx]
fstp qword [ebp - 0x30]
fsub qword [ebp - 0x30]
fstp qword [ebp - 0x38]
fld qword [ebp - 0x38]
call fcn.00401596
mov ebx, dword [ebp - 0x18]
mov word [ebx], ax
mov ebx, dword [0x944f04]
call fcn.00402194
push ebx
push ecx
mov eax, dword [ebp + 8]
dec eax
jns 0x49c841
push 0x18ce
push 0x403f5fe
push 4
call fcn.0059e728
add esp, 0xc
pop ecx
pop ebx
cmp eax, ecx
jl 0x49c85e
push 0x18ce
push 0x403f5fe
push 1
call fcn.0059e728
add esp, 0xc
shl eax, 2
add ebx, eax
mov ebx, dword [ebx]
mov ebx, dword [ebx + 0x24]
mov ebx, dword [ebx + 4]
add ebx, 0x40
mov dword [ebp - 0x18], ebx
mov ebx, dword [ebp - 0x18]
mov ax, word [ebx]
cwde
push eax
push 0
push dword [ebp + 8]
call fcn.004a1c72
jmp 0x49daff
mov ebx, dword [0x944f04]
call fcn.00402194
push ebx
push ecx
mov eax, dword [ebp + 8]
dec eax
jns 0x49c8b5
push 0x1929
push 0x403f5fe
push 4
call fcn.0059e728
add esp, 0xc
pop ecx
pop ebx
cmp eax, ecx
jl 0x49c8d2
push 0x1929
push 0x403f5fe
push 1
call fcn.0059e728
add esp, 0xc
shl eax, 2
add ebx, eax
mov ebx, dword [ebx]
mov ebx, dword [ebx + 0x20]
mov ebx, dword [ebx + 0x48]
call fcn.00402194
push ebx
push ecx
mov eax, dword [ebp - 0xc]
dec eax
jns 0x49c903
push 0x1929
push 0x403f5fe
push 4
call fcn.0059e728
add esp, 0xc
pop ecx
pop ebx
cmp eax, ecx
jl 0x49c920
push 0x1929
push 0x403f5fe
push 1
call fcn.0059e728
add esp, 0xc
shl eax, 2
add ebx, eax
mov ebx, dword [ebx]
add ebx, 0x1c
mov dword [ebp - 0x1c], ebx
mov ebx, dword [ebp - 0x1c]
cmp dword [ebx], 8
jne 0x49cb32
mov ebx, dword [0x944f04]
call fcn.00402194
push ebx
push ecx
mov eax, dword [ebp + 8]
dec eax
jns 0x49c963
push 0x1972
push 0x403f5fe
push 4
call fcn.0059e728
add esp, 0xc
pop ecx
pop ebx
cmp eax, ecx
jl 0x49c980
push 0x1972
push 0x403f5fe
push 1
call fcn.0059e728
add esp, 0xc
shl eax, 2
add ebx, eax
mov ebx, dword [ebx]
mov ebx, dword [ebx + 0x24]
mov ebx, dword [ebx + 4]
add ebx, 0x58
mov dword [ebp - 0x18], ebx
mov ebx, dword [0x944f04]
call fcn.00402194
push ebx
push ecx
mov eax, dword [ebp + 8]
dec eax
jns 0x49c9bd
push 0x19ad
push 0x403f5fe
push 4
call fcn.0059e728
add esp, 0xc
pop ecx
pop ebx
cmp eax, ecx
jl 0x49c9da
push 0x19ad
push 0x403f5fe
push 1
call fcn.0059e728
add esp, 0xc
shl eax, 2
add ebx, eax
mov ebx, dword [ebx]
mov ebx, dword [ebx + 0x24]
mov ebx, dword [ebx + 4]
add ebx, 0x58
mov dword [ebp - 0x1c], ebx
mov ebx, dword [0x944f04]
call fcn.00402194
push ebx
push ecx
mov eax, dword [ebp + 8]
dec eax
jns 0x49ca17
push 0x19ad
push 0x403f5fe
push 4
call fcn.0059e728
add esp, 0xc
pop ecx
pop ebx
cmp eax, ecx
jl 0x49ca34
push 0x19ad
push 0x403f5fe
push 1
call fcn.0059e728
add esp, 0xc
shl eax, 2
add ebx, eax
mov ebx, dword [ebx]
mov ebx, dword [ebx + 0x20]
mov ebx, dword [ebx + 0x48]
call fcn.00402194
push ebx
push ecx
mov eax, dword [ebp - 0xc]
dec eax
jns 0x49ca65
push 0x19ad
push 0x403f5fe
push 4
call fcn.0059e728
add esp, 0xc
pop ecx
pop ebx
cmp eax, ecx
jl 0x49ca82
push 0x19ad
push 0x403f5fe
push 1
call fcn.0059e728
add esp, 0xc
shl eax, 2
add ebx, eax
mov ebx, dword [ebx]
add ebx, 0x10
mov dword [ebp - 0x20], ebx
mov ebx, dword [ebp - 0x1c]
mov ax, word [ebx]
cwde
mov dword [ebp - 0x28], eax
fild dword [ebp - 0x28]
fstp qword [ebp - 0x28]
fld qword [ebp - 0x28]
mov ebx, dword [ebp - 0x20]
fild dword [ebx]
fstp qword [ebp - 0x30]
fsub qword [ebp - 0x30]
fstp qword [ebp - 0x38]
fld qword [ebp - 0x38]
call fcn.00401596
mov ebx, dword [ebp - 0x18]
mov word [ebx], ax
mov ebx, dword [0x944f04]
call fcn.00402194
push ebx
push ecx
mov eax, dword [ebp + 8]
dec eax
jns 0x49cae8
push 0x1a1a
push 0x403f5fe
push 4
call fcn.0059e728
add esp, 0xc
pop ecx
pop ebx
cmp eax, ecx
jl 0x49cb05
push 0x1a1a
push 0x403f5fe
push 1
call fcn.0059e728
add esp, 0xc
shl eax, 2
add ebx, eax
mov ebx, dword [ebx]
mov ebx, dword [ebx + 0x24]
mov ebx, dword [ebx + 4]
add ebx, 0x58
mov dword [ebp - 0x18], ebx
mov ebx, dword [ebp - 0x18]
mov ax, word [ebx]
cwde
push eax
push 8
push dword [ebp + 8]
call fcn.004a1c72
jmp 0x49daff
mov ebx, dword [0x944f04]
call fcn.00402194
push ebx
push ecx
mov eax, dword [ebp + 8]
dec eax
jns 0x49cb5c
push 0x1a75
push 0x403f5fe
push 4
call fcn.0059e728
add esp, 0xc
pop ecx
pop ebx
cmp eax, ecx
jl 0x49cb79
push 0x1a75
push 0x403f5fe
push 1
call fcn.0059e728
add esp, 0xc
shl eax, 2
add ebx, eax
mov ebx, dword [ebx]
mov ebx, dword [ebx + 0x20]
mov ebx, dword [ebx + 0x48]
call fcn.00402194
push ebx
push ecx
mov eax, dword [ebp - 0xc]
dec eax
jns 0x49cbaa
push 0x1a75
push 0x403f5fe
push 4
call fcn.0059e728
add esp, 0xc
pop ecx
pop ebx
cmp eax, ecx
jl 0x49cbc7
push 0x1a75
push 0x403f5fe
push 1
call fcn.0059e728
add esp, 0xc
shl eax, 2
add ebx, eax
mov ebx, dword [ebx]
add ebx, 0x1c
mov dword [ebp - 0x1c], ebx
mov ebx, dword [ebp - 0x1c]
cmp dword [ebx], 2
jne 0x49cdcd
mov ebx, dword [0x944f04]
call fcn.00402194
push ebx
push ecx
mov eax, dword [ebp + 8]
dec eax
jns 0x49cc0a
push 0x1abe
push 0x403f5fe
push 4
call fcn.0059e728
add esp, 0xc
pop ecx
pop ebx
cmp eax, ecx
jl 0x49cc27
push 0x1abe
push 0x403f5fe
push 1
call fcn.0059e728
add esp, 0xc
shl eax, 2
add ebx, eax
mov ebx, dword [ebx]
mov ebx, dword [ebx + 0x24]
mov ebx, dword [ebx + 4]
add ebx, 0x3c
mov dword [ebp - 0x18], ebx
mov ebx, dword [0x944f04]
call fcn.00402194
push ebx
push ecx
mov eax, dword [ebp + 8]
dec eax
jns 0x49cc64
push 0x1af9
push 0x403f5fe
push 4
call fcn.0059e728
add esp, 0xc
pop ecx
pop ebx
cmp eax, ecx
jl 0x49cc81
push 0x1af9
push 0x403f5fe
push 1
call fcn.0059e728
add esp, 0xc
shl eax, 2
add ebx, eax
mov ebx, dword [ebx]
mov ebx, dword [ebx + 0x24]
mov ebx, dword [ebx + 4]
add ebx, 0x3c
mov dword [ebp - 0x1c], ebx
mov ebx, dword [0x944f04]
call fcn.00402194
push ebx
push ecx
mov eax, dword [ebp + 8]
dec eax
jns 0x49ccbe
push 0x1af9
push 0x403f5fe
push 4
call fcn.0059e728
add esp, 0xc
pop ecx
pop ebx
cmp eax, ecx
jl 0x49ccdb
push 0x1af9
push 0x403f5fe
push 1
call fcn.0059e728
add esp, 0xc
shl eax, 2
add ebx, eax
mov ebx, dword [ebx]
mov ebx, dword [ebx + 0x20]
mov ebx, dword [ebx + 0x48]
call fcn.00402194
push ebx
push ecx
mov eax, dword [ebp - 0xc]
dec eax
jns 0x49cd0c
push 0x1af9
push 0x403f5fe
push 4
call fcn.0059e728
add esp, 0xc
pop ecx
pop ebx
cmp eax, ecx
jl 0x49cd29
push 0x1af9
push 0x403f5fe
push 1
call fcn.0059e728
add esp, 0xc
shl eax, 2
add ebx, eax
mov ebx, dword [ebx]
add ebx, 0x10
mov dword [ebp - 0x20], ebx
mov ebx, dword [ebp - 0x1c]
fild dword [ebx]
fstp qword [ebp - 0x28]
fld qword [ebp - 0x28]
mov ebx, dword [ebp - 0x20]
fild dword [ebx]
fstp qword [ebp - 0x30]
fsub qword [ebp - 0x30]
fstp qword [ebp - 0x38]
fld qword [ebp - 0x38]
call fcn.00401596
mov ebx, dword [ebp - 0x18]
mov dword [ebx], eax
mov ebx, dword [0x944f04]
call fcn.00402194
push ebx
push ecx
mov eax, dword [ebp + 8]
dec eax
jns 0x49cd86
push 0x1b66
push 0x403f5fe
push 4
call fcn.0059e728
add esp, 0xc
pop ecx
pop ebx
cmp eax, ecx
jl 0x49cda3
push 0x1b66
push 0x403f5fe
push 1
call fcn.0059e728
add esp, 0xc
shl eax, 2
add ebx, eax
mov ebx, dword [ebx]
mov ebx, dword [ebx + 0x24]
mov ebx, dword [ebx + 4]
add ebx, 0x3c
mov dword [ebp - 0x18], ebx
mov ebx, dword [ebp - 0x18]
push dword [ebx]
push 2
push dword [ebp + 8]
call fcn.004a1c72
jmp 0x49daff
mov ebx, dword [0x944f04]
call fcn.00402194
push ebx
push ecx
mov eax, dword [ebp + 8]
dec eax
jns 0x49cdf7
push 0x1bc1
push 0x403f5fe
push 4
call fcn.0059e728
add esp, 0xc
pop ecx
pop ebx
cmp eax, ecx
jl 0x49ce14
push 0x1bc1
push 0x403f5fe
push 1
call fcn.0059e728
add esp, 0xc
shl eax, 2
add ebx, eax
mov ebx, dword [ebx]
mov ebx, dword [ebx + 0x20]
mov ebx, dword [ebx + 0x48]
call fcn.00402194
push ebx
push ecx
mov eax, dword [ebp - 0xc]
dec eax
jns 0x49ce45
push 0x1bc1
push 0x403f5fe
push 4
call fcn.0059e728
add esp, 0xc
pop ecx
pop ebx
cmp eax, ecx
jl 0x49ce62
push 0x1bc1
push 0x403f5fe
push 1
call fcn.0059e728
add esp, 0xc
shl eax, 2
add ebx, eax
mov ebx, dword [ebx]
add ebx, 0x1c
mov dword [ebp - 0x1c], ebx
mov ebx, dword [ebp - 0x1c]
cmp dword [ebx], 5
jne 0x49d068
mov ebx, dword [0x944f04]
call fcn.00402194
push ebx
push ecx
mov eax, dword [ebp + 8]
dec eax
jns 0x49cea5
push 0x1c0a
push 0x403f5fe
push 4
call fcn.0059e728
add esp, 0xc
pop ecx
pop ebx
cmp eax, ecx
jl 0x49cec2
push 0x1c0a
push 0x403f5fe
push 1
call fcn.0059e728
add esp, 0xc
shl eax, 2
add ebx, eax
mov ebx, dword [ebx]
mov ebx, dword [ebx + 0x24]
mov ebx, dword [ebx + 4]
add ebx, 0x54
mov dword [ebp - 0x18], ebx
mov ebx, dword [0x944f04]
call fcn.00402194
push ebx
push ecx
mov eax, dword [ebp + 8]
dec eax
jns 0x49ceff
push 0x1c45
push 0x403f5fe
push 4
call fcn.0059e728
add esp, 0xc
pop ecx
pop ebx
cmp eax, ecx
jl 0x49cf1c
push 0x1c45
push 0x403f5fe
push 1
call fcn.0059e728
add esp, 0xc
shl eax, 2
add ebx, eax
mov ebx, dword [ebx]
mov ebx, dword [ebx + 0x24]
mov ebx, dword [ebx + 4]
add ebx, 0x54
mov dword [ebp - 0x1c], ebx
mov ebx, dword [0x944f04]
call fcn.00402194
push ebx
push ecx
mov eax, dword [ebp + 8]
dec eax
jns 0x49cf59
push 0x1c45
push 0x403f5fe
push 4
call fcn.0059e728
add esp, 0xc
pop ecx
pop ebx
cmp eax, ecx
jl 0x49cf76
push 0x1c45
push 0x403f5fe
push 1
call fcn.0059e728
add esp, 0xc
shl eax, 2
add ebx, eax
mov ebx, dword [ebx]
mov ebx, dword [ebx + 0x20]
mov ebx, dword [ebx + 0x48]
call fcn.00402194
push ebx
push ecx
mov eax, dword [ebp - 0xc]
dec eax
jns 0x49cfa7
push 0x1c45
push 0x403f5fe
push 4
call fcn.0059e728
add esp, 0xc
pop ecx
pop ebx
cmp eax, ecx
jl 0x49cfc4
push 0x1c45
push 0x403f5fe
push 1
call fcn.0059e728
add esp, 0xc
shl eax, 2
add ebx, eax
mov ebx, dword [ebx]
add ebx, 0x10
mov dword [ebp - 0x20], ebx
mov ebx, dword [ebp - 0x1c]
fild dword [ebx]
fstp qword [ebp - 0x28]
fld qword [ebp - 0x28]
mov ebx, dword [ebp - 0x20]
fild dword [ebx]
fstp qword [ebp - 0x30]
fsub qword [ebp - 0x30]
fstp qword [ebp - 0x38]
fld qword [ebp - 0x38]
call fcn.00401596
mov ebx, dword [ebp - 0x18]
mov dword [ebx], eax
mov ebx, dword [0x944f04]
call fcn.00402194
push ebx
push ecx
mov eax, dword [ebp + 8]
dec eax
jns 0x49d021
push 0x1cb2
push 0x403f5fe
push 4
call fcn.0059e728
add esp, 0xc
pop ecx
pop ebx
cmp eax, ecx
jl 0x49d03e
push 0x1cb2
push 0x403f5fe
push 1
call fcn.0059e728
add esp, 0xc
shl eax, 2
add ebx, eax
mov ebx, dword [ebx]
mov ebx, dword [ebx + 0x24]
mov ebx, dword [ebx + 4]
add ebx, 0x54
mov dword [ebp - 0x18], ebx
mov ebx, dword [ebp - 0x18]
push dword [ebx]
push 5
push dword [ebp + 8]
call fcn.004a1c72
jmp 0x49daff
mov ebx, dword [0x944f04]
call fcn.00402194
push ebx
push ecx
mov eax, dword [ebp + 8]
dec eax
jns 0x49d092
push 0x1d0d
push 0x403f5fe
push 4
call fcn.0059e728
add esp, 0xc
pop ecx
pop ebx
cmp eax, ecx
jl 0x49d0af
push 0x1d0d
push 0x403f5fe
push 1
call fcn.0059e728
add esp, 0xc
shl eax, 2
add ebx, eax
mov ebx, dword [ebx]
mov ebx, dword [ebx + 0x20]
mov ebx, dword [ebx + 0x48]
call fcn.00402194
push ebx
push ecx
mov eax, dword [ebp - 0xc]
dec eax
jns 0x49d0e0
push 0x1d0d
push 0x403f5fe
push 4
call fcn.0059e728
add esp, 0xc
pop ecx
pop ebx
cmp eax, ecx
jl 0x49d0fd
push 0x1d0d
push 0x403f5fe
push 1
call fcn.0059e728
add esp, 0xc
shl eax, 2
add ebx, eax
mov ebx, dword [ebx]
add ebx, 0x1c
mov dword [ebp - 0x1c], ebx
mov ebx, dword [ebp - 0x1c]
cmp dword [ebx], 0xa
jne 0x49d30f
mov ebx, dword [0x944f04]
call fcn.00402194
push ebx
push ecx
mov eax, dword [ebp + 8]
dec eax
jns 0x49d140
push 0x1d56
push 0x403f5fe
push 4
call fcn.0059e728
add esp, 0xc
pop ecx
pop ebx
cmp eax, ecx
jl 0x49d15d
push 0x1d56
push 0x403f5fe
push 1
call fcn.0059e728
add esp, 0xc
shl eax, 2
add ebx, eax
mov ebx, dword [ebx]
mov ebx, dword [ebx + 0x24]
mov ebx, dword [ebx + 4]
add ebx, 0x50
mov dword [ebp - 0x18], ebx
mov ebx, dword [0x944f04]
call fcn.00402194
push ebx
push ecx
mov eax, dword [ebp + 8]
dec eax
jns 0x49d19a
push 0x1d91
push 0x403f5fe
push 4
call fcn.0059e728
add esp, 0xc
pop ecx
pop ebx
cmp eax, ecx
jl 0x49d1b7
push 0x1d91
push 0x403f5fe
push 1
call fcn.0059e728
add esp, 0xc
shl eax, 2
add ebx, eax
mov ebx, dword [ebx]
mov ebx, dword [ebx + 0x24]
mov ebx, dword [ebx + 4]
add ebx, 0x50
mov dword [ebp - 0x1c], ebx
mov ebx, dword [0x944f04]
call fcn.00402194
push ebx
push ecx
mov eax, dword [ebp + 8]
dec eax
jns 0x49d1f4
push 0x1d91
push 0x403f5fe
push 4
call fcn.0059e728
add esp, 0xc
pop ecx
pop ebx
cmp eax, ecx
jl 0x49d211
push 0x1d91
push 0x403f5fe
push 1
call fcn.0059e728
add esp, 0xc
shl eax, 2
add ebx, eax
mov ebx, dword [ebx]
mov ebx, dword [ebx + 0x20]
mov ebx, dword [ebx + 0x48]
call fcn.00402194
push ebx
push ecx
mov eax, dword [ebp - 0xc]
dec eax
jns 0x49d242
push 0x1d91
push 0x403f5fe
push 4
call fcn.0059e728
add esp, 0xc
pop ecx
pop ebx
cmp eax, ecx
jl 0x49d25f
push 0x1d91
push 0x403f5fe
push 1
call fcn.0059e728
add esp, 0xc
shl eax, 2
add ebx, eax
mov ebx, dword [ebx]
add ebx, 0x10
mov dword [ebp - 0x20], ebx
mov ebx, dword [ebp - 0x1c]
mov ax, word [ebx]
cwde
mov dword [ebp - 0x28], eax
fild dword [ebp - 0x28]
fstp qword [ebp - 0x28]
fld qword [ebp - 0x28]
mov ebx, dword [ebp - 0x20]
fild dword [ebx]
fstp qword [ebp - 0x30]
fsub qword [ebp - 0x30]
fstp qword [ebp - 0x38]
fld qword [ebp - 0x38]
call fcn.00401596
mov ebx, dword [ebp - 0x18]
mov word [ebx], ax
mov ebx, dword [0x944f04]
call fcn.00402194
push ebx
push ecx
mov eax, dword [ebp + 8]
dec eax
jns 0x49d2c5
push 0x1dfe
push 0x403f5fe
push 4
call fcn.0059e728
add esp, 0xc
pop ecx
pop ebx
cmp eax, ecx
jl 0x49d2e2
push 0x1dfe
push 0x403f5fe
push 1
call fcn.0059e728
add esp, 0xc
shl eax, 2
add ebx, eax
mov ebx, dword [ebx]
mov ebx, dword [ebx + 0x24]
mov ebx, dword [ebx + 4]
add ebx, 0x50
mov dword [ebp - 0x18], ebx
mov ebx, dword [ebp - 0x18]
mov ax, word [ebx]
cwde
push eax
push 0xa
push dword [ebp + 8]
call fcn.004a1c72
jmp 0x49daff
mov ebx, dword [0x944f04]
call fcn.00402194
push ebx
push ecx
mov eax, dword [ebp + 8]
dec eax
jns 0x49d339
push 0x1e59
push 0x403f5fe
push 4
call fcn.0059e728
add esp, 0xc
pop ecx
pop ebx
cmp eax, ecx
jl 0x49d356
push 0x1e59
push 0x403f5fe
push 1
call fcn.0059e728
add esp, 0xc
shl eax, 2
add ebx, eax
mov ebx, dword [ebx]
mov ebx, dword [ebx + 0x20]
mov ebx, dword [ebx + 0x48]
call fcn.00402194
push ebx
push ecx
mov eax, dword [ebp - 0xc]
dec eax
jns 0x49d387
push 0x1e59
push 0x403f5fe
push 4
call fcn.0059e728
add esp, 0xc
pop ecx
pop ebx
cmp eax, ecx
jl 0x49d3a4
push 0x1e59
push 0x403f5fe
push 1
call fcn.0059e728
add esp, 0xc
shl eax, 2
add ebx, eax
mov ebx, dword [ebx]
add ebx, 0x1c
mov dword [ebp - 0x1c], ebx
mov ebx, dword [ebp - 0x1c]
cmp dword [ebx], 0xb
jne 0x49d5b6
mov ebx, dword [0x944f04]
call fcn.00402194
push ebx
push ecx
mov eax, dword [ebp + 8]
dec eax
jns 0x49d3e7
push 0x1ea2
push 0x403f5fe
push 4
call fcn.0059e728
add esp, 0xc
pop ecx
pop ebx
cmp eax, ecx
jl 0x49d404
push 0x1ea2
push 0x403f5fe
push 1
call fcn.0059e728
add esp, 0xc
shl eax, 2
add ebx, eax
mov ebx, dword [ebx]
mov ebx, dword [ebx + 0x24]
mov ebx, dword [ebx + 4]
add ebx, 0x38
mov dword [ebp - 0x18], ebx
mov ebx, dword [0x944f04]
call fcn.00402194
push ebx
push ecx
mov eax, dword [ebp + 8]
dec eax
jns 0x49d441
push 0x1edd
push 0x403f5fe
push 4
call fcn.0059e728
add esp, 0xc
pop ecx
pop ebx
cmp eax, ecx
jl 0x49d45e
push 0x1edd
push 0x403f5fe
push 1
call fcn.0059e728
add esp, 0xc
shl eax, 2
add ebx, eax
mov ebx, dword [ebx]
mov ebx, dword [ebx + 0x24]
mov ebx, dword [ebx + 4]
add ebx, 0x38
mov dword [ebp - 0x1c], ebx
mov ebx, dword [0x944f04]
call fcn.00402194
push ebx
push ecx
mov eax, dword [ebp + 8]
dec eax
jns 0x49d49b
push 0x1edd
push 0x403f5fe
push 4
call fcn.0059e728
add esp, 0xc
pop ecx
pop ebx
cmp eax, ecx
jl 0x49d4b8
push 0x1edd
push 0x403f5fe
push 1
call fcn.0059e728
add esp, 0xc
shl eax, 2
add ebx, eax
mov ebx, dword [ebx]
mov ebx, dword [ebx + 0x20]
mov ebx, dword [ebx + 0x48]
call fcn.00402194
push ebx
push ecx
mov eax, dword [ebp - 0xc]
dec eax
jns 0x49d4e9
push 0x1edd
push 0x403f5fe
push 4
call fcn.0059e728
add esp, 0xc
pop ecx
pop ebx
cmp eax, ecx
jl 0x49d506
push 0x1edd
push 0x403f5fe
push 1
call fcn.0059e728
add esp, 0xc
shl eax, 2
add ebx, eax
mov ebx, dword [ebx]
add ebx, 0x10
mov dword [ebp - 0x20], ebx
mov ebx, dword [ebp - 0x1c]
mov ax, word [ebx]
cwde
mov dword [ebp - 0x28], eax
fild dword [ebp - 0x28]
fstp qword [ebp - 0x28]
fld qword [ebp - 0x28]
mov ebx, dword [ebp - 0x20]
fild dword [ebx]
fstp qword [ebp - 0x30]
fsub qword [ebp - 0x30]
fstp qword [ebp - 0x38]
fld qword [ebp - 0x38]
call fcn.00401596
mov ebx, dword [ebp - 0x18]
mov word [ebx], ax
mov ebx, dword [0x944f04]
call fcn.00402194
push ebx
push ecx
mov eax, dword [ebp + 8]
dec eax
jns 0x49d56c
push 0x1f4a
push 0x403f5fe
push 4
call fcn.0059e728
add esp, 0xc
pop ecx
pop ebx
cmp eax, ecx
jl 0x49d589
push 0x1f4a
push 0x403f5fe
push 1
call fcn.0059e728
add esp, 0xc
shl eax, 2
add ebx, eax
mov ebx, dword [ebx]
mov ebx, dword [ebx + 0x24]
mov ebx, dword [ebx + 4]
add ebx, 0x38
mov dword [ebp - 0x18], ebx
mov ebx, dword [ebp - 0x18]
mov ax, word [ebx]
cwde
push eax
push 0xb
push dword [ebp + 8]
call fcn.004a1c72
jmp 0x49daff
mov ebx, dword [0x944f04]
call fcn.00402194
push ebx
push ecx
mov eax, dword [ebp + 8]
dec eax
jns 0x49d5e0
push 0x1fa5
push 0x403f5fe
push 4
call fcn.0059e728
add esp, 0xc
pop ecx
pop ebx
cmp eax, ecx
jl 0x49d5fd
push 0x1fa5
push 0x403f5fe
push 1
call fcn.0059e728
add esp, 0xc
shl eax, 2
add ebx, eax
mov ebx, dword [ebx]
mov ebx, dword [ebx + 0x20]
mov ebx, dword [ebx + 0x48]
call fcn.00402194
push ebx
push ecx
mov eax, dword [ebp - 0xc]
dec eax
jns 0x49d62e
push 0x1fa5
push 0x403f5fe
push 4
call fcn.0059e728
add esp, 0xc
pop ecx
pop ebx
cmp eax, ecx
jl 0x49d64b
push 0x1fa5
push 0x403f5fe
push 1
call fcn.0059e728
add esp, 0xc
shl eax, 2
add ebx, eax
mov ebx, dword [ebx]
add ebx, 0x1c
mov dword [ebp - 0x1c], ebx
mov ebx, dword [ebp - 0x1c]
cmp dword [ebx], 0x10
jne 0x49d85d
mov ebx, dword [0x944f04]
call fcn.00402194
push ebx
push ecx
mov eax, dword [ebp + 8]
dec eax
jns 0x49d68e
push 0x1fee
push 0x403f5fe
push 4
call fcn.0059e728
add esp, 0xc
pop ecx
pop ebx
cmp eax, ecx
jl 0x49d6ab
push 0x1fee
push 0x403f5fe
push 1
call fcn.0059e728
add esp, 0xc
shl eax, 2
add ebx, eax
mov ebx, dword [ebx]
mov ebx, dword [ebx + 0x24]
mov ebx, dword [ebx + 4]
add ebx, 0x44
mov dword [ebp - 0x18], ebx
mov ebx, dword [0x944f04]
call fcn.00402194
push ebx
push ecx
mov eax, dword [ebp + 8]
dec eax
jns 0x49d6e8
push 0x2029
push 0x403f5fe
push 4
call fcn.0059e728
add esp, 0xc
pop ecx
pop ebx
cmp eax, ecx
jl 0x49d705
push 0x2029
push 0x403f5fe
push 1
call fcn.0059e728
add esp, 0xc
shl eax, 2
add ebx, eax
mov ebx, dword [ebx]
mov ebx, dword [ebx + 0x24]
mov ebx, dword [ebx + 4]
add ebx, 0x44
mov dword [ebp - 0x1c], ebx
mov ebx, dword [0x944f04]
call fcn.00402194
push ebx
push ecx
mov eax, dword [ebp + 8]
dec eax
jns 0x49d742
push 0x2029
push 0x403f5fe
push 4
call fcn.0059e728
add esp, 0xc
pop ecx
pop ebx
cmp eax, ecx
jl 0x49d75f
push 0x2029
push 0x403f5fe
push 1
call fcn.0059e728
add esp, 0xc
shl eax, 2
add ebx, eax
mov ebx, dword [ebx]
mov ebx, dword [ebx + 0x20]
mov ebx, dword [ebx + 0x48]
call fcn.00402194
push ebx
push ecx
mov eax, dword [ebp - 0xc]
dec eax
jns 0x49d790
push 0x2029
push 0x403f5fe
push 4
call fcn.0059e728
add esp, 0xc
pop ecx
pop ebx
cmp eax, ecx
jl 0x49d7ad
push 0x2029
push 0x403f5fe
push 1
call fcn.0059e728
add esp, 0xc
shl eax, 2
add ebx, eax
mov ebx, dword [ebx]
add ebx, 0x10
mov dword [ebp - 0x20], ebx
mov ebx, dword [ebp - 0x1c]
mov ax, word [ebx]
cwde
mov dword [ebp - 0x28], eax
fild dword [ebp - 0x28]
fstp qword [ebp - 0x28]
fld qword [ebp - 0x28]
mov ebx, dword [ebp - 0x20]
fild dword [ebx]
fstp qword [ebp - 0x30]
fsub qword [ebp - 0x30]
fstp qword [ebp - 0x38]
fld qword [ebp - 0x38]
call fcn.00401596
mov ebx, dword [ebp - 0x18]
mov word [ebx], ax
mov ebx, dword [0x944f04]
call fcn.00402194
push ebx
push ecx
mov eax, dword [ebp + 8]
dec eax
jns 0x49d813
push 0x2096
push 0x403f5fe
push 4
call fcn.0059e728
add esp, 0xc
pop ecx
pop ebx
cmp eax, ecx
jl 0x49d830
push 0x2096
push 0x403f5fe
push 1
call fcn.0059e728
add esp, 0xc
shl eax, 2
add ebx, eax
mov ebx, dword [ebx]
mov ebx, dword [ebx + 0x24]
mov ebx, dword [ebx + 4]
add ebx, 0x44
mov dword [ebp - 0x18], ebx
mov ebx, dword [ebp - 0x18]
mov ax, word [ebx]
cwde
push eax
push 0x10
push dword [ebp + 8]
call fcn.004a1c72
jmp 0x49daff
mov ebx, dword [0x944f04]
call fcn.00402194
push ebx
push ecx
mov eax, dword [ebp + 8]
dec eax
jns 0x49d887
push 0x20f1
push 0x403f5fe
push 4
call fcn.0059e728
add esp, 0xc
pop ecx
pop ebx
cmp eax, ecx
jl 0x49d8a4
push 0x20f1
push 0x403f5fe
push 1
call fcn.0059e728
add esp, 0xc
shl eax, 2
add ebx, eax
mov ebx, dword [ebx]
mov ebx, dword [ebx + 0x20]
mov ebx, dword [ebx + 0x48]
call fcn.00402194
push ebx
push ecx
mov eax, dword [ebp - 0xc]
dec eax
jns 0x49d8d5
push 0x20f1
push 0x403f5fe
push 4
call fcn.0059e728
add esp, 0xc
pop ecx
pop ebx
cmp eax, ecx
jl 0x49d8f2
push 0x20f1
push 0x403f5fe
push 1
call fcn.0059e728
add esp, 0xc
shl eax, 2
add ebx, eax
mov ebx, dword [ebx]
add ebx, 0x1c
mov dword [ebp - 0x1c], ebx
mov ebx, dword [ebp - 0x1c]
cmp dword [ebx], 0xf
jne 0x49daff
mov ebx, dword [0x944f04]
call fcn.00402194
push ebx
push ecx
mov eax, dword [ebp + 8]
dec eax
jns 0x49d935
push 0x213a
push 0x403f5fe
push 4
call fcn.0059e728
add esp, 0xc
pop ecx
pop ebx
cmp eax, ecx
jl 0x49d952
push 0x213a
push 0x403f5fe
push 1
call fcn.0059e728
add esp, 0xc
shl eax, 2
add ebx, eax
mov ebx, dword [ebx]
mov ebx, dword [ebx + 0x24]
mov ebx, dword [ebx + 4]
add ebx, 0x5c
mov dword [ebp - 0x18], ebx
mov ebx, dword [0x944f04]
call fcn.00402194
push ebx
push ecx
mov eax, dword [ebp + 8]
dec eax
jns 0x49d98f
push 0x2175
push 0x403f5fe
push 4
call fcn.0059e728
add esp, 0xc
pop ecx
pop ebx
cmp eax, ecx
jl 0x49d9ac
push 0x2175
push 0x403f5fe
push 1
call fcn.0059e728
add esp, 0xc
shl eax, 2
add ebx, eax
mov ebx, dword [ebx]
mov ebx, dword [ebx + 0x24]
mov ebx, dword [ebx + 4]
add ebx, 0x5c
mov dword [ebp - 0x1c], ebx
mov ebx, dword [0x944f04]
call fcn.00402194
push ebx
push ecx
mov eax, dword [ebp + 8]
dec eax
jns 0x49d9e9
push 0x2175
push 0x403f5fe
push 4
call fcn.0059e728
add esp, 0xc
pop ecx
pop ebx
cmp eax, ecx
jl 0x49da06
push 0x2175
push 0x403f5fe
push 1
call fcn.0059e728
add esp, 0xc
shl eax, 2
add ebx, eax
mov ebx, dword [ebx]
mov ebx, dword [ebx + 0x20]
mov ebx, dword [ebx + 0x48]
call fcn.00402194
push ebx
push ecx
mov eax, dword [ebp - 0xc]
dec eax
jns 0x49da37
push 0x2175
push 0x403f5fe
push 4
call fcn.0059e728
add esp, 0xc
pop ecx
pop ebx
cmp eax, ecx
jl 0x49da54
push 0x2175
push 0x403f5fe
push 1
call fcn.0059e728
add esp, 0xc
shl eax, 2
add ebx, eax
mov ebx, dword [ebx]
add ebx, 0x10
mov dword [ebp - 0x20], ebx
mov ebx, dword [ebp - 0x1c]
mov ax, word [ebx]
cwde
mov dword [ebp - 0x28], eax
fild dword [ebp - 0x28]
fstp qword [ebp - 0x28]
fld qword [ebp - 0x28]
mov ebx, dword [ebp - 0x20]
fild dword [ebx]
fstp qword [ebp - 0x30]
fsub qword [ebp - 0x30]
fstp qword [ebp - 0x38]
fld qword [ebp - 0x38]
call fcn.00401596
mov ebx, dword [ebp - 0x18]
mov word [ebx], ax
mov ebx, dword [0x944f04]
call fcn.00402194
push ebx
push ecx
mov eax, dword [ebp + 8]
dec eax
jns 0x49daba
push 0x21e2
push 0x403f5fe
push 4
call fcn.0059e728
add esp, 0xc
pop ecx
pop ebx
cmp eax, ecx
jl 0x49dad7
push 0x21e2
push 0x403f5fe
push 1
call fcn.0059e728
add esp, 0xc
shl eax, 2
add ebx, eax
mov ebx, dword [ebx]
mov ebx, dword [ebx + 0x24]
mov ebx, dword [ebx + 4]
add ebx, 0x5c
mov dword [ebp - 0x18], ebx
mov ebx, dword [ebp - 0x18]
mov ax, word [ebx]
cwde
push eax
push 0xf
push dword [ebp + 8]
call fcn.004a1c72
mov ebx, dword [0x944f04]
call fcn.00402194
push ebx
push ecx
mov eax, dword [ebp + 8]
dec eax
jns 0x49db29
push 0x2241
push 0x403f5fe
push 4
call fcn.0059e728
add esp, 0xc
pop ecx
pop ebx
cmp eax, ecx
jl 0x49db46
push 0x2241
push 0x403f5fe
push 1
call fcn.0059e728
add esp, 0xc
shl eax, 2
add ebx, eax
mov ebx, dword [ebx]
mov ebx, dword [ebx + 0x20]
mov ebx, dword [ebx + 0x48]
call fcn.00402194
push ebx
push ecx
mov eax, dword [ebp - 0xc]
dec eax
jns 0x49db77
push 0x2241
push 0x403f5fe
push 4
call fcn.0059e728
add esp, 0xc
pop ecx
pop ebx
cmp eax, ecx
jl 0x49db94
push 0x2241
push 0x403f5fe
push 1
call fcn.0059e728
add esp, 0xc
shl eax, 2
add ebx, eax
mov ebx, dword [ebx]
add ebx, 8
mov dword [ebp - 0x18], ebx
mov ebx, dword [ebp - 0x18]
mov dword [ebx], 0
push dword [ebp + 8]
call fcn.004a23c7
push dword [ebp + 8]
call fcn.00492af9
mov dword [ebp - 0x18], eax
mov ebx, dword [0x944f04]
call fcn.00402194
push ebx
push ecx
mov eax, dword [ebp + 8]
dec eax
jns 0x49dbe7
push 0x22ed
push 0x403f5fe
push 4
call fcn.0059e728
add esp, 0xc
pop ecx
pop ebx
cmp eax, ecx
jl 0x49dc04
push 0x22ed
push 0x403f5fe
push 1
call fcn.0059e728
add esp, 0xc
shl eax, 2
add ebx, eax
mov ebx, dword [ebx]
mov ebx, dword [ebx + 0x24]
mov ebx, dword [ebx + 0xc]
add ebx, 0x84
mov dword [ebp - 0x1c], ebx
push dword [ebp - 0x1c]
push dword [ebp + 8]
call fcn.004a6cf4
mov dword [ebp - 0x20], eax
push dword [ebp - 0x20]
push dword [ebp - 0x18]
push dword [ebp - 0x14]
mov ecx, 3
call fcn.00402e44
add esp, 0xc
mov dword [ebp - 0x24], eax
mov ebx, dword [ebp - 0x18]
test ebx, ebx
je 0x49dc51
push ebx
call fcn.0059e734
add esp, 4
mov ebx, dword [ebp - 0x20]
test ebx, ebx
je 0x49dc61
push ebx
call fcn.0059e734
add esp, 4
lea eax, [ebp - 0x24]
push eax
push dword [ebp + 8]
call fcn.00412a5b
mov ebx, dword [ebp - 0x24]
test ebx, ebx
je 0x49dc7d
push ebx
call fcn.0059e734
add esp, 4
jmp 0x4a1c3c
mov ebx, dword [0x944f04]
call fcn.00402194
push ebx
push ecx
mov eax, dword [ebp + 8]
dec eax
jns 0x49dcac
push 0x2380
push 0x403f5fe
push 4
call fcn.0059e728
add esp, 0xc
pop ecx
pop ebx
cmp eax, ecx
jl 0x49dcc9
push 0x2380
push 0x403f5fe
push 1
call fcn.0059e728
add esp, 0xc
shl eax, 2
add ebx, eax
mov ebx, dword [ebx]
mov ebx, dword [ebx + 0x20]
mov ebx, dword [ebx + 0x48]
call fcn.00402194
push ebx
push ecx
mov eax, dword [ebp - 0xc]
dec eax
jns 0x49dcfa
push 0x2380
push 0x403f5fe
push 4
call fcn.0059e728
add esp, 0xc
pop ecx
pop ebx
cmp eax, ecx
jl 0x49dd17
push 0x2380
push 0x403f5fe
push 1
call fcn.0059e728
add esp, 0xc
shl eax, 2
add ebx, eax
mov ebx, dword [ebx]
add ebx, 0x1c
mov dword [ebp - 0x18], ebx
mov ebx, dword [ebp - 0x18]
cmp dword [ebx], 4
jne 0x49dd9a
mov ebx, dword [0x944f04]
call fcn.00402194
push ebx
push ecx
mov eax, dword [ebp + 8]
dec eax
jns 0x49dd5a
push 0x23c8
push 0x403f5fe
push 4
call fcn.0059e728
add esp, 0xc
pop ecx
pop ebx
cmp eax, ecx
jl 0x49dd77
push 0x23c8
push 0x403f5fe
push 1
call fcn.0059e728
add esp, 0xc
shl eax, 2
add ebx, eax
mov ebx, dword [ebx]
mov ebx, dword [ebx + 0x20]
add ebx, 0x4c
mov dword [ebp - 0x20], ebx
mov ebx, dword [ebp - 0x20]
cmp byte [ebx], 0
jne 0x49dd9a
mov eax, 1
jmp 0x49dd9f
mov eax, 0
test eax, eax
je 0x49e2ea
mov eax, str.4D5A00000000000000106001097068795F706F776572
mov dword [ebp - 0x18], eax
lea eax, [ebp - 0x18]
push eax
call fcn.0040cab0
mov dword [ebp - 0x1c], eax
mov ebx, dword [ebp - 0x18]
test ebx, ebx
je 0x49ddcb
push ebx
call fcn.0059e734
add esp, 4
mov ebx, dword [0x944f04]
call fcn.00402194
push ebx
push ecx
mov eax, dword [ebp + 8]
dec eax
jns 0x49ddf5
push 0x249a
push 0x403f5fe
push 4
call fcn.0059e728
add esp, 0xc
pop ecx
pop ebx
cmp eax, ecx
jl 0x49de12
push 0x249a
push 0x403f5fe
push 1
call fcn.0059e728
add esp, 0xc
shl eax, 2
add ebx, eax
mov ebx, dword [ebx]
mov ebx, dword [ebx + 0x20]
mov ebx, dword [ebx + 0x48]
call fcn.00402194
push ebx
push ecx
mov eax, dword [ebp - 0xc]
dec eax
jns 0x49de43
push 0x249a
push 0x403f5fe
push 4
call fcn.0059e728
add esp, 0xc
pop ecx
pop ebx
cmp eax, ecx
jl 0x49de60
push 0x249a
push 0x403f5fe
push 1
call fcn.0059e728
add esp, 0xc
shl eax, 2
add ebx, eax
mov ebx, dword [ebx]
add ebx, 0x10
mov dword [ebp - 0x20], ebx
push 0x80000301
push 0
mov ebx, dword [ebp - 0x20]
push dword [ebx]
push 1
mov ebx, 0x59f8d0
call fcn.0059e73a
add esp, 0x10
push 0x80000301
push 0
push eax
push 1
mov ebx, 0x5a01a0
call fcn.0059e73a
add esp, 0x10
mov dword [ebp - 0x28], eax
lea eax, [ebp - 0x28]
push eax
call fcn.00431565
mov dword [ebp - 0x2c], eax
mov ebx, dword [ebp - 0x28]
test ebx, ebx
je 0x49dec4
push ebx
call fcn.0059e734
add esp, 4
push dword [ebp - 0x2c]
push dword [ebp - 0x1c]
mov ecx, 2
call fcn.00402e44
add esp, 8
mov dword [ebp - 0x30], eax
mov ebx, dword [ebp - 0x1c]
test ebx, ebx
je 0x49deea
push ebx
call fcn.0059e734
add esp, 4
mov ebx, dword [ebp - 0x2c]
test ebx, ebx
je 0x49defa
push ebx
call fcn.0059e734
add esp, 4
mov eax, dword [ebp - 0x30]
push eax
mov ebx, dword [ebp - 0x14]
test ebx, ebx
je 0x49df0e
push ebx
call fcn.0059e734
add esp, 4
pop eax
mov dword [ebp - 0x14], eax
mov ebx, dword [0x944f04]
call fcn.00402194
push ebx
push ecx
mov eax, dword [ebp + 8]
dec eax
jns 0x49df3c
push 0x24e1
push 0x403f5fe
push 4
call fcn.0059e728
add esp, 0xc
pop ecx
pop ebx
cmp eax, ecx
jl 0x49df59
push 0x24e1
push 0x403f5fe
push 1
call fcn.0059e728
add esp, 0xc
shl eax, 2
add ebx, eax
mov ebx, dword [ebx]
mov ebx, dword [ebx + 0x20]
mov ebx, dword [ebx + 0xb8]
add ebx, 4
mov dword [ebp - 0x18], ebx
mov ebx, dword [0x944f04]
call fcn.00402194
push ebx
push ecx
mov eax, dword [ebp + 8]
dec eax
jns 0x49df99
push 0x251c
push 0x403f5fe
push 4
call fcn.0059e728
add esp, 0xc
pop ecx
pop ebx
cmp eax, ecx
jl 0x49dfb6
push 0x251c
push 0x403f5fe
push 1
call fcn.0059e728
add esp, 0xc
shl eax, 2
add ebx, eax
mov ebx, dword [ebx]
mov ebx, dword [ebx + 0x20]
mov ebx, dword [ebx + 0xb8]
add ebx, 4
mov dword [ebp - 0x1c], ebx
mov ebx, dword [0x944f04]
call fcn.00402194
push ebx
push ecx
mov eax, dword [ebp + 8]
dec eax
jns 0x49dff6
push 0x251c
push 0x403f5fe
push 4
call fcn.0059e728
add esp, 0xc
pop ecx
pop ebx
cmp eax, ecx
jl 0x49e013
push 0x251c
push 0x403f5fe
push 1
call fcn.0059e728
add esp, 0xc
shl eax, 2
add ebx, eax
mov ebx, dword [ebx]
mov ebx, dword [ebx + 0x20]
mov ebx, dword [ebx + 0x48]
call fcn.00402194
push ebx
push ecx
mov eax, dword [ebp - 0xc]
dec eax
jns 0x49e044
push 0x251c
push 0x403f5fe
push 4
call fcn.0059e728
add esp, 0xc
pop ecx
pop ebx
cmp eax, ecx
jl 0x49e061
push 0x251c
push 0x403f5fe
push 1
call fcn.0059e728
add esp, 0xc
shl eax, 2
add ebx, eax
mov ebx, dword [ebx]
add ebx, 0x10
mov dword [ebp - 0x20], ebx
mov ebx, dword [ebp - 0x1c]
fild dword [ebx]
fstp qword [ebp - 0x28]
fld qword [ebp - 0x28]
mov ebx, dword [ebp - 0x20]
fild dword [ebx]
fstp qword [ebp - 0x30]
fadd qword [ebp - 0x30]
fstp qword [ebp - 0x38]
fld qword [ebp - 0x38]
call fcn.00401596
mov ebx, dword [ebp - 0x18]
mov dword [ebx], eax
mov ebx, dword [0x944f04]
call fcn.00402194
push ebx
push ecx
mov eax, dword [ebp + 8]
dec eax
jns 0x49e0be
push 0x2589
push 0x403f5fe
push 4
call fcn.0059e728
add esp, 0xc
pop ecx
pop ebx
cmp eax, ecx
jl 0x49e0db
push 0x2589
push 0x403f5fe
push 1
call fcn.0059e728
add esp, 0xc
shl eax, 2
add ebx, eax
mov ebx, dword [ebx]
mov ebx, dword [ebx + 0x24]
mov ebx, dword [ebx]
mov dword [ebp - 0x18], ebx
mov ebx, dword [0x944f04]
call fcn.00402194
push ebx
push ecx
mov eax, dword [ebp + 8]
dec eax
jns 0x49e114
push 0x25c4
push 0x403f5fe
push 4
call fcn.0059e728
add esp, 0xc
pop ecx
pop ebx
cmp eax, ecx
jl 0x49e131
push 0x25c4
push 0x403f5fe
push 1
call fcn.0059e728
add esp, 0xc
shl eax, 2
add ebx, eax
mov ebx, dword [ebx]
mov ebx, dword [ebx + 0x24]
mov ebx, dword [ebx]
add ebx, 0xc
mov dword [ebp - 0x1c], ebx
push 0x80000301
push 0
mov ebx, dword [ebp - 0x1c]
push dword [ebx]
push 1
mov ebx, 0x5a0e90
call fcn.0059e73a
add esp, 0x10
mov dword [ebp - 0x20], eax
mov ebx, dword [0x944f04]
call fcn.00402194
push ebx
push ecx
mov eax, dword [ebp + 8]
dec eax
jns 0x49e18e
push 0x2621
push 0x403f5fe
push 4
call fcn.0059e728
add esp, 0xc
pop ecx
pop ebx
cmp eax, ecx
jl 0x49e1ab
push 0x2621
push 0x403f5fe
push 1
call fcn.0059e728
add esp, 0xc
shl eax, 2
add ebx, eax
mov ebx, dword [ebx]
mov ebx, dword [ebx + 0x24]
mov ebx, dword [ebx + 4]
add ebx, 0x1c
mov dword [ebp - 0x24], ebx
mov ebx, dword [0x944f04]
call fcn.00402194
push ebx
push ecx
mov eax, dword [ebp + 8]
dec eax
jns 0x49e1e8
push 0x2621
push 0x403f5fe
push 4
call fcn.0059e728
add esp, 0xc
pop ecx
pop ebx
cmp eax, ecx
jl 0x49e205
push 0x2621
push 0x403f5fe
push 1
call fcn.0059e728
add esp, 0xc
shl eax, 2
add ebx, eax
mov ebx, dword [ebx]
mov ebx, dword [ebx + 0x20]
mov ebx, dword [ebx + 0x48]
call fcn.00402194
push ebx
push ecx
mov eax, dword [ebp - 0xc]
dec eax
jns 0x49e236
push 0x2621
push 0x403f5fe
push 4
call fcn.0059e728
add esp, 0xc
pop ecx
pop ebx
cmp eax, ecx
jl 0x49e253
push 0x2621
push 0x403f5fe
push 1
call fcn.0059e728
add esp, 0xc
shl eax, 2
add ebx, eax
mov ebx, dword [ebx]
add ebx, 0x10
mov dword [ebp - 0x28], ebx
mov ebx, dword [ebp - 0x24]
fild dword [ebx]
fstp qword [ebp - 0x30]
fld qword [ebp - 0x30]
mov ebx, dword [ebp - 0x28]
fild dword [ebx]
fstp qword [ebp - 0x38]
fadd qword [ebp - 0x38]
fstp qword [ebp - 0x40]
push 0x80000601
push dword [ebp - 0x3c]
push dword [ebp - 0x40]
push 1
mov ebx, 0x5a0e90
call fcn.0059e73a
add esp, 0x10
mov dword [ebp - 0x44], eax
lea eax, [ebp - 0x44]
push eax
mov eax, str.phy_power
mov dword [ebp - 0x48], eax
lea eax, [ebp - 0x48]
push eax
lea eax, [ebp - 0x20]
push eax
push dword [ebp - 0x18]
call fcn.00411d62
mov ebx, dword [ebp - 0x20]
test ebx, ebx
je 0x49e2c5
push ebx
call fcn.0059e734
add esp, 4
mov ebx, dword [ebp - 0x48]
test ebx, ebx
je 0x49e2d5
push ebx
call fcn.0059e734
add esp, 4
mov ebx, dword [ebp - 0x44]
test ebx, ebx
je 0x49e2e5
push ebx
call fcn.0059e734
add esp, 4
jmp 0x4a1ab9
mov ebx, dword [0x944f04]
call fcn.00402194
push ebx
push ecx
mov eax, dword [ebp + 8]
dec eax
jns 0x49e314
push 0x26c7
push 0x403f5fe
push 4
call fcn.0059e728
add esp, 0xc
pop ecx
pop ebx
cmp eax, ecx
jl 0x49e331
push 0x26c7
push 0x403f5fe
push 1
call fcn.0059e728
add esp, 0xc
shl eax, 2
add ebx, eax
mov ebx, dword [ebx]
mov ebx, dword [ebx + 0x20]
mov ebx, dword [ebx + 0x48]
call fcn.00402194
push ebx
push ecx
mov eax, dword [ebp - 0xc]
dec eax
jns 0x49e362
push 0x26c7
push 0x403f5fe
push 4
call fcn.0059e728
add esp, 0xc
pop ecx
pop ebx
cmp eax, ecx
jl 0x49e37f
push 0x26c7
push 0x403f5fe
push 1
call fcn.0059e728
add esp, 0xc
shl eax, 2
add ebx, eax
mov ebx, dword [ebx]
add ebx, 0x1c
mov dword [ebp - 0x18], ebx
mov ebx, dword [ebp - 0x18]
cmp dword [ebx], 9
jne 0x49e402
mov ebx, dword [0x944f04]
call fcn.00402194
push ebx
push ecx
mov eax, dword [ebp + 8]
dec eax
jns 0x49e3c2
push 0x270f
push 0x403f5fe
push 4
call fcn.0059e728
add esp, 0xc
pop ecx
pop ebx
cmp eax, ecx
jl 0x49e3df
push 0x270f
push 0x403f5fe
push 1
call fcn.0059e728
add esp, 0xc
shl eax, 2
add ebx, eax
mov ebx, dword [ebx]
mov ebx, dword [ebx + 0x20]
add ebx, 0x50
mov dword [ebp - 0x20], ebx
mov ebx, dword [ebp - 0x20]
cmp byte [ebx], 0
jne 0x49e402
mov eax, 1
jmp 0x49e407
mov eax, 0
test eax, eax
je 0x49e952
mov eax, str.4D5A00000000000000106001096D61675F706F776572
mov dword [ebp - 0x18], eax
lea eax, [ebp - 0x18]
push eax
call fcn.0040cab0
mov dword [ebp - 0x1c], eax
mov ebx, dword [ebp - 0x18]
test ebx, ebx
je 0x49e433
push ebx
call fcn.0059e734
add esp, 4
mov ebx, dword [0x944f04]
call fcn.00402194
push ebx
push ecx
mov eax, dword [ebp + 8]
dec eax
jns 0x49e45d
push 0x27e1
push 0x403f5fe
push 4
call fcn.0059e728
add esp, 0xc
pop ecx
pop ebx
cmp eax, ecx
jl 0x49e47a
push 0x27e1
push 0x403f5fe
push 1
call fcn.0059e728
add esp, 0xc
shl eax, 2
add ebx, eax
mov ebx, dword [ebx]
mov ebx, dword [ebx + 0x20]
mov ebx, dword [ebx + 0x48]
call fcn.00402194
push ebx
push ecx
mov eax, dword [ebp - 0xc]
dec eax
jns 0x49e4ab
push 0x27e1
push 0x403f5fe
push 4
call fcn.0059e728
add esp, 0xc
pop ecx
pop ebx
cmp eax, ecx
jl 0x49e4c8
push 0x27e1
push 0x403f5fe
push 1
call fcn.0059e728
add esp, 0xc
shl eax, 2
add ebx, eax
mov ebx, dword [ebx]
add ebx, 0x10
mov dword [ebp - 0x20], ebx
push 0x80000301
push 0
mov ebx, dword [ebp - 0x20]
push dword [ebx]
push 1
mov ebx, 0x59f8d0
call fcn.0059e73a
add esp, 0x10
push 0x80000301
push 0
push eax
push 1
mov ebx, 0x5a01a0
call fcn.0059e73a
add esp, 0x10
mov dword [ebp - 0x28], eax
lea eax, [ebp - 0x28]
push eax
call fcn.00431565
mov dword [ebp - 0x2c], eax
mov ebx, dword [ebp - 0x28]
test ebx, ebx
je 0x49e52c
push ebx
call fcn.0059e734
add esp, 4
push dword [ebp - 0x2c]
push dword [ebp - 0x1c]
mov ecx, 2
call fcn.00402e44
add esp, 8
mov dword [ebp - 0x30], eax
mov ebx, dword [ebp - 0x1c]
test ebx, ebx
je 0x49e552
push ebx
call fcn.0059e734
add esp, 4
mov ebx, dword [ebp - 0x2c]
test ebx, ebx
je 0x49e562
push ebx
call fcn.0059e734
add esp, 4
mov eax, dword [ebp - 0x30]
push eax
mov ebx, dword [ebp - 0x14]
test ebx, ebx
je 0x49e576
push ebx
call fcn.0059e734
add esp, 4
pop eax
mov dword [ebp - 0x14], eax
mov ebx, dword [0x944f04]
call fcn.00402194
push ebx
push ecx
mov eax, dword [ebp + 8]
dec eax
jns 0x49e5a4
push 0x2828
push 0x403f5fe
push 4
call fcn.0059e728
add esp, 0xc
pop ecx
pop ebx
cmp eax, ecx
jl 0x49e5c1
push 0x2828
push 0x403f5fe
push 1
call fcn.0059e728
add esp, 0xc
shl eax, 2
add ebx, eax
mov ebx, dword [ebx]
mov ebx, dword [ebx + 0x20]
mov ebx, dword [ebx + 0xb8]
add ebx, 8
mov dword [ebp - 0x18], ebx
mov ebx, dword [0x944f04]
call fcn.00402194
push ebx
push ecx
mov eax, dword [ebp + 8]
dec eax
jns 0x49e601
push 0x2863
push 0x403f5fe
push 4
call fcn.0059e728
add esp, 0xc
pop ecx
pop ebx
cmp eax, ecx
jl 0x49e61e
push 0x2863
push 0x403f5fe
push 1
call fcn.0059e728
add esp, 0xc
shl eax, 2
add ebx, eax
mov ebx, dword [ebx]
mov ebx, dword [ebx + 0x20]
mov ebx, dword [ebx + 0xb8]
add ebx, 8
mov dword [ebp - 0x1c], ebx
mov ebx, dword [0x944f04]
call fcn.00402194
push ebx
push ecx
mov eax, dword [ebp + 8]
dec eax
jns 0x49e65e
push 0x2863
push 0x403f5fe
push 4
call fcn.0059e728
add esp, 0xc
pop ecx
pop ebx
cmp eax, ecx
jl 0x49e67b
push 0x2863
push 0x403f5fe
push 1
call fcn.0059e728
add esp, 0xc
shl eax, 2
add ebx, eax
mov ebx, dword [ebx]
mov ebx, dword [ebx + 0x20]
mov ebx, dword [ebx + 0x48]
call fcn.00402194
push ebx
push ecx
mov eax, dword [ebp - 0xc]
dec eax
jns 0x49e6ac
push 0x2863
push 0x403f5fe
push 4
call fcn.0059e728
add esp, 0xc
pop ecx
pop ebx
cmp eax, ecx
jl 0x49e6c9
push 0x2863
push 0x403f5fe
push 1
call fcn.0059e728
add esp, 0xc
shl eax, 2
add ebx, eax
mov ebx, dword [ebx]
add ebx, 0x10
mov dword [ebp - 0x20], ebx
mov ebx, dword [ebp - 0x1c]
fild dword [ebx]
fstp qword [ebp - 0x28]
fld qword [ebp - 0x28]
mov ebx, dword [ebp - 0x20]
fild dword [ebx]
fstp qword [ebp - 0x30]
fadd qword [ebp - 0x30]
fstp qword [ebp - 0x38]
fld qword [ebp - 0x38]
call fcn.00401596
mov ebx, dword [ebp - 0x18]
mov dword [ebx], eax
mov ebx, dword [0x944f04]
call fcn.00402194
push ebx
push ecx
mov eax, dword [ebp + 8]
dec eax
jns 0x49e726
push 0x28d0
push 0x403f5fe
push 4
call fcn.0059e728
add esp, 0xc
pop ecx
pop ebx
cmp eax, ecx
jl 0x49e743
push 0x28d0
push 0x403f5fe
push 1
call fcn.0059e728
add esp, 0xc
shl eax, 2
add ebx, eax
mov ebx, dword [ebx]
mov ebx, dword [ebx + 0x24]
mov ebx, dword [ebx]
mov dword [ebp - 0x18], ebx
mov ebx, dword [0x944f04]
call fcn.00402194
push ebx
push ecx
mov eax, dword [ebp + 8]
dec eax
jns 0x49e77c
push 0x290b
push 0x403f5fe
push 4
call fcn.0059e728
add esp, 0xc
pop ecx
pop ebx
cmp eax, ecx
jl 0x49e799
push 0x290b
push 0x403f5fe
push 1
call fcn.0059e728
add esp, 0xc
shl eax, 2
add ebx, eax
mov ebx, dword [ebx]
mov ebx, dword [ebx + 0x24]
mov ebx, dword [ebx]
add ebx, 0xc
mov dword [ebp - 0x1c], ebx
push 0x80000301
push 0
mov ebx, dword [ebp - 0x1c]
push dword [ebx]
push 1
mov ebx, 0x5a0e90
call fcn.0059e73a
add esp, 0x10
mov dword [ebp - 0x20], eax
mov ebx, dword [0x944f04]
call fcn.00402194
push ebx
push ecx
mov eax, dword [ebp + 8]
dec eax
jns 0x49e7f6
push 0x2968
push 0x403f5fe
push 4
call fcn.0059e728
add esp, 0xc
pop ecx
pop ebx
cmp eax, ecx
jl 0x49e813
push 0x2968
push 0x403f5fe
push 1
call fcn.0059e728
add esp, 0xc
shl eax, 2
add ebx, eax
mov ebx, dword [ebx]
mov ebx, dword [ebx + 0x24]
mov ebx, dword [ebx + 4]
add ebx, 0x20
mov dword [ebp - 0x24], ebx
mov ebx, dword [0x944f04]
call fcn.00402194
push ebx
push ecx
mov eax, dword [ebp + 8]
dec eax
jns 0x49e850
push 0x2968
push 0x403f5fe
push 4
call fcn.0059e728
add esp, 0xc
pop ecx
pop ebx
cmp eax, ecx
jl 0x49e86d
push 0x2968
push 0x403f5fe
push 1
call fcn.0059e728
add esp, 0xc
shl eax, 2
add ebx, eax
mov ebx, dword [ebx]
mov ebx, dword [ebx + 0x20]
mov ebx, dword [ebx + 0x48]
call fcn.00402194
push ebx
push ecx
mov eax, dword [ebp - 0xc]
dec eax
jns 0x49e89e
push 0x2968
push 0x403f5fe
push 4
call fcn.0059e728
add esp, 0xc
pop ecx
pop ebx
cmp eax, ecx
jl 0x49e8bb
push 0x2968
push 0x403f5fe
push 1
call fcn.0059e728
add esp, 0xc
shl eax, 2
add ebx, eax
mov ebx, dword [ebx]
add ebx, 0x10
mov dword [ebp - 0x28], ebx
mov ebx, dword [ebp - 0x24]
fild dword [ebx]
fstp qword [ebp - 0x30]
fld qword [ebp - 0x30]
mov ebx, dword [ebp - 0x28]
fild dword [ebx]
fstp qword [ebp - 0x38]
fadd qword [ebp - 0x38]
fstp qword [ebp - 0x40]
push 0x80000601
push dword [ebp - 0x3c]
push dword [ebp - 0x40]
push 1
mov ebx, 0x5a0e90
call fcn.0059e73a
add esp, 0x10
mov dword [ebp - 0x44], eax
lea eax, [ebp - 0x44]
push eax
mov eax, str.mag_power
mov dword [ebp - 0x48], eax
lea eax, [ebp - 0x48]
push eax
lea eax, [ebp - 0x20]
push eax
push dword [ebp - 0x18]
call fcn.00411d62
mov ebx, dword [ebp - 0x20]
test ebx, ebx
je 0x49e92d
push ebx
call fcn.0059e734
add esp, 4
mov ebx, dword [ebp - 0x48]
test ebx, ebx
je 0x49e93d
push ebx
call fcn.0059e734
add esp, 4
mov ebx, dword [ebp - 0x44]
test ebx, ebx
je 0x49e94d
push ebx
call fcn.0059e734
add esp, 4
jmp 0x4a1ab9
mov ebx, dword [0x944f04]
call fcn.00402194
push ebx
push ecx
mov eax, dword [ebp + 8]
dec eax
jns 0x49e97c
push 0x2a0e
push 0x403f5fe
push 4
call fcn.0059e728
add esp, 0xc
pop ecx
pop ebx
cmp eax, ecx
jl 0x49e999
push 0x2a0e
push 0x403f5fe
push 1
call fcn.0059e728
add esp, 0xc
shl eax, 2
add ebx, eax
mov ebx, dword [ebx]
mov ebx, dword [ebx + 0x20]
mov ebx, dword [ebx + 0x48]
call fcn.00402194
push ebx
push ecx
mov eax, dword [ebp - 0xc]
dec eax
jns 0x49e9ca
push 0x2a0e
push 0x403f5fe
push 4
call fcn.0059e728
add esp, 0xc
pop ecx
pop ebx
cmp eax, ecx
jl 0x49e9e7
push 0x2a0e
push 0x403f5fe
push 1
call fcn.0059e728
add esp, 0xc
shl eax, 2
add ebx, eax
mov ebx, dword [ebx]
add ebx, 0x1c
mov dword [ebp - 0x18], ebx
mov ebx, dword [ebp - 0x18]
cmp dword [ebx], 0xe
jne 0x49ea6a
mov ebx, dword [0x944f04]
call fcn.00402194
push ebx
push ecx
mov eax, dword [ebp + 8]
dec eax
jns 0x49ea2a
push 0x2a56
push 0x403f5fe
push 4
call fcn.0059e728
add esp, 0xc
pop ecx
pop ebx
cmp eax, ecx
jl 0x49ea47
push 0x2a56
push 0x403f5fe
push 1
call fcn.0059e728
add esp, 0xc
shl eax, 2
add ebx, eax
mov ebx, dword [ebx]
mov ebx, dword [ebx + 0x20]
add ebx, 0x54
mov dword [ebp - 0x20], ebx
mov ebx, dword [ebp - 0x20]
cmp byte [ebx], 0
jne 0x49ea6a
mov eax, 1
jmp 0x49ea6f
mov eax, 0
test eax, eax
je 0x49ee4f
mov ebx, dword [0x944f04]
call fcn.00402194
push ebx
push ecx
mov eax, dword [ebp + 8]
dec eax
jns 0x49eaa1
push 0x2a94
push 0x403f5fe
push 4
call fcn.0059e728
add esp, 0xc
pop ecx
pop ebx
cmp eax, ecx
jl 0x49eabe
push 0x2a94
push 0x403f5fe
push 1
call fcn.0059e728
add esp, 0xc
shl eax, 2
add ebx, eax
mov ebx, dword [ebx]
mov ebx, dword [ebx + 0x20]
mov ebx, dword [ebx + 0xb8]
add ebx, 0xc
mov dword [ebp - 0x18], ebx
mov ebx, dword [0x944f04]
call fcn.00402194
push ebx
push ecx
mov eax, dword [ebp + 8]
dec eax
jns 0x49eafe
push 0x2acf
push 0x403f5fe
push 4
call fcn.0059e728
add esp, 0xc
pop ecx
pop ebx
cmp eax, ecx
jl 0x49eb1b
push 0x2acf
push 0x403f5fe
push 1
call fcn.0059e728
add esp, 0xc
shl eax, 2
add ebx, eax
mov ebx, dword [ebx]
mov ebx, dword [ebx + 0x20]
mov ebx, dword [ebx + 0xb8]
add ebx, 0xc
mov dword [ebp - 0x1c], ebx
mov ebx, dword [0x944f04]
call fcn.00402194
push ebx
push ecx
mov eax, dword [ebp + 8]
dec eax
jns 0x49eb5b
push 0x2acf
push 0x403f5fe
push 4
call fcn.0059e728
add esp, 0xc
pop ecx
pop ebx
cmp eax, ecx
jl 0x49eb78
push 0x2acf
push 0x403f5fe
push 1
call fcn.0059e728
add esp, 0xc
shl eax, 2
add ebx, eax
mov ebx, dword [ebx]
mov ebx, dword [ebx + 0x20]
mov ebx, dword [ebx + 0x48]
call fcn.00402194
push ebx
push ecx
mov eax, dword [ebp - 0xc]
dec eax
jns 0x49eba9
push 0x2acf
push 0x403f5fe
push 4
call fcn.0059e728
add esp, 0xc
pop ecx
pop ebx
cmp eax, ecx
jl 0x49ebc6
push 0x2acf
push 0x403f5fe
push 1
call fcn.0059e728
add esp, 0xc
shl eax, 2
add ebx, eax
mov ebx, dword [ebx]
add ebx, 0x10
mov dword [ebp - 0x20], ebx
mov ebx, dword [ebp - 0x1c]
fild dword [ebx]
fstp qword [ebp - 0x28]
fld qword [ebp - 0x28]
mov ebx, dword [ebp - 0x20]
fild dword [ebx]
fstp qword [ebp - 0x30]
fadd qword [ebp - 0x30]
fstp qword [ebp - 0x38]
fld qword [ebp - 0x38]
call fcn.00401596
mov ebx, dword [ebp - 0x18]
mov dword [ebx], eax
mov ebx, dword [0x944f04]
call fcn.00402194
push ebx
push ecx
mov eax, dword [ebp + 8]
dec eax
jns 0x49ec23
push 0x2b3c
push 0x403f5fe
push 4
call fcn.0059e728
add esp, 0xc
pop ecx
pop ebx
cmp eax, ecx
jl 0x49ec40
push 0x2b3c
push 0x403f5fe
push 1
call fcn.0059e728
add esp, 0xc
shl eax, 2
add ebx, eax
mov ebx, dword [ebx]
mov ebx, dword [ebx + 0x24]
mov ebx, dword [ebx]
mov dword [ebp - 0x18], ebx
mov ebx, dword [0x944f04]
call fcn.00402194
push ebx
push ecx
mov eax, dword [ebp + 8]
dec eax
jns 0x49ec79
push 0x2b77
push 0x403f5fe
push 4
call fcn.0059e728
add esp, 0xc
pop ecx
pop ebx
cmp eax, ecx
jl 0x49ec96
push 0x2b77
push 0x403f5fe
push 1
call fcn.0059e728
add esp, 0xc
shl eax, 2
add ebx, eax
mov ebx, dword [ebx]
mov ebx, dword [ebx + 0x24]
mov ebx, dword [ebx]
add ebx, 0xc
mov dword [ebp - 0x1c], ebx
push 0x80000301
push 0
mov ebx, dword [ebp - 0x1c]
push dword [ebx]
push 1
mov ebx, 0x5a0e90
call fcn.0059e73a
add esp, 0x10
mov dword [ebp - 0x20], eax
mov ebx, dword [0x944f04]
call fcn.00402194
push ebx
push ecx
mov eax, dword [ebp + 8]
dec eax
jns 0x49ecf3
push 0x2bd3
push 0x403f5fe
push 4
call fcn.0059e728
add esp, 0xc
pop ecx
pop ebx
cmp eax, ecx
jl 0x49ed10
push 0x2bd3
push 0x403f5fe
push 1
call fcn.0059e728
add esp, 0xc
shl eax, 2
add ebx, eax
mov ebx, dword [ebx]
mov ebx, dword [ebx + 0x24]
mov ebx, dword [ebx + 4]
add ebx, 0x24
mov dword [ebp - 0x24], ebx
mov ebx, dword [0x944f04]
call fcn.00402194
push ebx
push ecx
mov eax, dword [ebp + 8]
dec eax
jns 0x49ed4d
push 0x2bd3
push 0x403f5fe
push 4
call fcn.0059e728
add esp, 0xc
pop ecx
pop ebx
cmp eax, ecx
jl 0x49ed6a
push 0x2bd3
push 0x403f5fe
push 1
call fcn.0059e728
add esp, 0xc
shl eax, 2
add ebx, eax
mov ebx, dword [ebx]
mov ebx, dword [ebx + 0x20]
mov ebx, dword [ebx + 0x48]
call fcn.00402194
push ebx
push ecx
mov eax, dword [ebp - 0xc]
dec eax
jns 0x49ed9b
push 0x2bd3
push 0x403f5fe
push 4
call fcn.0059e728
add esp, 0xc
pop ecx
pop ebx
cmp eax, ecx
jl 0x49edb8
push 0x2bd3
push 0x403f5fe
push 1
call fcn.0059e728
add esp, 0xc
shl eax, 2
add ebx, eax
mov ebx, dword [ebx]
add ebx, 0x10
mov dword [ebp - 0x28], ebx
mov ebx, dword [ebp - 0x24]
fild dword [ebx]
fstp qword [ebp - 0x30]
fld qword [ebp - 0x30]
mov ebx, dword [ebp - 0x28]
fild dword [ebx]
fstp qword [ebp - 0x38]
fadd qword [ebp - 0x38]
fstp qword [ebp - 0x40]
push 0x80000601
push dword [ebp - 0x3c]
push dword [ebp - 0x40]
push 1
mov ebx, 0x5a0e90
call fcn.0059e73a
add esp, 0x10
mov dword [ebp - 0x44], eax
lea eax, [ebp - 0x44]
push eax
mov eax, str.max_life
mov dword [ebp - 0x48], eax
lea eax, [ebp - 0x48]
push eax
lea eax, [ebp - 0x20]
push eax
push dword [ebp - 0x18]
call fcn.00411d62
mov ebx, dword [ebp - 0x20]
test ebx, ebx
je 0x49ee2a
push ebx
call fcn.0059e734
add esp, 4
mov ebx, dword [ebp - 0x48]
test ebx, ebx
je 0x49ee3a
push ebx
call fcn.0059e734
add esp, 4
mov ebx, dword [ebp - 0x44]
test ebx, ebx
je 0x49ee4a
push ebx
call fcn.0059e734
add esp, 4
jmp 0x4a1ab9
mov ebx, dword [0x944f04]
call fcn.00402194
push ebx
push ecx
mov eax, dword [ebp + 8]
dec eax
jns 0x49ee79
push 0x2c79
push 0x403f5fe
push 4
call fcn.0059e728
add esp, 0xc
pop ecx
pop ebx
cmp eax, ecx
jl 0x49ee96
push 0x2c79
push 0x403f5fe
push 1
call fcn.0059e728
add esp, 0xc
shl eax, 2
add ebx, eax
mov ebx, dword [ebx]
mov ebx, dword [ebx + 0x20]
mov ebx, dword [ebx + 0x48]
call fcn.00402194
push ebx
push ecx
mov eax, dword [ebp - 0xc]
dec eax
jns 0x49eec7
push 0x2c79
push 0x403f5fe
push 4
call fcn.0059e728
add esp, 0xc
pop ecx
pop ebx
cmp eax, ecx
jl 0x49eee4
push 0x2c79
push 0x403f5fe
push 1
call fcn.0059e728
add esp, 0xc
shl eax, 2
add ebx, eax
mov ebx, dword [ebx]
add ebx, 0x1c
mov dword [ebp - 0x18], ebx
mov ebx, dword [ebp - 0x18]
cmp dword [ebx], 0xd
jne 0x49ef67
mov ebx, dword [0x944f04]
call fcn.00402194
push ebx
push ecx
mov eax, dword [ebp + 8]
dec eax
jns 0x49ef27
push 0x2cc1
push 0x403f5fe
push 4
call fcn.0059e728
add esp, 0xc
pop ecx
pop ebx
cmp eax, ecx
jl 0x49ef44
push 0x2cc1
push 0x403f5fe
push 1
call fcn.0059e728
add esp, 0xc
shl eax, 2
add ebx, eax
mov ebx, dword [ebx]
mov ebx, dword [ebx + 0x20]
add ebx, 0x58
mov dword [ebp - 0x20], ebx
mov ebx, dword [ebp - 0x20]
cmp byte [ebx], 0
jne 0x49ef67
mov eax, 1
jmp 0x49ef6c
mov eax, 0
test eax, eax
je 0x49f4b7
mov eax, str.4D5A000000000000000A600103646566
mov dword [ebp - 0x18], eax
lea eax, [ebp - 0x18]
push eax
call fcn.0040cab0
mov dword [ebp - 0x1c], eax
mov ebx, dword [ebp - 0x18]
test ebx, ebx
je 0x49ef98
push ebx
call fcn.0059e734
add esp, 4
mov ebx, dword [0x944f04]
call fcn.00402194
push ebx
push ecx
mov eax, dword [ebp + 8]
dec eax
jns 0x49efc2
push 0x2d87
push 0x403f5fe
push 4
call fcn.0059e728
add esp, 0xc
pop ecx
pop ebx
cmp eax, ecx
jl 0x49efdf
push 0x2d87
push 0x403f5fe
push 1
call fcn.0059e728
add esp, 0xc
shl eax, 2
add ebx, eax
mov ebx, dword [ebx]
mov ebx, dword [ebx + 0x20]
mov ebx, dword [ebx + 0x48]
call fcn.00402194
push ebx
push ecx
mov eax, dword [ebp - 0xc]
dec eax
jns 0x49f010
push 0x2d87
push 0x403f5fe
push 4
call fcn.0059e728
add esp, 0xc
pop ecx
pop ebx
cmp eax, ecx
jl 0x49f02d
push 0x2d87
push 0x403f5fe
push 1
call fcn.0059e728
add esp, 0xc
shl eax, 2
add ebx, eax
mov ebx, dword [ebx]
add ebx, 0x10
mov dword [ebp - 0x20], ebx
push 0x80000301
push 0
mov ebx, dword [ebp - 0x20]
push dword [ebx]
push 1
mov ebx, 0x59f8d0
call fcn.0059e73a
add esp, 0x10
push 0x80000301
push 0
push eax
push 1
mov ebx, 0x5a01a0
call fcn.0059e73a
add esp, 0x10
mov dword [ebp - 0x28], eax
lea eax, [ebp - 0x28]
push eax
call fcn.00431565
mov dword [ebp - 0x2c], eax
mov ebx, dword [ebp - 0x28]
test ebx, ebx
je 0x49f091
push ebx
call fcn.0059e734
add esp, 4
push dword [ebp - 0x2c]
push dword [ebp - 0x1c]
mov ecx, 2
call fcn.00402e44
add esp, 8
mov dword [ebp - 0x30], eax
mov ebx, dword [ebp - 0x1c]
test ebx, ebx
je 0x49f0b7
push ebx
call fcn.0059e734
add esp, 4
mov ebx, dword [ebp - 0x2c]
test ebx, ebx
je 0x49f0c7
push ebx
call fcn.0059e734
add esp, 4
mov eax, dword [ebp - 0x30]
push eax
mov ebx, dword [ebp - 0x14]
test ebx, ebx
je 0x49f0db
push ebx
call fcn.0059e734
add esp, 4
pop eax
mov dword [ebp - 0x14], eax
mov ebx, dword [0x944f04]
call fcn.00402194
push ebx
push ecx
mov eax, dword [ebp + 8]
dec eax
jns 0x49f109
push 0x2dce
push 0x403f5fe
push 4
call fcn.0059e728
add esp, 0xc
pop ecx
pop ebx
cmp eax, ecx
jl 0x49f126
push 0x2dce
push 0x403f5fe
push 1
call fcn.0059e728
add esp, 0xc
shl eax, 2
add ebx, eax
mov ebx, dword [ebx]
mov ebx, dword [ebx + 0x20]
mov ebx, dword [ebx + 0xb8]
add ebx, 0x10
mov dword [ebp - 0x18], ebx
mov ebx, dword [0x944f04]
call fcn.00402194
push ebx
push ecx
mov eax, dword [ebp + 8]
dec eax
jns 0x49f166
push 0x2e09
push 0x403f5fe
push 4
call fcn.0059e728
add esp, 0xc
pop ecx
pop ebx
cmp eax, ecx
jl 0x49f183
push 0x2e09
push 0x403f5fe
push 1
call fcn.0059e728
add esp, 0xc
shl eax, 2
add ebx, eax
mov ebx, dword [ebx]
mov ebx, dword [ebx + 0x20]
mov ebx, dword [ebx + 0xb8]
add ebx, 0x10
mov dword [ebp - 0x1c], ebx
mov ebx, dword [0x944f04]
call fcn.00402194
push ebx
push ecx
mov eax, dword [ebp + 8]
dec eax
jns 0x49f1c3
push 0x2e09
push 0x403f5fe
push 4
call fcn.0059e728
add esp, 0xc
pop ecx
pop ebx
cmp eax, ecx
jl 0x49f1e0
push 0x2e09
push 0x403f5fe
push 1
call fcn.0059e728
add esp, 0xc
shl eax, 2
add ebx, eax
mov ebx, dword [ebx]
mov ebx, dword [ebx + 0x20]
mov ebx, dword [ebx + 0x48]
call fcn.00402194
push ebx
push ecx
mov eax, dword [ebp - 0xc]
dec eax
jns 0x49f211
push 0x2e09
push 0x403f5fe
push 4
call fcn.0059e728
add esp, 0xc
pop ecx
pop ebx
cmp eax, ecx
jl 0x49f22e
push 0x2e09
push 0x403f5fe
push 1
call fcn.0059e728
add esp, 0xc
shl eax, 2
add ebx, eax
mov ebx, dword [ebx]
add ebx, 0x10
mov dword [ebp - 0x20], ebx
mov ebx, dword [ebp - 0x1c]
fild dword [ebx]
fstp qword [ebp - 0x28]
fld qword [ebp - 0x28]
mov ebx, dword [ebp - 0x20]
fild dword [ebx]
fstp qword [ebp - 0x30]
fadd qword [ebp - 0x30]
fstp qword [ebp - 0x38]
fld qword [ebp - 0x38]
call fcn.00401596
mov ebx, dword [ebp - 0x18]
mov dword [ebx], eax
mov ebx, dword [0x944f04]
call fcn.00402194
push ebx
push ecx
mov eax, dword [ebp + 8]
dec eax
jns 0x49f28b
push 0x2e76
push 0x403f5fe
push 4
call fcn.0059e728
add esp, 0xc
pop ecx
pop ebx
cmp eax, ecx
jl 0x49f2a8
push 0x2e76
push 0x403f5fe
push 1
call fcn.0059e728
add esp, 0xc
shl eax, 2
add ebx, eax
mov ebx, dword [ebx]
mov ebx, dword [ebx + 0x24]
mov ebx, dword [ebx]
mov dword [ebp - 0x18], ebx
mov ebx, dword [0x944f04]
call fcn.00402194
push ebx
push ecx
mov eax, dword [ebp + 8]
dec eax
jns 0x49f2e1
push 0x2eb1
push 0x403f5fe
push 4
call fcn.0059e728
add esp, 0xc
pop ecx
pop ebx
cmp eax, ecx
jl 0x49f2fe
push 0x2eb1
push 0x403f5fe
push 1
call fcn.0059e728
add esp, 0xc
shl eax, 2
add ebx, eax
mov ebx, dword [ebx]
mov ebx, dword [ebx + 0x24]
mov ebx, dword [ebx]
add ebx, 0xc
mov dword [ebp - 0x1c], ebx
push 0x80000301
push 0
mov ebx, dword [ebp - 0x1c]
push dword [ebx]
push 1
mov ebx, 0x5a0e90
call fcn.0059e73a
add esp, 0x10
mov dword [ebp - 0x20], eax
mov ebx, dword [0x944f04]
call fcn.00402194
push ebx
push ecx
mov eax, dword [ebp + 8]
dec eax
jns 0x49f35b
push 0x2f08
push 0x403f5fe
push 4
call fcn.0059e728
add esp, 0xc
pop ecx
pop ebx
cmp eax, ecx
jl 0x49f378
push 0x2f08
push 0x403f5fe
push 1
call fcn.0059e728
add esp, 0xc
shl eax, 2
add ebx, eax
mov ebx, dword [ebx]
mov ebx, dword [ebx + 0x24]
mov ebx, dword [ebx + 4]
add ebx, 0x2c
mov dword [ebp - 0x24], ebx
mov ebx, dword [0x944f04]
call fcn.00402194
push ebx
push ecx
mov eax, dword [ebp + 8]
dec eax
jns 0x49f3b5
push 0x2f08
push 0x403f5fe
push 4
call fcn.0059e728
add esp, 0xc
pop ecx
pop ebx
cmp eax, ecx
jl 0x49f3d2
push 0x2f08
push 0x403f5fe
push 1
call fcn.0059e728
add esp, 0xc
shl eax, 2
add ebx, eax
mov ebx, dword [ebx]
mov ebx, dword [ebx + 0x20]
mov ebx, dword [ebx + 0x48]
call fcn.00402194
push ebx
push ecx
mov eax, dword [ebp - 0xc]
dec eax
jns 0x49f403
push 0x2f08
push 0x403f5fe
push 4
call fcn.0059e728
add esp, 0xc
pop ecx
pop ebx
cmp eax, ecx
jl 0x49f420
push 0x2f08
push 0x403f5fe
push 1
call fcn.0059e728
add esp, 0xc
shl eax, 2
add ebx, eax
mov ebx, dword [ebx]
add ebx, 0x10
mov dword [ebp - 0x28], ebx
mov ebx, dword [ebp - 0x24]
fild dword [ebx]
fstp qword [ebp - 0x30]
fld qword [ebp - 0x30]
mov ebx, dword [ebp - 0x28]
fild dword [ebx]
fstp qword [ebp - 0x38]
fadd qword [ebp - 0x38]
fstp qword [ebp - 0x40]
push 0x80000601
push dword [ebp - 0x3c]
push dword [ebp - 0x40]
push 1
mov ebx, 0x5a0e90
call fcn.0059e73a
add esp, 0x10
mov dword [ebp - 0x44], eax
lea eax, [ebp - 0x44]
push eax
mov eax, 0x79b546
mov dword [ebp - 0x48], eax
lea eax, [ebp - 0x48]
push eax
lea eax, [ebp - 0x20]
push eax
push dword [ebp - 0x18]
call fcn.00411d62
mov ebx, dword [ebp - 0x20]
test ebx, ebx
je 0x49f492
push ebx
call fcn.0059e734
add esp, 4
mov ebx, dword [ebp - 0x48]
test ebx, ebx
je 0x49f4a2
push ebx
call fcn.0059e734
add esp, 4
mov ebx, dword [ebp - 0x44]
test ebx, ebx
je 0x49f4b2
push ebx
call fcn.0059e734
add esp, 4
jmp 0x4a1ab9
mov ebx, dword [0x944f04]
call fcn.00402194
push ebx
push ecx
mov eax, dword [ebp + 8]
dec eax
jns 0x49f4e1
push 0x2fae
push 0x403f5fe
push 4
call fcn.0059e728
add esp, 0xc
pop ecx
pop ebx
cmp eax, ecx
jl 0x49f4fe
push 0x2fae
push 0x403f5fe
push 1
call fcn.0059e728
add esp, 0xc
shl eax, 2
add ebx, eax
mov ebx, dword [ebx]
mov ebx, dword [ebx + 0x20]
mov ebx, dword [ebx + 0x48]
call fcn.00402194
push ebx
push ecx
mov eax, dword [ebp - 0xc]
dec eax
jns 0x49f52f
push 0x2fae
push 0x403f5fe
push 4
call fcn.0059e728
add esp, 0xc
pop ecx
pop ebx
cmp eax, ecx
jl 0x49f54c
push 0x2fae
push 0x403f5fe
push 1
call fcn.0059e728
add esp, 0xc
shl eax, 2
add ebx, eax
mov ebx, dword [ebx]
add ebx, 0x1c
mov dword [ebp - 0x18], ebx
mov ebx, dword [ebp - 0x18]
cmp dword [ebx], 0x13
jne 0x49f5cf
mov ebx, dword [0x944f04]
call fcn.00402194
push ebx
push ecx
mov eax, dword [ebp + 8]
dec eax
jns 0x49f58f
push 0x2ff6
push 0x403f5fe
push 4
call fcn.0059e728
add esp, 0xc
pop ecx
pop ebx
cmp eax, ecx
jl 0x49f5ac
push 0x2ff6
push 0x403f5fe
push 1
call fcn.0059e728
add esp, 0xc
shl eax, 2
add ebx, eax
mov ebx, dword [ebx]
mov ebx, dword [ebx + 0x20]
add ebx, 0x5c
mov dword [ebp - 0x20], ebx
mov ebx, dword [ebp - 0x20]
cmp byte [ebx], 0
jne 0x49f5cf
mov eax, 1
jmp 0x49f5d4
mov eax, 0
test eax, eax
je 0x49fb30
mov eax, str.4D5A000000000000000C6001057370656564
mov dword [ebp - 0x18], eax
lea eax, [ebp - 0x18]
push eax
call fcn.0040cab0
mov dword [ebp - 0x1c], eax
mov ebx, dword [ebp - 0x18]
test ebx, ebx
je 0x49f600
push ebx
call fcn.0059e734
add esp, 4
mov ebx, dword [0x944f04]
call fcn.00402194
push ebx
push ecx
mov eax, dword [ebp + 8]
dec eax
jns 0x49f62a
push 0x30c0
push 0x403f5fe
push 4
call fcn.0059e728
add esp, 0xc
pop ecx
pop ebx
cmp eax, ecx
jl 0x49f647
push 0x30c0
push 0x403f5fe
push 1
call fcn.0059e728
add esp, 0xc
shl eax, 2
add ebx, eax
mov ebx, dword [ebx]
mov ebx, dword [ebx + 0x20]
mov ebx, dword [ebx + 0x48]
call fcn.00402194
push ebx
push ecx
mov eax, dword [ebp - 0xc]
dec eax
jns 0x49f678
push 0x30c0
push 0x403f5fe
push 4
call fcn.0059e728
add esp, 0xc
pop ecx
pop ebx
cmp eax, ecx
jl 0x49f695
push 0x30c0
push 0x403f5fe
push 1
call fcn.0059e728
add esp, 0xc
shl eax, 2
add ebx, eax
mov ebx, dword [ebx]
add ebx, 0x10
mov dword [ebp - 0x20], ebx
push 0x80000301
push 0
mov ebx, dword [ebp - 0x20]
push dword [ebx]
push 1
mov ebx, 0x59f8d0
call fcn.0059e73a
add esp, 0x10
push 0x80000301
push 0
push eax
push 1
mov ebx, 0x5a01a0
call fcn.0059e73a
add esp, 0x10
mov dword [ebp - 0x28], eax
lea eax, [ebp - 0x28]
push eax
call fcn.00431565
mov dword [ebp - 0x2c], eax
mov ebx, dword [ebp - 0x28]
test ebx, ebx
je 0x49f6f9
push ebx
call fcn.0059e734
add esp, 4
push dword [ebp - 0x2c]
push dword [ebp - 0x1c]
mov ecx, 2
call fcn.00402e44
add esp, 8
mov dword [ebp - 0x30], eax
mov ebx, dword [ebp - 0x1c]
test ebx, ebx
je 0x49f71f
push ebx
call fcn.0059e734
add esp, 4
mov ebx, dword [ebp - 0x2c]
test ebx, ebx
je 0x49f72f
push ebx
call fcn.0059e734
add esp, 4
mov eax, dword [ebp - 0x30]
push eax
mov ebx, dword [ebp - 0x14]
test ebx, ebx
je 0x49f743
push ebx
call fcn.0059e734
add esp, 4
pop eax
mov dword [ebp - 0x14], eax
mov ebx, dword [0x944f04]
call fcn.00402194
push ebx
push ecx
mov eax, dword [ebp + 8]
dec eax
jns 0x49f771
push 0x3107
push 0x403f5fe
push 4
call fcn.0059e728
add esp, 0xc
pop ecx
pop ebx
cmp eax, ecx
jl 0x49f78e
push 0x3107
push 0x403f5fe
push 1
call fcn.0059e728
add esp, 0xc
shl eax, 2
add ebx, eax
mov ebx, dword [ebx]
mov ebx, dword [ebx + 0x20]
mov ebx, dword [ebx + 0xb8]
add ebx, 0x14
mov dword [ebp - 0x18], ebx
mov ebx, dword [0x944f04]
call fcn.00402194
push ebx
push ecx
mov eax, dword [ebp + 8]
dec eax
jns 0x49f7ce
push 0x3142
push 0x403f5fe
push 4
call fcn.0059e728
add esp, 0xc
pop ecx
pop ebx
cmp eax, ecx
jl 0x49f7eb
push 0x3142
push 0x403f5fe
push 1
call fcn.0059e728
add esp, 0xc
shl eax, 2
add ebx, eax
mov ebx, dword [ebx]
mov ebx, dword [ebx + 0x20]
mov ebx, dword [ebx + 0xb8]
add ebx, 0x14
mov dword [ebp - 0x1c], ebx
mov ebx, dword [0x944f04]
call fcn.00402194
push ebx
push ecx
mov eax, dword [ebp + 8]
dec eax
jns 0x49f82b
push 0x3142
push 0x403f5fe
push 4
call fcn.0059e728
add esp, 0xc
pop ecx
pop ebx
cmp eax, ecx
jl 0x49f848
push 0x3142
push 0x403f5fe
push 1
call fcn.0059e728
add esp, 0xc
shl eax, 2
add ebx, eax
mov ebx, dword [ebx]
mov ebx, dword [ebx + 0x20]
mov ebx, dword [ebx + 0x48]
call fcn.00402194
push ebx
push ecx
mov eax, dword [ebp - 0xc]
dec eax
jns 0x49f879
push 0x3142
push 0x403f5fe
push 4
call fcn.0059e728
add esp, 0xc
pop ecx
pop ebx
cmp eax, ecx
jl 0x49f896
push 0x3142
push 0x403f5fe
push 1
call fcn.0059e728
add esp, 0xc
shl eax, 2
add ebx, eax
mov ebx, dword [ebx]
add ebx, 0x10
mov dword [ebp - 0x20], ebx
mov ebx, dword [ebp - 0x1c]
mov ax, word [ebx]
cwde
mov dword [ebp - 0x28], eax
fild dword [ebp - 0x28]
fstp qword [ebp - 0x28]
fld qword [ebp - 0x28]
mov ebx, dword [ebp - 0x20]
fild dword [ebx]
fstp qword [ebp - 0x30]
fadd qword [ebp - 0x30]
fstp qword [ebp - 0x38]
fld qword [ebp - 0x38]
call fcn.00401596
mov ebx, dword [ebp - 0x18]
mov word [ebx], ax
mov ebx, dword [0x944f04]
call fcn.00402194
push ebx
push ecx
mov eax, dword [ebp + 8]
dec eax
jns 0x49f8fc
push 0x31af
push 0x403f5fe
push 4
call fcn.0059e728
add esp, 0xc
pop ecx
pop ebx
cmp eax, ecx
jl 0x49f919
push 0x31af
push 0x403f5fe
push 1
call fcn.0059e728
add esp, 0xc
shl eax, 2
add ebx, eax
mov ebx, dword [ebx]
mov ebx, dword [ebx + 0x24]
mov ebx, dword [ebx]
mov dword [ebp - 0x18], ebx
mov ebx, dword [0x944f04]
call fcn.00402194
push ebx
push ecx
mov eax, dword [ebp + 8]
dec eax
jns 0x49f952
push 0x31ea
push 0x403f5fe
push 4
call fcn.0059e728
add esp, 0xc
pop ecx
pop ebx
cmp eax, ecx
jl 0x49f96f
push 0x31ea
push 0x403f5fe
push 1
call fcn.0059e728
add esp, 0xc
shl eax, 2
add ebx, eax
mov ebx, dword [ebx]
mov ebx, dword [ebx + 0x24]
mov ebx, dword [ebx]
add ebx, 0xc
mov dword [ebp - 0x1c], ebx
push 0x80000301
push 0
mov ebx, dword [ebp - 0x1c]
push dword [ebx]
push 1
mov ebx, 0x5a0e90
call fcn.0059e73a
add esp, 0x10
mov dword [ebp - 0x20], eax
mov ebx, dword [0x944f04]
call fcn.00402194
push ebx
push ecx
mov eax, dword [ebp + 8]
dec eax
jns 0x49f9cc
push 0x3243
push 0x403f5fe
push 4
call fcn.0059e728
add esp, 0xc
pop ecx
pop ebx
cmp eax, ecx
jl 0x49f9e9
push 0x3243
push 0x403f5fe
push 1
call fcn.0059e728
add esp, 0xc
shl eax, 2
add ebx, eax
mov ebx, dword [ebx]
mov ebx, dword [ebx + 0x24]
mov ebx, dword [ebx + 4]
add ebx, 0x30
mov dword [ebp - 0x24], ebx
mov ebx, dword [0x944f04]
call fcn.00402194
push ebx
push ecx
mov eax, dword [ebp + 8]
dec eax
jns 0x49fa26
push 0x3243
push 0x403f5fe
push 4
call fcn.0059e728
add esp, 0xc
pop ecx
pop ebx
cmp eax, ecx
jl 0x49fa43
push 0x3243
push 0x403f5fe
push 1
call fcn.0059e728
add esp, 0xc
shl eax, 2
add ebx, eax
mov ebx, dword [ebx]
mov ebx, dword [ebx + 0x20]
mov ebx, dword [ebx + 0x48]
call fcn.00402194
push ebx
push ecx
mov eax, dword [ebp - 0xc]
dec eax
jns 0x49fa74
push 0x3243
push 0x403f5fe
push 4
call fcn.0059e728
add esp, 0xc
pop ecx
pop ebx
cmp eax, ecx
jl 0x49fa91
push 0x3243
push 0x403f5fe
push 1
call fcn.0059e728
add esp, 0xc
shl eax, 2
add ebx, eax
mov ebx, dword [ebx]
add ebx, 0x10
mov dword [ebp - 0x28], ebx
mov ebx, dword [ebp - 0x24]
mov ax, word [ebx]
cwde
mov dword [ebp - 0x30], eax
fild dword [ebp - 0x30]
fstp qword [ebp - 0x30]
fld qword [ebp - 0x30]
mov ebx, dword [ebp - 0x28]
fild dword [ebx]
fstp qword [ebp - 0x38]
fadd qword [ebp - 0x38]
fstp qword [ebp - 0x40]
push 0x80000601
push dword [ebp - 0x3c]
push dword [ebp - 0x40]
push 1
mov ebx, 0x5a0e90
call fcn.0059e73a
add esp, 0x10
mov dword [ebp - 0x44], eax
lea eax, [ebp - 0x44]
push eax
mov eax, str.speed
mov dword [ebp - 0x48], eax
lea eax, [ebp - 0x48]
push eax
lea eax, [ebp - 0x20]
push eax
push dword [ebp - 0x18]
call fcn.00411d62
mov ebx, dword [ebp - 0x20]
test ebx, ebx
je 0x49fb0b
push ebx
call fcn.0059e734
add esp, 4
mov ebx, dword [ebp - 0x48]
test ebx, ebx
je 0x49fb1b
push ebx
call fcn.0059e734
add esp, 4
mov ebx, dword [ebp - 0x44]
test ebx, ebx
je 0x49fb2b
push ebx
call fcn.0059e734
add esp, 4
jmp 0x4a1ab9
mov ebx, dword [0x944f04]
call fcn.00402194
push ebx
push ecx
mov eax, dword [ebp + 8]
dec eax
jns 0x49fb5a
push 0x32d7
push 0x403f5fe
push 4
call fcn.0059e728
add esp, 0xc
pop ecx
pop ebx
cmp eax, ecx
jl 0x49fb77
push 0x32d7
push 0x403f5fe
push 1
call fcn.0059e728
add esp, 0xc
shl eax, 2
add ebx, eax
mov ebx, dword [ebx]
mov ebx, dword [ebx + 0x20]
mov ebx, dword [ebx + 0x48]
call fcn.00402194
push ebx
push ecx
mov eax, dword [ebp - 0xc]
dec eax
jns 0x49fba8
push 0x32d7
push 0x403f5fe
push 4
call fcn.0059e728
add esp, 0xc
pop ecx
pop ebx
cmp eax, ecx
jl 0x49fbc5
push 0x32d7
push 0x403f5fe
push 1
call fcn.0059e728
add esp, 0xc
shl eax, 2
add ebx, eax
mov ebx, dword [ebx]
add ebx, 0x1c
mov dword [ebp - 0x18], ebx
mov ebx, dword [ebp - 0x18]
cmp dword [ebx], 0x11
jne 0x4a059e
mov ebx, dword [0x944f04]
call fcn.00402194
push ebx
push ecx
mov eax, dword [ebp + 8]
dec eax
jns 0x49fc08
push 0x3320
push 0x403f5fe
push 4
call fcn.0059e728
add esp, 0xc
pop ecx
pop ebx
cmp eax, ecx
jl 0x49fc25
push 0x3320
push 0x403f5fe
push 1
call fcn.0059e728
add esp, 0xc
shl eax, 2
add ebx, eax
mov ebx, dword [ebx]
mov ebx, dword [ebx + 0x24]
mov ebx, dword [ebx]
mov dword [ebp - 0x18], ebx
mov ebx, dword [0x944f04]
call fcn.00402194
push ebx
push ecx
mov eax, dword [ebp + 8]
dec eax
jns 0x49fc5e
push 0x335b
push 0x403f5fe
push 4
call fcn.0059e728
add esp, 0xc
pop ecx
pop ebx
cmp eax, ecx
jl 0x49fc7b
push 0x335b
push 0x403f5fe
push 1
call fcn.0059e728
add esp, 0xc
shl eax, 2
add ebx, eax
mov ebx, dword [ebx]
mov ebx, dword [ebx + 0x24]
mov ebx, dword [ebx]
add ebx, 0xc
mov dword [ebp - 0x1c], ebx
push 0x80000301
push 0
mov ebx, dword [ebp - 0x1c]
push dword [ebx]
push 1
mov ebx, 0x5a0e90
call fcn.0059e73a
add esp, 0x10
mov dword [ebp - 0x20], eax
mov ebx, dword [0x944f04]
call fcn.00402194
push ebx
push ecx
mov eax, dword [ebp + 8]
dec eax
jns 0x49fcd8
push 0x33b2
push 0x403f5fe
push 4
call fcn.0059e728
add esp, 0xc
pop ecx
pop ebx
cmp eax, ecx
jl 0x49fcf5
push 0x33b2
push 0x403f5fe
push 1
call fcn.0059e728
add esp, 0xc
shl eax, 2
add ebx, eax
mov ebx, dword [ebx]
mov ebx, dword [ebx + 0x24]
mov ebx, dword [ebx + 4]
add ebx, 0x60
mov dword [ebp - 0x24], ebx
mov ebx, dword [0x944f04]
call fcn.00402194
push ebx
push ecx
mov eax, dword [ebp + 8]
dec eax
jns 0x49fd32
push 0x33b2
push 0x403f5fe
push 4
call fcn.0059e728
add esp, 0xc
pop ecx
pop ebx
cmp eax, ecx
jl 0x49fd4f
push 0x33b2
push 0x403f5fe
push 1
call fcn.0059e728
add esp, 0xc
shl eax, 2
add ebx, eax
mov ebx, dword [ebx]
mov ebx, dword [ebx + 0x20]
mov ebx, dword [ebx + 0x48]
call fcn.00402194
push ebx
push ecx
mov eax, dword [ebp - 0xc]
dec eax
jns 0x49fd80
push 0x33b2
push 0x403f5fe
push 4
call fcn.0059e728
add esp, 0xc
pop ecx
pop ebx
cmp eax, ecx
jl 0x49fd9d
push 0x33b2
push 0x403f5fe
push 1
call fcn.0059e728
add esp, 0xc
shl eax, 2
add ebx, eax
mov ebx, dword [ebx]
add ebx, 0x10
mov dword [ebp - 0x28], ebx
mov ebx, dword [ebp - 0x24]
mov ax, word [ebx]
cwde
mov dword [ebp - 0x30], eax
fild dword [ebp - 0x30]
fstp qword [ebp - 0x30]
fld qword [ebp - 0x30]
mov ebx, dword [ebp - 0x28]
fild dword [ebx]
fstp qword [ebp - 0x38]
fadd qword [ebp - 0x38]
fstp qword [ebp - 0x40]
push 0x80000601
push dword [ebp - 0x3c]
push dword [ebp - 0x40]
push 1
mov ebx, 0x5a0e90
call fcn.0059e73a
add esp, 0x10
mov dword [ebp - 0x44], eax
lea eax, [ebp - 0x44]
push eax
mov eax, 0x7a5401
mov dword [ebp - 0x48], eax
lea eax, [ebp - 0x48]
push eax
lea eax, [ebp - 0x20]
push eax
push dword [ebp - 0x18]
call fcn.00411d62
mov ebx, dword [ebp - 0x20]
test ebx, ebx
je 0x49fe17
push ebx
call fcn.0059e734
add esp, 4
mov ebx, dword [ebp - 0x48]
test ebx, ebx
je 0x49fe27
push ebx
call fcn.0059e734
add esp, 4
mov ebx, dword [ebp - 0x44]
test ebx, ebx
je 0x49fe37
push ebx
call fcn.0059e734
add esp, 4
mov dword [ebp - 0x18], 0
push 0
push dword [ebp - 0x18]
push 1
push 0
push 0x64
call fcn.00414292
mov ebx, dword [0x944f04]
call fcn.00402194
push ebx
push ecx
mov eax, dword [ebp + 8]
dec eax
jns 0x49fe7e
push 0x343d
push 0x403f5fe
push 4
call fcn.0059e728
add esp, 0xc
pop ecx
pop ebx
cmp eax, ecx
jl 0x49fe9b
push 0x343d
push 0x403f5fe
push 1
call fcn.0059e728
add esp, 0xc
shl eax, 2
add ebx, eax
mov ebx, dword [ebx]
mov ebx, dword [ebx + 0x24]
mov ebx, dword [ebx]
mov dword [ebp - 0x18], ebx
mov ebx, dword [0x944f04]
call fcn.00402194
push ebx
push ecx
mov eax, dword [ebp + 8]
dec eax
jns 0x49fed4
push 0x3478
push 0x403f5fe
push 4
call fcn.0059e728
add esp, 0xc
pop ecx
pop ebx
cmp eax, ecx
jl 0x49fef1
push 0x3478
push 0x403f5fe
push 1
call fcn.0059e728
add esp, 0xc
shl eax, 2
add ebx, eax
mov ebx, dword [ebx]
mov ebx, dword [ebx + 0x24]
mov ebx, dword [ebx]
add ebx, 0xc
mov dword [ebp - 0x1c], ebx
push 0x80000301
push 0
mov ebx, dword [ebp - 0x1c]
push dword [ebx]
push 1
mov ebx, 0x5a0e90
call fcn.0059e73a
add esp, 0x10
mov dword [ebp - 0x20], eax
mov ebx, dword [0x944f04]
call fcn.00402194
push ebx
push ecx
mov eax, dword [ebp + 8]
dec eax
jns 0x49ff4e
push 0x34cf
push 0x403f5fe
push 4
call fcn.0059e728
add esp, 0xc
pop ecx
pop ebx
cmp eax, ecx
jl 0x49ff6b
push 0x34cf
push 0x403f5fe
push 1
call fcn.0059e728
add esp, 0xc
shl eax, 2
add ebx, eax
mov ebx, dword [ebx]
mov ebx, dword [ebx + 0x24]
mov ebx, dword [ebx + 4]
add ebx, 0x68
mov dword [ebp - 0x24], ebx
mov ebx, dword [0x944f04]
call fcn.00402194
push ebx
push ecx
mov eax, dword [ebp + 8]
dec eax
jns 0x49ffa8
push 0x34cf
push 0x403f5fe
push 4
call fcn.0059e728
add esp, 0xc
pop ecx
pop ebx
cmp eax, ecx
jl 0x49ffc5
push 0x34cf
push 0x403f5fe
push 1
call fcn.0059e728
add esp, 0xc
shl eax, 2
add ebx, eax
mov ebx, dword [ebx]
mov ebx, dword [ebx + 0x20]
mov ebx, dword [ebx + 0x48]
call fcn.00402194
push ebx
push ecx
mov eax, dword [ebp - 0xc]
dec eax
jns 0x49fff6
push 0x34cf
push 0x403f5fe
push 4
call fcn.0059e728
add esp, 0xc
pop ecx
pop ebx
cmp eax, ecx
jl 0x4a0013
push 0x34cf
push 0x403f5fe
push 1
call fcn.0059e728
add esp, 0xc
shl eax, 2
add ebx, eax
mov ebx, dword [ebx]
add ebx, 0x10
mov dword [ebp - 0x28], ebx
mov ebx, dword [ebp - 0x24]
mov ax, word [ebx]
cwde
mov dword [ebp - 0x30], eax
fild dword [ebp - 0x30]
fstp qword [ebp - 0x30]
fld qword [ebp - 0x30]
mov ebx, dword [ebp - 0x28]
fild dword [ebx]
fstp qword [ebp - 0x38]
fadd qword [ebp - 0x38]
fstp qword [ebp - 0x40]
push 0x80000601
push dword [ebp - 0x3c]
push dword [ebp - 0x40]
push 1
mov ebx, 0x5a0e90
call fcn.0059e73a
add esp, 0x10
mov dword [ebp - 0x44], eax
lea eax, [ebp - 0x44]
push eax
mov eax, 0x7a5405
mov dword [ebp - 0x48], eax
lea eax, [ebp - 0x48]
push eax
lea eax, [ebp - 0x20]
push eax
push dword [ebp - 0x18]
call fcn.00411d62
mov ebx, dword [ebp - 0x20]
test ebx, ebx
je 0x4a008d
push ebx
call fcn.0059e734
add esp, 4
mov ebx, dword [ebp - 0x48]
test ebx, ebx
je 0x4a009d
push ebx
call fcn.0059e734
add esp, 4
mov ebx, dword [ebp - 0x44]
test ebx, ebx
je 0x4a00ad
push ebx
call fcn.0059e734
add esp, 4
mov dword [ebp - 0x18], 0
push 0
push dword [ebp - 0x18]
push 1
push 0
push 0x64
call fcn.00414292
mov ebx, dword [0x944f04]
call fcn.00402194
push ebx
push ecx
mov eax, dword [ebp + 8]
dec eax
jns 0x4a00f4
push 0x355a
push 0x403f5fe
push 4
call fcn.0059e728
add esp, 0xc
pop ecx
pop ebx
cmp eax, ecx
jl 0x4a0111
push 0x355a
push 0x403f5fe
push 1
call fcn.0059e728
add esp, 0xc
shl eax, 2
add ebx, eax
mov ebx, dword [ebx]
mov ebx, dword [ebx + 0x24]
mov ebx, dword [ebx]
mov dword [ebp - 0x18], ebx
mov ebx, dword [0x944f04]
call fcn.00402194
push ebx
push ecx
mov eax, dword [ebp + 8]
dec eax
jns 0x4a014a
push 0x3595
push 0x403f5fe
push 4
call fcn.0059e728
add esp, 0xc
pop ecx
pop ebx
cmp eax, ecx
jl 0x4a0167
push 0x3595
push 0x403f5fe
push 1
call fcn.0059e728
add esp, 0xc
shl eax, 2
add ebx, eax
mov ebx, dword [ebx]
mov ebx, dword [ebx + 0x24]
mov ebx, dword [ebx]
add ebx, 0xc
mov dword [ebp - 0x1c], ebx
push 0x80000301
push 0
mov ebx, dword [ebp - 0x1c]
push dword [ebx]
push 1
mov ebx, 0x5a0e90
call fcn.0059e73a
add esp, 0x10
mov dword [ebp - 0x20], eax
mov ebx, dword [0x944f04]
call fcn.00402194
push ebx
push ecx
mov eax, dword [ebp + 8]
dec eax
jns 0x4a01c4
push 0x35ec
push 0x403f5fe
push 4
call fcn.0059e728
add esp, 0xc
pop ecx
pop ebx
cmp eax, ecx
jl 0x4a01e1
push 0x35ec
push 0x403f5fe
push 1
call fcn.0059e728
add esp, 0xc
shl eax, 2
add ebx, eax
mov ebx, dword [ebx]
mov ebx, dword [ebx + 0x24]
mov ebx, dword [ebx + 4]
add ebx, 0x64
mov dword [ebp - 0x24], ebx
mov ebx, dword [0x944f04]
call fcn.00402194
push ebx
push ecx
mov eax, dword [ebp + 8]
dec eax
jns 0x4a021e
push 0x35ec
push 0x403f5fe
push 4
call fcn.0059e728
add esp, 0xc
pop ecx
pop ebx
cmp eax, ecx
jl 0x4a023b
push 0x35ec
push 0x403f5fe
push 1
call fcn.0059e728
add esp, 0xc
shl eax, 2
add ebx, eax
mov ebx, dword [ebx]
mov ebx, dword [ebx + 0x20]
mov ebx, dword [ebx + 0x48]
call fcn.00402194
push ebx
push ecx
mov eax, dword [ebp - 0xc]
dec eax
jns 0x4a026c
push 0x35ec
push 0x403f5fe
push 4
call fcn.0059e728
add esp, 0xc
pop ecx
pop ebx
cmp eax, ecx
jl 0x4a0289
push 0x35ec
push 0x403f5fe
push 1
call fcn.0059e728
add esp, 0xc
shl eax, 2
add ebx, eax
mov ebx, dword [ebx]
add ebx, 0x10
mov dword [ebp - 0x28], ebx
mov ebx, dword [ebp - 0x24]
mov ax, word [ebx]
cwde
mov dword [ebp - 0x30], eax
fild dword [ebp - 0x30]
fstp qword [ebp - 0x30]
fld qword [ebp - 0x30]
mov ebx, dword [ebp - 0x28]
fild dword [ebx]
fstp qword [ebp - 0x38]
fadd qword [ebp - 0x38]
fstp qword [ebp - 0x40]
push 0x80000601
push dword [ebp - 0x3c]
push dword [ebp - 0x40]
push 1
mov ebx, 0x5a0e90
call fcn.0059e73a
add esp, 0x10
mov dword [ebp - 0x44], eax
lea eax, [ebp - 0x44]
push eax
mov eax, 0x7a5409
mov dword [ebp - 0x48], eax
lea eax, [ebp - 0x48]
push eax
lea eax, [ebp - 0x20]
push eax
push dword [ebp - 0x18]
call fcn.00411d62
mov ebx, dword [ebp - 0x20]
test ebx, ebx
je 0x4a0303
push ebx
call fcn.0059e734
add esp, 4
mov ebx, dword [ebp - 0x48]
test ebx, ebx
je 0x4a0313
push ebx
call fcn.0059e734
add esp, 4
mov ebx, dword [ebp - 0x44]
test ebx, ebx
je 0x4a0323
push ebx
call fcn.0059e734
add esp, 4
mov dword [ebp - 0x18], 0
push 0
push dword [ebp - 0x18]
push 1
push 0
push 0x64
call fcn.00414292
mov ebx, dword [0x944f04]
call fcn.00402194
push ebx
push ecx
mov eax, dword [ebp + 8]
dec eax
jns 0x4a036a
push 0x3677
push 0x403f5fe
push 4
call fcn.0059e728
add esp, 0xc
pop ecx
pop ebx
cmp eax, ecx
jl 0x4a0387
push 0x3677
push 0x403f5fe
push 1
call fcn.0059e728
add esp, 0xc
shl eax, 2
add ebx, eax
mov ebx, dword [ebx]
mov ebx, dword [ebx + 0x24]
mov ebx, dword [ebx]
mov dword [ebp - 0x18], ebx
mov ebx, dword [0x944f04]
call fcn.00402194
push ebx
push ecx
mov eax, dword [ebp + 8]
dec eax
jns 0x4a03c0
push 0x36b2
push 0x403f5fe
push 4
call fcn.0059e728
add esp, 0xc
pop ecx
pop ebx
cmp eax, ecx
jl 0x4a03dd
push 0x36b2
push 0x403f5fe
push 1
call fcn.0059e728
add esp, 0xc
shl eax, 2
add ebx, eax
mov ebx, dword [ebx]
mov ebx, dword [ebx + 0x24]
mov ebx, dword [ebx]
add ebx, 0xc
mov dword [ebp - 0x1c], ebx
push 0x80000301
push 0
mov ebx, dword [ebp - 0x1c]
push dword [ebx]
push 1
mov ebx, 0x5a0e90
call fcn.0059e73a
add esp, 0x10
mov dword [ebp - 0x20], eax
mov ebx, dword [0x944f04]
call fcn.00402194
push ebx
push ecx
mov eax, dword [ebp + 8]
dec eax
jns 0x4a043a
push 0x3709
push 0x403f5fe
push 4
call fcn.0059e728
add esp, 0xc
pop ecx
pop ebx
cmp eax, ecx
jl 0x4a0457
push 0x3709
push 0x403f5fe
push 1
call fcn.0059e728
add esp, 0xc
shl eax, 2
add ebx, eax
mov ebx, dword [ebx]
mov ebx, dword [ebx + 0x24]
mov ebx, dword [ebx + 4]
add ebx, 0x6c
mov dword [ebp - 0x24], ebx
mov ebx, dword [0x944f04]
call fcn.00402194
push ebx
push ecx
mov eax, dword [ebp + 8]
dec eax
jns 0x4a0494
push 0x3709
push 0x403f5fe
push 4
call fcn.0059e728
add esp, 0xc
pop ecx
pop ebx
cmp eax, ecx
jl 0x4a04b1
push 0x3709
push 0x403f5fe
push 1
call fcn.0059e728
add esp, 0xc
shl eax, 2
add ebx, eax
mov ebx, dword [ebx]
mov ebx, dword [ebx + 0x20]
mov ebx, dword [ebx + 0x48]
call fcn.00402194
push ebx
push ecx
mov eax, dword [ebp - 0xc]
dec eax
jns 0x4a04e2
push 0x3709
push 0x403f5fe
push 4
call fcn.0059e728
add esp, 0xc
pop ecx
pop ebx
cmp eax, ecx
jl 0x4a04ff
push 0x3709
push 0x403f5fe
push 1
call fcn.0059e728
add esp, 0xc
shl eax, 2
add ebx, eax
mov ebx, dword [ebx]
add ebx, 0x10
mov dword [ebp - 0x28], ebx
mov ebx, dword [ebp - 0x24]
mov ax, word [ebx]
cwde
mov dword [ebp - 0x30], eax
fild dword [ebp - 0x30]
fstp qword [ebp - 0x30]
fld qword [ebp - 0x30]
mov ebx, dword [ebp - 0x28]
fild dword [ebx]
fstp qword [ebp - 0x38]
fadd qword [ebp - 0x38]
fstp qword [ebp - 0x40]
push 0x80000601
push dword [ebp - 0x3c]
push dword [ebp - 0x40]
push 1
mov ebx, 0x5a0e90
call fcn.0059e73a
add esp, 0x10
mov dword [ebp - 0x44], eax
lea eax, [ebp - 0x44]
push eax
mov eax, 0x7a540d
mov dword [ebp - 0x48], eax
lea eax, [ebp - 0x48]
push eax
lea eax, [ebp - 0x20]
push eax
push dword [ebp - 0x18]
call fcn.00411d62
mov ebx, dword [ebp - 0x20]
test ebx, ebx
je 0x4a0579
push ebx
call fcn.0059e734
add esp, 4
mov ebx, dword [ebp - 0x48]
test ebx, ebx
je 0x4a0589
push ebx
call fcn.0059e734
add esp, 4
mov ebx, dword [ebp - 0x44]
test ebx, ebx
je 0x4a0599
push ebx
call fcn.0059e734
add esp, 4
jmp 0x4a1ab9
mov ebx, dword [0x944f04]
call fcn.00402194
push ebx
push ecx
mov eax, dword [ebp + 8]
dec eax
jns 0x4a05c8
push 0x378a
push 0x403f5fe
push 4
call fcn.0059e728
add esp, 0xc
pop ecx
pop ebx
cmp eax, ecx
jl 0x4a05e5
push 0x378a
push 0x403f5fe
push 1
call fcn.0059e728
add esp, 0xc
shl eax, 2
add ebx, eax
mov ebx, dword [ebx]
mov ebx, dword [ebx + 0x20]
mov ebx, dword [ebx + 0x48]
call fcn.00402194
push ebx
push ecx
mov eax, dword [ebp - 0xc]
dec eax
jns 0x4a0616
push 0x378a
push 0x403f5fe
push 4
call fcn.0059e728
add esp, 0xc
pop ecx
pop ebx
cmp eax, ecx
jl 0x4a0633
push 0x378a
push 0x403f5fe
push 1
call fcn.0059e728
add esp, 0xc
shl eax, 2
add ebx, eax
mov ebx, dword [ebx]
add ebx, 0x1c
mov dword [ebp - 0x4c], ebx
mov ebx, dword [ebp - 0x4c]
cmp dword [ebx], 0
jne 0x4a0845
mov ebx, dword [0x944f04]
call fcn.00402194
push ebx
push ecx
mov eax, dword [ebp + 8]
dec eax
jns 0x4a0676
push 0x37d3
push 0x403f5fe
push 4
call fcn.0059e728
add esp, 0xc
pop ecx
pop ebx
cmp eax, ecx
jl 0x4a0693
push 0x37d3
push 0x403f5fe
push 1
call fcn.0059e728
add esp, 0xc
shl eax, 2
add ebx, eax
mov ebx, dword [ebx]
mov ebx, dword [ebx + 0x24]
mov ebx, dword [ebx + 4]
add ebx, 0x40
mov dword [ebp - 0x18], ebx
mov ebx, dword [0x944f04]
call fcn.00402194
push ebx
push ecx
mov eax, dword [ebp + 8]
dec eax
jns 0x4a06d0
push 0x380e
push 0x403f5fe
push 4
call fcn.0059e728
add esp, 0xc
pop ecx
pop ebx
cmp eax, ecx
jl 0x4a06ed
push 0x380e
push 0x403f5fe
push 1
call fcn.0059e728
add esp, 0xc
shl eax, 2
add ebx, eax
mov ebx, dword [ebx]
mov ebx, dword [ebx + 0x24]
mov ebx, dword [ebx + 4]
add ebx, 0x40
mov dword [ebp - 0x1c], ebx
mov ebx, dword [0x944f04]
call fcn.00402194
push ebx
push ecx
mov eax, dword [ebp + 8]
dec eax
jns 0x4a072a
push 0x380e
push 0x403f5fe
push 4
call fcn.0059e728
add esp, 0xc
pop ecx
pop ebx
cmp eax, ecx
jl 0x4a0747
push 0x380e
push 0x403f5fe
push 1
call fcn.0059e728
add esp, 0xc
shl eax, 2
add ebx, eax
mov ebx, dword [ebx]
mov ebx, dword [ebx + 0x20]
mov ebx, dword [ebx + 0x48]
call fcn.00402194
push ebx
push ecx
mov eax, dword [ebp - 0xc]
dec eax
jns 0x4a0778
push 0x380e
push 0x403f5fe
push 4
call fcn.0059e728
add esp, 0xc
pop ecx
pop ebx
cmp eax, ecx
jl 0x4a0795
push 0x380e
push 0x403f5fe
push 1
call fcn.0059e728
add esp, 0xc
shl eax, 2
add ebx, eax
mov ebx, dword [ebx]
add ebx, 0x10
mov dword [ebp - 0x20], ebx
mov ebx, dword [ebp - 0x1c]
mov ax, word [ebx]
cwde
mov dword [ebp - 0x28], eax
fild dword [ebp - 0x28]
fstp qword [ebp - 0x28]
fld qword [ebp - 0x28]
mov ebx, dword [ebp - 0x20]
fild dword [ebx]
fstp qword [ebp - 0x30]
fadd qword [ebp - 0x30]
fstp qword [ebp - 0x38]
fld qword [ebp - 0x38]
call fcn.00401596
mov ebx, dword [ebp - 0x18]
mov word [ebx], ax
mov ebx, dword [0x944f04]
call fcn.00402194
push ebx
push ecx
mov eax, dword [ebp + 8]
dec eax
jns 0x4a07fb
push 0x387b
push 0x403f5fe
push 4
call fcn.0059e728
add esp, 0xc
pop ecx
pop ebx
cmp eax, ecx
jl 0x4a0818
push 0x387b
push 0x403f5fe
push 1
call fcn.0059e728
add esp, 0xc
shl eax, 2
add ebx, eax
mov ebx, dword [ebx]
mov ebx, dword [ebx + 0x24]
mov ebx, dword [ebx + 4]
add ebx, 0x40
mov dword [ebp - 0x18], ebx
mov ebx, dword [ebp - 0x18]
mov ax, word [ebx]
cwde
push eax
push 0
push dword [ebp + 8]
call fcn.004a1c72
jmp 0x4a1ab9
mov ebx, dword [0x944f04]
call fcn.00402194
push ebx
push ecx
mov eax, dword [ebp + 8]
dec eax
jns 0x4a086f
push 0x38d6
push 0x403f5fe
push 4
call fcn.0059e728
add esp, 0xc
pop ecx
pop ebx
cmp eax, ecx
jl 0x4a088c
push 0x38d6
push 0x403f5fe
push 1
call fcn.0059e728
add esp, 0xc
shl eax, 2
add ebx, eax
mov ebx, dword [ebx]
mov ebx, dword [ebx + 0x20]
mov ebx, dword [ebx + 0x48]
call fcn.00402194
push ebx
push ecx
mov eax, dword [ebp - 0xc]
dec eax
jns 0x4a08bd
push 0x38d6
push 0x403f5fe
push 4
call fcn.0059e728
add esp, 0xc
pop ecx
pop ebx
cmp eax, ecx
jl 0x4a08da
push 0x38d6
push 0x403f5fe
push 1
call fcn.0059e728
add esp, 0xc
shl eax, 2
add ebx, eax
mov ebx, dword [ebx]
add ebx, 0x1c
mov dword [ebp - 0x1c], ebx
mov ebx, dword [ebp - 0x1c]
cmp dword [ebx], 8
jne 0x4a0aec
mov ebx, dword [0x944f04]
call fcn.00402194
push ebx
push ecx
mov eax, dword [ebp + 8]
dec eax
jns 0x4a091d
push 0x391f
push 0x403f5fe
push 4
call fcn.0059e728
add esp, 0xc
pop ecx
pop ebx
cmp eax, ecx
jl 0x4a093a
push 0x391f
push 0x403f5fe
push 1
call fcn.0059e728
add esp, 0xc
shl eax, 2
add ebx, eax
mov ebx, dword [ebx]
mov ebx, dword [ebx + 0x24]
mov ebx, dword [ebx + 4]
add ebx, 0x58
mov dword [ebp - 0x18], ebx
mov ebx, dword [0x944f04]
call fcn.00402194
push ebx
push ecx
mov eax, dword [ebp + 8]
dec eax
jns 0x4a0977
push 0x395a
push 0x403f5fe
push 4
call fcn.0059e728
add esp, 0xc
pop ecx
pop ebx
cmp eax, ecx
jl 0x4a0994
push 0x395a
push 0x403f5fe
push 1
call fcn.0059e728
add esp, 0xc
shl eax, 2
add ebx, eax
mov ebx, dword [ebx]
mov ebx, dword [ebx + 0x24]
mov ebx, dword [ebx + 4]
add ebx, 0x58
mov dword [ebp - 0x1c], ebx
mov ebx, dword [0x944f04]
call fcn.00402194
push ebx
push ecx
mov eax, dword [ebp + 8]
dec eax
jns 0x4a09d1
push 0x395a
push 0x403f5fe
push 4
call fcn.0059e728
add esp, 0xc
pop ecx
pop ebx
cmp eax, ecx
jl 0x4a09ee
push 0x395a
push 0x403f5fe
push 1
call fcn.0059e728
add esp, 0xc
shl eax, 2
add ebx, eax
mov ebx, dword [ebx]
mov ebx, dword [ebx + 0x20]
mov ebx, dword [ebx + 0x48]
call fcn.00402194
push ebx
push ecx
mov eax, dword [ebp - 0xc]
dec eax
jns 0x4a0a1f
push 0x395a
push 0x403f5fe
push 4
call fcn.0059e728
add esp, 0xc
pop ecx
pop ebx
cmp eax, ecx
jl 0x4a0a3c
push 0x395a
push 0x403f5fe
push 1
call fcn.0059e728
add esp, 0xc
shl eax, 2
add ebx, eax
mov ebx, dword [ebx]
add ebx, 0x10
mov dword [ebp - 0x20], ebx
mov ebx, dword [ebp - 0x1c]
mov ax, word [ebx]
cwde
mov dword [ebp - 0x28], eax
fild dword [ebp - 0x28]
fstp qword [ebp - 0x28]
fld qword [ebp - 0x28]
mov ebx, dword [ebp - 0x20]
fild dword [ebx]
fstp qword [ebp - 0x30]
fadd qword [ebp - 0x30]
fstp qword [ebp - 0x38]
fld qword [ebp - 0x38]
call fcn.00401596
mov ebx, dword [ebp - 0x18]
mov word [ebx], ax
mov ebx, dword [0x944f04]
call fcn.00402194
push ebx
push ecx
mov eax, dword [ebp + 8]
dec eax
jns 0x4a0aa2
push 0x39c7
push 0x403f5fe
push 4
call fcn.0059e728
add esp, 0xc
pop ecx
pop ebx
cmp eax, ecx
jl 0x4a0abf
push 0x39c7
push 0x403f5fe
push 1
call fcn.0059e728
add esp, 0xc
shl eax, 2
add ebx, eax
mov ebx, dword [ebx]
mov ebx, dword [ebx + 0x24]
mov ebx, dword [ebx + 4]
add ebx, 0x58
mov dword [ebp - 0x18], ebx
mov ebx, dword [ebp - 0x18]
mov ax, word [ebx]
cwde
push eax
push 8
push dword [ebp + 8]
call fcn.004a1c72
jmp 0x4a1ab9
mov ebx, dword [0x944f04]
call fcn.00402194
push ebx
push ecx
mov eax, dword [ebp + 8]
dec eax
jns 0x4a0b16
push 0x3a22
push 0x403f5fe
push 4
call fcn.0059e728
add esp, 0xc
pop ecx
pop ebx
cmp eax, ecx
jl 0x4a0b33
push 0x3a22
push 0x403f5fe
push 1
call fcn.0059e728
add esp, 0xc
shl eax, 2
add ebx, eax
mov ebx, dword [ebx]
mov ebx, dword [ebx + 0x20]
mov ebx, dword [ebx + 0x48]
call fcn.00402194
push ebx
push ecx
mov eax, dword [ebp - 0xc]
dec eax
jns 0x4a0b64
push 0x3a22
push 0x403f5fe
push 4
call fcn.0059e728
add esp, 0xc
pop ecx
pop ebx
cmp eax, ecx
jl 0x4a0b81
push 0x3a22
push 0x403f5fe
push 1
call fcn.0059e728
add esp, 0xc
shl eax, 2
add ebx, eax
mov ebx, dword [ebx]
add ebx, 0x1c
mov dword [ebp - 0x1c], ebx
mov ebx, dword [ebp - 0x1c]
cmp dword [ebx], 2
jne 0x4a0d87
mov ebx, dword [0x944f04]
call fcn.00402194
push ebx
push ecx
mov eax, dword [ebp + 8]
dec eax
jns 0x4a0bc4
push 0x3a6b
push 0x403f5fe
push 4
call fcn.0059e728
add esp, 0xc
pop ecx
pop ebx
cmp eax, ecx
jl 0x4a0be1
push 0x3a6b
push 0x403f5fe
push 1
call fcn.0059e728
add esp, 0xc
shl eax, 2
add ebx, eax
mov ebx, dword [ebx]
mov ebx, dword [ebx + 0x24]
mov ebx, dword [ebx + 4]
add ebx, 0x3c
mov dword [ebp - 0x18], ebx
mov ebx, dword [0x944f04]
call fcn.00402194
push ebx
push ecx
mov eax, dword [ebp + 8]
dec eax
jns 0x4a0c1e
push 0x3aa6
push 0x403f5fe
push 4
call fcn.0059e728
add esp, 0xc
pop ecx
pop ebx
cmp eax, ecx
jl 0x4a0c3b
push 0x3aa6
push 0x403f5fe
push 1
call fcn.0059e728
add esp, 0xc
shl eax, 2
add ebx, eax
mov ebx, dword [ebx]
mov ebx, dword [ebx + 0x24]
mov ebx, dword [ebx + 4]
add ebx, 0x3c
mov dword [ebp - 0x1c], ebx
mov ebx, dword [0x944f04]
call fcn.00402194
push ebx
push ecx
mov eax, dword [ebp + 8]
dec eax
jns 0x4a0c78
push 0x3aa6
push 0x403f5fe
push 4
call fcn.0059e728
add esp, 0xc
pop ecx
pop ebx
cmp eax, ecx
jl 0x4a0c95
push 0x3aa6
push 0x403f5fe
push 1
call fcn.0059e728
add esp, 0xc
shl eax, 2
add ebx, eax
mov ebx, dword [ebx]
mov ebx, dword [ebx + 0x20]
mov ebx, dword [ebx + 0x48]
call fcn.00402194
push ebx
push ecx
mov eax, dword [ebp - 0xc]
dec eax
jns 0x4a0cc6
push 0x3aa6
push 0x403f5fe
push 4
call fcn.0059e728
add esp, 0xc
pop ecx
pop ebx
cmp eax, ecx
jl 0x4a0ce3
push 0x3aa6
push 0x403f5fe
push 1
call fcn.0059e728
add esp, 0xc
shl eax, 2
add ebx, eax
mov ebx, dword [ebx]
add ebx, 0x10
mov dword [ebp - 0x20], ebx
mov ebx, dword [ebp - 0x1c]
fild dword [ebx]
fstp qword [ebp - 0x28]
fld qword [ebp - 0x28]
mov ebx, dword [ebp - 0x20]
fild dword [ebx]
fstp qword [ebp - 0x30]
fadd qword [ebp - 0x30]
fstp qword [ebp - 0x38]
fld qword [ebp - 0x38]
call fcn.00401596
mov ebx, dword [ebp - 0x18]
mov dword [ebx], eax
mov ebx, dword [0x944f04]
call fcn.00402194
push ebx
push ecx
mov eax, dword [ebp + 8]
dec eax
jns 0x4a0d40
push 0x3b13
push 0x403f5fe
push 4
call fcn.0059e728
add esp, 0xc
pop ecx
pop ebx
cmp eax, ecx
jl 0x4a0d5d
push 0x3b13
push 0x403f5fe
push 1
call fcn.0059e728
add esp, 0xc
shl eax, 2
add ebx, eax
mov ebx, dword [ebx]
mov ebx, dword [ebx + 0x24]
mov ebx, dword [ebx + 4]
add ebx, 0x3c
mov dword [ebp - 0x18], ebx
mov ebx, dword [ebp - 0x18]
push dword [ebx]
push 2
push dword [ebp + 8]
call fcn.004a1c72
jmp 0x4a1ab9
mov ebx, dword [0x944f04]
call fcn.00402194
push ebx
push ecx
mov eax, dword [ebp + 8]
dec eax
jns 0x4a0db1
push 0x3b6e
push 0x403f5fe
push 4
call fcn.0059e728
add esp, 0xc
pop ecx
pop ebx
cmp eax, ecx
jl 0x4a0dce
push 0x3b6e
push 0x403f5fe
push 1
call fcn.0059e728
add esp, 0xc
shl eax, 2
add ebx, eax
mov ebx, dword [ebx]
mov ebx, dword [ebx + 0x20]
mov ebx, dword [ebx + 0x48]
call fcn.00402194
push ebx
push ecx
mov eax, dword [ebp - 0xc]
dec eax
jns 0x4a0dff
push 0x3b6e
push 0x403f5fe
push 4
call fcn.0059e728
add esp, 0xc
pop ecx
pop ebx
cmp eax, ecx
jl 0x4a0e1c
push 0x3b6e
push 0x403f5fe
push 1
call fcn.0059e728
add esp, 0xc
shl eax, 2
add ebx, eax
mov ebx, dword [ebx]
add ebx, 0x1c
mov dword [ebp - 0x1c], ebx
mov ebx, dword [ebp - 0x1c]
cmp dword [ebx], 5
jne 0x4a1022
mov ebx, dword [0x944f04]
call fcn.00402194
push ebx
push ecx
mov eax, dword [ebp + 8]
dec eax
jns 0x4a0e5f
push 0x3bb7
push 0x403f5fe
push 4
call fcn.0059e728
add esp, 0xc
pop ecx
pop ebx
cmp eax, ecx
jl 0x4a0e7c
push 0x3bb7
push 0x403f5fe
push 1
call fcn.0059e728
add esp, 0xc
shl eax, 2
add ebx, eax
mov ebx, dword [ebx]
mov ebx, dword [ebx + 0x24]
mov ebx, dword [ebx + 4]
add ebx, 0x54
mov dword [ebp - 0x18], ebx
mov ebx, dword [0x944f04]
call fcn.00402194
push ebx
push ecx
mov eax, dword [ebp + 8]
dec eax
jns 0x4a0eb9
push 0x3bf2
push 0x403f5fe
push 4
call fcn.0059e728
add esp, 0xc
pop ecx
pop ebx
cmp eax, ecx
jl 0x4a0ed6
push 0x3bf2
push 0x403f5fe
push 1
call fcn.0059e728
add esp, 0xc
shl eax, 2
add ebx, eax
mov ebx, dword [ebx]
mov ebx, dword [ebx + 0x24]
mov ebx, dword [ebx + 4]
add ebx, 0x54
mov dword [ebp - 0x1c], ebx
mov ebx, dword [0x944f04]
call fcn.00402194
push ebx
push ecx
mov eax, dword [ebp + 8]
dec eax
jns 0x4a0f13
push 0x3bf2
push 0x403f5fe
push 4
call fcn.0059e728
add esp, 0xc
pop ecx
pop ebx
cmp eax, ecx
jl 0x4a0f30
push 0x3bf2
push 0x403f5fe
push 1
call fcn.0059e728
add esp, 0xc
shl eax, 2
add ebx, eax
mov ebx, dword [ebx]
mov ebx, dword [ebx + 0x20]
mov ebx, dword [ebx + 0x48]
call fcn.00402194
push ebx
push ecx
mov eax, dword [ebp - 0xc]
dec eax
jns 0x4a0f61
push 0x3bf2
push 0x403f5fe
push 4
call fcn.0059e728
add esp, 0xc
pop ecx
pop ebx
cmp eax, ecx
jl 0x4a0f7e
push 0x3bf2
push 0x403f5fe
push 1
call fcn.0059e728
add esp, 0xc
shl eax, 2
add ebx, eax
mov ebx, dword [ebx]
add ebx, 0x10
mov dword [ebp - 0x20], ebx
mov ebx, dword [ebp - 0x1c]
fild dword [ebx]
fstp qword [ebp - 0x28]
fld qword [ebp - 0x28]
mov ebx, dword [ebp - 0x20]
fild dword [ebx]
fstp qword [ebp - 0x30]
fadd qword [ebp - 0x30]
fstp qword [ebp - 0x38]
fld qword [ebp - 0x38]
call fcn.00401596
mov ebx, dword [ebp - 0x18]
mov dword [ebx], eax
mov ebx, dword [0x944f04]
call fcn.00402194
push ebx
push ecx
mov eax, dword [ebp + 8]
dec eax
jns 0x4a0fdb
push 0x3c5f
push 0x403f5fe
push 4
call fcn.0059e728
add esp, 0xc
pop ecx
pop ebx
cmp eax, ecx
jl 0x4a0ff8
push 0x3c5f
push 0x403f5fe
push 1
call fcn.0059e728
add esp, 0xc
shl eax, 2
add ebx, eax
mov ebx, dword [ebx]
mov ebx, dword [ebx + 0x24]
mov ebx, dword [ebx + 4]
add ebx, 0x54
mov dword [ebp - 0x18], ebx
mov ebx, dword [ebp - 0x18]
push dword [ebx]
push 5
push dword [ebp + 8]
call fcn.004a1c72
jmp 0x4a1ab9
mov ebx, dword [0x944f04]
call fcn.00402194
push ebx
push ecx
mov eax, dword [ebp + 8]
dec eax
jns 0x4a104c
push 0x3cba
push 0x403f5fe
push 4
call fcn.0059e728
add esp, 0xc
pop ecx
pop ebx
cmp eax, ecx
jl 0x4a1069
push 0x3cba
push 0x403f5fe
push 1
call fcn.0059e728
add esp, 0xc
shl eax, 2
add ebx, eax
mov ebx, dword [ebx]
mov ebx, dword [ebx + 0x20]
mov ebx, dword [ebx + 0x48]
call fcn.00402194
push ebx
push ecx
mov eax, dword [ebp - 0xc]
dec eax
jns 0x4a109a
push 0x3cba
push 0x403f5fe
push 4
call fcn.0059e728
add esp, 0xc
pop ecx
pop ebx
cmp eax, ecx
jl 0x4a10b7
push 0x3cba
push 0x403f5fe
push 1
call fcn.0059e728
add esp, 0xc
shl eax, 2
add ebx, eax
mov ebx, dword [ebx]
add ebx, 0x1c
mov dword [ebp - 0x1c], ebx
mov ebx, dword [ebp - 0x1c]
cmp dword [ebx], 0xa
jne 0x4a12c9
mov ebx, dword [0x944f04]
call fcn.00402194
push ebx
push ecx
mov eax, dword [ebp + 8]
dec eax
jns 0x4a10fa
push 0x3d03
push 0x403f5fe
push 4
call fcn.0059e728
add esp, 0xc
pop ecx
pop ebx
cmp eax, ecx
jl 0x4a1117
push 0x3d03
push 0x403f5fe
push 1
call fcn.0059e728
add esp, 0xc
shl eax, 2
add ebx, eax
mov ebx, dword [ebx]
mov ebx, dword [ebx + 0x24]
mov ebx, dword [ebx + 4]
add ebx, 0x50
mov dword [ebp - 0x18], ebx
mov ebx, dword [0x944f04]
call fcn.00402194
push ebx
push ecx
mov eax, dword [ebp + 8]
dec eax
jns 0x4a1154
push 0x3d3e
push 0x403f5fe
push 4
call fcn.0059e728
add esp, 0xc
pop ecx
pop ebx
cmp eax, ecx
jl 0x4a1171
push 0x3d3e
push 0x403f5fe
push 1
call fcn.0059e728
add esp, 0xc
shl eax, 2
add ebx, eax
mov ebx, dword [ebx]
mov ebx, dword [ebx + 0x24]
mov ebx, dword [ebx + 4]
add ebx, 0x50
mov dword [ebp - 0x1c], ebx
mov ebx, dword [0x944f04]
call fcn.00402194
push ebx
push ecx
mov eax, dword [ebp + 8]
dec eax
jns 0x4a11ae
push 0x3d3e
push 0x403f5fe
push 4
call fcn.0059e728
add esp, 0xc
pop ecx
pop ebx
cmp eax, ecx
jl 0x4a11cb
push 0x3d3e
push 0x403f5fe
push 1
call fcn.0059e728
add esp, 0xc
shl eax, 2
add ebx, eax
mov ebx, dword [ebx]
mov ebx, dword [ebx + 0x20]
mov ebx, dword [ebx + 0x48]
call fcn.00402194
push ebx
push ecx
mov eax, dword [ebp - 0xc]
dec eax
jns 0x4a11fc
push 0x3d3e
push 0x403f5fe
push 4
call fcn.0059e728
add esp, 0xc
pop ecx
pop ebx
cmp eax, ecx
jl 0x4a1219
push 0x3d3e
push 0x403f5fe
push 1
call fcn.0059e728
add esp, 0xc
shl eax, 2
add ebx, eax
mov ebx, dword [ebx]
add ebx, 0x10
mov dword [ebp - 0x20], ebx
mov ebx, dword [ebp - 0x1c]
mov ax, word [ebx]
cwde
mov dword [ebp - 0x28], eax
fild dword [ebp - 0x28]
fstp qword [ebp - 0x28]
fld qword [ebp - 0x28]
mov ebx, dword [ebp - 0x20]
fild dword [ebx]
fstp qword [ebp - 0x30]
fadd qword [ebp - 0x30]
fstp qword [ebp - 0x38]
fld qword [ebp - 0x38]
call fcn.00401596
mov ebx, dword [ebp - 0x18]
mov word [ebx], ax
mov ebx, dword [0x944f04]
call fcn.00402194
push ebx
push ecx
mov eax, dword [ebp + 8]
dec eax
jns 0x4a127f
push 0x3dab
push 0x403f5fe
push 4
call fcn.0059e728
add esp, 0xc
pop ecx
pop ebx
cmp eax, ecx
jl 0x4a129c
push 0x3dab
push 0x403f5fe
push 1
call fcn.0059e728
add esp, 0xc
shl eax, 2
add ebx, eax
mov ebx, dword [ebx]
mov ebx, dword [ebx + 0x24]
mov ebx, dword [ebx + 4]
add ebx, 0x50
mov dword [ebp - 0x18], ebx
mov ebx, dword [ebp - 0x18]
mov ax, word [ebx]
cwde
push eax
push 0xa
push dword [ebp + 8]
call fcn.004a1c72
jmp 0x4a1ab9
mov ebx, dword [0x944f04]
call fcn.00402194
push ebx
push ecx
mov eax, dword [ebp + 8]
dec eax
jns 0x4a12f3
push 0x3e06
push 0x403f5fe
push 4
call fcn.0059e728
add esp, 0xc
pop ecx
pop ebx
cmp eax, ecx
jl 0x4a1310
push 0x3e06
push 0x403f5fe
push 1
call fcn.0059e728
add esp, 0xc
shl eax, 2
add ebx, eax
mov ebx, dword [ebx]
mov ebx, dword [ebx + 0x20]
mov ebx, dword [ebx + 0x48]
call fcn.00402194
push ebx
push ecx
mov eax, dword [ebp - 0xc]
dec eax
jns 0x4a1341
push 0x3e06
push 0x403f5fe
push 4
call fcn.0059e728
add esp, 0xc
pop ecx
pop ebx
cmp eax, ecx
jl 0x4a135e
push 0x3e06
push 0x403f5fe
push 1
call fcn.0059e728
add esp, 0xc
shl eax, 2
add ebx, eax
mov ebx, dword [ebx]
add ebx, 0x1c
mov dword [ebp - 0x1c], ebx
mov ebx, dword [ebp - 0x1c]
cmp dword [ebx], 0xb
jne 0x4a1570
mov ebx, dword [0x944f04]
call fcn.00402194
push ebx
push ecx
mov eax, dword [ebp + 8]
dec eax
jns 0x4a13a1
push 0x3e4f
push 0x403f5fe
push 4
call fcn.0059e728
add esp, 0xc
pop ecx
pop ebx
cmp eax, ecx
jl 0x4a13be
push 0x3e4f
push 0x403f5fe
push 1
call fcn.0059e728
add esp, 0xc
shl eax, 2
add ebx, eax
mov ebx, dword [ebx]
mov ebx, dword [ebx + 0x24]
mov ebx, dword [ebx + 4]
add ebx, 0x38
mov dword [ebp - 0x18], ebx
mov ebx, dword [0x944f04]
call fcn.00402194
push ebx
push ecx
mov eax, dword [ebp + 8]
dec eax
jns 0x4a13fb
push 0x3e8a
push 0x403f5fe
push 4
call fcn.0059e728
add esp, 0xc
pop ecx
pop ebx
cmp eax, ecx
jl 0x4a1418
push 0x3e8a
push 0x403f5fe
push 1
call fcn.0059e728
add esp, 0xc
shl eax, 2
add ebx, eax
mov ebx, dword [ebx]
mov ebx, dword [ebx + 0x24]
mov ebx, dword [ebx + 4]
add ebx, 0x38
mov dword [ebp - 0x1c], ebx
mov ebx, dword [0x944f04]
call fcn.00402194
push ebx
push ecx
mov eax, dword [ebp + 8]
dec eax
jns 0x4a1455
push 0x3e8a
push 0x403f5fe
push 4
call fcn.0059e728
add esp, 0xc
pop ecx
pop ebx
cmp eax, ecx
jl 0x4a1472
push 0x3e8a
push 0x403f5fe
push 1
call fcn.0059e728
add esp, 0xc
shl eax, 2
add ebx, eax
mov ebx, dword [ebx]
mov ebx, dword [ebx + 0x20]
mov ebx, dword [ebx + 0x48]
call fcn.00402194
push ebx
push ecx
mov eax, dword [ebp - 0xc]
dec eax
jns 0x4a14a3
push 0x3e8a
push 0x403f5fe
push 4
call fcn.0059e728
add esp, 0xc
pop ecx
pop ebx
cmp eax, ecx
jl 0x4a14c0
push 0x3e8a
push 0x403f5fe
push 1
call fcn.0059e728
add esp, 0xc
shl eax, 2
add ebx, eax
mov ebx, dword [ebx]
add ebx, 0x10
mov dword [ebp - 0x20], ebx
mov ebx, dword [ebp - 0x1c]
mov ax, word [ebx]
cwde
mov dword [ebp - 0x28], eax
fild dword [ebp - 0x28]
fstp qword [ebp - 0x28]
fld qword [ebp - 0x28]
mov ebx, dword [ebp - 0x20]
fild dword [ebx]
fstp qword [ebp - 0x30]
fadd qword [ebp - 0x30]
fstp qword [ebp - 0x38]
fld qword [ebp - 0x38]
call fcn.00401596
mov ebx, dword [ebp - 0x18]
mov word [ebx], ax
mov ebx, dword [0x944f04]
call fcn.00402194
push ebx
push ecx
mov eax, dword [ebp + 8]
dec eax
jns 0x4a1526
push 0x3ef7
push 0x403f5fe
push 4
call fcn.0059e728
add esp, 0xc
pop ecx
pop ebx
cmp eax, ecx
jl 0x4a1543
push 0x3ef7
push 0x403f5fe
push 1
call fcn.0059e728
add esp, 0xc
shl eax, 2
add ebx, eax
mov ebx, dword [ebx]
mov ebx, dword [ebx + 0x24]
mov ebx, dword [ebx + 4]
add ebx, 0x38
mov dword [ebp - 0x18], ebx
mov ebx, dword [ebp - 0x18]
mov ax, word [ebx]
cwde
push eax
push 0xb
push dword [ebp + 8]
call fcn.004a1c72
jmp 0x4a1ab9
mov ebx, dword [0x944f04]
call fcn.00402194
push ebx
push ecx
mov eax, dword [ebp + 8]
dec eax
jns 0x4a159a
push 0x3f52
push 0x403f5fe
push 4
call fcn.0059e728
add esp, 0xc
pop ecx
pop ebx
cmp eax, ecx
jl 0x4a15b7
push 0x3f52
push 0x403f5fe
push 1
call fcn.0059e728
add esp, 0xc
shl eax, 2
add ebx, eax
mov ebx, dword [ebx]
mov ebx, dword [ebx + 0x20]
mov ebx, dword [ebx + 0x48]
call fcn.00402194
push ebx
push ecx
mov eax, dword [ebp - 0xc]
dec eax
jns 0x4a15e8
push 0x3f52
push 0x403f5fe
push 4
call fcn.0059e728
add esp, 0xc
pop ecx
pop ebx
cmp eax, ecx
jl 0x4a1605
push 0x3f52
push 0x403f5fe
push 1
call fcn.0059e728
add esp, 0xc
shl eax, 2
add ebx, eax
mov ebx, dword [ebx]
add ebx, 0x1c
mov dword [ebp - 0x1c], ebx
mov ebx, dword [ebp - 0x1c]
cmp dword [ebx], 0x10
jne 0x4a1817
mov ebx, dword [0x944f04]
call fcn.00402194
push ebx
push ecx
mov eax, dword [ebp + 8]
dec eax
jns 0x4a1648
push 0x3f9b
push 0x403f5fe
push 4
call fcn.0059e728
add esp, 0xc
pop ecx
pop ebx
cmp eax, ecx
jl 0x4a1665
push 0x3f9b
push 0x403f5fe
push 1
call fcn.0059e728
add esp, 0xc
shl eax, 2
add ebx, eax
mov ebx, dword [ebx]
mov ebx, dword [ebx + 0x24]
mov ebx, dword [ebx + 4]
add ebx, 0x44
mov dword [ebp - 0x18], ebx
mov ebx, dword [0x944f04]
call fcn.00402194
push ebx
push ecx
mov eax, dword [ebp + 8]
dec eax
jns 0x4a16a2
push 0x3fd6
push 0x403f5fe
push 4
call fcn.0059e728
add esp, 0xc
pop ecx
pop ebx
cmp eax, ecx
jl 0x4a16bf
push 0x3fd6
push 0x403f5fe
push 1
call fcn.0059e728
add esp, 0xc
shl eax, 2
add ebx, eax
mov ebx, dword [ebx]
mov ebx, dword [ebx + 0x24]
mov ebx, dword [ebx + 4]
add ebx, 0x44
mov dword [ebp - 0x1c], ebx
mov ebx, dword [0x944f04]
call fcn.00402194
push ebx
push ecx
mov eax, dword [ebp + 8]
dec eax
jns 0x4a16fc
push 0x3fd6
push 0x403f5fe
push 4
call fcn.0059e728
add esp, 0xc
pop ecx
pop ebx
cmp eax, ecx
jl 0x4a1719
push 0x3fd6
push 0x403f5fe
push 1
call fcn.0059e728
add esp, 0xc
shl eax, 2
add ebx, eax
mov ebx, dword [ebx]
mov ebx, dword [ebx + 0x20]
mov ebx, dword [ebx + 0x48]
call fcn.00402194
push ebx
push ecx
mov eax, dword [ebp - 0xc]
dec eax
jns 0x4a174a
push 0x3fd6
push 0x403f5fe
push 4
call fcn.0059e728
add esp, 0xc
pop ecx
pop ebx
cmp eax, ecx
jl 0x4a1767
push 0x3fd6
push 0x403f5fe
push 1
call fcn.0059e728
add esp, 0xc
shl eax, 2
add ebx, eax
mov ebx, dword [ebx]
add ebx, 0x10
mov dword [ebp - 0x20], ebx
mov ebx, dword [ebp - 0x1c]
mov ax, word [ebx]
cwde
mov dword [ebp - 0x28], eax
fild dword [ebp - 0x28]
fstp qword [ebp - 0x28]
fld qword [ebp - 0x28]
mov ebx, dword [ebp - 0x20]
fild dword [ebx]
fstp qword [ebp - 0x30]
fadd qword [ebp - 0x30]
fstp qword [ebp - 0x38]
fld qword [ebp - 0x38]
call fcn.00401596
mov ebx, dword [ebp - 0x18]
mov word [ebx], ax
mov ebx, dword [0x944f04]
call fcn.00402194
push ebx
push ecx
mov eax, dword [ebp + 8]
dec eax
jns 0x4a17cd
push 0x4043
push 0x403f5fe
push 4
call fcn.0059e728
add esp, 0xc
pop ecx
pop ebx
cmp eax, ecx
jl 0x4a17ea
push 0x4043
push 0x403f5fe
push 1
call fcn.0059e728
add esp, 0xc
shl eax, 2
add ebx, eax
mov ebx, dword [ebx]
mov ebx, dword [ebx + 0x24]
mov ebx, dword [ebx + 4]
add ebx, 0x44
mov dword [ebp - 0x18], ebx
mov ebx, dword [ebp - 0x18]
mov ax, word [ebx]
cwde
push eax
push 0x10
push dword [ebp + 8]
call fcn.004a1c72
jmp 0x4a1ab9
mov ebx, dword [0x944f04]
call fcn.00402194
push ebx
push ecx
mov eax, dword [ebp + 8]
dec eax
jns 0x4a1841
push 0x409e
push 0x403f5fe
push 4
call fcn.0059e728
add esp, 0xc
pop ecx
pop ebx
cmp eax, ecx
jl 0x4a185e
push 0x409e
push 0x403f5fe
push 1
call fcn.0059e728
add esp, 0xc
shl eax, 2
add ebx, eax
mov ebx, dword [ebx]
mov ebx, dword [ebx + 0x20]
mov ebx, dword [ebx + 0x48]
call fcn.00402194
push ebx
push ecx
mov eax, dword [ebp - 0xc]
dec eax
jns 0x4a188f
push 0x409e
push 0x403f5fe
push 4
call fcn.0059e728
add esp, 0xc
pop ecx
pop ebx
cmp eax, ecx
jl 0x4a18ac
push 0x409e
push 0x403f5fe
push 1
call fcn.0059e728
add esp, 0xc
shl eax, 2
add ebx, eax
mov ebx, dword [ebx]
add ebx, 0x1c
mov dword [ebp - 0x1c], ebx
mov ebx, dword [ebp - 0x1c]
cmp dword [ebx], 0xf
jne 0x4a1ab9
mov ebx, dword [0x944f04]
call fcn.00402194
push ebx
push ecx
mov eax, dword [ebp + 8]
dec eax
jns 0x4a18ef
push 0x40e7
push 0x403f5fe
push 4
call fcn.0059e728
add esp, 0xc
pop ecx
pop ebx
cmp eax, ecx
jl 0x4a190c
push 0x40e7
push 0x403f5fe
push 1
call fcn.0059e728
add esp, 0xc
shl eax, 2
add ebx, eax
mov ebx, dword [ebx]
mov ebx, dword [ebx + 0x24]
mov ebx, dword [ebx + 4]
add ebx, 0x5c
mov dword [ebp - 0x18], ebx
mov ebx, dword [0x944f04]
call fcn.00402194
push ebx
push ecx
mov eax, dword [ebp + 8]
dec eax
jns 0x4a1949
push 0x4122
push 0x403f5fe
push 4
call fcn.0059e728
add esp, 0xc
pop ecx
pop ebx
cmp eax, ecx
jl 0x4a1966
push 0x4122
push 0x403f5fe
push 1
call fcn.0059e728
add esp, 0xc
shl eax, 2
add ebx, eax
mov ebx, dword [ebx]
mov ebx, dword [ebx + 0x24]
mov ebx, dword [ebx + 4]
add ebx, 0x5c
mov dword [ebp - 0x1c], ebx
mov ebx, dword [0x944f04]
call fcn.00402194
push ebx
push ecx
mov eax, dword [ebp + 8]
dec eax
jns 0x4a19a3
push 0x4122
push 0x403f5fe
push 4
call fcn.0059e728
add esp, 0xc
pop ecx
pop ebx
cmp eax, ecx
jl 0x4a19c0
push 0x4122
push 0x403f5fe
push 1
call fcn.0059e728
add esp, 0xc
shl eax, 2
add ebx, eax
mov ebx, dword [ebx]
mov ebx, dword [ebx + 0x20]
mov ebx, dword [ebx + 0x48]
call fcn.00402194
push ebx
push ecx
mov eax, dword [ebp - 0xc]
dec eax
jns 0x4a19f1
push 0x4122
push 0x403f5fe
push 4
call fcn.0059e728
add esp, 0xc
pop ecx
pop ebx
cmp eax, ecx
jl 0x4a1a0e
push 0x4122
push 0x403f5fe
push 1
call fcn.0059e728
add esp, 0xc
shl eax, 2
add ebx, eax
mov ebx, dword [ebx]
add ebx, 0x10
mov dword [ebp - 0x20], ebx
mov ebx, dword [ebp - 0x1c]
mov ax, word [ebx]
cwde
mov dword [ebp - 0x28], eax
fild dword [ebp - 0x28]
fstp qword [ebp - 0x28]
fld qword [ebp - 0x28]
mov ebx, dword [ebp - 0x20]
fild dword [ebx]
fstp qword [ebp - 0x30]
fadd qword [ebp - 0x30]
fstp qword [ebp - 0x38]
fld qword [ebp - 0x38]
call fcn.00401596
mov ebx, dword [ebp - 0x18]
mov word [ebx], ax
mov ebx, dword [0x944f04]
call fcn.00402194
push ebx
push ecx
mov eax, dword [ebp + 8]
dec eax
jns 0x4a1a74
push 0x418f
push 0x403f5fe
push 4
call fcn.0059e728
add esp, 0xc
pop ecx
pop ebx
cmp eax, ecx
jl 0x4a1a91
push 0x418f
push 0x403f5fe
push 1
call fcn.0059e728
add esp, 0xc
shl eax, 2
add ebx, eax
mov ebx, dword [ebx]
mov ebx, dword [ebx + 0x24]
mov ebx, dword [ebx + 4]
add ebx, 0x5c
mov dword [ebp - 0x18], ebx
mov ebx, dword [ebp - 0x18]
mov ax, word [ebx]
cwde
push eax
push 0xf
push dword [ebp + 8]
call fcn.004a1c72
mov ebx, dword [0x944f04]
call fcn.00402194
push ebx
push ecx
mov eax, dword [ebp + 8]
dec eax
jns 0x4a1ae3
push 0x41ee
push 0x403f5fe
push 4
call fcn.0059e728
add esp, 0xc
pop ecx
pop ebx
cmp eax, ecx
jl 0x4a1b00
push 0x41ee
push 0x403f5fe
push 1
call fcn.0059e728
add esp, 0xc
shl eax, 2
add ebx, eax
mov ebx, dword [ebx]
mov ebx, dword [ebx + 0x20]
mov ebx, dword [ebx + 0x48]
call fcn.00402194
push ebx
push ecx
mov eax, dword [ebp - 0xc]
dec eax
jns 0x4a1b31
push 0x41ee
push 0x403f5fe
push 4
call fcn.0059e728
add esp, 0xc
pop ecx
pop ebx
cmp eax, ecx
jl 0x4a1b4e
push 0x41ee
push 0x403f5fe
push 1
call fcn.0059e728
add esp, 0xc
shl eax, 2
add ebx, eax
mov ebx, dword [ebx]
add ebx, 8
mov dword [ebp - 0x18], ebx
mov ebx, dword [ebp - 0x18]
mov dword [ebx], 1
push dword [ebp + 8]
call fcn.004a23c7
push dword [ebp + 8]
call fcn.00492af9
mov dword [ebp - 0x18], eax
mov ebx, dword [0x944f04]
call fcn.00402194
push ebx
push ecx
mov eax, dword [ebp + 8]
dec eax
jns 0x4a1ba1
push 0x429a
push 0x403f5fe
push 4
call fcn.0059e728
add esp, 0xc
pop ecx
pop ebx
cmp eax, ecx
jl 0x4a1bbe
push 0x429a
push 0x403f5fe
push 1
call fcn.0059e728
add esp, 0xc
shl eax, 2
add ebx, eax
mov ebx, dword [ebx]
mov ebx, dword [ebx + 0x24]
mov ebx, dword [ebx + 0xc]
add ebx, 0x84
mov dword [ebp - 0x1c], ebx
push dword [ebp - 0x1c]
push dword [ebp + 8]
call fcn.004a6cf4
mov dword [ebp - 0x20], eax
push dword [ebp - 0x20]
push dword [ebp - 0x18]
push dword [ebp - 0x14]
mov ecx, 3
call fcn.00402e44
add esp, 0xc
mov dword [ebp - 0x24], eax
mov ebx, dword [ebp - 0x18]
test ebx, ebx
je 0x4a1c0b
push ebx
call fcn.0059e734
add esp, 4
mov ebx, dword [ebp - 0x20]
test ebx, ebx
je 0x4a1c1b
push ebx
call fcn.0059e734
add esp, 4
lea eax, [ebp - 0x24]
push eax
push dword [ebp + 8]
call fcn.00412a5b
mov ebx, dword [ebp - 0x24]
test ebx, ebx
je 0x4a1c37
push ebx
call fcn.0059e734
add esp, 4
jmp 0x4a1c3c
mov ebx, dword [ebp - 4]
push ebx
mov eax, dword [ebx]
call dword [eax]
call fcn.0059e734
add esp, 4
mov ebx, dword [ebp - 8]
test ebx, ebx
je 0x4a1c5c
push ebx
call fcn.0059e734
add esp, 4
mov ebx, dword [ebp - 0x14]
test ebx, ebx
je 0x4a1c6c
push ebx
call fcn.0059e734
add esp, 4
mov esp, ebp
pop ebp
ret 8