Function at 0x4a6750
Capabilities:
Check os version

Disassembly:
push 0xffffffffffffffff
push 0x576646
mov eax, dword fs:[0]
push eax
sub esp, 0xe0
mov eax, dword [0x6a7564]
xor eax, esp
mov dword [esp + 0xdc], eax
push ebp
push esi
push edi
mov eax, dword [0x6a7564]
xor eax, esp
push eax
lea eax, [esp + 0xf0]
mov dword fs:[0], eax
mov eax, dword [esp + 0x104]
mov esi, dword [esp + 0x10c]
mov ebp, dword [esp + 0x100]
mov edi, dword [esp + 0x110]
mov dword [esp + 0x24], ecx
mov ecx, dword [esp + 0x108]
mov dword [esp + 0x1c], ecx
lea ecx, [esp + 0x2c]
mov dword [esp + 0x14], eax
mov dword [esp + 0x10], esi
call fcn.0042d050
push 0
lea edx, [esp + 0x30]
push edx
push 0xd5
mov ecx, 0x6b6658
mov dword [esp + 0x104], 0
call fcn.00431a60
test esi, esi
je 0x4a67f9
movzx eax, word [esi + 0x1a]
test ax, ax
je 0x4a67f9
movzx eax, ax
jmp 0x4a67fb
xor eax, eax
mov esi, dword [esp + 0x14]
add esi, 2
cmp dword [esp + 0x1c], 0
push esi
je 0x4a6827
lea ecx, [esp + 0x70]
test ax, ax
je 0x4a6844
movzx eax, ax
push eax
push 0x588b0c
push ecx
call fcn.0055adac
add esp, 0x10
jmp 0x4a685e
test ax, ax
je 0x4a684c
movzx edx, ax
push edx
lea eax, [esp + 0x74]
push 0x588afc
push eax
call fcn.0055adac
add esp, 0x10
jmp 0x4a685e
push 0x588af4
push ecx
jmp 0x4a6856
push 0x580ca8
lea edx, [esp + 0x74]
push edx
call fcn.0055adac
add esp, 0xc
mov eax, esi
lea edx, [eax + 1]
mov cl, byte [eax]
inc eax
test cl, cl
jne 0x4a6863
mov ecx, dword [esp + 0x10]
sub eax, edx
test ecx, ecx
je 0x4a6895
cmp dword [ecx + 4], 0
je 0x4a6895
push 2
push 0
push 0x55fc55
lea eax, [esp + 0x78]
push eax
mov ecx, ebp
call fcn.0043e3b0
mov esi, dword [esp + 0x14]
jmp 0x4a68fc
mov esi, dword [esp + 0x14]
cmp word [esi + 0xea], 0
je 0x4a68b3
push 2
push 0
push 0xff00
lea ecx, [esp + 0x78]
push ecx
jmp 0x4a68f5
cmp byte [esi + eax], 0x2b
je 0x4a68e7
cmp byte [esi + eax - 1], 0x2b
je 0x4a68e7
mov edx, 0x834
push 2
push 0
cmp word [esi + 0x48], dx
jne 0x4a68db
push 0xe6e826
lea eax, [esp + 0x78]
push eax
jmp 0x4a68f5
push 0xffffff
lea ecx, [esp + 0x78]
push ecx
jmp 0x4a68f5
push 2
push 0
push 0x548fdf
lea edx, [esp + 0x78]
push edx
mov ecx, ebp
call fcn.0043e3b0
push 0x956
mov ecx, 0x6b8950
call fcn.004c5020
push eax
lea eax, [esp + 0x70]
push eax
call fcn.0055adac
add esp, 8
push 2
push 0
push 0xffffb0
lea ecx, [esp + 0x78]
push ecx
mov ecx, ebp
call fcn.0043e3b0
movzx eax, word [esi + 0x48]
mov edx, 0x801
cmp ax, dx
je 0x4a6a20
mov ecx, 0x834
cmp ax, cx
je 0x4a6a20
mov edx, 0x807
cmp ax, dx
jne 0x4a699d
push 0x96a
mov ecx, 0x6b8950
call fcn.004c5020
push eax
push 0x956
mov ecx, 0x6b8950
call fcn.004c5020
push eax
lea eax, [esp + 0x74]
push str._s__s
push eax
call fcn.0055adac
add esp, 0x10
push 7
push 0
push 0xffffb0
lea ecx, [esp + 0x78]
push ecx
jmp 0x4a6a60
mov edx, 0x808
cmp ax, dx
jne 0x4a69ae
push 0x969
jmp 0x4a695d
mov edx, 0x809
cmp ax, dx
jne 0x4a69bf
push 0x96b
jmp 0x4a695d
mov edx, 0x80e
cmp ax, dx
jne 0x4a69d0
push 0x940
jmp 0x4a695d
mov edx, 0x80b
cmp ax, dx
jne 0x4a69e4
push 0x950
jmp 0x4a695d
mov edx, 0x80d
cmp ax, dx
jne 0x4a69f8
push 0x951
jmp 0x4a695d
mov edx, 0x80a
cmp ax, dx
jne 0x4a6a0c
push 0x952
jmp 0x4a695d
mov edx, 0x80c
cmp ax, dx
jne 0x4a6a67
push 0x953
jmp 0x4a695d
push 0x93e
mov ecx, 0x6b8950
call fcn.004c5020
push eax
push 0x956
mov ecx, 0x6b8950
call fcn.004c5020
push eax
lea edx, [esp + 0x74]
push str._s__s
push edx
call fcn.0055adac
add esp, 0x10
push 7
push 0
push 0xffffb0
lea eax, [esp + 0x78]
push eax
mov ecx, ebp
call fcn.0043e3b0
fldz
mov ecx, dword [esp + 0x24]
push esi
fstp dword [esp + 0x24]
push ebp
call fcn.0049c620
movzx eax, word [esi + 0x8a]
sub eax, 1
je 0x4a6acf
sub eax, 1
jne 0x4a6b16
push 0xed
mov ecx, 0x6b8950
call fcn.004c5020
push eax
push 0x956
mov ecx, 0x6b8950
call fcn.004c5020
push eax
lea ecx, [esp + 0x74]
push str._s__s
push ecx
call fcn.0055adac
add esp, 0x10
push 7
push 0
push 0xe61414
lea edx, [esp + 0x78]
push edx
jmp 0x4a6b0f
push 0xec
mov ecx, 0x6b8950
call fcn.004c5020
push eax
push 0x956
mov ecx, 0x6b8950
call fcn.004c5020
push eax
lea eax, [esp + 0x74]
push str._s__s
push eax
call fcn.0055adac
add esp, 0x10
push 7
push 0
push 0xe61414
lea ecx, [esp + 0x78]
push ecx
mov ecx, ebp
call fcn.0043e3b0
cmp word [esi + 0x8c], 0
je 0x4a6b91
push 0x943
mov ecx, 0x6b8950
call fcn.004c5020
movzx edx, word [esi + 0x8c]
push eax
push edx
push 0x956
mov ecx, 0x6b8950
call fcn.004c5020
push eax
lea eax, [esp + 0x78]
push str._s__d_s
push eax
call fcn.0055adac
mov ecx, dword [0x6b6dac]
mov dx, word [ecx + 0x43c]
add esp, 0x14
push 7
push 0
cmp dx, word [esi + 0x8c]
jae 0x4a6b80
push 0xe61414
lea eax, [esp + 0x78]
push eax
jmp 0x4a6b8a
push 0xffffff
lea ecx, [esp + 0x78]
push ecx
mov ecx, ebp
call fcn.0043e3b0
cmp word [esi + 0x8e], 0
je 0x4a6c0c
push 0xef
mov ecx, 0x6b8950
call fcn.004c5020
movzx edx, word [esi + 0x8e]
push eax
push edx
push 0x956
mov ecx, 0x6b8950
call fcn.004c5020
push eax
lea eax, [esp + 0x78]
push str._s__d_s
push eax
call fcn.0055adac
mov ecx, dword [0x6b6dac]
mov dx, word [ecx + 0x65c]
add esp, 0x14
push 7
push 0
cmp dx, word [esi + 0x8e]
jae 0x4a6bfb
push 0xe61414
lea eax, [esp + 0x78]
push eax
jmp 0x4a6c05
push 0xffffff
lea ecx, [esp + 0x78]
push ecx
mov ecx, ebp
call fcn.0043e3b0
cmp word [esi + 0x90], 0
je 0x4a6c87
push 0xf0
mov ecx, 0x6b8950
call fcn.004c5020
movzx edx, word [esi + 0x90]
push eax
push edx
push 0x956
mov ecx, 0x6b8950
call fcn.004c5020
push eax
lea eax, [esp + 0x78]
push str._s__d_s
push eax
call fcn.0055adac
mov ecx, dword [0x6b6dac]
mov dx, word [ecx + 0x65e]
add esp, 0x14
push 7
push 0
cmp dx, word [esi + 0x90]
jae 0x4a6c76
push 0xe61414
lea eax, [esp + 0x78]
push eax
jmp 0x4a6c80
push 0xffffff
lea ecx, [esp + 0x78]
push ecx
mov ecx, ebp
call fcn.0043e3b0
cmp word [esi + 0x92], 0
je 0x4a6d02
push 0xf1
mov ecx, 0x6b8950
call fcn.004c5020
movzx edx, word [esi + 0x92]
push eax
push edx
push 0x956
mov ecx, 0x6b8950
call fcn.004c5020
push eax
lea eax, [esp + 0x78]
push str._s__d_s
push eax
call fcn.0055adac
mov ecx, dword [0x6b6dac]
mov dx, word [ecx + 0x660]
add esp, 0x14
push 7
push 0
cmp dx, word [esi + 0x92]
jae 0x4a6cf1
push 0xe61414
lea eax, [esp + 0x78]
push eax
jmp 0x4a6cfb
push 0xffffff
lea ecx, [esp + 0x78]
push ecx
mov ecx, ebp
call fcn.0043e3b0
cmp word [esi + 0x94], 0
je 0x4a6d7d
push 0xf2
mov ecx, 0x6b8950
call fcn.004c5020
movzx edx, word [esi + 0x94]
push eax
push edx
push 0x956
mov ecx, 0x6b8950
call fcn.004c5020
push eax
lea eax, [esp + 0x78]
push str._s__d_s
push eax
call fcn.0055adac
mov ecx, dword [0x6b6dac]
mov dx, word [ecx + 0x662]
add esp, 0x14
push 7
push 0
cmp dx, word [esi + 0x94]
jae 0x4a6d6c
push 0xe61414
lea eax, [esp + 0x78]
push eax
jmp 0x4a6d76
push 0xffffff
lea ecx, [esp + 0x78]
push ecx
mov ecx, ebp
call fcn.0043e3b0
push 0x956
mov ecx, 0x6b8950
call fcn.004c5020
push eax
lea edx, [esp + 0x70]
push edx
call fcn.0055adac
add esp, 8
push 2
push 0
push 0xffffb0
lea eax, [esp + 0x78]
push eax
mov ecx, ebp
call fcn.0043e3b0
test edi, edi
je 0x4a7136
cmp dword [edi], 0
je 0x4a7136
push 0
lea ecx, [esp + 0x30]
push ecx
push 0xffffb0
push 0x57ea62
mov ecx, ebp
call fcn.0043e3b0
lea ecx, [esp + 0x4c]
call fcn.0042d050
mov eax, dword [edi + 8]
mov byte [esp + 0xf8], 1
cmp eax, 1
jne 0x4a6e1e
push 0
lea edx, [esp + 0x50]
push edx
push 0x93
mov ecx, 0x6b6658
call fcn.00431a60
cmp dword [esp + 0x50], 0
je 0x4a6e8c
push 0
lea eax, [esp + 0x50]
push eax
mov ecx, ebp
call fcn.0043e3c0
jmp 0x4a6e8c
jbe 0x4a6e8c
movzx ecx, ax
push ecx
mov ecx, dword [esp + 0x28]
call fcn.0049ebe0
mov esi, eax
test esi, esi
je 0x4a6e8c
movzx eax, word [esi + 0x46]
push 1
lea edx, [esp + 0x50]
push edx
push eax
mov ecx, 0x6b6658
call fcn.00431a60
cmp dword [esp + 0x50], 0
je 0x4a6e5e
push 0
lea ecx, [esp + 0x50]
push ecx
mov ecx, ebp
call fcn.0043e3c0
movzx edx, word [esi + 0x44]
mov ecx, dword [esp + 0x24]
push edx
call fcn.0049ec10
mov esi, eax
test esi, esi
je 0x4a6e8c
mov eax, dword [esi]
push 0
push 0
push 0xff00ff
push eax
mov ecx, ebp
call fcn.0043e3b0
mov esi, dword [esi + 4]
test esi, esi
jne 0x4a6e72
mov eax, dword [edi + 0xc]
cmp eax, 1
jne 0x4a6ec1
push 0
lea ecx, [esp + 0x50]
push ecx
push 0x93
mov ecx, 0x6b6658
call fcn.00431a60
cmp dword [esp + 0x50], 0
je 0x4a6f2f
push 1
lea edx, [esp + 0x50]
push edx
mov ecx, ebp
call fcn.0043e3c0
jmp 0x4a6f2f
jbe 0x4a6f2f
mov ecx, dword [esp + 0x24]
movzx eax, ax
push eax
call fcn.0049ebe0
mov esi, eax
test esi, esi
je 0x4a6f2f
movzx edx, word [esi + 0x46]
push 1
lea ecx, [esp + 0x50]
push ecx
push edx
mov ecx, 0x6b6658
call fcn.00431a60
cmp dword [esp + 0x50], 0
je 0x4a6f01
push 1
lea eax, [esp + 0x50]
push eax
mov ecx, ebp
call fcn.0043e3c0
movzx ecx, word [esi + 0x44]
push ecx
mov ecx, dword [esp + 0x28]
call fcn.0049ec10
mov esi, eax
test esi, esi
je 0x4a6f2f
mov edx, dword [esi]
push 0
push 0
push 0xff00ff
push edx
mov ecx, ebp
call fcn.0043e3b0
mov esi, dword [esi + 4]
test esi, esi
jne 0x4a6f15
mov eax, dword [edi + 0x10]
cmp eax, 1
jne 0x4a6f64
push 0
lea eax, [esp + 0x50]
push eax
push 0x93
mov ecx, 0x6b6658
call fcn.00431a60
cmp dword [esp + 0x50], 0
je 0x4a6fd2
push 2
lea ecx, [esp + 0x50]
push ecx
mov ecx, ebp
call fcn.0043e3c0
jmp 0x4a6fd2
jbe 0x4a6fd2
mov ecx, dword [esp + 0x24]
movzx edx, ax
push edx
call fcn.0049ebe0
mov esi, eax
test esi, esi
je 0x4a6fd2
movzx ecx, word [esi + 0x46]
push 1
lea eax, [esp + 0x50]
push eax
push ecx
mov ecx, 0x6b6658
call fcn.00431a60
cmp dword [esp + 0x50], 0
je 0x4a6fa4
push 2
lea edx, [esp + 0x50]
push edx
mov ecx, ebp
call fcn.0043e3c0
movzx eax, word [esi + 0x44]
mov ecx, dword [esp + 0x24]
push eax
call fcn.0049ec10
mov esi, eax
test esi, esi
je 0x4a6fd2
mov ecx, dword [esi]
push 0
push 0
push 0xff00ff
push ecx
mov ecx, ebp
call fcn.0043e3b0
mov esi, dword [esi + 4]
test esi, esi
jne 0x4a6fb8
mov eax, dword [edi + 0x14]
cmp eax, 1
jne 0x4a700b
push 0
lea edx, [esp + 0x50]
push edx
push 0x93
mov ecx, 0x6b6658
call fcn.00431a60
cmp dword [esp + 0x50], 0
je 0x4a707a
push 3
lea eax, [esp + 0x50]
push eax
mov ecx, ebp
call fcn.0043e3c0
jmp 0x4a707a
jbe 0x4a707a
movzx ecx, ax
push ecx
mov ecx, dword [esp + 0x28]
call fcn.0049ebe0
mov esi, eax
test esi, esi
je 0x4a707a
movzx eax, word [esi + 0x46]
push 1
lea edx, [esp + 0x50]
push edx
push eax
mov ecx, 0x6b6658
call fcn.00431a60
cmp dword [esp + 0x50], 0
je 0x4a704b
push 3
lea ecx, [esp + 0x50]
push ecx
mov ecx, ebp
call fcn.0043e3c0
movzx edx, word [esi + 0x44]
mov ecx, dword [esp + 0x24]
push edx
call fcn.0049ec10
mov esi, eax
test esi, esi
je 0x4a707a
nop
mov eax, dword [esi]
push 0
push 0
push 0xff00ff
push eax
mov ecx, ebp
call fcn.0043e3b0
mov esi, dword [esi + 4]
test esi, esi
jne 0x4a7060
mov eax, dword [edi + 0x18]
cmp eax, 1
jne 0x4a70b3
push 0
lea ecx, [esp + 0x50]
push ecx
push 0x93
mov ecx, 0x6b6658
call fcn.00431a60
cmp dword [esp + 0x50], 0
je 0x4a7121
push 4
lea edx, [esp + 0x50]
push edx
mov ecx, ebp
call fcn.0043e3c0
jmp 0x4a7121
jbe 0x4a7121
mov ecx, dword [esp + 0x24]
movzx eax, ax
push eax
call fcn.0049ebe0
mov esi, eax
test esi, esi
je 0x4a7121
movzx edx, word [esi + 0x46]
push 1
lea ecx, [esp + 0x50]
push ecx
push edx
mov ecx, 0x6b6658
call fcn.00431a60
cmp dword [esp + 0x50], 0
je 0x4a70f3
push 4
lea eax, [esp + 0x50]
push eax
mov ecx, ebp
call fcn.0043e3c0
movzx ecx, word [esi + 0x44]
push ecx
mov ecx, dword [esp + 0x28]
call fcn.0049ec10
mov esi, eax
test esi, esi
je 0x4a7121
mov edx, dword [esi]
push 0
push 0
push 0xff00ff
push edx
mov ecx, ebp
call fcn.0043e3b0
mov esi, dword [esi + 4]
test esi, esi
jne 0x4a7107
lea ecx, [esp + 0x4c]
mov byte [esp + 0xf8], 0
call fcn.0042d060
mov esi, dword [esp + 0x14]
push 0
lea eax, [esp + 0x30]
push eax
push 0xffffb0
push 0x57ea62
mov ecx, ebp
call fcn.0043e3b0
mov eax, dword [esp + 0x10]
test eax, eax
je 0x4a7164
movzx eax, word [eax + 8]
test ax, ax
je 0x4a7164
movzx ecx, ax
jmp 0x4a7166
xor ecx, ecx
movzx eax, word [esi + 0x5a]
mov edi, dword [esp + 0x1c]
test ax, ax
je 0x4a7204
test edi, edi
je 0x4a71b2
movzx edx, word [edi + 8]
test dx, dx
je 0x4a71b2
movzx edx, dx
movzx eax, ax
push edx
add eax, ecx
push eax
push 0x17e
mov ecx, 0x6b8950
call fcn.004c5020
push eax
lea ecx, [esp + 0x78]
push str._s__d___d_
push ecx
call fcn.0055adac
add esp, 0x14
jmp 0x4a71da
movzx edx, ax
add edx, ecx
push edx
push 0x17e
mov ecx, 0x6b8950
call fcn.004c5020
push eax
lea eax, [esp + 0x74]
push 0x584ca4
push eax
call fcn.0055adac
add esp, 0x10
mov eax, dword [esp + 0x10]
test eax, eax
je 0x4a7271
cmp word [eax + 8], 0
je 0x4a7271
push 0
push 0
push 0x55fc55
lea ecx, [esp + 0x78]
push ecx
jmp 0x4a72c1
test ecx, ecx
je 0x4a723e
test edi, edi
je 0x4a727c
movzx eax, word [edi + 8]
test ax, ax
je 0x4a723e
movzx eax, ax
push eax
push ecx
push 0x17e
mov ecx, 0x6b8950
call fcn.004c5020
push eax
lea ecx, [esp + 0x78]
push str._s__d___d_
push ecx
call fcn.0055adac
add esp, 0x14
jmp 0x4a72b3
test edi, edi
je 0x4a727c
movzx eax, word [edi + 8]
test ax, ax
je 0x4a727c
movzx eax, ax
push eax
push 0x17e
mov ecx, 0x6b8950
call fcn.004c5020
push eax
lea ecx, [esp + 0x74]
push str._s___d_
push ecx
call fcn.0055adac
add esp, 0x10
push 0
push 0
push 0x548fdf
jmp 0x4a72bc
mov edx, dword [esp + 0x10]
test edx, edx
je 0x4a72de
movzx eax, word [edx + 8]
test ax, ax
je 0x4a72c8
movzx eax, ax
push eax
push 0x17e
mov ecx, 0x6b8950
call fcn.004c5020
push eax
lea ecx, [esp + 0x74]
push str._s__d
push ecx
call fcn.0055adac
add esp, 0x10
push 0
push 0
push 0x55fc55
lea edx, [esp + 0x78]
push edx
mov ecx, ebp
call fcn.0043e3b0
mov edx, dword [esp + 0x10]
test edx, edx
je 0x4a72de
movzx eax, word [edx + 0xa]
test ax, ax
je 0x4a72de
movzx eax, ax
jmp 0x4a72e0
xor eax, eax
movzx ecx, word [esi + 0x5c]
test cx, cx
je 0x4a737a
test edi, edi
je 0x4a7328
movzx edx, word [edi + 0xa]
test dx, dx
je 0x4a7328
movzx ecx, cx
movzx edx, dx
push edx
add ecx, eax
push ecx
push 0x17f
mov ecx, 0x6b8950
call fcn.004c5020
push eax
lea edx, [esp + 0x78]
push str._s__d___d_
push edx
call fcn.0055adac
add esp, 0x14
jmp 0x4a7350
movzx ecx, cx
add ecx, eax
push ecx
push 0x17f
mov ecx, 0x6b8950
call fcn.004c5020
push eax
lea edx, [esp + 0x74]
push 0x584ca4
push edx
call fcn.0055adac
add esp, 0x10
mov eax, dword [esp + 0x10]
test eax, eax
je 0x4a73e7
cmp word [eax + 0xa], 0
je 0x4a73e7
push 0
push 0
push 0x55fc55
lea eax, [esp + 0x78]
push eax
jmp 0x4a7433
test eax, eax
je 0x4a73b4
test edi, edi
je 0x4a73f2
movzx ecx, word [edi + 0xa]
test cx, cx
je 0x4a73b4
movzx edx, cx
push edx
push eax
push 0x17f
mov ecx, 0x6b8950
call fcn.004c5020
push eax
lea eax, [esp + 0x78]
push str._s__d___d_
push eax
call fcn.0055adac
add esp, 0x14
jmp 0x4a7425
test edi, edi
je 0x4a73f2
movzx eax, word [edi + 0xa]
test ax, ax
je 0x4a73f2
movzx edx, ax
push edx
push 0x17f
mov ecx, 0x6b8950
call fcn.004c5020
push eax
lea eax, [esp + 0x74]
push str._s___d_
push eax
call fcn.0055adac
add esp, 0x10
push 0
push 0
push 0x548fdf
jmp 0x4a742e
test edx, edx
je 0x4a7450
movzx eax, word [edx + 0xa]
test ax, ax
je 0x4a743a
movzx edx, ax
push edx
push 0x17f
mov ecx, 0x6b8950
call fcn.004c5020
push eax
lea eax, [esp + 0x74]
push str._s__d
push eax
call fcn.0055adac
add esp, 0x10
push 0
push 0
push 0x55fc55
lea ecx, [esp + 0x78]
push ecx
mov ecx, ebp
call fcn.0043e3b0
mov edx, dword [esp + 0x10]
test edx, edx
je 0x4a7450
movzx eax, word [edx + 0xc]
test ax, ax
je 0x4a7450
movzx eax, ax
jmp 0x4a7452
xor eax, eax
movzx ecx, word [esi + 0x5e]
test cx, cx
je 0x4a74ec
test edi, edi
je 0x4a749a
movzx edx, word [edi + 0xc]
test dx, dx
je 0x4a749a
movzx ecx, cx
movzx edx, dx
push edx
add ecx, eax
push ecx
push 0x180
mov ecx, 0x6b8950
call fcn.004c5020
push eax
lea edx, [esp + 0x78]
push str._s__d___d_
push edx
call fcn.0055adac
add esp, 0x14
jmp 0x4a74c2
movzx ecx, cx
add ecx, eax
push ecx
push 0x180
mov ecx, 0x6b8950
call fcn.004c5020
push eax
lea edx, [esp + 0x74]
push 0x584ca4
push edx
call fcn.0055adac
add esp, 0x10
mov eax, dword [esp + 0x10]
test eax, eax
je 0x4a7559
cmp word [eax + 0xc], 0
je 0x4a7559
push 0
push 0
push 0x55fc55
lea eax, [esp + 0x78]
push eax
jmp 0x4a75a5
test eax, eax
je 0x4a7526
test edi, edi
je 0x4a7564
movzx ecx, word [edi + 0xc]
test cx, cx
je 0x4a7526
movzx edx, cx
push edx
push eax
push 0x180
mov ecx, 0x6b8950
call fcn.004c5020
push eax
lea eax, [esp + 0x78]
push str._s__d___d_
push eax
call fcn.0055adac
add esp, 0x14
jmp 0x4a7597
test edi, edi
je 0x4a7564
movzx eax, word [edi + 0xc]
test ax, ax
je 0x4a7564
movzx edx, ax
push edx
push 0x180
mov ecx, 0x6b8950
call fcn.004c5020
push eax
lea eax, [esp + 0x74]
push str._s___d_
push eax
call fcn.0055adac
add esp, 0x10
push 0
push 0
push 0x548fdf
jmp 0x4a75a0
test edx, edx
je 0x4a75c2
movzx eax, word [edx + 0xc]
test ax, ax
je 0x4a75ac
movzx edx, ax
push edx
push 0x180
mov ecx, 0x6b8950
call fcn.004c5020
push eax
lea eax, [esp + 0x74]
push str._s__d
push eax
call fcn.0055adac
add esp, 0x10
push 0
push 0
push 0x55fc55
lea ecx, [esp + 0x78]
push ecx
mov ecx, ebp
call fcn.0043e3b0
mov edx, dword [esp + 0x10]
test edx, edx
je 0x4a75c2
movzx eax, word [edx + 0xe]
test ax, ax
je 0x4a75c2
movzx eax, ax
jmp 0x4a75c4
xor eax, eax
movzx ecx, word [esi + 0x60]
test cx, cx
je 0x4a765e
test edi, edi
je 0x4a760c
movzx edx, word [edi + 0xe]
test dx, dx
je 0x4a760c
movzx ecx, cx
movzx edx, dx
push edx
add ecx, eax
push ecx
push 0x181
mov ecx, 0x6b8950
call fcn.004c5020
push eax
lea edx, [esp + 0x78]
push str._s__d___d_
push edx
call fcn.0055adac
add esp, 0x14
jmp 0x4a7634
movzx ecx, cx
add ecx, eax
push ecx
push 0x181
mov ecx, 0x6b8950
call fcn.004c5020
push eax
lea edx, [esp + 0x74]
push 0x584ca4
push edx
call fcn.0055adac
add esp, 0x10
mov eax, dword [esp + 0x10]
test eax, eax
je 0x4a76cb
cmp word [eax + 0xe], 0
je 0x4a76cb
push 0
push 0
push 0x55fc55
lea eax, [esp + 0x78]
push eax
jmp 0x4a7717
test eax, eax
je 0x4a7698
test edi, edi
je 0x4a76d6
movzx ecx, word [edi + 0xe]
test cx, cx
je 0x4a7698
movzx edx, cx
push edx
push eax
push 0x181
mov ecx, 0x6b8950
call fcn.004c5020
push eax
lea eax, [esp + 0x78]
push str._s__d___d_
push eax
call fcn.0055adac
add esp, 0x14
jmp 0x4a7709
test edi, edi
je 0x4a76d6
movzx eax, word [edi + 0xe]
test ax, ax
je 0x4a76d6
movzx edx, ax
push edx
push 0x181
mov ecx, 0x6b8950
call fcn.004c5020
push eax
lea eax, [esp + 0x74]
push str._s___d_
push eax
call fcn.0055adac
add esp, 0x10
push 0
push 0
push 0x548fdf
jmp 0x4a7712
test edx, edx
je 0x4a772d
movzx eax, word [edx + 0xe]
test ax, ax
je 0x4a771e
movzx edx, ax
push edx
push 0x181
mov ecx, 0x6b8950
call fcn.004c5020
push eax
lea eax, [esp + 0x74]
push str._s__d
push eax
call fcn.0055adac
add esp, 0x10
push 0
push 0
push 0x55fc55
lea ecx, [esp + 0x78]
push ecx
mov ecx, ebp
call fcn.0043e3b0
mov edx, dword [esp + 0x10]
test edx, edx
je 0x4a772d
mov eax, dword [edx + 0x10]
test eax, eax
jne 0x4a772f
xor eax, eax
mov ecx, dword [esi + 0x64]
test ecx, ecx
je 0x4a77c1
test edi, edi
je 0x4a776d
mov edx, dword [edi + 0x10]
test edx, edx
je 0x4a776d
push edx
add ecx, eax
push ecx
push 0x182
mov ecx, 0x6b8950
call fcn.004c5020
push eax
lea edx, [esp + 0x78]
push str._s__d___d_
push edx
call fcn.0055adac
add esp, 0x14
jmp 0x4a7792
add ecx, eax
push ecx
push 0x182
mov ecx, 0x6b8950
call fcn.004c5020
push eax
lea eax, [esp + 0x74]
push 0x584ca4
push eax
call fcn.0055adac
add esp, 0x10
mov eax, dword [esp + 0x10]
test eax, eax
je 0x4a77b3
cmp dword [eax + 0x10], 0
je 0x4a77b3
push 0
push 0
push 0x55fc55
lea ecx, [esp + 0x78]
push ecx
jmp 0x4a7885
push 0
push 0
push 0x548fdf
jmp 0x4a7880
test eax, eax
je 0x4a780b
test edi, edi
je 0x4a7849
mov ecx, dword [edi + 0x10]
test ecx, ecx
je 0x4a780b
push ecx
push eax
push 0x182
mov ecx, 0x6b8950
call fcn.004c5020
push eax
lea eax, [esp + 0x78]
push str._s__d___d_
push eax
call fcn.0055adac
add esp, 0x14
push 0
push 0
push 0x55fc55
lea ecx, [esp + 0x78]
push ecx
jmp 0x4a7885
test edi, edi
je 0x4a7849
mov eax, dword [edi + 0x10]
test eax, eax
je 0x4a7849
push eax
push 0x182
mov ecx, 0x6b8950
call fcn.004c5020
push eax
lea edx, [esp + 0x74]
push str._s___d_
push edx
call fcn.0055adac
add esp, 0x10
push 0
push 0
push 0x548fdf
lea eax, [esp + 0x78]
push eax
jmp 0x4a7885
test edx, edx
je 0x4a78a2
mov eax, dword [edx + 0x10]
test eax, eax
je 0x4a788c
push eax
push 0x182
mov ecx, 0x6b8950
call fcn.004c5020
push eax
lea ecx, [esp + 0x74]
push str._s__d
push ecx
call fcn.0055adac
add esp, 0x10
push 0
push 0
push 0x55fc55
lea edx, [esp + 0x78]
push edx
mov ecx, ebp
call fcn.0043e3b0
mov edx, dword [esp + 0x10]
test edx, edx
je 0x4a78a2
movzx eax, word [edx + 0x14]
test ax, ax
je 0x4a78a2
movzx eax, ax
jmp 0x4a78a4
xor eax, eax
movzx ecx, word [esi + 0x6c]
test cx, cx
je 0x4a793e
test edi, edi
je 0x4a78ec
movzx edx, word [edi + 0x14]
test dx, dx
je 0x4a78ec
movzx ecx, cx
movzx edx, dx
push edx
add ecx, eax
push ecx
push 0x183
mov ecx, 0x6b8950
call fcn.004c5020
push eax
lea edx, [esp + 0x78]
push str._s__d___d_
push edx
call fcn.0055adac
add esp, 0x14
jmp 0x4a7914
movzx ecx, cx
add ecx, eax
push ecx
push 0x183
mov ecx, 0x6b8950
call fcn.004c5020
push eax
lea edx, [esp + 0x74]
push 0x584ca4
push edx
call fcn.0055adac
add esp, 0x10
mov eax, dword [esp + 0x10]
test eax, eax
je 0x4a79ab
cmp word [eax + 0x14], 0
je 0x4a79ab
push 0
push 0
push 0x55fc55
lea eax, [esp + 0x78]
push eax
jmp 0x4a79f7
test eax, eax
je 0x4a7978
test edi, edi
je 0x4a79b6
movzx ecx, word [edi + 0x14]
test cx, cx
je 0x4a7978
movzx edx, cx
push edx
push eax
push 0x183
mov ecx, 0x6b8950
call fcn.004c5020
push eax
lea eax, [esp + 0x78]
push str._s__d___d_
push eax
call fcn.0055adac
add esp, 0x14
jmp 0x4a79e9
test edi, edi
je 0x4a79b6
movzx eax, word [edi + 0x14]
test ax, ax
je 0x4a79b6
movzx edx, ax
push edx
push 0x183
mov ecx, 0x6b8950
call fcn.004c5020
push eax
lea eax, [esp + 0x74]
push str._s___d_
push eax
call fcn.0055adac
add esp, 0x10
push 0
push 0
push 0x548fdf
jmp 0x4a79f2
test edx, edx
je 0x4a7a0d
movzx eax, word [edx + 0x14]
test ax, ax
je 0x4a79fe
movzx edx, ax
push edx
push 0x183
mov ecx, 0x6b8950
call fcn.004c5020
push eax
lea eax, [esp + 0x74]
push str._s__d
push eax
call fcn.0055adac
add esp, 0x10
push 0
push 0
push 0x55fc55
lea ecx, [esp + 0x78]
push ecx
mov ecx, ebp
call fcn.0043e3b0
mov edx, dword [esp + 0x10]
test edx, edx
je 0x4a7a0d
mov eax, dword [edx + 0x16]
test eax, eax
jne 0x4a7a0f
xor eax, eax
mov ecx, dword [esi + 0x68]
test ecx, ecx
je 0x4a7aa1
test edi, edi
je 0x4a7a4d
mov edx, dword [edi + 0x16]
test edx, edx
je 0x4a7a4d
push edx
add ecx, eax
push ecx
push 0x184
mov ecx, 0x6b8950
call fcn.004c5020
push eax
lea edx, [esp + 0x78]
push str._s__d___d_
push edx
call fcn.0055adac
add esp, 0x14
jmp 0x4a7a72
add ecx, eax
push ecx
push 0x184
mov ecx, 0x6b8950
call fcn.004c5020
push eax
lea eax, [esp + 0x74]
push 0x584ca4
push eax
call fcn.0055adac
add esp, 0x10
mov eax, dword [esp + 0x10]
test eax, eax
je 0x4a7a93
cmp dword [eax + 0x16], 0
je 0x4a7a93
push 0
push 0
push 0x55fc55
lea ecx, [esp + 0x78]
push ecx
jmp 0x4a7b65
push 0
push 0
push 0x548fdf
jmp 0x4a7b60
test eax, eax
je 0x4a7aeb
test edi, edi
je 0x4a7b29
mov ecx, dword [edi + 0x16]
test ecx, ecx
je 0x4a7aeb
push ecx
push eax
push 0x184
mov ecx, 0x6b8950
call fcn.004c5020
push eax
lea eax, [esp + 0x78]
push str._s__d___d_
push eax
call fcn.0055adac
add esp, 0x14
push 0
push 0
push 0x55fc55
lea ecx, [esp + 0x78]
push ecx
jmp 0x4a7b65
test edi, edi
je 0x4a7b29
mov eax, dword [edi + 0x16]
test eax, eax
je 0x4a7b29
push eax
push 0x184
mov ecx, 0x6b8950
call fcn.004c5020
push eax
lea edx, [esp + 0x74]
push str._s___d_
push edx
call fcn.0055adac
add esp, 0x10
push 0
push 0
push 0x548fdf
lea eax, [esp + 0x78]
push eax
jmp 0x4a7b65
test edx, edx
je 0x4a7b6c
mov eax, dword [edx + 0x16]
test eax, eax
je 0x4a7b6c
push eax
push 0x184
mov ecx, 0x6b8950
call fcn.004c5020
push eax
lea ecx, [esp + 0x74]
push str._s__d
push ecx
call fcn.0055adac
add esp, 0x10
push 0
push 0
push 0x55fc55
lea edx, [esp + 0x78]
push edx
mov ecx, ebp
call fcn.0043e3b0
mov edi, dword [esp + 0x1c]
mov esi, 1
jmp 0x4a7b80
fld qword [0x57e5e8]
movzx eax, si
test ax, ax
jne 0x4a7b96
fldz
fst dword [esp + 0x28]
jmp 0x4a7ba7
mov edx, dword [esp + 0x14]
movzx ecx, ax
fld dword [edx + ecx*4 + 0x6c]
fstp dword [esp + 0x28]
fldz
fld dword [esp + 0x28]
fmul st(2)
fstp dword [esp + 0x28]
test edi, edi
je 0x4a7bd5
test ax, ax
jne 0x4a7bc0
fst dword [esp + 0x20]
jmp 0x4a7bcb
movzx ecx, ax
fld dword [edi + ecx*4 + 0x16]
fstp dword [esp + 0x20]
fld dword [esp + 0x20]
fmul st(2)
fstp dword [esp + 0x20]
mov ecx, dword [esp + 0x10]
test ecx, ecx
je 0x4a7c0d
test ax, ax
jne 0x4a7bf4
fst dword [esp + 0x18]
fld dword [esp + 0x18]
fmulp st(2)
fxch st(1)
fstp dword [esp + 0x18]
jmp 0x4a7c13
movzx edx, ax
fld dword [ecx + edx*4 + 0x1a]
fstp dword [esp + 0x18]
fld dword [esp + 0x18]
fmulp st(2)
fxch st(1)
fstp dword [esp + 0x18]
jmp 0x4a7c13
fstp st(1)
fst dword [esp + 0x18]
fld dword [esp + 0x28]
fld st(0)
call fcn.0055b110
test eax, eax
je 0x4a7cc5
fstp st(1)
fld dword [esp + 0x20]
call fcn.0055b110
fadd dword [esp + 0x18]
test eax, eax
je 0x4a7c66
push eax
call fcn.0055b110
push eax
lea eax, [esi + 0x108]
push eax
mov ecx, 0x6b8950
call fcn.004c5020
push eax
lea ecx, [esp + 0x78]
push str._s__d_____d___
push ecx
call fcn.0055adac
add esp, 0x14
jmp 0x4a7c90
call fcn.0055b110
push eax
lea edx, [esi + 0x108]
push edx
mov ecx, 0x6b8950
call fcn.004c5020
push eax
lea eax, [esp + 0x74]
push str._s__d__
push eax
call fcn.0055adac
add esp, 0x10
cmp dword [esp + 0x10], 0
je 0x4a7cb2
fldz
fcomp dword [esp + 0x18]
fnstsw ax
test ah, 0x44
jnp 0x4a7cb2
push 0
push 0
push 0x55fc55
jmp 0x4a7da4
push 0
push 0
push 0x548fdf
lea edx, [esp + 0x78]
push edx
jmp 0x4a7da9
fstp st(0)
fld dword [esp + 0x20]
call fcn.0055b110
mov ecx, eax
test ecx, ecx
je 0x4a7d32
fld dword [esp + 0x18]
push ecx
fucom st(1)
fnstsw ax
fstp st(1)
test ah, 0x44
jnp 0x4a7d12
call fcn.0055b110
push eax
lea eax, [esi + 0x108]
push eax
mov ecx, 0x6b8950
call fcn.004c5020
push eax
lea ecx, [esp + 0x78]
push str._s__d_____d___
push ecx
call fcn.0055adac
add esp, 0x14
jmp 0x4a7d6f
lea edx, [esi + 0x108]
fstp st(0)
push edx
mov ecx, 0x6b8950
call fcn.004c5020
push eax
push str._s___d___
lea eax, [esp + 0x78]
push eax
jmp 0x4a7d67
fld st(0)
fld dword [esp + 0x18]
fucom st(1)
fnstsw ax
fstp st(1)
test ah, 0x44
jnp 0x4a7d8e
fstp st(1)
call fcn.0055b110
push eax
lea ecx, [esi + 0x108]
push ecx
mov ecx, 0x6b8950
call fcn.004c5020
push eax
push str._s__d__
lea edx, [esp + 0x78]
push edx
call fcn.0055adac
add esp, 0x10
fldz
fcom dword [esp + 0x18]
fnstsw ax
test ah, 0x44
jnp 0x4a7d90
push 0
fstp st(0)
push 0
push 0x55fc55
lea eax, [esp + 0x78]
push eax
jmp 0x4a7da9
fstp st(0)
fcomp dword [esp + 0x20]
fnstsw ax
test ah, 0x44
jnp 0x4a7db0
push 0
push 0
push 0x548fdf
lea ecx, [esp + 0x78]
push ecx
mov ecx, ebp
call fcn.0043e3b0
inc esi
cmp esi, 5
jle 0x4a7b80
mov edx, dword [esp + 0x14]
movzx eax, word [edx + 0x98]
sub eax, 0
je 0x4a7ddd
sub eax, 1
jne 0x4a7dfd
push eax
push eax
push 0xffffff
push 0x111
jmp 0x4a7deb
push 0
push 0
push 0xffffff
push pe_nt_image_headers32
mov ecx, 0x6b8950
call fcn.004c5020
push eax
mov ecx, ebp
call fcn.0043e3b0
mov eax, dword [esp + 0x10]
test eax, eax
je 0x4a7e13
movzx eax, word [eax + 0x1a]
test ax, ax
je 0x4a7e13
movzx esi, ax
jmp 0x4a7e15
xor esi, esi
mov ecx, dword [esp + 0x14]
movzx eax, word [ecx + 0xa0]
test ax, ax
jne 0x4a7e32
cmp word [ecx + 0xa2], ax
je 0x4a8048
mov edx, 0x80a
cmp word [ecx + 0x48], dx
movzx edx, word [ecx + 0xa2]
je 0x4a7f55
cmp ax, dx
jne 0x4a7eae
test edi, edi
je 0x4a7e81
movzx ecx, word [edi + 0x32]
test cx, cx
je 0x4a7e81
movzx edx, ax
movzx ecx, cx
movzx eax, si
push ecx
add edx, eax
push edx
push 0x185
mov ecx, 0x6b8950
call fcn.004c5020
push eax
push 0x588aa4
jmp 0x4a7f1e
movzx edx, ax
movzx eax, si
add edx, eax
push edx
push 0x185
mov ecx, 0x6b8950
call fcn.004c5020
push eax
lea ecx, [esp + 0x74]
push 0x584c90
push ecx
call fcn.0055adac
add esp, 0x10
jmp 0x4a7f2b
test edi, edi
je 0x4a7efa
mov ecx, edi
movzx edi, word [ecx + 0x32]
test di, di
je 0x4a7ef8
movzx ecx, si
movzx edx, dx
movzx edi, di
push edi
movzx eax, ax
add edx, ecx
push edx
add eax, ecx
push eax
push 0x185
mov ecx, 0x6b8950
call fcn.004c5020
push eax
lea ecx, [esp + 0x7c]
push str._s__d___d___d_
push ecx
call fcn.0055adac
mov edi, dword [esp + 0x34]
add esp, 0x18
jmp 0x4a7f2b
mov edi, ecx
movzx ecx, si
movzx edx, dx
movzx eax, ax
add edx, ecx
push edx
add eax, ecx
push eax
push 0x185
mov ecx, 0x6b8950
call fcn.004c5020
push eax
push str._s__d___d
lea ecx, [esp + 0x7c]
push ecx
call fcn.0055adac
add esp, 0x14
mov eax, dword [esp + 0x10]
test eax, eax
je 0x4a8033
cmp word [eax + 0x1a], 0
je 0x4a8033
push 0
push 0
push 0x55fc55
lea edx, [esp + 0x78]
push edx
jmp 0x4a8041
cmp ax, dx
jne 0x4a7fbb
test edi, edi
je 0x4a7f8b
movzx ecx, word [edi + 0x32]
test cx, cx
je 0x4a7f8b
movzx edx, ax
movzx ecx, cx
movzx eax, si
push ecx
add edx, eax
push edx
push 0x185
mov ecx, 0x6b8950
call fcn.004c5020
push eax
push str._s__d_____d_
jmp 0x4a7f1e
movzx edx, ax
movzx eax, si
add edx, eax
push edx
push 0x185
mov ecx, 0x6b8950
call fcn.004c5020
push eax
lea ecx, [esp + 0x74]
push 0x584c88
push ecx
call fcn.0055adac
add esp, 0x10
jmp 0x4a7f2b
test edi, edi
je 0x4a800a
mov ecx, edi
movzx edi, word [ecx + 0x32]
test di, di
je 0x4a8008
movzx ecx, si
movzx edx, dx
movzx edi, di
push edi
movzx eax, ax
add edx, ecx
push edx
add eax, ecx
push eax
push 0x185
mov ecx, 0x6b8950
call fcn.004c5020
push eax
lea ecx, [esp + 0x7c]
push str._s__d_____d_____d_
push ecx
call fcn.0055adac
mov edi, dword [esp + 0x34]
add esp, 0x18
jmp 0x4a7f2b
mov edi, ecx
movzx ecx, si
movzx edx, dx
movzx eax, ax
add edx, ecx
push edx
add eax, ecx
push eax
push 0x185
mov ecx, 0x6b8950
call fcn.004c5020
push eax
push str._s__d_____d__
jmp 0x4a7f1e
push 0
push 0
push 0x548fdf
lea eax, [esp + 0x78]
push eax
mov ecx, ebp
call fcn.0043e3b0
test edi, edi
je 0x4a80b2
movzx eax, word [edi + 0x34]
test ax, ax
je 0x4a80b2
movzx ecx, ax
push ecx
push 0x186
mov ecx, 0x6b8950
call fcn.004c5020
push eax
lea edx, [esp + 0x74]
push str._s___d_
push edx
call fcn.0055adac
add esp, 0x10
cmp dword [esp + 0x10], 0
je 0x4a809d
mov eax, dword [esp + 0x10]
cmp word [eax + 0x1a], 0
je 0x4a809d
push 0
push 0
push 0x55fc55
lea ecx, [esp + 0x78]
push ecx
jmp 0x4a80ab
push 0
push 0
push 0x548fdf
lea edx, [esp + 0x78]
push edx
mov ecx, ebp
call fcn.0043e3b0
mov ecx, dword [esp + 0x14]
movzx eax, word [ecx + 0xa4]
test ax, ax
jne 0x4a80cf
cmp word [ecx + 0xa6], ax
je 0x4a82f5
mov edx, 0x80a
cmp word [ecx + 0x48], dx
je 0x4a81f4
movzx edx, word [ecx + 0xa6]
cmp ax, dx
jne 0x4a814b
test edi, edi
je 0x4a811e
movzx ecx, word [edi + 0x32]
test cx, cx
je 0x4a811e
movzx edx, ax
movzx ecx, cx
movzx eax, si
push ecx
add edx, eax
push edx
push 0x187
mov ecx, 0x6b8950
call fcn.004c5020
push eax
push 0x588aa4
jmp 0x4a81bd
movzx edx, ax
movzx eax, si
add edx, eax
push edx
push 0x187
mov ecx, 0x6b8950
call fcn.004c5020
push eax
lea ecx, [esp + 0x74]
push 0x584c90
push ecx
call fcn.0055adac
add esp, 0x10
jmp 0x4a81ca
test edi, edi
je 0x4a8199
mov ecx, dword [esp + 0x1c]
movzx edi, word [ecx + 0x32]
test di, di
je 0x4a8197
movzx ecx, si
movzx edx, dx
movzx esi, di
push esi
movzx eax, ax
add edx, ecx
push edx
add eax, ecx
push eax
push 0x187
mov ecx, 0x6b8950
call fcn.004c5020
push eax
lea ecx, [esp + 0x7c]
push str._s__d___d___d_
push ecx
call fcn.0055adac
mov edi, dword [esp + 0x34]
add esp, 0x18
jmp 0x4a81ca
mov edi, ecx
movzx ecx, si
movzx edx, dx
movzx eax, ax
add edx, ecx
push edx
add eax, ecx
push eax
push 0x187
mov ecx, 0x6b8950
call fcn.004c5020
push eax
push str._s__d___d
lea ecx, [esp + 0x7c]
push ecx
call fcn.0055adac
add esp, 0x14
mov eax, dword [esp + 0x10]
test eax, eax
je 0x4a82e0
cmp word [eax + 0x1a], 0
je 0x4a82e0
push 0
push 0
push 0x55fc55
lea edx, [esp + 0x78]
push edx
jmp 0x4a82ee
movzx ecx, word [ecx + 0xa6]
cmp ax, cx
jne 0x4a8266
test edi, edi
je 0x4a8236
movzx eax, word [edi + 0x32]
test ax, ax
je 0x4a8236
movzx edx, ax
movzx eax, cx
movzx ecx, si
push edx
add eax, ecx
push eax
push 0x187
mov ecx, 0x6b8950
call fcn.004c5020
push eax
push str._s__d_____d_
lea edx, [esp + 0x7c]
push edx
jmp 0x4a81c2
movzx eax, cx
movzx ecx, si
add eax, ecx
push eax
push 0x187
mov ecx, 0x6b8950
call fcn.004c5020
push eax
lea edx, [esp + 0x74]
push 0x584c88
push edx
call fcn.0055adac
add esp, 0x10
jmp 0x4a81ca
test edi, edi
je 0x4a82b7
mov edx, dword [esp + 0x1c]
movzx edi, word [edx + 0x32]
test di, di
je 0x4a82b5
movzx edx, si
movzx ecx, cx
movzx esi, di
push esi
movzx eax, ax
add ecx, edx
push ecx
add eax, edx
push eax
push 0x187
mov ecx, 0x6b8950
call fcn.004c5020
push eax
lea ecx, [esp + 0x7c]
push str._s__d_____d_____d_
push ecx
call fcn.0055adac
mov edi, dword [esp + 0x34]
add esp, 0x18
jmp 0x4a81ca
mov edi, edx
movzx edx, si
movzx ecx, cx
movzx eax, ax
add ecx, edx
push ecx
add eax, edx
push eax
push 0x187
mov ecx, 0x6b8950
call fcn.004c5020
push eax
push str._s__d_____d__
jmp 0x4a81bd
push 0
push 0
push 0x548fdf
lea eax, [esp + 0x78]
push eax
mov ecx, ebp
call fcn.0043e3b0
mov eax, dword [esp + 0x14]
cmp word [eax + 0xa0], 0
jne 0x4a8401
cmp word [eax + 0xa2], 0
jne 0x4a8401
cmp word [eax + 0xa4], 0
jne 0x4a8401
cmp word [eax + 0xa6], 0
jne 0x4a8401
mov edx, dword [esp + 0x10]
test edx, edx
je 0x4a837b
movzx ecx, word [edx + 0x1a]
test cx, cx
je 0x4a837b
test edi, edi
je 0x4a83b9
movzx eax, word [edi + 0x32]
test ax, ax
je 0x4a837b
movzx edx, ax
movzx eax, cx
push edx
push eax
push 0x2a9
mov ecx, 0x6b8950
call fcn.004c5020
push eax
lea ecx, [esp + 0x78]
push str._s__d__d_
push ecx
call fcn.0055adac
add esp, 0x14
jmp 0x4a83ec
test edi, edi
je 0x4a83b9
movzx eax, word [edi + 0x32]
test ax, ax
je 0x4a83b9
movzx eax, ax
push eax
push 0x2a9
mov ecx, 0x6b8950
call fcn.004c5020
push eax
lea ecx, [esp + 0x74]
push str._s___d_
push ecx
call fcn.0055adac
add esp, 0x10
push 0
push 0
push 0x548fdf
jmp 0x4a83f5
test edx, edx
je 0x4a8401
movzx eax, word [edx + 0x1a]
test ax, ax
je 0x4a8401
movzx eax, ax
push eax
push 0x2a9
mov ecx, 0x6b8950
call fcn.004c5020
push eax
lea ecx, [esp + 0x74]
push str._s__d
push ecx
call fcn.0055adac
add esp, 0x10
push 0
push 0
push 0x55fc55
lea edx, [esp + 0x78]
push edx
mov ecx, ebp
call fcn.0043e3b0
mov esi, 1
movzx eax, si
test ax, ax
jne 0x4a8416
fldz
fst dword [esp + 0x28]
jmp 0x4a842a
mov edx, dword [esp + 0x14]
movzx ecx, ax
fld dword [edx + ecx*4 + 0xa8]
fstp dword [esp + 0x28]
fldz
fld dword [esp + 0x28]
fld qword [0x57e5e8]
fmul st(1), st(0)
fxch st(1)
fstp dword [esp + 0x28]
test edi, edi
je 0x4a8466
test ax, ax
jne 0x4a844d
fxch st(1)
fst dword [esp + 0x20]
jmp 0x4a845a
movzx ecx, ax
fld dword [edi + ecx*4 + 0x32]
fstp dword [esp + 0x20]
fxch st(1)
fld dword [esp + 0x20]
fmul st(2)
fstp dword [esp + 0x20]
fxch st(1)
mov ecx, dword [esp + 0x10]
test ecx, ecx
je 0x4a84a2
test ax, ax
jne 0x4a8487
fxch st(1)
fst dword [esp + 0x18]
fld dword [esp + 0x18]
fmulp st(2)
fxch st(1)
fstp dword [esp + 0x18]
jmp 0x4a84a8
movzx edx, ax
fld dword [ecx + edx*4 + 0x32]
fstp dword [esp + 0x18]
fxch st(1)
fld dword [esp + 0x18]
fmulp st(2)
fxch st(1)
fstp dword [esp + 0x18]
jmp 0x4a84a8
fstp st(0)
fst dword [esp + 0x18]
fld dword [esp + 0x28]
fld st(0)
call fcn.0055b110
test eax, eax
je 0x4a855a
fstp st(1)
fld dword [esp + 0x20]
call fcn.0055b110
fadd dword [esp + 0x18]
test eax, eax
je 0x4a84fb
push eax
call fcn.0055b110
push eax
lea eax, [esi + 0x187]
push eax
mov ecx, 0x6b8950
call fcn.004c5020
push eax
lea ecx, [esp + 0x78]
push str._s__d_____d___
push ecx
call fcn.0055adac
add esp, 0x14
jmp 0x4a8525
call fcn.0055b110
push eax
lea edx, [esi + 0x187]
push edx
mov ecx, 0x6b8950
call fcn.004c5020
push eax
lea eax, [esp + 0x74]
push str._s__d__
push eax
call fcn.0055adac
add esp, 0x10
cmp dword [esp + 0x10], 0
je 0x4a8547
fldz
fcomp dword [esp + 0x18]
fnstsw ax
test ah, 0x44
jnp 0x4a8547
push 0
push 0
push 0x55fc55
jmp 0x4a8639
push 0
push 0
push 0x548fdf
lea edx, [esp + 0x78]
push edx
jmp 0x4a863e
fstp st(0)
fld dword [esp + 0x20]
call fcn.0055b110
mov ecx, eax
test ecx, ecx
je 0x4a85c7
fld dword [esp + 0x18]
push ecx
fucom st(1)
fnstsw ax
fstp st(1)
test ah, 0x44
jnp 0x4a85a7
call fcn.0055b110
push eax
lea eax, [esi + 0x187]
push eax
mov ecx, 0x6b8950
call fcn.004c5020
push eax
lea ecx, [esp + 0x78]
push str._s__d_____d___
push ecx
call fcn.0055adac
add esp, 0x14
jmp 0x4a8604
lea edx, [esi + 0x187]
fstp st(0)
push edx
mov ecx, 0x6b8950
call fcn.004c5020
push eax
push str._s___d___
lea eax, [esp + 0x78]
push eax
jmp 0x4a85fc
fld st(0)
fld dword [esp + 0x18]
fucom st(1)
fnstsw ax
fstp st(1)
test ah, 0x44
jnp 0x4a8623
fstp st(1)
call fcn.0055b110
push eax
lea ecx, [esi + 0x187]
push ecx
mov ecx, 0x6b8950
call fcn.004c5020
push eax
push str._s__d__
lea edx, [esp + 0x78]
push edx
call fcn.0055adac
add esp, 0x10
fldz
fcom dword [esp + 0x18]
fnstsw ax
test ah, 0x44
jnp 0x4a8625
push 0
fstp st(0)
push 0
push 0x55fc55
lea eax, [esp + 0x78]
push eax
jmp 0x4a863e
fstp st(0)
fcomp dword [esp + 0x20]
fnstsw ax
test ah, 0x44
jnp 0x4a8645
push 0
push 0
push 0x548fdf
lea ecx, [esp + 0x78]
push ecx
mov ecx, ebp
call fcn.0043e3b0
inc esi
cmp esi, 5
jle 0x4a8406
mov eax, dword [esp + 0x10]
test eax, eax
je 0x4a8665
movzx eax, word [eax + 0x1c]
test ax, ax
je 0x4a8665
movzx esi, ax
jmp 0x4a8667
xor esi, esi
mov edx, dword [esp + 0x14]
movzx eax, word [edx + 0xc4]
test ax, ax
je 0x4a8716
test edi, edi
je 0x4a86b9
movzx ecx, word [edi + 0x4e]
test cx, cx
je 0x4a86b9
movzx edx, ax
movzx ecx, cx
movzx eax, si
push ecx
add edx, eax
push edx
push 0x18d
mov ecx, 0x6b8950
call fcn.004c5020
push eax
lea ecx, [esp + 0x78]
push str._s__d___d_
push ecx
call fcn.0055adac
add esp, 0x14
jmp 0x4a86e4
movzx edx, ax
movzx eax, si
add edx, eax
push edx
push 0x18d
mov ecx, 0x6b8950
call fcn.004c5020
push eax
lea ecx, [esp + 0x74]
push 0x584ca4
push ecx
call fcn.0055adac
add esp, 0x10
cmp dword [esp + 0x10], 0
je 0x4a8703
test si, si
je 0x4a8703
push 0
push 0
push 0x55fc55
lea edx, [esp + 0x78]
push edx
jmp 0x4a87cb
push 0
push 0
push 0x548fdf
lea eax, [esp + 0x78]
push eax
jmp 0x4a87cb
test si, si
je 0x4a8754
test edi, edi
je 0x4a8792
movzx eax, word [edi + 0x4e]
test ax, ax
je 0x4a8754
movzx ecx, ax
push ecx
movzx edx, si
push edx
push 0x18d
mov ecx, 0x6b8950
call fcn.004c5020
push eax
lea eax, [esp + 0x78]
push str._s__d___d_
push eax
call fcn.0055adac
add esp, 0x14
jmp 0x4a87bd
test edi, edi
je 0x4a8792
movzx eax, word [edi + 0x4e]
test ax, ax
je 0x4a8792
movzx edx, ax
push edx
push 0x18d
mov ecx, 0x6b8950
call fcn.004c5020
push eax
lea eax, [esp + 0x74]
push str._s___d_
push eax
call fcn.0055adac
add esp, 0x10
push 0
push 0
push 0x548fdf
jmp 0x4a87c6
test si, si
je 0x4a87d2
movzx edx, si
push edx
push 0x18d
mov ecx, 0x6b8950
call fcn.004c5020
push eax
lea eax, [esp + 0x74]
push str._s__d
push eax
call fcn.0055adac
add esp, 0x10
push 0
push 0
push 0x55fc55
lea ecx, [esp + 0x78]
push ecx
mov ecx, ebp
call fcn.0043e3b0
mov edx, dword [esp + 0x14]
movzx eax, word [edx + 0xc8]
test ax, ax
je 0x4a881e
movzx eax, ax
push eax
mov eax, edx
add eax, 2
push eax
push 0x18e
mov ecx, 0x6b8950
call fcn.004c5020
push eax
lea ecx, [esp + 0x78]
push ecx
call fcn.0055adac
add esp, 0x10
push 0
push 0
push 0x548fdf
lea edx, [esp + 0x78]
push edx
mov ecx, ebp
call fcn.0043e3b0
mov eax, dword [esp + 0x14]
cmp word [eax + 0xcc], 0
je 0x4a8a32
movzx ecx, word [eax + 0xca]
test cx, cx
je 0x4a8a32
xor eax, eax
mov dword [esp + 0x4d], eax
mov dword [esp + 0x51], eax
mov dword [esp + 0x55], eax
mov dword [esp + 0x59], eax
mov dword [esp + 0x5d], eax
mov dword [esp + 0x61], eax
mov dword [esp + 0x65], eax
mov word [esp + 0x69], ax
mov byte [esp + 0x6b], al
movzx eax, cx
dec eax
mov byte [esp + 0x4c], 0
cmp eax, 0xa
ja case.default.0x4a8879
jmp dword [eax*4 + 0x4a8af0]
push 0x196
mov ecx, 0x6b8950
call fcn.004c5020
lea edx, [esp + 0x4c]
mov cl, byte [eax]
mov byte [edx], cl
inc eax
inc edx
test cl, cl
jne 0x4a8893
jmp case.default.0x4a8879
push 0x197
mov ecx, 0x6b8950
call fcn.004c5020
lea edx, [esp + 0x4c]
mov cl, byte [eax]
mov byte [edx], cl
inc eax
inc edx
test cl, cl
jne 0x4a88b5
jmp case.default.0x4a8879
push 0x198
mov ecx, 0x6b8950
call fcn.004c5020
lea edx, [esp + 0x4c]
mov cl, byte [eax]
mov byte [edx], cl
inc eax
inc edx
test cl, cl
jne 0x4a88d7
jmp case.default.0x4a8879
push 0x199
mov ecx, 0x6b8950
call fcn.004c5020
lea edx, [esp + 0x4c]
lea esp, [esp]
mov cl, byte [eax]
mov byte [edx], cl
inc eax
inc edx
test cl, cl
jne 0x4a8900
jmp case.default.0x4a8879
push 0x19a
mov ecx, 0x6b8950
call fcn.004c5020
lea edx, [esp + 0x4c]
mov cl, byte [eax]
mov byte [edx], cl
inc eax
inc edx
test cl, cl
jne 0x4a8922
jmp case.default.0x4a8879
push 0x19b
mov ecx, 0x6b8950
call fcn.004c5020
lea edx, [esp + 0x4c]
mov cl, byte [eax]
mov byte [edx], cl
inc eax
inc edx
test cl, cl
jne 0x4a8944
jmp case.default.0x4a8879
push 0x19c
mov ecx, 0x6b8950
call fcn.004c5020
lea edx, [esp + 0x4c]
mov cl, byte [eax]
mov byte [edx], cl
inc eax
inc edx
test cl, cl
jne 0x4a8966
jmp case.default.0x4a8879
push 0x19d
mov ecx, 0x6b8950
call fcn.004c5020
lea edx, [esp + 0x4c]
mov cl, byte [eax]
mov byte [edx], cl
inc eax
inc edx
test cl, cl
jne 0x4a8988
jmp case.default.0x4a8879
push 0x19e
mov ecx, 0x6b8950
call fcn.004c5020
lea edx, [esp + 0x4c]
mov cl, byte [eax]
mov byte [edx], cl
inc eax
inc edx
test cl, cl
jne 0x4a89a7
jmp case.default.0x4a8879
push 0x19f
mov ecx, 0x6b8950
call fcn.004c5020
lea edx, [esp + 0x4c]
mov cl, byte [eax]
mov byte [edx], cl
inc eax
inc edx
test cl, cl
jne 0x4a89c6
jmp case.default.0x4a8879
push 0x1a0
mov ecx, 0x6b8950
call fcn.004c5020
lea edx, [esp + 0x4c]
mov cl, byte [eax]
mov byte [edx], cl
inc eax
inc edx
test cl, cl
jne 0x4a89e5
mov eax, dword [esp + 0x14]
movzx ecx, word [eax + 0xcc]
push ecx
lea edx, [esp + 0x50]
push edx
push 0x1a1
mov ecx, 0x6b8950
call fcn.004c5020
push eax
lea eax, [esp + 0x78]
push eax
call fcn.0055adac
add esp, 0x10
push 0
push 0
push 0x548fdf
lea ecx, [esp + 0x78]
push ecx
mov ecx, ebp
call fcn.0043e3b0
mov eax, dword [esp + 0x14]
mov esi, dword [esp + 0x24]
mov edx, 0x100
test word [eax + 0x48], dx
je 0x4a8a50
mov ecx, eax
push ecx
push ebp
mov ecx, esi
call fcn.0049f2b0
mov edx, dword [esp + 0x14]
cmp word [edx + 0xea], 0
je 0x4a8a69
mov eax, edx
push eax
push ebp
mov ecx, esi
call fcn.004a5fb0
mov edx, dword [esp + 0x14]
mov ecx, 0x834
cmp word [edx + 0x48], cx
jne 0x4a8a83
mov eax, edx
push eax
push ebp
mov ecx, esi
call fcn.0049d6b0
push 0
lea ecx, [esp + 0x30]
push ecx
push 0xffffb0
push 0x57ea62
mov ecx, ebp
call fcn.0043e3b0
mov edx, dword [esp + 0x14]
movzx eax, word [edx + 0x44]
push 1
push 0xc8d7aa
push eax
push ebp
mov ecx, esi
call fcn.0049e6b0
lea ecx, [esp + 0x2c]
mov dword [esp + 0xf8], 0xffffffff
call fcn.0042d060
mov ecx, dword [esp + 0xf0]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebp
mov ecx, dword [esp + 0xdc]
xor ecx, esp
call fcn.0055a677
add esp, 0xec
ret 0x14